mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-11-23 16:33:17 +01:00
454 lines
19 KiB
PHP
454 lines
19 KiB
PHP
<?php
|
|
/**************************************************************************\
|
|
* phpGroupWare *
|
|
* http://www.phpgroupware.org *
|
|
* This file written by Dan Kuykendall <seek3r@phpgroupware.org> *
|
|
* -------------------------------------------- *
|
|
* This program is free software; you can redistribute it and/or modify it *
|
|
* under the terms of the GNU General Public License as published by the *
|
|
* Free Software Foundation; either version 2 of the License, or (at your *
|
|
* option) any later version. *
|
|
\**************************************************************************/
|
|
|
|
/* $Id$ */
|
|
|
|
$d1 = strtolower(substr($phpgw_info["server"]["api_inc"],0,3));
|
|
$d2 = strtolower(substr($phpgw_info["server"]["server_root"],0,3));
|
|
$d3 = strtolower(substr($phpgw_info["server"]["app_inc"],0,3));
|
|
if($d1 == "htt" || $d1 == "ftp" || $d2 == "htt" || $d2 == "ftp" || $d3 == "htt" || $d3 == "ftp") {
|
|
echo "Failed attempt to break in via an old Security Hole!<br>\n";
|
|
exit;
|
|
} unset($d1);unset($d2);unset($d3);
|
|
|
|
error_reporting(7);
|
|
|
|
/****************************************************************************\
|
|
* Quick verification of updated header.inc.php *
|
|
\****************************************************************************/
|
|
if ($phpgw_info["server"]["versions"]["header"] != $phpgw_info["server"]["versions"]["current_header"]){
|
|
echo "You need to port your settings to the new header.inc.php version.";
|
|
}
|
|
|
|
/****************************************************************************\
|
|
* Load up all the base files *
|
|
\****************************************************************************/
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_info.inc.php");
|
|
|
|
/****************************************************************************\
|
|
* Required classes *
|
|
\****************************************************************************/
|
|
/* Load selected database class */
|
|
if (empty($phpgw_info["server"]["db_type"])){$phpgw_info["server"]["db_type"] = "mysql";}
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_db_".$phpgw_info["server"]["db_type"].".inc.php");
|
|
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_session.inc.php");
|
|
|
|
/* Load selected translation class */
|
|
if (empty($phpgw_info["server"]["translation_system"])){$phpgw_info["server"]["translation_system"] = "sql";}
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_lang_".$phpgw_info["server"]["translation_system"].".inc.php");
|
|
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_crypto.inc.php");
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_template.inc.php");
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_common.inc.php");
|
|
|
|
/****************************************************************************\
|
|
* Optional classes, which can be disabled for performance increases *
|
|
* - they are loaded after pulling in the config from the DB *
|
|
\****************************************************************************/
|
|
function load_optional()
|
|
{
|
|
global $phpgw,$phpgw_info;
|
|
|
|
if ($phpgw_info["flags"]["enable_categories_class"]) {
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_categories.inc.php");
|
|
$phpgw->categories = new categories;
|
|
}
|
|
|
|
if ($phpgw_info["flags"]["enable_network_class"]) {
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_network.inc.php");
|
|
$phpgw->network = new network;
|
|
}
|
|
|
|
if ($phpgw_info["flags"]["enable_send_class"]) {
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_send.inc.php");
|
|
$phpgw->send = new send;
|
|
}
|
|
|
|
if ($phpgw_info["flags"]["enable_nextmatchs_class"]) {
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_nextmatchs.inc.php");
|
|
$phpgw->nextmatchs = new nextmatchs;
|
|
}
|
|
|
|
if ($phpgw_info["flags"]["enable_utilities_class"]) {
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_utilities.inc.php");
|
|
$phpgw->utilities = new utilities;
|
|
}
|
|
|
|
if ($phpgw_info["flags"]["enable_vfs_class"]) {
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_vfs.inc.php");
|
|
$phpgw->vfs = new vfs;
|
|
}
|
|
}
|
|
|
|
/****************************************************************************\
|
|
* Our API class starts here *
|
|
\****************************************************************************/
|
|
class phpgw
|
|
{
|
|
var $accounts;
|
|
var $acl;
|
|
var $auth;
|
|
var $db;
|
|
var $debug = 0; // This will turn on debugging information.
|
|
// (Not fully working)
|
|
var $crypto;
|
|
var $categories;
|
|
var $common;
|
|
var $hooks;
|
|
var $network;
|
|
var $nextmatchs;
|
|
var $preferences;
|
|
var $session;
|
|
var $send;
|
|
var $template;
|
|
var $translation;
|
|
var $utilities;
|
|
var $vfs;
|
|
|
|
var $calendar;
|
|
var $msg;
|
|
|
|
var $addressbook;
|
|
var $todo;
|
|
|
|
// This is here so you can decied what the best way to handle bad sessions
|
|
// You could redirect them to login.php with code 2 or use the default
|
|
// I recommend using the default until all of the bugs are worked out.
|
|
|
|
function phpgw_()
|
|
{
|
|
global $phpgw_info, $sessionid, $login;
|
|
/************************************************************************\
|
|
* Required classes *
|
|
\************************************************************************/
|
|
$this->db = new db;
|
|
$this->db->Host = $phpgw_info["server"]["db_host"];
|
|
$this->db->Type = $phpgw_info["server"]["db_type"];
|
|
$this->db->Database = $phpgw_info["server"]["db_name"];
|
|
$this->db->User = $phpgw_info["server"]["db_user"];
|
|
$this->db->Password = $phpgw_info["server"]["db_pass"];
|
|
|
|
if ($this->debug) {
|
|
$this->db->Debug = 1;
|
|
}
|
|
|
|
if ($phpgw_info["flags"]["currentapp"] == "login") {
|
|
$this->db->query("select * from config",__LINE__,__FILE__);
|
|
while($this->db->next_record()) {
|
|
$phpgw_info["server"][$this->db->f("config_name")] = $this->db->f("config_value");
|
|
}
|
|
} else {
|
|
$config_var = array("encryptkey","auth_type","account_repository");
|
|
$c= "";
|
|
for ($i=0;$i<count($config_var);$i++) {
|
|
if($i) $c .= " OR ";
|
|
$c .= "config_name='".$config_var[$i]."'";
|
|
}
|
|
$this->db->query("select * from config where $c",__LINE__,__FILE__);
|
|
while($this->db->next_record()) {
|
|
$phpgw_info["server"][$this->db->f("config_name")] = $this->db->f("config_value");
|
|
}
|
|
}
|
|
|
|
/************************************************************************\
|
|
* Continue adding the classes *
|
|
\************************************************************************/
|
|
$this->common = new common;
|
|
$this->hooks = new hooks;
|
|
|
|
/* Load selected authentication class */
|
|
if (empty($phpgw_info["server"]["auth_type"])){$phpgw_info["server"]["auth_type"] = "sql";}
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_auth_".$phpgw_info["server"]["auth_type"].".inc.php");
|
|
|
|
$this->auth = new auth;
|
|
|
|
/* Load selected accounts class */
|
|
if (empty($phpgw_info["server"]["account_repository"])){$phpgw_info["server"]["account_repository"] = $phpgw_info["server"]["auth_type"];}
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_accounts_".$phpgw_info["server"]["account_repository"].".inc.php");
|
|
include($phpgw_info["server"]["api_inc"] . "/phpgw_accounts_shared.inc.php");
|
|
|
|
$this->accounts = new accounts;
|
|
$this->preferences = new preferences(0);
|
|
|
|
$this->session = new sessions;
|
|
|
|
if ($phpgw_info["flags"]["currentapp"] == "login") {
|
|
$log = explode("@",$login);
|
|
$this->preferences = new preferences($log[0]);
|
|
}else{
|
|
if (! $this->session->verify()) {
|
|
$this->db->query("select config_value from config where config_name='webserver_url'",__LINE__,__FILE__);
|
|
$this->db->next_record();
|
|
Header("Location: " . $this->redirect($this->link($this->db->f("config_value")."/login.php","cd=10")));
|
|
exit;
|
|
}
|
|
$this->preferences = new preferences(intval($phpgw_info["user"]["account_id"]));
|
|
}
|
|
|
|
$this->translation = new translation;
|
|
$this->acl = new acl;
|
|
|
|
$sep = filesystem_separator();
|
|
$template_root = $this->common->get_tpl_dir();
|
|
|
|
if (is_dir($template_root)) {
|
|
$this->template = new Template($template_root);
|
|
}
|
|
}
|
|
/**************************************************************************\
|
|
* Core functions *
|
|
\**************************************************************************/
|
|
|
|
/* A function to handle session support via url session id, or cookies */
|
|
function link($url = "", $extravars = "")
|
|
{
|
|
global $phpgw, $phpgw_info, $usercookie, $kp3, $PHP_SELF;
|
|
if (! $kp3)
|
|
$kp3 = $phpgw_info["user"]["kp3"];
|
|
|
|
if (! $url) { // PHP won't allow you to set a var to a var
|
|
$url = $PHP_SELF; // or function for default values
|
|
}
|
|
|
|
if (isset($phpgw_info["server"]["usecookies"]) &&
|
|
$phpgw_info["server"]["usecookies"]) {
|
|
if ($extravars) {
|
|
$url .= "?$extravars";
|
|
}
|
|
} else {
|
|
$url .= "?sessionid=" . $phpgw_info["user"]["sessionid"];
|
|
$url .= "&kp3=" . $kp3;
|
|
$url .= "&domain=" . $phpgw_info["user"]["domain"];
|
|
// This doesn't belong in the API.
|
|
// Its up to the app to pass this value. (jengo)
|
|
if ($phpgw_info["flags"]["newsmode"]) {
|
|
$url .= "&newsmode=on";
|
|
}
|
|
|
|
if ($extravars) {
|
|
$url .= "&$extravars";
|
|
}
|
|
}
|
|
|
|
$url = str_replace("/?", "/index.php?", $url);
|
|
$webserver_url_count = strlen($phpgw_info["server"]["webserver_url"]);
|
|
$slash_check = strtolower(substr($url ,0,1));
|
|
if(substr($url ,0,$webserver_url_count) != $phpgw_info["server"]["webserver_url"]) {
|
|
$app = $phpgw_info["flags"]["currentapp"];
|
|
if($slash_check == "/") {
|
|
$url = $phpgw_info["server"]["webserver_url"].$url;
|
|
} elseif ($app == "home" || $app == "logout" || $app == "login"){
|
|
$url = $phpgw_info["server"]["webserver_url"]."/".$url;
|
|
}else{
|
|
/* This is going to be a problem for apps with subdirs. */
|
|
/* we can work around it using $PHP_SELF, striping out the file name, */
|
|
/* and replacing it with the one we want.*/
|
|
//$url = str_replace("$url", $SCRIPT_FILE, $url);
|
|
|
|
/* for now I will use this simplistic method */
|
|
$url = $phpgw_info["server"]["webserver_url"]."/".$app."/".$url;
|
|
}
|
|
}
|
|
return $url;
|
|
}
|
|
|
|
function strip_html($s)
|
|
{
|
|
return htmlspecialchars(stripslashes($s));
|
|
}
|
|
|
|
function redirect($url = "")
|
|
{
|
|
// This function handles redirects under iis and apache
|
|
// it assumes that $phpgw->link() has already been called
|
|
|
|
global $HTTP_ENV_VARS;
|
|
|
|
$iis = strpos($HTTP_ENV_VARS["SERVER_SOFTWARE"], "IIS", 0);
|
|
|
|
if ( !$url ) {
|
|
$url = $PHP_SELF;
|
|
}
|
|
if ( $iis ) {
|
|
echo "\n<HTML>\n<HEAD>\n<TITLE>Redirecting to $url</TITLE>";
|
|
echo "\n<META HTTP-EQUIV=REFRESH CONTENT=\"0; URL=$url\">";
|
|
echo "\n</HEAD><BODY>";
|
|
echo "<H3>Please continue to <a href=\"$url\">this page</a></H3>";
|
|
echo "\n</BODY></HTML>";
|
|
exit;
|
|
} else {
|
|
Header("Location: $url");
|
|
print("\n\n");
|
|
exit;
|
|
}
|
|
}
|
|
|
|
function lang($key, $m1 = "", $m2 = "", $m3 = "", $m4 = "")
|
|
{
|
|
global $phpgw;
|
|
|
|
return $phpgw->translation->translate($key);
|
|
}
|
|
|
|
// Some people might prefear to use this one
|
|
function _L($key, $m1 = "", $m2 = "", $m3 = "", $m4 = "")
|
|
{
|
|
global $phpgw;
|
|
|
|
return $phpgw->translation->translate($key);
|
|
}
|
|
|
|
}
|
|
/****************************************************************************\
|
|
* Our API class ends here *
|
|
\****************************************************************************/
|
|
/****************************************************************************\
|
|
* Direct functions, which are not part of the API class *
|
|
* for whatever reason. *
|
|
\****************************************************************************/
|
|
function lang($key, $m1="", $m2="", $m3="", $m4="", $m5="", $m6="", $m7="", $m8="", $m9="", $m10="" )
|
|
{
|
|
global $phpgw;
|
|
// # TODO: check if $m1 is of type array.
|
|
// If so, use it instead of $m2-$mN (Stephan)
|
|
$vars = array( $m1, $m2, $m3, $m4, $m5, $m6, $m7, $m8, $m9, $m10 );
|
|
$value = $phpgw->translation->translate("$key", $vars );
|
|
return $value;
|
|
}
|
|
|
|
|
|
// Just a temp wrapper.
|
|
function check_code($code)
|
|
{
|
|
global $phpgw;
|
|
return $phpgw->common->check_code($code);
|
|
}
|
|
|
|
/****************************************************************************\
|
|
* These lines load up the API, fill up the $phpgw_info array, etc *
|
|
\****************************************************************************/
|
|
$phpgw = new phpgw;
|
|
$phpgw->phpgw_();
|
|
if ($phpgw_info["flags"]["currentapp"] != "login" &&
|
|
$phpgw_info["flags"]["currentapp"] != "logout") {
|
|
// if (! $phpgw->session->verify()) {
|
|
// Header("Location: " . $phpgw->link($phpgw_info["server"]["webserver_url"] . "/login.php", "cd=10"));
|
|
// exit;
|
|
// }
|
|
load_optional();
|
|
|
|
phpgw_fillarray();
|
|
$phpgw->common->common_();
|
|
|
|
if ($phpgw_info["flags"]["enable_utilities_class"]){
|
|
$phpgw->utilities->utilities_();
|
|
}
|
|
|
|
if (!isset($phpgw_info["flags"]["nocommon_preferences"]) ||
|
|
!$phpgw_info["flags"]["nocommon_preferences"]) {
|
|
if (!isset($phpgw_info["user"]["preferences"]["common"]["maxmatchs"]) ||
|
|
!$phpgw_info["user"]["preferences"]["common"]["maxmatchs"]) {
|
|
$phpgw->preferences->change("common","maxmatchs",15);
|
|
$preferences_update = True;
|
|
}
|
|
if (!isset($phpgw_info["user"]["preferences"]["common"]["theme"]) ||
|
|
!$phpgw_info["user"]["preferences"]["common"]["theme"]) {
|
|
$phpgw->preferences->change("common","theme","default");
|
|
$preferences_update = True;
|
|
}
|
|
if (!isset($phpgw_info["user"]["preferences"]["common"]["dateformat"]) ||
|
|
!$phpgw_info["user"]["preferences"]["common"]["dateformat"]) {
|
|
$phpgw->preferences->change("common","dateformat","m/d/Y");
|
|
$preferences_update = True;
|
|
}
|
|
if (!isset($phpgw_info["user"]["preferences"]["common"]["timeformat"]) ||
|
|
!$phpgw_info["user"]["preferences"]["common"]["timeformat"]) {
|
|
$phpgw->preferences->change("common","timeformat",12);
|
|
$preferences_update = True;
|
|
}
|
|
if (!isset($phpgw_info["user"]["preferences"]["common"]["lang"]) ||
|
|
!$phpgw_info["user"]["preferences"]["common"]["lang"]) {
|
|
$phpgw->preferences->change("common","lang",$phpgw->common->getPreferredLanguage());
|
|
$preferences_update = True;
|
|
}
|
|
if ($preferences_update) {
|
|
echo "Committing new preferences<br>\n";
|
|
$phpgw->preferences->commit(__LINE__,__FILE__);
|
|
}
|
|
unset($preferences_update);
|
|
}
|
|
|
|
/*************************************************************************\
|
|
* These lines load up the themes *
|
|
\*************************************************************************/
|
|
include($phpgw_info["server"]["server_root"] . "/phpgwapi/themes/" .
|
|
$phpgw_info["user"]["preferences"]["common"]["theme"] . ".theme");
|
|
|
|
if ($phpgw_info["theme"]["bg_color"] == "") {
|
|
/* Looks like there was a problem finding that theme. Try the default */
|
|
echo "Warning: error locating selected theme";
|
|
include ($phpgw_info["server"]["server_root"] . "/phpgwapi/themes/default.theme");
|
|
if ($phpgw_info["theme"]["bg_color"] == "") {
|
|
// Hope we don't get to this point. Better then the user seeing a
|
|
// complety back screen and not know whats going on
|
|
echo "<body bgcolor=FFFFFF>Fatal error: no themes found";
|
|
exit;
|
|
}
|
|
}
|
|
|
|
/*************************************************************************\
|
|
* If they are using frames, we need to set some variables *
|
|
\*************************************************************************/
|
|
if (($phpgw_info["user"]["preferences"]["common"]["useframes"] && $phpgw_info["server"]["useframes"] == "allowed")
|
|
|| ($phpgw_info["server"]["useframes"] == "always")) {
|
|
$phpgw_info["flags"]["navbar_target"] = "phpgw_body";
|
|
}
|
|
|
|
/*************************************************************************\
|
|
* Verify that the users session is still active otherwise kick them out *
|
|
\*************************************************************************/
|
|
if ($phpgw_info["flags"]["currentapp"] != "home" &&
|
|
$phpgw_info["flags"]["currentapp"] != "logout" &&
|
|
$phpgw_info["flags"]["currentapp"] != "preferences" &&
|
|
$phpgw_info["flags"]["currentapp"] != "about") {
|
|
|
|
if (! $phpgw_info["user"]["apps"][$phpgw_info["flags"]["currentapp"]]) {
|
|
$phpgw->common->phpgw_header();
|
|
echo "<p><center><b>".lang("Access not permitted")."</b></center>";
|
|
exit;
|
|
}
|
|
}
|
|
|
|
/*************************************************************************\
|
|
* Load the header unless the developer turns it off *
|
|
\*************************************************************************/
|
|
if (! $phpgw_info["flags"]["noheader"]) {
|
|
$phpgw->common->phpgw_header();
|
|
}
|
|
|
|
/*************************************************************************\
|
|
* Load the app include files if the exists *
|
|
\*************************************************************************/
|
|
/* Then the include file */
|
|
if (file_exists ($phpgw_info["server"]["app_inc"]."/functions.inc.php")){
|
|
include($phpgw_info["server"]["app_inc"]."/functions.inc.php");
|
|
}
|
|
|
|
if (!$phpgw_info["flags"]["noheader"] &&
|
|
!$phpgw_info["flags"]["noappheader"] &&
|
|
file_exists ($phpgw_info["server"]["app_inc"]."/header.inc.php")) {
|
|
include($phpgw_info["server"]["app_inc"]."/header.inc.php");
|
|
}
|
|
}
|
|
error_reporting(7);
|