- phpbb_unlink($row['physical_filename'], 'file');

- phpbb_unlink($row['physical_filename'], 'thumbnail');

- if ($num_deleted = delete_attachments('attach', $delete_files))

- global $db, $config, $phpbb_root_path, $phpEx, $phpbb_dispatcher;

- delete_attachments('topic', $topic_ids, false);

- delete_attachments('user', $user_id);

- delete_attachments('attach', $marked);

- delete_attachments('post', $post_ids, false);

- global $db, $config, $phpbb_dispatcher;

-

- // 0 is as bad as an empty array

- if (empty($ids))

- {

- return false;

- }

-

- if (is_array($ids))

- {

- $ids = array_unique($ids);

- $ids = array_map('intval', $ids);

- }

- else

- {

- $ids = array((int) $ids);

- }

-

- $sql_where = '';

-

- switch ($mode)

- {

- case 'post':

- case 'message':

- $sql_id = 'post_msg_id';

- $sql_where = ' AND in_message = ' . ($mode == 'message' ? 1 : 0);

- break;

-

- case 'topic':

- $sql_id = 'topic_id';

- break;

-

- case 'user':

- $sql_id = 'poster_id';

- break;

-

- case 'attach':

- default:

- $sql_id = 'attach_id';

- $mode = 'attach';

- break;

- }

-

- $post_ids = $message_ids = $topic_ids = $physical = array();

-

- /**

- * Perform additional actions before collecting data for attachment(s) deletion

- *

- * @event core.delete_attachments_collect_data_before

- * @var string mode Variable containing attachments deletion mode, can be: post|message|topic|attach|user

- * @var mixed ids Array or comma separated list of ids corresponding to the mode

- * @var bool resync Flag indicating if posts/messages/topics should be synchronized

- * @var string sql_id The field name to collect/delete data for depending on the mode

- * @since 3.1.7-RC1

- */

- $vars = array(

- 'mode',

- 'ids',

- 'resync',

- 'sql_id',

- );

- extract($phpbb_dispatcher->trigger_event('core.delete_attachments_collect_data_before', compact($vars)));

-

- // Collect post and topic ids for later use if we need to touch remaining entries (if resync is enabled)

- $sql = 'SELECT post_msg_id, topic_id, in_message, physical_filename, thumbnail, filesize, is_orphan

- FROM ' . ATTACHMENTS_TABLE . '

- WHERE ' . $db->sql_in_set($sql_id, $ids);

-

- $sql .= $sql_where;

-

- $result = $db->sql_query($sql);

-

- while ($row = $db->sql_fetchrow($result))

- {

- // We only need to store post/message/topic ids if resync is enabled and the file is not orphaned

- if ($resync && !$row['is_orphan'])

- {

- if (!$row['in_message'])

- {

- $post_ids[] = $row['post_msg_id'];

- $topic_ids[] = $row['topic_id'];

- }

- else

- {

- $message_ids[] = $row['post_msg_id'];

- }

- }

-

- $physical[] = array('filename' => $row['physical_filename'], 'thumbnail' => $row['thumbnail'], 'filesize' => $row['filesize'], 'is_orphan' => $row['is_orphan']);

- }

- $db->sql_freeresult($result);

-

- /**

- * Perform additional actions before attachment(s) deletion

- *

- * @event core.delete_attachments_before

- * @var string mode Variable containing attachments deletion mode, can be: post|message|topic|attach|user

- * @var mixed ids Array or comma separated list of ids corresponding to the mode

- * @var bool resync Flag indicating if posts/messages/topics should be synchronized

- * @var string sql_id The field name to collect/delete data for depending on the mode

- * @var array post_ids Array with post ids for deleted attachment(s)

- * @var array topic_ids Array with topic ids for deleted attachment(s)

- * @var array message_ids Array with private message ids for deleted attachment(s)

- * @var array physical Array with deleted attachment(s) physical file(s) data

- * @since 3.1.7-RC1

- */

- $vars = array(

- 'mode',

- 'ids',

- 'resync',

- 'sql_id',

- 'post_ids',

- 'topic_ids',

- 'message_ids',

- 'physical',

- );

- extract($phpbb_dispatcher->trigger_event('core.delete_attachments_before', compact($vars)));

-

- // Delete attachments

- $sql = 'DELETE FROM ' . ATTACHMENTS_TABLE . '

- WHERE ' . $db->sql_in_set($sql_id, $ids);

-

- $sql .= $sql_where;

-

- $db->sql_query($sql);

- $num_deleted = $db->sql_affectedrows();

-

- /**

- * Perform additional actions after attachment(s) deletion from the database

- *

- * @event core.delete_attachments_from_database_after

- * @var string mode Variable containing attachments deletion mode, can be: post|message|topic|attach|user

- * @var mixed ids Array or comma separated list of ids corresponding to the mode

- * @var bool resync Flag indicating if posts/messages/topics should be synchronized

- * @var string sql_id The field name to collect/delete data for depending on the mode

- * @var array post_ids Array with post ids for deleted attachment(s)

- * @var array topic_ids Array with topic ids for deleted attachment(s)

- * @var array message_ids Array with private message ids for deleted attachment(s)

- * @var array physical Array with deleted attachment(s) physical file(s) data

- * @var int num_deleted The number of deleted attachment(s) from the database

- * @since 3.1.7-RC1

- */

- $vars = array(

- 'mode',

- 'ids',

- 'resync',

- 'sql_id',

- 'post_ids',

- 'topic_ids',

- 'message_ids',

- 'physical',

- 'num_deleted',

- );

- extract($phpbb_dispatcher->trigger_event('core.delete_attachments_from_database_after', compact($vars)));

-

- if (!$num_deleted)

- {

- return 0;

- }

- // Delete attachments from filesystem

- $space_removed = $files_removed = 0;

- foreach ($physical as $file_ary)

- {

- if (phpbb_unlink($file_ary['filename'], 'file', true) && !$file_ary['is_orphan'])

- {

- // Only non-orphaned files count to the file size

- $space_removed += $file_ary['filesize'];

- $files_removed++;

- }

-

- if ($file_ary['thumbnail'])

- {

- phpbb_unlink($file_ary['filename'], 'thumbnail', true);

- }

- }

-

- /**

- * Perform additional actions after attachment(s) deletion from the filesystem

- *

- * @event core.delete_attachments_from_filesystem_after

- * @var string mode Variable containing attachments deletion mode, can be: post|message|topic|attach|user

- * @var mixed ids Array or comma separated list of ids corresponding to the mode

- * @var bool resync Flag indicating if posts/messages/topics should be synchronized

- * @var string sql_id The field name to collect/delete data for depending on the mode

- * @var array post_ids Array with post ids for deleted attachment(s)

- * @var array topic_ids Array with topic ids for deleted attachment(s)

- * @var array message_ids Array with private message ids for deleted attachment(s)

- * @var array physical Array with deleted attachment(s) physical file(s) data

- * @var int num_deleted The number of deleted attachment(s) from the database

- * @var int space_removed The size of deleted files(s) from the filesystem

- * @var int files_removed The number of deleted file(s) from the filesystem

- * @since 3.1.7-RC1

- */

- $vars = array(

- 'mode',

- 'ids',

- 'resync',

- 'sql_id',

- 'post_ids',

- 'topic_ids',

- 'message_ids',

- 'physical',

- 'num_deleted',

- 'space_removed',

- 'files_removed',

- );

- extract($phpbb_dispatcher->trigger_event('core.delete_attachments_from_filesystem_after', compact($vars)));

-

- if ($space_removed || $files_removed)

- {

- $config->increment('upload_dir_size', $space_removed * (-1), false);

- $config->increment('num_files', $files_removed * (-1), false);

- }

-

- // If we do not resync, we do not need to adjust any message, post, topic or user entries

- if (!$resync)

- {

- return $num_deleted;

- }

-

- // No more use for the original ids

- unset($ids);

-

- // Now, we need to resync posts, messages, topics. We go through every one of them

- $post_ids = array_unique($post_ids);

- $message_ids = array_unique($message_ids);

- $topic_ids = array_unique($topic_ids);

-

- // Update post indicators for posts now no longer having attachments

- if (sizeof($post_ids))

- {

- // Just check which posts are still having an assigned attachment not orphaned by querying the attachments table

- $sql = 'SELECT post_msg_id

- FROM ' . ATTACHMENTS_TABLE . '

- WHERE ' . $db->sql_in_set('post_msg_id', $post_ids) . '

- AND in_message = 0

- AND is_orphan = 0';

- $result = $db->sql_query($sql);

-

- $remaining_ids = array();

- while ($row = $db->sql_fetchrow($result))

- {

- $remaining_ids[] = $row['post_msg_id'];

- }

- $db->sql_freeresult($result);

-

- // Now only unset those ids remaining

- $post_ids = array_diff($post_ids, $remaining_ids);

-

- if (sizeof($post_ids))

- {

- $sql = 'UPDATE ' . POSTS_TABLE . '

- SET post_attachment = 0

- WHERE ' . $db->sql_in_set('post_id', $post_ids);

- $db->sql_query($sql);

- }

- }

- // Update message table if messages are affected

- if (sizeof($message_ids))

- {

- // Just check which messages are still having an assigned attachment not orphaned by querying the attachments table

- $sql = 'SELECT post_msg_id

- FROM ' . ATTACHMENTS_TABLE . '

- WHERE ' . $db->sql_in_set('post_msg_id', $message_ids) . '

- AND in_message = 1

- AND is_orphan = 0';

- $result = $db->sql_query($sql);

-

- $remaining_ids = array();

- while ($row = $db->sql_fetchrow($result))

- {

- $remaining_ids[] = $row['post_msg_id'];

- }

- $db->sql_freeresult($result);

-

- // Now only unset those ids remaining

- $message_ids = array_diff($message_ids, $remaining_ids);

-

- if (sizeof($message_ids))

- {

- $sql = 'UPDATE ' . PRIVMSGS_TABLE . '

- SET message_attachment = 0

- WHERE ' . $db->sql_in_set('msg_id', $message_ids);

- $db->sql_query($sql);

- }

- }

-

- // Now update the topics. This is a bit trickier, because there could be posts still having attachments within the topic

- if (sizeof($topic_ids))

- {

- // Just check which topics are still having an assigned attachment not orphaned by querying the attachments table (much less entries expected)

- $sql = 'SELECT topic_id

- FROM ' . ATTACHMENTS_TABLE . '

- WHERE ' . $db->sql_in_set('topic_id', $topic_ids) . '

- AND is_orphan = 0';

- $result = $db->sql_query($sql);

-

- $remaining_ids = array();

- while ($row = $db->sql_fetchrow($result))

- {

- $remaining_ids[] = $row['topic_id'];

- }

- $db->sql_freeresult($result);

-

- // Now only unset those ids remaining

- $topic_ids = array_diff($topic_ids, $remaining_ids);

-

- if (sizeof($topic_ids))

- {

- $sql = 'UPDATE ' . TOPICS_TABLE . '

- SET topic_attachment = 0

- WHERE ' . $db->sql_in_set('topic_id', $topic_ids);

- $db->sql_query($sql);

- }

- }

- global $db, $phpbb_root_path, $config;

- // Because of copying topics or modifications a physical filename could be assigned more than once. If so, do not remove the file itself.

- $sql = 'SELECT COUNT(attach_id) AS num_entries

- FROM ' . ATTACHMENTS_TABLE . "

- WHERE physical_filename = '" . $db->sql_escape(utf8_basename($filename)) . "'";

- $result = $db->sql_query($sql);

- $num_entries = (int) $db->sql_fetchfield('num_entries');

- $db->sql_freeresult($result);

-

- // Do not remove file if at least one additional entry with the same name exist.

- if (($entry_removed && $num_entries > 0) || (!$entry_removed && $num_entries > 1))

- {

- return false;

- }

- $filename = ($mode == 'thumbnail') ? 'thumb_' . utf8_basename($filename) : utf8_basename($filename);

- return @unlink($phpbb_root_path . $config['upload_path'] . '/' . $filename);

-* @param \filespec $local_filedata A filespec object created for the local file

-* @param \phpbb\mimetype\guesser $mimetype_guesser The mimetype guesser object if used

-* @param \phpbb\plupload\plupload $plupload The plupload object if one is being used

-* @return object filespec

-function upload_attachment($form_name, $forum_id, $local = false, $local_storage = '', $is_message = false, $local_filedata = false, \phpbb\mimetype\guesser $mimetype_guesser = null, \phpbb\plupload\plupload $plupload = null)

- global $auth, $user, $config, $db, $cache;

- global $phpbb_root_path, $phpEx, $phpbb_dispatcher, $phpbb_container;

-

- $filedata = array(

- 'error' => array()

- );

-

- $upload = $phpbb_container->get('files.upload');

-

- if ($config['check_attachment_content'] && isset($config['mime_triggers']))

- {

- $upload->set_disallowed_content(explode('|', $config['mime_triggers']));

- }

- else if (!$config['check_attachment_content'])

- {

- $upload->set_disallowed_content(array());

- }

-

- $filedata['post_attach'] = $local || $upload->is_valid($form_name);

- if (!$filedata['post_attach'])

- {

- $filedata['error'][] = $user->lang['NO_UPLOAD_FORM_FOUND'];

- return $filedata;

- }

-

- $extensions = $cache->obtain_attach_extensions((($is_message) ? false : (int) $forum_id));

- $upload->set_allowed_extensions(array_keys($extensions['_allowed_']));

-

- /** @var \phpbb\files\filespec $file */

- $file = ($local) ? $upload->handle_upload('files.types.local', $local_storage, $local_filedata) : $upload->handle_upload('files.types.form', $form_name);

-

- if ($file->init_error())

- {

- $filedata['post_attach'] = false;

- return $filedata;

- }

-

- // Whether the uploaded file is in the image category

- $is_image = (isset($extensions[$file->get('extension')]['display_cat'])) ? $extensions[$file->get('extension')]['display_cat'] == ATTACHMENT_CATEGORY_IMAGE : false;

-

- if (!$auth->acl_get('a_') && !$auth->acl_get('m_', $forum_id))

- {

- // Check Image Size, if it is an image

- if ($is_image)

- {

- $file->upload->set_allowed_dimensions(0, 0, $config['img_max_width'], $config['img_max_height']);

- }

-

- // Admins and mods are allowed to exceed the allowed filesize

- if (!empty($extensions[$file->get('extension')]['max_filesize']))

- {

- $allowed_filesize = $extensions[$file->get('extension')]['max_filesize'];

- }

- else

- {

- $allowed_filesize = ($is_message) ? $config['max_filesize_pm'] : $config['max_filesize'];

- }

-

- $file->upload->set_max_filesize($allowed_filesize);

- }

-

- $file->clean_filename('unique', $user->data['user_id'] . '_');

-

- // Are we uploading an image *and* this image being within the image category?

- // Only then perform additional image checks.

- $file->move_file($config['upload_path'], false, !$is_image);

-

- // Do we have to create a thumbnail?

- $filedata['thumbnail'] = ($is_image && $config['img_create_thumbnail']) ? 1 : 0;

-

- if (sizeof($file->error))

- {

- $file->remove();

- $filedata['error'] = array_merge($filedata['error'], $file->error);

- $filedata['post_attach'] = false;

-

- return $filedata;

- }

-

- // Make sure the image category only holds valid images...

- if ($is_image && !$file->is_image())

- {

- $file->remove();

-

- if ($plupload && $plupload->is_active())

- {

- $plupload->emit_error(104, 'ATTACHED_IMAGE_NOT_IMAGE');

- }

-

- // If this error occurs a user tried to exploit an IE Bug by renaming extensions

- // Since the image category is displaying content inline we need to catch this.

- trigger_error($user->lang['ATTACHED_IMAGE_NOT_IMAGE']);

- }

-

- $filedata['filesize'] = $file->get('filesize');

- $filedata['mimetype'] = $file->get('mimetype');

- $filedata['extension'] = $file->get('extension');

- $filedata['physical_filename'] = $file->get('realname');

- $filedata['real_filename'] = $file->get('uploadname');

- $filedata['filetime'] = time();

-

- /**

- * Event to modify uploaded file before submit to the post

- *

- * @event core.modify_uploaded_file

- * @var array filedata Array containing uploaded file data

- * @var bool is_image Flag indicating if the file is an image

- * @since 3.1.0-RC3

- */

- $vars = array(

- 'filedata',

- 'is_image',

- );

- extract($phpbb_dispatcher->trigger_event('core.modify_uploaded_file', compact($vars)));

-

- // Check our complete quota

- if ($config['attachment_quota'])

- {

- if ($config['upload_dir_size'] + $file->get('filesize') > $config['attachment_quota'])

- {

- $filedata['error'][] = $user->lang['ATTACH_QUOTA_REACHED'];

- $filedata['post_attach'] = false;

-

- $file->remove();

-

- return $filedata;

- }

- }

-

- // Check free disk space

- if ($free_space = @disk_free_space($phpbb_root_path . $config['upload_path']))

- {

- if ($free_space <= $file->get('filesize'))

- {

- if ($auth->acl_get('a_'))

- {

- $filedata['error'][] = $user->lang['ATTACH_DISK_FULL'];

- }

- else

- {

- $filedata['error'][] = $user->lang['ATTACH_QUOTA_REACHED'];

- }

- $filedata['post_attach'] = false;

-

- $file->remove();

-

- return $filedata;

- }

- }

-

- // Create Thumbnail

- if ($filedata['thumbnail'])

- {

- $source = $file->get('destination_file');

- $destination = $file->get('destination_path') . '/thumb_' . $file->get('realname');

-

- if (!create_thumbnail($source, $destination, $file->get('mimetype')))

- {

- $filedata['thumbnail'] = 0;

- }

- }

- return $filedata;

- if (!function_exists('delete_attachments'))

- {

- include($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

- }

-

- delete_attachments('message', $delete_ids, false);

- if (!function_exists('delete_attachments'))

- {

- include($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

- }

-

- delete_attachments('message', $delete_ids, false);

- * The mimetype guesser object used for attachment mimetypes

- * @var \phpbb\mimetype\guesser

- */

- protected $mimetype_guesser;

-

- /**

- $filedata = upload_attachment($form_name, $forum_id, false, '', $is_message);

- phpbb_unlink($row['physical_filename'], 'file');

- phpbb_unlink($row['physical_filename'], 'thumbnail');

- delete_attachments('attach', array(intval($this->attachment_data[$index]['attach_id'])));

- $filedata = upload_attachment($form_name, $forum_id, false, '', $is_message, false, $this->mimetype_guesser, $this->plupload);

- * Setter function for passing the mimetype_guesser object

- *

- * @param \phpbb\mimetype\guesser $mimetype_guesser The mimetype_guesser object

- *

- * @return null

- */

- public function set_mimetype_guesser(\phpbb\mimetype\guesser $mimetype_guesser)

- {

- $this->mimetype_guesser = $mimetype_guesser;

- }

-

- /**

- if (!function_exists('delete_attachments'))

- {

- include_once($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

- }

-

- delete_attachments('attach', $delete_ids);