upload.php

<?php
require_once "config.php";
// Initialize the session
session_start();
// Generate User if User does not exists
if(!isset($_COOKIE['user'])){
$id = getGUID();
  setcookie('user', $id, time()+315400000,"/");
  $_COOKIE['user'] = $id;
}

$current_page = explode(".", $_SERVER['REQUEST_URI'])[0];

// Generates GUID for username
function getGUID(){
  mt_srand((double)microtime()*10000);//optional for php 4.2.0 and up.
  $charid = strtoupper(md5(uniqid(rand(), true)));
  $hyphen = chr(45);
  $uuid = substr($charid, 0, 8).$hyphen
        .substr($charid, 8, 4).$hyphen
        .substr($charid,12, 4).$hyphen
          .substr($charid,16, 4).$hyphen
        .substr($charid,20,12);
  return $uuid;
}

$title = 'Platform for Affective Game ANnotation';
$css = ['upload.css', 'forms.css'];

// Define variables and initialize with empty values
$project_id = $source_url = $original_name = $project_name = $target = $source_type = $message = $n_of_participant_runs = $endless = "";
$source_url_err = "";

// Grab username
$participant = $_COOKIE['user'];
$current_run;

$started_project = 0;

if($_SERVER["REQUEST_METHOD"] == "GET"){
    $project_id = htmlspecialchars($_GET['id'], ENT_QUOTES, "UTF-8");
    if (empty($project_id)){
        header('location: index.php');
        exit();
    }
    $sql = "SELECT * FROM projects WHERE project_id = :project_id LIMIT 1";
    $stmt = $pdo->prepare($sql);
    $stmt->bindParam(":project_id", $project_id, PDO::PARAM_STR);
    $stmt->execute();
    if($stmt->rowCount() == 1){
        $row = $stmt->fetch();
        $project_name = $row['project_name'];
        $target = $row['target'];
        $source_type = $row['source_type'];
        $message = $row['upload_message'];
        $n_of_participant_runs = $row['n_of_participant_runs'];
        $endless = $row['endless'];
    } else {
        echo "Oops! Something went wrong. Please try again later. 1";
    }
    // Close statement
    unset($stmt);

    if(isset($_COOKIE['progress'])){
        $progress = json_decode($_COOKIE['progress'], true);
        // Check ongoing project
        $this_project = "";
        foreach ($progress as $key => $entry) {
            if ($entry['project_id'] == $project_id) {
                $started_project = 1;
                $this_project = $project_id;
                $current_run = $entry;
                if($current_run['n_runs'] >= $n_of_participant_runs && $endless != 'on') {
                    header("location: end.php?id=".$project_id);
                    exit();
                } elseif ($current_run['n_runs'] >= $n_of_participant_runs && $endless == 'on') {
                    $current_run['n_runs'] = 0;
                    $current_run['seen'] = array();
                    $progress[$key]['n_runs'] = 0;
                    $progress[$key]['seen'] = array();
                    setcookie('progress', json_encode($progress), strtotime('+7 days'), '/', $_SERVER['HTTP_HOST']);
                }
                break;
            }
        }
        if(strlen($this_project) < 1){
            $progress_entry->project_id =  $project_id;
            $progress_entry->seen = array();
            $progress_entry->n_runs = 0;
            array_push($progress, $progress_entry);
            setcookie('progress', json_encode($progress), strtotime('+7 days'), '/', $_SERVER['HTTP_HOST']);
        }
    }
}

// Variables for file upload
$file_path = "";
$upload_dir = "user_uploads/";
$file_counter = 0;

define('MB', 1048576);
// Processing form data when form is submitted
if($_SERVER["REQUEST_METHOD"] == "POST"){
    $project_id = trim($_POST["project-id"]);
    $sql = "SELECT * FROM projects WHERE project_id = :project_id LIMIT 1";
    $stmt = $pdo->prepare($sql);
    $stmt->bindParam(":project_id", $project_id, PDO::PARAM_STR);
    $stmt->execute();
    if($stmt->rowCount() == 1){
        $row = $stmt->fetch();
        $source_type = $row['source_type'];
    } else {
        echo "Oops! Something went wrong. Please try again later. 1";
    }
    // Close statement
    unset($stmt);

    $sql = "SELECT * FROM project_entries WHERE project_id = :project_id";
    $stmt = $pdo->prepare($sql);
    $stmt->bindParam(":project_id", $project_id, PDO::PARAM_STR);
    if ($stmt->execute()) {
        $last_entry;
        while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
            $last_entry = $row;
            $file_counter ++;
        }
    } else {
        echo "Oops! Something went wrong. Please try again later. 2";
    }
    unset($stmt);

    // Checks if there are files are being uploaded or not
    $file_check = $_FILES['file']['size'];
    // Handle upload errors
    if ($file_check > 0) {
        $file = basename($_FILES["file"]["name"]);
        $fileType = strtolower(pathinfo($file,PATHINFO_EXTENSION));
        $file_path = $upload_dir.$project_id.'-'.($file_counter+1).'.'.strtolower($fileType);
        // Check if not fake video
        if(!preg_match('/video\/*/',$_FILES['file']['type'])) {
            $source_url_err = "File is not a video.";
        }
        // Check extention
        if($fileType != "mp4" && $fileType != "mpeg" && $fileType != "avi" && $fileType != "mov") {
            $source_url_err = "Sorry, only MP4, MPEG, AVI & MOV files are allowed.";
        }
        // Check file size
        if ($_FILES["file"]["size"] > 1500*MB) {
            $source_url_err = "Sorry, the file is too large.";
        }       
    }

    // Validate source_url
    if(count($_POST["source_url"]) == 1 && $source_type == "user_youtube"){
        $source_url_err = "Please enter at least one url to your video.";
    }
    if($file_check == 0 && $source_type == "user_upload"){
        $source_url_err = "Please select at least one video to upload.";
    }

    // Init the project entries (Last of the youtube links is always empty).
    $project_entry = "";
    if ($source_type == "user_upload"){
        $project_entry = $_FILES["file"]['name'];
    } elseif ($source_type == "user_youtube") {
        $project_entry = array_slice($_POST["source_url"], 0, -1);
    }

    
    $file = $fileType = $file_path = "";
    if ($file_check > 0 ){
        $file = basename($project_entry);
        $fileType = strtolower(pathinfo($file,PATHINFO_EXTENSION));
        $file_path = $upload_dir.$project_id.'-'.($file_counter+1).'.'.strtolower($fileType);
    }

    // Prepare a select statement
    $sql = "SELECT id FROM project_entries WHERE source_url = :source_url AND entry_id = :entry_id";
    
    if($stmt = $pdo->prepare($sql)){
        // Bind variables to the prepared statement as parameters
        $stmt->bindParam(":source_url", $param_source_url, PDO::PARAM_STR);
        $stmt->bindParam(":entry_id", $entry_id, PDO::PARAM_STR);

        // Set parameters
        $param_entry_id = $file_counter+1;
        if ($source_type == "user_upload"){
            $param_source_url = $file_path;
            $original_name = $project_id.'-'.($file_counter+1);
        } elseif ($source_type == "user_youtube") {
            $param_source_url = trim($_POST["source_url"]);
            $param_original_name = explode("=", $param_source_url)[1];
        }
        
        // Attempt to execute the prepared statement
        if($stmt->execute()){
            $entry_id = $file_counter+1;
            if ($source_type == "user_upload"){
                $source_url = $file_path;
                $original_name = $project_id.'-'.($file_counter+1);
            } elseif ($source_type == "user_youtube") {
                $source_url = trim($_POST["source_url"]);
                $original_name = explode("=", $source_url)[1];
            }
        } else{
            echo "Oops! Something went wrong. Please try again later. 3";
        }
    }
    
    // Close statement
    unset($stmt);

	$file = $fileType = $file_path = "";
    if ($file_check > 0 ){
        $file = basename($project_entry);
        $fileType = strtolower(pathinfo($file,PATHINFO_EXTENSION));
        $file_path = $upload_dir.$project_id.'-'.($file_counter+1).'.'.strtolower($fileType);
    }
    // Prepare an insert statement
    $sql = "INSERT INTO project_entries (project_id, entry_id, source_type, source_url, original_name) 
    VALUES (:project_id, :entry_id, :source_type, :source_url, :original_name)";
     
    if($stmt = $pdo->prepare($sql)){
        // Bind variables to the prepared statement as parameters
        $stmt->bindParam(":project_id", $param_project_id, PDO::PARAM_STR);
        $stmt->bindParam(":entry_id", $entry_id, PDO::PARAM_STR);
        $stmt->bindParam(":source_type", $param_source_type, PDO::PARAM_STR);
        $stmt->bindParam(":source_url", $param_source_url, PDO::PARAM_STR);
        $stmt->bindParam(":original_name", $param_original_name, PDO::PARAM_STR);
        // Set parameters
        $param_project_id = $project_id;
        $param_entry_id = $entry_id;
        $param_source_type = $source_type;
        $param_source_url = $source_url;
        $param_original_name = $original_name;
        
        // Attempt to execute the prepared statement
        if($stmt->execute()){
            // If successful, also upload files
            if ($file_check > 0 && $source_type == "user_upload") {
                if (move_uploaded_file($_FILES["file"]["tmp_name"], $file_path)) {
                    echo "The file ". basename($_FILES["file"]["name"]). " has been uploaded.";
                } else {
                    $source_url_err = "Sorry, there was an error uploading your file.";
                }
            }
            // Redirect to projects page
            header("location: annotation.php?id=".$project_id."&entry=".$entry_id);
            exit();
        } else{
            echo "Something went wrong. Please try again later. 4";
        }
    }
    // Close statement
    unset($stmt);

    // Close connection
    unset($pdo);
}

?>

<?php 
    include("header.php");
    if(!isset($_COOKIE['seen_notice'])) {
    echo "<div id='cookie_notice'>
            <h3>Hello!</h3>
            <p>Thank you for your help in this experiment!</p>
            <p>By participating in this study you understand and consent to your labelling data to be stored and used in further experiments and/or made public as part of a larger dataset.</p>
            <p>Don't worry, all the data is collected anonymously and cannot be traced back to you.</p>
            <br>
            <p>We use scripts and persistent cookies on this platform. Our applications run on JavaScript, while cookies help us collecting and organising data.</p>
            <p>Please keep scripts and cookies enabled for science!</p>
            <button>Alright, I understand</button>
        </div>
        <div id='cookie_wall'></div>";
        setcookie('seen_notice', 'seen', strtotime('+365 days'), '/', $_SERVER['HTTP_HOST']);
} ?>

<div class="inner">
    <div class="upload-container">
        <div id='intro'>
            <?php
            if($started_project > 0){
                echo '<p class="welcome">Video Upload for '.$project_name.'</p>';
            } else {
                echo '<p class="welcome">Welcome to '.$project_name.'!</p>';
            }
            echo '<p>An experiment on '.$target.'.</p>
            <p class="instructions">Please ';
            if($source_type == 'user_youtube') {
                echo 'link a YouTube video';
            } else {
                echo 'upload a video';
            }
            echo ' to start labelling it.</p>
            <p>More instructions will follow on labelling on the next screen.</p>';
            if ($sound === 'on'){
                echo '<p>Audio is enabled in this experiment.<br>Please turn on your speakers or headphones.</p>';
            }
            echo '<p>'.$message.'</p>';
            if($endless != 'on') {
                echo '<p class=counter>video '.(string)($current_run['n_runs']+1).' out of '.(string)$n_of_participant_runs.'</p>';     
            }
            ?>
        </div>

        <form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post" enctype="multipart/form-data">
        	<div class="form-group">
                <label><?php
                	if ($source_type == "user_upload") {
                		echo "Upload Video";
                	} else if ($source_type == "user_youtube") {
        				echo "Link YouTube Video";
                	} else {
                		echo "Upload";
                	}
                ?></label>
                <div class="form-group <?php echo (!empty($source_url_err)) ? 'has-error' : ''; ?>" id="project-entries">
                    <span class="help-block"><?php echo $source_url_err; ?></span>
                    <input type="hidden" name="project-id" value="<?php echo $project_id;?>">
                    <?php
                    if ($source_type == "user_upload") {
                        echo '<input type="file" name="file" class="form-control" id="file-source" value="">';
                    } else if ($source_type == "user_youtube") {
                        echo '<input type="text" name="source_url" class="form-control youtube-source" value="">';
                    }
                    ?>
                </div>
            </div>

            <div class="form-group" id="submit">
                <input type="submit" class="button" value="submit">
                <input type="reset" class="button" value="reset">
            </div>
        </form>
    </div>
</div>

<?php
    $scripts = ['cookie_notice.js'];
    include("scripts.php");   
    $tooltip = '';
    include("footer.php");
?>