src/Eccube/EventListener/RestrictFileUploadListener.php line 40

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of EC-CUBE
  5.  *
  6.  * Copyright(c) EC-CUBE CO.,LTD. All Rights Reserved.
  7.  *
  8.  * http://www.ec-cube.co.jp/
  9.  *
  10.  * For the full copyright and license information, please view the LICENSE
  11.  * file that was distributed with this source code.
  12.  */
  14. namespace Eccube\EventListener;
  16. use Eccube\Common\EccubeConfig;
  17. use Eccube\Request\Context;
  18. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  19. use Symfony\Component\HttpKernel\Event\RequestEvent;
  20. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  22. class RestrictFileUploadListener implements EventSubscriberInterface
  23. {
  24.     /**
  25.      * @var EccubeConfig
  26.      */
  27.     protected $eccubeConfig;
  29.     /**
  30.      * @var Context
  31.      */
  32.     protected $requestContext;
  34.     public function __construct(EccubeConfig $eccubeConfig, Context $requestContext)
  35.     {
  36.         $this->eccubeConfig = $eccubeConfig;
  37.         $this->requestContext = $requestContext;
  38.     }
  40.     public function onKernelRequest(RequestEvent $event)
  41.     {
  42.         if (!$event->isMainRequest()) {
  43.             return;
  44.         }
  46.         if (!$this->requestContext->isAdmin()) {
  47.             return;
  48.         }
  50.         $route = $event->getRequest()->attributes->get('_route');
  51.         $restrictUrls = $this->eccubeConfig['eccube_restrict_file_upload_urls'];
  52.         if ($this->eccubeConfig['eccube_restrict_file_upload'] === '1' && in_array($route, $restrictUrls)) {
  53.             throw new AccessDeniedHttpException(trans('exception.error_message_restrict_url'));
  54.         }
  55.     }
  57.     public static function getSubscribedEvents()
  58.     {
  59.         return [
  60.             'kernel.request' => ['onKernelRequest', 7], // RouterListener より必ず後で実行する
  61.         ];
  62.     }
  63. }