mirror of
https://github.com/e107inc/e107.git
synced 2025-01-17 12:48:24 +01:00
2770 lines
74 KiB
PHP
2770 lines
74 KiB
PHP
<?php
|
|
/*
|
|
* e107 website system
|
|
*
|
|
* Copyright (C) 2008-2010 e107 Inc (e107.org)
|
|
* Released under the terms and conditions of the
|
|
* GNU General Public License (http://www.gnu.org/licenses/gpl.txt)
|
|
*
|
|
* General purpose file
|
|
*
|
|
* $URL$
|
|
* $Id$
|
|
*
|
|
*/
|
|
//
|
|
// *** Code sequence for startup ***
|
|
// IMPORTANT: These items are in a carefully constructed order. DO NOT REARRANGE
|
|
// without checking with experienced devs! Various subtle things WILL break.
|
|
//
|
|
// A Get the current CPU time so we know how long all of this takes
|
|
// B Remove output buffering so we are in control of text sent to user
|
|
// C Remove registered globals (SECURITY for all following code)
|
|
// D Setup PHP error handling (now we can see php errors ;))
|
|
// E Setup other PHP essentials
|
|
// F Grab e107_config to get directory paths
|
|
// G Retrieve Query from URI (i.e. what are the request parameters?!)
|
|
// H Initialize debug handling (NOTE: A-G cannot use debug tools!)
|
|
// I: Sanity check to ensure e107_config is ok
|
|
// J: MYSQL setup (NOTE: A-I cannot use database!)
|
|
// K: Compatibility mode
|
|
// L: Retrieve core prefs
|
|
// M: Subdomain and language selection
|
|
// N: Other misc setups (NOTE: Put most 'random' things here that don't require user session or theme
|
|
// O: Start user session
|
|
// P: Load theme
|
|
// Q: Other setups
|
|
|
|
/**
|
|
* @package e107
|
|
*/
|
|
|
|
|
|
//
|
|
// A: Honest global beginning point for processing time
|
|
//
|
|
$eTimingStart = microtime(); // preserve these when destroying globals in step C
|
|
if ( function_exists( 'getrusage' ) ) { $eTimingStartCPU = getrusage(); }
|
|
$oblev_before_start = ob_get_level();
|
|
|
|
//
|
|
// B: Remove all output buffering
|
|
//
|
|
if(!isset($_E107) || !is_array($_E107)) { $_E107 = array(); }
|
|
if(isset($_E107['cli']) && !isset($_E107['debug']) && isset($_SERVER["HTTP_USER_AGENT"]))
|
|
{
|
|
exit();
|
|
}
|
|
|
|
if(function_exists('utf8_encode') === false)
|
|
{
|
|
echo "e107 requires the PHP <a href='http://php.net/manual/en/dom.setup.php'>XML</a> package. Please install it to use e107. ";
|
|
exit();
|
|
}
|
|
|
|
if(!isset($_E107['cli']))
|
|
{
|
|
while (@ob_end_clean()); // destroy all ouput buffering
|
|
ob_start(); // start our own.
|
|
$oblev_at_start = ob_get_level(); // preserve when destroying globals in step C
|
|
}
|
|
//
|
|
// C: Find out if register globals is enabled and destroy them if so
|
|
// (DO NOT use the value of any variables before this point! They could have been set by the user)
|
|
//
|
|
|
|
// Can't be moved to e107, required here for e107_config vars security
|
|
$register_globals = true;
|
|
if(function_exists('ini_get'))
|
|
{
|
|
$register_globals = ini_get('register_globals');
|
|
}
|
|
|
|
// Destroy! (if we need to)
|
|
if($register_globals == true)
|
|
{
|
|
if(isset($_REQUEST['_E107'])) { unset($_E107); }
|
|
while (list($global) = each($GLOBALS))
|
|
{
|
|
if (!preg_match('/^(_POST|_GET|_COOKIE|_SERVER|_FILES|_SESSION|GLOBALS|HTTP.*|_REQUEST|_E107|retrieve_prefs|eplug_admin|eTimingStart.*|oblev_.*)$/', $global))
|
|
{
|
|
unset($$global);
|
|
}
|
|
}
|
|
unset($global);
|
|
}
|
|
|
|
// MOVED TO $e107->prepare_request()
|
|
// TODO - better ajax detection method (headers when possible)
|
|
//define('e_AJAX_REQUEST', isset($_REQUEST['ajax_used']));
|
|
//unset($_REQUEST['ajax_used']); // removed because it's auto-appended from JS (AJAX), could break something...
|
|
//
|
|
//if(isset($_E107['minimal']) || e_AJAX_REQUEST)
|
|
//{
|
|
// $_e107vars = array('forceuserupdate', 'online', 'theme', 'menus', 'prunetmp');
|
|
// foreach($_e107vars as $v)
|
|
// {
|
|
// $noname = 'no_'.$v;
|
|
// if(!isset($_E107[$v]))
|
|
// {
|
|
// $_E107[$noname] = 1;
|
|
// }
|
|
// unset($_E107[$v]);
|
|
// }
|
|
//}
|
|
|
|
|
|
// MOVED TO $e107->prepare_request()
|
|
// e107 uses relative url's, which are broken by "pretty" URL's. So for now we don't support / after .php
|
|
//if(($pos = strpos($_SERVER['PHP_SELF'], '.php/')) !== false) // redirect bad URLs to the correct one.
|
|
//{
|
|
// $new_url = substr($_SERVER['PHP_SELF'], 0, $pos+4);
|
|
// $new_loc = ($_SERVER['QUERY_STRING']) ? $new_url.'?'.$_SERVER['QUERY_STRING'] : $new_url;
|
|
// header('Location: '.$new_loc);
|
|
// exit();
|
|
//}
|
|
// If url contains a .php in it, PHP_SELF is set wrong (imho), affecting all paths. We need to 'fix' it if it does.
|
|
//$_SERVER['PHP_SELF'] = (($pos = strpos($_SERVER['PHP_SELF'], '.php')) !== false ? substr($_SERVER['PHP_SELF'], 0, $pos+4) : $_SERVER['PHP_SELF']);
|
|
|
|
//
|
|
// D: Setup PHP error handling
|
|
// (Now we can see PHP errors) -- but note that DEBUG is not yet enabled!
|
|
//
|
|
$error_handler = new error_handler();
|
|
set_error_handler(array(&$error_handler, 'handle_error'));
|
|
|
|
//
|
|
// E: Setup other essential PHP parameters
|
|
//
|
|
define('e107_INIT', true);
|
|
|
|
|
|
// MOVED TO $e107->prepare_request()
|
|
// setup some php options
|
|
//e107_ini_set('magic_quotes_runtime', 0);
|
|
//e107_ini_set('magic_quotes_sybase', 0);
|
|
//e107_ini_set('arg_separator.output', '&');
|
|
//e107_ini_set('session.use_only_cookies', 1);
|
|
//e107_ini_set('session.use_trans_sid', 0);
|
|
|
|
|
|
// DEPRECATED, use e107::getConfig() and e107::getPlugConfig()
|
|
if(isset($retrieve_prefs) && is_array($retrieve_prefs))
|
|
{
|
|
foreach ($retrieve_prefs as $key => $pref_name)
|
|
{
|
|
$retrieve_prefs[$key] = preg_replace("/\W/", '', $pref_name);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
unset($retrieve_prefs);
|
|
}
|
|
|
|
// MOVED TO e107->set_constants()
|
|
//define("MAGIC_QUOTES_GPC", (ini_get('magic_quotes_gpc') ? true : false));
|
|
//
|
|
//// Define the domain name and subdomain name.
|
|
//if($_SERVER['HTTP_HOST'] && is_numeric(str_replace(".","",$_SERVER['HTTP_HOST'])))
|
|
//{
|
|
// $srvtmp = ''; // Host is an IP address.
|
|
//}
|
|
//else
|
|
//{
|
|
// $srvtmp = explode('.',str_replace('www.', '', $_SERVER['HTTP_HOST']));
|
|
//}
|
|
//
|
|
//define('e_SUBDOMAIN', (count($srvtmp)>2 && $srvtmp[2] ? $srvtmp[0] : false)); // needs to be available to e107_config.
|
|
//
|
|
//if(e_SUBDOMAIN)
|
|
//{
|
|
// unset($srvtmp[0]);
|
|
//}
|
|
//
|
|
//define('e_DOMAIN',(count($srvtmp) > 1 ? (implode('.', $srvtmp)) : false)); // if it's an IP it must be set to false.
|
|
//
|
|
//unset($srvtmp);
|
|
|
|
|
|
// MOVED TO $e107->prepare_request()
|
|
// Ensure thet '.' is the first part of the include path
|
|
//$inc_path = explode(PATH_SEPARATOR, ini_get('include_path'));
|
|
//if($inc_path[0] != '.')
|
|
//{
|
|
// array_unshift($inc_path, '.');
|
|
// $inc_path = implode(PATH_SEPARATOR, $inc_path);
|
|
// e107_ini_set('include_path', $inc_path);
|
|
//}
|
|
//unset($inc_path);
|
|
|
|
//
|
|
// F: Grab e107_config, get directory paths and create $e107 object
|
|
//
|
|
@include(realpath(dirname(__FILE__).'/e107_config.php'));
|
|
|
|
if(!defined('e_POWEREDBY_DISABLE'))
|
|
{
|
|
define('e_POWEREDBY_DISABLE', false);
|
|
}
|
|
|
|
if(isset($CLASS2_INCLUDE) && ($CLASS2_INCLUDE!=''))
|
|
{
|
|
require_once(realpath(dirname(__FILE__).'/'.$CLASS2_INCLUDE));
|
|
}
|
|
|
|
//define("MPREFIX", $mySQLprefix); moved to $e107->set_constants()
|
|
|
|
if(!isset($ADMIN_DIRECTORY))
|
|
{
|
|
// e107_config.php is either empty, not valid or doesn't exist so redirect to installer..
|
|
header('Location: install.php');
|
|
exit();
|
|
}
|
|
|
|
//
|
|
// clever stuff that figures out where the paths are on the fly.. no more need for hard-coded e_HTTP :)
|
|
//
|
|
$tmp = realpath(dirname(__FILE__).'/'.$HANDLERS_DIRECTORY);
|
|
|
|
//Core functions - now API independent
|
|
@require_once($tmp.'/core_functions.php');
|
|
e107_require_once($tmp.'/e107_class.php');
|
|
unset($tmp);
|
|
|
|
$e107_paths = compact('ADMIN_DIRECTORY', 'FILES_DIRECTORY', 'IMAGES_DIRECTORY', 'THEMES_DIRECTORY', 'PLUGINS_DIRECTORY', 'HANDLERS_DIRECTORY', 'LANGUAGES_DIRECTORY', 'HELP_DIRECTORY', 'DOWNLOADS_DIRECTORY','UPLOADS_DIRECTORY','SYSTEM_DIRECTORY', 'MEDIA_DIRECTORY','CACHE_DIRECTORY','LOGS_DIRECTORY', 'CORE_DIRECTORY', 'WEB_DIRECTORY');
|
|
$sql_info = compact('mySQLserver', 'mySQLuser', 'mySQLpassword', 'mySQLdefaultdb', 'mySQLprefix', 'mySQLport');
|
|
$e107 = e107::getInstance()->initCore($e107_paths, realpath(dirname(__FILE__)), $sql_info, varset($E107_CONFIG, array()));
|
|
|
|
e107::getSingleton('eIPHandler'); // This auto-handles bans etc
|
|
|
|
|
|
### NEW Register Autoload - do it asap
|
|
if(!function_exists('spl_autoload_register'))
|
|
{
|
|
// PHP >= 5.1.2 required
|
|
die('Fatal exception - spl_autoload_* required.');
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
// allow disable of autoloading - may be removed as e107::autoload_register() is flexible enough
|
|
if(!defset('E107_DISABLE_AUTOLOAD', false))
|
|
{
|
|
/**
|
|
* Generic autoloader. (didn't work while in e107_class.php)
|
|
* @example if your plugin calls 'use Xxxxx\Yyyyy\Zzzzz;' it will attempt to load: ./vendor/Xxxxx/Yyyyy/Zzzzz.php
|
|
*/
|
|
function autoloadPsr0($className)
|
|
{
|
|
$className = str_replace("_", "\\", $className);
|
|
$className = ltrim($className, '\\');
|
|
$fileName = '';
|
|
$namespace = '';
|
|
|
|
if ($lastNsPos = strripos($className, '\\'))
|
|
{
|
|
$namespace = substr($className, 0, $lastNsPos);
|
|
$className = substr($className, $lastNsPos + 1);
|
|
$fileName = str_replace('\\', DIRECTORY_SEPARATOR, $namespace) . DIRECTORY_SEPARATOR;
|
|
}
|
|
|
|
$fileName .= str_replace('_', DIRECTORY_SEPARATOR, $className) . '.php';
|
|
|
|
$fullPath = 'vendor'. DIRECTORY_SEPARATOR . $fileName;
|
|
|
|
if(file_exists($fullPath))
|
|
{
|
|
e107_require_once($fullPath);
|
|
}
|
|
else
|
|
{
|
|
return false;
|
|
}
|
|
|
|
}
|
|
|
|
e107::autoload_register(array('e107', 'autoload'));
|
|
// e107::autoload_register('autoloadPsr0'); // Generic 'use xxxx\yyyy\zzzz;' fix/solution for plugin developers.
|
|
|
|
}
|
|
|
|
function genericAutoload($className)
|
|
{
|
|
$className = str_replace("_", "\\", $className);
|
|
$className = ltrim($className, '\\');
|
|
$fileName = '';
|
|
$namespace = '';
|
|
if ($lastNsPos = strripos($className, '\\'))
|
|
{
|
|
$namespace = substr($className, 0, $lastNsPos);
|
|
$className = substr($className, $lastNsPos + 1);
|
|
$fileName = str_replace('\\', DIRECTORY_SEPARATOR, $namespace) . DIRECTORY_SEPARATOR;
|
|
}
|
|
$fileName .= str_replace('_', DIRECTORY_SEPARATOR, $className) . '.php';
|
|
|
|
e107_require_once($fileName);
|
|
}
|
|
|
|
/**
|
|
* NEW - system security levels
|
|
* Could be overridden by e107_config.php OR $CLASS2_INCLUDE script (if not set earlier)
|
|
*
|
|
* 0 disabled
|
|
* 5 safe mode (balanced)
|
|
* 7 high
|
|
* 9 paranoid
|
|
* 10 insane
|
|
* for more detailed info see e_session SECURITY_LEVEL_* constants
|
|
* default is e_session::SECURITY_LEVEL_BALANCED (5)
|
|
*/
|
|
if(!defined('e_SECURITY_LEVEL'))
|
|
{
|
|
require_once(e_HANDLER.'session_handler.php');
|
|
define('e_SECURITY_LEVEL', e_session::SECURITY_LEVEL_BALANCED);
|
|
}
|
|
|
|
// MOVED TO $e107->set_request()
|
|
//$inArray = array("'", ';', '/**/', '/UNION/', '/SELECT/', 'AS ');
|
|
//if (strpos($_SERVER['PHP_SELF'], 'trackback') === false)
|
|
//{
|
|
// foreach($inArray as $res)
|
|
// {
|
|
// if(stristr($_SERVER['QUERY_STRING'], $res))
|
|
// {
|
|
// die('Access denied.');
|
|
// }
|
|
// }
|
|
//}
|
|
|
|
|
|
|
|
//
|
|
// Start the parser; use it to grab the full query string
|
|
//
|
|
|
|
//DEPRECATED, BC
|
|
//$e107->url = e107::getUrl(); - caught by __get()
|
|
//TODO - find & replace $e107->url
|
|
//DEPRECATED, BC, $e107->tp caught by __get()
|
|
$tp = e107::getParser(); //TODO - find & replace $tp, $e107->tp
|
|
|
|
//define("e_QUERY", $matches[2]);
|
|
//define("e_QUERY", $_SERVER['QUERY_STRING']);
|
|
|
|
|
|
// MOVED TO $e107->set_request()
|
|
//$e_QUERY = str_replace("&","&",$tp->post_toForm($e_QUERY));
|
|
//define('e_QUERY', $e_QUERY);
|
|
|
|
//$e_QUERY = e_QUERY;
|
|
|
|
// MOVED TO $e107->set_request()
|
|
//define('e_TBQS', $_SERVER['QUERY_STRING']);
|
|
//$_SERVER['QUERY_STRING'] = e_QUERY;
|
|
|
|
// MOVED TO $e107->set_constants()
|
|
//define('e_UC_PUBLIC', 0);
|
|
//define('e_UC_MAINADMIN', 250);
|
|
//define('e_UC_READONLY', 251);
|
|
//define('e_UC_GUEST', 252);
|
|
//define('e_UC_MEMBER', 253);
|
|
//define('e_UC_ADMIN', 254);
|
|
//define('e_UC_NOBODY', 255);
|
|
|
|
// MOVED TO $e107->set_urls() - DEPRECATED, use e107->getFolder()
|
|
//define('ADMINDIR', $ADMIN_DIRECTORY);
|
|
|
|
//
|
|
// H: Initialize debug handling
|
|
// (NO E107 DEBUG CONSTANTS OR CODE ARE AVAILABLE BEFORE THIS POINT)
|
|
// All debug objects and constants are defined in the debug handler
|
|
// i.e. from here on you can use E107_DEBUG_LEVEL or any
|
|
// E107_DBG_* constant for debug testing.
|
|
// TODO - rewrite the debug init phase, add e107 class getters
|
|
//
|
|
require_once(e_HANDLER.'debug_handler.php');
|
|
|
|
if(E107_DEBUG_LEVEL && isset($db_debug) && is_object($db_debug))
|
|
{
|
|
$db_debug->Mark_Time('Init ErrHandler');
|
|
}
|
|
|
|
//
|
|
// I: Sanity check on e107_config.php
|
|
// e107_config.php upgrade check
|
|
// FIXME - obsolete check, rewrite it
|
|
if (!$ADMIN_DIRECTORY && !$DOWNLOADS_DIRECTORY)
|
|
{
|
|
message_handler('CRITICAL_ERROR', 8, ': generic, ', 'e107_config.php');
|
|
exit;
|
|
}
|
|
|
|
//
|
|
// J: MYSQL INITIALIZATION
|
|
//
|
|
e107::getSingleton('e107_traffic'); // We start traffic counting ASAP
|
|
//$eTraffic->Calibrate($eTraffic);
|
|
|
|
// e107_require_once(e_HANDLER.'mysql_class.php');
|
|
|
|
//DEPRECATED, BC, $e107->sql caught by __get()
|
|
$sql = e107::getDb(); //TODO - find & replace $sql, $e107->sql
|
|
$sql->db_SetErrorReporting(false);
|
|
|
|
$sql->db_Mark_Time('SQL Connect');
|
|
$merror=$sql->db_Connect($mySQLserver, $mySQLuser, $mySQLpassword, $mySQLdefaultdb);
|
|
|
|
// create after the initial connection.
|
|
//DEPRECATED, BC, call the method only when needed
|
|
$sql2 = e107::getDb('sql2'); //TODO find & replace all $sql2 calls
|
|
|
|
$sql->db_Mark_Time('Prefs, misc tables');
|
|
|
|
//DEPRECATED, BC, call the method only when needed, $e107->admin_log caught by __get()
|
|
$admin_log = e107::getAdminLog(); //TODO - find & replace $admin_log, $e107->admin_log
|
|
|
|
if ($merror === 'e1')
|
|
{
|
|
message_handler('CRITICAL_ERROR', 6, ': generic, ', 'class2.php');
|
|
exit;
|
|
}
|
|
elseif ($merror === 'e2')
|
|
{
|
|
message_handler("CRITICAL_ERROR", 7, ': generic, ', 'class2.php');
|
|
exit;
|
|
}
|
|
|
|
//
|
|
// K: Load compatability mode.
|
|
//
|
|
|
|
/* PHP Compatabilty should *always* be on. */
|
|
e107_require_once(e_HANDLER.'php_compatibility_handler.php');
|
|
|
|
//
|
|
// L: Extract core prefs from the database
|
|
//
|
|
|
|
|
|
// TODO - remove it from here, auto-loaded when required
|
|
$sql->db_Mark_Time('Load Cache Handler');
|
|
e107_require_once(e_HANDLER.'cache_handler.php');
|
|
|
|
//DEPRECATED, BC, call the method only when needed, $e107->arrayStorage caught by __get()
|
|
$sql->db_Mark_Time('Load Array Storage Handler');
|
|
e107_require_once(e_HANDLER.'arraystorage_class.php'); // ArrayData(); BC Fix only.
|
|
$eArrayStorage = e107::getArrayStorage(); //TODO - find & replace $eArrayStorage with e107::getArrayStorage();
|
|
|
|
//DEPRECATED, BC, call the method only when needed, $e107->e_event caught by __get()
|
|
$sql->db_Mark_Time('Load Event Handler');
|
|
$e_event = e107::getEvent(); //TODO - find & replace $e_event, $e107->e_event
|
|
|
|
// TODO - DEPRECATED - remove
|
|
|
|
$sql->db_Mark_Time('Load Core Prefs');
|
|
e107_require_once(e_HANDLER."pref_class.php");
|
|
$sysprefs = new prefs;
|
|
|
|
|
|
// Check core preferences
|
|
//FIXME - message_handler is dying after message_handler(CRITICAL_ERROR) call
|
|
e107::getConfig()->load(); // extra load, required if mysql handler already called e107::getConfig()
|
|
if(!e107::getConfig()->hasData())
|
|
{
|
|
// Core prefs error - admin log
|
|
e107::getAdminLog()->log_event('CORE_LAN8', 'CORE_LAN7', E_LOG_WARNING);
|
|
|
|
// Try for the automatic backup..
|
|
if(e107::getConfig('core_backup')->hasData())
|
|
{
|
|
// auto backup found, use backup to restore the core
|
|
e107::getConfig()->loadData(e107::getConfig('core_backup')->getPref(), false)
|
|
->save(false, true);
|
|
|
|
message_handler('CRITICAL_ERROR', 3, __LINE__, __FILE__);
|
|
}
|
|
else
|
|
{
|
|
// No auto backup, try for the 'old' prefs system.
|
|
if(!e107::getConfig('core_old')->hasData())
|
|
{
|
|
// Core could not restore from automatic backup. Execution halted.
|
|
e107::getAdminLog()->log_event('CORE_LAN8', 'CORE_LAN9', E_LOG_FATAL);
|
|
|
|
message_handler('CRITICAL_ERROR', 3, __LINE__, __FILE__);
|
|
// No old system, so point in the direction of resetcore :(
|
|
message_handler('CRITICAL_ERROR', 4, __LINE__, __FILE__); //this will never appear till message_handler() is fixed
|
|
|
|
exit;
|
|
}
|
|
else
|
|
{
|
|
// resurrect core from old prefs
|
|
e107::getConfig()->loadData(e107::getConfig('core_old')->getPref(), false)
|
|
->save(false, true);
|
|
|
|
// resurrect core_backup from old prefs
|
|
e107::getConfig('core_backup')->loadData(e107::getConfig('core_old')->getPref(), false)
|
|
->save(false, true);
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
//DEPRECATED, BC, call e107::getPref/findPref() instead
|
|
$pref = e107::getPref();
|
|
|
|
//this could be part of e107->init() method now, prefs will be auto-initialized
|
|
//when proper called (e107::getPref())
|
|
// $e107->set_base_path(); moved to init().
|
|
|
|
//DEPRECATED, BC, call e107::getConfig('menu')->get('pref_name') only when needed
|
|
$sql->db_Mark_Time('Load Menu Prefs');
|
|
$menu_pref = e107::getConfig('menu')->getPref(); //extract menu prefs
|
|
|
|
// NEW - force ssl
|
|
if(e107::getPref('ssl_enabled') && !deftrue('e_SSL_DISABLE') && empty($_E107['cli']))
|
|
{
|
|
// NOTE: e_SSL_DISABLE check is here to help webmasters fix 'ssl_enabled'
|
|
// if set by accident on site with no SSL support - just define it in e107_config.php
|
|
if(strpos(e_REQUEST_URL, 'http://') === 0)
|
|
{
|
|
// e_REQUEST_URL and e_REQUEST_URI introduced
|
|
$url = 'https://'.substr(e_REQUEST_URL, 7);
|
|
e107::redirect($url);
|
|
exit;
|
|
}
|
|
}
|
|
|
|
// $sql->db_Mark_Time('(Extracting Core Prefs Done)');
|
|
|
|
$sql->db_Mark_Time('Init Language and detect changes');
|
|
$lng = e107::getLanguage(); // required for v1.0 BC.
|
|
$lng->detect();
|
|
|
|
//
|
|
// M: Subdomain and Language Selection
|
|
//
|
|
|
|
// if a cookie name pref isn't set, make one :)
|
|
// e_COOKIE used as unique session cookie name now (see session handler)
|
|
if (!$pref['cookie_name']) { $pref['cookie_name'] = 'e107cookie'; }
|
|
define('e_COOKIE', $pref['cookie_name']);
|
|
|
|
// MOVED TO $e107->set_urls()
|
|
//define('SITEURLBASE', ($pref['ssl_enabled'] == '1' ? 'https://' : 'http://').$_SERVER['HTTP_HOST']);
|
|
//define('SITEURL', SITEURLBASE.e_HTTP);
|
|
|
|
// if the option to force users to use a particular url for the site is enabled, redirect users there as needed
|
|
// Now matches RFC 2616 (sec 3.2): case insensitive, https/:443 and http/:80 are equivalent.
|
|
// And, this is robust against hack attacks. Malignant users can put **anything** in HTTP_HOST!
|
|
if(!empty($pref['redirectsiteurl']) && !empty($pref['siteurl'])) {
|
|
|
|
if(isset($pref['multilanguage_subdomain']) && $pref['multilanguage_subdomain'])
|
|
{
|
|
if(substr(e_REQUEST_URL, 7, 4)=='www.' || substr(e_REQUEST_URL, 8, 4)=='www.')
|
|
{
|
|
$self = e_REQUEST_URL;
|
|
//if(e_QUERY){ $self .= '?'.e_QUERY; }
|
|
$location = str_replace('://www.', '://', $self);
|
|
if(defined('e_DEBUG') && e_DEBUG === true)
|
|
{
|
|
echo "Redirecting to location: ".$location;
|
|
}
|
|
|
|
e107::getRedirect()->go($location,true,301);
|
|
// header("Location: {$location}", true, 301); // send 301 header, not 302
|
|
exit();
|
|
}
|
|
}
|
|
elseif(deftrue('e_DOMAIN'))
|
|
{
|
|
// Find domain and port from user and from pref
|
|
list($urlbase,$urlport) = explode(':',$_SERVER['HTTP_HOST'].':');
|
|
if (!$urlport) { $urlport = $_SERVER['SERVER_PORT']; }
|
|
if (!$urlport) { $urlport = 80; }
|
|
$aPrefURL = explode('/',$pref['siteurl'],4);
|
|
if (count($aPrefURL) > 2) // we can do this -- there's at least http[s]://dom.ain/whatever
|
|
{
|
|
$PrefRoot = $aPrefURL[2];
|
|
list($PrefSiteBase,$PrefSitePort) = explode(':',$PrefRoot.':');
|
|
if (!$PrefSitePort)
|
|
{
|
|
$PrefSitePort = ( $aPrefURL[0] == 'https:' ) ? 443 : 80; // no port so set port based on 'scheme'
|
|
}
|
|
|
|
// Redirect only if
|
|
// -- ports do not match (http <==> https)
|
|
// -- base domain does not match (case-insensitive)
|
|
// -- NOT admin area
|
|
if (($urlport != $PrefSitePort || stripos($PrefSiteBase, $urlbase) === false) && strpos(e_REQUEST_SELF, ADMINDIR) === false)
|
|
{
|
|
$aeSELF = explode('/', e_REQUEST_SELF, 4);
|
|
$aeSELF[0] = $aPrefURL[0]; // Swap in correct type of query (http, https)
|
|
$aeSELF[1] = ''; // Defensive code: ensure http:// not http:/<garbage>/
|
|
$aeSELF[2] = $aPrefURL[2]; // Swap in correct domain and possibly port
|
|
$location = implode('/',$aeSELF).($_SERVER['QUERY_STRING'] ? '?'.$_SERVER['QUERY_STRING'] : '');
|
|
$location = filter_var($location, FILTER_SANITIZE_URL);
|
|
//
|
|
// header("Location: {$location}", true, 301); // send 301 header, not 302
|
|
if(defined('e_DEBUG') && e_DEBUG === true)
|
|
{
|
|
echo "DEBUG INFO: site-redirect preference enabled.<br />Redirecting to: <a hre='".$location."'>".$location."</a>";;
|
|
echo "<br />e_DOMAIN: ".e_DOMAIN;
|
|
echo "<br />e_SUBDOMAIN: ".e_SUBDOMAIN;
|
|
}
|
|
else
|
|
{
|
|
e107::getRedirect()->go($location,true,301);
|
|
}
|
|
|
|
exit();
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Set the User's Language
|
|
*/
|
|
// SESSION Needs to be started after:
|
|
// - Site preferences are available
|
|
// - Language detection (because of session.cookie_domain)
|
|
// to avoid multi-language 'access-denied' issues.
|
|
//session_start(); see e107::getSession() above
|
|
$sql->db_Mark_Time('Load Session Handler');
|
|
e107::getSession(); //init core _SESSION - actually here for reference only, it's done by language handler set() method
|
|
$sql->db_Mark_Time('Set User Language Session');
|
|
e107::getLanguage()->set(); // set e_LANGUAGE, USERLAN, Language Session / Cookies etc. requires $pref;
|
|
|
|
if(varset($pref['multilanguage']) && (e_LANGUAGE != $pref['sitelanguage']))
|
|
{
|
|
$sql->mySQLlanguage = e_LANGUAGE;
|
|
$sql2->mySQLlanguage = e_LANGUAGE;
|
|
}
|
|
|
|
//do it only once and with the proper function
|
|
// e107_include_once(e_LANGUAGEDIR.e_LANGUAGE.'/'.e_LANGUAGE.'.php');
|
|
// e107_include_once(e_LANGUAGEDIR.e_LANGUAGE.'/'.e_LANGUAGE.'_custom.php');
|
|
// v1 Custom language File Path.
|
|
$sql->db_Mark_Time('Include Global Core Language Files');
|
|
if((e_ADMIN_AREA === true) && !empty($pref['adminlanguage']))
|
|
{
|
|
include(e_LANGUAGEDIR.$pref['adminlanguage'].'/'.$pref['adminlanguage'].'.php');
|
|
}
|
|
else
|
|
{
|
|
include(e_LANGUAGEDIR.e_LANGUAGE.'/'.e_LANGUAGE.'.php'); // FASTEST - ALWAYS load
|
|
}
|
|
|
|
|
|
$customLan = e_LANGUAGEDIR.e_LANGUAGE.'/'.e_LANGUAGE.'_custom.php';
|
|
if(is_readable($customLan)) // FASTER - if exist, should be done 'once' by the core
|
|
{
|
|
include($customLan);
|
|
}
|
|
|
|
// v2 Custom language File Path.
|
|
$customLan2 = e_SYSTEM.'/lans/'.e_LANGUAGE.'_custom.php';
|
|
if(is_readable($customLan2)) // FASTER - if exist, should be done 'once' by the core
|
|
{
|
|
include($customLan2);
|
|
}
|
|
unset($customLan, $customLan2);
|
|
|
|
$lng->bcDefs(); // defined v1.x definitions for old templates.
|
|
|
|
$sql->db_Mark_Time('Include Global Plugin Language Files');
|
|
if(isset($pref['lan_global_list']))
|
|
{
|
|
foreach($pref['lan_global_list'] as $path)
|
|
{
|
|
e107::plugLan($path,'global',true);
|
|
}
|
|
}
|
|
|
|
|
|
|
|
$sql->db_Mark_Time('CHAP challenge');
|
|
|
|
$die = (e_AJAX_REQUEST == true) ? false : true;
|
|
e107::getSession()
|
|
->challenge() // Make sure there is a unique challenge string for CHAP login
|
|
->check($die); // Token protection
|
|
unset($die);
|
|
|
|
//
|
|
// N: misc setups: online user tracking, cache
|
|
//
|
|
$sql->db_Mark_Time('Misc resources. Online user tracking, cache');
|
|
|
|
|
|
/**
|
|
* @deprecated BC, call the method only when needed, $e107->ecache caught by __get()
|
|
*/
|
|
$e107cache = e107::getCache(); //TODO - find & replace $e107cache, $e107->ecache
|
|
|
|
//DEPRECATED, BC, call the method only when needed, $e107->override caught by __get()
|
|
$override = e107::getSingleton('override', true); //TODO - find & replace $override, $e107->override
|
|
|
|
//DEPRECATED, BC, call the method only when needed, $e107->user_class caught by __get()
|
|
$e_userclass = e107::getUserClass(); //TODO - find & replace $e_userclass, $e107->user_class
|
|
|
|
$sql->db_Mark_Time('Init Event Handler');
|
|
e107::getEvent()->init();
|
|
$sql->db_Mark_Time('Register Core Events');
|
|
e107::getNotify()->registerEvents();
|
|
|
|
//
|
|
// O: Start user session
|
|
//
|
|
$sql -> db_Mark_Time('User session');
|
|
init_session(); // Set up a lot of the user-related constants
|
|
|
|
|
|
|
|
/**
|
|
* @deprecated but necessary. BC Fix.
|
|
* @return string
|
|
*/
|
|
function getip()
|
|
{
|
|
return e107::getIPHandler()->ipDecode(USERIP);
|
|
}
|
|
|
|
|
|
$developerMode = (vartrue($pref['developer'],false) || E107_DEBUG_LEVEL > 0);
|
|
|
|
// for multi-language these definitions needs to come after the language loaded.
|
|
define('SITENAME', trim($tp->toHTML($pref['sitename'], '', 'USER_TITLE,er_on,defs')));
|
|
define('SITEBUTTON', $tp->replaceConstants($pref['sitebutton'],'abs'));
|
|
define('SITETAG', $tp->toHTML($pref['sitetag'], false, 'emotes_off,defs'));
|
|
define('SITEDESCRIPTION', $tp->toHTML($pref['sitedescription'], '', 'emotes_off,defs'));
|
|
define('SITEADMIN', $pref['siteadmin']);
|
|
define('SITEADMINEMAIL', $pref['siteadminemail']);
|
|
define('SITEDISCLAIMER', $tp->toHTML($pref['sitedisclaimer'], '', 'emotes_off,defs'));
|
|
define('SITECONTACTINFO', $tp->toHTML($pref['sitecontactinfo'], true, 'emotes_off,defs'));
|
|
define('SITEEMAIL', vartrue($pref['replyto_email'],$pref['siteadminemail']));
|
|
define('USER_REGISTRATION', vartrue($pref['user_reg'],false)); // User Registration System Active or Not.
|
|
define('e_DEVELOPER', $developerMode);
|
|
define('e_VERSION', varset($pref['version'],''));
|
|
|
|
unset($developerMode);
|
|
|
|
if(!empty($pref['xurl']) && is_array($pref['xurl']))
|
|
{
|
|
define('XURL_FACEBOOK', vartrue($pref['xurl']['facebook'], false));
|
|
define('XURL_TWITTER', vartrue($pref['xurl']['twitter'], false));
|
|
define('XURL_YOUTUBE', vartrue($pref['xurl']['youtube'], false));
|
|
define('XURL_GOOGLE', vartrue($pref['xurl']['google'], false));
|
|
define('XURL_LINKEDIN', vartrue($pref['xurl']['linkedin'], false));
|
|
define('XURL_GITHUB', vartrue($pref['xurl']['github'], false));
|
|
define('XURL_FLICKR', vartrue($pref['xurl']['flickr'], false));
|
|
define('XURL_INSTAGRAM', vartrue($pref['xurl']['instagram'], false));
|
|
define('XURL_PINTEREST', vartrue($pref['xurl']['pinterest'], false));
|
|
define('XURL_STEAM', vartrue($pref['xurl']['steam'], false));
|
|
define('XURL_VIMEO', vartrue($pref['xurl']['vimeo'], false));
|
|
}
|
|
else
|
|
{
|
|
define('XURL_FACEBOOK',false);
|
|
define('XURL_TWITTER', false);
|
|
define('XURL_YOUTUBE', false);
|
|
define('XURL_GOOGLE', false);
|
|
define('XURL_LINKEDIN', false);
|
|
define('XURL_GITHUB', false);
|
|
define('XURL_FLICKR', false);
|
|
define('XURL_INSTAGRAM', false);
|
|
define('XURL_PINTEREST', false);
|
|
define('XURL_STEAM', false);
|
|
define('XURL_VIMEO', false);
|
|
}
|
|
|
|
if(!defined('MAIL_IDENTIFIER'))
|
|
{
|
|
define('MAIL_IDENTIFIER', 'X-e107-id');
|
|
}
|
|
|
|
/* Withdrawn 0.8
|
|
// legacy module.php file loading.
|
|
if (isset($pref['modules']) && $pref['modules']) {
|
|
$mods=explode(",", $pref['modules']);
|
|
foreach ($mods as $mod) {
|
|
if (is_readable(e_PLUGIN."{$mod}/module.php")) {
|
|
require_once(e_PLUGIN."{$mod}/module.php");
|
|
}
|
|
}
|
|
}
|
|
*/
|
|
|
|
$sql->db_Mark_Time('Load Plugin Modules');
|
|
|
|
$js_body_onload = array(); // Initialise this array in case a module wants to add to it
|
|
|
|
// Load e_modules after all the constants, but before the themes, so they can be put to use.
|
|
if(isset($pref['e_module_list']) && $pref['e_module_list'])
|
|
{
|
|
foreach ($pref['e_module_list'] as $mod)
|
|
{
|
|
if (is_readable(e_PLUGIN."{$mod}/e_module.php"))
|
|
{
|
|
require_once(e_PLUGIN."{$mod}/e_module.php");
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
//
|
|
// P: THEME LOADING
|
|
//
|
|
|
|
$sql->db_Mark_Time('Load Theme');
|
|
|
|
if(!defined("USERTHEME" ))
|
|
{
|
|
define('USERTHEME', (e107::getUser()->getPref('sitetheme') && file_exists(e_THEME.e107::getUser()->getPref('sitetheme')."/theme.php") ? e107::getUser()->getPref('sitetheme') : false));
|
|
}
|
|
|
|
//########### Module redefinable functions ###############
|
|
if (!function_exists('checkvalidtheme'))
|
|
{
|
|
|
|
function checkvalidtheme($theme_check)
|
|
{
|
|
// arg1 = theme to check
|
|
//global $ADMIN_DIRECTORY, $tp, $e107;
|
|
global $sql;
|
|
$e107 = e107::getInstance();
|
|
$tp = e107::getParser();
|
|
$ADMIN_DIRECTORY = $e107->getFolder('admin');
|
|
|
|
// e_QUERY not set when in single entry mod
|
|
if (ADMIN && strpos($_SERVER['QUERY_STRING'], 'themepreview') !== false)
|
|
{
|
|
list($action, $id) = explode('.', $_SERVER['QUERY_STRING']);
|
|
|
|
require_once(e_HANDLER.'theme_handler.php');
|
|
$themeobj = new themeHandler;
|
|
$themeArray = $themeobj->getThemes('id');
|
|
|
|
$id = intval($id);
|
|
|
|
$themeDef = $themeobj->findDefault($themeArray[$id]);
|
|
|
|
define('THEME_LAYOUT',$themeDef);
|
|
|
|
define('PREVIEWTHEME', e_THEME.$themeArray[$id].'/');
|
|
define('PREVIEWTHEMENAME', $themeArray[$id]);
|
|
define('THEME', e_THEME.$themeArray[$id].'/');
|
|
define('THEME_ABS', e_THEME_ABS.$themeArray[$id].'/');
|
|
|
|
$legacy = (file_exists( e_THEME_ABS.$themeArray[$id].'/theme.xml') === false);
|
|
|
|
define('THEME_LEGACY',$legacy);
|
|
|
|
|
|
return;
|
|
}
|
|
|
|
$sql->db_Mark_time("Theme Check");
|
|
|
|
if (@fopen(e_THEME.$theme_check.'/theme.php', 'r'))
|
|
// if (is_readable(e_THEME.$theme_check.'/theme.php'))
|
|
{
|
|
define('THEME', e_THEME.$theme_check.'/');
|
|
define('THEME_ABS', e_THEME_ABS.$theme_check.'/');
|
|
|
|
$legacy = (file_exists(e_THEME.$theme_check.'/theme.xml') === false);
|
|
|
|
define('THEME_LEGACY',$legacy);
|
|
|
|
$e107->site_theme = $theme_check;
|
|
}
|
|
else
|
|
{
|
|
function search_validtheme()
|
|
{
|
|
$e107 = e107::getInstance();
|
|
$th = substr(e_THEME, 0, -1);
|
|
$handle = opendir($th);
|
|
while ($file = readdir($handle))
|
|
{
|
|
if (is_dir(e_THEME.$file) && is_readable(e_THEME.$file.'/theme.php'))
|
|
{
|
|
closedir($handle);
|
|
$e107->site_theme = $file;
|
|
return $file;
|
|
}
|
|
}
|
|
closedir($handle);
|
|
}
|
|
|
|
$e107tmp_theme = 'bootstrap3'; // set to bootstrap3 by default. search_validtheme();
|
|
define('THEME', e_THEME.$e107tmp_theme.'/');
|
|
define('THEME_ABS', e_THEME_ABS.$e107tmp_theme.'/');
|
|
if (ADMIN && strpos(e_SELF, $ADMIN_DIRECTORY) === false)
|
|
{
|
|
echo '<script>alert("'.$tp->toJS(CORE_LAN1).'")</script>';
|
|
$tm = e107::getSingleton('themeHandler');
|
|
$tm->setTheme($e107tmp_theme);
|
|
// $config = e107::getConfig();
|
|
// $config->set('sitetheme','core');
|
|
|
|
}
|
|
}
|
|
$sql->db_Mark_time("Theme Check End");
|
|
|
|
$themes_dir = $e107->getFolder('themes');
|
|
$e107->http_theme_dir = "{$e107->server_path}{$themes_dir}{$e107->site_theme}/";
|
|
}
|
|
}
|
|
|
|
//
|
|
// Q: ALL OTHER SETUP CODE
|
|
//
|
|
$sql->db_Mark_Time('Misc Setup');
|
|
|
|
//------------------------------------------------------------------------------------------------------------------------------------//
|
|
if (!class_exists('e107table', false))
|
|
{
|
|
/**
|
|
* @package e107
|
|
*/
|
|
class e107table
|
|
{
|
|
|
|
public $eMenuCount = 0;
|
|
public $eMenuArea;
|
|
public $eMenuTotal = array();
|
|
public $eSetStyle;
|
|
private $themeClass = '';
|
|
private $adminThemeClass = '';
|
|
public $frontend = null;
|
|
private $uniqueId = null;
|
|
private $content = array();
|
|
private $contentTypes = array('header','footer','text','title','image', 'list');
|
|
|
|
|
|
function __construct()
|
|
{
|
|
// $this->themeClass = e107::getPref('sitetheme')."_theme"; // disabled at the moment.
|
|
$this->adminThemeClass = e107::getPref('admintheme')."_admintheme"; // Check for a class.
|
|
}
|
|
|
|
|
|
/**
|
|
* Set the style mode for use in tablestyle() method/function
|
|
* @param string $style
|
|
*/
|
|
public function setStyle($style)
|
|
{
|
|
$this->eSetStyle = $style;
|
|
}
|
|
|
|
/**
|
|
* Set a unique id for use in tablestyle() method/function
|
|
* @param string $id
|
|
*/
|
|
public function setUniqueId($id)
|
|
{
|
|
$this->uniqueId = $id;
|
|
return $this;
|
|
}
|
|
|
|
|
|
/**
|
|
* Set Advanced Menu content (beyond just $caption and $text)
|
|
* @param string $type header|footer|text|title|image
|
|
* @param string $val
|
|
*/
|
|
public function setContent($type, $val)
|
|
{
|
|
if(!in_array($type,$this->contentTypes))
|
|
{
|
|
return false;
|
|
}
|
|
|
|
$this->content[$type] = (string) $val;
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
* @param $caption string caption text
|
|
* @param $text string
|
|
* @param $mode unique identifier
|
|
* @param $return boolean : return the html instead of echo it.
|
|
* @return null
|
|
*/
|
|
public function tablerender($caption, $text, $mode = 'default', $return = false)
|
|
{
|
|
$override_tablerender = e107::getSingleton('override', e_HANDLER.'override_class.php')->override_check('tablerender');
|
|
|
|
if ($override_tablerender)
|
|
{
|
|
$result = call_user_func($override_tablerender, $caption, $text, $mode, $return);
|
|
|
|
if ($result == 'return')
|
|
{
|
|
return '';
|
|
}
|
|
extract($result);
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
if ($return)
|
|
{
|
|
if(!empty($text) && $this->eMenuArea)
|
|
{
|
|
$this->eMenuCount++;
|
|
}
|
|
|
|
ob_start();
|
|
$this->tablestyle($caption, $text, $mode);
|
|
$ret=ob_get_contents();
|
|
ob_end_clean();
|
|
|
|
return $ret;
|
|
|
|
}
|
|
else
|
|
{
|
|
if(!empty($text) && $this->eMenuArea)
|
|
{
|
|
$this->eMenuCount++;
|
|
}
|
|
|
|
$this->tablestyle($caption, $text, $mode);
|
|
return '';
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
* Output the styled template.
|
|
* @param $caption
|
|
* @param $text
|
|
* @param $mode
|
|
*/
|
|
private function tablestyle($caption, $text, $mode)
|
|
{
|
|
|
|
if(class_exists($this->adminThemeClass) && ($this->frontend == false))
|
|
{
|
|
$thm = new $this->adminThemeClass();
|
|
}
|
|
elseif(class_exists($this->themeClass)) // disabled at the moment.
|
|
{
|
|
$thm = new $this->themeClass();
|
|
}
|
|
|
|
$options = $this->content;
|
|
|
|
$options['uniqueId'] = $this->uniqueId;
|
|
$options['menuArea'] = $this->eMenuArea;
|
|
$options['menuCount'] = $this->eMenuCount;
|
|
$options['menuTotal'] = varset($this->eMenuTotal[$this->eMenuArea]);
|
|
$options['setStyle'] = $this->eSetStyle;
|
|
|
|
|
|
if(is_object(vartrue($thm)))
|
|
{
|
|
$thm->tablestyle($caption, $text, $mode, $options);
|
|
}
|
|
else
|
|
{
|
|
tablestyle($caption, $text, $mode, $options);
|
|
}
|
|
|
|
$this->uniqueId = null;
|
|
$this->content = array();
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
}
|
|
//#############################################################
|
|
|
|
//DEPRECATED, BC, call the method only when needed, $e107->ns caught by __get()
|
|
$ns = e107::getRender(); //TODO - find & replace $ns, $e107->ns
|
|
|
|
// EONE-134 - bad e_module could destroy e107 instance
|
|
$e107 = e107::getInstance(); // Is this needed now?
|
|
$sql->db_Mark_Time('IP Handler and Ban Check');
|
|
e107::getIPHandler()->ban();
|
|
|
|
if(varset($pref['force_userupdate']) && USER && !isset($_E107['no_forceuserupdate']) && $_SERVER['QUERY_STRING'] !== 'logout')
|
|
{
|
|
if(force_userupdate($currentUser))
|
|
{
|
|
header('Location: '.SITEURL.'usersettings.php?update');
|
|
exit();
|
|
}
|
|
}
|
|
|
|
$sql->db_Mark_Time('Signup/splash/admin');
|
|
|
|
|
|
if(($pref['membersonly_enabled'] && !isset($_E107['allow_guest'])) || ($pref['maintainance_flag'] && empty($_E107['cli']) && empty($_E107['no_maintenance'])))
|
|
{
|
|
//XXX move force_userupdate() also?
|
|
e107::getRedirect()->checkMaintenance();
|
|
e107::getRedirect()->checkMembersOnly();
|
|
}
|
|
|
|
// ------------------------------------------------------------------------
|
|
|
|
if(!isset($_E107['no_prunetmp']))
|
|
{
|
|
$sql->delete('tmp', 'tmp_time < '.(time() - 300)." AND tmp_ip!='data' AND tmp_ip!='submitted_link'");
|
|
}
|
|
|
|
|
|
$sql->db_Mark_Time('Login/logout/ban/tz');
|
|
|
|
|
|
if (isset($_POST['userlogin']) || isset($_POST['userlogin_x']))
|
|
{
|
|
e107::getUser()->login($_POST['username'], $_POST['userpass'], $_POST['autologin'], varset($_POST['hashchallenge'],''), false);
|
|
// e107_require_once(e_HANDLER.'login.php');
|
|
// $usr = new userlogin($_POST['username'], $_POST['userpass'], $_POST['autologin'], varset($_POST['hashchallenge'],''));
|
|
}
|
|
|
|
|
|
|
|
// $_SESSION['ubrowser'] check not needed anymore - see session handler
|
|
// e_QUERY not defined in single entry mod
|
|
if (($_SERVER['QUERY_STRING'] == 'logout')/* || (($pref['user_tracking'] == 'session') && isset($_SESSION['ubrowser']) && ($_SESSION['ubrowser'] != $ubrowser))*/)
|
|
{
|
|
if (USER)
|
|
{
|
|
if (check_class(varset($pref['user_audit_class'],''))) // Need to note in user audit trail
|
|
{
|
|
e107::getLog()->user_audit(USER_AUDIT_LOGOUT, '', USERID, USERNAME);
|
|
}
|
|
}
|
|
|
|
// $ip = e107::getIPHandler()->getIP(FALSE); Appears to not be used, so removed
|
|
$udata = (USER === true ? USERID.'.'.USERNAME : '0');
|
|
|
|
// TODO - should be done inside online handler, more core areas need it (session handler for example)
|
|
if (isset($pref['track_online']) && $pref['track_online'])
|
|
{
|
|
$sql->update('online', "online_user_id = 0, online_pagecount=online_pagecount+1 WHERE online_user_id = '{$udata}'");
|
|
}
|
|
|
|
// earlier event trigger with user data still available
|
|
e107::getEvent()->trigger('logout');
|
|
|
|
// first model logout and session destroy..
|
|
e107::getUser()->logout();
|
|
|
|
// it might be removed soon
|
|
if ($pref['user_tracking'] == 'session')
|
|
{
|
|
session_destroy();
|
|
$_SESSION[e_COOKIE]='';
|
|
// @TODO: Need to destroy the session cookie as well (not done by session_destroy()
|
|
}
|
|
cookie(e_COOKIE, '', (time() - 2592000));
|
|
|
|
e107::getRedirect()->redirect(SITEURL);
|
|
// header('location:'.e_BASE.'index.php');
|
|
exit();
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
* @addtogroup timezone
|
|
* @{
|
|
*/
|
|
|
|
/**
|
|
* Generate an array of time zones.
|
|
*
|
|
* @return array
|
|
* Array of time zones.
|
|
*/
|
|
function systemTimeZones()
|
|
{
|
|
// Never do something time consuming twice if you can hold onto the results
|
|
// and re-use them. So we re-use the statically cached value to save time
|
|
// and memory.
|
|
static $zones = array();
|
|
|
|
// If Timezone list is not populated yet.
|
|
if(empty($zones))
|
|
{
|
|
$zonelist = timezone_identifiers_list();
|
|
$timeNow = date('m/d/Y H:i', $_SERVER['REQUEST_TIME']);
|
|
|
|
foreach($zonelist as $zone)
|
|
{
|
|
// Because many time zones exist in PHP only for backward compatibility
|
|
// reasons and should not be used, the list is filtered by a regular
|
|
// expression.
|
|
if(preg_match('!^((Africa|America|Antarctica|Arctic|Asia|Atlantic|Australia|Europe|Indian|Pacific)/|UTC$)!', $zone))
|
|
{
|
|
$dateTimeZone = new DateTimeZone($zone);
|
|
$dateTime = new DateTime($timeNow, $dateTimeZone);
|
|
$offset = $dateTime->format('O');
|
|
$offset = chunk_split($offset, 3, ':');
|
|
|
|
$zones[$zone] = str_replace('_', ' ', $zone) . ' (' . rtrim($offset, ':') . ')';
|
|
}
|
|
}
|
|
|
|
// Sort time zones alphabetically.
|
|
asort($zones);
|
|
}
|
|
|
|
return $zones;
|
|
}
|
|
|
|
/**
|
|
* Validate a timezone.
|
|
*
|
|
* @param string $zone
|
|
* Timezone.
|
|
*
|
|
* @return bool
|
|
*/
|
|
function systemTimeZoneIsValid($zone = '')
|
|
{
|
|
$zones = systemTimeZones();
|
|
$zoneKeys = array_keys($zones);
|
|
|
|
if(in_array($zone, $zoneKeys))
|
|
{
|
|
return true;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
$e_deltaTime = 0;
|
|
|
|
if (isset($_COOKIE['e107_tdOffset']))
|
|
{
|
|
// Actual seconds of delay. See e107.js and footer_default.php
|
|
$e_deltaTime = (15*floor((intval($_COOKIE['e107_tdOffset']) /60)/15))*60; // Delay in seconds rounded to the lowest quarter hour
|
|
}
|
|
|
|
if (isset($_COOKIE['e107_tzOffset']))
|
|
{
|
|
// Relative client-to-server time zone offset in seconds.
|
|
$e_deltaTime += (-(intval($_COOKIE['e107_tzOffset']) * 60 + date("Z")));
|
|
}
|
|
|
|
define('TIMEOFFSET', $e_deltaTime);
|
|
|
|
/**
|
|
* @} End of "addtogroup timezone".
|
|
*/
|
|
|
|
|
|
|
|
// ----------------------------------------------------------------------------
|
|
$sql->db_Mark_Time('Find/Load Theme');
|
|
|
|
if(e_ADMIN_AREA) // Load admin phrases ASAP
|
|
{
|
|
e107::includeLan(e_LANGUAGEDIR.e_LANGUAGE.'/admin/lan_admin.php');
|
|
}
|
|
|
|
|
|
if(!defined('THEME'))
|
|
{
|
|
|
|
if (e_ADMIN_AREA && vartrue($pref['admintheme']))
|
|
{
|
|
//We have now e_IFRAME mod and USER_AREA force
|
|
// && (strpos(e_SELF.'?'.e_QUERY, 'menus.php?configure') === FALSE)
|
|
|
|
/* if (strpos(e_SELF, "newspost.php") !== FALSE)
|
|
{
|
|
define("MAINTHEME", e_THEME.$pref['sitetheme']."/"); MAINTHEME no longer used in core distribution
|
|
} */
|
|
checkvalidtheme($pref['admintheme']);
|
|
}
|
|
elseif (USERTHEME !== false/* && USERTHEME != 'USERTHEME'*/ && !e_ADMIN_AREA)
|
|
{
|
|
checkvalidtheme(USERTHEME);
|
|
}
|
|
else
|
|
{
|
|
checkvalidtheme($pref['sitetheme']);
|
|
}
|
|
|
|
|
|
}
|
|
|
|
$theme_pref = varset($pref['sitetheme_pref']);
|
|
// --------------------------------------------------------------
|
|
$sql->db_Mark_Time('Find/Load Theme-Layout'); // needs to run after checkvalidtheme() (for theme previewing).
|
|
|
|
if(!defined("THEME_LAYOUT"))
|
|
{
|
|
$def = ""; // no custom pages found yet.
|
|
$cusPagePref = (varset($user_pref['sitetheme_custompages'])) ? $user_pref['sitetheme_custompages'] : varset($pref['sitetheme_custompages']);
|
|
|
|
if(is_array($cusPagePref) && count($cusPagePref)>0) // check if we match a page in layout custompages.
|
|
{
|
|
//e_SELF.(e_QUERY ? '?'.e_QUERY : '');
|
|
$c_url = str_replace(array('&'), array('&'), e_REQUEST_URL);//.(e_QUERY ? '?'.e_QUERY : '');// mod_rewrite support
|
|
// FIX - check against urldecoded strings
|
|
$c_url = rtrim(rawurldecode($c_url), '?');
|
|
|
|
foreach($cusPagePref as $lyout=>$cusPageArray)
|
|
{
|
|
if(!is_array($cusPageArray)) { continue; }
|
|
|
|
// NEW - Front page template check - early
|
|
if(in_array('FRONTPAGE', $cusPageArray) && ($c_url == SITEURL || rtrim($c_url, '/') == SITEURL.'index.php'))
|
|
{
|
|
$def = $lyout;
|
|
break;
|
|
}
|
|
foreach($cusPageArray as $kpage)
|
|
{
|
|
if(substr($kpage, -1) === '!' )
|
|
{
|
|
$kpage = rtrim($kpage, '!');
|
|
if(substr($c_url, - strlen($kpage)) === $kpage)
|
|
{
|
|
$def = $lyout;
|
|
break 2;
|
|
}
|
|
continue;
|
|
}
|
|
|
|
if ($kpage && ($kpage == defset('e_PAGE') || strpos($c_url, $kpage) !== false))
|
|
{
|
|
// $def = ($lyout) ? $lyout : "legacyCustom";
|
|
$def = $lyout;
|
|
break 2;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/* Done via e_IFRAME and USER_AREA force combination, check moved to menu.php
|
|
if(strpos(e_SELF.'?'.e_QUERY, $ADMIN_DIRECTORY. 'menus.php?configure')!==FALSE)
|
|
{
|
|
$menus_equery = explode('.', e_QUERY);
|
|
$def = $menus_equery[1];
|
|
}
|
|
*/
|
|
|
|
if(varset($pref['themecss']) && file_exists(THEME.$pref['themecss']))
|
|
{
|
|
define("THEME_STYLE", $pref['themecss']);
|
|
}
|
|
else
|
|
{
|
|
define("THEME_STYLE", 'style.css');
|
|
}
|
|
|
|
if($def) // custom-page layout.
|
|
{
|
|
define("THEME_LAYOUT",$def);
|
|
}
|
|
else // default layout.
|
|
{
|
|
$deflayout = (!isset($user_pref['sitetheme_deflayout'])) ? varset($pref['sitetheme_deflayout']) : $user_pref['sitetheme_deflayout'];
|
|
/**
|
|
* @ignore
|
|
*/
|
|
define("THEME_LAYOUT",$deflayout); // default layout.
|
|
}
|
|
|
|
unset($def,$lyout,$cusPagePref,$menus_equery,$deflayout);
|
|
|
|
}
|
|
|
|
// -----------------------------------------------------------------------
|
|
|
|
|
|
if(!isset($_E107['no_menus']))
|
|
{
|
|
$sql->db_Mark_Time('Init Menus');
|
|
e107::getMenu()->init();
|
|
}
|
|
|
|
// here we USE the theme
|
|
if(e_ADMIN_AREA)
|
|
{
|
|
$sql->db_Mark_Time('Loading Admin Theme');
|
|
if(file_exists(THEME.'admin_theme.php') && !deftrue('e_MENUMANAGER_ACTIVE')) // no admin theme when previewing.
|
|
{
|
|
require_once (THEME.'admin_theme.php');
|
|
}
|
|
else
|
|
{
|
|
require_once (THEME.'theme.php');
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$sql->db_Mark_Time('Loading Site Theme');
|
|
require_once (THEME.'theme.php');
|
|
if(isset($SC_WRAPPER))
|
|
{
|
|
e107::scStyle($SC_WRAPPER);
|
|
}
|
|
}
|
|
|
|
|
|
//----------------------------
|
|
// Load shortcode handler
|
|
//----------------------------
|
|
// ********* This is probably a bodge! Work out what to do properly. Has to be done when $pref valid
|
|
//FIXED - undefined $register_sc
|
|
//$tp->sch_load(); - will be auto-initialized by first $tp->e_sc call - see e_parse->__get()
|
|
|
|
/*
|
|
$exclude_lan = array('lan_signup.php'); // required for multi-language.
|
|
|
|
if ($inAdminDir)
|
|
{
|
|
e107_include_once(e_LANGUAGEDIR.e_LANGUAGE.'/admin/lan_'.e_PAGE);
|
|
e107_include_once(e_LANGUAGEDIR.'English/admin/lan_'.e_PAGE);
|
|
}
|
|
elseif (!in_array('lan_'.e_PAGE,$exclude_lan) && !$isPluginDir)
|
|
{
|
|
e107_include_once(e_LANGUAGEDIR.e_LANGUAGE.'/lan_'.e_PAGE);
|
|
e107_include_once(e_LANGUAGEDIR.'English/lan_'.e_PAGE);
|
|
}
|
|
*/
|
|
|
|
if ($pref['anon_post'] ? define('ANON', true) : define('ANON', false));
|
|
|
|
if (empty($pref['newsposts']) ? define('ITEMVIEW', 15) : define('ITEMVIEW', $pref['newsposts']));
|
|
|
|
if ($pref['antiflood1'] == 1 && !defined('FLOODPROTECT'))
|
|
{
|
|
define('FLOODPROTECT', TRUE);
|
|
define('FLOODTIMEOUT', max(varset($pref['antiflood_timeout'], 10), 3));
|
|
}
|
|
else
|
|
{
|
|
/**
|
|
* @ignore
|
|
*/
|
|
define('FLOODPROTECT', FALSE);
|
|
}
|
|
|
|
$layout = isset($layout) ? $layout : '_default';
|
|
define('HEADERF', e_CORE."templates/header{$layout}.php");
|
|
define('FOOTERF', e_CORE."templates/footer{$layout}.php");
|
|
|
|
if (!file_exists(HEADERF))
|
|
{
|
|
message_handler('CRITICAL_ERROR', 'Unable to find file: '.HEADERF, __LINE__ - 2, __FILE__);
|
|
}
|
|
|
|
if (!file_exists(FOOTERF))
|
|
{
|
|
message_handler('CRITICAL_ERROR', 'Unable to find file: '.FOOTERF, __LINE__ - 2, __FILE__);
|
|
}
|
|
|
|
//define('LOGINMESSAGE', ''); - not needed, breaks login messages
|
|
define('OPEN_BASEDIR', (ini_get('open_basedir') ? true : false));
|
|
define('SAFE_MODE', (ini_get('safe_mode') ? true : false));
|
|
define('FILE_UPLOADS', (ini_get('file_uploads') ? true : false));
|
|
define('INIT', true);
|
|
if(isset($_SERVER['HTTP_REFERER']))
|
|
{
|
|
$tmp = explode("?", $_SERVER['HTTP_REFERER']);
|
|
define('e_REFERER_SELF',($tmp[0] == e_REQUEST_SELF));
|
|
unset($tmp);
|
|
}
|
|
else
|
|
{
|
|
/**
|
|
* @ignore
|
|
*/
|
|
define('e_REFERER_SELF', FALSE);
|
|
}
|
|
|
|
//BC, DEPRECATED - use e107::getDateConvert(), catched by __autoload as well
|
|
/*if (!class_exists('convert'))
|
|
{
|
|
require_once(e_HANDLER.'date_handler.php');
|
|
}*/
|
|
|
|
//@require_once(e_HANDLER."IPB_int.php");
|
|
//@require_once(e_HANDLER."debug_handler.php");
|
|
//-------------------------------------------------------------------------------------------------------------------------------------------
|
|
function js_location($qry)
|
|
{
|
|
global $error_handler;
|
|
if (count($error_handler->errors))
|
|
{
|
|
echo $error_handler->return_errors();
|
|
exit;
|
|
}
|
|
else
|
|
{
|
|
echo "<script type='text/javascript'>document.location.href='{$qry}'</script>\n";
|
|
exit;
|
|
}
|
|
}
|
|
|
|
function check_email($email)
|
|
{
|
|
|
|
if(empty($email))
|
|
{
|
|
return false;
|
|
}
|
|
|
|
if(is_numeric(substr($email,-1))) // fix for eCaptcha accidently typed on wrong line.
|
|
{
|
|
return false;
|
|
}
|
|
|
|
if(filter_var($email, FILTER_VALIDATE_EMAIL))
|
|
{
|
|
return $email;
|
|
}
|
|
|
|
return false;
|
|
|
|
// return preg_match("/^([_a-zA-Z0-9-+]+)(\.[_a-zA-Z0-9-]+)*@([a-zA-Z0-9-]+)(\.[a-zA-Z0-9-]+)*(\.[a-zA-Z]{2,6})$/" , $email) ? $email : false;
|
|
}
|
|
|
|
//---------------------------------------------------------------------------------------------------------------------------------------------
|
|
/**
|
|
* @param $var is a single class number or name, or a comma-separated list of the same.
|
|
* @param $userclass a custom list of userclasses or leave blank for the current user's permissions.
|
|
* If a class is prefixed with '-' this means 'exclude' - returns FALSE if the user is in this class (overrides 'includes').
|
|
* Otherwise returns TRUE if the user is in any of the classes listed in $var.
|
|
*/
|
|
function check_class($var, $userclass = USERCLASS_LIST, $uid = 0)
|
|
{
|
|
$e107 = e107::getInstance();
|
|
if($var == e_LANGUAGE)
|
|
{
|
|
return TRUE;
|
|
}
|
|
|
|
if(e107::isCli())
|
|
{
|
|
return true;
|
|
}
|
|
|
|
if(is_numeric($uid) && $uid > 0)
|
|
{ // userid has been supplied, go build that user's class list
|
|
$userclass = class_list($uid);
|
|
}
|
|
|
|
if ($userclass == '')
|
|
{
|
|
return FALSE;
|
|
}
|
|
|
|
$class_array = !is_array($userclass) ? explode(',', $userclass) : $userclass;
|
|
|
|
$varList = !is_array($var) ? explode(',', $var) : $var;
|
|
$latchedAccess = FALSE;
|
|
|
|
foreach($varList as $v)
|
|
{
|
|
$v = trim($v);
|
|
$invert = FALSE;
|
|
//value to test is a userclass name (or garbage, of course), go get the id
|
|
if( ! is_numeric($v))
|
|
{
|
|
if (substr($v, 0, 1) == '-')
|
|
{
|
|
$invert = TRUE;
|
|
$v = substr($v, 1);
|
|
}
|
|
$v = $e107->user_class->ucGetClassIDFromName($v);
|
|
}
|
|
elseif ($v < 0)
|
|
{
|
|
$invert = TRUE;
|
|
$v = -$v;
|
|
}
|
|
if ($v !== FALSE)
|
|
{
|
|
// Ignore non-valid userclass names
|
|
if (in_array($v, $class_array) || ($v === '0') || ($v === 0))
|
|
{
|
|
if ($invert)
|
|
{
|
|
return FALSE;
|
|
}
|
|
$latchedAccess = TRUE;
|
|
}
|
|
elseif ($invert && count($varList) == 1)
|
|
{
|
|
// Handle scenario where only an 'exclude' class is passed
|
|
$latchedAccess = TRUE;
|
|
}
|
|
}
|
|
}
|
|
return $latchedAccess;
|
|
}
|
|
|
|
|
|
|
|
function getperms($arg, $ap = ADMINPERMS)
|
|
{
|
|
// $ap = "4"; // Just for testing.
|
|
|
|
if(!ADMIN || trim($ap) === '')
|
|
{
|
|
return FALSE;
|
|
}
|
|
|
|
if($arg === 0) // Common-error avoidance with getperms(0)
|
|
{
|
|
$arg = '0';
|
|
}
|
|
|
|
if ($ap === '0' || $ap === '0.') // BC fix.
|
|
{
|
|
return TRUE;
|
|
}
|
|
|
|
if ($arg == 'P' && preg_match("#(.*?)/".e107::getInstance()->getFolder('plugins')."(.*?)/(.*?)#", e_SELF, $matches))
|
|
{
|
|
$sql = e107::getDb('psql');
|
|
|
|
// FIXME - cache it, avoid sql query here
|
|
if ($sql->select('plugin', 'plugin_id', "plugin_path = '".$matches[2]."' LIMIT 1 "))
|
|
{
|
|
$row = $sql->fetch();
|
|
$arg = 'P'.$row['plugin_id'];
|
|
}
|
|
}
|
|
|
|
$ap_array = explode('.',$ap);
|
|
|
|
if(in_array($arg,$ap_array,FALSE))
|
|
{
|
|
return TRUE;
|
|
}
|
|
elseif(strpos($arg, "|")) // check for multiple perms - separated by '|'.
|
|
{
|
|
$tmp = explode("|", $arg);
|
|
foreach($tmp as $val)
|
|
{
|
|
if(in_array($val,$ap_array))
|
|
{
|
|
return TRUE;
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
return FALSE;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @deprecated
|
|
* Get the user data from user and user_extended tables
|
|
* SO MUCH DEPRECATED! Use e107::user($uid);
|
|
* @return array
|
|
*/
|
|
function get_user_data($uid, $extra = '')
|
|
{
|
|
if(e107::getPref('developer'))
|
|
{
|
|
e107::getAdminLog()->log_event(
|
|
'Deprecated call - get_user_data()',
|
|
'Call to deprecated function get_user_data() (class2.php) '."\n".print_r(debug_backtrace(null,2), true),
|
|
E_LOG_INFORMATIVE,
|
|
'DEPRECATED'
|
|
);
|
|
// TODO - debug screen Deprecated Functions (e107)
|
|
e107::getMessage()->addDebug('Deprecated get_user_data() backtrace:<pre>'."\n".print_r(debug_backtrace(null,2), true).'</pre>');
|
|
}
|
|
|
|
$var = array();
|
|
$user = e107::getSystemUser($uid, true);
|
|
if($user)
|
|
{
|
|
$var = $user->getUserData();
|
|
}
|
|
return $var;
|
|
}
|
|
|
|
//------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------//
|
|
//SO MUCH DEPRECATED
|
|
/**
|
|
* @deprecated
|
|
* @example Use instead: e107::getConfig(alias)->->setPref($array)->save(); Not to be used for saving plugin or theme prefs!
|
|
*/
|
|
function save_prefs($table = 'core', $uid = USERID, $row_val = '')
|
|
{
|
|
global $pref, $user_pref, $tp, $PrefCache, $sql, $eArrayStorage, $theme_pref;
|
|
|
|
if(e107::getPref('developer'))
|
|
{
|
|
$backtrace = debug_backtrace(false);
|
|
|
|
e107::getAdminLog()->add(
|
|
'Deprecated call - save_prefs()',
|
|
"Call to deprecated function save_prefs() (class2.php). Backtrace:\n".print_r($backtrace, true),
|
|
E_LOG_INFORMATIVE,
|
|
'DEPRECATED'
|
|
);
|
|
|
|
e107::getMessage()->addDebug('Deprecated save_prefs() backtrace:<pre>'."\n".print_r($backtrace, true).'</pre>');
|
|
}
|
|
|
|
|
|
|
|
|
|
switch($table)
|
|
{
|
|
case 'core':
|
|
//brute load, force update
|
|
|
|
if(count($pref) < 100) // precaution for old plugins
|
|
{
|
|
$backtrace = debug_backtrace(false);
|
|
|
|
e107::getAdminLog()->add(
|
|
'Core pref corruption avoided',
|
|
"Call to deprecated function save_prefs() (class2.php) with too few prefs. Backtrace:\n".print_r($backtrace, true),
|
|
E_LOG_INFORMATIVE,
|
|
'DEPRECATED'
|
|
);
|
|
|
|
|
|
e107::getMessage()->addDebug('Core-pref corruption avoided. Too few prefs sent to save_prefs(). Backtrace:<pre>'."\n".print_r($backtrace, true).'</pre>');
|
|
return false;
|
|
}
|
|
|
|
|
|
return e107::getConfig()->loadData($pref, false)->save(false, true);
|
|
break;
|
|
|
|
case 'theme':
|
|
//brute load, force update
|
|
return e107::getConfig()->set('sitetheme_pref', $theme_pref)->save(false, true);
|
|
break;
|
|
|
|
default:
|
|
$_user_pref = $tp->toDB($user_pref, true, true, 'pReFs');
|
|
$tmp = $eArrayStorage->WriteArray($_user_pref);
|
|
$sql->update('user', "user_prefs='$tmp' WHERE user_id=".intval($uid));
|
|
return $tmp;
|
|
break;
|
|
}
|
|
}
|
|
|
|
|
|
//------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------//
|
|
|
|
/**
|
|
* @deprecated use e107::setRegistry()
|
|
* @param $id
|
|
* @param $var
|
|
*/
|
|
function cachevars($id, $var)
|
|
{
|
|
e107::setRegistry('core/cachedvars/'.$id, $var);
|
|
}
|
|
|
|
|
|
/**
|
|
* @deprecated use e107::getRegistry()
|
|
* @param $id
|
|
* @return mixed
|
|
*/
|
|
function getcachedvars($id)
|
|
{
|
|
return e107::getRegistry('core/cachedvars/'.$id, false);
|
|
}
|
|
|
|
//------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------//
|
|
|
|
/**
|
|
* @package e107
|
|
*/
|
|
class floodprotect
|
|
{
|
|
function flood($table, $orderfield)
|
|
{
|
|
/*
|
|
# Test for possible flood
|
|
#
|
|
# - parameter #1 string $table, table being affected
|
|
# - parameter #2 string $orderfield, date entry in respective table
|
|
# - return boolean
|
|
# - scope public
|
|
*/
|
|
$sql=new db;
|
|
|
|
if (FLOODPROTECT == true)
|
|
{
|
|
$sql->select($table, '*', 'ORDER BY '.$orderfield.' DESC LIMIT 1', 'no_where');
|
|
$row=$sql->fetch();
|
|
return ($row[$orderfield] > (time() - FLOODTIMEOUT) ? false : true);
|
|
}
|
|
else
|
|
{
|
|
return TRUE;
|
|
}
|
|
}
|
|
}
|
|
|
|
//------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------//
|
|
//------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------//
|
|
/**
|
|
* The whole could happen inside e_user class
|
|
* @return void
|
|
*/
|
|
function init_session()
|
|
{
|
|
/*
|
|
# Validate user
|
|
#
|
|
# - parameters none
|
|
# - return boolean
|
|
# - scope public
|
|
*/
|
|
|
|
|
|
// ----------------------------------------
|
|
|
|
|
|
global $user_pref, $currentUser;
|
|
|
|
$e107 = e107::getInstance();
|
|
|
|
// New user model
|
|
$user = e107::getUser();
|
|
|
|
// Get user timezone.
|
|
$tzUser = $user->getTimezone();
|
|
|
|
// If user timezone is valid.
|
|
if (varset($tzUser, false) && systemTimeZoneIsValid($tzUser))
|
|
{
|
|
// Sets the default timezone used by all date/time functions.
|
|
date_default_timezone_set($tzUser);
|
|
// Save timezone for later use.
|
|
define('USERTIMEZONE', $tzUser);
|
|
|
|
unset($tzUser);
|
|
}
|
|
else
|
|
{
|
|
// Use system default timezone.
|
|
$pref = e107::getPref();
|
|
$tz = vartrue($pref['timezone'], 'UTC');
|
|
|
|
// Sets the default timezone used by all date/time functions.
|
|
date_default_timezone_set($tz);
|
|
// Save timezone for later use.
|
|
define('USERTIMEZONE', $tz);
|
|
|
|
unset($tz);
|
|
}
|
|
|
|
define('USERIP', e107::getIPHandler()->getIP(FALSE));
|
|
define('POST_REFERER', md5($user->getToken()));
|
|
|
|
// Check for intruders - outside the model for now
|
|
// TODO replace __referer with e-token, remove the above
|
|
if((isset($_POST['__referer']) && !$user->checkToken($_POST['__referer']))
|
|
|| (isset($_GET['__referer']) && !$user->checkToken($_GET['__referer'])))
|
|
{
|
|
// Die, die, die! DIE!!!
|
|
die('Unauthorized access!');
|
|
}
|
|
|
|
if(e107::isCli())
|
|
{
|
|
define('USER', true);
|
|
define('USERID', 1);
|
|
define('USERNAME', 'e107-cli');
|
|
define('USERTHEME', false);
|
|
define('ADMIN', true);
|
|
define('GUEST', false);
|
|
define('USERCLASS', '');
|
|
define('USEREMAIL', '');
|
|
define('USERCLASS_LIST', '');
|
|
define('USERCLASS', '');
|
|
define('USERJOINED', '');
|
|
return;
|
|
}
|
|
|
|
if ($user->hasBan())
|
|
{
|
|
$msg = e107::findPref('ban_messages/6');
|
|
if($msg) echo e107::getParser()->toHTML($msg);
|
|
exit;
|
|
}
|
|
|
|
if (!$user->isUser())
|
|
{
|
|
define('USER', false);
|
|
define('USERID', 0);
|
|
define('USERTHEME', false);
|
|
define('ADMIN', false);
|
|
define('GUEST', true);
|
|
define('USERCLASS', '');
|
|
define('USEREMAIL', '');
|
|
define('USERSIGNATURE', '');
|
|
define('ADMINPERMS', false);
|
|
|
|
if($user->hasSessionError())
|
|
{
|
|
define('LOGINMESSAGE', CORE_LAN10);
|
|
define('CORRUPT_COOKIE', true);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
// we shouldn't use getValue() here, it's there for e.g. shortcodes, profile page render etc.
|
|
define('USERID', $user->getId());
|
|
define('USERNAME', $user->get('user_name'));
|
|
define('USERURL', $user->get('user_homepage', false)); //required for BC
|
|
define('USEREMAIL', $user->get('user_email'));
|
|
define('USER', true);
|
|
define('USERCLASS', $user->get('user_class'));
|
|
define('USERIMAGE', $user->get('user_image'));
|
|
define('USERPHOTO', $user->get('user_sess'));
|
|
define('USERJOINED', $user->get('user_join'));
|
|
define('USERCURRENTVISIT', $user->get('user_currentvisit'));
|
|
define('USERVISITS', $user->get('user_visits'));
|
|
define('USERSIGNATURE', $user->get('user_signature'));
|
|
|
|
define('ADMIN', $user->isAdmin());
|
|
define('ADMINID', $user->getAdminId());
|
|
define('ADMINNAME', $user->getAdminName());
|
|
define('ADMINPERMS', $user->getAdminPerms());
|
|
define('ADMINEMAIL', $user->getAdminEmail());
|
|
define('ADMINPWCHANGE', $user->getAdminPwchange());
|
|
if(ADMIN) // XXX - why for admins only?
|
|
{
|
|
e107::getRedirect()->setPreviousUrl();
|
|
}
|
|
define('USERLV', $user->get('user_lastvisit'));
|
|
|
|
// BC - FIXME - get rid of them!
|
|
$currentUser = $user->getData();
|
|
$currentUser['user_realname'] = $user->get('user_login'); // Used by force_userupdate
|
|
$e107->currentUser = &$currentUser;
|
|
|
|
// if(defined('SETTHEME')) //override - within e_module for example.
|
|
// {
|
|
// $_POST['sitetheme'] = SETTHEME;
|
|
// $_POST['settheme'] = 1;
|
|
// }
|
|
|
|
// XXX could go to e_user class as well
|
|
if ($user->checkClass(e107::getPref('allow_theme_select', false), false))
|
|
{ // User can set own theme
|
|
if (isset($_POST['settheme']))
|
|
{
|
|
$uconfig = $user->getConfig();
|
|
if(e107::getPref('sitetheme') != $_POST['sitetheme'])
|
|
{
|
|
require_once(e_HANDLER."theme_handler.php");
|
|
$utheme = new themeHandler;
|
|
$ut = $utheme->themeArray[$_POST['sitetheme']];
|
|
|
|
$uconfig->setPosted('sitetheme', $_POST['sitetheme'])
|
|
->setPosted('sitetheme_custompages', $ut['custompages'])
|
|
->setPosted('sitetheme_deflayout', $utheme->findDefault($_POST['sitetheme']));
|
|
}
|
|
else
|
|
{
|
|
$uconfig->remove('sitetheme')
|
|
->remove('sitetheme_custompages')
|
|
->remove('sitetheme_deflayout');
|
|
}
|
|
|
|
$uconfig->save(true);
|
|
unset($ut);
|
|
}
|
|
|
|
|
|
}
|
|
elseif ($user->getPref('sitetheme'))
|
|
{
|
|
$user->getConfig()
|
|
->remove('sitetheme')
|
|
->remove('sitetheme_custompages')
|
|
->remove('sitetheme_deflayout')
|
|
->save(false);
|
|
}
|
|
|
|
|
|
|
|
|
|
$user_pref = $user->getPref();
|
|
}
|
|
|
|
define('USERCLASS_LIST', $user->getClassList(true));
|
|
define('e_CLASS_REGEXP', $user->getClassRegex());
|
|
define('e_NOBODY_REGEXP', '(^|,)'.e_UC_NOBODY.'(,|$)');
|
|
|
|
}
|
|
|
|
|
|
$sql->db_Mark_Time('Go online');
|
|
if(!isset($_E107['no_online']) && varset($pref['track_online']))
|
|
{
|
|
e107::getOnline()->goOnline($pref['track_online'], $pref['flood_protect']);
|
|
}
|
|
|
|
/**
|
|
* Set Cookie
|
|
* @param string $name
|
|
* @param string $value
|
|
* @param integer $expire seconds
|
|
* @param string $path
|
|
* @param string $domain
|
|
* @param boolean $secure
|
|
* @return void
|
|
*/
|
|
function cookie($name, $value, $expire=0, $path = e_HTTP, $domain = '', $secure = 0)
|
|
{
|
|
if(!e_SUBDOMAIN || (defined('MULTILANG_SUBDOMAIN') && MULTILANG_SUBDOMAIN === TRUE))
|
|
{
|
|
$domain = (e_DOMAIN != FALSE) ? ".".e_DOMAIN : "";
|
|
}
|
|
|
|
setcookie($name, $value, $expire, $path, $domain, $secure, true);
|
|
}
|
|
|
|
// generic function for retaining values across pages. ie. cookies or sessions.
|
|
function session_set($name, $value, $expire='', $path = e_HTTP, $domain = '', $secure = 0)
|
|
{
|
|
global $pref;
|
|
if ($pref['user_tracking'] == 'session')
|
|
{
|
|
$_SESSION[$name] = $value;
|
|
}
|
|
else
|
|
{
|
|
if(($domain == '' && !e_SUBDOMAIN) || (defined('MULTILANG_SUBDOMAIN') && MULTILANG_SUBDOMAIN === TRUE))
|
|
{
|
|
$domain = (e_DOMAIN != FALSE) ? ".".e_DOMAIN : "";
|
|
}
|
|
|
|
if(defined('e_MULTISITE_MATCH'))
|
|
{
|
|
$path = '/';
|
|
}
|
|
|
|
setcookie($name, $value, $expire, $path, $domain, $secure, true);
|
|
$_COOKIE[$name] = $value;
|
|
}
|
|
}
|
|
|
|
//------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------//
|
|
function message_handler($mode, $message, $line = 0, $file = '')
|
|
{
|
|
if(!defined('e_HANDLER'))
|
|
{
|
|
echo $message;
|
|
return;
|
|
}
|
|
|
|
|
|
|
|
e107_require_once(e_HANDLER.'message_handler.php');
|
|
show_emessage($mode, $message, $line, $file);
|
|
}
|
|
|
|
/*
|
|
// -----------------------------------------------------------------------------
|
|
function table_exists($check)
|
|
{
|
|
if (!$GLOBALS['mySQLtablelist'])
|
|
{
|
|
$tablist=mysql_list_tables($GLOBALS['mySQLdefaultdb']);
|
|
while (list($temp) = mysql_fetch_array($tablist))
|
|
{
|
|
$GLOBALS['mySQLtablelist'][] = $temp;
|
|
}
|
|
}
|
|
|
|
$mltable=MPREFIX.strtolower($check);
|
|
|
|
foreach ($GLOBALS['mySQLtablelist'] as $lang)
|
|
{
|
|
if (strpos($lang, $mltable) !== FALSE)
|
|
{
|
|
return TRUE;
|
|
}
|
|
}
|
|
}
|
|
*/
|
|
|
|
function class_list($uid = '')
|
|
{
|
|
$clist = array();
|
|
|
|
if (is_numeric($uid) || USER === true)
|
|
{
|
|
if (is_numeric($uid))
|
|
{
|
|
if($ud = e107::user($uid))
|
|
{
|
|
$admin_status = $ud['user_admin'];
|
|
$class_list = $ud['user_class'];
|
|
$admin_perms = $ud['user_perms'];
|
|
}
|
|
else
|
|
{
|
|
$admin_status = false;
|
|
$class_list = "";
|
|
$admin_perms = "";
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$admin_status = ADMIN;
|
|
$class_list = USERCLASS;
|
|
$admin_perms = ADMINPERMS;
|
|
}
|
|
|
|
if ($class_list)
|
|
{
|
|
$clist = explode(',', $class_list);
|
|
}
|
|
|
|
$clist[] = e_UC_MEMBER;
|
|
|
|
if ($admin_status == true)
|
|
{
|
|
$clist[] = e_UC_ADMIN;
|
|
}
|
|
|
|
if ($admin_perms === '0')
|
|
{
|
|
$clist[] = e_UC_MAINADMIN;
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$clist[] = e_UC_GUEST;
|
|
}
|
|
|
|
$clist[] = e_UC_READONLY;
|
|
$clist[] = e_UC_PUBLIC;
|
|
|
|
return implode(',', $clist);
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
|
|
|
|
/**
|
|
* @Deprecated by e107::lan();
|
|
* @param string $path
|
|
* @param boolean $force [optional] Please use the default
|
|
* @return void
|
|
*/
|
|
function include_lan($path, $force = false)
|
|
{
|
|
return e107::includeLan($path, $force);
|
|
}
|
|
|
|
/*
|
|
withdrawn - use loadLanFiles($path, 'admin') instead
|
|
// Searches a defined set of paths and file names to load language files used for admin (including install etc)
|
|
function include_lan_admin($path)
|
|
{
|
|
include_lan($path.'languages/'.e_LANGUAGE.'/lan_config.php');
|
|
include_lan($path.'languages/admin/'.e_LANGUAGE.'.php');
|
|
}
|
|
*/
|
|
|
|
|
|
// Routine looks in standard paths for language files associated with a plugin or theme - primarily for core routines, which won't know
|
|
// for sure where the author has put them.
|
|
// $unitName is the name (directory path) of the plugin or theme
|
|
// $type determines what is to be loaded:
|
|
// 'runtime' - the standard runtime language file for a plugin
|
|
// 'admin' - the standard admin language file for a plugin
|
|
// 'theme' - the standard language file for a plugin (these are usually pretty small, so one is enough)
|
|
// Otherwise, $type is treated as part of a filename within the plugin's language directory, prefixed with the current language
|
|
// Returns FALSE on failure (not found).
|
|
// Returns the include_once error return if there is one
|
|
// Otherwise returns an empty string.
|
|
|
|
// Note - if the code knows precisely where the language file is located, use include_lan()
|
|
|
|
// $pref['noLanguageSubs'] can be set TRUE to prevent searching for the English files if the files for the current site language don't exist.
|
|
//DEPRECATED - use e107::loadLanFiles();
|
|
/**
|
|
* @deprecated - use e107::loadLanFiles();
|
|
* @param $unitName
|
|
* @param string $type
|
|
* @return bool|string
|
|
*/
|
|
function loadLanFiles($unitName, $type='runtime')
|
|
{
|
|
$info = debug_backtrace(DEBUG_BACKTRACE_IGNORE_ARGS,2);
|
|
e107::getMessage()->addDebug("Using deprecated function loanLanFiles(). Replace with e107::loadLanFiles().".print_a($info,true));
|
|
return e107::loadLanFiles($unitName, $type);
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
* Check that all required user fields (including extended fields) are valid.
|
|
* @param array $currentUser - data for user
|
|
* @return boolean TRUE if update required
|
|
*/
|
|
function force_userupdate($currentUser)
|
|
{
|
|
if (e_PAGE == 'usersettings.php' || strpos(e_SELF, ADMINDIR) == TRUE || (defined('FORCE_USERUPDATE') && (FORCE_USERUPDATE == FALSE)))
|
|
{
|
|
return FALSE;
|
|
}
|
|
|
|
$signup_option_names = array('realname', 'signature', 'image', 'timezone', 'class');
|
|
|
|
foreach($signup_option_names as $key => $value)
|
|
{
|
|
if (e107::getPref('signup_option_'.$value, 0) == 2 && !$currentUser['user_'.$value])
|
|
{
|
|
return TRUE;
|
|
}
|
|
}
|
|
|
|
if (!e107::getPref('disable_emailcheck',TRUE) && !trim($currentUser['user_email'])) return TRUE;
|
|
|
|
if(e107::getDb()->select('user_extended_struct', 'user_extended_struct_applicable, user_extended_struct_write, user_extended_struct_name, user_extended_struct_type', 'user_extended_struct_required = 1 AND user_extended_struct_applicable != '.e_UC_NOBODY))
|
|
{
|
|
while($row = e107::getDb()->fetch())
|
|
{
|
|
if (!check_class($row['user_extended_struct_applicable'])) { continue; } // Must be applicable to this user class
|
|
if (!check_class($row['user_extended_struct_write'])) { continue; } // And user must be able to change it
|
|
$user_extended_struct_name = "user_{$row['user_extended_struct_name']}";
|
|
if (!isset($currentUser[$user_extended_struct_name]))
|
|
{
|
|
//e107::admin_log->e_log_event(4, __FILE__."|".__FUNCTION__."@".__LINE__, 'FORCE', 'Force User update', 'Trigger field: '.$user_extended_struct_name, FALSE, LOG_TO_ROLLING);
|
|
return TRUE;
|
|
}
|
|
if (($row['user_extended_struct_type'] == 7) && ($currentUser[$user_extended_struct_name] == '0000-00-00'))
|
|
{
|
|
//e107::admin_log->e_log_event(4, __FILE__."|".__FUNCTION__."@".__LINE__, 'FORCE', 'Force User update', 'Trigger field: '.$user_extended_struct_name, FALSE, LOG_TO_ROLLING);
|
|
return TRUE;
|
|
}
|
|
}
|
|
}
|
|
return FALSE;
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
* @package e107
|
|
*/
|
|
class error_handler
|
|
{
|
|
|
|
var $errors;
|
|
var $debug = false;
|
|
protected $xdebug = false;
|
|
protected $docroot = '';
|
|
protected $label = array();
|
|
|
|
function __construct()
|
|
{
|
|
$this->label = array(E_NOTICE => "Notice", E_WARNING => "Warning", E_DEPRECATED => "Deprecated", E_STRICT => "Strict");
|
|
$this->color = array(E_NOTICE=> 'info', E_WARNING=>'warning', E_DEPRECATED => 'danger', E_STRICT => 'primary');
|
|
$this->docroot = dirname(realpath(__FILE__)).DIRECTORY_SEPARATOR;
|
|
|
|
// This is initialized before the current debug level is known
|
|
if(function_exists('xdebug_get_function_stack'))
|
|
{
|
|
$this->xdebug = true;
|
|
}
|
|
|
|
//
|
|
global $_E107;
|
|
|
|
if(!empty($_E107['debug']))
|
|
{
|
|
$this->debug = true;
|
|
error_reporting(E_ALL);
|
|
return;
|
|
}
|
|
|
|
if(!empty($_E107['cli']))
|
|
{
|
|
error_reporting(E_ALL & ~E_STRICT & ~E_NOTICE);
|
|
return;
|
|
}
|
|
|
|
if ((isset($_SERVER['QUERY_STRING']) && strpos($_SERVER['QUERY_STRING'], 'debug=') !== false) || isset($_COOKIE['e107_debug_level']) && strpos($_SERVER['QUERY_STRING'], 'debug=-') === false )
|
|
{
|
|
$this->debug = true;
|
|
error_reporting(E_ALL);
|
|
}
|
|
else
|
|
{
|
|
error_reporting(E_ERROR | E_PARSE);
|
|
}
|
|
}
|
|
|
|
function handle_error($type, $message, $file, $line, $context) {
|
|
$startup_error = (!defined('E107_DEBUG_LEVEL')); // Error before debug system initialized
|
|
|
|
|
|
|
|
switch($type) {
|
|
case E_NOTICE:
|
|
case E_DEPRECATED:
|
|
// case E_STRICT:
|
|
|
|
if ($startup_error || E107_DBG_ALLERRORS || E107_DBG_ERRBACKTRACE)
|
|
{
|
|
|
|
|
|
$error['short'] = "<span class='label label-".$this->color[$type]."'>".$this->label[$type]."</span> {$message}, Line <mark>{$line}</mark> of {$file}<br />\n";
|
|
|
|
if($this->xdebug)
|
|
{
|
|
$backtrace = xdebug_get_function_stack();
|
|
}
|
|
else
|
|
{
|
|
$trace = debug_backtrace();
|
|
$backtrace[0] = (isset($trace[1]) ? $trace[1] : "");
|
|
$backtrace[1] = (isset($trace[2]) ? $trace[2] : "");
|
|
}
|
|
|
|
$error['trace'] = $backtrace;
|
|
$this->errors[] = $error;
|
|
}
|
|
break;
|
|
case E_WARNING:
|
|
if ($startup_error || E107_DBG_BASIC || E107_DBG_ERRBACKTRACE)
|
|
{
|
|
// $error['short'] = "Warning: {$message}, Line {$line} of {$file}<br />\n";
|
|
$error['short'] = "<span class='label label-".$this->color[$type]."'>".$this->label[$type]."</span> {$message}, Line <mark>{$line}</mark> of {$file}<br />\n";
|
|
|
|
if($this->xdebug)
|
|
{
|
|
$backtrace = xdebug_get_function_stack();
|
|
}
|
|
else
|
|
{
|
|
$trace = debug_backtrace();
|
|
$backtrace[0] = (isset($trace[1]) ? $trace[1] : "");
|
|
$backtrace[1] = (isset($trace[2]) ? $trace[2] : "");
|
|
}
|
|
|
|
$error['trace'] = $backtrace;
|
|
$this->errors[] = $error;
|
|
}
|
|
break;
|
|
case E_USER_ERROR:
|
|
if ($this->debug == true)
|
|
{
|
|
$error['short'] = " Internal Error Message: {$message}, Line <mark>{$line}</mark> of {$file}<br />\n";
|
|
$trace = debug_backtrace();
|
|
$backtrace[0] = (isset($trace[1]) ? $trace[1] : "");
|
|
$backtrace[1] = (isset($trace[2]) ? $trace[2] : "");
|
|
$error['trace'] = $backtrace;
|
|
$this->errors[] = $error;
|
|
}
|
|
default:
|
|
return true;
|
|
break;
|
|
}
|
|
}
|
|
|
|
|
|
|
|
function render_trace($array)
|
|
{
|
|
if($this->xdebug == false)
|
|
{
|
|
return print_a($array, true);
|
|
}
|
|
|
|
array_pop($array);
|
|
|
|
|
|
$text = "<table class='table table-bordered table-striped table-condensed'>
|
|
<tr class='danger'><th>#</th><th>Function</th><th>Location</th></tr>";
|
|
foreach($array as $key=>$val)
|
|
{
|
|
$text .= "
|
|
<tr>
|
|
<td>".$key."</td>
|
|
<td>";
|
|
$text .= !empty($val['class']) ? $val['class']."->" : '';
|
|
$text .= !empty($val['include_filename']) ? "include: ". str_replace($this->docroot,'', $val['include_filename']) : '';
|
|
$text .= !empty($val['function']) ? $val['function']."(" : "";
|
|
$text .= !empty($val['params']) ? print_r($val['params'],true) : '';
|
|
$text .= !empty($val['function']) ? ")" : "";
|
|
$text .="</td>
|
|
<td>";
|
|
$text .= str_replace($this->docroot,'', $val['file']).":".$val['line'];
|
|
$text .= "</td>
|
|
</tr>";
|
|
}
|
|
|
|
$text .= "</table>";
|
|
|
|
return $text;
|
|
|
|
}
|
|
|
|
function return_errors()
|
|
{
|
|
$index = 0; $colours[0] = "#C1C1C1"; $colours[1] = "#B6B6B6";
|
|
$ret = "";
|
|
|
|
// print_a($this->errors);
|
|
|
|
if (E107_DBG_ERRBACKTRACE)
|
|
{
|
|
|
|
|
|
|
|
foreach ($this->errors as $key => $value)
|
|
{
|
|
$ret .= "\t<tr>\n\t\t<td class='forumheader3' >{$value['short']}</td><td><input class='btn btn-info button e-expandit' data-target = 'bt_{$key}' type ='button' style='cursor: hand; cursor: pointer;' size='30' value='Back Trace' />\n";
|
|
$ret .= "</td>\n\t</tr>";
|
|
$ret .= "\t<tr>\n<td style='display: none;' colspan='2' id='bt_{$key}'>".$this->render_trace($value['trace'])."</td></tr>\n";
|
|
|
|
if($index == 0) { $index = 1; } else { $index = 0; }
|
|
}
|
|
|
|
}
|
|
else
|
|
{
|
|
foreach ($this->errors as $key => $value)
|
|
{
|
|
$ret .= "<tr class='forumheader3'><td>{$value['short']}</td></tr>\n";
|
|
}
|
|
}
|
|
|
|
return ($ret) ? "<table class='table table-condensed fborder'>\n".$ret."</table>" : FALSE;
|
|
}
|
|
|
|
function trigger_error($information, $level)
|
|
{
|
|
trigger_error($information);
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
* Manage Headers sent to browser.
|
|
* It is important to specify one of Expires or Cache-Control max-age, and one of Last-Modified or ETag, for all cacheable resources.
|
|
* It is redundant to specify both Expires and Cache-Control: max-age, or to specify both Last-Modified and ETag.
|
|
* Reference : http://css-tricks.com/snippets/php/intelligent-php-cache-control/
|
|
* XXX Etag cannot be relied on as some hosts have Etag disabled.
|
|
* XXX session_cache_limiter('private') will override some of the things below and bring back our browser cache issues.
|
|
*/
|
|
class e_http_header
|
|
{
|
|
private $content;
|
|
private $etag;
|
|
private $compress_output = false;
|
|
private $compression_level = 6;
|
|
private $compression_browser_support = false;
|
|
private $compression_server_support = false;
|
|
private $headers = array();
|
|
private $length = 0;
|
|
|
|
|
|
function __construct()
|
|
{
|
|
if (strstr(varset($_SERVER['HTTP_ACCEPT_ENCODING'], ''), 'gzip'))
|
|
{
|
|
$this->compression_browser_support = true;
|
|
}
|
|
|
|
if(ini_get("zlib.output_compression")=='' && function_exists("gzencode"))
|
|
{
|
|
$this->compression_server_support = true;
|
|
}
|
|
|
|
if($this->compression_server_support == true && $this->compression_browser_support == true)
|
|
{
|
|
$this->compress_output = (bool) varset(e107::getPref('compress_output'),false);
|
|
}
|
|
else
|
|
{
|
|
$this->compress_output = false;
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
function setContent($content,$search=null,$replace=null)
|
|
{
|
|
|
|
if($content == 'buffer')
|
|
{
|
|
$this->length = ob_get_length();
|
|
$this->content = ob_get_clean();
|
|
|
|
if(!empty($search) && !empty($replace))
|
|
{
|
|
$this->content = str_replace($search, $replace, $this->content);
|
|
$this->length = strlen($this->content);
|
|
}
|
|
|
|
}
|
|
else
|
|
{
|
|
$this->content = $content;
|
|
$this->length = strlen($content);
|
|
}
|
|
|
|
$this->etag = md5($this->content);
|
|
|
|
//print_a($this->length);
|
|
|
|
// return $this->content;
|
|
|
|
}
|
|
|
|
|
|
/**
|
|
* Return Content (with or without encoding)
|
|
* @return mixed
|
|
*/
|
|
function getOutput()
|
|
{
|
|
return $this->content;
|
|
}
|
|
|
|
function setHeader($header, $force=false, $response_code=null)
|
|
{
|
|
list($key,$val) = explode(':',$header,2);
|
|
$this->headers[$key] = $val;
|
|
header($header, $force, $response_code);
|
|
}
|
|
|
|
function debug() // needs to be disabled if PHP gzip is to work
|
|
{
|
|
if(!ADMIN)
|
|
{
|
|
return null;
|
|
}
|
|
|
|
|
|
$text = "<h3>Server Headers</h3>";
|
|
$server = getallheaders();
|
|
ksort($server);
|
|
$text .= print_a($server,true);
|
|
$text .= "<h3>e107 Headers</h3>";
|
|
ksort($this->headers);
|
|
$text .= print_a($this->headers,true);
|
|
$text .= "<h4>Compress Output</h4>";
|
|
$text .= print_a($this->compress_output,true);
|
|
|
|
$server = array();
|
|
foreach($_SERVER as $k=>$v)
|
|
{
|
|
if(substr($k,0,4) == 'HTTP')
|
|
{
|
|
$server[$k] = $v;
|
|
}
|
|
}
|
|
|
|
$text .= "<h3>_SERVER</h3>";
|
|
$text .= "<h4>zlib.output_compression</h4>";
|
|
$text .= print_a(ini_get("zlib.output_compression"),true);
|
|
|
|
|
|
$text .=print_a($server,true);
|
|
|
|
if($this->compress_output === true)
|
|
{
|
|
|
|
$text = gzencode($text, $this->compression_level);
|
|
}
|
|
|
|
echo $text;
|
|
|
|
}
|
|
|
|
private function unsetHeader($header)
|
|
{
|
|
header_remove($header);
|
|
}
|
|
|
|
|
|
|
|
|
|
function send()
|
|
{
|
|
// Disable caching of html.
|
|
/*
|
|
$this->setHeader("Expires: 0", true);
|
|
$this->setHeader("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT", true);
|
|
$this->setHeader("Cache-Control: no-store, no-cache, must-revalidate", true);
|
|
$this->setHeader("Cache-Control: post-check=0, pre-check=0", false);
|
|
$this->setHeader("Pragma: no-cache");
|
|
$this->setHeader("Cache-Control: max-age=0", false);
|
|
*/
|
|
// $this->setHeader("Cache-Control: public", true);
|
|
|
|
/*
|
|
if(defined('e_HTTP_STATIC'))
|
|
{
|
|
unset($_COOKIE);
|
|
|
|
$siteurl = str_replace('https','http',SITEURL);
|
|
$static = str_replace('https','http', e_HTTP_STATIC);
|
|
|
|
if($siteurl === $static && deftrue('e_SUBDOMAIN'))
|
|
{
|
|
$accessControl = str_replace(e_SUBDOMAIN.'.', '', SITEURLBASE);
|
|
|
|
$this->unsetHeader("Cache-Control");
|
|
// $this->unsetHeader("Content-Type");
|
|
$this->unsetHeader("Set-Cookie");
|
|
$this->unsetHeader("Pragma");
|
|
$this->unsetHeader("Expires");
|
|
|
|
$this->setHeader("Access-Control-Allow-Origin: ".$accessControl, true);
|
|
$this->setHeader("Cache-Control: public", true);
|
|
}
|
|
else
|
|
{
|
|
$this->setHeader("Access-Control-Allow-Origin: ".$static, true);
|
|
}
|
|
}
|
|
*/
|
|
|
|
|
|
$canCache = e107::canCache();
|
|
|
|
// $this->setHeader("Cache-Control: must-revalidate", true);
|
|
|
|
if($canCache && !deftrue('e_NOCACHE') && $_SERVER['REQUEST_METHOD'] === 'GET' && $_SERVER['QUERY_STRING'] != 'logout')
|
|
{
|
|
// header("Cache-Control: must-revalidate", true);
|
|
if(e107::getPref('site_page_expires')) // TODO - allow per page
|
|
{
|
|
if (function_exists('date_default_timezone_set'))
|
|
{
|
|
date_default_timezone_set('UTC');
|
|
}
|
|
$time = time()+ (integer) e107::getPref('site_page_expires');
|
|
$this->setHeader('Expires: '.gmdate("D, d M Y H:i:s", $time).' GMT', true);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$canCache = false;
|
|
}
|
|
|
|
|
|
if($this->compress_output !== false)
|
|
{
|
|
$this->setHeader('ETag: "'.$this->etag.'-gzip"', true);
|
|
$this->content = gzencode($this->content, $this->compression_level);
|
|
$this->length = strlen($this->content);
|
|
$this->setHeader('Content-Encoding: gzip', true);
|
|
$this->setHeader("Content-Length: ".$this->length, true);
|
|
}
|
|
else
|
|
{
|
|
|
|
$this->setHeader('ETag: "'.$this->etag.'"', true);
|
|
$this->setHeader("Content-Length: ".$this->length, true);
|
|
}
|
|
|
|
if(defset('X-POWERED-BY') !== false)
|
|
{
|
|
$this->setHeader("X-Powered-By: e107", true); // no less secure than e107-specific html.
|
|
}
|
|
|
|
if($this->compression_server_support == true)
|
|
{
|
|
$this->setHeader('Vary: Accept-Encoding');
|
|
}
|
|
else
|
|
{
|
|
$this->setHeader('Vary: Accept');
|
|
}
|
|
|
|
|
|
|
|
// should come after the Etag header
|
|
if ($canCache && isset($_SERVER['HTTP_IF_NONE_MATCH']))
|
|
{
|
|
$IF_NONE_MATCH = str_replace('"','',$_SERVER['HTTP_IF_NONE_MATCH']);
|
|
if($IF_NONE_MATCH == $this->etag || ($IF_NONE_MATCH == ($this->etag."-gzip")))
|
|
{
|
|
$this->setHeader('HTTP/1.1 304 Not Modified');
|
|
exit();
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
$sql->db_Mark_Time('(After class2)');
|
|
|
|
|
|
function e107_ini_set($var, $value)
|
|
{
|
|
if (function_exists('ini_set'))
|
|
{
|
|
return ini_set($var, $value);
|
|
}
|
|
return FALSE;
|
|
}
|
|
|
|
// Return true if specified plugin installed, false if not
|
|
//DEPRECATED
|
|
|
|
/**
|
|
* @deprecated - use e107::isInstalled();
|
|
* @param $plugname
|
|
* @return bool
|
|
*/
|
|
function plugInstalled($plugname)
|
|
{
|
|
return e107::isInstalled($plugname);
|
|
/*global $pref;
|
|
// Could add more checks here later if appropriate
|
|
return isset($pref['plug_installed'][$plugname]);*/
|
|
}
|
|
|