+global\OC::init()

Complexity

Conditions	25
Paths	2390

Size

Total Lines

224

Duplication

Lines	3
Ratio	1.34 %

Importance

Changes

0

<?php
	public static function init() {
		// calculate the root directories
		OC::$SERVERROOT = \str_replace("\\", '/', \substr(__DIR__, 0, -4));

		// register autoloader
		$loaderStart = \microtime(true);
		self::$CLI = (\in_array(\php_sapi_name(), ['cli', 'phpdbg']));

		// setup 3rdparty autoloader
		$vendorAutoLoad = OC::$SERVERROOT . '/lib/composer/autoload.php';
		if (!\file_exists($vendorAutoLoad)) {
			\printf('Composer autoloader not found, unable to continue. Please run "make".');
			exit();
		}

		// Add default composer PSR-4 autoloader
		self::$composerAutoloader = require $vendorAutoLoad;
		if (!self::$composerAutoloader) {
			print('Composer autoloader not found!');
			exit();
		}
		self::$loader = new Autoloader();
		if (\defined('PHPUNIT_RUN')) {
			self::$loader->addValidRoot(OC::$SERVERROOT . '/tests');
		}
		\spl_autoload_register([self::$loader, 'load']);
		$loaderEnd = \microtime(true);

		try {
			self::initPaths();
		} catch (\RuntimeException $e) {
			if (!self::$CLI) {
				// can`t use OC_Response::setStatus because server is not
				// initialized here
				\http_response_code(OC_Response::STATUS_SERVICE_UNAVAILABLE);
			}
			// we can't use the template error page here, because this needs the
			// DI container which isn't available yet
			print($e->getMessage());
			exit();
		}

		// setup the basic server
		self::$server = new \OC\Server(\OC::$WEBROOT, self::$config);
		\OC::$server->getEventLogger()->log('autoloader', 'Autoloader', $loaderStart, $loaderEnd);
		\OC::$server->getEventLogger()->start('boot', 'Initialize');

		// Don't display errors and log them
		\error_reporting(E_ALL | E_STRICT);

		if (!\date_default_timezone_set('UTC')) {
			\OC::$server->getLogger()->error('Could not set timezone to UTC');
		};

		//try to configure php to enable big file uploads.
		//this doesn´t work always depending on the webserver and php configuration.
		//Let´s try to overwrite some defaults anyway

		//try to set the maximum execution time to 60min
		@\set_time_limit(3600);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

		self::handleAuthHeaders();
		self::registerAutoloaderCache();

		// initialize intl fallback is necessary
		\Patchwork\Utf8\Bootup::initIntl();
		OC_Util::isSetLocaleWorking();

		if (!\defined('PHPUNIT_RUN')) {
			OC\Log\ErrorHandler::setLogger(\OC::$server->getLogger());
			$debug = \OC::$server->getConfig()->getSystemValue('debug', false);
			OC\Log\ErrorHandler::register($debug);
		}

		// register the stream wrappers
		\stream_wrapper_register('fakedir', 'OC\Files\Stream\Dir');
		\stream_wrapper_register('static', 'OC\Files\Stream\StaticStream');
		\stream_wrapper_register('close', 'OC\Files\Stream\Close');
		\stream_wrapper_register('quota', 'OC\Files\Stream\Quota');

		\OC::$server->getEventLogger()->start('init_session', 'Initialize session');
		OC_App::loadApps(['session', 'theme']);
		if (!self::$CLI) {
			self::initSession();
		}

		\OC::$server->getEventLogger()->end('init_session');

		// incognito mode for now
		$uid = \OC::$server->getSession()->get('user_id');
		\OC::$server->getSession()->set('user_id', null);

		self::checkConfig();
		self::checkInstalled();

		OC_Response::addSecurityHeaders();

		if (!\defined('OC_CONSOLE')) {
			$errors = OC_Util::checkServer(\OC::$server->getConfig());
			if (\count($errors) > 0) {
				if (self::$CLI) {
					// Convert l10n string into regular string for usage in database
					$staticErrors = [];
					foreach ($errors as $error) {
						echo $error['error'] . "\n";
						echo $error['hint'] . "\n\n";
						$staticErrors[] = [
							'error' => (string)$error['error'],
							'hint' => (string)$error['hint'],
						];
					}

					try {
						\OC::$server->getConfig()->setAppValue('core', 'cronErrors', \json_encode($staticErrors));
					} catch (\Exception $e) {
						echo('Writing to database failed');
					}
					exit(1);
				} else {
					OC_Response::setStatus(OC_Response::STATUS_SERVICE_UNAVAILABLE);
					OC_Template::printGuestPage('', 'error', ['errors' => $errors]);
					exit;
				}
			} elseif (self::$CLI && \OC::$server->getConfig()->getSystemValue('installed', false)) {

This code seems to be duplicated across your project.

				\OC::$server->getConfig()->deleteAppValue('core', 'cronErrors');
			}
		}

		// set back user
		\OC::$server->getSession()->set('user_id', $uid);

		$systemConfig = \OC::$server->getSystemConfig();

		// User and Groups
		if ($systemConfig->getValue("installed", false)) {
			OC_User::useBackend(new \OC\User\Database());
			\OC::$server->getGroupManager()->addBackend(new \OC\Group\Database());
		} else {
			self::$server->getSession()->set('user_id', '');
		}

		// Subscribe to the hook
		\OCP\Util::connectHook(
			'\OCA\Files_Sharing\API\Server2Server',
			'preLoginNameUsedAsUserName',
			'\OC\User\Database',
			'preLoginNameUsedAsUserName'
		);

		//setup extra user backends
		if (!self::checkUpgrade(false)) {

The expression self::checkUpgrade(false) of type null|boolean is loosely compared to false; this is ambiguous if the boolean can be false. You might want to explicitly use !== null instead.

			OC_User::setupBackends();
		} else {
			// Run upgrades in incognito mode
			OC_User::setIncognitoMode(true);
		}

		self::registerCacheHooks();
		self::registerFilesystemHooks();
		if ($systemConfig->getValue('enable_previews', true)) {
			self::registerPreviewHooks();
		}
		self::registerShareHooks();
		self::registerLogRotate();
		if ($systemConfig->getValue("installed", false)) {
			self::registerEncryptionWrapper();
			self::registerEncryptionHooks();
		}

		//make sure temporary files are cleaned up
		\OC::$server->getShutdownHandler()->register(function () {
			$tmpManager = \OC::$server->getTempManager();
			$tmpManager->clean();
		});
		\OC::$server->getShutdownHandler()->register(function () {
			$lockProvider = \OC::$server->getLockingProvider();
			$lockProvider->releaseAll();
		});

		// Check whether the sample configuration has been copied
		if ($systemConfig->getValue('copied_sample_config', false)) {
			$l = \OC::$server->getL10N('lib');
			\header('HTTP/1.1 503 Service Temporarily Unavailable');
			\header('Status: 503 Service Temporarily Unavailable');
			OC_Template::printErrorPage(
				$l->t('Sample configuration detected'),
				$l->t('It has been detected that the sample configuration has been copied. This can break your installation and is unsupported. Please read the documentation before performing changes on config.php')
			);
			return;
		}

		$request = \OC::$server->getRequest();
		$host = $request->getInsecureServerHost();
		/**
		 * if the host passed in headers isn't trusted
		 * FIXME: Should not be in here at all :see_no_evil:
		 */
		if (!OC::$CLI
			// overwritehost is always trusted, workaround to not have to make
			// \OC\AppFramework\Http\Request::getOverwriteHost public
			&& self::$server->getConfig()->getSystemValue('overwritehost') === ''
			&& !\OC::$server->getTrustedDomainHelper()->isTrustedDomain($host)
			&& self::$server->getConfig()->getSystemValue('installed', false)
		) {
			\header('HTTP/1.1 400 Bad Request');
			\header('Status: 400 Bad Request');

			\OC::$server->getLogger()->warning(
					'Trusted domain error. "{remoteAddress}" tried to access using "{host}" as host.',
					[
						'app' => 'core',
						'remoteAddress' => $request->getRemoteAddress(),
						'host' => $host,
					]
			);

			$tmpl = new OCP\Template('core', 'untrustedDomain', 'guest');
			$tmpl->assign('domain', $host);
			$tmpl->printPage();

			exit();
		}
		\OC::$server->getEventLogger()->end('boot');
	}