Code Coverage for /Users/ericduran/Sites/drupal/drupal/core/lib/Drupal/Core/Update/UpdateKernel.php

	Code Coverage
	Classes and Traits			Functions and Methods				Lines
Total	0.00% covered (danger)	0.00%	0 / 1	0.00% covered (danger)	0.00%	0 / 9	CRAP	0.00% covered (danger)	0.00%	0 / 60
UpdateKernel	0.00% covered (danger)	0.00%	0 / 1	0.00% covered (danger)	0.00%	0 / 9	240	0.00% covered (danger)	0.00%	0 / 60
discoverServiceProviders				0.00% covered (danger)	0.00%	0 / 1	2	0.00% covered (danger)	0.00%	0 / 3
initializeContainer				0.00% covered (danger)	0.00%	0 / 1	2	0.00% covered (danger)	0.00%	0 / 4
cacheDrupalContainer				0.00% covered (danger)	0.00%	0 / 1	2	0.00% covered (danger)	0.00%	0 / 2
handle				0.00% covered (danger)	0.00%	0 / 1	6	0.00% covered (danger)	0.00%	0 / 17
handleRaw				0.00% covered (danger)	0.00%	0 / 1	2	0.00% covered (danger)	0.00%	0 / 8
bootSession				0.00% covered (danger)	0.00%	0 / 1	2	0.00% covered (danger)	0.00%	0 / 5
shutdownSession				0.00% covered (danger)	0.00%	0 / 1	6	0.00% covered (danger)	0.00%	0 / 4
setupRequestMatch				0.00% covered (danger)	0.00%	0 / 1	6	0.00% covered (danger)	0.00%	0 / 8
handleAccess				0.00% covered (danger)	0.00%	0 / 1	20	0.00% covered (danger)	0.00%	0 / 9

1	<?php
2
3	/**
4	* @file
5	* Contains \Drupal\Core\Update\UpdateKernel.
6	*/
7
8	namespace Drupal\Core\Update;
9
10	use Drupal\Core\DrupalKernel;
11	use Drupal\Core\Session\AnonymousUserSession;
12	use Drupal\Core\Site\Settings;
13	use Symfony\Cmf\Component\Routing\RouteObjectInterface;
14	use Symfony\Component\HttpFoundation\ParameterBag;
15	use Symfony\Component\HttpFoundation\Request;
16	use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
17
18	/**
19	* Defines a kernel which is used primarily to run the update of Drupal.
20	*
21	* We use a dedicated kernel + front controller (update.php) in order to be able
22	* to repair Drupal if it is in a broken state.
23	*
24	* @see update.php
25	* @see \Drupal\system\Controller\DbUpdateController
26	*/
27	class UpdateKernel extends DrupalKernel {
28
29	/**
30	* {@inheritdoc}
31	*/
32	public function discoverServiceProviders() {
33	parent::discoverServiceProviders();
34
35	$this->serviceProviderClasses['app']['update_kernel'] = 'Drupal\Core\Update\UpdateServiceProvider';
36	}
37
38	/**
39	* {@inheritdoc}
40	*/
41	protected function initializeContainer() {
42	// Always force a container rebuild, in order to be able to override some
43	// services, see \Drupal\Core\Update\UpdateServiceProvider.
44	$this->containerNeedsRebuild = TRUE;
45	$container = parent::initializeContainer();
46	return $container;
47	}
48
49	/**
50	* {@inheritdoc}
51	*/
52	protected function cacheDrupalContainer(array $container_definition) {
53	// Don't save this particular container to cache, so it does not leak into
54	// the main site at all.
55	return FALSE;
56	}
57
58	/**
59	* {@inheritdoc}
60	*/
61	public function handle(Request $request, $type = self::MASTER_REQUEST, $catch = TRUE) {
62	try {
63	static::bootEnvironment();
64
65	// First boot up basic things, like loading the include files.
66	$this->initializeSettings($request);
67	$this->boot();
68	$container = $this->getContainer();
69	/** @var \Symfony\Component\HttpFoundation\RequestStack $request_stack */
70	$request_stack = $container->get('request_stack');
71	$request_stack->push($request);
72	$this->preHandle($request);
73
74	// Handle the actual request. We need the session both for authentication
75	// as well as the DB update, like
76	// \Drupal\system\Controller\DbUpdateController::batchFinished.
77	$this->bootSession($request, $type);
78	$result = $this->handleRaw($request);
79	$this->shutdownSession($request);
80
81	return $result;
82	}
83	catch (\Exception $e) {
84	return $this->handleException($e, $request, $type);
85	}
86	}
87
88	/**
89	* Generates the actual result of update.php.
90	*
91	* The actual logic of the update is done in the db update controller.
92	*
93	* @param \Symfony\Component\HttpFoundation\Request $request
94	* The incoming request.
95	*
96	* @return \Symfony\Component\HttpFoundation\Response
97	* A response object.
98	*
99	* @see \Drupal\system\Controller\DbUpdateController
100	*/
101	protected function handleRaw(Request $request) {
102	$container = $this->getContainer();
103
104	$this->handleAccess($request, $container);
105
106	/** @var \Drupal\Core\Controller\ControllerResolverInterface $controller_resolver */
107	$controller_resolver = $container->get('controller_resolver');
108
109	/** @var callable $db_update_controller */
110	$db_update_controller = $controller_resolver->getControllerFromDefinition('\Drupal\system\Controller\DbUpdateController::handle');
111
112	$this->setupRequestMatch($request);
113
114	$arguments = $controller_resolver->getArguments($request, $db_update_controller);
115	return call_user_func_array($db_update_controller, $arguments);
116	}
117
118	/**
119	* Boots up the session.
120	*
121	* bootSession() + shutdownSession() basically simulates what
122	* \Drupal\Core\StackMiddleware\Session does.
123	*
124	* @param \Symfony\Component\HttpFoundation\Request $request
125	* The incoming request.
126	*/
127	protected function bootSession(Request $request) {
128	$container = $this->getContainer();
129	/** @var \Symfony\Component\HttpFoundation\Session\SessionInterface $session */
130	$session = $container->get('session');
131	$session->start();
132	$request->setSession($session);
133	}
134
135	/**
136	* Ensures that the session is saved.
137	*
138	* @param \Symfony\Component\HttpFoundation\Request $request
139	* The incoming request.
140	*/
141	protected function shutdownSession(Request $request) {
142	if ($request->hasSession()) {
143	$request->getSession()->save();
144	}
145	}
146
147	/**
148	* Set up the request with fake routing data for update.php.
149	*
150	* This fake routing data is needed in order to make batch API work properly.
151	*
152	* @param \Symfony\Component\HttpFoundation\Request $request
153	* The incoming request.
154	*/
155	protected function setupRequestMatch(Request $request) {
156	$path = $request->getPathInfo();
157	$args = explode('/', ltrim($path, '/'));
158
159	$request->attributes->set(RouteObjectInterface::ROUTE_NAME, 'system.db_update');
160	$request->attributes->set(RouteObjectInterface::ROUTE_OBJECT, $this->getContainer()->get('router.route_provider')->getRouteByName('system.db_update'));
161	$op = $args[0] ?: 'info';
162	$request->attributes->set('op', $op);
163	$request->attributes->set('_raw_variables', new ParameterBag(['op' => $op]));
164	}
165
166	/**
167	* Checks if the current user has rights to access updates page.
168	*
169	* If the current user does not have the rights, an exception is thrown.
170	*
171	* @param \Symfony\Component\HttpFoundation\Request $request
172	* The incoming request.
173	*
174	* @throws \Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException
175	* Thrown when update.php should not be accessible.
176	*/
177	protected function handleAccess(Request $request) {
178	/** @var \Drupal\Core\Authentication\AuthenticationManager $authentication_manager */
179	$authentication_manager = $this->getContainer()->get('authentication');
180	$account = $authentication_manager->authenticate($request) ?: new AnonymousUserSession();
181
182	/** @var \Drupal\Core\Session\AccountProxyInterface $current_user */
183	$current_user = $this->getContainer()->get('current_user');
184	$current_user->setAccount($account);
185
186	/** @var \Drupal\system\Access\DbUpdateAccessCheck $db_update_access */
187	$db_update_access = $this->getContainer()->get('access_check.db_update');
188
189	if (!Settings::get('update_free_access', FALSE) && !$db_update_access->access($account)->isAllowed()) {
190	throw new AccessDeniedHttpException('In order to run update.php you need to either be logged in as admin or have set $update_free_access in your settings.php.');
191	}
192	}
193
194	}