<?php
-
/**
- * @file src/Core/Theme.php
+ * @copyright Copyright (C) 2020, Friendica
+ *
+ * @license GNU AGPL version 3 or any later version
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ *
*/
namespace Friendica\Core;
-use Friendica\Core\Logger;
-use Friendica\Core\System;
+use Friendica\DI;
+use Friendica\Model\Profile;
+use Friendica\Util\Strings;
+
+require_once 'boot.php';
/**
* Some functions to handle themes
*/
class Theme
{
+ public static function getAllowedList()
+ {
+ $allowed_themes_str = DI::config()->get('system', 'allowed_themes');
+ $allowed_themes_raw = explode(',', str_replace(' ', '', $allowed_themes_str));
+ $allowed_themes = [];
+ if (count($allowed_themes_raw)) {
+ foreach ($allowed_themes_raw as $theme) {
+ $theme = Strings::sanitizeFilePathItem(trim($theme));
+ if (strlen($theme) && is_dir("view/theme/$theme")) {
+ $allowed_themes[] = $theme;
+ }
+ }
+ }
+
+ return array_unique($allowed_themes);
+ }
+
+ public static function setAllowedList(array $allowed_themes)
+ {
+ DI::config()->set('system', 'allowed_themes', implode(',', array_unique($allowed_themes)));
+ }
+
/**
- * @brief Parse theme comment in search of theme infos.
+ * Parse theme comment in search of theme infos.
*
* like
* \code
*/
public static function getInfo($theme)
{
+ $theme = Strings::sanitizeFilePathItem($theme);
+
$info = [
'name' => $theme,
'description' => "",
return $info;
}
- $a = \get_app();
$stamp1 = microtime(true);
$theme_file = file_get_contents("view/theme/$theme/theme.php");
- $a->saveTimestamp($stamp1, "file");
+ DI::profiler()->saveTimestamp($stamp1, "file", System::callstack());
$result = preg_match("|/\*.*\*/|msU", $theme_file, $matches);
}
/**
- * @brief Returns the theme's screenshot.
+ * Returns the theme's screenshot.
*
* The screenshot is expected as view/theme/$theme/screenshot.[png|jpg].
*
- * @param sring $theme The name of the theme
+ * @param string $theme The name of the theme
* @return string
+ * @throws \Friendica\Network\HTTPException\InternalServerErrorException
*/
public static function getScreenshot($theme)
{
+ $theme = Strings::sanitizeFilePathItem($theme);
+
$exts = ['.png', '.jpg'];
foreach ($exts as $ext) {
if (file_exists('view/theme/' . $theme . '/screenshot' . $ext)) {
- return(System::baseUrl() . '/view/theme/' . $theme . '/screenshot' . $ext);
+ return DI::baseUrl() . '/view/theme/' . $theme . '/screenshot' . $ext;
}
}
- return(System::baseUrl() . '/images/blank.png');
+ return DI::baseUrl() . '/images/blank.png';
}
- // install and uninstall theme
public static function uninstall($theme)
{
- Logger::log("Addons: uninstalling theme " . $theme);
+ $theme = Strings::sanitizeFilePathItem($theme);
+
+ // silently fail if theme was removed or if $theme is funky
+ if (file_exists("view/theme/$theme/theme.php")) {
+ include_once "view/theme/$theme/theme.php";
- include_once "view/theme/$theme/theme.php";
- if (function_exists("{$theme}_uninstall")) {
$func = "{$theme}_uninstall";
- $func();
+ if (function_exists($func)) {
+ $func();
+ }
+ }
+
+ $allowed_themes = Theme::getAllowedList();
+ $key = array_search($theme, $allowed_themes);
+ if ($key !== false) {
+ unset($allowed_themes[$key]);
+ Theme::setAllowedList($allowed_themes);
}
}
public static function install($theme)
{
- // silently fail if theme was removed
+ $theme = Strings::sanitizeFilePathItem($theme);
+ // silently fail if theme was removed or if $theme is funky
if (!file_exists("view/theme/$theme/theme.php")) {
return false;
}
- Logger::log("Addons: installing theme $theme");
-
- include_once "view/theme/$theme/theme.php";
+ try {
+ include_once "view/theme/$theme/theme.php";
- if (function_exists("{$theme}_install")) {
$func = "{$theme}_install";
- $func();
+ if (function_exists($func)) {
+ $func();
+ }
+
+ $allowed_themes = Theme::getAllowedList();
+ $allowed_themes[] = $theme;
+ Theme::setAllowedList($allowed_themes);
+
return true;
- } else {
- Logger::log("Addons: FAILED installing theme $theme");
+ } catch (\Exception $e) {
+ Logger::error('Theme installation failed', ['theme' => $theme, 'error' => $e->getMessage()]);
return false;
}
}
/**
- * @brief Get the full path to relevant theme files by filename
+ * Get the full path to relevant theme files by filename
*
- * This function search in the theme directory (and if not present in global theme directory)
- * if there is a directory with the file extension and for a file with the given
- * filename.
+ * This function searches in order in the current theme directory, in the current theme parent directory, and lastly
+ * in the base view/ folder.
*
* @param string $file Filename
- * @param string $root Full root path
* @return string Path to the file or empty string if the file isn't found
+ * @throws \Exception
*/
- public static function getPathForFile($file, $root = '')
+ public static function getPathForFile($file)
{
- $file = basename($file);
+ $a = DI::app();
+
+ $theme = $a->getCurrentTheme();
+
+ $parent = Strings::sanitizeFilePathItem($a->theme_info['extends'] ?? $theme);
- // Make sure $root ends with a slash / if it's not blank
- if ($root !== '' && $root[strlen($root) - 1] !== '/') {
- $root = $root . '/';
- }
- $theme_info = \get_app()->theme_info;
- if (is_array($theme_info) && array_key_exists('extends', $theme_info)) {
- $parent = $theme_info['extends'];
- } else {
- $parent = 'NOPATH';
- }
- $theme = \get_app()->getCurrentTheme();
- $thname = $theme;
- $ext = substr($file, strrpos($file, '.') + 1);
$paths = [
- "{$root}view/theme/$thname/$ext/$file",
- "{$root}view/theme/$parent/$ext/$file",
- "{$root}view/$ext/$file",
+ "view/theme/$theme/$file",
+ "view/theme/$parent/$file",
+ "view/$file",
];
- foreach ($paths as $p) {
- // strpos() is faster than strstr when checking if one string is in another (http://php.net/manual/en/function.strstr.php)
- if (strpos($p, 'NOPATH') !== false) {
- continue;
- } elseif (file_exists($p)) {
- return $p;
+
+ foreach ($paths as $path) {
+ if (file_exists($path)) {
+ return $path;
}
}
+
return '';
}
/**
- * @brief Return relative path to theme stylesheet file
+ * Return relative path to theme stylesheet file
*
* Provide a sane default if nothing is chosen or the specified theme does not exist.
*
*/
public static function getStylesheetPath($theme)
{
- $a = \get_app();
+ $theme = Strings::sanitizeFilePathItem($theme);
+
+ if (!file_exists('view/theme/' . $theme . '/style.php')) {
+ return 'view/theme/' . $theme . '/style.css';
+ }
+
+ $a = DI::app();
- $opts = (($a->profile_uid) ? '?f=&puid=' . $a->profile_uid : '');
- if (file_exists('view/theme/' . $theme . '/style.php')) {
- return 'view/theme/' . $theme . '/style.pcss' . $opts;
+ $query_params = [];
+
+ $puid = Profile::getThemeUid($a);
+ if ($puid) {
+ $query_params['puid'] = $puid;
+ }
+
+ return 'view/theme/' . $theme . '/style.pcss' . (!empty($query_params) ? '?' . http_build_query($query_params) : '');
+ }
+
+ /**
+ * Returns the path of the provided theme
+ *
+ * @param $theme
+ * @return string|null
+ */
+ public static function getConfigFile($theme)
+ {
+ $theme = Strings::sanitizeFilePathItem($theme);
+
+ $a = DI::app();
+ $base_theme = $a->theme_info['extends'] ?? '';
+
+ if (file_exists("view/theme/$theme/config.php")) {
+ return "view/theme/$theme/config.php";
+ }
+ if ($base_theme && file_exists("view/theme/$base_theme/config.php")) {
+ return "view/theme/$base_theme/config.php";
+ }
+ return null;
+ }
+
+ /**
+ * Returns the background color of the provided theme if available.
+ *
+ * @param string $theme
+ * @param int|null $uid Current logged-in user id
+ * @return string|null
+ */
+ public static function getBackgroundColor(string $theme, $uid = null)
+ {
+ $theme = Strings::sanitizeFilePathItem($theme);
+
+ $return = null;
+
+ // silently fail if theme was removed or if $theme is funky
+ if (file_exists("view/theme/$theme/theme.php")) {
+ include_once "view/theme/$theme/theme.php";
+
+ $func = "{$theme}_get_background_color";
+ if (function_exists($func)) {
+ $return = $func($uid);
+ }
+ }
+
+ return $return;
+ }
+
+ /**
+ * Returns the theme color of the provided theme if available.
+ *
+ * @param string $theme
+ * @param int|null $uid Current logged-in user id
+ * @return string|null
+ */
+ public static function getThemeColor(string $theme, int $uid = null)
+ {
+ $theme = Strings::sanitizeFilePathItem($theme);
+
+ $return = null;
+
+ // silently fail if theme was removed or if $theme is funky
+ if (file_exists("view/theme/$theme/theme.php")) {
+ include_once "view/theme/$theme/theme.php";
+
+ $func = "{$theme}_get_theme_color";
+ if (function_exists($func)) {
+ $return = $func($uid);
+ }
}
- return 'view/theme/' . $theme . '/style.css';
+ return $return;
}
}