|
1
|
<?php
|
|
2
|
/**
|
|
3
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
|
|
4
|
*
|
|
5
|
* This program is free software: you can redistribute it and/or modify
|
|
6
|
* it under the terms of the GNU General Public License as published by
|
|
7
|
* the Free Software Foundation, either version 3 of the License, or
|
|
8
|
* (at your option) any later version.
|
|
9
|
*
|
|
10
|
* This program is distributed in the hope that it will be useful,
|
|
11
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
12
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
13
|
* GNU General Public License for more details.
|
|
14
|
*
|
|
15
|
* You should have received a copy of the GNU General Public License
|
|
16
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
17
|
*/
|
|
18
|
|
|
19
|
/**
|
|
20
|
* initialize.php
|
|
21
|
*
|
|
22
|
* @category Core
|
|
23
|
* @package Core_Environment
|
|
24
|
* @author Werner v.d.Decken <wkl@isteam.de>
|
|
25
|
* @copyright Werner v.d.Decken <wkl@isteam.de>
|
|
26
|
* @license http://www.gnu.org/licenses/gpl.html GPL License
|
|
27
|
* @version 0.0.1
|
|
28
|
* @revision $Revision: 1884 $
|
|
29
|
* @link $HeadURL: svn://isteam.dynxs.de/wb-archiv/branches/2.8.x/wb/framework/initialize.php $
|
|
30
|
* @lastmodified $Date: 2013-03-10 16:53:43 +0100 (Sun, 10 Mar 2013) $
|
|
31
|
* @since File replaced since 05.02.2013
|
|
32
|
* @description set the basic environment to run WebsiteBaker
|
|
33
|
*/
|
|
34
|
|
|
35
|
/* *** define some helper functions *** */
|
|
36
|
/**
|
|
37
|
* sanitize $_SERVER['HTTP_REFERER']
|
|
38
|
* @param string $sWbUrl qualified startup URL of current application
|
|
39
|
*/
|
|
40
|
function SanitizeHttpReferer($sWbUrl = WB_URL) {
|
|
41
|
$sTmpReferer = '';
|
|
42
|
if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER'] != '') {
|
|
43
|
$aRefUrl = parse_url($_SERVER['HTTP_REFERER']);
|
|
44
|
if ($aRefUrl !== false) {
|
|
45
|
$aRefUrl['host'] = isset($aRefUrl['host']) ? $aRefUrl['host'] : '';
|
|
46
|
$aRefUrl['path'] = isset($aRefUrl['path']) ? $aRefUrl['path'] : '';
|
|
47
|
$aRefUrl['fragment'] = isset($aRefUrl['fragment']) ? '#'.$aRefUrl['fragment'] : '';
|
|
48
|
$aWbUrl = parse_url(WB_URL);
|
|
49
|
if ($aWbUrl !== false) {
|
|
50
|
$aWbUrl['host'] = isset($aWbUrl['host']) ? $aWbUrl['host'] : '';
|
|
51
|
$aWbUrl['path'] = isset($aWbUrl['path']) ? $aWbUrl['path'] : '';
|
|
52
|
if (strpos($aRefUrl['host'].$aRefUrl['path'],
|
|
53
|
$aWbUrl['host'].$aWbUrl['path']) !== false) {
|
|
54
|
$aRefUrl['path'] = preg_replace('#^'.$aWbUrl['path'].'#i', '', $aRefUrl['path']);
|
|
55
|
$sTmpReferer = WB_URL.$aRefUrl['path'].$aRefUrl['fragment'];
|
|
56
|
}
|
|
57
|
unset($aWbUrl);
|
|
58
|
}
|
|
59
|
unset($aRefUrl);
|
|
60
|
}
|
|
61
|
}
|
|
62
|
$_SERVER['HTTP_REFERER'] = $sTmpReferer;
|
|
63
|
}
|
|
64
|
/**
|
|
65
|
* Set constants for system/install values
|
|
66
|
* @throws RuntimeException
|
|
67
|
*/
|
|
68
|
function SetInstallPathConstants() {
|
|
69
|
if(!defined('DEBUG')){ define('DEBUG', false); } // normaly set in config file
|
|
70
|
if(!defined('ADMIN_DIRECTORY')){ define('ADMIN_DIRECTORY', 'admin'); }
|
|
71
|
if(!preg_match('/xx[a-z0-9_][a-z0-9_\-\.]+/i', 'xx'.ADMIN_DIRECTORY)) {
|
|
72
|
throw new RuntimeException('Invalid admin-directory: ' . ADMIN_DIRECTORY);
|
|
73
|
}
|
|
74
|
if(!defined('WB_PATH')){ define('WB_PATH', dirname(dirname(__FILE__))); }
|
|
75
|
if(!defined('ADMIN_URL')){ define('ADMIN_URL', WB_URL.'/'.ADMIN_DIRECTORY); }
|
|
76
|
if(!defined('ADMIN_PATH')){ define('ADMIN_PATH', WB_PATH.'/'.ADMIN_DIRECTORY); }
|
|
77
|
if(!defined('WB_REL')){
|
|
78
|
$x1 = parse_url(WB_URL);
|
|
79
|
define('WB_REL', (isset($x1['path']) ? $x1['path'] : ''));
|
|
80
|
}
|
|
81
|
define('ADMIN_REL', WB_REL.'/'.ADMIN_DIRECTORY);
|
|
82
|
if(!defined('DOCUMENT_ROOT')) {
|
|
83
|
|
|
84
|
define('DOCUMENT_ROOT', preg_replace('/'.preg_quote(WB_REL, '/').'$/', '', WB_PATH));
|
|
85
|
}
|
|
86
|
define('TMP_PATH', WB_PATH.'/temp');
|
|
87
|
}
|
|
88
|
/**
|
|
89
|
* Read DB settings from configuration file
|
|
90
|
* @return string
|
|
91
|
* @throws RuntimeException
|
|
92
|
*
|
|
93
|
*/
|
|
94
|
function readConfiguration($sRetvalType = 'url') {
|
|
95
|
// check for valid file request. Becomes more stronger in next version
|
|
96
|
$x = debug_backtrace();
|
|
97
|
$bValidRequest = false;
|
|
98
|
if(sizeof($x) != 0) {
|
|
99
|
foreach($x as $aStep) {
|
|
100
|
// define the scripts which can read the configuration
|
|
101
|
if(preg_match('/(save.php|index.php|config.php|upgrade-script.php)$/si', $aStep['file'])) {
|
|
102
|
$bValidRequest = true;
|
|
103
|
break;
|
|
104
|
}
|
|
105
|
}
|
|
106
|
} else {
|
|
107
|
$bValidRequest = true;
|
|
108
|
}
|
|
109
|
if(!$bValidRequest) {
|
|
110
|
throw new RuntimeException('illegal function request!');
|
|
111
|
}
|
|
112
|
$aRetval = array();
|
|
113
|
$sSetupFile = dirname(dirname(__FILE__)).'/setup.ini.php';
|
|
114
|
if(is_readable($sSetupFile)) {
|
|
115
|
$aCfg = parse_ini_file($sSetupFile, true);
|
|
116
|
foreach($aCfg['Constants'] as $key=>$value) {
|
|
117
|
if($key == 'debug') { $value = filter_var($value, FILTER_VALIDATE_BOOLEAN); }
|
|
118
|
if(!defined(strtoupper($key))) { define(strtoupper($key), $value); }
|
|
119
|
}
|
|
120
|
$db = $aCfg['DataBase'];
|
|
121
|
$db['type'] = isset($db['type']) ? $db['type'] : 'mysql';
|
|
122
|
$db['user'] = isset($db['user']) ? $db['user'] : 'foo';
|
|
123
|
$db['pass'] = isset($db['pass']) ? $db['pass'] : 'bar';
|
|
124
|
$db['host'] = isset($db['host']) ? $db['host'] : 'localhost';
|
|
125
|
$db['port'] = isset($db['port']) ? $db['port'] : '3306';
|
|
126
|
$db['port'] = ($db['port'] != '3306') ? $db['port'] : '';
|
|
127
|
$db['name'] = isset($db['name']) ? $db['name'] : 'dummy';
|
|
128
|
$db['charset'] = isset($db['charset']) ? $db['charset'] : 'utf8';
|
|
129
|
$db['table_prefix'] = (isset($db['table_prefix']) ? $db['table_prefix'] : '');
|
|
130
|
define('TABLE_PREFIX', $db['table_prefix']);
|
|
131
|
if($sRetvalType == 'dsn') {
|
|
132
|
$aRetval[0] = $db['type'].':dbname='.$db['name'].';host='.$db['host'].';'
|
|
133
|
. ($db['port'] != '' ? 'port='.(int)$db['port'].';' : '');
|
|
134
|
$aRetval[1] = array('CHARSET' => $db['charset'], 'TABLE_PREFIX' => $db['table_prefix']);
|
|
135
|
$aRetval[2] = array( 'user' => $db['user'], 'pass' => $db['pass']);
|
|
136
|
}else { // $sRetvalType == 'url'
|
|
137
|
$aRetval[0] = $db['type'].'://'.$db['user'].':'.$db['pass'].'@'
|
|
138
|
. $db['host'].($db['port'] != '' ? ':'.$db['port'] : '').'/'.$db['name'];
|
|
139
|
}
|
|
140
|
unset($db, $aCfg);
|
|
141
|
return $aRetval;
|
|
142
|
}
|
|
143
|
throw new RuntimeException('unable to read setup.ini.php');
|
|
144
|
}
|
|
145
|
/* ***************************************************************************************
|
|
146
|
* Start initialization *
|
|
147
|
****************************************************************************************/
|
|
148
|
// initialize debug evaluation values ---
|
|
149
|
$sDbConnectType = 'url'; // depending from class WbDatabase it can be 'url' or 'dsn'
|
|
150
|
$starttime = array_sum(explode(" ",microtime()));
|
|
151
|
$iPhpDeclaredClasses = sizeof(get_declared_classes());
|
|
152
|
// disable all kind of magic_quotes in PHP versions before 5.4 ---
|
|
153
|
if(version_compare(PHP_VERSION, '5.4.0', '<')) {
|
|
154
|
if(get_magic_quotes_gpc() || get_magic_quotes_runtime()) {
|
|
155
|
@ini_set('magic_quotes_sybase', 0);
|
|
156
|
@ini_set('magic_quotes_gpc', 0);
|
|
157
|
@ini_set('magic_quotes_runtime', 0);
|
|
158
|
}
|
|
159
|
}
|
|
160
|
// load db configuration ---
|
|
161
|
if(defined('DB_TYPE')) {
|
|
162
|
$aSqlData = array( 0 => DB_TYPE.'://'.DB_USERNAME.':'.DB_PASSWORD.'@'.DB_HOST.'/'.DB_NAME);
|
|
163
|
}else {
|
|
164
|
$aSqlData = readConfiguration($sDbConnectType);
|
|
165
|
}
|
|
166
|
// sanitize $_SERVER['HTTP_REFERER'] ---
|
|
167
|
SanitizeHttpReferer(WB_URL);
|
|
168
|
SetInstallPathConstants();
|
|
169
|
// define constant systemenvironment settings ---
|
|
170
|
date_default_timezone_set('UTC');
|
|
171
|
if(!defined('MAX_TIME')) { define('MAX_TIME', (pow(2, 31)-1)); } // 32-Bit Timestamp of 19 Jan 2038 03:14:07 GMT
|
|
172
|
$sTmp = (isset($_SERVER['HTTP_DNT']) && $_SERVER['HTTP_DNT'] != '') ? $_SERVER['HTTP_DNT'] : '0';
|
|
173
|
if(!defined('DO_NOT_TRACK')) { define('DO_NOT_TRACK', ($sTmp[0] == '1')); }
|
|
174
|
// register WB basic autoloader ---
|
|
175
|
$sTmp = dirname(__FILE__).'/WbAutoloader.php';
|
|
176
|
if(!class_exists('WbAutoloader')){
|
|
177
|
include($sTmp);
|
|
178
|
}
|
|
179
|
WbAutoloader::doRegister(array(ADMIN_DIRECTORY=>'a', 'modules'=>'m'));
|
|
180
|
// register TWIG autoloader ---
|
|
181
|
$sTmp = dirname(dirname(__FILE__)).'/include/Sensio/Twig/lib/Twig/Autoloader.php';
|
|
182
|
if(!class_exists('Twig_Autoloader')) {
|
|
183
|
include($sTmp);
|
|
184
|
}
|
|
185
|
Twig_Autoloader::register();
|
|
186
|
// aktivate exceptionhandler ---
|
|
187
|
if(!function_exists('globalExceptionHandler')) {
|
|
188
|
include(dirname(__FILE__).'/globalExceptionHandler.php');
|
|
189
|
}
|
|
190
|
// ---------------------------
|
|
191
|
// Create global database instance ---
|
|
192
|
$database = WbDatabase::getInstance();
|
|
193
|
if($sDbConnectType == 'dsn') {
|
|
194
|
$bTmp = $database->doConnect($aSqlData[0], $aSqlData[1]['user'], $aSqlData[1]['pass'], $aSqlData[2]);
|
|
195
|
}else {
|
|
196
|
$bTmp = $database->doConnect($aSqlData[0], TABLE_PREFIX);
|
|
197
|
}
|
|
198
|
unset($aSqlData);
|
|
199
|
// load global settings from database and define global consts from ---
|
|
200
|
$sql = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'settings`';
|
|
201
|
if(($oSettings = $database->query($sql))) {
|
|
202
|
if(!$oSettings->numRows()) { throw new AppException('no settings found'); }
|
|
203
|
while($aSetting = $oSettings->fetchRow(MYSQL_ASSOC)) {
|
|
204
|
//sanitize true/false values
|
|
205
|
$aSetting['value'] = ($aSetting['value'] == 'true'
|
|
206
|
? true
|
|
207
|
: ($aSetting['value'] == 'false'
|
|
208
|
? false
|
|
209
|
: $aSetting['value'])
|
|
210
|
);
|
|
211
|
$sSettingName = strtoupper($aSetting['name']);
|
|
212
|
switch($sSettingName):
|
|
213
|
case 'STRING_FILE_MODE':
|
|
214
|
$iTmp = ((intval(octdec($aSetting['value'])) & ~0111)|0600);
|
|
215
|
define('OCTAL_FILE_MODE', $iTmp);
|
|
216
|
define('STRING_FILE_MODE', sprintf('0%03o', $iTmp));
|
|
217
|
break;
|
|
218
|
case 'STRING_DIR_MODE':
|
|
219
|
$iTmp = (intval(octdec($aSetting['value'])) |0711);
|
|
220
|
define('OCTAL_DIR_MODE', $iTmp);
|
|
221
|
define('STRING_DIR_MODE', sprintf('0%03o', $iTmp));
|
|
222
|
break;
|
|
223
|
case 'PAGES_DIRECTORY':
|
|
224
|
// sanitize pages_directory
|
|
225
|
$sTmp = trim($aSetting['value'], '/');
|
|
226
|
$sTmp = ($sTmp == '' ? '' : '/'.$sTmp);
|
|
227
|
define('PAGES_DIRECTORY', $sTmp);
|
|
228
|
break;
|
|
229
|
default: // make global const from setting
|
|
230
|
@define($sSettingName, $aSetting['value']);
|
|
231
|
break;
|
|
232
|
endswitch;
|
|
233
|
}
|
|
234
|
}else { throw new AppException($database->get_error()); }
|
|
235
|
// set error-reporting from loaded settings ---
|
|
236
|
if(intval(ER_LEVEL) > 0 ) {
|
|
237
|
error_reporting(ER_LEVEL);
|
|
238
|
if( intval(ini_get ( 'display_errors' )) == 0 ) {
|
|
239
|
ini_set('display_errors', 1);
|
|
240
|
}
|
|
241
|
}
|
|
242
|
// Start a session ---
|
|
243
|
if(!defined('SESSION_STARTED')) {
|
|
244
|
session_name(APP_NAME.'_session_id');
|
|
245
|
@session_start();
|
|
246
|
define('SESSION_STARTED', true);
|
|
247
|
}
|
|
248
|
// get/set users timezone ---
|
|
249
|
define('TIMEZONE', (isset($_SESSION['TIMEZONE']) ? $_SESSION['TIMEZONE'] : DEFAULT_TIMEZONE));
|
|
250
|
define('DATE_FORMAT', (isset($_SESSION['DATE_FORMAT']) ? $_SESSION['DATE_FORMAT'] : DEFAULT_DATE_FORMAT));
|
|
251
|
define('TIME_FORMAT', (isset($_SESSION['TIME_FORMAT']) ? $_SESSION['TIME_FORMAT'] : DEFAULT_TIME_FORMAT));
|
|
252
|
// set Theme directory ---
|
|
253
|
define('THEME_URL', WB_URL.'/templates/'.DEFAULT_THEME);
|
|
254
|
define('THEME_PATH', WB_PATH.'/templates/'.DEFAULT_THEME);
|
|
255
|
define('THEME_REL', WB_REL.'/templates/'.DEFAULT_THEME);
|
|
256
|
// extended wb editor settings
|
|
257
|
define('EDIT_ONE_SECTION', false);
|
|
258
|
define('EDITOR_WIDTH', 0);
|
|
259
|
// define form security class and preload it ---
|
|
260
|
$sSecMod = (defined('SECURE_FORM_MODULE') && SECURE_FORM_MODULE != '') ? '.'.SECURE_FORM_MODULE : '';
|
|
261
|
$sSecMod = WB_PATH.'/framework/SecureForm'.$sSecMod.'.php';
|
|
262
|
require_once($sSecMod);
|
|
263
|
// *** begin deprecated part *************************************************************
|
|
264
|
// load settings for use in Captch and ASP module
|
|
265
|
if (!defined("WB_INSTALL_PROCESS")) {
|
|
266
|
$sql = 'SELECT * FROM `'.TABLE_PREFIX.'mod_captcha_control`';
|
|
267
|
// request settings from database
|
|
268
|
if(($oSettings = $database->query($sql))) {
|
|
269
|
if(($aSetting = $oSettings->fetchRow(MYSQL_ASSOC))) {
|
|
270
|
define('ENABLED_CAPTCHA', ($aSetting['enabled_captcha'] == '1'));
|
|
271
|
define('ENABLED_ASP', ($aSetting['enabled_asp'] == '1'));
|
|
272
|
define('CAPTCHA_TYPE', $aSetting['captcha_type']);
|
|
273
|
define('ASP_SESSION_MIN_AGE', (int)$aSetting['asp_session_min_age']);
|
|
274
|
define('ASP_VIEW_MIN_AGE', (int)$aSetting['asp_view_min_age']);
|
|
275
|
define('ASP_INPUT_MIN_AGE', (int)$aSetting['asp_input_min_age']);
|
|
276
|
}
|
|
277
|
}
|
|
278
|
}
|
|
279
|
if(defined('ENABLED_ASP') && ENABLED_ASP && !isset($_SESSION['session_started'])) {
|
|
280
|
$_SESSION['session_started'] = time();
|
|
281
|
}
|
|
282
|
// *** end of deprecated part ************************************************************
|
|
283
|
// get user language ---
|
|
284
|
$sRequestMethod = '_'.strtoupper($_SERVER['REQUEST_METHOD']);
|
|
285
|
// check if get/post value is available
|
|
286
|
$sTempLanguage = (isset(${$sRequestMethod}['lang']) ? ${$sRequestMethod}['lang'] : '');
|
|
287
|
// validate language code
|
|
288
|
if(preg_match('/^[a-z]{2}$/si', $sTempLanguage)) {
|
|
289
|
// if there's valid get/post
|
|
290
|
define('LANGUAGE', strtoupper($sTempLanguage));
|
|
291
|
$_SESSION['LANGUAGE']=LANGUAGE;
|
|
292
|
}else {
|
|
293
|
if(isset($_SESSION['LANGUAGE']) && $_SESSION['LANGUAGE']) {
|
|
294
|
// if there's valid session value
|
|
295
|
define('LANGUAGE', $_SESSION['LANGUAGE']);
|
|
296
|
}else {
|
|
297
|
// otherwise set to default
|
|
298
|
define('LANGUAGE', DEFAULT_LANGUAGE);
|
|
299
|
}
|
|
300
|
}
|
|
301
|
// activate translations / load language definitions
|
|
302
|
/** begin of deprecated part || will be replaced by class Translate **/
|
|
303
|
// Load Language file
|
|
304
|
if(!file_exists(WB_PATH.'/languages/'.LANGUAGE.'.php')) {
|
|
305
|
$sMsg = 'Error loading language file '.LANGUAGE.', please check configuration';
|
|
306
|
throw new AppException($sMsg);
|
|
307
|
} else {
|
|
308
|
// include language file
|
|
309
|
require_once(WB_PATH.'/languages/'.LANGUAGE.'.php');
|
|
310
|
}
|
|
311
|
/** end of deprecated part **/
|
|
312
|
// instantiate and initialize adaptor for temporary registry replacement ---
|
|
313
|
if(class_exists('WbAdaptor')) {
|
|
314
|
WbAdaptor::getInstance()->getWbConstants();
|
|
315
|
}
|
|
316
|
// load and activate new global translation table
|
|
317
|
Translate::getInstance()->initialize('en',
|
|
318
|
(defined('DEFAULT_LANGUAGE') ? DEFAULT_LANGUAGE : ''),
|
|
319
|
(defined('LANGUAGE') ? LANGUAGE : '')
|
|
320
|
);
|
|
321
|
// *** END OF FILE ***********************************************************************
|
|
322
|
|