1 | <?php |
||
2 | /** |
||
3 | * This file is part of the Shieldon package. |
||
4 | * |
||
5 | * (c) Terry L. <[email protected]> |
||
6 | * |
||
7 | * For the full copyright and license information, please view the LICENSE |
||
8 | * file that was distributed with this source code. |
||
9 | * |
||
10 | * php version 7.1.0 |
||
11 | * |
||
12 | * @category Web-security |
||
13 | * @package Shieldon |
||
14 | * @author Terry Lin <[email protected]> |
||
15 | * @copyright 2019 terrylinooo |
||
16 | * @license https://github.com/terrylinooo/shieldon/blob/2.x/LICENSE MIT |
||
17 | * @link https://github.com/terrylinooo/shieldon |
||
18 | * @see https://shieldon.io |
||
19 | */ |
||
20 | |||
21 | declare(strict_types=1); |
||
22 | |||
23 | namespace Shieldon\Firewall\Kernel; |
||
24 | |||
25 | use Psr\Http\Message\ResponseInterface; |
||
26 | use Shieldon\Firewall\Kernel\Enum; |
||
27 | use Shieldon\Firewall\HttpFactory; |
||
28 | use Shieldon\Firewall\Container; |
||
29 | use Shieldon\Event\Event; |
||
30 | use function Shieldon\Firewall\get_response; |
||
31 | use function Shieldon\Firewall\get_request; |
||
32 | use function Shieldon\Firewall\get_session_instance; |
||
33 | use function Shieldon\Firewall\__; |
||
34 | use InvalidArgumentException; |
||
35 | use RuntimeException; |
||
36 | use function array_keys; |
||
37 | use function define; |
||
38 | use function defined; |
||
39 | use function is_dir; |
||
40 | use function ob_end_clean; |
||
41 | use function ob_get_contents; |
||
42 | use function ob_start; |
||
43 | use function file_exists; |
||
44 | use function sprintf; |
||
45 | |||
46 | /* |
||
47 | * The template-related functions. |
||
48 | */ |
||
49 | trait TemplateTrait |
||
50 | { |
||
51 | /** |
||
52 | * Public methods | Desctiotion |
||
53 | * ----------------------|--------------------------------------------- |
||
54 | * respond | Respond the result. |
||
55 | * setTemplateDirectory | Set the frontend template directory. |
||
56 | * getJavascript | Print a JavaScript snippet in the pages. |
||
57 | * ----------------------|--------------------------------------------- |
||
58 | */ |
||
59 | |||
60 | /** |
||
61 | * The directory in where the frontend template files are placed. |
||
62 | * |
||
63 | * @var string |
||
64 | */ |
||
65 | protected $templateDirectory = ''; |
||
66 | |||
67 | /** |
||
68 | * Custom dialog UI settings. |
||
69 | * |
||
70 | * @var array |
||
71 | */ |
||
72 | protected $dialog = []; |
||
73 | |||
74 | /** |
||
75 | * Get current visior's path. |
||
76 | * |
||
77 | * @return string |
||
78 | */ |
||
79 | abstract public function getCurrentUrl(): string; |
||
80 | |||
81 | /** |
||
82 | * Customize the dialog UI. |
||
83 | * |
||
84 | * @param array $settings The dialog UI settings. |
||
85 | * |
||
86 | * @return void |
||
87 | */ |
||
88 | 73 | public function setDialog(array $settings): void |
|
89 | { |
||
90 | 73 | $this->dialog = $settings; |
|
91 | } |
||
92 | |||
93 | /** |
||
94 | * Respond the result. |
||
95 | * |
||
96 | * @return ResponseInterface |
||
97 | */ |
||
98 | 12 | public function respond(): ResponseInterface |
|
99 | { |
||
100 | 12 | $response = get_response(); |
|
101 | |||
102 | 12 | $httpStatusCodes = [ |
|
103 | 12 | Enum::RESPONSE_TEMPORARILY_DENY => [ |
|
104 | 12 | 'type' => 'captcha', |
|
105 | 12 | 'code' => Enum::HTTP_STATUS_FORBIDDEN, |
|
106 | 12 | ], |
|
107 | |||
108 | 12 | Enum::RESPONSE_LIMIT_SESSION => [ |
|
109 | 12 | 'type' => 'session_limitation', |
|
110 | 12 | 'code' => Enum::HTTP_STATUS_TOO_MANY_REQUESTS, |
|
111 | 12 | ], |
|
112 | |||
113 | 12 | Enum::RESPONSE_DENY => [ |
|
114 | 12 | 'type' => 'rejection', |
|
115 | 12 | 'code' => Enum::HTTP_STATUS_BAD_REQUEST, |
|
116 | 12 | ], |
|
117 | 12 | ]; |
|
118 | |||
119 | // Nothing happened. Return. |
||
120 | 12 | if (empty($httpStatusCodes[$this->result])) { |
|
121 | 11 | return $response; |
|
122 | } |
||
123 | |||
124 | 3 | $type = $httpStatusCodes[$this->result]['type']; |
|
125 | 3 | $statusCode = $httpStatusCodes[$this->result]['code']; |
|
126 | |||
127 | 3 | $viewPath = $this->getTemplate($type); |
|
128 | |||
129 | // The language of output UI. It is used on views. |
||
130 | 3 | $langCode = get_session_instance()->get('shieldon_ui_lang') ?? 'en'; |
|
131 | |||
132 | 3 | $onlineinfo = []; |
|
133 | 3 | $onlineinfo['queue'] = $this->sessionStatus['queue']; |
|
134 | 3 | $onlineinfo['count'] = $this->sessionStatus['count']; |
|
135 | 3 | $onlineinfo['period'] = $this->sessionLimit['period']; |
|
136 | |||
137 | 3 | $dialoguserinfo = []; |
|
138 | 3 | $dialoguserinfo['ip'] = $this->ip; |
|
139 | 3 | $dialoguserinfo['rdns'] = $this->rdns; |
|
140 | 3 | $dialoguserinfo['user_agent'] = get_request()->getHeaderLine('user-agent'); |
|
141 | |||
142 | // Captcha form |
||
143 | 3 | $form = $this->getCurrentUrl(); |
|
144 | 3 | $captchas = $this->captcha; |
|
145 | |||
146 | // Check and confirm the UI settings. |
||
147 | 3 | $ui = $this->confirmUiSettings(); |
|
148 | 3 | $uiInfo = $this->confirmUiInfoSettings($statusCode); |
|
149 | |||
150 | 3 | $css = include $this->getTemplate('css/default'); |
|
151 | |||
152 | /** |
||
153 | * Hook - dialog_output |
||
154 | */ |
||
155 | 3 | Event::doDispatch('dialog_output'); |
|
156 | |||
157 | 3 | $performanceReport = $this->displayPerformanceReport(); |
|
158 | |||
159 | 3 | ob_start(); |
|
160 | 3 | include $viewPath; |
|
161 | 3 | $output = ob_get_contents(); |
|
162 | 3 | ob_end_clean(); |
|
163 | |||
164 | // Remove unused variable notices generated from PHP intelephense. |
||
165 | 3 | unset($css, $ui, $form, $captchas, $langCode, $performanceReport, $uiInfo); |
|
166 | |||
167 | 3 | $stream = HttpFactory::createStream(); |
|
168 | 3 | $stream->write($output); |
|
169 | 3 | $stream->rewind(); |
|
170 | |||
171 | 3 | return $response |
|
172 | 3 | ->withHeader('X-Protected-By', 'shieldon.io') |
|
173 | 3 | ->withBody($stream) |
|
174 | 3 | ->withStatus($statusCode); |
|
0 ignored issues
–
show
Bug
introduced
by
![]() |
|||
175 | } |
||
176 | |||
177 | /** |
||
178 | * Print a JavaScript snippet in your webpages. |
||
179 | * |
||
180 | * This snippet generate cookie on client's browser,then we check the |
||
181 | * cookie to identify the client is a rebot or not. |
||
182 | * |
||
183 | * @return string |
||
184 | */ |
||
185 | 1 | public function getJavascript(): string |
|
186 | { |
||
187 | 1 | $tmpCookieName = $this->properties['cookie_name']; |
|
188 | 1 | $tmpCookieDomain = $this->properties['cookie_domain']; |
|
189 | |||
190 | 1 | if (empty($tmpCookieDomain) && get_request()->getHeaderLine('host')) { |
|
191 | 1 | $tmpCookieDomain = get_request()->getHeaderLine('host'); |
|
192 | } |
||
193 | |||
194 | 1 | $tmpCookieValue = $this->properties['cookie_value']; |
|
195 | |||
196 | 1 | $jsString = ' |
|
197 | <script> |
||
198 | var d = new Date(); |
||
199 | d.setTime(d.getTime()+(60*60*24*30)); |
||
200 | 1 | document.cookie = "' . $tmpCookieName . '=' . $tmpCookieValue . ';domain=.' . $tmpCookieDomain . |
|
201 | ';expires="+d.toUTCString(); |
||
202 | 1 | </script> |
|
203 | '; |
||
204 | 1 | ||
205 | return $jsString; |
||
206 | } |
||
207 | |||
208 | /** |
||
209 | * Set the frontend template directory. |
||
210 | * |
||
211 | * @param string $directory The directory in where the template files are placed. |
||
212 | * |
||
213 | * @return void |
||
214 | 4 | */ |
|
215 | public function setTemplateDirectory(string $directory): void |
||
216 | 4 | { |
|
217 | 1 | if (!is_dir($directory)) { |
|
218 | 1 | throw new InvalidArgumentException( |
|
219 | 1 | 'The template directory does not exist.' |
|
220 | ); |
||
221 | 3 | } |
|
222 | $this->templateDirectory = $directory; |
||
223 | } |
||
224 | |||
225 | /** |
||
226 | * Get a template PHP file. |
||
227 | * |
||
228 | * @param string $type The template type. |
||
229 | * |
||
230 | * @return string |
||
231 | 5 | */ |
|
232 | protected function getTemplate(string $type): string |
||
233 | 5 | { |
|
234 | $directory = Enum::KERNEL_DIR . '/../../templates/frontend'; |
||
235 | 5 | ||
236 | 2 | if (!empty($this->templateDirectory)) { |
|
237 | $directory = $this->templateDirectory; |
||
238 | } |
||
239 | 5 | ||
240 | $path = $directory . '/' . $type . '.php'; |
||
241 | 5 | ||
242 | 2 | if (!file_exists($path)) { |
|
243 | 2 | throw new RuntimeException( |
|
244 | 2 | sprintf( |
|
245 | 2 | 'The templeate file is missing. (%s)', |
|
246 | 2 | $path |
|
247 | 2 | ) |
|
248 | ); |
||
249 | } |
||
250 | 4 | ||
251 | return $path; |
||
252 | } |
||
253 | |||
254 | /** |
||
255 | * Count the performance statistics. |
||
256 | * |
||
257 | * @return array |
||
258 | 1 | */ |
|
259 | protected function getPerformanceStats(): array |
||
260 | 1 | { |
|
261 | 1 | $statStart = Container::get('shieldon_start'); |
|
262 | $statEnd = Container::get('shieldon_end'); |
||
263 | 1 | ||
264 | 1 | $startTimeArr = explode(' ', $statStart['time']); |
|
265 | $endTimeArr = explode(' ', $statStart['time']); |
||
266 | 1 | ||
267 | 1 | $timeDifference = ($endTimeArr[1] - $startTimeArr[1]) + ($endTimeArr[0] - $startTimeArr[0]); |
|
268 | $memoryDifference = round(($statEnd['memory'] - $statStart['memory']) / 1024, 2); // KB |
||
269 | 1 | ||
270 | 1 | $data = [ |
|
271 | 1 | 'time' => $timeDifference, |
|
272 | 1 | 'memory' => $memoryDifference, |
|
273 | ]; |
||
274 | 1 | ||
275 | return $data; |
||
276 | } |
||
277 | |||
278 | /** |
||
279 | * Display the HTML of the performance report. |
||
280 | * |
||
281 | * @return string |
||
282 | 3 | */ |
|
283 | protected function displayPerformanceReport(): string |
||
284 | 3 | { |
|
285 | 2 | if (!Container::get('shieldon_start')) { |
|
286 | return ''; |
||
287 | } |
||
288 | 1 | ||
289 | $html = ''; |
||
290 | 1 | ||
291 | $performance = $this->getPerformanceStats(); |
||
292 | 1 | ||
293 | 1 | if ($performance['time'] < 0.001) { |
|
294 | $performance['time'] = 'fewer than 0.001'; |
||
295 | } |
||
296 | 1 | ||
297 | 1 | if (isset($performance['time'])) { |
|
298 | 1 | $html .= '<div class="performance-report">'; |
|
299 | 1 | $html .= 'Memory consumed: <strong>' . $performance['memory'] . '</strong> KB / '; |
|
300 | 1 | $html .= 'Execution: <strong>' . $performance['time'] . ' </strong> seconds.'; |
|
301 | $html .= '</div>'; |
||
302 | } |
||
303 | 1 | ||
304 | return $html; |
||
305 | } |
||
306 | |||
307 | |||
308 | /** |
||
309 | * Confirm the UI settings. |
||
310 | * |
||
311 | * @return array |
||
312 | 3 | */ |
|
313 | private function confirmUiSettings(): array |
||
314 | 3 | { |
|
315 | 3 | if (!defined('SHIELDON_VIEW')) { |
|
316 | define('SHIELDON_VIEW', true); |
||
317 | } |
||
318 | 3 | ||
319 | 3 | $ui = [ |
|
320 | 3 | 'background_image' => '', |
|
321 | 3 | 'bg_color' => '#ffffff', |
|
322 | 3 | 'header_bg_color' => '#212531', |
|
323 | 3 | 'header_color' => '#ffffff', |
|
324 | 3 | 'shadow_opacity' => '0.2', |
|
325 | ]; |
||
326 | 3 | ||
327 | 3 | foreach (array_keys($ui) as $key) { |
|
328 | 3 | if (!empty($this->dialog[$key])) { |
|
329 | $ui[$key] = $this->dialog[$key]; |
||
330 | } |
||
331 | } |
||
332 | 3 | ||
333 | return $ui; |
||
334 | } |
||
335 | |||
336 | /** |
||
337 | * Confirm UI information settings. |
||
338 | * |
||
339 | * @param int $statusCode HTTP status code. |
||
340 | * |
||
341 | * @return array |
||
342 | 3 | */ |
|
343 | private function confirmUiInfoSettings(int $statusCode): array |
||
344 | 3 | { |
|
345 | $uiInfo = []; |
||
346 | 3 | ||
347 | $reasonCode = $this->reason; |
||
348 | 3 | ||
349 | 3 | $uiInfo['http_status_code'] = $statusCode; |
|
350 | 3 | $uiInfo['reason_code'] = $reasonCode; |
|
351 | $uiInfo['reason_text'] = __('core', 'messenger_text_reason_code_' . $reasonCode); |
||
352 | 3 | ||
353 | 3 | $uiInfo['is_display_online_user_amount'] = $this->properties['display_online_info']; |
|
354 | 3 | $uiInfo['is_display_user_information'] = $this->properties['display_user_info']; |
|
355 | 3 | $uiInfo['is_display_display_http_code'] = $this->properties['display_http_code']; |
|
356 | 3 | $uiInfo['is_display_display_reason_code'] = $this->properties['display_reason_code']; |
|
357 | $uiInfo['is_display_display_reason_text'] = $this->properties['display_reason_text']; |
||
358 | 3 | ||
359 | return $uiInfo; |
||
360 | } |
||
361 | } |
||
362 |