mivita/app/Services/Slim.php

<?php

namespace App\Services;

abstract class SlimStatus
{
    const FAILURE = 'failure';

    const SUCCESS = 'success';
}

class Slim
{
    /**
     * Speichert ein Slim-Cropper-Upload (Base64-Payload aus getImages()) im
     * public-Disk und liefert Dateiname + Metadaten — gemeinsame Logik für
     * Shop- und Profilfoto-Upload. Null bei nicht erlaubtem Dateityp.
     *
     * @param  array  $image  Ein Eintrag aus {@see getImages()}
     * @return array{filename: string, originalname: string, ext: string, mime: string, size: mixed}|null
     */
    public static function storeCroppedImage(array $image, string $directory): ?array
    {
        $allowed = ['image/jpeg' => 'jpg', 'image/png' => 'png'];

        if (! isset($allowed[$image['output']['type']])) {
            return null;
        }

        $name = uniqid().'_'.Slim::sanitizeFileName($image['output']['name']);

        \Storage::disk('public')->put(rtrim($directory, '/').'/'.$name, $image['output']['data']);

        return [
            'filename' => $name,
            'originalname' => $image['output']['name'],
            'ext' => $allowed[$image['output']['type']],
            'mime' => $image['output']['type'],
            'size' => $image['input']['size'] ?? null,
        ];
    }

    public static function getImages($inputName = 'slim')
    {

        $values = Slim::getPostData($inputName);

        // test for errors
        if ($values === false) {
            return false;
        }

        // determine if contains multiple input values, if is singular, put in array
        $data = [];
        if (! is_array($values)) {
            $values = [$values];
        }

        // handle all posted fields
        foreach ($values as $value) {
            $inputValue = Slim::parseInput($value);
            if ($inputValue) {
                array_push($data, $inputValue);
            }
        }

        // return the data collected from the fields
        return $data;

    }

    // $value should be in JSON format
    private static function parseInput($value)
    {

        // if no json received, exit, don't handle empty input values.
        if (empty($value)) {
            return null;
        }

        // If magic quotes enabled
        // Magic quotes were removed in PHP 5.4, no need to check in PHP 8.2

        // The data is posted as a JSON String so to be used it needs to be deserialized first
        $data = json_decode($value);

        // shortcut
        $input = null;
        $actions = null;
        $output = null;
        $meta = null;

        if (isset($data->input)) {

            $inputData = null;
            if (isset($data->input->image)) {
                $inputData = Slim::getBase64Data($data->input->image);
            } elseif (isset($data->input->field)) {
                $filename = $_FILES[$data->input->field]['tmp_name'];
                if ($filename) {
                    $inputData = file_get_contents($filename);
                }
            }

            $input = [
                'data' => $inputData,
                'name' => $data->input->name,
                'type' => $data->input->type,
                'size' => $data->input->size,
                'width' => $data->input->width,
                'height' => $data->input->height,
            ];

        }

        if (isset($data->output)) {

            $outputDate = null;
            if (isset($data->output->image)) {
                $outputData = Slim::getBase64Data($data->output->image);
            } elseif (isset($data->output->field)) {
                $filename = $_FILES[$data->output->field]['tmp_name'];
                if ($filename) {
                    $outputData = file_get_contents($filename);
                }
            }

            $output = [
                'data' => $outputData,
                'name' => $data->output->name,
                'type' => $data->output->type,
                'width' => $data->output->width,
                'height' => $data->output->height,
            ];
        }

        if (isset($data->actions)) {
            $actions = [
                'crop' => $data->actions->crop ? [
                    'x' => $data->actions->crop->x,
                    'y' => $data->actions->crop->y,
                    'width' => $data->actions->crop->width,
                    'height' => $data->actions->crop->height,
                    'type' => $data->actions->crop->type,
                ] : null,
                'size' => $data->actions->size ? [
                    'width' => $data->actions->size->width,
                    'height' => $data->actions->size->height,
                ] : null,
                'rotation' => $data->actions->rotation,
                'filters' => $data->actions->filters ? [
                    'sharpen' => $data->actions->filters->sharpen,
                ] : null,
            ];
        }

        if (isset($data->meta)) {
            $meta = $data->meta;
        }

        // We've sanitized the base64data and will now return the clean file object
        return [
            'input' => $input,
            'output' => $output,
            'actions' => $actions,
            'meta' => $meta,
        ];
    }

    // $path should have trailing slash
    public static function saveFile($data, $name, $path = 'tmp/', $uid = true)
    {

        // Add trailing slash if omitted
        if (substr($path, -1) !== '/') {
            $path .= '/';
        }

        // Test if directory already exists
        if (! is_dir($path)) {
            mkdir($path, 0755, true);
        }

        // Sanitize characters in file name
        $name = Slim::sanitizeFileName($name);

        // Let's put a unique id in front of the filename so we don't accidentally overwrite other files
        if ($uid) {
            $name = uniqid().'_'.$name;
        }

        // Add name to path, we need the full path including the name to save the file
        $path = $path.$name;

        // store the file
        Slim::save($data, $path);

        // return the files new name and location
        return [
            'name' => $name,
            'path' => $path,
        ];
    }

    /**
     * Get data from remote URL
     *
     * @return string
     */
    public static function fetchURL($url, $maxFileSize)
    {
        if (! ini_get('allow_url_fopen')) {
            return null;
        }
        $content = null;
        try {
            $content = @file_get_contents($url, false, null, 0, $maxFileSize);
        } catch (Exception $e) {
            return false;
        }

        return $content;
    }

    public static function outputJSON($data)
    {
        header('Content-Type: application/json');
        echo json_encode($data);
    }

    /**
     * http://stackoverflow.com/a/2021729
     * Remove anything which isn't a word, whitespace, number
     * or any of the following characters -_~,;[]().
     * If you don't need to handle multi-byte characters
     * you can use preg_replace rather than mb_ereg_replace
     *
     * @return string
     */
    public static function sanitizeFileName($str)
    {
        // Basic clean up
        $str = preg_replace('([^\w\s\d\-_~,;\[\]\(\).])', '', $str);
        // Remove any runs of periods
        $str = preg_replace('([\.]{2,})', '', $str);

        $str = (strlen($str) > 33) ? substr($str, -33) : $str;

        return $str;
    }

    /**
     * Gets the posted data from the POST or FILES object. If was using Slim to upload it will be in POST (as posted with hidden field) if not enhanced with Slim it'll be in FILES.
     *
     * @return array|bool
     */
    private static function getPostData($inputName)
    {

        $values = [];

        if (isset($_POST[$inputName])) {
            $values = $_POST[$inputName];
        } elseif (isset($_FILES[$inputName])) {
            // Slim was not used to upload this file
            return false;
        }

        return $values;
    }

    /**
     * Saves the data to a given location
     *
     * @return bool
     */
    private static function save($data, $path)
    {
        if (! file_put_contents($path, $data)) {
            return false;
        }

        return true;
    }

    /**
     * Strips the "data:image..." part of the base64 data string so PHP can save the string as a file
     *
     * @return string
     */
    private static function getBase64Data($data)
    {
        return base64_decode(preg_replace('#^data:image/\w+;base64,#i', '', $data));
    }
}