X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=index.php;h=a8098942c2353e1a8963929fde47b8c259070634;hb=ec49d004e32d873dfb67e93e733c27602255d8ee;hp=ad65a701ac0b8547b2b79b02248818a71695df1b;hpb=a5952e5425ee623253b2c91daa873ff6cc63bd39;p=friendica.git diff --git a/index.php b/index.php index ad65a701ac..a8098942c2 100644 --- a/index.php +++ b/index.php @@ -9,12 +9,13 @@ */ use Friendica\App; -use Friendica\BaseObject; use Friendica\Content\Nav; use Friendica\Core\Addon; +use Friendica\Core\Config; +use Friendica\Core\L10n; +use Friendica\Core\Session; use Friendica\Core\System; use Friendica\Core\Theme; -use Friendica\Core\Config; use Friendica\Core\Worker; use Friendica\Database\DBM; use Friendica\Model\Profile; @@ -22,70 +23,50 @@ use Friendica\Module\Login; require_once 'boot.php'; -if (empty($a)) { - $a = new App(__DIR__); -} -BaseObject::setApp($a); +$a = new App(__DIR__); // We assume that the index.php is called by a frontend process // The value is set to "true" by default in boot.php $a->backend = false; -/** - * Load the configuration file which contains our DB credentials. - * Ignore errors. If the file doesn't exist or is empty, we are running in - * installation mode. - */ - -$install = ((file_exists('.htconfig.php') && filesize('.htconfig.php')) ? false : true); - -// Only load config if found, don't surpress errors -if (!$install) { - include ".htconfig.php"; -} - /** * Try to open the database; */ require_once "include/dba.php"; -if (!$install) { - dba::connect($db_host, $db_user, $db_pass, $db_data, $install); - unset($db_host, $db_user, $db_pass, $db_data); - - /** - * Load configs from db. Overwrite configs from .htconfig.php - */ +// Missing DB connection: ERROR +if ($a->mode & App::MODE_LOCALCONFIGPRESENT && !($a->mode & App::MODE_DBAVAILABLE)) { + System::httpExit(500, ['title' => 'Error 500 - Internal Server Error', 'description' => 'Apologies but the website is unavailable at the moment.']); +} - Config::load(); +// Max Load Average reached: ERROR +if ($a->isMaxProcessesReached() || $a->isMaxLoadReached()) { + header('Retry-After: 120'); + header('Refresh: 120; url=' . System::baseUrl() . "/" . $a->query_string); - if ($a->max_processes_reached() || $a->maxload_reached()) { - header($_SERVER["SERVER_PROTOCOL"] . ' 503 Service Temporarily Unavailable'); - header('Retry-After: 120'); - header('Refresh: 120; url=' . System::baseUrl() . "/" . $a->query_string); - die("System is currently unavailable. Please try again later"); - } + System::httpExit(503, ['title' => 'Error 503 - Service Temporarily Unavailable', 'description' => 'System is currently overloaded. Please try again later.']); +} +if ($a->isInstallMode()) { if (Config::get('system', 'force_ssl') && ($a->get_scheme() == "http") && (intval(Config::get('system', 'ssl_policy')) == SSL_POLICY_FULL) && (substr(System::baseUrl(), 0, 8) == "https://") - ) { + && ($_SERVER['REQUEST_METHOD'] == 'GET')) { header("HTTP/1.1 302 Moved Temporarily"); header("Location: " . System::baseUrl() . "/" . $a->query_string); exit(); } - require_once 'include/session.php'; + Config::init(); + Session::init(); Addon::loadHooks(); Addon::callHooks('init_1'); - - $maintenance = Config::get('system', 'maintenance'); } -$lang = get_browser_language(); +$lang = L10n::getBrowserLanguage(); -load_translation_table($lang); +L10n::loadTranslationTable($lang); /** * Important stuff we always need to do. @@ -121,28 +102,38 @@ if (x($_SESSION, 'authenticated') && !x($_SESSION, 'language')) { if ((x($_SESSION, 'language')) && ($_SESSION['language'] !== $lang)) { $lang = $_SESSION['language']; - load_translation_table($lang); + L10n::loadTranslationTable($lang); } -if ((x($_GET, 'zrl')) && (!$install && !$maintenance)) { - // Only continue when the given profile link seems valid - // Valid profile links contain a path with "/profile/" and no query parameters - if ((parse_url($_GET['zrl'], PHP_URL_QUERY) == "") - && strstr(parse_url($_GET['zrl'], PHP_URL_PATH), "/profile/") - ) { - $_SESSION['my_url'] = $_GET['zrl']; - $a->query_string = preg_replace('/[\?&]zrl=(.*?)([\?&]|$)/is', '', $a->query_string); - Profile::zrlInit($a); - } else { - // Someone came with an invalid parameter, maybe as a DDoS attempt - // We simply stop processing here - logger("Invalid ZRL parameter ".$_GET['zrl'], LOGGER_DEBUG); - header('HTTP/1.1 403 Forbidden'); - echo "

403 Forbidden

"; - killme(); +if ((x($_GET,'zrl')) && $a->mode == App::MODE_NORMAL) { + $a->query_string = Profile::stripZrls($a->query_string); + if (!local_user()) { + // Only continue when the given profile link seems valid + // Valid profile links contain a path with "/profile/" and no query parameters + if ((parse_url($_GET['zrl'], PHP_URL_QUERY) == "") && + strstr(parse_url($_GET['zrl'], PHP_URL_PATH), "/profile/")) { + if (defaults($_SESSION, "visitor_home", "") != $_GET["zrl"]) { + $_SESSION['my_url'] = $_GET['zrl']; + $_SESSION['authenticated'] = 0; + } + Profile::zrlInit($a); + } else { + // Someone came with an invalid parameter, maybe as a DDoS attempt + // We simply stop processing here + logger("Invalid ZRL parameter " . $_GET['zrl'], LOGGER_DEBUG); + header('HTTP/1.1 403 Forbidden'); + echo "

403 Forbidden

"; + killme(); + } } } +if ((x($_GET,'owt')) && $a->mode == App::MODE_NORMAL) { + $token = $_GET['owt']; + $a->query_string = Profile::stripQueryParam($a->query_string, 'owt'); + Profile::openWebAuthInit($token); +} + /** * For Mozilla auth manager - still needs sorting, and this might conflict with LRDD header. * Apache/PHP lumps the Link: headers into one - and other services might not be able to parse it @@ -164,19 +155,10 @@ if (! x($_SESSION, 'authenticated')) { $a->page['htmlhead'] = ''; $a->page['end'] = ''; +$_SESSION['sysmsg'] = defaults($_SESSION, 'sysmsg' , []); +$_SESSION['sysmsg_info'] = defaults($_SESSION, 'sysmsg_info' , []); +$_SESSION['last_updated'] = defaults($_SESSION, 'last_updated', []); -if (! x($_SESSION, 'sysmsg')) { - $_SESSION['sysmsg'] = []; -} - -if (! x($_SESSION, 'sysmsg_info')) { - $_SESSION['sysmsg_info'] = []; -} - -// Array for informations about last received items -if (! x($_SESSION, 'last_updated')) { - $_SESSION['last_updated'] = []; -} /* * check_config() is responsible for running update scripts. These automatically * update the DB schema whenever we push a new one out. It also checks to see if @@ -185,9 +167,9 @@ if (! x($_SESSION, 'last_updated')) { // in install mode, any url loads install module // but we need "view" module for stylesheet -if ($install && $a->module!="view") { +if ($a->isInstallMode() && $a->module!="view") { $a->module = 'install'; -} elseif ($maintenance && $a->module!="view") { +} elseif (!($a->mode & App::MODE_MAINTENANCEDISABLED) && $a->module != "view") { $a->module = 'maintenance'; } else { check_url($a); @@ -232,8 +214,36 @@ if (strlen($a->module)) { */ // Compatibility with the Android Diaspora client - if ($a->module == "stream") { - $a->module = "network"; + if ($a->module == 'stream') { + goaway('network?f=&order=post'); + } + + if ($a->module == 'conversations') { + goaway('message'); + } + + if ($a->module == 'commented') { + goaway('network?f=&order=comment'); + } + + if ($a->module == 'liked') { + goaway('network?f=&order=comment'); + } + + if ($a->module == 'activity') { + goaway('network/?f=&conv=1'); + } + + if (($a->module == 'status_messages') && ($a->cmd == 'status_messages/new')) { + goaway('bookmarklet'); + } + + if (($a->module == 'user') && ($a->cmd == 'user/edit')) { + goaway('settings'); + } + + if (($a->module == 'tag_followings') && ($a->cmd == 'tag_followings/manage')) { + goaway('search'); } // Compatibility with the Firefox App @@ -246,7 +256,7 @@ if (strlen($a->module)) { if (is_array($a->addons) && in_array($a->module, $a->addons) && file_exists("addon/{$a->module}/{$a->module}.php")) { //Check if module is an app and if public access to apps is allowed or not if ((!local_user()) && Addon::isApp($a->module) && $privateapps === "1") { - info(t("You must be logged in to use addons. ")); + info(L10n::t("You must be logged in to use addons. ")); } else { include_once "addon/{$a->module}/{$a->module}.php"; if (function_exists($a->module . '_module')) { @@ -293,12 +303,12 @@ if (strlen($a->module)) { } logger('index.php: page not found: ' . $_SERVER['REQUEST_URI'] . ' ADDRESS: ' . $_SERVER['REMOTE_ADDR'] . ' QUERY: ' . $_SERVER['QUERY_STRING'], LOGGER_DEBUG); - header($_SERVER["SERVER_PROTOCOL"] . ' 404 ' . t('Not Found')); + header($_SERVER["SERVER_PROTOCOL"] . ' 404 ' . L10n::t('Not Found')); $tpl = get_markup_template("404.tpl"); $a->page['content'] = replace_macros( $tpl, [ - '$message' => t('Page not found.')] + '$message' => L10n::t('Page not found.')] ); } } @@ -306,7 +316,7 @@ if (strlen($a->module)) { /** * Load current theme info */ -$theme_info_file = "view/theme/".current_theme()."/theme.php"; +$theme_info_file = 'view/theme/' . $a->getCurrentTheme() . '/theme.php'; if (file_exists($theme_info_file)) { require_once $theme_info_file; } @@ -318,7 +328,7 @@ if (! x($a->page, 'content')) { $a->page['content'] = ''; } -if (!$install && !$maintenance) { +if ($a->mode == App::MODE_NORMAL) { Addon::callHooks('page_content_top', $a->page['content']); } @@ -339,8 +349,8 @@ if ($a->module_loaded) { $func($a); } - if (function_exists(str_replace('-', '_', current_theme()) . '_init')) { - $func = str_replace('-', '_', current_theme()) . '_init'; + if (function_exists(str_replace('-', '_', $a->getCurrentTheme()) . '_init')) { + $func = str_replace('-', '_', $a->getCurrentTheme()) . '_init'; $func($a); } @@ -378,8 +388,8 @@ if ($a->module_loaded) { $a->page['content'] .= $arr['content']; } - if (function_exists(str_replace('-', '_', current_theme()) . '_content_loaded')) { - $func = str_replace('-', '_', current_theme()) . '_content_loaded'; + if (function_exists(str_replace('-', '_', $a->getCurrentTheme()) . '_content_loaded')) { + $func = str_replace('-', '_', $a->getCurrentTheme()) . '_content_loaded'; $func($a); } } @@ -416,8 +426,8 @@ if (isset($homebase)) { * now that we've been through the module content, see if the page reported * a permission problem and if so, a 403 response would seem to be in order. */ -if (stristr(implode("", $_SESSION['sysmsg']), t('Permission denied'))) { - header($_SERVER["SERVER_PROTOCOL"] . ' 403 ' . t('Permission denied.')); +if (stristr(implode("", $_SESSION['sysmsg']), L10n::t('Permission denied'))) { + header($_SERVER["SERVER_PROTOCOL"] . ' 403 ' . L10n::t('Permission denied.')); } /* @@ -445,7 +455,7 @@ if ($a->is_mobile || $a->is_tablet) { get_markup_template("toggle_mobile_footer.tpl"), [ '$toggle_link' => $link, - '$toggle_text' => t('toggle mobile')] + '$toggle_text' => L10n::t('toggle mobile')] ); } @@ -454,7 +464,7 @@ if ($a->is_mobile || $a->is_tablet) { */ if (!$a->theme['stylesheet']) { - $stylesheet = current_theme_url(); + $stylesheet = $a->getCurrentThemeStylesheetPath(); } else { $stylesheet = $a->theme['stylesheet']; } @@ -473,7 +483,7 @@ if (isset($_GET["mode"]) && (($_GET["mode"] == "raw") || ($_GET["mode"] == "mini /// @TODO one day, kill those error-surpressing @ stuff, or PHP should ban it @$doc->loadHTML($content); - $xpath = new DomXPath($doc); + $xpath = new DOMXPath($doc); $list = $xpath->query("//*[contains(@id,'tread-wrapper-')]"); /* */