1 |
1349
|
Luisehahne
|
<?php
|
2 |
|
|
/**
|
3 |
1864
|
darkviper
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
|
4 |
1349
|
Luisehahne
|
*
|
5 |
1864
|
darkviper
|
* This program is free software: you can redistribute it and/or modify
|
6 |
|
|
* it under the terms of the GNU General Public License as published by
|
7 |
|
|
* the Free Software Foundation, either version 3 of the License, or
|
8 |
|
|
* (at your option) any later version.
|
9 |
1349
|
Luisehahne
|
*
|
10 |
1864
|
darkviper
|
* This program is distributed in the hope that it will be useful,
|
11 |
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
12 |
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
13 |
|
|
* GNU General Public License for more details.
|
14 |
|
|
*
|
15 |
|
|
* You should have received a copy of the GNU General Public License
|
16 |
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
17 |
1349
|
Luisehahne
|
*/
|
18 |
|
|
|
19 |
1617
|
darkviper
|
/**
|
20 |
1864
|
darkviper
|
* initialize.php
|
21 |
|
|
*
|
22 |
|
|
* @category Core
|
23 |
|
|
* @package Core_Environment
|
24 |
|
|
* @author Werner v.d.Decken <wkl@isteam.de>
|
25 |
|
|
* @copyright Werner v.d.Decken <wkl@isteam.de>
|
26 |
|
|
* @license http://www.gnu.org/licenses/gpl.html GPL License
|
27 |
|
|
* @version 0.0.1
|
28 |
|
|
* @revision $Revision$
|
29 |
|
|
* @link $HeadURL$
|
30 |
|
|
* @lastmodified $Date$
|
31 |
|
|
* @since File replaced since 05.02.2013
|
32 |
|
|
* @description set the basic environment to run WebsiteBaker
|
33 |
|
|
*/
|
34 |
|
|
|
35 |
|
|
/* *** define some helper functions *** */
|
36 |
|
|
/**
|
37 |
1617
|
darkviper
|
* sanitize $_SERVER['HTTP_REFERER']
|
38 |
|
|
* @param string $sWbUrl qualified startup URL of current application
|
39 |
|
|
*/
|
40 |
|
|
function SanitizeHttpReferer($sWbUrl = WB_URL) {
|
41 |
|
|
$sTmpReferer = '';
|
42 |
|
|
if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER'] != '') {
|
43 |
|
|
$aRefUrl = parse_url($_SERVER['HTTP_REFERER']);
|
44 |
|
|
if ($aRefUrl !== false) {
|
45 |
|
|
$aRefUrl['host'] = isset($aRefUrl['host']) ? $aRefUrl['host'] : '';
|
46 |
|
|
$aRefUrl['path'] = isset($aRefUrl['path']) ? $aRefUrl['path'] : '';
|
47 |
|
|
$aRefUrl['fragment'] = isset($aRefUrl['fragment']) ? '#'.$aRefUrl['fragment'] : '';
|
48 |
|
|
$aWbUrl = parse_url(WB_URL);
|
49 |
|
|
if ($aWbUrl !== false) {
|
50 |
|
|
$aWbUrl['host'] = isset($aWbUrl['host']) ? $aWbUrl['host'] : '';
|
51 |
|
|
$aWbUrl['path'] = isset($aWbUrl['path']) ? $aWbUrl['path'] : '';
|
52 |
|
|
if (strpos($aRefUrl['host'].$aRefUrl['path'],
|
53 |
|
|
$aWbUrl['host'].$aWbUrl['path']) !== false) {
|
54 |
|
|
$aRefUrl['path'] = preg_replace('#^'.$aWbUrl['path'].'#i', '', $aRefUrl['path']);
|
55 |
|
|
$sTmpReferer = WB_URL.$aRefUrl['path'].$aRefUrl['fragment'];
|
56 |
|
|
}
|
57 |
|
|
unset($aWbUrl);
|
58 |
|
|
}
|
59 |
|
|
unset($aRefUrl);
|
60 |
|
|
}
|
61 |
|
|
}
|
62 |
|
|
$_SERVER['HTTP_REFERER'] = $sTmpReferer;
|
63 |
|
|
}
|
64 |
1864
|
darkviper
|
/**
|
65 |
|
|
* Set constants for system/install values
|
66 |
|
|
* @throws RuntimeException
|
67 |
|
|
*/
|
68 |
1680
|
darkviper
|
function SetInstallPathConstants() {
|
69 |
1864
|
darkviper
|
if(!defined('DEBUG')){ define('DEBUG', false); } // normaly set in config file
|
70 |
1680
|
darkviper
|
if(!defined('ADMIN_DIRECTORY')){ define('ADMIN_DIRECTORY', 'admin'); }
|
71 |
|
|
if(!preg_match('/xx[a-z0-9_][a-z0-9_\-\.]+/i', 'xx'.ADMIN_DIRECTORY)) {
|
72 |
|
|
throw new RuntimeException('Invalid admin-directory: ' . ADMIN_DIRECTORY);
|
73 |
|
|
}
|
74 |
|
|
if(!defined('WB_PATH')){ define('WB_PATH', dirname(dirname(__FILE__))); }
|
75 |
|
|
if(!defined('ADMIN_URL')){ define('ADMIN_URL', WB_URL.'/'.ADMIN_DIRECTORY); }
|
76 |
|
|
if(!defined('ADMIN_PATH')){ define('ADMIN_PATH', WB_PATH.'/'.ADMIN_DIRECTORY); }
|
77 |
|
|
if(!defined('WB_REL')){
|
78 |
|
|
$x1 = parse_url(WB_URL);
|
79 |
|
|
define('WB_REL', (isset($x1['path']) ? $x1['path'] : ''));
|
80 |
|
|
}
|
81 |
1864
|
darkviper
|
define('ADMIN_REL', WB_REL.'/'.ADMIN_DIRECTORY);
|
82 |
1680
|
darkviper
|
if(!defined('DOCUMENT_ROOT')) {
|
83 |
1864
|
darkviper
|
|
84 |
1680
|
darkviper
|
define('DOCUMENT_ROOT', preg_replace('/'.preg_quote(WB_REL, '/').'$/', '', WB_PATH));
|
85 |
|
|
}
|
86 |
1864
|
darkviper
|
define('TMP_PATH', WB_PATH.'/temp');
|
87 |
1680
|
darkviper
|
}
|
88 |
1864
|
darkviper
|
/**
|
89 |
|
|
* Read DB settings from configuration file
|
90 |
|
|
* @return string
|
91 |
|
|
* @throws RuntimeException
|
92 |
|
|
*
|
93 |
|
|
*/
|
94 |
|
|
function readConfiguration($sRetvalType = 'url') {
|
95 |
1874
|
darkviper
|
// check for valid file request. Becomes more stronger in next version
|
96 |
1864
|
darkviper
|
$x = debug_backtrace();
|
97 |
1874
|
darkviper
|
$bValidRequest = false;
|
98 |
|
|
if(sizeof($x) != 0) {
|
99 |
|
|
foreach($x as $aStep) {
|
100 |
|
|
// define the scripts which can read the configuration
|
101 |
1884
|
Luisehahne
|
if(preg_match('/(save.php|index.php|config.php|upgrade-script.php)$/si', $aStep['file'])) {
|
102 |
1874
|
darkviper
|
$bValidRequest = true;
|
103 |
|
|
break;
|
104 |
|
|
}
|
105 |
|
|
}
|
106 |
1884
|
Luisehahne
|
} else {
|
107 |
1874
|
darkviper
|
$bValidRequest = true;
|
108 |
|
|
}
|
109 |
|
|
if(!$bValidRequest) {
|
110 |
|
|
throw new RuntimeException('illegal function request!');
|
111 |
|
|
}
|
112 |
1864
|
darkviper
|
$aRetval = array();
|
113 |
|
|
$sSetupFile = dirname(dirname(__FILE__)).'/setup.ini.php';
|
114 |
|
|
if(is_readable($sSetupFile)) {
|
115 |
|
|
$aCfg = parse_ini_file($sSetupFile, true);
|
116 |
|
|
foreach($aCfg['Constants'] as $key=>$value) {
|
117 |
|
|
if($key == 'debug') { $value = filter_var($value, FILTER_VALIDATE_BOOLEAN); }
|
118 |
|
|
if(!defined(strtoupper($key))) { define(strtoupper($key), $value); }
|
119 |
|
|
}
|
120 |
|
|
$db = $aCfg['DataBase'];
|
121 |
|
|
$db['type'] = isset($db['type']) ? $db['type'] : 'mysql';
|
122 |
|
|
$db['user'] = isset($db['user']) ? $db['user'] : 'foo';
|
123 |
|
|
$db['pass'] = isset($db['pass']) ? $db['pass'] : 'bar';
|
124 |
|
|
$db['host'] = isset($db['host']) ? $db['host'] : 'localhost';
|
125 |
|
|
$db['port'] = isset($db['port']) ? $db['port'] : '3306';
|
126 |
|
|
$db['port'] = ($db['port'] != '3306') ? $db['port'] : '';
|
127 |
|
|
$db['name'] = isset($db['name']) ? $db['name'] : 'dummy';
|
128 |
|
|
$db['charset'] = isset($db['charset']) ? $db['charset'] : 'utf8';
|
129 |
|
|
$db['table_prefix'] = (isset($db['table_prefix']) ? $db['table_prefix'] : '');
|
130 |
|
|
define('TABLE_PREFIX', $db['table_prefix']);
|
131 |
|
|
if($sRetvalType == 'dsn') {
|
132 |
|
|
$aRetval[0] = $db['type'].':dbname='.$db['name'].';host='.$db['host'].';'
|
133 |
|
|
. ($db['port'] != '' ? 'port='.(int)$db['port'].';' : '');
|
134 |
|
|
$aRetval[1] = array('CHARSET' => $db['charset'], 'TABLE_PREFIX' => $db['table_prefix']);
|
135 |
|
|
$aRetval[2] = array( 'user' => $db['user'], 'pass' => $db['pass']);
|
136 |
|
|
}else { // $sRetvalType == 'url'
|
137 |
|
|
$aRetval[0] = $db['type'].'://'.$db['user'].':'.$db['pass'].'@'
|
138 |
|
|
. $db['host'].($db['port'] != '' ? ':'.$db['port'] : '').'/'.$db['name'];
|
139 |
|
|
}
|
140 |
|
|
unset($db, $aCfg);
|
141 |
1874
|
darkviper
|
return $aRetval;
|
142 |
1864
|
darkviper
|
}
|
143 |
|
|
throw new RuntimeException('unable to read setup.ini.php');
|
144 |
|
|
}
|
145 |
|
|
/* ***************************************************************************************
|
146 |
|
|
* Start initialization *
|
147 |
|
|
****************************************************************************************/
|
148 |
|
|
// initialize debug evaluation values ---
|
149 |
|
|
$sDbConnectType = 'url'; // depending from class WbDatabase it can be 'url' or 'dsn'
|
150 |
1680
|
darkviper
|
$starttime = array_sum(explode(" ",microtime()));
|
151 |
1864
|
darkviper
|
$iPhpDeclaredClasses = sizeof(get_declared_classes());
|
152 |
|
|
// disable all kind of magic_quotes in PHP versions before 5.4 ---
|
153 |
|
|
if(version_compare(PHP_VERSION, '5.4.0', '<')) {
|
154 |
|
|
if(get_magic_quotes_gpc() || get_magic_quotes_runtime()) {
|
155 |
|
|
@ini_set('magic_quotes_sybase', 0);
|
156 |
|
|
@ini_set('magic_quotes_gpc', 0);
|
157 |
|
|
@ini_set('magic_quotes_runtime', 0);
|
158 |
|
|
}
|
159 |
|
|
}
|
160 |
1865
|
darkviper
|
// load db configuration ---
|
161 |
|
|
if(defined('DB_TYPE')) {
|
162 |
|
|
$aSqlData = array( 0 => DB_TYPE.'://'.DB_USERNAME.':'.DB_PASSWORD.'@'.DB_HOST.'/'.DB_NAME);
|
163 |
|
|
}else {
|
164 |
|
|
$aSqlData = readConfiguration($sDbConnectType);
|
165 |
|
|
}
|
166 |
|
|
// sanitize $_SERVER['HTTP_REFERER'] ---
|
167 |
|
|
SanitizeHttpReferer(WB_URL);
|
168 |
|
|
SetInstallPathConstants();
|
169 |
1864
|
darkviper
|
// define constant systemenvironment settings ---
|
170 |
|
|
date_default_timezone_set('UTC');
|
171 |
|
|
if(!defined('MAX_TIME')) { define('MAX_TIME', (pow(2, 31)-1)); } // 32-Bit Timestamp of 19 Jan 2038 03:14:07 GMT
|
172 |
1873
|
darkviper
|
$sTmp = (isset($_SERVER['HTTP_DNT']) && $_SERVER['HTTP_DNT'] != '') ? $_SERVER['HTTP_DNT'] : '0';
|
173 |
|
|
if(!defined('DO_NOT_TRACK')) { define('DO_NOT_TRACK', ($sTmp[0] == '1')); }
|
174 |
1864
|
darkviper
|
// register WB basic autoloader ---
|
175 |
|
|
$sTmp = dirname(__FILE__).'/WbAutoloader.php';
|
176 |
1873
|
darkviper
|
if(!class_exists('WbAutoloader')){
|
177 |
|
|
include($sTmp);
|
178 |
|
|
}
|
179 |
1687
|
darkviper
|
WbAutoloader::doRegister(array(ADMIN_DIRECTORY=>'a', 'modules'=>'m'));
|
180 |
1864
|
darkviper
|
// register TWIG autoloader ---
|
181 |
1865
|
darkviper
|
$sTmp = dirname(dirname(__FILE__)).'/include/Sensio/Twig/lib/Twig/Autoloader.php';
|
182 |
1873
|
darkviper
|
if(!class_exists('Twig_Autoloader')) {
|
183 |
|
|
include($sTmp);
|
184 |
|
|
}
|
185 |
1687
|
darkviper
|
Twig_Autoloader::register();
|
186 |
1864
|
darkviper
|
// aktivate exceptionhandler ---
|
187 |
|
|
if(!function_exists('globalExceptionHandler')) {
|
188 |
|
|
include(dirname(__FILE__).'/globalExceptionHandler.php');
|
189 |
|
|
}
|
190 |
|
|
// ---------------------------
|
191 |
|
|
// Create global database instance ---
|
192 |
1686
|
darkviper
|
$database = WbDatabase::getInstance();
|
193 |
1864
|
darkviper
|
if($sDbConnectType == 'dsn') {
|
194 |
1874
|
darkviper
|
$bTmp = $database->doConnect($aSqlData[0], $aSqlData[1]['user'], $aSqlData[1]['pass'], $aSqlData[2]);
|
195 |
1864
|
darkviper
|
}else {
|
196 |
1874
|
darkviper
|
$bTmp = $database->doConnect($aSqlData[0], TABLE_PREFIX);
|
197 |
1680
|
darkviper
|
}
|
198 |
1864
|
darkviper
|
unset($aSqlData);
|
199 |
|
|
// load global settings from database and define global consts from ---
|
200 |
|
|
$sql = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'settings`';
|
201 |
|
|
if(($oSettings = $database->query($sql))) {
|
202 |
|
|
if(!$oSettings->numRows()) { throw new AppException('no settings found'); }
|
203 |
|
|
while($aSetting = $oSettings->fetchRow(MYSQL_ASSOC)) {
|
204 |
|
|
//sanitize true/false values
|
205 |
|
|
$aSetting['value'] = ($aSetting['value'] == 'true'
|
206 |
|
|
? true
|
207 |
|
|
: ($aSetting['value'] == 'false'
|
208 |
|
|
? false
|
209 |
|
|
: $aSetting['value'])
|
210 |
|
|
);
|
211 |
1873
|
darkviper
|
$sSettingName = strtoupper($aSetting['name']);
|
212 |
|
|
switch($sSettingName):
|
213 |
|
|
case 'STRING_FILE_MODE':
|
214 |
|
|
$iTmp = ((intval(octdec($aSetting['value'])) & ~0111)|0600);
|
215 |
|
|
define('OCTAL_FILE_MODE', $iTmp);
|
216 |
|
|
define('STRING_FILE_MODE', sprintf('0%03o', $iTmp));
|
217 |
|
|
break;
|
218 |
|
|
case 'STRING_DIR_MODE':
|
219 |
|
|
$iTmp = (intval(octdec($aSetting['value'])) |0711);
|
220 |
|
|
define('OCTAL_DIR_MODE', $iTmp);
|
221 |
|
|
define('STRING_DIR_MODE', sprintf('0%03o', $iTmp));
|
222 |
1874
|
darkviper
|
break;
|
223 |
1873
|
darkviper
|
case 'PAGES_DIRECTORY':
|
224 |
|
|
// sanitize pages_directory
|
225 |
|
|
$sTmp = trim($aSetting['value'], '/');
|
226 |
|
|
$sTmp = ($sTmp == '' ? '' : '/'.$sTmp);
|
227 |
|
|
define('PAGES_DIRECTORY', $sTmp);
|
228 |
|
|
break;
|
229 |
|
|
default: // make global const from setting
|
230 |
1874
|
darkviper
|
@define($sSettingName, $aSetting['value']);
|
231 |
1873
|
darkviper
|
break;
|
232 |
|
|
endswitch;
|
233 |
1864
|
darkviper
|
}
|
234 |
|
|
}else { throw new AppException($database->get_error()); }
|
235 |
1872
|
Luisehahne
|
// set error-reporting from loaded settings ---
|
236 |
|
|
if(intval(ER_LEVEL) > 0 ) {
|
237 |
|
|
error_reporting(ER_LEVEL);
|
238 |
|
|
if( intval(ini_get ( 'display_errors' )) == 0 ) {
|
239 |
|
|
ini_set('display_errors', 1);
|
240 |
|
|
}
|
241 |
|
|
}
|
242 |
|
|
// Start a session ---
|
243 |
|
|
if(!defined('SESSION_STARTED')) {
|
244 |
|
|
session_name(APP_NAME.'_session_id');
|
245 |
|
|
@session_start();
|
246 |
|
|
define('SESSION_STARTED', true);
|
247 |
|
|
}
|
248 |
1864
|
darkviper
|
// get/set users timezone ---
|
249 |
|
|
define('TIMEZONE', (isset($_SESSION['TIMEZONE']) ? $_SESSION['TIMEZONE'] : DEFAULT_TIMEZONE));
|
250 |
|
|
define('DATE_FORMAT', (isset($_SESSION['DATE_FORMAT']) ? $_SESSION['DATE_FORMAT'] : DEFAULT_DATE_FORMAT));
|
251 |
|
|
define('TIME_FORMAT', (isset($_SESSION['TIME_FORMAT']) ? $_SESSION['TIME_FORMAT'] : DEFAULT_TIME_FORMAT));
|
252 |
|
|
// set Theme directory ---
|
253 |
|
|
define('THEME_URL', WB_URL.'/templates/'.DEFAULT_THEME);
|
254 |
|
|
define('THEME_PATH', WB_PATH.'/templates/'.DEFAULT_THEME);
|
255 |
|
|
define('THEME_REL', WB_REL.'/templates/'.DEFAULT_THEME);
|
256 |
|
|
// extended wb editor settings
|
257 |
|
|
define('EDIT_ONE_SECTION', false);
|
258 |
|
|
define('EDITOR_WIDTH', 0);
|
259 |
|
|
// define form security class and preload it ---
|
260 |
1465
|
Luisehahne
|
$sSecMod = (defined('SECURE_FORM_MODULE') && SECURE_FORM_MODULE != '') ? '.'.SECURE_FORM_MODULE : '';
|
261 |
1462
|
DarkViper
|
$sSecMod = WB_PATH.'/framework/SecureForm'.$sSecMod.'.php';
|
262 |
|
|
require_once($sSecMod);
|
263 |
1864
|
darkviper
|
// *** begin deprecated part *************************************************************
|
264 |
|
|
// load settings for use in Captch and ASP module
|
265 |
|
|
if (!defined("WB_INSTALL_PROCESS")) {
|
266 |
|
|
$sql = 'SELECT * FROM `'.TABLE_PREFIX.'mod_captcha_control`';
|
267 |
|
|
// request settings from database
|
268 |
|
|
if(($oSettings = $database->query($sql))) {
|
269 |
|
|
if(($aSetting = $oSettings->fetchRow(MYSQL_ASSOC))) {
|
270 |
|
|
define('ENABLED_CAPTCHA', ($aSetting['enabled_captcha'] == '1'));
|
271 |
|
|
define('ENABLED_ASP', ($aSetting['enabled_asp'] == '1'));
|
272 |
|
|
define('CAPTCHA_TYPE', $aSetting['captcha_type']);
|
273 |
|
|
define('ASP_SESSION_MIN_AGE', (int)$aSetting['asp_session_min_age']);
|
274 |
|
|
define('ASP_VIEW_MIN_AGE', (int)$aSetting['asp_view_min_age']);
|
275 |
|
|
define('ASP_INPUT_MIN_AGE', (int)$aSetting['asp_input_min_age']);
|
276 |
|
|
}
|
277 |
|
|
}
|
278 |
|
|
}
|
279 |
|
|
if(defined('ENABLED_ASP') && ENABLED_ASP && !isset($_SESSION['session_started'])) {
|
280 |
1349
|
Luisehahne
|
$_SESSION['session_started'] = time();
|
281 |
1864
|
darkviper
|
}
|
282 |
|
|
// *** end of deprecated part ************************************************************
|
283 |
|
|
// get user language ---
|
284 |
|
|
$sRequestMethod = '_'.strtoupper($_SERVER['REQUEST_METHOD']);
|
285 |
|
|
// check if get/post value is available
|
286 |
|
|
$sTempLanguage = (isset(${$sRequestMethod}['lang']) ? ${$sRequestMethod}['lang'] : '');
|
287 |
|
|
// validate language code
|
288 |
|
|
if(preg_match('/^[a-z]{2}$/si', $sTempLanguage)) {
|
289 |
|
|
// if there's valid get/post
|
290 |
|
|
define('LANGUAGE', strtoupper($sTempLanguage));
|
291 |
1349
|
Luisehahne
|
$_SESSION['LANGUAGE']=LANGUAGE;
|
292 |
1864
|
darkviper
|
}else {
|
293 |
|
|
if(isset($_SESSION['LANGUAGE']) && $_SESSION['LANGUAGE']) {
|
294 |
|
|
// if there's valid session value
|
295 |
1349
|
Luisehahne
|
define('LANGUAGE', $_SESSION['LANGUAGE']);
|
296 |
1864
|
darkviper
|
}else {
|
297 |
|
|
// otherwise set to default
|
298 |
1349
|
Luisehahne
|
define('LANGUAGE', DEFAULT_LANGUAGE);
|
299 |
|
|
}
|
300 |
|
|
}
|
301 |
1864
|
darkviper
|
// activate translations / load language definitions
|
302 |
|
|
/** begin of deprecated part || will be replaced by class Translate **/
|
303 |
|
|
// Load Language file
|
304 |
|
|
if(!file_exists(WB_PATH.'/languages/'.LANGUAGE.'.php')) {
|
305 |
|
|
$sMsg = 'Error loading language file '.LANGUAGE.', please check configuration';
|
306 |
|
|
throw new AppException($sMsg);
|
307 |
1349
|
Luisehahne
|
} else {
|
308 |
1864
|
darkviper
|
// include language file
|
309 |
|
|
require_once(WB_PATH.'/languages/'.LANGUAGE.'.php');
|
310 |
1349
|
Luisehahne
|
}
|
311 |
1864
|
darkviper
|
/** end of deprecated part **/
|
312 |
|
|
// instantiate and initialize adaptor for temporary registry replacement ---
|
313 |
|
|
if(class_exists('WbAdaptor')) {
|
314 |
|
|
WbAdaptor::getInstance()->getWbConstants();
|
315 |
1349
|
Luisehahne
|
}
|
316 |
1864
|
darkviper
|
// load and activate new global translation table
|
317 |
|
|
Translate::getInstance()->initialize('en',
|
318 |
1873
|
darkviper
|
(defined('DEFAULT_LANGUAGE') ? DEFAULT_LANGUAGE : ''),
|
319 |
|
|
(defined('LANGUAGE') ? LANGUAGE : '')
|
320 |
|
|
);
|
321 |
1864
|
darkviper
|
// *** END OF FILE ***********************************************************************
|