2013-02-26 10:09:41 +01:00
< ? php
2015-09-14 20:54:13 +02:00
/**
2017-03-21 20:08:40 +01:00
* Shaarli - The personal , minimalist , super - fast , database free , bookmarking service .
2015-09-14 20:54:13 +02:00
*
* Friendly fork by the Shaarli community :
* - https :// github . com / shaarli / Shaarli
*
* Original project by sebsauvage . net :
* - http :// sebsauvage . net / wiki / doku . php ? id = php : shaarli
* - https :// github . com / sebsauvage / Shaarli
*
* Licence : http :// www . opensource . org / licenses / zlib - license . php
*
2017-01-15 19:27:57 +01:00
* Requires : PHP 5.5 . x
2015-09-14 20:54:13 +02:00
*/
2015-08-04 18:31:16 +02:00
// Set 'UTC' as the default timezone if it is not defined in php.ini
// See http://php.net/manual/en/datetime.configuration.php#ini.date.timezone
if ( date_default_timezone_get () == '' ) {
date_default_timezone_set ( 'UTC' );
}
2013-03-10 14:06:12 +01:00
2015-11-11 18:45:46 +01:00
/*
* PHP configuration
*/
2013-12-05 18:23:02 +01:00
// http://server.com/x/shaarli --> /shaarli/
2016-05-18 21:48:24 +02:00
define ( 'WEB_PATH' , substr ( $_SERVER [ 'REQUEST_URI' ], 0 , 1 + strrpos ( $_SERVER [ 'REQUEST_URI' ], '/' , 0 )));
2013-02-26 10:09:41 +01:00
2015-11-11 18:45:46 +01:00
// High execution time in case of problematic imports/exports.
ini_set ( 'max_input_time' , '60' );
// Try to set max upload file size and read
ini_set ( 'memory_limit' , '128M' );
2013-02-26 10:09:41 +01:00
ini_set ( 'post_max_size' , '16M' );
ini_set ( 'upload_max_filesize' , '16M' );
2015-11-11 18:45:46 +01:00
// See all error except warnings
error_reporting ( E_ALL ^ E_WARNING );
// See all errors (for debugging only)
//error_reporting(-1);
2015-07-10 22:53:43 +02:00
2016-07-28 22:54:33 +02:00
// 3rd-party libraries
2016-09-04 23:57:21 +02:00
if ( ! file_exists ( __DIR__ . '/vendor/autoload.php' )) {
header ( 'Content-Type: text/plain; charset=utf-8' );
echo " Error: missing Composer configuration \n \n "
. " If you installed Shaarli through Git or using the development branch, \n "
. " please refer to the installation documentation to install PHP "
. " dependencies using Composer: \n "
2018-06-26 22:18:51 +02:00
. " - https://shaarli.readthedocs.io/en/master/Server-configuration/ \n "
2017-08-26 09:40:57 +02:00
. " - https://shaarli.readthedocs.io/en/master/Download-and-Installation/ " ;
2016-09-04 23:57:21 +02:00
exit ;
}
2016-07-28 22:54:33 +02:00
require_once 'inc/rain.tpl.class.php' ;
require_once __DIR__ . '/vendor/autoload.php' ;
2015-03-12 00:43:02 +01:00
// Shaarli library
2015-11-11 22:49:58 +01:00
require_once 'application/ApplicationUtils.php' ;
2015-07-09 22:14:39 +02:00
require_once 'application/Cache.php' ;
require_once 'application/CachedPage.php' ;
2017-03-08 19:59:00 +01:00
require_once 'application/config/ConfigPlugin.php' ;
2016-03-12 16:08:01 +01:00
require_once 'application/FeedBuilder.php' ;
2015-11-11 22:49:58 +01:00
require_once 'application/FileUtils.php' ;
2017-01-16 12:31:08 +01:00
require_once 'application/History.php' ;
2015-09-01 21:45:06 +02:00
require_once 'application/HttpUtils.php' ;
2015-03-12 00:43:02 +01:00
require_once 'application/LinkDB.php' ;
2015-12-27 10:08:20 +01:00
require_once 'application/LinkFilter.php' ;
2016-01-04 10:45:54 +01:00
require_once 'application/LinkUtils.php' ;
2016-04-10 17:34:07 +02:00
require_once 'application/NetscapeBookmarkUtils.php' ;
2016-05-10 23:48:51 +02:00
require_once 'application/PageBuilder.php' ;
2015-07-11 01:29:12 +02:00
require_once 'application/TimeZone.php' ;
2015-08-14 01:14:07 +02:00
require_once 'application/Url.php' ;
2015-03-12 00:43:02 +01:00
require_once 'application/Utils.php' ;
2015-07-15 11:42:15 +02:00
require_once 'application/PluginManager.php' ;
require_once 'application/Router.php' ;
2016-01-12 19:50:48 +01:00
require_once 'application/Updater.php' ;
2017-03-03 23:06:12 +01:00
use \Shaarli\Config\ConfigManager ;
2017-11-11 14:01:21 +01:00
use \Shaarli\Languages ;
2018-04-27 22:12:22 +02:00
use \Shaarli\Security\LoginManager ;
use \Shaarli\Security\SessionManager ;
2017-11-11 14:01:21 +01:00
use \Shaarli\ThemeUtils ;
use \Shaarli\Thumbnailer ;
2015-03-12 00:43:02 +01:00
2015-07-11 01:29:12 +02:00
// Ensure the PHP version is supported
try {
2017-01-15 19:27:57 +01:00
ApplicationUtils :: checkPHPVersion ( '5.5' , PHP_VERSION );
2015-11-11 22:49:58 +01:00
} catch ( Exception $exc ) {
2015-07-11 01:29:12 +02:00
header ( 'Content-Type: text/plain; charset=utf-8' );
2015-11-11 22:49:58 +01:00
echo $exc -> getMessage ();
2015-07-11 01:29:12 +02:00
exit ;
}
2017-10-01 11:09:12 +02:00
define ( 'SHAARLI_VERSION' , ApplicationUtils :: getVersion ( __DIR__ . '/' . ApplicationUtils :: $VERSION_FILE ));
2017-03-21 20:08:40 +01:00
2015-07-25 13:15:47 +02:00
// Force cookie path (but do not change lifetime)
$cookie = session_get_cookie_params ();
$cookiedir = '' ;
if ( dirname ( $_SERVER [ 'SCRIPT_NAME' ]) != '/' ) {
$cookiedir = dirname ( $_SERVER [ " SCRIPT_NAME " ]) . '/' ;
}
// Set default cookie expiration and path.
session_set_cookie_params ( $cookie [ 'lifetime' ], $cookiedir , $_SERVER [ 'SERVER_NAME' ]);
// Set session parameters on server side.
// Use cookies to store session.
ini_set ( 'session.use_cookies' , 1 );
// Force cookies for session (phpsessionID forbidden in URL).
ini_set ( 'session.use_only_cookies' , 1 );
// Prevent PHP form using sessionID in URL if cookies are disabled.
ini_set ( 'session.use_trans_sid' , false );
session_name ( 'shaarli' );
// Start session if needed (Some server auto-start sessions).
if ( session_id () == '' ) {
session_start ();
}
2015-09-03 23:12:58 +02:00
// Regenerate session ID if invalid or not defined in cookie.
2017-10-22 19:54:44 +02:00
if ( isset ( $_COOKIE [ 'shaarli' ]) && ! SessionManager :: checkId ( $_COOKIE [ 'shaarli' ])) {
2015-09-03 23:12:58 +02:00
session_regenerate_id ( true );
$_COOKIE [ 'shaarli' ] = session_id ();
}
2016-06-09 20:04:02 +02:00
$conf = new ConfigManager ();
2017-10-22 18:44:46 +02:00
$sessionManager = new SessionManager ( $_SESSION , $conf );
2018-02-17 01:46:27 +01:00
$loginManager = new LoginManager ( $GLOBALS , $conf , $sessionManager );
2018-05-06 17:06:36 +02:00
$loginManager -> generateStaySignedInToken ( $_SERVER [ 'REMOTE_ADDR' ]);
2018-04-18 23:09:45 +02:00
$clientIpId = client_ip_id ( $_SERVER );
2017-05-09 18:12:15 +02:00
2018-01-31 12:39:17 +01:00
// LC_MESSAGES isn't defined without php-intl, in this case use LC_COLLATE locale instead.
if ( ! defined ( 'LC_MESSAGES' )) {
define ( 'LC_MESSAGES' , LC_COLLATE );
}
2017-05-09 18:12:15 +02:00
// Sniff browser language and set date format accordingly.
if ( isset ( $_SERVER [ 'HTTP_ACCEPT_LANGUAGE' ])) {
autoLocale ( $_SERVER [ 'HTTP_ACCEPT_LANGUAGE' ]);
}
new Languages ( setlocale ( LC_MESSAGES , 0 ), $conf );
2016-05-30 20:15:36 +02:00
$conf -> setEmpty ( 'general.timezone' , date_default_timezone_get ());
2017-05-09 18:12:15 +02:00
$conf -> setEmpty ( 'general.title' , t ( 'Shared links on ' ) . escape ( index_url ( $_SERVER )));
2016-12-07 11:58:25 +01:00
RainTPL :: $tpl_dir = $conf -> get ( 'resource.raintpl_tpl' ) . '/' . $conf -> get ( 'resource.theme' ) . '/' ; // template directory
2016-06-11 09:08:02 +02:00
RainTPL :: $cache_dir = $conf -> get ( 'resource.raintpl_tmp' ); // cache directory
2013-02-26 10:09:41 +01:00
2016-06-09 20:04:02 +02:00
$pluginManager = new PluginManager ( $conf );
2016-05-29 16:10:32 +02:00
$pluginManager -> load ( $conf -> get ( 'general.enabled_plugins' ));
2015-07-15 11:42:15 +02:00
2016-05-29 16:10:32 +02:00
date_default_timezone_set ( $conf -> get ( 'general.timezone' , 'UTC' ));
2016-05-29 14:26:23 +02:00
2013-02-26 10:09:41 +01:00
ob_start (); // Output buffering for the page cache.
// Prevent caching on client side or proxy: (yes, it's ugly)
header ( " Last-Modified: " . gmdate ( " D, d M Y H:i:s " ) . " GMT " );
header ( " Cache-Control: no-store, no-cache, must-revalidate " );
header ( " Cache-Control: post-check=0, pre-check=0 " , false );
header ( " Pragma: no-cache " );
2016-06-09 20:04:02 +02:00
if ( ! is_file ( $conf -> getConfigFileExt ())) {
2015-11-11 22:49:58 +01:00
// Ensure Shaarli has proper access to its resources
2016-06-09 20:04:02 +02:00
$errors = ApplicationUtils :: checkResourcePermissions ( $conf );
2015-11-11 22:49:58 +01:00
if ( $errors != array ()) {
2017-05-09 18:12:15 +02:00
$message = '<p>' . t ( 'Insufficient permissions:' ) . '</p><ul>' ;
2015-11-11 22:49:58 +01:00
foreach ( $errors as $error ) {
$message .= '<li>' . $error . '</li>' ;
}
$message .= '</ul>' ;
header ( 'Content-Type: text/html; charset=utf-8' );
echo $message ;
exit ;
}
// Display the installation form if no existing config is found
2018-06-07 19:58:58 +02:00
install ( $conf , $sessionManager , $loginManager );
2015-07-10 22:53:43 +02:00
}
2013-03-04 21:02:24 +01:00
2018-05-06 17:06:36 +02:00
$loginManager -> checkLoginState ( $_COOKIE , $clientIpId );
2013-02-26 10:09:41 +01:00
2016-06-09 20:04:02 +02:00
/**
2018-04-18 23:45:05 +02:00
* Adapter function to ensure compatibility with third - party templates
2016-06-09 20:04:02 +02:00
*
2018-04-18 23:45:05 +02:00
* @ see https :// github . com / shaarli / Shaarli / pull / 1086
*
* @ return bool true when the user is logged in , false otherwise
2016-06-09 20:04:02 +02:00
*/
2013-02-26 10:09:41 +01:00
function isLoggedIn ()
{
2018-02-17 01:46:27 +01:00
global $loginManager ;
return $loginManager -> isLoggedIn ();
2013-02-26 10:09:41 +01:00
}
2018-02-17 01:46:27 +01:00
2013-02-26 10:09:41 +01:00
// ------------------------------------------------------------------------------------------
// Process login form: Check if login/password is correct.
2018-02-16 22:21:59 +01:00
if ( isset ( $_POST [ 'login' ])) {
2017-10-25 23:03:31 +02:00
if ( ! $loginManager -> canLogin ( $_SERVER )) {
die ( t ( 'I said: NO. You are banned for the moment. Go away.' ));
}
2016-06-09 20:04:02 +02:00
if ( isset ( $_POST [ 'password' ])
2017-10-22 18:44:46 +02:00
&& $sessionManager -> checkToken ( $_POST [ 'token' ])
2018-04-18 23:09:45 +02:00
&& $loginManager -> checkCredentials ( $_SERVER [ 'REMOTE_ADDR' ], $clientIpId , $_POST [ 'login' ], $_POST [ 'password' ])
2017-10-25 23:03:31 +02:00
) {
$loginManager -> handleSuccessfulLogin ( $_SERVER );
2018-04-27 23:17:38 +02:00
$cookiedir = '' ;
if ( dirname ( $_SERVER [ 'SCRIPT_NAME' ]) != '/' ) {
2014-08-11 20:41:50 +02:00
// Note: Never forget the trailing slash on the cookie path!
2018-04-27 23:17:38 +02:00
$cookiedir = dirname ( $_SERVER [ " SCRIPT_NAME " ]) . '/' ;
2013-02-26 10:09:41 +01:00
}
2018-04-27 23:17:38 +02:00
if ( ! empty ( $_POST [ 'longlastingsession' ])) {
// Keep the session cookie even after the browser closes
$sessionManager -> setStaySignedIn ( true );
$expirationTime = $sessionManager -> extendSession ();
setcookie (
2018-05-06 17:06:36 +02:00
$loginManager :: $STAY_SIGNED_IN_COOKIE ,
$loginManager -> getStaySignedInToken (),
2018-04-27 23:17:38 +02:00
$expirationTime ,
WEB_PATH
);
} else {
// Standard session expiration (=when browser closes)
$expirationTime = 0 ;
2013-02-26 10:09:41 +01:00
}
2016-01-20 10:57:07 +01:00
2018-04-27 23:17:38 +02:00
// Send cookie with the new expiration date to the browser
session_set_cookie_params ( $expirationTime , $cookiedir , $_SERVER [ 'SERVER_NAME' ]);
session_regenerate_id ( true );
2013-02-26 10:09:41 +01:00
// Optional redirect after login:
2015-07-29 15:32:41 +02:00
if ( isset ( $_GET [ 'post' ])) {
$uri = '?post=' . urlencode ( $_GET [ 'post' ]);
2017-03-25 19:41:01 +01:00
foreach ( array ( 'description' , 'source' , 'title' , 'tags' ) as $param ) {
2015-07-29 15:32:41 +02:00
if ( ! empty ( $_GET [ $param ])) {
$uri .= '&' . $param . '=' . urlencode ( $_GET [ $param ]);
}
}
header ( 'Location: ' . $uri );
exit ;
}
if ( isset ( $_GET [ 'edit_link' ])) {
header ( 'Location: ?edit_link=' . escape ( $_GET [ 'edit_link' ]));
exit ;
}
if ( isset ( $_POST [ 'returnurl' ])) {
// Prevent loops over login screen.
if ( strpos ( $_POST [ 'returnurl' ], 'do=login' ) === false ) {
2016-03-21 19:06:46 +01:00
header ( 'Location: ' . generateLocation ( $_POST [ 'returnurl' ], $_SERVER [ 'HTTP_HOST' ]));
2015-07-29 15:32:41 +02:00
exit ;
}
2013-02-26 10:09:41 +01:00
}
header ( 'Location: ?' ); exit ;
2017-10-25 23:03:31 +02:00
} else {
$loginManager -> handleFailedLogin ( $_SERVER );
2018-01-04 15:53:48 +01:00
$redir = '&username=' . urlencode ( $_POST [ 'login' ]);
2015-07-29 15:32:41 +02:00
if ( isset ( $_GET [ 'post' ])) {
2016-05-06 20:03:10 +02:00
$redir .= '&post=' . urlencode ( $_GET [ 'post' ]);
2017-03-25 19:41:01 +01:00
foreach ( array ( 'description' , 'source' , 'title' , 'tags' ) as $param ) {
2015-07-29 15:32:41 +02:00
if ( ! empty ( $_GET [ $param ])) {
$redir .= '&' . $param . '=' . urlencode ( $_GET [ $param ]);
}
}
}
2017-05-09 18:12:15 +02:00
// Redirect to login screen.
echo '<script>alert("' . t ( " Wrong login/password. " ) . '");document.location=\'?do=login' . $redir . '\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
}
// ------------------------------------------------------------------------------------------
// Token management for XSRF protection
// Token should be used in any form which acts on data (create,update,delete,import...).
if ( ! isset ( $_SESSION [ 'tokens' ])) $_SESSION [ 'tokens' ] = array (); // Token are attached to the session.
2016-06-09 20:04:02 +02:00
/**
* Daily RSS feed : 1 RSS entry per day giving all the links on that day .
* Gives the last 7 days ( which have links ) .
* This RSS feed cannot be filtered .
*
2018-02-17 01:46:27 +01:00
* @ param ConfigManager $conf Configuration Manager instance
* @ param LoginManager $loginManager LoginManager instance
2016-06-09 20:04:02 +02:00
*/
2018-02-17 01:46:27 +01:00
function showDailyRSS ( $conf , $loginManager ) {
2013-02-26 10:09:41 +01:00
// Cache system
2016-05-10 23:31:41 +02:00
$query = $_SERVER [ 'QUERY_STRING' ];
2015-07-09 22:14:39 +02:00
$cache = new CachedPage (
2016-05-18 21:48:24 +02:00
$conf -> get ( 'config.PAGE_CACHE' ),
2015-09-06 21:31:37 +02:00
page_url ( $_SERVER ),
2018-02-17 01:46:27 +01:00
startsWith ( $query , 'do=dailyrss' ) && ! $loginManager -> isLoggedIn ()
2015-07-09 22:14:39 +02:00
);
2015-07-10 15:41:59 +02:00
$cached = $cache -> cachedVersion ();
if ( ! empty ( $cached )) {
echo $cached ;
exit ;
}
2015-06-23 22:34:07 +02:00
2015-07-10 15:41:59 +02:00
// If cached was not found (or not usable), then read the database and build the response:
// Read links from database (and filter private links if used it not logged in).
2015-06-23 22:34:07 +02:00
$LINKSDB = new LinkDB (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.datastore' ),
2018-02-17 01:46:27 +01:00
$loginManager -> isLoggedIn (),
2016-06-11 09:08:02 +02:00
$conf -> get ( 'privacy.hide_public_links' ),
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
2015-06-23 22:34:07 +02:00
);
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
/* Some Shaarlies may have very few links , so we need to look
2016-11-28 16:16:44 +01:00
back in time until we have enough days ( $nb_of_days ) .
2013-02-26 10:09:41 +01:00
*/
2015-07-10 15:41:59 +02:00
$nb_of_days = 7 ; // We take 7 days.
2016-05-18 21:48:24 +02:00
$today = date ( 'Ymd' );
2015-07-10 15:41:59 +02:00
$days = array ();
2016-11-28 18:24:15 +01:00
foreach ( $LINKSDB as $link ) {
$day = $link [ 'created' ] -> format ( 'Ymd' ); // Extract day (without time)
2016-11-28 16:16:44 +01:00
if ( strcmp ( $day , $today ) < 0 ) {
2015-07-10 15:41:59 +02:00
if ( empty ( $days [ $day ])) {
$days [ $day ] = array ();
}
2016-11-28 18:24:15 +01:00
$days [ $day ][] = $link ;
2015-07-10 15:41:59 +02:00
}
if ( count ( $days ) > $nb_of_days ) {
break ; // Have we collected enough days?
2013-02-26 10:09:41 +01:00
}
}
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
// Build the RSS feed.
header ( 'Content-Type: application/rss+xml; charset=utf-8' );
2015-09-06 21:31:37 +02:00
$pageaddr = escape ( index_url ( $_SERVER ));
2013-02-26 10:09:41 +01:00
echo '<?xml version="1.0" encoding="UTF-8"?><rss version="2.0">' ;
2015-07-10 15:41:59 +02:00
echo '<channel>' ;
2016-05-29 16:10:32 +02:00
echo '<title>Daily - ' . $conf -> get ( 'general.title' ) . '</title>' ;
2015-07-10 15:41:59 +02:00
echo '<link>' . $pageaddr . '</link>' ;
echo '<description>Daily shared links</description>' ;
echo '<language>en-en</language>' ;
echo '<copyright>' . $pageaddr . '</copyright>' . PHP_EOL ;
// For each day.
2016-11-28 18:24:15 +01:00
foreach ( $days as $day => $links ) {
2016-02-17 22:46:50 +01:00
$dayDate = DateTime :: createFromFormat ( LinkDB :: LINK_DATE_FORMAT , $day . '_000000' );
2015-09-06 21:31:37 +02:00
$absurl = escape ( index_url ( $_SERVER ) . '?do=daily&day=' . $day ); // Absolute URL of the corresponding "Daily" page.
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
// We pre-format some fields for proper output.
2016-11-28 18:24:15 +01:00
foreach ( $links as & $link ) {
2017-11-07 20:23:58 +01:00
$link [ 'formatedDescription' ] = format_description (
$link [ 'description' ],
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
);
2016-11-28 18:24:15 +01:00
$link [ 'timestamp' ] = $link [ 'created' ] -> getTimestamp ();
if ( startsWith ( $link [ 'url' ], '?' )) {
$link [ 'url' ] = index_url ( $_SERVER ) . $link [ 'url' ]; // make permalink URL absolute
2015-07-10 15:41:59 +02:00
}
2013-02-26 10:09:41 +01:00
}
2015-07-10 15:41:59 +02:00
2013-02-26 10:09:41 +01:00
// Then build the HTML for this day:
2013-03-04 10:18:39 +01:00
$tpl = new RainTPL ;
2016-05-29 16:10:32 +02:00
$tpl -> assign ( 'title' , $conf -> get ( 'general.title' ));
2016-02-17 22:46:50 +01:00
$tpl -> assign ( 'daydate' , $dayDate -> getTimestamp ());
2015-07-10 15:41:59 +02:00
$tpl -> assign ( 'absurl' , $absurl );
$tpl -> assign ( 'links' , $links );
2016-02-17 22:46:50 +01:00
$tpl -> assign ( 'rssdate' , escape ( $dayDate -> format ( DateTime :: RSS )));
2016-06-11 09:08:02 +02:00
$tpl -> assign ( 'hide_timestamps' , $conf -> get ( 'privacy.hide_timestamps' , false ));
2018-07-29 17:40:05 +02:00
$tpl -> assign ( 'index_url' , $pageaddr );
2017-01-05 19:20:41 +01:00
$html = $tpl -> draw ( 'dailyrss' , true );
2013-02-26 10:09:41 +01:00
2015-07-10 15:41:59 +02:00
echo $html . PHP_EOL ;
2013-03-04 10:18:39 +01:00
}
2015-09-06 21:31:37 +02:00
echo '</channel></rss><!-- Cached version of ' . escape ( page_url ( $_SERVER )) . ' -->' ;
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
$cache -> cache ( ob_get_contents ());
ob_end_flush ();
exit ;
}
2015-12-07 11:25:11 +01:00
/**
* Show the 'Daily' page .
*
2016-06-09 20:04:02 +02:00
* @ param PageBuilder $pageBuilder Template engine wrapper .
* @ param LinkDB $LINKSDB LinkDB instance .
* @ param ConfigManager $conf Configuration Manager instance .
2018-04-18 23:45:05 +02:00
* @ param PluginManager $pluginManager Plugin Manager instance .
* @ param LoginManager $loginManager Login Manager instance
2015-12-07 11:25:11 +01:00
*/
2018-04-18 23:45:05 +02:00
function showDaily ( $pageBuilder , $LINKSDB , $conf , $pluginManager , $loginManager )
2013-02-26 10:09:41 +01:00
{
2017-08-27 19:36:48 +02:00
$day = date ( 'Ymd' , strtotime ( '-1 day' )); // Yesterday, in format YYYYMMDD.
if ( isset ( $_GET [ 'day' ])) {
$day = $_GET [ 'day' ];
}
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
$days = $LINKSDB -> days ();
2017-08-27 19:36:48 +02:00
$i = array_search ( $day , $days );
if ( $i === false && count ( $days )) {
// no links for day, but at least one day with links
$i = count ( $days ) - 1 ;
$day = $days [ $i ];
2013-02-26 10:09:41 +01:00
}
2017-08-27 19:36:48 +02:00
$previousday = '' ;
$nextday = '' ;
2013-02-26 10:09:41 +01:00
2017-08-27 19:36:48 +02:00
if ( $i !== false ) {
if ( $i >= 1 ) {
$previousday = $days [ $i - 1 ];
}
if ( $i < count ( $days ) - 1 ) {
$nextday = $days [ $i + 1 ];
}
}
2015-06-27 14:57:44 +02:00
try {
2016-03-21 21:40:49 +01:00
$linksToDisplay = $LINKSDB -> filterDay ( $day );
2015-06-27 14:57:44 +02:00
} catch ( Exception $exc ) {
error_log ( $exc );
2015-07-11 01:29:12 +02:00
$linksToDisplay = array ();
2015-06-27 14:57:44 +02:00
}
2013-02-26 10:09:41 +01:00
// We pre-format some fields for proper output.
2017-08-27 19:36:48 +02:00
foreach ( $linksToDisplay as $key => $link ) {
2013-03-01 17:09:52 +01:00
$taglist = explode ( ' ' , $link [ 'tags' ]);
uasort ( $taglist , 'strcasecmp' );
$linksToDisplay [ $key ][ 'taglist' ] = $taglist ;
2017-11-07 20:23:58 +01:00
$linksToDisplay [ $key ][ 'formatedDescription' ] = format_description (
$link [ 'description' ],
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
);
2016-11-28 16:16:44 +01:00
$linksToDisplay [ $key ][ 'timestamp' ] = $link [ 'created' ] -> getTimestamp ();
2013-02-26 10:09:41 +01:00
}
2013-03-04 10:18:39 +01:00
2018-02-01 13:16:58 +01:00
$dayDate = DateTime :: createFromFormat ( LinkDB :: LINK_DATE_FORMAT , $day . '_000000' );
$data = array (
'pagetitle' => $conf -> get ( 'general.title' ) . ' - ' . format_date ( $dayDate , false ),
'linksToDisplay' => $linksToDisplay ,
'day' => $dayDate -> getTimestamp (),
'dayDate' => $dayDate ,
'previousday' => $previousday ,
'nextday' => $nextday ,
);
/* Hook is called before column construction so that plugins don ' t have
to deal with columns . */
2018-02-17 01:46:27 +01:00
$pluginManager -> executeHooks ( 'render_daily' , $data , array ( 'loggedin' => $loginManager -> isLoggedIn ()));
2018-02-01 13:16:58 +01:00
2013-02-26 10:09:41 +01:00
/* We need to spread the articles on 3 columns .
2014-08-11 20:41:50 +02:00
I did not want to use a JavaScript lib like http :// masonry . desandro . com /
2013-03-04 10:18:39 +01:00
so I manually spread entries with a simple method : I roughly evaluate the
2013-02-26 10:09:41 +01:00
height of a div according to title and description length .
*/
2017-08-27 19:36:48 +02:00
$columns = array ( array (), array (), array ()); // Entries to display, for each column.
$fill = array ( 0 , 0 , 0 ); // Rough estimate of columns fill.
2018-02-01 13:16:58 +01:00
foreach ( $data [ 'linksToDisplay' ] as $key => $link ) {
2013-02-26 10:09:41 +01:00
// Roughly estimate length of entry (by counting characters)
// Title: 30 chars = 1 line. 1 line is 30 pixels height.
// Description: 836 characters gives roughly 342 pixel height.
2014-08-11 20:41:50 +02:00
// This is not perfect, but it's usually OK.
2017-08-27 19:36:48 +02:00
$length = strlen ( $link [ 'title' ]) + ( 342 * strlen ( $link [ 'description' ])) / 836 ;
if ( $link [ 'thumbnail' ]) {
$length += 100 ; // 1 thumbnails roughly takes 100 pixels height.
}
2013-02-26 10:09:41 +01:00
// Then put in column which is the less filled:
2017-08-27 19:36:48 +02:00
$smallest = min ( $fill ); // find smallest value in array.
$index = array_search ( $smallest , $fill ); // find index of this smallest value.
array_push ( $columns [ $index ], $link ); // Put entry in this column.
$fill [ $index ] += $length ;
2013-02-26 10:09:41 +01:00
}
2015-12-07 11:25:11 +01:00
2018-02-01 13:16:58 +01:00
$data [ 'cols' ] = $columns ;
2015-07-15 11:42:15 +02:00
foreach ( $data as $key => $value ) {
2015-12-07 11:25:11 +01:00
$pageBuilder -> assign ( $key , $value );
2015-07-15 11:42:15 +02:00
}
2018-01-24 19:38:03 +01:00
$pageBuilder -> assign ( 'pagetitle' , t ( 'Daily' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2015-12-07 11:25:11 +01:00
$pageBuilder -> renderPage ( 'daily' );
2013-02-26 10:09:41 +01:00
exit ;
}
2016-06-09 20:04:02 +02:00
/**
* Renders the linklist
*
* @ param pageBuilder $PAGE pageBuilder instance .
* @ param LinkDB $LINKSDB LinkDB instance .
* @ param ConfigManager $conf Configuration Manager instance .
* @ param PluginManager $pluginManager Plugin Manager instance .
*/
2018-02-17 01:46:27 +01:00
function showLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager , $loginManager ) {
buildLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager , $loginManager );
2015-07-15 11:42:15 +02:00
$PAGE -> renderPage ( 'linklist' );
}
2016-06-09 20:04:02 +02:00
/**
* Render HTML page ( according to URL parameters and user rights )
*
2017-10-22 18:44:46 +02:00
* @ param ConfigManager $conf Configuration Manager instance .
* @ param PluginManager $pluginManager Plugin Manager instance ,
* @ param LinkDB $LINKSDB
* @ param History $history instance
* @ param SessionManager $sessionManager SessionManager instance
2017-10-25 23:03:31 +02:00
* @ param LoginManager $loginManager LoginManager instance
2016-06-09 20:04:02 +02:00
*/
2017-10-25 23:03:31 +02:00
function renderPage ( $conf , $pluginManager , $LINKSDB , $history , $sessionManager , $loginManager )
2013-02-26 10:09:41 +01:00
{
2016-01-12 19:50:48 +01:00
$updater = new Updater (
2016-06-11 09:08:02 +02:00
read_updates_file ( $conf -> get ( 'resource.updates' )),
2016-01-12 19:50:48 +01:00
$LINKSDB ,
2016-06-09 20:04:02 +02:00
$conf ,
2018-06-08 12:50:49 +02:00
$loginManager -> isLoggedIn (),
$_SESSION
2016-01-12 19:50:48 +01:00
);
try {
$newUpdates = $updater -> update ();
if ( ! empty ( $newUpdates )) {
write_updates_file (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.updates' ),
2016-01-12 19:50:48 +01:00
$updater -> getDoneUpdates ()
);
}
}
catch ( Exception $e ) {
die ( $e -> getMessage ());
}
2018-06-08 12:50:49 +02:00
$PAGE = new PageBuilder ( $conf , $_SESSION , $LINKSDB , $sessionManager -> generateToken (), $loginManager -> isLoggedIn ());
2016-05-11 00:05:22 +02:00
$PAGE -> assign ( 'linkcount' , count ( $LINKSDB ));
$PAGE -> assign ( 'privateLinkcount' , count_private ( $LINKSDB ));
2016-10-14 13:22:58 +02:00
$PAGE -> assign ( 'plugin_errors' , $pluginManager -> getErrors ());
2015-07-15 11:42:15 +02:00
// Determine which page will be rendered.
$query = ( isset ( $_SERVER [ 'QUERY_STRING' ])) ? $_SERVER [ 'QUERY_STRING' ] : '' ;
2018-02-17 01:46:27 +01:00
$targetPage = Router :: findPage ( $query , $_GET , $loginManager -> isLoggedIn ());
2015-07-15 11:42:15 +02:00
2017-08-31 00:39:15 +02:00
if (
// if the user isn't logged in
2018-02-17 01:46:27 +01:00
! $loginManager -> isLoggedIn () &&
2017-08-31 00:39:15 +02:00
// and Shaarli doesn't have public content...
$conf -> get ( 'privacy.hide_public_links' ) &&
// and is configured to enforce the login
$conf -> get ( 'privacy.force_login' ) &&
// and the current page isn't already the login page
$targetPage !== Router :: $PAGE_LOGIN &&
// and the user is not requesting a feed (which would lead to a different content-type as expected)
$targetPage !== Router :: $PAGE_FEED_ATOM &&
$targetPage !== Router :: $PAGE_FEED_RSS
) {
// force current page to be the login page
$targetPage = Router :: $PAGE_LOGIN ;
}
2015-07-15 11:42:15 +02:00
// Call plugin hooks for header, footer and includes, specifying which page will be rendered.
// Then assign generated data to RainTPL.
$common_hooks = array (
2016-02-10 15:40:11 +01:00
'includes' ,
2015-07-15 11:42:15 +02:00
'header' ,
'footer' ,
);
2016-06-09 20:04:02 +02:00
2015-07-15 11:42:15 +02:00
foreach ( $common_hooks as $name ) {
$plugin_data = array ();
$pluginManager -> executeHooks ( 'render_' . $name , $plugin_data ,
array (
'target' => $targetPage ,
2018-02-17 01:46:27 +01:00
'loggedin' => $loginManager -> isLoggedIn ()
2015-07-15 11:42:15 +02:00
)
);
$PAGE -> assign ( 'plugins_' . $name , $plugin_data );
}
2013-02-26 10:09:41 +01:00
// -------- Display login form.
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_LOGIN )
2013-02-26 10:09:41 +01:00
{
2016-06-11 09:08:02 +02:00
if ( $conf -> get ( 'security.open_shaarli' )) { header ( 'Location: ?' ); exit ; } // No need to login for open Shaarli
2016-05-06 20:03:10 +02:00
if ( isset ( $_GET [ 'username' ])) {
$PAGE -> assign ( 'username' , escape ( $_GET [ 'username' ]));
}
2015-06-11 13:53:27 +02:00
$PAGE -> assign ( 'returnurl' ,( isset ( $_SERVER [ 'HTTP_REFERER' ]) ? escape ( $_SERVER [ 'HTTP_REFERER' ]) : '' ));
2017-08-26 09:27:10 +02:00
// add default state of the 'remember me' checkbox
$PAGE -> assign ( 'remember_user_default' , $conf -> get ( 'privacy.remember_user_default' ));
2017-10-25 23:03:31 +02:00
$PAGE -> assign ( 'user_can_login' , $loginManager -> canLogin ( $_SERVER ));
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Login' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'loginform' );
exit ;
}
// -------- User wants to logout.
2016-05-10 23:31:41 +02:00
if ( isset ( $_SERVER [ 'QUERY_STRING' ]) && startsWith ( $_SERVER [ 'QUERY_STRING' ], 'do=logout' ))
2013-02-26 10:09:41 +01:00
{
2016-06-11 09:08:02 +02:00
invalidateCaches ( $conf -> get ( 'resource.page_cache' ));
2018-04-27 23:17:38 +02:00
$sessionManager -> logout ();
2018-05-06 17:06:36 +02:00
setcookie ( LoginManager :: $STAY_SIGNED_IN_COOKIE , 'false' , 0 , WEB_PATH );
2013-02-26 10:09:41 +01:00
header ( 'Location: ?' );
exit ;
}
// -------- Picture wall
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_PICWALL )
2013-02-26 10:09:41 +01:00
{
2018-07-05 20:29:55 +02:00
$PAGE -> assign ( 'pagetitle' , t ( 'Picture wall' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
if ( ! $conf -> get ( 'thumbnails.mode' , Thumbnailer :: MODE_NONE ) === Thumbnailer :: MODE_NONE ) {
$PAGE -> assign ( 'linksToDisplay' , []);
2017-11-11 14:01:21 +01:00
$PAGE -> renderPage ( 'picwall' );
2016-11-09 18:57:02 +01:00
exit ;
}
2014-08-11 20:41:50 +02:00
// Optionally filter the results:
2016-03-21 21:40:49 +01:00
$links = $LINKSDB -> filterSearch ( $_GET );
2015-12-27 10:08:20 +01:00
$linksToDisplay = array ();
2013-02-26 10:09:41 +01:00
// Get only links which have a thumbnail.
2018-06-08 12:50:49 +02:00
// Note: we do not retrieve thumbnails here, the request is too heavy.
2017-11-11 14:01:21 +01:00
foreach ( $links as $key => $link )
2013-02-26 10:09:41 +01:00
{
2016-11-09 18:57:02 +01:00
if ( isset ( $link [ 'thumbnail' ]) && $link [ 'thumbnail' ] !== false ) {
$linksToDisplay [] = $link ; // Add to array.
2013-02-26 10:09:41 +01:00
}
}
2015-07-08 17:11:06 +02:00
2015-07-15 11:42:15 +02:00
$data = array (
'linksToDisplay' => $linksToDisplay ,
);
2018-02-17 01:46:27 +01:00
$pluginManager -> executeHooks ( 'render_picwall' , $data , array ( 'loggedin' => $loginManager -> isLoggedIn ()));
2015-07-15 11:42:15 +02:00
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2018-07-17 13:13:26 +02:00
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'picwall' );
exit ;
}
// -------- Tag cloud
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_TAGCLOUD )
2013-02-26 10:09:41 +01:00
{
2017-12-16 12:36:59 +01:00
$visibility = ! empty ( $_SESSION [ 'visibility' ]) ? $_SESSION [ 'visibility' ] : '' ;
2017-03-25 15:59:01 +01:00
$filteringTags = isset ( $_GET [ 'searchtags' ]) ? explode ( ' ' , $_GET [ 'searchtags' ]) : [];
2017-05-18 20:28:11 +02:00
$tags = $LINKSDB -> linksCountPerTag ( $filteringTags , $visibility );
2015-06-09 14:58:54 +02:00
2013-02-26 10:09:41 +01:00
// We sort tags alphabetically, then choose a font size according to count.
// First, find max value.
2016-02-05 16:10:26 +01:00
$maxcount = 0 ;
foreach ( $tags as $value ) {
$maxcount = max ( $maxcount , $value );
}
2017-08-25 19:25:00 +02:00
alphabetical_sort ( $tags , false , true );
2016-02-05 16:10:26 +01:00
2016-03-29 19:30:22 +02:00
$tagList = array ();
foreach ( $tags as $key => $value ) {
2017-06-02 17:58:26 +02:00
if ( in_array ( $key , $filteringTags )) {
continue ;
}
2016-03-29 19:30:22 +02:00
// Tag font size scaling:
// default 15 and 30 logarithm bases affect scaling,
// 22 and 6 are arbitrary font sizes for max and min sizes.
$size = log ( $value , 15 ) / log ( $maxcount , 30 ) * 2.2 + 0.8 ;
$tagList [ $key ] = array (
'count' => $value ,
'size' => number_format ( $size , 2 , '.' , '' ),
);
2013-02-26 10:09:41 +01:00
}
2015-07-15 11:42:15 +02:00
2018-01-24 19:38:03 +01:00
$searchTags = implode ( ' ' , escape ( $filteringTags ));
2015-07-15 11:42:15 +02:00
$data = array (
2018-01-24 19:38:03 +01:00
'search_tags' => $searchTags ,
2015-07-15 11:42:15 +02:00
'tags' => $tagList ,
);
2018-02-17 01:46:27 +01:00
$pluginManager -> executeHooks ( 'render_tagcloud' , $data , array ( 'loggedin' => $loginManager -> isLoggedIn ()));
2015-07-15 11:42:15 +02:00
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2018-01-24 19:38:03 +01:00
$searchTags = ! empty ( $searchTags ) ? $searchTags . ' - ' : '' ;
$PAGE -> assign ( 'pagetitle' , $searchTags . t ( 'Tag cloud' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2017-03-25 15:57:30 +01:00
$PAGE -> renderPage ( 'tag.cloud' );
2013-03-04 10:18:39 +01:00
exit ;
2013-02-26 10:09:41 +01:00
}
2017-06-02 17:58:26 +02:00
// -------- Tag list
2017-03-25 15:59:01 +01:00
if ( $targetPage == Router :: $PAGE_TAGLIST )
{
2017-12-16 12:36:59 +01:00
$visibility = ! empty ( $_SESSION [ 'visibility' ]) ? $_SESSION [ 'visibility' ] : '' ;
2017-03-25 15:59:01 +01:00
$filteringTags = isset ( $_GET [ 'searchtags' ]) ? explode ( ' ' , $_GET [ 'searchtags' ]) : [];
$tags = $LINKSDB -> linksCountPerTag ( $filteringTags , $visibility );
2017-06-02 17:58:26 +02:00
foreach ( $filteringTags as $tag ) {
if ( array_key_exists ( $tag , $tags )) {
unset ( $tags [ $tag ]);
}
}
2017-03-25 15:59:01 +01:00
if ( ! empty ( $_GET [ 'sort' ]) && $_GET [ 'sort' ] === 'alpha' ) {
alphabetical_sort ( $tags , false , true );
}
2018-01-24 19:38:03 +01:00
$searchTags = implode ( ' ' , escape ( $filteringTags ));
2017-03-25 15:59:01 +01:00
$data = [
2018-01-24 19:38:03 +01:00
'search_tags' => $searchTags ,
2017-03-25 15:59:01 +01:00
'tags' => $tags ,
];
2018-02-17 01:46:27 +01:00
$pluginManager -> executeHooks ( 'render_taglist' , $data , [ 'loggedin' => $loginManager -> isLoggedIn ()]);
2017-03-25 15:59:01 +01:00
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2018-01-24 19:38:03 +01:00
$searchTags = ! empty ( $searchTags ) ? $searchTags . ' - ' : '' ;
$PAGE -> assign ( 'pagetitle' , $searchTags . t ( 'Tag list' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2017-03-25 15:59:01 +01:00
$PAGE -> renderPage ( 'tag.list' );
exit ;
}
2015-12-07 11:25:11 +01:00
// Daily page.
if ( $targetPage == Router :: $PAGE_DAILY ) {
2018-04-18 23:45:05 +02:00
showDaily ( $PAGE , $LINKSDB , $conf , $pluginManager , $loginManager );
2015-12-07 11:25:11 +01:00
}
2016-03-12 16:08:01 +01:00
// ATOM and RSS feed.
if ( $targetPage == Router :: $PAGE_FEED_ATOM || $targetPage == Router :: $PAGE_FEED_RSS ) {
$feedType = $targetPage == Router :: $PAGE_FEED_RSS ? FeedBuilder :: $FEED_RSS : FeedBuilder :: $FEED_ATOM ;
header ( 'Content-Type: application/' . $feedType . '+xml; charset=utf-8' );
// Cache system
$query = $_SERVER [ 'QUERY_STRING' ];
$cache = new CachedPage (
2016-06-11 09:08:02 +02:00
$conf -> get ( 'resource.page_cache' ),
2016-03-12 16:08:01 +01:00
page_url ( $_SERVER ),
2018-02-17 01:46:27 +01:00
startsWith ( $query , 'do=' . $targetPage ) && ! $loginManager -> isLoggedIn ()
2016-03-12 16:08:01 +01:00
);
$cached = $cache -> cachedVersion ();
2016-03-26 16:59:22 +01:00
if ( ! empty ( $cached )) {
2016-03-12 16:08:01 +01:00
echo $cached ;
exit ;
}
2016-03-10 19:01:30 +01:00
2016-03-12 16:08:01 +01:00
// Generate data.
2018-02-17 01:46:27 +01:00
$feedGenerator = new FeedBuilder ( $LINKSDB , $feedType , $_SERVER , $_GET , $loginManager -> isLoggedIn ());
2016-03-12 16:08:01 +01:00
$feedGenerator -> setLocale ( strtolower ( setlocale ( LC_COLLATE , 0 )));
2018-02-17 01:46:27 +01:00
$feedGenerator -> setHideDates ( $conf -> get ( 'privacy.hide_timestamps' ) && ! $loginManager -> isLoggedIn ());
2016-06-11 09:08:02 +02:00
$feedGenerator -> setUsePermalinks ( isset ( $_GET [ 'permalinks' ]) || ! $conf -> get ( 'feed.rss_permalinks' ));
2016-03-12 16:08:01 +01:00
$data = $feedGenerator -> buildData ();
// Process plugin hook.
$pluginManager -> executeHooks ( 'render_feed' , $data , array (
2018-02-17 01:46:27 +01:00
'loggedin' => $loginManager -> isLoggedIn (),
2016-03-12 16:08:01 +01:00
'target' => $targetPage ,
));
// Render the template.
$PAGE -> assignAll ( $data );
$PAGE -> renderPage ( 'feed.' . $feedType );
$cache -> cache ( ob_get_contents ());
ob_end_flush ();
exit ;
2016-03-12 14:38:06 +01:00
}
2016-12-15 10:13:00 +01:00
// Display opensearch plugin (XML)
2015-11-13 19:32:35 +01:00
if ( $targetPage == Router :: $PAGE_OPENSEARCH ) {
header ( 'Content-Type: application/xml; charset=utf-8' );
$PAGE -> assign ( 'serverurl' , index_url ( $_SERVER ));
$PAGE -> renderPage ( 'opensearch' );
exit ;
}
2013-02-26 10:09:41 +01:00
// -------- User clicks on a tag in a link: The tag is added to the list of searched tags (searchtags=...)
if ( isset ( $_GET [ 'addtag' ]))
{
// Get previous URL (http_referer) and add the tag to the searchtags parameters in query.
if ( empty ( $_SERVER [ 'HTTP_REFERER' ])) { header ( 'Location: ?searchtags=' . urlencode ( $_GET [ 'addtag' ])); exit ; } // In case browser does not send HTTP_REFERER
parse_str ( parse_url ( $_SERVER [ 'HTTP_REFERER' ], PHP_URL_QUERY ), $params );
2014-11-20 20:04:24 +01:00
2015-07-06 10:22:00 +02:00
// Prevent redirection loop
if ( isset ( $params [ 'addtag' ])) {
unset ( $params [ 'addtag' ]);
}
2014-11-20 20:04:24 +01:00
// Check if this tag is already in the search query and ignore it if it is.
// Each tag is always separated by a space
2015-07-12 11:36:42 +02:00
if ( isset ( $params [ 'searchtags' ])) {
$current_tags = explode ( ' ' , $params [ 'searchtags' ]);
} else {
$current_tags = array ();
}
2014-11-20 20:04:24 +01:00
$addtag = true ;
foreach ( $current_tags as $value ) {
if ( $value === $_GET [ 'addtag' ]) {
$addtag = false ;
break ;
}
}
// Append the tag if necessary
if ( empty ( $params [ 'searchtags' ])) {
$params [ 'searchtags' ] = trim ( $_GET [ 'addtag' ]);
}
2018-02-28 22:34:40 +01:00
elseif ( $addtag ) {
2014-11-20 20:04:24 +01:00
$params [ 'searchtags' ] = trim ( $params [ 'searchtags' ]) . ' ' . trim ( $_GET [ 'addtag' ]);
}
2013-02-26 10:09:41 +01:00
unset ( $params [ 'page' ]); // We also remove page (keeping the same page has no sense, since the results are different)
header ( 'Location: ?' . http_build_query ( $params ));
exit ;
}
// -------- User clicks on a tag in result count: Remove the tag from the list of searched tags (searchtags=...)
2015-07-06 10:22:00 +02:00
if ( isset ( $_GET [ 'removetag' ])) {
2013-02-26 10:09:41 +01:00
// Get previous URL (http_referer) and remove the tag from the searchtags parameters in query.
2015-07-06 10:22:00 +02:00
if ( empty ( $_SERVER [ 'HTTP_REFERER' ])) {
header ( 'Location: ?' );
exit ;
}
// In case browser does not send HTTP_REFERER
parse_str ( parse_url ( $_SERVER [ 'HTTP_REFERER' ], PHP_URL_QUERY ), $params );
// Prevent redirection loop
if ( isset ( $params [ 'removetag' ])) {
unset ( $params [ 'removetag' ]);
}
if ( isset ( $params [ 'searchtags' ])) {
2015-12-27 10:08:20 +01:00
$tags = explode ( ' ' , $params [ 'searchtags' ]);
2016-01-03 15:29:15 +01:00
// Remove value from array $tags.
$tags = array_diff ( $tags , array ( $_GET [ 'removetag' ]));
$params [ 'searchtags' ] = implode ( ' ' , $tags );
if ( empty ( $params [ 'searchtags' ])) {
2015-07-06 10:22:00 +02:00
unset ( $params [ 'searchtags' ]);
}
2016-01-03 15:29:15 +01:00
2013-02-26 10:09:41 +01:00
unset ( $params [ 'page' ]); // We also remove page (keeping the same page has no sense, since the results are different)
}
header ( 'Location: ?' . http_build_query ( $params ));
exit ;
}
// -------- User wants to change the number of links per page (linksperpage=...)
2015-07-06 10:22:00 +02:00
if ( isset ( $_GET [ 'linksperpage' ])) {
if ( is_numeric ( $_GET [ 'linksperpage' ])) {
$_SESSION [ 'LINKS_PER_PAGE' ] = abs ( intval ( $_GET [ 'linksperpage' ]));
}
2017-01-15 17:58:19 +01:00
if ( ! empty ( $_SERVER [ 'HTTP_REFERER' ])) {
$location = generateLocation ( $_SERVER [ 'HTTP_REFERER' ], $_SERVER [ 'HTTP_HOST' ], array ( 'linksperpage' ));
} else {
$location = '?' ;
}
header ( 'Location: ' . $location );
2013-02-26 10:09:41 +01:00
exit ;
}
2013-03-04 10:18:39 +01:00
2013-02-26 10:09:41 +01:00
// -------- User wants to see only private links (toggle)
2017-12-16 12:36:59 +01:00
if ( isset ( $_GET [ 'visibility' ])) {
if ( $_GET [ 'visibility' ] === 'private' ) {
2018-01-24 18:46:31 +01:00
// Visibility not set or not already private, set private, otherwise reset it
if ( empty ( $_SESSION [ 'visibility' ]) || $_SESSION [ 'visibility' ] !== 'private' ) {
// See only private links
$_SESSION [ 'visibility' ] = 'private' ;
} else {
unset ( $_SESSION [ 'visibility' ]);
}
2018-02-28 22:34:40 +01:00
} elseif ( $_GET [ 'visibility' ] === 'public' ) {
2018-01-24 18:46:31 +01:00
if ( empty ( $_SESSION [ 'visibility' ]) || $_SESSION [ 'visibility' ] !== 'public' ) {
// See only public links
$_SESSION [ 'visibility' ] = 'public' ;
} else {
unset ( $_SESSION [ 'visibility' ]);
}
2013-02-26 10:09:41 +01:00
}
2015-07-06 10:22:00 +02:00
2017-01-15 17:58:19 +01:00
if ( ! empty ( $_SERVER [ 'HTTP_REFERER' ])) {
2017-12-16 12:36:59 +01:00
$location = generateLocation ( $_SERVER [ 'HTTP_REFERER' ], $_SERVER [ 'HTTP_HOST' ], array ( 'visibility' ));
2017-01-15 17:58:19 +01:00
} else {
$location = '?' ;
}
header ( 'Location: ' . $location );
2013-02-26 10:09:41 +01:00
exit ;
}
2017-06-01 17:55:26 +02:00
// -------- User wants to see only untagged links (toggle)
if ( isset ( $_GET [ 'untaggedonly' ])) {
2017-08-19 17:41:56 +02:00
$_SESSION [ 'untaggedonly' ] = empty ( $_SESSION [ 'untaggedonly' ]);
2017-06-01 17:55:26 +02:00
if ( ! empty ( $_SERVER [ 'HTTP_REFERER' ])) {
$location = generateLocation ( $_SERVER [ 'HTTP_REFERER' ], $_SERVER [ 'HTTP_HOST' ], array ( 'untaggedonly' ));
} else {
$location = '?' ;
}
header ( 'Location: ' . $location );
exit ;
}
2013-02-26 10:09:41 +01:00
// -------- Handle other actions allowed for non-logged in users:
2018-02-17 01:46:27 +01:00
if ( ! $loginManager -> isLoggedIn ())
2013-02-26 10:09:41 +01:00
{
2014-08-11 20:41:50 +02:00
// User tries to post new link but is not logged in:
2013-02-26 10:09:41 +01:00
// Show login screen, then redirect to ?post=...
if ( isset ( $_GET [ 'post' ]))
{
2017-03-25 19:41:01 +01:00
header ( // Redirect to login page, then back to post link.
'Location: ?do=login&post=' . urlencode ( $_GET [ 'post' ]) .
( ! empty ( $_GET [ 'title' ]) ? '&title=' . urlencode ( $_GET [ 'title' ]) : '' ) .
( ! empty ( $_GET [ 'description' ]) ? '&description=' . urlencode ( $_GET [ 'description' ]) : '' ) .
( ! empty ( $_GET [ 'tags' ]) ? '&tags=' . urlencode ( $_GET [ 'tags' ]) : '' ) .
( ! empty ( $_GET [ 'source' ]) ? '&source=' . urlencode ( $_GET [ 'source' ]) : '' )
);
2013-02-26 10:09:41 +01:00
exit ;
}
2014-11-21 18:31:31 +01:00
2018-02-17 01:46:27 +01:00
showLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager , $loginManager );
2015-07-29 15:32:41 +02:00
if ( isset ( $_GET [ 'edit_link' ])) {
header ( 'Location: ?do=login&edit_link=' . escape ( $_GET [ 'edit_link' ]));
exit ;
}
2014-08-11 20:41:50 +02:00
exit ; // Never remove this one! All operations below are reserved for logged in user.
2013-02-26 10:09:41 +01:00
}
// -------- All other functions are reserved for the registered user:
// -------- Display the Tools menu if requested (import/export/bookmarklet...)
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_TOOLS )
2013-02-26 10:09:41 +01:00
{
2017-08-25 19:47:57 +02:00
$data = [
2015-07-15 11:42:15 +02:00
'pageabsaddr' => index_url ( $_SERVER ),
2017-08-25 19:47:57 +02:00
'sslenabled' => is_https ( $_SERVER ),
];
2015-07-15 11:42:15 +02:00
$pluginManager -> executeHooks ( 'render_tools' , $data );
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Tools' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'tools' );
exit ;
}
// -------- User wants to change his/her password.
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_CHANGEPASSWORD )
2013-02-26 10:09:41 +01:00
{
2016-06-11 09:08:02 +02:00
if ( $conf -> get ( 'security.open_shaarli' )) {
2017-05-09 18:12:15 +02:00
die ( t ( 'You are not supposed to change a password on an Open Shaarli.' ));
2016-05-18 21:48:24 +02:00
}
2013-02-26 10:09:41 +01:00
if ( ! empty ( $_POST [ 'setpassword' ]) && ! empty ( $_POST [ 'oldpassword' ]))
{
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) die ( t ( 'Wrong token.' )); // Go away!
2013-02-26 10:09:41 +01:00
// Make sure old password is correct.
2016-05-29 16:10:32 +02:00
$oldhash = sha1 ( $_POST [ 'oldpassword' ] . $conf -> get ( 'credentials.login' ) . $conf -> get ( 'credentials.salt' ));
2017-05-09 18:12:15 +02:00
if ( $oldhash != $conf -> get ( 'credentials.hash' )) {
echo '<script>alert("' . t ( 'The old password is not correct.' ) . '");document.location=\'?do=changepasswd\';</script>' ;
2017-10-22 18:44:46 +02:00
exit ;
2017-05-09 18:12:15 +02:00
}
2013-02-26 10:09:41 +01:00
// Save new password
2016-05-18 21:48:24 +02:00
// Salt renders rainbow-tables attacks useless.
2016-05-29 16:10:32 +02:00
$conf -> set ( 'credentials.salt' , sha1 ( uniqid ( '' , true ) . '_' . mt_rand ()));
$conf -> set ( 'credentials.hash' , sha1 ( $_POST [ 'setpassword' ] . $conf -> get ( 'credentials.login' ) . $conf -> get ( 'credentials.salt' )));
2015-06-29 12:23:00 +02:00
try {
2018-02-17 01:46:27 +01:00
$conf -> write ( $loginManager -> isLoggedIn ());
2015-06-29 12:23:00 +02:00
}
catch ( Exception $e ) {
error_log (
'ERROR while writing config file after changing password.' . PHP_EOL .
$e -> getMessage ()
);
// TODO: do not handle exceptions/errors in JS.
echo '<script>alert("' . $e -> getMessage () . '");document.location=\'?do=tools\';</script>' ;
exit ;
}
2017-05-09 18:12:15 +02:00
echo '<script>alert("' . t ( 'Your password has been changed' ) . '");document.location=\'?do=tools\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
else // show the change password form.
{
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Change password' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'changepassword' );
exit ;
}
}
// -------- User wants to change configuration
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_CONFIGURE )
2013-02-26 10:09:41 +01:00
{
if ( ! empty ( $_POST [ 'title' ]) )
{
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) {
2017-05-09 18:12:15 +02:00
die ( t ( 'Wrong token.' )); // Go away!
2016-05-03 20:09:24 +02:00
}
2013-02-26 10:09:41 +01:00
$tz = 'UTC' ;
2016-05-03 20:09:24 +02:00
if ( ! empty ( $_POST [ 'continent' ]) && ! empty ( $_POST [ 'city' ])
&& isTimeZoneValid ( $_POST [ 'continent' ], $_POST [ 'city' ])
) {
$tz = $_POST [ 'continent' ] . '/' . $_POST [ 'city' ];
}
2016-05-29 16:10:32 +02:00
$conf -> set ( 'general.timezone' , $tz );
2016-05-30 20:15:36 +02:00
$conf -> set ( 'general.title' , escape ( $_POST [ 'title' ]));
$conf -> set ( 'general.header_link' , escape ( $_POST [ 'titleLink' ]));
2016-12-07 11:58:25 +01:00
$conf -> set ( 'resource.theme' , escape ( $_POST [ 'theme' ]));
2016-05-29 16:10:32 +02:00
$conf -> set ( 'security.session_protection_disabled' , ! empty ( $_POST [ 'disablesessionprotection' ]));
2016-06-11 09:08:02 +02:00
$conf -> set ( 'privacy.default_private_links' , ! empty ( $_POST [ 'privateLinkByDefault' ]));
$conf -> set ( 'feed.rss_permalinks' , ! empty ( $_POST [ 'enableRssPermalinks' ]));
$conf -> set ( 'updates.check_updates' , ! empty ( $_POST [ 'updateCheck' ]));
$conf -> set ( 'privacy.hide_public_links' , ! empty ( $_POST [ 'hidePublicLinks' ]));
2017-03-22 19:58:22 +01:00
$conf -> set ( 'api.enabled' , ! empty ( $_POST [ 'enableApi' ]));
2016-07-31 10:46:17 +02:00
$conf -> set ( 'api.secret' , escape ( $_POST [ 'apiSecret' ]));
2017-05-25 13:26:05 +02:00
$conf -> set ( 'translation.language' , escape ( $_POST [ 'language' ]));
2018-07-05 20:29:55 +02:00
$thumbnailsMode = extension_loaded ( 'gd' ) ? $_POST [ 'enableThumbnails' ] : Thumbnailer :: MODE_NONE ;
2018-07-17 13:13:26 +02:00
if ( $thumbnailsMode !== Thumbnailer :: MODE_NONE
&& $thumbnailsMode !== $conf -> get ( 'thumbnails.mode' , Thumbnailer :: MODE_NONE )
) {
2018-06-08 12:50:49 +02:00
$_SESSION [ 'warnings' ][] = t (
2018-07-17 13:13:26 +02:00
'You have enabled or changed thumbnails mode. <a href="?do=thumbs_update">Please synchronize them</a>.'
2018-06-08 12:50:49 +02:00
);
}
2018-07-05 20:29:55 +02:00
$conf -> set ( 'thumbnails.mode' , $thumbnailsMode );
2017-05-25 13:26:05 +02:00
2015-06-29 12:23:00 +02:00
try {
2018-02-17 01:46:27 +01:00
$conf -> write ( $loginManager -> isLoggedIn ());
2017-01-16 12:31:08 +01:00
$history -> updateSettings ();
2016-12-07 11:58:25 +01:00
invalidateCaches ( $conf -> get ( 'resource.page_cache' ));
2015-06-29 12:23:00 +02:00
}
catch ( Exception $e ) {
error_log (
'ERROR while writing config file after configuration update.' . PHP_EOL .
$e -> getMessage ()
);
// TODO: do not handle exceptions/errors in JS.
2016-05-18 21:48:24 +02:00
echo '<script>alert("' . $e -> getMessage () . '");document.location=\'?do=configure\';</script>' ;
2015-06-29 12:23:00 +02:00
exit ;
}
2017-05-09 18:12:15 +02:00
echo '<script>alert("' . t ( 'Configuration was saved.' ) . '");document.location=\'?do=configure\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
else // Show the configuration form.
{
2016-05-29 16:10:32 +02:00
$PAGE -> assign ( 'title' , $conf -> get ( 'general.title' ));
2016-12-07 11:58:25 +01:00
$PAGE -> assign ( 'theme' , $conf -> get ( 'resource.theme' ));
2017-01-03 11:42:21 +01:00
$PAGE -> assign ( 'theme_available' , ThemeUtils :: getThemes ( $conf -> get ( 'resource.raintpl_tpl' )));
2017-03-22 19:16:35 +01:00
list ( $continents , $cities ) = generateTimeZoneData (
timezone_identifiers_list (),
$conf -> get ( 'general.timezone' )
);
$PAGE -> assign ( 'continents' , $continents );
$PAGE -> assign ( 'cities' , $cities );
2016-06-11 09:08:02 +02:00
$PAGE -> assign ( 'private_links_default' , $conf -> get ( 'privacy.default_private_links' , false ));
2016-07-10 10:42:21 +02:00
$PAGE -> assign ( 'session_protection_disabled' , $conf -> get ( 'security.session_protection_disabled' , false ));
2016-06-11 09:08:02 +02:00
$PAGE -> assign ( 'enable_rss_permalinks' , $conf -> get ( 'feed.rss_permalinks' , false ));
$PAGE -> assign ( 'enable_update_check' , $conf -> get ( 'updates.check_updates' , true ));
$PAGE -> assign ( 'hide_public_links' , $conf -> get ( 'privacy.hide_public_links' , false ));
2016-07-31 10:46:17 +02:00
$PAGE -> assign ( 'api_enabled' , $conf -> get ( 'api.enabled' , true ));
$PAGE -> assign ( 'api_secret' , $conf -> get ( 'api.secret' ));
2017-05-25 13:26:05 +02:00
$PAGE -> assign ( 'languages' , Languages :: getAvailableLanguages ());
$PAGE -> assign ( 'language' , $conf -> get ( 'translation.language' ));
2018-04-06 18:21:47 +02:00
$PAGE -> assign ( 'gd_enabled' , extension_loaded ( 'gd' ));
2018-07-05 20:29:55 +02:00
$PAGE -> assign ( 'thumbnails_mode' , $conf -> get ( 'thumbnails.mode' , Thumbnailer :: MODE_NONE ));
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Configure' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'configure' );
exit ;
}
}
// -------- User wants to rename a tag or delete it
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_CHANGETAG )
2013-02-26 10:09:41 +01:00
{
2016-01-03 14:42:43 +01:00
if ( empty ( $_POST [ 'fromtag' ]) || ( empty ( $_POST [ 'totag' ]) && isset ( $_POST [ 'renametag' ]))) {
2017-03-25 15:59:01 +01:00
$PAGE -> assign ( 'fromtag' , ! empty ( $_GET [ 'fromtag' ]) ? escape ( $_GET [ 'fromtag' ]) : '' );
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Manage tags' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'changetag' );
exit ;
}
2016-01-03 14:42:43 +01:00
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) {
2017-05-09 18:12:15 +02:00
die ( t ( 'Wrong token.' ));
2016-01-03 14:42:43 +01:00
}
2013-02-26 10:09:41 +01:00
2017-08-04 19:10:00 +02:00
$alteredLinks = $LINKSDB -> renameTag ( escape ( $_POST [ 'fromtag' ]), escape ( $_POST [ 'totag' ]));
2017-05-31 18:36:35 +02:00
$LINKSDB -> save ( $conf -> get ( 'resource.page_cache' ));
2017-08-04 19:10:00 +02:00
foreach ( $alteredLinks as $link ) {
$history -> updateLink ( $link );
2013-02-26 10:09:41 +01:00
}
2017-08-04 19:10:00 +02:00
$delete = empty ( $_POST [ 'totag' ]);
2017-05-31 18:36:35 +02:00
$redirect = $delete ? 'do=changetag' : 'searchtags=' . urlencode ( escape ( $_POST [ 'totag' ]));
2017-05-25 13:26:05 +02:00
$count = count ( $alteredLinks );
2017-05-31 18:36:35 +02:00
$alert = $delete
2017-05-25 13:26:05 +02:00
? sprintf ( t ( 'The tag was removed from %d link.' , 'The tag was removed from %d links.' , $count ), $count )
: sprintf ( t ( 'The tag was renamed in %d link.' , 'The tag was renamed in %d links.' , $count ), $count );
2017-05-31 18:36:35 +02:00
echo '<script>alert("' . $alert . '");document.location=\'?' . $redirect . '\';</script>' ;
exit ;
2013-02-26 10:09:41 +01:00
}
2014-08-11 20:41:50 +02:00
// -------- User wants to add a link without using the bookmarklet: Show form.
2015-07-15 11:42:15 +02:00
if ( $targetPage == Router :: $PAGE_ADDLINK )
2013-02-26 10:09:41 +01:00
{
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Shaare a new link' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'addlink' );
exit ;
}
// -------- User clicked the "Save" button when editing a link: Save link to database.
if ( isset ( $_POST [ 'save_edit' ]))
{
2016-02-04 19:58:47 +01:00
// Go away!
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) {
2017-05-09 18:12:15 +02:00
die ( t ( 'Wrong token.' ));
2016-02-04 19:58:47 +01:00
}
2016-11-28 16:16:44 +01:00
// lf_id should only be present if the link exists.
2017-03-22 19:08:17 +01:00
$id = isset ( $_POST [ 'lf_id' ]) ? intval ( escape ( $_POST [ 'lf_id' ])) : $LINKSDB -> getNextId ();
2016-11-28 16:16:44 +01:00
// Linkdate is kept here to:
// - use the same permalink for notes as they're displayed when creating them
// - let users hack creation date of their posts
2018-07-01 12:27:55 +02:00
// See: https://shaarli.readthedocs.io/en/master/guides/various-hacks/#changing-the-timestamp-for-a-shaare
2016-11-28 16:16:44 +01:00
$linkdate = escape ( $_POST [ 'lf_linkdate' ]);
if ( isset ( $LINKSDB [ $id ])) {
// Edit
2016-11-28 18:24:15 +01:00
$created = DateTime :: createFromFormat ( LinkDB :: LINK_DATE_FORMAT , $linkdate );
2016-11-28 16:16:44 +01:00
$updated = new DateTime ();
2016-12-15 11:18:56 +01:00
$shortUrl = $LINKSDB [ $id ][ 'shorturl' ];
2017-01-16 12:31:08 +01:00
$new = false ;
2016-11-28 16:16:44 +01:00
} else {
// New link
2016-11-28 18:24:15 +01:00
$created = DateTime :: createFromFormat ( LinkDB :: LINK_DATE_FORMAT , $linkdate );
2016-11-28 16:16:44 +01:00
$updated = null ;
2016-12-15 11:18:56 +01:00
$shortUrl = link_small_hash ( $created , $id );
2017-01-16 12:31:08 +01:00
$new = true ;
2016-11-28 16:16:44 +01:00
}
2016-02-04 19:58:47 +01:00
// Remove multiple spaces.
$tags = trim ( preg_replace ( '/\s\s+/' , ' ' , $_POST [ 'lf_tags' ]));
2016-02-15 21:06:17 +01:00
// Remove first '-' char in tags.
$tags = preg_replace ( '/(^| )\-/' , '$1' , $tags );
2016-02-04 19:58:47 +01:00
// Remove duplicates.
$tags = implode ( ' ' , array_unique ( explode ( ' ' , $tags )));
2016-08-03 09:44:04 +02:00
2017-08-25 20:08:07 +02:00
if ( empty ( trim ( $_POST [ 'lf_url' ]))) {
$_POST [ 'lf_url' ] = '?' . smallHash ( $linkdate . $id );
}
2017-05-25 14:52:42 +02:00
$url = whitelist_protocols ( trim ( $_POST [ 'lf_url' ]), $conf -> get ( 'security.allowed_protocols' ));
2016-02-04 19:58:47 +01:00
$link = array (
2016-11-28 16:16:44 +01:00
'id' => $id ,
2016-02-04 19:58:47 +01:00
'title' => trim ( $_POST [ 'lf_title' ]),
'url' => $url ,
2016-02-10 11:31:45 +01:00
'description' => $_POST [ 'lf_description' ],
2016-02-04 19:58:47 +01:00
'private' => ( isset ( $_POST [ 'lf_private' ]) ? 1 : 0 ),
2016-11-28 16:16:44 +01:00
'created' => $created ,
2016-08-03 09:44:04 +02:00
'updated' => $updated ,
2016-11-28 18:24:15 +01:00
'tags' => str_replace ( ',' , ' ' , $tags ),
2016-12-15 11:18:56 +01:00
'shorturl' => $shortUrl ,
2016-02-04 19:58:47 +01:00
);
2016-11-28 16:16:44 +01:00
2016-02-04 19:58:47 +01:00
// If title is empty, use the URL as title.
if ( $link [ 'title' ] == '' ) {
$link [ 'title' ] = $link [ 'url' ];
}
2015-07-15 11:42:15 +02:00
2018-07-05 20:29:55 +02:00
if ( $conf -> get ( 'thumbnails.mode' , Thumbnailer :: MODE_NONE ) !== Thumbnailer :: MODE_NONE ) {
2016-11-09 18:57:02 +01:00
$thumbnailer = new Thumbnailer ( $conf );
$link [ 'thumbnail' ] = $thumbnailer -> get ( $url );
}
2015-07-15 11:42:15 +02:00
$pluginManager -> executeHooks ( 'save_link' , $link );
2016-11-28 16:16:44 +01:00
$LINKSDB [ $id ] = $link ;
2016-10-20 21:19:51 +02:00
$LINKSDB -> save ( $conf -> get ( 'resource.page_cache' ));
2017-01-16 12:31:08 +01:00
if ( $new ) {
$history -> addLink ( $link );
} else {
$history -> updateLink ( $link );
}
2013-02-26 10:09:41 +01:00
// If we are called from the bookmarklet, we must close the popup:
2015-11-04 19:53:59 +01:00
if ( isset ( $_GET [ 'source' ]) && ( $_GET [ 'source' ] == 'bookmarklet' || $_GET [ 'source' ] == 'firefoxsocialapi' )) {
echo '<script>self.close();</script>' ;
exit ;
}
2016-02-04 20:24:17 +01:00
$returnurl = ! empty ( $_POST [ 'returnurl' ]) ? $_POST [ 'returnurl' ] : '?' ;
2015-07-06 10:22:00 +02:00
$location = generateLocation ( $returnurl , $_SERVER [ 'HTTP_HOST' ], array ( 'addlink' , 'post' , 'edit_link' ));
2016-02-04 19:58:47 +01:00
// Scroll to the link which has been edited.
2016-11-28 18:24:15 +01:00
$location .= '#' . $link [ 'shorturl' ];
2016-02-04 19:58:47 +01:00
// After saving the link, redirect to the page the user was on.
header ( 'Location: ' . $location );
2013-02-26 10:09:41 +01:00
exit ;
}
// -------- User clicked the "Cancel" button when editing a link.
if ( isset ( $_POST [ 'cancel_edit' ]))
{
2017-03-22 19:08:17 +01:00
$id = isset ( $_POST [ 'lf_id' ]) ? ( int ) escape ( $_POST [ 'lf_id' ]) : false ;
if ( ! isset ( $LINKSDB [ $id ])) {
header ( 'Location: ?' );
}
2014-08-11 20:41:50 +02:00
// If we are called from the bookmarklet, we must close the popup:
2015-05-11 18:42:54 +02:00
if ( isset ( $_GET [ 'source' ]) && ( $_GET [ 'source' ] == 'bookmarklet' || $_GET [ 'source' ] == 'firefoxsocialapi' )) { echo '<script>self.close();</script>' ; exit ; }
2017-03-22 19:08:17 +01:00
$link = $LINKSDB [ $id ];
2013-02-26 10:09:41 +01:00
$returnurl = ( isset ( $_POST [ 'returnurl' ]) ? $_POST [ 'returnurl' ] : '?' );
2016-11-28 16:16:44 +01:00
// Scroll to the link which has been edited.
2016-11-28 18:24:15 +01:00
$returnurl .= '#' . $link [ 'shorturl' ];
2015-07-06 10:22:00 +02:00
$returnurl = generateLocation ( $returnurl , $_SERVER [ 'HTTP_HOST' ], array ( 'addlink' , 'post' , 'edit_link' ));
2013-02-26 10:09:41 +01:00
header ( 'Location: ' . $returnurl ); // After canceling, redirect to the page the user was on.
exit ;
}
2014-08-11 20:41:50 +02:00
// -------- User clicked the "Delete" button when editing a link: Delete link from database.
2016-11-05 14:13:18 +01:00
if ( $targetPage == Router :: $PAGE_DELETELINK )
2013-02-26 10:09:41 +01:00
{
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_GET [ 'token' ])) {
2017-05-09 18:12:15 +02:00
die ( t ( 'Wrong token.' ));
2016-11-05 14:13:18 +01:00
}
2016-11-28 16:16:44 +01:00
2017-08-27 19:19:59 +02:00
$ids = trim ( $_GET [ 'lf_linkdate' ]);
if ( strpos ( $ids , ' ' ) !== false ) {
// multiple, space-separated ids provided
$ids = array_values ( array_filter ( preg_split ( '/\s+/' , escape ( $ids ))));
2017-03-12 19:03:50 +01:00
} else {
2017-08-27 19:19:59 +02:00
// only a single id provided
$ids = [ $ids ];
}
// assert at least one id is given
if ( ! count ( $ids )){
die ( 'no id provided' );
2017-03-12 19:03:50 +01:00
}
foreach ( $ids as $id ) {
$id = ( int ) escape ( $id );
$link = $LINKSDB [ $id ];
$pluginManager -> executeHooks ( 'delete_link' , $link );
2018-08-13 13:18:31 +02:00
$history -> deleteLink ( $link );
2017-03-12 19:03:50 +01:00
unset ( $LINKSDB [ $id ]);
}
2016-11-05 14:13:18 +01:00
$LINKSDB -> save ( $conf -> get ( 'resource.page_cache' )); // save to disk
2013-02-26 10:09:41 +01:00
// If we are called from the bookmarklet, we must close the popup:
2015-05-11 18:42:54 +02:00
if ( isset ( $_GET [ 'source' ]) && ( $_GET [ 'source' ] == 'bookmarklet' || $_GET [ 'source' ] == 'firefoxsocialapi' )) { echo '<script>self.close();</script>' ; exit ; }
2017-01-16 13:07:53 +01:00
$location = '?' ;
if ( isset ( $_SERVER [ 'HTTP_REFERER' ])) {
// Don't redirect to where we were previously if it was a permalink or an edit_link, because it would 404.
$location = generateLocation (
$_SERVER [ 'HTTP_REFERER' ],
$_SERVER [ 'HTTP_HOST' ],
[ 'delete_link' , 'edit_link' , $link [ 'shorturl' ]]
);
2015-02-15 02:24:26 +01:00
}
header ( 'Location: ' . $location ); // After deleting the link, redirect to appropriate location
2013-02-26 10:09:41 +01:00
exit ;
}
// -------- User clicked the "EDIT" button on a link: Display link edit form.
if ( isset ( $_GET [ 'edit_link' ]))
{
2016-11-28 16:16:44 +01:00
$id = ( int ) escape ( $_GET [ 'edit_link' ]);
$link = $LINKSDB [ $id ]; // Read database
2013-02-26 10:09:41 +01:00
if ( ! $link ) { header ( 'Location: ?' ); exit ; } // Link not found in database.
2016-11-28 18:24:15 +01:00
$link [ 'linkdate' ] = $link [ 'created' ] -> format ( LinkDB :: LINK_DATE_FORMAT );
2015-07-15 11:42:15 +02:00
$data = array (
'link' => $link ,
'link_is_new' => false ,
'http_referer' => ( isset ( $_SERVER [ 'HTTP_REFERER' ]) ? escape ( $_SERVER [ 'HTTP_REFERER' ]) : '' ),
2017-05-18 20:28:11 +02:00
'tags' => $LINKSDB -> linksCountPerTag (),
2015-07-15 11:42:15 +02:00
);
$pluginManager -> executeHooks ( 'render_editlink' , $data );
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Edit' ) . ' ' . t ( 'Shaare' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'editlink' );
exit ;
}
// -------- User want to post a new link: Display link edit form.
2015-08-14 01:14:07 +02:00
if ( isset ( $_GET [ 'post' ])) {
2016-04-06 22:00:52 +02:00
$url = cleanup_url ( $_GET [ 'post' ]);
2013-02-26 10:09:41 +01:00
$link_is_new = false ;
2015-08-20 19:47:01 +02:00
// Check if URL is not already in database (in this case, we will edit the existing link)
2015-09-02 13:55:39 +02:00
$link = $LINKSDB -> getLinkFromUrl ( $url );
2016-11-28 16:16:44 +01:00
if ( ! $link )
2013-02-26 10:09:41 +01:00
{
2015-08-20 19:47:01 +02:00
$link_is_new = true ;
2016-11-28 18:24:15 +01:00
$linkdate = strval ( date ( LinkDB :: LINK_DATE_FORMAT ));
2015-08-20 19:47:01 +02:00
// Get title if it was provided in URL (by the bookmarklet).
2015-11-22 15:47:41 +01:00
$title = empty ( $_GET [ 'title' ]) ? '' : escape ( $_GET [ 'title' ]);
2015-08-20 19:47:01 +02:00
// Get description if it was provided in URL (by the bookmarklet). [Bronco added that]
2015-11-22 15:47:41 +01:00
$description = empty ( $_GET [ 'description' ]) ? '' : escape ( $_GET [ 'description' ]);
$tags = empty ( $_GET [ 'tags' ]) ? '' : escape ( $_GET [ 'tags' ]);
$private = ! empty ( $_GET [ 'private' ]) && $_GET [ 'private' ] === " 1 " ? 1 : 0 ;
2015-08-31 12:27:56 +02:00
// If this is an HTTP(S) link, we try go get the page to extract the title (otherwise we will to straight to the edit form.)
2015-09-02 13:55:39 +02:00
if ( empty ( $title ) && strpos ( get_url_scheme ( $url ), 'http' ) !== false ) {
2015-09-01 21:45:06 +02:00
// Short timeout to keep the application responsive
2017-09-30 11:04:13 +02:00
// The callback will fill $charset and $title with data from the downloaded page.
2018-02-28 22:29:43 +01:00
get_http_response (
$url ,
$conf -> get ( 'general.download_timeout' , 30 ),
2018-05-01 16:40:08 +02:00
$conf -> get ( 'general.download_max_size' , 4194304 ),
2018-02-28 22:29:43 +01:00
get_curl_download_callback ( $charset , $title )
);
2017-09-30 11:04:13 +02:00
if ( ! empty ( $title ) && strtolower ( $charset ) != 'utf-8' ) {
$title = mb_convert_encoding ( $title , 'utf-8' , $charset );
2015-08-20 19:47:01 +02:00
}
2013-02-26 10:09:41 +01:00
}
2016-01-04 10:45:54 +01:00
2015-08-20 19:47:01 +02:00
if ( $url == '' ) {
2016-11-28 18:24:15 +01:00
$url = '?' . smallHash ( $linkdate . $LINKSDB -> getNextId ());
2017-05-25 13:26:05 +02:00
$title = $conf -> get ( 'general.default_note_title' , t ( 'Note: ' ));
2014-10-20 19:14:52 +02:00
}
2016-04-06 22:00:52 +02:00
$url = escape ( $url );
$title = escape ( $title );
2016-01-04 10:45:54 +01:00
2015-08-20 19:47:01 +02:00
$link = array (
'linkdate' => $linkdate ,
'title' => $title ,
2015-09-02 13:55:39 +02:00
'url' => $url ,
2015-08-20 19:47:01 +02:00
'description' => $description ,
'tags' => $tags ,
2017-05-31 17:50:11 +02:00
'private' => $private ,
2015-08-20 19:47:01 +02:00
);
2016-11-28 16:16:44 +01:00
} else {
2016-11-28 18:24:15 +01:00
$link [ 'linkdate' ] = $link [ 'created' ] -> format ( LinkDB :: LINK_DATE_FORMAT );
2013-02-26 10:09:41 +01:00
}
2015-07-15 11:42:15 +02:00
$data = array (
'link' => $link ,
'link_is_new' => $link_is_new ,
'http_referer' => ( isset ( $_SERVER [ 'HTTP_REFERER' ]) ? escape ( $_SERVER [ 'HTTP_REFERER' ]) : '' ),
'source' => ( isset ( $_GET [ 'source' ]) ? $_GET [ 'source' ] : '' ),
2017-05-18 20:28:11 +02:00
'tags' => $LINKSDB -> linksCountPerTag (),
2016-08-07 12:15:08 +02:00
'default_private_links' => $conf -> get ( 'privacy.default_private_links' , false ),
2015-07-15 11:42:15 +02:00
);
$pluginManager -> executeHooks ( 'render_editlink' , $data );
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Shaare' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'editlink' );
exit ;
}
2016-04-10 17:34:07 +02:00
if ( $targetPage == Router :: $PAGE_EXPORT ) {
2016-05-05 19:22:06 +02:00
// Export links as a Netscape Bookmarks file
2016-04-10 17:34:07 +02:00
if ( empty ( $_GET [ 'selection' ])) {
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Export' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'export' );
exit ;
}
2016-04-10 17:34:07 +02:00
// export as bookmarks_(all|private|public)_YYYYmmdd_HHMMSS.html
$selection = $_GET [ 'selection' ];
2016-05-05 19:22:06 +02:00
if ( isset ( $_GET [ 'prepend_note_url' ])) {
$prependNoteUrl = $_GET [ 'prepend_note_url' ];
} else {
$prependNoteUrl = false ;
}
2016-04-10 17:34:07 +02:00
try {
$PAGE -> assign (
'links' ,
2016-05-05 19:22:06 +02:00
NetscapeBookmarkUtils :: filterAndFormat (
$LINKSDB ,
$selection ,
$prependNoteUrl ,
index_url ( $_SERVER )
)
2016-04-10 17:34:07 +02:00
);
} catch ( Exception $exc ) {
header ( 'Content-Type: text/plain; charset=utf-8' );
echo $exc -> getMessage ();
exit ;
2013-02-26 10:09:41 +01:00
}
2016-04-10 17:34:07 +02:00
$now = new DateTime ();
header ( 'Content-Type: text/html; charset=utf-8' );
header (
'Content-disposition: attachment; filename=bookmarks_'
. $selection . '_' . $now -> format ( LinkDB :: LINK_DATE_FORMAT ) . '.html'
);
$PAGE -> assign ( 'date' , $now -> format ( DateTime :: RFC822 ));
$PAGE -> assign ( 'eol' , PHP_EOL );
$PAGE -> assign ( 'selection' , $selection );
$PAGE -> renderPage ( 'export.bookmarks' );
exit ;
2013-02-26 10:09:41 +01:00
}
2016-07-28 22:54:33 +02:00
if ( $targetPage == Router :: $PAGE_IMPORT ) {
// Upload a Netscape bookmark dump to import its contents
if ( ! isset ( $_POST [ 'token' ]) || ! isset ( $_FILES [ 'filetoupload' ])) {
// Show import dialog
2017-04-10 20:01:10 +02:00
$PAGE -> assign (
'maxfilesize' ,
get_max_upload_size (
ini_get ( 'post_max_size' ),
ini_get ( 'upload_max_filesize' ),
false
)
);
$PAGE -> assign (
'maxfilesizeHuman' ,
get_max_upload_size (
ini_get ( 'post_max_size' ),
ini_get ( 'upload_max_filesize' ),
true
)
);
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Import' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2016-07-28 22:54:33 +02:00
$PAGE -> renderPage ( 'import' );
2013-02-26 10:09:41 +01:00
exit ;
}
2016-07-28 22:54:33 +02:00
// Import bookmarks from an uploaded file
if ( isset ( $_FILES [ 'filetoupload' ][ 'size' ]) && $_FILES [ 'filetoupload' ][ 'size' ] == 0 ) {
// The file is too big or some form field may be missing.
2017-05-09 18:12:15 +02:00
$msg = sprintf (
t (
'The file you are trying to upload is probably bigger than what this webserver can accept'
. ' (%s). Please upload in smaller chunks.'
),
get_max_upload_size ( ini_get ( 'post_max_size' ), ini_get ( 'upload_max_filesize' ))
);
echo '<script>alert("' . $msg . '");document.location=\'?do=' . Router :: $PAGE_IMPORT . '\';</script>' ;
2016-07-28 22:54:33 +02:00
exit ;
}
2017-10-22 18:44:46 +02:00
if ( ! $sessionManager -> checkToken ( $_POST [ 'token' ])) {
2016-07-28 22:54:33 +02:00
die ( 'Wrong token.' );
}
$status = NetscapeBookmarkUtils :: import (
$_POST ,
$_FILES ,
$LINKSDB ,
2017-01-16 12:31:08 +01:00
$conf ,
$history
2016-07-28 22:54:33 +02:00
);
echo '<script>alert("' . $status . '");document.location=\'?do='
. Router :: $PAGE_IMPORT . '\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
2015-11-18 17:40:42 +01:00
// Plugin administration page
if ( $targetPage == Router :: $PAGE_PLUGINSADMIN ) {
$pluginMeta = $pluginManager -> getPluginsMeta ();
// Split plugins into 2 arrays: ordered enabled plugins and disabled.
$enabledPlugins = array_filter ( $pluginMeta , function ( $v ) { return $v [ 'order' ] !== false ; });
// Load parameters.
2016-05-18 21:48:24 +02:00
$enabledPlugins = load_plugin_parameter_values ( $enabledPlugins , $conf -> get ( 'plugins' , array ()));
2015-11-18 17:40:42 +01:00
uasort (
$enabledPlugins ,
function ( $a , $b ) { return $a [ 'order' ] - $b [ 'order' ]; }
);
$disabledPlugins = array_filter ( $pluginMeta , function ( $v ) { return $v [ 'order' ] === false ; });
$PAGE -> assign ( 'enabledPlugins' , $enabledPlugins );
$PAGE -> assign ( 'disabledPlugins' , $disabledPlugins );
2018-01-24 19:38:03 +01:00
$PAGE -> assign ( 'pagetitle' , t ( 'Plugin administration' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2015-11-18 17:40:42 +01:00
$PAGE -> renderPage ( 'pluginsadmin' );
exit ;
}
// Plugin administration form action
if ( $targetPage == Router :: $PAGE_SAVE_PLUGINSADMIN ) {
try {
if ( isset ( $_POST [ 'parameters_form' ])) {
unset ( $_POST [ 'parameters_form' ]);
foreach ( $_POST as $param => $value ) {
2016-05-18 21:48:24 +02:00
$conf -> set ( 'plugins.' . $param , escape ( $value ));
2015-11-18 17:40:42 +01:00
}
}
else {
2016-05-29 16:10:32 +02:00
$conf -> set ( 'general.enabled_plugins' , save_plugin_config ( $_POST ));
2015-11-18 17:40:42 +01:00
}
2018-02-17 01:46:27 +01:00
$conf -> write ( $loginManager -> isLoggedIn ());
2017-05-07 16:58:15 +02:00
$history -> updateSettings ();
2015-11-18 17:40:42 +01:00
}
catch ( Exception $e ) {
error_log (
'ERROR while saving plugin configuration:.' . PHP_EOL .
$e -> getMessage ()
);
// TODO: do not handle exceptions/errors in JS.
2016-02-15 20:34:44 +01:00
echo '<script>alert("' . $e -> getMessage () . '");document.location=\'?do=' . Router :: $PAGE_PLUGINSADMIN . '\';</script>' ;
2015-11-18 17:40:42 +01:00
exit ;
}
header ( 'Location: ?do=' . Router :: $PAGE_PLUGINSADMIN );
exit ;
}
2017-03-25 15:54:18 +01:00
// Get a fresh token
if ( $targetPage == Router :: $GET_TOKEN ) {
header ( 'Content-Type:text/plain' );
2017-10-22 18:44:46 +02:00
echo $sessionManager -> generateToken ( $conf );
2017-03-25 15:54:18 +01:00
exit ;
}
2018-06-08 12:50:49 +02:00
// -------- Thumbnails Update
if ( $targetPage == Router :: $PAGE_THUMBS_UPDATE ) {
$ids = [];
foreach ( $LINKSDB as $link ) {
// A note or not HTTP(S)
if ( $link [ 'url' ][ 0 ] === '?' || ! startsWith ( strtolower ( $link [ 'url' ]), 'http' )) {
continue ;
}
$ids [] = $link [ 'id' ];
}
$PAGE -> assign ( 'ids' , $ids );
2018-07-17 13:13:26 +02:00
$PAGE -> assign ( 'pagetitle' , t ( 'Thumbnails update' ) . ' - ' . $conf -> get ( 'general.title' , 'Shaarli' ));
2018-06-08 12:50:49 +02:00
$PAGE -> renderPage ( 'thumbnails' );
exit ;
}
// -------- Single Thumbnail Update
if ( $targetPage == Router :: $AJAX_THUMB_UPDATE ) {
if ( ! isset ( $_POST [ 'id' ]) || ! ctype_digit ( $_POST [ 'id' ])) {
http_response_code ( 400 );
exit ;
}
$id = ( int ) $_POST [ 'id' ];
if ( empty ( $LINKSDB [ $id ])) {
http_response_code ( 404 );
exit ;
}
$thumbnailer = new Thumbnailer ( $conf );
$link = $LINKSDB [ $id ];
$link [ 'thumbnail' ] = $thumbnailer -> get ( $link [ 'url' ]);
$LINKSDB [ $id ] = $link ;
$LINKSDB -> save ( $conf -> get ( 'resource.page_cache' ));
echo json_encode ( $link );
exit ;
}
2013-02-26 10:09:41 +01:00
// -------- Otherwise, simply display search form and links:
2018-02-17 01:46:27 +01:00
showLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager , $loginManager );
2013-02-26 10:09:41 +01:00
exit ;
}
2016-03-21 21:40:49 +01:00
/**
* Template for the list of links ( < div id = " linklist " > )
* This function fills all the necessary fields in the $PAGE for the template 'linklist.html'
*
2016-06-09 20:04:02 +02:00
* @ param pageBuilder $PAGE pageBuilder instance .
* @ param LinkDB $LINKSDB LinkDB instance .
* @ param ConfigManager $conf Configuration Manager instance .
* @ param PluginManager $pluginManager Plugin Manager instance .
2018-02-17 01:46:27 +01:00
* @ param LoginManager $loginManager LoginManager instance
2016-03-21 21:40:49 +01:00
*/
2018-02-17 01:46:27 +01:00
function buildLinkList ( $PAGE , $LINKSDB , $conf , $pluginManager , $loginManager )
2013-02-26 10:09:41 +01:00
{
2016-03-21 21:40:49 +01:00
// Used in templates
2017-04-01 12:17:37 +02:00
if ( isset ( $_GET [ 'searchtags' ])) {
if ( ! empty ( $_GET [ 'searchtags' ])) {
$searchtags = escape ( normalize_spaces ( $_GET [ 'searchtags' ]));
} else {
$searchtags = false ;
}
} else {
$searchtags = '' ;
}
2016-12-20 11:06:22 +01:00
$searchterm = ! empty ( $_GET [ 'searchterm' ]) ? escape ( normalize_spaces ( $_GET [ 'searchterm' ])) : '' ;
2015-12-27 10:08:20 +01:00
2016-03-21 21:40:49 +01:00
// Smallhash filter
if ( ! empty ( $_SERVER [ 'QUERY_STRING' ])
&& preg_match ( '/^[a-zA-Z0-9-_@]{6}($|&|#)/' , $_SERVER [ 'QUERY_STRING' ])) {
try {
$linksToDisplay = $LINKSDB -> filterHash ( $_SERVER [ 'QUERY_STRING' ]);
} catch ( LinkNotFoundException $e ) {
$PAGE -> render404 ( $e -> getMessage ());
2013-02-26 10:09:41 +01:00
exit ;
}
2016-03-21 21:40:49 +01:00
} else {
// Filter links according search parameters.
2017-12-16 12:36:59 +01:00
$visibility = ! empty ( $_SESSION [ 'visibility' ]) ? $_SESSION [ 'visibility' ] : '' ;
2017-04-01 12:17:37 +02:00
$request = [
'searchtags' => $searchtags ,
'searchterm' => $searchterm ,
];
2017-06-01 17:55:26 +02:00
$linksToDisplay = $LINKSDB -> filterSearch ( $request , false , $visibility , ! empty ( $_SESSION [ 'untaggedonly' ]));
2013-02-26 10:09:41 +01:00
}
// ---- Handle paging.
2015-12-27 10:08:20 +01:00
$keys = array ();
foreach ( $linksToDisplay as $key => $value ) {
$keys [] = $key ;
}
2013-02-26 10:09:41 +01:00
// Select articles according to paging.
2015-12-27 10:08:20 +01:00
$pagecount = ceil ( count ( $keys ) / $_SESSION [ 'LINKS_PER_PAGE' ]);
$pagecount = $pagecount == 0 ? 1 : $pagecount ;
$page = empty ( $_GET [ 'page' ]) ? 1 : intval ( $_GET [ 'page' ]);
$page = $page < 1 ? 1 : $page ;
$page = $page > $pagecount ? $pagecount : $page ;
// Start index.
$i = ( $page - 1 ) * $_SESSION [ 'LINKS_PER_PAGE' ];
$end = $i + $_SESSION [ 'LINKS_PER_PAGE' ];
2016-11-09 18:57:02 +01:00
2018-07-05 20:29:55 +02:00
$thumbnailsEnabled = $conf -> get ( 'thumbnails.mode' , Thumbnailer :: MODE_NONE ) !== Thumbnailer :: MODE_NONE ;
if ( $thumbnailsEnabled ) {
2016-11-09 18:57:02 +01:00
$thumbnailer = new Thumbnailer ( $conf );
}
2015-12-27 10:08:20 +01:00
$linkDisp = array ();
2013-02-26 10:09:41 +01:00
while ( $i < $end && $i < count ( $keys ))
{
$link = $linksToDisplay [ $keys [ $i ]];
2017-11-07 20:23:58 +01:00
$link [ 'description' ] = format_description (
$link [ 'description' ],
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
);
2015-12-27 10:08:20 +01:00
$classLi = ( $i % 2 ) != 0 ? '' : 'publicLinkHightLight' ;
$link [ 'class' ] = $link [ 'private' ] == 0 ? $classLi : 'private' ;
2016-11-28 16:16:44 +01:00
$link [ 'timestamp' ] = $link [ 'created' ] -> getTimestamp ();
2016-08-03 09:44:04 +02:00
if ( ! empty ( $link [ 'updated' ])) {
2016-11-28 16:16:44 +01:00
$link [ 'updated_timestamp' ] = $link [ 'updated' ] -> getTimestamp ();
2016-08-03 09:44:04 +02:00
} else {
$link [ 'updated_timestamp' ] = '' ;
}
2016-12-20 11:06:22 +01:00
$taglist = preg_split ( '/\s+/' , $link [ 'tags' ], - 1 , PREG_SPLIT_NO_EMPTY );
2015-03-12 21:57:19 +01:00
uasort ( $taglist , 'strcasecmp' );
2015-12-27 10:08:20 +01:00
$link [ 'taglist' ] = $taglist ;
2016-11-09 18:57:02 +01:00
2018-08-10 17:09:51 +02:00
// Logged in, thumbnails enabled, not a note,
2016-11-09 18:57:02 +01:00
// and (never retrieved yet or no valid cache file)
2018-08-10 17:09:51 +02:00
if ( $loginManager -> isLoggedIn () && $thumbnailsEnabled && $link [ 'url' ][ 0 ] != '?'
2016-11-09 18:57:02 +01:00
&& ( ! isset ( $link [ 'thumbnail' ]) || ( $link [ 'thumbnail' ] !== false && ! is_file ( $link [ 'thumbnail' ])))
) {
2017-11-11 14:01:21 +01:00
$elem = $LINKSDB [ $keys [ $i ]];
$elem [ 'thumbnail' ] = $thumbnailer -> get ( $link [ 'url' ]);
$LINKSDB [ $keys [ $i ]] = $elem ;
2016-11-09 18:57:02 +01:00
$updateDB = true ;
2018-04-06 18:21:47 +02:00
$link [ 'thumbnail' ] = $elem [ 'thumbnail' ];
2016-11-09 18:57:02 +01:00
}
2015-12-27 10:08:20 +01:00
// Check for both signs of a note: starting with ? and 7 chars long.
2016-11-09 18:57:02 +01:00
if ( $link [ 'url' ][ 0 ] === '?' && strlen ( $link [ 'url' ]) === 7 ) {
2015-12-27 10:08:20 +01:00
$link [ 'url' ] = index_url ( $_SERVER ) . $link [ 'url' ];
2015-04-01 11:47:04 +02:00
}
2015-05-11 18:42:54 +02:00
2013-02-26 10:09:41 +01:00
$linkDisp [ $keys [ $i ]] = $link ;
$i ++ ;
}
2013-03-04 10:18:39 +01:00
2016-11-09 18:57:02 +01:00
// If we retrieved new thumbnails, we update the database.
if ( ! empty ( $updateDB )) {
$LINKSDB -> save ( $conf -> get ( 'resource.page_cache' ));
}
2013-02-26 10:09:41 +01:00
// Compute paging navigation
2017-04-01 12:17:37 +02:00
$searchtagsUrl = $searchtags === '' ? '' : '&searchtags=' . urlencode ( $searchtags );
2016-02-23 19:21:14 +01:00
$searchtermUrl = empty ( $searchterm ) ? '' : '&searchterm=' . urlencode ( $searchterm );
2015-12-27 10:08:20 +01:00
$previous_page_url = '' ;
if ( $i != count ( $keys )) {
2016-02-23 19:21:14 +01:00
$previous_page_url = '?page=' . ( $page + 1 ) . $searchtermUrl . $searchtagsUrl ;
2015-12-27 10:08:20 +01:00
}
$next_page_url = '' ;
if ( $page > 1 ) {
2016-02-23 19:21:14 +01:00
$next_page_url = '?page=' . ( $page - 1 ) . $searchtermUrl . $searchtagsUrl ;
2015-12-27 10:08:20 +01:00
}
2013-02-26 10:09:41 +01:00
// Fill all template fields.
2015-07-15 11:42:15 +02:00
$data = array (
'previous_page_url' => $previous_page_url ,
'next_page_url' => $next_page_url ,
'page_current' => $page ,
'page_max' => $pagecount ,
'result_count' => count ( $linksToDisplay ),
2016-02-23 19:21:14 +01:00
'search_term' => $searchterm ,
'search_tags' => $searchtags ,
2017-12-16 12:36:59 +01:00
'visibility' => ! empty ( $_SESSION [ 'visibility' ]) ? $_SESSION [ 'visibility' ] : '' ,
2016-06-11 09:08:02 +02:00
'redirector' => $conf -> get ( 'redirector.url' ), // Optional redirector URL.
2015-07-15 11:42:15 +02:00
'links' => $linkDisp ,
);
2016-07-19 18:03:09 +02:00
// If there is only a single link, we change on-the-fly the title of the page.
if ( count ( $linksToDisplay ) == 1 ) {
$data [ 'pagetitle' ] = $linksToDisplay [ $keys [ 0 ]][ 'title' ] . ' - ' . $conf -> get ( 'general.title' );
2018-01-24 19:38:03 +01:00
} elseif ( ! empty ( $searchterm ) || ! empty ( $searchtags )) {
$data [ 'pagetitle' ] = t ( 'Search: ' );
$data [ 'pagetitle' ] .= ! empty ( $searchterm ) ? $searchterm . ' ' : '' ;
$bracketWrap = function ( $tag ) {
return '[' . $tag . ']' ;
};
$data [ 'pagetitle' ] .= ! empty ( $searchtags )
? implode ( ' ' , array_map ( $bracketWrap , preg_split ( '/\s+/' , $searchtags ))) . ' '
: '' ;
$data [ 'pagetitle' ] .= '- ' . $conf -> get ( 'general.title' );
2015-12-07 10:29:24 +01:00
}
2015-07-15 11:42:15 +02:00
2018-02-17 01:46:27 +01:00
$pluginManager -> executeHooks ( 'render_linklist' , $data , array ( 'loggedin' => $loginManager -> isLoggedIn ()));
2015-07-15 11:42:15 +02:00
foreach ( $data as $key => $value ) {
$PAGE -> assign ( $key , $value );
}
2013-02-26 10:09:41 +01:00
return ;
}
2016-06-09 20:04:02 +02:00
/**
* Installation
* This function should NEVER be called if the file data / config . php exists .
*
2017-10-22 18:44:46 +02:00
* @ param ConfigManager $conf Configuration Manager instance .
* @ param SessionManager $sessionManager SessionManager instance
2018-06-07 19:58:58 +02:00
* @ param LoginManager $loginManager LoginManager instance
2016-06-09 20:04:02 +02:00
*/
2018-06-07 19:58:58 +02:00
function install ( $conf , $sessionManager , $loginManager ) {
2013-02-26 10:09:41 +01:00
// On free.fr host, make sure the /sessions directory exists, otherwise login will not work.
2013-08-03 22:00:09 +02:00
if ( endsWith ( $_SERVER [ 'HTTP_HOST' ], '.free.fr' ) && ! is_dir ( $_SERVER [ 'DOCUMENT_ROOT' ] . '/sessions' )) mkdir ( $_SERVER [ 'DOCUMENT_ROOT' ] . '/sessions' , 0705 );
2013-02-26 10:09:41 +01:00
2013-02-28 10:37:43 +01:00
// This part makes sure sessions works correctly.
// (Because on some hosts, session.save_path may not be set correctly,
// or we may not have write access to it.)
if ( isset ( $_GET [ 'test_session' ]) && ( ! isset ( $_SESSION ) || ! isset ( $_SESSION [ 'session_tested' ]) || $_SESSION [ 'session_tested' ] != 'Working' ))
2017-05-09 18:12:15 +02:00
{
// Step 2: Check if data in session is correct.
$msg = t (
'<pre>Sessions do not seem to work correctly on your server.<br>' .
'Make sure the variable "session.save_path" is set correctly in your PHP config, ' .
'and that you have write access to it.<br>' .
'It currently points to %s.<br>' .
'On some browsers, accessing your server via a hostname like \'localhost\' ' .
'or any custom hostname without a dot causes cookie storage to fail. ' .
'We recommend accessing your server via it\'s IP address or Fully Qualified Domain Name.<br>'
);
$msg = sprintf ( $msg , session_save_path ());
echo $msg ;
echo '<br><a href="?">' . t ( 'Click to try again.' ) . '</a></pre>' ;
2013-02-28 10:37:43 +01:00
die ;
}
if ( ! isset ( $_SESSION [ 'session_tested' ]))
{ // Step 1 : Try to store data in session and reload page.
$_SESSION [ 'session_tested' ] = 'Working' ; // Try to set a variable in session.
2015-09-06 21:31:37 +02:00
header ( 'Location: ' . index_url ( $_SERVER ) . '?test_session' ); // Redirect to check stored data.
2013-02-28 10:37:43 +01:00
}
if ( isset ( $_GET [ 'test_session' ]))
2014-08-11 20:41:50 +02:00
{ // Step 3: Sessions are OK. Remove test parameter from URL.
2015-09-06 21:31:37 +02:00
header ( 'Location: ' . index_url ( $_SERVER ));
2013-02-28 10:37:43 +01:00
}
2013-02-26 10:09:41 +01:00
if ( ! empty ( $_POST [ 'setlogin' ]) && ! empty ( $_POST [ 'setpassword' ]))
{
$tz = 'UTC' ;
2016-05-03 20:09:24 +02:00
if ( ! empty ( $_POST [ 'continent' ]) && ! empty ( $_POST [ 'city' ])
&& isTimeZoneValid ( $_POST [ 'continent' ], $_POST [ 'city' ])
) {
$tz = $_POST [ 'continent' ] . '/' . $_POST [ 'city' ];
2015-07-11 01:29:12 +02:00
}
2016-05-29 16:10:32 +02:00
$conf -> set ( 'general.timezone' , $tz );
2016-05-18 21:48:24 +02:00
$login = $_POST [ 'setlogin' ];
2016-05-29 16:10:32 +02:00
$conf -> set ( 'credentials.login' , $login );
2016-05-18 21:48:24 +02:00
$salt = sha1 ( uniqid ( '' , true ) . '_' . mt_rand ());
2016-05-29 16:10:32 +02:00
$conf -> set ( 'credentials.salt' , $salt );
$conf -> set ( 'credentials.hash' , sha1 ( $_POST [ 'setpassword' ] . $login . $salt ));
2016-05-18 21:48:24 +02:00
if ( ! empty ( $_POST [ 'title' ])) {
2016-05-30 20:15:36 +02:00
$conf -> set ( 'general.title' , escape ( $_POST [ 'title' ]));
2016-05-18 21:48:24 +02:00
} else {
2016-05-29 16:10:32 +02:00
$conf -> set ( 'general.title' , 'Shared links on ' . escape ( index_url ( $_SERVER )));
2016-05-18 21:48:24 +02:00
}
2017-05-25 13:26:05 +02:00
$conf -> set ( 'translation.language' , escape ( $_POST [ 'language' ]));
2016-06-11 09:08:02 +02:00
$conf -> set ( 'updates.check_updates' , ! empty ( $_POST [ 'updateCheck' ]));
2016-07-31 10:46:17 +02:00
$conf -> set ( 'api.enabled' , ! empty ( $_POST [ 'enableApi' ]));
$conf -> set (
'api.secret' ,
generate_api_secret (
2017-01-03 14:25:04 +01:00
$conf -> get ( 'credentials.login' ),
$conf -> get ( 'credentials.salt' )
2016-07-31 10:46:17 +02:00
)
);
2015-06-29 12:23:00 +02:00
try {
2016-05-18 21:48:24 +02:00
// Everything is ok, let's create config file.
2018-02-17 01:46:27 +01:00
$conf -> write ( $loginManager -> isLoggedIn ());
2015-06-29 12:23:00 +02:00
}
catch ( Exception $e ) {
error_log (
'ERROR while writing config file after installation.' . PHP_EOL .
$e -> getMessage ()
);
// TODO: do not handle exceptions/errors in JS.
echo '<script>alert("' . $e -> getMessage () . '");document.location=\'?\';</script>' ;
exit ;
}
2015-01-08 15:09:46 +01:00
echo '<script>alert("Shaarli is now configured. Please enter your login/password and start shaaring your links!");document.location=\'?do=login\';</script>' ;
2013-02-26 10:09:41 +01:00
exit ;
}
2018-06-08 12:50:49 +02:00
$PAGE = new PageBuilder ( $conf , $_SESSION , null , $sessionManager -> generateToken ());
2017-03-22 19:16:35 +01:00
list ( $continents , $cities ) = generateTimeZoneData ( timezone_identifiers_list (), date_default_timezone_get ());
$PAGE -> assign ( 'continents' , $continents );
$PAGE -> assign ( 'cities' , $cities );
2017-05-25 13:26:05 +02:00
$PAGE -> assign ( 'languages' , Languages :: getAvailableLanguages ());
2013-02-26 10:09:41 +01:00
$PAGE -> renderPage ( 'install' );
exit ;
}
2018-07-29 17:40:05 +02:00
if ( isset ( $_SERVER [ 'QUERY_STRING' ]) && startsWith ( $_SERVER [ 'QUERY_STRING' ], 'do=dailyrss' )) {
showDailyRSS ( $conf , $loginManager );
exit ;
}
2016-05-18 21:48:24 +02:00
if ( ! isset ( $_SESSION [ 'LINKS_PER_PAGE' ])) {
2016-05-29 16:10:32 +02:00
$_SESSION [ 'LINKS_PER_PAGE' ] = $conf -> get ( 'general.links_per_page' , 20 );
2016-05-18 21:48:24 +02:00
}
2016-12-15 10:13:00 +01:00
2017-08-04 19:10:00 +02:00
try {
$history = new History ( $conf -> get ( 'resource.history' ));
} catch ( Exception $e ) {
die ( $e -> getMessage ());
}
2016-12-15 10:13:00 +01:00
$linkDb = new LinkDB (
$conf -> get ( 'resource.datastore' ),
2018-02-17 01:46:27 +01:00
$loginManager -> isLoggedIn (),
2016-12-15 10:13:00 +01:00
$conf -> get ( 'privacy.hide_public_links' ),
$conf -> get ( 'redirector.url' ),
$conf -> get ( 'redirector.encode_url' )
);
$container = new \Slim\Container ();
$container [ 'conf' ] = $conf ;
$container [ 'plugins' ] = $pluginManager ;
2017-05-07 16:50:20 +02:00
$container [ 'history' ] = $history ;
2016-12-15 10:13:00 +01:00
$app = new \Slim\App ( $container );
// REST API routes
$app -> group ( '/api/v1' , function () {
2017-01-05 15:58:24 +01:00
$this -> get ( '/info' , '\Shaarli\Api\Controllers\Info:getInfo' ) -> setName ( 'getInfo' );
$this -> get ( '/links' , '\Shaarli\Api\Controllers\Links:getLinks' ) -> setName ( 'getLinks' );
$this -> get ( '/links/{id:[\d]+}' , '\Shaarli\Api\Controllers\Links:getLink' ) -> setName ( 'getLink' );
$this -> post ( '/links' , '\Shaarli\Api\Controllers\Links:postLink' ) -> setName ( 'postLink' );
2017-04-01 11:11:25 +02:00
$this -> put ( '/links/{id:[\d]+}' , '\Shaarli\Api\Controllers\Links:putLink' ) -> setName ( 'putLink' );
2017-05-06 17:32:16 +02:00
$this -> delete ( '/links/{id:[\d]+}' , '\Shaarli\Api\Controllers\Links:deleteLink' ) -> setName ( 'deleteLink' );
2018-05-19 15:04:04 +02:00
$this -> get ( '/tags' , '\Shaarli\Api\Controllers\Tags:getTags' ) -> setName ( 'getTags' );
$this -> get ( '/tags/{tagName:[\w]+}' , '\Shaarli\Api\Controllers\Tags:getTag' ) -> setName ( 'getTag' );
$this -> put ( '/tags/{tagName:[\w]+}' , '\Shaarli\Api\Controllers\Tags:putTag' ) -> setName ( 'putTag' );
$this -> delete ( '/tags/{tagName:[\w]+}' , '\Shaarli\Api\Controllers\Tags:deleteTag' ) -> setName ( 'deleteTag' );
2017-05-06 19:39:39 +02:00
$this -> get ( '/history' , '\Shaarli\Api\Controllers\History:getHistory' ) -> setName ( 'getHistory' );
2017-01-02 18:37:08 +01:00
}) -> add ( '\Shaarli\Api\ApiMiddleware' );
2016-12-15 10:13:00 +01:00
$response = $app -> run ( true );
// Hack to make Slim and Shaarli router work together:
2016-12-24 10:30:21 +01:00
// If a Slim route isn't found and NOT API call, we call renderPage().
if ( $response -> getStatusCode () == 404 && strpos ( $_SERVER [ 'REQUEST_URI' ], '/api/v1' ) === false ) {
2016-12-15 10:13:00 +01:00
// We use UTF-8 for proper international characters handling.
header ( 'Content-Type: text/html; charset=utf-8' );
2017-10-25 23:03:31 +02:00
renderPage ( $conf , $pluginManager , $linkDb , $history , $sessionManager , $loginManager );
2016-12-15 10:13:00 +01:00
} else {
$app -> respond ( $response );
}