* -------------------------------------------------------------------- *
* Kurzbeschreibung : Verbindet zu Ihrer Datenbank *
* -------------------------------------------------------------------- *
- * *
+ * $Revision:: $ *
+ * $Date:: $ *
+ * $Tag:: 0.2.1-FINAL $ *
+ * $Author:: $ *
+ * Needs to be in all Files and every File needs "svn propset *
+ * svn:keywords Date Revision" (autoprobset!) at least!!!!!! *
* -------------------------------------------------------------------- *
* Copyright (c) 2003 - 2008 by Roland Haeder *
* For more information visit: http://www.mxchange.org *
************************************************************************/
// Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
-{
- $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
+if (!defined('__SECURITY')) {
+ $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), '/inc') + 4) . '/security.php';
require($INC);
}
-// CFG: DEBUG-SQL (if enabled and DEBUG_MODE is enabled all SQL queries will be logged to debug.log)
-define('DEBUG_SQL', false);
-
-// Load library
-require_once(PATH."inc/db/lib.php");
-
-// Check if the user setups his MySQL stuff...
-if ((empty($MySQL['login'])) && (!mxchange_installing) && (!isset($_GET['installing'])) && (mxchange_installed))
-{
- // No login entered and outside installation mode
- echo "<STRONG>".LANG_WARNING.":</STRONG> ";
- if (mxchange_installed)
- {
- // You have changed my configuration file!
- die(DIE_CONFIG_CHANGED_YOU);
- }
- else
- {
- // Please run the installation script (maybe again)
- die(DIE_RUN_INSTALL_MYSQL);
- }
-}
- elseif ((!mxchange_installing) && (!isset($_GET['installing'])) && (empty($MySQL['password'])) && (warn_no_pass))
-{
- // No database password entered!!!
- echo "<STRONG>".LANG_WARNING.":</STRONG> ".WARN_NULL_PASSWORD;
-}
+// Non-database functions
+require('inc/functions.php');
+
+// Wrapper functions
+require('inc/wrapper-functions.php');
+
+// Load more function libraries or includes
+foreach (array('request-functions', 'session-functions', 'config-functions', 'code-functions', 'inc-functions', 'language-functions', 'filters', 'mysql-manager', 'extensions', 'db/lib', 'handler', 'hooks') as $lib) {
+ // Load special functions
+ loadIncludeOnce('inc/' . $lib . '.php');
+} // END - foreach
+
+// Set error handler
+set_error_handler('__errorHandler');
+
+// Init request
+initRequest();
+
+// Set important header_sent
+$GLOBALS['header_sent'] = 0;
+
+// Init fatal messages
+initFatalMessages();
// Check if this file is writeable or read-only and warn the user
-if ((!mxchange_installing) && (mxchange_installed))
-{
- // Check for write-permission for config.php and inc directory
- if (empty($GLOBALS['module'])) $GLOBALS['module'] = "index";
- if (($GLOBALS['module'] != "admin") && (admin_registered))
- {
- if (is_INCWritable("config")) ADD_FATAL(FATAL_CONFIG_WRITABLE);
- if (is_INCWritable("dummy")) ADD_FATAL(FATAL_INC_WRITABLE);
- }
+if ((!isInstalling()) && (isInstalled())) {
+ // Load "databases" aka static arrays
+ loadIncludeOnce('inc/databases.php');
- // Init configuration arrays
- $_CONFIG = array(
- 'code_length' => 0
- );
- $EXT_CSS_FILES = array();
+ // Load configuration file(s) here
+ loadIncludeOnce('inc/load_config.php');
+
+ // Check for write-permission for config.php and inc directory
+ if (empty($GLOBALS['module'])) $GLOBALS['module'] = REQUEST_GET('module');
+ if (empty($GLOBALS['module'])) $GLOBALS['module'] = 'index';
- // Load general stuff, like...
- require_once(PATH."inc/extensions.php"); // Extension management
- require_once(PATH."inc/functions.php"); // Non-database functions
- require_once(PATH."inc/databases.php"); // Several hard-coded databases (arrays, constants)
+ // CSS array
+ EXT_INIT_CSS_FILES();
- if ((!empty($MySQL['host'])) && (!empty($MySQL['login'])) && (!empty($MySQL['password'])) && (!empty($MySQL['dbase']))) {
+ if ((!empty($GLOBALS['mysql']['host'])) && (!empty($GLOBALS['mysql']['login'])) && (!empty($GLOBALS['mysql']['password'])) && (!empty($GLOBALS['mysql']['dbase']))) {
// Connect to DB
- $link = SQL_CONNECT($MySQL['host'], $MySQL['login'], $MySQL['password'], __FILE__, __LINE__);
+ SQL_CONNECT($GLOBALS['mysql']['host'], $GLOBALS['mysql']['login'], $GLOBALS['mysql']['password'], __FILE__, __LINE__);
// Is the link valid?
- if (is_resource($link)) {
- // Choose the database
- $db = SQL_SELECT_DB($MySQL['dbase'], $link, __FILE__, __LINE__);
-
+ if (SQL_IS_LINK_UP()) {
// Is it a valid resource?
- if ($db === true) {
- // Load configuration stuff
- $result = SQL_QUERY("SELECT pass_len, points_register, points_ref, least_cats, check_double_email, check_double_pass, admin_notify, url_tlock, test_text, max_tlength, test_subj, autosend_active, max_send, url_blacklist, auto_purge, auto_purge_active, last_update, unconfirmed, profile_lock, online_timeout, mad_timestamp, mad_count, profile_update, send_prof_update, resend_profile_update, code_length, patch_level, patch_ctime, guest_stats, ref_payout, activate_xchange, order_multi_page, display_refid, ip_timeout, allow_direct_pay, config FROM "._MYSQL_PREFIX."_config WHERE config='0' LIMIT 1", __FILE__, __LINE__);
-
- if (SQL_NUMROWS($result) == 1) {
- // Load data when previous SQL query did not fail
- if (!$result) {
- // Something went wrong
- ADD_FATAL(FATAL_CANNOT_LOAD_CONFIG);
- return;
- }
-
- // Load the configuration
- $_CONFIG = array_merge($_CONFIG, SQL_FETCHARRAY($result));
-
- // Initialize include-file-pool
- $INC_POOL = array();
+ if (SQL_SELECT_DB($GLOBALS['mysql']['dbase'], __FILE__, __LINE__) === true) {
+ // This is required for extension 'optimize' to work
+ define('__DB_NAME', $GLOBALS['mysql']['dbase']);
- // Load more include files
- require_once(PATH."inc/mysql-manager.php"); // Functions which interact with the database
+ // Remove MySQL array from namespace
+ unset($GLOBALS['mysql']);
- // Run daily reset
- if ((date("d", $_CONFIG['last_update']) != date("d", time()) || (DEBUG_MODE == true)) && (!mxchange_installing) && (mxchange_installed) && (admin_registered) && (!isset($_GET['register'])) && ($CSS != 1)) {
- // Do daily things in external PHP file but only when script is completely setup
- $INC_POOL[] = PATH."inc/reset/reset_daily.php";
+ // Load configuration stuff
+ loadConfiguration();
- // Daily reset was run!
- define('__DAILY_RESET', "1");
- }
+ // Init session
+ loadIncludeOnce('inc/session.php');
- // Load all extensions
- require_once(PATH."inc/load_extensions.php");
+ // Load versions
+ loadIncludeOnce('inc/versions.php');
- // Loading patching system is required here...
- require_once(PATH."inc/patch-system.php"); // Initialize patch system
+ // Loading patching system is required here...
+ loadIncludeOnce('inc/patch-system.php');
- // Functions which are related to themes
- require_once(PATH."inc/theme-manager.php");
+ // Run daily reset
+ loadIncludeOnce('inc/check-reset.php');
- // Initialize session management
- require_once(PATH."inc/session.php");
+ // Load admin include file if he is admin
+ if (IS_ADMIN()) {
+ // Administrative functions
+ loadIncludeOnce('inc/modules/admin/admin-inc.php');
+ } // END - if
+ //* DEBUG: */ ADD_POINTS_REFSYSTEM('test', 36, 1000);
+ //* DEBUG: */ die();
- // Load admin include file if he is admin
- if (IS_ADMIN()) {
- // Administrative functions
- require_once(PATH."inc/modules/admin/admin-inc.php");
- }
+ // Get all values
+ if (($GLOBALS['output_mode'] != 1) && ($GLOBALS['output_mode'] != -1)) {
+ if (empty($GLOBALS['module'])) $GLOBALS['module'] = 'empty';
+ if (empty($GLOBALS['what'])) $GLOBALS['what'] = getWhatFromModule($GLOBALS['module']);
+ if (empty($GLOBALS['action'])) $GLOBALS['action'] = getModeAction($GLOBALS['module'], $GLOBALS['what']);
+ } else {
+ // Set action/what to empty
+ $GLOBALS['action'] = '';
+ $GLOBALS['what'] = '';
+ }
- // Get all values
- if (($CSS != 1) && ($CSS != -1)) {
- if (empty($GLOBALS['module'])) $GLOBALS['module'] = "empty";
- if (empty($GLOBALS['what'])) $GLOBALS['what'] = GET_WHAT($GLOBALS['module']);
- if (empty($GLOBALS['action'])) $GLOBALS['action'] = GET_ACTION($GLOBALS['module'], $GLOBALS['what']);
+ // Run the init filter chain
+ runFilterChain('init');
+
+ // Set default 'what' value
+ //* DEBUG: */ OUTPUT_HTML('-'.$GLOBALS['module'].'/'.$GLOBALS['what']."-<br />");
+ if ((empty($GLOBALS['what'])) && (empty($GLOBALS['action'])) && ($GLOBALS['output_mode'] != 1) && ($GLOBALS['output_mode'] != -1)) {
+ if ($GLOBALS['module'] == 'admin') {
+ // Set 'action' value to 'login' in admin menu
+ $GLOBALS['action'] = getModeAction($GLOBALS['module'], $GLOBALS['what']);
+ } elseif (($GLOBALS['module'] == 'index') || ($GLOBALS['module'] == 'login')) {
+ // Set 'what' value to 'welcome' in guest and member menu
+ $GLOBALS['what'] = 'welcome';
+ if (getConfig('index_home') != '') $GLOBALS['what'] = getConfig('index_home');
} else {
- // Set action/what to empty
- $GLOBALS['action'] = "";
- $GLOBALS['what'] = "";
+ // Anything else like begging link
+ $GLOBALS['what'] = '';
}
+ } // END - if
- // Secure and validate user ID from cookie
- UPDATE_LOGIN_DATA();
-
- // Get session ID
- if (empty($_SESSION['PHPSESSID'])) $_SESSION['PHPSESSID'] = session_id();
-
- // Update online list
- UPDATE_ONLINE_LIST($_SESSION['PHPSESSID'], $GLOBALS['module'], $GLOBALS['action'], $GLOBALS['what']);
-
- // Load theme name
- $CurrTheme = GET_CURR_THEME();
-
- // Set default 'what' value
- //* DEBUG */ echo "-".$GLOBALS['module']."/".$GLOBALS['what']."-<br />\n";
- if ((empty($GLOBALS['what'])) && (empty($GLOBALS['action'])) && ($CSS != 1) && ($CSS != -1)) {
- if ($GLOBALS['module'] == "admin") {
- // Set 'action' value to 'login' in admin menu
- $GLOBALS['action'] = GET_ACTION($GLOBALS['module'], $GLOBALS['what']);
- } elseif (($GLOBALS['module'] == "index") || ($GLOBALS['module'] == "login")) {
- // Set 'what' value to 'welcome' in guest and member menu
- $GLOBALS['what'] = "welcome";
- if (!empty($_CONFIG['index_home'])) $GLOBALS['what'] = $_CONFIG['index_home'];
- } else {
- // Anything else like begging link
- $GLOBALS['what'] = "";
- }
- }
+ // Update sending pool
+ if (($GLOBALS['output_mode'] != '1') && ($GLOBALS['output_mode'] != '-1')) loadIncludeOnce('inc/pool-update.php'); // Sends out mails in configureable steps
+
+ // Load all active extension including language files when not upgrading.
+ // Check module for testing and count one click
+ if (checkModulePermissions($GLOBALS['module']) == 'done') countModuleHit($GLOBALS['module']);
- // Update sending pool
- if (($CSS != "1") && ($CSS != "-1")) require_once(PATH."inc/pool-update.php"); // Sends out mails in configureable steps
+ // Shall we activate the exchange?
+ if (getConfig('activate_xchange') > 0) activateExchange();
- // Load all active extension including language files when not upgrading.
- // Check module for testing and count one click
- $dummy = CHECK_MODULE($GLOBALS['module']);
- if ($dummy == "done") COUNT_MODULE($GLOBALS['module']);
- unset($dummy);
- if ($_CONFIG['activate_xchange'] > 0) activateExchange();
+ // Is the extension sql_patches installed and at least 0.3.6?
+ if (GET_EXT_VERSION('sql_patches') >= '0.3.6') {
+ // Generate random number
+ define('RAND_NUMBER', generateRandomCode(10, mt_rand(10000,32766), getUserId(), ''));
} else {
- // If you will read following error message you probably need to contact me (webmaster@mxchange.org)
- // and download the sql-upgrades extension from my server. Please ask me which SQL file(s) you need to
- // import *BEFORE* you import them!
- ADD_FATAL(FATAL_CANNOT_LOAD_CONFIG);
+ // Generate weak (!!!) code
+ define('RAND_NUMBER', mt_rand(1000000, 9999999));
}
-
- // Free memory
- SQL_FREERESULT($result);
} else {
// Wrong database?
- ADD_FATAL(WRONG_DB_SELECTED);
+ addFatalMessage(__FILE__, __LINE__, getMessage('WRONG_DB_SELECTED'));
}
} else {
// No link to database!
- ADD_FATAL(NO_DB_LINK);
- $db = false;
+ addFatalMessage(__FILE__, __LINE__, getMessage('NO_DB_LINK'));
}
} else {
// Maybe you forgot to enter your MySQL data?
- ADD_FATAL(MYSQL_DATA_MISSING);
+ addFatalMessage(__FILE__, __LINE__, getMessage('MYSQL_DATA_MISSING'));
}
} else {
///////////////////////////////////////////////////
// Include neccessary functions for installation //
///////////////////////////////////////////////////
- // Set CONFIG array
- $_CONFIG = array(
- 'code_length' => 0
- );
+ // Default output is 'direct' for HTML output
+ setConfigEntry('OUTPUT_MODE', 'direct');
+
+ // This hack prevents a backtrace in CSS output
+ if ($GLOBALS['output_mode'] == '1') {
+ // Problem with config so set output mode
+ setConfigEntry('OUTPUT_MODE', 'render');
+ } // END - if
// Set other missing variables
- $link = false; // No database link by default
+ if (!isset($GLOBALS['output_mode'])) $GLOBALS['output_mode'] = '0';
+
+ // Include databases.php
+ loadIncludeOnce('inc/databases.php');
- // Include required files
- require_once(PATH."inc/databases.php");
- require_once(PATH."inc/extensions.php");
- require_once(PATH."inc/theme-manager.php");
- require_once(PATH."inc/load_extensions.php");
- require_once(PATH."inc/session.php");
+ // Init session
+ loadIncludeOnce('inc/session.php');
+
+ // Load versions
+ loadIncludeOnce('inc/versions.php');
// Check if we are in installation routine
- $installPhp = basename($_SERVER['PHP_SELF']);
- if (($installPhp != "install.php") && ($CSS != "1") && ($CSS != -1)) {
+ if ((!isInstalling()) && ($GLOBALS['output_mode'] != '1') && ($GLOBALS['output_mode'] != -1)) {
// Redirect to the installation system
- LOAD_URL("install.php");
- }
+ redirectToUrl('install.php');
+ } // END - if
// Double-check installation mode
- if ((!mxchange_installed) || (!admin_registered)) {
+ if ((!isInstalled()) || (!isAdminRegistered())) {
// Check for file permissions
- if (!is_INCWritable("config")) {
- ADD_FATAL(CONFIG_IS_WRITE_PROTECTED);
- }
- if (!is_INCWritable("dummy")) {
- ADD_FATAL(DUMMY_IS_WRITE_PROTECTED);
- }
- if (!is_INCWritable(".secret/dummy")) {
- ADD_FATAL(SECRET_IS_WRITE_PROTECTED);
- }
- }
+ if (!isIncludeWriteable('config')) {
+ addFatalMessage(__FILE__, __LINE__, getMessage('CONFIG_IS_WRITE_PROTECTED'));
+ } // END - if
+ if (!isIncludeWriteable('dummy')) {
+ addFatalMessage(__FILE__, __LINE__, getMessage('DUMMY_IS_WRITE_PROTECTED'));
+ } // END - if
+ if (!isIncludeWriteable('.secret/dummy')) {
+ addFatalMessage(__FILE__, __LINE__, getMessage('SECRET_IS_WRITE_PROTECTED'));
+ } // END - if
+ } // END - if
+
+ // Run the init filter chain
+ runFilterChain('init');
+
+ // Load extension 'sql_patches'
+ LOAD_EXTENSION('sql_patches');
+
+ // Load configuration file(s) here
+ loadIncludeOnce('inc/load_config.php');
}
-// Any fatal messages?
-if (!is_array($FATAL)) $FATAL = array();
-if (((sizeof($FATAL) > 0) || (!empty($FATAL[0]))) && (mxchange_installed) && (!mxchange_installing) && ($CSS != "1"))
-{
+// Init session
+loadIncludeOnce('inc/session.php');
+
+// Load versions
+loadIncludeOnce('inc/versions.php');
+
+if ((getTotalFatalErrors() > 0) && (isInstalled()) && (!isInstalling()) && ($GLOBALS['output_mode'] != '1')) {
// One or more fatal error(s) occur during connect...
- include (PATH."inc/header.php");
- include (PATH."inc/fatal_errors.php");
- unset($FATAL);
- include (PATH."inc/footer.php");
- exit;
-}
+ loadIncludeOnce('inc/header.php');
+ loadIncludeOnce('inc/fatal_errors.php');
+ loadIncludeOnce('inc/footer.php');
+} // END - if
//
?>