Projet

Général

Profil

Paste
Télécharger (41,8 ko) Statistiques
| Branche: | Révision:

root / drupal7 / modules / file / file.module @ 01dfd3b5

1
<?php
2

    
3
/**
4
 * @file
5
 * Defines a "managed_file" Form API field and a "file" field for Field module.
6
 */
7

    
8
// Load all Field module hooks for File.
9
require_once DRUPAL_ROOT . '/modules/file/file.field.inc';
10

    
11
/**
12
 * Implements hook_help().
13
 */
14
function file_help($path, $arg) {
15
  switch ($path) {
16
    case 'admin/help#file':
17
      $output = '';
18
      $output .= '<h3>' . t('About') . '</h3>';
19
      $output .= '<p>' . t('The File module defines a <em>File</em> field type for the Field module, which lets you manage and validate uploaded files attached to content on your site (see the <a href="@field-help">Field module help page</a> for more information about fields). For more information, see the online handbook entry for <a href="@file">File module</a>.', array('@field-help' => url('admin/help/field'), '@file' => 'http://drupal.org/documentation/modules/file')) . '</p>';
20
      $output .= '<h3>' . t('Uses') . '</h3>';
21
      $output .= '<dl>';
22
      $output .= '<dt>' . t('Attaching files to content') . '</dt>';
23
      $output .= '<dd>' . t('The File module allows users to attach files to content (e.g., PDF files, spreadsheets, etc.), when a <em>File</em> field is added to a given content type using the <a href="@fieldui-help">Field UI module</a>. You can add validation options to your File field, such as specifying a maximum file size and allowed file extensions.', array('@fieldui-help' => url('admin/help/field_ui'))) . '</dd>';
24
      $output .= '<dt>' . t('Managing attachment display') . '</dt>';
25
      $output .= '<dd>' . t('When you attach a file to content, you can specify whether it is <em>listed</em> or not. Listed files are displayed automatically in a section at the bottom of your content; non-listed files are available for embedding in your content, but are not included in the list at the bottom.') . '</dd>';
26
      $output .= '<dt>' . t('Managing file locations') . '</dt>';
27
      $output .= '<dd>' . t("When you create a File field, you can specify a directory where the files will be stored, which can be within either the <em>public</em> or <em>private</em> files directory. Files in the public directory can be accessed directly through the web server; when public files are listed, direct links to the files are used, and anyone who knows a file's URL can download the file. Files in the private directory are not accessible directly through the web server; when private files are listed, the links are Drupal path requests. This adds to server load and download time, since Drupal must start up and resolve the path for each file download request, but allows for access restrictions.") . '</dd>';
28
      $output .= '</dl>';
29
      return $output;
30
  }
31
}
32

    
33
/**
34
 * Implements hook_menu().
35
 */
36
function file_menu() {
37
  $items = array();
38

    
39
  $items['file/ajax'] = array(
40
    'page callback' => 'file_ajax_upload',
41
    'delivery callback' => 'ajax_deliver',
42
    'access arguments' => array('access content'),
43
    'theme callback' => 'ajax_base_page_theme',
44
    'type' => MENU_CALLBACK,
45
  );
46
  $items['file/progress'] = array(
47
    'page callback' => 'file_ajax_progress',
48
    'access arguments' => array('access content'),
49
    'theme callback' => 'ajax_base_page_theme',
50
    'type' => MENU_CALLBACK,
51
  );
52

    
53
  return $items;
54
}
55

    
56
/**
57
 * Implements hook_element_info().
58
 *
59
 * The managed file element may be used anywhere in Drupal.
60
 */
61
function file_element_info() {
62
  $file_path = drupal_get_path('module', 'file');
63
  $types['managed_file'] = array(
64
    '#input' => TRUE,
65
    '#process' => array('file_managed_file_process'),
66
    '#value_callback' => 'file_managed_file_value',
67
    '#element_validate' => array('file_managed_file_validate'),
68
    '#pre_render' => array('file_managed_file_pre_render'),
69
    '#theme' => 'file_managed_file',
70
    '#theme_wrappers' => array('form_element'),
71
    '#progress_indicator' => 'throbber',
72
    '#progress_message' => NULL,
73
    '#upload_validators' => array(),
74
    '#upload_location' => NULL,
75
    '#size' => 22,
76
    '#extended' => FALSE,
77
    '#attached' => array(
78
      'css' => array($file_path . '/file.css'),
79
      'js' => array($file_path . '/file.js'),
80
    ),
81
  );
82
  return $types;
83
}
84

    
85
/**
86
 * Implements hook_theme().
87
 */
88
function file_theme() {
89
  return array(
90
    // file.module.
91
    'file_link' => array(
92
      'variables' => array('file' => NULL, 'icon_directory' => NULL),
93
    ),
94
    'file_icon' => array(
95
      'variables' => array('file' => NULL, 'icon_directory' => NULL, 'alt' => ''),
96
    ),
97
    'file_managed_file' => array(
98
      'render element' => 'element',
99
    ),
100

    
101
    // file.field.inc.
102
    'file_widget' => array(
103
      'render element' => 'element',
104
    ),
105
    'file_widget_multiple' => array(
106
      'render element' => 'element',
107
    ),
108
    'file_formatter_table' => array(
109
      'variables' => array('items' => NULL),
110
    ),
111
    'file_upload_help' => array(
112
      'variables' => array('description' => NULL, 'upload_validators' => NULL),
113
    ),
114
  );
115
}
116

    
117
/**
118
 * Implements hook_file_download().
119
 *
120
 * This function takes an extra parameter $field_type so that it may
121
 * be re-used by other File-like modules, such as Image.
122
 */
123
function file_file_download($uri, $field_type = 'file') {
124
  global $user;
125

    
126
  // Get the file record based on the URI. If not in the database just return.
127
  $files = file_load_multiple(array(), array('uri' => $uri));
128
  if (count($files)) {
129
    foreach ($files as $item) {
130
      // Since some database servers sometimes use a case-insensitive comparison
131
      // by default, double check that the filename is an exact match.
132
      if ($item->uri === $uri) {
133
        $file = $item;
134
        break;
135
      }
136
    }
137
  }
138
  if (!isset($file)) {
139
    return;
140
  }
141

    
142
  // Find out which (if any) fields of this type contain the file.
143
  $references = file_get_file_references($file, NULL, FIELD_LOAD_CURRENT, $field_type, FALSE);
144

    
145
  // Stop processing if there are no references in order to avoid returning
146
  // headers for files controlled by other modules. Make an exception for
147
  // temporary files where the host entity has not yet been saved (for example,
148
  // an image preview on a node/add form) in which case, allow download by the
149
  // file's owner. For anonymous file owners, only the browser session that
150
  // uploaded the file should be granted access.
151
  if (empty($references) && ($file->status == FILE_STATUS_PERMANENT || $file->uid != $user->uid || (!$user->uid && empty($_SESSION['anonymous_allowed_file_ids'][$file->fid])))) {
152
      return;
153
  }
154

    
155
  // Default to allow access.
156
  $denied = FALSE;
157
  // Loop through all references of this file. If a reference explicitly allows
158
  // access to the field to which this file belongs, no further checks are done
159
  // and download access is granted. If a reference denies access, eventually
160
  // existing additional references are checked. If all references were checked
161
  // and no reference denied access, access is granted as well. If at least one
162
  // reference denied access, access is denied.
163
  foreach ($references as $field_name => $field_references) {
164
    foreach ($field_references as $entity_type => $type_references) {
165
      foreach ($type_references as $id => $reference) {
166
        // Try to load $entity and $field.
167
        $entity = entity_load($entity_type, array($id));
168
        $entity = reset($entity);
169
        $field = field_info_field($field_name);
170

    
171
        // Load the field item that references the file.
172
        $field_item = NULL;
173
        if ($entity) {
174
          // Load all field items for that entity.
175
          $field_items = field_get_items($entity_type, $entity, $field_name);
176

    
177
          // Find the field item with the matching URI.
178
          foreach ($field_items as $item) {
179
            if ($item['uri'] == $uri) {
180
              $field_item = $item;
181
              break;
182
            }
183
          }
184
        }
185

    
186
        // Check that $entity, $field and $field_item were loaded successfully
187
        // and check if access to that field is not disallowed. If any of these
188
        // checks fail, stop checking access for this reference.
189
        if (empty($entity) || empty($field) || empty($field_item) || !field_access('view', $field, $entity_type, $entity)) {
190
          $denied = TRUE;
191
          break;
192
        }
193

    
194
        // Invoke hook and collect grants/denies for download access.
195
        // Default to FALSE and let entities overrule this ruling.
196
        $grants = array('system' => FALSE);
197
        foreach (module_implements('file_download_access') as $module) {
198
          $grants = array_merge($grants, array($module => module_invoke($module, 'file_download_access', $field_item, $entity_type, $entity)));
199
        }
200
        // Allow other modules to alter the returned grants/denies.
201
        drupal_alter('file_download_access', $grants, $field_item, $entity_type, $entity);
202

    
203
        if (in_array(TRUE, $grants)) {
204
          // If TRUE is returned, access is granted and no further checks are
205
          // necessary.
206
          $denied = FALSE;
207
          break 3;
208
        }
209

    
210
        if (in_array(FALSE, $grants)) {
211
          // If an implementation returns FALSE, access to this entity is denied
212
          // but the file could belong to another entity to which the user might
213
          // have access. Continue with these.
214
          $denied = TRUE;
215
        }
216
      }
217
    }
218
  }
219

    
220
  // Access specifically denied.
221
  if ($denied) {
222
    return -1;
223
  }
224

    
225
  // Access is granted.
226
  $headers = file_get_content_headers($file);
227
  return $headers;
228
}
229

    
230
/**
231
 * Menu callback; Shared Ajax callback for file uploads and deletions.
232
 *
233
 * This rebuilds the form element for a particular field item. As long as the
234
 * form processing is properly encapsulated in the widget element the form
235
 * should rebuild correctly using FAPI without the need for additional callbacks
236
 * or processing.
237
 */
238
function file_ajax_upload() {
239
  $form_parents = func_get_args();
240
  $form_build_id = (string) array_pop($form_parents);
241

    
242
  // Sanitize form parents before using them.
243
  $form_parents = array_filter($form_parents, 'element_child');
244

    
245
  if (empty($_POST['form_build_id']) || $form_build_id != $_POST['form_build_id']) {
246
    // Invalid request.
247
    drupal_set_message(t('An unrecoverable error occurred. The uploaded file likely exceeded the maximum file size (@size) that this server supports.', array('@size' => format_size(file_upload_max_size()))), 'error');
248
    $commands = array();
249
    $commands[] = ajax_command_replace(NULL, theme('status_messages'));
250
    return array('#type' => 'ajax', '#commands' => $commands);
251
  }
252

    
253
  list($form, $form_state, $form_id, $form_build_id, $commands) = ajax_get_form();
254

    
255
  if (!$form) {
256
    // Invalid form_build_id.
257
    drupal_set_message(t('An unrecoverable error occurred. Use of this form has expired. Try reloading the page and submitting again.'), 'error');
258
    $commands = array();
259
    $commands[] = ajax_command_replace(NULL, theme('status_messages'));
260
    return array('#type' => 'ajax', '#commands' => $commands);
261
  }
262

    
263
  // Get the current element and count the number of files.
264
  $current_element = $form;
265
  foreach ($form_parents as $parent) {
266
    $current_element = $current_element[$parent];
267
  }
268
  $current_file_count = isset($current_element['#file_upload_delta']) ? $current_element['#file_upload_delta'] : 0;
269

    
270
  // Process user input. $form and $form_state are modified in the process.
271
  drupal_process_form($form['#form_id'], $form, $form_state);
272

    
273
  // Retrieve the element to be rendered.
274
  foreach ($form_parents as $parent) {
275
    $form = $form[$parent];
276
  }
277

    
278
  // Add the special Ajax class if a new file was added.
279
  if (isset($form['#file_upload_delta']) && $current_file_count < $form['#file_upload_delta']) {
280
    $form[$current_file_count]['#attributes']['class'][] = 'ajax-new-content';
281
  }
282
  // Otherwise just add the new content class on a placeholder.
283
  else {
284
    $form['#suffix'] = (isset($form['#suffix']) ? $form['#suffix'] : '') . '<span class="ajax-new-content"></span>';
285
  }
286

    
287
  $form['#prefix'] = (isset($form['#prefix']) ? $form['#prefix'] : '') . theme('status_messages');
288

    
289
  $output = drupal_render($form);
290
  $js = drupal_add_js();
291
  $settings = drupal_array_merge_deep_array($js['settings']['data']);
292

    
293
  $commands[] = ajax_command_replace(NULL, $output, $settings);
294
  return array('#type' => 'ajax', '#commands' => $commands);
295
}
296

    
297
/**
298
 * Menu callback for upload progress.
299
 *
300
 * @param $key
301
 *   The unique key for this upload process.
302
 */
303
function file_ajax_progress($key) {
304
  $progress = array(
305
    'message' => t('Starting upload...'),
306
    'percentage' => -1,
307
  );
308

    
309
  $implementation = file_progress_implementation();
310
  if ($implementation == 'uploadprogress') {
311
    $status = uploadprogress_get_info($key);
312
    if (isset($status['bytes_uploaded']) && !empty($status['bytes_total'])) {
313
      $progress['message'] = t('Uploading... (@current of @total)', array('@current' => format_size($status['bytes_uploaded']), '@total' => format_size($status['bytes_total'])));
314
      $progress['percentage'] = round(100 * $status['bytes_uploaded'] / $status['bytes_total']);
315
    }
316
  }
317
  elseif ($implementation == 'apc') {
318
    $status = apc_fetch('upload_' . $key);
319
    if (isset($status['current']) && !empty($status['total'])) {
320
      $progress['message'] = t('Uploading... (@current of @total)', array('@current' => format_size($status['current']), '@total' => format_size($status['total'])));
321
      $progress['percentage'] = round(100 * $status['current'] / $status['total']);
322
    }
323
  }
324

    
325
  drupal_json_output($progress);
326
}
327

    
328
/**
329
 * Determines the preferred upload progress implementation.
330
 *
331
 * @return
332
 *   A string indicating which upload progress system is available. Either "apc"
333
 *   or "uploadprogress". If neither are available, returns FALSE.
334
 */
335
function file_progress_implementation() {
336
  static $implementation;
337
  if (!isset($implementation)) {
338
    $implementation = FALSE;
339

    
340
    // We prefer the PECL extension uploadprogress because it supports multiple
341
    // simultaneous uploads. APC only supports one at a time.
342
    if (extension_loaded('uploadprogress')) {
343
      $implementation = 'uploadprogress';
344
    }
345
    elseif (extension_loaded('apc') && ini_get('apc.rfc1867')) {
346
      $implementation = 'apc';
347
    }
348
  }
349
  return $implementation;
350
}
351

    
352
/**
353
 * Implements hook_file_delete().
354
 */
355
function file_file_delete($file) {
356
  // TODO: Remove references to a file that is in-use.
357
}
358

    
359
/**
360
 * Process function to expand the managed_file element type.
361
 *
362
 * Expands the file type to include Upload and Remove buttons, as well as
363
 * support for a default value.
364
 */
365
function file_managed_file_process($element, &$form_state, $form) {
366
  // Append the '-upload' to the #id so the field label's 'for' attribute
367
  // corresponds with the file element.
368
  $original_id = $element['#id'];
369
  $element['#id'] .= '-upload';
370
  $fid = isset($element['#value']['fid']) ? $element['#value']['fid'] : 0;
371

    
372
  // Set some default element properties.
373
  $element['#progress_indicator'] = empty($element['#progress_indicator']) ? 'none' : $element['#progress_indicator'];
374
  $element['#file'] = $fid ? file_load($fid) : FALSE;
375
  $element['#tree'] = TRUE;
376

    
377
  $ajax_settings = array(
378
    'path' => 'file/ajax/' . implode('/', $element['#array_parents']) . '/' . $form['form_build_id']['#value'],
379
    'wrapper' => $original_id . '-ajax-wrapper',
380
    'effect' => 'fade',
381
    'progress' => array(
382
      'type' => $element['#progress_indicator'],
383
      'message' => $element['#progress_message'],
384
    ),
385
  );
386

    
387
  // Set up the buttons first since we need to check if they were clicked.
388
  $element['upload_button'] = array(
389
    '#name' => implode('_', $element['#parents']) . '_upload_button',
390
    '#type' => 'submit',
391
    '#value' => t('Upload'),
392
    '#validate' => array(),
393
    '#submit' => array('file_managed_file_submit'),
394
    '#limit_validation_errors' => array($element['#parents']),
395
    '#ajax' => $ajax_settings,
396
    '#weight' => -5,
397
  );
398

    
399
  // Force the progress indicator for the remove button to be either 'none' or
400
  // 'throbber', even if the upload button is using something else.
401
  $ajax_settings['progress']['type'] = ($element['#progress_indicator'] == 'none') ? 'none' : 'throbber';
402
  $ajax_settings['progress']['message'] = NULL;
403
  $ajax_settings['effect'] = 'none';
404
  $element['remove_button'] = array(
405
    '#name' => implode('_', $element['#parents']) . '_remove_button',
406
    '#type' => 'submit',
407
    '#value' => t('Remove'),
408
    '#validate' => array(),
409
    '#submit' => array('file_managed_file_submit'),
410
    '#limit_validation_errors' => array($element['#parents']),
411
    '#ajax' => $ajax_settings,
412
    '#weight' => -5,
413
  );
414

    
415
  $element['fid'] = array(
416
    '#type' => 'hidden',
417
    '#value' => $fid,
418
  );
419

    
420
  // Add progress bar support to the upload if possible.
421
  if ($element['#progress_indicator'] == 'bar' && $implementation = file_progress_implementation()) {
422
    $upload_progress_key = mt_rand();
423

    
424
    if ($implementation == 'uploadprogress') {
425
      $element['UPLOAD_IDENTIFIER'] = array(
426
        '#type' => 'hidden',
427
        '#value' => $upload_progress_key,
428
        '#attributes' => array('class' => array('file-progress')),
429
        // Uploadprogress extension requires this field to be at the top of the
430
        // form.
431
        '#weight' => -20,
432
      );
433
    }
434
    elseif ($implementation == 'apc') {
435
      $element['APC_UPLOAD_PROGRESS'] = array(
436
        '#type' => 'hidden',
437
        '#value' => $upload_progress_key,
438
        '#attributes' => array('class' => array('file-progress')),
439
        // Uploadprogress extension requires this field to be at the top of the
440
        // form.
441
        '#weight' => -20,
442
      );
443
    }
444

    
445
    // Add the upload progress callback.
446
    $element['upload_button']['#ajax']['progress']['path'] = 'file/progress/' . $upload_progress_key;
447
  }
448

    
449
  // The file upload field itself.
450
  $element['upload'] = array(
451
    '#name' => 'files[' . implode('_', $element['#parents']) . ']',
452
    '#type' => 'file',
453
    '#title' => t('Choose a file'),
454
    '#title_display' => 'invisible',
455
    '#size' => $element['#size'],
456
    '#theme_wrappers' => array(),
457
    '#weight' => -10,
458
  );
459

    
460
  if ($fid && $element['#file']) {
461
    $element['filename'] = array(
462
      '#type' => 'markup',
463
      '#markup' => theme('file_link', array('file' => $element['#file'])) . ' ',
464
      '#weight' => -10,
465
    );
466
    // Anonymous users who have uploaded a temporary file need a
467
    // non-session-based token added so file_managed_file_value() can check
468
    // that they have permission to use this file on subsequent submissions of
469
    // the same form (for example, after an Ajax upload or form validation
470
    // error).
471
    if (!$GLOBALS['user']->uid && $element['#file']->status != FILE_STATUS_PERMANENT) {
472
      $element['fid_token'] = array(
473
        '#type' => 'hidden',
474
        '#value' => drupal_hmac_base64('file-' . $fid, drupal_get_private_key() . drupal_get_hash_salt()),
475
      );
476
    }
477
  }
478

    
479
  // Add the extension list to the page as JavaScript settings.
480
  if (isset($element['#upload_validators']['file_validate_extensions'][0])) {
481
    $extension_list = implode(',', array_filter(explode(' ', $element['#upload_validators']['file_validate_extensions'][0])));
482
    $element['upload']['#attached']['js'] = array(
483
      array(
484
        'type' => 'setting',
485
        'data' => array('file' => array('elements' => array('#' . $element['#id'] => $extension_list)))
486
      )
487
    );
488
  }
489

    
490
  // Prefix and suffix used for Ajax replacement.
491
  $element['#prefix'] = '<div id="' . $original_id . '-ajax-wrapper">';
492
  $element['#suffix'] = '</div>';
493

    
494
  return $element;
495
}
496

    
497
/**
498
 * The #value_callback for a managed_file type element.
499
 */
500
function file_managed_file_value(&$element, $input = FALSE, $form_state = NULL) {
501
  $fid = 0;
502
  $force_default = FALSE;
503

    
504
  // Find the current value of this field from the form state.
505
  $form_state_fid = $form_state['values'];
506
  foreach ($element['#parents'] as $parent) {
507
    $form_state_fid = isset($form_state_fid[$parent]) ? $form_state_fid[$parent] : 0;
508
  }
509

    
510
  if ($element['#extended'] && isset($form_state_fid['fid'])) {
511
    $fid = $form_state_fid['fid'];
512
  }
513
  elseif (is_numeric($form_state_fid)) {
514
    $fid = $form_state_fid;
515
  }
516

    
517
  // Process any input and save new uploads.
518
  if ($input !== FALSE) {
519
    $return = $input;
520

    
521
    // Uploads take priority over all other values.
522
    if ($file = file_managed_file_save_upload($element)) {
523
      $fid = $file->fid;
524
    }
525
    else {
526
      // Check for #filefield_value_callback values.
527
      // Because FAPI does not allow multiple #value_callback values like it
528
      // does for #element_validate and #process, this fills the missing
529
      // functionality to allow File fields to be extended through FAPI.
530
      if (isset($element['#file_value_callbacks'])) {
531
        foreach ($element['#file_value_callbacks'] as $callback) {
532
          $callback($element, $input, $form_state);
533
        }
534
      }
535
      // If a FID was submitted, load the file (and check access if it's not a
536
      // public file) to confirm it exists and that the current user has access
537
      // to it.
538
      if (isset($input['fid']) && ($file = file_load($input['fid']))) {
539
        // By default the public:// file scheme provided by Drupal core is the
540
        // only one that allows files to be publicly accessible to everyone, so
541
        // it is the only one for which the file access checks are bypassed.
542
        // Other modules which provide publicly accessible streams of their own
543
        // in hook_stream_wrappers() can add the corresponding scheme to the
544
        // 'file_public_schema' variable to bypass file access checks for those
545
        // as well. This should only be done for schemes that are completely
546
        // publicly accessible, with no download restrictions; for security
547
        // reasons all other schemes must go through the file_download_access()
548
        // check.
549
        if (!in_array(file_uri_scheme($file->uri), variable_get('file_public_schema', array('public'))) && !file_download_access($file->uri)) {
550
          $force_default = TRUE;
551
        }
552
        // Temporary files that belong to other users should never be allowed.
553
        elseif ($file->status != FILE_STATUS_PERMANENT) {
554
          if ($GLOBALS['user']->uid && $file->uid != $GLOBALS['user']->uid) {
555
            $force_default = TRUE;
556
          }
557
          // Since file ownership can't be determined for anonymous users, they
558
          // are not allowed to reuse temporary files at all. But they do need
559
          // to be able to reuse their own files from earlier submissions of
560
          // the same form, so to allow that, check for the token added by
561
          // file_managed_file_process().
562
          elseif (!$GLOBALS['user']->uid) {
563
            $token = drupal_array_get_nested_value($form_state['input'], array_merge($element['#parents'], array('fid_token')));
564
            if ($token !== drupal_hmac_base64('file-' . $file->fid, drupal_get_private_key() . drupal_get_hash_salt())) {
565
              $force_default = TRUE;
566
            }
567
          }
568
        }
569
        // If all checks pass, allow the file to be changed.
570
        if (!$force_default) {
571
          $fid = $file->fid;
572
        }
573
      }
574
    }
575
  }
576

    
577
  // If there is no input or if the default value was requested above, use the
578
  // default value.
579
  if ($input === FALSE || $force_default) {
580
    if ($element['#extended']) {
581
      $default_fid = isset($element['#default_value']['fid']) ? $element['#default_value']['fid'] : 0;
582
      $return = isset($element['#default_value']) ? $element['#default_value'] : array('fid' => 0);
583
    }
584
    else {
585
      $default_fid = isset($element['#default_value']) ? $element['#default_value'] : 0;
586
      $return = array('fid' => 0);
587
    }
588

    
589
    // Confirm that the file exists when used as a default value.
590
    if ($default_fid && $file = file_load($default_fid)) {
591
      $fid = $file->fid;
592
    }
593
  }
594

    
595
  $return['fid'] = $fid;
596

    
597
  return $return;
598
}
599

    
600
/**
601
 * An #element_validate callback for the managed_file element.
602
 */
603
function file_managed_file_validate(&$element, &$form_state) {
604
  // If referencing an existing file, only allow if there are existing
605
  // references. This prevents unmanaged files from being deleted if this
606
  // item were to be deleted.
607
  $clicked_button = end($form_state['triggering_element']['#parents']);
608
  if ($clicked_button != 'remove_button' && !empty($element['fid']['#value'])) {
609
    if ($file = file_load($element['fid']['#value'])) {
610
      if ($file->status == FILE_STATUS_PERMANENT) {
611
        $references = file_usage_list($file);
612
        if (empty($references)) {
613
          form_error($element, t('The file used in the !name field may not be referenced.', array('!name' => $element['#title'])));
614
        }
615
      }
616
    }
617
    else {
618
      form_error($element, t('The file referenced by the !name field does not exist.', array('!name' => $element['#title'])));
619
    }
620
  }
621

    
622
  // Check required property based on the FID.
623
  if ($element['#required'] && empty($element['fid']['#value']) && !in_array($clicked_button, array('upload_button', 'remove_button'))) {
624
    form_error($element['upload'], t('!name field is required.', array('!name' => $element['#title'])));
625
  }
626

    
627
  // Consolidate the array value of this field to a single FID.
628
  if (!$element['#extended']) {
629
    form_set_value($element, $element['fid']['#value'], $form_state);
630
  }
631
}
632

    
633
/**
634
 * Form submission handler for upload / remove buttons of managed_file elements.
635
 *
636
 * @see file_managed_file_process()
637
 */
638
function file_managed_file_submit($form, &$form_state) {
639
  // Determine whether it was the upload or the remove button that was clicked,
640
  // and set $element to the managed_file element that contains that button.
641
  $parents = $form_state['triggering_element']['#array_parents'];
642
  $button_key = array_pop($parents);
643
  $element = drupal_array_get_nested_value($form, $parents);
644

    
645
  // No action is needed here for the upload button, because all file uploads on
646
  // the form are processed by file_managed_file_value() regardless of which
647
  // button was clicked. Action is needed here for the remove button, because we
648
  // only remove a file in response to its remove button being clicked.
649
  if ($button_key == 'remove_button') {
650
    // If it's a temporary file we can safely remove it immediately, otherwise
651
    // it's up to the implementing module to clean up files that are in use.
652
    if ($element['#file'] && $element['#file']->status == 0) {
653
      file_delete($element['#file']);
654
    }
655
    // Update both $form_state['values'] and $form_state['input'] to reflect
656
    // that the file has been removed, so that the form is rebuilt correctly.
657
    // $form_state['values'] must be updated in case additional submit handlers
658
    // run, and for form building functions that run during the rebuild, such as
659
    // when the managed_file element is part of a field widget.
660
    // $form_state['input'] must be updated so that file_managed_file_value()
661
    // has correct information during the rebuild.
662
    $values_element = $element['#extended'] ? $element['fid'] : $element;
663
    form_set_value($values_element, NULL, $form_state);
664
    drupal_array_set_nested_value($form_state['input'], $values_element['#parents'], NULL);
665
  }
666

    
667
  // Set the form to rebuild so that $form is correctly updated in response to
668
  // processing the file removal. Since this function did not change $form_state
669
  // if the upload button was clicked, a rebuild isn't necessary in that
670
  // situation and setting $form_state['redirect'] to FALSE would suffice.
671
  // However, we choose to always rebuild, to keep the form processing workflow
672
  // consistent between the two buttons.
673
  $form_state['rebuild'] = TRUE;
674
}
675

    
676
/**
677
 * Saves any files that have been uploaded into a managed_file element.
678
 *
679
 * @param $element
680
 *   The FAPI element whose values are being saved.
681
 *
682
 * @return
683
 *   The file object representing the file that was saved, or FALSE if no file
684
 *   was saved.
685
 */
686
function file_managed_file_save_upload($element) {
687
  $upload_name = implode('_', $element['#parents']);
688
  if (empty($_FILES['files']['name'][$upload_name])) {
689
    return FALSE;
690
  }
691

    
692
  $destination = isset($element['#upload_location']) ? $element['#upload_location'] : NULL;
693
  if (isset($destination) && !file_prepare_directory($destination, FILE_CREATE_DIRECTORY)) {
694
    watchdog('file', 'The upload directory %directory for the file field !name could not be created or is not accessible. A newly uploaded file could not be saved in this directory as a consequence, and the upload was canceled.', array('%directory' => $destination, '!name' => $element['#field_name']));
695
    form_set_error($upload_name, t('The file could not be uploaded.'));
696
    return FALSE;
697
  }
698

    
699
  if (!$file = file_save_upload($upload_name, $element['#upload_validators'], $destination)) {
700
    watchdog('file', 'The file upload failed. %upload', array('%upload' => $upload_name));
701
    form_set_error($upload_name, t('The file in the !name field was unable to be uploaded.', array('!name' => $element['#title'])));
702
    return FALSE;
703
  }
704

    
705
  return $file;
706
}
707

    
708
/**
709
 * Returns HTML for a managed file element.
710
 *
711
 * @param $variables
712
 *   An associative array containing:
713
 *   - element: A render element representing the file.
714
 *
715
 * @ingroup themeable
716
 */
717
function theme_file_managed_file($variables) {
718
  $element = $variables['element'];
719

    
720
  $attributes = array();
721
  if (isset($element['#id'])) {
722
    $attributes['id'] = $element['#id'];
723
  }
724
  if (!empty($element['#attributes']['class'])) {
725
    $attributes['class'] = (array) $element['#attributes']['class'];
726
  }
727
  $attributes['class'][] = 'form-managed-file';
728

    
729
  // This wrapper is required to apply JS behaviors and CSS styling.
730
  $output = '';
731
  $output .= '<div' . drupal_attributes($attributes) . '>';
732
  $output .= drupal_render_children($element);
733
  $output .= '</div>';
734
  return $output;
735
}
736

    
737
/**
738
 * #pre_render callback to hide display of the upload or remove controls.
739
 *
740
 * Upload controls are hidden when a file is already uploaded. Remove controls
741
 * are hidden when there is no file attached. Controls are hidden here instead
742
 * of in file_managed_file_process(), because #access for these buttons depends
743
 * on the managed_file element's #value. See the documentation of form_builder()
744
 * for more detailed information about the relationship between #process,
745
 * #value, and #access.
746
 *
747
 * Because #access is set here, it affects display only and does not prevent
748
 * JavaScript or other untrusted code from submitting the form as though access
749
 * were enabled. The form processing functions for these elements should not
750
 * assume that the buttons can't be "clicked" just because they are not
751
 * displayed.
752
 *
753
 * @see file_managed_file_process()
754
 * @see form_builder()
755
 */
756
function file_managed_file_pre_render($element) {
757
  // If we already have a file, we don't want to show the upload controls.
758
  if (!empty($element['#value']['fid'])) {
759
    $element['upload']['#access'] = FALSE;
760
    $element['upload_button']['#access'] = FALSE;
761
  }
762
  // If we don't already have a file, there is nothing to remove.
763
  else {
764
    $element['remove_button']['#access'] = FALSE;
765
  }
766
  return $element;
767
}
768

    
769
/**
770
 * Returns HTML for a link to a file.
771
 *
772
 * @param $variables
773
 *   An associative array containing:
774
 *   - file: A file object to which the link will be created.
775
 *   - icon_directory: (optional) A path to a directory of icons to be used for
776
 *     files. Defaults to the value of the "file_icon_directory" variable.
777
 *
778
 * @ingroup themeable
779
 */
780
function theme_file_link($variables) {
781
  $file = $variables['file'];
782
  $icon_directory = $variables['icon_directory'];
783

    
784
  $url = file_create_url($file->uri);
785

    
786
  // Human-readable names, for use as text-alternatives to icons.
787
  $mime_name = array(
788
    'application/msword' => t('Microsoft Office document icon'),
789
    'application/vnd.ms-excel' => t('Office spreadsheet icon'),
790
    'application/vnd.ms-powerpoint' => t('Office presentation icon'),
791
    'application/pdf' => t('PDF icon'),
792
    'video/quicktime' => t('Movie icon'),
793
    'audio/mpeg' => t('Audio icon'),
794
    'audio/wav' => t('Audio icon'),
795
    'image/jpeg' => t('Image icon'),
796
    'image/png' => t('Image icon'),
797
    'image/gif' => t('Image icon'),
798
    'application/zip' => t('Package icon'),
799
    'text/html' => t('HTML icon'),
800
    'text/plain' => t('Plain text icon'),
801
    'application/octet-stream' => t('Binary Data'),
802
  );
803

    
804
  $mimetype = file_get_mimetype($file->uri);
805

    
806
  $icon = theme('file_icon', array(
807
    'file' => $file,
808
    'icon_directory' => $icon_directory,
809
    'alt' => !empty($mime_name[$mimetype]) ? $mime_name[$mimetype] : t('File'),
810
  ));
811

    
812
  // Set options as per anchor format described at
813
  // http://microformats.org/wiki/file-format-examples
814
  $options = array(
815
    'attributes' => array(
816
      'type' => $file->filemime . '; length=' . $file->filesize,
817
    ),
818
  );
819

    
820
  // Use the description as the link text if available.
821
  if (empty($file->description)) {
822
    $link_text = $file->filename;
823
  }
824
  else {
825
    $link_text = $file->description;
826
    $options['attributes']['title'] = check_plain($file->filename);
827
  }
828

    
829
  return '<span class="file">' . $icon . ' ' . l($link_text, $url, $options) . '</span>';
830
}
831

    
832
/**
833
 * Returns HTML for an image with an appropriate icon for the given file.
834
 *
835
 * @param $variables
836
 *   An associative array containing:
837
 *   - file: A file object for which to make an icon.
838
 *   - icon_directory: (optional) A path to a directory of icons to be used for
839
 *     files. Defaults to the value of the "file_icon_directory" variable.
840
 *   - alt: (optional) The alternative text to represent the icon in text-based
841
 *     browsers. Defaults to an empty string.
842
 *
843
 * @ingroup themeable
844
 */
845
function theme_file_icon($variables) {
846
  $file = $variables['file'];
847
  $alt = $variables['alt'];
848
  $icon_directory = $variables['icon_directory'];
849

    
850
  $mime = check_plain($file->filemime);
851
  $icon_url = file_icon_url($file, $icon_directory);
852
  return '<img class="file-icon" alt="' . check_plain($alt) . '" title="' . $mime . '" src="' . $icon_url . '" />';
853
}
854

    
855
/**
856
 * Creates a URL to the icon for a file object.
857
 *
858
 * @param $file
859
 *   A file object.
860
 * @param $icon_directory
861
 *   (optional) A path to a directory of icons to be used for files. Defaults to
862
 *   the value of the "file_icon_directory" variable.
863
 *
864
 * @return
865
 *   A URL string to the icon, or FALSE if an appropriate icon cannot be found.
866
 */
867
function file_icon_url($file, $icon_directory = NULL) {
868
  if ($icon_path = file_icon_path($file, $icon_directory)) {
869
    return base_path() . $icon_path;
870
  }
871
  return FALSE;
872
}
873

    
874
/**
875
 * Creates a path to the icon for a file object.
876
 *
877
 * @param $file
878
 *   A file object.
879
 * @param $icon_directory
880
 *   (optional) A path to a directory of icons to be used for files. Defaults to
881
 *   the value of the "file_icon_directory" variable.
882
 *
883
 * @return
884
 *   A string to the icon as a local path, or FALSE if an appropriate icon could
885
 *   not be found.
886
 */
887
function file_icon_path($file, $icon_directory = NULL) {
888
  // Use the default set of icons if none specified.
889
  if (!isset($icon_directory)) {
890
    $icon_directory = variable_get('file_icon_directory', drupal_get_path('module', 'file') . '/icons');
891
  }
892

    
893
  // If there's an icon matching the exact mimetype, go for it.
894
  $dashed_mime = strtr($file->filemime, array('/' => '-'));
895
  $icon_path = $icon_directory . '/' . $dashed_mime . '.png';
896
  if (file_exists($icon_path)) {
897
    return $icon_path;
898
  }
899

    
900
  // For a few mimetypes, we can "manually" map to a generic icon.
901
  $generic_mime = (string) file_icon_map($file);
902
  $icon_path = $icon_directory . '/' . $generic_mime . '.png';
903
  if ($generic_mime && file_exists($icon_path)) {
904
    return $icon_path;
905
  }
906

    
907
  // Use generic icons for each category that provides such icons.
908
  foreach (array('audio', 'image', 'text', 'video') as $category) {
909
    if (strpos($file->filemime, $category . '/') === 0) {
910
      $icon_path = $icon_directory . '/' . $category . '-x-generic.png';
911
      if (file_exists($icon_path)) {
912
        return $icon_path;
913
      }
914
    }
915
  }
916

    
917
  // Try application-octet-stream as last fallback.
918
  $icon_path = $icon_directory . '/application-octet-stream.png';
919
  if (file_exists($icon_path)) {
920
    return $icon_path;
921
  }
922

    
923
  // No icon can be found.
924
  return FALSE;
925
}
926

    
927
/**
928
 * Determines the generic icon MIME package based on a file's MIME type.
929
 *
930
 * @param $file
931
 *   A file object.
932
 *
933
 * @return
934
 *   The generic icon MIME package expected for this file.
935
 */
936
function file_icon_map($file) {
937
  switch ($file->filemime) {
938
    // Word document types.
939
    case 'application/msword':
940
    case 'application/vnd.ms-word.document.macroEnabled.12':
941
    case 'application/vnd.oasis.opendocument.text':
942
    case 'application/vnd.oasis.opendocument.text-template':
943
    case 'application/vnd.oasis.opendocument.text-master':
944
    case 'application/vnd.oasis.opendocument.text-web':
945
    case 'application/vnd.openxmlformats-officedocument.wordprocessingml.document':
946
    case 'application/vnd.stardivision.writer':
947
    case 'application/vnd.sun.xml.writer':
948
    case 'application/vnd.sun.xml.writer.template':
949
    case 'application/vnd.sun.xml.writer.global':
950
    case 'application/vnd.wordperfect':
951
    case 'application/x-abiword':
952
    case 'application/x-applix-word':
953
    case 'application/x-kword':
954
    case 'application/x-kword-crypt':
955
      return 'x-office-document';
956

    
957
    // Spreadsheet document types.
958
    case 'application/vnd.ms-excel':
959
    case 'application/vnd.ms-excel.sheet.macroEnabled.12':
960
    case 'application/vnd.oasis.opendocument.spreadsheet':
961
    case 'application/vnd.oasis.opendocument.spreadsheet-template':
962
    case 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet':
963
    case 'application/vnd.stardivision.calc':
964
    case 'application/vnd.sun.xml.calc':
965
    case 'application/vnd.sun.xml.calc.template':
966
    case 'application/vnd.lotus-1-2-3':
967
    case 'application/x-applix-spreadsheet':
968
    case 'application/x-gnumeric':
969
    case 'application/x-kspread':
970
    case 'application/x-kspread-crypt':
971
      return 'x-office-spreadsheet';
972

    
973
    // Presentation document types.
974
    case 'application/vnd.ms-powerpoint':
975
    case 'application/vnd.ms-powerpoint.presentation.macroEnabled.12':
976
    case 'application/vnd.oasis.opendocument.presentation':
977
    case 'application/vnd.oasis.opendocument.presentation-template':
978
    case 'application/vnd.openxmlformats-officedocument.presentationml.presentation':
979
    case 'application/vnd.stardivision.impress':
980
    case 'application/vnd.sun.xml.impress':
981
    case 'application/vnd.sun.xml.impress.template':
982
    case 'application/x-kpresenter':
983
      return 'x-office-presentation';
984

    
985
    // Compressed archive types.
986
    case 'application/zip':
987
    case 'application/x-zip':
988
    case 'application/stuffit':
989
    case 'application/x-stuffit':
990
    case 'application/x-7z-compressed':
991
    case 'application/x-ace':
992
    case 'application/x-arj':
993
    case 'application/x-bzip':
994
    case 'application/x-bzip-compressed-tar':
995
    case 'application/x-compress':
996
    case 'application/x-compressed-tar':
997
    case 'application/x-cpio-compressed':
998
    case 'application/x-deb':
999
    case 'application/x-gzip':
1000
    case 'application/x-java-archive':
1001
    case 'application/x-lha':
1002
    case 'application/x-lhz':
1003
    case 'application/x-lzop':
1004
    case 'application/x-rar':
1005
    case 'application/x-rpm':
1006
    case 'application/x-tzo':
1007
    case 'application/x-tar':
1008
    case 'application/x-tarz':
1009
    case 'application/x-tgz':
1010
      return 'package-x-generic';
1011

    
1012
    // Script file types.
1013
    case 'application/ecmascript':
1014
    case 'application/javascript':
1015
    case 'application/mathematica':
1016
    case 'application/vnd.mozilla.xul+xml':
1017
    case 'application/x-asp':
1018
    case 'application/x-awk':
1019
    case 'application/x-cgi':
1020
    case 'application/x-csh':
1021
    case 'application/x-m4':
1022
    case 'application/x-perl':
1023
    case 'application/x-php':
1024
    case 'application/x-ruby':
1025
    case 'application/x-shellscript':
1026
    case 'text/vnd.wap.wmlscript':
1027
    case 'text/x-emacs-lisp':
1028
    case 'text/x-haskell':
1029
    case 'text/x-literate-haskell':
1030
    case 'text/x-lua':
1031
    case 'text/x-makefile':
1032
    case 'text/x-matlab':
1033
    case 'text/x-python':
1034
    case 'text/x-sql':
1035
    case 'text/x-tcl':
1036
      return 'text-x-script';
1037

    
1038
    // HTML aliases.
1039
    case 'application/xhtml+xml':
1040
      return 'text-html';
1041

    
1042
    // Executable types.
1043
    case 'application/x-macbinary':
1044
    case 'application/x-ms-dos-executable':
1045
    case 'application/x-pef-executable':
1046
      return 'application-x-executable';
1047

    
1048
    default:
1049
      return FALSE;
1050
  }
1051
}
1052

    
1053
/**
1054
 * @defgroup file-module-api File module public API functions
1055
 * @{
1056
 * These functions may be used to determine if and where a file is in use.
1057
 */
1058

    
1059
/**
1060
 * Retrieves a list of references to a file.
1061
 *
1062
 * @param $file
1063
 *   A file object.
1064
 * @param $field
1065
 *   (optional) A field array to be used for this check. If given, limits the
1066
 *   reference check to the given field.
1067
 * @param $age
1068
 *   (optional) A constant that specifies which references to count. Use
1069
 *   FIELD_LOAD_REVISION to retrieve all references within all revisions or
1070
 *   FIELD_LOAD_CURRENT to retrieve references only in the current revisions.
1071
 * @param $field_type
1072
 *   (optional) The name of a field type. If given, limits the reference check
1073
 *   to fields of the given type.
1074
 * @param $check_access
1075
 *   (optional) A boolean that specifies whether the permissions of the current
1076
 *   user should be checked when retrieving references. If FALSE, all
1077
 *   references to the file are returned. If TRUE, only references from
1078
 *   entities that the current user has access to are returned. Defaults to
1079
 *   TRUE for backwards compatibility reasons, but FALSE is recommended for
1080
 *   most situations.
1081
 *
1082
 * @return
1083
 *   An integer value.
1084
 */
1085
function file_get_file_references($file, $field = NULL, $age = FIELD_LOAD_REVISION, $field_type = 'file', $check_access = TRUE) {
1086
  $references = drupal_static(__FUNCTION__, array());
1087
  $fields = isset($field) ? array($field['field_name'] => $field) : field_info_fields();
1088

    
1089
  foreach ($fields as $field_name => $file_field) {
1090
    if ((empty($field_type) || $file_field['type'] == $field_type) && !isset($references[$field_name])) {
1091
      // Get each time this file is used within a field.
1092
      $query = new EntityFieldQuery();
1093
      $query
1094
        ->fieldCondition($file_field, 'fid', $file->fid)
1095
        ->age($age);
1096
      if (!$check_access) {
1097
        // Neutralize the 'entity_field_access' query tag added by
1098
        // field_sql_storage_field_storage_query().
1099
        $query->addTag('DANGEROUS_ACCESS_CHECK_OPT_OUT');
1100
      }
1101
      $references[$field_name] = $query->execute();
1102
    }
1103
  }
1104

    
1105
  return isset($field) ? $references[$field['field_name']] : array_filter($references);
1106
}
1107

    
1108
/**
1109
 * @} End of "defgroup file-module-api".
1110
 */