v2.0.0.0

Publisium

← Changes All versions

175 lines · 5.1 KB

<?php
declare(strict_types=1);
final class Config
{
private static ?array $values = null;
private static ?string $envPath = null;
public static function envFilePath(): string
{
if (self::$envPath !== null) {
return self::$envPath;
}
$envRoot = dirname(__DIR__, 2) . '/publisium-env';
$pointerFile = $envRoot . '/active-env.txt';
if (is_file($pointerFile)) {
$projectName = trim((string) file_get_contents($pointerFile));
$candidate = $envRoot . '/.env.project.' . $projectName;
if ($projectName !== '' && is_file($candidate)) {
self::$envPath = $candidate;
return self::$envPath;
}
}
self::$envPath = $envRoot . '/.env';
return self::$envPath;
}
public static function startSession(?string $name = null): void
{
if (session_status() === PHP_SESSION_ACTIVE) {
return;
}
if ($name !== null) {
session_name($name);
}
ini_set('session.use_strict_mode', '1');
ini_set('session.use_only_cookies', '1');
session_set_cookie_params([
'lifetime' => 0,
'path' => '/',
'secure' => self::cookieSecure(),
'httponly' => true,
'samesite' => 'Lax',
]);
session_start();
}
public static function cookieSecure(): bool
{
$https = (!empty($_SERVER['HTTPS']) && strtolower((string) $_SERVER['HTTPS']) !== 'off')
|| (int) ($_SERVER['SERVER_PORT'] ?? 0) === 443
|| strtolower((string) ($_SERVER['HTTP_X_FORWARDED_PROTO'] ?? '')) === 'https';
return $https && self::get('SESSION_SECURE', '1') !== '0';
}
public static function isInstalled(): bool
{
return is_file(self::envFilePath());
}
public static function load(): array
{
if (self::$values !== null) {
return self::$values;
}
$path = self::envFilePath();
$values = [];
if (is_file($path)) {
$lines = file($path, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
foreach ($lines as $line) {
$line = trim($line);
if ($line === '' || str_starts_with($line, '#')) {
continue;
}
if (!str_contains($line, '=')) {
continue;
}
[$key, $value] = explode('=', $line, 2);
$key = trim($key);
$value = trim($value);
if (strlen($value) >= 2 && $value[0] === '"' && $value[-1] === '"') {
$value = substr($value, 1, -1);
}
$values[$key] = $value;
}
}
self::$values = $values;
return self::$values;
}
public static function get(string $key, ?string $default = null): ?string
{
$values = self::load();
return $values[$key] ?? $default;
}
public static function write(string $projectName, array $values): bool
{
$envRoot = dirname(__DIR__, 2) . '/publisium-env';
if (!is_dir($envRoot)) {
if (!mkdir($envRoot, 0750, true) && !is_dir($envRoot)) {
return false;
}
}
$safeName = preg_replace('/[^a-zA-Z0-9_-]/', '', $projectName);
if ($safeName === '') {
$safeName = 'default';
}
$targetFile = $envRoot . '/.env.project.' . $safeName;
$lines = [];
foreach ($values as $key => $value) {
$needsQuotes = str_contains((string) $value, ' ') || $value === '';
$lines[] = $needsQuotes ? sprintf('%s="%s"', $key, $value) : sprintf('%s=%s', $key, $value);
}
$written = file_put_contents($targetFile, implode(PHP_EOL, $lines) . PHP_EOL);
if ($written === false) {
return false;
}
file_put_contents($envRoot . '/active-env.txt', $safeName);
chmod($targetFile, 0640);
self::$values = null;
self::$envPath = null;
return true;
}
// Dashboard forms send fields that may contain HTML or JavaScript as "<name>__b64", so hosting
// firewalls (ModSecurity and similar) don't block the request. Decode them back into $_POST.
public static function decodeEncodedPost(): void
{
if (($_SERVER['REQUEST_METHOD'] ?? '') !== 'POST' || empty($_POST)) {
return;
}
foreach (array_keys($_POST) as $postKey) {
if (!is_string($postKey) || !str_ends_with($postKey, '__b64')) {
continue;
}
$encoded = $_POST[$postKey];
unset($_POST[$postKey]);
$field = substr($postKey, 0, -5);
if ($field === '' || !is_string($encoded)) {
continue;
}
$decoded = base64_decode($encoded, true);
if ($decoded === false || !mb_check_encoding($decoded, 'UTF-8')) {
continue;
}
$_POST[$field] = $decoded;
}
}
}
Config::decodeEncodedPost();