Congegni
/
libretime
mirror of https://github.com/libretime/libretime.git
7
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added safety checks to Amazon_S3StorageBackend

This commit is contained in:
Albert Santoni 2015-03-20 17:23:53 -04:00
parent 32aa962138
commit 8c7ae6c890
1 changed files with 21 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
airtime_mvc/application/cloud_storage/Amazon_S3StorageBackend.php
View File

@ -53,14 +53,30 @@ class Amazon_S3StorageBackend extends StorageBackend
// Records in the database will remain in case we have to restore the files. // Records in the database will remain in case we have to restore the files.
public function deleteAllCloudFileObjects() public function deleteAllCloudFileObjects()
{ {
$this->s3Client->deleteMatchingObjects( $bucket = $this->getBucket();
$bucket = $this->getBucket(), $prefix = $this->getFilePrefix();
$prefix = $this->getFilePrefix());
//Add a trailing slash in for safety
//(so that deleting /13/413 doesn't delete /13/41313 !)
$prefix = $prefix . "/";
//Do a bunch of safety checks to ensure we don't delete more than we intended.
//An valid prefix is like "12/4312" for instance 4312.
$slashPos = strpos($prefix, "/");
if (($slashPos === FALSE) || //Slash must exist
($slashPos != 2) || //Slash must be the third character
(strlen($prefix) > $slashPos) || //String must have something after the first slash
(substr_count($prefix, "/") != 2)) //String must have two slashes
{
throw new Exception("Invalid file prefix in " . __FUNCTION__);
} }
$this->s3Client->deleteMatchingObjects($bucket, $prefix);
}
public function getFilePrefix() public function getFilePrefix()
{ {
$hostingId = Billing::getClientInstanceId(); $hostingId = Billing::getClientInstanceId();
return substr($hostingId, -2)."/".$hostingId; $filePrefix = substr($hostingId, -2)."/".$hostingId;
return $filePrefix;
} }
} }