print_error_page()

Complexity

Conditions	18
Paths	147

Size

Total Lines	140
Code Lines	110

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
function print_error_page()
{
    $status_reason = [
        100 => 'Continue',
        101 => 'Switching Protocols',
        102 => 'Processing',
        200 => 'OK',
        201 => 'Created',
        202 => 'Accepted',
        203 => 'Non-Authoritative Information',
        204 => 'No Content',
        205 => 'Reset Content',
        206 => 'Partial Content',
        207 => 'Multi-Status',
        226 => 'IM Used',
        300 => 'Multiple Choices',
        301 => 'Moved Permanently',
        302 => 'Found',
        303 => 'See Other',
        304 => 'Not Modified',
        305 => 'Use Proxy',
        306 => 'Reserved',
        307 => 'Temporary Redirect',
        400 => 'Bad Request',
        401 => 'Unauthorized',
        402 => 'Payment Required',
        403 => 'Forbidden',
        404 => 'Not Found',
        405 => 'Method Not Allowed',
        406 => 'Not Acceptable',
        407 => 'Proxy Authentication Required',
        408 => 'Request Timeout',
        409 => 'Conflict',
        410 => 'Gone',
        411 => 'Length Required',
        412 => 'Precondition Failed',
        413 => 'Request Entity Too Large',
        414 => 'Request-URI Too Long',
        415 => 'Unsupported Media Type',
        416 => 'Requested Range Not Satisfiable',
        417 => 'Expectation Failed',
        422 => 'Unprocessable Entity',
        423 => 'Locked',
        424 => 'Failed Dependency',
        426 => 'Upgrade Required',
        500 => 'Internal Server Error',
        501 => 'Not Implemented',
        502 => 'Bad Gateway',
        503 => 'Service Unavailable',
        504 => 'Gateway Timeout',
        505 => 'HTTP Version Not Supported',
        506 => 'Variant Also Negotiates',
        507 => 'Insufficient Storage',
        510 => 'Not Extended',
    ];

    $status_msg = [
        400 => 'Your browser sent a request that this server could not understand.',
        401 => 'This server could not verify that you are authorized to access the document requested.',
        402 => 'The server encountered an internal error or misconfiguration and was unable to complete your request.',
        403 => "You don't have permission to access %U% on this server.",
        404 => "We couldn't find <acronym title='%U%'>that uri</acronym> on our server, though it's most certainly not your fault.",
        405 => 'The requested method is not allowed for the URL %U%.',
        406 => 'An appropriate representation of the requested resource %U% could not be found on this server.',
        407 => 'An appropriate representation of the requested resource %U% could not be found on this server.',
        408 => 'Server timeout waiting for the HTTP request from the client.',
        409 => 'The server encountered an internal error or misconfiguration and was unable to complete your request.',
        410 => 'The requested resource %U% is no longer available on this server and there is no forwarding address. Please remove all references to this resource.',
        411 => 'A request of the requested method GET requires a valid Content-length.',
        412 => 'The precondition on the request for the URL %U% evaluated to false.',
        413 => 'The requested resource %U% does not allow request data with GET requests, or the amount of data provided in the request exceeds the capacity limit.',
        414 => "The requested URL's length exceeds the capacity limit for this server.",
        415 => 'The supplied request data is not in a format acceptable for processing by this resource.',
        416 => 'Requested Range Not Satisfiable',
        417 => 'The expectation given in the Expect request-header field could not be met by this server. The client sent <code>Expect:</code>',
        422 => 'The server understands the media type of the request entity, but was unable to process the contained instructions.',
        423 => 'The requested resource is currently locked. The lock must be released or proper identification given before the method can be applied.',
        424 => 'The method could not be performed on the resource because the requested action depended on another action and that other action failed.',
        425 => 'The server encountered an internal error or misconfiguration and was unable to complete your request.',
        426 => 'The requested resource can only be retrieved using SSL. Either upgrade your client, or try requesting the page using https://',
        500 => 'The server encountered an internal error or misconfiguration and was unable to complete your request.',
        501 => 'This type of request method to %U% is not supported.',
        502 => 'The proxy server received an invalid response from an upstream server.',
        503 => 'The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.',
        504 => 'The proxy server did not receive a timely response from the upstream server.',
        505 => 'The server encountered an internal error or misconfiguration and was unable to complete your request.',
        506 => 'A variant for the requested resource <code>%U%</code> is itself a negotiable resource. This indicates a configuration error.',
        507 => 'The method could not be performed.  There is insufficient free space left in your storage allocation.',
        510 => 'A mandatory extension policy in the request is not accepted by the server for this resource.',
    ];

    // Get the Status Code
    if (Request::hasVar('REDIRECT_STATUS', 'SERVER') && (200 != $_SERVER['REDIRECT_STATUS'])) {
        $sc = $_SERVER['REDIRECT_STATUS'];

The assignment to $sc is dead and can be removed.

    } elseif (Request::hasVar('REDIRECT_REDIRECT_STATUS', 'SERVER') && (200 != $_SERVER['REDIRECT_REDIRECT_STATUS'])) {
        $sc = $_SERVER['REDIRECT_REDIRECT_STATUS'];
    }
    $sc = ($_GET['error'] ?? 404);

    $sc = abs($sc);

    // Redirect to server home if called directly or if status is under 400
    if (((isset($_SERVER['REDIRECT_STATUS']) && 200 == $_SERVER['REDIRECT_STATUS']) && (3 == floor($sc / 100)))
        || (!isset($_GET['error']) && 200 == $_SERVER['REDIRECT_STATUS'])) {
        @header("Location: http://{$_SERVER['SERVER_NAME']}", 1, 302);

Are you sure the usage of header('Location: http://'.$_SERVER['SERVER_NAME'], 1, 302) is correct as it seems to always return null.

It seems like you do not handle an error condition for header(). This can introduce security issues, and is generally not recommended.

        exit();

Using exit here is not recommended.

    }

    // Check range of code or issue 500
    if (($sc < 200) || ($sc > 599)) {
        $sc = 500;
    }

    // Check for valid protocols or else issue 505
    if (!in_array($_SERVER['SERVER_PROTOCOL'], ['HTTP/1.0', 'HTTP/1.1', 'HTTP/0.9'])) {
        $sc = 505;
    }

    // Get the status reason
    $reason = ($status_reason[$sc] ?? '');

    // Get the status message
    $msg = (isset($status_msg[$sc]) ? str_replace('%U%', htmlspecialchars(strip_tags(stripslashes($_SERVER['REQUEST_URI'])), ENT_QUOTES | ENT_HTML5), $status_msg[$sc]) : 'Error');

    // issue optimized headers (optimized for your server)
    @header("{$_SERVER['SERVER_PROTOCOL']} {$sc} {$reason}", 1, $sc);

It seems like $sc can also be of type double; however, parameter $response_code of header() does only seem to accept integer, maybe add an additional type check?

Are you sure the usage of header($_SERVER['SERVER_PROTOCOL'].' '.$sc.' '.$reason, 1, $sc) is correct as it seems to always return null.

    if ('cgi-fcgi' !== @php_sapi_name()) {
        @header("Status: {$sc} {$reason}", 1, $sc);

Are you sure the usage of header('Status: '.$sc.' '.$reason, 1, $sc) is correct as it seems to always return null.

    }

    // A very small footprint for certain types of 4xx class errors and all 5xx class errors
    if (in_array($sc, [400, 403, 405]) || (5 == floor($sc / 100))) {
        @header('Connection: close', 1);

Are you sure the usage of header('Connection: close', 1) is correct as it seems to always return null.

        if (405 == $sc) {
            @header('Allow: GET,HEAD,POST,OPTIONS', 1, 405);

Are you sure the usage of header('Allow: GET,HEAD,POST,OPTIONS', 1, 405) is correct as it seems to always return null.

        }
    }

    echo "<!DOCTYPE HTML>\n<html>";
    echo "<head>\n<title>{$sc} {$reason}</title>\n<h1>{$reason}</h1>\n<p>{$msg}<br>\n</p>\n";
}