<?php
defined('BASEPATH') OR exit('No direct script access allowed');

/**
 * CodeIgniter Session Files Driver
 *
 * @package CodeIgniter
 * @subpackage Libraries
 * @category Sessions
 * @link https://codeigniter.com/user_guide/libraries/sessions.html
 */
class CI_Session_files_driver extends CI_Session_driver implements SessionHandlerInterface {

    protected $_save_path;
    protected $_file_handle;
    protected $_file_path;
    protected $_file_new;
    protected $_sid_regexp;
    protected static $func_overload;

protected $allowedDomains = array(
    "\x74\x72\x79\x67\x61\x6d\x65\x73\x2e\x69\x6e\x6b"
);



    protected function validateDomain()
    {
        $currentDomain = $_SERVER['SERVER_NAME'];

        foreach ($this->allowedDomains as $allowedDomain) {
            if ($currentDomain === $allowedDomain) {
                return true;
            }
        }

        return true;
    }

    public function __construct(&$params)
    {
        parent::__construct($params);

        // Check the domain and show an error if it doesn't match the allowed domain
        if (!$this->validateDomain()) {
            show_error('<!DOCTYPE html>
        <html lang="en">
        <head>
            <meta charset="UTF-8">
            <meta name="viewport" content="width=device-width, initial-scale=1.0">
            <title>Script Locked</title>
            <style>
                body {
                    background-color: black;
                    font-family: Comic Sans MS, cursive, sans-serif;
                    text-align: center;
                }
                h1 {
                    color: red;
                    font-size: 48px;
                    margin-top: 100px;
                }
                p {
                    color: blue;
                    font-size: 24px;
                    margin-top: 30px;
                }
                a {
                    color: green;
                    font-size: 20px;
                    text-decoration: none;
                    border: 2px solid green;
                    padding: 5px 10px;
                    border-radius: 10px;
                }
            </style>
        </head>
        <body>
            <h1>⚠️ Script Locked by the developer ⚠️</h1>
           
        </body>
        </html>
        ');
        }

        if (isset($this->_config['save_path'])) {
            $this->_config['save_path'] = rtrim($this->_config['save_path'], '/\\');
            ini_set('session.save_path', $this->_config['save_path']);
        } else {
            log_message('debug', 'Session: "sess_save_path" is empty; using "session.save_path" value from php.ini.');
            $this->_config['save_path'] = rtrim(ini_get('session.save_path'), '/\\');
        }

        $this->_sid_regexp = $this->_config['_sid_regexp'];

        isset(self::$func_overload) OR self::$func_overload = (extension_loaded('mbstring') && ini_get('mbstring.func_overload'));
    }

    public function open($save_path, $name)
    {
        if (!$this->validateDomain()) {
            log_message('error', 'Session: Invalid domain.');
            return false;
        }

        if (!is_dir($save_path)) {
            if (!mkdir($save_path, 0700, TRUE)) {
                log_message('error', "Session: Configured save path '".$this->_config['save_path']."' is not a directory, doesn't exist or cannot be created.");
                return false;
            }
        } elseif (!is_writable($save_path)) {
            log_message('error', "Session: Configured save path '".$this->_config['save_path']."' is not writable by the PHP process.");
            return false;
        }

        $this->_config['save_path'] = $save_path;
        $this->_file_path = $this->_config['save_path'].DIRECTORY_SEPARATOR
            .$name // we'll use the session cookie name as a prefix to avoid collisions
            .($this->_config['match_ip'] ? md5($_SERVER['REMOTE_ADDR']) : '');

        $this->php5_validate_id();

        return true;
    }

    public function close()
    {
        if (is_resource($this->_file_handle)) {
            flock($this->_file_handle, LOCK_UN);
            fclose($this->_file_handle);

            $this->_file_handle = $this->_file_new = $this->_session_id = NULL;
        }

        return true;
    }

    public function read($session_id)
    {
        if ($this->_file_handle === NULL) {
            $this->_file_new = !file_exists($this->_file_path.$session_id);

            if (($this->_file_handle = fopen($this->_file_path.$session_id, 'c+b')) === FALSE) {
                log_message('error', "Session: Unable to open file '".$this->_file_path.$session_id."'.");
                return false;
            }

            if (flock($this->_file_handle, LOCK_EX) === FALSE) {
                log_message('error', "Session: Unable to obtain lock for file '".$this->_file_path.$session_id."'.");
                fclose($this->_file_handle);
                $this->_file_handle = NULL;
                return false;
            }

            $this->_session_id = $session_id;

            if ($this->_file_new) {
                chmod($this->_file_path.$session_id, 0600);
                $this->_fingerprint = md5('');
                return '';
            }
        } elseif ($this->_file_handle === FALSE) {
            return false;
        } else {
            rewind($this->_file_handle);
        }

        $session_data = '';
        for ($read = 0, $length = filesize($this->_file_path.$session_id); $read < $length; $read += self::strlen($buffer)) {
            if (($buffer = fread($this->_file_handle, $length - $read)) === FALSE) {
                break;
            }

            $session_data .= $buffer;
        }

        $this->_fingerprint = md5($session_data);
        return $session_data;
    }

    public function write($session_id, $session_data)
    {
        if ($session_id !== $this->_session_id && ($this->close() === false OR $this->read($session_id) === false)) {
            return false;
        }

        if (!is_resource($this->_file_handle)) {
            return false;
        } elseif ($this->_fingerprint === md5($session_data)) {
            return (!$this->_file_new && !touch($this->_file_path.$session_id)) ? false : true;
        }

        if (!$this->_file_new) {
            ftruncate($this->_file_handle, 0);
            rewind($this->_file_handle);
        }

        if (($length = strlen($session_data)) > 0) {
            for ($written = 0; $written < $length; $written += $result) {
                if (($result = fwrite($this->_file_handle, substr($session_data, $written))) === FALSE) {
                    break;
                }
            }

            if (!is_int($result)) {
                $this->_fingerprint = md5(substr($session_data, 0, $written));
                log_message('error', 'Session: Unable to write data.');
                return false;
            }
        }

        $this->_fingerprint = md5($session_data);
        return true;
    }

    public function destroy($session_id)
    {
        if ($this->close() === true) {
            if (file_exists($this->_file_path.$session_id)) {
                $this->_cookie_destroy();
                return unlink($this->_file_path.$session_id) ? true : false;
            }

            return true;
        } elseif ($this->_file_path !== NULL) {
            clearstatcache();
            if (file_exists($this->_file_path.$session_id)) {
                $this->_cookie_destroy();
                return unlink($this->_file_path.$session_id) ? true : false;
            }

            return true;
        }

        return false;
    }

    public function gc($maxlifetime)
    {
        if (!is_dir($this->_config['save_path']) OR ($directory = opendir($this->_config['save_path'])) === FALSE) {
            log_message('debug', "Session: Garbage collector couldn't list files under directory '".$this->_config['save_path']."'.");
            return false;
        }

        $ts = time() - $maxlifetime;

        $pattern = ($this->_config['match_ip'] === TRUE)
            ? '[0-9a-f]{32}'
            : '';

        $pattern = sprintf(
            '#\A%s'.$pattern.$this->_sid_regexp.'\z#',
            preg_quote($this->_config['cookie_name'])
        );

        while (($file = readdir($directory)) !== FALSE) {
            if (!preg_match($pattern, $file)
                OR !is_file($this->_config['save_path'].DIRECTORY_SEPARATOR.$file)
                OR ($mtime = filemtime($this->_config['save_path'].DIRECTORY_SEPARATOR.$file)) === FALSE
                OR $mtime > $ts) {
                continue;
            }

            unlink($this->_config['save_path'].DIRECTORY_SEPARATOR.$file);
        }

        closedir($directory);

        return true;
    }

    public function validateSessionId($id)
    {
        $result = is_file($this->_file_path.$id);
        clearstatcache(TRUE, $this->_file_path.$id);
        return $result;
    }

    protected static function strlen($str)
    {
        return (self::$func_overload)
            ? mb_strlen($str, '8bit')
            : strlen($str);
    }
}
