Random code generation added. This can be used for so-called cash-buster codes in...
[mailer.git] / inc / mysql-connect.php
index d75d6dacc86234e82eeb9cb376a3c5c14f93ad67..cdde847e5d1f4f67b4fceb07ef058115d10f2535 100644 (file)
@@ -32,8 +32,7 @@
  ************************************************************************/
 
 // Some security stuff...
-if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
-{
+if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
        require($INC);
 }
@@ -44,83 +43,83 @@ define('DEBUG_SQL', false);
 // Load library
 require_once(PATH."inc/db/lib.php");
 
+// Load general functions
+require_once(PATH."inc/functions.php");  // Non-database functions
+require_once(PATH."inc/extensions.php");
+require_once(PATH."inc/language.php");
+
+// Load "databases" aka static arrays
+require_once(PATH."inc/databases.php");     // Several hard-coded databases (arrays, constants)
+
 // Check if the user setups his MySQL stuff...
-if ((empty($MySQL['login'])) && (!mxchange_installing) && (!isset($_GET['installing'])) && (mxchange_installed))
-{
+if ((empty($MySQL['login'])) && (!isBooleanConstantAndTrue('mxchange_installing')) && (!isset($_GET['installing'])) && (isBooleanConstantAndTrue('mxchange_installed'))) {
        // No login entered and outside installation mode
        echo "<STRONG>".LANG_WARNING.":</STRONG> ";
-       if (mxchange_installed)
-       {
+       if (isBooleanConstantAndTrue('mxchange_installed')) {
                // You have changed my configuration file!
                die(DIE_CONFIG_CHANGED_YOU);
-       }
-        else
-       {
+       } else {
                // Please run the installation script (maybe again)
                die(DIE_RUN_INSTALL_MYSQL);
        }
-}
- elseif ((!mxchange_installing) && (!isset($_GET['installing'])) && (empty($MySQL['password'])) && (warn_no_pass))
-{
+} elseif ((!isBooleanConstantAndTrue('mxchange_installing')) && (!isset($_GET['installing'])) && (empty($MySQL['password'])) && (isBooleanConstantAndTrue('warn_no_pass'))) {
        // No database password entered!!!
        echo "<STRONG>".LANG_WARNING.":</STRONG> ".WARN_NULL_PASSWORD;
 }
 
+// Init configuration arrays
+$_CONFIG = array(
+       'code_length' => 0
+);
+
 // Check if this file is writeable or read-only and warn the user
-if ((!mxchange_installing) && (mxchange_installed))
-{
+if ((!isBooleanConstantAndTrue('mxchange_installing')) && (isBooleanConstantAndTrue('mxchange_installed'))) {
        // Check for write-permission for config.php and inc directory
        if (empty($GLOBALS['module'])) $GLOBALS['module'] = "index";
-       if (($GLOBALS['module'] != "admin") && (admin_registered))
-       {
+       if (($GLOBALS['module'] != "admin") && (isBooleanConstantAndTrue('admin_registered')) && (!isset($_SERVER['WINDIR']))) {
                if (is_INCWritable("config"))     ADD_FATAL(FATAL_CONFIG_WRITABLE);
                if (is_INCWritable("dummy"))      ADD_FATAL(FATAL_INC_WRITABLE);
        }
-
-       // Init configuration arrays
-       $CONFIG = array(
-               'code_length' => 0
-       );
        $EXT_CSS_FILES = array();
 
-       // Load general stuff, like...
-       require_once(PATH."inc/extensions.php"); // Extension management
-       require_once(PATH."inc/functions.php");  // Non-database functions
-       require_once(PATH."inc/databases.php");     // Several hard-coded databases (arrays, constants)
-
        if ((!empty($MySQL['host'])) && (!empty($MySQL['login'])) && (!empty($MySQL['password'])) && (!empty($MySQL['dbase']))) {
                // Connect to DB
+               global $link;
                $link = SQL_CONNECT($MySQL['host'], $MySQL['login'], $MySQL['password'], __FILE__, __LINE__);
 
                // Is the link valid?
                if (is_resource($link)) {
                        // Choose the database
+                       global $db;
                        $db = SQL_SELECT_DB($MySQL['dbase'], $link, __FILE__, __LINE__);
 
                        // Is it a valid resource?
                        if ($db === true) {
+                               // Load more include files
+                               require_once(PATH."inc/mysql-manager.php"); // Functions which interact with the database
+
                                // Load configuration stuff
-                               $result = SQL_QUERY("SELECT pass_len, points_register, points_ref, least_cats, check_double_email, check_double_pass, admin_notify, url_tlock, test_text, max_tlength, test_subj, autosend_active, max_send, url_blacklist, auto_purge, auto_purge_active, last_update, unconfirmed, profile_lock, online_timeout, mad_timestamp, mad_count, profile_update, send_prof_update, resend_profile_update, code_length, patch_level, patch_ctime, guest_stats, ref_payout, activate_xchange, order_multi_page, display_refid, ip_timeout, allow_direct_pay, config FROM "._MYSQL_PREFIX."_config WHERE config='0' LIMIT 1", __FILE__, __LINE__);
+                               $result = SQL_QUERY("SELECT pass_len, points_register, points_ref, least_cats, check_double_email, check_double_pass, admin_notify, url_tlock, test_text, max_tlength, test_subj, autosend_active, max_send, url_blacklist, auto_purge, auto_purge_active, last_update, unconfirmed, profile_lock, online_timeout, mad_timestamp, mad_count, profile_update, send_prof_update, resend_profile_update, code_length, patch_level, patch_ctime, guest_stats, ref_payout, activate_xchange, order_multi_page, display_refid, ip_timeout, allow_direct_pay, config
+FROM "._MYSQL_PREFIX."_config
+WHERE config=0
+LIMIT 1", __FILE__, __LINE__);
 
                                if (SQL_NUMROWS($result) == 1) {
                                        // Load data when previous SQL query did not fail
-                                       if (!$result) {
+                                       if (!is_resource($result)) {
                                                // Something went wrong
                                                ADD_FATAL(FATAL_CANNOT_LOAD_CONFIG);
                                                return;
                                        }
 
                                        // Load the configuration
-                                       $CONFIG = array_merge($CONFIG, SQL_FETCHARRAY($result));
+                                       $_CONFIG = array_merge($_CONFIG, SQL_FETCHARRAY($result));
 
                                        // Initialize include-file-pool
                                        $INC_POOL = array();
 
-                                       // Load more include files
-                                       require_once(PATH."inc/mysql-manager.php"); // Functions which interact with the database
-
                                        // Run daily reset
-                                       if ((date("d", $CONFIG['last_update']) != date("d", time()) || (DEBUG_MODE == true)) && (!mxchange_installing) && (mxchange_installed) && (admin_registered) && (!isset($_GET['register'])) && ($CSS != 1)) {
+                                       if ((date("d", $_CONFIG['last_update']) != date("d", time()) || ((isBooleanConstantAndTrue('DEBUG_MODE')))) && (!isBooleanConstantAndTrue('mxchange_installing')) && (isBooleanConstantAndTrue('mxchange_installed')) && (isBooleanConstantAndTrue('admin_registered')) && (!isset($_GET['register'])) && ($CSS != 1)) {
                                                // Do daily things in external PHP file but only when script is completely setup
                                                $INC_POOL[] = PATH."inc/reset/reset_daily.php";
 
@@ -132,7 +131,7 @@ if ((!mxchange_installing) && (mxchange_installed))
                                        require_once(PATH."inc/load_extensions.php");
 
                                        // Loading patching system is required here...
-                                       require_once(PATH."inc/patch-system.php");      // Initialize patch system
+                                       require_once(PATH."inc/patch-system.php"); // Initialize patch system
 
                                        // Functions which are related to themes
                                        require_once(PATH."inc/theme-manager.php");
@@ -160,11 +159,8 @@ if ((!mxchange_installing) && (mxchange_installed))
                                        // Secure and validate user ID from cookie
                                        UPDATE_LOGIN_DATA();
 
-                                       // Get session ID
-                                       if (empty($_COOKIE['PHPSESSID'])) $_COOKIE['PHPSESSID'] = session_id();
-
                                        // Update online list
-                                       UPDATE_ONLINE_LIST($_COOKIE['PHPSESSID'], $GLOBALS['module'], $GLOBALS['action'], $GLOBALS['what']);
+                                       UPDATE_ONLINE_LIST(get_session('PHPSESSID'), $GLOBALS['module'], $GLOBALS['action'], $GLOBALS['what']);
 
                                        // Load theme name
                                        $CurrTheme = GET_CURR_THEME();
@@ -178,7 +174,7 @@ if ((!mxchange_installing) && (mxchange_installed))
                                                } elseif (($GLOBALS['module'] == "index") || ($GLOBALS['module'] == "login")) {
                                                        // Set 'what' value to 'welcome' in guest and member menu
                                                        $GLOBALS['what'] = "welcome";
-                                                       if (!empty($CONFIG['index_home'])) $GLOBALS['what'] = $CONFIG['index_home'];
+                                                       if (!empty($_CONFIG['index_home'])) $GLOBALS['what'] = $_CONFIG['index_home'];
                                                } else {
                                                        // Anything else like begging link
                                                        $GLOBALS['what'] = "";
@@ -193,16 +189,29 @@ if ((!mxchange_installing) && (mxchange_installed))
                                        $dummy = CHECK_MODULE($GLOBALS['module']);
                                        if ($dummy == "done") COUNT_MODULE($GLOBALS['module']);
                                        unset($dummy);
-                                       if ($CONFIG['activate_xchange'] > 0) activateExchange();
+
+                                       // Shall we activate the exchange?
+                                       if ($_CONFIG['activate_xchange'] > 0) activateExchange();
                                } else {
                                        // If you will read following error message you probably need to contact me (webmaster@mxchange.org)
                                        // and download the sql-upgrades extension from my server. Please ask me which SQL file(s) you need to
                                        // import *BEFORE* you import them!
                                        ADD_FATAL(FATAL_CANNOT_LOAD_CONFIG);
+
+                                       // Reset link and db here, close database first
+                                       SQL_CLOSE($link, __FILE__, __LINE__);
+                                       $link = false; $db = false;
                                }
 
                                // Free memory
                                SQL_FREERESULT($result);
+
+                               // Generate random number
+                               if (isset($GLOBALS['userid'])) {
+                                       define('RAND_NUMBER', GEN_RANDOM_CODE(10, mt_rand(10000,32766), $GLOBALS['userid'], ""));
+                               } else {
+                                       define('RAND_NUMBER', GEN_RANDOM_CODE(10, mt_rand(10000,32766), 0, ""));
+                               }
                        } else {
                                // Wrong database?
                                ADD_FATAL(WRONG_DB_SELECTED);
@@ -222,7 +231,7 @@ if ((!mxchange_installing) && (mxchange_installed))
        ///////////////////////////////////////////////////
 
        // Set CONFIG array
-       $CONFIG = array(
+       $_CONFIG = array(
                'code_length' => 0
        );
 
@@ -231,7 +240,6 @@ if ((!mxchange_installing) && (mxchange_installed))
 
        // Include required files
        require_once(PATH."inc/databases.php");
-       require_once(PATH."inc/extensions.php");
        require_once(PATH."inc/theme-manager.php");
        require_once(PATH."inc/load_extensions.php");
        require_once(PATH."inc/session.php");
@@ -240,11 +248,11 @@ if ((!mxchange_installing) && (mxchange_installed))
        $installPhp = basename($_SERVER['PHP_SELF']);
        if (($installPhp != "install.php") && ($CSS != "1") && ($CSS != -1)) {
                // Redirect to the installation system
-               LOAD_URL(URL."/install.php");
+               LOAD_URL("install.php");
        }
 
        // Double-check installation mode
-       if ((!mxchange_installed) || (!admin_registered)) {
+       if ((!isBooleanConstantAndTrue('mxchange_installed')) || (!isBooleanConstantAndTrue('admin_registered'))) {
                // Check for file permissions
                if (!is_INCWritable("config")) {
                        ADD_FATAL(CONFIG_IS_WRITE_PROTECTED);
@@ -260,7 +268,7 @@ if ((!mxchange_installing) && (mxchange_installed))
 
 // Any fatal messages?
 if (!is_array($FATAL)) $FATAL = array();
-if (((sizeof($FATAL) > 0) || (!empty($FATAL[0]))) && (mxchange_installed) && (!mxchange_installing) && ($CSS != "1"))
+if (((sizeof($FATAL) > 0) || (!empty($FATAL[0]))) && (isBooleanConstantAndTrue('mxchange_installed')) && (!isBooleanConstantAndTrue('mxchange_installing')) && ($CSS != "1"))
 {
        // One or more fatal error(s) occur during connect...
        include (PATH."inc/header.php");