<?php

defined('C5_EXECUTE') or die("Access Denied.");
$jsh = Loader::helper("json");
$cf = Loader::helper("file");
$valt = Loader::helper('validation/token');
$fp = FilePermissions::getGlobal();
if (!$fp->canAddFiles()) {
    $error = FileImporter::getErrorMessage(FileImporter::E_PHP_FILE_ERROR_DEFAULT);
    $info = array('message' => $error, 'error' => true);
    echo $jsh->encode($info);
    exit;
}
$u = new User();

$error = "";
$errorCode = -1;

if ($valt->validate('upload')) {
    if (isset($_FILES['Filedata']) && (is_uploaded_file($_FILES['Filedata']['tmp_name']))) {
        if (!$fp->canAddFileType($cf->getExtension($_FILES['Filedata']['name']))) {
            $resp = FileImporter::E_FILE_INVALID_EXTENSION;
        } else {
            $fi = new FileImporter();
            $resp = $fi->import($_FILES['Filedata']['tmp_name'], $_FILES['Filedata']['name'], $fr);
        }
        if (!($resp instanceof \Concrete\Core\Entity\File\Version)) {
            $errorCode = $resp;
        } elseif (!is_object($fr)) {
            // we check $fr because we don't want to set it if we are replacing an existing file
            $respf = $resp->getFile();
            $respf->setOriginalPage($_POST['ocID']);
        }
    } else {
        $errorCode = $_FILES['Filedata']['error'];
    }
} elseif (isset($_FILES['Filedata'])) {
    // first, we check for validate upload token. If the posting of a file fails because of
    // post_max_size then this may not even be set, leading to misleading errors

    $error = $valt->getErrorMessage();
} else {
    $errorCode = FileImporter::E_PHP_FILE_ERROR_DEFAULT;
}

if ($errorCode > -1 && $error == '') {
    $error = FileImporter::getErrorMessage($errorCode);
}

if (strlen($error) > 0) {
    $info = array('message' => $error, 'error' => true);
} else {
    $id = $resp->getFileID();
    $info['message'] = t('Upload Complete.');
    $info['error'] = false;
    $info['id'] = $resp->getFileID();
}

echo $jsh->encode($info);
exit;
