vendor/pimcore/pimcore/bundles/CoreBundle/Controller/PublicServicesController.php line 47

Open in your IDE?
  1. <?php
  3. /**
  4.  * Pimcore
  5.  *
  6.  * This source file is available under two different licenses:
  7.  * - GNU General Public License version 3 (GPLv3)
  8.  * - Pimcore Commercial License (PCL)
  9.  * Full copyright and license information is available in
  10.  * LICENSE.md which is distributed with this source code.
  11.  *
  12.  *  @copyright  Copyright (c) Pimcore GmbH (http://www.pimcore.org)
  13.  *  @license    http://www.pimcore.org/license     GPLv3 and PCL
  14.  */
  16. namespace Pimcore\Bundle\CoreBundle\Controller;
  18. use function date;
  19. use function fstat;
  20. use function is_array;
  21. use Pimcore\Config;
  22. use Pimcore\Controller\Controller;
  23. use Pimcore\File;
  24. use Pimcore\Logger;
  25. use Pimcore\Model\Asset;
  26. use Pimcore\Model\Site;
  27. use Pimcore\Model\Tool\TmpStore;
  28. use Pimcore\Tool\Storage;
  29. use Symfony\Component\HttpFoundation\Cookie;
  30. use Symfony\Component\HttpFoundation\RedirectResponse;
  31. use Symfony\Component\HttpFoundation\Request;
  32. use Symfony\Component\HttpFoundation\Response;
  33. use Symfony\Component\HttpFoundation\StreamedResponse;
  34. use Symfony\Component\HttpKernel\EventListener\AbstractSessionListener;
  35. use function time;
  37. /**
  38.  * @internal
  39.  */
  40. class PublicServicesController extends Controller
  41. {
  42.     /**
  43.      * @param Request $request
  44.      *
  45.      * @return RedirectResponse|StreamedResponse
  46.      */
  47.     public function thumbnailAction(Request $request)
  48.     {
  49.         $assetId = (int) $request->get('assetId');
  50.         $thumbnailName = $request->get('thumbnailName');
  51.         $filename = $request->get('filename');
  52.         $requestedFileExtension = strtolower(File::getFileExtension($filename));
  53.         $asset = Asset::getById($assetId);
  55.         if ($asset) {
  56.             $prefix = preg_replace('@^cache-buster\-[\d]+\/@', '', $request->get('prefix'));
  57.             $prefix = preg_replace('@' . $asset->getId() . '/$@', '', $prefix);
  58.             if ($asset->getPath() === ('/' . $prefix)) {
  59.                 // we need to check the path as well, this is important in the case you have restricted the public access to
  60.                 // assets via rewrite rules
  61.                 try {
  62.                     $imageThumbnail = null;
  63.                     $thumbnailStream = null;
  65.                     // just check if the thumbnail exists -> throws exception otherwise
  66.                     $thumbnailConfig = Asset\Image\Thumbnail\Config::getByName($thumbnailName);
  68.                     if (!$thumbnailConfig) {
  69.                         // check if there's an item in the TmpStore
  70.                         // remove an eventually existing cache-buster prefix first (eg. when using with a CDN)
  71.                         $pathInfo = preg_replace('@^/cache-buster\-[\d]+@', '', $request->getPathInfo());
  72.                         $deferredConfigId = 'thumb_' . $assetId . '__' . md5(urldecode($pathInfo));
  73.                         if ($thumbnailConfigItem = TmpStore::get($deferredConfigId)) {
  74.                             $thumbnailConfig = $thumbnailConfigItem->getData();
  75.                             TmpStore::delete($deferredConfigId);
  77.                             if (!$thumbnailConfig instanceof Asset\Image\Thumbnail\Config) {
  78.                                 throw new \Exception("Deferred thumbnail config file doesn't contain a valid \\Asset\\Image\\Thumbnail\\Config object");
  79.                             }
  80.                         } elseif ($this->getParameter('pimcore.config')['assets']['image']['thumbnails']['status_cache']) {
  81.                             // Delete Thumbnail Name from Cache so the next call can generate a new TmpStore entry
  82.                             $asset->getDao()->deleteFromThumbnailCache($thumbnailName);
  83.                         }
  84.                     }
  86.                     if (!$thumbnailConfig) {
  87.                         throw $this->createNotFoundException("Thumbnail '" . $thumbnailName . "' file doesn't exist");
  88.                     }
  90.                     if (strcasecmp($thumbnailConfig->getFormat(), 'SOURCE') === 0) {
  91.                         $formatOverride = $requestedFileExtension;
  92.                         if (in_array($requestedFileExtension, ['jpg', 'jpeg'])) {
  93.                             $formatOverride = 'pjpeg';
  94.                         }
  95.                         $thumbnailConfig->setFormat($formatOverride);
  96.                     }
  98.                     if ($asset instanceof Asset\Video) {
  99.                         $time = 1;
  100.                         if (preg_match("|~\-~time\-(\d+)\.|", $filename, $matchesThumbs)) {
  101.                             $time = (int)$matchesThumbs[1];
  102.                         }
  104.                         $imageThumbnail = $asset->getImageThumbnail($thumbnailConfig, $time);
  105.                         $thumbnailStream = $imageThumbnail->getStream();
  106.                     } elseif ($asset instanceof Asset\Document) {
  107.                         $page = 1;
  108.                         if (preg_match("|~\-~page\-(\d+)\.|", $filename, $matchesThumbs)) {
  109.                             $page = (int)$matchesThumbs[1];
  110.                         }
  112.                         $thumbnailConfig->setName(preg_replace("/\-[\d]+/", '', $thumbnailConfig->getName()));
  113.                         $thumbnailConfig->setName(str_replace('document_', '', $thumbnailConfig->getName()));
  115.                         $imageThumbnail = $asset->getImageThumbnail($thumbnailConfig, $page);
  116.                         $thumbnailStream = $imageThumbnail->getStream();
  117.                     } elseif ($asset instanceof Asset\Image) {
  118.                         //check if high res image is called
  120.                         preg_match("@([^\@]+)(\@[0-9.]+x)?\.([a-zA-Z]{2,5})@", $filename, $matches);
  122.                         if (empty($matches) || !isset($matches[1])) {
  123.                             throw $this->createNotFoundException('Requested asset does not exist');
  124.                         }
  125.                         if (array_key_exists(2, $matches) && $matches[2]) {
  126.                             $highResFactor = (float)str_replace(['@', 'x'], '', $matches[2]);
  127.                             $thumbnailConfig->setHighResolution($highResFactor);
  128.                         }
  130.                         // check if a media query thumbnail was requested
  131.                         if (preg_match("#~\-~media\-\-(.*)\-\-query#", $matches[1], $mediaQueryResult)) {
  132.                             $thumbnailConfig->selectMedia($mediaQueryResult[1]);
  133.                         }
  135.                         $imageThumbnail = $asset->getThumbnail($thumbnailConfig);
  136.                         $thumbnailStream = $imageThumbnail->getStream();
  137.                     }
  139.                     if ($imageThumbnail && $thumbnailStream) {
  140.                         $pathReference = $imageThumbnail->getPathReference();
  141.                         $actualFileExtension = File::getFileExtension($pathReference['src']);
  143.                         if ($actualFileExtension !== $requestedFileExtension) {
  144.                             // create a copy/symlink to the file with the original file extension
  145.                             // this can be e.g. the case when the thumbnail is called as foo.png but the thumbnail config
  146.                             // is set to auto-optimized format so the resulting thumbnail can be jpeg
  147.                             $requestedFile = preg_replace('/\.' . $actualFileExtension . '$/', '.' . $requestedFileExtension, $pathReference['src']);
  148.                             Storage::get('thumbnail')->writeStream($requestedFile, $thumbnailStream);
  149.                         }
  151.                         // set appropriate caching headers
  152.                         // see also: https://github.com/pimcore/pimcore/blob/1931860f0aea27de57e79313b2eb212dcf69ef13/.htaccess#L86-L86
  153.                         $lifetime = 86400 * 7; // 1 week lifetime, same as direct delivery in .htaccess
  155.                         $headers = [
  156.                             'Cache-Control' => 'public, max-age=' . $lifetime,
  157.                             'Expires' => date('D, d M Y H:i:s T', time() + $lifetime),
  158.                             'Content-Type' => $imageThumbnail->getMimeType(),
  159.                         ];
  161.                         $stats = fstat($thumbnailStream);
  162.                         if (is_array($stats)) {
  163.                             $headers['Content-Length'] = $stats['size'];
  164.                         }
  166.                         $headers[AbstractSessionListener::NO_AUTO_CACHE_CONTROL_HEADER] = true;
  168.                         return new StreamedResponse(function () use ($thumbnailStream) {
  169.                             fpassthru($thumbnailStream);
  170.                         }, 200, $headers);
  171.                     }
  173.                     throw new \Exception('Unable to generate thumbnail, see logs for details.');
  174.                 } catch (\Exception $e) {
  175.                     Logger::error($e->getMessage());
  177.                     return new RedirectResponse('/bundles/pimcoreadmin/img/filetype-not-supported.svg');
  178.                 }
  179.             }
  180.         }
  182.         throw $this->createNotFoundException('Asset not found');
  183.     }
  185.     /**
  186.      * @param Request $request
  187.      *
  188.      * @return Response
  189.      */
  190.     public function robotsTxtAction(Request $request)
  191.     {
  192.         // check for site
  193.         $domain = \Pimcore\Tool::getHostname();
  194.         $site = Site::getByDomain($domain);
  196.         $config = Config::getRobotsConfig()->toArray();
  198.         $siteId = 'default';
  199.         if ($site instanceof Site) {
  200.             $siteId = $site->getId();
  201.         }
  203.         // send correct headers
  204.         header('Content-Type: text/plain; charset=utf8');
  205.         while (@ob_end_flush()) ;
  207.         // check for configured robots.txt in pimcore
  208.         $content = '';
  209.         if (array_key_exists($siteId, $config)) {
  210.             $content = $config[$siteId];
  211.         }
  213.         if (empty($content)) {
  214.             // default behavior, allow robots to index everything
  215.             $content = "User-agent: *\nDisallow:";
  216.         }
  218.         return new Response($content, Response::HTTP_OK, [
  219.             'Content-Type' => 'text/plain',
  220.         ]);
  221.     }
  223.     /**
  224.      * @param Request $request
  225.      *
  226.      * @return Response
  227.      */
  228.     public function commonFilesAction(Request $request)
  229.     {
  230.         return new Response("HTTP/1.1 404 Not Found\nFiltered by common files filter", 404);
  231.     }
  233.     /**
  234.      * @param Request $request
  235.      *
  236.      * @return \Symfony\Component\HttpFoundation\RedirectResponse
  237.      */
  238.     public function customAdminEntryPointAction(Request $request)
  239.     {
  240.         $params = $request->query->all();
  241.         if (isset($params['token'])) {
  242.             $url = $this->generateUrl('pimcore_admin_login_check', $params);
  243.         } else {
  244.             $url = $this->generateUrl('pimcore_admin_login', $params);
  245.         }
  247.         $redirect = new RedirectResponse($url);
  249.         $customAdminPathIdentifier = $this->getParameter('pimcore_admin.custom_admin_path_identifier');
  250.         if (!empty($customAdminPathIdentifier) && $request->cookies->get('pimcore_custom_admin') != $customAdminPathIdentifier) {
  251.             $redirect->headers->setCookie(new Cookie('pimcore_custom_admin', $customAdminPathIdentifier, strtotime('+1 year'), '/', null, false, true));
  252.         }
  254.         return $redirect;
  255.     }
  256. }