| Server IP : 167.235.224.122 / Your IP : 216.73.216.110 Web Server : Apache/2.4.58 (Ubuntu) System : Linux newplayground 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:33:11 UTC 2026 aarch64 User : deploy ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/html/limesurvey/application/core/ |
Upload File : |
<?php
if (!defined('BASEPATH')) {
exit('No direct script access allowed');
}
/*
* LimeSurvey
* Copyright (C) 2007-2026 The LimeSurvey Project Team
* All rights reserved.
* License: GNU/GPL License v2 or later, see LICENSE.php
* LimeSurvey is free software. This version may have been modified pursuant
* to the GNU General Public License, and as distributed it includes or
* is derivative of works licensed under the GNU General Public License or
* other free or open source software licenses.
* See COPYRIGHT.php for copyright notices and details.
*
*/
/**
* Validator class for Short URLs (Survey Aliases).
* Compares the alias against basic route rules and existing controllers, trying
* to avoid collisions.
*/
class LSYii_ShortUrlValidator extends CValidator
{
protected $urlManager = null;
public function __construct($urlManager = null)
{
if (!isset($urlManager)) {
$urlManager = Yii::app()->getUrlManager();
}
$this->urlManager = $urlManager;
}
protected function validateAttribute($object, $attribute)
{
if (empty($object->$attribute)) {
return;
}
if (
$this->matchesReservedPath($object->$attribute)
|| $this->matchesExistingRoute($object->$attribute)
|| $this->matchesExistingController($object->$attribute)
) {
$this->addError($object, $attribute, gT('The survey alias matches an existing URL and cannot be used.'));
}
}
/**
* Checks whether a specified route matches a controller
* @param string $route
* @param CModule|null $owner
* @return boolean
*/
protected function matchesExistingController($route, $owner = null)
{
if ($owner === null) {
$owner = Yii::app();
$defaultController = 'surveys';
$controllerPath = Yii::app()->getBasePath() . DIRECTORY_SEPARATOR . 'controllers';
} else {
$defaultController = $owner->defaultController;
$controllerPath = $owner->getControllerPath();
}
if ((array)$route === $route || ($route = trim($route, '/')) === '') {
$route = $defaultController;
}
$caseSensitive = Yii::app()->getUrlManager()->caseSensitive;
$route .= '/';
$controllerID = '';
while (($pos=strpos($route, '/')) !== false) {
$id = substr($route, 0, $pos);
if (!preg_match('/^\w+$/', $id)) {
return null;
}
if (!$caseSensitive) {
$id = strtolower($id);
}
$route = (string)substr($route, $pos+1);
if (!isset($basePath)) { // first segment
if (
($module = $owner->getModule($id)) !== null
&& is_a($module, "CWebModule")
) {
return $this->isRouteValid($route, $module);
}
$basePath = $controllerPath;
$controllerID = '';
} else {
$controllerID .= '/';
}
$className = ucfirst($id) . 'Controller';
$classFile = $basePath . DIRECTORY_SEPARATOR . $className . '.php';
if (isset($owner->controllerNamespace)) {
$className = $owner->controllerNamespace . '\\' . str_replace('/', '\\', $controllerID) . $className;
}
if (is_file($classFile)) {
if (!class_exists($className, false)) {
require_once($classFile);
}
if (class_exists($className, false) && is_subclass_of($className, 'CController')) {
$id[0] = strtolower($id[0]);
return true;
}
return false;
}
$controllerID .= $id;
$basePath .= DIRECTORY_SEPARATOR . $id;
}
}
/**
* Checks whether a specified alias matches any of the configured routes.
* @param string $alias
* @return boolean
*/
protected function matchesExistingRoute($alias)
{
// Since survey aliases can not contain slashes, we only care about the first part of route patterns.
$patterns = array_keys($this->urlManager->rules);
foreach ($patterns as $pattern) {
// We only check against fixed routes (we can't handle routes like '<_controller:\w+>/<_action:\w+>' here)
if (strpos($pattern, "<") === 0) {
continue;
}
$firstPart = explode("/", $pattern)[0];
if ($firstPart == $alias) {
return true;
}
}
}
/**
* Checks whether a specified alias matches any of the reserved words/paths.
* @param string $alias
* @return boolean
*/
protected function matchesReservedPath($alias)
{
$reserved = [
'assets',
'plugins',
'tmp',
'upload'
];
return in_array($alias, $reserved);
}
}