WB 2.08.x

<?php

/**

 *

 * @category        framework

 * @package         initialize

 * @author          WebsiteBaker Project

 * @copyright       2004-2009, Ryan Djurovich

 * @copyright       2009-2011, Website Baker Org. e.V.

 * @link			http://www.websitebaker2.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.x

 * @filesource		$HeadURL$

 * @lastmodified    $Date$

 *

 */

// Must include code to stop this file being accessed directly

 * sanitize $_SERVER['HTTP_REFERER']

 * @param string $sWbUrl qualified startup URL of current application

 */

	function SanitizeHttpReferer($sWbUrl = WB_URL) {

		$sTmpReferer = '';

		if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER'] != '') {

			$aRefUrl = parse_url($_SERVER['HTTP_REFERER']);

			if ($aRefUrl !== false) {

				$aRefUrl['host'] = isset($aRefUrl['host']) ? $aRefUrl['host'] : '';

				$aRefUrl['path'] = isset($aRefUrl['path']) ? $aRefUrl['path'] : '';

				$aRefUrl['fragment'] = isset($aRefUrl['fragment']) ? '#'.$aRefUrl['fragment'] : '';

				$aWbUrl = parse_url(WB_URL);

				if ($aWbUrl !== false) {

					$aWbUrl['host'] = isset($aWbUrl['host']) ? $aWbUrl['host'] : '';

					$aWbUrl['path'] = isset($aWbUrl['path']) ? $aWbUrl['path'] : '';

					if (strpos($aRefUrl['host'].$aRefUrl['path'],

							   $aWbUrl['host'].$aWbUrl['path']) !== false) {

						$aRefUrl['path'] = preg_replace('#^'.$aWbUrl['path'].'#i', '', $aRefUrl['path']);

						$sTmpReferer = WB_URL.$aRefUrl['path'].$aRefUrl['fragment'];

					}

					unset($aWbUrl);

				}

				unset($aRefUrl);

			}

		}

		$_SERVER['HTTP_REFERER'] = $sTmpReferer;

	}

	function SetInstallPathConstants() {

		if(!defined('DEBUG')){ define('DEBUG', false); }// Include config file

		if(!defined('ADMIN_DIRECTORY')){ define('ADMIN_DIRECTORY', 'admin'); }

		if(!preg_match('/xx[a-z0-9_][a-z0-9_\-\.]+/i', 'xx'.ADMIN_DIRECTORY)) {

			throw new RuntimeException('Invalid admin-directory: ' . ADMIN_DIRECTORY);

		}

		if(!defined('WB_PATH')){ define('WB_PATH', dirname(dirname(__FILE__))); }

		if(!defined('ADMIN_URL')){ define('ADMIN_URL', WB_URL.'/'.ADMIN_DIRECTORY); }

		if(!defined('ADMIN_PATH')){ define('ADMIN_PATH', WB_PATH.'/'.ADMIN_DIRECTORY); }

		if(!defined('WB_REL')){

			$x1 = parse_url(WB_URL);

			define('WB_REL', (isset($x1['path']) ? $x1['path'] : ''));

		}

		if(!defined('DOCUMENT_ROOT')) {

			define('DOCUMENT_ROOT', preg_replace('/'.preg_quote(WB_REL, '/').'$/', '', WB_PATH));

		}

	}

/* -------------------------------------------------------- */

	$starttime = array_sum(explode(" ",microtime()));

	SetInstallPathConstants();

	SanitizeHttpReferer(WB_URL); // sanitize $_SERVER['HTTP_REFERER']

	WbAutoloader::doRegister(array(ADMIN_DIRECTORY=>'a', 'modules'=>'m'));

	require_once dirname(dirname(__FILE__)).'/include/Twig/Autoloader.php';

	Twig_Autoloader::register();

	if(get_magic_quotes_gpc() || get_magic_quotes_runtime()) {

		@ini_set('magic_quotes_sybase', 0);

		@ini_set('magic_quotes_gpc', 0);

		@ini_set('magic_quotes_runtime', 0);

	}

	$query_settings = "SELECT name,value FROM ".TABLE_PREFIX."settings";

	$get_settings = $database->query($query_settings);

	if($database->is_error()) { die($database->get_error()); }

	if($get_settings->numRows() == 0) { die("Settings not found"); }

	while($setting = $get_settings->fetchRow()) {

		$setting_name=strtoupper($setting['name']);

		$setting_value=$setting['value'];

		if ($setting_value=='false')

			$setting_value=false;

		if ($setting_value=='true')

			$setting_value=true;

		@define($setting_name,$setting_value);

	}

	define('OCTAL_FILE_MODE',(int) octdec($string_file_mode));

	$string_dir_mode = STRING_DIR_MODE;

	define('OCTAL_DIR_MODE',(int) octdec($string_dir_mode));

	require_once($sSecMod);

		// get CAPTCHA and ASP settings

		$table = TABLE_PREFIX.'mod_captcha_control';

			$setting = $get_settings->fetchRow();

			if($setting['enabled_captcha'] == '1') define('ENABLED_CAPTCHA', true);

			else define('ENABLED_CAPTCHA', false);

			if($setting['enabled_asp'] == '1') define('ENABLED_ASP', true);

			else define('ENABLED_ASP', false);

			define('CAPTCHA_TYPE', $setting['captcha_type']);

			define('ASP_SESSION_MIN_AGE', (int)$setting['asp_session_min_age']);

			define('ASP_VIEW_MIN_AGE', (int)$setting['asp_view_min_age']);

			define('ASP_INPUT_MIN_AGE', (int)$setting['asp_input_min_age']);

		}

	}

	// set error-reporting

	if(intval(ER_LEVEL) > 0 )

	{

		error_reporting(ER_LEVEL);

			ini_set('display_errors', 1);

		}

	}

	// Start a session

	if(!defined('SESSION_STARTED')) {

		session_name(APP_NAME.'_session_id');

		@session_start();

		define('SESSION_STARTED', true);

	}

	if(defined('ENABLED_ASP') && ENABLED_ASP && !isset($_SESSION['session_started']))

		$_SESSION['session_started'] = time();

	// Get users language

	if(isset($_GET['lang']) AND $_GET['lang'] != '' AND !is_numeric($_GET['lang']) AND strlen($_GET['lang']) == 2) {

	} else {

		if(isset($_SESSION['LANGUAGE']) AND $_SESSION['LANGUAGE'] != '') {

			define('LANGUAGE', $_SESSION['LANGUAGE']);

		} else {

			define('LANGUAGE', DEFAULT_LANGUAGE);

		}

	}

	if(!defined('LANGUAGE_LOADED')) {

		if(!file_exists(WB_PATH.'/languages/'.LANGUAGE.'.php')) {

			exit('Error loading language file '.LANGUAGE.', please check configuration');

		} else {

			require_once(WB_PATH.'/languages/'.LANGUAGE.'.php');

		}

	}

	if(isset($_SESSION['TIMEZONE'])) {

		define('TIMEZONE', $_SESSION['TIMEZONE']);

	} else {

		define('TIMEZONE', DEFAULT_TIMEZONE);

	}

	// Get users date format

	if(isset($_SESSION['DATE_FORMAT'])) {

		define('DATE_FORMAT', $_SESSION['DATE_FORMAT']);

	} else {

		define('DATE_FORMAT', DEFAULT_DATE_FORMAT);

	}

	// Get users time format

	if(isset($_SESSION['TIME_FORMAT'])) {

		define('TIME_FORMAT', $_SESSION['TIME_FORMAT']);

	} else {

		define('TIME_FORMAT', DEFAULT_TIME_FORMAT);

	}

	// Set Theme dir

	define('THEME_URL', WB_URL.'/templates/'.DEFAULT_THEME);

	define('THEME_PATH', WB_PATH.'/templates/'.DEFAULT_THEME);

	define('EDITOR_WIDTH', 0);