From 161d61822a6fb807a3229fa72dd841fcb802335e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Julio=20Cesar=20Laura=20Avenda=C3=B1o?=
 <juliocesar@processmaker.com>
Date: Mon, 31 Aug 2020 19:29:26 +0000
Subject: [PATCH] PMCORE-2115

---
 .../engine/classes/model/OutputDocument.php   |  2 +-
 workflow/public_html/.htaccess                |  2 +-
 workflow/public_html/fonts/font.php           | 25 +++++++++++++++++++
 workflow/public_html/fonts/styles.php         | 24 ++++++++++++++++++
 4 files changed, 51 insertions(+), 2 deletions(-)
 create mode 100644 workflow/public_html/fonts/font.php
 create mode 100644 workflow/public_html/fonts/styles.php

diff --git a/workflow/engine/classes/model/OutputDocument.php b/workflow/engine/classes/model/OutputDocument.php
index c94b0a3ba..868128ee6 100644
--- a/workflow/engine/classes/model/OutputDocument.php
+++ b/workflow/engine/classes/model/OutputDocument.php
@@ -1291,7 +1291,7 @@ class OutputDocument extends BaseOutputDocument
     private static function generateCssFile()
     {
         // Initialize variables
-        $template = "@font-face {font-family: @familyName;src: url(@fileName) format('truetype');@properties}\n";
+        $template = "@font-face {font-family: @familyName;src: url(/fonts/font.php?file=@fileName) format('truetype');@properties}\n";
         $css = '';
 
         // Load the custom fonts list
diff --git a/workflow/public_html/.htaccess b/workflow/public_html/.htaccess
index 2b59a627c..55063eec0 100644
--- a/workflow/public_html/.htaccess
+++ b/workflow/public_html/.htaccess
@@ -3,7 +3,7 @@
         Deny from all
 </FilesMatch>
 
-<FilesMatch "^(app|sysGeneric|gmail|sso|templateForm|lostSession|uninstall)\.php">
+<FilesMatch "^(app|sysGeneric|gmail|sso|templateForm|lostSession|uninstall|font|styles)\.php">
         Order Allow,Deny 
         Allow from All 
 </FilesMatch>
diff --git a/workflow/public_html/fonts/font.php b/workflow/public_html/fonts/font.php
new file mode 100644
index 000000000..f943e2b20
--- /dev/null
+++ b/workflow/public_html/fonts/font.php
@@ -0,0 +1,25 @@
+<?php
+
+// Get the Home Directory, snippet adapted from sysGeneric.php
+$documentRoot = str_replace('\\', '/', $_SERVER['DOCUMENT_ROOT']);
+$sections = explode('/', $documentRoot);
+array_pop($sections);
+$pathHome = implode('/', $sections) . '/';
+
+// Include the "paths_installed.php" file
+require_once $pathHome . 'engine/config/paths_installed.php';
+
+// Get font file name requested
+$fileName = $_REQUEST['file'] ?? '';
+
+// Check if the requested font file exists and if is accessible
+if (empty($fileName) || !file_exists(PATH_DATA . 'fonts/' . $fileName)) {
+    // Redirect to error page 404
+    header('Location: /errors/error404.php');
+    die();
+} else {
+    // Stream the font file
+    header('Content-Disposition: inline; filename="' . $fileName . '"');
+    header('Content-Type: font/ttf');
+    readfile(PATH_DATA . 'fonts/' . $fileName);
+}
diff --git a/workflow/public_html/fonts/styles.php b/workflow/public_html/fonts/styles.php
new file mode 100644
index 000000000..14548d42f
--- /dev/null
+++ b/workflow/public_html/fonts/styles.php
@@ -0,0 +1,24 @@
+<?php
+
+// Get the Home Directory, snippet adapted from sysGeneric.php
+$documentRoot = str_replace('\\', '/', $_SERVER['DOCUMENT_ROOT']);
+$sections = explode('/', $documentRoot);
+array_pop($sections);
+$pathHome = implode('/', $sections) . '/';
+
+// Include the "paths_installed.php" file
+require_once $pathHome . 'engine/config/paths_installed.php';
+
+// Set the fonts styles file
+$fileName = 'fonts.css';
+
+// Check if the requested css file exists and if is accessible
+if (!file_exists(PATH_DATA . 'fonts/tcpdf/' . $fileName)) {
+    // Redirect to error page 404
+    header('Location: /errors/error404.php');
+    die();
+} else {
+    // Stream the font file
+    header('Content-Type: text/css');
+    readfile(PATH_DATA . 'fonts/tcpdf/' . $fileName);
+}