59 lines
1.3 KiB
PHP
59 lines
1.3 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace App\Http\Controllers;
|
||
|
|
|
||
|
|
use Illuminate\Http\Request;
|
||
|
|
use Symfony\Component\HttpFoundation\BinaryFileResponse;
|
||
|
|
|
||
|
|
class PublicStorageController extends Controller
|
||
|
|
{
|
||
|
|
public function show(Request $request, string $path): BinaryFileResponse
|
||
|
|
{
|
||
|
|
$path = $this->sanitizeRelativePath($path);
|
||
|
|
if ($path === '') {
|
||
|
|
abort(404);
|
||
|
|
}
|
||
|
|
|
||
|
|
$fullPath = $this->resolveReadablePath($path);
|
||
|
|
if ($fullPath === null) {
|
||
|
|
abort(404);
|
||
|
|
}
|
||
|
|
|
||
|
|
return response()->file($fullPath);
|
||
|
|
}
|
||
|
|
|
||
|
|
private function sanitizeRelativePath(string $path): string
|
||
|
|
{
|
||
|
|
$path = str_replace('\\', '/', $path);
|
||
|
|
$path = ltrim($path, '/');
|
||
|
|
|
||
|
|
if ($path === '' || str_contains($path, '..')) {
|
||
|
|
return '';
|
||
|
|
}
|
||
|
|
|
||
|
|
return $path;
|
||
|
|
}
|
||
|
|
|
||
|
|
private function resolveReadablePath(string $path): ?string
|
||
|
|
{
|
||
|
|
foreach ($this->candidatePaths($path) as $fullPath) {
|
||
|
|
if (is_file($fullPath) && is_readable($fullPath)) {
|
||
|
|
return $fullPath;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* @return list<string>
|
||
|
|
*/
|
||
|
|
private function candidatePaths(string $path): array
|
||
|
|
{
|
||
|
|
return [
|
||
|
|
storage_path('app/public/'.$path),
|
||
|
|
public_path('storage/'.$path),
|
||
|
|
];
|
||
|
|
}
|
||
|
|
}
|