Proyectos de Subversion Moodle

Rev

Rev 1 | | Comparar con el anterior | Ultima modificación | Ver Log |

Rev Autor Línea Nro. Línea
1 efrain 1
<?php
2
// This file is part of Moodle - http://moodle.org/
3
//
4
// Moodle is free software: you can redistribute it and/or modify
5
// it under the terms of the GNU General Public License as published by
6
// the Free Software Foundation, either version 3 of the License, or
7
// (at your option) any later version.
8
//
9
// Moodle is distributed in the hope that it will be useful,
10
// but WITHOUT ANY WARRANTY; without even the implied warranty of
11
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
12
// GNU General Public License for more details.
13
//
14
// You should have received a copy of the GNU General Public License
15
// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
16
 
17
/**
18
 * These functions are required very early in the Moodle
19
 * setup process, before any of the main libraries are
20
 * loaded.
21
 *
22
 * @package    core
23
 * @subpackage lib
24
 * @copyright  1999 onwards Martin Dougiamas  {@link http://moodle.com}
25
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
26
 */
27
 
28
defined('MOODLE_INTERNAL') || die();
29
 
30
// Debug levels - always keep the values in ascending order!
31
/** No warnings and errors at all */
32
define('DEBUG_NONE', 0);
33
/** Fatal errors only */
34
define('DEBUG_MINIMAL', E_ERROR | E_PARSE);
35
/** Errors, warnings and notices */
36
define('DEBUG_NORMAL', E_ERROR | E_PARSE | E_WARNING | E_NOTICE);
37
/** All problems except strict PHP warnings */
38
define('DEBUG_ALL', E_ALL & ~E_STRICT);
39
/** DEBUG_ALL with all debug messages and strict warnings */
40
define('DEBUG_DEVELOPER', E_ALL | E_STRICT);
41
 
42
/** Remove any memory limits */
43
define('MEMORY_UNLIMITED', -1);
44
/** Standard memory limit for given platform */
45
define('MEMORY_STANDARD', -2);
46
/**
47
 * Large memory limit for given platform - used in cron, upgrade, and other places that need a lot of memory.
48
 * Can be overridden with $CFG->extramemorylimit setting.
49
 */
50
define('MEMORY_EXTRA', -3);
51
/** Extremely large memory limit - not recommended for standard scripts */
52
define('MEMORY_HUGE', -4);
53
 
54
/**
55
 * Base Moodle Exception class
56
 *
57
 * Although this class is defined here, you cannot throw a moodle_exception until
58
 * after moodlelib.php has been included (which will happen very soon).
59
 *
60
 * @package    core
61
 * @subpackage lib
62
 * @copyright  2008 Petr Skoda  {@link http://skodak.org}
63
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
64
 */
65
class moodle_exception extends Exception {
66
 
67
    /**
68
     * @var string The name of the string from error.php to print
69
     */
70
    public $errorcode;
71
 
72
    /**
73
     * @var string The name of module
74
     */
75
    public $module;
76
 
77
    /**
78
     * @var mixed Extra words and phrases that might be required in the error string
79
     */
80
    public $a;
81
 
82
    /**
83
     * @var string The url where the user will be prompted to continue. If no url is provided the user will be directed to the site index page.
84
     */
85
    public $link;
86
 
87
    /**
88
     * @var string Optional information to aid the debugging process
89
     */
90
    public $debuginfo;
91
 
92
    /**
93
     * Constructor
94
     * @param string $errorcode The name of the string from error.php to print
95
     * @param string $module name of module
96
     * @param string $link The url where the user will be prompted to continue. If no url is provided the user will be directed to the site index page.
97
     * @param mixed $a Extra words and phrases that might be required in the error string
98
     * @param string $debuginfo optional debugging information
99
     */
100
    function __construct($errorcode, $module='', $link='', $a=NULL, $debuginfo=null) {
101
        global $CFG;
102
 
103
        if (empty($module) || $module == 'moodle' || $module == 'core') {
104
            $module = 'error';
105
        }
106
 
107
        $this->errorcode = $errorcode;
108
        $this->module    = $module;
109
        $this->link      = $link;
110
        $this->a         = $a;
111
        $this->debuginfo = is_null($debuginfo) ? null : (string)$debuginfo;
112
 
113
        if (get_string_manager()->string_exists($errorcode, $module)) {
114
            $message = get_string($errorcode, $module, $a);
115
            $haserrorstring = true;
116
        } else {
117
            $message = $module . '/' . $errorcode;
118
            $haserrorstring = false;
119
        }
120
 
121
        $isinphpunittest = (defined('PHPUNIT_TEST') && PHPUNIT_TEST);
122
        $hasdebugdeveloper = (
123
            isset($CFG->debugdisplay) &&
124
            isset($CFG->debug) &&
125
            $CFG->debugdisplay &&
126
            $CFG->debug === DEBUG_DEVELOPER
127
        );
128
 
129
        if ($debuginfo) {
130
            if ($isinphpunittest || $hasdebugdeveloper) {
131
                $message = "$message ($debuginfo)";
132
            }
133
        }
134
 
135
        if (!$haserrorstring and $isinphpunittest) {
136
            // Append the contents of $a to $debuginfo so helpful information isn't lost.
137
            // This emulates what {@link get_exception_info()} does. Unfortunately that
138
            // function is not used by phpunit.
139
            $message .= PHP_EOL.'$a contents: '.print_r($a, true);
140
        }
141
 
142
        parent::__construct($message, 0);
143
    }
144
}
145
 
146
/**
147
 * Course/activity access exception.
148
 *
149
 * This exception is thrown from require_login()
150
 *
151
 * @package    core_access
152
 * @copyright  2010 Petr Skoda  {@link http://skodak.org}
153
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
154
 */
155
class require_login_exception extends moodle_exception {
156
    /**
157
     * Constructor
158
     * @param string $debuginfo Information to aid the debugging process
159
     */
160
    function __construct($debuginfo) {
161
        parent::__construct('requireloginerror', 'error', '', NULL, $debuginfo);
162
    }
163
}
164
 
165
/**
166
 * Session timeout exception.
167
 *
168
 * This exception is thrown from require_login()
169
 *
170
 * @package    core_access
171
 * @copyright  2015 Andrew Nicols <andrew@nicols.co.uk>
172
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
173
 */
174
class require_login_session_timeout_exception extends require_login_exception {
175
    /**
176
     * Constructor
177
     */
178
    public function __construct() {
179
        moodle_exception::__construct('sessionerroruser', 'error');
180
    }
181
}
182
 
183
/**
184
 * Web service parameter exception class
185
 * @deprecated since Moodle 2.2 - use moodle exception instead
186
 * This exception must be thrown to the web service client when a web service parameter is invalid
187
 * The error string is gotten from webservice.php
188
 */
189
class webservice_parameter_exception extends moodle_exception {
190
    /**
191
     * Constructor
192
     * @param string $errorcode The name of the string from webservice.php to print
193
     * @param string $a The name of the parameter
194
     * @param string $debuginfo Optional information to aid debugging
195
     */
196
    function __construct($errorcode=null, $a = '', $debuginfo = null) {
197
        parent::__construct($errorcode, 'webservice', '', $a, $debuginfo);
198
    }
199
}
200
 
201
/**
202
 * Exceptions indicating user does not have permissions to do something
203
 * and the execution can not continue.
204
 *
205
 * @package    core_access
206
 * @copyright  2009 Petr Skoda  {@link http://skodak.org}
207
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
208
 */
209
class required_capability_exception extends moodle_exception {
210
    /**
211
     * Constructor
212
     * @param context $context The context used for the capability check
213
     * @param string $capability The required capability
214
     * @param string $errormessage The error message to show the user
215
     * @param string $stringfile
216
     */
217
    function __construct($context, $capability, $errormessage, $stringfile) {
218
        $capabilityname = get_capability_string($capability);
219
        if ($context->contextlevel == CONTEXT_MODULE and preg_match('/:view$/', $capability)) {
220
            // we can not go to mod/xx/view.php because we most probably do not have cap to view it, let's go to course instead
221
            $parentcontext = $context->get_parent_context();
222
            $link = $parentcontext->get_url();
223
        } else {
224
            $link = $context->get_url();
225
        }
226
        parent::__construct($errormessage, $stringfile, $link, $capabilityname);
227
    }
228
}
229
 
230
/**
231
 * Exception indicating programming error, must be fixed by a programer. For example
232
 * a core API might throw this type of exception if a plugin calls it incorrectly.
233
 *
234
 * @package    core
235
 * @subpackage lib
236
 * @copyright  2008 Petr Skoda  {@link http://skodak.org}
237
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
238
 */
239
class coding_exception extends moodle_exception {
240
    /**
241
     * Constructor
242
     * @param string $hint short description of problem
243
     * @param string $debuginfo detailed information how to fix problem
244
     */
245
    function __construct($hint, $debuginfo=null) {
246
        parent::__construct('codingerror', 'debug', '', $hint, $debuginfo);
247
    }
248
}
249
 
250
/**
251
 * Exception indicating malformed parameter problem.
252
 * This exception is not supposed to be thrown when processing
253
 * user submitted data in forms. It is more suitable
254
 * for WS and other low level stuff.
255
 *
256
 * @package    core
257
 * @subpackage lib
258
 * @copyright  2009 Petr Skoda  {@link http://skodak.org}
259
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
260
 */
261
class invalid_parameter_exception extends moodle_exception {
262
    /**
263
     * Constructor
264
     * @param string $debuginfo some detailed information
265
     */
266
    function __construct($debuginfo=null) {
267
        parent::__construct('invalidparameter', 'debug', '', null, $debuginfo);
268
    }
269
}
270
 
271
/**
272
 * Exception indicating malformed response problem.
273
 * This exception is not supposed to be thrown when processing
274
 * user submitted data in forms. It is more suitable
275
 * for WS and other low level stuff.
276
 */
277
class invalid_response_exception extends moodle_exception {
278
    /**
279
     * Constructor
280
     * @param string $debuginfo some detailed information
281
     */
282
    function __construct($debuginfo=null) {
283
        parent::__construct('invalidresponse', 'debug', '', null, $debuginfo);
284
    }
285
}
286
 
287
/**
288
 * An exception that indicates something really weird happened. For example,
289
 * if you do switch ($context->contextlevel), and have one case for each
290
 * CONTEXT_... constant. You might throw an invalid_state_exception in the
291
 * default case, to just in case something really weird is going on, and
292
 * $context->contextlevel is invalid - rather than ignoring this possibility.
293
 *
294
 * @package    core
295
 * @subpackage lib
296
 * @copyright  2009 onwards Martin Dougiamas  {@link http://moodle.com}
297
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
298
 */
299
class invalid_state_exception extends moodle_exception {
300
    /**
301
     * Constructor
302
     * @param string $hint short description of problem
303
     * @param string $debuginfo optional more detailed information
304
     */
305
    function __construct($hint, $debuginfo=null) {
306
        parent::__construct('invalidstatedetected', 'debug', '', $hint, $debuginfo);
307
    }
308
}
309
 
310
/**
311
 * An exception that indicates incorrect permissions in $CFG->dataroot
312
 *
313
 * @package    core
314
 * @subpackage lib
315
 * @copyright  2010 Petr Skoda {@link http://skodak.org}
316
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
317
 */
318
class invalid_dataroot_permissions extends moodle_exception {
319
    /**
320
     * Constructor
321
     * @param string $debuginfo optional more detailed information
322
     */
323
    function __construct($debuginfo = NULL) {
324
        parent::__construct('invaliddatarootpermissions', 'error', '', NULL, $debuginfo);
325
    }
326
}
327
 
328
/**
329
 * An exception that indicates that file can not be served
330
 *
331
 * @package    core
332
 * @subpackage lib
333
 * @copyright  2010 Petr Skoda {@link http://skodak.org}
334
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
335
 */
336
class file_serving_exception extends moodle_exception {
337
    /**
338
     * Constructor
339
     * @param string $debuginfo optional more detailed information
340
     */
341
    function __construct($debuginfo = NULL) {
342
        parent::__construct('cannotservefile', 'error', '', NULL, $debuginfo);
343
    }
344
}
345
 
346
/**
347
 * Get the Whoops! handler.
348
 *
349
 * @return \Whoops\Run|null
350
 */
351
function get_whoops(): ?\Whoops\Run {
352
    global $CFG;
353
 
354
    if (CLI_SCRIPT || AJAX_SCRIPT) {
355
        return null;
356
    }
357
 
358
    if (defined('PHPUNIT_TEST') && PHPUNIT_TEST) {
359
        return null;
360
    }
361
 
362
    if (defined('BEHAT_SITE_RUNNING') && BEHAT_SITE_RUNNING) {
363
        return null;
364
    }
365
 
11 efrain 366
    if (empty($CFG->debugdisplay)) {
1 efrain 367
        return null;
368
    }
369
 
370
    if (!$CFG->debug_developer_use_pretty_exceptions) {
371
        return null;
372
    }
373
 
374
    $composerautoload = "{$CFG->dirroot}/vendor/autoload.php";
375
    if (file_exists($composerautoload)) {
376
        require_once($composerautoload);
377
    }
378
 
379
    if (!class_exists(\Whoops\Run::class)) {
380
        return null;
381
    }
382
 
383
    // We have Whoops available, use it.
384
    $whoops = new \Whoops\Run();
385
 
386
    // Append a custom handler to add some more information to the frames.
387
    $whoops->appendHandler(function ($exception, $inspector, $run) {
388
        $collection = $inspector->getFrames();
389
 
390
        // Detect if the Whoops handler was immediately invoked by a call to `debugging()`.
391
        // If so, we remove the top frames in the collection to avoid showing the inner
392
        // workings of debugging, and the point that we trigger the error that is picked up by Whoops.
393
        $isdebugging = count($collection) > 2;
394
        $isdebugging = $isdebugging && str_ends_with($collection[1]->getFile(), '/lib/weblib.php');
395
        $isdebugging = $isdebugging && $collection[2]->getFunction() === 'debugging';
396
 
397
        if ($isdebugging) {
398
            $remove = array_slice($collection->getArray(), 0, 2);
399
            $collection->filter(function ($frame) use ($remove): bool {
400
                return array_search($frame, $remove) === false;
401
            });
402
        } else {
403
            // Moodle exceptions often have a link to the Moodle docs pages for them.
404
            // Add that to the first frame in the stack.
405
            $info = get_exception_info($exception);
406
            if ($info->moreinfourl) {
407
                $collection[0]->addComment("{$info->moreinfourl}", 'More info');
408
            }
409
        }
410
    });
411
 
412
    // Add the Pretty page handler. It's the bee's knees.
413
    $handler = new \Whoops\Handler\PrettyPageHandler();
414
    if (isset($CFG->debug_developer_editor)) {
415
        $handler->setEditor($CFG->debug_developer_editor ?: null);
416
    }
417
    $whoops->appendHandler($handler);
418
 
419
    return $whoops;
420
}
421
 
422
/**
423
 * Default exception handler.
424
 *
425
 * @param Exception $ex
426
 * @return void -does not return. Terminates execution!
427
 */
428
function default_exception_handler($ex) {
429
    global $CFG, $DB, $OUTPUT, $USER, $FULLME, $SESSION, $PAGE;
430
 
431
    // detect active db transactions, rollback and log as error
432
    abort_all_db_transactions();
433
 
434
    if (($ex instanceof required_capability_exception) && !CLI_SCRIPT && !AJAX_SCRIPT && !empty($CFG->autologinguests) && !empty($USER->autologinguest)) {
435
        $SESSION->wantsurl = qualified_me();
436
        redirect(get_login_url());
437
    }
438
 
439
    $info = get_exception_info($ex);
440
 
441
    // If we already tried to send the header remove it, the content length
442
    // should be either empty or the length of the error page.
443
    @header_remove('Content-Length');
444
 
445
    if ($whoops = get_whoops()) {
446
        // If whoops is available we will use it. The get_whoops() function checks whether all conditions are met.
447
        $whoops->handleException($ex);
448
    }
449
 
450
    if (is_early_init($info->backtrace)) {
451
        echo bootstrap_renderer::early_error($info->message, $info->moreinfourl, $info->link, $info->backtrace, $info->debuginfo, $info->errorcode);
452
    } else {
453
        if (debugging('', DEBUG_MINIMAL)) {
454
            $logerrmsg = "Default exception handler: ".$info->message.' Debug: '.$info->debuginfo."\n".format_backtrace($info->backtrace, true);
455
            error_log($logerrmsg);
456
        }
457
 
458
        try {
459
            if ($DB) {
460
                // If you enable db debugging and exception is thrown, the print footer prints a lot of rubbish
461
                $DB->set_debug(0);
462
            }
463
            if (AJAX_SCRIPT) {
464
                // If we are in an AJAX script we don't want to use PREFERRED_RENDERER_TARGET.
465
                // Because we know we will want to use ajax format.
466
                $renderer = new core_renderer_ajax($PAGE, 'ajax');
467
            } else {
468
                $renderer = $OUTPUT;
469
            }
470
            echo $renderer->fatal_error($info->message, $info->moreinfourl, $info->link, $info->backtrace, $info->debuginfo,
471
                $info->errorcode);
472
        } catch (Exception $e) {
473
            $out_ex = $e;
474
        } catch (Throwable $e) {
475
            // Engine errors in PHP7 throw exceptions of type Throwable (this "catch" will be ignored in PHP5).
476
            $out_ex = $e;
477
        }
478
 
479
        if (isset($out_ex)) {
480
            // default exception handler MUST not throw any exceptions!!
481
            // the problem here is we do not know if page already started or not, we only know that somebody messed up in outputlib or theme
482
            // so we just print at least something instead of "Exception thrown without a stack frame in Unknown on line 0":-(
483
            if (CLI_SCRIPT or AJAX_SCRIPT) {
484
                // just ignore the error and send something back using the safest method
485
                echo bootstrap_renderer::early_error($info->message, $info->moreinfourl, $info->link, $info->backtrace, $info->debuginfo, $info->errorcode);
486
            } else {
487
                echo bootstrap_renderer::early_error_content($info->message, $info->moreinfourl, $info->link, $info->backtrace, $info->debuginfo);
488
                $outinfo = get_exception_info($out_ex);
489
                echo bootstrap_renderer::early_error_content($outinfo->message, $outinfo->moreinfourl, $outinfo->link, $outinfo->backtrace, $outinfo->debuginfo);
490
            }
491
        }
492
    }
493
 
494
    exit(1); // General error code
495
}
496
 
497
/**
498
 * Default error handler, prevents some white screens.
499
 * @param int $errno
500
 * @param string $errstr
501
 * @param string $errfile
502
 * @param int $errline
503
 * @return bool false means use default error handler
504
 */
505
function default_error_handler($errno, $errstr, $errfile, $errline) {
506
    if ($whoops = get_whoops()) {
507
        // If whoops is available we will use it. The get_whoops() function checks whether all conditions are met.
508
        $whoops->handleError($errno, $errstr, $errfile, $errline);
509
    }
510
    if ($errno == 4096) {
511
        //fatal catchable error
512
        throw new coding_exception('PHP catchable fatal error', $errstr);
513
    }
514
    return false;
515
}
516
 
517
/**
518
 * Unconditionally abort all database transactions, this function
519
 * should be called from exception handlers only.
520
 * @return void
521
 */
522
function abort_all_db_transactions() {
523
    global $CFG, $DB, $SCRIPT;
524
 
525
    // default exception handler MUST not throw any exceptions!!
526
 
527
    if ($DB && $DB->is_transaction_started()) {
528
        error_log('Database transaction aborted automatically in ' . $CFG->dirroot . $SCRIPT);
529
        // note: transaction blocks should never change current $_SESSION
530
        $DB->force_transaction_rollback();
531
    }
532
}
533
 
534
/**
535
 * This function encapsulates the tests for whether an exception was thrown in
536
 * early init -- either during setup.php or during init of $OUTPUT.
537
 *
538
 * If another exception is thrown then, and if we do not take special measures,
539
 * we would just get a very cryptic message "Exception thrown without a stack
540
 * frame in Unknown on line 0". That makes debugging very hard, so we do take
541
 * special measures in default_exception_handler, with the help of this function.
542
 *
543
 * @param array $backtrace the stack trace to analyse.
544
 * @return boolean whether the stack trace is somewhere in output initialisation.
545
 */
546
function is_early_init($backtrace) {
547
    $dangerouscode = array(
548
        array('function' => 'header', 'type' => '->'),
549
        array('class' => 'bootstrap_renderer'),
550
        array('file' => __DIR__.'/setup.php'),
551
    );
552
    foreach ($backtrace as $stackframe) {
553
        foreach ($dangerouscode as $pattern) {
554
            $matches = true;
555
            foreach ($pattern as $property => $value) {
556
                if (!isset($stackframe[$property]) || $stackframe[$property] != $value) {
557
                    $matches = false;
558
                }
559
            }
560
            if ($matches) {
561
                return true;
562
            }
563
        }
564
    }
565
    return false;
566
}
567
 
568
/**
569
 * Returns detailed information about specified exception.
570
 *
571
 * @param Throwable $ex any sort of exception or throwable.
572
 * @return stdClass standardised info to display. Fields are clear if you look at the end of this function.
573
 */
574
function get_exception_info($ex): stdClass {
575
    global $CFG;
576
 
577
    if ($ex instanceof moodle_exception) {
578
        $errorcode = $ex->errorcode;
579
        $module = $ex->module;
580
        $a = $ex->a;
581
        $link = $ex->link;
582
        $debuginfo = $ex->debuginfo;
583
    } else {
584
        $errorcode = 'generalexceptionmessage';
585
        $module = 'error';
586
        $a = $ex->getMessage();
587
        $link = '';
588
        $debuginfo = '';
589
    }
590
 
591
    // Append the error code to the debug info to make grepping and googling easier
592
    $debuginfo .= PHP_EOL."Error code: $errorcode";
593
 
594
    $backtrace = $ex->getTrace();
595
    $place = array('file'=>$ex->getFile(), 'line'=>$ex->getLine(), 'exception'=>get_class($ex));
596
    array_unshift($backtrace, $place);
597
 
598
    // Be careful, no guarantee moodlelib.php is loaded.
599
    if (empty($module) || $module == 'moodle' || $module == 'core') {
600
        $module = 'error';
601
    }
602
    // Search for the $errorcode's associated string
603
    // If not found, append the contents of $a to $debuginfo so helpful information isn't lost
604
    if (function_exists('get_string_manager')) {
605
        if (get_string_manager()->string_exists($errorcode, $module)) {
606
            $message = get_string($errorcode, $module, $a);
607
        } elseif ($module == 'error' && get_string_manager()->string_exists($errorcode, 'moodle')) {
608
            // Search in moodle file if error specified - needed for backwards compatibility
609
            $message = get_string($errorcode, 'moodle', $a);
610
        } else {
611
            $message = $module . '/' . $errorcode;
612
            $debuginfo .= PHP_EOL.'$a contents: '.print_r($a, true);
613
        }
614
    } else {
615
        $message = $module . '/' . $errorcode;
616
        $debuginfo .= PHP_EOL.'$a contents: '.print_r($a, true);
617
    }
618
 
619
    // Remove some absolute paths from message and debugging info.
620
    $searches = array();
621
    $replaces = array();
622
    $cfgnames = array('backuptempdir', 'tempdir', 'cachedir', 'localcachedir', 'themedir', 'dataroot', 'dirroot');
623
    foreach ($cfgnames as $cfgname) {
624
        if (property_exists($CFG, $cfgname)) {
625
            $searches[] = $CFG->$cfgname;
626
            $replaces[] = "[$cfgname]";
627
        }
628
    }
629
    if (!empty($searches)) {
630
        $message   = str_replace($searches, $replaces, $message);
631
        $debuginfo = str_replace($searches, $replaces, $debuginfo);
632
    }
633
 
634
    // Be careful, no guarantee weblib.php is loaded.
635
    if (function_exists('clean_text')) {
636
        $message = clean_text($message);
637
    } else {
638
        $message = htmlspecialchars($message, ENT_COMPAT);
639
    }
640
 
641
    if (!empty($CFG->errordocroot)) {
642
        $errordoclink = $CFG->errordocroot . '/en/';
643
    } else {
644
        // Only if the function is available. May be not for early errors.
645
        if (function_exists('current_language')) {
646
            $errordoclink = get_docs_url();
647
        } else {
648
            $errordoclink = 'https://docs.moodle.org/en/';
649
        }
650
    }
651
 
652
    if ($module === 'error') {
653
        $modulelink = 'moodle';
654
    } else {
655
        $modulelink = $module;
656
    }
657
    $moreinfourl = $errordoclink . 'error/' . $modulelink . '/' . $errorcode;
658
 
659
    if (empty($link)) {
660
        $link = get_local_referer(false) ?: ($CFG->wwwroot . '/');
661
    }
662
 
663
    // When printing an error the continue button should never link offsite.
664
    // We cannot use clean_param() here as it is not guaranteed that it has been loaded yet.
665
    if (stripos($link, $CFG->wwwroot) === 0) {
666
        // Internal HTTP, all good.
667
    } else {
668
        // External link spotted!
669
        $link = $CFG->wwwroot . '/';
670
    }
671
 
672
    $info = new stdClass();
673
    $info->message     = $message;
674
    $info->errorcode   = $errorcode;
675
    $info->backtrace   = $backtrace;
676
    $info->link        = $link;
677
    $info->moreinfourl = $moreinfourl;
678
    $info->a           = $a;
679
    $info->debuginfo   = $debuginfo;
680
 
681
    return $info;
682
}
683
 
684
/**
685
 * @deprecated since Moodle 3.8 MDL-61038 - please do not use this function any more.
686
 * @see \core\uuid::generate()
687
 */
688
function generate_uuid() {
689
    throw new coding_exception('generate_uuid() cannot be used anymore. Please use ' .
690
        '\core\uuid::generate() instead.');
691
}
692
 
693
/**
694
 * Returns the Moodle Docs URL in the users language for a given 'More help' link.
695
 *
696
 * There are three cases:
697
 *
698
 * 1. In the normal case, $path will be a short relative path 'component/thing',
699
 * like 'mod/folder/view' 'group/import'. This gets turned into an link to
700
 * MoodleDocs in the user's language, and for the appropriate Moodle version.
701
 * E.g. 'group/import' may become 'http://docs.moodle.org/2x/en/group/import'.
702
 * The 'http://docs.moodle.org' bit comes from $CFG->docroot.
703
 *
704
 * This is the only option that should be used in standard Moodle code. The other
705
 * two options have been implemented because they are useful for third-party plugins.
706
 *
707
 * 2. $path may be an absolute URL, starting http:// or https://. In this case,
708
 * the link is used as is.
709
 *
710
 * 3. $path may start %%WWWROOT%%, in which case that is replaced by
711
 * $CFG->wwwroot to make the link.
712
 *
713
 * @param string $path the place to link to. See above for details.
714
 * @return string The MoodleDocs URL in the user's language. for example @link http://docs.moodle.org/2x/en/$path}
715
 */
716
function get_docs_url($path = null) {
717
    global $CFG;
718
    if ($path === null) {
719
        $path = '';
720
    }
721
 
722
    $path = $path ?? '';
723
    // Absolute URLs are used unmodified.
724
    if (substr($path, 0, 7) === 'http://' || substr($path, 0, 8) === 'https://') {
725
        return $path;
726
    }
727
 
728
    // Paths starting %%WWWROOT%% have that replaced by $CFG->wwwroot.
729
    if (substr($path, 0, 11) === '%%WWWROOT%%') {
730
        return $CFG->wwwroot . substr($path, 11);
731
    }
732
 
733
    // Otherwise we do the normal case, and construct a MoodleDocs URL relative to $CFG->docroot.
734
 
735
    // Check that $CFG->branch has been set up, during installation it won't be.
736
    if (empty($CFG->branch)) {
737
        // It's not there yet so look at version.php.
738
        include($CFG->dirroot.'/version.php');
739
    } else {
740
        // We can use $CFG->branch and avoid having to include version.php.
741
        $branch = $CFG->branch;
742
    }
743
    // ensure branch is valid.
744
    if (!$branch) {
745
        // We should never get here but in case we do lets set $branch to .
746
        // the smart one's will know that this is the current directory
747
        // and the smarter ones will know that there is some smart matching
748
        // that will ensure people end up at the latest version of the docs.
749
        $branch = '.';
750
    }
751
    if (empty($CFG->doclang)) {
752
        $lang = current_language();
753
    } else {
754
        $lang = $CFG->doclang;
755
    }
756
    $end = '/' . $branch . '/' . $lang . '/' . $path;
757
    if (empty($CFG->docroot)) {
758
        return 'http://docs.moodle.org'. $end;
759
    } else {
760
        return $CFG->docroot . $end ;
761
    }
762
}
763
 
764
/**
765
 * Formats a backtrace ready for output.
766
 *
767
 * This function does not include function arguments because they could contain sensitive information
768
 * not suitable to be exposed in a response.
769
 *
770
 * @param array $callers backtrace array, as returned by debug_backtrace().
771
 * @param boolean $plaintext if false, generates HTML, if true generates plain text.
772
 * @return string formatted backtrace, ready for output.
773
 */
774
function format_backtrace($callers, $plaintext = false) {
775
    // do not use $CFG->dirroot because it might not be available in destructors
776
    $dirroot = dirname(__DIR__);
777
 
778
    if (empty($callers)) {
779
        return '';
780
    }
781
 
782
    $from = $plaintext ? '' : '<ul style="text-align: left" data-rel="backtrace">';
783
    foreach ($callers as $caller) {
784
        if (!isset($caller['line'])) {
785
            $caller['line'] = '?'; // probably call_user_func()
786
        }
787
        if (!isset($caller['file'])) {
788
            $caller['file'] = 'unknownfile'; // probably call_user_func()
789
        }
790
        $line = $plaintext ? '* ' : '<li>';
791
        $line .= 'line ' . $caller['line'] . ' of ' . str_replace($dirroot, '', $caller['file']);
792
        if (isset($caller['function'])) {
793
            $line .= ': call to ';
794
            if (isset($caller['class'])) {
795
                $line .= $caller['class'] . $caller['type'];
796
            }
797
            $line .= $caller['function'] . '()';
798
        } else if (isset($caller['exception'])) {
799
            $line .= ': '.$caller['exception'].' thrown';
800
        }
801
 
802
        // Remove any non printable chars.
803
        $line = preg_replace('/[[:^print:]]/', '', $line);
804
 
805
        $line .= $plaintext ? "\n" : '</li>';
806
        $from .= $line;
807
    }
808
    $from .= $plaintext ? '' : '</ul>';
809
 
810
    return $from;
811
}
812
 
813
/**
814
 * This function makes the return value of ini_get consistent if you are
815
 * setting server directives through the .htaccess file in apache.
816
 *
817
 * Current behavior for value set from php.ini On = 1, Off = [blank]
818
 * Current behavior for value set from .htaccess On = On, Off = Off
819
 * Contributed by jdell @ unr.edu
820
 *
821
 * @param string $ini_get_arg The argument to get
822
 * @return bool True for on false for not
823
 */
824
function ini_get_bool($ini_get_arg) {
825
    $temp = ini_get($ini_get_arg);
826
 
827
    if ($temp == '1' or strtolower($temp) == 'on') {
828
        return true;
829
    }
830
    return false;
831
}
832
 
833
/**
834
 * This function verifies the sanity of PHP configuration
835
 * and stops execution if anything critical found.
836
 */
837
function setup_validate_php_configuration() {
838
   // this must be very fast - no slow checks here!!!
839
 
840
   if (ini_get_bool('session.auto_start')) {
841
        throw new \moodle_exception('sessionautostartwarning', 'admin');
842
   }
843
}
844
 
845
/**
846
 * Initialise global $CFG variable.
847
 * @private to be used only from lib/setup.php
848
 */
849
function initialise_cfg() {
850
    global $CFG, $DB;
851
 
852
    if (!$DB) {
853
        // This should not happen.
854
        return;
855
    }
856
 
857
    try {
858
        $localcfg = get_config('core');
859
    } catch (dml_exception $e) {
860
        // Most probably empty db, going to install soon.
861
        return;
862
    }
863
 
864
    foreach ($localcfg as $name => $value) {
865
        // Note that get_config() keeps forced settings
866
        // and normalises values to string if possible.
867
        $CFG->{$name} = $value;
868
    }
869
}
870
 
871
/**
872
 * Cache any immutable config locally to avoid constant DB lookups.
873
 *
874
 * Only to be used only from lib/setup.php
875
 */
876
function initialise_local_config_cache() {
877
    global $CFG;
878
 
11 efrain 879
    $bootstraplocalfile = $CFG->localcachedir . '/bootstrap.php';
880
    $bootstrapsharedfile = $CFG->cachedir . '/bootstrap.php';
1 efrain 881
 
11 efrain 882
    if (!is_readable($bootstraplocalfile) && is_readable($bootstrapsharedfile)) {
883
        // If we don't have a local cache but do have a shared cache then clone it,
884
        // for example when scaling up new front ends.
885
        make_localcache_directory('', true);
886
        copy($bootstrapsharedfile, $bootstraplocalfile);
887
    }
888
 
889
    if (!empty($CFG->siteidentifier) && !file_exists($bootstrapsharedfile) && defined('SYSCONTEXTID')) {
1 efrain 890
        $contents = "<?php
891
// ********** This file is generated DO NOT EDIT **********
892
\$CFG->siteidentifier = " . var_export($CFG->siteidentifier, true) . ";
893
\$CFG->bootstraphash = " . var_export(hash_local_config_cache(), true) . ";
894
// Only if the file is not stale and has not been defined.
895
if (\$CFG->bootstraphash === hash_local_config_cache() && !defined('SYSCONTEXTID')) {
896
    define('SYSCONTEXTID', ".SYSCONTEXTID.");
897
}
898
";
899
 
11 efrain 900
        // Create the central bootstrap first.
901
        $temp = $bootstrapsharedfile . '.tmp' . uniqid();
1 efrain 902
        file_put_contents($temp, $contents);
903
        @chmod($temp, $CFG->filepermissions);
11 efrain 904
        rename($temp, $bootstrapsharedfile);
905
 
906
        // Then prewarm the local cache as well.
907
        make_localcache_directory('', true);
908
        copy($bootstrapsharedfile, $bootstraplocalfile);
1 efrain 909
    }
910
}
911
 
912
/**
913
 * Calculate a proper hash to be able to invalidate stale cached configs.
914
 *
915
 * Only to be used to verify bootstrap.php status.
916
 *
917
 * @return string md5 hash of all the sensible bits deciding if cached config is stale or no.
918
 */
919
function hash_local_config_cache() {
920
    global $CFG;
921
 
922
    // This is pretty much {@see moodle_database::get_settings_hash()} that is used
923
    // as identifier for the database meta information MUC cache. Should be enough to
924
    // react against any of the normal changes (new prefix, change of DB type) while
925
    // *incorrectly* keeping the old dataroot directory unmodified with stale data.
926
    // This may need more stuff to be considered if it's discovered that there are
927
    // more variables making the file stale.
928
    return md5($CFG->dbtype . $CFG->dbhost . $CFG->dbuser . $CFG->dbname . $CFG->prefix);
929
}
930
 
931
/**
932
 * Initialises $FULLME and friends. Private function. Should only be called from
933
 * setup.php.
934
 */
935
function initialise_fullme() {
936
    global $CFG, $FULLME, $ME, $SCRIPT, $FULLSCRIPT;
937
 
938
    // Detect common config error.
939
    if (substr($CFG->wwwroot, -1) == '/') {
940
        throw new \moodle_exception('wwwrootslash', 'error');
941
    }
942
 
943
    if (CLI_SCRIPT) {
944
        initialise_fullme_cli();
945
        return;
946
    }
947
    if (!empty($CFG->overridetossl)) {
948
        if (strpos($CFG->wwwroot, 'http://') === 0) {
949
            $CFG->wwwroot = str_replace('http:', 'https:', $CFG->wwwroot);
950
        } else {
951
            unset_config('overridetossl');
952
        }
953
    }
954
 
955
    $rurl = setup_get_remote_url();
956
    $wwwroot = parse_url($CFG->wwwroot.'/');
957
 
958
    if (empty($rurl['host'])) {
959
        // missing host in request header, probably not a real browser, let's ignore them
960
 
961
    } else if (!empty($CFG->reverseproxy)) {
962
        // $CFG->reverseproxy specifies if reverse proxy server used
963
        // Used in load balancing scenarios.
964
        // Do not abuse this to try to solve lan/wan access problems!!!!!
965
 
966
    } else {
967
        if (($rurl['host'] !== $wwwroot['host']) or
968
                (!empty($wwwroot['port']) and $rurl['port'] != $wwwroot['port']) or
969
                (strpos($rurl['path'], $wwwroot['path']) !== 0)) {
970
 
971
            // Explain the problem and redirect them to the right URL
972
            if (!defined('NO_MOODLE_COOKIES')) {
973
                define('NO_MOODLE_COOKIES', true);
974
            }
975
            // The login/token.php script should call the correct url/port.
976
            if (defined('REQUIRE_CORRECT_ACCESS') && REQUIRE_CORRECT_ACCESS) {
977
                $wwwrootport = empty($wwwroot['port'])?'':$wwwroot['port'];
978
                $calledurl = $rurl['host'];
979
                if (!empty($rurl['port'])) {
980
                    $calledurl .=  ':'. $rurl['port'];
981
                }
982
                $correcturl = $wwwroot['host'];
983
                if (!empty($wwwrootport)) {
984
                    $correcturl .=  ':'. $wwwrootport;
985
                }
986
                throw new moodle_exception('requirecorrectaccess', 'error', '', null,
987
                    'You called ' . $calledurl .', you should have called ' . $correcturl);
988
            }
989
            $rfullpath = $rurl['fullpath'];
990
            // Check that URL is under $CFG->wwwroot.
991
            if (strpos($rfullpath, $wwwroot['path']) === 0) {
992
                $rfullpath = substr($rurl['fullpath'], strlen($wwwroot['path']) - 1);
993
                $rfullpath = (new moodle_url($rfullpath))->out(false);
994
            }
995
            redirect($rfullpath, get_string('wwwrootmismatch', 'error', $CFG->wwwroot), 3);
996
        }
997
    }
998
 
999
    // Check that URL is under $CFG->wwwroot.
1000
    if (strpos($rurl['path'], $wwwroot['path']) === 0) {
1001
        $SCRIPT = substr($rurl['path'], strlen($wwwroot['path'])-1);
1002
    } else {
1003
        // Probably some weird external script
1004
        $SCRIPT = $FULLSCRIPT = $FULLME = $ME = null;
1005
        return;
1006
    }
1007
 
1008
    // $CFG->sslproxy specifies if external SSL appliance is used
1009
    // (That is, the Moodle server uses http, with an external box translating everything to https).
1010
    if (empty($CFG->sslproxy)) {
1011
        if ($rurl['scheme'] === 'http' and $wwwroot['scheme'] === 'https') {
1012
            if (defined('REQUIRE_CORRECT_ACCESS') && REQUIRE_CORRECT_ACCESS) {
1013
                throw new \moodle_exception('sslonlyaccess', 'error');
1014
            } else {
1015
                redirect($CFG->wwwroot, get_string('wwwrootmismatch', 'error', $CFG->wwwroot), 3);
1016
            }
1017
        }
1018
    } else {
1019
        if ($wwwroot['scheme'] !== 'https') {
1020
            throw new coding_exception('Must use https address in wwwroot when ssl proxy enabled!');
1021
        }
1022
        $rurl['scheme'] = 'https'; // make moodle believe it runs on https, squid or something else it doing it
1023
        $_SERVER['HTTPS'] = 'on'; // Override $_SERVER to help external libraries with their HTTPS detection.
1024
        $_SERVER['SERVER_PORT'] = 443; // Assume default ssl port for the proxy.
1025
    }
1026
 
1027
    // Using Moodle in "reverse proxy" mode, it's expected that the HTTP Host Moodle receives is different
1028
    // from the wwwroot configured host. Those URLs being identical could be the consequence of various
1029
    // issues, including:
1030
    // - Intentionally trying to set up moodle with 2 distinct addresses for intranet and Internet: this
1031
    //   configuration is unsupported and will lead to bigger problems down the road (the proper solution
1032
    //   for this is adjusting the network routes, and avoid relying on the application for network concerns).
1033
    // - Misconfiguration of the reverse proxy that would be forwarding the Host header: while it is
1034
    //   standard in many cases that the reverse proxy would do that, in our case, the reverse proxy
1035
    //   must leave the Host header pointing to the internal name of the server.
1036
    // Port forwarding is allowed, though.
1037
    if (!empty($CFG->reverseproxy) && $rurl['host'] === $wwwroot['host'] && (empty($wwwroot['port']) || $rurl['port'] === $wwwroot['port'])) {
1038
        throw new \moodle_exception('reverseproxyabused', 'error');
1039
    }
1040
 
1041
    $hostandport = $rurl['scheme'] . '://' . $wwwroot['host'];
1042
    if (!empty($wwwroot['port'])) {
1043
        $hostandport .= ':'.$wwwroot['port'];
1044
    }
1045
 
1046
    $FULLSCRIPT = $hostandport . $rurl['path'];
1047
    $FULLME = $hostandport . $rurl['fullpath'];
1048
    $ME = $rurl['fullpath'];
1049
}
1050
 
1051
/**
1052
 * Initialises $FULLME and friends for command line scripts.
1053
 * This is a private method for use by initialise_fullme.
1054
 */
1055
function initialise_fullme_cli() {
1056
    global $CFG, $FULLME, $ME, $SCRIPT, $FULLSCRIPT;
1057
 
1058
    // Urls do not make much sense in CLI scripts
1059
    $backtrace = debug_backtrace();
1060
    $topfile = array_pop($backtrace);
1061
    $topfile = realpath($topfile['file']);
1062
    $dirroot = realpath($CFG->dirroot);
1063
 
1064
    if (strpos($topfile, $dirroot) !== 0) {
1065
        // Probably some weird external script
1066
        $SCRIPT = $FULLSCRIPT = $FULLME = $ME = null;
1067
    } else {
1068
        $relativefile = substr($topfile, strlen($dirroot));
1069
        $relativefile = str_replace('\\', '/', $relativefile); // Win fix
1070
        $SCRIPT = $FULLSCRIPT = $relativefile;
1071
        $FULLME = $ME = null;
1072
    }
1073
}
1074
 
1075
/**
1076
 * Get the URL that PHP/the web server thinks it is serving. Private function
1077
 * used by initialise_fullme. In your code, use $PAGE->url, $SCRIPT, etc.
1078
 * @return array in the same format that parse_url returns, with the addition of
1079
 *      a 'fullpath' element, which includes any slasharguments path.
1080
 */
1081
function setup_get_remote_url() {
1082
    $rurl = array();
1083
    if (isset($_SERVER['HTTP_HOST'])) {
1084
        list($rurl['host']) = explode(':', $_SERVER['HTTP_HOST']);
1085
    } else {
1086
        $rurl['host'] = null;
1087
    }
1088
    $rurl['port'] = (int)$_SERVER['SERVER_PORT'];
1089
    $rurl['path'] = $_SERVER['SCRIPT_NAME']; // Script path without slash arguments
1090
    $rurl['scheme'] = (empty($_SERVER['HTTPS']) or $_SERVER['HTTPS'] === 'off' or $_SERVER['HTTPS'] === 'Off' or $_SERVER['HTTPS'] === 'OFF') ? 'http' : 'https';
1091
 
1092
    if (stripos($_SERVER['SERVER_SOFTWARE'], 'apache') !== false) {
1093
        //Apache server
1094
        $rurl['fullpath'] = $_SERVER['REQUEST_URI'];
1095
 
1096
        // Fixing a known issue with:
1097
        // - Apache versions lesser than 2.4.11
1098
        // - PHP deployed in Apache as PHP-FPM via mod_proxy_fcgi
1099
        // - PHP versions lesser than 5.6.3 and 5.5.18.
1100
        if (isset($_SERVER['PATH_INFO']) && (php_sapi_name() === 'fpm-fcgi') && isset($_SERVER['SCRIPT_NAME'])) {
1101
            $pathinfodec = rawurldecode($_SERVER['PATH_INFO']);
1102
            $lenneedle = strlen($pathinfodec);
1103
            // Checks whether SCRIPT_NAME ends with PATH_INFO, URL-decoded.
1104
            if (substr($_SERVER['SCRIPT_NAME'], -$lenneedle) === $pathinfodec) {
1105
                // This is the "Apache 2.4.10- running PHP-FPM via mod_proxy_fcgi" fingerprint,
1106
                // at least on CentOS 7 (Apache/2.4.6 PHP/5.4.16) and Ubuntu 14.04 (Apache/2.4.7 PHP/5.5.9)
1107
                // => SCRIPT_NAME contains 'slash arguments' data too, which is wrongly exposed via PATH_INFO as URL-encoded.
1108
                // Fix both $_SERVER['PATH_INFO'] and $_SERVER['SCRIPT_NAME'].
1109
                $lenhaystack = strlen($_SERVER['SCRIPT_NAME']);
1110
                $pos = $lenhaystack - $lenneedle;
1111
                // Here $pos is greater than 0 but let's double check it.
1112
                if ($pos > 0) {
1113
                    $_SERVER['PATH_INFO'] = $pathinfodec;
1114
                    $_SERVER['SCRIPT_NAME'] = substr($_SERVER['SCRIPT_NAME'], 0, $pos);
1115
                }
1116
            }
1117
        }
1118
 
1119
    } else if (stripos($_SERVER['SERVER_SOFTWARE'], 'iis') !== false) {
1120
        //IIS - needs a lot of tweaking to make it work
1121
        $rurl['fullpath'] = $_SERVER['SCRIPT_NAME'];
1122
 
1123
        // NOTE: we should ignore PATH_INFO because it is incorrectly encoded using 8bit filesystem legacy encoding in IIS.
1124
        //       Since 2.0, we rely on IIS rewrite extensions like Helicon ISAPI_rewrite
1125
        //         example rule: RewriteRule ^([^\?]+?\.php)(\/.+)$ $1\?file=$2 [QSA]
1126
        //       OR
1127
        //       we rely on a proper IIS 6.0+ configuration: the 'FastCGIUtf8ServerVariables' registry key.
1128
        if (isset($_SERVER['PATH_INFO']) and $_SERVER['PATH_INFO'] !== '') {
1129
            // Check that PATH_INFO works == must not contain the script name.
1130
            if (strpos($_SERVER['PATH_INFO'], $_SERVER['SCRIPT_NAME']) === false) {
1131
                $rurl['fullpath'] .= clean_param(urldecode($_SERVER['PATH_INFO']), PARAM_PATH);
1132
            }
1133
        }
1134
 
1135
        if (isset($_SERVER['QUERY_STRING']) and $_SERVER['QUERY_STRING'] !== '') {
1136
            $rurl['fullpath'] .= '?'.$_SERVER['QUERY_STRING'];
1137
        }
1138
        $_SERVER['REQUEST_URI'] = $rurl['fullpath']; // extra IIS compatibility
1139
 
1140
/* NOTE: following servers are not fully tested! */
1141
 
1142
    } else if (stripos($_SERVER['SERVER_SOFTWARE'], 'lighttpd') !== false) {
1143
        //lighttpd - not officially supported
1144
        $rurl['fullpath'] = $_SERVER['REQUEST_URI']; // TODO: verify this is always properly encoded
1145
 
1146
    } else if (stripos($_SERVER['SERVER_SOFTWARE'], 'nginx') !== false) {
1147
        //nginx - not officially supported
1148
        if (!isset($_SERVER['SCRIPT_NAME'])) {
1149
            die('Invalid server configuration detected, please try to add "fastcgi_param SCRIPT_NAME $fastcgi_script_name;" to the nginx server configuration.');
1150
        }
1151
        $rurl['fullpath'] = $_SERVER['REQUEST_URI']; // TODO: verify this is always properly encoded
1152
 
1153
     } else if (stripos($_SERVER['SERVER_SOFTWARE'], 'cherokee') !== false) {
1154
         //cherokee - not officially supported
1155
         $rurl['fullpath'] = $_SERVER['REQUEST_URI']; // TODO: verify this is always properly encoded
1156
 
1157
     } else if (stripos($_SERVER['SERVER_SOFTWARE'], 'zeus') !== false) {
1158
         //zeus - not officially supported
1159
         $rurl['fullpath'] = $_SERVER['REQUEST_URI']; // TODO: verify this is always properly encoded
1160
 
1161
    } else if (stripos($_SERVER['SERVER_SOFTWARE'], 'LiteSpeed') !== false) {
1162
        //LiteSpeed - not officially supported
1163
        $rurl['fullpath'] = $_SERVER['REQUEST_URI']; // TODO: verify this is always properly encoded
1164
 
1165
    } else if ($_SERVER['SERVER_SOFTWARE'] === 'HTTPD') {
1166
        //obscure name found on some servers - this is definitely not supported
1167
        $rurl['fullpath'] = $_SERVER['REQUEST_URI']; // TODO: verify this is always properly encoded
1168
 
1169
    } else if (strpos($_SERVER['SERVER_SOFTWARE'], 'PHP') === 0) {
1170
        // built-in PHP Development Server
1171
        $rurl['fullpath'] = $_SERVER['REQUEST_URI'];
1172
 
1173
    } else {
1174
        throw new moodle_exception('unsupportedwebserver', 'error', '', $_SERVER['SERVER_SOFTWARE']);
1175
    }
1176
 
1177
    // sanitize the url a bit more, the encoding style may be different in vars above
1178
    $rurl['fullpath'] = str_replace('"', '%22', $rurl['fullpath']);
1179
    $rurl['fullpath'] = str_replace('\'', '%27', $rurl['fullpath']);
1180
 
1181
    return $rurl;
1182
}
1183
 
1184
/**
1185
 * Try to work around the 'max_input_vars' restriction if necessary.
1186
 */
1187
function workaround_max_input_vars() {
1188
    // Make sure this gets executed only once from lib/setup.php!
1189
    static $executed = false;
1190
    if ($executed) {
1191
        debugging('workaround_max_input_vars() must be called only once!');
1192
        return;
1193
    }
1194
    $executed = true;
1195
 
1196
    if (!isset($_SERVER["CONTENT_TYPE"]) or strpos($_SERVER["CONTENT_TYPE"], 'multipart/form-data') !== false) {
1197
        // Not a post or 'multipart/form-data' which is not compatible with "php://input" reading.
1198
        return;
1199
    }
1200
 
1201
    if (!isloggedin() or isguestuser()) {
1202
        // Only real users post huge forms.
1203
        return;
1204
    }
1205
 
1206
    $max = (int)ini_get('max_input_vars');
1207
 
1208
    if ($max <= 0) {
1209
        // Most probably PHP < 5.3.9 that does not implement this limit.
1210
        return;
1211
    }
1212
 
1213
    if ($max >= 200000) {
1214
        // This value should be ok for all our forms, by setting it in php.ini
1215
        // admins may prevent any unexpected regressions caused by this hack.
1216
 
1217
        // Note there is no need to worry about DDoS caused by making this limit very high
1218
        // because there are very many easier ways to DDoS any Moodle server.
1219
        return;
1220
    }
1221
 
1222
    // Worst case is advanced checkboxes which use up to two max_input_vars
1223
    // slots for each entry in $_POST, because of sending two fields with the
1224
    // same name. So count everything twice just in case.
1225
    if (count($_POST, COUNT_RECURSIVE) * 2 < $max) {
1226
        return;
1227
    }
1228
 
1229
    // Large POST request with enctype supported by php://input.
1230
    // Parse php://input in chunks to bypass max_input_vars limit, which also applies to parse_str().
1231
    $str = file_get_contents("php://input");
1232
    if ($str === false or $str === '') {
1233
        // Some weird error.
1234
        return;
1235
    }
1236
 
1237
    $delim = '&';
1238
    $fun = function($p) use ($delim) {
1239
        return implode($delim, $p);
1240
    };
1241
    $chunks = array_map($fun, array_chunk(explode($delim, $str), $max));
1242
 
1243
    // Clear everything from existing $_POST array, otherwise it might be included
1244
    // twice (this affects array params primarily).
1245
    foreach ($_POST as $key => $value) {
1246
        unset($_POST[$key]);
1247
        // Also clear from request array - but only the things that are in $_POST,
1248
        // that way it will leave the things from a get request if any.
1249
        unset($_REQUEST[$key]);
1250
    }
1251
 
1252
    foreach ($chunks as $chunk) {
1253
        $values = array();
1254
        parse_str($chunk, $values);
1255
 
1256
        merge_query_params($_POST, $values);
1257
        merge_query_params($_REQUEST, $values);
1258
    }
1259
}
1260
 
1261
/**
1262
 * Merge parsed POST chunks.
1263
 *
1264
 * NOTE: this is not perfect, but it should work in most cases hopefully.
1265
 *
1266
 * @param array $target
1267
 * @param array $values
1268
 */
1269
function merge_query_params(array &$target, array $values) {
1270
    if (isset($values[0]) and isset($target[0])) {
1271
        // This looks like a split [] array, lets verify the keys are continuous starting with 0.
1272
        $keys1 = array_keys($values);
1273
        $keys2 = array_keys($target);
1274
        if ($keys1 === array_keys($keys1) and $keys2 === array_keys($keys2)) {
1275
            foreach ($values as $v) {
1276
                $target[] = $v;
1277
            }
1278
            return;
1279
        }
1280
    }
1281
    foreach ($values as $k => $v) {
1282
        if (!isset($target[$k])) {
1283
            $target[$k] = $v;
1284
            continue;
1285
        }
1286
        if (is_array($target[$k]) and is_array($v)) {
1287
            merge_query_params($target[$k], $v);
1288
            continue;
1289
        }
1290
        // We should not get here unless there are duplicates in params.
1291
        $target[$k] = $v;
1292
    }
1293
}
1294
 
1295
/**
1296
 * Initializes our performance info early.
1297
 *
1298
 * Pairs up with get_performance_info() which is actually
1299
 * in moodlelib.php. This function is here so that we can
1300
 * call it before all the libs are pulled in.
1301
 *
1302
 * @uses $PERF
1303
 */
1304
function init_performance_info() {
1305
 
1306
    global $PERF, $CFG, $USER;
1307
 
1308
    $PERF = new stdClass();
1309
    if (function_exists('microtime')) {
1310
        $PERF->starttime = microtime();
1311
    }
1312
    if (function_exists('memory_get_usage')) {
1313
        $PERF->startmemory = memory_get_usage();
1314
    }
1315
    if (function_exists('posix_times')) {
1316
        $PERF->startposixtimes = posix_times();
1317
    }
1318
}
1319
 
1320
/**
1321
 * Indicates whether we are in the middle of the initial Moodle install.
1322
 *
1323
 * Very occasionally it is necessary avoid running certain bits of code before the
1324
 * Moodle installation has completed. The installed flag is set in admin/index.php
1325
 * after Moodle core and all the plugins have been installed, but just before
1326
 * the person doing the initial install is asked to choose the admin password.
1327
 *
1328
 * @return boolean true if the initial install is not complete.
1329
 */
1330
function during_initial_install() {
1331
    global $CFG;
1332
    return empty($CFG->rolesactive);
1333
}
1334
 
1335
/**
1336
 * Function to raise the memory limit to a new value.
1337
 * Will respect the memory limit if it is higher, thus allowing
1338
 * settings in php.ini, apache conf or command line switches
1339
 * to override it.
1340
 *
1341
 * The memory limit should be expressed with a constant
1342
 * MEMORY_STANDARD, MEMORY_EXTRA or MEMORY_HUGE.
1343
 * It is possible to use strings or integers too (eg:'128M').
1344
 *
1345
 * @param mixed $newlimit the new memory limit
1346
 * @return bool success
1347
 */
1348
function raise_memory_limit($newlimit) {
1349
    global $CFG;
1350
 
1351
    if ($newlimit == MEMORY_UNLIMITED) {
1352
        ini_set('memory_limit', -1);
1353
        return true;
1354
 
1355
    } else if ($newlimit == MEMORY_STANDARD) {
1356
        if (PHP_INT_SIZE > 4) {
1357
            $newlimit = get_real_size('128M'); // 64bit needs more memory
1358
        } else {
1359
            $newlimit = get_real_size('96M');
1360
        }
1361
 
1362
    } else if ($newlimit == MEMORY_EXTRA) {
1363
        if (PHP_INT_SIZE > 4) {
1364
            $newlimit = get_real_size('384M'); // 64bit needs more memory
1365
        } else {
1366
            $newlimit = get_real_size('256M');
1367
        }
1368
        if (!empty($CFG->extramemorylimit)) {
1369
            $extra = get_real_size($CFG->extramemorylimit);
1370
            if ($extra > $newlimit) {
1371
                $newlimit = $extra;
1372
            }
1373
        }
1374
 
1375
    } else if ($newlimit == MEMORY_HUGE) {
1376
        // MEMORY_HUGE uses 2G or MEMORY_EXTRA, whichever is bigger.
1377
        $newlimit = get_real_size('2G');
1378
        if (!empty($CFG->extramemorylimit)) {
1379
            $extra = get_real_size($CFG->extramemorylimit);
1380
            if ($extra > $newlimit) {
1381
                $newlimit = $extra;
1382
            }
1383
        }
1384
 
1385
    } else {
1386
        $newlimit = get_real_size($newlimit);
1387
    }
1388
 
1389
    if ($newlimit <= 0) {
1390
        debugging('Invalid memory limit specified.');
1391
        return false;
1392
    }
1393
 
1394
    $cur = ini_get('memory_limit');
1395
    if (empty($cur)) {
1396
        // if php is compiled without --enable-memory-limits
1397
        // apparently memory_limit is set to ''
1398
        $cur = 0;
1399
    } else {
1400
        if ($cur == -1){
1401
            return true; // unlimited mem!
1402
        }
1403
        $cur = get_real_size($cur);
1404
    }
1405
 
1406
    if ($newlimit > $cur) {
1407
        ini_set('memory_limit', $newlimit);
1408
        return true;
1409
    }
1410
    return false;
1411
}
1412
 
1413
/**
1414
 * Function to reduce the memory limit to a new value.
1415
 * Will respect the memory limit if it is lower, thus allowing
1416
 * settings in php.ini, apache conf or command line switches
1417
 * to override it
1418
 *
1419
 * The memory limit should be expressed with a string (eg:'64M')
1420
 *
1421
 * @param string $newlimit the new memory limit
1422
 * @return bool
1423
 */
1424
function reduce_memory_limit($newlimit) {
1425
    if (empty($newlimit)) {
1426
        return false;
1427
    }
1428
    $cur = ini_get('memory_limit');
1429
    if (empty($cur)) {
1430
        // if php is compiled without --enable-memory-limits
1431
        // apparently memory_limit is set to ''
1432
        $cur = 0;
1433
    } else {
1434
        if ($cur == -1){
1435
            return true; // unlimited mem!
1436
        }
1437
        $cur = get_real_size($cur);
1438
    }
1439
 
1440
    $new = get_real_size($newlimit);
1441
    // -1 is smaller, but it means unlimited
1442
    if ($new < $cur && $new != -1) {
1443
        ini_set('memory_limit', $newlimit);
1444
        return true;
1445
    }
1446
    return false;
1447
}
1448
 
1449
/**
1450
 * Converts numbers like 10M into bytes.
1451
 *
1452
 * @param string $size The size to be converted
1453
 * @return int
1454
 */
1455
function get_real_size($size = 0) {
1456
    if (!$size) {
1457
        return 0;
1458
    }
1459
 
1460
    static $binaryprefixes = array(
1461
        'K' => 1024 ** 1,
1462
        'k' => 1024 ** 1,
1463
        'M' => 1024 ** 2,
1464
        'm' => 1024 ** 2,
1465
        'G' => 1024 ** 3,
1466
        'g' => 1024 ** 3,
1467
        'T' => 1024 ** 4,
1468
        't' => 1024 ** 4,
1469
        'P' => 1024 ** 5,
1470
        'p' => 1024 ** 5,
1471
    );
1472
 
1473
    if (preg_match('/^([0-9]+)([KMGTP])/i', $size, $matches)) {
1474
        return $matches[1] * $binaryprefixes[$matches[2]];
1475
    }
1476
 
1477
    return (int) $size;
1478
}
1479
 
1480
/**
1481
 * Try to disable all output buffering and purge
1482
 * all headers.
1483
 *
1484
 * @access private to be called only from lib/setup.php !
1485
 * @return void
1486
 */
1487
function disable_output_buffering() {
1488
    $olddebug = error_reporting(0);
1489
 
1490
    // disable compression, it would prevent closing of buffers
1491
    if (ini_get_bool('zlib.output_compression')) {
1492
        ini_set('zlib.output_compression', 'Off');
1493
    }
1494
 
1495
    // try to flush everything all the time
1496
    ob_implicit_flush(true);
1497
 
1498
    // close all buffers if possible and discard any existing output
1499
    // this can actually work around some whitespace problems in config.php
1500
    while(ob_get_level()) {
1501
        if (!ob_end_clean()) {
1502
            // prevent infinite loop when buffer can not be closed
1503
            break;
1504
        }
1505
    }
1506
 
1507
    // disable any other output handlers
1508
    ini_set('output_handler', '');
1509
 
1510
    error_reporting($olddebug);
1511
 
1512
    // Disable buffering in nginx.
1513
    header('X-Accel-Buffering: no');
1514
 
1515
}
1516
 
1517
/**
1518
 * Check whether a major upgrade is needed.
1519
 *
1520
 * That is defined as an upgrade that changes something really fundamental
1521
 * in the database, so nothing can possibly work until the database has
1522
 * been updated, and that is defined by the hard-coded version number in
1523
 * this function.
1524
 *
1525
 * @return bool
1526
 */
1527
function is_major_upgrade_required() {
1528
    global $CFG;
1529
    $lastmajordbchanges = 2024010400.00; // This should be the version where the breaking changes happen.
1530
 
1531
    $required = empty($CFG->version);
1532
    $required = $required || (float)$CFG->version < $lastmajordbchanges;
1533
    $required = $required || during_initial_install();
1534
    $required = $required || !empty($CFG->adminsetuppending);
1535
 
1536
    return $required;
1537
}
1538
 
1539
/**
1540
 * Redirect to the Notifications page if a major upgrade is required, and
1541
 * terminate the current user session.
1542
 */
1543
function redirect_if_major_upgrade_required() {
1544
    global $CFG;
1545
    if (is_major_upgrade_required()) {
1546
        try {
1547
            @\core\session\manager::terminate_current();
1548
        } catch (Exception $e) {
1549
            // Ignore any errors, redirect to upgrade anyway.
1550
        }
1551
        $url = $CFG->wwwroot . '/' . $CFG->admin . '/index.php';
1552
        @header($_SERVER['SERVER_PROTOCOL'] . ' 303 See Other');
1553
        @header('Location: ' . $url);
1554
        echo bootstrap_renderer::plain_redirect_message(htmlspecialchars($url, ENT_COMPAT));
1555
        exit;
1556
    }
1557
}
1558
 
1559
/**
1560
 * Makes sure that upgrade process is not running
1561
 *
1562
 * To be inserted in the core functions that can not be called by pluigns during upgrade.
1563
 * Core upgrade should not use any API functions at all.
1564
 * See {@link https://moodledev.io/docs/guides/upgrade#upgrade-code-restrictions}
1565
 *
1566
 * @throws moodle_exception if executed from inside of upgrade script and $warningonly is false
1567
 * @param bool $warningonly if true displays a warning instead of throwing an exception
1568
 * @return bool true if executed from outside of upgrade process, false if from inside upgrade process and function is used for warning only
1569
 */
1570
function upgrade_ensure_not_running($warningonly = false) {
1571
    global $CFG;
1572
    if (!empty($CFG->upgraderunning)) {
1573
        if (!$warningonly) {
1574
            throw new moodle_exception('cannotexecduringupgrade');
1575
        } else {
1576
            debugging(get_string('cannotexecduringupgrade', 'error'), DEBUG_DEVELOPER);
1577
            return false;
1578
        }
1579
    }
1580
    return true;
1581
}
1582
 
1583
/**
1584
 * Function to check if a directory exists and by default create it if not exists.
1585
 *
1586
 * Previously this was accepting paths only from dataroot, but we now allow
1587
 * files outside of dataroot if you supply custom paths for some settings in config.php.
1588
 * This function does not verify that the directory is writable.
1589
 *
1590
 * NOTE: this function uses current file stat cache,
1591
 *       please use clearstatcache() before this if you expect that the
1592
 *       directories may have been removed recently from a different request.
1593
 *
1594
 * @param string $dir absolute directory path
1595
 * @param boolean $create directory if does not exist
1596
 * @param boolean $recursive create directory recursively
1597
 * @return boolean true if directory exists or created, false otherwise
1598
 */
1599
function check_dir_exists($dir, $create = true, $recursive = true) {
1600
    global $CFG;
1601
 
1602
    umask($CFG->umaskpermissions);
1603
 
1604
    if (is_dir($dir)) {
1605
        return true;
1606
    }
1607
 
1608
    if (!$create) {
1609
        return false;
1610
    }
1611
 
1612
    return mkdir($dir, $CFG->directorypermissions, $recursive);
1613
}
1614
 
1615
/**
1616
 * Create a new unique directory within the specified directory.
1617
 *
1618
 * @param string $basedir The directory to create your new unique directory within.
1619
 * @param bool $exceptiononerror throw exception if error encountered
1620
 * @return string The created directory
1621
 * @throws invalid_dataroot_permissions
1622
 */
1623
function make_unique_writable_directory($basedir, $exceptiononerror = true) {
1624
    if (!is_dir($basedir) || !is_writable($basedir)) {
1625
        // The basedir is not writable. We will not be able to create the child directory.
1626
        if ($exceptiononerror) {
1627
            throw new invalid_dataroot_permissions($basedir . ' is not writable. Unable to create a unique directory within it.');
1628
        } else {
1629
            return false;
1630
        }
1631
    }
1632
 
1633
    do {
1634
        // Let's use uniqid() because it's "unique enough" (microtime based). The loop does handle repetitions.
1635
        // Windows and old PHP don't like very long paths, so try to keep this shorter. See MDL-69975.
1636
        $uniquedir = $basedir . DIRECTORY_SEPARATOR . uniqid();
1637
    } while (
1638
            // Ensure that basedir is still writable - if we do not check, we could get stuck in a loop here.
1639
            is_writable($basedir) &&
1640
 
1641
            // Make the new unique directory. If the directory already exists, it will return false.
1642
            !make_writable_directory($uniquedir, $exceptiononerror) &&
1643
 
1644
            // Ensure that the directory now exists
1645
            file_exists($uniquedir) && is_dir($uniquedir)
1646
        );
1647
 
1648
    // Check that the directory was correctly created.
1649
    if (!file_exists($uniquedir) || !is_dir($uniquedir) || !is_writable($uniquedir)) {
1650
        if ($exceptiononerror) {
1651
            throw new invalid_dataroot_permissions('Unique directory creation failed.');
1652
        } else {
1653
            return false;
1654
        }
1655
    }
1656
 
1657
    return $uniquedir;
1658
}
1659
 
1660
/**
1661
 * Create a directory and make sure it is writable.
1662
 *
1663
 * @private
1664
 * @param string $dir  the full path of the directory to be created
1665
 * @param bool $exceptiononerror throw exception if error encountered
1666
 * @return string|false Returns full path to directory if successful, false if not; may throw exception
1667
 */
1668
function make_writable_directory($dir, $exceptiononerror = true) {
1669
    global $CFG;
1670
 
1671
    if (file_exists($dir) and !is_dir($dir)) {
1672
        if ($exceptiononerror) {
1673
            throw new coding_exception($dir.' directory can not be created, file with the same name already exists.');
1674
        } else {
1675
            return false;
1676
        }
1677
    }
1678
 
1679
    umask($CFG->umaskpermissions);
1680
 
1681
    if (!file_exists($dir)) {
1682
        if (!@mkdir($dir, $CFG->directorypermissions, true)) {
1683
            clearstatcache();
1684
            // There might be a race condition when creating directory.
1685
            if (!is_dir($dir)) {
1686
                if ($exceptiononerror) {
1687
                    throw new invalid_dataroot_permissions($dir.' can not be created, check permissions.');
1688
                } else {
1689
                    debugging('Can not create directory: '.$dir, DEBUG_DEVELOPER);
1690
                    return false;
1691
                }
1692
            }
1693
        }
1694
    }
1695
 
1696
    if (!is_writable($dir)) {
1697
        if ($exceptiononerror) {
1698
            throw new invalid_dataroot_permissions($dir.' is not writable, check permissions.');
1699
        } else {
1700
            return false;
1701
        }
1702
    }
1703
 
1704
    return $dir;
1705
}
1706
 
1707
/**
1708
 * Protect a directory from web access.
1709
 * Could be extended in the future to support other mechanisms (e.g. other webservers).
1710
 *
1711
 * @private
1712
 * @param string $dir  the full path of the directory to be protected
1713
 */
1714
function protect_directory($dir) {
1715
    global $CFG;
1716
    // Make sure a .htaccess file is here, JUST IN CASE the files area is in the open and .htaccess is supported
1717
    if (!file_exists("$dir/.htaccess")) {
1718
        if ($handle = fopen("$dir/.htaccess", 'w')) {   // For safety
1719
            @fwrite($handle, "deny from all\r\nAllowOverride None\r\nNote: this file is broken intentionally, we do not want anybody to undo it in subdirectory!\r\n");
1720
            @fclose($handle);
1721
            @chmod("$dir/.htaccess", $CFG->filepermissions);
1722
        }
1723
    }
1724
}
1725
 
1726
/**
1727
 * Create a directory under dataroot and make sure it is writable.
1728
 * Do not use for temporary and cache files - see make_temp_directory() and make_cache_directory().
1729
 *
1730
 * @param string $directory  the full path of the directory to be created under $CFG->dataroot
1731
 * @param bool $exceptiononerror throw exception if error encountered
1732
 * @return string|false Returns full path to directory if successful, false if not; may throw exception
1733
 */
1734
function make_upload_directory($directory, $exceptiononerror = true) {
1735
    global $CFG;
1736
 
1737
    if (strpos($directory, 'temp/') === 0 or $directory === 'temp') {
1738
        debugging('Use make_temp_directory() for creation of temporary directory and $CFG->tempdir to get the location.');
1739
 
1740
    } else if (strpos($directory, 'cache/') === 0 or $directory === 'cache') {
1741
        debugging('Use make_cache_directory() for creation of cache directory and $CFG->cachedir to get the location.');
1742
 
1743
    } else if (strpos($directory, 'localcache/') === 0 or $directory === 'localcache') {
1744
        debugging('Use make_localcache_directory() for creation of local cache directory and $CFG->localcachedir to get the location.');
1745
    }
1746
 
1747
    protect_directory($CFG->dataroot);
1748
    return make_writable_directory("$CFG->dataroot/$directory", $exceptiononerror);
1749
}
1750
 
1751
/**
1752
 * Get a per-request storage directory in the tempdir.
1753
 *
1754
 * The directory is automatically cleaned up during the shutdown handler.
1755
 *
1756
 * @param   bool    $exceptiononerror throw exception if error encountered
1757
 * @param   bool    $forcecreate Force creation of a new parent directory
1758
 * @return  string  Returns full path to directory if successful, false if not; may throw exception
1759
 */
1760
function get_request_storage_directory($exceptiononerror = true, bool $forcecreate = false) {
1761
    global $CFG;
1762
 
1763
    static $requestdir = null;
1764
 
1765
    $writabledirectoryexists = (null !== $requestdir);
1766
    $writabledirectoryexists = $writabledirectoryexists && file_exists($requestdir);
1767
    $writabledirectoryexists = $writabledirectoryexists && is_dir($requestdir);
1768
    $writabledirectoryexists = $writabledirectoryexists && is_writable($requestdir);
1769
    $createnewdirectory = $forcecreate || !$writabledirectoryexists;
1770
 
1771
    if ($createnewdirectory) {
1772
 
1773
        // Let's add the first chars of siteidentifier only. This is to help separate
1774
        // paths on systems which host multiple moodles. We don't use the full id
1775
        // as Windows and old PHP don't like very long paths. See MDL-69975.
1776
        $basedir = $CFG->localrequestdir . '/' . substr($CFG->siteidentifier, 0, 4);
1777
 
1778
        make_writable_directory($basedir);
1779
        protect_directory($basedir);
1780
 
1781
        if ($dir = make_unique_writable_directory($basedir, $exceptiononerror)) {
1782
            // Register a shutdown handler to remove the directory.
1783
            \core_shutdown_manager::register_function('remove_dir', [$dir]);
1784
        }
1785
 
1786
        $requestdir = $dir;
1787
    }
1788
 
1789
    return $requestdir;
1790
}
1791
 
1792
/**
1793
 * Create a per-request directory and make sure it is writable.
1794
 * This can only be used during the current request and will be tidied away
1795
 * automatically afterwards.
1796
 *
1797
 * A new, unique directory is always created within a shared base request directory.
1798
 *
1799
 * In some exceptional cases an alternative base directory may be required. This can be accomplished using the
1800
 * $forcecreate parameter. Typically this will only be requried where the file may be required during a shutdown handler
1801
 * which may or may not be registered after a previous request directory has been created.
1802
 *
1803
 * @param   bool    $exceptiononerror throw exception if error encountered
1804
 * @param   bool    $forcecreate Force creation of a new parent directory
1805
 * @return  string  The full path to directory if successful, false if not; may throw exception
1806
 */
1807
function make_request_directory(bool $exceptiononerror = true, bool $forcecreate = false) {
1808
    $basedir = get_request_storage_directory($exceptiononerror, $forcecreate);
1809
    return make_unique_writable_directory($basedir, $exceptiononerror);
1810
}
1811
 
1812
/**
1813
 * Get the full path of a directory under $CFG->backuptempdir.
1814
 *
1815
 * @param string $directory  the relative path of the directory under $CFG->backuptempdir
1816
 * @return string|false Returns full path to directory given a valid string; otherwise, false.
1817
 */
1818
function get_backup_temp_directory($directory) {
1819
    global $CFG;
1820
    if (($directory === null) || ($directory === false)) {
1821
        return false;
1822
    }
1823
    return "$CFG->backuptempdir/$directory";
1824
}
1825
 
1826
/**
1827
 * Create a directory under $CFG->backuptempdir and make sure it is writable.
1828
 *
1829
 * Do not use for storing generic temp files - see make_temp_directory() instead for this purpose.
1830
 *
1831
 * Backup temporary files must be on a shared storage.
1832
 *
1833
 * @param string $directory  the relative path of the directory to be created under $CFG->backuptempdir
1834
 * @param bool $exceptiononerror throw exception if error encountered
1835
 * @return string|false Returns full path to directory if successful, false if not; may throw exception
1836
 */
1837
function make_backup_temp_directory($directory, $exceptiononerror = true) {
1838
    global $CFG;
1839
    if ($CFG->backuptempdir !== "$CFG->tempdir/backup") {
1840
        check_dir_exists($CFG->backuptempdir, true, true);
1841
        protect_directory($CFG->backuptempdir);
1842
    } else {
1843
        protect_directory($CFG->tempdir);
1844
    }
1845
    return make_writable_directory("$CFG->backuptempdir/$directory", $exceptiononerror);
1846
}
1847
 
1848
/**
1849
 * Create a directory under tempdir and make sure it is writable.
1850
 *
1851
 * Where possible, please use make_request_directory() and limit the scope
1852
 * of your data to the current HTTP request.
1853
 *
1854
 * Do not use for storing cache files - see make_cache_directory(), and
1855
 * make_localcache_directory() instead for this purpose.
1856
 *
1857
 * Temporary files must be on a shared storage, and heavy usage is
1858
 * discouraged due to the performance impact upon clustered environments.
1859
 *
1860
 * @param string $directory  the full path of the directory to be created under $CFG->tempdir
1861
 * @param bool $exceptiononerror throw exception if error encountered
1862
 * @return string|false Returns full path to directory if successful, false if not; may throw exception
1863
 */
1864
function make_temp_directory($directory, $exceptiononerror = true) {
1865
    global $CFG;
1866
    if ($CFG->tempdir !== "$CFG->dataroot/temp") {
1867
        check_dir_exists($CFG->tempdir, true, true);
1868
        protect_directory($CFG->tempdir);
1869
    } else {
1870
        protect_directory($CFG->dataroot);
1871
    }
1872
    return make_writable_directory("$CFG->tempdir/$directory", $exceptiononerror);
1873
}
1874
 
1875
/**
1876
 * Create a directory under cachedir and make sure it is writable.
1877
 *
1878
 * Note: this cache directory is shared by all cluster nodes.
1879
 *
1880
 * @param string $directory  the full path of the directory to be created under $CFG->cachedir
1881
 * @param bool $exceptiononerror throw exception if error encountered
1882
 * @return string|false Returns full path to directory if successful, false if not; may throw exception
1883
 */
1884
function make_cache_directory($directory, $exceptiononerror = true) {
1885
    global $CFG;
1886
    if ($CFG->cachedir !== "$CFG->dataroot/cache") {
1887
        check_dir_exists($CFG->cachedir, true, true);
1888
        protect_directory($CFG->cachedir);
1889
    } else {
1890
        protect_directory($CFG->dataroot);
1891
    }
1892
    return make_writable_directory("$CFG->cachedir/$directory", $exceptiononerror);
1893
}
1894
 
1895
/**
1896
 * Create a directory under localcachedir and make sure it is writable.
1897
 * The files in this directory MUST NOT change, use revisions or content hashes to
1898
 * work around this limitation - this means you can only add new files here.
1899
 *
1900
 * The content of this directory gets purged automatically on all cluster nodes
1901
 * after calling purge_all_caches() before new data is written to this directory.
1902
 *
1903
 * Note: this local cache directory does not need to be shared by cluster nodes.
1904
 *
1905
 * @param string $directory the relative path of the directory to be created under $CFG->localcachedir
1906
 * @param bool $exceptiononerror throw exception if error encountered
1907
 * @return string|false Returns full path to directory if successful, false if not; may throw exception
1908
 */
1909
function make_localcache_directory($directory, $exceptiononerror = true) {
1910
    global $CFG;
1911
 
1912
    make_writable_directory($CFG->localcachedir, $exceptiononerror);
1913
 
1914
    if ($CFG->localcachedir !== "$CFG->dataroot/localcache") {
1915
        protect_directory($CFG->localcachedir);
1916
    } else {
1917
        protect_directory($CFG->dataroot);
1918
    }
1919
 
1920
    if (!isset($CFG->localcachedirpurged)) {
1921
        $CFG->localcachedirpurged = 0;
1922
    }
1923
    $timestampfile = "$CFG->localcachedir/.lastpurged";
1924
 
1925
    if (!file_exists($timestampfile)) {
1926
        touch($timestampfile);
1927
        @chmod($timestampfile, $CFG->filepermissions);
1928
 
1929
    } else if (filemtime($timestampfile) <  $CFG->localcachedirpurged) {
1930
        // This means our local cached dir was not purged yet.
1931
        remove_dir($CFG->localcachedir, true);
1932
        if ($CFG->localcachedir !== "$CFG->dataroot/localcache") {
1933
            protect_directory($CFG->localcachedir);
1934
        }
1935
        touch($timestampfile);
1936
        @chmod($timestampfile, $CFG->filepermissions);
1937
        clearstatcache();
11 efrain 1938
 
1939
        // Then prewarm the local boostrap.php file as well.
1940
        initialise_local_config_cache();
1 efrain 1941
    }
1942
 
1943
    if ($directory === '') {
1944
        return $CFG->localcachedir;
1945
    }
1946
 
1947
    return make_writable_directory("$CFG->localcachedir/$directory", $exceptiononerror);
1948
}
1949
 
1950
/**
1951
 * Webserver access user logging
1952
 */
1953
function set_access_log_user() {
1954
    global $USER, $CFG;
1955
    if ($USER && isset($USER->username)) {
1956
        $logmethod = '';
1957
        $logvalue = 0;
1958
        if (!empty($CFG->apacheloguser) && function_exists('apache_note')) {
1959
            $logmethod = 'apache';
1960
            $logvalue = $CFG->apacheloguser;
1961
        }
1962
        if (!empty($CFG->headerloguser)) {
1963
            $logmethod = 'header';
1964
            $logvalue = $CFG->headerloguser;
1965
        }
1966
        if (!empty($logmethod)) {
1967
            $loguserid = $USER->id;
1968
            $logusername = clean_filename($USER->username);
1969
            $logname = '';
1970
            if (isset($USER->firstname)) {
1971
                // We can assume both will be set
1972
                // - even if to empty.
1973
                $logname = clean_filename($USER->firstname . " " . $USER->lastname);
1974
            }
1975
            if (\core\session\manager::is_loggedinas()) {
1976
                $realuser = \core\session\manager::get_realuser();
1977
                $logusername = clean_filename($realuser->username." as ".$logusername);
1978
                $logname = clean_filename($realuser->firstname." ".$realuser->lastname ." as ".$logname);
1979
                $loguserid = clean_filename($realuser->id." as ".$loguserid);
1980
            }
1981
            switch ($logvalue) {
1982
                case 3:
1983
                    $logname = $logusername;
1984
                    break;
1985
                case 2:
1986
                    $logname = $logname;
1987
                    break;
1988
                case 1:
1989
                default:
1990
                    $logname = $loguserid;
1991
                    break;
1992
            }
1993
            if ($logmethod == 'apache') {
1994
                apache_note('MOODLEUSER', $logname);
1995
            }
1996
 
1997
            if ($logmethod == 'header' && !headers_sent()) {
1998
                header("X-MOODLEUSER: $logname");
1999
            }
2000
        }
2001
    }
2002
}
2003
 
2004
/**
2005
 * This class solves the problem of how to initialise $OUTPUT.
2006
 *
2007
 * The problem is caused be two factors
2008
 * <ol>
2009
 * <li>On the one hand, we cannot be sure when output will start. In particular,
2010
 * an error, which needs to be displayed, could be thrown at any time.</li>
2011
 * <li>On the other hand, we cannot be sure when we will have all the information
2012
 * necessary to correctly initialise $OUTPUT. $OUTPUT depends on the theme, which
2013
 * (potentially) depends on the current course, course categories, and logged in user.
2014
 * It also depends on whether the current page requires HTTPS.</li>
2015
 * </ol>
2016
 *
2017
 * So, it is hard to find a single natural place during Moodle script execution,
2018
 * which we can guarantee is the right time to initialise $OUTPUT. Instead we
2019
 * adopt the following strategy
2020
 * <ol>
2021
 * <li>We will initialise $OUTPUT the first time it is used.</li>
2022
 * <li>If, after $OUTPUT has been initialised, the script tries to change something
2023
 * that $OUTPUT depends on, we throw an exception making it clear that the script
2024
 * did something wrong.
2025
 * </ol>
2026
 *
2027
 * The only problem with that is, how do we initialise $OUTPUT on first use if,
2028
 * it is going to be used like $OUTPUT->somthing(...)? Well that is where this
2029
 * class comes in. Initially, we set up $OUTPUT = new bootstrap_renderer(). Then,
2030
 * when any method is called on that object, we initialise $OUTPUT, and pass the call on.
2031
 *
2032
 * Note that this class is used before lib/outputlib.php has been loaded, so we
2033
 * must be careful referring to classes/functions from there, they may not be
2034
 * defined yet, and we must avoid fatal errors.
2035
 *
2036
 * @copyright 2009 Tim Hunt
2037
 * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
2038
 * @since     Moodle 2.0
2039
 */
2040
class bootstrap_renderer {
2041
    /**
2042
     * Handles re-entrancy. Without this, errors or debugging output that occur
2043
     * during the initialisation of $OUTPUT, cause infinite recursion.
2044
     * @var boolean
2045
     */
2046
    protected $initialising = false;
2047
 
2048
    /**
2049
     * Have we started output yet?
2050
     * @return boolean true if the header has been printed.
2051
     */
2052
    public function has_started() {
2053
        return false;
2054
    }
2055
 
2056
    /**
2057
     * Constructor - to be used by core code only.
2058
     * @param string $method The method to call
2059
     * @param array $arguments Arguments to pass to the method being called
2060
     * @return string
2061
     */
2062
    public function __call($method, $arguments) {
2063
        global $OUTPUT, $PAGE;
2064
 
2065
        $recursing = false;
2066
        if ($method == 'notification') {
2067
            // Catch infinite recursion caused by debugging output during print_header.
2068
            $backtrace = debug_backtrace();
2069
            array_shift($backtrace);
2070
            array_shift($backtrace);
2071
            $recursing = is_early_init($backtrace);
2072
        }
2073
 
2074
        $earlymethods = array(
2075
            'fatal_error' => 'early_error',
2076
            'notification' => 'early_notification',
2077
        );
2078
 
2079
        // If lib/outputlib.php has been loaded, call it.
2080
        if (!empty($PAGE) && !$recursing) {
2081
            if (array_key_exists($method, $earlymethods)) {
2082
                //prevent PAGE->context warnings - exceptions might appear before we set any context
2083
                $PAGE->set_context(null);
2084
            }
2085
            $PAGE->initialise_theme_and_output();
2086
            return call_user_func_array(array($OUTPUT, $method), $arguments);
2087
        }
2088
 
2089
        $this->initialising = true;
2090
 
2091
        // Too soon to initialise $OUTPUT, provide a couple of key methods.
2092
        if (array_key_exists($method, $earlymethods)) {
2093
            return call_user_func_array(array('bootstrap_renderer', $earlymethods[$method]), $arguments);
2094
        }
2095
 
2096
        throw new coding_exception('Attempt to start output before enough information is known to initialise the theme.');
2097
    }
2098
 
2099
    /**
2100
     * Returns nicely formatted error message in a div box.
2101
     * @static
2102
     * @param string $message error message
2103
     * @param ?string $moreinfourl (ignored in early errors)
2104
     * @param ?string $link (ignored in early errors)
2105
     * @param ?array $backtrace
2106
     * @param ?string $debuginfo
2107
     * @return string
2108
     */
2109
    public static function early_error_content($message, $moreinfourl, $link, $backtrace, $debuginfo = null) {
2110
        global $CFG;
2111
 
2112
        $content = "<div class='alert-danger'>$message</div>";
2113
        // Check whether debug is set.
2114
        $debug = (!empty($CFG->debug) && $CFG->debug >= DEBUG_DEVELOPER);
2115
        // Also check we have it set in the config file. This occurs if the method to read the config table from the
2116
        // database fails, reading from the config table is the first database interaction we have.
2117
        $debug = $debug || (!empty($CFG->config_php_settings['debug'])  && $CFG->config_php_settings['debug'] >= DEBUG_DEVELOPER );
2118
        if ($debug) {
2119
            if (!empty($debuginfo)) {
2120
                // Remove all nasty JS.
2121
                if (function_exists('s')) { // Function may be not available for some early errors.
2122
                    $debuginfo = s($debuginfo);
2123
                } else {
2124
                    // Because weblib is not available for these early errors, we
2125
                    // just duplicate s() code here to be safe.
2126
                    $debuginfo = preg_replace('/&amp;#(\d+|x[0-9a-f]+);/i', '&#$1;',
2127
                    htmlspecialchars($debuginfo, ENT_QUOTES | ENT_HTML401 | ENT_SUBSTITUTE));
2128
                }
2129
                $debuginfo = str_replace("\n", '<br />', $debuginfo); // keep newlines
2130
                $content .= '<div class="notifytiny">Debug info: ' . $debuginfo . '</div>';
2131
            }
2132
            if (!empty($backtrace)) {
2133
                $content .= '<div class="notifytiny">Stack trace: ' . format_backtrace($backtrace, false) . '</div>';
2134
            }
2135
        }
2136
 
2137
        return $content;
2138
    }
2139
 
2140
    /**
2141
     * This function should only be called by this class, or from exception handlers
2142
     * @static
2143
     * @param string $message error message
2144
     * @param string $moreinfourl (ignored in early errors)
2145
     * @param string $link (ignored in early errors)
2146
     * @param array $backtrace
2147
     * @param string $debuginfo extra information for developers
2148
     * @return ?string
2149
     */
2150
    public static function early_error($message, $moreinfourl, $link, $backtrace, $debuginfo = null, $errorcode = null) {
2151
        global $CFG;
2152
 
2153
        if (CLI_SCRIPT) {
2154
            echo "!!! $message !!!\n";
2155
            if (!empty($CFG->debug) and $CFG->debug >= DEBUG_DEVELOPER) {
2156
                if (!empty($debuginfo)) {
2157
                    echo "\nDebug info: $debuginfo";
2158
                }
2159
                if (!empty($backtrace)) {
2160
                    echo "\nStack trace: " . format_backtrace($backtrace, true);
2161
                }
2162
            }
2163
            return;
2164
 
2165
        } else if (AJAX_SCRIPT) {
2166
            $e = new stdClass();
2167
            $e->error      = $message;
2168
            $e->stacktrace = NULL;
2169
            $e->debuginfo  = NULL;
2170
            if (!empty($CFG->debug) and $CFG->debug >= DEBUG_DEVELOPER) {
2171
                if (!empty($debuginfo)) {
2172
                    $e->debuginfo = $debuginfo;
2173
                }
2174
                if (!empty($backtrace)) {
2175
                    $e->stacktrace = format_backtrace($backtrace, true);
2176
                }
2177
            }
2178
            $e->errorcode  = $errorcode;
2179
            @header('Content-Type: application/json; charset=utf-8');
2180
            echo json_encode($e);
2181
            return;
2182
        }
2183
 
2184
        // In the name of protocol correctness, monitoring and performance
2185
        // profiling, set the appropriate error headers for machine consumption.
2186
        $protocol = (isset($_SERVER['SERVER_PROTOCOL']) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0');
2187
        @header($protocol . ' 500 Internal Server Error');
2188
 
2189
        // better disable any caching
2190
        @header('Content-Type: text/html; charset=utf-8');
2191
        @header('X-UA-Compatible: IE=edge');
2192
        @header('Cache-Control: no-store, no-cache, must-revalidate');
2193
        @header('Cache-Control: post-check=0, pre-check=0', false);
2194
        @header('Pragma: no-cache');
2195
        @header('Expires: Mon, 20 Aug 1969 09:23:00 GMT');
2196
        @header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
2197
 
2198
        if (function_exists('get_string')) {
2199
            $strerror = get_string('error');
2200
        } else {
2201
            $strerror = 'Error';
2202
        }
2203
 
2204
        $content = self::early_error_content($message, $moreinfourl, $link, $backtrace, $debuginfo);
2205
 
2206
        return self::plain_page($strerror, $content);
2207
    }
2208
 
2209
    /**
2210
     * Early notification message
2211
     * @static
2212
     * @param string $message
2213
     * @param string $classes usually notifyproblem or notifysuccess
2214
     * @return string
2215
     */
2216
    public static function early_notification($message, $classes = 'notifyproblem') {
2217
        return '<div class="' . $classes . '">' . $message . '</div>';
2218
    }
2219
 
2220
    /**
2221
     * Page should redirect message.
2222
     * @static
2223
     * @param string $encodedurl redirect url
2224
     * @return string
2225
     */
2226
    public static function plain_redirect_message($encodedurl) {
2227
        $message = '<div style="margin-top: 3em; margin-left:auto; margin-right:auto; text-align:center;">' . get_string('pageshouldredirect') . '<br /><a href="'.
2228
                $encodedurl .'">'. get_string('continue') .'</a></div>';
2229
        return self::plain_page(get_string('redirect'), $message);
2230
    }
2231
 
2232
    /**
2233
     * Early redirection page, used before full init of $PAGE global
2234
     * @static
2235
     * @param string $encodedurl redirect url
2236
     * @param string $message redirect message
2237
     * @param int $delay time in seconds
2238
     * @return string redirect page
2239
     */
2240
    public static function early_redirect_message($encodedurl, $message, $delay) {
2241
        $meta = '<meta http-equiv="refresh" content="'. $delay .'; url='. $encodedurl .'" />';
2242
        $content = self::early_error_content($message, null, null, null);
2243
        $content .= self::plain_redirect_message($encodedurl);
2244
 
2245
        return self::plain_page(get_string('redirect'), $content, $meta);
2246
    }
2247
 
2248
    /**
2249
     * Output basic html page.
2250
     * @static
2251
     * @param string $title page title
2252
     * @param string $content page content
2253
     * @param string $meta meta tag
2254
     * @return string html page
2255
     */
2256
    public static function plain_page($title, $content, $meta = '') {
2257
        global $CFG;
2258
 
2259
        if (function_exists('get_string') && function_exists('get_html_lang')) {
2260
            $htmllang = get_html_lang();
2261
        } else {
2262
            $htmllang = '';
2263
        }
2264
 
2265
        $footer = '';
2266
        if (function_exists('get_performance_info')) { // Function may be not available for some early errors.
2267
            if (MDL_PERF_TEST) {
2268
                $perfinfo = get_performance_info();
2269
                $footer = '<footer>' . $perfinfo['html'] . '</footer>';
2270
            }
2271
        }
2272
 
2273
        ob_start();
2274
        include($CFG->dirroot . '/error/plainpage.php');
2275
        $html = ob_get_contents();
2276
        ob_end_clean();
2277
 
2278
        return $html;
2279
    }
2280
}
2281
 
2282
/**
2283
 * Add http stream instrumentation
2284
 *
2285
 * This detects which any reads or writes to a php stream which uses
2286
 * the 'http' handler. Ideally 100% of traffic uses the Moodle curl
2287
 * libraries which do not use php streams.
2288
 *
2289
 * @param array $code stream callback code
2290
 */
2291
function proxy_log_callback($code) {
2292
    if ($code == STREAM_NOTIFY_CONNECT) {
2293
        $trace = debug_backtrace();
2294
        $function = $trace[count($trace) - 1];
2295
        $error = "Unsafe internet IO detected: {$function['function']} with arguments " . join(', ', $function['args']) . "\n";
2296
        error_log($error . format_backtrace($trace, true)); // phpcs:ignore
2297
    }
2298
}
2299
 
2300
/**
2301
 * A helper function for deprecated files to use to ensure that, when they are included for unit tests,
2302
 * they are run in an isolated process.
2303
 *
2304
 * @throws \coding_exception The exception thrown when the process is not isolated.
2305
 */
2306
function require_phpunit_isolation(): void {
2307
    if (!defined('PHPUNIT_TEST') || !PHPUNIT_TEST) {
2308
        // Not a test.
2309
        return;
2310
    }
2311
 
2312
    if (defined('PHPUNIT_ISOLATED_TEST') && PHPUNIT_ISOLATED_TEST) {
2313
        // Already isolated.
2314
        return;
2315
    }
2316
 
2317
    throw new \coding_exception(
2318
        'When including this file for a unit test, the test must be run in an isolated process. ' .
2319
            'See the PHPUnit @runInSeparateProcess and @runTestsInSeparateProcesses annotations.'
2320
    );
2321
}