added integrated upload form, can be disabled with DISABLE_UPLOADFORM setting or env in Docker

geek-at · geek-at · commit 8034a2f8d9cb · 2024-12-08T21:28:56.000+01:00
diff --git a/config/example.config.inc.php b/config/example.config.inc.php
@@ -3,6 +3,8 @@
 // copy this file to config.inc.php
 // and edit to your needs
 
+// site settings
+define('DISABLE_UPLOADFORM',false); // set to true to disable the upload form and only allow uploads via API
 
 // AGE encryption settings
 // More info on age encryption: https://github.com/FiloSottile/age
diff --git a/docker/rootfs/start.sh b/docker/rootfs/start.sh
@@ -20,6 +20,8 @@ nginx
 _buildConfig() {
     echo "<?php"
 
+    echo "define('DISABLE_UPLOADFORM',${DISABLE_UPLOADFORM:-false});"
+
     echo "define('ENCRYPTION_AGE_SSH_PUBKEY','${ENCRYPTION_AGE_SSH_PUBKEY:-}');"
     echo "define('ENCRYPTION_AGE_PUBKEY','${ENCRYPTION_AGE_PUBKEY:-}');"
 
diff --git a/web/index.php b/web/index.php
@@ -23,20 +23,25 @@
 
 //getting the url as array
 $url = array_filter(explode('/',ltrim(parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH),'/')));
+$method = $_SERVER['REQUEST_METHOD'];
 
 //main logic
 //deciding what to do based on URL
 $hostname = $url[0];
 if(!$hostname || $url[0] == 'rtfm') //no hostname? Well let's render the info page
     echo renderInfoPage($url[1]);
-else //handle an upload
+else if($method=='POST') //handle an upload
 {
     header('Content-Type: application/json');
     
     //let's filter out the hostname and get rid of every special char except for: . _ -
     $hostname = preg_replace("/[^a-zA-Z0-9\.\-_]+/", "", $hostname);
     echo json_encode(handleUpload($hostname)).PHP_EOL;
 }
+else if($method=='GET' && defined('DISABLE_UPLOADFORM') && DISABLE_UPLOADFORM!==true) //render file upload dialogue
+{
+    include_once(ROOT.DS.'lib'.DS.'upload-template.html.php');
+}
 
 
 //functions start here
diff --git a/web/lib/upload-template.html.php b/web/lib/upload-template.html.php
@@ -0,0 +1,11 @@
+<html>
+<head>
+    <title>Upload Backup</title>
+    <script src="https://unpkg.com/dropzone@5/dist/min/dropzone.min.js"></script>
+    <link rel="stylesheet" href="https://unpkg.com/dropzone@5/dist/min/dropzone.min.css" type="text/css" />
+</head> 
+<body>
+    <form action="/<?=$url[0]?>" class="dropzone" method="POST" enctype="multipart/form-data">
+
+    </form>
+</html>
