views.py 5.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164
  1. import hashlib
  2. import os
  3. from django.core.files.uploadedfile import UploadedFile
  4. from django.core.files.uploadhandler import TemporaryFileUploadHandler
  5. from django.http import HttpResponse, HttpResponseServerError, JsonResponse
  6. from .models import FileModel
  7. from .tests import UNICODE_FILENAME, UPLOAD_TO
  8. from .uploadhandler import (
  9. ErroringUploadHandler, QuotaUploadHandler, StopUploadTemporaryFileHandler,
  10. )
  11. def file_upload_view(request):
  12. """
  13. A file upload can be updated into the POST dictionary.
  14. """
  15. form_data = request.POST.copy()
  16. form_data.update(request.FILES)
  17. if isinstance(form_data.get('file_field'), UploadedFile) and isinstance(form_data['name'], str):
  18. # If a file is posted, the dummy client should only post the file name,
  19. # not the full path.
  20. if os.path.dirname(form_data['file_field'].name) != '':
  21. return HttpResponseServerError()
  22. return HttpResponse()
  23. else:
  24. return HttpResponseServerError()
  25. def file_upload_view_verify(request):
  26. """
  27. Use the sha digest hash to verify the uploaded contents.
  28. """
  29. form_data = request.POST.copy()
  30. form_data.update(request.FILES)
  31. for key, value in form_data.items():
  32. if key.endswith('_hash'):
  33. continue
  34. if key + '_hash' not in form_data:
  35. continue
  36. submitted_hash = form_data[key + '_hash']
  37. if isinstance(value, UploadedFile):
  38. new_hash = hashlib.sha1(value.read()).hexdigest()
  39. else:
  40. new_hash = hashlib.sha1(value.encode()).hexdigest()
  41. if new_hash != submitted_hash:
  42. return HttpResponseServerError()
  43. # Adding large file to the database should succeed
  44. largefile = request.FILES['file_field2']
  45. obj = FileModel()
  46. obj.testfile.save(largefile.name, largefile)
  47. return HttpResponse()
  48. def file_upload_unicode_name(request):
  49. # Check to see if Unicode name came through properly.
  50. if not request.FILES['file_unicode'].name.endswith(UNICODE_FILENAME):
  51. return HttpResponseServerError()
  52. # Check to make sure the exotic characters are preserved even
  53. # through file save.
  54. uni_named_file = request.FILES['file_unicode']
  55. FileModel.objects.create(testfile=uni_named_file)
  56. full_name = '%s/%s' % (UPLOAD_TO, uni_named_file.name)
  57. return HttpResponse() if os.path.exists(full_name) else HttpResponseServerError()
  58. def file_upload_echo(request):
  59. """
  60. Simple view to echo back info about uploaded files for tests.
  61. """
  62. r = {k: f.name for k, f in request.FILES.items()}
  63. return JsonResponse(r)
  64. def file_upload_echo_content(request):
  65. """
  66. Simple view to echo back the content of uploaded files for tests.
  67. """
  68. def read_and_close(f):
  69. with f:
  70. return f.read().decode()
  71. r = {k: read_and_close(f) for k, f in request.FILES.items()}
  72. return JsonResponse(r)
  73. def file_upload_quota(request):
  74. """
  75. Dynamically add in an upload handler.
  76. """
  77. request.upload_handlers.insert(0, QuotaUploadHandler())
  78. return file_upload_echo(request)
  79. def file_upload_quota_broken(request):
  80. """
  81. You can't change handlers after reading FILES; this view shouldn't work.
  82. """
  83. response = file_upload_echo(request)
  84. request.upload_handlers.insert(0, QuotaUploadHandler())
  85. return response
  86. def file_stop_upload_temporary_file(request):
  87. request.upload_handlers.insert(0, StopUploadTemporaryFileHandler())
  88. request.upload_handlers.pop(2)
  89. request.FILES # Trigger file parsing.
  90. return JsonResponse(
  91. {'temp_path': request.upload_handlers[0].file.temporary_file_path()},
  92. )
  93. def file_upload_interrupted_temporary_file(request):
  94. request.upload_handlers.insert(0, TemporaryFileUploadHandler())
  95. request.upload_handlers.pop(2)
  96. request.FILES # Trigger file parsing.
  97. return JsonResponse(
  98. {'temp_path': request.upload_handlers[0].file.temporary_file_path()},
  99. )
  100. def file_upload_getlist_count(request):
  101. """
  102. Check the .getlist() function to ensure we receive the correct number of files.
  103. """
  104. file_counts = {}
  105. for key in request.FILES:
  106. file_counts[key] = len(request.FILES.getlist(key))
  107. return JsonResponse(file_counts)
  108. def file_upload_errors(request):
  109. request.upload_handlers.insert(0, ErroringUploadHandler())
  110. return file_upload_echo(request)
  111. def file_upload_filename_case_view(request):
  112. """
  113. Check adding the file to the database will preserve the filename case.
  114. """
  115. file = request.FILES['file_field']
  116. obj = FileModel()
  117. obj.testfile.save(file.name, file)
  118. return HttpResponse('%d' % obj.pk)
  119. def file_upload_content_type_extra(request):
  120. """
  121. Simple view to echo back extra content-type parameters.
  122. """
  123. params = {}
  124. for file_name, uploadedfile in request.FILES.items():
  125. params[file_name] = {k: v.decode() for k, v in uploadedfile.content_type_extra.items()}
  126. return JsonResponse(params)
  127. def file_upload_fd_closing(request, access):
  128. if access == 't':
  129. request.FILES # Trigger file parsing.
  130. return HttpResponse()