class.ilWebAccessCheckerDelivery.php

Go to the documentation of this file.

<?php
// declare(strict_types=1);
 
require_once('./Services/WebAccessChecker/classes/class.ilWebAccessChecker.php');
require_once('./Services/FileDelivery/classes/Delivery.php');
require_once('./Services/FileDelivery/classes/class.ilFileDelivery.php');
 
use ILIAS\FileDelivery\Delivery;
use ILIAS\HTTP\Cookies\CookieFactory;
use ILIAS\HTTP\GlobalHttpState;
 
class ilWebAccessCheckerDelivery
{
 
    private $ilWebAccessChecker = null;
    private $http;
 
 
    public static function run(GlobalHttpState $httpState, CookieFactory $cookieFactory)
    {
        $obj = new self($httpState, $cookieFactory);
        $obj->handleRequest();
    }
 
 
    public function __construct(GlobalHttpState $httpState, CookieFactory $cookieFactory)
    {
        $this->ilWebAccessChecker = new ilWebAccessChecker($httpState, $cookieFactory);
        $this->http = $httpState;
    }
 
 
    protected function handleRequest()
    {
        // Set errorreporting
        ilInitialisation::handleErrorReporting();
        $queries = $this->http->request()->getQueryParams();
 
        // Set customizing
        if (isset($queries[ilWebAccessChecker::DISPOSITION])) {
            $this->ilWebAccessChecker->setDisposition($queries[ilWebAccessChecker::DISPOSITION]);
        }
        if (isset($queries[ilWebAccessChecker::STATUS_CODE])) {
            $this->ilWebAccessChecker->setSendStatusCode($queries[ilWebAccessChecker::STATUS_CODE]);
        }
        if (isset($queries[ilWebAccessChecker::REVALIDATE])) {
            $this->ilWebAccessChecker->setRevalidateFolderTokens($queries[ilWebAccessChecker::REVALIDATE]);
        }
 
        // Check if File can be delivered
        try {
            if ($this->ilWebAccessChecker->check()) {
                $this->deliver();
            } else {
                $this->deny();
            }
        } catch (ilWACException $e) {
            switch ($e->getCode()) {
                case ilWACException::ACCESS_DENIED:
                case ilWACException::ACCESS_DENIED_NO_PUB:
                case ilWACException::ACCESS_DENIED_NO_LOGIN:
                    $this->handleAccessErrors($e);
                    break;
                case ilWACException::ACCESS_WITHOUT_CHECK:
                case ilWACException::INITIALISATION_FAILED:
                case ilWACException::NO_CHECKING_INSTANCE:
                default:
                    $this->handleErrors($e);
                    break;
            }
        }
    }
 
 
    protected function deny()
    {
        if (!$this->ilWebAccessChecker->isChecked()) {
            throw new ilWACException(ilWACException::ACCESS_WITHOUT_CHECK);
        }
        throw new ilWACException(ilWACException::ACCESS_DENIED);
    }
 
 
    protected function deliverDummyImage()
    {
        $ilFileDelivery = new Delivery('./Services/WebAccessChecker/templates/images/access_denied.png', $this->http);
        $ilFileDelivery->setDisposition($this->ilWebAccessChecker->getDisposition());
        $ilFileDelivery->deliver();
    }
 
 
    protected function deliverDummyVideo()
    {
        $ilFileDelivery = new Delivery('./Services/WebAccessChecker/templates/images/access_denied.mp4', $this->http);
        $ilFileDelivery->setDisposition($this->ilWebAccessChecker->getDisposition());
        $ilFileDelivery->stream();
    }
 
 
    protected function handleAccessErrors(ilWACException $e)
    {
 
        //1.5.2017 Http code needs to be 200 because mod_xsendfile ignores the response with an 401 code. (possible leak of web path via xsendfile header)
        $response = $this->http
            ->response()
            ->withStatus(200);
 
        $this->http->saveResponse($response);
 
        if ($this->ilWebAccessChecker->getPathObject()->isImage()) {
            $this->deliverDummyImage();
        }
        if ($this->ilWebAccessChecker->getPathObject()->isVideo()) {
            $this->deliverDummyVideo();
        }
 
        $this->ilWebAccessChecker->initILIAS();
    }
 
 
    protected function handleErrors(ilWACException $e)
    {
        $response = $this->http->response()
            ->withStatus(500);
 
 
        $stream = $response->getBody();
        $stream->write($e->getMessage());
 
        $this->http->saveResponse($response);
    }
 
 
    protected function deliver()
    {
        if (!$this->ilWebAccessChecker->isChecked()) {
            throw new ilWACException(ilWACException::ACCESS_WITHOUT_CHECK);
        }
 
        $ilFileDelivery = new Delivery($this->ilWebAccessChecker->getPathObject()->getCleanURLdecodedPath(), $this->http);
        $ilFileDelivery->setCache(true);
        $ilFileDelivery->setDisposition($this->ilWebAccessChecker->getDisposition());
        if ($this->ilWebAccessChecker->getPathObject()->isStreamable()) { // fixed 0016468
            $ilFileDelivery->stream();
        } else {
            $ilFileDelivery->deliver();
        }
    }
}