Project

General

Profile

1 1352 Luisehahne
<?php
2
/**
3
 *
4
 * @category        frontend
5
 * @package         framework
6
 * @author          WebsiteBaker Project
7
 * @copyright       2004-2009, Ryan Djurovich
8
 * @copyright       2009-2011, Website Baker Org. e.V.
9
 * @link			http://www.websitebaker2.org/
10
 * @license         http://www.gnu.org/licenses/gpl.html
11
 * @platform        WebsiteBaker 2.8.x
12 1374 Luisehahne
 * @requirements    PHP 5.2.2 and higher
13 1352 Luisehahne
 * @version         $Id$
14
 * @filesource		$HeadURL$
15
 * @lastmodified    $Date$
16
 *
17
*/
18 1496 DarkViper
/* -------------------------------------------------------- */
19
// Must include code to stop this file being accessed directly
20 1499 DarkViper
if(!defined('WB_PATH')) {
21
	require_once(dirname(__FILE__).'/globalExceptionHandler.php');
22
	throw new IllegalFileException();
23
}
24 1496 DarkViper
/* -------------------------------------------------------- */
25 1352 Luisehahne
// Define that this file has been loaded
26
define('FUNCTIONS_FILE_LOADED', true);
27
28 1365 Luisehahne
/**
29
 * @description: recursively delete a non empty directory
30
 * @param string $directory :
31
 * @param bool $empty : true if you want the folder just emptied, but not deleted
32
 *                      false, or just simply leave it out, the given directory will be deleted, as well
33
 * @return boolean: list of ro-dirs
34
 * @from http://www.php.net/manual/de/function.rmdir.php#98499
35
 */
36
function rm_full_dir($directory, $empty = false) {
37 1495 DarkViper
38
	if(substr($directory,-1) == "/") {
39 1365 Luisehahne
        $directory = substr($directory,0,-1);
40
    }
41 1352 Luisehahne
    // If suplied dirname is a file then unlink it
42 1495 DarkViper
    if (is_file( $directory )) {
43 1352 Luisehahne
        return unlink($directory);
44
    }
45 1495 DarkViper
    if(!file_exists($directory) || !is_dir($directory)) {
46 1365 Luisehahne
        return false;
47 1495 DarkViper
    } elseif(!is_readable($directory)) {
48 1365 Luisehahne
        return false;
49
    } else {
50
        $directoryHandle = opendir($directory);
51
        while ($contents = readdir($directoryHandle))
52
		{
53
            if($contents != '.' && $contents != '..')
54 1352 Luisehahne
			{
55 1365 Luisehahne
                $path = $directory . "/" . $contents;
56 1495 DarkViper
                if(is_dir($path)) {
57 1365 Luisehahne
                    rm_full_dir($path);
58
                } else {
59
                    unlink($path);
60
                }
61 1352 Luisehahne
            }
62 1365 Luisehahne
        }
63
        closedir($directoryHandle);
64 1495 DarkViper
        if($empty == false) {
65
            if(!rmdir($directory)) {
66 1365 Luisehahne
                return false;
67 1352 Luisehahne
            }
68
        }
69 1365 Luisehahne
        return true;
70
    }
71 1352 Luisehahne
}
72
73
/*
74
 * returns a recursive list of all subdirectories from a given directory
75
 * @access  public
76
 * @param   string  $directory: from this dir the recursion will start
77
 * @param   bool    $show_hidden:  if set to TRUE also hidden dirs (.dir) will be shown
78
 * @return  array
79
 * example:
80
 *  /srv/www/httpdocs/wb/media/a/b/c/
81
 *  /srv/www/httpdocs/wb/media/a/b/d/
82
 * directory_list('/srv/www/httpdocs/wb/media/') will return:
83
 *  /a
84
 *  /a/b
85
 *  /a/b/c
86
 *  /a/b/d
87
 */
88
 function directory_list($directory, $show_hidden = false)
89
{
90
	$result_list = array();
91
	if (is_dir($directory))
92
    {
93
    	$dir = dir($directory); // Open the directory
94
    	while (false !== $entry = $dir->read()) // loop through the directory
95
		{
96
			if($entry == '.' || $entry == '..') { continue; } // Skip pointers
97
			if($entry[0] == '.' && $show_hidden == false) { continue; } // Skip hidden files
98 1495 DarkViper
    		if (is_dir("$directory/$entry")) { // Add dir and contents to list
99 1352 Luisehahne
    			$result_list = array_merge($result_list, directory_list("$directory/$entry"));
100
    			$result_list[] = "$directory/$entry";
101
    		}
102
    	}
103
        $dir->close();
104
    }
105 1365 Luisehahne
	// sorting
106 1495 DarkViper
	if(natcasesort($result_list)) {
107 1365 Luisehahne
		// new indexing
108
		$result_list = array_merge($result_list);
109
	}
110 1352 Luisehahne
	return $result_list; // Now return the list
111
}
112
113
// Function to open a directory and add to a dir list
114
function chmod_directory_contents($directory, $file_mode)
115
{
116
	if (is_dir($directory))
117
    {
118
    	// Set the umask to 0
119
    	$umask = umask(0);
120
    	// Open the directory then loop through its contents
121
    	$dir = dir($directory);
122
    	while (false !== $entry = $dir->read())
123
		{
124
    		// Skip pointers
125
    		if($entry[0] == '.') { continue; }
126
    		// Chmod the sub-dirs contents
127 1495 DarkViper
    		if(is_dir("$directory/$entry")) {
128 1352 Luisehahne
    			chmod_directory_contents($directory.'/'.$entry, $file_mode);
129
    		}
130
    		change_mode($directory.'/'.$entry);
131
    	}
132
        $dir->close();
133
    	// Restore the umask
134
    	umask($umask);
135
    }
136
}
137
138 1365 Luisehahne
/**
139
* Scan a given directory for dirs and files.
140
*
141
* usage: scan_current_dir ($root = '' )
142
*
143
* @param     $root   set a absolute rootpath as string. if root is empty the current path will be scan
144
* @param     $search set a search pattern for files, empty search brings all files
145
* @access    public
146
* @return    array    returns a natsort array with keys 'path' and 'filename'
147
*
148
*/
149
if(!function_exists('scan_current_dir'))
150
{
151
	function scan_current_dir($root = '', $search = '/.*/')
152
	{
153
	    $FILE = array();
154
		$array = array();
155
	    clearstatcache();
156
	    $root = empty ($root) ? getcwd() : $root;
157
	    if (($handle = opendir($root)))
158
	    {
159
	    // Loop through the files and dirs an add to list  DIRECTORY_SEPARATOR
160
	        while (false !== ($file = readdir($handle)))
161
	        {
162
	            if (substr($file, 0, 1) != '.' && $file != 'index.php')
163
	            {
164 1495 DarkViper
	                if (is_dir($root.'/'.$file)) {
165 1365 Luisehahne
	                    $FILE['path'][] = $file;
166 1495 DarkViper
	                } elseif (preg_match($search, $file, $array) ) {
167 1365 Luisehahne
	                    $FILE['filename'][] = $array[0];
168
	                }
169
	            }
170
	        }
171
	        $close_verz = closedir($handle);
172
	    }
173
		// sorting
174 1495 DarkViper
	    if (isset ($FILE['path']) && natcasesort($FILE['path'])) {
175 1365 Luisehahne
			// new indexing
176
	        $FILE['path'] = array_merge($FILE['path']);
177
	    }
178
		// sorting
179 1495 DarkViper
	    if (isset ($FILE['filename']) && natcasesort($FILE['filename'])) {
180 1365 Luisehahne
			// new indexing
181
	        $FILE['filename'] = array_merge($FILE['filename']);
182
	    }
183
	    return $FILE;
184
	}
185
}
186
187 1352 Luisehahne
// Function to open a directory and add to a file list
188
function file_list($directory, $skip = array(), $show_hidden = false)
189
{
190
	$result_list = array();
191
	if (is_dir($directory))
192
    {
193
    	$dir = dir($directory); // Open the directory
194
		while (false !== ($entry = $dir->read())) // loop through the directory
195
		{
196
			if($entry == '.' || $entry == '..') { continue; } // Skip pointers
197
			if($entry[0] == '.' && $show_hidden == false) { continue; } // Skip hidden files
198
			if( sizeof($skip) > 0 && in_array($entry, $skip) ) { continue; } // Check if we to skip anything else
199 1495 DarkViper
			if(is_file( $directory.'/'.$entry)) { // Add files to list
200 1352 Luisehahne
				$result_list[] = $directory.'/'.$entry;
201
			}
202
		}
203
		$dir->close(); // Now close the folder object
204
	}
205 1365 Luisehahne
206
    // make the list nice. Not all OS do this itself
207 1495 DarkViper
	if(natcasesort($result_list)) {
208 1365 Luisehahne
		$result_list = array_merge($result_list);
209 1495 DarkViper
	}
210 1352 Luisehahne
	return $result_list;
211
}
212
213
// Function to get a list of home folders not to show
214
function get_home_folders()
215
{
216
	global $database, $admin;
217
	$home_folders = array();
218
	// Only return home folders is this feature is enabled
219
	// and user is not admin
220
//	if(HOME_FOLDERS AND ($_SESSION['GROUP_ID']!='1')) {
221
	if(HOME_FOLDERS AND (!in_array('1',explode(',', $_SESSION['GROUPS_ID']))))
222
	{
223 1495 DarkViper
		$sql  = 'SELECT `home_folder` FROM `'.TABLE_PREFIX.'users` ';
224
		$sql .= 'WHERE `home_folder`!=\''.$admin->get_home_folder().'\'';
225 1352 Luisehahne
		$query_home_folders = $database->query($sql);
226
		if($query_home_folders->numRows() > 0)
227
		{
228 1495 DarkViper
			while($folder = $query_home_folders->fetchRow()) {
229 1352 Luisehahne
				$home_folders[$folder['home_folder']] = $folder['home_folder'];
230
			}
231
		}
232
		function remove_home_subs($directory = '/', $home_folders = '')
233
		{
234 1365 Luisehahne
			if( ($handle = opendir(WB_PATH.MEDIA_DIRECTORY.$directory)) )
235 1352 Luisehahne
			{
236
				// Loop through the dirs to check the home folders sub-dirs are not shown
237
				while(false !== ($file = readdir($handle)))
238
				{
239 1365 Luisehahne
					if($file[0] != '.' && $file != 'index.php')
240 1352 Luisehahne
					{
241
						if(is_dir(WB_PATH.MEDIA_DIRECTORY.$directory.'/'.$file))
242
						{
243 1495 DarkViper
							if($directory != '/') {
244 1352 Luisehahne
								$file = $directory.'/'.$file;
245 1495 DarkViper
							}else {
246 1352 Luisehahne
								$file = '/'.$file;
247
							}
248
							foreach($home_folders AS $hf)
249
							{
250
								$hf_length = strlen($hf);
251 1495 DarkViper
								if($hf_length > 0) {
252
									if(substr($file, 0, $hf_length+1) == $hf) {
253 1352 Luisehahne
										$home_folders[$file] = $file;
254
									}
255
								}
256
							}
257
							$home_folders = remove_home_subs($file, $home_folders);
258
						}
259
					}
260
				}
261
			}
262
			return $home_folders;
263
		}
264
		$home_folders = remove_home_subs('/', $home_folders);
265
	}
266
	return $home_folders;
267
}
268
269 1365 Luisehahne
/*
270
 * @param object &$wb: $wb from frontend or $admin from backend
271
 * @return array: list of new entries
272
 * @description: callback remove path in files/dirs stored in array
273
 * @example: array_walk($array,'remove_path',PATH);
274
 */
275
//
276
function remove_path(&$path, $key, $vars = '')
277
{
278
	$path = str_replace($vars, '', $path);
279
}
280
281
/*
282
 * @param object &$wb: $wb from frontend or $admin from backend
283
 * @return array: list of ro-dirs
284
 * @description: returns a list of directories beyound /wb/media which are ReadOnly for current user
285
 */
286
function media_dirs_ro( &$wb )
287
{
288
	global $database;
289
	// if user is admin or home-folders not activated then there are no restrictions
290
	$allow_list = array();
291 1495 DarkViper
	if( $wb->get_user_id() == 1 || !HOME_FOLDERS ) {
292 1365 Luisehahne
		return array();
293
	}
294
	// at first read any dir and subdir from /media
295
	$full_list = directory_list( WB_PATH.MEDIA_DIRECTORY );
296
	// add own home_folder to allow-list
297 1495 DarkViper
	if( $wb->get_home_folder() ) {
298 1365 Luisehahne
		// old: $allow_list[] = get_home_folder();
299
		$allow_list[] = $wb->get_home_folder();
300
	}
301
	// get groups of current user
302
	$curr_groups = $wb->get_groups_id();
303
	// if current user is in admin-group
304 1495 DarkViper
	if( ($admin_key = array_search('1', $curr_groups)) !== false)
305 1365 Luisehahne
	{
306
		// remove admin-group from list
307
		unset($curr_groups[$admin_key]);
308
		// search for all users where the current user is admin from
309
		foreach( $curr_groups as $group)
310
		{
311
			$sql  = 'SELECT `home_folder` FROM `'.TABLE_PREFIX.'users` ';
312
			$sql .= 'WHERE (FIND_IN_SET(\''.$group.'\', `groups_id`) > 0) AND `home_folder` <> \'\' AND `user_id` <> '.$wb->get_user_id();
313 1495 DarkViper
			if( ($res_hf = $database->query($sql)) != null ) {
314
				while( $rec_hf = $res_hf->fetchrow() ) {
315 1365 Luisehahne
					$allow_list[] = $rec_hf['home_folder'];
316
				}
317
			}
318
		}
319
	}
320
	$tmp_array = $full_list;
321
	// create a list for readonly dir
322
    $array = array();
323
	while( sizeof($tmp_array) > 0)
324
	{
325
        $tmp = array_shift($tmp_array);
326
        $x = 0;
327 1495 DarkViper
		while($x < sizeof($allow_list)) {
328 1365 Luisehahne
			if(strpos ($tmp,$allow_list[$x])) {
329
				$array[] = $tmp;
330
			}
331
			$x++;
332
		}
333
	}
334
	$full_list = array_diff( $full_list, $array );
335
	$tmp = array();
336
	$full_list = array_merge($tmp,$full_list);
337
	return $full_list;
338
}
339
340
/*
341
 * @param object &$wb: $wb from frontend or $admin from backend
342
 * @return array: list of rw-dirs
343
 * @description: returns a list of directories beyound /wb/media which are ReadWrite for current user
344
 */
345
function media_dirs_rw ( &$wb )
346
{
347
	global $database;
348
	// if user is admin or home-folders not activated then there are no restrictions
349
	// at first read any dir and subdir from /media
350
	$full_list = directory_list( WB_PATH.MEDIA_DIRECTORY );
351
    $array = array();
352
	$allow_list = array();
353 1495 DarkViper
	if( ($wb->ami_group_member('1')) && !HOME_FOLDERS ) {
354 1365 Luisehahne
		return $full_list;
355
	}
356
	// add own home_folder to allow-list
357 1495 DarkViper
	if( $wb->get_home_folder() ) {
358 1365 Luisehahne
	  	$allow_list[] = $wb->get_home_folder();
359
	} else {
360
		$array = $full_list;
361
	}
362
	// get groups of current user
363
	$curr_groups = $wb->get_groups_id();
364
	// if current user is in admin-group
365
	if( ($admin_key = array_search('1', $curr_groups)) == true)
366
	{
367
		// remove admin-group from list
368
		// unset($curr_groups[$admin_key]);
369
		// search for all users where the current user is admin from
370
		foreach( $curr_groups as $group)
371
		{
372
			$sql  = 'SELECT `home_folder` FROM `'.TABLE_PREFIX.'users` ';
373
			$sql .= 'WHERE (FIND_IN_SET(\''.$group.'\', `groups_id`) > 0) AND `home_folder` <> \'\' AND `user_id` <> '.$wb->get_user_id();
374 1495 DarkViper
			if( ($res_hf = $database->query($sql)) != null ) {
375
				while( $rec_hf = $res_hf->fetchrow() ) {
376 1365 Luisehahne
					$allow_list[] = $rec_hf['home_folder'];
377
				}
378
			}
379
		}
380
	}
381
382
	$tmp_array = $full_list;
383
	// create a list for readwrite dir
384
	while( sizeof($tmp_array) > 0)
385
	{
386
        $tmp = array_shift($tmp_array);
387
        $x = 0;
388 1495 DarkViper
		while($x < sizeof($allow_list)) {
389 1365 Luisehahne
			if(strpos ($tmp,$allow_list[$x])) {
390
				$array[] = $tmp;
391
			}
392
			$x++;
393
		}
394
	}
395
	$tmp = array();
396
    $array = array_unique($array);
397
	$full_list = array_merge($tmp,$array);
398
    unset($array);
399
    unset($allow_list);
400
	return $full_list;
401
}
402
403 1352 Luisehahne
// Function to create directories
404 1555 Luisehahne
function make_dir($dir_name, $dir_mode = OCTAL_DIR_MODE $recursive=true)
405 1352 Luisehahne
{
406 1555 Luisehahne
	$retVal = false;
407 1352 Luisehahne
	if(!is_dir($dir_name))
408
    {
409 1555 Luisehahne
		$retVal = mkdir($dir_name, $dir_mode,$recursive);
410 1352 Luisehahne
	}
411 1555 Luisehahne
	return $retVal;
412 1352 Luisehahne
}
413
414
// Function to chmod files and directories
415
function change_mode($name)
416
{
417
	if(OPERATING_SYSTEM != 'windows')
418
    {
419
		// Only chmod if os is not windows
420 1495 DarkViper
		if(is_dir($name)) {
421 1352 Luisehahne
			$mode = OCTAL_DIR_MODE;
422 1495 DarkViper
		}else {
423 1352 Luisehahne
			$mode = OCTAL_FILE_MODE;
424
		}
425 1495 DarkViper
		if(file_exists($name)) {
426 1352 Luisehahne
			$umask = umask(0);
427
			chmod($name, $mode);
428
			umask($umask);
429
			return true;
430 1495 DarkViper
		}else {
431
			return false;
432 1352 Luisehahne
		}
433 1495 DarkViper
	}else {
434 1352 Luisehahne
		return true;
435
	}
436
}
437
438
// Function to figure out if a parent exists
439
function is_parent($page_id)
440
{
441
	global $database;
442
	// Get parent
443
	$sql = 'SELECT `parent` FROM `'.TABLE_PREFIX.'pages` WHERE `page_id` = '.$page_id;
444
	$parent = $database->get_one($sql);
445
	// If parent isnt 0 return its ID
446 1495 DarkViper
	if(is_null($parent)) {
447 1352 Luisehahne
		return false;
448 1495 DarkViper
	}else {
449 1352 Luisehahne
		return $parent;
450
	}
451
}
452
453
// Function to work out level
454
function level_count($page_id)
455
{
456
	global $database;
457
	// Get page parent
458
	$sql = 'SELECT `parent` FROM `'.TABLE_PREFIX.'pages` WHERE `page_id` = '.$page_id;
459
	$parent = $database->get_one($sql);
460 1495 DarkViper
	if($parent > 0)
461 1352 Luisehahne
	{	// Get the level of the parent
462
		$sql = 'SELECT `level` FROM `'.TABLE_PREFIX.'pages` WHERE `page_id` = '.$parent;
463
		$level = $database->get_one($sql);
464
		return $level+1;
465 1495 DarkViper
	}else {
466 1352 Luisehahne
		return 0;
467
	}
468
}
469
470
// Function to work out root parent
471
function root_parent($page_id)
472
{
473
	global $database;
474
	// Get page details
475
	$sql = 'SELECT `parent`, `level` FROM `'.TABLE_PREFIX.'pages` WHERE `page_id` = '.$page_id;
476
	$query_page = $database->query($sql);
477
	$fetch_page = $query_page->fetchRow();
478
	$parent = $fetch_page['parent'];
479 1495 DarkViper
	$level = $fetch_page['level'];
480
	if($level == 1) {
481 1352 Luisehahne
		return $parent;
482 1495 DarkViper
	}elseif($parent == 0) {
483 1352 Luisehahne
		return $page_id;
484 1495 DarkViper
	}else {	// Figure out what the root parents id is
485 1352 Luisehahne
		$parent_ids = array_reverse(get_parent_ids($page_id));
486
		return $parent_ids[0];
487
	}
488
}
489
490
// Function to get page title
491
function get_page_title($id)
492
{
493
	global $database;
494
	// Get title
495
	$sql = 'SELECT `page_title` FROM `'.TABLE_PREFIX.'pages` WHERE `page_id` = '.$id;
496
	$page_title = $database->get_one($sql);
497
	return $page_title;
498
}
499
500
// Function to get a pages menu title
501
function get_menu_title($id)
502
{
503
	global $database;
504
	// Get title
505
	$sql = 'SELECT `menu_title` FROM `'.TABLE_PREFIX.'pages` WHERE `page_id` = '.$id;
506
	$menu_title = $database->get_one($sql);
507
	return $menu_title;
508
}
509
510
// Function to get all parent page titles
511
function get_parent_titles($parent_id)
512
{
513
	$titles[] = get_menu_title($parent_id);
514 1495 DarkViper
	if(is_parent($parent_id) != false) {
515 1352 Luisehahne
		$parent_titles = get_parent_titles(is_parent($parent_id));
516
		$titles = array_merge($titles, $parent_titles);
517
	}
518
	return $titles;
519
}
520
521
// Function to get all parent page id's
522
function get_parent_ids($parent_id)
523
{
524
	$ids[] = $parent_id;
525 1495 DarkViper
	if(is_parent($parent_id) != false) {
526 1352 Luisehahne
		$parent_ids = get_parent_ids(is_parent($parent_id));
527
		$ids = array_merge($ids, $parent_ids);
528
	}
529
	return $ids;
530
}
531
532
// Function to genereate page trail
533 1495 DarkViper
function get_page_trail($page_id)
534
{
535 1352 Luisehahne
	return implode(',', array_reverse(get_parent_ids($page_id)));
536
}
537
538
// Function to get all sub pages id's
539 1514 Luisehahne
function get_subs($parent, array $subs )
540 1352 Luisehahne
{
541
	// Connect to the database
542
	global $database;
543
	// Get id's
544
	$sql = 'SELECT `page_id` FROM `'.TABLE_PREFIX.'pages` WHERE `parent` = '.$parent;
545 1514 Luisehahne
	if( ($query = $database->query($sql)) ) {
546 1495 DarkViper
		while($fetch = $query->fetchRow()) {
547 1352 Luisehahne
			$subs[] = $fetch['page_id'];
548 1514 Luisehahne
			// Get subs of this sub recursive
549 1352 Luisehahne
			$subs = get_subs($fetch['page_id'], $subs);
550
		}
551
	}
552
	// Return subs array
553
	return $subs;
554
}
555
556
// Function as replacement for php's htmlspecialchars()
557
// Will not mangle HTML-entities
558
function my_htmlspecialchars($string)
559
{
560
	$string = preg_replace('/&(?=[#a-z0-9]+;)/i', '__amp;_', $string);
561
	$string = strtr($string, array('<'=>'&lt;', '>'=>'&gt;', '&'=>'&amp;', '"'=>'&quot;', '\''=>'&#39;'));
562
	$string = preg_replace('/__amp;_(?=[#a-z0-9]+;)/i', '&', $string);
563
	return($string);
564
}
565
566
// Convert a string from mixed html-entities/umlauts to pure $charset_out-umlauts
567
// Will replace all numeric and named entities except &gt; &lt; &apos; &quot; &#039; &nbsp;
568
// In case of error the returned string is unchanged, and a message is emitted.
569
function entities_to_umlauts($string, $charset_out=DEFAULT_CHARSET)
570
{
571
	require_once(WB_PATH.'/framework/functions-utf8.php');
572
	return entities_to_umlauts2($string, $charset_out);
573
}
574
575
// Will convert a string in $charset_in encoding to a pure ASCII string with HTML-entities.
576
// In case of error the returned string is unchanged, and a message is emitted.
577
function umlauts_to_entities($string, $charset_in=DEFAULT_CHARSET)
578
{
579
	require_once(WB_PATH.'/framework/functions-utf8.php');
580
	return umlauts_to_entities2($string, $charset_in);
581
}
582
583
// Function to convert a page title to a page filename
584
function page_filename($string)
585
{
586
	require_once(WB_PATH.'/framework/functions-utf8.php');
587
	$string = entities_to_7bit($string);
588
	// Now remove all bad characters
589
	$bad = array(
590
	'\'', /* /  */ '"', /* " */	'<', /* < */	'>', /* > */
591
	'{', /* { */	'}', /* } */	'[', /* [ */	']', /* ] */	'`', /* ` */
592
	'!', /* ! */	'@', /* @ */	'#', /* # */	'$', /* $ */	'%', /* % */
593
	'^', /* ^ */	'&', /* & */	'*', /* * */	'(', /* ( */	')', /* ) */
594
	'=', /* = */	'+', /* + */	'|', /* | */	'/', /* / */	'\\', /* \ */
595
	';', /* ; */	':', /* : */	',', /* , */	'?' /* ? */
596
	);
597
	$string = str_replace($bad, '', $string);
598
	// replace multiple dots in filename to single dot and (multiple) dots at the end of the filename to nothing
599
	$string = preg_replace(array('/\.+/', '/\.+$/'), array('.', ''), $string);
600
	// Now replace spaces with page spcacer
601
	$string = trim($string);
602
	$string = preg_replace('/(\s)+/', PAGE_SPACER, $string);
603
	// Now convert to lower-case
604
	$string = strtolower($string);
605
	// If there are any weird language characters, this will protect us against possible problems they could cause
606
	$string = str_replace(array('%2F', '%'), array('/', ''), urlencode($string));
607
	// Finally, return the cleaned string
608
	return $string;
609
}
610
611 1457 Luisehahne
// Function to convert a desired media filename to a clean mediafilename
612 1352 Luisehahne
function media_filename($string)
613
{
614
	require_once(WB_PATH.'/framework/functions-utf8.php');
615
	$string = entities_to_7bit($string);
616
	// Now remove all bad characters
617 1454 DarkViper
	$bad = array('\'','"','`','!','@','#','$','%','^','&','*','=','+','|','/','\\',';',':',',','?');
618 1352 Luisehahne
	$string = str_replace($bad, '', $string);
619
	// replace multiple dots in filename to single dot and (multiple) dots at the end of the filename to nothing
620 1454 DarkViper
	$string = preg_replace(array('/\.+/', '/\.+$/', '/\s/'), array('.', '', '_'), $string);
621 1352 Luisehahne
	// Clean any page spacers at the end of string
622
	$string = trim($string);
623
	// Finally, return the cleaned string
624
	return $string;
625
}
626
627
// Function to work out a page link
628
if(!function_exists('page_link'))
629
{
630
	function page_link($link)
631
	{
632
		global $admin;
633
		return $admin->page_link($link);
634
	}
635
}
636
637 1468 Luisehahne
// Create a new directory and/or protected file in the given directory
638 1477 Luisehahne
function createFolderProtectFile($sAbsDir='',$make_dir=true)
639 1457 Luisehahne
{
640
	global $admin, $MESSAGE;
641
	$retVal = array();
642 1484 Luisehahne
	$wb_path = rtrim(str_replace('\/\\', '/', WB_PATH), '/');
643
    if( ($sAbsDir=='') || ($sAbsDir == $wb_path) ) { return $retVal;}
644 1457 Luisehahne
645
	if ( $make_dir==true ) {
646
		// Check to see if the folder already exists
647 1477 Luisehahne
		if(file_exists($sAbsDir)) {
648 1457 Luisehahne
			// $admin->print_error($MESSAGE['MEDIA_DIR_EXISTS']);
649 1477 Luisehahne
			$retVal[] = basename($sAbsDir).'::'.$MESSAGE['MEDIA_DIR_EXISTS'];
650 1457 Luisehahne
		}
651 1555 Luisehahne
		if (!is_dir($sAbsDir) && !make_dir($sAbsDir) ) {
652 1457 Luisehahne
			// $admin->print_error($MESSAGE['MEDIA_DIR_NOT_MADE']);
653 1477 Luisehahne
			$retVal[] = basename($sAbsDir).'::'.$MESSAGE['MEDIA_DIR_NOT_MADE'];
654
		} else {
655
			change_mode($sAbsDir);
656 1457 Luisehahne
		}
657
	}
658
659 1477 Luisehahne
	if( is_writable($sAbsDir) )
660 1457 Luisehahne
	{
661 1477 Luisehahne
        // if(file_exists($sAbsDir.'/index.php')) { unlink($sAbsDir.'/index.php'); }
662 1457 Luisehahne
	    // Create default "index.php" file
663 1484 Luisehahne
		$rel_pages_dir = str_replace($wb_path, '', dirname($sAbsDir) );
664 1457 Luisehahne
		$step_back = str_repeat( '../', substr_count($rel_pages_dir, '/')+1 );
665
666
		$sResponse  = $_SERVER['SERVER_PROTOCOL'].' 301 Moved Permanently';
667
		$content =
668
			'<?php'."\n".
669
			'// *** This file is generated by WebsiteBaker Ver.'.VERSION."\n".
670
			'// *** Creation date: '.date('c')."\n".
671
			'// *** Do not modify this file manually'."\n".
672
			'// *** WB will rebuild this file from time to time!!'."\n".
673
			'// *************************************************'."\n".
674
			"\t".'header(\''.$sResponse.'\');'."\n".
675
			"\t".'header(\'Location: '.WB_URL.'/index.php\');'."\n".
676
			'// *************************************************'."\n";
677 1477 Luisehahne
		$filename = $sAbsDir.'/index.php';
678 1484 Luisehahne
679 1457 Luisehahne
		// write content into file
680 1551 Luisehahne
		  if(is_writable($filename) || !file_exists($filename)) {
681
		      if(file_put_contents($filename, $content)) {
682
		//    print 'create => '.str_replace( $wb_path,'',$filename).'<br />';
683
		          change_mode($filename, 'file');
684
		      }else {
685
		    $retVal[] = $MESSAGE['GENERIC_BAD_PERMISSIONS'].' :: '.$filename;
686
		   }
687
		  }
688
		 } else {
689
		   $retVal[] = $MESSAGE['GENERIC_BAD_PERMISSIONS'];
690
		 }
691
		 return $retVal;
692 1457 Luisehahne
}
693
694
function rebuildFolderProtectFile($dir='')
695
{
696 1495 DarkViper
	$retVal = array();
697
	$dir = rtrim(str_replace('\/\\', '/', $dir), '/');
698
	try {
699
		$files = array();
700
		$files[] = $dir;
701
		foreach(new RecursiveIteratorIterator(new RecursiveDirectoryIterator($dir)) as $fileInfo) {
702
			$files[] = $fileInfo->getPath();
703
		}
704
		$files = array_unique($files);
705
		foreach( $files as $file) {
706
			$protect_file = rtrim(str_replace('\/\\', '/', $file), '/');
707
			$retVal[] = createFolderProtectFile($protect_file,false);
708
		}
709
	} catch ( Exception $e ) {
710
		$retVal[] = $MESSAGE['MEDIA_DIR_ACCESS_DENIED'];
711
	}
712
	return $retVal;
713 1457 Luisehahne
}
714
715
// Create a new file in the pages directory
716 1352 Luisehahne
function create_access_file($filename,$page_id,$level)
717
{
718
	global $admin, $MESSAGE;
719 1495 DarkViper
	// First make sure parent folder exists
720
	$parent_folders = explode('/',str_replace(WB_PATH.PAGES_DIRECTORY, '', dirname($filename)));
721
	$parents = '';
722
	foreach($parent_folders AS $parent_folder)
723 1352 Luisehahne
	{
724 1495 DarkViper
		if($parent_folder != '/' AND $parent_folder != '')
725 1352 Luisehahne
		{
726 1495 DarkViper
			$parents .= '/'.$parent_folder;
727
			$acces_file = WB_PATH.PAGES_DIRECTORY.$parents;
728
			// can only be dirs
729
			if(!file_exists($acces_file)) {
730
				if(!make_dir($acces_file)) {
731
					$admin->print_error($MESSAGE['PAGES']['CANNOT_CREATE_ACCESS_FILE_FOLDER']);
732 1352 Luisehahne
				}
733 1457 Luisehahne
			}
734 1352 Luisehahne
		}
735 1495 DarkViper
	}
736
	// The depth of the page directory in the directory hierarchy
737
	// '/pages' is at depth 1
738
	$pages_dir_depth = count(explode('/',PAGES_DIRECTORY))-1;
739
	// Work-out how many ../'s we need to get to the index page
740
	$index_location = '';
741
	for($i = 0; $i < $level + $pages_dir_depth; $i++) {
742
		$index_location .= '../';
743
	}
744
	$content =
745
		'<?php'."\n".
746
		'// *** This file is generated by WebsiteBaker Ver.'.VERSION."\n".
747
		'// *** Creation date: '.date('c')."\n".
748
		'// *** Do not modify this file manually'."\n".
749
		'// *** WB will rebuild this file from time to time!!'."\n".
750
		'// *************************************************'."\n".
751
		"\t".'$page_id    = '.$page_id.';'."\n".
752
		"\t".'require(\''.$index_location.'index.php\');'."\n".
753
		'// *************************************************'."\n";
754 1352 Luisehahne
755 1495 DarkViper
	if( ($handle = fopen($filename, 'w')) ) {
756
		fwrite($handle, $content);
757
		fclose($handle);
758
		// Chmod the file
759
		change_mode($filename);
760
	} else {
761
		$admin->print_error($MESSAGE['PAGES']['CANNOT_CREATE_ACCESS_FILE']);
762
	}
763 1457 Luisehahne
	return;
764
 }
765
766 1352 Luisehahne
// Function for working out a file mime type (if the in-built PHP one is not enabled)
767
if(!function_exists('mime_content_type'))
768
{
769 1457 Luisehahne
    function mime_content_type($filename)
770 1352 Luisehahne
	{
771
	    $mime_types = array(
772
            'txt'	=> 'text/plain',
773
            'htm'	=> 'text/html',
774
            'html'	=> 'text/html',
775
            'php'	=> 'text/html',
776
            'css'	=> 'text/css',
777
            'js'	=> 'application/javascript',
778
            'json'	=> 'application/json',
779
            'xml'	=> 'application/xml',
780
            'swf'	=> 'application/x-shockwave-flash',
781
            'flv'	=> 'video/x-flv',
782
783
            // images
784
            'png'	=> 'image/png',
785
            'jpe'	=> 'image/jpeg',
786
            'jpeg'	=> 'image/jpeg',
787
            'jpg'	=> 'image/jpeg',
788
            'gif'	=> 'image/gif',
789
            'bmp'	=> 'image/bmp',
790
            'ico'	=> 'image/vnd.microsoft.icon',
791
            'tiff'	=> 'image/tiff',
792
            'tif'	=> 'image/tiff',
793
            'svg'	=> 'image/svg+xml',
794
            'svgz'	=> 'image/svg+xml',
795
796
            // archives
797
            'zip'	=> 'application/zip',
798
            'rar'	=> 'application/x-rar-compressed',
799
            'exe'	=> 'application/x-msdownload',
800
            'msi'	=> 'application/x-msdownload',
801
            'cab'	=> 'application/vnd.ms-cab-compressed',
802
803
            // audio/video
804
            'mp3'	=> 'audio/mpeg',
805
            'mp4'	=> 'audio/mpeg',
806
            'qt'	=> 'video/quicktime',
807
            'mov'	=> 'video/quicktime',
808
809
            // adobe
810
            'pdf'	=> 'application/pdf',
811
            'psd'	=> 'image/vnd.adobe.photoshop',
812
            'ai'	=> 'application/postscript',
813
            'eps'	=> 'application/postscript',
814
            'ps'	=> 'application/postscript',
815
816
            // ms office
817
            'doc'	=> 'application/msword',
818
            'rtf'	=> 'application/rtf',
819
            'xls'	=> 'application/vnd.ms-excel',
820
            'ppt'	=> 'application/vnd.ms-powerpoint',
821
822
            // open office
823
            'odt'	=> 'application/vnd.oasis.opendocument.text',
824
            'ods'	=> 'application/vnd.oasis.opendocument.spreadsheet',
825
        );
826
        $temp = explode('.',$filename);
827
        $ext = strtolower(array_pop($temp));
828 1495 DarkViper
        if (array_key_exists($ext, $mime_types)) {
829 1352 Luisehahne
            return $mime_types[$ext];
830 1495 DarkViper
        }elseif (function_exists('finfo_open')) {
831 1352 Luisehahne
            $finfo = finfo_open(FILEINFO_MIME);
832
            $mimetype = finfo_file($finfo, $filename);
833
            finfo_close($finfo);
834
            return $mimetype;
835 1495 DarkViper
        }else {
836 1352 Luisehahne
            return 'application/octet-stream';
837
        }
838
    }
839
}
840
841
// Generate a thumbnail from an image
842
function make_thumb($source, $destination, $size)
843
{
844
	// Check if GD is installed
845 1365 Luisehahne
	if(extension_loaded('gd') && function_exists('imageCreateFromJpeg'))
846 1352 Luisehahne
	{
847
		// First figure out the size of the thumbnail
848
		list($original_x, $original_y) = getimagesize($source);
849 1495 DarkViper
		if ($original_x > $original_y) {
850 1352 Luisehahne
			$thumb_w = $size;
851
			$thumb_h = $original_y*($size/$original_x);
852
		}
853 1495 DarkViper
		if ($original_x < $original_y) {
854 1352 Luisehahne
			$thumb_w = $original_x*($size/$original_y);
855
			$thumb_h = $size;
856
		}
857 1495 DarkViper
		if ($original_x == $original_y) {
858 1352 Luisehahne
			$thumb_w = $size;
859 1495 DarkViper
			$thumb_h = $size;
860 1352 Luisehahne
		}
861
		// Now make the thumbnail
862
		$source = imageCreateFromJpeg($source);
863
		$dst_img = ImageCreateTrueColor($thumb_w, $thumb_h);
864
		imagecopyresampled($dst_img,$source,0,0,0,0,$thumb_w,$thumb_h,$original_x,$original_y);
865
		imagejpeg($dst_img, $destination);
866
		// Clear memory
867
		imagedestroy($dst_img);
868
		imagedestroy($source);
869
	   // Return true
870
		return true;
871
	} else {
872
		return false;
873
	}
874
}
875
876
/*
877
 * Function to work-out a single part of an octal permission value
878
 *
879
 * @param mixed $octal_value: an octal value as string (i.e. '0777') or real octal integer (i.e. 0777 | 777)
880
 * @param string $who: char or string for whom the permission is asked( U[ser] / G[roup] / O[thers] )
881
 * @param string $action: char or string with the requested action( r[ead..] / w[rite..] / e|x[ecute..] )
882
 * @return boolean
883
 */
884
function extract_permission($octal_value, $who, $action)
885
{
886
	// Make sure that all arguments are set and $octal_value is a real octal-integer
887 1495 DarkViper
	if(($who == '') || ($action == '') || (preg_match( '/[^0-7]/', (string)$octal_value ))) {
888 1352 Luisehahne
		return false; // invalid argument, so return false
889
	}
890
	// convert $octal_value into a decimal-integer to be sure having a valid value
891
	$right_mask = octdec($octal_value);
892
	$action_mask = 0;
893
	// set the $action related bit in $action_mask
894 1495 DarkViper
	switch($action[0]) { // get action from first char of $action
895 1352 Luisehahne
		case 'r':
896
		case 'R':
897
			$action_mask = 4; // set read-bit only (2^2)
898
			break;
899
		case 'w':
900
		case 'W':
901
			$action_mask = 2; // set write-bit only (2^1)
902
			break;
903
		case 'e':
904
		case 'E':
905
		case 'x':
906
		case 'X':
907
			$action_mask = 1; // set execute-bit only (2^0)
908
			break;
909
		default:
910
			return false; // undefined action name, so return false
911
	}
912
	// shift action-mask into the right position
913 1495 DarkViper
	switch($who[0]) { // get who from first char of $who
914 1352 Luisehahne
		case 'u':
915
		case 'U':
916
			$action_mask <<= 3; // shift left 3 bits
917
		case 'g':
918
		case 'G':
919
			$action_mask <<= 3; // shift left 3 bits
920
		case 'o':
921
		case 'O':
922
			/* NOP */
923
			break;
924
		default:
925
			return false; // undefined who, so return false
926
	}
927
	return( ($right_mask & $action_mask) != 0 ); // return result of binary-AND
928
}
929
930
// Function to delete a page
931 1365 Luisehahne
	function delete_page($page_id)
932 1352 Luisehahne
	{
933 1365 Luisehahne
		global $admin, $database, $MESSAGE;
934
		// Find out more about the page
935 1495 DarkViper
		$sql  = 'SELECT `page_id`, `menu_title`, `page_title`, `level`, ';
936
		$sql .=        '`link`, `parent`, `modified_by`, `modified_when` ';
937
		$sql .= 'FROM `'.TABLE_PREFIX.'pages` WHERE `page_id`='.$page_id;
938 1365 Luisehahne
		$results = $database->query($sql);
939
		if($database->is_error())    { $admin->print_error($database->get_error()); }
940
		if($results->numRows() == 0) { $admin->print_error($MESSAGE['PAGES']['NOT_FOUND']); }
941
		$results_array = $results->fetchRow();
942
		$parent     = $results_array['parent'];
943
		$level      = $results_array['level'];
944
		$link       = $results_array['link'];
945
		$page_title = $results_array['page_title'];
946
		$menu_title = $results_array['menu_title'];
947
		// Get the sections that belong to the page
948 1495 DarkViper
		$sql  = 'SELECT `section_id`, `module` FROM `'.TABLE_PREFIX.'sections` ';
949
		$sql .= 'WHERE `page_id`='.$page_id;
950 1365 Luisehahne
		$query_sections = $database->query($sql);
951
		if($query_sections->numRows() > 0)
952 1352 Luisehahne
		{
953 1495 DarkViper
			while($section = $query_sections->fetchRow()) {
954 1365 Luisehahne
				// Set section id
955
				$section_id = $section['section_id'];
956
				// Include the modules delete file if it exists
957 1495 DarkViper
				if(file_exists(WB_PATH.'/modules/'.$section['module'].'/delete.php')) {
958 1365 Luisehahne
					include(WB_PATH.'/modules/'.$section['module'].'/delete.php');
959
				}
960 1352 Luisehahne
			}
961
		}
962 1365 Luisehahne
		// Update the pages table
963 1495 DarkViper
		$sql = 'DELETE FROM `'.TABLE_PREFIX.'pages` WHERE `page_id`='.$page_id;
964 1365 Luisehahne
		$database->query($sql);
965 1495 DarkViper
		if($database->is_error()) {
966 1365 Luisehahne
			$admin->print_error($database->get_error());
967
		}
968
		// Update the sections table
969 1495 DarkViper
		$sql = 'DELETE FROM `'.TABLE_PREFIX.'sections` WHERE `page_id`='.$page_id;
970 1365 Luisehahne
		$database->query($sql);
971
		if($database->is_error()) {
972
			$admin->print_error($database->get_error());
973
		}
974
		// Include the ordering class or clean-up ordering
975
		include_once(WB_PATH.'/framework/class.order.php');
976
		$order = new order(TABLE_PREFIX.'pages', 'position', 'page_id', 'parent');
977
		$order->clean($parent);
978
		// Unlink the page access file and directory
979
		$directory = WB_PATH.PAGES_DIRECTORY.$link;
980
		$filename = $directory.PAGE_EXTENSION;
981
		$directory .= '/';
982
		if(file_exists($filename))
983
		{
984 1495 DarkViper
			if(!is_writable(WB_PATH.PAGES_DIRECTORY.'/')) {
985 1365 Luisehahne
				$admin->print_error($MESSAGE['PAGES']['CANNOT_DELETE_ACCESS_FILE']);
986 1495 DarkViper
			}else {
987 1365 Luisehahne
				unlink($filename);
988
				if( file_exists($directory) &&
989
				   (rtrim($directory,'/') != WB_PATH.PAGES_DIRECTORY) &&
990
				   (substr($link, 0, 1) != '.'))
991
				{
992
					rm_full_dir($directory);
993
				}
994
			}
995
		}
996 1352 Luisehahne
	}
997 1365 Luisehahne
998
/*
999
 * @param string $file: name of the file to read
1000
 * @param int $size: number of maximum bytes to read (0 = complete file)
1001
 * @return string: the content as string, false on error
1002
 */
1003
	function getFilePart($file, $size = 0)
1004 1352 Luisehahne
	{
1005 1365 Luisehahne
		$file_content = '';
1006
		if( file_exists($file) && is_file($file) && is_readable($file))
1007 1352 Luisehahne
		{
1008 1495 DarkViper
			if($size == 0) {
1009 1365 Luisehahne
				$size = filesize($file);
1010
			}
1011 1495 DarkViper
			if(($fh = fopen($file, 'rb'))) {
1012
				if( ($file_content = fread($fh, $size)) !== false ) {
1013 1365 Luisehahne
					return $file_content;
1014
				}
1015
				fclose($fh);
1016
			}
1017 1352 Luisehahne
		}
1018 1365 Luisehahne
		return false;
1019
	}
1020
1021
	/**
1022
	* replace varnames with values in a string
1023
	*
1024
	* @param string $subject: stringvariable with vars placeholder
1025
	* @param array $replace: values to replace vars placeholder
1026
	* @return string
1027
	*/
1028
    function replace_vars($subject = '', &$replace = null )
1029
    {
1030
		if(is_array($replace))
1031 1352 Luisehahne
		{
1032 1495 DarkViper
			foreach ($replace  as $key => $value) {
1033 1365 Luisehahne
				$subject = str_replace("{{".$key."}}", $value, $subject);
1034 1352 Luisehahne
			}
1035
		}
1036 1365 Luisehahne
		return $subject;
1037
    }
1038 1352 Luisehahne
1039
// Load module into DB
1040
function load_module($directory, $install = false)
1041
{
1042
	global $database,$admin,$MESSAGE;
1043 1365 Luisehahne
	$retVal = false;
1044
	if(is_dir($directory) && file_exists($directory.'/info.php'))
1045 1352 Luisehahne
	{
1046
		require($directory.'/info.php');
1047
		if(isset($module_name))
1048
		{
1049 1365 Luisehahne
			if(!isset($module_license)) { $module_license = 'GNU General Public License'; }
1050
			if(!isset($module_platform) && isset($module_designed_for)) { $module_platform = $module_designed_for; }
1051
			if(!isset($module_function) && isset($module_type)) { $module_function = $module_type; }
1052 1352 Luisehahne
			$module_function = strtolower($module_function);
1053
			// Check that it doesn't already exist
1054 1365 Luisehahne
			$sqlwhere = 'WHERE `type` = \'module\' AND `directory` = \''.$module_directory.'\'';
1055
			$sql  = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.'addons` '.$sqlwhere;
1056 1495 DarkViper
			if( $database->get_one($sql) ) {
1057 1365 Luisehahne
				$sql  = 'UPDATE `'.TABLE_PREFIX.'addons` SET ';
1058
			}else{
1059 1352 Luisehahne
				// Load into DB
1060
				$sql  = 'INSERT INTO `'.TABLE_PREFIX.'addons` SET ';
1061 1365 Luisehahne
				$sqlwhere = '';
1062
			}
1063 1495 DarkViper
			$sql .= '`directory`=\''.$module_directory.'\', ';
1064
			$sql .= '`name`=\''.$module_name.'\', ';
1065
			$sql .= '`description`=\''.addslashes($module_description).'\', ';
1066
			$sql .= '`type`=\'module\', ';
1067
			$sql .= '`function`=\''.$module_function.'\', ';
1068
			$sql .= '`version`=\''.$module_version.'\', ';
1069
			$sql .= '`platform`=\''.$module_platform.'\', ';
1070
			$sql .= '`author`=\''.addslashes($module_author).'\', ';
1071
			$sql .= '`license`=\''.addslashes($module_license).'\'';
1072 1365 Luisehahne
			$sql .= $sqlwhere;
1073
			$retVal = $database->query($sql);
1074
			// Run installation script
1075 1495 DarkViper
			if($install == true) {
1076
				if(file_exists($directory.'/install.php')) {
1077 1365 Luisehahne
					require($directory.'/install.php');
1078 1352 Luisehahne
				}
1079
			}
1080
		}
1081
	}
1082
}
1083
1084
// Load template into DB
1085
function load_template($directory)
1086
{
1087
	global $database, $admin;
1088 1365 Luisehahne
	$retVal = false;
1089
	if(is_dir($directory) && file_exists($directory.'/info.php'))
1090 1352 Luisehahne
	{
1091
		require($directory.'/info.php');
1092
		if(isset($template_name))
1093
		{
1094 1495 DarkViper
			if(!isset($template_license)) {
1095 1352 Luisehahne
              $template_license = 'GNU General Public License';
1096
            }
1097 1495 DarkViper
			if(!isset($template_platform) && isset($template_designed_for)) {
1098 1352 Luisehahne
              $template_platform = $template_designed_for;
1099
            }
1100 1495 DarkViper
			if(!isset($template_function)) {
1101 1352 Luisehahne
              $template_function = 'template';
1102
            }
1103
			// Check that it doesn't already exist
1104 1495 DarkViper
			$sqlwhere = 'WHERE `type`=\'template\' AND `directory`=\''.$template_directory.'\'';
1105 1365 Luisehahne
			$sql  = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.'addons` '.$sqlwhere;
1106 1495 DarkViper
			if( $database->get_one($sql) ) {
1107 1365 Luisehahne
				$sql  = 'UPDATE `'.TABLE_PREFIX.'addons` SET ';
1108
			}else{
1109 1352 Luisehahne
				// Load into DB
1110
				$sql  = 'INSERT INTO `'.TABLE_PREFIX.'addons` SET ';
1111 1365 Luisehahne
				$sqlwhere = '';
1112 1352 Luisehahne
			}
1113 1495 DarkViper
			$sql .= '`directory`=\''.$template_directory.'\', ';
1114
			$sql .= '`name`=\''.$template_name.'\', ';
1115
			$sql .= '`description`=\''.addslashes($template_description).'\', ';
1116
			$sql .= '`type`=\'template\', ';
1117
			$sql .= '`function`=\''.$template_function.'\', ';
1118
			$sql .= '`version`=\''.$template_version.'\', ';
1119
			$sql .= '`platform`=\''.$template_platform.'\', ';
1120
			$sql .= '`author`=\''.addslashes($template_author).'\', ';
1121
			$sql .= '`license`=\''.addslashes($template_license).'\' ';
1122 1365 Luisehahne
			$sql .= $sqlwhere;
1123
			$retVal = $database->query($sql);
1124 1352 Luisehahne
		}
1125
	}
1126 1365 Luisehahne
	return $retVal;
1127 1352 Luisehahne
}
1128
1129
// Load language into DB
1130
function load_language($file)
1131
{
1132
	global $database,$admin;
1133 1365 Luisehahne
	$retVal = false;
1134 1352 Luisehahne
	if (file_exists($file) && preg_match('#^([A-Z]{2}.php)#', basename($file)))
1135
	{
1136 1365 Luisehahne
		// require($file);  it's to large
1137
		// read contents of the template language file into string
1138
		$data = @file_get_contents(WB_PATH.'/languages/'.str_replace('.php','',basename($file)).'.php');
1139
		// use regular expressions to fetch the content of the variable from the string
1140 1435 Luisehahne
		$language_name = get_variable_content('language_name', $data, false, false);
1141
		$language_code = get_variable_content('language_code', $data, false, false);
1142
		$language_author = get_variable_content('language_author', $data, false, false);
1143
		$language_version = get_variable_content('language_version', $data, false, false);
1144
		$language_platform = get_variable_content('language_platform', $data, false, false);
1145 1365 Luisehahne
1146 1352 Luisehahne
		if(isset($language_name))
1147
		{
1148 1365 Luisehahne
			if(!isset($language_license)) { $language_license = 'GNU General Public License'; }
1149
			if(!isset($language_platform) && isset($language_designed_for)) { $language_platform = $language_designed_for; }
1150 1352 Luisehahne
			// Check that it doesn't already exist
1151 1495 DarkViper
			$sqlwhere = 'WHERE `type`=\'language\' AND `directory`=\''.$language_code.'\'';
1152 1365 Luisehahne
			$sql  = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.'addons` '.$sqlwhere;
1153 1495 DarkViper
			if( $database->get_one($sql) ) {
1154 1365 Luisehahne
				$sql  = 'UPDATE `'.TABLE_PREFIX.'addons` SET ';
1155
			}else{
1156 1352 Luisehahne
				// Load into DB
1157
				$sql  = 'INSERT INTO `'.TABLE_PREFIX.'addons` SET ';
1158 1365 Luisehahne
				$sqlwhere = '';
1159 1352 Luisehahne
			}
1160 1495 DarkViper
			$sql .= '`directory`=\''.$language_code.'\', ';
1161
			$sql .= '`name`=\''.$language_name.'\', ';
1162
			$sql .= '`type`=\'language\', ';
1163
			$sql .= '`version`=\''.$language_version.'\', ';
1164
			$sql .= '`platform`=\''.$language_platform.'\', ';
1165
			$sql .= '`author`=\''.addslashes($language_author).'\', ';
1166
			$sql .= '`license`=\''.addslashes($language_license).'\' ';
1167 1365 Luisehahne
			$sql .= $sqlwhere;
1168
			$retVal = $database->query($sql);
1169 1352 Luisehahne
		}
1170
	}
1171 1365 Luisehahne
	return $retVal;
1172 1352 Luisehahne
}
1173
1174
// Upgrade module info in DB, optionally start upgrade script
1175
function upgrade_module($directory, $upgrade = false)
1176
{
1177
	global $database, $admin, $MESSAGE, $new_module_version;
1178
	$mod_directory = WB_PATH.'/modules/'.$directory;
1179
	if(file_exists($mod_directory.'/info.php'))
1180
	{
1181
		require($mod_directory.'/info.php');
1182
		if(isset($module_name))
1183
		{
1184 1365 Luisehahne
			if(!isset($module_license)) { $module_license = 'GNU General Public License'; }
1185 1352 Luisehahne
			if(!isset($module_platform) && isset($module_designed_for)) { $module_platform = $module_designed_for; }
1186 1365 Luisehahne
			if(!isset($module_function) && isset($module_type)) { $module_function = $module_type; }
1187 1352 Luisehahne
			$module_function = strtolower($module_function);
1188
			// Check that it does already exist
1189
			$sql  = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.'addons` ';
1190 1495 DarkViper
			$sql .= 'WHERE `directory`=\''.$module_directory.'\'';
1191 1352 Luisehahne
			if( $database->get_one($sql) )
1192
			{
1193
				// Update in DB
1194
				$sql  = 'UPDATE `'.TABLE_PREFIX.'addons` SET ';
1195 1495 DarkViper
				$sql .= '`version`=\''.$module_version.'\', ';
1196
				$sql .= '`description`=\''.addslashes($module_description).'\', ';
1197
				$sql .= '`platform`=\''.$module_platform.'\', ';
1198
				$sql .= '`author`=\''.addslashes($module_author).'\', ';
1199
				$sql .= '`license`=\''.addslashes($module_license).'\' ';
1200
				$sql .= 'WHERE `directory`=\''.$module_directory.'\' ';
1201 1352 Luisehahne
				$database->query($sql);
1202
				if($database->is_error()) {
1203
					$admin->print_error($database->get_error());
1204
				}
1205
				// Run upgrade script
1206 1495 DarkViper
				if($upgrade == true) {
1207
					if(file_exists($mod_directory.'/upgrade.php')) {
1208 1352 Luisehahne
						require($mod_directory.'/upgrade.php');
1209
					}
1210
				}
1211
			}
1212
		}
1213
	}
1214
}
1215
1216
// extracts the content of a string variable from a string (save alternative to including files)
1217
if(!function_exists('get_variable_content'))
1218
{
1219
	function get_variable_content($search, $data, $striptags=true, $convert_to_entities=true)
1220
	{
1221
		$match = '';
1222
		// search for $variable followed by 0-n whitespace then by = then by 0-n whitespace
1223
		// then either " or ' then 0-n characters then either " or ' followed by 0-n whitespace and ;
1224
		// the variable name is returned in $match[1], the content in $match[3]
1225
		if (preg_match('/(\$' .$search .')\s*=\s*("|\')(.*)\2\s*;/', $data, $match))
1226
		{
1227 1495 DarkViper
			if(strip_tags(trim($match[1])) == '$' .$search) {
1228 1352 Luisehahne
				// variable name matches, return it's value
1229
				$match[3] = ($striptags == true) ? strip_tags($match[3]) : $match[3];
1230
				$match[3] = ($convert_to_entities == true) ? htmlentities($match[3]) : $match[3];
1231
				return $match[3];
1232
			}
1233
		}
1234
		return false;
1235
	}
1236
}
1237
1238 1365 Luisehahne
/*
1239
 * @param string $modulname: like saved in addons.directory
1240
 * @param boolean $source: true reads from database, false from info.php
1241
 * @return string:  the version as string, if not found returns null
1242
 */
1243
1244
	function get_modul_version($modulname, $source = true)
1245
	{
1246
		global $database;
1247
		$version = null;
1248
		if( $source != true )
1249
		{
1250 1495 DarkViper
			$sql  = 'SELECT `version` FROM `'.TABLE_PREFIX.'addons` ';
1251
			$sql .= 'WHERE `directory`=\''.$modulname.'\'';
1252 1365 Luisehahne
			$version = $database->get_one($sql);
1253
		} else {
1254
			$info_file = WB_PATH.'/modules/'.$modulname.'/info.php';
1255 1495 DarkViper
			if(file_exists($info_file)) {
1256
				if(($info_file = file_get_contents($info_file))) {
1257 1365 Luisehahne
					$version = get_variable_content('module_version', $info_file, false, false);
1258
					$version = ($version !== false) ? $version : null;
1259
				}
1260
			}
1261
		}
1262
		return $version;
1263
	}
1264
1265
/*
1266
 * @param string $varlist: commaseperated list of varnames to move into global space
1267
 * @return bool:  false if one of the vars already exists in global space (error added to msgQueue)
1268
 */
1269
	function vars2globals_wrapper($varlist)
1270
	{
1271
		$retval = true;
1272
		if( $varlist != '')
1273
		{
1274
			$vars = explode(',', $varlist);
1275
			foreach( $vars as $var)
1276
			{
1277 1495 DarkViper
				if( isset($GLOBALS[$var]) ){
1278 1365 Luisehahne
					ErrorLog::write( 'variabe $'.$var.' already defined in global space!!',__FILE__, __FUNCTION__, __LINE__);
1279
					$retval = false;
1280 1495 DarkViper
				}else {
1281 1365 Luisehahne
					global $$var;
1282
				}
1283
			}
1284
		}
1285
		return $retval;
1286
	}
1287
1288 1400 FrankH
/*
1289
 * filter directory traversal more thoroughly, thanks to hal 9000
1290
 * @param string $dir: directory relative to MEDIA_DIRECTORY
1291
 * @param bool $with_media_dir: true when to include MEDIA_DIRECTORY
1292
 * @return: false if directory traversal detected, real path if not
1293
 */
1294
	function check_media_path($directory, $with_media_dir = true)
1295
	{
1296 1495 DarkViper
		$md = ($with_media_dir) ? MEDIA_DIRECTORY : '';
1297 1400 FrankH
		$dir = realpath(WB_PATH . $md . '/' . utf8_decode($directory));
1298
		$required = realpath(WB_PATH . MEDIA_DIRECTORY);
1299
		if (strstr($dir, $required)) {
1300
			return $dir;
1301
		} else {
1302
			return false;
1303
		}
1304
	}
1305 1475 Luisehahne
1306
/*
1307
urlencode function and rawurlencode are mostly based on RFC 1738.
1308
However, since 2005 the current RFC in use for URIs standard is RFC 3986.
1309
Here is a function to encode URLs according to RFC 3986.
1310
*/
1311
if(!function_exists('url_encode')){
1312
	function url_encode($string) {
1313
	    $string = html_entity_decode($string,ENT_QUOTES,'UTF-8');
1314 1477 Luisehahne
	    $entities = array('%21', '%2A', '%27', '%28', '%29', '%3B', '%3A', '%40', '%26', '%3D', '%2B', '%24', '%2C', '%2F', '%3F', '%25', '%23', '%5B', '%5D');
1315
	    $replacements = array('!', '*', "'", "(", ")", ";", ":", "@", "&", "=", "+", "$", ",", "/", "?", "%", "#", "[", "]");
1316
	    return str_replace($entities,$replacements, rawurlencode($string));
1317 1475 Luisehahne
	}
1318 1495 DarkViper
}