@@ -40,24 +40,24 @@ discard block |
||
40 | 40 | * @param array $result The result from the API server |
41 | 41 | */ |
42 | 42 | public function __construct($result) { |
43 | - $this->result = $result; |
|
44 | - |
|
45 | - $code = isset($result['error_code']) ? $result['error_code'] : 0; |
|
46 | - |
|
47 | - if (isset($result['error_description'])) { |
|
48 | - // OAuth 2.0 Draft 10 style |
|
49 | - $msg = $result['error_description']; |
|
50 | - } else if (isset($result['error']) && is_array($result['error'])) { |
|
51 | - // OAuth 2.0 Draft 00 style |
|
52 | - $msg = $result['error']['message']; |
|
53 | - } else if (isset($result['error_msg'])) { |
|
54 | - // Rest server style |
|
55 | - $msg = $result['error_msg']; |
|
56 | - } else { |
|
57 | - $msg = 'Unknown Error. Check getResult()'; |
|
58 | - } |
|
59 | - |
|
60 | - parent::__construct($msg, $code); |
|
43 | + $this->result = $result; |
|
44 | + |
|
45 | + $code = isset($result['error_code']) ? $result['error_code'] : 0; |
|
46 | + |
|
47 | + if (isset($result['error_description'])) { |
|
48 | + // OAuth 2.0 Draft 10 style |
|
49 | + $msg = $result['error_description']; |
|
50 | + } else if (isset($result['error']) && is_array($result['error'])) { |
|
51 | + // OAuth 2.0 Draft 00 style |
|
52 | + $msg = $result['error']['message']; |
|
53 | + } else if (isset($result['error_msg'])) { |
|
54 | + // Rest server style |
|
55 | + $msg = $result['error_msg']; |
|
56 | + } else { |
|
57 | + $msg = 'Unknown Error. Check getResult()'; |
|
58 | + } |
|
59 | + |
|
60 | + parent::__construct($msg, $code); |
|
61 | 61 | } |
62 | 62 | |
63 | 63 | /** |
@@ -66,7 +66,7 @@ discard block |
||
66 | 66 | * @return array The result from the API server |
67 | 67 | */ |
68 | 68 | public function getResult() { |
69 | - return $this->result; |
|
69 | + return $this->result; |
|
70 | 70 | } |
71 | 71 | |
72 | 72 | /** |
@@ -76,20 +76,20 @@ discard block |
||
76 | 76 | * @return string |
77 | 77 | */ |
78 | 78 | public function getType() { |
79 | - if (isset($this->result['error'])) { |
|
80 | - $error = $this->result['error']; |
|
81 | - if (is_string($error)) { |
|
82 | - // OAuth 2.0 Draft 10 style |
|
83 | - return $error; |
|
84 | - } else if (is_array($error)) { |
|
85 | - // OAuth 2.0 Draft 00 style |
|
86 | - if (isset($error['type'])) { |
|
87 | - return $error['type']; |
|
88 | - } |
|
89 | - } |
|
90 | - } |
|
91 | - |
|
92 | - return 'Exception'; |
|
79 | + if (isset($this->result['error'])) { |
|
80 | + $error = $this->result['error']; |
|
81 | + if (is_string($error)) { |
|
82 | + // OAuth 2.0 Draft 10 style |
|
83 | + return $error; |
|
84 | + } else if (is_array($error)) { |
|
85 | + // OAuth 2.0 Draft 00 style |
|
86 | + if (isset($error['type'])) { |
|
87 | + return $error['type']; |
|
88 | + } |
|
89 | + } |
|
90 | + } |
|
91 | + |
|
92 | + return 'Exception'; |
|
93 | 93 | } |
94 | 94 | |
95 | 95 | /** |
@@ -98,11 +98,11 @@ discard block |
||
98 | 98 | * @return string The string representation of the error |
99 | 99 | */ |
100 | 100 | public function __toString() { |
101 | - $str = $this->getType() . ': '; |
|
102 | - if ($this->code != 0) { |
|
103 | - $str .= $this->code . ': '; |
|
104 | - } |
|
105 | - return $str . $this->message; |
|
101 | + $str = $this->getType() . ': '; |
|
102 | + if ($this->code != 0) { |
|
103 | + $str .= $this->code . ': '; |
|
104 | + } |
|
105 | + return $str . $this->message; |
|
106 | 106 | } |
107 | 107 | } |
108 | 108 | |
@@ -131,10 +131,10 @@ discard block |
||
131 | 131 | * Default options for curl. |
132 | 132 | */ |
133 | 133 | public static $CURL_OPTS = array( |
134 | - CURLOPT_CONNECTTIMEOUT => 10, |
|
135 | - CURLOPT_RETURNTRANSFER => true, |
|
136 | - CURLOPT_TIMEOUT => 60, |
|
137 | - CURLOPT_USERAGENT => 'facebook-php-3.2', |
|
134 | + CURLOPT_CONNECTTIMEOUT => 10, |
|
135 | + CURLOPT_RETURNTRANSFER => true, |
|
136 | + CURLOPT_TIMEOUT => 60, |
|
137 | + CURLOPT_USERAGENT => 'facebook-php-3.2', |
|
138 | 138 | ); |
139 | 139 | |
140 | 140 | /** |
@@ -142,21 +142,21 @@ discard block |
||
142 | 142 | * the current URL. |
143 | 143 | */ |
144 | 144 | protected static $DROP_QUERY_PARAMS = array( |
145 | - 'code', |
|
146 | - 'state', |
|
147 | - 'signed_request', |
|
145 | + 'code', |
|
146 | + 'state', |
|
147 | + 'signed_request', |
|
148 | 148 | ); |
149 | 149 | |
150 | 150 | /** |
151 | 151 | * Maps aliases to Facebook domains. |
152 | 152 | */ |
153 | 153 | public static $DOMAIN_MAP = array( |
154 | - 'api' => 'https://api.facebook.com/', |
|
155 | - 'api_video' => 'https://api-video.facebook.com/', |
|
156 | - 'api_read' => 'https://api-read.facebook.com/', |
|
157 | - 'graph' => 'https://graph.facebook.com/', |
|
158 | - 'graph_video' => 'https://graph-video.facebook.com/', |
|
159 | - 'www' => 'https://www.facebook.com/', |
|
154 | + 'api' => 'https://api.facebook.com/', |
|
155 | + 'api_video' => 'https://api-video.facebook.com/', |
|
156 | + 'api_read' => 'https://api-read.facebook.com/', |
|
157 | + 'graph' => 'https://graph.facebook.com/', |
|
158 | + 'graph_video' => 'https://graph-video.facebook.com/', |
|
159 | + 'www' => 'https://www.facebook.com/', |
|
160 | 160 | ); |
161 | 161 | |
162 | 162 | /** |
@@ -223,18 +223,18 @@ discard block |
||
223 | 223 | * @param array $config The application configuration |
224 | 224 | */ |
225 | 225 | public function __construct($config) { |
226 | - $this->setAppId($config['appId']); |
|
227 | - $this->setAppSecret($config['secret']); |
|
228 | - if (isset($config['fileUpload'])) { |
|
229 | - $this->setFileUploadSupport($config['fileUpload']); |
|
230 | - } |
|
231 | - if (isset($config['trustForwarded']) && $config['trustForwarded']) { |
|
232 | - $this->trustForwarded = true; |
|
233 | - } |
|
234 | - $state = $this->getPersistentData('state'); |
|
235 | - if (!empty($state)) { |
|
236 | - $this->state = $state; |
|
237 | - } |
|
226 | + $this->setAppId($config['appId']); |
|
227 | + $this->setAppSecret($config['secret']); |
|
228 | + if (isset($config['fileUpload'])) { |
|
229 | + $this->setFileUploadSupport($config['fileUpload']); |
|
230 | + } |
|
231 | + if (isset($config['trustForwarded']) && $config['trustForwarded']) { |
|
232 | + $this->trustForwarded = true; |
|
233 | + } |
|
234 | + $state = $this->getPersistentData('state'); |
|
235 | + if (!empty($state)) { |
|
236 | + $this->state = $state; |
|
237 | + } |
|
238 | 238 | } |
239 | 239 | |
240 | 240 | /** |
@@ -244,8 +244,8 @@ discard block |
||
244 | 244 | * @return BaseFacebook |
245 | 245 | */ |
246 | 246 | public function setAppId($appId) { |
247 | - $this->appId = $appId; |
|
248 | - return $this; |
|
247 | + $this->appId = $appId; |
|
248 | + return $this; |
|
249 | 249 | } |
250 | 250 | |
251 | 251 | /** |
@@ -254,7 +254,7 @@ discard block |
||
254 | 254 | * @return string the Application ID |
255 | 255 | */ |
256 | 256 | public function getAppId() { |
257 | - return $this->appId; |
|
257 | + return $this->appId; |
|
258 | 258 | } |
259 | 259 | |
260 | 260 | /** |
@@ -265,8 +265,8 @@ discard block |
||
265 | 265 | * @deprecated |
266 | 266 | */ |
267 | 267 | public function setApiSecret($apiSecret) { |
268 | - $this->setAppSecret($apiSecret); |
|
269 | - return $this; |
|
268 | + $this->setAppSecret($apiSecret); |
|
269 | + return $this; |
|
270 | 270 | } |
271 | 271 | |
272 | 272 | /** |
@@ -276,8 +276,8 @@ discard block |
||
276 | 276 | * @return BaseFacebook |
277 | 277 | */ |
278 | 278 | public function setAppSecret($appSecret) { |
279 | - $this->appSecret = $appSecret; |
|
280 | - return $this; |
|
279 | + $this->appSecret = $appSecret; |
|
280 | + return $this; |
|
281 | 281 | } |
282 | 282 | |
283 | 283 | /** |
@@ -287,7 +287,7 @@ discard block |
||
287 | 287 | * @deprecated |
288 | 288 | */ |
289 | 289 | public function getApiSecret() { |
290 | - return $this->getAppSecret(); |
|
290 | + return $this->getAppSecret(); |
|
291 | 291 | } |
292 | 292 | |
293 | 293 | /** |
@@ -296,7 +296,7 @@ discard block |
||
296 | 296 | * @return string the App Secret |
297 | 297 | */ |
298 | 298 | public function getAppSecret() { |
299 | - return $this->appSecret; |
|
299 | + return $this->appSecret; |
|
300 | 300 | } |
301 | 301 | |
302 | 302 | /** |
@@ -306,8 +306,8 @@ discard block |
||
306 | 306 | * @return BaseFacebook |
307 | 307 | */ |
308 | 308 | public function setFileUploadSupport($fileUploadSupport) { |
309 | - $this->fileUploadSupport = $fileUploadSupport; |
|
310 | - return $this; |
|
309 | + $this->fileUploadSupport = $fileUploadSupport; |
|
310 | + return $this; |
|
311 | 311 | } |
312 | 312 | |
313 | 313 | /** |
@@ -316,7 +316,7 @@ discard block |
||
316 | 316 | * @return boolean true if and only if the server supports file upload. |
317 | 317 | */ |
318 | 318 | public function getFileUploadSupport() { |
319 | - return $this->fileUploadSupport; |
|
319 | + return $this->fileUploadSupport; |
|
320 | 320 | } |
321 | 321 | |
322 | 322 | /** |
@@ -327,7 +327,7 @@ discard block |
||
327 | 327 | * @return boolean true if and only if the server supports file upload. |
328 | 328 | */ |
329 | 329 | public function useFileUploadSupport() { |
330 | - return $this->getFileUploadSupport(); |
|
330 | + return $this->getFileUploadSupport(); |
|
331 | 331 | } |
332 | 332 | |
333 | 333 | /** |
@@ -339,8 +339,8 @@ discard block |
||
339 | 339 | * @return BaseFacebook |
340 | 340 | */ |
341 | 341 | public function setAccessToken($access_token) { |
342 | - $this->accessToken = $access_token; |
|
343 | - return $this; |
|
342 | + $this->accessToken = $access_token; |
|
343 | + return $this; |
|
344 | 344 | } |
345 | 345 | |
346 | 346 | /** |
@@ -349,41 +349,41 @@ discard block |
||
349 | 349 | * for the workaround. |
350 | 350 | */ |
351 | 351 | public function setExtendedAccessToken() { |
352 | - try { |
|
353 | - // need to circumvent json_decode by calling _oauthRequest |
|
354 | - // directly, since response isn't JSON format. |
|
355 | - $access_token_response = $this->_oauthRequest( |
|
356 | - $this->getUrl('graph', '/oauth/access_token'), |
|
357 | - $params = array( |
|
358 | - 'client_id' => $this->getAppId(), |
|
359 | - 'client_secret' => $this->getAppSecret(), |
|
360 | - 'grant_type' => 'fb_exchange_token', |
|
361 | - 'fb_exchange_token' => $this->getAccessToken(), |
|
362 | - ) |
|
363 | - ); |
|
364 | - } |
|
365 | - catch (FacebookApiException $e) { |
|
366 | - // most likely that user very recently revoked authorization. |
|
367 | - // In any event, we don't have an access token, so say so. |
|
368 | - return false; |
|
369 | - } |
|
370 | - |
|
371 | - if (empty($access_token_response)) { |
|
372 | - return false; |
|
373 | - } |
|
374 | - |
|
375 | - $response_params = array(); |
|
376 | - parse_str($access_token_response, $response_params); |
|
377 | - |
|
378 | - if (!isset($response_params['access_token'])) { |
|
379 | - return false; |
|
380 | - } |
|
381 | - |
|
382 | - $this->destroySession(); |
|
383 | - |
|
384 | - $this->setPersistentData( |
|
385 | - 'access_token', $response_params['access_token'] |
|
386 | - ); |
|
352 | + try { |
|
353 | + // need to circumvent json_decode by calling _oauthRequest |
|
354 | + // directly, since response isn't JSON format. |
|
355 | + $access_token_response = $this->_oauthRequest( |
|
356 | + $this->getUrl('graph', '/oauth/access_token'), |
|
357 | + $params = array( |
|
358 | + 'client_id' => $this->getAppId(), |
|
359 | + 'client_secret' => $this->getAppSecret(), |
|
360 | + 'grant_type' => 'fb_exchange_token', |
|
361 | + 'fb_exchange_token' => $this->getAccessToken(), |
|
362 | + ) |
|
363 | + ); |
|
364 | + } |
|
365 | + catch (FacebookApiException $e) { |
|
366 | + // most likely that user very recently revoked authorization. |
|
367 | + // In any event, we don't have an access token, so say so. |
|
368 | + return false; |
|
369 | + } |
|
370 | + |
|
371 | + if (empty($access_token_response)) { |
|
372 | + return false; |
|
373 | + } |
|
374 | + |
|
375 | + $response_params = array(); |
|
376 | + parse_str($access_token_response, $response_params); |
|
377 | + |
|
378 | + if (!isset($response_params['access_token'])) { |
|
379 | + return false; |
|
380 | + } |
|
381 | + |
|
382 | + $this->destroySession(); |
|
383 | + |
|
384 | + $this->setPersistentData( |
|
385 | + 'access_token', $response_params['access_token'] |
|
386 | + ); |
|
387 | 387 | } |
388 | 388 | |
389 | 389 | /** |
@@ -396,21 +396,21 @@ discard block |
||
396 | 396 | * @return string The access token |
397 | 397 | */ |
398 | 398 | public function getAccessToken() { |
399 | - if ($this->accessToken !== null) { |
|
400 | - // we've done this already and cached it. Just return. |
|
401 | - return $this->accessToken; |
|
402 | - } |
|
403 | - |
|
404 | - // first establish access token to be the application |
|
405 | - // access token, in case we navigate to the /oauth/access_token |
|
406 | - // endpoint, where SOME access token is required. |
|
407 | - $this->setAccessToken($this->getApplicationAccessToken()); |
|
408 | - $user_access_token = $this->getUserAccessToken(); |
|
409 | - if ($user_access_token) { |
|
410 | - $this->setAccessToken($user_access_token); |
|
411 | - } |
|
412 | - |
|
413 | - return $this->accessToken; |
|
399 | + if ($this->accessToken !== null) { |
|
400 | + // we've done this already and cached it. Just return. |
|
401 | + return $this->accessToken; |
|
402 | + } |
|
403 | + |
|
404 | + // first establish access token to be the application |
|
405 | + // access token, in case we navigate to the /oauth/access_token |
|
406 | + // endpoint, where SOME access token is required. |
|
407 | + $this->setAccessToken($this->getApplicationAccessToken()); |
|
408 | + $user_access_token = $this->getUserAccessToken(); |
|
409 | + if ($user_access_token) { |
|
410 | + $this->setAccessToken($user_access_token); |
|
411 | + } |
|
412 | + |
|
413 | + return $this->accessToken; |
|
414 | 414 | } |
415 | 415 | |
416 | 416 | /** |
@@ -424,60 +424,60 @@ discard block |
||
424 | 424 | * could not be determined. |
425 | 425 | */ |
426 | 426 | protected function getUserAccessToken() { |
427 | - // first, consider a signed request if it's supplied. |
|
428 | - // if there is a signed request, then it alone determines |
|
429 | - // the access token. |
|
430 | - $signed_request = $this->getSignedRequest(); |
|
431 | - if ($signed_request) { |
|
432 | - // apps.facebook.com hands the access_token in the signed_request |
|
433 | - if (array_key_exists('oauth_token', $signed_request)) { |
|
434 | - $access_token = $signed_request['oauth_token']; |
|
435 | - $this->setPersistentData('access_token', $access_token); |
|
436 | - return $access_token; |
|
437 | - } |
|
438 | - |
|
439 | - // the JS SDK puts a code in with the redirect_uri of '' |
|
440 | - if (array_key_exists('code', $signed_request)) { |
|
441 | - $code = $signed_request['code']; |
|
442 | - if ($code && $code == $this->getPersistentData('code')) { |
|
443 | - // short-circuit if the code we have is the same as the one presented |
|
444 | - return $this->getPersistentData('access_token'); |
|
445 | - } |
|
446 | - |
|
447 | - $access_token = $this->getAccessTokenFromCode($code, ''); |
|
448 | - if ($access_token) { |
|
449 | - $this->setPersistentData('code', $code); |
|
450 | - $this->setPersistentData('access_token', $access_token); |
|
451 | - return $access_token; |
|
452 | - } |
|
453 | - } |
|
454 | - |
|
455 | - // signed request states there's no access token, so anything |
|
456 | - // stored should be cleared. |
|
457 | - $this->clearAllPersistentData(); |
|
458 | - return false; // respect the signed request's data, even |
|
459 | - // if there's an authorization code or something else |
|
460 | - } |
|
461 | - |
|
462 | - $code = $this->getCode(); |
|
463 | - if ($code && $code != $this->getPersistentData('code')) { |
|
464 | - $access_token = $this->getAccessTokenFromCode($code); |
|
465 | - if ($access_token) { |
|
466 | - $this->setPersistentData('code', $code); |
|
467 | - $this->setPersistentData('access_token', $access_token); |
|
468 | - return $access_token; |
|
469 | - } |
|
470 | - |
|
471 | - // code was bogus, so everything based on it should be invalidated. |
|
472 | - $this->clearAllPersistentData(); |
|
473 | - return false; |
|
474 | - } |
|
475 | - |
|
476 | - // as a fallback, just return whatever is in the persistent |
|
477 | - // store, knowing nothing explicit (signed request, authorization |
|
478 | - // code, etc.) was present to shadow it (or we saw a code in $_REQUEST, |
|
479 | - // but it's the same as what's in the persistent store) |
|
480 | - return $this->getPersistentData('access_token'); |
|
427 | + // first, consider a signed request if it's supplied. |
|
428 | + // if there is a signed request, then it alone determines |
|
429 | + // the access token. |
|
430 | + $signed_request = $this->getSignedRequest(); |
|
431 | + if ($signed_request) { |
|
432 | + // apps.facebook.com hands the access_token in the signed_request |
|
433 | + if (array_key_exists('oauth_token', $signed_request)) { |
|
434 | + $access_token = $signed_request['oauth_token']; |
|
435 | + $this->setPersistentData('access_token', $access_token); |
|
436 | + return $access_token; |
|
437 | + } |
|
438 | + |
|
439 | + // the JS SDK puts a code in with the redirect_uri of '' |
|
440 | + if (array_key_exists('code', $signed_request)) { |
|
441 | + $code = $signed_request['code']; |
|
442 | + if ($code && $code == $this->getPersistentData('code')) { |
|
443 | + // short-circuit if the code we have is the same as the one presented |
|
444 | + return $this->getPersistentData('access_token'); |
|
445 | + } |
|
446 | + |
|
447 | + $access_token = $this->getAccessTokenFromCode($code, ''); |
|
448 | + if ($access_token) { |
|
449 | + $this->setPersistentData('code', $code); |
|
450 | + $this->setPersistentData('access_token', $access_token); |
|
451 | + return $access_token; |
|
452 | + } |
|
453 | + } |
|
454 | + |
|
455 | + // signed request states there's no access token, so anything |
|
456 | + // stored should be cleared. |
|
457 | + $this->clearAllPersistentData(); |
|
458 | + return false; // respect the signed request's data, even |
|
459 | + // if there's an authorization code or something else |
|
460 | + } |
|
461 | + |
|
462 | + $code = $this->getCode(); |
|
463 | + if ($code && $code != $this->getPersistentData('code')) { |
|
464 | + $access_token = $this->getAccessTokenFromCode($code); |
|
465 | + if ($access_token) { |
|
466 | + $this->setPersistentData('code', $code); |
|
467 | + $this->setPersistentData('access_token', $access_token); |
|
468 | + return $access_token; |
|
469 | + } |
|
470 | + |
|
471 | + // code was bogus, so everything based on it should be invalidated. |
|
472 | + $this->clearAllPersistentData(); |
|
473 | + return false; |
|
474 | + } |
|
475 | + |
|
476 | + // as a fallback, just return whatever is in the persistent |
|
477 | + // store, knowing nothing explicit (signed request, authorization |
|
478 | + // code, etc.) was present to shadow it (or we saw a code in $_REQUEST, |
|
479 | + // but it's the same as what's in the persistent store) |
|
480 | + return $this->getPersistentData('access_token'); |
|
481 | 481 | } |
482 | 482 | |
483 | 483 | /** |
@@ -487,16 +487,16 @@ discard block |
||
487 | 487 | * @return string the signed request, if available, or null otherwise. |
488 | 488 | */ |
489 | 489 | public function getSignedRequest() { |
490 | - if (!$this->signedRequest) { |
|
491 | - if (!empty($_REQUEST['signed_request'])) { |
|
492 | - $this->signedRequest = $this->parseSignedRequest( |
|
493 | - $_REQUEST['signed_request']); |
|
494 | - } else if (!empty($_COOKIE[$this->getSignedRequestCookieName()])) { |
|
495 | - $this->signedRequest = $this->parseSignedRequest( |
|
496 | - $_COOKIE[$this->getSignedRequestCookieName()]); |
|
497 | - } |
|
498 | - } |
|
499 | - return $this->signedRequest; |
|
490 | + if (!$this->signedRequest) { |
|
491 | + if (!empty($_REQUEST['signed_request'])) { |
|
492 | + $this->signedRequest = $this->parseSignedRequest( |
|
493 | + $_REQUEST['signed_request']); |
|
494 | + } else if (!empty($_COOKIE[$this->getSignedRequestCookieName()])) { |
|
495 | + $this->signedRequest = $this->parseSignedRequest( |
|
496 | + $_COOKIE[$this->getSignedRequestCookieName()]); |
|
497 | + } |
|
498 | + } |
|
499 | + return $this->signedRequest; |
|
500 | 500 | } |
501 | 501 | |
502 | 502 | /** |
@@ -506,12 +506,12 @@ discard block |
||
506 | 506 | * @return string the UID if available. |
507 | 507 | */ |
508 | 508 | public function getUser() { |
509 | - if ($this->user !== null) { |
|
510 | - // we've already determined this and cached the value. |
|
511 | - return $this->user; |
|
512 | - } |
|
509 | + if ($this->user !== null) { |
|
510 | + // we've already determined this and cached the value. |
|
511 | + return $this->user; |
|
512 | + } |
|
513 | 513 | |
514 | - return $this->user = $this->getUserFromAvailableData(); |
|
514 | + return $this->user = $this->getUserFromAvailableData(); |
|
515 | 515 | } |
516 | 516 | |
517 | 517 | /** |
@@ -523,45 +523,45 @@ discard block |
||
523 | 523 | * or 0 if no such user exists. |
524 | 524 | */ |
525 | 525 | protected function getUserFromAvailableData() { |
526 | - // if a signed request is supplied, then it solely determines |
|
527 | - // who the user is. |
|
528 | - $signed_request = $this->getSignedRequest(); |
|
529 | - if ($signed_request) { |
|
530 | - if (array_key_exists('user_id', $signed_request)) { |
|
531 | - $user = $signed_request['user_id']; |
|
532 | - |
|
533 | - if($user != $this->getPersistentData('user_id')){ |
|
534 | - $this->clearAllPersistentData(); |
|
535 | - } |
|
536 | - |
|
537 | - $this->setPersistentData('user_id', $signed_request['user_id']); |
|
538 | - return $user; |
|
539 | - } |
|
540 | - |
|
541 | - // if the signed request didn't present a user id, then invalidate |
|
542 | - // all entries in any persistent store. |
|
543 | - $this->clearAllPersistentData(); |
|
544 | - return 0; |
|
545 | - } |
|
546 | - |
|
547 | - $user = $this->getPersistentData('user_id', $default = 0); |
|
548 | - $persisted_access_token = $this->getPersistentData('access_token'); |
|
549 | - |
|
550 | - // use access_token to fetch user id if we have a user access_token, or if |
|
551 | - // the cached access token has changed. |
|
552 | - $access_token = $this->getAccessToken(); |
|
553 | - if ($access_token && |
|
554 | - $access_token != $this->getApplicationAccessToken() && |
|
555 | - !($user && $persisted_access_token == $access_token)) { |
|
556 | - $user = $this->getUserFromAccessToken(); |
|
557 | - if ($user) { |
|
558 | - $this->setPersistentData('user_id', $user); |
|
559 | - } else { |
|
560 | - $this->clearAllPersistentData(); |
|
561 | - } |
|
562 | - } |
|
563 | - |
|
564 | - return $user; |
|
526 | + // if a signed request is supplied, then it solely determines |
|
527 | + // who the user is. |
|
528 | + $signed_request = $this->getSignedRequest(); |
|
529 | + if ($signed_request) { |
|
530 | + if (array_key_exists('user_id', $signed_request)) { |
|
531 | + $user = $signed_request['user_id']; |
|
532 | + |
|
533 | + if($user != $this->getPersistentData('user_id')){ |
|
534 | + $this->clearAllPersistentData(); |
|
535 | + } |
|
536 | + |
|
537 | + $this->setPersistentData('user_id', $signed_request['user_id']); |
|
538 | + return $user; |
|
539 | + } |
|
540 | + |
|
541 | + // if the signed request didn't present a user id, then invalidate |
|
542 | + // all entries in any persistent store. |
|
543 | + $this->clearAllPersistentData(); |
|
544 | + return 0; |
|
545 | + } |
|
546 | + |
|
547 | + $user = $this->getPersistentData('user_id', $default = 0); |
|
548 | + $persisted_access_token = $this->getPersistentData('access_token'); |
|
549 | + |
|
550 | + // use access_token to fetch user id if we have a user access_token, or if |
|
551 | + // the cached access token has changed. |
|
552 | + $access_token = $this->getAccessToken(); |
|
553 | + if ($access_token && |
|
554 | + $access_token != $this->getApplicationAccessToken() && |
|
555 | + !($user && $persisted_access_token == $access_token)) { |
|
556 | + $user = $this->getUserFromAccessToken(); |
|
557 | + if ($user) { |
|
558 | + $this->setPersistentData('user_id', $user); |
|
559 | + } else { |
|
560 | + $this->clearAllPersistentData(); |
|
561 | + } |
|
562 | + } |
|
563 | + |
|
564 | + return $user; |
|
565 | 565 | } |
566 | 566 | |
567 | 567 | /** |
@@ -577,23 +577,23 @@ discard block |
||
577 | 577 | * @return string The URL for the login flow |
578 | 578 | */ |
579 | 579 | public function getLoginUrl($params=array()) { |
580 | - $this->establishCSRFTokenState(); |
|
581 | - $currentUrl = $this->getCurrentUrl(); |
|
582 | - |
|
583 | - // if 'scope' is passed as an array, convert to comma separated list |
|
584 | - $scopeParams = isset($params['scope']) ? $params['scope'] : null; |
|
585 | - if ($scopeParams && is_array($scopeParams)) { |
|
586 | - $params['scope'] = implode(',', $scopeParams); |
|
587 | - } |
|
588 | - |
|
589 | - return $this->getUrl( |
|
590 | - 'www', |
|
591 | - 'dialog/oauth', |
|
592 | - array_merge(array( |
|
593 | - 'client_id' => $this->getAppId(), |
|
594 | - 'redirect_uri' => $currentUrl, // possibly overwritten |
|
595 | - 'state' => $this->state), |
|
596 | - $params)); |
|
580 | + $this->establishCSRFTokenState(); |
|
581 | + $currentUrl = $this->getCurrentUrl(); |
|
582 | + |
|
583 | + // if 'scope' is passed as an array, convert to comma separated list |
|
584 | + $scopeParams = isset($params['scope']) ? $params['scope'] : null; |
|
585 | + if ($scopeParams && is_array($scopeParams)) { |
|
586 | + $params['scope'] = implode(',', $scopeParams); |
|
587 | + } |
|
588 | + |
|
589 | + return $this->getUrl( |
|
590 | + 'www', |
|
591 | + 'dialog/oauth', |
|
592 | + array_merge(array( |
|
593 | + 'client_id' => $this->getAppId(), |
|
594 | + 'redirect_uri' => $currentUrl, // possibly overwritten |
|
595 | + 'state' => $this->state), |
|
596 | + $params)); |
|
597 | 597 | } |
598 | 598 | |
599 | 599 | /** |
@@ -606,14 +606,14 @@ discard block |
||
606 | 606 | * @return string The URL for the logout flow |
607 | 607 | */ |
608 | 608 | public function getLogoutUrl($params=array()) { |
609 | - return $this->getUrl( |
|
610 | - 'www', |
|
611 | - 'logout.php', |
|
612 | - array_merge(array( |
|
613 | - 'next' => $this->getCurrentUrl(), |
|
614 | - 'access_token' => $this->getUserAccessToken(), |
|
615 | - ), $params) |
|
616 | - ); |
|
609 | + return $this->getUrl( |
|
610 | + 'www', |
|
611 | + 'logout.php', |
|
612 | + array_merge(array( |
|
613 | + 'next' => $this->getCurrentUrl(), |
|
614 | + 'access_token' => $this->getUserAccessToken(), |
|
615 | + ), $params) |
|
616 | + ); |
|
617 | 617 | } |
618 | 618 | |
619 | 619 | /** |
@@ -628,17 +628,17 @@ discard block |
||
628 | 628 | * @return string The URL for the logout flow |
629 | 629 | */ |
630 | 630 | public function getLoginStatusUrl($params=array()) { |
631 | - return $this->getUrl( |
|
632 | - 'www', |
|
633 | - 'extern/login_status.php', |
|
634 | - array_merge(array( |
|
635 | - 'api_key' => $this->getAppId(), |
|
636 | - 'no_session' => $this->getCurrentUrl(), |
|
637 | - 'no_user' => $this->getCurrentUrl(), |
|
638 | - 'ok_session' => $this->getCurrentUrl(), |
|
639 | - 'session_version' => 3, |
|
640 | - ), $params) |
|
641 | - ); |
|
631 | + return $this->getUrl( |
|
632 | + 'www', |
|
633 | + 'extern/login_status.php', |
|
634 | + array_merge(array( |
|
635 | + 'api_key' => $this->getAppId(), |
|
636 | + 'no_session' => $this->getCurrentUrl(), |
|
637 | + 'no_user' => $this->getCurrentUrl(), |
|
638 | + 'ok_session' => $this->getCurrentUrl(), |
|
639 | + 'session_version' => 3, |
|
640 | + ), $params) |
|
641 | + ); |
|
642 | 642 | } |
643 | 643 | |
644 | 644 | /** |
@@ -647,12 +647,12 @@ discard block |
||
647 | 647 | * @return mixed The decoded response |
648 | 648 | */ |
649 | 649 | public function api(/* polymorphic */) { |
650 | - $args = func_get_args(); |
|
651 | - if (is_array($args[0])) { |
|
652 | - return $this->_restserver($args[0]); |
|
653 | - } else { |
|
654 | - return call_user_func_array(array($this, '_graph'), $args); |
|
655 | - } |
|
650 | + $args = func_get_args(); |
|
651 | + if (is_array($args[0])) { |
|
652 | + return $this->_restserver($args[0]); |
|
653 | + } else { |
|
654 | + return call_user_func_array(array($this, '_graph'), $args); |
|
655 | + } |
|
656 | 656 | } |
657 | 657 | |
658 | 658 | /** |
@@ -665,7 +665,7 @@ discard block |
||
665 | 665 | * the signed request value. |
666 | 666 | */ |
667 | 667 | protected function getSignedRequestCookieName() { |
668 | - return 'fbsr_'.$this->getAppId(); |
|
668 | + return 'fbsr_'.$this->getAppId(); |
|
669 | 669 | } |
670 | 670 | |
671 | 671 | /** |
@@ -676,7 +676,7 @@ discard block |
||
676 | 676 | * @return string the name of the cookie that would house metadata. |
677 | 677 | */ |
678 | 678 | protected function getMetadataCookieName() { |
679 | - return 'fbm_'.$this->getAppId(); |
|
679 | + return 'fbm_'.$this->getAppId(); |
|
680 | 680 | } |
681 | 681 | |
682 | 682 | /** |
@@ -688,22 +688,22 @@ discard block |
||
688 | 688 | * code could not be determined. |
689 | 689 | */ |
690 | 690 | protected function getCode() { |
691 | - if (isset($_REQUEST['code'])) { |
|
692 | - if ($this->state !== null && |
|
693 | - isset($_REQUEST['state']) && |
|
694 | - $this->state === $_REQUEST['state']) { |
|
695 | - |
|
696 | - // CSRF state has done its job, so clear it |
|
697 | - $this->state = null; |
|
698 | - $this->clearPersistentData('state'); |
|
699 | - return $_REQUEST['code']; |
|
700 | - } else { |
|
701 | - self::errorLog('CSRF state token does not match one provided.'); |
|
702 | - return false; |
|
703 | - } |
|
704 | - } |
|
705 | - |
|
706 | - return false; |
|
691 | + if (isset($_REQUEST['code'])) { |
|
692 | + if ($this->state !== null && |
|
693 | + isset($_REQUEST['state']) && |
|
694 | + $this->state === $_REQUEST['state']) { |
|
695 | + |
|
696 | + // CSRF state has done its job, so clear it |
|
697 | + $this->state = null; |
|
698 | + $this->clearPersistentData('state'); |
|
699 | + return $_REQUEST['code']; |
|
700 | + } else { |
|
701 | + self::errorLog('CSRF state token does not match one provided.'); |
|
702 | + return false; |
|
703 | + } |
|
704 | + } |
|
705 | + |
|
706 | + return false; |
|
707 | 707 | } |
708 | 708 | |
709 | 709 | /** |
@@ -717,12 +717,12 @@ discard block |
||
717 | 717 | * if the Facebook user could not be determined. |
718 | 718 | */ |
719 | 719 | protected function getUserFromAccessToken() { |
720 | - try { |
|
721 | - $user_info = $this->api('/me'); |
|
722 | - return $user_info['id']; |
|
723 | - } catch (FacebookApiException $e) { |
|
724 | - return 0; |
|
725 | - } |
|
720 | + try { |
|
721 | + $user_info = $this->api('/me'); |
|
722 | + return $user_info['id']; |
|
723 | + } catch (FacebookApiException $e) { |
|
724 | + return 0; |
|
725 | + } |
|
726 | 726 | } |
727 | 727 | |
728 | 728 | /** |
@@ -733,7 +733,7 @@ discard block |
||
733 | 733 | * public information about users and applications. |
734 | 734 | */ |
735 | 735 | protected function getApplicationAccessToken() { |
736 | - return $this->appId.'|'.$this->appSecret; |
|
736 | + return $this->appId.'|'.$this->appSecret; |
|
737 | 737 | } |
738 | 738 | |
739 | 739 | /** |
@@ -742,10 +742,10 @@ discard block |
||
742 | 742 | * @return void |
743 | 743 | */ |
744 | 744 | protected function establishCSRFTokenState() { |
745 | - if ($this->state === null) { |
|
746 | - $this->state = md5(uniqid(mt_rand(), true)); |
|
747 | - $this->setPersistentData('state', $this->state); |
|
748 | - } |
|
745 | + if ($this->state === null) { |
|
746 | + $this->state = md5(uniqid(mt_rand(), true)); |
|
747 | + $this->setPersistentData('state', $this->state); |
|
748 | + } |
|
749 | 749 | } |
750 | 750 | |
751 | 751 | /** |
@@ -761,41 +761,41 @@ discard block |
||
761 | 761 | * false if an access token could not be generated. |
762 | 762 | */ |
763 | 763 | protected function getAccessTokenFromCode($code, $redirect_uri = null) { |
764 | - if (empty($code)) { |
|
765 | - return false; |
|
766 | - } |
|
767 | - |
|
768 | - if ($redirect_uri === null) { |
|
769 | - $redirect_uri = $this->getCurrentUrl(); |
|
770 | - } |
|
771 | - |
|
772 | - try { |
|
773 | - // need to circumvent json_decode by calling _oauthRequest |
|
774 | - // directly, since response isn't JSON format. |
|
775 | - $access_token_response = |
|
776 | - $this->_oauthRequest( |
|
777 | - $this->getUrl('graph', '/oauth/access_token'), |
|
778 | - $params = array('client_id' => $this->getAppId(), |
|
779 | - 'client_secret' => $this->getAppSecret(), |
|
780 | - 'redirect_uri' => $redirect_uri, |
|
781 | - 'code' => $code)); |
|
782 | - } catch (FacebookApiException $e) { |
|
783 | - // most likely that user very recently revoked authorization. |
|
784 | - // In any event, we don't have an access token, so say so. |
|
785 | - return false; |
|
786 | - } |
|
787 | - |
|
788 | - if (empty($access_token_response)) { |
|
789 | - return false; |
|
790 | - } |
|
791 | - |
|
792 | - $response_params = array(); |
|
793 | - parse_str($access_token_response, $response_params); |
|
794 | - if (!isset($response_params['access_token'])) { |
|
795 | - return false; |
|
796 | - } |
|
797 | - |
|
798 | - return $response_params['access_token']; |
|
764 | + if (empty($code)) { |
|
765 | + return false; |
|
766 | + } |
|
767 | + |
|
768 | + if ($redirect_uri === null) { |
|
769 | + $redirect_uri = $this->getCurrentUrl(); |
|
770 | + } |
|
771 | + |
|
772 | + try { |
|
773 | + // need to circumvent json_decode by calling _oauthRequest |
|
774 | + // directly, since response isn't JSON format. |
|
775 | + $access_token_response = |
|
776 | + $this->_oauthRequest( |
|
777 | + $this->getUrl('graph', '/oauth/access_token'), |
|
778 | + $params = array('client_id' => $this->getAppId(), |
|
779 | + 'client_secret' => $this->getAppSecret(), |
|
780 | + 'redirect_uri' => $redirect_uri, |
|
781 | + 'code' => $code)); |
|
782 | + } catch (FacebookApiException $e) { |
|
783 | + // most likely that user very recently revoked authorization. |
|
784 | + // In any event, we don't have an access token, so say so. |
|
785 | + return false; |
|
786 | + } |
|
787 | + |
|
788 | + if (empty($access_token_response)) { |
|
789 | + return false; |
|
790 | + } |
|
791 | + |
|
792 | + $response_params = array(); |
|
793 | + parse_str($access_token_response, $response_params); |
|
794 | + if (!isset($response_params['access_token'])) { |
|
795 | + return false; |
|
796 | + } |
|
797 | + |
|
798 | + return $response_params['access_token']; |
|
799 | 799 | } |
800 | 800 | |
801 | 801 | /** |
@@ -807,29 +807,29 @@ discard block |
||
807 | 807 | * @throws FacebookApiException |
808 | 808 | */ |
809 | 809 | protected function _restserver($params) { |
810 | - // generic application level parameters |
|
811 | - $params['api_key'] = $this->getAppId(); |
|
812 | - $params['format'] = 'json-strings'; |
|
813 | - |
|
814 | - $result = json_decode($this->_oauthRequest( |
|
815 | - $this->getApiUrl($params['method']), |
|
816 | - $params |
|
817 | - ), true); |
|
818 | - |
|
819 | - // results are returned, errors are thrown |
|
820 | - if (is_array($result) && isset($result['error_code'])) { |
|
821 | - $this->throwAPIException($result); |
|
822 | - // @codeCoverageIgnoreStart |
|
823 | - } |
|
824 | - // @codeCoverageIgnoreEnd |
|
825 | - |
|
826 | - $method = strtolower($params['method']); |
|
827 | - if ($method === 'auth.expiresession' || |
|
828 | - $method === 'auth.revokeauthorization') { |
|
829 | - $this->destroySession(); |
|
830 | - } |
|
831 | - |
|
832 | - return $result; |
|
810 | + // generic application level parameters |
|
811 | + $params['api_key'] = $this->getAppId(); |
|
812 | + $params['format'] = 'json-strings'; |
|
813 | + |
|
814 | + $result = json_decode($this->_oauthRequest( |
|
815 | + $this->getApiUrl($params['method']), |
|
816 | + $params |
|
817 | + ), true); |
|
818 | + |
|
819 | + // results are returned, errors are thrown |
|
820 | + if (is_array($result) && isset($result['error_code'])) { |
|
821 | + $this->throwAPIException($result); |
|
822 | + // @codeCoverageIgnoreStart |
|
823 | + } |
|
824 | + // @codeCoverageIgnoreEnd |
|
825 | + |
|
826 | + $method = strtolower($params['method']); |
|
827 | + if ($method === 'auth.expiresession' || |
|
828 | + $method === 'auth.revokeauthorization') { |
|
829 | + $this->destroySession(); |
|
830 | + } |
|
831 | + |
|
832 | + return $result; |
|
833 | 833 | } |
834 | 834 | |
835 | 835 | /** |
@@ -841,10 +841,10 @@ discard block |
||
841 | 841 | * @return boolean true if this is video post |
842 | 842 | */ |
843 | 843 | protected function isVideoPost($path, $method = 'GET') { |
844 | - if ($method == 'POST' && preg_match("/^(\/)(.+)(\/)(videos)$/", $path)) { |
|
845 | - return true; |
|
846 | - } |
|
847 | - return false; |
|
844 | + if ($method == 'POST' && preg_match("/^(\/)(.+)(\/)(videos)$/", $path)) { |
|
845 | + return true; |
|
846 | + } |
|
847 | + return false; |
|
848 | 848 | } |
849 | 849 | |
850 | 850 | /** |
@@ -858,31 +858,31 @@ discard block |
||
858 | 858 | * @throws FacebookApiException |
859 | 859 | */ |
860 | 860 | protected function _graph($path, $method = 'GET', $params = array()) { |
861 | - if (is_array($method) && empty($params)) { |
|
862 | - $params = $method; |
|
863 | - $method = 'GET'; |
|
864 | - } |
|
865 | - $params['method'] = $method; // method override as we always do a POST |
|
866 | - |
|
867 | - if ($this->isVideoPost($path, $method)) { |
|
868 | - $domainKey = 'graph_video'; |
|
869 | - } else { |
|
870 | - $domainKey = 'graph'; |
|
871 | - } |
|
872 | - |
|
873 | - $result = json_decode($this->_oauthRequest( |
|
874 | - $this->getUrl($domainKey, $path), |
|
875 | - $params |
|
876 | - ), true); |
|
877 | - |
|
878 | - // results are returned, errors are thrown |
|
879 | - if (is_array($result) && isset($result['error'])) { |
|
880 | - $this->throwAPIException($result); |
|
881 | - // @codeCoverageIgnoreStart |
|
882 | - } |
|
883 | - // @codeCoverageIgnoreEnd |
|
884 | - |
|
885 | - return $result; |
|
861 | + if (is_array($method) && empty($params)) { |
|
862 | + $params = $method; |
|
863 | + $method = 'GET'; |
|
864 | + } |
|
865 | + $params['method'] = $method; // method override as we always do a POST |
|
866 | + |
|
867 | + if ($this->isVideoPost($path, $method)) { |
|
868 | + $domainKey = 'graph_video'; |
|
869 | + } else { |
|
870 | + $domainKey = 'graph'; |
|
871 | + } |
|
872 | + |
|
873 | + $result = json_decode($this->_oauthRequest( |
|
874 | + $this->getUrl($domainKey, $path), |
|
875 | + $params |
|
876 | + ), true); |
|
877 | + |
|
878 | + // results are returned, errors are thrown |
|
879 | + if (is_array($result) && isset($result['error'])) { |
|
880 | + $this->throwAPIException($result); |
|
881 | + // @codeCoverageIgnoreStart |
|
882 | + } |
|
883 | + // @codeCoverageIgnoreEnd |
|
884 | + |
|
885 | + return $result; |
|
886 | 886 | } |
887 | 887 | |
888 | 888 | /** |
@@ -895,22 +895,22 @@ discard block |
||
895 | 895 | * @throws FacebookApiException |
896 | 896 | */ |
897 | 897 | protected function _oauthRequest($url, $params) { |
898 | - if (!isset($params['access_token'])) { |
|
899 | - $params['access_token'] = $this->getAccessToken(); |
|
900 | - } |
|
901 | - |
|
902 | - if (isset($params['access_token'])) { |
|
903 | - $params['appsecret_proof'] = $this->getAppSecretProof($params['access_token']); |
|
904 | - } |
|
905 | - |
|
906 | - // json_encode all params values that are not strings |
|
907 | - foreach ($params as $key => $value) { |
|
908 | - if (!is_string($value)) { |
|
909 | - $params[$key] = json_encode($value); |
|
910 | - } |
|
911 | - } |
|
912 | - |
|
913 | - return $this->makeRequest($url, $params); |
|
898 | + if (!isset($params['access_token'])) { |
|
899 | + $params['access_token'] = $this->getAccessToken(); |
|
900 | + } |
|
901 | + |
|
902 | + if (isset($params['access_token'])) { |
|
903 | + $params['appsecret_proof'] = $this->getAppSecretProof($params['access_token']); |
|
904 | + } |
|
905 | + |
|
906 | + // json_encode all params values that are not strings |
|
907 | + foreach ($params as $key => $value) { |
|
908 | + if (!is_string($value)) { |
|
909 | + $params[$key] = json_encode($value); |
|
910 | + } |
|
911 | + } |
|
912 | + |
|
913 | + return $this->makeRequest($url, $params); |
|
914 | 914 | } |
915 | 915 | |
916 | 916 | /** |
@@ -923,7 +923,7 @@ discard block |
||
923 | 923 | * @return string The sha256 hash of the access_token |
924 | 924 | */ |
925 | 925 | protected function getAppSecretProof($access_token) { |
926 | - return hash_hmac('sha256', $access_token, $this->getAppSecret()); |
|
926 | + return hash_hmac('sha256', $access_token, $this->getAppSecret()); |
|
927 | 927 | } |
928 | 928 | |
929 | 929 | /** |
@@ -938,71 +938,71 @@ discard block |
||
938 | 938 | * @return string The response text |
939 | 939 | */ |
940 | 940 | protected function makeRequest($url, $params, $ch=null) { |
941 | - if (!$ch) { |
|
942 | - $ch = curl_init(); |
|
943 | - } |
|
944 | - |
|
945 | - $opts = self::$CURL_OPTS; |
|
946 | - if ($this->getFileUploadSupport()) { |
|
947 | - $opts[CURLOPT_POSTFIELDS] = $params; |
|
948 | - } else { |
|
949 | - $opts[CURLOPT_POSTFIELDS] = http_build_query($params, null, '&'); |
|
950 | - } |
|
951 | - $opts[CURLOPT_URL] = $url; |
|
952 | - |
|
953 | - // disable the 'Expect: 100-continue' behaviour. This causes CURL to wait |
|
954 | - // for 2 seconds if the server does not support this header. |
|
955 | - if (isset($opts[CURLOPT_HTTPHEADER])) { |
|
956 | - $existing_headers = $opts[CURLOPT_HTTPHEADER]; |
|
957 | - $existing_headers[] = 'Expect:'; |
|
958 | - $opts[CURLOPT_HTTPHEADER] = $existing_headers; |
|
959 | - } else { |
|
960 | - $opts[CURLOPT_HTTPHEADER] = array('Expect:'); |
|
961 | - } |
|
962 | - |
|
963 | - curl_setopt_array($ch, $opts); |
|
964 | - $result = curl_exec($ch); |
|
965 | - |
|
966 | - if (curl_errno($ch) == 60) { // CURLE_SSL_CACERT |
|
967 | - self::errorLog('Invalid or no certificate authority found, '. |
|
968 | - 'using bundled information'); |
|
969 | - curl_setopt($ch, CURLOPT_CAINFO, |
|
970 | - dirname(__FILE__) . '/fb_ca_chain_bundle.crt'); |
|
971 | - $result = curl_exec($ch); |
|
972 | - } |
|
973 | - |
|
974 | - // With dual stacked DNS responses, it's possible for a server to |
|
975 | - // have IPv6 enabled but not have IPv6 connectivity. If this is |
|
976 | - // the case, curl will try IPv4 first and if that fails, then it will |
|
977 | - // fall back to IPv6 and the error EHOSTUNREACH is returned by the |
|
978 | - // operating system. |
|
979 | - if ($result === false && empty($opts[CURLOPT_IPRESOLVE])) { |
|
980 | - $matches = array(); |
|
981 | - $regex = '/Failed to connect to ([^:].*): Network is unreachable/'; |
|
982 | - if (preg_match($regex, curl_error($ch), $matches)) { |
|
983 | - if (strlen(@inet_pton($matches[1])) === 16) { |
|
984 | - self::errorLog('Invalid IPv6 configuration on server, '. |
|
985 | - 'Please disable or get native IPv6 on your server.'); |
|
986 | - self::$CURL_OPTS[CURLOPT_IPRESOLVE] = CURL_IPRESOLVE_V4; |
|
987 | - curl_setopt($ch, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4); |
|
988 | - $result = curl_exec($ch); |
|
989 | - } |
|
990 | - } |
|
991 | - } |
|
992 | - |
|
993 | - if ($result === false) { |
|
994 | - $e = new FacebookApiException(array( |
|
995 | - 'error_code' => curl_errno($ch), |
|
996 | - 'error' => array( |
|
997 | - 'message' => curl_error($ch), |
|
998 | - 'type' => 'CurlException', |
|
999 | - ), |
|
1000 | - )); |
|
1001 | - curl_close($ch); |
|
1002 | - throw $e; |
|
1003 | - } |
|
1004 | - curl_close($ch); |
|
1005 | - return $result; |
|
941 | + if (!$ch) { |
|
942 | + $ch = curl_init(); |
|
943 | + } |
|
944 | + |
|
945 | + $opts = self::$CURL_OPTS; |
|
946 | + if ($this->getFileUploadSupport()) { |
|
947 | + $opts[CURLOPT_POSTFIELDS] = $params; |
|
948 | + } else { |
|
949 | + $opts[CURLOPT_POSTFIELDS] = http_build_query($params, null, '&'); |
|
950 | + } |
|
951 | + $opts[CURLOPT_URL] = $url; |
|
952 | + |
|
953 | + // disable the 'Expect: 100-continue' behaviour. This causes CURL to wait |
|
954 | + // for 2 seconds if the server does not support this header. |
|
955 | + if (isset($opts[CURLOPT_HTTPHEADER])) { |
|
956 | + $existing_headers = $opts[CURLOPT_HTTPHEADER]; |
|
957 | + $existing_headers[] = 'Expect:'; |
|
958 | + $opts[CURLOPT_HTTPHEADER] = $existing_headers; |
|
959 | + } else { |
|
960 | + $opts[CURLOPT_HTTPHEADER] = array('Expect:'); |
|
961 | + } |
|
962 | + |
|
963 | + curl_setopt_array($ch, $opts); |
|
964 | + $result = curl_exec($ch); |
|
965 | + |
|
966 | + if (curl_errno($ch) == 60) { // CURLE_SSL_CACERT |
|
967 | + self::errorLog('Invalid or no certificate authority found, '. |
|
968 | + 'using bundled information'); |
|
969 | + curl_setopt($ch, CURLOPT_CAINFO, |
|
970 | + dirname(__FILE__) . '/fb_ca_chain_bundle.crt'); |
|
971 | + $result = curl_exec($ch); |
|
972 | + } |
|
973 | + |
|
974 | + // With dual stacked DNS responses, it's possible for a server to |
|
975 | + // have IPv6 enabled but not have IPv6 connectivity. If this is |
|
976 | + // the case, curl will try IPv4 first and if that fails, then it will |
|
977 | + // fall back to IPv6 and the error EHOSTUNREACH is returned by the |
|
978 | + // operating system. |
|
979 | + if ($result === false && empty($opts[CURLOPT_IPRESOLVE])) { |
|
980 | + $matches = array(); |
|
981 | + $regex = '/Failed to connect to ([^:].*): Network is unreachable/'; |
|
982 | + if (preg_match($regex, curl_error($ch), $matches)) { |
|
983 | + if (strlen(@inet_pton($matches[1])) === 16) { |
|
984 | + self::errorLog('Invalid IPv6 configuration on server, '. |
|
985 | + 'Please disable or get native IPv6 on your server.'); |
|
986 | + self::$CURL_OPTS[CURLOPT_IPRESOLVE] = CURL_IPRESOLVE_V4; |
|
987 | + curl_setopt($ch, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4); |
|
988 | + $result = curl_exec($ch); |
|
989 | + } |
|
990 | + } |
|
991 | + } |
|
992 | + |
|
993 | + if ($result === false) { |
|
994 | + $e = new FacebookApiException(array( |
|
995 | + 'error_code' => curl_errno($ch), |
|
996 | + 'error' => array( |
|
997 | + 'message' => curl_error($ch), |
|
998 | + 'type' => 'CurlException', |
|
999 | + ), |
|
1000 | + )); |
|
1001 | + curl_close($ch); |
|
1002 | + throw $e; |
|
1003 | + } |
|
1004 | + curl_close($ch); |
|
1005 | + return $result; |
|
1006 | 1006 | } |
1007 | 1007 | |
1008 | 1008 | /** |
@@ -1012,27 +1012,27 @@ discard block |
||
1012 | 1012 | * @return array The payload inside it or null if the sig is wrong |
1013 | 1013 | */ |
1014 | 1014 | protected function parseSignedRequest($signed_request) { |
1015 | - list($encoded_sig, $payload) = explode('.', $signed_request, 2); |
|
1016 | - |
|
1017 | - // decode the data |
|
1018 | - $sig = self::base64UrlDecode($encoded_sig); |
|
1019 | - $data = json_decode(self::base64UrlDecode($payload), true); |
|
1020 | - |
|
1021 | - if (strtoupper($data['algorithm']) !== self::SIGNED_REQUEST_ALGORITHM) { |
|
1022 | - self::errorLog( |
|
1023 | - 'Unknown algorithm. Expected ' . self::SIGNED_REQUEST_ALGORITHM); |
|
1024 | - return null; |
|
1025 | - } |
|
1026 | - |
|
1027 | - // check sig |
|
1028 | - $expected_sig = hash_hmac('sha256', $payload, |
|
1029 | - $this->getAppSecret(), $raw = true); |
|
1030 | - if ($sig !== $expected_sig) { |
|
1031 | - self::errorLog('Bad Signed JSON signature!'); |
|
1032 | - return null; |
|
1033 | - } |
|
1034 | - |
|
1035 | - return $data; |
|
1015 | + list($encoded_sig, $payload) = explode('.', $signed_request, 2); |
|
1016 | + |
|
1017 | + // decode the data |
|
1018 | + $sig = self::base64UrlDecode($encoded_sig); |
|
1019 | + $data = json_decode(self::base64UrlDecode($payload), true); |
|
1020 | + |
|
1021 | + if (strtoupper($data['algorithm']) !== self::SIGNED_REQUEST_ALGORITHM) { |
|
1022 | + self::errorLog( |
|
1023 | + 'Unknown algorithm. Expected ' . self::SIGNED_REQUEST_ALGORITHM); |
|
1024 | + return null; |
|
1025 | + } |
|
1026 | + |
|
1027 | + // check sig |
|
1028 | + $expected_sig = hash_hmac('sha256', $payload, |
|
1029 | + $this->getAppSecret(), $raw = true); |
|
1030 | + if ($sig !== $expected_sig) { |
|
1031 | + self::errorLog('Bad Signed JSON signature!'); |
|
1032 | + return null; |
|
1033 | + } |
|
1034 | + |
|
1035 | + return $data; |
|
1036 | 1036 | } |
1037 | 1037 | |
1038 | 1038 | /** |
@@ -1042,17 +1042,17 @@ discard block |
||
1042 | 1042 | * @return string The signed request. |
1043 | 1043 | */ |
1044 | 1044 | protected function makeSignedRequest($data) { |
1045 | - if (!is_array($data)) { |
|
1046 | - throw new InvalidArgumentException( |
|
1047 | - 'makeSignedRequest expects an array. Got: ' . print_r($data, true)); |
|
1048 | - } |
|
1049 | - $data['algorithm'] = self::SIGNED_REQUEST_ALGORITHM; |
|
1050 | - $data['issued_at'] = time(); |
|
1051 | - $json = json_encode($data); |
|
1052 | - $b64 = self::base64UrlEncode($json); |
|
1053 | - $raw_sig = hash_hmac('sha256', $b64, $this->getAppSecret(), $raw = true); |
|
1054 | - $sig = self::base64UrlEncode($raw_sig); |
|
1055 | - return $sig.'.'.$b64; |
|
1045 | + if (!is_array($data)) { |
|
1046 | + throw new InvalidArgumentException( |
|
1047 | + 'makeSignedRequest expects an array. Got: ' . print_r($data, true)); |
|
1048 | + } |
|
1049 | + $data['algorithm'] = self::SIGNED_REQUEST_ALGORITHM; |
|
1050 | + $data['issued_at'] = time(); |
|
1051 | + $json = json_encode($data); |
|
1052 | + $b64 = self::base64UrlEncode($json); |
|
1053 | + $raw_sig = hash_hmac('sha256', $b64, $this->getAppSecret(), $raw = true); |
|
1054 | + $sig = self::base64UrlEncode($raw_sig); |
|
1055 | + return $sig.'.'.$b64; |
|
1056 | 1056 | } |
1057 | 1057 | |
1058 | 1058 | /** |
@@ -1062,74 +1062,74 @@ discard block |
||
1062 | 1062 | * @return string The URL for the given parameters |
1063 | 1063 | */ |
1064 | 1064 | protected function getApiUrl($method) { |
1065 | - static $READ_ONLY_CALLS = |
|
1066 | - array('admin.getallocation' => 1, |
|
1067 | - 'admin.getappproperties' => 1, |
|
1068 | - 'admin.getbannedusers' => 1, |
|
1069 | - 'admin.getlivestreamvialink' => 1, |
|
1070 | - 'admin.getmetrics' => 1, |
|
1071 | - 'admin.getrestrictioninfo' => 1, |
|
1072 | - 'application.getpublicinfo' => 1, |
|
1073 | - 'auth.getapppublickey' => 1, |
|
1074 | - 'auth.getsession' => 1, |
|
1075 | - 'auth.getsignedpublicsessiondata' => 1, |
|
1076 | - 'comments.get' => 1, |
|
1077 | - 'connect.getunconnectedfriendscount' => 1, |
|
1078 | - 'dashboard.getactivity' => 1, |
|
1079 | - 'dashboard.getcount' => 1, |
|
1080 | - 'dashboard.getglobalnews' => 1, |
|
1081 | - 'dashboard.getnews' => 1, |
|
1082 | - 'dashboard.multigetcount' => 1, |
|
1083 | - 'dashboard.multigetnews' => 1, |
|
1084 | - 'data.getcookies' => 1, |
|
1085 | - 'events.get' => 1, |
|
1086 | - 'events.getmembers' => 1, |
|
1087 | - 'fbml.getcustomtags' => 1, |
|
1088 | - 'feed.getappfriendstories' => 1, |
|
1089 | - 'feed.getregisteredtemplatebundlebyid' => 1, |
|
1090 | - 'feed.getregisteredtemplatebundles' => 1, |
|
1091 | - 'fql.multiquery' => 1, |
|
1092 | - 'fql.query' => 1, |
|
1093 | - 'friends.arefriends' => 1, |
|
1094 | - 'friends.get' => 1, |
|
1095 | - 'friends.getappusers' => 1, |
|
1096 | - 'friends.getlists' => 1, |
|
1097 | - 'friends.getmutualfriends' => 1, |
|
1098 | - 'gifts.get' => 1, |
|
1099 | - 'groups.get' => 1, |
|
1100 | - 'groups.getmembers' => 1, |
|
1101 | - 'intl.gettranslations' => 1, |
|
1102 | - 'links.get' => 1, |
|
1103 | - 'notes.get' => 1, |
|
1104 | - 'notifications.get' => 1, |
|
1105 | - 'pages.getinfo' => 1, |
|
1106 | - 'pages.isadmin' => 1, |
|
1107 | - 'pages.isappadded' => 1, |
|
1108 | - 'pages.isfan' => 1, |
|
1109 | - 'permissions.checkavailableapiaccess' => 1, |
|
1110 | - 'permissions.checkgrantedapiaccess' => 1, |
|
1111 | - 'photos.get' => 1, |
|
1112 | - 'photos.getalbums' => 1, |
|
1113 | - 'photos.gettags' => 1, |
|
1114 | - 'profile.getinfo' => 1, |
|
1115 | - 'profile.getinfooptions' => 1, |
|
1116 | - 'stream.get' => 1, |
|
1117 | - 'stream.getcomments' => 1, |
|
1118 | - 'stream.getfilters' => 1, |
|
1119 | - 'users.getinfo' => 1, |
|
1120 | - 'users.getloggedinuser' => 1, |
|
1121 | - 'users.getstandardinfo' => 1, |
|
1122 | - 'users.hasapppermission' => 1, |
|
1123 | - 'users.isappuser' => 1, |
|
1124 | - 'users.isverified' => 1, |
|
1125 | - 'video.getuploadlimits' => 1); |
|
1126 | - $name = 'api'; |
|
1127 | - if (isset($READ_ONLY_CALLS[strtolower($method)])) { |
|
1128 | - $name = 'api_read'; |
|
1129 | - } else if (strtolower($method) == 'video.upload') { |
|
1130 | - $name = 'api_video'; |
|
1131 | - } |
|
1132 | - return self::getUrl($name, 'restserver.php'); |
|
1065 | + static $READ_ONLY_CALLS = |
|
1066 | + array('admin.getallocation' => 1, |
|
1067 | + 'admin.getappproperties' => 1, |
|
1068 | + 'admin.getbannedusers' => 1, |
|
1069 | + 'admin.getlivestreamvialink' => 1, |
|
1070 | + 'admin.getmetrics' => 1, |
|
1071 | + 'admin.getrestrictioninfo' => 1, |
|
1072 | + 'application.getpublicinfo' => 1, |
|
1073 | + 'auth.getapppublickey' => 1, |
|
1074 | + 'auth.getsession' => 1, |
|
1075 | + 'auth.getsignedpublicsessiondata' => 1, |
|
1076 | + 'comments.get' => 1, |
|
1077 | + 'connect.getunconnectedfriendscount' => 1, |
|
1078 | + 'dashboard.getactivity' => 1, |
|
1079 | + 'dashboard.getcount' => 1, |
|
1080 | + 'dashboard.getglobalnews' => 1, |
|
1081 | + 'dashboard.getnews' => 1, |
|
1082 | + 'dashboard.multigetcount' => 1, |
|
1083 | + 'dashboard.multigetnews' => 1, |
|
1084 | + 'data.getcookies' => 1, |
|
1085 | + 'events.get' => 1, |
|
1086 | + 'events.getmembers' => 1, |
|
1087 | + 'fbml.getcustomtags' => 1, |
|
1088 | + 'feed.getappfriendstories' => 1, |
|
1089 | + 'feed.getregisteredtemplatebundlebyid' => 1, |
|
1090 | + 'feed.getregisteredtemplatebundles' => 1, |
|
1091 | + 'fql.multiquery' => 1, |
|
1092 | + 'fql.query' => 1, |
|
1093 | + 'friends.arefriends' => 1, |
|
1094 | + 'friends.get' => 1, |
|
1095 | + 'friends.getappusers' => 1, |
|
1096 | + 'friends.getlists' => 1, |
|
1097 | + 'friends.getmutualfriends' => 1, |
|
1098 | + 'gifts.get' => 1, |
|
1099 | + 'groups.get' => 1, |
|
1100 | + 'groups.getmembers' => 1, |
|
1101 | + 'intl.gettranslations' => 1, |
|
1102 | + 'links.get' => 1, |
|
1103 | + 'notes.get' => 1, |
|
1104 | + 'notifications.get' => 1, |
|
1105 | + 'pages.getinfo' => 1, |
|
1106 | + 'pages.isadmin' => 1, |
|
1107 | + 'pages.isappadded' => 1, |
|
1108 | + 'pages.isfan' => 1, |
|
1109 | + 'permissions.checkavailableapiaccess' => 1, |
|
1110 | + 'permissions.checkgrantedapiaccess' => 1, |
|
1111 | + 'photos.get' => 1, |
|
1112 | + 'photos.getalbums' => 1, |
|
1113 | + 'photos.gettags' => 1, |
|
1114 | + 'profile.getinfo' => 1, |
|
1115 | + 'profile.getinfooptions' => 1, |
|
1116 | + 'stream.get' => 1, |
|
1117 | + 'stream.getcomments' => 1, |
|
1118 | + 'stream.getfilters' => 1, |
|
1119 | + 'users.getinfo' => 1, |
|
1120 | + 'users.getloggedinuser' => 1, |
|
1121 | + 'users.getstandardinfo' => 1, |
|
1122 | + 'users.hasapppermission' => 1, |
|
1123 | + 'users.isappuser' => 1, |
|
1124 | + 'users.isverified' => 1, |
|
1125 | + 'video.getuploadlimits' => 1); |
|
1126 | + $name = 'api'; |
|
1127 | + if (isset($READ_ONLY_CALLS[strtolower($method)])) { |
|
1128 | + $name = 'api_read'; |
|
1129 | + } else if (strtolower($method) == 'video.upload') { |
|
1130 | + $name = 'api_video'; |
|
1131 | + } |
|
1132 | + return self::getUrl($name, 'restserver.php'); |
|
1133 | 1133 | } |
1134 | 1134 | |
1135 | 1135 | /** |
@@ -1142,59 +1142,59 @@ discard block |
||
1142 | 1142 | * @return string The URL for the given parameters |
1143 | 1143 | */ |
1144 | 1144 | protected function getUrl($name, $path='', $params=array()) { |
1145 | - $url = self::$DOMAIN_MAP[$name]; |
|
1146 | - if ($path) { |
|
1147 | - if ($path[0] === '/') { |
|
1148 | - $path = substr($path, 1); |
|
1149 | - } |
|
1150 | - $url .= $path; |
|
1151 | - } |
|
1152 | - if ($params) { |
|
1153 | - $url .= '?' . http_build_query($params, null, '&'); |
|
1154 | - } |
|
1155 | - |
|
1156 | - return $url; |
|
1145 | + $url = self::$DOMAIN_MAP[$name]; |
|
1146 | + if ($path) { |
|
1147 | + if ($path[0] === '/') { |
|
1148 | + $path = substr($path, 1); |
|
1149 | + } |
|
1150 | + $url .= $path; |
|
1151 | + } |
|
1152 | + if ($params) { |
|
1153 | + $url .= '?' . http_build_query($params, null, '&'); |
|
1154 | + } |
|
1155 | + |
|
1156 | + return $url; |
|
1157 | 1157 | } |
1158 | 1158 | |
1159 | 1159 | protected function getHttpHost() { |
1160 | - if ($this->trustForwarded && isset($_SERVER['HTTP_X_FORWARDED_HOST'])) { |
|
1161 | - return $_SERVER['HTTP_X_FORWARDED_HOST']; |
|
1162 | - } |
|
1163 | - return $_SERVER['HTTP_HOST']; |
|
1160 | + if ($this->trustForwarded && isset($_SERVER['HTTP_X_FORWARDED_HOST'])) { |
|
1161 | + return $_SERVER['HTTP_X_FORWARDED_HOST']; |
|
1162 | + } |
|
1163 | + return $_SERVER['HTTP_HOST']; |
|
1164 | 1164 | } |
1165 | 1165 | |
1166 | 1166 | protected function getHttpProtocol() { |
1167 | - if ($this->trustForwarded && isset($_SERVER['HTTP_X_FORWARDED_PROTO'])) { |
|
1168 | - if ($_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https') { |
|
1169 | - return 'https'; |
|
1170 | - } |
|
1171 | - return 'http'; |
|
1172 | - } |
|
1173 | - /*apache + variants specific way of checking for https*/ |
|
1174 | - if (isset($_SERVER['HTTPS']) && |
|
1175 | - ($_SERVER['HTTPS'] === 'on' || $_SERVER['HTTPS'] == 1)) { |
|
1176 | - return 'https'; |
|
1177 | - } |
|
1178 | - /*nginx way of checking for https*/ |
|
1179 | - if (isset($_SERVER['SERVER_PORT']) && |
|
1180 | - ($_SERVER['SERVER_PORT'] === '443')) { |
|
1181 | - return 'https'; |
|
1182 | - } |
|
1183 | - return 'http'; |
|
1167 | + if ($this->trustForwarded && isset($_SERVER['HTTP_X_FORWARDED_PROTO'])) { |
|
1168 | + if ($_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https') { |
|
1169 | + return 'https'; |
|
1170 | + } |
|
1171 | + return 'http'; |
|
1172 | + } |
|
1173 | + /*apache + variants specific way of checking for https*/ |
|
1174 | + if (isset($_SERVER['HTTPS']) && |
|
1175 | + ($_SERVER['HTTPS'] === 'on' || $_SERVER['HTTPS'] == 1)) { |
|
1176 | + return 'https'; |
|
1177 | + } |
|
1178 | + /*nginx way of checking for https*/ |
|
1179 | + if (isset($_SERVER['SERVER_PORT']) && |
|
1180 | + ($_SERVER['SERVER_PORT'] === '443')) { |
|
1181 | + return 'https'; |
|
1182 | + } |
|
1183 | + return 'http'; |
|
1184 | 1184 | } |
1185 | 1185 | |
1186 | 1186 | /** |
1187 | 1187 | * Get the base domain used for the cookie. |
1188 | 1188 | */ |
1189 | 1189 | protected function getBaseDomain() { |
1190 | - // The base domain is stored in the metadata cookie if not we fallback |
|
1191 | - // to the current hostname |
|
1192 | - $metadata = $this->getMetadataCookie(); |
|
1193 | - if (array_key_exists('base_domain', $metadata) && |
|
1194 | - !empty($metadata['base_domain'])) { |
|
1195 | - return trim($metadata['base_domain'], '.'); |
|
1196 | - } |
|
1197 | - return $this->getHttpHost(); |
|
1190 | + // The base domain is stored in the metadata cookie if not we fallback |
|
1191 | + // to the current hostname |
|
1192 | + $metadata = $this->getMetadataCookie(); |
|
1193 | + if (array_key_exists('base_domain', $metadata) && |
|
1194 | + !empty($metadata['base_domain'])) { |
|
1195 | + return trim($metadata['base_domain'], '.'); |
|
1196 | + } |
|
1197 | + return $this->getHttpHost(); |
|
1198 | 1198 | } |
1199 | 1199 | |
1200 | 1200 | /** |
@@ -1206,36 +1206,36 @@ discard block |
||
1206 | 1206 | * @return string The current URL |
1207 | 1207 | */ |
1208 | 1208 | protected function getCurrentUrl() { |
1209 | - $protocol = $this->getHttpProtocol() . '://'; |
|
1210 | - $host = $this->getHttpHost(); |
|
1211 | - $currentUrl = $protocol.$host.$_SERVER['REQUEST_URI']; |
|
1212 | - $parts = parse_url($currentUrl); |
|
1213 | - |
|
1214 | - $query = ''; |
|
1215 | - if (!empty($parts['query'])) { |
|
1216 | - // drop known fb params |
|
1217 | - $params = explode('&', $parts['query']); |
|
1218 | - $retained_params = array(); |
|
1219 | - foreach ($params as $param) { |
|
1220 | - if ($this->shouldRetainParam($param)) { |
|
1221 | - $retained_params[] = $param; |
|
1222 | - } |
|
1223 | - } |
|
1224 | - |
|
1225 | - if (!empty($retained_params)) { |
|
1226 | - $query = '?'.implode($retained_params, '&'); |
|
1227 | - } |
|
1228 | - } |
|
1229 | - |
|
1230 | - // use port if non default |
|
1231 | - $port = |
|
1232 | - isset($parts['port']) && |
|
1233 | - (($protocol === 'http://' && $parts['port'] !== 80) || |
|
1234 | - ($protocol === 'https://' && $parts['port'] !== 443)) |
|
1235 | - ? ':' . $parts['port'] : ''; |
|
1236 | - |
|
1237 | - // rebuild |
|
1238 | - return $protocol . $parts['host'] . $port . $parts['path'] . $query; |
|
1209 | + $protocol = $this->getHttpProtocol() . '://'; |
|
1210 | + $host = $this->getHttpHost(); |
|
1211 | + $currentUrl = $protocol.$host.$_SERVER['REQUEST_URI']; |
|
1212 | + $parts = parse_url($currentUrl); |
|
1213 | + |
|
1214 | + $query = ''; |
|
1215 | + if (!empty($parts['query'])) { |
|
1216 | + // drop known fb params |
|
1217 | + $params = explode('&', $parts['query']); |
|
1218 | + $retained_params = array(); |
|
1219 | + foreach ($params as $param) { |
|
1220 | + if ($this->shouldRetainParam($param)) { |
|
1221 | + $retained_params[] = $param; |
|
1222 | + } |
|
1223 | + } |
|
1224 | + |
|
1225 | + if (!empty($retained_params)) { |
|
1226 | + $query = '?'.implode($retained_params, '&'); |
|
1227 | + } |
|
1228 | + } |
|
1229 | + |
|
1230 | + // use port if non default |
|
1231 | + $port = |
|
1232 | + isset($parts['port']) && |
|
1233 | + (($protocol === 'http://' && $parts['port'] !== 80) || |
|
1234 | + ($protocol === 'https://' && $parts['port'] !== 443)) |
|
1235 | + ? ':' . $parts['port'] : ''; |
|
1236 | + |
|
1237 | + // rebuild |
|
1238 | + return $protocol . $parts['host'] . $port . $parts['path'] . $query; |
|
1239 | 1239 | } |
1240 | 1240 | |
1241 | 1241 | /** |
@@ -1250,13 +1250,13 @@ discard block |
||
1250 | 1250 | * @return boolean |
1251 | 1251 | */ |
1252 | 1252 | protected function shouldRetainParam($param) { |
1253 | - foreach (self::$DROP_QUERY_PARAMS as $drop_query_param) { |
|
1254 | - if (strpos($param, $drop_query_param.'=') === 0) { |
|
1255 | - return false; |
|
1256 | - } |
|
1257 | - } |
|
1253 | + foreach (self::$DROP_QUERY_PARAMS as $drop_query_param) { |
|
1254 | + if (strpos($param, $drop_query_param.'=') === 0) { |
|
1255 | + return false; |
|
1256 | + } |
|
1257 | + } |
|
1258 | 1258 | |
1259 | - return true; |
|
1259 | + return true; |
|
1260 | 1260 | } |
1261 | 1261 | |
1262 | 1262 | /** |
@@ -1268,25 +1268,25 @@ discard block |
||
1268 | 1268 | * by a failed API call. |
1269 | 1269 | */ |
1270 | 1270 | protected function throwAPIException($result) { |
1271 | - $e = new FacebookApiException($result); |
|
1272 | - switch ($e->getType()) { |
|
1273 | - // OAuth 2.0 Draft 00 style |
|
1274 | - case 'OAuthException': |
|
1275 | - // OAuth 2.0 Draft 10 style |
|
1276 | - case 'invalid_token': |
|
1277 | - // REST server errors are just Exceptions |
|
1278 | - case 'Exception': |
|
1279 | - $message = $e->getMessage(); |
|
1280 | - if ((strpos($message, 'Error validating access token') !== false) || |
|
1281 | - (strpos($message, 'Invalid OAuth access token') !== false) || |
|
1282 | - (strpos($message, 'An active access token must be used') !== false) |
|
1283 | - ) { |
|
1284 | - $this->destroySession(); |
|
1285 | - } |
|
1286 | - break; |
|
1287 | - } |
|
1288 | - |
|
1289 | - throw $e; |
|
1271 | + $e = new FacebookApiException($result); |
|
1272 | + switch ($e->getType()) { |
|
1273 | + // OAuth 2.0 Draft 00 style |
|
1274 | + case 'OAuthException': |
|
1275 | + // OAuth 2.0 Draft 10 style |
|
1276 | + case 'invalid_token': |
|
1277 | + // REST server errors are just Exceptions |
|
1278 | + case 'Exception': |
|
1279 | + $message = $e->getMessage(); |
|
1280 | + if ((strpos($message, 'Error validating access token') !== false) || |
|
1281 | + (strpos($message, 'Invalid OAuth access token') !== false) || |
|
1282 | + (strpos($message, 'An active access token must be used') !== false) |
|
1283 | + ) { |
|
1284 | + $this->destroySession(); |
|
1285 | + } |
|
1286 | + break; |
|
1287 | + } |
|
1288 | + |
|
1289 | + throw $e; |
|
1290 | 1290 | } |
1291 | 1291 | |
1292 | 1292 | |
@@ -1296,14 +1296,14 @@ discard block |
||
1296 | 1296 | * @param string $msg Log message |
1297 | 1297 | */ |
1298 | 1298 | protected static function errorLog($msg) { |
1299 | - // disable error log if we are running in a CLI environment |
|
1300 | - // @codeCoverageIgnoreStart |
|
1301 | - if (php_sapi_name() != 'cli') { |
|
1302 | - error_log($msg); |
|
1303 | - } |
|
1304 | - // uncomment this if you want to see the errors on the page |
|
1305 | - // print 'error_log: '.$msg."\n"; |
|
1306 | - // @codeCoverageIgnoreEnd |
|
1299 | + // disable error log if we are running in a CLI environment |
|
1300 | + // @codeCoverageIgnoreStart |
|
1301 | + if (php_sapi_name() != 'cli') { |
|
1302 | + error_log($msg); |
|
1303 | + } |
|
1304 | + // uncomment this if you want to see the errors on the page |
|
1305 | + // print 'error_log: '.$msg."\n"; |
|
1306 | + // @codeCoverageIgnoreEnd |
|
1307 | 1307 | } |
1308 | 1308 | |
1309 | 1309 | /** |
@@ -1317,7 +1317,7 @@ discard block |
||
1317 | 1317 | * @return string |
1318 | 1318 | */ |
1319 | 1319 | protected static function base64UrlDecode($input) { |
1320 | - return base64_decode(strtr($input, '-_', '+/')); |
|
1320 | + return base64_decode(strtr($input, '-_', '+/')); |
|
1321 | 1321 | } |
1322 | 1322 | |
1323 | 1323 | /** |
@@ -1330,38 +1330,38 @@ discard block |
||
1330 | 1330 | * @return string base64Url encoded string |
1331 | 1331 | */ |
1332 | 1332 | protected static function base64UrlEncode($input) { |
1333 | - $str = strtr(base64_encode($input), '+/', '-_'); |
|
1334 | - $str = str_replace('=', '', $str); |
|
1335 | - return $str; |
|
1333 | + $str = strtr(base64_encode($input), '+/', '-_'); |
|
1334 | + $str = str_replace('=', '', $str); |
|
1335 | + return $str; |
|
1336 | 1336 | } |
1337 | 1337 | |
1338 | 1338 | /** |
1339 | 1339 | * Destroy the current session |
1340 | 1340 | */ |
1341 | 1341 | public function destroySession() { |
1342 | - $this->accessToken = null; |
|
1343 | - $this->signedRequest = null; |
|
1344 | - $this->user = null; |
|
1345 | - $this->clearAllPersistentData(); |
|
1346 | - |
|
1347 | - // Javascript sets a cookie that will be used in getSignedRequest that we |
|
1348 | - // need to clear if we can |
|
1349 | - $cookie_name = $this->getSignedRequestCookieName(); |
|
1350 | - if (array_key_exists($cookie_name, $_COOKIE)) { |
|
1351 | - unset($_COOKIE[$cookie_name]); |
|
1352 | - if (!headers_sent()) { |
|
1353 | - $base_domain = $this->getBaseDomain(); |
|
1354 | - setcookie($cookie_name, '', 1, '/', '.'.$base_domain); |
|
1355 | - } else { |
|
1356 | - // @codeCoverageIgnoreStart |
|
1357 | - self::errorLog( |
|
1358 | - 'There exists a cookie that we wanted to clear that we couldn\'t '. |
|
1359 | - 'clear because headers was already sent. Make sure to do the first '. |
|
1360 | - 'API call before outputing anything.' |
|
1361 | - ); |
|
1362 | - // @codeCoverageIgnoreEnd |
|
1363 | - } |
|
1364 | - } |
|
1342 | + $this->accessToken = null; |
|
1343 | + $this->signedRequest = null; |
|
1344 | + $this->user = null; |
|
1345 | + $this->clearAllPersistentData(); |
|
1346 | + |
|
1347 | + // Javascript sets a cookie that will be used in getSignedRequest that we |
|
1348 | + // need to clear if we can |
|
1349 | + $cookie_name = $this->getSignedRequestCookieName(); |
|
1350 | + if (array_key_exists($cookie_name, $_COOKIE)) { |
|
1351 | + unset($_COOKIE[$cookie_name]); |
|
1352 | + if (!headers_sent()) { |
|
1353 | + $base_domain = $this->getBaseDomain(); |
|
1354 | + setcookie($cookie_name, '', 1, '/', '.'.$base_domain); |
|
1355 | + } else { |
|
1356 | + // @codeCoverageIgnoreStart |
|
1357 | + self::errorLog( |
|
1358 | + 'There exists a cookie that we wanted to clear that we couldn\'t '. |
|
1359 | + 'clear because headers was already sent. Make sure to do the first '. |
|
1360 | + 'API call before outputing anything.' |
|
1361 | + ); |
|
1362 | + // @codeCoverageIgnoreEnd |
|
1363 | + } |
|
1364 | + } |
|
1365 | 1365 | } |
1366 | 1366 | |
1367 | 1367 | /** |
@@ -1370,44 +1370,44 @@ discard block |
||
1370 | 1370 | * @return an array mapping key to value |
1371 | 1371 | */ |
1372 | 1372 | protected function getMetadataCookie() { |
1373 | - $cookie_name = $this->getMetadataCookieName(); |
|
1374 | - if (!array_key_exists($cookie_name, $_COOKIE)) { |
|
1375 | - return array(); |
|
1376 | - } |
|
1377 | - |
|
1378 | - // The cookie value can be wrapped in "-characters so remove them |
|
1379 | - $cookie_value = trim($_COOKIE[$cookie_name], '"'); |
|
1380 | - |
|
1381 | - if (empty($cookie_value)) { |
|
1382 | - return array(); |
|
1383 | - } |
|
1384 | - |
|
1385 | - $parts = explode('&', $cookie_value); |
|
1386 | - $metadata = array(); |
|
1387 | - foreach ($parts as $part) { |
|
1388 | - $pair = explode('=', $part, 2); |
|
1389 | - if (!empty($pair[0])) { |
|
1390 | - $metadata[urldecode($pair[0])] = |
|
1391 | - (count($pair) > 1) ? urldecode($pair[1]) : ''; |
|
1392 | - } |
|
1393 | - } |
|
1394 | - |
|
1395 | - return $metadata; |
|
1373 | + $cookie_name = $this->getMetadataCookieName(); |
|
1374 | + if (!array_key_exists($cookie_name, $_COOKIE)) { |
|
1375 | + return array(); |
|
1376 | + } |
|
1377 | + |
|
1378 | + // The cookie value can be wrapped in "-characters so remove them |
|
1379 | + $cookie_value = trim($_COOKIE[$cookie_name], '"'); |
|
1380 | + |
|
1381 | + if (empty($cookie_value)) { |
|
1382 | + return array(); |
|
1383 | + } |
|
1384 | + |
|
1385 | + $parts = explode('&', $cookie_value); |
|
1386 | + $metadata = array(); |
|
1387 | + foreach ($parts as $part) { |
|
1388 | + $pair = explode('=', $part, 2); |
|
1389 | + if (!empty($pair[0])) { |
|
1390 | + $metadata[urldecode($pair[0])] = |
|
1391 | + (count($pair) > 1) ? urldecode($pair[1]) : ''; |
|
1392 | + } |
|
1393 | + } |
|
1394 | + |
|
1395 | + return $metadata; |
|
1396 | 1396 | } |
1397 | 1397 | |
1398 | 1398 | protected static function isAllowedDomain($big, $small) { |
1399 | - if ($big === $small) { |
|
1400 | - return true; |
|
1401 | - } |
|
1402 | - return self::endsWith($big, '.'.$small); |
|
1399 | + if ($big === $small) { |
|
1400 | + return true; |
|
1401 | + } |
|
1402 | + return self::endsWith($big, '.'.$small); |
|
1403 | 1403 | } |
1404 | 1404 | |
1405 | 1405 | protected static function endsWith($big, $small) { |
1406 | - $len = strlen($small); |
|
1407 | - if ($len === 0) { |
|
1408 | - return true; |
|
1409 | - } |
|
1410 | - return substr($big, -$len) === $small; |
|
1406 | + $len = strlen($small); |
|
1407 | + if ($len === 0) { |
|
1408 | + return true; |
|
1409 | + } |
|
1410 | + return substr($big, -$len) === $small; |
|
1411 | 1411 | } |
1412 | 1412 | |
1413 | 1413 | /** |
@@ -45,52 +45,52 @@ discard block |
||
45 | 45 | * @see BaseFacebook::__construct in facebook.php |
46 | 46 | */ |
47 | 47 | public function __construct($config) { |
48 | - if (!session_id()) { |
|
49 | - session_start(); |
|
50 | - } |
|
51 | - parent::__construct($config); |
|
52 | - if (!empty($config['sharedSession'])) { |
|
53 | - $this->initSharedSession(); |
|
54 | - } |
|
48 | + if (!session_id()) { |
|
49 | + session_start(); |
|
50 | + } |
|
51 | + parent::__construct($config); |
|
52 | + if (!empty($config['sharedSession'])) { |
|
53 | + $this->initSharedSession(); |
|
54 | + } |
|
55 | 55 | } |
56 | 56 | |
57 | 57 | protected static $kSupportedKeys = |
58 | - array('state', 'code', 'access_token', 'user_id'); |
|
58 | + array('state', 'code', 'access_token', 'user_id'); |
|
59 | 59 | |
60 | 60 | protected function initSharedSession() { |
61 | - $cookie_name = $this->getSharedSessionCookieName(); |
|
62 | - if (isset($_COOKIE[$cookie_name])) { |
|
63 | - $data = $this->parseSignedRequest($_COOKIE[$cookie_name]); |
|
64 | - if ($data && !empty($data['domain']) && |
|
65 | - self::isAllowedDomain($this->getHttpHost(), $data['domain'])) { |
|
66 | - // good case |
|
67 | - $this->sharedSessionID = $data['id']; |
|
68 | - return; |
|
69 | - } |
|
70 | - // ignoring potentially unreachable data |
|
71 | - } |
|
72 | - // evil/corrupt/missing case |
|
73 | - $base_domain = $this->getBaseDomain(); |
|
74 | - $this->sharedSessionID = md5(uniqid(mt_rand(), true)); |
|
75 | - $cookie_value = $this->makeSignedRequest( |
|
76 | - array( |
|
77 | - 'domain' => $base_domain, |
|
78 | - 'id' => $this->sharedSessionID, |
|
79 | - ) |
|
80 | - ); |
|
81 | - $_COOKIE[$cookie_name] = $cookie_value; |
|
82 | - if (!headers_sent()) { |
|
83 | - $expire = time() + self::FBSS_COOKIE_EXPIRE; |
|
84 | - setcookie($cookie_name, $cookie_value, $expire, '/', '.'.$base_domain); |
|
85 | - } else { |
|
86 | - // @codeCoverageIgnoreStart |
|
87 | - self::errorLog( |
|
88 | - 'Shared session ID cookie could not be set! You must ensure you '. |
|
89 | - 'create the Facebook instance before headers have been sent. This '. |
|
90 | - 'will cause authentication issues after the first request.' |
|
91 | - ); |
|
92 | - // @codeCoverageIgnoreEnd |
|
93 | - } |
|
61 | + $cookie_name = $this->getSharedSessionCookieName(); |
|
62 | + if (isset($_COOKIE[$cookie_name])) { |
|
63 | + $data = $this->parseSignedRequest($_COOKIE[$cookie_name]); |
|
64 | + if ($data && !empty($data['domain']) && |
|
65 | + self::isAllowedDomain($this->getHttpHost(), $data['domain'])) { |
|
66 | + // good case |
|
67 | + $this->sharedSessionID = $data['id']; |
|
68 | + return; |
|
69 | + } |
|
70 | + // ignoring potentially unreachable data |
|
71 | + } |
|
72 | + // evil/corrupt/missing case |
|
73 | + $base_domain = $this->getBaseDomain(); |
|
74 | + $this->sharedSessionID = md5(uniqid(mt_rand(), true)); |
|
75 | + $cookie_value = $this->makeSignedRequest( |
|
76 | + array( |
|
77 | + 'domain' => $base_domain, |
|
78 | + 'id' => $this->sharedSessionID, |
|
79 | + ) |
|
80 | + ); |
|
81 | + $_COOKIE[$cookie_name] = $cookie_value; |
|
82 | + if (!headers_sent()) { |
|
83 | + $expire = time() + self::FBSS_COOKIE_EXPIRE; |
|
84 | + setcookie($cookie_name, $cookie_value, $expire, '/', '.'.$base_domain); |
|
85 | + } else { |
|
86 | + // @codeCoverageIgnoreStart |
|
87 | + self::errorLog( |
|
88 | + 'Shared session ID cookie could not be set! You must ensure you '. |
|
89 | + 'create the Facebook instance before headers have been sent. This '. |
|
90 | + 'will cause authentication issues after the first request.' |
|
91 | + ); |
|
92 | + // @codeCoverageIgnoreEnd |
|
93 | + } |
|
94 | 94 | } |
95 | 95 | |
96 | 96 | /** |
@@ -100,61 +100,61 @@ discard block |
||
100 | 100 | * access tokens. |
101 | 101 | */ |
102 | 102 | protected function setPersistentData($key, $value) { |
103 | - if (!in_array($key, self::$kSupportedKeys)) { |
|
104 | - self::errorLog('Unsupported key passed to setPersistentData.'); |
|
105 | - return; |
|
106 | - } |
|
103 | + if (!in_array($key, self::$kSupportedKeys)) { |
|
104 | + self::errorLog('Unsupported key passed to setPersistentData.'); |
|
105 | + return; |
|
106 | + } |
|
107 | 107 | |
108 | - $session_var_name = $this->constructSessionVariableName($key); |
|
109 | - $_SESSION[$session_var_name] = $value; |
|
108 | + $session_var_name = $this->constructSessionVariableName($key); |
|
109 | + $_SESSION[$session_var_name] = $value; |
|
110 | 110 | } |
111 | 111 | |
112 | 112 | protected function getPersistentData($key, $default = false) { |
113 | - if (!in_array($key, self::$kSupportedKeys)) { |
|
114 | - self::errorLog('Unsupported key passed to getPersistentData.'); |
|
115 | - return $default; |
|
116 | - } |
|
117 | - |
|
118 | - $session_var_name = $this->constructSessionVariableName($key); |
|
119 | - return isset($_SESSION[$session_var_name]) ? |
|
120 | - $_SESSION[$session_var_name] : $default; |
|
113 | + if (!in_array($key, self::$kSupportedKeys)) { |
|
114 | + self::errorLog('Unsupported key passed to getPersistentData.'); |
|
115 | + return $default; |
|
116 | + } |
|
117 | + |
|
118 | + $session_var_name = $this->constructSessionVariableName($key); |
|
119 | + return isset($_SESSION[$session_var_name]) ? |
|
120 | + $_SESSION[$session_var_name] : $default; |
|
121 | 121 | } |
122 | 122 | |
123 | 123 | protected function clearPersistentData($key) { |
124 | - if (!in_array($key, self::$kSupportedKeys)) { |
|
125 | - self::errorLog('Unsupported key passed to clearPersistentData.'); |
|
126 | - return; |
|
127 | - } |
|
124 | + if (!in_array($key, self::$kSupportedKeys)) { |
|
125 | + self::errorLog('Unsupported key passed to clearPersistentData.'); |
|
126 | + return; |
|
127 | + } |
|
128 | 128 | |
129 | - $session_var_name = $this->constructSessionVariableName($key); |
|
130 | - unset($_SESSION[$session_var_name]); |
|
129 | + $session_var_name = $this->constructSessionVariableName($key); |
|
130 | + unset($_SESSION[$session_var_name]); |
|
131 | 131 | } |
132 | 132 | |
133 | 133 | protected function clearAllPersistentData() { |
134 | - foreach (self::$kSupportedKeys as $key) { |
|
135 | - $this->clearPersistentData($key); |
|
136 | - } |
|
137 | - if ($this->sharedSessionID) { |
|
138 | - $this->deleteSharedSessionCookie(); |
|
139 | - } |
|
134 | + foreach (self::$kSupportedKeys as $key) { |
|
135 | + $this->clearPersistentData($key); |
|
136 | + } |
|
137 | + if ($this->sharedSessionID) { |
|
138 | + $this->deleteSharedSessionCookie(); |
|
139 | + } |
|
140 | 140 | } |
141 | 141 | |
142 | 142 | protected function deleteSharedSessionCookie() { |
143 | - $cookie_name = $this->getSharedSessionCookieName(); |
|
144 | - unset($_COOKIE[$cookie_name]); |
|
145 | - $base_domain = $this->getBaseDomain(); |
|
146 | - setcookie($cookie_name, '', 1, '/', '.'.$base_domain); |
|
143 | + $cookie_name = $this->getSharedSessionCookieName(); |
|
144 | + unset($_COOKIE[$cookie_name]); |
|
145 | + $base_domain = $this->getBaseDomain(); |
|
146 | + setcookie($cookie_name, '', 1, '/', '.'.$base_domain); |
|
147 | 147 | } |
148 | 148 | |
149 | 149 | protected function getSharedSessionCookieName() { |
150 | - return self::FBSS_COOKIE_NAME . '_' . $this->getAppId(); |
|
150 | + return self::FBSS_COOKIE_NAME . '_' . $this->getAppId(); |
|
151 | 151 | } |
152 | 152 | |
153 | 153 | protected function constructSessionVariableName($key) { |
154 | - $parts = array('fb', $this->getAppId(), $key); |
|
155 | - if ($this->sharedSessionID) { |
|
156 | - array_unshift($parts, $this->sharedSessionID); |
|
157 | - } |
|
158 | - return implode('_', $parts); |
|
154 | + $parts = array('fb', $this->getAppId(), $key); |
|
155 | + if ($this->sharedSessionID) { |
|
156 | + array_unshift($parts, $this->sharedSessionID); |
|
157 | + } |
|
158 | + return implode('_', $parts); |
|
159 | 159 | } |
160 | 160 | } |
@@ -39,31 +39,31 @@ |
||
39 | 39 | * |
40 | 40 | * @access public |
41 | 41 | * @return void |
42 | - * @test |
|
42 | + * @test |
|
43 | 43 | */ |
44 | 44 | |
45 | 45 | public function testShow() |
46 | - { |
|
47 | - try { |
|
46 | + { |
|
47 | + try { |
|
48 | 48 | |
49 | - ob_start(); |
|
50 | - $exemple1 = new Exemple1; |
|
51 | - $exemple1->show(); |
|
52 | - $content = ob_get_clean(); |
|
49 | + ob_start(); |
|
50 | + $exemple1 = new Exemple1; |
|
51 | + $exemple1->show(); |
|
52 | + $content = ob_get_clean(); |
|
53 | 53 | |
54 | - //var_dump(debug_backtrace()); |
|
54 | + //var_dump(debug_backtrace()); |
|
55 | 55 | |
56 | - if ($content) { |
|
56 | + if ($content) { |
|
57 | 57 | |
58 | - $this->assertTrue(true); |
|
59 | - } |
|
60 | - else { |
|
61 | - $this->assertTrue(false); |
|
62 | - } |
|
63 | - } |
|
64 | - catch(\Exception $e) { |
|
65 | - $this->assertTrue(false); |
|
66 | - } |
|
58 | + $this->assertTrue(true); |
|
59 | + } |
|
60 | + else { |
|
61 | + $this->assertTrue(false); |
|
62 | + } |
|
63 | + } |
|
64 | + catch(\Exception $e) { |
|
65 | + $this->assertTrue(false); |
|
66 | + } |
|
67 | 67 | |
68 | 68 | } |
69 | 69 | } |
70 | 70 | \ No newline at end of file |
@@ -30,12 +30,12 @@ discard block |
||
30 | 30 | */ |
31 | 31 | class Ldap |
32 | 32 | { |
33 | - /** |
|
34 | - * connection at ldap server |
|
35 | - * |
|
36 | - * @access private |
|
37 | - * @var resource |
|
38 | - */ |
|
33 | + /** |
|
34 | + * connection at ldap server |
|
35 | + * |
|
36 | + * @access private |
|
37 | + * @var resource |
|
38 | + */ |
|
39 | 39 | private $_rConnect; |
40 | 40 | |
41 | 41 | /** |
@@ -62,7 +62,7 @@ discard block |
||
62 | 62 | */ |
63 | 63 | public function __construct() |
64 | 64 | { |
65 | - $oDbConf = Config::get('Ldap')->configuration; |
|
65 | + $oDbConf = Config::get('Ldap')->configuration; |
|
66 | 66 | |
67 | 67 | $this->_sBase = $oDbConf->base; |
68 | 68 | |
@@ -77,28 +77,28 @@ discard block |
||
77 | 77 | * @access public |
78 | 78 | * @return array |
79 | 79 | */ |
80 | - public function getGroups() : array |
|
81 | - { |
|
82 | - $rSearch = ldap_search( $this->_rConnect , $this->_sBase , "objectclass=group" , array("cn") ); |
|
83 | - $aEntries = ldap_get_entries($this->_rConnect, $rSearch); |
|
84 | - $aGroups = array(); |
|
80 | + public function getGroups() : array |
|
81 | + { |
|
82 | + $rSearch = ldap_search( $this->_rConnect , $this->_sBase , "objectclass=group" , array("cn") ); |
|
83 | + $aEntries = ldap_get_entries($this->_rConnect, $rSearch); |
|
84 | + $aGroups = array(); |
|
85 | 85 | |
86 | - for ( $i = 0 ; $i < $aEntries["count"] ; $i++ ) { |
|
86 | + for ( $i = 0 ; $i < $aEntries["count"] ; $i++ ) { |
|
87 | 87 | |
88 | - $aGroups[] = utf8_encode($aEntries[$i]["dn"]); |
|
89 | - } |
|
90 | - |
|
91 | - return $aGroups; |
|
92 | - } |
|
93 | - |
|
94 | - /** |
|
95 | - * Authentification in Ldap |
|
96 | - * |
|
97 | - * @access public |
|
98 | - * @param string $sUser |
|
99 | - * @param string $sPassword |
|
100 | - * @return \Venus\lib\Ldap |
|
101 | - */ |
|
88 | + $aGroups[] = utf8_encode($aEntries[$i]["dn"]); |
|
89 | + } |
|
90 | + |
|
91 | + return $aGroups; |
|
92 | + } |
|
93 | + |
|
94 | + /** |
|
95 | + * Authentification in Ldap |
|
96 | + * |
|
97 | + * @access public |
|
98 | + * @param string $sUser |
|
99 | + * @param string $sPassword |
|
100 | + * @return \Venus\lib\Ldap |
|
101 | + */ |
|
102 | 102 | public function bind($sUser, $sPassword) : Ldap |
103 | 103 | { |
104 | 104 | return $this->_bConnected = ldap_bind($this->_rConnect, $sUser, $sPassword); |
@@ -113,8 +113,8 @@ discard block |
||
113 | 113 | */ |
114 | 114 | public function unbind() : bool |
115 | 115 | { |
116 | - if ($this->_bConnected) { return $this->_bConnected = ldap_unbind($this->_rConnect); } |
|
117 | - else { return true; } |
|
116 | + if ($this->_bConnected) { return $this->_bConnected = ldap_unbind($this->_rConnect); } |
|
117 | + else { return true; } |
|
118 | 118 | } |
119 | 119 | |
120 | 120 | /** |
@@ -39,8 +39,8 @@ discard block |
||
39 | 39 | public function set(string $sName, $mValue, int $iExpire = 0, string $sPath = '', string $sDomain = '', int $iSecure = false) : Cookie |
40 | 40 | { |
41 | 41 | $iExpire = time() + $iExpire; |
42 | - setcookie($sName, $mValue, $iExpire, $sPath, $sDomain, $iSecure); |
|
43 | - return $this; |
|
42 | + setcookie($sName, $mValue, $iExpire, $sPath, $sDomain, $iSecure); |
|
43 | + return $this; |
|
44 | 44 | } |
45 | 45 | |
46 | 46 | /** |
@@ -52,7 +52,7 @@ discard block |
||
52 | 52 | */ |
53 | 53 | public function get(string $sName) |
54 | 54 | { |
55 | - return $_COOKIE[$sName]; |
|
55 | + return $_COOKIE[$sName]; |
|
56 | 56 | } |
57 | 57 | |
58 | 58 | /** |
@@ -64,6 +64,6 @@ discard block |
||
64 | 64 | */ |
65 | 65 | public function exists(string $sName) : bool |
66 | 66 | { |
67 | - return isset($_COOKIE[$sName]); |
|
67 | + return isset($_COOKIE[$sName]); |
|
68 | 68 | } |
69 | 69 | } |
@@ -30,7 +30,7 @@ |
||
30 | 30 | */ |
31 | 31 | interface ResponseInterface |
32 | 32 | { |
33 | - /** |
|
33 | + /** |
|
34 | 34 | * translate the content |
35 | 35 | * |
36 | 36 | * @access public |
@@ -40,10 +40,10 @@ |
||
40 | 40 | * @param mixed $mContent content to translate |
41 | 41 | * @return mixed |
42 | 42 | */ |
43 | - public static function translate($mContent) |
|
44 | - { |
|
45 | - // TODO Auto-generated method stub |
|
46 | - return $mContent; |
|
47 | - } |
|
43 | + public static function translate($mContent) |
|
44 | + { |
|
45 | + // TODO Auto-generated method stub |
|
46 | + return $mContent; |
|
47 | + } |
|
48 | 48 | |
49 | 49 | } |
@@ -34,16 +34,16 @@ |
||
34 | 34 | { |
35 | 35 | /** |
36 | 36 | * translate the content |
37 | - * @see \Venus\lib\Response\ResponseInterface::translate() |
|
37 | + * @see \Venus\lib\Response\ResponseInterface::translate() |
|
38 | 38 | * |
39 | 39 | * @access public |
40 | 40 | * @param mixed $mContent content to translate |
41 | 41 | * @return mixed |
42 | 42 | */ |
43 | - public static function translate($mContent) |
|
44 | - { |
|
45 | - // TODO Auto-generated method stub |
|
46 | - return yaml_emit($mContent); |
|
47 | - } |
|
43 | + public static function translate($mContent) |
|
44 | + { |
|
45 | + // TODO Auto-generated method stub |
|
46 | + return yaml_emit($mContent); |
|
47 | + } |
|
48 | 48 | |
49 | 49 | } |
@@ -41,9 +41,9 @@ |
||
41 | 41 | * @param mixed $mContent content to translate |
42 | 42 | * @return mixed |
43 | 43 | */ |
44 | - public static function translate($mContent) |
|
45 | - { |
|
46 | - return json_encode(Object::object_to_array($mContent)); |
|
47 | - } |
|
44 | + public static function translate($mContent) |
|
45 | + { |
|
46 | + return json_encode(Object::object_to_array($mContent)); |
|
47 | + } |
|
48 | 48 | |
49 | 49 | } |