[354] | 1 | <?php |
---|
| 2 | // +-----------------------------------------------------------------------+ |
---|
[593] | 3 | // | PhpWebGallery - a PHP based picture gallery | |
---|
| 4 | // | Copyright (C) 2002-2003 Pierrick LE GALL - pierrick@phpwebgallery.net | |
---|
[1075] | 5 | // | Copyright (C) 2003-2006 PhpWebGallery Team - http://phpwebgallery.net | |
---|
[354] | 6 | // +-----------------------------------------------------------------------+ |
---|
[593] | 7 | // | branch : BSF (Best So Far) |
---|
[354] | 8 | // | file : $RCSfile$ |
---|
| 9 | // | last update : $Date: 2006-04-27 21:08:50 +0000 (Thu, 27 Apr 2006) $ |
---|
| 10 | // | last modifier : $Author: plg $ |
---|
| 11 | // | revision : $Revision: 1284 $ |
---|
| 12 | // +-----------------------------------------------------------------------+ |
---|
| 13 | // | This program is free software; you can redistribute it and/or modify | |
---|
| 14 | // | it under the terms of the GNU General Public License as published by | |
---|
| 15 | // | the Free Software Foundation | |
---|
| 16 | // | | |
---|
| 17 | // | This program is distributed in the hope that it will be useful, but | |
---|
| 18 | // | WITHOUT ANY WARRANTY; without even the implied warranty of | |
---|
| 19 | // | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
---|
| 20 | // | General Public License for more details. | |
---|
| 21 | // | | |
---|
| 22 | // | You should have received a copy of the GNU General Public License | |
---|
| 23 | // | along with this program; if not, write to the Free Software | |
---|
| 24 | // | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, | |
---|
| 25 | // | USA. | |
---|
| 26 | // +-----------------------------------------------------------------------+ |
---|
[383] | 27 | |
---|
[650] | 28 | if (!defined('PHPWG_ROOT_PATH')) |
---|
[364] | 29 | { |
---|
[650] | 30 | die('Hacking attempt!'); |
---|
[364] | 31 | } |
---|
| 32 | // determine the initial instant to indicate the generation time of this page |
---|
[354] | 33 | $t1 = explode( ' ', microtime() ); |
---|
| 34 | $t2 = explode( '.', $t1[0] ); |
---|
| 35 | $t2 = $t1[1].'.'.$t2[1]; |
---|
| 36 | |
---|
| 37 | set_magic_quotes_runtime(0); // Disable magic_quotes_runtime |
---|
| 38 | |
---|
| 39 | // |
---|
[359] | 40 | // addslashes to vars if magic_quotes_gpc is off this is a security |
---|
| 41 | // precaution to prevent someone trying to break out of a SQL statement. |
---|
[354] | 42 | // |
---|
| 43 | if( !get_magic_quotes_gpc() ) |
---|
| 44 | { |
---|
[359] | 45 | if( is_array( $_GET ) ) |
---|
[354] | 46 | { |
---|
[359] | 47 | while( list($k, $v) = each($_GET) ) |
---|
[354] | 48 | { |
---|
[359] | 49 | if( is_array($_GET[$k]) ) |
---|
| 50 | { |
---|
| 51 | while( list($k2, $v2) = each($_GET[$k]) ) |
---|
[354] | 52 | { |
---|
[359] | 53 | $_GET[$k][$k2] = addslashes($v2); |
---|
| 54 | } |
---|
| 55 | @reset($_GET[$k]); |
---|
| 56 | } |
---|
| 57 | else |
---|
| 58 | { |
---|
| 59 | $_GET[$k] = addslashes($v); |
---|
| 60 | } |
---|
| 61 | } |
---|
| 62 | @reset($_GET); |
---|
[354] | 63 | } |
---|
[1092] | 64 | |
---|
[359] | 65 | if( is_array($_POST) ) |
---|
[354] | 66 | { |
---|
[359] | 67 | while( list($k, $v) = each($_POST) ) |
---|
| 68 | { |
---|
| 69 | if( is_array($_POST[$k]) ) |
---|
| 70 | { |
---|
| 71 | while( list($k2, $v2) = each($_POST[$k]) ) |
---|
| 72 | { |
---|
| 73 | $_POST[$k][$k2] = addslashes($v2); |
---|
| 74 | } |
---|
| 75 | @reset($_POST[$k]); |
---|
| 76 | } |
---|
| 77 | else |
---|
| 78 | { |
---|
| 79 | $_POST[$k] = addslashes($v); |
---|
| 80 | } |
---|
[354] | 81 | } |
---|
[359] | 82 | @reset($_POST); |
---|
[354] | 83 | } |
---|
| 84 | |
---|
[359] | 85 | if( is_array($_COOKIE) ) |
---|
[354] | 86 | { |
---|
[359] | 87 | while( list($k, $v) = each($_COOKIE) ) |
---|
[354] | 88 | { |
---|
[359] | 89 | if( is_array($_COOKIE[$k]) ) |
---|
| 90 | { |
---|
| 91 | while( list($k2, $v2) = each($_COOKIE[$k]) ) |
---|
| 92 | { |
---|
| 93 | $_COOKIE[$k][$k2] = addslashes($v2); |
---|
| 94 | } |
---|
| 95 | @reset($_COOKIE[$k]); |
---|
| 96 | } |
---|
| 97 | else |
---|
| 98 | { |
---|
| 99 | $_COOKIE[$k] = addslashes($v); |
---|
| 100 | } |
---|
[354] | 101 | } |
---|
[359] | 102 | @reset($_COOKIE); |
---|
[354] | 103 | } |
---|
| 104 | } |
---|
| 105 | |
---|
| 106 | // |
---|
[359] | 107 | // Define some basic configuration arrays this also prevents malicious |
---|
| 108 | // rewriting of language and otherarray values via URI params |
---|
[354] | 109 | // |
---|
| 110 | $conf = array(); |
---|
| 111 | $page = array(); |
---|
| 112 | $user = array(); |
---|
| 113 | $lang = array(); |
---|
| 114 | |
---|
[364] | 115 | |
---|
[766] | 116 | @include(PHPWG_ROOT_PATH .'include/mysql.inc.php'); |
---|
[650] | 117 | if (!defined('PHPWG_INSTALLED')) |
---|
[354] | 118 | { |
---|
[650] | 119 | header('Location: install.php'); |
---|
[359] | 120 | exit; |
---|
[354] | 121 | } |
---|
| 122 | |
---|
[770] | 123 | include(PHPWG_ROOT_PATH . 'include/config_default.inc.php'); |
---|
| 124 | @include(PHPWG_ROOT_PATH. 'include/config_local.inc.php'); |
---|
[808] | 125 | include(PHPWG_ROOT_PATH . 'include/constants.php'); |
---|
[364] | 126 | include(PHPWG_ROOT_PATH . 'include/functions.inc.php'); |
---|
| 127 | include(PHPWG_ROOT_PATH . 'include/template.php'); |
---|
| 128 | |
---|
[354] | 129 | // Database connection |
---|
[681] | 130 | mysql_connect( $cfgHote, $cfgUser, $cfgPassword ) |
---|
[512] | 131 | or die ( "Could not connect to database server" ); |
---|
[681] | 132 | mysql_select_db( $cfgBase ) |
---|
[359] | 133 | or die ( "Could not connect to database" ); |
---|
[953] | 134 | |
---|
[1076] | 135 | if ($conf['check_upgrade_feed']) |
---|
| 136 | { |
---|
| 137 | // retrieve already applied upgrades |
---|
| 138 | $query = ' |
---|
| 139 | SELECT id |
---|
| 140 | FROM '.UPGRADE_TABLE.' |
---|
| 141 | ;'; |
---|
| 142 | $applied = array_from_query($query, 'id'); |
---|
| 143 | |
---|
| 144 | // retrieve existing upgrades |
---|
| 145 | $existing = get_available_upgrade_ids(); |
---|
| 146 | |
---|
| 147 | // which upgrades need to be applied? |
---|
| 148 | if (count(array_diff($existing, $applied)) > 0) |
---|
| 149 | { |
---|
| 150 | ob_start();// buffer output so that cookies work |
---|
[1119] | 151 | |
---|
[1076] | 152 | echo |
---|
| 153 | '<p>' |
---|
| 154 | .'Some database upgrades are missing, ' |
---|
| 155 | .'<a href="'.PHPWG_ROOT_PATH.'upgrade_feed.php">upgrade now</a>' |
---|
| 156 | .'</p>' |
---|
| 157 | ; |
---|
| 158 | } |
---|
| 159 | } |
---|
| 160 | |
---|
[354] | 161 | // |
---|
[394] | 162 | // Setup gallery wide options, if this fails then we output a CRITICAL_ERROR |
---|
| 163 | // since basic gallery information is not available |
---|
[354] | 164 | // |
---|
[1284] | 165 | load_conf_from_db(); |
---|
[354] | 166 | |
---|
[650] | 167 | include(PHPWG_ROOT_PATH.'include/user.inc.php'); |
---|
[808] | 168 | |
---|
| 169 | // language files |
---|
[879] | 170 | include_once(get_language_filepath('common.lang.php')); |
---|
[808] | 171 | |
---|
| 172 | if (defined('IN_ADMIN') and IN_ADMIN) |
---|
| 173 | { |
---|
[879] | 174 | include_once(get_language_filepath('admin.lang.php')); |
---|
[808] | 175 | } |
---|
| 176 | |
---|
[1036] | 177 | if ($conf['gallery_locked']) |
---|
| 178 | { |
---|
[1052] | 179 | ob_start(); // make sure we can send cookies |
---|
[1036] | 180 | echo |
---|
| 181 | '<div style="text-align:center;">' |
---|
[1052] | 182 | .$lang['gallery_locked_message']; |
---|
| 183 | echo '<a href="'.PHPWG_ROOT_PATH.'identification.php">.</a>'; |
---|
| 184 | echo '</div>'; |
---|
[1036] | 185 | |
---|
[1052] | 186 | if ( basename($_SERVER["PHP_SELF"]) != 'identification.php' |
---|
[1070] | 187 | and !is_admin() ) |
---|
[1036] | 188 | { |
---|
| 189 | exit(); |
---|
| 190 | } |
---|
| 191 | } |
---|
| 192 | |
---|
[808] | 193 | // only now we can set the localized username of the guest user (and not in |
---|
| 194 | // include/user.inc.php) |
---|
| 195 | if ($user['is_the_guest']) |
---|
| 196 | { |
---|
| 197 | $user['username'] = $lang['guest']; |
---|
| 198 | } |
---|
| 199 | |
---|
[960] | 200 | // include template/theme configuration |
---|
| 201 | list($user['template'], $user['theme']) = explode('/', $user['template']); |
---|
| 202 | // TODO : replace initial $user['template'] by $user['layout'] |
---|
| 203 | |
---|
[1036] | 204 | include( |
---|
| 205 | PHPWG_ROOT_PATH |
---|
| 206 | .'template/'.$user['template'] |
---|
| 207 | .'/theme/'.$user['theme'] |
---|
| 208 | .'/themeconf.inc.php' |
---|
| 209 | ); |
---|
[960] | 210 | |
---|
[1085] | 211 | if (is_adviser()) |
---|
| 212 | { |
---|
[1117] | 213 | ob_start();// buffer output so that cookies work |
---|
[1085] | 214 | echo ' |
---|
| 215 | <div class="titrePage"> |
---|
| 216 | <h2> |
---|
| 217 | <div style="text-align:center;">'.$lang['adviser_mode_enabled'].' |
---|
| 218 | </div> |
---|
| 219 | </h2> |
---|
| 220 | </div> |
---|
| 221 | '; |
---|
| 222 | } |
---|
| 223 | |
---|
[808] | 224 | // template instance |
---|
| 225 | $template = new Template(PHPWG_ROOT_PATH.'template/'.$user['template']); |
---|
[362] | 226 | ?> |
---|