<h2>Editing File: /usr/local/cpanel/3rdparty/php/84/lib/php/HTTP/Request2/CookieJar.php</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php
/**
 * Stores cookies and passes them between HTTP requests
 *
 * PHP version 5
 *
 * LICENSE
 *
 * This source file is subject to BSD 3-Clause License that is bundled
 * with this package in the file LICENSE and available at the URL
 * https://raw.github.com/pear/HTTP_Request2/trunk/docs/LICENSE
 *
 * @category  HTTP
 * @package   HTTP_Request2
 * @author    Alexey Borzov &lt;avb@php.net&gt;
 * @copyright 2008-2025 Alexey Borzov &lt;avb@php.net&gt;
 * @license   http://opensource.org/licenses/BSD-3-Clause BSD 3-Clause License
 * @link      http://pear.php.net/package/HTTP_Request2
 */

/** Class representing a HTTP request message */
require_once 'HTTP/Request2.php';

/**
 * Stores cookies and passes them between HTTP requests
 *
 * @category HTTP
 * @package  HTTP_Request2
 * @author   Alexey Borzov &lt;avb@php.net&gt;
 * @license  http://opensource.org/licenses/BSD-3-Clause BSD 3-Clause License
 * @version  Release: 2.7.0
 * @link     http://pear.php.net/package/HTTP_Request2
 */
class HTTP_Request2_CookieJar implements Serializable
{
    /**
     * Array of stored cookies
     *
     * The array is indexed by domain, path and cookie name
     *   .example.com
     *     /
     *       some_cookie =&gt; cookie data
     *     /subdir
     *       other_cookie =&gt; cookie data
     *   .example.org
     *     ...
     *
     * @var array
     */
    protected $cookies = [];

    /**
     * Whether session cookies should be serialized when serializing the jar
     *
     * @var bool
     */
    protected $serializeSession = false;

    /**
     * Whether Public Suffix List should be used for domain matching
     *
     * @var bool
     */
    protected $useList = true;

    /**
     * Whether an attempt to store an invalid cookie should be ignored, rather than cause an Exception
     *
     * @var bool
     */
    protected $ignoreInvalid = false;

    /**
     * Array with Public Suffix List data
     *
     * @var  array
     * @link http://publicsuffix.org/
     */
    protected static $psl = [];

    /**
     * Class constructor, sets various options
     *
     * @param bool $serializeSessionCookies Controls serializing session cookies,
     *                                      see {@link serializeSessionCookies()}
     * @param bool $usePublicSuffixList     Controls using Public Suffix List,
     *                                      see {@link usePublicSuffixList()}
     * @param bool $ignoreInvalidCookies    Whether invalid cookies should be ignored,
     *                                      see {@link ignoreInvalidCookies()}
     */
    public function __construct(
        $serializeSessionCookies = false, $usePublicSuffixList = true,
        $ignoreInvalidCookies = false
    ) {
        $this-&gt;serializeSessionCookies($serializeSessionCookies);
        $this-&gt;usePublicSuffixList($usePublicSuffixList);
        $this-&gt;ignoreInvalidCookies($ignoreInvalidCookies);
    }

    /**
     * Returns current time formatted in ISO-8601 at UTC timezone
     *
     * @return string
     */
    protected function now()
    {
        $dt = new DateTime();
        $dt-&gt;setTimezone(new DateTimeZone('UTC'));
        return $dt-&gt;format(DateTime::ISO8601);
    }

    /**
     * Checks cookie array for correctness, possibly updating its 'domain', 'path' and 'expires' fields
     *
     * The checks are as follows:
     *   - cookie array should contain 'name' and 'value' fields;
     *   - name and value should not contain disallowed symbols;
     *   - 'expires' should be either empty parseable by DateTime;
     *   - 'domain' and 'path' should be either not empty or an URL where
     *     cookie was set should be provided.
     *   - if $setter is provided, then document at that URL should be allowed
     *     to set a cookie for that 'domain'. If $setter is not provided,
     *     then no domain checks will be made.
     *
     * 'expires' field will be converted to ISO8601 format from COOKIE format,
     * 'domain' and 'path' will be set from setter URL if empty.
     *
     * @param array    $cookie cookie data, as returned by
     *                         {@link HTTP_Request2_Response::getCookies()}
     * @param Net_URL2 $setter URL of the document that sent Set-Cookie header
     *
     * @return array    Updated cookie array
     * @throws HTTP_Request2_LogicException
     * @throws HTTP_Request2_MessageException
     */
    protected function checkAndUpdateFields(array $cookie, Net_URL2 $setter = null)
    {
        if ($missing = array_diff(['name', 'value'], array_keys($cookie))) {
            throw new HTTP_Request2_LogicException(
                &quot;Cookie array should contain 'name' and 'value' fields&quot;,
                HTTP_Request2_Exception::MISSING_VALUE
            );
        }
        if (preg_match(HTTP_Request2::REGEXP_INVALID_COOKIE, $cookie['name'])) {
            throw new HTTP_Request2_LogicException(
                &quot;Invalid cookie name: '{$cookie['name']}'&quot;,
                HTTP_Request2_Exception::INVALID_ARGUMENT
            );
        }
        if (preg_match(HTTP_Request2::REGEXP_INVALID_COOKIE, $cookie['value'])) {
            throw new HTTP_Request2_LogicException(
                &quot;Invalid cookie value: '{$cookie['value']}'&quot;,
                HTTP_Request2_Exception::INVALID_ARGUMENT
            );
        }
        $cookie += ['domain' =&gt; '', 'path' =&gt; '', 'expires' =&gt; null, 'secure' =&gt; false];

        // Need ISO-8601 date @ UTC timezone
        if (!empty($cookie['expires'])
            &amp;&amp; !preg_match('/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\+0000$/', $cookie['expires'])
        ) {
            try {
                $dt = new DateTime($cookie['expires']);
                $dt-&gt;setTimezone(new DateTimeZone('UTC'));
                $cookie['expires'] = $dt-&gt;format(DateTime::ISO8601);
            } catch (Exception $e) {
                throw new HTTP_Request2_LogicException($e-&gt;getMessage());
            }
        }

        if (empty($cookie['domain']) || empty($cookie['path'])) {
            if (!$setter) {
                throw new HTTP_Request2_LogicException(
                    'Cookie misses domain and/or path component, cookie setter URL needed',
                    HTTP_Request2_Exception::MISSING_VALUE
                );
            }
            if (empty($cookie['domain'])) {
                if ($host = $setter-&gt;getHost()) {
                    $cookie['domain'] = (string)$host;
                } else {
                    throw new HTTP_Request2_LogicException(
                        'Setter URL does not contain host part, can\'t set cookie domain',
                        HTTP_Request2_Exception::MISSING_VALUE
                    );
                }
            }
            if (empty($cookie['path'])) {
                $path = $setter-&gt;getPath();
                $cookie['path'] = empty($path)
                    ? '/'
                    : substr($path, 0, (int)strrpos($path, '/') + 1);
            }
        }

        if ($setter &amp;&amp; !$this-&gt;domainMatch((string)$setter-&gt;getHost(), $cookie['domain'])) {
            throw new HTTP_Request2_MessageException(
                &quot;Domain &quot; . (string)$setter-&gt;getHost() . &quot; cannot set cookies for &quot;
                . $cookie['domain']
            );
        }

        return $cookie;
    }

    /**
     * Stores a cookie in the jar
     *
     * @param array    $cookie cookie data, as returned by
     *                         {@link HTTP_Request2_Response::getCookies()}
     * @param Net_URL2 $setter URL of the document that sent Set-Cookie header
     *
     * @return bool whether the cookie was successfully stored
     * @throws HTTP_Request2_Exception
     */
    public function store(array $cookie, Net_URL2 $setter = null)
    {
        try {
            $cookie = $this-&gt;checkAndUpdateFields($cookie, $setter);
        } catch (HTTP_Request2_Exception $e) {
            if ($this-&gt;ignoreInvalid) {
                return false;
            } else {
                throw $e;
            }
        }

        if (strlen($cookie['value'])
            &amp;&amp; (is_null($cookie['expires']) || $cookie['expires'] &gt; $this-&gt;now())
        ) {
            if (!isset($this-&gt;cookies[$cookie['domain']])) {
                $this-&gt;cookies[$cookie['domain']] = [];
            }
            if (!isset($this-&gt;cookies[$cookie['domain']][$cookie['path']])) {
                $this-&gt;cookies[$cookie['domain']][$cookie['path']] = [];
            }
            $this-&gt;cookies[$cookie['domain']][$cookie['path']][$cookie['name']] = $cookie;

        } elseif (isset($this-&gt;cookies[$cookie['domain']][$cookie['path']][$cookie['name']])) {
            unset($this-&gt;cookies[$cookie['domain']][$cookie['path']][$cookie['name']]);
        }

        return true;
    }

    /**
     * Adds cookies set in HTTP response to the jar
     *
     * @param HTTP_Request2_Response $response HTTP response message
     * @param Net_URL2               $setter   original request URL, needed for
     *                                         setting default domain/path. If not given,
     *                                         effective URL from response will be used.
     *
     * @return bool whether all cookies were successfully stored
     * @throws HTTP_Request2_LogicException
     */
    public function addCookiesFromResponse(HTTP_Request2_Response $response, Net_URL2 $setter = null)
    {
        if (null === $setter) {
            if (!($effectiveUrl = $response-&gt;getEffectiveUrl())) {
                throw new HTTP_Request2_LogicException(
                    'Response URL required for adding cookies from response',
                    HTTP_Request2_Exception::MISSING_VALUE
                );
            }
            $setter = new Net_URL2($effectiveUrl);
        }

        $success = true;
        foreach ($response-&gt;getCookies() as $cookie) {
            $success = $this-&gt;store($cookie, $setter) &amp;&amp; $success;
        }
        return $success;
    }

    /**
     * Returns all cookies matching a given request URL
     *
     * The following checks are made:
     *   - cookie domain should match request host
     *   - cookie path should be a prefix for request path
     *   - 'secure' cookies will only be sent for HTTPS requests
     *
     * @param Net_URL2 $url      Request url
     * @param bool     $asString Whether to return cookies as string for &quot;Cookie: &quot; header
     *
     * @return array|string Matching cookies
     * @psalm-return ($asString is true ? string : array)
     */
    public function getMatching(Net_URL2 $url, $asString = false)
    {
        $host   = (string)$url-&gt;getHost();
        $path   = $url-&gt;getPath();
        $secure = 0 === strcasecmp((string)$url-&gt;getScheme(), 'https');

        $matched = $ret = [];
        foreach (array_keys($this-&gt;cookies) as $domain) {
            if ($this-&gt;domainMatch($host, $domain)) {
                foreach (array_keys($this-&gt;cookies[$domain]) as $cPath) {
                    if (0 === strpos($path, $cPath)) {
                        foreach ($this-&gt;cookies[$domain][$cPath] as $name =&gt; $cookie) {
                            if (!$cookie['secure'] || $secure) {
                                $matched[$name][strlen($cookie['path'])] = $cookie;
                            }
                        }
                    }
                }
            }
        }
        foreach ($matched as $cookies) {
            krsort($cookies);
            $ret = array_merge($ret, $cookies);
        }
        if (!$asString) {
            return $ret;
        } else {
            $str = '';
            foreach ($ret as $c) {
                $str .= (empty($str)? '': '; ') . $c['name'] . '=' . $c['value'];
            }
            return $str;
        }
    }

    /**
     * Returns all cookies stored in a jar
     *
     * @return array
     */
    public function getAll()
    {
        $cookies = [];
        foreach (array_keys($this-&gt;cookies) as $domain) {
            foreach (array_keys($this-&gt;cookies[$domain]) as $path) {
                foreach ($this-&gt;cookies[$domain][$path] as $name =&gt; $cookie) {
                    $cookies[] = $cookie;
                }
            }
        }
        return $cookies;
    }

    /**
     * Sets whether session cookies should be serialized when serializing the jar
     *
     * @param boolean $serialize serialize?
     *
     * @return void
     */
    public function serializeSessionCookies($serialize)
    {
        $this-&gt;serializeSession = (bool)$serialize;
    }

    /**
     * Sets whether invalid cookies should be silently ignored or cause an Exception
     *
     * @param boolean $ignore ignore?
     *
     * @return void
     *
     * @link http://pear.php.net/bugs/bug.php?id=19937
     * @link http://pear.php.net/bugs/bug.php?id=20401
     */
    public function ignoreInvalidCookies($ignore)
    {
        $this-&gt;ignoreInvalid = (bool)$ignore;
    }

    /**
     * Sets whether Public Suffix List should be used for restricting cookie-setting
     *
     * Without PSL {@link domainMatch()} will only prevent setting cookies for
     * top-level domains like '.com' or '.org'. However, it will not prevent
     * setting a cookie for '.co.uk' even though only third-level registrations
     * are possible in .uk domain.
     *
     * With the List it is possible to find the highest level at which a domain
     * may be registered for a particular top-level domain and consequently
     * prevent cookies set for '.co.uk' or '.msk.ru'. The same list is used by
     * Firefox, Chrome and Opera browsers to restrict cookie setting.
     *
     * Note that PSL is licensed differently to HTTP_Request2 package (refer to
     * the license information in public-suffix-list.php), so you can disable
     * its use if this is an issue for you.
     *
     * @param boolean $useList use the list?
     *
     * @return void
     *
     * @link http://publicsuffix.org/learn/
     */
    public function usePublicSuffixList($useList)
    {
        $this-&gt;useList = (bool)$useList;
    }

    /**
     * Returns string representation of object
     *
     * @return string
     *
     * @see Serializable::serialize()
     */
    public function serialize()
    {
        return serialize($this-&gt;__serialize());
    }

    /**
     * Returns an associative array of key/value pairs that represent the serialized form of the object
     *
     * @return array
     */
    public function __serialize()
    {
        $cookies = $this-&gt;getAll();
        if (!$this-&gt;serializeSession) {
            for ($i = count($cookies) - 1; $i &gt;= 0; $i--) {
                if (empty($cookies[$i]['expires'])) {
                    unset($cookies[$i]);
                }
            }
        }
        return [
            'cookies'          =&gt; $cookies,
            'serializeSession' =&gt; $this-&gt;serializeSession,
            'useList'          =&gt; $this-&gt;useList,
            'ignoreInvalid'    =&gt; $this-&gt;ignoreInvalid
        ];
    }

    /**
     * Constructs the object from serialized string
     *
     * @param string $data string representation
     *
     * @return void
     */
    public function unserialize($data)
    {
        $this-&gt;__unserialize(unserialize($data));
    }

    /**
     * Constructs the object from array serialized form
     *
     * @param array $data serialized form (as generated by {@see __serialize()}
     *
     * @return void
     */
    public function __unserialize(array $data)
    {
        $now = $this-&gt;now();
        $this-&gt;serializeSessionCookies($data['serializeSession']);
        $this-&gt;usePublicSuffixList($data['useList']);
        if (array_key_exists('ignoreInvalid', $data)) {
            $this-&gt;ignoreInvalidCookies($data['ignoreInvalid']);
        }
        foreach ($data['cookies'] as $cookie) {
            if (!empty($cookie['expires']) &amp;&amp; $cookie['expires'] &lt;= $now) {
                continue;
            }
            if (!isset($this-&gt;cookies[$cookie['domain']])) {
                $this-&gt;cookies[$cookie['domain']] = [];
            }
            if (!isset($this-&gt;cookies[$cookie['domain']][$cookie['path']])) {
                $this-&gt;cookies[$cookie['domain']][$cookie['path']] = [];
            }
            $this-&gt;cookies[$cookie['domain']][$cookie['path']][$cookie['name']] = $cookie;
        }
    }

    /**
     * Checks whether a cookie domain matches a request host.
     *
     * The method is used by {@link store()} to check for whether a document
     * at given URL can set a cookie with a given domain attribute and by
     * {@link getMatching()} to find cookies matching the request URL.
     *
     * @param string $requestHost  request host
     * @param string $cookieDomain cookie domain
     *
     * @return bool    match success
     */
    public function domainMatch($requestHost, $cookieDomain)
    {
        if ($requestHost == $cookieDomain) {
            return true;
        }
        // IP address, we require exact match
        if (preg_match('/^(?:\d{1,3}\.){3}\d{1,3}$/', $requestHost)) {
            return false;
        }
        if ('.' != $cookieDomain[0]) {
            $cookieDomain = '.' . $cookieDomain;
        }
        // prevents setting cookies for '.com' and similar domains
        if (!$this-&gt;useList &amp;&amp; substr_count($cookieDomain, '.') &lt; 2
            || $this-&gt;useList &amp;&amp; !self::getRegisteredDomain($cookieDomain)
        ) {
            return false;
        }
        return substr('.' . $requestHost, -strlen($cookieDomain)) == $cookieDomain;
    }

    /**
     * Removes subdomains to get the registered domain (the first after top-level)
     *
     * The method will check Public Suffix List to find out where top-level
     * domain ends and registered domain starts. It will remove domain parts
     * to the left of registered one.
     *
     * @param string $domain domain name
     *
     * @return string|bool   registered domain, will return false if $domain is
     *                       either invalid or a TLD itself
     */
    public static function getRegisteredDomain($domain)
    {
        $domainParts = explode('.', ltrim($domain, '.'));

        // load the list if needed
        if (empty(self::$psl)) {
            $path = '/usr/local/cpanel/3rdparty/php/84/lib/php/data' . DIRECTORY_SEPARATOR . 'HTTP_Request2';
            if (0 === strpos($path, '@' . 'data_dir@')) {
                if (false === $path = realpath(__DIR__ . '/../../data')) {
                    throw new HTTP_Request2_LogicException(
                        &quot;Unable to locate directory containing Public Suffix List&quot;,
                        HTTP_Request2_Exception::READ_ERROR
                    );
                }
            }
            self::$psl = include_once $path . DIRECTORY_SEPARATOR . 'public-suffix-list.php';
        }

        if (!($result = self::checkDomainsList($domainParts, self::$psl))) {
            // known TLD, invalid domain name
            return false;
        }

        // unknown TLD
        if (!strpos($result, '.')) {
            // fallback to checking that domain &quot;has at least two dots&quot;
            if (2 &gt; ($count = count($domainParts))) {
                return false;
            }
            return $domainParts[$count - 2] . '.' . $domainParts[$count - 1];
        }
        return $result;
    }

    /**
     * Recursive helper method for {@link getRegisteredDomain()}
     *
     * @param array $domainParts remaining domain parts
     * @param mixed $listNode    node in {@link HTTP_Request2_CookieJar::$psl} to check
     *
     * @return string|null   concatenated domain parts, null in case of error
     */
    protected static function checkDomainsList(array $domainParts, $listNode)
    {
        $sub = array_pop($domainParts);

        if (!is_array($listNode) || is_null($sub)
            || array_key_exists('!' . $sub, $listNode)
        ) {
            return $sub;

        } elseif (array_key_exists($sub, $listNode)) {
            $result = self::checkDomainsList($domainParts, $listNode[$sub]);

        } elseif (array_key_exists('*', $listNode)) {
            $result = self::checkDomainsList($domainParts, $listNode['*']);

        } else {
            return $sub;
        }

        return (strlen($result ?: '') &gt; 0) ? ($result . '.' . $sub) : null;
    }
}
?&gt;</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fcpanel%2F3rdparty%2Fphp%2F84%2Flib%2Fphp%2FHTTP%2FRequest2'>Back to Directory</a>