showpic.php

Go to the documentation of this file.

<?php
/***************************************************************
*  Copyright notice
*
*  (c) 1999-2005 Kasper Skaarhoj (kasperYYYY@typo3.com)
*  All rights reserved
*
*  This script is part of the TYPO3 project. The TYPO3 project is
*  free software; you can redistribute it and/or modify
*  it under the terms of the GNU General Public License as published by
*  the Free Software Foundation; either version 2 of the License, or
*  (at your option) any later version.
*
*  The GNU General Public License can be found at
*  http://www.gnu.org/copyleft/gpl.html.
*  A copy is found in the textfile GPL.txt and important notices to the license
*  from the author is found in LICENSE.txt distributed with these scripts.
*
*
*  This script is distributed in the hope that it will be useful,
*  but WITHOUT ANY WARRANTY; without even the implied warranty of
*  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
*  GNU General Public License for more details.
*
*  This copyright notice MUST APPEAR in all copies of the script!
***************************************************************/
// *******************************
// Set error reporting
// *******************************
error_reporting (E_ALL ^ E_NOTICE);


// ***********************
// Paths are setup
// ***********************
define('TYPO3_OS', stristr(PHP_OS,'win')&&!stristr(PHP_OS,'darwin')?'WIN':'');
define('TYPO3_MODE','FE');
define('PATH_thisScript',str_replace('//','/', str_replace('\\','/', (php_sapi_name()=='cgi'||php_sapi_name()=='isapi' ||php_sapi_name()=='cgi-fcgi')&&($_SERVER['ORIG_PATH_TRANSLATED']?$_SERVER['ORIG_PATH_TRANSLATED']:$_SERVER['PATH_TRANSLATED'])? ($_SERVER['ORIG_PATH_TRANSLATED']?$_SERVER['ORIG_PATH_TRANSLATED']:$_SERVER['PATH_TRANSLATED']):($_SERVER['ORIG_SCRIPT_FILENAME']?$_SERVER['ORIG_SCRIPT_FILENAME']:$_SERVER['SCRIPT_FILENAME']))));

define('PATH_site', dirname(PATH_thisScript).'/');
define('PATH_t3lib', PATH_site.'t3lib/');
define('PATH_tslib', PATH_site.'tslib/');
define('PATH_typo3conf', PATH_site.'typo3conf/');
define('TYPO3_mainDir', 'typo3/');              // This is the directory of the backend administration for the sites of this TYPO3 installation.

require_once(PATH_t3lib.'class.t3lib_div.php');
require_once(PATH_t3lib.'class.t3lib_extmgm.php');

// ******************
// Including config
// ******************
require_once(PATH_t3lib.'config_default.php');
if (!defined ('TYPO3_db'))      die ('The configuration file was not included.');

require_once(PATH_t3lib.'class.t3lib_db.php');
$TYPO3_DB = t3lib_div::makeInstance('t3lib_DB');

require_once(PATH_t3lib.'class.t3lib_stdgraphic.php');





class SC_tslib_showpic {
        var $content;           // Page content accumulated here.

                // Parameters loaded into these internal variables:
        var $file;
        var $width;
        var $height;
        var $sample;
        var $alternativeTempPath;
        var $effects;
        var $frame;
        var $bodyTag;
        var $title;
        var $wrap;
        var $md5;

        function init() {
                        // Loading internal vars with the GET/POST parameters from outside:
                $this->file = t3lib_div::_GP('file');
                $this->width = t3lib_div::_GP('width');
                $this->height = t3lib_div::_GP('height');
                $this->sample = t3lib_div::_GP('sample');
                $this->alternativeTempPath = t3lib_div::_GP('alternativeTempPath');
                $this->effects = t3lib_div::_GP('effects');
                $this->frame = t3lib_div::_GP('frame');
                $this->bodyTag = t3lib_div::_GP('bodyTag');
                $this->title = t3lib_div::_GP('title');
                $this->wrap = t3lib_div::_GP('wrap');
                $this->md5 = t3lib_div::_GP('md5');

                // ***********************
                // Check parameters
                // ***********************
                        // If no file-param is given, we must exit
                if (!$this->file)       {
                        die('Parameter Error: No file given.');
                }

                        // Chech md5-checksum: If this md5-value does not match the one submitted, then we fail... (this is a kind of security that somebody don't just hit the script with a lot of different parameters
                $md5_value = md5($this->file.'|'.$this->width.'|'.$this->height.'|'.$this->effects.'|'.$GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey'].'|');
                if ($md5_value!=$this->md5) {
                        die('Parameter Error: Wrong parameters sent.');
                }

                // ***********************
                // Check the file. If must be in a directory beneath the dir of this script...
                // $this->file remains unchanged, because of the code in stdgraphic, but we do check if the file exists within the current path
                // ***********************

                $test_file=PATH_site.$this->file;
                if (!t3lib_div::validPathStr($test_file))       {
                        die('Parameter Error: No valid filepath');
                }
                if (!@is_file($test_file))      {
                        die('The given file was not found');
                }
        }

        function main() {

                        // Creating stdGraphic object, initialize it and make image:
                $img = t3lib_div::makeInstance('t3lib_stdGraphic');
                $img->mayScaleUp = 0;
                $img->init();
                if ($this->sample)      {$img->scalecmd = '-sample';}
                if ($this->alternativeTempPath && t3lib_div::inList($GLOBALS['TYPO3_CONF_VARS']['FE']['allowedTempPaths'],$this->alternativeTempPath))  {
                        $img->tempPath = $this->alternativeTempPath;
                }

                // Need to connect to database, because this is used (typo3temp_db_tracking, cached image dimensions).
                        $GLOBALS['TYPO3_DB']->sql_pconnect(TYPO3_db_host, TYPO3_db_username, TYPO3_db_password);

                if (strstr($this->width.$this->height, 'm')) {$max='m';} else {$max='';}

                $this->height = t3lib_div::intInRange($this->height,0,1000);
                $this->width = t3lib_div::intInRange($this->width,0,1000);
                if ($this->frame)       {$this->frame = intval($this->frame);}
                $imgInfo = $img->imageMagickConvert($this->file,'web',$this->width.$max,$this->height,$img->IMparams($this->effects),$this->frame,'');


                        // Create HTML output:
                $this->content='';
                $this->content.='
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<html>
<head>
        <title>'.htmlspecialchars($this->title ? $this->title : "Image").'</title>
</head>
                '.($this->bodyTag ? $this->bodyTag : '<body>');

                if (is_array($imgInfo)) {
                        $wrapParts = explode('|',$this->wrap);
                        $this->content.=trim($wrapParts[0]).$img->imgTag($imgInfo).trim($wrapParts[1]);
                }
                $this->content.='
                </body>
                </html>';
        }

        function printContent() {
                echo $this->content;
        }
}

// Include extension?
if (defined('TYPO3_MODE') && $TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['tslib/showpic.php'])       {
        include_once($TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['tslib/showpic.php']);
}












// Make instance:
$SOBE = t3lib_div::makeInstance('SC_tslib_showpic');
$SOBE->init();
$SOBE->main();
$SOBE->printContent();
?>

---