mirror of
https://codeberg.org/PostERG/xamxam.git
synced 2026-06-25 16:19:19 +02:00
2e9ebfc684
Replace `storeAsFile:true` with a full async FilePond round-trip pipeline using opaque server-side file IDs.
* Added 4 new PHP endpoints under `/admin/actions/filepond/`:
* `process.php` — upload/process single file and return opaque `file_id`
* `revert.php` — delete pending tmp uploads before form submit
* `load.php` — stream existing files by DB ID for FilePond preload
* `remove.php` — soft-delete `thesis_files` rows
* `process.php` improvements:
* accept arbitrary FilePond field names instead of hardcoded `file`
* support PHP-nested multi-file queue inputs (`queue_file[tfe][]`)
* explicit unwrapping of nested `$_FILES` structures
* add `audio/mp3` to audio + `peertube_audio` MIME whitelists
* immediate upload of `peertube_*` files to PeerTube, returning `peertube:{uuid}` IDs
* extensive `error_log()` instrumentation for request, CSRF, MIME, upload, and save stages
* `revert.php` now accepts `peertube:` IDs without local cleanup
* `ThesisFileHandler`:
* add `handleFilePondQueueFiles()` + `handleFilePondSingleFile()`
* process async uploads from `storage/tmp/filepond/` via opaque `file_id`
* inline handling of `peertube:{uuid}` IDs with direct `thesis_files` insertion
* remove obsolete deferred PeerTube queue-processing flow
* `ThesisCreateController` + `ThesisEditController`:
* gate async path behind `filepond_mode=1`
* preserve legacy multipart flow as fallback
* `file-upload-filepond.js`:
* remove `storeAsFile:true`
* add `buildServerConfig()` for async endpoint wiring
* fix `syncOrderInput()` to use `serverId`
* add `onprocessfile` hook
* add `fileValidateSizeFilterItem` for per-extension size caps
* preload existing uploads via `data-existing-files` + `server.load`
* replace static `INPUT_ID_TO_TYPE` map with `data-queue-type`
* add extensive `console.log()` debugging across upload pipeline stages
* `upload-progress.js`:
* block form submission while uploads are pending
* update `collectFileNames()` to read processed FilePond items
* Templates/layout:
* add `data-queue-type`
* add `data-existing-files`
* add global CSRF meta tag outside admin-only context
* add `filepond_mode` hidden input
* add CSRF token/meta support for partage pages
* move website URL field below file upload block
* `.gitignore`: exclude `storage/tmp/` from version control
77 lines
2.9 KiB
PHP
77 lines
2.9 KiB
PHP
<?php
|
|
/**
|
|
* FilePond load endpoint — streams an existing thesis file back to FilePond.
|
|
*
|
|
* GET /admin/actions/filepond/load.php?id={db_id}
|
|
*
|
|
* Used in edit mode to restore saved files into the FilePond UI.
|
|
*/
|
|
|
|
require_once __DIR__ . '/../../../../bootstrap.php';
|
|
require_once __DIR__ . '/../../../../src/AdminAuth.php';
|
|
require_once __DIR__ . '/../../../../src/ErrorHandler.php';
|
|
|
|
AdminAuth::requireLogin();
|
|
|
|
// ── Only accept GET ──────────────────────────────────────────────────────
|
|
if ($_SERVER['REQUEST_METHOD'] !== 'GET') {
|
|
http_response_code(405);
|
|
die('Méthode non autorisée.');
|
|
}
|
|
|
|
// ── Validate db_id ───────────────────────────────────────────────────────
|
|
$dbId = filter_var($_GET['id'] ?? '', FILTER_VALIDATE_INT);
|
|
if ($dbId === false || $dbId <= 0) {
|
|
http_response_code(400);
|
|
die('ID invalide.');
|
|
}
|
|
|
|
// ── Look up file in DB (validation of thesis ownership is implicit via admin auth + DB lookup) ──
|
|
require_once APP_ROOT . '/src/Database.php';
|
|
$db = new Database();
|
|
|
|
// Fetch thesis_files row by its own primary key
|
|
$pdo = $db->getConnection();
|
|
$stmt = $pdo->prepare('SELECT * FROM thesis_files WHERE id = ?');
|
|
$stmt->execute([$dbId]);
|
|
$fileRow = $stmt->fetch();
|
|
|
|
if (!$fileRow) {
|
|
http_response_code(404);
|
|
die('Fichier introuvable.');
|
|
}
|
|
|
|
$filePath = $fileRow['file_path'] ?? '';
|
|
$fileName = $fileRow['file_name'] ?? basename($filePath);
|
|
$mimeType = $fileRow['mime_type'] ?? 'application/octet-stream';
|
|
|
|
// ── Skip PeerTube and website entries (no actual file) ───────────────────
|
|
if (str_starts_with($filePath, 'peertube_ids:')) {
|
|
http_response_code(404);
|
|
die('Fichier PeerTube — pas de flux direct.');
|
|
}
|
|
if (str_starts_with($filePath, 'http://') || str_starts_with($filePath, 'https://')) {
|
|
http_response_code(404);
|
|
die('URL — pas de flux direct.');
|
|
}
|
|
|
|
// ── Resolve absolute path ────────────────────────────────────────────────
|
|
$absPath = STORAGE_ROOT . '/' . $filePath;
|
|
|
|
if (!file_exists($absPath) || !is_readable($absPath)) {
|
|
http_response_code(404);
|
|
die('Fichier absent du disque.');
|
|
}
|
|
|
|
// ── Stream the file ──────────────────────────────────────────────────────
|
|
$fileSize = filesize($absPath);
|
|
|
|
// Content-Disposition: inline so FilePond receives it as a valid file
|
|
header('Content-Type: ' . $mimeType);
|
|
header('Content-Length: ' . $fileSize);
|
|
header('Content-Disposition: inline; filename="' . addslashes($fileName) . '"');
|
|
header('Cache-Control: no-cache');
|
|
|
|
readfile($absPath);
|
|
exit;
|