X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=modules.php;h=9cdeacb18ad9d6b635626caf9cd1152ca0b2124a;hp=9cc7ff28b9b61a8497c948976edb2499e784be69;hb=9b87babf90b27658be4a1cef2c0465e2ce9ed681;hpb=75ad748a68473ace540251427a74fb781b1145e9
diff --git a/modules.php b/modules.php
index 9cc7ff28b9..9cdeacb18a 100644
--- a/modules.php
+++ b/modules.php
@@ -31,74 +31,74 @@
* MA 02110-1301 USA *
************************************************************************/
-// APD call (if you have this apache extension and want to debug this script for us)
-//apd_set_pprof_trace();
+// XDEBUG call
+//xdebug_start_trace();
// Load security stuff here (Oh, I hope this is not unsecure? Am I paranoia??? ;-) )
-require_once ("inc/libs/security_functions.php");
+require("inc/libs/security_functions.php");
// Init "action" and "what"
-global $what, $action;
-$CSS = 0;
-$GLOBALS['what'] = ""; $GLOBALS['action'] = "";
+$GLOBALS['startTime'] = microtime(true);
+$GLOBALS['output_mode'] = 0;
+$GLOBALS['what'] = "";
+$GLOBALS['action'] = "";
$GLOBALS['userid'] = 0;
-if (!empty($_GET['action'])) $GLOBALS['action'] = secureString($_GET['action']);
-if (!empty($_GET['what'])) $GLOBALS['what'] = secureString($_GET['what']);
-if (empty($_GET['module'])) $_GET['module'] = "index";
-
-// Secure the module name (very important line!)
-$GLOBALS['module'] = htmlentities(strip_tags($_GET['module']), ENT_QUOTES);
+$GLOBALS['module'] = "";
// Needed include files
-require ("inc/config.php");
+require("inc/config.php");
+
+// Fix missing module to "index"
+if (!REQUEST_ISSET_GET(('module'))) REQUEST_SET_GET('module', "index");
// Check if logged in
-if (IS_LOGGED_IN())
-{
+if (IS_MEMBER()) {
// Is still logged in so we welcome him with his name
- $result = SQL_QUERY_ESC("SELECT surname, family FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
+ $result = SQL_QUERY_ESC("SELECT surname, family FROM `{!_MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
array($GLOBALS['userid']), __FILE__, __LINE__);
- if (SQL_NUMROWS($result) == 1)
- {
+ if (SQL_NUMROWS($result) == 1) {
// Load surname and family's name and build the username
list($s, $f) = SQL_FETCHROW($result);
$username = $s." ".$f;
- // Update only cookies and no login data!
- UPDATE_LOGIN_DATA(false);
- }
- else
- {
+ // Additionally admin?
+ if (IS_ADMIN()) {
+ // Add it
+ $username .= " ({--_ADMIN_SHORT--})";
+ } // END - if
+ } else {
+ // Hmmm, logged in and no valid userid?
+ $username = "{--_UNKNOWN--}";
- // Hmmm, logged in and no valid cookies???
- $username = ""._UNKNOWN."";
+ // Destroy session
+ destroy_user_session();
+
+ // Kill userid
+ $GLOBALS['userid'] = 0;
}
// Free memory
SQL_FREERESULT($result);
-}
- elseif (IS_ADMIN())
-{
- $username = _ADMIN;
-}
- else
-{
+} elseif (IS_ADMIN()) {
+ // Admin is there
+ $username = getMessage('_ADMIN');
+} else {
// He's a guest, hello there... ;-)
- $username = _GUEST;
+ $username = getMessage('_GUEST');
}
// The header file
-include (PATH."inc/header.php");
+LOAD_INC_ONCE("inc/header.php");
// Modules are by default not valid!
$MOD_VALID = false; $check = "failed";
-if ((!empty($CONFIG['maintenance'])) && ($CONFIG['maintenance'] == "Y") && (!IS_ADMIN()) && ($GLOBALS['module'] != "admin"))
-{
+if ((getConfig('maintenance') == "Y") && (!IS_ADMIN()) && ($GLOBALS['module'] != "admin")) {
// Maintain mode is active and you are no admin
- ADD_FATAL(LANG_DOWN_MAINTAINCE);
-}
- elseif (($link) && ($db) && (sizeof($FATAL) == 0))
-{
+ addFatalMessage(__FILE__, __LINE__, getMessage('LANG_DOWN_MAINTAINCE'));
+} elseif ((SQL_IS_LINK_UP()) && (getTotalFatalErrors() == 0)) {
+ // Construct module name
+ define('__MODULE', sprintf("inc/modules/%s.php", SQL_ESCAPE($GLOBALS['module'])));
+
// Did we found the module listed in allowed modules and are we successfully connected?
$check = CHECK_MODULE($GLOBALS['module']);
switch ($check)
@@ -106,62 +106,53 @@ if ((!empty($CONFIG['maintenance'])) && ($CONFIG['maintenance'] == "Y") && (!IS_
case "admin_only":
case "mem_only":
case "done":
- // Construct module name
- define('__MODULE', sprintf(PATH."inc/modules/%s.php", $GLOBALS['module']));
-
// Does the module exists on local file system?
- if (((file_exists(__MODULE)) || (!empty($URL))) && (sizeof($FATAL) == 0))
- {
+ if ((FILE_READABLE(constant('__MODULE'))) && (getTotalFatalErrors() == 0)) {
// Module is valid, active and located on the local disc...
$MOD_VALID = true;
- }
- elseif (!empty($URL))
- {
+ } elseif (!empty($URL)) {
// An URL was specified so we load the de-referrer module
- include (PATH."inc/loader.php");
- }
- elseif (sizeof($FATAL) == 0)
- {
- ADD_FATAL(LANG_MOD_REG_404_1.$GLOBALS['module'].LANG_MOD_REG_404_2);
+ LOAD_URL(DEREFERER($URL));
+ } elseif (getTotalFatalErrors() == 0) {
+ addFatalMessage(__FILE__, __LINE__, sprintf(getMessage('LANG_MOD_REG_404'), $GLOBALS['module']));
}
break;
case "404":
- ADD_FATAL(LANG_MOD_REG_404_1.$GLOBALS['module'].LANG_MOD_REG_404_2);
+ addFatalMessage(__FILE__, __LINE__, sprintf(getMessage('LANG_MOD_REG_404'), $GLOBALS['module']));
break;
case "locked":
- if (!file_exists(PATH."inc/modules/".$GLOBALS['module'].".php"))
- {
+ if (!FILE_READABLE(constant('__MODULE'))) {
// Module does addionally not exists
- ADD_FATAL(LANG_MOD_REG_404_1.$GLOBALS['module'].LANG_MOD_REG_404_2);
- }
- ADD_FATAL(LANG_MOD_LOCKED_1.$GLOBALS['module'].LANG_MOD_LOCKED_2);
+ addFatalMessage(__FILE__, __LINE__, sprintf(getMessage('LANG_MOD_REG_404'), $GLOBALS['module']));
+ } // END - if
+
+ // Add fatal message
+ addFatalMessage(__FILE__, __LINE__, sprintf(getMessage('LANG_MOD_REG_LOCKED'), $GLOBALS['module']));
break;
default:
- ADD_FATAL(LANG_MOD_UNKNOWN_1.$check.LANG_MOD_UNKNOWN_2);
+ DEBUG_LOG(__FILE__, __LINE__, sprintf("Unknown status %s return from module check. Module=%s", $check, $GLOBALS['module']));
+ addFatalMessage(__FILE__, __LINE__, sprintf(getMessage('LANG_MOD_REG_UNKNOWN'), $check));
break;
}
-}
- elseif (sizeof($FATAL) == 0)
-{
+} elseif (getTotalFatalErrors() == 0) {
// MySQL problems!
- ADD_FATAL(MYSQL_ERRORS);
+ addFatalMessage(__FILE__, __LINE__, getMessage('MYSQL_ERRORS'));
}
-if ($MOD_VALID)
-{
+if (($MOD_VALID) && (defined('__MODULE'))) {
/////////////////////////////////////////////
// Main including line DO NOT REMOVE/EDIT! //
/////////////////////////////////////////////
//
// Everything is okay so we can load the module
- include (__MODULE);
-}
+ LOAD_INC_ONCE(constant('__MODULE'));
+} // END - if
// Next-to-end add the footer
-include (PATH."inc/footer.php");
+LOAD_INC_ONCE("inc/footer.php");
//
?>