forkbb/app/Models/User/Current.php

<?php
/**
 * This file is part of the ForkBB <https://github.com/forkbb>.
 *
 * @copyright (c) Visman <mio.visman@yandex.ru, https://github.com/MioVisman>
 * @license   The MIT License (MIT)
 */

declare(strict_types=1);

namespace ForkBB\Models\User;

use ForkBB\Models\Action;
use ForkBB\Models\User\User;
use RuntimeException;

class Current extends Action
{
    /**
     * Получает пользователя на основе куки авторизации
     * Обновляет куку аутентификации
     */
    public function current(): User
    {
        $ip     = $this->getIp();
        $cookie = $this->c->Cookie;
        $user   = $this->load((int) $cookie->uId, $ip);

        if (! $user->isGuest) {
            if (! $cookie->verifyUser($user)) {
                $user = $this->load(0, $ip);
            } elseif ($user->ip_check_type > 0) {
                $hexIp = \bin2hex(\inet_pton($ip));

                if (false === \strpos("|{$user->login_ip_cache}|", "|{$hexIp}|")) {
                    $user = $this->load(0, $ip);
                }
            }
        }

        $user->__ip        = $ip;
        $user->__userAgent = $this->getUserAgent();

        $cookie->setUser($user);

        if ($user->isGuest) {
            $user->__isBot    = $this->isBot($user->userAgent);
            $user->__timezone = $this->c->config->o_default_timezone;
            $user->__dst      = $this->c->config->b_default_dst;
            $user->__language = $this->getLangFromHTTP();
        } else {
            $user->__isBot = false;
            // Special case: We've timed out, but no other user has browsed the forums since we timed out
            if (
                $user->logged > 0
                && $user->logged < \time() - $this->c->config->i_timeout_visit
            ) {
                $this->manager->updateLastVisit($user);
            }

            $this->manager->set($user->id, $user);
        }

        return $user;
    }

    /**
     * Загружает данные из базы в модель пользователя
     */
    protected function load(int $id, string $ip): User
    {
        $data = null;

        if ($id > 0) {
            $vars = [
                ':id' => $id,
            ];
            $query = 'SELECT u.*, g.*, o.logged
                FROM ::users AS u
                INNER JOIN ::groups AS g ON u.group_id=g.g_id
                LEFT JOIN ::online AS o ON o.user_id=u.id
                WHERE u.id=?i:id';

            $data = $this->c->DB->query($query, $vars)->fetch();
        }

        if (empty($data['id'])) {
            $vars = [
                ':ip' => $ip,
            ];
            $query = 'SELECT o.logged, o.last_post, o.last_search
                FROM ::online AS o
                WHERE o.user_id=0 AND o.ident=?s:ip';

            $data = $this->c->DB->query($query, $vars)->fetch();

            return $this->manager->guest($data ?: []);
        } else {
            return $this->manager->create($data);
        }
    }

    /**
     * Возврат ip пользователя
     */
    protected function getIp(): string
    {
        return \filter_var($_SERVER['REMOTE_ADDR'], \FILTER_VALIDATE_IP) ?: '0.0.0.0';
    }

    /**
     * Возврат юзер агента браузера пользователя
     */
    protected function getUserAgent(): string
    {
        return \trim($this->c->Secury->replInvalidChars($_SERVER['HTTP_USER_AGENT'] ?? ''));
    }

    protected $defRegex = '%(?:^|[ ()])\b([\w .-]*{}[\w/.!-]*)%i';
    protected $botSearchList = [
        'bot'        => ['%(?<!cu)bot(?!tle)%'],
        'crawl'      => [''],
        'spider'     => ['%spider(?![\w ]*build/)%'],
        'google'     => ['%google(?:\w| |;|\-(?!tr))%'],
        'wordpress'  => ['', '%(wordpress)%i'],
        'compatible' => ['%compatible(?!;\ msie)%', '%compatible[;) ]+([\w ./!-]+)%i']
    ];

    /**
     * Пытается по юзерагентуопределить робота
     * Если робот, то возвращает вычисленное имя
     */
    protected function isBot(string $agent) /* : string|false */
    {
        if ('' == $agent) {
            return false;
        }

        $agentL = \strtolower($agent);
        $status = 0;

        if (
            false !== ($pos = \strpos($agentL, 'http:'))
            || false !== ($pos = \strpos($agentL, 'https:'))
            || false !== ($pos = \strpos($agentL, 'www.'))
        ) {
            $status = 1;
            $agent  = \substr($agent, 0, $pos);
            $agentL = \strtolower($agent);
        }

        foreach ($this->botSearchList as $needle => $regex) {
            if (
                false !== \strpos($agentL, $needle)
                && (
                    '' == $regex[0]
                    || \preg_match($regex[0], $agentL)
                )
                && \preg_match($regex[1] ?? \str_replace('{}', $needle, $this->defRegex), $agent, $match)
            ) {
                $status = 2;
                $agent  = $match[1];
                break;
            }
        }

        if (
            0 === $status
            && 0 !== \substr_compare('Mozilla/', $agent, 0, 8)
            && 0 !== \substr_compare('Opera/', $agent, 0, 6)
        ) {
            $status = 1;
        }

        if (0 === $status) {
            return false;
        }

        $reg = [
            '%[^\w/.-]+%',
            '%(?:_| |-|\b)bot(?:_| |-|\b)%i',
            '%(?<=^|\s)[^a-zA-Z\s]{1,2}(?:\s|$)%',
        ];
        $rep = [
            ' ',
            '',
            '',
        ];

        $agent = \trim(\preg_replace($reg, $rep, $agent));

        if (
            empty($agent)
            || isset($agent[28])
        ) {
            return 'Unknown';
        } else {
            return $agent;
        }
    }

    /**
     * Возвращает имеющийся в наличии язык из HTTP_ACCEPT_LANGUAGE
     * или язык по умолчанию
     */
    protected function getLangFromHTTP(): string
    {
        if (! empty($_SERVER['HTTP_ACCEPT_LANGUAGE'])) {
            $langs = $this->c->Func->getLangs();
            $main  = [];
            foreach ($this->c->Func->langParse($_SERVER['HTTP_ACCEPT_LANGUAGE']) as $entry) {
                $arr = \explode('-', $entry, 2);
                if (isset($arr[1])) {
                    $entry  = $arr[0] . '_' . \strtoupper($arr[1]);
                    $main[] = $arr[0];
                }
                if (isset($langs[$entry])) {
                    return $langs[$entry];
                }
            }
            if (! empty($main)) {
                foreach ($main as $entry) {
                    if (isset($langs[$entry])) {
                        return $langs[$entry];
                    }
                }
            }
        }

        return $this->c->config->o_default_lang;
    }
}