[TwitterBridge] Enable cookies with curl

[triatic]

Enable cookies in curl, or fall back to file_get_contents if in CLI mode with no curl root certificates.

Fixes issues on some installations where allow_url_fopen is disabled. #1231

Credit @Roliga for curl method.

[teromene]

This really seems like a workaround that we can't use everywhere...
Maybe we could check that the curl.cainfo setting is set during "Installation"

[triatic]

I'm not sure I understand your point. This PR is purely about enabling cookies with cURL for for TwitterBridge so that file_get_contents() can be avoided, since some people have allow_url_fopen disabled.

[teromene]

I guess my question was more: Why do we still have file_get_contents in cli while we no longer use it in web mode ?

[triatic]

For my particular use-case which might be shared by others. Unlike file_get_contents(), the cUrl module does not use the OS's root certificate store.

I'm not sure how Linux handles things, but on Windows this means downloading cacert.pem from https://curl.haxx.se/docs/caextract.html and keeping it up to date.

Personally I'd much rather use the root certificates which Windows automatically keeps up to date, which is what file_get_contents() does, rather than download and keep updating an arbitrary certificate store from haxx.se.

I added this in PR #962 which @logmanoriginal merged.

[teromene]

All right. Though I believe that we should, later, remove entirely the dependency to file_get_contents in getCookie (same in FB2Bridge) so that we don't need this type of workaround.

[triatic]

I would like file_get_contents() support to remain for the condition:

if(php_sapi_name() === 'cli' && empty(ini_get('curl.cainfo')))

I don't even have the cUrl module enabled at the moment and everything works fine, including certificate verification.

As for FB2Bridge, how about reusing the code from this PR, so that file_get_contents() is only used in rare circumstances?

[triatic]

On further testing, it seems it's only Windows which the cUrl module is unable to use the system's root certificates.

Another proposal is to leave Linux alone and do:

if(strpos(php_uname(), 'Windows') === 0 && empty(ini_get('curl.cainfo')))