115 lines
4.1 KiB
PHP
Executable File
115 lines
4.1 KiB
PHP
Executable File
<?php
|
|
/**
|
|
* upload_document.php
|
|
* الغرض: رفع صورة وثيقة فقط وإرجاع رابطها (بدون ذكاء صناعي)
|
|
*/
|
|
|
|
require_once __DIR__ . '/../../connect.php';
|
|
|
|
uploadLog("🚀 [uploadDocSyria.php] Document upload script started.");
|
|
|
|
$driverId = trim((string) filterRequest("driver_id"));
|
|
$type = trim((string) filterRequest("type"));
|
|
|
|
// ✅ التحقق من الحقول الاختيارية
|
|
if ($driverId === "") { $driverId = "unknown"; }
|
|
if ($type === "") { $type = "generic"; }
|
|
|
|
uploadLog("📥 Request parameters: driver_id=$driverId, type=$type");
|
|
|
|
// ✅ التحقق من ملف الصورة
|
|
if (isset($_FILES['image'])) {
|
|
uploadLog("$_FILES['image'] metadata", 'INFO', [
|
|
'name' => $_FILES['image']['name'] ?? 'unknown',
|
|
'type' => $_FILES['image']['type'] ?? 'unknown',
|
|
'size' => $_FILES['image']['size'] ?? 0,
|
|
'upload_error_code' => $_FILES['image']['error'] ?? UPLOAD_ERR_OK
|
|
]);
|
|
} else {
|
|
uploadLog("No 'image' file was sent in the request.", 'WARNING');
|
|
}
|
|
|
|
if (!isset($_FILES['image']) || $_FILES['image']['error'] !== UPLOAD_ERR_OK) {
|
|
$err = $_FILES['image']['error'] ?? 'missing_file';
|
|
uploadLog("❌ File upload validation failed. Code: $err", 'ERROR');
|
|
error_log("Upload error: Image not provided or upload failed.");
|
|
jsonError("Image upload failed");
|
|
exit;
|
|
}
|
|
|
|
$file = $_FILES['image'];
|
|
|
|
// ✅ السماح بالامتدادات الشائعة + فحص MIME الحقيقي
|
|
$allowedExt = ['jpg', 'jpeg', 'png'];
|
|
$extension = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
|
|
if (!in_array($extension, $allowedExt, true)) {
|
|
uploadLog("❌ Unsupported file extension: $extension", 'ERROR');
|
|
error_log("Unsupported file extension: $extension");
|
|
jsonError("Unsupported file type");
|
|
exit;
|
|
}
|
|
|
|
// فحص نوع المحتوى الفعلي (أكثر أماناً)
|
|
$finfo = new finfo(FILEINFO_MIME_TYPE);
|
|
$mime = $finfo->file($file['tmp_name']) ?: 'application/octet-stream';
|
|
$allowedMime = ['image/jpeg', 'image/png'];
|
|
if (!in_array($mime, $allowedMime, true)) {
|
|
error_log("Unsupported MIME type: $mime");
|
|
jsonError("Unsupported image MIME type");
|
|
exit;
|
|
}
|
|
|
|
// (اختياري) حد أقصى للحجم 10MB
|
|
$maxBytes = 10 * 1024 * 1024;
|
|
if ($file['size'] > $maxBytes) {
|
|
error_log("Image too large: {$file['size']} bytes");
|
|
jsonError("Image too large (max 10MB)");
|
|
exit;
|
|
}
|
|
|
|
// 📁 مسارات الحفظ
|
|
$uploadDir = "../uploads/documents/";
|
|
if (!is_dir($uploadDir)) {
|
|
if (!mkdir($uploadDir, 0755, true) && !is_dir($uploadDir)) {
|
|
error_log("Failed to create upload directory: $uploadDir");
|
|
jsonError("Server error: cannot create upload directory");
|
|
exit;
|
|
}
|
|
}
|
|
|
|
|
|
$baseName = "driver_{$type}_{$driverId}";
|
|
$uniqueName = $baseName . "." . $extension;
|
|
$uploadPath = $uploadDir . $uniqueName;
|
|
|
|
// ⬆️ نقل الملف
|
|
if (!move_uploaded_file($file['tmp_name'], $uploadPath)) {
|
|
error_log("Failed to move uploaded file to $uploadPath");
|
|
jsonError("Failed to move uploaded image");
|
|
exit;
|
|
}
|
|
|
|
// 🔒 منع التنفيذ لو رُفع PHP بالخطأ
|
|
@chmod($uploadPath, 0644);
|
|
|
|
// 🌐 توليد BASE_URL آمن (يدعم ENV أو يعتمد على المضيف الحالي)
|
|
if (!defined('BASE_URL')) {
|
|
$APP_BASE_URL = rtrim(getenv('APP_BASE_URL') ?: '', '/');
|
|
if ($APP_BASE_URL === '') {
|
|
$scheme = isset($_SERVER['REQUEST_SCHEME']) ? $_SERVER['REQUEST_SCHEME'] : ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http');
|
|
$host = $_SERVER['HTTP_HOST'] ?? 'localhost';
|
|
define('BASE_URL', $scheme . '://' . $host);
|
|
} else {
|
|
define('BASE_URL', $APP_BASE_URL);
|
|
}
|
|
}
|
|
|
|
// ⚙️ مسار الرابط العام (عدّل المسار حسب نشر مشروعك)
|
|
$publicPath = "/siro/auth/uploads/documents/" . $uniqueName;
|
|
$imageUrl = rtrim(BASE_URL, '/') . $publicPath;
|
|
|
|
// ✅ نتيجة نهائية: فقط رابط الصورة وبعض البيانات المفيدة
|
|
uploadLog("✅ Document upload succeeded. URL: $imageUrl");
|
|
printSuccess([
|
|
$imageUrl,
|
|
]); |