jedchecker/source/administrator/components/com_jedchecker/libraries/rules/jexec.php

<?php
/**
 * @author     eaxs
 * @date       06/08/2012
 * @copyright  Copyright (C) 2008 - 2012 compojoom.com . All rights reserved.
 * @license    GNU General Public License version 2 or later; see LICENSE
 */

defined('_JEXEC') or die('Restricted access');


/**
 * This class searches all files for the _JEXEC check
 * which prevents direct file access.
 *
 */
class jedcheckerRulesJexec
{
    /**
     * Holds all file names that failed to pass the check
     * @var    array
     */
    protected $missing;


    /**
     * Initiates the file search and check
     *
     * @param     string    $basedir    The base directory of the package to check
     * @return    void
     */
    public function check($basedir)
    {
        $this->missing = array();
        $files = JFolder::files($basedir, '.php', true, true);

        // Iterate through all files in the package
        foreach($files as $file)
        {
            // Try to find the _JEXEC check in the file
            if(!$this->findJExec($file)) {
                $this->missing[] = $file;
            }
        }


        echo '<span class="rule">'.JText::_('COM_JEDCHECKER_RULE_PH2') .'</span><br/>';
        if(count($this->missing)) {
            // Echo all files which don't have the _JEXEC check
            foreach($this->missing AS $file)
            {
                echo $file.'<br/>';
            }
        } else {
            echo '<span class="success">'.JText::_('COM_JEDCHECKER_EVERYTHING_SEEMS_TO_BE_FINE_WITH_THAT_RULE').'</span>';
        }

    }


    /**
     * Reads a file and searches for the _JEXEC statement
     *
     * @param     string    $file    The path to the file
     * @return    boolean            True if the statement was found, otherwise False.
     */
    protected function findJexec($file)
    {
        $content = (array) file($file);

        $defines = array(
            '_JEXEC',
            'JPATH_PLATFORM',
            'JPATH_BASE',
            'AKEEBAENGINE',
            'WF_EDITOR'
        );

        foreach($content AS $line)
        {
            foreach ($defines AS $define)
            {
                // Search for "defined"
                $pos_1 = stripos($line, 'defined');
                // Skip the line if "defined" is not found
                if ($pos_1 === false) {
                    continue;
                }

                // Search for "die".
                //  "or" may not be present depending on syntax
                $pos_3 = stripos($line, 'die');
                // Skip the line if "die" is not found
                if ($pos_3 === false) {
                    continue;
                }

                // Search for the define
                $pos_2 = strpos($line, $define);
                // Skip the line if the define is not found
                if($pos_2 === false) continue;

                // Check the position of the words
                if($pos_2 > $pos_1 && $pos_3 > $pos_2) {
                    unset($content);
                    return true;
                }
            }
        }

        unset($content);

        return false;
    }
}