Elep

<?php
/*
 * Your installation or use of this SugarCRM file is subject to the applicable
 * terms available at
 * http://support.sugarcrm.com/Resources/Master_Subscription_Agreements/.
 * If you do not agree to all of the applicable terms or do not have the
 * authority to bind the entity as an authorized representative, then do not
 * install or use this SugarCRM file.
 *
 * Copyright (C) SugarCRM Inc. All rights reserved.
 */
//Request object must have these property values:
//		Module: module name, this module should have a file called TreeData.php
//		Function: name of the function to be called in TreeData.php, the function will be called statically.
//		PARAM prefixed properties: array of these property/values will be passed to the function as parameter.

use Sugarcrm\Sugarcrm\Security\Validator\Constraints\File;
use Sugarcrm\Sugarcrm\Security\Validator\Validator;

require_once 'include/JSON.php';
require_once 'include/upload_file.php';

$json = getJSONobj();
$file_name = $json->decode(html_entity_decode($_REQUEST['file_name'], ENT_COMPAT));
if (isset($file_name['jsonObject']) && $file_name['jsonObject'] != null) {
    $file_name = $file_name['jsonObject'];
}

$constraint = new File([
    'baseDirs' => [
        UploadStream::getDir(),
    ],
]);

$violations = Validator::getService()->validate($file_name, $constraint);

if (count($violations) > 0) {
    sugar_die($violations);
}

$filesize = '';
if (file_exists($file_name)) {
    $filesize = filesize($file_name);
}

$response = '';

if ($filesize != null) {
    if (($filesize > return_bytes(ini_get('upload_max_filesize'))) || ($filesize > return_bytes(ini_get('post_max_size')))) {
        $response = $filesize;
    }
}

if (!empty($response)) {
    echo $response;
}
sugar_cleanup();
exit();