1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
|
<?php
/**
* webtrees: online genealogy
* Copyright (C) 2017 webtrees development team
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
namespace Fisharebest\Webtrees;
use ErrorException;
use Fisharebest\Webtrees\Functions\FunctionsMedia;
use Intervention\Image\Exception\NotReadableException;
use Intervention\Image\Exception\NotSupportedException;
use League\Flysystem\Adapter\Local;
use League\Flysystem\Filesystem;
use League\Glide\Filesystem\FileNotFoundException;
use League\Glide\ServerFactory;
use League\Glide\Signatures\SignatureFactory;
use League\Glide\Signatures\SignatureException;
/** @global Tree $WT_TREE */
global $WT_TREE;
require 'includes/session.php';
$mid = Filter::get('mid', WT_REGEX_XREF);
$media = Media::getInstance($mid, $WT_TREE);
$media_file = '';
$media_dir = '';
if ($media !== null) {
// media file somewhere else?
if ($media->isExternal()) {
header('Location: ' . $media->getFilename());
return;
} elseif (!$media->canShow()) {
FunctionsMedia::outputHttpStatusAsImage(403, 'Not allowed');
return;
}
$media_dir = $media->getTree()->getPreference('MEDIA_DIRECTORY');
$media_file = $media->getFilename();
} elseif (Auth::isAdmin()) {
// admin_media.php needs to create thumbnails for files that have no media object.
$media_file = Filter::get('unused');
}
try {
// Prefer imagemagick, as it supports a wider range of image formats.
if (extension_loaded('imagick')) {
$driver = 'imagick';
} else {
$driver = 'gd';
}
// Setup Glide server
// Caution - $media_dir may contain relative paths: ../../
$source_dir = new Filesystem(new Local(WT_DATA_DIR . $media_dir));
$cache_dir = new Filesystem(new Local(WT_DATA_DIR . 'thumbnail-cache/' . md5($media_dir)));
$assets_dir = new Filesystem(new Local( 'assets'));
$server = ServerFactory::create([
'driver' => $driver,
'source' => $source_dir,
'cache' => $cache_dir,
'watermarks' => $assets_dir,
]);
// Validate HTTP signature
$glide_key = Site::getPreference('glide-key');
SignatureFactory::create($glide_key)->validateRequest(parse_url(WT_BASE_URL . 'mediafirewall.php', PHP_URL_PATH), $_GET);
// Generate and send the image
$error_reporting = error_reporting(0);
$server->outputImage($media_file, $_GET);
error_reporting($error_reporting);
} catch (SignatureException $e) {
FunctionsMedia::outputHttpStatusAsImage(403, 'Not allowed');
} catch (FileNotFoundException $ex) {
FunctionsMedia::outputHttpStatusAsImage(404, 'Not found');
} catch (NotReadableException $ex) {
FunctionsMedia::outputHttpStatusAsImage(500, 'Error');
Log::addMediaLog("Unable to read image from " . $media_file . "\n" . $ex->getMessage());
} catch (NotSupportedException $ex) {
FunctionsMedia::outputHttpStatusAsImage(500, 'Error');
Log::addMediaLog("Install php-gd or php-imagick to create thumbnails.\n" . $ex->getMessage());
} catch (ErrorException $ex) {
FunctionsMedia::outputHttpStatusAsImage(500, 'Error');
Log::addMediaLog("Unsable to create thumbnail from " . $media_file . "\n" . $ex->getMessage());
}
|
