1
|
|
|
<?php
|
2
|
|
|
|
3
|
|
|
global $site_sessionname;
|
|
|
|
|
4
|
|
|
$site_sessionname = genEvoSessionName(); // For legacy extras not using startCMSSession
|
5
|
|
|
|
6
|
|
|
|
7
|
|
|
if( ! function_exists('evolutionCMS')) {
|
8
|
|
|
/**
|
9
|
|
|
* @return DocumentParser
|
10
|
|
|
*/
|
11
|
|
|
function evolutionCMS()
|
12
|
|
|
{
|
13
|
|
|
if( ! defined('MODX_CLASS')) {
|
14
|
|
|
if( ! class_exists('DocumentParser')) {
|
15
|
|
|
throw new RuntimeException('MODX_CLASS not defined and DocumentParser class not exists');
|
16
|
|
|
}
|
17
|
|
|
define('MODX_CLASS', 'DocumentParser');
|
18
|
|
|
}
|
19
|
|
|
|
20
|
|
|
global $modx;
|
21
|
|
|
if ($modx === null) {
|
22
|
|
|
$obj = new ReflectionClass(MODX_CLASS);
|
23
|
|
|
$modx = $obj->newInstanceWithoutConstructor()->getInstance();
|
24
|
|
|
}
|
25
|
|
|
return $modx;
|
26
|
|
|
}
|
27
|
|
|
}
|
28
|
|
|
|
29
|
|
|
/**
|
30
|
|
|
* @return string
|
31
|
|
|
*/
|
32
|
|
|
function genEvoSessionName()
|
33
|
|
|
{
|
34
|
|
|
$_ = crc32(__FILE__);
|
|
|
|
|
35
|
|
|
$_ = sprintf('%u', $_);
|
36
|
|
|
|
37
|
|
|
return 'evo' . base_convert($_, 10, 36);
|
38
|
|
|
}
|
39
|
|
|
|
40
|
|
|
/**
|
41
|
|
|
* @return void
|
42
|
|
|
*/
|
43
|
|
|
function startCMSSession()
|
|
|
|
|
44
|
|
|
{
|
45
|
|
|
global $site_sessionname, $https_port, $session_cookie_path, $session_cookie_domain;
|
|
|
|
|
46
|
|
|
if(MODX_CLI) return;
|
47
|
|
|
|
48
|
|
|
session_name($site_sessionname);
|
49
|
|
|
removeInvalidCmsSessionIds($site_sessionname);
|
50
|
|
|
$cookieExpiration = 0;
|
51
|
|
|
$secure = ((isset ($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on') || $_SERVER['SERVER_PORT'] == $https_port);
|
52
|
|
|
$cookiePath = !empty($session_cookie_path) ? $session_cookie_path : MODX_BASE_URL;
|
53
|
|
|
$cookieDomain = !empty($session_cookie_domain) ? $session_cookie_domain : '';
|
54
|
|
|
session_set_cookie_params($cookieExpiration, $cookiePath, $cookieDomain, $secure, true);
|
55
|
|
|
session_start();
|
56
|
|
|
$key = "modx.mgr.session.cookie.lifetime";
|
57
|
|
|
if (isset($_SESSION[$key]) && is_numeric($_SESSION[$key])) {
|
58
|
|
|
$cookieLifetime = (int)$_SESSION[$key];
|
59
|
|
|
if ($cookieLifetime) {
|
60
|
|
|
$cookieExpiration = $_SERVER['REQUEST_TIME'] + $cookieLifetime;
|
61
|
|
|
}
|
62
|
|
|
setcookie(session_name(), session_id(), $cookieExpiration, $cookiePath, $cookieDomain, $secure, true);
|
63
|
|
|
}
|
64
|
|
|
if (!isset($_SESSION['modx.session.created.time'])) {
|
65
|
|
|
$_SESSION['modx.session.created.time'] = $_SERVER['REQUEST_TIME'];
|
66
|
|
|
}
|
67
|
|
|
}
|
68
|
|
|
|
69
|
|
|
/**
|
70
|
|
|
* @param $storage
|
71
|
|
|
* @param $session_name
|
72
|
|
|
* @return void
|
73
|
|
|
*/
|
74
|
|
|
function removeInvalidCmsSessionFromStorage(&$storage, $session_name)
|
75
|
|
|
{
|
76
|
|
|
if (isset($storage[$session_name]) && ($storage[$session_name] === '' || $storage[$session_name] === 'deleted')) {
|
77
|
|
|
unset($storage[$session_name]);
|
78
|
|
|
}
|
79
|
|
|
}
|
80
|
|
|
|
81
|
|
|
/**
|
82
|
|
|
* @param $session_name
|
83
|
|
|
* @return void
|
84
|
|
|
*/
|
85
|
|
|
function removeInvalidCmsSessionIds($session_name)
|
|
|
|
|
86
|
|
|
{
|
87
|
|
|
if(MODX_CLI) return;
|
88
|
|
|
// session ids is invalid iff it is empty string
|
89
|
|
|
// storage priorioty can see in PHP source ext/session/session.c
|
90
|
|
|
removeInvalidCmsSessionFromStorage($_COOKIE, $session_name);
|
91
|
|
|
removeInvalidCmsSessionFromStorage($_GET, $session_name);
|
92
|
|
|
removeInvalidCmsSessionFromStorage($_POST, $session_name);
|
93
|
|
|
}
|
94
|
|
|
|
Instead of relying on
global
state, we recommend one of these alternatives:1. Pass all data via parameters
2. Create a class that maintains your state