core.php

<?
header('Content-type: text/html; charset=utf-8');
define("CORE_LOADED",true);
define('IS_AJAX', isset($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest');

require "default.conf.php";
require "conf.inc.php";
require "inc/auth.php";
require "inc/functions.php";
$lang = Array();
require "lang/{$cfg['interfacelanguage']}.php";
require "inc/html.php";


/**** Basic Checks ****/

$cfg['path'] = strlen($cfg['path']) ? $cfg['path'] : $cfg['default_path'];
$cfg['domain'] = strlen($cfg['domain']) ? $cfg['domain'] : $cfg['default_domain'];

$cfg['domain'] .= ($cfg['path'][0] == '/') ? substr($cfg['path'],1) : $cfg['path'];


if (! file_exists('styles/' . STYLE . '/templates/index.tpl')) {
	exit("File 'styles/" . STYLE . "/templates/index.tpl' not found. Missing or mistyped style name?");
}

/* Do not allow tampering with Session/Cookie variables */
if (isset($_REQUEST['_SESSION']) || isset($_REQUEST['_COOKIE'])) {
	die("Get lost Muppet!");
}

/**** Language specific initialisations ****/
require "inc/lng_init.php";



// Main HTML output handler
$anego = new Anego(STYLE);
$anego->error_reporting = E_ALL & ~E_NOTICE; 

$anego->assign('language', $cfg['interfacelanguage']);
if (strpos($_SERVER['HTTP_USER_AGENT'], 'MSIE')) {
	$anego->assign('browser', 'ie');
} else {
	$anego->assign('browser', 'non-ie');
}

// Todo: Some of these icons are not needed anymore
$defIcons = array(
	'add' => $cfg['path'] . 'styles/default/img/add.png',
	'del' => $cfg['path'] . 'styles/default/img/delBig.png',
	'drag' => $cfg['path'] . 'styles/default/img/drag.png',
	'linkpic' => $cfg['path'] . 'styles/default/img/linkPic.png',
	'folder' => $cfg['path'] . 'styles/default/img/folder.png',
	'file' => $cfg['path'] . 'styles/default/img/file.png',
	'loading' => $cfg['path'] . 'styles/default/img/progress_active.gif',
	'edit' => $cfg['path'] . 'styles/default/img/pencil.png',
	'editB' => $cfg['path'] . 'styles/default/img/pencilB.png',
	'delB' => $cfg['path'] . 'styles/default/img/del.png'
);

// Tells the loader to load all default javascript files
$anego->AddJsModule('de');
// Loads language related js files
$anego->AddJsModule('ad'.$cfg['interfacelanguage']);
// Settings required by js files
$anego->AddJsPreload("\tanego=new Object();");
$anego->AddJsPreload("\tanego.language='{$cfg['interfacelanguage']}';");
$anego->AddJsPreload("\tanego.style='".STYLE."';");
$anego->AddJsPreload("\tanego.fancyURLs=".($cfg['fancyURLs']?'1':'0').";");
$anego->AddJsPreload("\tanego.submenuStyle='".$cfg['submenuStyle']."';");
$anego->AddJsPreload("\tanego.animatePageLoad=".$cfg['ajaxloadFadeTimer'].";");
$anego->AddJsPreload("\tanego.pageLoad='".$cfg['pageLoad']."';");
$anego->AddJsPreload("\tanego.path='" . $cfg['path'] . "';");
$anego->assign('anegopath', $cfg['path']);
$anego->assign('submenustyle', $cfg['submenuStyle']);
$anego->assign("cfg", $cfg['fancyURLs']);

/***** Init database, etc. *****/ 

$customheader="";

define("VIS_USER",1);
define("VIS_INMENU",2);

define('MENU_MAIN','MAIN');
define('MENU_MINOR','MINOR');


/**** Init MySQL ****/
require "inc/db_init.php";



/***** Settings *****/

$s = array();
// Todo: Reduce to the needed settings (dont retrieve all)
$q = "SELECT * FROM ".SETTINGS;
$res = mysqli_query($sql_link, $q) or
	BailSQLn(__('A database query failed.'),$q); 

while($row = mysqli_fetch_array($res)) {
	$settings[$row['name']] = $row;
}

if (!isset($settings['pagetitle'])) {
	$settings['pagetitle'] = array('value' => 'Anego CMS');
}

function getSetting($name, $full = false) {
	global $settings;
	
	
	if ($full) {
		return isset($settings[$name]) ? $settings[$name] : null;
	}
	return isset($settings[$name]) ? $settings[$name]['value'] : null;
}

function setSetting($name, $value) {
	global $sql_link;
	
	$q = 'REPLACE INTO '.SETTINGS.' (name,value) VALUES (\'' . $name . '\', \'' . $value . '\')';
	mysqli_query($sql_link, $q) or
		BailErr('Failed applying setings', $q);
}


/*** More Frontend Setup code ***/


$anego->AddJsPreload("\tanego.homepage=" . HomePage() . ';');

if (getSetting('autoeditmode') && LOGINOK) {
	$anego->AddJsPreload("\tanego.editmode=1;");
}

if (getSetting('keywords')) {
	$anego->AddHeadHeader("\t" . '<meta name="keywords" content="' . htmlentities(utf8_decode(getSetting('keywords'))).'">');
}

if (getSetting('description')) {
	$anego->AddHeadHeader("\t" . '<meta name="description" content="' . htmlentities(utf8_decode(str_replace("\n",' ',getSetting('description')))).'">');
}

$anego->assign('pagetitle', str_replace(array('<','>'),array('&lt;','&gt;'), getSetting('pagetitle')));
$anego->assign('loginok', LOGINOK);
$anego->assign('editablePage', LOGINOK && basename($_SERVER['SCRIPT_NAME']) == 'index.php');
$anego->assign('basepath', $cfg['path']);



/******* Page display *******/
/* Determine which page to show - returns the current page to be shown */
function CurrentPage() {
	$p = 0;
	// Integer page?
	if (intval(@$_GET['p'])) {
		$p = intval($_GET['p']);
	}
	// Named page?
	if ( preg_match("/^[\w\d\-]{2,}$/", @$_GET['p'])) {
		$p = $_GET['p'];
	}
	
	// No particular page? Show startpage
	if (! $p) $p = HomePage();
	
	return $p;
}

/* Returns and defines constant HOMEPAGE, which is the first page to be shown when a visitor comes to the site */
function HomePage() {
	global $sql_link;
	
	if(defined('HOMEPAGE')) {
		return HOMEPAGE;
	}
		
	$q = "SELECT value FROM ".SETTINGS." WHERE name='firstpage'";
	$res = mysqli_query($sql_link, $q) or
		BailSQLn(__('Failed getting settings data'),$q);
	list($p) = mysqli_fetch_array($res);

	/* No home page set up => lets just take the first page we can find */
	if(mysqli_affected_rows($sql_link)==0) {
		$q = "SELECT idx FROM ".PAGES." LIMIT 1";
		$res = mysqli_query($sql_link, $q) or
			BailSQLn(__('Failed getting settings data'),$q);
		list($p) = mysqli_fetch_array($res);
		// Not even a page available? Damn.
		if (mysqli_affected_rows($sql_link) == 0) $p = -1;
	}
		
	define('HOMEPAGE',$p);
	
	return intval($p);
}

function getURLFromPage($pageidx) {
	global $sql_link;
	
	$q = "SELECT url FROM ".PAGES." WHERE idx=" . intval($pageidx);
	
	$res = mysqli_query($sql_link, $q) or
		BailSQLn(__('Failed getting settings data'),$q);
	list($url) = mysqli_fetch_array($res);
	return $url;
}

/* Admin links */
function AdminBar($p) {
	global $cfg,$anego;
	
	$userRole = UserRole();
	if(LOGINOK && $userRole>=Role::ProMod) {
		if($p!=-1) {
			$anego->AddLink("<a href=\"javascript:Core.editPage()\" id=\"pageEditLink\">" . __('Edit page') . "</a>");
		}
		
		$pgadurl = $cfg['path'] . ($cfg['fancyURLs'] ? 'admin/pgad' : 'admin.php?a=pgad');
		$setgurl = $cfg['path'] . ($cfg['fancyURLs'] ? 'admin/setg' : 'admin.php?a=setg');
			
		$anego->AddLink('<a href="' . $pgadurl . '">' . __('Edit Menu') . '</a>');
		
		if ($userRole>=Role::Admin) {
			$anego->AddLink('<a href="' . $setgurl . '">' . __('Settings') . '</a>');
		}
	}
}

/* Print the page */
function PrintPage($p) {
	global $anego, $cfg, $sql_link;
	
	
	if($p == -1) {
		$anego->AddContent(__('<i>No start page set up yet. Please check your settings.</i>'));
		AdminBar(-1);
		$anego->display('index.tpl');
		exit();
	}
	
	/********* Get page content ********/
	$selection = '';
	if (is_numeric($p)) {
		$selection = "idx='$p'";
	} else {
		$selection = "(url='" . mysqli_real_escape_string($sql_link, $p) . "' AND nolink=0 AND file='')";
	}

	$q = "SELECT idx, name, file, content, content_prepared, content_validuntil FROM ".PAGES." WHERE " . $selection . ' ' . (!LOGINOK?"AND (visibility&1)=1":"");
	
	$res = mysqli_query($sql_link, $q) or
		BailSQL("Failed getting page data for page $p<br>",$q);
	$page = mysqli_fetch_array($res);
	
	AdminBar($page['idx']);
	
	if(!mysqli_affected_rows($sql_link)) {
		$anego->AddContent(__('Page nonexistant or no permission to see it'));
		$anego->display('index.tpl');
		exit();
	}
	
	$anego->curPg = $page['idx'];
	$anego->AddJsPreload("\tanego.curPg = 'pages/" . $page['idx'] . "';");
	
	

	
	$anego->assign('pagetitle', $page['name'] . " - " . $anego->get_template_vars('pagetitle'));
	$anego->assign('pagename', $page['name']);
	
	$pageloadfiles = pageLoadFiles($page['idx']);
	if (count($pageloadfiles['js'])) {
		$anego->AddJsPreload("\tanego.pageJS=new Array('" . implode("','",$pageloadfiles['js']) . "');");
	}
	if (count($pageloadfiles['css'])) {
		foreach ($pageloadfiles['css'] as $css) {
			$anego->AddCSSFile($css);
		}
	}
	
	
	if (strlen($page['file']) && file_exists($page['file'])) {
		/***** Page is file: include file *****/
		include($page['file']);
	} else {
		/***** Otherwise set up and display page *****/		
		if (!strlen($page['content'])) {
			$page['content']="<i id=\"hasnoContent\">". __('This page has not been filled with content yet. Please use the \'Edit this page\' Link to enter your text') . "</i>";
		}
		
		if ((!strlen($page['content_prepared']) && strlen($page['content'])) || $page["content_validuntil"] < time()) {
			$page['content_prepared'] = refreshPageCache($page["idx"]);
		}
		
		$anego->AddContent($page['content_prepared']);
		$anego->assign('currentpage', $p);
		$anego->assign('currentpageid', $page['idx']);
		if (!$anego->get_template_vars('pageTitle')) {
			$anego->assign('pageTitle', $page['name']);
		}
		$anego->display('index.tpl');
	}
}


function refreshPageCache($p) {
	include_once('inc/modules.php');	
	$pmg = new PageManager();
	$pmg->loadModules();
	// Also updates the DB
	return $pmg->generatePage($p);
}


// Returns required module-js and module-css files per page
function pageLoadFiles($p) {
	global $cfg, $sql_link;
	
	if (file_exists('var/installed_modules')) {
		$modules = unserialize(file_get_contents('var/installed_modules'));
	} else {
		$modules = array();
	}
		
	// Optimize: Save this information in PAGES so we can eliminate this query
	$q = 'SELECT module_id FROM '.PAGE_ELEMENT.' WHERE page_id='.$p.' GROUP BY module_id';
	$res = mysqli_query($sql_link, $q) or
		BailErr("Failed getting page data for page $p<br>",$q);
	
	$js = array();
	$modjs = array();
	$modcss = array();
	$css = array();
	
	while (list($mid) = mysqli_fetch_row($res)) {
		// typecast to array to allow non-array values in the module config
		if (LOGINOK) {
			$modjs = array_merge(@(array)$modules[$mid]['config']['js']['load'],@(array)$modules[$mid]['config']['js']['pageMod']);
		} else {
			$modjs = array_merge(@(array)$modules[$mid]['config']['js']['load'],@(array)$modules[$mid]['config']['js']['pageView']);
		}
		
		$modcss = array_merge(@(array)$modules[$mid]['config']['css']['load'],@(array)$modules[$mid]['config']['css']['pageView']);
		
		foreach($modjs as $idx => $file) {
			$js[] = 'modules/'.$mid.'/'.str_replace('%lng', $cfg['interfacelanguage'], $file);
		}
		foreach($modcss as $idx => $file) {
			$css[] = 'modules/'.$mid.'/'.str_replace('%lng', $cfg['interfacelanguage'], $file);
		}
	}
	
	return array(
		"js" => $js,
		"css" => $css
	);
}




// Returns required module-js files per page when editing
function pageEditJs() {
	if(file_exists('var/installed_modules'))
		$modules = unserialize(file_get_contents('var/installed_modules'));
	else $modules = Array();
	
	$js = Array();
	foreach($modules as $mid=>$mod) {
		if(!isset($mod['config']['js'])) echo "$mod has no js";
		if(is_array($mod['config']['js']['pageEdit'])) {
			foreach($mod['config']['js']['pageEdit'] as $file)
				$js[]='modules/'.$mid.'/'.$file;
		} else 
			$js[]='modules/'.$mid.'/'.$mod['config']['js']['pageEdit'];
	}
		
	return $js;
}