1 | <?php |
---|
2 | /** |
---|
3 | * CalDAV Server - handle PUT method on unknown (arbitrary) content-types |
---|
4 | * |
---|
5 | * @package davical |
---|
6 | * @subpackage caldav |
---|
7 | * @author Andrew McMillan <andrew@morphoss.com> |
---|
8 | * @copyright Morphoss Ltd |
---|
9 | * @license http://gnu.org/copyleft/gpl.html GNU GPL v2 or later |
---|
10 | */ |
---|
11 | dbg_error_log("PUT", "method handler"); |
---|
12 | |
---|
13 | require_once('DAVResource.php'); |
---|
14 | |
---|
15 | if ( ! ini_get('open_basedir') && (isset($c->dbg['ALL']) || (isset($c->dbg['put']) && $c->dbg['put'])) ) { |
---|
16 | $fh = fopen('/tmp/PUT.txt','w'); |
---|
17 | if ( $fh ) { |
---|
18 | fwrite($fh,$request->raw_post); |
---|
19 | fclose($fh); |
---|
20 | } |
---|
21 | } |
---|
22 | |
---|
23 | $lock_opener = $request->FailIfLocked(); |
---|
24 | |
---|
25 | $dest = new DAVResource($request->path); |
---|
26 | |
---|
27 | $container = $dest->FetchParentContainer(); |
---|
28 | if ( $container->IsCalendar() ) { |
---|
29 | $request->PreconditionFailed(412,'urn:ietf:params:xml:ns:caldav:supported-calendar-data', |
---|
30 | translate('Incorrect content type for calendar: ') . $request->content_type ); |
---|
31 | } |
---|
32 | else if ( $container->IsAddressbook() ) { |
---|
33 | $request->PreconditionFailed(412,'urn:ietf:params:xml:ns:carddav:supported-address-data', |
---|
34 | translate('Incorrect content type for addressbook: ') . $request->content_type ); |
---|
35 | } |
---|
36 | if ( ! $dest->Exists() ) { |
---|
37 | if ( $container->IsPrincipal() ) { |
---|
38 | $request->DoResponse(403,translate('A DAViCal principal collection may only contain collections')); |
---|
39 | } |
---|
40 | if ( ! $container->Exists() ) { |
---|
41 | $request->DoResponse( 409, translate('Destination collection does not exist') ); |
---|
42 | } |
---|
43 | $container->NeedPrivilege('DAV::bind'); |
---|
44 | } |
---|
45 | else { |
---|
46 | if ( $dest->IsCollection() ) { |
---|
47 | if ( ! isset($c->readonly_webdav_collections) || $c->readonly_webdav_collections ) { |
---|
48 | $request->DoResponse(403,translate('You may not PUT to a collection URL')); |
---|
49 | } |
---|
50 | $request->DoResponse(403,translate('PUT on a collection is only allowed for text/calendar content against a calendar collection')); |
---|
51 | } |
---|
52 | $dest->NeedPrivilege('DAV::write-content'); |
---|
53 | } |
---|
54 | |
---|
55 | if ( isset($request->etag_none_match) && $request->etag_none_match != '*' && $dest->Exists() ) { |
---|
56 | $request->DoResponse(412); |
---|
57 | } |
---|
58 | |
---|
59 | if ( isset($request->etag_if_match) && $request->etag_if_match != $dest->unique_tag() ) { |
---|
60 | $request->DoResponse(412); |
---|
61 | } |
---|
62 | |
---|
63 | $collection_id = $container->GetProperty('collection_id'); |
---|
64 | |
---|
65 | $qry = new AwlQuery(); |
---|
66 | $qry->Begin(); |
---|
67 | |
---|
68 | $etag = md5($request->raw_post); |
---|
69 | $params = array( |
---|
70 | ':user_no' => $dest->GetProperty('user_no'), |
---|
71 | ':dav_name' => $dest->bound_from(), |
---|
72 | ':etag' => $etag, |
---|
73 | ':dav_data' => $request->raw_post, |
---|
74 | ':session_user' => $session->user_no |
---|
75 | ); |
---|
76 | if ( $dest->Exists() ) { |
---|
77 | $sql = 'UPDATE caldav_data SET caldav_data=:dav_data, dav_etag=:etag, logged_user=:session_user, |
---|
78 | modified=current_timestamp WHERE user_no=:user_no AND dav_name=:dav_name'; |
---|
79 | $response_code = 200; |
---|
80 | } |
---|
81 | else { |
---|
82 | $sql = 'INSERT INTO caldav_data ( user_no, dav_name, dav_etag, caldav_data, logged_user, created, modified, collection_id ) |
---|
83 | VALUES( :user_no, :dav_name, :etag, :dav_data, :session_user, current_timestamp, current_timestamp, :collection_id )'; |
---|
84 | $params[':collection_id'] = $collection_id; |
---|
85 | $response_code = 201; |
---|
86 | } |
---|
87 | $qry->QDo( $sql, $params ); |
---|
88 | |
---|
89 | $qry->QDo("SELECT write_sync_change( $collection_id, $response_code, :dav_name)", array(':dav_name' => $dest->bound_from() ) ); |
---|
90 | |
---|
91 | $qry = new AwlQuery('COMMIT'); |
---|
92 | if ( !$qry->Exec('move') ) rollback(500); |
---|
93 | |
---|
94 | header('ETag: "'. $etag . '"' ); |
---|
95 | if ( $response_code == 200 ) $response_code = 204; |
---|
96 | $request->DoResponse( $response_code ); |
---|