429 lines
16 KiB
PHP
429 lines
16 KiB
PHP
<?php # $Id$
|
|
# Copyright (c) 2003-2005, Jannis Hermanns (on behalf the Serendipity Developer Team)
|
|
# All rights reserved. See LICENSE file for licensing details
|
|
|
|
if (defined('S9Y_FRAMEWORK')) {
|
|
return;
|
|
}
|
|
|
|
@define('S9Y_FRAMEWORK', true);
|
|
|
|
if (!headers_sent()) {
|
|
// Only set the session name, if no session has yet been issued.
|
|
if (session_id() == '') {
|
|
session_name('s9y_' . md5(dirname(__FILE__)));
|
|
session_start();
|
|
}
|
|
|
|
// Prevent session fixation by only allowing sessions that have been sent by the server.
|
|
// Any session that does not contain our unique token will be regarded as foreign/fixated
|
|
// and be regenerated with a system-generated SID.
|
|
// Patch by David Vieira-Kurz of majorsecurity.de
|
|
if (!isset($_SESSION['SERVER_GENERATED_SID'])) {
|
|
session_regenerate_id(true);
|
|
@session_start();
|
|
header('X-Session-Reinit: true');
|
|
$_SESSION['SERVER_GENERATED_SID'] = $_SERVER['REMOTE_ADDR'] . $_SERVER['QUERY_STRING'];
|
|
}
|
|
}
|
|
|
|
if (!defined('S9Y_INCLUDE_PATH')) {
|
|
define('S9Y_INCLUDE_PATH', dirname(__FILE__) . '/');
|
|
}
|
|
define('S9Y_CONFIG_TEMPLATE', S9Y_INCLUDE_PATH . 'include/tpl/config_local.inc.php');
|
|
define('S9Y_CONFIG_USERTEMPLATE', S9Y_INCLUDE_PATH . 'include/tpl/config_personal.inc.php');
|
|
|
|
define('IS_installed', file_exists('serendipity_config_local.inc.php') && (filesize('serendipity_config_local.inc.php') > 0));
|
|
|
|
if (!defined('IN_serendipity')) {
|
|
define('IN_serendipity', true);
|
|
}
|
|
|
|
include(S9Y_INCLUDE_PATH . 'include/compat.inc.php');
|
|
if (defined('USE_MEMSNAP')) {
|
|
memSnap('Framework init');
|
|
}
|
|
|
|
// The version string
|
|
$serendipity['version'] = '2.0-alpha1';
|
|
|
|
// Setting this to 'false' will enable debugging output. All alpa/beta/cvs snapshot versions will emit debug information by default. To increase the debug level (to enable Smarty debugging), set this flag to 'debug'.
|
|
if (!isset($serendipity['production'])) {
|
|
$serendipity['production'] = (preg_match('@\-(alpha|beta|cvs)@', $serendipity['version']) ? false : true);
|
|
}
|
|
|
|
// Set error reporting
|
|
// TODO: E_STRICT throws problematic errors due to "hook_event" being a static function, but all of our plugins don't really define that...
|
|
error_reporting(E_ALL & ~E_NOTICE ^ E_STRICT);
|
|
|
|
if ($serendipity['production'] !== true) {
|
|
if ($serendipity['production'] === 'debug') {
|
|
error_reporting(E_ALL);
|
|
}
|
|
@ini_set('display_errors', 'on');
|
|
}
|
|
|
|
// The serendipity errorhandler string
|
|
$serendipity['errorhandler'] = 'errorToExceptionHandler';
|
|
|
|
//[internal callback function]: errorToExceptionHandler()
|
|
if(is_callable($serendipity['errorhandler'], false, $callable_name)) {
|
|
// set serendipity global error to exeption handler
|
|
#if ($serendipity['production'] === 'debug') {
|
|
# set_error_handler($serendipity['errorhandler'], E_ALL);
|
|
#} else {
|
|
// Caution! If we want to have the same noshow effect as upper set error_reporting(E_ALL) in 'debug' mode,
|
|
// do not clone it to set_error_handler(E_ALL), else everythimg is haltet to debug, which makes using debug obsolet.
|
|
set_error_handler($serendipity['errorhandler'], E_ALL & ~E_NOTICE ^ E_STRICT);
|
|
#}
|
|
}
|
|
|
|
// Default rewrite method
|
|
$serendipity['rewrite'] = 'none';
|
|
|
|
// Message container
|
|
$serendipity['messagestack'] = array();
|
|
|
|
// Can the user change the date of publishing for an entry?
|
|
$serendipity['allowDateManipulation'] = true;
|
|
|
|
// How much time is allowed to pass since the publising of an entry, so that a comment to that entry
|
|
// will update it's LastModified stamp? If the time is passed, a comment to an old entry will no longer
|
|
// push an article as being updated.
|
|
$serendipity['max_last_modified'] = 60 * 60 * 24 * 7;
|
|
|
|
// Clients can send a If-Modified Header to the RSS Feed (Conditional Get) and receive all articles beyond
|
|
// that date. However it is still limited by the number below of maximum entries
|
|
$serendipity['max_fetch_limit'] = 50;
|
|
|
|
// How many bytes are allowed for fetching trackbacks, so that no binary files get accidently trackbacked?
|
|
$serendipity['trackback_filelimit'] = 150 * 1024;
|
|
|
|
if (!isset($serendipity['fetchLimit'])) {
|
|
$serendipity['fetchLimit'] = 15;
|
|
}
|
|
|
|
if (!isset($serendipity['RSSfetchLimit'])) {
|
|
$serendipity['RSSfetchLimit'] = 15;
|
|
}
|
|
|
|
if (!isset($serendipity['mediaProperties'])) {
|
|
$serendipity['mediaProperties'] = 'DPI;COPYRIGHT;TITLE;COMMENT1:MULTI;COMMENT2:MULTI;ALT';
|
|
}
|
|
|
|
if (!isset($serendipity['use_PEAR'])) {
|
|
$serendipity['use_PEAR'] = true;
|
|
}
|
|
|
|
if (!isset($serendipity['useHTTP-Auth'])) {
|
|
$serendipity['useHTTP-Auth'] = true;
|
|
}
|
|
|
|
if (!isset($serendipity['CacheControl'])) {
|
|
$serendipity['CacheControl'] = true;
|
|
}
|
|
|
|
if (!isset($serendipity['expose_s9y'])) {
|
|
$serendipity['expose_s9y'] = true;
|
|
}
|
|
|
|
// Should IFRAMEs be used for previewing entries and sending trackbacks?
|
|
$serendipity['use_iframe'] = true;
|
|
|
|
/* Default language for autodetection */
|
|
$serendipity['autolang'] = 'en';
|
|
|
|
/* Name of folder for the default theme */
|
|
$serendipity['defaultTemplate'] = 'bulletproof';
|
|
|
|
/* Availiable languages */
|
|
if (!isset($serendipity['languages'])) {
|
|
$serendipity['languages'] = array('en' => 'English',
|
|
'de' => 'German',
|
|
'da' => 'Danish',
|
|
'es' => 'Spanish',
|
|
'fr' => 'French',
|
|
'fi' => 'Finnish',
|
|
'cs' => 'Czech (Win-1250)',
|
|
'cz' => 'Czech (ISO-8859-2)',
|
|
'sk' => 'Slovak',
|
|
'nl' => 'Dutch',
|
|
'is' => 'Icelandic',
|
|
'tr' => 'Turkish',
|
|
'se' => 'Swedish',
|
|
'pt' => 'Portuguese Brazilian',
|
|
'pt_PT' => 'Portuguese European',
|
|
'bg' => 'Bulgarian',
|
|
'hu' => 'Hungarian',
|
|
'no' => 'Norwegian',
|
|
'pl' => 'Polish',
|
|
'ro' => 'Romanian',
|
|
'it' => 'Italian',
|
|
'ru' => 'Russian',
|
|
'fa' => 'Persian',
|
|
'tw' => 'Traditional Chinese (Big5)',
|
|
'tn' => 'Traditional Chinese (UTF-8)',
|
|
'zh' => 'Simplified Chinese (GB2312)',
|
|
'cn' => 'Simplified Chinese (UTF-8)',
|
|
'ja' => 'Japanese',
|
|
'ko' => 'Korean',
|
|
'sa' => 'Arabic',
|
|
'ta' => 'Tamil');
|
|
}
|
|
|
|
/* Available Calendars */
|
|
$serendipity['calendars'] = array('gregorian' => 'Gregorian',
|
|
'persian-utf8' => 'Persian (utf8)');
|
|
/*
|
|
* Load main language file
|
|
*/
|
|
include($serendipity['serendipityPath'] . 'include/lang.inc.php');
|
|
|
|
$serendipity['charsets'] = array(
|
|
'UTF-8/' => 'UTF-8',
|
|
'' => CHARSET_NATIVE
|
|
);
|
|
|
|
@define('PATH_SMARTY_COMPILE', 'templates_c'); // will be placed inside the template directory
|
|
@define('USERLEVEL_ADMIN', 255);
|
|
@define('USERLEVEL_CHIEF', 1);
|
|
@define('USERLEVEL_EDITOR', 0);
|
|
|
|
@define('VIEWMODE_THREADED', 'threaded');
|
|
@define('VIEWMODE_LINEAR', 'linear');
|
|
|
|
/*
|
|
* Kill the script if we are not installed, and not inside the installer
|
|
*/
|
|
if ( !defined('IN_installer') && IS_installed === false ) {
|
|
header('Status: 302 Found');
|
|
header('X-RequireInstall: 1');
|
|
header('Location: ' . (strtolower($_SERVER['HTTPS']) == 'on' ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . str_replace('\\', '/', dirname($_SERVER['PHP_SELF'])) . '/serendipity_admin.php');
|
|
serendipity_die(sprintf(SERENDIPITY_NOT_INSTALLED, 'serendipity_admin.php'));
|
|
}
|
|
|
|
/* Do the PEAR dance. If $serendipity['use_PEAR'] is set to FALSE, Serendipity will first put its own PEAR include path.
|
|
By default, a local PEAR will be used. */
|
|
if (function_exists('get_include_path')) {
|
|
$old_include = @get_include_path();
|
|
} else {
|
|
$old_include = @ini_get('include_path');
|
|
}
|
|
|
|
|
|
$new_include = ($serendipity['use_PEAR'] ? $old_include . PATH_SEPARATOR : '')
|
|
. S9Y_INCLUDE_PATH . 'bundled-libs/' . PATH_SEPARATOR
|
|
. S9Y_INCLUDE_PATH . 'bundled-libs/Smarty/libs/' . PATH_SEPARATOR
|
|
. $serendipity['serendipityPath'] . PATH_SEPARATOR
|
|
. (!$serendipity['use_PEAR'] ? $old_include . PATH_SEPARATOR : '');
|
|
|
|
if (function_exists('set_include_path')) {
|
|
$use_include = @set_include_path($new_include);
|
|
} else {
|
|
$use_include = @ini_set('include_path', $new_include);
|
|
}
|
|
|
|
if ($use_include !== $false && $use_include == $new_include) {
|
|
@define('S9Y_PEAR', true);
|
|
@define('S9Y_PEAR_PATH', '');
|
|
} else {
|
|
@define('S9Y_PEAR', false);
|
|
@define('S9Y_PEAR_PATH', S9Y_INCLUDE_PATH . 'bundled-libs/');
|
|
}
|
|
/* PEAR path setup inclusion finished */
|
|
|
|
if (defined('IN_installer') && IS_installed === false) {
|
|
$serendipity['lang'] = $serendipity['autolang'];
|
|
$css_mode = 'serendipity_admin.css';
|
|
return 1;
|
|
}
|
|
|
|
/*
|
|
* Load DB configuration information
|
|
* Load Functions
|
|
* Make sure that the file included is in the current directory and not any possible
|
|
* include path
|
|
*/
|
|
if (!defined('S9Y_DATA_PATH') && file_exists(dirname(__FILE__) . '/serendipity_config_local.inc.php')) {
|
|
$local_config = dirname(__FILE__) . '/serendipity_config_local.inc.php';
|
|
} elseif (@file_exists($_SERVER['DOCUMENT_ROOT'] . dirname($_SERVER['PHP_SELF']) . '/serendipity_config_local.inc.php')) {
|
|
$local_config = $_SERVER['DOCUMENT_ROOT'] . dirname($_SERVER['PHP_SELF']) . '/serendipity_config_local.inc.php';
|
|
} elseif (defined('S9Y_DATA_PATH')) {
|
|
// Shared installation!
|
|
$local_config = S9Y_DATA_PATH . '/serendipity_config_local.inc.php';
|
|
} elseif (@file_exists($serendipity['serendipityPath'] . '/serendipity_config_local.inc.php')) {
|
|
$local_config = $serendipity['serendipityPath'] . '/serendipity_config_local.inc.php';
|
|
} else {
|
|
// Installation fallback
|
|
$local_config = S9Y_INCLUDE_PATH . '/serendipity_config_local.inc.php';
|
|
}
|
|
|
|
if (!is_readable($local_config)) {
|
|
$serendipity['lang'] = 'en';
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
serendipity_die(sprintf(INCLUDE_ERROR . '<br />' . FILE_CREATE_YOURSELF, $local_config));
|
|
}
|
|
|
|
include($local_config);
|
|
|
|
define('IS_up2date', version_compare($serendipity['version'], $serendipity['versionInstalled'], '<='));
|
|
|
|
/*
|
|
* Include main functions
|
|
*/
|
|
include(S9Y_INCLUDE_PATH . 'include/functions.inc.php');
|
|
|
|
if (serendipity_FUNCTIONS_LOADED !== true) {
|
|
$serendipity['lang'] = 'en';
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
serendipity_die(sprintf(INCLUDE_ERROR . '<br />' . FILE_CREATE_YOURSELF, 'include/functions.inc.php'));
|
|
}
|
|
|
|
/*
|
|
* Attempt to connect to the database
|
|
*/
|
|
if (!serendipity_db_connect()) {
|
|
$serendipity['lang'] = 'en';
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
serendipity_die(DATABASE_ERROR);
|
|
}
|
|
|
|
/*
|
|
* Load Configuration options from the database
|
|
*/
|
|
|
|
if (defined('USE_MEMSNAP')) {
|
|
memSnap('Framework init');
|
|
}
|
|
|
|
serendipity_load_configuration();
|
|
$serendipity['lang'] = serendipity_getSessionLanguage();
|
|
|
|
if ( (isset($serendipity['autodetect_baseURL']) && serendipity_db_bool($serendipity['autodetect_baseURL'])) ||
|
|
(isset($serendipity['embed']) && serendipity_db_bool($serendipity['embed'])) ) {
|
|
$serendipity['baseURL'] = 'http' . (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on' ? 's' : '') . '://' . $_SERVER['HTTP_HOST'] . (!strstr($_SERVER['HTTP_HOST'], ':') && !empty($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] != '80' && $_SERVER['SERVER_PORT'] != '443' ? ':' . $_SERVER['SERVER_PORT'] : '') . $serendipity['serendipityHTTPPath'];
|
|
}
|
|
/*
|
|
* If a user is logged in, fetch his preferences. He possibly wants to have a different language
|
|
*/
|
|
|
|
if (IS_installed === true) {
|
|
// Import HTTP auth (mostly used for RSS feeds)
|
|
if ($serendipity['useHTTP-Auth'] && (isset($_REQUEST['http_auth']) || isset($_SERVER['PHP_AUTH_USER']))) {
|
|
if (!isset($_SERVER['PHP_AUTH_USER'])) {
|
|
header("WWW-Authenticate: Basic realm=\"Feed Login\"");
|
|
header("HTTP/1.0 401 Unauthorized");
|
|
header("Status: 401 Unauthorized");
|
|
exit;
|
|
} else {
|
|
if (!isset($serendipity['POST']['user'])) {
|
|
$serendipity['POST']['user'] = $_SERVER['PHP_AUTH_USER'];
|
|
}
|
|
if (!isset($serendipity['POST']['pass'])) {
|
|
$serendipity['POST']['pass'] = $_SERVER['PHP_AUTH_PW'];
|
|
}
|
|
}
|
|
} elseif (isset($_REQUEST['http_auth_user']) && isset($_REQUEST['http_auth_pw'])) {
|
|
$serendipity['POST']['user'] = $_REQUEST['http_auth_user'];
|
|
$serendipity['POST']['pass'] = $_REQUEST['http_auth_pw'];
|
|
}
|
|
|
|
serendipity_login(false);
|
|
}
|
|
|
|
if (isset($_SESSION['serendipityAuthorid'])) {
|
|
serendipity_load_configuration($_SESSION['serendipityAuthorid']);
|
|
$serendipity['lang'] = serendipity_getPostAuthSessionLanguage();
|
|
}
|
|
|
|
// Try to fix some path settings. It seems common users have this setting wrong
|
|
// when s9y is installed into the root directory, especially 0.7.1 upgrade users.
|
|
if (empty($serendipity['serendipityHTTPPath'])) {
|
|
$serendipity['serendipityHTTPPath'] = '/';
|
|
}
|
|
|
|
/* Changing this is NOT recommended, rewrite rules does not take them into account - yet */
|
|
serendipity_initPermalinks();
|
|
|
|
// Apply constants/definitions from custom permalinks
|
|
serendipity_permalinkPatterns();
|
|
|
|
/*
|
|
* Load main language file again, because now we have the preferred language
|
|
*/
|
|
include(S9Y_INCLUDE_PATH . 'include/lang.inc.php');
|
|
|
|
/*
|
|
* Reset charset definition now that final language is known
|
|
*/
|
|
$serendipity['charsets'] = array(
|
|
'UTF-8/' => 'UTF-8',
|
|
'' => CHARSET_NATIVE
|
|
);
|
|
|
|
/*
|
|
* Set current locale, if any has been defined
|
|
*/
|
|
if (defined('DATE_LOCALES')) {
|
|
$locales = explode(',', DATE_LOCALES);
|
|
foreach ($locales as $locale) {
|
|
$locale = trim($locale);
|
|
if (setlocale(LC_TIME, $locale) == $locale) {
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
if (function_exists('date_default_timezone_set')) {
|
|
if(isset($serendipity['useServerOffset']) && $serendipity['useServerOffset']==false) {
|
|
date_default_timezone_set('UTC');
|
|
}
|
|
}
|
|
/*
|
|
* Fallback charset, if none is defined in the language files
|
|
*/
|
|
@define('LANG_CHARSET', 'ISO-8859-1');
|
|
|
|
/*
|
|
* Create array of permission levels, with descriptions
|
|
*/
|
|
$serendipity['permissionLevels'] = array(USERLEVEL_EDITOR => USERLEVEL_EDITOR_DESC,
|
|
USERLEVEL_CHIEF => USERLEVEL_CHIEF_DESC,
|
|
USERLEVEL_ADMIN => USERLEVEL_ADMIN_DESC);
|
|
|
|
/*
|
|
* Check if the installed version is higher than the version of the config
|
|
*/
|
|
|
|
if (IS_up2date === false && !defined('IN_upgrader')) {
|
|
if (preg_match(PAT_CSS, $_SERVER['REQUEST_URI'], $matches)) {
|
|
$css_mode = 'serendipity_admin.css';
|
|
return 1;
|
|
}
|
|
|
|
serendipity_die(sprintf(SERENDIPITY_NEEDS_UPGRADE, $serendipity['versionInstalled'], $serendipity['version'], $serendipity['serendipityHTTPPath'] . 'serendipity_admin.php'));
|
|
}
|
|
|
|
// We don't care who tells us what to do
|
|
if (!isset($serendipity['GET']['action'])) {
|
|
$serendipity['GET']['action'] = (isset($serendipity['POST']['action']) ? $serendipity['POST']['action'] : '');
|
|
}
|
|
|
|
if (!isset($serendipity['GET']['adminAction'])) {
|
|
$serendipity['GET']['adminAction'] = (isset($serendipity['POST']['adminAction']) ? $serendipity['POST']['adminAction'] : '');
|
|
}
|
|
|
|
// Some stuff...
|
|
if (!isset($_SESSION['serendipityAuthedUser'])) {
|
|
$_SESSION['serendipityAuthedUser'] = false;
|
|
}
|
|
|
|
if (isset($_SESSION['serendipityUser'])) {
|
|
$serendipity['user'] = $_SESSION['serendipityUser'];
|
|
}
|
|
|
|
if (isset($_SESSION['serendipityEmail'])) {
|
|
$serendipity['email'] = $_SESSION['serendipityEmail'];
|
|
}
|
|
serendipity_plugin_api::hook_event('frontend_configure', $serendipity);
|
|
/* vim: set sts=4 ts=4 expandtab : */
|