444 lines
19 KiB (Stored with Git LFS)
PHP
444 lines
19 KiB (Stored with Git LFS)
PHP
<?php
|
||
|
||
$domain = $_SERVER['HTTP_HOST'];
|
||
require(__DIR__ . '/../../../db.php');
|
||
require(__DIR__ . "/../../../function/function.php");
|
||
blockedIP($_SERVER['REMOTE_ADDR']);
|
||
|
||
header("Content-Type: application/json; charset=utf-8");
|
||
header("Access-Control-Allow-Origin: *");
|
||
|
||
$pdo = null;
|
||
$error_message = array();
|
||
try {
|
||
$option = array(
|
||
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
|
||
PDO::MYSQL_ATTR_MULTI_STATEMENTS => false
|
||
);
|
||
$pdo = new PDO('mysql:charset=utf8mb4;dbname=' . DB_NAME . ';host=' . DB_HOST, DB_USER, DB_PASS, $option);
|
||
} catch (PDOException $e) {
|
||
// 接続エラーのときエラー内容を取得する
|
||
$error_message[] = $e->getMessage();
|
||
}
|
||
|
||
$Get_Post_Json = file_get_contents("php://input");
|
||
if (isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
|
||
//トークン取得
|
||
if (!(empty($_GET['token']))) {
|
||
$token = safetext($_GET['token']);
|
||
} else {
|
||
$post_json = json_decode($Get_Post_Json, true);
|
||
if (isset($post_json["token"])) {
|
||
$token = safetext($post_json["token"]);
|
||
} else {
|
||
$err = "input_not_found";
|
||
$response = array(
|
||
'error_code' => $err,
|
||
'success' => false
|
||
);
|
||
echo json_encode($response, JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
}
|
||
if ($token == "") {
|
||
$err = "input_not_found";
|
||
$response = array(
|
||
'error_code' => $err,
|
||
'success' => false
|
||
);
|
||
echo json_encode($response, JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
|
||
if (!empty($pdo)) {
|
||
$AuthData = APIAuth($pdo, $token, "write:me");
|
||
if ($AuthData[0] === true) {
|
||
if(file_exists(__DIR__ . "/../../../settings_admin/plugin_settings/amazons3_settings.php")){
|
||
require_once __DIR__ . '/../../../settings_admin/plugin_settings/amazons3_settings.php';
|
||
if(AMS3_CHKS == "true"){
|
||
if(file_exists(__DIR__ . "/../../../plugin/aws/aws-autoloader.php")){
|
||
require_once __DIR__ . '/../../../plugin/aws/aws-autoloader.php';
|
||
}else{
|
||
actionLog(null, "error", "settings", null, "AWS SDK for PHPが見つかりませんでした！", 4);
|
||
}
|
||
}
|
||
}else{
|
||
actionLog(null, "error", "settings", null, "amazons3_settings.phpが見つかりませんでした！", 3);
|
||
}
|
||
|
||
$userData = $AuthData[2];
|
||
$userid = $userData["userid"];
|
||
|
||
$add_sql = array();
|
||
|
||
if (!(empty($_GET['username']))) {
|
||
$username = safetext($_GET['username']);
|
||
} elseif (!(empty($post_json["username"]))) {
|
||
$username = safetext($post_json["username"]);
|
||
} else {
|
||
$username = null;
|
||
}
|
||
|
||
// ユーザーネームの入力チェック
|
||
if (!($username === null)) {
|
||
if (empty($username)) {
|
||
$error_message[] = '表示名を入力してください。(USERNAME_INPUT_PLEASE)';
|
||
} else {
|
||
// 文字数を確認
|
||
if (50 < mb_strlen($username, 'UTF-8')) {
|
||
$error_message[] = 'ユーザーネームは50文字以内で入力してください。(USERNAME_OVER_MAX_COUNT)';
|
||
}
|
||
}
|
||
|
||
$add_sql[] = "username = :username";
|
||
}
|
||
|
||
|
||
if (!(empty($_GET['profile']))) {
|
||
$profile = safetext($_GET['profile']);
|
||
} elseif (!(empty($post_json["profile"]))) {
|
||
$profile = safetext($post_json["profile"]);
|
||
} else {
|
||
$profile = null;
|
||
}
|
||
|
||
if (!($profile === null)) {
|
||
if (1024 < mb_strlen($profile, 'UTF-8')) {
|
||
$error_message[] = 'プロフィールは1024文字以内で入力してください。(INPUT_OVER_MAX_COUNT)';
|
||
}
|
||
$add_sql[] = "profile = :profile";
|
||
}
|
||
|
||
|
||
if (!(empty($post_json["icon"]))) {
|
||
$imageData = base64_decode($post_json["icon"], true);
|
||
|
||
$tmpFilePath = tempnam(sys_get_temp_dir(), 'upload_' . createUniqId());
|
||
file_put_contents($tmpFilePath, $imageData);
|
||
|
||
$IconFiles = [
|
||
'name' => 'upload.png',
|
||
'type' => check_mime($tmpFilePath),
|
||
'tmp_name' => $tmpFilePath,
|
||
'error' => UPLOAD_ERR_OK,
|
||
'size' => strlen($imageData),
|
||
];
|
||
} else {
|
||
$IconFiles = array();
|
||
}
|
||
|
||
|
||
if (isset($IconFiles)) {
|
||
if (!(empty($IconFiles['name']))) {
|
||
$uploadedFile = $IconFiles;
|
||
if (check_mime($uploadedFile['tmp_name'])) {
|
||
$extension = pathinfo($uploadedFile['name'], PATHINFO_EXTENSION);
|
||
delete_exif($extension, $uploadedFile['tmp_name']);
|
||
resizeImage($uploadedFile['tmp_name'], 512, 512);
|
||
|
||
if (AMS3_CHKS == "true") {
|
||
$usericonurl = getUserData($pdo, $userid)["iconname"];
|
||
if (filter_var($usericonurl, FILTER_VALIDATE_URL)) {
|
||
$s3delresult = deleteAmazonS3($usericonurl);
|
||
} else {
|
||
$s3delresult = true;
|
||
}
|
||
if ($s3delresult == true) {
|
||
$s3result = uploadAmazonS3($uploadedFile['tmp_name']);
|
||
} else {
|
||
$s3result = false;
|
||
}
|
||
} else {
|
||
if (check_mime($uploadedFile['tmp_name']) == "image/webp") {
|
||
$newFilename = createUniqId() . '-' . $userid . '.webp';
|
||
} else {
|
||
$newFilename = createUniqId() . '-' . $userid . '.' . $extension;
|
||
}
|
||
$uploadedPath = 'usericons/' . $newFilename;
|
||
$result = rename($uploadedFile['tmp_name'], __DIR__ . '/../../../' . $uploadedPath);
|
||
|
||
if ($result) {
|
||
$iconName = $uploadedPath; // 保存されたファイルのパスを使用
|
||
$currentIconPath = getUserData($pdo, $userid)["iconname"];
|
||
} else {
|
||
$errnum = $uploadedFile['error'];
|
||
$errcode = "ERROR";
|
||
|
||
switch ($errnum) {
|
||
case 1:
|
||
$errcode = "FILE_DEKASUGUI_PHP_INI_KAKUNIN";
|
||
break;
|
||
case 2:
|
||
$errcode = "FILE_DEKASUGUI_HTML_KAKUNIN";
|
||
break;
|
||
case 3:
|
||
$errcode = "FILE_SUKOSHIDAKE_UPLOAD";
|
||
break;
|
||
case 4:
|
||
$errcode = "FILE_UPLOAD_DEKINAKATTA";
|
||
break;
|
||
case 6:
|
||
$errcode = "TMP_FOLDER_NAI";
|
||
break;
|
||
case 7:
|
||
$errcode = "FILE_KAKIKOMI_SIPPAI";
|
||
break;
|
||
case 8:
|
||
$errcode = "PHPINFO()_KAKUNIN";
|
||
break;
|
||
case 0:
|
||
// 成功だったのに move_uploaded_file() が失敗した
|
||
if (!is_uploaded_file($uploadedFile['tmp_name'])) {
|
||
$errcode = "TMP_FILE_NAI";
|
||
} elseif (!is_writable(__DIR__ . '/../../../usericons/')) {
|
||
$errcode = "SAVE_FOLDER_KAKIKOMI_KENNAI";
|
||
} else {
|
||
$errcode = "MOVE_UPLOAD_FILE_SIPPAI";
|
||
}
|
||
break;
|
||
}
|
||
$error_message[] = 'アップロード失敗！(1)エラーコード：' . $errcode . '';
|
||
}
|
||
}
|
||
if (isset($s3result)) {
|
||
if ($s3result == false) {
|
||
$error_message[] = 'アップロード失敗！(1)エラーコード： S3ERROR';
|
||
} else {
|
||
$iconName = $s3result; // S3に保存されたファイルのパスを使用
|
||
$currentIconPath = getUserData($pdo, $userid)["iconname"];
|
||
}
|
||
}
|
||
} else {
|
||
$error_message[] = "使用できない画像形式です。(FILE_UPLOAD_DEKINAKATTA)";
|
||
}
|
||
}
|
||
}
|
||
if (!(empty($iconName))) {
|
||
$add_sql[] = "iconname = :iconname";
|
||
}
|
||
|
||
|
||
if (!(empty($post_json["header"]))) {
|
||
$imageData = base64_decode($post_json["header"], true);
|
||
|
||
$tmpFilePath = tempnam(sys_get_temp_dir(), 'upload_' . createUniqId());
|
||
file_put_contents($tmpFilePath, $imageData);
|
||
|
||
$HeadFiles = [
|
||
'name' => 'upload.png',
|
||
'type' => check_mime($tmpFilePath),
|
||
'tmp_name' => $tmpFilePath,
|
||
'error' => UPLOAD_ERR_OK,
|
||
'size' => strlen($imageData),
|
||
];
|
||
} else {
|
||
$HeadFiles = array();
|
||
}
|
||
|
||
|
||
if (isset($HeadFiles)) {
|
||
if (!(empty($HeadFiles['name']))) {
|
||
$uploadedFile = $HeadFiles;
|
||
if (check_mime($uploadedFile['tmp_name'])) {
|
||
$extension = pathinfo($uploadedFile['name'], PATHINFO_EXTENSION);
|
||
delete_exif($extension, $uploadedFile['tmp_name']);
|
||
resizeImage($uploadedFile['tmp_name'], 2048, 1024);
|
||
|
||
if (AMS3_CHKS == "true") {
|
||
$userheadurl = getUserData($pdo, $userid)["headname"];
|
||
if (filter_var($userheadurl, FILTER_VALIDATE_URL)) {
|
||
$s3delresult = deleteAmazonS3($userheadurl);
|
||
} else {
|
||
$s3delresult = true;
|
||
}
|
||
if ($s3delresult == true) {
|
||
$s3result = uploadAmazonS3($uploadedFile['tmp_name']);
|
||
} else {
|
||
$s3result = false;
|
||
}
|
||
} else {
|
||
if (check_mime($uploadedFile['tmp_name']) == "image/webp") {
|
||
$newFilename = createUniqId() . '-' . $userid . '.webp';
|
||
} else {
|
||
$newFilename = createUniqId() . '-' . $userid . '.' . $extension;
|
||
}
|
||
$uploadedPath = 'userheads/' . $newFilename;
|
||
$result = rename($uploadedFile['tmp_name'], __DIR__ . '/../../../' . $uploadedPath);
|
||
|
||
if ($result) {
|
||
$headName = $uploadedPath; // 保存されたファイルのパスを使用
|
||
$currentHeadPath = getUserData($pdo, $userid)["headname"];
|
||
} else {
|
||
$errnum = $uploadedFile['error'];
|
||
$errcode = "ERROR";
|
||
|
||
switch ($errnum) {
|
||
case 1:
|
||
$errcode = "FILE_DEKASUGUI_PHP_INI_KAKUNIN";
|
||
break;
|
||
case 2:
|
||
$errcode = "FILE_DEKASUGUI_HTML_KAKUNIN";
|
||
break;
|
||
case 3:
|
||
$errcode = "FILE_SUKOSHIDAKE_UPLOAD";
|
||
break;
|
||
case 4:
|
||
$errcode = "FILE_UPLOAD_DEKINAKATTA";
|
||
break;
|
||
case 6:
|
||
$errcode = "TMP_FOLDER_NAI";
|
||
break;
|
||
case 7:
|
||
$errcode = "FILE_KAKIKOMI_SIPPAI";
|
||
break;
|
||
case 8:
|
||
$errcode = "PHPINFO()_KAKUNIN";
|
||
break;
|
||
case 0:
|
||
// 成功だったのに move_uploaded_file() が失敗した
|
||
if (!is_uploaded_file($uploadedFile['tmp_name'])) {
|
||
$errcode = "TMP_FILE_NAI";
|
||
} elseif (!is_writable(__DIR__ . '/../../../usericons/')) {
|
||
$errcode = "SAVE_FOLDER_KAKIKOMI_KENNAI";
|
||
} else {
|
||
$errcode = "MOVE_UPLOAD_FILE_SIPPAI";
|
||
}
|
||
break;
|
||
}
|
||
$error_message[] = 'アップロード失敗！(2)エラーコード：' . $errcode . '';
|
||
}
|
||
}
|
||
if (isset($s3result)) {
|
||
if ($s3result == false) {
|
||
$error_message[] = 'アップロード失敗！(2)エラーコード： S3ERROR';
|
||
} else {
|
||
$headName = $s3result; // S3に保存されたファイルのパスを使用
|
||
$currentHeadPath = getUserData($pdo, $userid)["headname"];
|
||
}
|
||
}
|
||
} else {
|
||
$error_message[] = "使用できない画像形式です。(FILE_UPLOAD_DEKINAKATTA)";
|
||
}
|
||
}
|
||
}
|
||
|
||
if (!(empty($headName))) {
|
||
$add_sql[] = "headname = :headname";
|
||
}
|
||
|
||
if(empty($add_sql)) {
|
||
$err = "input_not_found";
|
||
$response = array(
|
||
'error_code' => $err,
|
||
'success' => false
|
||
);
|
||
echo json_encode($response, JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}else{
|
||
$add_sql = implode(", ", $add_sql);
|
||
}
|
||
|
||
if (empty($error_message)) {
|
||
// トランザクション開始
|
||
$pdo->beginTransaction();
|
||
|
||
try {
|
||
|
||
$stmt = $pdo->prepare("UPDATE account SET ".$add_sql." WHERE userid = :userid;");
|
||
|
||
// 他の値をセット
|
||
if (!(empty($username))) {
|
||
$stmt->bindValue(':username', $username, PDO::PARAM_STR);
|
||
}
|
||
if (!(empty($profile))) {
|
||
$stmt->bindValue(':profile', $profile, PDO::PARAM_STR);
|
||
}
|
||
if (!(empty($iconName))) {
|
||
$stmt->bindValue(':iconname', $iconName, PDO::PARAM_STR);
|
||
}
|
||
if (!(empty($headName))) {
|
||
$stmt->bindValue(':headname', $headName, PDO::PARAM_STR);
|
||
}
|
||
|
||
$stmt->bindValue(':userid', $userid, PDO::PARAM_STR);
|
||
$res = $stmt->execute();
|
||
|
||
// コミット
|
||
if($res) {
|
||
$pdo->commit();
|
||
if (!(empty($iconName))) {
|
||
if ($currentIconPath && !filter_var($currentIconPath, FILTER_VALIDATE_URL)) {
|
||
$filePath = realpath(__DIR__ . '/../../../' . $currentIconPath);
|
||
if ($filePath && file_exists($filePath)) {
|
||
unlink($filePath);
|
||
}
|
||
}
|
||
}
|
||
if (!(empty($headName))) {
|
||
if ($currentHeadPath && !filter_var($currentHeadPath, FILTER_VALIDATE_URL)) {
|
||
$filePath = realpath(__DIR__ . '/../../../' . $currentHeadPath);
|
||
if ($filePath && file_exists($filePath)) {
|
||
unlink($filePath);
|
||
}
|
||
}
|
||
}
|
||
|
||
$response = array(
|
||
'success' => true
|
||
);
|
||
echo json_encode($response, JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
} else {
|
||
$pdo->rollBack();
|
||
$err = "update_failed";
|
||
$response = array(
|
||
'error_code' => $err,
|
||
'success' => false
|
||
);
|
||
echo json_encode($response, JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
} catch (Exception $e) {
|
||
$pdo->rollBack();
|
||
actionLog($userid, "error", "user-settings-api", null, $e, 4);
|
||
$err = "update_failed";
|
||
$response = array(
|
||
'error_code' => $err,
|
||
'success' => false
|
||
);
|
||
echo json_encode($response, JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
|
||
$stmt = null;
|
||
}else{
|
||
$err = $error_message;
|
||
$response = array(
|
||
'error_code' => $err,
|
||
'success' => false
|
||
);
|
||
echo json_encode($response, JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
} else {
|
||
$err = $AuthData[1];
|
||
$response = array(
|
||
'error_code' => $err,
|
||
'success' => false
|
||
);
|
||
|
||
echo json_encode($response, JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|
||
}
|
||
} else {
|
||
$err = "input_not_found";
|
||
$response = array(
|
||
'error_code' => $err,
|
||
'success' => false
|
||
);
|
||
|
||
echo json_encode($response, JSON_UNESCAPED_UNICODE);
|
||
exit;
|
||
}
|