application/tests/_ci_phpunit_test/replacing/helpers/download_helper.php ➔ force_download()

Complexity

Conditions	26
Paths	596

Size

Total Lines	120
Code Lines	50

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
	function force_download($filename = '', $data = '', $set_mime = FALSE)

force_download uses the super-global variable $_SERVER which is generally not recommended.

	{
		if ($filename === '' OR $data === '')

Using logical operators such as or instead of || is generally not recommended.

		{
			return;
		}
		elseif ($data === NULL)
		{
			if ( ! @is_file($filename) OR ($filesize = @filesize($filename)) === FALSE)

Using logical operators such as or instead of || is generally not recommended.

			{
				return;
			}

			$filepath = $filename;
			$filename = explode('/', str_replace(DIRECTORY_SEPARATOR, '/', $filename));
			$filename = end($filename);
		}
		else
		{
			$filesize = strlen($data);
		}

		// Set the default MIME type to send
		$mime = 'application/octet-stream';

		$x = explode('.', $filename);
		$extension = end($x);

		if ($set_mime === TRUE)
		{
			if (count($x) === 1 OR $extension === '')

Using logical operators such as or instead of || is generally not recommended.

			{
				/* If we're going to detect the MIME type,
				 * we'll need a file extension.
				 */
				return;
			}

			// Load the mime types
			$mimes =& get_mimes();

			// Only change the default MIME if we can find one
			if (isset($mimes[$extension]))
			{
				$mime = is_array($mimes[$extension]) ? $mimes[$extension][0] : $mimes[$extension];
			}
		}

		/* It was reported that browsers on Android 2.1 (and possibly older as well)
		 * need to have the filename extension upper-cased in order to be able to
		 * download it.
		 *
		 * Reference: http://digiblog.de/2011/04/19/android-and-the-download-file-headers/
		 */
		if (count($x) !== 1 && isset($_SERVER['HTTP_USER_AGENT']) && preg_match('/Android\s(1|2\.[01])/', $_SERVER['HTTP_USER_AGENT']))
		{
			$x[count($x) - 1] = strtoupper($extension);
			$filename = implode('.', $x);
		}

		if ($data === NULL && ($fp = @fopen($filepath, 'rb')) === FALSE)

The variable $filepath does not seem to be defined for all execution paths leading up to this point.

		{
			return;
		}

		if (ENVIRONMENT !== 'testing')
		{
			// Clean output buffer
			if (ob_get_level() !== 0 && @ob_end_clean() === FALSE)
			{
				@ob_clean();

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

			}

			// Generate the server headers
			header('Content-Type: '.$mime);
			header('Content-Disposition: attachment; filename="'.$filename.'"');
			header('Expires: 0');
			header('Content-Transfer-Encoding: binary');
			header('Content-Length: '.$filesize);
			header('Cache-Control: private, no-transform, no-store, must-revalidate');
		}

		if (ENVIRONMENT === 'testing')
		{
			while (ob_get_level() > 2)
			{
				ob_end_clean();
			}
		}

		// If we have raw data - just dump it
		if ($data !== NULL)
		{
			if (ENVIRONMENT !== 'testing')
			{
				exit($data);

The function force_download() contains an exit expression.

			}
			else
			{
				echo($data);
				throw new CIPHPUnitTestExitException('exit() from force_download()');
			}
		}

		// Flush 1MB chunks of data
		while ( ! feof($fp) && ($data = fread($fp, 1048576)) !== FALSE)

The variable $fp does not seem to be defined for all execution paths leading up to this point.

		{
			echo $data;
		}

		fclose($fp);
		if (ENVIRONMENT !== 'testing')
		{
			exit;

The function force_download() contains an exit expression.

		}
		else
		{
			throw new CIPHPUnitTestExitException('exit() from force_download()');
		}
	}
}