WalledGarden.php

Go to the documentation of this file.

<?php
 
namespace Elgg\Router\Middleware;
 
use Elgg\Exceptions\Http\Gatekeeper\WalledGardenException;
use Elgg\Request;
 
class WalledGarden {
 
    public function __invoke(Request $request) {
        if ($request->elgg()->session_manager->isLoggedIn()) {
            return;
        }
 
        if (!$request->elgg()->config->walled_garden) {
            return;
        }
 
        $url = $request->getURL();
 
        if ($this->isPublicPage($url)) {
            return;
        }
 
        if (!$request->isXhr()) {
            $request->elgg()->session->set('last_forward_from', $url);
        }
 
        throw new WalledGardenException();
    }
 
    protected function isPublicPage(string $url): bool {
        $parts = parse_url($url);
        unset($parts['query']);
        unset($parts['fragment']);
        $url = elgg_http_build_url($parts);
        $url = rtrim($url, '/') . '/';
 
        $site_url = _elgg_services()->config->wwwroot;
 
        if ($url == $site_url) {
            // always allow index page
            return true;
        }
 
        // default public pages
        $defaults = [
            'ajax/view/languages.js',
            'css/.*',
            'js/.*',
            'cache/[0-9]+/\w+/.*',
            'serve-file/.*',
        ];
 
        $params = [
            'url' => $url,
        ];
 
        $public_routes = _elgg_services()->events->triggerResults('public_pages', 'walled_garden', $params, $defaults);
 
        $site_url = preg_quote($site_url);
        foreach ($public_routes as $public_route) {
            $pattern = "`^{$site_url}{$public_route}/*$`i";
            if (preg_match($pattern, $url)) {
                return true;
            }
        }
 
        // non-public page
        return false;
    }
}