inc/caldav-PUT-vcalendar.php

   1 <?php
   2 /**
   3 * CalDAV Server - handle PUT method
   4 *
   5 * @package   davical
   6 * @subpackage   caldav
   7 * @author    Andrew McMillan <andrew@mcmillan.net.nz>
   8 * @copyright Catalyst .Net Ltd, Morphoss Ltd
   9 * @license   http://gnu.org/copyleft/gpl.html GNU GPL v2 or later
  10 */
  11 dbg_error_log("PUT", "method handler");
  12
  13 require_once('DAVResource.php');
  14
  15 $dav_resource = new DAVResource($request->path);
  16 if ( ! $dav_resource->HavePrivilegeTo('DAV::write-content') ) {
  17   $request->DoResponse(403,'No write permission');
  18 }
  19
  20 if ( ! $dav_resource->Exists() && ! $dav_resource->HavePrivilegeTo('DAV::bind') ) {
  21   $request->DoResponse(403,'No bind permission.');
  22 }
  23
  24 if ( ! ini_get('open_basedir') && (isset($c->dbg['ALL']) || (isset($c->dbg['put']) && $c->dbg['put'])) ) {
  25   $fh = fopen('/tmp/PUT.txt','w');
  26   if ( $fh ) {
  27     fwrite($fh,$request->raw_post);
  28     fclose($fh);
  29   }
  30 }
  31
  32 include_once('caldav-PUT-functions.php');
  33 controlRequestContainer( $dav_resource->GetProperty('username'), $dav_resource->GetProperty('user_no'), $dav_resource->bound_from(), true);
  34
  35 $lock_opener = $request->FailIfLocked();
  36
  37
  38 if ( $dav_resource->IsCollection()  ) {
  39   if ( $dav_resource->IsPrincipal() || $dav_resource->IsBinding() || !isset($c->readonly_webdav_collections) || $c->readonly_webdav_collections == true ) {
  40     $request->DoResponse( 405 ); // Method not allowed
  41     return;
  42   }
  43
  44   $appending = (isset($_GET['mode']) && $_GET['mode'] == 'append' );
  45
  46   /**
  47   * CalDAV does not define the result of a PUT on a collection.  We treat that
  48   * as an import. The code is in caldav-PUT-functions.php
  49   */
  50   import_collection($request->raw_post,$request->user_no,$request->path,true, $appending);
  51   $request->DoResponse( 200 );
  52   return;
  53 }
  54
  55 $etag = md5($request->raw_post);
  56
  57 if ( ! $dav_resource->Exists() && (isset($request->etag_if_match) && $request->etag_if_match != '') ) {
  58   /**
  59   * RFC2068, 14.25:
  60   * If none of the entity tags match, or if "*" is given and no current
  61   * entity exists, the server MUST NOT perform the requested method, and
  62   * MUST return a 412 (Precondition Failed) response.
  63   */
  64   $request->PreconditionFailed(412,'if-match');
  65 }
  66
  67 if ( $dav_resource->Exists() ) {
  68   if ( isset($request->etag_if_match) && $request->etag_if_match != '' && $request->etag_if_match != $dav_resource->unique_tag() ) {
  69     /**
  70     * RFC2068, 14.25:
  71     * If none of the entity tags match, or if "*" is given and no current
  72     * entity exists, the server MUST NOT perform the requested method, and
  73     * MUST return a 412 (Precondition Failed) response.
  74     */
  75     $request->PreconditionFailed(412,'if-match',sprintf('Existing resource ETag of "%s" does not match "%s"', $dav_resource->unique_tag(), $request->etag_if_match) );
  76   }
  77   else if ( isset($request->etag_none_match) && $request->etag_none_match != ''
  78                && ($request->etag_none_match == $dav_resource->unique_tag() || $request->etag_none_match == '*') ) {
  79     /**
  80     * RFC2068, 14.26:
  81     * If any of the entity tags match the entity tag of the entity that
  82     * would have been returned in the response to a similar GET request
  83     * (without the If-None-Match header) on that resource, or if "*" is
  84     * given and any current entity exists for that resource, then the
  85     * server MUST NOT perform the requested method.
  86     */
  87     $request->PreconditionFailed(412,'if-none-match', translate( 'Existing resource matches "If-None-Match" header - not accepted.'));
  88   }
  89 }
  90
  91 $put_action_type = ($dav_resource->Exists() ? 'UPDATE' : 'INSERT');
  92 $collection = $dav_resource->GetParentContainer();
  93
  94 write_resource( $dav_resource, $request->raw_post, $collection, $session->user_no, $etag,
  95                                 $put_action_type, true, true );
  96
  97 if ( isset($etag) ) header(sprintf('ETag: "%s"', $etag) );
  98
  99 $request->DoResponse( ($dav_resource->Exists() ? 204 : 201) );