{

/** @var auth */

protected $auth;

/** @var config */

protected $config;

/** @var content_visibility */

protected $content_visibility;

/** @var dispatcher_interface */

protected $dispatcher;

/** @var language */

protected $language;

/** @var request */

protected $request;

/** @var user */

protected $user;

/**

public function __construct(auth $auth, service $cache, config $config, content_visibility $content_visibility, driver_interface $db, dispatcher_interface $dispatcher, language $language, request $request, storage $storage, symfony_request $symfony_request, user $user)

{

parent::__construct($cache, $db, $storage, $symfony_request);

$this->auth = $auth;

$this->config = $config;

$this->content_visibility = $content_visibility;

$this->dispatcher = $dispatcher;

$this->language = $language;

$this->request = $request;

$this->user = $user;

}

/**

public function handle_attachment(int $id, string $filename): Response

{

$attach_id = $id;

$thumbnail = $this->request->variable('t', false);

$this->language->add_lang('viewtopic');

if (!$this->config['allow_attachments'] && !$this->config['allow_pm_attach'])

{

throw new http_exception(404, 'ATTACHMENT_FUNCTIONALITY_DISABLED');

}

if (!$attach_id)

{

throw new http_exception(404, 'NO_ATTACHMENT_SELECTED');

}

$sql = 'SELECT attach_id, post_msg_id, topic_id, in_message, poster_id,

FROM ' . ATTACHMENTS_TABLE . "

WHERE attach_id = $attach_id" .

(($filename) ? " AND real_filename = '" . $this->db->sql_escape($filename) . "'" : '');

$result = $this->db->sql_query($sql);

$attachment = $this->db->sql_fetchrow($result);

$this->db->sql_freeresult($result);

if (!$attachment)

{

throw new http_exception(404, 'ERROR_NO_ATTACHMENT');

}

else if (!$this->download_allowed())

{

throw new http_exception(403, 'LINKAGE_FORBIDDEN');

}

$attachment['physical_filename'] = utf8_basename($attachment['physical_filename']);

if ((!$attachment['in_message'] && !$this->config['allow_attachments']) ||

($attachment['in_message'] && !$this->config['allow_pm_attach']))

{

throw new http_exception(404, 'ATTACHMENT_FUNCTIONALITY_DISABLED');

}

if ($attachment['is_orphan'])

{

// We allow admins having attachment permissions to see orphan attachments...

$own_attachment = $this->auth->acl_get('a_attach') || $attachment['poster_id'] == $this->user->data['user_id'];

if (!$own_attachment || ($attachment['in_message'] && !$this->auth->acl_get('u_pm_download')) ||

(!$attachment['in_message'] && !$this->auth->acl_get('u_download')))

{

throw new http_exception(404, 'ERROR_NO_ATTACHMENT');

}

// Obtain all extensions...

$extensions = $this->cache->obtain_attach_extensions(true);

}

else

{

if (!$attachment['in_message'])

{

$this->phpbb_download_handle_forum_auth($attachment['topic_id']);

$sql = 'SELECT forum_id, poster_id, post_visibility

FROM ' . POSTS_TABLE . '

WHERE post_id = ' . (int) $attachment['post_msg_id'];

$result = $this->db->sql_query($sql);

$post_row = $this->db->sql_fetchrow($result);

$this->db->sql_freeresult($result);

if (!$post_row || !$this->content_visibility->is_visible('post', $post_row['forum_id'], $post_row))

{

// Attachment of a soft deleted post and the user is not allowed to see the post

throw new http_exception(404, 'ERROR_NO_ATTACHMENT');

}

}

else

{

// Attachment is in a private message.

$post_row = array('forum_id' => false);

$this->phpbb_download_handle_pm_auth( $attachment['post_msg_id']);

}

$extensions = array();

if (!extension_allowed($post_row['forum_id'], $attachment['extension'], $extensions))

{

throw new http_exception(403, 'EXTENSION_DISABLED_AFTER_POSTING', [$attachment['extension']]);

}

}

$display_cat = $extensions[$attachment['extension']]['display_cat'];

if ($thumbnail)

{

$attachment['physical_filename'] = 'thumb_' . $attachment['physical_filename'];

}

else if ($display_cat == attachment_category::NONE && !$attachment['is_orphan'])

{

if (!(($display_cat == attachment_category::IMAGE || $display_cat == attachment_category::THUMB) && !$this->user->optionget('viewimg')))

{

// Update download count

$this->phpbb_increment_downloads($attachment['attach_id']);

}

}

$redirect = '';

/**

$vars = array(

'attach_id',

'attachment',

'extensions',

'thumbnail',

'redirect',

);

extract($this->dispatcher->trigger_event('core.download_file_send_to_browser_before', compact($vars)));

// If the redirect variable have been overwritten, do redirect there

if (!empty($redirect))

{

return new RedirectResponse($redirect);

}

// Check if the file exists in the storage table too

if (!$this->storage->exists($attachment['physical_filename']))

{

throw new http_exception(404, 'ERROR_NO_ATTACHMENT');

}

/**

$vars = array(

'attachment',

);

extract($this->dispatcher->trigger_event('core.send_file_to_browser_before', compact($vars)));

// TODO: The next lines should go better in prepare, also the mimetype is handled by the storage table

// so probably can be removed

$response = new StreamedResponse();

// Content-type header

$response->headers->set('Content-Type', $attachment['mimetype']);

// Display file types in browser and force download for others

if (strpos($attachment['mimetype'], 'image') !== false

|| strpos($attachment['mimetype'], 'audio') !== false

|| strpos($attachment['mimetype'], 'video') !== false

)

{

$disposition = $response->headers->makeDisposition(

ResponseHeaderBag::DISPOSITION_INLINE,

$attachment['real_filename'],

$this->filenameFallback($attachment['real_filename'])

);

}

else

{

$disposition = $response->headers->makeDisposition(

ResponseHeaderBag::DISPOSITION_ATTACHMENT,

$attachment['real_filename'],

$this->filenameFallback($attachment['real_filename'])

);

}

$response->headers->set('Content-Disposition', $disposition);

// Set expires header for browser cache

$time = new \DateTime();

$response->setExpires($time->modify('+1 year'));

return parent::handle($attachment['physical_filename']);

}

/**

protected function filenameFallback($filename)

{

$filename = preg_replace(['/[^\x20-\x7e]/', '/%/', '/\//', '/\\\\/'], '', $filename);

return (!empty($filename)) ?: 'File';

}

/**

protected function prepare(StreamedResponse $response, string $file): void

{

$response->setPrivate(); // By default should be private, but make sure of it

parent::prepare($response, $file);

}

/**

protected function phpbb_download_handle_forum_auth(int $topic_id): void

{

$sql_array = [

'SELECT' => 't.forum_id, t.topic_poster, t.topic_visibility, f.forum_name, f.forum_password, f.parent_id',

'FROM' => [

TOPICS_TABLE => 't',

FORUMS_TABLE => 'f',

],

'WHERE' => 't.topic_id = ' . (int) $topic_id . '

AND t.forum_id = f.forum_id',

];

$sql = $this->db->sql_build_query('SELECT', $sql_array);

$result = $this->db->sql_query($sql);

$row = $this->db->sql_fetchrow($result);

$this->db->sql_freeresult($result);

if ($row && !$this->content_visibility->is_visible('topic', $row['forum_id'], $row))

{

throw new http_exception(404, 'ERROR_NO_ATTACHMENT');

}

else if ($row && $this->auth->acl_get('u_download') && $this->auth->acl_get('f_download', $row['forum_id']))

{

if ($row['forum_password'])

{

// Do something else ... ?

login_forum_box($row);

}

}

else

{

throw new http_exception(403, 'SORRY_AUTH_VIEW_ATTACH');

}

}

/**

protected function phpbb_download_handle_pm_auth(int $msg_id): void

{

if (!$this->auth->acl_get('u_pm_download'))

{

throw new http_exception(403, 'SORRY_AUTH_VIEW_ATTACH');

}

$allowed = $this->phpbb_download_check_pm_auth($msg_id);

/**

$vars = array('allowed', 'msg_id', 'user_id');

extract($this->dispatcher->trigger_event('core.modify_pm_attach_download_auth', compact($vars)));

if (!$allowed)

{

throw new http_exception(403, 'ERROR_NO_ATTACHMENT');

}

}

/**

protected function phpbb_download_check_pm_auth(int $msg_id): bool

{

$user_id = $this->user->data['user_id'];

// Check if the attachment is within the users scope...

$sql = 'SELECT msg_id

FROM ' . PRIVMSGS_TO_TABLE . '

WHERE msg_id = ' . (int) $msg_id . '

user_id = ' . (int) $user_id . '

OR author_id = ' . (int) $user_id . '

)';

$result = $this->db->sql_query_limit($sql, 1);

$allowed = (bool) $this->db->sql_fetchfield('msg_id');

$this->db->sql_freeresult($result);

return $allowed;

}

/**

protected function phpbb_increment_downloads(int $id): void

{

$sql = 'UPDATE ' . ATTACHMENTS_TABLE . '

WHERE attach_id = ' . $id;

$this->db->sql_query($sql);

}

/**

protected function download_allowed(): bool

{

if (!$this->config['secure_downloads'])

{

return true;

}

$url = htmlspecialchars_decode($this->request->header('Referer'));

if (!$url)

{

return ($this->config['secure_allow_empty_referer']) ? true : false;

}

// Split URL into domain and script part

$url = @parse_url($url);

if ($url === false)

{

return ($this->config['secure_allow_empty_referer']) ? true : false;

}

$hostname = $url['host'];

unset($url);

$allowed = ($this->config['secure_allow_deny']) ? false : true;

$iplist = array();

if (($ip_ary = @gethostbynamel($hostname)) !== false)

{

foreach ($ip_ary as $ip)

{

if ($ip)

{

$iplist[] = $ip;

}

}

}

// Check for own server...

$server_name = $this->user->host;

// Forcing server vars is the only way to specify/override the protocol

if ($this->config['force_server_vars'] || !$server_name)

{

$server_name = $this->config['server_name'];

}

if (preg_match('#^.*?' . preg_quote($server_name, '#') . '.*?$#i', $hostname))

{

$allowed = true;

}

// Get IP's and Hostnames

if (!$allowed)

{

$sql = 'SELECT site_ip, site_hostname, ip_exclude

FROM ' . SITELIST_TABLE;

$result = $this->db->sql_query($sql);

while ($row = $this->db->sql_fetchrow($result))

{

$site_ip = trim($row['site_ip']);

$site_hostname = trim($row['site_hostname']);

if ($site_ip)

{

foreach ($iplist as $ip)

{

if (preg_match('#^' . str_replace('\*', '.*?', preg_quote($site_ip, '#')) . '$#i', $ip))

{

if ($row['ip_exclude'])

{

$allowed = ($this->config['secure_allow_deny']) ? false : true;

break 2;

}

else

{

$allowed = ($this->config['secure_allow_deny']) ? true : false;

}

}

}

}

if ($site_hostname)

{

if (preg_match('#^' . str_replace('\*', '.*?', preg_quote($site_hostname, '#')) . '$#i', $hostname))

{

if ($row['ip_exclude'])

{

$allowed = ($this->config['secure_allow_deny']) ? false : true;

break;

}

else

{

$allowed = ($this->config['secure_allow_deny']) ? true : false;

}

}

}

}

$this->db->sql_freeresult($result);

}

return $allowed;

}