1: <?php
  2: 
  3: // include the config file
  4: if(!isset($config)) {
  5:     require_once '../util/AlphaConfig.inc';
  6:     $config = AlphaConfig::getInstance();
  7: 
  8:     require_once $config->get('app.root').'alpha/util/AlphaAutoLoader.inc';
  9: }
 10: 
 11: /**
 12:  *
 13:  * Controller used to generate secure URLs from the query strings provided
 14:  *
 15:  * @package alpha::controller
 16:  * @since 1.0
 17:  * @author John Collins <dev@alphaframework.org>
 18:  * @version $Id: GenSecureQueryStrings.php 1667 2013-09-12 20:21:40Z alphadevx $
 19:  * @license http://www.opensource.org/licenses/bsd-license.php The BSD License
 20:  * @copyright Copyright (c) 2013, John Collins (founder of Alpha Framework).
 21:  * All rights reserved.
 22:  *
 23:  * <pre>
 24:  * Redistribution and use in source and binary forms, with or
 25:  * without modification, are permitted provided that the
 26:  * following conditions are met:
 27:  *
 28:  * * Redistributions of source code must retain the above
 29:  *   copyright notice, this list of conditions and the
 30:  *   following disclaimer.
 31:  * * Redistributions in binary form must reproduce the above
 32:  *   copyright notice, this list of conditions and the
 33:  *   following disclaimer in the documentation and/or other
 34:  *   materials provided with the distribution.
 35:  * * Neither the name of the Alpha Framework nor the names
 36:  *   of its contributors may be used to endorse or promote
 37:  *   products derived from this software without specific
 38:  *   prior written permission.
 39:  *
 40:  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
 41:  * CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
 42:  * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
 43:  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 44:  * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
 45:  * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 46:  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 47:  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 48:  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 49:  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 50:  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
 51:  * OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 52:  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 53:  * </pre>
 54:  *
 55:  */
 56: class GenSecureQueryStrings extends AlphaController implements AlphaControllerInterface {
 57:     /**
 58:      * Trace logger
 59:      *
 60:      * @var Logger
 61:      * @since 1.0
 62:      */
 63:     private static $logger = null;
 64: 
 65:     /**
 66:      * Constructor
 67:      *
 68:      * @since 1.0
 69:      */
 70:     public function __construct() {
 71:         self::$logger = new Logger('CacheManager');
 72:         self::$logger->debug('>>__construct()');
 73: 
 74:         global $config;
 75: 
 76:         // ensure that the super class constructor is called, indicating the rights group
 77:         parent::__construct('Admin');
 78: 
 79:         $this->setTitle('Generate Secure Query Strings');
 80: 
 81:         self::$logger->debug('<<__construct');
 82:     }
 83: 
 84:     /**
 85:      * Handle GET requests
 86:      *
 87:      * @param array $params
 88:      * @since 1.0
 89:      */
 90:     public function doGET($params) {
 91:         self::$logger->debug('>>doGET($params=['.var_export($params, true).'])');
 92: 
 93:         echo AlphaView::displayPageHead($this);
 94: 
 95:         echo $this->renderForm();
 96: 
 97:         echo AlphaView::displayPageFoot($this);
 98: 
 99:         self::$logger->debug('<<doGET');
100:     }
101: 
102:     /**
103:      * Handle POST requests
104:      *
105:      * @param array $params
106:      * @since 1.0
107:      */
108:     public function doPOST($params) {
109:         self::$logger->debug('>>doPOST($params=['.var_export($params, true).'])');
110: 
111:         global $config;
112: 
113:         echo AlphaView::displayPageHead($this);
114: 
115:         echo '<p style="width:90%; overflow:scroll;">';
116:         if(isset($params['QS'])) {
117:             echo FrontController::generateSecureURL($params['QS']);
118:             self::$logger->action('Generated the secure URL in admin: '.FrontController::generateSecureURL($params['QS']));
119:         }
120:         echo '</p>';
121: 
122:         echo $this->renderForm();
123: 
124:         echo AlphaView::displayPageFoot($this);
125: 
126:         self::$logger->debug('<<doPOST');
127:     }
128: 
129:     /**
130:      * Renders the HTML form for generating secure URLs
131:      *
132:      * @return string
133:      * @since 1.0
134:      */
135:     private function renderForm() {
136:         global $config;
137: 
138:         $html = '<p>Use this form to generate secure (encrypted) URLs which make use of the Front Controller.  Always be sure to specify an action controller'.
139:             ' (act) at a minimum.</p>';
140:         $html .= '<p>Example 1: to generate a secure URL for viewing article object 00000000001, enter <em>act=ViewArticle&oid=00000000001</em></p>';
141:         $html .= '<p>Example 2: to generate a secure URL for viewing an Atom news feed of the articles, enter'.
142:             ' <em>act=ViewFeed&bo=ArticleObject&type=Atom</em</p>';
143: 
144:         $html .= '<form action="'.$_SERVER['REQUEST_URI'].'" method="post">';
145:         $html .= '<input type="text" name="QS" size="100"/>';
146:         $fieldname = ($config->get('security.encrypt.http.fieldnames') ? base64_encode(AlphaSecurityUtils::encrypt('saveBut')) : 'saveBut');
147:         $temp = new Button('submit', 'Generate', $fieldname);
148:         $html .= $temp->render();
149:         $html .= '</form>';
150: 
151:         return $html;
152:     }
153: 
154:     /**
155:      * Use this callback to inject in the admin menu template fragment
156:      *
157:      * @since 1.2
158:      */
159:     public function after_displayPageHead_callback() {
160:         $menu = AlphaView::loadTemplateFragment('html', 'adminmenu.phtml', array());
161: 
162:         return $menu;
163:     }
164: }
165: 
166: // now build the new controller if this file is called directly
167: if ('GenSecureQueryStrings.php' == basename($_SERVER['PHP_SELF'])) {
168:     $controller = new GenSecureQueryStrings();
169: 
170:     if(!empty($_POST)) {
171:         $controller->doPOST($_QUERY);
172:     }else{
173:         $controller->doGET($_GET);
174:     }
175: }
176: 
177: ?>