<?php

[0] Fix | Delete

[1] Fix | Delete

/**

[2] Fix | Delete

* IXR_Server

[3] Fix | Delete

*

[4] Fix | Delete

* @package IXR

[5] Fix | Delete

* @since 1.5.0

[6] Fix | Delete

*/

[7] Fix | Delete

class IXR_Server

[8] Fix | Delete

{

[9] Fix | Delete

var $data;

[10] Fix | Delete

var $callbacks = array();

[11] Fix | Delete

var $message;

[12] Fix | Delete

var $capabilities;

[13] Fix | Delete

[14] Fix | Delete

/**

[15] Fix | Delete

* PHP5 constructor.

[16] Fix | Delete

*/

[17] Fix | Delete

function __construct( $callbacks = false, $data = false, $wait = false )

[18] Fix | Delete

{

[19] Fix | Delete

$this->setCapabilities();

[20] Fix | Delete

if ($callbacks) {

[21] Fix | Delete

$this->callbacks = $callbacks;

[22] Fix | Delete

}

[23] Fix | Delete

$this->setCallbacks();

[24] Fix | Delete

if (!$wait) {

[25] Fix | Delete

$this->serve($data);

[26] Fix | Delete

}

[27] Fix | Delete

}

[28] Fix | Delete

[29] Fix | Delete

/**

[30] Fix | Delete

* PHP4 constructor.

[31] Fix | Delete

*/

[32] Fix | Delete

public function IXR_Server( $callbacks = false, $data = false, $wait = false ) {

[33] Fix | Delete

self::__construct( $callbacks, $data, $wait );

[34] Fix | Delete

}

[35] Fix | Delete

[36] Fix | Delete

function serve($data = false)

[37] Fix | Delete

{

[38] Fix | Delete

if (!$data) {

[39] Fix | Delete

if (isset($_SERVER['REQUEST_METHOD']) && $_SERVER['REQUEST_METHOD'] !== 'POST') {

[40] Fix | Delete

if ( function_exists( 'status_header' ) ) {

[41] Fix | Delete

status_header( 405 ); // WP #20986

[42] Fix | Delete

header( 'Allow: POST' );

[43] Fix | Delete

}

[44] Fix | Delete

header('Content-Type: text/plain'); // merged from WP #9093

[45] Fix | Delete

die('XML-RPC server accepts POST requests only.');

[46] Fix | Delete

}

[47] Fix | Delete

[48] Fix | Delete

$data = file_get_contents('php://input');

[49] Fix | Delete

}

[50] Fix | Delete

$this->message = new IXR_Message($data);

[51] Fix | Delete

if (!$this->message->parse()) {

[52] Fix | Delete

$this->error(-32700, 'parse error. not well formed');

[53] Fix | Delete

}

[54] Fix | Delete

if ($this->message->messageType != 'methodCall') {

[55] Fix | Delete

$this->error(-32600, 'server error. invalid xml-rpc. not conforming to spec. Request must be a methodCall');

[56] Fix | Delete

}

[57] Fix | Delete

$result = $this->call($this->message->methodName, $this->message->params);

[58] Fix | Delete

[59] Fix | Delete

// Is the result an error?

[60] Fix | Delete

if (is_a($result, 'IXR_Error')) {

[61] Fix | Delete

$this->error($result);

[62] Fix | Delete

}

[63] Fix | Delete

[64] Fix | Delete

// Encode the result

[65] Fix | Delete

$r = new IXR_Value($result);

[66] Fix | Delete

$resultxml = $r->getXml();

[67] Fix | Delete

[68] Fix | Delete

// Create the XML

[69] Fix | Delete

$xml = <<<EOD

[70] Fix | Delete

<methodResponse>

[71] Fix | Delete

<params>

[72] Fix | Delete

<param>

[73] Fix | Delete

<value>

[74] Fix | Delete

$resultxml

[75] Fix | Delete

</value>

[76] Fix | Delete

</param>

[77] Fix | Delete

</params>

[78] Fix | Delete

</methodResponse>

[79] Fix | Delete

[80] Fix | Delete

EOD;

[81] Fix | Delete

// Send it

[82] Fix | Delete

$this->output($xml);

[83] Fix | Delete

}

[84] Fix | Delete

[85] Fix | Delete

function call($methodname, $args)

[86] Fix | Delete

{

[87] Fix | Delete

if (!$this->hasMethod($methodname)) {

[88] Fix | Delete

return new IXR_Error(-32601, 'server error. requested method '.$methodname.' does not exist.');

[89] Fix | Delete

}

[90] Fix | Delete

$method = $this->callbacks[$methodname];

[91] Fix | Delete

[92] Fix | Delete

// Perform the callback and send the response

[93] Fix | Delete

if (count($args) == 1) {

[94] Fix | Delete

// If only one parameter just send that instead of the whole array

[95] Fix | Delete

$args = $args[0];

[96] Fix | Delete

}

[97] Fix | Delete

[98] Fix | Delete

// Are we dealing with a function or a method?

[99] Fix | Delete

if (is_string($method) && substr($method, 0, 5) == 'this:') {

[100] Fix | Delete

// It's a class method - check it exists

[101] Fix | Delete

$method = substr($method, 5);

[102] Fix | Delete

if (!method_exists($this, $method)) {

[103] Fix | Delete

return new IXR_Error(-32601, 'server error. requested class method "'.$method.'" does not exist.');

[104] Fix | Delete

}

[105] Fix | Delete

[106] Fix | Delete

//Call the method

[107] Fix | Delete

$result = $this->$method($args);

[108] Fix | Delete

} else {

[109] Fix | Delete

// It's a function - does it exist?

[110] Fix | Delete

if (is_array($method)) {

[111] Fix | Delete

if (!is_callable(array($method[0], $method[1]))) {

[112] Fix | Delete

return new IXR_Error(-32601, 'server error. requested object method "'.$method[1].'" does not exist.');

[113] Fix | Delete

}

[114] Fix | Delete

} else if (!function_exists($method)) {

[115] Fix | Delete

return new IXR_Error(-32601, 'server error. requested function "'.$method.'" does not exist.');

[116] Fix | Delete

}

[117] Fix | Delete

[118] Fix | Delete

// Call the function

[119] Fix | Delete

$result = call_user_func($method, $args);

[120] Fix | Delete

}

[121] Fix | Delete

return $result;

[122] Fix | Delete

}

[123] Fix | Delete

[124] Fix | Delete

function error($error, $message = false)

[125] Fix | Delete

{

[126] Fix | Delete

// Accepts either an error object or an error code and message

[127] Fix | Delete

if ($message && !is_object($error)) {

[128] Fix | Delete

$error = new IXR_Error($error, $message);

[129] Fix | Delete

}

[130] Fix | Delete

[131] Fix | Delete

$this->output($error->getXml());

[132] Fix | Delete

}

[133] Fix | Delete

[134] Fix | Delete

function output($xml)

[135] Fix | Delete

{

[136] Fix | Delete

$charset = function_exists('get_option') ? get_option('blog_charset') : '';

[137] Fix | Delete

if ($charset)

[138] Fix | Delete

$xml = '<?xml version="1.0" encoding="'.$charset.'"?>'."\n".$xml;

[139] Fix | Delete

else

[140] Fix | Delete

$xml = '<?xml version="1.0"?>'."\n".$xml;

[141] Fix | Delete

$length = strlen($xml);

[142] Fix | Delete

header('Connection: close');

[143] Fix | Delete

if ($charset)

[144] Fix | Delete

header('Content-Type: text/xml; charset='.$charset);

[145] Fix | Delete

else

[146] Fix | Delete

header('Content-Type: text/xml');

[147] Fix | Delete

header('Date: '.gmdate('r'));

[148] Fix | Delete

echo $xml;

[149] Fix | Delete

exit;

[150] Fix | Delete

}

[151] Fix | Delete

[152] Fix | Delete

function hasMethod($method)

[153] Fix | Delete

{

[154] Fix | Delete

return in_array($method, array_keys($this->callbacks));

[155] Fix | Delete

}

[156] Fix | Delete

[157] Fix | Delete

function setCapabilities()

[158] Fix | Delete

{

[159] Fix | Delete

// Initialises capabilities array

[160] Fix | Delete

$this->capabilities = array(

[161] Fix | Delete

'xmlrpc' => array(

[162] Fix | Delete

'specUrl' => 'http://www.xmlrpc.com/spec',

[163] Fix | Delete

'specVersion' => 1

[164] Fix | Delete

),

[165] Fix | Delete

'faults_interop' => array(

[166] Fix | Delete

'specUrl' => 'http://xmlrpc-epi.sourceforge.net/specs/rfc.fault_codes.php',

[167] Fix | Delete

'specVersion' => 20010516

[168] Fix | Delete

),

[169] Fix | Delete

'system.multicall' => array(

[170] Fix | Delete

'specUrl' => 'http://www.xmlrpc.com/discuss/msgReader$1208',

[171] Fix | Delete

'specVersion' => 1

[172] Fix | Delete

),

[173] Fix | Delete

);

[174] Fix | Delete

}

[175] Fix | Delete

[176] Fix | Delete

function getCapabilities($args)

[177] Fix | Delete

{

[178] Fix | Delete

return $this->capabilities;

[179] Fix | Delete

}

[180] Fix | Delete

[181] Fix | Delete

function setCallbacks()

[182] Fix | Delete

{

[183] Fix | Delete

$this->callbacks['system.getCapabilities'] = 'this:getCapabilities';

[184] Fix | Delete

$this->callbacks['system.listMethods'] = 'this:listMethods';

[185] Fix | Delete

$this->callbacks['system.multicall'] = 'this:multiCall';

[186] Fix | Delete

}

[187] Fix | Delete

[188] Fix | Delete

function listMethods($args)

[189] Fix | Delete

{

[190] Fix | Delete

// Returns a list of methods - uses array_reverse to ensure user defined

[191] Fix | Delete

// methods are listed before server defined methods

[192] Fix | Delete

return array_reverse(array_keys($this->callbacks));

[193] Fix | Delete

}

[194] Fix | Delete

[195] Fix | Delete

function multiCall($methodcalls)

[196] Fix | Delete

{

[197] Fix | Delete

// See http://www.xmlrpc.com/discuss/msgReader$1208

[198] Fix | Delete

$return = array();

[199] Fix | Delete

foreach ($methodcalls as $call) {

[200] Fix | Delete

$method = $call['methodName'];

[201] Fix | Delete

$params = $call['params'];

[202] Fix | Delete

if ($method == 'system.multicall') {

[203] Fix | Delete

$result = new IXR_Error(-32600, 'Recursive calls to system.multicall are forbidden');

[204] Fix | Delete

} else {

[205] Fix | Delete

$result = $this->call($method, $params);

[206] Fix | Delete

}

[207] Fix | Delete

if (is_a($result, 'IXR_Error')) {

[208] Fix | Delete

$return[] = array(

[209] Fix | Delete

'faultCode' => $result->code,

[210] Fix | Delete

'faultString' => $result->message

[211] Fix | Delete

);

[212] Fix | Delete

} else {

[213] Fix | Delete

$return[] = array($result);

[214] Fix | Delete

}

[215] Fix | Delete

}

[216] Fix | Delete

return $return;

[217] Fix | Delete

}

[218] Fix | Delete

}

[219] Fix | Delete

[220] Fix | Delete