Proyectos de Subversion LeadersLinked - Services

    public function dataStorageAction()

    {

        $request = $this->getRequest();

        if ($request->isGet()) {

            $type = $this->params()->fromRoute('type');

            $uuid = $this->params()->fromRoute('uuid');

            $filename = $this->params()->fromRoute('filename');

            if(empty($type) || empty($uuid) || empty($filename)) {

                return $this->getResponse()->setStatusCode(404);

            }

            // Map type to config key

            $configKey = 'leaderslinked.fullpath.' . $type;

            if(!isset($this->config[$configKey])) {

                return $this->getResponse()->setStatusCode(404);

            }

            // Build the file path using the configured base path

            $basePath = $this->config[$configKey];

            $filePath = $basePath . $uuid . DIRECTORY_SEPARATOR . $filename;

            // Security check: ensure the path is within the allowed directory

            $realFilePath = realpath($filePath);

            $realBasePath = realpath($basePath);

            if(!$realFilePath || !$realBasePath || strpos($realFilePath, $realBasePath) !== 0) {

                return $this->getResponse()->setStatusCode(403);

            }

            if(file_exists($realFilePath)) {

                // Try to open file

                if (!is_readable($realFilePath)) {

                    return $this->getResponse()->setStatusCode(500);

                }

                // Get file size in bytes.

                $fileSize = filesize($realFilePath);

                // Get MIME type of the file.

                $mimeType = mime_content_type($realFilePath);

                if($mimeType===false) {

                    $mimeType = 'application/octet-stream';

                }

                $fileContent = file_get_contents($realFilePath);

                $response = $this->getResponse();

                $headers = $response->getHeaders();

                $headers->addHeaderLine('Content-type: ' . $mimeType);

                $headers->addHeaderLine('Content-length: ' . $fileSize);

                if($fileContent!==false) {

                    $response->setContent($fileContent);

                    return $response;

                } else {

                    return $this->getResponse()->setStatusCode(500);

                }

            } else {

                return $this->getResponse()->setStatusCode(404);

            }

        } else {

            $data = [

                'success' => false,

                'data' => 'ERROR_METHOD_NOT_ALLOWED'

            ];

            return new JsonModel($data);

        }

    }