salesagility_SuiteCRM/modules/EmailTemplates/AttachFiles.php

94 lines
4.0 KiB
PHP
Executable File

<?php
if (!defined('sugarEntry') || !sugarEntry) {
die('Not A Valid Entry Point');
}
/**
*
* SugarCRM Community Edition is a customer relationship management program developed by
* SugarCRM, Inc. Copyright (C) 2004-2013 SugarCRM Inc.
*
* SuiteCRM is an extension to SugarCRM Community Edition developed by SalesAgility Ltd.
* Copyright (C) 2011 - 2018 SalesAgility Ltd.
*
* This program is free software; you can redistribute it and/or modify it under
* the terms of the GNU Affero General Public License version 3 as published by the
* Free Software Foundation with the addition of the following permission added
* to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED WORK
* IN WHICH THE COPYRIGHT IS OWNED BY SUGARCRM, SUGARCRM DISCLAIMS THE WARRANTY
* OF NON INFRINGEMENT OF THIRD PARTY RIGHTS.
*
* This program is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
* FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
* details.
*
* You should have received a copy of the GNU Affero General Public License along with
* this program; if not, see http://www.gnu.org/licenses or write to the Free
* Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
* 02110-1301 USA.
*
* You can contact SugarCRM, Inc. headquarters at 10050 North Wolfe Road,
* SW2-130, Cupertino, CA 95014, USA. or at email address contact@sugarcrm.com.
*
* The interactive user interfaces in modified source and object code versions
* of this program must display Appropriate Legal Notices, as required under
* Section 5 of the GNU Affero General Public License version 3.
*
* In accordance with Section 7(b) of the GNU Affero General Public License version 3,
* these Appropriate Legal Notices must retain the display of the "Powered by
* SugarCRM" logo and "Supercharged by SuiteCRM" logo. If the display of the logos is not
* reasonably feasible for technical reasons, the Appropriate Legal Notices must
* display the words "Powered by SugarCRM" and "Supercharged by SuiteCRM".
*/
//Request object must have these property values:
// Module: module name, this module should have a file called TreeData.php
// Function: name of the function to be called in TreeData.php, the function will be called statically.
// PARAM prefixed properties: array of these property/values will be passed to the function as parameter.
require_once('include/JSON.php');
require_once('include/upload_file.php');
if (!is_dir($cachedir = sugar_cached('images/'))) {
mkdir_recursive($cachedir);
}
// cn: bug 11012 - fixed some MIME types not getting picked up. Also changed array iterator.
$imgType = array('image/gif', 'image/png', 'image/x-png', 'image/bmp', 'image/jpeg', 'image/jpg', 'image/pjpeg');
$ret = array();
foreach ($_FILES as $k => $file) {
if (in_array(strtolower($_FILES[$k]['type']), $imgType) && $_FILES[$k]['size'] > 0) {
$fileName = $_FILES[$k]['name'] ?? '';
if (!has_valid_image_extension('Attach Files Uploaded file: ' . $fileName , $fileName)) {
LoggerManager::getLogger()->fatal("EmailTemplates AttachFiles - Invalid file ext : '$fileName'.");
throw new RuntimeException('Invalid request');
}
$upload_file = new UploadFile($k);
// check the file
if ($upload_file->confirm_upload()) {
$dest = $cachedir.basename((string) $upload_file->get_stored_file_name()); // target name
$guid = create_guid();
if ($upload_file->final_move($guid)) { // move to uploads
$path = $upload_file->get_upload_path($guid);
// if file is OK, copy to cache
if (verify_uploaded_image($path) && copy($path, $dest)) {
$ret[] = $dest;
}
// remove temp file
unlink($path);
}
}
}
}
if (!empty($ret)) {
$json = getJSONobj();
echo $json->encode($ret);
//return the parameters
}