\d+)', array(
'methods' => 'DELETE',
'callback' => array($this, 'delete_media'),
'permission_callback' => array($this, 'check_rest_permission')
));
register_rest_route('qdr-tss/v1', '/media', array(
'methods' => 'GET',
'callback' => array($this, 'get_media_collection'),
'permission_callback' => array($this, 'check_rest_permission')
));
// Chunked upload endpoints
register_rest_route('qdr-tss/v1', '/upload/init', array(
'methods' => 'POST',
'callback' => array($this, 'init_chunked_upload'),
'permission_callback' => array($this, 'check_rest_permission')
));
register_rest_route('qdr-tss/v1', '/upload/chunk', array(
'methods' => 'POST',
'callback' => array($this, 'upload_chunk'),
'permission_callback' => array($this, 'check_rest_permission')
));
register_rest_route('qdr-tss/v1', '/upload/finalize', array(
'methods' => 'POST',
'callback' => array($this, 'finalize_chunked_upload'),
'permission_callback' => array($this, 'check_rest_permission')
));
}
/**
* Check API key for REST API requests.
*/
public function check_api_key($result) {
// Only check for our namespace
if (empty($result) && strpos($_SERVER['REQUEST_URI'], '/wp-json/qdr-tss/') !== false) {
$headers = getallheaders();
$api_key = isset($headers['X-Api-Key']) ? $headers['X-Api-Key'] : '';
if ($api_key !== $this->settings['api_key']) {
return new WP_Error(
'rest_forbidden',
__('Invalid API key.', 'qdr-temporary-shared-storage'),
array('status' => 403)
);
}
}
return $result;
}
/**
* Check REST API permissions.
*/
public function check_rest_permission() {
$headers = getallheaders();
$api_key = isset($headers['X-Api-Key']) ? $headers['X-Api-Key'] : '';
return ($api_key === $this->settings['api_key']);
}
/**
* Initialize chunked upload.
*/
public function init_chunked_upload($request) {
$params = $request->get_params();
// Check required parameters
if (!isset($params['original_file_name']) || !isset($params['file_size'])) {
return new WP_Error('missing_params', __('Missing required parameters.', 'qdr-temporary-shared-storage'), array('status' => 400));
}
// Check max upload size
if (intval($params['file_size']) > $this->settings['max_upload_size']) {
return new WP_Error('file_too_large', __('File exceeds maximum upload size.', 'qdr-temporary-shared-storage'), array('status' => 400));
}
// Check total storage usage
if (!$this->check_storage_limit(intval($params['file_size']))) {
return new WP_Error('storage_limit', __('Storage limit exceeded.', 'qdr-temporary-shared-storage'), array('status' => 400));
}
// Create temporary upload directory
$upload_id = uniqid();
$upload_dir = QDR_TSS_UPLOADS_DIR . 'tmp/' . $upload_id;
if (!file_exists(QDR_TSS_UPLOADS_DIR . 'tmp/')) {
wp_mkdir_p(QDR_TSS_UPLOADS_DIR . 'tmp/');
}
wp_mkdir_p($upload_dir);
return array(
'upload_id' => $upload_id,
'status' => 'initialized'
);
}
/**
* Upload a chunk.
*/
public function upload_chunk($request) {
$upload_id = $request->get_param('upload_id');
$chunk_index = $request->get_param('chunk_index');
$total_chunks = $request->get_param('total_chunks');
if (!$upload_id || !isset($chunk_index) || !isset($total_chunks)) {
return new WP_Error('missing_params', __('Missing required parameters.', 'qdr-temporary-shared-storage'), array('status' => 400));
}
$upload_dir = QDR_TSS_UPLOADS_DIR . 'tmp/' . $upload_id;
// Check if the upload directory exists
if (!file_exists($upload_dir)) {
return new WP_Error('invalid_upload_id', __('Invalid upload ID.', 'qdr-temporary-shared-storage'), array('status' => 400));
}
// Handle file upload
$files = $request->get_file_params();
if (empty($files) || !isset($files['chunk'])) {
return new WP_Error('no_file', __('No file uploaded.', 'qdr-temporary-shared-storage'), array('status' => 400));
}
$chunk_file = $files['chunk'];
// Move uploaded chunk to temporary directory
$chunk_path = $upload_dir . '/' . $chunk_index;
move_uploaded_file($chunk_file['tmp_name'], $chunk_path);
return array(
'upload_id' => $upload_id,
'chunk_index' => $chunk_index,
'status' => 'chunk_uploaded'
);
}
/**
* Finalize chunked upload.
*/
public function finalize_chunked_upload($request) {
global $wpdb;
$params = $request->get_params();
$upload_id = $params['upload_id'];
$total_chunks = $params['total_chunks'];
if (!$upload_id || !isset($total_chunks)) {
return new WP_Error('missing_params', __('Missing required parameters.', 'qdr-temporary-shared-storage'), array('status' => 400));
}
// Check for required file metadata
$required_fields = array('original_file_name', 'description', 'password');
foreach ($required_fields as $field) {
if (!isset($params[$field]) || empty($params[$field])) {
return new WP_Error('missing_field', sprintf(__('Missing required field: %s', 'qdr-temporary-shared-storage'), $field), array('status' => 400));
}
}
$upload_dir = QDR_TSS_UPLOADS_DIR . 'tmp/' . $upload_id;
// Check that all chunks are present
for ($i = 0; $i < $total_chunks; $i++) {
if (!file_exists($upload_dir . '/' . $i)) {
return new WP_Error('missing_chunks', __('Not all chunks have been uploaded.', 'qdr-temporary-shared-storage'), array('status' => 400));
}
}
// Create final file directory
$file_dir = QDR_TSS_UPLOADS_DIR . date('Y/m/d');
if (!file_exists($file_dir)) {
wp_mkdir_p($file_dir);
}
// Sanitize file name
$original_file_name = sanitize_file_name($params['original_file_name']);
$file_name = md5($original_file_name . time()) . '-' . $original_file_name;
$file_path = $file_dir . '/' . $file_name;
// Combine chunks
$final_file = fopen($file_path, 'wb');
for ($i = 0; $i < $total_chunks; $i++) {
$chunk_path = $upload_dir . '/' . $i;
$chunk = fopen($chunk_path, 'rb');
stream_copy_to_stream($chunk, $final_file);
fclose($chunk);
unlink($chunk_path);
}
fclose($final_file);
// Clean up temporary directory
rmdir($upload_dir);
// Get file size
$file_size = filesize($file_path);
// Set dates
$active_from = !empty($params['active_from']) ? $params['active_from'] : current_time('mysql');
$active_to = !empty($params['active_to']) ? $params['active_to'] : date('Y-m-d H:i:s', strtotime('+30 days'));
// Generate a unique media ID and insert into database
$media_id = time() . rand(1000, 9999);
$table_name = $wpdb->prefix . QDR_TSS_PLUGIN_TABLE;
$wpdb->insert(
$table_name,
array(
'media_id' => $media_id,
'original_file_name' => $original_file_name,
'description' => sanitize_textarea_field($params['description']),
'message' => isset($params['message']) ? sanitize_textarea_field($params['message']) : '',
'active_from' => $active_from,
'active_to' => $active_to,
'password' => wp_hash_password($params['password']),
'reference' => isset($params['reference']) ? sanitize_text_field($params['reference']) : '',
'upload_date' => current_time('mysql'),
'file_path' => str_replace(QDR_TSS_UPLOADS_DIR, '', $file_path),
'file_size' => $file_size
),
array('%d', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%d')
);
$download_url = site_url('shared-file-download/' . $media_id);
$shortcode = '[qdr_tss_download id="' . $media_id . '"]';
return array(
'media_id' => $media_id,
'permalink' => $download_url,
'shortcode' => $shortcode
);
}
/**
* Get single media details.
*/
public function get_media($request) {
global $wpdb;
$id = $request->get_param('id');
$table_name = $wpdb->prefix . QDR_TSS_PLUGIN_TABLE;
$item = $wpdb->get_row($wpdb->prepare(
"SELECT media_id, original_file_name, description, message, active_from, active_to, reference, upload_date, download_count, last_download, file_size
FROM $table_name
WHERE media_id = %d",
$id
));
if (!$item) {
return new WP_Error('not_found', __('Media not found.', 'qdr-temporary-shared-storage'), array('status' => 404));
}
// Get additional information from WordPress attachment
$attachment = get_post($id);
if ($attachment && $attachment->post_type === 'attachment') {
$item->attachment_url = wp_get_attachment_url($id);
$item->attachment_title = $attachment->post_title;
}
return $item;
}
/**
* Update media details.
*/
public function update_media($request) {
global $wpdb;
$id = $request->get_param('id');
$params = $request->get_params();
$table_name = $wpdb->prefix . QDR_TSS_PLUGIN_TABLE;
// Check if media exists in our custom table
$item = $wpdb->get_row($wpdb->prepare(
"SELECT id FROM $table_name WHERE media_id = %d",
$id
));
if (!$item) {
return new WP_Error('not_found', __('Media not found.', 'qdr-temporary-shared-storage'), array('status' => 404));
}
// Check if the WordPress attachment exists
$attachment = get_post($id);
if (!$attachment || $attachment->post_type !== 'attachment') {
return new WP_Error('attachment_not_found', __('WordPress attachment not found.', 'qdr-temporary-shared-storage'), array('status' => 404));
}
// Prepare update data for our custom table
$update_data = array();
$update_format = array();
if (isset($params['message'])) {
$update_data['message'] = sanitize_textarea_field($params['message']);
$update_format[] = '%s';
}
if (isset($params['active_from'])) {
$update_data['active_from'] = $params['active_from'];
$update_format[] = '%s';
}
if (isset($params['active_to'])) {
$update_data['active_to'] = $params['active_to'];
$update_format[] = '%s';
}
if (isset($params['reference'])) {
$update_data['reference'] = sanitize_text_field($params['reference']);
$update_format[] = '%s';
}
if (empty($update_data)) {
return new WP_Error('no_changes', __('No changes to update.', 'qdr-temporary-shared-storage'), array('status' => 400));
}
// Update in our custom table
$wpdb->update(
$table_name,
$update_data,
array('media_id' => $id),
$update_format,
array('%d')
);
// Update WordPress attachment if description is provided
if (isset($params['description'])) {
$description = sanitize_textarea_field($params['description']);
$attachment_data = array(
'ID' => $id,
'post_excerpt' => $description
);
wp_update_post($attachment_data);
// Also update our custom table
$wpdb->update(
$table_name,
array('description' => $description),
array('media_id' => $id),
array('%s'),
array('%d')
);
}
// Get updated record
$updated_item = $wpdb->get_row($wpdb->prepare(
"SELECT media_id, original_file_name, description, message, active_from, active_to, reference, upload_date, download_count, last_download
FROM $table_name
WHERE media_id = %d",
$id
));
return $updated_item;
}
/**
* Delete media.
*/
public function delete_media($request) {
global $wpdb;
$id = $request->get_param('id');
$table_name = $wpdb->prefix . QDR_TSS_PLUGIN_TABLE;
// Get file path
$item = $wpdb->get_row($wpdb->prepare(
"SELECT id, file_path FROM $table_name WHERE media_id = %d",
$id
));
if (!$item) {
return new WP_Error('not_found', __('Media not found.', 'qdr-temporary-shared-storage'), array('status' => 404));
}
// Delete file
$file_path = QDR_TSS_UPLOADS_DIR . $item->file_path;
if (file_exists($file_path)) {
unlink($file_path);
}
// Delete from database
$wpdb->delete($table_name, array('media_id' => $id), array('%d'));
return array(
'deleted' => true,
'media_id' => $id
);
}
/**
* Get media collection.
*/
public function get_media_collection($request) {
global $wpdb;
$table_name = $wpdb->prefix . QDR_TSS_PLUGIN_TABLE;
// Parse query parameters
$params = $request->get_params();
$per_page = isset($params['per_page']) ? intval($params['per_page']) : 10;
$page = isset($params['page']) ? intval($params['page']) : 1;
$offset = ($page - 1) * $per_page;
// Build query
$query = "SELECT media_id, original_file_name, description, message, active_from, active_to, reference, upload_date, download_count, last_download, file_size
FROM $table_name";
$count_query = "SELECT COUNT(*) FROM $table_name";
$where_conditions = array();
$query_values = array();
// Filter by original_file_name
if (isset($params['original_file_name'])) {
$where_conditions[] = "original_file_name LIKE %s";
$query_values[] = '%' . $wpdb->esc_like($params['original_file_name']) . '%';
}
// Filter by reference
if (isset($params['reference'])) {
$where_conditions[] = "reference LIKE %s";
$query_values[] = '%' . $wpdb->esc_like($params['reference']) . '%';
}
// Add WHERE conditions if any
if (!empty($where_conditions)) {
$query .= " WHERE " . implode(" AND ", $where_conditions);
$count_query .= " WHERE " . implode(" AND ", $where_conditions);
}
// Add sorting
if (isset($params['orderby'])) {
$allowed_orderby_columns = array(
'media_id', 'original_file_name', 'description', 'active_from', 'active_to',
'reference', 'upload_date', 'download_count', 'last_download'
);
$orderby = in_array($params['orderby'], $allowed_orderby_columns) ? $params['orderby'] : 'upload_date';
$order = (isset($params['order']) && strtoupper($params['order']) === 'ASC') ? 'ASC' : 'DESC';
$query .= " ORDER BY $orderby $order";
} else {
$query .= " ORDER BY upload_date DESC";
}
// Add pagination
$query .= " LIMIT %d OFFSET %d";
$query_values[] = $per_page;
$query_values[] = $offset;
// Prepare and execute queries
$items = $wpdb->get_results($wpdb->prepare($query, $query_values));
$total_items = $wpdb->get_var($wpdb->prepare($count_query, array_slice($query_values, 0, -2)));
// Prepare response
$response = new WP_REST_Response($items);
$response->header('X-WP-Total', $total_items);
$response->header('X-WP-TotalPages', ceil($total_items / $per_page));
return $response;
}
/**
* Check storage limit.
*/
private function check_storage_limit($new_file_size) {
global $wpdb;
$table_name = $wpdb->prefix . QDR_TSS_PLUGIN_TABLE;
// Get total storage usage
$total_size = $wpdb->get_var("SELECT SUM(file_size) FROM $table_name");
$total_size = $total_size ? intval($total_size) : 0;
// Check if adding new file would exceed limit
return ($total_size + $new_file_size) <= $this->settings['max_upload_size'];
}
/**
* Purge expired files.
*/
public function purge_expired_files() {
global $wpdb;
$table_name = $wpdb->prefix . QDR_TSS_PLUGIN_TABLE;
$current_time = current_time('mysql');
// Get expired items
$expired_items = $wpdb->get_results($wpdb->prepare(
"SELECT id, media_id, file_path FROM $table_name WHERE active_to < %s",
$current_time
));
// Delete files and database records
foreach ($expired_items as $item) {
// Delete the WordPress attachment
wp_delete_attachment($item->media_id, true);
// Delete file if it still exists (in case the WordPress function didn't remove it)
$file_path = QDR_TSS_UPLOADS_DIR . $item->file_path;
if (file_exists($file_path)) {
unlink($file_path);
}
// Delete from our custom table
$wpdb->delete($table_name, array('id' => $item->id), array('%d'));
}
return count($expired_items);
}
/**
* Download shortcode.
*/
public function download_shortcode($atts) {
global $wpdb;
// Extract attributes
$atts = shortcode_atts(array(
'id' => null,
), $atts, 'qdr_tss_download');
// Get media ID from shortcode attribute or URL parameter
$media_id = $atts['id'];
if (!$media_id && isset($_GET['id'])) {
$media_id = intval($_GET['id']);
}
// If no media ID, show form to enter media ID, password and reference
if (!$media_id) {
return $this->render_download_form();
}
$table_name = $wpdb->prefix . QDR_TSS_PLUGIN_TABLE;
// Get media information
$item = $wpdb->get_row($wpdb->prepare(
"SELECT * FROM $table_name WHERE media_id = %d",
$media_id
));
if (!$item) {
return '' . __('File not found.', 'qdr-temporary-shared-storage') . '
';
}
// Check if file is active
$current_time = current_time('mysql');
if ($current_time < $item->active_from) {
return '' . __('This file is not yet available for download.', 'qdr-temporary-shared-storage') . '
';
}
if ($current_time > $item->active_to) {
return '' . __('This file has expired and is no longer available for download.', 'qdr-temporary-shared-storage') . '
';
}
// Check if form is submitted
if (isset($_POST['qdr_tss_download_submit'])) {
// Verify nonce
if (!isset($_POST['qdr_tss_nonce']) || !wp_verify_nonce($_POST['qdr_tss_nonce'], 'qdr_tss_download')) {
return '' . __('Security check failed.', 'qdr-temporary-shared-storage') . '
';
}
// Verify password
$password = isset($_POST['qdr_tss_password']) ? $_POST['qdr_tss_password'] : '';
if (!wp_check_password($password, $item->password)) {
return '' . __('Invalid password.', 'qdr-temporary-shared-storage') . '
' . $this->render_download_form($media_id);
}
// Verify reference if set
if (!empty($item->reference)) {
$reference = isset($_POST['qdr_tss_reference']) ? $_POST['qdr_tss_reference'] : '';
if ($reference !== $item->reference) {
return '' . __('Invalid reference.', 'qdr-temporary-shared-storage') . '
' . $this->render_download_form($media_id);
}
}
// Update download count and last download time
$wpdb->update(
$table_name,
array(
'download_count' => $item->download_count + 1,
'last_download' => current_time('mysql')
),
array('id' => $item->id),
array('%d', '%s'),
array('%d')
);
// Initiate download
$file_path = QDR_TSS_UPLOADS_DIR . $item->file_path;
if (file_exists($file_path)) {
// Set headers for download
header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename="' . $item->original_file_name . '"');
header('Expires: 0');
header('Cache-Control: must-revalidate');
header('Pragma: public');
header('Content-Length: ' . filesize($file_path));
ob_clean();
flush();
readfile($file_path);
exit;
} else {
return '' . __('File not found on server.', 'qdr-temporary-shared-storage') . '
';
}
}
// Show download form with media information
$output = '';
$output .= '
' . __('File Information', 'qdr-temporary-shared-storage') . '
';
$output .= '
' . __('File Name:', 'qdr-temporary-shared-storage') . ' ' . esc_html($item->original_file_name) . '
';
if (!empty($item->description)) {
$output .= '
' . __('Description:', 'qdr-temporary-shared-storage') . ' ' . esc_html($item->description) . '
';
}
if (!empty($item->message)) {
$output .= '
' . __('Message:', 'qdr-temporary-shared-storage') . ' ' . esc_html($item->message) . '
';
}
$output .= '