| Total Complexity | 69 |
| Total Lines | 507 |
| Duplicated Lines | 0 % |
| Changes | 0 | ||
Complex classes like Request often do a lot of different things. To break such a class down, we need to identify a cohesive component within that class. A common approach to find such a component is to look for fields/methods that share the same prefixes, or suffixes.
Once you have determined the fields that belong together, you can apply the Extract Class refactoring. If the component makes sense as a sub-class, Extract Subclass is also a candidate, and is often faster.
While breaking up the class, it is a good idea to analyze how other classes use Request, and based on these observations, apply Extract Interface, too.
| 1 | <?php |
||
| 42 | final class Request |
||
| 43 | { |
||
| 44 | /** |
||
| 45 | * @var array Directorios seguros para include |
||
| 46 | */ |
||
| 47 | const SECURE_DIRS = ['css', 'js']; |
||
| 48 | /** |
||
| 49 | * @var HeaderDataCollection |
||
| 50 | */ |
||
| 51 | private $headers; |
||
| 52 | /** |
||
| 53 | * @var \Klein\Request |
||
| 54 | */ |
||
| 55 | private $request; |
||
| 56 | /** |
||
| 57 | * @var DataCollection |
||
| 58 | */ |
||
| 59 | private $params; |
||
| 60 | /** |
||
| 61 | * @var string |
||
| 62 | */ |
||
| 63 | private $method; |
||
| 64 | /** |
||
| 65 | * @var bool |
||
| 66 | */ |
||
| 67 | private $https; |
||
| 68 | |||
| 69 | /** |
||
| 70 | * Request constructor. |
||
| 71 | * |
||
| 72 | * @param \Klein\Request $request |
||
| 73 | */ |
||
| 74 | public function __construct(\Klein\Request $request) |
||
| 75 | { |
||
| 76 | $this->request = $request; |
||
| 77 | $this->headers = $this->request->headers(); |
||
| 78 | $this->params = $this->getParamsByMethod(); |
||
| 79 | $this->detectHttps(); |
||
| 80 | } |
||
| 81 | |||
| 82 | /** |
||
| 83 | * @return DataCollection |
||
| 84 | */ |
||
| 85 | private function getParamsByMethod() |
||
| 86 | { |
||
| 87 | if ($this->request->method('GET')) { |
||
| 88 | $this->method = 'GET'; |
||
| 89 | return $this->request->paramsGet(); |
||
| 90 | } else { |
||
| 91 | $this->method = 'POST'; |
||
| 92 | return $this->request->paramsPost(); |
||
| 93 | } |
||
| 94 | } |
||
| 95 | |||
| 96 | /** |
||
| 97 | * Detects if the connection is done through HTTPS |
||
| 98 | */ |
||
| 99 | private function detectHttps() |
||
| 100 | { |
||
| 101 | $this->https = Util::boolval($this->request->server()->get('HTTPS', 'off')) |
||
| 102 | || $this->request->server()->get('SERVER_PORT', 0) === 443; |
||
| 103 | } |
||
| 104 | |||
| 105 | /** |
||
| 106 | * Devuelve un nombre de archivo seguro |
||
| 107 | * |
||
| 108 | * @param string $file |
||
| 109 | * @param string $base |
||
| 110 | * |
||
| 111 | * @return string |
||
| 112 | */ |
||
| 113 | public static function getSecureAppFile(string $file, string $base = null) |
||
| 114 | { |
||
| 115 | return basename(self::getSecureAppPath($file, $base)); |
||
| 116 | } |
||
| 117 | |||
| 118 | /** |
||
| 119 | * Devolver una ruta segura para |
||
| 120 | * |
||
| 121 | * @param string $path |
||
| 122 | * @param string $base |
||
| 123 | * |
||
| 124 | * @return string |
||
| 125 | */ |
||
| 126 | public static function getSecureAppPath(string $path, string $base = null) |
||
| 127 | { |
||
| 128 | if ($base === null) { |
||
| 129 | $base = APP_ROOT; |
||
| 130 | } elseif (!in_array(basename($base), self::SECURE_DIRS, true)) { |
||
| 131 | return ''; |
||
| 132 | } |
||
| 133 | |||
| 134 | $realPath = realpath($base . DIRECTORY_SEPARATOR . $path); |
||
| 135 | |||
| 136 | if ($realPath === false |
||
| 137 | || strpos($realPath, $base) !== 0 |
||
| 138 | ) { |
||
| 139 | return ''; |
||
| 140 | } |
||
| 141 | |||
| 142 | return $realPath; |
||
| 143 | } |
||
| 144 | |||
| 145 | /** |
||
| 146 | * @param bool $fullForwarded |
||
| 147 | * |
||
| 148 | * @return array|string |
||
| 149 | */ |
||
| 150 | public function getClientAddress(bool $fullForwarded = false) |
||
| 151 | { |
||
| 152 | if (APP_MODULE === 'tests') { |
||
|
|
|||
| 153 | return '127.0.0.1'; |
||
| 154 | } |
||
| 155 | |||
| 156 | $forwarded = $this->getForwardedFor(); |
||
| 157 | |||
| 158 | if ($forwarded !== null) { |
||
| 159 | return $fullForwarded ? implode(',', $forwarded) : $forwarded[0]; |
||
| 160 | } |
||
| 161 | |||
| 162 | return $this->request->server()->get('REMOTE_ADDR', ''); |
||
| 163 | } |
||
| 164 | |||
| 165 | /** |
||
| 166 | * @return string[]|null |
||
| 167 | */ |
||
| 168 | public function getForwardedFor() |
||
| 169 | { |
||
| 170 | // eg: Forwarded: by=<identifier>; for=<identifier>; host=<host>; proto=<http|https> |
||
| 171 | $forwarded = $this->headers->get('HTTP_FORWARDED'); |
||
| 172 | |||
| 173 | if ($forwarded !== null && |
||
| 174 | preg_match_all('/(?:for=([\w.:]+))|(?:for="\[([\w.:]+)\]")/i', |
||
| 175 | $forwarded, $matches) |
||
| 176 | ) { |
||
| 177 | return array_filter(array_merge($matches[1], $matches[2]), function ($value) { |
||
| 178 | return !empty($value); |
||
| 179 | }); |
||
| 180 | } |
||
| 181 | |||
| 182 | // eg: X-Forwarded-For: 192.0.2.43, 2001:db8:cafe::17 |
||
| 183 | $xForwarded = $this->headers->exists('HTTP_X_FORWARDED_FOR'); |
||
| 184 | |||
| 185 | if ($xForwarded !== null) { |
||
| 186 | $matches = preg_split('/(?<=[\w])+,\s?/i', |
||
| 187 | $xForwarded, |
||
| 188 | -1, |
||
| 189 | PREG_SPLIT_NO_EMPTY); |
||
| 190 | |||
| 191 | if (count($matches) > 0) { |
||
| 192 | return $matches; |
||
| 193 | } |
||
| 194 | } |
||
| 195 | |||
| 196 | return null; |
||
| 197 | } |
||
| 198 | |||
| 199 | /** |
||
| 200 | * Comprobar si se realiza una recarga de la página |
||
| 201 | * |
||
| 202 | * @return bool |
||
| 203 | */ |
||
| 204 | public function checkReload() |
||
| 205 | { |
||
| 206 | return $this->headers->get('Cache-Control') === 'max-age=0'; |
||
| 207 | } |
||
| 208 | |||
| 209 | /** |
||
| 210 | * @param string $param |
||
| 211 | * @param string $default |
||
| 212 | * |
||
| 213 | * @return string|null |
||
| 214 | */ |
||
| 215 | public function analyzeEmail(string $param, string $default = null) |
||
| 216 | { |
||
| 217 | if (!$this->params->exists($param)) { |
||
| 218 | return $default; |
||
| 219 | } |
||
| 220 | |||
| 221 | return Filter::getEmail($this->params->get($param)); |
||
| 222 | } |
||
| 223 | |||
| 224 | /** |
||
| 225 | * Analizar un valor encriptado y devolverlo desencriptado |
||
| 226 | * |
||
| 227 | * @param string $param |
||
| 228 | * |
||
| 229 | * @return string |
||
| 230 | */ |
||
| 231 | public function analyzeEncrypted(string $param) |
||
| 256 | } |
||
| 257 | } |
||
| 258 | |||
| 259 | /** |
||
| 260 | * @param $param |
||
| 261 | * @param $default |
||
| 262 | * |
||
| 263 | * @return string|null |
||
| 264 | */ |
||
| 265 | public function analyzeString(string $param, string $default = null) |
||
| 266 | { |
||
| 267 | if (!$this->params->exists($param)) { |
||
| 268 | return $default; |
||
| 269 | } |
||
| 270 | |||
| 271 | return Filter::getString($this->params->get($param)); |
||
| 272 | } |
||
| 273 | |||
| 274 | /** |
||
| 275 | * @param $param |
||
| 276 | * @param $default |
||
| 277 | * |
||
| 278 | * @return string|null |
||
| 279 | */ |
||
| 280 | public function analyzeUnsafeString(string $param, string $default = null) |
||
| 281 | { |
||
| 282 | if (!$this->params->exists($param)) { |
||
| 283 | return $default; |
||
| 284 | } |
||
| 285 | |||
| 286 | return Filter::getRaw($this->params->get($param)); |
||
| 287 | } |
||
| 288 | |||
| 289 | /** |
||
| 290 | * @param string $param |
||
| 291 | * @param callable|null $mapper |
||
| 292 | * @param mixed $default |
||
| 293 | * |
||
| 294 | * @return array|null |
||
| 295 | */ |
||
| 296 | public function analyzeArray(string $param, callable $mapper = null, $default = null) |
||
| 297 | { |
||
| 298 | $requestValue = $this->params->get($param); |
||
| 299 | |||
| 300 | if ($requestValue !== null |
||
| 301 | && is_array($requestValue) |
||
| 302 | ) { |
||
| 303 | if (is_callable($mapper)) { |
||
| 304 | return $mapper($requestValue); |
||
| 305 | } |
||
| 306 | |||
| 307 | return array_map(function ($value) { |
||
| 308 | return is_numeric($value) ? Filter::getInt($value) : Filter::getString($value); |
||
| 309 | }, $requestValue); |
||
| 310 | } |
||
| 311 | |||
| 312 | return $default; |
||
| 313 | } |
||
| 314 | |||
| 315 | /** |
||
| 316 | * Comprobar si la petición es en formato JSON |
||
| 317 | * |
||
| 318 | * @return bool |
||
| 319 | */ |
||
| 320 | public function isJson() |
||
| 321 | { |
||
| 322 | return strpos($this->headers->get('Accept'), 'application/json') !== false; |
||
| 323 | } |
||
| 324 | |||
| 325 | /** |
||
| 326 | * Comprobar si la petición es Ajax |
||
| 327 | * |
||
| 328 | * @return bool |
||
| 329 | */ |
||
| 330 | public function isAjax() |
||
| 331 | { |
||
| 332 | return $this->headers->get('X-Requested-With') === 'XMLHttpRequest' |
||
| 333 | || $this->analyzeInt('isAjax', 0) === 1; |
||
| 334 | } |
||
| 335 | |||
| 336 | /** |
||
| 337 | * @param string $param |
||
| 338 | * @param int $default |
||
| 339 | * |
||
| 340 | * @return int |
||
| 341 | */ |
||
| 342 | public function analyzeInt(string $param, int $default = null) |
||
| 343 | { |
||
| 344 | if (!$this->params->exists($param)) { |
||
| 345 | return $default; |
||
| 346 | } |
||
| 347 | |||
| 348 | return Filter::getInt($this->params->get($param)); |
||
| 349 | } |
||
| 350 | |||
| 351 | /** |
||
| 352 | * @param string $file |
||
| 353 | * |
||
| 354 | * @return array|null |
||
| 355 | */ |
||
| 356 | public function getFile(string $file) |
||
| 357 | { |
||
| 358 | return $this->request->files()->get($file); |
||
| 359 | } |
||
| 360 | |||
| 361 | /** |
||
| 362 | * @param string $param |
||
| 363 | * @param bool $default |
||
| 364 | * |
||
| 365 | * @return bool |
||
| 366 | */ |
||
| 367 | public function analyzeBool(string $param, bool $default = null) |
||
| 368 | { |
||
| 369 | if (!$this->params->exists($param)) { |
||
| 370 | return (bool)$default; |
||
| 371 | } |
||
| 372 | |||
| 373 | return Util::boolval($this->params->get($param)); |
||
| 374 | } |
||
| 375 | |||
| 376 | /** |
||
| 377 | * @param string $key |
||
| 378 | * @param string $param Checks the signature only for the given param |
||
| 379 | * |
||
| 380 | * @throws SPException |
||
| 381 | */ |
||
| 382 | public function verifySignature(string $key, string $param = null) |
||
| 406 | ); |
||
| 407 | } |
||
| 408 | } |
||
| 409 | |||
| 410 | /** |
||
| 411 | * Returns the URI used by the browser and checks for the protocol used |
||
| 412 | * |
||
| 413 | * @see https://tools.ietf.org/html/rfc7239#section-7.5 |
||
| 414 | * @return string |
||
| 415 | */ |
||
| 416 | public function getHttpHost(): string |
||
| 417 | { |
||
| 418 | $forwarded = $this->getForwardedData(); |
||
| 419 | |||
| 420 | // Check in style of RFC 7239 |
||
| 421 | if (null !== $forwarded) { |
||
| 422 | return strtolower($forwarded['proto'] . '://' . $forwarded['host']); |
||
| 423 | } |
||
| 424 | |||
| 425 | $xForward = $this->getXForwardedData(); |
||
| 426 | |||
| 427 | // Check (deprecated) de facto standard |
||
| 428 | if (null !== $xForward) { |
||
| 429 | return strtolower($xForward['proto'] . '://' . $xForward['host']); |
||
| 430 | } |
||
| 431 | |||
| 432 | $protocol = 'http://'; |
||
| 433 | |||
| 434 | // We got called directly |
||
| 435 | if ($this->https) { |
||
| 436 | $protocol = 'https://'; |
||
| 437 | } |
||
| 438 | |||
| 439 | return $protocol . $this->request->server()->get('HTTP_HOST'); |
||
| 440 | } |
||
| 441 | |||
| 442 | /** |
||
| 443 | * Devolver datos de forward RFC 7239 |
||
| 444 | * |
||
| 445 | * @see https://tools.ietf.org/html/rfc7239#section-7.5 |
||
| 446 | * @return array|null |
||
| 447 | */ |
||
| 448 | public function getForwardedData() |
||
| 449 | { |
||
| 450 | $forwarded = $this->getHeader('HTTP_FORWARDED'); |
||
| 451 | |||
| 452 | // Check in style of RFC 7239 |
||
| 453 | if (!empty($forwarded) |
||
| 454 | && preg_match('/proto=(\w+);/i', $forwarded, $matchesProto) |
||
| 455 | && preg_match('/host=(\w+);/i', $forwarded, $matchesHost) |
||
| 456 | ) { |
||
| 457 | $data = [ |
||
| 458 | 'host ' => $matchesHost[0], |
||
| 459 | 'proto' => $matchesProto[0], |
||
| 460 | 'for' => $this->getForwardedFor() |
||
| 461 | ]; |
||
| 462 | |||
| 463 | // Check if protocol and host are not empty |
||
| 464 | if (!empty($data['proto']) && !empty($data['host'])) { |
||
| 465 | return $data; |
||
| 466 | } |
||
| 467 | } |
||
| 468 | |||
| 469 | return null; |
||
| 470 | } |
||
| 471 | |||
| 472 | /** |
||
| 473 | * @param string $header |
||
| 474 | * |
||
| 475 | * @return string |
||
| 476 | */ |
||
| 477 | public function getHeader(string $header): string |
||
| 478 | { |
||
| 479 | return $this->headers->get($header, ''); |
||
| 480 | } |
||
| 481 | |||
| 482 | /** |
||
| 483 | * Devolver datos de x-forward |
||
| 484 | * |
||
| 485 | * @return array|null |
||
| 486 | */ |
||
| 487 | public function getXForwardedData() |
||
| 488 | { |
||
| 489 | $forwardedHost = $this->getHeader('HTTP_X_FORWARDED_HOST'); |
||
| 490 | $forwardedProto = $this->getHeader('HTTP_X_FORWARDED_PROTO'); |
||
| 491 | |||
| 492 | // Check (deprecated) de facto standard |
||
| 493 | if (!empty($forwardedHost) && !empty($forwardedProto)) { |
||
| 494 | $data = [ |
||
| 495 | 'host' => trim(str_replace('"', '', $forwardedHost)), |
||
| 496 | 'proto' => trim(str_replace('"', '', $forwardedProto)), |
||
| 497 | 'for' => $this->getForwardedFor() |
||
| 498 | ]; |
||
| 499 | |||
| 500 | // Check if protocol and host are not empty |
||
| 501 | if (!empty($data['host']) && !empty($data['proto'])) { |
||
| 502 | return $data; |
||
| 503 | } |
||
| 504 | } |
||
| 505 | |||
| 506 | return null; |
||
| 507 | } |
||
| 508 | |||
| 509 | /** |
||
| 510 | * @return string |
||
| 511 | */ |
||
| 512 | public function getMethod(): string |
||
| 513 | { |
||
| 514 | return $this->method; |
||
| 515 | } |
||
| 516 | |||
| 517 | /** |
||
| 518 | * @return bool |
||
| 519 | */ |
||
| 520 | public function isHttps(): bool |
||
| 521 | { |
||
| 522 | return $this->https; |
||
| 523 | } |
||
| 524 | |||
| 525 | /** |
||
| 526 | * @return int |
||
| 527 | */ |
||
| 528 | public function getServerPort(): int |
||
| 529 | { |
||
| 530 | return (int)$this->request->server()->get('SERVER_PORT', 80); |
||
| 531 | } |
||
| 532 | |||
| 533 | /** |
||
| 534 | * @return \Klein\Request |
||
| 535 | */ |
||
| 536 | public function getRequest(): \Klein\Request |
||
| 537 | { |
||
| 538 | return $this->request; |
||
| 539 | } |
||
| 540 | |||
| 541 | /** |
||
| 542 | * @param string $key |
||
| 543 | * |
||
| 544 | * @return string |
||
| 545 | */ |
||
| 546 | public function getServer(string $key): string |
||
| 549 | } |
||
| 550 | } |