$data = explode( ',', $img );
$filename = $target . $prefix . generateRandomString(12) . '.png';
if(strlen($data[1]) > 1) {
logfile(LOG_MAINFILE, array('based64 image encoded saved into file '. $filename));
$r = file_put_contents($filename, base64_decode($data[1]));
chmod($filename, 0777);
if($r == false) logfile(LOG_MAINFILE, array('[ERROR] when writing based64 image into file '. $filename));
return $filename;
}
return false;
}
/**
* implode_with_keys()
* implode avec clefs associées renvoyées
* sous forme de chaîne de caractères
* @param string $glue
* @param string $array
* @return string
*/
function implode_with_keys($glue, $array) {
$output = array();
foreach( $array as $key => $item )
$output[] = $key . "=" . $item;
return implode($glue, $output);
}
/**
* is_filled()
* check if given field is filled up in array
* @param array $array
* @param string $fieldname
* @return boolean
*/
function is_filled($array, $fieldname) {
foreach ($array as $el) {
if(!empty($el[$fieldname])) return true;
}
return false;
}
/**
* safe_redirect()
* check if given url is safe
* if not, return CURRENT_APP_URL
* @param string $url
* @return string
*/
function safe_redirect( $url ) {
if(Stringy\Stringy::create($url, CHARSET)->startsWith(SITE_ROOT_URL)) return $url;
if(Stringy\Stringy::create($url, CHARSET)->startsWith('index.php')) return $url;
if(Stringy\Stringy::create($url, CHARSET)->startsWith('login.php')) return $url;
if(Stringy\Stringy::create($url, CHARSET)->startsWith('logout.php')) return $url;
if(Stringy\Stringy::create($url, CHARSET)->startsWith('confirm.php')) return $url;
// provided url is not safe, we route to default CURRENT_APP_URL
return CURRENT_APP_URL;
}
/**
* getHttpParameters()
* Renvoie les paramètres HTTP
* sous forme de chaîne de caractères
* @return string
*/
function getHttpParameters($prefix = '?') {
return $prefix. (string) implode_with_keys('&', $_REQUEST);
}
/**
* is_module()
* Test if the current page matches the given module and action (optionnal)
* examples : (1) is_module('system'), (2) is_module('system/edit_files')
* interpreted as : (1) rub=system, (2) rub=system and todo=edit_files
* @param string $str
* @return boolean
*/
// @todo simo
function is_module($str) {
$a = explode('/', $str);
_debug('is_module() values : ' .join(', ', $a). ' '. count($a));
// handle simple case : is_module('system')
if(!isset($_REQUEST['rub']) || strpos($a[0], $_REQUEST['rub']) === false) return false;
// handle strict case : is_module('system$') $ - return false is $todo is set
if(strpos($a[0], '$') !== false && isset($_REQUEST['todo'])) return false;
// handle case is_module('system/list')
if(isset($a[1]) && !empty($a[1])) {
if(!isset($_REQUEST['todo']) || $_REQUEST['todo'] != $a[1]) return false;
}
return true;
}
/**
* Remove DOM Nodes
* @param string $html
* @param string $tag
* @return string
*/
function removeDomNodes($html, $tag)
{
if(empty($html)) return $html;
$html = str_get_html($html);
foreach($html->find($tag) as $element) {
$scripts = $element->outertext = '';
}
return $html;
}
function cleanString($string, $allowed = array()) {
$allow = null;
if (!empty($allowed)) {
foreach ($allowed as $value) {
$allow .= "\\$value";
}
}
$mapping = array(
'Š'=>'S', 'š'=>'s', 'Đ'=>'Dj', 'đ'=>'dj', 'Ž'=>'Z', 'ž'=>'z', 'Č'=>'C', 'č'=>'c', 'Ć'=>'C', 'ć'=>'c',
'À'=>'A', 'Á'=>'A', 'Â'=>'A', 'Ã'=>'A', 'Ä'=>'A', 'Å'=>'A', 'Æ'=>'A', 'Ç'=>'C', 'È'=>'E', 'É'=>'E',
'Ê'=>'E', 'Ë'=>'E', 'Ì'=>'I', 'Í'=>'I', 'Î'=>'I', 'Ï'=>'I', 'Ñ'=>'N', 'Ò'=>'O', 'Ó'=>'O', 'Ô'=>'O',
'Õ'=>'O', 'Ö'=>'O', 'Ő'=>'O', 'Ø'=>'O', 'Ù'=>'U', 'Ú'=>'U', 'Û'=>'U', 'Ü'=>'U', 'Ű'=>'U', 'Ý'=>'Y',
'Þ'=>'B', 'ß'=>'Ss','à'=>'a', 'á'=>'a', 'â'=>'a', 'ã'=>'a', 'ä'=>'a', 'å'=>'a', 'æ'=>'a', 'ç'=>'c',
'è'=>'e', 'é'=>'e', 'ê'=>'e', 'ë'=>'e', 'ì'=>'i', 'í'=>'i', 'î'=>'i', 'ï'=>'i', 'ð'=>'o', 'ñ'=>'n',
'ò'=>'o', 'ó'=>'o', 'ô'=>'o', 'õ'=>'o', 'ö'=>'o', 'ő'=>'o', 'ø'=>'o', 'ù'=>'u', 'ú'=>'u', 'ű'=>'u',
'û'=>'u', 'ü'=>'u', 'ý'=>'y', 'ý'=>'y', 'þ'=>'b', 'ÿ'=>'y', 'Ŕ'=>'R', 'ŕ'=>'r'
);
if (is_array($string)) {
$cleaned = array();
foreach ($string as $key => $clean) {
$clean = strtr($clean, $mapping);
}
} else {
$cleaned = strtr($string, $mapping);
}
return $cleaned;
}
/**
* sanitize_string()
* Convert html special chars
* @param string $str
* @return string
*/
function sanitize_string($str) {
if(is_string($str)) $str = htmlspecialchars($str, ENT_COMPAT, CHARSET);
return $str;
}
/**
* strip_input()
* Remove PHP and HTML code
* @param string $str
* @param string $exceptions
* @return string
*/
function strip_input($str, $exceptions = false) {
if(CURRENT_APP != 'admin') {
$str = removeDomNodes($str, 'script');
$str = strip_tags($str, ''._t('workshop', 'image_insert').'
");
';
echo ''.PHP_EOL;
echo ''.PHP_EOL;
footerAddInlineJS($js);
$js = 'CKEDITOR.on("instanceReady", function(evt) {
var editor = evt.editor;
editor.on("afterPasteFromWord", function(evt) {
// alert("just pasted word content !");
// Clone the filter, so that it is based on current editor filter settings.
// Note that this function is added in CKE 4.7.3.
var filter = evt.editor.filter.clone(),
fragment = CKEDITOR.htmlParser.fragment.fromHtml( evt.data.dataValue ),
writer = new CKEDITOR.htmlParser.basicWriter();
// Disallow certain styles.
filter.disallow( \'span{font-family,color,font-size}\' );
// Disallow image copy/paste
filter.disallow( \'img\' );
// Process, and overwrite evt.data.dataValue.
filter.applyTo( fragment );
fragment.writeHtml( writer );
evt.data.dataValue = writer.getHtml();
});
});';
footerAddInlineJS($js);
}
function write_curver() {
file_put_contents('../config/.curver', LINEA_VERSION);
}
function get_curver() {
return file_get_contents('../config/.curver');
}
function sql_update($filepath, $sqlo) {
$handle = fopen($filepath, "r");
if ($handle) {
while (($line = fgets($handle)) !== false) {
$line = trim($line);
// we remove empty and commented lines
if (!empty($line) && substr($line, 0, 2) !='--' && substr($line, 0, 1) !='#' ) {
// we execute the query ignoring errors
// since FULLTEXT indexes are not supported in mysql v < 5.5.3 (50503) we replace utf8mb4 by utf8
if((int) $sqlo->DB_get_version() < (int) 50503) $line = str_ireplace('utf8mb4', 'utf8', $line);
$r = $sqlo->DBQuery($line, true);
// echo $line.'" . $content_light . " \n";
}
return $content_light;
}
/**
* error_redirect()
* Redirect to error page
*/
function error_redirect($file ='error.php') {
header("Location: " . CURRENT_APP_URL . $file);
exit();
}
/**
* removeEmptyP()
* Remove empty P tags
*
* @param string $text
* @return array $body
*/
function removeEmptyP($str) {
$str = preg_replace('#]*>(\s| ?)*#', '', $str);
return $str;
}
/**
* formatNavTitle()
* Formatage des titres ( interface admin )
*
* @param string $content
* @return string $content
*/
function formatNavTitle($content)
{
$content = formatText($content, '2HTML');
$content = cutText($content, 70, 1);
return $content;
}
/**
* formatTextli()
* Formatage des listes ( interface admin )
*
* @param string $content
* @return string $content
*/
function formatTextli($content)
{
$content = formatText($content, '2HTML');
$content= Stringy\Stringy::create($content, CHARSET)->safeTruncate(90, ' ...');
return $content;
}
/**
* formatTitleh2()
* Formatage des titres h2 ( interface admin )
*
* @param string $content
* @return string $content
*/
function formatTitleh2($content)
{
$content = formatText($content, '2HTML');
return $content;
}
/**
* isRawText()
* check if raw text or html text
*
* @param string $t
* @return bool
*/
function isRawText($t) {
if (strcmp($t, strip_tags($t)) == 0) {
return true;
} else {
return false;
}
}
/**
* formatText()
* Formatage de texte pour affichage
*
* @param $content
* @param string $format
* @return string $content
*/
function formatText($content, $format = -1)
{
if(empty($content)) return $content;
$content = stripslashes(trim($content));
switch ($format) {
case '2HTML':
if(RICH_TEXT_EDITOR === 0 || isRawText($content)) $content = nl2br($content);
break;
case '2FIELD':
$content = htmlentities($content, ENT_QUOTES, CHARSET);
break;
case '2ATT':
$content = htmlentities($content, ENT_QUOTES, CHARSET);
break;
case '2XML':
$content = htmlspecialchars($content);
break;
case '2FILE':
//$content = addslashes(trim($content));
$content = htmlspecialchars($content, ENT_QUOTES, CHARSET);
break;
default:
}
return $content;
}
function stripText($text) {
$text = strtolower($text);
// strip all non word chars
$text = preg_replace('/\W/', ' ', $text);
// replace all white space sections with a dash
$text = preg_replace('/\ +/', '-', $text);
// trim dashes
$text = preg_replace('/\-$/', '', $text);
$text = preg_replace('/^\-/', '', $text);
return $text;
}
function get_year( $date ) {
$arrayDate = explode('-', $date);
if(DATE_FORMAT == 'dd-mm-yyyy') return $arrayDate[2];
else return $arrayDate[0];
}
/**
* toStringSqlDate()
* Renvoie la date au format SQL
*
* @param string $format
* @return string $s
*/
function toStringSqlDate($format = 'short')
{
$date_format = array(
'dd-mm-yyyy' => array(
'mysql' => array('short'=> '%d-%m-%Y', 'long'=>
array('12' => '%d-%m-%Y %r', '24' => '%d-%m-%Y %T')),
'pgsql' => array('short'=> 'DD-MM-YYYY', 'long'=>
array('12' => 'DD-MM-YYYY HH12:MI:SS', '24' => 'DD-MM-YYYY HH24:MI:SS'))),
'yyyy-mm-dd' => array(
'mysql' => array('short'=> '%Y-%m-%d', 'long'=>
array('12' => '%Y-%m-%d %r', '24' => '%Y-%m-%d %T')),
'pgsql' => array('short'=> 'YYYY-MM-DD', 'long'=>
array('12' => 'YYYY-MM-DD HH12:MI:SS', '24' => 'YYYY-MM-DD HH24:MI:SS'))),
);
if($format == 'long') $s = $date_format[DATE_FORMAT][SQL][$format][TIME_FORMAT];
else $s = $date_format[DATE_FORMAT][SQL][$format];
return $s;
}
/**
* date_compare()
* Compare 2 dates with a given operator.
* @param $date1
* @param $date2
* @param $op
* @return boolean
*/
function date_compare($date1, $date2, $op) {
$date1= strtotime(formatDate($date1, true));
$date2= strtotime(formatDate($date2, true));
switch($op) {
case '>':
if($date1 > $date2) return true;
else return false;
break;
case '<':
if($date1 < $date2) return true;
else return false;
case '>=':
if($date1 >= $date2) return true;
else return false;
break;
case '<=':
if($date1 <= $date2) return true;
else return false;
case '==':
if($date1 == $date2) return true;
else return false;
default:
return false;
}
}
/**
* ln10filename()
* Build a localized filename
* according to the current language
*
* @param string $file
* @return string
*/
function ln10filename($file)
{
$tmp=@explode(".", $file);
$total = count($tmp) - 1;
$ext = $tmp[$total];
unset($tmp[$total]);
return @implode(".", $tmp). '.' . U_L. '.' .$ext;
}
/**
* distInclude()
* Include the required file
* if no user file is found,
* includes the dist/ version file.
* Localized files have the priority
*
* @param string $file
* @return void
*/
function distInclude($file, $default_dist)
{
// If tpl_ file, we first check if file is handled by a plugin
if(Stringy\Stringy::create(basename($file), CHARSET)->startsWith('tpl_', false)) {
$file_plugin = str_replace(THEME_PUBLIC_PATH, '../', $file);
$paths = getOverridePluginsFiles(enabledPlugins(), $file_plugin);
if(count($paths) > 0) {
if(count($paths) > 1) {
_debug('[distInclude() plugin override] possible conflicts : '.count($paths). ' occurences of the same file. Loaded from '. $paths[0], 'warning');
}
_debug('[distInclude() plugin override] : '.$paths[0]);
include_once($paths[0]);
return true;
}
}
$l10n_file = ln10filename($file);
$l10n_file_dist = dirname($l10n_file).'/dist/'.basename($l10n_file);
$file_dist_default = $default_dist.'dist/'.basename($file);
$l10n_file_dist_default = $default_dist.'dist/'.basename($l10n_file);
if(file_exists($l10n_file)) {
_debug('distInclude() file Inclusion : '.$l10n_file);
include_once($l10n_file);
} elseif(file_exists($l10n_file_dist)) {
_debug('distInclude() file Inclusion : '.$l10n_file_dist);
include_once($l10n_file_dist);
}
elseif(file_exists($file)) {
_debug('distInclude() file Inclusion : '.$file);
include_once($file);
}
elseif(file_exists($l10n_file_dist_default)) {
_debug('distInclude() file Inclusion : '.$l10n_file_dist_default);
include_once($l10n_file_dist_default);
}
elseif(file_exists($file_dist_default)) {
_debug('distInclude() file Inclusion : '.$file_dist_default);
include_once($file_dist_default);
}
else {
_debug('distInclude() file Inclusion : '.dirname($file).'/dist/'.basename($file));
include_once(dirname($file).'/dist/'.basename($file));
}
}
/**
* getOverridePluginsFiles()
* return an array of paths
* corresponding to the given filename
* and matching the array of given plugins
*
* @param array $a
* @param string $filename
* @return array
*/
function getOverridePluginsFiles($a, $filename) {
$o = array();
if(count($a) == 0) return $o;
foreach ($a as &$v) {
$path = '../plugins/'.$v.'/override/'.str_replace('../', '', $filename);
// @todo - Voir s'il ne faut pas renforcer le test is_file($path) / is_dir($path)
// le test a été modifié pour permettre l'accès à de nouveaux modules via plugins : exemple : http://localhost/linea21_v2.2/admin/index.php?rub=contrib
if(file_exists($path)) {
// if(is_file($path) && file_exists($path)) {
array_push($o, $path);
}
}
return $o;
}
/**
* override()
* check if override version exists for the whole app
* then if a template file version exists or not
* finally, if no user file is found in theme,
* return the default module version file.
*
* @param string $file
* @param string $path
* @return string
*/
function override($file, $path = null, $default = true)
{
// we first check if file is handled by a plugin
$paths = getOverridePluginsFiles(enabledPlugins(), $file);
if(count($paths) > 0) {
if(count($paths) > 1 && is_file($file)) {
_debug('[plugins override] possible conflicts : '.count($paths). ' occurences of the same file. Loaded from '. $paths[0], 'warning');
}
_debug('[plugins override] : '.$paths[0]);
return $paths[0];
}
// if not, we check if file exists in '../templates/override/'
$filename = '../templates/override/' . str_replace('../', '', $file);
if(file_exists($filename)) {
_debug('[general override] : '.$filename);
return $filename;
}
// if not again we are checking into themes folders
if(is_null($path)) {
$path = THEME_PUBLIC_PATH;
}
$theme_file = $path.'override/'.str_replace('../', '', $file);
if(file_exists($theme_file)) {
_debug('[thematic override] : '.$theme_file);
return $theme_file;
// finally we include the default one if asked
}
if($default) {
_debug('[no override] : '.$file);
return $file;
}
return true;
}
/**
* formatDate()
* Renvoie la date aux formats yyyy-mm-dd ou dd-mm-yyyy suivant le cas de départ
* Si $db == true renvoie toujours la date au format yyyy-mm-dd
*
* @param string $date
* @param boolean $db
* @return string $new_date
*/
function formatDate($date, $db = false)
{
@list($part1, $part2, $part3) = explode('-', $date);
if(strlen($part1) == 2) {
$new_date = $part3 . '-' . $part2 . '-' . $part1;
} else {
$new_date = $part1 . '-' . $part2 . '-' . $part3;
}
if($db == true) {
// always return yyyy-mm-dd format
if(strlen($part1) == 2) {
$new_date = $part3 . '-' . $part2 . '-' . $part1;
} else {
$new_date = $part1 . '-' . $part2 . '-' . $part3;
}
}
return $new_date;
}
/**
* date_rfc2822()
* Format date to RFC 2822 date format
* @param string $date
* @return string (exemple : Thu, 21 Dec 2000 16:01:07 +0200)
*/
function date_rfc2822($date) {
if(!isNullDate($date)) {
$tmp_date = formatDate($date, true);
@list($y, $m, $d) = explode('-', $tmp_date);
return date("r", mktime(3, 0, 0, $m, $d, $y));
} else {
return false;
}
}
function isNullDate($date)
{
if(substr($date, 0, 10) == '0001-01-01' || substr($date, 0, 10) == '01-01-0001') {
return true;
} else return false;
}
/**
* empty_nc()
* retourne le contenu ou N.C
*
* @param string $content
* @return string $content
*/
function empty_nc($content)
{
if(!empty($content)) $content = trim($content);
if ($content=='' || isNullDate($content)) $content = _t('divers','nc');
return $content;
}
/**
* empty_none()
* retourne le contenu ou 'aucun'
*
* @param string $content
* @return string $content
*/
function empty_none($content)
{
if(!empty($content)) $content = trim($content);
if (empty($content)) $content = _t('divers','none');
return $content;
}
/**
* empty_none()
* retourne le contenu ou 0
*
* @param string $content
* @return string $content
*/
function empty_numeric($content)
{
$content = trim($content);
if (empty($content)) $content = 0;
return $content;
}
/**
* checkdate_validity()
* Vérifie la validité d'une date
*
* @param string $date
* @param string $msg (optionnal)
* @return boolean true or error message (string)
*/
function checkdate_validity($date, $msg= '')
{
if(empty($date)) return $msg ._t('date','do_provide');
$date=formatDate($date, true);
@list($year, $month, $day) = explode('-', $date);
if(!preg_match('/^\d{4}-\d\d-\d\d$/', $date)) {
return $msg . _t('date','not_valid');
}
if (!@checkdate($month , $day , $year)) return $msg . _t('date','date_do_not_exist');
return true;
}
/**
* setCookieLinea21()
* Vérifie la validité d'une date
*
* @param string $cname
* @param string $cvalue
* @param integer $expires
* @return boolean true or error message (string)
*/
function setCookieLinea21($cname, $cvalue, $expires) {
if (version_compare(phpversion(), '7.3.0', '<')) {
if(Stringy\Stringy::create(SITE_ROOT_URL, CHARSET)->startsWith('https', false))
setcookie($cname, $cvalue, $expires, '/; SameSite=Strict; Secure');
else
setcookie($cname, $cvalue, $expires, '/; SameSite=Strict;');
} else {
// use 'secure' => true to allow cookie for https use only
if(Stringy\Stringy::create(SITE_ROOT_URL, CHARSET)->startsWith('https', false))
setcookie($cname, $cvalue, ['expires' => $expires, 'path' => '/', 'httponly' => true, 'samesite' => 'Strict', 'secure' => 'true']);
else
setcookie($cname, $cvalue, ['expires' => $expires, 'path' => '/', 'httponly' => true, 'samesite' => 'Strict']);
}
}
/**
* sortItems()
* Return an array with key and value
* with ID as key and RANGE as value
* @return array
*/
function sortItems($rub, $data) {
$a = array();
for($i=0; $i\n";
$display_it .= $msg;
$display_it .= "\n";
echo $display_it;
}
/**
* system_error()
* Affichage d'un message d'erreur système
*
* @param string $msg
* @return void (echo)
*/
function system_error($msg = ERROR_SYSTEM)
{
$display_it = "\n";
$display_it .= $msg;
$display_it .= "
\n";
echo $display_it;
exit;
}
/**
* is_https()
* test if current request use https
*
* @return boolean
*/
function is_https(){
if ( (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || $_SERVER['SERVER_PORT'] == 443)
return true;
else
return false;
}
/**
* get_min_name()
* obtenir le nom de la miniature d'un fichier
*
* @param string $path
* @return string $min_path
* @todo can be removed later / still used in class.upload.php
*/
function get_min_name($path)
{
$short_path = dirname($path);
$filename = basename($path);
$min_path = $short_path . "/min_" . $filename;
return $min_path;
}
/**
* ExcedMaxSize()
* Teste si une image dépasse ou non la taille autorisée (en pixels)
*
* @param string $path
* @param integer $width_max
* @return boolean
*/
function ExcedMaxSize($path, $width_max)
{
list($width, $height, $type, $attr) = getimagesize($path);
if ($width > $width_max || $height > $width_max) return true;
else return false;
}
/**
* cancel_button()
* génére un bouton de retour
*
* @param $back_uri
* @return string
*/
function cancel_button($back_uri)
{
return '\n
\n";
$quickbox .= "
\n";
$quickbox .= "
" . $h1 . " \n";
$quickbox .= "
";
$quickbox .= $liste;
$quickbox .= " ";
$quickbox .= "
";
$quickbox .= "
'.PHP_EOL;
$str .= ' '.PHP_EOL;
return $str;
}
/**
* geocode()
* get Long/Latitude coordinates
* @param $address string
* @return object
*/
function geocode($address) {
$o = new StdClass; // prevent PHP 'Warning: Creating default object from empty value'
$o->{'status'} = 'geocoder_disabled';
if(!defined('GEOCODER_ENABLED') || GEOCODER_ENABLED == 0) {
logfile(LOG_MAINFILE, array('[action] geocoding', 'geocoder is disabled'));
return $o->{'status'};
}
$address=str_replace(" ","+",$address);
// we clean string to prevent issue on char encoding (had problem with Châlons en Champagne (Windows environnement)
$url = cleanString(GEOCODER_URL.$address);
if ($address) {
$json = file_get_contents($url);
$o = json_decode($json);
logfile(LOG_MAINFILE, array('[action] geocoding', $url, count($o->{'features'}). ' results (first taken)'));
if($json === false) logfile(LOG_MAINFILE, array('[action] geocoding', '!!! It seems we are not able to fetch the given URL : '. $url));
}
return $o;
}
/**
* placeholderReplace()
* format '{$key}'
* @param $array
* @param $input
* @return array
*/
function placeholderReplace($array, $input) {
foreach ($input as $key => $value)
{
$array = preg_replace("/{{$key}}/i", $value, $array);
}
return $array;
}
/**
* generateRandomString()
* @param integer $length
* @param string $chars
* @return string
*/
function generateRandomString($length = 10, $chars = false) {
if($chars == false) $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
else $characters = $chars;
$randomString = '';
for ($i = 0; $i < $length; $i++) {
$randomString .= $characters[rand(0, strlen($characters) - 1)];
}
return $randomString;
}
/**
* generateHTMLPage()
*
* @param string $mainContent
* @param string $app
* @param array $cssfiles
* @param array $jsfiles
* @param string $title
* @return string
**/
function generateHTMLPage($mainContent, $app, $cssfiles = array(), $jsfiles = array(), $title = SITE_NAME)
{
if(MOD_DEBUG == 1) $csuffix = '?v='. time(); else $csuffix= '';
$css = $js = '';
if($app == 'admin') {
$themeurl = ADMIN_THEME_URL;
$themepath = THEME_ADMIN_PATH;
}
else {
$themeurl = PUBLIC_THEME_URL;
$themepath = THEME_PUBLIC_PATH;
}
if(count($cssfiles) > 0) {
foreach($cssfiles as $f) {
if(file_exists($themepath.$f)) $css .= ''.$title.' ' . PHP_EOL;
$page .= '' . PHP_EOL;
$page .= '' . PHP_EOL;
$page .= $mainContent;
$page .= '' . PHP_EOL;
$page .= '' . PHP_EOL;
return $page;
}
/**
* _debug()
* Display a debug message
* @param string
* @return void
**/
function _debug($string, $messagetype = 'system')
{
if(isset($GLOBALS['debugbar']))
{
global $debugbar;
$debugbar["messages"]->addMessage($string, $messagetype);
}
}
/**
* get_absolute_url()
* convert relative path to absolute url
* @param string $path
* @return string
*/
function get_absolute_url($path) {
if($content_light = Stringy\Stringy::create($path, CHARSET)->startsWith('../', false))
$path = str_replace('../', SITE_ROOT_URL, $path);
return $path;
}
/**
* headerAddCSS()
* Add CSS into header
* @param string
* @param string
* @return boolean
**/
function headerAddCSS($path, $pos = 'default')
{
if(!fopen($path, 'r')) {
_debug('Problem loading CSS file : '.$path . ' (position : '.$pos.')', 'error');
return false;
}
$path = get_absolute_url($path);
if(isset($GLOBALS['CSSheader']) && is_numeric(strpos($GLOBALS['CSSheader'], $path))) {
_debug('Warning : CSS file already loaded :'.$path, 'warning');
return false;
}
$str = 'CSS file : '.$path . ' (position : '.$pos.')');
return true;
}
/**
* headerAddJS()
* Add JS into header
* @param string
* @param string
* @return boolean
**/
function headerAddJS($path, $pos = 'default')
{
if(!fopen($path, 'r')) {
_debug('Problem loading JS file : '.$path . ' (position : '.$pos.')', 'error');
return false;
}
$path = get_absolute_url($path);
if(isset($GLOBALS['JSheader']) && in_array($path , $GLOBALS['JSheader'])) {
_debug('Warning : JS file already loaded :'.$path, 'warning');
return false;
}
$str= ''.PHP_EOL;
if(isset($GLOBALS['JSheader']))
{
if($pos == 'first') {
$GLOBALS['JSheader'] = $str . $GLOBALS['JSheader'];
}
else {
$GLOBALS['JSheader'] .= $str . PHP_EOL ;
}
} else {
$GLOBALS['JSheader'] = $str;
}
_debug('Loading JS file : '.$path . ' (position : '.$pos.')');
return true;
}
/**
* footerAddInlineJS()
* Add inline JS into footer
* the resulting js is wrapped with '.PHP_EOL;
if(isset($GLOBALS['JSfooter']))
{
if($pos == 'first') {
$GLOBALS['JSfooter'] = $str . $GLOBALS['JSheader'];
}
else {
$GLOBALS['JSfooter'] .= $str . PHP_EOL ;
}
} else {
$GLOBALS['JSfooter'] = $str . PHP_EOL ;
}
_debug('Loading JS file : '.$path . ' (position : '.$pos.')');
return true;
}
function addDynamicCSS($url) {
$url = get_absolute_url($url);
// use of document.createStyleSheet for IE8 compatibility
$str = 'if (document.createStyleSheet)
{
document.createStyleSheet("'.$url. '");
}
else
{
$(\''. _t('system', 'see-features') .' ';
else $postlink ='';
if(isset($xml->changelog) && !empty($xml->changelog)) $changelog = ''. _t('system', 'changelog') .' ';
else $changelog ='';
// _debug('current ver : '.$current_version . ' latest ver : '.$latest_version);
if(isset($xml)) {
if((integer)$latest_version > (integer)$current_version) {
// we write temp file for further notification
@file_put_contents ('../tmp/update', $xml->num);
$update = '';
} else {
if(file_exists('../tmp/update')) unlink('../tmp/update');
$update = ''._t('check_update','search').' : '._t('check_update','ok').'
';
}
} else {
$update = ''._t('check_update','search').' : '._t('check_update','failed').'
';
}
}
catch(Exception $e){
$update = '';
_debug($e->getMessage(), 'system');
}
// _debug('check4newVersion() : '.$update);
return $update;
}
/**
* loadThemeInfo()
* Load theme info
* @param string
* @param string
* @return string
**/
function loadThemeInfo($type, $name) {
$a = array();
try{
if(!@$flow=simplexml_load_file(SITE_PATH.'templates/'.$type.'/'.$name.'/theme.xml')){
throw new Exception($name.' plugin : xml file was not found');
}
$a['name'] = $flow->themename;
$a['description'] = $flow->description;
$a['version'] = $flow->version;
$a['date'] = $flow->date;
$a['compatibility'] = $flow->compatibility;
$a['author'] = $flow->author;
$a['homepage'] = $flow->homepage;
$a['restricted_edition']['files'] = array();
$a['restricted_edition']['folders'] = array();
if(isset($flow->restricted_edition) && isset($flow->restricted_edition->file)) {
foreach($flow->restricted_edition->file as $el) {
$a['restricted_edition']['files'][]=(string) '../templates/'. $type . '/'. $name. '/'. $el;
}
}
if(isset($flow->restricted_edition) && isset($flow->restricted_edition->folder)) {
foreach($flow->restricted_edition->folder as $el) {
$a['restricted_edition']['folders'][]=(string) '../templates/'. $type . '/'. $name . '/'. $el;
}
}
return $a;
}
catch(Exception $e){
return $e->getMessage();
}
}
/**
Validate an email address.
Provide email address (raw input)
Returns true if the email address has the email
address format and the domain exists.
*/
function validEmail($email)
{
$isValid = true;
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
$isValid = false;
}
return $isValid;
}
/**
* voteEnabled($m)
* Check if votes is enabled on
* given module
* @param string
* @return boolean
**/
function voteEnabled($m)
{
if(!defined('MOD_VOTE') || MOD_VOTE == 0) {
return false;
} else {
if(is_numeric(strpos(VOTE_MODULES, $m))) return true;
else return false;
}
}
/**
* commentEnabled($m)
* Check if comment is enabled on
* given module
* @param string
* @return boolean
**/
function commentEnabled($m)
{
if(!defined('MOD_COMMENT') || MOD_COMMENT == 0) {
return false;
} else {
if(is_numeric(strpos(COMMENT_MODULES, $m))) return true;
else return false;
}
}
/**
* setBreadcrumb()
* Set breadcrumb content
* @param array
* @return void
**/
function setBreadcrumb($array)
{
if(!isset($GLOBALS['breadcrumb'])) $GLOBALS['breadcrumb']= array();
$GLOBALS['breadcrumb'] = array_merge($GLOBALS['breadcrumb'], $array);
}
/**
* getBreadcrumb()
* get the Breadcrumb for displaying
* @param string (optional)
* @return string
**/
function getBreadcrumb($sep = '»')
{
if(defined('BREADCRUMB_SEPARATOR')) $sep = BREADCRUMB_SEPARATOR;
$str = ''.PHP_EOL;
$str.= '
'.PHP_EOL;
$str.= ''.$sep.' '._t('way', 'home').' '.$sep.' '.$key.' '.$sep.' '.$key.' '.PHP_EOL;
$str.= '
'._t('divers','no_files').' '.$title.'
'.PHP_EOL;
$list = '';
foreach($files as $file) {
// $fullpath = realpath($dir. '/' . $file); // fixing bug https://dev.linea21.com/issues/1440
$fullpath = str_replace('//', '/', $dir. '/' . $file);
$size= formatBytes(filesize($fullpath), 2);
$tmpname = str_replace(SITE_PATH, '', $fullpath);
$urlfile = dirname($tmpname).'/'. rawurlencode(basename($tmpname));
$filename = basename(rawurldecode($urlfile));
$comment_actions = '';
if(MOD_COMMENT == 1 && commentEnabled('files')) {
$id = str_replace('library/userfiles/', '', $urlfile);
$nb = getFileComments($id);
$comment_actions .= '';
}
// we display files only
if(!is_dir($fullpath)) {
$list .= ''.$filename.' ('.$size.') '.$comment_actions.'' ._t('divers','dl'). ' ';
$output .= '
';
$output .= '
'. sprintf(_t('contact', 'pm_send_to'), $default_login). ' ';
$output .= '
';
$output .= '
';
$output .= '
" + data.msg + "
").insertAfter("#submit-message");
$("#submit-message, #sendmessage-content input, #sendmessage-content textarea").attr("disabled", "disabled");
} else {
$("" + data.msg + "
").insertAfter("#submit-message");
}
}
});
return false;
});';
footerAddInlineJS($js);
return $output;
}
/**
* notifyUsersMsg()
* @access public
* @param array $a
* $a['owner'] : item owner
* $a['user'] : the one who posted the item (can be an adminsitrator or animator)
* @return boolean
*/
function notifyUsersMsg($a) {
include_once(override('../mail/mail_actions.php'));
include_once(override('../mail/send.php'));
include_once('../class/class.emailq.php');
$emailqo = new emailq;
if($a['action'] == 'workgroup_request') {
$m = array('O');
$wg = $a['id'];
$data = $GLOBALS['sql_object']->DBSelect(SQL_getWorkshopDenomination($a['id']));
if(count($data)==1) $a['wgroups'] = $data[0]['workshop_denomination'];
$a['comment'] = strip_tags($_POST ['comment']);
// getting user's email
$r = $GLOBALS['sql_object']->DBSelect(SQL_get_UserInfo($a['user']));
if(isset($r[0]['profile_email'])) $a['reply_to'] = $r[0]['profile_email'];
$users = $GLOBALS['sql_object'] -> DBSelect(SQL_getWorkshopUserList($a['id'], array('O')), 'OBJECT');
}
if($a['action'] == 'vote_threshold') {
$wg = $a['parentid'];
$data = $GLOBALS['sql_object']->DBSelect(SQL_getWorkshopDenomination($a['parentid']));
if(count($data)==1) $a['wname'] = $data[0]['workshop_denomination'];
$a['wlinkforum'] = array('rub'=> $GLOBALS['links'][U_L]['topic']['linkvalue'],'id'=> $a['tid'], 'parentid' => $a['parentid'], 'debut' => $a['debut'], 'name' => $a['wname'], 'refer' => 'self', '#' => 'msg-'.$a['id']);
$users = $GLOBALS['sql_object'] -> DBSelect(SQL_getWorkshopUsersforNotification($a['parentid'], 'post'), 'OBJECT');
}
if($a['action'] == 'post_alert') {
if(ALERT_NEWPOST == 0) return true;
if(ALERT_NEWPOST == 1) $m = array('O', 'A');
if(ALERT_NEWPOST == 2) $m = array('O', 'A', 'U');
$a['topic_body'] = clean_html_body($a['topic_body']);
$wg = $a['parentid'];
$data = $GLOBALS['sql_object']->DBSelect(SQL_getWorkshopDenomination($a['parentid']));
if(count($data)==1) $a['wname'] = $data[0]['workshop_denomination'];
$a['wlinkforum'] = array('rub'=> $GLOBALS['links'][U_L]['topic']['linkvalue'],'id'=> $a['tid'], 'parentid' => $a['parentid'], 'debut' => $a['debut'], 'name' => $a['wname'], 'refer' => 'self', '#' => 'msg-'.$a['id']);
$users = $GLOBALS['sql_object'] -> DBSelect(SQL_getWorkshopUsersforNotification($a['parentid'], 'post'), 'OBJECT');
}
if($a['action'] == 'topic_alert') {
if(ALERT_NEWTOPIC == 0) return true;
if(ALERT_NEWTOPIC == 1) $m = array('O', 'A');
if(ALERT_NEWTOPIC == 2) $m = array('O', 'A', 'U');
$a['topic_body'] = clean_html_body($a['topic_body']);
$data = $GLOBALS['sql_object']->DBSelect(SQL_getWorkshopDenomination($a['id']));
if(count($data)==1) $a['wname'] =$data[0]['workshop_denomination'];
$a['wlinkforum'] = array('rub'=> $GLOBALS['links'][U_L]['topic-list']['linkvalue'],'id'=> $a['id'], 'name' => $a['wname'], 'refer' => 'self');
$users = $GLOBALS['sql_object'] -> DBSelect(SQL_getWorkshopUsersforNotification($a['id'], 'topic'), 'OBJECT');
}
if($a['action'] == 'file_alert') {
if(ALERT_NEWFILE == 0) return true;
if(ALERT_NEWFILE == 1) $m = array('O', 'A');
if(ALERT_NEWFILE == 2) $m = array('O', 'A', 'U');
$data = $GLOBALS['sql_object']->DBSelect(SQL_getWorkshopDenomination($a['id']));
if(count($data)==1) $a['wname'] =$data[0]['workshop_denomination'];
$a['wlinkfiles'] = array('rub'=> $GLOBALS['links'][U_L]['files']['linkvalue'],'id'=> $a['id'], 'name' => $a['wname'], 'refer' => 'self');
$a['wlinkworkgroups'] = array('rub'=> $GLOBALS['links'][U_L]['workgroup']['linkvalue']);
if(isset($a['is_shared']) && $a['is_shared'] === true) {
// we notify all users
$users = $GLOBALS['sql_object']->DBSelect(SQL_getAllWorkshopUsersforNotification('file'), 'OBJECT');
} else {
// we notify only current workgroup
$users = $GLOBALS['sql_object']->DBSelect(SQL_getWorkshopUsersforNotification($a['id'], 'file'), 'OBJECT');
}
}
if($a['action'] == 'event_alert') {
if(ALERT_NEWEVENT == 0) return true;
if(ALERT_NEWEVENT == 1) $m = array('O', 'A');
if(ALERT_NEWEVENT == 2) $m = array('O', 'A', 'U');
$a['task_body'] = clean_html_body($a['task_body']);
$data = $GLOBALS['sql_object']->DBSelect(SQL_getWorkshopDenomination($a['id']));
if(count($data)==1) $a['wname'] = $data[0]['workshop_denomination'];
$a['wlinkcalendar'] = array('rub'=> $GLOBALS['links'][U_L]['calendar']['linkvalue'],'id'=> $a['id'], 'name' => $a['wname'], 'refer' => 'self');
$users = $GLOBALS['sql_object']->DBSelect(SQL_getWorkshopUsersforNotification($a['id'], 'file'), 'OBJECT');
}
foreach($users as $user) {
if($user->user_login != $a['user']) {
if(in_array($user->jwu_user_right, $m)) {
$a['recipient'] = $user->profile_email;
$emailContainer = prepare_email($a);
// if no email queue, we send mail directly
if(!defined('MAIL_BULK') || MAIL_BULK == 'nodelay') {
$r = send_email($emailContainer);
// we prepare the email queue and store it in database
// emails are sent later using cron
} else {
$queue = array();
$queue = $emailContainer;
$queue['module'] = 'workgroups';
if($a['action'] == 'event_alert') $queue['priority'] = 1;
$r = $emailqo->addToQueue($queue, $GLOBALS['sql_object']);
}
}
}
}
return true;
}
/**
* get_referer()
* @param force_url bool
* @return string
*/
function get_referer($force_url = false) {
$referer = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '';
// referer is safe
if(Stringy\Stringy::create($referer, CHARSET)->startsWith(SITE_ROOT_URL)) return $referer;
logfile(LOG_MAINFILE, array('[suspicious referer]','current='.$referer , 'force_url='. (int) $force_url, $_SERVER['HTTP_USER_AGENT'], $_SERVER['REQUEST_METHOD'], $_SERVER['REQUEST_URI'], $_SERVER['QUERY_STRING'], $_SERVER['HTTP_COOKIE'], i2c_realip()));
// provided referer is suspect, we route to default CURRENT_APP_URL
// if $force_url is set to true
if ($force_url) return CURRENT_APP_URL;
else return $referer;
}
// Returns the real IP address of the user
// from https://gist.github.com/ionutvmi/5945163
function i2c_realip()
{
// No IP found (will be overwritten by for
// if any IP is found behind a firewall)
$ip = FALSE;
// If HTTP_CLIENT_IP is set, then give it priority
if (!empty($_SERVER["HTTP_CLIENT_IP"])) {
$ip = $_SERVER["HTTP_CLIENT_IP"];
}
// User is behind a proxy and check that we discard RFC1918 IP addresses
// if they are behind a proxy then only figure out which IP belongs to the
// user. Might not need any more hackin if there is a squid reverse proxy
// infront of apache.
if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
// Put the IP's into an array which we shall work with shortly.
$ips = explode (", ", $_SERVER['HTTP_X_FORWARDED_FOR']);
if ($ip) { array_unshift($ips, $ip); $ip = FALSE; }
for ($i = 0; $i < count($ips); $i++) {
// Skip RFC 1918 IP's 10.0.0.0/8, 172.16.0.0/12 and
// 192.168.0.0/16
if (!preg_match('/^(?:10|172\.(?:1[6-9]|2\d|3[01])|192\.168)\./', $ips[$i])) {
if (version_compare(phpversion(), "5.0.0", ">=")) {
if (ip2long($ips[$i]) != false) {
$ip = $ips[$i];
break;
}
} else {
if (ip2long($ips[$i]) != -1) {
$ip = $ips[$i];
break;
}
}
}
}
}
// Return with the found IP or the remote address
return ($ip ? $ip : $_SERVER['REMOTE_ADDR']);
}
/**
* securityCheck()
* Test and sanitize user input
* from request
* @return boolean
**/
function securityCheck() {
$passed = true;
// we first sanitize vars
if(isset($_REQUEST['rub']))
$_REQUEST['rub']= strip_tags($_REQUEST['rub']);
if(isset($_REQUEST['todo']))
$_REQUEST['todo']= strip_tags($_REQUEST['todo']);
if(isset($_REQUEST['pid']))
$_REQUEST['pid']= strip_tags($_REQUEST['pid']);
if(isset($_REQUEST['plugin']))
$_REQUEST['plugin']= strip_tags($_REQUEST['plugin']);
if(isset($_REQUEST['name']))
$_REQUEST['name']= strip_tags($_REQUEST['name']);
if(isset($_REQUEST['search']))
$_REQUEST['search']= strip_tags($_REQUEST['search']);
if(isset($_REQUEST['newsletteremail']))
$_REQUEST['newsletteremail']= strip_tags($_REQUEST['newsletteremail']);
// then do tests
if(isset($_REQUEST['id']) && preg_match('/[^0-9A-Za-z]/',$_REQUEST['id']))
$passed= false;
if(isset($_REQUEST['parentid']) && !is_numeric($_REQUEST['parentid']))
$passed= false;
if(isset($_REQUEST['parentparentid']) && !is_numeric($_REQUEST['parentparentid']))
$passed= false;
if(isset($_REQUEST['debut']) && !is_numeric($_REQUEST['debut']))
$passed= false;
if($passed == false) die('no way!');
else return true;
}
?>