Created
July 28, 2010 19:35
-
-
Save yeco/495953 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?PHP | |
| // vraiProxy | |
| // About: License | |
| // Copyright (c) 2010 "Yëco" Jasson Cascante, | |
| // Licensed under WTFPL. | |
| // GET Parameters | |
| // | |
| // Certain GET (query string) parameters may be passed into vraiProxy.php | |
| // to control its behavior, this is a list of these parameters. | |
| // | |
| // url - The remote URL resource to fetch. Any GET parameters to be passed | |
| // through to the remote URL resource must be urlencoded in this parameter. | |
| // mode - If mode=native, the response will be sent using the same content | |
| // type and headers that the remote URL resource returned. If omitted, the | |
| // response will be JSON (or JSONP). <Native requests> and <JSONP requests> | |
| // are disabled by default, see <Configuration Options> for more information. | |
| // callback - If specified, the response JSON will be wrapped in this named | |
| // function call. This parameter and <JSONP requests> are disabled by | |
| // default, see <Configuration Options> for more information. | |
| // user_agent - This value will be sent to the remote URL request as the | |
| // `User-Agent:` HTTP request header. If omitted, the browser user agent | |
| // will be passed through. | |
| // send_cookies - If send_cookies=1, all cookies will be forwarded through to | |
| // the remote URL request. | |
| // send_session - If send_session=1 and send_cookies=1, the SID cookie will be | |
| // forwarded through to the remote URL request. | |
| // full_headers - If a JSON request and full_headers=1, the JSON response will | |
| // contain detailed header information. | |
| // full_status - If a JSON request and full_status=1, the JSON response will | |
| // contain detailed cURL status information, otherwise it will just contain | |
| // the `http_code` property. | |
| // | |
| // Topic: POST Parameters | |
| // | |
| // All POST parameters are automatically passed through to the remote URL | |
| // request. | |
| // | |
| // Topic: JSON requests | |
| // | |
| // This request will return the contents of the specified url in JSON format. | |
| // | |
| // Request: | |
| // | |
| // > vraiProxy.php?url=http://example.com/ | |
| // | |
| // Response: | |
| // | |
| // > { "contents": "<html>...</html>", "headers": {...}, "status": {...} } | |
| // | |
| // JSON object properties: | |
| // | |
| // contents - (String) The contents of the remote URL resource. | |
| // headers - (Object) A hash of HTTP headers returned by the remote URL | |
| // resource. | |
| // status - (Object) A hash of status codes returned by cURL. | |
| // | |
| // Topic: JSONP requests | |
| // | |
| // This request will return the contents of the specified url in JSONP format | |
| // (but only if $enable_jsonp is enabled in the PHP script). | |
| // | |
| // Request: | |
| // | |
| // > vraiProxy.php?url=http://example.com/&callback=foo | |
| // | |
| // Response: | |
| // | |
| // > foo({ "contents": "<html>...</html>", "headers": {...}, "status": {...} }) | |
| // | |
| // JSON object properties: | |
| // | |
| // contents - (String) The contents of the remote URL resource. | |
| // headers - (Object) A hash of HTTP headers returned by the remote URL | |
| // resource. | |
| // status - (Object) A hash of status codes returned by cURL. | |
| // | |
| // Topic: Native requests | |
| // | |
| // This request will return the contents of the specified url in the format it | |
| // was received in, including the same content-type and other headers (but only | |
| // if $enable_native is enabled in the PHP script). | |
| // | |
| // Request: | |
| // | |
| // > vraiProxy.php?url=http://example.com/&mode=native | |
| // | |
| // Response: | |
| // | |
| // > <html>...</html> | |
| // | |
| // Topic: Notes | |
| // | |
| // * Assumes magic_quotes_gpc = Off in php.ini | |
| // | |
| // Topic: Configuration Options | |
| // | |
| // These variables can be manually edited in the PHP file if necessary. | |
| // | |
| // $enable_jsonp - Only enable <JSONP requests> if you really need to. If you | |
| // install this script on the same server as the page you're calling it | |
| // from, plain JSON will work. Defaults to false. | |
| // $enable_native - You can enable <Native requests>, but you should only do | |
| // this if you also whitelist specific URLs using $valid_url_regex, to avoid | |
| // possible XSS vulnerabilities. Defaults to false. | |
| // $valid_url_regex - This regex is matched against the url parameter to | |
| // ensure that it is valid. This setting only needs to be used if either | |
| // $enable_jsonp or $enable_native are enabled. Defaults to '/.*/' which | |
| // validates all URLs. | |
| // | |
| // ############################################################################ | |
| // Change these configuration options if needed, see above descriptions for info. | |
| $enable_jsonp = false; | |
| $enable_native = false; | |
| $valid_url_regex = '/.*/'; | |
| // ############################################################################ | |
| $url = $_GET['url']; | |
| if ( !$url ) { | |
| // Passed url not specified. | |
| $contents = 'ERROR: url not specified'; | |
| $status = array( 'http_code' => 'ERROR' ); | |
| } else if ( !preg_match( $valid_url_regex, $url ) ) { | |
| // Passed url doesn't match $valid_url_regex. | |
| $contents = 'ERROR: invalid url'; | |
| $status = array( 'http_code' => 'ERROR' ); | |
| } else { | |
| $ch = curl_init( $url ); | |
| if ( strtolower($_SERVER['REQUEST_METHOD']) == 'post' ) { | |
| curl_setopt( $ch, CURLOPT_POST, true ); | |
| curl_setopt( $ch, CURLOPT_POSTFIELDS, $_POST ); | |
| } | |
| if ( $_GET['send_cookies'] ) { | |
| $cookie = array(); | |
| foreach ( $_COOKIE as $key => $value ) { | |
| $cookie[] = $key . '=' . $value; | |
| } | |
| if ( $_GET['send_session'] ) { | |
| $cookie[] = SID; | |
| } | |
| $cookie = implode( '; ', $cookie ); | |
| curl_setopt( $ch, CURLOPT_COOKIE, $cookie ); | |
| } | |
| curl_setopt( $ch, CURLOPT_FOLLOWLOCATION, true ); | |
| curl_setopt( $ch, CURLOPT_HEADER, true ); | |
| curl_setopt( $ch, CURLOPT_RETURNTRANSFER, true ); | |
| curl_setopt( $ch, CURLOPT_USERAGENT, $_GET['user_agent'] ? $_GET['user_agent'] : $_SERVER['HTTP_USER_AGENT'] ); | |
| list( $header, $contents ) = preg_split( '/([\r\n][\r\n])\\1/', curl_exec( $ch ), 2 ); | |
| $status = curl_getinfo( $ch ); | |
| curl_close( $ch ); | |
| } | |
| // Split header text into an array. | |
| $header_text = preg_split( '/[\r\n]+/', $header ); | |
| if ( $_GET['mode'] == 'native' ) { | |
| if ( !$enable_native ) { | |
| $contents = 'ERROR: invalid mode'; | |
| $status = array( 'http_code' => 'ERROR' ); | |
| } | |
| // Propagate headers to response. | |
| foreach ( $header_text as $header ) { | |
| if ( preg_match( '/^(?:Content-Type|Content-Language|Set-Cookie):/i', $header ) ) { | |
| header( $header ); | |
| } | |
| } | |
| print $contents; | |
| } else { | |
| // $data will be serialized into JSON data. | |
| $data = array(); | |
| // Propagate all HTTP headers into the JSON data object. | |
| if ( $_GET['full_headers'] ) { | |
| $data['headers'] = array(); | |
| foreach ( $header_text as $header ) { | |
| preg_match( '/^(.+?):\s+(.*)$/', $header, $matches ); | |
| if ( $matches ) { | |
| $data['headers'][ $matches[1] ] = $matches[2]; | |
| } | |
| } | |
| } | |
| // Propagate all cURL request / response info to the JSON data object. | |
| if ( $_GET['full_status'] ) { | |
| $data['status'] = $status; | |
| } else { | |
| $data['status'] = array(); | |
| $data['status']['http_code'] = $status['http_code']; | |
| } | |
| // Set the JSON data object contents, decoding it from JSON if possible. | |
| $decoded_json = json_decode( $contents ); | |
| $data['contents'] = $decoded_json ? $decoded_json : $contents; | |
| // Generate appropriate content-type header. | |
| $is_xhr = strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest'; | |
| header( 'Content-type: application/' . ( $is_xhr ? 'json' : 'x-javascript' ) ); | |
| // Get JSONP callback. | |
| $jsonp_callback = $enable_jsonp && isset($_GET['callback']) ? $_GET['callback'] : null; | |
| // Generate JSON/JSONP string | |
| $json = json_encode( $data ); | |
| print $jsonp_callback ? "$jsonp_callback($json)" : $json; | |
| } | |
| ?> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment