rpicms

SessionCookie.php (5919B)

---

 <?php
 /**
  * Slim - a micro PHP 5 framework
  *
  * @author      Josh Lockhart <info@slimframework.com>
  * @copyright   2011 Josh Lockhart
  * @link        http://www.slimframework.com
  * @license     http://www.slimframework.com/license
  * @version     2.4.2
  * @package     Slim
  *
  * MIT LICENSE
  *
  * Permission is hereby granted, free of charge, to any person obtaining
  * a copy of this software and associated documentation files (the
  * "Software"), to deal in the Software without restriction, including
  * without limitation the rights to use, copy, modify, merge, publish,
  * distribute, sublicense, and/or sell copies of the Software, and to
  * permit persons to whom the Software is furnished to do so, subject to
  * the following conditions:
  *
  * The above copyright notice and this permission notice shall be
  * included in all copies or substantial portions of the Software.
  *
  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
  * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
  * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
  * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  */
 namespace Slim\Middleware;
 
 /**
  * Session Cookie
  *
  * This class provides an HTTP cookie storage mechanism
  * for session data. This class avoids using a PHP session
  * and instead serializes/unserializes the $_SESSION global
  * variable to/from an HTTP cookie.
  *
  * You should NEVER store sensitive data in a client-side cookie
  * in any format, encrypted (with cookies.encrypt) or not. If you
  * need to store sensitive user information in a session, you should
  * rely on PHP's native session implementation, or use other middleware
  * to store session data in a database or alternative server-side cache.
  *
  * Because this class stores serialized session data in an HTTP cookie,
  * you are inherently limited to 4 Kb. If you attempt to store
  * more than this amount, serialization will fail.
  *
  * @package     Slim
  * @author     Josh Lockhart
  * @since      1.6.0
  */
 class SessionCookie extends \Slim\Middleware
 {
     /**
      * @var array
      */
     protected $settings;
 
     /**
      * Constructor
      *
      * @param array $settings
      */
     public function __construct($settings = array())
     {
         $defaults = array(
             'expires' => '20 minutes',
             'path' => '/',
             'domain' => null,
             'secure' => false,
             'httponly' => false,
             'name' => 'slim_session',
         );
         $this->settings = array_merge($defaults, $settings);
         if (is_string($this->settings['expires'])) {
             $this->settings['expires'] = strtotime($this->settings['expires']);
         }
 
         /**
          * Session
          *
          * We must start a native PHP session to initialize the $_SESSION superglobal.
          * However, we won't be using the native session store for persistence, so we
          * disable the session cookie and cache limiter. We also set the session
          * handler to this class instance to avoid PHP's native session file locking.
          */
         ini_set('session.use_cookies', 0);
         session_cache_limiter(false);
         session_set_save_handler(
             array($this, 'open'),
             array($this, 'close'),
             array($this, 'read'),
             array($this, 'write'),
             array($this, 'destroy'),
             array($this, 'gc')
         );
     }
 
     /**
      * Call
      */
     public function call()
     {
         $this->loadSession();
         $this->next->call();
         $this->saveSession();
     }
 
     /**
      * Load session
      */
     protected function loadSession()
     {
         if (session_id() === '') {
             session_start();
         }
 
         $value = $this->app->getCookie($this->settings['name']);
 
         if ($value) {
             try {
                 $_SESSION = unserialize($value);
             } catch (\Exception $e) {
                 $this->app->getLog()->error('Error unserializing session cookie value! ' . $e->getMessage());
             }
         } else {
             $_SESSION = array();
         }
     }
 
     /**
      * Save session
      */
     protected function saveSession()
     {
         $value = serialize($_SESSION);
 
         if (strlen($value) > 4096) {
             $this->app->getLog()->error('WARNING! Slim\Middleware\SessionCookie data size is larger than 4KB. Content save failed.');
         } else {
             $this->app->setCookie(
                 $this->settings['name'],
                 $value,
                 $this->settings['expires'],
                 $this->settings['path'],
                 $this->settings['domain'],
                 $this->settings['secure'],
                 $this->settings['httponly']
             );
         }
         // session_destroy();
     }
 
     /********************************************************************************
     * Session Handler
     *******************************************************************************/
 
     /**
      * @codeCoverageIgnore
      */
     public function open($savePath, $sessionName)
     {
         return true;
     }
 
     /**
      * @codeCoverageIgnore
      */
     public function close()
     {
         return true;
     }
 
     /**
      * @codeCoverageIgnore
      */
     public function read($id)
     {
         return '';
     }
 
     /**
      * @codeCoverageIgnore
      */
     public function write($id, $data)
     {
         return true;
     }
 
     /**
      * @codeCoverageIgnore
      */
     public function destroy($id)
     {
         return true;
     }
 
     /**
      * @codeCoverageIgnore
      */
     public function gc($maxlifetime)
     {
         return true;
     }
 }