1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
|
# --
# Kernel/Modules/AgentTicketAttachment.pm - to get the attachments
# Copyright (C) 2001-2007 OTRS GmbH, http://otrs.org/
# --
# $Id: AgentTicketAttachment.pm,v 1.6 2007/01/20 18:04:49 mh Exp $
# --
# This software comes with ABSOLUTELY NO WARRANTY. For details, see
# the enclosed file COPYING for license information (GPL). If you
# did not receive this file, see http://www.gnu.org/licenses/gpl.txt.
# --
package Kernel::Modules::AgentTicketAttachment;
use strict;
use Kernel::System::FileTemp;
use vars qw($VERSION);
$VERSION = '$Revision: 1.6 $';
$VERSION =~ s/^\$.*:\W(.*)\W.+?$/$1/;
sub new {
my $Type = shift;
my %Param = @_;
# allocate new hash for object
my $Self = {};
bless ($Self, $Type);
foreach (keys %Param) {
$Self->{$_} = $Param{$_};
}
# check needed Opjects
foreach (qw(ParamObject DBObject TicketObject LayoutObject LogObject ConfigObject)) {
if (!$Self->{$_}) {
$Self->{LayoutObject}->FatalError(Message => "Got no $_!");
}
}
$Self->{FileTempObject} = Kernel::System::FileTemp->new(%Param);
# get ArticleID
$Self->{ArticleID} = $Self->{ParamObject}->GetParam(Param => 'ArticleID');
$Self->{FileID} = $Self->{ParamObject}->GetParam(Param => 'FileID');
$Self->{Viewer} = $Self->{ParamObject}->GetParam(Param => 'Viewer') || 0;
return $Self;
}
sub Run {
my $Self = shift;
my %Param = @_;
my $Output = '';
# check params
if (!$Self->{FileID} || !$Self->{ArticleID}) {
$Self->{LogObject}->Log(
Message => 'FileID and ArticleID are needed!',
Priority => 'error',
);
return $Self->{LayoutObject}->ErrorScreen();
}
# check permissions
my %ArticleData = $Self->{TicketObject}->ArticleGet(ArticleID => $Self->{ArticleID});
if (!$ArticleData{TicketID}) {
$Self->{LogObject}->Log(
Message => "No TicketID for ArticleID ($Self->{ArticleID})!",
Priority => 'error',
);
return $Self->{LayoutObject}->ErrorScreen();
}
elsif ($Self->{TicketObject}->Permission(
Type => 'ro',
TicketID => $ArticleData{TicketID},
UserID => $Self->{UserID})) {
# geta attachment
if (my %Data = $Self->{TicketObject}->ArticleAttachment(
ArticleID => $Self->{ArticleID},
FileID => $Self->{FileID},
)) {
# check viewer
my $Viewer = '';
if ($Self->{ConfigObject}->Get('MIME-Viewer')) {
foreach (keys %{$Self->{ConfigObject}->Get('MIME-Viewer')}) {
if ($Data{ContentType} =~ /^$_/i) {
$Viewer = $Self->{ConfigObject}->Get('MIME-Viewer')->{$_};
$Viewer =~ s/\<OTRS_CONFIG_(.+?)\>/$Self->{ConfigObject}->{$1}/g;
}
}
}
# show with viewer
if ($Self->{Viewer} && $Viewer) {
# write tmp file
my ($FH, $Filename) = $Self->{FileTempObject}->TempFile();
if (open (DATA, "> $Filename")) {
print DATA $Data{Content};
close (DATA);
}
else {
# log error
$Self->{LogObject}->Log(
Priority => 'error',
Message => "Cant write $Filename: $!",
);
return $Self->{LayoutObject}->ErrorScreen();
}
# use viewer
my $Content = '';
if (open (DATA, "$Viewer $Filename |")) {
while (<DATA>) {
$Content .= $_;
}
close (DATA);
}
else {
return $Self->{LayoutObject}->FatalError(
Message => "Can't open: $Viewer $Filename: $!",
);
}
# return new page
return $Self->{LayoutObject}->Attachment(%Data, ContentType => 'text/html', Content => $Content, Type => 'inline');
}
# download it
else {
return $Self->{LayoutObject}->Attachment(%Data);
}
}
else {
$Self->{LogObject}->Log(
Message => "No such attacment ($Self->{FileID})! May be an attack!!!",
Priority => 'error',
);
return $Self->{LayoutObject}->ErrorScreen();
}
}
else {
# error screen
return $Self->{LayoutObject}->NoPermission(WithHeader => 'yes');
}
}
1;
|
