utils.inc.php 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874
  1. <?php
  2. // Copyright (C) 2010-2012 Combodo SARL
  3. //
  4. // This file is part of iTop.
  5. //
  6. // iTop is free software; you can redistribute it and/or modify
  7. // it under the terms of the GNU Affero General Public License as published by
  8. // the Free Software Foundation, either version 3 of the License, or
  9. // (at your option) any later version.
  10. //
  11. // iTop is distributed in the hope that it will be useful,
  12. // but WITHOUT ANY WARRANTY; without even the implied warranty of
  13. // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  14. // GNU Affero General Public License for more details.
  15. //
  16. // You should have received a copy of the GNU Affero General Public License
  17. // along with iTop. If not, see <http://www.gnu.org/licenses/>
  18. /**
  19. * Static class utils
  20. *
  21. * @copyright Copyright (C) 2010-2012 Combodo SARL
  22. * @license http://opensource.org/licenses/AGPL-3.0
  23. */
  24. require_once(APPROOT.'/core/config.class.inc.php');
  25. require_once(APPROOT.'/application/transaction.class.inc.php');
  26. define('ITOP_CONFIG_FILE', 'config-itop.php');
  27. define('ITOP_DEFAULT_CONFIG_FILE', APPCONF.ITOP_DEFAULT_ENV.'/'.ITOP_CONFIG_FILE);
  28. define('SERVER_NAME_PLACEHOLDER', '$SERVER_NAME$');
  29. class FileUploadException extends Exception
  30. {
  31. }
  32. /**
  33. * Helper functions to interact with forms: read parameters, upload files...
  34. * @package iTop
  35. */
  36. class utils
  37. {
  38. private static $oConfig = null;
  39. private static $m_bCASClient = false;
  40. // Parameters loaded from a file, parameters of the page/command line still have precedence
  41. private static $m_aParamsFromFile = null;
  42. private static $m_aParamSource = array();
  43. protected static function LoadParamFile($sParamFile)
  44. {
  45. if (!file_exists($sParamFile))
  46. {
  47. throw new Exception("Could not find the parameter file: '$sParamFile'");
  48. }
  49. if (!is_readable($sParamFile))
  50. {
  51. throw new Exception("Could not load parameter file: '$sParamFile'");
  52. }
  53. $sParams = file_get_contents($sParamFile);
  54. if (is_null(self::$m_aParamsFromFile))
  55. {
  56. self::$m_aParamsFromFile = array();
  57. }
  58. $aParamLines = explode("\n", $sParams);
  59. foreach ($aParamLines as $sLine)
  60. {
  61. $sLine = trim($sLine);
  62. // Ignore the line after a '#'
  63. if (($iCommentPos = strpos($sLine, '#')) !== false)
  64. {
  65. $sLine = substr($sLine, 0, $iCommentPos);
  66. $sLine = trim($sLine);
  67. }
  68. // Note: the line is supposed to be already trimmed
  69. if (preg_match('/^(\S*)\s*=(.*)$/', $sLine, $aMatches))
  70. {
  71. $sParam = $aMatches[1];
  72. $value = trim($aMatches[2]);
  73. self::$m_aParamsFromFile[$sParam] = $value;
  74. self::$m_aParamSource[$sParam] = $sParamFile;
  75. }
  76. }
  77. }
  78. public static function UseParamFile($sParamFileArgName = 'param_file', $bAllowCLI = true)
  79. {
  80. $sFileSpec = self::ReadParam($sParamFileArgName, '', $bAllowCLI, 'raw_data');
  81. foreach(explode(',', $sFileSpec) as $sFile)
  82. {
  83. $sFile = trim($sFile);
  84. if (!empty($sFile))
  85. {
  86. self::LoadParamFile($sFile);
  87. }
  88. }
  89. }
  90. /**
  91. * Return the source file from which the parameter has been found,
  92. * usefull when it comes to pass user credential to a process executed
  93. * in the background
  94. * @param $sName Parameter name
  95. * @return The file name if any, or null
  96. */
  97. public static function GetParamSourceFile($sName)
  98. {
  99. if (array_key_exists($sName, self::$m_aParamSource))
  100. {
  101. return self::$m_aParamSource[$sName];
  102. }
  103. else
  104. {
  105. return null;
  106. }
  107. }
  108. public static function IsModeCLI()
  109. {
  110. $sSAPIName = php_sapi_name();
  111. $sCleanName = strtolower(trim($sSAPIName));
  112. if ($sCleanName == 'cli')
  113. {
  114. return true;
  115. }
  116. else
  117. {
  118. return false;
  119. }
  120. }
  121. public static function ReadParam($sName, $defaultValue = "", $bAllowCLI = false, $sSanitizationFilter = 'parameter')
  122. {
  123. global $argv;
  124. $retValue = $defaultValue;
  125. if (!is_null(self::$m_aParamsFromFile))
  126. {
  127. if (isset(self::$m_aParamsFromFile[$sName]))
  128. {
  129. $retValue = self::$m_aParamsFromFile[$sName];
  130. }
  131. }
  132. if (isset($_REQUEST[$sName]))
  133. {
  134. $retValue = $_REQUEST[$sName];
  135. }
  136. elseif ($bAllowCLI && isset($argv))
  137. {
  138. foreach($argv as $iArg => $sArg)
  139. {
  140. if (preg_match('/^--'.$sName.'=(.*)$/', $sArg, $aMatches))
  141. {
  142. $retValue = $aMatches[1];
  143. }
  144. }
  145. }
  146. return self::Sanitize($retValue, $defaultValue, $sSanitizationFilter);
  147. }
  148. public static function ReadPostedParam($sName, $defaultValue = '', $sSanitizationFilter = 'parameter')
  149. {
  150. $retValue = isset($_POST[$sName]) ? $_POST[$sName] : $defaultValue;
  151. return self::Sanitize($retValue, $defaultValue, $sSanitizationFilter);
  152. }
  153. public static function Sanitize($value, $defaultValue, $sSanitizationFilter)
  154. {
  155. if ($value === $defaultValue)
  156. {
  157. // Preserve the real default value (can be used to detect missing mandatory parameters)
  158. $retValue = $value;
  159. }
  160. else
  161. {
  162. $retValue = self::Sanitize_Internal($value, $sSanitizationFilter);
  163. if ($retValue === false)
  164. {
  165. $retValue = $defaultValue;
  166. }
  167. }
  168. return $retValue;
  169. }
  170. protected static function Sanitize_Internal($value, $sSanitizationFilter)
  171. {
  172. switch($sSanitizationFilter)
  173. {
  174. case 'integer':
  175. $retValue = filter_var($value, FILTER_SANITIZE_NUMBER_INT);
  176. break;
  177. case 'class':
  178. $retValue = $value;
  179. if (!MetaModel::IsValidClass($value))
  180. {
  181. $retValue = false;
  182. }
  183. break;
  184. case 'string':
  185. $retValue = filter_var($value, FILTER_SANITIZE_SPECIAL_CHARS);
  186. break;
  187. case 'context_param':
  188. case 'parameter':
  189. case 'field_name':
  190. if (is_array($value))
  191. {
  192. $retValue = array();
  193. foreach($value as $key => $val)
  194. {
  195. $retValue[$key] = self::Sanitize_Internal($val, $sSanitizationFilter); // recursively check arrays
  196. if ($retValue[$key] === false)
  197. {
  198. $retValue = false;
  199. break;
  200. }
  201. }
  202. }
  203. else
  204. {
  205. switch($sSanitizationFilter)
  206. {
  207. case 'parameter':
  208. $retValue = filter_var($value, FILTER_VALIDATE_REGEXP, array("options"=>array("regexp"=>'/^[ A-Za-z0-9_=-]*$/'))); // the '=' equal character is used in serialized filters
  209. break;
  210. case 'field_name':
  211. $retValue = filter_var($value, FILTER_VALIDATE_REGEXP, array("options"=>array("regexp"=>'/^[A-Za-z0-9_]+(->[A-Za-z0-9_]+)*$/'))); // att_code or att_code->name or AttCode->Name or AttCode->Key2->Name
  212. break;
  213. case 'context_param':
  214. $retValue = filter_var($value, FILTER_VALIDATE_REGEXP, array("options"=>array("regexp"=>'/^[ A-Za-z0-9_=%:+-]*$/')));
  215. break;
  216. }
  217. }
  218. break;
  219. default:
  220. case 'raw_data':
  221. $retValue = $value;
  222. // Do nothing
  223. }
  224. return $retValue;
  225. }
  226. /**
  227. * Reads an uploaded file and turns it into an ormDocument object - Triggers an exception in case of error
  228. * @param string $sName Name of the input used from uploading the file
  229. * @param string $sIndex If Name is an array of posted files, then the index must be used to point out the file
  230. * @return ormDocument The uploaded file (can be 'empty' if nothing was uploaded)
  231. */
  232. public static function ReadPostedDocument($sName, $sIndex = null)
  233. {
  234. $oDocument = new ormDocument(); // an empty document
  235. if(isset($_FILES[$sName]))
  236. {
  237. $aFileInfo = $_FILES[$sName];
  238. $sError = is_null($sIndex) ? $aFileInfo['error'] : $aFileInfo['error'][$sIndex];
  239. switch($sError)
  240. {
  241. case UPLOAD_ERR_OK:
  242. $sTmpName = is_null($sIndex) ? $aFileInfo['tmp_name'] : $aFileInfo['tmp_name'][$sIndex];
  243. $sMimeType = is_null($sIndex) ? $aFileInfo['type'] : $aFileInfo['type'][$sIndex];
  244. $sName = is_null($sIndex) ? $aFileInfo['name'] : $aFileInfo['name'][$sIndex];
  245. $doc_content = file_get_contents($sTmpName);
  246. if (function_exists('finfo_file'))
  247. {
  248. // as of PHP 5.3 the fileinfo extension is bundled within PHP
  249. // in which case we don't trust the mime type provided by the browser
  250. $rInfo = @finfo_open(FILEINFO_MIME_TYPE); // return mime type ala mimetype extension
  251. if ($rInfo !== false)
  252. {
  253. $sType = @finfo_file($rInfo, $file);
  254. if ( ($sType !== false)
  255. && is_string($sType)
  256. && (strlen($sType)>0))
  257. {
  258. $sMimeType = $sType;
  259. }
  260. }
  261. @finfo_close($rInfo);
  262. }
  263. $oDocument = new ormDocument($doc_content, $sMimeType, $sName);
  264. break;
  265. case UPLOAD_ERR_NO_FILE:
  266. // no file to load, it's a normal case, just return an empty document
  267. break;
  268. case UPLOAD_ERR_FORM_SIZE:
  269. case UPLOAD_ERR_INI_SIZE:
  270. throw new FileUploadException(Dict::Format('UI:Error:UploadedFileTooBig', ini_get('upload_max_filesize')));
  271. break;
  272. case UPLOAD_ERR_PARTIAL:
  273. throw new FileUploadException(Dict::S('UI:Error:UploadedFileTruncated.'));
  274. break;
  275. case UPLOAD_ERR_NO_TMP_DIR:
  276. throw new FileUploadException(Dict::S('UI:Error:NoTmpDir'));
  277. break;
  278. case UPLOAD_ERR_CANT_WRITE:
  279. throw new FileUploadException(Dict::Format('UI:Error:CannotWriteToTmp_Dir', ini_get('upload_tmp_dir')));
  280. break;
  281. case UPLOAD_ERR_EXTENSION:
  282. $sName = is_null($sIndex) ? $aFileInfo['name'] : $aFileInfo['name'][$sIndex];
  283. throw new FileUploadException(Dict::Format('UI:Error:UploadStoppedByExtension_FileName', $sName));
  284. break;
  285. default:
  286. throw new FileUploadException(Dict::Format('UI:Error:UploadFailedUnknownCause_Code', $sError));
  287. break;
  288. }
  289. }
  290. return $oDocument;
  291. }
  292. /**
  293. * Interprets the results posted by a normal or paginated list (in multiple selection mode)
  294. * @param $oFullSetFilter DBObjectSearch The criteria defining the whole sets of objects being selected
  295. * @return Array An arry of object IDs corresponding to the objects selected in the set
  296. */
  297. public static function ReadMultipleSelection($oFullSetFilter)
  298. {
  299. $aSelectedObj = utils::ReadParam('selectObject', array());
  300. $sSelectionMode = utils::ReadParam('selectionMode', '');
  301. if ($sSelectionMode != '')
  302. {
  303. // Paginated selection
  304. $aExceptions = utils::ReadParam('storedSelection', array());
  305. if ($sSelectionMode == 'positive')
  306. {
  307. // Only the explicitely listed items are selected
  308. $aSelectedObj = $aExceptions;
  309. }
  310. else
  311. {
  312. // All items of the set are selected, except the one explicitely listed
  313. $aSelectedObj = array();
  314. $oFullSet = new DBObjectSet($oFullSetFilter);
  315. $sClassAlias = $oFullSetFilter->GetClassAlias();
  316. $oFullSet->OptimizeColumnLoad(array($sClassAlias => array('friendlyname'))); // We really need only the IDs but it does not work since id is not a real field
  317. while($oObj = $oFullSet->Fetch())
  318. {
  319. if (!in_array($oObj->GetKey(), $aExceptions))
  320. {
  321. $aSelectedObj[] = $oObj->GetKey();
  322. }
  323. }
  324. }
  325. }
  326. return $aSelectedObj;
  327. }
  328. public static function GetNewTransactionId()
  329. {
  330. return privUITransaction::GetNewTransactionId();
  331. }
  332. public static function IsTransactionValid($sId, $bRemoveTransaction = true)
  333. {
  334. return privUITransaction::IsTransactionValid($sId, $bRemoveTransaction);
  335. }
  336. public static function RemoveTransaction($sId)
  337. {
  338. return privUITransaction::RemoveTransaction($sId);
  339. }
  340. public static function ReadFromFile($sFileName)
  341. {
  342. if (!file_exists($sFileName)) return false;
  343. return file_get_contents($sFileName);
  344. }
  345. /**
  346. * Helper function to convert a value expressed in a 'user friendly format'
  347. * as in php.ini, e.g. 256k, 2M, 1G etc. Into a number of bytes
  348. * @param mixed $value The value as read from php.ini
  349. * @return number
  350. */
  351. public static function ConvertToBytes( $value )
  352. {
  353. $iReturn = $value;
  354. if ( !is_numeric( $value ) )
  355. {
  356. $iLength = strlen( $value );
  357. $iReturn = substr( $value, 0, $iLength - 1 );
  358. $sUnit = strtoupper( substr( $value, $iLength - 1 ) );
  359. switch ( $sUnit )
  360. {
  361. case 'G':
  362. $iReturn *= 1024;
  363. case 'M':
  364. $iReturn *= 1024;
  365. case 'K':
  366. $iReturn *= 1024;
  367. }
  368. }
  369. return $iReturn;
  370. }
  371. /**
  372. * Helper function to convert a string to a date, given a format specification. It replaces strtotime which does not allow for specifying a date in a french format (for instance)
  373. * Example: StringToTime('01/05/11 12:03:45', '%d/%m/%y %H:%i:%s')
  374. * @param string $sDate
  375. * @param string $sFormat
  376. * @return timestamp or false if the input format is not correct
  377. */
  378. public static function StringToTime($sDate, $sFormat)
  379. {
  380. // Source: http://php.net/manual/fr/function.strftime.php
  381. // (alternative: http://www.php.net/manual/fr/datetime.formats.date.php)
  382. static $aDateTokens = null;
  383. static $aDateRegexps = null;
  384. if (is_null($aDateTokens))
  385. {
  386. $aSpec = array(
  387. '%d' =>'(?<day>[0-9]{2})',
  388. '%m' => '(?<month>[0-9]{2})',
  389. '%y' => '(?<year>[0-9]{2})',
  390. '%Y' => '(?<year>[0-9]{4})',
  391. '%H' => '(?<hour>[0-2][0-9])',
  392. '%i' => '(?<minute>[0-5][0-9])',
  393. '%s' => '(?<second>[0-5][0-9])',
  394. );
  395. $aDateTokens = array_keys($aSpec);
  396. $aDateRegexps = array_values($aSpec);
  397. }
  398. $sDateRegexp = str_replace($aDateTokens, $aDateRegexps, $sFormat);
  399. if (preg_match('!^(?<head>)'.$sDateRegexp.'(?<tail>)$!', $sDate, $aMatches))
  400. {
  401. $sYear = isset($aMatches['year']) ? $aMatches['year'] : 0;
  402. $sMonth = isset($aMatches['month']) ? $aMatches['month'] : 1;
  403. $sDay = isset($aMatches['day']) ? $aMatches['day'] : 1;
  404. $sHour = isset($aMatches['hour']) ? $aMatches['hour'] : 0;
  405. $sMinute = isset($aMatches['minute']) ? $aMatches['minute'] : 0;
  406. $sSecond = isset($aMatches['second']) ? $aMatches['second'] : 0;
  407. return strtotime("$sYear-$sMonth-$sDay $sHour:$sMinute:$sSecond");
  408. }
  409. else
  410. {
  411. return false;
  412. }
  413. // http://www.spaweditor.com/scripts/regex/index.php
  414. }
  415. static public function GetConfig()
  416. {
  417. if (self::$oConfig == null)
  418. {
  419. $sConfigFile = self::GetConfigFilePath();
  420. if (file_exists($sConfigFile))
  421. {
  422. self::$oConfig = new Config($sConfigFile);
  423. }
  424. else
  425. {
  426. // When executing the setup, the config file may be still missing
  427. self::$oConfig = new Config();
  428. }
  429. }
  430. return self::$oConfig;
  431. }
  432. /**
  433. * Returns the absolute URL to the application root path
  434. * @return string The absolute URL to the application root, without the first slash
  435. */
  436. static public function GetAbsoluteUrlAppRoot()
  437. {
  438. $sUrl = self::GetConfig()->Get('app_root_url');
  439. if (strpos($sUrl, SERVER_NAME_PLACEHOLDER) > -1)
  440. {
  441. if (isset($_SERVER['SERVER_NAME']))
  442. {
  443. $sServerName = $_SERVER['SERVER_NAME'];
  444. }
  445. else
  446. {
  447. // CLI mode ?
  448. $sServerName = php_uname('n');
  449. }
  450. $sUrl = str_replace(SERVER_NAME_PLACEHOLDER, $sServerName, $sUrl);
  451. }
  452. return $sUrl;
  453. }
  454. static public function GetDefaultUrlAppRoot()
  455. {
  456. // Build an absolute URL to this page on this server/port
  457. $sServerName = isset($_SERVER['SERVER_NAME']) ? $_SERVER['SERVER_NAME'] : '';
  458. $sProtocol = self::IsConnectionSecure() ? 'https' : 'http';
  459. $iPort = isset($_SERVER['SERVER_PORT']) ? $_SERVER['SERVER_PORT'] : 80;
  460. if ($sProtocol == 'http')
  461. {
  462. $sPort = ($iPort == 80) ? '' : ':'.$iPort;
  463. }
  464. else
  465. {
  466. $sPort = ($iPort == 443) ? '' : ':'.$iPort;
  467. }
  468. // $_SERVER['REQUEST_URI'] is empty when running on IIS
  469. // Let's use Ivan Tcholakov's fix (found on www.dokeos.com)
  470. if (!empty($_SERVER['REQUEST_URI']))
  471. {
  472. $sPath = $_SERVER['REQUEST_URI'];
  473. }
  474. else
  475. {
  476. $sPath = $_SERVER['SCRIPT_NAME'];
  477. if (!empty($_SERVER['QUERY_STRING']))
  478. {
  479. $sPath .= '?'.$_SERVER['QUERY_STRING'];
  480. }
  481. $_SERVER['REQUEST_URI'] = $sPath;
  482. }
  483. $sPath = $_SERVER['REQUEST_URI'];
  484. // remove all the parameters from the query string
  485. $iQuestionMarkPos = strpos($sPath, '?');
  486. if ($iQuestionMarkPos !== false)
  487. {
  488. $sPath = substr($sPath, 0, $iQuestionMarkPos);
  489. }
  490. $sAbsoluteUrl = "$sProtocol://{$sServerName}{$sPort}{$sPath}";
  491. $sCurrentScript = realpath($_SERVER['SCRIPT_FILENAME']);
  492. $sCurrentScript = str_replace('\\', '/', $sCurrentScript); // canonical path
  493. $sAppRoot = str_replace('\\', '/', APPROOT); // canonical path
  494. $sCurrentRelativePath = str_replace($sAppRoot, '', $sCurrentScript);
  495. $sAppRootPos = strpos($sAbsoluteUrl, $sCurrentRelativePath);
  496. if ($sAppRootPos !== false)
  497. {
  498. $sAppRootUrl = substr($sAbsoluteUrl, 0, $sAppRootPos); // remove the current page and path
  499. }
  500. else
  501. {
  502. // Second attempt without index.php at the end...
  503. $sCurrentRelativePath = str_replace('index.php', '', $sCurrentRelativePath);
  504. $sAppRootPos = strpos($sAbsoluteUrl, $sCurrentRelativePath);
  505. if ($sAppRootPos !== false)
  506. {
  507. $sAppRootUrl = substr($sAbsoluteUrl, 0, $sAppRootPos); // remove the current page and path
  508. }
  509. else
  510. {
  511. // No luck...
  512. throw new Exception("Failed to determine application root path $sAbsoluteUrl ($sCurrentRelativePath) APPROOT:'$sAppRoot'");
  513. }
  514. }
  515. return $sAppRootUrl;
  516. }
  517. /**
  518. * Helper to handle the variety of HTTP servers
  519. * See #286 (fixed in [896]), and #634 (this fix)
  520. *
  521. * Though the official specs says 'a non empty string', some servers like IIS do set it to 'off' !
  522. * nginx set it to an empty string
  523. * Others might leave it unset (no array entry)
  524. */
  525. static public function IsConnectionSecure()
  526. {
  527. $bSecured = false;
  528. if (!empty($_SERVER['HTTPS']) && (strtolower($_SERVER['HTTPS']) != 'off'))
  529. {
  530. $bSecured = true;
  531. }
  532. return $bSecured;
  533. }
  534. /**
  535. * Tells whether or not log off operation is supported.
  536. * Actually in only one case:
  537. * 1) iTop is using an internal authentication
  538. * 2) the user did not log-in using the "basic" mode (i.e basic authentication) or by passing credentials in the URL
  539. * @return boolean True if logoff is supported, false otherwise
  540. */
  541. static function CanLogOff()
  542. {
  543. $bResult = false;
  544. if(isset($_SESSION['login_mode']))
  545. {
  546. $sLoginMode = $_SESSION['login_mode'];
  547. switch($sLoginMode)
  548. {
  549. case 'external':
  550. $bResult = false;
  551. break;
  552. case 'form':
  553. case 'basic':
  554. case 'url':
  555. case 'cas':
  556. default:
  557. $bResult = true;
  558. }
  559. }
  560. return $bResult;
  561. }
  562. /**
  563. * Initializes the CAS client
  564. */
  565. static function InitCASClient()
  566. {
  567. $sCASIncludePath = self::GetConfig()->Get('cas_include_path');
  568. include_once($sCASIncludePath.'/CAS.php');
  569. $bCASDebug = self::GetConfig()->Get('cas_debug');
  570. if ($bCASDebug)
  571. {
  572. phpCAS::setDebug(APPROOT.'log/error.log');
  573. }
  574. if (!self::$m_bCASClient)
  575. {
  576. // Initialize phpCAS
  577. $sCASVersion = self::GetConfig()->Get('cas_version');
  578. $sCASHost = self::GetConfig()->Get('cas_host');
  579. $iCASPort = self::GetConfig()->Get('cas_port');
  580. $sCASContext = self::GetConfig()->Get('cas_context');
  581. phpCAS::client($sCASVersion, $sCASHost, $iCASPort, $sCASContext, false /* session already started */);
  582. self::$m_bCASClient = true;
  583. $sCASCACertPath = self::GetConfig()->Get('cas_server_ca_cert_path');
  584. if (empty($sCASCACertPath))
  585. {
  586. // If no certificate authority is provided, do not attempt to validate
  587. // the server's certificate
  588. // THIS SETTING IS NOT RECOMMENDED FOR PRODUCTION.
  589. // VALIDATING THE CAS SERVER IS CRUCIAL TO THE SECURITY OF THE CAS PROTOCOL!
  590. phpCAS::setNoCasServerValidation();
  591. }
  592. else
  593. {
  594. phpCAS::setCasServerCACert($sCASCACertPath);
  595. }
  596. }
  597. }
  598. static function DebugBacktrace($iLimit = 5)
  599. {
  600. $aFullTrace = debug_backtrace();
  601. $aLightTrace = array();
  602. for($i=1; ($i<=$iLimit && $i < count($aFullTrace)); $i++) // Skip the last function call... which is the call to this function !
  603. {
  604. $aLightTrace[$i] = $aFullTrace[$i]['function'].'(), called from line '.$aFullTrace[$i]['line'].' in '.$aFullTrace[$i]['file'];
  605. }
  606. echo "<p><pre>".print_r($aLightTrace, true)."</pre></p>\n";
  607. }
  608. /**
  609. * Execute the given iTop PHP script, passing it the current credentials
  610. * Only CLI mode is supported, because of the need to hand the credentials over to the next process
  611. * Throws an exception if the execution fails or could not be attempted (config issue)
  612. * @param string $sScript Name and relative path to the file (relative to the iTop root dir)
  613. * @param hash $aArguments Associative array of 'arg' => 'value'
  614. * @return array(iCode, array(output lines))
  615. */
  616. /**
  617. */
  618. static function ExecITopScript($sScriptName, $aArguments)
  619. {
  620. $aDisabled = explode(', ', ini_get('disable_functions'));
  621. if (in_array('exec', $aDisabled))
  622. {
  623. throw new Exception("The PHP exec() function has been disabled on this server");
  624. }
  625. $sPHPExec = trim(self::GetConfig()->Get('php_path'));
  626. if (strlen($sPHPExec) == 0)
  627. {
  628. throw new Exception("The path to php must not be empty. Please set a value for 'php_path' in your configuration file.");
  629. }
  630. $sAuthUser = self::ReadParam('auth_user', '', 'raw_data');
  631. $sAuthPwd = self::ReadParam('auth_pwd', '', 'raw_data');
  632. $sParamFile = self::GetParamSourceFile('auth_user');
  633. if (is_null($sParamFile))
  634. {
  635. $aArguments['auth_user'] = $sAuthUser;
  636. $aArguments['auth_pwd'] = $sAuthPwd;
  637. }
  638. else
  639. {
  640. $aArguments['param_file'] = $sParamFile;
  641. }
  642. $aArgs = array();
  643. foreach($aArguments as $sName => $value)
  644. {
  645. // Note: See comment from the 23-Apr-2004 03:30 in the PHP documentation
  646. // It suggests to rely on pctnl_* function instead of using escapeshellargs
  647. $aArgs[] = "--$sName=".escapeshellarg($value);
  648. }
  649. $sArgs = implode(' ', $aArgs);
  650. $sScript = realpath(APPROOT.$sScriptName);
  651. if (!file_exists($sScript))
  652. {
  653. throw new Exception("Could not find the script file '$sScriptName' from the directory '".APPROOT."'");
  654. }
  655. $sCommand = '"'.$sPHPExec.'" '.escapeshellarg($sScript).' -- '.$sArgs;
  656. if (version_compare(phpversion(), '5.3.0', '<'))
  657. {
  658. if (substr(PHP_OS,0,3) == 'WIN')
  659. {
  660. // Under Windows, and for PHP 5.2.x, the whole command has to be quoted
  661. // Cf PHP doc: http://php.net/manual/fr/function.exec.php, comment from the 27-Dec-2010
  662. $sCommand = '"'.$sCommand.'"';
  663. }
  664. }
  665. $sLastLine = exec($sCommand, $aOutput, $iRes);
  666. if ($iRes == 1)
  667. {
  668. throw new Exception(Dict::S('Core:ExecProcess:Code1')." - ".$sCommand);
  669. }
  670. elseif ($iRes == 255)
  671. {
  672. $sErrors = implode("\n", $aOutput);
  673. throw new Exception(Dict::S('Core:ExecProcess:Code255')." - ".$sCommand.":\n".$sErrors);
  674. }
  675. //$aOutput[] = $sCommand;
  676. return array($iRes, $aOutput);
  677. }
  678. /**
  679. * Get the current environment
  680. */
  681. public static function GetCurrentEnvironment()
  682. {
  683. if (isset($_SESSION['itop_env']))
  684. {
  685. return $_SESSION['itop_env'];
  686. }
  687. else
  688. {
  689. return ITOP_DEFAULT_ENV;
  690. }
  691. }
  692. /**
  693. * Get the "Back" button to go out of the current environment
  694. */
  695. public static function GetEnvironmentBackButton()
  696. {
  697. if (isset($_SESSION['itop_return_env']))
  698. {
  699. if (isset($_SESSION['itop_return_url']))
  700. {
  701. $sReturnUrl = $_SESSION['itop_return_url'];
  702. }
  703. else
  704. {
  705. $sReturnUrl = utils::GetAbsoluteUrlAppRoot().'pages/UI.php?switch_env='.$_SESSION['itop_return_env'];
  706. }
  707. return '&nbsp;<button onclick="window;location.href=\''.addslashes($sReturnUrl).'\'">'.Dict::S('UI:Button:Back').'</button>';
  708. }
  709. else
  710. {
  711. return '';
  712. }
  713. }
  714. /**
  715. * Get the "Back" button to go out of the current environment
  716. */
  717. public static function GetPopupMenuItems($oPage, $iMenuId, $param, &$aActions)
  718. {
  719. foreach (MetaModel::EnumPlugins('iPopupMenuExtension') as $oExtensionInstance)
  720. {
  721. if (is_object($param) && !($param instanceof DBObject))
  722. {
  723. $tmpParam = clone $param; // In case the parameter is an DBObjectSet, clone it to prevent alterations
  724. }
  725. else
  726. {
  727. $tmpParam = $param;
  728. }
  729. foreach($oExtensionInstance->EnumItems($iMenuId, $tmpParam) as $oMenuItem)
  730. {
  731. if (is_object($oMenuItem))
  732. {
  733. $aActions[$oMenuItem->GetUID()] = $oMenuItem->GetMenuItem();
  734. foreach($oMenuItem->GetLinkedScripts() as $sLinkedScript)
  735. {
  736. $oPage->add_linked_script($sLinkedScript);
  737. }
  738. }
  739. }
  740. }
  741. }
  742. /**
  743. * Get target configuration file name (including full path)
  744. */
  745. public static function GetConfigFilePath($sEnvironment = null)
  746. {
  747. if (is_null($sEnvironment))
  748. {
  749. $sEnvironment = self::GetCurrentEnvironment();
  750. }
  751. return APPCONF.$sEnvironment.'/'.ITOP_CONFIG_FILE;
  752. }
  753. /**
  754. * Returns the absolute URL to the modules root path
  755. * @return string ...
  756. */
  757. static public function GetAbsoluteUrlModulesRoot()
  758. {
  759. $sUrl = self::GetAbsoluteUrlAppRoot().'env-'.self::GetCurrentEnvironment().'/';
  760. return $sUrl;
  761. }
  762. /**
  763. * Returns a name unique amongst the given list
  764. * @param string $sProposed The default value
  765. * @param array $aExisting An array of existing values (strings)
  766. */
  767. static public function MakeUniqueName($sProposed, $aExisting)
  768. {
  769. if (in_array($sProposed, $aExisting))
  770. {
  771. $i = 1;
  772. while (in_array($sProposed.$i, $aExisting) && ($i < 50))
  773. {
  774. $i++;
  775. }
  776. return $sProposed.$i;
  777. }
  778. else
  779. {
  780. return $sProposed;
  781. }
  782. }
  783. /**
  784. * Some characters cause troubles with jQuery when used inside DOM IDs, so let's replace them by the safe _ (underscore)
  785. * @param string $sId The ID to sanitize
  786. * @return string The sanitized ID
  787. */
  788. static public function GetSafeId($sId)
  789. {
  790. return str_replace(array(':', '[', ']', '+', '-'), '_', $sId);
  791. }
  792. }
  793. ?>