FileExtensionFilter.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Core\Resource\Filter;

class FileExtensionFilter {

    protected $allowedFileExtensions = NULL;

    protected $disallowedFileExtensions = NULL;

    public function filterInlineChildren(array $parameters, \TYPO3\CMS\Core\DataHandling\DataHandler $tceMain) {
        $values = $parameters['values'];
        if ($parameters['allowedFileExtensions']) {
            $this->setAllowedFileExtensions($parameters['allowedFileExtensions']);
        }
        if ($parameters['disallowedFileExtensions']) {
            $this->setDisallowedFileExtensions($parameters['disallowedFileExtensions']);
        }
        $cleanValues = array();
        if (is_array($values)) {
            foreach ($values as $value) {
                if (empty($value)) {
                    continue;
                }
                $parts = \TYPO3\CMS\Core\Utility\GeneralUtility::revExplode('_', $value, 2);
                $fileReferenceUid = $parts[count($parts) - 1];
                $fileReference = \TYPO3\CMS\Core\Resource\ResourceFactory::getInstance()->getFileReferenceObject($fileReferenceUid);
                $file = $fileReference->getOriginalFile();
                if ($this->isAllowed($file->getName())) {
                    $cleanValues[] = $value;
                } else {
                    // Remove the erroneously created reference record again
                    $tceMain->deleteAction('sys_file_reference', $fileReferenceUid);
                }
            }
        }
        return $cleanValues;
    }

    public function filterFileList($itemName, $itemIdentifier, $parentIdentifier, array $additionalInformation, \TYPO3\CMS\Core\Resource\Driver\DriverInterface $driver) {
        $returnCode = TRUE;
        // Early return in case no file filters are set at all
        if ($this->allowedFileExtensions === NULL && $this->disallowedFileExtensions === NULL) {
            return $returnCode;
        }
        // Check that this is a file and not a folder
        if ($driver->fileExists($itemIdentifier)) {
            if (!$this->isAllowed($itemName)) {
                $returnCode = -1;
            }
        }
        return $returnCode;
    }

    protected function isAllowed($fileName) {
        $result = TRUE;
        $fileExt = strtolower(pathinfo($fileName, PATHINFO_EXTENSION));
        // Check allowed file extensions
        if ($this->allowedFileExtensions !== NULL && count($this->allowedFileExtensions) > 0 && !in_array($fileExt, $this->allowedFileExtensions)) {
            $result = FALSE;
        }
        // Check disallowed file extensions
        if ($this->disallowedFileExtensions !== NULL && count($this->disallowedFileExtensions) > 0 && in_array($fileExt, $this->disallowedFileExtensions)) {
            $result = FALSE;
        }
        return $result;
    }

    public function setAllowedFileExtensions($allowedFileExtensions) {
        $this->allowedFileExtensions = $this->convertToLowercaseArray($allowedFileExtensions);
    }

    public function setDisallowedFileExtensions($disallowedFileExtensions) {
        $this->disallowedFileExtensions = $this->convertToLowercaseArray($disallowedFileExtensions);
    }

    protected function convertToLowercaseArray($inputArgument) {
        $returnValue = NULL;
        if (is_array($inputArgument)) {
            $returnValue = $inputArgument;
        } elseif (strlen($inputArgument) > 0) {
            $returnValue = \TYPO3\CMS\Core\Utility\GeneralUtility::trimExplode(',', $inputArgument);
        }

        if (is_array($returnValue)) {
            $returnValue = array_map('strtolower', $returnValue);
        }

        return $returnValue;
    }

}