inphinit / proxy
Lib for create web proxy with CORS
Installs: 3
Dependents: 0
Suggesters: 0
Security: 0
Stars: 137
Watchers: 17
Forks: 78
Open Issues: 0
Requires
- php: >=5.4.0
This package is auto-updated.
Last update: 2025-05-12 03:19:16 UTC
README
Until version 1.x, this project primarily served as a proxy solution for the html2canvas library. Version 2.0 marked a significant expansion, introducing extensive configuration and adaptation options that enable its use for a wide variety of needs and objectives.
Although developed as part of the Inphinit framework, the project operates completely independently. This means you can readily use it with any PHP framework or in a stand-alone application. While the project is modular, consider adopting the Inphinit framework itself for your new projects. For more details: https://inphinit.github.io
Proxies for other scripting languages
You do not use PHP, but need html2canvas working with proxy, see other proxies:
- html2canvas proxy in asp.net (csharp)
- html2canvas proxy in asp classic (vbscript)
- html2canvas proxy in python (work any framework)
Installing
To install it you must have at least PHP 5.4, but it is recommended that you use PHP 8 due to PHP support issues, read:
You can install via composer:
composer require inphinit/proxy
Then add this to your script or controller:
use Inphinit\Proxy\Proxy; use Inphinit\Proxy\Drivers\CurlDriver; use Inphinit\Proxy\Drivers\StreamDriver; $proxy = new Proxy(); // Set drivers used for download $proxy->setDrivers([ CurlDriver::class, StreamDriver::class ]); // Set temporary location $proxy->setTemporary('php://temp'); // Execute download $proxy->download($_GET['url']); // Display raw output $proxy->response();
If you are not using web frameworks, you can download the release from https://github.com/inphinit/inphinit-php-proxy/releases, then extract the contents and move it to the web server and rename the folder, like this (optional):
mv inphinit-php-proxy-2.0.0 proxy
Configure html2canvas
If you are using a web framework, simply point to the address of the route you configured to use the proxy, for example:
html2canvas(document.getElementById('container'), { logging: true, proxy: '/proxy' }).then((canvas) => { canvas.toBlob((blob) => { }); });
If you have manually downloaded it to use on your server, you can use the proxy.php
script, a example:
html2canvas(document.getElementById('container'), { logging: true, proxy: '/proxy/proxy.php' }).then((canvas) => { canvas.toBlob((blob) => { }); });
Setup proxy
Method | Description |
---|---|
setDrivers(array $drivers): void |
Set drivers used to download the resource |
setOptions(string $key, mixed $value): void |
Set generic options |
getOptions([string $key]): mixed |
Get generic options |
setAllowUrls(array $urls): void |
Set allowed URLs |
addAllowType(string $type, bool $binary): void |
Add content-type to the allowed list |
removeAllowType(string $type): void |
Remove content-type from the allowed list |
setTemporary(string $path): void |
Sets temporary handle path, eg.: /mnt/storage/ , php://temp , php://memory |
getTemporary(): resource |
Get temporary stream |
download(string $url[, bool $ignoreDownloadError]): void |
Perform download |
setResponseCacheTime(int $seconds): void |
Enable or disable cache for Proxy::respose() or Proxy::jsonp() |
response(): void |
Dump response to output |
jsonp(string $callback): void |
Output JSONP callback with URL or data URI content |
getContents([int $length[, int $offset]]): string |
If last download was successful, contents will be returned |
getContentType(): string |
If last download was successful, content-type will be returned |
getHttpStatus(): int |
If last download was successful, HTTP status will be returned |
getLastErrorCode(): int |
If last download was failed, error code will be returned |
getLastErrorMessage(): string |
If last download was failed, error message will be returned |
reset(): void |
Reset last download |
Generic options
Usage | Description |
---|---|
setOptions('max_redirs', int $value) |
Set the redirect limit |
setOptions('timeout', int $value) |
Set timeout for connections |
setOptions('user_agent', string $value) |
Set Browser User-Agent |
setOptions('referer', string $value) |
Set request header contains the absolute or partial address from which a resource has been requested |
setOptions('curl', array $value) |
Options for CurlDriver . See: https://www.php.net/manual/en/curl.constants.php |
setOptions('stream', array $value) |
Options for StreamDriver . See: https://www.php.net/manual/en/context.php |
Setup cURL driver use generic options with 'curl'
in first param, eg.: $proxy->setOptions('curl', [ ... ]);
, a sample for change SSL version:
$proxy->setOptions('curl', [ CURLOPT_SSLVERSION => CURL_SSLVERSION_TLSv1_3 ]);
A example for disable SSL verify (for local tests):
$proxy->setOptions('curl', [ CURLOPT_SSL_VERIFYHOST => 0, CURLOPT_SSL_VERIFYPEER => false ]);
For more constants options for use with $proxy->setOptions('curl', [ ... ])
, see: https://www.php.net/manual/en/curl.constants.php
For setup Stream driver use generic options with 'stream'
in first param, eg.: $proxy->setOptions('stream', [ ... ])
, a sample for set HTTP protocol version:
$proxy->setOptions('stream', [ 'http' => [ 'protocol_version' => 1.0, ] ]);
An example SSL configuration:
$proxy->setOptions('stream', [ 'ssl' => [ 'verify_peer' => true, 'cafile' => '/foo/bar/baz/cacert.pem', 'verify_depth' => 5, 'CN_match' => 'secure.example.com' ] ]);
Allow Content-Type
When executing the download() method a content-type validation will be performed, by default the following Content-Types are allowed:
Content-Type | Proxy::jsonp() |
---|---|
image/apng |
base64 |
image/png |
base64 |
image/avif |
base64 |
image/webp |
base64 |
image/gif |
base64 |
image/jpeg |
base64 |
image/svg+xml |
URL-encoded |
image/svg-xml |
URL-encoded |
You can define another allowed content-type, example:
$proxy->addAllowType('image/x-icon', true); $proxy->addAllowType('image/vnd.microsoft.icon', true);
Second parameter of the method specifies whether the Proxy::jsonp()
should use URL encoding or Base64 encoding in the data URI scheme.
To remove an allowed Content-Type use the Proxy::removeAllowType()
method, example:
$proxy->removeAllowType('image/apng');
How to use
To return the download response directly to the browser, use the Proxy::response()
method:
use Inphinit\Proxy\Proxy; use Inphinit\Proxy\Drivers\CurlDriver; use Inphinit\Proxy\Drivers\StreamDriver; $proxy = new Proxy(); $proxy->setDrivers([ CurlDriver::class, StreamDriver::class ]); $proxy->setTemporary('php://temp'); $proxy->download($url); $proxy->response();
If you want to use the JSONP format, replace the Proxy::response
method with Proxy::jsonp
. In this example, the callback will return and receive the content in DATA URI format:
use Inphinit\Proxy\Proxy; use Inphinit\Proxy\Drivers\CurlDriver; use Inphinit\Proxy\Drivers\StreamDriver; if (empty($_GET['callback'])) { die('Missing callback'); } $proxy = new Proxy(); $proxy->setDrivers([ CurlDriver::class, StreamDriver::class ]); $proxy->setTemporary('php://temp'); try { $proxy->download($url); $proxy->jsonp($_GET['callback']); } catch (Exception $ee) { }
If you need to handle content or errors manually, you can use the Proxy::getContents
, Proxy::getContentType
, Proxy::getHttpStatus
, Proxy::getLastErrorCode
, Proxy::getLastErrorMessage
methods:
use Inphinit\Proxy\Proxy; use Inphinit\Proxy\Drivers\CurlDriver; use Inphinit\Proxy\Drivers\StreamDriver; if (empty($_GET['callback'])) { die('Missing callback'); } $proxy = new Proxy(); $proxy->setDrivers([ CurlDriver::class, StreamDriver::class ]); $proxy->setTemporary('php://temp'); $proxy->download($url, true); $errcode = $proxy->getLastErrorCode(); $httpStatus = $proxy->getHttpStatus(); if ($errcode) { echo $code, ': ', $proxy->getLastErrorCode(); } elseif ($httpStatus < 200 && $httpStatus > 299) { echo 'HTTP request failed:', $httpStatus; } else { // Sucesss $type = $proxy->getContentType(); $contents = $proxy->getContents(); ... }
In the examples so far, CurlDriver takes priority, and uses StreamDriver
as a fallback, but you can change this, in a hypothetical example, if you only want to use StreamDriver
:
$proxy->setDrivers([ StreamDriver::class ]);
You can also limit the URLs that the proxy can access:
$proxy->urls([ 'https://domain1.com/', // Allow request in all paths from https://domain1.com 'https://domain2.com/images/', // Allow requests in /images/ from https://domain2.com 'https://*.mainsite.io/', // Allow requests in mainsite.com subdomain 'https://foo.io:8000/', // Allow requests in other.io with port 8000 '*://other.io/', // Allow HTTP or HTTPS requests in other.io ]); $proxy->setTemporary('php://temp'); $proxy->download($url);
Writing your own driver
The following methods are required to write an Inphinit\Proxy
compatible driver
Method | Description |
---|---|
__construct(Proxy $proxy) |
It will receive the Proxy instance |
available(): bool |
It will inform if the server has support |
exec(string $url, int &$httpStatus, string &$contentType, int &$errorCode, string &$errorMessage): void |
It will execute the driver and fill in the references |
Optionally you can use InterfaceDriver
to avoid errors when writing:
use Inphinit\Proxy\Drivers\InterfaceDriver; use Inphinit\Proxy\Proxy; class CustomDriver implements InterfaceDriver { public function __construct(Proxy $proxy) { ... } public function available() { ... } public function exec($url, &$httpStatus, &$contentType, &$errorCode, &$errorMessage) { ... } }
Once created you can use it like this:
$proxy->setDrivers([ CustomDriver::class ]);
Common issues and solutions
When adding an image that belongs to another domain in <canvas>
and after that try to export the canvas
for a new image, a security error occurs (actually occurs is a security lock), which can return the error:
SecurityError: DOM Exception 18
Error: An attempt was made to break through the security policy of the user agent.
If using Google Maps (or google maps static) you can get this error in console:
Google Maps API error: MissingKeyMapError
You need get a API Key in: https://developers.google.com/maps/documentation/javascript/get-api-key
If you get this error:
Access to Image at 'file:///...' from origin 'null' has been blocked by CORS policy: Invalid response. Origin 'null' is therefore not allowed access.
Means that you are not using an HTTP server, html2canvas does not work over the file:///
protocol, use Apache, Nginx or IIS with PHP for work.
Debuging with Web Console from DevTools
If you have any issue is recommend to analyze the log with the Web Console tab and requests with Network tab from your browser, see documentations:
- Firefox: https://firefox-source-docs.mozilla.org/devtools-user/
- Chrome: https://developer.chrome.com/docs/devtools
- Microsoft Edge: https://learn.microsoft.com/pt-br/microsoft-edge/devtools-guide-chromium/landing/
An alternative is to debug issues by accessing the link directly:
http://[DOMAIN]/[PATH]/proxy?url=http%3A%2F%2Fmaps.googleapis.com%2Fmaps%2Fapi%2Fstaticmap%3Fcenter%3D40.714728%2C-73.998672%26zoom%3D12%26size%3D800x600%26maptype%3Droadmap%26sensor%3Dfalse%261&callback=html2canvas_0
Replace [DOMAIN]
by your domain (eg. 127.0.0.1) and replace [PATH]
by your project folder (eg.: project-1/test
), something like:
http://localhost/project-1/test/proxy?url=http%3A%2F%2Fmaps.googleapis.com%2Fmaps%2Fapi%2Fstaticmap%3Fcenter%3D40.714728%2C-73.998672%26zoom%3D12%26size%3D800x600%26maptype%3Droadmap%26sensor%3Dfalse%261&callback=html2canvas_0