d_s_bisht/devsofttech_hms_ci4
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add fallback route to serve legacy CI3 uploads from project-root uploads/

Browse Source
This commit is contained in:
DevSoftTech Server 2026-04-17 04:16:08 +05:30
parent 11fe14089d
commit 58ddd77d42
2 changed files with 70 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/Config/Routes.php
View File

@ -487,6 +487,8 @@ $routes->match(['get', 'post'], 'Opd/opd_file_last_list', 'Opd::opd_file_last_li
$routes->match(['get', 'post'], 'Opd/opd_file_last_list/(:num)', 'Opd::opd_file_last_list/$1');
$routes->match(['get', 'post'], 'Opd/save_image/(:num)', 'Opd::save_image/$1');
$routes->post('Opd/scan_ai_process_file', 'Opd::scan_ai_process_file');
// Legacy CI3 uploads fallback: serves files from project-root uploads/ when missing from public/uploads/
$routes->get('uploads/(:any)', 'Opd::serve_legacy_upload/$1');
$routes->post('Opd/scan_ai_assist', 'Opd::scan_ai_assist');
$routes->match(['get', 'post'], 'Opd/opd_file_hide/(:num)', 'Opd::opd_file_hide/$1');
$routes->match(['get', 'post'], 'Opd/opd_file_delete/(:num)', 'Opd::opd_file_delete/$1');

68
app/Controllers/Opd.php
View File

@ -6569,4 +6569,72 @@ class Opd extends BaseController
'women_pregnancy_related' => $pregnancyRelated,
];
}
/**
* Fallback for legacy CI3 uploads that live in the project-root uploads/ directory
* instead of public/uploads/. Apache routes the request here when the file is not
* found as a real file in public/uploads/.
*
* URL pattern: /uploads/<subpath>
*/
public function serve_legacy_upload(string $subpath = ''): \CodeIgniter\HTTP\Response
{
// Sanitise: reject any path-traversal attempts.
$subpath = ltrim(str_replace('\\', '/', $subpath), '/');
if (
$subpath === ''
|| strpos($subpath, '..') !== false
|| strpos($subpath, "\0") !== false
) {
return $this->response->setStatusCode(404)->setBody('Not Found');
}
// Try project-root uploads/ (CI3 legacy location).
$legacyPath = rtrim(ROOTPATH, '/\\') . '/uploads/' . $subpath;
// Also try writable/uploads/ just in case.
$writablePath = rtrim(WRITEPATH, '/\\') . '/uploads/' . $subpath;
$filePath = '';
if (is_file($legacyPath)) {
$filePath = $legacyPath;
} elseif (is_file($writablePath)) {
$filePath = $writablePath;
}
if ($filePath === '') {
return $this->response->setStatusCode(404)->setBody('Not Found');
}
$ext = strtolower(pathinfo($filePath, PATHINFO_EXTENSION));
$mimeMap = [
'jpg' => 'image/jpeg',
'jpeg' => 'image/jpeg',
'png' => 'image/png',
'gif' => 'image/gif',
'webp' => 'image/webp',
'pdf' => 'application/pdf',
'bmp' => 'image/bmp',
'tiff' => 'image/tiff',
'tif' => 'image/tiff',
];
if (!array_key_exists($ext, $mimeMap)) {
return $this->response->setStatusCode(403)->setBody('Forbidden');
}
$mime = $mimeMap[$ext];
$size = filesize($filePath);
$etag = md5($filePath . (string) filemtime($filePath));
// Basic cache headers.
$this->response
->setHeader('Content-Type', $mime)
->setHeader('Content-Length', (string) $size)
->setHeader('ETag', $etag)
->setHeader('Cache-Control', 'public, max-age=86400')
->setHeader('X-Legacy-Upload', '1');
// @phpstan-ignore-next-line
return $this->response->setBody((string) file_get_contents($filePath));
}
}