custom/plugins/SwagPlatformSecurity/src/SwagPlatformSecurity.php line 19

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Swag\Security;
  5. use Shopware\Core\Framework\Plugin;
  6. use Shopware\Core\Framework\Plugin\Context\InstallContext;
  7. use Shopware\Core\Framework\Plugin\Context\UpdateContext;
  8. use Shopware\Core\Kernel;
  9. use Swag\Security\Components\RemoveDisabledServicesCompilerPass;
  10. use Swag\Security\Components\State;
  11. use Swag\Security\Components\UpdateHtaccess;
  12. use Symfony\Component\Config\FileLocator;
  13. use Symfony\Component\DependencyInjection\ContainerBuilder;
  14. use Symfony\Component\DependencyInjection\Loader\PhpFileLoader;
  16. require_once __DIR__ . '/Fixes/NEXT15858/init.php';
  17. require_once __DIR__ . '/Fixes/NEXT21077/init.php';
  19. class SwagPlatformSecurity extends Plugin
  20. {
  21.     public const PLUGIN_NAME = 'SwagPlatformSecurity';
  23.     public function build(ContainerBuilder $container): void
  24.     {
  25.         $loader = new PhpFileLoader($container, new FileLocator([__DIR__ . '/Resources/config']));
  26.         $loader->load('services.php');
  28.         $this->fetchPluginConfig($container);
  29.         $container->addCompilerPass(new RemoveDisabledServicesCompilerPass());
  30.     }
  32.     public function boot(): void
  33.     {
  34.         parent::boot();
  36.         foreach ($this->container->getParameter('SwagPlatformSecurity.activeFixes') as $securityFix) {
  37.             $securityFix::boot($this->container);
  38.         }
  39.     }
  41.     public function install(InstallContext $installContext): void
  42.     {
  43.         $this->copyHtaccess();
  44.     }
  46.     public function update(UpdateContext $updateContext): void
  47.     {
  48.         $this->copyHtaccess();
  49.     }
  51.     private function fetchPluginConfig(ContainerBuilder $container): void
  52.     {
  53.         try {
  54.             $qb = Kernel::getConnection()->createQueryBuilder();
  56.             $config = $qb
  57.                 ->select(['ticket', 'active'])
  58.                 ->from('swag_security_config', 'config')
  59.                 ->execute()
  60.                 ->fetchAll(\PDO::FETCH_KEY_PAIR);
  62.         } catch (\Throwable $e) {
  63.             $config = [];
  64.         }
  66.         foreach ($config as &$item) {
  67.             $item = (bool) $item;
  68.         }
  69.         unset($item);
  71.         $shopwareVersion = $_SERVER['SHOPWARE_FAKE_VERSION'] ?? $container->getParameter('kernel.shopware_version');
  72.         $availableFixes = [];
  73.         $activeFixes = [];
  75.         foreach (State::KNOWN_ISSUES as $knownIssue) {
  76.             if (!$knownIssue::isValidForVersion($shopwareVersion)) {
  77.                 continue;
  78.             }
  80.             $availableFixes[] = $knownIssue;
  82.             if (array_key_exists($knownIssue::getTicket(), $config) && !$config[$knownIssue::getTicket()]) {
  83.                 continue;
  84.             }
  86.             $knownIssue::buildContainer($container);
  88.             $activeFixes[] = $knownIssue;
  89.         }
  91.         $container->setParameter('SwagPlatformSecurity.activeFixes', $activeFixes);
  92.         $container->setParameter('SwagPlatformSecurity.availableFixes', $availableFixes);
  93.     }
  95.     private function copyHtaccess(): void
  96.     {
  97.         $projectDirHtaccess = $this->container->getParameter('kernel.project_dir'). '/.htaccess';
  99.         copy(__DIR__ . '/../root_htaccess.dist', $projectDirHtaccess);
  101.         $knownFolders = [
  102.             $this->container->getParameter('kernel.project_dir'). '/bin',
  103.             $this->container->getParameter('kernel.project_dir'). '/config',
  104.             $this->container->getParameter('kernel.project_dir'). '/custom',
  105.             $this->container->getParameter('kernel.project_dir'). '/files',
  106.             $this->container->getParameter('kernel.project_dir'). '/src',
  107.             $this->container->getParameter('kernel.project_dir'). '/var',
  108.             $this->container->getParameter('kernel.project_dir'). '/vendor',
  109.         ];
  111.         foreach ($knownFolders as $knownFolder) {
  112.             if (file_exists($knownFolder)) {
  113.                 copy(__DIR__ . '/../block_directory_access_htaccess.dist', $knownFolder . '/.htaccess');
  114.             }
  115.         }
  117.         $shopwareVersion = $_SERVER['SHOPWARE_FAKE_VERSION'] ?? $this->container->getParameter('kernel.shopware_version');
  118.         $updateService = new UpdateHtaccess();
  120.         // Only update the .htaccess if we are on a older shopware version
  121.         if (version_compare($shopwareVersion, $updateService->getMaxVersion(), '<')) {
  122.             $publicHtaccess = $this->container->getParameter('kernel.project_dir'). '/public/.htaccess';
  123.             $updateService->updateHtaccess($publicHtaccess, __DIR__ . '/../current_public_htaccess.dist');
  124.         }
  125.     }
  126. }