database['tables_prefix']; return $prefix . $table; } /** * Returns an array containing the prefixed table names of every passed argument. * * @param string ... The table names to prefix, ie "log_visit" * @return array The prefixed names in an array. */ public static function prefixTables() { $result = array(); foreach (func_get_args() as $table) { $result[] = self::prefixTable($table); } return $result; } /** * Returns the table name, after removing the table prefix * * @param string $table * @return string */ public static function unprefixTable($table) { static $prefixTable = null; if (is_null($prefixTable)) { $prefixTable = Config::getInstance()->database['tables_prefix']; } if (empty($prefixTable) || strpos($table, $prefixTable) !== 0 ) { return $table; } $count = 1; return str_replace($prefixTable, '', $table, $count); } /* * Tracker */ public static function isGoalPluginEnabled() { return PluginsManager::getInstance()->isPluginActivated('Goals'); } /* * String operations */ /** * byte-oriented substr() - ASCII * * @param string $string * @param int $start * @param int ... optional length * @return string */ public static function substr($string, $start) { // in case mbstring overloads substr function $substr = function_exists('mb_orig_substr') ? 'mb_orig_substr' : 'substr'; $length = func_num_args() > 2 ? func_get_arg(2) : self::strlen($string); return $substr($string, $start, $length); } /** * byte-oriented strlen() - ASCII * * @param string $string * @return int */ public static function strlen($string) { // in case mbstring overloads strlen function $strlen = function_exists('mb_orig_strlen') ? 'mb_orig_strlen' : 'strlen'; return $strlen($string); } /** * multi-byte substr() - UTF-8 * * @param string $string * @param int $start * @param int ... optional length * @return string */ public static function mb_substr($string, $start) { $length = func_num_args() > 2 ? func_get_arg(2) : self::mb_strlen($string); if (function_exists('mb_substr')) { return mb_substr($string, $start, $length, 'UTF-8'); } return substr($string, $start, $length); } /** * multi-byte strlen() - UTF-8 * * @param string $string * @return int */ public static function mb_strlen($string) { if (function_exists('mb_strlen')) { return mb_strlen($string, 'UTF-8'); } return strlen($string); } /** * multi-byte strtolower() - UTF-8 * * @param string $string * @return string */ public static function mb_strtolower($string) { if (function_exists('mb_strtolower')) { return mb_strtolower($string, 'UTF-8'); } return strtolower($string); } /* * Escaping input */ /** * Returns the variable after cleaning operations. * NB: The variable still has to be escaped before going into a SQL Query! * * If an array is passed the cleaning is done recursively on all the sub-arrays. * The array's keys are filtered as well! * * How this method works: * - The variable returned has been htmlspecialchars to avoid the XSS security problem. * - The single quotes are not protected so "Piwik's amazing" will still be "Piwik's amazing". * * - Transformations are: * - '&' (ampersand) becomes '&' * - '"'(double quote) becomes '"' * - '<' (less than) becomes '<' * - '>' (greater than) becomes '>' * - It handles the magic_quotes setting. * - A non string value is returned without modification * * @param mixed $value The variable to be cleaned * @param bool $alreadyStripslashed * @throws Exception * @return mixed The variable after cleaning */ public static function sanitizeInputValues($value, $alreadyStripslashed = false) { if (is_numeric($value)) { return $value; } elseif (is_string($value)) { $value = self::sanitizeInputValue($value); if (!$alreadyStripslashed) // a JSON array was already stripslashed, don't do it again for each value { $value = self::undoMagicQuotes($value); } } elseif (is_array($value)) { foreach (array_keys($value) as $key) { $newKey = $key; $newKey = self::sanitizeInputValues($newKey, $alreadyStripslashed); if ($key != $newKey) { $value[$newKey] = $value[$key]; unset($value[$key]); } $value[$newKey] = self::sanitizeInputValues($value[$newKey], $alreadyStripslashed); } } elseif (!is_null($value) && !is_bool($value) ) { throw new Exception("The value to escape has not a supported type. Value = " . var_export($value, true)); } return $value; } /** * Sanitize a single input value * * @param string $value * @return string sanitized input */ public static function sanitizeInputValue($value) { // $_GET and $_REQUEST already urldecode()'d // decode // note: before php 5.2.7, htmlspecialchars() double encodes &#x hex items $value = html_entity_decode($value, self::HTML_ENCODING_QUOTE_STYLE, 'UTF-8'); // filter $value = self::sanitizeLineBreaks($value); // escape $tmp = @htmlspecialchars($value, self::HTML_ENCODING_QUOTE_STYLE, 'UTF-8'); // note: php 5.2.5 and above, htmlspecialchars is destructive if input is not UTF-8 if ($value != '' && $tmp == '') { // convert and escape $value = utf8_encode($value); $tmp = htmlspecialchars($value, self::HTML_ENCODING_QUOTE_STYLE, 'UTF-8'); } return $tmp; } /** * Unsanitize a single input value * * @param string $value * @return string unsanitized input */ public static function unsanitizeInputValue($value) { return htmlspecialchars_decode($value, self::HTML_ENCODING_QUOTE_STYLE); } /** * Unsanitize one or more values. * * @param string|array $value * @return string|array unsanitized input */ public static function unsanitizeInputValues($value) { if (is_array($value)) { $result = array(); foreach ($value as $key => $arrayValue) { $result[$key] = self::unsanitizeInputValues($arrayValue); } return $result; } else { return self::unsanitizeInputValue($value); } } /** * Undo the damage caused by magic_quotes; deprecated in php 5.3 but not removed until php 5.4 * * @param string * @return string modified or not */ private static function undoMagicQuotes($value) { return version_compare(PHP_VERSION, '5.4', '<') && get_magic_quotes_gpc() ? stripslashes($value) : $value; } /** * * @param string * @return string Line breaks and line carriage removed */ public static function sanitizeLineBreaks($value) { $value = str_replace(array("\n", "\r", "\0"), '', $value); return $value; } /** * Returns a sanitized variable value from the $_GET and $_POST superglobal. * If the variable doesn't have a value or an empty value, returns the defaultValue if specified. * If the variable doesn't have neither a value nor a default value provided, an exception is raised. * * @see sanitizeInputValues() for the applied sanitization * * @param string $varName name of the variable * @param string $varDefault default value. If '', and if the type doesn't match, exit() ! * @param string $varType Expected type, the value must be one of the following: array, int, integer, string, json * @param array $requestArrayToUse * * @throws Exception if the variable type is not known * or if the variable we want to read doesn't have neither a value nor a default value specified * * @return mixed The variable after cleaning */ public static function getRequestVar($varName, $varDefault = null, $varType = null, $requestArrayToUse = null) { if (is_null($requestArrayToUse)) { $requestArrayToUse = $_GET + $_POST; } $varDefault = self::sanitizeInputValues($varDefault); if ($varType === 'int') { // settype accepts only integer // 'int' is simply a shortcut for 'integer' $varType = 'integer'; } // there is no value $varName in the REQUEST so we try to use the default value if (empty($varName) || !isset($requestArrayToUse[$varName]) || (!is_array($requestArrayToUse[$varName]) && strlen($requestArrayToUse[$varName]) === 0 ) ) { if (is_null($varDefault)) { throw new Exception("The parameter '$varName' isn't set in the Request, and a default value wasn't provided."); } else { if (!is_null($varType) && in_array($varType, array('string', 'integer', 'array')) ) { settype($varDefault, $varType); } return $varDefault; } } // Normal case, there is a value available in REQUEST for the requested varName: // we deal w/ json differently if ($varType == 'json') { $value = self::undoMagicQuotes($requestArrayToUse[$varName]); $value = self::json_decode($value, $assoc = true); return self::sanitizeInputValues($value, $alreadyStripslashed = true); } $value = self::sanitizeInputValues($requestArrayToUse[$varName]); if (!is_null($varType)) { $ok = false; if ($varType === 'string') { if (is_string($value)) $ok = true; } elseif ($varType === 'integer') { if ($value == (string)(int)$value) $ok = true; } elseif ($varType === 'float') { if ($value == (string)(float)$value) $ok = true; } elseif ($varType === 'array') { if (is_array($value)) $ok = true; } else { throw new Exception("\$varType specified is not known. It should be one of the following: array, int, integer, float, string"); } // The type is not correct if ($ok === false) { if ($varDefault === null) { throw new Exception("The parameter '$varName' doesn't have a correct type, and a default value wasn't provided."); } // we return the default value with the good type set else { settype($varDefault, $varType); return $varDefault; } } settype($value, $varType); } return $value; } /* * Generating unique strings */ /** * Returns a 32 characters long uniq ID * * @return string 32 chars */ public static function generateUniqId() { return md5(uniqid(rand(), true)); } /** * Configureable hash() algorithm (defaults to md5) * * @param string $str String to be hashed * @param bool $raw_output * @return string Hash string */ public static function hash($str, $raw_output = false) { static $hashAlgorithm = null; if (is_null($hashAlgorithm)) { $hashAlgorithm = @Config::getInstance()->General['hash_algorithm']; } if ($hashAlgorithm) { $hash = @hash($hashAlgorithm, $str, $raw_output); if ($hash !== false) return $hash; } return md5($str, $raw_output); } /** * Generate random string * * @param int $length string length * @param string $alphabet characters allowed in random string * @return string random string with given length */ public static function getRandomString($length = 16, $alphabet = "abcdefghijklmnoprstuvwxyz0123456789") { $chars = $alphabet; $str = ''; list($usec, $sec) = explode(" ", microtime()); $seed = ((float)$sec + (float)$usec) * 100000; mt_srand($seed); for ($i = 0; $i < $length; $i++) { $rand_key = mt_rand(0, strlen($chars) - 1); $str .= substr($chars, $rand_key, 1); } return str_shuffle($str); } /* * Conversions */ /** * Convert hexadecimal representation into binary data. * !! Will emit warning if input string is not hex!! * * @see http://php.net/bin2hex * * @param string $str Hexadecimal representation * @return string */ public static function hex2bin($str) { return pack("H*", $str); } /** * This function will convert the input string to the binary representation of the ID * but it will throw an Exception if the specified input ID is not correct * * This is used when building segments containing visitorId which could be an invalid string * therefore throwing Unexpected PHP error [pack(): Type H: illegal hex digit i] severity [E_WARNING] * * It would be simply to silent fail the pack() call above but in all other cases, we don't expect an error, * so better be safe and get the php error when something unexpected is happening * @param string $id * @throws Exception * @return string binary string */ public static function convertVisitorIdToBin($id) { if (strlen($id) !== Tracker::LENGTH_HEX_ID_STRING || @bin2hex(self::hex2bin($id)) != $id ) { throw new Exception("visitorId is expected to be a " . Tracker::LENGTH_HEX_ID_STRING . " hex char string"); } return self::hex2bin($id); } /** * Convert IP address (in network address format) to presentation format. * This is a backward compatibility function for code that only expects * IPv4 addresses (i.e., doesn't support IPv6). * * @see IP::N2P() * * This function does not support the long (or its string representation) * returned by the built-in ip2long() function, from Piwik 1.3 and earlier. * * @deprecated 1.4 * * @param string $ip IP address in network address format * @return string */ public static function long2ip($ip) { return IP::long2ip($ip); } /** * JSON encode wrapper * - missing or broken in some php 5.x versions * * @param mixed $value * @return string */ public static function json_encode($value) { return @json_encode($value); } /** * JSON decode wrapper * - missing or broken in some php 5.x versions * * @param string $json * @param bool $assoc * @return mixed */ public static function json_decode($json, $assoc = false) { return json_decode($json, $assoc); } /* * DataFiles */ /** * Returns list of continent codes * * @see core/DataFiles/Countries.php * * @return array Array of 3 letter continent codes */ public static function getContinentsList() { require_once PIWIK_INCLUDE_PATH . '/core/DataFiles/Countries.php'; $continentsList = $GLOBALS['Piwik_ContinentList']; return $continentsList; } /** * Returns list of valid country codes * * @see core/DataFiles/Countries.php * * @param bool $includeInternalCodes * @return array Array of (2 letter ISO codes => 3 letter continent code) */ public static function getCountriesList($includeInternalCodes = false) { require_once PIWIK_INCLUDE_PATH . '/core/DataFiles/Countries.php'; $countriesList = $GLOBALS['Piwik_CountryList']; $extras = $GLOBALS['Piwik_CountryList_Extras']; if ($includeInternalCodes) { return array_merge($countriesList, $extras); } return $countriesList; } /** * Returns list of valid language codes * * @see core/DataFiles/Languages.php * * @return array Array of 2 letter ISO codes => Language name (in English) */ public static function getLanguagesList() { require_once PIWIK_INCLUDE_PATH . '/core/DataFiles/Languages.php'; $languagesList = $GLOBALS['Piwik_LanguageList']; return $languagesList; } /** * Returns list of language to country mappings * * @see core/DataFiles/LanguageToCountry.php * * @return array Array of ( 2 letter ISO language codes => 2 letter ISO country codes ) */ public static function getLanguageToCountryList() { require_once PIWIK_INCLUDE_PATH . '/core/DataFiles/LanguageToCountry.php'; $languagesList = $GLOBALS['Piwik_LanguageToCountry']; return $languagesList; } /** * Returns list of search engines by URL * * @see core/DataFiles/SearchEngines.php * * @return array Array of ( URL => array( searchEngineName, keywordParameter, path, charset ) ) */ public static function getSearchEngineUrls() { require_once PIWIK_INCLUDE_PATH . '/core/DataFiles/SearchEngines.php'; $searchEngines = $GLOBALS['Piwik_SearchEngines']; return $searchEngines; } /** * Returns list of search engines by name * * @see core/DataFiles/SearchEngines.php * * @return array Array of ( searchEngineName => URL ) */ public static function getSearchEngineNames() { require_once PIWIK_INCLUDE_PATH . '/core/DataFiles/SearchEngines.php'; $searchEngines = $GLOBALS['Piwik_SearchEngines_NameToUrl']; return $searchEngines; } /** * Returns list of provider names * * @see core/DataFiles/Providers.php * * @return array Array of ( dnsName => providerName ) */ public static function getProviderNames() { require_once PIWIK_INCLUDE_PATH . '/core/DataFiles/Providers.php'; $providers = $GLOBALS['Piwik_ProviderNames']; return $providers; } /* * Language, country, continent */ /** * Returns the browser language code, eg. "en-gb,en;q=0.5" * * @param string|null $browserLang Optional browser language, otherwise taken from the request header * @return string */ public static function getBrowserLanguage($browserLang = null) { static $replacementPatterns = array( // extraneous bits of RFC 3282 that we ignore '/(\\\\.)/', // quoted-pairs '/(\s+)/', // CFWcS white space '/(\([^)]*\))/', // CFWS comments '/(;q=[0-9.]+)/', // quality // found in the LANG environment variable '/\.(.*)/', // charset (e.g., en_CA.UTF-8) '/^C$/', // POSIX 'C' locale ); if (is_null($browserLang)) { $browserLang = self::sanitizeInputValues(@$_SERVER['HTTP_ACCEPT_LANGUAGE']); if (empty($browserLang) && SettingsServer::isPhpCliMode()) { $browserLang = @getenv('LANG'); } } if (is_null($browserLang)) { // a fallback might be to infer the language in HTTP_USER_AGENT (i.e., localized build) $browserLang = ""; } else { // language tags are case-insensitive per HTTP/1.1 s3.10 but the region may be capitalized per ISO3166-1; // underscores are not permitted per RFC 4646 or 4647 (which obsolete RFC 1766 and 3066), // but we guard against a bad user agent which naively uses its locale $browserLang = strtolower(str_replace('_', '-', $browserLang)); // filters $browserLang = preg_replace($replacementPatterns, '', $browserLang); $browserLang = preg_replace('/((^|,)chrome:.*)/', '', $browserLang, 1); // Firefox bug $browserLang = preg_replace('/(,)(?:en-securid,)|(?:(^|,)en-securid(,|$))/', '$1', $browserLang, 1); // unregistered language tag $browserLang = str_replace('sr-sp', 'sr-rs', $browserLang); // unofficial (proposed) code in the wild } return $browserLang; } /** * Returns the visitor country based on the Browser 'accepted language' * information, but provides a hook for geolocation via IP address. * * @param string $lang browser lang * @param bool $enableLanguageToCountryGuess If set to true, some assumption will be made and detection guessed more often, but accuracy could be affected * @param string $ip * @return string 2 letter ISO code */ public static function getCountry($lang, $enableLanguageToCountryGuess, $ip) { $country = null; Piwik_PostEvent('Common.getCountry', array(&$country, $ip)); if (!empty($country)) { return strtolower($country); } if (empty($lang) || strlen($lang) < 2 || $lang == 'xx') { return 'xx'; } $validCountries = self::getCountriesList(); return self::extractCountryCodeFromBrowserLanguage($lang, $validCountries, $enableLanguageToCountryGuess); } /** * Returns list of valid country codes * * @param string $browserLanguage * @param array $validCountries Array of valid countries * @param bool $enableLanguageToCountryGuess (if true, will guess country based on language that lacks region information) * @return array Array of 2 letter ISO codes */ public static function extractCountryCodeFromBrowserLanguage($browserLanguage, $validCountries, $enableLanguageToCountryGuess) { $langToCountry = self::getLanguageToCountryList(); if ($enableLanguageToCountryGuess) { if (preg_match('/^([a-z]{2,3})(?:,|;|$)/', $browserLanguage, $matches)) { // match language (without region) to infer the country of origin if (array_key_exists($matches[1], $langToCountry)) { return $langToCountry[$matches[1]]; } } } if (!empty($validCountries) && preg_match_all('/[-]([a-z]{2})/', $browserLanguage, $matches, PREG_SET_ORDER)) { foreach ($matches as $parts) { // match location; we don't make any inferences from the language if (array_key_exists($parts[1], $validCountries)) { return $parts[1]; } } } return 'xx'; } /** * Returns the visitor language based only on the Browser 'accepted language' information * * @param string $browserLanguage Browser's accepted langauge header * @param array $validLanguages array of valid language codes * @return string 2 letter ISO 639 code */ public static function extractLanguageCodeFromBrowserLanguage($browserLanguage, $validLanguages) { // assumes language preference is sorted; // does not handle language-script-region tags or language range (*) if (!empty($validLanguages) && preg_match_all('/(?:^|,)([a-z]{2,3})([-][a-z]{2})?/', $browserLanguage, $matches, PREG_SET_ORDER)) { foreach ($matches as $parts) { if (count($parts) == 3) { // match locale (language and location) if (in_array($parts[1] . $parts[2], $validLanguages)) { return $parts[1] . $parts[2]; } } // match language only (where no region provided) if (in_array($parts[1], $validLanguages)) { return $parts[1]; } } } return 'xx'; } /** * Returns the continent of a given country * * @param string $country 2 letters isocode * * @return string Continent (3 letters code : afr, asi, eur, amn, ams, oce) */ public static function getContinent($country) { $countryList = self::getCountriesList(); if (isset($countryList[$country])) { return $countryList[$country]; } return 'unk'; } /* * Campaign */ /** * Returns the list of Campaign parameter names that will be read to classify * a visit as coming from a Campaign * * @return array array( * 0 => array( ... ) // campaign names parameters * 1 => array( ... ) // campaign keyword parameters * ); */ public static function getCampaignParameters() { $return = array( Config::getInstance()->Tracker['campaign_var_name'], Config::getInstance()->Tracker['campaign_keyword_var_name'], ); foreach ($return as &$list) { if (strpos($list, ',') !== false) { $list = explode(',', $list); } else { $list = array($list); } } array_walk_recursive($return, 'trim'); return $return; } /* * Referrer */ /** * Takes a list of fields defining numeric values and returns the corresponding * unnamed parameters to be bound to the field names in the where clause of a SQL query * * @param array|string $fields array( fieldName1, fieldName2, fieldName3) Names of the mysql table fields to load * @return string "?, ?, ?" */ public static function getSqlStringFieldsArray($fields) { if (is_string($fields)) { $fields = array($fields); } $count = count($fields); if ($count == 0) { return "''"; } return '?' . str_repeat(',?', $count - 1); } /** * Sets outgoing header. * * @param string $header The header. * @param bool $replace Whether to replace existing or not. */ public static function sendHeader($header, $replace = true) { if (isset($GLOBALS['PIWIK_TRACKER_LOCAL_TRACKING']) && $GLOBALS['PIWIK_TRACKER_LOCAL_TRACKING']) { @header($header, $replace); } else { header($header, $replace); } } /** * Returns the ID of the current LocationProvider (see UserCountry plugin code) from * the Tracker cache. */ public static function getCurrentLocationProviderId() { $cache = Cache::getCacheGeneral(); return empty($cache['currentLocationProviderId']) ? DefaultProvider::ID : $cache['currentLocationProviderId']; } /** * Mark orphaned object for garbage collection * * For more information: @link http://dev.piwik.org/trac/ticket/374 * @param $var */ static public function destroy(&$var) { if (is_object($var) && method_exists($var, '__destruct')) { $var->__destruct(); } unset($var); $var = null; } static public function printDebug($info = '') { if (isset($GLOBALS['PIWIK_TRACKER_DEBUG']) && $GLOBALS['PIWIK_TRACKER_DEBUG']) { if (is_array($info) || is_object($info)) { print("
");
                print(htmlspecialchars(var_export($info, true), ENT_QUOTES));
                print("
"); } else { print(htmlspecialchars($info, ENT_QUOTES) . "
\n"); } } } }