3 +--------------------------------------------------------------------+
5 +--------------------------------------------------------------------+
6 | Copyright CiviCRM LLC (c) 2004-2019 |
7 +--------------------------------------------------------------------+
8 | This file is a part of CiviCRM. |
10 | CiviCRM is free software; you can copy, modify, and distribute it |
11 | under the terms of the GNU Affero General Public License |
12 | Version 3, 19 November 2007 and the CiviCRM Licensing Exception. |
14 | CiviCRM is distributed in the hope that it will be useful, but |
15 | WITHOUT ANY WARRANTY; without even the implied warranty of |
16 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
17 | See the GNU Affero General Public License for more details. |
19 | You should have received a copy of the GNU Affero General Public |
20 | License and the CiviCRM Licensing Exception along |
21 | with this program; if not, contact CiviCRM LLC |
22 | at info[AT]civicrm[DOT]org. If you have questions about the |
23 | GNU Affero General Public License or the licensing of CiviCRM, |
24 | see the CiviCRM license FAQ at http://civicrm.org/licensing |
25 +--------------------------------------------------------------------+
31 * @copyright CiviCRM LLC (c) 2004-2019
35 class CRM_Core_Page_File
extends CRM_Core_Page
{
40 public function run() {
41 $action = CRM_Utils_Request
::retrieve('action', 'String', $this);
42 $download = CRM_Utils_Request
::retrieve('download', 'Integer', $this, FALSE, 1);
43 $disposition = $download == 0 ?
'inline' : 'download';
45 $entityId = CRM_Utils_Request
::retrieve('eid', 'Positive', $this, FALSE); // Entity ID (e.g. Contact ID)
46 $fieldId = CRM_Utils_Request
::retrieve('fid', 'Positive', $this, FALSE); // Field ID
47 $fileId = CRM_Utils_Request
::retrieve('id', 'Positive', $this, FALSE); // File ID
48 $fileName = CRM_Utils_Request
::retrieve('filename', 'String', $this, FALSE);
49 if (empty($fileName) && (empty($entityId) ||
empty($fileId))) {
50 CRM_Core_Error
::statusBounce("Cannot access file: Must pass either \"Filename\" or the combination of \"Entity ID\" + \"File ID\"");
53 if (empty($fileName)) {
54 $hash = CRM_Utils_Request
::retrieve('fcs', 'Alphanumeric', $this);
55 if (!CRM_Core_BAO_File
::validateFileHash($hash, $entityId, $fileId)) {
56 CRM_Core_Error
::statusBounce('URL for file is not valid');
59 list($path, $mimeType) = CRM_Core_BAO_File
::path($fileId, $entityId);
62 if (!CRM_Utils_File
::isValidFileName($fileName)) {
63 throw new CRM_Core_Exception("Malformed filename");
66 $path = CRM_Core_Config
::singleton()->customFileUploadDir
. $fileName;
68 $mimeType = CRM_Utils_Request
::retrieveValue('mime-type', 'String', $mimeType, FALSE);
71 CRM_Core_Error
::statusBounce('Could not retrieve the file');
74 $buffer = file_get_contents($path);
76 CRM_Core_Error
::statusBounce('The file is either empty or you do not have permission to retrieve the file');
79 if ($action & CRM_Core_Action
::DELETE
) {
80 if (CRM_Utils_Request
::retrieve('confirmed', 'Boolean')) {
81 CRM_Core_BAO_File
::deleteFileReferences($fileId, $entityId, $fieldId);
82 CRM_Core_Session
::setStatus(ts('The attached file has been deleted.'), ts('Complete'), 'success');
84 $session = CRM_Core_Session
::singleton();
85 $toUrl = $session->popUserContext();
86 CRM_Utils_System
::redirect($toUrl);
90 CRM_Utils_System
::download(
91 CRM_Utils_File
::cleanFileName(basename($path)),