<?php

class Amcsi_HttpProxy_Proxy
{
	/**
	 * Contains the environment information to use
	 *
	 * @var Amcsi_HttpProxy_Env
	 * @access protected
	 */
	protected $env;
	protected $get;
	protected $expectedPasswordHash;
	protected $config;
	protected $requirePassword = true;

	/**
	 * Array of option characters set.
	 *
	 * p: POST should be taken into account when checking for REQUEST
	 *  variables. Also, POST should be used for proxified urls
	 * r: Use RewriteRule based rewriting
	 * u: Rewrite all XML/HTML attributes to make all urls in them
	 *  proxified.
	 *
	 * @var array
	 * @access protected
	 */
	protected $optChars;
	protected $rewriteDetails;

	/**
	 * Url object.
	 * Has information on the target url, and has
	 * get-style options.
	 *
	 * @var Amcsi_HttpProxy_Url
	 * @access protected
	 */
	protected $url;
	protected $requestUri;
	protected $host;
	protected $reqHeaders;
	protected $post;


	public function __construct(Amcsi_HttpProxy_Env $env)
	{
		$this->env = $env;
		$urlObj = $env->getUrlObj();
		$this->url = $urlObj;
	}


	public function setConf(array $conf)
	{
		$map = array(
		    'expectedPasswordHash', 'requirePassword'
		);
		foreach ($map as $thisMember) {
		    $key = $thisMember;
		    if (array_key_exists($key, $conf)) {
		        $this->$thisMember = $conf[$key];
		    }
		}
		$this->config = $conf;
		return $this;
	}


	/**
	 * getUrlObj
	 *
	 * @access public
	 * @return Amcsi_HttpProxy_Url
	 */
	public function getUrlObj()
	{
		return $this->url;
	}


	public function isOptSet($optChar)
	{
		return $this->url->isOptSet($optChar);
	}


	/**
	 * Check if the requested URL is allowed to be requested
	 *
	 * @param string $url
	 * @access private
	 * @return boolean
	 */
	private function isUrlAllowed($url)
	{
		$ret = false;
		$isValid = (bool) filter_var($url, FILTER_VALIDATE_URL);
		if ($isValid) {
		    if (!empty($this->config['allowedBaseUrls'])) {
		        foreach ((array) $this->config['allowedBaseUrls'] as $baseUrl) {
		            $parsedBaseUrl = parse_url($baseUrl);
		            $parsedUrl = parse_url($url);
		            if ($parsedUrl['scheme'] === $parsedBaseUrl['scheme']) {
		                if ($parsedUrl['host'] === $parsedBaseUrl['host']) {
		                    /**
		                     * Do the rtrim / / stuff so that the baseUrl would treat
		                     * slash as its boundary
		                     **/
		                    $parsedUrlPath = isset($parsedUrl['path']) ?
		                        $parsedUrl['path'] :
		                        null;
		                    $parsedBaseUrlPath = isset($parsedBaseUrl['path']) ?
		                        $parsedBaseUrl['path'] :
		                        null;
		                    $urlPath = rtrim($parsedUrlPath, '/') . '/';
		                    $baseUrlPath = rtrim($parsedBaseUrlPath, '/') . '/';
		                    if (0 === strpos($urlPath, $baseUrlPath)) {
		                        $ret = true;
		                        break;
		                    }
		                }
		            }
		        }
		    } else {
		        $ret = true;
		    }
		}

		return $ret;
	}


	public function setOptsString($string)
	{
		$optChars = array();
		$strlen = strlen($string);
		for ($i = 0; $i < $strlen; $i++) {
		    $optChars[$string[$i]] = true;
		}
		$this->optChars = $optChars;
		return $this;
	}


	/**
	 * It is the URL object whose params should be taken into
	 * account.
	 *
	 * @param mixed $name
	 * @access public
	 * @return void
	 */
	public function getParam($name)
	{
		return $this->url->getParam($name);
	}


	public function dispatch()
	{
		$opts = $this->getParam('opts');
		$this->setOptsString($opts);
		$pass = $this->getParam('pass');
		$requirePass = $this->requirePassword;
		if (
		    !$requirePass ||
		    crypt($pass, $this->expectedPasswordHash) === $this->expectedPasswordHash
		) {
		    if ($sleep = $this->getParam('sleep')) {
		        sleep($sleep);
		    }
		    $this->_pass = $pass;
		    ini_set('display_errors', true);
		    $url = $this->getUrlObj();
		    if ($this->isUrlAllowed($url)) {
		        $this->url = $url;
		        $rewriter = new Amcsi_HttpProxy_Rewriter($this->env, $url);
		        $this->rewriter = $rewriter;
		        $proxyResponse = $this->request($url);
		    } else {
		        $proxyResponse = $this->respondForbidden();
		    }
		}
		else {
		    $proxyResponse = $this->respondForbidden();
		}

		foreach ($proxyResponse->getHeaders() as $header) {
		    header($header);
		}
		echo $proxyResponse->getContent();

		exit(0);
	}


	/**
	 * respondForbidden
	 *
	 * @access private
	 * @return Amcsi_HttpProxy_Response
	 */
	private function respondForbidden()
	{
		$content = 'Forbidden';
		$headers = array(
		    "HTTP/1.1 403 Forbidden",
		    "Content-Length: " . strlen($content)
		);
		$returnResponse = new Amcsi_HttpProxy_Response($content, $headers);

		return $returnResponse;
	}


	/**
	 * request
	 *
	 * @param mixed $url
	 * @access public
	 * @return Amcsi_HttpProxy_Response     The response to send back to the user
	 */
	public function request($url)
	{
		$reqHeaders = $this->env->getRequestHeaders();
		$headers = array ();
		foreach ($reqHeaders as $key => $val) {
		    if ('Host' == $key || 'Content-Length' == $key || 'Connection' == $key) {
		        continue;
		    }
		    if ('SOAPAction' == $key) {
		        $headers[] = 'SOAPAction: ' . trim($reqHeaders[$key], '"');
		    } elseif ('Referer' == $key && $this->isOptSet('r')) {
		        $headers[] = 'Referer: ' . $this->rewriter->reverseReplaceUrl($val);
		    } else {
		        $headers[] = sprintf('%s: %s', $key, $reqHeaders[$key]);
		    }
		}
		$headers[] = 'Connection: close';
		$request = new Amcsi_HttpProxy_Request;
		$request->setUrl($url);

		$parsedUrl = parse_url($url);
		if (filter_var($parsedUrl['host'], FILTER_VALIDATE_IP)) {
		    // host is IP
		} else {
		    $headers[] = "Host: $parsedUrl[host]";
		}
		$xForwardedForPrefix = '';
		if (!empty($reqHeaders['X-Forwarded-For'])) {
		    $xForwardedForPrefix = $reqHeaders['X-Forwarded-For'] . ', ';
		}
		$headers[] = sprintf("X-Forwarded-For: %s%s", $xForwardedForPrefix, $this->env->getEnv('REMOTE_ADDR'));
		$request->setMethod($this->env->getenv('REQUEST_METHOD'));
		if ($timeoutMs = $this->getParam('timeoutMs')) {
		    $request->setTimeoutMs($timeoutMs);
		}
		$request->setHeaders($headers);
		$request->setContentAndLength($this->env->getInput());

		$this->debugLog('request url', (string) $url);
		$this->debugLog('request headers', $headers);

		$response = $request->doRequest();

		$this->debugLog('response headers', $response->getHeaders());
		$this->debugLog('response content', $response->getContent());
		$proxyResponse = $this->response($request, $response);

		return $proxyResponse;
	}


	/**
	 * response
	 *
	 * @param Amcsi_HttpProxy_Request $request
	 * @param Amcsi_HttpProxy_Response $response    Response received
	 * @access public
	 * @return Amcsi_HttpProxy_Response             Proxied response
	 */
	public function response(Amcsi_HttpProxy_Request $request, Amcsi_HttpProxy_Response $response)
	{
		$content = $response->getContent();

		if ($contentFilters = $this->config['contentFilters']) {
		    foreach ((array) $contentFilters as $contentFilter) {
		        if (is_callable($contentFilter)) {
		            /**
		             * $request and $response are not immutable, so clone them
		             **/
		            $contentFilterData = new Amcsi_HttpProxy_ContentFilterData(
		                clone $request,
		                clone $response
		            );

		            $result = call_user_func($contentFilter, $contentFilterData);
		            if (is_string($result)) {
		                $content = $result;
		            }
		        }
		    }
		}

		$responseHeaders = $response->getHeaders();
		if (false && !$content) {
		    var_dump($reqHeaders);
		    var_dump($opts);
		    var_dump($responseHeaders);
		}
		$returnHeaders = array();

		$recalculateContentLength = false;

		if (!empty($responseHeaders)) {
		    foreach ($responseHeaders as $index => $hrh) {
		        if (0 === strpos($hrh, 'Connection:')) {
		            continue;
		        }
		        if (0 === strpos($hrh, 'Set-Cookie:')) {
		            $newHeader = $this->rewriter->rewriteCookieHeader($hrh);
		            $returnHeaders[] = $newHeader;
		            continue;
		        }
		        if (0 === strpos($hrh, 'Content-Type')) {
		            if ($this->isOptSet('u') && false !== strpos($hrh, 'text/')) {
		                $content = $this->rewriter->proxify($content);
		            }
		        }
		        if (0 === strpos($hrh, 'Location:') && $this->isOptSet('u')) {
		            $location = substr($hrh, 10);
		            $proxifiedLocation = $this->rewriter->replaceUrl($location);
		            $returnHeaders[] = "Location: $proxifiedLocation";
		        } elseif (0 === strpos($hrh, 'Transfer-Encoding: chunked')) {
		            continue;
		        } else if (0 === strpos(strtolower($hrh), 'content-length')) {
		            $recalculateContentLength = true;
		            continue;
		        } else {
		            $returnHeaders[] = $hrh;
		        }
		    }
		}
		else {
		    $lastError = error_get_last();
		    if (false !== strpos($lastError['message'], 'Connection timed out')) {
		        $returnHeaders[] = 'HTTP/1.1 504 Gateway Timeout';
		    }
		    else {
		        ob_start();
		        trigger_error(print_r($lastError, true));
		        ob_end_clean();
		        $returnHeaders[] = 'HTTP/1.1 500 Internal Server Error';
		    }
		}
		if ($recalculateContentLength) {
		    $returnHeaders[] = "Content-Length: " . strlen($content);
		}
		$returnResponse = new Amcsi_HttpProxy_Response($content, $returnHeaders);

		return $returnResponse;
	}


	public function debugLog($label, $value)
	{
		if ($this->config['debugLogFile']) {
		    $text = sprintf("%s: %s\n", $label, print_r($value, true));
		    error_log($text, 3, $this->config['debugLogFile']);
		}
	}
}
__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----Njg0MzIyOTA3OTA0NjYzIDEwMTMwMDk1MjA0MzQ5NTcgMTk0MzE1Njc0MzQzNTI2