/** * Set up groups of files as sources * * @param array $options controller and Minify options * @return array Minify options * */ public function setupSources($options) { // filter controller options $cOptions = array_merge(array('allowDirs' => '//', 'groupsOnly' => false, 'groups' => array(), 'noMinPattern' => '@[-\\.]min\\.(?:js|css)$@i'), isset($options['minApp']) ? $options['minApp'] : array()); unset($options['minApp']); $sources = array(); $this->selectionId = ''; $firstMissingResource = null; if (isset($_GET['g'])) { // add group(s) $this->selectionId .= 'g=' . $_GET['g']; $keys = explode(',', $_GET['g']); if ($keys != array_unique($keys)) { $this->log("Duplicate group key found."); return $options; } $keys = explode(',', $_GET['g']); foreach ($keys as $key) { if (!isset($cOptions['groups'][$key])) { $this->log("A group configuration for \"{$key}\" was not found"); return $options; } $files = $cOptions['groups'][$key]; // if $files is a single object, casting will break it if (is_object($files)) { $files = array($files); } elseif (!is_array($files)) { $files = (array) $files; } foreach ($files as $file) { if ($file instanceof Minify_Source) { $sources[] = $file; continue; } if (0 === strpos($file, '//')) { $file = $_SERVER['DOCUMENT_ROOT'] . substr($file, 1); } $realpath = realpath($file); if ($realpath && is_file($realpath)) { $sources[] = $this->_getFileSource($realpath, $cOptions); } else { $this->log("The path \"{$file}\" (realpath \"{$realpath}\") could not be found (or was not a file)"); if (null === $firstMissingResource) { $firstMissingResource = basename($file); continue; } else { $secondMissingResource = basename($file); $this->log("More than one file was missing: '{$firstMissingResource}', '{$secondMissingResource}'"); return $options; } } } if ($sources) { try { $this->checkType($sources[0]); } catch (Exception $e) { $this->log($e->getMessage()); return $options; } } } } if (!$cOptions['groupsOnly'] && isset($_GET['f'])) { // try user files // The following restrictions are to limit the URLs that minify will // respond to. if (!preg_match('/^[^,]+\\.(css|js)(?:,[^,]+\\.\\1)*$/', $_GET['f'], $m) || strpos($_GET['f'], '//') !== false || strpos($_GET['f'], '\\') !== false) { $this->log("GET param 'f' was invalid"); return $options; } $ext = ".{$m[1]}"; try { $this->checkType($m[1]); } catch (Exception $e) { $this->log($e->getMessage()); return $options; } $files = explode(',', $_GET['f']); if ($files != array_unique($files)) { $this->log("Duplicate files were specified"); return $options; } if (isset($_GET['b'])) { // check for validity if (preg_match('@^[^/]+(?:/[^/]+)*$@', $_GET['b']) && false === strpos($_GET['b'], '..') && $_GET['b'] !== '.') { // valid base $base = "/{$_GET['b']}/"; } else { $this->log("GET param 'b' was invalid"); return $options; } } else { $base = '/'; } $allowDirs = array(); foreach ((array) $cOptions['allowDirs'] as $allowDir) { $allowDirs[] = realpath(str_replace('//', $_SERVER['DOCUMENT_ROOT'] . '/', $allowDir)); } $basenames = array(); // just for cache id foreach ($files as $file) { $uri = $base . $file; $path = $_SERVER['DOCUMENT_ROOT'] . $uri; $realpath = realpath($path); if (false === $realpath || !is_file($realpath)) { $this->log("The path \"{$path}\" (realpath \"{$realpath}\") could not be found (or was not a file)"); if (null === $firstMissingResource) { $firstMissingResource = $uri; continue; } else { $secondMissingResource = $uri; $this->log("More than one file was missing: '{$firstMissingResource}', '{$secondMissingResource}`'"); return $options; } } try { parent::checkNotHidden($realpath); parent::checkAllowDirs($realpath, $allowDirs, $uri); } catch (Exception $e) { $this->log($e->getMessage()); return $options; } $sources[] = $this->_getFileSource($realpath, $cOptions); $basenames[] = basename($realpath, $ext); } if ($this->selectionId) { $this->selectionId .= '_f='; } $this->selectionId .= implode(',', $basenames) . $ext; } if ($sources) { if (null !== $firstMissingResource) { array_unshift($sources, new Minify_Source(array('id' => 'missingFile', 'lastModified' => 0, 'content' => "/* Minify: at least one missing file. See " . Minify::URL_DEBUG . " */\n", 'minifier' => ''))); } $this->sources = $sources; } else { $this->log("No sources to serve"); } return $options; }
/** * Set up groups of files as sources * * @param array $options controller and Minify options * * @return array Minify options */ public function setupSources($options) { // PHP insecure by default: realpath() and other FS functions can't handle null bytes. foreach (array('g', 'b', 'f') as $key) { if (isset($_GET[$key])) { $_GET[$key] = str_replace("", '', (string) $_GET[$key]); } } // filter controller options $cOptions = array_merge(array('allowDirs' => '//', 'groupsOnly' => false, 'groups' => array(), 'noMinPattern' => '@[-\\.]min\\.(?:js|css)$@i'), isset($options['minApp']) ? $options['minApp'] : array()); unset($options['minApp']); $sources = array(); $this->selectionId = ''; $firstMissingResource = null; if (isset($_GET['g'])) { // add group(s) $this->selectionId .= 'g=' . $_GET['g']; $keys = explode(',', $_GET['g']); if ($keys != array_unique($keys)) { $this->log("Duplicate group key found."); return $options; } $keys = explode(',', $_GET['g']); foreach ($keys as $key) { if (!isset($cOptions['groups'][$key])) { $this->log("A group configuration for \"{$key}\" was not found"); return $options; } $files = $cOptions['groups'][$key]; // if $files is a single object, casting will break it if (is_object($files)) { $files = array($files); } elseif (!is_array($files)) { $files = (array) $files; } foreach ($files as $file) { if ($file instanceof Minify_Source) { $sources[] = $file; continue; } if (0 === strpos($file, '//')) { $file = $_SERVER['DOCUMENT_ROOT'] . substr($file, 1); } $realpath = \W3TC\Util_Environment::realpath($file); if ($realpath && is_file($realpath)) { $sources[] = $this->_getFileSource($realpath, $cOptions); } else { $this->log("The path \"{$file}\" (realpath \"{$realpath}\") could not be found (or was not a file)"); if (null === $firstMissingResource) { $firstMissingResource = basename($file); continue; } else { $secondMissingResource = basename($file); $this->log("More than one file was missing: '{$firstMissingResource}', '{$secondMissingResource}'"); return $options; } } } if ($sources) { try { $this->checkType($sources[0]); } catch (Exception $e) { $this->log($e->getMessage()); return $options; } } } } if (!$cOptions['groupsOnly'] && isset($_GET['f_array'])) { $files = $_GET['f_array']; $ext = $_GET['ext']; if (!empty($_GET['b'])) { // check for validity if (preg_match('@^[^/]+(?:/[^/]+)*$@', $_GET['b']) && false === strpos($_GET['b'], '..') && $_GET['b'] !== '.') { // valid base $base = "/{$_GET['b']}/"; } else { $this->log("GET param 'b' invalid (see MinApp.php line 84)"); return $options; } } else { $base = '/'; } $allowDirs = array(); foreach ((array) $cOptions['allowDirs'] as $allowDir) { $allowDirs[] = \W3TC\Util_Environment::realpath(str_replace('//', $_SERVER['DOCUMENT_ROOT'] . '/', $allowDir)); } $basenames = array(); // just for cache id foreach ($files as $file) { if ($file instanceof Minify_Source) { $sources[] = $file; continue; } $uri = $base . $file; $path = $_SERVER['DOCUMENT_ROOT'] . $uri; $realpath = \W3TC\Util_Environment::realpath($path); if (false === $realpath || !is_file($realpath)) { $this->log("The path \"{$path}\" (realpath \"{$realpath}\") could not be found (or was not a file)"); if (null === $firstMissingResource) { $firstMissingResource = $uri; continue; } else { $secondMissingResource = $uri; $this->log("More than one file was missing: '{$firstMissingResource}', '{$secondMissingResource}`'"); return $options; } } try { parent::checkNotHidden($realpath); parent::checkAllowDirs($realpath, $allowDirs, $uri); } catch (Exception $e) { $this->log($e->getMessage()); return $options; } $sources[] = $this->_getFileSource($realpath, $cOptions); $basenames[] = basename($realpath, $ext); } if ($this->selectionId) { $this->selectionId .= '_f='; } $this->selectionId .= implode(',', $basenames) . $ext; } if ($sources) { if (null !== $firstMissingResource) { array_unshift($sources, new Minify_Source(array('id' => 'missingFile', 'lastModified' => 0, 'content' => "/* Minify: at least one missing file. See " . Minify0_Minify::URL_DEBUG . " */\n", 'minifier' => ''))); } $this->sources = $sources; } else { $this->log("No sources to serve"); } return $options; }