X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;ds=sidebyside;f=index.php;h=2b26eb90f0caad691e99605471e24863cc640e9a;hb=fd5d058156185c6c02c1285a794139d07f4d13ce;hp=9fe248e8e2b5329f3b67503a75c74e9a2bc6ef3b;hpb=c0e87b2beac1f326f97eac6e7f97f95e12498405;p=friendica.git
diff --git a/index.php b/index.php
index 9fe248e8e2..2b26eb90f0 100644
--- a/index.php
+++ b/index.php
@@ -13,26 +13,33 @@
*
*/
-require_once('boot.php');
-require_once('object/BaseObject.php');
+use Friendica\App;
+use Friendica\Core\Config;
-$a = new App;
+require_once 'boot.php';
+require_once 'object/BaseObject.php';
+
+$a = new App(__DIR__);
BaseObject::set_app($a);
+// We assume that the index.php is called by a frontend process
+// The value is set to "true" by default in boot.php
+$a->backend = false;
+
/**
*
* Load the configuration file which contains our DB credentials.
- * Ignore errors. If the file doesn't exist or is empty, we are running in installation mode.
+ * Ignore errors. If the file doesn't exist or is empty, we are running in
+ * installation mode.
*
*/
$install = ((file_exists('.htconfig.php') && filesize('.htconfig.php')) ? false : true);
-@include(".htconfig.php");
-
-
-
-
+// Only load config if found, don't surpress errors
+if (!$install) {
+ include ".htconfig.php";
+}
/**
*
@@ -40,41 +47,34 @@ $install = ((file_exists('.htconfig.php') && filesize('.htconfig.php')) ? false
*
*/
-require_once("include/dba.php");
+require_once "include/dba.php";
-if(!$install) {
+if (!$install) {
$db = new dba($db_host, $db_user, $db_pass, $db_data, $install);
- unset($db_host, $db_user, $db_pass, $db_data);
+ unset($db_host, $db_user, $db_pass, $db_data);
/**
* Load configs from db. Overwrite configs from .htconfig.php
*/
- load_config('config');
- load_config('system');
-
- $maxsysload_frontend = intval(get_config('system','maxloadavg_frontend'));
- if($maxsysload_frontend < 1)
- $maxsysload_frontend = 50;
- if(function_exists('sys_getloadavg')) {
- $load = sys_getloadavg();
- if(intval($load[0]) > $maxsysload_frontend) {
- logger('system: load ' . $load[0] . ' too high. Service Temporarily Unavailable.');
- header($_SERVER["SERVER_PROTOCOL"].' 503 Service Temporarily Unavailable');
- header('Retry-After: 300');
- die("System is currently unavailable. Please try again later");
- }
- }
+ Config::load();
+ if ($a->max_processes_reached() OR $a->maxload_reached()) {
+ header($_SERVER["SERVER_PROTOCOL"] . ' 503 Service Temporarily Unavailable');
+ header('Retry-After: 120');
+ header('Refresh: 120; url=' . App::get_baseurl() . "/" . $a->query_string);
+ die("System is currently unavailable. Please try again later");
+ }
- if (get_config('system','force_ssl') AND ($a->get_scheme() == "http") AND
- (intval(get_config('system','ssl_policy')) == SSL_POLICY_FULL) AND
- (substr($a->get_baseurl(), 0, 8) == "https://")) {
+ if (get_config('system', 'force_ssl') AND ($a->get_scheme() == "http") AND
+ (intval(get_config('system', 'ssl_policy')) == SSL_POLICY_FULL) AND
+ (substr(App::get_baseurl(), 0, 8) == "https://")) {
header("HTTP/1.1 302 Moved Temporarily");
- header("location: ".$a->get_baseurl()."/".$a->query_string);
+ header("Location: " . App::get_baseurl() . "/" . $a->query_string);
+ exit();
}
- require_once("include/session.php");
+ require_once 'include/session.php';
load_hooks();
call_hooks('init_1');
@@ -96,7 +96,16 @@ load_translation_table($lang);
*
*/
-session_start();
+// Exclude the backend processes from the session management
+if (!$a->is_backend()) {
+ $stamp1 = microtime(true);
+ session_start();
+ $a->save_timestamp($stamp1, "parser");
+} else {
+ require_once "include/poller.php";
+
+ call_worker_if_idle();
+}
/**
* Language was set earlier, but we can over-ride it in the session.
@@ -104,20 +113,34 @@ session_start();
*/
if (x($_SESSION,'authenticated') && !x($_SESSION,'language')) {
// we didn't loaded user data yet, but we need user language
- $r = q("SELECT language FROM user WHERE uid=%d", intval($_SESSION['uid']));
+ $r = dba::select('user', array('language'), array('uid' => $_SESSION['uid']), array('limit' => 1));
$_SESSION['language'] = $lang;
- if (count($r)>0) $_SESSION['language'] = $r[0]['language'];
+ if (dbm::is_result($r)) {
+ $_SESSION['language'] = $r['language'];
+ }
}
-if((x($_SESSION,'language')) && ($_SESSION['language'] !== $lang)) {
+if ((x($_SESSION,'language')) && ($_SESSION['language'] !== $lang)) {
$lang = $_SESSION['language'];
load_translation_table($lang);
}
-if((x($_GET,'zrl')) && (!$install && !$maintenance)) {
- $_SESSION['my_url'] = $_GET['zrl'];
- $a->query_string = preg_replace('/[\?&]zrl=(.*?)([\?&]|$)/is','',$a->query_string);
- zrl_init($a);
+if ((x($_GET,'zrl')) && (!$install && !$maintenance)) {
+ // Only continue when the given profile link seems valid
+ // Valid profile links contain a path with "/profile/" and no query parameters
+ if ((parse_url($_GET['zrl'], PHP_URL_QUERY) == "") AND
+ strstr(parse_url($_GET['zrl'], PHP_URL_PATH), "/profile/")) {
+ $_SESSION['my_url'] = $_GET['zrl'];
+ $a->query_string = preg_replace('/[\?&]zrl=(.*?)([\?&]|$)/is','',$a->query_string);
+ zrl_init($a);
+ } else {
+ // Someone came with an invalid parameter, maybe as a DDoS attempt
+ // We simply stop processing here
+ logger("Invalid ZRL parameter ".$_GET['zrl'], LOGGER_DEBUG);
+ header('HTTP/1.1 403 Forbidden');
+ echo "
403 Forbidden
";
+ killme();
+ }
}
/**
@@ -131,25 +154,33 @@ if((x($_GET,'zrl')) && (!$install && !$maintenance)) {
*
*/
-// header('Link: <' . $a->get_baseurl() . '/amcd>; rel="acct-mgmt";');
+// header('Link: <' . App::get_baseurl() . '/amcd>; rel="acct-mgmt";');
-if((x($_SESSION,'authenticated')) || (x($_POST,'auth-params')) || ($a->module === 'login'))
+if (x($_COOKIE["Friendica"]) || (x($_SESSION,'authenticated')) || (x($_POST,'auth-params')) || ($a->module === 'login')) {
require("include/auth.php");
+}
-if(! x($_SESSION,'authenticated'))
+if (! x($_SESSION,'authenticated')) {
header('X-Account-Management-Status: none');
+}
/* set up page['htmlhead'] and page['end'] for the modules to use */
$a->page['htmlhead'] = '';
$a->page['end'] = '';
-if(! x($_SESSION,'sysmsg'))
+if (! x($_SESSION,'sysmsg')) {
$_SESSION['sysmsg'] = array();
+}
-if(! x($_SESSION,'sysmsg_info'))
+if (! x($_SESSION,'sysmsg_info')) {
$_SESSION['sysmsg_info'] = array();
+}
+// Array for informations about last received items
+if (! x($_SESSION,'last_updated')) {
+ $_SESSION['last_updated'] = array();
+}
/*
* check_config() is responsible for running update scripts. These automatically
* update the DB schema whenever we push a new one out. It also checks to see if
@@ -158,11 +189,11 @@ if(! x($_SESSION,'sysmsg_info'))
// in install mode, any url loads install module
// but we need "view" module for stylesheet
-if($install && $a->module!="view")
+if ($install && $a->module!="view") {
$a->module = 'install';
-elseif($maintenance && $a->module!="view")
+} elseif ($maintenance && $a->module!="view") {
$a->module = 'maintenance';
-else {
+} else {
check_url($a);
check_db();
check_plugins($a);
@@ -172,8 +203,7 @@ nav_set_selected('nothing');
//Don't populate apps_menu if apps are private
$privateapps = get_config('config','private_addons');
-if((local_user()) || (! $privateapps === "1"))
-{
+if ((local_user()) || (! $privateapps === "1")) {
$arr = array('app_menu' => $a->apps);
call_hooks('app_menu', $arr);
@@ -200,7 +230,7 @@ if((local_user()) || (! $privateapps === "1"))
* further processing.
*/
-if(strlen($a->module)) {
+if (strlen($a->module)) {
/**
*
@@ -210,24 +240,26 @@ if(strlen($a->module)) {
*/
// Compatibility with the Android Diaspora client
- if ($a->module == "stream")
+ if ($a->module == "stream") {
$a->module = "network";
+ }
// Compatibility with the Firefox App
- if (($a->module == "users") AND ($a->cmd == "users/sign_in"))
+ if (($a->module == "users") AND ($a->cmd == "users/sign_in")) {
$a->module = "login";
+ }
$privateapps = get_config('config','private_addons');
- if(is_array($a->plugins) && in_array($a->module,$a->plugins) && file_exists("addon/{$a->module}/{$a->module}.php")) {
+ if (is_array($a->plugins) && in_array($a->module,$a->plugins) && file_exists("addon/{$a->module}/{$a->module}.php")) {
//Check if module is an app and if public access to apps is allowed or not
- if((!local_user()) && plugin_is_app($a->module) && $privateapps === "1") {
+ if ((!local_user()) && plugin_is_app($a->module) && $privateapps === "1") {
info( t("You must be logged in to use addons. "));
- }
- else {
+ } else {
include_once("addon/{$a->module}/{$a->module}.php");
- if(function_exists($a->module . '_module'))
+ if (function_exists($a->module . '_module')) {
$a->module_loaded = true;
+ }
}
}
@@ -235,7 +267,7 @@ if(strlen($a->module)) {
* If not, next look for a 'standard' program module in the 'mod' directory
*/
- if((! $a->module_loaded) && (file_exists("mod/{$a->module}.php"))) {
+ if ((! $a->module_loaded) && (file_exists("mod/{$a->module}.php"))) {
include_once("mod/{$a->module}.php");
$a->module_loaded = true;
}
@@ -253,16 +285,16 @@ if(strlen($a->module)) {
*
*/
- if(! $a->module_loaded) {
+ if (! $a->module_loaded) {
// Stupid browser tried to pre-fetch our Javascript img template. Don't log the event or return anything - just quietly exit.
- if((x($_SERVER,'QUERY_STRING')) && preg_match('/{[0-9]}/',$_SERVER['QUERY_STRING']) !== 0) {
+ if ((x($_SERVER,'QUERY_STRING')) && preg_match('/{[0-9]}/',$_SERVER['QUERY_STRING']) !== 0) {
killme();
}
- if((x($_SERVER,'QUERY_STRING')) && ($_SERVER['QUERY_STRING'] === 'q=internal_error.html') && isset($dreamhost_error_hack)) {
+ if ((x($_SERVER,'QUERY_STRING')) && ($_SERVER['QUERY_STRING'] === 'q=internal_error.html') && isset($dreamhost_error_hack)) {
logger('index.php: dreamhost_error_hack invoked. Original URI =' . $_SERVER['REQUEST_URI']);
- goaway($a->get_baseurl() . $_SERVER['REQUEST_URI']);
+ goaway(App::get_baseurl() . $_SERVER['REQUEST_URI']);
}
logger('index.php: page not found: ' . $_SERVER['REQUEST_URI'] . ' ADDRESS: ' . $_SERVER['REMOTE_ADDR'] . ' QUERY: ' . $_SERVER['QUERY_STRING'], LOGGER_DEBUG);
@@ -285,39 +317,34 @@ if (file_exists($theme_info_file)){
/* initialise content region */
-if(! x($a->page,'content'))
+if (! x($a->page,'content')) {
$a->page['content'] = '';
+}
-if(!$install && !$maintenance)
+if (!$install && !$maintenance) {
call_hooks('page_content_top',$a->page['content']);
+}
/**
* Call module functions
*/
-if($a->module_loaded) {
+if ($a->module_loaded) {
$a->page['page_title'] = $a->module;
$placeholder = '';
- if(function_exists($a->module . '_init')) {
+ if (function_exists($a->module . '_init')) {
call_hooks($a->module . '_mod_init', $placeholder);
$func = $a->module . '_init';
$func($a);
}
- if(function_exists(str_replace('-','_',current_theme()) . '_init')) {
+ if (function_exists(str_replace('-','_',current_theme()) . '_init')) {
$func = str_replace('-','_',current_theme()) . '_init';
$func($a);
}
-// elseif (x($a->theme_info,"extends") && file_exists("view/theme/".$a->theme_info["extends"]."/theme.php")) {
-// require_once("view/theme/".$a->theme_info["extends"]."/theme.php");
-// if(function_exists(str_replace('-','_',$a->theme_info["extends"]) . '_init')) {
-// $func = str_replace('-','_',$a->theme_info["extends"]) . '_init';
-// $func($a);
-// }
-// }
-
- if(($_SERVER['REQUEST_METHOD'] === 'POST') && (! $a->error)
+
+ if (($_SERVER['REQUEST_METHOD'] === 'POST') && (! $a->error)
&& (function_exists($a->module . '_post'))
&& (! x($_POST,'auth-params'))) {
call_hooks($a->module . '_mod_post', $_POST);
@@ -325,13 +352,13 @@ if($a->module_loaded) {
$func($a);
}
- if((! $a->error) && (function_exists($a->module . '_afterpost'))) {
+ if ((! $a->error) && (function_exists($a->module . '_afterpost'))) {
call_hooks($a->module . '_mod_afterpost',$placeholder);
$func = $a->module . '_afterpost';
$func($a);
}
- if((! $a->error) && (function_exists($a->module . '_content'))) {
+ if ((! $a->error) && (function_exists($a->module . '_content'))) {
$arr = array('content' => $a->page['content']);
call_hooks($a->module . '_mod_content', $arr);
$a->page['content'] = $arr['content'];
@@ -341,7 +368,7 @@ if($a->module_loaded) {
$a->page['content'] .= $arr['content'];
}
- if(function_exists(str_replace('-','_',current_theme()) . '_content_loaded')) {
+ if (function_exists(str_replace('-','_',current_theme()) . '_content_loaded')) {
$func = str_replace('-','_',current_theme()) . '_content_loaded';
$func($a);
}
@@ -349,107 +376,76 @@ if($a->module_loaded) {
/*
* Create the page head after setting the language
- * and getting any auth credentials
+ * and getting any auth credentials.
*
* Moved init_pagehead() and init_page_end() to after
* all the module functions have executed so that all
- * theme choices made by the modules can take effect
+ * theme choices made by the modules can take effect.
*/
$a->init_pagehead();
-/**
+/*
* Build the page ending -- this is stuff that goes right before
* the closing