1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987 |
- <?php
- //
- // +----------------------------------------------------------------------+
- // | PHP Version 4 |
- // +----------------------------------------------------------------------+
- // | Copyright (c) 1997-2003 The PHP Group |
- // +----------------------------------------------------------------------+
- // | This source file is subject to version 2.02 of the PHP license, |
- // | that is bundled with this package in the file LICENSE, and is |
- // | available at through the world-wide-web at |
- // | http://www.php.net/license/2_02.txt. |
- // | If you did not receive a copy of the PHP license and are unable to |
- // | obtain it through the world-wide-web, please send a note to |
- // | [email protected] so we can mail you a copy immediately. |
- // +----------------------------------------------------------------------+
- // | Authors: Hartmut Holzgraefe <[email protected]> |
- // | Christian Stocker <[email protected]> |
- // +----------------------------------------------------------------------+
- //
- // $Id: Server.php,v 1.46 2006/03/03 21:43:09 hholzgra Exp $
- //
- require_once "HTTP/WebDAV/Tools/_parse_propfind.php";
- require_once "HTTP/WebDAV/Tools/_parse_proppatch.php";
- require_once "HTTP/WebDAV/Tools/_parse_lockinfo.php";
- /**
- * Virtual base class for implementing WebDAV servers
- *
- * WebDAV server base class, needs to be extended to do useful work
- *
- * @package HTTP_WebDAV_Server
- * @author Hartmut Holzgraefe <[email protected]>
- * @version 0.99.1dev
- */
- class HTTP_WebDAV_Server
- {
- // {{{ Member Variables
-
- /**
- * complete URI for this request
- *
- * @var string
- */
- var $uri;
- /**
- * base URI for this request
- *
- * @var string
- */
- var $base_uri;
- /**
- * URI path for this request
- *
- * @var string
- */
- var $path;
- /**
- * Realm string to be used in authentification popups
- *
- * @var string
- */
- var $http_auth_realm = "PHP WebDAV";
- /**
- * String to be used in "X-Dav-Powered-By" header
- *
- * @var string
- */
- var $dav_powered_by = "";
- /**
- * Remember parsed If: (RFC2518/9.4) header conditions
- *
- * @var array
- */
- var $_if_header_uris = array();
- /**
- * HTTP response status/message
- *
- * @var string
- */
- var $_http_status = "200 OK";
- /**
- * encoding of property values passed in
- *
- * @var string
- */
- var $_prop_encoding = "utf-8";
- // }}}
- // {{{ Constructor
- /**
- * Constructor
- *
- * @param void
- */
- function HTTP_WebDAV_Server()
- {
- // PHP messages destroy XML output -> switch them off
- ini_set("display_errors", 0);
- }
- // }}}
- // {{{ ServeRequest()
- /**
- * Serve WebDAV HTTP request
- *
- * dispatch WebDAV HTTP request to the apropriate method handler
- *
- * @param void
- * @return void
- */
- function ServeRequest()
- {
- // prevent warning in litmus check 'delete_fragment'
- if (strstr($_SERVER["REQUEST_URI"], '#')) {
- $this->http_status("400 Bad Request");
- return;
- }
- // default uri is the complete request uri
- $uri = (@$_SERVER["HTTPS"] === "on" ? "https:" : "http:");
- $uri.= "//$_SERVER[HTTP_HOST]$_SERVER[SCRIPT_NAME]";
-
- $path_info = empty($_SERVER["PATH_INFO"]) ? "/" : $_SERVER["PATH_INFO"];
- $this->base_uri = $uri;
- $this->uri = $uri . $path_info;
- // set path
- $this->path = $this->_urldecode($path_info);
- if (!strlen($this->path)) {
- if ($_SERVER["REQUEST_METHOD"] == "GET") {
- // redirect clients that try to GET a collection
- // WebDAV clients should never try this while
- // regular HTTP clients might ...
- header("Location: ".$this->base_uri."/");
- return;
- } else {
- // if a WebDAV client didn't give a path we just assume '/'
- $this->path = "/";
- }
- }
-
- if(ini_get("magic_quotes_gpc")) {
- $this->path = stripslashes($this->path);
- }
-
-
- // identify ourselves
- if (empty($this->dav_powered_by)) {
- header("X-Dav-Powered-By: PHP class: ".get_class($this));
- } else {
- header("X-Dav-Powered-By: ".$this->dav_powered_by );
- }
- // check authentication
- // for the motivation for not checking OPTIONS requests on / see
- // http://pear.php.net/bugs/bug.php?id=5363
- if ( ( !(($_SERVER['REQUEST_METHOD'] == 'OPTIONS') && ($this->path == "/")))
- && (!$this->_check_auth())) {
- // RFC2518 says we must use Digest instead of Basic
- // but Microsoft Clients do not support Digest
- // and we don't support NTLM and Kerberos
- // so we are stuck with Basic here
- header('WWW-Authenticate: Basic realm="'.($this->http_auth_realm).'"');
- // Windows seems to require this being the last header sent
- // (changed according to PECL bug #3138)
- $this->http_status('401 Unauthorized');
- return;
- }
-
- // check
- if(! $this->_check_if_header_conditions()) {
- return;
- }
-
- // detect requested method names
- $method = strtolower($_SERVER["REQUEST_METHOD"]);
- $wrapper = "http_".$method;
-
- // activate HEAD emulation by GET if no HEAD method found
- if ($method == "head" && !method_exists($this, "head")) {
- $method = "get";
- }
-
- if (method_exists($this, $wrapper) && ($method == "options" || method_exists($this, $method))) {
- $this->$wrapper(); // call method by name
- } else { // method not found/implemented
- if ($_SERVER["REQUEST_METHOD"] == "LOCK") {
- $this->http_status("412 Precondition failed");
- } else {
- $this->http_status("405 Method not allowed");
- header("Allow: ".join(", ", $this->_allow())); // tell client what's allowed
- }
- }
- }
- // }}}
- // {{{ abstract WebDAV methods
- // {{{ GET()
- /**
- * GET implementation
- *
- * overload this method to retrieve resources from your server
- * <br>
- *
- *
- * @abstract
- * @param array &$params Array of input and output parameters
- * <br><b>input</b><ul>
- * <li> path -
- * </ul>
- * <br><b>output</b><ul>
- * <li> size -
- * </ul>
- * @returns int HTTP-Statuscode
- */
- /* abstract
- function GET(&$params)
- {
- // dummy entry for PHPDoc
- }
- */
- // }}}
- // {{{ PUT()
- /**
- * PUT implementation
- *
- * PUT implementation
- *
- * @abstract
- * @param array &$params
- * @returns int HTTP-Statuscode
- */
-
- /* abstract
- function PUT()
- {
- // dummy entry for PHPDoc
- }
- */
-
- // }}}
- // {{{ COPY()
- /**
- * COPY implementation
- *
- * COPY implementation
- *
- * @abstract
- * @param array &$params
- * @returns int HTTP-Statuscode
- */
-
- /* abstract
- function COPY()
- {
- // dummy entry for PHPDoc
- }
- */
- // }}}
- // {{{ MOVE()
- /**
- * MOVE implementation
- *
- * MOVE implementation
- *
- * @abstract
- * @param array &$params
- * @returns int HTTP-Statuscode
- */
-
- /* abstract
- function MOVE()
- {
- // dummy entry for PHPDoc
- }
- */
- // }}}
- // {{{ DELETE()
- /**
- * DELETE implementation
- *
- * DELETE implementation
- *
- * @abstract
- * @param array &$params
- * @returns int HTTP-Statuscode
- */
-
- /* abstract
- function DELETE()
- {
- // dummy entry for PHPDoc
- }
- */
- // }}}
- // {{{ PROPFIND()
- /**
- * PROPFIND implementation
- *
- * PROPFIND implementation
- *
- * @abstract
- * @param array &$params
- * @returns int HTTP-Statuscode
- */
-
- /* abstract
- function PROPFIND()
- {
- // dummy entry for PHPDoc
- }
- */
- // }}}
- // {{{ PROPPATCH()
- /**
- * PROPPATCH implementation
- *
- * PROPPATCH implementation
- *
- * @abstract
- * @param array &$params
- * @returns int HTTP-Statuscode
- */
-
- /* abstract
- function PROPPATCH()
- {
- // dummy entry for PHPDoc
- }
- */
- // }}}
- // {{{ LOCK()
- /**
- * LOCK implementation
- *
- * LOCK implementation
- *
- * @abstract
- * @param array &$params
- * @returns int HTTP-Statuscode
- */
-
- /* abstract
- function LOCK()
- {
- // dummy entry for PHPDoc
- }
- */
- // }}}
- // {{{ UNLOCK()
- /**
- * UNLOCK implementation
- *
- * UNLOCK implementation
- *
- * @abstract
- * @param array &$params
- * @returns int HTTP-Statuscode
- */
- /* abstract
- function UNLOCK()
- {
- // dummy entry for PHPDoc
- }
- */
- // }}}
- // }}}
- // {{{ other abstract methods
- // {{{ check_auth()
- /**
- * check authentication
- *
- * overload this method to retrieve and confirm authentication information
- *
- * @abstract
- * @param string type Authentication type, e.g. "basic" or "digest"
- * @param string username Transmitted username
- * @param string passwort Transmitted password
- * @returns bool Authentication status
- */
-
- /* abstract
- function checkAuth($type, $username, $password)
- {
- // dummy entry for PHPDoc
- }
- */
-
- // }}}
- // {{{ checklock()
- /**
- * check lock status for a resource
- *
- * overload this method to return shared and exclusive locks
- * active for this resource
- *
- * @abstract
- * @param string resource Resource path to check
- * @returns array An array of lock entries each consisting
- * of 'type' ('shared'/'exclusive'), 'token' and 'timeout'
- */
-
- /* abstract
- function checklock($resource)
- {
- // dummy entry for PHPDoc
- }
- */
- // }}}
- // }}}
- // {{{ WebDAV HTTP method wrappers
- // {{{ http_OPTIONS()
- /**
- * OPTIONS method handler
- *
- * The OPTIONS method handler creates a valid OPTIONS reply
- * including Dav: and Allowed: heaers
- * based on the implemented methods found in the actual instance
- *
- * @param void
- * @return void
- */
- function http_OPTIONS()
- {
- // Microsoft clients default to the Frontpage protocol
- // unless we tell them to use WebDAV
- header("MS-Author-Via: DAV");
- // get allowed methods
- $allow = $this->_allow();
- // dav header
- $dav = array(1); // assume we are always dav class 1 compliant
- if (isset($allow['LOCK'])) {
- $dav[] = 2; // dav class 2 requires that locking is supported
- }
- // tell clients what we found
- $this->http_status("200 OK");
- header("DAV: " .join("," , $dav));
- header("Allow: ".join(", ", $allow));
- header("Content-length: 0");
- }
- // }}}
- // {{{ http_PROPFIND()
- /**
- * PROPFIND method handler
- *
- * @param void
- * @return void
- */
- function http_PROPFIND()
- {
- $options = Array();
- $options["path"] = $this->path;
-
- // search depth from header (default is "infinity)
- if (isset($_SERVER['HTTP_DEPTH'])) {
- $options["depth"] = $_SERVER["HTTP_DEPTH"];
- } else {
- $options["depth"] = "infinity";
- }
- // analyze request payload
- $propinfo = new _parse_propfind("php://input");
- if (!$propinfo->success) {
- $this->http_status("400 Error");
- return;
- }
- $options['props'] = $propinfo->props;
-
- // call user handler
- if (!$this->PROPFIND($options, $files)) {
- $this->http_status("404 Not Found");
- return;
- }
-
- // collect namespaces here
- $ns_hash = array();
-
- // Microsoft Clients need this special namespace for date and time values
- $ns_defs = "xmlns:ns0=\"urn:uuid:c2f41010-65b3-11d1-a29f-00aa00c14882/\"";
-
- // now we loop over all returned file entries
- foreach($files["files"] as $filekey => $file) {
-
- // nothing to do if no properties were returend for a file
- if (!isset($file["props"]) || !is_array($file["props"])) {
- continue;
- }
-
- // now loop over all returned properties
- foreach($file["props"] as $key => $prop) {
- // as a convenience feature we do not require that user handlers
- // restrict returned properties to the requested ones
- // here we strip all unrequested entries out of the response
-
- switch($options['props']) {
- case "all":
- // nothing to remove
- break;
-
- case "names":
- // only the names of all existing properties were requested
- // so we remove all values
- unset($files["files"][$filekey]["props"][$key]["val"]);
- break;
-
- default:
- $found = false;
-
- // search property name in requested properties
- foreach((array)$options["props"] as $reqprop) {
- if ( $reqprop["name"] == $prop["name"]
- && @$reqprop["xmlns"] == $prop["ns"]) {
- $found = true;
- break;
- }
- }
-
- // unset property and continue with next one if not found/requested
- if (!$found) {
- $files["files"][$filekey]["props"][$key]="";
- continue(2);
- }
- break;
- }
-
- // namespace handling
- if (empty($prop["ns"])) continue; // no namespace
- $ns = $prop["ns"];
- if ($ns == "DAV:") continue; // default namespace
- if (isset($ns_hash[$ns])) continue; // already known
- // register namespace
- $ns_name = "ns".(count($ns_hash) + 1);
- $ns_hash[$ns] = $ns_name;
- $ns_defs .= " xmlns:$ns_name=\"$ns\"";
- }
-
- // we also need to add empty entries for properties that were requested
- // but for which no values where returned by the user handler
- if (is_array($options['props'])) {
- foreach($options["props"] as $reqprop) {
- if($reqprop['name']=="") continue; // skip empty entries
-
- $found = false;
-
- // check if property exists in result
- foreach($file["props"] as $prop) {
- if ( $reqprop["name"] == $prop["name"]
- && @$reqprop["xmlns"] == $prop["ns"]) {
- $found = true;
- break;
- }
- }
-
- if (!$found) {
- if($reqprop["xmlns"]==="DAV:" && $reqprop["name"]==="lockdiscovery") {
- // lockdiscovery is handled by the base class
- $files["files"][$filekey]["props"][]
- = $this->mkprop("DAV:",
- "lockdiscovery" ,
- $this->lockdiscovery($files["files"][$filekey]['path']));
- } else {
- // add empty value for this property
- $files["files"][$filekey]["noprops"][] =
- $this->mkprop($reqprop["xmlns"], $reqprop["name"], "");
- // register property namespace if not known yet
- if ($reqprop["xmlns"] != "DAV:" && !isset($ns_hash[$reqprop["xmlns"]])) {
- $ns_name = "ns".(count($ns_hash) + 1);
- $ns_hash[$reqprop["xmlns"]] = $ns_name;
- $ns_defs .= " xmlns:$ns_name=\"$reqprop[xmlns]\"";
- }
- }
- }
- }
- }
- }
-
- // now we generate the reply header ...
- $this->http_status("207 Multi-Status");
- header('Content-Type: text/xml; charset="utf-8"');
-
- // ... and payload
- echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";
- echo "<D:multistatus xmlns:D=\"DAV:\">\n";
-
- foreach($files["files"] as $file) {
- // ignore empty or incomplete entries
- if(!is_array($file) || empty($file) || !isset($file["path"])) continue;
- $path = $file['path'];
- if(!is_string($path) || $path==="") continue;
- echo " <D:response $ns_defs>\n";
-
- /* TODO right now the user implementation has to make sure
- collections end in a slash, this should be done in here
- by checking the resource attribute */
- $href = $this->_mergePathes($_SERVER['SCRIPT_NAME'], $path);
-
- echo " <D:href>$href</D:href>\n";
-
- // report all found properties and their values (if any)
- if (isset($file["props"]) && is_array($file["props"])) {
- echo " <D:propstat>\n";
- echo " <D:prop>\n";
- foreach($file["props"] as $key => $prop) {
-
- if (!is_array($prop)) continue;
- if (!isset($prop["name"])) continue;
-
- if (!isset($prop["val"]) || $prop["val"] === "" || $prop["val"] === false) {
- // empty properties (cannot use empty() for check as "0" is a legal value here)
- if($prop["ns"]=="DAV:") {
- echo " <D:$prop[name]/>\n";
- } else if(!empty($prop["ns"])) {
- echo " <".$ns_hash[$prop["ns"]].":$prop[name]/>\n";
- } else {
- echo " <$prop[name] xmlns=\"\"/>";
- }
- } else if ($prop["ns"] == "DAV:") {
- // some WebDAV properties need special treatment
- switch ($prop["name"]) {
- case "creationdate":
- echo " <D:creationdate ns0:dt=\"dateTime.tz\">"
- . gmdate("Y-m-d\\TH:i:s\\Z",$prop['val'])
- . "</D:creationdate>\n";
- break;
- case "getlastmodified":
- echo " <D:getlastmodified ns0:dt=\"dateTime.rfc1123\">"
- . gmdate("D, d M Y H:i:s ", $prop['val'])
- . "GMT</D:getlastmodified>\n";
- break;
- case "resourcetype":
- echo " <D:resourcetype><D:$prop[val]/></D:resourcetype>\n";
- break;
- case "supportedlock":
- echo " <D:supportedlock>$prop[val]</D:supportedlock>\n";
- break;
- case "lockdiscovery":
- echo " <D:lockdiscovery>\n";
- echo $prop["val"];
- echo " </D:lockdiscovery>\n";
- break;
- default:
- echo " <D:$prop[name]>"
- . $this->_prop_encode(htmlspecialchars($prop['val']))
- . "</D:$prop[name]>\n";
- break;
- }
- } else {
- // properties from namespaces != "DAV:" or without any namespace
- if ($prop["ns"]) {
- echo " <" . $ns_hash[$prop["ns"]] . ":$prop[name]>"
- . $this->_prop_encode(htmlspecialchars($prop['val']))
- . "</" . $ns_hash[$prop["ns"]] . ":$prop[name]>\n";
- } else {
- echo " <$prop[name] xmlns=\"\">"
- . $this->_prop_encode(htmlspecialchars($prop['val']))
- . "</$prop[name]>\n";
- }
- }
- }
- echo " </D:prop>\n";
- echo " <D:status>HTTP/1.1 200 OK</D:status>\n";
- echo " </D:propstat>\n";
- }
-
- // now report all properties requested but not found
- if (isset($file["noprops"])) {
- echo " <D:propstat>\n";
- echo " <D:prop>\n";
- foreach($file["noprops"] as $key => $prop) {
- if ($prop["ns"] == "DAV:") {
- echo " <D:$prop[name]/>\n";
- } else if ($prop["ns"] == "") {
- echo " <$prop[name] xmlns=\"\"/>\n";
- } else {
- echo " <" . $ns_hash[$prop["ns"]] . ":$prop[name]/>\n";
- }
- }
- echo " </D:prop>\n";
- echo " <D:status>HTTP/1.1 404 Not Found</D:status>\n";
- echo " </D:propstat>\n";
- }
-
- echo " </D:response>\n";
- }
-
- echo "</D:multistatus>\n";
- }
-
- // }}}
-
- // {{{ http_PROPPATCH()
- /**
- * PROPPATCH method handler
- *
- * @param void
- * @return void
- */
- function http_PROPPATCH()
- {
- if($this->_check_lock_status($this->path)) {
- $options = Array();
- $options["path"] = $this->path;
- $propinfo = new _parse_proppatch("php://input");
-
- if (!$propinfo->success) {
- $this->http_status("400 Error");
- return;
- }
-
- $options['props'] = $propinfo->props;
-
- $responsedescr = $this->PROPPATCH($options);
-
- $this->http_status("207 Multi-Status");
- header('Content-Type: text/xml; charset="utf-8"');
-
- echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";
- echo "<D:multistatus xmlns:D=\"DAV:\">\n";
- echo " <D:response>\n";
- echo " <D:href>".$this->_urlencode($this->_mergePathes($_SERVER["SCRIPT_NAME"], $this->path))."</D:href>\n";
- foreach($options["props"] as $prop) {
- echo " <D:propstat>\n";
- echo " <D:prop><$prop[name] xmlns=\"$prop[ns]\"/></D:prop>\n";
- echo " <D:status>HTTP/1.1 $prop[status]</D:status>\n";
- echo " </D:propstat>\n";
- }
- if ($responsedescr) {
- echo " <D:responsedescription>".
- $this->_prop_encode(htmlspecialchars($responsedescr)).
- "</D:responsedescription>\n";
- }
- echo " </D:response>\n";
- echo "</D:multistatus>\n";
- } else {
- $this->http_status("423 Locked");
- }
- }
-
- // }}}
- // {{{ http_MKCOL()
- /**
- * MKCOL method handler
- *
- * @param void
- * @return void
- */
- function http_MKCOL()
- {
- $options = Array();
- $options["path"] = $this->path;
- $stat = $this->MKCOL($options);
- $this->http_status($stat);
- }
- // }}}
- // {{{ http_GET()
- /**
- * GET method handler
- *
- * @param void
- * @returns void
- */
- function http_GET()
- {
- // TODO check for invalid stream
- $options = Array();
- $options["path"] = $this->path;
- $this->_get_ranges($options);
- if (true === ($status = $this->GET($options))) {
- if (!headers_sent()) {
- $status = "200 OK";
- if (!isset($options['mimetype'])) {
- $options['mimetype'] = "application/octet-stream";
- }
- header("Content-type: $options[mimetype]");
-
- if (isset($options['mtime'])) {
- header("Last-modified:".gmdate("D, d M Y H:i:s ", $options['mtime'])."GMT");
- }
-
- if (isset($options['stream'])) {
- // GET handler returned a stream
- if (!empty($options['ranges']) && (0===fseek($options['stream'], 0, SEEK_SET))) {
- // partial request and stream is seekable
-
- if (count($options['ranges']) === 1) {
- $range = $options['ranges'][0];
-
- if (isset($range['start'])) {
- fseek($options['stream'], $range['start'], SEEK_SET);
- if (feof($options['stream'])) {
- $this->http_status("416 Requested range not satisfiable");
- return;
- }
- if (isset($range['end'])) {
- $size = $range['end']-$range['start']+1;
- $this->http_status("206 partial");
- header("Content-length: $size");
- header("Content-range: $range[start]-$range[end]/"
- . (isset($options['size']) ? $options['size'] : "*"));
- while ($size && !feof($options['stream'])) {
- $buffer = fread($options['stream'], 4096);
- $size -= strlen($buffer);
- echo $buffer;
- }
- } else {
- $this->http_status("206 partial");
- if (isset($options['size'])) {
- header("Content-length: ".($options['size'] - $range['start']));
- header("Content-range: $start-$end/"
- . (isset($options['size']) ? $options['size'] : "*"));
- }
- fpassthru($options['stream']);
- }
- } else {
- header("Content-length: ".$range['last']);
- fseek($options['stream'], -$range['last'], SEEK_END);
- fpassthru($options['stream']);
- }
- } else {
- $this->_multipart_byterange_header(); // init multipart
- foreach ($options['ranges'] as $range) {
- // TODO what if size unknown? 500?
- if (isset($range['start'])) {
- $from = $range['start'];
- $to = !empty($range['end']) ? $range['end'] : $options['size']-1;
- } else {
- $from = $options['size'] - $range['last']-1;
- $to = $options['size'] -1;
- }
- $total = isset($options['size']) ? $options['size'] : "*";
- $size = $to - $from + 1;
- $this->_multipart_byterange_header($options['mimetype'], $from, $to, $total);
- fseek($options['stream'], $start, SEEK_SET);
- while ($size && !feof($options['stream'])) {
- $buffer = fread($options['stream'], 4096);
- $size -= strlen($buffer);
- echo $buffer;
- }
- }
- $this->_multipart_byterange_header(); // end multipart
- }
- } else {
- // normal request or stream isn't seekable, return full content
- if (isset($options['size'])) {
- header("Content-length: ".$options['size']);
- }
- fpassthru($options['stream']);
- return; // no more headers
- }
- } elseif (isset($options['data'])) {
- if (is_array($options['data'])) {
- // reply to partial request
- } else {
- header("Content-length: ".strlen($options['data']));
- echo $options['data'];
- }
- }
- }
- }
- if (!headers_sent()) {
- if (false === $status) {
- $this->http_status("404 not found");
- } else {
- // TODO: check setting of headers in various code pathes above
- $this->http_status("$status");
- }
- }
- }
- /**
- * parse HTTP Range: header
- *
- * @param array options array to store result in
- * @return void
- */
- function _get_ranges(&$options)
- {
- // process Range: header if present
- if (isset($_SERVER['HTTP_RANGE'])) {
- // we only support standard "bytes" range specifications for now
- if (preg_match('/bytes\s*=\s*(.+)/', $_SERVER['HTTP_RANGE'], $matches)) {
- $options["ranges"] = array();
- // ranges are comma separated
- foreach (explode(",", $matches[1]) as $range) {
- // ranges are either from-to pairs or just end positions
- list($start, $end) = explode("-", $range);
- $options["ranges"][] = ($start==="")
- ? array("last"=>$end)
- : array("start"=>$start, "end"=>$end);
- }
- }
- }
- }
- /**
- * generate separator headers for multipart response
- *
- * first and last call happen without parameters to generate
- * the initial header and closing sequence, all calls inbetween
- * require content mimetype, start and end byte position and
- * optionaly the total byte length of the requested resource
- *
- * @param string mimetype
- * @param int start byte position
- * @param int end byte position
- * @param int total resource byte size
- */
- function _multipart_byterange_header($mimetype = false, $from = false, $to=false, $total=false)
- {
- if ($mimetype === false) {
- if (!isset($this->multipart_separator)) {
- // initial
- // a little naive, this sequence *might* be part of the content
- // but it's really not likely and rather expensive to check
- $this->multipart_separator = "SEPARATOR_".md5(microtime());
- // generate HTTP header
- header("Content-type: multipart/byteranges; boundary=".$this->multipart_separator);
- } else {
- // final
- // generate closing multipart sequence
- echo "\n--{$this->multipart_separator}--";
- }
- } else {
- // generate separator and header for next part
- echo "\n--{$this->multipart_separator}\n";
- echo "Content-type: $mimetype\n";
- echo "Content-range: $from-$to/". ($total === false ? "*" : $total);
- echo "\n\n";
- }
- }
-
- // }}}
- // {{{ http_HEAD()
- /**
- * HEAD method handler
- *
- * @param void
- * @return void
- */
- function http_HEAD()
- {
- $status = false;
- $options = Array();
- $options["path"] = $this->path;
-
- if (method_exists($this, "HEAD")) {
- $status = $this->head($options);
- } else if (method_exists($this, "GET")) {
- ob_start();
- $status = $this->GET($options);
- if (!isset($options['size'])) {
- $options['size'] = ob_get_length();
- }
- ob_end_clean();
- }
-
- if (isset($options['size'])) {
- header("Content-length: ".$options['size']);
- }
- if($status===true) $status = "200 OK";
- if($status===false) $status = "404 Not found";
-
- $this->http_status($status);
- }
- // }}}
- // {{{ http_PUT()
- /**
- * PUT method handler
- *
- * @param void
- * @return void
- */
- function http_PUT()
- {
- if ($this->_check_lock_status($this->path)) {
- $options = Array();
- $options["path"] = $this->path;
- $options["content_length"] = $_SERVER["CONTENT_LENGTH"];
- // get the Content-type
- if (isset($_SERVER["CONTENT_TYPE"])) {
- // for now we do not support any sort of multipart requests
- if (!strncmp($_SERVER["CONTENT_TYPE"], "multipart/", 10)) {
- $this->http_status("501 not implemented");
- echo "The service does not support mulipart PUT requests";
- return;
- }
- $options["content_type"] = $_SERVER["CONTENT_TYPE"];
- } else {
- // default content type if none given
- $options["content_type"] = "application/octet-stream";
- }
- /* RFC 2616 2.6 says: "The recipient of the entity MUST NOT
- ignore any Content-* (e.g. Content-Range) headers that it
- does not understand or implement and MUST return a 501
- (Not Implemented) response in such cases."
- */
- foreach ($_SERVER as $key => $val) {
- if (strncmp($key, "HTTP_CONTENT", 11)) continue;
- switch ($key) {
- case 'HTTP_CONTENT_ENCODING': // RFC 2616 14.11
- // TODO support this if ext/zlib filters are available
- $this->http_status("501 not implemented");
- echo "The service does not support '$val' content encoding";
- return;
- case 'HTTP_CONTENT_LANGUAGE': // RFC 2616 14.12
- // we assume it is not critical if this one is ignored
- // in the actual PUT implementation ...
- $options["content_language"] = $value;
- break;
- case 'HTTP_CONTENT_LOCATION': // RFC 2616 14.14
- /* The meaning of the Content-Location header in PUT
- or POST requests is undefined; servers are free
- to ignore it in those cases. */
- break;
- case 'HTTP_CONTENT_RANGE': // RFC 2616 14.16
- // single byte range requests are supported
- // the header format is also specified in RFC 2616 14.16
- // TODO we have to ensure that implementations support this or send 501 instead
- if (!preg_match('@bytes\s+(\d+)-(\d+)/((\d+)|\*)@', $val, $matches)) {
- $this->http_status("400 bad request");
- echo "The service does only support single byte ranges";
- return;
- }
-
- $range = array("start"=>$matches[1], "end"=>$matches[2]);
- if (is_numeric($matches[3])) {
- $range["total_length"] = $matches[3];
- }
- $option["ranges"][] = $range;
- // TODO make sure the implementation supports partial PUT
- // this has to be done in advance to avoid data being overwritten
- // on implementations that do not support this ...
- break;
- case 'HTTP_CONTENT_MD5': // RFC 2616 14.15
- // TODO: maybe we can just pretend here?
- $this->http_status("501 not implemented");
- echo "The service does not support content MD5 checksum verification";
- return;
- default:
- // any other unknown Content-* headers
- $this->http_status("501 not implemented");
- echo "The service does not support '$key'";
- return;
- }
- }
- $options["stream"] = fopen("php://input", "r");
- $stat = $this->PUT($options);
- if ($stat === false) {
- $stat = "403 Forbidden";
- } else if (is_resource($stat) && get_resource_type($stat) == "stream") {
- $stream = $stat;
- $stat = $options["new"] ? "201 Created" : "204 No Content";
- if (!empty($options["ranges"])) {
- // TODO multipart support is missing (see also above)
- if (0 == fseek($stream, $range[0]["start"], SEEK_SET)) {
- $length = $range[0]["end"]-$range[0]["start"]+1;
- if (!fwrite($stream, fread($options["stream"], $length))) {
- $stat = "403 Forbidden";
- }
- } else {
- $stat = "403 Forbidden";
- }
- } else {
- while (!feof($options["stream"])) {
- if (false === fwrite($stream, fread($options["stream"], 4096))) {
- $stat = "403 Forbidden";
- break;
- }
- }
- }
- fclose($stream);
- }
- $this->http_status($stat);
- } else {
- $this->http_status("423 Locked");
- }
- }
- // }}}
- // {{{ http_DELETE()
- /**
- * DELETE method handler
- *
- * @param void
- * @return void
- */
- function http_DELETE()
- {
- // check RFC 2518 Section 9.2, last paragraph
- if (isset($_SERVER["HTTP_DEPTH"])) {
- if ($_SERVER["HTTP_DEPTH"] != "infinity") {
- $this->http_status("400 Bad Request");
- return;
- }
- }
- // check lock status
- if ($this->_check_lock_status($this->path)) {
- // ok, proceed
- $options = Array();
- $options["path"] = $this->path;
- $stat = $this->DELETE($options);
- $this->http_status($stat);
- } else {
- // sorry, its locked
- $this->http_status("423 Locked");
- }
- }
- // }}}
- // {{{ http_COPY()
- /**
- * COPY method handler
- *
- * @param void
- * @return void
- */
- function http_COPY()
- {
- // no need to check source lock status here
- // destination lock status is always checked by the helper method
- $this->_copymove("copy");
- }
- // }}}
- // {{{ http_MOVE()
- /**
- * MOVE method handler
- *
- * @param void
- * @return void
- */
- function http_MOVE()
- {
- if ($this->_check_lock_status($this->path)) {
- // destination lock status is always checked by the helper method
- $this->_copymove("move");
- } else {
- $this->http_status("423 Locked");
- }
- }
- // }}}
- // {{{ http_LOCK()
- /**
- * LOCK method handler
- *
- * @param void
- * @return void
- */
- function http_LOCK()
- {
- $options = Array();
- $options["path"] = $this->path;
-
- if (isset($_SERVER['HTTP_DEPTH'])) {
- $options["depth"] = $_SERVER["HTTP_DEPTH"];
- } else {
- $options["depth"] = "infinity";
- }
-
- if (isset($_SERVER["HTTP_TIMEOUT"])) {
- $options["timeout"] = explode(",", $_SERVER["HTTP_TIMEOUT"]);
- }
-
- if(empty($_SERVER['CONTENT_LENGTH']) && !empty($_SERVER['HTTP_IF'])) {
- // check if locking is possible
- if(!$this->_check_lock_status($this->path)) {
- $this->http_status("423 Locked");
- return;
- }
- // refresh lock
- $options["update"] = substr($_SERVER['HTTP_IF'], 2, -2);
- $stat = $this->LOCK($options);
- } else {
- // extract lock request information from request XML payload
- $lockinfo = new _parse_lockinfo("php://input");
- if (!$lockinfo->success) {
- $this->http_status("400 bad request");
- }
- // check if locking is possible
- if(!$this->_check_lock_status($this->path, $lockinfo->lockscope === "shared")) {
- $this->http_status("423 Locked");
- return;
- }
- // new lock
- $options["scope"] = $lockinfo->lockscope;
- $options["type"] = $lockinfo->locktype;
- $options["owner"] = $lockinfo->owner;
-
- $options["locktoken"] = $this->_new_locktoken();
-
- $stat = $this->LOCK($options);
- }
-
- if(is_bool($stat)) {
- $http_stat = $stat ? "200 OK" : "423 Locked";
- } else {
- $http_stat = $stat;
- }
-
- $this->http_status($http_stat);
-
- if ($http_stat{0} == 2) { // 2xx states are ok
- if($options["timeout"]) {
- // more than a million is considered an absolute timestamp
- // less is more likely a relative value
- if($options["timeout"]>1000000) {
- $timeout = "Second-".($options['timeout']-time());
- } else {
- $timeout = "Second-$options[timeout]";
- }
- } else {
- $timeout = "Infinite";
- }
-
- header('Content-Type: text/xml; charset="utf-8"');
- header("Lock-Token: <$options[locktoken]>");
- echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";
- echo "<D:prop xmlns:D=\"DAV:\">\n";
- echo " <D:lockdiscovery>\n";
- echo " <D:activelock>\n";
- echo " <D:lockscope><D:$options[scope]/></D:lockscope>\n";
- echo " <D:locktype><D:$options[type]/></D:locktype>\n";
- echo " <D:depth>$options[depth]</D:depth>\n";
- echo " <D:owner>$options[owner]</D:owner>\n";
- echo " <D:timeout>$timeout</D:timeout>\n";
- echo " <D:locktoken><D:href>$options[locktoken]</D:href></D:locktoken>\n";
- echo " </D:activelock>\n";
- echo " </D:lockdiscovery>\n";
- echo "</D:prop>\n\n";
- }
- }
-
- // }}}
- // {{{ http_UNLOCK()
- /**
- * UNLOCK method handler
- *
- * @param void
- * @return void
- */
- function http_UNLOCK()
- {
- $options = Array();
- $options["path"] = $this->path;
- if (isset($_SERVER['HTTP_DEPTH'])) {
- $options["depth"] = $_SERVER["HTTP_DEPTH"];
- } else {
- $options["depth"] = "infinity";
- }
- // strip surrounding <>
- $options["token"] = substr(trim($_SERVER["HTTP_LOCK_TOKEN"]), 1, -1);
- // call user method
- $stat = $this->UNLOCK($options);
- $this->http_status($stat);
- }
- // }}}
- // }}}
- // {{{ _copymove()
- function _copymove($what)
- {
- $options = Array();
- $options["path"] = $this->path;
- if (isset($_SERVER["HTTP_DEPTH"])) {
- $options["depth"] = $_SERVER["HTTP_DEPTH"];
- } else {
- $options["depth"] = "infinity";
- }
- extract(parse_url($_SERVER["HTTP_DESTINATION"]));
- $path = urldecode($path);
- $http_host = $host;
- if (isset($port) && $port != 80)
- $http_host.= ":$port";
- $http_header_host = preg_replace("/:80$/", "", $_SERVER["HTTP_HOST"]);
- if ($http_host == $http_header_host &&
- !strncmp($_SERVER["SCRIPT_NAME"], $path,
- strlen($_SERVER["SCRIPT_NAME"]))) {
- $options["dest"] = substr($path, strlen($_SERVER["SCRIPT_NAME"]));
- if (!$this->_check_lock_status($options["dest"])) {
- $this->http_status("423 Locked");
- return;
- }
- } else {
- $options["dest_url"] = $_SERVER["HTTP_DESTINATION"];
- }
- // see RFC 2518 Sections 9.6, 8.8.4 and 8.9.3
- if (isset($_SERVER["HTTP_OVERWRITE"])) {
- $options["overwrite"] = $_SERVER["HTTP_OVERWRITE"] == "T";
- } else {
- $options["overwrite"] = true;
- }
- $stat = $this->$what($options);
- $this->http_status($stat);
- }
- // }}}
- // {{{ _allow()
- /**
- * check for implemented HTTP methods
- *
- * @param void
- * @return array something
- */
- function _allow()
- {
- // OPTIONS is always there
- $allow = array("OPTIONS" =>"OPTIONS");
- // all other METHODS need both a http_method() wrapper
- // and a method() implementation
- // the base class supplies wrappers only
- foreach(get_class_methods($this) as $method) {
- if (!strncmp("http_", $method, 5)) {
- $method = strtoupper(substr($method, 5));
- if (method_exists($this, $method)) {
- $allow[$method] = $method;
- }
- }
- }
- // we can emulate a missing HEAD implemetation using GET
- if (isset($allow["GET"]))
- $allow["HEAD"] = "HEAD";
- // no LOCK without checklok()
- if (!method_exists($this, "checklock")) {
- unset($allow["LOCK"]);
- unset($allow["UNLOCK"]);
- }
- return $allow;
- }
- // }}}
- /**
- * helper for property element creation
- *
- * @param string XML namespace (optional)
- * @param string property name
- * @param string property value
- * @return array property array
- */
- function mkprop()
- {
- $args = func_get_args();
- if (count($args) == 3) {
- return array("ns" => $args[0],
- "name" => $args[1],
- "val" => $args[2]);
- } else {
- return array("ns" => "DAV:",
- "name" => $args[0],
- "val" => $args[1]);
- }
- }
- // {{{ _check_auth
- /**
- * check authentication if check is implemented
- *
- * @param void
- * @return bool true if authentication succeded or not necessary
- */
- function _check_auth()
- {
- if (method_exists($this, "checkAuth")) {
- // PEAR style method name
- return $this->checkAuth(@$_SERVER["AUTH_TYPE"],
- @$_SERVER["PHP_AUTH_USER"],
- @$_SERVER["PHP_AUTH_PW"]);
- } else if (method_exists($this, "check_auth")) {
- // old (pre 1.0) method name
- return $this->check_auth(@$_SERVER["AUTH_TYPE"],
- @$_SERVER["PHP_AUTH_USER"],
- @$_SERVER["PHP_AUTH_PW"]);
- } else {
- // no method found -> no authentication required
- return true;
- }
- }
- // }}}
- // {{{ UUID stuff
-
- /**
- * generate Unique Universal IDentifier for lock token
- *
- * @param void
- * @return string a new UUID
- */
- function _new_uuid()
- {
- // use uuid extension from PECL if available
- if (function_exists("uuid_create")) {
- return uuid_create();
- }
- // fallback
- $uuid = md5(microtime().getmypid()); // this should be random enough for now
- // set variant and version fields for 'true' random uuid
- $uuid{12} = "4";
- $n = 8 + (ord($uuid{16}) & 3);
- $hex = "0123456789abcdef";
- $uuid{16} = $hex{$n};
- // return formated uuid
- return substr($uuid, 0, 8)."-"
- . substr($uuid, 8, 4)."-"
- . substr($uuid, 12, 4)."-"
- . substr($uuid, 16, 4)."-"
- . substr($uuid, 20);
- }
- /**
- * create a new opaque lock token as defined in RFC2518
- *
- * @param void
- * @return string new RFC2518 opaque lock token
- */
- function _new_locktoken()
- {
- return "opaquelocktoken:".$this->_new_uuid();
- }
- // }}}
- // {{{ WebDAV If: header parsing
- /**
- *
- *
- * @param string header string to parse
- * @param int current parsing position
- * @return array next token (type and value)
- */
- function _if_header_lexer($string, &$pos)
- {
- // skip whitespace
- while (ctype_space($string{$pos})) {
- ++$pos;
- }
- // already at end of string?
- if (strlen($string) <= $pos) {
- return false;
- }
- // get next character
- $c = $string{$pos++};
- // now it depends on what we found
- switch ($c) {
- case "<":
- // URIs are enclosed in <...>
- $pos2 = strpos($string, ">", $pos);
- $uri = substr($string, $pos, $pos2 - $pos);
- $pos = $pos2 + 1;
- return array("URI", $uri);
- case "[":
- //Etags are enclosed in [...]
- if ($string{$pos} == "W") {
- $type = "ETAG_WEAK";
- $pos += 2;
- } else {
- $type = "ETAG_STRONG";
- }
- $pos2 = strpos($string, "]", $pos);
- $etag = substr($string, $pos + 1, $pos2 - $pos - 2);
- $pos = $pos2 + 1;
- return array($type, $etag);
- case "N":
- // "N" indicates negation
- $pos += 2;
- return array("NOT", "Not");
- default:
- // anything else is passed verbatim char by char
- return array("CHAR", $c);
- }
- }
- /**
- * parse If: header
- *
- * @param string header string
- * @return array URIs and their conditions
- */
- function _if_header_parser($str)
- {
- $pos = 0;
- $len = strlen($str);
- $uris = array();
- // parser loop
- while ($pos < $len) {
- // get next token
- $token = $this->_if_header_lexer($str, $pos);
- // check for URI
- if ($token[0] == "URI") {
- $uri = $token[1]; // remember URI
- $token = $this->_if_header_lexer($str, $pos); // get next token
- } else {
- $uri = "";
- }
- // sanity check
- if ($token[0] != "CHAR" || $token[1] != "(") {
- return false;
- }
- $list = array();
- $level = 1;
- $not = "";
- while ($level) {
- $token = $this->_if_header_lexer($str, $pos);
- if ($token[0] == "NOT") {
- $not = "!";
- continue;
- }
- switch ($token[0]) {
- case "CHAR":
- switch ($token[1]) {
- case "(":
- $level++;
- break;
- case ")":
- $level--;
- break;
- default:
- return false;
- }
- break;
- case "URI":
- $list[] = $not."<$token[1]>";
- break;
- case "ETAG_WEAK":
- $list[] = $not."[W/'$token[1]']>";
- break;
- case "ETAG_STRONG":
- $list[] = $not."['$token[1]']>";
- break;
- default:
- return false;
- }
- $not = "";
- }
- if (@is_array($uris[$uri])) {
- $uris[$uri] = array_merge($uris[$uri],$list);
- } else {
- $uris[$uri] = $list;
- }
- }
- return $uris;
- }
- /**
- * check if conditions from "If:" headers are meat
- *
- * the "If:" header is an extension to HTTP/1.1
- * defined in RFC 2518 section 9.4
- *
- * @param void
- * @return void
- */
- function _check_if_header_conditions()
- {
- if (isset($_SERVER["HTTP_IF"])) {
- $this->_if_header_uris =
- $this->_if_header_parser($_SERVER["HTTP_IF"]);
- foreach($this->_if_header_uris as $uri => $conditions) {
- if ($uri == "") {
- $uri = $this->uri;
- }
- // all must match
- $state = true;
- foreach($conditions as $condition) {
- // lock tokens may be free form (RFC2518 6.3)
- // but if opaquelocktokens are used (RFC2518 6.4)
- // we have to check the format (litmus tests this)
- if (!strncmp($condition, "<opaquelocktoken:", strlen("<opaquelocktoken"))) {
- if (!preg_match('/^<opaquelocktoken:[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{12}>$/', $condition)) {
- $this->http_status("423 Locked");
- return false;
- }
- }
- if (!$this->_check_uri_condition($uri, $condition)) {
- $this->http_status("412 Precondition failed");
- $state = false;
- break;
- }
- }
- // any match is ok
- if ($state == true) {
- return true;
- }
- }
- return false;
- }
- return true;
- }
- /**
- * Check a single URI condition parsed from an if-header
- *
- * Check a single URI condition parsed from an if-header
- *
- * @abstract
- * @param string $uri URI to check
- * @param string $condition Condition to check for this URI
- * @returns bool Condition check result
- */
- function _check_uri_condition($uri, $condition)
- {
- // not really implemented here,
- // implementations must override
- return true;
- }
- /**
- *
- *
- * @param string path of resource to check
- * @param bool exclusive lock?
- */
- function _check_lock_status($path, $exclusive_only = false)
- {
- // FIXME depth -> ignored for now
- if (method_exists($this, "checkLock")) {
- // is locked?
- $lock = $this->checkLock($path);
- // ... and lock is not owned?
- if (is_array($lock) && count($lock)) {
- // FIXME doesn't check uri restrictions yet
- if (!isset($_SERVER["HTTP_IF"]) || !strstr($_SERVER["HTTP_IF"], $lock["token"])) {
- if (!$exclusive_only || ($lock["scope"] !== "shared"))
- return false;
- }
- }
- }
- return true;
- }
- // }}}
- /**
- * Generate lockdiscovery reply from checklock() result
- *
- * @param string resource path to check
- * @return string lockdiscovery response
- */
- function lockdiscovery($path)
- {
- // no lock support without checklock() method
- if (!method_exists($this, "checklock")) {
- return "";
- }
- // collect response here
- $activelocks = "";
- // get checklock() reply
- $lock = $this->checklock($path);
- // generate <activelock> block for returned data
- if (is_array($lock) && count($lock)) {
- // check for 'timeout' or 'expires'
- if (!empty($lock["expires"])) {
- $timeout = "Second-".($lock["expires"] - time());
- } else if (!empty($lock["timeout"])) {
- $timeout = "Second-$lock[timeout]";
- } else {
- $timeout = "Infinite";
- }
- // genreate response block
- $activelocks.= "
- <D:activelock>
- <D:lockscope><D:$lock[scope]/></D:lockscope>
- <D:locktype><D:$lock[type]/></D:locktype>
- <D:depth>$lock[depth]</D:depth>
- <D:owner>$lock[owner]</D:owner>
- <D:timeout>$timeout</D:timeout>
- <D:locktoken><D:href>$lock[token]</D:href></D:locktoken>
- </D:activelock>
- ";
- }
- // return generated response
- return $activelocks;
- }
- /**
- * set HTTP return status and mirror it in a private header
- *
- * @param string status code and message
- * @return void
- */
- function http_status($status)
- {
- // simplified success case
- if($status === true) {
- $status = "200 OK";
- }
- // remember status
- $this->_http_status = $status;
- // generate HTTP status response
- header("HTTP/1.1 $status");
- header("X-WebDAV-Status: $status", true);
- }
- /**
- * private minimalistic version of PHP urlencode()
- *
- * only blanks and XML special chars must be encoded here
- * full urlencode() encoding confuses some clients ...
- *
- * @param string URL to encode
- * @return string encoded URL
- */
- function _urlencode($url)
- {
- return strtr($url, array(" "=>"%20",
- "&"=>"%26",
- "<"=>"%3C",
- ">"=>"%3E",
- ));
- }
- /**
- * private version of PHP urldecode
- *
- * not really needed but added for completenes
- *
- * @param string URL to decode
- * @return string decoded URL
- */
- function _urldecode($path)
- {
- return urldecode($path);
- }
- /**
- * UTF-8 encode property values if not already done so
- *
- * @param string text to encode
- * @return string utf-8 encoded text
- */
- function _prop_encode($text)
- {
- switch (strtolower($this->_prop_encoding)) {
- case "utf-8":
- return $text;
- case "iso-8859-1":
- case "iso-8859-15":
- case "latin-1":
- default:
- return utf8_encode($text);
- }
- }
- /**
- * Slashify - make sure path ends in a slash
- *
- * @param string directory path
- * @returns string directory path wiht trailing slash
- */
- function _slashify($path) {
- if ($path[strlen($path)-1] != '/') {
- $path = $path."/";
- }
- return $path;
- }
- /**
- * Unslashify - make sure path doesn't in a slash
- *
- * @param string directory path
- * @returns string directory path wihtout trailing slash
- */
- function _unslashify($path) {
- if ($path[strlen($path)-1] == '/') {
- $path = substr($path, 0, strlen($path, 0, -1));
- }
- return $path;
- }
- /**
- * Merge two pathes, make sure there is exactly one slash between them
- *
- * @param string parent path
- * @param string child path
- * @return string merged path
- */
- function _mergePathes($parent, $child)
- {
- if ($child{0} == '/') {
- return $this->_unslashify($parent).$child;
- } else {
- return $this->_slashify($parent).$child;
- }
- }
- }
- /*
- * Local variables:
- * tab-width: 4
- * c-basic-offset: 4
- * End:
- */
- ?>
|