X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;ds=sidebyside;f=index.php;h=2b26eb90f0caad691e99605471e24863cc640e9a;hb=fd5d058156185c6c02c1285a794139d07f4d13ce;hp=26bc800f7865dc3b77d29ab979998f65f1a14e4c;hpb=55e8e03e3896ea9dcc9336c37c539aec86f0d4fd;p=friendica.git
diff --git a/index.php b/index.php
index 26bc800f78..2b26eb90f0 100644
--- a/index.php
+++ b/index.php
@@ -13,26 +13,33 @@
*
*/
-require_once('boot.php');
-require_once('object/BaseObject.php');
+use Friendica\App;
+use Friendica\Core\Config;
-$a = new App;
+require_once 'boot.php';
+require_once 'object/BaseObject.php';
+
+$a = new App(__DIR__);
BaseObject::set_app($a);
+// We assume that the index.php is called by a frontend process
+// The value is set to "true" by default in boot.php
+$a->backend = false;
+
/**
*
* Load the configuration file which contains our DB credentials.
- * Ignore errors. If the file doesn't exist or is empty, we are running in installation mode.
+ * Ignore errors. If the file doesn't exist or is empty, we are running in
+ * installation mode.
*
*/
$install = ((file_exists('.htconfig.php') && filesize('.htconfig.php')) ? false : true);
-@include(".htconfig.php");
-
-
-
-
+// Only load config if found, don't surpress errors
+if (!$install) {
+ include ".htconfig.php";
+}
/**
*
@@ -40,20 +47,34 @@ $install = ((file_exists('.htconfig.php') && filesize('.htconfig.php')) ? false
*
*/
-require_once("include/dba.php");
+require_once "include/dba.php";
-if(!$install) {
+if (!$install) {
$db = new dba($db_host, $db_user, $db_pass, $db_data, $install);
- unset($db_host, $db_user, $db_pass, $db_data);
+ unset($db_host, $db_user, $db_pass, $db_data);
/**
* Load configs from db. Overwrite configs from .htconfig.php
*/
- load_config('config');
- load_config('system');
+ Config::load();
- require_once("include/session.php");
+ if ($a->max_processes_reached() OR $a->maxload_reached()) {
+ header($_SERVER["SERVER_PROTOCOL"] . ' 503 Service Temporarily Unavailable');
+ header('Retry-After: 120');
+ header('Refresh: 120; url=' . App::get_baseurl() . "/" . $a->query_string);
+ die("System is currently unavailable. Please try again later");
+ }
+
+ if (get_config('system', 'force_ssl') AND ($a->get_scheme() == "http") AND
+ (intval(get_config('system', 'ssl_policy')) == SSL_POLICY_FULL) AND
+ (substr(App::get_baseurl(), 0, 8) == "https://")) {
+ header("HTTP/1.1 302 Moved Temporarily");
+ header("Location: " . App::get_baseurl() . "/" . $a->query_string);
+ exit();
+ }
+
+ require_once 'include/session.php';
load_hooks();
call_hooks('init_1');
@@ -70,77 +91,109 @@ load_translation_table($lang);
*
* The order of these may be important so use caution if you think they're all
* intertwingled with no logical order and decide to sort it out. Some of the
- * dependencies have changed, but at least at one time in the recent past - the
+ * dependencies have changed, but at least at one time in the recent past - the
* order was critical to everything working properly
*
*/
-session_start();
+// Exclude the backend processes from the session management
+if (!$a->is_backend()) {
+ $stamp1 = microtime(true);
+ session_start();
+ $a->save_timestamp($stamp1, "parser");
+} else {
+ require_once "include/poller.php";
+
+ call_worker_if_idle();
+}
/**
* Language was set earlier, but we can over-ride it in the session.
* We have to do it here because the session was just now opened.
*/
-
-if(array_key_exists('system_language',$_POST)) {
- if(strlen($_POST['system_language']))
- $_SESSION['language'] = $_POST['system_language'];
- else
- unset($_SESSION['language']);
+if (x($_SESSION,'authenticated') && !x($_SESSION,'language')) {
+ // we didn't loaded user data yet, but we need user language
+ $r = dba::select('user', array('language'), array('uid' => $_SESSION['uid']), array('limit' => 1));
+ $_SESSION['language'] = $lang;
+ if (dbm::is_result($r)) {
+ $_SESSION['language'] = $r['language'];
+ }
}
-if((x($_SESSION,'language')) && ($_SESSION['language'] !== $lang)) {
+
+if ((x($_SESSION,'language')) && ($_SESSION['language'] !== $lang)) {
$lang = $_SESSION['language'];
load_translation_table($lang);
}
-if((x($_GET,'zrl')) && (!$install && !$maintenance)) {
- $_SESSION['my_url'] = $_GET['zrl'];
- $a->query_string = preg_replace('/[\?&]zrl=(.*?)([\?&]|$)/is','',$a->query_string);
- zrl_init($a);
+if ((x($_GET,'zrl')) && (!$install && !$maintenance)) {
+ // Only continue when the given profile link seems valid
+ // Valid profile links contain a path with "/profile/" and no query parameters
+ if ((parse_url($_GET['zrl'], PHP_URL_QUERY) == "") AND
+ strstr(parse_url($_GET['zrl'], PHP_URL_PATH), "/profile/")) {
+ $_SESSION['my_url'] = $_GET['zrl'];
+ $a->query_string = preg_replace('/[\?&]zrl=(.*?)([\?&]|$)/is','',$a->query_string);
+ zrl_init($a);
+ } else {
+ // Someone came with an invalid parameter, maybe as a DDoS attempt
+ // We simply stop processing here
+ logger("Invalid ZRL parameter ".$_GET['zrl'], LOGGER_DEBUG);
+ header('HTTP/1.1 403 Forbidden');
+ echo "
403 Forbidden
";
+ killme();
+ }
}
/**
*
* For Mozilla auth manager - still needs sorting, and this might conflict with LRDD header.
* Apache/PHP lumps the Link: headers into one - and other services might not be able to parse it
- * this way. There's a PHP flag to link the headers because by default this will over-write any other
+ * this way. There's a PHP flag to link the headers because by default this will over-write any other
* link header.
*
* What we really need to do is output the raw headers ourselves so we can keep them separate.
*
-
*/
-// header('Link: <' . $a->get_baseurl() . '/amcd>; rel="acct-mgmt";');
+// header('Link: <' . App::get_baseurl() . '/amcd>; rel="acct-mgmt";');
-if((x($_SESSION,'authenticated')) || (x($_POST,'auth-params')) || ($a->module === 'login'))
+if (x($_COOKIE["Friendica"]) || (x($_SESSION,'authenticated')) || (x($_POST,'auth-params')) || ($a->module === 'login')) {
require("include/auth.php");
+}
-if(! x($_SESSION,'authenticated'))
+if (! x($_SESSION,'authenticated')) {
header('X-Account-Management-Status: none');
+}
/* set up page['htmlhead'] and page['end'] for the modules to use */
$a->page['htmlhead'] = '';
$a->page['end'] = '';
-if(! x($_SESSION,'sysmsg'))
+if (! x($_SESSION,'sysmsg')) {
$_SESSION['sysmsg'] = array();
+}
-if(! x($_SESSION,'sysmsg_info'))
+if (! x($_SESSION,'sysmsg_info')) {
$_SESSION['sysmsg_info'] = array();
+}
+// Array for informations about last received items
+if (! x($_SESSION,'last_updated')) {
+ $_SESSION['last_updated'] = array();
+}
/*
- * check_config() is responsible for running update scripts. These automatically
+ * check_config() is responsible for running update scripts. These automatically
* update the DB schema whenever we push a new one out. It also checks to see if
- * any plugins have been added or removed and reacts accordingly.
+ * any plugins have been added or removed and reacts accordingly.
*/
-if($install)
+// in install mode, any url loads install module
+// but we need "view" module for stylesheet
+if ($install && $a->module!="view") {
$a->module = 'install';
-elseif($maintenance)
+} elseif ($maintenance && $a->module!="view") {
$a->module = 'maintenance';
-else {
+} else {
check_url($a);
check_db();
check_plugins($a);
@@ -150,8 +203,7 @@ nav_set_selected('nothing');
//Don't populate apps_menu if apps are private
$privateapps = get_config('config','private_addons');
-if((local_user()) || (! $privateapps === "1"))
-{
+if ((local_user()) || (! $privateapps === "1")) {
$arr = array('app_menu' => $a->apps);
call_hooks('app_menu', $arr);
@@ -167,18 +219,18 @@ if((local_user()) || (! $privateapps === "1"))
* and use it for handling our URL request.
* The module file contains a few functions that we call in various circumstances
* and in the following order:
- *
+ *
* "module"_init
* "module"_post (only called if there are $_POST variables)
* "module"_afterpost
* "module"_content - the string return of this function contains our page body
*
- * Modules which emit other serialisations besides HTML (XML,JSON, etc.) should do
+ * Modules which emit other serialisations besides HTML (XML,JSON, etc.) should do
* so within the module init and/or post functions and then invoke killme() to terminate
* further processing.
*/
-if(strlen($a->module)) {
+if (strlen($a->module)) {
/**
*
@@ -188,20 +240,26 @@ if(strlen($a->module)) {
*/
// Compatibility with the Android Diaspora client
- if ($a->module == "stream")
+ if ($a->module == "stream") {
$a->module = "network";
+ }
+
+ // Compatibility with the Firefox App
+ if (($a->module == "users") AND ($a->cmd == "users/sign_in")) {
+ $a->module = "login";
+ }
$privateapps = get_config('config','private_addons');
- if(is_array($a->plugins) && in_array($a->module,$a->plugins) && file_exists("addon/{$a->module}/{$a->module}.php")) {
+ if (is_array($a->plugins) && in_array($a->module,$a->plugins) && file_exists("addon/{$a->module}/{$a->module}.php")) {
//Check if module is an app and if public access to apps is allowed or not
- if((!local_user()) && plugin_is_app($a->module) && $privateapps === "1") {
+ if ((!local_user()) && plugin_is_app($a->module) && $privateapps === "1") {
info( t("You must be logged in to use addons. "));
- }
- else {
+ } else {
include_once("addon/{$a->module}/{$a->module}.php");
- if(function_exists($a->module . '_module'))
+ if (function_exists($a->module . '_module')) {
$a->module_loaded = true;
+ }
}
}
@@ -209,7 +267,7 @@ if(strlen($a->module)) {
* If not, next look for a 'standard' program module in the 'mod' directory
*/
- if((! $a->module_loaded) && (file_exists("mod/{$a->module}.php"))) {
+ if ((! $a->module_loaded) && (file_exists("mod/{$a->module}.php"))) {
include_once("mod/{$a->module}.php");
$a->module_loaded = true;
}
@@ -218,8 +276,8 @@ if(strlen($a->module)) {
*
* The URL provided does not resolve to a valid module.
*
- * On Dreamhost sites, quite often things go wrong for no apparent reason and they send us to '/internal_error.html'.
- * We don't like doing this, but as it occasionally accounts for 10-20% or more of all site traffic -
+ * On Dreamhost sites, quite often things go wrong for no apparent reason and they send us to '/internal_error.html'.
+ * We don't like doing this, but as it occasionally accounts for 10-20% or more of all site traffic -
* we are going to trap this and redirect back to the requested page. As long as you don't have a critical error on your page
* this will often succeed and eventually do the right thing.
*
@@ -227,16 +285,16 @@ if(strlen($a->module)) {
*
*/
- if(! $a->module_loaded) {
+ if (! $a->module_loaded) {
// Stupid browser tried to pre-fetch our Javascript img template. Don't log the event or return anything - just quietly exit.
- if((x($_SERVER,'QUERY_STRING')) && preg_match('/{[0-9]}/',$_SERVER['QUERY_STRING']) !== 0) {
+ if ((x($_SERVER,'QUERY_STRING')) && preg_match('/{[0-9]}/',$_SERVER['QUERY_STRING']) !== 0) {
killme();
}
- if((x($_SERVER,'QUERY_STRING')) && ($_SERVER['QUERY_STRING'] === 'q=internal_error.html') && isset($dreamhost_error_hack)) {
+ if ((x($_SERVER,'QUERY_STRING')) && ($_SERVER['QUERY_STRING'] === 'q=internal_error.html') && isset($dreamhost_error_hack)) {
logger('index.php: dreamhost_error_hack invoked. Original URI =' . $_SERVER['REQUEST_URI']);
- goaway($a->get_baseurl() . $_SERVER['REQUEST_URI']);
+ goaway(App::get_baseurl() . $_SERVER['REQUEST_URI']);
}
logger('index.php: page not found: ' . $_SERVER['REQUEST_URI'] . ' ADDRESS: ' . $_SERVER['REMOTE_ADDR'] . ' QUERY: ' . $_SERVER['QUERY_STRING'], LOGGER_DEBUG);
@@ -259,39 +317,34 @@ if (file_exists($theme_info_file)){
/* initialise content region */
-if(! x($a->page,'content'))
+if (! x($a->page,'content')) {
$a->page['content'] = '';
+}
-if(!$install && !$maintenance)
+if (!$install && !$maintenance) {
call_hooks('page_content_top',$a->page['content']);
+}
/**
* Call module functions
*/
-if($a->module_loaded) {
+if ($a->module_loaded) {
$a->page['page_title'] = $a->module;
$placeholder = '';
- if(function_exists($a->module . '_init')) {
+ if (function_exists($a->module . '_init')) {
call_hooks($a->module . '_mod_init', $placeholder);
$func = $a->module . '_init';
$func($a);
}
- if(function_exists(str_replace('-','_',current_theme()) . '_init')) {
+ if (function_exists(str_replace('-','_',current_theme()) . '_init')) {
$func = str_replace('-','_',current_theme()) . '_init';
$func($a);
}
-// elseif (x($a->theme_info,"extends") && file_exists("view/theme/".$a->theme_info["extends"]."/theme.php")) {
-// require_once("view/theme/".$a->theme_info["extends"]."/theme.php");
-// if(function_exists(str_replace('-','_',$a->theme_info["extends"]) . '_init')) {
-// $func = str_replace('-','_',$a->theme_info["extends"]) . '_init';
-// $func($a);
-// }
-// }
-
- if(($_SERVER['REQUEST_METHOD'] === 'POST') && (! $a->error)
+
+ if (($_SERVER['REQUEST_METHOD'] === 'POST') && (! $a->error)
&& (function_exists($a->module . '_post'))
&& (! x($_POST,'auth-params'))) {
call_hooks($a->module . '_mod_post', $_POST);
@@ -299,13 +352,13 @@ if($a->module_loaded) {
$func($a);
}
- if((! $a->error) && (function_exists($a->module . '_afterpost'))) {
+ if ((! $a->error) && (function_exists($a->module . '_afterpost'))) {
call_hooks($a->module . '_mod_afterpost',$placeholder);
$func = $a->module . '_afterpost';
$func($a);
}
- if((! $a->error) && (function_exists($a->module . '_content'))) {
+ if ((! $a->error) && (function_exists($a->module . '_content'))) {
$arr = array('content' => $a->page['content']);
call_hooks($a->module . '_mod_content', $arr);
$a->page['content'] = $arr['content'];
@@ -315,7 +368,7 @@ if($a->module_loaded) {
$a->page['content'] .= $arr['content'];
}
- if(function_exists(str_replace('-','_',current_theme()) . '_content_loaded')) {
+ if (function_exists(str_replace('-','_',current_theme()) . '_content_loaded')) {
$func = str_replace('-','_',current_theme()) . '_content_loaded';
$func($a);
}
@@ -323,112 +376,81 @@ if($a->module_loaded) {
/*
* Create the page head after setting the language
- * and getting any auth credentials
+ * and getting any auth credentials.
*
* Moved init_pagehead() and init_page_end() to after
* all the module functions have executed so that all
- * theme choices made by the modules can take effect
+ * theme choices made by the modules can take effect.
*/
$a->init_pagehead();
-/**
+/*
* Build the page ending -- this is stuff that goes right before
* the closing