lib/javascript.php

   1 <?php
   2 // This file is part of Moodle - http://moodle.org/
   3 //
   4 // Moodle is free software: you can redistribute it and/or modify
   5 // it under the terms of the GNU General Public License as published by
   6 // the Free Software Foundation, either version 3 of the License, or
   7 // (at your option) any later version.
   8 //
   9 // Moodle is distributed in the hope that it will be useful,
  10 // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12 // GNU General Public License for more details.
  13 //
  14 // You should have received a copy of the GNU General Public License
  15 // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16
  17 /**
  18  * This file is serving optimised JS
  19  *
  20  * @package    core_lib
  21  * @copyright  2010 Petr Skoda (skodak)
  22  * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  23  */
  24
  25 // disable moodle specific debug messages and any errors in output,
  26 // comment out when debugging or better look into error log!
  27 define('NO_DEBUG_DISPLAY', true);
  28
  29 // we need just the values from config.php and minlib.php
  30 define('ABORT_AFTER_CONFIG', true);
  31 require('../config.php'); // this stops immediately at the beginning of lib/setup.php
  32 require_once("$CFG->dirroot/lib/jslib.php");
  33 require_once("$CFG->dirroot/lib/classes/minify.php");
  34
  35 if ($slashargument = min_get_slash_argument()) {
  36     $slashargument = ltrim($slashargument, '/');
  37     if (substr_count($slashargument, '/') < 1) {
  38         image_not_found();
  39     }
  40     // image must be last because it may contain "/"
  41     list($rev, $file) = explode('/', $slashargument, 2);
  42     $rev  = min_clean_param($rev, 'INT');
  43     $file = '/'.min_clean_param($file, 'SAFEPATH');
  44
  45 } else {
  46     $rev  = min_optional_param('rev', -1, 'INT');
  47     $file = min_optional_param('jsfile', '', 'RAW'); // 'file' would collide with URL rewriting!
  48 }
  49
  50 // some security first - pick only files with .js extension in dirroot
  51 $jsfiles = array();
  52 $files = explode(',', $file);
  53 foreach ($files as $fsfile) {
  54     $jsfile = realpath($CFG->dirroot.$fsfile);
  55     if ($jsfile === false) {
  56         // does not exist
  57         continue;
  58     }
  59     if ($CFG->dirroot === '/') {
  60         // Some shared hosting sites serve files directly from '/',
  61         // this is NOT supported, but at least allow JS when showing
  62         // errors and warnings.
  63     } else if (strpos($jsfile, $CFG->dirroot . DIRECTORY_SEPARATOR) !== 0) {
  64         // hackers - not in dirroot
  65         continue;
  66     }
  67     if (substr($jsfile, -3) !== '.js') {
  68         // hackers - not a JS file
  69         continue;
  70     }
  71     $jsfiles[] = $jsfile;
  72 }
  73
  74 if (!$jsfiles) {
  75     // bad luck - no valid files
  76     die();
  77 }
  78
  79 $etag = sha1($rev.implode(',', $jsfiles));
  80
  81 // Use the caching only for meaningful revision numbers which prevents future cache poisoning.
  82 if ($rev > 0 and $rev < (time() + 60*60)) {
  83     $candidate = $CFG->localcachedir.'/js/'.$etag;
  84
  85     if (file_exists($candidate)) {
  86         if (!empty($_SERVER['HTTP_IF_NONE_MATCH']) || !empty($_SERVER['HTTP_IF_MODIFIED_SINCE'])) {
  87             // we do not actually need to verify the etag value because our files
  88             // never change in cache because we increment the rev parameter
  89             js_send_unmodified(filemtime($candidate), $etag);
  90         }
  91         js_send_cached($candidate, $etag);
  92
  93     } else {
  94         js_write_cache_file_content($candidate, core_minify::js_files($jsfiles));
  95         // verify nothing failed in cache file creation
  96         clearstatcache();
  97         if (file_exists($candidate)) {
  98             js_send_cached($candidate, $etag);
  99         }
 100     }
 101 }
 102
 103 $content = '';
 104 foreach ($jsfiles as $jsfile) {
 105     $content .= file_get_contents($jsfile)."\n";
 106 }
 107 js_send_uncached($content, $etag);