api_documents.class.php

<?php
/* Copyright (C) 2016   Xebax Christy           <xebax@wanadoo.fr>
 * Copyright (C) 2016 Laurent Destailleur   <eldy@users.sourceforge.net>
 * Copyright (C) 2016   Jean-François Ferry     <jfefe@aternatik.fr>
 *
 * This program is free software you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 */

use Luracast\Restler\RestException;
use Luracast\Restler\Format\UploadFormat;

require_once DOL_DOCUMENT_ROOT.'/main.inc.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';

class Documents extends DolibarrApi
{

  public static $DOCUMENT_FIELDS = array(
    'modulepart'
  );

  public function __construct()
  {
    global $db;
    $this->db = $db;
  }


  public function index($modulepart, $original_file = '')
  {
    global $conf, $langs;

    if (empty($modulepart)) {
        throw new RestException(400, 'bad value for parameter modulepart');
    }
    if (empty($original_file)) {
      throw new RestException(400, 'bad value for parameter original_file');
    }

    //--- Finds and returns the document
    $entity = $conf->entity;

    // Special cases that need to use get_exdir to get real dir of object
    // If future, all object should use this to define path of documents.
    /*
    $tmpreldir = '';
    if ($modulepart == 'supplier_invoice') {
      $tmpreldir = get_exdir($object->id, 2, 0, 0, $object, 'invoice_supplier');
    }

    $relativefile = $tmpreldir.dol_sanitizeFileName($object->ref); */
    $relativefile = $original_file;

    $check_access = dol_check_secure_access_document($modulepart, $relativefile, $entity, DolibarrApiAccess::$user, '', 'read');
    $accessallowed = $check_access['accessallowed'];
    $sqlprotectagainstexternals = $check_access['sqlprotectagainstexternals'];
    $original_file = $check_access['original_file'];

    if (preg_match('/\.\./', $original_file) || preg_match('/[<>|]/', $original_file)) {
      throw new RestException(401);
    }
    if (!$accessallowed) {
      throw new RestException(401);
    }

    $filename = basename($original_file);
    $original_file_osencoded = dol_osencode($original_file); // New file name encoded in OS encoding charset

    if (!file_exists($original_file_osencoded)) {
      dol_syslog("Try to download not found file ".$original_file_osencoded, LOG_WARNING);
      throw new RestException(404, 'File not found');
    }

    $file_content = file_get_contents($original_file_osencoded);
    return array('filename'=>$filename, 'content-type' => dol_mimetype($filename), 'filesize'=>filesize($original_file), 'content'=>base64_encode($file_content), 'encoding'=>'base64');
  }


  public function builddoc($modulepart, $original_file = '', $doctemplate = '', $langcode = '')
  {
    global $conf, $langs;

    if (empty($modulepart)) {
      throw new RestException(400, 'bad value for parameter modulepart');
    }
    if (empty($original_file)) {
      throw new RestException(400, 'bad value for parameter original_file');
    }

    $outputlangs = $langs;
    if ($langcode && $langs->defaultlang != $langcode) {
      $outputlangs = new Translate('', $conf);
      $outputlangs->setDefaultLang($langcode);
    }

    //--- Finds and returns the document
    $entity = $conf->entity;

    // Special cases that need to use get_exdir to get real dir of object
    // If future, all object should use this to define path of documents.
    /*
    $tmpreldir = '';
    if ($modulepart == 'supplier_invoice') {
      $tmpreldir = get_exdir($object->id, 2, 0, 0, $object, 'invoice_supplier');
    }

    $relativefile = $tmpreldir.dol_sanitizeFileName($object->ref); */
    $relativefile = $original_file;

    $check_access = dol_check_secure_access_document($modulepart, $relativefile, $entity, DolibarrApiAccess::$user, '', 'write');
    $accessallowed              = $check_access['accessallowed'];
    $sqlprotectagainstexternals = $check_access['sqlprotectagainstexternals'];
    $original_file              = $check_access['original_file'];

    if (preg_match('/\.\./', $original_file) || preg_match('/[<>|]/', $original_file)) {
      throw new RestException(401);
    }
    if (!$accessallowed) {
      throw new RestException(401);
    }

    // --- Generates the document
    $hidedetails = empty($conf->global->MAIN_GENERATE_DOCUMENTS_HIDE_DETAILS) ? 0 : 1;
    $hidedesc = empty($conf->global->MAIN_GENERATE_DOCUMENTS_HIDE_DESC) ? 0 : 1;
    $hideref = empty($conf->global->MAIN_GENERATE_DOCUMENTS_HIDE_REF) ? 0 : 1;

    $templateused = '';

    if ($modulepart == 'facture' || $modulepart == 'invoice') {
      require_once DOL_DOCUMENT_ROOT.'/compta/facture/class/facture.class.php';
      $this->invoice = new Facture($this->db);
      $result = $this->invoice->fetch(0, preg_replace('/\.[^\.]+$/', '', basename($original_file)));
      if (!$result) {
        throw new RestException(404, 'Invoice not found');
      }

      $templateused = $doctemplate ? $doctemplate : $this->invoice->model_pdf;
      $result = $this->invoice->generateDocument($templateused, $outputlangs, $hidedetails, $hidedesc, $hideref);
      if ($result <= 0) {
        throw new RestException(500, 'Error generating document');
      }
    } elseif ($modulepart == 'commande' || $modulepart == 'order') {
      require_once DOL_DOCUMENT_ROOT.'/commande/class/commande.class.php';
      $this->order = new Commande($this->db);
      $result = $this->order->fetch(0, preg_replace('/\.[^\.]+$/', '', basename($original_file)));
      if (!$result) {
        throw new RestException(404, 'Order not found');
      }
      $templateused = $doctemplate ? $doctemplate : $this->order->model_pdf;
      $result = $this->order->generateDocument($templateused, $outputlangs, $hidedetails, $hidedesc, $hideref);
      if ($result <= 0) {
        throw new RestException(500, 'Error generating document');
      }
    } elseif ($modulepart == 'propal' || $modulepart == 'proposal') {
      require_once DOL_DOCUMENT_ROOT.'/comm/propal/class/propal.class.php';
      $this->propal = new Propal($this->db);
      $result = $this->propal->fetch(0, preg_replace('/\.[^\.]+$/', '', basename($original_file)));
      if (!$result) {
        throw new RestException(404, 'Proposal not found');
      }
      $templateused = $doctemplate ? $doctemplate : $this->propal->model_pdf;
      $result = $this->propal->generateDocument($templateused, $outputlangs, $hidedetails, $hidedesc, $hideref);
      if ($result <= 0) {
        throw new RestException(500, 'Error generating document');
      }
    } else {
      throw new RestException(403, 'Generation not available for this modulepart');
    }

    $filename = basename($original_file);
    $original_file_osencoded = dol_osencode($original_file); // New file name encoded in OS encoding charset

    if (!file_exists($original_file_osencoded)) {
      throw new RestException(404, 'File not found');
    }

    $file_content = file_get_contents($original_file_osencoded);
    return array('filename'=>$filename, 'content-type' => dol_mimetype($filename), 'filesize'=>filesize($original_file), 'content'=>base64_encode($file_content), 'langcode'=>$outputlangs->defaultlang, 'template'=>$templateused, 'encoding'=>'base64');
  }

  public function getDocumentsListByElement($modulepart, $id = 0, $ref = '', $sortfield = '', $sortorder = '')
  {
    global $conf;

    if (empty($modulepart)) {
      throw new RestException(400, 'bad value for parameter modulepart');
    }

    if (empty($id) && empty($ref)) {
      throw new RestException(400, 'bad value for parameter id or ref');
    }

    $id = (empty($id) ? 0 : $id);
    $recursive = 0;
    $type = 'files';

    if ($modulepart == 'societe' || $modulepart == 'thirdparty') {
      require_once DOL_DOCUMENT_ROOT.'/societe/class/societe.class.php';

      if (!DolibarrApiAccess::$user->rights->societe->lire) {
        throw new RestException(401);
      }

      $object = new Societe($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Thirdparty not found');
      }

      $upload_dir = $conf->societe->multidir_output[$object->entity]."/".$object->id;
    } elseif ($modulepart == 'user') {
      require_once DOL_DOCUMENT_ROOT.'/user/class/user.class.php';

      // Can get doc if has permission to read all user or if it is user itself
      if (!DolibarrApiAccess::$user->rights->user->user->lire && DolibarrApiAccess::$user->id != $id) {
        throw new RestException(401);
      }

      $object = new User($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'User not found');
      }

      $upload_dir = $conf->user->dir_output.'/'.get_exdir(0, 0, 0, 0, $object, 'user').'/'.$object->id;
    } elseif ($modulepart == 'adherent' || $modulepart == 'member') {
      require_once DOL_DOCUMENT_ROOT.'/adherents/class/adherent.class.php';

      if (!DolibarrApiAccess::$user->rights->adherent->lire) {
        throw new RestException(401);
      }

      $object = new Adherent($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Member not found');
      }

      $upload_dir = $conf->adherent->dir_output."/".get_exdir(0, 0, 0, 1, $object, 'member');
    } elseif ($modulepart == 'propal' || $modulepart == 'proposal') {
      require_once DOL_DOCUMENT_ROOT.'/comm/propal/class/propal.class.php';

      if (!DolibarrApiAccess::$user->rights->propal->lire) {
        throw new RestException(401);
      }

      $object = new Propal($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Proposal not found');
      }

      $upload_dir = $conf->propal->multidir_output[$object->entity]."/".get_exdir(0, 0, 0, 1, $object, 'propal');
    } elseif ($modulepart == 'supplier_proposal') {
      require_once DOL_DOCUMENT_ROOT.'/supplier_proposal/class/supplier_proposal.class.php';

      if (!DolibarrApiAccess::$user->rights->supplier_proposal->read) {
        throw new RestException(401);
      }

      $object = new Propal($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Supplier proposal not found');
      }

      $upload_dir = $conf->propal->multidir_output[$object->entity]."/".get_exdir(0, 0, 0, 1, $object, 'propal');
    } elseif ($modulepart == 'commande' || $modulepart == 'order') {
      require_once DOL_DOCUMENT_ROOT.'/commande/class/commande.class.php';

      if (!DolibarrApiAccess::$user->rights->commande->lire) {
        throw new RestException(401);
      }

      $object = new Commande($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Order not found');
      }

      $upload_dir = $conf->commande->dir_output."/".get_exdir(0, 0, 0, 1, $object, 'commande');
    } elseif ($modulepart == 'commande_fournisseur' || $modulepart == 'supplier_order') {
      $modulepart = 'supplier_order';

      require_once DOL_DOCUMENT_ROOT.'/fourn/class/fournisseur.commande.class.php';

      if (empty(DolibarrApiAccess::$user->rights->fournisseur->commande->lire) && empty(DolibarrApiAccess::$user->rights->supplier_order->lire)) {
        throw new RestException(401);
      }

      $object = new CommandeFournisseur($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Purchase order not found');
      }

      $upload_dir = $conf->fournisseur->dir_output."/facture/".get_exdir($object->id, 2, 0, 0, $object, 'invoice_supplier').dol_sanitizeFileName($object->ref);
    } elseif ($modulepart == 'shipment' || $modulepart == 'expedition') {
      require_once DOL_DOCUMENT_ROOT.'/expedition/class/expedition.class.php';

      if (!DolibarrApiAccess::$user->rights->expedition->lire) {
        throw new RestException(401);
      }

      $object = new Expedition($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Shipment not found');
      }

      $upload_dir = $conf->expedition->dir_output."/sending/".get_exdir(0, 0, 0, 1, $object, 'shipment');
    } elseif ($modulepart == 'facture' || $modulepart == 'invoice') {
      require_once DOL_DOCUMENT_ROOT.'/compta/facture/class/facture.class.php';

      if (!DolibarrApiAccess::$user->rights->facture->lire) {
        throw new RestException(401);
      }

      $object = new Facture($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Invoice not found');
      }

      $upload_dir = $conf->facture->dir_output."/".get_exdir(0, 0, 0, 1, $object, 'invoice');
    } elseif ($modulepart == 'facture_fournisseur' || $modulepart == 'supplier_invoice') {
      $modulepart = 'supplier_invoice';

      require_once DOL_DOCUMENT_ROOT.'/fourn/class/fournisseur.facture.class.php';

      if (empty(DolibarrApiAccess::$user->rights->fournisseur->facture->lire) && empty(DolibarrApiAccess::$user->rights->supplier_invoice->lire)) {
        throw new RestException(401);
      }

      $object = new FactureFournisseur($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Invoice not found');
      }

      $upload_dir = $conf->fournisseur->dir_output."/facture/".get_exdir($object->id, 2, 0, 0, $object, 'invoice_supplier').dol_sanitizeFileName($object->ref);
    } elseif ($modulepart == 'produit' || $modulepart == 'product') {
      require_once DOL_DOCUMENT_ROOT.'/product/class/product.class.php';

      if (!DolibarrApiAccess::$user->rights->produit->lire) {
        throw new RestException(401);
      }

      $object = new Product($this->db);
      $result = $object->fetch($id, $ref);
      if ($result == 0) {
        throw new RestException(404, 'Product not found');
      } elseif ($result < 0) {
        throw new RestException(500, 'Error while fetching object: '.$object->error);
      }

      $upload_dir = $conf->product->multidir_output[$object->entity].'/'.get_exdir(0, 0, 0, 1, $object, 'product');
    } elseif ($modulepart == 'agenda' || $modulepart == 'action' || $modulepart == 'event') {
      require_once DOL_DOCUMENT_ROOT.'/comm/action/class/actioncomm.class.php';

      if (!DolibarrApiAccess::$user->rights->agenda->myactions->read && !DolibarrApiAccess::$user->rights->agenda->allactions->read) {
        throw new RestException(401);
      }

      $object = new ActionComm($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Event not found');
      }

      $upload_dir = $conf->agenda->dir_output.'/'.dol_sanitizeFileName($object->ref);
    } elseif ($modulepart == 'expensereport') {
      require_once DOL_DOCUMENT_ROOT.'/expensereport/class/expensereport.class.php';

      if (!DolibarrApiAccess::$user->rights->expensereport->read && !DolibarrApiAccess::$user->rights->expensereport->read) {
        throw new RestException(401);
      }

      $object = new ExpenseReport($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Expense report not found');
      }

      $upload_dir = $conf->expensereport->dir_output.'/'.dol_sanitizeFileName($object->ref);
    } elseif ($modulepart == 'knowledgemanagement') {
      require_once DOL_DOCUMENT_ROOT.'/knowledgemanagement/class/knowledgerecord.class.php';

      if (!DolibarrApiAccess::$user->rights->knowledgemanagement->knowledgerecord->read && !DolibarrApiAccess::$user->rights->knowledgemanagement->knowledgerecord->read) {
        throw new RestException(401);
      }

      $object = new KnowledgeRecord($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'KM article not found');
      }

      $upload_dir = $conf->knowledgemanagement->dir_output.'/knowledgerecord/'.dol_sanitizeFileName($object->ref);
    } elseif ($modulepart == 'categorie' || $modulepart == 'category') {
      require_once DOL_DOCUMENT_ROOT.'/categories/class/categorie.class.php';

      if (!DolibarrApiAccess::$user->rights->categorie->lire) {
        throw new RestException(401);
      }

      $object = new Categorie($this->db);
      $result = $object->fetch($id, $ref);
      if (!$result) {
        throw new RestException(404, 'Category not found');
      }

      $upload_dir = $conf->categorie->multidir_output[$object->entity].'/'.get_exdir($object->id, 2, 0, 0, $object, 'category').$object->id."/photos/".dol_sanitizeFileName($object->ref);
    } elseif ($modulepart == 'ecm') {
      throw new RestException(500, 'Modulepart Ecm not implemented yet.');
      // // require_once DOL_DOCUMENT_ROOT.'/ecm/class/ecmdirectory.class.php';

      // if (!DolibarrApiAccess::$user->rights->ecm->read) {
      //  throw new RestException(401);
      // }

      // // $object = new EcmDirectory($this->db);
      // // $result = $object->fetch($ref);
      // // if (!$result) {
      // //   throw new RestException(404, 'EcmDirectory not found');
      // // }
      // $upload_dir = $conf->ecm->dir_output;
      // $type = 'all';
      // $recursive = 0;
    } else {
      throw new RestException(500, 'Modulepart '.$modulepart.' not implemented yet.');
    }

    $filearray = dol_dir_list($upload_dir, $type, $recursive, '', '(\.meta|_preview.*\.png)$', $sortfield, (strtolower($sortorder) == 'desc' ?SORT_DESC:SORT_ASC), 1);
    if (empty($filearray)) {
      throw new RestException(404, 'Search for modulepart '.$modulepart.' with Id '.$object->id.(!empty($object->ref) ? ' or Ref '.$object->ref : '').' does not return any document.');
    } else {
      if (($object->id) > 0 && !empty($modulepart)) {
        require_once DOL_DOCUMENT_ROOT.'/ecm/class/ecmfiles.class.php';
        $ecmfile = new EcmFiles($this->db);
        $result = $ecmfile->fetchAll('', '', 0, 0, array('t.src_object_type' => $modulepart, 't.src_object_id' => $object->id));
        if ($result < 0) {
          throw new RestException(503, 'Error when retrieve ecm list : '.$this->db->lasterror());
        } elseif (is_array($ecmfile->lines) && count($ecmfile->lines) > 0) {
          $filearray['ecmfiles_infos'] = $ecmfile->lines;
        }
      }
    }

    return $filearray;
  }


  /*
  public function get($id) {
    return array('note'=>'xxx');
  }*/


  public function post($filename, $modulepart, $ref = '', $subdir = '', $filecontent = '', $fileencoding = '', $overwriteifexists = 0, $createdirifnotexists = 1)
  {
    global $db, $conf;

    //var_dump($modulepart);
    //var_dump($filename);
    //var_dump($filecontent);exit;

    if (empty($modulepart)) {
      throw new RestException(400, 'Modulepart not provided.');
    }

    if (!DolibarrApiAccess::$user->rights->ecm->upload) {
      throw new RestException(401);
    }

    $newfilecontent = '';
    if (empty($fileencoding)) {
      $newfilecontent = $filecontent;
    }
    if ($fileencoding == 'base64') {
      $newfilecontent = base64_decode($filecontent);
    }

    $original_file = dol_sanitizeFileName($filename);

    // Define $uploadir
    $object = null;
    $entity = DolibarrApiAccess::$user->entity;
    if (empty($entity)) {
      $entity = 1;
    }

    if ($ref) {
      $tmpreldir = '';

      if ($modulepart == 'facture' || $modulepart == 'invoice') {
        $modulepart = 'facture';

        require_once DOL_DOCUMENT_ROOT.'/compta/facture/class/facture.class.php';
        $object = new Facture($this->db);
      } elseif ($modulepart == 'facture_fournisseur' || $modulepart == 'supplier_invoice') {
        $modulepart = 'supplier_invoice';

        require_once DOL_DOCUMENT_ROOT.'/fourn/class/fournisseur.facture.class.php';
        $object = new FactureFournisseur($this->db);
      } elseif ($modulepart == 'commande' || $modulepart == 'order') {
          $modulepart = 'commande';

          require_once DOL_DOCUMENT_ROOT.'/commande/class/commande.class.php';
          $object = new Commande($this->db);
      } elseif ($modulepart == 'commande_fournisseur' || $modulepart == 'supplier_order') {
          $modulepart = 'supplier_order';

          require_once DOL_DOCUMENT_ROOT.'/fourn/class/fournisseur.commande.class.php';
          $object = new CommandeFournisseur($this->db);
      } elseif ($modulepart == 'project') {
        require_once DOL_DOCUMENT_ROOT.'/projet/class/project.class.php';
        $object = new Project($this->db);
      } elseif ($modulepart == 'task' || $modulepart == 'project_task') {
        $modulepart = 'project_task';

        require_once DOL_DOCUMENT_ROOT.'/projet/class/task.class.php';
        $object = new Task($this->db);

        $task_result = $object->fetch('', $ref);

        // Fetching the tasks project is required because its out_dir might be a sub-directory of the project
        if ($task_result > 0) {
          $project_result = $object->fetch_projet();

          if ($project_result >= 0) {
            $tmpreldir = dol_sanitizeFileName($object->project->ref).'/';
          }
        } else {
          throw new RestException(500, 'Error while fetching Task '.$ref);
        }
      } elseif ($modulepart == 'product' || $modulepart == 'produit' || $modulepart == 'service' || $modulepart == 'produit|service') {
        require_once DOL_DOCUMENT_ROOT.'/product/class/product.class.php';
        $object = new Product($this->db);
      } elseif ($modulepart == 'expensereport') {
        require_once DOL_DOCUMENT_ROOT.'/expensereport/class/expensereport.class.php';
        $object = new ExpenseReport($this->db);
      } elseif ($modulepart == 'fichinter') {
        require_once DOL_DOCUMENT_ROOT.'/fichinter/class/fichinter.class.php';
        $object = new Fichinter($this->db);
      } elseif ($modulepart == 'adherent' || $modulepart == 'member') {
        $modulepart = 'adherent';
        require_once DOL_DOCUMENT_ROOT.'/adherents/class/adherent.class.php';
        $object = new Adherent($this->db);
      } elseif ($modulepart == 'proposal' || $modulepart == 'propal' || $modulepart == 'propale') {
        $modulepart = 'propale';
        require_once DOL_DOCUMENT_ROOT.'/comm/propal/class/propal.class.php';
        $object = new Propal($this->db);
      } else {
        // TODO Implement additional moduleparts
        throw new RestException(500, 'Modulepart '.$modulepart.' not implemented yet.');
      }

      if (is_object($object)) {
        $result = $object->fetch('', $ref);

        if ($result == 0) {
          throw new RestException(404, "Object with ref '".$ref."' was not found.");
        } elseif ($result < 0) {
          throw new RestException(500, 'Error while fetching object: '.$object->error);
        }
      }

      if (!($object->id > 0)) {
        throw new RestException(404, 'The object '.$modulepart." with ref '".$ref."' was not found.");
      }

      // Special cases that need to use get_exdir to get real dir of object
      // In future, all object should use this to define path of documents.
      if ($modulepart == 'supplier_invoice') {
        $tmpreldir = get_exdir($object->id, 2, 0, 0, $object, 'invoice_supplier');
      }

      $relativefile = $tmpreldir.dol_sanitizeFileName($object->ref);

      $tmp = dol_check_secure_access_document($modulepart, $relativefile, $entity, DolibarrApiAccess::$user, $ref, 'write');
      $upload_dir = $tmp['original_file']; // No dirname here, tmp['original_file'] is already the dir because dol_check_secure_access_document was called with param original_file that is only the dir

      if (empty($upload_dir) || $upload_dir == '/') {
        throw new RestException(500, 'This value of modulepart ('.$modulepart.') does not support yet usage of ref. Check modulepart parameter or try to use subdir parameter instead of ref.');
      }
    } else {
      if ($modulepart == 'invoice') {
        $modulepart = 'facture';
      }
      if ($modulepart == 'member') {
        $modulepart = 'adherent';
      }

      $relativefile = $subdir;
      $tmp = dol_check_secure_access_document($modulepart, $relativefile, $entity, DolibarrApiAccess::$user, '', 'write');
      $upload_dir = $tmp['original_file']; // No dirname here, tmp['original_file'] is already the dir because dol_check_secure_access_document was called with param original_file that is only the dir

      if (empty($upload_dir) || $upload_dir == '/') {
        if (!empty($tmp['error'])) {
          throw new RestException(401, 'Error returned by dol_check_secure_access_document: '.$tmp['error']);
        } else {
          throw new RestException(500, 'This value of modulepart ('.$modulepart.') is not allowed with this value of subdir ('.$relativefile.')');
        }
      }
    }
    // $original_file here is still value of filename without any dir.

    $upload_dir = dol_sanitizePathName($upload_dir);

    if (!empty($createdirifnotexists)) {
      if (dol_mkdir($upload_dir) < 0) { // needed by products
        throw new RestException(500, 'Error while trying to create directory '.$upload_dir);
      }
    }

    $destfile = $upload_dir.'/'.$original_file;
    $destfiletmp = DOL_DATA_ROOT.'/admin/temp/'.$original_file;
    dol_delete_file($destfiletmp);
    //var_dump($original_file);exit;

    if (!dol_is_dir(dirname($destfile))) {
      throw new RestException(401, 'Directory not exists : '.dirname($destfile));
    }

    if (!$overwriteifexists && dol_is_file($destfile)) {
      throw new RestException(500, "File with name '".$original_file."' already exists.");
    }

    $fhandle = @fopen($destfiletmp, 'w');
    if ($fhandle) {
      $nbofbyteswrote = fwrite($fhandle, $newfilecontent);
      fclose($fhandle);
      @chmod($destfiletmp, octdec($conf->global->MAIN_UMASK));
    } else {
      throw new RestException(500, "Failed to open file '".$destfiletmp."' for write");
    }

    $result = dol_move($destfiletmp, $destfile, 0, $overwriteifexists, 1);
    if (!$result) {
      throw new RestException(500, "Failed to move file into '".$destfile."'");
    }

    return dol_basename($destfile);
  }

  public function delete($modulepart, $original_file)
  {
    global $conf, $langs;

    if (empty($modulepart)) {
      throw new RestException(400, 'bad value for parameter modulepart');
    }
    if (empty($original_file)) {
      throw new RestException(400, 'bad value for parameter original_file');
    }

    //--- Finds and returns the document
    $entity = $conf->entity;

    // Special cases that need to use get_exdir to get real dir of object
    // If future, all object should use this to define path of documents.
    /*
    $tmpreldir = '';
    if ($modulepart == 'supplier_invoice') {
      $tmpreldir = get_exdir($object->id, 2, 0, 0, $object, 'invoice_supplier');
    }

    $relativefile = $tmpreldir.dol_sanitizeFileName($object->ref); */
    $relativefile = $original_file;

    $check_access = dol_check_secure_access_document($modulepart, $relativefile, $entity, DolibarrApiAccess::$user, '', 'read');
    $accessallowed = $check_access['accessallowed'];
    $sqlprotectagainstexternals = $check_access['sqlprotectagainstexternals'];
    $original_file = $check_access['original_file'];

    if (preg_match('/\.\./', $original_file) || preg_match('/[<>|]/', $original_file)) {
      throw new RestException(401);
    }
    if (!$accessallowed) {
      throw new RestException(401);
    }

    $filename = basename($original_file);
    $original_file_osencoded = dol_osencode($original_file); // New file name encoded in OS encoding charset

    if (!file_exists($original_file_osencoded)) {
      dol_syslog("Try to download not found file ".$original_file_osencoded, LOG_WARNING);
      throw new RestException(404, 'File not found');
    }

    if (@unlink($original_file_osencoded)) {
      return array(
        'success' => array(
          'code' => 200,
          'message' => 'Document deleted'
        )
      );
    }

    throw new RestException(401);
  }

  // phpcs:disable PEAR.NamingConventions.ValidFunctionName
  private function _validate_file($data)
  {
    // phpcs:enable
    $result = array();
    foreach (Documents::$DOCUMENT_FIELDS as $field) {
      if (!isset($data[$field])) {
        throw new RestException(400, "$field field missing");
      }
      $result[$field] = $data[$field];
    }
    return $result;
  }
}