Advertisement
szoda

Untitled

Aug 15th, 2016
266
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 36.11 KB | None | 0 0
  1. <?php
  2. /**
  3. * @file
  4. * Functions that need to be loaded on every Drupal request.
  5. */
  6.  
  7. use Drupal\Component\Utility\Crypt;
  8. use Drupal\Component\Utility\Html;
  9. use Drupal\Component\Utility\SafeMarkup;
  10. use Drupal\Component\Utility\Unicode;
  11. use Drupal\Core\Logger\RfcLogLevel;
  12. use Drupal\Core\Render\Markup;
  13. use Drupal\Core\Session\AccountInterface;
  14. use Drupal\Core\Site\Settings;
  15. use Drupal\Core\Utility\Error;
  16.  
  17. /**
  18. * Minimum supported version of PHP.
  19. */
  20. const DRUPAL_MINIMUM_PHP = '5.5.9';
  21.  
  22. /**
  23. * Minimum recommended value of PHP memory_limit.
  24. *
  25. * 64M was chosen as a minimum requirement in order to allow for additional
  26. * contributed modules to be installed prior to hitting the limit. However,
  27. * 40M is the target for the Standard installation profile.
  28. */
  29. const DRUPAL_MINIMUM_PHP_MEMORY_LIMIT = '64M';
  30.  
  31. /**
  32. * Error reporting level: display no errors.
  33. */
  34. const ERROR_REPORTING_HIDE = 'hide';
  35.  
  36. /**
  37. * Error reporting level: display errors and warnings.
  38. */
  39. const ERROR_REPORTING_DISPLAY_SOME = 'some';
  40.  
  41. /**
  42. * Error reporting level: display all messages.
  43. */
  44. const ERROR_REPORTING_DISPLAY_ALL = 'all';
  45.  
  46. /**
  47. * Error reporting level: display all messages, plus backtrace information.
  48. */
  49. const ERROR_REPORTING_DISPLAY_VERBOSE = 'verbose';
  50.  
  51. /**
  52. * Role ID for anonymous users; should match what's in the "role" table.
  53. *
  54. * @deprecated in Drupal 8.0.0, will be removed before Drupal 9.0.0.
  55. * Use Drupal\Core\Session\AccountInterface::ANONYMOUS_ROLE or
  56. * \Drupal\user\RoleInterface::ANONYMOUS_ID instead.
  57. */
  58. const DRUPAL_ANONYMOUS_RID = AccountInterface::ANONYMOUS_ROLE;
  59.  
  60. /**
  61. * Role ID for authenticated users; should match what's in the "role" table.
  62. *
  63. * @deprecated in Drupal 8.0.0, will be removed before Drupal 9.0.0.
  64. * Use Drupal\Core\Session\AccountInterface::AUTHENTICATED_ROLE or
  65. * \Drupal\user\RoleInterface::AUTHENTICATED_ID instead.
  66. */
  67. const DRUPAL_AUTHENTICATED_RID = AccountInterface::AUTHENTICATED_ROLE;
  68.  
  69. /**
  70. * The maximum number of characters in a module or theme name.
  71. */
  72. const DRUPAL_EXTENSION_NAME_MAX_LENGTH = 50;
  73.  
  74. /**
  75. * Time of the current request in seconds elapsed since the Unix Epoch.
  76. *
  77. * This differs from $_SERVER['REQUEST_TIME'], which is stored as a float
  78. * since PHP 5.4.0. Float timestamps confuse most PHP functions
  79. * (including date_create()).
  80. *
  81. * @see http://php.net/manual/reserved.variables.server.php
  82. * @see http://php.net/manual/function.time.php
  83. */
  84. define('REQUEST_TIME', (int) $_SERVER['REQUEST_TIME']);
  85.  
  86. /**
  87. * Regular expression to match PHP function names.
  88. *
  89. * @see http://php.net/manual/language.functions.php
  90. */
  91. const DRUPAL_PHP_FUNCTION_PATTERN = '[a-zA-Z_\x7f-\xff][a-zA-Z0-9_\x7f-\xff]*';
  92.  
  93. /**
  94. * $config_directories key for active directory.
  95. *
  96. * @see config_get_config_directory()
  97. *
  98. * @deprecated in Drupal 8.0.x and will be removed before 9.0.0. Drupal core no
  99. * longer creates an active directory.
  100. */
  101. const CONFIG_ACTIVE_DIRECTORY = 'active';
  102.  
  103. /**
  104. * $config_directories key for sync directory.
  105. *
  106. * @see config_get_config_directory()
  107. */
  108. const CONFIG_SYNC_DIRECTORY = 'sync';
  109.  
  110. /**
  111. * $config_directories key for staging directory.
  112. *
  113. * @see config_get_config_directory()
  114. * @see CONFIG_SYNC_DIRECTORY
  115. *
  116. * @deprecated in Drupal 8.0.x and will be removed before 9.0.0. The staging
  117. * directory was renamed to sync.
  118. */
  119. const CONFIG_STAGING_DIRECTORY = 'staging';
  120.  
  121. /**
  122. * Defines the root directory of the Drupal installation.
  123. *
  124. * This strips two levels of directories off the current directory.
  125. */
  126. define('DRUPAL_ROOT', dirname(dirname(__DIR__)));
  127.  
  128. /**
  129. * Returns the path of a configuration directory.
  130. *
  131. * Configuration directories are configured using $config_directories in
  132. * settings.php.
  133. *
  134. * @param string $type
  135. * The type of config directory to return. Drupal core provides the
  136. * CONFIG_SYNC_DIRECTORY constant to access the sync directory.
  137. *
  138. * @return string
  139. * The configuration directory path.
  140. *
  141. * @throws \Exception
  142. */
  143. function config_get_config_directory($type) {
  144. global $config_directories;
  145.  
  146. // @todo Remove fallback in Drupal 9. https://www.drupal.org/node/2574943
  147. if ($type == CONFIG_SYNC_DIRECTORY && !isset($config_directories[CONFIG_SYNC_DIRECTORY]) && isset($config_directories[CONFIG_STAGING_DIRECTORY])) {
  148. $type = CONFIG_STAGING_DIRECTORY;
  149. }
  150.  
  151. if (!empty($config_directories[$type])) {
  152. return $config_directories[$type];
  153. }
  154. throw new \Exception("The configuration directory type '$type' does not exist");
  155. }
  156.  
  157. /**
  158. * Returns and optionally sets the filename for a system resource.
  159. *
  160. * The filename, whether provided, cached, or retrieved from the database, is
  161. * only returned if the file exists.
  162. *
  163. * This function plays a key role in allowing Drupal's resources (modules
  164. * and themes) to be located in different places depending on a site's
  165. * configuration. For example, a module 'foo' may legally be located
  166. * in any of these three places:
  167. *
  168. * core/modules/foo/foo.info.yml
  169. * modules/foo/foo.info.yml
  170. * sites/example.com/modules/foo/foo.info.yml
  171. *
  172. * Calling drupal_get_filename('module', 'foo') will give you one of
  173. * the above, depending on where the module is located.
  174. *
  175. * @param $type
  176. * The type of the item; one of 'core', 'profile', 'module', 'theme', or
  177. * 'theme_engine'.
  178. * @param $name
  179. * The name of the item for which the filename is requested. Ignored for
  180. * $type 'core'.
  181. * @param $filename
  182. * The filename of the item if it is to be set explicitly rather
  183. * than by consulting the database.
  184. *
  185. * @return
  186. * The filename of the requested item or NULL if the item is not found.
  187. */
  188. function drupal_get_filename($type, $name, $filename = NULL) {
  189. // The location of files will not change during the request, so do not use
  190. // drupal_static().
  191. static $files = array();
  192.  
  193. // Type 'core' only exists to simplify application-level logic; it always maps
  194. // to the /core directory, whereas $name is ignored. It is only requested via
  195. // drupal_get_path(). /core/core.info.yml does not exist, but is required
  196. // since drupal_get_path() returns the dirname() of the returned pathname.
  197. if ($type === 'core') {
  198. return 'core/core.info.yml';
  199. }
  200.  
  201. // Profiles are converted into modules in system_rebuild_module_data().
  202. // @todo Remove false-exposure of profiles as modules.
  203. if ($type == 'profile') {
  204. $type = 'module';
  205. }
  206. if (!isset($files[$type])) {
  207. $files[$type] = array();
  208. }
  209.  
  210. if (isset($filename)) {
  211. $files[$type][$name] = $filename;
  212. }
  213. elseif (!isset($files[$type][$name])) {
  214. // If the pathname of the requested extension is not known, try to retrieve
  215. // the list of extension pathnames from various providers, checking faster
  216. // providers first.
  217. // Retrieve the current module list (derived from the service container).
  218. if ($type == 'module' && \Drupal::hasService('module_handler')) {
  219. foreach (\Drupal::moduleHandler()->getModuleList() as $module_name => $module) {
  220. $files[$type][$module_name] = $module->getPathname();
  221. }
  222. }
  223. // If still unknown, retrieve the file list prepared in state by
  224. // system_rebuild_module_data() and
  225. // \Drupal\Core\Extension\ThemeHandlerInterface::rebuildThemeData().
  226. if (!isset($files[$type][$name]) && \Drupal::hasService('state')) {
  227. $files[$type] += \Drupal::state()->get('system.' . $type . '.files', array());
  228. }
  229. // If still unknown, create a user-level error message.
  230. if (!isset($files[$type][$name])) {
  231. trigger_error(SafeMarkup::format('The following @type is missing from the file system: @name', array('@type' => $type, '@name' => $name)), E_USER_WARNING);
  232. }
  233. }
  234.  
  235. if (isset($files[$type][$name])) {
  236. return $files[$type][$name];
  237. }
  238. }
  239.  
  240. /**
  241. * Returns the path to a system item (module, theme, etc.).
  242. *
  243. * @param $type
  244. * The type of the item; one of 'core', 'profile', 'module', 'theme', or
  245. * 'theme_engine'.
  246. * @param $name
  247. * The name of the item for which the path is requested. Ignored for
  248. * $type 'core'.
  249. *
  250. * @return
  251. * The path to the requested item or an empty string if the item is not found.
  252. */
  253. function drupal_get_path($type, $name) {
  254. return dirname(drupal_get_filename($type, $name));
  255. }
  256.  
  257. /**
  258. * Translates a string to the current language or to a given language.
  259. *
  260. * In order for strings to be localized, make them available in one of the ways
  261. * supported by the
  262. * @link https://www.drupal.org/node/322729 Localization API @endlink. When
  263. * possible, use the \Drupal\Core\StringTranslation\StringTranslationTrait
  264. * $this->t(). Otherwise create a new
  265. * \Drupal\Core\StringTranslation\TranslatableMarkup object directly.
  266. *
  267. * See \Drupal\Core\StringTranslation\TranslatableMarkup::__construct() for
  268. * important security information and usage guidelines.
  269. *
  270. * @param string $string
  271. * A string containing the English text to translate.
  272. * @param array $args
  273. * (optional) An associative array of replacements to make after translation.
  274. * Based on the first character of the key, the value is escaped and/or
  275. * themed. See
  276. * \Drupal\Component\Render\FormattableMarkup::placeholderFormat() for
  277. * details.
  278. * @param array $options
  279. * (optional) An associative array of additional options, with the following
  280. * elements:
  281. * - 'langcode' (defaults to the current language): A language code, to
  282. * translate to a language other than what is used to display the page.
  283. * - 'context' (defaults to the empty context): The context the source string
  284. * belongs to.
  285. *
  286. * @return \Drupal\Core\StringTranslation\TranslatableMarkup
  287. * An object that, when cast to a string, returns the translated string.
  288. *
  289. * @see \Drupal\Component\Render\FormattableMarkup::placeholderFormat()
  290. * @see \Drupal\Core\StringTranslation\StringTranslationTrait::t()
  291. * @see \Drupal\Core\StringTranslation\TranslatableMarkup::__construct()
  292. *
  293. * @ingroup sanitization
  294. */
  295. function t($string, array $args = array(), array $options = array()) {
  296. return \Drupal::translation()->translate($string, $args, $options);
  297. }
  298.  
  299. /**
  300. * Formats a string for HTML display by replacing variable placeholders.
  301. *
  302. * @see \Drupal\Component\Utility\SafeMarkup::format()
  303. * @see t()
  304. * @ingroup sanitization
  305. *
  306. * @deprecated in Drupal 8.0.0, will be removed before Drupal 9.0.0.
  307. * Use \Drupal\Component\Utility\SafeMarkup::format().
  308. */
  309. function format_string($string, array $args) {
  310. return SafeMarkup::format($string, $args);
  311. }
  312.  
  313. /**
  314. * Checks whether a string is valid UTF-8.
  315. *
  316. * All functions designed to filter input should use drupal_validate_utf8
  317. * to ensure they operate on valid UTF-8 strings to prevent bypass of the
  318. * filter.
  319. *
  320. * When text containing an invalid UTF-8 lead byte (0xC0 - 0xFF) is presented
  321. * as UTF-8 to Internet Explorer 6, the program may misinterpret subsequent
  322. * bytes. When these subsequent bytes are HTML control characters such as
  323. * quotes or angle brackets, parts of the text that were deemed safe by filters
  324. * end up in locations that are potentially unsafe; An onerror attribute that
  325. * is outside of a tag, and thus deemed safe by a filter, can be interpreted
  326. * by the browser as if it were inside the tag.
  327. *
  328. * The function does not return FALSE for strings containing character codes
  329. * above U+10FFFF, even though these are prohibited by RFC 3629.
  330. *
  331. * @param $text
  332. * The text to check.
  333. *
  334. * @return bool
  335. * TRUE if the text is valid UTF-8, FALSE if not.
  336. *
  337. * @see \Drupal\Component\Utility\Unicode::validateUtf8()
  338. *
  339. * @deprecated in Drupal 8.0.0, will be removed before Drupal 9.0.0.
  340. * Use \Drupal\Component\Utility\Unicode::validateUtf8().
  341. */
  342. function drupal_validate_utf8($text) {
  343. return Unicode::validateUtf8($text);
  344. }
  345.  
  346. /**
  347. * Logs an exception.
  348. *
  349. * This is a wrapper logging function which automatically decodes an exception.
  350. *
  351. * @param $type
  352. * The category to which this message belongs.
  353. * @param $exception
  354. * The exception that is going to be logged.
  355. * @param $message
  356. * The message to store in the log. If empty, a text that contains all useful
  357. * information about the passed-in exception is used.
  358. * @param $variables
  359. * Array of variables to replace in the message on display or
  360. * NULL if message is already translated or not possible to
  361. * translate.
  362. * @param $severity
  363. * The severity of the message, as per RFC 3164.
  364. * @param $link
  365. * A link to associate with the message.
  366. *
  367. * @see \Drupal\Core\Utility\Error::decodeException()
  368. */
  369. function watchdog_exception($type, Exception $exception, $message = NULL, $variables = array(), $severity = RfcLogLevel::ERROR, $link = NULL) {
  370.  
  371. // Use a default value if $message is not set.
  372. if (empty($message)) {
  373. $message = '%type: @message in %function (line %line of %file).';
  374. }
  375.  
  376. if ($link) {
  377. $variables['link'] = $link;
  378. }
  379.  
  380. $variables += Error::decodeException($exception);
  381.  
  382. \Drupal::logger($type)->log($severity, $message, $variables);
  383. }
  384.  
  385. /**
  386. * Sets a message to display to the user.
  387. *
  388. * Messages are stored in a session variable and displayed in the page template
  389. * via the $messages theme variable.
  390. *
  391. * Example usage:
  392. * @code
  393. * drupal_set_message(t('An error occurred and processing did not complete.'), 'error');
  394. * @endcode
  395. *
  396. * @param string|\Drupal\Component\Render\MarkupInterface $message
  397. * (optional) The translated message to be displayed to the user. For
  398. * consistency with other messages, it should begin with a capital letter and
  399. * end with a period.
  400. * @param string $type
  401. * (optional) The message's type. Defaults to 'status'. These values are
  402. * supported:
  403. * - 'status'
  404. * - 'warning'
  405. * - 'error'
  406. * @param bool $repeat
  407. * (optional) If this is FALSE and the message is already set, then the
  408. * message won't be repeated. Defaults to FALSE.
  409. *
  410. * @return array|null
  411. * A multidimensional array with keys corresponding to the set message types.
  412. * The indexed array values of each contain the set messages for that type,
  413. * and each message is an associative array with the following format:
  414. * - safe: Boolean indicating whether the message string has been marked as
  415. * safe. Non-safe strings will be escaped automatically.
  416. * - message: The message string.
  417. * So, the following is an example of the full return array structure:
  418. * @code
  419. * array(
  420. * 'status' => array(
  421. * array(
  422. * 'safe' => TRUE,
  423. * 'message' => 'A <em>safe</em> markup string.',
  424. * ),
  425. * array(
  426. * 'safe' => FALSE,
  427. * 'message' => "$arbitrary_user_input to escape.",
  428. * ),
  429. * ),
  430. * );
  431. * @endcode
  432. * If there are no messages set, the function returns NULL.
  433. *
  434. * @see drupal_get_messages()
  435. * @see status-messages.html.twig
  436. */
  437. function drupal_set_message($message = NULL, $type = 'status', $repeat = FALSE) {
  438. if (isset($message)) {
  439. if (!isset($_SESSION['messages'][$type])) {
  440. $_SESSION['messages'][$type] = array();
  441. }
  442.  
  443. // Convert strings which are safe to the simplest Markup objects.
  444. if (!($message instanceof Markup) && SafeMarkup::isSafe($message)) {
  445. $message = Markup::create((string) $message);
  446. }
  447.  
  448. // Do not use strict type checking so that equivalent string and
  449. // MarkupInterface objects are detected.
  450. if ($repeat || !in_array($message, $_SESSION['messages'][$type])) {
  451. $_SESSION['messages'][$type][] = $message;
  452. }
  453.  
  454. // Mark this page as being uncacheable.
  455. \Drupal::service('page_cache_kill_switch')->trigger();
  456. }
  457.  
  458. // Messages not set when DB connection fails.
  459. return isset($_SESSION['messages']) ? $_SESSION['messages'] : NULL;
  460. }
  461.  
  462. /**
  463. * Returns all messages that have been set with drupal_set_message().
  464. *
  465. * @param string $type
  466. * (optional) Limit the messages returned by type. Defaults to NULL, meaning
  467. * all types. These values are supported:
  468. * - NULL
  469. * - 'status'
  470. * - 'warning'
  471. * - 'error'
  472. * @param bool $clear_queue
  473. * (optional) If this is TRUE, the queue will be cleared of messages of the
  474. * type specified in the $type parameter. Otherwise the queue will be left
  475. * intact. Defaults to TRUE.
  476. *
  477. * @return array
  478. * An associative, nested array of messages grouped by message type, with
  479. * the top-level keys as the message type. The messages returned are
  480. * limited to the type specified in the $type parameter, if any. If there
  481. * are no messages of the specified type, an empty array is returned. See
  482. * drupal_set_message() for the array structure of individual messages.
  483. *
  484. * @see drupal_set_message()
  485. * @see status-messages.html.twig
  486. */
  487. function drupal_get_messages($type = NULL, $clear_queue = TRUE) {
  488. if ($messages = drupal_set_message()) {
  489. if ($type) {
  490. if ($clear_queue) {
  491. unset($_SESSION['messages'][$type]);
  492. }
  493. if (isset($messages[$type])) {
  494. return array($type => $messages[$type]);
  495. }
  496. }
  497. else {
  498. if ($clear_queue) {
  499. unset($_SESSION['messages']);
  500. }
  501. return $messages;
  502. }
  503. }
  504. return array();
  505. }
  506.  
  507. /**
  508. * Returns the time zone of the current user.
  509. */
  510. function drupal_get_user_timezone() {
  511. $user = \Drupal::currentUser();
  512. $config = \Drupal::config('system.date');
  513.  
  514. if ($user && $config->get('timezone.user.configurable') && $user->isAuthenticated() && $user->getTimezone()) {
  515. return $user->getTimezone();
  516. }
  517. else {
  518. // Ignore PHP strict notice if time zone has not yet been set in the php.ini
  519. // configuration.
  520. $config_data_default_timezone = $config->get('timezone.default');
  521. return !empty($config_data_default_timezone) ? $config_data_default_timezone : @date_default_timezone_get();
  522. }
  523. }
  524.  
  525. /**
  526. * Provides custom PHP error handling.
  527. *
  528. * @param $error_level
  529. * The level of the error raised.
  530. * @param $message
  531. * The error message.
  532. * @param $filename
  533. * The filename that the error was raised in.
  534. * @param $line
  535. * The line number the error was raised at.
  536. * @param $context
  537. * An array that points to the active symbol table at the point the error
  538. * occurred.
  539. */
  540. function _drupal_error_handler($error_level, $message, $filename, $line, $context) {
  541. require_once __DIR__ . '/errors.inc';
  542. _drupal_error_handler_real($error_level, $message, $filename, $line, $context);
  543. }
  544.  
  545. /**
  546. * Provides custom PHP exception handling.
  547. *
  548. * Uncaught exceptions are those not enclosed in a try/catch block. They are
  549. * always fatal: the execution of the script will stop as soon as the exception
  550. * handler exits.
  551. *
  552. * @param \Exception|\Throwable $exception
  553. * The exception object that was thrown.
  554. */
  555. function _drupal_exception_handler($exception) {
  556. require_once __DIR__ . '/errors.inc';
  557.  
  558. try {
  559. // Log the message to the watchdog and return an error page to the user.
  560. _drupal_log_error(Error::decodeException($exception), TRUE);
  561. }
  562. // PHP 7 introduces Throwable, which covers both Error and
  563. // Exception throwables.
  564. catch (\Throwable $error) {
  565. _drupal_exception_handler_additional($exception, $error);
  566. }
  567. // In order to be compatible with PHP 5 we also catch regular Exceptions.
  568. catch (\Exception $exception2) {
  569. _drupal_exception_handler_additional($exception, $exception2);
  570. }
  571. }
  572.  
  573. /**
  574. * Displays any additional errors caught while handling an exception.
  575. *
  576. * @param \Exception|\Throwable $exception
  577. * The first exception object that was thrown.
  578. * @param \Exception|\Throwable $exception2
  579. * The second exception object that was thrown.
  580. */
  581. function _drupal_exception_handler_additional($exception, $exception2) {
  582. // Another uncaught exception was thrown while handling the first one.
  583. // If we are displaying errors, then do so with no possibility of a further
  584. // uncaught exception being thrown.
  585. if (error_displayable()) {
  586. print '<h1>Additional uncaught exception thrown while handling exception.</h1>';
  587. print '<h2>Original</h2><p>' . Error::renderExceptionSafe($exception) . '</p>';
  588. print '<h2>Additional</h2><p>' . Error::renderExceptionSafe($exception2) . '</p><hr />';
  589. }
  590. }
  591.  
  592. /**
  593. * Returns the test prefix if this is an internal request from SimpleTest.
  594. *
  595. * @param string $new_prefix
  596. * Internal use only. A new prefix to be stored.
  597. *
  598. * @return string|FALSE
  599. * Either the simpletest prefix (the string "simpletest" followed by any
  600. * number of digits) or FALSE if the user agent does not contain a valid
  601. * HMAC and timestamp.
  602. */
  603. function drupal_valid_test_ua($new_prefix = NULL) {
  604. static $test_prefix;
  605.  
  606. if (isset($new_prefix)) {
  607. $test_prefix = $new_prefix;
  608. }
  609. if (isset($test_prefix)) {
  610. return $test_prefix;
  611. }
  612. // Unless the below User-Agent and HMAC validation succeeds, we are not in
  613. // a test environment.
  614. $test_prefix = FALSE;
  615.  
  616. // A valid Simpletest request will contain a hashed and salted authentication
  617. // code. Check if this code is present in a cookie or custom user agent
  618. // string.
  619. $http_user_agent = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : NULL;
  620. $user_agent = isset($_COOKIE['SIMPLETEST_USER_AGENT']) ? $_COOKIE['SIMPLETEST_USER_AGENT'] : $http_user_agent;
  621. if (isset($user_agent) && preg_match("/^(simpletest\d+);(.+);(.+);(.+)$/", $user_agent, $matches)) {
  622. list(, $prefix, $time, $salt, $hmac) = $matches;
  623. $check_string = $prefix . ';' . $time . ';' . $salt;
  624. // Read the hash salt prepared by drupal_generate_test_ua().
  625. // This function is called before settings.php is read and Drupal's error
  626. // handlers are set up. While Drupal's error handling may be properly
  627. // configured on production sites, the server's PHP error_reporting may not.
  628. // Ensure that no information leaks on production sites.
  629. $key_file = DRUPAL_ROOT . '/sites/simpletest/' . substr($prefix, 10) . '/.htkey';
  630. if (!is_readable($key_file)) {
  631. header($_SERVER['SERVER_PROTOCOL'] . ' 403 Forbidden');
  632. exit;
  633. }
  634. $private_key = file_get_contents($key_file);
  635. // The file properties add more entropy not easily accessible to others.
  636. $key = $private_key . filectime(__FILE__) . fileinode(__FILE__);
  637. $time_diff = REQUEST_TIME - $time;
  638. $test_hmac = Crypt::hmacBase64($check_string, $key);
  639. // Since we are making a local request a 5 second time window is allowed,
  640. // and the HMAC must match.
  641. if ($time_diff >= 0 && $time_diff <= 5 && $hmac === $test_hmac) {
  642. $test_prefix = $prefix;
  643. }
  644. }
  645. return $test_prefix;
  646. }
  647.  
  648. /**
  649. * Generates a user agent string with a HMAC and timestamp for simpletest.
  650. */
  651. function drupal_generate_test_ua($prefix) {
  652. static $key, $last_prefix;
  653.  
  654. if (!isset($key) || $last_prefix != $prefix) {
  655. $last_prefix = $prefix;
  656. $key_file = DRUPAL_ROOT . '/sites/simpletest/' . substr($prefix, 10) . '/.htkey';
  657. // When issuing an outbound HTTP client request from within an inbound test
  658. // request, then the outbound request has to use the same User-Agent header
  659. // as the inbound request. A newly generated private key for the same test
  660. // prefix would invalidate all subsequent inbound requests.
  661. // @see \Drupal\Core\Http\Plugin\SimpletestHttpRequestSubscriber
  662. if (DRUPAL_TEST_IN_CHILD_SITE && $parent_prefix = drupal_valid_test_ua()) {
  663. if ($parent_prefix != $prefix) {
  664. throw new \RuntimeException("Malformed User-Agent: Expected '$parent_prefix' but got '$prefix'.");
  665. }
  666. // If the file is not readable, a PHP warning is expected in this case.
  667. $private_key = file_get_contents($key_file);
  668. }
  669. else {
  670. // Generate and save a new hash salt for a test run.
  671. // Consumed by drupal_valid_test_ua() before settings.php is loaded.
  672. $private_key = Crypt::randomBytesBase64(55);
  673. file_put_contents($key_file, $private_key);
  674. }
  675. // The file properties add more entropy not easily accessible to others.
  676. $key = $private_key . filectime(__FILE__) . fileinode(__FILE__);
  677. }
  678. // Generate a moderately secure HMAC based on the database credentials.
  679. $salt = uniqid('', TRUE);
  680. $check_string = $prefix . ';' . time() . ';' . $salt;
  681. return $check_string . ';' . Crypt::hmacBase64($check_string, $key);
  682. }
  683.  
  684. /**
  685. * Enables use of the theme system without requiring database access.
  686. *
  687. * Loads and initializes the theme system for site installs, updates and when
  688. * the site is in maintenance mode. This also applies when the database fails.
  689. *
  690. * @see _drupal_maintenance_theme()
  691. */
  692. function drupal_maintenance_theme() {
  693. require_once __DIR__ . '/theme.maintenance.inc';
  694. _drupal_maintenance_theme();
  695. }
  696.  
  697. /**
  698. * Returns TRUE if a Drupal installation is currently being attempted.
  699. */
  700. function drupal_installation_attempted() {
  701. // This cannot rely on the MAINTENANCE_MODE constant, since that would prevent
  702. // tests from using the non-interactive installer, in which case Drupal
  703. // only happens to be installed within the same request, but subsequently
  704. // executed code does not involve the installer at all.
  705. // @see install_drupal()
  706. return isset($GLOBALS['install_state']) && empty($GLOBALS['install_state']['installation_finished']);
  707. }
  708.  
  709. /**
  710. * Gets the name of the currently active installation profile.
  711. *
  712. * When this function is called during Drupal's initial installation process,
  713. * the name of the profile that's about to be installed is stored in the global
  714. * installation state. At all other times, the "install_profile" setting will be
  715. * available in settings.php.
  716. *
  717. * @return string|null $profile
  718. * The name of the installation profile or NULL if no installation profile is
  719. * currently active. This is the case for example during the first steps of
  720. * the installer or during unit tests.
  721. */
  722. function drupal_get_profile() {
  723. global $install_state;
  724.  
  725. if (drupal_installation_attempted()) {
  726. // If the profile has been selected return it.
  727. if (isset($install_state['parameters']['profile'])) {
  728. $profile = $install_state['parameters']['profile'];
  729. }
  730. else {
  731. $profile = NULL;
  732. }
  733. }
  734. else {
  735. // Fall back to NULL, if there is no 'install_profile' setting.
  736. $profile = Settings::get('install_profile');
  737. }
  738.  
  739. return $profile;
  740. }
  741.  
  742. /**
  743. * Registers an additional namespace.
  744. *
  745. * @param string $name
  746. * The namespace component to register; e.g., 'node'.
  747. * @param string $path
  748. * The relative path to the Drupal component in the filesystem.
  749. */
  750. function drupal_classloader_register($name, $path) {
  751. $loader = \Drupal::service('class_loader');
  752. $loader->addPsr4('Drupal\\' . $name . '\\', \Drupal::root() . '/' . $path . '/src');
  753. }
  754.  
  755. /**
  756. * Provides central static variable storage.
  757. *
  758. * All functions requiring a static variable to persist or cache data within
  759. * a single page request are encouraged to use this function unless it is
  760. * absolutely certain that the static variable will not need to be reset during
  761. * the page request. By centralizing static variable storage through this
  762. * function, other functions can rely on a consistent API for resetting any
  763. * other function's static variables.
  764. *
  765. * Example:
  766. * @code
  767. * function example_list($field = 'default') {
  768. * $examples = &drupal_static(__FUNCTION__);
  769. * if (!isset($examples)) {
  770. * // If this function is being called for the first time after a reset,
  771. * // query the database and execute any other code needed to retrieve
  772. * // information.
  773. * ...
  774. * }
  775. * if (!isset($examples[$field])) {
  776. * // If this function is being called for the first time for a particular
  777. * // index field, then execute code needed to index the information already
  778. * // available in $examples by the desired field.
  779. * ...
  780. * }
  781. * // Subsequent invocations of this function for a particular index field
  782. * // skip the above two code blocks and quickly return the already indexed
  783. * // information.
  784. * return $examples[$field];
  785. * }
  786. * function examples_admin_overview() {
  787. * // When building the content for the overview page, make sure to get
  788. * // completely fresh information.
  789. * drupal_static_reset('example_list');
  790. * ...
  791. * }
  792. * @endcode
  793. *
  794. * In a few cases, a function can have certainty that there is no legitimate
  795. * use-case for resetting that function's static variable. This is rare,
  796. * because when writing a function, it's hard to forecast all the situations in
  797. * which it will be used. A guideline is that if a function's static variable
  798. * does not depend on any information outside of the function that might change
  799. * during a single page request, then it's ok to use the "static" keyword
  800. * instead of the drupal_static() function.
  801. *
  802. * Example:
  803. * @code
  804. * function mymodule_log_stream_handle($new_handle = NULL) {
  805. * static $handle;
  806. * if (isset($new_handle)) {
  807. * $handle = $new_handle;
  808. * }
  809. * return $handle;
  810. * }
  811. * @endcode
  812. *
  813. * In a few cases, a function needs a resettable static variable, but the
  814. * function is called many times (100+) during a single page request, so
  815. * every microsecond of execution time that can be removed from the function
  816. * counts. These functions can use a more cumbersome, but faster variant of
  817. * calling drupal_static(). It works by storing the reference returned by
  818. * drupal_static() in the calling function's own static variable, thereby
  819. * removing the need to call drupal_static() for each iteration of the function.
  820. * Conceptually, it replaces:
  821. * @code
  822. * $foo = &drupal_static(__FUNCTION__);
  823. * @endcode
  824. * with:
  825. * @code
  826. * // Unfortunately, this does not work.
  827. * static $foo = &drupal_static(__FUNCTION__);
  828. * @endcode
  829. * However, the above line of code does not work, because PHP only allows static
  830. * variables to be initialized by literal values, and does not allow static
  831. * variables to be assigned to references.
  832. * - http://php.net/manual/language.variables.scope.php#language.variables.scope.static
  833. * - http://php.net/manual/language.variables.scope.php#language.variables.scope.references
  834. * The example below shows the syntax needed to work around both limitations.
  835. * For benchmarks and more information, see https://www.drupal.org/node/619666.
  836. *
  837. * Example:
  838. * @code
  839. * function example_default_format_type() {
  840. * // Use the advanced drupal_static() pattern, since this is called very often.
  841. * static $drupal_static_fast;
  842. * if (!isset($drupal_static_fast)) {
  843. * $drupal_static_fast['format_type'] = &drupal_static(__FUNCTION__);
  844. * }
  845. * $format_type = &$drupal_static_fast['format_type'];
  846. * ...
  847. * }
  848. * @endcode
  849. *
  850. * @param $name
  851. * Globally unique name for the variable. For a function with only one static,
  852. * variable, the function name (e.g. via the PHP magic __FUNCTION__ constant)
  853. * is recommended. For a function with multiple static variables add a
  854. * distinguishing suffix to the function name for each one.
  855. * @param $default_value
  856. * Optional default value.
  857. * @param $reset
  858. * TRUE to reset one or all variables(s). This parameter is only used
  859. * internally and should not be passed in; use drupal_static_reset() instead.
  860. * (This function's return value should not be used when TRUE is passed in.)
  861. *
  862. * @return
  863. * Returns a variable by reference.
  864. *
  865. * @see drupal_static_reset()
  866. */
  867. function &drupal_static($name, $default_value = NULL, $reset = FALSE) {
  868. static $data = array(), $default = array();
  869. // First check if dealing with a previously defined static variable.
  870. if (isset($data[$name]) || array_key_exists($name, $data)) {
  871. // Non-NULL $name and both $data[$name] and $default[$name] statics exist.
  872. if ($reset) {
  873. // Reset pre-existing static variable to its default value.
  874. $data[$name] = $default[$name];
  875. }
  876. return $data[$name];
  877. }
  878. // Neither $data[$name] nor $default[$name] static variables exist.
  879. if (isset($name)) {
  880. if ($reset) {
  881. // Reset was called before a default is set and yet a variable must be
  882. // returned.
  883. return $data;
  884. }
  885. // First call with new non-NULL $name. Initialize a new static variable.
  886. $default[$name] = $data[$name] = $default_value;
  887. return $data[$name];
  888. }
  889. // Reset all: ($name == NULL). This needs to be done one at a time so that
  890. // references returned by earlier invocations of drupal_static() also get
  891. // reset.
  892. foreach ($default as $name => $value) {
  893. $data[$name] = $value;
  894. }
  895. // As the function returns a reference, the return should always be a
  896. // variable.
  897. return $data;
  898. }
  899.  
  900. /**
  901. * Resets one or all centrally stored static variable(s).
  902. *
  903. * @param $name
  904. * Name of the static variable to reset. Omit to reset all variables.
  905. * Resetting all variables should only be used, for example, for running
  906. * unit tests with a clean environment.
  907. */
  908. function drupal_static_reset($name = NULL) {
  909. drupal_static($name, NULL, TRUE);
  910. }
  911.  
  912. /**
  913. * Formats text for emphasized display in a placeholder inside a sentence.
  914. *
  915. * @deprecated in Drupal 8.0.0, will be removed before Drupal 9.0.0. Use
  916. * \Drupal\Component\Utility\SafeMarkup::format() or Twig's "placeholder"
  917. * filter instead. Note this method should not be used to simply emphasize a
  918. * string and therefore has few valid use-cases. Note also, that this method
  919. * does not mark the string as safe.
  920. *
  921. * @see \Drupal\Component\Utility\SafeMarkup::format()
  922. */
  923. function drupal_placeholder($text) {
  924. return '<em class="placeholder">' . Html::escape($text) . '</em>';
  925. }
  926.  
  927. /**
  928. * Registers a function for execution on shutdown.
  929. *
  930. * Wrapper for register_shutdown_function() that catches thrown exceptions to
  931. * avoid "Exception thrown without a stack frame in Unknown".
  932. *
  933. * @param $callback
  934. * The shutdown function to register.
  935. * @param ...
  936. * Additional arguments to pass to the shutdown function.
  937. *
  938. * @return
  939. * Array of shutdown functions to be executed.
  940. *
  941. * @see register_shutdown_function()
  942. * @ingroup php_wrappers
  943. */
  944. function &drupal_register_shutdown_function($callback = NULL) {
  945. // We cannot use drupal_static() here because the static cache is reset during
  946. // batch processing, which breaks batch handling.
  947. static $callbacks = array();
  948.  
  949. if (isset($callback)) {
  950. // Only register the internal shutdown function once.
  951. if (empty($callbacks)) {
  952. register_shutdown_function('_drupal_shutdown_function');
  953. }
  954. $args = func_get_args();
  955. // Remove $callback from the arguments.
  956. unset($args[0]);
  957. // Save callback and arguments
  958. $callbacks[] = array('callback' => $callback, 'arguments' => $args);
  959. }
  960. return $callbacks;
  961. }
  962.  
  963. /**
  964. * Executes registered shutdown functions.
  965. */
  966. function _drupal_shutdown_function() {
  967. $callbacks = &drupal_register_shutdown_function();
  968.  
  969. // Set the CWD to DRUPAL_ROOT as it is not guaranteed to be the same as it
  970. // was in the normal context of execution.
  971. chdir(DRUPAL_ROOT);
  972.  
  973. try {
  974. while (list($key, $callback) = each($callbacks)) {
  975. call_user_func_array($callback['callback'], $callback['arguments']);
  976. }
  977. }
  978. // PHP 7 introduces Throwable, which covers both Error and
  979. // Exception throwables.
  980. catch (\Throwable $error) {
  981. _drupal_shutdown_function_handle_exception($error);
  982. }
  983. // In order to be compatible with PHP 5 we also catch regular Exceptions.
  984. catch (\Exception $exception) {
  985. _drupal_shutdown_function_handle_exception($exception);
  986. }
  987. }
  988.  
  989. /**
  990. * Displays and logs any errors that may happen during shutdown.
  991. *
  992. * @param \Exception|\Throwable $exception
  993. * The exception object that was thrown.
  994. *
  995. * @see _drupal_shutdown_function()
  996. */
  997. function _drupal_shutdown_function_handle_exception($exception) {
  998. // If using PHP-FPM then fastcgi_finish_request() will have been fired
  999. // preventing further output to the browser.
  1000. if (!function_exists('fastcgi_finish_request')) {
  1001. // If we are displaying errors, then do so with no possibility of a
  1002. // further uncaught exception being thrown.
  1003. require_once __DIR__ . '/errors.inc';
  1004. if (error_displayable()) {
  1005. print '<h1>Uncaught exception thrown in shutdown function.</h1>';
  1006. print '<p>' . Error::renderExceptionSafe($exception) . '</p><hr />';
  1007. }
  1008. }
  1009. error_log($exception);
  1010. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement