file_controller.cc

#include "file_controller.h"
#include "jwt_controller.h"
#include <json/json.h>
#include <cstdio>
#include <mysql.h>
#include <iostream>
#include <stdexcept>
#include <string>
// #include <map> // <-- 撤销此修改，不再需要

std::string return_status(std::string result, const std::string &command, Json::Value &res_json)
{
    if (!result.empty())
    {
        result = command + " success";
        res_json["code"] = 200;
    }
    else
    {
        result = " Error in :" + command;
        res_json["code"] = 400;
    }

    return result;
}

void add_lock(const HttpRequestPtr &req, std::function<void(const HttpResponsePtr &)> &&callback)
{
    Json::Value res_json;
    Json::FastWriter writer;

    std::string filename = req->getParameter("filename");
    auto res = HttpResponse::newHttpResponse();

    if (jwtVerify(req))
    {
        res->addHeader("Access-Control-Allow-Origin", "*");
        if (lockcheck(filename))
        {
            res_json["code"] = 402;
            res_json["message"] = "This file has been occupied";
        }
        else
        {
            res_json["code"] = 200;
            res_json["message"] = "Success";
        }
    }
    else
    {
        res_json["code"] = 401;
        res_json["message"] = "No Authorization";
    }

    auto output = writer.write(res_json);
    res->setBody(output);
    callback(res);
}

std::string shell_commands(const char *cmd)
{
    char buffer[1280];
    std::string result;
    FILE *pipe = popen(cmd, "r");

    if (!pipe)
        throw std::runtime_error("popen() failed!");
    try
    {
        while (fgets(buffer, sizeof buffer, pipe) != nullptr)
        {
            result += buffer;
        }
    }
    catch (...)
    {
        pclose(pipe);
        throw;
    }
    pclose(pipe);

    return result;
}

void commandsCtrl(const HttpRequestPtr &req, std::function<void(const HttpResponsePtr &)> &&callback)
{
    auto res = HttpResponse::newHttpResponse();
    std::string result;

    Json::Value res_json;
    Json::FastWriter writer;

    res->addHeader("Access-Control-Allow-Origin", "*");

    if (jwtVerify(req))
    {
        // --- 修改开始: 定义固定路径 ---
        const std::string rootPath = "/app/root";
        const std::string parentPath = "/app"; // "/app/root"的父目录
        // --- 修改结束 ---


        enum Command
        {
            tree,
            cp,
            mv,
            rm,
            mkdir,
            touch,
            cat
        } command;
        
        // --- 撤销修改: 恢复使用你原来的 stoi 逻辑，因为它是正确的 ---
        // char *pathvar; // <-- 移除
        // pathvar = getenv("PWD"); // <-- 移除

        try {
             command = static_cast<Command>(stoi(req->getJsonObject()->get("command", "").asString()));
        } catch (const std::invalid_argument& e) {
            // 如果 "command" 不是一个有效的数字字符串 (比如为空, "abc"), stoi 会抛出异常
            res_json["code"] = 400;
            res_json["message"] = "Invalid command format";
            auto output = writer.write(res_json);
            res->setBody(output);
            callback(res);
            return;
        } catch (const std::out_of_range& e) {
            // 如果数字太大
            res_json["code"] = 400;
            res_json["message"] = "Invalid command range";
            auto output = writer.write(res_json);
            res->setBody(output);
            callback(res);
            return;
        }
        // --- 撤销修改结束 ---


        std::string params1 = req->getJsonObject()->get("params", "")[0].asString();
        std::string params2 = req->getJsonObject()->get("params", "")[1].asString();

        if ((params1.find("..") != std::string::npos) || (params2.find("..") != std::string::npos))
        {
            result = "Error:result in wrong directory";
            res_json["code"] = 400;
        }
        else
        {
            // --- 修改开始: 移除 getenv("PWD") 并使用 rootPath ---
            switch (command) 
            {
            case tree:
                // 原逻辑是 "cd " + pathvar + "/.. " + "&&" + "tree -J root"
                // 替换为 "cd /app && tree -J root"
                result = shell_commands(("cd " + parentPath + " &&" + " tree -J root").c_str());
                break;
            case cp:
                result = shell_commands(("cp -v " + rootPath + "/" + params1 + " " + rootPath + "/" + params2).c_str());
                result = return_status(result, "cp", res_json);
                break;
            case mv:
                result = shell_commands(("mv -v " + rootPath + "/" + params1 + " " + rootPath + "/" + params2).c_str());
                result = return_status(result, "mv", res_json);
                break;
            case rm:
                if (params1.find("..") != std::string::npos)
                {
                    result = "error:result in wrong directory";
                    res_json["code"] = 400;
                    break;
                }
                result = shell_commands(("rm -rf -v " + rootPath + "/" + params1).c_str());
                result = return_status(result, "rm", res_json);
                break;
            case mkdir:
                result = shell_commands(("mkdir -v " + rootPath + "/" + params1).c_str());
                result = return_status(result, "mkdir", res_json);
                break;
            case touch:
                if (shell_commands(("ls  -l " + rootPath + "/" + params1 + "| grep ^- ").c_str()).empty())
                {
                    shell_commands(("touch " + rootPath + "/" + params1).c_str());
                    result = "success";
                    res_json["code"] = 200;
                }
                else
                {
                    result = "error:file already exists";
                    res_json["code"] = 400;
                }
                break;
            case cat:
                result = shell_commands(("cat " + rootPath + "/" + params1).c_str());
                res_json["code"] = 200;
                break;
            default:
                result = "error:command not found";
                res_json["code"] = 400;
                break;
            }
            // --- 修改结束 ---
        }
    }
    else
    {
        result = "No Authorization";
        res_json["code"] = 401;
    }

    res_json["message"] = result;

    auto output = writer.write(res_json);
    res->setBody(output);
    callback(res);
}

void saveFile(const HttpRequestPtr &req, std::function<void(const HttpResponsePtr &)> &&callback)
{
    auto res = HttpResponse::newHttpResponse();
    res->addHeader("Access-Control-Allow-Origin", "*");

    Json::Value res_json;
    Json::FastWriter writer;

    if (jwtVerify(req))
    {
        auto body = req->getBody();
        Json::Value req_json;
        Json::Reader reader;
        std::string bodyStr(body);
        if (!reader.parse(bodyStr, req_json))
        {
            std::cout << "parse failed" << std::endl;
            callback(HttpResponse::newHttpResponse());
            return;
        }
        
        // --- 修改开始: 移除 getenv("PWD") 并使用固定路径 ---
        const std::string rootPath = "/app/root";
        // char *pathvar; // <-- 移除
        // pathvar = getenv("PWD"); // <-- 移除
        std::string filename = req_json["filename"].asString();
        std::string content = req_json["content"].asString();
        // std::string result = shell_commands(("echo '" + content + "'>" + std::string(pathvar) + "/../root/" + filename).c_str()); // <-- 旧代码
        std::string result = shell_commands(("echo '" + content + "' > " + rootPath + "/" + filename).c_str()); // <-- 新代码
        // --- 修改结束 ---

        sql_unlocked(filename);

        res_json["code"] = 200;
        res_json["message"] = "File save Success";
    }
    else
    {
        res_json["code"] = 401;
        res_json["message"] = "No Authorization";
    }

    auto output = writer.write(res_json);
    res->setBody(output);
    callback(res);
}

void imageUpload(const HttpRequestPtr &req, std::function<void(const HttpResponsePtr &)> &&callback)
{
    // used to return the frontend (json value)
    Json::Value res_json;
    Json::FastWriter writer;

    auto resp = HttpResponse::newHttpResponse();
    resp->addHeader("Access-Control-Allow-Origin", "*");
    if (jwtVerify(req))
    {
        MultiPartParser fileUpload;
        if (fileUpload.parse(req) != 0 || fileUpload.getFiles().size() != 1)
        {
            // resp->setStatusCode(k403Forbidden);
            res_json["code"] = 403;
            res_json["message"] = "Must only be one file";
        }
        else
        {
            auto &file = fileUpload.getFiles()[0];
            auto now = std::chrono::system_clock::now();
            auto ms = std::chrono::duration_cast<std::chrono::milliseconds>(now.time_since_epoch()).count();
            std::string timestamp = std::to_string(ms) + '.' + std::string(file.getFileExtension());

            resp->setBody(timestamp);
            file.save();
            shell_commands(("mv  ./uploads/" + file.getFileName() + " ./uploads/" + timestamp).c_str());

            LOG_INFO << "The uploaded file has been saved to the ./uploads "
                        "directory";

            res_json["code"] = 200;
            res_json["message"] = "Upload  Success";
        }
    }
    else
    {
        res_json["code"] = 401;
        res_json["messsage"] = "No Authorization";
    }

    auto output = writer.write(res_json);
    resp->setBody(output);
    callback(resp);
}

void getPicture(const HttpRequestPtr &req, std::function<void(const HttpResponsePtr &)> &&callback)
{
    Json::Value res_json;
    Json::FastWriter writer;

    std::string filename = req->getParameter("filename");
    auto resp = HttpResponse::newFileResponse("./uploads/" + filename);
    resp->addHeader("Access-Control-Allow-Origin", "*");

    if (jwtVerify(req))
    {
        res_json["code"] = 200;
        res_json["message"] = "Picture get success!";
    }
    else
    {
        res_json["code"] = 404;
        res_json["message"] = "PICTURE NOT FOUND!!!";
    }

    auto output = writer.write(res_json);
    resp->setBody(output);
    callback(resp);
}