|
Lines 25-30
use File::Temp;
Link Here
|
| 25 |
use File::Copy; |
25 |
use File::Copy; |
| 26 |
use CGI qw ( -utf8 ); |
26 |
use CGI qw ( -utf8 ); |
| 27 |
use GD; |
27 |
use GD; |
|
|
28 |
use MIME::Base64; |
| 28 |
use C4::Context; |
29 |
use C4::Context; |
| 29 |
use C4::Auth; |
30 |
use C4::Auth; |
| 30 |
use C4::Output; |
31 |
use C4::Output; |
|
Lines 43-60
unless (C4::Context->preference('patronimages')) {
Link Here
|
| 43 |
exit; |
44 |
exit; |
| 44 |
} |
45 |
} |
| 45 |
|
46 |
|
| 46 |
my ($template, $loggedinuser, $cookie) |
47 |
my ($template, $loggedinuser, $cookie) = get_template_and_user( |
| 47 |
= get_template_and_user({template_name => "tools/picture-upload.tt", |
48 |
{ |
| 48 |
query => $input, |
49 |
template_name => "tools/picture-upload.tt", |
| 49 |
type => "intranet", |
50 |
query => $input, |
| 50 |
authnotrequired => 0, |
51 |
type => "intranet", |
| 51 |
flagsrequired => { tools => 'batch_upload_patron_images'}, |
52 |
authnotrequired => 0, |
| 52 |
debug => 0, |
53 |
flagsrequired => { tools => 'batch_upload_patron_images'}, |
| 53 |
}); |
54 |
debug => 0, |
|
|
55 |
} |
| 56 |
); |
| 54 |
|
57 |
|
| 55 |
our $filetype = $input->param('filetype') || ''; |
58 |
our $filetype = $input->param('filetype') || ''; |
| 56 |
my $cardnumber = $input->param('cardnumber'); |
59 |
my $cardnumber = $input->param('cardnumber'); |
| 57 |
our $uploadfilename = $input->param('uploadfile') || ''; |
60 |
our $uploadfilename = $input->param('uploadfile') || $input->param('uploadfilename') || ''; |
|
|
61 |
my $uploadfiletext = $input->param('uploadfiletext') || ''; |
| 58 |
my $uploadfile = $input->upload('uploadfile'); |
62 |
my $uploadfile = $input->upload('uploadfile'); |
| 59 |
my $borrowernumber = $input->param('borrowernumber'); |
63 |
my $borrowernumber = $input->param('borrowernumber'); |
| 60 |
my $op = $input->param('op') || ''; |
64 |
my $op = $input->param('op') || ''; |
|
Lines 87-93
our @counts = ();
Link Here
|
| 87 |
our %errors = (); |
91 |
our %errors = (); |
| 88 |
|
92 |
|
| 89 |
# Case is important in these operational values as the template must use case to be visually pleasing! |
93 |
# Case is important in these operational values as the template must use case to be visually pleasing! |
| 90 |
if ( ( $op eq 'Upload' ) && $uploadfile ) { |
94 |
if ( ( $op eq 'Upload' ) && ($uploadfile || $uploadfiletext) ) { |
| 91 |
|
95 |
|
| 92 |
output_and_exit( $input, $cookie, $template, 'wrong_csrf_token' ) |
96 |
output_and_exit( $input, $cookie, $template, 'wrong_csrf_token' ) |
| 93 |
unless Koha::Token->new->check_csrf({ |
97 |
unless Koha::Token->new->check_csrf({ |
|
Lines 106-123
if ( ( $op eq 'Upload' ) && $uploadfile ) {
Link Here
|
| 106 |
$debug and warn "tempfile = $tempfile"; |
110 |
$debug and warn "tempfile = $tempfile"; |
| 107 |
my ( @directories, $results ); |
111 |
my ( @directories, $results ); |
| 108 |
|
112 |
|
| 109 |
$errors{'NOTZIP'} = 1 |
|
|
| 110 |
if ( $uploadfilename !~ /\.zip$/i && $filetype =~ m/zip/i ); |
| 111 |
$errors{'NOWRITETEMP'} = 1 unless ( -w $dirname ); |
113 |
$errors{'NOWRITETEMP'} = 1 unless ( -w $dirname ); |
| 112 |
$errors{'EMPTYUPLOAD'} = 1 unless ( length($uploadfile) > 0 ); |
114 |
if ( length($uploadfiletext) == 0 ) { |
|
|
115 |
$errors{'NOTZIP'} = 1 |
| 116 |
if ( $uploadfilename !~ /\.zip$/i && $filetype =~ m/zip/i ); |
| 117 |
$errors{'EMPTYUPLOAD'} = 1 unless ( length($uploadfile) > 0 ); |
| 118 |
} |
| 113 |
|
119 |
|
| 114 |
if (%errors) { |
120 |
if (%errors) { |
| 115 |
$template->param( ERRORS => [ \%errors ] ); |
121 |
$template->param( ERRORS => [ \%errors ] ); |
| 116 |
output_html_with_http_headers $input, $cookie, $template->output; |
122 |
output_html_with_http_headers $input, $cookie, $template->output; |
| 117 |
exit; |
123 |
exit; |
| 118 |
} |
124 |
} |
| 119 |
while (<$uploadfile>) { |
125 |
|
| 120 |
print $tfh $_; |
126 |
if ( length($uploadfiletext) == 0 ) { |
|
|
127 |
while (<$uploadfile>) { |
| 128 |
print $tfh $_; |
| 129 |
} |
| 130 |
} else { |
| 131 |
if ( $uploadfiletext =~ /data:image\/jpeg;base64,(.*)/ ) { |
| 132 |
my $encoded_picture = $1; |
| 133 |
my $decoded_picture = decode_base64($encoded_picture); |
| 134 |
print $tfh $decoded_picture; |
| 135 |
} else { |
| 136 |
$errors{'BADPICTUREDATA'} = 1; |
| 137 |
$template->param( ERRORS => [ \%errors ] ); |
| 138 |
output_html_with_http_headers $input, $cookie, $template->output; |
| 139 |
exit; |
| 140 |
} |
| 121 |
} |
141 |
} |
| 122 |
close $tfh; |
142 |
close $tfh; |
| 123 |
if ( $filetype eq 'zip' ) { |
143 |
if ( $filetype eq 'zip' ) { |
| 124 |
- |
|
|