checkCourseScriptCreation()

Complexity

Conditions	22
Paths	147

Size

Total Lines	86
Code Lines	53

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
function checkCourseScriptCreation(
    $course_dir,
    $course_attempt_name,
    $file
) {
    $output = false;
    //Write in file
    $file_name = $course_dir.'/'.$file;
    $content = '123';

    if (is_writable($file_name)) {
        if ($handler = @fopen($file_name, 'w')) {
            //write content
            if (fwrite($handler, $content)) {
                $sock_errno = '';
                $sock_errmsg = '';
                $url = api_get_path(WEB_PATH).'app/courses/'.$course_attempt_name.'/'.$file;

                $parsed_url = parse_url($url);
                //$scheme = isset($parsedUrl['scheme']) ? $parsedUrl['scheme'] : ''; //http
                $host = isset($parsed_url['host']) ? $parsed_url['host'] : '';
                // Patch if the host is the default host and is used through
                // the IP address (sometimes the host is not taken correctly
                // in this case)
                if (empty($host) && !empty($_SERVER['HTTP_HOST'])) {
                    $host = $_SERVER['HTTP_HOST'];
                    $url = preg_replace('#:///#', '://'.$host.'/', $url);
                }
                $path = isset($parsed_url['path']) ? $parsed_url['path'] : '/';
                $port = '';
                $scheme = '';
                switch ($parsed_url['scheme']) {
                    case 'https':
                        $scheme = 'ssl://';
                        $port = 443;
                        break;
                    case 'http':
                    default:
                        $scheme = '';
                        $port = 80;
                }

                //Check fsockopen (not sure it works with https). If that is your case, you might want to try the
                // suggestion at https://support.chamilo.org/issues/8260#note-3 (although it ignores SSL peer checks)
                if ($fp = @fsockopen(str_replace('http://', $scheme, $url), $port, $sock_errno, $sock_errmsg, 60)) {
                    $out = "GET $path HTTP/1.1\r\n";
                    $out .= "Host: $host\r\n";
                    $out .= "Connection: Close\r\n\r\n";

                    fwrite($fp, $out);
                    while (!feof($fp)) {
                        $result = str_replace("\r\n", '', fgets($fp, 128));
                        if (!empty($result) && $result == '123') {
                            $output = true;
                        }
                    }
                    fclose($fp);
                } elseif (ini_get('allow_url_fopen')) {
                    // Check allow_url_fopen
                    if ($fp = @fopen($url, 'r')) {
                        while ($result = fgets($fp, 1024)) {
                            if (!empty($result) && $result == '123') {
                                $output = true;
                            }
                        }
                        fclose($fp);
                    }
                } elseif (function_exists('curl_init')) {
                    // Check if has support for cURL
                    $ch = curl_init();
                    curl_setopt($ch, CURLOPT_HEADER, 0);
                    curl_setopt($ch, CURLOPT_URL, $url);
                    //curl_setopt($ch, CURLOPT_TIMEOUT, 30);
                    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
                    $result = curl_exec($ch);
                    if (!empty($result) && $result == '123') {
                        $output = true;
                    }
                    curl_close($ch);
                }
            }
            @fclose($handler);

It seems like you do not handle an error condition for fclose(). This can introduce security issues, and is generally not recommended.

        }
    }

    return $output;
}