WB 2.11.0

<?php

/**

 *

 * @category        framework

 * @package         initialize

 * @author          WebsiteBaker Project

 * @copyright       Ryan Djurovich

 * @copyright       WebsiteBaker Org. e.V.

 * @link            http://websitebaker.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.3

 * @requirements    PHP 5.3.6 and higher

 * @version         $Id: initialize.php 2 2017-07-02 15:14:29Z Manuela $

 * @filesource      $HeadURL: svn://isteam.dynxs.de/wb/2.10.x/trunk/framework/initialize.php $

 * @lastmodified    $Date: 2017-07-02 17:14:29 +0200 (Sun, 02 Jul 2017) $

 *

 */

error_reporting( -1 );

$sStarttime = array_sum(explode(" ", microtime()));

$aPhpFunctions = get_defined_functions();

/**

 * sanitize $_SERVER['HTTP_REFERER']

 * @param string $sWbUrl qualified startup URL of current application

 */

function SanitizeHttpReferer($sWbUrl = WB_URL) {

    $sTmpReferer = '';

    if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER'] != '') {

        define('ORG_REFERER', ($_SERVER['HTTP_REFERER'] ?: ''));

        $aRefUrl = parse_url($_SERVER['HTTP_REFERER']);

        if ($aRefUrl !== false) {

            $aRefUrl['host'] = isset($aRefUrl['host']) ? $aRefUrl['host'] : '';

            $aRefUrl['path'] = isset($aRefUrl['path']) ? $aRefUrl['path'] : '';

            $aRefUrl['fragment'] = isset($aRefUrl['fragment']) ? '#'.$aRefUrl['fragment'] : '';

            $aWbUrl = parse_url(WB_URL);

            if ($aWbUrl !== false) {

                $aWbUrl['host'] = isset($aWbUrl['host']) ? $aWbUrl['host'] : '';

                $aWbUrl['path'] = isset($aWbUrl['path']) ? $aWbUrl['path'] : '';

                if (strpos($aRefUrl['host'].$aRefUrl['path'], $aWbUrl['host'].$aWbUrl['path']) !== false) {

                    $aRefUrl['path'] = preg_replace('#^'.$aWbUrl['path'].'#i', '', $aRefUrl['path']);

                    $sTmpReferer = WB_URL.$aRefUrl['path'].$aRefUrl['fragment'];

                }

                unset($aWbUrl);

            }

            unset($aRefUrl);

        }

    }

    $_SERVER['HTTP_REFERER'] = $sTmpReferer;

}

/**

 * makePhExp

 * @param array list of names for placeholders

 * @return array reformatted list

 * @description makes an RegEx-Expression for preg_replace() of each item in $aList

 *              Example: from 'TEST_NAME' it mades '/\[TEST_NAME\]/s'

 */

function makePhExp($sList)

{

    $aList = func_get_args();

//    return preg_replace('/^(.*)$/', '/\[$1\]/s', $aList);

    return preg_replace('/^(.*)$/', '[$1]', $aList);

}

/* ***************************************************************************************

 * Start initialization                                                                  *

 ****************************************************************************************/// aktivate exceptionhandler ---

//    throw new Exception('PHP-'.PHP_VERSION.' found, but at last PHP-5.3.6 required !!');

// Stop execution if PHP version is too old

// PHP less then 5.6.0 is prohibited ---

if (version_compare(PHP_VERSION, '5.6.0', '<')) {

    $sMsg = '<p style="color: #ff0000;">WebsiteBaker is not able to run with PHP-Version less then 5.6.0!!<br />'

          . 'Please change your PHP-Version to any kind from 5.6.0 and up!<br />'

          . 'If you have problems to solve that, ask your hosting provider for it.<br  />'

          . 'The very best solution is the use of PHP-7.0 and up</p>';

    die($sMsg);

}

/* -------------------------------------------------------- */

if ( !defined('WB_PATH')) { define('WB_PATH', dirname(__DIR__)); }

// *** initialize Exception handling

if(!function_exists('globalExceptionHandler')) {

    include(__DIR__.'/globalExceptionHandler.php');

}

// *** initialize Error handling

$sErrorLogFile = dirname(__DIR__).'/var/logs/php_error.log.php';

$sErrorLogPath = dirname($sErrorLogFile);

if (!file_exists($sErrorLogFile)) {

    $sTmp = '<?php die(\'illegal file access\'); ?>'

          . 'created: ['.date('c').']'.PHP_EOL;

    if (false === file_put_contents($sErrorLogFile, $sTmp, FILE_APPEND)) {

        throw new Exception('unable to create logfile \'/var/logs/php_error.log.php\'');

    }

}

if (!is_writeable($sErrorLogFile)) {

    throw new Exception('not writeable logfile \'/var/logs/php_error.log.php\'');

}

ini_set('log_errors', 1);

ini_set ('error_log', $sErrorLogFile);

/**

 * Read DB settings from configuration file

 * @return array

 * @throws RuntimeException

 *

 */

function initReadSetupFile()

{

// check for valid file request. Becomes more stronger in next version

//    initCheckValidCaller(array('save.php','index.php','config.php','upgrade-script.php'));

    $aCfg = array();

    $sSetupFile = dirname(dirname(__FILE__)).'/setup.ini.php';

    if(is_readable($sSetupFile) && !defined('WB_URL')) {

        $aCfg = parse_ini_file($sSetupFile, true);

        if (!isset($aCfg['Constants']) || !isset($aCfg['DataBase'])) {

            throw new InvalidArgumentException('configuration missmatch in setup.ini.php');

        }

        foreach($aCfg['Constants'] as $key=>$value) {

            switch($key):

                case 'DEBUG':

                    $value = filter_var($value, FILTER_VALIDATE_BOOLEAN);

                    if(!defined('DEBUG')) { define('DEBUG', $value); }

                    break;

                case 'WB_URL': // << case is set deprecated

                case 'AppUrl':

                    $value = trim(str_replace('\\', '/', $value), '/');

                    if(!defined('WB_URL')) { define('WB_URL', $value); }

                    break;

                case 'ADMIN_DIRECTORY': // << case is set deprecated

                case 'AcpDir':

                    $value = trim(str_replace('\\', '/', $value), '/');

                    if(!defined('ADMIN_DIRECTORY')) { define('ADMIN_DIRECTORY', $value); }

                    break;

                default:

                    if(!defined($key)) { define($key, $value); }

                    break;

            endswitch;

        }

    }

    return $aCfg;

//      throw new RuntimeException('unable to read setup.ini.php');

}

/**

 * Set constants for system/install values

 * @throws RuntimeException

 */

function initSetInstallWbConstants($aCfg) {

    if (sizeof($aCfg)) {

        foreach($aCfg['Constants'] as $key=>$value) {

            switch($key):

                case 'DEBUG':

                    $value = filter_var($value, FILTER_VALIDATE_BOOLEAN);

                    if(!defined('DEBUG')) { define('DEBUG', $value); }

                    break;

                case 'WB_URL': // << case is set deprecated

                case 'AppUrl':

                    $value = trim(str_replace('\\', '/', $value), '/');

                    if(!defined('WB_URL')) { define('WB_URL', $value); }

                    break;

                case 'ADMIN_DIRECTORY': // << case is set deprecated

                case 'AcpDir':

                    $value = trim(str_replace('\\', '/', $value), '/');

                    if(!defined('ADMIN_DIRECTORY')) { define('ADMIN_DIRECTORY', $value); }

                    if(!preg_match('/xx[a-z0-9_][a-z0-9_\-\.]+/i', 'xx'.ADMIN_DIRECTORY)) {

                        throw new RuntimeException('Invalid admin-directory: ' . ADMIN_DIRECTORY);

                    }

                    break;

                default:

                    if(!defined($key)) { define($key, $value); }

                    break;

            endswitch;

        }

    }

    if(!defined('WB_PATH')){ define('WB_PATH', dirname(__DIR__)); }

    if(!defined('ADMIN_URL')){ define('ADMIN_URL', rtrim(WB_URL, '/\\').'/'.ADMIN_DIRECTORY); }

    if(!defined('ADMIN_PATH')){ define('ADMIN_PATH', WB_PATH.'/'.ADMIN_DIRECTORY); }

    if(!defined('WB_REL')){

        $x1 = parse_url(WB_URL);

        define('WB_REL', (isset($x1['path']) ? $x1['path'] : ''));

    }

    if(!defined('ADMIN_REL')){ define('ADMIN_REL', WB_REL.'/'.ADMIN_DIRECTORY); }

    if(!defined('DOCUMENT_ROOT')) {

        define('DOCUMENT_ROOT', preg_replace('/'.preg_quote(str_replace('\\', '/', WB_REL), '/').'$/', '', str_replace('\\', '/', WB_PATH)));

        $_SERVER['DOCUMENT_ROOT'] = DOCUMENT_ROOT;

    }

    if(!defined('TMP_PATH')){ define('TMP_PATH', WB_PATH.'/temp'); }

    if (defined('DB_TYPE'))

    {

    // import constants for compatibility reasons

        $db = array();

        if (defined('DB_TYPE'))      { $db['type']         = DB_TYPE; }

        if (defined('DB_USERNAME'))  { $db['user']         = DB_USERNAME; }

        if (defined('DB_PASSWORD'))  { $db['pass']         = DB_PASSWORD; }

        if (defined('DB_HOST'))      { $db['host']         = DB_HOST; }

        if (defined('DB_PORT'))      { $db['port']         = DB_PORT; }

        if (defined('DB_NAME'))      { $db['name']         = DB_NAME; }

        if (defined('DB_CHARSET'))   { $db['charset']      = DB_CHARSET; }

        if (defined('TABLE_PREFIX')) { $db['table_prefix'] = TABLE_PREFIX; }

    } else {

        foreach($aCfg['DataBase'] as $key=>$value) {

            switch($key):

                case 'type':

                    if(!defined('DB_TYPE')) { define('DB_TYPE', $value); }

                    break;

                case 'user':

                    if(!defined('DB_USERNAME')) { define('DB_USERNAME', $value); }

                    break;

                case 'pass':

                    if(!defined('DB_PASSWORD')) { define('DB_PASSWORD', $value); }

                    break;

                case 'host':

                    if(!defined('DB_HOST')) { define('DB_HOST', $value); }

                    break;

                case 'port':

                    if(!defined('DB_PORT')) { define('DB_PORT', $value); }

                    break;

                case 'name':

                    if(!defined('DB_NAME')) { define('DB_NAME', $value); }

                    break;

                case 'charset':

                    if(!defined('DB_CHARSET')) { define('DB_CHARSET', $value); }

                    break;

                default:

                    $key = strtoupper($key);

                    if(!defined($key)) { define($key, $value); }

                    break;

            endswitch;

        }

    }

}

/**

 * WbErrorHandler()

 *

 * @param mixed $iErrorCode

 * @param mixed $sErrorText

 * @param mixed $sErrorFile

 * @param mixed $iErrorLine

 * @return

 */

function WbErrorHandler($iErrorCode, $sErrorText, $sErrorFile, $iErrorLine)

{

     if (!(error_reporting() & $iErrorCode) || ini_get('log_errors') == 0) {

        return false;

    }

    $bRetval = false;

    $sErrorLogFile = ini_get ('error_log');

    if (!is_writeable($sErrorLogFile)){return false;}

    $sErrorType = E_NOTICE ;

    $aErrors = array(

        E_USER_DEPRECATED   => 'E_USER_DEPRECATED',

        E_USER_NOTICE       => 'E_USER_NOTICE',

        E_USER_WARNING      => 'E_USER_WARNING',

        E_DEPRECATED        => 'E_DEPRECATED',

        E_NOTICE            => 'E_NOTICE',

        E_WARNING           => 'E_WARNING',

        E_CORE_WARNING      => 'E_CORE_WARNING',

        E_COMPILE_WARNING   => 'E_COMPILE_WARNING',

        E_STRICT            => 'E_STRICT',

        E_RECOVERABLE_ERROR => 'E_RECOVERABLE_ERROR',

    );

    if (array_key_exists($iErrorCode, $aErrors)) {

        $sErrorType = $aErrors[$iErrorCode];

        $bRetval = true;

    }

    $aBt= debug_backtrace(DEBUG_BACKTRACE_IGNORE_ARGS);

    $x = sizeof($aBt) -1;

    $x = $x < 0 ? 0 : ($x <= 2 ? $x : 2);

    $sEntry = date('c').' '.'['.$sErrorType.'] '.str_replace(dirname(__DIR__), '', $sErrorFile).':['.$iErrorLine.'] '

            . ' from '.str_replace(dirname(__DIR__), '', $aBt[$x]['file']).':['.$aBt[$x]['line'].'] '

            . (@$aBt[$x]['class'] ? $aBt[$x]['class'].$aBt[$x]['type'] : '').$aBt[$x]['function'].' '

            . '"'.$sErrorText.'"'.PHP_EOL;

    file_put_contents($sErrorLogFile, $sEntry, FILE_APPEND);

    return $bRetval;

}

/* ***************************************************************************************

 * Start initialization                                                                  *

 ****************************************************************************************/

// activate errorhandler

    set_error_handler('WbErrorHandler', -1 );

    if (! defined('SYSTEM_RUN')) { define('SYSTEM_RUN', true); }

// load configuration ---

    $aCfg = initReadSetupFile();

    initSetInstallWbConstants($aCfg);

// ---------------------------

// get Database connection data from configuration

if (!defined('ADMIN_DIRECTORY')) { define('ADMIN_DIRECTORY', 'admin'); }

if (!preg_match('/xx[a-z0-9_][a-z0-9_\-\.]+/i', 'xx'.ADMIN_DIRECTORY)) {

    throw new RuntimeException('Invalid admin-directory: ' . ADMIN_DIRECTORY);

}

if ( !defined('ADMIN_URL')) { define('ADMIN_URL', WB_URL.'/'.ADMIN_DIRECTORY); }

if ( !defined('ADMIN_PATH')) { define('ADMIN_PATH', WB_PATH.'/'.ADMIN_DIRECTORY); }

if ( !defined('WB_REL')){

    $x1 = parse_url(WB_URL);

    define('WB_REL', (isset($x1['path']) ? $x1['path'] : ''));

}

if ( !defined('DOCUMENT_ROOT')) {

    define('DOCUMENT_ROOT', preg_replace('/'.preg_quote(str_replace('\\', '/', WB_REL), '/').'$/', '', str_replace('\\', '/', WB_PATH)));

    $_SERVER['DOCUMENT_ROOT'] = DOCUMENT_ROOT;

}

if (file_exists(WB_PATH.'/framework/class.database.php')) {

    // sanitize $_SERVER['HTTP_REFERER']

    SanitizeHttpReferer(WB_URL);

    date_default_timezone_set('UTC');

    // register TWIG autoloader ---

    $sTmp = dirname(dirname(__FILE__)).'/include/Sensio/Twig/lib/Twig/Autoloader.php';

    if (!class_exists('Twig_Autoloader') && is_readable($sTmp)){

        include $sTmp;

        Twig_Autoloader::register();

    }

// register PHPMailer autoloader ---

    $sTmp = dirname(dirname(__FILE__)).'/include/phpmailer/PHPMailerAutoload.php';

    if (!function_exists('PHPMailerAutoload') && is_readable($sTmp)) {

        require($sTmp);

    }

    if (!class_exists('database', false)){

      // load database class

      require(__DIR__.'/class.database.php');

      // Create database class

      $database = new database();

      $database->sTablePrefix = TABLE_PREFIX;

    }

    // activate frontend OutputFilterApi (initialize.php)

    if (is_readable(WB_PATH .'/modules/output_filter/OutputFilterApi.php')) {

        if (!function_exists('OutputFilterApi')) {

            include WB_PATH .'/modules/output_filter/OutputFilterApi.php';

        }

    } else {

        throw new RuntimeException('missing mandatory global OutputFilterApi!');

    }

    if (version_compare(PHP_VERSION, '5.4.0', '<')) {

        @ini_set("magic_quotes_runtime", 0); // Disable magic_quotes_runtime

        @ini_set("magic_quotes_gpc", 0); // Disable magic_quotes_gpc

    }

    if (get_magic_quotes_gpc()) {

        $unescape = function(&$value, $key) {

            $value = stripslashes($value);

        };

        array_walk_recursive($_POST, $unescape);

        array_walk_recursive($_GET,  $unescape);

        array_walk_recursive($_REQUEST, $unescape);

        array_walk_recursive($_COOKIE, $unescape);

    }

    // Get website settings (title, keywords, description, header, and footer)

    $sql = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'settings`';

    if (($get_settings = $database->query($sql))) {

        $x = 0;

        while ($setting = $get_settings->fetchRow(MYSQLI_ASSOC)) {

            $setting_name  = strtoupper($setting['name']);

            $setting_value = $setting['value'];

            if ($setting_value == 'false') {

                $setting_value = false;

            }

            if ($setting_value == 'true') {

                $setting_value = true;

            }

            @define($setting_name, $setting_value);

            $x++;

        }

    } else {

        die($database->get_error());

    }

    if (!$x) {

        throw new RuntimeException('no settings found');

    }

    @define('DO_NOT_TRACK', (isset($_SERVER['HTTP_DNT'])));

    ini_set('display_errors', ((defined('DEBUG')&& (DEBUG==true)) ?'1':'0'));

    if (!defined('DEBUG')){ define('DEBUG', false); }

    $string_file_mode = defined('STRING_FILE_MODE')?STRING_FILE_MODE:'0644';

    @define('OCTAL_FILE_MODE',(int) octdec($string_file_mode));

    $string_dir_mode = defined('STRING_DIR_MODE')?STRING_DIR_MODE:'0755';

    @define('OCTAL_DIR_MODE',(int) octdec($string_dir_mode));

//    $sSecMod = (defined('SECURE_FORM_MODULE') && SECURE_FORM_MODULE != '') ? '.'.SECURE_FORM_MODULE : '';

//    $sSecMod = WB_PATH.'/framework/SecureForm'.$sSecMod.'.php';

//    require_once($sSecMod);

    if (!defined("WB_INSTALL_PROCESS")) {

    // get CAPTCHA and ASP settings

        $sql = 'SELECT * FROM `'.TABLE_PREFIX.'mod_captcha_control`';

        if (($get_settings = $database->query($sql)) &&

            ($setting = $get_settings->fetchRow(MYSQLI_ASSOC))

        ) {

            @define('ENABLED_CAPTCHA', (($setting['enabled_captcha'] == '1') ? true : false));

            @define('ENABLED_ASP', (($setting['enabled_asp'] == '1') ? true : false));

            @define('CAPTCHA_TYPE', $setting['captcha_type']);

            @define('ASP_SESSION_MIN_AGE', (int)$setting['asp_session_min_age']);

            @define('ASP_VIEW_MIN_AGE', (int)$setting['asp_view_min_age']);

            @define('ASP_INPUT_MIN_AGE', (int)$setting['asp_input_min_age']);

        } else {

            throw new RuntimeException('CAPTCHA-Settings not found');

        }

    }

    // Start a session

    if (!defined('SESSION_STARTED')) {

        session_name(APP_NAME.'-sid');

        @session_start();

        define('SESSION_STARTED', true);

    }

    if (defined('ENABLED_ASP') && ENABLED_ASP && !isset($_SESSION['session_started'])) {

        $_SESSION['session_started'] = time();

    }

    // Get users language

    if (

        isset($_GET['lang']) AND

        $_GET['lang'] != '' AND

        !is_numeric($_GET['lang']) AND

        strlen($_GET['lang']) == 2

    ) {

        define('LANGUAGE', strtoupper($_GET['lang']));

        $_SESSION['LANGUAGE']=LANGUAGE;

    } else {

        if (isset($_SESSION['LANGUAGE']) AND $_SESSION['LANGUAGE'] != '') {

            define('LANGUAGE', $_SESSION['LANGUAGE']);

        } else {

            define('LANGUAGE', DEFAULT_LANGUAGE);

        }

    }

    $sCachePath = dirname(__DIR__).'/temp/cache/';

    if (!file_exists($sCachePath)) {

        if (!mkdir($sCachePath)) { $sCachePath = dirname(__DIR__).'/temp/'; }

    }

    // Load Language file(s)

    $sCurrLanguage = '';

    $slangFile = WB_PATH.'/languages/EN.php';

    if (is_readable($slangFile)) {

        require $slangFile;

        $sCurrLanguage ='EN';

    }

    if ($sCurrLanguage != DEFAULT_LANGUAGE) {

        $slangFile = WB_PATH.'/languages/'.DEFAULT_LANGUAGE.'.php';

        if (is_readable($slangFile)) {

            require $slangFile;

            $sCurrLanguage = DEFAULT_LANGUAGE;

        }

    }

    if ($sCurrLanguage != LANGUAGE) {

        $slangFile = WB_PATH.'/languages/'.LANGUAGE.'.php';

        if (is_readable($slangFile)) {

            require $slangFile;

        }

    }

    if (!class_exists('Translate', false)) {

        include __DIR__.'/Translate.php';

    }

    $oTrans = Translate::getInstance();

    $oTrans->initialize(array('EN', DEFAULT_LANGUAGE, LANGUAGE), $sCachePath); // 'none'

    // Get users timezone

    if (isset($_SESSION['TIMEZONE'])) {

        define('TIMEZONE', $_SESSION['TIMEZONE']);

    } else {

        define('TIMEZONE', DEFAULT_TIMEZONE);

    }

    // Get users date format

    if (isset($_SESSION['DATE_FORMAT'])) {

        define('DATE_FORMAT', $_SESSION['DATE_FORMAT']);

    } else {

        define('DATE_FORMAT', DEFAULT_DATE_FORMAT);

    }

    // Get users time format

    if (isset($_SESSION['TIME_FORMAT'])) {

        define('TIME_FORMAT', $_SESSION['TIME_FORMAT']);

    } else {

        define('TIME_FORMAT', DEFAULT_TIME_FORMAT);

    }

    // Set Theme dir

    define('THEME_URL', WB_URL.'/templates/'.DEFAULT_THEME);

    define('THEME_PATH', WB_PATH.'/templates/'.DEFAULT_THEME);

    // extended wb_settings

    define('EDIT_ONE_SECTION', false);

    define('EDITOR_WIDTH', 0);

}

function newAdmin($section_name= '##skip##', $section_permission = 'start', $auto_header = true, $auto_auth = true)

{

    if (isset($GLOBALS['admin']) && $GLOBALS['admin'] instanceof admin) {

        unset($GLOBALS['admin']);

        usleep(10000);

    }

    return new admin($section_name, $section_permission, $auto_header, $auto_auth);

}