showpic.php

Go to the documentation of this file.

<?php
/***************************************************************
*  Copyright notice
*
*  (c) 1999-2004 Kasper Skaarhoj (kasperYYYY@typo3.com)
*  All rights reserved
*
*  This script is part of the TYPO3 project. The TYPO3 project is
*  free software; you can redistribute it and/or modify
*  it under the terms of the GNU General Public License as published by
*  the Free Software Foundation; either version 2 of the License, or
*  (at your option) any later version.
*
*  The GNU General Public License can be found at
*  http://www.gnu.org/copyleft/gpl.html.
*  A copy is found in the textfile GPL.txt and important notices to the license
*  from the author is found in LICENSE.txt distributed with these scripts.
*
*
*  This script is distributed in the hope that it will be useful,
*  but WITHOUT ANY WARRANTY; without even the implied warranty of
*  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
*  GNU General Public License for more details.
*
*  This copyright notice MUST APPEAR in all copies of the script!
***************************************************************/
// *******************************
// Set error reporting
// *******************************
error_reporting (E_ALL ^ E_NOTICE);


// ***********************
// Paths are setup
// ***********************
define('TYPO3_OS', stristr(PHP_OS,'win')&&!stristr(PHP_OS,'darwin')?'WIN':'');
define('TYPO3_MODE','FE');
define('PATH_thisScript',str_replace('//','/', str_replace('\\','/', (php_sapi_name()=='cgi'||php_sapi_name()=='isapi' ||php_sapi_name()=='cgi-fcgi')&&($_SERVER['ORIG_PATH_TRANSLATED']?$_SERVER['ORIG_PATH_TRANSLATED']:$_SERVER['PATH_TRANSLATED'])? ($_SERVER['ORIG_PATH_TRANSLATED']?$_SERVER['ORIG_PATH_TRANSLATED']:$_SERVER['PATH_TRANSLATED']):($_SERVER['ORIG_SCRIPT_FILENAME']?$_SERVER['ORIG_SCRIPT_FILENAME']:$_SERVER['SCRIPT_FILENAME']))));

define('PATH_site', dirname(PATH_thisScript).'/');
define('PATH_t3lib', PATH_site.'t3lib/');
define('PATH_tslib', PATH_site.'tslib/');
define('PATH_typo3conf', PATH_site.'typo3conf/');
define('TYPO3_mainDir', 'typo3/');     // This is the directory of the backend administration for the sites of this TYPO3 installation.

require_once(PATH_t3lib.'class.t3lib_div.php');
require_once(PATH_t3lib.'class.t3lib_extmgm.php');

// ******************
// Including config
// ******************
require_once(PATH_t3lib.'config_default.php');
if (!defined ('TYPO3_db'))    die ('The configuration file was not included.');

require_once(PATH_t3lib.'class.t3lib_db.php');
$TYPO3_DB = t3lib_div::makeInstance('t3lib_DB');

require_once(PATH_t3lib.'class.t3lib_stdgraphic.php');





class SC_tslib_showpic {
   var $content;     // Page content accumulated here.

      // Parameters loaded into these internal variables:
   var $file;
   var $width;
   var $height;
   var $sample;
   var $alternativeTempPath;
   var $effects;
   var $frame;
   var $bodyTag;
   var $title;
   var $wrap;
   var $md5;

   function init()   {
         // Loading internal vars with the GET/POST parameters from outside:
      $this->file = t3lib_div::_GP('file');
      $this->width = t3lib_div::_GP('width');
      $this->height = t3lib_div::_GP('height');
      $this->sample = t3lib_div::_GP('sample');
      $this->alternativeTempPath = t3lib_div::_GP('alternativeTempPath');
      $this->effects = t3lib_div::_GP('effects');
      $this->frame = t3lib_div::_GP('frame');
      $this->bodyTag = t3lib_div::_GP('bodyTag');
      $this->title = t3lib_div::_GP('title');
      $this->wrap = t3lib_div::_GP('wrap');
      $this->md5 = t3lib_div::_GP('md5');

      // ***********************
      // Check parameters
      // ***********************
         // If no file-param is given, we must exit
      if (!$this->file) {
         die('Parameter Error: No file given.');
      }

         // Chech md5-checksum: If this md5-value does not match the one submitted, then we fail... (this is a kind of security that somebody don't just hit the script with a lot of different parameters
      $md5_value = md5($this->file.'|'.$this->width.'|'.$this->height.'|'.$this->effects.'|'.$GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey'].'|');
      if ($md5_value!=$this->md5) {
         die('Parameter Error: Wrong parameters sent.');
      }

      // ***********************
      // Check the file. If must be in a directory beneath the dir of this script...
      // $this->file remains unchanged, because of the code in stdgraphic, but we do check if the file exists within the current path
      // ***********************

      $test_file=PATH_site.$this->file;
      if (!t3lib_div::validPathStr($test_file)) {
         die('Parameter Error: No valid filepath');
      }
      if (!@is_file($test_file)) {
         die('The given file was not found');
      }
   }

   function main()   {

         // Creating stdGraphic object, initialize it and make image:
      $img = t3lib_div::makeInstance('t3lib_stdGraphic');
      $img->mayScaleUp = 0;
      $img->init();
      if ($this->sample)   {$img->scalecmd = '-sample';}
      if ($this->alternativeTempPath && t3lib_div::inList($GLOBALS['TYPO3_CONF_VARS']['FE']['allowedTempPaths'],$this->alternativeTempPath)) {
         $img->tempPath = $this->alternativeTempPath;
      }

      #if ($GLOBALS['TYPO3_CONF_VARS']['GFX']['enable_typo3temp_db_tracking'])   {
            // Need to connect to database, because this may be used (eg. by stdgraphic)
         $GLOBALS['TYPO3_DB']->sql_pconnect(TYPO3_db_host, TYPO3_db_username, TYPO3_db_password);
      #}

      if (strstr($this->width.$this->height, 'm')) {$max='m';} else {$max='';}

      $this->height = t3lib_div::intInRange($this->height,0,1000);
      $this->width = t3lib_div::intInRange($this->width,0,1000);
      if ($this->frame) {$this->frame = intval($this->frame);}
      $imgInfo = $img->imageMagickConvert($this->file,'web',$this->width.$max,$this->height,$img->IMparams($this->effects),$this->frame,'');


         // Create HTML output:
      $this->content='';
      $this->content.='
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<html>
<head>
   <title>'.htmlspecialchars($this->title ? $this->title : "Image").'</title>
</head>
      '.($this->bodyTag ? $this->bodyTag : '<body>');

      if (is_array($imgInfo)) {
         $wrapParts = explode('|',$this->wrap);
         $this->content.=trim($wrapParts[0]).$img->imgTag($imgInfo).trim($wrapParts[1]);
      }
      $this->content.='
      </body>
      </html>';
   }

   function printContent() {
      echo $this->content;
   }
}

// Include extension?
if (defined('TYPO3_MODE') && $TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['tslib/showpic.php']) {
   include_once($TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['tslib/showpic.php']);
}












// Make instance:
$SOBE = t3lib_div::makeInstance('SC_tslib_showpic');
$SOBE->init();
$SOBE->main();
$SOBE->printContent();
?>

---