plugins/af_zz_imgproxy/init.php

   1 <?php
   2 class Af_Zz_ImgProxy extends Plugin {
   3         private $host;
   4
   5         function about() {
   6                 return array(1.0,
   7                         "Load insecure images via built-in proxy",
   8                         "fox");
   9         }
  10
  11         function is_public_method($method) {
  12                 return $method === "imgproxy";
  13         }
  14
  15         function init($host) {
  16                 $this->host = $host;
  17
  18                 $host->add_hook($host::HOOK_RENDER_ARTICLE, $this);
  19                 $host->add_hook($host::HOOK_RENDER_ARTICLE_CDM, $this);
  20                 $host->add_hook($host::HOOK_ENCLOSURE_ENTRY, $this);
  21
  22                 $host->add_hook($host::HOOK_PREFS_TAB, $this);
  23         }
  24
  25         function hook_enclosure_entry($enc) {
  26                 if (preg_match("/image/", $enc["content_type"]) || preg_match("/\.(jpe?g|png|gif|bmp)$/i", $enc["filename"])) {
  27                         $proxy_all = $this->host->get($this, "proxy_all");
  28
  29                         $enc["content_url"] = $this->rewrite_url_if_needed($enc["content_url"], 0, $proxy_all);
  30                 }
  31
  32                 return $enc;
  33         }
  34
  35         function hook_render_article($article) {
  36                 return $this->hook_render_article_cdm($article);
  37         }
  38
  39         public function imgproxy() {
  40
  41                 $url = rewrite_relative_url(SELF_URL_PATH, $_REQUEST["url"]);
  42                 $kind = (int) $_REQUEST["kind"]; // 1 = video
  43
  44                 // called without user context, let's just redirect to original URL
  45                 if (!$_SESSION["uid"]) {
  46                         header("Location: $url");
  47                         return;
  48                 }
  49
  50                 $extension = $kind == 1 ? '.mp4' : '.png';
  51                 $local_filename = CACHE_DIR . "/images/" . sha1($url) . $extension;
  52
  53                 if ($_REQUEST["debug"] == "1") { print $url . "\n" . $local_filename; die; }
  54
  55                 header("Content-Disposition: inline; filename=\"".basename($local_filename)."\"");
  56
  57                 if (file_exists($local_filename)) {
  58                         $mimetype = mime_content_type($local_filename);
  59                         header("Content-type: $mimetype");
  60
  61                         $stamp = gmdate("D, d M Y H:i:s", filemtime($local_filename)). " GMT";
  62                         header("Last-Modified: $stamp", true);
  63
  64                         readfile($local_filename);
  65                 } else {
  66                         $data = fetch_file_contents(array("url" => $url, "useragent" => "Mozilla/5.0"));
  67
  68                         if ($data) {
  69                                 if (file_put_contents($local_filename, $data)) {
  70                                         $mimetype = mime_content_type($local_filename);
  71                                         header("Content-type: $mimetype");
  72                                 }
  73
  74                                 print $data;
  75                         } else {
  76                                 global $fetch_last_error;
  77                                 global $fetch_last_error_code;
  78                                 global $fetch_last_error_content;
  79
  80                                 if (function_exists("imagecreate")) {
  81                                         $img = imagecreate(400, 75);
  82
  83                                         $bg = imagecolorallocate($img, 255, 255, 255);
  84                                         $textcolor = imagecolorallocate($img, 255, 0, 0);
  85
  86                                         imagerectangle($img, 0, 0, 400-1, 75-1, $textcolor);
  87
  88                                         imagestring($img, 5, 5, 5, "Proxy request failed", $textcolor);
  89                                         imagestring($img, 5, 5, 30, $url, $textcolor);
  90                                         imagestring($img, 5, 5, 55, "HTTP Code: $fetch_last_error_code", $textcolor);
  91
  92                                         header("Content-type: image/png");
  93                                         print imagepng($img);
  94                                         imagedestroy($img);
  95
  96                                 } else {
  97                                         header("Content-type: text/html");
  98
  99                                         http_response_code(400);
 100
 101                                         print "<h1>Proxy request failed.</h1>";
 102                                         print "<p>Fetch error $fetch_last_error ($fetch_last_error_code)</p>";
 103                                         print "<p>URL: $url</p>";
 104                                         print "<textarea cols='80' rows='25'>" . htmlspecialchars($fetch_last_error_content) . "</textarea>";
 105                                 }
 106                         }
 107                 }
 108         }
 109
 110         function rewrite_url_if_needed($url, $kind, $all_remote = false) {
 111                 $scheme = parse_url($url, PHP_URL_SCHEME);
 112
 113                 if ($all_remote) {
 114                         $host = parse_url($url, PHP_URL_HOST);
 115                         $self_host = parse_url(SELF_URL_PATH, PHP_URL_HOST);
 116
 117                         $is_remote = $host != $self_host;
 118                 } else {
 119                         $is_remote = false;
 120                 }
 121
 122                 if (($scheme != 'https' && $scheme != "") || $is_remote) {
 123                         if (strpos($url, "data:") !== 0) {
 124                                 $url = "public.php?op=pluginhandler&plugin=af_zz_imgproxy&pmethod=imgproxy&kind=$kind&url=" .
 125                                         urlencode($url);
 126                         }
 127                 }
 128
 129                 return $url;
 130         }
 131
 132         function hook_render_article_cdm($article, $api_mode = false) {
 133
 134                 $need_saving = false;
 135                 $proxy_all = $this->host->get($this, "proxy_all");
 136
 137                 $doc = new DOMDocument();
 138                 if (@$doc->loadHTML($article["content"])) {
 139                         $xpath = new DOMXPath($doc);
 140                         $imgs = $xpath->query("//img[@src]");
 141
 142                         foreach ($imgs as $img) {
 143                                 $new_src = $this->rewrite_url_if_needed($img->getAttribute("src"), 0, $proxy_all);
 144
 145                                 if ($new_src != $img->getAttribute("src")) {
 146                                         $img->setAttribute("src", $new_src);
 147
 148                                         $need_saving = true;
 149                                 }
 150                         }
 151
 152                         $vids = $xpath->query("//video");
 153
 154                         foreach ($vids as $vid) {
 155                                 if ($vid->hasAttribute("poster")) {
 156                                         $new_src = $this->rewrite_url_if_needed($vid->getAttribute("poster"), 0, $proxy_all);
 157
 158                                         if ($new_src != $vid->getAttribute("poster")) {
 159                                                 $vid->setAttribute("poster", $new_src);
 160
 161                                                 $need_saving = true;
 162                                         }
 163                                 }
 164
 165                                 $vsrcs = $xpath->query("source", $vid);
 166
 167                                 foreach ($vsrcs as $vsrc) {
 168                                         $new_src = $this->rewrite_url_if_needed($vsrc->getAttribute("src"), 1, $proxy_all);
 169
 170                                         if ($new_src != $vsrc->getAttribute("src")) {
 171                                                 $vid->setAttribute("src", $new_src);
 172
 173                                                 $need_saving = true;
 174                                         }
 175                                 }
 176                         }
 177                 }
 178
 179                 if ($need_saving) $article["content"] = $doc->saveXML();
 180
 181                 return $article;
 182         }
 183
 184         function hook_prefs_tab($args) {
 185                 if ($args != "prefFeeds") return;
 186
 187                 print "<div dojoType=\"dijit.layout.AccordionPane\" title=\"".__('Image proxy settings (af_zz_imgproxy)')."\">";
 188
 189                 print "<form dojoType=\"dijit.form.Form\">";
 190
 191                 print "<script type=\"dojo/method\" event=\"onSubmit\" args=\"evt\">
 192                         evt.preventDefault();
 193                         if (this.validate()) {
 194                                 console.log(dojo.objectToQuery(this.getValues()));
 195                                 new Ajax.Request('backend.php', {
 196                                         parameters: dojo.objectToQuery(this.getValues()),
 197                                         onComplete: function(transport) {
 198                                                 notify_info(transport.responseText);
 199                                         }
 200                                 });
 201                                 //this.reset();
 202                         }
 203                         </script>";
 204
 205                 print_hidden("op", "pluginhandler");
 206                 print_hidden("method", "save");
 207                 print_hidden("plugin", "af_zz_imgproxy");
 208
 209                 $proxy_all = $this->host->get($this, "proxy_all");
 210                 print_checkbox("proxy_all", $proxy_all);
 211
 212                 print "&nbsp;<label for=\"proxy_all\">" . __("Enable proxy for all remote images.") . "</label>";
 213
 214                 print "<p>"; print_button("submit", __("Save"));
 215
 216                 print "</form>";
 217
 218                 print "</div>";
 219         }
 220
 221         function save() {
 222                 $proxy_all = checkbox_to_sql_bool($_POST["proxy_all"]) == "true";
 223
 224                 $this->host->set($this, "proxy_all", $proxy_all);
 225
 226                 echo __("Configuration saved");
 227         }
 228
 229         function api_version() {
 230                 return 2;
 231         }
 232 }