Compare commits

..

No commits in common. "main" and "0.1.9" have entirely different histories.
main ... 0.1.9

4 changed files with 105 additions and 152 deletions

View file

@ -1,5 +1,4 @@
all: clean index.php
KD2FW_URL := https://fossil.kd2.org/kd2fw/doc/trunk/src/lib/KD2/
deps:
@-mkdir -p lib/KD2/WebDAV

View file

@ -2,7 +2,7 @@
## Single-file WebDAV server in PHP, just drop it in a directory!
If you drop the [`index.php`](https://fossil.kd2.org/picodav/doc/trunk/index.php) file in a directory of your web-server, it will make the contents of this directory available via WebDAV, and will also provide a nice web UI to manage the files, using [WebDAV Manager.js](https://fossil.kd2.org/webdav-manager/).
If you drop the [`index.php`](https://github.com/kd2org/picodav/raw/main/index.php) file in a directory of your web-server, it will make the contents of this directory available via WebDAV, and will also provide a nice web UI to manage the files, using [WebDAV Manager.js](https://github.com/kd2org/webdav-manager.js).
![Web UI screenshot](https://raw.githubusercontent.com/kd2org/webdav-manager.js/main/scr_desktop.png)
@ -23,11 +23,6 @@ If you drop the [`index.php`](https://fossil.kd2.org/picodav/doc/trunk/index.php
* Restrict users to some directories, control where they can write!
* Support for [rclone](https://rclone.org) as a NextCloud provider
## Development
* Main Fossil repository: <https://fossil.kd2.org/picodav/>
* Git mirror: <https://github.com/kd2org/picodav/> (issues and PR accepted)
## WebDAV clients
You can use any WebDAV client, but we recommend these:
@ -38,7 +33,7 @@ You can use any WebDAV client, but we recommend these:
## Install
It's really as simple as it says: just upload the [`index.php`](https://fossil.kd2.org/picodav/doc/trunk/index.php) file to a directory on your web-server, and it will now be available via WebDAV!
It's really as simple as it says: just upload the [`index.php`](https://github.com/kd2org/picodav/raw/main/index.php) file to a directory on your web-server, and it will now be available via WebDAV!
If you are using Apache (version 2.3.9 or later is required), a .htaccess file will be created if it does not exist, to redirect requests to `index.php`. If not, you can use the provided `.htaccess` as a basis for your server configuration.
@ -159,7 +154,7 @@ This is designed to work best with Apache web servers. If you are using another
## See also: KaraDAV
[KaraDAV](https://fossil.kd2.org/karadav/) is another WebDAV server built by me, using the same library and the same web UI to manage files.
[KaraDAV](https://github.com/kd2org/karadav/) is another WebDAV server built by me, using the same library and the same web UI to manage files.
How KaraDAV is different? Well, KaraDAV:

206
index.php
View file

@ -25,16 +25,6 @@ namespace KD2\WebDAV
'DAV::quota-available-bytes',
];
const PROP_NAMESPACE_MICROSOFT = 'urn:schemas-microsoft-com:';
const MODIFICATION_TIME_PROPERTIES = [
'DAV::lastmodified',
'DAV::creationdate',
'DAV::getlastmodified',
'urn:schemas-microsoft-com::Win32LastModifiedTime',
'urn:schemas-microsoft-com::Win32CreationTime',
];
// Custom properties
const PROP_DIGEST_MD5 = 'urn:karadav:digest_md5';
@ -66,8 +56,7 @@ namespace KD2\WebDAV
public function setBaseURI(string $uri): void
{
$this->base_uri = '/' . ltrim($uri, '/');
$this->base_uri = rtrim($this->base_uri, '/') . '/';
$this->base_uri = rtrim($uri, '/') . '/';
}
protected function extendExecutionTime(): void
@ -115,7 +104,7 @@ namespace KD2\WebDAV
foreach ($list as $file => $props) {
if (null === $props) {
$props = $this->storage->propfind(trim($uri . '/' . $file, '/'), self::BASIC_PROPERTIES, 0);
$props = $this->storage->properties(trim($uri . '/' . $file, '/'), self::BASIC_PROPERTIES, 0);
}
$collection = !empty($props['DAV::resourcetype']) && $props['DAV::resourcetype'] == 'collection';
@ -220,7 +209,7 @@ namespace KD2\WebDAV
elseif (!empty($_SERVER['HTTP_OC_CHECKSUM'])
&& preg_match('/MD5:[a-f0-9]{32}|SHA1:[a-f0-9]{40}/', $_SERVER['HTTP_OC_CHECKSUM'], $match)) {
$hash_algo = strtok($match[0], ':');
$hash = strtok('');
$hash = strtok(false);
}
$uri = $this->_prefix($uri);
@ -229,7 +218,7 @@ namespace KD2\WebDAV
if (!empty($_SERVER['HTTP_IF_MATCH'])) {
$etag = trim($_SERVER['HTTP_IF_MATCH'], '" ');
$prop = $this->storage->propfind($uri, ['DAV::getetag'], 0);
$prop = $this->storage->properties($uri, ['DAV::getetag'], 0);
if (!empty($prop['DAV::getetag']) && $prop['DAV::getetag'] != $etag) {
throw new Exception('ETag did not match condition', 412);
@ -240,6 +229,10 @@ namespace KD2\WebDAV
// This expects a UNIX timestamp
$mtime = (int)($_SERVER['HTTP_X_OC_MTIME'] ?? 0) ?: null;
if ($mtime) {
header('X-OC-MTime: accepted');
}
$this->extendExecutionTime();
$stream = fopen('php://input', 'r');
@ -259,17 +252,9 @@ namespace KD2\WebDAV
fseek($stream, 0, SEEK_SET);
}
$created = $this->storage->put($uri, $stream, $hash_algo, $hash);
$created = $this->storage->put($uri, $stream, $hash_algo, $hash, $mtime);
if ($mtime) {
$mtime = new \DateTime('@' . $mtime);
if ($this->storage->touch($uri, $mtime)) {
header('X-OC-MTime: accepted');
}
}
$prop = $this->storage->propfind($uri, ['DAV::getetag'], 0);
$prop = $this->storage->properties($uri, ['DAV::getetag'], 0);
if (!empty($prop['DAV::getetag'])) {
$value = $prop['DAV::getetag'];
@ -297,7 +282,7 @@ namespace KD2\WebDAV
$requested_props[] = self::PROP_DIGEST_MD5;
}
$props = $this->storage->propfind($uri, $requested_props, 0);
$props = $this->storage->properties($uri, $requested_props, 0);
if (!$props) {
throw new Exception('Resource Not Found', 404);
@ -378,7 +363,7 @@ namespace KD2\WebDAV
}
if (!isset($file['content']) && !isset($file['resource']) && !isset($file['path'])) {
throw new \RuntimeException('Invalid file array returned by ::get(): ' . print_r($file, true));
throw new \RuntimeException('Invalid file array returned by ::get()');
}
$this->extendExecutionTime();
@ -588,7 +573,7 @@ namespace KD2\WebDAV
// should do just nothing, see 'depth_zero_copy' test in litmus
if ($depth == 0
&& $this->storage->exists($destination)
&& current($this->storage->propfind($destination, ['DAV::resourcetype'], 0)) == 'collection') {
&& current($this->storage->properties($destination, ['DAV::resourcetype'], 0)) == 'collection') {
$overwritten = $this->storage->exists($uri);
}
else {
@ -707,24 +692,18 @@ namespace KD2\WebDAV
$requested_keys = $requested ? array_keys($requested) : null;
// Find root element properties
$properties = $this->storage->propfind($uri, $requested_keys, $depth);
$properties = $this->storage->properties($uri, $requested_keys, $depth);
if (null === $properties) {
throw new Exception('This does not exist', 404);
}
if (isset($properties['DAV::getlastmodified'])) {
foreach (self::MODIFICATION_TIME_PROPERTIES as $name) {
$properties[$name] = $properties['DAV::getlastmodified'];
}
}
$items = [$uri => $properties];
if ($depth) {
foreach ($this->storage->list($uri, $requested) as $file => $properties) {
$path = trim($uri . '/' . $file, '/');
$properties = $properties ?? $this->storage->propfind($path, $requested_keys, 0);
$properties = $properties ?? $this->storage->properties($path, $requested_keys, 0);
if (!$properties) {
$this->log('!!! Cannot find "%s"', $path);
@ -968,93 +947,19 @@ namespace KD2\WebDAV
$uri = $this->_prefix($uri);
$this->checkLock($uri);
$prefix = '<?xml version="1.0" encoding="utf-8"?>' . "\n";
$prefix.= '<d:multistatus xmlns:d="DAV:"';
$suffix = "</d:multistatus>\n";
$body = file_get_contents('php://input');
$properties = $this->parsePropPatch($body);
$root_namespaces = [];
$i = 0;
$set_time = null;
$set_time_name = null;
foreach ($properties as $name => $value) {
$pos = strrpos($name, ':');
$ns = substr($name, 0, $pos);
if (!array_key_exists($ns, $root_namespaces)) {
$alias = 'rns' . $i++;
$root_namespaces[$ns] = $alias;
$prefix .= sprintf(' xmlns:%s="%s"', $alias, htmlspecialchars($ns, ENT_XML1));
}
}
// See if the client wants to set the modification time
foreach (self::MODIFICATION_TIME_PROPERTIES as $name) {
if (!array_key_exists($name, $properties) || $value['action'] !== 'set' || empty($value['content'])) {
continue;
}
$ts = $value['content'];
if (ctype_digit($ts)) {
$ts = '@' . $ts;
}
$set_time = new \DateTime($value['content']);
$set_time_name = $name;
}
$prefix .= sprintf(">\n<d:response>\n <d:href>%s</d:href>\n", htmlspecialchars($url, ENT_XML1));
$this->storage->setProperties($uri, $body);
// http_response_code doesn't know the 207 status code
header('HTTP/1.1 207 Multi-Status', true);
header('Content-Type: application/xml; charset=utf-8', true);
header('Content-Type: application/xml; charset=utf-8');
if (!count($properties)) {
return $prefix . $suffix;
}
$out = '<?xml version="1.0" encoding="utf-8"?>' . "\n";
$out .= '<d:multistatus xmlns:d="DAV:">';
$out .= '</d:multistatus>';
if ($set_time) {
unset($properties[$set_time_name]);
}
$return = $this->storage->proppatch($uri, $properties);
if ($set_time && $this->touch($uri, $set_time)) {
$return[$set_time_name] = 200;
}
$out = '';
static $messages = [
200 => 'OK',
403 => 'Forbidden',
409 => 'Conflict',
427 => 'Failed Dependency',
507 => 'Insufficient Storage',
];
foreach ($return as $name => $status) {
$pos = strrpos($name, ':');
$ns = substr($name, 0, $pos);
$name = substr($name, $pos + 1);
$out .= " <d:propstat>\n <d:prop>";
$out .= sprintf("<%s:%s /></d:prop>\n <d:status>HTTP/1.1 %d %s</d:status>",
$root_namespaces[$ns],
$name,
$status,
$messages[$status] ?? ''
);
$out .= "\n </d:propstat>\n";
}
$out .= "</d:response>\n";
return $prefix . $out . $suffix;
return $out;
}
public function http_lock(string $uri): ?string
@ -1205,7 +1110,7 @@ namespace KD2\WebDAV
&& preg_match('/\(<([^>]*)>\s+\["([^""]+)"\]\)/', $_SERVER['HTTP_IF'], $match)) {
$token = $match[1];
$request_etag = $match[2];
$etag = current($this->storage->propfind($uri, ['DAV::getetag'], 0));
$etag = current($this->storage->properties($uri, ['DAV::getetag'], 0));
if ($request_etag != $etag) {
throw new Exception('Resource is locked and etag does not match', 412);
@ -1258,10 +1163,9 @@ namespace KD2\WebDAV
{
$uri = parse_url($source, PHP_URL_PATH);
$uri = rawurldecode($uri);
$uri = trim($uri, '/');
$uri = '/' . $uri;
$uri = rtrim($uri, '/');
if ($uri . '/' === $this->base_uri) {
if ($uri . '/' == $this->base_uri) {
$uri .= '/';
}
@ -1286,7 +1190,6 @@ namespace KD2\WebDAV
$uri = $_SERVER['REQUEST_URI'] ?? '/';
}
$uri = '/' . ltrim($uri, '/');
$this->original_uri = $uri;
if ($uri . '/' == $this->base_uri) {
@ -1297,7 +1200,7 @@ namespace KD2\WebDAV
$uri = substr($uri, strlen($this->base_uri));
}
else {
$this->log('<= %s is not a managed URL (%s)', $uri, $this->base_uri);
$this->log('<= %s is not a managed URL', $uri);
return false;
}
@ -1390,14 +1293,14 @@ namespace KD2\WebDAV
abstract public function exists(string $uri): bool;
abstract public function propfind(string $uri, ?array $requested_properties, int $depth): ?array;
abstract public function properties(string $uri, ?array $requested_properties, int $depth): ?array;
public function proppatch(string $uri, array $properties): array
public function setProperties(string $uri, string $body): void
{
// By default, properties are not saved
}
abstract public function put(string $uri, $pointer, ?string $hash_algo, ?string $hash): bool;
abstract public function put(string $uri, $pointer, ?string $hash_algo, ?string $hash, ?int $mtime): bool;
abstract public function delete(string $uri): void;
@ -1409,8 +1312,6 @@ namespace KD2\WebDAV
abstract public function list(string $uri, array $properties): iterable;
abstract public function touch(string $uri, \DateTimeInterface $timestamp): bool;
public function lock(string $uri, string $token, string $scope): void
{
// By default locking is not implemented
@ -1633,8 +1534,13 @@ namespace PicoDAV
case 'DAV::resourcetype':
return is_dir($target) ? 'collection' : '';
case 'DAV::getlastmodified':
$mtime = filemtime($target);
if (!$uri && $depth == 0 && is_dir($target)) {
$mtime = self::getDirectoryMTime($target);
}
else {
$mtime = filemtime($target);
}
if (!$mtime) {
return null;
}
@ -1681,7 +1587,7 @@ namespace PicoDAV
return null;
}
public function propfind(string $uri, ?array $properties, int $depth): ?array
public function properties(string $uri, ?array $properties, int $depth): ?array
{
$target = $this->path . $uri;
@ -1706,7 +1612,7 @@ namespace PicoDAV
return $out;
}
public function put(string $uri, $pointer, ?string $hash_algo, ?string $hash): bool
public function put(string $uri, $pointer, ?string $hash_algo, ?string $hash, ?int $mtime): bool
{
if (preg_match(self::PUT_IGNORE_PATTERN, basename($uri))) {
return false;
@ -1766,6 +1672,10 @@ namespace PicoDAV
rename($tmp_file, $target);
}
if ($mtime) {
@touch($target, $mtime);
}
return $new;
}
@ -1892,10 +1802,28 @@ namespace PicoDAV
mkdir($target, 0770);
}
public function touch(string $uri, \DateTimeInterface $datetime): bool
static public function getDirectoryMTime(string $path): int
{
$target = $this->path . $uri;
return @touch($target, $datetime->getTimestamp());
$last = 0;
$path = rtrim($path, '/');
foreach (self::glob($path, '/*', GLOB_NOSORT) as $f) {
if (is_dir($f)) {
$m = self::getDirectoryMTime($f);
if ($m > $last) {
$last = $m;
}
}
$m = filemtime($f);
if ($m > $last) {
$last = $m;
}
}
return $last;
}
}
@ -2014,11 +1942,11 @@ RewriteRule ^.*$ /index.php [END]
$fp = fopen(__FILE__, 'r');
if ($relative_uri == '.webdav/webdav.js') {
fseek($fp, 55024, SEEK_SET);
echo fread($fp, 27891);
fseek($fp, 52782, SEEK_SET);
echo fread($fp, 28039);
}
else {
fseek($fp, 55024 + 27891, SEEK_SET);
fseek($fp, 52782 + 28039, SEEK_SET);
echo fread($fp, 7004);
}
@ -2873,6 +2801,9 @@ const WebDAVNavigator = (url, options) => {
if (location.pathname.indexOf(base_url) === 0) {
current_url = location.pathname;
}
else if (options.start_url) {
current_url = options.start_url;
}
if (!base_url.match(/^https?:/)) {
base_url = location.href.replace(/^(https?:\/\/[^\/]+\/).*$/, '$1') + base_url.replace(/^\/+/, '');
@ -2979,6 +2910,7 @@ const WebDAVNavigator = (url, options) => {
if (url = document.querySelector('html').getAttribute('data-webdav-url')) {
WebDAVNavigator(url, {
'start_url' : document.querySelector('html').getAttribute('data-start-url'),
'wopi_discovery_url': document.querySelector('html').getAttribute('data-wopi-discovery-url'),
});
}

View file

@ -210,7 +210,12 @@ namespace PicoDAV
case 'DAV::resourcetype':
return is_dir($target) ? 'collection' : '';
case 'DAV::getlastmodified':
$mtime = filemtime($target);
if (!$uri && $depth == 0 && is_dir($target)) {
$mtime = self::getDirectoryMTime($target);
}
else {
$mtime = filemtime($target);
}
if (!$mtime) {
return null;
@ -258,7 +263,7 @@ namespace PicoDAV
return null;
}
public function propfind(string $uri, ?array $properties, int $depth): ?array
public function properties(string $uri, ?array $properties, int $depth): ?array
{
$target = $this->path . $uri;
@ -283,7 +288,7 @@ namespace PicoDAV
return $out;
}
public function put(string $uri, $pointer, ?string $hash_algo, ?string $hash): bool
public function put(string $uri, $pointer, ?string $hash_algo, ?string $hash, ?int $mtime): bool
{
if (preg_match(self::PUT_IGNORE_PATTERN, basename($uri))) {
return false;
@ -343,6 +348,10 @@ namespace PicoDAV
rename($tmp_file, $target);
}
if ($mtime) {
@touch($target, $mtime);
}
return $new;
}
@ -469,10 +478,28 @@ namespace PicoDAV
mkdir($target, 0770);
}
public function touch(string $uri, \DateTimeInterface $datetime): bool
static public function getDirectoryMTime(string $path): int
{
$target = $this->path . $uri;
return @touch($target, $datetime->getTimestamp());
$last = 0;
$path = rtrim($path, '/');
foreach (self::glob($path, '/*', GLOB_NOSORT) as $f) {
if (is_dir($f)) {
$m = self::getDirectoryMTime($f);
if ($m > $last) {
$last = $m;
}
}
$m = filemtime($f);
if ($m > $last) {
$last = $m;
}
}
return $last;
}
}