source: branches/version-2_12-dev/data/class/pages/LC_Page_ResizeImage.php @ 21456

Revision 21456, 2.7 KB checked in by Seasoft, 10 years ago (diff)

#1625 (typo修正・ソース整形・ソースコメントの改善)

  • パラメータ名のtypo NO_IMAGE_REALDIR -> NO_IMAGE_REALFILE
  • Property svn:eol-style set to LF
  • Property svn:keywords set to Id
  • Property svn:mime-type set to text/x-httpd-php; charset=UTF-8
Line 
1<?php
2/*
3 * This file is part of EC-CUBE
4 *
5 * Copyright(c) 2000-2011 LOCKON CO.,LTD. All Rights Reserved.
6 *
7 * http://www.lockon.co.jp/
8 *
9 * This program is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU General Public License
11 * as published by the Free Software Foundation; either version 2
12 * of the License, or (at your option) any later version.
13 *
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17 * GNU General Public License for more details.
18 *
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
22 */
23
24// {{{ requires
25require_once CLASS_EX_REALDIR . 'page_extends/LC_Page_Ex.php';
26require_once DATA_REALDIR . 'module/gdthumb.php';
27
28/**
29 * リサイズイメージ のページクラス.
30 *
31 * @package Page
32 * @author LOCKON CO.,LTD.
33 * @version $Id$
34 */
35class LC_Page_ResizeImage extends LC_Page_Ex {
36
37    // }}}
38    // {{{ functions
39
40    /**
41     * Page を初期化する.
42     *
43     * @return void
44     */
45    function init() {
46        parent::init();
47    }
48
49    /**
50     * Page のプロセス.
51     *
52     * @return void
53     */
54    function process() {
55        $objThumb = new gdthumb();
56
57        $file = NO_IMAGE_REALFILE;
58
59        // NO_IMAGE_REALFILE以外のファイル名が渡された場合、ファイル名のチェックを行う
60        if (strlen($_GET['image']) >= 1 && $_GET['image'] !== NO_IMAGE_REALFILE) {
61
62            // ファイル名が正しく、ファイルが存在する場合だけ、$fileを設定
63            if (!$this->lfCheckFileName()) {
64                GC_Utils_Ex::gfPrintLog('invalid access :resize_image.php $_GET[\'image\']=' . $_GET['image']);
65            }
66            else if (file_exists(IMAGE_SAVE_REALDIR . $_GET['image'])) {
67                $file = IMAGE_SAVE_REALDIR . $_GET['image'];
68            }
69        }
70
71        $objThumb->Main($file, $_GET['width'], $_GET['height'], "", true);
72    }
73
74    /**
75     * デストラクタ.
76     *
77     * @return void
78     */
79    function destroy() {
80        parent::destroy();
81    }
82
83    /**
84     * ファイル名の形式をチェック.
85     *
86     * @return boolean 正常な形式:true 不正な形式:false
87     */
88    function lfCheckFileName() {
89        //$pattern = '|^[0-9]+_[0-9a-z]+\.[a-z]{3}$|';
90        $pattern = '|\./|';
91        $file    = trim($_GET['image']);
92        if (preg_match_all($pattern, $file, $matches)) {
93            return false;
94        } else {
95            return true;
96        }
97    }
98}
Note: See TracBrowser for help on using the repository browser.