PDF::fixImagesPaths()

Complexity

Conditions	16
Paths	29

Size

Total Lines	107
Code Lines	64

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
    private static function fixImagesPaths($documentHtml, array $courseInfo, $dirName = '')
    {
        $documentHtml = '<?xml encoding="utf-8" ?>'.$documentHtml;
        $doc = new DOMDocument();
        @$doc->loadHTML($documentHtml);

It seems like you do not handle an error condition for loadHTML(). This can introduce security issues, and is generally not recommended.

        $elements = $doc->getElementsByTagName('img');

        if (empty($elements)) {
            return $doc->saveHTML();
        }

        $protocol = api_get_protocol();
        $sysCodePath = api_get_path(SYS_CODE_PATH);
        $sysCoursePath = api_get_path(SYS_COURSE_PATH);
        $sysUploadPath = api_get_path(SYS_UPLOAD_PATH);

        $documentPath = $courseInfo ? $sysCoursePath.$courseInfo['path'].'/document/' : '';

        $notFoundImagePath = Display::return_icon(
            'closed-circle.png',
            get_lang('FileNotFound'),
            [],
            ICON_SIZE_TINY,
            false,
            true
        );

        /** @var DOMElement $element */
        foreach ($elements as $element) {
            $src = $element->getAttribute('src');
            $src = trim($src);

            if (api_filename_has_blacklisted_stream_wrapper($src)) {
                $element->setAttribute('src', $notFoundImagePath);
                continue;
            }

            if (strpos($src, $protocol) !== false) {
                continue;
            }

            // It's a reference to a file in the system, do not change it
            if (file_exists($src)) {
                continue;
            }

            if (strpos($src, '/main/default_course_document') === 0) {
                $element->setAttribute(
                    'src',
                    str_replace('/main/default_course_document', $sysCodePath.'default_course_document', $src)
                );
                continue;
            }

            if (strpos($src, '/main/img') === 0) {
                $element->setAttribute(
                    'src',
                    str_replace('/main/img/', $sysCodePath.'img/', $src)
                );
                continue;
            }

            if (strpos($src, '/app/upload/') === 0) {
                $element->setAttribute(
                    'src',
                    str_replace('/app/upload/', $sysUploadPath, $src)
                );
                continue;
            }

            if (empty($courseInfo)) {
                continue;
            }

            if (api_get_path(REL_PATH) != '/') {
                $oldSrcFixed = str_replace(
                    api_get_path(REL_PATH).'courses/'.$courseInfo['path'].'/document/',
                    '',
                    $src
                );

                // Try with the dirname if exists
                if ($oldSrcFixed == $src) {
                    if (file_exists($dirName.'/'.$src)) {
                        $documentPath = '';
                        $oldSrcFixed = $dirName.'/'.$src;
                    }
                }
            } else {
                if (strpos($src, 'courses/'.$courseInfo['path'].'/document/') !== false) {
                    $oldSrcFixed = str_replace('courses/'.$courseInfo['path'].'/document/', '', $src);
                } else {
                    // Try with the dirname if exists
                    $documentPath = '';
                    if (file_exists($dirName.'/'.$src)) {
                        $oldSrcFixed = $dirName.'/'.$src;
                    } else {
                        $oldSrcFixed = $src;
                    }
                }
            }

            $element->setAttribute('src', $documentPath.$oldSrcFixed);
        }

        return $doc->saveHTML();
    }