{$cookieTransportGet}
");
}
/**
* Called at Agent's side.
*
* Implements a mutex which restricts parallel queries (or charges) to the same
* user account. Mutex lock files are created at session_save_path, so deletion of
* old files are performed by PHP automatically.
*
* @param string $id
* @return resource $mutex
*/
public static function aquireMutex($id)
{
if (!ctype_alnum($id)) $id = md5($id);
// We create the lock file in session directory, because it is
// auto-cleaned by PHP session engine on expiration.
$fname = session_save_path() . "/sess_rs_{$id}.lck";
$f = @fopen($fname, "a+");
if (!$f) {
die(
"Cannot create a lock file at $fname: make sure you have a writable " .
"directory in session.save_path of php.ini " .
"(current value: \"" . session_save_path() . "\" is invalid)."
);
}
flock($f, LOCK_EX);
return $f;
}
/**
* Called at Agent's side.
*
* Releases the mutex. This method is essential for PHP 5.3+ - earlier versions
* were releasing mutexes automatically when you free the resource variable.
*
* @param resource $mutex
*/
public static function releaseMutex($mutex)
{
flock($mutex, LOCK_UN);
fclose($mutex);
}
/**
* Called at RentSoft side, do not use at Agent's side.
* This source code is here only as a sample.
*
* Returns javascript-code which implements auto-adjustable IFRAME height
* at RentSoft sift.
*
* @param bool $useCookieTransport If true, use CookieTransport for height adjusting.
* @return string HTML code which adjust IFRAME height at RentSoft sidt.
*/
public static function getStretchingIframeRSSide($useCookieTransport = false)
{
$useCookieTransport = intval($useCookieTransport);
return trim("
");
}
public static function getCookieTransportGetJsCode()
{
return "
";
}
/**
* Called at RentSoft side, do not use at Agent's side.
* This source code is here only as a sample.
*
* Parses REQUEST_URI and HTTP_HOST, checks IFRAME digital signature etc.
*
* @param string $httpHost
* @param string $requestUri
* @param string $rsSecretCallback Callback to get a secret key by Agent's name.
* @param callback $nonceCallback Callback to control double-requesting
* @return array Parsed arguments
* @throws Exception
*/
public static function readArgs($httpHost, $requestUri, $rsSecretCallback, $nonceCallback)
{
$agName = preg_replace('/\..*$/s', '', $httpHost);
$rsSecret = call_user_func($rsSecretCallback, $agName);
$expireDelta = 2 * 24 * 3600; // must be > 2 days, because we know nothing about time zone here
$args = array();
parse_str(parse_url($requestUri, PHP_URL_QUERY), $args);
$prefix = preg_replace('/&ag_sign=.*$/s', '', $requestUri);
if (md5($rsSecret . $prefix) !== @$args['ag_sign']) {
throw new Exception("Invalid digital signature!");
}
$agTimestamp = @$args['ag_timestamp'];
$dt = time() - $agTimestamp;
// Check if the request is knowingly expired.
if ($dt > $expireDelta) {
throw new Exception("The request is expired (age is $dt seconds which is more than $expireDelta seconds)");
}
// Check nonce (typically all used URIs are stored in DB).
if (!call_user_func($nonceCallback, $prefix)) {
throw new Exception("This request was already used: $prefix");
}
return array(
'agName' => $agName,
'agUuid' => @$args['ag_uuid'],
'agWsdl' => @$args['ag_wsdl'],
'agRef' => @$args['ag_ref'],
'agTimestamp' => $agTimestamp,
'agSign' => @$args['ag_sign'],
);
}
}