xNightR00T File Manager

<?php
/**
 * This controller/action is a proxy for static resource files inside UI plugins.
 * UI plugin is a standard ZF2 module. In order to use static files (js/css/images/...), the module
 * should have "public" folder. To get the file "MyZF2ModuleName/public/myImage.jpg", the user can use
 *
 * http://localhost:10081/ZendServer/ModuleResource/MyZF2ModuleName/myImage
 *
 * (!)Limitation: Please note that there's no file extension in the URL, what means that the
 * names of the files should be unique
 */

namespace Application\Controller;

use ZendServer\Mvc\Controller\ActionController;
use ZendServer\Log\Log;
use \Servers\Configuration\Mapper;

class ModuleResourceController extends ActionController
{

    public function indexAction()
    {
        // get the requested resource parameters
        $moduleName   = $this->params()->fromRoute('moduleName', null);
        $resourceName = $this->params()->fromRoute('resourceName', null);

        // validate the input
        if (!$moduleName || !is_string($moduleName) || strlen($moduleName) < 2 || strlen($moduleName) > 250) {
            $this->throwException(_t('Module name is not valid'));
        }
        if (!$resourceName || !is_string($resourceName) || strlen($resourceName) < 2 || strlen($resourceName) > 250) {
            $this->throwException(_t('Resource name is not valid'));
        }

        // check that the module exists
        /* @var Zend\ModuleManager\ModuleManager */
        $manager       = $this->getServiceLocator()->get('ModuleManager');
        $loadedModules = $manager->getModules();
        if (!in_array($moduleName, $loadedModules)) {
            $this->throwException(_t('Module "%s" does not exists', array($moduleName)));
        }

        // find the recources folder in the module
        $appConfig           = $this->getServiceLocator()->get('Application\Config');
        $modulesPaths        = $appConfig['module_listener_options']['module_paths'];
        $moduleResourcesPath = isset($modulesPaths[$moduleName]) ? realpath($modulesPaths[$moduleName].DIRECTORY_SEPARATOR.'public')
                : null;
        if (!$moduleResourcesPath) {
            // find the resources path
            foreach ($modulesPaths as $modulesPath) {
                if (is_dir($modulesPath.DIRECTORY_SEPARATOR.$moduleName.DIRECTORY_SEPARATOR.'public')) {
                    $moduleResourcesPath = realpath($modulesPath.DIRECTORY_SEPARATOR.$moduleName.DIRECTORY_SEPARATOR.'public');
                }
            }

            if (!$moduleResourcesPath) {
                $this->throwException(_t('Cannot find resources folder (public) in the module'));
            }
        }

        // check that the resource exists, and it's under module's folder
        $resourceFilePath = realpath($moduleResourcesPath.DIRECTORY_SEPARATOR.$resourceName);
        if (!file_exists($resourceFilePath) ||
            !is_readable($resourceFilePath) ||
            strpos($resourceFilePath, $moduleResourcesPath) === false ||
            !is_file($resourceFilePath)) {
            $this->throwException(_t('Resource not found'));
        }

        // check that the resource is under the module's "public" folder (security)

        if (!$resourceFilePath) {
            $this->throwException(_t('Resource "%s" was not found', array($resourceName)));
        }

        if (!is_readable($resourceFilePath)) {
            $this->throwException(_t('Not enough permissions to read the resource "%s"', array($resourceName)));
        }

        // determine file's mime type
        $knownMimeTypes   = $this->getServiceLocator()->get('KnownMimeTypes');
        $info             = new \SplFileInfo($resourceFilePath);
        $fileExtension    = $info->getExtension();
        $resourceMimeType = isset($knownMimeTypes[$fileExtension]) ? $knownMimeTypes[$fileExtension] : 'application/unknown';

        header('Content-type: '.$resourceMimeType);
        readfile($resourceFilePath);
        exit;
    }

    /**
     * @brief Send the content to the output buffer
     * @param <unknown> $content
     * @param <unknown> $mimeType
     * @return
     */
    protected function throwException($errorMessage)
    {
        header("HTTP/1.0 404 Not Found");
        echo $errorMessage;
        exit();
    }
}