1<?php 2 3/** 4 * webtrees: online genealogy 5 * Copyright (C) 2019 webtrees development team 6 * This program is free software: you can redistribute it and/or modify 7 * it under the terms of the GNU General Public License as published by 8 * the Free Software Foundation, either version 3 of the License, or 9 * (at your option) any later version. 10 * This program is distributed in the hope that it will be useful, 11 * but WITHOUT ANY WARRANTY; without even the implied warranty of 12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 * GNU General Public License for more details. 14 * You should have received a copy of the GNU General Public License 15 * along with this program. If not, see <http://www.gnu.org/licenses/>. 16 */ 17 18declare(strict_types=1); 19 20namespace Fisharebest\Webtrees\Http\Middleware; 21 22use Fisharebest\Webtrees\Auth; 23use Fisharebest\Webtrees\Carbon; 24use Fisharebest\Webtrees\Session; 25use Fisharebest\Webtrees\User; 26use Psr\Http\Message\ResponseInterface; 27use Psr\Http\Message\ServerRequestInterface; 28use Psr\Http\Server\MiddlewareInterface; 29use Psr\Http\Server\RequestHandlerInterface; 30 31use function session_destroy; 32use function session_status; 33use function session_write_close; 34 35use const PHP_SESSION_ACTIVE; 36 37/** 38 * Middleware to activate sessions. 39 */ 40class UseSession implements MiddlewareInterface 41{ 42 /** 43 * @param ServerRequestInterface $request 44 * @param RequestHandlerInterface $handler 45 * 46 * @return ResponseInterface 47 */ 48 public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface 49 { 50 // Some sites (e.g. Wordpress/NinjaFirewall) use the PHP auto_prepend_file 51 // setting to run their own startup code - which may start a session. 52 if (session_status() === PHP_SESSION_ACTIVE) { 53 session_destroy(); 54 } 55 56 // Sessions 57 Session::start($request); 58 59 $user = Auth::user(); 60 61 // Update the last-login time no more than once a minute. 62 $next_session_update = Carbon::createFromTimestamp((int) Session::get('session_time_updates'))->addMinute(); 63 if ($next_session_update < Carbon::now()) { 64 $timestamp_now = Carbon::now()->unix(); 65 66 if (Session::get('masquerade') === null) { 67 $user->setPreference(User::PREF_TIMESTAMP_ACTIVE, (string) $timestamp_now); 68 } 69 Session::put('session_time_updates', $timestamp_now); 70 } 71 72 $request = $request->withAttribute('user', $user); 73 74 $response = $handler->handle($request); 75 76 if (session_status() === PHP_SESSION_ACTIVE) { 77 session_write_close(); 78 } 79 80 return $response; 81 } 82} 83