59 lines
2.0 KiB
PHP
59 lines
2.0 KiB
PHP
<?php
|
|
require_once("inc/config.inc.php");
|
|
session_start();
|
|
require_once("inc/HelperFunctions.php");
|
|
SetTraceRoot(__DIR__);
|
|
TraceProgram(__FILE__, __FUNCTION__, __LINE__, "start " . date(DATE_RFC2822), TR_ENTRY);
|
|
|
|
// This endpoint must return ONLY JSON. CKEditor parses the response as JSON, so any
|
|
// PHP warning/notice echoed to the page makes it report "Couldn't upload file".
|
|
// Errors are still logged (php error log), just not printed.
|
|
error_reporting(E_ALL);
|
|
ini_set('display_errors', 0);
|
|
header('Content-Type: application/json');
|
|
|
|
TraceProgram(__FILE__, __FUNCTION__, __LINE__, print_r($_FILES, true));
|
|
|
|
// CKEditor 5's CKFinder upload adapter expects:
|
|
// success: { "uploaded": 1, "fileName": "...", "url": "..." }
|
|
// failure: { "uploaded": 0, "error": { "message": "..." } }
|
|
// Without "uploaded" set to a truthy value it treats the upload as failed.
|
|
function UploadFail($msg) {
|
|
echo json_encode(['uploaded' => 0, 'error' => ['message' => $msg]]);
|
|
TraceProgram(__FILE__, __FUNCTION__, __LINE__, "fail: $msg", TR_EXIT);
|
|
exit;
|
|
}
|
|
|
|
// Check if file is uploaded
|
|
if (!isset($_FILES['upload']) || $_FILES['upload']['error'] !== UPLOAD_ERR_OK) {
|
|
UploadFail('No file uploaded (error code ' . ($_FILES['upload']['error'] ?? 'none') . ')');
|
|
}
|
|
|
|
$file = $_FILES['upload'];
|
|
$allowedTypes = ['image/jpeg', 'image/jfif', 'image/png', 'image/gif'];
|
|
|
|
// Validate file type
|
|
if (!in_array($file['type'], $allowedTypes)) {
|
|
UploadFail('Invalid file type');
|
|
}
|
|
|
|
$filename = basename($file['name']);
|
|
$targetPath = __DIR__ . '/inc/Uploads/' . $filename;
|
|
TraceProgram(__FILE__, __FUNCTION__, __LINE__, "target: $targetPath");
|
|
|
|
if (!is_uploaded_file($file['tmp_name']) || !@copy($file['tmp_name'], $targetPath)) {
|
|
$err = error_get_last();
|
|
UploadFail('Failed to save uploaded file: ' . ($err['message'] ?? 'unknown error'));
|
|
}
|
|
@unlink($file['tmp_name']);
|
|
|
|
TraceProgram(__FILE__, __FUNCTION__, __LINE__, "$filename");
|
|
echo json_encode([
|
|
'uploaded' => 1,
|
|
'fileName' => $filename,
|
|
'url' => 'inc/Uploads/' . rawurlencode($filename)
|
|
]);
|
|
TraceProgram(__FILE__, __FUNCTION__, __LINE__, "end", TR_EXIT);
|
|
|
|
?>
|