2013-02-26 10:09:41 +01:00
< ? php
2015-09-14 20:54:13 +02:00
/**
2017-03-21 20:08:40 +01:00
* Shaarli - The personal , minimalist , super - fast , database free , bookmarking service .
2015-09-14 20:54:13 +02:00
*
* Friendly fork by the Shaarli community :
* - https :// github . com / shaarli / Shaarli
*
* Original project by sebsauvage . net :
* - http :// sebsauvage . net / wiki / doku . php ? id = php : shaarli
* - https :// github . com / sebsauvage / Shaarli
*
* Licence : http :// www . opensource . org / licenses / zlib - license . php
*
2017-01-15 19:27:57 +01:00
* Requires : PHP 5.5 . x
2015-09-14 20:54:13 +02:00
*/
2015-08-04 18:31:16 +02:00
// Set 'UTC' as the default timezone if it is not defined in php.ini
// See http://php.net/manual/en/datetime.configuration.php#ini.date.timezone
if ( date_default_timezone_get () == '' ) {
date_default_timezone_set ( 'UTC' );
}
2013-03-10 14:06:12 +01:00
2015-11-11 18:45:46 +01:00
/*
* PHP configuration
*/
2013-12-05 18:23:02 +01:00
// http://server.com/x/shaarli --> /shaarli/
2016-05-18 21:48:24 +02:00
define ( 'WEB_PATH' , substr ( $_SERVER [ 'REQUEST_URI' ], 0 , 1 + strrpos ( $_SERVER [ 'REQUEST_URI' ], '/' , 0 )));
2013-02-26 10:09:41 +01:00
2015-11-11 18:45:46 +01:00
// High execution time in case of problematic imports/exports.
ini_set ( 'max_input_time' , '60' );
// Try to set max upload file size and read
ini_set ( 'memory_limit' , '128M' );
2013-02-26 10:09:41 +01:00
ini_set ( 'post_max_size' , '16M' );
ini_set ( 'upload_max_filesize' , '16M' );
2015-11-11 18:45:46 +01:00
// See all error except warnings
error_reporting ( E_ALL ^ E_WARNING );
// See all errors (for debugging only)
//error_reporting(-1);
2015-07-10 22:53:43 +02:00
2016-07-28 22:54:33 +02:00
// 3rd-party libraries
2016-09-04 23:57:21 +02:00
if ( ! file_exists ( __DIR__ . '/vendor/autoload.php' )) {
header ( 'Content-Type: text/plain; charset=utf-8' );
echo " Error: missing Composer configuration \n \n "
. " If you installed Shaarli through Git or using the development branch, \n "
. " please refer to the installation documentation to install PHP "
. " dependencies using Composer: \n "
2017-08-26 09:40:57 +02:00
. " - https://shaarli.readthedocs.io/en/master/Server-requirements/ \n "
. " - https://shaarli.readthedocs.io/en/master/Download-and-Installation/ " ;
2016-09-04 23:57:21 +02:00
exit ;
}
2016-07-28 22:54:33 +02:00
require_once 'inc/rain.tpl.class.php' ;
require_once __DIR__ . '/vendor/autoload.php' ;
2015-03-12 00:43:02 +01:00
// Shaarli library
2015-11-11 22:49:58 +01:00
require_once 'application/ApplicationUtils.php' ;
2015-07-09 22:14:39 +02:00
require_once 'application/Cache.php' ;
require_once 'application/CachedPage.php' ;
2017-03-08 19:59:00 +01:00
require_once 'application/config/ConfigPlugin.php' ;
2016-03-12 16:08:01 +01:00
require_once 'application/FeedBuilder.php' ;
2015-11-11 22:49:58 +01:00
require_once 'application/FileUtils.php' ;
2017-01-16 12:31:08 +01:00
require_once 'application/History.php' ;
2015-09-01 21:45:06 +02:00
require_once 'application/HttpUtils.php' ;
2015-03-12 00:43:02 +01:00
require_once 'application/LinkDB.php' ;
2015-12-27 10:08:20 +01:00
require_once 'application/LinkFilter.php' ;
2016-01-04 10:45:54 +01:00
require_once 'application/LinkUtils.php' ;
2016-04-10 17:34:07 +02:00
require_once 'application/NetscapeBookmarkUtils.php' ;
2016-05-10 23:48:51 +02:00
require_once 'application/PageBuilder.php' ;
2015-07-11 01:29:12 +02:00
require_once 'application/TimeZone.php' ;
2015-08-14 01:14:07 +02:00
require_once 'application/Url.php' ;
2015-03-12 00:43:02 +01:00
require_once 'application/Utils.php' ;
2015-07-15 11:42:15 +02:00
require_once 'application/PluginManager.php' ;
require_once 'application/Router.php' ;
2016-01-12 19:50:48 +01:00
require_once 'application/Updater.php' ;
2017-05-09 18:12:15 +02:00
use \Shaarli\Languages ;
2017-01-03 11:42:21 +01:00
use \Shaarli\ThemeUtils ;
2017-03-03 23:06:12 +01:00
use \Shaarli\Config\ConfigManager ;
2017-10-22 18:44:46 +02:00
use \Shaarli\SessionManager ;
2015-03-12 00:43:02 +01:00
2015-07-11 01:29:12 +02:00
// Ensure the PHP version is supported
try {
2017-01-15 19:27:57 +01:00
ApplicationUtils :: checkPHPVersion ( '5.5' , PHP_VERSION );
2015-11-11 22:49:58 +01:00
} catch ( Exception $exc ) {
2015-07-11 01:29:12 +02:00
header ( 'Content-Type: text/plain; charset=utf-8' );
2015-11-11 22:49:58 +01:00
echo $exc -> getMessage ();
2015-07-11 01:29:12 +02:00
exit ;
}
2017-10-01 11:09:12 +02:00
define ( 'SHAARLI_VERSION' , ApplicationUtils :: getVersion ( __DIR__ . '/' . ApplicationUtils :: $VERSION_FILE ));
2017-03-21 20:08:40 +01:00
2015-07-25 13:15:47 +02:00
// Force cookie path (but do not change lifetime)
$cookie = session_get_cookie_params ();
$cookiedir = '' ;
if ( dirname ( $_SERVER [ 'SCRIPT_NAME' ]) != '/' ) {
$cookiedir = dirname ( $_SERVER [ " SCRIPT_NAME " ]) . '/' ;
}
// Set default cookie expiration and path.
session_set_cookie_params ( $cookie [ 'lifetime' ], $cookiedir , $_SERVER [ 'SERVER_NAME' ]);
// Set session parameters on server side.
// If the user does not access any page within this time, his/her session is considered expired.
define ( 'INACTIVITY_TIMEOUT' , 3600 ); // in seconds.
// Use cookies to store session.
ini_set ( 'session.use_cookies' , 1 );
// Force cookies for session (phpsessionID forbidden in URL).
ini_set ( 'session.use_only_cookies' , 1 );
// Prevent PHP form using sessionID in URL if cookies are disabled.
ini_set ( 'session.use_trans_sid' , false );
session_name ( 'shaarli' );
// Start session if needed (Some server auto-start sessions).
if ( session_id () == '' ) {
session_start ();
}
2015-09-03 23:12:58 +02:00
// Regenerate session ID if invalid or not defined in cookie.
2017-10-22 19:54:44 +02:00
if ( isset ( $_COOKIE [ 'shaarli' ]) && ! SessionManager :: checkId ( $_COOKIE [ 'shaarli' ])) {
2015-09-03 23:12:58 +02:00
session_regenerate_id ( true );
$_COOKIE [ 'shaarli' ] = session_id ();
}
2016-06-09 20:04:02 +02:00
$conf = new ConfigManager ();
2017-10-22 18:44:46 +02:00
$sessionManager = new SessionManager ( $_SESSION , $conf );
2017-05-09 18:12:15 +02:00
2018-01-31 12:39:17 +01:00
// LC_MESSAGES isn't defined without php-intl, in this case use LC_COLLATE locale instead.
if ( ! defined ( 'LC_MESSAGES' )) {
define ( 'LC_MESSAGES' , LC_COLLATE );
}
2017-05-09 18:12:15 +02:00
// Sniff browser language and set date format accordingly.
if ( isset ( $_SERVER [ 'HTTP_ACCEPT_LANGUAGE' ])) {
autoLocale ( $_SERVER [ 'HTTP_ACCEPT_LANGUAGE' ]);
}
new Languages ( setlocale ( LC_MESSAGES , 0 ), $conf );
2016-05-30 20:15:36 +02:00
$conf -> setEmpty ( 'general.timezone' , date_default_timezone_get ());
2017-05-09 18:12:15 +02:00
$conf -> setEmpty ( 'general.title' , t ( 'Shared links on ' ) . escape ( index_url ( $_SERVER )));
2016-12-07 11:58:25 +01:00
RainTPL :: $tpl_dir = $conf -> get ( 'resource.raintpl_tpl' ) . '/' . $conf -> get ( 'resource.theme' ) . '/' ; // template directory
2016-06-11 09:08:02 +02:00
RainTPL :: $cache_dir = $conf -> get ( 'resource.raintpl_tmp' ); // cache directory
2013-02-26 10:09:41 +01:00
2016-06-09 20:04:02 +02:00
$pluginManager = new PluginManager ( $conf );
2016-05-29 16:10:32 +02:00
$pluginManager -> load ( $conf -> get ( 'general.enabled_plugins' ));
2015-07-15 11:42:15 +02:00
2016-05-29 16:10:32 +02:00
date_default_timezone_set ( $conf -> get ( 'general.timezone' , 'UTC' ));
2016-05-29 14:26:23 +02:00
2013-02-26 10:09:41 +01:00
ob_start (); // Output buffering for the page cache.
// Prevent caching on client side or proxy: (yes, it's ugly)
header ( " Last-Modified: " . gmdate ( " D, d M Y H:i:s " ) . " GMT " );
header ( " Cache-Control: no-store, no-cache, must-revalidate " );
header ( " Cache-Control: post-check=0, pre-check=0 " , false );
header ( " Pragma: no-cache " );
2016-06-09 20:04:02 +02:00
if ( ! is_file ( $conf -> getConfigFileExt ())) {
2015-11-11 22:49:58 +01:00
// Ensure Shaarli has proper access to its resources
2016-06-09 20:04:02 +02:00
$errors = ApplicationUtils :: checkResourcePermissions ( $conf );
2015-11-11 22:49:58 +01:00
if ( $errors != array ()) {
2017-05-09 18:12:15 +02:00
$message = '<p>' . t ( 'Insufficient permissions:' ) . '</p><ul>' ;
2015-11-11 22:49:58 +01:00
foreach ( $errors as $error ) {
$message .= '<li>' . $error . '</li>' ;
}
$message .= '</ul>' ;
header ( 'Content-Type: text/html; charset=utf-8' );
echo $message ;
exit ;
}
// Display the installation form if no existing config is found
2017-10-22 18:44:46 +02:00
install ( $conf , $sessionManager );
2015-07-10 22:53:43 +02:00
}
2013-03-04 21:02:24 +01:00
2013-12-05 18:23:02 +01:00
// a token depending of deployment salt, user password, and the current ip
2016-05-29 16:10:32 +02:00
define ( 'STAY_SIGNED_IN_TOKEN' , sha1 ( $conf -> get ( 'credentials.hash' ) . $_SERVER [ 'REMOTE_ADDR' ] . $conf -> get ( 'credentials.salt' )));
2013-03-04 21:02:24 +01:00
2016-06-09 20:04:02 +02:00
/**
* Checking session state ( i . e . is the user still logged in )
*
* @ param ConfigManager $conf The configuration manager .
*
* @ return bool : true if the user is logged in , false otherwise .
*/
function setup_login_state ( $conf )
{
2017-08-26 12:20:38 +02:00
if ( $conf -> get ( 'security.open_shaarli' )) {
return true ;
}
$userIsLoggedIn = false ; // By default, we do not consider the user as logged in;
$loginFailure = false ; // If set to true, every attempt to authenticate the user will fail. This indicates that an important condition isn't met.
if ( ! $conf -> exists ( 'credentials.login' )) {
$userIsLoggedIn = false ; // Shaarli is not configured yet.
$loginFailure = true ;
}
if ( isset ( $_COOKIE [ 'shaarli_staySignedIn' ]) &&
$_COOKIE [ 'shaarli_staySignedIn' ] === STAY_SIGNED_IN_TOKEN &&
! $loginFailure )
{
fillSessionInfo ( $conf );
$userIsLoggedIn = true ;
}
// If session does not exist on server side, or IP address has changed, or session has expired, logout.
if ( empty ( $_SESSION [ 'uid' ])
2017-01-06 18:54:29 +01:00
|| ( $conf -> get ( 'security.session_protection_disabled' ) === false && $_SESSION [ 'ip' ] != allIPs ())
2016-05-18 21:48:24 +02:00
|| time () >= $_SESSION [ 'expires_on' ])
2017-08-26 12:20:38 +02:00
{
logout ();
$userIsLoggedIn = false ;
$loginFailure = true ;
}
if ( ! empty ( $_SESSION [ 'longlastingsession' ])) {
$_SESSION [ 'expires_on' ] = time () + $_SESSION [ 'longlastingsession' ]; // In case of "Stay signed in" checked.
}
else {
$_SESSION [ 'expires_on' ] = time () + INACTIVITY_TIMEOUT ; // Standard session expiration date.
}
if ( ! $loginFailure ) {
$userIsLoggedIn = true ;
}
return $userIsLoggedIn ;
2014-12-25 14:00:50 +01:00
}
2016-06-09 20:04:02 +02:00
$userIsLoggedIn = setup_login_state ( $conf );
2013-02-26 10:09:41 +01:00
// ------------------------------------------------------------------------------------------
// Session management
// Returns the IP address of the client (Used to prevent session cookie hijacking.)
function allIPs ()
{
2016-05-18 21:48:24 +02:00
$ip = $_SERVER [ 'REMOTE_ADDR' ];
2013-02-26 10:09:41 +01:00
// Then we use more HTTP headers to prevent session hijacking from users behind the same proxy.
if ( isset ( $_SERVER [ 'HTTP_X_FORWARDED_FOR' ])) { $ip = $ip . '_' . $_SERVER [ 'HTTP_X_FORWARDED_FOR' ]; }
if ( isset ( $_SERVER [ 'HTTP_CLIENT_IP' ])) { $ip = $ip . '_' . $_SERVER [ 'HTTP_CLIENT_IP' ]; }
return $ip ;
}
2016-06-09 20:04:02 +02:00
/**
* Load user session .
*
* @ param ConfigManager $conf Configuration Manager instance .
*/
function fillSessionInfo ( $conf )
{
2017-08-26 12:20:38 +02:00
$_SESSION [ 'uid' ] = sha1 ( uniqid ( '' , true ) . '_' . mt_rand ()); // Generate unique random number (different than phpsessionid)
$_SESSION [ 'ip' ] = allIPs (); // We store IP address(es) of the client to make sure session is not hijacked.
$_SESSION [ 'username' ] = $conf -> get ( 'credentials.login' );
$_SESSION [ 'expires_on' ] = time () + INACTIVITY_TIMEOUT ; // Set session expiration.
2013-12-05 18:23:02 +01:00
}
2016-06-09 20:04:02 +02:00
/**
* Check that user / password is correct .
*
* @ param string $login Username
* @ param string $password User password
* @ param ConfigManager $conf Configuration Manager instance .
*
* @ return bool : authentication successful or not .
*/
function check_auth ( $login , $password , $conf )
2013-02-26 10:09:41 +01:00
{
2016-05-29 16:10:32 +02:00
$hash = sha1 ( $password . $login . $conf -> get ( 'credentials.salt' ));
if ( $login == $conf -> get ( 'credentials.login' ) && $hash == $conf -> get ( 'credentials.hash' ))
2013-02-26 10:09:41 +01:00
{ // Login/password is correct.
2017-08-26 12:20:38 +02:00
fillSessionInfo ( $conf );
2016-06-11 09:08:02 +02:00
logm ( $conf -> get ( 'resource.log' ), $_SERVER [ 'REMOTE_ADDR' ], 'Login successful' );
2016-06-09 20:04:02 +02:00
return true ;
2013-02-26 10:09:41 +01:00
}
2016-06-11 09:08:02 +02:00
logm ( $conf -> get ( 'resource.log' ), $_SERVER [ 'REMOTE_ADDR' ], 'Login failed for user ' . $login );
2016-06-09 20:04:02 +02:00
return false ;
2013-02-26 10:09:41 +01:00
}
// Returns true if the user is logged in.
function isLoggedIn ()
{
2014-12-25 14:00:50 +01:00
global $userIsLoggedIn ;
return $userIsLoggedIn ;
2013-02-26 10:09:41 +01:00
}
// Force logout.
2014-12-25 14:00:50 +01:00
function logout () {
if ( isset ( $_SESSION )) {
unset ( $_SESSION [ 'uid' ]);
unset ( $_SESSION [ 'ip' ]);
unset ( $_SESSION [ 'username' ]);
unset ( $_SESSION [ 'privateonly' ]);
2017-06-01 17:55:26 +02:00
unset ( $_SESSION [ 'untaggedonly' ]);
2014-12-25 14:00:50 +01:00
}
setcookie ( 'shaarli_staySignedIn' , FALSE , 0 , WEB_PATH );
2013-12-05 18:23:02 +01:00
}
2013-02-26 10:09:41 +01:00
// ------------------------------------------------------------------------------------------
// Brute force protection system
// Several consecutive failed logins will ban the IP address for 30 minutes.
2016-06-11 09:08:02 +02:00
if ( ! is_file ( $conf -> get ( 'resource.ban_file' , 'data/ipbans.php' ))) {
2016-05-18 21:48:24 +02:00
// FIXME! globals
file_put_contents (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.ban_file' , 'data/ipbans.php' ),
2016-05-18 21:48:24 +02:00
" <?php \n \$ GLOBALS['IPBANS']= " . var_export ( array ( 'FAILURES' => array (), 'BANS' => array ()), true ) . " ; \n ?> "
);
}
2016-06-11 09:08:02 +02:00
include $conf -> get ( 'resource.ban_file' , 'data/ipbans.php' );
2016-06-09 20:04:02 +02:00
/**
* Signal a failed login . Will ban the IP if too many failures :
*
* @ param ConfigManager $conf Configuration Manager instance .
*/
function ban_loginFailed ( $conf )
2013-02-26 10:09:41 +01:00
{
2016-05-18 21:48:24 +02:00
$ip = $_SERVER [ 'REMOTE_ADDR' ];
2016-08-03 10:36:47 +02:00
$trusted = $conf -> get ( 'security.trusted_proxies' , array ());
if ( in_array ( $ip , $trusted )) {
$ip = getIpAddressFromProxy ( $_SERVER , $trusted );
if ( ! $ip ) {
return ;
}
}
2016-05-18 21:48:24 +02:00
$gb = $GLOBALS [ 'IPBANS' ];
2016-08-03 10:36:47 +02:00
if ( ! isset ( $gb [ 'FAILURES' ][ $ip ])) {
$gb [ 'FAILURES' ][ $ip ] = 0 ;
}
2013-02-26 10:09:41 +01:00
$gb [ 'FAILURES' ][ $ip ] ++ ;
2016-05-29 16:10:32 +02:00
if ( $gb [ 'FAILURES' ][ $ip ] > ( $conf -> get ( 'security.ban_after' ) - 1 ))
2013-02-26 10:09:41 +01:00
{
2016-05-29 16:10:32 +02:00
$gb [ 'BANS' ][ $ip ] = time () + $conf -> get ( 'security.ban_after' , 1800 );
2016-06-11 09:08:02 +02:00
logm ( $conf -> get ( 'resource.log' ), $_SERVER [ 'REMOTE_ADDR' ], 'IP address banned from login' );
2013-02-26 10:09:41 +01:00
}
$GLOBALS [ 'IPBANS' ] = $gb ;
2016-05-18 21:48:24 +02:00
file_put_contents (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.ban_file' , 'data/ipbans.php' ),
2016-05-18 21:48:24 +02:00
" <?php \n \$ GLOBALS['IPBANS']= " . var_export ( $gb , true ) . " ; \n ?> "
);
2013-02-26 10:09:41 +01:00
}
2016-06-09 20:04:02 +02:00
/**
* Signals a successful login . Resets failed login counter .
*
* @ param ConfigManager $conf Configuration Manager instance .
*/
function ban_loginOk ( $conf )
2013-02-26 10:09:41 +01:00
{
2016-05-18 21:48:24 +02:00
$ip = $_SERVER [ 'REMOTE_ADDR' ];
$gb = $GLOBALS [ 'IPBANS' ];
2013-02-26 10:09:41 +01:00
unset ( $gb [ 'FAILURES' ][ $ip ]); unset ( $gb [ 'BANS' ][ $ip ]);
$GLOBALS [ 'IPBANS' ] = $gb ;
2016-05-18 21:48:24 +02:00
file_put_contents (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.ban_file' , 'data/ipbans.php' ),
2016-05-18 21:48:24 +02:00
" <?php \n \$ GLOBALS['IPBANS']= " . var_export ( $gb , true ) . " ; \n ?> "
);
2013-02-26 10:09:41 +01:00
}
2016-06-09 20:04:02 +02:00
/**
* Checks if the user CAN login . If 'true' , the user can try to login .
*
* @ param ConfigManager $conf Configuration Manager instance .
*
* @ return bool : true if the user is allowed to login .
*/
function ban_canLogin ( $conf )
2013-02-26 10:09:41 +01:00
{
$ip = $_SERVER [ " REMOTE_ADDR " ]; $gb = $GLOBALS [ 'IPBANS' ];
if ( isset ( $gb [ 'BANS' ][ $ip ]))
{
// User is banned. Check if the ban has expired:
if ( $gb [ 'BANS' ][ $ip ] <= time ())
{ // Ban expired, user can try to login again.
2016-06-11 09:08:02 +02:00
logm ( $conf -> get ( 'resource.log' ), $_SERVER [ 'REMOTE_ADDR' ], 'Ban lifted.' );
2013-02-26 10:09:41 +01:00
unset ( $gb [ 'FAILURES' ][ $ip ]); unset ( $gb [ 'BANS' ][ $ip ]);
2016-05-18 21:48:24 +02:00
file_put_contents (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.ban_file' , 'data/ipbans.php' ),
2016-05-18 21:48:24 +02:00
" <?php \n \$ GLOBALS['IPBANS']= " . var_export ( $gb , true ) . " ; \n ?> "
);
2013-02-26 10:09:41 +01:00
return true ; // Ban has expired, user can login.
}
return false ; // User is banned.
}
return true ; // User is not banned.
}
// ------------------------------------------------------------------------------------------
// Process login form: Check if login/password is correct.
if ( isset ( $_POST [ 'login' ]))
{
2017-05-09 18:12:15 +02:00
if ( ! ban_canLogin ( $conf )) die ( t ( 'I said: NO. You are banned for the moment. Go away.' ));
2016-06-09 20:04:02 +02:00
if ( isset ( $_POST [ 'password' ])
2017-10-22 18:44:46 +02:00
&& $sessionManager -> checkToken ( $_POST [ 'token' ])
2016-06-09 20:04:02 +02:00
&& ( check_auth ( $_POST [ 'login' ], $_POST [ 'password' ], $conf ))
) { // Login/password is OK.
ban_loginOk ( $conf );
2013-02-26 10:09:41 +01:00
// If user wants to keep the session cookie even after the browser closes:
if ( ! empty ( $_POST [ 'longlastingsession' ]))
{
2017-08-26 12:20:38 +02:00
$_SESSION [ 'longlastingsession' ] = 31536000 ; // (31536000 seconds = 1 year)
$expiration = time () + $_SESSION [ 'longlastingsession' ]; // calculate relative cookie expiration (1 year from now)
setcookie ( 'shaarli_staySignedIn' , STAY_SIGNED_IN_TOKEN , $expiration , WEB_PATH );
$_SESSION [ 'expires_on' ] = $expiration ; // Set session expiration on server-side.
2013-02-26 14:47:47 +01:00
$cookiedir = '' ; if ( dirname ( $_SERVER [ 'SCRIPT_NAME' ]) != '/' ) $cookiedir = dirname ( $_SERVER [ " SCRIPT_NAME " ]) . '/' ;
2015-01-09 11:46:25 +01:00
session_set_cookie_params ( $_SESSION [ 'longlastingsession' ], $cookiedir , $_SERVER [ 'SERVER_NAME' ]); // Set session cookie expiration on client side
2014-08-11 20:41:50 +02:00
// Note: Never forget the trailing slash on the cookie path!
2013-02-26 10:09:41 +01:00
session_regenerate_id ( true ); // Send cookie with new expiration date to browser.
}
else // Standard session expiration (=when browser closes)
{
2013-02-26 14:47:47 +01:00
$cookiedir = '' ; if ( dirname ( $_SERVER [ 'SCRIPT_NAME' ]) != '/' ) $cookiedir = dirname ( $_SERVER [ " SCRIPT_NAME " ]) . '/' ;
2015-01-09 11:46:25 +01:00
session_set_cookie_params ( 0 , $cookiedir , $_SERVER [ 'SERVER_NAME' ]); // 0 means "When browser closes"
2013-02-26 10:09:41 +01:00
session_regenerate_id ( true );
}
2016-01-20 10:57:07 +01:00
2013-02-26 10:09:41 +01:00
// Optional redirect after login:
2015-07-29 15:32:41 +02:00
if ( isset ( $_GET [ 'post' ])) {
$uri = '?post=' . urlencode ( $_GET [ 'post' ]);
2017-03-25 19:41:01 +01:00
foreach ( array ( 'description' , 'source' , 'title' , 'tags' ) as $param ) {
2015-07-29 15:32:41 +02:00
if ( ! empty ( $_GET [ $param ])) {
$uri .= '&' . $param . '=' . urlencode ( $_GET [ $param ]);
}
}
header ( 'Location: ' . $uri );
exit ;
}
if ( isset ( $_GET [ 'edit_link' ])) {
header ( 'Location: ?edit_link=' . escape ( $_GET [ 'edit_link' ]));
exit ;
}
if ( isset ( $_POST [ 'returnurl' ])) {
// Prevent loops over login screen.
if ( strpos ( $_POST [ 'returnurl' ], 'do=login' ) === false ) {
2016-03-21 19:06:46 +01:00
header ( 'Location: ' . generateLocation ( $_POST [ 'returnurl' ], $_SERVER [ 'HTTP_HOST' ]));
2015-07-29 15:32:41 +02:00
exit ;
}
2013-02-26 10:09:41 +01:00
}
header ( 'Location: ?' ); exit ;
}
else
{
2016-06-09 20:04:02 +02:00
ban_loginFailed ( $conf );
2018-01-04 15:53:48 +01:00
$redir = '&username=' . urlencode ( $_POST [ 'login' ]);
2015-07-29 15:32:41 +02:00
if ( isset ( $_GET [ 'post' ])) {
2016-05-06 20:03:10 +02:00
$redir .= '&post=' . urlencode ( $_GET [ 'post' ]);
2017-03-25 19:41:01 +01:00
foreach ( array ( 'description' , 'source' , 'title' , 'tags' ) as $param ) {
2015-07-29 15:32:41 +02:00
if ( ! empty ( $_GET [ $param ])) {
$redir .= '&' . $param . '=' . urlencode ( $_GET [ $param ]);
}
}
}
2017-05-09 18:12:15 +02:00
// Redirect to login screen.
echo '<script>alert("' . t ( " Wrong login/password. " ) . '");document.location=\'?do=login' . $redir . '\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
}
// ------------------------------------------------------------------------------------------
// Token management for XSRF protection
// Token should be used in any form which acts on data (create,update,delete,import...).
if ( ! isset ( $_SESSION [ 'tokens' ])) $_SESSION [ 'tokens' ] = array (); // Token are attached to the session.
2016-06-09 20:04:02 +02:00
/**
* Daily RSS feed : 1 RSS entry per day giving all the links on that day .
* Gives the last 7 days ( which have links ) .
* This RSS feed cannot be filtered .
*
* @ param ConfigManager $conf Configuration Manager instance .
*/
function showDailyRSS ( $conf ) {
2013-02-26 10:09:41 +01:00
// Cache system
2016-05-10 23:31:41 +02:00
$query = $_SERVER [ 'QUERY_STRING' ];
2015-07-09 22:14:39 +02:00
$cache = new CachedPage (
2016-05-18 21:48:24 +02:00
$conf -> get ( 'config.PAGE_CACHE' ),
2015-09-06 21:31:37 +02:00
page_url ( $_SERVER ),
2015-07-09 22:14:39 +02:00
startsWith ( $query , 'do=dailyrss' ) && ! isLoggedIn ()
);
2015-07-10 15:41:59 +02:00
$cached = $cache -> cachedVersion ();
if ( ! empty ( $cached )) {
echo $cached ;
exit ;
}
2015-06-23 22:34:07 +02:00
2015-07-10 15:41:59 +02:00
// If cached was not found (or not usable), then read the database and build the response:
// Read links from database (and filter private links if used it not logged in).
2015-06-23 22:34:07 +02:00
$LINKSDB = new LinkDB (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.datastore' ),
2015-11-22 17:39:50 +01:00
isLoggedIn (),
2016-06-11 09:08:02 +02:00
$conf -> get ( 'privacy.hide_public_links' ),
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
2015-06-23 22:34:07 +02:00
);
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
/* Some Shaarlies may have very few links , so we need to look
2016-11-28 16:16:44 +01:00
back in time until we have enough days ( $nb_of_days ) .
2013-02-26 10:09:41 +01:00
*/
2015-07-10 15:41:59 +02:00
$nb_of_days = 7 ; // We take 7 days.
2016-05-18 21:48:24 +02:00
$today = date ( 'Ymd' );
2015-07-10 15:41:59 +02:00
$days = array ();
2016-11-28 18:24:15 +01:00
foreach ( $LINKSDB as $link ) {
$day = $link [ 'created' ] -> format ( 'Ymd' ); // Extract day (without time)
2016-11-28 16:16:44 +01:00
if ( strcmp ( $day , $today ) < 0 ) {
2015-07-10 15:41:59 +02:00
if ( empty ( $days [ $day ])) {
$days [ $day ] = array ();
}
2016-11-28 18:24:15 +01:00
$days [ $day ][] = $link ;
2015-07-10 15:41:59 +02:00
}
if ( count ( $days ) > $nb_of_days ) {
break ; // Have we collected enough days?
2013-02-26 10:09:41 +01:00
}
}
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
// Build the RSS feed.
header ( 'Content-Type: application/rss+xml; charset=utf-8' );
2015-09-06 21:31:37 +02:00
$pageaddr = escape ( index_url ( $_SERVER ));
2013-02-26 10:09:41 +01:00
echo '<?xml version="1.0" encoding="UTF-8"?><rss version="2.0">' ;
2015-07-10 15:41:59 +02:00
echo '<channel>' ;
2016-05-29 16:10:32 +02:00
echo '<title>Daily - ' . $conf -> get ( 'general.title' ) . '</title>' ;
2015-07-10 15:41:59 +02:00
echo '<link>' . $pageaddr . '</link>' ;
echo '<description>Daily shared links</description>' ;
echo '<language>en-en</language>' ;
echo '<copyright>' . $pageaddr . '</copyright>' . PHP_EOL ;
// For each day.
2016-11-28 18:24:15 +01:00
foreach ( $days as $day => $links ) {
2016-02-17 22:46:50 +01:00
$dayDate = DateTime :: createFromFormat ( LinkDB :: LINK_DATE_FORMAT , $day . '_000000' );
2015-09-06 21:31:37 +02:00
$absurl = escape ( index_url ( $_SERVER ) . '?do=daily&day=' . $day ); // Absolute URL of the corresponding "Daily" page.
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
// We pre-format some fields for proper output.
2016-11-28 18:24:15 +01:00
foreach ( $links as & $link ) {
2017-11-07 20:23:58 +01:00
$link [ 'formatedDescription' ] = format_description (
$link [ 'description' ],
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
);
2016-11-28 18:24:15 +01:00
$link [ 'thumbnail' ] = thumbnail ( $conf , $link [ 'url' ]);
$link [ 'timestamp' ] = $link [ 'created' ] -> getTimestamp ();
if ( startsWith ( $link [ 'url' ], '?' )) {
$link [ 'url' ] = index_url ( $_SERVER ) . $link [ 'url' ]; // make permalink URL absolute
2015-07-10 15:41:59 +02:00
}
2013-02-26 10:09:41 +01:00
}
2015-07-10 15:41:59 +02:00
2013-02-26 10:09:41 +01:00
// Then build the HTML for this day:
2013-03-04 10:18:39 +01:00
$tpl = new RainTPL ;
2016-05-29 16:10:32 +02:00
$tpl -> assign ( 'title' , $conf -> get ( 'general.title' ));
2016-02-17 22:46:50 +01:00
$tpl -> assign ( 'daydate' , $dayDate -> getTimestamp ());
2015-07-10 15:41:59 +02:00
$tpl -> assign ( 'absurl' , $absurl );
$tpl -> assign ( 'links' , $links );
2016-02-17 22:46:50 +01:00
$tpl -> assign ( 'rssdate' , escape ( $dayDate -> format ( DateTime :: RSS )));
2016-06-11 09:08:02 +02:00
$tpl -> assign ( 'hide_timestamps' , $conf -> get ( 'privacy.hide_timestamps' , false ));
2017-01-05 19:20:41 +01:00
$html = $tpl -> draw ( 'dailyrss' , true );
2013-02-26 10:09:41 +01:00
2015-07-10 15:41:59 +02:00
echo $html . PHP_EOL ;
2013-03-04 10:18:39 +01:00
}
2015-09-06 21:31:37 +02:00
echo '</channel></rss><!-- Cached version of ' . escape ( page_url ( $_SERVER )) . ' -->' ;
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
$cache -> cache ( ob_get_contents ());
ob_end_flush ();
exit ;
}
2015-12-07 11:25:11 +01:00
/**
* Show the 'Daily' page .
*
2016-06-09 20:04:02 +02:00
* @ param PageBuilder $pageBuilder Template engine wrapper .
* @ param LinkDB $LINKSDB LinkDB instance .
* @ param ConfigManager $conf Configuration Manager instance .
* @ param PluginManager $pluginManager Plugin Manager instane .
2015-12-07 11:25:11 +01:00
*/
2016-06-09 20:04:02 +02:00
function showDaily ( $pageBuilder , $LINKSDB , $conf , $pluginManager )
2013-02-26 10:09:41 +01:00
{
2017-08-27 19:36:48 +02:00
$day = date ( 'Ymd' , strtotime ( '-1 day' )); // Yesterday, in format YYYYMMDD.
if ( isset ( $_GET [ 'day' ])) {
$day = $_GET [ 'day' ];
}
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
$days = $LINKSDB -> days ();
2017-08-27 19:36:48 +02:00
$i = array_search ( $day , $days );
if ( $i === false && count ( $days )) {
// no links for day, but at least one day with links
$i = count ( $days ) - 1 ;
$day = $days [ $i ];
2013-02-26 10:09:41 +01:00
}
2017-08-27 19:36:48 +02:00
$previousday = '' ;
$nextday = '' ;
2013-02-26 10:09:41 +01:00
2017-08-27 19:36:48 +02:00
if ( $i !== false ) {
if ( $i >= 1 ) {
$previousday = $days [ $i - 1 ];
}
if ( $i < count ( $days ) - 1 ) {
$nextday = $days [ $i + 1 ];
}
}
2015-06-27 14:57:44 +02:00
try {
2016-03-21 21:40:49 +01:00
$linksToDisplay = $LINKSDB -> filterDay ( $day );
2015-06-27 14:57:44 +02:00
} catch ( Exception $exc ) {
error_log ( $exc );
2015-07-11 01:29:12 +02:00
$linksToDisplay = array ();
2015-06-27 14:57:44 +02:00
}
2013-02-26 10:09:41 +01:00
// We pre-format some fields for proper output.
2017-08-27 19:36:48 +02:00
foreach ( $linksToDisplay as $key => $link ) {
2013-03-01 17:09:52 +01:00
$taglist = explode ( ' ' , $link [ 'tags' ]);
uasort ( $taglist , 'strcasecmp' );
$linksToDisplay [ $key ][ 'taglist' ] = $taglist ;
2017-11-07 20:23:58 +01:00
$linksToDisplay [ $key ][ 'formatedDescription' ] = format_description (
$link [ 'description' ],
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
);
2016-06-09 20:04:02 +02:00
$linksToDisplay [ $key ][ 'thumbnail' ] = thumbnail ( $conf , $link [ 'url' ]);
2016-11-28 16:16:44 +01:00
$linksToDisplay [ $key ][ 'timestamp' ] = $link [ 'created' ] -> getTimestamp ();
2013-02-26 10:09:41 +01:00
}
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
/* We need to spread the articles on 3 columns .
2014-08-11 20:41:50 +02:00
I did not want to use a JavaScript lib like http :// masonry . desandro . com /
2013-03-04 10:18:39 +01:00
so I manually spread entries with a simple method : I roughly evaluate the
2013-02-26 10:09:41 +01:00
height of a div according to title and description length .
*/
2017-08-27 19:36:48 +02:00
$columns = array ( array (), array (), array ()); // Entries to display, for each column.
$fill = array ( 0 , 0 , 0 ); // Rough estimate of columns fill.
foreach ( $linksToDisplay as $key => $link ) {
2013-02-26 10:09:41 +01:00
// Roughly estimate length of entry (by counting characters)
// Title: 30 chars = 1 line. 1 line is 30 pixels height.
// Description: 836 characters gives roughly 342 pixel height.
2014-08-11 20:41:50 +02:00
// This is not perfect, but it's usually OK.
2017-08-27 19:36:48 +02:00
$length = strlen ( $link [ 'title' ]) + ( 342 * strlen ( $link [ 'description' ])) / 836 ;
if ( $link [ 'thumbnail' ]) {
$length += 100 ; // 1 thumbnails roughly takes 100 pixels height.
}
2013-02-26 10:09:41 +01:00
// Then put in column which is the less filled:
2017-08-27 19:36:48 +02:00
$smallest = min ( $fill ); // find smallest value in array.
$index = array_search ( $smallest , $fill ); // find index of this smallest value.
array_push ( $columns [ $index ], $link ); // Put entry in this column.
$fill [ $index ] += $length ;
2013-02-26 10:09:41 +01:00
}
2015-12-07 11:25:11 +01:00
2016-02-17 22:46:50 +01:00
$dayDate = DateTime :: createFromFormat ( LinkDB :: LINK_DATE_FORMAT , $day . '_000000' );
2015-07-15 11:42:15 +02:00
$data = array (
2017-03-28 20:51:11 +02:00
'pagetitle' => $conf -> get ( 'general.title' ) . ' - ' . format_date ( $dayDate , false ),
2015-07-15 11:42:15 +02:00
'linksToDisplay' => $linksToDisplay ,
'cols' => $columns ,
2016-02-17 22:46:50 +01:00
'day' => $dayDate -> getTimestamp (),
2017-03-28 20:40:14 +02:00
'dayDate' => $dayDate ,
2015-07-15 11:42:15 +02:00
'previousday' => $previousday ,
'nextday' => $nextday ,
);
2016-06-09 20:04:02 +02:00
2015-07-15 11:42:15 +02:00
$pluginManager -> executeHooks ( 'render_daily' , $data , array ( 'loggedin' => isLoggedIn ()));
foreach ( $data as $key => $value ) {
2015-12-07 11:25:11 +01:00
$pageBuilder -> assign ( $key , $value );
2015-07-15 11:42:15 +02:00
}
2015-12-07 11:25:11 +01:00
$pageBuilder -> renderPage ( 'daily' );
2013-02-26 10:09:41 +01:00
exit ;
}
2016-06-09 20:04:02 +02:00
/**
* Renders the linklist
*
* @ param pageBuilder $PAGE pageBuilder instance .
* @ param LinkDB $LINKSDB LinkDB instance .
* @ param ConfigManager $conf Configuration Manager instance .
* @ param PluginManager $pluginManager Plugin Manager instance .
*/
function showLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager ) {
buildLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager ); // Compute list of links to display
2015-07-15 11:42:15 +02:00
$PAGE -> renderPage ( 'linklist' );
}
2016-06-09 20:04:02 +02:00
/**
* Render HTML page ( according to URL parameters and user rights )
*
2017-10-22 18:44:46 +02:00
* @ param ConfigManager $conf Configuration Manager instance .
* @ param PluginManager $pluginManager Plugin Manager instance ,
* @ param LinkDB $LINKSDB
* @ param History $history instance
* @ param SessionManager $sessionManager SessionManager instance
2016-06-09 20:04:02 +02:00
*/
2017-10-22 18:44:46 +02:00
function renderPage ( $conf , $pluginManager , $LINKSDB , $history , $sessionManager )
2013-02-26 10:09:41 +01:00
{
2016-01-12 19:50:48 +01:00
$updater = new Updater (
2016-06-11 09:08:02 +02:00
read_updates_file ( $conf -> get ( 'resource.updates' )),
2016-01-12 19:50:48 +01:00
$LINKSDB ,
2016-06-09 20:04:02 +02:00
$conf ,
2016-01-12 19:50:48 +01:00
isLoggedIn ()
);
try {
$newUpdates = $updater -> update ();
if ( ! empty ( $newUpdates )) {
write_updates_file (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.updates' ),
2016-01-12 19:50:48 +01:00
$updater -> getDoneUpdates ()
);
}
}
catch ( Exception $e ) {
die ( $e -> getMessage ());
}
2017-10-22 18:44:46 +02:00
$PAGE = new PageBuilder ( $conf , $LINKSDB , $sessionManager -> generateToken ());
2016-05-11 00:05:22 +02:00
$PAGE -> assign ( 'linkcount' , count ( $LINKSDB ));
$PAGE -> assign ( 'privateLinkcount' , count_private ( $LINKSDB ));
2016-10-14 13:22:58 +02:00
$PAGE -> assign ( 'plugin_errors' , $pluginManager -> getErrors ());
2015-07-15 11:42:15 +02:00
// Determine which page will be rendered.
$query = ( isset ( $_SERVER [ 'QUERY_STRING' ])) ? $_SERVER [ 'QUERY_STRING' ] : '' ;
$targetPage = Router :: findPage ( $query , $_GET , isLoggedIn ());
2017-08-31 00:39:15 +02:00
if (
// if the user isn't logged in
! isLoggedIn () &&
// and Shaarli doesn't have public content...
$conf -> get ( 'privacy.hide_public_links' ) &&
// and is configured to enforce the login
$conf -> get ( 'privacy.force_login' ) &&
// and the current page isn't already the login page
$targetPage !== Router :: $PAGE_LOGIN &&
// and the user is not requesting a feed (which would lead to a different content-type as expected)
$targetPage !== Router :: $PAGE_FEED_ATOM &&
$targetPage !== Router :: $PAGE_FEED_RSS
) {
// force current page to be the login page
$targetPage = Router :: $PAGE_LOGIN ;
}
2015-07-15 11:42:15 +02:00
// Call plugin hooks for header, footer and includes, specifying which page will be rendered.
// Then assign generated data to RainTPL.
$common_hooks = array (
2016-02-10 15:40:11 +01:00
'includes' ,
2015-07-15 11:42:15 +02:00
'header' ,
'footer' ,
);
2016-06-09 20:04:02 +02:00
2015-07-15 11:42:15 +02:00
foreach ( $common_hooks as $name ) {
$plugin_data = array ();
$pluginManager -> executeHooks ( 'render_' . $name , $plugin_data ,
array (
'target' => $targetPage ,
'loggedin' => isLoggedIn ()
)
);
$PAGE -> assign ( 'plugins_' . $name , $plugin_data );
}
2013-02-26 10:09:41 +01:00
// -------- Display login form.
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_LOGIN )
2013-02-26 10:09:41 +01:00
{
2016-06-11 09:08:02 +02:00
if ( $conf -> get ( 'security.open_shaarli' )) { header ( 'Location: ?' ); exit ; } // No need to login for open Shaarli
2016-05-06 20:03:10 +02:00
if ( isset ( $_GET [ 'username' ])) {
$PAGE -> assign ( 'username' , escape ( $_GET [ 'username' ]));
}
2015-06-11 13:53:27 +02:00
$PAGE -> assign ( 'returnurl' ,( isset ( $_SERVER [ 'HTTP_REFERER' ]) ? escape ( $_SERVER [ 'HTTP_REFERER' ]) : '' ));
2017-08-26 09:27:10 +02:00
// add default state of the 'remember me' checkbox
$PAGE -> assign ( 'remember_user_default' , $conf -> get ( 'privacy.remember_user_default' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'loginform' );
exit ;
}
// -------- User wants to logout.
2016-05-10 23:31:41 +02:00
if ( isset ( $_SERVER [ 'QUERY_STRING' ]) && startsWith ( $_SERVER [ 'QUERY_STRING' ], 'do=logout' ))
2013-02-26 10:09:41 +01:00
{
2016-06-11 09:08:02 +02:00
invalidateCaches ( $conf -> get ( 'resource.page_cache' ));
2013-02-26 10:09:41 +01:00
logout ();
header ( 'Location: ?' );
exit ;
}
// -------- Picture wall
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_PICWALL )
2013-02-26 10:09:41 +01:00
{
2014-08-11 20:41:50 +02:00
// Optionally filter the results:
2016-03-21 21:40:49 +01:00
$links = $LINKSDB -> filterSearch ( $_GET );
2015-12-27 10:08:20 +01:00
$linksToDisplay = array ();
2013-02-26 10:09:41 +01:00
// Get only links which have a thumbnail.
foreach ( $links as $link )
{
2016-11-28 18:24:15 +01:00
$permalink = '?' . $link [ 'shorturl' ];
2016-06-09 20:04:02 +02:00
$thumb = lazyThumbnail ( $conf , $link [ 'url' ], $permalink );
2013-02-26 10:09:41 +01:00
if ( $thumb != '' ) // Only output links which have a thumbnail.
{
$link [ 'thumbnail' ] = $thumb ; // Thumbnail HTML code.
$linksToDisplay [] = $link ; // Add to array.
}
}
2015-07-08 17:11:06 +02:00
2015-07-15 11:42:15 +02:00
$data = array (
'linksToDisplay' => $linksToDisplay ,
);
$pluginManager -> executeHooks ( 'render_picwall' , $data , array ( 'loggedin' => isLoggedIn ()));
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'picwall' );
exit ;
}
// -------- Tag cloud
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_TAGCLOUD )
2013-02-26 10:09:41 +01:00
{
2017-05-18 20:28:11 +02:00
$visibility = ! empty ( $_SESSION [ 'privateonly' ]) ? 'private' : 'all' ;
2017-03-25 15:59:01 +01:00
$filteringTags = isset ( $_GET [ 'searchtags' ]) ? explode ( ' ' , $_GET [ 'searchtags' ]) : [];
2017-05-18 20:28:11 +02:00
$tags = $LINKSDB -> linksCountPerTag ( $filteringTags , $visibility );
2015-06-09 14:58:54 +02:00
2013-02-26 10:09:41 +01:00
// We sort tags alphabetically, then choose a font size according to count.
// First, find max value.
2016-02-05 16:10:26 +01:00
$maxcount = 0 ;
foreach ( $tags as $value ) {
$maxcount = max ( $maxcount , $value );
}
2017-08-25 19:25:00 +02:00
alphabetical_sort ( $tags , false , true );
2016-02-05 16:10:26 +01:00
2016-03-29 19:30:22 +02:00
$tagList = array ();
foreach ( $tags as $key => $value ) {
2017-06-02 17:58:26 +02:00
if ( in_array ( $key , $filteringTags )) {
continue ;
}
2016-03-29 19:30:22 +02:00
// Tag font size scaling:
// default 15 and 30 logarithm bases affect scaling,
// 22 and 6 are arbitrary font sizes for max and min sizes.
$size = log ( $value , 15 ) / log ( $maxcount , 30 ) * 2.2 + 0.8 ;
$tagList [ $key ] = array (
'count' => $value ,
'size' => number_format ( $size , 2 , '.' , '' ),
);
2013-02-26 10:09:41 +01:00
}
2015-07-15 11:42:15 +02:00
$data = array (
2017-10-07 11:27:44 +02:00
'search_tags' => implode ( ' ' , escape ( $filteringTags )),
2015-07-15 11:42:15 +02:00
'tags' => $tagList ,
);
$pluginManager -> executeHooks ( 'render_tagcloud' , $data , array ( 'loggedin' => isLoggedIn ()));
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2017-03-25 15:57:30 +01:00
$PAGE -> renderPage ( 'tag.cloud' );
2013-03-04 10:18:39 +01:00
exit ;
2013-02-26 10:09:41 +01:00
}
2017-06-02 17:58:26 +02:00
// -------- Tag list
2017-03-25 15:59:01 +01:00
if ( $targetPage == Router :: $PAGE_TAGLIST )
{
$visibility = ! empty ( $_SESSION [ 'privateonly' ]) ? 'private' : 'all' ;
$filteringTags = isset ( $_GET [ 'searchtags' ]) ? explode ( ' ' , $_GET [ 'searchtags' ]) : [];
$tags = $LINKSDB -> linksCountPerTag ( $filteringTags , $visibility );
2017-06-02 17:58:26 +02:00
foreach ( $filteringTags as $tag ) {
if ( array_key_exists ( $tag , $tags )) {
unset ( $tags [ $tag ]);
}
}
2017-03-25 15:59:01 +01:00
if ( ! empty ( $_GET [ 'sort' ]) && $_GET [ 'sort' ] === 'alpha' ) {
alphabetical_sort ( $tags , false , true );
}
$data = [
2017-10-07 11:27:44 +02:00
'search_tags' => implode ( ' ' , escape ( $filteringTags )),
2017-03-25 15:59:01 +01:00
'tags' => $tags ,
];
$pluginManager -> executeHooks ( 'render_taglist' , $data , [ 'loggedin' => isLoggedIn ()]);
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
$PAGE -> renderPage ( 'tag.list' );
exit ;
}
2015-12-07 11:25:11 +01:00
// Daily page.
if ( $targetPage == Router :: $PAGE_DAILY ) {
2016-06-09 20:04:02 +02:00
showDaily ( $PAGE , $LINKSDB , $conf , $pluginManager );
2015-12-07 11:25:11 +01:00
}
2016-03-12 16:08:01 +01:00
// ATOM and RSS feed.
if ( $targetPage == Router :: $PAGE_FEED_ATOM || $targetPage == Router :: $PAGE_FEED_RSS ) {
$feedType = $targetPage == Router :: $PAGE_FEED_RSS ? FeedBuilder :: $FEED_RSS : FeedBuilder :: $FEED_ATOM ;
header ( 'Content-Type: application/' . $feedType . '+xml; charset=utf-8' );
// Cache system
$query = $_SERVER [ 'QUERY_STRING' ];
$cache = new CachedPage (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.page_cache' ),
2016-03-12 16:08:01 +01:00
page_url ( $_SERVER ),
startsWith ( $query , 'do=' . $targetPage ) && ! isLoggedIn ()
);
$cached = $cache -> cachedVersion ();
2016-03-26 16:59:22 +01:00
if ( ! empty ( $cached )) {
2016-03-12 16:08:01 +01:00
echo $cached ;
exit ;
}
2016-03-10 19:01:30 +01:00
2016-03-12 16:08:01 +01:00
// Generate data.
$feedGenerator = new FeedBuilder ( $LINKSDB , $feedType , $_SERVER , $_GET , isLoggedIn ());
$feedGenerator -> setLocale ( strtolower ( setlocale ( LC_COLLATE , 0 )));
2016-06-11 09:08:02 +02:00
$feedGenerator -> setHideDates ( $conf -> get ( 'privacy.hide_timestamps' ) && ! isLoggedIn ());
$feedGenerator -> setUsePermalinks ( isset ( $_GET [ 'permalinks' ]) || ! $conf -> get ( 'feed.rss_permalinks' ));
2016-03-12 16:08:01 +01:00
$data = $feedGenerator -> buildData ();
// Process plugin hook.
$pluginManager -> executeHooks ( 'render_feed' , $data , array (
'loggedin' => isLoggedIn (),
'target' => $targetPage ,
));
// Render the template.
$PAGE -> assignAll ( $data );
$PAGE -> renderPage ( 'feed.' . $feedType );
$cache -> cache ( ob_get_contents ());
ob_end_flush ();
exit ;
2016-03-12 14:38:06 +01:00
}
2016-12-15 10:13:00 +01:00
// Display opensearch plugin (XML)
2015-11-13 19:32:35 +01:00
if ( $targetPage == Router :: $PAGE_OPENSEARCH ) {
header ( 'Content-Type: application/xml; charset=utf-8' );
$PAGE -> assign ( 'serverurl' , index_url ( $_SERVER ));
$PAGE -> renderPage ( 'opensearch' );
exit ;
}
2013-02-26 10:09:41 +01:00
// -------- User clicks on a tag in a link: The tag is added to the list of searched tags (searchtags=...)
if ( isset ( $_GET [ 'addtag' ]))
{
// Get previous URL (http_referer) and add the tag to the searchtags parameters in query.
if ( empty ( $_SERVER [ 'HTTP_REFERER' ])) { header ( 'Location: ?searchtags=' . urlencode ( $_GET [ 'addtag' ])); exit ; } // In case browser does not send HTTP_REFERER
parse_str ( parse_url ( $_SERVER [ 'HTTP_REFERER' ], PHP_URL_QUERY ), $params );
2014-11-20 20:04:24 +01:00
2015-07-06 10:22:00 +02:00
// Prevent redirection loop
if ( isset ( $params [ 'addtag' ])) {
unset ( $params [ 'addtag' ]);
}
2014-11-20 20:04:24 +01:00
// Check if this tag is already in the search query and ignore it if it is.
// Each tag is always separated by a space
2015-07-12 11:36:42 +02:00
if ( isset ( $params [ 'searchtags' ])) {
$current_tags = explode ( ' ' , $params [ 'searchtags' ]);
} else {
$current_tags = array ();
}
2014-11-20 20:04:24 +01:00
$addtag = true ;
foreach ( $current_tags as $value ) {
if ( $value === $_GET [ 'addtag' ]) {
$addtag = false ;
break ;
}
}
// Append the tag if necessary
if ( empty ( $params [ 'searchtags' ])) {
$params [ 'searchtags' ] = trim ( $_GET [ 'addtag' ]);
}
else if ( $addtag ) {
$params [ 'searchtags' ] = trim ( $params [ 'searchtags' ]) . ' ' . trim ( $_GET [ 'addtag' ]);
}
2013-02-26 10:09:41 +01:00
unset ( $params [ 'page' ]); // We also remove page (keeping the same page has no sense, since the results are different)
header ( 'Location: ?' . http_build_query ( $params ));
exit ;
}
// -------- User clicks on a tag in result count: Remove the tag from the list of searched tags (searchtags=...)
2015-07-06 10:22:00 +02:00
if ( isset ( $_GET [ 'removetag' ])) {
2013-02-26 10:09:41 +01:00
// Get previous URL (http_referer) and remove the tag from the searchtags parameters in query.
2015-07-06 10:22:00 +02:00
if ( empty ( $_SERVER [ 'HTTP_REFERER' ])) {
header ( 'Location: ?' );
exit ;
}
// In case browser does not send HTTP_REFERER
parse_str ( parse_url ( $_SERVER [ 'HTTP_REFERER' ], PHP_URL_QUERY ), $params );
// Prevent redirection loop
if ( isset ( $params [ 'removetag' ])) {
unset ( $params [ 'removetag' ]);
}
if ( isset ( $params [ 'searchtags' ])) {
2015-12-27 10:08:20 +01:00
$tags = explode ( ' ' , $params [ 'searchtags' ]);
2016-01-03 15:29:15 +01:00
// Remove value from array $tags.
$tags = array_diff ( $tags , array ( $_GET [ 'removetag' ]));
$params [ 'searchtags' ] = implode ( ' ' , $tags );
if ( empty ( $params [ 'searchtags' ])) {
2015-07-06 10:22:00 +02:00
unset ( $params [ 'searchtags' ]);
}
2016-01-03 15:29:15 +01:00
2013-02-26 10:09:41 +01:00
unset ( $params [ 'page' ]); // We also remove page (keeping the same page has no sense, since the results are different)
}
header ( 'Location: ?' . http_build_query ( $params ));
exit ;
}
// -------- User wants to change the number of links per page (linksperpage=...)
2015-07-06 10:22:00 +02:00
if ( isset ( $_GET [ 'linksperpage' ])) {
if ( is_numeric ( $_GET [ 'linksperpage' ])) {
$_SESSION [ 'LINKS_PER_PAGE' ] = abs ( intval ( $_GET [ 'linksperpage' ]));
}
2017-01-15 17:58:19 +01:00
if ( ! empty ( $_SERVER [ 'HTTP_REFERER' ])) {
$location = generateLocation ( $_SERVER [ 'HTTP_REFERER' ], $_SERVER [ 'HTTP_HOST' ], array ( 'linksperpage' ));
} else {
$location = '?' ;
}
header ( 'Location: ' . $location );
2013-02-26 10:09:41 +01:00
exit ;
}
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
// -------- User wants to see only private links (toggle)
2015-07-06 10:22:00 +02:00
if ( isset ( $_GET [ 'privateonly' ])) {
if ( empty ( $_SESSION [ 'privateonly' ])) {
$_SESSION [ 'privateonly' ] = 1 ; // See only private links
} else {
2013-02-26 10:09:41 +01:00
unset ( $_SESSION [ 'privateonly' ]); // See all links
}
2015-07-06 10:22:00 +02:00
2017-01-15 17:58:19 +01:00
if ( ! empty ( $_SERVER [ 'HTTP_REFERER' ])) {
$location = generateLocation ( $_SERVER [ 'HTTP_REFERER' ], $_SERVER [ 'HTTP_HOST' ], array ( 'privateonly' ));
} else {
$location = '?' ;
}
header ( 'Location: ' . $location );
2013-02-26 10:09:41 +01:00
exit ;
}
2017-06-01 17:55:26 +02:00
// -------- User wants to see only untagged links (toggle)
if ( isset ( $_GET [ 'untaggedonly' ])) {
2017-08-19 17:41:56 +02:00
$_SESSION [ 'untaggedonly' ] = empty ( $_SESSION [ 'untaggedonly' ]);
2017-06-01 17:55:26 +02:00
if ( ! empty ( $_SERVER [ 'HTTP_REFERER' ])) {
$location = generateLocation ( $_SERVER [ 'HTTP_REFERER' ], $_SERVER [ 'HTTP_HOST' ], array ( 'untaggedonly' ));
} else {
$location = '?' ;
}
header ( 'Location: ' . $location );
exit ;
}
2013-02-26 10:09:41 +01:00
// -------- Handle other actions allowed for non-logged in users:
if ( ! isLoggedIn ())
{
2014-08-11 20:41:50 +02:00
// User tries to post new link but is not logged in:
2013-02-26 10:09:41 +01:00
// Show login screen, then redirect to ?post=...
if ( isset ( $_GET [ 'post' ]))
{
2017-03-25 19:41:01 +01:00
header ( // Redirect to login page, then back to post link.
'Location: ?do=login&post=' . urlencode ( $_GET [ 'post' ]) .
( ! empty ( $_GET [ 'title' ]) ? '&title=' . urlencode ( $_GET [ 'title' ]) : '' ) .
( ! empty ( $_GET [ 'description' ]) ? '&description=' . urlencode ( $_GET [ 'description' ]) : '' ) .
( ! empty ( $_GET [ 'tags' ]) ? '&tags=' . urlencode ( $_GET [ 'tags' ]) : '' ) .
( ! empty ( $_GET [ 'source' ]) ? '&source=' . urlencode ( $_GET [ 'source' ]) : '' )
);
2013-02-26 10:09:41 +01:00
exit ;
}
2014-11-21 18:31:31 +01:00
2016-06-09 20:04:02 +02:00
showLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager );
2015-07-29 15:32:41 +02:00
if ( isset ( $_GET [ 'edit_link' ])) {
header ( 'Location: ?do=login&edit_link=' . escape ( $_GET [ 'edit_link' ]));
exit ;
}
2014-08-11 20:41:50 +02:00
exit ; // Never remove this one! All operations below are reserved for logged in user.
2013-02-26 10:09:41 +01:00
}
// -------- All other functions are reserved for the registered user:
// -------- Display the Tools menu if requested (import/export/bookmarklet...)
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_TOOLS )
2013-02-26 10:09:41 +01:00
{
2017-08-25 19:47:57 +02:00
$data = [
2015-07-15 11:42:15 +02:00
'pageabsaddr' => index_url ( $_SERVER ),
2017-08-25 19:47:57 +02:00
'sslenabled' => is_https ( $_SERVER ),
];
2015-07-15 11:42:15 +02:00
$pluginManager -> executeHooks ( 'render_tools' , $data );
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'tools' );
exit ;
}
// -------- User wants to change his/her password.
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_CHANGEPASSWORD )
2013-02-26 10:09:41 +01:00
{
2016-06-11 09:08:02 +02:00
if ( $conf -> get ( 'security.open_shaarli' )) {
2017-05-09 18:12:15 +02:00
die ( t ( 'You are not supposed to change a password on an Open Shaarli.' ));
2016-05-18 21:48:24 +02:00
}
2013-02-26 10:09:41 +01:00
if ( ! empty ( $_POST [ 'setpassword' ]) && ! empty ( $_POST [ 'oldpassword' ]))
{
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) die ( t ( 'Wrong token.' )); // Go away!
2013-02-26 10:09:41 +01:00
// Make sure old password is correct.
2016-05-29 16:10:32 +02:00
$oldhash = sha1 ( $_POST [ 'oldpassword' ] . $conf -> get ( 'credentials.login' ) . $conf -> get ( 'credentials.salt' ));
2017-05-09 18:12:15 +02:00
if ( $oldhash != $conf -> get ( 'credentials.hash' )) {
echo '<script>alert("' . t ( 'The old password is not correct.' ) . '");document.location=\'?do=changepasswd\';</script>' ;
2017-10-22 18:44:46 +02:00
exit ;
2017-05-09 18:12:15 +02:00
}
2013-02-26 10:09:41 +01:00
// Save new password
2016-05-18 21:48:24 +02:00
// Salt renders rainbow-tables attacks useless.
2016-05-29 16:10:32 +02:00
$conf -> set ( 'credentials.salt' , sha1 ( uniqid ( '' , true ) . '_' . mt_rand ()));
$conf -> set ( 'credentials.hash' , sha1 ( $_POST [ 'setpassword' ] . $conf -> get ( 'credentials.login' ) . $conf -> get ( 'credentials.salt' )));
2015-06-29 12:23:00 +02:00
try {
2016-05-18 21:48:24 +02:00
$conf -> write ( isLoggedIn ());
2015-06-29 12:23:00 +02:00
}
catch ( Exception $e ) {
error_log (
'ERROR while writing config file after changing password.' . PHP_EOL .
$e -> getMessage ()
);
// TODO: do not handle exceptions/errors in JS.
echo '<script>alert("' . $e -> getMessage () . '");document.location=\'?do=tools\';</script>' ;
exit ;
}
2017-05-09 18:12:15 +02:00
echo '<script>alert("' . t ( 'Your password has been changed' ) . '");document.location=\'?do=tools\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
else // show the change password form.
{
$PAGE -> renderPage ( 'changepassword' );
exit ;
}
}
// -------- User wants to change configuration
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_CONFIGURE )
2013-02-26 10:09:41 +01:00
{
if ( ! empty ( $_POST [ 'title' ]) )
{
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) {
2017-05-09 18:12:15 +02:00
die ( t ( 'Wrong token.' )); // Go away!
2016-05-03 20:09:24 +02:00
}
2013-02-26 10:09:41 +01:00
$tz = 'UTC' ;
2016-05-03 20:09:24 +02:00
if ( ! empty ( $_POST [ 'continent' ]) && ! empty ( $_POST [ 'city' ])
&& isTimeZoneValid ( $_POST [ 'continent' ], $_POST [ 'city' ])
) {
$tz = $_POST [ 'continent' ] . '/' . $_POST [ 'city' ];
}
2016-05-29 16:10:32 +02:00
$conf -> set ( 'general.timezone' , $tz );
2016-05-30 20:15:36 +02:00
$conf -> set ( 'general.title' , escape ( $_POST [ 'title' ]));
$conf -> set ( 'general.header_link' , escape ( $_POST [ 'titleLink' ]));
2016-12-07 11:58:25 +01:00
$conf -> set ( 'resource.theme' , escape ( $_POST [ 'theme' ]));
2016-06-11 09:08:02 +02:00
$conf -> set ( 'redirector.url' , escape ( $_POST [ 'redirector' ]));
2016-05-29 16:10:32 +02:00
$conf -> set ( 'security.session_protection_disabled' , ! empty ( $_POST [ 'disablesessionprotection' ]));
2016-06-11 09:08:02 +02:00
$conf -> set ( 'privacy.default_private_links' , ! empty ( $_POST [ 'privateLinkByDefault' ]));
$conf -> set ( 'feed.rss_permalinks' , ! empty ( $_POST [ 'enableRssPermalinks' ]));
$conf -> set ( 'updates.check_updates' , ! empty ( $_POST [ 'updateCheck' ]));
$conf -> set ( 'privacy.hide_public_links' , ! empty ( $_POST [ 'hidePublicLinks' ]));
2017-03-22 19:58:22 +01:00
$conf -> set ( 'api.enabled' , ! empty ( $_POST [ 'enableApi' ]));
2016-07-31 10:46:17 +02:00
$conf -> set ( 'api.secret' , escape ( $_POST [ 'apiSecret' ]));
2017-05-25 13:26:05 +02:00
$conf -> set ( 'translation.language' , escape ( $_POST [ 'language' ]));
2015-06-29 12:23:00 +02:00
try {
2016-05-18 21:48:24 +02:00
$conf -> write ( isLoggedIn ());
2017-01-16 12:31:08 +01:00
$history -> updateSettings ();
2016-12-07 11:58:25 +01:00
invalidateCaches ( $conf -> get ( 'resource.page_cache' ));
2015-06-29 12:23:00 +02:00
}
catch ( Exception $e ) {
error_log (
'ERROR while writing config file after configuration update.' . PHP_EOL .
$e -> getMessage ()
);
// TODO: do not handle exceptions/errors in JS.
2016-05-18 21:48:24 +02:00
echo '<script>alert("' . $e -> getMessage () . '");document.location=\'?do=configure\';</script>' ;
2015-06-29 12:23:00 +02:00
exit ;
}
2017-05-09 18:12:15 +02:00
echo '<script>alert("' . t ( 'Configuration was saved.' ) . '");document.location=\'?do=configure\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
else // Show the configuration form.
{
2016-05-29 16:10:32 +02:00
$PAGE -> assign ( 'title' , $conf -> get ( 'general.title' ));
2016-12-07 11:58:25 +01:00
$PAGE -> assign ( 'theme' , $conf -> get ( 'resource.theme' ));
2017-01-03 11:42:21 +01:00
$PAGE -> assign ( 'theme_available' , ThemeUtils :: getThemes ( $conf -> get ( 'resource.raintpl_tpl' )));
2016-06-11 09:08:02 +02:00
$PAGE -> assign ( 'redirector' , $conf -> get ( 'redirector.url' ));
2017-03-22 19:16:35 +01:00
list ( $continents , $cities ) = generateTimeZoneData (
timezone_identifiers_list (),
$conf -> get ( 'general.timezone' )
);
$PAGE -> assign ( 'continents' , $continents );
$PAGE -> assign ( 'cities' , $cities );
2016-06-11 09:08:02 +02:00
$PAGE -> assign ( 'private_links_default' , $conf -> get ( 'privacy.default_private_links' , false ));
2016-07-10 10:42:21 +02:00
$PAGE -> assign ( 'session_protection_disabled' , $conf -> get ( 'security.session_protection_disabled' , false ));
2016-06-11 09:08:02 +02:00
$PAGE -> assign ( 'enable_rss_permalinks' , $conf -> get ( 'feed.rss_permalinks' , false ));
$PAGE -> assign ( 'enable_update_check' , $conf -> get ( 'updates.check_updates' , true ));
$PAGE -> assign ( 'hide_public_links' , $conf -> get ( 'privacy.hide_public_links' , false ));
2016-07-31 10:46:17 +02:00
$PAGE -> assign ( 'api_enabled' , $conf -> get ( 'api.enabled' , true ));
$PAGE -> assign ( 'api_secret' , $conf -> get ( 'api.secret' ));
2017-05-25 13:26:05 +02:00
$PAGE -> assign ( 'languages' , Languages :: getAvailableLanguages ());
$PAGE -> assign ( 'language' , $conf -> get ( 'translation.language' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'configure' );
exit ;
}
}
// -------- User wants to rename a tag or delete it
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_CHANGETAG )
2013-02-26 10:09:41 +01:00
{
2016-01-03 14:42:43 +01:00
if ( empty ( $_POST [ 'fromtag' ]) || ( empty ( $_POST [ 'totag' ]) && isset ( $_POST [ 'renametag' ]))) {
2017-03-25 15:59:01 +01:00
$PAGE -> assign ( 'fromtag' , ! empty ( $_GET [ 'fromtag' ]) ? escape ( $_GET [ 'fromtag' ]) : '' );
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'changetag' );
exit ;
}
2016-01-03 14:42:43 +01:00
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) {
2017-05-09 18:12:15 +02:00
die ( t ( 'Wrong token.' ));
2016-01-03 14:42:43 +01:00
}
2013-02-26 10:09:41 +01:00
2017-08-04 19:10:00 +02:00
$alteredLinks = $LINKSDB -> renameTag ( escape ( $_POST [ 'fromtag' ]), escape ( $_POST [ 'totag' ]));
2017-05-31 18:36:35 +02:00
$LINKSDB -> save ( $conf -> get ( 'resource.page_cache' ));
2017-08-04 19:10:00 +02:00
foreach ( $alteredLinks as $link ) {
$history -> updateLink ( $link );
2013-02-26 10:09:41 +01:00
}
2017-08-04 19:10:00 +02:00
$delete = empty ( $_POST [ 'totag' ]);
2017-05-31 18:36:35 +02:00
$redirect = $delete ? 'do=changetag' : 'searchtags=' . urlencode ( escape ( $_POST [ 'totag' ]));
2017-05-25 13:26:05 +02:00
$count = count ( $alteredLinks );
2017-05-31 18:36:35 +02:00
$alert = $delete
2017-05-25 13:26:05 +02:00
? sprintf ( t ( 'The tag was removed from %d link.' , 'The tag was removed from %d links.' , $count ), $count )
: sprintf ( t ( 'The tag was renamed in %d link.' , 'The tag was renamed in %d links.' , $count ), $count );
2017-05-31 18:36:35 +02:00
echo '<script>alert("' . $alert . '");document.location=\'?' . $redirect . '\';</script>' ;
exit ;
2013-02-26 10:09:41 +01:00
}
2014-08-11 20:41:50 +02:00
// -------- User wants to add a link without using the bookmarklet: Show form.
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_ADDLINK )
2013-02-26 10:09:41 +01:00
{
$PAGE -> renderPage ( 'addlink' );
exit ;
}
// -------- User clicked the "Save" button when editing a link: Save link to database.
if ( isset ( $_POST [ 'save_edit' ]))
{
2016-02-04 19:58:47 +01:00
// Go away!
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) {
2017-05-09 18:12:15 +02:00
die ( t ( 'Wrong token.' ));
2016-02-04 19:58:47 +01:00
}
2016-11-28 16:16:44 +01:00
// lf_id should only be present if the link exists.
2017-03-22 19:08:17 +01:00
$id = isset ( $_POST [ 'lf_id' ]) ? intval ( escape ( $_POST [ 'lf_id' ])) : $LINKSDB -> getNextId ();
2016-11-28 16:16:44 +01:00
// Linkdate is kept here to:
// - use the same permalink for notes as they're displayed when creating them
// - let users hack creation date of their posts
2017-08-26 09:40:57 +02:00
// See: https://shaarli.readthedocs.io/en/master/Various-hacks/#changing-the-timestamp-for-a-shaare
2016-11-28 16:16:44 +01:00
$linkdate = escape ( $_POST [ 'lf_linkdate' ]);
if ( isset ( $LINKSDB [ $id ])) {
// Edit
2016-11-28 18:24:15 +01:00
$created = DateTime :: createFromFormat ( LinkDB :: LINK_DATE_FORMAT , $linkdate );
2016-11-28 16:16:44 +01:00
$updated = new DateTime ();
2016-12-15 11:18:56 +01:00
$shortUrl = $LINKSDB [ $id ][ 'shorturl' ];
2017-01-16 12:31:08 +01:00
$new = false ;
2016-11-28 16:16:44 +01:00
} else {
// New link
2016-11-28 18:24:15 +01:00
$created = DateTime :: createFromFormat ( LinkDB :: LINK_DATE_FORMAT , $linkdate );
2016-11-28 16:16:44 +01:00
$updated = null ;
2016-12-15 11:18:56 +01:00
$shortUrl = link_small_hash ( $created , $id );
2017-01-16 12:31:08 +01:00
$new = true ;
2016-11-28 16:16:44 +01:00
}
2016-02-04 19:58:47 +01:00
// Remove multiple spaces.
$tags = trim ( preg_replace ( '/\s\s+/' , ' ' , $_POST [ 'lf_tags' ]));
2016-02-15 21:06:17 +01:00
// Remove first '-' char in tags.
$tags = preg_replace ( '/(^| )\-/' , '$1' , $tags );
2016-02-04 19:58:47 +01:00
// Remove duplicates.
$tags = implode ( ' ' , array_unique ( explode ( ' ' , $tags )));
2016-08-03 09:44:04 +02:00
2017-08-25 20:08:07 +02:00
if ( empty ( trim ( $_POST [ 'lf_url' ]))) {
$_POST [ 'lf_url' ] = '?' . smallHash ( $linkdate . $id );
}
2017-05-25 14:52:42 +02:00
$url = whitelist_protocols ( trim ( $_POST [ 'lf_url' ]), $conf -> get ( 'security.allowed_protocols' ));
2016-02-04 19:58:47 +01:00
$link = array (
2016-11-28 16:16:44 +01:00
'id' => $id ,
2016-02-04 19:58:47 +01:00
'title' => trim ( $_POST [ 'lf_title' ]),
'url' => $url ,
2016-02-10 11:31:45 +01:00
'description' => $_POST [ 'lf_description' ],
2016-02-04 19:58:47 +01:00
'private' => ( isset ( $_POST [ 'lf_private' ]) ? 1 : 0 ),
2016-11-28 16:16:44 +01:00
'created' => $created ,
2016-08-03 09:44:04 +02:00
'updated' => $updated ,
2016-11-28 18:24:15 +01:00
'tags' => str_replace ( ',' , ' ' , $tags ),
2016-12-15 11:18:56 +01:00
'shorturl' => $shortUrl ,
2016-02-04 19:58:47 +01:00
);
2016-11-28 16:16:44 +01:00
2016-02-04 19:58:47 +01:00
// If title is empty, use the URL as title.
if ( $link [ 'title' ] == '' ) {
$link [ 'title' ] = $link [ 'url' ];
}
2015-07-15 11:42:15 +02:00
$pluginManager -> executeHooks ( 'save_link' , $link );
2016-11-28 16:16:44 +01:00
$LINKSDB [ $id ] = $link ;
2016-10-20 21:19:51 +02:00
$LINKSDB -> save ( $conf -> get ( 'resource.page_cache' ));
2017-01-16 12:31:08 +01:00
if ( $new ) {
$history -> addLink ( $link );
} else {
$history -> updateLink ( $link );
}
2013-02-26 10:09:41 +01:00
// If we are called from the bookmarklet, we must close the popup:
2015-11-04 19:53:59 +01:00
if ( isset ( $_GET [ 'source' ]) && ( $_GET [ 'source' ] == 'bookmarklet' || $_GET [ 'source' ] == 'firefoxsocialapi' )) {
echo '<script>self.close();</script>' ;
exit ;
}
2016-02-04 20:24:17 +01:00
$returnurl = ! empty ( $_POST [ 'returnurl' ]) ? $_POST [ 'returnurl' ] : '?' ;
2015-07-06 10:22:00 +02:00
$location = generateLocation ( $returnurl , $_SERVER [ 'HTTP_HOST' ], array ( 'addlink' , 'post' , 'edit_link' ));
2016-02-04 19:58:47 +01:00
// Scroll to the link which has been edited.
2016-11-28 18:24:15 +01:00
$location .= '#' . $link [ 'shorturl' ];
2016-02-04 19:58:47 +01:00
// After saving the link, redirect to the page the user was on.
header ( 'Location: ' . $location );
2013-02-26 10:09:41 +01:00
exit ;
}
// -------- User clicked the "Cancel" button when editing a link.
if ( isset ( $_POST [ 'cancel_edit' ]))
{
2017-03-22 19:08:17 +01:00
$id = isset ( $_POST [ 'lf_id' ]) ? ( int ) escape ( $_POST [ 'lf_id' ]) : false ;
if ( ! isset ( $LINKSDB [ $id ])) {
header ( 'Location: ?' );
}
2014-08-11 20:41:50 +02:00
// If we are called from the bookmarklet, we must close the popup:
2015-05-11 18:42:54 +02:00
if ( isset ( $_GET [ 'source' ]) && ( $_GET [ 'source' ] == 'bookmarklet' || $_GET [ 'source' ] == 'firefoxsocialapi' )) { echo '<script>self.close();</script>' ; exit ; }
2017-03-22 19:08:17 +01:00
$link = $LINKSDB [ $id ];
2013-02-26 10:09:41 +01:00
$returnurl = ( isset ( $_POST [ 'returnurl' ]) ? $_POST [ 'returnurl' ] : '?' );
2016-11-28 16:16:44 +01:00
// Scroll to the link which has been edited.
2016-11-28 18:24:15 +01:00
$returnurl .= '#' . $link [ 'shorturl' ];
2015-07-06 10:22:00 +02:00
$returnurl = generateLocation ( $returnurl , $_SERVER [ 'HTTP_HOST' ], array ( 'addlink' , 'post' , 'edit_link' ));
2013-02-26 10:09:41 +01:00
header ( 'Location: ' . $returnurl ); // After canceling, redirect to the page the user was on.
exit ;
}
2014-08-11 20:41:50 +02:00
// -------- User clicked the "Delete" button when editing a link: Delete link from database.
2016-11-05 14:13:18 +01:00
if ( $targetPage == Router :: $PAGE_DELETELINK )
2013-02-26 10:09:41 +01:00
{
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_GET [ 'token' ])) {
2017-05-09 18:12:15 +02:00
die ( t ( 'Wrong token.' ));
2016-11-05 14:13:18 +01:00
}
2016-11-28 16:16:44 +01:00
2017-08-27 19:19:59 +02:00
$ids = trim ( $_GET [ 'lf_linkdate' ]);
if ( strpos ( $ids , ' ' ) !== false ) {
// multiple, space-separated ids provided
$ids = array_values ( array_filter ( preg_split ( '/\s+/' , escape ( $ids ))));
2017-03-12 19:03:50 +01:00
} else {
2017-08-27 19:19:59 +02:00
// only a single id provided
$ids = [ $ids ];
}
// assert at least one id is given
if ( ! count ( $ids )){
die ( 'no id provided' );
2017-03-12 19:03:50 +01:00
}
foreach ( $ids as $id ) {
$id = ( int ) escape ( $id );
$link = $LINKSDB [ $id ];
$pluginManager -> executeHooks ( 'delete_link' , $link );
unset ( $LINKSDB [ $id ]);
}
2016-11-05 14:13:18 +01:00
$LINKSDB -> save ( $conf -> get ( 'resource.page_cache' )); // save to disk
2017-01-16 12:31:08 +01:00
$history -> deleteLink ( $link );
2013-02-26 10:09:41 +01:00
// If we are called from the bookmarklet, we must close the popup:
2015-05-11 18:42:54 +02:00
if ( isset ( $_GET [ 'source' ]) && ( $_GET [ 'source' ] == 'bookmarklet' || $_GET [ 'source' ] == 'firefoxsocialapi' )) { echo '<script>self.close();</script>' ; exit ; }
2017-01-16 13:07:53 +01:00
$location = '?' ;
if ( isset ( $_SERVER [ 'HTTP_REFERER' ])) {
// Don't redirect to where we were previously if it was a permalink or an edit_link, because it would 404.
$location = generateLocation (
$_SERVER [ 'HTTP_REFERER' ],
$_SERVER [ 'HTTP_HOST' ],
[ 'delete_link' , 'edit_link' , $link [ 'shorturl' ]]
);
2015-02-15 02:24:26 +01:00
}
header ( 'Location: ' . $location ); // After deleting the link, redirect to appropriate location
2013-02-26 10:09:41 +01:00
exit ;
}
// -------- User clicked the "EDIT" button on a link: Display link edit form.
if ( isset ( $_GET [ 'edit_link' ]))
{
2016-11-28 16:16:44 +01:00
$id = ( int ) escape ( $_GET [ 'edit_link' ]);
$link = $LINKSDB [ $id ]; // Read database
2013-02-26 10:09:41 +01:00
if ( ! $link ) { header ( 'Location: ?' ); exit ; } // Link not found in database.
2016-11-28 18:24:15 +01:00
$link [ 'linkdate' ] = $link [ 'created' ] -> format ( LinkDB :: LINK_DATE_FORMAT );
2015-07-15 11:42:15 +02:00
$data = array (
'link' => $link ,
'link_is_new' => false ,
'http_referer' => ( isset ( $_SERVER [ 'HTTP_REFERER' ]) ? escape ( $_SERVER [ 'HTTP_REFERER' ]) : '' ),
2017-05-18 20:28:11 +02:00
'tags' => $LINKSDB -> linksCountPerTag (),
2015-07-15 11:42:15 +02:00
);
$pluginManager -> executeHooks ( 'render_editlink' , $data );
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'editlink' );
exit ;
}
// -------- User want to post a new link: Display link edit form.
2015-08-14 01:14:07 +02:00
if ( isset ( $_GET [ 'post' ])) {
2016-04-06 22:00:52 +02:00
$url = cleanup_url ( $_GET [ 'post' ]);
2013-02-26 10:09:41 +01:00
$link_is_new = false ;
2015-08-20 19:47:01 +02:00
// Check if URL is not already in database (in this case, we will edit the existing link)
2015-09-02 13:55:39 +02:00
$link = $LINKSDB -> getLinkFromUrl ( $url );
2016-11-28 16:16:44 +01:00
if ( ! $link )
2013-02-26 10:09:41 +01:00
{
2015-08-20 19:47:01 +02:00
$link_is_new = true ;
2016-11-28 18:24:15 +01:00
$linkdate = strval ( date ( LinkDB :: LINK_DATE_FORMAT ));
2015-08-20 19:47:01 +02:00
// Get title if it was provided in URL (by the bookmarklet).
2015-11-22 15:47:41 +01:00
$title = empty ( $_GET [ 'title' ]) ? '' : escape ( $_GET [ 'title' ]);
2015-08-20 19:47:01 +02:00
// Get description if it was provided in URL (by the bookmarklet). [Bronco added that]
2015-11-22 15:47:41 +01:00
$description = empty ( $_GET [ 'description' ]) ? '' : escape ( $_GET [ 'description' ]);
$tags = empty ( $_GET [ 'tags' ]) ? '' : escape ( $_GET [ 'tags' ]);
$private = ! empty ( $_GET [ 'private' ]) && $_GET [ 'private' ] === " 1 " ? 1 : 0 ;
2015-08-31 12:27:56 +02:00
// If this is an HTTP(S) link, we try go get the page to extract the title (otherwise we will to straight to the edit form.)
2015-09-02 13:55:39 +02:00
if ( empty ( $title ) && strpos ( get_url_scheme ( $url ), 'http' ) !== false ) {
2015-09-01 21:45:06 +02:00
// Short timeout to keep the application responsive
2017-09-30 11:04:13 +02:00
// The callback will fill $charset and $title with data from the downloaded page.
get_http_response ( $url , 25 , 4194304 , get_curl_download_callback ( $charset , $title ));
if ( ! empty ( $title ) && strtolower ( $charset ) != 'utf-8' ) {
$title = mb_convert_encoding ( $title , 'utf-8' , $charset );
2015-08-20 19:47:01 +02:00
}
2013-02-26 10:09:41 +01:00
}
2016-01-04 10:45:54 +01:00
2015-08-20 19:47:01 +02:00
if ( $url == '' ) {
2016-11-28 18:24:15 +01:00
$url = '?' . smallHash ( $linkdate . $LINKSDB -> getNextId ());
2017-05-25 13:26:05 +02:00
$title = $conf -> get ( 'general.default_note_title' , t ( 'Note: ' ));
2014-10-20 19:14:52 +02:00
}
2016-04-06 22:00:52 +02:00
$url = escape ( $url );
$title = escape ( $title );
2016-01-04 10:45:54 +01:00
2015-08-20 19:47:01 +02:00
$link = array (
'linkdate' => $linkdate ,
'title' => $title ,
2015-09-02 13:55:39 +02:00
'url' => $url ,
2015-08-20 19:47:01 +02:00
'description' => $description ,
'tags' => $tags ,
2017-05-31 17:50:11 +02:00
'private' => $private ,
2015-08-20 19:47:01 +02:00
);
2016-11-28 16:16:44 +01:00
} else {
2016-11-28 18:24:15 +01:00
$link [ 'linkdate' ] = $link [ 'created' ] -> format ( LinkDB :: LINK_DATE_FORMAT );
2013-02-26 10:09:41 +01:00
}
2015-07-15 11:42:15 +02:00
$data = array (
'link' => $link ,
'link_is_new' => $link_is_new ,
'http_referer' => ( isset ( $_SERVER [ 'HTTP_REFERER' ]) ? escape ( $_SERVER [ 'HTTP_REFERER' ]) : '' ),
'source' => ( isset ( $_GET [ 'source' ]) ? $_GET [ 'source' ] : '' ),
2017-05-18 20:28:11 +02:00
'tags' => $LINKSDB -> linksCountPerTag (),
2016-08-07 12:15:08 +02:00
'default_private_links' => $conf -> get ( 'privacy.default_private_links' , false ),
2015-07-15 11:42:15 +02:00
);
$pluginManager -> executeHooks ( 'render_editlink' , $data );
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'editlink' );
exit ;
}
2016-04-10 17:34:07 +02:00
if ( $targetPage == Router :: $PAGE_EXPORT ) {
2016-05-05 19:22:06 +02:00
// Export links as a Netscape Bookmarks file
2016-04-10 17:34:07 +02:00
if ( empty ( $_GET [ 'selection' ])) {
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'export' );
exit ;
}
2016-04-10 17:34:07 +02:00
// export as bookmarks_(all|private|public)_YYYYmmdd_HHMMSS.html
$selection = $_GET [ 'selection' ];
2016-05-05 19:22:06 +02:00
if ( isset ( $_GET [ 'prepend_note_url' ])) {
$prependNoteUrl = $_GET [ 'prepend_note_url' ];
} else {
$prependNoteUrl = false ;
}
2016-04-10 17:34:07 +02:00
try {
$PAGE -> assign (
'links' ,
2016-05-05 19:22:06 +02:00
NetscapeBookmarkUtils :: filterAndFormat (
$LINKSDB ,
$selection ,
$prependNoteUrl ,
index_url ( $_SERVER )
)
2016-04-10 17:34:07 +02:00
);
} catch ( Exception $exc ) {
header ( 'Content-Type: text/plain; charset=utf-8' );
echo $exc -> getMessage ();
exit ;
2013-02-26 10:09:41 +01:00
}
2016-04-10 17:34:07 +02:00
$now = new DateTime ();
header ( 'Content-Type: text/html; charset=utf-8' );
header (
'Content-disposition: attachment; filename=bookmarks_'
. $selection . '_' . $now -> format ( LinkDB :: LINK_DATE_FORMAT ) . '.html'
);
$PAGE -> assign ( 'date' , $now -> format ( DateTime :: RFC822 ));
$PAGE -> assign ( 'eol' , PHP_EOL );
$PAGE -> assign ( 'selection' , $selection );
$PAGE -> renderPage ( 'export.bookmarks' );
exit ;
2013-02-26 10:09:41 +01:00
}
2016-07-28 22:54:33 +02:00
if ( $targetPage == Router :: $PAGE_IMPORT ) {
// Upload a Netscape bookmark dump to import its contents
if ( ! isset ( $_POST [ 'token' ]) || ! isset ( $_FILES [ 'filetoupload' ])) {
// Show import dialog
2017-04-10 20:01:10 +02:00
$PAGE -> assign (
'maxfilesize' ,
get_max_upload_size (
ini_get ( 'post_max_size' ),
ini_get ( 'upload_max_filesize' ),
false
)
);
$PAGE -> assign (
'maxfilesizeHuman' ,
get_max_upload_size (
ini_get ( 'post_max_size' ),
ini_get ( 'upload_max_filesize' ),
true
)
);
2016-07-28 22:54:33 +02:00
$PAGE -> renderPage ( 'import' );
2013-02-26 10:09:41 +01:00
exit ;
}
2016-07-28 22:54:33 +02:00
// Import bookmarks from an uploaded file
if ( isset ( $_FILES [ 'filetoupload' ][ 'size' ]) && $_FILES [ 'filetoupload' ][ 'size' ] == 0 ) {
// The file is too big or some form field may be missing.
2017-05-09 18:12:15 +02:00
$msg = sprintf (
t (
'The file you are trying to upload is probably bigger than what this webserver can accept'
. ' (%s). Please upload in smaller chunks.'
),
get_max_upload_size ( ini_get ( 'post_max_size' ), ini_get ( 'upload_max_filesize' ))
);
echo '<script>alert("' . $msg . '");document.location=\'?do=' . Router :: $PAGE_IMPORT . '\';</script>' ;
2016-07-28 22:54:33 +02:00
exit ;
}
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) {
2016-07-28 22:54:33 +02:00
die ( 'Wrong token.' );
}
$status = NetscapeBookmarkUtils :: import (
$_POST ,
$_FILES ,
$LINKSDB ,
2017-01-16 12:31:08 +01:00
$conf ,
$history
2016-07-28 22:54:33 +02:00
);
echo '<script>alert("' . $status . '");document.location=\'?do='
. Router :: $PAGE_IMPORT . '\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
2015-11-18 17:40:42 +01:00
// Plugin administration page
if ( $targetPage == Router :: $PAGE_PLUGINSADMIN ) {
$pluginMeta = $pluginManager -> getPluginsMeta ();
// Split plugins into 2 arrays: ordered enabled plugins and disabled.
$enabledPlugins = array_filter ( $pluginMeta , function ( $v ) { return $v [ 'order' ] !== false ; });
// Load parameters.
2016-05-18 21:48:24 +02:00
$enabledPlugins = load_plugin_parameter_values ( $enabledPlugins , $conf -> get ( 'plugins' , array ()));
2015-11-18 17:40:42 +01:00
uasort (
$enabledPlugins ,
function ( $a , $b ) { return $a [ 'order' ] - $b [ 'order' ]; }
);
$disabledPlugins = array_filter ( $pluginMeta , function ( $v ) { return $v [ 'order' ] === false ; });
$PAGE -> assign ( 'enabledPlugins' , $enabledPlugins );
$PAGE -> assign ( 'disabledPlugins' , $disabledPlugins );
$PAGE -> renderPage ( 'pluginsadmin' );
exit ;
}
// Plugin administration form action
if ( $targetPage == Router :: $PAGE_SAVE_PLUGINSADMIN ) {
try {
if ( isset ( $_POST [ 'parameters_form' ])) {
unset ( $_POST [ 'parameters_form' ]);
foreach ( $_POST as $param => $value ) {
2016-05-18 21:48:24 +02:00
$conf -> set ( 'plugins.' . $param , escape ( $value ));
2015-11-18 17:40:42 +01:00
}
}
else {
2016-05-29 16:10:32 +02:00
$conf -> set ( 'general.enabled_plugins' , save_plugin_config ( $_POST ));
2015-11-18 17:40:42 +01:00
}
2016-05-18 21:48:24 +02:00
$conf -> write ( isLoggedIn ());
2017-05-07 16:58:15 +02:00
$history -> updateSettings ();
2015-11-18 17:40:42 +01:00
}
catch ( Exception $e ) {
error_log (
'ERROR while saving plugin configuration:.' . PHP_EOL .
$e -> getMessage ()
);
// TODO: do not handle exceptions/errors in JS.
2016-02-15 20:34:44 +01:00
echo '<script>alert("' . $e -> getMessage () . '");document.location=\'?do=' . Router :: $PAGE_PLUGINSADMIN . '\';</script>' ;
2015-11-18 17:40:42 +01:00
exit ;
}
header ( 'Location: ?do=' . Router :: $PAGE_PLUGINSADMIN );
exit ;
}
2017-03-25 15:54:18 +01:00
// Get a fresh token
if ( $targetPage == Router :: $GET_TOKEN ) {
header ( 'Content-Type:text/plain' );
2017-10-22 18:44:46 +02:00
echo $sessionManager -> generateToken ( $conf );
2017-03-25 15:54:18 +01:00
exit ;
}
2013-02-26 10:09:41 +01:00
// -------- Otherwise, simply display search form and links:
2016-06-09 20:04:02 +02:00
showLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager );
2013-02-26 10:09:41 +01:00
exit ;
}
2016-03-21 21:40:49 +01:00
/**
* Template for the list of links ( < div id = " linklist " > )
* This function fills all the necessary fields in the $PAGE for the template 'linklist.html'
*
2016-06-09 20:04:02 +02:00
* @ param pageBuilder $PAGE pageBuilder instance .
* @ param LinkDB $LINKSDB LinkDB instance .
* @ param ConfigManager $conf Configuration Manager instance .
* @ param PluginManager $pluginManager Plugin Manager instance .
2016-03-21 21:40:49 +01:00
*/
2016-06-09 20:04:02 +02:00
function buildLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager )
2013-02-26 10:09:41 +01:00
{
2016-03-21 21:40:49 +01:00
// Used in templates
2017-04-01 12:17:37 +02:00
if ( isset ( $_GET [ 'searchtags' ])) {
if ( ! empty ( $_GET [ 'searchtags' ])) {
$searchtags = escape ( normalize_spaces ( $_GET [ 'searchtags' ]));
} else {
$searchtags = false ;
}
} else {
$searchtags = '' ;
}
2016-12-20 11:06:22 +01:00
$searchterm = ! empty ( $_GET [ 'searchterm' ]) ? escape ( normalize_spaces ( $_GET [ 'searchterm' ])) : '' ;
2015-12-27 10:08:20 +01:00
2016-03-21 21:40:49 +01:00
// Smallhash filter
if ( ! empty ( $_SERVER [ 'QUERY_STRING' ])
&& preg_match ( '/^[a-zA-Z0-9-_@]{6}($|&|#)/' , $_SERVER [ 'QUERY_STRING' ])) {
try {
$linksToDisplay = $LINKSDB -> filterHash ( $_SERVER [ 'QUERY_STRING' ]);
} catch ( LinkNotFoundException $e ) {
$PAGE -> render404 ( $e -> getMessage ());
2013-02-26 10:09:41 +01:00
exit ;
}
2016-03-21 21:40:49 +01:00
} else {
// Filter links according search parameters.
2017-01-16 13:57:11 +01:00
$visibility = ! empty ( $_SESSION [ 'privateonly' ]) ? 'private' : 'all' ;
2017-04-01 12:17:37 +02:00
$request = [
'searchtags' => $searchtags ,
'searchterm' => $searchterm ,
];
2017-06-01 17:55:26 +02:00
$linksToDisplay = $LINKSDB -> filterSearch ( $request , false , $visibility , ! empty ( $_SESSION [ 'untaggedonly' ]));
2013-02-26 10:09:41 +01:00
}
// ---- Handle paging.
2015-12-27 10:08:20 +01:00
$keys = array ();
foreach ( $linksToDisplay as $key => $value ) {
$keys [] = $key ;
}
2013-02-26 10:09:41 +01:00
2016-07-19 18:03:09 +02:00
2013-02-26 10:09:41 +01:00
// Select articles according to paging.
2015-12-27 10:08:20 +01:00
$pagecount = ceil ( count ( $keys ) / $_SESSION [ 'LINKS_PER_PAGE' ]);
$pagecount = $pagecount == 0 ? 1 : $pagecount ;
$page = empty ( $_GET [ 'page' ]) ? 1 : intval ( $_GET [ 'page' ]);
$page = $page < 1 ? 1 : $page ;
$page = $page > $pagecount ? $pagecount : $page ;
// Start index.
$i = ( $page - 1 ) * $_SESSION [ 'LINKS_PER_PAGE' ];
$end = $i + $_SESSION [ 'LINKS_PER_PAGE' ];
$linkDisp = array ();
2013-02-26 10:09:41 +01:00
while ( $i < $end && $i < count ( $keys ))
{
$link = $linksToDisplay [ $keys [ $i ]];
2017-11-07 20:23:58 +01:00
$link [ 'description' ] = format_description (
$link [ 'description' ],
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
);
2015-12-27 10:08:20 +01:00
$classLi = ( $i % 2 ) != 0 ? '' : 'publicLinkHightLight' ;
$link [ 'class' ] = $link [ 'private' ] == 0 ? $classLi : 'private' ;
2016-11-28 16:16:44 +01:00
$link [ 'timestamp' ] = $link [ 'created' ] -> getTimestamp ();
2016-08-03 09:44:04 +02:00
if ( ! empty ( $link [ 'updated' ])) {
2016-11-28 16:16:44 +01:00
$link [ 'updated_timestamp' ] = $link [ 'updated' ] -> getTimestamp ();
2016-08-03 09:44:04 +02:00
} else {
$link [ 'updated_timestamp' ] = '' ;
}
2016-12-20 11:06:22 +01:00
$taglist = preg_split ( '/\s+/' , $link [ 'tags' ], - 1 , PREG_SPLIT_NO_EMPTY );
2015-03-12 21:57:19 +01:00
uasort ( $taglist , 'strcasecmp' );
2015-12-27 10:08:20 +01:00
$link [ 'taglist' ] = $taglist ;
// Check for both signs of a note: starting with ? and 7 chars long.
if ( $link [ 'url' ][ 0 ] === '?' &&
strlen ( $link [ 'url' ]) === 7 ) {
$link [ 'url' ] = index_url ( $_SERVER ) . $link [ 'url' ];
2015-04-01 11:47:04 +02:00
}
2015-05-11 18:42:54 +02:00
2013-02-26 10:09:41 +01:00
$linkDisp [ $keys [ $i ]] = $link ;
$i ++ ;
}
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
// Compute paging navigation
2017-04-01 12:17:37 +02:00
$searchtagsUrl = $searchtags === '' ? '' : '&searchtags=' . urlencode ( $searchtags );
2016-02-23 19:21:14 +01:00
$searchtermUrl = empty ( $searchterm ) ? '' : '&searchterm=' . urlencode ( $searchterm );
2015-12-27 10:08:20 +01:00
$previous_page_url = '' ;
if ( $i != count ( $keys )) {
2016-02-23 19:21:14 +01:00
$previous_page_url = '?page=' . ( $page + 1 ) . $searchtermUrl . $searchtagsUrl ;
2015-12-27 10:08:20 +01:00
}
$next_page_url = '' ;
if ( $page > 1 ) {
2016-02-23 19:21:14 +01:00
$next_page_url = '?page=' . ( $page - 1 ) . $searchtermUrl . $searchtagsUrl ;
2015-12-27 10:08:20 +01:00
}
2013-02-26 10:09:41 +01:00
// Fill all template fields.
2015-07-15 11:42:15 +02:00
$data = array (
'previous_page_url' => $previous_page_url ,
'next_page_url' => $next_page_url ,
'page_current' => $page ,
'page_max' => $pagecount ,
'result_count' => count ( $linksToDisplay ),
2016-02-23 19:21:14 +01:00
'search_term' => $searchterm ,
'search_tags' => $searchtags ,
2017-03-08 19:57:15 +01:00
'visibility' => ! empty ( $_SESSION [ 'privateonly' ]) ? 'private' : '' ,
2016-06-11 09:08:02 +02:00
'redirector' => $conf -> get ( 'redirector.url' ), // Optional redirector URL.
2015-07-15 11:42:15 +02:00
'links' => $linkDisp ,
);
2016-07-19 18:03:09 +02:00
// If there is only a single link, we change on-the-fly the title of the page.
if ( count ( $linksToDisplay ) == 1 ) {
$data [ 'pagetitle' ] = $linksToDisplay [ $keys [ 0 ]][ 'title' ] . ' - ' . $conf -> get ( 'general.title' );
2015-12-07 10:29:24 +01:00
}
2015-07-15 11:42:15 +02:00
$pluginManager -> executeHooks ( 'render_linklist' , $data , array ( 'loggedin' => isLoggedIn ()));
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2013-02-26 10:09:41 +01:00
return ;
}
2016-06-09 20:04:02 +02:00
/**
* Compute the thumbnail for a link .
*
* With a link to the original URL .
* Understands various services ( youtube . com ... )
* Input : $url = URL for which the thumbnail must be found .
* $href = if provided , this URL will be followed instead of $url
* Returns an associative array with thumbnail attributes ( src , href , width , height , style , alt )
* Some of them may be missing .
* Return an empty array if no thumbnail available .
*
* @ param ConfigManager $conf Configuration Manager instance .
* @ param string $url
* @ param string | bool $href
*
* @ return array
*/
function computeThumbnail ( $conf , $url , $href = false )
2013-02-26 10:09:41 +01:00
{
2016-06-11 09:08:02 +02:00
if ( ! $conf -> get ( 'thumbnail.enable_thumbnails' )) return array ();
2013-02-26 10:09:41 +01:00
if ( $href == false ) $href = $url ;
// For most hosts, the URL of the thumbnail can be easily deduced from the URL of the link.
2014-08-11 20:41:50 +02:00
// (e.g. http://www.youtube.com/watch?v=spVypYk4kto ---> http://img.youtube.com/vi/spVypYk4kto/default.jpg )
2013-02-26 10:09:41 +01:00
// ^^^^^^^^^^^ ^^^^^^^^^^^
$domain = parse_url ( $url , PHP_URL_HOST );
if ( $domain == 'youtube.com' || $domain == 'www.youtube.com' )
{
parse_str ( parse_url ( $url , PHP_URL_QUERY ), $params ); // Extract video ID and get thumbnail
2014-10-21 15:31:20 +02:00
if ( ! empty ( $params [ 'v' ])) return array ( 'src' => 'https://img.youtube.com/vi/' . $params [ 'v' ] . '/default.jpg' ,
2013-02-26 10:09:41 +01:00
'href' => $href , 'width' => '120' , 'height' => '90' , 'alt' => 'YouTube thumbnail' );
}
if ( $domain == 'youtu.be' ) // Youtube short links
{
$path = parse_url ( $url , PHP_URL_PATH );
2014-10-21 15:31:20 +02:00
return array ( 'src' => 'https://img.youtube.com/vi' . $path . '/default.jpg' ,
2013-03-04 10:18:39 +01:00
'href' => $href , 'width' => '120' , 'height' => '90' , 'alt' => 'YouTube thumbnail' );
2013-02-26 10:09:41 +01:00
}
if ( $domain == 'pix.toile-libre.org' ) // pix.toile-libre.org image hosting
{
parse_str ( parse_url ( $url , PHP_URL_QUERY ), $params ); // Extract image filename.
if ( ! empty ( $params ) && ! empty ( $params [ 'img' ])) return array ( 'src' => 'http://pix.toile-libre.org/upload/thumb/' . urlencode ( $params [ 'img' ]),
2013-03-04 10:18:39 +01:00
'href' => $href , 'style' => 'max-width:120px; max-height:150px' , 'alt' => 'pix.toile-libre.org thumbnail' );
}
2013-02-26 10:09:41 +01:00
if ( $domain == 'imgur.com' )
{
$path = parse_url ( $url , PHP_URL_PATH );
if ( startsWith ( $path , '/a/' )) return array (); // Thumbnails for albums are not available.
2014-10-21 15:31:20 +02:00
if ( startsWith ( $path , '/r/' )) return array ( 'src' => 'https://i.imgur.com/' . basename ( $path ) . 's.jpg' ,
2013-02-26 10:09:41 +01:00
'href' => $href , 'width' => '90' , 'height' => '90' , 'alt' => 'imgur.com thumbnail' );
2014-10-21 15:31:20 +02:00
if ( startsWith ( $path , '/gallery/' )) return array ( 'src' => 'https://i.imgur.com' . substr ( $path , 8 ) . 's.jpg' ,
2013-02-26 10:09:41 +01:00
'href' => $href , 'width' => '90' , 'height' => '90' , 'alt' => 'imgur.com thumbnail' );
2014-10-21 15:31:20 +02:00
if ( substr_count ( $path , '/' ) == 1 ) return array ( 'src' => 'https://i.imgur.com/' . substr ( $path , 1 ) . 's.jpg' ,
2013-02-26 10:09:41 +01:00
'href' => $href , 'width' => '90' , 'height' => '90' , 'alt' => 'imgur.com thumbnail' );
}
if ( $domain == 'i.imgur.com' )
{
$pi = pathinfo ( parse_url ( $url , PHP_URL_PATH ));
2014-10-21 15:31:20 +02:00
if ( ! empty ( $pi [ 'filename' ])) return array ( 'src' => 'https://i.imgur.com/' . $pi [ 'filename' ] . 's.jpg' ,
2013-02-26 10:09:41 +01:00
'href' => $href , 'width' => '90' , 'height' => '90' , 'alt' => 'imgur.com thumbnail' );
}
if ( $domain == 'dailymotion.com' || $domain == 'www.dailymotion.com' )
{
if ( strpos ( $url , 'dailymotion.com/video/' ) !== false )
{
$thumburl = str_replace ( 'dailymotion.com/video/' , 'dailymotion.com/thumbnail/video/' , $url );
return array ( 'src' => $thumburl ,
'href' => $href , 'width' => '120' , 'style' => 'height:auto;' , 'alt' => 'DailyMotion thumbnail' );
}
}
if ( endsWith ( $domain , '.imageshack.us' ))
{
$ext = strtolower ( pathinfo ( $url , PATHINFO_EXTENSION ));
if ( $ext == 'jpg' || $ext == 'jpeg' || $ext == 'png' || $ext == 'gif' )
{
$thumburl = substr ( $url , 0 , strlen ( $url ) - strlen ( $ext )) . 'th.' . $ext ;
return array ( 'src' => $thumburl ,
'href' => $href , 'width' => '120' , 'style' => 'height:auto;' , 'alt' => 'imageshack.us thumbnail' );
}
}
// Some other hosts are SLOW AS HELL and usually require an extra HTTP request to get the thumbnail URL.
// So we deport the thumbnail generation in order not to slow down page generation
// (and we also cache the thumbnail)
2016-06-11 09:08:02 +02:00
if ( ! $conf -> get ( 'thumbnail.enable_localcache' )) return array (); // If local cache is disabled, no thumbnails for services which require the use a local cache.
2013-02-26 10:09:41 +01:00
if ( $domain == 'flickr.com' || endsWith ( $domain , '.flickr.com' )
|| $domain == 'vimeo.com'
|| $domain == 'ted.com' || endsWith ( $domain , '.ted.com' )
|| $domain == 'xkcd.com' || endsWith ( $domain , '.xkcd.com' )
)
{
if ( $domain == 'vimeo.com' )
2014-08-11 20:41:50 +02:00
{ // Make sure this vimeo URL points to a video (/xxx... where xxx is numeric)
2013-02-26 10:09:41 +01:00
$path = parse_url ( $url , PHP_URL_PATH );
if ( ! preg_match ( '!/\d+.+?!' , $path )) return array (); // This is not a single video URL.
}
if ( $domain == 'xkcd.com' || endsWith ( $domain , '.xkcd.com' ))
2014-08-11 20:41:50 +02:00
{ // Make sure this URL points to a single comic (/xxx... where xxx is numeric)
2013-02-26 10:09:41 +01:00
$path = parse_url ( $url , PHP_URL_PATH );
if ( ! preg_match ( '!/\d+.+?!' , $path )) return array ();
}
if ( $domain == 'ted.com' || endsWith ( $domain , '.ted.com' ))
2014-08-11 20:41:50 +02:00
{ // Make sure this TED URL points to a video (/talks/...)
2013-02-26 10:09:41 +01:00
$path = parse_url ( $url , PHP_URL_PATH );
if ( " /talks/ " !== substr ( $path , 0 , 7 )) return array (); // This is not a single video URL.
}
2016-05-29 16:10:32 +02:00
$sign = hash_hmac ( 'sha256' , $url , $conf -> get ( 'credentials.salt' )); // We use the salt to sign data (it's random, secret, and specific to each installation)
2015-09-06 21:31:37 +02:00
return array ( 'src' => index_url ( $_SERVER ) . '?do=genthumbnail&hmac=' . $sign . '&url=' . urlencode ( $url ),
2013-02-26 10:09:41 +01:00
'href' => $href , 'width' => '120' , 'style' => 'height:auto;' , 'alt' => 'thumbnail' );
}
// For all other, we try to make a thumbnail of links ending with .jpg/jpeg/png/gif
// Technically speaking, we should download ALL links and check their Content-Type to see if they are images.
// But using the extension will do.
$ext = strtolower ( pathinfo ( $url , PATHINFO_EXTENSION ));
if ( $ext == 'jpg' || $ext == 'jpeg' || $ext == 'png' || $ext == 'gif' )
{
2016-05-29 16:10:32 +02:00
$sign = hash_hmac ( 'sha256' , $url , $conf -> get ( 'credentials.salt' )); // We use the salt to sign data (it's random, secret, and specific to each installation)
2015-09-06 21:31:37 +02:00
return array ( 'src' => index_url ( $_SERVER ) . '?do=genthumbnail&hmac=' . $sign . '&url=' . urlencode ( $url ),
2013-03-04 10:18:39 +01:00
'href' => $href , 'width' => '120' , 'style' => 'height:auto;' , 'alt' => 'thumbnail' );
2013-02-26 10:09:41 +01:00
}
return array (); // No thumbnail.
}
// Returns the HTML code to display a thumbnail for a link
// with a link to the original URL.
// Understands various services (youtube.com...)
2014-08-11 20:41:50 +02:00
// Input: $url = URL for which the thumbnail must be found.
2013-02-26 10:09:41 +01:00
// $href = if provided, this URL will be followed instead of $url
// Returns '' if no thumbnail available.
function thumbnail ( $url , $href = false )
{
2016-06-09 20:04:02 +02:00
// FIXME!
global $conf ;
$t = computeThumbnail ( $conf , $url , $href );
2013-02-26 10:09:41 +01:00
if ( count ( $t ) == 0 ) return '' ; // Empty array = no thumbnail for this URL.
2013-03-04 10:18:39 +01:00
2015-06-11 13:53:27 +02:00
$html = '<a href="' . escape ( $t [ 'href' ]) . '"><img src="' . escape ( $t [ 'src' ]) . '"' ;
if ( ! empty ( $t [ 'width' ])) $html .= ' width="' . escape ( $t [ 'width' ]) . '"' ;
if ( ! empty ( $t [ 'height' ])) $html .= ' height="' . escape ( $t [ 'height' ]) . '"' ;
if ( ! empty ( $t [ 'style' ])) $html .= ' style="' . escape ( $t [ 'style' ]) . '"' ;
if ( ! empty ( $t [ 'alt' ])) $html .= ' alt="' . escape ( $t [ 'alt' ]) . '"' ;
2013-02-26 10:09:41 +01:00
$html .= '></a>' ;
return $html ;
}
// Returns the HTML code to display a thumbnail for a link
// for the picture wall (using lazy image loading)
// Understands various services (youtube.com...)
2014-08-11 20:41:50 +02:00
// Input: $url = URL for which the thumbnail must be found.
2013-02-26 10:09:41 +01:00
// $href = if provided, this URL will be followed instead of $url
// Returns '' if no thumbnail available.
2016-06-09 20:04:02 +02:00
function lazyThumbnail ( $conf , $url , $href = false )
2013-02-26 10:09:41 +01:00
{
2016-06-09 20:04:02 +02:00
// FIXME!
global $conf ;
$t = computeThumbnail ( $conf , $url , $href );
2013-02-26 10:09:41 +01:00
if ( count ( $t ) == 0 ) return '' ; // Empty array = no thumbnail for this URL.
2015-06-11 13:53:27 +02:00
$html = '<a href="' . escape ( $t [ 'href' ]) . '">' ;
2013-03-04 10:18:39 +01:00
2015-03-01 10:47:01 +01:00
// Lazy image
2015-06-11 13:53:27 +02:00
$html .= '<img class="b-lazy" src="#" data-src="' . escape ( $t [ 'src' ]) . '"' ;
2013-03-01 22:21:10 +01:00
2015-06-11 13:53:27 +02:00
if ( ! empty ( $t [ 'width' ])) $html .= ' width="' . escape ( $t [ 'width' ]) . '"' ;
if ( ! empty ( $t [ 'height' ])) $html .= ' height="' . escape ( $t [ 'height' ]) . '"' ;
if ( ! empty ( $t [ 'style' ])) $html .= ' style="' . escape ( $t [ 'style' ]) . '"' ;
if ( ! empty ( $t [ 'alt' ])) $html .= ' alt="' . escape ( $t [ 'alt' ]) . '"' ;
2013-02-26 10:09:41 +01:00
$html .= '>' ;
2013-03-04 10:18:39 +01:00
2014-08-11 20:41:50 +02:00
// No-JavaScript fallback.
2015-06-11 13:53:27 +02:00
$html .= '<noscript><img src="' . escape ( $t [ 'src' ]) . '"' ;
if ( ! empty ( $t [ 'width' ])) $html .= ' width="' . escape ( $t [ 'width' ]) . '"' ;
if ( ! empty ( $t [ 'height' ])) $html .= ' height="' . escape ( $t [ 'height' ]) . '"' ;
if ( ! empty ( $t [ 'style' ])) $html .= ' style="' . escape ( $t [ 'style' ]) . '"' ;
if ( ! empty ( $t [ 'alt' ])) $html .= ' alt="' . escape ( $t [ 'alt' ]) . '"' ;
2013-02-26 10:09:41 +01:00
$html .= '></noscript></a>' ;
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
return $html ;
}
2016-06-09 20:04:02 +02:00
/**
* Installation
* This function should NEVER be called if the file data / config . php exists .
*
2017-10-22 18:44:46 +02:00
* @ param ConfigManager $conf Configuration Manager instance .
* @ param SessionManager $sessionManager SessionManager instance
2016-06-09 20:04:02 +02:00
*/
2017-10-22 18:44:46 +02:00
function install ( $conf , $sessionManager ) {
2013-02-26 10:09:41 +01:00
// On free.fr host, make sure the /sessions directory exists, otherwise login will not work.
2013-08-03 22:00:09 +02:00
if ( endsWith ( $_SERVER [ 'HTTP_HOST' ], '.free.fr' ) && ! is_dir ( $_SERVER [ 'DOCUMENT_ROOT' ] . '/sessions' )) mkdir ( $_SERVER [ 'DOCUMENT_ROOT' ] . '/sessions' , 0705 );
2013-02-26 10:09:41 +01:00
2013-02-28 10:37:43 +01:00
// This part makes sure sessions works correctly.
// (Because on some hosts, session.save_path may not be set correctly,
// or we may not have write access to it.)
if ( isset ( $_GET [ 'test_session' ]) && ( ! isset ( $_SESSION ) || ! isset ( $_SESSION [ 'session_tested' ]) || $_SESSION [ 'session_tested' ] != 'Working' ))
2017-05-09 18:12:15 +02:00
{
// Step 2: Check if data in session is correct.
$msg = t (
'<pre>Sessions do not seem to work correctly on your server.<br>' .
'Make sure the variable "session.save_path" is set correctly in your PHP config, ' .
'and that you have write access to it.<br>' .
'It currently points to %s.<br>' .
'On some browsers, accessing your server via a hostname like \'localhost\' ' .
'or any custom hostname without a dot causes cookie storage to fail. ' .
'We recommend accessing your server via it\'s IP address or Fully Qualified Domain Name.<br>'
);
$msg = sprintf ( $msg , session_save_path ());
echo $msg ;
echo '<br><a href="?">' . t ( 'Click to try again.' ) . '</a></pre>' ;
2013-02-28 10:37:43 +01:00
die ;
}
if ( ! isset ( $_SESSION [ 'session_tested' ]))
{ // Step 1 : Try to store data in session and reload page.
$_SESSION [ 'session_tested' ] = 'Working' ; // Try to set a variable in session.
2015-09-06 21:31:37 +02:00
header ( 'Location: ' . index_url ( $_SERVER ) . '?test_session' ); // Redirect to check stored data.
2013-02-28 10:37:43 +01:00
}
if ( isset ( $_GET [ 'test_session' ]))
2014-08-11 20:41:50 +02:00
{ // Step 3: Sessions are OK. Remove test parameter from URL.
2015-09-06 21:31:37 +02:00
header ( 'Location: ' . index_url ( $_SERVER ));
2013-02-28 10:37:43 +01:00
}
2013-02-26 10:09:41 +01:00
if ( ! empty ( $_POST [ 'setlogin' ]) && ! empty ( $_POST [ 'setpassword' ]))
{
$tz = 'UTC' ;
2016-05-03 20:09:24 +02:00
if ( ! empty ( $_POST [ 'continent' ]) && ! empty ( $_POST [ 'city' ])
&& isTimeZoneValid ( $_POST [ 'continent' ], $_POST [ 'city' ])
) {
$tz = $_POST [ 'continent' ] . '/' . $_POST [ 'city' ];
2015-07-11 01:29:12 +02:00
}
2016-05-29 16:10:32 +02:00
$conf -> set ( 'general.timezone' , $tz );
2016-05-18 21:48:24 +02:00
$login = $_POST [ 'setlogin' ];
2016-05-29 16:10:32 +02:00
$conf -> set ( 'credentials.login' , $login );
2016-05-18 21:48:24 +02:00
$salt = sha1 ( uniqid ( '' , true ) . '_' . mt_rand ());
2016-05-29 16:10:32 +02:00
$conf -> set ( 'credentials.salt' , $salt );
$conf -> set ( 'credentials.hash' , sha1 ( $_POST [ 'setpassword' ] . $login . $salt ));
2016-05-18 21:48:24 +02:00
if ( ! empty ( $_POST [ 'title' ])) {
2016-05-30 20:15:36 +02:00
$conf -> set ( 'general.title' , escape ( $_POST [ 'title' ]));
2016-05-18 21:48:24 +02:00
} else {
2016-05-29 16:10:32 +02:00
$conf -> set ( 'general.title' , 'Shared links on ' . escape ( index_url ( $_SERVER )));
2016-05-18 21:48:24 +02:00
}
2017-05-25 13:26:05 +02:00
$conf -> set ( 'translation.language' , escape ( $_POST [ 'language' ]));
2016-06-11 09:08:02 +02:00
$conf -> set ( 'updates.check_updates' , ! empty ( $_POST [ 'updateCheck' ]));
2016-07-31 10:46:17 +02:00
$conf -> set ( 'api.enabled' , ! empty ( $_POST [ 'enableApi' ]));
$conf -> set (
'api.secret' ,
generate_api_secret (
2017-01-03 14:25:04 +01:00
$conf -> get ( 'credentials.login' ),
$conf -> get ( 'credentials.salt' )
2016-07-31 10:46:17 +02:00
)
);
2015-06-29 12:23:00 +02:00
try {
2016-05-18 21:48:24 +02:00
// Everything is ok, let's create config file.
$conf -> write ( isLoggedIn ());
2015-06-29 12:23:00 +02:00
}
catch ( Exception $e ) {
error_log (
'ERROR while writing config file after installation.' . PHP_EOL .
$e -> getMessage ()
);
// TODO: do not handle exceptions/errors in JS.
echo '<script>alert("' . $e -> getMessage () . '");document.location=\'?\';</script>' ;
exit ;
}
2015-01-08 15:09:46 +01:00
echo '<script>alert("Shaarli is now configured. Please enter your login/password and start shaaring your links!");document.location=\'?do=login\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
2017-10-22 18:44:46 +02:00
$PAGE = new PageBuilder ( $conf , null , $sessionManager -> generateToken ());
2017-03-22 19:16:35 +01:00
list ( $continents , $cities ) = generateTimeZoneData ( timezone_identifiers_list (), date_default_timezone_get ());
$PAGE -> assign ( 'continents' , $continents );
$PAGE -> assign ( 'cities' , $cities );
2017-05-25 13:26:05 +02:00
$PAGE -> assign ( 'languages' , Languages :: getAvailableLanguages ());
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'install' );
exit ;
}
2016-06-09 20:04:02 +02:00
/**
* Because some f * cking services like flickr require an extra HTTP request to get the thumbnail URL ,
* I have deported the thumbnail URL code generation here , otherwise this would slow down page generation .
* The following function takes the URL a link ( e . g . a flickr page ) and return the proper thumbnail .
* This function is called by passing the URL :
* http :// mywebsite . com / shaarli / ? do = genthumbnail & hmac = [ HMAC ] & url = [ URL ]
* [ URL ] is the URL of the link ( e . g . a flickr page )
* [ HMAC ] is the signature for the [ URL ] ( so that these URL cannot be forged ) .
* The function below will fetch the image from the webservice and store it in the cache .
*
* @ param ConfigManager $conf Configuration Manager instance ,
*/
function genThumbnail ( $conf )
2013-02-26 10:09:41 +01:00
{
// Make sure the parameters in the URL were generated by us.
2016-05-29 16:10:32 +02:00
$sign = hash_hmac ( 'sha256' , $_GET [ 'url' ], $conf -> get ( 'credentials.salt' ));
2014-08-11 20:41:50 +02:00
if ( $sign != $_GET [ 'hmac' ]) die ( 'Naughty boy!' );
2013-02-26 10:09:41 +01:00
2016-06-11 09:08:02 +02:00
$cacheDir = $conf -> get ( 'resource.thumbnails_cache' , 'cache' );
2013-02-26 10:09:41 +01:00
// Let's see if we don't already have the image for this URL in the cache.
$thumbname = hash ( 'sha1' , $_GET [ 'url' ]) . '.jpg' ;
2016-05-18 21:48:24 +02:00
if ( is_file ( $cacheDir . '/' . $thumbname ))
2013-02-26 10:09:41 +01:00
{ // We have the thumbnail, just serve it:
header ( 'Content-Type: image/jpeg' );
2016-05-18 21:48:24 +02:00
echo file_get_contents ( $cacheDir . '/' . $thumbname );
2013-02-26 10:09:41 +01:00
return ;
}
// We may also serve a blank image (if service did not respond)
$blankname = hash ( 'sha1' , $_GET [ 'url' ]) . '.gif' ;
2016-05-18 21:48:24 +02:00
if ( is_file ( $cacheDir . '/' . $blankname ))
2013-02-26 10:09:41 +01:00
{
header ( 'Content-Type: image/gif' );
2016-05-18 21:48:24 +02:00
echo file_get_contents ( $cacheDir . '/' . $blankname );
2013-02-26 10:09:41 +01:00
return ;
}
// Otherwise, generate the thumbnail.
$url = $_GET [ 'url' ];
$domain = parse_url ( $url , PHP_URL_HOST );
if ( $domain == 'flickr.com' || endsWith ( $domain , '.flickr.com' ))
{
2014-08-11 20:41:50 +02:00
// Crude replacement to handle new flickr domain policy (They prefer www. now)
2013-02-26 10:09:41 +01:00
$url = str_replace ( 'http://flickr.com/' , 'http://www.flickr.com/' , $url );
// Is this a link to an image, or to a flickr page ?
$imageurl = '' ;
2016-05-10 23:31:41 +02:00
if ( endsWith ( parse_url ( $url , PHP_URL_PATH ), '.jpg' ))
2014-08-11 20:41:50 +02:00
{ // This is a direct link to an image. e.g. http://farm1.staticflickr.com/5/5921913_ac83ed27bd_o.jpg
2013-02-26 10:09:41 +01:00
preg_match ( '!(http://farm\d+\.staticflickr\.com/\d+/\d+_\w+_)\w.jpg!' , $url , $matches );
if ( ! empty ( $matches [ 1 ])) $imageurl = $matches [ 1 ] . 'm.jpg' ;
}
2014-08-11 20:41:50 +02:00
else // This is a flickr page (html)
2013-02-26 10:09:41 +01:00
{
2015-09-01 21:45:06 +02:00
// Get the flickr html page.
2016-01-04 10:45:54 +01:00
list ( $headers , $content ) = get_http_response ( $url , 20 );
2015-09-01 21:45:06 +02:00
if ( strpos ( $headers [ 0 ], '200 OK' ) !== false )
2013-02-26 10:09:41 +01:00
{
2014-08-11 20:41:50 +02:00
// flickr now nicely provides the URL of the thumbnail in each flickr page.
2016-01-04 10:45:54 +01:00
preg_match ( '!<link rel=\"image_src\" href=\"(.+?)\"!' , $content , $matches );
2013-02-26 10:09:41 +01:00
if ( ! empty ( $matches [ 1 ])) $imageurl = $matches [ 1 ];
// In albums (and some other pages), the link rel="image_src" is not provided,
// but flickr provides:
// <meta property="og:image" content="http://farm4.staticflickr.com/3398/3239339068_25d13535ff_z.jpg" />
if ( $imageurl == '' )
{
2016-01-04 10:45:54 +01:00
preg_match ( '!<meta property=\"og:image\" content=\"(.+?)\"!' , $content , $matches );
2013-02-26 10:09:41 +01:00
if ( ! empty ( $matches [ 1 ])) $imageurl = $matches [ 1 ];
}
}
}
if ( $imageurl != '' )
{ // Let's download the image.
2015-09-01 21:45:06 +02:00
// Image is 240x120, so 10 seconds to download should be enough.
2016-01-04 10:45:54 +01:00
list ( $headers , $content ) = get_http_response ( $imageurl , 10 );
2015-09-01 21:45:06 +02:00
if ( strpos ( $headers [ 0 ], '200 OK' ) !== false ) {
2016-01-04 10:45:54 +01:00
// Save image to cache.
2016-05-18 21:48:24 +02:00
file_put_contents ( $cacheDir . '/' . $thumbname , $content );
2013-02-26 10:09:41 +01:00
header ( 'Content-Type: image/jpeg' );
2016-01-04 10:45:54 +01:00
echo $content ;
2013-02-26 10:09:41 +01:00
return ;
}
}
}
elseif ( $domain == 'vimeo.com' )
{
// This is more complex: we have to perform a HTTP request, then parse the result.
2014-08-11 20:41:50 +02:00
// Maybe we should deport this to JavaScript ? Example: http://stackoverflow.com/questions/1361149/get-img-thumbnails-from-vimeo/4285098#4285098
2013-02-26 10:09:41 +01:00
$vid = substr ( parse_url ( $url , PHP_URL_PATH ), 1 );
2016-01-04 10:45:54 +01:00
list ( $headers , $content ) = get_http_response ( 'https://vimeo.com/api/v2/video/' . escape ( $vid ) . '.php' , 5 );
2015-09-01 21:45:06 +02:00
if ( strpos ( $headers [ 0 ], '200 OK' ) !== false ) {
2016-01-04 10:45:54 +01:00
$t = unserialize ( $content );
2013-02-26 10:09:41 +01:00
$imageurl = $t [ 0 ][ 'thumbnail_medium' ];
// Then we download the image and serve it to our client.
2016-01-04 10:45:54 +01:00
list ( $headers , $content ) = get_http_response ( $imageurl , 10 );
2015-09-01 21:45:06 +02:00
if ( strpos ( $headers [ 0 ], '200 OK' ) !== false ) {
2016-01-04 10:45:54 +01:00
// Save image to cache.
2016-05-18 21:48:24 +02:00
file_put_contents ( $cacheDir . '/' . $thumbname , $content );
2013-02-26 10:09:41 +01:00
header ( 'Content-Type: image/jpeg' );
2016-01-04 10:45:54 +01:00
echo $content ;
2013-02-26 10:09:41 +01:00
return ;
}
}
}
elseif ( $domain == 'ted.com' || endsWith ( $domain , '.ted.com' ))
{
// The thumbnail for TED talks is located in the <link rel="image_src" [...]> tag on that page
// http://www.ted.com/talks/mikko_hypponen_fighting_viruses_defending_the_net.html
// <link rel="image_src" href="http://images.ted.com/images/ted/28bced335898ba54d4441809c5b1112ffaf36781_389x292.jpg" />
2016-01-04 10:45:54 +01:00
list ( $headers , $content ) = get_http_response ( $url , 5 );
2015-09-01 21:45:06 +02:00
if ( strpos ( $headers [ 0 ], '200 OK' ) !== false ) {
2013-02-26 10:09:41 +01:00
// Extract the link to the thumbnail
2016-01-04 10:45:54 +01:00
preg_match ( '!link rel="image_src" href="(http://images.ted.com/images/ted/.+_\d+x\d+\.jpg)"!' , $content , $matches );
2013-02-26 10:09:41 +01:00
if ( ! empty ( $matches [ 1 ]))
{ // Let's download the image.
$imageurl = $matches [ 1 ];
2015-09-01 21:45:06 +02:00
// No control on image size, so wait long enough
2016-01-04 10:45:54 +01:00
list ( $headers , $content ) = get_http_response ( $imageurl , 20 );
2015-09-01 21:45:06 +02:00
if ( strpos ( $headers [ 0 ], '200 OK' ) !== false ) {
2016-05-18 21:48:24 +02:00
$filepath = $cacheDir . '/' . $thumbname ;
2016-01-04 10:45:54 +01:00
file_put_contents ( $filepath , $content ); // Save image to cache.
2013-02-26 10:09:41 +01:00
if ( resizeImage ( $filepath ))
{
header ( 'Content-Type: image/jpeg' );
echo file_get_contents ( $filepath );
return ;
}
}
}
}
}
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
elseif ( $domain == 'xkcd.com' || endsWith ( $domain , '.xkcd.com' ))
{
// There is no thumbnail available for xkcd comics, so download the whole image and resize it.
// http://xkcd.com/327/
// <img src="http://imgs.xkcd.com/comics/exploits_of_a_mom.png" title="<BLABLA>" alt="<BLABLA>" />
2016-01-04 10:45:54 +01:00
list ( $headers , $content ) = get_http_response ( $url , 5 );
2015-09-01 21:45:06 +02:00
if ( strpos ( $headers [ 0 ], '200 OK' ) !== false ) {
2013-02-26 10:09:41 +01:00
// Extract the link to the thumbnail
2016-01-04 10:45:54 +01:00
preg_match ( '!<img src="(http://imgs.xkcd.com/comics/.*)" title="[^s]!' , $content , $matches );
2013-02-26 10:09:41 +01:00
if ( ! empty ( $matches [ 1 ]))
{ // Let's download the image.
$imageurl = $matches [ 1 ];
2015-09-01 21:45:06 +02:00
// No control on image size, so wait long enough
2016-01-04 10:45:54 +01:00
list ( $headers , $content ) = get_http_response ( $imageurl , 20 );
2015-09-01 21:45:06 +02:00
if ( strpos ( $headers [ 0 ], '200 OK' ) !== false ) {
2016-05-18 21:48:24 +02:00
$filepath = $cacheDir . '/' . $thumbname ;
2016-01-04 10:45:54 +01:00
// Save image to cache.
file_put_contents ( $filepath , $content );
2013-02-26 10:09:41 +01:00
if ( resizeImage ( $filepath ))
{
header ( 'Content-Type: image/jpeg' );
echo file_get_contents ( $filepath );
return ;
}
}
}
}
2013-03-04 10:18:39 +01:00
}
2013-02-26 10:09:41 +01:00
else
{
// For all other domains, we try to download the image and make a thumbnail.
2015-09-01 21:45:06 +02:00
// We allow 30 seconds max to download (and downloads are limited to 4 Mb)
2016-01-04 10:45:54 +01:00
list ( $headers , $content ) = get_http_response ( $url , 30 );
2015-09-01 21:45:06 +02:00
if ( strpos ( $headers [ 0 ], '200 OK' ) !== false ) {
2016-05-18 21:48:24 +02:00
$filepath = $cacheDir . '/' . $thumbname ;
2016-01-04 10:45:54 +01:00
// Save image to cache.
file_put_contents ( $filepath , $content );
2013-02-26 10:09:41 +01:00
if ( resizeImage ( $filepath ))
{
header ( 'Content-Type: image/jpeg' );
echo file_get_contents ( $filepath );
return ;
}
}
}
// Otherwise, return an empty image (8x8 transparent gif)
$blankgif = base64_decode ( 'R0lGODlhCAAIAIAAAP///////yH5BAEKAAEALAAAAAAIAAgAAAIHjI+py+1dAAA7' );
2016-05-18 21:48:24 +02:00
// Also put something in cache so that this URL is not requested twice.
file_put_contents ( $cacheDir . '/' . $blankname , $blankgif );
2013-02-26 10:09:41 +01:00
header ( 'Content-Type: image/gif' );
echo $blankgif ;
}
// Make a thumbnail of the image (to width: 120 pixels)
// Returns true if success, false otherwise.
function resizeImage ( $filepath )
{
if ( ! function_exists ( 'imagecreatefromjpeg' )) return false ; // GD not present: no thumbnail possible.
// Trick: some stupid people rename GIF as JPEG... or else.
// So we really try to open each image type whatever the extension is.
$header = file_get_contents ( $filepath , false , NULL , 0 , 256 ); // Read first 256 bytes and try to sniff file type.
$im = false ;
$i = strpos ( $header , 'GIF8' ); if (( $i !== false ) && ( $i == 0 )) $im = imagecreatefromgif ( $filepath ); // Well this is crude, but it should be enough.
$i = strpos ( $header , 'PNG' ); if (( $i !== false ) && ( $i == 1 )) $im = imagecreatefrompng ( $filepath );
$i = strpos ( $header , 'JFIF' ); if ( $i !== false ) $im = imagecreatefromjpeg ( $filepath );
if ( ! $im ) return false ; // Unable to open image (corrupted or not an image)
$w = imagesx ( $im );
$h = imagesy ( $im );
$ystart = 0 ; $yheight = $h ;
if ( $h > $w ) { $ystart = ( $h / 2 ) - ( $w / 2 ); $yheight = $w / 2 ; }
$nw = 120 ; // Desired width
$nh = min ( floor (( $h * $nw ) / $w ), 120 ); // Compute new width/height, but maximum 120 pixels height.
// Resize image:
$im2 = imagecreatetruecolor ( $nw , $nh );
imagecopyresampled ( $im2 , $im , 0 , 0 , 0 , $ystart , $nw , $nh , $w , $yheight );
imageinterlace ( $im2 , true ); // For progressive JPEG.
$tempname = $filepath . '_TEMP.jpg' ;
imagejpeg ( $im2 , $tempname , 90 );
imagedestroy ( $im );
imagedestroy ( $im2 );
2013-02-27 21:24:41 +01:00
unlink ( $filepath );
2013-02-26 10:09:41 +01:00
rename ( $tempname , $filepath ); // Overwrite original picture with thumbnail.
return true ;
}
2016-06-09 20:04:02 +02:00
if ( isset ( $_SERVER [ 'QUERY_STRING' ]) && startsWith ( $_SERVER [ 'QUERY_STRING' ], 'do=genthumbnail' )) { genThumbnail ( $conf ); exit ; } // Thumbnail generation/cache does not need the link database.
if ( isset ( $_SERVER [ 'QUERY_STRING' ]) && startsWith ( $_SERVER [ 'QUERY_STRING' ], 'do=dailyrss' )) { showDailyRSS ( $conf ); exit ; }
2016-05-18 21:48:24 +02:00
if ( ! isset ( $_SESSION [ 'LINKS_PER_PAGE' ])) {
2016-05-29 16:10:32 +02:00
$_SESSION [ 'LINKS_PER_PAGE' ] = $conf -> get ( 'general.links_per_page' , 20 );
2016-05-18 21:48:24 +02:00
}
2016-12-15 10:13:00 +01:00
2017-08-04 19:10:00 +02:00
try {
$history = new History ( $conf -> get ( 'resource.history' ));
} catch ( Exception $e ) {
die ( $e -> getMessage ());
}
2016-12-15 10:13:00 +01:00
$linkDb = new LinkDB (
$conf -> get ( 'resource.datastore' ),
isLoggedIn (),
$conf -> get ( 'privacy.hide_public_links' ),
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
);
$container = new \Slim\Container ();
$container [ 'conf' ] = $conf ;
$container [ 'plugins' ] = $pluginManager ;
2017-05-07 16:50:20 +02:00
$container [ 'history' ] = $history ;
2016-12-15 10:13:00 +01:00
$app = new \Slim\App ( $container );
// REST API routes
$app -> group ( '/api/v1' , function () {
2017-01-05 15:58:24 +01:00
$this -> get ( '/info' , '\Shaarli\Api\Controllers\Info:getInfo' ) -> setName ( 'getInfo' );
$this -> get ( '/links' , '\Shaarli\Api\Controllers\Links:getLinks' ) -> setName ( 'getLinks' );
$this -> get ( '/links/{id:[\d]+}' , '\Shaarli\Api\Controllers\Links:getLink' ) -> setName ( 'getLink' );
$this -> post ( '/links' , '\Shaarli\Api\Controllers\Links:postLink' ) -> setName ( 'postLink' );
2017-04-01 11:11:25 +02:00
$this -> put ( '/links/{id:[\d]+}' , '\Shaarli\Api\Controllers\Links:putLink' ) -> setName ( 'putLink' );
2017-05-06 17:32:16 +02:00
$this -> delete ( '/links/{id:[\d]+}' , '\Shaarli\Api\Controllers\Links:deleteLink' ) -> setName ( 'deleteLink' );
2017-05-06 19:39:39 +02:00
$this -> get ( '/history' , '\Shaarli\Api\Controllers\History:getHistory' ) -> setName ( 'getHistory' );
2017-01-02 18:37:08 +01:00
}) -> add ( '\Shaarli\Api\ApiMiddleware' );
2016-12-15 10:13:00 +01:00
$response = $app -> run ( true );
// Hack to make Slim and Shaarli router work together:
2016-12-24 10:30:21 +01:00
// If a Slim route isn't found and NOT API call, we call renderPage().
if ( $response -> getStatusCode () == 404 && strpos ( $_SERVER [ 'REQUEST_URI' ], '/api/v1' ) === false ) {
2016-12-15 10:13:00 +01:00
// We use UTF-8 for proper international characters handling.
header ( 'Content-Type: text/html; charset=utf-8' );
2017-10-22 18:44:46 +02:00
renderPage ( $conf , $pluginManager , $linkDb , $history , $sessionManager );
2016-12-15 10:13:00 +01:00
} else {
$app -> respond ( $response );
}