Contao\BackendPopup::run PHP Method

    public function run()
    {
        if ($this->strFile == '') {
            die('No file given');
        }
        // Make sure there are no attempts to hack the file system
        if (preg_match('@^\\.+@i', $this->strFile) || preg_match('@\\.+/@i', $this->strFile) || preg_match('@(://)+@i', $this->strFile)) {
            die('Invalid file name');
        }
        // Limit preview to the files directory
        if (!preg_match('@^' . preg_quote(\Config::get('uploadPath'), '@') . '@i', $this->strFile)) {
            die('Invalid path');
        }
        // Check whether the file exists
        if (!file_exists(TL_ROOT . '/' . $this->strFile)) {
            die('File not found');
        }
        // Check whether the file is mounted (thanks to Marko Cupic)
        if (!$this->User->hasAccess($this->strFile, 'filemounts')) {
            die('Permission denied');
        }
        // Open the download dialogue
        if (\Input::get('download')) {
            $objFile = new \File($this->strFile);
            $objFile->sendToBrowser();
        }
        /** @var BackendTemplate|object $objTemplate */
        $objTemplate = new \BackendTemplate('be_popup');
        // Add the resource (see #6880)
        if (($objModel = \FilesModel::findByPath($this->strFile)) === null) {
            if (\Dbafs::shouldBeSynchronized($this->strFile)) {
                $objModel = \Dbafs::addResource($this->strFile);
            }
        }
        if ($objModel !== null) {
            $objTemplate->uuid = \StringUtil::binToUuid($objModel->uuid);
            // see #5211
        }
        // Add the file info
        if (is_dir(TL_ROOT . '/' . $this->strFile)) {
            $objFile = new \Folder($this->strFile);
            $objTemplate->filesize = $this->getReadableSize($objFile->size) . ' (' . number_format($objFile->size, 0, $GLOBALS['TL_LANG']['MSC']['decimalSeparator'], $GLOBALS['TL_LANG']['MSC']['thousandsSeparator']) . ' Byte)';
        } else {
            $objFile = new \File($this->strFile);
            // Image
            if ($objFile->isImage) {
                $objTemplate->isImage = true;
                $objTemplate->width = $objFile->width;
                $objTemplate->height = $objFile->height;
                $objTemplate->src = $this->urlEncode($this->strFile);
            }
            $objTemplate->dataUri = $objFile->dataUri;
            $objTemplate->href = ampersand(\Environment::get('request'), true) . '&download=1';
            $objTemplate->filesize = $this->getReadableSize($objFile->filesize) . ' (' . number_format($objFile->filesize, 0, $GLOBALS['TL_LANG']['MSC']['decimalSeparator'], $GLOBALS['TL_LANG']['MSC']['thousandsSeparator']) . ' Byte)';
        }
        $objTemplate->icon = $objFile->icon;
        $objTemplate->mime = $objFile->mime;
        $objTemplate->ctime = \Date::parse(\Config::get('datimFormat'), $objFile->ctime);
        $objTemplate->mtime = \Date::parse(\Config::get('datimFormat'), $objFile->mtime);
        $objTemplate->atime = \Date::parse(\Config::get('datimFormat'), $objFile->atime);
        $objTemplate->path = \StringUtil::specialchars($this->strFile);
        $objTemplate->theme = \Backend::getTheme();
        $objTemplate->base = \Environment::get('base');
        $objTemplate->language = $GLOBALS['TL_LANGUAGE'];
        $objTemplate->title = \StringUtil::specialchars($this->strFile);
        $objTemplate->charset = \Config::get('characterSet');
        $objTemplate->label_uuid = $GLOBALS['TL_LANG']['MSC']['fileUuid'];
        $objTemplate->label_imagesize = $GLOBALS['TL_LANG']['MSC']['fileImageSize'];
        $objTemplate->label_filesize = $GLOBALS['TL_LANG']['MSC']['fileSize'];
        $objTemplate->label_ctime = $GLOBALS['TL_LANG']['MSC']['fileCreated'];
        $objTemplate->label_mtime = $GLOBALS['TL_LANG']['MSC']['fileModified'];
        $objTemplate->label_atime = $GLOBALS['TL_LANG']['MSC']['fileAccessed'];
        $objTemplate->label_path = $GLOBALS['TL_LANG']['MSC']['filePath'];
        $objTemplate->download = \StringUtil::specialchars($GLOBALS['TL_LANG']['MSC']['fileDownload']);
        return $objTemplate->getResponse();
    }

 /**
  * Renders the pop-up content.
  *
  * @return Response
  *
  * @Route("/popup", name="contao_backend_popup")
  */
 public function popupAction()
 {
     $this->container->get('contao.framework')->initialize();
     $controller = new BackendPopup();
     return $controller->run();
 }