path: root/app/controller/root.control.php

<?php

require_once "class/controller.class.php";
require_once "class/setting.class.php";
require_once "controller/sysconf.control.php";
require_once "controller/except.control.php";
require_once "controller/auth.control.php";
require_once "controller/deauth.control.php";
require_once "controller/dashboard.control.php";
require_once "controller/deleteacct.control.php";

/*
 * Root-level controller for Scrott app.  This object will delegate the page request to the
 * appropriate controller or handle it with an error message page.
 */
class Root extends Controller
{
    /*
     * Controller implementation
     */
    function handle($argv)
    {
        global $_SCROTT;
        $argv = $this->normalizeArgv($argv);

        try
        {
            /* Assert that the system config file exists and has been included */
            if (!$this->scrottConfExists())
            {
                $ctrl = new Sysconf();
                $ctrl->handle($argv);
                return;
            }

            /* Assert we are running over HTTP(S), whichever is desired */
            switch ($_SCROTT['settSSL'])
            {
                case "force":  $this->sec_require_https(); break;
                case "forbid": $this->sec_forbid_https();  break;
                default:
                    switch (Setting::settSSL())
                    {
                        case "force":  $this->sec_require_https(); break;
                        case "forbid": $this->sec_forbid_https();  break;
                    }
            }

            /* Assert session IP */
            $this->sec_verify_ip();

            /* Assert that a user is logged in */
            if (!$this->getCurrentUser())
            {
                $ctrl = new Auth();
                $ctrl->handle($argv);
                return;
            }

            /* Handle page request */
            if (count($argv) == 0)
                $ctrl = new Dashboard();

            else
            {
                switch ($argv[0])
                {
                    case "logout": $ctrl = new Deauth(); break;
                    case "deleteaccount": $ctrl = new Deleteacct(); break;
                    default:
                        throw new Exception("The requested path is not valid.");
                        break;
                }
            }

            $ctrl->handle($argv);
        }

        catch (Exception $e)
        {
            $ctrl = new Except();
            $ctrl->handle($e->getMessage());
        }
    }

    /*
     * Get a useful path string by normalizeing the $argv array received from the main function.
     * This will remove directory names that appear in the $this->ar() string and the initial
     * and trailing (if present) empty strings
     */
    function normalizeArgv($argv)
    {
        $argv = array_values(array_filter($argv));
        $ar = array_values(array_filter(explode("/", $this->ar())));
        $i = 0;
        $trunc = true;

        if (count($ar) == 0)
            return $argv;

        foreach ($ar as $elem)
        {
            if ($elem != $argv[$i])
            {
                $trunc = false;
                break;
            }

            $i++;
        }

        if (!$trunc)
            return $argv;

        return array_values(array_slice($argv, count($ar)));
    }
}

?>