ave-cms/adminx/modules/Console/Runner.php

<?php

	/*
	|--------------------------------------------------------------------------------------
	| AVE.cms
	|--------------------------------------------------------------------------------------
	| @package      AVE.cms
	| @file         adminx/modules/Console/Runner.php
	| @author       AVE.cms <support@ave-cms.ru>
	| @copyright    2007-2026 (c) AVE.cms
	| @link         https://ave-cms.ru
	| @version      3.3
	*/

	namespace App\Adminx\Console;

	defined('BASEPATH') || die('Direct access to this location is not allowed.');

	use App\Adminx\Support\PhpCode;
	use App\Common\PublicConfiguration;
	use App\Common\TemporaryDirectory;

	class Runner
	{
		const TIMEOUT = 5;
		const OUTPUT_LIMIT = 262144;

		public static function enabled()
		{
			$value = getenv('ADMINX_CONSOLE_ENABLED');
			if ($value !== false && $value !== '') {
				return filter_var($value, FILTER_VALIDATE_BOOLEAN);
			}

			$config = PublicConfiguration::value('admin_console', array());
			return is_array($config) && !empty($config['enabled']);
		}

		public static function execute($code)
		{
			if (!self::enabled()) {
				throw new \RuntimeException('Выполнение PHP-консоли отключено окружением.');
			}

			if (!function_exists('proc_open')) {
				throw new \RuntimeException('proc_open недоступен: изолированный запуск невозможен.');
			}

			$lint = PhpCode::lint($code);
			if (!$lint['ok']) {
				throw new \RuntimeException($lint['message'] . ($lint['line'] ? ' Строка ' . $lint['line'] . '.' : ''));
			}

			$php = PhpCode::cliBinary();
			$dir = TemporaryDirectory::create('console');

			$codeFile = $dir . '/snippet.php';
			$runnerFile = $dir . '/runner.php';
			$runner = "<?php\n"
				. "define('START_MICROTIME', microtime());\n"
				. "define('START_MEMORY', memory_get_usage());\n"
				. "define('AVE_CMS', true);\n"
				. "define('DS', DIRECTORY_SEPARATOR);\n"
				. "define('BASEPATH', \$argv[1]);\n"
				. "define('SESSION_SAVE_HANDLER', 'Files');\n"
				. "\$_COOKIE = array();\n"
				. "unset(\$_SERVER['HTTP_COOKIE']);\n"
				. "include BASEPATH . DS . 'system' . DS . 'bootstrap.php';\n"
				. "App::init();\n"
				. "include \$argv[2];\n";
			@file_put_contents($codeFile, PhpCode::source($code));
			@file_put_contents($runnerFile, $runner);

			$command = escapeshellarg($php)
				. ' -d display_errors=1 -d memory_limit=128M'
				. ' -d disable_functions=exec,shell_exec,system,passthru,popen'
				. ' ' . escapeshellarg($runnerFile)
				. ' ' . escapeshellarg(BASEPATH)
				. ' ' . escapeshellarg($codeFile);
			$pipes = array();
			$process = @proc_open($command, array(
				0 => array('pipe', 'r'),
				1 => array('pipe', 'w'),
				2 => array('pipe', 'w'),
			), $pipes, $dir, null, array('bypass_shell' => DIRECTORY_SEPARATOR === '\\'));
			if (!is_resource($process)) {
				self::cleanup($dir);
				throw new \RuntimeException('Не удалось запустить PHP-процесс.');
			}

			fclose($pipes[0]);
			stream_set_blocking($pipes[1], false);
			stream_set_blocking($pipes[2], false);
			$started = microtime(true);
			$stdout = '';
			$stderr = '';
			$timedOut = false;
			$knownExitCode = null;
			do {
				$stdout .= (string) stream_get_contents($pipes[1]);
				$stderr .= (string) stream_get_contents($pipes[2]);
				$status = proc_get_status($process);
				if (!$status['running']) {
					$knownExitCode = isset($status['exitcode']) ? (int) $status['exitcode'] : null;
					break;
				}

				if (microtime(true) - $started >= self::TIMEOUT) {
					$timedOut = true;
					proc_terminate($process, 9);
					break;
				}

				usleep(20000);
			} while (true);
			$stdout .= (string) stream_get_contents($pipes[1]);
			$stderr .= (string) stream_get_contents($pipes[2]);
			fclose($pipes[1]);
			fclose($pipes[2]);
			$closedExitCode = proc_close($process);
			$exitCode = $knownExitCode !== null && $knownExitCode >= 0 ? $knownExitCode : $closedExitCode;
			self::cleanup($dir);

			$output = $stdout . ($stderr !== '' ? ($stdout !== '' ? "\n" : '') . $stderr : '');
			$truncated = strlen($output) > self::OUTPUT_LIMIT;
			if ($truncated) {
				$output = substr($output, 0, self::OUTPUT_LIMIT) . "\n[вывод сокращён]";
			}

			return array(
				'ok' => !$timedOut && $exitCode === 0,
				'exit_code' => $exitCode,
				'timed_out' => $timedOut,
				'truncated' => $truncated,
				'duration_ms' => (int) round((microtime(true) - $started) * 1000),
				'output' => $output,
			);
		}


		protected static function cleanup($dir)
		{
			TemporaryDirectory::remove($dir);
		}
	}