1
|
|
|
<?php |
2
|
|
|
/** |
3
|
|
|
* @package framework |
4
|
|
|
* @subpackage tests |
5
|
|
|
* |
6
|
|
|
* @todo test Director::alternateBaseFolder() |
7
|
|
|
*/ |
8
|
|
|
class DirectorTest extends SapphireTest { |
9
|
|
|
|
10
|
|
|
protected static $originalRequestURI; |
11
|
|
|
|
12
|
|
|
protected $originalProtocolHeaders = array(); |
13
|
|
|
|
14
|
|
|
protected $originalGet = array(); |
15
|
|
|
|
16
|
|
|
protected $originalSession = array(); |
17
|
|
|
|
18
|
|
|
public function setUp() { |
|
|
|
|
19
|
|
|
parent::setUp(); |
20
|
|
|
|
21
|
|
|
|
22
|
|
|
// Hold the original request URI once so it doesn't get overwritten |
23
|
|
|
if(!self::$originalRequestURI) { |
24
|
|
|
self::$originalRequestURI = $_SERVER['REQUEST_URI']; |
25
|
|
|
} |
26
|
|
|
$_SERVER['REQUEST_URI'] = 'http://www.mysite.com'; |
27
|
|
|
|
28
|
|
|
$this->originalGet = $_GET; |
29
|
|
|
$this->originalSession = $_SESSION; |
30
|
|
|
$_SESSION = array(); |
31
|
|
|
|
32
|
|
|
Config::inst()->update('Director', 'rules', array( |
33
|
|
|
'DirectorTestRule/$Action/$ID/$OtherID' => 'DirectorTestRequest_Controller', |
34
|
|
|
'en-nz/$Action/$ID/$OtherID' => array( |
35
|
|
|
'Controller' => 'DirectorTestRequest_Controller', |
36
|
|
|
'Locale' => 'en_NZ' |
37
|
|
|
) |
38
|
|
|
)); |
39
|
|
|
|
40
|
|
|
$headers = array( |
41
|
|
|
'HTTP_X_FORWARDED_PROTOCOL', 'HTTPS', 'SSL' |
42
|
|
|
); |
43
|
|
|
|
44
|
|
|
foreach($headers as $header) { |
45
|
|
|
if(isset($_SERVER[$header])) { |
46
|
|
|
$this->originalProtocolHeaders[$header] = $_SERVER[$header]; |
47
|
|
|
} |
48
|
|
|
} |
49
|
|
|
} |
50
|
|
|
|
51
|
|
|
public function tearDown() { |
|
|
|
|
52
|
|
|
// TODO Remove director rule, currently API doesnt allow this |
53
|
|
|
|
54
|
|
|
$_GET = $this->originalGet; |
55
|
|
|
$_SESSION = $this->originalSession; |
56
|
|
|
|
57
|
|
|
// Reinstate the original REQUEST_URI after it was modified by some tests |
58
|
|
|
$_SERVER['REQUEST_URI'] = self::$originalRequestURI; |
59
|
|
|
|
60
|
|
|
if($this->originalProtocolHeaders) { |
|
|
|
|
61
|
|
|
foreach($this->originalProtocolHeaders as $header => $value) { |
62
|
|
|
$_SERVER[$header] = $value; |
63
|
|
|
} |
64
|
|
|
} |
65
|
|
|
|
66
|
|
|
|
67
|
|
|
parent::tearDown(); |
68
|
|
|
} |
69
|
|
|
|
70
|
|
|
public function testFileExists() { |
71
|
|
|
$tempFileName = 'DirectorTest_testFileExists.tmp'; |
72
|
|
|
$tempFilePath = TEMP_FOLDER . '/' . $tempFileName; |
73
|
|
|
|
74
|
|
|
// create temp file |
75
|
|
|
file_put_contents($tempFilePath, ''); |
76
|
|
|
|
77
|
|
|
$this->assertTrue( |
78
|
|
|
Director::fileExists($tempFilePath), |
79
|
|
|
'File exist check with absolute path' |
80
|
|
|
); |
81
|
|
|
|
82
|
|
|
$this->assertTrue( |
83
|
|
|
Director::fileExists($tempFilePath . '?queryparams=1&foo[bar]=bar'), |
84
|
|
|
'File exist check with query params ignored' |
85
|
|
|
); |
86
|
|
|
|
87
|
|
|
unlink($tempFilePath); |
88
|
|
|
} |
89
|
|
|
|
90
|
|
|
public function testAbsoluteURL() { |
|
|
|
|
91
|
|
|
|
92
|
|
|
$rootURL = Director::protocolAndHost(); |
93
|
|
|
$_SERVER['REQUEST_URI'] = "$rootURL/mysite/sub-page/"; |
94
|
|
|
Config::inst()->update('Director', 'alternate_base_url', '/mysite/'); |
95
|
|
|
|
96
|
|
|
//test empty URL |
97
|
|
|
$this->assertEquals("$rootURL/mysite/sub-page/", Director::absoluteURL('')); |
98
|
|
|
|
99
|
|
|
//test absolute - / |
100
|
|
|
$this->assertEquals("$rootURL/", Director::absoluteURL('/')); |
101
|
|
|
|
102
|
|
|
//test relative |
103
|
|
|
$this->assertEquals("$rootURL/mysite/sub-page/", Director::absoluteURL('./')); |
104
|
|
|
$this->assertEquals("$rootURL/mysite/sub-page/", Director::absoluteURL('.')); |
105
|
|
|
|
106
|
|
|
// Test already absolute url |
107
|
|
|
$this->assertEquals($rootURL, Director::absoluteURL($rootURL)); |
|
|
|
|
108
|
|
|
$this->assertEquals($rootURL, Director::absoluteURL($rootURL, true)); |
|
|
|
|
109
|
|
|
$this->assertEquals('http://www.mytest.com', Director::absoluteURL('http://www.mytest.com')); |
110
|
|
|
$this->assertEquals('http://www.mytest.com', Director::absoluteURL('http://www.mytest.com', true)); |
111
|
|
|
$this->assertEquals("$rootURL/test", Director::absoluteURL("$rootURL/test")); |
112
|
|
|
$this->assertEquals("$rootURL/test", Director::absoluteURL("$rootURL/test", true)); |
113
|
|
|
|
114
|
|
|
// Test relative to base |
115
|
|
|
$this->assertEquals("$rootURL/mysite/test", Director::absoluteURL("test", true)); |
116
|
|
|
$this->assertEquals("$rootURL/mysite/test/url", Director::absoluteURL("test/url", true)); |
117
|
|
|
$this->assertEquals("$rootURL/root", Director::absoluteURL("/root", true)); |
118
|
|
|
$this->assertEquals("$rootURL/root/url", Director::absoluteURL("/root/url", true)); |
119
|
|
|
|
120
|
|
|
// Test relative to requested page |
121
|
|
|
$this->assertEquals("$rootURL/mysite/sub-page/test", Director::absoluteURL("test")); |
122
|
|
|
// Legacy behaviour resolves this to $rootURL/mysite/test/url |
123
|
|
|
//$this->assertEquals("$rootURL/mysite/sub-page/test/url", Director::absoluteURL("test/url")); |
|
|
|
|
124
|
|
|
$this->assertEquals("$rootURL/root", Director::absoluteURL("/root")); |
125
|
|
|
$this->assertEquals("$rootURL/root/url", Director::absoluteURL("/root/url")); |
126
|
|
|
|
127
|
|
|
// Test that javascript links are not left intact |
128
|
|
|
$this->assertStringStartsNotWith('javascript', Director::absoluteURL('javascript:alert("attack")')); |
129
|
|
|
$this->assertStringStartsNotWith('alert', Director::absoluteURL('javascript:alert("attack")')); |
130
|
|
|
$this->assertStringStartsNotWith('javascript', Director::absoluteURL('alert("attack")')); |
131
|
|
|
$this->assertStringStartsNotWith('alert', Director::absoluteURL('alert("attack")')); |
132
|
|
|
} |
133
|
|
|
|
134
|
|
|
public function testAlternativeBaseURL() { |
|
|
|
|
135
|
|
|
// Get original protocol and hostname |
136
|
|
|
$rootURL = Director::protocolAndHost(); |
137
|
|
|
|
138
|
|
|
// relative base URLs - you should end them in a / |
139
|
|
|
Config::inst()->update('Director', 'alternate_base_url', '/relativebase/'); |
140
|
|
|
$_SERVER['REQUEST_URI'] = "$rootURL/relativebase/sub-page/"; |
141
|
|
|
|
142
|
|
|
$this->assertEquals('/relativebase/', Director::baseURL()); |
143
|
|
|
$this->assertEquals($rootURL . '/relativebase/', Director::absoluteBaseURL()); |
144
|
|
|
$this->assertEquals( |
145
|
|
|
$rootURL . '/relativebase/subfolder/test', |
146
|
|
|
Director::absoluteURL('subfolder/test') |
147
|
|
|
); |
148
|
|
|
|
149
|
|
|
// absolute base URLs - you should end them in a / |
150
|
|
|
Config::inst()->update('Director', 'alternate_base_url', 'http://www.example.org/'); |
151
|
|
|
$_SERVER['REQUEST_URI'] = "http://www.example.org/sub-page/"; |
152
|
|
|
$this->assertEquals('http://www.example.org/', Director::baseURL()); |
153
|
|
|
$this->assertEquals('http://www.example.org/', Director::absoluteBaseURL()); |
154
|
|
|
$this->assertEquals('http://www.example.org/sub-page/', Director::absoluteURL('')); |
155
|
|
|
$this->assertEquals('http://www.example.org/', Director::absoluteURL('', true)); |
156
|
|
|
/* |
157
|
|
|
* See Legacy behaviour in testAbsoluteURL - sub-pages with '/' in the string are not correctly evaluated |
158
|
|
|
$this->assertEquals( |
159
|
|
|
'http://www.example.org/sub-page/subfolder/test', |
160
|
|
|
Director::absoluteURL('subfolder/test') |
161
|
|
|
);*/ |
162
|
|
|
$this->assertEquals( |
163
|
|
|
'http://www.example.org/subfolder/test', |
164
|
|
|
Director::absoluteURL('subfolder/test', true) |
165
|
|
|
); |
166
|
|
|
|
167
|
|
|
// Setting it to false restores functionality |
168
|
|
|
Config::inst()->update('Director', 'alternate_base_url', false); |
169
|
|
|
$_SERVER['REQUEST_URI'] = $rootURL; |
170
|
|
|
$this->assertEquals(BASE_URL.'/', Director::baseURL()); |
171
|
|
|
$this->assertEquals($rootURL.BASE_URL.'/', Director::absoluteBaseURL(BASE_URL)); |
|
|
|
|
172
|
|
|
$this->assertEquals( |
173
|
|
|
$rootURL.BASE_URL . '/subfolder/test', |
174
|
|
|
Director::absoluteURL('subfolder/test') |
175
|
|
|
); |
176
|
|
|
} |
177
|
|
|
|
178
|
|
|
/** |
179
|
|
|
* Tests that {@link Director::is_absolute()} works under different environment types |
180
|
|
|
*/ |
181
|
|
|
public function testIsAbsolute() { |
182
|
|
|
$expected = array ( |
183
|
|
|
'C:/something' => true, |
184
|
|
|
'd:\\' => true, |
185
|
|
|
'e/' => false, |
186
|
|
|
's:/directory' => true, |
187
|
|
|
'/var/www' => true, |
188
|
|
|
'\\Something' => true, |
189
|
|
|
'something/c:' => false, |
190
|
|
|
'folder' => false, |
191
|
|
|
'a/c:/' => false |
192
|
|
|
); |
193
|
|
|
|
194
|
|
|
foreach($expected as $path => $result) { |
195
|
|
|
$this->assertEquals(Director::is_absolute($path), $result, "Test result for $path"); |
196
|
|
|
} |
197
|
|
|
} |
198
|
|
|
|
199
|
|
|
public function testIsAbsoluteUrl() { |
200
|
|
|
$this->assertTrue(Director::is_absolute_url('http://test.com/testpage')); |
201
|
|
|
$this->assertTrue(Director::is_absolute_url('ftp://test.com')); |
202
|
|
|
$this->assertFalse(Director::is_absolute_url('test.com/testpage')); |
203
|
|
|
$this->assertFalse(Director::is_absolute_url('/relative')); |
204
|
|
|
$this->assertFalse(Director::is_absolute_url('relative')); |
205
|
|
|
$this->assertFalse(Director::is_absolute_url("/relative/?url=http://foo.com")); |
206
|
|
|
$this->assertFalse(Director::is_absolute_url("/relative/#http://foo.com")); |
207
|
|
|
$this->assertTrue(Director::is_absolute_url("https://test.com/?url=http://foo.com")); |
208
|
|
|
$this->assertTrue(Director::is_absolute_url("trickparseurl:http://test.com")); |
209
|
|
|
$this->assertTrue(Director::is_absolute_url('//test.com')); |
210
|
|
|
$this->assertTrue(Director::is_absolute_url('/////test.com')); |
211
|
|
|
$this->assertTrue(Director::is_absolute_url(' ///test.com')); |
212
|
|
|
$this->assertTrue(Director::is_absolute_url('http:test.com')); |
213
|
|
|
$this->assertTrue(Director::is_absolute_url('//http://test.com')); |
214
|
|
|
} |
215
|
|
|
|
216
|
|
|
public function testIsRelativeUrl() { |
217
|
|
|
$siteUrl = Director::absoluteBaseURL(); |
218
|
|
|
$this->assertFalse(Director::is_relative_url('http://test.com')); |
219
|
|
|
$this->assertFalse(Director::is_relative_url('https://test.com')); |
220
|
|
|
$this->assertFalse(Director::is_relative_url(' https://test.com/testpage ')); |
221
|
|
|
$this->assertTrue(Director::is_relative_url('test.com/testpage')); |
222
|
|
|
$this->assertFalse(Director::is_relative_url('ftp://test.com')); |
223
|
|
|
$this->assertTrue(Director::is_relative_url('/relative')); |
224
|
|
|
$this->assertTrue(Director::is_relative_url('relative')); |
225
|
|
|
$this->assertTrue(Director::is_relative_url('/relative/?url=http://test.com')); |
226
|
|
|
$this->assertTrue(Director::is_relative_url('/relative/#=http://test.com')); |
227
|
|
|
} |
228
|
|
|
|
229
|
|
|
public function testMakeRelative() { |
230
|
|
|
$siteUrl = Director::absoluteBaseURL(); |
231
|
|
|
$siteUrlNoProtocol = preg_replace('/https?:\/\//', '', $siteUrl); |
232
|
|
|
|
233
|
|
|
$this->assertEquals(Director::makeRelative("$siteUrl"), ''); |
234
|
|
|
$this->assertEquals(Director::makeRelative("https://$siteUrlNoProtocol"), ''); |
235
|
|
|
$this->assertEquals(Director::makeRelative("http://$siteUrlNoProtocol"), ''); |
236
|
|
|
|
237
|
|
|
$this->assertEquals(Director::makeRelative(" $siteUrl/testpage "), 'testpage'); |
238
|
|
|
$this->assertEquals(Director::makeRelative("$siteUrlNoProtocol/testpage"), 'testpage'); |
239
|
|
|
|
240
|
|
|
$this->assertEquals(Director::makeRelative('ftp://test.com'), 'ftp://test.com'); |
241
|
|
|
$this->assertEquals(Director::makeRelative('http://test.com'), 'http://test.com'); |
242
|
|
|
|
243
|
|
|
$this->assertEquals(Director::makeRelative('relative'), 'relative'); |
244
|
|
|
$this->assertEquals(Director::makeRelative("$siteUrl/?url=http://test.com"), '?url=http://test.com'); |
245
|
|
|
|
246
|
|
|
$this->assertEquals("test", Director::makeRelative("https://".$siteUrlNoProtocol."/test")); |
247
|
|
|
$this->assertEquals("test", Director::makeRelative("http://".$siteUrlNoProtocol."/test")); |
248
|
|
|
} |
249
|
|
|
|
250
|
|
|
/** |
251
|
|
|
* Mostly tested by {@link testIsRelativeUrl()}, |
252
|
|
|
* just adding the host name matching aspect here. |
253
|
|
|
*/ |
254
|
|
|
public function testIsSiteUrl() { |
255
|
|
|
$this->assertFalse(Director::is_site_url("http://test.com")); |
256
|
|
|
$this->assertTrue(Director::is_site_url(Director::absoluteBaseURL())); |
|
|
|
|
257
|
|
|
$this->assertFalse(Director::is_site_url("http://test.com?url=" . Director::absoluteBaseURL())); |
258
|
|
|
$this->assertFalse(Director::is_site_url("http://test.com?url=" . urlencode(Director::absoluteBaseURL()))); |
259
|
|
|
$this->assertFalse(Director::is_site_url("//test.com?url=" . Director::absoluteBaseURL())); |
260
|
|
|
} |
261
|
|
|
|
262
|
|
|
/** |
263
|
|
|
* Tests isDev, isTest, isLive set from querystring |
264
|
|
|
*/ |
265
|
|
|
public function testQueryIsEnvironment() { |
|
|
|
|
266
|
|
|
// Reset |
267
|
|
|
unset($_SESSION['isDev']); |
268
|
|
|
unset($_SESSION['isLive']); |
269
|
|
|
unset($_GET['isTest']); |
270
|
|
|
unset($_GET['isDev']); |
271
|
|
|
$_SESSION = $_SESSION ?: array(); |
272
|
|
|
|
273
|
|
|
// Test isDev=1 |
274
|
|
|
$_GET['isDev'] = '1'; |
275
|
|
|
$this->assertTrue(Director::isDev()); |
276
|
|
|
$this->assertFalse(Director::isTest()); |
277
|
|
|
$this->assertFalse(Director::isLive()); |
278
|
|
|
|
279
|
|
|
// Test persistence |
280
|
|
|
unset($_GET['isDev']); |
281
|
|
|
$this->assertTrue(Director::isDev()); |
282
|
|
|
$this->assertFalse(Director::isTest()); |
283
|
|
|
$this->assertFalse(Director::isLive()); |
284
|
|
|
|
285
|
|
|
// Test change to isTest |
286
|
|
|
$_GET['isTest'] = '1'; |
287
|
|
|
$this->assertFalse(Director::isDev()); |
288
|
|
|
$this->assertTrue(Director::isTest()); |
289
|
|
|
$this->assertFalse(Director::isLive()); |
290
|
|
|
|
291
|
|
|
// Test persistence |
292
|
|
|
unset($_GET['isTest']); |
293
|
|
|
$this->assertFalse(Director::isDev()); |
294
|
|
|
$this->assertTrue(Director::isTest()); |
295
|
|
|
$this->assertFalse(Director::isLive()); |
296
|
|
|
} |
297
|
|
|
|
298
|
|
|
public function testResetGlobalsAfterTestRequest() { |
|
|
|
|
299
|
|
|
$_GET = array('somekey' => 'getvalue'); |
300
|
|
|
$_POST = array('somekey' => 'postvalue'); |
301
|
|
|
$_COOKIE = array('somekey' => 'cookievalue'); |
302
|
|
|
|
303
|
|
|
$cookies = Injector::inst()->createWithArgs( |
304
|
|
|
'Cookie_Backend', |
305
|
|
|
array(array('somekey' => 'sometestcookievalue')) |
306
|
|
|
); |
307
|
|
|
|
308
|
|
|
$getresponse = Director::test('errorpage?somekey=sometestgetvalue', array('somekey' => 'sometestpostvalue'), |
309
|
|
|
null, null, null, null, $cookies); |
310
|
|
|
|
311
|
|
|
$this->assertEquals('getvalue', $_GET['somekey'], |
312
|
|
|
'$_GET reset to original value after Director::test()'); |
313
|
|
|
$this->assertEquals('postvalue', $_POST['somekey'], |
314
|
|
|
'$_POST reset to original value after Director::test()'); |
315
|
|
|
$this->assertEquals('cookievalue', $_COOKIE['somekey'], |
316
|
|
|
'$_COOKIE reset to original value after Director::test()'); |
317
|
|
|
} |
318
|
|
|
|
319
|
|
|
public function testTestRequestCarriesGlobals() { |
320
|
|
|
$fixture = array('somekey' => 'sometestvalue'); |
321
|
|
|
foreach(array('get', 'post') as $method) { |
322
|
|
|
foreach(array('return%sValue', 'returnRequestValue', 'returnCookieValue') as $testfunction) { |
323
|
|
|
$url = 'DirectorTestRequest_Controller/' . sprintf($testfunction, ucfirst($method)) |
324
|
|
|
. '?' . http_build_query($fixture); |
325
|
|
|
|
326
|
|
|
$getresponse = Director::test( |
327
|
|
|
$url, |
328
|
|
|
$fixture, |
329
|
|
|
null, |
330
|
|
|
strtoupper($method), |
331
|
|
|
null, |
332
|
|
|
null, |
333
|
|
|
Injector::inst()->createWithArgs('Cookie_Backend', array($fixture)) |
334
|
|
|
); |
335
|
|
|
|
336
|
|
|
$this->assertInstanceOf('SS_HTTPResponse', $getresponse, 'Director::test() returns SS_HTTPResponse'); |
337
|
|
|
$this->assertEquals($fixture['somekey'], $getresponse->getBody(), 'Director::test() ' . $testfunction); |
338
|
|
|
} |
339
|
|
|
} |
340
|
|
|
} |
341
|
|
|
|
342
|
|
|
/** |
343
|
|
|
* Tests that additional parameters specified in the routing table are |
344
|
|
|
* saved in the request |
345
|
|
|
*/ |
346
|
|
|
public function testRouteParams() { |
347
|
|
|
Director::test('en-nz/myaction/myid/myotherid', null, null, null, null, null, null, $request); |
348
|
|
|
|
349
|
|
|
$this->assertEquals( |
350
|
|
|
$request->params(), |
351
|
|
|
array( |
352
|
|
|
'Controller' => 'DirectorTestRequest_Controller', |
353
|
|
|
'Action' => 'myaction', |
354
|
|
|
'ID' => 'myid', |
355
|
|
|
'OtherID' => 'myotherid', |
356
|
|
|
'Locale' => 'en_NZ' |
357
|
|
|
) |
358
|
|
|
); |
359
|
|
|
} |
360
|
|
|
|
361
|
|
|
public function testForceSSLProtectsEntireSite() { |
|
|
|
|
362
|
|
|
$_SERVER['REQUEST_URI'] = Director::baseURL() . 'admin'; |
363
|
|
|
$output = Director::forceSSL(); |
364
|
|
|
$this->assertEquals($output, 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']); |
365
|
|
|
|
366
|
|
|
$_SERVER['REQUEST_URI'] = Director::baseURL() . 'some-url'; |
367
|
|
|
$output = Director::forceSSL(); |
368
|
|
|
$this->assertEquals($output, 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']); |
369
|
|
|
} |
370
|
|
|
|
371
|
|
|
public function testForceSSLOnTopLevelPagePattern() { |
|
|
|
|
372
|
|
|
$_SERVER['REQUEST_URI'] = Director::baseURL() . 'admin'; |
373
|
|
|
$output = Director::forceSSL(array('/^admin/')); |
374
|
|
|
$this->assertEquals($output, 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']); |
375
|
|
|
} |
376
|
|
|
|
377
|
|
|
public function testForceSSLOnSubPagesPattern() { |
|
|
|
|
378
|
|
|
$_SERVER['REQUEST_URI'] = Director::baseURL() . Config::inst()->get('Security', 'login_url'); |
379
|
|
|
$output = Director::forceSSL(array('/^Security/')); |
380
|
|
|
$this->assertEquals($output, 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']); |
381
|
|
|
} |
382
|
|
|
|
383
|
|
|
public function testForceSSLWithPatternDoesNotMatchOtherPages() { |
|
|
|
|
384
|
|
|
$_SERVER['REQUEST_URI'] = Director::baseURL() . 'normal-page'; |
385
|
|
|
$output = Director::forceSSL(array('/^admin/')); |
386
|
|
|
$this->assertFalse($output); |
387
|
|
|
|
388
|
|
|
$_SERVER['REQUEST_URI'] = Director::baseURL() . 'just-another-page/sub-url'; |
389
|
|
|
$output = Director::forceSSL(array('/^admin/', '/^Security/')); |
390
|
|
|
$this->assertFalse($output); |
391
|
|
|
} |
392
|
|
|
|
393
|
|
|
public function testForceSSLAlternateDomain() { |
|
|
|
|
394
|
|
|
Config::inst()->update('Director', 'alternate_base_url', '/'); |
395
|
|
|
$_SERVER['REQUEST_URI'] = Director::baseURL() . 'admin'; |
396
|
|
|
$output = Director::forceSSL(array('/^admin/'), 'secure.mysite.com'); |
397
|
|
|
$this->assertEquals($output, 'https://secure.mysite.com/admin'); |
398
|
|
|
} |
399
|
|
|
|
400
|
|
|
/** |
401
|
|
|
* @covers Director::extract_request_headers() |
402
|
|
|
*/ |
403
|
|
|
public function testExtractRequestHeaders() { |
404
|
|
|
$request = array( |
405
|
|
|
'REDIRECT_STATUS' => '200', |
406
|
|
|
'HTTP_HOST' => 'host', |
407
|
|
|
'HTTP_USER_AGENT' => 'User Agent', |
408
|
|
|
'HTTP_ACCEPT' => 'text/html', |
409
|
|
|
'HTTP_ACCEPT_LANGUAGE' => 'en-us', |
410
|
|
|
'HTTP_COOKIE' => 'MyCookie=1', |
411
|
|
|
'SERVER_PROTOCOL' => 'HTTP/1.1', |
412
|
|
|
'REQUEST_METHOD' => 'GET', |
413
|
|
|
'REQUEST_URI' => '/', |
414
|
|
|
'SCRIPT_NAME' => FRAMEWORK_DIR . '/main.php', |
415
|
|
|
'CONTENT_TYPE' => 'text/xml', |
416
|
|
|
'CONTENT_LENGTH' => 10 |
417
|
|
|
); |
418
|
|
|
|
419
|
|
|
$headers = array( |
420
|
|
|
'Host' => 'host', |
421
|
|
|
'User-Agent' => 'User Agent', |
422
|
|
|
'Accept' => 'text/html', |
423
|
|
|
'Accept-Language' => 'en-us', |
424
|
|
|
'Cookie' => 'MyCookie=1', |
425
|
|
|
'Content-Type' => 'text/xml', |
426
|
|
|
'Content-Length' => '10' |
427
|
|
|
); |
428
|
|
|
|
429
|
|
|
$this->assertEquals($headers, Director::extract_request_headers($request)); |
430
|
|
|
} |
431
|
|
|
|
432
|
|
|
public function testUnmatchedRequestReturns404() { |
433
|
|
|
$this->assertEquals(404, Director::test('no-route')->getStatusCode()); |
434
|
|
|
} |
435
|
|
|
|
436
|
|
|
public function testIsHttps() { |
|
|
|
|
437
|
|
|
if(!TRUSTED_PROXY) { |
438
|
|
|
$this->markTestSkipped('Test cannot be run without trusted proxy'); |
439
|
|
|
} |
440
|
|
|
// nothing available |
441
|
|
|
$headers = array( |
442
|
|
|
'HTTP_X_FORWARDED_PROTOCOL', 'HTTPS', 'SSL' |
443
|
|
|
); |
444
|
|
|
|
445
|
|
|
$origServer = $_SERVER; |
446
|
|
|
|
447
|
|
|
foreach($headers as $header) { |
448
|
|
|
if(isset($_SERVER[$header])) { |
449
|
|
|
unset($_SERVER['HTTP_X_FORWARDED_PROTOCOL']); |
450
|
|
|
} |
451
|
|
|
} |
452
|
|
|
|
453
|
|
|
$this->assertFalse(Director::is_https()); |
454
|
|
|
|
455
|
|
|
$_SERVER['HTTP_X_FORWARDED_PROTOCOL'] = 'https'; |
456
|
|
|
$this->assertTrue(Director::is_https()); |
457
|
|
|
|
458
|
|
|
$_SERVER['HTTP_X_FORWARDED_PROTOCOL'] = 'http'; |
459
|
|
|
$this->assertFalse(Director::is_https()); |
460
|
|
|
|
461
|
|
|
$_SERVER['HTTP_X_FORWARDED_PROTOCOL'] = 'ftp'; |
462
|
|
|
$this->assertFalse(Director::is_https()); |
463
|
|
|
|
464
|
|
|
$_SERVER['HTTP_X_FORWARDED_PROTO'] = 'https'; |
465
|
|
|
$this->assertTrue(Director::is_https()); |
466
|
|
|
|
467
|
|
|
$_SERVER['HTTP_X_FORWARDED_PROTO'] = 'http'; |
468
|
|
|
$this->assertFalse(Director::is_https()); |
469
|
|
|
|
470
|
|
|
$_SERVER['HTTP_X_FORWARDED_PROTO'] = 'ftp'; |
471
|
|
|
$this->assertFalse(Director::is_https()); |
472
|
|
|
|
473
|
|
|
$_SERVER['HTTP_FRONT_END_HTTPS'] = 'On'; |
474
|
|
|
$this->assertTrue(Director::is_https()); |
475
|
|
|
|
476
|
|
|
$_SERVER['HTTP_FRONT_END_HTTPS'] = 'Off'; |
477
|
|
|
$this->assertFalse(Director::is_https()); |
478
|
|
|
|
479
|
|
|
// https via HTTPS |
480
|
|
|
$_SERVER['HTTPS'] = 'true'; |
481
|
|
|
$this->assertTrue(Director::is_https()); |
482
|
|
|
|
483
|
|
|
$_SERVER['HTTPS'] = '1'; |
484
|
|
|
$this->assertTrue(Director::is_https()); |
485
|
|
|
|
486
|
|
|
$_SERVER['HTTPS'] = 'off'; |
487
|
|
|
$this->assertFalse(Director::is_https()); |
488
|
|
|
|
489
|
|
|
// https via SSL |
490
|
|
|
$_SERVER['SSL'] = ''; |
491
|
|
|
$this->assertTrue(Director::is_https()); |
492
|
|
|
|
493
|
|
|
$_SERVER = $origServer; |
494
|
|
|
} |
495
|
|
|
|
496
|
|
|
public function testTestIgnoresHashes() { |
497
|
|
|
//test that hashes are ignored |
498
|
|
|
$url = "DirectorTestRequest_Controller/returnGetValue?somekey=key"; |
499
|
|
|
$hash = "#test"; |
500
|
|
|
$response = Director::test($url . $hash, null, null, null, null, null, null, $request); |
501
|
|
|
$this->assertFalse($response->isError()); |
502
|
|
|
$this->assertEquals('key', $response->getBody()); |
503
|
|
|
$this->assertEquals($request->getURL(true), $url); |
504
|
|
|
|
505
|
|
|
//test encoded hashes are accepted |
506
|
|
|
$url = "DirectorTestRequest_Controller/returnGetValue?somekey=test%23key"; |
507
|
|
|
$response = Director::test($url, null, null, null, null, null, null, $request); |
508
|
|
|
$this->assertFalse($response->isError()); |
509
|
|
|
$this->assertEquals('test#key', $response->getBody()); |
510
|
|
|
$this->assertEquals($request->getURL(true), $url); |
511
|
|
|
} |
512
|
|
|
|
513
|
|
|
public function testRequestFilterInDirectorTest() { |
514
|
|
|
$filter = new TestRequestFilter; |
515
|
|
|
|
516
|
|
|
$processor = new RequestProcessor(array($filter)); |
517
|
|
|
|
518
|
|
|
Injector::inst()->registerService($processor, 'RequestProcessor'); |
519
|
|
|
|
520
|
|
|
$response = Director::test('some-dummy-url'); |
521
|
|
|
|
522
|
|
|
$this->assertEquals(1, $filter->preCalls); |
523
|
|
|
$this->assertEquals(1, $filter->postCalls); |
524
|
|
|
|
525
|
|
|
$filter->failPost = true; |
526
|
|
|
|
527
|
|
|
$this->setExpectedException('SS_HTTPResponse_Exception'); |
528
|
|
|
|
529
|
|
|
$response = Director::test('some-dummy-url'); |
530
|
|
|
|
531
|
|
|
$this->assertEquals(2, $filter->preCalls); |
532
|
|
|
$this->assertEquals(2, $filter->postCalls); |
533
|
|
|
|
534
|
|
|
$filter->failPre = true; |
535
|
|
|
|
536
|
|
|
$response = Director::test('some-dummy-url'); |
537
|
|
|
|
538
|
|
|
$this->assertEquals(3, $filter->preCalls); |
539
|
|
|
|
540
|
|
|
// preCall 'false' will trigger an exception and prevent post call execution |
541
|
|
|
$this->assertEquals(2, $filter->postCalls); |
542
|
|
|
} |
543
|
|
|
} |
544
|
|
|
|
545
|
|
|
class TestRequestFilter implements RequestFilter, TestOnly { |
546
|
|
|
public $preCalls = 0; |
547
|
|
|
public $postCalls = 0; |
548
|
|
|
|
549
|
|
|
public $failPre = false; |
550
|
|
|
public $failPost = false; |
551
|
|
|
|
552
|
|
|
public function preRequest(\SS_HTTPRequest $request, \Session $session, \DataModel $model) { |
553
|
|
|
++$this->preCalls; |
554
|
|
|
|
555
|
|
|
if ($this->failPre) { |
556
|
|
|
return false; |
557
|
|
|
} |
558
|
|
|
} |
559
|
|
|
|
560
|
|
|
public function postRequest(\SS_HTTPRequest $request, \SS_HTTPResponse $response, \DataModel $model) { |
561
|
|
|
++$this->postCalls; |
562
|
|
|
|
563
|
|
|
if ($this->failPost) { |
564
|
|
|
return false; |
565
|
|
|
} |
566
|
|
|
} |
567
|
|
|
|
568
|
|
|
public function reset() { |
569
|
|
|
$this->preCalls = 0; |
570
|
|
|
$this->postCalls = 0; |
571
|
|
|
} |
572
|
|
|
|
573
|
|
|
} |
574
|
|
|
|
575
|
|
|
class DirectorTestRequest_Controller extends Controller implements TestOnly { |
576
|
|
|
|
577
|
|
|
private static $allowed_actions = array( |
578
|
|
|
'returnGetValue', |
579
|
|
|
'returnPostValue', |
580
|
|
|
'returnRequestValue', |
581
|
|
|
'returnCookieValue', |
582
|
|
|
); |
583
|
|
|
|
584
|
|
|
public function returnGetValue($request) { return $_GET['somekey']; } |
|
|
|
|
585
|
|
|
|
586
|
|
|
public function returnPostValue($request) { return $_POST['somekey']; } |
|
|
|
|
587
|
|
|
|
588
|
|
|
public function returnRequestValue($request) { return $_REQUEST['somekey']; } |
|
|
|
|
589
|
|
|
|
590
|
|
|
public function returnCookieValue($request) { return $_COOKIE['somekey']; } |
|
|
|
|
591
|
|
|
|
592
|
|
|
} |
593
|
|
|
|
Instead of super-globals, we recommend to explicitly inject the dependencies of your class. This makes your code less dependent on global state and it becomes generally more testable: