d80a8334c8
Debug-messages still may use echo, and some functions in functions_image and trackback still use it to generate progress messages, which should get cleaned up as well but is not that urgent
432 lines
16 KiB
PHP
432 lines
16 KiB
PHP
<?php # $Id$
|
|
# Copyright (c) 2003-2005, Jannis Hermanns (on behalf the Serendipity Developer Team)
|
|
# All rights reserved. See LICENSE file for licensing details
|
|
|
|
if (defined('S9Y_FRAMEWORK')) {
|
|
return;
|
|
}
|
|
|
|
@define('S9Y_FRAMEWORK', true);
|
|
|
|
if (!headers_sent()) {
|
|
// Only set the session name, if no session has yet been issued.
|
|
if (session_id() == '') {
|
|
session_name('s9y_' . md5(dirname(__FILE__)));
|
|
session_start();
|
|
}
|
|
|
|
// Prevent session fixation by only allowing sessions that have been sent by the server.
|
|
// Any session that does not contain our unique token will be regarded as foreign/fixated
|
|
// and be regenerated with a system-generated SID.
|
|
// Patch by David Vieira-Kurz of majorsecurity.de
|
|
if (!isset($_SESSION['SERVER_GENERATED_SID'])) {
|
|
session_regenerate_id(true);
|
|
@session_start();
|
|
header('X-Session-Reinit: true');
|
|
$_SESSION['SERVER_GENERATED_SID'] = $_SERVER['REMOTE_ADDR'] . $_SERVER['QUERY_STRING'];
|
|
}
|
|
}
|
|
|
|
if (!defined('S9Y_INCLUDE_PATH')) {
|
|
define('S9Y_INCLUDE_PATH', dirname(__FILE__) . '/');
|
|
}
|
|
define('S9Y_CONFIG_TEMPLATE', S9Y_INCLUDE_PATH . 'include/tpl/config_local.inc.php');
|
|
define('S9Y_CONFIG_USERTEMPLATE', S9Y_INCLUDE_PATH . 'include/tpl/config_personal.inc.php');
|
|
|
|
define('IS_installed', file_exists('serendipity_config_local.inc.php') && (filesize('serendipity_config_local.inc.php') > 0));
|
|
|
|
if (!defined('IN_serendipity')) {
|
|
define('IN_serendipity', true);
|
|
}
|
|
|
|
include(S9Y_INCLUDE_PATH . 'include/compat.inc.php');
|
|
if (defined('USE_MEMSNAP')) {
|
|
echo memSnap('Framework init');
|
|
}
|
|
|
|
// The version string
|
|
$serendipity['version'] = '2.0-alpha1';
|
|
|
|
// Setting this to 'false' will enable debugging output. All alpa/beta/cvs snapshot versions will emit debug information by default. To increase the debug level (to enable Smarty debugging), set this flag to 'debug'.
|
|
if (!isset($serendipity['production'])) {
|
|
$serendipity['production'] = (preg_match('@\-(alpha|beta|cvs|rc)@', $serendipity['version']) ? false : true);
|
|
}
|
|
|
|
// Set error reporting
|
|
// TODO: E_STRICT throws problematic errors due to "hook_event" being a static function, but all of our plugins don't really define that...
|
|
error_reporting(E_ALL & ~(E_STRICT|E_NOTICE));
|
|
|
|
if ($serendipity['production'] !== true) {
|
|
@ini_set('display_errors', 'on');
|
|
}
|
|
|
|
|
|
// The serendipity errorhandler string
|
|
$serendipity['errorhandler'] = 'errorToExceptionHandler';
|
|
|
|
|
|
// Default rewrite method
|
|
$serendipity['rewrite'] = 'none';
|
|
|
|
// Message container
|
|
$serendipity['messagestack'] = array();
|
|
|
|
// Can the user change the date of publishing for an entry?
|
|
$serendipity['allowDateManipulation'] = true;
|
|
|
|
// How much time is allowed to pass since the publising of an entry, so that a comment to that entry
|
|
// will update it's LastModified stamp? If the time is passed, a comment to an old entry will no longer
|
|
// push an article as being updated.
|
|
$serendipity['max_last_modified'] = 60 * 60 * 24 * 7;
|
|
|
|
// Clients can send a If-Modified Header to the RSS Feed (Conditional Get) and receive all articles beyond
|
|
// that date. However it is still limited by the number below of maximum entries
|
|
$serendipity['max_fetch_limit'] = 50;
|
|
|
|
// How many bytes are allowed for fetching trackbacks, so that no binary files get accidently trackbacked?
|
|
$serendipity['trackback_filelimit'] = 150 * 1024;
|
|
|
|
if (!isset($serendipity['fetchLimit'])) {
|
|
$serendipity['fetchLimit'] = 15;
|
|
}
|
|
|
|
if (!isset($serendipity['RSSfetchLimit'])) {
|
|
$serendipity['RSSfetchLimit'] = 15;
|
|
}
|
|
|
|
if (!isset($serendipity['mediaProperties'])) {
|
|
$serendipity['mediaProperties'] = 'DPI;COPYRIGHT;TITLE;COMMENT1:MULTI;COMMENT2:MULTI;ALT';
|
|
}
|
|
|
|
if (!isset($serendipity['use_PEAR'])) {
|
|
$serendipity['use_PEAR'] = true;
|
|
}
|
|
|
|
if (!isset($serendipity['useHTTP-Auth'])) {
|
|
$serendipity['useHTTP-Auth'] = true;
|
|
}
|
|
|
|
if (!isset($serendipity['CacheControl'])) {
|
|
$serendipity['CacheControl'] = true;
|
|
}
|
|
|
|
if (!isset($serendipity['expose_s9y'])) {
|
|
$serendipity['expose_s9y'] = true;
|
|
}
|
|
|
|
// Should IFRAMEs be used for previewing entries and sending trackbacks?
|
|
$serendipity['use_iframe'] = true;
|
|
|
|
/* Default language for autodetection */
|
|
$serendipity['autolang'] = 'en';
|
|
|
|
/* Name of folder for the default theme */
|
|
$serendipity['defaultTemplate'] = '2k11';
|
|
|
|
/* Availiable languages */
|
|
if (!isset($serendipity['languages'])) {
|
|
$serendipity['languages'] = array('en' => 'English',
|
|
'de' => 'German',
|
|
'da' => 'Danish',
|
|
'es' => 'Spanish',
|
|
'fr' => 'French',
|
|
'fi' => 'Finnish',
|
|
'cs' => 'Czech (Win-1250)',
|
|
'cz' => 'Czech (ISO-8859-2)',
|
|
'sk' => 'Slovak',
|
|
'nl' => 'Dutch',
|
|
'is' => 'Icelandic',
|
|
'tr' => 'Turkish',
|
|
'se' => 'Swedish',
|
|
'pt' => 'Portuguese Brazilian',
|
|
'pt_PT' => 'Portuguese European',
|
|
'bg' => 'Bulgarian',
|
|
'hu' => 'Hungarian',
|
|
'no' => 'Norwegian',
|
|
'pl' => 'Polish',
|
|
'ro' => 'Romanian',
|
|
'it' => 'Italian',
|
|
'ru' => 'Russian',
|
|
'fa' => 'Persian',
|
|
'tw' => 'Traditional Chinese (Big5)',
|
|
'tn' => 'Traditional Chinese (UTF-8)',
|
|
'zh' => 'Simplified Chinese (GB2312)',
|
|
'cn' => 'Simplified Chinese (UTF-8)',
|
|
'ja' => 'Japanese',
|
|
'ko' => 'Korean',
|
|
'sa' => 'Arabic',
|
|
'ta' => 'Tamil');
|
|
}
|
|
|
|
/* Available Calendars */
|
|
$serendipity['calendars'] = array('gregorian' => 'Gregorian',
|
|
'persian-utf8' => 'Persian (utf8)');
|
|
/*
|
|
* Load main language file
|
|
*/
|
|
include($serendipity['serendipityPath'] . 'include/lang.inc.php');
|
|
|
|
$serendipity['charsets'] = array(
|
|
'UTF-8/' => 'UTF-8',
|
|
'' => CHARSET_NATIVE
|
|
);
|
|
|
|
@define('PATH_SMARTY_COMPILE', 'templates_c'); // will be placed inside the template directory
|
|
@define('USERLEVEL_ADMIN', 255);
|
|
@define('USERLEVEL_CHIEF', 1);
|
|
@define('USERLEVEL_EDITOR', 0);
|
|
|
|
@define('VIEWMODE_THREADED', 'threaded');
|
|
@define('VIEWMODE_LINEAR', 'linear');
|
|
|
|
/*
|
|
* Kill the script if we are not installed, and not inside the installer
|
|
*/
|
|
if ( !defined('IN_installer') && IS_installed === false ) {
|
|
header('Status: 302 Found');
|
|
header('X-RequireInstall: 1');
|
|
header('Location: ' . (strtolower($_SERVER['HTTPS']) == 'on' ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . str_replace('\\', '/', dirname($_SERVER['PHP_SELF'])) . '/serendipity_admin.php');
|
|
serendipity_die(sprintf(SERENDIPITY_NOT_INSTALLED, 'serendipity_admin.php'));
|
|
}
|
|
|
|
/* Do the PEAR dance. If $serendipity['use_PEAR'] is set to FALSE, Serendipity will first put its own PEAR include path.
|
|
By default, a local PEAR will be used. */
|
|
if (function_exists('get_include_path')) {
|
|
$old_include = @get_include_path();
|
|
} else {
|
|
$old_include = @ini_get('include_path');
|
|
}
|
|
|
|
|
|
$new_include = ($serendipity['use_PEAR'] ? $old_include . PATH_SEPARATOR : '')
|
|
. S9Y_INCLUDE_PATH . 'bundled-libs/' . PATH_SEPARATOR
|
|
. S9Y_INCLUDE_PATH . 'bundled-libs/Smarty/libs/' . PATH_SEPARATOR
|
|
. $serendipity['serendipityPath'] . PATH_SEPARATOR
|
|
. (!$serendipity['use_PEAR'] ? $old_include . PATH_SEPARATOR : '');
|
|
|
|
if (function_exists('set_include_path')) {
|
|
$use_include = @set_include_path($new_include);
|
|
} else {
|
|
$use_include = @ini_set('include_path', $new_include);
|
|
}
|
|
|
|
if ($use_include !== $false && $use_include == $new_include) {
|
|
@define('S9Y_PEAR', true);
|
|
@define('S9Y_PEAR_PATH', '');
|
|
} else {
|
|
@define('S9Y_PEAR', false);
|
|
@define('S9Y_PEAR_PATH', S9Y_INCLUDE_PATH . 'bundled-libs/');
|
|
}
|
|
/* PEAR path setup inclusion finished */
|
|
|
|
if (defined('IN_installer') && IS_installed === false) {
|
|
$serendipity['lang'] = $serendipity['autolang'];
|
|
$css_mode = 'serendipity_admin.css';
|
|
return 1;
|
|
}
|
|
|
|
/*
|
|
* Load DB configuration information
|
|
* Load Functions
|
|
* Make sure that the file included is in the current directory and not any possible
|
|
* include path
|
|
*/
|
|
if (!defined('S9Y_DATA_PATH') && file_exists(dirname(__FILE__) . '/serendipity_config_local.inc.php')) {
|
|
$local_config = dirname(__FILE__) . '/serendipity_config_local.inc.php';
|
|
} elseif (@file_exists($_SERVER['DOCUMENT_ROOT'] . dirname($_SERVER['PHP_SELF']) . '/serendipity_config_local.inc.php')) {
|
|
$local_config = $_SERVER['DOCUMENT_ROOT'] . dirname($_SERVER['PHP_SELF']) . '/serendipity_config_local.inc.php';
|
|
} elseif (defined('S9Y_DATA_PATH')) {
|
|
// Shared installation!
|
|
$local_config = S9Y_DATA_PATH . '/serendipity_config_local.inc.php';
|
|
} elseif (@file_exists($serendipity['serendipityPath'] . '/serendipity_config_local.inc.php')) {
|
|
$local_config = $serendipity['serendipityPath'] . '/serendipity_config_local.inc.php';
|
|
} else {
|
|
// Installation fallback
|
|
$local_config = S9Y_INCLUDE_PATH . '/serendipity_config_local.inc.php';
|
|
}
|
|
|
|
if (!is_readable($local_config)) {
|
|
$serendipity['lang'] = 'en';
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
serendipity_die(sprintf(INCLUDE_ERROR . '<br />' . FILE_CREATE_YOURSELF, $local_config));
|
|
}
|
|
|
|
include($local_config);
|
|
|
|
if ($serendipity['production'] === 'debug') {
|
|
error_reporting(E_ALL &~E_NOTICE | E_STRICT);
|
|
}
|
|
|
|
//[internal callback function]: errorToExceptionHandler()
|
|
if(is_callable($serendipity['errorhandler'], false, $callable_name)) {
|
|
// set serendipity global error to exeption handler
|
|
if ($serendipity['production'] === 'debug') {
|
|
set_error_handler($serendipity['errorhandler'], error_reporting()); // Yes, DEBUG mode should actually report E_STRICT errors! In PHP 5.4s is contained in E_ALL already, but not in PHP 5.2.
|
|
} else {
|
|
// Caution! If we want to have the same noshow effect as upper set error_reporting(E_ALL) in 'debug' mode,
|
|
// do not clone it to set_error_handler(E_ALL), else everythimg is haltet to debug, which makes using debug obsolet.
|
|
set_error_handler($serendipity['errorhandler'], E_ALL & ~(E_NOTICE|E_STRICT));
|
|
}
|
|
}
|
|
|
|
define('IS_up2date', version_compare($serendipity['version'], $serendipity['versionInstalled'], '<='));
|
|
|
|
/*
|
|
* Include main functions
|
|
*/
|
|
include(S9Y_INCLUDE_PATH . 'include/functions.inc.php');
|
|
|
|
if (serendipity_FUNCTIONS_LOADED !== true) {
|
|
$serendipity['lang'] = 'en';
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
serendipity_die(sprintf(INCLUDE_ERROR . '<br />' . FILE_CREATE_YOURSELF, 'include/functions.inc.php'));
|
|
}
|
|
|
|
/*
|
|
* Attempt to connect to the database
|
|
*/
|
|
if (!serendipity_db_connect()) {
|
|
$serendipity['lang'] = 'en';
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
serendipity_die(DATABASE_ERROR);
|
|
}
|
|
|
|
/*
|
|
* Load Configuration options from the database
|
|
*/
|
|
|
|
if (defined('USE_MEMSNAP')) {
|
|
echo memSnap('Framework init');
|
|
}
|
|
|
|
serendipity_load_configuration();
|
|
$serendipity['lang'] = serendipity_getSessionLanguage();
|
|
|
|
if ( (isset($serendipity['autodetect_baseURL']) && serendipity_db_bool($serendipity['autodetect_baseURL'])) ||
|
|
(isset($serendipity['embed']) && serendipity_db_bool($serendipity['embed'])) ) {
|
|
$serendipity['baseURL'] = 'http' . (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on' ? 's' : '') . '://' . $_SERVER['HTTP_HOST'] . (!strstr($_SERVER['HTTP_HOST'], ':') && !empty($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] != '80' && $_SERVER['SERVER_PORT'] != '443' ? ':' . $_SERVER['SERVER_PORT'] : '') . $serendipity['serendipityHTTPPath'];
|
|
}
|
|
/*
|
|
* If a user is logged in, fetch his preferences. He possibly wants to have a different language
|
|
*/
|
|
|
|
if (IS_installed === true) {
|
|
// Import HTTP auth (mostly used for RSS feeds)
|
|
if ($serendipity['useHTTP-Auth'] && (isset($_REQUEST['http_auth']) || isset($_SERVER['PHP_AUTH_USER']))) {
|
|
if (!isset($_SERVER['PHP_AUTH_USER'])) {
|
|
header("WWW-Authenticate: Basic realm=\"Feed Login\"");
|
|
header("HTTP/1.0 401 Unauthorized");
|
|
header("Status: 401 Unauthorized");
|
|
exit;
|
|
} else {
|
|
if (!isset($serendipity['POST']['user'])) {
|
|
$serendipity['POST']['user'] = $_SERVER['PHP_AUTH_USER'];
|
|
}
|
|
if (!isset($serendipity['POST']['pass'])) {
|
|
$serendipity['POST']['pass'] = $_SERVER['PHP_AUTH_PW'];
|
|
}
|
|
}
|
|
} elseif (isset($_REQUEST['http_auth_user']) && isset($_REQUEST['http_auth_pw'])) {
|
|
$serendipity['POST']['user'] = $_REQUEST['http_auth_user'];
|
|
$serendipity['POST']['pass'] = $_REQUEST['http_auth_pw'];
|
|
}
|
|
|
|
serendipity_login(false);
|
|
}
|
|
|
|
if (isset($_SESSION['serendipityAuthorid'])) {
|
|
serendipity_load_configuration($_SESSION['serendipityAuthorid']);
|
|
$serendipity['lang'] = serendipity_getPostAuthSessionLanguage();
|
|
}
|
|
|
|
// Try to fix some path settings. It seems common users have this setting wrong
|
|
// when s9y is installed into the root directory, especially 0.7.1 upgrade users.
|
|
if (empty($serendipity['serendipityHTTPPath'])) {
|
|
$serendipity['serendipityHTTPPath'] = '/';
|
|
}
|
|
|
|
/* Changing this is NOT recommended, rewrite rules does not take them into account - yet */
|
|
serendipity_initPermalinks();
|
|
|
|
// Apply constants/definitions from custom permalinks
|
|
serendipity_permalinkPatterns();
|
|
|
|
/*
|
|
* Load main language file again, because now we have the preferred language
|
|
*/
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
|
|
/*
|
|
* Reset charset definition now that final language is known
|
|
*/
|
|
$serendipity['charsets'] = array(
|
|
'UTF-8/' => 'UTF-8',
|
|
'' => CHARSET_NATIVE
|
|
);
|
|
|
|
/*
|
|
* Set current locale, if any has been defined
|
|
*/
|
|
if (defined('DATE_LOCALES')) {
|
|
$locales = explode(',', DATE_LOCALES);
|
|
foreach ($locales as $locale) {
|
|
$locale = trim($locale);
|
|
if (setlocale(LC_TIME, $locale) == $locale) {
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
if (function_exists('date_default_timezone_set')) {
|
|
if(isset($serendipity['useServerOffset']) && $serendipity['useServerOffset']==false) {
|
|
date_default_timezone_set('UTC');
|
|
}
|
|
}
|
|
/*
|
|
* Fallback charset, if none is defined in the language files
|
|
*/
|
|
@define('LANG_CHARSET', 'ISO-8859-1');
|
|
|
|
/*
|
|
* Create array of permission levels, with descriptions
|
|
*/
|
|
$serendipity['permissionLevels'] = array(USERLEVEL_EDITOR => USERLEVEL_EDITOR_DESC,
|
|
USERLEVEL_CHIEF => USERLEVEL_CHIEF_DESC,
|
|
USERLEVEL_ADMIN => USERLEVEL_ADMIN_DESC);
|
|
|
|
/*
|
|
* Check if the installed version is higher than the version of the config
|
|
*/
|
|
|
|
if (IS_up2date === false && !defined('IN_upgrader')) {
|
|
if (preg_match(PAT_CSS, $_SERVER['REQUEST_URI'], $matches)) {
|
|
$css_mode = 'serendipity_admin.css';
|
|
return 1;
|
|
}
|
|
|
|
serendipity_die(sprintf(SERENDIPITY_NEEDS_UPGRADE, $serendipity['versionInstalled'], $serendipity['version'], $serendipity['serendipityHTTPPath'] . 'serendipity_admin.php'));
|
|
}
|
|
|
|
// We don't care who tells us what to do
|
|
if (!isset($serendipity['GET']['action'])) {
|
|
$serendipity['GET']['action'] = (isset($serendipity['POST']['action']) ? $serendipity['POST']['action'] : '');
|
|
}
|
|
|
|
if (!isset($serendipity['GET']['adminAction'])) {
|
|
$serendipity['GET']['adminAction'] = (isset($serendipity['POST']['adminAction']) ? $serendipity['POST']['adminAction'] : '');
|
|
}
|
|
|
|
// Some stuff...
|
|
if (!isset($_SESSION['serendipityAuthedUser'])) {
|
|
$_SESSION['serendipityAuthedUser'] = false;
|
|
}
|
|
|
|
if (isset($_SESSION['serendipityUser'])) {
|
|
$serendipity['user'] = $_SESSION['serendipityUser'];
|
|
}
|
|
|
|
if (isset($_SESSION['serendipityEmail'])) {
|
|
$serendipity['email'] = $_SESSION['serendipityEmail'];
|
|
}
|
|
serendipity_plugin_api::hook_event('frontend_configure', $serendipity);
|
|
/* vim: set sts=4 ts=4 expandtab : */
|