Examples with FileUploadPlugin com.xpn.xwiki.plugin.fileupload.FileUploadPlugin used on opensource projects

Example 1 with FileUploadPlugin

use of com.xpn.xwiki.plugin.fileupload.FileUploadPlugin in project xwiki-platform by xwiki.

the class UploadAction method action.

@Override
public boolean action(XWikiContext context) throws XWikiException {
    XWikiResponse response = context.getResponse();
    Object exception = context.get("exception");
    boolean ajax = ((Boolean) context.get("ajax")).booleanValue();
    // check Exception File upload is large
    if (exception != null) {
        if (exception instanceof XWikiException) {
            XWikiException exp = (XWikiException) exception;
            if (exp.getCode() == XWikiException.ERROR_XWIKI_APP_FILE_EXCEPTION_MAXSIZE) {
                response.setStatus(HttpServletResponse.SC_REQUEST_ENTITY_TOO_LARGE);
                getCurrentScriptContext().setAttribute("message", "core.action.upload.failure.maxSize", ScriptContext.ENGINE_SCOPE);
                context.put("message", "fileuploadislarge");
                return true;
            }
        }
    }
    // CSRF prevention
    if (!csrfTokenCheck(context)) {
        return false;
    }
    // We need to clone the document before we modify it because the cached storage gives the same instance to other
    // requests (until the cache is invalidated).
    XWikiDocument doc = context.getDoc().clone();
    // Let's make sure the new document is created with the right (default) language.
    if (doc.isNew()) {
        doc.setLocale(Locale.ROOT);
        if (doc.getDefaultLocale() == Locale.ROOT) {
            doc.setDefaultLocale(LocaleUtils.toLocale(context.getWiki().getLanguagePreference(context), Locale.ROOT));
        }
    }
    // The document is saved for each attachment in the group.
    FileUploadPlugin fileupload = (FileUploadPlugin) context.get("fileuploadplugin");
    if (fileupload == null) {
        getCurrentScriptContext().setAttribute("message", "core.action.upload.failure.noFiles", ScriptContext.ENGINE_SCOPE);
        return true;
    }
    Map<String, String> fileNames = new LinkedHashMap<String, String>();
    List<String> wrongFileNames = new ArrayList<String>();
    Map<String, String> failedFiles = new LinkedHashMap<String, String>();
    for (String fieldName : fileupload.getFileItemNames(context)) {
        try {
            if (fieldName.startsWith(FILE_FIELD_NAME)) {
                String fileName = getFileName(fieldName, fileupload, context);
                if (fileName != null) {
                    fileNames.put(fileName, fieldName);
                }
            }
        } catch (Exception ex) {
            wrongFileNames.add(fileupload.getFileName(fieldName, context));
        }
    }
    for (Entry<String, String> file : fileNames.entrySet()) {
        try {
            uploadAttachment(file.getValue(), file.getKey(), fileupload, doc, context);
        } catch (Exception ex) {
            LOGGER.warn("Saving uploaded file failed", ex);
            failedFiles.put(file.getKey(), ExceptionUtils.getRootCauseMessage(ex));
        }
    }
    LOGGER.debug("Found files to upload: " + fileNames);
    LOGGER.debug("Failed attachments: " + failedFiles);
    LOGGER.debug("Wrong attachment names: " + wrongFileNames);
    if (ajax) {
        try {
            response.getOutputStream().println("ok");
        } catch (IOException ex) {
            LOGGER.error("Unhandled exception writing output:", ex);
        }
        return false;
    }
    // Forward to the attachment page
    if (failedFiles.size() > 0 || !wrongFileNames.isEmpty()) {
        getCurrentScriptContext().setAttribute("message", "core.action.upload.failure", ScriptContext.ENGINE_SCOPE);
        getCurrentScriptContext().setAttribute("failedFiles", failedFiles, ScriptContext.ENGINE_SCOPE);
        getCurrentScriptContext().setAttribute("wrongFileNames", wrongFileNames, ScriptContext.ENGINE_SCOPE);
        return true;
    }
    String redirect = fileupload.getFileItemAsString("xredirect", context);
    if (StringUtils.isEmpty(redirect)) {
        redirect = context.getDoc().getURL("attach", true, context);
    }
    sendRedirect(response, redirect);
    return false;
}

Example 2 with FileUploadPlugin

use of com.xpn.xwiki.plugin.fileupload.FileUploadPlugin in project xwiki-platform by xwiki.

the class XWikiAction method execute.

public ActionForward execute(XWikiContext context) throws Exception {
    MonitorPlugin monitor = null;
    FileUploadPlugin fileupload = null;
    DefaultJobProgress actionProgress = null;
    ObservationManager om = Utils.getComponent(ObservationManager.class);
    Execution execution = Utils.getComponent(Execution.class);
    String docName = "";
    boolean debug = StringUtils.equals(context.getRequest().get("debug"), "true");
    try {
        String action = context.getAction();
        // Start progress
        if (debug && om != null && execution != null) {
            actionProgress = new DefaultJobProgress(context.getURL().toExternalForm());
            om.addListener(new WrappedThreadEventListener(actionProgress));
            // Register the action progress in the context
            ExecutionContext econtext = execution.getContext();
            if (econtext != null) {
                econtext.setProperty(XWikiAction.ACTION_PROGRESS, actionProgress);
            }
        }
        getProgress().pushLevelProgress(2, this);
        getProgress().startStep(this, "Get XWiki instance");
        // Initialize context.getWiki() with the main wiki
        XWiki xwiki;
        // Verify that the requested wiki exists
        try {
            xwiki = XWiki.getXWiki(this.waitForXWikiInitialization, context);
            // If XWiki is still initializing display initialization template
            if (xwiki == null) {
                // Display initialization template
                renderInit(context);
                // Initialization template has been displayed, stop here.
                return null;
            }
        } catch (XWikiException e) {
            // redirects. If there are none, then we display the specific error template.
            if (e.getCode() == XWikiException.ERROR_XWIKI_DOES_NOT_EXIST) {
                xwiki = XWiki.getMainXWiki(context);
                // Initialize the url factory
                XWikiURLFactory urlf = xwiki.getURLFactoryService().createURLFactory(context.getMode(), context);
                context.setURLFactory(urlf);
                // Initialize the velocity context and its bindings so that it may be used in the velocity templates
                // that we
                // are parsing below.
                VelocityManager velocityManager = Utils.getComponent(VelocityManager.class);
                VelocityContext vcontext = velocityManager.getVelocityContext();
                if (!sendGlobalRedirect(context.getResponse(), context.getURL().toString(), context)) {
                    // Starting XWiki 5.0M2, 'xwiki.virtual.redirect' was removed. Warn users still using it.
                    if (!StringUtils.isEmpty(context.getWiki().Param("xwiki.virtual.redirect"))) {
                        LOGGER.warn(String.format("%s %s", "'xwiki.virtual.redirect' is no longer supported.", "Please update your configuration and/or see XWIKI-8914 for more details."));
                    }
                    // Display the error template only for actions that are not ignored
                    if (!ACTIONS_IGNORED_WHEN_WIKI_DOES_NOT_EXIST.contains(action)) {
                        // Add localization resources to the context
                        xwiki.prepareResources(context);
                        // Set the main home page in the main space of the main wiki as the current requested entity
                        // since we cannot set the non existing one as it would generate errors obviously...
                        EntityReferenceValueProvider valueProvider = Utils.getComponent(EntityReferenceValueProvider.class);
                        xwiki.setPhonyDocument(new DocumentReference(valueProvider.getDefaultValue(EntityType.WIKI), valueProvider.getDefaultValue(EntityType.SPACE), valueProvider.getDefaultValue(EntityType.DOCUMENT)), context, vcontext);
                        // Parse the error template
                        Utils.parseTemplate(context.getWiki().Param("xwiki.wiki_exception", "wikidoesnotexist"), context);
                        // Error template was displayed, stop here.
                        return null;
                    }
                // At this point, we allow regular execution of the ignored action because even if the wiki
                // does not exist, we still need to allow UI resources to be retrieved (from the filesystem
                // and the main wiki) or our error template will not be rendered properly.
                // Proceed with serving the main wiki
                } else {
                    // Global redirect was executed, stop here.
                    return null;
                }
            } else {
                LOGGER.error("Uncaught exception during XWiki initialisation:", e);
                throw e;
            }
        }
        // Send global redirection (if any)
        if (sendGlobalRedirect(context.getResponse(), context.getURL().toString(), context)) {
            return null;
        }
        XWikiURLFactory urlf = xwiki.getURLFactoryService().createURLFactory(context.getMode(), context);
        context.setURLFactory(urlf);
        // Handle ability to enter space URLs and convert them to page URLs (Nested Documents)
        if (redirectSpaceURLs(action, urlf, xwiki, context)) {
            return null;
        }
        String sajax = context.getRequest().get("ajax");
        boolean ajax = false;
        if (sajax != null && !sajax.trim().equals("") && !sajax.equals("0")) {
            ajax = true;
        }
        context.put("ajax", ajax);
        if (monitor != null) {
            monitor.startTimer("request");
        }
        getProgress().startStep(this, "Execute request");
        VelocityManager velocityManager = Utils.getComponent(VelocityManager.class);
        VelocityContext vcontext = velocityManager.getVelocityContext();
        getProgress().pushLevelProgress(7, this);
        boolean eventSent = false;
        try {
            getProgress().startStep(this, "Prepare documents and put them in the context");
            // Prepare documents and put them in the context
            if (!xwiki.prepareDocuments(context.getRequest(), context, vcontext)) {
                return null;
            }
            // Start monitoring timer
            monitor = (MonitorPlugin) xwiki.getPlugin("monitor", context);
            if (monitor != null) {
                monitor.startRequest("", context.getAction(), context.getURL());
                monitor.startTimer("multipart");
            }
            getProgress().startStep(this, "Parses multipart");
            // Parses multipart so that params in multipart are available for all actions
            fileupload = Utils.handleMultipart(context.getRequest().getHttpServletRequest(), context);
            if (monitor != null) {
                monitor.endTimer("multipart");
            }
            if (monitor != null) {
                monitor.setWikiPage(context.getDoc().getFullName());
            }
            getProgress().startStep(this, "Send [" + context.getAction() + "] action start event");
            // and there won't be a need for the context.
            try {
                ActionExecutingEvent event = new ActionExecutingEvent(context.getAction());
                om.notify(event, context.getDoc(), context);
                eventSent = true;
                if (event.isCanceled()) {
                    // TODO: do something special ?
                    return null;
                }
            } catch (Throwable ex) {
                LOGGER.error("Cannot send action notifications for document [" + context.getDoc() + " using action [" + context.getAction() + "]", ex);
            }
            if (monitor != null) {
                monitor.endTimer("prenotify");
            }
            // Call the Actions
            getProgress().startStep(this, "Search and execute entity resource handler");
            // Call the new Entity Resource Reference Handler.
            ResourceReferenceHandler entityResourceReferenceHandler = Utils.getComponent(new DefaultParameterizedType(null, ResourceReferenceHandler.class, ResourceType.class), "bin");
            ResourceReference resourceReference = Utils.getComponent(ResourceReferenceManager.class).getResourceReference();
            try {
                entityResourceReferenceHandler.handle(resourceReference, DefaultResourceReferenceHandlerChain.EMPTY);
                // Don't let the old actions kick in!
                return null;
            } catch (NotFoundResourceHandlerException e) {
            // No Entity Resource Action has been found. Don't do anything and let it go through
            // so that the old Action system kicks in...
            } catch (Throwable e) {
                // Some real failure, log it since it's a problem but still allow the old Action system a chance
                // to do something...
                LOGGER.error("Failed to handle Action for Resource [{}]", resourceReference, e);
            }
            getProgress().startStep(this, "Execute action render");
            // Handle the XWiki.RedirectClass object that can be attached to the current document
            boolean hasRedirect = false;
            if (handleRedirectObject) {
                hasRedirect = handleRedirectObject(context);
            }
            // Then call the old Actions for backward compatibility (and because a lot of them have not been
            // migrated to new Actions yet).
            String renderResult = null;
            XWikiDocument doc = context.getDoc();
            docName = doc.getFullName();
            if (!hasRedirect && action(context)) {
                renderResult = render(context);
            }
            if (renderResult != null) {
                if (doc.isNew() && "view".equals(context.getAction()) && !"recyclebin".equals(context.getRequest().get("viewer")) && !"children".equals(context.getRequest().get("viewer")) && !"siblings".equals(context.getRequest().get("viewer"))) {
                    String page = Utils.getPage(context.getRequest(), "docdoesnotexist");
                    getProgress().startStep(this, "Execute template [" + page + "]");
                    Utils.parseTemplate(page, context);
                } else {
                    String page = Utils.getPage(context.getRequest(), renderResult);
                    getProgress().startStep(this, "Execute template [" + page + "]");
                    Utils.parseTemplate(page, !page.equals("direct"), context);
                }
            }
            return null;
        } catch (Throwable e) {
            if (e instanceof IOException) {
                e = new XWikiException(XWikiException.MODULE_XWIKI_APP, XWikiException.ERROR_XWIKI_APP_SEND_RESPONSE_EXCEPTION, "Exception while sending response", e);
            }
            if (!(e instanceof XWikiException)) {
                e = new XWikiException(XWikiException.MODULE_XWIKI_APP, XWikiException.ERROR_XWIKI_UNKNOWN, "Uncaught exception", e);
            }
            try {
                XWikiException xex = (XWikiException) e;
                if (xex.getCode() == XWikiException.ERROR_XWIKI_APP_SEND_RESPONSE_EXCEPTION) {
                    // Connection aborted from the client side, there's not much we can do on the server side. We
                    // simply ignore it.
                    LOGGER.debug("Connection aborted", e);
                    // We don't write any other message to the response, as the connection is broken, anyway.
                    return null;
                } else if (xex.getCode() == XWikiException.ERROR_XWIKI_ACCESS_DENIED) {
                    Utils.parseTemplate(context.getWiki().Param("xwiki.access_exception", "accessdenied"), context);
                    return null;
                } else if (xex.getCode() == XWikiException.ERROR_XWIKI_USER_INACTIVE) {
                    Utils.parseTemplate(context.getWiki().Param("xwiki.user_exception", "userinactive"), context);
                    return null;
                } else if (xex.getCode() == XWikiException.ERROR_XWIKI_APP_ATTACHMENT_NOT_FOUND) {
                    context.put("message", "attachmentdoesnotexist");
                    Utils.parseTemplate(context.getWiki().Param("xwiki.attachment_exception", "attachmentdoesnotexist"), context);
                    return null;
                } else if (xex.getCode() == XWikiException.ERROR_XWIKI_APP_URL_EXCEPTION) {
                    vcontext.put("message", localizePlainOrKey("platform.core.invalidUrl"));
                    xwiki.setPhonyDocument(xwiki.getDefaultSpace(context) + "." + xwiki.getDefaultPage(context), context, vcontext);
                    context.getResponse().setStatus(HttpServletResponse.SC_BAD_REQUEST);
                    Utils.parseTemplate(context.getWiki().Param("xwiki.invalid_url_exception", "error"), context);
                    return null;
                }
                vcontext.put("exp", e);
                if (LOGGER.isWarnEnabled()) {
                    // connection.
                    if (ExceptionUtils.getRootCauseMessage(e).equals("IOException: Broken pipe")) {
                        return null;
                    }
                    LOGGER.warn("Uncaught exception: " + e.getMessage(), e);
                }
                // If the request is an AJAX request, we don't return a whole HTML page, but just the exception
                // inline.
                String exceptionTemplate = ajax ? "exceptioninline" : "exception";
                Utils.parseTemplate(Utils.getPage(context.getRequest(), exceptionTemplate), context);
                return null;
            } catch (XWikiException ex) {
                if (ex.getCode() == XWikiException.ERROR_XWIKI_APP_SEND_RESPONSE_EXCEPTION) {
                    LOGGER.error("Connection aborted");
                }
            } catch (Exception e2) {
                // I hope this never happens
                LOGGER.error("Uncaught exceptions (inner): ", e);
                LOGGER.error("Uncaught exceptions (outer): ", e2);
            }
            return null;
        } finally {
            // Let's make sure we have flushed content and closed
            try {
                context.getResponse().getWriter().flush();
            } catch (Throwable e) {
            // This might happen if the connection was closed, for example.
            // If we can't flush, then there's nothing more we can send to the client.
            }
            if (monitor != null) {
                monitor.endTimer("request");
                monitor.startTimer("notify");
            }
            if (eventSent) {
                // and there won't be a need for the context.
                try {
                    om.notify(new ActionExecutedEvent(context.getAction()), context.getDoc(), context);
                } catch (Throwable ex) {
                    LOGGER.error("Cannot send action notifications for document [" + docName + " using action [" + context.getAction() + "]", ex);
                }
            }
            if (monitor != null) {
                monitor.endTimer("notify");
            }
            getProgress().startStep(this, "Cleanup database connections");
            // Make sure we cleanup database connections
            // There could be cases where we have some
            xwiki.getStore().cleanUp(context);
            getProgress().popLevelProgress(this);
        }
    } finally {
        // End request
        if (monitor != null) {
            monitor.endRequest();
        }
        // Stop progress
        if (actionProgress != null) {
            getProgress().popLevelProgress(this);
            om.removeListener(actionProgress.getName());
        }
        if (fileupload != null) {
            fileupload.cleanFileList(context);
        }
    }
}

Example 3 with FileUploadPlugin

use of com.xpn.xwiki.plugin.fileupload.FileUploadPlugin in project xwiki-platform by xwiki.

the class Utils method handleMultipart.

/**
 * Process a multi-part request, extracting all the uploaded files.
 *
 * @param request the current request to process
 * @param context the current context
 * @return the instance of the {@link FileUploadPlugin} used to parse the uploaded files
 */
public static FileUploadPlugin handleMultipart(HttpServletRequest request, XWikiContext context) {
    FileUploadPlugin fileupload = null;
    try {
        if (request instanceof MultipartRequestWrapper) {
            fileupload = new FileUploadPlugin("fileupload", "fileupload", context);
            context.put("fileuploadplugin", fileupload);
            fileupload.loadFileList(context);
            MultipartRequestWrapper mpreq = (MultipartRequestWrapper) request;
            List<FileItem> fileItems = fileupload.getFileItems(context);
            for (FileItem item : fileItems) {
                if (item.isFormField()) {
                    String sName = item.getFieldName();
                    String sValue = item.getString(context.getWiki().getEncoding());
                    mpreq.setParameter(sName, sValue);
                }
            }
        }
    } catch (Exception e) {
        if ((e instanceof XWikiException) && (((XWikiException) e).getCode() == XWikiException.ERROR_XWIKI_APP_FILE_EXCEPTION_MAXSIZE)) {
            context.put("exception", e);
        } else {
            LOGGER.error("Failed to process MultiPart request", e);
        }
    }
    return fileupload;
}

Example 4 with FileUploadPlugin

use of com.xpn.xwiki.plugin.fileupload.FileUploadPlugin in project xwiki-platform by xwiki.

the class Document method addAttachments.

public int addAttachments(String fieldName) throws XWikiException {
    if (!hasAccessLevel("edit")) {
        java.lang.Object[] args = { this.getFullName() };
        throw new XWikiException(XWikiException.MODULE_XWIKI_ACCESS, XWikiException.ERROR_XWIKI_ACCESS_DENIED, "Access denied in edit mode on document {0}", null, args);
    }
    XWiki xwiki = getXWikiContext().getWiki();
    FileUploadPlugin fileupload = (FileUploadPlugin) xwiki.getPlugin("fileupload", getXWikiContext());
    List<FileItem> fileuploadlist = fileupload.getFileItems(getXWikiContext());
    List<XWikiAttachment> attachments = new ArrayList<XWikiAttachment>();
    // adding attachment list to context so we find the names
    this.context.put("addedAttachments", attachments);
    int nb = 0;
    if (fileuploadlist == null) {
        return 0;
    }
    for (FileItem item : fileuploadlist) {
        String name = item.getFieldName();
        if (fieldName != null && !fieldName.equals(name)) {
            continue;
        }
        if (item.isFormField()) {
            continue;
        }
        byte[] data = fileupload.getFileItemData(name, getXWikiContext());
        String filename;
        String fname = fileupload.getFileName(name, getXWikiContext());
        int i = fname.lastIndexOf("\\");
        if (i == -1) {
            i = fname.lastIndexOf("/");
        }
        filename = fname.substring(i + 1);
        filename = filename.replaceAll("\\+", " ");
        if ((data != null) && (data.length > 0)) {
            XWikiAttachment attachment = this.getDoc().addAttachment(filename, data, getXWikiContext());
            getDoc().saveAttachmentContent(attachment, getXWikiContext());
            // commenting because this was already done by addAttachment
            // getDoc().getAttachmentList().add(attachment);
            attachments.add(attachment);
            nb++;
        }
    }
    if (nb > 0) {
        getXWikiContext().getWiki().saveDocument(getDoc(), getXWikiContext());
        this.initialDoc = this.doc;
    }
    return nb;
}