package dev.plex.request; import dev.plex.HTTPDModule; import dev.plex.Plex; import dev.plex.cache.DataUtils; import dev.plex.player.PlexPlayer; import dev.plex.rank.enums.Rank; import dev.plex.util.PlexLog; import jakarta.servlet.ServletException; import jakarta.servlet.http.HttpServlet; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import jakarta.servlet.http.Part; import java.io.File; import java.io.IOException; import java.io.InputStream; import java.nio.file.Files; import java.nio.file.StandardCopyOption; import java.util.Arrays; import java.util.regex.Pattern; import org.bukkit.Bukkit; import org.bukkit.OfflinePlayer; public class SchematicUploadServlet extends HttpServlet { private static final Pattern schemNameMatcher = Pattern.compile("^[a-z0-9'!,_ -]{1,30}\\.schem(atic)?$", Pattern.CASE_INSENSITIVE); @Override protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { if (request.getRemoteAddr() == null) { response.getWriter().println(schematicUploadBadHTML("Your IP address could not be detected. Please ensure you are using IPv4.")); return; } PlexPlayer plexPlayer = DataUtils.getPlayerByIP(request.getRemoteAddr()); if (plexPlayer == null) { response.getWriter().println(schematicUploadBadHTML("Couldn't load your IP Address: " + request.getRemoteAddr() + ". Have you joined the server before?")); return; } if (Plex.get().getSystem().equalsIgnoreCase("ranks")) { PlexLog.debug("Plex-HTTPD using ranks check"); if (!plexPlayer.getRankFromString().isAtLeast(Rank.ADMIN)) { response.getWriter().println(schematicUploadBadHTML("You must be an admin or above to upload schematics.")); return; } } else if (Plex.get().getSystem().equalsIgnoreCase("permissions")) { PlexLog.debug("Plex-HTTPD using permissions check"); final OfflinePlayer offlinePlayer = Bukkit.getOfflinePlayer(plexPlayer.getUuid()); if (!HTTPDModule.getPermissions().playerHas(null, offlinePlayer, "plex.httpd.schematics.upload")) { response.getWriter().println(schematicUploadBadHTML("You do not have permission to upload schematics.")); return; } } File worldeditFolder = HTTPDModule.getWorldeditFolder(); if (worldeditFolder == null) { response.getWriter().println(schematicUploadBadHTML("Worldedit is not installed!")); return; } File[] schematics = worldeditFolder.listFiles(); Part uploadPart; try { uploadPart = request.getPart("file"); } catch (IllegalStateException e) { response.getWriter().println(schematicUploadBadHTML("That schematic is too large!")); return; } String filename = uploadPart.getSubmittedFileName().replaceAll("[^a-zA-Z0-9'!,_ .-]", "_"); if (!schemNameMatcher.matcher(filename).matches()) { response.getWriter().println(schematicUploadBadHTML("That is not a valid schematic filename!")); return; } boolean alreadyExists = schematics != null && Arrays.stream(schematics).anyMatch(file -> HTTPDModule.fileNameEquals(file.getName(), filename)); if (alreadyExists) { response.getWriter().println(schematicUploadBadHTML("A schematic with the name " + filename + " already exists!")); return; } InputStream inputStream = uploadPart.getInputStream(); Files.copy(inputStream, new File(worldeditFolder, filename).toPath(), StandardCopyOption.REPLACE_EXISTING); inputStream.close(); response.getWriter().println(schematicUploadGoodHTML("Successfully uploaded " + filename + ".")); } private String schematicUploadBadHTML(String message) { String file = AbstractServlet.readFile(this.getClass().getResourceAsStream("/httpd/schematic_upload_bad.html")); file = file.replace("${MESSAGE}", message); return file; } private String schematicUploadGoodHTML(String message) { String file = AbstractServlet.readFile(this.getClass().getResourceAsStream("/httpd/schematic_upload_good.html")); file = file.replace("${MESSAGE}", message); return file; } }