2014-07-23 15:52:50 +02:00
|
|
|
|
<?php
|
|
|
|
|
if (!function_exists('json_decode')) {
|
|
|
|
|
require_once('JSON.php');
|
2016-07-24 11:59:17 +02:00
|
|
|
|
function json_decode($var, $assoc = false) {
|
|
|
|
|
$JSON = new Services_JSON($assoc ? SERVICES_JSON_LOOSE_TYPE : 0);
|
|
|
|
|
return $JSON->decode($var);
|
2014-07-23 15:52:50 +02:00
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (!function_exists('json_encode')) {
|
|
|
|
|
require_once('JSON.php');
|
|
|
|
|
function json_encode($var) {
|
2016-07-24 11:59:17 +02:00
|
|
|
|
$JSON = new Services_JSON();
|
2014-07-23 15:52:50 +02:00
|
|
|
|
return $JSON->encodeUnsafe($var);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2016-07-24 11:59:17 +02:00
|
|
|
|
if (!function_exists('array_replace_recursive')) { //PHP 5.2
|
|
|
|
|
function arr_recurse($array, $array1) {
|
|
|
|
|
foreach ($array1 as $key => $value) {
|
|
|
|
|
if (!isset($array[$key]) || (isset($array[$key]) && !is_array($array[$key]))) {
|
|
|
|
|
$array[$key] = array(); //create new key in $array, if it is empty or not an array
|
|
|
|
|
}
|
|
|
|
|
if (is_array($value)) {
|
|
|
|
|
$value = arr_recurse($array[$key], $value); // overwrite the value in the base array
|
|
|
|
|
}
|
|
|
|
|
$array[$key] = $value;
|
|
|
|
|
}
|
|
|
|
|
return $array;
|
|
|
|
|
}
|
|
|
|
|
function array_replace_recursive($array, $array1) { //http://php.net/manual/function.array-replace-recursive.php#92574
|
|
|
|
|
// handle the arguments, merge one by one
|
|
|
|
|
$args = func_get_args();
|
|
|
|
|
$array = $args[0];
|
|
|
|
|
if (!is_array($array)) {
|
|
|
|
|
return $array;
|
|
|
|
|
}
|
|
|
|
|
for ($i = 1; $i < count($args); $i++) {
|
|
|
|
|
if (is_array($args[$i])) {
|
|
|
|
|
$array = arr_recurse($array, $args[$i]);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
return $array;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2015-02-08 18:55:48 +01:00
|
|
|
|
/**
|
|
|
|
|
* Build a directory path by concatenating a list of directory names.
|
|
|
|
|
*
|
|
|
|
|
* @param $path_parts a list of directory names
|
|
|
|
|
* @return a string corresponding to the final pathname
|
|
|
|
|
*/
|
|
|
|
|
function join_path() {
|
|
|
|
|
$path_parts = func_get_args();
|
|
|
|
|
return join(DIRECTORY_SEPARATOR, $path_parts);
|
|
|
|
|
}
|
|
|
|
|
|
2014-07-23 15:52:50 +02:00
|
|
|
|
//<Auto-loading>
|
|
|
|
|
function classAutoloader($class) {
|
|
|
|
|
if (strpos($class, 'FreshRSS') === 0) {
|
|
|
|
|
$components = explode('_', $class);
|
|
|
|
|
switch (count($components)) {
|
|
|
|
|
case 1:
|
|
|
|
|
include(APP_PATH . '/' . $components[0] . '.php');
|
|
|
|
|
return;
|
|
|
|
|
case 2:
|
|
|
|
|
include(APP_PATH . '/Models/' . $components[1] . '.php');
|
|
|
|
|
return;
|
|
|
|
|
case 3: //Controllers, Exceptions
|
2015-11-06 16:54:20 +01:00
|
|
|
|
include(APP_PATH . '/' . $components[2] . 's/' . $components[1] . $components[2] . '.php');
|
2014-07-23 15:52:50 +02:00
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
} elseif (strpos($class, 'Minz') === 0) {
|
|
|
|
|
include(LIB_PATH . '/' . str_replace('_', '/', $class) . '.php');
|
|
|
|
|
} elseif (strpos($class, 'SimplePie') === 0) {
|
|
|
|
|
include(LIB_PATH . '/SimplePie/' . str_replace('_', '/', $class) . '.php');
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
spl_autoload_register('classAutoloader');
|
|
|
|
|
//</Auto-loading>
|
|
|
|
|
|
2015-11-06 16:54:20 +01:00
|
|
|
|
function idn_to_puny($url) {
|
|
|
|
|
if (function_exists('idn_to_ascii')) {
|
|
|
|
|
$parts = parse_url($url);
|
|
|
|
|
if (!empty($parts['host'])) {
|
|
|
|
|
$idn = $parts['host'];
|
|
|
|
|
$puny = idn_to_ascii($idn);
|
|
|
|
|
$pos = strpos($url, $idn);
|
|
|
|
|
if ($pos !== false) {
|
|
|
|
|
return substr_replace($url, $puny, $pos, strlen($idn));
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
return $url;
|
|
|
|
|
}
|
|
|
|
|
|
2014-07-23 15:52:50 +02:00
|
|
|
|
function checkUrl($url) {
|
|
|
|
|
if (empty ($url)) {
|
|
|
|
|
return '';
|
|
|
|
|
}
|
|
|
|
|
if (!preg_match ('#^https?://#i', $url)) {
|
|
|
|
|
$url = 'http://' . $url;
|
|
|
|
|
}
|
2015-11-06 16:54:20 +01:00
|
|
|
|
$url = idn_to_puny($url); //PHP bug #53474 IDN
|
2014-07-23 15:52:50 +02:00
|
|
|
|
if (filter_var($url, FILTER_VALIDATE_URL) ||
|
|
|
|
|
(version_compare(PHP_VERSION, '5.3.3', '<') && (strpos($url, '-') > 0) && //PHP bug #51192
|
|
|
|
|
($url === filter_var($url, FILTER_SANITIZE_URL)))) {
|
|
|
|
|
return $url;
|
|
|
|
|
} else {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2015-11-06 16:54:20 +01:00
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Test if a given server address is publicly accessible.
|
|
|
|
|
*
|
|
|
|
|
* Note: for the moment it tests only if address is corresponding to a
|
|
|
|
|
* localhost address.
|
|
|
|
|
*
|
|
|
|
|
* @param $address the address to test, can be an IP or a URL.
|
|
|
|
|
* @return true if server is accessible, false else.
|
|
|
|
|
* @todo improve test with a more valid technique (e.g. test with an external server?)
|
|
|
|
|
*/
|
|
|
|
|
function server_is_public($address) {
|
|
|
|
|
$host = parse_url($address, PHP_URL_HOST);
|
|
|
|
|
|
|
|
|
|
$is_public = !in_array($host, array(
|
|
|
|
|
'127.0.0.1',
|
|
|
|
|
'localhost',
|
|
|
|
|
'localhost.localdomain',
|
|
|
|
|
'[::1]',
|
|
|
|
|
'localhost6',
|
|
|
|
|
'localhost6.localdomain6',
|
|
|
|
|
));
|
|
|
|
|
|
|
|
|
|
return $is_public;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
2015-02-08 18:55:48 +01:00
|
|
|
|
function format_number($n, $precision = 0) {
|
|
|
|
|
// number_format does not seem to be Unicode-compatible
|
|
|
|
|
return str_replace(' ', ' ', //Espace fine insécable
|
|
|
|
|
number_format($n, $precision, '.', ' ')
|
|
|
|
|
);
|
2014-07-23 15:52:50 +02:00
|
|
|
|
}
|
|
|
|
|
|
2015-02-08 18:55:48 +01:00
|
|
|
|
function format_bytes($bytes, $precision = 2, $system = 'IEC') {
|
2014-07-23 15:52:50 +02:00
|
|
|
|
if ($system === 'IEC') {
|
|
|
|
|
$base = 1024;
|
|
|
|
|
$units = array('B', 'KiB', 'MiB', 'GiB', 'TiB');
|
|
|
|
|
} elseif ($system === 'SI') {
|
|
|
|
|
$base = 1000;
|
|
|
|
|
$units = array('B', 'KB', 'MB', 'GB', 'TB');
|
|
|
|
|
}
|
|
|
|
|
$bytes = max(intval($bytes), 0);
|
|
|
|
|
$pow = $bytes === 0 ? 0 : floor(log($bytes) / log($base));
|
|
|
|
|
$pow = min($pow, count($units) - 1);
|
|
|
|
|
$bytes /= pow($base, $pow);
|
2015-02-08 18:55:48 +01:00
|
|
|
|
return format_number($bytes, $precision) . ' ' . $units[$pow];
|
2014-07-23 15:52:50 +02:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function timestamptodate ($t, $hour = true) {
|
2015-02-08 18:55:48 +01:00
|
|
|
|
$month = _t('gen.date.' . date('M', $t));
|
2014-07-23 15:52:50 +02:00
|
|
|
|
if ($hour) {
|
2015-02-08 18:55:48 +01:00
|
|
|
|
$date = _t('gen.date.format_date_hour', $month);
|
2014-07-23 15:52:50 +02:00
|
|
|
|
} else {
|
2015-02-08 18:55:48 +01:00
|
|
|
|
$date = _t('gen.date.format_date', $month);
|
2014-07-23 15:52:50 +02:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return @date ($date, $t);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function html_only_entity_decode($text) {
|
|
|
|
|
static $htmlEntitiesOnly = null;
|
|
|
|
|
if ($htmlEntitiesOnly === null) {
|
|
|
|
|
if (version_compare(PHP_VERSION, '5.3.4') >= 0) {
|
|
|
|
|
$htmlEntitiesOnly = array_flip(array_diff(
|
|
|
|
|
get_html_translation_table(HTML_ENTITIES, ENT_NOQUOTES, 'UTF-8'), //Decode HTML entities
|
|
|
|
|
get_html_translation_table(HTML_SPECIALCHARS, ENT_NOQUOTES, 'UTF-8') //Preserve XML entities
|
|
|
|
|
));
|
|
|
|
|
} else {
|
|
|
|
|
$htmlEntitiesOnly = array_map('utf8_encode', array_flip(array_diff(
|
|
|
|
|
get_html_translation_table(HTML_ENTITIES, ENT_NOQUOTES), //Decode HTML entities
|
|
|
|
|
get_html_translation_table(HTML_SPECIALCHARS, ENT_NOQUOTES) //Preserve XML entities
|
|
|
|
|
)));
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
return strtr($text, $htmlEntitiesOnly);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function customSimplePie() {
|
2015-02-08 18:55:48 +01:00
|
|
|
|
$system_conf = Minz_Configuration::get('system');
|
|
|
|
|
$limits = $system_conf->limits;
|
2014-07-23 15:52:50 +02:00
|
|
|
|
$simplePie = new SimplePie();
|
2015-02-08 18:55:48 +01:00
|
|
|
|
$simplePie->set_useragent(_t('gen.freshrss') . '/' . FRESHRSS_VERSION . ' (' . PHP_OS . '; ' . FRESHRSS_WEBSITE . ') ' . SIMPLEPIE_NAME . '/' . SIMPLEPIE_VERSION);
|
2015-11-06 16:54:20 +01:00
|
|
|
|
$simplePie->set_syslog($system_conf->simplepie_syslog_enabled);
|
2014-07-23 15:52:50 +02:00
|
|
|
|
$simplePie->set_cache_location(CACHE_PATH);
|
2015-02-08 18:55:48 +01:00
|
|
|
|
$simplePie->set_cache_duration($limits['cache_duration']);
|
|
|
|
|
$simplePie->set_timeout($limits['timeout']);
|
2015-11-06 16:54:20 +01:00
|
|
|
|
$simplePie->set_curl_options($system_conf->curl_options);
|
2014-07-23 15:52:50 +02:00
|
|
|
|
$simplePie->strip_htmltags(array(
|
|
|
|
|
'base', 'blink', 'body', 'doctype', 'embed',
|
|
|
|
|
'font', 'form', 'frame', 'frameset', 'html',
|
|
|
|
|
'link', 'input', 'marquee', 'meta', 'noscript',
|
|
|
|
|
'object', 'param', 'plaintext', 'script', 'style',
|
|
|
|
|
));
|
|
|
|
|
$simplePie->strip_attributes(array_merge($simplePie->strip_attributes, array(
|
|
|
|
|
'autoplay', 'onload', 'onunload', 'onclick', 'ondblclick', 'onmousedown', 'onmouseup',
|
|
|
|
|
'onmouseover', 'onmousemove', 'onmouseout', 'onfocus', 'onblur',
|
2016-07-24 11:59:17 +02:00
|
|
|
|
'onkeypress', 'onkeydown', 'onkeyup', 'onselect', 'onchange', 'seamless', 'sizes', 'srcset')));
|
2014-07-23 15:52:50 +02:00
|
|
|
|
$simplePie->add_attributes(array(
|
2014-09-21 12:12:35 +02:00
|
|
|
|
'img' => array('lazyload' => '', 'postpone' => ''), //http://www.w3.org/TR/resource-priorities/
|
|
|
|
|
'audio' => array('lazyload' => '', 'postpone' => '', 'preload' => 'none'),
|
|
|
|
|
'iframe' => array('lazyload' => '', 'postpone' => '', 'sandbox' => 'allow-scripts allow-same-origin'),
|
|
|
|
|
'video' => array('lazyload' => '', 'postpone' => '', 'preload' => 'none'),
|
2014-07-23 15:52:50 +02:00
|
|
|
|
));
|
|
|
|
|
$simplePie->set_url_replacements(array(
|
|
|
|
|
'a' => 'href',
|
|
|
|
|
'area' => 'href',
|
|
|
|
|
'audio' => 'src',
|
|
|
|
|
'blockquote' => 'cite',
|
|
|
|
|
'del' => 'cite',
|
|
|
|
|
'form' => 'action',
|
|
|
|
|
'iframe' => 'src',
|
|
|
|
|
'img' => array(
|
|
|
|
|
'longdesc',
|
|
|
|
|
'src'
|
|
|
|
|
),
|
|
|
|
|
'input' => 'src',
|
|
|
|
|
'ins' => 'cite',
|
|
|
|
|
'q' => 'cite',
|
|
|
|
|
'source' => 'src',
|
|
|
|
|
'track' => 'src',
|
|
|
|
|
'video' => array(
|
|
|
|
|
'poster',
|
|
|
|
|
'src',
|
|
|
|
|
),
|
|
|
|
|
));
|
2016-07-24 11:59:17 +02:00
|
|
|
|
$https_domains = array();
|
|
|
|
|
$force = @file(DATA_PATH . '/force-https.default.txt', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
|
|
|
|
|
if (is_array($force)) {
|
|
|
|
|
$https_domains = array_merge($https_domains, $force);
|
|
|
|
|
}
|
|
|
|
|
$force = @file(DATA_PATH . '/force-https.txt', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
|
|
|
|
|
if (is_array($force)) {
|
|
|
|
|
$https_domains = array_merge($https_domains, $force);
|
|
|
|
|
}
|
|
|
|
|
$simplePie->set_https_domains($https_domains);
|
2014-07-23 15:52:50 +02:00
|
|
|
|
return $simplePie;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function sanitizeHTML($data, $base = '') {
|
|
|
|
|
static $simplePie = null;
|
|
|
|
|
if ($simplePie == null) {
|
|
|
|
|
$simplePie = customSimplePie();
|
|
|
|
|
$simplePie->init();
|
|
|
|
|
}
|
|
|
|
|
return html_only_entity_decode($simplePie->sanitize->sanitize($data, SIMPLEPIE_CONSTRUCT_HTML, $base));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* permet de récupérer le contenu d'un article pour un flux qui n'est pas complet */
|
|
|
|
|
function get_content_by_parsing ($url, $path) {
|
2015-11-06 16:54:20 +01:00
|
|
|
|
require_once(LIB_PATH . '/lib_phpQuery.php');
|
2014-07-23 15:52:50 +02:00
|
|
|
|
|
2015-11-06 16:54:20 +01:00
|
|
|
|
Minz_Log::notice('FreshRSS GET ' . SimplePie_Misc::url_remove_credentials($url));
|
|
|
|
|
$html = file_get_contents($url);
|
2014-07-23 15:52:50 +02:00
|
|
|
|
|
|
|
|
|
if ($html) {
|
2015-11-06 16:54:20 +01:00
|
|
|
|
$doc = phpQuery::newDocument($html);
|
|
|
|
|
$content = $doc->find($path);
|
|
|
|
|
|
|
|
|
|
foreach (pq('img[data-src]') as $img) {
|
|
|
|
|
$imgP = pq($img);
|
|
|
|
|
$dataSrc = $imgP->attr('data-src');
|
|
|
|
|
if (strlen($dataSrc) > 4) {
|
|
|
|
|
$imgP->attr('src', $dataSrc);
|
|
|
|
|
$imgP->removeAttr('data-src');
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2014-07-23 15:52:50 +02:00
|
|
|
|
return sanitizeHTML($content->__toString(), $url);
|
|
|
|
|
} else {
|
2015-11-06 16:54:20 +01:00
|
|
|
|
throw new Exception();
|
2014-07-23 15:52:50 +02:00
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Add support of image lazy loading
|
|
|
|
|
* Move content from src attribute to data-original
|
|
|
|
|
* @param content is the text we want to parse
|
|
|
|
|
*/
|
|
|
|
|
function lazyimg($content) {
|
|
|
|
|
return preg_replace(
|
2014-09-21 12:12:35 +02:00
|
|
|
|
'/<((?:img|iframe)[^>]+?)src=[\'"]([^"\']+)[\'"]([^>]*)>/i',
|
|
|
|
|
'<$1src="' . Minz_Url::display('/themes/icons/grey.gif') . '" data-original="$2"$3>',
|
2014-07-23 15:52:50 +02:00
|
|
|
|
$content
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function uTimeString() {
|
|
|
|
|
$t = @gettimeofday();
|
|
|
|
|
return $t['sec'] . str_pad($t['usec'], 6, '0');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function uSecString() {
|
|
|
|
|
$t = @gettimeofday();
|
|
|
|
|
return str_pad($t['usec'], 6, '0');
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function invalidateHttpCache() {
|
|
|
|
|
Minz_Session::_param('touch', uTimeString());
|
2015-02-08 18:55:48 +01:00
|
|
|
|
return touch(join_path(DATA_PATH, 'users', Minz_Session::param('currentUser', '_'), 'log.txt'));
|
2014-07-23 15:52:50 +02:00
|
|
|
|
}
|
|
|
|
|
|
2015-02-08 18:55:48 +01:00
|
|
|
|
function listUsers() {
|
|
|
|
|
$final_list = array();
|
|
|
|
|
$base_path = join_path(DATA_PATH, 'users');
|
|
|
|
|
$dir_list = array_values(array_diff(
|
|
|
|
|
scandir($base_path),
|
|
|
|
|
array('..', '.', '_')
|
|
|
|
|
));
|
|
|
|
|
|
|
|
|
|
foreach ($dir_list as $file) {
|
|
|
|
|
if (is_dir(join_path($base_path, $file))) {
|
|
|
|
|
$final_list[] = $file;
|
|
|
|
|
}
|
2014-07-23 15:52:50 +02:00
|
|
|
|
}
|
2015-02-08 18:55:48 +01:00
|
|
|
|
|
|
|
|
|
return $final_list;
|
2014-07-23 15:52:50 +02:00
|
|
|
|
}
|
|
|
|
|
|
2015-02-08 18:55:48 +01:00
|
|
|
|
|
2015-11-06 16:54:20 +01:00
|
|
|
|
/**
|
|
|
|
|
* Return if the maximum number of registrations has been reached.
|
|
|
|
|
*
|
|
|
|
|
* Note a max_regstrations of 0 means there is no limit.
|
|
|
|
|
*
|
|
|
|
|
* @return true if number of users >= max registrations, false else.
|
|
|
|
|
*/
|
|
|
|
|
function max_registrations_reached() {
|
|
|
|
|
$system_conf = Minz_Configuration::get('system');
|
|
|
|
|
$limit_registrations = $system_conf->limits['max_registrations'];
|
|
|
|
|
$number_accounts = count(listUsers());
|
|
|
|
|
|
|
|
|
|
return $limit_registrations > 0 && $number_accounts >= $limit_registrations;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
2015-02-08 18:55:48 +01:00
|
|
|
|
/**
|
|
|
|
|
* Register and return the configuration for a given user.
|
|
|
|
|
*
|
|
|
|
|
* Note this function has been created to generate temporary configuration
|
|
|
|
|
* objects. If you need a long-time configuration, please don't use this function.
|
|
|
|
|
*
|
|
|
|
|
* @param $username the name of the user of which we want the configuration.
|
|
|
|
|
* @return a Minz_Configuration object, null if the configuration cannot be loaded.
|
|
|
|
|
*/
|
|
|
|
|
function get_user_configuration($username) {
|
|
|
|
|
$namespace = 'user_' . $username;
|
|
|
|
|
try {
|
|
|
|
|
Minz_Configuration::register($namespace,
|
|
|
|
|
join_path(USERS_PATH, $username, 'config.php'),
|
|
|
|
|
join_path(USERS_PATH, '_', 'config.default.php'));
|
|
|
|
|
} catch (Minz_ConfigurationNamespaceException $e) {
|
|
|
|
|
// namespace already exists, do nothing.
|
|
|
|
|
} catch (Minz_FileNotExistException $e) {
|
|
|
|
|
Minz_Log::warning($e->getMessage());
|
|
|
|
|
return null;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return Minz_Configuration::get($namespace);
|
2014-07-23 15:52:50 +02:00
|
|
|
|
}
|
|
|
|
|
|
2015-02-08 18:55:48 +01:00
|
|
|
|
|
2014-07-23 15:52:50 +02:00
|
|
|
|
function httpAuthUser() {
|
|
|
|
|
return isset($_SERVER['REMOTE_USER']) ? $_SERVER['REMOTE_USER'] : '';
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function cryptAvailable() {
|
|
|
|
|
if (version_compare(PHP_VERSION, '5.3.3', '>=')) {
|
|
|
|
|
try {
|
|
|
|
|
$hash = '$2y$04$usesomesillystringfore7hnbRJHxXVLeakoG8K30oukPsA.ztMG';
|
|
|
|
|
return $hash === @crypt('password', $hash);
|
|
|
|
|
} catch (Exception $e) {
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
return false;
|
|
|
|
|
}
|
2014-09-27 10:10:43 +02:00
|
|
|
|
|
|
|
|
|
function is_referer_from_same_domain() {
|
|
|
|
|
if (empty($_SERVER['HTTP_REFERER'])) {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
$host = parse_url(((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on') ? 'https://' : 'http://') .
|
|
|
|
|
(empty($_SERVER['HTTP_HOST']) ? $_SERVER['SERVER_NAME'] : $_SERVER['HTTP_HOST']));
|
|
|
|
|
$referer = parse_url($_SERVER['HTTP_REFERER']);
|
2015-02-08 18:55:48 +01:00
|
|
|
|
if (empty($host['host']) || empty($referer['host']) || $host['host'] !== $referer['host']) {
|
2014-09-27 10:10:43 +02:00
|
|
|
|
return false;
|
|
|
|
|
}
|
2015-02-08 18:55:48 +01:00
|
|
|
|
//TODO: check 'scheme', taking into account the case of a proxy
|
|
|
|
|
if ((isset($host['port']) ? $host['port'] : 0) !== (isset($referer['port']) ? $referer['port'] : 0)) {
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
return true;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Check PHP and its extensions are well-installed.
|
|
|
|
|
*
|
|
|
|
|
* @return array of tested values.
|
|
|
|
|
*/
|
|
|
|
|
function check_install_php() {
|
|
|
|
|
$pdo_mysql = extension_loaded('pdo_mysql');
|
|
|
|
|
$pdo_sqlite = extension_loaded('pdo_sqlite');
|
|
|
|
|
return array(
|
|
|
|
|
'php' => version_compare(PHP_VERSION, '5.2.1') >= 0,
|
|
|
|
|
'minz' => file_exists(LIB_PATH . '/Minz'),
|
|
|
|
|
'curl' => extension_loaded('curl'),
|
|
|
|
|
'pdo' => $pdo_mysql || $pdo_sqlite,
|
|
|
|
|
'pcre' => extension_loaded('pcre'),
|
|
|
|
|
'ctype' => extension_loaded('ctype'),
|
|
|
|
|
'dom' => class_exists('DOMDocument'),
|
|
|
|
|
'json' => extension_loaded('json'),
|
|
|
|
|
'zip' => extension_loaded('zip'),
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Check different data files and directories exist.
|
|
|
|
|
*
|
|
|
|
|
* @return array of tested values.
|
|
|
|
|
*/
|
|
|
|
|
function check_install_files() {
|
|
|
|
|
return array(
|
|
|
|
|
'data' => DATA_PATH && is_writable(DATA_PATH),
|
|
|
|
|
'cache' => CACHE_PATH && is_writable(CACHE_PATH),
|
|
|
|
|
'users' => USERS_PATH && is_writable(USERS_PATH),
|
|
|
|
|
'favicons' => is_writable(DATA_PATH . '/favicons'),
|
|
|
|
|
'persona' => is_writable(DATA_PATH . '/persona'),
|
|
|
|
|
'tokens' => is_writable(DATA_PATH . '/tokens'),
|
|
|
|
|
);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Check database is well-installed.
|
|
|
|
|
*
|
|
|
|
|
* @return array of tested values.
|
|
|
|
|
*/
|
|
|
|
|
function check_install_database() {
|
|
|
|
|
$status = array(
|
|
|
|
|
'connection' => true,
|
|
|
|
|
'tables' => false,
|
|
|
|
|
'categories' => false,
|
|
|
|
|
'feeds' => false,
|
|
|
|
|
'entries' => false,
|
|
|
|
|
);
|
|
|
|
|
|
|
|
|
|
try {
|
|
|
|
|
$dbDAO = FreshRSS_Factory::createDatabaseDAO();
|
|
|
|
|
|
|
|
|
|
$status['tables'] = $dbDAO->tablesAreCorrect();
|
|
|
|
|
$status['categories'] = $dbDAO->categoryIsCorrect();
|
|
|
|
|
$status['feeds'] = $dbDAO->feedIsCorrect();
|
|
|
|
|
$status['entries'] = $dbDAO->entryIsCorrect();
|
|
|
|
|
} catch(Minz_PDOConnectionException $e) {
|
|
|
|
|
$status['connection'] = false;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return $status;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Remove a directory recursively.
|
|
|
|
|
*
|
|
|
|
|
* From http://php.net/rmdir#110489
|
|
|
|
|
*
|
|
|
|
|
* @param $dir the directory to remove
|
|
|
|
|
*/
|
|
|
|
|
function recursive_unlink($dir) {
|
|
|
|
|
if (!is_dir($dir)) {
|
|
|
|
|
return true;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$files = array_diff(scandir($dir), array('.', '..'));
|
|
|
|
|
foreach ($files as $filename) {
|
|
|
|
|
$filename = $dir . '/' . $filename;
|
|
|
|
|
if (is_dir($filename)) {
|
|
|
|
|
@chmod($filename, 0777);
|
|
|
|
|
recursive_unlink($filename);
|
|
|
|
|
} else {
|
|
|
|
|
unlink($filename);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return rmdir($dir);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Remove queries where $get is appearing.
|
|
|
|
|
* @param $get the get attribute which should be removed.
|
|
|
|
|
* @param $queries an array of queries.
|
|
|
|
|
* @return the same array whithout those where $get is appearing.
|
|
|
|
|
*/
|
|
|
|
|
function remove_query_by_get($get, $queries) {
|
|
|
|
|
$final_queries = array();
|
|
|
|
|
foreach ($queries as $key => $query) {
|
|
|
|
|
if (empty($query['get']) || $query['get'] !== $get) {
|
|
|
|
|
$final_queries[$key] = $query;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
return $final_queries;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Add a value in an array and take care it is unique.
|
|
|
|
|
* @param $array the array in which we add the value.
|
|
|
|
|
* @param $value the value to add.
|
|
|
|
|
*/
|
|
|
|
|
function array_push_unique(&$array, $value) {
|
|
|
|
|
$found = array_search($value, $array) !== false;
|
|
|
|
|
if (!$found) {
|
|
|
|
|
$array[] = $value;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Remove a value from an array.
|
|
|
|
|
* @param $array the array from wich value is removed.
|
|
|
|
|
* @param $value the value to remove.
|
|
|
|
|
*/
|
|
|
|
|
function array_remove(&$array, $value) {
|
|
|
|
|
$array = array_diff($array, array($value));
|
|
|
|
|
}
|
|
|
|
|
|
2015-11-06 16:54:20 +01:00
|
|
|
|
//RFC 4648
|
|
|
|
|
function base64url_encode($data) {
|
|
|
|
|
return strtr(rtrim(base64_encode($data), '='), '+/', '-_');
|
|
|
|
|
}
|
|
|
|
|
//RFC 4648
|
|
|
|
|
function base64url_decode($data) {
|
|
|
|
|
return base64_decode(strtr($data, '-_', '+/'));
|
2014-09-27 10:10:43 +02:00
|
|
|
|
}
|
2016-07-24 11:59:17 +02:00
|
|
|
|
|
|
|
|
|
function _i($icon, $url_only = false) {
|
|
|
|
|
return FreshRSS_Themes::icon($icon, $url_only);
|
|
|
|
|
}
|