1 |
1348
|
Luisehahne
|
<?php
|
2 |
|
|
/**
|
3 |
|
|
*
|
4 |
|
|
* @category admin
|
5 |
|
|
* @package settings
|
6 |
|
|
* @author WebsiteBaker Project
|
7 |
1716
|
Luisehahne
|
* @copyright 2009-2012, WebsiteBaker Org. e.V.
|
8 |
1348
|
Luisehahne
|
* @link http://www.websitebaker2.org/
|
9 |
|
|
* @license http://www.gnu.org/licenses/gpl.html
|
10 |
|
|
* @platform WebsiteBaker 2.8.x
|
11 |
1374
|
Luisehahne
|
* @requirements PHP 5.2.2 and higher
|
12 |
1348
|
Luisehahne
|
* @version $Id$
|
13 |
|
|
* @filesource $HeadURL$
|
14 |
|
|
* @lastmodified $Date$
|
15 |
|
|
*
|
16 |
|
|
*/
|
17 |
|
|
|
18 |
|
|
// prevent this file from being accessed directly in the browser (would set all entries in DB settings table to '')
|
19 |
|
|
if(!isset($_POST['default_language']) || $_POST['default_language'] == '') die(header('Location: index.php'));
|
20 |
|
|
|
21 |
|
|
// Find out if the user was view advanced options or not
|
22 |
|
|
$advanced = ($_POST['advanced'] == 'yes') ? '?advanced=yes' : '';
|
23 |
|
|
|
24 |
|
|
// Print admin header
|
25 |
1785
|
Luisehahne
|
//require('../../config.php');
|
26 |
|
|
//require_once(WB_PATH.'/framework/class.admin.php');
|
27 |
|
|
|
28 |
|
|
// Include config file
|
29 |
|
|
$config_file = realpath('../../config.php');
|
30 |
|
|
if(file_exists($config_file) && !defined('WB_URL'))
|
31 |
|
|
{
|
32 |
|
|
require($config_file);
|
33 |
|
|
}
|
34 |
|
|
|
35 |
|
|
if(!class_exists('admin', false)){ include(WB_PATH.'/framework/class.admin.php'); }
|
36 |
|
|
|
37 |
1767
|
Luisehahne
|
require_once(WB_PATH.'/framework/functions.php');
|
38 |
1348
|
Luisehahne
|
|
39 |
1457
|
Luisehahne
|
// suppress to print the header, so no new FTAN will be set
|
40 |
1348
|
Luisehahne
|
if($advanced == '')
|
41 |
|
|
{
|
42 |
1457
|
Luisehahne
|
$admin = new admin('Settings', 'settings_basic',false);
|
43 |
1348
|
Luisehahne
|
} else {
|
44 |
1457
|
Luisehahne
|
$admin = new admin('Settings', 'settings_advanced',false);
|
45 |
1348
|
Luisehahne
|
}
|
46 |
|
|
|
47 |
1425
|
Luisehahne
|
// Create a javascript back link
|
48 |
|
|
$js_back = ADMIN_URL.'/settings/index.php'.$advanced;
|
49 |
1355
|
FrankH
|
if( !$admin->checkFTAN() )
|
50 |
|
|
{
|
51 |
1457
|
Luisehahne
|
$admin->print_header();
|
52 |
1425
|
Luisehahne
|
$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],$js_back );
|
53 |
1355
|
FrankH
|
}
|
54 |
1457
|
Luisehahne
|
// After check print the header
|
55 |
|
|
$admin->print_header();
|
56 |
1355
|
FrankH
|
|
57 |
1348
|
Luisehahne
|
// Ensure that the specified default email is formally valid
|
58 |
|
|
if(isset($_POST['server_email']))
|
59 |
|
|
{
|
60 |
|
|
$_POST['server_email'] = strip_tags($_POST['server_email']);
|
61 |
1716
|
Luisehahne
|
// // $pattern = '/^[-a-z0-9~!$%^&*_=+}{\'?]+(\.[-a-z0-9~!$%^&*_=+}{\'?]+)*@([a-z0-9]([-a-z0-9_]?[a-z0-9])*(\.[-a-z0-9_]+)*\.(aero|arpa|biz|com|coop|edu|gov|info|int|mil|museum|name|net|org|pro|travel|mobi|[a-z]{2})|([1]?\d{1,2}|2[0-4]{1}\d{1}|25[0-5]{1})(\.([1]?\d{1,2}|2[0-4]{1}\d{1}|25[0-5]{1})){3})(:[0-9]{1,5})?\r/im';
|
62 |
|
|
// $pattern = '/^[_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*\.(([0-9]{1,3})|([a-zA-Z]{2,6}))$/';
|
63 |
|
|
// if(false == preg_match($pattern, $_POST['server_email']))
|
64 |
|
|
if(!$admin->validate_email($_POST['server_email']))
|
65 |
1348
|
Luisehahne
|
{
|
66 |
1572
|
Luisehahne
|
$admin->print_error($MESSAGE['USERS_INVALID_EMAIL'].
|
67 |
1348
|
Luisehahne
|
'<br /><strong>Email: '.htmlentities($_POST['server_email']).'</strong>', $js_back);
|
68 |
|
|
}
|
69 |
|
|
}
|
70 |
|
|
|
71 |
1777
|
Luisehahne
|
if($admin->StripCodeFromText($admin->get_post('wbmailer_routine'))=='smtp') {
|
72 |
1572
|
Luisehahne
|
|
73 |
1777
|
Luisehahne
|
$checkSmtpHost = (($admin->StripCodeFromText($admin->get_post('wbmailer_smtp_host'))=='') ? false : true);
|
74 |
|
|
// $checkSmtpHost = (isset($_POST['wbmailer_smtp_host']) && ($_POST['wbmailer_smtp_host']=='') ? false : true);
|
75 |
|
|
$checkSmtpUser = (($admin->StripCodeFromText($admin->get_post('wbmailer_smtp_username'))=='') ? false : true);
|
76 |
|
|
// $checkSmtpUser = (isset($_POST['wbmailer_smtp_username']) && ($_POST['wbmailer_smtp_username']=='') ? false : true);
|
77 |
|
|
$checkSmtpPassword = (($admin->StripCodeFromText($admin->get_post('wbmailer_smtp_password'))=='') ? false : true);
|
78 |
|
|
// $checkSmtpPassword = (isset($_POST['wbmailer_smtp_password']) && ($_POST['wbmailer_smtp_password']=='') ? false : true);
|
79 |
|
|
|
80 |
1572
|
Luisehahne
|
if(!$checkSmtpHost || !$checkSmtpUser || !$checkSmtpPassword) {
|
81 |
|
|
$admin->print_error($TEXT['REQUIRED'].' '.$TEXT['WBMAILER_SMTP_AUTH'].
|
82 |
|
|
'<br /><strong>'.$MESSAGE['GENERIC_FILL_IN_ALL'].'</strong>', $js_back);
|
83 |
|
|
}
|
84 |
|
|
|
85 |
|
|
}
|
86 |
|
|
|
87 |
1348
|
Luisehahne
|
// Work-out file mode
|
88 |
|
|
if($advanced == '')
|
89 |
|
|
{
|
90 |
1777
|
Luisehahne
|
$file_mode = STRING_FILE_MODE;
|
91 |
|
|
$dir_mode = STRING_DIR_MODE;
|
92 |
1348
|
Luisehahne
|
// Check if should be set to 777 or left alone
|
93 |
1777
|
Luisehahne
|
// if(isset($_POST['world_writeable']) && $_POST['world_writeable'] == 'true')
|
94 |
|
|
// {
|
95 |
|
|
// $file_mode = '0777';
|
96 |
|
|
// $dir_mode = '0777';
|
97 |
|
|
// } else {
|
98 |
|
|
// $file_mode = STRING_FILE_MODE;
|
99 |
|
|
// $dir_mode = STRING_DIR_MODE;
|
100 |
|
|
// }
|
101 |
1348
|
Luisehahne
|
} else {
|
102 |
1577
|
Luisehahne
|
$file_mode = STRING_FILE_MODE;
|
103 |
|
|
$dir_mode = STRING_DIR_MODE;
|
104 |
|
|
if($admin->get_user_id()=='1')
|
105 |
|
|
{
|
106 |
|
|
// Work-out the octal value for file mode
|
107 |
|
|
$u = 0;
|
108 |
|
|
if(isset($_POST['file_u_r']) && $_POST['file_u_r'] == 'true') {
|
109 |
|
|
$u = $u+4;
|
110 |
|
|
}
|
111 |
|
|
if(isset($_POST['file_u_w']) && $_POST['file_u_w'] == 'true') {
|
112 |
|
|
$u = $u+2;
|
113 |
|
|
}
|
114 |
|
|
if(isset($_POST['file_u_e']) && $_POST['file_u_e'] == 'true') {
|
115 |
|
|
$u = $u+1;
|
116 |
|
|
}
|
117 |
|
|
$g = 0;
|
118 |
|
|
if(isset($_POST['file_g_r']) && $_POST['file_g_r'] == 'true') {
|
119 |
|
|
$g = $g+4;
|
120 |
|
|
}
|
121 |
|
|
if(isset($_POST['file_g_w']) && $_POST['file_g_w'] == 'true') {
|
122 |
|
|
$g = $g+2;
|
123 |
|
|
}
|
124 |
|
|
if(isset($_POST['file_g_e']) && $_POST['file_g_e'] == 'true') {
|
125 |
|
|
$g = $g+1;
|
126 |
|
|
}
|
127 |
|
|
$o = 0;
|
128 |
|
|
if(isset($_POST['file_o_r']) && $_POST['file_o_r'] == 'true') {
|
129 |
|
|
$o = $o+4;
|
130 |
|
|
}
|
131 |
|
|
if(isset($_POST['file_o_w']) && $_POST['file_o_w'] == 'true') {
|
132 |
|
|
$o = $o+2;
|
133 |
|
|
}
|
134 |
|
|
if(isset($_POST['file_o_e']) && $_POST['file_o_e'] == 'true') {
|
135 |
|
|
$o = $o+1;
|
136 |
|
|
}
|
137 |
|
|
$file_mode = "0".$u.$g.$o;
|
138 |
|
|
// Work-out the octal value for dir mode
|
139 |
|
|
$u = 0;
|
140 |
|
|
if(isset($_POST['dir_u_r']) && $_POST['dir_u_r'] == 'true') {
|
141 |
|
|
$u = $u+4;
|
142 |
|
|
}
|
143 |
|
|
if(isset($_POST['dir_u_w']) && $_POST['dir_u_w'] == 'true') {
|
144 |
|
|
$u = $u+2;
|
145 |
|
|
}
|
146 |
|
|
if(isset($_POST['dir_u_e']) && $_POST['dir_u_e'] == 'true') {
|
147 |
|
|
$u = $u+1;
|
148 |
|
|
}
|
149 |
|
|
$g = 0;
|
150 |
|
|
if(isset($_POST['dir_g_r']) && $_POST['dir_g_r'] == 'true') {
|
151 |
|
|
$g = $g+4;
|
152 |
|
|
}
|
153 |
|
|
if(isset($_POST['dir_g_w']) && $_POST['dir_g_w'] == 'true') {
|
154 |
|
|
$g = $g+2;
|
155 |
|
|
}
|
156 |
|
|
if(isset($_POST['dir_g_e']) && $_POST['dir_g_e'] == 'true') {
|
157 |
|
|
$g = $g+1;
|
158 |
|
|
}
|
159 |
|
|
$o = 0;
|
160 |
|
|
if(isset($_POST['dir_o_r']) && $_POST['dir_o_r'] == 'true') {
|
161 |
|
|
$o = $o+4;
|
162 |
|
|
}
|
163 |
|
|
if(isset($_POST['dir_o_w']) && $_POST['dir_o_w'] == 'true') {
|
164 |
|
|
$o = $o+2;
|
165 |
|
|
}
|
166 |
|
|
if(isset($_POST['dir_o_e']) && $_POST['dir_o_e'] == 'true') {
|
167 |
|
|
$o = $o+1;
|
168 |
|
|
}
|
169 |
|
|
$dir_mode = "0".$u.$g.$o;
|
170 |
1348
|
Luisehahne
|
}
|
171 |
|
|
}
|
172 |
|
|
|
173 |
1777
|
Luisehahne
|
$allow_tags_in_fields = array(
|
174 |
|
|
'website_header',
|
175 |
|
|
'website_footer',
|
176 |
|
|
'website_signature'
|
177 |
|
|
);
|
178 |
|
|
$allow_empty_values = array(
|
179 |
|
|
'website_header',
|
180 |
|
|
'website_footer',
|
181 |
|
|
'website_signature',
|
182 |
|
|
'wysiwyg_style',
|
183 |
|
|
'pages_directory',
|
184 |
|
|
'page_icon_dir',
|
185 |
|
|
'rename_files_on_upload',
|
186 |
|
|
'page_spacer',
|
187 |
|
|
'website_signature',
|
188 |
|
|
'page_icon_dir',
|
189 |
|
|
'modules_upgrade_list'
|
190 |
|
|
);
|
191 |
|
|
$disallow_in_fields = array(
|
192 |
|
|
'pages_directory',
|
193 |
|
|
'media_directory',
|
194 |
|
|
'wb_version'
|
195 |
|
|
);
|
196 |
|
|
$StripCodeFromInput = array(
|
197 |
|
|
'website_title',
|
198 |
|
|
'website_description',
|
199 |
|
|
'website_keywords',
|
200 |
|
|
'wysiwyg_style',
|
201 |
|
|
'search_module_order',
|
202 |
|
|
'search_max_excerpt',
|
203 |
|
|
'search_time_limit',
|
204 |
|
|
'pages_directory',
|
205 |
|
|
'page_icon_dir',
|
206 |
|
|
'media_directory',
|
207 |
|
|
'page_extension',
|
208 |
|
|
'rename_files_on_upload',
|
209 |
|
|
'page_spacer',
|
210 |
|
|
'page_icon_dir',
|
211 |
|
|
'modules_upgrade_list'
|
212 |
|
|
);
|
213 |
1348
|
Luisehahne
|
|
214 |
1767
|
Luisehahne
|
$bRebuildAccessFiles = ( (isset( $_POST['rebuild_access_files']) && ( $_POST['rebuild_access_files'] == true )) ? true : false ) ;
|
215 |
|
|
|
216 |
1348
|
Luisehahne
|
// Query current settings in the db, then loop through them and update the db with the new value
|
217 |
1354
|
Luisehahne
|
$settings = array();
|
218 |
|
|
$old_settings = array();
|
219 |
|
|
// Query current settings in the db, then loop through them to get old values
|
220 |
|
|
$sql = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'settings`';
|
221 |
|
|
$sql .= 'ORDER BY `name`';
|
222 |
|
|
|
223 |
1572
|
Luisehahne
|
if($res_settings = $database->query($sql)) {
|
224 |
|
|
$passed = false;
|
225 |
1785
|
Luisehahne
|
while($setting = $res_settings->fetchRow(MYSQL_ASSOC))
|
226 |
1572
|
Luisehahne
|
{
|
227 |
|
|
$setting_name = $setting['name'];
|
228 |
1767
|
Luisehahne
|
$old_settings[$setting_name] = $setting['value'];
|
229 |
1572
|
Luisehahne
|
$value = $admin->get_post($setting_name);
|
230 |
|
|
$value = isset($_POST[$setting_name]) ? $value : $old_settings[$setting_name] ;
|
231 |
|
|
switch ($setting_name) {
|
232 |
|
|
case 'default_timezone':
|
233 |
|
|
$value=$value*60*60;
|
234 |
|
|
$passed = true;
|
235 |
|
|
break;
|
236 |
|
|
case 'string_dir_mode':
|
237 |
|
|
$value=$dir_mode;
|
238 |
|
|
$passed = true;
|
239 |
|
|
break;
|
240 |
|
|
case 'string_file_mode':
|
241 |
|
|
$value=$file_mode;
|
242 |
|
|
$passed = true;
|
243 |
1767
|
Luisehahne
|
break;
|
244 |
1745
|
Luisehahne
|
case 'sec_anchor':
|
245 |
1777
|
Luisehahne
|
$value = $admin->StripCodeFromText($value);
|
246 |
1745
|
Luisehahne
|
$value=(($value=='') ? 'section_' : $value);
|
247 |
|
|
$passed = true;
|
248 |
1767
|
Luisehahne
|
break;
|
249 |
1572
|
Luisehahne
|
case 'pages_directory':
|
250 |
1777
|
Luisehahne
|
$value = $admin->StripCodeFromText($value);
|
251 |
1767
|
Luisehahne
|
$bNewPageFile = ( ( $value!= $old_settings['pages_directory'] ) ? true : false );
|
252 |
|
|
$passed = $bNewPageFile;
|
253 |
|
|
$sGetId = '&id='.$bNewPageFile;
|
254 |
|
|
// if(!is_dir(WB_PATH.$value) && is_writable(WB_PATH)) {
|
255 |
|
|
// $passed = make_dir(WB_PATH.$value);
|
256 |
|
|
// }
|
257 |
|
|
$value = (($passed == true) ? $value : $old_settings['pages_directory']);
|
258 |
|
|
$sPageDirectory = $value;
|
259 |
1572
|
Luisehahne
|
break;
|
260 |
|
|
case 'wbmailer_smtp_auth':
|
261 |
|
|
// $value = isset($_POST[$setting_name]) ? $_POST[$setting_name] : '' ;
|
262 |
|
|
$value = true ;
|
263 |
|
|
$passed = true;
|
264 |
|
|
break;
|
265 |
|
|
default :
|
266 |
1777
|
Luisehahne
|
$passed = in_array($setting_name, $allow_empty_values);
|
267 |
|
|
if(in_array($setting_name, $StripCodeFromInput) ) {
|
268 |
|
|
$value = $admin->StripCodeFromText($value);
|
269 |
|
|
}
|
270 |
1572
|
Luisehahne
|
break;
|
271 |
|
|
}
|
272 |
1348
|
Luisehahne
|
|
273 |
1572
|
Luisehahne
|
if (!in_array($setting_name, $allow_tags_in_fields))
|
274 |
|
|
{
|
275 |
|
|
$value = strip_tags($value);
|
276 |
|
|
}
|
277 |
1348
|
Luisehahne
|
|
278 |
1572
|
Luisehahne
|
if ( !in_array($value, $disallow_in_fields) && (isset($_POST[$setting_name]) || $passed == true) )
|
279 |
|
|
{
|
280 |
|
|
$value = trim($admin->add_slashes($value));
|
281 |
|
|
$sql = 'UPDATE `'.TABLE_PREFIX.'settings` ';
|
282 |
1777
|
Luisehahne
|
$sql .= 'SET `value` = \''.($value).'\' '; // mysql_escape_string
|
283 |
1572
|
Luisehahne
|
$sql .= 'WHERE `name` != \'wb_version\' ';
|
284 |
|
|
$sql .= 'AND `name` = \''.$setting_name.'\' ';
|
285 |
|
|
if (!$database->query($sql))
|
286 |
|
|
{
|
287 |
|
|
if($database->is_error()) {
|
288 |
|
|
$admin->print_error($database->get_error, $js_back );
|
289 |
|
|
}
|
290 |
|
|
}
|
291 |
|
|
}
|
292 |
1348
|
Luisehahne
|
}
|
293 |
1767
|
Luisehahne
|
|
294 |
|
|
if(($bRebuildAccessFiles==true) && ($_POST['modules_upgrade_list']!='') && ($sPageDirectory==$old_settings['pages_directory']) ) {
|
295 |
|
|
rebuild_all_accessfiles();
|
296 |
|
|
$aModuleList = ( explode(',', $_POST['modules_upgrade_list']));
|
297 |
|
|
upgrade_modules($aModuleList);
|
298 |
|
|
}
|
299 |
|
|
|
300 |
1348
|
Luisehahne
|
}
|
301 |
1777
|
Luisehahne
|
$StripCodeFromISearch = array(
|
302 |
1785
|
Luisehahne
|
'search_header',
|
303 |
|
|
'search_results_header',
|
304 |
|
|
'search_results_loop',
|
305 |
|
|
'search_results_footer',
|
306 |
|
|
'search_no_results',
|
307 |
|
|
'search_footer',
|
308 |
1777
|
Luisehahne
|
'search_module_order',
|
309 |
|
|
'search_max_excerpt',
|
310 |
|
|
'search_time_limit',
|
311 |
|
|
);
|
312 |
1785
|
Luisehahne
|
$allow_empty_values = array(
|
313 |
|
|
'search_footer',
|
314 |
|
|
);
|
315 |
1348
|
Luisehahne
|
|
316 |
|
|
// Query current search settings in the db, then loop through them and update the db with the new value
|
317 |
|
|
$sql = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'search` ';
|
318 |
|
|
$sql .= 'WHERE `extra` = ""';
|
319 |
|
|
$res_search = $database->query($sql);
|
320 |
|
|
|
321 |
|
|
if($database->is_error()) {
|
322 |
1425
|
Luisehahne
|
$admin->print_error($database->is_error(), $js_back );
|
323 |
1348
|
Luisehahne
|
}
|
324 |
|
|
|
325 |
1785
|
Luisehahne
|
while($search_setting = $res_search->fetchRow(MYSQL_ASSOC))
|
326 |
1348
|
Luisehahne
|
{
|
327 |
|
|
$old_value = $search_setting['value'];
|
328 |
|
|
$setting_name = $search_setting['name'];
|
329 |
1777
|
Luisehahne
|
$post_name = 'search_'.$setting_name;
|
330 |
1348
|
Luisehahne
|
|
331 |
|
|
// hold old value if post is empty
|
332 |
|
|
// check search template
|
333 |
1777
|
Luisehahne
|
$value = ($admin->get_post($post_name));
|
334 |
|
|
if(in_array($post_name, $StripCodeFromISearch) ) {
|
335 |
|
|
$value = $admin->StripCodeFromText($value);
|
336 |
|
|
}
|
337 |
1785
|
Luisehahne
|
|
338 |
|
|
$passed = in_array($post_name, $allow_empty_values);
|
339 |
|
|
|
340 |
|
|
$value = ( (!in_array($post_name, $allow_empty_values)) && ($setting_name != 'template') ) ? $old_value : $value;
|
341 |
|
|
|
342 |
1348
|
Luisehahne
|
// $value = ( ($admin->get_post($post_name) == '') && ($setting_name == 'template') ) ? DEFAULT_TEMPLATE : $admin->get_post($post_name);
|
343 |
|
|
if(isset($value))
|
344 |
|
|
{
|
345 |
|
|
$value = $admin->add_slashes($value);
|
346 |
|
|
$sql = 'UPDATE `'.TABLE_PREFIX.'search` ';
|
347 |
1785
|
Luisehahne
|
$sql .= 'SET `value` = \''.$value.'\' ';
|
348 |
|
|
$sql .= 'WHERE `name` = \''.$setting_name.'\' ';
|
349 |
|
|
$sql .= 'AND `extra` = \'\' ';
|
350 |
1348
|
Luisehahne
|
if($database->query($sql)) {
|
351 |
|
|
}
|
352 |
|
|
$sql_info = mysql_info($database->db_handle);
|
353 |
|
|
}
|
354 |
|
|
}
|
355 |
|
|
|
356 |
|
|
// Check if there was an error updating the db
|
357 |
|
|
if($database->is_error()) {
|
358 |
1425
|
Luisehahne
|
$admin->print_error($database->get_error, $js_back );
|
359 |
1348
|
Luisehahne
|
} else {
|
360 |
1731
|
Luisehahne
|
$admin->print_success($MESSAGE['SETTINGS_SAVED'], $js_back );
|
361 |
1348
|
Luisehahne
|
}
|
362 |
|
|
$admin->print_footer();
|