Project

General

Profile

1 1348 Luisehahne
<?php
2
/**
3
 *
4
 * @category        admin
5
 * @package         settings
6
 * @author          WebsiteBaker Project
7 1716 Luisehahne
 * @copyright       2009-2012, WebsiteBaker Org. e.V.
8 1348 Luisehahne
 * @link			http://www.websitebaker2.org/
9
 * @license         http://www.gnu.org/licenses/gpl.html
10
 * @platform        WebsiteBaker 2.8.x
11 1374 Luisehahne
 * @requirements    PHP 5.2.2 and higher
12 1348 Luisehahne
 * @version         $Id$
13
 * @filesource		$HeadURL$
14
 * @lastmodified    $Date$
15
 *
16
 */
17
18
// prevent this file from being accessed directly in the browser (would set all entries in DB settings table to '')
19
if(!isset($_POST['default_language']) || $_POST['default_language'] == '') die(header('Location: index.php'));
20
21
// Find out if the user was view advanced options or not
22
$advanced = ($_POST['advanced'] == 'yes') ? '?advanced=yes' : '';
23
24
// Print admin header
25 1785 Luisehahne
//require('../../config.php');
26
//require_once(WB_PATH.'/framework/class.admin.php');
27
28
// Include config file
29
$config_file = realpath('../../config.php');
30
if(file_exists($config_file) && !defined('WB_URL'))
31
{
32
	require($config_file);
33
}
34
35
if(!class_exists('admin', false)){ include(WB_PATH.'/framework/class.admin.php'); }
36
37 1767 Luisehahne
require_once(WB_PATH.'/framework/functions.php');
38 1348 Luisehahne
39 1457 Luisehahne
// suppress to print the header, so no new FTAN will be set
40 1348 Luisehahne
if($advanced == '')
41
{
42 1457 Luisehahne
	$admin = new admin('Settings', 'settings_basic',false);
43 1348 Luisehahne
} else {
44 1457 Luisehahne
	$admin = new admin('Settings', 'settings_advanced',false);
45 1348 Luisehahne
}
46
47 1425 Luisehahne
// Create a javascript back link
48
$js_back = ADMIN_URL.'/settings/index.php'.$advanced;
49 1355 FrankH
if( !$admin->checkFTAN() )
50
{
51 1457 Luisehahne
	$admin->print_header();
52 1425 Luisehahne
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],$js_back );
53 1355 FrankH
}
54 1457 Luisehahne
// After check print the header
55
$admin->print_header();
56 1355 FrankH
57 1348 Luisehahne
// Ensure that the specified default email is formally valid
58
if(isset($_POST['server_email']))
59
{
60
	$_POST['server_email'] = strip_tags($_POST['server_email']);
61 1716 Luisehahne
//    // $pattern = '/^[-a-z0-9~!$%^&*_=+}{\'?]+(\.[-a-z0-9~!$%^&*_=+}{\'?]+)*@([a-z0-9]([-a-z0-9_]?[a-z0-9])*(\.[-a-z0-9_]+)*\.(aero|arpa|biz|com|coop|edu|gov|info|int|mil|museum|name|net|org|pro|travel|mobi|[a-z]{2})|([1]?\d{1,2}|2[0-4]{1}\d{1}|25[0-5]{1})(\.([1]?\d{1,2}|2[0-4]{1}\d{1}|25[0-5]{1})){3})(:[0-9]{1,5})?\r/im';
62
//    $pattern = '/^[_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*\.(([0-9]{1,3})|([a-zA-Z]{2,6}))$/';
63
//    if(false == preg_match($pattern, $_POST['server_email']))
64
	if(!$admin->validate_email($_POST['server_email']))
65 1348 Luisehahne
    {
66 1572 Luisehahne
		$admin->print_error($MESSAGE['USERS_INVALID_EMAIL'].
67 1348 Luisehahne
			'<br /><strong>Email: '.htmlentities($_POST['server_email']).'</strong>', $js_back);
68
	}
69
}
70
71 1777 Luisehahne
if($admin->StripCodeFromText($admin->get_post('wbmailer_routine'))=='smtp') {
72 1572 Luisehahne
73 1777 Luisehahne
	$checkSmtpHost = (($admin->StripCodeFromText($admin->get_post('wbmailer_smtp_host'))=='') ? false : true);
74
//	$checkSmtpHost = (isset($_POST['wbmailer_smtp_host']) && ($_POST['wbmailer_smtp_host']=='') ? false : true);
75
	$checkSmtpUser = (($admin->StripCodeFromText($admin->get_post('wbmailer_smtp_username'))=='') ? false : true);
76
//	$checkSmtpUser = (isset($_POST['wbmailer_smtp_username']) && ($_POST['wbmailer_smtp_username']=='') ? false : true);
77
	$checkSmtpPassword = (($admin->StripCodeFromText($admin->get_post('wbmailer_smtp_password'))=='') ? false : true);
78
//	$checkSmtpPassword = (isset($_POST['wbmailer_smtp_password']) && ($_POST['wbmailer_smtp_password']=='') ? false : true);
79
80 1572 Luisehahne
	if(!$checkSmtpHost || !$checkSmtpUser || !$checkSmtpPassword) {
81
		$admin->print_error($TEXT['REQUIRED'].' '.$TEXT['WBMAILER_SMTP_AUTH'].
82
			'<br /><strong>'.$MESSAGE['GENERIC_FILL_IN_ALL'].'</strong>', $js_back);
83
	}
84
85
}
86
87 1348 Luisehahne
// Work-out file mode
88
if($advanced == '')
89
{
90 1777 Luisehahne
	$file_mode = STRING_FILE_MODE;
91
	$dir_mode = STRING_DIR_MODE;
92 1348 Luisehahne
	// Check if should be set to 777 or left alone
93 1777 Luisehahne
//	if(isset($_POST['world_writeable']) && $_POST['world_writeable'] == 'true')
94
//    {
95
//		$file_mode = '0777';
96
//		$dir_mode = '0777';
97
//	} else {
98
//		$file_mode = STRING_FILE_MODE;
99
//		$dir_mode = STRING_DIR_MODE;
100
//	}
101 1348 Luisehahne
} else {
102 1577 Luisehahne
	$file_mode = STRING_FILE_MODE;
103
	$dir_mode = STRING_DIR_MODE;
104
	if($admin->get_user_id()=='1')
105
	{
106
		// Work-out the octal value for file mode
107
		$u = 0;
108
		if(isset($_POST['file_u_r']) && $_POST['file_u_r'] == 'true') {
109
			$u = $u+4;
110
		}
111
		if(isset($_POST['file_u_w']) && $_POST['file_u_w'] == 'true') {
112
			$u = $u+2;
113
		}
114
		if(isset($_POST['file_u_e']) && $_POST['file_u_e'] == 'true') {
115
			$u = $u+1;
116
		}
117
		$g = 0;
118
		if(isset($_POST['file_g_r']) && $_POST['file_g_r'] == 'true') {
119
			$g = $g+4;
120
		}
121
		if(isset($_POST['file_g_w']) && $_POST['file_g_w'] == 'true') {
122
			$g = $g+2;
123
		}
124
		if(isset($_POST['file_g_e']) && $_POST['file_g_e'] == 'true') {
125
			$g = $g+1;
126
		}
127
		$o = 0;
128
		if(isset($_POST['file_o_r']) && $_POST['file_o_r'] == 'true') {
129
			$o = $o+4;
130
		}
131
		if(isset($_POST['file_o_w']) && $_POST['file_o_w'] == 'true') {
132
			$o = $o+2;
133
		}
134
		if(isset($_POST['file_o_e']) && $_POST['file_o_e'] == 'true') {
135
			$o = $o+1;
136
		}
137
		$file_mode = "0".$u.$g.$o;
138
		// Work-out the octal value for dir mode
139
		$u = 0;
140
		if(isset($_POST['dir_u_r']) && $_POST['dir_u_r'] == 'true') {
141
			$u = $u+4;
142
		}
143
		if(isset($_POST['dir_u_w']) && $_POST['dir_u_w'] == 'true') {
144
			$u = $u+2;
145
		}
146
		if(isset($_POST['dir_u_e']) && $_POST['dir_u_e'] == 'true') {
147
			$u = $u+1;
148
		}
149
		$g = 0;
150
		if(isset($_POST['dir_g_r']) && $_POST['dir_g_r'] == 'true') {
151
			$g = $g+4;
152
		}
153
		if(isset($_POST['dir_g_w']) && $_POST['dir_g_w'] == 'true') {
154
			$g = $g+2;
155
		}
156
		if(isset($_POST['dir_g_e']) && $_POST['dir_g_e'] == 'true') {
157
			$g = $g+1;
158
		}
159
		$o = 0;
160
		if(isset($_POST['dir_o_r']) && $_POST['dir_o_r'] == 'true') {
161
			$o = $o+4;
162
		}
163
		if(isset($_POST['dir_o_w']) && $_POST['dir_o_w'] == 'true') {
164
			$o = $o+2;
165
		}
166
		if(isset($_POST['dir_o_e']) && $_POST['dir_o_e'] == 'true') {
167
			$o = $o+1;
168
		}
169
		$dir_mode = "0".$u.$g.$o;
170 1348 Luisehahne
	}
171
}
172
173 1777 Luisehahne
$allow_tags_in_fields = array(
174
    'website_header',
175
    'website_footer',
176
    'website_signature'
177
    );
178
$allow_empty_values = array(
179
    'website_header',
180
    'website_footer',
181
    'website_signature',
182
    'wysiwyg_style',
183
    'pages_directory',
184
    'page_icon_dir',
185
    'rename_files_on_upload',
186
    'page_spacer',
187
    'website_signature',
188
    'page_icon_dir',
189
    'modules_upgrade_list'
190
    );
191
$disallow_in_fields = array(
192
    'pages_directory',
193
    'media_directory',
194
    'wb_version'
195
    );
196
$StripCodeFromInput = array(
197
    'website_title',
198
    'website_description',
199
    'website_keywords',
200
    'wysiwyg_style',
201
    'search_module_order',
202
    'search_max_excerpt',
203
    'search_time_limit',
204
    'pages_directory',
205
    'page_icon_dir',
206
    'media_directory',
207
    'page_extension',
208
    'rename_files_on_upload',
209
    'page_spacer',
210
    'page_icon_dir',
211
    'modules_upgrade_list'
212
    );
213 1348 Luisehahne
214 1767 Luisehahne
$bRebuildAccessFiles = ( (isset( $_POST['rebuild_access_files']) && ( $_POST['rebuild_access_files'] == true )) ? true : false ) ;
215
216 1348 Luisehahne
// Query current settings in the db, then loop through them and update the db with the new value
217 1354 Luisehahne
$settings = array();
218
$old_settings = array();
219
// Query current settings in the db, then loop through them to get old values
220
$sql = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'settings`';
221
$sql .= 'ORDER BY `name`';
222
223 1572 Luisehahne
if($res_settings = $database->query($sql)) {
224
	$passed = false;
225 1785 Luisehahne
	while($setting = $res_settings->fetchRow(MYSQL_ASSOC))
226 1572 Luisehahne
	{
227
		$setting_name = $setting['name'];
228 1767 Luisehahne
		$old_settings[$setting_name] = $setting['value'];
229 1572 Luisehahne
		$value = $admin->get_post($setting_name);
230
		$value = isset($_POST[$setting_name]) ? $value : $old_settings[$setting_name] ;
231
		switch ($setting_name) {
232
			case 'default_timezone':
233
				$value=$value*60*60;
234
				$passed = true;
235
				break;
236
			case 'string_dir_mode':
237
				$value=$dir_mode;
238
				$passed = true;
239
				break;
240
			case 'string_file_mode':
241
				$value=$file_mode;
242
	 			$passed = true;
243 1767 Luisehahne
    			break;
244 1745 Luisehahne
			case 'sec_anchor':
245 1777 Luisehahne
                $value = $admin->StripCodeFromText($value);
246 1745 Luisehahne
				$value=(($value=='') ? 'section_' : $value);
247
	 			$passed = true;
248 1767 Luisehahne
				break;
249 1572 Luisehahne
			case 'pages_directory':
250 1777 Luisehahne
                $value = $admin->StripCodeFromText($value);
251 1767 Luisehahne
                $bNewPageFile = ( ( $value!= $old_settings['pages_directory'] ) ? true :  false );
252
	 			$passed = $bNewPageFile;
253
                $sGetId = '&amp;id='.$bNewPageFile;
254
//                if(!is_dir(WB_PATH.$value) && is_writable(WB_PATH)) {
255
//                    $passed = make_dir(WB_PATH.$value);
256
//                }
257
                $value  = (($passed == true) ? $value : $old_settings['pages_directory']);
258
                $sPageDirectory = $value;
259 1572 Luisehahne
				break;
260
			case 'wbmailer_smtp_auth':
261
				// $value = isset($_POST[$setting_name]) ? $_POST[$setting_name] : '' ;
262
				$value = true ;
263
	 			$passed = true;
264
				break;
265
			default :
266 1777 Luisehahne
                $passed = in_array($setting_name, $allow_empty_values);
267
                if(in_array($setting_name, $StripCodeFromInput) ) {
268
                    $value = $admin->StripCodeFromText($value);
269
                }
270 1572 Luisehahne
				break;
271
		}
272 1348 Luisehahne
273 1572 Luisehahne
	    if (!in_array($setting_name, $allow_tags_in_fields))
274
	    {
275
	        $value = strip_tags($value);
276
	    }
277 1348 Luisehahne
278 1572 Luisehahne
	    if ( !in_array($value, $disallow_in_fields) && (isset($_POST[$setting_name]) || $passed == true) )
279
	    {
280
	        $value = trim($admin->add_slashes($value));
281
	        $sql = 'UPDATE `'.TABLE_PREFIX.'settings` ';
282 1777 Luisehahne
	        $sql .= 'SET `value` = \''.($value).'\' '; // mysql_escape_string
283 1572 Luisehahne
	        $sql .= 'WHERE `name` != \'wb_version\' ';
284
	        $sql .= 'AND `name` = \''.$setting_name.'\' ';
285
	        if (!$database->query($sql))
286
	        {
287
				if($database->is_error()) {
288
					$admin->print_error($database->get_error, $js_back );
289
				}
290
	        }
291
		}
292 1348 Luisehahne
	}
293 1767 Luisehahne
294
    if(($bRebuildAccessFiles==true) && ($_POST['modules_upgrade_list']!='') && ($sPageDirectory==$old_settings['pages_directory']) ) {
295
        rebuild_all_accessfiles();
296
        $aModuleList = ( explode(',', $_POST['modules_upgrade_list']));
297
        upgrade_modules($aModuleList);
298
    }
299
300 1348 Luisehahne
}
301 1777 Luisehahne
$StripCodeFromISearch = array(
302 1785 Luisehahne
    'search_header',
303
    'search_results_header',
304
    'search_results_loop',
305
    'search_results_footer',
306
    'search_no_results',
307
    'search_footer',
308 1777 Luisehahne
    'search_module_order',
309
    'search_max_excerpt',
310
    'search_time_limit',
311
    );
312 1785 Luisehahne
$allow_empty_values = array(
313
    'search_footer',
314
    );
315 1348 Luisehahne
316
// Query current search settings in the db, then loop through them and update the db with the new value
317
$sql  = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'search` ';
318
$sql .= 'WHERE `extra` = ""';
319
$res_search = $database->query($sql);
320
321
if($database->is_error()) {
322 1425 Luisehahne
	$admin->print_error($database->is_error(), $js_back );
323 1348 Luisehahne
}
324
325 1785 Luisehahne
while($search_setting = $res_search->fetchRow(MYSQL_ASSOC))
326 1348 Luisehahne
{
327
	$old_value = $search_setting['value'];
328
	$setting_name = $search_setting['name'];
329 1777 Luisehahne
	$post_name = 'search_'.$setting_name;
330 1348 Luisehahne
331
    // hold old value if post is empty
332
    // check search template
333 1777 Luisehahne
    $value = ($admin->get_post($post_name));
334
    if(in_array($post_name, $StripCodeFromISearch) ) {
335
        $value = $admin->StripCodeFromText($value);
336
    }
337 1785 Luisehahne
338
    $passed = in_array($post_name, $allow_empty_values);
339
340
    $value = ( (!in_array($post_name, $allow_empty_values)) && ($setting_name != 'template') ) ? $old_value : $value;
341
342 1348 Luisehahne
    // $value =  ( ($admin->get_post($post_name) == '') && ($setting_name == 'template') ) ? DEFAULT_TEMPLATE : $admin->get_post($post_name);
343
    if(isset($value))
344
	{
345
		$value = $admin->add_slashes($value);
346
        $sql  = 'UPDATE `'.TABLE_PREFIX.'search` ';
347 1785 Luisehahne
        $sql .= 'SET `value` = \''.$value.'\' ';
348
        $sql .= 'WHERE `name` = \''.$setting_name.'\' ';
349
        $sql .= 'AND `extra` = \'\' ';
350 1348 Luisehahne
		if($database->query($sql)) {
351
		}
352
		$sql_info = mysql_info($database->db_handle);
353
    }
354
}
355
356
// Check if there was an error updating the db
357
if($database->is_error()) {
358 1425 Luisehahne
	$admin->print_error($database->get_error, $js_back );
359 1348 Luisehahne
} else {
360 1731 Luisehahne
	$admin->print_success($MESSAGE['SETTINGS_SAVED'], $js_back );
361 1348 Luisehahne
}
362
$admin->print_footer();