mirror of https://github.com/xevidos/codiad.git
661 lines
17 KiB
PHP
Executable File
661 lines
17 KiB
PHP
Executable File
<?php
|
|
/*
|
|
* Copyright (c) Codiad & Kent Safranski (codiad.com), and Isaac Brown (telaaedifex.com), distributed
|
|
* as-is and without warranty under the MIT License. See
|
|
* [root]/license.txt for more. This information must remain intact.
|
|
*/
|
|
|
|
Common::startSession();
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Common Class
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
class Common {
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// PROPERTIES
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static $debugMessageStack = array();
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// METHODS
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
// -----------------------------||----------------------------- //
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Construct
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function construct() {
|
|
|
|
global $cookie_lifetime;
|
|
$path = str_replace( "index.php", "", $_SERVER['SCRIPT_FILENAME'] );
|
|
foreach ( array( "components", "plugins" ) as $folder ) {
|
|
|
|
if( strpos( $_SERVER['SCRIPT_FILENAME'], $folder ) ) {
|
|
|
|
$path = substr( $_SERVER['SCRIPT_FILENAME'], 0, strpos( $_SERVER['SCRIPT_FILENAME'], $folder ) );
|
|
break;
|
|
}
|
|
}
|
|
|
|
if( file_exists( $path . 'config.php' ) ) {
|
|
|
|
require_once( $path . 'config.php' );
|
|
}
|
|
|
|
if( ! defined( 'BASE_PATH' ) ) {
|
|
|
|
define( 'BASE_PATH', __DIR__ );
|
|
}
|
|
|
|
if( ! defined( 'COMPONENTS' ) ) {
|
|
|
|
define( 'COMPONENTS', BASE_PATH . '/components' );
|
|
}
|
|
|
|
if( ! defined( 'PLUGINS' ) ) {
|
|
|
|
define( 'PLUGINS', BASE_PATH . '/plugins' );
|
|
}
|
|
|
|
if( ! defined( 'DATA' ) ) {
|
|
|
|
define( 'DATA', BASE_PATH . '/data' );
|
|
}
|
|
|
|
if( ! defined( 'SESSIONS_PATH' ) ) {
|
|
|
|
define( 'SESSIONS_PATH', BASE_PATH . '/data/sessions' );
|
|
}
|
|
|
|
if( ! defined( 'SITE_ID' ) ) {
|
|
|
|
define( 'SITE_ID', $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
|
|
}
|
|
|
|
if( ! defined( 'THEMES' ) ) {
|
|
|
|
define( "THEMES", BASE_PATH . "/themes" );
|
|
}
|
|
|
|
if( ! defined( 'THEME' ) ) {
|
|
|
|
define( "THEME", "default" );
|
|
}
|
|
|
|
if( ! defined( 'LANGUAGE' ) ) {
|
|
|
|
define( "LANGUAGE", "en" );
|
|
}
|
|
|
|
require_once( COMPONENTS . "/sql/class.sql.php" );
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// New Methods
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Check access to application
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function check_access( $action = "return" ) {
|
|
|
|
/*if( ! self::check_session() ) {
|
|
|
|
session_destroy();
|
|
self::return( formatJSEND( "error", "Error fetching project information." ), "exit" );
|
|
}*/
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Check access to a project
|
|
//////////////////////////////////////////////////////////////////
|
|
public static function check_project_access( $project_path, $action ) {
|
|
|
|
$sql = "SELECT * FROM `projects` WHERE `name`=? AND `path`=? AND ( `owner`=? OR `owner`='nobody' );";
|
|
$bind = "sss";
|
|
$bind_variables = array( $project_name, $project_path, $_SESSION["user"] );
|
|
$return = sql::sql( $sql, $bind, $bind_variables, formatJSEND( "error", "Error checking project access." ) );
|
|
|
|
if( mysqli_num_rows( $return ) > 0 ) {
|
|
|
|
$return = mysqli_fetch_assoc( $return );
|
|
|
|
try {
|
|
|
|
$users = json_decode( $return["access"] );
|
|
} catch( exception $e ) {
|
|
|
|
$users = array();
|
|
}
|
|
|
|
if( $return["owner"] == 'nobody' || $return["owner"] == $_SESSION["user"] || ( in_array( $_SESSION["user"], $users ) && ! empty( $users ) ) ) {
|
|
|
|
$return = true;
|
|
} else {
|
|
|
|
$return = false;
|
|
}
|
|
} else {
|
|
|
|
$return = false;
|
|
}
|
|
|
|
self::return( $return, $action );
|
|
}
|
|
|
|
public static function get_users( $return = "return", $exclude_current = false ) {
|
|
|
|
$sql = "SELECT `username` FROM `users`";
|
|
$bind = "";
|
|
$bind_variables = array();
|
|
|
|
if( $exclude_current ) {
|
|
|
|
$sql .= " WHERE `username`!=?";
|
|
$bind .= "s";
|
|
array_push( $bind_variables, $_SESSION["user"] );
|
|
}
|
|
|
|
$result = sql::sql( $sql, $bind, $bind_variables, formatJSEND( "error", "Error checking users." ) );
|
|
$user_list = array();
|
|
|
|
foreach( $result as $row ) {
|
|
|
|
array_push( $user_list, $row["username"] );
|
|
}
|
|
|
|
if( mysqli_num_rows( $result ) > 0 ) {
|
|
|
|
switch( $return ) {
|
|
|
|
case( "json" ):
|
|
|
|
$return = json_encode( $user_list );
|
|
break;
|
|
|
|
case( "return" ):
|
|
|
|
$return = $user_list;
|
|
break;
|
|
}
|
|
} else {
|
|
|
|
$return = formatJSEND( "error", "Error selecting user information." );
|
|
}
|
|
return( $return );
|
|
}
|
|
|
|
public static function is_admin() {
|
|
|
|
$sql = "SELECT * FROM `users` WHERE `username`=? AND `access`=?;";
|
|
$bind = "ss";
|
|
$bind_variables = array( $_SESSION["user"], "admin" );
|
|
$return = sql::sql( $sql, $bind, $bind_variables, formatJSEND( "error", "Error checking user acess." ) );
|
|
|
|
if( mysqli_num_rows( $return ) > 0 ) {
|
|
|
|
return( true );
|
|
} else {
|
|
|
|
return( false );
|
|
}
|
|
}
|
|
|
|
public static function logout() {
|
|
|
|
$sql = "UPDATE `users` SET `token`=? WHERE `username`=?;";
|
|
$bind = "ss";
|
|
$bind_variables = array( null, $_SESSION["user"] );
|
|
$return = sql::sql( $sql, $bind, $bind_variables, formatJSEND( "error", "Error updating user information." ) );
|
|
|
|
try {
|
|
|
|
$json = json_decode( $return, true );
|
|
echo( $return );
|
|
} catch( exception $e ) {}
|
|
|
|
session_unset();
|
|
session_destroy();
|
|
session_start();
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Search Users
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public function search_users( $username, $return = "return", $exclude_current = false ) {
|
|
|
|
$sql = "SELECT `username` FROM `users` WHERE `username` LIKE ?";
|
|
$bind = "s";
|
|
$bind_variables = array( "%{$username}%" );
|
|
|
|
if( $exclude_current ) {
|
|
|
|
$sql .= " AND `username`!=?";
|
|
$bind .= "s";
|
|
array_push( $bind_variables, $_SESSION["user"] );
|
|
}
|
|
|
|
$result = sql::sql( $sql, $bind, $bind_variables, formatJSEND( "error", "Error selecting user information." ) );
|
|
$user_list = array();
|
|
|
|
foreach( $result as $row ) {
|
|
|
|
array_push( $user_list, $row["username"] );
|
|
}
|
|
|
|
if( mysqli_num_rows( $result ) > 0 ) {
|
|
|
|
switch( $return ) {
|
|
|
|
case( "exit" ):
|
|
|
|
exit( formatJSEND( "success", $user_list ) );
|
|
break;
|
|
|
|
case( "json" ):
|
|
|
|
$return = json_encode( $user_list );
|
|
break;
|
|
|
|
case( "return" ):
|
|
|
|
$return = $user_list;
|
|
break;
|
|
}
|
|
} else {
|
|
|
|
switch( $return ) {
|
|
|
|
case( "exit" ):
|
|
|
|
exit( formatJSEND( "error", "Error selecting user information." ) );
|
|
break;
|
|
|
|
case( "json" ):
|
|
|
|
$return = formatJSEND( "error", "Error selecting user information." );
|
|
break;
|
|
|
|
case( "return" ):
|
|
|
|
$return = null;
|
|
break;
|
|
}
|
|
}
|
|
|
|
return( $return );
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Start Sessions
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function start_session() {
|
|
|
|
Common::construct();
|
|
global $cookie_lifetime;
|
|
|
|
if( isset( $cookie_lifetime ) && $cookie_lifetime != "" ) {
|
|
|
|
ini_set( "session.cookie_lifetime", $cookie_lifetime );
|
|
}
|
|
|
|
//Set a Session Name
|
|
session_name( md5( BASE_PATH ) );
|
|
session_save_path( SESSIONS_PATH );
|
|
session_start();
|
|
|
|
if( ! defined( 'SESSION_ID' ) ) {
|
|
|
|
define( "SESSION_ID", session_id() );
|
|
}
|
|
|
|
//Check for external authentification
|
|
if( defined( 'AUTH_PATH' ) ) {
|
|
|
|
require_once( AUTH_PATH );
|
|
}
|
|
|
|
global $lang;
|
|
if ( isset( $_SESSION['lang'] ) ) {
|
|
|
|
include BASE_PATH . "/languages/{$_SESSION['lang']}.php";
|
|
} else {
|
|
|
|
include BASE_PATH . "/languages/" . LANGUAGE . ".php";
|
|
}
|
|
}
|
|
|
|
public static function return( $output, $action = "return" ) {
|
|
|
|
switch( $action ) {
|
|
|
|
case( "exit" ):
|
|
|
|
exit( $output );
|
|
break;
|
|
|
|
case( "return" ):
|
|
|
|
return( $output );
|
|
break;
|
|
}
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Old Methods
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// SESSIONS
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function startSession() {
|
|
|
|
Common::construct();
|
|
global $cookie_lifetime;
|
|
|
|
if( isset( $cookie_lifetime ) && $cookie_lifetime != "" ) {
|
|
|
|
ini_set( "session.cookie_lifetime", $cookie_lifetime );
|
|
}
|
|
|
|
//Set a Session Name
|
|
session_name( md5( BASE_PATH ) );
|
|
session_save_path( SESSIONS_PATH );
|
|
session_start();
|
|
|
|
if( ! defined( 'SESSION_ID' ) ) {
|
|
|
|
define( "SESSION_ID", session_id() );
|
|
}
|
|
|
|
//Check for external authentification
|
|
if( defined( 'AUTH_PATH' ) ) {
|
|
|
|
require_once( AUTH_PATH );
|
|
}
|
|
|
|
global $lang;
|
|
if ( isset( $_SESSION['lang'] ) ) {
|
|
|
|
include BASE_PATH . "/languages/{$_SESSION['lang']}.php";
|
|
} else {
|
|
|
|
include BASE_PATH . "/languages/" . LANGUAGE . ".php";
|
|
}
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Read Content of directory
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function readDirectory( $foldername ) {
|
|
|
|
$tmp = array();
|
|
$allFiles = scandir( $foldername );
|
|
foreach ( $allFiles as $fname ) {
|
|
|
|
if( $fname == '.' || $fname == '..' ) {
|
|
|
|
continue;
|
|
}
|
|
if( is_dir( $foldername . '/' . $fname ) ) {
|
|
|
|
$tmp[] = $fname;
|
|
}
|
|
}
|
|
return $tmp;
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Log debug message
|
|
// Messages will be displayed in the console when the response is
|
|
// made with the formatJSEND function.
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function debug( $message ) {
|
|
|
|
Common::$debugMessageStack[] = $message;
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// URLs
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function getConstant( $key, $default = null ) {
|
|
|
|
return defined( $key ) ? constant( $key ) : $default;
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Localization
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function i18n( $key, $args = array() ) {
|
|
|
|
echo Common::get_i18n( $key, $args );
|
|
}
|
|
|
|
public static function get_i18n( $key, $args = array() ) {
|
|
|
|
global $lang;
|
|
$key = ucwords( strtolower( $key ) ); //Test, test TeSt and tESt are exacly the same
|
|
$return = isset( $lang[$key] ) ? $lang[$key] : $key;
|
|
foreach( $args as $k => $v ) {
|
|
|
|
$return = str_replace( "%{" . $k . "}%", $v, $return );
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Check Session / Key
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function checkSession() {
|
|
|
|
$pass = false;
|
|
$sql = "SELECT * FROM `users` WHERE `username`=? AND `token`=PASSWORD( ? );";
|
|
$bind = "ss";
|
|
$bind_variables = array( $_SESSION["user"], $_SESSION["token"] );
|
|
$return = sql::sql( $sql, $bind, $bind_variables, formatJSEND( "error", "Error checking access." ) );
|
|
|
|
if( mysqli_num_rows( $return ) > 0 ) {
|
|
|
|
$pass = true;
|
|
}
|
|
|
|
if( ! $pass ) {
|
|
|
|
logout();
|
|
exit( '{"status":"error","message":"Authentication Error<script>window.location.href = window.location.protocol + `' . "//" . Common::getConstant('BASE_URL') . '`</script>"}' );
|
|
}
|
|
}
|
|
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Get JSON
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function getJSON( $file, $namespace = "" ) {
|
|
|
|
$path = DATA . "/";
|
|
if( $namespace != "" ) {
|
|
|
|
$path = $path . $namespace . "/";
|
|
$path = preg_replace( '#/+#', '/', $path );
|
|
}
|
|
|
|
$json = file_get_contents( $path . $file );
|
|
$json = str_replace( ["\n\r", "\r", "\n"], "", $json );
|
|
$json = str_replace( "|*/?>", "", str_replace( "<?php/*|", "", $json ) );
|
|
$json = json_decode( $json, true );
|
|
return $json;
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Save JSON
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function saveJSON( $file, $data, $namespace = "" ) {
|
|
|
|
$path = DATA . "/";
|
|
if( $namespace != "" ) {
|
|
|
|
$path = $path . $namespace . "/";
|
|
$path = preg_replace( '#/+#', '/', $path );
|
|
if( ! is_dir( $path ) ) {
|
|
|
|
mkdir( $path );
|
|
}
|
|
}
|
|
|
|
$data = "<?php\r\n/*|" . json_encode( $data ) . "|*/\r\n?>";
|
|
$write = fopen( $path . $file, 'w' ) or die( "can't open file " . $path . $file );
|
|
fwrite( $write, $data );
|
|
fclose( $write );
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Format JSEND Response
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function formatJSEND( $status, $data = false ) {
|
|
|
|
/// Debug /////////////////////////////////////////////////
|
|
$debug = "";
|
|
if( count( Common::$debugMessageStack ) > 0 ) {
|
|
|
|
$debug .= ',"debug":';
|
|
$debug .= json_encode( Common::$debugMessageStack );
|
|
}
|
|
|
|
if( $status == "success" ) {
|
|
|
|
// Success ///////////////////////////////////////////////
|
|
if( $data ) {
|
|
|
|
$jsend = '{"status":"success","data":' . json_encode( $data ) . $debug . '}';
|
|
} else {
|
|
|
|
$jsend = '{"status":"success","data":null' . $debug . '}';
|
|
}
|
|
} else {
|
|
|
|
// Error /////////////////////////////////////////////////
|
|
$jsend = '{"status":"error","message":"' . $data . '"' . $debug . '}';
|
|
}
|
|
// Return ////////////////////////////////////////////////
|
|
return $jsend;
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Check Function Availability
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function checkAccess() {
|
|
|
|
return self::is_admin();
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Check Path
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function checkPath( $path ) {
|
|
|
|
$sql = "SELECT * FROM `projects` WHERE LOCATE( `path`, ? ) > 0 LIMIT 1;";
|
|
$bind = "s";
|
|
$bind_variables = array( $path );
|
|
$result = sql::sql( $sql, $bind, $bind_variables, formatJSEND( "error", "Error fetching project information." ) );
|
|
|
|
if( mysqli_num_rows( $result ) > 0 ) {
|
|
|
|
$result = mysqli_fetch_assoc( $result );
|
|
|
|
try {
|
|
|
|
$users = json_decode( $result["access"] );
|
|
} catch( exception $e ) {
|
|
|
|
$users = array();
|
|
}
|
|
|
|
if( $result["owner"] == 'nobody' || $result["owner"] == $_SESSION["user"] || ( in_array( $_SESSION["user"], $users ) && ! empty( $users ) ) ) {
|
|
|
|
return( true );
|
|
}
|
|
}
|
|
return( false );
|
|
}
|
|
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Check Function Availability
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function isAvailable( $func ) {
|
|
|
|
if ( ini_get( 'safe_mode' ) ) {
|
|
|
|
return false;
|
|
}
|
|
$disabled = ini_get( 'disable_functions' );
|
|
if ( $disabled ) {
|
|
|
|
$disabled = explode( ',', $disabled );
|
|
$disabled = array_map( 'trim', $disabled );
|
|
return ! in_array( $func, $disabled );
|
|
}
|
|
return true;
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Check If Path is absolute
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function isAbsPath( $path ) {
|
|
|
|
return( $path[0] === '/' || $path[1] === ':' ) ? true : false;
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Check If WIN based system
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
public static function isWINOS( ) {
|
|
|
|
return( strtoupper( substr( PHP_OS, 0, 3 ) ) === 'WIN' );
|
|
}
|
|
}
|
|
|
|
//////////////////////////////////////////////////////////////////
|
|
// Wrapper for old method names
|
|
//////////////////////////////////////////////////////////////////
|
|
|
|
function is_admin() { Common::is_admin(); }
|
|
function debug($message) { Common::debug($message); }
|
|
function i18n($key, $args = array()) { echo Common::i18n($key, $args); }
|
|
function get_i18n($key, $args = array()) { return Common::get_i18n($key, $args); }
|
|
function checkSession(){ Common::checkSession(); }
|
|
function getJSON($file,$namespace=""){ return Common::getJSON($file,$namespace); }
|
|
function saveJSON($file,$data,$namespace=""){ Common::saveJSON($file,$data,$namespace); }
|
|
function formatJSEND($status,$data=false){ return Common::formatJSEND($status,$data); }
|
|
function checkAccess() { return Common::checkAccess(); }
|
|
function checkPath($path) { return Common::checkPath($path); }
|
|
function isAvailable($func) { return Common::isAvailable($func); }
|
|
function logout() { return Common::logout(); }
|
|
function get_users( $return = "return", $exclude_current = false ) { return Common::get_users( $return, $exclude_current ); }
|
|
function search_users( $username, $return = "return", $exclude_current = false ) { return Common::search_users( $username, $return, $exclude_current ); }
|
|
?>
|