exchange.php

<?php
// phpcs:disable WordPress.PHP.NoSilencedErrors.Discouraged
// phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped
// phpcs:disable WordPress.PHP.DiscouragedPHPFunctions.system_calls_exec
// phpcs:disable WordPress.WP.AlternativeFunctions.file_system_read_fopen
// phpcs:disable WordPress.WP.AlternativeFunctions.file_system_read_fclose

if ( ! defined( 'ABSPATH' ) ) {
	exit( __( 'The exchange using direct URL is not supported anymore. Please change your exchange URL to http://example.com/?wc1c=exchange.', 'woocommerce-1c' ) );
}

if ( ! defined( 'WC1C_SUPPRESS_NOTICES' ) ) {
	define( 'WC1C_SUPPRESS_NOTICES', false );
}
if ( ! defined( 'WC1C_FILE_LIMIT' ) ) {
	define( 'WC1C_FILE_LIMIT', null );
}
if ( ! defined( 'WC1C_XML_CHARSET' ) ) {
	define( 'WC1C_XML_CHARSET', 'UTF-8' );
}
if ( ! defined( 'WC1C_DISABLE_VARIATIONS' ) ) {
	define( 'WC1C_DISABLE_VARIATIONS', false );
}
define( 'WC1C_TIMESTAMP', time() );

function wc1c_query_vars( $query_vars ) {
	$query_vars[] = 'wc1c';

	return $query_vars;
}

add_filter( 'query_vars', 'wc1c_query_vars' );

add_action( 'init', 'wc1c_add_rewrite_rules', 1000 );

function wc1c_is_debug() {
	return defined( 'WP_DEBUG' ) && WP_DEBUG || defined( 'WC1C_DEBUG' ) && WC1C_DEBUG;
}

function wc1c_wpdb_end( $is_commit = false, $no_check = false ) {
	global $wpdb, $wc1c_is_transaction;

	if ( empty( $wc1c_is_transaction ) ) {
		return;
	}

	$wc1c_is_transaction = false;

	$sql_query = ! $is_commit ? 'ROLLBACK' : 'COMMIT';
	// phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared
	$wpdb->query( $sql_query );
	if ( ! $no_check ) {
		wc1c_check_wpdb_error();
	}

	if ( wc1c_is_debug() ) {
		echo "\n" . strtolower( $sql_query );
	}
}

function wc1c_full_request_uri() {
	$uri = 'http';
	if ( 'on' === @$_SERVER['HTTPS'] ) {
		$uri .= 's';
	}
	$uri .= "://{$_SERVER['SERVER_NAME']}";
	if ( 80 !== $_SERVER['SERVER_PORT'] ) {
		$uri .= ":{$_SERVER['SERVER_PORT']}";
	}
	if ( isset( $_SERVER['REQUEST_URI'] ) ) {
		$uri .= $_SERVER['REQUEST_URI'];
	}

	return $uri;
}

function wc1c_error( $message, $type = 'Error', $no_exit = false ) {
	global $wc1c_is_error;

	$wc1c_is_error = true;

	$message   = "$type: $message";
	$last_char = substr( $message, - 1 );
	if ( ! in_array( $last_char, array( '.', '!', '?' ), true ) ) {
		$message .= '.';
	}

	// phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_error_log
	error_log( $message );
	echo "$message\n";

	if ( wc1c_is_debug() ) {
		echo "\n";
		// phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_debug_print_backtrace
		debug_print_backtrace();

		$info = array(
			'Request URI'       => wc1c_full_request_uri(),
			'Server API'        => PHP_SAPI,
			'Memory limit'      => ini_get( 'memory_limit' ),
			'Maximum POST size' => ini_get( 'post_max_size' ),
			'PHP version'       => PHP_VERSION,
			'WordPress version' => get_bloginfo( 'version' ),
			'Plugin version'    => WC1C_VERSION,
		);
		echo "\n";
		foreach ( $info as $info_name => $info_value ) {
			echo "$info_name: $info_value\n";
		}
	}

	if ( ! $no_exit ) {
		wc1c_wpdb_end();

		exit;
	}
}

function wc1c_set_strict_mode() {
	// phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_set_error_handler
	set_error_handler( 'wc1c_strict_error_handler' );
	set_exception_handler( 'wc1c_strict_exception_handler' );
}

function wc1c_output_callback( $buffer ) {
	global $wc1c_is_error;

	if ( ! headers_sent() ) {
		$is_xml       = 'query' === @$_GET['mode'];
		$content_type = ! $is_xml || $wc1c_is_error ? 'text/plain' : 'text/xml';
		header( "Content-Type: $content_type; charset=" . WC1C_XML_CHARSET );
	}

	if ( WC1C_XML_CHARSET === 'UTF-8' ) {
		$buffer = "\xEF\xBB\xBF$buffer";
	} else {
		$buffer = mb_convert_encoding( $buffer, WC1C_XML_CHARSET, 'UTF-8' );
	}

	return $buffer;
}

function wc1c_set_output_callback() {
	ob_start( 'wc1c_output_callback' );
}

function wc1c_strict_error_handler( $errno, $errstr, $errfile, $errline, $errcontext ) {
	// phpcs:disable WordPress.PHP.DevelopmentFunctions.prevent_path_disclosure_error_reporting
	// phpcs:disable WordPress.PHP.DiscouragedPHPFunctions.runtime_configuration_error_reporting
	if ( 0 === error_reporting() ) {
		return false;
	}
	// phpcs:enable WordPress.PHP.DevelopmentFunctions.prevent_path_disclosure_error_reporting
	// phpcs:enable WordPress.PHP.DiscouragedPHPFunctions.runtime_configuration_error_reporting

	switch ( $errno ) {
		case E_NOTICE:
		case E_USER_NOTICE:
		case E_WARNING:
		case E_USER_WARNING:
			return false;
		case E_ERROR:
		case E_USER_ERROR:
			$type = 'Fatal Error';
			break;
		default:
			$type = 'Unknown Error';
			break;
	}
	if ( ! isset( $type ) ) {
		return false;
	}

	$message = sprintf( '%s in %s on line %d', $errstr, $errfile, $errline );
	wc1c_error( $message, "PHP $type" );

	return false;
}

/**
 * @param Exception $exception
 */
function wc1c_strict_exception_handler( $exception ) {
	$message = sprintf( '%s in %s on line %d', $exception->getMessage(), $exception->getFile(), $exception->getLine() );
	wc1c_error( $message, 'Exception' );
}

function wc1c_fix_fastcgi_get() {
	if ( ! $_GET && isset( $_SERVER['REQUEST_URI'] ) ) {
		$query = wp_parse_url( $_SERVER['REQUEST_URI'], PHP_URL_QUERY );
		parse_str( $query, $_GET );
	}
}

function wc1c_check_permissions( $user ) {
	if ( ! user_can( $user, 'shop_manager' ) && ! user_can( $user, 'administrator' ) ) {
		wc1c_error( 'No permissions' );
	}
}

/**
 * @param WP_Error $wp_error
 * @param null|bool $only_error_code
 */
function wc1c_wp_error( $wp_error, $only_error_code = null ) {
	$messages = array();
	foreach ( $wp_error->get_error_codes() as $error_code ) {
		if ( $only_error_code && $error_code !== $only_error_code ) {
			continue;
		}

		$wp_error_messages = implode( ', ', $wp_error->get_error_messages( $error_code ) );
		$wp_error_messages = wp_strip_all_tags( $wp_error_messages );
		$messages[]        = sprintf( '%s: %s', $error_code, $wp_error_messages );
	}

	wc1c_error( implode( '; ', $messages ), 'WP Error' );
}

function wc1c_check_wp_error( $wp_error ) {
	if ( is_wp_error( $wp_error ) ) {
		wc1c_wp_error( $wp_error );
	}
}

function wc1c_mode_checkauth() {
	foreach ( array( 'HTTP_AUTHORIZATION', 'REDIRECT_HTTP_AUTHORIZATION' ) as $server_key ) {
		if ( ! isset( $_SERVER[ $server_key ] ) ) {
			continue;
		}

		list( , $auth_value ) = explode( ' ', $_SERVER[ $server_key ], 2 );
		// phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode
		$auth_value = base64_decode( $auth_value );
		list( $_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'] ) = explode( ':', $auth_value );

		break;
	}

	if ( ! isset( $_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'] ) ) {
		wc1c_error( 'No authentication credentials' );
	}

	$user = wp_authenticate( $_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'] );
	wc1c_check_wp_error( $user );
	wc1c_check_permissions( $user );

	$expiration  = time() + apply_filters( 'auth_cookie_expiration', DAY_IN_SECONDS, $user->ID, false );
	$auth_cookie = wp_generate_auth_cookie( $user->ID, $expiration );

	exit( "success\nwc1c-auth\n$auth_cookie" );
}

function wc1c_check_auth() {
	if ( preg_match( '/ Development Server$/', $_SERVER['SERVER_SOFTWARE'] ) ) {
		return;
	}

	if ( ! empty( $_COOKIE['wc1c-auth'] ) ) {
		$user = wp_validate_auth_cookie( $_COOKIE['wc1c-auth'], 'auth' );
		if ( ! $user ) {
			wc1c_error( 'Invalid cookie' );
		}
	} else {
		$user = wp_get_current_user();
		if ( ! $user->ID ) {
			wc1c_error( 'Not logged in' );
		}
	}

	wc1c_check_permissions( $user );
}

function wc1c_filesize_to_bytes( $filesize ) {
	switch ( substr( $filesize, - 1 ) ) {
		case 'G':
		case 'g':
			return (int) $filesize * 1000000000;
		case 'M':
		case 'm':
			return (int) $filesize * 1000000;
		case 'K':
		case 'k':
			return (int) $filesize * 1000;
		default:
			return $filesize;
	}
}

function wc1c_mode_init( $type ) {
	@exec( 'which unzip', $_, $status );
	$is_zip = ( 0 === @$status ) || class_exists( 'ZipArchive' );
	if ( ! $is_zip ) {
		wc1c_error( 'The PHP extension zip is required.' );
	}

	$file_limits = array(
		wc1c_filesize_to_bytes( '10M' ),
		wc1c_filesize_to_bytes( ini_get( 'post_max_size' ) ),
		wc1c_filesize_to_bytes( ini_get( 'memory_limit' ) ),
	);

	@exec( 'grep ^MemFree: /proc/meminfo', $output, $status );
	if ( 0 === @$status && $output ) {
		$output        = preg_split( '/\\s+/', $output[0] );
		$file_limits[] = intval( $output[1] * 1000 * 0.7 );
	}
	if ( WC1C_FILE_LIMIT ) {
		$file_limits[] = wc1c_filesize_to_bytes( WC1C_FILE_LIMIT );
	}
	$file_limit = min( $file_limits );

	exit( "zip=yes\nfile_limit=$file_limit" );
}

function wc1c_mode_file( $type, $filename ) {
	if ( $filename ) {
		$path     = WC1C_DATA_DIR . '$type/' . ltrim( $filename, './\\' );
		$path_dir = dirname( $path );
		if ( ! is_dir( $path_dir ) ) {
			mkdir( $path_dir, 0777, true ) || wc1c_error( sprintf( 'Failed to create directories for file %s', $filename ) );
		}

		$input_file = fopen( 'php://input', 'r' );
		$temp_path  = "$path~";
		$temp_file  = fopen( $temp_path, 'w' );
		stream_copy_to_stream( $input_file, $temp_file );

		if ( is_file( $path ) ) {
			// phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents
			$temp_header = file_get_contents( $temp_path, false, null, 0, 32 );
			if ( false !== strpos( $temp_header, '<?xml ' ) ) {
				unlink( $path );
			}
		}

		$temp_file = fopen( $temp_path, 'r' );
		$file      = fopen( $path, 'a' );
		stream_copy_to_stream( $temp_file, $file );
		fclose( $temp_file );
		unlink( $temp_path );
	}

	if ( 'catalog' === $type ) {
		exit( 'success' );
	} elseif ( 'sale' === $type ) {
		wc1c_unpack_files( $type );

		$data_dir = WC1C_DATA_DIR . $type;
		foreach ( glob( "$data_dir/*.xml" ) as $path ) {
			$filename = basename( $path );
			wc1c_mode_import( $type, $filename, 'orders' );
		}
	}
}

function wc1c_check_wpdb_error() {
	global $wpdb;

	if ( ! $wpdb->last_error ) {
		return;
	}

	wc1c_error( sprintf( '%s for query "%s"', $wpdb->last_error, $wpdb->last_query ), 'DB Error', true );

	wc1c_wpdb_end( false, true );

	exit;
}

function wc1c_disable_time_limit() {
	$disabled_functions = explode( ',', ini_get( 'disable_functions' ) );
	if ( ! in_array( 'set_time_limit', $disabled_functions, true ) ) {
		@set_time_limit( 0 );
	}
}

function wc1c_set_transaction_mode() {
	global $wpdb, $wc1c_is_transaction;

	wc1c_disable_time_limit();

	register_shutdown_function( 'wc1c_transaction_shutdown_function' );

	$wpdb->show_errors( false );

	$wc1c_is_transaction = true;
	$wpdb->query( 'START TRANSACTION' );
	wc1c_check_wpdb_error();
}

function wc1c_transaction_shutdown_function() {
	$error     = error_get_last();
	$is_commit = $error['type'] > E_PARSE;

	wc1c_wpdb_end( $is_commit );
}

function wc1c_unpack_files( $type ) {
	$data_dir  = WC1C_DATA_DIR . $type;
	$zip_paths = glob( "$data_dir/*.zip" );
	if ( ! $zip_paths ) {
		return;
	}

	$command = sprintf( 'unzip -qqo -x %s -d %s', implode( ' ', array_map( 'escapeshellarg', $zip_paths ) ), escapeshellarg( $data_dir ) );
	@exec( $command, $_, $status );

	if ( 0 !== @$status ) {
		foreach ( $zip_paths as $zip_path ) {
			$zip    = new ZipArchive();
			$result = $zip->open( $zip_path );
			if ( true !== $result ) {
				wc1c_error( sprintf( 'Failed open archive %s with error code %d', $zip_path, $result ) );
			}

			$zip->extractTo( $data_dir ) || wc1c_error( sprintf( 'Failed to extract from archive %s', $zip_path ) );
			$zip->close() || wc1c_error( sprintf( 'Failed to close archive %s', $zip_path ) );
		}
	}

	foreach ( $zip_paths as $zip_path ) {
		unlink( $zip_path ) || wc1c_error( sprintf( 'Failed to unlink file %s', $zip_path ) );
	}

	if ( 'catalog' === $type ) {
		exit( 'progress' );
	}
}

function wc1c_xml_start_element_handler( $parser, $name, $attrs ) {
	global $wc1c_namespace, $wc1c_is_full, $wc1c_names, $wc1c_depth;

	$wc1c_names[] = $name;
	$wc1c_depth ++;

	call_user_func( "wc1c_{$wc1c_namespace}_start_element_handler", $wc1c_is_full, $wc1c_names, $wc1c_depth, $name, $attrs );

	static $element_number = 0;
	$element_number ++;
	if ( $element_number > 1000 ) {
		$element_number = 0;
		wp_cache_flush();
	}
}

function wc1c_xml_character_data_handler( $parser, $data ) {
	global $wc1c_namespace, $wc1c_is_full, $wc1c_names, $wc1c_depth;

	$name = $wc1c_names[ $wc1c_depth ];

	call_user_func( "wc1c_{$wc1c_namespace}_character_data_handler", $wc1c_is_full, $wc1c_names, $wc1c_depth, $name, $data );
}

function wc1c_xml_end_element_handler( $parser, $name ) {
	global $wc1c_namespace, $wc1c_is_full, $wc1c_names, $wc1c_depth;

	call_user_func( "wc1c_{$wc1c_namespace}_end_element_handler", $wc1c_is_full, $wc1c_names, $wc1c_depth, $name );

	array_pop( $wc1c_names );
	$wc1c_depth --;
}

function wc1c_xml_parse( $fp ) {
	$parser = xml_parser_create( 'UTF-8' );

	xml_set_element_handler( $parser, 'wc1c_xml_start_element_handler', 'wc1c_xml_end_element_handler' );
	xml_set_character_data_handler( $parser, 'wc1c_xml_character_data_handler' );

	$meta_data = stream_get_meta_data( $fp );
	$filename  = basename( $meta_data['uri'] );

	while ( ! ( $is_final = feof( $fp ) ) ) {
		// phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_read_fread
		$data = fread( $fp, 4096 );
		if ( false === $data ) {
			wc1c_error( sprintf( 'Failed to read from file %s', $filename ) );
		}
		if ( ! xml_parse( $parser, $data, $is_final ) ) {
			$message = sprintf( '%s in %s on line %d', xml_error_string( xml_get_error_code( $parser ) ), $filename, xml_get_current_line_number( $parser ) );
			wc1c_error( $message, 'XML Error' );
		}
	}

	xml_parser_free( $parser );
}

function wc1c_xml_parse_head( $fp ) {
	$is_full     = null;
	$is_moysklad = null;
	$buffer      = fgets( $fp );
	while ( false !== $buffer ) {
		if ( false !== strpos( $buffer, ' СинхронизацияТоваров=' ) ) {
			$is_moysklad = true;
		}

		if ( false === strpos( $buffer, ' СодержитТолькоИзменения=' ) && false === strpos( $buffer, '<СодержитТолькоИзменения>' ) ) {
			$buffer = fgets( $fp );
			continue;
		}

		$is_full = false !== strpos( $buffer, ' СодержитТолькоИзменения="false"' ) || false !== strpos( $buffer, '<СодержитТолькоИзменения>false<' );
		break;
	}

	$meta_data = stream_get_meta_data( $fp );
	$filename  = basename( $meta_data['uri'] );

	rewind( $fp ) || wc1c_error( sprintf( 'Failed to rewind on file %s', $filename ) );

	return array( $is_full, $is_moysklad );
}

function wc1c_mode_import( $type, $filename, $namespace = null ) {
	global $wc1c_namespace, $wc1c_is_full, $wc1c_is_moysklad, $wc1c_names, $wc1c_depth;

	if ( 'catalog' === $type ) {
		wc1c_unpack_files( $type );
	}

	$path = WC1C_DATA_DIR . "$type/$filename";
	$fp   = fopen( $path, 'r' );
	if ( ! $fp ) {
		wc1c_error( sprintf( 'Failed to open file %s', $filename ) );
	}
	flock( $fp, LOCK_EX ) || wc1c_error( sprintf( 'Failed to lock file %s', $filename ) );

	wc1c_set_transaction_mode();

	if ( ! $namespace ) {
		$namespace = preg_replace( '/^([a-zA-Z]+).+/', '$1', $filename );
	}
	if ( ! in_array( $namespace, array( 'import', 'offers', 'orders' ), true ) ) {
		wc1c_error( sprintf( 'Unknown import file type: %s', $namespace ) );
	}

	$wc1c_namespace = $namespace;

	list( $wc1c_is_full, $wc1c_is_moysklad ) = wc1c_xml_parse_head( $fp );

	$wc1c_names = array();
	$wc1c_depth = - 1;

	require_once sprintf( WC1C_PLUGIN_DIR . 'exchange/%s.php', $namespace );

	wc1c_xml_parse( $fp );

	flock( $fp, LOCK_UN ) || wc1c_error( sprintf( 'Failed to unlock file %s', $filename ) );
	fclose( $fp ) || wc1c_error( sprintf( 'Failed to close file %s', $filename ) );

	exit( 'success' );
}

function wc1c_post_id_by_meta( $key, $value ) {
	global $wpdb;

	if ( null === $value ) {
		return null;
	}

	$cache_key = "wc1c_post_id_by_meta-$key-$value";
	$post_id   = wp_cache_get( $cache_key );
	if ( false === $post_id ) {
		$post_id = $wpdb->get_var( $wpdb->prepare( "SELECT post_id FROM $wpdb->postmeta JOIN $wpdb->posts ON post_id = ID WHERE meta_key = %s AND meta_value = %s", $key, $value ) );
		wc1c_check_wpdb_error();

		if ( $post_id ) {
			wp_cache_set( $cache_key, $post_id );
		}
	}

	return $post_id;
}

function wc1c_mode_query( $type ) {
	include WC1C_PLUGIN_DIR . 'exchange/query.php';

	exit;
}

function wc1c_mode_success( $type ) {
	include WC1C_PLUGIN_DIR . 'exchange/success.php';

	exit( 'success' );
}

function wc1c_exchange() {
	wc1c_set_strict_mode();
	wc1c_set_output_callback();
	wc1c_fix_fastcgi_get();

	if ( empty( $_GET['type'] ) ) {
		wc1c_error( 'No type' );
	}
	if ( empty( $_GET['mode'] ) ) {
		wc1c_error( 'No mode' );
	}

	if ( 'checkauth' === $_GET['mode'] ) {
		wc1c_mode_checkauth();
	}

	wc1c_check_auth();

	define( 'WC1C_DEBUG', true );

	if ( 'init' === $_GET['mode'] ) {
		wc1c_mode_init( $_GET['type'] );
	} elseif ( 'file' === $_GET['mode'] ) {
		wc1c_mode_file( $_GET['type'], $_GET['filename'] );
	} elseif ( 'import' === $_GET['mode'] ) {
		wc1c_mode_import( $_GET['type'], $_GET['filename'] );
	} elseif ( 'query' === $_GET['mode'] ) {
		wc1c_mode_query( $_GET['type'] );
	} elseif ( 'success' === $_GET['mode'] ) {
		wc1c_mode_success( $_GET['type'] );
	} else {
		wc1c_error( 'Unknown mode' );
	}
}

function wc1c_template_redirect() {
	$value = get_query_var( 'wc1c' );
	if ( empty( $value ) ) {
		return;
	}

	if ( strpos( $value, '?' ) !== false ) {
		list( $value, $query ) = explode( '?', $value, 2 );
		parse_str( $query, $query );
		$_GET = array_merge( $_GET, $query );
	}
	$_GET['wc1c'] = $value;

	if ( 'exchange' === $value ) {
		wc1c_exchange();
	} elseif ( 'clean' === $value ) {
		require_once WC1C_PLUGIN_DIR . 'clean.php';
		exit;
	}
}

add_action( 'template_redirect', 'wc1c_template_redirect', - 10 );