@@ -13,5 +13,8 @@ declare(strict_types=1);

 /**

  * Palettes

  */

-$GLOBALS['TL_DCA']['tl_content']['palettes']['secureDownloads'] = '{type_legend},type,headline;{source_legend},sortBy,metaIgnore;{template_legend:hide},customTpl;{protected_legend:hide},protected;{expert_legend:hide},guests,cssID,space;{invisible_legend:hide},invisible,start,stop';

+

+use vonRotenberg\MemberfilesBundle\Controller\Frontend\ContentElement\SecureDownloadsController;

+

+$GLOBALS['TL_DCA']['tl_content']['palettes'][SecureDownloadsController::TYPE] = '{type_legend},type,headline;{source_legend},sortBy,metaIgnore;{template_legend:hide},customTpl;{protected_legend:hide},protected;{expert_legend:hide},guests,cssID,space;{invisible_legend:hide},invisible,start,stop';

@@ -20,6 +20,7 @@ $GLOBALS['TL_DCA']['tl_member_secureDownloads'] = array

         'dataContainer' => 'Table',

         'ptable' => 'tl_member',

         'closed' => true,

+        'doNotCopyRecords' => true,

         'sql' => array

         (

             'keys' => array

@@ -93,7 +94,7 @@ $GLOBALS['TL_DCA']['tl_member_secureDownloads'] = array

         (

             'foreignKey' => 'tl_files.name',

             'sql' => "binary(16) NULL",

-            'relation' => array('type' => 'belongsTo', 'load' => 'eager', 'field' => 'uuid')

+            'relation' => array('type' => 'belongsTo', 'load' => 'lazy', 'field' => 'uuid')

         ),

         'tstamp' => array

         (

@@ -8,8 +8,10 @@

  * @license LGPL-3.0+

  */

-$GLOBALS['TL_LANG']['CTE']['secureDownloads'][0] = 'Sichere Downloads';

-$GLOBALS['TL_LANG']['CTE']['secureDownloads'][1] = 'Sichere Downloads für Mitglieder';

+use vonRotenberg\MemberfilesBundle\Controller\Frontend\ContentElement\SecureDownloadsController;

+

+$GLOBALS['TL_LANG']['CTE'][SecureDownloadsController::TYPE][0] = 'Sichere Downloads';

+$GLOBALS['TL_LANG']['CTE'][SecureDownloadsController::TYPE][1] = 'Sichere Downloads für Mitglieder';

 /**

  * Misc

deleted file mode 100644

@@ -1,15 +0,0 @@

-<?php

-

-/**

- * Pagelist for Contao

- *

- * Copyright (c) 2015 Benjamin Roth

- *

- * @license LGPL-3.0+

- */

-

-/**

- * Frontend modules

- */

-$GLOBALS['TL_LANG']['FMD']['pagelist'][0] = 'Seitenliste';

-$GLOBALS['TL_LANG']['FMD']['pagelist'][1] = 'Erzeugt eine Linkliste mit Unterseiten.';

\ No newline at end of file

new file mode 100644

@@ -0,0 +1,20 @@

+{% extends '@Contao/block_unsearchable' %}

+

+{% block content %}

+    {% import "@ContaoCore/Image/Studio/_macros.html.twig" as studio %}

+

+    <ul>

+        {% for file in files %}

+            <li class="download-element ext-{{ file.extension }}">

+                {% if file.previews is defined %}

+                    {% for preview in file.previews %}

+                        {{- studio.figure(preview, { attr: { class: ('image_container') }}) -}}

+                    {% endfor %}

+                {% endif %}

+                <a href="{{ file.href }}" title="{{ file.title }}" type="{{ file.mime }}">{{ file.link}} <span class="size">({{ file.filesize }})</span></a>

+            </li>

+        {% endfor %}

+    </ul>

+

+{% endblock %}

+

new file mode 100644

@@ -0,0 +1,269 @@

+<?php

+

+declare(strict_types=1);

+

+/*

+ * This file is part of eSales Media SinglereisenBundle

+ *

+ * (c) Benjamin Roth

+ *

+ * @license proprietary

+ */

+

+namespace vonRotenberg\MemberfilesBundle\Controller\Frontend\ContentElement;

+

+use Contao\Config;

+use Contao\ContentModel;

+use Contao\Controller;

+use Contao\CoreBundle\Controller\ContentElement\AbstractContentElementController;

+use Contao\CoreBundle\ServiceAnnotation\ContentElement;

+use Contao\Environment;

+use Contao\File;

+use Contao\FilesModel;

+use Contao\FrontendUser;

+use Contao\Image;

+use Contao\Input;

+use Contao\StringUtil;

+use Contao\System;

+use Contao\Template;

+use Doctrine\DBAL\Connection;

+use Symfony\Component\HttpFoundation\Request;

+use Symfony\Component\HttpFoundation\Response;

+use vonRotenberg\MemberfilesBundle\Model\SecureDownloadsModel;

+

+/**

+ * @ContentElement(SecureDownloadsController::TYPE, category="files")

+ */

+class SecureDownloadsController extends AbstractContentElementController

+{

+    public const TYPE = 'secure_downloads';

+

+    /** @var Connection */

+    protected $db;

+

+    protected $User;

+

+    public function __construct(Connection $db)

+    {

+        if (!System::getContainer()->get('contao.security.token_checker')->hasFrontendUser())

+        {

+            return new Response('',403);

+        }

+

+        $this->db = $db;

+        $this->User = FrontendUser::getInstance();

+    }

+

+

+    protected function getResponse(Template $template, ContentModel $model, Request $request): Response

+    {

+        // Handle file requests

+        if (

+            ($path = Input::get('file', true)) !== null

+            && ($File = FilesModel::findByPath($path)) !== null

+            && ($SecFile = $SecFile = SecureDownloadsModel::findBy(["uuid = ?"],[$File->uuid])) !== null

+        )

+        {

+            if ($SecFile->pid == $this->User->id)

+            {

+                Controller::sendFileToBrowser($path);

+            } else {

+                return new Response('',403);

+            }

+        }

+

+        $objPage = $this->getPageModel();

+        $allowedDownload = StringUtil::trimsplit(',', strtolower(\Config::get('allowedDownload')));

+        $UserFiles = $this->db->executeQuery("SELECT uuid FROM tl_member_secureDownloads WHERE pid = ?",[$this->User->id]);

+

+        // Return if there are no files

+        if ($UserFiles->rowCount() < 1)

+        {

+            return new Response();

+        }

+

+        $arrUuid = $UserFiles->fetchFirstColumn();

+

+        if (($objFiles = FilesModel::findMultipleByUuids($arrUuid)) === null)

+        {

+            return new Response();

+        }

+

+        while ($objFiles->next())

+        {

+            // Continue if the files has been processed or does not exist

+            if (isset($files[$objFiles->path]) || !file_exists(TL_ROOT . '/' . $objFiles->path))

+            {

+                continue;

+            }

+

+            // Single files

+            if ($objFiles->type == 'file')

+            {

+                $File = new File($objFiles->path);

+

+                if (!in_array($File->extension, $allowedDownload) || preg_match('/^meta(_[a-z]{2})?\.txt$/', $File->basename))

+                {

+                    continue;

+                }

+

+                $arrMeta = $objFiles->current()->getMetaData($objPage->language);

+

+                if (empty($arrMeta))

+                {

+                    if ($model->metaIgnore)

+                    {

+                        continue;

+                    }

+                    elseif (($objPage->rootFallbackLanguage !== null && ($arrMeta = $objFiles->current()->getMetaData($objPage->rootFallbackLanguage)) === null) || $arrMeta === null)

+                    {

+                        $arrMeta = [];

+                    }

+                }

+

+                // Use the file name as title if none is given

+                if (empty($arrMeta['title']))

+                {

+                    $arrMeta['title'] = StringUtil::specialchars($File->basename);

+                }

+

+                $strHref = Environment::get('request');

+

+                // Remove an existing file parameter (see #5683)

+                if (preg_match('/(&(amp;)?|\?)file=/', $strHref))

+                {

+                    $strHref = preg_replace('/(&(amp;)?|\?)file=[^&]+/', '', $strHref);

+                }

+

+                $strHref .= ((Config::get('disableAlias') || strpos($strHref, '?') !== false) ? '&' : '?') . 'file=' . System::urlEncode($objFiles->path);

+

+                // Add the image

+                $files[$objFiles->path] = array

+                (

+                    'id'        => $objFiles->id,

+                    'uuid'      => $objFiles->uuid,

+                    'name'      => $File->basename,

+                    'title'     => StringUtil::specialchars(sprintf($GLOBALS['TL_LANG']['MSC']['download'], $File->basename)),

+                    'link'      => $arrMeta['title'] ?? '',

+                    'caption'   => $arrMeta['caption'] ?? '',

+                    'href'      => $strHref,

+                    'filesize'  => System::getReadableSize($File->filesize, 1),

+                    'icon'      => Image::getPath($File->icon),

+                    'mime'      => $File->mime,

+                    'meta'      => $arrMeta,

+                    'extension' => $File->extension,

+                    'path'      => $File->dirname,

+                    'mtime'     => $File->mtime

+                );

+

+                $auxDate[] = $File->mtime;

+            }

+

+            // Folders

+            else

+            {

+                $objSubfiles = FilesModel::findByPid($objFiles->uuid);

+

+                if ($objSubfiles === null)

+                {

+                    continue;

+                }

+

+                while ($objSubfiles->next())

+                {

+                    // Skip subfolders

+                    if ($objSubfiles->type == 'folder')

+                    {

+                        continue;

+                    }

+

+                    $File = new File($objSubfiles->path);

+

+                    if (!in_array($File->extension, $allowedDownload) || preg_match('/^meta(_[a-z]{2})?\.txt$/', $File->basename))

+                    {

+                        continue;

+                    }

+

+                    $arrMeta = $objSubfiles->current()->getMetaData($objPage->language);

+

+                    if (empty($arrMeta))

+                    {

+                        if ($model->metaIgnore)

+                        {

+                            continue;

+                        }

+                        elseif (($objPage->rootFallbackLanguage !== null && ($arrMeta = $objSubfiles->current()->getMetaData($objPage->rootFallbackLanguage)) === null) || $arrMeta === null)

+                        {

+                            $arrMeta = [];

+                        }

+                    }

+

+                    // Use the file name as title if none is given

+                    if (empty($arrMeta['title']))

+                    {

+                        $arrMeta['title'] = StringUtil::specialchars($File->basename);

+                    }

+

+                    $strHref = Environment::get('request');

+

+                    // Remove an existing file parameter (see #5683)

+                    if (preg_match('/(&(amp;)?|\?)file=/', $strHref))

+                    {

+                        $strHref = preg_replace('/(&(amp;)?|\?)file=[^&]+/', '', $strHref);

+                    }

+

+                    $strHref .= ((Config::get('disableAlias') || strpos($strHref, '?') !== false) ? '&' : '?') . 'file=' . System::urlEncode($objSubfiles->path);

+

+                    // Add the image

+                    $files[$objSubfiles->path] = array

+                    (

+                        'id'        => $objSubfiles->id,

+                        'uuid'      => $objSubfiles->uuid,

+                        'name'      => $File->basename,

+                        'title'     => StringUtil::specialchars(sprintf($GLOBALS['TL_LANG']['MSC']['download'], $File->basename)),

+                        'link'      => $arrMeta['title'] ?? '',

+                        'caption'   => $arrMeta['caption'] ?? '',

+                        'href'      => $strHref,

+                        'filesize'  => System::getReadableSize($File->filesize, 1),

+                        'icon'      => Image::getPath($File->icon),

+                        'mime'      => $File->mime,

+                        'meta'      => $arrMeta,

+                        'extension' => $File->extension,

+                        'path'      => $File->dirname

+                    );

+

+                    $auxDate[] = $File->mtime;

+                }

+            }

+        }

+

+        // Sort array

+        switch ($model->sortBy)

+        {

+            default:

+            case 'name_asc':

+                uksort($files, 'basename_natcasecmp');

+                break;

+

+            case 'name_desc':

+                uksort($files, 'basename_natcasercmp');

+                break;

+

+            case 'date_asc':

+                array_multisort($files, SORT_NUMERIC, $auxDate, SORT_ASC);

+                break;

+

+            case 'date_desc':

+                array_multisort($files, SORT_NUMERIC, $auxDate, SORT_DESC);

+                break;

+

+            case 'random':

+                shuffle($files);

+                break;

+        }

+

+        $template->files = array_values($files);

+

+        return $template->getResponse();

+    }

+}