WB 2.08.x

<?php

/**

 *

 * @author          Ryan Djurovich (2004-2009)

 * @author          Dietmar Wöllbrink (luisehahne)

 * @author          M.v.d.Decken (DarkViper)

 * @platform        WebsiteBaker 2.8.x

 */

// Must include code to stop this file being accessed directly

	require_once(dirname(__FILE__).'/globalExceptionHandler.php');

	throw new IllegalFileException();

}

class wb extends SecureForm

{

	protected $_oDb      = null;

/** @var object instance holds several values from the application global scope */

	protected $_oReg     = null;

/** @var object instance holds all of the translations */

	protected $_oTrans   = null;

		parent::__construct($mode);

		$this->_oDb    = WbDatabase::getInstance();

		$this->_oReg   = WbAdaptor::getInstance();

		$this->_oTrans = Translate::getInstance();

 *

 *

 *

 */

	public function getAvailableLanguagesObjectInstance( ) {

			$sql = 'SELECT `directory`,`name` '

			     . 'FROM `'.$this->_oDb->TablePrefix.'addons` '

		         . 'WHERE `type` = \'language\' '

		         . 'ORDER BY `directory`';

        return ($this->_oDb->query($sql));

	}

/**

 *

 *

 * @return array of all visible languages with defined fields

 *

 */

	public function getAvailableLanguages( ) {

        $aRetval = array();

        if($oRes = $this->getAvailableLanguagesObjectInstance())

        {

            while($aRow = $oRes->fetchRow(MYSQL_ASSOC))

            {

                $aRetval[$aRow['directory']] = $aRow['name'];

            }

        }

        return ( $aRetval);

	}

/**

 *

 *

 *

 */

//        global $database;

			 .                 '`page_code`, `link`, `language`, `visibility`, '

			 .                 '`viewing_groups`,`viewing_users`,`position` '

			 . 'FROM `'.$this->_oDb->TablePrefix.'pages` '

			 . 'WHERE `level`= \'0\' '

			 .       'AND `root_parent`=`page_id` '

			 .       'AND `visibility`!=\'none\' '

			 .       'AND `visibility`!=\'hidden\' '

			 . 'GROUP BY `language` '

			 . 'ORDER BY `position`';

        if($oRes = $this->_oDb->query($sql))

        {

            while($aRow = $oRes->fetchRow(MYSQL_ASSOC))

                $aRetval[$aRow['language']] = $aRow;

 *

 *

 * @return comma separate list of first visible languages

 *

 */

        $aRetval = array_keys($this->getLanguagesDetailsInUsed()) ;

        if(sizeof($aRetval)==0) { return null; }

        return implode(',', $aRetval);

     * Created parse_url utf-8 compatible function

     *

     * @param string $url The string to decode

     * @return array Associative array containing the different components

     *

     */

		$encodedUrl = preg_replace_callback('%[^:/?#&=\.]+%usD',

		              create_function('$aMatches', ';return urlencode($aMatches[0]);'),

/*		                           'urlencode(\'$0\')', */

		                           $url);

		$components = parse_url($encodedUrl);

		foreach ($components as &$component)

			$component = urldecode($component);

return $components;

 *

 * @access public

 * @param mixed $groups_list1: an array or a coma seperated list of group-ids

 * @param mixed $groups_list2: an array or a coma seperated list of group-ids

 * @param array &$matches: an array-var whitch will return possible matches

 * @return bool: true there is a match, otherwise false

 */

		if( $groups_list1 == '' ) { return false; }

		if( $groups_list2 == '' ) { return false; }

		}

		}

		$matches = array_intersect( $groups_list1, $groups_list2);

		return ( sizeof($matches) != 0 );

	}

/* ****************

 * ADMIN (uid=1) always is treated like a member of any groups

 *

 * @access public

 * @param mixed $groups_list: an array or a coma seperated list of group-ids

 * @return bool: true if current user is member of one of this groups, otherwise false

 */

		if( $this->get_user_id() == 1 ) { return true; }

		return $this->is_group_match( $groups_list, $this->get_groups_id() );

	}

// This will check page-visibility and user- and group-rights.

/* page_is_visible() returns

	false: if page-visibility is 'none' or 'deleted', or page-vis. is 'registered' or 'private' and user isn't allowed to see the page.

	true: if page-visibility is 'public' or 'hidden', or page-vis. is 'registered' or 'private' and user _is_ allowed to see the page.

*/

		{

			case 'none':

			case 'deleted':

				$show_it = false;

				break;

			case 'hidden':

			case 'public':

				$show_it = true;

				break;

			case 'private':

			case 'registered':

				if($this->is_authenticated() == true)

				{

					$show_it = ( $this->is_group_match($this->get_groups_id(), $page['viewing_groups']) ||

								 $this->is_group_match($this->get_user_id(), $page['viewing_users']) );

				}

	}

		global $database;

		$now = time();

		$sql .= 'WHERE ('.$now.' BETWEEN `publ_start` AND `publ_end`) OR ';

		$sql .=       '('.$now.' > `publ_start` AND `publ_end`=0) ';

		$sql .=       'AND `page_id`='.(int)$page['page_id'];

		return ($database->get_one($sql) != false);

   	}

	// Check whether we should show a page or not (for front-end)

		{

			$sql  = 'SELECT `page_id`, `visibility`, `viewing_groups`, `viewing_users` ';

			$sql .= 'FROM `'.TABLE_PREFIX.'pages` WHERE `page_id`='.(int)$page;

			if( ($res_pages = $database->query($sql))!= null )

			{

				if( !($page = $res_pages->fetchRow()) ) { return false; }

			}

		}

		return ($this->page_is_visible($page) && $this->page_is_active($page));

	// Check if the user is already authenticated or not

		            $_SESSION['USER_ID'] != "" AND

		            is_numeric($_SESSION['USER_ID']));

        return $retval;

	// Modified addslashes function which takes into account magic_quotes

	function add_slashes($input) {

		}

	// Ditto for stripslashes

	// Attn: this is _not_ the counterpart to $this->add_slashes() !

	// Use stripslashes() to undo a preliminarily done $this->add_slashes()

	// The purpose of $this->strip_slashes() is to undo the effects of magic_quotes_gpc==On

	function strip_slashes($input) {

		if ( !get_magic_quotes_gpc() || ( !is_string($input) ) ) {

			return $input;

		}

	// Escape backslashes for use with mySQL LIKE strings

	function escape_backslashes($input) {

		return str_replace("\\","\\\\",$input);

	}

	function page_link($link){

		// Check for :// in the link (used in URL's) as well as mailto:

		} else {

			return $link;

		}

	}

	function get_post($field) {

	// Get POST data and escape it

	function get_post_escaped($field) {

		$result = $this->get_post($field);

		return (is_null($result)) ? null : $this->add_slashes($result);

	}

	function get_get($field) {

	// Get SESSION data

	function get_session($field) {

	// Get SERVER data

	function get_server($field) {

	// Get the current users id

	function get_user_id() {

	// Get the current users group ids

	function get_groups_id() {

	// Get the current users group name

	function get_group_name() {

	// Get the current users group name

	function get_groups_name() {

	// Get the current users username

	function get_username() {

	// Get the current users display name

	function get_display_name() {

	// Get the current users email address

	function get_email() {

	// Get the current users home folder

	function get_home_folder() {

	// Get the current users timezone

	function get_timezone() {

		return (isset($_SESSION['USE_DEFAULT_TIMEZONE']) ? '-72000' : $this->get_session('TIMEZONE'));

	function validate_email($email) {

		if(function_exists('idn_to_ascii')){ /* use pear if available */

			$email = idn_to_ascii($email);

		}else {

			require_once(WB_PATH.'/include/idna_convert/idna_convert.class.php');

			$IDN = new idna_convert();

			$email = $IDN->encode($email);

			unset($IDN);

		$retval = preg_match("/^((([!#$%&'*+\\-\/\=?^_`{|}~\w])|([!#$%&'*+\\-\/\=?^_`{|}~\w][!#$%&'*+\\-\/\=?^_`{|}~\.\w]{0,}[!#$%&'*+\\-\/\=?^_`{|}~\w]))[@]\w+(([-.]|\-\-)\w+)*\.\w+(([-.]|\-\-)\w+)*)$/", $email);

		return ($retval != false);

     * replace header('Location:...  with new method

	 * if header send failed you get a manuell redirected link, so script don't break

	 * @return void

	 */

	public function send_header ($location) {

		if(!headers_sent()) {

			header('Location: '.$location);

		    exit(0);

		} else {

//			$aDebugBacktrace = debug_backtrace();

//			array_walk( $aDebugBacktrace, create_function( '$a,$b', 'print "<br /><b>". basename( $a[\'file\'] ). "</b> &nbsp; <font color=\"red\">{$a[\'line\']}</font> &nbsp; <font color=\"green\">{$a[\'function\']} ()</font> &nbsp; -- ". dirname( $a[\'file\'] ). "/";' ) );

		    $msg =  "<div style=\"text-align:center;\"><h2>An error has occurred</h2><p>The <strong>Redirect</strong> could not be start automatically.\n" .

		         "Please click <a style=\"font-weight:bold;\" " .

		         "href=\"".$location."\">on this link</a> to continue!</p></div>\n";

			throw new AppException($msg);

		}

	}

 *

 * @access public

 * @param int $value: reference to the integer, containing the value

 * @param int $bits2set: the bitmask witch shall be added to value

 * @return void

 */

	function bit_set( &$value, $bits2set )

	{

		$value |= $bits2set;

	}

/* ****************

 * reset one or more bit from a integer value

 *

 * @access public

 * @param int $value: reference to the integer, containing the value

 * @param int $bits2reset: the bitmask witch shall be removed from value

 * @return void

 */

	function bit_reset( &$value, $bits2reset)

	{

		$value &= ~$bits2reset;

	}

/* ****************

 * check if one or more bit in a integer value are set

 *

 * @access public

 * @param int $value: reference to the integer, containing the value

 * @param int $bits2set: the bitmask witch shall be added to value

 * @return void

 */

	function bit_isset( $value, $bits2test )

	{

		return (($value & $bits2test) == $bits2test);

	}

	// Print a success message which then automatically redirects the user to another page

		$oTrans->disableAddon();

           $message = implode ('<br />',$message);

        }

	    $tpl->set_block( 'page', 'main_block', 'main' );

	    $tpl->set_var( 'MESSAGE', $message );

	    $tpl->set_var( 'REDIRECT', $redirect );

	    $tpl->set_var( 'REDIRECT_TIMER', $redirect_timer );

	    $tpl->set_var( 'BACK', $oTrans->TEXT_BACK);

	    else {

	    }

	    $tpl->parse( 'main', 'main_block', false );

	    $tpl->pparse( 'output', 'page' );

	}

	// Print an error message

		$oTrans->disableAddon();

           $message = implode ('<br />',$message);

        }

		$success_template->set_block('page', 'main_block', 'main');

		$success_template->set_var('MESSAGE', $message);

		$success_template->set_var('LINK', $link);

		$success_template->pparse('output', 'page');

		if ( $auto_footer == true ) {

			if ( method_exists($this, "print_footer") ) {

				$this->print_footer();

			}

		}

		exit();

	}

 * @param string $message: the message to format

 * @param string $status:  ('ok' / 'error' / '') status defines the apereance of the box

 * @return string: the html-formatted message (using template 'message.htt')

 */

	public function format_message($message, $status = 'ok')

	{

		$id = uniqid('x');

		$tpl = new Template(dirname($this->correct_theme_source('message.htt')));

		$tpl->set_file('page', 'message.htt');

		$tpl->set_block('page', 'main_block', 'main');

		$tpl->set_var('MESSAGE', $message);

 	    $tpl->set_var( 'THEME_URL', THEME_URL );

		$tpl->set_var( 'ID', $id );

		if($status == 'ok' || $status == 'error' || $status = 'warning')

		{

			$tpl->set_var('BOX_STATUS', ' box-'.$status);

		}else

		{

			$tpl->set_var('BOX_STATUS', '');

		}

		$tpl->set_var('STATUS', $status);

		if(!defined('REDIRECT_TIMER') ) { define('REDIRECT_TIMER', -1); }

		$retval = '';

		if( $status != 'error' )

		{

			switch(REDIRECT_TIMER):

				case 0: // do not show message

					unset($tpl);

					break;

				case -1: // show message permanently

					$tpl->parse('main', 'main_block', false);

					$retval = $tpl->finish($tpl->parse('output', 'page', false));

					unset($tpl);

					break;

				default: // hide message after REDIRECTOR_TIMER milliseconds

					$retval = '<script type="text/javascript">/* <![CDATA[ */ function '.$id.'_hide() {'.

							  'document.getElementById(\''.$id.'\').style.display = \'none\';}'.

							  'window.setTimeout(\''.$id.'_hide()\', '.REDIRECT_TIMER.');/* ]]> */ </script>';

					$tpl->parse('main', 'main_block', false);

					$retval = $tpl->finish($tpl->parse('output', 'page', false)).$retval;

					unset($tpl);

			endswitch;

		}else

		{

			$tpl->parse('main', 'main_block', false);

			$retval = $tpl->finish($tpl->parse('output', 'page', false)).$retval;

			unset($tpl);

		}

		return $retval;

	}

 * @param string $type: 'locked'(default)  or 'new'

 * @return void: terminates application

 * @description: 'locked' >> Show maintenance screen and terminate, if system is locked

 *               'new' >> Show 'new site under construction'(former print_under_construction)

 */

	public function ShowMaintainScreen($type = 'locked')

	{

		global $database, $MESSAGE;

		$LANGUAGE   = strtolower((isset($_SESSION['LANGUAGE']) ? $_SESSION['LANGUAGE'] : LANGUAGE ));

		$PAGE_ICON  = 'negative';

		if($type == 'locked')

		{

			$curr_user = (intval(isset($_SESSION['USER_ID']) ? $_SESSION['USER_ID'] : 0) ) ;

			if( (defined('SYSTEM_LOCKED') && (int)SYSTEM_LOCKED == 1) && ($curr_user != 1))

			{

				header($_SERVER['SERVER_PROTOCOL'].' 503 Service Unavailable');

	// first kick logged users out of the system

		// delete all remember keys from table 'user' except user_id=1

				$sql  = 'UPDATE `'.TABLE_PREFIX.'users` SET `remember_key`=\'\' ';

				$sql .= 'WHERE `user_id`<>1';

				$database->query($sql);

		// delete remember key-cookie if set

				if (isset($_COOKIE['REMEMBER_KEY'])) {

					setcookie('REMEMBER_KEY', '', time() - 3600, '/');

				}

		// overwrite session array

				$_SESSION = array();

		// delete session cookie if set

				if (ini_get("session.use_cookies")) {

					$params = session_get_cookie_params();

					setcookie(session_name(), '', time() - 42000, $params["path"],

						$params["domain"], $params["secure"], $params["httponly"]

					);

				}

		// delete the session itself

				session_destroy();

				$PAGE_TITLE = $MESSAGE['GENERIC_WEBSITE_LOCKED'];

				$PAGE_ICON  = 'system';

				$show_screen = true;

			}

		} else {

			header($_SERVER['SERVER_PROTOCOL'].' 503 Service Unavailable');

			$show_screen = true;

		}

		if($show_screen)

		{

    		{

                $tpl = new Template(dirname( $sMaintanceFile ));

    			if(defined('DEFAULT_CHARSET'))

    			{

    				$charset=DEFAULT_CHARSET;

    			} else {

    				$charset='utf-8';

    			}

    	 	    $tpl->set_var( 'CHARSET', $charset );

    	 	    $tpl->set_var( 'WB_URL', WB_URL );

    			$tpl->set_var( 'PAGE_ICON', $PAGE_ICON);

    		    $tpl->pparse( 'output', 'page' );

                exit();

    		} else {

    		 require_once(WB_PATH.'/languages/'.DEFAULT_LANGUAGE.'.php');

    		echo '<!DOCTYPE html PUBLIC "-W3CDTD XHTML 1.0 TransitionalEN" "http:www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

    		<head><title>'.$MESSAGE['GENERIC_WEBSITE_UNDER_CONSTRUCTION'].'</title>

    		<style type="text/css"><!-- body{ font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 12px; background-image: url("'.WB_URL.'/templates/'.DEFAULT_THEME.'/images/background.png");background-repeat: repeat-x; background-color: #A8BCCB; text-align: center; }

    		h1 { margin: 0; padding: 0; font-size: 18px; color: #000; text-transform: uppercase;}--></style></head><body>

    		<br /><h1>'.$MESSAGE['GENERIC_WEBSITE_UNDER_CONSTRUCTION'].'</h1><br />

    		'.$MESSAGE['GENERIC_PLEASE_CHECK_BACK_SOON'].'</body></html>';

    		}

    		flush();

            exit();

		}

	}

	SOME SERVICE PROVIDERS DO NOT SUPPORT SENDING MAIL VIA PHP AS IT DOES NOT PROVIDE SMTP AUTHENTICATION

	NEW WBMAILER CLASS IS ABLE TO SEND OUT MESSAGES USING SMTP WHICH RESOLVE THESE ISSUE (C. Sommer)

	To use SMTP for sending out mails, you have to specify the SMTP host of your domain

	via the Settings panel in the backend of Website Baker

		$fromaddress = preg_replace('/[\r\n]/', '', $fromaddress);

		$toaddress = preg_replace('/[\r\n]/', '', $toaddress);

		$subject = preg_replace('/[\r\n]/', '', $subject);

		// $message = preg_replace('/[\r\n]/', '<br \>', $message);

		if ($fromaddress!='') {

			$myMail->From = $fromaddress;                     // FROM:

		}

		if($replyTo) {

		// define recepient and information to send out

		$myMail->Subject = $subject;                          // SUBJECT

		$myMail->Body = nl2br($message);                      // CONTENT (HTML)

		$myMail->AltBody = strip_tags($message);              // CONTENT (TEXT)

		if (!$myMail->Send()) {

			return false;

		} else {

			return true;

		}

	}

 * checks if there is an alternative Theme template

 *

 * @param string $sThemeFile set the template.htt

 * @return string the relative theme path

 *

 */

		$sRetval = $sThemeFile;

		if (file_exists(THEME_PATH.'/templates/'.$sThemeFile )) {

			$sRetval = THEME_PATH.'/templates/'.$sThemeFile;

		} else {

			$sRetval = ADMIN_PATH.'/skel/themes/htt/'.$sThemeFile;

				throw new InvalidArgumentException('missing template file '.$sThemeFile);

			}

		}

		return $sRetval;

        }

 * Check if a foldername doesn't have invalid characters

 *