X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=index.php;h=2f23ea791a6e525009f5109652c911742c18096c;hb=1017e244cae7cb1cfce46fe0d4fdc43fb117885e;hp=fe871ba96761c0d7850af8a6a7eee3a41388a3fb;hpb=c847a2f9cc969c9d79141713f646dd371e898168;p=friendica.git diff --git a/index.php b/index.php index fe871ba967..2f23ea791a 100644 --- a/index.php +++ b/index.php @@ -1,41 +1,40 @@ backend = false; /** - * * Load the configuration file which contains our DB credentials. * Ignore errors. If the file doesn't exist or is empty, we are running in * installation mode. - * */ $install = ((file_exists('.htconfig.php') && filesize('.htconfig.php')) ? false : true); @@ -46,17 +45,19 @@ if (!$install) { } /** - * * Try to open the database; - * */ require_once "include/dba.php"; if (!$install) { - dba::connect($db_host, $db_user, $db_pass, $db_data, $install); + $result = dba::connect($db_host, $db_user, $db_pass, $db_data); unset($db_host, $db_user, $db_pass, $db_data); + if (!$result) { + System::unavailable(); + } + /** * Load configs from db. Overwrite configs from .htconfig.php */ @@ -70,34 +71,34 @@ if (!$install) { die("System is currently unavailable. Please try again later"); } - if (get_config('system', 'force_ssl') && ($a->get_scheme() == "http") && - (intval(get_config('system', 'ssl_policy')) == SSL_POLICY_FULL) && - (substr(System::baseUrl(), 0, 8) == "https://")) { + if (Config::get('system', 'force_ssl') && ($a->get_scheme() == "http") + && (intval(Config::get('system', 'ssl_policy')) == SSL_POLICY_FULL) + && (substr(System::baseUrl(), 0, 8) == "https://") + && ($_SERVER['REQUEST_METHOD'] == 'GET')) { header("HTTP/1.1 302 Moved Temporarily"); header("Location: " . System::baseUrl() . "/" . $a->query_string); exit(); } - require_once 'include/session.php'; - load_hooks(); - call_hooks('init_1'); + Config::init(); + Session::init(); + Addon::loadHooks(); + Addon::callHooks('init_1'); - $maintenance = get_config('system', 'maintenance'); + $maintenance = Config::get('system', 'maintenance'); } -$lang = get_browser_language(); +$lang = L10n::getBrowserLanguage(); -load_translation_table($lang); +L10n::loadTranslationTable($lang); /** - * * Important stuff we always need to do. * * The order of these may be important so use caution if you think they're all * intertwingled with no logical order and decide to sort it out. Some of the * dependencies have changed, but at least at one time in the recent past - the * order was critical to everything working properly - * */ // Exclude the backend processes from the session management @@ -106,6 +107,7 @@ if (!$a->is_backend()) { session_start(); $a->save_timestamp($stamp1, "parser"); } else { + $_SESSION = []; Worker::executeIfIdle(); } @@ -113,28 +115,29 @@ if (!$a->is_backend()) { * Language was set earlier, but we can over-ride it in the session. * We have to do it here because the session was just now opened. */ -if (x($_SESSION,'authenticated') && !x($_SESSION,'language')) { - // we didn't loaded user data yet, but we need user language - $r = dba::select('user', array('language'), array('uid' => $_SESSION['uid']), array('limit' => 1)); +if (x($_SESSION, 'authenticated') && !x($_SESSION, 'language')) { + // we haven't loaded user data yet, but we need user language + $user = dba::selectFirst('user', ['language'], ['uid' => $_SESSION['uid']]); $_SESSION['language'] = $lang; - if (dbm::is_result($r)) { - $_SESSION['language'] = $r['language']; + if (DBM::is_result($user)) { + $_SESSION['language'] = $user['language']; } } -if ((x($_SESSION,'language')) && ($_SESSION['language'] !== $lang)) { +if ((x($_SESSION, 'language')) && ($_SESSION['language'] !== $lang)) { $lang = $_SESSION['language']; - load_translation_table($lang); + L10n::loadTranslationTable($lang); } -if ((x($_GET,'zrl')) && (!$install && !$maintenance)) { +if ((x($_GET, 'zrl')) && (!$install && !$maintenance)) { // Only continue when the given profile link seems valid // Valid profile links contain a path with "/profile/" and no query parameters - if ((parse_url($_GET['zrl'], PHP_URL_QUERY) == "") && - strstr(parse_url($_GET['zrl'], PHP_URL_PATH), "/profile/")) { + if ((parse_url($_GET['zrl'], PHP_URL_QUERY) == "") + && strstr(parse_url($_GET['zrl'], PHP_URL_PATH), "/profile/") + ) { $_SESSION['my_url'] = $_GET['zrl']; - $a->query_string = preg_replace('/[\?&]zrl=(.*?)([\?&]|$)/is','',$a->query_string); - zrl_init($a); + $a->query_string = preg_replace('/[\?&]zrl=(.*?)([\?&]|$)/is', '', $a->query_string); + Profile::zrlInit($a); } else { // Someone came with an invalid parameter, maybe as a DDoS attempt // We simply stop processing here @@ -146,23 +149,19 @@ if ((x($_GET,'zrl')) && (!$install && !$maintenance)) { } /** - * * For Mozilla auth manager - still needs sorting, and this might conflict with LRDD header. * Apache/PHP lumps the Link: headers into one - and other services might not be able to parse it * this way. There's a PHP flag to link the headers because by default this will over-write any other * link header. * * What we really need to do is output the raw headers ourselves so we can keep them separate. - * */ // header('Link: <' . System::baseUrl() . '/amcd>; rel="acct-mgmt";'); -if (x($_COOKIE["Friendica"]) || (x($_SESSION,'authenticated')) || (x($_POST,'auth-params')) || ($a->module === 'login')) { - require("include/auth.php"); -} +Login::sessionAuth(); -if (! x($_SESSION,'authenticated')) { +if (! x($_SESSION, 'authenticated')) { header('X-Account-Management-Status: none'); } @@ -170,23 +169,14 @@ if (! x($_SESSION,'authenticated')) { $a->page['htmlhead'] = ''; $a->page['end'] = ''; +$_SESSION['sysmsg'] = defaults($_SESSION, 'sysmsg' , []); +$_SESSION['sysmsg_info'] = defaults($_SESSION, 'sysmsg_info' , []); +$_SESSION['last_updated'] = defaults($_SESSION, 'last_updated', []); -if (! x($_SESSION,'sysmsg')) { - $_SESSION['sysmsg'] = array(); -} - -if (! x($_SESSION,'sysmsg_info')) { - $_SESSION['sysmsg_info'] = array(); -} - -// Array for informations about last received items -if (! x($_SESSION,'last_updated')) { - $_SESSION['last_updated'] = array(); -} /* * check_config() is responsible for running update scripts. These automatically * update the DB schema whenever we push a new one out. It also checks to see if - * any plugins have been added or removed and reacts accordingly. + * any addons have been added or removed and reacts accordingly. */ // in install mode, any url loads install module @@ -198,23 +188,22 @@ if ($install && $a->module!="view") { } else { check_url($a); check_db(false); - check_plugins($a); + check_addons($a); } -nav_set_selected('nothing'); +Nav::setSelected('nothing'); //Don't populate apps_menu if apps are private -$privateapps = get_config('config','private_addons'); +$privateapps = Config::get('config', 'private_addons'); if ((local_user()) || (! $privateapps === "1")) { - $arr = array('app_menu' => $a->apps); + $arr = ['app_menu' => $a->apps]; - call_hooks('app_menu', $arr); + Addon::callHooks('app_menu', $arr); $a->apps = $arr['app_menu']; } /** - * * We have already parsed the server path into $a->argc and $a->argv * * $a->argv[0] is our module name. We will load the file mod/{$a->argv[0]}.php @@ -231,19 +220,44 @@ if ((local_user()) || (! $privateapps === "1")) { * so within the module init and/or post functions and then invoke killme() to terminate * further processing. */ - if (strlen($a->module)) { /** - * * We will always have a module name. - * First see if we have a plugin which is masquerading as a module. - * + * First see if we have an addon which is masquerading as a module. */ // Compatibility with the Android Diaspora client - if ($a->module == "stream") { - $a->module = "network"; + if ($a->module == 'stream') { + goaway('network?f=&order=post'); + } + + if ($a->module == 'conversations') { + goaway('message'); + } + + if ($a->module == 'commented') { + goaway('network?f=&order=comment'); + } + + if ($a->module == 'liked') { + goaway('network?f=&order=comment'); + } + + if ($a->module == 'activity') { + goaway('network/?f=&conv=1'); + } + + if (($a->module == 'status_messages') && ($a->cmd == 'status_messages/new')) { + goaway('bookmarklet'); + } + + if (($a->module == 'user') && ($a->cmd == 'user/edit')) { + goaway('settings'); + } + + if (($a->module == 'tag_followings') && ($a->cmd == 'tag_followings/manage')) { + goaway('search'); } // Compatibility with the Firefox App @@ -251,31 +265,36 @@ if (strlen($a->module)) { $a->module = "login"; } - $privateapps = get_config('config','private_addons'); + $privateapps = Config::get('config', 'private_addons'); - if (is_array($a->plugins) && in_array($a->module,$a->plugins) && file_exists("addon/{$a->module}/{$a->module}.php")) { + if (is_array($a->addons) && in_array($a->module, $a->addons) && file_exists("addon/{$a->module}/{$a->module}.php")) { //Check if module is an app and if public access to apps is allowed or not - if ((!local_user()) && plugin_is_app($a->module) && $privateapps === "1") { - info( t("You must be logged in to use addons. ")); + if ((!local_user()) && Addon::isApp($a->module) && $privateapps === "1") { + info(L10n::t("You must be logged in to use addons. ")); } else { - include_once("addon/{$a->module}/{$a->module}.php"); + include_once "addon/{$a->module}/{$a->module}.php"; if (function_exists($a->module . '_module')) { $a->module_loaded = true; } } } + // Controller class routing + if (! $a->module_loaded && class_exists('Friendica\\Module\\' . ucfirst($a->module))) { + $a->module_class = 'Friendica\\Module\\' . ucfirst($a->module); + $a->module_loaded = true; + } + /** * If not, next look for a 'standard' program module in the 'mod' directory */ - if ((! $a->module_loaded) && (file_exists("mod/{$a->module}.php"))) { - include_once("mod/{$a->module}.php"); + if (! $a->module_loaded && file_exists("mod/{$a->module}.php")) { + include_once "mod/{$a->module}.php"; $a->module_loaded = true; } /** - * * The URL provided does not resolve to a valid module. * * On Dreamhost sites, quite often things go wrong for no apparent reason and they send us to '/internal_error.html'. @@ -284,47 +303,47 @@ if (strlen($a->module)) { * this will often succeed and eventually do the right thing. * * Otherwise we are going to emit a 404 not found. - * */ if (! $a->module_loaded) { - // Stupid browser tried to pre-fetch our Javascript img template. Don't log the event or return anything - just quietly exit. - if ((x($_SERVER,'QUERY_STRING')) && preg_match('/{[0-9]}/',$_SERVER['QUERY_STRING']) !== 0) { + if ((x($_SERVER, 'QUERY_STRING')) && preg_match('/{[0-9]}/', $_SERVER['QUERY_STRING']) !== 0) { killme(); } - if ((x($_SERVER,'QUERY_STRING')) && ($_SERVER['QUERY_STRING'] === 'q=internal_error.html') && isset($dreamhost_error_hack)) { + if ((x($_SERVER, 'QUERY_STRING')) && ($_SERVER['QUERY_STRING'] === 'q=internal_error.html') && isset($dreamhost_error_hack)) { logger('index.php: dreamhost_error_hack invoked. Original URI =' . $_SERVER['REQUEST_URI']); goaway(System::baseUrl() . $_SERVER['REQUEST_URI']); } logger('index.php: page not found: ' . $_SERVER['REQUEST_URI'] . ' ADDRESS: ' . $_SERVER['REMOTE_ADDR'] . ' QUERY: ' . $_SERVER['QUERY_STRING'], LOGGER_DEBUG); - header($_SERVER["SERVER_PROTOCOL"] . ' 404 ' . t('Not Found')); + header($_SERVER["SERVER_PROTOCOL"] . ' 404 ' . L10n::t('Not Found')); $tpl = get_markup_template("404.tpl"); - $a->page['content'] = replace_macros($tpl, array( - '$message' => t('Page not found.' ) - )); + $a->page['content'] = replace_macros( + $tpl, + [ + '$message' => L10n::t('Page not found.')] + ); } } /** - * load current theme info + * Load current theme info */ $theme_info_file = "view/theme/".current_theme()."/theme.php"; -if (file_exists($theme_info_file)){ - require_once($theme_info_file); +if (file_exists($theme_info_file)) { + require_once $theme_info_file; } /* initialise content region */ -if (! x($a->page,'content')) { +if (! x($a->page, 'content')) { $a->page['content'] = ''; } if (!$install && !$maintenance) { - call_hooks('page_content_top',$a->page['content']); + Addon::callHooks('page_content_top', $a->page['content']); } /** @@ -335,43 +354,56 @@ if ($a->module_loaded) { $a->page['page_title'] = $a->module; $placeholder = ''; - if (function_exists($a->module . '_init')) { - call_hooks($a->module . '_mod_init', $placeholder); + if ($a->module_class) { + Addon::callHooks($a->module . '_mod_init', $placeholder); + call_user_func([$a->module_class, 'init']); + } else if (function_exists($a->module . '_init')) { + Addon::callHooks($a->module . '_mod_init', $placeholder); $func = $a->module . '_init'; $func($a); } - if (function_exists(str_replace('-','_',current_theme()) . '_init')) { - $func = str_replace('-','_',current_theme()) . '_init'; + if (function_exists(str_replace('-', '_', current_theme()) . '_init')) { + $func = str_replace('-', '_', current_theme()) . '_init'; $func($a); } - if (($_SERVER['REQUEST_METHOD'] === 'POST') && (! $a->error) - && (function_exists($a->module . '_post')) - && (! x($_POST,'auth-params'))) { - call_hooks($a->module . '_mod_post', $_POST); - $func = $a->module . '_post'; - $func($a); + if (! $a->error && $_SERVER['REQUEST_METHOD'] === 'POST') { + Addon::callHooks($a->module . '_mod_post', $_POST); + if ($a->module_class) { + call_user_func([$a->module_class, 'post']); + } else if (function_exists($a->module . '_post')) { + $func = $a->module . '_post'; + $func($a); + } } - if ((! $a->error) && (function_exists($a->module . '_afterpost'))) { - call_hooks($a->module . '_mod_afterpost',$placeholder); - $func = $a->module . '_afterpost'; - $func($a); + if (! $a->error) { + Addon::callHooks($a->module . '_mod_afterpost', $placeholder); + if ($a->module_class) { + call_user_func([$a->module_class, 'afterpost']); + } else if (function_exists($a->module . '_afterpost')) { + $func = $a->module . '_afterpost'; + $func($a); + } } - if ((! $a->error) && (function_exists($a->module . '_content'))) { - $arr = array('content' => $a->page['content']); - call_hooks($a->module . '_mod_content', $arr); + if (! $a->error) { + $arr = ['content' => $a->page['content']]; + Addon::callHooks($a->module . '_mod_content', $arr); $a->page['content'] = $arr['content']; - $func = $a->module . '_content'; - $arr = array('content' => $func($a)); - call_hooks($a->module . '_mod_aftercontent', $arr); + if ($a->module_class) { + $arr = ['content' => call_user_func([$a->module_class, 'content'])]; + } else if (function_exists($a->module . '_content')) { + $func = $a->module . '_content'; + $arr = ['content' => $func($a)]; + } + Addon::callHooks($a->module . '_mod_aftercontent', $arr); $a->page['content'] .= $arr['content']; } - if (function_exists(str_replace('-','_',current_theme()) . '_content_loaded')) { - $func = str_replace('-','_',current_theme()) . '_content_loaded'; + if (function_exists(str_replace('-', '_', current_theme()) . '_content_loaded')) { + $func = str_replace('-', '_', current_theme()) . '_content_loaded'; $func($a); } } @@ -408,20 +440,20 @@ if (isset($homebase)) { * now that we've been through the module content, see if the page reported * a permission problem and if so, a 403 response would seem to be in order. */ -if (stristr(implode("", $_SESSION['sysmsg']), t('Permission denied'))) { - header($_SERVER["SERVER_PROTOCOL"] . ' 403 ' . t('Permission denied.')); +if (stristr(implode("", $_SESSION['sysmsg']), L10n::t('Permission denied'))) { + header($_SERVER["SERVER_PROTOCOL"] . ' 403 ' . L10n::t('Permission denied.')); } /* * Report anything which needs to be communicated in the notification area (before the main body) */ -call_hooks('page_end', $a->page['content']); +Addon::callHooks('page_end', $a->page['content']); /* * Add the navigation (menu) template */ if ($a->module != 'install' && $a->module != 'maintenance') { - nav($a); + Nav::build($a); } /* @@ -433,10 +465,12 @@ if ($a->is_mobile || $a->is_tablet) { } else { $link = 'toggle_mobile?off=1&address=' . curPageURL(); } - $a->page['footer'] = replace_macros(get_markup_template("toggle_mobile_footer.tpl"), array( - '$toggle_link' => $link, - '$toggle_text' => t('toggle mobile') - )); + $a->page['footer'] = replace_macros( + get_markup_template("toggle_mobile_footer.tpl"), + [ + '$toggle_link' => $link, + '$toggle_text' => L10n::t('toggle mobile')] + ); } /** @@ -449,7 +483,7 @@ if (!$a->theme['stylesheet']) { $stylesheet = $a->theme['stylesheet']; } -$a->page['htmlhead'] = str_replace('{{$stylesheet}}',$stylesheet,$a->page['htmlhead']); +$a->page['htmlhead'] = str_replace('{{$stylesheet}}', $stylesheet, $a->page['htmlhead']); //$a->page['htmlhead'] = replace_macros($a->page['htmlhead'], array('$stylesheet' => $stylesheet)); if (isset($_GET["mode"]) && (($_GET["mode"] == "raw") || ($_GET["mode"] == "minimal"))) { @@ -463,7 +497,7 @@ if (isset($_GET["mode"]) && (($_GET["mode"] == "raw") || ($_GET["mode"] == "mini /// @TODO one day, kill those error-surpressing @ stuff, or PHP should ban it @$doc->loadHTML($content); - $xpath = new DomXPath($doc); + $xpath = new DOMXPath($doc); $list = $xpath->query("//*[contains(@id,'tread-wrapper-')]"); /* */ @@ -476,7 +510,6 @@ if (isset($_GET["mode"]) && (($_GET["mode"] == "raw") || ($_GET["mode"] == "mini } if (isset($_GET["mode"]) && ($_GET["mode"] == "raw")) { - header("Content-type: text/html; charset=utf-8"); echo substr($target->saveHTML(), 6, -8); @@ -509,15 +542,15 @@ header('X-Frame-Options: sameorigin'); * The page templates are located in /view/php/ or in the theme directory. */ if (isset($_GET["mode"])) { - $template = theme_include($_GET["mode"] . '.php'); + $template = Theme::getPathForFile($_GET["mode"] . '.php'); } // If there is no page template use the default page template if (empty($template)) { - $template = theme_include("default.php"); + $template = Theme::getPathForFile("default.php"); } -/// @TODO Looks unsafe (remote-inclusion), is maybe not but theme_include() uses file_exists() but does not escape anything +/// @TODO Looks unsafe (remote-inclusion), is maybe not but Theme::getPathForFile() uses file_exists() but does not escape anything require_once $template; killme();