1730c9fb00
All checks were successful
Deploy bericht / deploy (push) Successful in 1s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
68 lines
2.7 KiB
PHP
68 lines
2.7 KiB
PHP
<?php
|
|
/* Listet vorhandene Fotos im Upload-Ordner des Objekts auf.
|
|
* Authentifizierung über Token in der URL.
|
|
*
|
|
* GET: token
|
|
* Response: JSON { success: true, photos: [{ filename, url, size, date }] }
|
|
*/
|
|
|
|
if (!defined('NOLOGIN')) define('NOLOGIN', '1');
|
|
if (!defined('NOCSRFCHECK')) define('NOCSRFCHECK', '1');
|
|
if (!defined('NOTOKENRENEWAL')) define('NOTOKENRENEWAL', '1');
|
|
if (!defined('NOREQUIREMENU')) define('NOREQUIREMENU', '1');
|
|
if (!defined('NOREQUIREHTML')) define('NOREQUIREHTML', '1');
|
|
if (!defined('NOREQUIREAJAX')) define('NOREQUIREAJAX', '1');
|
|
|
|
$res = 0;
|
|
if (!$res && !empty($_SERVER["CONTEXT_DOCUMENT_ROOT"])) $res = @include $_SERVER["CONTEXT_DOCUMENT_ROOT"]."/main.inc.php";
|
|
$tmp = empty($_SERVER['SCRIPT_FILENAME']) ? '' : $_SERVER['SCRIPT_FILENAME']; $tmp2 = realpath(__FILE__); $i = strlen($tmp) - 1; $j = strlen($tmp2) - 1;
|
|
while ($i > 0 && $j > 0 && isset($tmp[$i]) && isset($tmp2[$j]) && $tmp[$i] == $tmp2[$j]) { $i--; $j--; }
|
|
if (!$res && $i > 0 && file_exists(substr($tmp, 0, ($i + 1))."/main.inc.php")) $res = @include substr($tmp, 0, ($i + 1))."/main.inc.php";
|
|
if (!$res && $i > 0 && file_exists(dirname(substr($tmp, 0, ($i + 1)))."/main.inc.php")) $res = @include dirname(substr($tmp, 0, ($i + 1)))."/main.inc.php";
|
|
if (!$res && file_exists("../../main.inc.php")) $res = @include "../../main.inc.php";
|
|
if (!$res && file_exists("../../../main.inc.php")) $res = @include "../../../main.inc.php";
|
|
if (!$res) die("Include of main fails");
|
|
|
|
require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
|
|
require_once __DIR__.'/../class/upload_token.class.php';
|
|
|
|
header('Content-Type: application/json; charset=utf-8');
|
|
|
|
// Token validieren
|
|
$token = (string) ($_REQUEST['token'] ?? '');
|
|
$tok = BerichtUploadToken::fetchValid($db, $token);
|
|
|
|
if (!$tok) {
|
|
http_response_code(403);
|
|
echo json_encode(array('success' => false, 'error' => 'Token ungültig oder abgelaufen'));
|
|
exit;
|
|
}
|
|
|
|
// Upload-Ordner ermitteln
|
|
$upload_dir = $tok->getUploadDir();
|
|
if (!$upload_dir || !is_dir($upload_dir)) {
|
|
echo json_encode(array('success' => true, 'photos' => array()));
|
|
exit;
|
|
}
|
|
|
|
// Bilder auflisten
|
|
$files = dol_dir_list($upload_dir, 'files', 0, '\.(jpg|jpeg|png|gif)$', '', 'date', SORT_DESC);
|
|
$photos = array();
|
|
|
|
// Relative URL zum get_photo.php (funktioniert sowohl in /custom/bericht/ als auch /bericht/)
|
|
$base_url = 'get_photo.php';
|
|
|
|
foreach ($files as $f) {
|
|
$photos[] = array(
|
|
'filename' => $f['name'],
|
|
'url' => $base_url . '?token=' . urlencode($token) . '&file=' . urlencode($f['name']),
|
|
'size' => $f['size'],
|
|
'date' => dol_print_date($f['date'], '%Y-%m-%d %H:%M'),
|
|
);
|
|
}
|
|
|
|
echo json_encode(array(
|
|
'success' => true,
|
|
'photos' => $photos,
|
|
'count' => count($photos),
|
|
));
|