// (c) Copyright Ascensio System SIA 2010-2022 // // This program is a free software product. // You can redistribute it and/or modify it under the terms // of the GNU Affero General Public License (AGPL) version 3 as published by the Free Software // Foundation. In accordance with Section 7(a) of the GNU AGPL its Section 15 shall be amended // to the effect that Ascensio System SIA expressly excludes the warranty of non-infringement of // any third-party rights. // // This program is distributed WITHOUT ANY WARRANTY, without even the implied warranty // of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. For details, see // the GNU AGPL at: http://www.gnu.org/licenses/agpl-3.0.html // // You can contact Ascensio System SIA at Lubanas st. 125a-25, Riga, Latvia, EU, LV-1021. // // The interactive user interfaces in modified source and object code versions of the Program must // display Appropriate Legal Notices, as required under Section 5 of the GNU AGPL version 3. // // Pursuant to Section 7(b) of the License you must retain the original Product logo when // distributing the program. Pursuant to Section 7(e) we decline to grant you any rights under // trademark law for use of our trademarks. // // All the Product's GUI elements, including illustrations and icon sets, as well as technical writing // content are licensed under the terms of the Creative Commons Attribution-ShareAlike 4.0 // International. See the License terms at http://creativecommons.org/licenses/by-sa/4.0/legalcode namespace ASC.Web.Studio.Core.Backup; public class BackupFileUploadHandler { private const long MaxBackupFileSize = 1024L * 1024L * 1024L; public BackupFileUploadHandler(RequestDelegate next) { } public async Task Invoke(HttpContext context, PermissionContext permissionContext, BackupAjaxHandler backupAjaxHandler) { FileUploadResult result; try { if (context.Request.Form.Files.Count == 0) { result = Error("No files."); } if (!permissionContext.CheckPermissions(SecutiryConstants.EditPortalSettings)) { result = Error("Access denied."); } var file = context.Request.Form.Files[0]; if (file.Length <= 0 || file.Length > MaxBackupFileSize) { result = Error($"File size must be greater than 0 and less than {MaxBackupFileSize} bytes"); } var filePath = backupAjaxHandler.GetTmpFilePath(); if (File.Exists(filePath)) { File.Delete(filePath); } using (var fileStream = File.Create(filePath)) { await file.CopyToAsync(fileStream); } result = Success(); } catch (Exception error) { result = Error(error.Message); } await context.Response.WriteAsync(System.Text.Json.JsonSerializer.Serialize(result)); } private FileUploadResult Success() { return new FileUploadResult { Success = true }; } private FileUploadResult Error(string messageFormat, params object[] args) { return new FileUploadResult { Success = false, Message = string.Format(messageFormat, args) }; } } public static class BackupFileUploadHandlerExtensions { public static IApplicationBuilder UseBackupFileUploadHandler(this IApplicationBuilder builder) { return builder.UseMiddleware(); } }