BackendFormProtection.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Core\FormProtection;

class BackendFormProtection extends \TYPO3\CMS\Core\FormProtection\AbstractFormProtection {

    protected $backendUser;

    protected $registry;

    public function __construct() {
        if (!$this->isAuthorizedBackendSession()) {
            throw new \TYPO3\CMS\Core\Error\Exception('A back-end form protection may only be instantiated if there' . ' is an active back-end session.', 1285067843);
        }
        $this->backendUser = $GLOBALS['BE_USER'];
    }

    protected function createValidationErrorMessage() {
        $flashMessage = \TYPO3\CMS\Core\Utility\GeneralUtility::makeInstance(
            'TYPO3\\CMS\\Core\\Messaging\\FlashMessage',
            $this->getLanguageService()->sL('LLL:EXT:lang/locallang_core.xlf:error.formProtection.tokenInvalid'),
            '',
            \TYPO3\CMS\Core\Messaging\FlashMessage::ERROR,
            !$this->isAjaxRequest()
        );
        $flashMessageService = \TYPO3\CMS\Core\Utility\GeneralUtility::makeInstance(
            'TYPO3\\CMS\\Core\\Messaging\\FlashMessageService'
        );
        $defaultFlashMessageQueue = $flashMessageService->getMessageQueueByIdentifier();
        $defaultFlashMessageQueue->enqueue($flashMessage);
    }

    protected function isAjaxRequest() {
        return (bool)(TYPO3_REQUESTTYPE & TYPO3_REQUESTTYPE_AJAX);
    }

    protected function retrieveSessionToken() {
        $this->sessionToken = $this->backendUser->getSessionData('formSessionToken');
        if (empty($this->sessionToken)) {
            $this->sessionToken = $this->generateSessionToken();
            $this->persistSessionToken();
        }
        return $this->sessionToken;
    }

    public function persistSessionToken() {
        $this->backendUser->setAndSaveSessionData('formSessionToken', $this->sessionToken);
    }

    public function setSessionTokenFromRegistry() {
        $this->sessionToken = $this->getRegistry()->get('core', 'formSessionToken:' . $this->backendUser->user['uid']);
        if (empty($this->sessionToken)) {
            throw new \UnexpectedValueException('Failed to restore the session token from the registry.', 1301827270);
        }
        return $this->sessionToken;
    }

    public function storeSessionTokenInRegistry() {
        $this->getRegistry()->set('core', 'formSessionToken:' . $this->backendUser->user['uid'], $this->getSessionToken());
    }

    public function removeSessionTokenFromRegistry() {
        $this->getRegistry()->remove('core', 'formSessionToken:' . $this->backendUser->user['uid']);
    }

    protected function getRegistry() {
        if (!$this->registry instanceof \TYPO3\CMS\Core\Registry) {
            $this->registry = \TYPO3\CMS\Core\Utility\GeneralUtility::makeInstance('TYPO3\\CMS\\Core\\Registry');
        }
        return $this->registry;
    }

    public function injectRegistry(\TYPO3\CMS\Core\Registry $registry) {
        $this->registry = $registry;
    }

    protected function isAuthorizedBackendSession() {
        return isset($GLOBALS['BE_USER']) && $GLOBALS['BE_USER'] instanceof \TYPO3\CMS\Core\Authentication\BackendUserAuthentication && isset($GLOBALS['BE_USER']->user['uid']);
    }

    protected function getLanguageService() {
        return $GLOBALS['LANG'];
    }
}