<?php
/* Copyright (C) NAVER <http://www.navercorp.com> */
/**
 * @class  pageView
 * @author NAVER (developers@xpressengine.com)
 * @brief page view class of the module
 */
class PageView extends Page
{
	public $module_srl = 0;
	public $list_count = 20;
	public $page_count = 10;
	public $cache_file = null;
	public $interval = 0;
	public $path = '';
	public $proc_php = false;
	public $proc_tpl = false;

	/**
	 * @brief Initialization
	 */
	function init()
	{
		if ($this->module_info->page_type === 'WIDGET')
		{
			$this->interval = (int)($this->module_info->page_caching_interval ?? 0);
			$this->cache_file = vsprintf('%sfiles/cache/page/%d.%s.%s.%s.cache.php', [
				\RX_BASEDIR,
				$this->module_info->module_srl,
				Context::getLangType(),
				Context::getSslStatus(),
				$this instanceof pageMobile ? 'm' : 'pc',
			]);
		}

		if ($this->module_info->page_type === 'OUTSIDE')
		{
			$this->interval = (int)($this->module_info->page_caching_interval ?? 0);
			if ($this instanceof pageMobile)
			{
				$this->path = ($this->module_info->mpath ?? '') ?: ($this->module_info->path ?? '');
			}
			else
			{
				$this->path = ($this->module_info->path ?? '');
			}
			$this->proc_php = (isset($this->module_info->opage_proc_php) && $this->module_info->opage_proc_php === 'N') ? false : true;
			$this->proc_tpl = (isset($this->module_info->opage_proc_tpl) && $this->module_info->opage_proc_tpl === 'Y') ? true : false;
			$this->cache_file = vsprintf('%sfiles/cache/opage/%d.%s.%s.%s.%s.cache.php', [
				\RX_BASEDIR,
				$this->module_info->module_srl,
				Context::getSslStatus(),
				$this->proc_php ? 'php' : 'nophp',
				$this->proc_tpl ? 'tpl' : 'notpl',
				$this instanceof pageMobile ? 'm' : 'pc',
			]);
		}
	}

	/**
	 * @brief General request output
	 */
	function dispPageIndex()
	{
		// Variables used in the template Context:: set()
		if ($this->module_srl)
		{
			Context::set('module_srl', $this->module_srl);
		}

		// Get page content according to page type.
		$page_type_name = strtolower($this->module_info->page_type);
		if (!in_array($page_type_name, ['widget', 'article', 'outside']))
		{
			$page_type_name = 'widget';
		}

		// Check document_srl.
		$request_vars = Context::getRequestVars();
		if (!empty($request_vars->document_srl))
		{
			$oDocument = DocumentModel::getDocument($request_vars->document_srl);
			if (!$oDocument->isExists())
			{
				return $this->dispPageNotFound(404, 'msg_not_founded');
			}
			elseif (!$oDocument->isAccessible())
			{
				return $this->dispPageNotFound(403, 'msg_not_permitted');
			}
			elseif (in_array($page_type_name, ['article']))
			{
				return $this->setRedirectUrl(getNotEncodedUrl(['mid' => $this->mid]));
			}
		}

		// Get page content.
		$method = '_get' . ucfirst($page_type_name) . 'Content';
		$page_content = $this->{$method}();

		Context::set('module_info', $this->module_info);
		Context::set('page_content', $page_content);

		$this->setTemplatePath($this->module_path . 'tpl');
		$this->setTemplateFile($this instanceof pageMobile ? 'mobile' : 'content');
	}

	/**
	 * 404 error handler
	 */
	public function dispPageNotFound($code = '404', $message = 'msg_not_founded')
	{
		$oMessageObject = $this instanceof PageMobile ? MessageMobile::getInstance() : MessageView::getInstance();
		$oMessageObject->setMessage($message);
		$oMessageObject->dispMessage();
		$this->setTemplatePath($oMessageObject->getTemplatePath());
		$this->setTemplateFile($oMessageObject->getTemplateFile());
		$this->setHttpStatusCode($code);
	}

	function _getWidgetContent()
	{
		if ($this instanceof pageMobile)
		{
			$page_content = $this->module_info->mcontent ?: $this->module_info->content;
		}
		else
		{
			$page_content = $this->module_info->content;
		}

		if ($this->interval > 0)
		{
			if (!file_exists($this->cache_file) || !filesize($this->cache_file))
			{
				$mtime = 0;
			}
			else
			{
				$mtime = filemtime($this->cache_file);
			}

			if($mtime && $mtime + ($this->interval * 60) > \RX_TIME)
			{
				$page_content = FileHandler::readFile($this->cache_file);
				$page_content = str_replace('<!--#Meta:', '<!--Meta:', $page_content);
			}
			else
			{
				$oWidgetController = WidgetController::getInstance();
				$page_content = $oWidgetController->transWidgetCode($page_content);
				FileHandler::writeFile($this->cache_file, $page_content);
			}
		}
		else
		{
			if (file_exists($this->cache_file))
			{
				FileHandler::removeFile($this->cache_file);
			}
		}

		return $page_content;
	}

	function _getArticleContent()
	{
		$oDocument = DocumentModel::getDocument(0);
		if($this->module_info->document_srl ?? 0)
		{
			$document_srl = $this->module_info->document_srl;
			$oDocument->setDocument($document_srl);
			Context::set('document_srl', $document_srl);
		}
		Context::set('oDocument', $oDocument);

		$oTemplate = Rhymix\Framework\Template::getInstance();
		$page_content = $oTemplate->compile($this->getTemplatePath(), 'content');

		return $page_content;
	}

	function _getOutsideContent()
	{
		// Stop if the path is not set.
		if (!$this->path)
		{
			return;
		}

		// Check parameters.
		$this->_checkParams(Context::getRequestVars());

		// External URL
		if (preg_match('!^[a-z]+://!i', $this->path))
		{
			return $this->getHtmlPage($this->path, $this->interval, $this->cache_file);
		}

		// Internal PHP document
		else
		{
			return $this->executeFile($this->path, $this->interval, $this->cache_file);
		}
	}

	/**
	 * Check parameters for suspicious keys or values.
	 *
	 * This helps protect external pages from RVE-2022-2.
	 *
	 * @param array|object $vars
	 * @return void
	 */
	protected function _checkParams($vars)
	{
		foreach ($vars as $key => $val)
		{
			if (preg_match('/[\{\}\(\)<>\$\'"]/', $key))
			{
				throw new Rhymix\Framework\Exceptions\SecurityViolation();
			}

			if (is_array($val) || is_object($val))
			{
				$this->_checkParams($val);
			}
			elseif (preg_match('/[\{\}\(\)<>\$\'"]/', (string)$val))
			{
				throw new Rhymix\Framework\Exceptions\SecurityViolation();
			}
		}
	}

	/**
	 * @brief Save the file and return if a file is requested by http
	 */
	function getHtmlPage($path, $caching_interval, $cache_file)
	{
		// Verify cache
		if($caching_interval > 0 && file_exists($cache_file) && filemtime($cache_file) + $caching_interval*60 > $_SERVER['REQUEST_TIME'])
		{
			$content = FileHandler::readFile($cache_file);
		}
		else
		{
			FileHandler::getRemoteFile($path, $cache_file);
			$content = FileHandler::readFile($cache_file);
		}

		// Create opage controller
		$oPageController = getController('page');

		// change url of image, css, javascript and so on if the page is from external server
		$content = $oPageController->replaceSrc($content, $path);

		// Change the document to utf-8 format
		$buff = new stdClass;
		$buff->content = $content;
		$buff = Context::convertEncoding($buff);
		$content = $buff->content;

		// Extract a title
		$title = $oPageController->getTitle($content);
		if($title) Context::setBrowserTitle($title);

		// Extract header script
		$head_script = $oPageController->getHeadScript($content);
		if($head_script) Context::addHtmlHeader($head_script);

		// Extract content from the body
		$body_script = $oPageController->getBodyScript($content);
		if(!$body_script) $body_script = $content;

		return $content;
	}

	/**
	 * @brief Create a cache file in order to include if it is an internal file
	 */
	function executeFile($target_file, $caching_interval, $cache_file)
	{
		// Cancel if the file doesn't exist
		$real_target_file = FileHandler::getRealPath($target_file);
		if (!file_exists($real_target_file))
		{
			return;
		}

		// Return content from cache if available.
		if ($caching_interval > 0 && file_exists($cache_file) && filemtime($cache_file) + ($caching_interval * 60) > \RX_TIME && filemtime($cache_file) > filemtime($real_target_file))
		{
			return file_get_contents($cache_file);
		}

		// Parse as template if enabled.
		if ($this->proc_tpl)
		{
			// Add the target directory to include_path, so that raw PHP include statements inside the template will work.
			$include_path = get_include_path();
			$target_dir = dirname($real_target_file);
			set_include_path($target_dir . PATH_SEPARATOR . $include_path);

			// Compile the template.
			$oTemplate = new Rhymix\Framework\Template($target_dir . '/', basename($real_target_file));
			$oTemplate->setCachePath(preg_replace('/\.cache\.php$/', '.compiled.php', $cache_file));
			$content = $oTemplate->compile();
		}

		// Parse as PHP if enabled.
		elseif ($this->proc_php)
		{
			ob_start();
			include_in_clean_scope($real_target_file);
			$content = ob_get_clean();
		}

		// Otherwise, get the raw content of the file.
		else
		{
			$content = file_get_contents($real_target_file);
		}

		// Convert relative paths to absolute paths.
		$this->path = str_replace('\\', '/', dirname($real_target_file)) . '/';
		$content = preg_replace_callback('/\b(target=|src=|href=|url\()("|\')?([^"\'\)]+)("|\'\))?/is', array($this, '_replacePath'), $content);
		$content = preg_replace_callback('/(<!--%import\()(\")([^"]+)(\")/is', array($this, '_replacePath'), $content);

		// Write cache file.
		$success = Rhymix\Framework\Storage::write($cache_file, $content);
		return $content;
	}

	function _replacePath($matches)
	{
		$val = trim($matches[3]);

		// Pass if the path is external or starts with /, #, { characters
		// /=absolute path, #=hash in a page, {=Template syntax
		if(strpos($val, '.') === FALSE || preg_match('@^((?:http|https|ftp|telnet|mms)://|(?:mailto|javascript):|[/#{])@i',$val))
		{
			return $matches[0];
		}
		// In case of  .. , get a path
		elseif(strncasecmp('..', $val, 2) === 0)
		{
			$p = Context::pathToUrl($this->path);
			return sprintf("%s%s%s%s",$matches[1],$matches[2],$p.$val,$matches[4]);
		}

		if(strncasecmp('..', $val, 2) === 0) $val = substr($val,2);
		$p = Context::pathToUrl($this->path);
		$path = sprintf("%s%s%s%s",$matches[1],$matches[2],$p.$val,$matches[4]);

		return $path;
	}
}
/* End of file page.view.php */
/* Location: ./modules/page/page.view.php */