source: branches/2.0/include/common.inc.php @ 4005

Revision 4005, 7.4 KB checked in by patdenice, 10 years ago (diff)

set_magic_quote_runtime and get_magic_quote_gpc are depreciated and can produce notices from PHP 5.3.
Add a @ to avoid this notices.
This functions need to be removed with PHP 6

  • Property svn:eol-style set to LF
  • Property svn:keywords set to Author Date Id Revision
Line 
1<?php
2// +-----------------------------------------------------------------------+
3// | Piwigo - a PHP based picture gallery                                  |
4// +-----------------------------------------------------------------------+
5// | Copyright(C) 2008-2009 Piwigo Team                  http://piwigo.org |
6// | Copyright(C) 2003-2008 PhpWebGallery Team    http://phpwebgallery.net |
7// | Copyright(C) 2002-2003 Pierrick LE GALL   http://le-gall.net/pierrick |
8// +-----------------------------------------------------------------------+
9// | This program is free software; you can redistribute it and/or modify  |
10// | it under the terms of the GNU General Public License as published by  |
11// | the Free Software Foundation                                          |
12// |                                                                       |
13// | This program is distributed in the hope that it will be useful, but   |
14// | WITHOUT ANY WARRANTY; without even the implied warranty of            |
15// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU      |
16// | General Public License for more details.                              |
17// |                                                                       |
18// | You should have received a copy of the GNU General Public License     |
19// | along with this program; if not, write to the Free Software           |
20// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
21// | USA.                                                                  |
22// +-----------------------------------------------------------------------+
23
24defined('PHPWG_ROOT_PATH') or trigger_error('Hacking attempt!', E_USER_ERROR);
25
26// determine the initial instant to indicate the generation time of this page
27$t1 = explode( ' ', microtime() );
28$t2 = explode( '.', $t1[0] );
29$t2 = $t1[1].'.'.$t2[1];
30
31@set_magic_quotes_runtime(0); // Disable magic_quotes_runtime
32
33//
34// addslashes to vars if magic_quotes_gpc is off this is a security
35// precaution to prevent someone trying to break out of a SQL statement.
36//
37if( !@get_magic_quotes_gpc() )
38{
39  function sanitize_mysql_kv(&$v, $k)
40  {
41    $v = addslashes($v);
42  }
43  if( is_array( $_GET ) )
44  {
45    array_walk_recursive( $_GET, 'sanitize_mysql_kv' );
46  }
47  if( is_array( $_POST ) )
48  {
49    array_walk_recursive( $_POST, 'sanitize_mysql_kv' );
50  }
51  if( is_array( $_COOKIE ) )
52  {
53    array_walk_recursive( $_COOKIE, 'sanitize_mysql_kv' );
54  }
55}
56if ( !empty($_SERVER["PATH_INFO"]) )
57{
58  $_SERVER["PATH_INFO"] = addslashes($_SERVER["PATH_INFO"]);
59}
60
61//
62// Define some basic configuration arrays this also prevents malicious
63// rewriting of language and otherarray values via URI params
64//
65$conf = array();
66$page = array();
67$user = array();
68$lang = array();
69$header_msgs = array();
70$header_notes = array();
71$filter = array();
72
73@include(PHPWG_ROOT_PATH .'include/mysql.inc.php');
74if (!defined('PHPWG_INSTALLED'))
75{
76  header('Location: install.php');
77  exit;
78}
79
80foreach( array(
81  'array_intersect_key', //PHP 5 >= 5.1.0RC1
82  'hash_hmac', //(hash) - enabled by default as of PHP 5.1.2
83  'preg_last_error', // PHP 5 >= 5.2.0
84  'file_put_contents', //PHP5
85  ) as $func)
86{
87  if (!function_exists($func))
88  {
89    include_once(PHPWG_ROOT_PATH . 'include/php_compat/'.$func.'.php');
90  }
91}
92
93include(PHPWG_ROOT_PATH . 'include/config_default.inc.php');
94@include(PHPWG_ROOT_PATH. 'include/config_local.inc.php');
95
96if(isset($conf['show_php_errors']) && !empty($conf['show_php_errors']))
97{
98  @ini_set('error_reporting', $conf['show_php_errors']);
99  @ini_set('display_errors', true);
100}
101
102include(PHPWG_ROOT_PATH . 'include/constants.php');
103include(PHPWG_ROOT_PATH . 'include/functions.inc.php');
104include( PHPWG_ROOT_PATH .'include/template.class.php');
105
106// Database connection
107@mysql_connect( $cfgHote, $cfgUser, $cfgPassword ) or my_error( 'mysql_connect', true );
108@mysql_select_db( $cfgBase ) or my_error( 'mysql_select_db', true );
109
110defined('PWG_CHARSET') and defined('DB_CHARSET')
111  or fatal_error('PWG_CHARSET and/or DB_CHARSET is not defined');
112if ( version_compare(mysql_get_server_info(), '4.1.0', '>=') )
113{
114  if (DB_CHARSET!='')
115  {
116    pwg_query('SET NAMES "'.DB_CHARSET.'"');
117  }
118}
119elseif ( strtolower(PWG_CHARSET)!='iso-8859-1' )
120{
121  fatal_error('PWG supports only iso-8859-1 charset on MySql version '.mysql_get_server_info());
122}
123
124load_conf_from_db();
125load_plugins();
126
127include(PHPWG_ROOT_PATH.'include/user.inc.php');
128
129if ('fr_FR' == $user['language']) {
130  define('PHPWG_DOMAIN', 'fr.piwigo.org');
131}
132else if ('it_IT' == $user['language']) {
133  define('PHPWG_DOMAIN', 'it.piwigo.org');
134}
135else {
136  define('PHPWG_DOMAIN', 'piwigo.org');
137}
138define('PHPWG_URL', 'http://'.PHPWG_DOMAIN);
139define('PEM_URL', 'http://'.PHPWG_DOMAIN.'/ext');
140
141
142// language files
143load_language('common.lang');
144if ( is_admin() || (defined('IN_ADMIN') and IN_ADMIN) )
145{
146  load_language('admin.lang');
147}
148trigger_action('loading_lang');
149load_language('local.lang', '', array('no_fallback'=>true) );
150
151// only now we can set the localized username of the guest user (and not in
152// include/user.inc.php)
153if (is_a_guest())
154{
155  $user['username'] = l10n('guest');
156}
157
158// template instance
159if ( defined('IN_ADMIN') and IN_ADMIN )
160{// Admin template
161  list($user['admin_template'], $user['admin_theme']) =
162    explode ('/', $conf['admin_layout']);
163  $template = new Template(PHPWG_ROOT_PATH.'admin/template/'
164    . $user['admin_template'], $user['admin_theme'] );
165}
166else
167{ // Classic template
168  $template = new Template(PHPWG_ROOT_PATH.'template/'
169    . $user['template'], $user['theme'] );
170}
171
172if (isset($user['internal_status']['guest_must_be_guest'])
173    and
174    $user['internal_status']['guest_must_be_guest'] === true)
175{
176  $header_msgs[] = l10n('guest_must_be_guest');
177}
178
179if ($conf['gallery_locked'])
180{
181  $header_msgs[] = l10n('gallery_locked_message');
182
183  if ( script_basename() != 'identification' and !is_admin() )
184  {
185    set_status_header(503, 'Service Unavailable');
186    @header('Retry-After: 900');
187    header('Content-Type: text/html; charset='.get_pwg_charset());
188    echo '<a href="'.get_absolute_root_url(false).'identification.php">'.l10n('gallery_locked_message').'</a>';
189    echo str_repeat( ' ', 512); //IE6 doesn't error output if below a size
190    exit();
191  }
192}
193
194if ($conf['check_upgrade_feed'])
195{
196  include_once(PHPWG_ROOT_PATH.'admin/include/functions_upgrade.php');
197  if (check_upgrade_feed())
198  {
199    $header_msgs[] = 'Some database upgrades are missing, '
200      .'<a href="'.get_absolute_root_url(false).'upgrade_feed.php">upgrade now</a>';
201  }
202}
203
204if (is_adviser())
205{
206  $header_msgs[] = l10n('adviser_mode_enabled');
207}
208
209if (count($header_msgs) > 0)
210{
211  $template->assign('header_msgs', $header_msgs);
212  $header_msgs=array();
213}
214
215if (!empty($conf['filter_pages']) and get_filter_page_value('used'))
216{
217  include(PHPWG_ROOT_PATH.'include/filter.inc.php');
218}
219else
220{
221  $filter['enabled'] = false;
222}
223
224if (isset($conf['header_notes']))
225{
226  $header_notes = array_merge($header_notes, $conf['header_notes']);
227}
228
229// default event handlers
230add_event_handler('render_category_literal_description', 'render_category_literal_description');
231if ( !$conf['allow_html_descriptions'] )
232{
233  add_event_handler('render_category_description', 'nl2br');
234}
235add_event_handler('render_comment_content', 'htmlspecialchars');
236add_event_handler('render_comment_content', 'parse_comment_content');
237add_event_handler('render_comment_author', 'strip_tags');
238add_event_handler('blockmanager_register_blocks', 'register_default_menubar_blocks', EVENT_HANDLER_PRIORITY_NEUTRAL-1);
239trigger_action('init');
240?>
Note: See TracBrowser for help on using the repository browser.