lib/xmlrpcs.inc

   1 <?php\r
   2 // by Edd Dumbill (C) 1999-2002\r
   3 // <edd@usefulinc.com>\r
   4 // $Id: xmlrpcs.inc,v 1.71 2008/10/29 23:41:28 ggiunta Exp $\r
   5 \r
   6 // Copyright (c) 1999,2000,2002 Edd Dumbill.\r
   7 // All rights reserved.\r
   8 //\r
   9 // Redistribution and use in source and binary forms, with or without\r
  10 // modification, are permitted provided that the following conditions\r
  11 // are met:\r
  12 //\r
  13 //    * Redistributions of source code must retain the above copyright\r
  14 //      notice, this list of conditions and the following disclaimer.\r
  15 //\r
  16 //    * Redistributions in binary form must reproduce the above\r
  17 //      copyright notice, this list of conditions and the following\r
  18 //      disclaimer in the documentation and/or other materials provided\r
  19 //      with the distribution.\r
  20 //\r
  21 //    * Neither the name of the "XML-RPC for PHP" nor the names of its\r
  22 //      contributors may be used to endorse or promote products derived\r
  23 //      from this software without specific prior written permission.\r
  24 //\r
  25 // THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\r
  26 // "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\r
  27 // LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS\r
  28 // FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE\r
  29 // REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,\r
  30 // INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\r
  31 // (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\r
  32 // SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)\r
  33 // HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,\r
  34 // STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)\r
  35 // ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED\r
  36 // OF THE POSSIBILITY OF SUCH DAMAGE.\r
  37 \r
  38         // XML RPC Server class\r
  39         // requires: xmlrpc.inc\r
  40 \r
  41         $GLOBALS['xmlrpcs_capabilities'] = array(\r
  42                 // xmlrpc spec: always supported\r
  43                 'xmlrpc' => new xmlrpcval(array(\r
  44                         'specUrl' => new xmlrpcval('http://www.xmlrpc.com/spec', 'string'),\r
  45                         'specVersion' => new xmlrpcval(1, 'int')\r
  46                 ), 'struct'),\r
  47                 // if we support system.xxx functions, we always support multicall, too...\r
  48                 // Note that, as of 2006/09/17, the following URL does not respond anymore\r
  49                 'system.multicall' => new xmlrpcval(array(\r
  50                         'specUrl' => new xmlrpcval('http://www.xmlrpc.com/discuss/msgReader$1208', 'string'),\r
  51                         'specVersion' => new xmlrpcval(1, 'int')\r
  52                 ), 'struct'),\r
  53                 // introspection: version 2! we support 'mixed', too\r
  54                 'introspection' => new xmlrpcval(array(\r
  55                         'specUrl' => new xmlrpcval('http://phpxmlrpc.sourceforge.net/doc-2/ch10.html', 'string'),\r
  56                         'specVersion' => new xmlrpcval(2, 'int')\r
  57                 ), 'struct')\r
  58         );\r
  59 \r
  60         /* Functions that implement system.XXX methods of xmlrpc servers */\r
  61         $_xmlrpcs_getCapabilities_sig=array(array($GLOBALS['xmlrpcStruct']));\r
  62         $_xmlrpcs_getCapabilities_doc='This method lists all the capabilites that the XML-RPC server has: the (more or less standard) extensions to the xmlrpc spec that it adheres to';\r
  63         $_xmlrpcs_getCapabilities_sdoc=array(array('list of capabilities, described as structs with a version number and url for the spec'));\r
  64         function _xmlrpcs_getCapabilities($server, $m=null)\r
  65         {\r
  66                 $outAr = $GLOBALS['xmlrpcs_capabilities'];\r
  67                 // NIL extension\r
  68                 if ($GLOBALS['xmlrpc_null_extension']) {\r
  69                         $outAr['nil'] = new xmlrpcval(array(\r
  70                                 'specUrl' => new xmlrpcval('http://www.ontosys.com/xml-rpc/extensions.php', 'string'),\r
  71                                 'specVersion' => new xmlrpcval(1, 'int')\r
  72                         ), 'struct');\r
  73                 }\r
  74                 return new xmlrpcresp(new xmlrpcval($outAr, 'struct'));\r
  75         }\r
  76 \r
  77         // listMethods: signature was either a string, or nothing.\r
  78         // The useless string variant has been removed\r
  79         $_xmlrpcs_listMethods_sig=array(array($GLOBALS['xmlrpcArray']));\r
  80         $_xmlrpcs_listMethods_doc='This method lists all the methods that the XML-RPC server knows how to dispatch';\r
  81         $_xmlrpcs_listMethods_sdoc=array(array('list of method names'));\r
  82         function _xmlrpcs_listMethods($server, $m=null) // if called in plain php values mode, second param is missing\r
  83         {\r
  84 \r
  85                 $outAr=array();\r
  86                 foreach($server->dmap as $key => $val)\r
  87                 {\r
  88                         $outAr[]=new xmlrpcval($key, 'string');\r
  89                 }\r
  90                 if($server->allow_system_funcs)\r
  91                 {\r
  92                         foreach($GLOBALS['_xmlrpcs_dmap'] as $key => $val)\r
  93                         {\r
  94                                 $outAr[]=new xmlrpcval($key, 'string');\r
  95                         }\r
  96                 }\r
  97                 return new xmlrpcresp(new xmlrpcval($outAr, 'array'));\r
  98         }\r
  99 \r
 100         $_xmlrpcs_methodSignature_sig=array(array($GLOBALS['xmlrpcArray'], $GLOBALS['xmlrpcString']));\r
 101         $_xmlrpcs_methodSignature_doc='Returns an array of known signatures (an array of arrays) for the method name passed. If no signatures are known, returns a none-array (test for type != array to detect missing signature)';\r
 102         $_xmlrpcs_methodSignature_sdoc=array(array('list of known signatures, each sig being an array of xmlrpc type names', 'name of method to be described'));\r
 103         function _xmlrpcs_methodSignature($server, $m)\r
 104         {\r
 105                 // let accept as parameter both an xmlrpcval or string\r
 106                 if (is_object($m))\r
 107                 {\r
 108                         $methName=$m->getParam(0);\r
 109                         $methName=$methName->scalarval();\r
 110                 }\r
 111                 else\r
 112                 {\r
 113                         $methName=$m;\r
 114                 }\r
 115                 if(strpos($methName, "system.") === 0)\r
 116                 {\r
 117                         $dmap=$GLOBALS['_xmlrpcs_dmap']; $sysCall=1;\r
 118                 }\r
 119                 else\r
 120                 {\r
 121                         $dmap=$server->dmap; $sysCall=0;\r
 122                 }\r
 123                 if(isset($dmap[$methName]))\r
 124                 {\r
 125                         if(isset($dmap[$methName]['signature']))\r
 126                         {\r
 127                                 $sigs=array();\r
 128                                 foreach($dmap[$methName]['signature'] as $inSig)\r
 129                                 {\r
 130                                         $cursig=array();\r
 131                                         foreach($inSig as $sig)\r
 132                                         {\r
 133                                                 $cursig[]=new xmlrpcval($sig, 'string');\r
 134                                         }\r
 135                                         $sigs[]=new xmlrpcval($cursig, 'array');\r
 136                                 }\r
 137                                 $r=new xmlrpcresp(new xmlrpcval($sigs, 'array'));\r
 138                         }\r
 139                         else\r
 140                         {\r
 141                                 // NB: according to the official docs, we should be returning a\r
 142                                 // "none-array" here, which means not-an-array\r
 143                                 $r=new xmlrpcresp(new xmlrpcval('undef', 'string'));\r
 144                         }\r
 145                 }\r
 146                 else\r
 147                 {\r
 148                         $r=new xmlrpcresp(0,$GLOBALS['xmlrpcerr']['introspect_unknown'], $GLOBALS['xmlrpcstr']['introspect_unknown']);\r
 149                 }\r
 150                 return $r;\r
 151         }\r
 152 \r
 153         $_xmlrpcs_methodHelp_sig=array(array($GLOBALS['xmlrpcString'], $GLOBALS['xmlrpcString']));\r
 154         $_xmlrpcs_methodHelp_doc='Returns help text if defined for the method passed, otherwise returns an empty string';\r
 155         $_xmlrpcs_methodHelp_sdoc=array(array('method description', 'name of the method to be described'));\r
 156         function _xmlrpcs_methodHelp($server, $m)\r
 157         {\r
 158                 // let accept as parameter both an xmlrpcval or string\r
 159                 if (is_object($m))\r
 160                 {\r
 161                         $methName=$m->getParam(0);\r
 162                         $methName=$methName->scalarval();\r
 163                 }\r
 164                 else\r
 165                 {\r
 166                         $methName=$m;\r
 167                 }\r
 168                 if(strpos($methName, "system.") === 0)\r
 169                 {\r
 170                         $dmap=$GLOBALS['_xmlrpcs_dmap']; $sysCall=1;\r
 171                 }\r
 172                 else\r
 173                 {\r
 174                         $dmap=$server->dmap; $sysCall=0;\r
 175                 }\r
 176                 if(isset($dmap[$methName]))\r
 177                 {\r
 178                         if(isset($dmap[$methName]['docstring']))\r
 179                         {\r
 180                                 $r=new xmlrpcresp(new xmlrpcval($dmap[$methName]['docstring']), 'string');\r
 181                         }\r
 182                         else\r
 183                         {\r
 184                                 $r=new xmlrpcresp(new xmlrpcval('', 'string'));\r
 185                         }\r
 186                 }\r
 187                 else\r
 188                 {\r
 189                         $r=new xmlrpcresp(0, $GLOBALS['xmlrpcerr']['introspect_unknown'], $GLOBALS['xmlrpcstr']['introspect_unknown']);\r
 190                 }\r
 191                 return $r;\r
 192         }\r
 193 \r
 194         $_xmlrpcs_multicall_sig = array(array($GLOBALS['xmlrpcArray'], $GLOBALS['xmlrpcArray']));\r
 195         $_xmlrpcs_multicall_doc = 'Boxcar multiple RPC calls in one request. See http://www.xmlrpc.com/discuss/msgReader$1208 for details';\r
 196         $_xmlrpcs_multicall_sdoc = array(array('list of response structs, where each struct has the usual members', 'list of calls, with each call being represented as a struct, with members "methodname" and "params"'));\r
 197         function _xmlrpcs_multicall_error($err)\r
 198         {\r
 199                 if(is_string($err))\r
 200                 {\r
 201                         $str = $GLOBALS['xmlrpcstr']["multicall_${err}"];\r
 202                         $code = $GLOBALS['xmlrpcerr']["multicall_${err}"];\r
 203                 }\r
 204                 else\r
 205                 {\r
 206                         $code = $err->faultCode();\r
 207                         $str = $err->faultString();\r
 208                 }\r
 209                 $struct = array();\r
 210                 $struct['faultCode'] = new xmlrpcval($code, 'int');\r
 211                 $struct['faultString'] = new xmlrpcval($str, 'string');\r
 212                 return new xmlrpcval($struct, 'struct');\r
 213         }\r
 214 \r
 215         function _xmlrpcs_multicall_do_call($server, $call)\r
 216         {\r
 217                 if($call->kindOf() != 'struct')\r
 218                 {\r
 219                         return _xmlrpcs_multicall_error('notstruct');\r
 220                 }\r
 221                 $methName = @$call->structmem('methodName');\r
 222                 if(!$methName)\r
 223                 {\r
 224                         return _xmlrpcs_multicall_error('nomethod');\r
 225                 }\r
 226                 if($methName->kindOf() != 'scalar' || $methName->scalartyp() != 'string')\r
 227                 {\r
 228                         return _xmlrpcs_multicall_error('notstring');\r
 229                 }\r
 230                 if($methName->scalarval() == 'system.multicall')\r
 231                 {\r
 232                         return _xmlrpcs_multicall_error('recursion');\r
 233                 }\r
 234 \r
 235                 $params = @$call->structmem('params');\r
 236                 if(!$params)\r
 237                 {\r
 238                         return _xmlrpcs_multicall_error('noparams');\r
 239                 }\r
 240                 if($params->kindOf() != 'array')\r
 241                 {\r
 242                         return _xmlrpcs_multicall_error('notarray');\r
 243                 }\r
 244                 $numParams = $params->arraysize();\r
 245 \r
 246                 $msg = new xmlrpcmsg($methName->scalarval());\r
 247                 for($i = 0; $i < $numParams; $i++)\r
 248                 {\r
 249                         if(!$msg->addParam($params->arraymem($i)))\r
 250                         {\r
 251                                 $i++;\r
 252                                 return _xmlrpcs_multicall_error(new xmlrpcresp(0,\r
 253                                         $GLOBALS['xmlrpcerr']['incorrect_params'],\r
 254                                         $GLOBALS['xmlrpcstr']['incorrect_params'] . ": probable xml error in param " . $i));\r
 255                         }\r
 256                 }\r
 257 \r
 258                 $result = $server->execute($msg);\r
 259 \r
 260                 if($result->faultCode() != 0)\r
 261                 {\r
 262                         return _xmlrpcs_multicall_error($result);               // Method returned fault.\r
 263                 }\r
 264 \r
 265                 return new xmlrpcval(array($result->value()), 'array');\r
 266         }\r
 267 \r
 268         function _xmlrpcs_multicall_do_call_phpvals($server, $call)\r
 269         {\r
 270                 if(!is_array($call))\r
 271                 {\r
 272                         return _xmlrpcs_multicall_error('notstruct');\r
 273                 }\r
 274                 if(!array_key_exists('methodName', $call))\r
 275                 {\r
 276                         return _xmlrpcs_multicall_error('nomethod');\r
 277                 }\r
 278                 if (!is_string($call['methodName']))\r
 279                 {\r
 280                         return _xmlrpcs_multicall_error('notstring');\r
 281                 }\r
 282                 if($call['methodName'] == 'system.multicall')\r
 283                 {\r
 284                         return _xmlrpcs_multicall_error('recursion');\r
 285                 }\r
 286                 if(!array_key_exists('params', $call))\r
 287                 {\r
 288                         return _xmlrpcs_multicall_error('noparams');\r
 289                 }\r
 290                 if(!is_array($call['params']))\r
 291                 {\r
 292                         return _xmlrpcs_multicall_error('notarray');\r
 293                 }\r
 294 \r
 295                 // this is a real dirty and simplistic hack, since we might have received a\r
 296                 // base64 or datetime values, but they will be listed as strings here...\r
 297                 $numParams = count($call['params']);\r
 298                 $pt = array();\r
 299                 foreach($call['params'] as $val)\r
 300                         $pt[] = php_2_xmlrpc_type(gettype($val));\r
 301 \r
 302                 $result = $server->execute($call['methodName'], $call['params'], $pt);\r
 303 \r
 304                 if($result->faultCode() != 0)\r
 305                 {\r
 306                         return _xmlrpcs_multicall_error($result);               // Method returned fault.\r
 307                 }\r
 308 \r
 309                 return new xmlrpcval(array($result->value()), 'array');\r
 310         }\r
 311 \r
 312         function _xmlrpcs_multicall($server, $m)\r
 313         {\r
 314                 $result = array();\r
 315                 // let accept a plain list of php parameters, beside a single xmlrpc msg object\r
 316                 if (is_object($m))\r
 317                 {\r
 318                         $calls = $m->getParam(0);\r
 319                         $numCalls = $calls->arraysize();\r
 320                         for($i = 0; $i < $numCalls; $i++)\r
 321                         {\r
 322                                 $call = $calls->arraymem($i);\r
 323                                 $result[$i] = _xmlrpcs_multicall_do_call($server, $call);\r
 324                         }\r
 325                 }\r
 326                 else\r
 327                 {\r
 328                         $numCalls=count($m);\r
 329                         for($i = 0; $i < $numCalls; $i++)\r
 330                         {\r
 331                                 $result[$i] = _xmlrpcs_multicall_do_call_phpvals($server, $m[$i]);\r
 332                         }\r
 333                 }\r
 334 \r
 335                 return new xmlrpcresp(new xmlrpcval($result, 'array'));\r
 336         }\r
 337 \r
 338         $GLOBALS['_xmlrpcs_dmap']=array(\r
 339                 'system.listMethods' => array(\r
 340                         'function' => '_xmlrpcs_listMethods',\r
 341                         'signature' => $_xmlrpcs_listMethods_sig,\r
 342                         'docstring' => $_xmlrpcs_listMethods_doc,\r
 343                         'signature_docs' => $_xmlrpcs_listMethods_sdoc),\r
 344                 'system.methodHelp' => array(\r
 345                         'function' => '_xmlrpcs_methodHelp',\r
 346                         'signature' => $_xmlrpcs_methodHelp_sig,\r
 347                         'docstring' => $_xmlrpcs_methodHelp_doc,\r
 348                         'signature_docs' => $_xmlrpcs_methodHelp_sdoc),\r
 349                 'system.methodSignature' => array(\r
 350                         'function' => '_xmlrpcs_methodSignature',\r
 351                         'signature' => $_xmlrpcs_methodSignature_sig,\r
 352                         'docstring' => $_xmlrpcs_methodSignature_doc,\r
 353                         'signature_docs' => $_xmlrpcs_methodSignature_sdoc),\r
 354                 'system.multicall' => array(\r
 355                         'function' => '_xmlrpcs_multicall',\r
 356                         'signature' => $_xmlrpcs_multicall_sig,\r
 357                         'docstring' => $_xmlrpcs_multicall_doc,\r
 358                         'signature_docs' => $_xmlrpcs_multicall_sdoc),\r
 359                 'system.getCapabilities' => array(\r
 360                         'function' => '_xmlrpcs_getCapabilities',\r
 361                         'signature' => $_xmlrpcs_getCapabilities_sig,\r
 362                         'docstring' => $_xmlrpcs_getCapabilities_doc,\r
 363                         'signature_docs' => $_xmlrpcs_getCapabilities_sdoc)\r
 364         );\r
 365 \r
 366         $GLOBALS['_xmlrpcs_occurred_errors'] = '';\r
 367         $GLOBALS['_xmlrpcs_prev_ehandler'] = '';\r
 368 \r
 369         /**\r
 370         * Error handler used to track errors that occur during server-side execution of PHP code.\r
 371         * This allows to report back to the client whether an internal error has occurred or not\r
 372         * using an xmlrpc response object, instead of letting the client deal with the html junk\r
 373         * that a PHP execution error on the server generally entails.\r
 374         *\r
 375         * NB: in fact a user defined error handler can only handle WARNING, NOTICE and USER_* errors.\r
 376         *\r
 377         */\r
 378         function _xmlrpcs_errorHandler($errcode, $errstring, $filename=null, $lineno=null, $context=null)\r
 379         {\r
 380                 // obey the @ protocol\r
 381                 if (error_reporting() == 0)\r
 382                         return;\r
 383 \r
 384                 //if($errcode != E_NOTICE && $errcode != E_WARNING && $errcode != E_USER_NOTICE && $errcode != E_USER_WARNING)\r
 385                 if($errcode != E_STRICT)\r
 386                 {\r
 387                         $GLOBALS['_xmlrpcs_occurred_errors'] = $GLOBALS['_xmlrpcs_occurred_errors'] . $errstring . "\n";\r
 388                 }\r
 389                 // Try to avoid as much as possible disruption to the previous error handling\r
 390                 // mechanism in place\r
 391                 if($GLOBALS['_xmlrpcs_prev_ehandler'] == '')\r
 392                 {\r
 393                         // The previous error handler was the default: all we should do is log error\r
 394                         // to the default error log (if level high enough)\r
 395                         if(ini_get('log_errors') && (intval(ini_get('error_reporting')) & $errcode))\r
 396                         {\r
 397                                 error_log($errstring);\r
 398                         }\r
 399                 }\r
 400                 else\r
 401                 {\r
 402                         // Pass control on to previous error handler, trying to avoid loops...\r
 403                         if($GLOBALS['_xmlrpcs_prev_ehandler'] != '_xmlrpcs_errorHandler')\r
 404                         {\r
 405                                 // NB: this code will NOT work on php < 4.0.2: only 2 params were used for error handlers\r
 406                                 if(is_array($GLOBALS['_xmlrpcs_prev_ehandler']))\r
 407                                 {\r
 408                                         // the following works both with static class methods and plain object methods as error handler\r
 409                                         call_user_func_array($GLOBALS['_xmlrpcs_prev_ehandler'], array($errcode, $errstring, $filename, $lineno, $context));\r
 410                                 }\r
 411                                 else\r
 412                                 {\r
 413                                         $GLOBALS['_xmlrpcs_prev_ehandler']($errcode, $errstring, $filename, $lineno, $context);\r
 414                                 }\r
 415                         }\r
 416                 }\r
 417         }\r
 418 \r
 419         $GLOBALS['_xmlrpc_debuginfo']='';\r
 420 \r
 421         /**\r
 422         * Add a string to the debug info that can be later seralized by the server\r
 423         * as part of the response message.\r
 424         * Note that for best compatbility, the debug string should be encoded using\r
 425         * the $GLOBALS['xmlrpc_internalencoding'] character set.\r
 426         * @param string $m\r
 427         * @access public\r
 428         */\r
 429         function xmlrpc_debugmsg($m)\r
 430         {\r
 431                 $GLOBALS['_xmlrpc_debuginfo'] .= $m . "\n";\r
 432         }\r
 433 \r
 434         class xmlrpc_server\r
 435         {\r
 436                 /**\r
 437                 * Array defining php functions exposed as xmlrpc methods by this server\r
 438                 * @access private\r
 439                 */\r
 440                 var $dmap=array();\r
 441                 /**\r
 442                 * Defines how functions in dmap will be invoked: either using an xmlrpc msg object\r
 443                 * or plain php values.\r
 444                 * valid strings are 'xmlrpcvals', 'phpvals' or 'epivals'\r
 445                 */\r
 446                 var $functions_parameters_type='xmlrpcvals';\r
 447                 /**\r
 448                 * Option used for fine-tuning the encoding the php values returned from\r
 449                 * functions registered in the dispatch map when the functions_parameters_types\r
 450                 * member is set to 'phpvals'\r
 451                 * @see php_xmlrpc_encode for a list of values\r
 452                 */\r
 453                 var $phpvals_encoding_options = array( 'auto_dates' );\r
 454                 /// controls wether the server is going to echo debugging messages back to the client as comments in response body. valid values: 0,1,2,3\r
 455                 var $debug = 1;\r
 456                 /**\r
 457                 * Controls behaviour of server when invoked user function throws an exception:\r
 458                 * 0 = catch it and return an 'internal error' xmlrpc response (default)\r
 459                 * 1 = catch it and return an xmlrpc response with the error corresponding to the exception\r
 460                 * 2 = allow the exception to float to the upper layers\r
 461                 */\r
 462                 var $exception_handling = 0;\r
 463                 /**\r
 464                 * When set to true, it will enable HTTP compression of the response, in case\r
 465                 * the client has declared its support for compression in the request.\r
 466                 */\r
 467                 var $compress_response = false;\r
 468                 /**\r
 469                 * List of http compression methods accepted by the server for requests.\r
 470                 * NB: PHP supports deflate, gzip compressions out of the box if compiled w. zlib\r
 471                 */\r
 472                 var $accepted_compression = array();\r
 473                 /// shall we serve calls to system.* methods?\r
 474                 var $allow_system_funcs = true;\r
 475                 /// list of charset encodings natively accepted for requests\r
 476                 var $accepted_charset_encodings = array();\r
 477                 /**\r
 478                 * charset encoding to be used for response.\r
 479                 * NB: if we can, we will convert the generated response from internal_encoding to the intended one.\r
 480                 * can be: a supported xml encoding (only UTF-8 and ISO-8859-1 at present, unless mbstring is enabled),\r
 481                 * null (leave unspecified in response, convert output stream to US_ASCII),\r
 482                 * 'default' (use xmlrpc library default as specified in xmlrpc.inc, convert output stream if needed),\r
 483                 * or 'auto' (use client-specified charset encoding or same as request if request headers do not specify it (unless request is US-ASCII: then use library default anyway).\r
 484                 * NB: pretty dangerous if you accept every charset and do not have mbstring enabled)\r
 485                 */\r
 486                 var $response_charset_encoding = '';\r
 487                 /**\r
 488                 * Storage for internal debug info\r
 489                 * @access private\r
 490                 */\r
 491                 var $debug_info = '';\r
 492                 /**\r
 493                 * Extra data passed at runtime to method handling functions. Used only by EPI layer\r
 494                 */\r
 495                 var $user_data = null;\r
 496 \r
 497                 /**\r
 498                 * @param array $dispmap the dispatch map withd efinition of exposed services\r
 499                 * @param boolean $servicenow set to false to prevent the server from runnung upon construction\r
 500                 */\r
 501                 function xmlrpc_server($dispMap=null, $serviceNow=true)\r
 502                 {\r
 503                         // if ZLIB is enabled, let the server by default accept compressed requests,\r
 504                         // and compress responses sent to clients that support them\r
 505                         if(function_exists('gzinflate'))\r
 506                         {\r
 507                                 $this->accepted_compression = array('gzip', 'deflate');\r
 508                                 $this->compress_response = true;\r
 509                         }\r
 510 \r
 511                         // by default the xml parser can support these 3 charset encodings\r
 512                         $this->accepted_charset_encodings = array('UTF-8', 'ISO-8859-1', 'US-ASCII');\r
 513 \r
 514                         // dispMap is a dispatch array of methods\r
 515                         // mapped to function names and signatures\r
 516                         // if a method\r
 517                         // doesn't appear in the map then an unknown\r
 518                         // method error is generated\r
 519                         /* milosch - changed to make passing dispMap optional.\r
 520                          * instead, you can use the class add_to_map() function\r
 521                          * to add functions manually (borrowed from SOAPX4)\r
 522                          */\r
 523                         if($dispMap)\r
 524                         {\r
 525                                 $this->dmap = $dispMap;\r
 526                                 if($serviceNow)\r
 527                                 {\r
 528                                         $this->service();\r
 529                                 }\r
 530                         }\r
 531                 }\r
 532 \r
 533                 /**\r
 534                 * Set debug level of server.\r
 535                 * @param integer $in debug lvl: determines info added to xmlrpc responses (as xml comments)\r
 536                 * 0 = no debug info,\r
 537                 * 1 = msgs set from user with debugmsg(),\r
 538                 * 2 = add complete xmlrpc request (headers and body),\r
 539                 * 3 = add also all processing warnings happened during method processing\r
 540                 * (NB: this involves setting a custom error handler, and might interfere\r
 541                 * with the standard processing of the php function exposed as method. In\r
 542                 * particular, triggering an USER_ERROR level error will not halt script\r
 543                 * execution anymore, but just end up logged in the xmlrpc response)\r
 544                 * Note that info added at elevel 2 and 3 will be base64 encoded\r
 545                 * @access public\r
 546                 */\r
 547                 function setDebug($in)\r
 548                 {\r
 549                         $this->debug=$in;\r
 550                 }\r
 551 \r
 552                 /**\r
 553                 * Return a string with the serialized representation of all debug info\r
 554                 * @param string $charset_encoding the target charset encoding for the serialization\r
 555                 * @return string an XML comment (or two)\r
 556                 */\r
 557                 function serializeDebug($charset_encoding='')\r
 558                 {\r
 559                         // Tough encoding problem: which internal charset should we assume for debug info?\r
 560                         // It might contain a copy of raw data received from client, ie with unknown encoding,\r
 561                         // intermixed with php generated data and user generated data...\r
 562                         // so we split it: system debug is base 64 encoded,\r
 563                         // user debug info should be encoded by the end user using the INTERNAL_ENCODING\r
 564                         $out = '';\r
 565                         if ($this->debug_info != '')\r
 566                         {\r
 567                                 $out .= "<!-- SERVER DEBUG INFO (BASE64 ENCODED):\n".base64_encode($this->debug_info)."\n-->\n";\r
 568                         }\r
 569                         if($GLOBALS['_xmlrpc_debuginfo']!='')\r
 570                         {\r
 571 \r
 572                                 $out .= "<!-- DEBUG INFO:\n" . xmlrpc_encode_entitites(str_replace('--', '_-', $GLOBALS['_xmlrpc_debuginfo']), $GLOBALS['xmlrpc_internalencoding'], $charset_encoding) . "\n-->\n";\r
 573                                 // NB: a better solution MIGHT be to use CDATA, but we need to insert it\r
 574                                 // into return payload AFTER the beginning tag\r
 575                                 //$out .= "<![CDATA[ DEBUG INFO:\n\n" . str_replace(']]>', ']_]_>', $GLOBALS['_xmlrpc_debuginfo']) . "\n]]>\n";\r
 576                         }\r
 577                         return $out;\r
 578                 }\r
 579 \r
 580                 /**\r
 581                 * Execute the xmlrpc request, printing the response\r
 582                 * @param string $data the request body. If null, the http POST request will be examined\r
 583                 * @return xmlrpcresp the response object (usually not used by caller...)\r
 584                 * @access public\r
 585                 */\r
 586                 function service($data=null, $return_payload=false)\r
 587                 {\r
 588                         if ($data === null)\r
 589                         {\r
 590                                 // workaround for a known bug in php ver. 5.2.2 that broke $HTTP_RAW_POST_DATA\r
 591                                 $ver = phpversion();\r
 592                                 if ($ver[0] >= 5)\r
 593                                 {\r
 594                                         $data = file_get_contents('php://input');\r
 595                                 }\r
 596                                 else\r
 597                                 {\r
 598                                         $data = isset($GLOBALS['HTTP_RAW_POST_DATA']) ? $GLOBALS['HTTP_RAW_POST_DATA'] : '';\r
 599                                 }\r
 600                         }\r
 601                         $raw_data = $data;\r
 602 \r
 603                         // reset internal debug info\r
 604                         $this->debug_info = '';\r
 605 \r
 606                         // Echo back what we received, before parsing it\r
 607                         if($this->debug > 1)\r
 608                         {\r
 609                                 $this->debugmsg("+++GOT+++\n" . $data . "\n+++END+++");\r
 610                         }\r
 611 \r
 612                         $r = $this->parseRequestHeaders($data, $req_charset, $resp_charset, $resp_encoding);\r
 613                         if (!$r)\r
 614                         {\r
 615                                 $r=$this->parseRequest($data, $req_charset);\r
 616                         }\r
 617 \r
 618                         // save full body of request into response, for more debugging usages\r
 619                         $r->raw_data = $raw_data;\r
 620 \r
 621                         if($this->debug > 2 && $GLOBALS['_xmlrpcs_occurred_errors'])\r
 622                         {\r
 623                                 $this->debugmsg("+++PROCESSING ERRORS AND WARNINGS+++\n" .\r
 624                                         $GLOBALS['_xmlrpcs_occurred_errors'] . "+++END+++");\r
 625                         }\r
 626 \r
 627                         $payload=$this->xml_header($resp_charset);\r
 628                         if($this->debug > 0)\r
 629                         {\r
 630                                 $payload = $payload . $this->serializeDebug($resp_charset);\r
 631                         }\r
 632 \r
 633                         // G. Giunta 2006-01-27: do not create response serialization if it has\r
 634                         // already happened. Helps building json magic\r
 635                         if (empty($r->payload))\r
 636                         {\r
 637                                 $r->serialize($resp_charset);\r
 638                         }\r
 639                         $payload = $payload . $r->payload;\r
 640 \r
 641                         if ($return_payload)\r
 642                         {\r
 643                                 return $payload;\r
 644                         }\r
 645 \r
 646                         // if we get a warning/error that has output some text before here, then we cannot\r
 647                         // add a new header. We cannot say we are sending xml, either...\r
 648                         if(!headers_sent())\r
 649                         {\r
 650                                 header('Content-Type: '.$r->content_type);\r
 651                                 // we do not know if client actually told us an accepted charset, but if he did\r
 652                                 // we have to tell him what we did\r
 653                                 header("Vary: Accept-Charset");\r
 654 \r
 655                                 // http compression of output: only\r
 656                                 // if we can do it, and we want to do it, and client asked us to,\r
 657                                 // and php ini settings do not force it already\r
 658                                 $php_no_self_compress = !ini_get('zlib.output_compression') && (ini_get('output_handler') != 'ob_gzhandler');\r
 659                                 if($this->compress_response && function_exists('gzencode') && $resp_encoding != ''\r
 660                                         && $php_no_self_compress)\r
 661                                 {\r
 662                                         if(strpos($resp_encoding, 'gzip') !== false)\r
 663                                         {\r
 664                                                 $payload = gzencode($payload);\r
 665                                                 header("Content-Encoding: gzip");\r
 666                                                 header("Vary: Accept-Encoding");\r
 667                                         }\r
 668                                         elseif (strpos($resp_encoding, 'deflate') !== false)\r
 669                                         {\r
 670                                                 $payload = gzcompress($payload);\r
 671                                                 header("Content-Encoding: deflate");\r
 672                                                 header("Vary: Accept-Encoding");\r
 673                                         }\r
 674                                 }\r
 675 \r
 676                                 // do not ouput content-length header if php is compressing output for us:\r
 677                                 // it will mess up measurements\r
 678                                 if($php_no_self_compress)\r
 679                                 {\r
 680                                         header('Content-Length: ' . (int)strlen($payload));\r
 681                                 }\r
 682                         }\r
 683                         else\r
 684                         {\r
 685                                 error_log('XML-RPC: '.__METHOD__.': http headers already sent before response is fully generated. Check for php warning or error messages');\r
 686                         }\r
 687 \r
 688                         print $payload;\r
 689 \r
 690                         // return request, in case subclasses want it\r
 691                         return $r;\r
 692                 }\r
 693 \r
 694                 /**\r
 695                 * Add a method to the dispatch map\r
 696                 * @param string $methodname the name with which the method will be made available\r
 697                 * @param string $function the php function that will get invoked\r
 698                 * @param array $sig the array of valid method signatures\r
 699                 * @param string $doc method documentation\r
 700                 * @param array $sigdoc the array of valid method signatures docs (one string per param, one for return type)\r
 701                 * @access public\r
 702                 */\r
 703                 function add_to_map($methodname,$function,$sig=null,$doc=false,$sigdoc=false)\r
 704                 {\r
 705                         $this->dmap[$methodname] = array(\r
 706                                 'function'      => $function,\r
 707                                 'docstring' => $doc\r
 708                         );\r
 709                         if ($sig)\r
 710                         {\r
 711                                 $this->dmap[$methodname]['signature'] = $sig;\r
 712                         }\r
 713                         if ($sigdoc)\r
 714                         {\r
 715                                 $this->dmap[$methodname]['signature_docs'] = $sigdoc;\r
 716                         }\r
 717                 }\r
 718 \r
 719                 /**\r
 720                 * Verify type and number of parameters received against a list of known signatures\r
 721                 * @param array $in array of either xmlrpcval objects or xmlrpc type definitions\r
 722                 * @param array $sig array of known signatures to match against\r
 723                 * @access private\r
 724                 */\r
 725                 function verifySignature($in, $sig)\r
 726                 {\r
 727                         // check each possible signature in turn\r
 728                         if (is_object($in))\r
 729                         {\r
 730                                 $numParams = $in->getNumParams();\r
 731                         }\r
 732                         else\r
 733                         {\r
 734                                 $numParams = count($in);\r
 735                         }\r
 736                         foreach($sig as $cursig)\r
 737                         {\r
 738                                 if(count($cursig)==$numParams+1)\r
 739                                 {\r
 740                                         $itsOK=1;\r
 741                                         for($n=0; $n<$numParams; $n++)\r
 742                                         {\r
 743                                                 if (is_object($in))\r
 744                                                 {\r
 745                                                         $p=$in->getParam($n);\r
 746                                                         if($p->kindOf() == 'scalar')\r
 747                                                         {\r
 748                                                                 $pt=$p->scalartyp();\r
 749                                                         }\r
 750                                                         else\r
 751                                                         {\r
 752                                                                 $pt=$p->kindOf();\r
 753                                                         }\r
 754                                                 }\r
 755                                                 else\r
 756                                                 {\r
 757                                                         $pt= $in[$n] == 'i4' ? 'int' : strtolower($in[$n]); // dispatch maps never use i4...\r
 758                                                 }\r
 759 \r
 760                                                 // param index is $n+1, as first member of sig is return type\r
 761                                                 if($pt != $cursig[$n+1] && $cursig[$n+1] != $GLOBALS['xmlrpcValue'])\r
 762                                                 {\r
 763                                                         $itsOK=0;\r
 764                                                         $pno=$n+1;\r
 765                                                         $wanted=$cursig[$n+1];\r
 766                                                         $got=$pt;\r
 767                                                         break;\r
 768                                                 }\r
 769                                         }\r
 770                                         if($itsOK)\r
 771                                         {\r
 772                                                 return array(1,'');\r
 773                                         }\r
 774                                 }\r
 775                         }\r
 776                         if(isset($wanted))\r
 777                         {\r
 778                                 return array(0, "Wanted ${wanted}, got ${got} at param ${pno}");\r
 779                         }\r
 780                         else\r
 781                         {\r
 782                                 return array(0, "No method signature matches number of parameters");\r
 783                         }\r
 784                 }\r
 785 \r
 786                 /**\r
 787                 * Parse http headers received along with xmlrpc request. If needed, inflate request\r
 788                 * @return null on success or an xmlrpcresp\r
 789                 * @access private\r
 790                 */\r
 791                 function parseRequestHeaders(&$data, &$req_encoding, &$resp_encoding, &$resp_compression)\r
 792                 {\r
 793                         // check if $_SERVER is populated: it might have been disabled via ini file\r
 794                         // (this is true even when in CLI mode)\r
 795                         if (count($_SERVER) == 0)\r
 796                         {\r
 797                                 error_log('XML-RPC: '.__METHOD__.': cannot parse request headers as $_SERVER is not populated');\r
 798                         }\r
 799 \r
 800                         if($this->debug > 1)\r
 801                         {\r
 802                                 if(function_exists('getallheaders'))\r
 803                                 {\r
 804                                         $this->debugmsg(''); // empty line\r
 805                                         foreach(getallheaders() as $name => $val)\r
 806                                         {\r
 807                                                 $this->debugmsg("HEADER: $name: $val");\r
 808                                         }\r
 809                                 }\r
 810 \r
 811                         }\r
 812 \r
 813                         if(isset($_SERVER['HTTP_CONTENT_ENCODING']))\r
 814                         {\r
 815                                 $content_encoding = str_replace('x-', '', $_SERVER['HTTP_CONTENT_ENCODING']);\r
 816                         }\r
 817                         else\r
 818                         {\r
 819                                 $content_encoding = '';\r
 820                         }\r
 821 \r
 822                         // check if request body has been compressed and decompress it\r
 823                         if($content_encoding != '' && strlen($data))\r
 824                         {\r
 825                                 if($content_encoding == 'deflate' || $content_encoding == 'gzip')\r
 826                                 {\r
 827                                         // if decoding works, use it. else assume data wasn't gzencoded\r
 828                                         if(function_exists('gzinflate') && in_array($content_encoding, $this->accepted_compression))\r
 829                                         {\r
 830                                                 if($content_encoding == 'deflate' && $degzdata = @gzuncompress($data))\r
 831                                                 {\r
 832                                                         $data = $degzdata;\r
 833                                                         if($this->debug > 1)\r
 834                                                         {\r
 835                                                                 $this->debugmsg("\n+++INFLATED REQUEST+++[".strlen($data)." chars]+++\n" . $data . "\n+++END+++");\r
 836                                                         }\r
 837                                                 }\r
 838                                                 elseif($content_encoding == 'gzip' && $degzdata = @gzinflate(substr($data, 10)))\r
 839                                                 {\r
 840                                                         $data = $degzdata;\r
 841                                                         if($this->debug > 1)\r
 842                                                                 $this->debugmsg("+++INFLATED REQUEST+++[".strlen($data)." chars]+++\n" . $data . "\n+++END+++");\r
 843                                                 }\r
 844                                                 else\r
 845                                                 {\r
 846                                                         $r = new xmlrpcresp(0, $GLOBALS['xmlrpcerr']['server_decompress_fail'], $GLOBALS['xmlrpcstr']['server_decompress_fail']);\r
 847                                                         return $r;\r
 848                                                 }\r
 849                                         }\r
 850                                         else\r
 851                                         {\r
 852                                                 //error_log('The server sent deflated data. Your php install must have the Zlib extension compiled in to support this.');\r
 853                                                 $r = new xmlrpcresp(0, $GLOBALS['xmlrpcerr']['server_cannot_decompress'], $GLOBALS['xmlrpcstr']['server_cannot_decompress']);\r
 854                                                 return $r;\r
 855                                         }\r
 856                                 }\r
 857                         }\r
 858 \r
 859                         // check if client specified accepted charsets, and if we know how to fulfill\r
 860                         // the request\r
 861                         if ($this->response_charset_encoding == 'auto')\r
 862                         {\r
 863                                 $resp_encoding = '';\r
 864                                 if (isset($_SERVER['HTTP_ACCEPT_CHARSET']))\r
 865                                 {\r
 866                                         // here we should check if we can match the client-requested encoding\r
 867                                         // with the encodings we know we can generate.\r
 868                                         /// @todo we should parse q=0.x preferences instead of getting first charset specified...\r
 869                                         $client_accepted_charsets = explode(',', strtoupper($_SERVER['HTTP_ACCEPT_CHARSET']));\r
 870                                         // Give preference to internal encoding\r
 871                                         $known_charsets = array($GLOBALS['xmlrpc_internalencoding'], 'UTF-8', 'ISO-8859-1', 'US-ASCII');\r
 872                                         foreach ($known_charsets as $charset)\r
 873                                         {\r
 874                                                 foreach ($client_accepted_charsets as $accepted)\r
 875                                                         if (strpos($accepted, $charset) === 0)\r
 876                                                         {\r
 877                                                                 $resp_encoding = $charset;\r
 878                                                                 break;\r
 879                                                         }\r
 880                                                 if ($resp_encoding)\r
 881                                                         break;\r
 882                                         }\r
 883                                 }\r
 884                         }\r
 885                         else\r
 886                         {\r
 887                                 $resp_encoding = $this->response_charset_encoding;\r
 888                         }\r
 889 \r
 890                         if (isset($_SERVER['HTTP_ACCEPT_ENCODING']))\r
 891                         {\r
 892                                 $resp_compression = $_SERVER['HTTP_ACCEPT_ENCODING'];\r
 893                         }\r
 894                         else\r
 895                         {\r
 896                                 $resp_compression = '';\r
 897                         }\r
 898 \r
 899                         // 'guestimate' request encoding\r
 900                         /// @todo check if mbstring is enabled and automagic input conversion is on: it might mingle with this check???\r
 901                         $req_encoding = guess_encoding(isset($_SERVER['CONTENT_TYPE']) ? $_SERVER['CONTENT_TYPE'] : '',\r
 902                                 $data);\r
 903 \r
 904                         return null;\r
 905                 }\r
 906 \r
 907                 /**\r
 908                 * Parse an xml chunk containing an xmlrpc request and execute the corresponding\r
 909                 * php function registered with the server\r
 910                 * @param string $data the xml request\r
 911                 * @param string $req_encoding (optional) the charset encoding of the xml request\r
 912                 * @return xmlrpcresp\r
 913                 * @access private\r
 914                 */\r
 915                 function parseRequest($data, $req_encoding='')\r
 916                 {\r
 917                         // 2005/05/07 commented and moved into caller function code\r
 918                         //if($data=='')\r
 919                         //{\r
 920                         //      $data=$GLOBALS['HTTP_RAW_POST_DATA'];\r
 921                         //}\r
 922 \r
 923                         // G. Giunta 2005/02/13: we do NOT expect to receive html entities\r
 924                         // so we do not try to convert them into xml character entities\r
 925                         //$data = xmlrpc_html_entity_xlate($data);\r
 926 \r
 927                         $GLOBALS['_xh']=array();\r
 928                         $GLOBALS['_xh']['ac']='';\r
 929                         $GLOBALS['_xh']['stack']=array();\r
 930                         $GLOBALS['_xh']['valuestack'] = array();\r
 931                         $GLOBALS['_xh']['params']=array();\r
 932                         $GLOBALS['_xh']['pt']=array();\r
 933                         $GLOBALS['_xh']['isf']=0;\r
 934                         $GLOBALS['_xh']['isf_reason']='';\r
 935                         $GLOBALS['_xh']['method']=false; // so we can check later if we got a methodname or not\r
 936                         $GLOBALS['_xh']['rt']='';\r
 937 \r
 938                         // decompose incoming XML into request structure\r
 939                         if ($req_encoding != '')\r
 940                         {\r
 941                                 if (!in_array($req_encoding, array('UTF-8', 'ISO-8859-1', 'US-ASCII')))\r
 942                                 // the following code might be better for mb_string enabled installs, but\r
 943                                 // makes the lib about 200% slower...\r
 944                                 //if (!is_valid_charset($req_encoding, array('UTF-8', 'ISO-8859-1', 'US-ASCII')))\r
 945                                 {\r
 946                                         error_log('XML-RPC: '.__METHOD__.': invalid charset encoding of received request: '.$req_encoding);\r
 947                                         $req_encoding = $GLOBALS['xmlrpc_defencoding'];\r
 948                                 }\r
 949                                 /// @BUG this will fail on PHP 5 if charset is not specified in the xml prologue,\r
 950                                 // the encoding is not UTF8 and there are non-ascii chars in the text...\r
 951                                 /// @todo use an ampty string for php 5 ???\r
 952                                 $parser = xml_parser_create($req_encoding);\r
 953                         }\r
 954                         else\r
 955                         {\r
 956                                 $parser = xml_parser_create();\r
 957                         }\r
 958 \r
 959                         xml_parser_set_option($parser, XML_OPTION_CASE_FOLDING, true);\r
 960                         // G. Giunta 2005/02/13: PHP internally uses ISO-8859-1, so we have to tell\r
 961                         // the xml parser to give us back data in the expected charset\r
 962                         // What if internal encoding is not in one of the 3 allowed?\r
 963                         // we use the broadest one, ie. utf8\r
 964                         // This allows to send data which is native in various charset,\r
 965                         // by extending xmlrpc_encode_entitites() and setting xmlrpc_internalencoding\r
 966                         if (!in_array($GLOBALS['xmlrpc_internalencoding'], array('UTF-8', 'ISO-8859-1', 'US-ASCII')))\r
 967                         {\r
 968                                 xml_parser_set_option($parser, XML_OPTION_TARGET_ENCODING, 'UTF-8');\r
 969                         }\r
 970                         else\r
 971                         {\r
 972                                 xml_parser_set_option($parser, XML_OPTION_TARGET_ENCODING, $GLOBALS['xmlrpc_internalencoding']);\r
 973                         }\r
 974 \r
 975                         if ($this->functions_parameters_type != 'xmlrpcvals')\r
 976                                 xml_set_element_handler($parser, 'xmlrpc_se', 'xmlrpc_ee_fast');\r
 977                         else\r
 978                                 xml_set_element_handler($parser, 'xmlrpc_se', 'xmlrpc_ee');\r
 979                         xml_set_character_data_handler($parser, 'xmlrpc_cd');\r
 980                         xml_set_default_handler($parser, 'xmlrpc_dh');\r
 981                         if(!xml_parse($parser, $data, 1))\r
 982                         {\r
 983                                 // return XML error as a faultCode\r
 984                                 $r=new xmlrpcresp(0,\r
 985                                 $GLOBALS['xmlrpcerrxml']+xml_get_error_code($parser),\r
 986                                 sprintf('XML error: %s at line %d, column %d',\r
 987                                         xml_error_string(xml_get_error_code($parser)),\r
 988                                         xml_get_current_line_number($parser), xml_get_current_column_number($parser)));\r
 989                                 xml_parser_free($parser);\r
 990                         }\r
 991                         elseif ($GLOBALS['_xh']['isf'])\r
 992                         {\r
 993                                 xml_parser_free($parser);\r
 994                                 $r=new xmlrpcresp(0,\r
 995                                         $GLOBALS['xmlrpcerr']['invalid_request'],\r
 996                                         $GLOBALS['xmlrpcstr']['invalid_request'] . ' ' . $GLOBALS['_xh']['isf_reason']);\r
 997                         }\r
 998                         else\r
 999                         {\r
1000                                 xml_parser_free($parser);\r
1001                                 // small layering violation in favor of speed and memory usage:\r
1002                                 // we should allow the 'execute' method handle this, but in the\r
1003                                 // most common scenario (xmlrpcvals type server with some methods\r
1004                                 // registered as phpvals) that would mean a useless encode+decode pass\r
1005                                 if ($this->functions_parameters_type != 'xmlrpcvals' || (isset($this->dmap[$GLOBALS['_xh']['method']]['parameters_type']) && ($this->dmap[$GLOBALS['_xh']['method']]['parameters_type'] == 'phpvals')))\r
1006                                 {\r
1007                                         if($this->debug > 1)\r
1008                                         {\r
1009                                                 $this->debugmsg("\n+++PARSED+++\n".var_export($GLOBALS['_xh']['params'], true)."\n+++END+++");\r
1010                                         }\r
1011                                         $r = $this->execute($GLOBALS['_xh']['method'], $GLOBALS['_xh']['params'], $GLOBALS['_xh']['pt']);\r
1012                                 }\r
1013                                 else\r
1014                                 {\r
1015                                         // build an xmlrpcmsg object with data parsed from xml\r
1016                                         $m=new xmlrpcmsg($GLOBALS['_xh']['method']);\r
1017                                         // now add parameters in\r
1018                                         for($i=0; $i<count($GLOBALS['_xh']['params']); $i++)\r
1019                                         {\r
1020                                                 $m->addParam($GLOBALS['_xh']['params'][$i]);\r
1021                                         }\r
1022 \r
1023                                         if($this->debug > 1)\r
1024                                         {\r
1025                                                 $this->debugmsg("\n+++PARSED+++\n".var_export($m, true)."\n+++END+++");\r
1026                                         }\r
1027                                         $r = $this->execute($m);\r
1028                                 }\r
1029                         }\r
1030                         return $r;\r
1031                 }\r
1032 \r
1033                 /**\r
1034                 * Execute a method invoked by the client, checking parameters used\r
1035                 * @param mixed $m either an xmlrpcmsg obj or a method name\r
1036                 * @param array $params array with method parameters as php types (if m is method name only)\r
1037                 * @param array $paramtypes array with xmlrpc types of method parameters (if m is method name only)\r
1038                 * @return xmlrpcresp\r
1039                 * @access private\r
1040                 */\r
1041                 function execute($m, $params=null, $paramtypes=null)\r
1042                 {\r
1043                         if (is_object($m))\r
1044                         {\r
1045                                 $methName = $m->method();\r
1046                         }\r
1047                         else\r
1048                         {\r
1049                                 $methName = $m;\r
1050                         }\r
1051                         $sysCall = $this->allow_system_funcs && (strpos($methName, "system.") === 0);\r
1052                         $dmap = $sysCall ? $GLOBALS['_xmlrpcs_dmap'] : $this->dmap;\r
1053 \r
1054                         if(!isset($dmap[$methName]['function']))\r
1055                         {\r
1056                                 // No such method\r
1057                                 return new xmlrpcresp(0,\r
1058                                         $GLOBALS['xmlrpcerr']['unknown_method'],\r
1059                                         $GLOBALS['xmlrpcstr']['unknown_method']);\r
1060                         }\r
1061 \r
1062                         // Check signature\r
1063                         if(isset($dmap[$methName]['signature']))\r
1064                         {\r
1065                                 $sig = $dmap[$methName]['signature'];\r
1066                                 if (is_object($m))\r
1067                                 {\r
1068                                         list($ok, $errstr) = $this->verifySignature($m, $sig);\r
1069                                 }\r
1070                                 else\r
1071                                 {\r
1072                                         list($ok, $errstr) = $this->verifySignature($paramtypes, $sig);\r
1073                                 }\r
1074                                 if(!$ok)\r
1075                                 {\r
1076                                         // Didn't match.\r
1077                                         return new xmlrpcresp(\r
1078                                                 0,\r
1079                                                 $GLOBALS['xmlrpcerr']['incorrect_params'],\r
1080                                                 $GLOBALS['xmlrpcstr']['incorrect_params'] . ": ${errstr}"\r
1081                                         );\r
1082                                 }\r
1083                         }\r
1084 \r
1085                         $func = $dmap[$methName]['function'];\r
1086                         // let the 'class::function' syntax be accepted in dispatch maps\r
1087                         if(is_string($func) && strpos($func, '::'))\r
1088                         {\r
1089                                 $func = explode('::', $func);\r
1090                         }\r
1091                         // verify that function to be invoked is in fact callable\r
1092                         if(!is_callable($func))\r
1093                         {\r
1094                                 error_log("XML-RPC: ".__METHOD__.": function $func registered as method handler is not callable");\r
1095                                 return new xmlrpcresp(\r
1096                                         0,\r
1097                                         $GLOBALS['xmlrpcerr']['server_error'],\r
1098                                         $GLOBALS['xmlrpcstr']['server_error'] . ": no function matches method"\r
1099                                 );\r
1100                         }\r
1101 \r
1102                         // If debug level is 3, we should catch all errors generated during\r
1103                         // processing of user function, and log them as part of response\r
1104                         if($this->debug > 2)\r
1105                         {\r
1106                                 $GLOBALS['_xmlrpcs_prev_ehandler'] = set_error_handler('_xmlrpcs_errorHandler');\r
1107                         }\r
1108                         try\r
1109                         {\r
1110                                 // Allow mixed-convention servers\r
1111                                 if (is_object($m))\r
1112                                 {\r
1113                                         if($sysCall)\r
1114                                         {\r
1115                                                 $r = call_user_func($func, $this, $m);\r
1116                                         }\r
1117                                         else\r
1118                                         {\r
1119                                                 $r = call_user_func($func, $m);\r
1120                                         }\r
1121                                         if (!is_a($r, 'xmlrpcresp'))\r
1122                                         {\r
1123                                                 error_log("XML-RPC: ".__METHOD__.": function $func registered as method handler does not return an xmlrpcresp object");\r
1124                                                 if (is_a($r, 'xmlrpcval'))\r
1125                                                 {\r
1126                                                         $r = new xmlrpcresp($r);\r
1127                                                 }\r
1128                                                 else\r
1129                                                 {\r
1130                                                         $r = new xmlrpcresp(\r
1131                                                                 0,\r
1132                                                                 $GLOBALS['xmlrpcerr']['server_error'],\r
1133                                                                 $GLOBALS['xmlrpcstr']['server_error'] . ": function does not return xmlrpcresp object"\r
1134                                                         );\r
1135                                                 }\r
1136                                         }\r
1137                                 }\r
1138                                 else\r
1139                                 {\r
1140                                         // call a 'plain php' function\r
1141                                         if($sysCall)\r
1142                                         {\r
1143                                                 array_unshift($params, $this);\r
1144                                                 $r = call_user_func_array($func, $params);\r
1145                                         }\r
1146                                         else\r
1147                                         {\r
1148                                                 // 3rd API convention for method-handling functions: EPI-style\r
1149                                                 if ($this->functions_parameters_type == 'epivals')\r
1150                                                 {\r
1151                                                         $r = call_user_func_array($func, array($methName, $params, $this->user_data));\r
1152                                                         // mimic EPI behaviour: if we get an array that looks like an error, make it\r
1153                                                         // an eror response\r
1154                                                         if (is_array($r) && array_key_exists('faultCode', $r) && array_key_exists('faultString', $r))\r
1155                                                         {\r
1156                                                                 $r = new xmlrpcresp(0, (integer)$r['faultCode'], (string)$r['faultString']);\r
1157                                                         }\r
1158                                                         else\r
1159                                                         {\r
1160                                                                 // functions using EPI api should NOT return resp objects,\r
1161                                                                 // so make sure we encode the return type correctly\r
1162                                                                 $r = new xmlrpcresp(php_xmlrpc_encode($r, array('extension_api')));\r
1163                                                         }\r
1164                                                 }\r
1165                                                 else\r
1166                                                 {\r
1167                                                         $r = call_user_func_array($func, $params);\r
1168                                                 }\r
1169                                         }\r
1170                                         // the return type can be either an xmlrpcresp object or a plain php value...\r
1171                                         if (!is_a($r, 'xmlrpcresp'))\r
1172                                         {\r
1173                                                 // what should we assume here about automatic encoding of datetimes\r
1174                                                 // and php classes instances???\r
1175                                                 $r = new xmlrpcresp(php_xmlrpc_encode($r, $this->phpvals_encoding_options));\r
1176                                         }\r
1177                                 }\r
1178                         }\r
1179                         catch(Exception $e)\r
1180                         {\r
1181                                 // (barring errors in the lib) an uncatched exception happened\r
1182                                 // in the called function, we wrap it in a proper error-response\r
1183                                 switch($this->exception_handling)\r
1184                                 {\r
1185                                         case 2:\r
1186                                                 throw $e;\r
1187                                                 break;\r
1188                                         case 1:\r
1189                                                 $r = new xmlrpcresp(0, $e->getCode(), $e->getMessage());\r
1190                                                 break;\r
1191                                         default:\r
1192                                                 $r = new xmlrpcresp(0, $GLOBALS['xmlrpcerr']['server_error'], $GLOBALS['xmlrpcstr']['server_error']);\r
1193                                 }\r
1194                         }\r
1195                         if($this->debug > 2)\r
1196                         {\r
1197                                 // note: restore the error handler we found before calling the\r
1198                                 // user func, even if it has been changed inside the func itself\r
1199                                 if($GLOBALS['_xmlrpcs_prev_ehandler'])\r
1200                                 {\r
1201                                         set_error_handler($GLOBALS['_xmlrpcs_prev_ehandler']);\r
1202                                 }\r
1203                                 else\r
1204                                 {\r
1205                                         restore_error_handler();\r
1206                                 }\r
1207                         }\r
1208                         return $r;\r
1209                 }\r
1210 \r
1211                 /**\r
1212                 * add a string to the 'internal debug message' (separate from 'user debug message')\r
1213                 * @param string $strings\r
1214                 * @access private\r
1215                 */\r
1216                 function debugmsg($string)\r
1217                 {\r
1218                         $this->debug_info .= $string."\n";\r
1219                 }\r
1220 \r
1221                 /**\r
1222                 * @access private\r
1223                 */\r
1224                 function xml_header($charset_encoding='')\r
1225                 {\r
1226                         if ($charset_encoding != '')\r
1227                         {\r
1228                                 return "<?xml version=\"1.0\" encoding=\"$charset_encoding\"?" . ">\n";\r
1229                         }\r
1230                         else\r
1231                         {\r
1232                                 return "<?xml version=\"1.0\"?" . ">\n";\r
1233                         }\r
1234                 }\r
1235 \r
1236                 /**\r
1237                 * A debugging routine: just echoes back the input packet as a string value\r
1238                 * DEPRECATED!\r
1239                 */\r
1240                 function echoInput()\r
1241                 {\r
1242                         $r=new xmlrpcresp(new xmlrpcval( "'Aha said I: '" . $GLOBALS['HTTP_RAW_POST_DATA'], 'string'));\r
1243                         print $r->serialize();\r
1244                 }\r
1245         }\r
1246 ?>