SilverStripe\Core\TempFolder

Complexity

Total Complexity

19

Size/Duplication

Total Lines	108
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	0

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	getTempFolder()	0	13	2
B	getTempFolderUsername()	0	19	7
C	getTempParentFolder()	0	51	10

<?php

namespace SilverStripe\Core;

use Exception;

/**
 * Guesses location for temp folder
 */
class TempFolder
{
    /**
     * Returns the temporary folder path that silverstripe should use for its cache files.
     *
     * @param string $base The base path to use for determining the temporary path
     * @return string Path to temp
     */
    public static function getTempFolder($base)
    {
        $parent = static::getTempParentFolder($base);

        // The actual temp folder is a subfolder of getTempParentFolder(), named by username
        $subfolder = $parent . DIRECTORY_SEPARATOR . static::getTempFolderUsername();

        if (!@file_exists($subfolder)) {
            mkdir($subfolder);
        }

        return $subfolder;
    }

    /**
     * Returns as best a representation of the current username as we can glean.
     *
     * @return string
     */
    public static function getTempFolderUsername()
    {
        $user = getenv('APACHE_RUN_USER');
        if (!$user) {
            $user = getenv('USER');
        }
        if (!$user) {
            $user = getenv('USERNAME');
        }
        if (!$user && function_exists('posix_getpwuid') && function_exists('posix_getuid')) {
            $userDetails = posix_getpwuid(posix_getuid());
            $user = $userDetails['name'];
        }
        if (!$user) {
            $user = 'unknown';
        }
        $user = preg_replace('/[^A-Za-z0-9_\-]/', '', $user);
        return $user;
    }

    /**
     * Return the parent folder of the temp folder.
     * The temp folder will be a subfolder of this, named by username.
     * This structure prevents permission problems.
     *
     * @param string $base
     * @return string
     * @throws Exception
     */
    protected static function getTempParentFolder($base)
    {
        // first, try finding a silverstripe-cache dir built off the base path
        $tempPath = $base . DIRECTORY_SEPARATOR . 'silverstripe-cache';
        if (@file_exists($tempPath)) {
            if ((fileperms($tempPath) & 0777) != 0777) {
                @chmod($tempPath, 0777);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

            }
            return $tempPath;
        }

        // failing the above, try finding a namespaced silverstripe-cache dir in the system temp
        $tempPath = sys_get_temp_dir() . DIRECTORY_SEPARATOR .
            'silverstripe-cache-php' . preg_replace('/[^\w-\.+]+/', '-', PHP_VERSION) .
            str_replace(array(' ', '/', ':', '\\'), '-', $base);
        if (!@file_exists($tempPath)) {
            $oldUMask = umask(0);
            @mkdir($tempPath, 0777);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

            umask($oldUMask);

        // if the folder already exists, correct perms
        } else {
            if ((fileperms($tempPath) & 0777) != 0777) {
                @chmod($tempPath, 0777);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

            }
        }

        $worked = @file_exists($tempPath) && @is_writable($tempPath);

        // failing to use the system path, attempt to create a local silverstripe-cache dir
        if (!$worked) {
            $tempPath = $base . DIRECTORY_SEPARATOR . 'silverstripe-cache';
            if (!@file_exists($tempPath)) {
                $oldUMask = umask(0);
                @mkdir($tempPath, 0777);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

                umask($oldUMask);
            }

            $worked = @file_exists($tempPath) && @is_writable($tempPath);
        }

        if (!$worked) {
            throw new Exception(
                'Permission problem gaining access to a temp folder. ' .
                'Please create a folder named silverstripe-cache in the base folder ' .
                'of the installation and ensure it has the correct permissions'
            );
        }

        return $tempPath;
    }
}