<?php
/**
* Media Library uploads for subscription: file-utenti / {user slug} / bonifico | certificato
*/
if ( ! defined( 'ABSPATH' ) ) {
exit;
}
class WP_OJS_SSO_Subscription_Media {
public const KIND_BONIFICO = 'bonifico';
public const KIND_CERTIFICATO = 'certificato';
private const BASE_DIR = 'file-utenti';
private static $max_size = 10485760; // 10 MB
private static $allowed_mimes = [ 'application/pdf', 'image/jpeg', 'image/png' ];
/** @var string|null */
private static $filter_subdir = null;
/** @var bool */
private static $bypass_upload_cap = false;
public static function max_size() {
return self::$max_size;
}
public static function allowed_mimes() {
return self::$allowed_mimes;
}
/**
* Public folder under wp-content/uploads: file-utenti/{slug}/bonifico|certificato
*/
public static function get_user_folder_slug( $user_id ) {
$user = get_userdata( (int) $user_id );
if ( ! $user ) {
return 'user-' . (int) $user_id;
}
$slug = sanitize_file_name( $user->user_nicename );
if ( $slug === '' ) {
$slug = 'user-' . (int) $user_id;
}
return $slug;
}
/**
* Relative subdir under basedir, no leading/trailing slash issues (leading slash for subdir in WP is ok).
*/
public static function get_subdir( $user_id, $kind ) {
$slug = self::get_user_folder_slug( $user_id );
return self::BASE_DIR . '/' . $slug . '/' . $kind;
}
/**
* @param string $kind self::KIND_*
*/
public static function handle_upload( $user_id, $file_key, $kind ) {
$user_id = (int) $user_id;
if ( $user_id < 1 || ( self::KIND_BONIFICO !== $kind && self::KIND_CERTIFICATO !== $kind ) ) {
return new WP_Error( 'invalid_args', __( 'Invalid upload request.', 'wp-ojs-sso-bridge' ) );
}
if ( empty( $_FILES[ $file_key ]['name'] ) ) {
return null;
}
$file = $_FILES[ $file_key ];
if ( $file['error'] !== UPLOAD_ERR_OK ) {
return new WP_Error( 'upload_error', __( 'File upload failed.', 'wp-ojs-sso-bridge' ) );
}
if ( $file['size'] > self::$max_size ) {
return new WP_Error( 'file_too_large', __( 'The file exceeds the maximum size of 10 MB.', 'wp-ojs-sso-bridge' ) );
}
$finfo = finfo_open( FILEINFO_MIME_TYPE );
$mimetype = finfo_file( $finfo, $file['tmp_name'] );
finfo_close( $finfo );
if ( ! in_array( $mimetype, self::$allowed_mimes, true ) ) {
return new WP_Error( 'invalid_type', __( 'Only PDF, JPG and PNG files are allowed.', 'wp-ojs-sso-bridge' ) );
}
if ( ! function_exists( 'media_handle_upload' ) ) {
require_once ABSPATH . 'wp-admin/includes/file.php';
require_once ABSPATH . 'wp-admin/includes/image.php';
require_once ABSPATH . 'wp-admin/includes/media.php';
}
$old_attachment_id = self::get_attachment_id( $user_id, $kind );
$old_legacy_path = ( self::KIND_CERTIFICATO === $kind ) ? self::get_legacy_path( $user_id ) : '';
$upload_dir = wp_upload_dir();
$subdir = self::get_subdir( $user_id, $kind );
$abs_target_dir = $upload_dir['basedir'] . '/' . $subdir;
if ( ! is_dir( $abs_target_dir ) ) {
wp_mkdir_p( $abs_target_dir );
}
self::$filter_subdir = $subdir;
add_filter( 'upload_dir', [ __CLASS__, 'filter_upload_dir' ] );
self::$bypass_upload_cap = true;
add_filter( 'user_has_cap', [ __CLASS__, 'filter_user_has_cap' ], 10, 4 );
$prev = get_current_user_id();
wp_set_current_user( $user_id );
// Use default $overrides (test_form => false) so registration without admin POST still works.
$attach_id = media_handle_upload( $file_key, 0 );
wp_set_current_user( $prev );
remove_filter( 'user_has_cap', [ __CLASS__, 'filter_user_has_cap' ], 10 );
self::$bypass_upload_cap = false;
remove_filter( 'upload_dir', [ __CLASS__, 'filter_upload_dir' ] );
self::$filter_subdir = null;
if ( is_wp_error( $attach_id ) ) {
if ( is_array( $file ) && ! empty( $file['name'] ) ) {
// phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_error_log
error_log( '[wp-ojs-sso-bridge] media upload failed: ' . $attach_id->get_error_message() );
}
return $attach_id;
}
wp_update_post(
[
'ID' => (int) $attach_id,
'post_author' => $user_id,
]
);
if ( $old_attachment_id && (int) $old_attachment_id !== (int) $attach_id ) {
wp_delete_attachment( (int) $old_attachment_id, true );
} elseif ( $old_legacy_path && file_exists( $old_legacy_path ) ) {
@unlink( $old_legacy_path );
}
if ( self::KIND_BONIFICO === $kind ) {
update_user_meta( $user_id, 'ojs_bonifico_attachment_id', (string) (int) $attach_id );
} else {
update_user_meta( $user_id, 'ojs_student_document', (string) (int) $attach_id );
}
return (int) $attach_id;
}
public static function filter_upload_dir( $dirs ) {
if ( ! self::$filter_subdir ) {
return $dirs;
}
$subdir = self::$filter_subdir;
$dirs['subdir'] = '/' . ltrim( $subdir, '/' );
$dirs['path'] = $dirs['basedir'] . $dirs['subdir'];
$dirs['url'] = $dirs['baseurl'] . $dirs['subdir'];
return $dirs;
}
public static function filter_user_has_cap( $allcaps, $caps, $args, $user ) {
if ( ! self::$bypass_upload_cap || empty( $caps ) ) {
return $allcaps;
}
if ( in_array( 'upload_files', (array) $caps, true ) || ( isset( $args[0] ) && 'upload_files' === $args[0] ) ) {
$allcaps['upload_files'] = true;
}
return $allcaps;
}
/**
* @return int|string path for legacy, int attachment id, or empty
*/
public static function get_student_meta_value( $user_id ) {
return get_user_meta( (int) $user_id, 'ojs_student_document', true );
}
/**
* @return int|string
*/
public static function get_legacy_path( $user_id ) {
$v = self::get_student_meta_value( $user_id );
if ( $v && is_string( $v ) && false !== strpos( $v, 'ojs-sso-bridge' ) ) {
return $v;
}
if ( $v && is_string( $v ) && ! is_numeric( $v ) && ( ( false !== strpos( $v, '/' ) && file_exists( $v ) ) || ( false !== strpos( $v, '\\' ) && file_exists( $v ) ) ) ) {
return $v;
}
return '';
}
/**
* @param string $kind KIND_BONIFICO|KIND_CERTIFICATO
*/
public static function get_attachment_id( $user_id, $kind ) {
$user_id = (int) $user_id;
if ( self::KIND_BONIFICO === $kind ) {
$v = get_user_meta( $user_id, 'ojs_bonifico_attachment_id', true );
return ( $v && (int) $v > 0 ) ? (int) $v : 0;
}
$v = self::get_student_meta_value( $user_id );
if ( $v && is_numeric( $v ) && (int) $v > 0 && 'attachment' === get_post_type( (int) $v ) ) {
return (int) $v;
}
return 0;
}
/**
* @param string $kind KIND_*
*/
public static function has_stored_file( $user_id, $kind ) {
if ( self::KIND_BONIFICO === $kind ) {
$id = self::get_attachment_id( $user_id, $kind );
if ( $id > 0 && get_post( $id ) ) {
return true;
}
return false;
}
if ( self::get_attachment_id( $user_id, $kind ) > 0 ) {
return true;
}
$legacy = self::get_legacy_path( $user_id );
return $legacy && is_readable( $legacy );
}
/**
* @param string $kind KIND_*
*/
public static function get_edit_link( $user_id, $kind ) {
$id = self::get_attachment_id( $user_id, $kind );
if ( $id < 1 ) {
return '';
}
if ( current_user_can( 'edit_post', $id ) ) {
$link = get_edit_post_link( $id, 'raw' );
return $link ? $link : '';
}
$url = wp_get_attachment_url( $id );
return $url ? $url : '';
}
/**
* @param string $kind KIND_*
*/
public static function get_file_label( $user_id, $kind ) {
$id = self::get_attachment_id( $user_id, $kind );
if ( $id > 0 ) {
$p = get_post( $id );
return $p ? $p->post_title : (string) $id;
}
if ( self::KIND_CERTIFICATO === $kind ) {
$legacy = self::get_legacy_path( $user_id );
if ( $legacy ) {
return basename( $legacy );
}
}
return '';
}
/**
* @param int[] $user_ids
*/
public static function on_delete_user( $user_id ) {
$user_id = (int) $user_id;
$b = self::get_attachment_id( $user_id, self::KIND_BONIFICO );
if ( $b > 0 ) {
wp_delete_attachment( $b, true );
}
$s = self::get_attachment_id( $user_id, self::KIND_CERTIFICATO );
if ( $s > 0 ) {
wp_delete_attachment( $s, true );
}
$legacy = self::get_legacy_path( $user_id );
if ( $legacy && is_file( $legacy ) ) {
@unlink( $legacy );
}
$old_dir = WP_OJS_SSO_File_Upload::get_upload_dir( $user_id );
if ( is_dir( $old_dir ) ) {
$files = glob( $old_dir . '/*' );
if ( $files ) {
array_map( 'unlink', array_filter( $files, 'is_file' ) );
}
@rmdir( $old_dir );
}
}
}
