Passed
Push — scrutinizer-migrate-to-new-eng... ( 58afd6 )
by Alexander
18:11
created

Response   F

Complexity

Total Complexity 111

Size/Duplication

Total Lines 1001
Duplicated Lines 0 %

Test Coverage

Coverage 74.26%

Importance

Changes 0
Metric Value
eloc 346
dl 0
loc 1001
ccs 202
cts 272
cp 0.7426
rs 2
c 0
b 0
f 0
wmc 111

32 Methods

Rating   Name   Duplication   Size   Complexity  
B sendCookies() 0 18 7
A getIsClientError() 0 3 2
A sendHeaders() 0 19 5
A getIsRedirection() 0 3 2
A sendContentAsFile() 0 28 5
A getHeaders() 0 7 2
A refresh() 0 3 1
A getStatusCode() 0 3 1
A xSendFile() 0 25 6
A sendFile() 0 12 3
A getIsEmpty() 0 3 1
A getDispositionHeaderValue() 0 15 2
A getIsServerError() 0 3 2
B getHttpRange() 0 27 8
A setStatusCodeByException() 0 9 2
A getIsNotFound() 0 3 1
A getIsOk() 0 3 1
A defaultFormatters() 0 15 1
A getIsInvalid() 0 3 2
A getCookies() 0 7 2
B sendContent() 0 28 7
A getIsForbidden() 0 3 1
A init() 0 13 5
A setStatusCode() 0 16 5
A setDownloadHeaders() 0 20 4
A getIsInformational() 0 3 2
A send() 0 12 2
B sendStreamAsFile() 0 31 6
A clear() 0 10 1
B redirect() 0 32 10
B prepare() 0 31 10
A getIsSuccessful() 0 3 2

How to fix   Complexity   

Complex Class

Complex classes like Response often do a lot of different things. To break such a class down, we need to identify a cohesive component within that class. A common approach to find such a component is to look for fields/methods that share the same prefixes, or suffixes.

Once you have determined the fields that belong together, you can apply the Extract Class refactoring. If the component makes sense as a sub-class, Extract Subclass is also a candidate, and is often faster.

While breaking up the class, it is a good idea to analyze how other classes use Response, and based on these observations, apply Extract Interface, too.

1
<?php
2
/**
3
 * @link http://www.yiiframework.com/
4
 * @copyright Copyright (c) 2008 Yii Software LLC
5
 * @license http://www.yiiframework.com/license/
6
 */
7
8
namespace yii\web;
9
10
use Yii;
11
use yii\base\InvalidArgumentException;
12
use yii\base\InvalidConfigException;
13
use yii\helpers\FileHelper;
14
use yii\helpers\Inflector;
15
use yii\helpers\StringHelper;
16
use yii\helpers\Url;
17
18
/**
19
 * The web Response class represents an HTTP response.
20
 *
21
 * It holds the [[headers]], [[cookies]] and [[content]] that is to be sent to the client.
22
 * It also controls the HTTP [[statusCode|status code]].
23
 *
24
 * Response is configured as an application component in [[\yii\web\Application]] by default.
25
 * You can access that instance via `Yii::$app->response`.
26
 *
27
 * You can modify its configuration by adding an array to your application config under `components`
28
 * as it is shown in the following example:
29
 *
30
 * ```php
31
 * 'response' => [
32
 *     'format' => yii\web\Response::FORMAT_JSON,
33
 *     'charset' => 'UTF-8',
34
 *     // ...
35
 * ]
36
 * ```
37
 *
38
 * For more details and usage information on Response, see the [guide article on responses](guide:runtime-responses).
39
 *
40
 * @property CookieCollection $cookies The cookie collection. This property is read-only.
41
 * @property string $downloadHeaders The attachment file name. This property is write-only.
42
 * @property HeaderCollection $headers The header collection. This property is read-only.
43
 * @property bool $isClientError Whether this response indicates a client error. This property is read-only.
44
 * @property bool $isEmpty Whether this response is empty. This property is read-only.
45
 * @property bool $isForbidden Whether this response indicates the current request is forbidden. This property
46
 * is read-only.
47
 * @property bool $isInformational Whether this response is informational. This property is read-only.
48
 * @property bool $isInvalid Whether this response has a valid [[statusCode]]. This property is read-only.
49
 * @property bool $isNotFound Whether this response indicates the currently requested resource is not found.
50
 * This property is read-only.
51
 * @property bool $isOk Whether this response is OK. This property is read-only.
52
 * @property bool $isRedirection Whether this response is a redirection. This property is read-only.
53
 * @property bool $isServerError Whether this response indicates a server error. This property is read-only.
54
 * @property bool $isSuccessful Whether this response is successful. This property is read-only.
55
 * @property int $statusCode The HTTP status code to send with the response.
56
 * @property \Exception|\Error $statusCodeByException The exception object. This property is write-only.
57
 *
58
 * @author Qiang Xue <[email protected]>
59
 * @author Carsten Brandt <[email protected]>
60
 * @since 2.0
61
 */
62
class Response extends \yii\base\Response
63
{
64
    /**
65
     * @event ResponseEvent an event that is triggered at the beginning of [[send()]].
66
     */
67
    const EVENT_BEFORE_SEND = 'beforeSend';
68
    /**
69
     * @event ResponseEvent an event that is triggered at the end of [[send()]].
70
     */
71
    const EVENT_AFTER_SEND = 'afterSend';
72
    /**
73
     * @event ResponseEvent an event that is triggered right after [[prepare()]] is called in [[send()]].
74
     * You may respond to this event to filter the response content before it is sent to the client.
75
     */
76
    const EVENT_AFTER_PREPARE = 'afterPrepare';
77
    const FORMAT_RAW = 'raw';
78
    const FORMAT_HTML = 'html';
79
    const FORMAT_JSON = 'json';
80
    const FORMAT_JSONP = 'jsonp';
81
    const FORMAT_XML = 'xml';
82
83
    /**
84
     * @var string the response format. This determines how to convert [[data]] into [[content]]
85
     * when the latter is not set. The value of this property must be one of the keys declared in the [[formatters]] array.
86
     * By default, the following formats are supported:
87
     *
88
     * - [[FORMAT_RAW]]: the data will be treated as the response content without any conversion.
89
     *   No extra HTTP header will be added.
90
     * - [[FORMAT_HTML]]: the data will be treated as the response content without any conversion.
91
     *   The "Content-Type" header will set as "text/html".
92
     * - [[FORMAT_JSON]]: the data will be converted into JSON format, and the "Content-Type"
93
     *   header will be set as "application/json".
94
     * - [[FORMAT_JSONP]]: the data will be converted into JSONP format, and the "Content-Type"
95
     *   header will be set as "text/javascript". Note that in this case `$data` must be an array
96
     *   with "data" and "callback" elements. The former refers to the actual data to be sent,
97
     *   while the latter refers to the name of the JavaScript callback.
98
     * - [[FORMAT_XML]]: the data will be converted into XML format. Please refer to [[XmlResponseFormatter]]
99
     *   for more details.
100
     *
101
     * You may customize the formatting process or support additional formats by configuring [[formatters]].
102
     * @see formatters
103
     */
104
    public $format = self::FORMAT_HTML;
105
    /**
106
     * @var string the MIME type (e.g. `application/json`) from the request ACCEPT header chosen for this response.
107
     * This property is mainly set by [[\yii\filters\ContentNegotiator]].
108
     */
109
    public $acceptMimeType;
110
    /**
111
     * @var array the parameters (e.g. `['q' => 1, 'version' => '1.0']`) associated with the [[acceptMimeType|chosen MIME type]].
112
     * This is a list of name-value pairs associated with [[acceptMimeType]] from the ACCEPT HTTP header.
113
     * This property is mainly set by [[\yii\filters\ContentNegotiator]].
114
     */
115
    public $acceptParams = [];
116
    /**
117
     * @var array the formatters for converting data into the response content of the specified [[format]].
118
     * The array keys are the format names, and the array values are the corresponding configurations
119
     * for creating the formatter objects.
120
     * @see format
121
     * @see defaultFormatters
122
     */
123
    public $formatters = [];
124
    /**
125
     * @var mixed the original response data. When this is not null, it will be converted into [[content]]
126
     * according to [[format]] when the response is being sent out.
127
     * @see content
128
     */
129
    public $data;
130
    /**
131
     * @var string the response content. When [[data]] is not null, it will be converted into [[content]]
132
     * according to [[format]] when the response is being sent out.
133
     * @see data
134
     */
135
    public $content;
136
    /**
137
     * @var resource|array the stream to be sent. This can be a stream handle or an array of stream handle,
138
     * the begin position and the end position. Note that when this property is set, the [[data]] and [[content]]
139
     * properties will be ignored by [[send()]].
140
     */
141
    public $stream;
142
    /**
143
     * @var string the charset of the text response. If not set, it will use
144
     * the value of [[Application::charset]].
145
     */
146
    public $charset;
147
    /**
148
     * @var string the HTTP status description that comes together with the status code.
149
     * @see httpStatuses
150
     */
151
    public $statusText = 'OK';
152
    /**
153
     * @var string the version of the HTTP protocol to use. If not set, it will be determined via `$_SERVER['SERVER_PROTOCOL']`,
154
     * or '1.1' if that is not available.
155
     */
156
    public $version;
157
    /**
158
     * @var bool whether the response has been sent. If this is true, calling [[send()]] will do nothing.
159
     */
160
    public $isSent = false;
161
    /**
162
     * @var array list of HTTP status codes and the corresponding texts
163
     */
164
    public static $httpStatuses = [
165
        100 => 'Continue',
166
        101 => 'Switching Protocols',
167
        102 => 'Processing',
168
        118 => 'Connection timed out',
169
        200 => 'OK',
170
        201 => 'Created',
171
        202 => 'Accepted',
172
        203 => 'Non-Authoritative',
173
        204 => 'No Content',
174
        205 => 'Reset Content',
175
        206 => 'Partial Content',
176
        207 => 'Multi-Status',
177
        208 => 'Already Reported',
178
        210 => 'Content Different',
179
        226 => 'IM Used',
180
        300 => 'Multiple Choices',
181
        301 => 'Moved Permanently',
182
        302 => 'Found',
183
        303 => 'See Other',
184
        304 => 'Not Modified',
185
        305 => 'Use Proxy',
186
        306 => 'Reserved',
187
        307 => 'Temporary Redirect',
188
        308 => 'Permanent Redirect',
189
        310 => 'Too many Redirect',
190
        400 => 'Bad Request',
191
        401 => 'Unauthorized',
192
        402 => 'Payment Required',
193
        403 => 'Forbidden',
194
        404 => 'Not Found',
195
        405 => 'Method Not Allowed',
196
        406 => 'Not Acceptable',
197
        407 => 'Proxy Authentication Required',
198
        408 => 'Request Time-out',
199
        409 => 'Conflict',
200
        410 => 'Gone',
201
        411 => 'Length Required',
202
        412 => 'Precondition Failed',
203
        413 => 'Request Entity Too Large',
204
        414 => 'Request-URI Too Long',
205
        415 => 'Unsupported Media Type',
206
        416 => 'Requested range unsatisfiable',
207
        417 => 'Expectation failed',
208
        418 => 'I\'m a teapot',
209
        421 => 'Misdirected Request',
210
        422 => 'Unprocessable entity',
211
        423 => 'Locked',
212
        424 => 'Method failure',
213
        425 => 'Unordered Collection',
214
        426 => 'Upgrade Required',
215
        428 => 'Precondition Required',
216
        429 => 'Too Many Requests',
217
        431 => 'Request Header Fields Too Large',
218
        449 => 'Retry With',
219
        450 => 'Blocked by Windows Parental Controls',
220
        451 => 'Unavailable For Legal Reasons',
221
        500 => 'Internal Server Error',
222
        501 => 'Not Implemented',
223
        502 => 'Bad Gateway or Proxy Error',
224
        503 => 'Service Unavailable',
225
        504 => 'Gateway Time-out',
226
        505 => 'HTTP Version not supported',
227
        507 => 'Insufficient storage',
228
        508 => 'Loop Detected',
229
        509 => 'Bandwidth Limit Exceeded',
230
        510 => 'Not Extended',
231
        511 => 'Network Authentication Required',
232
    ];
233
234
    /**
235
     * @var int the HTTP status code to send with the response.
236
     */
237
    private $_statusCode = 200;
238
    /**
239
     * @var HeaderCollection
240
     */
241
    private $_headers;
242
243
244
    /**
245
     * Initializes this component.
246
     */
247 228
    public function init()
248
    {
249 228
        if ($this->version === null) {
250 228
            if (isset($_SERVER['SERVER_PROTOCOL']) && $_SERVER['SERVER_PROTOCOL'] === 'HTTP/1.0') {
251
                $this->version = '1.0';
252
            } else {
253 228
                $this->version = '1.1';
254
            }
255
        }
256 228
        if ($this->charset === null) {
257 228
            $this->charset = Yii::$app->charset;
258
        }
259 228
        $this->formatters = array_merge($this->defaultFormatters(), $this->formatters);
260 228
    }
261
262
    /**
263
     * @return int the HTTP status code to send with the response.
264
     */
265 46
    public function getStatusCode()
266
    {
267 46
        return $this->_statusCode;
268
    }
269
270
    /**
271
     * Sets the response status code.
272
     * This method will set the corresponding status text if `$text` is null.
273
     * @param int $value the status code
274
     * @param string $text the status text. If not set, it will be set automatically based on the status code.
275
     * @throws InvalidArgumentException if the status code is invalid.
276
     * @return $this the response object itself
277
     */
278 40
    public function setStatusCode($value, $text = null)
279
    {
280 40
        if ($value === null) {
0 ignored issues
show
introduced by
The condition $value === null is always false.
Loading history...
281
            $value = 200;
282
        }
283 40
        $this->_statusCode = (int) $value;
284 40
        if ($this->getIsInvalid()) {
285
            throw new InvalidArgumentException("The HTTP status code is invalid: $value");
286
        }
287 40
        if ($text === null) {
288 36
            $this->statusText = isset(static::$httpStatuses[$this->_statusCode]) ? static::$httpStatuses[$this->_statusCode] : '';
289
        } else {
290 4
            $this->statusText = $text;
291
        }
292
293 40
        return $this;
294
    }
295
296
    /**
297
     * Sets the response status code based on the exception.
298
     * @param \Exception|\Error $e the exception object.
299
     * @throws InvalidArgumentException if the status code is invalid.
300
     * @return $this the response object itself
301
     * @since 2.0.12
302
     */
303 17
    public function setStatusCodeByException($e)
304
    {
305 17
        if ($e instanceof HttpException) {
306 9
            $this->setStatusCode($e->statusCode);
307
        } else {
308 8
            $this->setStatusCode(500);
309
        }
310
311 17
        return $this;
312
    }
313
314
    /**
315
     * Returns the header collection.
316
     * The header collection contains the currently registered HTTP headers.
317
     * @return HeaderCollection the header collection
318
     */
319 106
    public function getHeaders()
320
    {
321 106
        if ($this->_headers === null) {
322 106
            $this->_headers = new HeaderCollection();
323
        }
324
325 106
        return $this->_headers;
326
    }
327
328
    /**
329
     * Sends the response to the client.
330
     */
331 26
    public function send()
332
    {
333 26
        if ($this->isSent) {
334 3
            return;
335
        }
336 26
        $this->trigger(self::EVENT_BEFORE_SEND);
337 26
        $this->prepare();
338 26
        $this->trigger(self::EVENT_AFTER_PREPARE);
339 26
        $this->sendHeaders();
340 26
        $this->sendContent();
341 26
        $this->trigger(self::EVENT_AFTER_SEND);
342 26
        $this->isSent = true;
343 26
    }
344
345
    /**
346
     * Clears the headers, cookies, content, status code of the response.
347
     */
348
    public function clear()
349
    {
350
        $this->_headers = null;
351
        $this->_cookies = null;
352
        $this->_statusCode = 200;
353
        $this->statusText = 'OK';
354
        $this->data = null;
355
        $this->stream = null;
356
        $this->content = null;
357
        $this->isSent = false;
358
    }
359
360
    /**
361
     * Sends the response headers to the client.
362
     */
363 26
    protected function sendHeaders()
364
    {
365 26
        if (headers_sent($file, $line)) {
366
            throw new HeadersAlreadySentException($file, $line);
367
        }
368 26
        if ($this->_headers) {
369 25
            foreach ($this->getHeaders() as $name => $values) {
370 25
                $name = str_replace(' ', '-', ucwords(str_replace('-', ' ', $name)));
371
                // set replace for first occurrence of header but false afterwards to allow multiple
372 25
                $replace = true;
373 25
                foreach ($values as $value) {
374 25
                    header("$name: $value", $replace);
375 25
                    $replace = false;
376
                }
377
            }
378
        }
379 26
        $statusCode = $this->getStatusCode();
380 26
        header("HTTP/{$this->version} {$statusCode} {$this->statusText}");
381 26
        $this->sendCookies();
382 26
    }
383
384
    /**
385
     * Sends the cookies to the client.
386
     */
387 26
    protected function sendCookies()
388
    {
389 26
        if ($this->_cookies === null) {
390 22
            return;
391
        }
392 4
        $request = Yii::$app->getRequest();
393 4
        if ($request->enableCookieValidation) {
0 ignored issues
show
Bug Best Practice introduced by
The property enableCookieValidation does not exist on yii\console\Request. Since you implemented __get, consider adding a @property annotation.
Loading history...
394 4
            if ($request->cookieValidationKey == '') {
0 ignored issues
show
Bug Best Practice introduced by
The property cookieValidationKey does not exist on yii\console\Request. Since you implemented __get, consider adding a @property annotation.
Loading history...
395
                throw new InvalidConfigException(get_class($request) . '::cookieValidationKey must be configured with a secret key.');
396
            }
397 4
            $validationKey = $request->cookieValidationKey;
398
        }
399 4
        foreach ($this->getCookies() as $cookie) {
400 4
            $value = $cookie->value;
401 4
            if ($cookie->expire != 1 && isset($validationKey)) {
402 4
                $value = Yii::$app->getSecurity()->hashData(serialize([$cookie->name, $value]), $validationKey);
403
            }
404 4
            setcookie($cookie->name, $value, $cookie->expire, $cookie->path, $cookie->domain, $cookie->secure, $cookie->httpOnly);
405
        }
406 4
    }
407
408
    /**
409
     * Sends the response content to the client.
410
     */
411 26
    protected function sendContent()
412
    {
413 26
        if ($this->stream === null) {
414 23
            echo $this->content;
415
416 23
            return;
417
        }
418
419 3
        set_time_limit(0); // Reset time limit for big files
420 3
        $chunkSize = 8 * 1024 * 1024; // 8MB per chunk
421
422 3
        if (is_array($this->stream)) {
423 3
            list($handle, $begin, $end) = $this->stream;
424 3
            fseek($handle, $begin);
425 3
            while (!feof($handle) && ($pos = ftell($handle)) <= $end) {
426 3
                if ($pos + $chunkSize > $end) {
427 3
                    $chunkSize = $end - $pos + 1;
428
                }
429 3
                echo fread($handle, $chunkSize);
430 3
                flush(); // Free up memory. Otherwise large files will trigger PHP's memory limit.
431
            }
432 3
            fclose($handle);
433
        } else {
434
            while (!feof($this->stream)) {
435
                echo fread($this->stream, $chunkSize);
436
                flush();
437
            }
438
            fclose($this->stream);
439
        }
440 3
    }
441
442
    /**
443
     * Sends a file to the browser.
444
     *
445
     * Note that this method only prepares the response for file sending. The file is not sent
446
     * until [[send()]] is called explicitly or implicitly. The latter is done after you return from a controller action.
447
     *
448
     * The following is an example implementation of a controller action that allows requesting files from a directory
449
     * that is not accessible from web:
450
     *
451
     * ```php
452
     * public function actionFile($filename)
453
     * {
454
     *     $storagePath = Yii::getAlias('@app/files');
455
     *
456
     *     // check filename for allowed chars (do not allow ../ to avoid security issue: downloading arbitrary files)
457
     *     if (!preg_match('/^[a-z0-9]+\.[a-z0-9]+$/i', $filename) || !is_file("$storagePath/$filename")) {
458
     *         throw new \yii\web\NotFoundHttpException('The file does not exists.');
459
     *     }
460
     *     return Yii::$app->response->sendFile("$storagePath/$filename", $filename);
461
     * }
462
     * ```
463
     *
464
     * @param string $filePath the path of the file to be sent.
465
     * @param string $attachmentName the file name shown to the user. If null, it will be determined from `$filePath`.
466
     * @param array $options additional options for sending the file. The following options are supported:
467
     *
468
     *  - `mimeType`: the MIME type of the content. If not set, it will be guessed based on `$filePath`
469
     *  - `inline`: boolean, whether the browser should open the file within the browser window. Defaults to false,
470
     *    meaning a download dialog will pop up.
471
     *
472
     * @return $this the response object itself
473
     * @see sendContentAsFile()
474
     * @see sendStreamAsFile()
475
     * @see xSendFile()
476
     */
477 7
    public function sendFile($filePath, $attachmentName = null, $options = [])
478
    {
479 7
        if (!isset($options['mimeType'])) {
480 7
            $options['mimeType'] = FileHelper::getMimeTypeByExtension($filePath);
481
        }
482 7
        if ($attachmentName === null) {
483 7
            $attachmentName = basename($filePath);
484
        }
485 7
        $handle = fopen($filePath, 'rb');
486 7
        $this->sendStreamAsFile($handle, $attachmentName, $options);
0 ignored issues
show
Bug introduced by
It seems like $handle can also be of type false; however, parameter $handle of yii\web\Response::sendStreamAsFile() does only seem to accept resource, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

486
        $this->sendStreamAsFile(/** @scrutinizer ignore-type */ $handle, $attachmentName, $options);
Loading history...
487
488 3
        return $this;
489
    }
490
491
    /**
492
     * Sends the specified content as a file to the browser.
493
     *
494
     * Note that this method only prepares the response for file sending. The file is not sent
495
     * until [[send()]] is called explicitly or implicitly. The latter is done after you return from a controller action.
496
     *
497
     * @param string $content the content to be sent. The existing [[content]] will be discarded.
498
     * @param string $attachmentName the file name shown to the user.
499
     * @param array $options additional options for sending the file. The following options are supported:
500
     *
501
     *  - `mimeType`: the MIME type of the content. Defaults to 'application/octet-stream'.
502
     *  - `inline`: boolean, whether the browser should open the file within the browser window. Defaults to false,
503
     *    meaning a download dialog will pop up.
504
     *
505
     * @return $this the response object itself
506
     * @throws RangeNotSatisfiableHttpException if the requested range is not satisfiable
507
     * @see sendFile() for an example implementation.
508
     */
509 1
    public function sendContentAsFile($content, $attachmentName, $options = [])
510
    {
511 1
        $headers = $this->getHeaders();
512
513 1
        $contentLength = StringHelper::byteLength($content);
514 1
        $range = $this->getHttpRange($contentLength);
515
516 1
        if ($range === false) {
0 ignored issues
show
introduced by
The condition $range === false is always false.
Loading history...
517
            $headers->set('Content-Range', "bytes */$contentLength");
518
            throw new RangeNotSatisfiableHttpException();
519
        }
520
521 1
        list($begin, $end) = $range;
522 1
        if ($begin != 0 || $end != $contentLength - 1) {
523
            $this->setStatusCode(206);
524
            $headers->set('Content-Range', "bytes $begin-$end/$contentLength");
525
            $this->content = StringHelper::byteSubstr($content, $begin, $end - $begin + 1);
526
        } else {
527 1
            $this->setStatusCode(200);
528 1
            $this->content = $content;
529
        }
530
531 1
        $mimeType = isset($options['mimeType']) ? $options['mimeType'] : 'application/octet-stream';
532 1
        $this->setDownloadHeaders($attachmentName, $mimeType, !empty($options['inline']), $end - $begin + 1);
533
534 1
        $this->format = self::FORMAT_RAW;
535
536 1
        return $this;
537
    }
538
539
    /**
540
     * Sends the specified stream as a file to the browser.
541
     *
542
     * Note that this method only prepares the response for file sending. The file is not sent
543
     * until [[send()]] is called explicitly or implicitly. The latter is done after you return from a controller action.
544
     *
545
     * @param resource $handle the handle of the stream to be sent.
546
     * @param string $attachmentName the file name shown to the user.
547
     * @param array $options additional options for sending the file. The following options are supported:
548
     *
549
     *  - `mimeType`: the MIME type of the content. Defaults to 'application/octet-stream'.
550
     *  - `inline`: boolean, whether the browser should open the file within the browser window. Defaults to false,
551
     *    meaning a download dialog will pop up.
552
     *  - `fileSize`: the size of the content to stream this is useful when size of the content is known
553
     *    and the content is not seekable. Defaults to content size using `ftell()`.
554
     *    This option is available since version 2.0.4.
555
     *
556
     * @return $this the response object itself
557
     * @throws RangeNotSatisfiableHttpException if the requested range is not satisfiable
558
     * @see sendFile() for an example implementation.
559
     */
560 7
    public function sendStreamAsFile($handle, $attachmentName, $options = [])
561
    {
562 7
        $headers = $this->getHeaders();
563 7
        if (isset($options['fileSize'])) {
564
            $fileSize = $options['fileSize'];
565
        } else {
566 7
            fseek($handle, 0, SEEK_END);
567 7
            $fileSize = ftell($handle);
568
        }
569
570 7
        $range = $this->getHttpRange($fileSize);
571 7
        if ($range === false) {
0 ignored issues
show
introduced by
The condition $range === false is always false.
Loading history...
572 4
            $headers->set('Content-Range', "bytes */$fileSize");
573 4
            throw new RangeNotSatisfiableHttpException();
574
        }
575
576 3
        list($begin, $end) = $range;
577 3
        if ($begin != 0 || $end != $fileSize - 1) {
578 3
            $this->setStatusCode(206);
579 3
            $headers->set('Content-Range', "bytes $begin-$end/$fileSize");
580
        } else {
581
            $this->setStatusCode(200);
582
        }
583
584 3
        $mimeType = isset($options['mimeType']) ? $options['mimeType'] : 'application/octet-stream';
585 3
        $this->setDownloadHeaders($attachmentName, $mimeType, !empty($options['inline']), $end - $begin + 1);
586
587 3
        $this->format = self::FORMAT_RAW;
588 3
        $this->stream = [$handle, $begin, $end];
589
590 3
        return $this;
591
    }
592
593
    /**
594
     * Sets a default set of HTTP headers for file downloading purpose.
595
     * @param string $attachmentName the attachment file name
596
     * @param string $mimeType the MIME type for the response. If null, `Content-Type` header will NOT be set.
597
     * @param bool $inline whether the browser should open the file within the browser window. Defaults to false,
598
     * meaning a download dialog will pop up.
599
     * @param int $contentLength the byte length of the file being downloaded. If null, `Content-Length` header will NOT be set.
600
     * @return $this the response object itself
601
     */
602 4
    public function setDownloadHeaders($attachmentName, $mimeType = null, $inline = false, $contentLength = null)
603
    {
604 4
        $headers = $this->getHeaders();
605
606 4
        $disposition = $inline ? 'inline' : 'attachment';
607 4
        $headers->setDefault('Pragma', 'public')
608 4
            ->setDefault('Accept-Ranges', 'bytes')
609 4
            ->setDefault('Expires', '0')
610 4
            ->setDefault('Cache-Control', 'must-revalidate, post-check=0, pre-check=0')
611 4
            ->setDefault('Content-Disposition', $this->getDispositionHeaderValue($disposition, $attachmentName));
612
613 4
        if ($mimeType !== null) {
614 4
            $headers->setDefault('Content-Type', $mimeType);
615
        }
616
617 4
        if ($contentLength !== null) {
618 4
            $headers->setDefault('Content-Length', $contentLength);
619
        }
620
621 4
        return $this;
622
    }
623
624
    /**
625
     * Determines the HTTP range given in the request.
626
     * @param int $fileSize the size of the file that will be used to validate the requested HTTP range.
627
     * @return array|bool the range (begin, end), or false if the range request is invalid.
628
     */
629 8
    protected function getHttpRange($fileSize)
630
    {
631 8
        $rangeHeader = Yii::$app->getRequest()->getHeaders()->get('Range', '-');
0 ignored issues
show
Bug introduced by
The method getHeaders() does not exist on yii\console\Request. Since you implemented __call, consider adding a @method annotation. ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-call  annotation

631
        $rangeHeader = Yii::$app->getRequest()->/** @scrutinizer ignore-call */ getHeaders()->get('Range', '-');
Loading history...
632 8
        if ($rangeHeader === '-') {
633 1
            return [0, $fileSize - 1];
634
        }
635 7
        if (!preg_match('/^bytes=(\d*)-(\d*)$/', $rangeHeader, $matches)) {
0 ignored issues
show
Bug introduced by
It seems like $rangeHeader can also be of type array; however, parameter $subject of preg_match() does only seem to accept string, maybe add an additional type check? ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-type  annotation

635
        if (!preg_match('/^bytes=(\d*)-(\d*)$/', /** @scrutinizer ignore-type */ $rangeHeader, $matches)) {
Loading history...
636 1
            return false;
637
        }
638 6
        if ($matches[1] === '') {
639 2
            $start = $fileSize - $matches[2];
640 2
            $end = $fileSize - 1;
641 4
        } elseif ($matches[2] !== '') {
642 2
            $start = $matches[1];
643 2
            $end = $matches[2];
644 2
            if ($end >= $fileSize) {
645 2
                $end = $fileSize - 1;
646
            }
647
        } else {
648 2
            $start = $matches[1];
649 2
            $end = $fileSize - 1;
650
        }
651 6
        if ($start < 0 || $start > $end) {
652 3
            return false;
653
        }
654
655 3
        return [$start, $end];
656
    }
657
658
    /**
659
     * Sends existing file to a browser as a download using x-sendfile.
660
     *
661
     * X-Sendfile is a feature allowing a web application to redirect the request for a file to the webserver
662
     * that in turn processes the request, this way eliminating the need to perform tasks like reading the file
663
     * and sending it to the user. When dealing with a lot of files (or very big files) this can lead to a great
664
     * increase in performance as the web application is allowed to terminate earlier while the webserver is
665
     * handling the request.
666
     *
667
     * The request is sent to the server through a special non-standard HTTP-header.
668
     * When the web server encounters the presence of such header it will discard all output and send the file
669
     * specified by that header using web server internals including all optimizations like caching-headers.
670
     *
671
     * As this header directive is non-standard different directives exists for different web servers applications:
672
     *
673
     * - Apache: [X-Sendfile](http://tn123.org/mod_xsendfile)
674
     * - Lighttpd v1.4: [X-LIGHTTPD-send-file](http://redmine.lighttpd.net/projects/lighttpd/wiki/X-LIGHTTPD-send-file)
675
     * - Lighttpd v1.5: [X-Sendfile](http://redmine.lighttpd.net/projects/lighttpd/wiki/X-LIGHTTPD-send-file)
676
     * - Nginx: [X-Accel-Redirect](http://wiki.nginx.org/XSendfile)
677
     * - Cherokee: [X-Sendfile and X-Accel-Redirect](http://www.cherokee-project.com/doc/other_goodies.html#x-sendfile)
678
     *
679
     * So for this method to work the X-SENDFILE option/module should be enabled by the web server and
680
     * a proper xHeader should be sent.
681
     *
682
     * **Note**
683
     *
684
     * This option allows to download files that are not under web folders, and even files that are otherwise protected
685
     * (deny from all) like `.htaccess`.
686
     *
687
     * **Side effects**
688
     *
689
     * If this option is disabled by the web server, when this method is called a download configuration dialog
690
     * will open but the downloaded file will have 0 bytes.
691
     *
692
     * **Known issues**
693
     *
694
     * There is a Bug with Internet Explorer 6, 7 and 8 when X-SENDFILE is used over an SSL connection, it will show
695
     * an error message like this: "Internet Explorer was not able to open this Internet site. The requested site
696
     * is either unavailable or cannot be found.". You can work around this problem by removing the `Pragma`-header.
697
     *
698
     * **Example**
699
     *
700
     * ```php
701
     * Yii::$app->response->xSendFile('/home/user/Pictures/picture1.jpg');
702
     * ```
703
     *
704
     * @param string $filePath file name with full path
705
     * @param string $attachmentName file name shown to the user. If null, it will be determined from `$filePath`.
706
     * @param array $options additional options for sending the file. The following options are supported:
707
     *
708
     *  - `mimeType`: the MIME type of the content. If not set, it will be guessed based on `$filePath`
709
     *  - `inline`: boolean, whether the browser should open the file within the browser window. Defaults to false,
710
     *    meaning a download dialog will pop up.
711
     *  - xHeader: string, the name of the x-sendfile header. Defaults to "X-Sendfile".
712
     *
713
     * @return $this the response object itself
714
     * @see sendFile()
715
     */
716
    public function xSendFile($filePath, $attachmentName = null, $options = [])
717
    {
718
        if ($attachmentName === null) {
719
            $attachmentName = basename($filePath);
720
        }
721
        if (isset($options['mimeType'])) {
722
            $mimeType = $options['mimeType'];
723
        } elseif (($mimeType = FileHelper::getMimeTypeByExtension($filePath)) === null) {
724
            $mimeType = 'application/octet-stream';
725
        }
726
        if (isset($options['xHeader'])) {
727
            $xHeader = $options['xHeader'];
728
        } else {
729
            $xHeader = 'X-Sendfile';
730
        }
731
732
        $disposition = empty($options['inline']) ? 'attachment' : 'inline';
733
        $this->getHeaders()
734
            ->setDefault($xHeader, $filePath)
735
            ->setDefault('Content-Type', $mimeType)
736
            ->setDefault('Content-Disposition', $this->getDispositionHeaderValue($disposition, $attachmentName));
737
738
        $this->format = self::FORMAT_RAW;
739
740
        return $this;
741
    }
742
743
    /**
744
     * Returns Content-Disposition header value that is safe to use with both old and new browsers.
745
     *
746
     * Fallback name:
747
     *
748
     * - Causes issues if contains non-ASCII characters with codes less than 32 or more than 126.
749
     * - Causes issues if contains urlencoded characters (starting with `%`) or `%` character. Some browsers interpret
750
     *   `filename="X"` as urlencoded name, some don't.
751
     * - Causes issues if contains path separator characters such as `\` or `/`.
752
     * - Since value is wrapped with `"`, it should be escaped as `\"`.
753
     * - Since input could contain non-ASCII characters, fallback is obtained by transliteration.
754
     *
755
     * UTF name:
756
     *
757
     * - Causes issues if contains path separator characters such as `\` or `/`.
758
     * - Should be urlencoded since headers are ASCII-only.
759
     * - Could be omitted if it exactly matches fallback name.
760
     *
761
     * @param string $disposition
762
     * @param string $attachmentName
763
     * @return string
764
     *
765
     * @since 2.0.10
766
     */
767 4
    protected function getDispositionHeaderValue($disposition, $attachmentName)
768
    {
769 4
        $fallbackName = str_replace(
770 4
            ['%', '/', '\\', '"'],
771 4
            ['_', '_', '_', '\\"'],
772 4
            Inflector::transliterate($attachmentName, Inflector::TRANSLITERATE_LOOSE)
773
        );
774 4
        $utfName = rawurlencode(str_replace(['%', '/', '\\'], '', $attachmentName));
775
776 4
        $dispositionHeader = "{$disposition}; filename=\"{$fallbackName}\"";
777 4
        if ($utfName !== $fallbackName) {
778
            $dispositionHeader .= "; filename*=utf-8''{$utfName}";
779
        }
780
781 4
        return $dispositionHeader;
782
    }
783
784
    /**
785
     * Redirects the browser to the specified URL.
786
     *
787
     * This method adds a "Location" header to the current response. Note that it does not send out
788
     * the header until [[send()]] is called. In a controller action you may use this method as follows:
789
     *
790
     * ```php
791
     * return Yii::$app->getResponse()->redirect($url);
792
     * ```
793
     *
794
     * In other places, if you want to send out the "Location" header immediately, you should use
795
     * the following code:
796
     *
797
     * ```php
798
     * Yii::$app->getResponse()->redirect($url)->send();
799
     * return;
800
     * ```
801
     *
802
     * In AJAX mode, this normally will not work as expected unless there are some
803
     * client-side JavaScript code handling the redirection. To help achieve this goal,
804
     * this method will send out a "X-Redirect" header instead of "Location".
805
     *
806
     * If you use the "yii" JavaScript module, it will handle the AJAX redirection as
807
     * described above. Otherwise, you should write the following JavaScript code to
808
     * handle the redirection:
809
     *
810
     * ```javascript
811
     * $document.ajaxComplete(function (event, xhr, settings) {
812
     *     var url = xhr && xhr.getResponseHeader('X-Redirect');
813
     *     if (url) {
814
     *         window.location = url;
815
     *     }
816
     * });
817
     * ```
818
     *
819
     * @param string|array $url the URL to be redirected to. This can be in one of the following formats:
820
     *
821
     * - a string representing a URL (e.g. "http://example.com")
822
     * - a string representing a URL alias (e.g. "@example.com")
823
     * - an array in the format of `[$route, ...name-value pairs...]` (e.g. `['site/index', 'ref' => 1]`).
824
     *   Note that the route is with respect to the whole application, instead of relative to a controller or module.
825
     *   [[Url::to()]] will be used to convert the array into a URL.
826
     *
827
     * Any relative URL that starts with a single forward slash "/" will be converted
828
     * into an absolute one by prepending it with the host info of the current request.
829
     *
830
     * @param int $statusCode the HTTP status code. Defaults to 302.
831
     * See <https://tools.ietf.org/html/rfc2616#section-10>
832
     * for details about HTTP status code
833
     * @param bool $checkAjax whether to specially handle AJAX (and PJAX) requests. Defaults to true,
834
     * meaning if the current request is an AJAX or PJAX request, then calling this method will cause the browser
835
     * to redirect to the given URL. If this is false, a `Location` header will be sent, which when received as
836
     * an AJAX/PJAX response, may NOT cause browser redirection.
837
     * Takes effect only when request header `X-Ie-Redirect-Compatibility` is absent.
838
     * @return $this the response object itself
839
     */
840 3
    public function redirect($url, $statusCode = 302, $checkAjax = true)
841
    {
842 3
        if (is_array($url) && isset($url[0])) {
843
            // ensure the route is absolute
844 2
            $url[0] = '/' . ltrim($url[0], '/');
845
        }
846 3
        $url = Url::to($url);
847 3
        if (strncmp($url, '/', 1) === 0 && strncmp($url, '//', 2) !== 0) {
848 3
            $url = Yii::$app->getRequest()->getHostInfo() . $url;
0 ignored issues
show
Bug introduced by
The method getHostInfo() does not exist on yii\console\Request. Since you implemented __call, consider adding a @method annotation. ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-call  annotation

848
            $url = Yii::$app->getRequest()->/** @scrutinizer ignore-call */ getHostInfo() . $url;
Loading history...
849
        }
850
851 3
        if ($checkAjax) {
852 3
            if (Yii::$app->getRequest()->getIsAjax()) {
0 ignored issues
show
Bug introduced by
The method getIsAjax() does not exist on yii\console\Request. Since you implemented __call, consider adding a @method annotation. ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-call  annotation

852
            if (Yii::$app->getRequest()->/** @scrutinizer ignore-call */ getIsAjax()) {
Loading history...
853 1
                if (Yii::$app->getRequest()->getHeaders()->get('X-Ie-Redirect-Compatibility') !== null && $statusCode === 302) {
854
                    // Ajax 302 redirect in IE does not work. Change status code to 200. See https://github.com/yiisoft/yii2/issues/9670
855
                    $statusCode = 200;
856
                }
857 1
                if (Yii::$app->getRequest()->getIsPjax()) {
0 ignored issues
show
Bug introduced by
The method getIsPjax() does not exist on yii\console\Request. Since you implemented __call, consider adding a @method annotation. ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-call  annotation

857
                if (Yii::$app->getRequest()->/** @scrutinizer ignore-call */ getIsPjax()) {
Loading history...
858
                    $this->getHeaders()->set('X-Pjax-Url', $url);
859
                } else {
860 1
                    $this->getHeaders()->set('X-Redirect', $url);
861
                }
862
            } else {
863 3
                $this->getHeaders()->set('Location', $url);
864
            }
865
        } else {
866
            $this->getHeaders()->set('Location', $url);
867
        }
868
869 3
        $this->setStatusCode($statusCode);
870
871 3
        return $this;
872
    }
873
874
    /**
875
     * Refreshes the current page.
876
     * The effect of this method call is the same as the user pressing the refresh button of his browser
877
     * (without re-posting data).
878
     *
879
     * In a controller action you may use this method like this:
880
     *
881
     * ```php
882
     * return Yii::$app->getResponse()->refresh();
883
     * ```
884
     *
885
     * @param string $anchor the anchor that should be appended to the redirection URL.
886
     * Defaults to empty. Make sure the anchor starts with '#' if you want to specify it.
887
     * @return Response the response object itself
888
     */
889
    public function refresh($anchor = '')
890
    {
891
        return $this->redirect(Yii::$app->getRequest()->getUrl() . $anchor);
0 ignored issues
show
Bug introduced by
The method getUrl() does not exist on yii\console\Request. Since you implemented __call, consider adding a @method annotation. ( Ignorable by Annotation )

If this is a false-positive, you can also ignore this issue in your code via the ignore-call  annotation

891
        return $this->redirect(Yii::$app->getRequest()->/** @scrutinizer ignore-call */ getUrl() . $anchor);
Loading history...
892
    }
893
894
    private $_cookies;
895
896
    /**
897
     * Returns the cookie collection.
898
     *
899
     * Through the returned cookie collection, you add or remove cookies as follows,
900
     *
901
     * ```php
902
     * // add a cookie
903
     * $response->cookies->add(new Cookie([
904
     *     'name' => $name,
905
     *     'value' => $value,
906
     * ]);
907
     *
908
     * // remove a cookie
909
     * $response->cookies->remove('name');
910
     * // alternatively
911
     * unset($response->cookies['name']);
912
     * ```
913
     *
914
     * @return CookieCollection the cookie collection.
915
     */
916 71
    public function getCookies()
917
    {
918 71
        if ($this->_cookies === null) {
919 71
            $this->_cookies = new CookieCollection();
920
        }
921
922 71
        return $this->_cookies;
923
    }
924
925
    /**
926
     * @return bool whether this response has a valid [[statusCode]].
927
     */
928 40
    public function getIsInvalid()
929
    {
930 40
        return $this->getStatusCode() < 100 || $this->getStatusCode() >= 600;
931
    }
932
933
    /**
934
     * @return bool whether this response is informational
935
     */
936
    public function getIsInformational()
937
    {
938
        return $this->getStatusCode() >= 100 && $this->getStatusCode() < 200;
939
    }
940
941
    /**
942
     * @return bool whether this response is successful
943
     */
944
    public function getIsSuccessful()
945
    {
946
        return $this->getStatusCode() >= 200 && $this->getStatusCode() < 300;
947
    }
948
949
    /**
950
     * @return bool whether this response is a redirection
951
     */
952 1
    public function getIsRedirection()
953
    {
954 1
        return $this->getStatusCode() >= 300 && $this->getStatusCode() < 400;
955
    }
956
957
    /**
958
     * @return bool whether this response indicates a client error
959
     */
960
    public function getIsClientError()
961
    {
962
        return $this->getStatusCode() >= 400 && $this->getStatusCode() < 500;
963
    }
964
965
    /**
966
     * @return bool whether this response indicates a server error
967
     */
968
    public function getIsServerError()
969
    {
970
        return $this->getStatusCode() >= 500 && $this->getStatusCode() < 600;
971
    }
972
973
    /**
974
     * @return bool whether this response is OK
975
     */
976
    public function getIsOk()
977
    {
978
        return $this->getStatusCode() == 200;
979
    }
980
981
    /**
982
     * @return bool whether this response indicates the current request is forbidden
983
     */
984
    public function getIsForbidden()
985
    {
986
        return $this->getStatusCode() == 403;
987
    }
988
989
    /**
990
     * @return bool whether this response indicates the currently requested resource is not found
991
     */
992
    public function getIsNotFound()
993
    {
994
        return $this->getStatusCode() == 404;
995
    }
996
997
    /**
998
     * @return bool whether this response is empty
999
     */
1000
    public function getIsEmpty()
1001
    {
1002
        return in_array($this->getStatusCode(), [201, 204, 304]);
1003
    }
1004
1005
    /**
1006
     * @return array the formatters that are supported by default
1007
     */
1008 228
    protected function defaultFormatters()
1009
    {
1010
        return [
1011 228
            self::FORMAT_HTML => [
1012
                'class' => 'yii\web\HtmlResponseFormatter',
1013
            ],
1014 228
            self::FORMAT_XML => [
1015
                'class' => 'yii\web\XmlResponseFormatter',
1016
            ],
1017 228
            self::FORMAT_JSON => [
1018
                'class' => 'yii\web\JsonResponseFormatter',
1019
            ],
1020 228
            self::FORMAT_JSONP => [
1021
                'class' => 'yii\web\JsonResponseFormatter',
1022
                'useJsonp' => true,
1023
            ],
1024
        ];
1025
    }
1026
1027
    /**
1028
     * Prepares for sending the response.
1029
     * The default implementation will convert [[data]] into [[content]] and set headers accordingly.
1030
     * @throws InvalidConfigException if the formatter for the specified format is invalid or [[format]] is not supported
1031
     */
1032 26
    protected function prepare()
1033
    {
1034 26
        if ($this->stream !== null) {
1035 3
            return;
1036
        }
1037
1038 23
        if (isset($this->formatters[$this->format])) {
1039 21
            $formatter = $this->formatters[$this->format];
1040 21
            if (!is_object($formatter)) {
1041 21
                $this->formatters[$this->format] = $formatter = Yii::createObject($formatter);
1042
            }
1043 21
            if ($formatter instanceof ResponseFormatterInterface) {
1044 21
                $formatter->format($this);
1045
            } else {
1046 21
                throw new InvalidConfigException("The '{$this->format}' response formatter is invalid. It must implement the ResponseFormatterInterface.");
1047
            }
1048 2
        } elseif ($this->format === self::FORMAT_RAW) {
1049 2
            if ($this->data !== null) {
1050 2
                $this->content = $this->data;
1051
            }
1052
        } else {
1053
            throw new InvalidConfigException("Unsupported response format: {$this->format}");
1054
        }
1055
1056 23
        if (is_array($this->content)) {
0 ignored issues
show
introduced by
The condition is_array($this->content) is always false.
Loading history...
1057
            throw new InvalidArgumentException('Response content must not be an array.');
1058 23
        } elseif (is_object($this->content)) {
0 ignored issues
show
introduced by
The condition is_object($this->content) is always false.
Loading history...
1059
            if (method_exists($this->content, '__toString')) {
1060
                $this->content = $this->content->__toString();
1061
            } else {
1062
                throw new InvalidArgumentException('Response content must be a string or an object implementing __toString().');
1063
            }
1064
        }
1065 23
    }
1066
}
1067