BackpackElfinderController.php

<?php

namespace Backpack\FileManager;

use Illuminate\Support\Facades\Crypt;
use Illuminate\Support\Facades\Log;

class BackpackElfinderController extends \Barryvdh\Elfinder\ElfinderController
{
    public function showPopup($input_id)
    {
        $mimes = request('mimes');

        if (config('elfinder.encrypt_mimes', true)) {
            if (! isset($mimes)) {
                Log::error('Someone attempted to tamper with mime types in elfinder popup. The attempt was blocked.');
                abort(403, 'Unauthorized action.');
            }

            try {
                $mimes = Crypt::decrypt(urldecode($mimes));
            } catch (\Illuminate\Contracts\Encryption\DecryptException $e) {
                Log::error('Someone attempted to tamper with mime types in elfinder popup. The attempt was blocked.');
                abort(403, 'Unauthorized action.');
            }
        } else {
            $mimes = $mimes ? json_decode(urldecode($mimes), true) : '';
        }

        if (! empty($mimes)) {
            request()->merge(['mimes' => urlencode(json_encode($mimes, JSON_UNESCAPED_SLASHES))]);
        } else {
            request()->merge(['mimes' => '']);
        }

        return $this->app['view']
            ->make('backpack.filemanager::standalonepopup')
            ->with($this->getViewVars())
            ->with(compact('input_id'));
    }

    public function showIndex()
    {
        return $this->app['view']
            ->make('backpack.filemanager::elfinder')
            ->with($this->getViewVars());
    }

    protected function getViewVars()
    {
        $dir = 'packages/barryvdh/'.$this->package;
        $locale = str_replace('-', '_', $this->app->config->get('app.locale'));

        if (! file_exists(base_path("vendor/studio-42/elfinder/js/i18n/elfinder.{$locale}.js"))) {
            $locale = false;
        }

        $csrf = true;

        return compact('dir', 'locale', 'csrf');
    }
}