TYPO3CMS  8
 All Classes Namespaces Files Functions Variables Pages
FileDumpController.php
Go to the documentation of this file.
1 <?php
2 namespace TYPO3\CMS\Core\Controller;
3 
4 /*
5  * This file is part of the TYPO3 CMS project.
6  *
7  * It is free software; you can redistribute it and/or modify it under
8  * the terms of the GNU General Public License, either version 2
9  * of the License, or any later version.
10  *
11  * For the full copyright and license information, please read the
12  * LICENSE.txt file that was distributed with this source code.
13  *
14  * The TYPO3 project - inspiring people to share!
15  */
16 
17 use Psr\Http\Message\ResponseInterface;
18 use Psr\Http\Message\ServerRequestInterface;
24 
29 {
42  public function dumpAction(ServerRequestInterface $request, ResponseInterface $response)
43  {
44  $parameters = ['eID' => 'dumpFile'];
45  $t = $this->getGetOrPost($request, 't');
46  if ($t) {
47  $parameters['t'] = $t;
48  }
49  $f = $this->getGetOrPost($request, 'f');
50  if ($f) {
51  $parameters['f'] = $f;
52  }
53  $p = $this->getGetOrPost($request, 'p');
54  if ($p) {
55  $parameters['p'] = $p;
56  }
57 
58  if (GeneralUtility::hmac(implode('|', $parameters), 'resourceStorageDumpFile') === $this->getGetOrPost($request, 'token')) {
59  if (isset($parameters['f'])) {
60  try {
61  $file = ResourceFactory::getInstance()->getFileObject($parameters['f']);
62  if ($file->isDeleted() || $file->isMissing()) {
63  $file = null;
64  }
65  } catch (\Exception $e) {
66  $file = null;
67  }
68  } else {
69  $file = GeneralUtility::makeInstance(ProcessedFileRepository::class)->findByUid($parameters['p']);
70  if (!$file || $file->isDeleted()) {
71  $file = null;
72  }
73  }
74 
75  if ($file === null) {
77  }
78 
79  // Hook: allow some other process to do some security/access checks. Hook should issue 403 if access is rejected
80  if (is_array($GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['FileDumpEID.php']['checkFileAccess'])) {
81  foreach ($GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['FileDumpEID.php']['checkFileAccess'] as $classRef) {
82  $hookObject = GeneralUtility::getUserObj($classRef);
83  if (!$hookObject instanceof FileDumpEIDHookInterface) {
84  throw new \UnexpectedValueException($classRef . ' must implement interface ' . FileDumpEIDHookInterface::class, 1394442417);
85  }
86  $hookObject->checkFileAccess($file);
87  }
88  }
89  $file->getStorage()->dumpFileContents($file);
90  // @todo Refactor FAL to not echo directly, but to implement a stream for output here and use response
91  return null;
92  } else {
93  return $response->withStatus(403);
94  }
95  }
96 
102  protected function getGetOrPost(ServerRequestInterface $request, $parameter)
103  {
104  return isset($request->getParsedBody()[$parameter])
105  ? $request->getParsedBody()[$parameter]
106  : (isset($request->getQueryParams()[$parameter]) ? $request->getQueryParams()[$parameter] : null);
107  }
108 }
dumpAction(ServerRequestInterface $request, ResponseInterface $response)
getGetOrPost(ServerRequestInterface $request, $parameter)
if(TYPO3_MODE=== 'BE') $GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['t3lib/class.t3lib_tsfebeuserauth.php']['frontendEditingController']['default']
static makeInstance($className,...$constructorArguments)
static setResponseCodeAndExit($httpStatus=self::HTTP_STATUS_303)
static hmac($input, $additionalSecret= '')