<?php

[0] Fix | Delete

[1] Fix | Delete

/**

[2] Fix | Delete

* IXR_MESSAGE

[3] Fix | Delete

*

[4] Fix | Delete

* @package IXR

[5] Fix | Delete

* @since 1.5.0

[6] Fix | Delete

*

[7] Fix | Delete

*/

[8] Fix | Delete

class IXR_Message

[9] Fix | Delete

{

[10] Fix | Delete

var $message = false;

[11] Fix | Delete

var $messageType = false; // methodCall / methodResponse / fault

[12] Fix | Delete

var $faultCode = false;

[13] Fix | Delete

var $faultString = false;

[14] Fix | Delete

var $methodName = '';

[15] Fix | Delete

var $params = array();

[16] Fix | Delete

[17] Fix | Delete

// Current variable stacks

[18] Fix | Delete

var $_arraystructs = array(); // The stack used to keep track of the current array/struct

[19] Fix | Delete

var $_arraystructstypes = array(); // Stack keeping track of if things are structs or array

[20] Fix | Delete

var $_currentStructName = array(); // A stack as well

[21] Fix | Delete

var $_param;

[22] Fix | Delete

var $_value;

[23] Fix | Delete

var $_currentTag;

[24] Fix | Delete

var $_currentTagContents;

[25] Fix | Delete

// The XML parser

[26] Fix | Delete

var $_parser;

[27] Fix | Delete

[28] Fix | Delete

/**

[29] Fix | Delete

* PHP5 constructor.

[30] Fix | Delete

*/

[31] Fix | Delete

function __construct( $message )

[32] Fix | Delete

{

[33] Fix | Delete

$this->message =& $message;

[34] Fix | Delete

}

[35] Fix | Delete

[36] Fix | Delete

/**

[37] Fix | Delete

* PHP4 constructor.

[38] Fix | Delete

*/

[39] Fix | Delete

public function IXR_Message( $message ) {

[40] Fix | Delete

self::__construct( $message );

[41] Fix | Delete

}

[42] Fix | Delete

[43] Fix | Delete

function parse()

[44] Fix | Delete

{

[45] Fix | Delete

if ( ! function_exists( 'xml_parser_create' ) ) {

[46] Fix | Delete

trigger_error( __( "PHP's XML extension is not available. Please contact your hosting provider to enable PHP's XML extension." ) );

[47] Fix | Delete

return false;

[48] Fix | Delete

}

[49] Fix | Delete

[50] Fix | Delete

// first remove the XML declaration

[51] Fix | Delete

// merged from WP #10698 - this method avoids the RAM usage of preg_replace on very large messages

[52] Fix | Delete

$header = preg_replace( '/<\?xml.*?\?'.'>/s', '', substr( $this->message, 0, 100 ), 1 );

[53] Fix | Delete

$this->message = trim( substr_replace( $this->message, $header, 0, 100 ) );

[54] Fix | Delete

if ( '' == $this->message ) {

[55] Fix | Delete

return false;

[56] Fix | Delete

}

[57] Fix | Delete

[58] Fix | Delete

// Then remove the DOCTYPE

[59] Fix | Delete

$header = preg_replace( '/^<!DOCTYPE[^>]*+>/i', '', substr( $this->message, 0, 200 ), 1 );

[60] Fix | Delete

$this->message = trim( substr_replace( $this->message, $header, 0, 200 ) );

[61] Fix | Delete

if ( '' == $this->message ) {

[62] Fix | Delete

return false;

[63] Fix | Delete

}

[64] Fix | Delete

[65] Fix | Delete

// Check that the root tag is valid

[66] Fix | Delete

$root_tag = substr( $this->message, 0, strcspn( substr( $this->message, 0, 20 ), "> \t\r\n" ) );

[67] Fix | Delete

if ( '<!DOCTYPE' === strtoupper( $root_tag ) ) {

[68] Fix | Delete

return false;

[69] Fix | Delete

}

[70] Fix | Delete

if ( ! in_array( $root_tag, array( '<methodCall', '<methodResponse', '<fault' ) ) ) {

[71] Fix | Delete

return false;

[72] Fix | Delete

}

[73] Fix | Delete

[74] Fix | Delete

// Bail if there are too many elements to parse

[75] Fix | Delete

$element_limit = 30000;

[76] Fix | Delete

if ( function_exists( 'apply_filters' ) ) {

[77] Fix | Delete

/**

[78] Fix | Delete

* Filters the number of elements to parse in an XML-RPC response.

[79] Fix | Delete

*

[80] Fix | Delete

* @since 4.0.0

[81] Fix | Delete

*

[82] Fix | Delete

* @param int $element_limit Default elements limit.

[83] Fix | Delete

*/

[84] Fix | Delete

$element_limit = apply_filters( 'xmlrpc_element_limit', $element_limit );

[85] Fix | Delete

}

[86] Fix | Delete

if ( $element_limit && 2 * $element_limit < substr_count( $this->message, '<' ) ) {

[87] Fix | Delete

return false;

[88] Fix | Delete

}

[89] Fix | Delete

[90] Fix | Delete

$this->_parser = xml_parser_create();

[91] Fix | Delete

// Set XML parser to take the case of tags in to account

[92] Fix | Delete

xml_parser_set_option($this->_parser, XML_OPTION_CASE_FOLDING, false);

[93] Fix | Delete

// Set XML parser callback functions

[94] Fix | Delete

xml_set_element_handler($this->_parser, array($this, 'tag_open'), array($this, 'tag_close'));

[95] Fix | Delete

xml_set_character_data_handler($this->_parser, array($this, 'cdata'));

[96] Fix | Delete

[97] Fix | Delete

// 256Kb, parse in chunks to avoid the RAM usage on very large messages

[98] Fix | Delete

$chunk_size = 262144;

[99] Fix | Delete

[100] Fix | Delete

/**

[101] Fix | Delete

* Filters the chunk size that can be used to parse an XML-RPC response message.

[102] Fix | Delete

*

[103] Fix | Delete

* @since 4.4.0

[104] Fix | Delete

*

[105] Fix | Delete

* @param int $chunk_size Chunk size to parse in bytes.

[106] Fix | Delete

*/

[107] Fix | Delete

$chunk_size = apply_filters( 'xmlrpc_chunk_parsing_size', $chunk_size );

[108] Fix | Delete

[109] Fix | Delete

$final = false;

[110] Fix | Delete

[111] Fix | Delete

do {

[112] Fix | Delete

if (strlen($this->message) <= $chunk_size) {

[113] Fix | Delete

$final = true;

[114] Fix | Delete

}

[115] Fix | Delete

[116] Fix | Delete

$part = substr($this->message, 0, $chunk_size);

[117] Fix | Delete

$this->message = substr($this->message, $chunk_size);

[118] Fix | Delete

[119] Fix | Delete

if (!xml_parse($this->_parser, $part, $final)) {

[120] Fix | Delete

if (PHP_VERSION_ID < 80000) { // xml_parser_free() has no effect as of PHP 8.0.

[121] Fix | Delete

xml_parser_free($this->_parser);

[122] Fix | Delete

}

[123] Fix | Delete

[124] Fix | Delete

unset($this->_parser);

[125] Fix | Delete

return false;

[126] Fix | Delete

}

[127] Fix | Delete

[128] Fix | Delete

if ($final) {

[129] Fix | Delete

break;

[130] Fix | Delete

}

[131] Fix | Delete

} while (true);

[132] Fix | Delete

[133] Fix | Delete

if (PHP_VERSION_ID < 80000) { // xml_parser_free() has no effect as of PHP 8.0.

[134] Fix | Delete

xml_parser_free($this->_parser);

[135] Fix | Delete

}

[136] Fix | Delete

[137] Fix | Delete

unset($this->_parser);

[138] Fix | Delete

[139] Fix | Delete

// Grab the error messages, if any

[140] Fix | Delete

if ($this->messageType == 'fault') {

[141] Fix | Delete

$this->faultCode = $this->params[0]['faultCode'];

[142] Fix | Delete

$this->faultString = $this->params[0]['faultString'];

[143] Fix | Delete

}

[144] Fix | Delete

return true;

[145] Fix | Delete

}

[146] Fix | Delete

[147] Fix | Delete

function tag_open($parser, $tag, $attr)

[148] Fix | Delete

{

[149] Fix | Delete

$this->_currentTagContents = '';

[150] Fix | Delete

$this->_currentTag = $tag;

[151] Fix | Delete

switch($tag) {

[152] Fix | Delete

case 'methodCall':

[153] Fix | Delete

case 'methodResponse':

[154] Fix | Delete

case 'fault':

[155] Fix | Delete

$this->messageType = $tag;

[156] Fix | Delete

break;

[157] Fix | Delete

/* Deal with stacks of arrays and structs */

[158] Fix | Delete

case 'data': // data is to all intents and puposes more interesting than array

[159] Fix | Delete

$this->_arraystructstypes[] = 'array';

[160] Fix | Delete

$this->_arraystructs[] = array();

[161] Fix | Delete

break;

[162] Fix | Delete

case 'struct':

[163] Fix | Delete

$this->_arraystructstypes[] = 'struct';

[164] Fix | Delete

$this->_arraystructs[] = array();

[165] Fix | Delete

break;

[166] Fix | Delete

}

[167] Fix | Delete

}

[168] Fix | Delete

[169] Fix | Delete

function cdata($parser, $cdata)

[170] Fix | Delete

{

[171] Fix | Delete

$this->_currentTagContents .= $cdata;

[172] Fix | Delete

}

[173] Fix | Delete

[174] Fix | Delete

function tag_close($parser, $tag)

[175] Fix | Delete

{

[176] Fix | Delete

$valueFlag = false;

[177] Fix | Delete

switch($tag) {

[178] Fix | Delete

case 'int':

[179] Fix | Delete

case 'i4':

[180] Fix | Delete

$value = (int)trim($this->_currentTagContents);

[181] Fix | Delete

$valueFlag = true;

[182] Fix | Delete

break;

[183] Fix | Delete

case 'double':

[184] Fix | Delete

$value = (float)trim($this->_currentTagContents);

[185] Fix | Delete

$valueFlag = true;

[186] Fix | Delete

break;

[187] Fix | Delete

case 'string':

[188] Fix | Delete

$value = (string)trim($this->_currentTagContents);

[189] Fix | Delete

$valueFlag = true;

[190] Fix | Delete

break;

[191] Fix | Delete

case 'dateTime.iso8601':

[192] Fix | Delete

$value = new IXR_Date(trim($this->_currentTagContents));

[193] Fix | Delete

$valueFlag = true;

[194] Fix | Delete

break;

[195] Fix | Delete

case 'value':

[196] Fix | Delete

// "If no type is indicated, the type is string."

[197] Fix | Delete

if (trim($this->_currentTagContents) != '') {

[198] Fix | Delete

$value = (string)$this->_currentTagContents;

[199] Fix | Delete

$valueFlag = true;

[200] Fix | Delete

}

[201] Fix | Delete

break;

[202] Fix | Delete

case 'boolean':

[203] Fix | Delete

$value = (bool)trim($this->_currentTagContents);

[204] Fix | Delete

$valueFlag = true;

[205] Fix | Delete

break;

[206] Fix | Delete

case 'base64':

[207] Fix | Delete

$value = base64_decode($this->_currentTagContents);

[208] Fix | Delete

$valueFlag = true;

[209] Fix | Delete

break;

[210] Fix | Delete

/* Deal with stacks of arrays and structs */

[211] Fix | Delete

case 'data':

[212] Fix | Delete

case 'struct':

[213] Fix | Delete

$value = array_pop($this->_arraystructs);

[214] Fix | Delete

array_pop($this->_arraystructstypes);

[215] Fix | Delete

$valueFlag = true;

[216] Fix | Delete

break;

[217] Fix | Delete

case 'member':

[218] Fix | Delete

array_pop($this->_currentStructName);

[219] Fix | Delete

break;

[220] Fix | Delete

case 'name':

[221] Fix | Delete

$this->_currentStructName[] = trim($this->_currentTagContents);

[222] Fix | Delete

break;

[223] Fix | Delete

case 'methodName':

[224] Fix | Delete

$this->methodName = trim($this->_currentTagContents);

[225] Fix | Delete

break;

[226] Fix | Delete

}

[227] Fix | Delete

[228] Fix | Delete

if ($valueFlag) {

[229] Fix | Delete

if (count($this->_arraystructs) > 0) {

[230] Fix | Delete

// Add value to struct or array

[231] Fix | Delete

if ($this->_arraystructstypes[count($this->_arraystructstypes)-1] == 'struct') {

[232] Fix | Delete

// Add to struct

[233] Fix | Delete

$this->_arraystructs[count($this->_arraystructs)-1][$this->_currentStructName[count($this->_currentStructName)-1]] = $value;

[234] Fix | Delete

} else {

[235] Fix | Delete

// Add to array

[236] Fix | Delete

$this->_arraystructs[count($this->_arraystructs)-1][] = $value;

[237] Fix | Delete

}

[238] Fix | Delete

} else {

[239] Fix | Delete

// Just add as a parameter

[240] Fix | Delete

$this->params[] = $value;

[241] Fix | Delete

}

[242] Fix | Delete

}

[243] Fix | Delete

$this->_currentTagContents = '';

[244] Fix | Delete

}

[245] Fix | Delete

}

[246] Fix | Delete

[247] Fix | Delete