Subversion Repositories SmartDukaan

<?php
/**
 * Cookie Component
 *
 * CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
 * Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
 *
 * Licensed under The MIT License
 * For full copyright and license information, please see the LICENSE.txt
 * Redistributions of files must retain the above copyright notice.
 *
 * @copyright     Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
 * @link          http://cakephp.org CakePHP(tm) Project
 * @package       Cake.Controller.Component
 * @since         CakePHP(tm) v 1.2.0.4213
 * @license       http://www.opensource.org/licenses/mit-license.php MIT License
 */

App::uses('Component', 'Controller');
App::uses('Security', 'Utility');
App::uses('Hash', 'Utility');

/**
 * Cookie Component.
 *
 * Cookie handling for the controller.
 *
 * @package       Cake.Controller.Component
 * @link http://book.cakephp.org/2.0/en/core-libraries/components/cookie.html
 *
 */
class CookieComponent extends Component {

/**
 * The name of the cookie.
 *
 * Overridden with the controller beforeFilter();
 * $this->Cookie->name = 'CookieName';
 *
 * @var string
 */
        public $name = 'CakeCookie';

/**
 * The time a cookie will remain valid.
 *
 * Can be either integer Unix timestamp or a date string.
 *
 * Overridden with the controller beforeFilter();
 * $this->Cookie->time = '5 Days';
 *
 * @var mixed
 */
        public $time = null;

/**
 * Cookie path.
 *
 * Overridden with the controller beforeFilter();
 * $this->Cookie->path = '/';
 *
 * The path on the server in which the cookie will be available on.
 * If public $cookiePath is set to '/foo/', the cookie will only be available
 * within the /foo/ directory and all sub-directories such as /foo/bar/ of domain.
 * The default value is the entire domain.
 *
 * @var string
 */
        public $path = '/';

/**
 * Domain path.
 *
 * The domain that the cookie is available.
 *
 * Overridden with the controller beforeFilter();
 * $this->Cookie->domain = '.example.com';
 *
 * To make the cookie available on all subdomains of example.com.
 * Set $this->Cookie->domain = '.example.com'; in your controller beforeFilter
 *
 * @var string
 */
        public $domain = '';

/**
 * Secure HTTPS only cookie.
 *
 * Overridden with the controller beforeFilter();
 * $this->Cookie->secure = true;
 *
 * Indicates that the cookie should only be transmitted over a secure HTTPS connection.
 * When set to true, the cookie will only be set if a secure connection exists.
 *
 * @var bool
 */
        public $secure = false;

/**
 * Encryption key.
 *
 * Overridden with the controller beforeFilter();
 * $this->Cookie->key = 'SomeRandomString';
 *
 * @var string
 */
        public $key = null;

/**
 * HTTP only cookie
 *
 * Set to true to make HTTP only cookies. Cookies that are HTTP only
 * are not accessible in JavaScript.
 *
 * @var bool
 */
        public $httpOnly = false;

/**
 * Values stored in the cookie.
 *
 * Accessed in the controller using $this->Cookie->read('Name.key');
 *
 * @see CookieComponent::read();
 * @var string
 */
        protected $_values = array();

/**
 * Type of encryption to use.
 *
 * Currently two methods are available: cipher and rijndael
 * Defaults to Security::cipher(). Cipher is horribly insecure and only
 * the default because of backwards compatibility. In new applications you should
 * always change this to 'aes' or 'rijndael'.
 *
 * @var string
 */
        protected $_type = 'cipher';

/**
 * Used to reset cookie time if $expire is passed to CookieComponent::write()
 *
 * @var string
 */
        protected $_reset = null;

/**
 * Expire time of the cookie
 *
 * This is controlled by CookieComponent::time;
 *
 * @var string
 */
        protected $_expires = 0;

/**
 * A reference to the Controller's CakeResponse object
 *
 * @var CakeResponse
 */
        protected $_response = null;

/**
 * Constructor
 *
 * @param ComponentCollection $collection A ComponentCollection for this component
 * @param array $settings Array of settings.
 */
        public function __construct(ComponentCollection $collection, $settings = array()) {
                $this->key = Configure::read('Security.salt');
                parent::__construct($collection, $settings);
                if (isset($this->time)) {
                        $this->_expire($this->time);
                }

                $controller = $collection->getController();
                if ($controller && isset($controller->response)) {
                        $this->_response = $controller->response;
                } else {
                        $this->_response = new CakeResponse();
                }
        }

/**
 * Start CookieComponent for use in the controller
 *
 * @param Controller $controller Controller instance.
 * @return void
 */
        public function startup(Controller $controller) {
                $this->_expire($this->time);

                $this->_values[$this->name] = array();
        }

/**
 * Write a value to the $_COOKIE[$key];
 *
 * Optional [Name.], required key, optional $value, optional $encrypt, optional $expires
 * $this->Cookie->write('[Name.]key, $value);
 *
 * By default all values are encrypted.
 * You must pass $encrypt false to store values in clear test
 *
 * You must use this method before any output is sent to the browser.
 * Failure to do so will result in header already sent errors.
 *
 * @param string|array $key Key for the value
 * @param mixed $value Value
 * @param bool $encrypt Set to true to encrypt value, false otherwise
 * @param int|string $expires Can be either the number of seconds until a cookie
 *   expires, or a strtotime compatible time offset.
 * @return void
 * @link http://book.cakephp.org/2.0/en/core-libraries/components/cookie.html#CookieComponent::write
 */
        public function write($key, $value = null, $encrypt = true, $expires = null) {
                if (empty($this->_values[$this->name])) {
                        $this->read();
                }

                if ($encrypt === null) {
                        $encrypt = true;
                }
                $this->_encrypted = $encrypt;
                $this->_expire($expires);

                if (!is_array($key)) {
                        $key = array($key => $value);
                }

                foreach ($key as $name => $value) {
                        $names = array($name);
                        if (strpos($name, '.') !== false) {
                                $names = explode('.', $name, 2);
                        }
                        $firstName = $names[0];
                        $isMultiValue = (is_array($value) || count($names) > 1);

                        if (!isset($this->_values[$this->name][$firstName]) && $isMultiValue) {
                                $this->_values[$this->name][$firstName] = array();
                        }

                        if (count($names) > 1) {
                                $this->_values[$this->name][$firstName] = Hash::insert(
                                        $this->_values[$this->name][$firstName],
                                        $names[1],
                                        $value
                                );
                        } else {
                                $this->_values[$this->name][$firstName] = $value;
                        }
                        $this->_write('[' . $firstName . ']', $this->_values[$this->name][$firstName]);
                }
                $this->_encrypted = true;
        }

/**
 * Read the value of the $_COOKIE[$key];
 *
 * Optional [Name.], required key
 * $this->Cookie->read(Name.key);
 *
 * @param string $key Key of the value to be obtained. If none specified, obtain map key => values
 * @return string|null Value for specified key
 * @link http://book.cakephp.org/2.0/en/core-libraries/components/cookie.html#CookieComponent::read
 */
        public function read($key = null) {
                if (empty($this->_values[$this->name]) && isset($_COOKIE[$this->name])) {
                        $this->_values[$this->name] = $this->_decrypt($_COOKIE[$this->name]);
                }
                if (empty($this->_values[$this->name])) {
                        $this->_values[$this->name] = array();
                }
                if ($key === null) {
                        return $this->_values[$this->name];
                }

                if (strpos($key, '.') !== false) {
                        $names = explode('.', $key, 2);
                        $key = $names[0];
                }
                if (!isset($this->_values[$this->name][$key])) {
                        return null;
                }

                if (!empty($names[1]) && is_array($this->_values[$this->name][$key])) {
                        return Hash::get($this->_values[$this->name][$key], $names[1]);
                }
                return $this->_values[$this->name][$key];
        }

/**
 * Returns true if given variable is set in cookie.
 *
 * @param string $key Variable name to check for
 * @return bool True if variable is there
 */
        public function check($key = null) {
                if (empty($key)) {
                        return false;
                }
                return $this->read($key) !== null;
        }

/**
 * Delete a cookie value
 *
 * Optional [Name.], required key
 * $this->Cookie->delete('Name.key);
 *
 * You must use this method before any output is sent to the browser.
 * Failure to do so will result in header already sent errors.
 *
 * This method will delete both the top level and 2nd level cookies set.
 * For example assuming that $name = App, deleting `User` will delete
 * both `App[User]` and any other cookie values like `App[User][email]`
 * This is done to clean up cookie storage from before 2.4.3, where cookies
 * were stored inconsistently.
 *
 * @param string $key Key of the value to be deleted
 * @return void
 * @link http://book.cakephp.org/2.0/en/core-libraries/components/cookie.html#CookieComponent::delete
 */
        public function delete($key) {
                if (empty($this->_values[$this->name])) {
                        $this->read();
                }
                if (strpos($key, '.') === false) {
                        if (isset($this->_values[$this->name][$key]) && is_array($this->_values[$this->name][$key])) {
                                foreach ($this->_values[$this->name][$key] as $idx => $val) {
                                        $this->_delete("[$key][$idx]");
                                }
                        }
                        $this->_delete("[$key]");
                        unset($this->_values[$this->name][$key]);
                        return;
                }
                $names = explode('.', $key, 2);
                if (isset($this->_values[$this->name][$names[0]])) {
                        $this->_values[$this->name][$names[0]] = Hash::remove($this->_values[$this->name][$names[0]], $names[1]);
                }
                $this->_delete('[' . implode('][', $names) . ']');
        }

/**
 * Destroy current cookie
 *
 * You must use this method before any output is sent to the browser.
 * Failure to do so will result in header already sent errors.
 *
 * @return void
 * @link http://book.cakephp.org/2.0/en/core-libraries/components/cookie.html#CookieComponent::destroy
 */
        public function destroy() {
                if (isset($_COOKIE[$this->name])) {
                        $this->_values[$this->name] = $this->_decrypt($_COOKIE[$this->name]);
                }

                foreach ($this->_values[$this->name] as $name => $value) {
                        if (is_array($value)) {
                                foreach ($value as $key => $val) {
                                        unset($this->_values[$this->name][$name][$key]);
                                        $this->_delete("[$name][$key]");
                                }
                        }
                        unset($this->_values[$this->name][$name]);
                        $this->_delete("[$name]");
                }
        }

/**
 * Will allow overriding default encryption method. Use this method
 * in ex: AppController::beforeFilter() before you have read or
 * written any cookies.
 *
 * @param string $type Encryption method
 * @return void
 */
        public function type($type = 'cipher') {
                $availableTypes = array(
                        'cipher',
                        'rijndael',
                        'aes'
                );
                if (!in_array($type, $availableTypes)) {
                        trigger_error(__d('cake_dev', 'You must use cipher, rijndael or aes for cookie encryption type'), E_USER_WARNING);
                        $type = 'cipher';
                }
                $this->_type = $type;
        }

/**
 * Set the expire time for a session variable.
 *
 * Creates a new expire time for a session variable.
 * $expire can be either integer Unix timestamp or a date string.
 *
 * Used by write()
 * CookieComponent::write(string, string, boolean, 8400);
 * CookieComponent::write(string, string, boolean, '5 Days');
 *
 * @param int|string $expires Can be either Unix timestamp, or date string
 * @return int Unix timestamp
 */
        protected function _expire($expires = null) {
                if ($expires === null) {
                        return $this->_expires;
                }
                $this->_reset = $this->_expires;
                if (!$expires) {
                        return $this->_expires = 0;
                }
                $now = new DateTime();

                if (is_int($expires) || is_numeric($expires)) {
                        return $this->_expires = $now->format('U') + (int)$expires;
                }
                $now->modify($expires);
                return $this->_expires = $now->format('U');
        }

/**
 * Set cookie
 *
 * @param string $name Name for cookie
 * @param string $value Value for cookie
 * @return void
 */
        protected function _write($name, $value) {
                $this->_response->cookie(array(
                        'name' => $this->name . $name,
                        'value' => $this->_encrypt($value),
                        'expire' => $this->_expires,
                        'path' => $this->path,
                        'domain' => $this->domain,
                        'secure' => $this->secure,
                        'httpOnly' => $this->httpOnly
                ));

                if (!empty($this->_reset)) {
                        $this->_expires = $this->_reset;
                        $this->_reset = null;
                }
        }

/**
 * Sets a cookie expire time to remove cookie value
 *
 * @param string $name Name of cookie
 * @return void
 */
        protected function _delete($name) {
                $this->_response->cookie(array(
                        'name' => $this->name . $name,
                        'value' => '',
                        'expire' => time() - 42000,
                        'path' => $this->path,
                        'domain' => $this->domain,
                        'secure' => $this->secure,
                        'httpOnly' => $this->httpOnly
                ));
        }

/**
 * Encrypts $value using public $type method in Security class
 *
 * @param string $value Value to encrypt
 * @return string Encoded values
 */
        protected function _encrypt($value) {
                if (is_array($value)) {
                        $value = $this->_implode($value);
                }
                if (!$this->_encrypted) {
                        return $value;
                }
                $prefix = "Q2FrZQ==.";
                if ($this->_type === 'rijndael') {
                        $cipher = Security::rijndael($value, $this->key, 'encrypt');
                }
                if ($this->_type === 'cipher') {
                        $cipher = Security::cipher($value, $this->key);
                }
                if ($this->_type === 'aes') {
                        $cipher = Security::encrypt($value, $this->key);
                }
                return $prefix . base64_encode($cipher);
        }

/**
 * Decrypts $value using public $type method in Security class
 *
 * @param array $values Values to decrypt
 * @return string decrypted string
 */
        protected function _decrypt($values) {
                $decrypted = array();
                $type = $this->_type;

                foreach ((array)$values as $name => $value) {
                        if (is_array($value)) {
                                foreach ($value as $key => $val) {
                                        $decrypted[$name][$key] = $this->_decode($val);
                                }
                        } else {
                                $decrypted[$name] = $this->_decode($value);
                        }
                }
                return $decrypted;
        }

/**
 * Decodes and decrypts a single value.
 *
 * @param string $value The value to decode & decrypt.
 * @return string Decoded value.
 */
        protected function _decode($value) {
                $prefix = 'Q2FrZQ==.';
                $pos = strpos($value, $prefix);
                if ($pos === false) {
                        return $this->_explode($value);
                }
                $value = base64_decode(substr($value, strlen($prefix)));
                if ($this->_type === 'rijndael') {
                        $plain = Security::rijndael($value, $this->key, 'decrypt');
                }
                if ($this->_type === 'cipher') {
                        $plain = Security::cipher($value, $this->key);
                }
                if ($this->_type === 'aes') {
                        $plain = Security::decrypt($value, $this->key);
                }
                return $this->_explode($plain);
        }

/**
 * Implode method to keep keys are multidimensional arrays
 *
 * @param array $array Map of key and values
 * @return string A json encoded string.
 */
        protected function _implode(array $array) {
                return json_encode($array);
        }

/**
 * Explode method to return array from string set in CookieComponent::_implode()
 * Maintains reading backwards compatibility with 1.x CookieComponent::_implode().
 *
 * @param string $string A string containing JSON encoded data, or a bare string.
 * @return array Map of key and values
 */
        protected function _explode($string) {
                $first = substr($string, 0, 1);
                if ($first === '{' || $first === '[') {
                        $ret = json_decode($string, true);
                        return ($ret !== null) ? $ret : $string;
                }
                $array = array();
                foreach (explode(',', $string) as $pair) {
                        $key = explode('|', $pair);
                        if (!isset($key[1])) {
                                return $key[0];
                        }
                        $array[$key[0]] = $key[1];
                }
                return $array;
        }
}