Namespace and ClassPath rewrites

Core/External/.gitignore

@@ -0,0 +1,2 @@
+vendor/
+cache/

Core/External/.htaccess

@@ -0,0 +1 @@
+Deny from all

Core/External/PHPMailer/Exception.php

@@ -0,0 +1,40 @@
+<?php
+
+/**
+ * PHPMailer Exception class.
+ * PHP Version 5.5.
+ *
+ * @see       https://github.com/PHPMailer/PHPMailer/ The PHPMailer GitHub project
+ *
+ * @author    Marcus Bointon (Synchro/coolbru) <phpmailer@synchromedia.co.uk>
+ * @author    Jim Jagielski (jimjag) <jimjag@gmail.com>
+ * @author    Andy Prevost (codeworxtech) <codeworxtech@users.sourceforge.net>
+ * @author    Brent R. Matzelle (original founder)
+ * @copyright 2012 - 2020 Marcus Bointon
+ * @copyright 2010 - 2012 Jim Jagielski
+ * @copyright 2004 - 2009 Andy Prevost
+ * @license   http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License
+ * @note      This program is distributed in the hope that it will be useful - WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE.
+ */
+
+namespace Core\External\PHPMailer;
+
+/**
+ * PHPMailer exception handler.
+ *
+ * @author Marcus Bointon <phpmailer@synchromedia.co.uk>
+ */
+class Exception extends \Exception
+{
+    /**
+     * Prettify error message output.
+     *
+     * @return string
+     */
+    public function errorMessage()
+    {
+        return '<strong>' . htmlspecialchars($this->getMessage(), ENT_COMPAT | ENT_HTML401) . "</strong><br />\n";
+    }
+}

Core/External/PHPMailer/OAuth.php

@@ -0,0 +1,139 @@
+<?php
+
+/**
+ * PHPMailer - PHP email creation and transport class.
+ * PHP Version 5.5.
+ *
+ * @see       https://github.com/PHPMailer/PHPMailer/ The PHPMailer GitHub project
+ *
+ * @author    Marcus Bointon (Synchro/coolbru) <phpmailer@synchromedia.co.uk>
+ * @author    Jim Jagielski (jimjag) <jimjag@gmail.com>
+ * @author    Andy Prevost (codeworxtech) <codeworxtech@users.sourceforge.net>
+ * @author    Brent R. Matzelle (original founder)
+ * @copyright 2012 - 2020 Marcus Bointon
+ * @copyright 2010 - 2012 Jim Jagielski
+ * @copyright 2004 - 2009 Andy Prevost
+ * @license   http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License
+ * @note      This program is distributed in the hope that it will be useful - WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE.
+ */
+
+namespace Core\External\PHPMailer;
+
+use League\OAuth2\Client\Grant\RefreshToken;
+use League\OAuth2\Client\Provider\AbstractProvider;
+use League\OAuth2\Client\Token\AccessToken;
+
+/**
+ * OAuth - OAuth2 authentication wrapper class.
+ * Uses the oauth2-client package from the League of Extraordinary Packages.
+ *
+ * @see     http://oauth2-client.thephpleague.com
+ *
+ * @author  Marcus Bointon (Synchro/coolbru) <phpmailer@synchromedia.co.uk>
+ */
+class OAuth
+{
+    /**
+     * An instance of the League OAuth Client Provider.
+     *
+     * @var AbstractProvider
+     */
+    protected $provider;
+
+    /**
+     * The current OAuth access token.
+     *
+     * @var AccessToken
+     */
+    protected $oauthToken;
+
+    /**
+     * The user's email address, usually used as the login ID
+     * and also the from address when sending email.
+     *
+     * @var string
+     */
+    protected $oauthUserEmail = '';
+
+    /**
+     * The client secret, generated in the app definition of the service you're connecting to.
+     *
+     * @var string
+     */
+    protected $oauthClientSecret = '';
+
+    /**
+     * The client ID, generated in the app definition of the service you're connecting to.
+     *
+     * @var string
+     */
+    protected $oauthClientId = '';
+
+    /**
+     * The refresh token, used to obtain new AccessTokens.
+     *
+     * @var string
+     */
+    protected $oauthRefreshToken = '';
+
+    /**
+     * OAuth constructor.
+     *
+     * @param array $options Associative array containing
+     *                       `provider`, `userName`, `clientSecret`, `clientId` and `refreshToken` elements
+     */
+    public function __construct($options)
+    {
+        $this->provider = $options['provider'];
+        $this->oauthUserEmail = $options['userName'];
+        $this->oauthClientSecret = $options['clientSecret'];
+        $this->oauthClientId = $options['clientId'];
+        $this->oauthRefreshToken = $options['refreshToken'];
+    }
+
+    /**
+     * Get a new RefreshToken.
+     *
+     * @return RefreshToken
+     */
+    protected function getGrant()
+    {
+        return new RefreshToken();
+    }
+
+    /**
+     * Get a new AccessToken.
+     *
+     * @return AccessToken
+     */
+    protected function getToken()
+    {
+        return $this->provider->getAccessToken(
+            $this->getGrant(),
+            ['refresh_token' => $this->oauthRefreshToken]
+        );
+    }
+
+    /**
+     * Generate a base64-encoded OAuth token.
+     *
+     * @return string
+     */
+    public function getOauth64()
+    {
+        //Get a new token if it's not available or has expired
+        if (null === $this->oauthToken || $this->oauthToken->hasExpired()) {
+            $this->oauthToken = $this->getToken();
+        }
+
+        return base64_encode(
+            'user=' .
+            $this->oauthUserEmail .
+            "\001auth=Bearer " .
+            $this->oauthToken .
+            "\001\001"
+        );
+    }
+}

Core/External/PHPMailer/POP3.php

@@ -0,0 +1,462 @@
+<?php
+
+/**
+ * PHPMailer POP-Before-SMTP Authentication Class.
+ * PHP Version 5.5.
+ *
+ * @see https://github.com/PHPMailer/PHPMailer/ The PHPMailer GitHub project
+ *
+ * @author    Marcus Bointon (Synchro/coolbru) <phpmailer@synchromedia.co.uk>
+ * @author    Jim Jagielski (jimjag) <jimjag@gmail.com>
+ * @author    Andy Prevost (codeworxtech) <codeworxtech@users.sourceforge.net>
+ * @author    Brent R. Matzelle (original founder)
+ * @copyright 2012 - 2020 Marcus Bointon
+ * @copyright 2010 - 2012 Jim Jagielski
+ * @copyright 2004 - 2009 Andy Prevost
+ * @license   http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License
+ * @note      This program is distributed in the hope that it will be useful - WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE.
+ */
+
+namespace Core\External\PHPMailer;
+
+/**
+ * PHPMailer POP-Before-SMTP Authentication Class.
+ * Specifically for PHPMailer to use for RFC1939 POP-before-SMTP authentication.
+ * 1) This class does not support APOP authentication.
+ * 2) Opening and closing lots of POP3 connections can be quite slow. If you need
+ *   to send a batch of emails then just perform the authentication once at the start,
+ *   and then loop through your mail sending script. Providing this process doesn't
+ *   take longer than the verification period lasts on your POP3 server, you should be fine.
+ * 3) This is really ancient technology; you should only need to use it to talk to very old systems.
+ * 4) This POP3 class is deliberately lightweight and incomplete, implementing just
+ *   enough to do authentication.
+ *   If you want a more complete class there are other POP3 classes for PHP available.
+ *
+ * @author Richard Davey (original author) <rich@corephp.co.uk>
+ * @author Marcus Bointon (Synchro/coolbru) <phpmailer@synchromedia.co.uk>
+ * @author Jim Jagielski (jimjag) <jimjag@gmail.com>
+ * @author Andy Prevost (codeworxtech) <codeworxtech@users.sourceforge.net>
+ */
+class POP3
+{
+    /**
+     * The POP3 PHPMailer Version number.
+     *
+     * @var string
+     */
+    const VERSION = '6.5.1';
+
+    /**
+     * Default POP3 port number.
+     *
+     * @var int
+     */
+    const DEFAULT_PORT = 110;
+
+    /**
+     * Default timeout in seconds.
+     *
+     * @var int
+     */
+    const DEFAULT_TIMEOUT = 30;
+
+    /**
+     * POP3 class debug output mode.
+     * Debug output level.
+     * Options:
+     * @see POP3::DEBUG_OFF: No output
+     * @see POP3::DEBUG_SERVER: Server messages, connection/server errors
+     * @see POP3::DEBUG_CLIENT: Client and Server messages, connection/server errors
+     *
+     * @var int
+     */
+    public $do_debug = self::DEBUG_OFF;
+
+    /**
+     * POP3 mail server hostname.
+     *
+     * @var string
+     */
+    public $host;
+
+    /**
+     * POP3 port number.
+     *
+     * @var int
+     */
+    public $port;
+
+    /**
+     * POP3 Timeout Value in seconds.
+     *
+     * @var int
+     */
+    public $tval;
+
+    /**
+     * POP3 username.
+     *
+     * @var string
+     */
+    public $username;
+
+    /**
+     * POP3 password.
+     *
+     * @var string
+     */
+    public $password;
+
+    /**
+     * Resource handle for the POP3 connection socket.
+     *
+     * @var resource
+     */
+    protected $pop_conn;
+
+    /**
+     * Are we connected?
+     *
+     * @var bool
+     */
+    protected $connected = false;
+
+    /**
+     * Error container.
+     *
+     * @var array
+     */
+    protected $errors = [];
+
+    /**
+     * Line break constant.
+     */
+    const LE = "\r\n";
+
+    /**
+     * Debug level for no output.
+     *
+     * @var int
+     */
+    const DEBUG_OFF = 0;
+
+    /**
+     * Debug level to show server -> client messages
+     * also shows clients connection errors or errors from server
+     *
+     * @var int
+     */
+    const DEBUG_SERVER = 1;
+
+    /**
+     * Debug level to show client -> server and server -> client messages.
+     *
+     * @var int
+     */
+    const DEBUG_CLIENT = 2;
+
+    /**
+     * Simple static wrapper for all-in-one POP before SMTP.
+     *
+     * @param string   $host        The hostname to connect to
+     * @param int|bool $port        The port number to connect to
+     * @param int|bool $timeout     The timeout value
+     * @param string   $username
+     * @param string   $password
+     * @param int      $debug_level
+     *
+     * @return bool
+     */
+    public static function popBeforeSmtp(
+        $host,
+        $port = false,
+        $timeout = false,
+        $username = '',
+        $password = '',
+        $debug_level = 0
+    ) {
+        $pop = new self();
+
+        return $pop->authorise($host, $port, $timeout, $username, $password, $debug_level);
+    }
+
+    /**
+     * Authenticate with a POP3 server.
+     * A connect, login, disconnect sequence
+     * appropriate for POP-before SMTP authorisation.
+     *
+     * @param string   $host        The hostname to connect to
+     * @param int|bool $port        The port number to connect to
+     * @param int|bool $timeout     The timeout value
+     * @param string   $username
+     * @param string   $password
+     * @param int      $debug_level
+     *
+     * @return bool
+     */
+    public function authorise($host, $port = false, $timeout = false, $username = '', $password = '', $debug_level = 0)
+    {
+        $this->host = $host;
+        //If no port value provided, use default
+        if (false === $port) {
+            $this->port = static::DEFAULT_PORT;
+        } else {
+            $this->port = (int) $port;
+        }
+        //If no timeout value provided, use default
+        if (false === $timeout) {
+            $this->tval = static::DEFAULT_TIMEOUT;
+        } else {
+            $this->tval = (int) $timeout;
+        }
+        $this->do_debug = $debug_level;
+        $this->username = $username;
+        $this->password = $password;
+        //Reset the error log
+        $this->errors = [];
+        //Connect
+        $result = $this->connect($this->host, $this->port, $this->tval);
+        if ($result) {
+            $login_result = $this->login($this->username, $this->password);
+            if ($login_result) {
+                $this->disconnect();
+
+                return true;
+            }
+        }
+        //We need to disconnect regardless of whether the login succeeded
+        $this->disconnect();
+
+        return false;
+    }
+
+    /**
+     * Connect to a POP3 server.
+     *
+     * @param string   $host
+     * @param int|bool $port
+     * @param int      $tval
+     *
+     * @return bool
+     */
+    public function connect($host, $port = false, $tval = 30)
+    {
+        //Are we already connected?
+        if ($this->connected) {
+            return true;
+        }
+
+        //On Windows this will raise a PHP Warning error if the hostname doesn't exist.
+        //Rather than suppress it with @fsockopen, capture it cleanly instead
+        set_error_handler([$this, 'catchWarning']);
+
+        if (false === $port) {
+            $port = static::DEFAULT_PORT;
+        }
+
+        //Connect to the POP3 server
+        $errno = 0;
+        $errstr = '';
+        $this->pop_conn = fsockopen(
+            $host, //POP3 Host
+            $port, //Port #
+            $errno, //Error Number
+            $errstr, //Error Message
+            $tval
+        ); //Timeout (seconds)
+        //Restore the error handler
+        restore_error_handler();
+
+        //Did we connect?
+        if (false === $this->pop_conn) {
+            //It would appear not...
+            $this->setError(
+                "Failed to connect to server $host on port $port. errno: $errno; errstr: $errstr"
+            );
+
+            return false;
+        }
+
+        //Increase the stream time-out
+        stream_set_timeout($this->pop_conn, $tval, 0);
+
+        //Get the POP3 server response
+        $pop3_response = $this->getResponse();
+        //Check for the +OK
+        if ($this->checkResponse($pop3_response)) {
+            //The connection is established and the POP3 server is talking
+            $this->connected = true;
+
+            return true;
+        }
+
+        return false;
+    }
+
+    /**
+     * Log in to the POP3 server.
+     * Does not support APOP (RFC 2828, 4949).
+     *
+     * @param string $username
+     * @param string $password
+     *
+     * @return bool
+     */
+    public function login($username = '', $password = '')
+    {
+        if (!$this->connected) {
+            $this->setError('Not connected to POP3 server');
+            return false;
+        }
+        if (empty($username)) {
+            $username = $this->username;
+        }
+        if (empty($password)) {
+            $password = $this->password;
+        }
+
+        //Send the Username
+        $this->sendString("USER $username" . static::LE);
+        $pop3_response = $this->getResponse();
+        if ($this->checkResponse($pop3_response)) {
+            //Send the Password
+            $this->sendString("PASS $password" . static::LE);
+            $pop3_response = $this->getResponse();
+            if ($this->checkResponse($pop3_response)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * Disconnect from the POP3 server.
+     */
+    public function disconnect()
+    {
+        $this->sendString('QUIT');
+
+        // RFC 1939 shows POP3 server sending a +OK response to the QUIT command.
+        // Try to get it.  Ignore any failures here.
+        try {
+            $this->getResponse();
+        } catch (Exception $e) {
+            //Do nothing
+        }
+
+        //The QUIT command may cause the daemon to exit, which will kill our connection
+        //So ignore errors here
+        try {
+            @fclose($this->pop_conn);
+        } catch (Exception $e) {
+            //Do nothing
+        }
+
+        // Clean up attributes.
+        $this->connected = false;
+        $this->pop_conn  = false;
+    }
+
+    /**
+     * Get a response from the POP3 server.
+     *
+     * @param int $size The maximum number of bytes to retrieve
+     *
+     * @return string
+     */
+    protected function getResponse($size = 128)
+    {
+        $response = fgets($this->pop_conn, $size);
+        if ($this->do_debug >= self::DEBUG_SERVER) {
+            echo 'Server -> Client: ', $response;
+        }
+
+        return $response;
+    }
+
+    /**
+     * Send raw data to the POP3 server.
+     *
+     * @param string $string
+     *
+     * @return int
+     */
+    protected function sendString($string)
+    {
+        if ($this->pop_conn) {
+            if ($this->do_debug >= self::DEBUG_CLIENT) { //Show client messages when debug >= 2
+                echo 'Client -> Server: ', $string;
+            }
+
+            return fwrite($this->pop_conn, $string, strlen($string));
+        }
+
+        return 0;
+    }
+
+    /**
+     * Checks the POP3 server response.
+     * Looks for for +OK or -ERR.
+     *
+     * @param string $string
+     *
+     * @return bool
+     */
+    protected function checkResponse($string)
+    {
+        if (strpos($string, '+OK') !== 0) {
+            $this->setError("Server reported an error: $string");
+
+            return false;
+        }
+
+        return true;
+    }
+
+    /**
+     * Add an error to the internal error store.
+     * Also display debug output if it's enabled.
+     *
+     * @param string $error
+     */
+    protected function setError($error)
+    {
+        $this->errors[] = $error;
+        if ($this->do_debug >= self::DEBUG_SERVER) {
+            echo '<pre>';
+            foreach ($this->errors as $e) {
+                print_r($e);
+            }
+            echo '</pre>';
+        }
+    }
+
+    /**
+     * Get an array of error messages, if any.
+     *
+     * @return array
+     */
+    public function getErrors()
+    {
+        return $this->errors;
+    }
+
+    /**
+     * POP3 connection error handler.
+     *
+     * @param int    $errno
+     * @param string $errstr
+     * @param string $errfile
+     * @param int    $errline
+     */
+    protected function catchWarning($errno, $errstr, $errfile, $errline)
+    {
+        $this->setError(
+            'Connecting to the POP3 server raised a PHP warning:' .
+            "errno: $errno errstr: $errstr; errfile: $errfile; errline: $errline"
+        );
+    }
+}

Core/External/ZipStream/BufferWriter.php

@@ -0,0 +1,62 @@
+<?php
+
+/**
+ * Copyright (c) Borago 2019
+ *
+ * This software is provided 'as-is', without any express or implied
+ * warranty. In no event will the authors be held liable for any damages
+ * arising from the use of this software.
+ *
+ * Permission is granted to anyone to use this software for any purpose,
+ * including commercial applications, and to alter it and redistribute it
+ * freely, subject to the following restrictions:
+ *
+ * 1. The origin of this software must not be misrepresented; you must not
+ *    claim that you wrote the original software. If you use this software
+ *    in a product, an acknowledgment in the product documentation would be
+ *    appreciated but is not required.
+ * 2. Altered source versions must be plainly marked as such, and must not be
+ *    misrepresented as being the original software.
+ * 3. This notice may not be removed or altered from any source distribution.
+ **/
+
+namespace Core\External\ZipStream {
+  class BufferWriter implements Writer {
+    private $stream = '';
+    private $offset = 0;
+    private $callback = null;
+
+    public function __construct() {
+
+    }
+
+    public function registerCallback($callback) {
+      $this->callback = $callback;
+    }
+
+    public function write($data) {
+      $this->offset += strlen($data);
+      $this->stream .= $data;
+      if ($this->callback !== null) {
+        call_user_func($this->callback, $this);
+      }
+      return strlen($data);
+    }
+
+    public function read() {
+      $data = $this->stream;
+      $this->stream = '';
+      return $data;
+    }
+
+    public function offset() {
+      return $this->offset;
+    }
+
+    public function close() {
+      if ($this->callback !== null) {
+        call_user_func($this->callback, $this);
+      }
+    }
+  }
+}

Core/External/ZipStream/File.php

@@ -0,0 +1,284 @@
+<?php
+
+/**
+ * Copyright (c) Borago 2019
+ *
+ * This software is provided 'as-is', without any express or implied
+ * warranty. In no event will the authors be held liable for any damages
+ * arising from the use of this software.
+ *
+ * Permission is granted to anyone to use this software for any purpose,
+ * including commercial applications, and to alter it and redistribute it
+ * freely, subject to the following restrictions:
+ *
+ * 1. The origin of this software must not be misrepresented; you must not
+ *    claim that you wrote the original software. If you use this software
+ *    in a product, an acknowledgment in the product documentation would be
+ *    appreciated but is not required.
+ * 2. Altered source versions must be plainly marked as such, and must not be
+ *    misrepresented as being the original software.
+ * 3. This notice may not be removed or altered from any source distribution.
+ **/
+
+namespace Core\External\ZipStream {
+  class File {
+    private $name;
+    private $content = '';
+    private $fileHandle = false;
+    private $lastModificationTimestamp;
+    protected $fileSize = 0;
+    protected $compressedSize = 0;
+    private $offset = 0;
+    private $bitField = 0;
+    protected $useCompression = true;
+    private $deflateState = null;
+
+    //check for duplications //currently not used
+    protected $crc32 = null;
+    protected $sha256;
+
+    public const BIT_NO_SIZE_IN_HEADER = 0b0000000000001000;
+    public const BIT_UTF8_NAMES = 0b0000100000000000;
+
+    public function __construct($name) {
+      $this->name = $name;
+      $this->lastModificationTimestamp = time();
+      $this->crc32 = hash('crc32b', '', true);
+      $this->compressedSize = 0;
+      $this->fileSize = 0;
+
+      $this->bitField = 0;
+      $this->bitField |= self::BIT_NO_SIZE_IN_HEADER;
+      $this->bitField |= self::BIT_UTF8_NAMES;
+
+      $this->deflateState = deflate_init(ZLIB_ENCODING_RAW);
+    }
+
+    public function disableCompression() {
+      $this->useCompression = false;
+    }
+
+    public function setContent($content) {
+      $this->crc32 = hash('crc32b', $content, true);
+      $this->sha256 = hash('sha256', $content);
+      $this->content = $content;
+      $this->fileSize = strlen($content);
+      $this->fileHandle = false;
+    }
+
+    public function loadFromFile($filename) {
+      $this->crc32 = hash_file('crc32b', $filename, true);
+      $this->sha256 = hash_file('sha256', $filename);
+      $this->fileSize = filesize($filename);
+      $this->fileHandle = fopen($filename, 'rb');
+    }
+
+    public function name() {
+      return $this->name;
+    }
+
+    public function sha256() {
+      return $this->sha256;
+    }
+
+    private function unixTimeToDosTime($timestamp) {
+      $hour = intval(date('H', $timestamp));
+      $min = intval(date('i', $timestamp));
+      $sec = intval(date('s', $timestamp));
+      return ($hour << 11) |
+        ($min << 5) |
+        ($sec >> 1);
+    }
+
+    private function unixTimeToDosDate($timestamp) {
+      $year = intval(date('Y', $timestamp));
+      $month = intval(date('m', $timestamp));
+      $day = intval(date('d', $timestamp));
+      return (($year - 1980) << 9) |
+        ($month << 5) |
+        ($day);
+    }
+
+    public function readLocalFileHeader(bool $zip64 = false) {
+      if (!$this->useCompression) {
+        $this->compressedSize = $this->fileSize;
+      }
+      
+      $header = "";
+      $header .= "\x50\x4b\x03\x04";
+      $header .= $zip64 ? "\x2d\x00" : "\x14\x00"; //version 2.0 and MS-DOS compatible
+      $header .= pack("v", $this->bitField); //general purpose bit flag
+      if ($this->useCompression) {
+        $header .= "\x08\x00"; //compression Method - deflate
+      } else {
+        $header .= "\x00\x00"; //compression Method - no
+      }
+      $header .= pack("v", $this->unixTimeToDosTime($this->lastModificationTimestamp)); //dos time
+      $header .= pack("v", $this->unixTimeToDosDate($this->lastModificationTimestamp)); //dos date
+
+      if ($zip64) {
+        if ($this->bitField & self::BIT_NO_SIZE_IN_HEADER) {
+          $header .= pack("V", 0); //crc32
+        } else {
+          $header .= strrev($this->crc32);
+        }
+        $header .= "\xFF\xFF\xFF\xFF"; //compressed Size
+        $header .= "\xFF\xFF\xFF\xFF"; //uncompressed Size
+      } else {
+        if ($this->bitField & self::BIT_NO_SIZE_IN_HEADER) {
+          $header .= pack("V", 0); //crc32
+          $header .= pack("V", 0); //compressed Size
+          $header .= pack("V", 0); //uncompressed Size
+        } else {
+          $header .= strrev($this->crc32);
+          $header .= pack("V", $this->compressedSize); //compressed Size
+          $header .= pack("V", $this->fileSize); //uncompressed Size
+        }
+      }
+
+      $header .= pack("v", strlen($this->name)); //filename
+      if ($zip64) {
+        $header .= pack("v", 16+4); //extra field length (signatures + data)
+        $header .= $this->name;
+        $header .= pack("v", 0x0001); # Zip64 extended information extra field
+        $header .= pack("v", 16); // 2 * 8 byte
+        if ($this->bitField & self::BIT_NO_SIZE_IN_HEADER) {
+          $header .= pack("P", 0);
+          $header .= pack("P", 0);
+        } else {
+          $header .= pack("P", $this->compressedSize);
+          $header .= pack("P", $this->fileSize);
+        }
+      } else {
+        $header .= "\x00\x00"; //extra field length
+        $header .= $this->name;
+      }
+
+      return $header;
+    }
+
+    public function readDataDescriptor(bool $zip64 = false) {
+
+      if (!$this->useCompression) {
+        $this->compressedSize = $this->fileSize;
+      }
+
+      $data = "";
+      $data .= "\x50\x4b\x07\x08";
+      $data .= strrev($this->crc32);
+      $data .= $zip64 ? pack("P", $this->compressedSize) : pack("V", $this->compressedSize); //compressed Size
+      $data .= $zip64 ? pack("P", $this->fileSize) : pack("V", $this->fileSize); //uncompressed Size
+      return $data;
+    }
+
+    public function readFileDataImp() {
+      $ret = null;
+      if ($this->fileHandle !== false) {
+        $block = fread($this->fileHandle, 65536);
+        if (!empty($block)) {
+          $ret = $block;
+        }
+      } else {
+        $ret = $this->content;
+        $this->content = null;
+      }
+      return $ret;
+    }
+
+    protected function compress($block) {
+
+      $ret = null;
+      if ($this->deflateState !== null) {
+        if (!empty($block)) {
+          $ret = deflate_add($this->deflateState, $block, ZLIB_NO_FLUSH);
+        } else {
+          $ret = deflate_add($this->deflateState, '', ZLIB_FINISH);
+          $this->deflateState = null;
+        }
+
+        $this->compressedSize += strlen($ret);
+      }
+
+      return $ret;
+    }
+
+    public function readFileData() {
+      $ret = null;
+      if ($this->useCompression) {
+        $block = $this->readFileDataImp();
+        $ret = $this->compress($block);
+      } else {
+        $ret = $this->readFileDataImp();
+      }
+      return $ret;
+    }
+
+    public function setOffset($offset) {
+      $this->offset = $offset;
+    }
+
+    public function readCentralDirectoryHeader(bool $zip64 = false) {
+
+      $maxInt32 = 0xFFFFFFFF;
+      $extraFields = "";
+
+      // Compressed Size
+      if ($zip64 && $this->compressedSize >= $maxInt32) {
+        $compressedSize = "\xFF\xFF\xFF\xFF";
+        $extraFields .= pack("P", $this->compressedSize);
+      } else {
+        $compressedSize = pack("V", $this->compressedSize);
+      }
+
+      // Uncompressed Size
+      if ($zip64 && $this->fileSize >= $maxInt32) {
+        $fileSize = "\xFF\xFF\xFF\xFF";
+        $extraFields .= pack("P", $this->fileSize);
+      } else {
+        $fileSize = pack("V", $this->fileSize);
+      }
+
+      // Offset
+      if ($zip64 && $this->offset >= $maxInt32) {
+        $offset = "\xFF\xFF\xFF\xFF";
+        $extraFields .= pack("P", $this->offset);
+      } else {
+        $offset = pack("V", $this->offset);
+      }
+
+      $header = "";
+      $header .= "\x50\x4b\x01\x02";
+      $header .= $zip64 ? "\x2d\x00" : "\x14\x00"; //version 2.0 and MS-DOS compatible
+      $header .= $zip64 ? "\x2d\x00" : "\x14\x00"; //version 2.0 and MS-DOS compatible
+      $header .= pack("v", $this->bitField); //general purpose bit flag
+      $header .= $this->useCompression ? "\x08\x00" : "\x00\x00"; //compression Method - no
+      $header .= pack("v", $this->unixTimeToDosTime($this->lastModificationTimestamp)); //dos time
+      $header .= pack("v", $this->unixTimeToDosDate($this->lastModificationTimestamp)); //dos date
+      $header .= strrev($this->crc32);
+      $header .= $compressedSize; //compressed Size
+      $header .= $fileSize; //uncompressed Size
+      $header .= pack("v", strlen($this->name)); //filename
+      $header .= (strlen($extraFields) > 0) ? pack('v', strlen($extraFields) + 4) : "\x00\x00"; //extra field length
+      $header .= "\x00\x00"; //comment length
+      $header .= "\x00\x00"; //disk num start
+      $header .= "\x00\x00"; //int file attr
+      $header .= "\x00\x00\x00\x00"; //ext file attr
+      $header .= $offset; //relative offset
+      $header .= $this->name;
+
+      if (strlen($extraFields) > 0) {
+        $header .= pack("v", 0x0001); # Zip64 extended information extra field
+        $header .= pack("v", strlen($extraFields));
+        $header .= $extraFields;
+      }
+
+      return $header;
+    }
+
+    public function closeHandle() {
+      if ($this->fileHandle) {
+        fclose($this->fileHandle);
+      }
+    }
+  }
+}

Core/External/ZipStream/FileStream.class.php

@@ -0,0 +1,46 @@
+<?php
+
+namespace Core\External\ZipStream {
+
+  use HashContext;
+  use Core\Objects\AesStream;
+
+  class FileStream extends File {
+
+    private AesStream $stream;
+    private HashContext $crc32ctx;
+    private HashContext $sha256ctx;
+
+    public function __construct(AesStream $stream, string $name) {
+      parent::__construct($name);
+      $this->stream = $stream;
+      $this->crc32ctx = hash_init('crc32b');
+      $this->sha256ctx = hash_init('sha256');
+    }
+
+    public function getStream(): AesStream {
+      return $this->stream;
+    }
+
+    public function finalize() {
+      $this->crc32 = hash_final($this->crc32ctx, true);
+      $this->sha256 = hash_final($this->sha256ctx);
+      return $this->compress(null);
+    }
+
+    public function processChunk($chunk) {
+
+      hash_update($this->crc32ctx, $chunk);
+      hash_update($this->sha256ctx, $chunk);
+      $this->fileSize += strlen($chunk);
+
+      if ($this->useCompression) {
+        $chunk = $this->compress($chunk);
+      }
+
+      return $chunk;
+    }
+
+  }
+
+}

Core/External/ZipStream/FileWriter.php

@@ -0,0 +1,63 @@
+<?php
+
+/**
+ * Copyright (c) Borago 2019
+ *
+ * This software is provided 'as-is', without any express or implied
+ * warranty. In no event will the authors be held liable for any damages
+ * arising from the use of this software.
+ *
+ * Permission is granted to anyone to use this software for any purpose,
+ * including commercial applications, and to alter it and redistribute it
+ * freely, subject to the following restrictions:
+ *
+ * 1. The origin of this software must not be misrepresented; you must not
+ *    claim that you wrote the original software. If you use this software
+ *    in a product, an acknowledgment in the product documentation would be
+ *    appreciated but is not required.
+ * 2. Altered source versions must be plainly marked as such, and must not be
+ *    misrepresented as being the original software.
+ * 3. This notice may not be removed or altered from any source distribution.
+ **/
+
+namespace Core\External\ZipStream {
+  class FileWriter implements Writer {
+    private $offset = 0;
+    private $fileHandle = false;
+
+    public function __construct($filename) {
+      if (!empty($filename)) {
+        $this->open($filename);
+      }
+    }
+
+    public function __destruct() {
+      $this->close();
+    }
+
+    public function open($filename) {
+      $this->close();
+      $this->fileHandle = fopen($filename, 'wb');
+    }
+
+    public function write($data) {
+      $this->offset += strlen($data);
+      if ($this->fileHandle === false) {
+        throw new \Exception('No file opened.');
+      } else {
+        return fwrite($this->fileHandle, $data);
+      }
+    }
+
+    public function offset() {
+      return $this->offset;
+    }
+
+    public function close() {
+      if ($this->fileHandle !== false) {
+        fclose($this->fileHandle);
+      }
+      $this->fileHandle = false;
+    }
+  }
+}

Core/External/ZipStream/Writer.php

@@ -0,0 +1,29 @@
+<?php
+
+/**
+ * Copyright (c) Borago 2019
+ *
+ * This software is provided 'as-is', without any express or implied
+ * warranty. In no event will the authors be held liable for any damages
+ * arising from the use of this software.
+ *
+ * Permission is granted to anyone to use this software for any purpose,
+ * including commercial applications, and to alter it and redistribute it
+ * freely, subject to the following restrictions:
+ *
+ * 1. The origin of this software must not be misrepresented; you must not
+ *    claim that you wrote the original software. If you use this software
+ *    in a product, an acknowledgment in the product documentation would be
+ *    appreciated but is not required.
+ * 2. Altered source versions must be plainly marked as such, and must not be
+ *    misrepresented as being the original software.
+ * 3. This notice may not be removed or altered from any source distribution.
+ **/
+
+namespace Core\External\ZipStream {
+  interface Writer {
+    public function write($data);
+    public function close();
+    public function offset();
+  }
+}

Core/External/ZipStream/ZipStream.php

@@ -0,0 +1,108 @@
+<?php
+
+/**
+ * Copyright (c) Borago 2019
+ *
+ * This software is provided 'as-is', without any express or implied
+ * warranty. In no event will the authors be held liable for any damages
+ * arising from the use of this software.
+ *
+ * Permission is granted to anyone to use this software for any purpose,
+ * including commercial applications, and to alter it and redistribute it
+ * freely, subject to the following restrictions:
+ *
+ * 1. The origin of this software must not be misrepresented; you must not
+ *    claim that you wrote the original software. If you use this software
+ *    in a product, an acknowledgment in the product documentation would be
+ *    appreciated but is not required.
+ * 2. Altered source versions must be plainly marked as such, and must not be
+ *    misrepresented as being the original software.
+ * 3. This notice may not be removed or altered from any source distribution.
+ **/
+
+namespace Core\External\ZipStream {
+  class ZipStream {
+    private $writer = null;
+    private array $files = [];
+    private bool $zip64;
+
+    public function __construct($writer, $zip64 = false) {
+      $this->writer = $writer;
+      $this->zip64 = $zip64;
+    }
+
+    public function saveFile($file) {
+      $isSymlink = false; //currently not used
+      foreach ($this->files as $f) {
+        if ($f->name() == $file->name()) {
+          return false;
+        }
+        if ($f->sha256() == $file->sha256()) {
+          $isSymlink = true;
+        }
+      }
+      $file->setOffset($this->writer->offset());
+      $this->writer->write($file->readLocalFileHeader($this->zip64));
+
+      if ($file instanceof FileStream) {
+        $file->getStream()->setOutput(function ($chunk) use ($file) {
+          $this->writer->write($file->processChunk($chunk));
+        });
+        $file->getStream()->start();
+        $this->writer->write($file->finalize());
+      } else {
+        while (($buffer = $file->readFileData()) !== null) {
+          $this->writer->write($buffer);
+        }
+      }
+
+      $this->writer->write($file->readDataDescriptor($this->zip64));
+      $this->files[] = $file;
+      $file->closeHandle();
+      return true;
+    }
+
+    // Write end of central directory record
+    public function close() {
+      $size = 0;
+      $offset = $this->writer->offset();
+      foreach ($this->files as $file) {
+        $size += $this->writer->write($file->readCentralDirectoryHeader($this->zip64));
+      }
+
+      $data = "";
+      if ($this->zip64) {
+        // Size = SizeOfFixedFields + SizeOfVariableData - 12.
+        $centralDirectorySize = 2*2 + 2*4 + 4*8;
+
+        $data .= "\x50\x4b\x06\x06";
+        $data .= pack("P", $centralDirectorySize);
+        $data .= "\x2d\x00"; // version 2.0 and MS-DOS compatible
+        $data .= "\x2d\x00"; // version 2.0 and MS-DOS compatible
+        $data .= "\x00\x00\x00\x00"; //number of disks
+        $data .= "\x00\x00\x00\x00"; //number of the disk with the start of the central directory
+        $data .= pack("P", count($this->files)); //total number of entries in the central directory on this disk
+        $data .= pack("P", count($this->files)); //total number of entries in the central directory
+        $data .= pack("P", $size); // size of the central directory
+        $data .= pack("P", $offset); //offset of start of central directory with respect to the starting disk number
+
+        // end of central directory locator
+        $data .= "\x50\x4b\x06\x07";
+        $data .= "\x00\x00\x00\x00";
+        $data .= pack("P", $this->writer->offset());
+        $data .= pack('V', 1); //number of disks
+      }
+
+      $data .= "\x50\x4b\x05\x06";
+      $data .= "\x00\x00"; //number of disks
+      $data .= "\x00\x00"; //number of the disk with the start of the central directory
+      $data .= $this->zip64 ? "\xFF\xFF" : pack("v", count($this->files)); //total number of entries in the central directory on this disk
+      $data .= $this->zip64 ? "\xFF\xFF" : pack("v", count($this->files)); //total number of entries in the central directory
+      $data .= $this->zip64 ? "\xFF\xFF\xFF\xFF" : pack("V", $size); // size of the central directory
+      $data .= $this->zip64 ? "\xFF\xFF\xFF\xFF" : pack("V", $offset); //offset of start of central directory with respect to the starting disk number
+      $data .= "\x00\x00"; //comment length
+
+      $this->writer->write($data);
+    }
+  }
+}

Core/External/composer.json

@@ -0,0 +1,15 @@
+{
+    "require": {
+        "php-mqtt/client": "^1.1",
+        "twig/twig": "^3.0",
+        "chillerlan/php-qrcode": "^4.3",
+        "christian-riesen/base32": "^1.6",
+        "spomky-labs/cbor-php": "2.1.0",
+        "web-auth/cose-lib": "3.3.12",
+        "firebase/php-jwt": "^6.2",
+        "html2text/html2text": "^4.3"
+    },
+    "require-dev": {
+        "phpunit/phpunit": "^9.5"
+    }
+}