user = $user; if ( $repo ) { $this->repo = $repo; } else { $this->repo = RepoGroup::singleton()->getLocalRepo(); } if ( $stash ) { $this->stash = $stash; } else { if ( $user ) { wfDebug( __METHOD__ . " creating new UploadStash instance for " . $user->getId() . "\n" ); } else { wfDebug( __METHOD__ . " creating new UploadStash instance with no user\n" ); } $this->stash = new UploadStash( $this->repo, $this->user ); } } /** * @param string $key * @return bool */ public static function isValidKey( $key ) { // this is checked in more detail in UploadStash return (bool)preg_match( UploadStash::KEY_FORMAT_REGEX, $key ); } /** * @param WebRequest $request * @return bool */ public static function isValidRequest( $request ) { // this passes wpSessionKey to getText() as a default when wpFileKey isn't set. // wpSessionKey has no default which guarantees failure if both are missing // (though that should have been caught earlier) return self::isValidKey( $request->getText( 'wpFileKey', $request->getText( 'wpSessionKey' ) ) ); } /** * @param string $key * @param string $name * @param bool $initTempFile */ public function initialize( $key, $name = 'upload_file', $initTempFile = true ) { /** * Confirming a temporarily stashed upload. * We don't want path names to be forged, so we keep * them in the session on the server and just give * an opaque key to the user agent. */ $metadata = $this->stash->getMetadata( $key ); $this->initializePathInfo( $name, $initTempFile ? $this->getRealPath( $metadata['us_path'] ) : false, $metadata['us_size'], false ); $this->mFileKey = $key; $this->mVirtualTempPath = $metadata['us_path']; $this->mFileProps = $this->stash->getFileProps( $key ); $this->mSourceType = $metadata['us_source_type']; } /** * @param WebRequest &$request */ public function initializeFromRequest( &$request ) { // sends wpSessionKey as a default when wpFileKey is missing $fileKey = $request->getText( 'wpFileKey', $request->getText( 'wpSessionKey' ) ); // chooses one of wpDestFile, wpUploadFile, filename in that order. $desiredDestName = $request->getText( 'wpDestFile', $request->getText( 'wpUploadFile', $request->getText( 'filename' ) ) ); $this->initialize( $fileKey, $desiredDestName ); } /** * @return string */ public function getSourceType() { return $this->mSourceType; } /** * Get the base 36 SHA1 of the file * @return string */ public function getTempFileSha1Base36() { return $this->mFileProps['sha1']; } /** * Remove a temporarily kept file stashed by saveTempUploadedFile(). * @return bool Success */ public function unsaveUploadedFile() { return $this->stash->removeFile( $this->mFileKey ); } /** * Remove the database record after a successful upload. */ public function postProcessUpload() { parent::postProcessUpload(); $this->unsaveUploadedFile(); } }