| 1 |
1349
|
Luisehahne
|
<?php
|
| 2 |
|
|
/**
|
| 3 |
1864
|
darkviper
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
|
| 4 |
1349
|
Luisehahne
|
*
|
| 5 |
1864
|
darkviper
|
* This program is free software: you can redistribute it and/or modify
|
| 6 |
|
|
* it under the terms of the GNU General Public License as published by
|
| 7 |
|
|
* the Free Software Foundation, either version 3 of the License, or
|
| 8 |
|
|
* (at your option) any later version.
|
| 9 |
1349
|
Luisehahne
|
*
|
| 10 |
1864
|
darkviper
|
* This program is distributed in the hope that it will be useful,
|
| 11 |
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
| 12 |
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
| 13 |
|
|
* GNU General Public License for more details.
|
| 14 |
|
|
*
|
| 15 |
|
|
* You should have received a copy of the GNU General Public License
|
| 16 |
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
| 17 |
1349
|
Luisehahne
|
*/
|
| 18 |
|
|
|
| 19 |
1617
|
darkviper
|
/**
|
| 20 |
1864
|
darkviper
|
* initialize.php
|
| 21 |
|
|
*
|
| 22 |
|
|
* @category Core
|
| 23 |
|
|
* @package Core_Environment
|
| 24 |
|
|
* @author Werner v.d.Decken <wkl@isteam.de>
|
| 25 |
|
|
* @copyright Werner v.d.Decken <wkl@isteam.de>
|
| 26 |
|
|
* @license http://www.gnu.org/licenses/gpl.html GPL License
|
| 27 |
|
|
* @version 0.0.1
|
| 28 |
|
|
* @revision $Revision$
|
| 29 |
|
|
* @link $HeadURL$
|
| 30 |
|
|
* @lastmodified $Date$
|
| 31 |
|
|
* @since File replaced since 05.02.2013
|
| 32 |
|
|
* @description set the basic environment to run WebsiteBaker
|
| 33 |
|
|
*/
|
| 34 |
|
|
|
| 35 |
|
|
/* *** define some helper functions *** */
|
| 36 |
|
|
/**
|
| 37 |
1617
|
darkviper
|
* sanitize $_SERVER['HTTP_REFERER']
|
| 38 |
|
|
* @param string $sWbUrl qualified startup URL of current application
|
| 39 |
|
|
*/
|
| 40 |
2015
|
darkviper
|
function initSanitizeHttpReferer($sWbUrl) {
|
| 41 |
1617
|
darkviper
|
$sTmpReferer = '';
|
| 42 |
|
|
if (isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER'] != '') {
|
| 43 |
2015
|
darkviper
|
$sTmpReferer = $_SERVER['HTTP_REFERER'];
|
| 44 |
1617
|
darkviper
|
$aRefUrl = parse_url($_SERVER['HTTP_REFERER']);
|
| 45 |
|
|
if ($aRefUrl !== false) {
|
| 46 |
|
|
$aRefUrl['host'] = isset($aRefUrl['host']) ? $aRefUrl['host'] : '';
|
| 47 |
|
|
$aRefUrl['path'] = isset($aRefUrl['path']) ? $aRefUrl['path'] : '';
|
| 48 |
|
|
$aRefUrl['fragment'] = isset($aRefUrl['fragment']) ? '#'.$aRefUrl['fragment'] : '';
|
| 49 |
2015
|
darkviper
|
$aWbUrl = parse_url($sWbUrl);
|
| 50 |
1617
|
darkviper
|
if ($aWbUrl !== false) {
|
| 51 |
|
|
$aWbUrl['host'] = isset($aWbUrl['host']) ? $aWbUrl['host'] : '';
|
| 52 |
|
|
$aWbUrl['path'] = isset($aWbUrl['path']) ? $aWbUrl['path'] : '';
|
| 53 |
|
|
if (strpos($aRefUrl['host'].$aRefUrl['path'],
|
| 54 |
|
|
$aWbUrl['host'].$aWbUrl['path']) !== false) {
|
| 55 |
|
|
$aRefUrl['path'] = preg_replace('#^'.$aWbUrl['path'].'#i', '', $aRefUrl['path']);
|
| 56 |
2015
|
darkviper
|
$sTmpReferer = $sWbUrl.$aRefUrl['path'].$aRefUrl['fragment'];
|
| 57 |
1617
|
darkviper
|
}
|
| 58 |
|
|
unset($aWbUrl);
|
| 59 |
|
|
}
|
| 60 |
|
|
unset($aRefUrl);
|
| 61 |
|
|
}
|
| 62 |
|
|
}
|
| 63 |
|
|
$_SERVER['HTTP_REFERER'] = $sTmpReferer;
|
| 64 |
|
|
}
|
| 65 |
1864
|
darkviper
|
/**
|
| 66 |
|
|
* Set constants for system/install values
|
| 67 |
|
|
* @throws RuntimeException
|
| 68 |
|
|
*/
|
| 69 |
2015
|
darkviper
|
function initSetInstallPathConstants() {
|
| 70 |
1864
|
darkviper
|
if(!defined('DEBUG')){ define('DEBUG', false); } // normaly set in config file
|
| 71 |
1680
|
darkviper
|
if(!defined('ADMIN_DIRECTORY')){ define('ADMIN_DIRECTORY', 'admin'); }
|
| 72 |
|
|
if(!preg_match('/xx[a-z0-9_][a-z0-9_\-\.]+/i', 'xx'.ADMIN_DIRECTORY)) {
|
| 73 |
|
|
throw new RuntimeException('Invalid admin-directory: ' . ADMIN_DIRECTORY);
|
| 74 |
|
|
}
|
| 75 |
|
|
if(!defined('WB_PATH')){ define('WB_PATH', dirname(dirname(__FILE__))); }
|
| 76 |
2015
|
darkviper
|
if(!defined('ADMIN_URL')){ define('ADMIN_URL', rtrim(WB_URL, '/\\').'/'.ADMIN_DIRECTORY); }
|
| 77 |
1680
|
darkviper
|
if(!defined('ADMIN_PATH')){ define('ADMIN_PATH', WB_PATH.'/'.ADMIN_DIRECTORY); }
|
| 78 |
|
|
if(!defined('WB_REL')){
|
| 79 |
|
|
$x1 = parse_url(WB_URL);
|
| 80 |
|
|
define('WB_REL', (isset($x1['path']) ? $x1['path'] : ''));
|
| 81 |
|
|
}
|
| 82 |
1887
|
Luisehahne
|
if(!defined('ADMIN_REL')){ define('ADMIN_REL', WB_REL.'/'.ADMIN_DIRECTORY); }
|
| 83 |
1680
|
darkviper
|
if(!defined('DOCUMENT_ROOT')) {
|
| 84 |
2015
|
darkviper
|
define('DOCUMENT_ROOT', preg_replace('/'.preg_quote(str_replace('\\', '/', WB_REL), '/').'$/', '', str_replace('\\', '/', WB_PATH)));
|
| 85 |
|
|
$_SERVER['DOCUMENT_ROOT'] = DOCUMENT_ROOT;
|
| 86 |
1680
|
darkviper
|
}
|
| 87 |
1887
|
Luisehahne
|
if(!defined('TMP_PATH')){ define('TMP_PATH', WB_PATH.'/temp'); }
|
| 88 |
1680
|
darkviper
|
}
|
| 89 |
1864
|
darkviper
|
/**
|
| 90 |
2015
|
darkviper
|
* checkValidCaller
|
| 91 |
|
|
* @param array $aCaller list of allowed scripts
|
| 92 |
|
|
* @return true || Exception
|
| 93 |
1864
|
darkviper
|
* @throws RuntimeException
|
| 94 |
2015
|
darkviper
|
* @description test if acctual file is called from one of the given list
|
| 95 |
1864
|
darkviper
|
*/
|
| 96 |
2015
|
darkviper
|
function initCheckValidCaller(array $aCaller)
|
| 97 |
|
|
{
|
| 98 |
2060
|
darkviper
|
return true;
|
| 99 |
1864
|
darkviper
|
$x = debug_backtrace();
|
| 100 |
2015
|
darkviper
|
if(sizeof($x) == 0) {
|
| 101 |
|
|
return true;
|
| 102 |
|
|
}
|
| 103 |
|
|
$sPattern = '/('.str_replace('#', '|', preg_quote(implode('#', $aCaller), '/')).')$/si';
|
| 104 |
|
|
foreach($x as $aStep) {
|
| 105 |
|
|
// define the scripts which can read the configuration
|
| 106 |
|
|
if(preg_match($sPattern, $aStep['file'])) {
|
| 107 |
|
|
return true;
|
| 108 |
1874
|
darkviper
|
}
|
| 109 |
|
|
}
|
| 110 |
2015
|
darkviper
|
throw new RuntimeException('illegal file request!');
|
| 111 |
|
|
}
|
| 112 |
|
|
/**
|
| 113 |
|
|
* Read DB settings from configuration file
|
| 114 |
|
|
* @return array
|
| 115 |
|
|
* @throws RuntimeException
|
| 116 |
|
|
*
|
| 117 |
|
|
*/
|
| 118 |
|
|
function initReadSetupFile()
|
| 119 |
|
|
{
|
| 120 |
|
|
// check for valid file request. Becomes more stronger in next version
|
| 121 |
|
|
initCheckValidCaller(array('save.php','index.php','config.php','upgrade-script.php'));
|
| 122 |
|
|
$aCfg = array();
|
| 123 |
|
|
|
| 124 |
1864
|
darkviper
|
$sSetupFile = dirname(dirname(__FILE__)).'/setup.ini.php';
|
| 125 |
|
|
if(is_readable($sSetupFile)) {
|
| 126 |
|
|
$aCfg = parse_ini_file($sSetupFile, true);
|
| 127 |
|
|
foreach($aCfg['Constants'] as $key=>$value) {
|
| 128 |
2001
|
Luisehahne
|
switch($key):
|
| 129 |
1885
|
Luisehahne
|
case 'DEBUG':
|
| 130 |
|
|
$value = filter_var($value, FILTER_VALIDATE_BOOLEAN);
|
| 131 |
1887
|
Luisehahne
|
if(!defined('DEBUG')) { define('DEBUG', $value); }
|
| 132 |
1885
|
Luisehahne
|
break;
|
| 133 |
2015
|
darkviper
|
case 'WB_URL': // << case is set deprecated
|
| 134 |
1885
|
Luisehahne
|
case 'AppUrl':
|
| 135 |
|
|
$value = trim(str_replace('\\', '/', $value), '/');
|
| 136 |
|
|
if(!defined('WB_URL')) { define('WB_URL', $value); }
|
| 137 |
|
|
break;
|
| 138 |
2015
|
darkviper
|
case 'ADMIN_DIRECTORY': // << case is set deprecated
|
| 139 |
1885
|
Luisehahne
|
case 'AcpDir':
|
| 140 |
|
|
$value = trim(str_replace('\\', '/', $value), '/');
|
| 141 |
|
|
if(!defined('ADMIN_DIRECTORY')) { define('ADMIN_DIRECTORY', $value); }
|
| 142 |
|
|
break;
|
| 143 |
|
|
default:
|
| 144 |
|
|
if(!defined($key)) { define($key, $value); }
|
| 145 |
|
|
break;
|
| 146 |
|
|
endswitch;
|
| 147 |
1864
|
darkviper
|
}
|
| 148 |
|
|
}
|
| 149 |
2015
|
darkviper
|
return $aCfg;
|
| 150 |
|
|
// throw new RuntimeException('unable to read setup.ini.php');
|
| 151 |
1864
|
darkviper
|
}
|
| 152 |
2015
|
darkviper
|
/**
|
| 153 |
|
|
* GetDbConnectData
|
| 154 |
|
|
* @param array $aCfg
|
| 155 |
|
|
* @param string $sDbConnectType can be 'url' or 'dsn'
|
| 156 |
|
|
* @return array
|
| 157 |
|
|
*
|
| 158 |
|
|
*/
|
| 159 |
|
|
function initGetDbConnectData(array $aCfg, $sDbConnectType = 'url')
|
| 160 |
|
|
{
|
| 161 |
|
|
if(defined('DB_TYPE'))
|
| 162 |
|
|
{
|
| 163 |
|
|
// import constants for compatibility reasons
|
| 164 |
|
|
$db = array();
|
| 165 |
|
|
if(defined('DB_TYPE')) { $db['type'] = DB_TYPE; }
|
| 166 |
|
|
if(defined('DB_USERNAME')) { $db['user'] = DB_USERNAME; }
|
| 167 |
|
|
if(defined('DB_PASSWORD')) { $db['pass'] = DB_PASSWORD; }
|
| 168 |
|
|
if(defined('DB_HOST')) { $db['host'] = DB_HOST; }
|
| 169 |
|
|
if(defined('DB_PORT')) { $db['port'] = DB_PORT; }
|
| 170 |
|
|
if(defined('DB_NAME')) { $db['name'] = DB_NAME; }
|
| 171 |
|
|
if(defined('DB_CHARSET')) { $db['charset'] = DB_CHARSET; }
|
| 172 |
|
|
if(defined('TABLE_PREFIX')) { $db['table_prefix'] = TABLE_PREFIX; }
|
| 173 |
|
|
$aCfg['DataBase'] = $db;
|
| 174 |
|
|
}
|
| 175 |
|
|
// sanitize values
|
| 176 |
|
|
$db = $aCfg['DataBase'];
|
| 177 |
|
|
$db['type'] = isset($db['type']) ? $db['type'] : 'mysql';
|
| 178 |
|
|
$db['user'] = isset($db['user']) ? $db['user'] : 'foo';
|
| 179 |
|
|
$db['pass'] = isset($db['pass']) ? $db['pass'] : 'bar';
|
| 180 |
|
|
$db['host'] = isset($db['host']) ? $db['host'] : 'localhost';
|
| 181 |
|
|
$db['port'] = isset($db['port']) ? $db['port'] : '3306';
|
| 182 |
|
|
$db['port'] = ($db['port'] != '3306') ? $db['port'] : '';
|
| 183 |
|
|
$db['name'] = isset($db['name']) ? $db['name'] : 'dummy';
|
| 184 |
|
|
$db['charset'] = isset($db['charset']) ? trim($db['charset']) : 'utf8';
|
| 185 |
|
|
$db['table_prefix'] = (isset($db['table_prefix']) ? $db['table_prefix'] : '');
|
| 186 |
|
|
if(!defined('TABLE_PREFIX')) { define('TABLE_PREFIX', $db['table_prefix']); }
|
| 187 |
|
|
if($sDbConnectType == 'dsn') {
|
| 188 |
|
|
// build dsn to connect
|
| 189 |
|
|
$aRetval[0] = $db['type'].':dbname='.$db['name'].';host='.$db['host'].';'
|
| 190 |
|
|
. ($db['port'] != '' ? 'port='.(int)$db['port'].';' : '');
|
| 191 |
|
|
$aRetval[1] = array('CHARSET' => $db['charset'], 'TABLE_PREFIX' => $db['table_prefix']);
|
| 192 |
|
|
$aRetval[2] = array( 'user' => $db['user'], 'pass' => $db['pass']);
|
| 193 |
|
|
}else {
|
| 194 |
|
|
// build url to connect
|
| 195 |
|
|
$aRetval[0] = $db['type'].'://'.$db['user'].':'.$db['pass'].'@'
|
| 196 |
|
|
. $db['host'].($db['port'] != '' ? ':'.$db['port'] : '').'/'.$db['name']
|
| 197 |
|
|
. '?Charset='.$db['charset'].'&TablePrefix='.$db['table_prefix'];
|
| 198 |
|
|
}
|
| 199 |
|
|
return $aRetval;
|
| 200 |
|
|
}
|
| 201 |
|
|
|
| 202 |
1864
|
darkviper
|
/* ***************************************************************************************
|
| 203 |
|
|
* Start initialization *
|
| 204 |
|
|
****************************************************************************************/
|
| 205 |
|
|
// initialize debug evaluation values ---
|
| 206 |
1680
|
darkviper
|
$starttime = array_sum(explode(" ",microtime()));
|
| 207 |
1864
|
darkviper
|
$iPhpDeclaredClasses = sizeof(get_declared_classes());
|
| 208 |
2015
|
darkviper
|
$sDbConnectType = 'url'; // depending from class WbDatabase it can be 'url' or 'dsn'
|
| 209 |
2029
|
darkviper
|
// PHP less then 5.3.2 is prohibited ---
|
| 210 |
|
|
if (version_compare(PHP_VERSION, '5.3.2', '<')) {
|
| 211 |
|
|
$sMsg = '<p style="color: #ff0000;">WebsiteBaker is not able to run with PHP-Version less then 5.3.2!!<br />'
|
| 212 |
|
|
. 'Please change your PHP-Version to any kind from 5.3.2 and up!<br />'
|
| 213 |
|
|
. 'If you have problems to solve that, ask your hosting provider for it.<br />'
|
| 214 |
|
|
. 'The very best solution is the use of PHP-5.4 and up</p>';
|
| 215 |
|
|
die($sMsg);
|
| 216 |
|
|
}
|
| 217 |
1864
|
darkviper
|
// disable all kind of magic_quotes in PHP versions before 5.4 ---
|
| 218 |
2029
|
darkviper
|
if (function_exists('get_magic_quotes_gpc') && filter_var(get_magic_quotes_gpc(), FILTER_VALIDATE_BOOLEAN)) {
|
| 219 |
2022
|
darkviper
|
$sMsg = '<p style="color: #ff0000;">WebsiteBaker is not able to run with magic_quotes=on!!<br />'
|
| 220 |
|
|
. 'Please change your PHP-ini or add a _htaccess file to switch this setting to off!<br />'
|
| 221 |
|
|
. 'If you have problems to solve that, ask your hosting provider for it.<br />'
|
| 222 |
|
|
. 'The very best solution is the use of PHP-5.4 and up</p>';
|
| 223 |
|
|
die($sMsg);
|
| 224 |
1864
|
darkviper
|
}
|
| 225 |
2015
|
darkviper
|
// load configuration ---
|
| 226 |
|
|
$aCfg = initReadSetupFile();
|
| 227 |
1865
|
darkviper
|
// sanitize $_SERVER['HTTP_REFERER'] ---
|
| 228 |
2015
|
darkviper
|
initSetInstallPathConstants();
|
| 229 |
|
|
initSanitizeHttpReferer(WB_URL);
|
| 230 |
1864
|
darkviper
|
// register WB basic autoloader ---
|
| 231 |
|
|
$sTmp = dirname(__FILE__).'/WbAutoloader.php';
|
| 232 |
1873
|
darkviper
|
if(!class_exists('WbAutoloader')){
|
| 233 |
|
|
include($sTmp);
|
| 234 |
|
|
}
|
| 235 |
2029
|
darkviper
|
WbAutoloader::doRegister(array(ADMIN_DIRECTORY=>'a', 'modules'=>'m', 'templates'=>'t', 'include'=>'i'));
|
| 236 |
2015
|
darkviper
|
// instantiate and initialize adaptor for temporary registry replacement ---
|
| 237 |
|
|
WbAdaptor::getInstance()->getWbConstants();
|
| 238 |
1864
|
darkviper
|
// register TWIG autoloader ---
|
| 239 |
1865
|
darkviper
|
$sTmp = dirname(dirname(__FILE__)).'/include/Sensio/Twig/lib/Twig/Autoloader.php';
|
| 240 |
1873
|
darkviper
|
if(!class_exists('Twig_Autoloader')) {
|
| 241 |
|
|
include($sTmp);
|
| 242 |
|
|
}
|
| 243 |
1687
|
darkviper
|
Twig_Autoloader::register();
|
| 244 |
1864
|
darkviper
|
// aktivate exceptionhandler ---
|
| 245 |
|
|
if(!function_exists('globalExceptionHandler')) {
|
| 246 |
|
|
include(dirname(__FILE__).'/globalExceptionHandler.php');
|
| 247 |
|
|
}
|
| 248 |
|
|
// ---------------------------
|
| 249 |
2015
|
darkviper
|
// get Database connection data from configuration
|
| 250 |
|
|
$aSqlData = initGetDbConnectData($aCfg, $sDbConnectType);
|
| 251 |
1864
|
darkviper
|
// Create global database instance ---
|
| 252 |
2015
|
darkviper
|
$oDb = $database = WbDatabase::getInstance();
|
| 253 |
1864
|
darkviper
|
if($sDbConnectType == 'dsn') {
|
| 254 |
2015
|
darkviper
|
$bTmp = $oDb->doConnect($aSqlData[0], $aSqlData[1]['user'], $aSqlData[1]['pass'], $aSqlData[2]);
|
| 255 |
1864
|
darkviper
|
}else {
|
| 256 |
2015
|
darkviper
|
$bTmp = $oDb->doConnect($aSqlData[0]);
|
| 257 |
1680
|
darkviper
|
}
|
| 258 |
2015
|
darkviper
|
// remove critical data from memory
|
| 259 |
|
|
unset($aSqlData, $aCfg);
|
| 260 |
|
|
|
| 261 |
|
|
if(!defined('TABLE_PREFIX')) { define('TABLE_PREFIX', $oDb->TablePrefix); }
|
| 262 |
|
|
|
| 263 |
1864
|
darkviper
|
// load global settings from database and define global consts from ---
|
| 264 |
|
|
$sql = 'SELECT `name`, `value` FROM `'.TABLE_PREFIX.'settings`';
|
| 265 |
|
|
if(($oSettings = $database->query($sql))) {
|
| 266 |
|
|
if(!$oSettings->numRows()) { throw new AppException('no settings found'); }
|
| 267 |
|
|
while($aSetting = $oSettings->fetchRow(MYSQL_ASSOC)) {
|
| 268 |
|
|
//sanitize true/false values
|
| 269 |
|
|
$aSetting['value'] = ($aSetting['value'] == 'true'
|
| 270 |
|
|
? true
|
| 271 |
|
|
: ($aSetting['value'] == 'false'
|
| 272 |
|
|
? false
|
| 273 |
|
|
: $aSetting['value'])
|
| 274 |
|
|
);
|
| 275 |
1873
|
darkviper
|
$sSettingName = strtoupper($aSetting['name']);
|
| 276 |
|
|
switch($sSettingName):
|
| 277 |
|
|
case 'STRING_FILE_MODE':
|
| 278 |
|
|
$iTmp = ((intval(octdec($aSetting['value'])) & ~0111)|0600);
|
| 279 |
1887
|
Luisehahne
|
if(!defined('OCTAL_FILE_MODE')) { define('OCTAL_FILE_MODE', $iTmp); }
|
| 280 |
|
|
if(!defined('STRING_FILE_MODE')) { define('STRING_FILE_MODE', sprintf('0%03o', $iTmp)); }
|
| 281 |
1873
|
darkviper
|
break;
|
| 282 |
|
|
case 'STRING_DIR_MODE':
|
| 283 |
|
|
$iTmp = (intval(octdec($aSetting['value'])) |0711);
|
| 284 |
1887
|
Luisehahne
|
if(!defined('OCTAL_DIR_MODE')) { define('OCTAL_DIR_MODE', $iTmp); }
|
| 285 |
|
|
if(!defined('STRING_DIR_MODE')) { define('STRING_DIR_MODE', sprintf('0%03o', $iTmp)); }
|
| 286 |
1874
|
darkviper
|
break;
|
| 287 |
1873
|
darkviper
|
case 'PAGES_DIRECTORY':
|
| 288 |
|
|
// sanitize pages_directory
|
| 289 |
|
|
$sTmp = trim($aSetting['value'], '/');
|
| 290 |
|
|
$sTmp = ($sTmp == '' ? '' : '/'.$sTmp);
|
| 291 |
1887
|
Luisehahne
|
if(!defined('PAGES_DIRECTORY')) { define('PAGES_DIRECTORY', $sTmp); }
|
| 292 |
1873
|
darkviper
|
break;
|
| 293 |
|
|
default: // make global const from setting
|
| 294 |
1887
|
Luisehahne
|
if(!defined($sSettingName)) { define($sSettingName, $aSetting['value']); }
|
| 295 |
1873
|
darkviper
|
break;
|
| 296 |
|
|
endswitch;
|
| 297 |
1864
|
darkviper
|
}
|
| 298 |
|
|
}else { throw new AppException($database->get_error()); }
|
| 299 |
1872
|
Luisehahne
|
// set error-reporting from loaded settings ---
|
| 300 |
|
|
if(intval(ER_LEVEL) > 0 ) {
|
| 301 |
|
|
error_reporting(ER_LEVEL);
|
| 302 |
|
|
if( intval(ini_get ( 'display_errors' )) == 0 ) {
|
| 303 |
|
|
ini_set('display_errors', 1);
|
| 304 |
|
|
}
|
| 305 |
|
|
}
|
| 306 |
|
|
// Start a session ---
|
| 307 |
|
|
if(!defined('SESSION_STARTED')) {
|
| 308 |
|
|
session_name(APP_NAME.'_session_id');
|
| 309 |
|
|
@session_start();
|
| 310 |
|
|
define('SESSION_STARTED', true);
|
| 311 |
|
|
}
|
| 312 |
1963
|
darkviper
|
// get/set server timezone ---
|
| 313 |
|
|
if(!defined('SERVER_TIMEZONE')) { define('SERVER_TIMEZONE', "UTC"); }
|
| 314 |
|
|
date_default_timezone_set( SERVER_TIMEZONE );
|
| 315 |
|
|
if(!defined('MAX_TIME')) { define('MAX_TIME', (pow(2, 31)-1)); } // 32-Bit Timestamp of 19 Jan 2038 03:14:07 GMT
|
| 316 |
|
|
$sTmp = (isset($_SERVER['HTTP_DNT']) && $_SERVER['HTTP_DNT'] != '') ? $_SERVER['HTTP_DNT'] : '0';
|
| 317 |
|
|
if(!defined('DO_NOT_TRACK')) { define('DO_NOT_TRACK', ($sTmp[0] == '1')); }
|
| 318 |
1864
|
darkviper
|
// get/set users timezone ---
|
| 319 |
1887
|
Luisehahne
|
if(!defined('TIMEZONE')) { define('TIMEZONE', (isset($_SESSION['TIMEZONE']) ? $_SESSION['TIMEZONE'] : DEFAULT_TIMEZONE)); }
|
| 320 |
|
|
if(!defined('DATE_FORMAT')) { define('DATE_FORMAT', (isset($_SESSION['DATE_FORMAT']) ? $_SESSION['DATE_FORMAT'] : DEFAULT_DATE_FORMAT)); }
|
| 321 |
|
|
if(!defined('TIME_FORMAT')) { define('TIME_FORMAT', (isset($_SESSION['TIME_FORMAT']) ? $_SESSION['TIME_FORMAT'] : DEFAULT_TIME_FORMAT)); }
|
| 322 |
1864
|
darkviper
|
// set Theme directory ---
|
| 323 |
2038
|
darkviper
|
if(!defined('THEME_URL')) { define('THEME_URL', WB_URL.'/templates/'.DEFAULT_THEME); }
|
| 324 |
1887
|
Luisehahne
|
if(!defined('THEME_PATH')) { define('THEME_PATH', WB_PATH.'/templates/'.DEFAULT_THEME); }
|
| 325 |
|
|
if(!defined('THEME_REL')) { define('THEME_REL', WB_REL.'/templates/'.DEFAULT_THEME); }
|
| 326 |
1864
|
darkviper
|
// extended wb editor settings
|
| 327 |
1887
|
Luisehahne
|
if(!defined('EDIT_ONE_SECTION')) { define('EDIT_ONE_SECTION', false); }
|
| 328 |
|
|
if(!defined('EDITOR_WIDTH')) { define('EDITOR_WIDTH', 0); }
|
| 329 |
1864
|
darkviper
|
// define form security class and preload it ---
|
| 330 |
1465
|
Luisehahne
|
$sSecMod = (defined('SECURE_FORM_MODULE') && SECURE_FORM_MODULE != '') ? '.'.SECURE_FORM_MODULE : '';
|
| 331 |
1462
|
DarkViper
|
$sSecMod = WB_PATH.'/framework/SecureForm'.$sSecMod.'.php';
|
| 332 |
|
|
require_once($sSecMod);
|
| 333 |
1864
|
darkviper
|
// *** begin deprecated part *************************************************************
|
| 334 |
|
|
// load settings for use in Captch and ASP module
|
| 335 |
1887
|
Luisehahne
|
if (!defined('WB_INSTALL_PROCESS') && !defined('ENABLED_CAPTCHA')) {
|
| 336 |
1864
|
darkviper
|
$sql = 'SELECT * FROM `'.TABLE_PREFIX.'mod_captcha_control`';
|
| 337 |
|
|
// request settings from database
|
| 338 |
|
|
if(($oSettings = $database->query($sql))) {
|
| 339 |
|
|
if(($aSetting = $oSettings->fetchRow(MYSQL_ASSOC))) {
|
| 340 |
|
|
define('ENABLED_CAPTCHA', ($aSetting['enabled_captcha'] == '1'));
|
| 341 |
|
|
define('ENABLED_ASP', ($aSetting['enabled_asp'] == '1'));
|
| 342 |
|
|
define('CAPTCHA_TYPE', $aSetting['captcha_type']);
|
| 343 |
|
|
define('ASP_SESSION_MIN_AGE', (int)$aSetting['asp_session_min_age']);
|
| 344 |
|
|
define('ASP_VIEW_MIN_AGE', (int)$aSetting['asp_view_min_age']);
|
| 345 |
|
|
define('ASP_INPUT_MIN_AGE', (int)$aSetting['asp_input_min_age']);
|
| 346 |
|
|
}
|
| 347 |
|
|
}
|
| 348 |
|
|
}
|
| 349 |
|
|
if(defined('ENABLED_ASP') && ENABLED_ASP && !isset($_SESSION['session_started'])) {
|
| 350 |
1349
|
Luisehahne
|
$_SESSION['session_started'] = time();
|
| 351 |
1864
|
darkviper
|
}
|
| 352 |
|
|
// *** end of deprecated part ************************************************************
|
| 353 |
|
|
// get user language ---
|
| 354 |
2060
|
darkviper
|
$sRequestMethod = '_'.strtoupper($_SERVER['REQUEST_METHOD']);
|
| 355 |
|
|
// check if get/post value is available
|
| 356 |
|
|
$sTempLanguage = (isset(${$sRequestMethod}['lang']) ? ${$sRequestMethod}['lang'] : '');
|
| 357 |
|
|
// validate language code
|
| 358 |
|
|
if (preg_match('/^[a-z]{2}$/si', $sTempLanguage)) {
|
| 359 |
|
|
// if there's valid get/post
|
| 360 |
|
|
define('LANGUAGE', strtoupper($sTempLanguage));
|
| 361 |
|
|
} else {
|
| 362 |
|
|
if (!defined('LANGUAGE')) {
|
| 363 |
|
|
if(isset($_SESSION['LANGUAGE']) && $_SESSION['LANGUAGE']) {
|
| 364 |
|
|
// if there's valid session value
|
| 365 |
|
|
define('LANGUAGE', $_SESSION['LANGUAGE']);
|
| 366 |
|
|
} else {
|
| 367 |
|
|
// otherwise set to default
|
| 368 |
|
|
define('LANGUAGE', DEFAULT_LANGUAGE);
|
| 369 |
|
|
}
|
| 370 |
|
|
}
|
| 371 |
|
|
}
|
| 372 |
|
|
$_SESSION['LANGUAGE'] = LANGUAGE;
|
| 373 |
1864
|
darkviper
|
// activate translations / load language definitions
|
| 374 |
|
|
/** begin of deprecated part || will be replaced by class Translate **/
|
| 375 |
|
|
// Load Language file
|
| 376 |
|
|
if(!file_exists(WB_PATH.'/languages/'.LANGUAGE.'.php')) {
|
| 377 |
|
|
$sMsg = 'Error loading language file '.LANGUAGE.', please check configuration';
|
| 378 |
|
|
throw new AppException($sMsg);
|
| 379 |
1349
|
Luisehahne
|
} else {
|
| 380 |
1864
|
darkviper
|
// include language file
|
| 381 |
|
|
require_once(WB_PATH.'/languages/'.LANGUAGE.'.php');
|
| 382 |
1349
|
Luisehahne
|
}
|
| 383 |
1864
|
darkviper
|
/** end of deprecated part **/
|
| 384 |
|
|
// instantiate and initialize adaptor for temporary registry replacement ---
|
| 385 |
2015
|
darkviper
|
WbAdaptor::getInstance()->getWbConstants();
|
| 386 |
1864
|
darkviper
|
// load and activate new global translation table
|
| 387 |
|
|
Translate::getInstance()->initialize('en',
|
| 388 |
1873
|
darkviper
|
(defined('DEFAULT_LANGUAGE') ? DEFAULT_LANGUAGE : ''),
|
| 389 |
1885
|
Luisehahne
|
(defined('LANGUAGE') ? LANGUAGE : ''),
|
| 390 |
|
|
'WbOldStyle',
|
| 391 |
2015
|
darkviper
|
(Translate::CACHE_DISABLED|Translate::KEEP_MISSING)
|
| 392 |
|
|
// (DEBUG ? Translate::CACHE_DISABLED|Translate::KEEP_MISSING : 0)
|
| 393 |
1873
|
darkviper
|
);
|
| 394 |
1963
|
darkviper
|
if(!class_exists('PasswordHash', false)) { include(WB_PATH.'/include/phpass/PasswordHash.php'); }
|
| 395 |
1932
|
darkviper
|
$oPass = Password::getInstance(new PasswordHash(Password::CRYPT_LOOPS_DEFAULT, Password::HASH_TYPE_AUTO));
|
| 396 |
1930
|
darkviper
|
if(defined('PASSWORD_CRYPT_LOOPS')) { $oPass->setIteration(PASSWORD_CRYPT_LOOPS); }
|
| 397 |
1932
|
darkviper
|
if(defined('PASSWORD_HASH_TYPES')) { $oPass->setHashType(PASSWORD_HASH_TYPES); }
|
| 398 |
1864
|
darkviper
|
// *** END OF FILE ***********************************************************************
|