Project

General

Profile

1 1348 Luisehahne
<?php
2
/**
3
 *
4
 * @category        admin
5
 * @package         settings
6
 * @author          WebsiteBaker Project
7 1716 Luisehahne
 * @copyright       2009-2012, WebsiteBaker Org. e.V.
8 1348 Luisehahne
 * @link			http://www.websitebaker2.org/
9
 * @license         http://www.gnu.org/licenses/gpl.html
10
 * @platform        WebsiteBaker 2.8.x
11 1374 Luisehahne
 * @requirements    PHP 5.2.2 and higher
12 1348 Luisehahne
 * @version         $Id$
13
 * @filesource		$HeadURL$
14
 * @lastmodified    $Date$
15
 *
16
 */
17
18
// prevent this file from being accessed directly in the browser (would set all entries in DB settings table to '')
19
if(!isset($_POST['default_language']) || $_POST['default_language'] == '') die(header('Location: index.php'));
20
21
// Find out if the user was view advanced options or not
22
$advanced = ($_POST['advanced'] == 'yes') ? '?advanced=yes' : '';
23
24
// Print admin header
25 1785 Luisehahne
//require('../../config.php');
26
//require_once(WB_PATH.'/framework/class.admin.php');
27
28
// Include config file
29
$config_file = realpath('../../config.php');
30
if(file_exists($config_file) && !defined('WB_URL'))
31
{
32
	require($config_file);
33
}
34
35
if(!class_exists('admin', false)){ include(WB_PATH.'/framework/class.admin.php'); }
36
37 1767 Luisehahne
require_once(WB_PATH.'/framework/functions.php');
38 1348 Luisehahne
39 1457 Luisehahne
// suppress to print the header, so no new FTAN will be set
40 1348 Luisehahne
if($advanced == '')
41
{
42 1457 Luisehahne
	$admin = new admin('Settings', 'settings_basic',false);
43 1348 Luisehahne
} else {
44 1457 Luisehahne
	$admin = new admin('Settings', 'settings_advanced',false);
45 1348 Luisehahne
}
46
47 1425 Luisehahne
// Create a javascript back link
48
$js_back = ADMIN_URL.'/settings/index.php'.$advanced;
49 1355 FrankH
if( !$admin->checkFTAN() )
50
{
51 1457 Luisehahne
	$admin->print_header();
52 1425 Luisehahne
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],$js_back );
53 1355 FrankH
}
54 1457 Luisehahne
// After check print the header
55
$admin->print_header();
56 1355 FrankH
57 1348 Luisehahne
// Ensure that the specified default email is formally valid
58
if(isset($_POST['server_email']))
59
{
60
	$_POST['server_email'] = strip_tags($_POST['server_email']);
61 1716 Luisehahne
//    // $pattern = '/^[-a-z0-9~!$%^&*_=+}{\'?]+(\.[-a-z0-9~!$%^&*_=+}{\'?]+)*@([a-z0-9]([-a-z0-9_]?[a-z0-9])*(\.[-a-z0-9_]+)*\.(aero|arpa|biz|com|coop|edu|gov|info|int|mil|museum|name|net|org|pro|travel|mobi|[a-z]{2})|([1]?\d{1,2}|2[0-4]{1}\d{1}|25[0-5]{1})(\.([1]?\d{1,2}|2[0-4]{1}\d{1}|25[0-5]{1})){3})(:[0-9]{1,5})?\r/im';
62
//    $pattern = '/^[_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*\.(([0-9]{1,3})|([a-zA-Z]{2,6}))$/';
63
//    if(false == preg_match($pattern, $_POST['server_email']))
64
	if(!$admin->validate_email($_POST['server_email']))
65 1348 Luisehahne
    {
66 1572 Luisehahne
		$admin->print_error($MESSAGE['USERS_INVALID_EMAIL'].
67 1348 Luisehahne
			'<br /><strong>Email: '.htmlentities($_POST['server_email']).'</strong>', $js_back);
68
	}
69
}
70
71 1777 Luisehahne
if($admin->StripCodeFromText($admin->get_post('wbmailer_routine'))=='smtp') {
72 1572 Luisehahne
73 1777 Luisehahne
	$checkSmtpHost = (($admin->StripCodeFromText($admin->get_post('wbmailer_smtp_host'))=='') ? false : true);
74
//	$checkSmtpHost = (isset($_POST['wbmailer_smtp_host']) && ($_POST['wbmailer_smtp_host']=='') ? false : true);
75
	$checkSmtpUser = (($admin->StripCodeFromText($admin->get_post('wbmailer_smtp_username'))=='') ? false : true);
76
//	$checkSmtpUser = (isset($_POST['wbmailer_smtp_username']) && ($_POST['wbmailer_smtp_username']=='') ? false : true);
77
	$checkSmtpPassword = (($admin->StripCodeFromText($admin->get_post('wbmailer_smtp_password'))=='') ? false : true);
78
//	$checkSmtpPassword = (isset($_POST['wbmailer_smtp_password']) && ($_POST['wbmailer_smtp_password']=='') ? false : true);
79
80 1572 Luisehahne
	if(!$checkSmtpHost || !$checkSmtpUser || !$checkSmtpPassword) {
81
		$admin->print_error($TEXT['REQUIRED'].' '.$TEXT['WBMAILER_SMTP_AUTH'].
82
			'<br /><strong>'.$MESSAGE['GENERIC_FILL_IN_ALL'].'</strong>', $js_back);
83
	}
84
85
}
86
87 1348 Luisehahne
// Work-out file mode
88
if($advanced == '')
89
{
90 1777 Luisehahne
	$file_mode = STRING_FILE_MODE;
91
	$dir_mode = STRING_DIR_MODE;
92 1348 Luisehahne
	// Check if should be set to 777 or left alone
93 1777 Luisehahne
//	if(isset($_POST['world_writeable']) && $_POST['world_writeable'] == 'true')
94
//    {
95
//		$file_mode = '0777';
96
//		$dir_mode = '0777';
97
//	} else {
98
//		$file_mode = STRING_FILE_MODE;
99
//		$dir_mode = STRING_DIR_MODE;
100
//	}
101 1348 Luisehahne
} else {
102 1577 Luisehahne
	$file_mode = STRING_FILE_MODE;
103
	$dir_mode = STRING_DIR_MODE;
104
	if($admin->get_user_id()=='1')
105
	{
106
		// Work-out the octal value for file mode
107
		$u = 0;
108
		if(isset($_POST['file_u_r']) && $_POST['file_u_r'] == 'true') {
109
			$u = $u+4;
110
		}
111
		if(isset($_POST['file_u_w']) && $_POST['file_u_w'] == 'true') {
112
			$u = $u+2;
113
		}
114
		if(isset($_POST['file_u_e']) && $_POST['file_u_e'] == 'true') {
115
			$u = $u+1;
116
		}
117
		$g = 0;
118
		if(isset($_POST['file_g_r']) && $_POST['file_g_r'] == 'true') {
119
			$g = $g+4;
120
		}
121
		if(isset($_POST['file_g_w']) && $_POST['file_g_w'] == 'true') {
122
			$g = $g+2;
123
		}
124
		if(isset($_POST['file_g_e']) && $_POST['file_g_e'] == 'true') {
125
			$g = $g+1;
126
		}
127
		$o = 0;
128
		if(isset($_POST['file_o_r']) && $_POST['file_o_r'] == 'true') {
129
			$o = $o+4;
130
		}
131
		if(isset($_POST['file_o_w']) && $_POST['file_o_w'] == 'true') {
132
			$o = $o+2;
133
		}
134
		if(isset($_POST['file_o_e']) && $_POST['file_o_e'] == 'true') {
135
			$o = $o+1;
136
		}
137
		$file_mode = "0".$u.$g.$o;
138
		// Work-out the octal value for dir mode
139
		$u = 0;
140
		if(isset($_POST['dir_u_r']) && $_POST['dir_u_r'] == 'true') {
141
			$u = $u+4;
142
		}
143
		if(isset($_POST['dir_u_w']) && $_POST['dir_u_w'] == 'true') {
144
			$u = $u+2;
145
		}
146
		if(isset($_POST['dir_u_e']) && $_POST['dir_u_e'] == 'true') {
147
			$u = $u+1;
148
		}
149
		$g = 0;
150
		if(isset($_POST['dir_g_r']) && $_POST['dir_g_r'] == 'true') {
151
			$g = $g+4;
152
		}
153
		if(isset($_POST['dir_g_w']) && $_POST['dir_g_w'] == 'true') {
154
			$g = $g+2;
155
		}
156
		if(isset($_POST['dir_g_e']) && $_POST['dir_g_e'] == 'true') {
157
			$g = $g+1;
158
		}
159
		$o = 0;
160
		if(isset($_POST['dir_o_r']) && $_POST['dir_o_r'] == 'true') {
161
			$o = $o+4;
162
		}
163
		if(isset($_POST['dir_o_w']) && $_POST['dir_o_w'] == 'true') {
164
			$o = $o+2;
165
		}
166
		if(isset($_POST['dir_o_e']) && $_POST['dir_o_e'] == 'true') {
167
			$o = $o+1;
168
		}
169
		$dir_mode = "0".$u.$g.$o;
170 1348 Luisehahne
	}
171
}
172
173 1777 Luisehahne
$allow_tags_in_fields = array(
174
    'website_header',
175
    'website_footer',
176 1844 Luisehahne
    'wbmail_signature'
177 1777 Luisehahne
    );
178
$allow_empty_values = array(
179
    'website_header',
180
    'website_footer',
181 1844 Luisehahne
    'wbmail_signature',
182 1777 Luisehahne
    'wysiwyg_style',
183
    'pages_directory',
184
    'page_icon_dir',
185
    'rename_files_on_upload',
186
    'page_spacer',
187
    'page_icon_dir',
188
    'modules_upgrade_list'
189
    );
190
$disallow_in_fields = array(
191
    'pages_directory',
192
    'media_directory',
193
    'wb_version'
194
    );
195
$StripCodeFromInput = array(
196
    'website_title',
197
    'website_description',
198
    'website_keywords',
199 1844 Luisehahne
    'wbmail_signature',
200 1777 Luisehahne
    'wysiwyg_style',
201
    'pages_directory',
202
    'page_icon_dir',
203
    'media_directory',
204
    'page_extension',
205
    'rename_files_on_upload',
206
    'page_spacer',
207
    'page_icon_dir',
208
    'modules_upgrade_list'
209
    );
210 1348 Luisehahne
211
// Query current settings in the db, then loop through them and update the db with the new value
212 1354 Luisehahne
$settings = array();
213
$old_settings = array();
214
// Query current settings in the db, then loop through them to get old values
215 1849 Luisehahne
$sql  = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'settings`';
216 1354 Luisehahne
$sql .= 'ORDER BY `name`';
217
218 1572 Luisehahne
if($res_settings = $database->query($sql)) {
219
	$passed = false;
220 1785 Luisehahne
	while($setting = $res_settings->fetchRow(MYSQL_ASSOC))
221 1572 Luisehahne
	{
222
		$setting_name = $setting['name'];
223 1767 Luisehahne
		$old_settings[$setting_name] = $setting['value'];
224 1572 Luisehahne
		$value = $admin->get_post($setting_name);
225
		$value = isset($_POST[$setting_name]) ? $value : $old_settings[$setting_name] ;
226
		switch ($setting_name) {
227
			case 'default_timezone':
228 1849 Luisehahne
		    	$value = (is_numeric($value) ? $value : 0);
229
		    	$value = ( ($value >= -12 && $value <= 13) ? $value :0 ) * 3600;
230 1572 Luisehahne
				$passed = true;
231
				break;
232
			case 'string_dir_mode':
233
				$value=$dir_mode;
234
				$passed = true;
235
				break;
236
			case 'string_file_mode':
237
				$value=$file_mode;
238
	 			$passed = true;
239 1767 Luisehahne
    			break;
240 1745 Luisehahne
			case 'sec_anchor':
241 1777 Luisehahne
                $value = $admin->StripCodeFromText($value);
242 1745 Luisehahne
				$value=(($value=='') ? 'section_' : $value);
243
	 			$passed = true;
244 1767 Luisehahne
				break;
245 1843 Luisehahne
			case 'media_directory':
246
				if(strpos($value,'/',0)===false) {	$value= '/'.$value;	}
247
	 			$passed = true;
248
				break;
249 1572 Luisehahne
			case 'pages_directory':
250 1843 Luisehahne
				if( ($database->get_one('SELECT COUNT(*) FROM `'.TABLE_PREFIX.'pages`'))==0 ) {
251
					$value = $admin->StripCodeFromText($value);
252
					$passed = true;
253
				} else {
254
					$value = $old_settings[$setting_name];
255
				}
256
				if(strpos($value,'/',0)===false) {	$value= '/'.$value;	}
257 1572 Luisehahne
				break;
258
			case 'wbmailer_smtp_auth':
259
				$value = true ;
260
	 			$passed = true;
261
				break;
262
			default :
263 1777 Luisehahne
                $passed = in_array($setting_name, $allow_empty_values);
264
                if(in_array($setting_name, $StripCodeFromInput) ) {
265
                    $value = $admin->StripCodeFromText($value);
266
                }
267 1572 Luisehahne
				break;
268
		}
269 1348 Luisehahne
270 1572 Luisehahne
	    if (!in_array($setting_name, $allow_tags_in_fields))
271
	    {
272
	        $value = strip_tags($value);
273
	    }
274 1348 Luisehahne
275 1572 Luisehahne
	    if ( !in_array($value, $disallow_in_fields) && (isset($_POST[$setting_name]) || $passed == true) )
276
	    {
277
	        $value = trim($admin->add_slashes($value));
278
	        $sql = 'UPDATE `'.TABLE_PREFIX.'settings` ';
279 1777 Luisehahne
	        $sql .= 'SET `value` = \''.($value).'\' '; // mysql_escape_string
280 1572 Luisehahne
	        $sql .= 'WHERE `name` != \'wb_version\' ';
281
	        $sql .= 'AND `name` = \''.$setting_name.'\' ';
282
	        if (!$database->query($sql))
283
	        {
284
				if($database->is_error()) {
285
					$admin->print_error($database->get_error, $js_back );
286
				}
287
	        }
288
		}
289 1348 Luisehahne
	}
290 1767 Luisehahne
291 1348 Luisehahne
}
292 1791 Luisehahne
/**
293
 * now save search settings
294
 */
295 1777 Luisehahne
$StripCodeFromISearch = array(
296 1785 Luisehahne
    'search_header',
297
    'search_results_header',
298
    'search_results_loop',
299
    'search_results_footer',
300
    'search_footer',
301 1777 Luisehahne
    'search_module_order',
302
    'search_max_excerpt',
303 1791 Luisehahne
    'search_no_results',
304 1777 Luisehahne
    'search_time_limit',
305 1791 Luisehahne
    'search_max_excerpt',
306 1777 Luisehahne
    );
307 1785 Luisehahne
$allow_empty_values = array(
308 1791 Luisehahne
    'header',
309
    'results_header',
310
    'results_loop',
311
    'results_footer',
312
    'footer',
313
    'module_order',
314
    'no_results',
315 1785 Luisehahne
    );
316 1791 Luisehahne
$allow_tags_in_fields = array(
317
    'header',
318
    'results_header',
319
    'results_loop',
320
    'results_footer',
321
    'no_results',
322
    'footer',
323
    );
324 1348 Luisehahne
325
// Query current search settings in the db, then loop through them and update the db with the new value
326
$sql  = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'search` ';
327 1791 Luisehahne
$sql .= 'WHERE `extra` =  \'\' ';
328
if( !($oSearch = $database->query($sql)) ) {
329
    if($database->is_error()) {
330
    	$admin->print_error(explode(';',$database->get_error()), $js_back );
331
    }
332 1348 Luisehahne
}
333
334 1791 Luisehahne
while($aSearch = $oSearch->fetchRow(MYSQL_ASSOC))
335 1348 Luisehahne
{
336 1791 Luisehahne
	$passed = false;
337
	$old_value = $aSearch['value'];
338
	$sSearchName = $aSearch['name'];
339
	$sPostName = 'search_'.$sSearchName;
340 1348 Luisehahne
341 1791 Luisehahne
    $value = $admin->get_post($sPostName);
342
    $value = isset($value) ?  $value : $old_value;
343
    if(in_array($sPostName, $StripCodeFromISearch) ) {
344 1777 Luisehahne
        $value = $admin->StripCodeFromText($value);
345
    }
346 1785 Luisehahne
347 1791 Luisehahne
/**
348
 *  hold old value if post is empty
349
 *  check search template
350
 */
351
	switch ($sSearchName) {
352
		case 'template':
353
 			$passed = true;
354
            $value =  ( !($admin->get_post($sPostName)) || ($value == DEFAULT_TEMPLATE ) ) ? '' : $admin->get_post($sPostName);
355
			break;
356
		case 'max_excerpt':
357
 			$passed = true;
358
        	if(preg_match('/[^0-9]+/i', $value)) {
359
                $value = $old_value;
360
        	}
361
			break;
362
		case 'time_limit':
363
            $passed = true;
364
        	if(preg_match('/[^0-9]+/i', $value)) {
365
                $value = $old_value;
366
        	}
367
			break;
368
		default :
369
        	$passed = ($admin->get_post($sPostName) || in_array($sSearchName, $allow_empty_values));
370 1785 Luisehahne
371 1791 Luisehahne
            if (!in_array($sSearchName, $allow_tags_in_fields))
372
            {
373
                $value = strip_tags($value);
374
            }
375
			break;
376
	}
377 1785 Luisehahne
378 1791 Luisehahne
    if ( ($passed == true) )
379 1348 Luisehahne
	{
380
		$value = $admin->add_slashes($value);
381
        $sql  = 'UPDATE `'.TABLE_PREFIX.'search` ';
382 1785 Luisehahne
        $sql .= 'SET `value` = \''.$value.'\' ';
383 1791 Luisehahne
        $sql .= 'WHERE `name` = \''.$sSearchName.'\' ';
384 1785 Luisehahne
        $sql .= 'AND `extra` = \'\' ';
385 1348 Luisehahne
		if($database->query($sql)) {
386 1791 Luisehahne
387 1348 Luisehahne
		}
388
		$sql_info = mysql_info($database->db_handle);
389
    }
390
}
391
392
// Check if there was an error updating the db
393
if($database->is_error()) {
394 1425 Luisehahne
	$admin->print_error($database->get_error, $js_back );
395 1348 Luisehahne
} else {
396 1731 Luisehahne
	$admin->print_success($MESSAGE['SETTINGS_SAVED'], $js_back );
397 1348 Luisehahne
}
398
$admin->print_footer();