| 1 |
1349
|
Luisehahne
|
<?php
|
| 2 |
|
|
/**
|
| 3 |
|
|
*
|
| 4 |
|
|
* @category framework
|
| 5 |
|
|
* @package initialize
|
| 6 |
|
|
* @author WebsiteBaker Project
|
| 7 |
|
|
* @copyright 2004-2009, Ryan Djurovich
|
| 8 |
|
|
* @copyright 2009-2011, Website Baker Org. e.V.
|
| 9 |
|
|
* @link http://www.websitebaker2.org/
|
| 10 |
|
|
* @license http://www.gnu.org/licenses/gpl.html
|
| 11 |
|
|
* @platform WebsiteBaker 2.8.x
|
| 12 |
1374
|
Luisehahne
|
* @requirements PHP 5.2.2 and higher
|
| 13 |
1349
|
Luisehahne
|
* @version $Id$
|
| 14 |
|
|
* @filesource $HeadURL$
|
| 15 |
|
|
* @lastmodified $Date$
|
| 16 |
|
|
*
|
| 17 |
|
|
*/
|
| 18 |
|
|
|
| 19 |
1488
|
DarkViper
|
/* -------------------------------------------------------- */
|
| 20 |
|
|
// Must include code to stop this file being accessed directly
|
| 21 |
1499
|
DarkViper
|
require_once(dirname(__FILE__).'/globalExceptionHandler.php');
|
| 22 |
1637
|
darkviper
|
if(!defined('WB_URL')) { throw new IllegalFileException(); }
|
| 23 |
1488
|
DarkViper
|
/* -------------------------------------------------------- */
|
| 24 |
1617
|
darkviper
|
/**
|
| 25 |
|
|
* sanitize $_SERVER['HTTP_REFERER']
|
| 26 |
|
|
* @param string $sWbUrl qualified startup URL of current application
|
| 27 |
|
|
*/
|
| 28 |
|
|
function SanitizeHttpReferer($sWbUrl = WB_URL) {
|
| 29 |
|
|
$sTmpReferer = '';
|
| 30 |
|
|
if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER'] != '') {
|
| 31 |
|
|
$aRefUrl = parse_url($_SERVER['HTTP_REFERER']);
|
| 32 |
|
|
if ($aRefUrl !== false) {
|
| 33 |
|
|
$aRefUrl['host'] = isset($aRefUrl['host']) ? $aRefUrl['host'] : '';
|
| 34 |
|
|
$aRefUrl['path'] = isset($aRefUrl['path']) ? $aRefUrl['path'] : '';
|
| 35 |
|
|
$aRefUrl['fragment'] = isset($aRefUrl['fragment']) ? '#'.$aRefUrl['fragment'] : '';
|
| 36 |
|
|
$aWbUrl = parse_url(WB_URL);
|
| 37 |
|
|
if ($aWbUrl !== false) {
|
| 38 |
|
|
$aWbUrl['host'] = isset($aWbUrl['host']) ? $aWbUrl['host'] : '';
|
| 39 |
|
|
$aWbUrl['path'] = isset($aWbUrl['path']) ? $aWbUrl['path'] : '';
|
| 40 |
|
|
if (strpos($aRefUrl['host'].$aRefUrl['path'],
|
| 41 |
|
|
$aWbUrl['host'].$aWbUrl['path']) !== false) {
|
| 42 |
|
|
$aRefUrl['path'] = preg_replace('#^'.$aWbUrl['path'].'#i', '', $aRefUrl['path']);
|
| 43 |
|
|
$sTmpReferer = WB_URL.$aRefUrl['path'].$aRefUrl['fragment'];
|
| 44 |
|
|
}
|
| 45 |
|
|
unset($aWbUrl);
|
| 46 |
|
|
}
|
| 47 |
|
|
unset($aRefUrl);
|
| 48 |
|
|
}
|
| 49 |
|
|
}
|
| 50 |
|
|
$_SERVER['HTTP_REFERER'] = $sTmpReferer;
|
| 51 |
|
|
}
|
| 52 |
1680
|
darkviper
|
/* -------------------------------------------------------- */
|
| 53 |
|
|
/**
|
| 54 |
|
|
* Autoloader to load classes according to the new WB-2.9 standard
|
| 55 |
|
|
* @param string $sClassName name of the requested class
|
| 56 |
|
|
*/
|
| 57 |
|
|
function CoreAutoloader($sClassName) {
|
| 58 |
|
|
$iCount = 0;
|
| 59 |
|
|
$aSearch = array('/^m_/i', '/^a_/i');
|
| 60 |
|
|
$aReplace = array('modules_', ADMIN_DIRECTORY.'_' );
|
| 61 |
|
|
$sClassName = preg_replace($aSearch, $aReplace, $sClassName, 1, $iCount);
|
| 62 |
|
|
if(!$iCount) { $sClassName = 'framework_'.$sClassName; }
|
| 63 |
|
|
$sFileName = WB_PATH.'/'.str_replace('_', '/', $sClassName).'.php';
|
| 64 |
|
|
if(file_exists($sFileName)) {
|
| 65 |
|
|
include($sFileName);
|
| 66 |
|
|
}
|
| 67 |
|
|
}
|
| 68 |
|
|
/* -------------------------------------------------------- */
|
| 69 |
|
|
function SetInstallPathConstants() {
|
| 70 |
|
|
if(!defined('DEBUG')){ define('DEBUG', false); }// Include config file
|
| 71 |
|
|
if(!defined('ADMIN_DIRECTORY')){ define('ADMIN_DIRECTORY', 'admin'); }
|
| 72 |
|
|
if(!preg_match('/xx[a-z0-9_][a-z0-9_\-\.]+/i', 'xx'.ADMIN_DIRECTORY)) {
|
| 73 |
|
|
throw new RuntimeException('Invalid admin-directory: ' . ADMIN_DIRECTORY);
|
| 74 |
|
|
}
|
| 75 |
|
|
if(!defined('WB_PATH')){ define('WB_PATH', dirname(dirname(__FILE__))); }
|
| 76 |
|
|
if(!defined('ADMIN_URL')){ define('ADMIN_URL', WB_URL.'/'.ADMIN_DIRECTORY); }
|
| 77 |
|
|
if(!defined('ADMIN_PATH')){ define('ADMIN_PATH', WB_PATH.'/'.ADMIN_DIRECTORY); }
|
| 78 |
|
|
if(!defined('WB_REL')){
|
| 79 |
|
|
$x1 = parse_url(WB_URL);
|
| 80 |
|
|
define('WB_REL', (isset($x1['path']) ? $x1['path'] : ''));
|
| 81 |
|
|
}
|
| 82 |
|
|
if(!defined('DOCUMENT_ROOT')) {
|
| 83 |
|
|
define('DOCUMENT_ROOT', preg_replace('/'.preg_quote(WB_REL, '/').'$/', '', WB_PATH));
|
| 84 |
|
|
}
|
| 85 |
|
|
}
|
| 86 |
|
|
/* -------------------------------------------------------- */
|
| 87 |
|
|
$starttime = array_sum(explode(" ",microtime()));
|
| 88 |
|
|
SetInstallPathConstants();
|
| 89 |
|
|
SanitizeHttpReferer(WB_URL); // sanitize $_SERVER['HTTP_REFERER']
|
| 90 |
|
|
spl_autoload_register('CoreAutoloader'); // activate core autoloader
|
| 91 |
1462
|
DarkViper
|
date_default_timezone_set('UTC');
|
| 92 |
1349
|
Luisehahne
|
// Create database class
|
| 93 |
1682
|
darkviper
|
$sSqlUrl = DB_TYPE.'://'.DB_USERNAME.':'.DB_PASSWORD.'@'.DB_HOST.'/'.DB_NAME;
|
| 94 |
|
|
$database = new Database($sSqlUrl);
|
| 95 |
1680
|
darkviper
|
// disable all kind of magic_quotes
|
| 96 |
|
|
if(get_magic_quotes_gpc() || get_magic_quotes_runtime()) {
|
| 97 |
|
|
@ini_set('magic_quotes_sybase', 0);
|
| 98 |
|
|
@ini_set('magic_quotes_gpc', 0);
|
| 99 |
|
|
@ini_set('magic_quotes_runtime', 0);
|
| 100 |
|
|
}
|
| 101 |
1349
|
Luisehahne
|
// Get website settings (title, keywords, description, header, and footer)
|
| 102 |
|
|
$query_settings = "SELECT name,value FROM ".TABLE_PREFIX."settings";
|
| 103 |
|
|
$get_settings = $database->query($query_settings);
|
| 104 |
|
|
if($database->is_error()) { die($database->get_error()); }
|
| 105 |
|
|
if($get_settings->numRows() == 0) { die("Settings not found"); }
|
| 106 |
|
|
while($setting = $get_settings->fetchRow()) {
|
| 107 |
|
|
$setting_name=strtoupper($setting['name']);
|
| 108 |
|
|
$setting_value=$setting['value'];
|
| 109 |
|
|
if ($setting_value=='false')
|
| 110 |
|
|
$setting_value=false;
|
| 111 |
|
|
if ($setting_value=='true')
|
| 112 |
|
|
$setting_value=true;
|
| 113 |
|
|
@define($setting_name,$setting_value);
|
| 114 |
|
|
}
|
| 115 |
1510
|
darkviper
|
@define('DO_NOT_TRACK', (isset($_SERVER['HTTP_DNT'])));
|
| 116 |
1349
|
Luisehahne
|
$string_file_mode = STRING_FILE_MODE;
|
| 117 |
|
|
define('OCTAL_FILE_MODE',(int) octdec($string_file_mode));
|
| 118 |
|
|
$string_dir_mode = STRING_DIR_MODE;
|
| 119 |
|
|
define('OCTAL_DIR_MODE',(int) octdec($string_dir_mode));
|
| 120 |
1465
|
Luisehahne
|
$sSecMod = (defined('SECURE_FORM_MODULE') && SECURE_FORM_MODULE != '') ? '.'.SECURE_FORM_MODULE : '';
|
| 121 |
1462
|
DarkViper
|
$sSecMod = WB_PATH.'/framework/SecureForm'.$sSecMod.'.php';
|
| 122 |
|
|
require_once($sSecMod);
|
| 123 |
1349
|
Luisehahne
|
if (!defined("WB_INSTALL_PROCESS")) {
|
| 124 |
|
|
// get CAPTCHA and ASP settings
|
| 125 |
|
|
$table = TABLE_PREFIX.'mod_captcha_control';
|
| 126 |
1462
|
DarkViper
|
if( ($get_settings = $database->query("SELECT * FROM $table LIMIT 1")) ) {
|
| 127 |
1349
|
Luisehahne
|
if($get_settings->numRows() == 0) { die("CAPTCHA-Settings not found"); }
|
| 128 |
|
|
$setting = $get_settings->fetchRow();
|
| 129 |
|
|
if($setting['enabled_captcha'] == '1') define('ENABLED_CAPTCHA', true);
|
| 130 |
|
|
else define('ENABLED_CAPTCHA', false);
|
| 131 |
|
|
if($setting['enabled_asp'] == '1') define('ENABLED_ASP', true);
|
| 132 |
|
|
else define('ENABLED_ASP', false);
|
| 133 |
|
|
define('CAPTCHA_TYPE', $setting['captcha_type']);
|
| 134 |
|
|
define('ASP_SESSION_MIN_AGE', (int)$setting['asp_session_min_age']);
|
| 135 |
|
|
define('ASP_VIEW_MIN_AGE', (int)$setting['asp_view_min_age']);
|
| 136 |
|
|
define('ASP_INPUT_MIN_AGE', (int)$setting['asp_input_min_age']);
|
| 137 |
|
|
}
|
| 138 |
|
|
}
|
| 139 |
|
|
|
| 140 |
|
|
// set error-reporting
|
| 141 |
|
|
if(intval(ER_LEVEL) > 0 )
|
| 142 |
|
|
{
|
| 143 |
|
|
error_reporting(ER_LEVEL);
|
| 144 |
1352
|
Luisehahne
|
if( intval(ini_get ( 'display_errors' )) == 0 )
|
| 145 |
1349
|
Luisehahne
|
{
|
| 146 |
|
|
ini_set('display_errors', 1);
|
| 147 |
|
|
}
|
| 148 |
|
|
}
|
| 149 |
|
|
// Start a session
|
| 150 |
|
|
if(!defined('SESSION_STARTED')) {
|
| 151 |
|
|
session_name(APP_NAME.'_session_id');
|
| 152 |
|
|
@session_start();
|
| 153 |
|
|
define('SESSION_STARTED', true);
|
| 154 |
|
|
}
|
| 155 |
|
|
if(defined('ENABLED_ASP') && ENABLED_ASP && !isset($_SESSION['session_started']))
|
| 156 |
|
|
$_SESSION['session_started'] = time();
|
| 157 |
|
|
|
| 158 |
|
|
// Get users language
|
| 159 |
|
|
if(isset($_GET['lang']) AND $_GET['lang'] != '' AND !is_numeric($_GET['lang']) AND strlen($_GET['lang']) == 2) {
|
| 160 |
1680
|
darkviper
|
define('LANGUAGE', strtoupper($_GET['lang']));
|
| 161 |
1349
|
Luisehahne
|
$_SESSION['LANGUAGE']=LANGUAGE;
|
| 162 |
|
|
} else {
|
| 163 |
|
|
if(isset($_SESSION['LANGUAGE']) AND $_SESSION['LANGUAGE'] != '') {
|
| 164 |
|
|
define('LANGUAGE', $_SESSION['LANGUAGE']);
|
| 165 |
|
|
} else {
|
| 166 |
|
|
define('LANGUAGE', DEFAULT_LANGUAGE);
|
| 167 |
|
|
}
|
| 168 |
|
|
}
|
| 169 |
1680
|
darkviper
|
|
| 170 |
1349
|
Luisehahne
|
// Load Language file
|
| 171 |
|
|
if(!defined('LANGUAGE_LOADED')) {
|
| 172 |
|
|
if(!file_exists(WB_PATH.'/languages/'.LANGUAGE.'.php')) {
|
| 173 |
|
|
exit('Error loading language file '.LANGUAGE.', please check configuration');
|
| 174 |
|
|
} else {
|
| 175 |
|
|
require_once(WB_PATH.'/languages/'.LANGUAGE.'.php');
|
| 176 |
|
|
}
|
| 177 |
|
|
}
|
| 178 |
1680
|
darkviper
|
|
| 179 |
1349
|
Luisehahne
|
// Get users timezone
|
| 180 |
|
|
if(isset($_SESSION['TIMEZONE'])) {
|
| 181 |
|
|
define('TIMEZONE', $_SESSION['TIMEZONE']);
|
| 182 |
|
|
} else {
|
| 183 |
|
|
define('TIMEZONE', DEFAULT_TIMEZONE);
|
| 184 |
|
|
}
|
| 185 |
|
|
// Get users date format
|
| 186 |
|
|
if(isset($_SESSION['DATE_FORMAT'])) {
|
| 187 |
|
|
define('DATE_FORMAT', $_SESSION['DATE_FORMAT']);
|
| 188 |
|
|
} else {
|
| 189 |
|
|
define('DATE_FORMAT', DEFAULT_DATE_FORMAT);
|
| 190 |
|
|
}
|
| 191 |
|
|
// Get users time format
|
| 192 |
|
|
if(isset($_SESSION['TIME_FORMAT'])) {
|
| 193 |
|
|
define('TIME_FORMAT', $_SESSION['TIME_FORMAT']);
|
| 194 |
|
|
} else {
|
| 195 |
|
|
define('TIME_FORMAT', DEFAULT_TIME_FORMAT);
|
| 196 |
|
|
}
|
| 197 |
|
|
|
| 198 |
|
|
// Set Theme dir
|
| 199 |
|
|
define('THEME_URL', WB_URL.'/templates/'.DEFAULT_THEME);
|
| 200 |
|
|
define('THEME_PATH', WB_PATH.'/templates/'.DEFAULT_THEME);
|
| 201 |
|
|
|
| 202 |
1680
|
darkviper
|
// extended wb_settings
|
| 203 |
1349
|
Luisehahne
|
define('EDIT_ONE_SECTION', false);
|
| 204 |
|
|
|
| 205 |
|
|
define('EDITOR_WIDTH', 0);
|