X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=index.php;h=a8098942c2353e1a8963929fde47b8c259070634;hb=ec49d004e32d873dfb67e93e733c27602255d8ee;hp=aeda999825bb3569b34186c08dc59fac678e43d4;hpb=b4f5311e7ff02fbfce5f9fd737d41f605499686e;p=friendica.git diff --git a/index.php b/index.php index aeda999825..a8098942c2 100644 --- a/index.php +++ b/index.php @@ -9,7 +9,6 @@ */ use Friendica\App; -use Friendica\BaseObject; use Friendica\Content\Nav; use Friendica\Core\Addon; use Friendica\Core\Config; @@ -25,44 +24,31 @@ use Friendica\Module\Login; require_once 'boot.php'; $a = new App(__DIR__); -BaseObject::setApp($a); // We assume that the index.php is called by a frontend process // The value is set to "true" by default in boot.php $a->backend = false; -// Only load config if found, don't suppress errors -if (!$a->mode == App::MODE_INSTALL) { - include ".htconfig.php"; -} - /** * Try to open the database; */ require_once "include/dba.php"; -if (!$a->mode == App::MODE_INSTALL) { - $result = dba::connect($db_host, $db_user, $db_pass, $db_data); - unset($db_host, $db_user, $db_pass, $db_data); - - if (!$result) { - System::unavailable(); - } - - /** - * Load configs from db. Overwrite configs from .htconfig.php - */ +// Missing DB connection: ERROR +if ($a->mode & App::MODE_LOCALCONFIGPRESENT && !($a->mode & App::MODE_DBAVAILABLE)) { + System::httpExit(500, ['title' => 'Error 500 - Internal Server Error', 'description' => 'Apologies but the website is unavailable at the moment.']); +} - Config::load(); +// Max Load Average reached: ERROR +if ($a->isMaxProcessesReached() || $a->isMaxLoadReached()) { + header('Retry-After: 120'); + header('Refresh: 120; url=' . System::baseUrl() . "/" . $a->query_string); - if ($a->max_processes_reached() || $a->maxload_reached()) { - header($_SERVER["SERVER_PROTOCOL"] . ' 503 Service Temporarily Unavailable'); - header('Retry-After: 120'); - header('Refresh: 120; url=' . System::baseUrl() . "/" . $a->query_string); - die("System is currently unavailable. Please try again later"); - } + System::httpExit(503, ['title' => 'Error 503 - Service Temporarily Unavailable', 'description' => 'System is currently overloaded. Please try again later.']); +} +if ($a->isInstallMode()) { if (Config::get('system', 'force_ssl') && ($a->get_scheme() == "http") && (intval(Config::get('system', 'ssl_policy')) == SSL_POLICY_FULL) && (substr(System::baseUrl(), 0, 8) == "https://") @@ -76,8 +62,6 @@ if (!$a->mode == App::MODE_INSTALL) { Session::init(); Addon::loadHooks(); Addon::callHooks('init_1'); - - $a->checkMaintenanceMode(); } $lang = L10n::getBrowserLanguage(); @@ -121,25 +105,35 @@ if ((x($_SESSION, 'language')) && ($_SESSION['language'] !== $lang)) { L10n::loadTranslationTable($lang); } -if ((x($_GET, 'zrl')) && $a->mode == App::MODE_NORMAL) { - // Only continue when the given profile link seems valid - // Valid profile links contain a path with "/profile/" and no query parameters - if ((parse_url($_GET['zrl'], PHP_URL_QUERY) == "") - && strstr(parse_url($_GET['zrl'], PHP_URL_PATH), "/profile/") - ) { - $_SESSION['my_url'] = $_GET['zrl']; - $a->query_string = preg_replace('/[\?&]zrl=(.*?)([\?&]|$)/is', '', $a->query_string); - Profile::zrlInit($a); - } else { - // Someone came with an invalid parameter, maybe as a DDoS attempt - // We simply stop processing here - logger("Invalid ZRL parameter ".$_GET['zrl'], LOGGER_DEBUG); - header('HTTP/1.1 403 Forbidden'); - echo "

403 Forbidden

"; - killme(); +if ((x($_GET,'zrl')) && $a->mode == App::MODE_NORMAL) { + $a->query_string = Profile::stripZrls($a->query_string); + if (!local_user()) { + // Only continue when the given profile link seems valid + // Valid profile links contain a path with "/profile/" and no query parameters + if ((parse_url($_GET['zrl'], PHP_URL_QUERY) == "") && + strstr(parse_url($_GET['zrl'], PHP_URL_PATH), "/profile/")) { + if (defaults($_SESSION, "visitor_home", "") != $_GET["zrl"]) { + $_SESSION['my_url'] = $_GET['zrl']; + $_SESSION['authenticated'] = 0; + } + Profile::zrlInit($a); + } else { + // Someone came with an invalid parameter, maybe as a DDoS attempt + // We simply stop processing here + logger("Invalid ZRL parameter " . $_GET['zrl'], LOGGER_DEBUG); + header('HTTP/1.1 403 Forbidden'); + echo "

403 Forbidden

"; + killme(); + } } } +if ((x($_GET,'owt')) && $a->mode == App::MODE_NORMAL) { + $token = $_GET['owt']; + $a->query_string = Profile::stripQueryParam($a->query_string, 'owt'); + Profile::openWebAuthInit($token); +} + /** * For Mozilla auth manager - still needs sorting, and this might conflict with LRDD header. * Apache/PHP lumps the Link: headers into one - and other services might not be able to parse it @@ -173,9 +167,9 @@ $_SESSION['last_updated'] = defaults($_SESSION, 'last_updated', []); // in install mode, any url loads install module // but we need "view" module for stylesheet -if ($a->mode == App::MODE_INSTALL && $a->module!="view") { +if ($a->isInstallMode() && $a->module!="view") { $a->module = 'install'; -} elseif ($a->mode == App::MODE_MAINTENANCE && $a->module!="view") { +} elseif (!($a->mode & App::MODE_MAINTENANCEDISABLED) && $a->module != "view") { $a->module = 'maintenance'; } else { check_url($a);