self::readOptionalFile(MeshConfig::FILE_PUB_KEY) !== '', 'node_info' => self::readOptionalFile(MeshConfig::FILE_NODE_INFO) !== '', 'peers' => count(self::loadServers()), ]); } private static function handleUpload(array $upload, array $postData, bool $isPeerPush): void { // 1. Validate Upload Errors if ($upload['error'] !== UPLOAD_ERR_OK) { $msg = ($upload['error'] === UPLOAD_ERR_INI_SIZE || $upload['error'] === UPLOAD_ERR_FORM_SIZE) ? 'File exceeds server configuration size limits.' : 'Upload error code: ' . $upload['error']; self::jsonOut(['ok' => false, 'error' => $msg], 400); } // 2. Validate File Size limit if ($upload['size'] > MeshConfig::MAX_FILE_SIZE) { self::jsonOut(['ok' => false, 'error' => 'File exceeds the 1GB size limit.'], 400); } // 3. Validate Extension $ext = self::safeExt($upload['name']); if (in_array($ext, MeshConfig::BLOCKED_EXT, true)) { self::jsonOut(['ok' => false, 'error' => 'PHP files are strictly blocked.'], 400); } // 4. Sanitize Input Fields $description = self::sanitize($postData['description'] ?? $postData['comment'] ?? ''); $userPubKey = self::sanitize($postData['public_key'] ?? ''); $nodeInfo = self::sanitize($postData['node_info'] ?? self::readOptionalFile(MeshConfig::FILE_NODE_INFO)); // As per spec: server_public_key is ALWAYS loaded from local file. $serverPubKey = self::sanitize(self::readOptionalFile(MeshConfig::FILE_PUB_KEY)); // 5. Store Locally $local = self::storeLocally( $upload['tmp_name'], $upload['name'], $description, $userPubKey, $serverPubKey, $nodeInfo ); if (!$local['ok']) { self::jsonOut($local, 500); } // 6. Handle successful local storage if (!$local['existed']) { //self::appendFilesAndDataJson($local['hash']); } if ($isPeerPush) { // Peer push completes here. self::jsonOut($local, 200); } // 7. Browser Request: Respond immediately, then background propagate $servers = self::loadServers(); $storedPath = MeshConfig::DIR_FILES . '/' . $local['filename']; $responsePayload = json_encode(array_merge($local, [ 'peers_total' => count($servers), 'peers' => [], ]), JSON_UNESCAPED_UNICODE); http_response_code(200); header('Content-Type: application/json'); header('Content-Length: ' . strlen($responsePayload)); header('Connection: close'); echo $responsePayload; if (ob_get_level()) { ob_end_flush(); } flush(); // 8. Propagate to peers if (!$local['existed']) { ignore_user_abort(true); foreach ($servers as $server) { self::pushToServer($server, $storedPath, $upload['name'], $description, $userPubKey, $nodeInfo); } } exit; } private static function storeLocally( string $tmpPath, string $originalName, string $description, string $userPubKey, string $serverPubKey, string $nodeInfo ): array { $ext = self::safeExt($originalName); $hash = hash_file('sha256', $tmpPath); $baseName = $ext !== '' ? "{$hash}.{$ext}" : $hash; $destFile = MeshConfig::DIR_FILES . '/' . $baseName; $destInfo = MeshConfig::DIR_INFO . '/' . $hash . '.json'; $existed = file_exists($destFile); if (!$existed) { if (!copy($tmpPath, $destFile)) { return ['ok' => false, 'error' => 'Could not write file to disk.']; } self::appendIndex($baseName); } if (!file_exists($destInfo)) { $info = [ 'filename' => self::sanitize($originalName), 'size' => (int) filesize($destFile), 'extension' => self::sanitize($ext), 'public_key' => $userPubKey, 'server_public_key' => $serverPubKey, 'node_info' => $nodeInfo, 'description' => $description, 'date' => date('c'), // ISO 8601 Timestamp ]; file_put_contents($destInfo, json_encode($info, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE)); } return ['ok' => true, 'hash' => $hash, 'filename' => $baseName, 'existed' => $existed]; } private static function pushToServer( string $server, string $filePath, string $filename, string $description, string $userPubKey, string $nodeInfo ): void { $boundary = '----MeshBoundary' . bin2hex(random_bytes(12)); $body = ''; $mime = @mime_content_type($filePath) ?: 'application/octet-stream'; $body .= "--{$boundary}\r\n"; $body .= 'Content-Disposition: form-data; name="file"; filename="' . addslashes($filename) . "\"\r\n"; $body .= "Content-Type: {$mime}\r\n\r\n"; $body .= file_get_contents($filePath) . "\r\n"; $fields = [ 'description' => $description, 'public_key' => $userPubKey, 'node_info' => $nodeInfo, 'peer_push' => '1', ]; foreach ($fields as $name => $value) { $body .= "--{$boundary}\r\n"; $body .= "Content-Disposition: form-data; name=\"{$name}\"\r\n\r\n"; $body .= $value . "\r\n"; } $body .= "--{$boundary}--\r\n"; $url = rtrim($server, '/') . '/' . basename(__FILE__); $ctx = stream_context_create([ 'http' => [ 'method' => 'POST', 'header' => implode("\r\n", [ "Content-Type: multipart/form-data; boundary={$boundary}", "Content-Length: " . strlen($body), "X-Mesh-Node: 1", ]), 'content' => $body, 'timeout' => 20, 'ignore_errors' => true, ], 'ssl' => [ 'verify_peer' => false, 'verify_peer_name' => false, ], ]); @file_get_contents($url, false, $ctx); } private static function appendFilesAndDataJson(string $hash): void { ob_start(); $prev = error_reporting(0); try { $infoPath = MeshConfig::DIR_INFO . '/' . $hash . '.json'; $raw = @file_get_contents($infoPath); if ($raw === false) return; $info = json_decode($raw, true); if (!is_array($info)) return; $ext = $info['extension'] ?? ''; $baseName = $ext !== '' ? "{$hash}.{$ext}" : $hash; self::appendIndex($baseName); $entry = array_merge(['hash' => $hash], $info); $dataJson = MeshConfig::FILE_DATA_JSON; if (!file_exists($dataJson)) { file_put_contents($dataJson, "[\n]", LOCK_EX); } $fp = @fopen($dataJson, 'c+'); if ($fp === false || !flock($fp, LOCK_EX)) { if ($fp) fclose($fp); return; } $content = rtrim((string) stream_get_contents($fp)); $closingPos = strrpos($content, ']'); $encoded = json_encode($entry, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE); $indented = implode("\n", array_map(static function(string $l) { return ' ' . $l; }, explode("\n", $encoded))); if ($closingPos === false || trim(substr($content, 1, $closingPos - 1)) === '') { $newContent = "[\n" . $indented . "\n]"; } else { $newContent = rtrim(substr($content, 0, $closingPos)) . ",\n" . $indented . "\n]"; } rewind($fp); ftruncate($fp, 0); fwrite($fp, $newContent); flock($fp, LOCK_UN); fclose($fp); } finally { error_reporting($prev); ob_end_clean(); } } // -- Helper Utilities -- private static function sanitize(string $input): string { return substr(trim($input), 0, MeshConfig::MAX_TEXT_LEN); } private static function safeExt(string $filename): string { $ext = strtolower(pathinfo($filename, PATHINFO_EXTENSION)); return substr(preg_replace('/[^a-z0-9]/', '', $ext), 0, MeshConfig::MAX_TEXT_LEN); } private static function readOptionalFile(string $path): string { return file_exists($path) ? trim((string) file_get_contents($path)) : ''; } private static function appendIndex(string $entry): void { $lines = file_exists(MeshConfig::FILE_INDEX) ? array_map('trim', file(MeshConfig::FILE_INDEX, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES)) : []; if (!in_array($entry, $lines, true)) { file_put_contents(MeshConfig::FILE_INDEX, $entry . PHP_EOL, FILE_APPEND | LOCK_EX); } } private static function loadServers(): array { if (!file_exists(MeshConfig::FILE_SERVERS)) return []; $lines = file(MeshConfig::FILE_SERVERS, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES); $out = []; foreach ($lines as $line) { $line = trim($line); if ($line !== '') { if (!preg_match('#^https?://#i', $line)) $line = 'http://' . $line; $out[] = rtrim($line, '/'); } } return array_unique($out); } private static function jsonOut(array $data, int $code = 200): void { http_response_code($code); header('Content-Type: application/json'); echo json_encode($data, JSON_UNESCAPED_UNICODE); exit; } } // -- Application Initialization ------------------------------------------------ MeshNode::bootstrap(); MeshNode::handleRequest(); // ------------------------------------------------------------------------------- // HTML FRONT-END // ------------------------------------------------------------------------------- ?> Meento Share - Distributed File Replication
M

Meento Share

Distributed file replication

Peers
…
Public Key
…
Node Info
…

Drop a file or click to select

1 GB maximum · Replicated to all peers · .php blocked

—
node_info
metadata extracted
Stored as the “description” field 0 / 512
Sending to … peer(s)
JSON schema info/<hash>.json 
{
  "filename":          "photo.jpg",
  "size":              204800,
  "extension":         "jpg",
  "public_key":        "<user input from form (max 512)>",
  "server_public_key": "<loaded from public_key.txt>",
  "node_info":         "<loaded from node_info.txt>",
  "description":       "<user description (max 512)>",
  "date":              "2026-06-15T11:25:10-03:00"
}