Projet

Général

Profil

Paste
Télécharger (40,8 ko) Statistiques
| Branche: | Révision:

root / drupal7 / modules / file / file.module @ c9e51f47

1
<?php
2

    
3
/**
4
 * @file
5
 * Defines a "managed_file" Form API field and a "file" field for Field module.
6
 */
7

    
8
// Load all Field module hooks for File.
9
require_once DRUPAL_ROOT . '/modules/file/file.field.inc';
10

    
11
/**
12
 * Implements hook_help().
13
 */
14
function file_help($path, $arg) {
15
  switch ($path) {
16
    case 'admin/help#file':
17
      $output = '';
18
      $output .= '<h3>' . t('About') . '</h3>';
19
      $output .= '<p>' . t('The File module defines a <em>File</em> field type for the Field module, which lets you manage and validate uploaded files attached to content on your site (see the <a href="@field-help">Field module help page</a> for more information about fields). For more information, see the online handbook entry for <a href="@file">File module</a>.', array('@field-help' => url('admin/help/field'), '@file' => 'http://drupal.org/documentation/modules/file')) . '</p>';
20
      $output .= '<h3>' . t('Uses') . '</h3>';
21
      $output .= '<dl>';
22
      $output .= '<dt>' . t('Attaching files to content') . '</dt>';
23
      $output .= '<dd>' . t('The File module allows users to attach files to content (e.g., PDF files, spreadsheets, etc.), when a <em>File</em> field is added to a given content type using the <a href="@fieldui-help">Field UI module</a>. You can add validation options to your File field, such as specifying a maximum file size and allowed file extensions.', array('@fieldui-help' => url('admin/help/field_ui'))) . '</dd>';
24
      $output .= '<dt>' . t('Managing attachment display') . '</dt>';
25
      $output .= '<dd>' . t('When you attach a file to content, you can specify whether it is <em>listed</em> or not. Listed files are displayed automatically in a section at the bottom of your content; non-listed files are available for embedding in your content, but are not included in the list at the bottom.') . '</dd>';
26
      $output .= '<dt>' . t('Managing file locations') . '</dt>';
27
      $output .= '<dd>' . t("When you create a File field, you can specify a directory where the files will be stored, which can be within either the <em>public</em> or <em>private</em> files directory. Files in the public directory can be accessed directly through the web server; when public files are listed, direct links to the files are used, and anyone who knows a file's URL can download the file. Files in the private directory are not accessible directly through the web server; when private files are listed, the links are Drupal path requests. This adds to server load and download time, since Drupal must start up and resolve the path for each file download request, but allows for access restrictions.") . '</dd>';
28
      $output .= '</dl>';
29
      return $output;
30
  }
31
}
32

    
33
/**
34
 * Implements hook_menu().
35
 */
36
function file_menu() {
37
  $items = array();
38

    
39
  $items['file/ajax'] = array(
40
    'page callback' => 'file_ajax_upload',
41
    'delivery callback' => 'ajax_deliver',
42
    'access arguments' => array('access content'),
43
    'theme callback' => 'ajax_base_page_theme',
44
    'type' => MENU_CALLBACK,
45
  );
46
  $items['file/progress'] = array(
47
    'page callback' => 'file_ajax_progress',
48
    'access arguments' => array('access content'),
49
    'theme callback' => 'ajax_base_page_theme',
50
    'type' => MENU_CALLBACK,
51
  );
52

    
53
  return $items;
54
}
55

    
56
/**
57
 * Implements hook_element_info().
58
 *
59
 * The managed file element may be used anywhere in Drupal.
60
 */
61
function file_element_info() {
62
  $file_path = drupal_get_path('module', 'file');
63
  $types['managed_file'] = array(
64
    '#input' => TRUE,
65
    '#process' => array('file_managed_file_process'),
66
    '#value_callback' => 'file_managed_file_value',
67
    '#element_validate' => array('file_managed_file_validate'),
68
    '#pre_render' => array('file_managed_file_pre_render'),
69
    '#theme' => 'file_managed_file',
70
    '#theme_wrappers' => array('form_element'),
71
    '#progress_indicator' => 'throbber',
72
    '#progress_message' => NULL,
73
    '#upload_validators' => array(),
74
    '#upload_location' => NULL,
75
    '#size' => 22,
76
    '#extended' => FALSE,
77
    '#attached' => array(
78
      'css' => array($file_path . '/file.css'),
79
      'js' => array($file_path . '/file.js'),
80
    ),
81
  );
82
  return $types;
83
}
84

    
85
/**
86
 * Implements hook_theme().
87
 */
88
function file_theme() {
89
  return array(
90
    // file.module.
91
    'file_link' => array(
92
      'variables' => array('file' => NULL, 'icon_directory' => NULL),
93
    ),
94
    'file_icon' => array(
95
      'variables' => array('file' => NULL, 'icon_directory' => NULL, 'alt' => ''),
96
    ),
97
    'file_managed_file' => array(
98
      'render element' => 'element',
99
    ),
100

    
101
    // file.field.inc.
102
    'file_widget' => array(
103
      'render element' => 'element',
104
    ),
105
    'file_widget_multiple' => array(
106
      'render element' => 'element',
107
    ),
108
    'file_formatter_table' => array(
109
      'variables' => array('items' => NULL),
110
    ),
111
    'file_upload_help' => array(
112
      'variables' => array('description' => NULL, 'upload_validators' => NULL),
113
    ),
114
  );
115
}
116

    
117
/**
118
 * Implements hook_file_download().
119
 *
120
 * This function takes an extra parameter $field_type so that it may
121
 * be re-used by other File-like modules, such as Image.
122
 */
123
function file_file_download($uri, $field_type = 'file') {
124
  global $user;
125

    
126
  // Get the file record based on the URI. If not in the database just return.
127
  $files = file_load_multiple(array(), array('uri' => $uri));
128
  if (count($files)) {
129
    foreach ($files as $item) {
130
      // Since some database servers sometimes use a case-insensitive comparison
131
      // by default, double check that the filename is an exact match.
132
      if ($item->uri === $uri) {
133
        $file = $item;
134
        break;
135
      }
136
    }
137
  }
138
  if (!isset($file)) {
139
    return;
140
  }
141

    
142
  // Find out which (if any) fields of this type contain the file.
143
  $references = file_get_file_references($file, NULL, FIELD_LOAD_CURRENT, $field_type);
144

    
145
  // Stop processing if there are no references in order to avoid returning
146
  // headers for files controlled by other modules. Make an exception for
147
  // temporary files where the host entity has not yet been saved (for example,
148
  // an image preview on a node/add form) in which case, allow download by the
149
  // file's owner.
150
  if (empty($references) && ($file->status == FILE_STATUS_PERMANENT || $file->uid != $user->uid)) {
151
      return;
152
  }
153

    
154
  // Default to allow access.
155
  $denied = FALSE;
156
  // Loop through all references of this file. If a reference explicitly allows
157
  // access to the field to which this file belongs, no further checks are done
158
  // and download access is granted. If a reference denies access, eventually
159
  // existing additional references are checked. If all references were checked
160
  // and no reference denied access, access is granted as well. If at least one
161
  // reference denied access, access is denied.
162
  foreach ($references as $field_name => $field_references) {
163
    foreach ($field_references as $entity_type => $type_references) {
164
      foreach ($type_references as $id => $reference) {
165
        // Try to load $entity and $field.
166
        $entity = entity_load($entity_type, array($id));
167
        $entity = reset($entity);
168
        $field = field_info_field($field_name);
169

    
170
        // Load the field item that references the file.
171
        $field_item = NULL;
172
        if ($entity) {
173
          // Load all field items for that entity.
174
          $field_items = field_get_items($entity_type, $entity, $field_name);
175

    
176
          // Find the field item with the matching URI.
177
          foreach ($field_items as $item) {
178
            if ($item['uri'] == $uri) {
179
              $field_item = $item;
180
              break;
181
            }
182
          }
183
        }
184

    
185
        // Check that $entity, $field and $field_item were loaded successfully
186
        // and check if access to that field is not disallowed. If any of these
187
        // checks fail, stop checking access for this reference.
188
        if (empty($entity) || empty($field) || empty($field_item) || !field_access('view', $field, $entity_type, $entity)) {
189
          $denied = TRUE;
190
          break;
191
        }
192

    
193
        // Invoke hook and collect grants/denies for download access.
194
        // Default to FALSE and let entities overrule this ruling.
195
        $grants = array('system' => FALSE);
196
        foreach (module_implements('file_download_access') as $module) {
197
          $grants = array_merge($grants, array($module => module_invoke($module, 'file_download_access', $field_item, $entity_type, $entity)));
198
        }
199
        // Allow other modules to alter the returned grants/denies.
200
        drupal_alter('file_download_access', $grants, $field_item, $entity_type, $entity);
201

    
202
        if (in_array(TRUE, $grants)) {
203
          // If TRUE is returned, access is granted and no further checks are
204
          // necessary.
205
          $denied = FALSE;
206
          break 3;
207
        }
208

    
209
        if (in_array(FALSE, $grants)) {
210
          // If an implementation returns FALSE, access to this entity is denied
211
          // but the file could belong to another entity to which the user might
212
          // have access. Continue with these.
213
          $denied = TRUE;
214
        }
215
      }
216
    }
217
  }
218

    
219
  // Access specifically denied.
220
  if ($denied) {
221
    return -1;
222
  }
223

    
224
  // Access is granted.
225
  $headers = file_get_content_headers($file);
226
  return $headers;
227
}
228

    
229
/**
230
 * Menu callback; Shared Ajax callback for file uploads and deletions.
231
 *
232
 * This rebuilds the form element for a particular field item. As long as the
233
 * form processing is properly encapsulated in the widget element the form
234
 * should rebuild correctly using FAPI without the need for additional callbacks
235
 * or processing.
236
 */
237
function file_ajax_upload() {
238
  $form_parents = func_get_args();
239
  $form_build_id = (string) array_pop($form_parents);
240

    
241
  if (empty($_POST['form_build_id']) || $form_build_id != $_POST['form_build_id']) {
242
    // Invalid request.
243
    drupal_set_message(t('An unrecoverable error occurred. The uploaded file likely exceeded the maximum file size (@size) that this server supports.', array('@size' => format_size(file_upload_max_size()))), 'error');
244
    $commands = array();
245
    $commands[] = ajax_command_replace(NULL, theme('status_messages'));
246
    return array('#type' => 'ajax', '#commands' => $commands);
247
  }
248

    
249
  list($form, $form_state, $form_id, $form_build_id, $commands) = ajax_get_form();
250

    
251
  if (!$form) {
252
    // Invalid form_build_id.
253
    drupal_set_message(t('An unrecoverable error occurred. Use of this form has expired. Try reloading the page and submitting again.'), 'error');
254
    $commands = array();
255
    $commands[] = ajax_command_replace(NULL, theme('status_messages'));
256
    return array('#type' => 'ajax', '#commands' => $commands);
257
  }
258

    
259
  // Get the current element and count the number of files.
260
  $current_element = $form;
261
  foreach ($form_parents as $parent) {
262
    $current_element = $current_element[$parent];
263
  }
264
  $current_file_count = isset($current_element['#file_upload_delta']) ? $current_element['#file_upload_delta'] : 0;
265

    
266
  // Process user input. $form and $form_state are modified in the process.
267
  drupal_process_form($form['#form_id'], $form, $form_state);
268

    
269
  // Retrieve the element to be rendered.
270
  foreach ($form_parents as $parent) {
271
    $form = $form[$parent];
272
  }
273

    
274
  // Add the special Ajax class if a new file was added.
275
  if (isset($form['#file_upload_delta']) && $current_file_count < $form['#file_upload_delta']) {
276
    $form[$current_file_count]['#attributes']['class'][] = 'ajax-new-content';
277
  }
278
  // Otherwise just add the new content class on a placeholder.
279
  else {
280
    $form['#suffix'] .= '<span class="ajax-new-content"></span>';
281
  }
282

    
283
  $form['#prefix'] .= theme('status_messages');
284
  $output = drupal_render($form);
285
  $js = drupal_add_js();
286
  $settings = call_user_func_array('array_merge_recursive', $js['settings']['data']);
287

    
288
  $commands[] = ajax_command_replace(NULL, $output, $settings);
289
  return array('#type' => 'ajax', '#commands' => $commands);
290
}
291

    
292
/**
293
 * Menu callback for upload progress.
294
 *
295
 * @param $key
296
 *   The unique key for this upload process.
297
 */
298
function file_ajax_progress($key) {
299
  $progress = array(
300
    'message' => t('Starting upload...'),
301
    'percentage' => -1,
302
  );
303

    
304
  $implementation = file_progress_implementation();
305
  if ($implementation == 'uploadprogress') {
306
    $status = uploadprogress_get_info($key);
307
    if (isset($status['bytes_uploaded']) && !empty($status['bytes_total'])) {
308
      $progress['message'] = t('Uploading... (@current of @total)', array('@current' => format_size($status['bytes_uploaded']), '@total' => format_size($status['bytes_total'])));
309
      $progress['percentage'] = round(100 * $status['bytes_uploaded'] / $status['bytes_total']);
310
    }
311
  }
312
  elseif ($implementation == 'apc') {
313
    $status = apc_fetch('upload_' . $key);
314
    if (isset($status['current']) && !empty($status['total'])) {
315
      $progress['message'] = t('Uploading... (@current of @total)', array('@current' => format_size($status['current']), '@total' => format_size($status['total'])));
316
      $progress['percentage'] = round(100 * $status['current'] / $status['total']);
317
    }
318
  }
319

    
320
  drupal_json_output($progress);
321
}
322

    
323
/**
324
 * Determines the preferred upload progress implementation.
325
 *
326
 * @return
327
 *   A string indicating which upload progress system is available. Either "apc"
328
 *   or "uploadprogress". If neither are available, returns FALSE.
329
 */
330
function file_progress_implementation() {
331
  static $implementation;
332
  if (!isset($implementation)) {
333
    $implementation = FALSE;
334

    
335
    // We prefer the PECL extension uploadprogress because it supports multiple
336
    // simultaneous uploads. APC only supports one at a time.
337
    if (extension_loaded('uploadprogress')) {
338
      $implementation = 'uploadprogress';
339
    }
340
    elseif (extension_loaded('apc') && ini_get('apc.rfc1867')) {
341
      $implementation = 'apc';
342
    }
343
  }
344
  return $implementation;
345
}
346

    
347
/**
348
 * Implements hook_file_delete().
349
 */
350
function file_file_delete($file) {
351
  // TODO: Remove references to a file that is in-use.
352
}
353

    
354
/**
355
 * Process function to expand the managed_file element type.
356
 *
357
 * Expands the file type to include Upload and Remove buttons, as well as
358
 * support for a default value.
359
 */
360
function file_managed_file_process($element, &$form_state, $form) {
361
  // Append the '-upload' to the #id so the field label's 'for' attribute
362
  // corresponds with the file element.
363
  $original_id = $element['#id'];
364
  $element['#id'] .= '-upload';
365
  $fid = isset($element['#value']['fid']) ? $element['#value']['fid'] : 0;
366

    
367
  // Set some default element properties.
368
  $element['#progress_indicator'] = empty($element['#progress_indicator']) ? 'none' : $element['#progress_indicator'];
369
  $element['#file'] = $fid ? file_load($fid) : FALSE;
370
  $element['#tree'] = TRUE;
371

    
372
  $ajax_settings = array(
373
    'path' => 'file/ajax/' . implode('/', $element['#array_parents']) . '/' . $form['form_build_id']['#value'],
374
    'wrapper' => $original_id . '-ajax-wrapper',
375
    'effect' => 'fade',
376
    'progress' => array(
377
      'type' => $element['#progress_indicator'],
378
      'message' => $element['#progress_message'],
379
    ),
380
  );
381

    
382
  // Set up the buttons first since we need to check if they were clicked.
383
  $element['upload_button'] = array(
384
    '#name' => implode('_', $element['#parents']) . '_upload_button',
385
    '#type' => 'submit',
386
    '#value' => t('Upload'),
387
    '#validate' => array(),
388
    '#submit' => array('file_managed_file_submit'),
389
    '#limit_validation_errors' => array($element['#parents']),
390
    '#ajax' => $ajax_settings,
391
    '#weight' => -5,
392
  );
393

    
394
  // Force the progress indicator for the remove button to be either 'none' or
395
  // 'throbber', even if the upload button is using something else.
396
  $ajax_settings['progress']['type'] = ($element['#progress_indicator'] == 'none') ? 'none' : 'throbber';
397
  $ajax_settings['progress']['message'] = NULL;
398
  $ajax_settings['effect'] = 'none';
399
  $element['remove_button'] = array(
400
    '#name' => implode('_', $element['#parents']) . '_remove_button',
401
    '#type' => 'submit',
402
    '#value' => t('Remove'),
403
    '#validate' => array(),
404
    '#submit' => array('file_managed_file_submit'),
405
    '#limit_validation_errors' => array($element['#parents']),
406
    '#ajax' => $ajax_settings,
407
    '#weight' => -5,
408
  );
409

    
410
  $element['fid'] = array(
411
    '#type' => 'hidden',
412
    '#value' => $fid,
413
  );
414

    
415
  // Add progress bar support to the upload if possible.
416
  if ($element['#progress_indicator'] == 'bar' && $implementation = file_progress_implementation()) {
417
    $upload_progress_key = mt_rand();
418

    
419
    if ($implementation == 'uploadprogress') {
420
      $element['UPLOAD_IDENTIFIER'] = array(
421
        '#type' => 'hidden',
422
        '#value' => $upload_progress_key,
423
        '#attributes' => array('class' => array('file-progress')),
424
        // Uploadprogress extension requires this field to be at the top of the
425
        // form.
426
        '#weight' => -20,
427
      );
428
    }
429
    elseif ($implementation == 'apc') {
430
      $element['APC_UPLOAD_PROGRESS'] = array(
431
        '#type' => 'hidden',
432
        '#value' => $upload_progress_key,
433
        '#attributes' => array('class' => array('file-progress')),
434
        // Uploadprogress extension requires this field to be at the top of the
435
        // form.
436
        '#weight' => -20,
437
      );
438
    }
439

    
440
    // Add the upload progress callback.
441
    $element['upload_button']['#ajax']['progress']['path'] = 'file/progress/' . $upload_progress_key;
442
  }
443

    
444
  // The file upload field itself.
445
  $element['upload'] = array(
446
    '#name' => 'files[' . implode('_', $element['#parents']) . ']',
447
    '#type' => 'file',
448
    '#title' => t('Choose a file'),
449
    '#title_display' => 'invisible',
450
    '#size' => $element['#size'],
451
    '#theme_wrappers' => array(),
452
    '#weight' => -10,
453
  );
454

    
455
  if ($fid && $element['#file']) {
456
    $element['filename'] = array(
457
      '#type' => 'markup',
458
      '#markup' => theme('file_link', array('file' => $element['#file'])) . ' ',
459
      '#weight' => -10,
460
    );
461
    // Anonymous users who have uploaded a temporary file need a
462
    // non-session-based token added so file_managed_file_value() can check
463
    // that they have permission to use this file on subsequent submissions of
464
    // the same form (for example, after an Ajax upload or form validation
465
    // error).
466
    if (!$GLOBALS['user']->uid && $element['#file']->status != FILE_STATUS_PERMANENT) {
467
      $element['fid_token'] = array(
468
        '#type' => 'hidden',
469
        '#value' => drupal_hmac_base64('file-' . $fid, drupal_get_private_key() . drupal_get_hash_salt()),
470
      );
471
    }
472
  }
473

    
474
  // Add the extension list to the page as JavaScript settings.
475
  if (isset($element['#upload_validators']['file_validate_extensions'][0])) {
476
    $extension_list = implode(',', array_filter(explode(' ', $element['#upload_validators']['file_validate_extensions'][0])));
477
    $element['upload']['#attached']['js'] = array(
478
      array(
479
        'type' => 'setting',
480
        'data' => array('file' => array('elements' => array('#' . $element['#id'] => $extension_list)))
481
      )
482
    );
483
  }
484

    
485
  // Prefix and suffix used for Ajax replacement.
486
  $element['#prefix'] = '<div id="' . $original_id . '-ajax-wrapper">';
487
  $element['#suffix'] = '</div>';
488

    
489
  return $element;
490
}
491

    
492
/**
493
 * The #value_callback for a managed_file type element.
494
 */
495
function file_managed_file_value(&$element, $input = FALSE, $form_state = NULL) {
496
  $fid = 0;
497
  $force_default = FALSE;
498

    
499
  // Find the current value of this field from the form state.
500
  $form_state_fid = $form_state['values'];
501
  foreach ($element['#parents'] as $parent) {
502
    $form_state_fid = isset($form_state_fid[$parent]) ? $form_state_fid[$parent] : 0;
503
  }
504

    
505
  if ($element['#extended'] && isset($form_state_fid['fid'])) {
506
    $fid = $form_state_fid['fid'];
507
  }
508
  elseif (is_numeric($form_state_fid)) {
509
    $fid = $form_state_fid;
510
  }
511

    
512
  // Process any input and save new uploads.
513
  if ($input !== FALSE) {
514
    $return = $input;
515

    
516
    // Uploads take priority over all other values.
517
    if ($file = file_managed_file_save_upload($element)) {
518
      $fid = $file->fid;
519
    }
520
    else {
521
      // Check for #filefield_value_callback values.
522
      // Because FAPI does not allow multiple #value_callback values like it
523
      // does for #element_validate and #process, this fills the missing
524
      // functionality to allow File fields to be extended through FAPI.
525
      if (isset($element['#file_value_callbacks'])) {
526
        foreach ($element['#file_value_callbacks'] as $callback) {
527
          $callback($element, $input, $form_state);
528
        }
529
      }
530
      // If a FID was submitted, load the file (and check access if it's not a
531
      // public file) to confirm it exists and that the current user has access
532
      // to it.
533
      if (isset($input['fid']) && ($file = file_load($input['fid']))) {
534
        // By default the public:// file scheme provided by Drupal core is the
535
        // only one that allows files to be publicly accessible to everyone, so
536
        // it is the only one for which the file access checks are bypassed.
537
        // Other modules which provide publicly accessible streams of their own
538
        // in hook_stream_wrappers() can add the corresponding scheme to the
539
        // 'file_public_schema' variable to bypass file access checks for those
540
        // as well. This should only be done for schemes that are completely
541
        // publicly accessible, with no download restrictions; for security
542
        // reasons all other schemes must go through the file_download_access()
543
        // check.
544
        if (!in_array(file_uri_scheme($file->uri), variable_get('file_public_schema', array('public'))) && !file_download_access($file->uri)) {
545
          $force_default = TRUE;
546
        }
547
        // Temporary files that belong to other users should never be allowed.
548
        elseif ($file->status != FILE_STATUS_PERMANENT) {
549
          if ($GLOBALS['user']->uid && $file->uid != $GLOBALS['user']->uid) {
550
            $force_default = TRUE;
551
          }
552
          // Since file ownership can't be determined for anonymous users, they
553
          // are not allowed to reuse temporary files at all. But they do need
554
          // to be able to reuse their own files from earlier submissions of
555
          // the same form, so to allow that, check for the token added by
556
          // file_managed_file_process().
557
          elseif (!$GLOBALS['user']->uid) {
558
            $token = drupal_array_get_nested_value($form_state['input'], array_merge($element['#parents'], array('fid_token')));
559
            if ($token !== drupal_hmac_base64('file-' . $file->fid, drupal_get_private_key() . drupal_get_hash_salt())) {
560
              $force_default = TRUE;
561
            }
562
          }
563
        }
564
        // If all checks pass, allow the file to be changed.
565
        if (!$force_default) {
566
          $fid = $file->fid;
567
        }
568
      }
569
    }
570
  }
571

    
572
  // If there is no input or if the default value was requested above, use the
573
  // default value.
574
  if ($input === FALSE || $force_default) {
575
    if ($element['#extended']) {
576
      $default_fid = isset($element['#default_value']['fid']) ? $element['#default_value']['fid'] : 0;
577
      $return = isset($element['#default_value']) ? $element['#default_value'] : array('fid' => 0);
578
    }
579
    else {
580
      $default_fid = isset($element['#default_value']) ? $element['#default_value'] : 0;
581
      $return = array('fid' => 0);
582
    }
583

    
584
    // Confirm that the file exists when used as a default value.
585
    if ($default_fid && $file = file_load($default_fid)) {
586
      $fid = $file->fid;
587
    }
588
  }
589

    
590
  $return['fid'] = $fid;
591

    
592
  return $return;
593
}
594

    
595
/**
596
 * An #element_validate callback for the managed_file element.
597
 */
598
function file_managed_file_validate(&$element, &$form_state) {
599
  // If referencing an existing file, only allow if there are existing
600
  // references. This prevents unmanaged files from being deleted if this
601
  // item were to be deleted.
602
  $clicked_button = end($form_state['triggering_element']['#parents']);
603
  if ($clicked_button != 'remove_button' && !empty($element['fid']['#value'])) {
604
    if ($file = file_load($element['fid']['#value'])) {
605
      if ($file->status == FILE_STATUS_PERMANENT) {
606
        $references = file_usage_list($file);
607
        if (empty($references)) {
608
          form_error($element, t('The file used in the !name field may not be referenced.', array('!name' => $element['#title'])));
609
        }
610
      }
611
    }
612
    else {
613
      form_error($element, t('The file referenced by the !name field does not exist.', array('!name' => $element['#title'])));
614
    }
615
  }
616

    
617
  // Check required property based on the FID.
618
  if ($element['#required'] && empty($element['fid']['#value']) && !in_array($clicked_button, array('upload_button', 'remove_button'))) {
619
    form_error($element['upload'], t('!name field is required.', array('!name' => $element['#title'])));
620
  }
621

    
622
  // Consolidate the array value of this field to a single FID.
623
  if (!$element['#extended']) {
624
    form_set_value($element, $element['fid']['#value'], $form_state);
625
  }
626
}
627

    
628
/**
629
 * Form submission handler for upload / remove buttons of managed_file elements.
630
 *
631
 * @see file_managed_file_process()
632
 */
633
function file_managed_file_submit($form, &$form_state) {
634
  // Determine whether it was the upload or the remove button that was clicked,
635
  // and set $element to the managed_file element that contains that button.
636
  $parents = $form_state['triggering_element']['#array_parents'];
637
  $button_key = array_pop($parents);
638
  $element = drupal_array_get_nested_value($form, $parents);
639

    
640
  // No action is needed here for the upload button, because all file uploads on
641
  // the form are processed by file_managed_file_value() regardless of which
642
  // button was clicked. Action is needed here for the remove button, because we
643
  // only remove a file in response to its remove button being clicked.
644
  if ($button_key == 'remove_button') {
645
    // If it's a temporary file we can safely remove it immediately, otherwise
646
    // it's up to the implementing module to clean up files that are in use.
647
    if ($element['#file'] && $element['#file']->status == 0) {
648
      file_delete($element['#file']);
649
    }
650
    // Update both $form_state['values'] and $form_state['input'] to reflect
651
    // that the file has been removed, so that the form is rebuilt correctly.
652
    // $form_state['values'] must be updated in case additional submit handlers
653
    // run, and for form building functions that run during the rebuild, such as
654
    // when the managed_file element is part of a field widget.
655
    // $form_state['input'] must be updated so that file_managed_file_value()
656
    // has correct information during the rebuild.
657
    $values_element = $element['#extended'] ? $element['fid'] : $element;
658
    form_set_value($values_element, NULL, $form_state);
659
    drupal_array_set_nested_value($form_state['input'], $values_element['#parents'], NULL);
660
  }
661

    
662
  // Set the form to rebuild so that $form is correctly updated in response to
663
  // processing the file removal. Since this function did not change $form_state
664
  // if the upload button was clicked, a rebuild isn't necessary in that
665
  // situation and setting $form_state['redirect'] to FALSE would suffice.
666
  // However, we choose to always rebuild, to keep the form processing workflow
667
  // consistent between the two buttons.
668
  $form_state['rebuild'] = TRUE;
669
}
670

    
671
/**
672
 * Saves any files that have been uploaded into a managed_file element.
673
 *
674
 * @param $element
675
 *   The FAPI element whose values are being saved.
676
 *
677
 * @return
678
 *   The file object representing the file that was saved, or FALSE if no file
679
 *   was saved.
680
 */
681
function file_managed_file_save_upload($element) {
682
  $upload_name = implode('_', $element['#parents']);
683
  if (empty($_FILES['files']['name'][$upload_name])) {
684
    return FALSE;
685
  }
686

    
687
  $destination = isset($element['#upload_location']) ? $element['#upload_location'] : NULL;
688
  if (isset($destination) && !file_prepare_directory($destination, FILE_CREATE_DIRECTORY)) {
689
    watchdog('file', 'The upload directory %directory for the file field !name could not be created or is not accessible. A newly uploaded file could not be saved in this directory as a consequence, and the upload was canceled.', array('%directory' => $destination, '!name' => $element['#field_name']));
690
    form_set_error($upload_name, t('The file could not be uploaded.'));
691
    return FALSE;
692
  }
693

    
694
  if (!$file = file_save_upload($upload_name, $element['#upload_validators'], $destination)) {
695
    watchdog('file', 'The file upload failed. %upload', array('%upload' => $upload_name));
696
    form_set_error($upload_name, t('The file in the !name field was unable to be uploaded.', array('!name' => $element['#title'])));
697
    return FALSE;
698
  }
699

    
700
  return $file;
701
}
702

    
703
/**
704
 * Returns HTML for a managed file element.
705
 *
706
 * @param $variables
707
 *   An associative array containing:
708
 *   - element: A render element representing the file.
709
 *
710
 * @ingroup themeable
711
 */
712
function theme_file_managed_file($variables) {
713
  $element = $variables['element'];
714

    
715
  $attributes = array();
716
  if (isset($element['#id'])) {
717
    $attributes['id'] = $element['#id'];
718
  }
719
  if (!empty($element['#attributes']['class'])) {
720
    $attributes['class'] = (array) $element['#attributes']['class'];
721
  }
722
  $attributes['class'][] = 'form-managed-file';
723

    
724
  // This wrapper is required to apply JS behaviors and CSS styling.
725
  $output = '';
726
  $output .= '<div' . drupal_attributes($attributes) . '>';
727
  $output .= drupal_render_children($element);
728
  $output .= '</div>';
729
  return $output;
730
}
731

    
732
/**
733
 * #pre_render callback to hide display of the upload or remove controls.
734
 *
735
 * Upload controls are hidden when a file is already uploaded. Remove controls
736
 * are hidden when there is no file attached. Controls are hidden here instead
737
 * of in file_managed_file_process(), because #access for these buttons depends
738
 * on the managed_file element's #value. See the documentation of form_builder()
739
 * for more detailed information about the relationship between #process,
740
 * #value, and #access.
741
 *
742
 * Because #access is set here, it affects display only and does not prevent
743
 * JavaScript or other untrusted code from submitting the form as though access
744
 * were enabled. The form processing functions for these elements should not
745
 * assume that the buttons can't be "clicked" just because they are not
746
 * displayed.
747
 *
748
 * @see file_managed_file_process()
749
 * @see form_builder()
750
 */
751
function file_managed_file_pre_render($element) {
752
  // If we already have a file, we don't want to show the upload controls.
753
  if (!empty($element['#value']['fid'])) {
754
    $element['upload']['#access'] = FALSE;
755
    $element['upload_button']['#access'] = FALSE;
756
  }
757
  // If we don't already have a file, there is nothing to remove.
758
  else {
759
    $element['remove_button']['#access'] = FALSE;
760
  }
761
  return $element;
762
}
763

    
764
/**
765
 * Returns HTML for a link to a file.
766
 *
767
 * @param $variables
768
 *   An associative array containing:
769
 *   - file: A file object to which the link will be created.
770
 *   - icon_directory: (optional) A path to a directory of icons to be used for
771
 *     files. Defaults to the value of the "file_icon_directory" variable.
772
 *
773
 * @ingroup themeable
774
 */
775
function theme_file_link($variables) {
776
  $file = $variables['file'];
777
  $icon_directory = $variables['icon_directory'];
778

    
779
  $url = file_create_url($file->uri);
780

    
781
  // Human-readable names, for use as text-alternatives to icons.
782
  $mime_name = array(
783
    'application/msword' => t('Microsoft Office document icon'),
784
    'application/vnd.ms-excel' => t('Office spreadsheet icon'),
785
    'application/vnd.ms-powerpoint' => t('Office presentation icon'),
786
    'application/pdf' => t('PDF icon'),
787
    'video/quicktime' => t('Movie icon'),
788
    'audio/mpeg' => t('Audio icon'),
789
    'audio/wav' => t('Audio icon'),
790
    'image/jpeg' => t('Image icon'),
791
    'image/png' => t('Image icon'),
792
    'image/gif' => t('Image icon'),
793
    'application/zip' => t('Package icon'),
794
    'text/html' => t('HTML icon'),
795
    'text/plain' => t('Plain text icon'),
796
    'application/octet-stream' => t('Binary Data'),
797
  );
798

    
799
  $mimetype = file_get_mimetype($file->uri);
800

    
801
  $icon = theme('file_icon', array(
802
    'file' => $file,
803
    'icon_directory' => $icon_directory,
804
    'alt' => !empty($mime_name[$mimetype]) ? $mime_name[$mimetype] : t('File'),
805
  ));
806

    
807
  // Set options as per anchor format described at
808
  // http://microformats.org/wiki/file-format-examples
809
  $options = array(
810
    'attributes' => array(
811
      'type' => $file->filemime . '; length=' . $file->filesize,
812
    ),
813
  );
814

    
815
  // Use the description as the link text if available.
816
  if (empty($file->description)) {
817
    $link_text = $file->filename;
818
  }
819
  else {
820
    $link_text = $file->description;
821
    $options['attributes']['title'] = check_plain($file->filename);
822
  }
823

    
824
  return '<span class="file">' . $icon . ' ' . l($link_text, $url, $options) . '</span>';
825
}
826

    
827
/**
828
 * Returns HTML for an image with an appropriate icon for the given file.
829
 *
830
 * @param $variables
831
 *   An associative array containing:
832
 *   - file: A file object for which to make an icon.
833
 *   - icon_directory: (optional) A path to a directory of icons to be used for
834
 *     files. Defaults to the value of the "file_icon_directory" variable.
835
 *   - alt: (optional) The alternative text to represent the icon in text-based
836
 *     browsers. Defaults to an empty string.
837
 *
838
 * @ingroup themeable
839
 */
840
function theme_file_icon($variables) {
841
  $file = $variables['file'];
842
  $alt = $variables['alt'];
843
  $icon_directory = $variables['icon_directory'];
844

    
845
  $mime = check_plain($file->filemime);
846
  $icon_url = file_icon_url($file, $icon_directory);
847
  return '<img class="file-icon" alt="' . check_plain($alt) . '" title="' . $mime . '" src="' . $icon_url . '" />';
848
}
849

    
850
/**
851
 * Creates a URL to the icon for a file object.
852
 *
853
 * @param $file
854
 *   A file object.
855
 * @param $icon_directory
856
 *   (optional) A path to a directory of icons to be used for files. Defaults to
857
 *   the value of the "file_icon_directory" variable.
858
 *
859
 * @return
860
 *   A URL string to the icon, or FALSE if an appropriate icon cannot be found.
861
 */
862
function file_icon_url($file, $icon_directory = NULL) {
863
  if ($icon_path = file_icon_path($file, $icon_directory)) {
864
    return base_path() . $icon_path;
865
  }
866
  return FALSE;
867
}
868

    
869
/**
870
 * Creates a path to the icon for a file object.
871
 *
872
 * @param $file
873
 *   A file object.
874
 * @param $icon_directory
875
 *   (optional) A path to a directory of icons to be used for files. Defaults to
876
 *   the value of the "file_icon_directory" variable.
877
 *
878
 * @return
879
 *   A string to the icon as a local path, or FALSE if an appropriate icon could
880
 *   not be found.
881
 */
882
function file_icon_path($file, $icon_directory = NULL) {
883
  // Use the default set of icons if none specified.
884
  if (!isset($icon_directory)) {
885
    $icon_directory = variable_get('file_icon_directory', drupal_get_path('module', 'file') . '/icons');
886
  }
887

    
888
  // If there's an icon matching the exact mimetype, go for it.
889
  $dashed_mime = strtr($file->filemime, array('/' => '-'));
890
  $icon_path = $icon_directory . '/' . $dashed_mime . '.png';
891
  if (file_exists($icon_path)) {
892
    return $icon_path;
893
  }
894

    
895
  // For a few mimetypes, we can "manually" map to a generic icon.
896
  $generic_mime = (string) file_icon_map($file);
897
  $icon_path = $icon_directory . '/' . $generic_mime . '.png';
898
  if ($generic_mime && file_exists($icon_path)) {
899
    return $icon_path;
900
  }
901

    
902
  // Use generic icons for each category that provides such icons.
903
  foreach (array('audio', 'image', 'text', 'video') as $category) {
904
    if (strpos($file->filemime, $category . '/') === 0) {
905
      $icon_path = $icon_directory . '/' . $category . '-x-generic.png';
906
      if (file_exists($icon_path)) {
907
        return $icon_path;
908
      }
909
    }
910
  }
911

    
912
  // Try application-octet-stream as last fallback.
913
  $icon_path = $icon_directory . '/application-octet-stream.png';
914
  if (file_exists($icon_path)) {
915
    return $icon_path;
916
  }
917

    
918
  // No icon can be found.
919
  return FALSE;
920
}
921

    
922
/**
923
 * Determines the generic icon MIME package based on a file's MIME type.
924
 *
925
 * @param $file
926
 *   A file object.
927
 *
928
 * @return
929
 *   The generic icon MIME package expected for this file.
930
 */
931
function file_icon_map($file) {
932
  switch ($file->filemime) {
933
    // Word document types.
934
    case 'application/msword':
935
    case 'application/vnd.ms-word.document.macroEnabled.12':
936
    case 'application/vnd.oasis.opendocument.text':
937
    case 'application/vnd.oasis.opendocument.text-template':
938
    case 'application/vnd.oasis.opendocument.text-master':
939
    case 'application/vnd.oasis.opendocument.text-web':
940
    case 'application/vnd.openxmlformats-officedocument.wordprocessingml.document':
941
    case 'application/vnd.stardivision.writer':
942
    case 'application/vnd.sun.xml.writer':
943
    case 'application/vnd.sun.xml.writer.template':
944
    case 'application/vnd.sun.xml.writer.global':
945
    case 'application/vnd.wordperfect':
946
    case 'application/x-abiword':
947
    case 'application/x-applix-word':
948
    case 'application/x-kword':
949
    case 'application/x-kword-crypt':
950
      return 'x-office-document';
951

    
952
    // Spreadsheet document types.
953
    case 'application/vnd.ms-excel':
954
    case 'application/vnd.ms-excel.sheet.macroEnabled.12':
955
    case 'application/vnd.oasis.opendocument.spreadsheet':
956
    case 'application/vnd.oasis.opendocument.spreadsheet-template':
957
    case 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet':
958
    case 'application/vnd.stardivision.calc':
959
    case 'application/vnd.sun.xml.calc':
960
    case 'application/vnd.sun.xml.calc.template':
961
    case 'application/vnd.lotus-1-2-3':
962
    case 'application/x-applix-spreadsheet':
963
    case 'application/x-gnumeric':
964
    case 'application/x-kspread':
965
    case 'application/x-kspread-crypt':
966
      return 'x-office-spreadsheet';
967

    
968
    // Presentation document types.
969
    case 'application/vnd.ms-powerpoint':
970
    case 'application/vnd.ms-powerpoint.presentation.macroEnabled.12':
971
    case 'application/vnd.oasis.opendocument.presentation':
972
    case 'application/vnd.oasis.opendocument.presentation-template':
973
    case 'application/vnd.openxmlformats-officedocument.presentationml.presentation':
974
    case 'application/vnd.stardivision.impress':
975
    case 'application/vnd.sun.xml.impress':
976
    case 'application/vnd.sun.xml.impress.template':
977
    case 'application/x-kpresenter':
978
      return 'x-office-presentation';
979

    
980
    // Compressed archive types.
981
    case 'application/zip':
982
    case 'application/x-zip':
983
    case 'application/stuffit':
984
    case 'application/x-stuffit':
985
    case 'application/x-7z-compressed':
986
    case 'application/x-ace':
987
    case 'application/x-arj':
988
    case 'application/x-bzip':
989
    case 'application/x-bzip-compressed-tar':
990
    case 'application/x-compress':
991
    case 'application/x-compressed-tar':
992
    case 'application/x-cpio-compressed':
993
    case 'application/x-deb':
994
    case 'application/x-gzip':
995
    case 'application/x-java-archive':
996
    case 'application/x-lha':
997
    case 'application/x-lhz':
998
    case 'application/x-lzop':
999
    case 'application/x-rar':
1000
    case 'application/x-rpm':
1001
    case 'application/x-tzo':
1002
    case 'application/x-tar':
1003
    case 'application/x-tarz':
1004
    case 'application/x-tgz':
1005
      return 'package-x-generic';
1006

    
1007
    // Script file types.
1008
    case 'application/ecmascript':
1009
    case 'application/javascript':
1010
    case 'application/mathematica':
1011
    case 'application/vnd.mozilla.xul+xml':
1012
    case 'application/x-asp':
1013
    case 'application/x-awk':
1014
    case 'application/x-cgi':
1015
    case 'application/x-csh':
1016
    case 'application/x-m4':
1017
    case 'application/x-perl':
1018
    case 'application/x-php':
1019
    case 'application/x-ruby':
1020
    case 'application/x-shellscript':
1021
    case 'text/vnd.wap.wmlscript':
1022
    case 'text/x-emacs-lisp':
1023
    case 'text/x-haskell':
1024
    case 'text/x-literate-haskell':
1025
    case 'text/x-lua':
1026
    case 'text/x-makefile':
1027
    case 'text/x-matlab':
1028
    case 'text/x-python':
1029
    case 'text/x-sql':
1030
    case 'text/x-tcl':
1031
      return 'text-x-script';
1032

    
1033
    // HTML aliases.
1034
    case 'application/xhtml+xml':
1035
      return 'text-html';
1036

    
1037
    // Executable types.
1038
    case 'application/x-macbinary':
1039
    case 'application/x-ms-dos-executable':
1040
    case 'application/x-pef-executable':
1041
      return 'application-x-executable';
1042

    
1043
    default:
1044
      return FALSE;
1045
  }
1046
}
1047

    
1048
/**
1049
 * @defgroup file-module-api File module public API functions
1050
 * @{
1051
 * These functions may be used to determine if and where a file is in use.
1052
 */
1053

    
1054
/**
1055
 * Retrieves a list of references to a file.
1056
 *
1057
 * @param $file
1058
 *   A file object.
1059
 * @param $field
1060
 *   (optional) A field array to be used for this check. If given, limits the
1061
 *   reference check to the given field.
1062
 * @param $age
1063
 *   (optional) A constant that specifies which references to count. Use
1064
 *   FIELD_LOAD_REVISION to retrieve all references within all revisions or
1065
 *   FIELD_LOAD_CURRENT to retrieve references only in the current revisions.
1066
 * @param $field_type
1067
 *   (optional) The name of a field type. If given, limits the reference check
1068
 *   to fields of the given type.
1069
 *
1070
 * @return
1071
 *   An integer value.
1072
 */
1073
function file_get_file_references($file, $field = NULL, $age = FIELD_LOAD_REVISION, $field_type = 'file') {
1074
  $references = drupal_static(__FUNCTION__, array());
1075
  $fields = isset($field) ? array($field['field_name'] => $field) : field_info_fields();
1076

    
1077
  foreach ($fields as $field_name => $file_field) {
1078
    if ((empty($field_type) || $file_field['type'] == $field_type) && !isset($references[$field_name])) {
1079
      // Get each time this file is used within a field.
1080
      $query = new EntityFieldQuery();
1081
      $query
1082
        ->fieldCondition($file_field, 'fid', $file->fid)
1083
        ->age($age);
1084
      $references[$field_name] = $query->execute();
1085
    }
1086
  }
1087

    
1088
  return isset($field) ? $references[$field['field_name']] : array_filter($references);
1089
}
1090

    
1091
/**
1092
 * @} End of "defgroup file-module-api".
1093
 */