@@ -38,103 +38,103 @@ |
||
38 | 38 | * @since 4.0 |
39 | 39 | */ |
40 | 40 | if (function_exists('espresso_version')) { |
41 | - if (! function_exists('espresso_duplicate_plugin_error')) { |
|
42 | - /** |
|
43 | - * espresso_duplicate_plugin_error |
|
44 | - * displays if more than one version of EE is activated at the same time |
|
45 | - */ |
|
46 | - function espresso_duplicate_plugin_error() |
|
47 | - { |
|
48 | - ?> |
|
41 | + if (! function_exists('espresso_duplicate_plugin_error')) { |
|
42 | + /** |
|
43 | + * espresso_duplicate_plugin_error |
|
44 | + * displays if more than one version of EE is activated at the same time |
|
45 | + */ |
|
46 | + function espresso_duplicate_plugin_error() |
|
47 | + { |
|
48 | + ?> |
|
49 | 49 | <div class="error"> |
50 | 50 | <p> |
51 | 51 | <?php |
52 | - echo esc_html__( |
|
53 | - 'Can not run multiple versions of Event Espresso! One version has been automatically deactivated. Please verify that you have the correct version you want still active.', |
|
54 | - 'event_espresso' |
|
55 | - ); ?> |
|
52 | + echo esc_html__( |
|
53 | + 'Can not run multiple versions of Event Espresso! One version has been automatically deactivated. Please verify that you have the correct version you want still active.', |
|
54 | + 'event_espresso' |
|
55 | + ); ?> |
|
56 | 56 | </p> |
57 | 57 | </div> |
58 | 58 | <?php |
59 | - espresso_deactivate_plugin(plugin_basename(__FILE__)); |
|
60 | - } |
|
61 | - } |
|
62 | - add_action('admin_notices', 'espresso_duplicate_plugin_error', 1); |
|
59 | + espresso_deactivate_plugin(plugin_basename(__FILE__)); |
|
60 | + } |
|
61 | + } |
|
62 | + add_action('admin_notices', 'espresso_duplicate_plugin_error', 1); |
|
63 | 63 | } else { |
64 | - define('EE_MIN_PHP_VER_REQUIRED', '5.4.0'); |
|
65 | - if (! version_compare(PHP_VERSION, EE_MIN_PHP_VER_REQUIRED, '>=')) { |
|
66 | - /** |
|
67 | - * espresso_minimum_php_version_error |
|
68 | - * |
|
69 | - * @return void |
|
70 | - */ |
|
71 | - function espresso_minimum_php_version_error() |
|
72 | - { |
|
73 | - ?> |
|
64 | + define('EE_MIN_PHP_VER_REQUIRED', '5.4.0'); |
|
65 | + if (! version_compare(PHP_VERSION, EE_MIN_PHP_VER_REQUIRED, '>=')) { |
|
66 | + /** |
|
67 | + * espresso_minimum_php_version_error |
|
68 | + * |
|
69 | + * @return void |
|
70 | + */ |
|
71 | + function espresso_minimum_php_version_error() |
|
72 | + { |
|
73 | + ?> |
|
74 | 74 | <div class="error"> |
75 | 75 | <p> |
76 | 76 | <?php |
77 | - printf( |
|
78 | - esc_html__( |
|
79 | - 'We\'re sorry, but Event Espresso requires PHP version %1$s or greater in order to operate. You are currently running version %2$s.%3$sIn order to update your version of PHP, you will need to contact your current hosting provider.%3$sFor information on stable PHP versions, please go to %4$s.', |
|
80 | - 'event_espresso' |
|
81 | - ), |
|
82 | - EE_MIN_PHP_VER_REQUIRED, |
|
83 | - PHP_VERSION, |
|
84 | - '<br/>', |
|
85 | - '<a href="http://php.net/downloads.php">http://php.net/downloads.php</a>' |
|
86 | - ); |
|
87 | - ?> |
|
77 | + printf( |
|
78 | + esc_html__( |
|
79 | + 'We\'re sorry, but Event Espresso requires PHP version %1$s or greater in order to operate. You are currently running version %2$s.%3$sIn order to update your version of PHP, you will need to contact your current hosting provider.%3$sFor information on stable PHP versions, please go to %4$s.', |
|
80 | + 'event_espresso' |
|
81 | + ), |
|
82 | + EE_MIN_PHP_VER_REQUIRED, |
|
83 | + PHP_VERSION, |
|
84 | + '<br/>', |
|
85 | + '<a href="http://php.net/downloads.php">http://php.net/downloads.php</a>' |
|
86 | + ); |
|
87 | + ?> |
|
88 | 88 | </p> |
89 | 89 | </div> |
90 | 90 | <?php |
91 | - espresso_deactivate_plugin(plugin_basename(__FILE__)); |
|
92 | - } |
|
91 | + espresso_deactivate_plugin(plugin_basename(__FILE__)); |
|
92 | + } |
|
93 | 93 | |
94 | - add_action('admin_notices', 'espresso_minimum_php_version_error', 1); |
|
95 | - } else { |
|
96 | - define('EVENT_ESPRESSO_MAIN_FILE', __FILE__); |
|
97 | - /** |
|
98 | - * espresso_version |
|
99 | - * Returns the plugin version |
|
100 | - * |
|
101 | - * @return string |
|
102 | - */ |
|
103 | - function espresso_version() |
|
104 | - { |
|
105 | - return apply_filters('FHEE__espresso__espresso_version', '4.9.68.rc.000'); |
|
106 | - } |
|
94 | + add_action('admin_notices', 'espresso_minimum_php_version_error', 1); |
|
95 | + } else { |
|
96 | + define('EVENT_ESPRESSO_MAIN_FILE', __FILE__); |
|
97 | + /** |
|
98 | + * espresso_version |
|
99 | + * Returns the plugin version |
|
100 | + * |
|
101 | + * @return string |
|
102 | + */ |
|
103 | + function espresso_version() |
|
104 | + { |
|
105 | + return apply_filters('FHEE__espresso__espresso_version', '4.9.68.rc.000'); |
|
106 | + } |
|
107 | 107 | |
108 | - /** |
|
109 | - * espresso_plugin_activation |
|
110 | - * adds a wp-option to indicate that EE has been activated via the WP admin plugins page |
|
111 | - */ |
|
112 | - function espresso_plugin_activation() |
|
113 | - { |
|
114 | - update_option('ee_espresso_activation', true); |
|
115 | - } |
|
108 | + /** |
|
109 | + * espresso_plugin_activation |
|
110 | + * adds a wp-option to indicate that EE has been activated via the WP admin plugins page |
|
111 | + */ |
|
112 | + function espresso_plugin_activation() |
|
113 | + { |
|
114 | + update_option('ee_espresso_activation', true); |
|
115 | + } |
|
116 | 116 | |
117 | - register_activation_hook(EVENT_ESPRESSO_MAIN_FILE, 'espresso_plugin_activation'); |
|
117 | + register_activation_hook(EVENT_ESPRESSO_MAIN_FILE, 'espresso_plugin_activation'); |
|
118 | 118 | |
119 | - require_once __DIR__ . '/core/bootstrap_espresso.php'; |
|
120 | - bootstrap_espresso(); |
|
121 | - } |
|
119 | + require_once __DIR__ . '/core/bootstrap_espresso.php'; |
|
120 | + bootstrap_espresso(); |
|
121 | + } |
|
122 | 122 | } |
123 | 123 | if (! function_exists('espresso_deactivate_plugin')) { |
124 | - /** |
|
125 | - * deactivate_plugin |
|
126 | - * usage: espresso_deactivate_plugin( plugin_basename( __FILE__ )); |
|
127 | - * |
|
128 | - * @access public |
|
129 | - * @param string $plugin_basename - the results of plugin_basename( __FILE__ ) for the plugin's main file |
|
130 | - * @return void |
|
131 | - */ |
|
132 | - function espresso_deactivate_plugin($plugin_basename = '') |
|
133 | - { |
|
134 | - if (! function_exists('deactivate_plugins')) { |
|
135 | - require_once ABSPATH . 'wp-admin/includes/plugin.php'; |
|
136 | - } |
|
137 | - unset($_GET['activate'], $_REQUEST['activate']); |
|
138 | - deactivate_plugins($plugin_basename); |
|
139 | - } |
|
124 | + /** |
|
125 | + * deactivate_plugin |
|
126 | + * usage: espresso_deactivate_plugin( plugin_basename( __FILE__ )); |
|
127 | + * |
|
128 | + * @access public |
|
129 | + * @param string $plugin_basename - the results of plugin_basename( __FILE__ ) for the plugin's main file |
|
130 | + * @return void |
|
131 | + */ |
|
132 | + function espresso_deactivate_plugin($plugin_basename = '') |
|
133 | + { |
|
134 | + if (! function_exists('deactivate_plugins')) { |
|
135 | + require_once ABSPATH . 'wp-admin/includes/plugin.php'; |
|
136 | + } |
|
137 | + unset($_GET['activate'], $_REQUEST['activate']); |
|
138 | + deactivate_plugins($plugin_basename); |
|
139 | + } |
|
140 | 140 | } |
@@ -23,1254 +23,1254 @@ discard block |
||
23 | 23 | class EE_Session implements SessionIdentifierInterface |
24 | 24 | { |
25 | 25 | |
26 | - const session_id_prefix = 'ee_ssn_'; |
|
27 | - |
|
28 | - const hash_check_prefix = 'ee_shc_'; |
|
29 | - |
|
30 | - const OPTION_NAME_SETTINGS = 'ee_session_settings'; |
|
31 | - |
|
32 | - const STATUS_CLOSED = 0; |
|
33 | - |
|
34 | - const STATUS_OPEN = 1; |
|
35 | - |
|
36 | - /** |
|
37 | - * instance of the EE_Session object |
|
38 | - * |
|
39 | - * @var EE_Session |
|
40 | - */ |
|
41 | - private static $_instance; |
|
42 | - |
|
43 | - /** |
|
44 | - * @var CacheStorageInterface $cache_storage |
|
45 | - */ |
|
46 | - protected $cache_storage; |
|
47 | - |
|
48 | - /** |
|
49 | - * EE_Encryption object |
|
50 | - * |
|
51 | - * @var EE_Encryption |
|
52 | - */ |
|
53 | - protected $encryption; |
|
54 | - |
|
55 | - /** |
|
56 | - * the session id |
|
57 | - * |
|
58 | - * @var string |
|
59 | - */ |
|
60 | - private $_sid; |
|
61 | - |
|
62 | - /** |
|
63 | - * session id salt |
|
64 | - * |
|
65 | - * @var string |
|
66 | - */ |
|
67 | - private $_sid_salt; |
|
68 | - |
|
69 | - /** |
|
70 | - * session data |
|
71 | - * |
|
72 | - * @var array |
|
73 | - */ |
|
74 | - private $_session_data = array(); |
|
75 | - |
|
76 | - /** |
|
77 | - * how long an EE session lasts |
|
78 | - * default session lifespan of 1 hour (for not so instant IPNs) |
|
79 | - * |
|
80 | - * @var SessionLifespan $session_lifespan |
|
81 | - */ |
|
82 | - private $session_lifespan; |
|
83 | - |
|
84 | - /** |
|
85 | - * session expiration time as Unix timestamp in GMT |
|
86 | - * |
|
87 | - * @var int |
|
88 | - */ |
|
89 | - private $_expiration; |
|
90 | - |
|
91 | - /** |
|
92 | - * whether or not session has expired at some point |
|
93 | - * |
|
94 | - * @var boolean |
|
95 | - */ |
|
96 | - private $_expired = false; |
|
97 | - |
|
98 | - /** |
|
99 | - * current time as Unix timestamp in GMT |
|
100 | - * |
|
101 | - * @var int |
|
102 | - */ |
|
103 | - private $_time; |
|
104 | - |
|
105 | - /** |
|
106 | - * whether to encrypt session data |
|
107 | - * |
|
108 | - * @var bool |
|
109 | - */ |
|
110 | - private $_use_encryption; |
|
111 | - |
|
112 | - /** |
|
113 | - * well... according to the server... |
|
114 | - * |
|
115 | - * @var null |
|
116 | - */ |
|
117 | - private $_user_agent; |
|
118 | - |
|
119 | - /** |
|
120 | - * do you really trust the server ? |
|
121 | - * |
|
122 | - * @var null |
|
123 | - */ |
|
124 | - private $_ip_address; |
|
125 | - |
|
126 | - /** |
|
127 | - * current WP user_id |
|
128 | - * |
|
129 | - * @var null |
|
130 | - */ |
|
131 | - private $_wp_user_id; |
|
132 | - |
|
133 | - /** |
|
134 | - * array for defining default session vars |
|
135 | - * |
|
136 | - * @var array |
|
137 | - */ |
|
138 | - private $_default_session_vars = array( |
|
139 | - 'id' => null, |
|
140 | - 'user_id' => null, |
|
141 | - 'ip_address' => null, |
|
142 | - 'user_agent' => null, |
|
143 | - 'init_access' => null, |
|
144 | - 'last_access' => null, |
|
145 | - 'expiration' => null, |
|
146 | - 'pages_visited' => array(), |
|
147 | - ); |
|
148 | - |
|
149 | - /** |
|
150 | - * timestamp for when last garbage collection cycle was performed |
|
151 | - * |
|
152 | - * @var int $_last_gc |
|
153 | - */ |
|
154 | - private $_last_gc; |
|
155 | - |
|
156 | - /** |
|
157 | - * @var RequestInterface $request |
|
158 | - */ |
|
159 | - protected $request; |
|
160 | - |
|
161 | - /** |
|
162 | - * whether session is active or not |
|
163 | - * |
|
164 | - * @var int $status |
|
165 | - */ |
|
166 | - private $status = EE_Session::STATUS_CLOSED; |
|
167 | - |
|
168 | - |
|
169 | - /** |
|
170 | - * @singleton method used to instantiate class object |
|
171 | - * @param CacheStorageInterface $cache_storage |
|
172 | - * @param SessionLifespan|null $lifespan |
|
173 | - * @param RequestInterface $request |
|
174 | - * @param EE_Encryption $encryption |
|
175 | - * @return EE_Session |
|
176 | - * @throws InvalidArgumentException |
|
177 | - * @throws InvalidDataTypeException |
|
178 | - * @throws InvalidInterfaceException |
|
179 | - */ |
|
180 | - public static function instance( |
|
181 | - CacheStorageInterface $cache_storage = null, |
|
182 | - SessionLifespan $lifespan = null, |
|
183 | - RequestInterface $request = null, |
|
184 | - EE_Encryption $encryption = null |
|
185 | - ) { |
|
186 | - // check if class object is instantiated |
|
187 | - // session loading is turned ON by default, but prior to the init hook, can be turned back OFF via: |
|
188 | - // add_filter( 'FHEE_load_EE_Session', '__return_false' ); |
|
189 | - if (! self::$_instance instanceof EE_Session && apply_filters('FHEE_load_EE_Session', true)) { |
|
190 | - self::$_instance = new self( |
|
191 | - $cache_storage, |
|
192 | - $lifespan, |
|
193 | - $request, |
|
194 | - $encryption |
|
195 | - ); |
|
196 | - } |
|
197 | - return self::$_instance; |
|
198 | - } |
|
199 | - |
|
200 | - |
|
201 | - /** |
|
202 | - * protected constructor to prevent direct creation |
|
203 | - * |
|
204 | - * @param CacheStorageInterface $cache_storage |
|
205 | - * @param SessionLifespan $lifespan |
|
206 | - * @param RequestInterface $request |
|
207 | - * @param EE_Encryption $encryption |
|
208 | - * @throws InvalidArgumentException |
|
209 | - * @throws InvalidDataTypeException |
|
210 | - * @throws InvalidInterfaceException |
|
211 | - */ |
|
212 | - protected function __construct( |
|
213 | - CacheStorageInterface $cache_storage, |
|
214 | - SessionLifespan $lifespan, |
|
215 | - RequestInterface $request, |
|
216 | - EE_Encryption $encryption = null |
|
217 | - ) { |
|
218 | - // session loading is turned ON by default, |
|
219 | - // but prior to the 'AHEE__EE_System__core_loaded_and_ready' hook |
|
220 | - // (which currently fires on the init hook at priority 9), |
|
221 | - // can be turned back OFF via: add_filter( 'FHEE_load_EE_Session', '__return_false' ); |
|
222 | - if (! apply_filters('FHEE_load_EE_Session', true)) { |
|
223 | - return; |
|
224 | - } |
|
225 | - $this->session_lifespan = $lifespan; |
|
226 | - $this->request = $request; |
|
227 | - if (! defined('ESPRESSO_SESSION')) { |
|
228 | - define('ESPRESSO_SESSION', true); |
|
229 | - } |
|
230 | - // retrieve session options from db |
|
231 | - $session_settings = (array) get_option(EE_Session::OPTION_NAME_SETTINGS, array()); |
|
232 | - if (! empty($session_settings)) { |
|
233 | - // cycle though existing session options |
|
234 | - foreach ($session_settings as $var_name => $session_setting) { |
|
235 | - // set values for class properties |
|
236 | - $var_name = '_' . $var_name; |
|
237 | - $this->{$var_name} = $session_setting; |
|
238 | - } |
|
239 | - } |
|
240 | - $this->cache_storage = $cache_storage; |
|
241 | - // are we using encryption? |
|
242 | - $this->_use_encryption = $encryption instanceof EE_Encryption |
|
243 | - && EE_Registry::instance()->CFG->admin->encode_session_data(); |
|
244 | - // encrypt data via: $this->encryption->encrypt(); |
|
245 | - $this->encryption = $encryption; |
|
246 | - // filter hook allows outside functions/classes/plugins to change default empty cart |
|
247 | - $extra_default_session_vars = apply_filters('FHEE__EE_Session__construct__extra_default_session_vars', array()); |
|
248 | - array_merge($this->_default_session_vars, $extra_default_session_vars); |
|
249 | - // apply default session vars |
|
250 | - $this->_set_defaults(); |
|
251 | - add_action('AHEE__EE_System__initialize', array($this, 'open_session')); |
|
252 | - // check request for 'clear_session' param |
|
253 | - add_action('AHEE__EE_Request_Handler__construct__complete', array($this, 'wp_loaded')); |
|
254 | - // once everything is all said and done, |
|
255 | - add_action('shutdown', array($this, 'update'), 100); |
|
256 | - add_action('shutdown', array($this, 'garbageCollection'), 1000); |
|
257 | - $this->configure_garbage_collection_filters(); |
|
258 | - } |
|
259 | - |
|
260 | - |
|
261 | - /** |
|
262 | - * @return bool |
|
263 | - * @throws InvalidArgumentException |
|
264 | - * @throws InvalidDataTypeException |
|
265 | - * @throws InvalidInterfaceException |
|
266 | - */ |
|
267 | - public static function isLoadedAndActive() |
|
268 | - { |
|
269 | - return did_action('AHEE__EE_System__core_loaded_and_ready') |
|
270 | - && EE_Session::instance() instanceof EE_Session |
|
271 | - && EE_Session::instance()->isActive(); |
|
272 | - } |
|
273 | - |
|
274 | - |
|
275 | - /** |
|
276 | - * @return bool |
|
277 | - */ |
|
278 | - public function isActive() |
|
279 | - { |
|
280 | - return $this->status === EE_Session::STATUS_OPEN; |
|
281 | - } |
|
282 | - |
|
283 | - |
|
284 | - /** |
|
285 | - * @return void |
|
286 | - * @throws EE_Error |
|
287 | - * @throws InvalidArgumentException |
|
288 | - * @throws InvalidDataTypeException |
|
289 | - * @throws InvalidInterfaceException |
|
290 | - * @throws InvalidSessionDataException |
|
291 | - */ |
|
292 | - public function open_session() |
|
293 | - { |
|
294 | - // check for existing session and retrieve it from db |
|
295 | - if (! $this->_espresso_session()) { |
|
296 | - // or just start a new one |
|
297 | - $this->_create_espresso_session(); |
|
298 | - } |
|
299 | - } |
|
300 | - |
|
301 | - |
|
302 | - /** |
|
303 | - * @return bool |
|
304 | - */ |
|
305 | - public function expired() |
|
306 | - { |
|
307 | - return $this->_expired; |
|
308 | - } |
|
309 | - |
|
310 | - |
|
311 | - /** |
|
312 | - * @return void |
|
313 | - */ |
|
314 | - public function reset_expired() |
|
315 | - { |
|
316 | - $this->_expired = false; |
|
317 | - } |
|
318 | - |
|
319 | - |
|
320 | - /** |
|
321 | - * @return int |
|
322 | - */ |
|
323 | - public function expiration() |
|
324 | - { |
|
325 | - return $this->_expiration; |
|
326 | - } |
|
327 | - |
|
328 | - |
|
329 | - /** |
|
330 | - * @return int |
|
331 | - */ |
|
332 | - public function extension() |
|
333 | - { |
|
334 | - return apply_filters('FHEE__EE_Session__extend_expiration__seconds_added', 10 * MINUTE_IN_SECONDS); |
|
335 | - } |
|
336 | - |
|
337 | - |
|
338 | - /** |
|
339 | - * @param int $time number of seconds to add to session expiration |
|
340 | - */ |
|
341 | - public function extend_expiration($time = 0) |
|
342 | - { |
|
343 | - $time = $time ? $time : $this->extension(); |
|
344 | - $this->_expiration += absint($time); |
|
345 | - } |
|
346 | - |
|
347 | - |
|
348 | - /** |
|
349 | - * @return int |
|
350 | - */ |
|
351 | - public function lifespan() |
|
352 | - { |
|
353 | - return $this->session_lifespan->inSeconds(); |
|
354 | - } |
|
355 | - |
|
356 | - |
|
357 | - /** |
|
358 | - * This just sets some defaults for the _session data property |
|
359 | - * |
|
360 | - * @access private |
|
361 | - * @return void |
|
362 | - */ |
|
363 | - private function _set_defaults() |
|
364 | - { |
|
365 | - // set some defaults |
|
366 | - foreach ($this->_default_session_vars as $key => $default_var) { |
|
367 | - if (is_array($default_var)) { |
|
368 | - $this->_session_data[ $key ] = array(); |
|
369 | - } else { |
|
370 | - $this->_session_data[ $key ] = ''; |
|
371 | - } |
|
372 | - } |
|
373 | - } |
|
374 | - |
|
375 | - |
|
376 | - /** |
|
377 | - * @retrieve session data |
|
378 | - * @access public |
|
379 | - * @return string |
|
380 | - */ |
|
381 | - public function id() |
|
382 | - { |
|
383 | - return $this->_sid; |
|
384 | - } |
|
385 | - |
|
386 | - |
|
387 | - /** |
|
388 | - * @param \EE_Cart $cart |
|
389 | - * @return bool |
|
390 | - */ |
|
391 | - public function set_cart(EE_Cart $cart) |
|
392 | - { |
|
393 | - $this->_session_data['cart'] = $cart; |
|
394 | - return true; |
|
395 | - } |
|
396 | - |
|
397 | - |
|
398 | - /** |
|
399 | - * reset_cart |
|
400 | - */ |
|
401 | - public function reset_cart() |
|
402 | - { |
|
403 | - do_action('AHEE__EE_Session__reset_cart__before_reset', $this); |
|
404 | - $this->_session_data['cart'] = null; |
|
405 | - } |
|
406 | - |
|
407 | - |
|
408 | - /** |
|
409 | - * @return \EE_Cart |
|
410 | - */ |
|
411 | - public function cart() |
|
412 | - { |
|
413 | - return isset($this->_session_data['cart']) && $this->_session_data['cart'] instanceof EE_Cart |
|
414 | - ? $this->_session_data['cart'] |
|
415 | - : null; |
|
416 | - } |
|
417 | - |
|
418 | - |
|
419 | - /** |
|
420 | - * @param \EE_Checkout $checkout |
|
421 | - * @return bool |
|
422 | - */ |
|
423 | - public function set_checkout(EE_Checkout $checkout) |
|
424 | - { |
|
425 | - $this->_session_data['checkout'] = $checkout; |
|
426 | - return true; |
|
427 | - } |
|
428 | - |
|
429 | - |
|
430 | - /** |
|
431 | - * reset_checkout |
|
432 | - */ |
|
433 | - public function reset_checkout() |
|
434 | - { |
|
435 | - do_action('AHEE__EE_Session__reset_checkout__before_reset', $this); |
|
436 | - $this->_session_data['checkout'] = null; |
|
437 | - } |
|
438 | - |
|
439 | - |
|
440 | - /** |
|
441 | - * @return \EE_Checkout |
|
442 | - */ |
|
443 | - public function checkout() |
|
444 | - { |
|
445 | - return isset($this->_session_data['checkout']) && $this->_session_data['checkout'] instanceof EE_Checkout |
|
446 | - ? $this->_session_data['checkout'] |
|
447 | - : null; |
|
448 | - } |
|
449 | - |
|
450 | - |
|
451 | - /** |
|
452 | - * @param \EE_Transaction $transaction |
|
453 | - * @return bool |
|
454 | - * @throws EE_Error |
|
455 | - */ |
|
456 | - public function set_transaction(EE_Transaction $transaction) |
|
457 | - { |
|
458 | - // first remove the session from the transaction before we save the transaction in the session |
|
459 | - $transaction->set_txn_session_data(null); |
|
460 | - $this->_session_data['transaction'] = $transaction; |
|
461 | - return true; |
|
462 | - } |
|
463 | - |
|
464 | - |
|
465 | - /** |
|
466 | - * reset_transaction |
|
467 | - */ |
|
468 | - public function reset_transaction() |
|
469 | - { |
|
470 | - do_action('AHEE__EE_Session__reset_transaction__before_reset', $this); |
|
471 | - $this->_session_data['transaction'] = null; |
|
472 | - } |
|
473 | - |
|
474 | - |
|
475 | - /** |
|
476 | - * @return \EE_Transaction |
|
477 | - */ |
|
478 | - public function transaction() |
|
479 | - { |
|
480 | - return isset($this->_session_data['transaction']) |
|
481 | - && $this->_session_data['transaction'] instanceof EE_Transaction |
|
482 | - ? $this->_session_data['transaction'] |
|
483 | - : null; |
|
484 | - } |
|
485 | - |
|
486 | - |
|
487 | - /** |
|
488 | - * retrieve session data |
|
489 | - * |
|
490 | - * @param null $key |
|
491 | - * @param bool $reset_cache |
|
492 | - * @return array |
|
493 | - */ |
|
494 | - public function get_session_data($key = null, $reset_cache = false) |
|
495 | - { |
|
496 | - if ($reset_cache) { |
|
497 | - $this->reset_cart(); |
|
498 | - $this->reset_checkout(); |
|
499 | - $this->reset_transaction(); |
|
500 | - } |
|
501 | - if (! empty($key)) { |
|
502 | - return isset($this->_session_data[ $key ]) ? $this->_session_data[ $key ] : null; |
|
503 | - } |
|
504 | - return $this->_session_data; |
|
505 | - } |
|
506 | - |
|
507 | - |
|
508 | - /** |
|
509 | - * Returns TRUE on success, FALSE on fail |
|
510 | - * |
|
511 | - * @param array $data |
|
512 | - * @return bool |
|
513 | - */ |
|
514 | - public function set_session_data($data) |
|
515 | - { |
|
516 | - // nothing ??? bad data ??? go home! |
|
517 | - if (empty($data) || ! is_array($data)) { |
|
518 | - EE_Error::add_error( |
|
519 | - esc_html__( |
|
520 | - 'No session data or invalid session data was provided.', |
|
521 | - 'event_espresso' |
|
522 | - ), |
|
523 | - __FILE__, |
|
524 | - __FUNCTION__, |
|
525 | - __LINE__ |
|
526 | - ); |
|
527 | - return false; |
|
528 | - } |
|
529 | - foreach ($data as $key => $value) { |
|
530 | - if (isset($this->_default_session_vars[ $key ])) { |
|
531 | - EE_Error::add_error( |
|
532 | - sprintf( |
|
533 | - esc_html__( |
|
534 | - 'Sorry! %s is a default session datum and can not be reset.', |
|
535 | - 'event_espresso' |
|
536 | - ), |
|
537 | - $key |
|
538 | - ), |
|
539 | - __FILE__, |
|
540 | - __FUNCTION__, |
|
541 | - __LINE__ |
|
542 | - ); |
|
543 | - return false; |
|
544 | - } |
|
545 | - $this->_session_data[ $key ] = $value; |
|
546 | - } |
|
547 | - return true; |
|
548 | - } |
|
549 | - |
|
550 | - |
|
551 | - /** |
|
552 | - * @initiate session |
|
553 | - * @access private |
|
554 | - * @return TRUE on success, FALSE on fail |
|
555 | - * @throws EE_Error |
|
556 | - * @throws InvalidArgumentException |
|
557 | - * @throws InvalidDataTypeException |
|
558 | - * @throws InvalidInterfaceException |
|
559 | - * @throws InvalidSessionDataException |
|
560 | - */ |
|
561 | - private function _espresso_session() |
|
562 | - { |
|
563 | - do_action('AHEE_log', __FILE__, __FUNCTION__, ''); |
|
564 | - // check that session has started |
|
565 | - if (session_id() === '') { |
|
566 | - // starts a new session if one doesn't already exist, or re-initiates an existing one |
|
567 | - session_start(); |
|
568 | - } |
|
569 | - $this->status = EE_Session::STATUS_OPEN; |
|
570 | - // get our modified session ID |
|
571 | - $this->_sid = $this->_generate_session_id(); |
|
572 | - // and the visitors IP |
|
573 | - $this->_ip_address = $this->request->ipAddress(); |
|
574 | - // set the "user agent" |
|
575 | - $this->_user_agent = $this->request->userAgent(); |
|
576 | - // now let's retrieve what's in the db |
|
577 | - $session_data = $this->_retrieve_session_data(); |
|
578 | - if (! empty($session_data)) { |
|
579 | - // get the current time in UTC |
|
580 | - $this->_time = $this->_time !== null ? $this->_time : time(); |
|
581 | - // and reset the session expiration |
|
582 | - $this->_expiration = isset($session_data['expiration']) |
|
583 | - ? $session_data['expiration'] |
|
584 | - : $this->_time + $this->session_lifespan->inSeconds(); |
|
585 | - } else { |
|
586 | - // set initial site access time and the session expiration |
|
587 | - $this->_set_init_access_and_expiration(); |
|
588 | - // set referer |
|
589 | - $this->_session_data['pages_visited'][ $this->_session_data['init_access'] ] = isset($_SERVER['HTTP_REFERER']) |
|
590 | - ? esc_attr($_SERVER['HTTP_REFERER']) |
|
591 | - : ''; |
|
592 | - // no previous session = go back and create one (on top of the data above) |
|
593 | - return false; |
|
594 | - } |
|
595 | - // now the user agent |
|
596 | - if ($session_data['user_agent'] !== $this->_user_agent) { |
|
597 | - return false; |
|
598 | - } |
|
599 | - // wait a minute... how old are you? |
|
600 | - if ($this->_time > $this->_expiration) { |
|
601 | - // yer too old fer me! |
|
602 | - $this->_expired = true; |
|
603 | - // wipe out everything that isn't a default session datum |
|
604 | - $this->clear_session(__CLASS__, __FUNCTION__); |
|
605 | - } |
|
606 | - // make event espresso session data available to plugin |
|
607 | - $this->_session_data = array_merge($this->_session_data, $session_data); |
|
608 | - return true; |
|
609 | - } |
|
610 | - |
|
611 | - |
|
612 | - /** |
|
613 | - * _get_session_data |
|
614 | - * Retrieves the session data, and attempts to correct any encoding issues that can occur due to improperly setup |
|
615 | - * databases |
|
616 | - * |
|
617 | - * @return array |
|
618 | - * @throws EE_Error |
|
619 | - * @throws InvalidArgumentException |
|
620 | - * @throws InvalidSessionDataException |
|
621 | - * @throws InvalidDataTypeException |
|
622 | - * @throws InvalidInterfaceException |
|
623 | - */ |
|
624 | - protected function _retrieve_session_data() |
|
625 | - { |
|
626 | - $ssn_key = EE_Session::session_id_prefix . $this->_sid; |
|
627 | - try { |
|
628 | - // we're using WP's Transient API to store session data using the PHP session ID as the option name |
|
629 | - $session_data = $this->cache_storage->get($ssn_key, false); |
|
630 | - if (empty($session_data)) { |
|
631 | - return array(); |
|
632 | - } |
|
633 | - if (apply_filters('FHEE__EE_Session___perform_session_id_hash_check', WP_DEBUG)) { |
|
634 | - $hash_check = $this->cache_storage->get( |
|
635 | - EE_Session::hash_check_prefix . $this->_sid, |
|
636 | - false |
|
637 | - ); |
|
638 | - if ($hash_check && $hash_check !== md5($session_data)) { |
|
639 | - EE_Error::add_error( |
|
640 | - sprintf( |
|
641 | - __( |
|
642 | - 'The stored data for session %1$s failed to pass a hash check and therefore appears to be invalid.', |
|
643 | - 'event_espresso' |
|
644 | - ), |
|
645 | - EE_Session::session_id_prefix . $this->_sid |
|
646 | - ), |
|
647 | - __FILE__, |
|
648 | - __FUNCTION__, |
|
649 | - __LINE__ |
|
650 | - ); |
|
651 | - } |
|
652 | - } |
|
653 | - } catch (Exception $e) { |
|
654 | - // let's just eat that error for now and attempt to correct any corrupted data |
|
655 | - global $wpdb; |
|
656 | - $row = $wpdb->get_row( |
|
657 | - $wpdb->prepare( |
|
658 | - "SELECT option_value FROM {$wpdb->options} WHERE option_name = %s LIMIT 1", |
|
659 | - '_transient_' . $ssn_key |
|
660 | - ) |
|
661 | - ); |
|
662 | - $session_data = is_object($row) ? $row->option_value : null; |
|
663 | - if ($session_data) { |
|
664 | - $session_data = preg_replace_callback( |
|
665 | - '!s:(d+):"(.*?)";!', |
|
666 | - function ($match) { |
|
667 | - return $match[1] === strlen($match[2]) |
|
668 | - ? $match[0] |
|
669 | - : 's:' . strlen($match[2]) . ':"' . $match[2] . '";'; |
|
670 | - }, |
|
671 | - $session_data |
|
672 | - ); |
|
673 | - } |
|
674 | - $session_data = maybe_unserialize($session_data); |
|
675 | - } |
|
676 | - // in case the data is encoded... try to decode it |
|
677 | - $session_data = $this->encryption instanceof EE_Encryption |
|
678 | - ? $this->encryption->base64_string_decode($session_data) |
|
679 | - : $session_data; |
|
680 | - if (! is_array($session_data)) { |
|
681 | - try { |
|
682 | - $session_data = maybe_unserialize($session_data); |
|
683 | - } catch (Exception $e) { |
|
684 | - $msg = esc_html__( |
|
685 | - 'An error occurred while attempting to unserialize the session data.', |
|
686 | - 'event_espresso' |
|
687 | - ); |
|
688 | - $msg .= WP_DEBUG |
|
689 | - ? '<br><pre>' |
|
690 | - . print_r($session_data, true) |
|
691 | - . '</pre><br>' |
|
692 | - . $this->find_serialize_error($session_data) |
|
693 | - : ''; |
|
694 | - $this->cache_storage->delete(EE_Session::session_id_prefix . $this->_sid); |
|
695 | - throw new InvalidSessionDataException($msg, 0, $e); |
|
696 | - } |
|
697 | - } |
|
698 | - // just a check to make sure the session array is indeed an array |
|
699 | - if (! is_array($session_data)) { |
|
700 | - // no?!?! then something is wrong |
|
701 | - $msg = esc_html__( |
|
702 | - 'The session data is missing, invalid, or corrupted.', |
|
703 | - 'event_espresso' |
|
704 | - ); |
|
705 | - $msg .= WP_DEBUG |
|
706 | - ? '<br><pre>' . print_r($session_data, true) . '</pre><br>' . $this->find_serialize_error($session_data) |
|
707 | - : ''; |
|
708 | - $this->cache_storage->delete(EE_Session::session_id_prefix . $this->_sid); |
|
709 | - throw new InvalidSessionDataException($msg); |
|
710 | - } |
|
711 | - if (isset($session_data['transaction']) && absint($session_data['transaction']) !== 0) { |
|
712 | - $session_data['transaction'] = EEM_Transaction::instance()->get_one_by_ID( |
|
713 | - $session_data['transaction'] |
|
714 | - ); |
|
715 | - } |
|
716 | - return $session_data; |
|
717 | - } |
|
718 | - |
|
719 | - |
|
720 | - /** |
|
721 | - * _generate_session_id |
|
722 | - * Retrieves the PHP session id either directly from the PHP session, |
|
723 | - * or from the $_REQUEST array if it was passed in from an AJAX request. |
|
724 | - * The session id is then salted and hashed (mmm sounds tasty) |
|
725 | - * so that it can be safely used as a $_REQUEST param |
|
726 | - * |
|
727 | - * @return string |
|
728 | - */ |
|
729 | - protected function _generate_session_id() |
|
730 | - { |
|
731 | - // check if the SID was passed explicitly, otherwise get from session, then add salt and hash it to reduce length |
|
732 | - if (isset($_REQUEST['EESID'])) { |
|
733 | - $session_id = sanitize_text_field($_REQUEST['EESID']); |
|
734 | - } else { |
|
735 | - $session_id = md5(session_id() . get_current_blog_id() . $this->_get_sid_salt()); |
|
736 | - } |
|
737 | - return apply_filters('FHEE__EE_Session___generate_session_id__session_id', $session_id); |
|
738 | - } |
|
739 | - |
|
740 | - |
|
741 | - /** |
|
742 | - * _get_sid_salt |
|
743 | - * |
|
744 | - * @return string |
|
745 | - */ |
|
746 | - protected function _get_sid_salt() |
|
747 | - { |
|
748 | - // was session id salt already saved to db ? |
|
749 | - if (empty($this->_sid_salt)) { |
|
750 | - // no? then maybe use WP defined constant |
|
751 | - if (defined('AUTH_SALT')) { |
|
752 | - $this->_sid_salt = AUTH_SALT; |
|
753 | - } |
|
754 | - // if salt doesn't exist or is too short |
|
755 | - if (strlen($this->_sid_salt) < 32) { |
|
756 | - // create a new one |
|
757 | - $this->_sid_salt = wp_generate_password(64); |
|
758 | - } |
|
759 | - // and save it as a permanent session setting |
|
760 | - $this->updateSessionSettings(array('sid_salt' => $this->_sid_salt)); |
|
761 | - } |
|
762 | - return $this->_sid_salt; |
|
763 | - } |
|
764 | - |
|
765 | - |
|
766 | - /** |
|
767 | - * _set_init_access_and_expiration |
|
768 | - * |
|
769 | - * @return void |
|
770 | - */ |
|
771 | - protected function _set_init_access_and_expiration() |
|
772 | - { |
|
773 | - $this->_time = time(); |
|
774 | - $this->_expiration = $this->_time + $this->session_lifespan->inSeconds(); |
|
775 | - // set initial site access time |
|
776 | - $this->_session_data['init_access'] = $this->_time; |
|
777 | - // and the session expiration |
|
778 | - $this->_session_data['expiration'] = $this->_expiration; |
|
779 | - } |
|
780 | - |
|
781 | - |
|
782 | - /** |
|
783 | - * @update session data prior to saving to the db |
|
784 | - * @access public |
|
785 | - * @param bool $new_session |
|
786 | - * @return TRUE on success, FALSE on fail |
|
787 | - * @throws EE_Error |
|
788 | - * @throws InvalidArgumentException |
|
789 | - * @throws InvalidDataTypeException |
|
790 | - * @throws InvalidInterfaceException |
|
791 | - */ |
|
792 | - public function update($new_session = false) |
|
793 | - { |
|
794 | - $this->_session_data = $this->_session_data !== null |
|
795 | - && is_array($this->_session_data) |
|
796 | - && isset($this->_session_data['id']) |
|
797 | - ? $this->_session_data |
|
798 | - : array(); |
|
799 | - if (empty($this->_session_data)) { |
|
800 | - $this->_set_defaults(); |
|
801 | - } |
|
802 | - $session_data = array(); |
|
803 | - foreach ($this->_session_data as $key => $value) { |
|
804 | - switch ($key) { |
|
805 | - case 'id': |
|
806 | - // session ID |
|
807 | - $session_data['id'] = $this->_sid; |
|
808 | - break; |
|
809 | - case 'ip_address': |
|
810 | - // visitor ip address |
|
811 | - $session_data['ip_address'] = $this->request->ipAddress(); |
|
812 | - break; |
|
813 | - case 'user_agent': |
|
814 | - // visitor user_agent |
|
815 | - $session_data['user_agent'] = $this->_user_agent; |
|
816 | - break; |
|
817 | - case 'init_access': |
|
818 | - $session_data['init_access'] = absint($value); |
|
819 | - break; |
|
820 | - case 'last_access': |
|
821 | - // current access time |
|
822 | - $session_data['last_access'] = $this->_time; |
|
823 | - break; |
|
824 | - case 'expiration': |
|
825 | - // when the session expires |
|
826 | - $session_data['expiration'] = ! empty($this->_expiration) |
|
827 | - ? $this->_expiration |
|
828 | - : $session_data['init_access'] + $this->session_lifespan->inSeconds(); |
|
829 | - break; |
|
830 | - case 'user_id': |
|
831 | - // current user if logged in |
|
832 | - $session_data['user_id'] = $this->_wp_user_id(); |
|
833 | - break; |
|
834 | - case 'pages_visited': |
|
835 | - $page_visit = $this->_get_page_visit(); |
|
836 | - if ($page_visit) { |
|
837 | - // set pages visited where the first will be the http referrer |
|
838 | - $this->_session_data['pages_visited'][ $this->_time ] = $page_visit; |
|
839 | - // we'll only save the last 10 page visits. |
|
840 | - $session_data['pages_visited'] = array_slice($this->_session_data['pages_visited'], -10); |
|
841 | - } |
|
842 | - break; |
|
843 | - default: |
|
844 | - // carry any other data over |
|
845 | - $session_data[ $key ] = $this->_session_data[ $key ]; |
|
846 | - } |
|
847 | - } |
|
848 | - $this->_session_data = $session_data; |
|
849 | - // creating a new session does not require saving to the db just yet |
|
850 | - if (! $new_session) { |
|
851 | - // ready? let's save |
|
852 | - if ($this->_save_session_to_db()) { |
|
853 | - return true; |
|
854 | - } |
|
855 | - return false; |
|
856 | - } |
|
857 | - // meh, why not? |
|
858 | - return true; |
|
859 | - } |
|
860 | - |
|
861 | - |
|
862 | - /** |
|
863 | - * @create session data array |
|
864 | - * @access public |
|
865 | - * @return bool |
|
866 | - * @throws EE_Error |
|
867 | - * @throws InvalidArgumentException |
|
868 | - * @throws InvalidDataTypeException |
|
869 | - * @throws InvalidInterfaceException |
|
870 | - */ |
|
871 | - private function _create_espresso_session() |
|
872 | - { |
|
873 | - do_action('AHEE_log', __CLASS__, __FUNCTION__, ''); |
|
874 | - // use the update function for now with $new_session arg set to TRUE |
|
875 | - return $this->update(true) ? true : false; |
|
876 | - } |
|
877 | - |
|
878 | - /** |
|
879 | - * Detects if there is anything worth saving in the session (eg the cart is a good one, notices are pretty good |
|
880 | - * too). This is used when determining if we want to save the session or not. |
|
881 | - * @since 4.9.67.p |
|
882 | - * @return bool |
|
883 | - */ |
|
884 | - private function sessionHasStuffWorthSaving() |
|
885 | - { |
|
886 | - return $this->cart() instanceof EE_Cart |
|
887 | - || ( |
|
888 | - isset($this->_session_data['ee_notices']) |
|
889 | - && ( |
|
890 | - ! empty($this->_session_data['ee_notices']['attention']) |
|
891 | - || !empty($this->_session_data['ee_notices']['errors']) |
|
892 | - || !empty($this->_session_data['ee_notices']['success']) |
|
893 | - ) |
|
894 | - ); |
|
895 | - } |
|
896 | - /** |
|
897 | - * _save_session_to_db |
|
898 | - * |
|
899 | - * @param bool $clear_session |
|
900 | - * @return string |
|
901 | - * @throws EE_Error |
|
902 | - * @throws InvalidArgumentException |
|
903 | - * @throws InvalidDataTypeException |
|
904 | - * @throws InvalidInterfaceException |
|
905 | - */ |
|
906 | - private function _save_session_to_db($clear_session = false) |
|
907 | - { |
|
908 | - // don't save sessions for crawlers |
|
909 | - // and unless we're deleting the session data, don't save anything if there isn't a cart |
|
910 | - if ($this->request->isBot() |
|
911 | - || ( |
|
912 | - ! $clear_session |
|
913 | - && ! $this->sessionHasStuffWorthSaving() |
|
914 | - && apply_filters('FHEE__EE_Session___save_session_to_db__abort_session_save', true) |
|
915 | - ) |
|
916 | - ) { |
|
917 | - return false; |
|
918 | - } |
|
919 | - $transaction = $this->transaction(); |
|
920 | - if ($transaction instanceof EE_Transaction) { |
|
921 | - if (! $transaction->ID()) { |
|
922 | - $transaction->save(); |
|
923 | - } |
|
924 | - $this->_session_data['transaction'] = $transaction->ID(); |
|
925 | - } |
|
926 | - // then serialize all of our session data |
|
927 | - $session_data = serialize($this->_session_data); |
|
928 | - // do we need to also encode it to avoid corrupted data when saved to the db? |
|
929 | - $session_data = $this->_use_encryption |
|
930 | - ? $this->encryption->base64_string_encode($session_data) |
|
931 | - : $session_data; |
|
932 | - // maybe save hash check |
|
933 | - if (apply_filters('FHEE__EE_Session___perform_session_id_hash_check', WP_DEBUG)) { |
|
934 | - $this->cache_storage->add( |
|
935 | - EE_Session::hash_check_prefix . $this->_sid, |
|
936 | - md5($session_data), |
|
937 | - $this->session_lifespan->inSeconds() |
|
938 | - ); |
|
939 | - } |
|
940 | - // we're using the Transient API for storing session data, |
|
941 | - return $this->cache_storage->add( |
|
942 | - EE_Session::session_id_prefix . $this->_sid, |
|
943 | - $session_data, |
|
944 | - $this->session_lifespan->inSeconds() |
|
945 | - ); |
|
946 | - } |
|
947 | - |
|
948 | - |
|
949 | - /** |
|
950 | - * @get the full page request the visitor is accessing |
|
951 | - * @access public |
|
952 | - * @return string |
|
953 | - */ |
|
954 | - public function _get_page_visit() |
|
955 | - { |
|
956 | - $page_visit = home_url('/') . 'wp-admin/admin-ajax.php'; |
|
957 | - // check for request url |
|
958 | - if (isset($_SERVER['REQUEST_URI'])) { |
|
959 | - $http_host = ''; |
|
960 | - $page_id = '?'; |
|
961 | - $e_reg = ''; |
|
962 | - $request_uri = esc_url($_SERVER['REQUEST_URI']); |
|
963 | - $ru_bits = explode('?', $request_uri); |
|
964 | - $request_uri = $ru_bits[0]; |
|
965 | - // check for and grab host as well |
|
966 | - if (isset($_SERVER['HTTP_HOST'])) { |
|
967 | - $http_host = esc_url($_SERVER['HTTP_HOST']); |
|
968 | - } |
|
969 | - // check for page_id in SERVER REQUEST |
|
970 | - if (isset($_REQUEST['page_id'])) { |
|
971 | - // rebuild $e_reg without any of the extra parameters |
|
972 | - $page_id = '?page_id=' . esc_attr($_REQUEST['page_id']) . '&'; |
|
973 | - } |
|
974 | - // check for $e_reg in SERVER REQUEST |
|
975 | - if (isset($_REQUEST['ee'])) { |
|
976 | - // rebuild $e_reg without any of the extra parameters |
|
977 | - $e_reg = 'ee=' . esc_attr($_REQUEST['ee']); |
|
978 | - } |
|
979 | - $page_visit = rtrim($http_host . $request_uri . $page_id . $e_reg, '?'); |
|
980 | - } |
|
981 | - return $page_visit !== home_url('/wp-admin/admin-ajax.php') ? $page_visit : ''; |
|
982 | - } |
|
983 | - |
|
984 | - |
|
985 | - /** |
|
986 | - * @the current wp user id |
|
987 | - * @access public |
|
988 | - * @return int |
|
989 | - */ |
|
990 | - public function _wp_user_id() |
|
991 | - { |
|
992 | - // if I need to explain the following lines of code, then you shouldn't be looking at this! |
|
993 | - $this->_wp_user_id = get_current_user_id(); |
|
994 | - return $this->_wp_user_id; |
|
995 | - } |
|
996 | - |
|
997 | - |
|
998 | - /** |
|
999 | - * Clear EE_Session data |
|
1000 | - * |
|
1001 | - * @access public |
|
1002 | - * @param string $class |
|
1003 | - * @param string $function |
|
1004 | - * @return void |
|
1005 | - * @throws EE_Error |
|
1006 | - * @throws InvalidArgumentException |
|
1007 | - * @throws InvalidDataTypeException |
|
1008 | - * @throws InvalidInterfaceException |
|
1009 | - */ |
|
1010 | - public function clear_session($class = '', $function = '') |
|
1011 | - { |
|
26 | + const session_id_prefix = 'ee_ssn_'; |
|
27 | + |
|
28 | + const hash_check_prefix = 'ee_shc_'; |
|
29 | + |
|
30 | + const OPTION_NAME_SETTINGS = 'ee_session_settings'; |
|
31 | + |
|
32 | + const STATUS_CLOSED = 0; |
|
33 | + |
|
34 | + const STATUS_OPEN = 1; |
|
35 | + |
|
36 | + /** |
|
37 | + * instance of the EE_Session object |
|
38 | + * |
|
39 | + * @var EE_Session |
|
40 | + */ |
|
41 | + private static $_instance; |
|
42 | + |
|
43 | + /** |
|
44 | + * @var CacheStorageInterface $cache_storage |
|
45 | + */ |
|
46 | + protected $cache_storage; |
|
47 | + |
|
48 | + /** |
|
49 | + * EE_Encryption object |
|
50 | + * |
|
51 | + * @var EE_Encryption |
|
52 | + */ |
|
53 | + protected $encryption; |
|
54 | + |
|
55 | + /** |
|
56 | + * the session id |
|
57 | + * |
|
58 | + * @var string |
|
59 | + */ |
|
60 | + private $_sid; |
|
61 | + |
|
62 | + /** |
|
63 | + * session id salt |
|
64 | + * |
|
65 | + * @var string |
|
66 | + */ |
|
67 | + private $_sid_salt; |
|
68 | + |
|
69 | + /** |
|
70 | + * session data |
|
71 | + * |
|
72 | + * @var array |
|
73 | + */ |
|
74 | + private $_session_data = array(); |
|
75 | + |
|
76 | + /** |
|
77 | + * how long an EE session lasts |
|
78 | + * default session lifespan of 1 hour (for not so instant IPNs) |
|
79 | + * |
|
80 | + * @var SessionLifespan $session_lifespan |
|
81 | + */ |
|
82 | + private $session_lifespan; |
|
83 | + |
|
84 | + /** |
|
85 | + * session expiration time as Unix timestamp in GMT |
|
86 | + * |
|
87 | + * @var int |
|
88 | + */ |
|
89 | + private $_expiration; |
|
90 | + |
|
91 | + /** |
|
92 | + * whether or not session has expired at some point |
|
93 | + * |
|
94 | + * @var boolean |
|
95 | + */ |
|
96 | + private $_expired = false; |
|
97 | + |
|
98 | + /** |
|
99 | + * current time as Unix timestamp in GMT |
|
100 | + * |
|
101 | + * @var int |
|
102 | + */ |
|
103 | + private $_time; |
|
104 | + |
|
105 | + /** |
|
106 | + * whether to encrypt session data |
|
107 | + * |
|
108 | + * @var bool |
|
109 | + */ |
|
110 | + private $_use_encryption; |
|
111 | + |
|
112 | + /** |
|
113 | + * well... according to the server... |
|
114 | + * |
|
115 | + * @var null |
|
116 | + */ |
|
117 | + private $_user_agent; |
|
118 | + |
|
119 | + /** |
|
120 | + * do you really trust the server ? |
|
121 | + * |
|
122 | + * @var null |
|
123 | + */ |
|
124 | + private $_ip_address; |
|
125 | + |
|
126 | + /** |
|
127 | + * current WP user_id |
|
128 | + * |
|
129 | + * @var null |
|
130 | + */ |
|
131 | + private $_wp_user_id; |
|
132 | + |
|
133 | + /** |
|
134 | + * array for defining default session vars |
|
135 | + * |
|
136 | + * @var array |
|
137 | + */ |
|
138 | + private $_default_session_vars = array( |
|
139 | + 'id' => null, |
|
140 | + 'user_id' => null, |
|
141 | + 'ip_address' => null, |
|
142 | + 'user_agent' => null, |
|
143 | + 'init_access' => null, |
|
144 | + 'last_access' => null, |
|
145 | + 'expiration' => null, |
|
146 | + 'pages_visited' => array(), |
|
147 | + ); |
|
148 | + |
|
149 | + /** |
|
150 | + * timestamp for when last garbage collection cycle was performed |
|
151 | + * |
|
152 | + * @var int $_last_gc |
|
153 | + */ |
|
154 | + private $_last_gc; |
|
155 | + |
|
156 | + /** |
|
157 | + * @var RequestInterface $request |
|
158 | + */ |
|
159 | + protected $request; |
|
160 | + |
|
161 | + /** |
|
162 | + * whether session is active or not |
|
163 | + * |
|
164 | + * @var int $status |
|
165 | + */ |
|
166 | + private $status = EE_Session::STATUS_CLOSED; |
|
167 | + |
|
168 | + |
|
169 | + /** |
|
170 | + * @singleton method used to instantiate class object |
|
171 | + * @param CacheStorageInterface $cache_storage |
|
172 | + * @param SessionLifespan|null $lifespan |
|
173 | + * @param RequestInterface $request |
|
174 | + * @param EE_Encryption $encryption |
|
175 | + * @return EE_Session |
|
176 | + * @throws InvalidArgumentException |
|
177 | + * @throws InvalidDataTypeException |
|
178 | + * @throws InvalidInterfaceException |
|
179 | + */ |
|
180 | + public static function instance( |
|
181 | + CacheStorageInterface $cache_storage = null, |
|
182 | + SessionLifespan $lifespan = null, |
|
183 | + RequestInterface $request = null, |
|
184 | + EE_Encryption $encryption = null |
|
185 | + ) { |
|
186 | + // check if class object is instantiated |
|
187 | + // session loading is turned ON by default, but prior to the init hook, can be turned back OFF via: |
|
188 | + // add_filter( 'FHEE_load_EE_Session', '__return_false' ); |
|
189 | + if (! self::$_instance instanceof EE_Session && apply_filters('FHEE_load_EE_Session', true)) { |
|
190 | + self::$_instance = new self( |
|
191 | + $cache_storage, |
|
192 | + $lifespan, |
|
193 | + $request, |
|
194 | + $encryption |
|
195 | + ); |
|
196 | + } |
|
197 | + return self::$_instance; |
|
198 | + } |
|
199 | + |
|
200 | + |
|
201 | + /** |
|
202 | + * protected constructor to prevent direct creation |
|
203 | + * |
|
204 | + * @param CacheStorageInterface $cache_storage |
|
205 | + * @param SessionLifespan $lifespan |
|
206 | + * @param RequestInterface $request |
|
207 | + * @param EE_Encryption $encryption |
|
208 | + * @throws InvalidArgumentException |
|
209 | + * @throws InvalidDataTypeException |
|
210 | + * @throws InvalidInterfaceException |
|
211 | + */ |
|
212 | + protected function __construct( |
|
213 | + CacheStorageInterface $cache_storage, |
|
214 | + SessionLifespan $lifespan, |
|
215 | + RequestInterface $request, |
|
216 | + EE_Encryption $encryption = null |
|
217 | + ) { |
|
218 | + // session loading is turned ON by default, |
|
219 | + // but prior to the 'AHEE__EE_System__core_loaded_and_ready' hook |
|
220 | + // (which currently fires on the init hook at priority 9), |
|
221 | + // can be turned back OFF via: add_filter( 'FHEE_load_EE_Session', '__return_false' ); |
|
222 | + if (! apply_filters('FHEE_load_EE_Session', true)) { |
|
223 | + return; |
|
224 | + } |
|
225 | + $this->session_lifespan = $lifespan; |
|
226 | + $this->request = $request; |
|
227 | + if (! defined('ESPRESSO_SESSION')) { |
|
228 | + define('ESPRESSO_SESSION', true); |
|
229 | + } |
|
230 | + // retrieve session options from db |
|
231 | + $session_settings = (array) get_option(EE_Session::OPTION_NAME_SETTINGS, array()); |
|
232 | + if (! empty($session_settings)) { |
|
233 | + // cycle though existing session options |
|
234 | + foreach ($session_settings as $var_name => $session_setting) { |
|
235 | + // set values for class properties |
|
236 | + $var_name = '_' . $var_name; |
|
237 | + $this->{$var_name} = $session_setting; |
|
238 | + } |
|
239 | + } |
|
240 | + $this->cache_storage = $cache_storage; |
|
241 | + // are we using encryption? |
|
242 | + $this->_use_encryption = $encryption instanceof EE_Encryption |
|
243 | + && EE_Registry::instance()->CFG->admin->encode_session_data(); |
|
244 | + // encrypt data via: $this->encryption->encrypt(); |
|
245 | + $this->encryption = $encryption; |
|
246 | + // filter hook allows outside functions/classes/plugins to change default empty cart |
|
247 | + $extra_default_session_vars = apply_filters('FHEE__EE_Session__construct__extra_default_session_vars', array()); |
|
248 | + array_merge($this->_default_session_vars, $extra_default_session_vars); |
|
249 | + // apply default session vars |
|
250 | + $this->_set_defaults(); |
|
251 | + add_action('AHEE__EE_System__initialize', array($this, 'open_session')); |
|
252 | + // check request for 'clear_session' param |
|
253 | + add_action('AHEE__EE_Request_Handler__construct__complete', array($this, 'wp_loaded')); |
|
254 | + // once everything is all said and done, |
|
255 | + add_action('shutdown', array($this, 'update'), 100); |
|
256 | + add_action('shutdown', array($this, 'garbageCollection'), 1000); |
|
257 | + $this->configure_garbage_collection_filters(); |
|
258 | + } |
|
259 | + |
|
260 | + |
|
261 | + /** |
|
262 | + * @return bool |
|
263 | + * @throws InvalidArgumentException |
|
264 | + * @throws InvalidDataTypeException |
|
265 | + * @throws InvalidInterfaceException |
|
266 | + */ |
|
267 | + public static function isLoadedAndActive() |
|
268 | + { |
|
269 | + return did_action('AHEE__EE_System__core_loaded_and_ready') |
|
270 | + && EE_Session::instance() instanceof EE_Session |
|
271 | + && EE_Session::instance()->isActive(); |
|
272 | + } |
|
273 | + |
|
274 | + |
|
275 | + /** |
|
276 | + * @return bool |
|
277 | + */ |
|
278 | + public function isActive() |
|
279 | + { |
|
280 | + return $this->status === EE_Session::STATUS_OPEN; |
|
281 | + } |
|
282 | + |
|
283 | + |
|
284 | + /** |
|
285 | + * @return void |
|
286 | + * @throws EE_Error |
|
287 | + * @throws InvalidArgumentException |
|
288 | + * @throws InvalidDataTypeException |
|
289 | + * @throws InvalidInterfaceException |
|
290 | + * @throws InvalidSessionDataException |
|
291 | + */ |
|
292 | + public function open_session() |
|
293 | + { |
|
294 | + // check for existing session and retrieve it from db |
|
295 | + if (! $this->_espresso_session()) { |
|
296 | + // or just start a new one |
|
297 | + $this->_create_espresso_session(); |
|
298 | + } |
|
299 | + } |
|
300 | + |
|
301 | + |
|
302 | + /** |
|
303 | + * @return bool |
|
304 | + */ |
|
305 | + public function expired() |
|
306 | + { |
|
307 | + return $this->_expired; |
|
308 | + } |
|
309 | + |
|
310 | + |
|
311 | + /** |
|
312 | + * @return void |
|
313 | + */ |
|
314 | + public function reset_expired() |
|
315 | + { |
|
316 | + $this->_expired = false; |
|
317 | + } |
|
318 | + |
|
319 | + |
|
320 | + /** |
|
321 | + * @return int |
|
322 | + */ |
|
323 | + public function expiration() |
|
324 | + { |
|
325 | + return $this->_expiration; |
|
326 | + } |
|
327 | + |
|
328 | + |
|
329 | + /** |
|
330 | + * @return int |
|
331 | + */ |
|
332 | + public function extension() |
|
333 | + { |
|
334 | + return apply_filters('FHEE__EE_Session__extend_expiration__seconds_added', 10 * MINUTE_IN_SECONDS); |
|
335 | + } |
|
336 | + |
|
337 | + |
|
338 | + /** |
|
339 | + * @param int $time number of seconds to add to session expiration |
|
340 | + */ |
|
341 | + public function extend_expiration($time = 0) |
|
342 | + { |
|
343 | + $time = $time ? $time : $this->extension(); |
|
344 | + $this->_expiration += absint($time); |
|
345 | + } |
|
346 | + |
|
347 | + |
|
348 | + /** |
|
349 | + * @return int |
|
350 | + */ |
|
351 | + public function lifespan() |
|
352 | + { |
|
353 | + return $this->session_lifespan->inSeconds(); |
|
354 | + } |
|
355 | + |
|
356 | + |
|
357 | + /** |
|
358 | + * This just sets some defaults for the _session data property |
|
359 | + * |
|
360 | + * @access private |
|
361 | + * @return void |
|
362 | + */ |
|
363 | + private function _set_defaults() |
|
364 | + { |
|
365 | + // set some defaults |
|
366 | + foreach ($this->_default_session_vars as $key => $default_var) { |
|
367 | + if (is_array($default_var)) { |
|
368 | + $this->_session_data[ $key ] = array(); |
|
369 | + } else { |
|
370 | + $this->_session_data[ $key ] = ''; |
|
371 | + } |
|
372 | + } |
|
373 | + } |
|
374 | + |
|
375 | + |
|
376 | + /** |
|
377 | + * @retrieve session data |
|
378 | + * @access public |
|
379 | + * @return string |
|
380 | + */ |
|
381 | + public function id() |
|
382 | + { |
|
383 | + return $this->_sid; |
|
384 | + } |
|
385 | + |
|
386 | + |
|
387 | + /** |
|
388 | + * @param \EE_Cart $cart |
|
389 | + * @return bool |
|
390 | + */ |
|
391 | + public function set_cart(EE_Cart $cart) |
|
392 | + { |
|
393 | + $this->_session_data['cart'] = $cart; |
|
394 | + return true; |
|
395 | + } |
|
396 | + |
|
397 | + |
|
398 | + /** |
|
399 | + * reset_cart |
|
400 | + */ |
|
401 | + public function reset_cart() |
|
402 | + { |
|
403 | + do_action('AHEE__EE_Session__reset_cart__before_reset', $this); |
|
404 | + $this->_session_data['cart'] = null; |
|
405 | + } |
|
406 | + |
|
407 | + |
|
408 | + /** |
|
409 | + * @return \EE_Cart |
|
410 | + */ |
|
411 | + public function cart() |
|
412 | + { |
|
413 | + return isset($this->_session_data['cart']) && $this->_session_data['cart'] instanceof EE_Cart |
|
414 | + ? $this->_session_data['cart'] |
|
415 | + : null; |
|
416 | + } |
|
417 | + |
|
418 | + |
|
419 | + /** |
|
420 | + * @param \EE_Checkout $checkout |
|
421 | + * @return bool |
|
422 | + */ |
|
423 | + public function set_checkout(EE_Checkout $checkout) |
|
424 | + { |
|
425 | + $this->_session_data['checkout'] = $checkout; |
|
426 | + return true; |
|
427 | + } |
|
428 | + |
|
429 | + |
|
430 | + /** |
|
431 | + * reset_checkout |
|
432 | + */ |
|
433 | + public function reset_checkout() |
|
434 | + { |
|
435 | + do_action('AHEE__EE_Session__reset_checkout__before_reset', $this); |
|
436 | + $this->_session_data['checkout'] = null; |
|
437 | + } |
|
438 | + |
|
439 | + |
|
440 | + /** |
|
441 | + * @return \EE_Checkout |
|
442 | + */ |
|
443 | + public function checkout() |
|
444 | + { |
|
445 | + return isset($this->_session_data['checkout']) && $this->_session_data['checkout'] instanceof EE_Checkout |
|
446 | + ? $this->_session_data['checkout'] |
|
447 | + : null; |
|
448 | + } |
|
449 | + |
|
450 | + |
|
451 | + /** |
|
452 | + * @param \EE_Transaction $transaction |
|
453 | + * @return bool |
|
454 | + * @throws EE_Error |
|
455 | + */ |
|
456 | + public function set_transaction(EE_Transaction $transaction) |
|
457 | + { |
|
458 | + // first remove the session from the transaction before we save the transaction in the session |
|
459 | + $transaction->set_txn_session_data(null); |
|
460 | + $this->_session_data['transaction'] = $transaction; |
|
461 | + return true; |
|
462 | + } |
|
463 | + |
|
464 | + |
|
465 | + /** |
|
466 | + * reset_transaction |
|
467 | + */ |
|
468 | + public function reset_transaction() |
|
469 | + { |
|
470 | + do_action('AHEE__EE_Session__reset_transaction__before_reset', $this); |
|
471 | + $this->_session_data['transaction'] = null; |
|
472 | + } |
|
473 | + |
|
474 | + |
|
475 | + /** |
|
476 | + * @return \EE_Transaction |
|
477 | + */ |
|
478 | + public function transaction() |
|
479 | + { |
|
480 | + return isset($this->_session_data['transaction']) |
|
481 | + && $this->_session_data['transaction'] instanceof EE_Transaction |
|
482 | + ? $this->_session_data['transaction'] |
|
483 | + : null; |
|
484 | + } |
|
485 | + |
|
486 | + |
|
487 | + /** |
|
488 | + * retrieve session data |
|
489 | + * |
|
490 | + * @param null $key |
|
491 | + * @param bool $reset_cache |
|
492 | + * @return array |
|
493 | + */ |
|
494 | + public function get_session_data($key = null, $reset_cache = false) |
|
495 | + { |
|
496 | + if ($reset_cache) { |
|
497 | + $this->reset_cart(); |
|
498 | + $this->reset_checkout(); |
|
499 | + $this->reset_transaction(); |
|
500 | + } |
|
501 | + if (! empty($key)) { |
|
502 | + return isset($this->_session_data[ $key ]) ? $this->_session_data[ $key ] : null; |
|
503 | + } |
|
504 | + return $this->_session_data; |
|
505 | + } |
|
506 | + |
|
507 | + |
|
508 | + /** |
|
509 | + * Returns TRUE on success, FALSE on fail |
|
510 | + * |
|
511 | + * @param array $data |
|
512 | + * @return bool |
|
513 | + */ |
|
514 | + public function set_session_data($data) |
|
515 | + { |
|
516 | + // nothing ??? bad data ??? go home! |
|
517 | + if (empty($data) || ! is_array($data)) { |
|
518 | + EE_Error::add_error( |
|
519 | + esc_html__( |
|
520 | + 'No session data or invalid session data was provided.', |
|
521 | + 'event_espresso' |
|
522 | + ), |
|
523 | + __FILE__, |
|
524 | + __FUNCTION__, |
|
525 | + __LINE__ |
|
526 | + ); |
|
527 | + return false; |
|
528 | + } |
|
529 | + foreach ($data as $key => $value) { |
|
530 | + if (isset($this->_default_session_vars[ $key ])) { |
|
531 | + EE_Error::add_error( |
|
532 | + sprintf( |
|
533 | + esc_html__( |
|
534 | + 'Sorry! %s is a default session datum and can not be reset.', |
|
535 | + 'event_espresso' |
|
536 | + ), |
|
537 | + $key |
|
538 | + ), |
|
539 | + __FILE__, |
|
540 | + __FUNCTION__, |
|
541 | + __LINE__ |
|
542 | + ); |
|
543 | + return false; |
|
544 | + } |
|
545 | + $this->_session_data[ $key ] = $value; |
|
546 | + } |
|
547 | + return true; |
|
548 | + } |
|
549 | + |
|
550 | + |
|
551 | + /** |
|
552 | + * @initiate session |
|
553 | + * @access private |
|
554 | + * @return TRUE on success, FALSE on fail |
|
555 | + * @throws EE_Error |
|
556 | + * @throws InvalidArgumentException |
|
557 | + * @throws InvalidDataTypeException |
|
558 | + * @throws InvalidInterfaceException |
|
559 | + * @throws InvalidSessionDataException |
|
560 | + */ |
|
561 | + private function _espresso_session() |
|
562 | + { |
|
563 | + do_action('AHEE_log', __FILE__, __FUNCTION__, ''); |
|
564 | + // check that session has started |
|
565 | + if (session_id() === '') { |
|
566 | + // starts a new session if one doesn't already exist, or re-initiates an existing one |
|
567 | + session_start(); |
|
568 | + } |
|
569 | + $this->status = EE_Session::STATUS_OPEN; |
|
570 | + // get our modified session ID |
|
571 | + $this->_sid = $this->_generate_session_id(); |
|
572 | + // and the visitors IP |
|
573 | + $this->_ip_address = $this->request->ipAddress(); |
|
574 | + // set the "user agent" |
|
575 | + $this->_user_agent = $this->request->userAgent(); |
|
576 | + // now let's retrieve what's in the db |
|
577 | + $session_data = $this->_retrieve_session_data(); |
|
578 | + if (! empty($session_data)) { |
|
579 | + // get the current time in UTC |
|
580 | + $this->_time = $this->_time !== null ? $this->_time : time(); |
|
581 | + // and reset the session expiration |
|
582 | + $this->_expiration = isset($session_data['expiration']) |
|
583 | + ? $session_data['expiration'] |
|
584 | + : $this->_time + $this->session_lifespan->inSeconds(); |
|
585 | + } else { |
|
586 | + // set initial site access time and the session expiration |
|
587 | + $this->_set_init_access_and_expiration(); |
|
588 | + // set referer |
|
589 | + $this->_session_data['pages_visited'][ $this->_session_data['init_access'] ] = isset($_SERVER['HTTP_REFERER']) |
|
590 | + ? esc_attr($_SERVER['HTTP_REFERER']) |
|
591 | + : ''; |
|
592 | + // no previous session = go back and create one (on top of the data above) |
|
593 | + return false; |
|
594 | + } |
|
595 | + // now the user agent |
|
596 | + if ($session_data['user_agent'] !== $this->_user_agent) { |
|
597 | + return false; |
|
598 | + } |
|
599 | + // wait a minute... how old are you? |
|
600 | + if ($this->_time > $this->_expiration) { |
|
601 | + // yer too old fer me! |
|
602 | + $this->_expired = true; |
|
603 | + // wipe out everything that isn't a default session datum |
|
604 | + $this->clear_session(__CLASS__, __FUNCTION__); |
|
605 | + } |
|
606 | + // make event espresso session data available to plugin |
|
607 | + $this->_session_data = array_merge($this->_session_data, $session_data); |
|
608 | + return true; |
|
609 | + } |
|
610 | + |
|
611 | + |
|
612 | + /** |
|
613 | + * _get_session_data |
|
614 | + * Retrieves the session data, and attempts to correct any encoding issues that can occur due to improperly setup |
|
615 | + * databases |
|
616 | + * |
|
617 | + * @return array |
|
618 | + * @throws EE_Error |
|
619 | + * @throws InvalidArgumentException |
|
620 | + * @throws InvalidSessionDataException |
|
621 | + * @throws InvalidDataTypeException |
|
622 | + * @throws InvalidInterfaceException |
|
623 | + */ |
|
624 | + protected function _retrieve_session_data() |
|
625 | + { |
|
626 | + $ssn_key = EE_Session::session_id_prefix . $this->_sid; |
|
627 | + try { |
|
628 | + // we're using WP's Transient API to store session data using the PHP session ID as the option name |
|
629 | + $session_data = $this->cache_storage->get($ssn_key, false); |
|
630 | + if (empty($session_data)) { |
|
631 | + return array(); |
|
632 | + } |
|
633 | + if (apply_filters('FHEE__EE_Session___perform_session_id_hash_check', WP_DEBUG)) { |
|
634 | + $hash_check = $this->cache_storage->get( |
|
635 | + EE_Session::hash_check_prefix . $this->_sid, |
|
636 | + false |
|
637 | + ); |
|
638 | + if ($hash_check && $hash_check !== md5($session_data)) { |
|
639 | + EE_Error::add_error( |
|
640 | + sprintf( |
|
641 | + __( |
|
642 | + 'The stored data for session %1$s failed to pass a hash check and therefore appears to be invalid.', |
|
643 | + 'event_espresso' |
|
644 | + ), |
|
645 | + EE_Session::session_id_prefix . $this->_sid |
|
646 | + ), |
|
647 | + __FILE__, |
|
648 | + __FUNCTION__, |
|
649 | + __LINE__ |
|
650 | + ); |
|
651 | + } |
|
652 | + } |
|
653 | + } catch (Exception $e) { |
|
654 | + // let's just eat that error for now and attempt to correct any corrupted data |
|
655 | + global $wpdb; |
|
656 | + $row = $wpdb->get_row( |
|
657 | + $wpdb->prepare( |
|
658 | + "SELECT option_value FROM {$wpdb->options} WHERE option_name = %s LIMIT 1", |
|
659 | + '_transient_' . $ssn_key |
|
660 | + ) |
|
661 | + ); |
|
662 | + $session_data = is_object($row) ? $row->option_value : null; |
|
663 | + if ($session_data) { |
|
664 | + $session_data = preg_replace_callback( |
|
665 | + '!s:(d+):"(.*?)";!', |
|
666 | + function ($match) { |
|
667 | + return $match[1] === strlen($match[2]) |
|
668 | + ? $match[0] |
|
669 | + : 's:' . strlen($match[2]) . ':"' . $match[2] . '";'; |
|
670 | + }, |
|
671 | + $session_data |
|
672 | + ); |
|
673 | + } |
|
674 | + $session_data = maybe_unserialize($session_data); |
|
675 | + } |
|
676 | + // in case the data is encoded... try to decode it |
|
677 | + $session_data = $this->encryption instanceof EE_Encryption |
|
678 | + ? $this->encryption->base64_string_decode($session_data) |
|
679 | + : $session_data; |
|
680 | + if (! is_array($session_data)) { |
|
681 | + try { |
|
682 | + $session_data = maybe_unserialize($session_data); |
|
683 | + } catch (Exception $e) { |
|
684 | + $msg = esc_html__( |
|
685 | + 'An error occurred while attempting to unserialize the session data.', |
|
686 | + 'event_espresso' |
|
687 | + ); |
|
688 | + $msg .= WP_DEBUG |
|
689 | + ? '<br><pre>' |
|
690 | + . print_r($session_data, true) |
|
691 | + . '</pre><br>' |
|
692 | + . $this->find_serialize_error($session_data) |
|
693 | + : ''; |
|
694 | + $this->cache_storage->delete(EE_Session::session_id_prefix . $this->_sid); |
|
695 | + throw new InvalidSessionDataException($msg, 0, $e); |
|
696 | + } |
|
697 | + } |
|
698 | + // just a check to make sure the session array is indeed an array |
|
699 | + if (! is_array($session_data)) { |
|
700 | + // no?!?! then something is wrong |
|
701 | + $msg = esc_html__( |
|
702 | + 'The session data is missing, invalid, or corrupted.', |
|
703 | + 'event_espresso' |
|
704 | + ); |
|
705 | + $msg .= WP_DEBUG |
|
706 | + ? '<br><pre>' . print_r($session_data, true) . '</pre><br>' . $this->find_serialize_error($session_data) |
|
707 | + : ''; |
|
708 | + $this->cache_storage->delete(EE_Session::session_id_prefix . $this->_sid); |
|
709 | + throw new InvalidSessionDataException($msg); |
|
710 | + } |
|
711 | + if (isset($session_data['transaction']) && absint($session_data['transaction']) !== 0) { |
|
712 | + $session_data['transaction'] = EEM_Transaction::instance()->get_one_by_ID( |
|
713 | + $session_data['transaction'] |
|
714 | + ); |
|
715 | + } |
|
716 | + return $session_data; |
|
717 | + } |
|
718 | + |
|
719 | + |
|
720 | + /** |
|
721 | + * _generate_session_id |
|
722 | + * Retrieves the PHP session id either directly from the PHP session, |
|
723 | + * or from the $_REQUEST array if it was passed in from an AJAX request. |
|
724 | + * The session id is then salted and hashed (mmm sounds tasty) |
|
725 | + * so that it can be safely used as a $_REQUEST param |
|
726 | + * |
|
727 | + * @return string |
|
728 | + */ |
|
729 | + protected function _generate_session_id() |
|
730 | + { |
|
731 | + // check if the SID was passed explicitly, otherwise get from session, then add salt and hash it to reduce length |
|
732 | + if (isset($_REQUEST['EESID'])) { |
|
733 | + $session_id = sanitize_text_field($_REQUEST['EESID']); |
|
734 | + } else { |
|
735 | + $session_id = md5(session_id() . get_current_blog_id() . $this->_get_sid_salt()); |
|
736 | + } |
|
737 | + return apply_filters('FHEE__EE_Session___generate_session_id__session_id', $session_id); |
|
738 | + } |
|
739 | + |
|
740 | + |
|
741 | + /** |
|
742 | + * _get_sid_salt |
|
743 | + * |
|
744 | + * @return string |
|
745 | + */ |
|
746 | + protected function _get_sid_salt() |
|
747 | + { |
|
748 | + // was session id salt already saved to db ? |
|
749 | + if (empty($this->_sid_salt)) { |
|
750 | + // no? then maybe use WP defined constant |
|
751 | + if (defined('AUTH_SALT')) { |
|
752 | + $this->_sid_salt = AUTH_SALT; |
|
753 | + } |
|
754 | + // if salt doesn't exist or is too short |
|
755 | + if (strlen($this->_sid_salt) < 32) { |
|
756 | + // create a new one |
|
757 | + $this->_sid_salt = wp_generate_password(64); |
|
758 | + } |
|
759 | + // and save it as a permanent session setting |
|
760 | + $this->updateSessionSettings(array('sid_salt' => $this->_sid_salt)); |
|
761 | + } |
|
762 | + return $this->_sid_salt; |
|
763 | + } |
|
764 | + |
|
765 | + |
|
766 | + /** |
|
767 | + * _set_init_access_and_expiration |
|
768 | + * |
|
769 | + * @return void |
|
770 | + */ |
|
771 | + protected function _set_init_access_and_expiration() |
|
772 | + { |
|
773 | + $this->_time = time(); |
|
774 | + $this->_expiration = $this->_time + $this->session_lifespan->inSeconds(); |
|
775 | + // set initial site access time |
|
776 | + $this->_session_data['init_access'] = $this->_time; |
|
777 | + // and the session expiration |
|
778 | + $this->_session_data['expiration'] = $this->_expiration; |
|
779 | + } |
|
780 | + |
|
781 | + |
|
782 | + /** |
|
783 | + * @update session data prior to saving to the db |
|
784 | + * @access public |
|
785 | + * @param bool $new_session |
|
786 | + * @return TRUE on success, FALSE on fail |
|
787 | + * @throws EE_Error |
|
788 | + * @throws InvalidArgumentException |
|
789 | + * @throws InvalidDataTypeException |
|
790 | + * @throws InvalidInterfaceException |
|
791 | + */ |
|
792 | + public function update($new_session = false) |
|
793 | + { |
|
794 | + $this->_session_data = $this->_session_data !== null |
|
795 | + && is_array($this->_session_data) |
|
796 | + && isset($this->_session_data['id']) |
|
797 | + ? $this->_session_data |
|
798 | + : array(); |
|
799 | + if (empty($this->_session_data)) { |
|
800 | + $this->_set_defaults(); |
|
801 | + } |
|
802 | + $session_data = array(); |
|
803 | + foreach ($this->_session_data as $key => $value) { |
|
804 | + switch ($key) { |
|
805 | + case 'id': |
|
806 | + // session ID |
|
807 | + $session_data['id'] = $this->_sid; |
|
808 | + break; |
|
809 | + case 'ip_address': |
|
810 | + // visitor ip address |
|
811 | + $session_data['ip_address'] = $this->request->ipAddress(); |
|
812 | + break; |
|
813 | + case 'user_agent': |
|
814 | + // visitor user_agent |
|
815 | + $session_data['user_agent'] = $this->_user_agent; |
|
816 | + break; |
|
817 | + case 'init_access': |
|
818 | + $session_data['init_access'] = absint($value); |
|
819 | + break; |
|
820 | + case 'last_access': |
|
821 | + // current access time |
|
822 | + $session_data['last_access'] = $this->_time; |
|
823 | + break; |
|
824 | + case 'expiration': |
|
825 | + // when the session expires |
|
826 | + $session_data['expiration'] = ! empty($this->_expiration) |
|
827 | + ? $this->_expiration |
|
828 | + : $session_data['init_access'] + $this->session_lifespan->inSeconds(); |
|
829 | + break; |
|
830 | + case 'user_id': |
|
831 | + // current user if logged in |
|
832 | + $session_data['user_id'] = $this->_wp_user_id(); |
|
833 | + break; |
|
834 | + case 'pages_visited': |
|
835 | + $page_visit = $this->_get_page_visit(); |
|
836 | + if ($page_visit) { |
|
837 | + // set pages visited where the first will be the http referrer |
|
838 | + $this->_session_data['pages_visited'][ $this->_time ] = $page_visit; |
|
839 | + // we'll only save the last 10 page visits. |
|
840 | + $session_data['pages_visited'] = array_slice($this->_session_data['pages_visited'], -10); |
|
841 | + } |
|
842 | + break; |
|
843 | + default: |
|
844 | + // carry any other data over |
|
845 | + $session_data[ $key ] = $this->_session_data[ $key ]; |
|
846 | + } |
|
847 | + } |
|
848 | + $this->_session_data = $session_data; |
|
849 | + // creating a new session does not require saving to the db just yet |
|
850 | + if (! $new_session) { |
|
851 | + // ready? let's save |
|
852 | + if ($this->_save_session_to_db()) { |
|
853 | + return true; |
|
854 | + } |
|
855 | + return false; |
|
856 | + } |
|
857 | + // meh, why not? |
|
858 | + return true; |
|
859 | + } |
|
860 | + |
|
861 | + |
|
862 | + /** |
|
863 | + * @create session data array |
|
864 | + * @access public |
|
865 | + * @return bool |
|
866 | + * @throws EE_Error |
|
867 | + * @throws InvalidArgumentException |
|
868 | + * @throws InvalidDataTypeException |
|
869 | + * @throws InvalidInterfaceException |
|
870 | + */ |
|
871 | + private function _create_espresso_session() |
|
872 | + { |
|
873 | + do_action('AHEE_log', __CLASS__, __FUNCTION__, ''); |
|
874 | + // use the update function for now with $new_session arg set to TRUE |
|
875 | + return $this->update(true) ? true : false; |
|
876 | + } |
|
877 | + |
|
878 | + /** |
|
879 | + * Detects if there is anything worth saving in the session (eg the cart is a good one, notices are pretty good |
|
880 | + * too). This is used when determining if we want to save the session or not. |
|
881 | + * @since 4.9.67.p |
|
882 | + * @return bool |
|
883 | + */ |
|
884 | + private function sessionHasStuffWorthSaving() |
|
885 | + { |
|
886 | + return $this->cart() instanceof EE_Cart |
|
887 | + || ( |
|
888 | + isset($this->_session_data['ee_notices']) |
|
889 | + && ( |
|
890 | + ! empty($this->_session_data['ee_notices']['attention']) |
|
891 | + || !empty($this->_session_data['ee_notices']['errors']) |
|
892 | + || !empty($this->_session_data['ee_notices']['success']) |
|
893 | + ) |
|
894 | + ); |
|
895 | + } |
|
896 | + /** |
|
897 | + * _save_session_to_db |
|
898 | + * |
|
899 | + * @param bool $clear_session |
|
900 | + * @return string |
|
901 | + * @throws EE_Error |
|
902 | + * @throws InvalidArgumentException |
|
903 | + * @throws InvalidDataTypeException |
|
904 | + * @throws InvalidInterfaceException |
|
905 | + */ |
|
906 | + private function _save_session_to_db($clear_session = false) |
|
907 | + { |
|
908 | + // don't save sessions for crawlers |
|
909 | + // and unless we're deleting the session data, don't save anything if there isn't a cart |
|
910 | + if ($this->request->isBot() |
|
911 | + || ( |
|
912 | + ! $clear_session |
|
913 | + && ! $this->sessionHasStuffWorthSaving() |
|
914 | + && apply_filters('FHEE__EE_Session___save_session_to_db__abort_session_save', true) |
|
915 | + ) |
|
916 | + ) { |
|
917 | + return false; |
|
918 | + } |
|
919 | + $transaction = $this->transaction(); |
|
920 | + if ($transaction instanceof EE_Transaction) { |
|
921 | + if (! $transaction->ID()) { |
|
922 | + $transaction->save(); |
|
923 | + } |
|
924 | + $this->_session_data['transaction'] = $transaction->ID(); |
|
925 | + } |
|
926 | + // then serialize all of our session data |
|
927 | + $session_data = serialize($this->_session_data); |
|
928 | + // do we need to also encode it to avoid corrupted data when saved to the db? |
|
929 | + $session_data = $this->_use_encryption |
|
930 | + ? $this->encryption->base64_string_encode($session_data) |
|
931 | + : $session_data; |
|
932 | + // maybe save hash check |
|
933 | + if (apply_filters('FHEE__EE_Session___perform_session_id_hash_check', WP_DEBUG)) { |
|
934 | + $this->cache_storage->add( |
|
935 | + EE_Session::hash_check_prefix . $this->_sid, |
|
936 | + md5($session_data), |
|
937 | + $this->session_lifespan->inSeconds() |
|
938 | + ); |
|
939 | + } |
|
940 | + // we're using the Transient API for storing session data, |
|
941 | + return $this->cache_storage->add( |
|
942 | + EE_Session::session_id_prefix . $this->_sid, |
|
943 | + $session_data, |
|
944 | + $this->session_lifespan->inSeconds() |
|
945 | + ); |
|
946 | + } |
|
947 | + |
|
948 | + |
|
949 | + /** |
|
950 | + * @get the full page request the visitor is accessing |
|
951 | + * @access public |
|
952 | + * @return string |
|
953 | + */ |
|
954 | + public function _get_page_visit() |
|
955 | + { |
|
956 | + $page_visit = home_url('/') . 'wp-admin/admin-ajax.php'; |
|
957 | + // check for request url |
|
958 | + if (isset($_SERVER['REQUEST_URI'])) { |
|
959 | + $http_host = ''; |
|
960 | + $page_id = '?'; |
|
961 | + $e_reg = ''; |
|
962 | + $request_uri = esc_url($_SERVER['REQUEST_URI']); |
|
963 | + $ru_bits = explode('?', $request_uri); |
|
964 | + $request_uri = $ru_bits[0]; |
|
965 | + // check for and grab host as well |
|
966 | + if (isset($_SERVER['HTTP_HOST'])) { |
|
967 | + $http_host = esc_url($_SERVER['HTTP_HOST']); |
|
968 | + } |
|
969 | + // check for page_id in SERVER REQUEST |
|
970 | + if (isset($_REQUEST['page_id'])) { |
|
971 | + // rebuild $e_reg without any of the extra parameters |
|
972 | + $page_id = '?page_id=' . esc_attr($_REQUEST['page_id']) . '&'; |
|
973 | + } |
|
974 | + // check for $e_reg in SERVER REQUEST |
|
975 | + if (isset($_REQUEST['ee'])) { |
|
976 | + // rebuild $e_reg without any of the extra parameters |
|
977 | + $e_reg = 'ee=' . esc_attr($_REQUEST['ee']); |
|
978 | + } |
|
979 | + $page_visit = rtrim($http_host . $request_uri . $page_id . $e_reg, '?'); |
|
980 | + } |
|
981 | + return $page_visit !== home_url('/wp-admin/admin-ajax.php') ? $page_visit : ''; |
|
982 | + } |
|
983 | + |
|
984 | + |
|
985 | + /** |
|
986 | + * @the current wp user id |
|
987 | + * @access public |
|
988 | + * @return int |
|
989 | + */ |
|
990 | + public function _wp_user_id() |
|
991 | + { |
|
992 | + // if I need to explain the following lines of code, then you shouldn't be looking at this! |
|
993 | + $this->_wp_user_id = get_current_user_id(); |
|
994 | + return $this->_wp_user_id; |
|
995 | + } |
|
996 | + |
|
997 | + |
|
998 | + /** |
|
999 | + * Clear EE_Session data |
|
1000 | + * |
|
1001 | + * @access public |
|
1002 | + * @param string $class |
|
1003 | + * @param string $function |
|
1004 | + * @return void |
|
1005 | + * @throws EE_Error |
|
1006 | + * @throws InvalidArgumentException |
|
1007 | + * @throws InvalidDataTypeException |
|
1008 | + * @throws InvalidInterfaceException |
|
1009 | + */ |
|
1010 | + public function clear_session($class = '', $function = '') |
|
1011 | + { |
|
1012 | 1012 | // echo ' |
1013 | 1013 | // <h3 style="color:#999;line-height:.9em;"> |
1014 | 1014 | // <span style="color:#2EA2CC">' . __CLASS__ . '</span>::<span style="color:#E76700">' . __FUNCTION__ . '( ' . $class . '::' . $function . '() )</span><br/> |
1015 | 1015 | // <span style="font-size:9px;font-weight:normal;">' . __FILE__ . '</span> <b style="font-size:10px;"> ' . __LINE__ . ' </b> |
1016 | 1016 | // </h3>'; |
1017 | - do_action('AHEE_log', __FILE__, __FUNCTION__, 'session cleared by : ' . $class . '::' . $function . '()'); |
|
1018 | - $this->reset_cart(); |
|
1019 | - $this->reset_checkout(); |
|
1020 | - $this->reset_transaction(); |
|
1021 | - // wipe out everything that isn't a default session datum |
|
1022 | - $this->reset_data(array_keys($this->_session_data)); |
|
1023 | - // reset initial site access time and the session expiration |
|
1024 | - $this->_set_init_access_and_expiration(); |
|
1025 | - $this->_save_session_to_db(true); |
|
1026 | - } |
|
1027 | - |
|
1028 | - |
|
1029 | - /** |
|
1030 | - * resets all non-default session vars. Returns TRUE on success, FALSE on fail |
|
1031 | - * |
|
1032 | - * @param array|mixed $data_to_reset |
|
1033 | - * @param bool $show_all_notices |
|
1034 | - * @return bool |
|
1035 | - */ |
|
1036 | - public function reset_data($data_to_reset = array(), $show_all_notices = false) |
|
1037 | - { |
|
1038 | - // if $data_to_reset is not in an array, then put it in one |
|
1039 | - if (! is_array($data_to_reset)) { |
|
1040 | - $data_to_reset = array($data_to_reset); |
|
1041 | - } |
|
1042 | - // nothing ??? go home! |
|
1043 | - if (empty($data_to_reset)) { |
|
1044 | - EE_Error::add_error( |
|
1045 | - __( |
|
1046 | - 'No session data could be reset, because no session var name was provided.', |
|
1047 | - 'event_espresso' |
|
1048 | - ), |
|
1049 | - __FILE__, |
|
1050 | - __FUNCTION__, |
|
1051 | - __LINE__ |
|
1052 | - ); |
|
1053 | - return false; |
|
1054 | - } |
|
1055 | - $return_value = true; |
|
1056 | - // since $data_to_reset is an array, cycle through the values |
|
1057 | - foreach ($data_to_reset as $reset) { |
|
1058 | - // first check to make sure it is a valid session var |
|
1059 | - if (isset($this->_session_data[ $reset ])) { |
|
1060 | - // then check to make sure it is not a default var |
|
1061 | - if (! array_key_exists($reset, $this->_default_session_vars)) { |
|
1062 | - // remove session var |
|
1063 | - unset($this->_session_data[ $reset ]); |
|
1064 | - if ($show_all_notices) { |
|
1065 | - EE_Error::add_success( |
|
1066 | - sprintf( |
|
1067 | - __('The session variable %s was removed.', 'event_espresso'), |
|
1068 | - $reset |
|
1069 | - ), |
|
1070 | - __FILE__, |
|
1071 | - __FUNCTION__, |
|
1072 | - __LINE__ |
|
1073 | - ); |
|
1074 | - } |
|
1075 | - } else { |
|
1076 | - // yeeeeeeeeerrrrrrrrrrr OUT !!!! |
|
1077 | - if ($show_all_notices) { |
|
1078 | - EE_Error::add_error( |
|
1079 | - sprintf( |
|
1080 | - __( |
|
1081 | - 'Sorry! %s is a default session datum and can not be reset.', |
|
1082 | - 'event_espresso' |
|
1083 | - ), |
|
1084 | - $reset |
|
1085 | - ), |
|
1086 | - __FILE__, |
|
1087 | - __FUNCTION__, |
|
1088 | - __LINE__ |
|
1089 | - ); |
|
1090 | - } |
|
1091 | - $return_value = false; |
|
1092 | - } |
|
1093 | - } elseif ($show_all_notices) { |
|
1094 | - // oops! that session var does not exist! |
|
1095 | - EE_Error::add_error( |
|
1096 | - sprintf( |
|
1097 | - __( |
|
1098 | - 'The session item provided, %s, is invalid or does not exist.', |
|
1099 | - 'event_espresso' |
|
1100 | - ), |
|
1101 | - $reset |
|
1102 | - ), |
|
1103 | - __FILE__, |
|
1104 | - __FUNCTION__, |
|
1105 | - __LINE__ |
|
1106 | - ); |
|
1107 | - $return_value = false; |
|
1108 | - } |
|
1109 | - } // end of foreach |
|
1110 | - return $return_value; |
|
1111 | - } |
|
1112 | - |
|
1113 | - |
|
1114 | - /** |
|
1115 | - * wp_loaded |
|
1116 | - * |
|
1117 | - * @access public |
|
1118 | - * @throws EE_Error |
|
1119 | - * @throws InvalidDataTypeException |
|
1120 | - * @throws InvalidInterfaceException |
|
1121 | - * @throws InvalidArgumentException |
|
1122 | - */ |
|
1123 | - public function wp_loaded() |
|
1124 | - { |
|
1125 | - if ($this->request->requestParamIsSet('clear_session')) { |
|
1126 | - $this->clear_session(__CLASS__, __FUNCTION__); |
|
1127 | - } |
|
1128 | - } |
|
1129 | - |
|
1130 | - |
|
1131 | - /** |
|
1132 | - * Used to reset the entire object (for tests). |
|
1133 | - * |
|
1134 | - * @since 4.3.0 |
|
1135 | - * @throws EE_Error |
|
1136 | - * @throws InvalidDataTypeException |
|
1137 | - * @throws InvalidInterfaceException |
|
1138 | - * @throws InvalidArgumentException |
|
1139 | - */ |
|
1140 | - public function reset_instance() |
|
1141 | - { |
|
1142 | - $this->clear_session(); |
|
1143 | - self::$_instance = null; |
|
1144 | - } |
|
1145 | - |
|
1146 | - |
|
1147 | - public function configure_garbage_collection_filters() |
|
1148 | - { |
|
1149 | - // run old filter we had for controlling session cleanup |
|
1150 | - $expired_session_transient_delete_query_limit = absint( |
|
1151 | - apply_filters( |
|
1152 | - 'FHEE__EE_Session__garbage_collection___expired_session_transient_delete_query_limit', |
|
1153 | - 50 |
|
1154 | - ) |
|
1155 | - ); |
|
1156 | - // is there a value? or one that is different than the default 50 records? |
|
1157 | - if ($expired_session_transient_delete_query_limit === 0) { |
|
1158 | - // hook into TransientCacheStorage in case Session cleanup was turned off |
|
1159 | - add_filter('FHEE__TransientCacheStorage__transient_cleanup_schedule', '__return_zero'); |
|
1160 | - } elseif ($expired_session_transient_delete_query_limit !== 50) { |
|
1161 | - // or use that for the new transient cleanup query limit |
|
1162 | - add_filter( |
|
1163 | - 'FHEE__TransientCacheStorage__clearExpiredTransients__limit', |
|
1164 | - function () use ($expired_session_transient_delete_query_limit) { |
|
1165 | - return $expired_session_transient_delete_query_limit; |
|
1166 | - } |
|
1167 | - ); |
|
1168 | - } |
|
1169 | - } |
|
1170 | - |
|
1171 | - |
|
1172 | - /** |
|
1173 | - * @see http://stackoverflow.com/questions/10152904/unserialize-function-unserialize-error-at-offset/21389439#10152996 |
|
1174 | - * @param $data1 |
|
1175 | - * @return string |
|
1176 | - */ |
|
1177 | - private function find_serialize_error($data1) |
|
1178 | - { |
|
1179 | - $error = '<pre>'; |
|
1180 | - $data2 = preg_replace_callback( |
|
1181 | - '!s:(\d+):"(.*?)";!', |
|
1182 | - function ($match) { |
|
1183 | - return ($match[1] === strlen($match[2])) |
|
1184 | - ? $match[0] |
|
1185 | - : 's:' |
|
1186 | - . strlen($match[2]) |
|
1187 | - . ':"' |
|
1188 | - . $match[2] |
|
1189 | - . '";'; |
|
1190 | - }, |
|
1191 | - $data1 |
|
1192 | - ); |
|
1193 | - $max = (strlen($data1) > strlen($data2)) ? strlen($data1) : strlen($data2); |
|
1194 | - $error .= $data1 . PHP_EOL; |
|
1195 | - $error .= $data2 . PHP_EOL; |
|
1196 | - for ($i = 0; $i < $max; $i++) { |
|
1197 | - if (@$data1[ $i ] !== @$data2[ $i ]) { |
|
1198 | - $error .= 'Difference ' . @$data1[ $i ] . ' != ' . @$data2[ $i ] . PHP_EOL; |
|
1199 | - $error .= "\t-> ORD number " . ord(@$data1[ $i ]) . ' != ' . ord(@$data2[ $i ]) . PHP_EOL; |
|
1200 | - $error .= "\t-> Line Number = $i" . PHP_EOL; |
|
1201 | - $start = ($i - 20); |
|
1202 | - $start = ($start < 0) ? 0 : $start; |
|
1203 | - $length = 40; |
|
1204 | - $point = $max - $i; |
|
1205 | - if ($point < 20) { |
|
1206 | - $rlength = 1; |
|
1207 | - $rpoint = -$point; |
|
1208 | - } else { |
|
1209 | - $rpoint = $length - 20; |
|
1210 | - $rlength = 1; |
|
1211 | - } |
|
1212 | - $error .= "\t-> Section Data1 = "; |
|
1213 | - $error .= substr_replace( |
|
1214 | - substr($data1, $start, $length), |
|
1215 | - "<b style=\"color:green\">{$data1[ $i ]}</b>", |
|
1216 | - $rpoint, |
|
1217 | - $rlength |
|
1218 | - ); |
|
1219 | - $error .= PHP_EOL; |
|
1220 | - $error .= "\t-> Section Data2 = "; |
|
1221 | - $error .= substr_replace( |
|
1222 | - substr($data2, $start, $length), |
|
1223 | - "<b style=\"color:red\">{$data2[ $i ]}</b>", |
|
1224 | - $rpoint, |
|
1225 | - $rlength |
|
1226 | - ); |
|
1227 | - $error .= PHP_EOL; |
|
1228 | - } |
|
1229 | - } |
|
1230 | - $error .= '</pre>'; |
|
1231 | - return $error; |
|
1232 | - } |
|
1233 | - |
|
1234 | - |
|
1235 | - /** |
|
1236 | - * Saves an array of settings used for configuring aspects of session behaviour |
|
1237 | - * |
|
1238 | - * @param array $updated_settings |
|
1239 | - */ |
|
1240 | - private function updateSessionSettings(array $updated_settings = array()) |
|
1241 | - { |
|
1242 | - // add existing settings, but only if not included in incoming $updated_settings array |
|
1243 | - $updated_settings += get_option(EE_Session::OPTION_NAME_SETTINGS, array()); |
|
1244 | - update_option(EE_Session::OPTION_NAME_SETTINGS, $updated_settings); |
|
1245 | - } |
|
1246 | - |
|
1247 | - |
|
1248 | - /** |
|
1249 | - * garbage_collection |
|
1250 | - */ |
|
1251 | - public function garbageCollection() |
|
1252 | - { |
|
1253 | - // only perform during regular requests if last garbage collection was over an hour ago |
|
1254 | - if (! (defined('DOING_AJAX') && DOING_AJAX) && (time() - HOUR_IN_SECONDS) >= $this->_last_gc) { |
|
1255 | - $this->_last_gc = time(); |
|
1256 | - $this->updateSessionSettings(array('last_gc' => $this->_last_gc)); |
|
1257 | - /** @type WPDB $wpdb */ |
|
1258 | - global $wpdb; |
|
1259 | - // filter the query limit. Set to 0 to turn off garbage collection |
|
1260 | - $expired_session_transient_delete_query_limit = absint( |
|
1261 | - apply_filters( |
|
1262 | - 'FHEE__EE_Session__garbage_collection___expired_session_transient_delete_query_limit', |
|
1263 | - 50 |
|
1264 | - ) |
|
1265 | - ); |
|
1266 | - // non-zero LIMIT means take out the trash |
|
1267 | - if ($expired_session_transient_delete_query_limit) { |
|
1268 | - $session_key = str_replace('_', '\_', EE_Session::session_id_prefix); |
|
1269 | - $hash_check_key = str_replace('_', '\_', EE_Session::hash_check_prefix); |
|
1270 | - // since transient expiration timestamps are set in the future, we can compare against NOW |
|
1271 | - // but we only want to pick up any trash that's been around for more than a day |
|
1272 | - $expiration = time() - DAY_IN_SECONDS; |
|
1273 | - $SQL = " |
|
1017 | + do_action('AHEE_log', __FILE__, __FUNCTION__, 'session cleared by : ' . $class . '::' . $function . '()'); |
|
1018 | + $this->reset_cart(); |
|
1019 | + $this->reset_checkout(); |
|
1020 | + $this->reset_transaction(); |
|
1021 | + // wipe out everything that isn't a default session datum |
|
1022 | + $this->reset_data(array_keys($this->_session_data)); |
|
1023 | + // reset initial site access time and the session expiration |
|
1024 | + $this->_set_init_access_and_expiration(); |
|
1025 | + $this->_save_session_to_db(true); |
|
1026 | + } |
|
1027 | + |
|
1028 | + |
|
1029 | + /** |
|
1030 | + * resets all non-default session vars. Returns TRUE on success, FALSE on fail |
|
1031 | + * |
|
1032 | + * @param array|mixed $data_to_reset |
|
1033 | + * @param bool $show_all_notices |
|
1034 | + * @return bool |
|
1035 | + */ |
|
1036 | + public function reset_data($data_to_reset = array(), $show_all_notices = false) |
|
1037 | + { |
|
1038 | + // if $data_to_reset is not in an array, then put it in one |
|
1039 | + if (! is_array($data_to_reset)) { |
|
1040 | + $data_to_reset = array($data_to_reset); |
|
1041 | + } |
|
1042 | + // nothing ??? go home! |
|
1043 | + if (empty($data_to_reset)) { |
|
1044 | + EE_Error::add_error( |
|
1045 | + __( |
|
1046 | + 'No session data could be reset, because no session var name was provided.', |
|
1047 | + 'event_espresso' |
|
1048 | + ), |
|
1049 | + __FILE__, |
|
1050 | + __FUNCTION__, |
|
1051 | + __LINE__ |
|
1052 | + ); |
|
1053 | + return false; |
|
1054 | + } |
|
1055 | + $return_value = true; |
|
1056 | + // since $data_to_reset is an array, cycle through the values |
|
1057 | + foreach ($data_to_reset as $reset) { |
|
1058 | + // first check to make sure it is a valid session var |
|
1059 | + if (isset($this->_session_data[ $reset ])) { |
|
1060 | + // then check to make sure it is not a default var |
|
1061 | + if (! array_key_exists($reset, $this->_default_session_vars)) { |
|
1062 | + // remove session var |
|
1063 | + unset($this->_session_data[ $reset ]); |
|
1064 | + if ($show_all_notices) { |
|
1065 | + EE_Error::add_success( |
|
1066 | + sprintf( |
|
1067 | + __('The session variable %s was removed.', 'event_espresso'), |
|
1068 | + $reset |
|
1069 | + ), |
|
1070 | + __FILE__, |
|
1071 | + __FUNCTION__, |
|
1072 | + __LINE__ |
|
1073 | + ); |
|
1074 | + } |
|
1075 | + } else { |
|
1076 | + // yeeeeeeeeerrrrrrrrrrr OUT !!!! |
|
1077 | + if ($show_all_notices) { |
|
1078 | + EE_Error::add_error( |
|
1079 | + sprintf( |
|
1080 | + __( |
|
1081 | + 'Sorry! %s is a default session datum and can not be reset.', |
|
1082 | + 'event_espresso' |
|
1083 | + ), |
|
1084 | + $reset |
|
1085 | + ), |
|
1086 | + __FILE__, |
|
1087 | + __FUNCTION__, |
|
1088 | + __LINE__ |
|
1089 | + ); |
|
1090 | + } |
|
1091 | + $return_value = false; |
|
1092 | + } |
|
1093 | + } elseif ($show_all_notices) { |
|
1094 | + // oops! that session var does not exist! |
|
1095 | + EE_Error::add_error( |
|
1096 | + sprintf( |
|
1097 | + __( |
|
1098 | + 'The session item provided, %s, is invalid or does not exist.', |
|
1099 | + 'event_espresso' |
|
1100 | + ), |
|
1101 | + $reset |
|
1102 | + ), |
|
1103 | + __FILE__, |
|
1104 | + __FUNCTION__, |
|
1105 | + __LINE__ |
|
1106 | + ); |
|
1107 | + $return_value = false; |
|
1108 | + } |
|
1109 | + } // end of foreach |
|
1110 | + return $return_value; |
|
1111 | + } |
|
1112 | + |
|
1113 | + |
|
1114 | + /** |
|
1115 | + * wp_loaded |
|
1116 | + * |
|
1117 | + * @access public |
|
1118 | + * @throws EE_Error |
|
1119 | + * @throws InvalidDataTypeException |
|
1120 | + * @throws InvalidInterfaceException |
|
1121 | + * @throws InvalidArgumentException |
|
1122 | + */ |
|
1123 | + public function wp_loaded() |
|
1124 | + { |
|
1125 | + if ($this->request->requestParamIsSet('clear_session')) { |
|
1126 | + $this->clear_session(__CLASS__, __FUNCTION__); |
|
1127 | + } |
|
1128 | + } |
|
1129 | + |
|
1130 | + |
|
1131 | + /** |
|
1132 | + * Used to reset the entire object (for tests). |
|
1133 | + * |
|
1134 | + * @since 4.3.0 |
|
1135 | + * @throws EE_Error |
|
1136 | + * @throws InvalidDataTypeException |
|
1137 | + * @throws InvalidInterfaceException |
|
1138 | + * @throws InvalidArgumentException |
|
1139 | + */ |
|
1140 | + public function reset_instance() |
|
1141 | + { |
|
1142 | + $this->clear_session(); |
|
1143 | + self::$_instance = null; |
|
1144 | + } |
|
1145 | + |
|
1146 | + |
|
1147 | + public function configure_garbage_collection_filters() |
|
1148 | + { |
|
1149 | + // run old filter we had for controlling session cleanup |
|
1150 | + $expired_session_transient_delete_query_limit = absint( |
|
1151 | + apply_filters( |
|
1152 | + 'FHEE__EE_Session__garbage_collection___expired_session_transient_delete_query_limit', |
|
1153 | + 50 |
|
1154 | + ) |
|
1155 | + ); |
|
1156 | + // is there a value? or one that is different than the default 50 records? |
|
1157 | + if ($expired_session_transient_delete_query_limit === 0) { |
|
1158 | + // hook into TransientCacheStorage in case Session cleanup was turned off |
|
1159 | + add_filter('FHEE__TransientCacheStorage__transient_cleanup_schedule', '__return_zero'); |
|
1160 | + } elseif ($expired_session_transient_delete_query_limit !== 50) { |
|
1161 | + // or use that for the new transient cleanup query limit |
|
1162 | + add_filter( |
|
1163 | + 'FHEE__TransientCacheStorage__clearExpiredTransients__limit', |
|
1164 | + function () use ($expired_session_transient_delete_query_limit) { |
|
1165 | + return $expired_session_transient_delete_query_limit; |
|
1166 | + } |
|
1167 | + ); |
|
1168 | + } |
|
1169 | + } |
|
1170 | + |
|
1171 | + |
|
1172 | + /** |
|
1173 | + * @see http://stackoverflow.com/questions/10152904/unserialize-function-unserialize-error-at-offset/21389439#10152996 |
|
1174 | + * @param $data1 |
|
1175 | + * @return string |
|
1176 | + */ |
|
1177 | + private function find_serialize_error($data1) |
|
1178 | + { |
|
1179 | + $error = '<pre>'; |
|
1180 | + $data2 = preg_replace_callback( |
|
1181 | + '!s:(\d+):"(.*?)";!', |
|
1182 | + function ($match) { |
|
1183 | + return ($match[1] === strlen($match[2])) |
|
1184 | + ? $match[0] |
|
1185 | + : 's:' |
|
1186 | + . strlen($match[2]) |
|
1187 | + . ':"' |
|
1188 | + . $match[2] |
|
1189 | + . '";'; |
|
1190 | + }, |
|
1191 | + $data1 |
|
1192 | + ); |
|
1193 | + $max = (strlen($data1) > strlen($data2)) ? strlen($data1) : strlen($data2); |
|
1194 | + $error .= $data1 . PHP_EOL; |
|
1195 | + $error .= $data2 . PHP_EOL; |
|
1196 | + for ($i = 0; $i < $max; $i++) { |
|
1197 | + if (@$data1[ $i ] !== @$data2[ $i ]) { |
|
1198 | + $error .= 'Difference ' . @$data1[ $i ] . ' != ' . @$data2[ $i ] . PHP_EOL; |
|
1199 | + $error .= "\t-> ORD number " . ord(@$data1[ $i ]) . ' != ' . ord(@$data2[ $i ]) . PHP_EOL; |
|
1200 | + $error .= "\t-> Line Number = $i" . PHP_EOL; |
|
1201 | + $start = ($i - 20); |
|
1202 | + $start = ($start < 0) ? 0 : $start; |
|
1203 | + $length = 40; |
|
1204 | + $point = $max - $i; |
|
1205 | + if ($point < 20) { |
|
1206 | + $rlength = 1; |
|
1207 | + $rpoint = -$point; |
|
1208 | + } else { |
|
1209 | + $rpoint = $length - 20; |
|
1210 | + $rlength = 1; |
|
1211 | + } |
|
1212 | + $error .= "\t-> Section Data1 = "; |
|
1213 | + $error .= substr_replace( |
|
1214 | + substr($data1, $start, $length), |
|
1215 | + "<b style=\"color:green\">{$data1[ $i ]}</b>", |
|
1216 | + $rpoint, |
|
1217 | + $rlength |
|
1218 | + ); |
|
1219 | + $error .= PHP_EOL; |
|
1220 | + $error .= "\t-> Section Data2 = "; |
|
1221 | + $error .= substr_replace( |
|
1222 | + substr($data2, $start, $length), |
|
1223 | + "<b style=\"color:red\">{$data2[ $i ]}</b>", |
|
1224 | + $rpoint, |
|
1225 | + $rlength |
|
1226 | + ); |
|
1227 | + $error .= PHP_EOL; |
|
1228 | + } |
|
1229 | + } |
|
1230 | + $error .= '</pre>'; |
|
1231 | + return $error; |
|
1232 | + } |
|
1233 | + |
|
1234 | + |
|
1235 | + /** |
|
1236 | + * Saves an array of settings used for configuring aspects of session behaviour |
|
1237 | + * |
|
1238 | + * @param array $updated_settings |
|
1239 | + */ |
|
1240 | + private function updateSessionSettings(array $updated_settings = array()) |
|
1241 | + { |
|
1242 | + // add existing settings, but only if not included in incoming $updated_settings array |
|
1243 | + $updated_settings += get_option(EE_Session::OPTION_NAME_SETTINGS, array()); |
|
1244 | + update_option(EE_Session::OPTION_NAME_SETTINGS, $updated_settings); |
|
1245 | + } |
|
1246 | + |
|
1247 | + |
|
1248 | + /** |
|
1249 | + * garbage_collection |
|
1250 | + */ |
|
1251 | + public function garbageCollection() |
|
1252 | + { |
|
1253 | + // only perform during regular requests if last garbage collection was over an hour ago |
|
1254 | + if (! (defined('DOING_AJAX') && DOING_AJAX) && (time() - HOUR_IN_SECONDS) >= $this->_last_gc) { |
|
1255 | + $this->_last_gc = time(); |
|
1256 | + $this->updateSessionSettings(array('last_gc' => $this->_last_gc)); |
|
1257 | + /** @type WPDB $wpdb */ |
|
1258 | + global $wpdb; |
|
1259 | + // filter the query limit. Set to 0 to turn off garbage collection |
|
1260 | + $expired_session_transient_delete_query_limit = absint( |
|
1261 | + apply_filters( |
|
1262 | + 'FHEE__EE_Session__garbage_collection___expired_session_transient_delete_query_limit', |
|
1263 | + 50 |
|
1264 | + ) |
|
1265 | + ); |
|
1266 | + // non-zero LIMIT means take out the trash |
|
1267 | + if ($expired_session_transient_delete_query_limit) { |
|
1268 | + $session_key = str_replace('_', '\_', EE_Session::session_id_prefix); |
|
1269 | + $hash_check_key = str_replace('_', '\_', EE_Session::hash_check_prefix); |
|
1270 | + // since transient expiration timestamps are set in the future, we can compare against NOW |
|
1271 | + // but we only want to pick up any trash that's been around for more than a day |
|
1272 | + $expiration = time() - DAY_IN_SECONDS; |
|
1273 | + $SQL = " |
|
1274 | 1274 | SELECT option_name |
1275 | 1275 | FROM {$wpdb->options} |
1276 | 1276 | WHERE |
@@ -1279,17 +1279,17 @@ discard block |
||
1279 | 1279 | AND option_value < {$expiration} |
1280 | 1280 | LIMIT {$expired_session_transient_delete_query_limit} |
1281 | 1281 | "; |
1282 | - // produces something like: |
|
1283 | - // SELECT option_name FROM wp_options |
|
1284 | - // WHERE ( option_name LIKE '\_transient\_timeout\_ee\_ssn\_%' |
|
1285 | - // OR option_name LIKE '\_transient\_timeout\_ee\_shc\_%' ) |
|
1286 | - // AND option_value < 1508368198 LIMIT 50 |
|
1287 | - $expired_sessions = $wpdb->get_col($SQL); |
|
1288 | - // valid results? |
|
1289 | - if (! $expired_sessions instanceof WP_Error && ! empty($expired_sessions)) { |
|
1290 | - $this->cache_storage->deleteMany($expired_sessions, true); |
|
1291 | - } |
|
1292 | - } |
|
1293 | - } |
|
1294 | - } |
|
1282 | + // produces something like: |
|
1283 | + // SELECT option_name FROM wp_options |
|
1284 | + // WHERE ( option_name LIKE '\_transient\_timeout\_ee\_ssn\_%' |
|
1285 | + // OR option_name LIKE '\_transient\_timeout\_ee\_shc\_%' ) |
|
1286 | + // AND option_value < 1508368198 LIMIT 50 |
|
1287 | + $expired_sessions = $wpdb->get_col($SQL); |
|
1288 | + // valid results? |
|
1289 | + if (! $expired_sessions instanceof WP_Error && ! empty($expired_sessions)) { |
|
1290 | + $this->cache_storage->deleteMany($expired_sessions, true); |
|
1291 | + } |
|
1292 | + } |
|
1293 | + } |
|
1294 | + } |
|
1295 | 1295 | } |