jomres.php

<?php
/**

 *
 * @author Vince Wooll <sales@jomres.net>
 *
 *  @version Jomres 10.7.2
 *
 * @copyright	2005-2023 Vince Wooll
 * Jomres (tm) PHP, CSS & Javascript files are released under both MIT and GPL2 licenses. This means that you can choose the license that best suits your project, and use it accordingly
 **/

//#################################################################
defined('_JOMRES_INITCHECK') or die('');
//#################################################################

/**
*
* Main script called by the host CMS that produces output and runs tasks
*
* 
* 
*/


@ignore_user_abort(true);

if (strpos(@ini_get('disable_functions'), 'set_time_limit') === false) {
	$currTimeLimit = ini_get('max_execution_time');
	@set_time_limit($currTimeLimit); // This setting is absolutely required for systems that will use channel management functionality as deferred notifications to Beds24 can take quite a while. Ideally we'd set this to 0 however some installations, particularly Wordpress installations that may be on "budget" and or shared hosting packages might throw at minimum a warning about setting the limit to 0. We'll try instead to set it to the max execution time and hope that that's enough. It will be in 99% of cases.
}

if (isset($_REQUEST['task']) && isset($_REQUEST['field'])) { // Booking engine heartbeat is used to keep the session alive, but doesn't do anything else. We'll kill it dead right off the bat.
	if ($_REQUEST['task'] == 'handlereq' && $_REQUEST['field'] == 'heartbeat') {
		die();
	}
}

define('JOMRES_CORE_HAS_RUN' , 1, );

ob_start('removeBOM');

// Added X-Clacks Overhead. If you're a fan of Sir Terry, leave it in. If you're not, take it out
header('X-Clacks-Overhead: GNU Terry Pratchett');

// Project pups
header('X-Clacks-Overhead-Jomres-ProjectPups: GNU Tosie, Bonnie, Penny, Lily, Sheba, Jason, Sally, Lena');

require_once dirname(__FILE__).'/integration.php';

try {
	//minicomponents object
	$MiniComponents = jomres_singleton_abstract::getInstance('mcHandler');

	//site config object
	$siteConfig = jomres_singleton_abstract::getInstance('jomres_config_site_singleton');
	$jrConfig = $siteConfig->get();


	if ($jrConfig[ 'use_groupby_fix' ] == 1 ) {
        define("SET_GLOBAL_STRING" , "SET GLOBAL sql_mode=(SELECT REPLACE(@@sql_mode,'ONLY_FULL_GROUP_BY',''));");
    } else {
        define("SET_GLOBAL_STRING" , "");
    }

	//request log
	if ($jrConfig['development_production'] == 'development') {
		request_log();
	}

	//get all properties in system.
	$jomres_properties = jomres_singleton_abstract::getInstance('jomres_properties');
	$jomres_properties->get_all_properties();

	//language object - load default language file for context
	$jomres_language = jomres_singleton_abstract::getInstance('jomres_language');
    $jomres_language->init();
	$jomres_language->get_language();

	//custom text object - load all custom text
	$customTextObj = jomres_singleton_abstract::getInstance('custom_text');
	
	//trigger 00001 event
	$MiniComponents->triggerEvent('00001');

	//trigger 00002 event
	$MiniComponents->triggerEvent('00002');

	//user object
	$thisJRUser = jomres_singleton_abstract::getInstance('jr_user');

	//silently remove all access rights for this user if he is a manager/receptionist with no properties
	if (empty($thisJRUser->authorisedProperties) && $thisJRUser->userIsManager) {
		$jomres_users = jomres_singleton_abstract::getInstance('jomres_users');
		$jomres_users->delete_user( $thisJRUser->id );
		$thisJRUser->reset_manager_to_non_manager();
	}

	//jomres timezones - mostly unused with an exception
	jr_import('jomres_timezones');
	$tz = new jomres_timezones();

	//we don`t want robots to index fullscreen mode or ajax requests
	if (isset($_REQUEST[ 'tmpl' ]) && $_REQUEST[ 'tmpl' ] == get_showtime('tmplcomponent')) {
		jomres_cmsspecific_setmetadata('robots', 'noindex,nofollow');
	}

	//trigger 00003 event
	$MiniComponents->triggerEvent('00003');

	//jomres cron object
	$cron = jomres_singleton_abstract::getInstance('jomres_cron');
	if ($cron->method == 'Minicomponent' && !AJAXCALL && !preg_match('/bot|crawl|curl|dataprovider|search|get|spider|find|java|majesticsEO|google|yahoo|teoma|contaxe|yandex|libwww-perl|facebookexternalhit/i', $_SERVER['HTTP_USER_AGENT']) ) {
		$cron->triggerJobs();
	}

	//temp booking handler object, init jomres session
	$tmpBookingHandler = jomres_singleton_abstract::getInstance('jomres_temp_booking_handler');
	$tmpBookingHandler->initBookingSession();

	if (isset( $tmpBookingHandler->tmpbooking['arrivalDate']) ) {
		$arrivalDate = $tmpBookingHandler->tmpbooking['arrivalDate'];
		$test = explode( "-" , $arrivalDate );
		if (count($test) ==3) { // It's an api booking, the date needs to be converted from YYYY-MM-DD to YYYY/MM/DD format so that existing functionality can work with the booking's dates
			$tmpBookingHandler->tmpbooking['arrivalDate'] = str_replace("-" , '/' , $arrivalDate );
		}
	}

	if (isset( $tmpBookingHandler->tmpbooking['departureDate']) ) {
		$departureDate = $tmpBookingHandler->tmpbooking['departureDate'];
		$test = explode( "-" , $departureDate );
		if (count($test) ==3) { // It's an api booking, the date needs to be converted from YYYY-MM-DD to YYYY/MM/DD format so that existing functionality can work with the booking's dates
			$tmpBookingHandler->tmpbooking['departureDate'] = str_replace("-" , '/' , $departureDate );
		}
	}

	$jomressession = $tmpBookingHandler->getJomressession();
	set_showtime('jomressession', $jomressession);

	//set some showtimes we`ll need later
	$popup = (int)jomresGetParam($_REQUEST, 'popup', 0);
	$no_html = (int)jomresGetParam($_REQUEST, 'no_html', 0);
	$task = str_replace('&#60;x&#62;', '', jomresGetParam($_REQUEST, 'task', ''));

	if ($task == "savePlugin") { // 9.9 task names were changed, and savePlugin was renumbered and renamed to save_plugin. As many 3rd party gateways will use savePlugin (and it may never be updated ) we'll change the task name here so that they continue to work.
		$task = "save_plugin";
	}
	if ($task == "editGateway") { // 9.9 task names were changed, and editGateway was renumbered and renamed to editgateway. As many 3rd party gateways will use editGateway (and it may never be updated ) we'll change the task name here so that they continue to work.
		$task = "editgateway";
	}
	
	set_showtime('task', $task);
	set_showtime('no_html', $no_html);
	set_showtime('popup', $popup);

	if ($no_html == 1) {
		define('JOMRES_NOHTML', 1);
	} else {
		define('JOMRES_NOHTML', 0);
	}

	//currency conversion object
	$jomres_currency_exchange_rates = jomres_singleton_abstract::getInstance('jomres_currency_exchange_rates');
	
	//set currency code to the appropriate one for the detected location
	$jomres_geolocation = jomres_singleton_abstract::getInstance('jomres_geolocation');
	$jomres_geolocation->auto_set_user_currency_code();

	jr_import('jomres_encryption');
	$jomres_encryption = new jomres_encryption();
		
	//if this cms user has booked in the past and doesn`t have profile details saved yet, we`ll update his profile details aautomatically based on his guest details from one of the previous bookings he`s made
	if (get_showtime('task') != 'error') {
		$defaultProperty = (int) $thisJRUser->currentproperty;

		if (!$thisJRUser->userIsManager && $thisJRUser->userIsRegistered && !AJAXCALL && !preg_match('/bot|crawl|curl|dataprovider|search|get|spider|find|java|majesticsEO|google|yahoo|teoma|contaxe|yandex|libwww-perl|facebookexternalhit/i', $_SERVER['HTTP_USER_AGENT']) && get_showtime('task') != 'background_process' ) {
			
			if (!isset($_REQUEST['jsid'])) { // Don't want to reset mos userid if jsid is set. jsid is sent back by gateways and if we set mos id to the gateway's session, we'll never be able to  associate the booking with the guest
				$tmpBookingHandler->updateGuestField('mos_userid', $thisJRUser->id);
			}

			if (get_showtime('task') != 'handlereq' && get_showtime('task') != 'completebk' && get_showtime('task') != 'processpayment' && get_showtime('task') != 'confirmbooking') {
				if ($thisJRUser->profile_id == 0) {
					$query = "SELECT guests_uid,enc_firstname,enc_surname,enc_house,enc_street,enc_town,enc_postcode,enc_county,enc_country,enc_tel_landline,enc_tel_mobile,enc_email,discount FROM #__jomres_guests WHERE mos_userid = '".(int) $thisJRUser->id."' LIMIT 1";
					$guestData = doSelectSql($query, 2);

					if ( isset($guestData[ 'id' ]) ) {
						if ($guestData) {
							//$query = "INSERT INTO #__jomres_guest_profile (`cms_user_id`,`enc_firstname`,`enc_surname`,`enc_house`,`enc_street`,`enc_town`,`enc_county`,`enc_country`,`enc_postcode`,`enc_tel_landline`,`enc_tel_mobile`,`enc_email`) VALUES ('".(int) $thisJRUser->id."','$firstname','$surname','$house','$street','$town','$region','$country','$postcode','$landline','$mobile','$email')";
							//doInsertSql($query, '');

							$tmpBookingHandler->updateGuestField('guests_uid', $guestData[ 'id' ]);
							$tmpBookingHandler->updateGuestField('firstname', $jomres_encryption->decrypt($guestData[ 'enc_firstname' ]));
							$tmpBookingHandler->updateGuestField('surname', $jomres_encryption->decrypt($guestData[ 'enc_surname' ]));
							$tmpBookingHandler->updateGuestField('house', $jomres_encryption->decrypt($guestData[ 'enc_house' ]));
							$tmpBookingHandler->updateGuestField('street', $jomres_encryption->decrypt($guestData[ 'enc_street' ]));
							$tmpBookingHandler->updateGuestField('town', $jomres_encryption->decrypt($guestData[ 'enc_town' ]));
							$tmpBookingHandler->updateGuestField('region', $jomres_encryption->decrypt($guestData[ 'enc_county' ]));
							$tmpBookingHandler->updateGuestField('country', $jomres_encryption->decrypt($guestData[ 'enc_country' ]));
							$tmpBookingHandler->updateGuestField('postcode', $jomres_encryption->decrypt($guestData[ 'enc_postcode' ]));
							$tmpBookingHandler->updateGuestField('tel_landline', $jomres_encryption->decrypt($guestData[ 'enc_tel_landline' ]));
							$tmpBookingHandler->updateGuestField('tel_mobile', $jomres_encryption->decrypt($guestData[ 'enc_tel_mobile' ]));
							$tmpBookingHandler->updateGuestField('email', $jomres_encryption->decrypt($guestData[ 'enc_email' ]));
						} else {
							$user_details = jomres_cmsspecific_getCMS_users_frontend_userdetails_by_id($thisJRUser->id);
							$tmpBookingHandler->updateGuestField('email', $user_details[ $thisJRUser->id ][ 'email' ]);
						}
					}
				}
			}
		}
	} else {
		$thisJRUser = new stdClass();
		$thisJRUser->jomres_manager_id = 0;
		$thisJRUser->userid = 0;
		$thisJRUser->username = '';
		$thisJRUser->accesslevel = 0;
		$thisJRUser->currentproperty = 0;
		$thisJRUser->authorisedProperties = array();
		$thisJRUser->userIsSuspended = false;
		$thisJRUser->userIsRegistered = false;
		$thisJRUser->userIsManager = false;
		$thisJRUser->superPropertyMaager = false;
	}

	//handle suspended managers
	if ($thisJRUser->userIsSuspended) {
		jr_import('jomres_suspensions');
		$jomres_suspensions = new jomres_suspensions();
		$jomres_suspensions->set_manager_id($thisJRUser->userid);
		if ($jomres_suspensions->suspended_manager_denied_task(get_showtime('task'))) {
			jomresRedirect(jomresURL(JOMRES_SITEPAGE_URL.'&task=cpanel'), '');
		}
	}

	//get the current property uid if set
	$property_uid = (int) detect_property_uid();

	$mrConfig = getPropertySpecificSettings($property_uid);

	if ($property_uid > 0) {
		set_showtime('property_uid', $property_uid);

		//basci property details object
		$current_property_details = jomres_singleton_abstract::getInstance('basic_property_details');
		$current_property_details->gather_data($property_uid);

		if (get_showtime('task') == 'viewproperty') {
			set_showtime('last_viewed_property_uid', $property_uid); // showtime's property_uid variable can change, for example in the property list the property uid will change while the system is viewing different properties and finding language strings for each. We'll set a specific variable here that can be reliably be used to take the user back to the last viewed property. Typically for cancel buttons, we can use the patTemplate common definition COMMON_LAST_VIEWED_PROPERTY_UID to allow cancel buttons to take us back to the last viewed property without having to specifically code for it in the script calling the template.
			$tmpBookingHandler->user_settings[ 'last_viewed_property_uid' ] = $property_uid;
		}

		//since we have a property uid, we also have a property type, so let`s set a showtime
		set_showtime('property_type', $current_property_details->property_type);
		set_showtime('ptype_id', $current_property_details->ptype_id);

		//load property type specific language file if $property_type is set
		$jomres_language->get_language($current_property_details->property_type);

		//sanity checks
		if (!$thisJRUser->userIsManager && $current_property_details->published == 0 && get_showtime('task') != '') {
			if (!AJAXCALL && $no_html == 0) {
				jr_import('jomres_sanity_check');
				$warning = new jomres_sanity_check(false);
				echo $warning->construct_warning(jr_gettext('_JOMRES_PROPERTYNOTOUBLISHED', '_JOMRES_PROPERTYNOTOUBLISHED', false));
				$property_uid = 0;
				$task = '';
				set_showtime('task', '');
				set_showtime('property_type', '');
				set_showtime('property_uid', 0);
			}
		}

		//redirect to new property uid if different than manager`s current property
		if ($thisJRUser->userIsManager && $thisJRUser->currentproperty != $property_uid && in_array($property_uid, $thisJRUser->authorisedProperties)) {
			$thisJRUser->set_currentproperty($property_uid);
			jomresRedirect(jomresURL(JOMRES_SITEPAGE_URL), '');
		}
	} else {
		if (isset($tmpBookingHandler->user_settings[ 'last_viewed_property_uid' ])) {
			set_showtime('last_viewed_property_uid', (int) $tmpBookingHandler->user_settings[ 'last_viewed_property_uid' ]);
		}
	}

	if (!AJAXCALL && $no_html == 0) {
		//add javascript to head
		$MiniComponents->triggerEvent('00004');
		
		//core menu items
		// Older functionality, kept for backwards compatibility. Bootstrap 5 templates now use {jomres_script show_main_menu} to display the menu
		if ( (int) jomres_bootstrap_version() < 5 ) {
			$MiniComponents->specificEvent('09995', 'menu', array()); //core menu items
		}
	}

	//TODO find a better place
	set_showtime('include_room_booking_functionality', true);
	
	//register jomres frontend widgets
	if ($thisJRUser->userIsManager) {
		$MiniComponents->triggerEvent('09990');
	}

	//trigger 00005 event
	$MiniComponents->triggerEvent('00005');

	//trigger 00006 event
	if (!AJAXCALL && $no_html == 0) {
		$MiniComponents->triggerEvent('00006');

		//trigger 00060 event. Run out of trigger points. Illogically now, 60 triggers the top template, 61 the bottom template.
		$MiniComponents->triggerEvent('00060', array('tz' => $tz));

		//trigger 00012 event
		$componentArgs = array();
		$componentArgs[ 'property_uid' ] = $property_uid;
		$MiniComponents->triggerEvent('00012', $componentArgs); // Optional other stuff to do before switch is done.

		if ( isset($jrConfig['platform_connected']) && $jrConfig['platform_connected'] == 1 ) {
			if (!file_exists(JOMRES_COREPLUGINS_ABSPATH.'connect'.JRDS.'plugin_info.php') && file_exists(JOMRES_COREPLUGINS_ABSPATH.'plugin_manager'.JRDS.'plugin_info.php') ) { // Something has gone horribly wrong
				$MiniComponents->specificEvent('16000', 'addplugin', array('plugin' => 'connect', 'autoupgrade' => true));
			}
		}

	}

	if (defined('WORDPRESS_NON_BOOTSTRAP_TWEAKS') && !defined('WORDPRESS_NON_BOOTSTRAP_TWEAKS_SHOWN') ) {
		define('WORDPRESS_NON_BOOTSTRAP_TWEAKS_SHOWN' , 1 );
		echo WORDPRESS_NON_BOOTSTRAP_TWEAKS;
	}

	if (isset($_REQUEST['from_admin']) && !$thisJRUser->userIsRegistered) {
		echo simple_template_output(JOMRES_TEMPLATEPATH_FRONTEND, 'from_admin_not_logged_in.html', jr_gettext('JOMRES_COM_TRANSITION_FROM_ADMIN_TO_BACKEND_NOT_LOGGED_IN', 'JOMRES_COM_TRANSITION_FROM_ADMIN_TO_BACKEND_NOT_LOGGED_IN', false));
		if (this_cms_is_joomla()) { // Wordpress users do not need exposition because the session is shared between frontend and admin. Joomla users will see this page if session sharing is not enabled and they're not logged in, therefore further explanation may help them if they're unfamiliar with Jomres.
			echo simple_template_output(JOMRES_TEMPLATEPATH_FRONTEND, 'from_admin_not_logged_in_joomla_exposition.html', jr_gettext('JOMRES_COM_TRANSITION_FROM_ADMIN_TO_BACKEND_NOT_LOGGED_IN_EXPOSITION_FOR_NEW_USERS_JOOMLA', 'JOMRES_COM_TRANSITION_FROM_ADMIN_TO_BACKEND_NOT_LOGGED_IN_EXPOSITION_FOR_NEW_USERS_JOOMLA', false));
		}

	} else {
		//handle tasks
		if ($MiniComponents->eventSpecificlyExistsCheck('06000', get_showtime('task'))) {
			$MiniComponents->specificEvent('06000', get_showtime('task'));
		} elseif ($MiniComponents->eventSpecificlyExistsCheck('06001', get_showtime('task')) && $thisJRUser->accesslevel >= 50) { // Receptionist and manager tasks
			redirect_on_administration_if_channel_property ($property_uid , get_showtime('task') ); // Allows the system to redirect administration functions to a parent site if this is a channel property when certain tasks are called
			$MiniComponents->specificEvent('06001', get_showtime('task'));
		} elseif ($MiniComponents->eventSpecificlyExistsCheck('06002', get_showtime('task')) && $thisJRUser->accesslevel >= 70) { // Manager only tasks (higher than receptionist)
			redirect_on_administration_if_channel_property ($property_uid , get_showtime('task') ); // Allows the system to redirect administration functions to a parent site if this is a channel property when certain tasks are called
			$MiniComponents->specificEvent('06002', get_showtime('task'));
		} elseif ($MiniComponents->eventSpecificlyExistsCheck('06005', get_showtime('task')) && $thisJRUser->accesslevel >= 1) { // Registered only user tasks
			$MiniComponents->specificEvent('06005', get_showtime('task'));
		} else {
			no_task_set($property_uid);
		}
	}


	if (!AJAXCALL && $no_html == 0) {
		$MiniComponents->triggerEvent('00061'); // Run out of trigger points. Illogically now, 60 triggers the top template, 61 the bottom template.
	}

	//reset language and property type
	$jomres_language_definitions = jomres_singleton_abstract::getInstance('jomres_language_definitions');
	$jomres_language_definitions->reset_lang_and_property_type();

	//trigger 99994 event
	$MiniComponents->triggerEvent('99994');

	//generate the cpanel menu
	if (!AJAXCALL && $no_html == 0 && !isset($_REQUEST[ 'popup' ])) {
		echo $MiniComponents->specificEvent('09997', 'menu', array());
	}
	
	//trigger 99998 event - jomres feedback messages
	if (!AJAXCALL && $no_html == 0) {
		$MiniComponents->triggerEvent('99998');
	}

	//trigger 99999 event: Optional end run scripts
	$componentArgs = array();
	$MiniComponents->triggerEvent('99999', $componentArgs);

	//close/save jomres session
	$tmpBookingHandler->close_jomres_session();

	if (!AJAXCALL && $no_html == 0 && $jrConfig[ 'errorChecking' ] == '1') {
		foreach ($MiniComponents->log as $log) {
			echo 'Log :'.$log.'<br>';
		}
	}

	// After updating jquery ui to 1.9.3 we started seeing a problem where the entire site would be reloaded into the jquery tabs.
	// http://stackoverflow.com/questions/13837304/jquery-ui-non-ajax-tab-loading-whole-website-into-itself
	// according to http://bugs.jqueryui.com/ticket/7822 this problem will not be "fixed" in jquery, so we'll need to remove the base tag from Joomla's output
	// This page http://www.jelte.nl/nieuws/24-joomla-remove-base-href suggests removing the base tag for SEO reasons
	// More reading https://groups.google.com/forum/?fromgroups=#!topic/joomla-devel/HOHzzne5HYo
	if (this_cms_is_joomla()) {
		$document = JFactory::getDocument();
		$document->setBase(null);
	}

	//done
	endrun();
	if (AJAXCALL) {
		doDBClose();
	}

	//mostly not used these days
	if (defined('JOMRES_RETURNDATA')) {
		$contents = ob_get_contents();
		$contents = $head_contents.$contents;
		define('JOMRES_RETURNDATA_CONTENT', $contents);
		unset($contents);
		ob_end_clean();
	} else {
		ob_end_flush();
	}
	$debugging_modals = get_showtime('patTemplate_debugging_modals');
	if (!empty($debugging_modals)) {
		foreach ($debugging_modals as $button_modal) {
			echo $button_modal.'<br/>';
		}
	}
} catch (\Exception $e) {
	//$MiniComponents->triggerEvent('99994');

	if (!isset($no_html)) {
		$no_html = 0;
	}
	//generate the cpanel menu
	if (!AJAXCALL && $no_html == 0 && !isset($_REQUEST[ 'popup' ])) {
		echo $MiniComponents->specificEvent('09997', 'menu', array());
	}

	$componentArgs = array();
	$MiniComponents->triggerEvent('99999', $componentArgs); // Optional end run scripts

	output_fatal_error($e);
}

// Script stops here

function no_task_set($property_uid = 0)
{
	$thisJRUser = jomres_singleton_abstract::getInstance('jr_user');
	$MiniComponents = jomres_singleton_abstract::getInstance('mcHandler');
	$siteConfig = jomres_singleton_abstract::getInstance('jomres_config_site_singleton');
	$jrConfig = $siteConfig->get();
	
	$calledByModule = jomresGetParam($_REQUEST, 'calledByModule', '');

	if (($calledByModule != '' || isset($_REQUEST[ 'plistpage' ])) && $thisJRUser->userIsManager) {
		$MiniComponents->specificEvent('06000', "search");
	} else {
		if ($thisJRUser->userIsManager) {
			$MiniComponents->specificEvent('06001', 'cpanel');
		} elseif (get_showtime('numberOfPropertiesInSystem') == 1 && $jrConfig[ 'is_single_property_installation' ] == '0') {
			set_showtime('task', 'viewproperty');
			$componentArgs = array();
			$componentArgs[ 'property_uid' ] = $property_uid;
			$MiniComponents->specificEvent('06000', 'viewproperty', $componentArgs);
		} elseif ($jrConfig[ 'is_single_property_installation' ] == '1') {
			$all_property_uids = get_showtime('all_properties_in_system');
			set_showtime('property_uid', $all_property_uids[ 0 ]);
			$MiniComponents->triggerEvent('05020');
		} else {
			set_showtime('task', '');
			$MiniComponents->specificEvent('06000', "search");
		}
	}
}
// Jomres 4.7.8 strips BOM from all areas of the output, not just the beginning.
function removeBOM($str = '')
{
	$bom = pack('CCC', 0xef, 0xbb, 0xbf);
	$str = str_replace($bom, '', $str);

	return $str;
}