1 |
1349
|
Luisehahne
|
<?php
|
2 |
|
|
/**
|
3 |
|
|
*
|
4 |
|
|
* @category framework
|
5 |
|
|
* @package initialize
|
6 |
|
|
* @author WebsiteBaker Project
|
7 |
|
|
* @copyright 2004-2009, Ryan Djurovich
|
8 |
|
|
* @copyright 2009-2011, Website Baker Org. e.V.
|
9 |
|
|
* @link http://www.websitebaker2.org/
|
10 |
|
|
* @license http://www.gnu.org/licenses/gpl.html
|
11 |
|
|
* @platform WebsiteBaker 2.8.x
|
12 |
1374
|
Luisehahne
|
* @requirements PHP 5.2.2 and higher
|
13 |
1349
|
Luisehahne
|
* @version $Id$
|
14 |
|
|
* @filesource $HeadURL$
|
15 |
|
|
* @lastmodified $Date$
|
16 |
|
|
*
|
17 |
|
|
*/
|
18 |
|
|
|
19 |
1488
|
DarkViper
|
/* -------------------------------------------------------- */
|
20 |
|
|
// Must include code to stop this file being accessed directly
|
21 |
1499
|
DarkViper
|
require_once(dirname(__FILE__).'/globalExceptionHandler.php');
|
22 |
1637
|
darkviper
|
if(!defined('WB_URL')) { throw new IllegalFileException(); }
|
23 |
1488
|
DarkViper
|
/* -------------------------------------------------------- */
|
24 |
1617
|
darkviper
|
/**
|
25 |
|
|
* sanitize $_SERVER['HTTP_REFERER']
|
26 |
|
|
* @param string $sWbUrl qualified startup URL of current application
|
27 |
|
|
*/
|
28 |
|
|
function SanitizeHttpReferer($sWbUrl = WB_URL) {
|
29 |
|
|
$sTmpReferer = '';
|
30 |
|
|
if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER'] != '') {
|
31 |
|
|
$aRefUrl = parse_url($_SERVER['HTTP_REFERER']);
|
32 |
|
|
if ($aRefUrl !== false) {
|
33 |
|
|
$aRefUrl['host'] = isset($aRefUrl['host']) ? $aRefUrl['host'] : '';
|
34 |
|
|
$aRefUrl['path'] = isset($aRefUrl['path']) ? $aRefUrl['path'] : '';
|
35 |
|
|
$aRefUrl['fragment'] = isset($aRefUrl['fragment']) ? '#'.$aRefUrl['fragment'] : '';
|
36 |
|
|
$aWbUrl = parse_url(WB_URL);
|
37 |
|
|
if ($aWbUrl !== false) {
|
38 |
|
|
$aWbUrl['host'] = isset($aWbUrl['host']) ? $aWbUrl['host'] : '';
|
39 |
|
|
$aWbUrl['path'] = isset($aWbUrl['path']) ? $aWbUrl['path'] : '';
|
40 |
|
|
if (strpos($aRefUrl['host'].$aRefUrl['path'],
|
41 |
|
|
$aWbUrl['host'].$aWbUrl['path']) !== false) {
|
42 |
|
|
$aRefUrl['path'] = preg_replace('#^'.$aWbUrl['path'].'#i', '', $aRefUrl['path']);
|
43 |
|
|
$sTmpReferer = WB_URL.$aRefUrl['path'].$aRefUrl['fragment'];
|
44 |
|
|
}
|
45 |
|
|
unset($aWbUrl);
|
46 |
|
|
}
|
47 |
|
|
unset($aRefUrl);
|
48 |
|
|
}
|
49 |
|
|
}
|
50 |
|
|
$_SERVER['HTTP_REFERER'] = $sTmpReferer;
|
51 |
|
|
}
|
52 |
1680
|
darkviper
|
/* -------------------------------------------------------- */
|
53 |
|
|
/**
|
54 |
|
|
* Autoloader to load classes according to the new WB-2.9 standard
|
55 |
|
|
* @param string $sClassName name of the requested class
|
56 |
|
|
*/
|
57 |
|
|
function CoreAutoloader($sClassName) {
|
58 |
|
|
$iCount = 0;
|
59 |
|
|
$aSearch = array('/^m_/i', '/^a_/i');
|
60 |
|
|
$aReplace = array('modules_', ADMIN_DIRECTORY.'_' );
|
61 |
|
|
$sClassName = preg_replace($aSearch, $aReplace, $sClassName, 1, $iCount);
|
62 |
|
|
if(!$iCount) { $sClassName = 'framework_'.$sClassName; }
|
63 |
|
|
$sFileName = WB_PATH.'/'.str_replace('_', '/', $sClassName).'.php';
|
64 |
|
|
if(file_exists($sFileName)) {
|
65 |
|
|
include($sFileName);
|
66 |
|
|
}
|
67 |
|
|
}
|
68 |
|
|
/* -------------------------------------------------------- */
|
69 |
|
|
function SetInstallPathConstants() {
|
70 |
|
|
if(!defined('DEBUG')){ define('DEBUG', false); }// Include config file
|
71 |
|
|
if(!defined('ADMIN_DIRECTORY')){ define('ADMIN_DIRECTORY', 'admin'); }
|
72 |
|
|
if(!preg_match('/xx[a-z0-9_][a-z0-9_\-\.]+/i', 'xx'.ADMIN_DIRECTORY)) {
|
73 |
|
|
throw new RuntimeException('Invalid admin-directory: ' . ADMIN_DIRECTORY);
|
74 |
|
|
}
|
75 |
|
|
if(!defined('WB_PATH')){ define('WB_PATH', dirname(dirname(__FILE__))); }
|
76 |
|
|
if(!defined('ADMIN_URL')){ define('ADMIN_URL', WB_URL.'/'.ADMIN_DIRECTORY); }
|
77 |
|
|
if(!defined('ADMIN_PATH')){ define('ADMIN_PATH', WB_PATH.'/'.ADMIN_DIRECTORY); }
|
78 |
|
|
if(!defined('WB_REL')){
|
79 |
|
|
$x1 = parse_url(WB_URL);
|
80 |
|
|
define('WB_REL', (isset($x1['path']) ? $x1['path'] : ''));
|
81 |
|
|
}
|
82 |
|
|
if(!defined('DOCUMENT_ROOT')) {
|
83 |
|
|
define('DOCUMENT_ROOT', preg_replace('/'.preg_quote(WB_REL, '/').'$/', '', WB_PATH));
|
84 |
|
|
}
|
85 |
|
|
}
|
86 |
|
|
/* -------------------------------------------------------- */
|
87 |
|
|
$starttime = array_sum(explode(" ",microtime()));
|
88 |
|
|
SetInstallPathConstants();
|
89 |
|
|
SanitizeHttpReferer(WB_URL); // sanitize $_SERVER['HTTP_REFERER']
|
90 |
|
|
spl_autoload_register('CoreAutoloader'); // activate core autoloader
|
91 |
1462
|
DarkViper
|
date_default_timezone_set('UTC');
|
92 |
1349
|
Luisehahne
|
// Create database class
|
93 |
1682
|
darkviper
|
$sSqlUrl = DB_TYPE.'://'.DB_USERNAME.':'.DB_PASSWORD.'@'.DB_HOST.'/'.DB_NAME;
|
94 |
|
|
$database = new Database($sSqlUrl);
|
95 |
1680
|
darkviper
|
// disable all kind of magic_quotes
|
96 |
|
|
if(get_magic_quotes_gpc() || get_magic_quotes_runtime()) {
|
97 |
|
|
@ini_set('magic_quotes_sybase', 0);
|
98 |
|
|
@ini_set('magic_quotes_gpc', 0);
|
99 |
|
|
@ini_set('magic_quotes_runtime', 0);
|
100 |
|
|
}
|
101 |
1349
|
Luisehahne
|
// Get website settings (title, keywords, description, header, and footer)
|
102 |
|
|
$query_settings = "SELECT name,value FROM ".TABLE_PREFIX."settings";
|
103 |
|
|
$get_settings = $database->query($query_settings);
|
104 |
|
|
if($database->is_error()) { die($database->get_error()); }
|
105 |
|
|
if($get_settings->numRows() == 0) { die("Settings not found"); }
|
106 |
|
|
while($setting = $get_settings->fetchRow()) {
|
107 |
|
|
$setting_name=strtoupper($setting['name']);
|
108 |
|
|
$setting_value=$setting['value'];
|
109 |
|
|
if ($setting_value=='false')
|
110 |
|
|
$setting_value=false;
|
111 |
|
|
if ($setting_value=='true')
|
112 |
|
|
$setting_value=true;
|
113 |
|
|
@define($setting_name,$setting_value);
|
114 |
|
|
}
|
115 |
1510
|
darkviper
|
@define('DO_NOT_TRACK', (isset($_SERVER['HTTP_DNT'])));
|
116 |
1349
|
Luisehahne
|
$string_file_mode = STRING_FILE_MODE;
|
117 |
|
|
define('OCTAL_FILE_MODE',(int) octdec($string_file_mode));
|
118 |
|
|
$string_dir_mode = STRING_DIR_MODE;
|
119 |
|
|
define('OCTAL_DIR_MODE',(int) octdec($string_dir_mode));
|
120 |
1465
|
Luisehahne
|
$sSecMod = (defined('SECURE_FORM_MODULE') && SECURE_FORM_MODULE != '') ? '.'.SECURE_FORM_MODULE : '';
|
121 |
1462
|
DarkViper
|
$sSecMod = WB_PATH.'/framework/SecureForm'.$sSecMod.'.php';
|
122 |
|
|
require_once($sSecMod);
|
123 |
1349
|
Luisehahne
|
if (!defined("WB_INSTALL_PROCESS")) {
|
124 |
|
|
// get CAPTCHA and ASP settings
|
125 |
|
|
$table = TABLE_PREFIX.'mod_captcha_control';
|
126 |
1462
|
DarkViper
|
if( ($get_settings = $database->query("SELECT * FROM $table LIMIT 1")) ) {
|
127 |
1349
|
Luisehahne
|
if($get_settings->numRows() == 0) { die("CAPTCHA-Settings not found"); }
|
128 |
|
|
$setting = $get_settings->fetchRow();
|
129 |
|
|
if($setting['enabled_captcha'] == '1') define('ENABLED_CAPTCHA', true);
|
130 |
|
|
else define('ENABLED_CAPTCHA', false);
|
131 |
|
|
if($setting['enabled_asp'] == '1') define('ENABLED_ASP', true);
|
132 |
|
|
else define('ENABLED_ASP', false);
|
133 |
|
|
define('CAPTCHA_TYPE', $setting['captcha_type']);
|
134 |
|
|
define('ASP_SESSION_MIN_AGE', (int)$setting['asp_session_min_age']);
|
135 |
|
|
define('ASP_VIEW_MIN_AGE', (int)$setting['asp_view_min_age']);
|
136 |
|
|
define('ASP_INPUT_MIN_AGE', (int)$setting['asp_input_min_age']);
|
137 |
|
|
}
|
138 |
|
|
}
|
139 |
|
|
|
140 |
|
|
// set error-reporting
|
141 |
|
|
if(intval(ER_LEVEL) > 0 )
|
142 |
|
|
{
|
143 |
|
|
error_reporting(ER_LEVEL);
|
144 |
1352
|
Luisehahne
|
if( intval(ini_get ( 'display_errors' )) == 0 )
|
145 |
1349
|
Luisehahne
|
{
|
146 |
|
|
ini_set('display_errors', 1);
|
147 |
|
|
}
|
148 |
|
|
}
|
149 |
|
|
// Start a session
|
150 |
|
|
if(!defined('SESSION_STARTED')) {
|
151 |
|
|
session_name(APP_NAME.'_session_id');
|
152 |
|
|
@session_start();
|
153 |
|
|
define('SESSION_STARTED', true);
|
154 |
|
|
}
|
155 |
|
|
if(defined('ENABLED_ASP') && ENABLED_ASP && !isset($_SESSION['session_started']))
|
156 |
|
|
$_SESSION['session_started'] = time();
|
157 |
|
|
|
158 |
|
|
// Get users language
|
159 |
|
|
if(isset($_GET['lang']) AND $_GET['lang'] != '' AND !is_numeric($_GET['lang']) AND strlen($_GET['lang']) == 2) {
|
160 |
1680
|
darkviper
|
define('LANGUAGE', strtoupper($_GET['lang']));
|
161 |
1349
|
Luisehahne
|
$_SESSION['LANGUAGE']=LANGUAGE;
|
162 |
|
|
} else {
|
163 |
|
|
if(isset($_SESSION['LANGUAGE']) AND $_SESSION['LANGUAGE'] != '') {
|
164 |
|
|
define('LANGUAGE', $_SESSION['LANGUAGE']);
|
165 |
|
|
} else {
|
166 |
|
|
define('LANGUAGE', DEFAULT_LANGUAGE);
|
167 |
|
|
}
|
168 |
|
|
}
|
169 |
1680
|
darkviper
|
|
170 |
1349
|
Luisehahne
|
// Load Language file
|
171 |
|
|
if(!defined('LANGUAGE_LOADED')) {
|
172 |
|
|
if(!file_exists(WB_PATH.'/languages/'.LANGUAGE.'.php')) {
|
173 |
|
|
exit('Error loading language file '.LANGUAGE.', please check configuration');
|
174 |
|
|
} else {
|
175 |
|
|
require_once(WB_PATH.'/languages/'.LANGUAGE.'.php');
|
176 |
|
|
}
|
177 |
|
|
}
|
178 |
1680
|
darkviper
|
|
179 |
1349
|
Luisehahne
|
// Get users timezone
|
180 |
|
|
if(isset($_SESSION['TIMEZONE'])) {
|
181 |
|
|
define('TIMEZONE', $_SESSION['TIMEZONE']);
|
182 |
|
|
} else {
|
183 |
|
|
define('TIMEZONE', DEFAULT_TIMEZONE);
|
184 |
|
|
}
|
185 |
|
|
// Get users date format
|
186 |
|
|
if(isset($_SESSION['DATE_FORMAT'])) {
|
187 |
|
|
define('DATE_FORMAT', $_SESSION['DATE_FORMAT']);
|
188 |
|
|
} else {
|
189 |
|
|
define('DATE_FORMAT', DEFAULT_DATE_FORMAT);
|
190 |
|
|
}
|
191 |
|
|
// Get users time format
|
192 |
|
|
if(isset($_SESSION['TIME_FORMAT'])) {
|
193 |
|
|
define('TIME_FORMAT', $_SESSION['TIME_FORMAT']);
|
194 |
|
|
} else {
|
195 |
|
|
define('TIME_FORMAT', DEFAULT_TIME_FORMAT);
|
196 |
|
|
}
|
197 |
|
|
|
198 |
|
|
// Set Theme dir
|
199 |
|
|
define('THEME_URL', WB_URL.'/templates/'.DEFAULT_THEME);
|
200 |
|
|
define('THEME_PATH', WB_PATH.'/templates/'.DEFAULT_THEME);
|
201 |
|
|
|
202 |
1680
|
darkviper
|
// extended wb_settings
|
203 |
1349
|
Luisehahne
|
define('EDIT_ONE_SECTION', false);
|
204 |
|
|
|
205 |
|
|
define('EDITOR_WIDTH', 0);
|