122 lines
3.7 KiB
PHP
122 lines
3.7 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use Illuminate\Contracts\Encryption\DecryptException;
|
|
use Illuminate\Support\Carbon;
|
|
use Illuminate\Support\Facades\Crypt;
|
|
use Illuminate\Support\Facades\Storage;
|
|
|
|
class ApiController extends Controller
|
|
{
|
|
/**
|
|
* Get Filesize of File
|
|
*/
|
|
public function getFileSize(string $folderhash, string $timehash): \Illuminate\Http\JsonResponse
|
|
{
|
|
try {
|
|
// Decrypt Hash
|
|
$file = Crypt::decryptString($folderhash);
|
|
$time = Crypt::decryptString($timehash);
|
|
} catch (DecryptException $e) {
|
|
return response()->json([
|
|
'error' => 'Invalid Token!',
|
|
], 500);
|
|
}
|
|
|
|
// Check if permitted
|
|
if (Carbon::now() > Carbon::parse($time)) {
|
|
return response()->json([
|
|
'error' => 'Link has expired!',
|
|
], 404);
|
|
}
|
|
|
|
if (! Storage::exists($file)) {
|
|
return response()->json([
|
|
'error' => 'File not found!',
|
|
], 404);
|
|
}
|
|
|
|
return response()->json([
|
|
'size' => Storage::size($file),
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Check if a storage path exists
|
|
*/
|
|
public function checkPath(string $folderhash, string $timehash): \Illuminate\Http\JsonResponse
|
|
{
|
|
try {
|
|
$path = Crypt::decryptString($folderhash);
|
|
$time = Crypt::decryptString($timehash);
|
|
} catch (DecryptException $e) {
|
|
return response()->json(['valid' => false, 'error' => 'Invalid Token!'], 422);
|
|
}
|
|
|
|
if (Carbon::now() > Carbon::parse($time)) {
|
|
return response()->json(['valid' => false, 'error' => 'Link has expired!'], 410);
|
|
}
|
|
|
|
// Defensive: reject traversal; only allow the known prefixes / year dirs.
|
|
if (str_contains($path, '..')) {
|
|
return response()->json(['valid' => false, 'error' => 'Invalid path!'], 422);
|
|
}
|
|
|
|
if (! Storage::exists($path)) {
|
|
return response()->json(['valid' => false, 'error' => 'File not found!'], 404);
|
|
}
|
|
|
|
return response()->json([
|
|
'valid' => true,
|
|
'type' => Storage::directoryExists($path) ? 'directory' : 'file',
|
|
'size' => Storage::directoryExists($path) ? null : Storage::size($path),
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Download File
|
|
*/
|
|
public function download(string $folderhash, string $timehash)
|
|
{
|
|
try {
|
|
// Decrypt Hash
|
|
$file = Crypt::decryptString($folderhash);
|
|
$time = Crypt::decryptString($timehash);
|
|
|
|
// Check if permitted
|
|
if (Carbon::now() > Carbon::parse($time)) {
|
|
return view('error', ['error' => 'Link has expired!']);
|
|
}
|
|
|
|
if (! Storage::exists($file)) {
|
|
return view('error', ['error' => 'File not found!']);
|
|
}
|
|
|
|
$filename = explode('/', $file);
|
|
$filePath = storage_path('app/'.$file);
|
|
|
|
$headers = [
|
|
'Content-Type' => Storage::mimeType($file),
|
|
'Content-Length' => Storage::size($file),
|
|
'Content-Disposition' => 'attachment; filename="'.end($filename).'"',
|
|
];
|
|
|
|
// Stream the file in chunks to prevent memory issues
|
|
return response()->stream(
|
|
function () use ($filePath) {
|
|
$fd = fopen($filePath, 'rb');
|
|
while (! feof($fd)) {
|
|
echo fread($fd, 2048);
|
|
}
|
|
},
|
|
200,
|
|
$headers
|
|
);
|
|
} catch (DecryptException $e) {
|
|
}
|
|
|
|
return view('error', ['error' => 'Invalid Token!']);
|
|
}
|
|
}
|