142 lines
3.3 KiB
PHP
142 lines
3.3 KiB
PHP
<?php defined('SYSPATH') or die('No direct script access.');
|
|
/**
|
|
* Cookie helper.
|
|
*
|
|
* @package Kohana
|
|
* @author Kohana Team
|
|
* @copyright (c) 2008-2009 Kohana Team
|
|
* @license http://kohanaphp.com/license.html
|
|
*/
|
|
class cookie_Core {
|
|
|
|
/**
|
|
* @var string Magic salt to add to the cookie
|
|
*/
|
|
public static $salt = 'kooky';
|
|
|
|
/**
|
|
* @var integer Number of seconds before the cookie expires
|
|
*/
|
|
public static $expiration = 0;
|
|
|
|
/**
|
|
* @var string Restrict the path that the cookie is available to
|
|
*/
|
|
public static $path = '/';
|
|
|
|
/**
|
|
* @var string Restrict the domain that the cookie is available to
|
|
*/
|
|
public static $domain = NULL;
|
|
|
|
/**
|
|
* @var boolean Only transmit cookies over secure connections
|
|
*/
|
|
public static $secure = FALSE;
|
|
|
|
/**
|
|
* @var boolean Only transmit cookies over HTTP, disabling Javascript access
|
|
*/
|
|
public static $httponly = FALSE;
|
|
|
|
/**
|
|
* Gets the value of a signed cookie. Cookies without signatures will not
|
|
* be returned. If the cookie signature is present, but invalid, the cookie
|
|
* will be deleted.
|
|
*
|
|
* @param string cookie name
|
|
* @param mixed default value to return
|
|
* @return string
|
|
*/
|
|
public static function get($key, $default = NULL)
|
|
{
|
|
if ( ! isset($_COOKIE[$key]))
|
|
{
|
|
// The cookie does not exist
|
|
return $default;
|
|
}
|
|
|
|
// Get the cookie value
|
|
$cookie = $_COOKIE[$key];
|
|
|
|
// Find the position of the split between salt and contents
|
|
$split = strlen(cookie::salt($key, NULL));
|
|
|
|
if (isset($cookie[$split]) AND $cookie[$split] === '~')
|
|
{
|
|
// Separate the salt and the value
|
|
list ($hash, $value) = explode('~', $cookie, 2);
|
|
|
|
if (cookie::salt($key, $value) === $hash)
|
|
{
|
|
// Cookie signature is valid
|
|
return $value;
|
|
}
|
|
|
|
// The cookie signature is invalid, delete it
|
|
cookie::delete($key);
|
|
}
|
|
|
|
return $default;
|
|
}
|
|
|
|
/**
|
|
* Sets a signed cookie. Note that all cookie values must be strings and no
|
|
* automatic serialization will be performed!
|
|
*
|
|
* @param string name of cookie
|
|
* @param string value of cookie
|
|
* @param integer lifetime in seconds
|
|
* @return boolean
|
|
*/
|
|
public static function set($name, $value, $expiration = NULL)
|
|
{
|
|
if ($expiration === NULL)
|
|
{
|
|
// Use the default expiration
|
|
$expiration = cookie::$expiration;
|
|
}
|
|
|
|
if ($expiration !== 0)
|
|
{
|
|
// The expiration is expected to be a UNIX timestamp
|
|
$expiration += time();
|
|
}
|
|
|
|
// Add the salt to the cookie value
|
|
$value = cookie::salt($name, $value).'~'.$value;
|
|
|
|
return setcookie($name, $value, $expiration, cookie::$path, cookie::$domain, cookie::$secure, cookie::$httponly);
|
|
}
|
|
|
|
/**
|
|
* Deletes a cookie by making the value NULL and expiring it.
|
|
*
|
|
* @param string cookie name
|
|
* @return boolean
|
|
*/
|
|
public static function delete($name)
|
|
{
|
|
// Remove the cookie
|
|
unset($_COOKIE[$name]);
|
|
|
|
// Nullify the cookie and make it expire
|
|
return cookie::set($name, NULL, -86400);
|
|
}
|
|
|
|
/**
|
|
* Generates a salt string for a cookie based on the name and value.
|
|
*
|
|
* @param string name of cookie
|
|
* @param string value of cookie
|
|
* @return string
|
|
*/
|
|
public static function salt($name, $value)
|
|
{
|
|
// Determine the user agent
|
|
$agent = isset($_SERVER['HTTP_USER_AGENT']) ? strtolower($_SERVER['HTTP_USER_AGENT']) : 'unknown';
|
|
|
|
return sha1($agent.$name.$value.cookie::$salt);
|
|
}
|
|
|
|
} // End cookie
|