admin/Studio-42-elFinder
1
0
Fork 0
mirror of https://github.com/Studio-42/elFinder synced 2026-06-08 12:37:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge commit from fork

Browse Source
This commit is contained in:
Naoki Sawada
2026-05-07 16:45:04 +09:00
committed by GitHub
parent 340e600d2a
commit 6f7593fcac
1 changed files with 124 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
php/elFinderVolumeMySQL.class.php
+124 -17
View File
@@ -142,6 +142,11 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
return $this->setError('The specified database table cannot be found.');
}
if (($root = $this->normalizePathId($this->options['path'])) === null) {
return $this->setError('The MySQL volume root path must be a numeric object id.');
}
$this->options['path'] = $root;
$this->updateCache($this->options['path'], $this->_stat($this->options['path']));
// enable command archive
@@ -249,6 +254,57 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
return $res;
}
/**
* Normalize a filesystem path into the numeric MySQL object id used by this driver.
*
* @param mixed $path
* @return string|null
*/
protected function normalizePathId($path)
{
if (is_int($path)) {
return $path >= 0 ? (string)$path : null;
}
if (is_string($path) && ctype_digit($path)) {
return (string)(int)$path;
}
return null;
}
/**
* Return normalized numeric object id for SQL usage.
*
* @param mixed $path
* @return int|null
*/
protected function pathId($path)
{
$path = $this->normalizePathId($path);
return $path === null ? null : (int)$path;
}
/**
* Decode path from hash and reject non-numeric ids for the MySQL driver.
*
* @param string $hash file hash
* @return string
*/
protected function decode($hash)
{
$path = parent::decode($hash);
if ($path === '') {
return '';
}
$path = $this->normalizePathId($path);
return $path === null ? '' : $path;
}
/**
* Create empty object with required mimetype
*
@@ -261,8 +317,12 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function make($path, $name, $mime)
{
$sql = 'INSERT INTO %s (`parent_id`, `name`, `size`, `mtime`, `mime`, `content`, `read`, `write`, `locked`, `hidden`, `width`, `height`) VALUES (\'%s\', \'%s\', 0, %d, \'%s\', \'\', \'%d\', \'%d\', \'%d\', \'%d\', 0, 0)';
$sql = sprintf($sql, $this->tbf, $path, $this->db->real_escape_string($name), time(), $mime, $this->defaults['read'], $this->defaults['write'], $this->defaults['locked'], $this->defaults['hidden']);
if (($parentId = $this->pathId($path)) === null) {
return false;
}
$sql = 'INSERT INTO %s (`parent_id`, `name`, `size`, `mtime`, `mime`, `content`, `read`, `write`, `locked`, `hidden`, `width`, `height`) VALUES (%d, \'%s\', 0, %d, \'%s\', \'\', \'%d\', \'%d\', \'%d\', \'%d\', 0, 0)';
$sql = sprintf($sql, $this->tbf, $parentId, $this->db->real_escape_string($name), time(), $this->db->real_escape_string($mime), $this->defaults['read'], $this->defaults['write'], $this->defaults['locked'], $this->defaults['hidden']);
// echo $sql;
return $this->query($sql) && $this->db->affected_rows > 0;
}
@@ -283,11 +343,16 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
{
$this->dirsCache[$path] = array();
$sql = 'SELECT f.id, f.parent_id, f.name, f.size, f.mtime AS ts, f.mime, f.read, f.write, f.locked, f.hidden, f.width, f.height, IF(ch.id, 1, 0) AS dirs
if (($parentId = $this->pathId($path)) === null) {
return $this->dirsCache[$path];
}
$sql = 'SELECT f.id, f.parent_id, f.name, f.size, f.mtime AS ts, f.mime, f.read, f.write, f.locked, f.hidden, f.width, f.height, IF(ch.id, 1, 0) AS dirs
FROM ' . $this->tbf . ' AS f
LEFT JOIN ' . $this->tbf . ' AS ch ON ch.parent_id=f.id AND ch.mime=\'directory\'
WHERE f.parent_id=\'' . $path . '\'
WHERE f.parent_id=%d
GROUP BY f.id, ch.id';
$sql = sprintf($sql, $parentId);
$res = $this->query($sql);
if ($res) {
@@ -500,7 +565,12 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function _joinPath($dir, $name)
{
$sql = 'SELECT id FROM ' . $this->tbf . ' WHERE parent_id=\'' . $dir . '\' AND name=\'' . $this->db->real_escape_string($name) . '\'';
if (($parentId = $this->pathId($dir)) === null) {
return -1;
}
$sql = 'SELECT id FROM ' . $this->tbf . ' WHERE parent_id=%d AND name=\'' . $this->db->real_escape_string($name) . '\'';
$sql = sprintf($sql, $parentId);
if (($res = $this->query($sql)) && ($r = $res->fetch_assoc())) {
$this->updateCache($r['id'], $this->_stat($r['id']));
@@ -609,11 +679,16 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function _stat($path)
{
if (($fileId = $this->pathId($path)) === null) {
return array();
}
$sql = 'SELECT f.id, f.parent_id, f.name, f.size, f.mtime AS ts, f.mime, f.read, f.write, f.locked, f.hidden, f.width, f.height, IF(ch.id, 1, 0) AS dirs
FROM ' . $this->tbf . ' AS f
LEFT JOIN ' . $this->tbf . ' AS ch ON ch.parent_id=f.id AND ch.mime=\'directory\'
WHERE f.id=\'' . $path . '\'
WHERE f.id=%d
GROUP BY f.id, ch.id';
$sql = sprintf($sql, $fileId);
$res = $this->query($sql);
@@ -700,13 +775,17 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function _fopen($path, $mode = 'rb')
{
if (($fileId = $this->pathId($path)) === null) {
return false;
}
$fp = $this->tmpPath
? fopen($this->getTempFile($path), 'w+')
: $this->tmpfile();
if ($fp) {
if (($res = $this->query('SELECT content FROM ' . $this->tbf . ' WHERE id=\'' . $path . '\''))
if (($res = $this->query(sprintf('SELECT content FROM %s WHERE id=%d', $this->tbf, $fileId)))
&& ($r = $res->fetch_assoc())) {
fwrite($fp, $r['content']);
rewind($fp);
@@ -794,12 +873,16 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function _copy($source, $targetDir, $name)
{
if (($sourceId = $this->pathId($source)) === null || ($targetParentId = $this->pathId($targetDir)) === null) {
return false;
}
$this->clearcache();
$id = $this->_joinPath($targetDir, $name);
$sql = $id > 0
? sprintf('REPLACE INTO %s (id, parent_id, name, content, size, mtime, mime, width, height, `read`, `write`, `locked`, `hidden`) (SELECT %d, %d, name, content, size, mtime, mime, width, height, `read`, `write`, `locked`, `hidden` FROM %s WHERE id=%d)', $this->tbf, $id, $this->_dirname($id), $this->tbf, $source)
: sprintf('INSERT INTO %s (parent_id, name, content, size, mtime, mime, width, height, `read`, `write`, `locked`, `hidden`) SELECT %d, \'%s\', content, size, %d, mime, width, height, `read`, `write`, `locked`, `hidden` FROM %s WHERE id=%d', $this->tbf, $targetDir, $this->db->real_escape_string($name), time(), $this->tbf, $source);
? sprintf('REPLACE INTO %s (id, parent_id, name, content, size, mtime, mime, width, height, `read`, `write`, `locked`, `hidden`) (SELECT %d, %d, name, content, size, mtime, mime, width, height, `read`, `write`, `locked`, `hidden` FROM %s WHERE id=%d)', $this->tbf, $id, $this->_dirname($id), $this->tbf, $sourceId)
: sprintf('INSERT INTO %s (parent_id, name, content, size, mtime, mime, width, height, `read`, `write`, `locked`, `hidden`) SELECT %d, \'%s\', content, size, %d, mime, width, height, `read`, `write`, `locked`, `hidden` FROM %s WHERE id=%d', $this->tbf, $targetParentId, $this->db->real_escape_string($name), time(), $this->tbf, $sourceId);
return $this->query($sql);
}
@@ -818,9 +901,13 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
*/
protected function _move($source, $targetDir, $name)
{
if (($sourceId = $this->pathId($source)) === null || ($targetParentId = $this->pathId($targetDir)) === null) {
return false;
}
$sql = 'UPDATE %s SET parent_id=%d, name=\'%s\' WHERE id=%d LIMIT 1';
$sql = sprintf($sql, $this->tbf, $targetDir, $this->db->real_escape_string($name), $source);
return $this->query($sql) && $this->db->affected_rows > 0 ? $source : false;
$sql = sprintf($sql, $this->tbf, $targetParentId, $this->db->real_escape_string($name), $sourceId);
return $this->query($sql) && $this->db->affected_rows > 0 ? $sourceId : false;
}
/**
@@ -833,7 +920,11 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function _unlink($path)
{
return $this->query(sprintf('DELETE FROM %s WHERE id=%d AND mime!=\'directory\' LIMIT 1', $this->tbf, $path)) && $this->db->affected_rows;
if (($fileId = $this->pathId($path)) === null) {
return false;
}
return $this->query(sprintf('DELETE FROM %s WHERE id=%d AND mime!=\'directory\' LIMIT 1', $this->tbf, $fileId)) && $this->db->affected_rows;
}
/**
@@ -846,7 +937,11 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function _rmdir($path)
{
return $this->query(sprintf('DELETE FROM %s WHERE id=%d AND mime=\'directory\' LIMIT 1', $this->tbf, $path)) && $this->db->affected_rows;
if (($dirId = $this->pathId($path)) === null) {
return false;
}
return $this->query(sprintf('DELETE FROM %s WHERE id=%d AND mime=\'directory\' LIMIT 1', $this->tbf, $dirId)) && $this->db->affected_rows;
}
/**
@@ -880,6 +975,10 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function _save($fp, $dir, $name, $stat)
{
if (($dirId = $this->pathId($dir)) === null) {
return false;
}
$this->clearcache();
$mime = !empty($stat['mime']) ? $stat['mime'] : $this->mimetype($name, true);
@@ -909,7 +1008,7 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
: 'INSERT INTO %s (parent_id, name, content, size, mtime, mime, width, height) VALUES (?, ?, LOAD_FILE(?), ?, ?, ?, ?, ?)';
$stmt = $this->db->prepare(sprintf($sql, $this->tbf));
$path = $this->loadFilePath($tmpfile);
$stmt->bind_param("issiisii", $dir, $name, $path, $size, $ts, $mime, $w, $h);
$stmt->bind_param("issiisii", $dirId, $name, $path, $size, $ts, $mime, $w, $h);
$res = $this->execute($stmt);
unlink($tmpfile);
@@ -931,7 +1030,7 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
? 'REPLACE INTO %s (id, parent_id, name, content, size, mtime, mime, width, height) VALUES (' . $id . ', ?, ?, ?, ?, ?, ?, ?, ?)'
: 'INSERT INTO %s (parent_id, name, content, size, mtime, mime, width, height) VALUES (?, ?, ?, ?, ?, ?, ?, ?)';
$stmt = $this->db->prepare(sprintf($sql, $this->tbf));
$stmt->bind_param("issiisii", $dir, $name, $content, $size, $ts, $mime, $w, $h);
$stmt->bind_param("issiisii", $dirId, $name, $content, $size, $ts, $mime, $w, $h);
unset($content);
@@ -952,7 +1051,11 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function _getContents($path)
{
return ($res = $this->query(sprintf('SELECT content FROM %s WHERE id=%d', $this->tbf, $path))) && ($r = $res->fetch_assoc()) ? $r['content'] : false;
if (($fileId = $this->pathId($path)) === null) {
return false;
}
return ($res = $this->query(sprintf('SELECT content FROM %s WHERE id=%d', $this->tbf, $fileId))) && ($r = $res->fetch_assoc()) ? $r['content'] : false;
}
/**
@@ -966,7 +1069,11 @@ class elFinderVolumeMySQL extends elFinderVolumeDriver
**/
protected function _filePutContents($path, $content)
{
return $this->query(sprintf('UPDATE %s SET content=\'%s\', size=%d, mtime=%d WHERE id=%d LIMIT 1', $this->tbf, $this->db->real_escape_string($content), strlen($content), time(), $path));
if (($fileId = $this->pathId($path)) === null) {
return false;
}
return $this->query(sprintf('UPDATE %s SET content=\'%s\', size=%d, mtime=%d WHERE id=%d LIMIT 1', $this->tbf, $this->db->real_escape_string($content), strlen($content), time(), $fileId));
}
/**