typeof lang_strings != 'undefined' && key in lang_strings ? lang_strings[key] : key;
+
+ const common_buttons = `Upload this file? ${_('Confirm delete?')} `;
+ const wopi_dialog = ``;
+
+ const dialog_tpl = `
Files
`;
+
+ const body_tpl = `%title%
+
+
+ ${_('Sort by name')}
+ ${_('Sort by date')}
+ ${_('Sort by size')}
+
+
+ `;
+
+ const dir_row_tpl = `%icon% %name%
%icon% %name% %size% %modified%
+
+
+ `;
+
+ const wopi_propfind_tpl = `
+
+
+
+ `;
+
+ const html = (unsafe) => {
+ return unsafe.replace(/&/g, "&").replace(//g, ">").replace(/"/g, """).replace(/'/g, "'");
+ };
+
+ const reqXML = (method, url, body, headers) => {
+ return req(method, url, body, headers).then((r) => {
+ if (!r.ok) {
+ throw new Error(r.status + ' ' + r.statusText);
+ }
+ return r.text();
+ }).then(str => new window.DOMParser().parseFromString(str, "text/xml"));
+ };
+
+ const reqAndReload = (method, url, body, headers) => {
+ animateLoading();
+ req(method, url, body, headers).then(r => {
+ stopLoading();
+ if (!r.ok) {
+ return r.text().then(t => {
+ var message;
+ if (a = t.match(/<((?:\w+:)?message)>(.*)<\/\1>/)) {
+ message = "\n" + a[2];
+ }
+
+ throw new Error(r.status + ' ' + r.statusText + message); });
+ }
+ reloadListing();
+ }).catch(e => {
+ console.error(e);
+ alert(e);
+ });
+ return false;
+ };
+
+ const get_url = async (url) => {
+ if (temp_object_url) {
+ window.URL.revokeObjectURL(temp_object_url);
+ }
+
+ return req('GET', url).then(r => r.blob()).then(blob => {
+ temp_object_url = window.URL.createObjectURL(blob);
+ return temp_object_url;
+ });
+ }
+
+ const req = (method, url, body, headers) => {
+ if (!headers) {
+ headers = {};
+ }
+
+ if (auth_header) {
+ headers.Authorization = auth_header;
+ }
+
+ return fetch(url, {method, body, headers});
+ };
+
+ const wopi_init = async () => {
+ if (!wopi_discovery_url) {
+ return;
+ }
+
+ var d = await reqXML('GET', wopi_discovery_url);
+
+ d.querySelectorAll('app').forEach(app => {
+ var mime = (a = app.getAttribute('name').match(/^.*\/.*$/)) ? a[0] : null;
+ wopi_mimes[mime] = {};
+
+ app.querySelectorAll('action').forEach(action => {
+ var ext = action.getAttribute('ext').toUpperCase();
+ var url = action.getAttribute('urlsrc').replace(/<[^>]*&>/g, '');
+ var name = action.getAttribute('name');
+
+ if (mime) {
+ wopi_mimes[mime][name] = url;
+ }
+ else {
+ if (!wopi_extensions.hasOwnProperty(ext)) {
+ wopi_extensions[ext] = {};
+ }
+
+ wopi_extensions[ext][name] = url;
+ }
+ });
+ });
+
+ reloadListing();
+ };
+
+ const wopi_getEditURL = (name, mime) => {
+ var file_ext = name.replace(/^.*\.(\w+)$/, '$1').toUpperCase();
+
+ if (wopi_mimes.hasOwnProperty(mime) && wopi_mimes[mime].hasOwnProperty('edit')) {
+ return wopi_mimes[mime].edit;
+ }
+ else if (wopi_extensions.hasOwnProperty(file_ext) && wopi_extensions[file_ext].hasOwnProperty('edit')) {
+ return wopi_extensions[file_ext].edit;
+ }
+
+ return null;
+ };
+
+ const wopi_getViewURL = (name, mime) => {
+ var file_ext = name.replace(/^.*\.(\w+)$/, '$1').toUpperCase();
+
+ if (wopi_mimes.hasOwnProperty(mime) && wopi_mimes[mime].hasOwnProperty('view')) {
+ return wopi_mimes[mime].view;
+ }
+ else if (wopi_extensions.hasOwnProperty(file_ext) && wopi_extensions[file_ext].hasOwnProperty('view')) {
+ return wopi_extensions[file_ext].view;
+ }
+
+ return wopi_getEditURL(name, mime);
+ };
+
+ const wopi_open = async (document_url, wopi_url) => {
+ var properties = await reqXML('PROPFIND', document_url, wopi_propfind_tpl, {'Depth': '0'});
+ var src = (a = properties.querySelector('file-url')) ? a.textContent : null;
+ var token = (a = properties.querySelector('token')) ? a.textContent : null;
+ var token_ttl = (a = properties.querySelector('token-ttl')) ? a.textContent : +(new Date(Date.now() + 3600 * 1000));
+
+ if (!src || !token) {
+ alert('Cannot open document: WebDAV server did not return WOPI properties');
+ }
+
+ wopi_url += '&WOPISrc=' + encodeURIComponent(src);
+
+ openDialog(wopi_dialog, false);
+ $('dialog').className = 'preview';
+
+ var f = $('dialog form');
+ f.target = 'wopi_frame';
+ f.action = wopi_url;
+ f.method = 'post';
+ f.insertAdjacentHTML('beforeend', `
` : '');
+ $('body').classList.add('dialog');
+ $('body').insertAdjacentHTML('beforeend', tpl.replace(/%s/, html));
+ $('.close input').onclick = closeDialog;
+ evt = window.addEventListener('keyup', (e) => {
+ if (e.key != 'Escape') return;
+ closeDialog();
+ return false;
+ });
+ if (a = $('dialog form input, dialog form textarea')) a.focus();
+ };
+
+ const closeDialog = (e) => {
+ $('body').classList.remove('dialog');
+ if (!$('dialog')) return;
+ $('dialog').remove();
+ window.removeEventListener('keyup', evt);
+ evt = null;
+ };
+
+ const download = async (name, url) => {
+ var url = await get_url(url);
+ const a = document.createElement('a');
+ a.style.display = 'none';
+ a.href = url;
+ a.download = name;
+ document.body.appendChild(a);
+ a.click();
+ window.URL.revokeObjectURL(url);
+ a.remove();
+ };
+
+ const preview = (type, url) => {
+ if (type.match(/^image\//)) {
+ openDialog(`
', false);
+ $('dialog').className = 'preview';
+ req('GET', file_url).then(r => r.text()).then(t => {
+ $('.md_preview').innerHTML = microdown.parse(html(t));
+ });
+ return false;
+ }
+
+ if (user && password) {
+ (async () => { preview(mime, await get_url(file_url)); })();
+ }
+ else {
+ preview(mime, file_url);
+ }
+
+ return false;
+ };
+ }
+ else if (view_url = wopi_getViewURL(file_url, mime)) {
+ $$('.icon').classList.add('document');
+ $$('a').onclick = () => { wopi_open(file_url, view_url); return false; };
+ }
+ else if (user && password && !dir) {
+ $$('a').onclick = () => { download(file_name, file_url); return false; };
+ }
+ else {
+ $$('a').download = file_name;
+ }
+
+ if (mime.match(/^text\/|application\/x-empty/)) {
+ buttons.insertAdjacentHTML('beforeend', edit_button);
+
+ $$('.edit').onclick = (e) => {
+ req('GET', file_url).then((r) => r.text().then((t) => {
+ let md = file_url.match(/\.md$/);
+ openDialog(md ? markdown_dialog : edit_dialog);
+ var txt = $('textarea[name=edit]');
+ txt.value = t;
+
+ // Markdown editor
+ if (md) {
+ let pre = $('#md');
+
+ txt.oninput = () => {
+ pre.innerHTML = microdown.parse(html(txt.value));
+ };
+
+ txt.oninput();
+
+ // Sync scroll, not perfect but better than nothing
+ txt.onscroll = (e) => {
+ var p = e.target.scrollTop / (e.target.scrollHeight - e.target.offsetHeight);
+ var target = e.target == pre ? txt : pre;
+ target.scrollTop = p * (target.scrollHeight - target.offsetHeight);
+ e.preventDefault();
+ return false;
+ };
+ }
+
+ document.forms[0].onsubmit = () => {
+ var content = txt.value;
+
+ return reqAndReload('PUT', file_url, content);
+ };
+ }));
+ };
+ }
+ else if (edit_url = wopi_getEditURL(file_url, mime)) {
+ buttons.insertAdjacentHTML('beforeend', edit_button);
+
+ $$('.icon').classList.add('document');
+ $$('.edit').onclick = () => { wopi_open(file_url, edit_url); return false; };
+ }
+
+ $$('.delete').onclick = (e) => {
+ openDialog(delete_dialog);
+ document.forms[0].onsubmit = () => {
+ return reqAndReload('DELETE', file_url);
+ };
+ };
+
+ $$('.rename').onclick = () => {
+ openDialog(rename_dialog);
+ let t = $('input[name=rename]');
+ t.value = file_name;
+ t.focus();
+ t.selectionStart = 0;
+ t.selectionEnd = file_name.lastIndexOf('.');
+ document.forms[0].onsubmit = () => {
+ var name = t.value;
+
+ if (!name) return false;
+
+ name = encodeURIComponent(name);
+ name = name.replace(/%2F/, '/');
+
+ var dest = current_url + name;
+ dest = normalizeURL(dest);
+
+ return reqAndReload('MOVE', file_url, '', {'Destination': dest});
+ };
+ };
+
+ });
+
+ $('.mkdir').onclick = () => {
+ openDialog(mkdir_dialog);
+ document.forms[0].onsubmit = () => {
+ var name = $('input[name=mkdir]').value;
+
+ if (!name) return false;
+
+ name = encodeURIComponent(name);
+
+ req('MKCOL', current_url + name).then(() => openListing(current_url + name + '/'));
+ return false;
+ };
+ };
+
+ $('.mkfile').onclick = () => {
+ openDialog(mkfile_dialog);
+ var t = $('input[name=mkfile]');
+ t.value = '.md';
+ t.focus();
+ t.selectionStart = t.selectionEnd = 0;
+ document.forms[0].onsubmit = () => {
+ var name = t.value;
+
+ if (!name) return false;
+
+ name = encodeURIComponent(name);
+
+ return reqAndReload('PUT', current_url + name, '');
+ };
+ };
+
+ var select = $('.sortorder');
+ select.value = sort_order;
+ select.onchange = () => {
+ sort_order = select.value;
+ window.localStorage.setItem('sort_order', sort_order);
+ reloadListing();
+ };
+
+ var fi = $('input[type=file]');
+
+ $('.uploadfile').onclick = () => fi.click();
+
+ fi.onchange = () => {
+ if (!fi.files.length) return;
+
+ var body = new Blob(fi.files);
+ var name = fi.files[0].name;
+
+ name = encodeURIComponent(name);
+
+ return reqAndReload('PUT', current_url + name, body);
+ };
+ };
+
+ var current_url = url;
+ var base_url = url;
+ const user = options.user || null;
+ const password = options.password || null;
+ var auth_header = (user && password) ? 'Basic ' + btoa(user + ':' + password) : null;
+
+ if (location.pathname.indexOf(base_url) === 0) {
+ current_url = location.pathname;
+ }
+
+ if (!base_url.match(/^https?:/)) {
+ base_url = location.href.replace(/^(https?:\/\/[^\/]+\/).*$/, '$1') + base_url.replace(/^\/+/, '');
+ }
+
+ var evt, paste_upload, popstate_evt, temp_object_url;
+ var sort_order = window.localStorage.getItem('sort_order') || 'name';
+ var wopi_mimes = {}, wopi_extensions = {};
+
+ const wopi_discovery_url = options.wopi_discovery_url || null;
+
+ document.querySelector('html').innerHTML = html_tpl;
+
+ if (wopi_discovery_url) {
+ // Wait for WOPI discovery before creating the list
+ wopi_init();
+ }
+ else {
+ reloadListing();
+ }
+
+ window.addEventListener('paste', (e) => {
+ let items = e.clipboardData.items;
+ const IMAGE_MIME_REGEX = /^image\/(p?jpeg|gif|png)$/i;
+
+ for (var i = 0; i < items.length; i++) {
+ if (items[i].kind === 'file' || IMAGE_MIME_REGEX.test(items[i].type)) {
+ e.preventDefault();
+ let f = items[i].getAsFile();
+ let name = f.name == 'image.png' ? f.name.replace(/\./, '-' + (+(new Date)) + '.') : f.name;
+
+ paste_upload = f;
+
+ openDialog(paste_upload_dialog);
+
+ let t = $('input[name=paste_name]');
+ t.value = name;
+ t.focus();
+ t.selectionStart = 0;
+ t.selectionEnd = name.lastIndexOf('.');
+
+ document.forms[0].onsubmit = () => {
+ name = encodeURIComponent(t.value);
+ return reqAndReload('PUT', current_url + name, paste_upload);
+ };
+
+ return;
+ }
+ }
+ });
+
+ var dragcounter = 0;
+
+ window.addEventListener('dragover', (e) => {
+ e.preventDefault();
+ e.stopPropagation();
+ });
+
+ window.addEventListener('dragenter', (e) => {
+ e.preventDefault();
+ e.stopPropagation();
+
+ if (!dragcounter) {
+ document.body.classList.add('dragging');
+ }
+
+ dragcounter++;
+ });
+
+ window.addEventListener('dragleave', (e) => {
+ e.preventDefault();
+ e.stopPropagation();
+ dragcounter--;
+
+ if (!dragcounter) {
+ document.body.classList.remove('dragging');
+ }
+ });
+
+ window.addEventListener('drop', (e) => {
+ e.preventDefault();
+ e.stopPropagation();
+ document.body.classList.remove('dragging');
+ dragcounter = 0;
+
+ const files = [...e.dataTransfer.items].map(item => item.getAsFile());
+
+ if (!files.length) return;
+
+ animateLoading();
+
+ (async () => {
+ for (var i = 0; i < files.length; i++) {
+ var f = files[i]
+ await req('PUT', current_url + encodeURIComponent(f.name), f);
+ }
+
+ window.setTimeout(() => {
+ stopLoading();
+ reloadListing();
+ }, 500);
+ })();
+ });
+};
+
+if (url = document.querySelector('html').getAttribute('data-webdav-url')) {
+ WebDAVNavigator(url, {
+ 'wopi_discovery_url': document.querySelector('html').getAttribute('data-wopi-discovery-url'),
+ });
+}
+:root {
+ --bg-color: #fff;
+ --fg-color: #000;
+ --g1-color: #eee;
+ --g2-color: #ccc;
+ --g3-color: #999;
+ --link-color: blue;
+ --visited-color: purple;
+ --active-color: darkred;
+}
+
+body {
+ text-align: center;
+ font-size: 1.1em;
+ font-family: Arial, Helvetica, sans-serif;
+ background: var(--bg-color);
+ color: var(--fg-color);
+}
+
+a:link {
+ color: var(--link-color);
+}
+
+a:visited {
+ color: var(--visited-color);
+}
+
+a:hover {
+ color: var(--active-color);
+}
+
+table {
+ margin: 2em auto;
+ border-collapse: collapse;
+ width: 90%;
+}
+
+th, td {
+ padding: .5em;
+ text-align: left;
+ border: 2px solid var(--g2-color);
+}
+
+td.thumb {
+ width: 5%;
+}
+
+td.buttons {
+ text-align: right;
+ width: 20em;
+}
+
+td.buttons div {
+ display: flex;
+ flex-direction: row-reverse;
+}
+
+table tr:nth-child(even) {
+ background: var(--g1-color);
+}
+
+.icon {
+ width: 2.6em;
+ height: 2.6em;
+ display: block;
+ border-radius: .2em;
+ background:var(--g3-color);
+ overflow: hidden;
+ color: var(--bg-color);
+ text-align: center;
+}
+
+.icon b {
+ font-weight: normal;
+ display: inline-block;
+ transform: rotate(-30deg);
+ line-height: 2.6rem;
+}
+
+.icon.JPEG, .icon.PNG, .icon.JPG, .icon.GIF, .icon.SVG, .icon.WEBP {
+ background: #966;
+}
+
+.icon.TXT, .icon.MD {
+ background: var(--fg-color);
+}
+
+.icon.MP4, .icon.MKV, .icon.MP3, .icon.M4A, .icon.WAV, .icon.FLAC, .icon.OGG, .icon.OGV, .icon.AAC, .icon.WEBM {
+ background: #669;
+}
+
+.icon.document {
+ background: #696;
+}
+
+.icon.PDF {
+ background: #969;
+}
+
+.icon.dir {
+ background: var(--g2-color);
+ color: var(--fg-color);
+}
+
+.icon.dir b {
+ font-size: 2em;
+ transform: none;
+}
+
+.size {
+ text-align: right;
+}
+
+input[type=button], input[type=submit], .btn {
+ font-size: 1.2em;
+ padding: .3em .5em;
+ margin: .2em .3em;
+ border: none;
+ background: var(--g2-color);
+ border-radius: .2em;
+ cursor: pointer;
+ text-decoration: none;
+ color: var(--fg-color) !important;
+ font-family: inherit;
+}
+
+td input[type=button], td input[type=submit], td .btn {
+ font-size: 1em;
+}
+
+input[type=text], textarea {
+ font-size: 1.2em;
+ padding: .3em .5em;
+ border: none;
+ background: var(--bg-color);
+ border-radius: .2em;
+ width: calc(100% - 1em);
+ color: var(--fg-color);
+}
+
+input:focus, textarea:focus {
+ box-shadow: 0px 0px 5px var(--active-color);
+ outline: 1px solid var(--active-color);
+}
+
+input[type=button]:hover, input[type=submit]:hover, .btn:hover {
+ color: var(--active-color);
+ text-decoration: underline;
+ background: var(--bg-color);
+ box-shadow: 0px 0px 5px var(--fg-color);
+}
+
+.close {
+ text-align: right;
+ margin: 0;
+}
+
+.close input {
+ font-size: .8em;
+}
+
+input[type=submit] {
+ float: right;
+}
+
+dialog {
+ position: fixed;
+ top: 1em;
+ right: 1em;
+ bottom: 1em;
+ left: 1em;
+ box-shadow: 0px 0px 5px var(--fg-color);
+ background: var(--g1-color);
+ color: var(--fg-color);
+ border: none;
+ border-radius: .5em;
+}
+
+dialog form div {
+ clear: both;
+ margin: 2em 0;
+ text-align: center;
+}
+
+.upload {
+ margin: 1em 0;
+}
+
+#mdp div, #mdp textarea {
+ width: calc(100% - 1em);
+ padding: .5em;
+ font-size: 1em;
+ height: calc(100% - 1em);
+ text-align: left;
+ margin: 0;
+}
+
+#md {
+ overflow: hidden;
+ overflow-x: auto;
+}
+
+#mdp {
+ display: grid;
+ grid-template-columns: 1fr 1fr;
+ grid-gap: .2em;
+ background: var(--g1-color);
+ height: 82vh;
+}
+
+dialog.preview {
+ height: calc(100%);
+ width: calc(100%);
+ top: 0;
+ left: 0;
+ right: 0;
+ bottom: 0;
+ padding: 0;
+ border-radius: 0;
+ background: var(--g1-color);
+ overflow: hidden;
+}
+
+iframe, .md_preview {
+ overflow: auto;
+ position: absolute;
+ top: 0;
+ left: 0;
+ right: 0;
+ bottom: 0;
+ padding: 0;
+ margin: 0;
+ width: 100%;
+ height: 100%;
+ border: none;
+}
+
+iframe, iframe body, .md_preview {
+ background-color: #fff;
+ color: #000;
+}
+
+.preview form {
+ height: calc(100% - 2em);
+ display: flex;
+ align-items: center;
+ justify-content: center;
+}
+
+.preview form > div {
+ width: calc(100vw);
+ height: 100%;
+ position: relative;
+ margin: 0;
+ display: flex;
+ align-items: center;
+ justify-content: center;
+}
+
+.preview div video {
+ max-width: 100%;
+ max-height: 100%;
+}
+
+.md_preview {
+ width: calc(100vw - 2em);
+ height: calc(100vh - 2em);
+ padding: 1em;
+ text-align: left;
+}
+
+.preview .close {
+ height: 2em;
+ text-align: center;
+ font-size: 1em;
+ display: block;
+ width: 100%;
+ margin: 0;
+ padding: 0;
+ border-radius: 0;
+ background: var(--g2-color);
+ color: var(--fg-color);
+ box-shadow: 0px 0px 5px var(--g2-color);
+}
+
+.preview img {
+ max-width: 95%;
+ max-height: 95%;
+}
+
+input[name=rename], input[name=paste_name] {
+ width: 30em;
+}
+
+.bg {
+ align-items: center;
+ justify-content: center;
+ position: fixed;
+ top: 0;
+ left: 0;
+ right: 0;
+ bottom: 0;
+ margin: 0;
+ padding: 0;
+ width: 0;
+ height: 0;
+ border: none;
+ display: flex;
+ opacity: 0;
+}
+
+.loading .bg::after {
+ display: block;
+ content: " ";
+ width: 70px;
+ height: 70px;
+ border: 5px solid var(--g2-color);
+ border-radius: 50%;
+ border-top-color: var(--fg-color);
+ animation: spin 1s ease-in-out infinite;
+ filter: none;
+}
+
+.loading .bg::before {
+ display: block;
+ content: " ";
+ width: 70px;
+ height: 70px;
+ border: 20px solid var(--bg-color);
+ border-radius: 50%;
+ background: var(--bg-color);
+ position: absolute;
+}
+
+.loading .bg, .dragging .bg, .dialog .bg {
+ backdrop-filter: blur(5px);
+ background: rgba(0, 0, 0, 0.5);
+ opacity: 1;
+ width: 100%;
+ height: 100%;
+}
+
+dialog {
+ transition: all .3s;
+}
+
+@keyframes spin { to { transform: rotate(360deg); } }
+
+@media screen and (max-width: 800px) {
+ .upload {
+ display: flex;
+ flex-direction: row;
+ justify-content: center;
+ flex-wrap: wrap;
+ }
+
+ body {
+ margin: 0;
+ font-size: 1em;
+ }
+
+ table {
+ margin: 2em 0;
+ width: 100%;
+ display: flex;
+ flex-direction: column;
+ }
+
+ table tr {
+ display: block;
+ border-top: 5px solid var(--bg-color);
+ padding: 0;
+ padding-left: 2em;
+ position: relative;
+ text-align: left;
+ min-height: 2.5em;
+ }
+
+ table td, table th {
+ border: none;
+ display: inline-block;
+ padding: .2em .5em;
+ }
+
+ table td.buttons {
+ display: block;
+ width: auto;
+ text-align: left;
+ }
+
+ td.buttons div {
+ display: inline-block;
+ }
+
+ table td.thumb {
+ padding: 0;
+ width: 2em;
+ position: absolute;
+ left: 0;
+ top: 0;
+ bottom: 0;
+ }
+
+ table th {
+ display: block;
+ }
+
+ .icon {
+ font-size: 12px;
+ height: 100%;
+ border-radius: 0;
+ }
+
+ .icon:not(.dir) b {
+ line-height: 3em;
+ display: block;
+ transform: translateX(-50%) translateY(-50%) rotate(-90deg);
+ font-size: 2em;
+ height: 3em;
+ position: absolute;
+ top: 50%;
+ left: 50%;
+ }
+
+ table th a {
+ font-size: 1.2em;
+ }
+
+ input[name=rename], input[name=paste_name] {
+ width: auto;
+ }
+}
+
+@media (prefers-color-scheme: dark) {
+ :root {
+ --bg-color: #000;
+ --fg-color: #fff;
+ --g1-color: #222;
+ --g2-color: #555;
+ --g3-color: #777;
+ --link-color: #99f;
+ --visited-color: #ccf;
+ --active-color: orange;
+ }
+}
+
+
diff --git a/make.php b/make.php
new file mode 100644
index 0000000..25d039f
--- /dev/null
+++ b/make.php
@@ -0,0 +1,25 @@
+ filesize('webdav.js'),
+ '__CSS_SIZE__' => filesize('webdav.css'),
+]);
+
+$php = preg_replace('/\}\s*$/', "\n?>\n", $php);
+$end = "\n\n\n";
+
+$size = strlen($php);
+$count = substr_count($php, '__PHP_SIZE__');
+$size -= strlen('__PHP_SIZE__') * $count;
+$size += strlen((string) $size) * $count;
+
+$php = str_replace('__PHP_SIZE__', $size, $php);
+
+fwrite($out, $php);
+fwrite($out, file_get_contents('webdav.js'));
+fwrite($out, file_get_contents('webdav.css'));
+fwrite($out, $end);
+fclose($out);
diff --git a/server.php b/server.php
new file mode 100644
index 0000000..bc0286e
--- /dev/null
+++ b/server.php
@@ -0,0 +1,1792 @@
+
+
+ Copyright (c) 2001-2022+ BohwaZ %s %1$s ', htmlspecialchars($uri ? str_replace('/', ' / ', $uri) . ' - Files' : 'Files'));
+
+ if (trim($uri)) {
+ $out .= 'Back [DIR] %s %s %s %s
';
+
+ if (null === $props) {
+ $out .= 'This directory is empty.
';
+ }
+
+ $out .= '';
+
+ return $out;
+ }
+
+
+ public function http_delete(string $uri): ?string
+ {
+ // check RFC 2518 Section 9.2, last paragraph
+ if (isset($_SERVER['HTTP_DEPTH']) && $_SERVER['HTTP_DEPTH'] != 'infinity') {
+ throw new Exception('We can only delete to infinity', 400);
+ }
+
+ $this->checkLock($uri);
+
+ $this->storage->delete($uri);
+
+ if ($token = $this->getLockToken()) {
+ $this->storage->unlock($uri, $token);
+ }
+
+ http_response_code(204);
+ header('Content-Length: 0', true);
+ return null;
+ }
+
+ public function http_put(string $uri): ?string
+ {
+ if (!empty($_SERVER['HTTP_CONTENT_TYPE']) && !strncmp($_SERVER['HTTP_CONTENT_TYPE'], 'multipart/', 10)) {
+ throw new Exception('Multipart PUT requests are not supported', 501);
+ }
+
+ if (!empty($_SERVER['HTTP_CONTENT_ENCODING'])) {
+ if (false !== strpos($_SERVER['HTTP_CONTENT_ENCODING'], 'gzip')) {
+ // Might be supported later?
+ throw new Exception('Content Encoding is not supported', 501);
+ }
+ else {
+ throw new Exception('Content Encoding is not supported', 501);
+ }
+ }
+
+ if (!empty($_SERVER['HTTP_CONTENT_RANGE'])) {
+ throw new Exception('Content Range is not supported', 501);
+ }
+
+ // See SabreDAV CorePlugin for reason why OS/X Finder is buggy
+ if (isset($_SERVER['HTTP_X_EXPECTED_ENTITY_LENGTH'])) {
+ throw new Exception('This server is not compatible with OS/X finder. Consider using a different WebDAV client or webserver.', 403);
+ }
+
+ $hash = null;
+
+ // Support for checksum matching
+ // https://dcache.org/old/manuals/UserGuide-6.0/webdav.shtml#checksums
+ if (!empty($_SERVER['HTTP_CONTENT_MD5'])) {
+ $hash = bin2hex(base64_decode($_SERVER['HTTP_CONTENT_MD5']));
+ }
+
+ $this->checkLock($uri);
+
+ if (!empty($_SERVER['HTTP_IF_MATCH'])) {
+ $etag = trim($_SERVER['HTTP_IF_MATCH'], '" ');
+ $prop = $this->storage->properties($uri, ['DAV::getetag'], 0);
+
+ if (!empty($prop['DAV::getetag']) && $prop['DAV::getetag'] != $etag) {
+ throw new Exception('ETag did not match condition', 412);
+ }
+ }
+
+ // Specific to NextCloud/ownCloud
+ $mtime = (int)($_SERVER['HTTP_X_OC_MTIME'] ?? 0) ?: null;
+
+ if ($mtime) {
+ header('X-OC-MTime: accepted');
+ }
+
+ $created = $this->storage->put($uri, fopen('php://input', 'r'), $hash, $mtime);
+
+ $prop = $this->storage->properties($uri, ['DAV::getetag'], 0);
+
+ if (!empty($prop['DAV::getetag'])) {
+ $value = $prop['DAV::getetag'];
+
+ if (substr($value, 0, 1) != '"') {
+ $value = '"' . $value . '"';
+ }
+
+ header(sprintf('ETag: %s', $value));
+ }
+
+ http_response_code($created ? 201 : 204);
+ return null;
+ }
+
+ public function http_head(string $uri, array &$props = []): ?string
+ {
+ $requested_props = self::BASIC_PROPERTIES;
+ $requested_props[] = 'DAV::getetag';
+
+ // RFC 3230 https://www.rfc-editor.org/rfc/rfc3230.html
+ if (!empty($_SERVER['HTTP_WANT_DIGEST'])) {
+ $requested_props[] = self::PROP_DIGEST_MD5;
+ }
+
+ $props = $this->storage->properties($uri, $requested_props, 0);
+
+ if (!$props) {
+ throw new Exception('Resource Not Found', 404);
+ }
+
+ http_response_code(200);
+
+ if (isset($props['DAV::getlastmodified'])
+ && $props['DAV::getlastmodified'] instanceof \DateTimeInterface) {
+ header(sprintf('Last-Modified: %s', $props['DAV::getlastmodified']->format(\DATE_RFC7231)));
+ }
+
+ if (!empty($props['DAV::getetag'])) {
+ $value = $props['DAV::getetag'];
+
+ if (substr($value, 0, 1) != '"') {
+ $value = '"' . $value . '"';
+ }
+
+ header(sprintf('ETag: %s', $value));
+ }
+
+ if (empty($props['DAV::resourcetype']) || $props['DAV::resourcetype'] != 'collection') {
+ if (!empty($props['DAV::getcontenttype'])) {
+ header(sprintf('Content-Type: %s', $props['DAV::getcontenttype']));
+ }
+
+ if (!empty($props['DAV::getcontentlength'])) {
+ header(sprintf('Content-Length: %d', $props['DAV::getcontentlength']));
+ header('Accept-Ranges: bytes');
+ }
+ }
+
+ if (!empty($props[self::PROP_DIGEST_MD5])) {
+ header(sprintf('Digest: md5=%s', base64_encode(hex2bin($props[self::PROP_DIGEST_MD5]))));
+ }
+
+ return null;
+ }
+
+ public function http_get(string $uri): ?string
+ {
+ $props = [];
+ $this->http_head($uri, $props);
+
+ $is_collection = !empty($props['DAV::resourcetype']) && $props['DAV::resourcetype'] == 'collection';
+ $out = '';
+
+ if ($is_collection) {
+ $list = $this->storage->list($uri, self::BASIC_PROPERTIES);
+
+ if (!isset($_SERVER['HTTP_ACCEPT']) || false === strpos($_SERVER['HTTP_ACCEPT'], 'html')) {
+ $list = is_array($list) ? $list : iterator_to_array($list);
+
+ if (!count($list)) {
+ return "Nothing in this collection\n";
+ }
+
+ return implode("\n", array_keys($list));
+ }
+
+ header('Content-Type: text/html; charset=utf-8', true);
+
+ return $this->html_directory($uri, $list);
+ }
+
+ $file = $this->storage->get($uri);
+
+ if (!$file) {
+ throw new Exception('File Not Found', 404);
+ }
+
+ // If the file was returned to the client by the storage backend, stop here
+ if (!empty($file['stop'])) {
+ return null;
+ }
+
+ if (!isset($file['content']) && !isset($file['resource']) && !isset($file['path'])) {
+ throw new \RuntimeException('Invalid file array returned by ::get()');
+ }
+
+ $length = $start = $end = null;
+ $gzip = false;
+
+ if (isset($_SERVER['HTTP_RANGE'])
+ && preg_match('/^bytes=(\d*)-(\d*)$/i', $_SERVER['HTTP_RANGE'], $match)
+ && $match[1] . $match[2] !== '') {
+ $start = $match[1] === '' ? null : (int) $match[1];
+ $end = $match[2] === '' ? null : (int) $match[2];
+
+ if (null !== $start && $start < 0) {
+ throw new Exception('Start range cannot be satisfied', 416);
+ }
+
+ if (isset($props['DAV::getcontentlength']) && $start > $props['DAV::getcontentlength']) {
+ throw new Exception('End range cannot be satisfied', 416);
+ }
+
+ $this->log('HTTP Range requested: %s-%s', $start, $end);
+ }
+ elseif (isset($_SERVER['HTTP_ACCEPT_ENCODING'])
+ && false !== strpos($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip')
+ // Don't compress already compressed content
+ && !preg_match('/\.(?:mp4|m4a|zip|docx|xlsx|ods|odt|odp|7z|gz|bz2|rar|webm|ogg|mp3|ogm|flac|ogv|mkv|avi)$/i', $uri)) {
+ $gzip = true;
+ header('Content-Encoding: gzip', true);
+ }
+
+ // Try to avoid common issues with output buffering and stuff
+ if (function_exists('apache_setenv'))
+ {
+ @apache_setenv('no-gzip', 1);
+ }
+
+ @ini_set('zlib.output_compression', 'Off');
+
+ if (@ob_get_length()) {
+ @ob_clean();
+ }
+
+ if (isset($file['content'])) {
+ $length = strlen($file['content']);
+
+ if ($start || $end) {
+ if (null !== $end && $end > $length) {
+ header('Content-Range: bytes */' . $length, true);
+ throw new Exception('End range cannot be satisfied', 416);
+ }
+
+ if ($start === null) {
+ $start = $length - $end;
+ $end = $start + $end;
+ }
+ elseif ($end === null) {
+ $end = $length;
+ }
+
+
+ http_response_code(206);
+ header(sprintf('Content-Range: bytes %s-%s/%s', $start, $end - 1, $length));
+ $file['content'] = substr($file['content'], $start, $end - $start);
+ $length = $end - $start;
+ }
+
+ if ($gzip) {
+ $file['content'] = gzencode($file['content'], 9);
+ $length = strlen($file['content']);
+ }
+
+ header('Content-Length: ' . $length, true);
+ echo $file['content'];
+ return null;
+ }
+
+ if (isset($file['path'])) {
+ $file['resource'] = fopen($file['path'], 'rb');
+ }
+
+ $seek = fseek($file['resource'], 0, SEEK_END);
+
+ if ($seek === 0) {
+ $length = ftell($file['resource']);
+ fseek($file['resource'], 0, SEEK_SET);
+ }
+
+ if (($start || $end) && $seek === 0) {
+ if (null !== $end && $end > $length) {
+ header('Content-Range: bytes */' . $length, true);
+ throw new Exception('End range cannot be satisfied', 416);
+ }
+
+ if ($start === null) {
+ $start = $length - $end;
+ $end = $start + $end;
+ }
+ elseif ($end === null) {
+ $end = $length;
+ }
+
+ fseek($file['resource'], $start, SEEK_SET);
+
+ http_response_code(206);
+ header(sprintf('Content-Range: bytes %s-%s/%s', $start, $end - 1, $length), true);
+
+ $length = $end - $start;
+ $end -= $start;
+ }
+ elseif (null === $length && isset($file['path'])) {
+ $end = $length = filesize($file['path']);
+ }
+
+ if ($gzip) {
+ $this->log('Using gzip output compression');
+ $gzip = deflate_init(ZLIB_ENCODING_GZIP, ['level' => 9]);
+
+ $fp = fopen('php://memory', 'wb');
+
+ while (!feof($file['resource'])) {
+ fwrite($fp, deflate_add($gzip, fread($file['resource'], 8192), ZLIB_NO_FLUSH));
+ }
+
+ fwrite($fp, deflate_add($gzip, '', ZLIB_FINISH));
+ $length = ftell($fp);
+ rewind($fp);
+ fclose($file['resource']);
+
+ $file['resource'] = $fp;
+ unset($fp);
+ }
+
+ if (null !== $length) {
+ $this->log('Length: %s', $length);
+ header('Content-Length: ' . $length, true);
+ }
+
+ while (!feof($file['resource']) && ($end === null || $end > 0)) {
+ $l = $end !== null ? min(8192, $end) : 8192;
+
+ echo fread($file['resource'], $l);
+ flush();
+
+ if (null !== $end) {
+ $end -= 8192;
+ }
+ }
+
+ fclose($file['resource']);
+
+ return null;
+ }
+
+ public function http_copy(string $uri): ?string
+ {
+ return $this->_http_copymove($uri, 'copy');
+ }
+
+ public function http_move(string $uri): ?string
+ {
+ return $this->_http_copymove($uri, 'move');
+ }
+
+ protected function _http_copymove(string $uri, string $method): ?string
+ {
+ $destination = $_SERVER['HTTP_DESTINATION'] ?? null;
+ $depth = $_SERVER['HTTP_DEPTH'] ?? 1;
+
+ if (!$destination) {
+ throw new Exception('Destination not supplied', 400);
+ }
+
+ $destination = $this->getURI($destination);
+
+ if (trim($destination, '/') == trim($uri, '/')) {
+ throw new Exception('Cannot move file to itself', 403);
+ }
+
+ $overwrite = ($_SERVER['HTTP_OVERWRITE'] ?? null) == 'T';
+
+ // Dolphin is removing the file name when moving to root directory
+ if (empty($destination)) {
+ $destination = basename($uri);
+ }
+
+ $this->log('<= Destination: %s', $destination);
+ $this->log('<= Overwrite: %s (%s)', $overwrite ? 'Yes' : 'No', $_SERVER['HTTP_OVERWRITE'] ?? null);
+
+ if (!$overwrite && $this->storage->exists($destination)) {
+ throw new Exception('File already exists and overwriting is disabled', 412);
+ }
+
+ if ($method == 'move') {
+ $this->checkLock($uri);
+ }
+
+ $this->checkLock($destination);
+
+ // Moving/copy of directory to an existing destination and depth=0
+ // should do just nothing, see 'depth_zero_copy' test in litmus
+ if ($depth == 0
+ && $this->storage->exists($destination)
+ && current($this->storage->properties($destination, ['DAV::resourcetype'], 0)) == 'collection') {
+ $overwritten = $this->storage->exists($uri);
+ }
+ else {
+ $overwritten = $this->storage->$method($uri, $destination);
+ }
+
+ if ($method == 'move' && ($token = $this->getLockToken())) {
+ $this->storage->unlock($uri, $token);
+ }
+
+ http_response_code($overwritten ? 204 : 201);
+ return null;
+ }
+
+ public function http_mkcol(string $uri): ?string
+ {
+ if (!empty($_SERVER['CONTENT_LENGTH'])) {
+ throw new Exception('Unsupported body for MKCOL', 415);
+ }
+
+ $this->storage->mkcol($uri);
+
+ http_response_code(201);
+ return null;
+ }
+
+ /**
+ * Return a list of requested properties, if any.
+ * We are using regexp as we don't want to depend on a XML module here.
+ * Your are free to re-implement this using a XML parser if you wish
+ */
+ protected function extractRequestedProperties(string $body): ?array
+ {
+ // We only care about properties if the client asked for it
+ // If not, we consider that the client just requested to get everything
+ if (!preg_match('!<(?:\w+:)?propfind!', $body)) {
+ return null;
+ }
+
+ $ns = [];
+ $dav_ns = null;
+ $default_ns = null;
+
+ if (preg_match('/]+xmlns="DAV:"/', $body)) {
+ $default_ns = 'DAV:';
+ }
+
+ preg_match_all('!xmlns:(\w+)\s*=\s*"([^"]+)"!', $body, $match, PREG_SET_ORDER);
+
+ // Find all aliased xmlns
+ foreach ($match as $found) {
+ $ns[$found[2]] = $found[1];
+ }
+
+ if (isset($ns['DAV:'])) {
+ $dav_ns = $ns['DAV:'] . ':';
+ }
+
+ $regexp = '/<(' . $dav_ns . 'prop(?!find))[^>]*?>(.*?)<\/\1\s*>/s';
+ if (!preg_match($regexp, $body, $match)) {
+ return null;
+ }
+
+ // Find all properties
+ // Allow for empty namespace, see Litmus FAQ for propnullns
+ // https://github.com/tolsen/litmus/blob/master/FAQ
+ preg_match_all('!<([\w-]+)[^>]*xmlns="([^"]*)"|<(?:([\w-]+):)?([\w-]+)!', $match[2], $match, PREG_SET_ORDER);
+
+ $properties = [];
+
+ foreach ($match as $found) {
+ if (isset($found[4])) {
+ $url = array_search($found[3], $ns) ?: $default_ns;
+ $name = $found[4];
+ }
+ else {
+ $url = $found[2];
+ $name = $found[1];
+ }
+
+ $properties[$url . ':' . $name] = [
+ 'name' => $name,
+ 'ns_alias' => $found[3] ?? null,
+ 'ns_url' => $url,
+ ];
+ }
+
+ return $properties;
+ }
+
+ public function http_propfind(string $uri): ?string
+ {
+ // We only support depth of 0 and 1
+ $depth = isset($_SERVER['HTTP_DEPTH']) && empty($_SERVER['HTTP_DEPTH']) ? 0 : 1;
+
+ $body = file_get_contents('php://input');
+
+ if (false !== strpos($body, 'log('Requested depth: %s', $depth);
+
+ // We don't really care about having a correct XML string,
+ // but we can get better WebDAV compliance if we do
+ if (isset($_SERVER['HTTP_X_LITMUS'])) {
+ if (false !== strpos($body, 'extractRequestedProperties($body);
+ $requested_keys = $requested ? array_keys($requested) : null;
+
+ // Find root element properties
+ $properties = $this->storage->properties($uri, $requested_keys, $depth);
+
+ if (null === $properties) {
+ throw new Exception('This does not exist', 404);
+ }
+
+ $items = [$uri => $properties];
+
+ if ($depth) {
+ foreach ($this->storage->list($uri, $requested) as $file => $properties) {
+ $path = trim($uri . '/' . $file, '/');
+ $properties = $properties ?? $this->storage->properties($path, $requested_keys, 0);
+
+ if (!$properties) {
+ $this->log('!!! Cannot find "%s"', $path);
+ continue;
+ }
+
+ $items[$path] = $properties;
+ }
+ }
+
+ // http_response_code doesn't know the 207 status code
+ header('HTTP/1.1 207 Multi-Status', true);
+ $this->dav_header();
+ header('Content-Type: application/xml; charset=utf-8');
+
+ $root_namespaces = [
+ 'DAV:' => 'd',
+ // Microsoft Clients need this special namespace for date and time values (from PEAR/WebDAV)
+ 'urn:uuid:c2f41010-65b3-11d1-a29f-00aa00c14882/' => 'ns0',
+ ];
+
+ $i = 0;
+ $requested ??= [];
+
+ foreach ($requested as $prop) {
+ if ($prop['ns_url'] == 'DAV:' || !$prop['ns_url']) {
+ continue;
+ }
+
+ if (!array_key_exists($prop['ns_url'], $root_namespaces)) {
+ $root_namespaces[$prop['ns_url']] = $prop['ns_alias'] ?: 'rns' . $i++;
+ }
+ }
+
+ foreach ($items as $properties) {
+ foreach ($properties as $name => $value) {
+ $pos = strrpos($name, ':');
+ $ns = substr($name, 0, strrpos($name, ':'));
+
+ // NULL namespace, see Litmus FAQ for propnullns
+ if (!$ns) {
+ continue;
+ }
+
+ if (!array_key_exists($ns, $root_namespaces)) {
+ $root_namespaces[$ns] = 'rns' . $i++;
+ }
+ }
+ }
+
+ $out = '';
+ $out .= ' $alias) {
+ $out .= sprintf(' xmlns:%s="%s"', $alias, $url);
+ }
+
+ $out .= '>';
+
+ foreach ($items as $uri => $item) {
+ $e = '';
+
+ $path = '/' . str_replace('%2F', '/', rawurlencode(trim($this->base_uri . $uri, '/')));
+
+ if (($item['DAV::resourcetype'] ?? null) == 'collection') {
+ $path .= '/';
+ }
+
+ $e .= sprintf('%s ', htmlspecialchars($path, ENT_XML1));
+ $e .= '';
+
+ foreach ($item as $name => $value) {
+ if (null === $value) {
+ continue;
+ }
+
+ $pos = strrpos($name, ':');
+ $ns = substr($name, 0, strrpos($name, ':'));
+ $tag_name = substr($name, strrpos($name, ':') + 1);
+
+ $alias = $root_namespaces[$ns] ?? null;
+ $attributes = '';
+
+ // The ownCloud Android app doesn't like formatted dates, it makes it crash.
+ // so force it to have a timestamp
+ if ($name == 'DAV::creationdate'
+ && ($value instanceof \DateTimeInterface)
+ && false !== stripos($_SERVER['HTTP_USER_AGENT'] ?? '', 'owncloud')) {
+ $value = $value->getTimestamp();
+ }
+ // ownCloud app crashes if mimetype is provided for a directory
+ // https://github.com/owncloud/android/issues/3768
+ elseif ($name == 'DAV::getcontenttype'
+ && ($item['DAV::resourcetype'] ?? null) == 'collection') {
+ $value = null;
+ }
+
+ if ($name == 'DAV::resourcetype' && $value == 'collection') {
+ $value = ' HTTP/1.1 200 OK ';
+
+ foreach ($missing_properties as $name) {
+ $pos = strrpos($name, ':');
+ $ns = substr($name, 0, strrpos($name, ':'));
+ $name = substr($name, strrpos($name, ':') + 1);
+ $alias = $root_namespaces[$ns] ?? null;
+
+ // NULL namespace, see Litmus FAQ for propnullns
+ if (!$alias) {
+ $e .= sprintf('<%s xmlns="" />', $name);
+ }
+ else {
+ $e .= sprintf('<%s:%s />', $alias, $name);
+ }
+ }
+
+ $e .= ' HTTP/1.1 404 Not Found ' . "\n";
+ $out .= $e;
+ }
+
+ $out .= '';
+
+ return $out;
+ }
+
+ static public function parsePropPatch(string $body): array
+ {
+ if (false !== strpos($body, 'getDocNameSpaces()))) {
+ $_ns = 'DAV:';
+ }
+
+ $out = [];
+
+ // Process set/remove instructions in order (important)
+ foreach ($xml->children($_ns) as $child) {
+ foreach ($child->children($_ns) as $prop) {
+ $prop = $prop->children();
+ if ($child->getName() == 'set') {
+ $ns = $prop->getNamespaces(true);
+ $ns = array_flip($ns);
+ $name = key($ns) . ':' . $prop->getName();
+
+ $attributes = $prop->attributes();
+ $attributes = $attributes === null ? null : iterator_to_array($attributes);
+
+ foreach ($ns as $xmlns => $alias) {
+ foreach (iterator_to_array($prop->attributes($alias)) as $key => $v) {
+ $attributes[$xmlns . ':' . $key] = $value;
+ }
+ }
+
+ if ($prop->count() > 1) {
+ $text = '';
+
+ foreach ($prop->children() as $c) {
+ $text .= $c->asXML();
+ }
+ }
+ else {
+ $text = (string)$prop;
+ }
+
+ $out[$name] = ['action' => 'set', 'attributes' => $attributes ?: null, 'content' => $text ?: null];
+ }
+ else {
+ $ns = $prop->getNamespaces();
+ $name = current($ns) . ':' . $prop->getName();
+ $out[$name] = ['action' => 'remove'];
+ }
+ }
+ }
+
+ return $out;
+ }
+
+ public function http_proppatch(string $uri): ?string
+ {
+ $this->checkLock($uri);
+
+ $body = file_get_contents('php://input');
+
+ $this->storage->setProperties($uri, $body);
+
+ // http_response_code doesn't know the 207 status code
+ header('HTTP/1.1 207 Multi-Status', true);
+ header('Content-Type: application/xml; charset=utf-8');
+
+ $out = '' . "\n";
+ $out .= '';
+ $out .= ' ';
+
+ return $out;
+ }
+
+ public function http_lock(string $uri): ?string
+ {
+ // We don't use this currently, but maybe later?
+ //$depth = !empty($this->_SERVER['HTTP_DEPTH']) ? 1 : 0;
+ //$timeout = isset($_SERVER['HTTP_TIMEOUT']) ? explode(',', $_SERVER['HTTP_TIMEOUT']) : [];
+ //$timeout = array_map('trim', $timeout);
+
+ if (empty($_SERVER['CONTENT_LENGTH']) && !empty($_SERVER['HTTP_IF'])) {
+ $token = $this->getLockToken();
+
+ if (!$token) {
+ throw new Exception('Invalid If header', 400);
+ }
+
+ $info = null;
+ $ns = 'D';
+ $scope = self::EXCLUSIVE_LOCK;
+
+ $this->checkLock($uri, $token);
+ $this->log('Requesting LOCK refresh: %s = %s', $uri, $scope);
+ }
+ else {
+ $locked_scope = $this->storage->getLock($uri);
+
+ if ($locked_scope == self::EXCLUSIVE_LOCK) {
+ throw new Exception('Cannot acquire another lock, resource is locked for exclusive use', 423);
+ }
+
+ if ($locked_scope && $token = $this->getLockToken()) {
+ $token = $this->getLockToken();
+
+ if (!$token) {
+ throw new Exception('Missing lock token', 423);
+ }
+
+ $this->checkLock($uri, $token);
+ }
+
+ $xml = file_get_contents('php://input');
+
+ if (!preg_match('!<((?:(\w+):)?lockinfo)[^>]*>(.*?)!is', $xml, $match)) {
+ throw new Exception('Invalid XML', 400);
+ }
+
+ $ns = $match[2];
+ $info = $match[3];
+
+ // Quick and dirty UUID
+ $uuid = random_bytes(16);
+ $uuid[6] = chr(ord($uuid[6]) & 0x0f | 0x40); // set version to 0100
+ $uuid[8] = chr(ord($uuid[8]) & 0x3f | 0x80); // set bits 6-7 to 10
+ $uuid = vsprintf('%s%s-%s-%s-%s-%s%s%s', str_split(bin2hex($uuid), 4));
+
+ $token = 'opaquelocktoken:' . $uuid;
+ $scope = false !== stripos($info, sprintf('<%sexclusive', $ns ? $ns . ':' : '')) ? self::EXCLUSIVE_LOCK : self::SHARED_LOCK;
+
+ $this->log('Requesting LOCK: %s = %s', $uri, $scope);
+ }
+
+ $this->storage->lock($uri, $token, $scope);
+
+ $timeout = 60*5;
+ $info = sprintf('
+ unknown
+ %d
+ Second-%d
+ %s ';
+ $out .= '';
+
+ $out .= $info;
+
+ $out .= ' ';
+
+ if ($ns != 'D') {
+ $out = str_replace('D:', $ns ? $ns . ':' : '', $out);
+ $out = str_replace('xmlns:D', $ns ? 'xmlns:' . $ns : 'xmlns', $out);
+ }
+
+ return $out;
+ }
+
+ public function http_unlock(string $uri): ?string
+ {
+ $token = $this->getLockToken();
+
+ if (!$token) {
+ throw new Exception('Invalid Lock-Token header', 400);
+ }
+
+ $this->log('<= Lock Token: %s', $token);
+
+ $this->checkLock($uri, $token);
+
+ $this->storage->unlock($uri, $token);
+
+ http_response_code(204);
+ return null;
+ }
+
+ /**
+ * Return current lock token supplied by client
+ */
+ protected function getLockToken(): ?string
+ {
+ if (isset($_SERVER['HTTP_LOCK_TOKEN'])
+ && preg_match('/<(.*?)>/', trim($_SERVER['HTTP_LOCK_TOKEN']), $match)) {
+ return $match[1];
+ }
+ elseif (isset($_SERVER['HTTP_IF'])
+ && preg_match('/\(<(.*?)>\)/', trim($_SERVER['HTTP_IF']), $match)) {
+ return $match[1];
+ }
+ else {
+ return null;
+ }
+ }
+
+ /**
+ * Check if the resource is protected
+ * @throws Exception if the resource is locked
+ */
+ protected function checkLock(string $uri, ?string $token = null): void
+ {
+ if ($token === null) {
+ $token = $this->getLockToken();
+ }
+
+ // Trying to access using a parent directory
+ if (isset($_SERVER['HTTP_IF'])
+ && preg_match('/<([^>]+)>\s*\(<[^>]*>\)/', $_SERVER['HTTP_IF'], $match)) {
+ $root = $this->getURI($match[1]);
+
+ if (0 !== strpos($uri, $root)) {
+ throw new Exception('Invalid "If" header path: ' . $root, 400);
+ }
+
+ $uri = $root;
+ }
+ // Try to validate token
+ elseif (isset($_SERVER['HTTP_IF'])
+ && preg_match('/\(<([^>]*)>\s+\["([^""]+)"\]\)/', $_SERVER['HTTP_IF'], $match)) {
+ $token = $match[1];
+ $request_etag = $match[2];
+ $etag = current($this->storage->properties($uri, ['DAV::getetag'], 0));
+
+ if ($request_etag != $etag) {
+ throw new Exception('Resource is locked and etag does not match', 412);
+ }
+ }
+
+ if ($token == 'DAV:no-lock') {
+ throw new Exception('Resource is locked', 412);
+ }
+
+ // Token is valid
+ if ($token && $this->storage->getLock($uri, $token)) {
+ return;
+ }
+ elseif ($token) {
+ throw new Exception('Invalid token', 400);
+ }
+ // Resource is locked
+ elseif ($this->storage->getLock($uri)) {
+ throw new Exception('Resource is locked', 423);
+ }
+ }
+
+ protected function dav_header()
+ {
+ header('DAV: 1, 2, 3');
+ }
+
+ public function http_options(): void
+ {
+ http_response_code(200);
+ $methods = 'GET HEAD PUT DELETE COPY MOVE PROPFIND MKCOL LOCK UNLOCK';
+
+ $this->dav_header();
+
+ header('Allow: ' . $methods);
+ header('Content-length: 0');
+ header('Accept-Ranges: bytes');
+ header('MS-Author-Via: DAV');
+ }
+
+ public function log(string $message, ...$params)
+ {
+ if (PHP_SAPI == 'cli-server') {
+ file_put_contents('php://stderr', vsprintf($message, $params) . "\n");
+ }
+ }
+
+ protected function getURI(string $source): string
+ {
+ $uri = parse_url($source, PHP_URL_PATH);
+ $uri = rawurldecode($uri);
+ $uri = rtrim($uri, '/');
+
+ if ($uri . '/' == $this->base_uri) {
+ $uri .= '/';
+ }
+
+ if (strpos($uri, $this->base_uri) !== 0) {
+ throw new Exception(sprintf('Invalid URI, "%s" is outside of scope "%s"', $uri, $this->base_uri), 400);
+ }
+
+ $uri = preg_replace('!/{2,}!', '/', $uri);
+
+ if (false !== strpos($uri, '..')) {
+ throw new Exception(sprintf('Invalid URI: "%s"', $uri), 403);
+ }
+
+ $uri = substr($uri, strlen($this->base_uri));
+ return $uri;
+ }
+
+ public function route(?string $uri = null): bool
+ {
+ if (null === $uri) {
+ $uri = $_SERVER['REQUEST_URI'] ?? '/';
+ }
+
+ $this->original_uri = $uri;
+
+ if ($uri . '/' == $this->base_uri) {
+ $uri .= '/';
+ }
+
+ if (0 === strpos($uri, $this->base_uri)) {
+ $uri = substr($uri, strlen($this->base_uri));
+ }
+ else {
+ $this->log('<= %s is not a managed URL', $uri);
+ return false;
+ }
+
+ // Add some extra-logging for Litmus tests
+ if (isset($_SERVER['HTTP_X_LITMUS']) || isset($_SERVER['HTTP_X_LITMUS_SECOND'])) {
+ $this->log('X-Litmus: %s', $_SERVER['HTTP_X_LITMUS'] ?? $_SERVER['HTTP_X_LITMUS_SECOND']);
+ }
+
+ $method = $_SERVER['REQUEST_METHOD'] ?? null;
+
+ header_remove('Expires');
+ header_remove('Pragma');
+ header_remove('Cache-Control');
+ header('X-Server: KD2', true);
+
+ // Stop and send reply to OPTIONS before anything else
+ if ($method == 'OPTIONS') {
+ $this->log('<= OPTIONS');
+ $this->http_options();
+ return true;
+ }
+
+ $uri = rawurldecode($uri);
+ $uri = trim($uri, '/');
+ $uri = preg_replace('!/{2,}!', '/', $uri);
+
+ $this->log('<= %s /%s', $method, $uri);
+
+ try {
+ if (false !== strpos($uri, '..')) {
+ throw new Exception(sprintf('Invalid URI: "%s"', $uri), 403);
+ }
+
+ // Call 'http_method' class method
+ $method = 'http_' . strtolower($method);
+
+ if (!method_exists($this, $method)) {
+ throw new Exception('Invalid request method', 405);
+ }
+
+ $out = $this->$method($uri);
+
+ $this->log('=> %d', http_response_code());
+
+ if (null !== $out) {
+ $this->log('=> %s', $out);
+ }
+
+ echo $out;
+ }
+ catch (Exception $e) {
+ $this->error($e);
+ }
+
+ return true;
+ }
+
+ function error(Exception $e)
+ {
+ $this->log('=> %d - %s', $e->getCode(), $e->getMessage());
+
+ if ($e->getCode() == 423) {
+ // http_response_code doesn't know about 423 Locked
+ header('HTTP/1.1 423 Locked');
+ }
+ else {
+ http_response_code($e->getCode());
+ }
+
+ header('Content-Type: application/xml; charset=utf-8', true);
+
+ printf('%s