1 <?php |
|
2 |
|
3 /* |
|
4 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between |
|
5 * Version 1.0 (Banshee) |
|
6 * Copyright (C) 2006-2007 Dan Fuhry |
|
7 * |
|
8 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License |
|
9 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. |
|
10 * |
|
11 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied |
|
12 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details. |
|
13 */ |
|
14 |
|
15 function getConfig($n) { |
|
16 global $enano_config; |
|
17 if(isset($enano_config[$n])) return $enano_config[$n]; |
|
18 else return false; |
|
19 } |
|
20 |
|
21 function setConfig($n, $v) { |
|
22 global $enano_config, $db; |
|
23 $enano_config[$n] = $v; |
|
24 $v = $db->escape($v); |
|
25 $e=$db->sql_query('DELETE FROM '.table_prefix.'config WHERE config_name=\''.$n.'\';'); |
|
26 if(!$e) $db->_die('Error during generic setConfig() call row deletion.'); |
|
27 $e=$db->sql_query('INSERT INTO '.table_prefix.'config(config_name, config_value) VALUES(\''.$n.'\', \''.$v.'\')'); |
|
28 if(!$e) $db->_die('Error during generic setConfig() call row insertion.'); |
|
29 } |
|
30 |
|
31 function makeUrl($t, $query = false, $escape = false) |
|
32 { |
|
33 global $db, $session, $paths, $template, $plugins; // Common objects |
|
34 $flags = ''; |
|
35 $sep = urlSeparator; |
|
36 if(isset($_GET['printable'])) { $flags .= $sep.'printable'; $sep = '&'; } |
|
37 if(isset($_GET['theme'])) { $flags .= $sep.'theme='.$session->theme; $sep = '&'; } |
|
38 if(isset($_GET['style'])) { $flags .= $sep.'style='.$session->style; $sep = '&'; } |
|
39 $url = $session->append_sid(contentPath.$t.$flags); |
|
40 if($query) |
|
41 { |
|
42 $sep = strstr($url, '?') ? '&' : '?'; |
|
43 $url = $url . $sep . $query; |
|
44 } |
|
45 return ($escape) ? htmlspecialchars($url) : $url; |
|
46 } |
|
47 |
|
48 function makeUrlNS($n, $t, $query = false, $escape = false) |
|
49 { |
|
50 global $db, $session, $paths, $template, $plugins; // Common objects |
|
51 $flags = ''; |
|
52 if(defined('ENANO_BASE_CLASSES_INITIALIZED')) $sep = urlSeparator; |
|
53 else $sep = (strstr($_SERVER['REQUEST_URI'], '?')) ? '&' : '?'; |
|
54 if(isset($_GET['printable'])) { $flags .= $sep.'printable'; $sep = '&'; } |
|
55 if(isset($_GET['theme'])) { $flags .= $sep.'theme='.$session->theme; $sep = '&'; } |
|
56 if(isset($_GET['style'])) { $flags .= $sep.'style='.$session->style; $sep = '&'; } |
|
57 |
|
58 if(defined('ENANO_BASE_CLASSES_INITIALIZED')) |
|
59 { |
|
60 $url = contentPath.$paths->nslist[$n].$t.$flags; |
|
61 } |
|
62 else |
|
63 { |
|
64 $url = contentPath.$n.':'.$t.$flags; |
|
65 } |
|
66 |
|
67 if($query) |
|
68 { |
|
69 if(strstr($url, '?')) $sep = '&'; |
|
70 else $sep = '?'; |
|
71 $url = $url . $sep . $query . $flags; |
|
72 } |
|
73 |
|
74 if(defined('ENANO_BASE_CLASSES_INITIALIZED')) |
|
75 { |
|
76 $url = $session->append_sid($url); |
|
77 } |
|
78 |
|
79 return ($escape) ? htmlspecialchars($url) : $url; |
|
80 } |
|
81 |
|
82 function makeUrlComplete($n, $t, $query = false, $escape = false) |
|
83 { |
|
84 global $db, $session, $paths, $template, $plugins; // Common objects |
|
85 $flags = ''; |
|
86 if(defined('ENANO_BASE_CLASSES_INITIALIZED')) $sep = urlSeparator; |
|
87 else $sep = (strstr($_SERVER['REQUEST_URI'], '?')) ? '&' : '?'; |
|
88 if(isset($_GET['printable'])) { $flags .= $sep.'printable'; $sep = '&'; } |
|
89 if(isset($_GET['theme'])) { $flags .= $sep.'theme='.$session->theme; $sep = '&'; } |
|
90 if(isset($_GET['style'])) { $flags .= $sep.'style='.$session->style; $sep = '&'; } |
|
91 if(defined('ENANO_BASE_CLASSES_INITIALIZED')) $url = $session->append_sid(contentPath.$paths->nslist[$n].$t.$flags); |
|
92 else $url = contentPath.$n.':'.$t.$flags; |
|
93 if($query) |
|
94 { |
|
95 if(strstr($url, '?')) $sep = '&'; |
|
96 else $sep = '?'; |
|
97 $url = $url . $sep . $query . $flags; |
|
98 } |
|
99 $baseprot = 'http' . ( isset($_SERVER['HTTPS']) ? 's' : '' ) . '://' . $_SERVER['HTTP_HOST']; |
|
100 $url = $baseprot . $url; |
|
101 return ($escape) ? htmlspecialchars($url) : $url; |
|
102 } |
|
103 |
|
104 /** |
|
105 * Redirect the user to the specified URL. |
|
106 * @param string $url The URL, either relative or absolute. |
|
107 * @param string $title The title of the message |
|
108 * @param string $message A short message to show to the user |
|
109 * @param string $timeout Timeout, in seconds, to delay the redirect. Defaults to 3. |
|
110 */ |
|
111 |
|
112 function redirect($url, $title = 'Redirecting...', $message = 'Please wait while you are redirected.', $timeout = 3) |
|
113 { |
|
114 global $db, $session, $paths, $template, $plugins; // Common objects |
|
115 |
|
116 if ( $timeout == 0 ) |
|
117 { |
|
118 header('Location: ' . $url); |
|
119 header('HTTP/1.1 307 Temporary Redirect'); |
|
120 } |
|
121 |
|
122 $template->add_header('<meta http-equiv="refresh" content="' . $timeout . '; url=' . str_replace('"', '\\"', $url) . '" />'); |
|
123 $template->add_header('<script type="text/javascript"> |
|
124 function __r() { |
|
125 // FUNCTION AUTOMATICALLY GENERATED |
|
126 window.location="' . str_replace('"', '\\"', $url) . '"; |
|
127 } |
|
128 setTimeout(\'__r();\', ' . $timeout . '000); |
|
129 </script> |
|
130 '); |
|
131 |
|
132 $template->tpl_strings['PAGE_NAME'] = $title; |
|
133 $template->header(true); |
|
134 echo '<p>' . $message . '</p><p>If you are not redirected within ' . ( $timeout + 1 ) . ' seconds, <a href="' . str_replace('"', '\\"', $url) . '">please click here</a>.</p>'; |
|
135 $template->footer(true); |
|
136 |
|
137 $db->close(); |
|
138 exit(0); |
|
139 |
|
140 } |
|
141 |
|
142 // Removed wikiFormat() from here, replaced with RenderMan::render |
|
143 |
|
144 function isPage($p) { |
|
145 global $db, $session, $paths, $template, $plugins; // Common objects |
|
146 if(isset($paths->pages[$p])) return true; |
|
147 $d = RenderMan::strToPageID($p); |
|
148 if($d[1] != 'Special' && $d[1] != 'Template' && $d[1] != 'Admin') return false; |
|
149 $a = explode('/', $p); |
|
150 if(isset($paths->pages[$a[0]])) return true; |
|
151 else return false; |
|
152 } |
|
153 |
|
154 function arrayItemUp($arr, $keyname) { |
|
155 $keylist = array_keys($arr); |
|
156 $keyflop = array_flip($keylist); |
|
157 $idx = $keyflop[$keyname]; |
|
158 $idxm = $idx - 1; |
|
159 $temp = $arr[$keylist[$idxm]]; |
|
160 if($arr[$keylist[0]] == $arr[$keyname]) return $arr; |
|
161 $arr[$keylist[$idxm]] = $arr[$keylist[$idx]]; |
|
162 $arr[$keylist[$idx]] = $temp; |
|
163 return $arr; |
|
164 } |
|
165 |
|
166 function arrayItemDown($arr, $keyname) { |
|
167 $keylist = array_keys($arr); |
|
168 $keyflop = array_flip($keylist); |
|
169 $idx = $keyflop[$keyname]; |
|
170 $idxm = $idx + 1; |
|
171 $temp = $arr[$keylist[$idxm]]; |
|
172 $sz = sizeof($arr); $sz--; |
|
173 if($arr[$keylist[$sz]] == $arr[$keyname]) return $arr; |
|
174 $arr[$keylist[$idxm]] = $arr[$keylist[$idx]]; |
|
175 $arr[$keylist[$idx]] = $temp; |
|
176 return $arr; |
|
177 } |
|
178 |
|
179 function arrayItemTop($arr, $keyname) { |
|
180 $keylist = array_keys($arr); |
|
181 $keyflop = array_flip($keylist); |
|
182 $idx = $keyflop[$keyname]; |
|
183 while( $orig != $arr[$keylist[0]] ) { |
|
184 // echo 'Keyname: '.$keylist[$idx] . '<br />'; flush(); ob_flush(); // Debugger |
|
185 if($idx < 0) return $arr; |
|
186 if($keylist[$idx] == '' || $keylist[$idx] < 0 || !$keylist[$idx]) { |
|
187 /* echo 'Infinite loop caught in arrayItemTop(<br /><pre>'; |
|
188 print_r($arr); |
|
189 echo '</pre><br />, '.$keyname.');<br /><br />EnanoCMS: Critical error during function call, exiting to prevent excessive server load.'; |
|
190 exit; */ |
|
191 return $arr; |
|
192 } |
|
193 $arr = arrayItemUp($arr, $keylist[$idx]); |
|
194 $idx--; |
|
195 } |
|
196 return $arr; |
|
197 } |
|
198 |
|
199 function arrayItemBottom($arr, $keyname) { |
|
200 $keylist = array_keys($arr); |
|
201 $keyflop = array_flip($keylist); |
|
202 $idx = $keyflop[$keyname]; |
|
203 $sz = sizeof($arr); $sz--; |
|
204 while( $orig != $arr[$keylist[$sz]] ) { |
|
205 // echo 'Keyname: '.$keylist[$idx] . '<br />'; flush(); ob_flush(); // Debugger |
|
206 if($idx > $sz) return $arr; |
|
207 if($keylist[$idx] == '' || $keylist[$idx] < 0 || !$keylist[$idx]) { |
|
208 echo 'Infinite loop caught in arrayItemBottom(<br /><pre>'; |
|
209 print_r($arr); |
|
210 echo '</pre><br />, '.$keyname.');<br /><br />EnanoCMS: Critical error during function call, exiting to prevent excessive server load.'; |
|
211 exit; |
|
212 } |
|
213 $arr = arrayItemDown($arr, $keylist[$idx]); |
|
214 $idx++; |
|
215 } |
|
216 return $arr; |
|
217 } |
|
218 |
|
219 // Convert IP address to hex string |
|
220 // Input: 127.0.0.1 (string) |
|
221 // Output: 0x7f000001 (string) |
|
222 // Updated 12/8/06 to work with PHP4 and not use eval() (blech) |
|
223 function ip2hex($ip) { |
|
224 if ( preg_match('/^([0-9a-f:]+)$/', $ip) ) |
|
225 { |
|
226 // this is an ipv6 address |
|
227 return str_replace(':', '', $ip); |
|
228 } |
|
229 $nums = explode('.', $ip); |
|
230 if(sizeof($nums) != 4) return false; |
|
231 $str = '0x'; |
|
232 foreach($nums as $n) |
|
233 { |
|
234 $str .= (string)dechex($n); |
|
235 } |
|
236 return $str; |
|
237 } |
|
238 |
|
239 // Convert DWord to IP address |
|
240 // Input: 0x7f000001 |
|
241 // Output: 127.0.0.1 |
|
242 // Updated 12/8/06 to work with PHP4 and not use eval() (blech) |
|
243 function hex2ip($in) { |
|
244 if(substr($in, 0, 2) == '0x') $ip = substr($in, 2, 8); |
|
245 else $ip = substr($in, 0, 8); |
|
246 $octets = enano_str_split($ip, 2); |
|
247 $str = ''; |
|
248 $newoct = Array(); |
|
249 foreach($octets as $o) |
|
250 { |
|
251 $o = (int)hexdec($o); |
|
252 $newoct[] = $o; |
|
253 } |
|
254 return implode('.', $newoct); |
|
255 } |
|
256 |
|
257 // Function strip_php moved to RenderMan class |
|
258 |
|
259 function die_semicritical($t, $p) |
|
260 { |
|
261 global $db, $session, $paths, $template, $plugins; // Common objects |
|
262 $db->close(); |
|
263 |
|
264 if ( ob_get_status() ) |
|
265 ob_end_clean(); |
|
266 |
|
267 dc_here('functions: <span style="color: red">calling die_semicritical</span>'); |
|
268 |
|
269 $tpl = new template_nodb(); |
|
270 $tpl->load_theme('oxygen', 'bleu'); |
|
271 $tpl->tpl_strings['SITE_NAME'] = getConfig('site_name'); |
|
272 $tpl->tpl_strings['SITE_DESC'] = getConfig('site_desc'); |
|
273 $tpl->tpl_strings['COPYRIGHT'] = getConfig('copyright_notice'); |
|
274 $tpl->tpl_strings['PAGE_NAME'] = $t; |
|
275 $tpl->header(); |
|
276 echo $p; |
|
277 $tpl->footer(); |
|
278 |
|
279 exit; |
|
280 } |
|
281 |
|
282 function die_friendly($t, $p) |
|
283 { |
|
284 global $db, $session, $paths, $template, $plugins; // Common objects |
|
285 |
|
286 if ( ob_get_status() ) |
|
287 ob_end_clean(); |
|
288 |
|
289 dc_here('functions: <span style="color: red">calling die_friendly</span>'); |
|
290 $paths->cpage['name'] = $t; |
|
291 $template->tpl_strings['PAGE_NAME'] = $t; |
|
292 $template->header(); |
|
293 echo $p; |
|
294 $template->footer(); |
|
295 $db->close(); |
|
296 |
|
297 exit; |
|
298 } |
|
299 |
|
300 function grinding_halt($t, $p) |
|
301 { |
|
302 global $db, $session, $paths, $template, $plugins; // Common objects |
|
303 |
|
304 $db->close(); |
|
305 |
|
306 if ( ob_get_status() ) |
|
307 ob_end_clean(); |
|
308 |
|
309 dc_here('functions: <span style="color: red">calling grinding_halt</span>'); |
|
310 $tpl = new template_nodb(); |
|
311 $tpl->load_theme('oxygen', 'bleu'); |
|
312 $tpl->tpl_strings['SITE_NAME'] = 'Critical error'; |
|
313 $tpl->tpl_strings['SITE_DESC'] = 'This website is experiencing a serious error and cannot load.'; |
|
314 $tpl->tpl_strings['COPYRIGHT'] = 'Unable to retrieve copyright information'; |
|
315 $tpl->tpl_strings['PAGE_NAME'] = $t; |
|
316 $tpl->header(); |
|
317 echo $p; |
|
318 $tpl->footer(); |
|
319 exit; |
|
320 } |
|
321 |
|
322 function show_category_info() { |
|
323 global $db, $session, $paths, $template, $plugins; // Common objects |
|
324 dc_here('functions: showing category info'); |
|
325 if($template->no_headers && !strpos($_SERVER['REQUEST_URI'], 'ajax.php')) return ''; |
|
326 if($paths->namespace=='Category') |
|
327 { |
|
328 $q = $db->sql_query('SELECT page_id,namespace FROM '.table_prefix.'categories WHERE category_id=\''.$paths->cpage['urlname_nons'].'\' AND namespace=\'Category\' ORDER BY page_id;'); |
|
329 if(!$q) $db->_die('The category information could not be selected.'); |
|
330 $ticker = -1; |
|
331 echo '<h3>Subcategories</h3>'; |
|
332 if($db->numrows() < 1) echo '<p>There are no subcategories in this category.</p>'; |
|
333 echo '<table border="0" cellspacing="1" cellpadding="4">'; |
|
334 while($row = $db->fetchrow()) |
|
335 { |
|
336 $ticker++;if($ticker==3) $ticker=0; |
|
337 if($ticker==0) echo '<tr>'; |
|
338 echo '<td style="width: 200px;"><a href="'.makeUrlNS($row['namespace'], $row['page_id']).'">'.$paths->pages[$paths->nslist[$row['namespace']].$row['page_id']]['name'].'</a></td>'; |
|
339 if($ticker==2) echo '</tr>'; |
|
340 } |
|
341 $db->free_result(); |
|
342 if($ticker) echo '</tr>'; |
|
343 echo '</table>'; |
|
344 |
|
345 $q = $db->sql_query('SELECT page_id,namespace FROM '.table_prefix.'categories WHERE category_id=\''.$paths->cpage['urlname_nons'].'\' AND namespace!=\'Category\' ORDER BY page_id;'); |
|
346 if(!$q) $db->_die('The category information could not be selected.'); |
|
347 $ticker = -1; |
|
348 echo '<h3>Pages</h3>'; |
|
349 if($db->numrows() < 1) echo '<p>There are no pages in this category.</p>'; |
|
350 echo '<table border="0" cellspacing="1" cellpadding="4">'; |
|
351 while($row = $db->fetchrow()) |
|
352 { |
|
353 $ticker++;if($ticker==3) $ticker=0; |
|
354 if($ticker==0) echo '<tr>'; |
|
355 echo '<td style="width: 200px;"><a href="'.makeUrlNS($row['namespace'], $row['page_id']).'">'.$paths->pages[$paths->nslist[$row['namespace']].$row['page_id']]['name'].'</a></td>'; |
|
356 if($ticker==2) echo '</tr>'; |
|
357 } |
|
358 $db->free_result(); |
|
359 if($ticker) echo '</tr>'; |
|
360 echo '</table><br /><br />'; |
|
361 } |
|
362 $q = $db->sql_query('SELECT category_id FROM '.table_prefix.'categories WHERE page_id=\''.$paths->cpage['urlname_nons'].'\' AND namespace=\''.$paths->namespace.'\''); |
|
363 if(!$q) $db->_die('The error seems to have occurred during selection of category data.'); |
|
364 if($db->numrows() > 0) { |
|
365 echo '<div class="mdg-comment" style="margin-left: 0;">Categories: '; |
|
366 $i=0; |
|
367 while($r = $db->fetchrow()) |
|
368 { |
|
369 if($i>0) echo ', '; |
|
370 $i++; |
|
371 echo '<a href="'.makeUrlNS('Category', $r['category_id']).'">'.$paths->pages[$paths->nslist['Category'].$r['category_id']]['name'].'</a>'; |
|
372 } |
|
373 if( ( $paths->wiki_mode && !$paths->page_protected ) || ( $session->get_permissions('edit_cat') && $session->get_permissions('even_when_protected') ) ) echo ' [ <a href="'.makeUrl($paths->page, 'do=catedit', true).'" onclick="ajaxCatEdit(); return false;">edit categorization</a> ]</div>'; |
|
374 } else { |
|
375 echo '<div class="mdg-comment" style="margin-left: 0;">Categories: '; |
|
376 echo '(Uncategorized)'; |
|
377 if( ( $paths->wiki_mode && !$paths->page_protected ) || ( $session->get_permissions('edit_cat') && $session->get_permissions('even_when_protected') ) ) echo ' [ <a href="'.makeUrl($paths->page, 'do=catedit', true).'" onclick="ajaxCatEdit(); return false;">edit categorization</a> ]</div>'; |
|
378 else echo '</div>'; |
|
379 } |
|
380 $db->free_result(); |
|
381 } |
|
382 |
|
383 function show_file_info() |
|
384 { |
|
385 global $db, $session, $paths, $template, $plugins; // Common objects |
|
386 if($paths->namespace != 'File') return null; // Prevent unnecessary work |
|
387 $selfn = $paths->cpage['urlname_nons']; // substr($paths->page, strlen($paths->nslist['File']), strlen($paths->cpage)); |
|
388 if(substr($paths->cpage['name'], 0, strlen($paths->nslist['File']))==$paths->nslist['File']) $selfn = substr($paths->cpage['urlname_nons'], strlen($paths->nslist['File']), strlen($paths->cpage['urlname_nons'])); |
|
389 $q = $db->sql_query('SELECT mimetype,time_id,size FROM '.table_prefix.'files WHERE page_id=\''.$selfn.'\' ORDER BY time_id DESC;'); |
|
390 if(!$q) $db->_die('The file type could not be fetched.'); |
|
391 if($db->numrows() < 1) { echo '<div class="mdg-comment" style="margin-left: 0;"><h3>Uploaded file</h3><p>There are no files uploaded with this name yet. <a href="'.makeUrlNS('Special', 'UploadFile/'.$paths->cpage['urlname_nons']).'">Upload a file...</a></p></div><br />'; return; } |
|
392 $r = $db->fetchrow(); |
|
393 $mimetype = $r['mimetype']; |
|
394 $datestring = date('F d, Y h:i a', (int)$r['time_id']); |
|
395 echo '<div class="mdg-comment" style="margin-left: 0;"><p><h3>Uploaded file</h3></p><p>Type: '.$r['mimetype'].'<br />Size: '; |
|
396 $fs = $r['size']; |
|
397 echo $fs.' bytes'; |
|
398 $fs = (int)$fs; |
|
399 if($fs >= 1048576) |
|
400 { |
|
401 $fs = round($fs / 1048576, 1); |
|
402 echo ' ('.$fs.' MB)'; |
|
403 } elseif($fs >= 1024) { |
|
404 $fs = round($fs / 1024, 1); |
|
405 echo ' ('.$fs.' KB)'; |
|
406 } |
|
407 echo '<br />Uploaded: '.$datestring.'</p>'; |
|
408 if(substr($mimetype, 0, 6)!='image/' && ( substr($mimetype, 0, 5) != 'text/' || $mimetype == 'text/html' || $mimetype == 'text/javascript' )) |
|
409 { |
|
410 echo '<div class="warning-box">This file type may contain viruses or other code that could harm your computer. You should exercise caution if you download it.</div>'; |
|
411 } |
|
412 if(substr($mimetype, 0, 6)=='image/') |
|
413 { |
|
414 echo '<p><a href="'.makeUrlNS('Special', 'DownloadFile'.'/'.$selfn).'"><img style="border: 0;" alt="'.$paths->page.'" src="'.makeUrlNS('Special', 'DownloadFile'.'/'.$selfn.htmlspecialchars(urlSeparator).'preview').'" /></a></p>'; |
|
415 } |
|
416 echo '<p><a href="'.makeUrlNS('Special', 'DownloadFile'.'/'.$selfn.'/'.$r['time_id'].htmlspecialchars(urlSeparator).'download').'">Download this file</a>'; |
|
417 if(!$paths->page_protected && ( $paths->wiki_mode || $session->get_permissions('upload_new_version') )) |
|
418 { |
|
419 echo ' | <a href="'.makeUrlNS('Special', 'UploadFile'.'/'.$selfn).'">Upload new version</a>'; |
|
420 } |
|
421 echo '</p>'; |
|
422 if($db->numrows() > 1) |
|
423 { |
|
424 echo '<h3>File history</h3><p>'; |
|
425 while($r = $db->fetchrow()) |
|
426 { |
|
427 echo '(<a href="'.makeUrlNS('Special', 'DownloadFile'.'/'.$selfn.'/'.$r['time_id'].htmlspecialchars(urlSeparator).'download').'">this ver</a>) '; |
|
428 if($session->get_permissions('history_rollback')) |
|
429 echo ' (<a href="#" onclick="ajaxRollback(\''.$r['time_id'].'\'); return false;">revert</a>) '; |
|
430 $mimetype = $r['mimetype']; |
|
431 $datestring = date('F d, Y h:i a', (int)$r['time_id']); |
|
432 echo $datestring.': '.$r['mimetype'].', '; |
|
433 $fs = $r['size']; |
|
434 $fs = (int)$fs; |
|
435 if($fs >= 1048576) |
|
436 { |
|
437 $fs = round($fs / 1048576, 1); |
|
438 echo ' '.$fs.' MB'; |
|
439 } elseif($fs >= 1024) { |
|
440 $fs = round($fs / 1024, 1); |
|
441 echo ' '.$fs.' KB'; |
|
442 } else { |
|
443 echo ' '.$fs.' bytes'; |
|
444 } |
|
445 echo '<br />'; |
|
446 } |
|
447 echo '</p>'; |
|
448 } |
|
449 $db->free_result(); |
|
450 echo '</div><br />'; |
|
451 } |
|
452 |
|
453 function display_page_headers() |
|
454 { |
|
455 global $db, $session, $paths, $template, $plugins; // Common objects |
|
456 if($session->get_permissions('vote_reset') && $paths->cpage['delvotes'] > 0) |
|
457 { |
|
458 $hr = implode(', ', explode('|', $paths->cpage['delvote_ips'])); |
|
459 $is = 'is'; |
|
460 $s = ''; |
|
461 $s2 = 's'; |
|
462 if ( $paths->cpage['delvotes'] > 1) |
|
463 { |
|
464 $is = 'are'; |
|
465 $s = 's'; |
|
466 $s2 = ''; |
|
467 } |
|
468 echo '<div class="info-box" style="margin-left: 0; margin-top: 5px;" id="mdgDeleteVoteNoticeBox"> |
|
469 <b>Notice:</b> There '.$is.' '.$paths->cpage['delvotes'].' user'.$s.' that think'.$s2.' this page should be deleted.<br /> |
|
470 <b>Users that voted:</b> ' . $hr . '<br /> |
|
471 <a href="'.makeUrl($paths->page, 'do=deletepage').'" onclick="ajaxDeletePage(); return false;">Delete page</a> | <a href="'.makeUrl($paths->page, 'do=resetvotes').'" onclick="ajaxResetDelVotes(); return false;">Reset votes</a> |
|
472 </div>'; |
|
473 } |
|
474 } |
|
475 |
|
476 function display_page_footers() |
|
477 { |
|
478 global $db, $session, $paths, $template, $plugins; // Common objects |
|
479 if(isset($_GET['nofooters'])) return; |
|
480 $code = $plugins->setHook('send_page_footers'); |
|
481 foreach ( $code as $cmd ) |
|
482 { |
|
483 eval($cmd); |
|
484 } |
|
485 show_file_info(); |
|
486 show_category_info(); |
|
487 } |
|
488 |
|
489 function password_prompt($id = false) |
|
490 { |
|
491 global $db, $session, $paths, $template, $plugins; // Common objects |
|
492 if(!$id) $id = $paths->page; |
|
493 if(isset($paths->pages[$id]['password']) && strlen($paths->pages[$id]['password']) == 40 && !isset($_REQUEST['pagepass'])) |
|
494 { |
|
495 die_friendly('Password required', '<p>You must supply a password to access this page.</p><form action="'.makeUrl($paths->pages[$id]['urlname']).'" method="post"><p>Password: <input name="pagepass" type="password" /></p><p><input type="submit" value="Submit" /></p>'); |
|
496 } elseif(isset($_REQUEST['pagepass'])) { |
|
497 $p = (preg_match('#^([a-f0-9]*){40}$#', $_REQUEST['pagepass'])) ? $_REQUEST['pagepass'] : sha1($_REQUEST['pagepass']); |
|
498 if($p != $paths->pages[$id]['password']) die_friendly('Password required', '<p style="color: red;">The password you entered is incorrect.</p><form action="'.makeUrl($paths->page).'" method="post"><p>Password: <input name="pagepass" type="password" /></p><p><input type="submit" value="Submit" /></p>'); |
|
499 } |
|
500 } |
|
501 |
|
502 function str_hex($string){ |
|
503 $hex=''; |
|
504 for ($i=0; $i < strlen($string); $i++){ |
|
505 $hex .= ' '.dechex(ord($string[$i])); |
|
506 } |
|
507 return substr($hex, 1, strlen($hex)); |
|
508 } |
|
509 |
|
510 // Function pulled from phpBB's smtp.php |
|
511 function smtp_get_response($socket, $response, $line = __LINE__) |
|
512 { |
|
513 $server_response = ''; |
|
514 while (substr($server_response, 3, 1) != ' ') |
|
515 { |
|
516 if (!($server_response = fgets($socket, 256))) |
|
517 { |
|
518 die_friendly('SMTP Error', "<p>Couldn't get mail server response codes</p>"); |
|
519 } |
|
520 } |
|
521 |
|
522 if (!(substr($server_response, 0, 3) == $response)) |
|
523 { |
|
524 die_friendly('SMTP Error', "<p>Ran into problems sending mail. Response: $server_response</p>"); |
|
525 } |
|
526 } |
|
527 |
|
528 function smtp_send_email($to, $subject, $message, $from) |
|
529 { |
|
530 return smtp_send_email_core($to, $subject, $message, "From: <$from>\n"); |
|
531 } |
|
532 |
|
533 // Replacement or substitute for PHP's mail command |
|
534 // Ported from phpBB - copyright (C) phpBB group, GPL. |
|
535 function smtp_send_email_core($mail_to, $subject, $message, $headers = '') |
|
536 { |
|
537 global $board_config; |
|
538 |
|
539 // Fix any bare linefeeds in the message to make it RFC821 Compliant. |
|
540 $message = preg_replace("#(?<!\r)\n#si", "\r\n", $message); |
|
541 |
|
542 if ($headers != '') |
|
543 { |
|
544 if (is_array($headers)) |
|
545 { |
|
546 if (sizeof($headers) > 1) |
|
547 { |
|
548 $headers = join("\n", $headers); |
|
549 } |
|
550 else |
|
551 { |
|
552 $headers = $headers[0]; |
|
553 } |
|
554 } |
|
555 $headers = chop($headers); |
|
556 |
|
557 // Make sure there are no bare linefeeds in the headers |
|
558 $headers = preg_replace('#(?<!\r)\n#si', "\r\n", $headers); |
|
559 |
|
560 // Ok this is rather confusing all things considered, |
|
561 // but we have to grab bcc and cc headers and treat them differently |
|
562 // Something we really didn't take into consideration originally |
|
563 $header_array = explode("\r\n", $headers); |
|
564 @reset($header_array); |
|
565 |
|
566 $headers = ''; |
|
567 while(list(, $header) = each($header_array)) |
|
568 { |
|
569 if (preg_match('#^cc:#si', $header)) |
|
570 { |
|
571 $cc = preg_replace('#^cc:(.*)#si', '\1', $header); |
|
572 } |
|
573 else if (preg_match('#^bcc:#si', $header)) |
|
574 { |
|
575 $bcc = preg_replace('#^bcc:(.*)#si', '\1', $header); |
|
576 $header = ''; |
|
577 } |
|
578 $headers .= ($header != '') ? $header . "\r\n" : ''; |
|
579 } |
|
580 |
|
581 $headers = chop($headers); |
|
582 $cc = explode(', ', $cc); |
|
583 $bcc = explode(', ', $bcc); |
|
584 } |
|
585 |
|
586 if (trim($subject) == '') |
|
587 { |
|
588 die_friendly(GENERAL_ERROR, "No email Subject specified"); |
|
589 } |
|
590 |
|
591 if (trim($message) == '') |
|
592 { |
|
593 die_friendly(GENERAL_ERROR, "Email message was blank"); |
|
594 } |
|
595 |
|
596 // setup SMTP |
|
597 $host = getConfig('smtp_server'); |
|
598 if ( empty($host) ) |
|
599 return 'No smtp_host in config'; |
|
600 if ( strstr($host, ':' ) ) |
|
601 { |
|
602 $n = explode(':', $host); |
|
603 $smtp_host = $n[0]; |
|
604 $port = intval($n[1]); |
|
605 } |
|
606 else |
|
607 { |
|
608 $smtp_host = $host; |
|
609 $port = 25; |
|
610 } |
|
611 |
|
612 $smtp_user = getConfig('smtp_user'); |
|
613 $smtp_pass = getConfig('smtp_password'); |
|
614 |
|
615 // Ok we have error checked as much as we can to this point let's get on |
|
616 // it already. |
|
617 if( !$socket = @fsockopen($smtp_host, $port, $errno, $errstr, 20) ) |
|
618 { |
|
619 die_friendly(GENERAL_ERROR, "Could not connect to smtp host : $errno : $errstr"); |
|
620 } |
|
621 |
|
622 // Wait for reply |
|
623 smtp_get_response($socket, "220", __LINE__); |
|
624 |
|
625 // Do we want to use AUTH?, send RFC2554 EHLO, else send RFC821 HELO |
|
626 // This improved as provided by SirSir to accomodate |
|
627 if( !empty($smtp_user) && !empty($smtp_pass) ) |
|
628 { |
|
629 enano_fputs($socket, "EHLO " . $smtp_host . "\r\n"); |
|
630 smtp_get_response($socket, "250", __LINE__); |
|
631 |
|
632 enano_fputs($socket, "AUTH LOGIN\r\n"); |
|
633 smtp_get_response($socket, "334", __LINE__); |
|
634 |
|
635 enano_fputs($socket, base64_encode($smtp_user) . "\r\n"); |
|
636 smtp_get_response($socket, "334", __LINE__); |
|
637 |
|
638 enano_fputs($socket, base64_encode($smtp_pass) . "\r\n"); |
|
639 smtp_get_response($socket, "235", __LINE__); |
|
640 } |
|
641 else |
|
642 { |
|
643 enano_fputs($socket, "HELO " . $smtp_host . "\r\n"); |
|
644 smtp_get_response($socket, "250", __LINE__); |
|
645 } |
|
646 |
|
647 // From this point onward most server response codes should be 250 |
|
648 // Specify who the mail is from.... |
|
649 enano_fputs($socket, "MAIL FROM: <" . getConfig('contact_email') . ">\r\n"); |
|
650 smtp_get_response($socket, "250", __LINE__); |
|
651 |
|
652 // Specify each user to send to and build to header. |
|
653 $to_header = ''; |
|
654 |
|
655 // Add an additional bit of error checking to the To field. |
|
656 $mail_to = (trim($mail_to) == '') ? 'Undisclosed-recipients:;' : trim($mail_to); |
|
657 if (preg_match('#[^ ]+\@[^ ]+#', $mail_to)) |
|
658 { |
|
659 enano_fputs($socket, "RCPT TO: <$mail_to>\r\n"); |
|
660 smtp_get_response($socket, "250", __LINE__); |
|
661 } |
|
662 |
|
663 // Ok now do the CC and BCC fields... |
|
664 @reset($bcc); |
|
665 while(list(, $bcc_address) = each($bcc)) |
|
666 { |
|
667 // Add an additional bit of error checking to bcc header... |
|
668 $bcc_address = trim($bcc_address); |
|
669 if (preg_match('#[^ ]+\@[^ ]+#', $bcc_address)) |
|
670 { |
|
671 enano_fputs($socket, "RCPT TO: <$bcc_address>\r\n"); |
|
672 smtp_get_response($socket, "250", __LINE__); |
|
673 } |
|
674 } |
|
675 |
|
676 @reset($cc); |
|
677 while(list(, $cc_address) = each($cc)) |
|
678 { |
|
679 // Add an additional bit of error checking to cc header |
|
680 $cc_address = trim($cc_address); |
|
681 if (preg_match('#[^ ]+\@[^ ]+#', $cc_address)) |
|
682 { |
|
683 enano_fputs($socket, "RCPT TO: <$cc_address>\r\n"); |
|
684 smtp_get_response($socket, "250", __LINE__); |
|
685 } |
|
686 } |
|
687 |
|
688 // Ok now we tell the server we are ready to start sending data |
|
689 enano_fputs($socket, "DATA\r\n"); |
|
690 |
|
691 // This is the last response code we look for until the end of the message. |
|
692 smtp_get_response($socket, "354", __LINE__); |
|
693 |
|
694 // Send the Subject Line... |
|
695 enano_fputs($socket, "Subject: $subject\r\n"); |
|
696 |
|
697 // Now the To Header. |
|
698 enano_fputs($socket, "To: $mail_to\r\n"); |
|
699 |
|
700 // Now any custom headers.... |
|
701 enano_fputs($socket, "$headers\r\n\r\n"); |
|
702 |
|
703 // Ok now we are ready for the message... |
|
704 enano_fputs($socket, "$message\r\n"); |
|
705 |
|
706 // Ok the all the ingredients are mixed in let's cook this puppy... |
|
707 enano_fputs($socket, ".\r\n"); |
|
708 smtp_get_response($socket, "250", __LINE__); |
|
709 |
|
710 // Now tell the server we are done and close the socket... |
|
711 enano_fputs($socket, "QUIT\r\n"); |
|
712 fclose($socket); |
|
713 |
|
714 return TRUE; |
|
715 } |
|
716 |
|
717 /** |
|
718 * Tell which version of Enano we're running. |
|
719 * @param bool $long if true, uses English version names (e.g. alpha, beta, release candidate). If false (default) uses abbreviations (1.0a1, 1.0b3, 1.0RC2, etc.) |
|
720 * @return string |
|
721 */ |
|
722 |
|
723 function enano_version($long = false, $no_nightly = false) |
|
724 { |
|
725 $r = getConfig('enano_version'); |
|
726 $rc = ( $long ) ? ' release candidate ' : 'RC'; |
|
727 $b = ( $long ) ? ' beta ' : 'b'; |
|
728 $a = ( $long ) ? ' alpha ' : 'a'; |
|
729 if($v = getConfig('enano_rc_version')) $r .= $rc.$v; |
|
730 if($v = getConfig('enano_beta_version')) $r .= $b.$v; |
|
731 if($v = getConfig('enano_alpha_version')) $r .= $a.$v; |
|
732 if ( defined('ENANO_NIGHTLY') && !$no_nightly ) |
|
733 { |
|
734 $nightlytag = ENANO_NIGHTLY_MONTH . '-' . ENANO_NIGHTLY_DAY . '-' . ENANO_NIGHTLY_YEAR; |
|
735 $nightlylong = ' nightly; build date: ' . ENANO_NIGHTLY_MONTH . '-' . ENANO_NIGHTLY_DAY . '-' . ENANO_NIGHTLY_YEAR; |
|
736 $r = ( $long ) ? $r . $nightlylong : $r . '-nightly-' . $nightlytag; |
|
737 } |
|
738 return $r; |
|
739 } |
|
740 |
|
741 function _dualurlenc($t) { |
|
742 return rawurlencode(rawurlencode($t)); |
|
743 } |
|
744 |
|
745 function _die($t) { |
|
746 $_ob = 'document.getElementById("ajaxEditContainer").innerHTML = unescape(\'' . rawurlencode('' . $t . '') . '\')'; |
|
747 die($_ob); |
|
748 } |
|
749 |
|
750 function jsdie($text) { |
|
751 global $db, $session, $paths, $template, $plugins; // Common objects |
|
752 $text = rawurlencode($text . "\n\nSQL Backtrace:\n" . $db->sql_backtrace()); |
|
753 echo 'document.getElementById("ajaxEditContainer").innerHTML = unescape(\''.$text.'\');'; |
|
754 } |
|
755 |
|
756 // HTML sanitizing function - written by Kallahar |
|
757 // Original function at: http://quickwired.com/kallahar/smallprojects/php_xss_filter_function.php |
|
758 |
|
759 // UNUSED - todo: remove this in gold or put it to use |
|
760 |
|
761 function RemoveXSS($val) { |
|
762 // remove all non-printable characters. CR(0a) and LF(0b) and TAB(9) are allowed |
|
763 // this prevents some character re-spacing such as <java\0script> |
|
764 // note that you have to handle splits with \n, \r, and \t later since they *are* allowed in some inputs |
|
765 $val = preg_replace('/([\x00-\x08][\x0b-\x0c][\x0e-\x20])/', '', $val); |
|
766 |
|
767 // straight replacements, the user should never need these since they're normal characters |
|
768 // this prevents like <IMG SRC=@avascript:alert('XSS')> |
|
769 $search = 'abcdefghijklmnopqrstuvwxyz'; |
|
770 $search .= 'ABCDEFGHIJKLMNOPQRSTUVWXYZ'; |
|
771 $search .= '1234567890!@#$%^&*()'; |
|
772 $search .= '~`";:?+/={}[]-_|\'\\'; |
|
773 for ($i = 0; $i < strlen($search); $i++) { |
|
774 // ;? matches the ;, which is optional |
|
775 // 0{0,7} matches any padded zeros, which are optional and go up to 8 chars |
|
776 |
|
777 // @ @ search for the hex values |
|
778 $val = preg_replace('/(&#[x|X]0{0,8}'.dechex(ord($search[$i])).';?)/i', $search[$i], $val); // with a ; |
|
779 // @ @ 0{0,7} matches '0' zero to seven times |
|
780 $val = preg_replace('/(�{0,8}'.ord($search[$i]).';?)/', $search[$i], $val); // with a ; |
|
781 } |
|
782 |
|
783 // now the only remaining whitespace attacks are \t, \n, and \r |
|
784 $ra1 = Array('javascript', 'vbscript', 'expression', 'applet', 'meta', 'xml', 'blink', 'link', 'script', 'embed', 'object', 'iframe', 'frame', 'frameset', 'ilayer', 'layer', 'bgsound', 'title', 'base'); |
|
785 $ra2 = Array('onabort', 'onactivate', 'onafterprint', 'onafterupdate', 'onbeforeactivate', 'onbeforecopy', 'onbeforecut', 'onbeforedeactivate', 'onbeforeeditfocus', 'onbeforepaste', 'onbeforeprint', 'onbeforeunload', 'onbeforeupdate', 'onblur', 'onbounce', 'oncellchange', 'onchange', 'onclick', 'oncontextmenu', 'oncontrolselect', 'oncopy', 'oncut', 'ondataavailable', 'ondatasetchanged', 'ondatasetcomplete', 'ondblclick', 'ondeactivate', 'ondrag', 'ondragend', 'ondragenter', 'ondragleave', 'ondragover', 'ondragstart', 'ondrop', 'onerror', 'onerrorupdate', 'onfilterchange', 'onfinish', 'onfocus', 'onfocusin', 'onfocusout', 'onhelp', 'onkeydown', 'onkeypress', 'onkeyup', 'onlayoutcomplete', 'onload', 'onlosecapture', 'onmousedown', 'onmouseenter', 'onmouseleave', 'onmousemove', 'onmouseout', 'onmouseover', 'onmouseup', 'onmousewheel', 'onmove', 'onmoveend', 'onmovestart', 'onpaste', 'onpropertychange', 'onreadystatechange', 'onreset', 'onresize', 'onresizeend', 'onresizestart', 'onrowenter', 'onrowexit', 'onrowsdelete', 'onrowsinserted', 'onscroll', 'onselect', 'onselectionchange', 'onselectstart', 'onstart', 'onstop', 'onsubmit', 'onunload'); |
|
786 $ra = array_merge($ra1, $ra2); |
|
787 |
|
788 $found = true; // keep replacing as long as the previous round replaced something |
|
789 while ($found == true) { |
|
790 $val_before = $val; |
|
791 for ($i = 0; $i < sizeof($ra); $i++) { |
|
792 $pattern = '/'; |
|
793 for ($j = 0; $j < strlen($ra[$i]); $j++) { |
|
794 if ($j > 0) { |
|
795 $pattern .= '('; |
|
796 $pattern .= '(&#[x|X]0{0,8}([9][a][b]);?)?'; |
|
797 $pattern .= '|(�{0,8}([9][10][13]);?)?'; |
|
798 $pattern .= ')?'; |
|
799 } |
|
800 $pattern .= $ra[$i][$j]; |
|
801 } |
|
802 $pattern .= '/i'; |
|
803 $replacement = substr($ra[$i], 0, 2).'<b></b>'.substr($ra[$i], 2); // add in <> to nerf the tag |
|
804 $val = preg_replace($pattern, $replacement, $val); // filter out the hex tags |
|
805 if ($val_before == $val) { |
|
806 // no replacements were made, so exit the loop |
|
807 $found = false; |
|
808 } |
|
809 } |
|
810 } |
|
811 return $val; |
|
812 } |
|
813 |
|
814 /** |
|
815 * Capitalizes the first letter of a string |
|
816 * @param $text string the text to be transformed |
|
817 * @return string |
|
818 */ |
|
819 |
|
820 function capitalize_first_letter($text) |
|
821 { |
|
822 return strtoupper(substr($text, 0, 1)) . substr($text, 1); |
|
823 } |
|
824 |
|
825 /** |
|
826 * Checks if a value in a bitfield is on or off |
|
827 * @param $bitfield int the bit-field value |
|
828 * @param $value int the value to switch off |
|
829 * @return bool |
|
830 */ |
|
831 |
|
832 function is_bit($bitfield, $value) |
|
833 { |
|
834 return ( $bitfield & $value ) ? true : false; |
|
835 } |
|
836 |
|
837 /** |
|
838 * Trims spaces/newlines from the beginning and end of a string |
|
839 * @param $text the text to process |
|
840 * @return string |
|
841 */ |
|
842 |
|
843 function trim_spaces($text) |
|
844 { |
|
845 $d = true; |
|
846 while($d) |
|
847 { |
|
848 $c = substr($text, 0, 1); |
|
849 $a = substr($text, strlen($text)-1, strlen($text)); |
|
850 if($c == "\n" || $c == "\r" || $c == "\t" || $c == ' ') $text = substr($text, 1, strlen($text)); |
|
851 elseif($a == "\n" || $a == "\r" || $a == "\t" || $a == ' ') $text = substr($text, 0, strlen($text)-1); |
|
852 else $d = false; |
|
853 } |
|
854 return $text; |
|
855 } |
|
856 |
|
857 /** |
|
858 * Enano-ese equivalent of str_split() which is only found in PHP5 |
|
859 * @param $text string the text to split |
|
860 * @param $inc int size of each block |
|
861 * @return array |
|
862 */ |
|
863 |
|
864 function enano_str_split($text, $inc = 1) |
|
865 { |
|
866 if($inc < 1) return false; |
|
867 if($inc >= strlen($text)) return Array($text); |
|
868 $len = ceil(strlen($text) / $inc); |
|
869 $ret = Array(); |
|
870 for($i=0;$i<strlen($text);$i=$i+$inc) |
|
871 { |
|
872 $ret[] = substr($text, $i, $inc); |
|
873 } |
|
874 return $ret; |
|
875 } |
|
876 |
|
877 /** |
|
878 * Converts a hexadecimal number to a binary string. |
|
879 * @param text string hexadecimal number |
|
880 * @return string |
|
881 */ |
|
882 function hex2bin($text) |
|
883 { |
|
884 $arr = enano_str_split($text, 2); |
|
885 $ret = ''; |
|
886 for ($i=0; $i<sizeof($arr); $i++) |
|
887 { |
|
888 $ret .= chr(hexdec($arr[$i])); |
|
889 } |
|
890 return $ret; |
|
891 } |
|
892 |
|
893 /** |
|
894 * Generates and/or prints a human-readable backtrace |
|
895 * @param bool $return - if true, this function returns a string, otherwise returns null |
|
896 * @return mixed |
|
897 */ |
|
898 |
|
899 function enano_debug_print_backtrace($return = false) |
|
900 { |
|
901 ob_start(); |
|
902 echo '<pre>'; |
|
903 debug_print_backtrace(); |
|
904 echo '</pre>'; |
|
905 $c = ob_get_contents(); |
|
906 ob_end_clean(); |
|
907 if($return) return $c; |
|
908 else echo $c; |
|
909 return null; |
|
910 } |
|
911 |
|
912 /** |
|
913 * Like rawurlencode(), but encodes all characters |
|
914 * @param string $text the text to encode |
|
915 * @param optional string $prefix text before each hex character |
|
916 * @param optional string $suffix text after each hex character |
|
917 * @return string |
|
918 */ |
|
919 |
|
920 function hexencode($text, $prefix = '%', $suffix = '') |
|
921 { |
|
922 $arr = enano_str_split($text); |
|
923 $r = ''; |
|
924 foreach($arr as $a) |
|
925 { |
|
926 $nibble = (string)dechex(ord($a)); |
|
927 if(strlen($nibble) == 1) $nibble = '0' . $nibble; |
|
928 $r .= $prefix . $nibble . $suffix; |
|
929 } |
|
930 return $r; |
|
931 } |
|
932 |
|
933 /** |
|
934 * Enano-ese equivalent of get_magic_quotes_gpc() |
|
935 * @return bool |
|
936 */ |
|
937 |
|
938 function enano_get_magic_quotes_gpc() |
|
939 { |
|
940 if(function_exists('get_magic_quotes_gpc')) |
|
941 { |
|
942 return ( get_magic_quotes_gpc() == 1 ); |
|
943 } |
|
944 else |
|
945 { |
|
946 return ( strtolower(@ini_get('magic_quotes_gpc')) == '1' ); |
|
947 } |
|
948 } |
|
949 |
|
950 /** |
|
951 * Recursive stripslashes() |
|
952 * @param array |
|
953 * @return array |
|
954 */ |
|
955 |
|
956 function stripslashes_recurse($arr) |
|
957 { |
|
958 foreach($arr as $k => $xxxx) |
|
959 { |
|
960 $val =& $arr[$k]; |
|
961 if(is_string($val)) |
|
962 $val = stripslashes($val); |
|
963 elseif(is_array($val)) |
|
964 $val = stripslashes_recurse($val); |
|
965 } |
|
966 return $arr; |
|
967 } |
|
968 |
|
969 /** |
|
970 * If magic_quotes_gpc is on, calls stripslashes() on everything in $_GET/$_POST/$_COOKIE |
|
971 * @ignore - this doesn't work |
|
972 * @todo port version from the PHP manual |
|
973 * @return void |
|
974 */ |
|
975 function strip_magic_quotes_gpc() |
|
976 { |
|
977 if(enano_get_magic_quotes_gpc()) |
|
978 { |
|
979 $_POST = stripslashes_recurse($_POST); |
|
980 $_GET = stripslashes_recurse($_GET); |
|
981 $_COOKIE = stripslashes_recurse($_COOKIE); |
|
982 } |
|
983 } |
|
984 |
|
985 /** |
|
986 * A very basic single-character compression algorithm for binary strings/bitfields |
|
987 * @param string $bits the text to compress |
|
988 * @return string |
|
989 */ |
|
990 |
|
991 function compress_bitfield($bits) |
|
992 { |
|
993 $crc32 = crc32($bits); |
|
994 $bits .= '0'; |
|
995 $start_pos = 0; |
|
996 $current = substr($bits, 1, 1); |
|
997 $last = substr($bits, 0, 1); |
|
998 $chunk_size = 1; |
|
999 $len = strlen($bits); |
|
1000 $crc = $len; |
|
1001 $crcval = 0; |
|
1002 for ( $i = 1; $i < $len; $i++ ) |
|
1003 { |
|
1004 $current = substr($bits, $i, 1); |
|
1005 $last = substr($bits, $i - 1, 1); |
|
1006 $next = substr($bits, $i + 1, 1); |
|
1007 // Are we on the last character? |
|
1008 if($current == $last && $i+1 < $len) |
|
1009 $chunk_size++; |
|
1010 else |
|
1011 { |
|
1012 if($i+1 == $len && $current == $next) |
|
1013 { |
|
1014 // This character completes a chunk |
|
1015 $chunk_size++; |
|
1016 $i++; |
|
1017 $chunk = substr($bits, $start_pos, $chunk_size); |
|
1018 $chunklen = strlen($chunk); |
|
1019 $newchunk = $last . '[' . $chunklen . ']'; |
|
1020 $newlen = strlen($newchunk); |
|
1021 $bits = substr($bits, 0, $start_pos) . $newchunk . substr($bits, $i, $len); |
|
1022 $chunk_size = 1; |
|
1023 $i = $start_pos + $newlen; |
|
1024 $start_pos = $i; |
|
1025 $len = strlen($bits); |
|
1026 $crcval = $crcval + $chunklen; |
|
1027 } |
|
1028 else |
|
1029 { |
|
1030 // Last character completed a chunk |
|
1031 $chunk = substr($bits, $start_pos, $chunk_size); |
|
1032 $chunklen = strlen($chunk); |
|
1033 $newchunk = $last . '[' . $chunklen . '],'; |
|
1034 $newlen = strlen($newchunk); |
|
1035 $bits = substr($bits, 0, $start_pos) . $newchunk . substr($bits, $i, $len); |
|
1036 $chunk_size = 1; |
|
1037 $i = $start_pos + $newlen; |
|
1038 $start_pos = $i; |
|
1039 $len = strlen($bits); |
|
1040 $crcval = $crcval + $chunklen; |
|
1041 } |
|
1042 } |
|
1043 } |
|
1044 if($crc != $crcval) |
|
1045 { |
|
1046 echo __FUNCTION__.'(): ERROR: length check failed, this is a bug in the algorithm<br />Debug info: aiming for a CRC val of '.$crc.', got '.$crcval; |
|
1047 return false; |
|
1048 } |
|
1049 $compressed = 'cbf:len='.$crc.';crc='.dechex($crc32).';data='.$bits.'|end'; |
|
1050 return $compressed; |
|
1051 } |
|
1052 |
|
1053 /** |
|
1054 * Uncompresses a bitfield compressed with compress_bitfield() |
|
1055 * @param string $bits the compressed bitfield |
|
1056 * @return string the uncompressed, original (we hope) bitfield OR bool false on error |
|
1057 */ |
|
1058 |
|
1059 function uncompress_bitfield($bits) |
|
1060 { |
|
1061 if(substr($bits, 0, 4) != 'cbf:') |
|
1062 { |
|
1063 echo __FUNCTION__.'(): ERROR: Invalid stream'; |
|
1064 return false; |
|
1065 } |
|
1066 $len = intval(substr($bits, strpos($bits, 'len=')+4, strpos($bits, ';')-strpos($bits, 'len=')-4)); |
|
1067 $crc = substr($bits, strpos($bits, 'crc=')+4, 8); |
|
1068 $data = substr($bits, strpos($bits, 'data=')+5, strpos($bits, '|end')-strpos($bits, 'data=')-5); |
|
1069 $data = explode(',', $data); |
|
1070 foreach($data as $a => $b) |
|
1071 { |
|
1072 $d =& $data[$a]; |
|
1073 $char = substr($d, 0, 1); |
|
1074 $dlen = intval(substr($d, 2, strlen($d)-1)); |
|
1075 $s = ''; |
|
1076 for($i=0;$i<$dlen;$i++,$s.=$char); |
|
1077 $d = $s; |
|
1078 unset($s, $dlen, $char); |
|
1079 } |
|
1080 $decompressed = implode('', $data); |
|
1081 $decompressed = substr($decompressed, 0, -1); |
|
1082 $dcrc = (string)dechex(crc32($decompressed)); |
|
1083 if($dcrc != $crc) |
|
1084 { |
|
1085 echo __FUNCTION__.'(): ERROR: CRC check failed<br />debug info:<br />original crc: '.$crc.'<br />decomp\'ed crc: '.$dcrc.'<br />'; |
|
1086 return false; |
|
1087 } |
|
1088 return $decompressed; |
|
1089 } |
|
1090 |
|
1091 /** |
|
1092 * Exports a MySQL table into a SQL string. |
|
1093 * @param string $table The name of the table to export |
|
1094 * @param bool $structure If true, include a CREATE TABLE command |
|
1095 * @param bool $data If true, include the contents of the table |
|
1096 * @param bool $compact If true, omits newlines between parts of SQL statements, use in Enano database exporter |
|
1097 * @return string |
|
1098 */ |
|
1099 |
|
1100 function export_table($table, $structure = true, $data = true, $compact = false) |
|
1101 { |
|
1102 global $db, $session, $paths, $template, $plugins; // Common objects |
|
1103 $struct_keys = ''; |
|
1104 $divider = (!$compact) ? "\n" : "\n"; |
|
1105 $spacer1 = (!$compact) ? "\n" : " "; |
|
1106 $spacer2 = (!$compact) ? " " : " "; |
|
1107 $rowspacer = (!$compact) ? "\n " : " "; |
|
1108 $index_list = Array(); |
|
1109 $cols = $db->sql_query('SHOW COLUMNS IN '.$table.';'); |
|
1110 if(!$cols) |
|
1111 { |
|
1112 echo 'export_table(): Error getting column list: '.$db->get_error_text().'<br />'; |
|
1113 return false; |
|
1114 } |
|
1115 $col = Array(); |
|
1116 $sqlcol = Array(); |
|
1117 $collist = Array(); |
|
1118 $pri_keys = Array(); |
|
1119 // Using fetchrow_num() here to compensate for MySQL l10n |
|
1120 while( $row = $db->fetchrow_num() ) |
|
1121 { |
|
1122 $field =& $row[0]; |
|
1123 $type =& $row[1]; |
|
1124 $null =& $row[2]; |
|
1125 $key =& $row[3]; |
|
1126 $def =& $row[4]; |
|
1127 $extra =& $row[5]; |
|
1128 $col[] = Array( |
|
1129 'name'=>$field, |
|
1130 'type'=>$type, |
|
1131 'null'=>$null, |
|
1132 'key'=>$key, |
|
1133 'default'=>$def, |
|
1134 'extra'=>$extra, |
|
1135 ); |
|
1136 $collist[] = $field; |
|
1137 } |
|
1138 |
|
1139 if ( $structure ) |
|
1140 { |
|
1141 $db->sql_query('SET SQL_QUOTE_SHOW_CREATE = 0;'); |
|
1142 $struct = $db->sql_query('SHOW CREATE TABLE '.$table.';'); |
|
1143 if ( !$struct ) |
|
1144 $db->_die(); |
|
1145 $row = $db->fetchrow_num(); |
|
1146 $db->free_result(); |
|
1147 $struct = $row[1]; |
|
1148 $struct = preg_replace("/\n\) ENGINE=(.+)$/", "\n);", $struct); |
|
1149 unset($row); |
|
1150 if ( $compact ) |
|
1151 { |
|
1152 $struct_arr = explode("\n", $struct); |
|
1153 foreach ( $struct_arr as $i => $leg ) |
|
1154 { |
|
1155 if ( $i == 0 ) |
|
1156 continue; |
|
1157 $test = trim($leg); |
|
1158 if ( empty($test) ) |
|
1159 { |
|
1160 unset($struct_arr[$i]); |
|
1161 continue; |
|
1162 } |
|
1163 $struct_arr[$i] = preg_replace('/^([\s]*)/', ' ', $leg); |
|
1164 } |
|
1165 $struct = implode("", $struct_arr); |
|
1166 } |
|
1167 } |
|
1168 |
|
1169 // Structuring complete |
|
1170 if($data) |
|
1171 { |
|
1172 $datq = $db->sql_query('SELECT * FROM '.$table.';'); |
|
1173 if(!$datq) |
|
1174 { |
|
1175 echo 'export_table(): Error getting column list: '.$db->get_error_text().'<br />'; |
|
1176 return false; |
|
1177 } |
|
1178 if($db->numrows() < 1) |
|
1179 { |
|
1180 if($structure) return $struct; |
|
1181 else return ''; |
|
1182 } |
|
1183 $rowdata = Array(); |
|
1184 $dataqs = Array(); |
|
1185 $insert_strings = Array(); |
|
1186 $z = false; |
|
1187 while($row = $db->fetchrow_num()) |
|
1188 { |
|
1189 $z = false; |
|
1190 foreach($row as $i => $cell) |
|
1191 { |
|
1192 $str = mysql_encode_column($cell, $col[$i]['type']); |
|
1193 $rowdata[] = $str; |
|
1194 } |
|
1195 $dataqs2 = implode(",$rowspacer", $dataqs) . ",$rowspacer" . '( ' . implode(', ', $rowdata) . ' )'; |
|
1196 $ins = 'INSERT INTO '.$table.'( '.implode(',', $collist).' ) VALUES' . $dataqs2 . ";"; |
|
1197 if ( strlen( $ins ) > MYSQL_MAX_PACKET_SIZE ) |
|
1198 { |
|
1199 // We've exceeded the maximum allowed packet size for MySQL - separate this into a different query |
|
1200 $insert_strings[] = 'INSERT INTO '.$table.'( '.implode(',', $collist).' ) VALUES' . implode(",$rowspacer", $dataqs) . ";";; |
|
1201 $dataqs = Array('( ' . implode(', ', $rowdata) . ' )'); |
|
1202 $z = true; |
|
1203 } |
|
1204 else |
|
1205 { |
|
1206 $dataqs[] = '( ' . implode(', ', $rowdata) . ' )'; |
|
1207 } |
|
1208 $rowdata = Array(); |
|
1209 } |
|
1210 if ( !$z ) |
|
1211 { |
|
1212 $insert_strings[] = 'INSERT INTO '.$table.'( '.implode(',', $collist).' ) VALUES' . implode(",$rowspacer", $dataqs) . ";";; |
|
1213 $dataqs = Array(); |
|
1214 } |
|
1215 $datstring = implode($divider, $insert_strings); |
|
1216 } |
|
1217 if($structure && !$data) return $struct; |
|
1218 elseif(!$structure && $data) return $datstring; |
|
1219 elseif($structure && $data) return $struct . $divider . $datstring; |
|
1220 elseif(!$structure && !$data) return ''; |
|
1221 } |
|
1222 |
|
1223 /** |
|
1224 * Encodes a string value for use in an INSERT statement for given column type $type. |
|
1225 * @access private |
|
1226 */ |
|
1227 |
|
1228 function mysql_encode_column($input, $type) |
|
1229 { |
|
1230 global $db, $session, $paths, $template, $plugins; // Common objects |
|
1231 // Decide whether to quote the string or not |
|
1232 if(substr($type, 0, 7) == 'varchar' || $type == 'datetime' || $type == 'text' || $type == 'tinytext' || $type == 'smalltext' || $type == 'longtext' || substr($type, 0, 4) == 'char') |
|
1233 { |
|
1234 $str = "'" . $db->escape($input) . "'"; |
|
1235 } |
|
1236 elseif(in_array($type, Array('blob', 'longblob', 'mediumblob', 'smallblob')) || substr($type, 0, 6) == 'binary' || substr($type, 0, 9) == 'varbinary') |
|
1237 { |
|
1238 $str = '0x' . hexencode($input, '', ''); |
|
1239 } |
|
1240 elseif(is_null($input)) |
|
1241 { |
|
1242 $str = 'NULL'; |
|
1243 } |
|
1244 else |
|
1245 { |
|
1246 $str = (string)$input; |
|
1247 } |
|
1248 return $str; |
|
1249 } |
|
1250 |
|
1251 /** |
|
1252 * Creates an associative array defining which file extensions are allowed and which ones aren't |
|
1253 * @return array keyname will be a file extension, value will be true or false |
|
1254 */ |
|
1255 |
|
1256 function fetch_allowed_extensions() |
|
1257 { |
|
1258 global $mime_types; |
|
1259 $bits = getConfig('allowed_mime_types'); |
|
1260 if(!$bits) return Array(false); |
|
1261 $bits = uncompress_bitfield($bits); |
|
1262 if(!$bits) return Array(false); |
|
1263 $bits = enano_str_split($bits, 1); |
|
1264 $ret = Array(); |
|
1265 $mt = array_keys($mime_types); |
|
1266 foreach($bits as $i => $b) |
|
1267 { |
|
1268 $ret[$mt[$i]] = ( $b == '1' ) ? true : false; |
|
1269 } |
|
1270 return $ret; |
|
1271 } |
|
1272 |
|
1273 /** |
|
1274 * Generates a random key suitable for encryption |
|
1275 * @param int $len the length of the key |
|
1276 * @return string a BINARY key |
|
1277 */ |
|
1278 |
|
1279 function randkey($len = 32) |
|
1280 { |
|
1281 $key = ''; |
|
1282 for($i=0;$i<$len;$i++) |
|
1283 { |
|
1284 $key .= chr(mt_rand(0, 255)); |
|
1285 } |
|
1286 return $key; |
|
1287 } |
|
1288 |
|
1289 /** |
|
1290 * Decodes a hex string. |
|
1291 * @param string $hex The hex code to decode |
|
1292 * @return string |
|
1293 */ |
|
1294 |
|
1295 function hexdecode($hex) |
|
1296 { |
|
1297 $hex = enano_str_split($hex, 2); |
|
1298 $bin_key = ''; |
|
1299 foreach($hex as $nibble) |
|
1300 { |
|
1301 $byte = chr(hexdec($nibble)); |
|
1302 $bin_key .= $byte; |
|
1303 } |
|
1304 return $bin_key; |
|
1305 } |
|
1306 |
|
1307 /** |
|
1308 * Enano's own (almost) bulletproof HTML sanitizer. |
|
1309 * @param string $html The input HTML |
|
1310 * @return string cleaned HTML |
|
1311 */ |
|
1312 |
|
1313 function sanitize_html($html, $filter_php = true) |
|
1314 { |
|
1315 |
|
1316 $html = preg_replace('#<([a-z]+)([\s]+)([^>]+?)'.htmlalternatives('javascript:').'(.+?)>(.*?)</\\1>#is', '<\\1\\2\\3javascript:\\59>\\60</\\1>', $html); |
|
1317 $html = preg_replace('#<([a-z]+)([\s]+)([^>]+?)'.htmlalternatives('javascript:').'(.+?)>#is', '<\\1\\2\\3javascript:\\59>', $html); |
|
1318 |
|
1319 if($filter_php) |
|
1320 $html = str_replace( |
|
1321 Array('<?php', '<?', '<%', '?>', '%>'), |
|
1322 Array('<?php', '<?', '<%', '?>', '%>'), |
|
1323 $html); |
|
1324 |
|
1325 $tag_whitelist = array_keys ( setupAttributeWhitelist() ); |
|
1326 if ( !$filter_php ) |
|
1327 $tag_whitelist[] = '?php'; |
|
1328 $len = strlen($html); |
|
1329 $in_quote = false; |
|
1330 $quote_char = ''; |
|
1331 $tag_start = 0; |
|
1332 $tag_name = ''; |
|
1333 $in_tag = false; |
|
1334 $trk_name = false; |
|
1335 for ( $i = 0; $i < $len; $i++ ) |
|
1336 { |
|
1337 $chr = $html{$i}; |
|
1338 $prev = ( $i == 0 ) ? '' : $html{ $i - 1 }; |
|
1339 $next = ( ( $i + 1 ) == $len ) ? '' : $html { $i + 1 }; |
|
1340 if ( $in_quote && $in_tag ) |
|
1341 { |
|
1342 if ( $quote_char == $chr && $prev != '\\' ) |
|
1343 $in_quote = false; |
|
1344 } |
|
1345 elseif ( ( $chr == '"' || $chr == "'" ) && $prev != '\\' && $in_tag ) |
|
1346 { |
|
1347 $in_quote = true; |
|
1348 $quote_char = $chr; |
|
1349 } |
|
1350 if ( $chr == '<' && !$in_tag && $next != '/' ) |
|
1351 { |
|
1352 // start of a tag |
|
1353 $tag_start = $i; |
|
1354 $in_tag = true; |
|
1355 $trk_name = true; |
|
1356 } |
|
1357 elseif ( !$in_quote && $in_tag && $chr == '>' ) |
|
1358 { |
|
1359 $full_tag = substr($html, $tag_start, ( $i - $tag_start ) + 1 ); |
|
1360 $l = strlen($tag_name) + 2; |
|
1361 $attribs_only = trim( substr($full_tag, $l, ( strlen($full_tag) - $l - 1 ) ) ); |
|
1362 |
|
1363 // Debugging message |
|
1364 // echo htmlspecialchars($full_tag) . '<br />'; |
|
1365 |
|
1366 if ( !in_array($tag_name, $tag_whitelist) ) |
|
1367 { |
|
1368 // Illegal tag |
|
1369 //echo $tag_name . ' '; |
|
1370 |
|
1371 $s = ( empty($attribs_only) ) ? '' : ' '; |
|
1372 |
|
1373 $sanitized = '<' . $tag_name . $s . $attribs_only . '>'; |
|
1374 |
|
1375 $html = substr($html, 0, $tag_start) . $sanitized . substr($html, $i + 1); |
|
1376 $html = str_replace('</' . $tag_name . '>', '</' . $tag_name . '>', $html); |
|
1377 $new_i = $tag_start + strlen($sanitized); |
|
1378 |
|
1379 $len = strlen($html); |
|
1380 $i = $new_i; |
|
1381 |
|
1382 $in_tag = false; |
|
1383 $tag_name = ''; |
|
1384 continue; |
|
1385 } |
|
1386 else |
|
1387 { |
|
1388 if ( $tag_name == '?php' && !$filter_php ) |
|
1389 continue; |
|
1390 $f = fixTagAttributes( $attribs_only, $tag_name ); |
|
1391 $s = ( empty($f) ) ? '' : ' '; |
|
1392 |
|
1393 $sanitized = '<' . $tag_name . $f . '>'; |
|
1394 $new_i = $tag_start + strlen($sanitized); |
|
1395 |
|
1396 $html = substr($html, 0, $tag_start) . $sanitized . substr($html, $i + 1); |
|
1397 $len = strlen($html); |
|
1398 $i = $new_i; |
|
1399 |
|
1400 $in_tag = false; |
|
1401 $tag_name = ''; |
|
1402 continue; |
|
1403 } |
|
1404 } |
|
1405 elseif ( $in_tag && $trk_name ) |
|
1406 { |
|
1407 $is_alphabetical = ( strtolower($chr) != strtoupper($chr) || in_array($chr, array('0', '1', '2', '3', '4', '5', '6', '7', '8', '9')) || $chr == '?' ); |
|
1408 if ( $is_alphabetical ) |
|
1409 $tag_name .= $chr; |
|
1410 else |
|
1411 { |
|
1412 $trk_name = false; |
|
1413 } |
|
1414 } |
|
1415 |
|
1416 } |
|
1417 |
|
1418 return $html; |
|
1419 |
|
1420 } |
|
1421 |
|
1422 function htmlalternatives($string) |
|
1423 { |
|
1424 $ret = ''; |
|
1425 for ( $i = 0; $i < strlen($string); $i++ ) |
|
1426 { |
|
1427 $chr = $string{$i}; |
|
1428 $ch1 = ord($chr); |
|
1429 $ch2 = dechex($ch1); |
|
1430 $byte = '(&\\#([0]*){0,7}' . $ch1 . ';|\\\\([0]*){0,7}' . $ch1 . ';|\\\\([0]*){0,7}' . $ch2 . ';|&\\#x([0]*){0,7}' . $ch2 . ';|%([0]*){0,7}' . $ch2 . '|' . preg_quote($chr) . ')'; |
|
1431 $ret .= $byte; |
|
1432 $ret .= '([\s]){0,2}'; |
|
1433 } |
|
1434 return $ret; |
|
1435 } |
|
1436 |
|
1437 /** |
|
1438 * Paginates (breaks into multiple pages) a MySQL result resource, which is treated as unbuffered. |
|
1439 * @param resource The MySQL result resource. This should preferably be an unbuffered query. |
|
1440 * @param string A template, with variables being named after the column name |
|
1441 * @param int The number of total results. This should be determined by a second query. |
|
1442 * @param string sprintf-style formatting string for URLs for result pages. First parameter will be start offset. |
|
1443 * @param int Optional. Start offset in individual results. Defaults to 0. |
|
1444 * @param int Optional. The number of results per page. Defualts to 10. |
|
1445 * @param int Optional. An associative array of functions to call, with key names being column names, and values being function names. Values can also be an array with key 0 being either an object or a string(class name) and key 1 being a [static] method. |
|
1446 * @param string Optional. The text to be sent before the result list, only if there are any results. Possibly the start of a table. |
|
1447 * @param string Optional. The text to be sent after the result list, only if there are any results. Possibly the end of a table. |
|
1448 * @return string |
|
1449 */ |
|
1450 |
|
1451 function paginate($q, $tpl_text, $num_results, $result_url, $start = 0, $perpage = 10, $callers = Array(), $header = '', $footer = '') |
|
1452 { |
|
1453 global $db, $session, $paths, $template, $plugins; // Common objects |
|
1454 $parser = $template->makeParserText($tpl_text); |
|
1455 $num_pages = ceil ( $num_results / $perpage ); |
|
1456 $out = ''; |
|
1457 $i = 0; |
|
1458 $this_page = ceil ( $start / $perpage ); |
|
1459 |
|
1460 // Build paginator |
|
1461 $begin = '<div class="tblholder" style="display: table; margin: 10px 0 0 auto;"> |
|
1462 <table border="0" cellspacing="1" cellpadding="4"> |
|
1463 <tr><th>Page:</th>'; |
|
1464 $block = '<td class="row1" style="text-align: center;">{LINK}</td>'; |
|
1465 $end = '</tr></table></div>'; |
|
1466 $blk = $template->makeParserText($block); |
|
1467 $inner = ''; |
|
1468 $cls = 'row2'; |
|
1469 if ( $num_pages < 5 ) |
|
1470 { |
|
1471 for ( $i = 0; $i < $num_pages; $i++ ) |
|
1472 { |
|
1473 $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1474 $offset = strval($i * $perpage); |
|
1475 $url = sprintf($result_url, $offset); |
|
1476 $j = $i + 1; |
|
1477 $link = ( $offset == strval($start) ) ? "<b>$j</b>" : "<a href=".'"'."$url".'"'." style='text-decoration: none;'>$j</a>"; |
|
1478 $blk->assign_vars(array( |
|
1479 'CLASS'=>$cls, |
|
1480 'LINK'=>$link |
|
1481 )); |
|
1482 $inner .= $blk->run(); |
|
1483 } |
|
1484 } |
|
1485 else |
|
1486 { |
|
1487 if ( $this_page + 5 > $num_pages ) |
|
1488 { |
|
1489 $list = Array(); |
|
1490 $tp = $this_page; |
|
1491 if ( $this_page + 0 == $num_pages ) $tp = $tp - 3; |
|
1492 if ( $this_page + 1 == $num_pages ) $tp = $tp - 2; |
|
1493 if ( $this_page + 2 == $num_pages ) $tp = $tp - 1; |
|
1494 for ( $i = $tp - 1; $i <= $tp + 1; $i++ ) |
|
1495 { |
|
1496 $list[] = $i; |
|
1497 } |
|
1498 } |
|
1499 else |
|
1500 { |
|
1501 $list = Array(); |
|
1502 $current = $this_page; |
|
1503 $lower = ( $current < 3 ) ? 1 : $current - 1; |
|
1504 for ( $i = 0; $i < 3; $i++ ) |
|
1505 { |
|
1506 $list[] = $lower + $i; |
|
1507 } |
|
1508 } |
|
1509 $url = sprintf($result_url, '0'); |
|
1510 $link = ( 0 == $start ) ? "<b>First</b>" : "<a href=".'"'."$url".'"'." style='text-decoration: none;'>« First</a>"; |
|
1511 $blk->assign_vars(array( |
|
1512 'CLASS'=>$cls, |
|
1513 'LINK'=>$link |
|
1514 )); |
|
1515 $inner .= $blk->run(); |
|
1516 |
|
1517 // if ( !in_array(1, $list) ) |
|
1518 // { |
|
1519 // $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1520 // $blk->assign_vars(array('CLASS'=>$cls,'LINK'=>'...')); |
|
1521 // $inner .= $blk->run(); |
|
1522 // } |
|
1523 |
|
1524 foreach ( $list as $i ) |
|
1525 { |
|
1526 if ( $i == $num_pages ) |
|
1527 break; |
|
1528 $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1529 $offset = strval($i * $perpage); |
|
1530 $url = sprintf($result_url, $offset); |
|
1531 $j = $i + 1; |
|
1532 $link = ( $offset == strval($start) ) ? "<b>$j</b>" : "<a href=".'"'."$url".'"'." style='text-decoration: none;'>$j</a>"; |
|
1533 $blk->assign_vars(array( |
|
1534 'CLASS'=>$cls, |
|
1535 'LINK'=>$link |
|
1536 )); |
|
1537 $inner .= $blk->run(); |
|
1538 } |
|
1539 |
|
1540 $total = $num_pages * $perpage - $perpage; |
|
1541 |
|
1542 if ( $this_page < $num_pages ) |
|
1543 { |
|
1544 // $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1545 // $blk->assign_vars(array('CLASS'=>$cls,'LINK'=>'...')); |
|
1546 // $inner .= $blk->run(); |
|
1547 |
|
1548 $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1549 $offset = strval($total); |
|
1550 $url = sprintf($result_url, $offset); |
|
1551 $j = $i + 1; |
|
1552 $link = ( $offset == strval($start) ) ? "<b>Last</b>" : "<a href=".'"'."$url".'"'." style='text-decoration: none;'>Last »</a>"; |
|
1553 $blk->assign_vars(array( |
|
1554 'CLASS'=>$cls, |
|
1555 'LINK'=>$link |
|
1556 )); |
|
1557 $inner .= $blk->run(); |
|
1558 } |
|
1559 |
|
1560 } |
|
1561 |
|
1562 $inner .= '<td class="row2" style="cursor: pointer;" onclick="paginator_goto(this, '.$this_page.', '.$num_pages.', '.$perpage.', unescape(\'' . rawurlencode($result_url) . '\'));">↓</td>'; |
|
1563 |
|
1564 $paginator = "\n$begin$inner$end\n"; |
|
1565 $out .= $paginator; |
|
1566 |
|
1567 $cls = 'row2'; |
|
1568 |
|
1569 if ( $row = $db->fetchrow($q) ) |
|
1570 { |
|
1571 $i = 0; |
|
1572 $out .= $header; |
|
1573 do { |
|
1574 $i++; |
|
1575 if ( $i <= $start ) |
|
1576 { |
|
1577 continue; |
|
1578 } |
|
1579 if ( ( $i - $start ) > $perpage ) |
|
1580 { |
|
1581 break; |
|
1582 } |
|
1583 $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1584 foreach ( $row as $j => $val ) |
|
1585 { |
|
1586 if ( isset($callers[$j]) ) |
|
1587 { |
|
1588 $tmp = ( is_callable($callers[$j]) ) ? @call_user_func($callers[$j], $val, $row) : $v; |
|
1589 |
|
1590 if ( $tmp ) |
|
1591 { |
|
1592 $row[$j] = $tmp; |
|
1593 } |
|
1594 } |
|
1595 } |
|
1596 $parser->assign_vars($row); |
|
1597 $parser->assign_vars(array('_css_class' => $cls)); |
|
1598 $out .= $parser->run(); |
|
1599 } while ( $row = $db->fetchrow($q) ); |
|
1600 $out .= $footer; |
|
1601 } |
|
1602 |
|
1603 $out .= $paginator; |
|
1604 |
|
1605 return $out; |
|
1606 } |
|
1607 |
|
1608 /** |
|
1609 * This is the same as paginate(), but it processes an array instead of a MySQL result resource. |
|
1610 * @param array The results. Each value is simply echoed. |
|
1611 * @param int The number of total results. This should be determined by a second query. |
|
1612 * @param string sprintf-style formatting string for URLs for result pages. First parameter will be start offset. |
|
1613 * @param int Optional. Start offset in individual results. Defaults to 0. |
|
1614 * @param int Optional. The number of results per page. Defualts to 10. |
|
1615 * @param string Optional. The text to be sent before the result list, only if there are any results. Possibly the start of a table. |
|
1616 * @param string Optional. The text to be sent after the result list, only if there are any results. Possibly the end of a table. |
|
1617 * @return string |
|
1618 */ |
|
1619 |
|
1620 function paginate_array($q, $num_results, $result_url, $start = 0, $perpage = 10, $header = '', $footer = '') |
|
1621 { |
|
1622 global $db, $session, $paths, $template, $plugins; // Common objects |
|
1623 $parser = $template->makeParserText($tpl_text); |
|
1624 $num_pages = ceil ( $num_results / $perpage ); |
|
1625 $out = ''; |
|
1626 $i = 0; |
|
1627 $this_page = ceil ( $start / $perpage ); |
|
1628 |
|
1629 // Build paginator |
|
1630 $begin = '<div class="tblholder" style="display: table; margin: 10px 0 0 auto;"> |
|
1631 <table border="0" cellspacing="1" cellpadding="4"> |
|
1632 <tr><th>Page:</th>'; |
|
1633 $block = '<td class="row1" style="text-align: center;">{LINK}</td>'; |
|
1634 $end = '</tr></table></div>'; |
|
1635 $blk = $template->makeParserText($block); |
|
1636 $inner = ''; |
|
1637 $cls = 'row2'; |
|
1638 if ( $start > 0 ) |
|
1639 { |
|
1640 $url = sprintf($result_url, abs($start - $perpage)); |
|
1641 $link = "<a href=".'"'."$url".'"'." style='text-decoration: none;'>« Prev</a>"; |
|
1642 $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1643 $blk->assign_vars(array( |
|
1644 'CLASS'=>$cls, |
|
1645 'LINK'=>$link |
|
1646 )); |
|
1647 $inner .= $blk->run(); |
|
1648 } |
|
1649 if ( $num_pages < 5 ) |
|
1650 { |
|
1651 for ( $i = 0; $i < $num_pages; $i++ ) |
|
1652 { |
|
1653 $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1654 $offset = strval($i * $perpage); |
|
1655 $url = sprintf($result_url, $offset); |
|
1656 $j = $i + 1; |
|
1657 $link = ( $offset == strval($start) ) ? "<b>$j</b>" : "<a href=".'"'."$url".'"'." style='text-decoration: none;'>$j</a>"; |
|
1658 $blk->assign_vars(array( |
|
1659 'CLASS'=>$cls, |
|
1660 'LINK'=>$link |
|
1661 )); |
|
1662 $inner .= $blk->run(); |
|
1663 } |
|
1664 } |
|
1665 else |
|
1666 { |
|
1667 if ( $this_page + 5 > $num_pages ) |
|
1668 { |
|
1669 $list = Array(); |
|
1670 $tp = $this_page; |
|
1671 if ( $this_page + 0 == $num_pages ) $tp = $tp - 3; |
|
1672 if ( $this_page + 1 == $num_pages ) $tp = $tp - 2; |
|
1673 if ( $this_page + 2 == $num_pages ) $tp = $tp - 1; |
|
1674 for ( $i = $tp - 1; $i <= $tp + 1; $i++ ) |
|
1675 { |
|
1676 $list[] = $i; |
|
1677 } |
|
1678 } |
|
1679 else |
|
1680 { |
|
1681 $list = Array(); |
|
1682 $current = $this_page; |
|
1683 $lower = ( $current < 3 ) ? 1 : $current - 1; |
|
1684 for ( $i = 0; $i < 3; $i++ ) |
|
1685 { |
|
1686 $list[] = $lower + $i; |
|
1687 } |
|
1688 } |
|
1689 $url = sprintf($result_url, '0'); |
|
1690 $link = ( 0 == $start ) ? "<b>First</b>" : "<a href=".'"'."$url".'"'." style='text-decoration: none;'>« First</a>"; |
|
1691 $blk->assign_vars(array( |
|
1692 'CLASS'=>$cls, |
|
1693 'LINK'=>$link |
|
1694 )); |
|
1695 $inner .= $blk->run(); |
|
1696 |
|
1697 // if ( !in_array(1, $list) ) |
|
1698 // { |
|
1699 // $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1700 // $blk->assign_vars(array('CLASS'=>$cls,'LINK'=>'...')); |
|
1701 // $inner .= $blk->run(); |
|
1702 // } |
|
1703 |
|
1704 foreach ( $list as $i ) |
|
1705 { |
|
1706 if ( $i == $num_pages ) |
|
1707 break; |
|
1708 $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1709 $offset = strval($i * $perpage); |
|
1710 $url = sprintf($result_url, $offset); |
|
1711 $j = $i + 1; |
|
1712 $link = ( $offset == strval($start) ) ? "<b>$j</b>" : "<a href=".'"'."$url".'"'." style='text-decoration: none;'>$j</a>"; |
|
1713 $blk->assign_vars(array( |
|
1714 'CLASS'=>$cls, |
|
1715 'LINK'=>$link |
|
1716 )); |
|
1717 $inner .= $blk->run(); |
|
1718 } |
|
1719 |
|
1720 $total = $num_pages * $perpage - $perpage; |
|
1721 |
|
1722 if ( $this_page < $num_pages ) |
|
1723 { |
|
1724 // $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1725 // $blk->assign_vars(array('CLASS'=>$cls,'LINK'=>'...')); |
|
1726 // $inner .= $blk->run(); |
|
1727 |
|
1728 $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1729 $offset = strval($total); |
|
1730 $url = sprintf($result_url, $offset); |
|
1731 $j = $i + 1; |
|
1732 $link = ( $offset == strval($start) ) ? "<b>Last</b>" : "<a href=".'"'."$url".'"'." style='text-decoration: none;'>Last »</a>"; |
|
1733 $blk->assign_vars(array( |
|
1734 'CLASS'=>$cls, |
|
1735 'LINK'=>$link |
|
1736 )); |
|
1737 $inner .= $blk->run(); |
|
1738 } |
|
1739 |
|
1740 } |
|
1741 |
|
1742 if ( $start < $total ) |
|
1743 { |
|
1744 $url = sprintf($result_url, abs($start + $perpage)); |
|
1745 $link = "<a href=".'"'."$url".'"'." style='text-decoration: none;'>Next »</a>"; |
|
1746 $cls = ( $cls == 'row1' ) ? 'row2' : 'row1'; |
|
1747 $blk->assign_vars(array( |
|
1748 'CLASS'=>$cls, |
|
1749 'LINK'=>$link |
|
1750 )); |
|
1751 $inner .= $blk->run(); |
|
1752 } |
|
1753 |
|
1754 $inner .= '<td class="row2" style="cursor: pointer;" onclick="paginator_goto(this, '.$this_page.', '.$num_pages.', '.$perpage.', unescape(\'' . rawurlencode($result_url) . '\'));">↓</td>'; |
|
1755 |
|
1756 $paginator = "\n$begin$inner$end\n"; |
|
1757 if ( $total > 1 ) |
|
1758 $out .= $paginator; |
|
1759 |
|
1760 $cls = 'row2'; |
|
1761 |
|
1762 if ( sizeof($q) > 0 ) |
|
1763 { |
|
1764 $i = 0; |
|
1765 $out .= $header; |
|
1766 foreach ( $q as $val ) { |
|
1767 $i++; |
|
1768 if ( $i <= $start ) |
|
1769 { |
|
1770 continue; |
|
1771 } |
|
1772 if ( ( $i - $start ) > $perpage ) |
|
1773 { |
|
1774 break; |
|
1775 } |
|
1776 $out .= $val; |
|
1777 } |
|
1778 $out .= $footer; |
|
1779 } |
|
1780 |
|
1781 if ( $total > 1 ) |
|
1782 $out .= $paginator; |
|
1783 |
|
1784 return $out; |
|
1785 } |
|
1786 |
|
1787 /** |
|
1788 * Enano version of fputs for debugging |
|
1789 */ |
|
1790 |
|
1791 function enano_fputs($socket, $data) |
|
1792 { |
|
1793 // echo '<pre>' . htmlspecialchars($data) . '</pre>'; |
|
1794 // flush(); |
|
1795 // ob_flush(); |
|
1796 // ob_end_flush(); |
|
1797 return fputs($socket, $data); |
|
1798 } |
|
1799 |
|
1800 /** |
|
1801 * Sanitizes a page URL string so that it can safely be stored in the database. |
|
1802 * @param string Page ID to sanitize |
|
1803 * @return string Cleaned text |
|
1804 */ |
|
1805 |
|
1806 function sanitize_page_id($page_id) |
|
1807 { |
|
1808 |
|
1809 // First, replace spaces with underscores |
|
1810 $page_id = str_replace(' ', '_', $page_id); |
|
1811 |
|
1812 preg_match_all('/\.[A-Fa-f0-9][A-Fa-f0-9]/', $page_id, $matches); |
|
1813 |
|
1814 foreach ( $matches[0] as $id => $char ) |
|
1815 { |
|
1816 $char = substr($char, 1); |
|
1817 $char = strtolower($char); |
|
1818 $char = intval(hexdec($char)); |
|
1819 $char = chr($char); |
|
1820 $page_id = str_replace($matches[0][$id], $char, $page_id); |
|
1821 } |
|
1822 |
|
1823 $pid_clean = preg_replace('/[\w\/:;\(\)@\[\]_-]/', 'X', $page_id); |
|
1824 $pid_dirty = enano_str_split($pid_clean, 1); |
|
1825 |
|
1826 foreach ( $pid_dirty as $id => $char ) |
|
1827 { |
|
1828 if ( $char == 'X' ) |
|
1829 continue; |
|
1830 $cid = ord($char); |
|
1831 $cid = dechex($cid); |
|
1832 $cid = strval($cid); |
|
1833 if ( strlen($cid) < 2 ) |
|
1834 { |
|
1835 $cid = strtoupper("0$cid"); |
|
1836 } |
|
1837 $pid_dirty[$id] = ".$cid"; |
|
1838 } |
|
1839 |
|
1840 $pid_chars = enano_str_split($page_id, 1); |
|
1841 $page_id_cleaned = ''; |
|
1842 |
|
1843 foreach ( $pid_chars as $id => $char ) |
|
1844 { |
|
1845 if ( $pid_dirty[$id] == 'X' ) |
|
1846 $page_id_cleaned .= $char; |
|
1847 else |
|
1848 $page_id_cleaned .= $pid_dirty[$id]; |
|
1849 } |
|
1850 |
|
1851 global $mime_types; |
|
1852 |
|
1853 $exts = array_keys($mime_types); |
|
1854 $exts = '(' . implode('|', $exts) . ')'; |
|
1855 |
|
1856 $page_id_cleaned = preg_replace('/\.2e' . $exts . '$/', '.\\1', $page_id_cleaned); |
|
1857 |
|
1858 return $page_id_cleaned; |
|
1859 } |
|
1860 |
|
1861 //die('<pre>Original: 01010101010100101010100101010101011010'."\nProcessed: ".uncompress_bitfield(compress_bitfield('01010101010100101010100101010101011010')).'</pre>'); |
|
1862 |
|
1863 ?> |
|