/** * Send HTTP response * * Send the specific X-Sendfile HTTP headers for internal processing by the server. For Nginx and Lighttpd 1.4 * remove the X-Sendfile header and use the specific header instead. * * If the X-Sendfile header is 1 or TRUE, the response path will be used instead of the path supplied in the * header. If X-Sendfile header is 0 or FALSE the header is ignored and removed. * * - Apache : X-Sendfile * - Nginx : X-Accel-Redirect * - Lightttpd : X-LIGHTTPD-send-file (v1.4) or X-Sendfile (v1.5) * * @param KDispatcherResponseInterface $response * @return boolean */ public function send(KDispatcherResponseInterface $response) { if ($response->headers->has('X-Sendfile')) { $path = $response->headers->get('X-Sendfile'); if ($path === true || $path === 1) { $path = $response->getStream()->getPath(); } if (is_file($path)) { $server = strtolower($_SERVER['SERVER_SOFTWARE']); //Nginx uses X-Accel-Redirect header if (strpos($server, 'nginx') !== FALSE) { $path = preg_replace('/' . preg_quote(Koowa::getRootPath(), '/') . '/', '', $path, 1); $response->headers->set('X-Accel-Redirect', $path); $response->headers->remove('X-Sendfile'); } //Lighttpd 1.4 uses X-LIGHTTPD-send-file header if (strpos($server, 'lightttpd/1.4') !== FALSE) { $response->headers->set('X-LIGHTTPD-send-file', $path); $response->headers->remove('X-Sendfile'); } return parent::send($response); } else { $response->headers->remove('X-Sendfile'); } } }
/** * Sends content for the current web response. * * We flush(stream) the data to the output buffer based on the chunk size and range information provided in the * request. The default chunk size is 8 MB. * * @param KDispatcherResponseInterface $response * @return KDispatcherResponseTransportRedirect */ public function sendContent(KDispatcherResponseInterface $response) { if ($response->isSuccess()) { //For a certain unmentionable browser if (ini_get('zlib.output_compression')) { @ini_set('zlib.output_compression', 'Off'); } //Fix for IE7/8 if (function_exists('apache_setenv')) { @apache_setenv('no-gzip', '1'); } //Remove PHP time limit if (!ini_get('safe_mode')) { @set_time_limit(0); } //Make sure the output buffers are cleared $level = ob_get_level(); while ($level > 0) { ob_end_clean(); $level--; } $stream = $response->getStream(); $offset = $this->getOffset($response); $range = $this->getRange($response); if ($offset > 0) { $stream->seek($offset); } $output = fopen('php://output', 'w+'); $stream->flush($output, $range); $stream->close(); fclose($output); return $this; } parent::sendContent($response); }
/** * Send HTTP response * * Prepares the Response before it is sent to the client. This method tweaks the headers to ensure that * it is compliant with RFC 2616 and calculates or modifies the cache-control header to a sensible and * conservative value * * @link http://tools.ietf.org/html/rfc2616 * * @param KDispatcherResponseInterface $response * @return boolean Returns true if the response has been send, otherwise FALSE */ public function send(KDispatcherResponseInterface $response) { $request = $response->getRequest(); //Make sure we do not have body content for 204, 205 and 305 status codes $codes = array(KHttpResponse::NO_CONTENT, KHttpResponse::NOT_MODIFIED, KHttpResponse::RESET_CONTENT); if (in_array($response->getStatusCode(), $codes)) { $response->setContent(null); } //Remove location header if we are not redirecting and the status code is not 201 if (!$response->isRedirect() && $response->getStatusCode() !== KHttpResponse::CREATED) { if ($response->headers->has('Location')) { $response->headers->remove('Location'); } } // IIS does not like it when you have a Location header in a non-redirect request // http://stackoverflow.com/questions/12074730/w7-pro-iis-7-5-overwrites-php-location-header-solved if ($response->headers->has('Location') && !$response->isRedirect()) { $server = isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : getenv('SERVER_SOFTWARE'); if ($server && strpos(strtolower($server), 'microsoft-iis') !== false) { $response->headers->remove('Location'); } } //Add file related information if we are serving a file if ($response->isDownloadable()) { //Last-Modified header if ($time = $response->getStream()->getTime(KFilesystemStreamInterface::TIME_MODIFIED)) { $response->setLastModified($time); } $user_agent = $response->getRequest()->getAgent(); // basename does not work if the string starts with a UTF character $filename = ltrim(basename(' ' . strtr($response->getStream()->getPath(), array('/' => '/ ')))); // Android cuts file names after # if (stripos($user_agent, 'Android')) { $filename = str_replace('#', '_', $filename); } $disposition = array('filename' => '"' . $filename . '"'); // IE7 and 8 accepts percent encoded file names as the filename value // Other browsers (except Safari) use filename* header starting with UTF-8'' $encoded_name = rawurlencode($filename); if ($encoded_name !== $filename) { if (preg_match('/(?i)MSIE [4-8]/i', $user_agent)) { $disposition['filename'] = '"' . $encoded_name . '"'; } elseif (!stripos($user_agent, 'AppleWebkit')) { $disposition['filename*'] = 'UTF-8\'\'' . $encoded_name; } } //Disposition header $response->headers->set('Content-Disposition', array_merge(array('inline'), $disposition)); //Force a download by the browser by setting the disposition to 'attachment'. if ($response->isAttachable()) { $response->setContentType('application/octet-stream'); $response->headers->set('Content-Disposition', array_merge(array('attachment'), $disposition)); } //Explicitly disable the IE pause button if (!$response->headers->has('Accept-Ranges')) { $response->headers->set('Accept-Ranges', 'none'); } } //Add Last-Modified header if not present if (!$response->headers->has('Last-Modified')) { $response->setLastModified(new DateTime('now')); } //Add Content-Length if not present if (!$response->headers->has('Content-Length')) { $response->headers->set('Content-Length', $response->getStream()->getSize()); } //Remove Content-Length for transfer encoded responses that do not contain a content range if ($response->headers->has('Transfer-Encoding')) { $response->headers->remove('Content-Length'); } //Modifies the response so that it conforms to the rules defined for a 304 status code. if ($response->getStatusCode() == KHttpResponse::NOT_MODIFIED) { $response->setContent(null); $headers = array('Allow', 'Content-Encoding', 'Content-Language', 'Content-Length', 'Content-MD5', 'Content-Type', 'Last-Modified'); //Remove headers that MUST NOT be included with 304 Not Modified responses foreach ($headers as $header) { $response->headers->remove($header); } } //Calculates or modifies the cache-control header to a sensible, conservative value. $cache_control = (array) $response->headers->get('Cache-Control', null, false); if (empty($cache_control)) { if (!$response->isCacheable()) { $response->headers->set('Cache-Control', 'no-cache'); } else { $response->headers->set('Cache-Control', array('private', 'must-revalidate')); } } // Prevent caching: Cache-control needs to be empty for IE on SSL. // See: http://support.microsoft.com/default.aspx?scid=KB;EN-US;q316431 if ($request->isSecure() && preg_match('#(?:MSIE |Internet Explorer/)(?:[0-9.]+)#', $request->getAgent())) { $response->headers->set('Cache-Control', ''); } //Send headers and content $this->sendHeaders($response)->sendContent($response); return parent::send($response); }