9.5/_image_manipulation_controller_8php_source.html

<?php

declare(strict_types = 1);

namespace ‪TYPO3\CMS\Backend\Controller\Wizard;


/*

 * This file is part of the TYPO3 CMS project.

 *

 * It is free software; you can redistribute it and/or modify it under

 * the terms of the GNU General Public License, either version 2

 * of the License, or any later version.

 *

 * For the full copyright and license information, please read the

 * LICENSE.txt file that was distributed with this source code.

 *

 * The TYPO3 project - inspiring people to share!

 */


use Psr\Http\Message\ResponseInterface;

use Psr\Http\Message\ServerRequestInterface;

use ‪TYPO3\CMS\Core\Http\HtmlResponse;

use ‪TYPO3\CMS\Core\Resource\Exception\FileDoesNotExistException;

use ‪TYPO3\CMS\Core\Resource\ResourceFactory;

use ‪TYPO3\CMS\Core\Utility\GeneralUtility;

use ‪TYPO3\CMS\Core\Utility\MathUtility;

use ‪TYPO3\CMS\Fluid\View\StandaloneView;


class ‪ImageManipulationController

{

    private ‪$templateView;


    public function ‪__construct(‪StandaloneView ‪$templateView = null)

    {

        if (!‪$templateView) {

            ‪$templateView = GeneralUtility::makeInstance(StandaloneView::class);

            ‪$templateView->‪setLayoutRootPaths([GeneralUtility::getFileAbsFileName('EXT:backend/Resources/Private/Layouts/')]);

            ‪$templateView->‪setPartialRootPaths([GeneralUtility::getFileAbsFileName('EXT:backend/Resources/Private/Partials/ImageManipulation/')]);

            ‪$templateView->‪setTemplatePathAndFilename(GeneralUtility::getFileAbsFileName('EXT:backend/Resources/Private/Templates/ImageManipulation/ImageManipulationWizard.html'));

        }

        $this->templateView = ‪$templateView;

    }


    public function ‪getWizardContent(ServerRequestInterface $request): ResponseInterface

    {

        if ($this->‪isSignatureValid($request)) {

            $parsedBody = json_decode($request->getParsedBody()['arguments'], true);

            $fileUid = $parsedBody['image'];

            $image = null;

            if (‪MathUtility::canBeInterpretedAsInteger($fileUid)) {

                try {

                    $image = ‪ResourceFactory::getInstance()->‪getFileObject($fileUid);

                } catch (‪FileDoesNotExistException $e) {

                }

            }

            $viewData = [

                'image' => $image,

                'cropVariants' => $parsedBody['cropVariants']

            ];

            $content = $this->templateView->renderSection('Main', $viewData);

            return new ‪HtmlResponse($content);

        }

        return new ‪HtmlResponse('', 403);

    }


    protected function ‪isSignatureValid(ServerRequestInterface $request): bool

    {

        $token = GeneralUtility::hmac($request->getParsedBody()['arguments'], 'ajax_wizard_image_manipulation');

        return hash_equals($token, $request->getParsedBody()['signature']);

    }

}