{upload_url, ref} out * ?action=upload (proxy mode) multipart in -> streams to S3 server-side, {ref} out * ?action=status&ref=… -> the video's BentBox status * ?action=disconnect clears the stored connection * * "ref" is an encrypted, connection-bound reference to the video (see * bb_video_ref), so the browser can ask for a status without the video_id. */ require_once __DIR__ . '/bentbox_config.php'; // -------------------------------------------------------------------------- // AJAX ACTIONS (run and exit before any HTML) // -------------------------------------------------------------------------- $action = $_GET['action'] ?? null; if ($action === 'disconnect') { bb_clear_connection(); bb_json(['ok' => true]); } if ($action !== null) { // Everything below requires a live connection. if (!bb_is_connected()) { http_response_code(401); bb_json(['ok' => false, 'error' => 'not_connected']); } } /** Normalise metadata from either a JSON body or POST fields. */ function read_meta(array $src): array { $tags = $src['tags'] ?? []; if (is_string($tags)) { $tags = array_filter(array_map('trim', explode(',', $tags))); } return [ 'title' => trim($src['title'] ?? ''), 'filename' => trim($src['filename'] ?? ''), 'filesize' => (int)($src['filesize'] ?? 0), 'duration' => (float)($src['duration'] ?? 0), 'description' => trim($src['description'] ?? ''), 'price' => (float)($src['price'] ?? 0), 'is_premium' => filter_var($src['is_premium'] ?? false, FILTER_VALIDATE_BOOLEAN), 'adult_content' => filter_var($src['adult_content'] ?? true, FILTER_VALIDATE_BOOLEAN), 'tags' => array_values($tags), ] + read_consent($src); } /** * Consent for POST /v1/content/video: exactly one of * sole_performer = true (the creator is the only person in the video) * release_form_id = "" (signed release covering the other performers) * Keys are only included when set, so they pass straight through to the API. */ function read_consent(array $src): array { $performers = $src['performers'] ?? ''; if ($performers === 'solo') { return ['sole_performer' => true]; } if ($performers === 'others') { $rid = trim((string)($src['release_form_id'] ?? '')); return ['sole_performer' => false, 'release_form_id' => $rid]; } return []; } function validate_meta(array $m): ?string { if ($m['title'] === '') return 'A title is required.'; if ($m['filename'] === '') return 'A filename is required.'; if ($m['filesize'] <= 0) return 'File size could not be determined.'; if ($m['duration'] <= 0) return 'Video duration could not be determined.'; if (!array_key_exists('sole_performer', $m)) { return 'Choose who appears in the video.'; } if ($m['sole_performer'] === false) { $rid = $m['release_form_id'] ?? ''; if ($rid === '') return 'Enter the ProntoID release form ID for the other performers.'; if (strlen($rid) > 128 || !preg_match('/^[A-Za-z0-9_.:-]+$/', $rid)) { return 'That release form ID doesn\'t look right. Copy it exactly as ProntoID shows it.'; } } return null; } // ---- DIRECT MODE: return only the presigned URL to the browser ------------- if ($action === 'prepare') { $in = json_decode(file_get_contents('php://input'), true) ?: []; $m = read_meta($in); if ($err = validate_meta($m)) bb_json(['ok' => false, 'error' => $err]); $r = bb_create_and_sign($m); if (!$r['ok']) { bb_json(['ok' => false, 'error' => $r['error'], 'stage' => $r['stage'] ?? null]); } // The presigned URL is used by JS but not displayed anywhere. bb_json(['ok' => true, 'upload_url' => $r['upload_url'], 'content_type' => $r['content_type'], 'ref' => bb_video_ref($r['video_id'])]); } // ---- STATUS: where is this video on BentBox? -------------------------------- if ($action === 'status') { $videoId = bb_video_from_ref((string)($_GET['ref'] ?? '')); if ($videoId === null) { bb_json(['ok' => false, 'error' => 'unknown_video']); } $s = bb_video_status($videoId); if (!$s['ok'] && ($s['code'] ?? '') === 'not_found') { bb_json(['ok' => false, 'error' => 'unknown_video']); } bb_json($s); } // ---- PROXY MODE: browser -> this server -> S3 (nothing S3 reaches browser) -- if ($action === 'upload') { if (!isset($_FILES['file']['tmp_name']) || !is_uploaded_file($_FILES['file']['tmp_name'])) { bb_json(['ok' => false, 'error' => 'No file received.']); } $m = read_meta($_POST); if ($err = validate_meta($m)) bb_json(['ok' => false, 'error' => $err]); $r = bb_create_and_sign($m); if (!$r['ok']) { bb_json(['ok' => false, 'error' => $r['error'], 'stage' => $r['stage'] ?? null]); } // Stream the temp file straight to S3 (no full in-memory buffering). $tmp = $_FILES['file']['tmp_name']; $fh = fopen($tmp, 'rb'); $ch = curl_init($r['upload_url']); curl_setopt_array($ch, [ CURLOPT_PUT => true, CURLOPT_INFILE => $fh, CURLOPT_INFILESIZE => filesize($tmp), CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 0, CURLOPT_HTTPHEADER => ['Content-Type: ' . $r['content_type']], ]); curl_exec($ch); $code = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); fclose($fh); $ok = ($code >= 200 && $code < 300); bb_json(['ok' => $ok, 'http' => $code] + ($ok ? ['ref' => bb_video_ref($r['video_id'])] : [])); } // -------------------------------------------------------------------------- // PAGE RENDER // -------------------------------------------------------------------------- $connected = bb_is_connected(); $conn = bb_get_connection(); ?> Upload to BentBox
Your site
Connected to BentBox · Disconnect

Connect your BentBox account

To publish videos to BentBox, connect your account once. You'll be asked to approve access, then brought back here to upload.

Connect BentBox Account

Upload a video

Your video will be published to your BentBox profile.

Choose a video or drag it here
MP4, MOV — up to 2 GB
Who's in this video?
Copy it from the signed release in ProntoID. One release can cover several performers.