MultipartRequestSupport.php 3.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123
  1. <?php declare(strict_types=1);
  2. /**
  3. * @package Grav\Framework\RequestHandler
  4. *
  5. * @copyright Copyright (c) 2015 - 2022 Trilby Media, LLC. All rights reserved.
  6. * @license MIT License; see LICENSE file for details.
  7. */
  8. namespace Grav\Framework\RequestHandler\Middlewares;
  9. use Grav\Framework\Psr7\UploadedFile;
  10. use Nyholm\Psr7\Stream;
  11. use Psr\Http\Message\ResponseInterface;
  12. use Psr\Http\Message\ServerRequestInterface;
  13. use Psr\Http\Message\UploadedFileInterface;
  14. use Psr\Http\Server\MiddlewareInterface;
  15. use Psr\Http\Server\RequestHandlerInterface;
  16. use function array_slice;
  17. use function count;
  18. use function in_array;
  19. use function is_array;
  20. use function strlen;
  21. /**
  22. * Multipart request support for PUT and PATCH.
  23. */
  24. class MultipartRequestSupport implements MiddlewareInterface
  25. {
  26. /**
  27. * @param ServerRequestInterface $request
  28. * @param RequestHandlerInterface $handler
  29. * @return ResponseInterface
  30. */
  31. public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
  32. {
  33. $contentType = $request->getHeaderLine('content-type');
  34. $method = $request->getMethod();
  35. if (!str_starts_with($contentType, 'multipart/form-data') || !in_array($method, ['PUT', 'PATH'], true)) {
  36. return $handler->handle($request);
  37. }
  38. $boundary = explode('; boundary=', $contentType, 2)[1] ?? '';
  39. $parts = explode("--{$boundary}", $request->getBody()->getContents());
  40. $parts = array_slice($parts, 1, count($parts) - 2);
  41. $params = [];
  42. $files = [];
  43. foreach ($parts as $part) {
  44. $this->processPart($params, $files, $part);
  45. }
  46. return $handler->handle($request->withParsedBody($params)->withUploadedFiles($files));
  47. }
  48. /**
  49. * @param array $params
  50. * @param array $files
  51. * @param string $part
  52. * @return void
  53. */
  54. protected function processPart(array &$params, array &$files, string $part): void
  55. {
  56. $part = ltrim($part, "\r\n");
  57. [$rawHeaders, $body] = explode("\r\n\r\n", $part, 2);
  58. // Parse headers.
  59. $rawHeaders = explode("\r\n", $rawHeaders);
  60. $headers = array_reduce(
  61. $rawHeaders,
  62. static function (array $headers, $header) {
  63. [$name, $value] = explode(':', $header);
  64. $headers[strtolower($name)] = ltrim($value, ' ');
  65. return $headers;
  66. },
  67. []
  68. );
  69. if (!isset($headers['content-disposition'])) {
  70. return;
  71. }
  72. // Parse content disposition header.
  73. $contentDisposition = $headers['content-disposition'];
  74. preg_match('/^(.+); *name="([^"]+)"(; *filename="([^"]+)")?/', $contentDisposition, $matches);
  75. $name = $matches[2];
  76. $filename = $matches[4] ?? null;
  77. if ($filename !== null) {
  78. $stream = Stream::create($body);
  79. $this->addFile($files, $name, new UploadedFile($stream, strlen($body), UPLOAD_ERR_OK, $filename, $headers['content-type'] ?? null));
  80. } elseif (strpos($contentDisposition, 'filename') !== false) {
  81. // Not uploaded file.
  82. $stream = Stream::create('');
  83. $this->addFile($files, $name, new UploadedFile($stream, 0, UPLOAD_ERR_NO_FILE));
  84. } else {
  85. // Regular field.
  86. $params[$name] = substr($body, 0, -2);
  87. }
  88. }
  89. /**
  90. * @param array $files
  91. * @param string $name
  92. * @param UploadedFileInterface $file
  93. * @return void
  94. */
  95. protected function addFile(array &$files, string $name, UploadedFileInterface $file): void
  96. {
  97. if (strpos($name, '[]') === strlen($name) - 2) {
  98. $name = substr($name, 0, -2);
  99. if (isset($files[$name]) && is_array($files[$name])) {
  100. $files[$name][] = $file;
  101. } else {
  102. $files[$name] = [$file];
  103. }
  104. } else {
  105. $files[$name] = $file;
  106. }
  107. }
  108. }