injitools / cms-Inji

system/modules/StaticLoader/StaticLoader.php

<?php

namespace Inji;
/**
 * StaticLoader module
 *
 * @author Alexey Krupskiy <admin@inji.ru>
 * @link http://inji.ru/
 * @copyright 2015 Alexey Krupskiy
 * @license https://github.com/injitools/cms-Inji/blob/master/LICENSE
 */
class StaticLoader extends Module {
    public $name = 'StaticLoader';
    public $mimes = [];

    public function init() {
        $this->mimes = $this->config['mimes'];
    }

    public function parsePath($path) {
        $path = Tools::parsePath($path);

        if (strpos($path, '/') === 0) {
            $path = substr($path, 1);
        }
        $app = substr($path, 0, strpos($path, '/'));

        if ($app && file_exists(INJI_SYSTEM_DIR . '/program/' . $app)) {
            $path = substr($path, strpos($path, '/') + 1);
            if (App::$cur->name != $app) {
                $scriptApp = new App();
                $scriptApp->name = $app;
                $scriptApp->system = true;
                $scriptApp->staticPath = "/" . $scriptApp->name . "/static";
                $scriptApp->templatesPath = "/" . $scriptApp->name . "/static/templates";
                $scriptApp->path = INJI_SYSTEM_DIR . '/program/' . $scriptApp->name;
                $scriptApp->type = 'app' . ucfirst(strtolower($scriptApp->name));
                $scriptApp->installed = true;
                $scriptApp->params = [];
                $scriptApp->config = Config::app($scriptApp);
            } else {
                $scriptApp = App::$cur;
            }
        } else {
            $scriptApp = App::$cur->system ? App::$primary : App::$cur;
        }

        if (strpos($path, 'static/') !== false && strpos($path, 'static/') <= 1) {
            $path = substr($path, strpos($path, 'static') + 7);
        }

        $type = substr($path, 0, strpos($path, '/'));
        switch ($type) {
            case 'cache':
                return INJI_BASE_DIR . $path;
            case 'libs':
                return App::$cur->Libs->getPath(array_slice(explode('/', $path), 2));

The property Libs does not exist on Inji\App. Since you implemented __get, consider adding a @property annotation.

The method getPath() does not exist on Inji\Module. It seems like you code against a sub-type of Inji\Module such as Inji\Libs or Inji\Db.

The method getPath() does not exist on null.

            case 'templates':
                $path = substr($path, strpos($path, '/') + 1);
                return $scriptApp->view->templatesPath . '/' . $path;

The property view does not exist on Inji\App. Since you implemented __get, consider adding a @property annotation.

            case 'system':
                $path = substr($path, strpos($path, '/') + 1);
                return INJI_SYSTEM_DIR . '/static/' . $path;
            case 'moduleAsset':
                $path = substr($path, strpos($path, '/') + 1);
                if (!strpos($path, '/')) {
                    return false;
                }
                $module = substr($path, 0, strpos($path, '/'));

                if (!$scriptApp->$module) {
                    return false;
                }
                $path = substr($path, strpos($path, '/') + 1);
                if (is_callable([$module, 'staticCalled'])) {
                    return $scriptApp->$module->staticCalled($path, $scriptApp->$module->path . '/static/');
                }
                return $scriptApp->$module->path . '/static/' . $path;
            default:
                return $scriptApp->path . '/static/' . $path;
        }
    }

    public function giveFile($file) {
        if (!file_exists($file) && file_exists(mb_convert_encoding($file, 'Windows-1251', 'UTF-8'))) {
            $file = mb_convert_encoding($file, 'Windows-1251', 'UTF-8');
        }
        if (!file_exists($file)) {
            header('HTTP/1.1 404 Not Found');
            exit();

Using exit here is not recommended.

        }

        $fileinfo = pathinfo($file);
        if (empty($fileinfo['extension'])) {
            header('HTTP/1.1 404 Not Found');
            exit();

Using exit here is not recommended.

        }

        if (!empty($_GET['resize'])) {

            $allow_resize = false;
            if (App::$cur->db->connect) {

The property db does not exist on Inji\App. Since you implemented __get, consider adding a @property annotation.

                $type = Files\Type::get($fileinfo['extension'], 'ext');
                $allow_resize = $type ? $type->allow_resize : false;
            }
            if (!$type && in_array(strtolower($fileinfo['extension']), array('png', 'jpg', 'jpeg', 'gif'))) {

The variable $type does not seem to be defined for all execution paths leading up to this point.

                $allow_resize = true;
            }
            if ($allow_resize) {

                $sizes = explode('x', $_GET['resize']);
                $sizes[0] = intval($sizes[0]);
                if (isset($sizes[1])) {
                    $sizes[1] = intval($sizes[1]);
                } else {
                    $sizes[1] = 0;
                }

                if (!$sizes[0] || !$sizes[1]) {
                    header('HTTP/1.1 404 Not Found');
                    exit();

Using exit here is not recommended.

                } elseif ($sizes[0] > 2000 || $sizes[1] > 2000) {
                    header('HTTP/1.1 404 Not Found');
                    exit();

Using exit here is not recommended.

                } else {
                    $dir = App::$primary->path;

The assignment to $dir is dead and can be removed.

                    if (!empty($_GET['resize_crop'])) {
                        if (in_array($_GET['resize_crop'], array('q', 'c'))) {
                            $crop = $_GET['resize_crop'];
                        } else {
                            $crop = 'c';
                        }
                    } elseif (!empty($_GET['resize_quadro'])) {
                        $crop = 'q';
                    } else {
                        $crop = '';
                    }
                    $pos = 'center';
                    if (!empty($_GET['resize_pos']) && in_array($_GET['resize_pos'], array('top', 'center'))) {
                        $pos = $_GET['resize_pos'];
                    }
                    $file = INJI_BASE_DIR . rtrim(Statics::file($file, $sizes[0] . 'x' . $sizes[1], $crop, $pos, true), '/');
                }
            }
        }

        $request = getallheaders();
        if (isset($request['If-Modified-Since'])) {
            // Разделяем If-Modified-Since (Netscape < v6 отдаёт их неправильно)
            $modifiedSince = explode(';', $request['If-Modified-Since']);

            // Преобразуем запрос клиента If-Modified-Since в таймштамп
            $modifiedSince = strtotime($modifiedSince[0]);
        } else {
            // Устанавливаем время модификации в ноль
            $modifiedSince = 0;
        }

        header("Cache-control: public");
        header("Accept-Ranges: bytes");
        header("Pragma: public");
        header("Content-Length: " . filesize($file));
        header('Last-Modified: ' . gmdate('D, d M Y H:i:s', filemtime($file)) . ' GMT');
        header('Expires: ' . gmdate('D, d M Y H:i:s', time() + 60 * 60 * 24 * 256) . ' GMT');
        if (filemtime($file) <= $modifiedSince && (!isset($_SERVER['HTTP_CACHE_CONTROL']) || $_SERVER['HTTP_CACHE_CONTROL'] != 'no-cache')) {
            // Разгружаем канал передачи данных!
            header('HTTP/1.1 304 Not Modified');
            exit();

Using exit here is not recommended.

        }

        header('Content-Description: File Transfer');
        if (isset($this->mimes[strtolower($fileinfo['extension'])])) {
            header("Content-Type: " . $this->mimes[strtolower($fileinfo['extension'])]);
        }

        if (isset($_GET['frustrate_dl']) || in_array($fileinfo['extension'], array('doc', 'docx', 'xls', 'xlsx'))) {

            $fileName = $fileinfo['filename'] . '.' . $fileinfo['extension'];
            if (App::$cur->db->connect) {
                $fileObj = Files\File::get(['path', '%/' . $fileinfo['filename'] . '.' . $fileinfo['extension'], 'LIKE']);
                if ($fileObj) {
                    $fileName = $fileObj->original_name;
                }
            }
            header('Content-Disposition: attachment; filename="' . $fileName . '"');
        }

        header('Content-Transfer-Encoding: binary');

        readfile($file);
        exit();

Using exit here is not recommended.

    }
}