| 1 |
1349
|
Luisehahne
|
<?php
|
| 2 |
|
|
/**
|
| 3 |
1864
|
darkviper
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
|
| 4 |
1349
|
Luisehahne
|
*
|
| 5 |
1864
|
darkviper
|
* This program is free software: you can redistribute it and/or modify
|
| 6 |
|
|
* it under the terms of the GNU General Public License as published by
|
| 7 |
|
|
* the Free Software Foundation, either version 3 of the License, or
|
| 8 |
|
|
* (at your option) any later version.
|
| 9 |
1349
|
Luisehahne
|
*
|
| 10 |
1864
|
darkviper
|
* This program is distributed in the hope that it will be useful,
|
| 11 |
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
| 12 |
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
| 13 |
|
|
* GNU General Public License for more details.
|
| 14 |
|
|
*
|
| 15 |
|
|
* You should have received a copy of the GNU General Public License
|
| 16 |
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
| 17 |
1349
|
Luisehahne
|
*/
|
| 18 |
|
|
|
| 19 |
1617
|
darkviper
|
/**
|
| 20 |
1864
|
darkviper
|
* initialize.php
|
| 21 |
|
|
*
|
| 22 |
|
|
* @category Core
|
| 23 |
|
|
* @package Core_Environment
|
| 24 |
|
|
* @author Werner v.d.Decken <wkl@isteam.de>
|
| 25 |
|
|
* @copyright Werner v.d.Decken <wkl@isteam.de>
|
| 26 |
|
|
* @license http://www.gnu.org/licenses/gpl.html GPL License
|
| 27 |
|
|
* @version 0.0.1
|
| 28 |
|
|
* @revision $Revision$
|
| 29 |
|
|
* @link $HeadURL$
|
| 30 |
|
|
* @lastmodified $Date$
|
| 31 |
|
|
* @since File replaced since 05.02.2013
|
| 32 |
|
|
* @description set the basic environment to run WebsiteBaker
|
| 33 |
|
|
*/
|
| 34 |
|
|
|
| 35 |
|
|
/* *** define some helper functions *** */
|
| 36 |
|
|
/**
|
| 37 |
1617
|
darkviper
|
* sanitize $_SERVER['HTTP_REFERER']
|
| 38 |
|
|
* @param string $sWbUrl qualified startup URL of current application
|
| 39 |
|
|
*/
|
| 40 |
|
|
function SanitizeHttpReferer($sWbUrl = WB_URL) {
|
| 41 |
|
|
$sTmpReferer = '';
|
| 42 |
|
|
if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER'] != '') {
|
| 43 |
|
|
$aRefUrl = parse_url($_SERVER['HTTP_REFERER']);
|
| 44 |
|
|
if ($aRefUrl !== false) {
|
| 45 |
|
|
$aRefUrl['host'] = isset($aRefUrl['host']) ? $aRefUrl['host'] : '';
|
| 46 |
|
|
$aRefUrl['path'] = isset($aRefUrl['path']) ? $aRefUrl['path'] : '';
|
| 47 |
|
|
$aRefUrl['fragment'] = isset($aRefUrl['fragment']) ? '#'.$aRefUrl['fragment'] : '';
|
| 48 |
|
|
$aWbUrl = parse_url(WB_URL);
|
| 49 |
|
|
if ($aWbUrl !== false) {
|
| 50 |
|
|
$aWbUrl['host'] = isset($aWbUrl['host']) ? $aWbUrl['host'] : '';
|
| 51 |
|
|
$aWbUrl['path'] = isset($aWbUrl['path']) ? $aWbUrl['path'] : '';
|
| 52 |
|
|
if (strpos($aRefUrl['host'].$aRefUrl['path'],
|
| 53 |
|
|
$aWbUrl['host'].$aWbUrl['path']) !== false) {
|
| 54 |
|
|
$aRefUrl['path'] = preg_replace('#^'.$aWbUrl['path'].'#i', '', $aRefUrl['path']);
|
| 55 |
|
|
$sTmpReferer = WB_URL.$aRefUrl['path'].$aRefUrl['fragment'];
|
| 56 |
|
|
}
|
| 57 |
|
|
unset($aWbUrl);
|
| 58 |
|
|
}
|
| 59 |
|
|
unset($aRefUrl);
|
| 60 |
|
|
}
|
| 61 |
|
|
}
|
| 62 |
|
|
$_SERVER['HTTP_REFERER'] = $sTmpReferer;
|
| 63 |
|
|
}
|
| 64 |
1864
|
darkviper
|
/**
|
| 65 |
|
|
* Set constants for system/install values
|
| 66 |
|
|
* @throws RuntimeException
|
| 67 |
|
|
*/
|
| 68 |
1680
|
darkviper
|
function SetInstallPathConstants() {
|
| 69 |
1864
|
darkviper
|
if(!defined('DEBUG')){ define('DEBUG', false); } // normaly set in config file
|
| 70 |
1680
|
darkviper
|
if(!defined('ADMIN_DIRECTORY')){ define('ADMIN_DIRECTORY', 'admin'); }
|
| 71 |
|
|
if(!preg_match('/xx[a-z0-9_][a-z0-9_\-\.]+/i', 'xx'.ADMIN_DIRECTORY)) {
|
| 72 |
|
|
throw new RuntimeException('Invalid admin-directory: ' . ADMIN_DIRECTORY);
|
| 73 |
|
|
}
|
| 74 |
|
|
if(!defined('WB_PATH')){ define('WB_PATH', dirname(dirname(__FILE__))); }
|
| 75 |
|
|
if(!defined('ADMIN_URL')){ define('ADMIN_URL', WB_URL.'/'.ADMIN_DIRECTORY); }
|
| 76 |
|
|
if(!defined('ADMIN_PATH')){ define('ADMIN_PATH', WB_PATH.'/'.ADMIN_DIRECTORY); }
|
| 77 |
|
|
if(!defined('WB_REL')){
|
| 78 |
|
|
$x1 = parse_url(WB_URL);
|
| 79 |
|
|
define('WB_REL', (isset($x1['path']) ? $x1['path'] : ''));
|
| 80 |
|
|
}
|
| 81 |
1864
|
darkviper
|
define('ADMIN_REL', WB_REL.'/'.ADMIN_DIRECTORY);
|
| 82 |
1680
|
darkviper
|
if(!defined('DOCUMENT_ROOT')) {
|
| 83 |
1864
|
darkviper
|
|
| 84 |
1680
|
darkviper
|
define('DOCUMENT_ROOT', preg_replace('/'.preg_quote(WB_REL, '/').'$/', '', WB_PATH));
|
| 85 |
|
|
}
|
| 86 |
1864
|
darkviper
|
define('TMP_PATH', WB_PATH.'/temp');
|
| 87 |
1680
|
darkviper
|
}
|
| 88 |
1864
|
darkviper
|
/**
|
| 89 |
|
|
* Read DB settings from configuration file
|
| 90 |
|
|
* @return string
|
| 91 |
|
|
* @throws RuntimeException
|
| 92 |
|
|
*
|
| 93 |
|
|
*/
|
| 94 |
|
|
function readConfiguration($sRetvalType = 'url') {
|
| 95 |
|
|
$x = debug_backtrace();
|
| 96 |
|
|
if(sizeof($x) != 0) { throw new RuntimeException('illegal function request!'); }
|
| 97 |
|
|
$aRetval = array();
|
| 98 |
|
|
$sSetupFile = dirname(dirname(__FILE__)).'/setup.ini.php';
|
| 99 |
|
|
if(is_readable($sSetupFile)) {
|
| 100 |
|
|
$aCfg = parse_ini_file($sSetupFile, true);
|
| 101 |
|
|
foreach($aCfg['Constants'] as $key=>$value) {
|
| 102 |
|
|
if($key == 'debug') { $value = filter_var($value, FILTER_VALIDATE_BOOLEAN); }
|
| 103 |
|
|
if(!defined(strtoupper($key))) { define(strtoupper($key), $value); }
|
| 104 |
|
|
}
|
| 105 |
|
|
$db = $aCfg['DataBase'];
|
| 106 |
|
|
$db['type'] = isset($db['type']) ? $db['type'] : 'mysql';
|
| 107 |
|
|
$db['user'] = isset($db['user']) ? $db['user'] : 'foo';
|
| 108 |
|
|
$db['pass'] = isset($db['pass']) ? $db['pass'] : 'bar';
|
| 109 |
|
|
$db['host'] = isset($db['host']) ? $db['host'] : 'localhost';
|
| 110 |
|
|
$db['port'] = isset($db['port']) ? $db['port'] : '3306';
|
| 111 |
|
|
$db['port'] = ($db['port'] != '3306') ? $db['port'] : '';
|
| 112 |
|
|
$db['name'] = isset($db['name']) ? $db['name'] : 'dummy';
|
| 113 |
|
|
$db['charset'] = isset($db['charset']) ? $db['charset'] : 'utf8';
|
| 114 |
|
|
$db['table_prefix'] = (isset($db['table_prefix']) ? $db['table_prefix'] : '');
|
| 115 |
|
|
define('TABLE_PREFIX', $db['table_prefix']);
|
| 116 |
|
|
if($sRetvalType == 'dsn') {
|
| 117 |
|
|
$aRetval[0] = $db['type'].':dbname='.$db['name'].';host='.$db['host'].';'
|
| 118 |
|
|
. ($db['port'] != '' ? 'port='.(int)$db['port'].';' : '');
|
| 119 |
|
|
$aRetval[1] = array('CHARSET' => $db['charset'], 'TABLE_PREFIX' => $db['table_prefix']);
|
| 120 |
|
|
$aRetval[2] = array( 'user' => $db['user'], 'pass' => $db['pass']);
|
| 121 |
|
|
}else { // $sRetvalType == 'url'
|
| 122 |
|
|
$aRetval[0] = $db['type'].'://'.$db['user'].':'.$db['pass'].'@'
|
| 123 |
|
|
. $db['host'].($db['port'] != '' ? ':'.$db['port'] : '').'/'.$db['name'];
|
| 124 |
|
|
}
|
| 125 |
|
|
unset($db, $aCfg);
|
| 126 |
|
|
return $sRetval;
|
| 127 |
|
|
}
|
| 128 |
|
|
throw new RuntimeException('unable to read setup.ini.php');
|
| 129 |
|
|
}
|
| 130 |
|
|
/* ***************************************************************************************
|
| 131 |
|
|
* Start initialization *
|
| 132 |
|
|
****************************************************************************************/
|
| 133 |
|
|
// initialize debug evaluation values ---
|
| 134 |
|
|
$sDbConnectType = 'url'; // depending from class WbDatabase it can be 'url' or 'dsn'
|
| 135 |
1680
|
darkviper
|
$starttime = array_sum(explode(" ",microtime()));
|
| 136 |
1864
|
darkviper
|
$iPhpDeclaredClasses = sizeof(get_declared_classes());
|
| 137 |
|
|
// disable all kind of magic_quotes in PHP versions before 5.4 ---
|
| 138 |
|
|
if(version_compare(PHP_VERSION, '5.4.0', '<')) {
|
| 139 |
|
|
if(get_magic_quotes_gpc() || get_magic_quotes_runtime()) {
|
| 140 |
|
|
@ini_set('magic_quotes_sybase', 0);
|
| 141 |
|
|
@ini_set('magic_quotes_gpc', 0);
|
| 142 |
|
|
@ini_set('magic_quotes_runtime', 0);
|
| 143 |
|
|
}
|
| 144 |
|
|
}
|
| 145 |
|
|
// define constant systemenvironment settings ---
|
| 146 |
1680
|
darkviper
|
SetInstallPathConstants();
|
| 147 |
1864
|
darkviper
|
date_default_timezone_set('UTC');
|
| 148 |
|
|
if(!defined('MAX_TIME')) { define('MAX_TIME', (pow(2, 31)-1)); } // 32-Bit Timestamp of 19 Jan 2038 03:14:07 GMT
|
| 149 |
|
|
if(!defined('DO_NOT_TRACK')) { define('DO_NOT_TRACK', (isset($_SERVER['HTTP_DNT']))); }
|
| 150 |
|
|
// register WB basic autoloader ---
|
| 151 |
|
|
$sTmp = dirname(__FILE__).'/WbAutoloader.php';
|
| 152 |
|
|
if(!class_exists('WbAutoloader', false)){ include($sTmp); }
|
| 153 |
1687
|
darkviper
|
WbAutoloader::doRegister(array(ADMIN_DIRECTORY=>'a', 'modules'=>'m'));
|
| 154 |
1864
|
darkviper
|
// register TWIG autoloader ---
|
| 155 |
|
|
// $sTmp = dirname(dirname(__FILE__)).'/include/Sensio/Twig/lib/Twig/Autoloader.php';
|
| 156 |
|
|
$sTmp = dirname(dirname(__FILE__)).'/include/Twig/Autoloader.php';
|
| 157 |
|
|
if(!class_exists('Twig_Autoloader', false)){ include($sTmp); }
|
| 158 |
1687
|
darkviper
|
Twig_Autoloader::register();
|
| 159 |
1864
|
darkviper
|
// aktivate exceptionhandler ---
|
| 160 |
|
|
if(!function_exists('globalExceptionHandler')) {
|
| 161 |
|
|
include(dirname(__FILE__).'/globalExceptionHandler.php');
|
| 162 |
|
|
}
|
| 163 |
|
|
// load db configuration ---
|
| 164 |
|
|
if(defined('DB_TYPE')) {
|
| 165 |
|
|
$aSqlData = array( 0 => DB_TYPE.'://'.DB_USERNAME.':'.DB_PASSWORD.'@'.DB_HOST.'/'.DB_NAME);
|
| 166 |
|
|
}else {
|
| 167 |
|
|
$aSqlData = readConfiguration($sDbConnectType);
|
| 168 |
|
|
}
|
| 169 |
|
|
// sanitize $_SERVER['HTTP_REFERER'] ---
|
| 170 |
|
|
SanitizeHttpReferer(WB_URL);
|
| 171 |
|
|
// ---------------------------
|
| 172 |
|
|
// Create global database instance ---
|
| 173 |
1686
|
darkviper
|
$database = WbDatabase::getInstance();
|
| 174 |
1864
|
darkviper
|
if($sDbConnectType == 'dsn') {
|
| 175 |
|
|
$database->doConnect($aSqlData[0], $aSqlData[1]['user'], $aSqlData[1]['pass'], $aSqlData[2]);
|
| 176 |
|
|
}else {
|
| 177 |
|
|
$database->doConnect($aSqlData[0], TABLE_PREFIX);
|
| 178 |
1680
|
darkviper
|
}
|
| 179 |
1864
|
darkviper
|
unset($aSqlData);
|
| 180 |
|
|
// load global settings from database and define global consts from ---
|
| 181 |
|
|
$sql = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'settings`';
|
| 182 |
|
|
if(($oSettings = $database->query($sql))) {
|
| 183 |
|
|
if(!$oSettings->numRows()) { throw new AppException('no settings found'); }
|
| 184 |
|
|
while($aSetting = $oSettings->fetchRow(MYSQL_ASSOC)) {
|
| 185 |
|
|
//sanitize true/false values
|
| 186 |
|
|
$aSetting['value'] = ($aSetting['value'] == 'true'
|
| 187 |
|
|
? true
|
| 188 |
|
|
: ($aSetting['value'] == 'false'
|
| 189 |
|
|
? false
|
| 190 |
|
|
: $aSetting['value'])
|
| 191 |
|
|
);
|
| 192 |
|
|
// make global const from setting
|
| 193 |
|
|
@define(strtoupper($aSetting['name']), $aSetting['value']);
|
| 194 |
|
|
}
|
| 195 |
|
|
}else { throw new AppException($database->get_error()); }
|
| 196 |
|
|
// get/set users timezone ---
|
| 197 |
|
|
define('TIMEZONE', (isset($_SESSION['TIMEZONE']) ? $_SESSION['TIMEZONE'] : DEFAULT_TIMEZONE));
|
| 198 |
|
|
define('DATE_FORMAT', (isset($_SESSION['DATE_FORMAT']) ? $_SESSION['DATE_FORMAT'] : DEFAULT_DATE_FORMAT));
|
| 199 |
|
|
define('TIME_FORMAT', (isset($_SESSION['TIME_FORMAT']) ? $_SESSION['TIME_FORMAT'] : DEFAULT_TIME_FORMAT));
|
| 200 |
|
|
// set Theme directory ---
|
| 201 |
|
|
define('THEME_URL', WB_URL.'/templates/'.DEFAULT_THEME);
|
| 202 |
|
|
define('THEME_PATH', WB_PATH.'/templates/'.DEFAULT_THEME);
|
| 203 |
|
|
define('THEME_REL', WB_REL.'/templates/'.DEFAULT_THEME);
|
| 204 |
|
|
// extended wb editor settings
|
| 205 |
|
|
define('EDIT_ONE_SECTION', false);
|
| 206 |
|
|
define('EDITOR_WIDTH', 0);
|
| 207 |
|
|
// define numeric, octal values for chmod operations ---
|
| 208 |
|
|
$string_file_mode = STRING_FILE_MODE; // STRING_FILE_MODE is set deprecated
|
| 209 |
1349
|
Luisehahne
|
define('OCTAL_FILE_MODE',(int) octdec($string_file_mode));
|
| 210 |
1864
|
darkviper
|
$string_dir_mode = STRING_DIR_MODE; // STRING_DIR_MODE is set deprecated
|
| 211 |
1349
|
Luisehahne
|
define('OCTAL_DIR_MODE',(int) octdec($string_dir_mode));
|
| 212 |
1864
|
darkviper
|
// define form security class and preload it ---
|
| 213 |
1465
|
Luisehahne
|
$sSecMod = (defined('SECURE_FORM_MODULE') && SECURE_FORM_MODULE != '') ? '.'.SECURE_FORM_MODULE : '';
|
| 214 |
1462
|
DarkViper
|
$sSecMod = WB_PATH.'/framework/SecureForm'.$sSecMod.'.php';
|
| 215 |
|
|
require_once($sSecMod);
|
| 216 |
1864
|
darkviper
|
// set error-reporting from loaded settings ---
|
| 217 |
|
|
if(intval(ER_LEVEL) > 0 ) {
|
| 218 |
1349
|
Luisehahne
|
error_reporting(ER_LEVEL);
|
| 219 |
1864
|
darkviper
|
if( intval(ini_get ( 'display_errors' )) == 0 ) {
|
| 220 |
1349
|
Luisehahne
|
ini_set('display_errors', 1);
|
| 221 |
|
|
}
|
| 222 |
|
|
}
|
| 223 |
1864
|
darkviper
|
// Start a session ---
|
| 224 |
1349
|
Luisehahne
|
if(!defined('SESSION_STARTED')) {
|
| 225 |
|
|
session_name(APP_NAME.'_session_id');
|
| 226 |
|
|
@session_start();
|
| 227 |
|
|
define('SESSION_STARTED', true);
|
| 228 |
|
|
}
|
| 229 |
1864
|
darkviper
|
// *** begin deprecated part *************************************************************
|
| 230 |
|
|
// load settings for use in Captch and ASP module
|
| 231 |
|
|
if (!defined("WB_INSTALL_PROCESS")) {
|
| 232 |
|
|
$sql = 'SELECT * FROM `'.TABLE_PREFIX.'mod_captcha_control`';
|
| 233 |
|
|
// request settings from database
|
| 234 |
|
|
if(($oSettings = $database->query($sql))) {
|
| 235 |
|
|
if(($aSetting = $oSettings->fetchRow(MYSQL_ASSOC))) {
|
| 236 |
|
|
define('ENABLED_CAPTCHA', ($aSetting['enabled_captcha'] == '1'));
|
| 237 |
|
|
define('ENABLED_ASP', ($aSetting['enabled_asp'] == '1'));
|
| 238 |
|
|
define('CAPTCHA_TYPE', $aSetting['captcha_type']);
|
| 239 |
|
|
define('ASP_SESSION_MIN_AGE', (int)$aSetting['asp_session_min_age']);
|
| 240 |
|
|
define('ASP_VIEW_MIN_AGE', (int)$aSetting['asp_view_min_age']);
|
| 241 |
|
|
define('ASP_INPUT_MIN_AGE', (int)$aSetting['asp_input_min_age']);
|
| 242 |
|
|
}
|
| 243 |
|
|
}
|
| 244 |
|
|
}
|
| 245 |
|
|
if(defined('ENABLED_ASP') && ENABLED_ASP && !isset($_SESSION['session_started'])) {
|
| 246 |
1349
|
Luisehahne
|
$_SESSION['session_started'] = time();
|
| 247 |
1864
|
darkviper
|
}
|
| 248 |
|
|
// *** end of deprecated part ************************************************************
|
| 249 |
|
|
// get user language ---
|
| 250 |
|
|
$sRequestMethod = '_'.strtoupper($_SERVER['REQUEST_METHOD']);
|
| 251 |
|
|
// check if get/post value is available
|
| 252 |
|
|
$sTempLanguage = (isset(${$sRequestMethod}['lang']) ? ${$sRequestMethod}['lang'] : '');
|
| 253 |
|
|
// validate language code
|
| 254 |
|
|
if(preg_match('/^[a-z]{2}$/si', $sTempLanguage)) {
|
| 255 |
|
|
// if there's valid get/post
|
| 256 |
|
|
define('LANGUAGE', strtoupper($sTempLanguage));
|
| 257 |
1349
|
Luisehahne
|
$_SESSION['LANGUAGE']=LANGUAGE;
|
| 258 |
1864
|
darkviper
|
}else {
|
| 259 |
|
|
if(isset($_SESSION['LANGUAGE']) && $_SESSION['LANGUAGE']) {
|
| 260 |
|
|
// if there's valid session value
|
| 261 |
1349
|
Luisehahne
|
define('LANGUAGE', $_SESSION['LANGUAGE']);
|
| 262 |
1864
|
darkviper
|
}else {
|
| 263 |
|
|
// otherwise set to default
|
| 264 |
1349
|
Luisehahne
|
define('LANGUAGE', DEFAULT_LANGUAGE);
|
| 265 |
|
|
}
|
| 266 |
|
|
}
|
| 267 |
1864
|
darkviper
|
// activate translations / load language definitions
|
| 268 |
|
|
/** begin of deprecated part || will be replaced by class Translate **/
|
| 269 |
|
|
// Load Language file
|
| 270 |
|
|
if(!file_exists(WB_PATH.'/languages/'.LANGUAGE.'.php')) {
|
| 271 |
|
|
$sMsg = 'Error loading language file '.LANGUAGE.', please check configuration';
|
| 272 |
|
|
throw new AppException($sMsg);
|
| 273 |
1349
|
Luisehahne
|
} else {
|
| 274 |
1864
|
darkviper
|
// include language file
|
| 275 |
|
|
require_once(WB_PATH.'/languages/'.LANGUAGE.'.php');
|
| 276 |
1349
|
Luisehahne
|
}
|
| 277 |
1864
|
darkviper
|
/** end of deprecated part **/
|
| 278 |
|
|
// instantiate and initialize adaptor for temporary registry replacement ---
|
| 279 |
|
|
if(class_exists('WbAdaptor')) {
|
| 280 |
|
|
WbAdaptor::getInstance()->getWbConstants();
|
| 281 |
1349
|
Luisehahne
|
}
|
| 282 |
1864
|
darkviper
|
// load and activate new global translation table
|
| 283 |
|
|
Translate::getInstance()->initialize('en',
|
| 284 |
|
|
(defined('DEFAULT_LANGUAGE') ? DEFAULT_LANGUAGE : ''),
|
| 285 |
|
|
(defined('LANGUAGE') ? LANGUAGE : ''),
|
| 286 |
|
|
'WbOldStyle');
|
| 287 |
|
|
// *** END OF FILE ***********************************************************************
|