1<?php 2 3/** 4 * webtrees: online genealogy 5 * Copyright (C) 2019 webtrees development team 6 * This program is free software: you can redistribute it and/or modify 7 * it under the terms of the GNU General Public License as published by 8 * the Free Software Foundation, either version 3 of the License, or 9 * (at your option) any later version. 10 * This program is distributed in the hope that it will be useful, 11 * but WITHOUT ANY WARRANTY; without even the implied warranty of 12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 * GNU General Public License for more details. 14 * You should have received a copy of the GNU General Public License 15 * along with this program. If not, see <http://www.gnu.org/licenses/>. 16 */ 17 18declare(strict_types=1); 19 20namespace Fisharebest\Webtrees\Http\Middleware; 21 22use Fisharebest\Webtrees\Auth; 23use Fisharebest\Webtrees\Carbon; 24use Fisharebest\Webtrees\Session; 25use Fisharebest\Webtrees\User; 26use Psr\Http\Message\ResponseInterface; 27use Psr\Http\Message\ServerRequestInterface; 28use Psr\Http\Server\MiddlewareInterface; 29use Psr\Http\Server\RequestHandlerInterface; 30 31use function session_destroy; 32use function session_status; 33 34use const PHP_SESSION_ACTIVE; 35 36/** 37 * Middleware to activate sessions. 38 */ 39class UseSession implements MiddlewareInterface 40{ 41 /** 42 * @param ServerRequestInterface $request 43 * @param RequestHandlerInterface $handler 44 * 45 * @return ResponseInterface 46 */ 47 public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface 48 { 49 // Some sites (e.g. Wordpress/NinjaFirewall) use the PHP auto_prepend_file 50 // setting to run their own startup code - which may start a session. 51 if (session_status() === PHP_SESSION_ACTIVE) { 52 session_destroy(); 53 } 54 55 // Sessions 56 Session::start($request); 57 58 $user = Auth::user(); 59 60 // Update the last-login time no more than once a minute. 61 $next_session_update = Carbon::createFromTimestamp((int) Session::get('session_time_updates'))->addMinute(); 62 if ($next_session_update < Carbon::now()) { 63 $timestamp_now = Carbon::now()->unix(); 64 65 if (Session::get('masquerade') === null) { 66 $user->setPreference(User::PREF_TIMESTAMP_ACTIVE, (string) $timestamp_now); 67 } 68 Session::put('session_time_updates', $timestamp_now); 69 } 70 71 $request = $request->withAttribute('user', $user); 72 73 return $handler->handle($request); 74 } 75} 76