642 lines
33 KiB
PHP
642 lines
33 KiB
PHP
|
<?php
|
||
|
|
/*********************************************************************************
|
||
|
|
*
|
||
|
|
* TimeTrex is a Workforce Management program developed by
|
||
|
|
* TimeTrex Software Inc. Copyright (C) 2003 - 2021 TimeTrex Software Inc.
|
||
|
|
*
|
||
|
|
* This program is free software; you can redistribute it and/or modify it under
|
||
|
|
* the terms of the GNU Affero General Public License version 3 as published by
|
||
|
|
* the Free Software Foundation with the addition of the following permission
|
||
|
|
* added to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED
|
||
|
|
* WORK IN WHICH THE COPYRIGHT IS OWNED BY TIMETREX, TIMETREX DISCLAIMS THE
|
||
|
|
* WARRANTY OF NON INFRINGEMENT OF THIRD PARTY RIGHTS.
|
||
|
|
*
|
||
|
|
* This program is distributed in the hope that it will be useful, but WITHOUT
|
||
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
|
||
|
|
* FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
|
||
|
|
* details.
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* You should have received a copy of the GNU Affero General Public License along
|
||
|
|
* with this program; if not, see http://www.gnu.org/licenses or write to the Free
|
||
|
|
* Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
|
||
|
|
* 02110-1301 USA.
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* You can contact TimeTrex headquarters at Unit 22 - 2475 Dobbin Rd. Suite
|
||
|
|
* #292 West Kelowna, BC V4T 2E9, Canada or at email address info@timetrex.com.
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* The interactive user interfaces in modified source and object code versions
|
||
|
|
* of this program must display Appropriate Legal Notices, as required under
|
||
|
|
* Section 5 of the GNU Affero General Public License version 3.
|
||
|
|
*
|
||
|
|
*
|
||
|
|
* In accordance with Section 7(b) of the GNU Affero General Public License
|
||
|
|
* version 3, these Appropriate Legal Notices must retain the display of the
|
||
|
|
* "Powered by TimeTrex" logo. If the display of the logo is not reasonably
|
||
|
|
* feasible for technical reasons, the Appropriate Legal Notices must display
|
||
|
|
* the words "Powered by TimeTrex".
|
||
|
|
*
|
||
|
|
********************************************************************************/
|
||
|
|
|
||
|
|
require_once( '../includes/global.inc.php' );
|
||
|
|
$skip_message_check = true;
|
||
|
|
require_once( Environment::getBasePath() . 'includes/Interface.inc.php' );
|
||
|
|
require_once( Environment::getBasePath() . 'classes/upload/fileupload.class.php' );
|
||
|
|
|
||
|
|
//PHP must have the upload and POST max sizes set to handle the largest file upload. If these are too low
|
||
|
|
//it errors out with a non-helpful error, so set these large and restrict the size in the Upload class.
|
||
|
|
//ini_set( 'upload_max_filesize', '128M' ); //This is PER DIRECTORY and therefore can't be set this way. Must be set in the PHP.INI or .htaccess files instead.
|
||
|
|
//ini_set( 'post_max_size', '128M' ); //This has no affect as its set too late. Must be set in the PHP.INI or .htaccess files instead.
|
||
|
|
|
||
|
|
extract( FormVariables::GetVariables(
|
||
|
|
[
|
||
|
|
'action',
|
||
|
|
'object_type',
|
||
|
|
'parent_object_type_id',
|
||
|
|
'object_id',
|
||
|
|
'parent_id',
|
||
|
|
'SessionID',
|
||
|
|
] ) );
|
||
|
|
|
||
|
|
if ( $authentication->checkValidCSRFToken() == false ) { //Help prevent CSRF attacks with this, run this check during and before the user is logged in.
|
||
|
|
echo TTi18n::getText( 'Invalid CSRF token!' );
|
||
|
|
exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
$object_type = trim( strtolower( $object_type ) );
|
||
|
|
Debug::Text( 'Object Type: ' . $object_type . ' ID: ' . $object_id . ' Parent ID: ' . $parent_id . ' POST SessionID: ' . $SessionID, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
|
||
|
|
if ( Misc::doesRequestExceedPHPMaxPostSize() == true ) { //Check PHP maximum post/upload size limit and make sure that hasn't been exceeded first.
|
||
|
|
$error = TTi18n::gettext( 'ERROR: File size is too large, must be less than %1 bytes.', Misc::getPHPMaxUploadSize() );
|
||
|
|
} else {
|
||
|
|
$upload = new fileupload();
|
||
|
|
switch ( $object_type ) {
|
||
|
|
case 'invoice_config':
|
||
|
|
$max_upload_file_size = 5000000;
|
||
|
|
|
||
|
|
if ( $permission->Check( 'invoice_config', 'add' ) || $permission->Check( 'invoice_config', 'edit' ) || $permission->Check( 'invoice_config', 'edit_child' ) || $permission->Check( 'invoice_config', 'edit_own' ) ) {
|
||
|
|
if ( isset( $_POST['file_data'] ) ) {
|
||
|
|
Debug::Text( 'HTML5 Base64 encoded upload...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$allowed_upload_content_types = [ false, 'image/jpg', 'image/jpeg', 'image/pjpeg', 'image/png' ];
|
||
|
|
|
||
|
|
$icf = TTnew( 'InvoiceConfigFactory' ); /** @var InvoiceConfigFactory $icf */
|
||
|
|
$icf->cleanStoragePath( $current_company->getId() );
|
||
|
|
$dir = $icf->getStoragePath( $current_company->getId() );
|
||
|
|
Debug::Text( 'Storage Path: ' . $dir, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
if ( isset( $dir ) ) {
|
||
|
|
@mkdir( $dir, 0700, true );
|
||
|
|
if ( @disk_free_space( $dir ) > ( $max_upload_file_size * 2 )
|
||
|
|
&& isset( $_POST['mime_type'] )
|
||
|
|
&& in_array( strtolower( trim( $_POST['mime_type'] ) ), $allowed_upload_content_types ) ) {
|
||
|
|
|
||
|
|
$file_name = $dir . DIRECTORY_SEPARATOR . 'logo.img';
|
||
|
|
$file_data = base64_decode( $_POST['file_data'] );
|
||
|
|
$file_size = strlen( $file_data );
|
||
|
|
|
||
|
|
if ( in_array( Misc::getMimeType( $file_data, true ), $allowed_upload_content_types ) ) {
|
||
|
|
if ( $file_size <= $max_upload_file_size ) {
|
||
|
|
$success = file_put_contents( $file_name, $file_data );
|
||
|
|
if ( $success == false ) {
|
||
|
|
Debug::Text( 'bUpload Failed! Unable to write data to: ' . $file_name, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Unable to upload photo' );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'cUpload Failed! File too large: ' . $file_size, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'File size is too large, must be less than %1 bytes', $max_upload_file_size );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (b)';
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (a)';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
unset( $uf, $ulf );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case 'document_revision':
|
||
|
|
Debug::Text( 'Document...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$max_upload_file_size = 128000000;
|
||
|
|
if ( isset( $parent_object_type_id ) && $parent_object_type_id == 400 ) {
|
||
|
|
$section = 'user_expense';
|
||
|
|
} else {
|
||
|
|
$section = 'document';
|
||
|
|
}
|
||
|
|
if ( DEMO_MODE == false && ( $permission->Check( $section, 'add' ) || $permission->Check( $section, 'edit' ) || $permission->Check( $section, 'edit_child' ) || $permission->Check( $section, 'edit_own' ) ) ) {
|
||
|
|
$permission_children_ids = $permission->getPermissionHierarchyChildren( $current_company->getId(), $current_user->getId() );
|
||
|
|
|
||
|
|
$drlf = TTnew( 'DocumentRevisionListFactory' ); /** @var DocumentRevisionListFactory $drlf */
|
||
|
|
$drlf->getByIdAndCompanyId( $object_id, $current_user->getCompany() );
|
||
|
|
if ( $drlf->getRecordCount() == 1 ) {
|
||
|
|
if ( $permission->Check( $section, 'edit' )
|
||
|
|
|| ( $permission->Check( $section, 'edit_own' ) && $permission->isOwner( $drlf->getCurrent()->getCreatedBy(), $drlf->getCurrent()->getID() ) === true )
|
||
|
|
|| ( $permission->Check( $section, 'edit_child' ) && $permission->isChild( $drlf->getCurrent()->getId(), $permission_children_ids ) === true ) ) {
|
||
|
|
|
||
|
|
$df = TTnew( 'DocumentFactory' ); /** @var DocumentFactory $df */
|
||
|
|
$drf = TTnew( 'DocumentRevisionFactory' ); /** @var DocumentRevisionFactory $drf */
|
||
|
|
|
||
|
|
//Debug::setVerbosity(11);
|
||
|
|
$upload->set_max_filesize( $max_upload_file_size ); //128mb or less, though I'm not 100% sure this is even working.
|
||
|
|
$upload->set_overwrite_mode( 3 ); //Do nothing
|
||
|
|
|
||
|
|
$dr_obj = $drlf->getCurrent();
|
||
|
|
$dr_obj->setLocalFileName();
|
||
|
|
$dir = $dr_obj->getStoragePath( $current_company->getId() );
|
||
|
|
Debug::Text( 'Storage Path: ' . $dir, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
if ( isset( $dir ) ) {
|
||
|
|
@mkdir( $dir, 0700, true );
|
||
|
|
|
||
|
|
if ( @disk_free_space( $dir ) > ( $max_upload_file_size * 2 ) ) {
|
||
|
|
$upload_result = $upload->upload( 'filedata', $dir ); //'filedata' is case sensitive
|
||
|
|
//Debug::Arr($_FILES, 'FILES Vars: ', __FILE__, __LINE__, __METHOD__, 10);
|
||
|
|
if ( $upload_result ) {
|
||
|
|
Debug::Text( 'Upload Success: ' . $upload_result, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$success = $upload_result . ' ' . TTi18n::gettext( 'Successfully Uploaded' );
|
||
|
|
$upload_file_arr = $upload->get_file();
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'Upload Failed!: ' . $upload->get_error(), __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = $upload->get_error();
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'Upload Failed!: Not enough disk space available...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'ERROR: File is too large to be uploaded at this time. Please try again later.' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( isset( $success ) ) {
|
||
|
|
//Document Revision
|
||
|
|
Debug::Text( 'Upload File Name: ' . $upload_file_arr['name'] . ' Mime Type: ' . $upload_file_arr['type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
|
||
|
|
if ( $drlf->getRecordCount() == 1 ) {
|
||
|
|
$dr_obj->setRemoteFileName( $upload_file_arr['name'] );
|
||
|
|
$dr_obj->setMimeType( $dr_obj->detectMimeType( $upload_file_arr['name'], $upload_file_arr['type'] ) );
|
||
|
|
$dr_obj->setEnableFileUpload( true );
|
||
|
|
if ( $dr_obj->isValid() ) {
|
||
|
|
$dr_obj->Save( false );
|
||
|
|
$dr_obj->renameLocalFile(); //Rename after save as finished successfully, otherwise a validation error will occur because the src file is gone.
|
||
|
|
unset( $dr_obj );
|
||
|
|
break;
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'ERROR: File is invalid, unable to save' );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'Object does not exist!', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Invalid Object ID' );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'bUpload Failed!: ' . $upload->get_error(), __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'Permission Denied' );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'Invalid Object ID' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case 'company_logo':
|
||
|
|
Debug::Text( 'Company Logo...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$max_upload_file_size = 5000000;
|
||
|
|
|
||
|
|
if ( DEMO_MODE == false && ( $permission->Check( 'company', 'add' ) || $permission->Check( 'company', 'edit' ) || $permission->Check( 'company', 'edit_child' ) || $permission->Check( 'company', 'edit_own' ) ) ) {
|
||
|
|
if ( isset( $_POST['file_data'] ) ) { //Only required for images due the image wizard.
|
||
|
|
Debug::Text( 'HTML5 Base64 encoded upload...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$allowed_upload_content_types = [ false, 'image/jpg', 'image/jpeg', 'image/pjpeg', 'image/png' ];
|
||
|
|
|
||
|
|
$cf = TTnew( 'CompanyFactory' ); /** @var CompanyFactory $cf */
|
||
|
|
$cf->cleanStoragePath( $current_company->getId() );
|
||
|
|
$dir = $cf->getStoragePath( $current_company->getId() );
|
||
|
|
Debug::Text( 'Storage Path: ' . $dir, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
if ( isset( $dir ) ) {
|
||
|
|
@mkdir( $dir, 0700, true );
|
||
|
|
if ( @disk_free_space( $dir ) > ( $max_upload_file_size * 2 )
|
||
|
|
&& isset( $_POST['mime_type'] )
|
||
|
|
&& in_array( strtolower( trim( $_POST['mime_type'] ) ), $allowed_upload_content_types ) ) {
|
||
|
|
$file_name = $dir . DIRECTORY_SEPARATOR . 'logo.img';
|
||
|
|
$file_data = base64_decode( $_POST['file_data'] );
|
||
|
|
$file_size = strlen( $file_data );
|
||
|
|
|
||
|
|
if ( in_array( Misc::getMimeType( $file_data, true ), $allowed_upload_content_types ) ) {
|
||
|
|
if ( $file_size <= $max_upload_file_size ) {
|
||
|
|
$success = file_put_contents( $file_name, $file_data );
|
||
|
|
if ( $success == false ) {
|
||
|
|
Debug::Text( 'bUpload Failed! Unable to write data to: ' . $file_name, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Unable to upload photo' );
|
||
|
|
} else {
|
||
|
|
TTLog::addEntry( $current_company->getId(), 10, TTi18n::getText( 'Logo - Source: Web' ), null, $cf->getTable() );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'cUpload Failed! File too large: ' . $file_size, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'File size is too large, must be less than %1 bytes', $max_upload_file_size );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (b)';
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
if ( isset( $_POST['mime_type'] ) ) {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'eUpload Failed! Mime_type not specified...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
}
|
||
|
|
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (a)';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
unset( $cf );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case 'legal_entity_logo':
|
||
|
|
Debug::Text( 'Legal Entity Logo...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$max_upload_file_size = 5000000;
|
||
|
|
|
||
|
|
if ( DEMO_MODE == false && ( $permission->Check( 'legal_entity', 'add' ) || $permission->Check( 'legal_entity', 'edit' ) || $permission->Check( 'legal_entity', 'edit_child' ) || $permission->Check( 'legal_entity', 'edit_own' ) ) ) {
|
||
|
|
if ( isset( $_POST['file_data'] ) && TTUUID::isUUID( $object_id ) ) { //Only required for images due the image wizard.
|
||
|
|
Debug::Text( 'HTML5 Base64 encoded upload...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$allowed_upload_content_types = [ false, 'image/jpg', 'image/jpeg', 'image/pjpeg', 'image/png' ];
|
||
|
|
|
||
|
|
$lef = TTnew( 'LegalEntityFactory' ); /** @var LegalEntityFactory $lef */
|
||
|
|
$lef->cleanStoragePath( $object_id );
|
||
|
|
$dir = $lef->getStoragePath( $object_id );
|
||
|
|
|
||
|
|
Debug::Text( 'Storage Path: ' . $dir, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
if ( isset( $dir ) ) {
|
||
|
|
@mkdir( $dir, 0700, true );
|
||
|
|
if ( @disk_free_space( $dir ) > ( $max_upload_file_size * 2 )
|
||
|
|
&& isset( $_POST['mime_type'] )
|
||
|
|
&& in_array( strtolower( trim( $_POST['mime_type'] ) ), $allowed_upload_content_types ) ) {
|
||
|
|
$file_name = $dir . DIRECTORY_SEPARATOR . 'logo.img';
|
||
|
|
$file_data = base64_decode( $_POST['file_data'] );
|
||
|
|
$file_size = strlen( $file_data );
|
||
|
|
|
||
|
|
if ( in_array( Misc::getMimeType( $file_data, true ), $allowed_upload_content_types ) ) {
|
||
|
|
if ( $file_size <= $max_upload_file_size ) {
|
||
|
|
$success = file_put_contents( $file_name, $file_data );
|
||
|
|
if ( $success == false ) {
|
||
|
|
Debug::Text( 'bUpload Failed! Unable to write data to: ' . $file_name, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Unable to upload photo' );
|
||
|
|
} else {
|
||
|
|
TTLog::addEntry( $object_id, 10, TTi18n::getText( 'Logo - Source: Web' ), null, $lef->getTable() );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'cUpload Failed! File too large: ' . $file_size, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'File size is too large, must be less than %1 bytes', $max_upload_file_size );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (b)';
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
if ( isset( $_POST['mime_type'] ) ) {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'eUpload Failed! Mime_type not specified...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
}
|
||
|
|
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (a)';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
unset( $lef );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case 'user_photo':
|
||
|
|
Debug::Text( 'User Photo...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$max_upload_file_size = 25000000;
|
||
|
|
|
||
|
|
if ( DEMO_MODE == false && ( $permission->Check( 'user', 'add' ) || $permission->Check( 'user', 'edit' ) || $permission->Check( 'user', 'edit_child' ) || $permission->Check( 'user', 'edit_own' ) ) ) {
|
||
|
|
$permission_children_ids = $permission->getPermissionHierarchyChildren( $current_company->getId(), $current_user->getId() );
|
||
|
|
|
||
|
|
$ulf = TTnew( 'UserListFactory' ); /** @var UserListFactory $ulf */
|
||
|
|
$ulf->getByIdAndCompanyId( $object_id, $current_company->getId() );
|
||
|
|
if ( $ulf->getRecordCount() == 1
|
||
|
|
&&
|
||
|
|
( $permission->Check( 'user', 'edit' )
|
||
|
|
|| ( $permission->Check( 'user', 'edit_own' ) && $permission->isOwner( $ulf->getCurrent()->getCreatedBy(), $ulf->getCurrent()->getID() ) === true )
|
||
|
|
|| ( $permission->Check( 'user', 'edit_child' ) && $permission->isChild( $ulf->getCurrent()->getId(), $permission_children_ids ) === true ) ) ) {
|
||
|
|
|
||
|
|
if ( isset( $_POST['file_data'] ) ) { //Only required for images due the image wizard.
|
||
|
|
Debug::Text( 'HTML5 Base64 encoded upload...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$allowed_upload_content_types = [ false, 'image/jpg', 'image/jpeg', 'image/pjpeg', 'image/png' ];
|
||
|
|
|
||
|
|
if ( $ulf->getRecordCount() == 1 ) {
|
||
|
|
$uf = TTnew( 'UserFactory' ); /** @var UserFactory $uf */
|
||
|
|
$uf->cleanStoragePath( $current_company->getId(), $object_id );
|
||
|
|
$dir = $uf->getStoragePath( $current_company->getId() );
|
||
|
|
Debug::Text( 'Storage Path: ' . $dir, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
if ( isset( $dir ) ) {
|
||
|
|
@mkdir( $dir, 0700, true );
|
||
|
|
if ( @disk_free_space( $dir ) > ( $max_upload_file_size * 2 )
|
||
|
|
&& isset( $_POST['mime_type'] )
|
||
|
|
&& in_array( strtolower( trim( $_POST['mime_type'] ) ), $allowed_upload_content_types ) ) {
|
||
|
|
$file_name = $dir . DIRECTORY_SEPARATOR . TTUUID::castUUID( $object_id ) . '.img';
|
||
|
|
$file_data = base64_decode( $_POST['file_data'] );
|
||
|
|
$file_size = strlen( $file_data );
|
||
|
|
|
||
|
|
if ( in_array( Misc::getMimeType( $file_data, true ), $allowed_upload_content_types ) ) {
|
||
|
|
if ( $file_size <= $max_upload_file_size ) {
|
||
|
|
$success = file_put_contents( $file_name, $file_data );
|
||
|
|
if ( $success == false ) {
|
||
|
|
Debug::Text( 'bUpload Failed! Unable to write data to: ' . $file_name, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Unable to upload photo' );
|
||
|
|
} else {
|
||
|
|
TTLog::addEntry( $object_id, 10, TTi18n::getText( 'Photo - Source: Web' ), null, $uf->getTable() );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'cUpload Failed! File too large: ' . $file_size, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'File size is too large, must be less than %1 bytes', $max_upload_file_size );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (b)';
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (a)';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'Invalid Object ID' );
|
||
|
|
}
|
||
|
|
unset( $uf, $ulf );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'Invalid Object ID' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case 'remittance_source_account':
|
||
|
|
Debug::Text( 'Remittance Source Account Signature...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$max_upload_file_size = 25000000;
|
||
|
|
|
||
|
|
if ( DEMO_MODE == false && ( $permission->Check( 'remittance_source_account', 'add' ) || $permission->Check( 'remittance_source_account', 'edit' ) || $permission->Check( 'remittance_source_account', 'edit_child' ) || $permission->Check( 'remittance_source_account', 'edit_own' ) ) ) {
|
||
|
|
$permission_children_ids = $permission->getPermissionHierarchyChildren( $current_company->getId(), $current_user->getId() );
|
||
|
|
|
||
|
|
$rsalf = TTnew( 'RemittanceSourceAccountListFactory' ); /** @var RemittanceSourceAccountListFactory $rsalf */
|
||
|
|
$rsalf->getByIdAndCompanyId( $object_id, $current_company->getId() );
|
||
|
|
if ( $rsalf->getRecordCount() == 1
|
||
|
|
&&
|
||
|
|
( $permission->Check( 'remittance_source_account', 'edit' )
|
||
|
|
|| ( $permission->Check( 'remittance_source_account', 'edit_own' ) && $permission->isOwner( $rsalf->getCurrent()->getCreatedBy(), $rsalf->getCurrent()->getID() ) === true )
|
||
|
|
|| ( $permission->Check( 'remittance_source_account', 'edit_child' ) && $permission->isChild( $rsalf->getCurrent()->getId(), $permission_children_ids ) === true ) ) ) {
|
||
|
|
|
||
|
|
if ( isset( $_POST['file_data'] ) ) { //Only required for images due the image wizard.
|
||
|
|
Debug::Text( 'HTML5 Base64 encoded upload...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$allowed_upload_content_types = [ false, 'image/jpg', 'image/jpeg', 'image/pjpeg', 'image/png' ];
|
||
|
|
|
||
|
|
if ( $rsalf->getRecordCount() == 1 ) {
|
||
|
|
$rsaf = TTnew( 'RemittanceSourceAccountFactory' ); /** @var RemittanceSourceAccountFactory $rsaf */
|
||
|
|
$rsaf->cleanStoragePath( $current_company->getId(), $object_id );
|
||
|
|
$dir = $rsaf->getStoragePath( $current_company->getId() );
|
||
|
|
Debug::Text( 'Storage Path: ' . $dir, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
if ( isset( $dir ) ) {
|
||
|
|
@mkdir( $dir, 0700, true );
|
||
|
|
if ( @disk_free_space( $dir ) > ( $max_upload_file_size * 2 )
|
||
|
|
&& isset( $_POST['mime_type'] )
|
||
|
|
&& in_array( strtolower( trim( $_POST['mime_type'] ) ), $allowed_upload_content_types ) ) {
|
||
|
|
$file_name = $dir . DIRECTORY_SEPARATOR . TTUUID::castUUID( $object_id ) . '.img';
|
||
|
|
$file_data = base64_decode( $_POST['file_data'] );
|
||
|
|
$file_size = strlen( $file_data );
|
||
|
|
|
||
|
|
if ( in_array( Misc::getMimeType( $file_data, true ), $allowed_upload_content_types ) ) {
|
||
|
|
if ( $file_size <= $max_upload_file_size ) {
|
||
|
|
$success = file_put_contents( $file_name, $file_data );
|
||
|
|
if ( $success == false ) {
|
||
|
|
Debug::Text( 'bUpload Failed! Unable to write data to: ' . $file_name, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Unable to upload signature' );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'cUpload Failed! File too large: ' . $file_size, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'File size is too large, must be less than %1 bytes', $max_upload_file_size );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (b)';
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'dUpload Failed! Incorrect mime_type: ' . $_POST['mime_type'], __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'Incorrect file type, must be a JPG or PNG image' ) . ' (a)';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'Invalid Object ID' );
|
||
|
|
}
|
||
|
|
unset( $rsaf, $rsalf );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'Invalid Object ID' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case 'license':
|
||
|
|
//Always enable debug logging during license upload.
|
||
|
|
Debug::setEnable( true );
|
||
|
|
Debug::setBufferOutput( true );
|
||
|
|
Debug::setEnableLog( true );
|
||
|
|
Debug::setVerbosity( 10 );
|
||
|
|
|
||
|
|
$max_upload_file_size = 50000;
|
||
|
|
|
||
|
|
if ( getTTProductEdition() >= TT_PRODUCT_PROFESSIONAL ) {
|
||
|
|
if ( ( ( DEPLOYMENT_ON_DEMAND == false && $current_company->getId() == 1 ) || ( isset( $config_vars['other']['primary_company_id'] ) && $current_company->getId() == $config_vars['other']['primary_company_id'] ) ) ) {
|
||
|
|
if ( ( $permission->Check( 'company', 'add' ) || $permission->Check( 'company', 'edit' ) || $permission->Check( 'company', 'edit_own' ) || $permission->Check( 'company', 'edit_child' ) ) ) {
|
||
|
|
$upload->set_max_filesize( $max_upload_file_size ); //20K or less
|
||
|
|
$upload->set_acceptable_types( [ 'text/plain', 'plain/text', 'application/octet-stream' ] ); // comma separated string, or array
|
||
|
|
$upload->set_overwrite_mode( 1 );
|
||
|
|
|
||
|
|
$dir = Environment::getStorageBasePath() . DIRECTORY_SEPARATOR . 'license' . DIRECTORY_SEPARATOR . $current_company->getId();
|
||
|
|
if ( isset( $dir ) ) {
|
||
|
|
@mkdir( $dir, 0700, true );
|
||
|
|
|
||
|
|
if ( @disk_free_space( $dir ) > ( $max_upload_file_size * 2 ) ) {
|
||
|
|
$upload_result = $upload->upload( 'filedata', $dir );
|
||
|
|
//var_dump($upload ); //file data
|
||
|
|
if ( $upload_result ) {
|
||
|
|
$success = $upload_result . ' ' . TTi18n::gettext( 'Successfully Uploaded!' );
|
||
|
|
} else {
|
||
|
|
$error = $upload->get_error();
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'Upload Failed: Not enough disk space available...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'File is too large to be uploaded at this time.' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
Debug::Text( 'Post Upload Operation...', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
if ( isset( $success ) && $success != '' ) {
|
||
|
|
$clf = new CompanyListFactory();
|
||
|
|
$clf->getById( $config_vars['other']['primary_company_id'] );
|
||
|
|
if ( $clf->getRecordCount() == 1 ) {
|
||
|
|
$ttsc = new TimeTrexSoapClient();
|
||
|
|
|
||
|
|
$ping_key = uniqid();
|
||
|
|
|
||
|
|
if ( $ttsc->Ping( $ping_key ) == $ping_key ) {
|
||
|
|
Debug::Text( 'Initial Communication to license server successful!', __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$file_data_arr = $upload->get_file();
|
||
|
|
$license_data = trim( file_get_contents( $dir . '/' . $upload_result ) );
|
||
|
|
|
||
|
|
$obj_class = "\124\124\114\x69\x63\x65\x6e\x73\x65"; $license = @new $obj_class;
|
||
|
|
$retval = $license->getLicenseFile( true, $license_data ); //Download updated license file if one exists.
|
||
|
|
if ( $retval === false ) {
|
||
|
|
$error = TTi18n::gettext( 'Invalid license file or unable to activate license.' );
|
||
|
|
unset( $success );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'ERROR: Unable to communicate with license server, please check your internet connection.' );
|
||
|
|
unset( $success );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'ERROR: Invalid PRIMARY_COMPANY_ID defined in timetrex.ini.php file.' );
|
||
|
|
unset( $success );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'ERROR: Permission Denied!' );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'Current Company ID: ' . $current_company->getId(), __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = TTi18n::gettext( 'ERROR: Not logged into primary company.' );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'ERROR: Product Edition is invalid, must not be Community Edition.' );
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
case 'import':
|
||
|
|
$max_upload_file_size = 128000000;
|
||
|
|
|
||
|
|
|
||
|
|
if ( ( DEMO_MODE == false || ( isset( $config_vars['other']['sandbox'] ) && $config_vars['other']['sandbox'] == true ) ) //Allow importing in sandbox mode, as its helpful to be able to test this.
|
||
|
|
&& (
|
||
|
|
$permission->Check( 'user', 'add' )
|
||
|
|
|| $permission->Check( 'user', 'edit_bank' )
|
||
|
|
|| $permission->Check( 'branch', 'add' )
|
||
|
|
|| $permission->Check( 'department', 'add' )
|
||
|
|
|| $permission->Check( 'wage', 'add' )
|
||
|
|
|| $permission->Check( 'pay_period_schedule', 'add' )
|
||
|
|
|| $permission->Check( 'schedule', 'add' )
|
||
|
|
|| $permission->Check( 'pay_stub_amendment', 'add' )
|
||
|
|
|| $permission->Check( 'accrual', 'add' )
|
||
|
|
|| $permission->Check( 'client', 'add' )
|
||
|
|
|| $permission->Check( 'job', 'add' )
|
||
|
|
|| $permission->Check( 'job_item', 'add' )
|
||
|
|
)
|
||
|
|
) {
|
||
|
|
$import = TTnew( 'Import' ); /** @var Import $import */
|
||
|
|
$import->company_id = $current_company->getId();
|
||
|
|
$import->user_id = $current_user->getId();
|
||
|
|
|
||
|
|
global $authentication;
|
||
|
|
if ( is_object( $authentication ) && $authentication->getSessionID() != '' ) {
|
||
|
|
Debug::text( 'Session ID: ' . $authentication->getSessionID(), __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$import->session_id = $authentication->getSessionID();
|
||
|
|
}
|
||
|
|
|
||
|
|
$import->deleteLocalFile(); //Make sure we delete the original file upon uploading, so if there is an error and the file upload is denied we don't show old files.
|
||
|
|
|
||
|
|
//Sometimes Excel uploads .CSV files as application/vnd.ms-excel
|
||
|
|
$valid_mime_types = [ 'text/plain', 'plain/text', 'text/comma-separated-values', 'text/csv', 'application/csv', 'text/anytext', 'text/x-c', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', 'application/vnd.ms-excel', 'application/vnd.oasis.opendocument.spreadsheet', 'application/octet-stream' ]; // comma separated string, or array. Should match Misc::parseCSV()
|
||
|
|
|
||
|
|
//Debug::setVerbosity(11);
|
||
|
|
$upload->set_max_filesize( $max_upload_file_size ); //128mb or less, though I'm not 100% sure this is even working.
|
||
|
|
//$upload->set_acceptable_types( $valid_mime_types ); //Ignore mime type sent by browser and use mime extension instead.
|
||
|
|
$upload->set_overwrite_mode( 1 ); //Overwrite
|
||
|
|
|
||
|
|
$dir = $import->getStoragePath();
|
||
|
|
Debug::Text( 'Storage Path: ' . $dir, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
if ( isset( $dir ) ) {
|
||
|
|
@mkdir( $dir, 0700, true );
|
||
|
|
|
||
|
|
if ( @disk_free_space( $dir ) > ( $max_upload_file_size * 2 ) ) {
|
||
|
|
$upload_result = $upload->upload( 'filedata', $dir ); //'filedata' is case sensitive
|
||
|
|
//Debug::Arr($_FILES, 'FILES Vars: ', __FILE__, __LINE__, __METHOD__, 10);
|
||
|
|
//Debug::Arr($upload->get_file(), 'File Upload Data: ', __FILE__, __LINE__, __METHOD__, 10);
|
||
|
|
if ( $upload_result ) {
|
||
|
|
$upload_file_arr = $upload->get_file();
|
||
|
|
//mime_content_type might not work properly on Windows. So if its not available just accept any file type.
|
||
|
|
$mime_type = ( function_exists( 'mime_content_type' ) ) ? mime_content_type( $dir . '/' . $upload_file_arr['name'] ) : false;
|
||
|
|
if ( $mime_type === false || in_array( $mime_type, $valid_mime_types ) ) {
|
||
|
|
$file_name = $import->getStoragePath() . DIRECTORY_SEPARATOR . $upload_file_arr['name'];
|
||
|
|
|
||
|
|
if ( in_array( $mime_type, [ 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet', 'application/vnd.ms-excel', 'application/vnd.oasis.opendocument.spreadsheet' ] ) ) {
|
||
|
|
$convert_excel_to_csv = Misc::convertExcelToCSV( $file_name );
|
||
|
|
if ( $convert_excel_to_csv === false ) {
|
||
|
|
$error = TTi18n::gettext( 'ERROR: Unable to read uploaded spreadsheet file, try saving it as a CSV file instead.' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( !isset( $error ) ) {
|
||
|
|
$max_file_line_count = 0;
|
||
|
|
if ( DEPLOYMENT_ON_DEMAND == true ) {
|
||
|
|
switch ( strtolower( $object_id ) ) {
|
||
|
|
case 'apiimportpunch':
|
||
|
|
$max_file_line_count = ( $current_company->getProductEdition() == 10 ) ? 500 : 2500; //Importing punches can be quite slow, so reduce this significantly.
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
$max_file_line_count = ( $current_company->getProductEdition() == 10 ) ? 100 : 10000;
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
$file_line_count = Misc::countLinesInFile( $file_name );
|
||
|
|
Debug::Text( 'Upload Success: ' . $upload_result . ' Full Path: ' . $file_name . ' Line Count: ' . $file_line_count . ' Max Lines: ' . $max_file_line_count, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
|
||
|
|
if ( $max_file_line_count > 0 && $file_line_count > $max_file_line_count ) {
|
||
|
|
$error = TTi18n::gettext( 'Import file exceeds the maximum number of allowed lines (%1), please reduce the number of lines and try again.', $max_file_line_count );
|
||
|
|
} else {
|
||
|
|
$success = $upload_result . ' ' . TTi18n::gettext( 'Successfully Uploaded' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'ERROR: Uploaded file is not a properly formatted CSV file compatible with importing. You uploaded a file of type' ) . ': ' . $mime_type;
|
||
|
|
}
|
||
|
|
unset( $mime_type );
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'Upload Failed!: ' . $upload->get_error(), __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
$error = $upload->get_error();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( isset( $success ) ) {
|
||
|
|
$import->setRemoteFileName( $upload_file_arr['name'] );
|
||
|
|
$import->renameLocalFile();
|
||
|
|
} else {
|
||
|
|
Debug::Text( 'bUpload Failed!: ' . $upload->get_error(), __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$error = TTi18n::gettext( 'Permission Denied' );
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
default:
|
||
|
|
$error = TTi18n::gettext( 'Invalid object_type' );
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( isset( $success ) ) {
|
||
|
|
echo 'TRUE';
|
||
|
|
} else {
|
||
|
|
if ( isset( $error ) ) {
|
||
|
|
//In some cases the real path of the file could be included in the error message, revealing too much information.
|
||
|
|
//Try to remove the directory from the error message if it exists.
|
||
|
|
if ( isset( $dir ) && $dir != '' ) {
|
||
|
|
$error = str_replace( $dir, '', $error );
|
||
|
|
}
|
||
|
|
echo $error;
|
||
|
|
Debug::Text( 'Upload ERROR: ' . $error, __FILE__, __LINE__, __METHOD__, 10 );
|
||
|
|
} else {
|
||
|
|
if ( DEMO_MODE == true ) {
|
||
|
|
echo TTi18n::gettext( 'ERROR: Uploading files is disabled in DEMO mode.' );
|
||
|
|
} else {
|
||
|
|
echo TTi18n::gettext( 'ERROR: Unable to upload file!' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
?>
|