Update settings.php

[bookstack] / app / Http / Controllers / AttachmentController.php

diff --git a/app/Http/Controllers/AttachmentController.php b/app/Http/Controllers/AttachmentController.php
index 3c325d0fe8d4652d02e96bf0c393f040599417ec..8f5da49ed83c10c5979b9e4b8eaa74ac324e14b9 100644 (file)
--- a/app/Http/Controllers/AttachmentController.php
+++ b/app/Http/Controllers/AttachmentController.php
@@ -1,36 +1,37 @@
 <?php namespace BookStack\Http\Controllers;
 
 <?php namespace BookStack\Http\Controllers;
 

+use BookStack\Entities\Repos\PageRepo;

 use BookStack\Exceptions\FileUploadException;
 use BookStack\Exceptions\FileUploadException;

-use BookStack\Attachment;
-use BookStack\Repos\EntityRepo;
-use BookStack\Services\AttachmentService;
+use BookStack\Exceptions\NotFoundException;
+use BookStack\Uploads\Attachment;
+use BookStack\Uploads\AttachmentService;
+use Exception;
+use Illuminate\Contracts\Filesystem\FileNotFoundException;

 use Illuminate\Http\Request;
 use Illuminate\Http\Request;

+use Illuminate\Validation\ValidationException;

 
 class AttachmentController extends Controller
 {
     protected $attachmentService;
     protected $attachment;
 
 class AttachmentController extends Controller
 {
     protected $attachmentService;
     protected $attachment;

-    protected $entityRepo;
+    protected $pageRepo;

 
     /**
      * AttachmentController constructor.
 
     /**
      * AttachmentController constructor.

-     * @param AttachmentService $attachmentService
-     * @param Attachment $attachment
-     * @param EntityRepo $entityRepo

      */
      */

-    public function __construct(AttachmentService $attachmentService, Attachment $attachment, EntityRepo $entityRepo)
+    public function __construct(AttachmentService $attachmentService, Attachment $attachment, PageRepo $pageRepo)

     {
         $this->attachmentService = $attachmentService;
         $this->attachment = $attachment;
     {
         $this->attachmentService = $attachmentService;
         $this->attachment = $attachment;

-        $this->entityRepo = $entityRepo;
+        $this->pageRepo = $pageRepo;

         parent::__construct();
     }
 
 
     /**
      * Endpoint at which attachments are uploaded to.
         parent::__construct();
     }
 
 
     /**
      * Endpoint at which attachments are uploaded to.

-     * @param Request $request
-     * @return \Illuminate\Contracts\Routing\ResponseFactory|\Illuminate\Http\JsonResponse|\Symfony\Component\HttpFoundation\Response
+     * @throws ValidationException
+     * @throws NotFoundException

      */
     public function upload(Request $request)
     {
      */
     public function upload(Request $request)
     {


@@ -40,7 +41,7 @@ class AttachmentController extends Controller
         ]);
 
         $pageId = $request->get('uploaded_to');
         ]);
 
         $pageId = $request->get('uploaded_to');

-        $page = $this->entityRepo->getById('page', $pageId, true);
+        $page = $this->pageRepo->getById($pageId);

 
         $this->checkPermission('attachment-create-all');
         $this->checkOwnablePermission('page-update', $page);
 
         $this->checkPermission('attachment-create-all');
         $this->checkOwnablePermission('page-update', $page);


@@ -58,11 +59,10 @@ class AttachmentController extends Controller
 
     /**
      * Update an uploaded attachment.
 
     /**
      * Update an uploaded attachment.

-     * @param int $attachmentId
-     * @param Request $request
-     * @return mixed
+     * @throws ValidationException
+     * @throws NotFoundException

      */
      */

-    public function uploadUpdate($attachmentId, Request $request)
+    public function uploadUpdate(Request $request, $attachmentId)

     {
         $this->validate($request, [
             'uploaded_to' => 'required|integer|exists:pages,id',
     {
         $this->validate($request, [
             'uploaded_to' => 'required|integer|exists:pages,id',


@@ -70,7 +70,7 @@ class AttachmentController extends Controller
         ]);
 
         $pageId = $request->get('uploaded_to');
         ]);
 
         $pageId = $request->get('uploaded_to');

-        $page = $this->entityRepo->getById('page', $pageId, true);
+        $page = $this->pageRepo->getById($pageId);

         $attachment = $this->attachment->findOrFail($attachmentId);
 
         $this->checkOwnablePermission('page-update', $page);
         $attachment = $this->attachment->findOrFail($attachmentId);
 
         $this->checkOwnablePermission('page-update', $page);


@@ -93,20 +93,19 @@ class AttachmentController extends Controller
 
     /**
      * Update the details of an existing file.
 
     /**
      * Update the details of an existing file.

-     * @param $attachmentId
-     * @param Request $request
-     * @return Attachment|mixed
+     * @throws ValidationException
+     * @throws NotFoundException

      */
      */

-    public function update($attachmentId, Request $request)
+    public function update(Request $request, $attachmentId)

     {
         $this->validate($request, [
             'uploaded_to' => 'required|integer|exists:pages,id',
             'name' => 'required|string|min:1|max:255',
     {
         $this->validate($request, [
             'uploaded_to' => 'required|integer|exists:pages,id',
             'name' => 'required|string|min:1|max:255',

-            'link' =>  'url|min:1|max:255'
+            'link' =>  'string|min:1|max:255'

         ]);
 
         $pageId = $request->get('uploaded_to');
         ]);
 
         $pageId = $request->get('uploaded_to');

-        $page = $this->entityRepo->getById('page', $pageId, true);
+        $page = $this->pageRepo->getById($pageId);

         $attachment = $this->attachment->findOrFail($attachmentId);
 
         $this->checkOwnablePermission('page-update', $page);
         $attachment = $this->attachment->findOrFail($attachmentId);
 
         $this->checkOwnablePermission('page-update', $page);


@@ -122,19 +121,19 @@ class AttachmentController extends Controller
 
     /**
      * Attach a link to a page.
 
     /**
      * Attach a link to a page.

-     * @param Request $request
-     * @return mixed
+     * @throws ValidationException
+     * @throws NotFoundException

      */
     public function attachLink(Request $request)
     {
         $this->validate($request, [
             'uploaded_to' => 'required|integer|exists:pages,id',
             'name' => 'required|string|min:1|max:255',
      */
     public function attachLink(Request $request)
     {
         $this->validate($request, [
             'uploaded_to' => 'required|integer|exists:pages,id',
             'name' => 'required|string|min:1|max:255',

-            'link' =>  'required|url|min:1|max:255'
+            'link' =>  'required|string|min:1|max:255'

         ]);
 
         $pageId = $request->get('uploaded_to');
         ]);
 
         $pageId = $request->get('uploaded_to');

-        $page = $this->entityRepo->getById('page', $pageId, true);
+        $page = $this->pageRepo->getById($pageId);

 
         $this->checkPermission('attachment-create-all');
         $this->checkOwnablePermission('page-update', $page);
 
         $this->checkPermission('attachment-create-all');
         $this->checkOwnablePermission('page-update', $page);


@@ -148,29 +147,26 @@ class AttachmentController extends Controller
 
     /**
      * Get the attachments for a specific page.
 
     /**
      * Get the attachments for a specific page.

-     * @param $pageId
-     * @return mixed

      */
      */

-    public function listForPage($pageId)
+    public function listForPage(int $pageId)

     {
     {

-        $page = $this->entityRepo->getById('page', $pageId, true);
+        $page = $this->pageRepo->getById($pageId);

         $this->checkOwnablePermission('page-view', $page);
         return response()->json($page->attachments);
     }
 
     /**
      * Update the attachment sorting.
         $this->checkOwnablePermission('page-view', $page);
         return response()->json($page->attachments);
     }
 
     /**
      * Update the attachment sorting.

-     * @param $pageId
-     * @param Request $request
-     * @return mixed
+     * @throws ValidationException
+     * @throws NotFoundException

      */
      */

-    public function sortForPage($pageId, Request $request)
+    public function sortForPage(Request $request, int $pageId)

     {
         $this->validate($request, [
             'files' => 'required|array',
             'files.*.id' => 'required|integer',
         ]);
     {
         $this->validate($request, [
             'files' => 'required|array',
             'files.*.id' => 'required|integer',
         ]);

-        $page = $this->entityRepo->getById('page', $pageId);
+        $page = $this->pageRepo->getById($pageId);

         $this->checkOwnablePermission('page-update', $page);
 
         $attachments = $request->get('files');
         $this->checkOwnablePermission('page-update', $page);
 
         $attachments = $request->get('files');


@@ -180,13 +176,18 @@ class AttachmentController extends Controller
 
     /**
      * Get an attachment from storage.
 
     /**
      * Get an attachment from storage.

-     * @param $attachmentId
-     * @return \Illuminate\Contracts\Routing\ResponseFactory|\Illuminate\Http\RedirectResponse|\Illuminate\Routing\Redirector|\Symfony\Component\HttpFoundation\Response
+     * @throws FileNotFoundException
+     * @throws NotFoundException

      */
      */

-    public function get($attachmentId)
+    public function get(int $attachmentId)

     {
         $attachment = $this->attachment->findOrFail($attachmentId);
     {
         $attachment = $this->attachment->findOrFail($attachmentId);

-        $page = $this->entityRepo->getById('page', $attachment->uploaded_to);
+        try {
+            $page = $this->pageRepo->getById($attachment->uploaded_to);
+        } catch (NotFoundException $exception) {
+            throw new NotFoundException(trans('errors.attachment_not_found'));
+        }
+

         $this->checkOwnablePermission('page-view', $page);
 
         if ($attachment->external) {
         $this->checkOwnablePermission('page-view', $page);
 
         if ($attachment->external) {


@@ -194,18 +195,16 @@ class AttachmentController extends Controller
         }
 
         $attachmentContents = $this->attachmentService->getAttachmentFromStorage($attachment);
         }
 
         $attachmentContents = $this->attachmentService->getAttachmentFromStorage($attachment);

-        return response($attachmentContents, 200, [
-            'Content-Type' => 'application/octet-stream',
-            'Content-Disposition' => 'attachment; filename="'. $attachment->getFileName() .'"'
-        ]);
+        return $this->downloadResponse($attachmentContents, $attachment->getFileName());

     }
 
     /**
      * Delete a specific attachment in the system.
      * @param $attachmentId
      * @return mixed
     }
 
     /**
      * Delete a specific attachment in the system.
      * @param $attachmentId
      * @return mixed

+     * @throws Exception

      */
      */

-    public function delete($attachmentId)
+    public function delete(int $attachmentId)

     {
         $attachment = $this->attachment->findOrFail($attachmentId);
         $this->checkOwnablePermission('attachment-delete', $attachment);
     {
         $attachment = $this->attachment->findOrFail($attachmentId);
         $this->checkOwnablePermission('attachment-delete', $attachment);