WalledGarden.php

Go to the documentation of this file.

<?php

namespace Elgg\Router\Middleware;

use Elgg\Exceptions\Http\Gatekeeper\WalledGardenException;
use Elgg\Request;

class WalledGarden {

    public function __invoke(Request $request) {
        if ($request->elgg()->session_manager->isLoggedIn()) {
            return;
        }

        if (!$request->elgg()->config->walled_garden) {
            return;
        }

        $url = $request->getURL();

        if ($this->isPublicPage($url)) {
            return;
        }

        if (!$request->isXhr()) {
            $request->elgg()->session->set('last_forward_from', $url);
        }

        throw new WalledGardenException();
    }

    protected function isPublicPage(string $url): bool {
        $parts = parse_url($url);
        unset($parts['query']);
        unset($parts['fragment']);
        $url = elgg_http_build_url($parts);
        $url = rtrim($url, '/') . '/';

        $site_url = _elgg_services()->config->wwwroot;

        if ($url == $site_url) {
            // always allow index page
            return true;
        }

        // default public pages
        $defaults = [
            'ajax/view/languages.js',
            'css/.*',
            'js/.*',
            'cache/[0-9]+/\w+/.*',
            'serve-file/.*',
        ];

        $params = [
            'url' => $url,
        ];

        $public_routes = _elgg_services()->events->triggerResults('public_pages', 'walled_garden', $params, $defaults);

        $site_url = preg_quote($site_url);
        foreach ($public_routes as $public_route) {
            $pattern = "`^{$site_url}{$public_route}/*$`i";
            if (preg_match($pattern, $url)) {
                return true;
            }
        }

        // non-public page
        return false;
    }
}