dd83225447
- This introduces a new option "template_backend" that will be set to indicate the backend template, defaults to 2k11. - The "Engine: xxx" line in info.txt still works, but only for the frontend - The frontend fallback chain defaults to the old "default" template to ensure that themes will work that have "old-style" HTML output - The backend fallback chain only falls back to 2k11 and then "default" - In the future, we will remove templates/default/admin once the mechanism is proven stable To test this in all cases you can: - Copy 2k11/ to 2k11-custom, edit info.txt, give it a distinct name. Edit the admin/index.tpl file to add some code to ensure that you will see that template in the backend if you pick it, or adjust the style.css or whatever. - Copy idea/ to idea-custom, edit info.txt, add a "Engine: 2k11" line. Now you can test how a template would look like that fallsback on 2k11 instead of "default" Those permutations can be checked and come to my mind: - Backend: 2k11, Frontend: 2k11 - Backend: 2k11-custom, Frontend: 2k11 - Backend: 2k11, Frontend: 2k11-custom - Backend: 2k11, Frontend: idea - Backend: 2k11, Frontend: idea-custom - Backend: 2k11-custom, Frontend: idea - Backend: 2k11-custom, Frontend: idea-custom They seem to work. Currently the display of backend and frontend theme in templates.inc.tpl takes up some larger space. Maybe it could be prettified somehow, maybe put frontend and backend template next to each other, not beneath each other? Maybe @yellowled has some suggestions. @onli and @ophian - please have a look at this, since you both also worked on the fallback chains. Please tell me if you have issues with this. We can easily revert, if you see this approach as not workable. This is more a "proof of concept" draft.
447 lines
17 KiB
PHP
447 lines
17 KiB
PHP
<?php # $Id$
|
|
# Copyright (c) 2003-2005, Jannis Hermanns (on behalf the Serendipity Developer Team)
|
|
# All rights reserved. See LICENSE file for licensing details
|
|
|
|
if (defined('S9Y_FRAMEWORK')) {
|
|
return;
|
|
}
|
|
|
|
@define('S9Y_FRAMEWORK', true);
|
|
|
|
if (!headers_sent() && php_sapi_name() !== 'cli') {
|
|
// Only set the session name, if no session has yet been issued.
|
|
if (session_id() == '') {
|
|
session_name('s9y_' . md5(dirname(__FILE__)));
|
|
session_start();
|
|
}
|
|
|
|
// Prevent session fixation by only allowing sessions that have been sent by the server.
|
|
// Any session that does not contain our unique token will be regarded as foreign/fixated
|
|
// and be regenerated with a system-generated SID.
|
|
// Patch by David Vieira-Kurz of majorsecurity.de
|
|
if (!isset($_SESSION['SERVER_GENERATED_SID'])) {
|
|
session_regenerate_id(true);
|
|
@session_start();
|
|
header('X-Session-Reinit: true');
|
|
$_SESSION['SERVER_GENERATED_SID'] = $_SERVER['REMOTE_ADDR'] . $_SERVER['QUERY_STRING'];
|
|
}
|
|
}
|
|
|
|
if (!defined('S9Y_INCLUDE_PATH')) {
|
|
define('S9Y_INCLUDE_PATH', dirname(__FILE__) . '/');
|
|
}
|
|
define('S9Y_CONFIG_TEMPLATE', S9Y_INCLUDE_PATH . 'include/tpl/config_local.inc.php');
|
|
define('S9Y_CONFIG_USERTEMPLATE', S9Y_INCLUDE_PATH . 'include/tpl/config_personal.inc.php');
|
|
|
|
define('IS_installed', file_exists('serendipity_config_local.inc.php') && (filesize('serendipity_config_local.inc.php') > 0));
|
|
|
|
if (!defined('IN_serendipity')) {
|
|
define('IN_serendipity', true);
|
|
}
|
|
|
|
include(S9Y_INCLUDE_PATH . 'include/compat.inc.php');
|
|
if (defined('USE_MEMSNAP')) {
|
|
echo memSnap('Framework init');
|
|
}
|
|
|
|
// The version string
|
|
$serendipity['version'] = '2.0-beta2';
|
|
|
|
// Setting this to 'false' will enable debugging output. All alpha/beta/cvs snapshot versions will emit debug information by default. To increase the debug level (to enable Smarty debugging), set this flag to 'debug'.
|
|
if (!isset($serendipity['production'])) {
|
|
$serendipity['production'] = (preg_match('@\-(alpha|beta|cvs|rc)@', $serendipity['version']) ? false : true);
|
|
}
|
|
|
|
// Set error reporting
|
|
// TODO: E_STRICT throws problematic errors due to "hook_event" being a static function, but all of our plugins don't really define that...
|
|
error_reporting(E_ALL & ~(E_STRICT|E_NOTICE));
|
|
|
|
if ($serendipity['production'] !== true) {
|
|
@ini_set('display_errors', 'on');
|
|
}
|
|
|
|
|
|
// The serendipity errorhandler string
|
|
$serendipity['errorhandler'] = 'errorToExceptionHandler';
|
|
|
|
|
|
// Default rewrite method
|
|
$serendipity['rewrite'] = 'none';
|
|
|
|
// Message container
|
|
$serendipity['messagestack'] = array();
|
|
|
|
// Can the user change the date of publishing for an entry?
|
|
$serendipity['allowDateManipulation'] = true;
|
|
|
|
// How much time is allowed to pass since the publising of an entry, so that a comment to that entry
|
|
// will update it's LastModified stamp? If the time is passed, a comment to an old entry will no longer
|
|
// push an article as being updated.
|
|
$serendipity['max_last_modified'] = 60 * 60 * 24 * 7;
|
|
|
|
// Clients can send a If-Modified Header to the RSS Feed (Conditional Get) and receive all articles beyond
|
|
// that date. However it is still limited by the number below of maximum entries
|
|
$serendipity['max_fetch_limit'] = 50;
|
|
|
|
// How many bytes are allowed for fetching trackbacks, so that no binary files get accidently trackbacked?
|
|
$serendipity['trackback_filelimit'] = 150 * 1024;
|
|
|
|
if (!isset($serendipity['fetchLimit'])) {
|
|
$serendipity['fetchLimit'] = 15;
|
|
}
|
|
|
|
if (!isset($serendipity['RSSfetchLimit'])) {
|
|
$serendipity['RSSfetchLimit'] = 15;
|
|
}
|
|
|
|
if (!isset($serendipity['mediaProperties'])) {
|
|
$serendipity['mediaProperties'] = 'DPI;COPYRIGHT;TITLE;COMMENT1:MULTI;COMMENT2:MULTI;ALT';
|
|
}
|
|
|
|
if (!isset($serendipity['use_PEAR'])) {
|
|
$serendipity['use_PEAR'] = true;
|
|
}
|
|
|
|
if (!isset($serendipity['useHTTP-Auth'])) {
|
|
$serendipity['useHTTP-Auth'] = true;
|
|
}
|
|
|
|
if (!isset($serendipity['CacheControl'])) {
|
|
$serendipity['CacheControl'] = true;
|
|
}
|
|
|
|
if (!isset($serendipity['expose_s9y'])) {
|
|
$serendipity['expose_s9y'] = true;
|
|
}
|
|
|
|
// Should IFRAMEs be used for previewing entries and sending trackbacks?
|
|
$serendipity['use_iframe'] = true;
|
|
|
|
/* Default language for autodetection */
|
|
$serendipity['autolang'] = 'en';
|
|
|
|
/* Name of folder for the default theme */
|
|
$serendipity['defaultTemplate'] = '2k11';
|
|
|
|
/* Default backend theme */
|
|
if (!isset($serendipity['template_backend'])) {
|
|
$serendipity['template_backend'] = '2k11';
|
|
}
|
|
|
|
/* Availiable languages */
|
|
if (!isset($serendipity['languages'])) {
|
|
$serendipity['languages'] = array('en' => 'English',
|
|
'de' => 'German',
|
|
'da' => 'Danish',
|
|
'es' => 'Spanish',
|
|
'fr' => 'French',
|
|
'fi' => 'Finnish',
|
|
'cs' => 'Czech (Win-1250)',
|
|
'cz' => 'Czech (ISO-8859-2)',
|
|
'sk' => 'Slovak',
|
|
'nl' => 'Dutch',
|
|
'is' => 'Icelandic',
|
|
'tr' => 'Turkish',
|
|
'se' => 'Swedish',
|
|
'pt' => 'Portuguese Brazilian',
|
|
'pt_PT' => 'Portuguese European',
|
|
'bg' => 'Bulgarian',
|
|
'hu' => 'Hungarian',
|
|
'no' => 'Norwegian',
|
|
'pl' => 'Polish',
|
|
'ro' => 'Romanian',
|
|
'it' => 'Italian',
|
|
'ru' => 'Russian',
|
|
'fa' => 'Persian',
|
|
'tw' => 'Traditional Chinese (Big5)',
|
|
'tn' => 'Traditional Chinese (UTF-8)',
|
|
'zh' => 'Simplified Chinese (GB2312)',
|
|
'cn' => 'Simplified Chinese (UTF-8)',
|
|
'ja' => 'Japanese',
|
|
'ko' => 'Korean',
|
|
'sa' => 'Arabic',
|
|
'ta' => 'Tamil');
|
|
}
|
|
|
|
/* Available Calendars */
|
|
$serendipity['calendars'] = array('gregorian' => 'Gregorian',
|
|
'persian-utf8' => 'Persian (utf8)');
|
|
/*
|
|
* Load main language file
|
|
*/
|
|
include($serendipity['serendipityPath'] . 'include/lang.inc.php');
|
|
|
|
$serendipity['charsets'] = array(
|
|
'UTF-8/' => 'UTF-8',
|
|
'' => CHARSET_NATIVE
|
|
);
|
|
|
|
@define('PATH_SMARTY_COMPILE', 'templates_c'); // will be placed inside the template directory
|
|
@define('USERLEVEL_ADMIN', 255);
|
|
@define('USERLEVEL_CHIEF', 1);
|
|
@define('USERLEVEL_EDITOR', 0);
|
|
|
|
@define('VIEWMODE_THREADED', 'threaded');
|
|
@define('VIEWMODE_LINEAR', 'linear');
|
|
|
|
/*
|
|
* Kill the script if we are not installed, and not inside the installer
|
|
*/
|
|
if ( !defined('IN_installer') && IS_installed === false ) {
|
|
header('Status: 302 Found');
|
|
header('X-RequireInstall: 1');
|
|
header('Location: ' . (strtolower($_SERVER['HTTPS']) == 'on' ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . str_replace('\\', '/', dirname($_SERVER['PHP_SELF'])) . '/serendipity_admin.php');
|
|
serendipity_die(sprintf(SERENDIPITY_NOT_INSTALLED, 'serendipity_admin.php'));
|
|
}
|
|
|
|
/* Do the PEAR dance. If $serendipity['use_PEAR'] is set to FALSE, Serendipity will first put its own PEAR include path.
|
|
By default, a local PEAR will be used. */
|
|
if (function_exists('get_include_path')) {
|
|
$old_include = @get_include_path();
|
|
} else {
|
|
$old_include = @ini_get('include_path');
|
|
}
|
|
|
|
|
|
require_once("bundled-libs/autoload.php");
|
|
|
|
$new_include = ($serendipity['use_PEAR'] ? $old_include . PATH_SEPARATOR : '')
|
|
. S9Y_INCLUDE_PATH . 'bundled-libs/' . PATH_SEPARATOR
|
|
. S9Y_INCLUDE_PATH . 'bundled-libs/Smarty/libs/' . PATH_SEPARATOR
|
|
. $serendipity['serendipityPath'] . PATH_SEPARATOR
|
|
. (!$serendipity['use_PEAR'] ? $old_include . PATH_SEPARATOR : '');
|
|
|
|
if (function_exists('set_include_path')) {
|
|
$use_include = @set_include_path($new_include);
|
|
} else {
|
|
$use_include = @ini_set('include_path', $new_include);
|
|
}
|
|
|
|
if ($use_include !== false && $use_include == $new_include) {
|
|
@define('S9Y_PEAR', true);
|
|
@define('S9Y_PEAR_PATH', '');
|
|
} else {
|
|
@define('S9Y_PEAR', false);
|
|
@define('S9Y_PEAR_PATH', S9Y_INCLUDE_PATH . 'bundled-libs/');
|
|
}
|
|
/* PEAR path setup inclusion finished */
|
|
|
|
if (defined('IN_installer') && IS_installed === false) {
|
|
$serendipity['lang'] = $serendipity['autolang'];
|
|
$css_mode = 'serendipity_admin.css';
|
|
return 1;
|
|
}
|
|
|
|
/*
|
|
* Load DB configuration information
|
|
* Load Functions
|
|
* Make sure that the file included is in the current directory and not any possible
|
|
* include path
|
|
*/
|
|
if (!defined('S9Y_DATA_PATH') && file_exists(dirname(__FILE__) . '/serendipity_config_local.inc.php')) {
|
|
$local_config = dirname(__FILE__) . '/serendipity_config_local.inc.php';
|
|
} elseif (@file_exists($_SERVER['DOCUMENT_ROOT'] . dirname($_SERVER['PHP_SELF']) . '/serendipity_config_local.inc.php')) {
|
|
$local_config = $_SERVER['DOCUMENT_ROOT'] . dirname($_SERVER['PHP_SELF']) . '/serendipity_config_local.inc.php';
|
|
} elseif (defined('S9Y_DATA_PATH')) {
|
|
// Shared installation!
|
|
$local_config = S9Y_DATA_PATH . '/serendipity_config_local.inc.php';
|
|
} elseif (@file_exists($serendipity['serendipityPath'] . '/serendipity_config_local.inc.php')) {
|
|
$local_config = $serendipity['serendipityPath'] . '/serendipity_config_local.inc.php';
|
|
} else {
|
|
// Installation fallback
|
|
$local_config = S9Y_INCLUDE_PATH . '/serendipity_config_local.inc.php';
|
|
}
|
|
|
|
if (!is_readable($local_config)) {
|
|
$serendipity['lang'] = 'en';
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
serendipity_die(sprintf(INCLUDE_ERROR . '<br />' . FILE_CREATE_YOURSELF, $local_config));
|
|
}
|
|
|
|
include($local_config);
|
|
|
|
if ($serendipity['production'] === 'debug') {
|
|
error_reporting(E_ALL &~E_NOTICE | E_STRICT);
|
|
$serendipity['log_level'] = Psr\Log\LogLevel::DEBUG;
|
|
} else {
|
|
$serendipity['log_level'] = Psr\Log\LogLevel::ERROR;
|
|
}
|
|
|
|
$serendipity['logger'] = new Katzgrau\KLogger\Logger($serendipity['serendipityPath'] . '/templates_c/logs', $serendipity['log_level']);
|
|
|
|
//[internal callback function]: errorToExceptionHandler()
|
|
if(is_callable($serendipity['errorhandler'], false, $callable_name)) {
|
|
// set serendipity global error to exeption handler
|
|
if ($serendipity['production'] === 'debug') {
|
|
set_error_handler($serendipity['errorhandler'], error_reporting()); // Yes, DEBUG mode should actually report E_STRICT errors! In PHP 5.4s is contained in E_ALL already, but not in PHP 5.2.
|
|
} else {
|
|
// Caution! If we want to have the same noshow effect as upper set error_reporting(E_ALL) in 'debug' mode,
|
|
// do not clone it to set_error_handler(E_ALL), else everythimg is haltet to debug, which makes using debug obsolet.
|
|
set_error_handler($serendipity['errorhandler'], E_ALL & ~(E_NOTICE|E_STRICT));
|
|
}
|
|
}
|
|
|
|
define('IS_up2date', version_compare($serendipity['version'], $serendipity['versionInstalled'], '<='));
|
|
|
|
/*
|
|
* Include main functions
|
|
*/
|
|
include(S9Y_INCLUDE_PATH . 'include/functions.inc.php');
|
|
|
|
if (serendipity_FUNCTIONS_LOADED !== true) {
|
|
$serendipity['lang'] = 'en';
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
$serendipity['logger']->critical(sprintf(INCLUDE_ERROR . '<br />' . FILE_CREATE_YOURSELF, 'include/functions.inc.php'));
|
|
serendipity_die(sprintf(INCLUDE_ERROR . '<br />' . FILE_CREATE_YOURSELF, 'include/functions.inc.php'));
|
|
}
|
|
|
|
/*
|
|
* Attempt to connect to the database
|
|
*/
|
|
if (!serendipity_db_connect()) {
|
|
$serendipity['lang'] = 'en';
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
$serendipity['logger']->critical(DATABASE_ERROR);
|
|
serendipity_die(DATABASE_ERROR);
|
|
}
|
|
|
|
/*
|
|
* Load Configuration options from the database
|
|
*/
|
|
|
|
if (defined('USE_MEMSNAP')) {
|
|
echo memSnap('Framework init');
|
|
}
|
|
|
|
serendipity_load_configuration();
|
|
$serendipity['lang'] = serendipity_getSessionLanguage();
|
|
|
|
if ( (isset($serendipity['autodetect_baseURL']) && serendipity_db_bool($serendipity['autodetect_baseURL'])) ||
|
|
(isset($serendipity['embed']) && serendipity_db_bool($serendipity['embed'])) ) {
|
|
$serendipity['baseURL'] = 'http' . (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on' ? 's' : '') . '://' . $_SERVER['HTTP_HOST'] . (!strstr($_SERVER['HTTP_HOST'], ':') && !empty($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] != '80' && $_SERVER['SERVER_PORT'] != '443' ? ':' . $_SERVER['SERVER_PORT'] : '') . $serendipity['serendipityHTTPPath'];
|
|
}
|
|
/*
|
|
* If a user is logged in, fetch his preferences. He possibly wants to have a different language
|
|
*/
|
|
|
|
if (IS_installed === true && php_sapi_name() !== 'cli') {
|
|
// Import HTTP auth (mostly used for RSS feeds)
|
|
if ($serendipity['useHTTP-Auth'] && (isset($_REQUEST['http_auth']) || isset($_SERVER['PHP_AUTH_USER']))) {
|
|
if (!isset($_SERVER['PHP_AUTH_USER'])) {
|
|
header("WWW-Authenticate: Basic realm=\"Feed Login\"");
|
|
header("HTTP/1.0 401 Unauthorized");
|
|
header("Status: 401 Unauthorized");
|
|
exit;
|
|
} else {
|
|
if (!isset($serendipity['POST']['user'])) {
|
|
$serendipity['POST']['user'] = $_SERVER['PHP_AUTH_USER'];
|
|
}
|
|
if (!isset($serendipity['POST']['pass'])) {
|
|
$serendipity['POST']['pass'] = $_SERVER['PHP_AUTH_PW'];
|
|
}
|
|
}
|
|
} elseif (isset($_REQUEST['http_auth_user']) && isset($_REQUEST['http_auth_pw'])) {
|
|
$serendipity['POST']['user'] = $_REQUEST['http_auth_user'];
|
|
$serendipity['POST']['pass'] = $_REQUEST['http_auth_pw'];
|
|
}
|
|
|
|
serendipity_login(false);
|
|
}
|
|
|
|
if (isset($_SESSION['serendipityAuthorid'])) {
|
|
serendipity_load_configuration($_SESSION['serendipityAuthorid']);
|
|
$serendipity['lang'] = serendipity_getPostAuthSessionLanguage();
|
|
}
|
|
|
|
// Try to fix some path settings. It seems common users have this setting wrong
|
|
// when s9y is installed into the root directory, especially 0.7.1 upgrade users.
|
|
if (empty($serendipity['serendipityHTTPPath'])) {
|
|
$serendipity['serendipityHTTPPath'] = '/';
|
|
}
|
|
|
|
/* Changing this is NOT recommended, rewrite rules does not take them into account - yet */
|
|
serendipity_initPermalinks();
|
|
|
|
// Apply constants/definitions from custom permalinks
|
|
serendipity_permalinkPatterns();
|
|
|
|
/*
|
|
* Load main language file again, because now we have the preferred language
|
|
*/
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
|
|
/*
|
|
* Reset charset definition now that final language is known
|
|
*/
|
|
$serendipity['charsets'] = array(
|
|
'UTF-8/' => 'UTF-8',
|
|
'' => CHARSET_NATIVE
|
|
);
|
|
|
|
/*
|
|
* Set current locale, if any has been defined
|
|
*/
|
|
if (defined('DATE_LOCALES')) {
|
|
$locales = explode(',', DATE_LOCALES);
|
|
foreach ($locales as $locale) {
|
|
$locale = trim($locale);
|
|
if (setlocale(LC_TIME, $locale) == $locale) {
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
if (function_exists('date_default_timezone_set')) {
|
|
if(isset($serendipity['useServerOffset']) && $serendipity['useServerOffset']==false) {
|
|
date_default_timezone_set('UTC');
|
|
}
|
|
}
|
|
/*
|
|
* Fallback charset, if none is defined in the language files
|
|
*/
|
|
@define('LANG_CHARSET', 'ISO-8859-1');
|
|
|
|
/*
|
|
* Create array of permission levels, with descriptions
|
|
*/
|
|
$serendipity['permissionLevels'] = array(USERLEVEL_EDITOR => USERLEVEL_EDITOR_DESC,
|
|
USERLEVEL_CHIEF => USERLEVEL_CHIEF_DESC,
|
|
USERLEVEL_ADMIN => USERLEVEL_ADMIN_DESC);
|
|
|
|
|
|
// Redirect to the upgrader
|
|
if (IS_up2date === false && !defined('IN_upgrader')) {
|
|
if (preg_match(PAT_CSS, $_SERVER['REQUEST_URI'], $matches)) {
|
|
$css_mode = 'serendipity_admin.css';
|
|
return 1;
|
|
}
|
|
if (preg_match('@/(serendipity_editor\.js$)@', $_SERVER['REQUEST_URI'], $matches)) {
|
|
return 1;
|
|
}
|
|
serendipity_die(sprintf(SERENDIPITY_NEEDS_UPGRADE, $serendipity['versionInstalled'], $serendipity['version'], $serendipity['serendipityHTTPPath'] . 'serendipity_admin.php'));
|
|
}
|
|
|
|
// We don't care who tells us what to do
|
|
if (!isset($serendipity['GET']['action'])) {
|
|
$serendipity['GET']['action'] = (isset($serendipity['POST']['action']) ? $serendipity['POST']['action'] : '');
|
|
}
|
|
|
|
if (!isset($serendipity['GET']['adminAction'])) {
|
|
$serendipity['GET']['adminAction'] = (isset($serendipity['POST']['adminAction']) ? $serendipity['POST']['adminAction'] : '');
|
|
}
|
|
|
|
// Some stuff...
|
|
if (!isset($_SESSION['serendipityAuthedUser'])) {
|
|
$_SESSION['serendipityAuthedUser'] = false;
|
|
}
|
|
|
|
if (isset($_SESSION['serendipityUser'])) {
|
|
$serendipity['user'] = $_SESSION['serendipityUser'];
|
|
}
|
|
|
|
if (isset($_SESSION['serendipityEmail'])) {
|
|
$serendipity['email'] = $_SESSION['serendipityEmail'];
|
|
}
|
|
|
|
serendipity_plugin_api::hook_event('frontend_configure', $serendipity);
|
|
/* vim: set sts=4 ts=4 expandtab : */
|