ProductionExceptionHandler.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Core\Error;

class ProductionExceptionHandler extends AbstractExceptionHandler {

    protected $defaultTitle = 'Oops, an error occurred!';

    protected $defaultMessage = '';

    public function __construct() {
        set_exception_handler(array($this, 'handleException'));
    }

    public function echoExceptionWeb(\Exception $exception) {
        $this->sendStatusHeaders($exception);
        $this->writeLogEntries($exception, self::CONTEXT_WEB);
        $messageObj = \TYPO3\CMS\Core\Utility\GeneralUtility::makeInstance(
            'TYPO3\\CMS\\Core\\Messaging\\ErrorpageMessage',
            $this->getMessage($exception),
            $this->getTitle($exception)
        );
        $messageObj->output();
    }

    public function echoExceptionCLI(\Exception $exception) {
        $filePathAndName = $exception->getFile();
        $exceptionCodeNumber = $exception->getCode() > 0 ? '#' . $exception->getCode() . ': ' : '';
        $this->writeLogEntries($exception, self::CONTEXT_CLI);
        echo '
Uncaught TYPO3 Exception ' . $exceptionCodeNumber . $exception->getMessage() . LF;
        echo 'thrown in file ' . $filePathAndName . LF;
        echo 'in line ' . $exception->getLine() . '

';
        die(1);
    }

    protected function discloseExceptionInformation(\Exception $exception) {
        // Allow message to be shown in production mode if the exception is about
        // trusted host configuration.  By doing so we do not disclose
        // any valuable information to an attacker but avoid confusions among TYPO3 admins
        // in production context.
        if ($exception->getCode() === 1396795884) {
            return TRUE;
        }
        // Show client error messages 40x in every case
        if ($exception instanceof Http\AbstractClientErrorException) {
            return TRUE;
        }
        // Only show errors in FE, if a BE user is authenticated
        if (TYPO3_MODE === 'FE') {
            return $GLOBALS['TSFE']->beUserLogin;
        }
        return TRUE;
    }

    protected function getTitle(\Exception $exception) {
        if ($this->discloseExceptionInformation($exception) && method_exists($exception, 'getTitle') && $exception->getTitle() !== '') {
            return htmlspecialchars($exception->getTitle());
        } else {
            return $this->defaultTitle;
        }
    }

    protected function getMessage(\Exception $exception) {
        if ($this->discloseExceptionInformation($exception)) {
            // Exception has an error code given
            if ($exception->getCode() > 0) {
                $moreInformationLink = '<p>More information regarding this error might be available <a href="'
                    . TYPO3_URL_EXCEPTION . $exception->getCode() . '" target="_blank">online</a>.</p>';
            } else {
                $moreInformationLink = '';
            }
            return htmlspecialchars($exception->getMessage()) . $moreInformationLink;
        } else {
            return $this->defaultMessage;
        }
    }

}