116 lines
3.0 KiB
PHP
116 lines
3.0 KiB
PHP
|
<?php if(count(get_included_files()) ==1) exit("Direct access not permitted.");
|
||
|
|
|
||
|
|
require_once "website.php";
|
||
|
|
require_once "utils.php";
|
||
|
|
|
||
|
|
class RuleEngine
|
||
|
|
{
|
||
|
|
/**
|
||
|
|
* @param Website $app
|
||
|
|
* @param array $urlConfig
|
||
|
|
* @return URLRoute
|
||
|
|
*/
|
||
|
|
public static function findRoute(Website $app, array $urlConfig): URLRoute
|
||
|
|
{
|
||
|
|
if ($app->isProd())
|
||
|
|
$requri = $_SERVER['REQUEST_URI'];
|
||
|
|
else
|
||
|
|
$requri = isset($_SERVER['REQUEST_URI']) ? $_SERVER['REQUEST_URI'] : 'localhost:80/';
|
||
|
|
|
||
|
|
$parse = parse_url($requri);
|
||
|
|
|
||
|
|
$path = isset($parse['path']) ? $parse['path'] : '';
|
||
|
|
$pathparts = preg_split('@/@', $path, NULL, PREG_SPLIT_NO_EMPTY);
|
||
|
|
$partcount = count($pathparts);
|
||
|
|
|
||
|
|
foreach ($urlConfig as $rule)
|
||
|
|
{
|
||
|
|
$route = self::testRule($app, $rule, $requri, $pathparts, $partcount);
|
||
|
|
if ($route === null) continue;
|
||
|
|
|
||
|
|
if ($app->getCurrentRights() >= $route->minimal_access_rights) return $route;
|
||
|
|
|
||
|
|
if ($app->isLoggedIn()) return URLRoute::getInsufficentRightsRoute($requri);
|
||
|
|
|
||
|
|
if (!$app->isLoggedIn()) return URLRoute::getLoginRoute($route, $requri);
|
||
|
|
}
|
||
|
|
|
||
|
|
return URLRoute::getNotFoundRoute($requri);
|
||
|
|
}
|
||
|
|
|
||
|
|
private static function testRule(Website $app, array $rule, string $requri, array $pathparts, int $partcount)
|
||
|
|
{
|
||
|
|
if ($partcount !== count($rule['url'])) return null;
|
||
|
|
|
||
|
|
$urlparams = [];
|
||
|
|
|
||
|
|
$match = true;
|
||
|
|
for($i = 0; $i < $partcount; $i++)
|
||
|
|
{
|
||
|
|
$comp = $rule['url'][$i];
|
||
|
|
if (startsWith($comp, '?{') && endsWith($comp, '}'))
|
||
|
|
{
|
||
|
|
$ident = substr($comp, 2, strlen($comp)-3);
|
||
|
|
$urlparams[$ident] = $pathparts[$i];
|
||
|
|
}
|
||
|
|
else if ($comp === '*')
|
||
|
|
{
|
||
|
|
if (!isset($urlparams['*'])) $urlparams['*'] = [];
|
||
|
|
$urlparams['*'] []= $pathparts[$i];
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
if (strtolower($comp) !== strtolower($pathparts[$i])) { $match = false; break; }
|
||
|
|
}
|
||
|
|
}
|
||
|
|
if (!$match) return null;
|
||
|
|
|
||
|
|
$route = new URLRoute($rule['target'], $requri);
|
||
|
|
|
||
|
|
foreach($rule['parameter'] as $optname => $optvalue)
|
||
|
|
{
|
||
|
|
$value = $optvalue;
|
||
|
|
|
||
|
|
if ($value === '%GET%')
|
||
|
|
{
|
||
|
|
if (!isset($_GET[$optname])) { $match = false; break; }
|
||
|
|
$value = $_GET[$optname];
|
||
|
|
}
|
||
|
|
else if ($value === '%POST%')
|
||
|
|
{
|
||
|
|
if (!isset($_POST[$optname])) { $match = false; break; }
|
||
|
|
$value = $_POST[$optname];
|
||
|
|
}
|
||
|
|
else if ($value === '%URL%')
|
||
|
|
{
|
||
|
|
if (!isset($urlparams[$optname])) { $match = false; break; }
|
||
|
|
$value = urldecode($urlparams[$optname]);
|
||
|
|
}
|
||
|
|
|
||
|
|
$route->parameter[strtolower($optname)] = $value;
|
||
|
|
}
|
||
|
|
if (!$match) return null;
|
||
|
|
|
||
|
|
$ctrlOpt = $rule['options'];
|
||
|
|
|
||
|
|
if (in_array('disabled', $ctrlOpt)) return null;
|
||
|
|
if (in_array('api', $ctrlOpt)) $route->isAPI = true;
|
||
|
|
|
||
|
|
if (isset($ctrlOpt['method']) && $_SERVER["REQUEST_METHOD"] !== $ctrlOpt['method']) return null;
|
||
|
|
|
||
|
|
$route->minimal_access_rights = (($rule['rights']===null) ? 0 : $rule['rights']);
|
||
|
|
|
||
|
|
if ($app->isProd() && $app->config->app_enforce_https && isHTTPRequest() && !in_array('http', $ctrlOpt))
|
||
|
|
{
|
||
|
|
// enforce https
|
||
|
|
$redirect = 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
|
||
|
|
ob_end_clean();
|
||
|
|
header('HTTP/1.1 301 Moved Permanently');
|
||
|
|
header('Location: ' . $redirect);
|
||
|
|
exit();
|
||
|
|
}
|
||
|
|
|
||
|
|
return $route;
|
||
|
|
}
|
||
|
|
}
|