firewall-php/lib/php-extension/GoWrappers.cpp at c5e1611e4537917633361d970decd601388562c9 · AikidoSec/firewall-php · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
#include "Includes.h"

GoString GoCreateString(const std::string& s) {
    return GoString{s.c_str(), (ptrdiff_t)s.length()};
}

GoSlice GoCreateSlice(const std::vector<int64_t>& v) {
    return GoSlice{ (void*)v.data(), (GoInt)v.size(), (GoInt)v.capacity() };
}
/*
    Callback wrapper called by the RequestProcessor (GO) whenever it needs data from PHP (C++ extension).
*/
char* GoContextCallback(int callbackId) {
    if (!request.Ok()) {
        AIKIDO_LOG_WARN("Request is not ok!\n");
        return nullptr;
    }
    std::string ctx;
    std::string ret;
    switch (callbackId) {
        case CONTEXT_REMOTE_ADDRESS:
            ctx = "REMOTE_ADDRESS";
            ret = request.GetVar("REMOTE_ADDR");
            break;
        case CONTEXT_METHOD:
            ctx = "METHOD";
            ret = request.GetVar("REQUEST_METHOD");
            break;
        case CONTEXT_ROUTE:
            ctx = "ROUTE";
            ret = request.GetRoute();
            break;
        case CONTEXT_STATUS_CODE:
            ctx = "STATUS_CODE";
            ret = request.GetStatusCode();
            break;
        case CONTEXT_BODY:
            ctx = "BODY";
            ret = request.GetBody();
            break;
        case CONTEXT_HEADER_X_FORWARDED_FOR:
            ctx = "HEADER_X_FORWARDED_FOR";
            ret = request.GetVar("HTTP_X_FORWARDED_FOR");
            break;
        case CONTEXT_COOKIES:
            ctx = "COOKIES";
            ret = request.GetVar("HTTP_COOKIE");
            break;
        case CONTEXT_QUERY:
            ctx = "QUERY";
            ret = request.GetQuery();
            break;
        case CONTEXT_HTTPS:
            ctx = "HTTPS";
            ret = request.GetVar("HTTPS");
            break;
        case CONTEXT_URL:
            ctx = "URL";
            ret = request.GetUrl();
            break;
        case CONTEXT_HEADERS:
            ctx = "HEADERS";
            ret = request.GetHeaders();
            break;
        case CONTEXT_HEADER_USER_AGENT:
            ctx = "USER_AGENT";
            ret = request.GetVar("HTTP_USER_AGENT");
            break;
        case CONTEXT_USER_ID:
            ctx = "USER_ID";
            ret = requestCache.userId;
            break;
        case CONTEXT_USER_NAME:
            ctx = "USER_NAME";
            ret = requestCache.userName;
            break;
        case FUNCTION_NAME:
            ctx = "FUNCTION_NAME";
            ret = eventCache.functionName;
            break;
        case OUTGOING_REQUEST_URL:
            ctx = "OUTGOING_REQUEST_URL";
            ret = eventCache.outgoingRequestUrl;
            break;
        case OUTGOING_REQUEST_EFFECTIVE_URL:
            ctx = "OUTGOING_REQUEST_EFFECTIVE_URL";
            ret = eventCache.outgoingRequestEffectiveUrl;
            break;
        case OUTGOING_REQUEST_PORT:
            ctx = "OUTGOING_REQUEST_PORT";
            ret = eventCache.outgoingRequestPort;
            break;
        case OUTGOING_REQUEST_RESOLVED_IP:
            ctx = "OUTGOING_REQUEST_RESOLVED_IP";
            ret = eventCache.outgoingRequestResolvedIp;
            break;
        case CMD:
            ctx = "CMD";
            ret = eventCache.cmd;
            break;
        case FILENAME:
            ctx = "FILENAME";
            ret = eventCache.filename;
            break;
        case FILENAME2:
            ctx = "FILENAME2";
            ret = eventCache.filename2;
            break;
        case SQL_QUERY:
            ctx = "SQL_QUERY";
            ret = eventCache.sqlQuery;
            break;
        case SQL_DIALECT:
            ctx = "SQL_DIALECT";
            ret = eventCache.sqlDialect;
            break;
        case MODULE:
            ctx = "MODULE";
            ret = eventCache.moduleName;
            break;
    }

    if (!ret.length()) {
        AIKIDO_LOG_DEBUG("Callback %s -> NULL\n", ctx.c_str());
        return nullptr;
    }

    if (ret.length() > 10000) {
        AIKIDO_LOG_DEBUG("Callback %s -> (Result too large to print)\n", ctx.c_str());
    } else {
        AIKIDO_LOG_DEBUG("Callback %s -> %s\n", ctx.c_str(), ret.c_str());
    }
    return strdup(ret.c_str());
}