Gecko [ dp-client.com ]

Name	Size	Permission
API	[ DIR ]	drwxr-xr-x
Access	[ DIR ]	drwxr-xr-x
Application	[ DIR ]	drwxr-xr-x
Archive	[ DIR ]	drwxr-xr-x
ArchiveProcessor	[ DIR ]	drwxr-xr-x
Archiver	[ DIR ]	drwxr-xr-x
AssetManager	[ DIR ]	drwxr-xr-x
Auth	[ DIR ]	drwxr-xr-x
Category	[ DIR ]	drwxr-xr-x
Changes	[ DIR ]	drwxr-xr-x
CliMulti	[ DIR ]	drwxr-xr-x
Columns	[ DIR ]	drwxr-xr-x
Concurrency	[ DIR ]	drwxr-xr-x
Config	[ DIR ]	drwxr-xr-x
Container	[ DIR ]	drwxr-xr-x
CronArchive	[ DIR ]	drwxr-xr-x
DataAccess	[ DIR ]	drwxr-xr-x
DataFiles	[ DIR ]	drwxr-xr-x
DataTable	[ DIR ]	drwxr-xr-x
Db	[ DIR ]	drwxr-xr-x
DeviceDetector	[ DIR ]	drwxr-xr-x
Email	[ DIR ]	drwxr-xr-x
Exception	[ DIR ]	drwxr-xr-x
Http	[ DIR ]	drwxr-xr-x
Intl	[ DIR ]	drwxr-xr-x
Mail	[ DIR ]	drwxr-xr-x
Measurable	[ DIR ]	drwxr-xr-x
Menu	[ DIR ]	drwxr-xr-x
Metrics	[ DIR ]	drwxr-xr-x
Notification	[ DIR ]	drwxr-xr-x
Period	[ DIR ]	drwxr-xr-x
Plugin	[ DIR ]	drwxr-xr-x
ProfessionalServices	[ DIR ]	drwxr-xr-x
Report	[ DIR ]	drwxr-xr-x
ReportRenderer	[ DIR ]	drwxr-xr-x
Scheduler	[ DIR ]	drwxr-xr-x
Segment	[ DIR ]	drwxr-xr-x
Session	[ DIR ]	drwxr-xr-x
Settings	[ DIR ]	drwxr-xr-x
Tracker	[ DIR ]	drwxr-xr-x
Translation	[ DIR ]	drwxr-xr-x
UpdateCheck	[ DIR ]	drwxr-xr-x
Updater	[ DIR ]	drwxr-xr-x
Updates	[ DIR ]	drwxr-xr-x
Validators	[ DIR ]	drwxr-xr-x
View	[ DIR ]	drwxr-xr-x
ViewDataTable	[ DIR ]	drwxr-xr-x
Visualization	[ DIR ]	drwxr-xr-x
Widget	[ DIR ]	drwxr-xr-x
.htaccess	545 B	-rw-r--r--
Access.php	24.89 KB	-rw-r--r--
Archive.php	35.4 KB	-rw-r--r--
ArchiveProcessor.php	26.97 KB	-rw-r--r--
AssetManager.php	15.48 KB	-rw-r--r--
Auth.php	4.03 KB	-rw-r--r--
AuthResult.php	2.13 KB	-rw-r--r--
BaseFactory.php	1.77 KB	-rw-r--r--
Cache.php	3.51 KB	-rw-r--r--
CacheId.php	2.53 KB	-rw-r--r--
CliMulti.php	14.98 KB	-rw-r--r--
Common.php	39.79 KB	-rw-r--r--
Config.php	14.69 KB	-rw-r--r--
Console.php	10.09 KB	-rw-r--r--
Context.php	3.42 KB	-rw-r--r--
Cookie.php	15.12 KB	-rw-r--r--
CronArchive.php	50.69 KB	-rw-r--r--
DataArray.php	17.97 KB	-rw-r--r--
DataTable.php	69.61 KB	-rw-r--r--
Date.php	35.04 KB	-rw-r--r--
Db.php	29.43 KB	-rw-r--r--
DbHelper.php	10.84 KB	-rw-r--r--
Development.php	6.67 KB	-rw-r--r--
ErrorHandler.php	7.55 KB	-rw-r--r--
EventDispatcher.php	6.79 KB	-rw-r--r--
ExceptionHandler.php	7.06 KB	-rw-r--r--
FileIntegrity.php	15.8 KB	-rw-r--r--
Filechecks.php	8.79 KB	-rw-r--r--
Filesystem.php	18.74 KB	-rw-r--r--
FrontController.php	29.31 KB	-rw-r--r--
Http.php	44.42 KB	-rw-r--r--
IP.php	5.08 KB	-rw-r--r--
Log.php	8.14 KB	-rw-r--r--
LogDeleter.php	3.81 KB	-rw-r--r--
Mail.php	9.32 KB	-rw-r--r--
Metrics.php	20.76 KB	-rw-r--r--
NoAccessException.php	398 B	-rw-r--r--
Nonce.php	8.25 KB	-rw-r--r--
Notification.php	5.72 KB	-rw-r--r--
NumberFormatter.php	10 KB	-rw-r--r--
Option.php	8.25 KB	-rw-r--r--
Period.php	13.52 KB	-rw-r--r--
Piwik.php	27.95 KB	-rw-r--r--
Plugin.php	21.52 KB	-rw-r--r--
Profiler.php	13.32 KB	-rw-r--r--
ProxyHeaders.php	2.16 KB	-rw-r--r--
ProxyHttp.php	11.94 KB	-rw-r--r--
QuickForm2.php	3.94 KB	-rw-r--r--
RankingQuery.php	13.06 KB	-rw-r--r--
ReportRenderer.php	8.59 KB	-rw-r--r--
Segment.php	24.24 KB	-rw-r--r--
Sequence.php	3.11 KB	-rw-r--r--
Session.php	8.04 KB	-rw-r--r--
SettingsPiwik.php	18.07 KB	-rw-r--r--
SettingsServer.php	7.58 KB	-rw-r--r--
Singleton.php	1.46 KB	-rw-r--r--
Site.php	17.86 KB	-rw-r--r--
SiteContentDetector.php	14.22 KB	-rw-r--r--
SupportedBrowser.php	2.25 KB	-rw-r--r--
TCPDF.php	1.87 KB	-rw-r--r--
Theme.php	4.93 KB	-rw-r--r--
Timer.php	2.57 KB	-rw-r--r--
Tracker.php	11.79 KB	-rw-r--r--
Twig.php	19.74 KB	-rw-r--r--
Unzip.php	1.28 KB	-rw-r--r--
UpdateCheck.php	3.34 KB	-rw-r--r--
Updater.php	25.08 KB	-rw-r--r--
UpdaterErrorException.php	304 B	-rw-r--r--
Updates.php	3.86 KB	-rw-r--r--
Url.php	25.67 KB	-rw-r--r--
UrlHelper.php	11.24 KB	-rw-r--r--
Version.php	806 B	-rw-r--r--
View.php	18.2 KB	-rw-r--r--
bootstrap.php	2.03 KB	-rw-r--r--
dispatch.php	928 B	-rw-r--r--
testMinimumPhpVersion.php	10.82 KB	-rw-r--r--

Code Editor : Session.php

<?php
/**
 * Matomo - free/libre analytics platform
 *
 * @link https://matomo.org
 * @license http://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
 *
 */
namespace Piwik;

use Exception;
use Piwik\Container\StaticContainer;
use Piwik\Exception\MissingFilePermissionException;
use Piwik\Plugins\Overlay\Overlay;
use Piwik\Session\SaveHandler\DbTable;
use Psr\Log\LoggerInterface;
use Zend_Session;

/**
 * Session initialization.
 */
class Session extends Zend_Session
{
    const SESSION_NAME = 'MATOMO_SESSID';

public static $sessionName = self::SESSION_NAME;

protected static $sessionStarted = false;

/**
     * Start the session
     *
     * @param array|bool $options An array of configuration options; the auto-start (bool) setting is ignored
     * @return void
     * @throws Exception if starting a session fails
     */
    public static function start($options = false)
    {
        if (headers_sent()
            || self::$sessionStarted
            || (defined('PIWIK_ENABLE_SESSION_START') && !PIWIK_ENABLE_SESSION_START)
            || session_status() == PHP_SESSION_ACTIVE
        ) {
            return;
        }
        self::$sessionStarted = true;

if (defined('PIWIK_SESSION_NAME')) {
            self::$sessionName = PIWIK_SESSION_NAME;
        }

$config = Config::getInstance();

// use cookies to store session id on the client side
        @ini_set('session.use_cookies', '1');

// prevent attacks involving session ids passed in URLs
        @ini_set('session.use_only_cookies', '1');

// advise browser that session cookie should only be sent over secure connection
        if (ProxyHttp::isHttps()) {
            @ini_set('session.cookie_secure', '1');
        }

// advise browser that session cookie should only be accessible through the HTTP protocol (i.e., not JavaScript)
        @ini_set('session.cookie_httponly', '1');

// don't use the default: PHPSESSID
        @ini_set('session.name', self::$sessionName);

// proxies may cause the referer check to fail and
        // incorrectly invalidate the session
        @ini_set('session.referer_check', '');

// to preserve previous behavior matomo_auth provided when it contained a token_auth, we ensure
        // the session data won't be deleted until the cookie expires.
        @ini_set('session.gc_maxlifetime', $config->General['login_cookie_expire']);

@ini_set('session.cookie_path', empty($config->General['login_cookie_path']) ? '/' : $config->General['login_cookie_path']);

$currentSaveHandler = ini_get('session.save_handler');

if (!SettingsPiwik::isMatomoInstalled()) {
            // Note: this handler doesn't work well in load-balanced environments and may have a concurrency issue with locked session files

// for "files", use our own folder to prevent local session file hijacking
            $sessionPath = self::getSessionsDirectory();
            // We always call mkdir since it also chmods the directory which might help when permissions were reverted for some reasons
            Filesystem::mkdir($sessionPath);

@ini_set('session.save_handler', 'files');
            @ini_set('session.save_path', $sessionPath);
        } else {
            // as of Matomo 3.7.0 we only support files session handler during installation

// We consider these to be misconfigurations, in that:
            // - user  - we can't verify that user-defined session handler functions have already been set via session_set_save_handler()
            // - mm    - this handler is not recommended, unsupported, not available for Windows, and has a potential concurrency issue

if (@ini_get('session.serialize_handler') !== 'php_serialize') {
                @ini_set('session.serialize_handler', 'php_serialize');
            }

$config = self::getDbTableConfig();

$saveHandler = new DbTable($config);
            if ($saveHandler) {
                self::setSaveHandler($saveHandler);
            }
        }

// set garbage collection according to user preferences (on by default)
        @ini_set('session.gc_probability', Config::getInstance()->General['session_gc_probability']);

try {
            parent::start();
            register_shutdown_function(array('Zend_Session', 'writeClose'), true);
        } catch (Exception $e) {
            StaticContainer::get(LoggerInterface::class)->error('Unable to start session: {exception}', [
                'exception' => $e,
                'ignoreInScreenWriter' => true,
            ]);

if (SettingsPiwik::isMatomoInstalled()) {
                $pathToSessions = '';
            } else {
                $pathToSessions = Filechecks::getErrorMessageMissingPermissions(self::getSessionsDirectory());
            }

$message = sprintf("Error: %s %s\n<pre>Debug: the original error was \n%s</pre>",
                Piwik::translate('General_ExceptionUnableToStartSession'),
                $pathToSessions,
                $e->getMessage()
            );

$ex = new MissingFilePermissionException($message, $e->getCode(), $e);
            $ex->setIsHtmlMessage();

throw $ex;
        }
    }

/**
     * Returns the directory session files are stored in.
     *
     * @return string
     */
    public static function getSessionsDirectory()
    {
        return StaticContainer::get('path.tmp') . '/sessions';
    }

public static function close()
    {
        if (self::isSessionStarted()) {
            // only write/close session if the session was actually started by us
            // otherwise we will set the session values to base64 encoded and whoever the session started might not expect the values in that way
            parent::writeClose();
        }
    }

public static function isSessionStarted()
    {
        return self::$sessionStarted;
    }

public static function getSameSiteCookieValue()
    {
        $config = Config::getInstance();
        $general = $config->General;

$module = Piwik::getModule();
        $action = Piwik::getAction();
        $method = Common::getRequestVar('method', '', 'string');
        $referer = Url::getReferrer();

$isOptOutRequest = $module == 'CoreAdminHome' && ($action == 'optOut' || $action == 'optOutJS');
        $shouldUseNone = !empty($general['enable_framed_pages']) || $isOptOutRequest || Overlay::isOverlayRequest($module, $action, $method, $referer);

if ($shouldUseNone && ProxyHttp::isHttps()) {
            return 'None';
        }

return 'Lax';
    }

/**
     * Write cookie header.  Similar to the native setcookie() function but also supports
     * the SameSite cookie property.
     * @param $name
     * @param $value
     * @param int $expires
     * @param string $path
     * @param string $domain
     * @param bool $secure
     * @param bool $httpOnly
     * @param string $sameSite
     * @return string
     */
    public static function writeCookie($name, $value, $expires = 0, $path = '/', $domain = '/', $secure = false, $httpOnly = false, $sameSite = 'lax')
    {
        $headerStr = 'Set-Cookie: ' . rawurlencode($name) . '=' . rawurlencode($value);
        if ($expires) {
            $headerStr .= '; expires=' . gmdate('D, d-M-Y H:i:s', $expires) . ' GMT';
        }
        if ($path) {
            $headerStr .= '; path=' . $path;
        }
        if ($domain) {
            $headerStr .= '; domain=' . rawurlencode($domain);
        }
        if ($secure) {
            $headerStr .= '; secure';
        }
        if ($httpOnly) {
            $headerStr .= '; httponly';
        }
        if ($sameSite) {
            $headerStr .= '; SameSite=' . $sameSite;
        }

Common::sendHeader($headerStr);
        return $headerStr;
    }

public static function getDbTableConfig()
    {
        return array(
            'name'           => Common::prefixTable(DbTable::TABLE_NAME),
            'primary'        => 'id',
            'modifiedColumn' => 'modified',
            'dataColumn'     => 'data',
            'lifetimeColumn' => 'lifetime',
        );
    }
}

${this.title}

Code Editor : Session.php