mirror of
https://gitlab.com/davical-project/davical.git
synced 2026-01-27 00:33:34 +00:00
108 lines
3.7 KiB
PHP
108 lines
3.7 KiB
PHP
<?php
|
|
/**
|
|
* CalDAV Server - handle PUT method on unknown (arbitrary) content-types
|
|
*
|
|
* @package davical
|
|
* @subpackage caldav
|
|
* @author Andrew McMillan <andrew@morphoss.com>
|
|
* @copyright Morphoss Ltd
|
|
* @license http://gnu.org/copyleft/gpl.html GNU GPL v2 or later
|
|
*/
|
|
dbg_error_log("PUT", "method handler");
|
|
|
|
require_once('DAVResource.php');
|
|
|
|
if ( ! ini_get('open_basedir') && (isset($c->dbg['ALL']) || (isset($c->dbg['put']) && $c->dbg['put'])) ) {
|
|
$fh = fopen('/var/log/davical/PUT.debug','w');
|
|
if ( $fh ) {
|
|
fwrite($fh,$request->raw_post);
|
|
fclose($fh);
|
|
}
|
|
}
|
|
|
|
$lock_opener = $request->FailIfLocked();
|
|
|
|
if ( $add_member ) {
|
|
$request->path = $request->dav_name() . uuid();
|
|
$dest = new DAVResource($request->path);
|
|
if ( $dest->Exists() ) {
|
|
$request->path = $request->dav_name() . uuid();
|
|
$dest = new DAVResource($request->path);
|
|
if ( $dest->Exists() ) throw new Exception("Failed to generate unique segment name for add-member!");
|
|
}
|
|
}
|
|
else {
|
|
$dest = new DAVResource($request->path);
|
|
}
|
|
|
|
$container = $dest->GetParentContainer();
|
|
if ( $container->IsCalendar() ) {
|
|
$request->PreconditionFailed(412,'urn:ietf:params:xml:ns:caldav:supported-calendar-data',
|
|
translate('Incorrect content type for calendar: ') . $request->content_type );
|
|
}
|
|
else if ( $container->IsAddressbook() ) {
|
|
$request->PreconditionFailed(412,'urn:ietf:params:xml:ns:carddav:supported-address-data',
|
|
translate('Incorrect content type for addressbook: ') . $request->content_type );
|
|
}
|
|
if ( ! $dest->Exists() ) {
|
|
if ( $container->IsPrincipal() ) {
|
|
$request->DoResponse(403,translate('A DAViCal principal collection may only contain collections'));
|
|
}
|
|
if ( ! $container->Exists() ) {
|
|
$request->DoResponse( 409, translate('Destination collection does not exist') );
|
|
}
|
|
$container->NeedPrivilege('DAV::bind');
|
|
}
|
|
else {
|
|
if ( $dest->IsCollection() ) {
|
|
if ( ! isset($c->readonly_webdav_collections) || $c->readonly_webdav_collections ) {
|
|
$request->DoResponse(403,translate('You may not PUT to a collection URL'));
|
|
}
|
|
$request->DoResponse(403,translate('PUT on a collection is only allowed for text/calendar content against a calendar collection'));
|
|
}
|
|
$dest->NeedPrivilege('DAV::write-content');
|
|
}
|
|
|
|
$request->CheckEtagMatch( $dest->Exists(), $dest->unique_tag() );
|
|
|
|
$collection_id = $container->GetProperty('collection_id');
|
|
|
|
$qry = new AwlQuery();
|
|
$qry->Begin();
|
|
|
|
$etag = md5($request->raw_post);
|
|
$params = array(
|
|
':user_no' => $dest->GetProperty('user_no'),
|
|
':dav_name' => $dest->bound_from(),
|
|
':etag' => $etag,
|
|
':dav_data' => $request->raw_post,
|
|
':session_user' => $session->user_no
|
|
);
|
|
if ( $dest->Exists() ) {
|
|
$sql = 'UPDATE caldav_data SET caldav_data=:dav_data, dav_etag=:etag, logged_user=:session_user,
|
|
modified=current_timestamp WHERE user_no=:user_no AND dav_name=:dav_name';
|
|
$response_code = 200;
|
|
}
|
|
else {
|
|
$sql = 'INSERT INTO caldav_data ( user_no, dav_name, dav_etag, caldav_data, logged_user, created, modified, collection_id )
|
|
VALUES( :user_no, :dav_name, :etag, :dav_data, :session_user, current_timestamp, current_timestamp, :collection_id )';
|
|
$params[':collection_id'] = $collection_id;
|
|
$response_code = 201;
|
|
}
|
|
$qry->QDo( $sql, $params );
|
|
|
|
$qry->QDo("SELECT write_sync_change( $collection_id, $response_code, :dav_name)", array(':dav_name' => $dest->bound_from() ) );
|
|
|
|
if ( !$qry->Exec('COMMIT') ) {
|
|
$qry->Rollback();
|
|
$response_code = 500;
|
|
}
|
|
|
|
// Uncache anything to do with the collection
|
|
$cache = getCacheInstance();
|
|
$cache->delete( 'collection-'.$container->dav_name(), null );
|
|
|
|
header('ETag: "'. $etag . '"' );
|
|
if ( $response_code == 200 ) $response_code = 204;
|
|
$request->DoResponse( $response_code );
|