1: <?php
  2: 
  3: // include the config file
  4: if(!isset($config)) {
  5:     require_once '../util/AlphaConfig.inc';
  6:     $config = AlphaConfig::getInstance();
  7:     
  8:     require_once $config->get('app.root').'alpha/util/AlphaAutoLoader.inc';
  9: }
 10: 
 11: /**
 12:  *
 13:  * Controller used to generate secure URLs from the query strings provided
 14:  * 
 15:  * @package alpha::controller
 16:  * @since 1.0
 17:  * @author John Collins <dev@alphaframework.org>
 18:  * @version $Id: GenSecureQueryStrings.php 1548 2012-07-29 17:07:07Z alphadevx $
 19:  * @license http://www.opensource.org/licenses/bsd-license.php The BSD License
 20:  * @copyright Copyright (c) 2012, John Collins (founder of Alpha Framework).  
 21:  * All rights reserved.
 22:  * 
 23:  * <pre>
 24:  * Redistribution and use in source and binary forms, with or 
 25:  * without modification, are permitted provided that the 
 26:  * following conditions are met:
 27:  * 
 28:  * * Redistributions of source code must retain the above 
 29:  *   copyright notice, this list of conditions and the 
 30:  *   following disclaimer.
 31:  * * Redistributions in binary form must reproduce the above 
 32:  *   copyright notice, this list of conditions and the 
 33:  *   following disclaimer in the documentation and/or other 
 34:  *   materials provided with the distribution.
 35:  * * Neither the name of the Alpha Framework nor the names 
 36:  *   of its contributors may be used to endorse or promote 
 37:  *   products derived from this software without specific 
 38:  *   prior written permission.
 39:  *   
 40:  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND 
 41:  * CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, 
 42:  * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 
 43:  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 
 44:  * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR 
 45:  * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 
 46:  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 
 47:  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 
 48:  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
 49:  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 
 50:  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE 
 51:  * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 
 52:  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 53:  * </pre>
 54:  *  
 55:  */
 56: class GenSecureQueryStrings extends AlphaController implements AlphaControllerInterface {
 57:     /**
 58:      * Trace logger
 59:      * 
 60:      * @var Logger
 61:      * @since 1.0
 62:      */
 63:     private static $logger = null;
 64:     
 65:     /**
 66:      * Constructor
 67:      * 
 68:      * @since 1.0
 69:      */
 70:     public function __construct() {
 71:         self::$logger = new Logger('CacheManager');
 72:         self::$logger->debug('>>__construct()');
 73:         
 74:         global $config;
 75:         
 76:         // ensure that the super class constructor is called, indicating the rights group
 77:         parent::__construct('Admin');
 78:         
 79:         $this->setTitle('Generate Secure Query Strings');
 80:         
 81:         self::$logger->debug('<<__construct');
 82:     }
 83:     
 84:     /**
 85:      * Handle GET requests
 86:      * 
 87:      * @param array $params
 88:      * @since 1.0
 89:      */
 90:     public function doGET($params) {
 91:         self::$logger->debug('>>doGET($params=['.var_export($params, true).'])');
 92:         
 93:         echo AlphaView::displayPageHead($this);
 94:         
 95:         echo $this->renderForm();
 96:         
 97:         echo AlphaView::displayPageFoot($this);
 98:         
 99:         self::$logger->debug('<<doGET');
100:     }
101:     
102:     /**
103:      * Handle POST requests
104:      * 
105:      * @param array $params
106:      * @since 1.0
107:      */
108:     public function doPOST($params) {
109:         self::$logger->debug('>>doPOST($params=['.var_export($params, true).'])');
110:         
111:         global $config;
112: 
113:         echo AlphaView::displayPageHead($this);
114:         
115:         echo '<p style="width:90%; overflow:scroll;">';
116:         if(isset($params['QS']))
117:             echo FrontController::generateSecureURL($params['QS']);
118:         echo '</p>';
119:         
120:         echo $this->renderForm();
121:         
122:         echo AlphaView::displayPageFoot($this);
123:         
124:         self::$logger->debug('<<doPOST');
125:     }
126:     
127:     /**
128:      * Renders the HTML form for generating secure URLs
129:      * 
130:      * @return string
131:      * @since 1.0
132:      */
133:     private function renderForm() {
134:         global $config;
135:         
136:         $html = '<p>Use this form to generate secure (encrypted) URLs which make use of the Front Controller.  Always be sure to specify an action controller'.
137:             ' (act) at a minimum.</p>';
138:         $html .= '<p>Example 1: to generate a secure URL for viewing article object 00000000001, enter <em>act=ViewArticle&oid=00000000001</em></p>';
139:         $html .= '<p>Example 2: to generate a secure URL for viewing an Atom news feed of the articles, enter'.
140:             ' <em>act=ViewFeed&bo=ArticleObject&type=Atom</em</p>';
141: 
142:         $html .= '<form action="'.$_SERVER['REQUEST_URI'].'" method="post">';
143:         $html .= '<input type="text" name="QS" size="100"/>';
144:         $temp = new Button('submit', 'Generate', 'saveBut');
145:         $html .= $temp->render();
146:         $html .= '</form>';
147:         
148:         return $html;
149:     }
150:     
151:     /**
152:      * Use this callback to inject in the admin menu template fragment
153:      * 
154:      * @since 1.2
155:      */
156:     public function after_displayPageHead_callback() {
157:         $menu = AlphaView::loadTemplateFragment('html', 'adminmenu.phtml', array());
158:         
159:         return $menu;
160:     }
161: }
162: 
163: // now build the new controller if this file is called directly
164: if ('GenSecureQueryStrings.php' == basename($_SERVER['PHP_SELF'])) {
165:     $controller = new GenSecureQueryStrings();
166:     
167:     if(!empty($_POST)) {            
168:         $controller->doPOST($_QUERY);
169:     }else{
170:         $controller->doGET($_GET);
171:     }
172: }
173: 
174: ?>