public/index.php line 59

Open in your IDE?
  1. <?php
  3. use App\CacheKernel;
  4. use App\Kernel;
  5. use Symfony\Component\Dotenv\Dotenv;
  6. use Symfony\Component\ErrorHandler\Debug;
  7. use Symfony\Component\HttpFoundation\Request;
  9. # mainly for on-the-fly thumbnail generation via LiipImagine
  10. ini_set('memory_limit', '256M');
  12. date_default_timezone_set('UTC');
  14. require dirname(__DIR__).'/vendor/autoload.php';
  16. // @NOTE: Must be set BEFORE bootEnv(), so that Dotenv's populate() sees it in $_SERVER,
  17. // copies it into $_ENV, and then skips the default value from .env.prod.
  18. // This ensures %env(SESSION_COOKIE_DOMAIN)% resolves to the correct domain for this front controller.
  19. // Since APP_ENV isn't available yet, the check for the environment can only take place _after_
  20. // bootEnv has been called!
  21. $_SERVER['SESSION_COOKIE_DOMAIN'] = '.joboo.de';
  23. (new Dotenv())->bootEnv(dirname(__DIR__).'/.env');
  25. if ($_SERVER['APP_DEBUG']) {
  26. umask(0000);
  28. Debug::enable();
  29. }
  31. $kernel = new CacheKernel(new Kernel($_SERVER['APP_ENV'], (bool)$_SERVER['APP_DEBUG']));
  33. Request::enableHttpMethodParameterOverride();
  34. $request = Request::createFromGlobals();
  36. // @NOTE: bootEnv() copies $_SERVER vars into $_ENV as well (see Dotenv::populate()).
  37. // Symfony's EnvVarProcessor checks $_ENV *before* $_SERVER, so we must
  38. // unset the value from both superglobals for the removal to take effect.
  39. if ($_SERVER['APP_ENV'] !== 'prod') {
  40. unset(
  41. $_SERVER['SESSION_COOKIE_DOMAIN'],
  42. $_ENV['SESSION_COOKIE_DOMAIN']
  43. );
  44. }
  46. if ($_SERVER['APP_ENV'] === 'prod') {
  47. Request::setTrustedProxies(
  48. // This ensures that Symfony trusts all incoming requests (which are proxied to us via AWS ELBs).
  49. // Thus, Symfony will trust all "Forwarded" headers
  50. // ($_SERVER['HTTP_X_FORWARDED_PROTO'], $_SERVER['HTTP_X_FORWARDED_PORT'], $_SERVER['HTTP_X_FORWARDED_FOR'])
  51. // and will create correct redirects, e.g. to an https location if we are on an https page.
  52. ['127.0.0.1', $request->server->get('REMOTE_ADDR'), '10.0.0.0/8', '172.16.0.0/12', '192.168.0.0/16'],
  54. // trust *all* "X-Forwarded-*" headers
  55. Request::HEADER_X_FORWARDED_AWS_ELB
  56. );
  57. }
  59. $response = $kernel->handle($request);
  60. $response->send();
  61. $kernel->terminate($request, $response);