<?php /** * This file is part of the CodeIgniter 4 framework. * * (c) CodeIgniter Foundation <admin@codeigniter.com> * * For the full copyright and license information, please view the LICENSE * file that was distributed with this source code. */ namespace CodeIgniter\Debug; use CodeIgniter\API\ResponseTrait; use CodeIgniter\Exceptions\PageNotFoundException; use CodeIgniter\HTTP\IncomingRequest; use CodeIgniter\HTTP\Response; use Config\Exceptions as ExceptionsConfig; use Config\Paths; use function error_reporting; use ErrorException; use Throwable; /** * Exceptions manager */ class Exceptions { use ResponseTrait; /** * Nesting level of the output buffering mechanism * * @var integer */ public $ob_level; /** * The path to the directory containing the * cli and html error view directories. * * @var string */ protected $viewPath; /** * Config for debug exceptions. * * @var ExceptionsConfig */ protected $config; /** * The incoming request. * * @var IncomingRequest */ protected $request; /** * The outgoing response. * * @var Response */ protected $response; //-------------------------------------------------------------------- /** * Constructor. * * @param ExceptionsConfig $config * @param IncomingRequest $request * @param Response $response */ public function __construct(ExceptionsConfig $config, IncomingRequest $request, Response $response) { $this->ob_level = ob_get_level(); $this->viewPath = rtrim($config->errorViewPath, '\\/ ') . DIRECTORY_SEPARATOR; $this->config = $config; $this->request = $request; $this->response = $response; } //-------------------------------------------------------------------- /** * Responsible for registering the error, exception and shutdown * handling of our application. */ public function initialize() { //Set the Exception Handler set_exception_handler([$this, 'exceptionHandler']); // Set the Error Handler set_error_handler([$this, 'errorHandler']); // Set the handler for shutdown to catch Parse errors // Do we need this in PHP7? register_shutdown_function([$this, 'shutdownHandler']); } //-------------------------------------------------------------------- /** * Catches any uncaught errors and exceptions, including most Fatal errors * (Yay PHP7!). Will log the error, display it if display_errors is on, * and fire an event that allows custom actions to be taken at this point. * * @param Throwable $exception * * @codeCoverageIgnore */ public function exceptionHandler(Throwable $exception) { [ $statusCode, $exitCode, ] = $this->determineCodes($exception); // Log it if ($this->config->log === true && ! in_array($statusCode, $this->config->ignoreCodes, true)) { log_message('critical', $exception->getMessage() . "\n{trace}", [ 'trace' => $exception->getTraceAsString(), ]); } if (! is_cli()) { $this->response->setStatusCode($statusCode); $header = "HTTP/{$this->request->getProtocolVersion()} {$this->response->getStatusCode()} {$this->response->getReason()}"; header($header, true, $statusCode); if (strpos($this->request->getHeaderLine('accept'), 'text/html') === false) { $this->respond(ENVIRONMENT === 'development' ? $this->collectVars($exception, $statusCode) : '', $statusCode)->send(); exit($exitCode); } } $this->render($exception, $statusCode); exit($exitCode); } //-------------------------------------------------------------------- /** * Even in PHP7, some errors make it through to the errorHandler, so * convert these to Exceptions and let the exception handler log it and * display it. * * This seems to be primarily when a user triggers it with trigger_error(). * * @param integer $severity * @param string $message * @param string|null $file * @param integer|null $line * * @throws ErrorException */ public function errorHandler(int $severity, string $message, string $file = null, int $line = null) { if (! (error_reporting() & $severity)) { return; } // Convert it to an exception and pass it along. throw new ErrorException($message, 0, $severity, $file, $line); } //-------------------------------------------------------------------- /** * Checks to see if any errors have happened during shutdown that * need to be caught and handle them. */ public function shutdownHandler() { $error = error_get_last(); // If we've got an error that hasn't been displayed, then convert // it to an Exception and use the Exception handler to display it // to the user. // Fatal Error? if (! is_null($error) && in_array($error['type'], [E_ERROR, E_CORE_ERROR, E_COMPILE_ERROR, E_PARSE], true)) { $this->exceptionHandler(new ErrorException($error['message'], $error['type'], 0, $error['file'], $error['line'])); } } //-------------------------------------------------------------------- /** * Determines the view to display based on the exception thrown, * whether an HTTP or CLI request, etc. * * @param Throwable $exception * @param string $templatePath * * @return string The path and filename of the view file to use */ protected function determineView(Throwable $exception, string $templatePath): string { // Production environments should have a custom exception file. $view = 'production.php'; $templatePath = rtrim($templatePath, '\\/ ') . DIRECTORY_SEPARATOR; if (str_ireplace(['off', 'none', 'no', 'false', 'null'], '', ini_get('display_errors'))) { $view = 'error_exception.php'; } // 404 Errors if ($exception instanceof PageNotFoundException) { return 'error_404.php'; } // Allow for custom views based upon the status code if (is_file($templatePath . 'error_' . $exception->getCode() . '.php')) { return 'error_' . $exception->getCode() . '.php'; } return $view; } //-------------------------------------------------------------------- /** * Given an exception and status code will display the error to the client. * * @param Throwable $exception * @param integer $statusCode */ protected function render(Throwable $exception, int $statusCode) { // Determine possible directories of error views $path = $this->viewPath; $altPath = rtrim((new Paths())->viewDirectory, '\\/ ') . DIRECTORY_SEPARATOR . 'errors' . DIRECTORY_SEPARATOR; $path .= (is_cli() ? 'cli' : 'html') . DIRECTORY_SEPARATOR; $altPath .= (is_cli() ? 'cli' : 'html') . DIRECTORY_SEPARATOR; // Determine the views $view = $this->determineView($exception, $path); $altView = $this->determineView($exception, $altPath); // Check if the view exists if (is_file($path . $view)) { $viewFile = $path . $view; } elseif (is_file($altPath . $altView)) { $viewFile = $altPath . $altView; } // Prepare the vars $vars = $this->collectVars($exception, $statusCode); extract($vars); // Render it if (ob_get_level() > $this->ob_level + 1) { ob_end_clean(); } ob_start(); include $viewFile; // @phpstan-ignore-line $buffer = ob_get_contents(); ob_end_clean(); echo $buffer; } //-------------------------------------------------------------------- /** * Gathers the variables that will be made available to the view. * * @param Throwable $exception * @param integer $statusCode * * @return array */ protected function collectVars(Throwable $exception, int $statusCode): array { $trace = $exception->getTrace(); if (! empty($this->config->sensitiveDataInTrace)) { $this->maskSensitiveData($trace, $this->config->sensitiveDataInTrace); } return [ 'title' => get_class($exception), 'type' => get_class($exception), 'code' => $statusCode, 'message' => $exception->getMessage() ?? '(null)', 'file' => $exception->getFile(), 'line' => $exception->getLine(), 'trace' => $trace, ]; } /** * Mask sensitive data in the trace. * * @param array|object $trace * @param array $keysToMask * @param string $path */ protected function maskSensitiveData(&$trace, array $keysToMask, string $path = '') { foreach ($keysToMask as $keyToMask) { $explode = explode('/', $keyToMask); $index = end($explode); if (strpos(strrev($path . '/' . $index), strrev($keyToMask)) === 0) { if (is_array($trace) && array_key_exists($index, $trace)) { $trace[$index] = '******************'; } elseif (is_object($trace) && property_exists($trace, $index) && isset($trace->$index)) { $trace->$index = '******************'; } } } if (! is_iterable($trace) && is_object($trace)) { $trace = get_object_vars($trace); } if (is_iterable($trace)) { foreach ($trace as $pathKey => $subarray) { $this->maskSensitiveData($subarray, $keysToMask, $path . '/' . $pathKey); } } } /** * Determines the HTTP status code and the exit status code for this request. * * @param Throwable $exception * * @return array */ protected function determineCodes(Throwable $exception): array { $statusCode = abs($exception->getCode()); if ($statusCode < 100 || $statusCode > 599) { $exitStatus = $statusCode + EXIT__AUTO_MIN; // 9 is EXIT__AUTO_MIN if ($exitStatus > EXIT__AUTO_MAX) // 125 is EXIT__AUTO_MAX { $exitStatus = EXIT_ERROR; // EXIT_ERROR } $statusCode = 500; } else { $exitStatus = 1; // EXIT_ERROR } return [ $statusCode ?: 500, $exitStatus, ]; } //-------------------------------------------------------------------- //-------------------------------------------------------------------- // Display Methods //-------------------------------------------------------------------- /** * Clean Path * * This makes nicer looking paths for the error output. * * @param string $file * * @return string */ public static function cleanPath(string $file): string { switch (true) { case strpos($file, APPPATH) === 0: $file = 'APPPATH' . DIRECTORY_SEPARATOR . substr($file, strlen(APPPATH)); break; case strpos($file, SYSTEMPATH) === 0: $file = 'SYSTEMPATH' . DIRECTORY_SEPARATOR . substr($file, strlen(SYSTEMPATH)); break; case strpos($file, FCPATH) === 0: $file = 'FCPATH' . DIRECTORY_SEPARATOR . substr($file, strlen(FCPATH)); break; case defined('VENDORPATH') && strpos($file, VENDORPATH) === 0: $file = 'VENDORPATH' . DIRECTORY_SEPARATOR . substr($file, strlen(VENDORPATH)); break; } return $file; } //-------------------------------------------------------------------- /** * Describes memory usage in real-world units. Intended for use * with memory_get_usage, etc. * * @param integer $bytes * * @return string */ public static function describeMemory(int $bytes): string { if ($bytes < 1024) { return $bytes . 'B'; } if ($bytes < 1048576) { return round($bytes / 1024, 2) . 'KB'; } return round($bytes / 1048576, 2) . 'MB'; } //-------------------------------------------------------------------- /** * Creates a syntax-highlighted version of a PHP file. * * @param string $file * @param integer $lineNumber * @param integer $lines * * @return boolean|string */ public static function highlightFile(string $file, int $lineNumber, int $lines = 15) { if (empty($file) || ! is_readable($file)) { return false; } // Set our highlight colors: if (function_exists('ini_set')) { ini_set('highlight.comment', '#767a7e; font-style: italic'); ini_set('highlight.default', '#c7c7c7'); ini_set('highlight.html', '#06B'); ini_set('highlight.keyword', '#f1ce61;'); ini_set('highlight.string', '#869d6a'); } try { $source = file_get_contents($file); } catch (Throwable $e) { return false; } $source = str_replace(["\r\n", "\r"], "\n", $source); $source = explode("\n", highlight_string($source, true)); $source = str_replace('<br />', "\n", $source[1]); $source = explode("\n", str_replace("\r\n", "\n", $source)); // Get just the part to show $start = $lineNumber - (int) round($lines / 2); $start = $start < 0 ? 0 : $start; // Get just the lines we need to display, while keeping line numbers... $source = array_splice($source, $start, $lines, true); // @phpstan-ignore-line // Used to format the line number in the source $format = '% ' . strlen(sprintf('%s', $start + $lines)) . 'd'; $out = ''; // Because the highlighting may have an uneven number // of open and close span tags on one line, we need // to ensure we can close them all to get the lines // showing correctly. $spans = 1; foreach ($source as $n => $row) { $spans += substr_count($row, '<span') - substr_count($row, '</span'); $row = str_replace(["\r", "\n"], ['', ''], $row); if (($n + $start + 1) === $lineNumber) { preg_match_all('#<[^>]+>#', $row, $tags); $out .= sprintf("<span class='line highlight'><span class='number'>{$format}</span> %s\n</span>%s", $n + $start + 1, strip_tags($row), implode('', $tags[0]) ); } else { $out .= sprintf('<span class="line"><span class="number">' . $format . '</span> %s', $n + $start + 1, $row) . "\n"; } } if ($spans > 0) { $out .= str_repeat('</span>', $spans); } return '<pre><code>' . $out . '</code></pre>'; } //-------------------------------------------------------------------- }