X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Ffunctions.php;h=38612873b25b6a9be882b1929a991055823ea0c6;hp=d26f28da5f3393a184ac002726f458926e48aa86;hb=9d3b6045b267bd17eb017f458f24122918df132c;hpb=3b7577d3b3e6522d8898ed1799031b6de696accc diff --git a/inc/functions.php b/inc/functions.php index d26f28da5f..8ac91e5569 100644 --- a/inc/functions.php +++ b/inc/functions.php @@ -10,7 +10,12 @@ * -------------------------------------------------------------------- * * Kurzbeschreibung : Viele Nicht-MySQL-Funktionen (auch Dateizugriff) * * -------------------------------------------------------------------- * - * * + * $Revision:: $ * + * $Date:: $ * + * $Tag:: 0.2.1-FINAL $ * + * $Author:: $ * + * Needs to be in all Files and every File needs "svn propset * + * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * * Copyright (c) 2003 - 2008 by Roland Haeder * * For more information visit: http://www.mxchange.org * @@ -30,229 +35,211 @@ * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, * * MA 02110-1301 USA * ************************************************************************/ - // Some security stuff... if (!defined('__SECURITY')) { - $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4)."/security.php"; + $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), '/inc') + 4) . '/security.php'; require($INC); } -// Check if our config file is writeable or not -function IS_INC_WRITEABLE($inc) { - // Generate FQFN - $fqfn = sprintf("%sinc/%s.php", PATH, $inc); - - // Abort by simple test - if ((FILE_READABLE($fqfn)) && (!is_writeable($fqfn))) { - return false; - } // END - if - - // Test if we can append data - $fp = @fopen($fqfn, 'a'); - if ($inc == "dummy") { - // Remove dummy file - @fclose($fp); - return @unlink($fqfn); - } else { - // Close all other files - return @fclose($fp); - } -} - -// Open a table (you may want to add some header stuff here) -function OPEN_TABLE($PERCENT = "", $CLASS = "", $ALIGN="left", $VALIGN="", $td_only=false) { - global $table_cnt; - - // Count tables so we can generate CSS classes for every table... :-) - if (empty($CLASS)) { - // Class is empty so count one up and create a class - $table_cnt++; $CLASS = "class".$table_cnt; - } - $OUT = ""; - OUTPUT_HTML($OUT); -} - -// Close a table (you may want to add some footer stuff here) -function CLOSE_TABLE($ADD="") { - OUTPUT_HTML(" \n"); - if (!empty($ADD)) OUTPUT_HTML($ADD); - OUTPUT_HTML("
"); -} - -// Output HTML code directly or "render" it. You addionally switch the new-line character off -function OUTPUT_HTML($HTML, $NEW_LINE = true) { +// Output HTML code directly or 'render' it. You addionally switch the new-line character off +function OUTPUT_HTML ($HTML, $newLine = true) { // Some global variables - global $OUTPUT, $footer, $CSS; + global $OUTPUT; // Do we have HTML-Code here? if (!empty($HTML)) { // Yes, so we handle it as you have configured - switch (OUTPUT_MODE) + switch (getConfig('OUTPUT_MODE')) { - case "render": - // That's why you don't need any \n at the end of your HTML code... :-) - if (_OB_CACHING == "on") { - // Output into PHP's internal buffer - OUTPUT_RAW($HTML); - - // That's why you don't need any \n at the end of your HTML code... :-) - if ($NEW_LINE) echo "\n"; - } else { - // Render mode for old or lame servers... - $OUTPUT .= $HTML; - + case 'render': // That's why you don't need any \n at the end of your HTML code... :-) - if ($NEW_LINE) $OUTPUT .= "\n"; - } - break; + if (constant('_OB_CACHING') == 'on') { + // Output into PHP's internal buffer + outputRawCode($HTML); + + // That's why you don't need any \n at the end of your HTML code... :-) + if ($newLine) echo "\n"; + } else { + // Render mode for old or lame servers... + $OUTPUT .= $HTML; + + // That's why you don't need any \n at the end of your HTML code... :-) + if ($newLine) $OUTPUT .= "\n"; + } + break; - case "direct": - // If we are switching from render to direct output rendered code - if ((!empty($OUTPUT)) && (_OB_CACHING != "on")) { OUTPUT_RAW($OUTPUT); $OUTPUT = ""; } + case 'direct': + // If we are switching from render to direct output rendered code + if ((!empty($OUTPUT)) && (constant('_OB_CACHING') != 'on')) { outputRawCode($OUTPUT); $OUTPUT = ''; } - // The same as above... ^ - OUTPUT_RAW($HTML); - if ($NEW_LINE) echo "\n"; - break; + // The same as above... ^ + outputRawCode($HTML); + if ($newLine) echo "\n"; + break; - default: - // Huh, something goes wrong or maybe you have edited config.php ??? - DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Invalid renderer %s detected.", OUTPUT_MODE)); - MXCHANGE_DIE("".FATAL_ERROR.": ".LANG_NO_RENDER_DIRECT); - break; + default: + // Huh, something goes wrong or maybe you have edited config.php ??? + app_die(__FUNCTION__, __LINE__, "{--FATAL_ERROR--}: {--LANG_NO_RENDER_DIRECT--}"); + break; } - } elseif ((_OB_CACHING == "on") && ($footer == 1)) { + } elseif ((constant('_OB_CACHING') == 'on') && (isset($GLOBALS['footer_sent'])) && ($GLOBALS['footer_sent'] == 1)) { + // Headers already sent? + if (headers_sent()) { + // Log this error + DEBUG_LOG(__FUNCTION__, __LINE__, "Headers already sent! We need debug backtrace here."); + + // Trigger an user error + debug_report_bug("Headers are already sent!"); + } // END - if + // Output cached HTML code $OUTPUT = ob_get_contents(); - // Clear output buffer for later output - ob_end_clean(); + // Clear output buffer for later output if output is found + if (!empty($OUTPUT)) { + clearOutputBuffer(); + } // END - if // Send HTTP header - header("HTTP/1.1 200"); + sendHeader('HTTP/1.1 200'); // Used later $now = gmdate('D, d M Y H:i:s') . ' GMT'; // General headers for no caching - header("Expired: " . $now); // RFC2616 - Section 14.21 - header("Last-Modified: " . $now); - header("Cache-Control: no-store, no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0"); // HTTP/1.1 - header("Pragma: no-cache"); // HTTP/1.0 - header("Connection: Close"); - - // Extension "rewrite" installed? - if ((EXT_IS_ACTIVE("rewrite")) && (function_exists('REWRITE_LINKS')) && ($CSS != "1") && ($CSS != "-1")) { - $OUTPUT = REWRITE_LINKS($OUTPUT); + sendHeader('Expired: ' . $now); // RFC2616 - Section 14.21 + sendHeader('Last-Modified: ' . $now); + sendHeader('Cache-Control: no-store, no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0'); // HTTP/1.1 + sendHeader('Pragma: no-cache'); // HTTP/1.0 + sendHeader('Connection: Close'); + + // Extension 'rewrite' installed? + if ((EXT_IS_ACTIVE('rewrite')) && (getOutputMode() != '1') && (getOutputMode() != '-1')) { + $OUTPUT = rewriteLinksInCode($OUTPUT); } // END - if // Compile and run finished rendered HTML code while (strpos($OUTPUT, '{!') > 0) { + // Replace _MYSQL_PREFIX + $OUTPUT = str_replace("{!_MYSQL_PREFIX!}", getConfig('_MYSQL_PREFIX'), $OUTPUT); + // Prepare the content and eval() it... - $newContent = ""; - $eval = "\$newContent = \"".COMPILE_CODE(addslashes($OUTPUT))."\";"; - @eval($eval); + $newContent = ''; + $eval = "\$newContent = \"".COMPILE_CODE(smartAddSlashes($OUTPUT))."\";"; + eval($eval); // Was that eval okay? if (empty($newContent)) { // Something went wrong! - die("Evaluation error:
".htmlentities($eval)."
"); + app_die(__FUNCTION__, __LINE__, 'Evaluation error:
' . htmlentities($eval) . '
'); } // END - if $OUTPUT = $newContent; } // END - while // Output code here, DO NOT REMOVE! ;-) - OUTPUT_RAW($OUTPUT); - } elseif ((OUTPUT_MODE == "render") && (!empty($OUTPUT))) { + outputRawCode($OUTPUT); + } elseif ((getConfig('OUTPUT_MODE') == 'render') && (!empty($OUTPUT))) { // Rewrite links when rewrite extension is active - if ((EXT_IS_ACTIVE("rewrite")) && (function_exists('REWRITE_LINKS')) && ($CSS != "1") && ($CSS != "-1")) { - $OUTPUT = REWRITE_LINKS($OUTPUT); + if ((EXT_IS_ACTIVE('rewrite')) && (getOutputMode() != '1') && (getOutputMode() != '-1')) { + $OUTPUT = rewriteLinksInCode($OUTPUT); } // END - if // Compile and run finished rendered HTML code while (strpos($OUTPUT, '{!') > 0) { - $eval = "\$OUTPUT = \"".COMPILE_CODE(addslashes($OUTPUT))."\";"; + $eval = "\$OUTPUT = \"".COMPILE_CODE(smartAddSlashes($OUTPUT))."\";"; eval($eval); } // END - while // Output code here, DO NOT REMOVE! ;-) - OUTPUT_RAW($OUTPUT); + outputRawCode($OUTPUT); } } // Output the raw HTML code -function OUTPUT_RAW ($HTML) { +function outputRawCode ($HTML) { // Output stripped HTML code to avoid broken JavaScript code, etc. echo stripslashes(stripslashes($HTML)); - // Flush the output if only _OB_CACHING is not "on" - if (_OB_CACHING != "on") { + // Flush the output if only constant('_OB_CACHING') is not 'on' + if (constant('_OB_CACHING') != 'on') { // Flush it flush(); } // END - if } -// Add a fatal error message to the queue array -function ADD_FATAL ($message, $extra="") { - global $FATAL; +// Init fatal message array +function initFatalMessages () { + $GLOBALS['fatal_messages'] = array(); +} - if (empty($extra)) { - // Regular text message to add to $FATAL - $FATAL[] = $message; - } else { +// Getter for whole fatal error messages +function getFatalArray () { + return $GLOBALS['fatal_messages']; +} + +// Add a fatal error message to the queue array +function addFatalMessage ($F, $L, $message, $extra='') { + if (is_array($extra)) { + // Multiple extras for a message with masks + $message = call_user_func_array('sprintf', $extra); + } elseif (!empty($extra)) { // $message is text with a mask plus extras to insert into the text $message = sprintf($message, $extra); - $FATAL[] = $message; } + // Add message to $GLOBALS['fatal_messages'] + $GLOBALS['fatal_messages'][] = $message; + // Log fatal messages away - DEBUG_LOG(__FUNCTION__, __LINE__, " message={$message}"); + DEBUG_LOG($F, $L, " message={$message}"); +} + +// Getter for total fatal message count +function getTotalFatalErrors () { + // Init coun + $count = 0; + + // Do we have at least the first entry? + if (!empty($GLOBALS['fatal_messages'][0])) { + // Get total count + $count = count($GLOBALS['fatal_messages']); + } // END - if + + // Return value + return $count; } // Load a template file and return it's content (only it's name; do not use ' or ") -function LOAD_TEMPLATE($template, $return=false, $content=array()) { +function LOAD_TEMPLATE ($template, $return=false, $content=array()) { + // @TODO Remove this sanity-check if all is fine + if (!is_bool($return)) debug_report_bug('return is not bool (' . gettype($return) . ')'); + // Add more variables which you want to use in your template files - global $DATA, $_CONFIG, $username; + global $DATA, $username; + + // Get whole config array + $_CONFIG = getConfigArray(); // Make all template names lowercase $template = strtolower($template); // Count the template load - if (getConfig('num_templates') == null) { - $_CONFIG['num_templates'] = 1; - } else { - $_CONFIG['num_templates']++; - } + incrementConfigEntry('num_templates'); // Prepare IP number and User Agent - $REMOTE_ADDR = GET_REMOTE_ADDR(); + $REMOTE_ADDR = detectRemoteAddr(); if (!defined('REMOTE_ADDR')) define('REMOTE_ADDR', $REMOTE_ADDR); - $HTTP_USER_AGENT = GET_USER_AGENT(); + $HTTP_USER_AGENT = detectUserAgent(); // Init some data - $ret = ""; + $ret = ''; if (empty($GLOBALS['refid'])) $GLOBALS['refid'] = 0; // @DEPRECATED Try to rewrite the if() condition - if ($template == "member_support_form") { + if ($template == 'member_support_form') { // Support request of a member - $result = SQL_QUERY_ESC("SELECT userid, gender, surname, family, email FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1", - array($GLOBALS['userid']), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `userid`, `gender`, `surname`, `family`, `email` FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1", + array(getUserId()), __FUNCTION__, __LINE__); // Is content an array? if (is_array($content)) { @@ -260,14 +247,16 @@ function LOAD_TEMPLATE($template, $return=false, $content=array()) { $content = merge_array($content, SQL_FETCHARRAY($result)); // Translate gender - $content['gender'] = TRANSLATE_GENDER($content['gender']); + $content['gender'] = translateGender($content['gender']); } else { - // DEPRECATED: Load data in direct variables + // @DEPRECATED + // @TODO Find all templates which are using these direct variables and rewrite them. + // @TODO After this step is done, this else-block is history list($gender, $surname, $family, $email) = SQL_FETCHROW($result); // Translate gender - $gender = TRANSLATE_GENDER($gender); - DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("DEPRECATION-WARNING: content is not array (%s).", gettype($content))); + $gender = translateGender($gender); + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("DEPRECATION-WARNING: content is not array [%s], template=%s.", gettype($content), $template)); } // Free result @@ -275,96 +264,102 @@ function LOAD_TEMPLATE($template, $return=false, $content=array()) { } // END - if // Generate date/time string - $date_time = MAKE_DATETIME(time(), "1"); + $date_time = generateDateTime(time(), '1'); // Base directory - $BASE = sprintf("%stemplates/%s/html/", PATH, GET_LANGUAGE()); - $MODE = ""; + $basePath = sprintf("%stemplates/%s/html/", constant('PATH'), getLanguage()); + $mode = ''; // Check for admin/guest/member templates - if (strpos($template, "admin_") > -1) { + if (strpos($template, 'admin_') > -1) { // Admin template found - $MODE = "admin/"; - } elseif (strpos($template, "guest_") > -1) { + $mode = 'admin/'; + } elseif (strpos($template, 'guest_') > -1) { // Guest template found - $MODE = "guest/"; - } elseif (strpos($template, "member_") > -1) { + $mode = 'guest/'; + } elseif (strpos($template, 'member_') > -1) { // Member template found - $MODE = "member/"; - } elseif (strpos($template, "install_") > -1) { + $mode = 'member/'; + } elseif (strpos($template, 'install_') > -1) { // Installation template found - $MODE = "install/"; - } elseif (strpos($template, "ext_") > -1) { + $mode = 'install/'; + } elseif (strpos($template, 'ext_') > -1) { // Extension template found - $MODE = "ext/"; - } elseif (strpos($template, "la_") > -1) { - // "Logical-area" template found - $MODE = "la/"; + $mode = 'ext/'; + } elseif (strpos($template, 'la_') > -1) { + // 'Logical-area' template found + $mode = 'la/'; + } elseif (strpos($template, 'js_') > -1) { + // JavaScript template found + $mode = 'js/'; } else { // Test for extension - $test = substr($template, 0, strpos($template, "_")); + $test = substr($template, 0, strpos($template, '_')); if (EXT_IS_ACTIVE($test)) { // Set extra path to extension's name - $MODE = $test."/"; - } + $mode = $test . '/'; + } // END - if } //////////////////////// // Generate file name // //////////////////////// - $file = $BASE.$MODE.$template.".tpl"; + $FQFN = $basePath . $mode . $template . '.tpl'; - if ((!empty($GLOBALS['what'])) && ((strpos($template, "_header") > 0) || (strpos($template, "_footer") > 0)) && (($MODE == "guest/") || ($MODE == "member/") || ($MODE == "admin/"))) { + if ((isWhatSet()) && ((strpos($template, '_header') > 0) || (strpos($template, '_footer') > 0)) && (($mode == 'guest/') || ($mode == 'member/') || ($mode == 'admin/'))) { // Select what depended header/footer template file for admin/guest/member area $file2 = sprintf("%s%s%s_%s.tpl", - $BASE, - $MODE, + $basePath, + $mode, $template, - SQL_ESCAPE($GLOBALS['what']) + getWhat() ); // Probe for it... - if (FILE_READABLE($file2)) $file = $file2; + if (isFileReadable($file2)) $FQFN = $file2; // Remove variable from memory unset($file2); - } + } // END - if // Does the special template exists? - if (!FILE_READABLE($file)) { + if (!isFileReadable($FQFN)) { // Reset to default template - $file = $BASE.$template.".tpl"; + $FQFN = $basePath . $template . '.tpl'; } // END - if // Now does the final template exists? - if (FILE_READABLE($file)) { + if (isFileReadable($FQFN)) { // The local file does exists so we load it. :) - $tmpl_file = implode("", file($file)); + $tmpl_file = readFromFile($FQFN); // Replace ' to our own chars to preventing them being quoted while (strpos($tmpl_file, "'") !== false) { $tmpl_file = str_replace("'", '{QUOT}', $tmpl_file); } // Do we have to compile the code? - $ret = ""; + $ret = ''; if ((strpos($tmpl_file, "\$") !== false) || (strpos($tmpl_file, '{--') !== false) || (strpos($tmpl_file, '--}') > 0)) { // Okay, compile it! - $tmpl_file = "\$ret=\"".COMPILE_CODE(addslashes($tmpl_file))."\";"; + $tmpl_file = "\$ret=\"".COMPILE_CODE(smartAddSlashes($tmpl_file))."\";"; eval($tmpl_file); } else { // Simply return loaded code $ret = $tmpl_file; } - // Add surrounding HTML comments to help finding bugs faster - $ret = "\n".$ret."\n"; - } elseif ((IS_ADMIN()) || ((isBooleanConstantAndTrue('mxchange_installing')) && (!isBooleanConstantAndTrue('mxchange_installed')))) { + // Normal HTML output? + if ($GLOBALS['output_mode'] == 0) { + // Add surrounding HTML comments to help finding bugs faster + $ret = "\n" . $ret . "\n"; + } // END - if + } elseif ((IS_ADMIN()) || ((isInstalling()) && (!isInstalled()))) { // Only admins shall see this warning or when installation mode is active - $ret = "
".TEMPLATE_404."
-(".basename($file).")
+ $ret = "
{--TEMPLATE_404--}
+(".basename($FQFN).")

-".TEMPLATE_CONTENT." +{--TEMPLATE_CONTENT--}
".print_r($content, true)."
-".TEMPLATE_DATA." +{--TEMPLATE_DATA--}
".print_r($DATA, true)."


"; } @@ -376,177 +371,175 @@ function LOAD_TEMPLATE($template, $return=false, $content=array()) { // Do we have some content to output or return? if (!empty($ret)) { // Not empty so let's put it out! ;) - if ($return) { + if ($return === true) { // Return the HTML code return $ret; } else { // Output direct OUTPUT_HTML($ret); } - } elseif (isBooleanConstantAndTrue('DEBUG_MODE')) { + } elseif (isDebugModeEnabled()) { // Warning, empty output! - return "E:".$template."
\n"; + return "E:" . $template."
\n"; } } // Send mail out to an email address -function SEND_EMAIL($TO, $SUBJECT, $MSG, $HTML = "N", $FROM = "") { - //* DEBUG: */ print __FUNCTION__."(".__LINE__."):TO={$TO},SUBJECT={$SUBJECT}
\n"; +function sendEmail ($toEmail, $subject, $message, $HTML = 'N', $mailHeader = '') { + //* DEBUG: */ print __FUNCTION__."(".__LINE__."):TO={$toEmail},SUBJECT={$subject}
\n"; // Compile subject line (for POINTS constant etc.) - $eval = "\$SUBJECT = html_entity_decode(\"".COMPILE_CODE(addslashes($SUBJECT))."\");"; + $eval = "\$subject = decodeEntities(\"".COMPILE_CODE(smartAddSlashes($subject))."\");"; eval($eval); // Set from header - if ((!eregi("@", $TO)) && ($TO > 0)) { + if ((!eregi('@', $toEmail)) && ($toEmail > 0)) { // Value detected, is the message extension installed? - if (EXT_IS_ACTIVE("msg")) { - ADD_MESSAGE_TO_BOX($TO, $SUBJECT, $MSG, $HTML); + // @TODO Extension 'msg' does not exist + if (EXT_IS_ACTIVE('msg')) { + ADD_MESSAGE_TO_BOX($toEmail, $subject, $message, $HTML); return; } else { // Load email address - $result_email = SQL_QUERY_ESC("SELECT email FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1", array(bigintval($TO)), __FILE__, __LINE__); + $result_email = SQL_QUERY_ESC("SELECT `email` FROM `{!_MYSQL_PREFIX!}_user_data` WHERE `userid`=%s LIMIT 1", + array(bigintval($toEmail)), __FUNCTION__, __LINE__); //* DEBUG: */ print __FUNCTION__."(".__LINE__."):numRows=".SQL_NUMROWS($result_email)."
\n"; // Does the user exist? if (SQL_NUMROWS($result_email)) { // Load email address - list($TO) = SQL_FETCHROW($result_email); + list($toEmail) = SQL_FETCHROW($result_email); } else { // Set webmaster - $TO = WEBMASTER; + $toEmail = constant('WEBMASTER'); } // Free result SQL_FREERESULT($result_email); } - } elseif ("$TO" == "0") { + } elseif ($toEmail == '0') { // Is the webmaster! - $TO = WEBMASTER; + $toEmail = constant('WEBMASTER'); } - //* DEBUG: */ print __FUNCTION__."(".__LINE__."):TO={$TO}
\n"; + //* DEBUG: */ print __FUNCTION__."(".__LINE__."):TO={$toEmail}
\n"; // Check for PHPMailer or debug-mode - if (!CHECK_PHPMAILER_USAGE()) { + if (!checkPhpMailerUsage()) { // Not in PHPMailer-Mode - if (empty($FROM)) { + if (empty($mailHeader)) { // Load email header template - $FROM = LOAD_EMAIL_TEMPLATE("header"); + $mailHeader = LOAD_EMAIL_TEMPLATE('header'); } else { // Append header - $FROM .= LOAD_EMAIL_TEMPLATE("header"); + $mailHeader .= LOAD_EMAIL_TEMPLATE('header'); } - } elseif (isBooleanConstantAndTrue('DEBUG_MODE')) { - if (empty($FROM)) { + } elseif (isDebugModeEnabled()) { + if (empty($mailHeader)) { // Load email header template - $FROM = LOAD_EMAIL_TEMPLATE("header"); + $mailHeader = LOAD_EMAIL_TEMPLATE('header'); } else { // Append header - $FROM .= LOAD_EMAIL_TEMPLATE("header"); + $mailHeader .= LOAD_EMAIL_TEMPLATE('header'); } } // Compile "TO" - $eval = "\$TO = \"".COMPILE_CODE(addslashes($TO))."\";"; + $eval = "\$toEmail = \"".COMPILE_CODE(smartAddSlashes($toEmail))."\";"; eval($eval); // Compile "MSG" - $eval = "\$MSG = \"".COMPILE_CODE(addslashes($MSG))."\";"; + $eval = "\$message = \"".COMPILE_CODE(smartAddSlashes($message))."\";"; eval($eval); // Fix HTML parameter (default is no!) - if (empty($HTML)) $HTML = "N"; - if (isBooleanConstantAndTrue('DEBUG_MODE')) { + if (empty($HTML)) $HTML = 'N'; + if (isDebugModeEnabled()) { // In debug mode we want to display the mail instead of sending it away so we can debug this part - print("
-".htmlentities(trim($FROM))."
-To      : ".$TO."
-Subject : ".$SUBJECT."
-Message : ".$MSG."
+		OUTPUT_HTML("
+".htmlentities(trim($mailHeader))."
+To      : " . $toEmail."
+Subject : " . $subject."
+Message : " . $message."
 
\n"); - } elseif (($HTML == "Y") && (EXT_IS_ACTIVE("html_mail"))) { + } elseif (($HTML == 'Y') && (EXT_IS_ACTIVE('html_mail'))) { // Send mail as HTML away - SEND_HTML_EMAIL($TO, $SUBJECT, $MSG, $FROM); - } elseif (!empty($TO)) { + sendHtmlEmail($toEmail, $subject, $message, $mailHeader); + } elseif (!empty($toEmail)) { // Send Mail away - SEND_RAW_EMAIL($TO, $SUBJECT, $MSG, $FROM); - } elseif ($HTML == "N") { + sendRawEmail($toEmail, $subject, $message, $mailHeader); + } elseif ($HTML == 'N') { // Problem found! - SEND_RAW_EMAIL(WEBMASTER, "[PROBLEM:]".$SUBJECT, $MSG, $FROM); + sendRawEmail(constant('WEBMASTER'), '[PROBLEM:]' . $subject, $message, $mailHeader); } } // Check if legacy or PHPMailer command +// @TODO Rewrite this to an extension 'smtp' // @private -function CHECK_PHPMAILER_USAGE() { - return ((defined('SMTP_HOSTNAME')) && (defined('SMTP_USER')) && (defined('SMTP_PASSWORD')) && (SMTP_HOSTNAME != "") && (SMTP_USER != "")); +function checkPhpMailerUsage() { + return ((getConfig('SMTP_HOSTNAME') != '') && (getConfig('SMTP_USER') != '')); } -/* - * Send out a raw email with PHPMailer class or legacy mail() command - */ -function SEND_RAW_EMAIL ($to, $subject, $msg, $from) { +// Send out a raw email with PHPMailer class or legacy mail() command +function sendRawEmail ($toEmail, $subject, $message, $from) { // Shall we use PHPMailer class or legacy mode? - if (CHECK_PHPMAILER_USAGE()) { + if (checkPhpMailerUsage()) { // Use PHPMailer class with SMTP enabled - require_once(PATH."inc/phpmailer/class.phpmailer.php"); - require_once(PATH."inc/phpmailer/class.smtp.php"); + loadIncludeOnce('inc/phpmailer/class.phpmailer.php'); + loadIncludeOnce('inc/phpmailer/class.smtp.php'); // get new instance $mail = new PHPMailer(); - $mail->PluginDir = sprintf("%sinc/phpmailer/", PATH); + $mail->PluginDir = sprintf("%sinc/phpmailer/", constant('PATH')); $mail->IsSMTP(); $mail->SMTPAuth = true; - $mail->Host = SMTP_HOSTNAME; + $mail->Host = getConfig('SMTP_HOSTNAME'); $mail->Port = 25; - $mail->Username = SMTP_USER; - $mail->Password = SMTP_PASSWORD; + $mail->Username = getConfig('SMTP_USER'); + $mail->Password = getConfig('SMTP_PASSWORD'); if (empty($from)) { - $mail->From = WEBMASTER; + $mail->From = constant('WEBMASTER'); } else { $mail->From = $from; } - $mail->FromName = MAIN_TITLE; + $mail->FromName = constant('MAIN_TITLE'); $mail->Subject = $subject; - if ((EXT_IS_ACTIVE("html_mail")) && (strip_tags($msg) != $msg)) { - $mail->Body = $msg; - $mail->AltBody = "Your mail program required HTML support to read this mail!"; + if ((EXT_IS_ACTIVE('html_mail')) && (strip_tags($message) != $message)) { + $mail->Body = $message; + $mail->AltBody = 'Your mail program required HTML support to read this mail!'; $mail->WordWrap = 70; $mail->IsHTML(true); } else { - $mail->Body = html_entity_decode($msg); + $mail->Body = decodeEntities($message); } - $mail->AddAddress($to, ""); - $mail->AddReplyTo(WEBMASTER,MAIN_TITLE); - $mail->AddCustomHeader("Errors-To:".WEBMASTER); - $mail->AddCustomHeader("X-Loop:".WEBMASTER); + $mail->AddAddress($toEmail, ''); + $mail->AddReplyTo(constant('WEBMASTER'), constant('MAIN_TITLE')); + $mail->AddCustomHeader('Errors-To:' . constant('WEBMASTER')); + $mail->AddCustomHeader('X-Loop:' . constant('WEBMASTER')); $mail->Send(); } else { // Use legacy mail() command - @mail($to, $subject, html_entity_decode($msg), $from); + mail($toEmail, $subject, decodeEntities($message), $from); } } -// // Generate a password in a specified length or use default password length -function GEN_PASS ($LEN = 0) { +function generatePassword ($length = 0) { // Auto-fix invalid length of zero - if ($LEN == 0) $LEN = getConfig('pass_len'); + if ($length == 0) $length = getConfig('pass_len'); // Initialize array with all allowed chars - $ABC = explode(",", "a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z,A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z,0,1,2,3,4,5,6,7,8,9,-,+,_,/"); - - // Initialize randomizer - mt_srand((double) microtime() * 1000000); + $ABC = explode(',', 'a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z,A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z,0,1,2,3,4,5,6,7,8,9,-,+,_,/,.'); // Start creating password - $PASS = ""; - for ($i = 0; $i < $LEN; $i++) { - $PASS .= $ABC[mt_rand(0, sizeof($ABC) -1)]; + $PASS = ''; + for ($i = 0; $i < $length; $i++) { + $PASS .= $ABC[mt_rand(0, count($ABC) -1)]; } // END - for - // When the size is below 40 we can also add additional security by scrambling it + // When the size is below 40 we can also add additional security by scrambling + // it. Otherwise we may corrupt hashes if (strlen($PASS) <= 40) { // Also scramble the password $PASS = scrambleString($PASS); @@ -555,51 +548,85 @@ function GEN_PASS ($LEN = 0) { // Return the password return $PASS; } -// -function MAKE_DATETIME ($time, $mode="0") -{ + +// Generates a human-readable timestamp from the Uni* stamp +function generateDateTime ($time, $mode = '0') { + // Filter out numbers + $time = bigintval($time); + + // If the stamp is zero it mostly didn't "happen" if ($time == 0) { // Never happend - return NEVER_HAPPENED; - } else { - // Filter out numbers - $time = bigintval($time); - } + return getMessage('NEVER_HAPPENED'); + } // END - if - switch (GET_LANGUAGE()) + switch (getLanguage()) { - case "de": // German date / time format - switch ($mode) { - case "0": $ret = date("d.m.Y \u\m H:i \U\h\\r", $time); break; - case "1": $ret = strtolower(date("d.m.Y - H:i", $time)); break; - case "2": $ret = date("d.m.Y|H:i", $time); break; - case "3": $ret = date("d.m.Y", $time); break; - default: - DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Invalid date mode %s detected.", $mode)); - break; - } - break; - - default: // Default is the US date / time format! - switch ($mode) { - case "0": $ret = date("r", $time); break; - case "1": $ret = date("Y-m-d - g:i A", $time); break; - case "2": $ret = date("y-m-d|H:i", $time); break; - case "3": $ret = date("y-m-d", $time); break; - default: - DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Invalid date mode %s detected.", $mode)); - break; - } + case 'de': // German date / time format + switch ($mode) { + case '0': $ret = date("d.m.Y \u\m H:i \U\h\\r", $time); break; + case '1': $ret = strtolower(date("d.m.Y - H:i", $time)); break; + case '2': $ret = date("d.m.Y|H:i", $time); break; + case '3': $ret = date("d.m.Y", $time); break; + default: + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Invalid date mode %s detected.", $mode)); + break; + } + break; + + default: // Default is the US date / time format! + switch ($mode) { + case '0': $ret = date("r", $time); break; + case '1': $ret = date("Y-m-d - g:i A", $time); break; + case '2': $ret = date("y-m-d|H:i", $time); break; + case '3': $ret = date("y-m-d", $time); break; + default: + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Invalid date mode %s detected.", $mode)); + break; + } } return $ret; } -// Translates the american decimal dot into a german comma -function TRANSLATE_COMMA ($dotted, $cut=true, $max=0) { - global $_CONFIG; +// Translates Y/N to yes/no +function translateYesNo ($yn) { + // Default + $translated = "??? (" . $yn.')'; + switch ($yn) { + case 'Y': $translated = getMessage('YES'); break; + case 'N': $translated = getMessage('NO'); break; + default: + // Log unknown value + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Unknown value %s. Expected Y/N!", $yn)); + break; + } + + // Return it + return $translated; +} + +// Translates the "pool type" into human-readable +function translatePoolType ($type) { + // Default?type is unknown + $translated = sprintf(getMessage('POOL_TYPE_UNKNOWN'), $type); + + // Generate constant + $constName = sprintf("POOL_TYPE_%s", $type); + + // Does it exist? + if (defined($constName)) { + // Then use it + $translated = getMessage($constName); + } // END - if + + // Return "translation" + return $translated; +} +// Translates the american decimal dot into a german comma +function translateComma ($dotted, $cut = true, $max = 0) { // Default is 3 you can change this in admin area "Misc -> Misc Options" - if (getConfig('max_comma') == null) $_CONFIG['max_comma'] = "3"; + if (!isConfigEntrySet('max_comma')) setConfigEntry('max_comma', '3'); // Use from config is default $maxComma = getConfig('max_comma'); @@ -610,7 +637,7 @@ function TRANSLATE_COMMA ($dotted, $cut=true, $max=0) { // Cut zeros off? if (($cut) && ($max == 0)) { // Test for commata if in cut-mode - $com = explode(".", $dotted); + $com = explode('.', $dotted); if (count($com) < 2) { // Don't display commatas even if there are none... ;-) $maxComma = 0; @@ -621,181 +648,142 @@ function TRANSLATE_COMMA ($dotted, $cut=true, $max=0) { //* DEBUG: */ DEBUG_LOG(__FUNCTION__, __LINE__, "dotted={$dotted},maxComma={$maxComma}"); // Translate it now - switch (GET_LANGUAGE()) { - case "de": - $dotted = number_format($dotted, $maxComma, ",", "."); - break; - - default: - $dotted = number_format($dotted, $maxComma, ".", ","); - break; + switch (getLanguage()) { + case 'de': + $dotted = number_format($dotted, $maxComma, ',', '.'); + break; + + default: + $dotted = number_format($dotted, $maxComma, '.', ','); + break; } // Return translated value return $dotted; } -// +// Translate Uni*-like gender to human-readable +function translateGender ($gender) { + // Default + $ret = '!' . $gender . '!'; + + // Male/female or company? + switch ($gender) { + case 'M': $ret = getMessage('GENDER_M'); break; + case 'F': $ret = getMessage('GENDER_F'); break; + case 'C': $ret = getMessage('GENDER_C'); break; + default: + // Log unknown gender + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Unknown gender %s detected.", $gender)); + break; + } + + // Return translated gender + return $ret; +} + +// "Translates" the user status +function translateUserStatus ($status) { + switch ($status) + { + case 'UNCONFIRMED': + case 'CONFIRMED': + case 'LOCKED': + $ret = getMessage(sprintf("ACCOUNT_%s", $status)); + break; + + case '': + case null: + $ret = getMessage('ACCOUNT_DELETED'); + break; + + default: + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Unknown status %s detected.", $status)); + $ret = sprintf(getMessage('UNKNOWN_STATUS'), $status); + break; + } + + // Return it + return $ret; +} + +// Generates an URL for the dereferer function DEREFERER ($URL) { // Don't de-refer our own links! - if (substr($URL, 0, strlen(URL)) != URL) { + if (substr($URL, 0, strlen(constant('URL'))) != constant('URL')) { // De-refer this link - $URL = URL."/modules.php?module=loader&url=".urlencode(base64_encode(gzcompress($URL))); + $URL = 'modules.php?module=loader&url=' . encodeString(compileUriCode($URL)); } // END - if // Return link return $URL; } -// -function TRANSLATE_GENDER ($gender) { - switch ($gender) - { - case "M": $ret = GENDER_M; break; - case "F": $ret = GENDER_F; break; - case "C": $ret = GENDER_C; break; - default : $ret = $gender; break; - } - return $ret; -} -// -function FRAMETESTER($URL) { +// Generates an URL for the frametester +function FRAMETESTER ($URL) { // Prepare frametester URL - $frametesterUrl = sprintf("%s/modules.php?module=frametester&url=%s", - URL, - urlencode(base64_encode(gzcompress(COMPILE_CODE($URL)))) + $frametesterUrl = sprintf("{!URL!}/modules.php?module=frametester&url=%s", + encodeString(compileUriCode($URL)) ); return $frametesterUrl; } -// -function SELECTION_COUNT($array) { + +// Count entries from e.g. a selection box +function countSelection ($array) { $ret = 0; if (is_array($array)) { - foreach ($array as $key => $sel) { - if (!empty($sel)) $ret++; + foreach ($array as $key => $selected) { + if (!empty($selected)) $ret++; } } return $ret; } -// -function IMG_CODE ($code, $type, $DATA, $uid) { - return "\"Code\""; -} -// -function TRANSLATE_STATUS($status) { - switch ($status) - { - case "UNCONFIRMED": - $ret = ACCOUNT_UNCONFIRMED; - break; - - case "CONFIRMED": - $ret = ACCOUNT_CONFIRMED; - break; - - case "LOCKED": - $ret = ACCOUNT_LOCKED; - break; - - case "": - case null: - $ret = ACCOUNT_DELETED; - break; - - default: - DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Unknown status %s detected.", $status)); - $ret = UNKNOWN_STATUS_1.$status.UNKNOWN_STATUS_2; - break; - } - return $ret; -} -// -function GET_LANGUAGE() { - global $cacheArray; - - // Set default return value to default language from config - $ret = DEFAULT_LANG; - - // Init variable - $lang = ""; - - // Is the variable set - if (!empty($_GET['mx_lang'])) { - // Accept only first 2 chars - $lang = substr($_GET['mx_lang'], 0, 2); - } elseif (isset($cacheArray['language'])) { - // Use cached - $ret = $cacheArray['language']; - } elseif (!empty($lang)) { - // Check if main language file does exist - if (FILE_READABLE(PATH."inc/language/".$lang.".php")) { - // Okay found, so let's update cookies - SET_LANGUAGE($lang); - } - } elseif (!isSessionVariableSet('mx_lang')) { - // Return stored value from cookie - $ret = get_session('mx_lang'); - - // Fixes a warning before the session has the mx_lang constant - if (empty($ret)) $ret = DEFAULT_LANG; - } - - // Cache entry - $cacheArray['language'] = $ret; - // Return value - return $ret; +// Generate XHTML code for the CAPTCHA +function generateCaptchaCode ($code, $type, $DATA, $uid) { + return 'Code'; } -// -function SET_LANGUAGE($lang) { - // Accept only first 2 chars! - $lang = substr(SQL_ESCAPE(strip_tags($lang)), 0, 2); - // Set cookie - set_session("mx_lang", $lang); -} -// -function LOAD_EMAIL_TEMPLATE($template, $content=array(), $UID="0") { - global $DATA, $REPLACER; +// Loads an email template and compiles it +function LOAD_EMAIL_TEMPLATE ($template, $content = array(), $UID = '0') { + global $DATA; + + // Our configuration is kept non-global here + $_CONFIG = getConfigArray(); // Make sure all template names are lowercase! $template = strtolower($template); - // Default "nickname" if extension is not installed - $nick = "---"; - - // Keept for backward-compatiblity (please replace these variables against our new {!CONST!} syntax!) - // No longer used: $MAIN_TITLE = MAIN_TITLE; $URL = URL; $WEBMASTER = WEBMASTER; + // Default 'nickname' if extension is not installed + $nick = '---'; // Prepare IP number and User Agent - $REMOTE_ADDR = GET_REMOTE_ADDR(); - $HTTP_USER_AGENT = GET_USER_AGENT(); + $REMOTE_ADDR = detectRemoteAddr(); + $HTTP_USER_AGENT = detectUserAgent(); // Default admin - $ADMIN = MAIN_TITLE; + $ADMIN = constant('MAIN_TITLE'); // Is the admin logged in? if (IS_ADMIN()) { // Get admin id - $aid = GET_CURRENT_ADMIN_ID(); + $aid = getCurrentAdminId(); // Load Admin data - $ADMIN = GET_ADMIN_EMAIL($aid); + $ADMIN = getAdminEmail($aid); } // END - if // Neutral email address is default - $email = WEBMASTER; + $email = constant('WEBMASTER'); // Expiration in a nice output format + // NOTE: Use $content[expiration] in your templates instead of $EXPIRATION if (getConfig('auto_purge') == 0) { // Will never expire! - $EXPIRATION = MAIL_WILL_NEVER_EXPIRE; - } elseif (function_exists('CREATE_FANCY_TIME')) { - // Create nice date string - $EXPIRATION = CREATE_FANCY_TIME(getConfig('auto_purge')); + $EXPIRATION = getMessage('MAIL_WILL_NEVER_EXPIRE'); } else { - // Display days only - $EXPIRATION = round(getConfig('auto_purge')/60/60/24)." "._DAYS; + // Create nice date string + $EXPIRATION = createFancyTime(getConfig('auto_purge')); } // Is content an array? @@ -808,16 +796,16 @@ function LOAD_EMAIL_TEMPLATE($template, $content=array(), $UID="0") { //* DEBUG: */ print __FUNCTION__."(".__LINE__."):UID={$UID},template={$template},content[]=".gettype($content)."
\n"; if (($UID > 0) && (is_array($content))) { // If nickname extension is installed, fetch nickname as well - if (EXT_IS_ACTIVE("nickname")) { + if (EXT_IS_ACTIVE('nickname')) { //* DEBUG: */ print __FUNCTION__."(".__LINE__."):NICKNAME!
\n"; // Load nickname - $result = SQL_QUERY_ESC("SELECT surname, family, gender, email, nickname FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1", - array(bigintval($UID)), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT surname, family, gender, email, nickname FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1", + array(bigintval($UID)), __FUNCTION__, __LINE__); } else { //* DEBUG: */ print __FUNCTION__."(".__LINE__."):NO-NICK!
\n"; /// Load normal data - $result = SQL_QUERY_ESC("SELECT surname, family, gender, email FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1", - array(bigintval($UID)), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT surname, family, gender, email FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1", + array(bigintval($UID)), __FUNCTION__, __LINE__); } // Fetch and merge data @@ -830,7 +818,7 @@ function LOAD_EMAIL_TEMPLATE($template, $content=array(), $UID="0") { } // END - if // Translate M to male or F to female if present - if (isset($content['gender'])) $content['gender'] = TRANSLATE_GENDER($content['gender']); + if (isset($content['gender'])) $content['gender'] = translateGender($content['gender']); // Overwrite email from data if present if (isset($content['email'])) $email = $content['email']; @@ -839,66 +827,67 @@ function LOAD_EMAIL_TEMPLATE($template, $content=array(), $UID="0") { $DATA['email'] = $email; // Base directory - $BASE = sprintf("%stemplates/%s/emails/", PATH, GET_LANGUAGE()); + $basePath = sprintf("%stemplates/%s/emails/", constant('PATH'), getLanguage()); // Check for admin/guest/member templates - if (strpos($template, "admin_") > -1) { + if (strpos($template, 'admin_') > -1) { // Admin template found - $file = $BASE."admin/".$template.".tpl"; - } elseif (strpos($template, "guest_") > -1) { + $FQFN = $basePath.'admin/' . $template.'.tpl'; + } elseif (strpos($template, 'guest_') > -1) { // Guest template found - $file = $BASE."guest/".$template.".tpl"; - } elseif (strpos($template, "member_") > -1) { + $FQFN = $basePath.'guest/' . $template.'.tpl'; + } elseif (strpos($template, 'member_') > -1) { // Member template found - $file = $BASE."member/".$template.".tpl"; + $FQFN = $basePath.'member/' . $template.'.tpl'; } else { // Test for extension - $test = substr($template, 0, strpos($template, "_")); + $test = substr($template, 0, strpos($template, '_')); if (EXT_IS_ACTIVE($test)) { // Set extra path to extension's name - $file = $BASE.$test."/".$template.".tpl"; + $FQFN = $basePath . $test.'/' . $template.'.tpl'; } else { // No special filename - $file = $BASE.$template.".tpl"; + $FQFN = $basePath . $template.'.tpl'; } } // Does the special template exists? - if (!FILE_READABLE($file)) { + if (!isFileReadable($FQFN)) { // Reset to default template - $file = $BASE.$template.".tpl"; + $FQFN = $basePath . $template.'.tpl'; } // END - if // Now does the final template exists? - $newContent = ""; - if (FILE_READABLE($file)) { + $newContent = ''; + if (isFileReadable($FQFN)) { // The local file does exists so we load it. :) - $tmpl_file = implode("", file($file)); - $tmpl_file = addslashes($tmpl_file); + $tmpl_file = readFromFile($FQFN); + $tmpl_file = SQL_ESCAPE($tmpl_file); // Run code - $tmpl_file = "\$newContent=html_entity_decode(\"".COMPILE_CODE($tmpl_file)."\");"; - @eval($tmpl_file); + $tmpl_file = "\$newContent = decodeEntities(\"".COMPILE_CODE($tmpl_file)."\");"; + eval($tmpl_file); } elseif (!empty($template)) { // Template file not found! - $newContent = TEMPLATE_404.": ".$template."
-".TEMPLATE_CONTENT." + $newContent = "{--TEMPLATE_404--}: " . $template."
+{--TEMPLATE_CONTENT--}
".print_r($content, true)."
-".TEMPLATE_DATA." +{--TEMPLATE_DATA--}
".print_r($DATA, true)."


"; // Debug mode not active? Then remove the HTML tags - if (!DEBUG_MODE) $newContent = strip_tags($newContent); + if (!isDebugModeEnabled()) $newContent = strip_tags($newContent); } else { // No template name supplied! - $newContent = NO_TEMPLATE_SUPPLIED; + $newContent = getMessage('NO_TEMPLATE_SUPPLIED'); } // Is there some content? if (empty($newContent)) { // Compiling failed - $newContent = "Compiler error for template {$template}!\nUncompiled content:\n".$tmpl_file; + $newContent = "Compiler error for template {$template}!\nUncompiled content:\n" . $tmpl_file; + // Add last error if the required function exists if (function_exists('error_get_last')) $newContent .= "\n--------------------------------------\nDebug:\n".print_r(error_get_last(), true)."--------------------------------------\nPlease don't alter these informations!\nThanx."; } // END - if @@ -909,79 +898,104 @@ function LOAD_EMAIL_TEMPLATE($template, $content=array(), $UID="0") { // Return compiled content return COMPILE_CODE($newContent); } -// -function MAKE_TIME($H, $M, $S, $stamp) { + +// Generates a timestamp (some wrapper for mktime()) +function makeTime ($H, $M, $S, $stamp) { // Extract day, month and year from given timestamp - $DAY = date("d", $stamp); - $MONTH = date("m", $stamp); - $YEAR = date('Y', $stamp); + $day = date('d', $stamp); + $month = date('m', $stamp); + $year = date('Y', $stamp); // Create timestamp for wished time which depends on extracted date - return mktime($H, $M, $S, $MONTH, $DAY, $YEAR); + return mktime($H, $M, $S, $month, $day, $year); } -// -function LOAD_URL($URL, $addUrlData=true) { - global $CSS, $footer; +// Redirects to an URL and if neccessarry extends it with own base URL +function redirectToUrl ($URL) { // Compile out URI codes - $URL = COMPILE_CODE($URL); + $URL = compileUriCode($URL); // Check if http(s):// is there - if ((substr($URL, 0, 7) != "http://") && (substr($URL, 0, 8) != "https://")) { + if ((substr($URL, 0, 7) != 'http://') && (substr($URL, 0, 8) != 'https://')) { // Make all URLs full-qualified - $URL = URL."/".$URL; - } + $URL = constant('URL') . '/' . $URL; + } // END - if + + // Three different debug ways... + //* DEBUG: */ debug_report_bug(sprintf("%s[%s:] URL=%s", __FUNCTION__, __LINE__, $URL)); + //* DEBUG: */ DEBUG_LOG(__FUNCTION__, __LINE__, $URL); + //* DEBUG: */ die($URL); + + // Default 'rel' value is external, nofollow is evil from Google and hurts the Internet + $rel = ' rel="external"'; + + // Do we have internal or external URL? + if (substr($URL, 0, strlen(constant('URL'))) == constant('URL')) { + // Own (=internal) URL + $rel = ''; + } // END - if // Get output buffer $OUTPUT = ob_get_contents(); // Clear it only if there is content if (!empty($OUTPUT)) { - ob_end_clean(); + clearOutputBuffer(); } // END - if - // Add some data to URL if cookies are not accepted - if (((!defined('__COOKIES')) || (!__COOKIES)) && ($addUrlData)) $URL = ADD_URL_DATA($URL); - - // Probe for bot from search engine - if ((eregi("spider", GET_USER_AGENT())) || (eregi("bot", GET_USER_AGENT())) || (eregi("spider", GET_USER_AGENT()))) { - // Search engine bot detected so let's rewrite many chars for the link + // Simple probe for bots/spiders from search engines + if ((strpos(detectUserAgent(), 'spider') !== false) || (strpos(detectUserAgent(), 'bot') !== false)) { + // Secure the URL against bad things such als HTML insertions and so on... $URL = htmlentities(strip_tags($URL), ENT_QUOTES); // Output new location link as anchor - OUTPUT_HTML("".$URL.""); + OUTPUT_HTML('' . $URL . ''); } elseif (!headers_sent()) { // Load URL when headers are not sent - /* - print("
");
-		debug_print_backtrace();
-		die("
URL={$URL}"); - */ - @header ("Location: ".str_replace("&", "&", $URL)); + //* DEBUG: */ debug_report_bug("URL={$URL}"); + sendHeader('Location: '.str_replace('&', '&', $URL)); } else { // Output error message - include(PATH."inc/header.php"); - LOAD_TEMPLATE("redirect_url", false, str_replace("&", "&", $URL)); - include(PATH."inc/footer.php"); + loadInclude('inc/header.php'); + LOAD_TEMPLATE('redirect_url', false, str_replace('&', '&', $URL)); + loadInclude('inc/footer.php'); } - exit(); + + // Shut the mailer down here + shutdown(); +} + +// Wrapper for redirectToUrl but URL comes from a configuration entry +function redirectToConfiguredUrl ($configEntry) { + // Get the URL + $URL = getConfig($configEntry); + + // Is this URL set? + if (is_null($URL)) { + // Then abort here + trigger_error(sprintf("Configuration entry %s is not set!", $configEntry)); + } // END - if + + // Load the URL + redirectToUrl($URL); } + // -function COMPILE_CODE($code, $simple = false, $constants = true, $full = true) { - global $SEC_CHARS, $URL_CHARS; +function COMPILE_CODE ($code, $simple = false, $constants = true, $full = true) { // Is the code a string? if (!is_string($code)) { // Silently return it return $code; } // END - if - $ARRAY = $SEC_CHARS; + // Init replacement-array with full security characters + $secChars = $GLOBALS['security_chars']; // Select smaller set of chars to replace when we e.g. want to compile URLs - if (!$full) $ARRAY = $URL_CHARS; + if (!$full) $secChars = $GLOBALS['url_chars']; // Compile constants - if ($constants) { + if ($constants === true) { // BEFORE 0.2.1 : Language and data constants // WITH 0.2.1+ : Only language constants $code = str_replace('{--','".', str_replace('--}','."', $code)); @@ -992,16 +1006,16 @@ function COMPILE_CODE($code, $simple = false, $constants = true, $full = true) { } // END - if // Compile QUOT and other non-HTML codes - foreach ($ARRAY['to'] as $k => $to) { + foreach ($secChars['to'] as $k => $to) { // Do the reversed thing as in inc/libs/security_functions.php - $code = str_replace($to, $ARRAY['from'][$k], $code); + $code = str_replace($to, $secChars['from'][$k], $code); } // END - foreach // But shall I keep simple quotes for later use? if ($simple) $code = str_replace("'", '{QUOT}', $code); // Find $content[bla][blub] entries - @preg_match_all('/\$(content|DATA)((\[([a-zA-Z0-9-_]+)\])*)/', $code, $matches); + preg_match_all('/\$(content|DATA)((\[([a-zA-Z0-9-_]+)\])*)/', $code, $matches); // Are some matches found? if ((count($matches) > 0) && (count($matches[0]) > 0)) { @@ -1030,17 +1044,17 @@ function COMPILE_CODE($code, $simple = false, $constants = true, $full = true) { if ($fuzzyFound) continue; // Take all string elements - if ((is_string($matches[4][$key])) && (!isset($matchesFound[$match])) && (!isset($matchesFound[$key."_".$matches[4][$key]]))) { + if ((is_string($matches[4][$key])) && (!isset($matchesFound[$match])) && (!isset($matchesFound[$key."_" . $matches[4][$key]]))) { // Replace it in the code //* DEBUG: */ print __FUNCTION__."(".__LINE__."):key={$key},match={$match}
\n"; - $newMatch = str_replace("[".$matches[4][$key]."]", "['".$matches[4][$key]."']", $match); - $code = str_replace($match, "\".".$newMatch.".\"", $code); - $matchesFound[$key."_".$matches[4][$key]] = 1; + $newMatch = str_replace("[" . $matches[4][$key]."]", "['" . $matches[4][$key]."']", $match); + $code = str_replace($match, "\"." . $newMatch.".\"", $code); + $matchesFound[$key."_" . $matches[4][$key]] = 1; $matchesFound[$match] = 1; } elseif (!isset($matchesFound[$match])) { // Not yet replaced! //* DEBUG: */ print __FUNCTION__."(".__LINE__."):match={$match}
\n"; - $code = str_replace($match, "\".".$match.".\"", $code); + $code = str_replace($match, "\"." . $match.".\"", $code); $matchesFound[$match] = 1; } } // END - foreach @@ -1049,7 +1063,7 @@ function COMPILE_CODE($code, $simple = false, $constants = true, $full = true) { // Return compiled code return $code; } -// + /************************************************************************ * * * Gaenderter Sortier-Algorythmus, $array wird nach dem Array (!) * @@ -1058,7 +1072,7 @@ function COMPILE_CODE($code, $simple = false, $constants = true, $full = true) { * $array - Das 3-dimensionale Array, das paralell sortiert werden soll * * $a_sort - Array, das die Sortiereihenfolge der ersten Elementeben * * $primary_key - Prim.rschl.ssel aus $a_sort, nach dem sortiert wird * - * $order - Sortiereihenfolge: -1 = A-Z, 0 = keine, 1 = Z-A * + * $order - Sortiereihenfolge: -1 = a-Z, 0 = keine, 1 = Z-a * * $nums - true = Als Zahlen sortieren, false = Als Zeichen sortieren * * * * $a_sort muss Elemente enthalten, deren Wert Schluessel von $array * @@ -1066,8 +1080,7 @@ function COMPILE_CODE($code, $simple = false, $constants = true, $full = true) { * Sie, dass es doch nicht so schwer ist! :-) * * * ************************************************************************/ -function array_pk_sort(&$array, $a_sort, $primary_key = 0, $order = -1, $nums = false) -{ +function array_pk_sort (&$array, $a_sort, $primary_key = 0, $order = -1, $nums = false) { $dummy = $array; while ($primary_key < count($a_sort)) { foreach ($dummy[$a_sort[$primary_key]] as $key => $value) { @@ -1101,175 +1114,165 @@ function array_pk_sort(&$array, $a_sort, $primary_key = 0, $order = -1, $nums = // Write back sorted array $array = $dummy; } + // -function ADD_SELECTION($type, $DEFAULT, $prefix="", $id="0") { - global $MONTH_DESCR; - $OUT = ""; +function ADD_SELECTION ($type, $default, $prefix = '', $id = '0') { + $OUT = ''; - if ($type == "yn") { + if ($type == 'yn') { // This is a yes/no selection only! - if ($id > 0) $prefix .= "[".$id."]"; - $OUT .= " \n"; } else { // Begin with regular selection box here if (!empty($prefix)) $prefix .= "_"; $type2 = $type; - if ($id > 0) $type2 .= "[".$id."]"; - $OUT .= " \n"; } switch ($type) { - case "day": // Day - for ($idx = 1; $idx < 32; $idx++) { - $OUT .= "\n"; + // Use configured min age or fixed? + if (GET_EXT_VERSION('other') >= '0.2.1') { + // Configured + $startYear = $year - getConfig('min_age'); + } else { + // Fixed 16 years + $startYear = $year - 16; } - } else { - // Get current year and subtract the configured minimum age - $OUT .= "\n"; - // Calculate earliest year depending on extension version - if (GET_EXT_VERSION("other") >= "0.2.1") { - // Use configured minimum age - $YEAR = date('Y', time()) - getConfig('min_age'); + + // Calculate earliest year (100 years old people can still enter Internet???) + $minYear = $year - 100; + + // Check if the default value is larger than minimum and bigger than actual year + if (($default > $minYear) && ($default >= $year)) { + for ($idx = $year; $idx < ($year + 11); $idx++) { + $OUT .= "\n"; + } } else { - // Use fixed 16 years age - $YEAR = date('Y', time()) - 16; + // Get current year and subtract the configured minimum age + $OUT .= "\n"; + // Calculate earliest year depending on extension version + if (GET_EXT_VERSION('other') >= '0.2.1') { + // Use configured minimum age + $year = date('Y', time()) - getConfig('min_age'); + } else { + // Use fixed 16 years age + $year = date('Y', time()) - 16; + } + + // Construct year selection list + for ($idx = $minYear; $idx <= $year; $idx++) { + $OUT .= "
"); - DEBUG_LOG(__FUNCTION__, __LINE__, " num={$num},ret={$ret}"); + //debug_report_bug("{$ret}<>{$num}"); } // END - if // Return result return $ret; } + // Insert the code in $img_code into jpeg or PNG image -function GENERATE_IMAGE($img_code, $header=true) { +function GENERATE_IMAGE ($img_code, $headerSent=true) { if ((strlen($img_code) > 6) || (empty($img_code)) || (getConfig('code_length') == 0)) { // Stop execution of function here because of over-sized code length return; - } elseif (!$header) { + } elseif (!$headerSent) { // Return in an HTML code code - return "\n"; + return "\"Image\"\n"; } // Load image - $img = sprintf("%s/theme/%s/images/code_bg.%s", PATH, GET_CURR_THEME(), getConfig('img_type')); - if (FILE_READABLE($img)) { + $img = sprintf("%s/theme/%s/images/code_bg.%s", constant('PATH'), getCurrentTheme(), getConfig('img_type')); + if (isFileReadable($img)) { // Switch image type switch (getConfig('img_type')) { - case "jpg": - // Okay, load image and hide all errors - $image = @imagecreatefromjpeg($img); - break; + case 'jpg': + // Okay, load image and hide all errors + $image = @imagecreatefromjpeg($img); + break; - case "png": - // Okay, load image and hide all errors - $image = @imagecreatefrompng($img); - break; + case 'png': + // Okay, load image and hide all errors + $image = @imagecreatefrompng($img); + break; } } else { // Exit function here + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("File for image type %s not found.", getConfig('img_type'))); return; } @@ -1341,28 +1345,28 @@ function GENERATE_IMAGE($img_code, $header=true) { imagestring($image, 5, 14, 2, $img_code, $text_color); // Return to browser - header ("Content-Type: image/".getConfig('img_type')); + sendHeader('Content-Type: image/' . getConfig('img_type')); // Output image with matching image factory switch (getConfig('img_type')) { - case "jpg": imagejpeg($image); break; - case "png": imagepng($image); break; + case 'jpg': imagejpeg($image); break; + case 'png': imagepng($image); break; } // Remove image from memory imagedestroy($image); } // Create selection box or array of splitted timestamp -function CREATE_TIME_SELECTIONS ($timestamp, $prefix="", $display="", $align="center", $return_array=false) { +function createTimeSelections ($timestamp, $prefix = '', $display = '', $align = 'center', $return_array=false) { // Calculate 2-seconds timestamp $stamp = round($timestamp); - //* DEBUG: */ print("*".$stamp."/".$timestamp."*
"); + //* DEBUG: */ print("*" . $stamp.'/' . $timestamp."*
"); // Do we have a leap year? $SWITCH = 0; $TEST = date('Y', time()) / 4; - $M1 = date("m", time()); - $M2 = date("m", (time() + $timestamp)); + $M1 = date('m', time()); + $M2 = date('m', (time() + $timestamp)); // If so and if current time is before 02/29 and estimated time is after 02/29 then add 86400 seconds (one day) if ((floor($TEST) == $TEST) && ($M1 == "02") && ($M2 > "02")) $SWITCH = getConfig('one_day'); @@ -1411,148 +1415,149 @@ function CREATE_TIME_SELECTIONS ($timestamp, $prefix="", $display="", $align="ce ); } else { // Generate table - $OUT = "
\n"; - $OUT .= "\n"; - $OUT .= "\n"; + $OUT = "
\n"; + $OUT .= "
\n"; + $OUT .= "\n"; if (ereg('Y', $display) || (empty($display))) { - $OUT .= " \n"; + $OUT .= " \n"; } - if (ereg("M", $display) || (empty($display))) { - $OUT .= " \n"; + if (ereg('M', $display) || (empty($display))) { + $OUT .= " \n"; } if (ereg("W", $display) || (empty($display))) { - $OUT .= " \n"; + $OUT .= " \n"; } if (ereg("D", $display) || (empty($display))) { - $OUT .= " \n"; + $OUT .= " \n"; } if (ereg("h", $display) || (empty($display))) { - $OUT .= " \n"; + $OUT .= " \n"; } - if (ereg("m", $display) || (empty($display))) { - $OUT .= " \n"; + if (ereg('m', $display) || (empty($display))) { + $OUT .= " \n"; } if (ereg("s", $display) || (empty($display))) { - $OUT .= " \n"; + $OUT .= " \n"; } - $OUT .= "\n"; - $OUT .= "\n"; + $OUT .= "\n"; + $OUT .= "\n"; if (ereg('Y', $display) || (empty($display))) { // Generate year selection - $OUT .= " \n"; + $OUT .= " \n"; } else { - $OUT .= "\n"; + $OUT .= "\n"; } - if (ereg("M", $display) || (empty($display))) { + if (ereg('M', $display) || (empty($display))) { // Generate month selection - $OUT .= " \n"; + $OUT .= " \n"; } else { - $OUT .= "\n"; + $OUT .= "\n"; } if (ereg("W", $display) || (empty($display))) { // Generate week selection - $OUT .= " \n"; + $OUT .= " \n"; } else { - $OUT .= "\n"; + $OUT .= "\n"; } if (ereg("D", $display) || (empty($display))) { // Generate day selection - $OUT .= " \n"; + $OUT .= " \n"; } else { - $OUT .= "\n"; + $OUT .= "\n"; } if (ereg("h", $display) || (empty($display))) { // Generate hour selection - $OUT .= " \n"; + $OUT .= " \n"; } else { - $OUT .= "\n"; + $OUT .= "\n"; } - if (ereg("m", $display) || (empty($display))) { + if (ereg('m', $display) || (empty($display))) { // Generate minute selection - $OUT .= " \n"; + $OUT .= " \n"; } else { - $OUT .= "\n"; + $OUT .= "\n"; } if (ereg("s", $display) || (empty($display))) { // Generate second selection - $OUT .= " \n"; + $OUT .= " \n"; } else { - $OUT .= "\n"; + $OUT .= "\n"; } - $OUT .= "\n"; - $OUT .= "
"._YEARS."
{--_YEARS--}
"._MONTHS."
{--_MONTHS--}
"._WEEKS."
{--_WEEKS--}
"._DAYS."
{--_DAYS--}
"._HOURS."
{--_HOURS--}
"._MINUTES."
{--_MINUTES--}
"._SECONDS."
{--_SECONDS--}
\n"; - $OUT .= "
\n"; + $OUT .= "\n"; + $OUT .= "\n"; + $OUT .= "\n"; // Return generated HTML code } return $OUT; } + // -function CREATE_TIMESTAMP_FROM_SELECTIONS ($prefix, $POST) { +function createTimestampFromSelections ($prefix, $POST) { // Initial return value $ret = 0; // Do we have a leap year? $SWITCH = 0; $TEST = date('Y', time()) / 4; - $M1 = date("m", time()); + $M1 = date('m', time()); // If so and if current time is before 02/29 and estimated time is after 02/29 then add 86400 seconds (one day) if ((floor($TEST) == $TEST) && ($M1 == "02") && ($POST[$prefix."_mo"] > "02")) $SWITCH = getConfig('one_day'); // First add years... @@ -1572,69 +1577,80 @@ function CREATE_TIMESTAMP_FROM_SELECTIONS ($prefix, $POST) { // Return calculated value return $ret; } + // Sends out mail to all administrators // IMPORTANT: Please use SEND_ADMIN_NOTIFCATION() for now! -function SEND_ADMIN_EMAILS_PRO($subj, $template, $content, $UID) { +function SEND_ADMIN_EMAILS_PRO ($subj, $template, $content, $UID) { // Trim template name $template = trim($template); // Load email template - $msg = LOAD_EMAIL_TEMPLATE($template, $content, $UID); - - if (EXT_VERSION_IS_OLDER("admins", "0.4.0")) { - // Older version detected! - return SEND_ADMIN_EMAILS($subj, $msg); - } // END - if + $message = LOAD_EMAIL_TEMPLATE($template, $content, $UID); // Check which admin shall receive this mail - $result = SQL_QUERY_ESC("SELECT DISTINCT admin_id FROM "._MYSQL_PREFIX."_admins_mails WHERE mail_template='%s' ORDER BY admin_id", - array($template), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT DISTINCT admin_id FROM `{!_MYSQL_PREFIX!}_admins_mails` WHERE mail_template='%s' ORDER BY admin_id", + array($template), __FUNCTION__, __LINE__); if (SQL_NUMROWS($result) == 0) { // Create new entry (to all admins) - SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_admins_mails (admin_id, mail_template) VALUES (0, '%s')", - array($template), __FILE__, __LINE__); + SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_admins_mails` (admin_id, mail_template) VALUES (0, '%s')", + array($template), __FUNCTION__, __LINE__); } else { // Load admin IDs... - $aids = array(); - while(list($aid) = SQL_FETCHROW($result)) { - $aids[] = $aid; - } + // @TODO This can be, somehow, rewritten + $adminIds = array(); + while ($content = SQL_FETCHARRAY($result)) { + $adminIds[] = $content['admin_id']; + } // END - while // Free memory SQL_FREERESULT($result); + // Init result + $result = false; + // "implode" IDs and query string - $aid = implode(",", $aids); - if ($aid == "-1") { - // Add line to userlog - USERLOG_ADD_LINE($subj, $msg, $UID); - return; - } elseif ($aid == "0") { + $aid = implode(',', $adminIds); + if ($aid == '-1') { + if (EXT_IS_ACTIVE('events')) { + // Add line to user events + EVENTS_ADD_LINE($subj, $message, $UID); + } else { + // Log error for debug + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Extension 'events' missing: tpl=%s,subj=%s,UID=%s", + $template, + $subj, + $UID + )); + } + } elseif ($aid == '0') { // Select all email adresses - $result = SQL_QUERY("SELECT email FROM "._MYSQL_PREFIX."_admins ORDER BY id", __FILE__, __LINE__); + $result = SQL_QUERY("SELECT email FROM `{!_MYSQL_PREFIX!}_admins` ORDER BY `id`", + __FUNCTION__, __LINE__); } else { // If Admin-ID is not "to-all" select - $result = SQL_QUERY_ESC("SELECT email FROM "._MYSQL_PREFIX."_admins WHERE id IN (%s) ORDER BY id", array($aid), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT email FROM `{!_MYSQL_PREFIX!}_admins` WHERE id IN (%s) ORDER BY `id`", + array($aid), __FUNCTION__, __LINE__); } } // Load email addresses and send away - while (list($email) = SQL_FETCHROW($result)) { - SEND_EMAIL($email, $subj, $msg); - } + while ($content = SQL_FETCHARRAY($result)) { + sendEmail($content['email'], $subj, $message); + } // END - while // Free memory SQL_FREERESULT($result); } -// -function CREATE_FANCY_TIME ($stamp) { + +// Creates a 'fancy' human-readable timestamp from a Uni* stamp +function createFancyTime ($stamp) { // Get data array with years/months/weeks/days/... - $data = CREATE_TIME_SELECTIONS($stamp, "", "", "", true); - $ret = ""; + $data = createTimeSelections($stamp, '', '', '', true); + $ret = ''; foreach($data as $k => $v) { if ($v > 0) { // Value is greater than 0 "eval" data to return string - $eval = "\$ret .= \", \".\$v.\" \"._".strtoupper($k).";"; + $eval = "\$ret .= \", \".\$v.\" {--_".strtoupper($k)."--}\";"; eval($eval); break; } // END - if @@ -1646,48 +1662,49 @@ function CREATE_FANCY_TIME ($stamp) { $ret = substr($ret, 2); } else { // Zero seconds - $ret = "0 "._SECONDS; + $ret = "0 {--_SECONDS--}"; } // Return fancy time string return $ret; } + // -function ADD_EMAIL_NAV($PAGES, $offset, $show_form, $colspan, $return=false) { - $SEP = ""; $TOP = ""; +function ADD_EMAIL_NAV ($PAGES, $offset, $show_form, $colspan, $return=false) { + $SEP = ''; $TOP = ''; if (!$show_form) { $TOP = " top2"; - $SEP = " "; + $SEP = " "; } - $NAV = ""; + $NAV = ''; for ($page = 1; $page <= $PAGES; $page++) { // Is the page currently selected or shall we generate a link to it? - if (($page == $_GET['page']) || ((empty($_GET['page'])) && ($page == "1"))) { + if (($page == REQUEST_GET('page')) || ((!REQUEST_ISSET_GET('page')) && ($page == '1'))) { // Is currently selected, so only highlight it - $NAV .= "-"; + $NAV .= "-"; } else { // Open anchor tag and add base URL - $NAV .= ""; } $NAV .= $page; - if (($page == $_GET['page']) || ((empty($_GET['page'])) && ($page == "1"))) { + if (($page == REQUEST_GET('page')) || ((!REQUEST_ISSET_GET('page')) && ($page == '1'))) { // Is currently selected, so only highlight it - $NAV .= "-"; + $NAV .= "-"; } else { // Close anchor tag - $NAV .= ""; + $NAV .= ""; } // Add seperator if we have not yet reached total pages if ($page < $PAGES) $NAV .= " | "; - } + } // END - for // Define constants only once if (!defined('__NAV_OUTPUT')) { @@ -1695,12 +1712,12 @@ function ADD_EMAIL_NAV($PAGES, $offset, $show_form, $colspan, $return=false) { define('__NAV_COLSPAN', $colspan); define('__NAV_TOP' , $TOP); define('__NAV_SEP' , $SEP); - } + } // END - if // Load navigation template $OUT = LOAD_TEMPLATE("admin_email_nav_row", true); - if ($return) { + if ($return === true) { // Return generated HTML-Code return $OUT; } else { @@ -1710,26 +1727,26 @@ function ADD_EMAIL_NAV($PAGES, $offset, $show_form, $colspan, $return=false) { } // Extract host from script name -function EXTRACT_HOST (&$script) { +function extractHostnameFromUrl (&$script) { // Use default SERVER_URL by default... ;) So? - $url = SERVER_URL; + $url = constant('SERVER_URL'); // Is this URL valid? - if (substr($script, 0, 7) == "http://") { + if (substr($script, 0, 7) == 'http://') { // Use the hostname from script URL as new hostname $url = substr($script, 7); - $extract = explode("/", $url); + $extract = explode('/', $url); $url = $extract[0]; // Done extracting the URL :) } // END - if // Extract host name - $host = str_replace("http://", "", $url); - if (ereg("/", $host)) $host = substr($host, 0, strpos($host, "/")); + $host = str_replace('http://', '', $url); + if (ereg('/', $host)) $host = substr($host, 0, strpos($host, '/')); // Generate relative URL - //* DEBUG: */ print("SCRIPT=".$script."
\n"); - if (substr(strtolower($script), 0, 7) == "http://") { + //* DEBUG: */ print("SCRIPT=" . $script."
\n"); + if (substr(strtolower($script), 0, 7) == 'http://') { // But only if http:// is in front! $script = substr($script, (strlen($url) + 7)); } elseif (substr(strtolower($script), 0, 8) == "https://") { @@ -1737,92 +1754,101 @@ function EXTRACT_HOST (&$script) { $script = substr($script, (strlen($url) + 8)); } - //* DEBUG: */ print("SCRIPT=".$script."
\n"); - if (substr($script, 0, 1) == "/") $script = substr($script, 1); + //* DEBUG: */ print("SCRIPT=" . $script."
\n"); + if (substr($script, 0, 1) == '/') $script = substr($script, 1); // Return host name return $host; } // Send a GET request -function GET_URL ($script) { +function sendGetRequest ($script) { // Compile the script name $script = COMPILE_CODE($script); // Extract host name from script - $host = EXTRACT_HOST($script); + $host = extractHostnameFromUrl($script); // Generate GET request header - $request = "GET /" . trim($script) . " HTTP/1.1\r\n"; - $request .= "Host: " . $host . "\r\n"; - $request .= "Referer: " . URL . "/admin.php\r\n"; - $request .= "User-Agent: " . TITLE . "/" . FULL_VERSION . "\r\n"; - $request .= "Content-Type: text/plain\r\n"; - $request .= "Cache-Control: no-cache\r\n"; - $request .= "Connection: Close\r\n\r\n"; + $request = "GET /" . trim($script) . " HTTP/1.1" . getConfig('HTTP_EOL'); + $request .= "Host: " . $host . getConfig('HTTP_EOL'); + $request .= "Referer: " . constant('URL') . "/admin.php" . getConfig('HTTP_EOL'); + if (defined('FULL_VERSION')) { + $request .= "User-Agent: " . constant('TITLE') . '/' . constant('FULL_VERSION') . getConfig('HTTP_EOL'); + } else { + $request .= "User-Agent: " . constant('TITLE') . "/?.?.?" . getConfig('HTTP_EOL'); + } + $request .= "Content-Type: text/plain" . getConfig('HTTP_EOL'); + $request .= "Cache-Control: no-cache" . getConfig('HTTP_EOL'); + $request .= "Connection: Close" . getConfig('HTTP_EOL') . getConfig('HTTP_EOL'); // Send the raw request - $response = SEND_RAW_REQUEST($host, $request); + $response = sendRawRequest($host, $request); // Return the result to the caller function return $response; } // Send a POST request -function POST_URL ($script, $postData) { +function sendPostRequest ($script, $postData) { // Is postData an array? if (!is_array($postData)) { // Abort here DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("postData is not an array. Type: %s", gettype($postData))); - return array("", "", ""); + return array('', '', ''); } // END - if // Compile the script name $script = COMPILE_CODE($script); // Extract host name from script - $host = EXTRACT_HOST($script); + $host = extractHostnameFromUrl($script); // Construct request $data = http_build_query($postData, '','&'); // Generate POST request header - $request = "POST /" . trim($script) . " HTTP/1.1\r\n"; - $request .= "Host: " . $host . "\r\n"; - $request .= "Referer: " . URL . "/admin.php\r\n"; - $request .= "User-Agent: " . TITLE . "/" . FULL_VERSION . "\r\n"; - $request .= "Content-type: application/x-www-form-urlencoded\r\n"; - $request .= "Content-length: " . strlen($data) . "\r\n"; - $request .= "Cache-Control: no-cache\r\n"; - $request .= "Connection: Close\r\n\r\n"; + $request = "POST /" . trim($script) . " HTTP/1.1" . getConfig('HTTP_EOL'); + $request .= "Host: " . $host . getConfig('HTTP_EOL'); + $request .= "Referer: " . constant('URL') . "/admin.php" . getConfig('HTTP_EOL'); + $request .= "User-Agent: " . constant('TITLE') . '/' . constant('FULL_VERSION') . getConfig('HTTP_EOL'); + $request .= "Content-type: application/x-www-form-urlencoded" . getConfig('HTTP_EOL'); + $request .= "Content-length: " . strlen($data) . getConfig('HTTP_EOL'); + $request .= "Cache-Control: no-cache" . getConfig('HTTP_EOL'); + $request .= "Connection: Close" . getConfig('HTTP_EOL') . getConfig('HTTP_EOL'); $request .= $data; // Send the raw request - $response = SEND_RAW_REQUEST($host, $request); + $response = sendRawRequest($host, $request); // Return the result to the caller function return $response; } // Sends a raw request to another host -function SEND_RAW_REQUEST ($host, $request) { +function sendRawRequest ($host, $request) { + // Init errno and errdesc with 'all fine' values + $errno = 0; $errdesc = ''; + // Initialize array - $response = array("", "", ""); + $response = array('', '', ''); // Default is not to use proxy $useProxy = false; // Are proxy settins set? - if ((getConfig('proxy_host') != "") && (getConfig('proxy_port') > 0)) { + if ((getConfig('proxy_host') != '') && (getConfig('proxy_port') > 0)) { // Then use it $useProxy = true; } // END - if // Open connection - //* DEBUG: */ die("SCRIPT=".$script."
\n"); - if ($useProxy) { - $fp = @fsockopen(COMPILE_CODE(getConfig('proxy_host')), getConfig('proxy_port'), $errno, $errdesc, 30); + //* DEBUG: */ die("SCRIPT=" . $script."
\n"); + if ($useProxy === true) { + // Connect to host through proxy connection + $fp = @fsockopen(COMPILE_CODE(getConfig('proxy_host')), bigintval(getConfig('proxy_port')), $errno, $errdesc, 30); } else { + // Connect to host directly $fp = @fsockopen($host, 80, $errno, $errdesc, 30); } @@ -1833,21 +1859,21 @@ function SEND_RAW_REQUEST ($host, $request) { } // END - if // Do we use proxy? - if ($useProxy) { + if ($useProxy === true) { // Generate CONNECT request header - $proxyTunnel = "CONNECT ".$host.":80 HTTP/1.1\r\n"; - $proxyTunnel .= "Host: ".$host."\r\n"; + $proxyTunnel = "CONNECT " . $host . ":80 HTTP/1.1" . getConfig('HTTP_EOL'); + $proxyTunnel .= "Host: " . $host . getConfig('HTTP_EOL'); // Use login data to proxy? (username at least!) - if (getConfig('proxy_username') != "") { + if (getConfig('proxy_username') != '') { // Add it as well - $encodedAuth = base64_encode(COMPILE_CODE(getConfig('proxy_username')).":".COMPILE_CODE(getConfig('proxy_password'))); - $proxyTunnel .= "Proxy-Authorization: Basic ".$encodedAuth."\r\n"; + $encodedAuth = base64_encode(COMPILE_CODE(getConfig('proxy_username')) . getConfig('ENCRYPT_SEPERATOR') . COMPILE_CODE(getConfig('proxy_password'))); + $proxyTunnel .= "Proxy-Authorization: Basic " . $encodedAuth . getConfig('HTTP_EOL'); } // END - if // Add last new-line - $proxyTunnel .= "\r\n"; - //* DEBUG: */ print("proxyTunnel=
".$proxyTunnel."
"); + $proxyTunnel .= getConfig('HTTP_EOL'); + //* DEBUG: */ print("proxyTunnel=
" . $proxyTunnel."
"); // Write request fputs($fp, $proxyTunnel); @@ -1860,8 +1886,8 @@ function SEND_RAW_REQUEST ($host, $request) { // Read the first line $resp = trim(fgets($fp, 10240)); - $respArray = explode(" ", $resp); - if ((strtolower($respArray[0]) !== "http/1.0") || ($respArray[1] != "200")) { + $respArray = explode(' ', $resp); + if ((strtolower($respArray[0]) !== 'http/1.0') || ($respArray[1] != '200')) { // Invalid response! return $response; } // END - if @@ -1871,7 +1897,7 @@ function SEND_RAW_REQUEST ($host, $request) { fputs($fp, $request); // Read response - while(!feof($fp)) { + while (!feof($fp)) { $response[] = trim(fgets($fp, 1024)); } // END - while @@ -1897,85 +1923,88 @@ function SEND_RAW_REQUEST ($host, $request) { //* DEBUG: */ print("Response:
".print_r($response, true)."
"); // Proxy agent found? - if ((substr(strtolower($response[0]), 0, 11) == "proxy-agent") && ($useProxy)) { + if ((substr(strtolower($response[0]), 0, 11) == 'proxy-agent') && ($useProxy === true)) { // Proxy header detected, so remove two lines array_shift($response); array_shift($response); } // END - if // Was the request successfull? - if ((!eregi("200 OK", $response[0])) || (empty($response[0]))) { + if ((!eregi('200 OK', $response[0])) || (empty($response[0]))) { // Not found / access forbidden - $response = array("", "", ""); + $response = array('', '', ''); } // END - if // Return response return $response; } + // Taken from www.php.net eregi() user comments -function VALIDATE_EMAIL($email) { +function isEmailValid ($email) { // Compile email $email = COMPILE_CODE($email); // Check first part of email address - $first = "[-a-z0-9!#$%&\'*+/=?^_<{|}~]+(\.[-a-zA-Z0-9!#$%&\'*+/=?^_<{|}~]+)*"; + $first = '[-a-z0-9!#$%&\'*+/=?^_<{|}~]+(\.[-a-zA-Z0-9!#$%&\'*+/=?^_<{|}~]+)*'; // Check domain - $domain = "[a-z0-9-]+(\.[a-z0-9-]{2,5})+"; + $domain = '[a-z0-9-]+(\.[a-z0-9-]{2,5})+'; // Generate pattern - $regex = "^".$first."@".$domain."$"; + $regex = '@^' . $first . '\@' . $domain . '$@iU'; // Return check result - return eregi($regex, $email); + return preg_match($regex, $email); } + // Function taken from user comments on www.php.net / function eregi() -function VALIDATE_URL ($URL, $compile=true) { +function isUrlValid ($URL, $compile=true) { // Trim URL a little $URL = trim(urldecode($URL)); //* DEBUG: */ echo $URL."
"; // Compile some chars out... - if ($compile) $URL = COMPILE_CODE($URL, false, false, false); + if ($compile === true) $URL = compileUriCode($URL, false, false, false); //* DEBUG: */ echo $URL."
"; // Check for the extension filter - if (EXT_IS_ACTIVE("filter")) { + if (EXT_IS_ACTIVE('filter')) { // Use the extension's filter set return FILTER_VALIDATE_URL($URL, false); - } + } // END - if // If not installed, perform a simple test. Just make it sure there is always a http:// or // https:// in front of the URLs - return (((substr($URL, 0, 7) == "http://") || (substr($URL, 0, 8) == "https://")) && (strlen($URL) >= 12)); + return isUrlValidSimple($URL); } -// -function MEMBER_ACTION_LINKS($uid, $status="") { + +// Generate a list of administrative links to a given userid +function generateMemberAdminActionLinks ($uid, $status = '') { // Define all main targets - $TARGETS = array("del_user", "edit_user", "lock_user", "add_points", "sub_points"); + $TARGETS = array('del_user', 'edit_user', 'lock_user', 'add_points', 'sub_points'); // Begin of navigation links $eval = "\$OUT = \"[ "; foreach ($TARGETS as $tar) { - $eval .= "\n"; - if (($tar == "lock_user") && ($status == "LOCKED")) { + $eval .= "\n"; + if (($tar == "lock_user") && ($status == 'LOCKED')) { // Locked accounts shall be unlocked $eval .= "UNLOCK_USER"; } else { // All other status is fine $eval .= strtoupper($tar); } - $eval .= "_TITLE.\"\\\">\".ADMIN_"; - if (($tar == "lock_user") && ($status == "LOCKED")) { + $eval .= "_TITLE--}\\\">{--ADMIN_"; + if (($tar == "lock_user") && ($status == 'LOCKED')) { // Locked accounts shall be unlocked $eval .= "UNLOCK_USER"; } else { // All other status is fine $eval .= strtoupper($tar); } - $eval .= ".\" | "; + $eval .= "--} | "; } // Finish navigation link @@ -1985,73 +2014,66 @@ function MEMBER_ACTION_LINKS($uid, $status="") { // Return string return $OUT; } -// Function for backward-compatiblity -function ADD_CATEGORY_TABLE ($MODE, $return=false) { - // Load it from the register extension - return REGISTER_ADD_CATEGORY_TABLE ($MODE, $return); -} + // Generate an email link -function CREATE_EMAIL_LINK ($email, $table = "admins") { +function generateEmailLink ($email, $table = 'admins') { // Default email link (INSECURE! Spammer can read this by harvester programs) - $EMAIL = "mailto:".$email; + $EMAIL = 'mailto:' . $email; // Check for several extensions - if ((EXT_IS_ACTIVE("admins")) && ($table == "admins")) { + if ((EXT_IS_ACTIVE('admins')) && ($table == 'admins')) { // Create email link for contacting admin in guest area - $EMAIL = ADMINS_CREATE_EMAIL_LINK($email); - } elseif ((EXT_IS_ACTIVE("user")) && (GET_EXT_VERSION("user") >= "0.3.3") && ($table == "user_data")) { + $EMAIL = generateAdminEmailLink($email); + } elseif ((EXT_IS_ACTIVE('user')) && (GET_EXT_VERSION('user') >= '0.3.3') && ($table == 'user_data')) { // Create email link for contacting a member within admin area (or later in other areas, too?) - $EMAIL = USER_CREATE_EMAIL_LINK($email); - } elseif ((EXT_IS_ACTIVE("sponsor")) && ($table == "sponsor_data")) { + $EMAIL = generateEmailLink($email, 'user_data'); + } elseif ((EXT_IS_ACTIVE('sponsor')) && ($table == 'sponsor_data')) { // Create email link to contact sponsor within admin area (or like the link above?) - $EMAIL = SPONSOR_CREATE_EMAIL_LINK($email); + $EMAIL = generateEmailLink($email, 'sponsor_data'); } // Shall I close the link when there is no admin? - if ((!IS_ADMIN()) && ($EMAIL == $email)) $EMAIL = "#"; // Closed! + if ((!IS_ADMIN()) && ($EMAIL == $email)) $EMAIL = '#'; // Closed! // Return email link return $EMAIL; } -// Generate a hash for extra-security for all passwords -function generateHash ($plainText, $salt = "") { - global $_SERVER; - // Is the required extension "sql_patches" there and a salt is not given? - if (((EXT_VERSION_IS_OLDER("sql_patches", "0.3.6")) || (!EXT_IS_ACTIVE("sql_patches"))) && (empty($salt))) { +// Generate a hash for extra-security for all passwords +function generateHash ($plainText, $salt = '') { + // Is the required extension 'sql_patches' there and a salt is not given? + if (((EXT_VERSION_IS_OLDER('sql_patches', '0.3.6')) || (!EXT_IS_ACTIVE('sql_patches'))) && (empty($salt))) { // Extension sql_patches is missing/outdated so we hash the plain text with MD5 return md5($plainText); } // END - if // Do we miss an arry element here? - if (getConfig('file_hash') == null) { + if (!isConfigEntrySet('file_hash')) { // Stop here - print("Missing file_hash in ".__FUNCTION__.". Backtrace:
");
-		debug_print_backtrace();
-		die("
"); + debug_report_bug('Missing file_hash in ' . __FUNCTION__ . '.'); } // END - if // When the salt is empty build a new one, else use the first x configured characters as the salt if (empty($salt)) { - // Build server string - $server = $_SERVER['PHP_SELF'].":".GET_USER_AGENT().":".getenv('SERVER_SOFTWARE').":".GET_REMOTE_ADDR().":".":".filemtime(PATH."inc/databases.php"); + // Build server string (inc/databases.php is no longer updated with every commit) + $server = $_SERVER['PHP_SELF'].getConfig('ENCRYPT_SEPERATOR').detectUserAgent().getConfig('ENCRYPT_SEPERATOR').getenv('SERVER_SOFTWARE').getConfig('ENCRYPT_SEPERATOR').detectRemoteAddr(); // Build key string - $keys = SITE_KEY.":".DATE_KEY.":".getConfig('secret_key').":".getConfig('file_hash').":".date("d-m-Y (l-F-T)", bigintval(getConfig('patch_ctime'))).":".getConfig('master_salt'); + $keys = getConfig('SITE_KEY').getConfig('ENCRYPT_SEPERATOR').getConfig('DATE_KEY').getConfig('ENCRYPT_SEPERATOR').getConfig('secret_key').getConfig('ENCRYPT_SEPERATOR').getConfig('file_hash').getConfig('ENCRYPT_SEPERATOR').date("d-m-Y (l-F-T)", getConfig('patch_ctime')).getConfig('ENCRYPT_SEPERATOR').getConfig('master_salt'); // Additional data - $data = $plainText.":".uniqid(mt_rand(), true).":".time(); + $data = $plainText.getConfig('ENCRYPT_SEPERATOR').uniqid(mt_rand(), true).getConfig('ENCRYPT_SEPERATOR').time(); // Calculate number for generating the code - $a = time() + _ADD - 1; + $a = time() + getConfig('_ADD') - 1; // Generate SHA1 sum from modula of number and the prime number - $sha1 = sha1(($a % _PRIME).$server.":".$keys.":".$data.":".date("d-m-Y (l-F-T)", time()).":".$a); - //* DEBUG: */ echo "SHA1=".$sha1." (".strlen($sha1).")
"; + $sha1 = sha1(($a % getConfig('_PRIME')) . $server.getConfig('ENCRYPT_SEPERATOR') . $keys.getConfig('ENCRYPT_SEPERATOR') . $data.getConfig('ENCRYPT_SEPERATOR').getConfig('DATE_KEY').getConfig('ENCRYPT_SEPERATOR') . $a); + //* DEBUG: */ echo "SHA1=" . $sha1." (".strlen($sha1).")
"; $sha1 = scrambleString($sha1); - //* DEBUG: */ echo "Scrambled=".$sha1." (".strlen($sha1).")
"; + //* DEBUG: */ echo "Scrambled=" . $sha1." (".strlen($sha1).")
"; //* DEBUG: */ $sha1b = descrambleString($sha1); - //* DEBUG: */ echo "Descrambled=".$sha1b." (".strlen($sha1b).")
"; + //* DEBUG: */ echo "Descrambled=" . $sha1b." (".strlen($sha1b).")
"; // Generate the password salt string $salt = substr($sha1, 0, getConfig('salt_length')); @@ -2063,12 +2085,13 @@ function generateHash ($plainText, $salt = "") { } // Return hash - return $salt.sha1($salt.$plainText); + return $salt.sha1($salt . $plainText); } -// + +// Scramble a string function scrambleString($str) { // Init - $scrambled = ""; + $scrambled = ''; // Final check, in case of failture it will return unscrambled string if (strlen($str) > 40) { @@ -2076,14 +2099,14 @@ function scrambleString($str) { return $str; } elseif (strlen($str) == 40) { // From database - $scrambleNums = explode(":", getConfig('pass_scramble')); + $scrambleNums = explode(':', getConfig('pass_scramble')); } else { // Generate new numbers - $scrambleNums = explode(":", genScrambleString(strlen($str))); + $scrambleNums = explode(':', genScrambleString(strlen($str))); } // Scramble string here - //* DEBUG: */ echo "***Original=".$str."***
"; + //* DEBUG: */ echo "***Original=" . $str."***
"; for ($idx = 0; $idx < strlen($str); $idx++) { // Get char on scrambled position $char = substr($str, $scrambleNums[$idx], 1); @@ -2093,36 +2116,37 @@ function scrambleString($str) { } // END - for // Return scrambled string - //* DEBUG: */ echo "***Scrambled=".$scrambled."***
"; + //* DEBUG: */ echo "***Scrambled=" . $scrambled."***
"; return $scrambled; } -// + +// De-scramble a string scrambled by scrambleString() function descrambleString($str) { // Scramble only 40 chars long strings if (strlen($str) != 40) return $str; // Load numbers from config - $scrambleNums = explode(":", getConfig('pass_scramble')); + $scrambleNums = explode(':', getConfig('pass_scramble')); // Validate numbers if (count($scrambleNums) != 40) return $str; // Begin descrambling $orig = str_repeat(" ", 40); - //* DEBUG: */ echo "+++Scrambled=".$str."+++
"; + //* DEBUG: */ echo "+++Scrambled=" . $str."+++
"; for ($idx = 0; $idx < 40; $idx++) { $char = substr($str, $idx, 1); $orig = substr_replace($orig, $char, $scrambleNums[$idx], 1); } // END - for // Return scrambled string - //* DEBUG: */ echo "+++Original=".$orig."+++
"; + //* DEBUG: */ echo "+++Original=" . $orig."+++
"; return $orig; } -// -function genScrambleString($len) { - // Prepare randomizer and array for the numbers - mt_srand((double) microtime() * 1000000); + +// Generated a "string" for scrambling +function genScrambleString ($len) { + // Prepare array for the numbers $scrambleNumbers = array(); // First we need to setup randomized numbers from 0 to 31 @@ -2140,78 +2164,43 @@ function genScrambleString($len) { } // END - for // So let's create the string for storing it in database - $scrambleString = implode(":", $scrambleNumbers); + $scrambleString = implode(':', $scrambleNumbers); return $scrambleString; } -// Append data like session ID or referal ID to the given URL which would -// normally be stored in cookies -function ADD_URL_DATA ($URL) { - // Init add - $ADD = ""; - - // Determine URL binder - $BIND = "?"; - if (strpos($URL, "?") !== false) $BIND = "&"; - - if ((!defined('__COOKIES')) || ((!__COOKIES))) { - // Cookies are not accepted - if ((!empty($_GET['refid'])) && (strpos($URL, "refid=") == 0)) { - // Cookie found in URL - $ADD .= $BIND."refid=".bigintval($_GET['refid']); - } elseif ((GET_EXT_VERSION("sql_patches") != '') && (getConfig('def_refid') > 0)) { - // Not found! So let's set default here - $ADD .= $BIND."refid=".getConfig('def_refid'); - } - // Is there already added data? Then change the binder - if (!empty($ADD)) $BIND = "&"; - - // Add session ID - if ((!empty($_GET['PHPSESSID'])) && (strpos($URL, "PHPSESSID=") == 0)) { - // Add session from URL - $ADD .= $BIND."PHPSESSID=".SQL_ESCAPE(strip_tags($_GET['PHPSESSID'])); - } else { - // Add current session - $ADD .= $BIND."PHPSESSID=".session_id(); - } - } // END - if - - // Add all together and return it - return $URL.$ADD; -} // Generate an PGP-like encrypted hash of given hash for e.g. cookies -function generatePassString($passHash) { +function generatePassString ($passHash) { // Return vanilla password hash $ret = $passHash; // Is a secret key and master salt already initialized? - if ((getConfig('secret_key') != "") && (getConfig('master_salt') != "")) { + if ((getConfig('secret_key') != '') && (getConfig('master_salt') != '')) { // Only calculate when the secret key is generated - $newHash = ""; $start = 9; + $newHash = ''; $start = 9; for ($idx = 0; $idx < 10; $idx++) { $part1 = hexdec(substr($passHash, $start, 4)); $part2 = hexdec(substr(getConfig('secret_key'), $start, 4)); $mod = dechex($idx); if ($part1 > $part2) { - $mod = dechex(sqrt(($part1 - $part2) * _PRIME / pi())); + $mod = dechex(sqrt(($part1 - $part2) * getConfig('_PRIME') / pi())); } elseif ($part2 > $part1) { - $mod = dechex(sqrt(($part2 - $part1) * _PRIME / pi())); + $mod = dechex(sqrt(($part2 - $part1) * getConfig('_PRIME') / pi())); } $mod = substr(round($mod), 0, 4); - $mod = str_repeat('0', 4-strlen($mod)).$mod; - //* DEBUG: */ echo "*".$start."=".$mod."*
"; + $mod = str_repeat('0', 4-strlen($mod)) . $mod; + //* DEBUG: */ echo "*" . $start.'=' . $mod."*
"; $start += 4; $newHash .= $mod; } // END - for - //* DEBUG: */ print($passHash."
".$newHash." (".strlen($newHash).")"); + //* DEBUG: */ print($passHash."
" . $newHash." (".strlen($newHash).')'); $ret = generateHash($newHash, getConfig('master_salt')); //* DEBUG: */ print($ret."
\n"); } else { // Hash it simple - //* DEBUG: */ echo "--".$passHash."--
\n"; + //* DEBUG: */ echo "--" . $passHash."--
\n"; $ret = md5($passHash); - //* DEBUG: */ echo "++".$ret."++
\n"; + //* DEBUG: */ echo "++" . $ret."++
\n"; } // Return result @@ -2219,35 +2208,48 @@ function generatePassString($passHash) { } // Fix "deleted" cookies -function FIX_DELETED_COOKIES ($cookies) { +function fixDeletedCookies ($cookies) { // Is this an array with entries? if ((is_array($cookies)) && (count($cookies) > 0)) { // Then check all cookies if they are marked as deleted! foreach ($cookies as $cookieName) { // Is the cookie set to "deleted"? - if (get_session($cookieName) == "deleted") { - set_session($cookieName, ""); - } + if (getSession($cookieName) == 'deleted') { + setSession($cookieName, ''); + } // END - if } // END - foreach } // END - if } // Output error messages in a fasioned way and die... -function mxchange_die ($msg) { - global $footer; +function app_die ($F, $L, $message) { + // Check if Script is already dieing and not let it kill itself another 1000 times + if (!isset($GLOBALS['app_died'])) { + // Make sure, that the script realy realy diese here and now + $GLOBALS['app_died'] = true; - // Load the message template - LOAD_TEMPLATE("admin_settings_saved", false, $msg); + // Load header + loadIncludeOnce('inc/header.php'); - // Load footer - include(PATH."inc/footer.php"); + // Rewrite message for output + $message = sprintf(getMessage('MXCHANGE_HAS_DIED'), basename($F), $L, $message); - // Exit explicitly - exit; + // Better log this message away + DEBUG_LOG($F, $L, $message); + + // Load the message template + LOAD_TEMPLATE('admin_settings_saved', false, $message); + + // Load footer + loadIncludeOnce('inc/footer.php'); + } else { + // Script tried to kill itself twice + debug_report_bug('Script wanted to kill itself more than once! Raw message=' . $message . ', file/function=' . $F . ', line=' . $L); + } } // Display parsing time and number of SQL queries in footer -function DISPLAY_PARSING_TIME_FOOTER() { +function displayParsingTime() { // Is the timer started? if (!isset($GLOBALS['startTime'])) { // Abort here @@ -2258,11 +2260,11 @@ function DISPLAY_PARSING_TIME_FOOTER() { $endTime = microtime(true); // "Explode" both times - $start = explode(" ", $GLOBALS['startTime']); - $end = explode(" ", $endTime); + $start = explode(' ', $GLOBALS['startTime']); + $end = explode(' ', $endTime); $runTime = $end[0] - $start[0]; if ($runTime < 0) $runTime = 0; - $runTime = TRANSLATE_COMMA($runTime); + $runTime = translateComma($runTime); // Prepare output $content = array( @@ -2272,62 +2274,31 @@ function DISPLAY_PARSING_TIME_FOOTER() { ); // Load the template - LOAD_TEMPLATE("show_timings", false, $content); -} - -// Unset/set session variables -function set_session ($var, $value) { - global $CSS; - - // Abort in CSS mode here - if ($CSS == 1) return true; - - // Trim value and session variable - $var = trim(SQL_ESCAPE($var)); $value = trim($value); - - // Is the session variable set? - if (("".$value."" == "") && (isSessionVariableSet($var))) { - // Remove the session - //* DEBUG: */ echo "UNSET:".$var."=".get_session($var)."
\n"; - unset($_SESSION[$var]); - return session_unregister($var); - } elseif (("".$value."" != '') && (!isSessionVariableSet($var))) { - // Set session - //* DEBUG: */ echo "SET:".$var."=".$value."
\n"; - $_SESSION[$var] = $value; - return session_register($var); - } elseif (!empty($value)) { - // Update session - //* DEBUG: */ echo "UPDATE:".$var."=".$value."
\n"; - $_SESSION[$var] = $value; - return true; - } - - // Ignored (but valid) - //* DEBUG: */ echo "IGNORED:".$var."=".$value."
\n"; - return true; + LOAD_TEMPLATE('show_timings', false, $content); } // Check wether a boolean constant is set // Taken from user comments in PHP documentation for function constant() -function isBooleanConstantAndTrue($constName) { // : Boolean - global $cacheArray; - +function isBooleanConstantAndTrue ($constName) { // : Boolean // Failed by default $res = false; // In cache? - if (isset($cacheArray['const'][$constName])) { + if (isset($GLOBALS['cache_array']['const'][$constName])) { // Use cache - //* DEBUG: */ print __FUNCTION__."(".__LINE__."): ".$constName."-CACHE!
\n"; - $res = $cacheArray['const'][$constName]; + //* DEBUG: */ print __FUNCTION__."(".__LINE__."): " . $constName."-CACHE!
\n"; + $res = ($GLOBALS['cache_array']['const'][$constName] === true); } else { // Check constant - //* DEBUG: */ print __FUNCTION__."(".__LINE__."): ".$constName."-RESOLVE!
\n"; - if (defined($constName)) $res = (constant($constName) === true); + //* DEBUG: */ print __FUNCTION__."(".__LINE__."): " . $constName."-RESOLVE!
\n"; + if (defined($constName)) { + // Found! + //* DEBUG: */ print __FUNCTION__."(".__LINE__."): " . $constName."-FOUND!
\n"; + $res = (constant($constName) === true); + } // END - if // Set cache - $cacheArray['const'][$constName] = $res; + $GLOBALS['cache_array']['const'][$constName] = $res; } //* DEBUG: */ var_dump($res); @@ -2335,162 +2306,687 @@ function isBooleanConstantAndTrue($constName) { // : Boolean return $res; } -// Check wether a session variable is set -function isSessionVariableSet ($var) { - //* DEBUG: */ print __FUNCTION__."(".__LINE__."):var={$var}
\n"; - return (isset($_SESSION[$var])); +// Checks if a given apache module is loaded +function isApacheModuleLoaded ($apacheModule) { + // Check it and return result + return (((function_exists('apache_get_modules')) && (in_array($apacheModule, apache_get_modules()))) || (!function_exists('apache_get_modules'))); } -// Returns wether the value of the session variable or NULL if not set -function get_session ($var) { - global $cacheArray; - // Default is not found! ;-) - $value = null; +// Get current theme name +function getCurrentTheme() { + // The default theme is 'default'... ;-) + $ret = 'default'; + + // Load default theme if not empty from configuration + if (getConfig('default_theme') != '') $ret = getConfig('default_theme'); - // Is the variable there or cached values? - if (isset($cacheArray['session'][$var])) { - // Get cached value (skips a lot SQL_ESCAPE() calles! - //* DEBUG: */ print __FUNCTION__."(".__LINE__."): ".$var."-CACHE!
\n"; - $value = $cacheArray['session'][$var]; - } elseif (isSessionVariableSet($var)) { - // Then get it secured! - //* DEBUG: */ print __FUNCTION__."(".__LINE__."): ".$var."-RESOLVE!
\n"; - $value = SQL_ESCAPE($_SESSION[$var]); + if (!isSessionVariableSet('mxchange_theme')) { + // Set default theme + setSession('mxchange_theme', $ret); + } elseif ((isSessionVariableSet('mxchange_theme')) && (GET_EXT_VERSION('sql_patches') >= '0.1.4')) { + //die("
".print_r($GLOBALS['cache_array']['themes'], true)."
"); + // Get theme from cookie + $ret = getSession('mxchange_theme'); - // Cache the value - $cacheArray['session'][$var] = $value; + // Is it valid? + if (getThemeId($ret) == 0) { + // Fix it to default + $ret = 'default'; + } // END - if + } elseif ((!isInstalled()) && ((isInstalling()) || (getOutputMode() == true)) && ((REQUEST_ISSET_GET('theme')) || (REQUEST_ISSET_POST('theme')))) { + // Prepare FQFN for checking + $theme = sprintf("%stheme/%s/theme.php", constant('PATH'), REQUEST_GET('theme')); + + // Installation mode active + if ((REQUEST_ISSET_GET('theme')) && (isFileReadable($theme))) { + // Set cookie from URL data + setSession('mxchange_theme', REQUEST_GET('theme')); + } elseif (isFileReadable(sprintf("%stheme/%s/theme.php", constant('PATH'), SQL_ESCAPE(REQUEST_POST('theme'))))) { + // Set cookie from posted data + setSession('mxchange_theme', SQL_ESCAPE(REQUEST_POST('theme'))); + } + + // Set return value + $ret = getSession('mxchange_theme'); + } else { + // Invalid design, reset cookie + setSession('mxchange_theme', $ret); + } + + // Add (maybe) found theme.php file to inclusion list + $INC = sprintf("theme/%s/theme.php", SQL_ESCAPE($ret)); + + // Try to load the requested include file + if (isIncludeReadable($INC)) ADD_INC_TO_POOL($INC); + + // Return theme value + return $ret; +} + +// Get id from theme +function getThemeId ($name) { + // Is the extension 'theme' installed? + if (!EXT_IS_ACTIVE('theme')) { + // Then abort here + return 0; } // END - if - // Return the value - return $value; + // Default id + $id = 0; + + // Is the cache entry there? + if (isset($GLOBALS['cache_array']['themes']['id'][$name])) { + // Get the version from cache + $id = $GLOBALS['cache_array']['themes']['id'][$name]; + + // Count up + incrementConfigEntry('cache_hits'); + } elseif (GET_EXT_VERSION('cache') != '0.1.8') { + // Check if current theme is already imported or not + $result = SQL_QUERY_ESC("SELECT `id` FROM `{!_MYSQL_PREFIX!}_themes` WHERE theme_path='%s' LIMIT 1", + array($name), __FUNCTION__, __LINE__); + + // Entry found? + if (SQL_NUMROWS($result) == 1) { + // Fetch data + list($id) = SQL_FETCHROW($result); + } // END - if + + // Free result + SQL_FREERESULT($result); + } + + // Return id + return $id; } -// Send notification to admin -function SEND_ADMIN_NOTIFICATION($subject, $templateName, $content=array(), $uid="0") { - if (GET_EXT_VERSION("admins") >= "0.4.1") { - // Send new way - SEND_ADMIN_EMAILS_PRO($subject, $templateName, $content, $uid); + +// Generates an error code from given account status +function generateErrorCodeFromUserStatus ($status) { + // @TODO The status should never be empty + if (empty($status)) { + // Something really bad happend here + debug_report_bug(__FUNCTION__ . ': status is empty.'); + } // END - if + + // Default error code if unknown account status + $errorCode = getCode('UNKNOWN_STATUS'); + + // Generate constant name + $constantName = sprintf("ID_%s", $status); + + // Is the constant there? + if (isCodeSet($constantName)) { + // Then get it! + $errorCode = getCode($constantName); } else { - // Send outdated way - $msg = LOAD_EMAIL_TEMPLATE($templateName, $content, $uid); - SEND_ADMIN_EMAILS($subject, $msg); + // Unknown status + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Unknown error status %s detected.", $status)); } + + // Return error code + return $errorCode; +} + +// Function to search for the last modifified file +function searchDirsRecursive ($dir, &$last_changed) { + // Get dir as array + //* DEBUG: */ print __FUNCTION__."(".__LINE__."):dir=" . $dir."
\n"; + // Does it match what we are looking for? (We skip a lot files already!) + // RegexPattern to exclude ., .., .revision, .svn, debug.log or .cache in the filenames + $excludePattern = '@(\.revision|debug\.log|\.cache|config\.php)$@'; + $ds = getArrayFromDirectory($dir, '', true, false, array(), '.php', $excludePattern); + //* DEBUG: */ print __FUNCTION__."(".__LINE__."):ds[]=".count($ds)."
\n"; + + // Walk through all entries + foreach ($ds as $d) { + // Generate proper FQFN + $FQFN = str_replace('//', '/', constant('PATH') . $dir. '/'. $d); + + // Is it a file and readable? + //* DEBUG: */ print __FUNCTION__."(".__LINE__."):FQFN={$FQFN}
\n"; + if (isDirectory($FQFN)) { + // $FQFN is a directory so also crawl into this directory + $newDir = $d; + if (!empty($dir)) $newDir = $dir . '/'. $d; + //* DEBUG: */ print __FUNCTION__."(".__LINE__."):DESCENT: " . $newDir."
\n"; + searchDirsRecursive($newDir, $last_changed); + } elseif (isFileReadable($FQFN)) { + // $FQFN is a filename and no directory + $time = filemtime($FQFN); + //* DEBUG: */ print __FUNCTION__."(".__LINE__."):File: " . $d." found. (".($last_changed['time'] - $time).")
\n"; + if ($last_changed['time'] < $time) { + // This file is newer as the file before + //* DEBUG: */ print __FUNCTION__."(".__LINE__.") - NEWER!
\n"; + $last_changed['path_name'] = $FQFN; + $last_changed['time'] = $time; + } // END - if + } + } // END - foreach } -// Destroy user session -function destroy_user_session () { - // Remove all user data from session - return ((set_session("userid", "")) && (set_session("u_hash", "")) && (set_session("lifetime", ""))); -} -// Merges an array together but only if both are arrays -function merge_array ($array1, $array2) { - // Are both an array? - if ((is_array($array1)) && (is_array($array2))) { - // Merge all together - return array_merge($array1, $array2); - } elseif (is_array($array1)) { - // Return left array - return $array1; + +// "Getter" for revision/version data +function getActualVersion ($type = 'Revision') { + // By default nothing is new... ;-) + $new = false; + + if (EXT_IS_ACTIVE('cache')) { + // Check if REQUEST_GET('check_revision_data') is setted (switch for manually rewrite the .revision-File) + if (REQUEST_ISSET_GET('check_revision_data') && REQUEST_GET('check_revision_data') == 'yes') { + // Force rebuild by URL parameter + $new = true; + } elseif (( + !isset($GLOBALS['cache_array']['revision'][$type]) + ) || ( + count($GLOBALS['cache_array']['revision']) < 3 + ) || ( + !$GLOBALS['cache_instance']->loadCacheFile('revision') + )) { + // Out-dated cache + $new = true; + } // END - if + + // Is the cache file outdated/invalid? + if ($new === true) { + // Reload the cache file + $GLOBALS['cache_instance']->loadCacheFile('revision'); + + // Destroy cache file + $GLOBALS['cache_instance']->destroyCacheFile(false, true); + + // @TODO shouldn't do the unset and the reloading $GLOBALS['cache_instance']->destroyCacheFile() Or a new methode like forceCacheReload('revision')? + unset($GLOBALS['cache_array']['revision']); + + // Reload load_cach-revison.php + loadInclude('inc/loader/load_cache-revision.php'); + + // Abort here + return; + } // END - if + + // Return found value + return $GLOBALS['cache_array']['revision'][$type][0]; + } else { + // Old Version without ext-cache active (deprecated ?) + + // FQFN of revision file + $FQFN = sprintf("%sinc/cache/.revision", constant('PATH')); + + // Check if REQUEST_GET('check_revision_data') is setted (switch for manually rewrite the .revision-File) + if ((REQUEST_ISSET_GET('check_revision_data')) && (REQUEST_GET('check_revision_data') == 'yes')) { + // Forced rebuild of .revision file + $new = true; + } else { + // Check for revision file + if (!isFileReadable($FQFN)) { + // Not found, so we need to create it + $new = true; + } else { + // Revision file found + $ins_vers = explode("\n", readFromFile($FQFN)); + + // Get array for mapping information + $mapper = array_flip(getSearchFor()); + //* DEBUG: */ print("
".print_r($mapper, true).print_r($ins_vers, true)."
"); + + // Is the content valid? + if ((!is_array($ins_vers)) || (count($ins_vers) <= 0) || (!isset($ins_vers[$mapper[$type]])) || (trim($ins_vers[$mapper[$type]]) == '') || ($ins_vers[0]) == "new") { + // File needs update! + $new = true; + } else { + // Return found value + return trim($ins_vers[$mapper[$type]]); + } + } + } + + // Has it been updated? + if ($new === true) { + writeToFile($FQFN, implode("\n", getArrayFromActualVersion())); + } // END - if } +} + +// Repares an array we are looking for +// The returned Array is needed twice (in getArrayFromActualVersion() and in getActualVersion() in the old .revision-fallback) so I puted it in an extra function to not polute the global namespace +function getSearchFor () { + // Add Revision, Date, Tag and Author + $searchFor = array('Revision', 'Date', 'Tag', 'Author'); - // Something wired happened here... - print(__FUNCTION__.":
");
-	debug_print_backtrace();
-	die("
"); + // Return the created array + return $searchFor; } -// Debug message logger -function DEBUG_LOG ($file, $line, $message, $force=true) { - // Is debug mode enabled? - if ((isBooleanConstantAndTrue('DEBUG_MODE')) || ($force)) { - // Log this message away - $fp = fopen(PATH."inc/cache/debug.log", 'a') or mxchange_die("Cannot write logfile debug.log!"); - fwrite($fp, date("d.m.Y|H:i:s", time())."|".basename($file)."|".$line."|".strip_tags($message)."\n"); - fclose($fp); + +// @TODO Please describe this function +function getArrayFromActualVersion () { + // Init variables + $next_dir = ''; + + // Directory to start with search + $last_changed = array( + 'path_name' => '', + 'time' => 0 + ); + + // Init return array + $akt_vers = array(); + + // Init value for counting the founded keywords + $res = 0; + + // Searches all Files and there date of the last modifikation and puts the newest File in $last_changed. + searchDirsRecursive($next_dir, $last_changed); // @TODO small change to API to $last_changed = searchDirsRecursive($next_dir, $time); + + // Get file + $last_file = readFromFile($last_changed['path_name']); + + // Get all the keywords to search for + $searchFor = getSearchFor(); + + // This foreach loops the $searchFor-Tags (array('Revision', 'Date', 'Tag', 'Author') --> could easaly extended in the future) + foreach ($searchFor as $search) { + // Searches for "$search-tag:VALUE$" or "$search-tag::VALUE$"(the stylish keywordversion ;-)) in the lates modified file + $res += preg_match('@\$' . $search.'(:|::) (.*) \$@U', $last_file, $t); + // This trimms the search-result and puts it in the $akt_vers-return array + if (isset($t[2])) $akt_vers[$search] = trim($t[2]); + } // END - foreach + + // Save the last-changed filename for debugging + $akt_vers['File'] = $last_changed['path_name']; + + // at least 3 keyword-Tags are needed for propper values + if ($res && $res >= 3 + && isset($akt_vers['Revision']) && $akt_vers['Revision'] != '' + && isset($akt_vers['Date']) && $akt_vers['Date'] != '' + && isset($akt_vers['Tag']) && $akt_vers['Tag'] != '') { + // Prepare content witch need special treadment + + // Prepare timestamp for date + preg_match('@(....)-(..)-(..) (..):(..):(..)@', $akt_vers['Date'], $match_d); + $akt_vers['Date'] = mktime($match_d[4], $match_d[5], $match_d[6], $match_d[2], $match_d[3], $match_d[1]); + + // Add author to the Tag if the author is set and is not quix0r (lead coder) + if ((isset($akt_vers['Author'])) && ($akt_vers['Author'] != "quix0r")) { + $akt_vers['Tag'] .= '-'.strtoupper($akt_vers['Author']); + } // END - if + + } else { + // No valid Data from the last modificated file so read the Revision from the Server. Fallback-solution!! Should not be removed I think. + $version = sendGetRequest('check-updates3.php'); + + // Prepare content + // Only sets not setted or not proper values to the Online-Server-Fallback-Solution + if (!isset($akt_vers['Revision']) || $akt_vers['Revision'] == '') $akt_vers['Revision'] = trim($version[10]); + if (!isset($akt_vers['Date']) || $akt_vers['Date'] == '') $akt_vers['Date'] = trim($version[9]); + if (!isset($akt_vers['Tag']) || $akt_vers['Tag'] == '') $akt_vers['Tag'] = trim($version[8]); + if (!isset($akt_vers['Author']) || $akt_vers['Author'] == '') $akt_vers['Author'] = "quix0r"; + } + + // Return prepared array + return $akt_vers; +} + +// Back-ported from the new ship-simu engine. :-) +function debug_get_printable_backtrace () { + // Init variable + $backtrace = "
    \n"; + + // Get and prepare backtrace for output + $backtraceArray = debug_backtrace(); + foreach ($backtraceArray as $key => $trace) { + if (!isset($trace['file'])) $trace['file'] = __FUNCTION__; + if (!isset($trace['line'])) $trace['line'] = __LINE__; + if (!isset($trace['args'])) $trace['args'] = array(); + $backtrace .= "
  1. ".basename($trace['file']).":" . $trace['line'].", " . $trace['function'].'('.count($trace['args']).")
  2. \n"; + } // END - foreach + + // Close it + $backtrace .= "
\n"; + + // Return the backtrace + return $backtrace; +} + +// Output a debug backtrace to the user +function debug_report_bug ($message = '') { + // Init message + $debug = ''; + // Is the optional message set? + if (!empty($message)) { + // Use and log it + $debug = sprintf("Note: %s
\n", + $message + ); + + // @TODO Add a little more infos here + DEBUG_LOG(__FUNCTION__, __LINE__, $message); } // END - if + + // Add output + $debug .= "Please report this bug at bugs.mxchange.org and include the logfile from inc/cache/debug.log in your report (you can now attach files):
";
+	$debug .= debug_get_printable_backtrace();
+	$debug .= "
\nRequest-URI: " . $_SERVER['REQUEST_URI']."
\n"; + $debug .= "Thank you for finding bugs."; + + // And abort here + // @TODO This cannot be rewritten to app_die(), try to find a solution for this. + die($debug); +} + +// Generates a ***weak*** seed (taken from de.php.net/mt_srand) +function generateSeed () { + list($usec, $sec) = explode(' ', microtime()); + $microTime = (((float)$sec + (float)$usec)) * 100000; + return $microTime; +} + +// Converts a message code to a human-readable message +function convertCodeToMessage ($code) { + $message = ''; + switch ($code) { + case getCode('LOGOUT_DONE') : $message = getMessage('LOGOUT_DONE'); break; + case getCode('LOGOUT_FAILED') : $message = "{--LOGOUT_FAILED--}"; break; + case getCode('DATA_INVALID') : $message = getMessage('MAIL_DATA_INVALID'); break; + case getCode('POSSIBLE_INVALID') : $message = getMessage('MAIL_POSSIBLE_INVALID'); break; + case getCode('ACCOUNT_LOCKED') : $message = getMessage('MEMBER_ACCOUNT_LOCKED_UNC'); break; + case getCode('USER_404') : $message = getMessage('USER_NOT_FOUND'); break; + case getCode('STATS_404') : $message = getMessage('MAIL_STATS_404'); break; + case getCode('ALREADY_CONFIRMED'): $message = getMessage('MAIL_ALREADY_CONFIRMED'); break; + + case getCode('ERROR_MAILID'): + if (EXT_IS_ACTIVE($ext, true)) { + $message = getMessage('ERROR_CONFIRMING_MAIL'); + } else { + $message = sprintf(getMessage('EXTENSION_PROBLEM_NOT_INSTALLED'), 'mailid'); + } + break; + + case getCode('EXTENSION_PROBLEM'): + if (REQUEST_ISSET_GET('ext')) { + $message = generateExtensionInactiveNotInstalledMessage(REQUEST_GET('ext')); + } else { + $message = getMessage('EXTENSION_PROBLEM_UNSET_EXT'); + } + break; + + case getCode('COOKIES_DISABLED') : $message = getMessage('LOGIN_NO_COOKIES'); break; + case getCode('BEG_SAME_AS_OWN') : $message = getMessage('BEG_SAME_UID_AS_OWN'); break; + case getCode('LOGIN_FAILED') : $message = getMessage('LOGIN_FAILED_GENERAL'); break; + case getCode('MODULE_MEM_ONLY') : $message = sprintf(getMessage('MODULE_MEM_ONLY'), REQUEST_GET('mod')); break; + + default: + // Missing/invalid code + $message = sprintf(getMessage('UNKNOWN_MAILID_CODE'), $code); + + // Log it + DEBUG_LOG(__FUNCTION__, __LINE__, $message); + break; + } // END - switch + + // Return the message + return $message; } -// Reads a directory with PHP files in and gets only files back -function GET_DIR_AS_ARRAY ($baseDir, $prefix) { - $INCs = array(); - // Open directory - $dirPointer = opendir($baseDir) or mxchange_die("Cannot read ".basename($baseDir)." path!"); +// Generate a "link" for the given admin id (aid) +function generateAdminLink ($aid) { + // No assigned admin is default + $admin = "{--ADMIN_NO_ADMIN_ASSIGNED--}"; - // Read all entries - while ($baseFile = readdir($dirPointer)) { - // Load file only if extension is active - // Make full path - $file = $baseDir.$baseFile; - - // Is this a valid reset file? - //* DEBUG: */ print __FUNCTION__."(".__LINE__."):baseDir={$baseDir},prefix={$prefix},baseFile={$baseFile}
\n"; - if ((FILE_READABLE($file)) && (substr($baseFile, 0, strlen($prefix)) == $prefix) && (substr($baseFile, -4, 4) == ".php")) { - // Remove both for extension name - $extName = substr($baseFile, strlen($prefix), -4); - - // Try to find it - $extId = GET_EXT_ID($extName); - - // Is the extension valid and active? - if (($extId > 0) && (EXT_IS_ACTIVE($extName))) { - // Then add this file - $INCs[] = $file; - } elseif ($extId == 0) { - // Add non-extension files as well - $INCs[] = $file; + // Zero? = Not assigned + if (bigintval($aid) > 0) { + // Load admin's login + $login = getAdminLogin($aid); + + // Is the login valid? + if ($login != '***') { + // Is the extension there? + if (EXT_IS_ACTIVE('admins')) { + // Admin found + $admin = "" . $login.""; + } else { + // Extension not found + $admin = sprintf(getMessage('EXTENSION_PROBLEM_NOT_INSTALLED'), 'admins'); } + } else { + // Maybe deleted? + $admin = "
".sprintf(getMessage('ADMIN_ID_404'), $aid)."
"; + } + } // END - if + + // Return result + return $admin; +} + +// Compile characters which are allowed in URLs +function compileUriCode ($code, $simple = true) { + // Compile constants + if (!$simple) $code = str_replace('{--', '".', str_replace('--}', '."', $code)); + + // Compile QUOT and other non-HTML codes + $code = str_replace('{DOT}', '.', + str_replace('{SLASH}', '/', + str_replace('{QUOT}', "'", + str_replace('{DOLLAR}', '$', + str_replace('{OPEN_ANCHOR}', '(', + str_replace('{CLOSE_ANCHOR}', ')', + str_replace('{OPEN_SQR}', '[', + str_replace('{CLOSE_SQR}', ']', + str_replace('{PER}', '%', + $code + ))))))))); + + // Return compiled code + return $code; +} + +// Function taken from user comments on www.php.net / function eregi() +function isUrlValidSimple ($url) { + // Prepare URL + $url = strip_tags(str_replace("\\", '', COMPILE_CODE(urldecode($url)))); + + // Allows http and https + $http = "(http|https)+(:\/\/)"; + // Test domain + $domain1 = "([[:alnum:]]([-[:alnum:]])*\.)?([[:alnum:]][-[:alnum:]\.]*[[:alnum:]])(\.[[:alpha:]]{2,5})?"; + // Test double-domains (e.g. .de.vu) + $domain2 = "([-[:alnum:]])?(\.[[:alnum:]][-[:alnum:]\.]*[[:alnum:]])(\.[[:alpha:]]{2,5})(\.[[:alpha:]]{2,5})?"; + // Test IP number + $ip = "([[:digit:]]{1,3})\.([[:digit:]]{1,3})\.([[:digit:]]{1,3})\.([[:digit:]]{1,3})"; + // ... directory + $dir = "((/)+([-_\.[:alnum:]])+)*"; + // ... page + $page = "/([-_[:alnum:]][-\._[:alnum:]]*\.[[:alnum:]]{2,5})?"; + // ... and the string after and including question character + $getstring1 = "([\?/]([[:alnum:]][-\._%[:alnum:]]*(=)?([-\@\._:%[:alnum:]])+)(&([[:alnum:]]([-_%[:alnum:]])*(=)?([-\@\[\._:%[:alnum:]])+(\])*))*)?"; + // Pattern for URLs like http://url/dir/doc.html?var=value + $pattern['d1dpg1'] = $http . $domain1 . $dir . $page . $getstring1; + $pattern['d2dpg1'] = $http . $domain2 . $dir . $page . $getstring1; + $pattern['ipdpg1'] = $http . $ip . $dir . $page . $getstring1; + // Pattern for URLs like http://url/dir/?var=value + $pattern['d1dg1'] = $http . $domain1 . $dir.'/' . $getstring1; + $pattern['d2dg1'] = $http . $domain2 . $dir.'/' . $getstring1; + $pattern['ipdg1'] = $http . $ip . $dir.'/' . $getstring1; + // Pattern for URLs like http://url/dir/page.ext + $pattern['d1dp'] = $http . $domain1 . $dir . $page; + $pattern['d1dp'] = $http . $domain2 . $dir . $page; + $pattern['ipdp'] = $http . $ip . $dir . $page; + // Pattern for URLs like http://url/dir + $pattern['d1d'] = $http . $domain1 . $dir; + $pattern['d2d'] = $http . $domain2 . $dir; + $pattern['ipd'] = $http . $ip . $dir; + // Pattern for URLs like http://url/?var=value + $pattern['d1g1'] = $http . $domain1 . '/' . $getstring1; + $pattern['d2g1'] = $http . $domain2 . '/' . $getstring1; + $pattern['ipg1'] = $http . $ip . '/' . $getstring1; + // Pattern for URLs like http://url?var=value + $pattern['d1g12'] = $http . $domain1 . $getstring1; + $pattern['d2g12'] = $http . $domain2 . $getstring1; + $pattern['ipg12'] = $http . $ip . $getstring1; + // Test all patterns + $reg = false; + foreach ($pattern as $key => $pat) { + // Debug regex? + if (isDebugRegExpressionEnabled()) { + // @TODO Are these convertions still required? + $pat = str_replace('.', "\.", $pat); + $pat = str_replace('@', "\@", $pat); + echo $key."= " . $pat . "
"; } // END - if - } // END - while - // Close directory - closedir($dirPointer); + // Check if expression matches + $reg = ($reg || preg_match(('^' . $pat.'^'), $url)); - // Sort array - asort($INCs); + // Does it match? + if ($reg === true) break; + } - // Return array with include files - return $INCs; + // Return true/false + return $reg; +} + +// Wtites data to a config.php-style file +// @TODO Rewrite this function to use readFromFile() and writeToFile() +function changeDataInFile ($FQFN, $comment, $prefix, $suffix, $DATA, $seek=0) { + // Initialize some variables + $done = false; + $seek++; + $next = -1; + $found = false; + + // Is the file there and read-/write-able? + if ((isFileReadable($FQFN)) && (is_writeable($FQFN))) { + $search = 'CFG: ' . $comment; + $tmp = $FQFN . '.tmp'; + + // Open the source file + $fp = fopen($FQFN, 'r') or OUTPUT_HTML('READ: ' . $FQFN . '
'); + + // Is the resource valid? + if (is_resource($fp)) { + // Open temporary file + $fp_tmp = fopen($tmp, 'w') or OUTPUT_HTML('WRITE: ' . $tmp . '
'); + + // Is the resource again valid? + if (is_resource($fp_tmp)) { + while (!feof($fp)) { + // Read from source file + $line = fgets ($fp, 1024); + + if (strpos($line, $search) > -1) { $next = 0; $found = true; } + + if ($next > -1) { + if ($next === $seek) { + $next = -1; + $line = $prefix . $DATA . $suffix . "\n"; + } else { + $next++; + } + } // END - if + + // Write to temp file + fputs($fp_tmp, $line); + } // END - while + + // Close temp file + fclose($fp_tmp); + + // Finished writing tmp file + $done = true; + } // END - if + + // Close source file + fclose($fp); + + if (($done === true) && ($found === true)) { + // Copy back tmp file and delete tmp :-) + copyFileVerified($tmp, $FQFN, 0644); + return removeFile($tmp); + } elseif ($found === false) { + OUTPUT_HTML('CHANGE: 404!'); + } else { + OUTPUT_HTML('TMP: UNDONE!'); + } + } + } else { + // File not found, not readable or writeable + OUTPUT_HTML('404: ' . $FQFN . '
'); + } + + // An error was detected! + return false; +} +// Send notification to admin +function sendAdminNotification ($subject, $templateName, $content=array(), $uid = '0') { + if (GET_EXT_VERSION('admins') >= '0.4.1') { + // Send new way + SEND_ADMIN_EMAILS_PRO($subject, $templateName, $content, $uid); + } else { + // Send out out-dated way + $message = LOAD_EMAIL_TEMPLATE($templateName, $content, $uid); + SEND_ADMIN_EMAILS($subject, $message); + } } + +// Debug message logger +function DEBUG_LOG ($funcFile, $line, $message, $force=true) { + // Is debug mode enabled? + if ((isDebugModeEnabled()) || ($force === true)) { + // Remove CRLF + $message = str_replace("\r", '', str_replace("\n", '', $message)); + + // Log this message away, we better don't call app_die() here to prevent an endless loop + $fp = fopen(constant('PATH') . 'inc/cache/debug.log', 'a') or die(__FUNCTION__.'['.__LINE__.']: Cannot write logfile debug.log!'); + fwrite($fp, date('d.m.Y|H:i:s', time()) . '|' . getModule() . '|' . basename($funcFile) . '|' . $line . '|' . strip_tags($message) . "\n"); + fclose($fp); + } // END - if +} + // Load more reset scripts -function RESET_ADD_INCLUDES () { +function runResetIncludes () { // Is the reset set or old sql_patches? - if ((!defined('__DAILY_RESET')) || (EXT_VERSION_IS_OLDER("sql_patches", "0.4.5"))) { + if ((!isResetModeEnabled()) || (EXT_VERSION_IS_OLDER('sql_patches', '0.4.5'))) { // Then abort here - return array(); + DEBUG_LOG(__FUNCTION__, __LINE__, 'Cannot run reset! Please report this bug. Thanks'); } // END - if // Get more daily reset scripts - $INC_POOL = GET_DIR_AS_ARRAY(PATH."inc/reset/", "reset_"); + SET_INC_POOL(getArrayFromDirectory('inc/reset/', 'reset_')); // Update database - if (!defined('DEBUG_RESET')) UPDATE_CONFIG("last_update", time()); + if (getConfig('DEBUG_RESET') != 'Y') updateConfiguration('last_update', time()); - // Create current week mark - $currWeek = date("W", time()); + // Is the config entry set? + if (GET_EXT_VERSION('sql_patches') >= '0.4.2') { + // Create current week mark + $currWeek = date('W', time()); - // Has it changed? - if (getConfig('last_week') != $currWeek) { - // Include weekly reset scripts - $INC_POOL = merge_array($INC_POOL, GET_DIR_AS_ARRAY(PATH."inc/weekly/", "weekly_")); + // Has it changed? + if (getConfig('last_week') != $currWeek) { + // Include weekly reset scripts + MERGE_INC_POOL(getArrayFromDirectory('inc/weekly/', 'weekly_')); - // Update config - if (!defined('DEBUG_WEEKLY')) UPDATE_CONFIG("last_week", $currWeek); - } // END - if + // Update config + if (getConfig('DEBUG_WEEKLY') != 'Y') updateConfiguration('last_week', $currWeek); + } // END - if - // Create current month mark - $currMonth = date("m", time()); + // Create current month mark + $currMonth = date('m', time()); - // Has it changed? - if (getConfig('last_month') != $currMonth) { - // Include monthly reset scripts - $INC_POOL = merge_array($INC_POOL, GET_DIR_AS_ARRAY(PATH."inc/monthly/", "monthly_")); + // Has it changed? + if (getConfig('last_month') != $currMonth) { + // Include monthly reset scripts + MERGE_INC_POOL(getArrayFromDirectory('inc/monthly/', 'monthly_')); - // Update config - if (!defined('DEBUG_MONTHLY')) UPDATE_CONFIG("last_month", $currMonth); + // Update config + if (getConfig('DEBUG_MONTHLY') != 'Y') updateConfiguration('last_month', $currMonth); + } // END - if } // END - if - // Return array - return $INC_POOL; + // Run the filter + runFilterChain('load_includes'); } + // Handle extra values -function HANDLE_EXTRA_VALUES ($filterFunction, $value, $extraValue) { +function handleExtraValues ($filterFunction, $value, $extraValue) { // Default is the value itself $ret = $value; @@ -2521,31 +3017,27 @@ function HANDLE_EXTRA_VALUES ($filterFunction, $value, $extraValue) { // Return the value return $ret; } -// Check if given FQFN is a readable file -function FILE_READABLE($fqfn) { - // Check all... - return ((file_exists($fqfn)) && (is_file($fqfn)) && (is_readable($fqfn))); -} + // Converts timestamp selections into a timestamp -function CONVERT_SELECTIONS_TO_TIMESTAMP(&$POST, &$DATA, &$id, &$skip) { +function convertSelectionsToTimestamp (&$POST, &$DATA, &$id, &$skip) { // Init test variable - $test2 = ""; + $test2 = ''; // Get last three chars $test = substr($id, -3); // Improved way of checking! :-) - if (in_array($test, array("_ye", "_mo", "_we", "_da", "_ho", "_mi", "_se"))) { + if (in_array($test, array('_ye', '_mo', '_we', '_da', '_ho', '_mi', '_se'))) { // Found a multi-selection for timings? $test = substr($id, 0, -3); - if ((isset($POST[$test."_ye"])) && (isset($POST[$test."_mo"])) && (isset($POST[$test."_we"])) && (isset($POST[$test."_da"])) && (isset($POST[$test."_ho"])) && (isset($POST[$test."_mi"])) && (isset($POST[$test."_se"])) && ($test != $test2)) { + if ((isset($POST[$test.'_ye'])) && (isset($POST[$test.'_mo'])) && (isset($POST[$test.'_we'])) && (isset($POST[$test.'_da'])) && (isset($POST[$test.'_ho'])) && (isset($POST[$test.'_mi'])) && (isset($POST[$test.'_se'])) && ($test != $test2)) { // Generate timestamp - $POST[$test] = CREATE_TIMESTAMP_FROM_SELECTIONS($test, $POST); + $POST[$test] = createTimestampFromSelections($test, $POST); $DATA[] = sprintf("%s='%s'", $test, $POST[$test]); // Remove data from array - foreach (array("ye", "mo", "we", "da", "ho", "mi", "se") as $rem) { - unset($POST[$test."_".$rem]); + foreach (array('ye', 'mo', 'we', 'da', 'ho', 'mi', 'se') as $rem) { + unset($POST[$test.'_' . $rem]); } // END - foreach // Skip adding @@ -2553,83 +3045,85 @@ function CONVERT_SELECTIONS_TO_TIMESTAMP(&$POST, &$DATA, &$id, &$skip) { } // END - if } else { // Process this entry - $skip = false; $test2 = ""; + $skip = false; + $test2 = ''; } } + // Reverts the german decimal comma into Computer decimal dot -function REVERT_COMMA ($str) { +function convertCommaToDot ($str) { // Default float is not a float... ;-) $float = false; // Which language is selected? - switch (GET_LANGUAGE()) { - case "de": // German language + switch (getLanguage()) { + case 'de': // German language // Remove german thousand dots first - $str = str_replace(".", "", $str); + $str = str_replace('.', '', $str); // Replace german commata with decimal dot and cast it - $float = (float)str_replace(",", ".", $str); + $float = (float)str_replace(',', '.', $str); break; default: // US and so on // Remove thousand dots first and cast - $float = (float)str_replace(",", "", $str); + $float = (float)str_replace(',', '', $str); break; } // Return float return $float; } + // Handle menu-depending failed logins and return the rendered content function HANDLE_LOGIN_FAILTURES ($accessLevel) { // Default output is empty ;-) - $OUT = ""; + $OUT = ''; // Is the session data set? - if ((isSessionVariableSet('mxchange_'.$accessLevel.'_failtures')) && (isSessionVariableSet('mxchange_'.$accessLevel.'_last_fail'))) { + if ((isSessionVariableSet('mxchange_' . $accessLevel.'_failures')) && (isSessionVariableSet('mxchange_' . $accessLevel.'_last_fail'))) { // Ignore zero values - if (get_session('mxchange_'.$accessLevel.'_failtures') > 0) { - // Non-guest has login failtures found, get both data and prepare it for template + if (getSession('mxchange_' . $accessLevel.'_failures') > 0) { + // Non-guest has login failures found, get both data and prepare it for template //* DEBUG: */ print __FUNCTION__."(".__LINE__."):accessLevel={$accessLevel}
\n"; $content = array( - 'login_failtures' => get_session('mxchange_'.$accessLevel.'_failtures'), - 'last_failture' => MAKE_DATETIME(get_session('mxchange_'.$accessLevel.'_last_fail'), "2") + 'login_failures' => getSession('mxchange_' . $accessLevel.'_failures'), + 'last_failure' => generateDateTime(getSession('mxchange_' . $accessLevel.'_last_fail'), '2') ); // Load template - $OUT = LOAD_TEMPLATE("login_failtures", true, $content); + $OUT = LOAD_TEMPLATE('login_failures', true, $content); } // END - if // Reset session data - set_session('mxchange_'.$accessLevel.'_failtures', ""); - set_session('mxchange_'.$accessLevel.'_last_fail', ""); + setSession('mxchange_' . $accessLevel.'_failures', ''); + setSession('mxchange_' . $accessLevel.'_last_fail', ''); } // END - if // Return rendered content return $OUT; } -// Rebuild cache -function REBUILD_CACHE ($cache, $inc="") { - global $cacheInstance, $CSS; +// Rebuild cache +function rebuildCacheFiles ($cache, $inc = '') { // Shall I remove the cache file? - if ((EXT_IS_ACTIVE("cache")) && (is_object($cacheInstance))) { + if ((EXT_IS_ACTIVE('cache')) && (isCacheInstanceValid())) { // Rebuild cache - if ($cacheInstance->loadCacheFile($cache)) { + if ($GLOBALS['cache_instance']->loadCacheFile($cache)) { // Destroy it - $cacheInstance->destroyCacheFile(); + $GLOBALS['cache_instance']->destroyCacheFile(); } // END - if // Include file given? if (!empty($inc)) { // Construct FQFN - $fqfn = sprintf("%sinc/loader/load_cache-%s.php", PATH, $inc); + $INC = sprintf("inc/loader/load_cache-%s.php", $inc); // Is the include there? - if (FILE_READABLE($fqfn)) { + if (isIncludeReadable($INC)) { // And rebuild it from scratch //* DEBUG: */ print __FUNCTION__."(".__LINE__."): inc={$inc} - LOADED!
\n"; - require($fqfn); + loadInclude($INC); } else { // Include not found! DEBUG_LOG(__FUNCTION__, __LINE__, "Include {$inc} not found. cache={$cache}"); @@ -2637,341 +3131,392 @@ function REBUILD_CACHE ($cache, $inc="") { } // END - if } // END - if } -// Purge admin menu cache -function CACHE_PURGE_ADMIN_MENU ($id=0, $action="", $what="", $str="") { - global $cacheInstance; +// Purge admin menu cache +function cachePurgeAdminMenu ($id=0, $action = '', $what = '', $str = '') { // Is the cache extension enabled or no cache instance or admin menu cache disabled? - if (!EXT_IS_ACTIVE("cache")) { + if (!EXT_IS_ACTIVE('cache')) { // Cache extension not active return false; - } elseif (!is_object($cacheInstance)) { + } elseif (!isCacheInstanceValid()) { // No cache instance! - DEBUG_LOG(__FUNCTION__, __LINE__, " No cache instance found."); + DEBUG_LOG(__FUNCTION__, __LINE__, 'No cache instance found.'); return false; - } elseif ((getConfig('cache_admin_menu') == null) || (getConfig('cache_admin_menu') == "N")) { + } elseif ((!isConfigEntrySet('cache_admin_menu')) || (getConfig('cache_admin_menu') != 'Y')) { // Caching disabled (currently experiemental!) return false; } // Experiemental feature! - trigger_error("You have to delete the admin_*.cache files by yourself at this point."); -} -// Translates the "pool type" into human-readable -function TRANSLATE_POOL_TYPE ($type) { - // Default type is unknown - $translated = sprintf(POOL_TYPE_UNKNOWN, $type); - - // Generate constant - $constName = sprintf("POOL_TYPE_%s", $type); - - // Does it exist? - if (defined($constName)) { - // Then use it - $translated = constant($constName); - } // END - if - - // Return "translation" - return $translated; -} -// "Getter" for remote IP number -function GET_REMOTE_ADDR () { - // Get remote ip from environment - $remoteAddr = getenv('REMOTE_ADDR'); - - // Is removeip installed? - if (EXT_IS_ACTIVE("removeip")) { - // Then anonymize it - $remoteAddr = GET_ANONYMOUS_REMOTE_ADDR($remoteAddr); - } // END - if - - // Return it - return $remoteAddr; -} -// "Getter" for remote hostname -function GET_REMOTE_HOST () { - // Get remote ip from environment - $remoteHost = getenv('REMOTE_HOST'); - - // Is removeip installed? - if (EXT_IS_ACTIVE("removeip")) { - // Then anonymize it - $remoteHost = GET_ANONYMOUS_REMOTE_HOST($remoteHost); - } // END - if - - // Return it - return $remoteHost; -} -// "Getter" for user agent -function GET_USER_AGENT () { - // Get remote ip from environment - $userAgent = getenv('HTTP_USER_AGENT'); - - // Is removeip installed? - if (EXT_IS_ACTIVE("removeip")) { - // Then anonymize it - $userAgent = GET_ANONYMOUS_USER_AGENT($userAgent); - } // END - if - - // Return it - return $userAgent; -} -// "Getter" for referer -function GET_REFERER () { - // Get remote ip from environment - $referer = getenv('HTTP_REFERER'); + debug_report_bug("Experimental feature: You have to delete the admin_*.cache files by yourself at this point."); +} + +// Determines the real remote address +function determineRealRemoteAddress () { + // Is a proxy in use? + if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])){ + // Proxy was used + $address = $_SERVER['HTTP_X_FORWARDED_FOR']; + } elseif (isset($_SERVER['HTTP_CLIENT_IP'])){ + // Yet, another proxy + $address = $_SERVER['HTTP_CLIENT_IP']; + } else { + // The regular address when no proxy was used + $address = $_SERVER['REMOTE_ADDR']; + } - // Is removeip installed? - if (EXT_IS_ACTIVE("removeip")) { - // Then anonymize it - $referer = GET_ANONYMOUS_REFERER($referer); + // This strips out the real address from proxy output + if (strstr($address, ',')){ + $addressArray = explode(',', $address); + $address = $addressArray[0]; } // END - if - // Return it - return $referer; + // Return the result + return $address; } // Adds a bonus mail to the queue // This is a high-level function! -function ADD_NEW_BONUS_MAIL ($data, $mode="", $output=true) { +function addNewBonusMail ($data, $mode = '', $output=true) { // Use mode from data if not set and availble ;-) if ((empty($mode)) && (isset($data['mode']))) $mode = $data['mode']; // Generate receiver list - $RECEIVER = GENERATE_RECEIVER_LIST($data['cat'], $data['receiver'], $mode); + $RECEIVER = generateReceiverList($data['cat'], $data['receiver'], $mode); // Receivers added? if (!empty($RECEIVER)) { // Add bonus mail to queue - ADD_BONUS_MAIL_TO_QUEUE( - $data['subject'], - $data['text'], - $RECEIVER, - $data['points'], - $data['seconds'], - $data['url'], - $data['cat'], - $mode, - $data['receiver'] + addBonusMailToQueue( + $data['subject'], + $data['text'], + $RECEIVER, + $data['points'], + $data['seconds'], + $data['url'], + $data['cat'], + $mode, + $data['receiver'] ); // Mail inserted into bonus pool - if ($output) LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_BONUS_SEND); + if ($output) LOAD_TEMPLATE('admin_settings_saved', false, getMessage('ADMIN_BONUS_SEND')); } elseif ($output) { // More entered than can be reached! - LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_MORE_SELECTED); + LOAD_TEMPLATE('admin_settings_saved', false, getMessage('ADMIN_MORE_SELECTED')); } else { // Debug log - DEBUG_LOG(__FUNCTION__, __LINE__, " cat={$data['cat']},receiver={$data['receiver']},data=".base64_encode(serialize($data))." More selected, than available!"); + DEBUG_LOG(__FUNCTION__, __LINE__, "cat={$data['cat']},receiver={$data['receiver']},data=".base64_encode(serialize($data))." More selected, than available!"); } } + // Determines referal id and sets it function DETERMINE_REFID () { - global $CLICK, $_SERVER; - // Check if refid is set - if ((!empty($_GET['user'])) && ($CLICK == 1) && (basename($_SERVER['PHP_SELF']) == "click.php")) { + if ((REQUEST_ISSET_GET('user')) && (basename($_SERVER['PHP_SELF']) == 'click.php')) { // The variable user comes from the click-counter script click.php and we only accept this here - $GLOBALS['refid'] = bigintval($_GET['user']); - } elseif (!empty($_POST['refid'])) { + $GLOBALS['refid'] = bigintval(REQUEST_GET('user')); + } elseif (REQUEST_ISSET_POST('refid')) { // Get referal id from variable refid (so I hope this makes my script more compatible to other scripts) - $GLOBALS['refid'] = SQL_ESCAPE(strip_tags($_POST['refid'])); - } elseif (!empty($_GET['refid'])) { + $GLOBALS['refid'] = strip_tags(REQUEST_POST('refid')); + } elseif (REQUEST_ISSET_GET('refid')) { // Get referal id from variable refid (so I hope this makes my script more compatible to other scripts) - $GLOBALS['refid'] = SQL_ESCAPE(strip_tags($_GET['refid'])); - } elseif (!empty($_GET['ref'])) { + $GLOBALS['refid'] = strip_tags(REQUEST_GET('refid')); + } elseif (REQUEST_ISSET_GET('ref')) { // Set refid=ref (the referal link uses such variable) - $GLOBALS['refid'] = SQL_ESCAPE(strip_tags($_GET['ref'])); - } elseif ((isSessionVariableSet('refid')) && (get_session('refid') != 0)) { + $GLOBALS['refid'] = strip_tags(REQUEST_GET('ref')); + } elseif ((isSessionVariableSet('refid')) && (getSession('refid') != 0)) { // Set session refid als global - $GLOBALS['refid'] = bigintval(get_session('refid')); - } elseif ((GET_EXT_VERSION("sql_patches") != "") && (getConfig('def_refid') > 0)) { + $GLOBALS['refid'] = bigintval(getSession('refid')); + } elseif ((GET_EXT_VERSION('sql_patches') != '') && (getConfig('def_refid') > 0)) { // Set default refid as refid in URL - $GLOBALS['refid'] = bigintval(getConfig('def_refid')); - } elseif ((GET_EXT_VERSION("user") >= "0.3.4") && (getConfig('select_user_zero_refid')) == "Y") { + $GLOBALS['refid'] = getConfig('def_refid'); + } elseif ((GET_EXT_VERSION('user') >= '0.3.4') && (getConfig('select_user_zero_refid')) == 'Y') { // Select a random user which has confirmed enougth mails - $GLOBALS['refid'] = SELECT_RANDOM_REFID(); + $GLOBALS['refid'] = determineRandomReferalId(); } else { // No default ID when sql_patches is not installed or none set $GLOBALS['refid'] = 0; } // Set cookie when default refid > 0 - if (!isSessionVariableSet('refid') || (!empty($GLOBALS['refid'])) || ((get_session('refid') == "0") && (getConfig('def_refid') > 0))) { + if (!isSessionVariableSet('refid') || (!empty($GLOBALS['refid'])) || ((getSession('refid') == '0') && (getConfig('def_refid') > 0))) { // Set cookie - set_session('refid', $GLOBALS['refid']); + setSession('refid', $GLOBALS['refid']); } // END - if // Return determined refid return $GLOBALS['refid']; } -// Destroys the admin session -function DESTROY_ADMIN_SESSION ($destroy = true) { - // Kill maybe existing session variables including array elements - set_session('admin_login', ""); - set_session('admin_md5' , ""); - set_session('admin_last' , ""); - set_session('admin_to' , ""); - - // Destroy session and return status - if ($destroy) { - return @session_destroy(); - } // END - if +// Enables the reset mode. Only call this function if you really want the +// reset to be run! +function enableResetMode () { + // Enable the reset mode + $GLOBALS['reset_enabled'] = true; - // All fine if we shall not really destroy the session - return true; + // Run filters + runFilterChain('reset_enabled'); } -// Checks if a given apache module is loaded -function IF_APACHE_MODULE_LOADED ($apacheModule) { - // Check it and return result - return (((function_exists('apache_get_modules')) && (in_array($apacheModule, apache_get_modules()))) || (!function_exists('apache_get_modules'))); +// Our shutdown-function +function shutdown () { + // Call the filter chain 'shutdown' + runFilterChain('shutdown', null, false); + + if (SQL_IS_LINK_UP()) { + // Close link + SQL_CLOSE(__FILE__, __LINE__); + } elseif ((!isInstalling()) && (isInstalled())) { + // No database link + addFatalMessage(__FILE__, __LINE__, getMessage('NO_DB_LINK_SHUTDOWN')); + } + + // Stop executing here + exit; } -// Getter for $_CONFIG entries -function getConfig ($entry) { - global $_CONFIG; +// Setter for userid +function setUserId ($userid) { + $GLOBALS['userid'] = bigintval($userid); +} - // Default value - $value = null; +// Getter for userid or returns zero +function getUserId () { + // Default userid + $userid = 0; - // Is the entry there? - if (isset($_CONFIG[$entry])) { + // Is the userid set? + if (isUserIdSet()) { // Then use it - $value = $_CONFIG[$entry]; + $userid = $GLOBALS['userid']; } // END - if // Return it - return $value; -} - -// @TODO Rewrite all language constants to the function getLanguage(). -// "Getter" for language strings -function getMessage ($messageId) { - // Default is not found! - $return = "!".$messageId."!"; - - // Is the language string found? - if (isset($GLOBALS['msg'][$messageId])) { - // Language array element found - $return = $GLOBALS['msg'][$messageId]; - } elseif (defined($messageId)) { - // @DEPRECATED Deprecated constant found - $return = constant($messageId); - } else { - // Missing language constant - DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Missing message string %s detected.", $messageId)); - } + return $userid; +} - // Return the string - return $return; +// Checks ether the userid is set +function isUserIdSet () { + return (isset($GLOBALS['userid'])); } -// Get current theme name -function GET_CURR_THEME() { - global $INC_POOL, $CSS, $cacheArray; +// Handle message codes from URL +function handleCodeMessage () { + if (REQUEST_ISSET_GET('msg')) { + // Default extension is 'unknown' + $ext = 'unknown'; - // The default theme is 'default'... ;-) - $ret = "default"; + // Is extension given? + if (REQUEST_ISSET_GET('ext')) $ext = REQUEST_GET('ext'); - // Load default theme if not empty from configuration - if (getConfig('default_theme') != "") $ret = getConfig('default_theme'); + // Convert the 'msg' parameter from URL to a human-readable message + $message = convertCodeToMessage(REQUEST_GET('msg')); - if (!isSessionVariableSet('mxchange_theme')) { - // Set default theme - set_session("mxchange_theme", $ret); - } elseif ((isSessionVariableSet('mxchange_theme')) && (GET_EXT_VERSION("sql_patches") >= "0.1.4")) { - //die("
".print_r($cacheArray['themes'], true)."
"); - // Get theme from cookie - $ret = get_session('mxchange_theme'); + // Load message template + LOAD_TEMPLATE('message', false, $message); + } // END - if +} - // Is it valid? - if (THEME_GET_ID($ret) == 0) { - // Fix it to default - $ret = "default"; - } // END - if - } elseif ((!isBooleanConstantAndTrue('mxchange_installed')) && ((isBooleanConstantAndTrue('mxchange_installing')) || ($CSS == true)) && ((!empty($_GET['theme'])) || (!empty($_POST['theme'])))) { - // Prepare FQFN for checking - $theme = sprintf("%stheme/%s/theme.php", PATH, SQL_ESCAPE($_GET['theme'])); +// Setter for extra title +function setExtraTitle ($extraTitle) { + $GLOBALS['extra_title'] = $extraTitle; +} - // Installation mode active - if ((!empty($_GET['theme'])) && (FILE_READABLE($theme))) { - // Set cookie from URL data - set_session("mxchange_theme", SQL_ESCAPE($_GET['theme'])); - } elseif (FILE_READABLE(sprintf("%stheme/%s/theme.php", PATH, SQL_ESCAPE($_POST['theme'])))) { - // Set cookie from posted data - set_session("mxchange_theme", SQL_ESCAPE($_POST['theme'])); - } +// Getter for extra title +function getExtraTitle () { + // Is the extra title set? + if (!isExtraTitleSet()) { + // No, then abort here + debug_report_bug('extra_title is not set!'); + } // END - if - // Set return value - $ret = get_session('mxchange_theme'); - } else { - // Invalid design, reset cookie - set_session("mxchange_theme", $ret); - } + // Return it + return $GLOBALS['extra_title']; +} - // Add (maybe) found theme.php file to inclusion list - $theme = sprintf("%stheme/%s/theme.php", PATH, SQL_ESCAPE($ret)); +// Checks if the extra title is set +function isExtraTitleSet () { + return ((isset($GLOBALS['extra_title'])) && (!empty($GLOBALS['extra_title']))); +} - // Try to load the requested include file - if (FILE_READABLE($theme)) $INC_POOL[] = $theme; +// Generates a 'extension foo inactive' message +function generateExtensionInactiveMessage ($ext_name) { + // Is the extension empty? + if (empty($ext_name)) { + // This should not happen + trigger_error(__FUNCTION__ . ': Parameter ext is empty. This should not happen.'); + } // END - if - // Return theme value - return $ret; + // Default message + $message = sprintf(getMessage('EXTENSION_PROBLEM_EXT_INACTIVE'), $ext_name); + + // Is an admin logged in? + if (IS_ADMIN()) { + // Then output admin message + $message = sprintf(getMessage('ADMIN_EXTENSION_PROBLEM_EXT_INACTIVE'), $ext_name); + } // END - if + + // Return prepared message + return $message; } -// Get id from theme -function THEME_GET_ID ($name) { - global $cacheArray; +// Generates a 'extension foo not installed' message +function generateExtensionNotInstalledMessage ($ext_name) { + // Is the extension empty? + if (empty($ext_name)) { + // This should not happen + trigger_error(__FUNCTION__ . ': Parameter ext is empty. This should not happen.'); + } // END - if - // Is the extension "theme" installed? - if (!EXT_IS_ACTIVE("theme")) { - // Then abort here - return 0; + // Default message + $message = sprintf(getMessage('EXTENSION_PROBLEM_EXT_NOT_INSTALLED'), $ext_name); + + // Is an admin logged in? + if (IS_ADMIN()) { + // Then output admin message + $message = sprintf(getMessage('ADMIN_EXTENSION_PROBLEM_EXT_NOT_INSTALLED'), $ext_name); } // END - if - // Default id - $id = 0; + // Return prepared message + return $message; +} - // Is the cache entry there? - if (isset($cacheArray['themes']['id'][$name])) { - // Get the version from cache - $id = $cacheArray['themes']['id'][$name]; +// Generates a message depending on if the extension is not installed or not +// just activated +function generateExtensionInactiveNotInstalledMessage ($ext_name) { + // Init message + $message = ''; - // Count up - incrementConfigEntry('cache_hits'); - } elseif (GET_EXT_VERSION("cache") != "0.1.8") { - // Check if current theme is already imported or not - $result = SQL_QUERY_ESC("SELECT id FROM `"._MYSQL_PREFIX."_themes` WHERE theme_path='%s' LIMIT 1", - array($name), __FILE__, __LINE__); + // Is the extension not installed or just deactivated? + switch (isExtensionInstalled($ext_name)) { + case true; // Deactivated! + $message = generateExtensionInactiveMessage($ext_name); + break; - // Entry found? - if (SQL_NUMROWS($result) == 1) { - // Fetch data - list($id) = SQL_FETCHROW($result); - } // END - if + case false; // Not installed! + $message = generateExtensionNotInstalledMessage($ext_name); + break; - // Free result - SQL_FREERESULT($result); - } + default: // Should not happen! + DEBUG_LOG(__FUNCTION__, __LINE__, sprintf("Invalid state of extension %s detected.", $ext_name)); + $message = sprintf("Invalid state of extension %s detected.", $ext_name); + break; + } // END - switch - // Return id - return $id; + // Return the message + return $message; } -// Increment or init with 1 the given config entry -function incrementConfigEntry ($configEntry) { - global $_CONFIG; +// Reads a directory recursively by default and searches for files not matching +// an exclusion pattern. You can now keep the exclusion pattern empty for reading +// a whole directory. +function getArrayFromDirectory ($baseDir, $prefix, $fileIncludeDirs = false, $addBaseDir = true, $excludeArray = array(), $extension = '.php', $excludePattern = '@(\.|\.\.)$@', $recursive = true) { + // Add default entries we should exclude + $excludeArray[] = '.'; + $excludeArray[] = '..'; + $excludeArray[] = '.svn'; + $excludeArray[] = '.htaccess'; + + //* DEBUG: */ DEBUG_LOG(__FUNCTION__, __LINE__, "baseDir={$baseDir},prefix={$prefix} - Entered!"); + // Init includes + $files = array(); - // Increment it if set or init it with 1 - if (getConfig($configEntry) > 0) { $_CONFIG[$configEntry]++; } else { $_CONFIG[$configEntry] = 1; } + // Open directory + $dirPointer = opendir(constant('PATH') . $baseDir) or app_die(__FUNCTION__, __LINE__, 'Cannot read directory ' . basename($baseDir) . '.'); + + // Read all entries + while ($baseFile = readdir($dirPointer)) { + // Exclude '.', '..' and entries in $excludeArray automatically + if (in_array($baseFile, $excludeArray, true)) { + // Exclude them + //* DEBUG: */ print 'excluded=' . $baseFile . '
'; + continue; + } // END - if + + // Construct include filename and FQFN + $fileName = $baseDir . '/' . $baseFile; + $FQFN = constant('PATH') . $fileName; + + // Remove double slashes + $FQFN = str_replace('//', '/', $FQFN); + + // Check if the base filename matches an exclusion pattern and if the pattern is not empty + if ((!empty($excludePattern)) && (preg_match($excludePattern, $baseFile, $match))) { + // These Lines are only for debugging!! + //* DEBUG: */ print 'baseDir:' . $baseDir . '
'; + //* DEBUG: */ print 'baseFile:' . $baseFile . '
'; + //* DEBUG: */ print 'FQFN:' . $FQFN . '
'; + + // Exclude this one + continue; + } // END - if + + // Skip also files with non-matching prefix genericly + if (($recursive === true) && (isDirectory($FQFN))) { + // Is a redirectory so read it as well + $files = merge_array($files, getArrayFromDirectory ($baseDir . $baseFile . '/', $prefix, $fileIncludeDirs, $addBaseDir, $excludeArray, $extension, $excludePattern, $recursive)); + + // And skip further processing + continue; + } elseif (substr($baseFile, 0, strlen($prefix)) != $prefix) { + // Skip this file + //* DEBUG: */ DEBUG_LOG(__FUNCTION__, __LINE__, "Invalid prefix in file " . $baseFile . ", prefix=" . $prefix); + continue; + } elseif (!isFileReadable($FQFN)) { + // Not readable so skip it + //* DEBUG: */ DEBUG_LOG(__FUNCTION__, __LINE__, "File " . $FQFN . " is not readable!"); + continue; + } + + // Is the file a PHP script or other? + //* DEBUG: */ DEBUG_LOG(__FUNCTION__, __LINE__, "baseDir={$baseDir},prefix={$prefix},baseFile={$baseFile}"); + if ((substr($baseFile, -4, 4) == '.php') || (($fileIncludeDirs === true) && (isDirectory($FQFN)))) { + // Is this a valid include file? + if ($extension == '.php') { + // Remove both for extension name + $extName = substr($baseFile, strlen($prefix), -4); + + // Try to find it + $extId = GET_EXT_ID($extName); + + // Is the extension valid and active? + if (($extId > 0) && (EXT_IS_ACTIVE($extName))) { + // Then add this file + //* DEBUG: */ DEBUG_LOG(__FUNCTION__, __LINE__, 'Extension entry ' . $baseFile . ' added.'); + $files[] = $fileName; + } elseif ($extId == 0) { + // Add non-extension files as well + //* DEBUG: */ DEBUG_LOG(__FUNCTION__, __LINE__, 'Regular entry ' . $baseFile . ' added.'); + if ($addBaseDir === true) { + $files[] = $fileName; + } else { + $files[] = $baseFile; + } + } + } else { + // We found .php file but should not search for them, why? + debug_report_bug('We should find files with extension=' . $extension . ', but we found a PHP script.'); + } + } else { + // Other, generic file found + $files[] = $fileName; + } + } // END - while + + // Close directory + closedir($dirPointer); + + // Sort array + asort($files); + + // Return array with include files + //* DEBUG: */ DEBUG_LOG(__FUNCTION__, __LINE__, '- Left!'); + return $files; } ////////////////////////////////////////////////// -// // // AUTOMATICALLY RE-GENERATED MISSING FUNCTIONS // -// // ////////////////////////////////////////////////// // if (!function_exists('html_entity_decode')) { @@ -2983,5 +3528,5 @@ if (!function_exists('html_entity_decode')) { } } // END - if -// +// [EOF] ?>