$value){
- $value = AJXP_Utils::xmlEntities($value, true);
- $string .= " $key=\"$value\"";
- }
- if($close){
- $string .= "/>";
- }else{
- $string .= ">";
- }
- return AJXP_XMLWriter::write($string, $print);
- }
-
- /**
- * @static
- * @param AJXP_Node $ajxpNode
- * @param bool $close
- * @param bool $print
- * @return void|string
- */
- static function renderAjxpNode($ajxpNode, $close = true, $print = true){
- return AJXP_XMLWriter::renderNode(
- $ajxpNode->getPath(),
- $ajxpNode->getLabel(),
- $ajxpNode->isLeaf(),
- $ajxpNode->metadata,
- $close,
- $print);
- }
-
- /**
- * Render a node with arguments passed as array
- * @static
- * @param $array
- * @return void
- */
- static function renderNodeArray($array){
- self::renderNode($array[0],$array[1],$array[2],$array[3]);
- }
- /**
- * Error Catcher for PHP errors. Depending on the SERVER_DEBUG config
- * shows the file/line info or not.
- * @static
- * @param $code
- * @param $message
- * @param $fichier
- * @param $ligne
- * @param $context
- * @return
- */
- static function catchError($code, $message, $fichier, $ligne, $context){
- if(error_reporting() == 0) return ;
- if(ConfService::getConf("SERVER_DEBUG")){
- $message = "$message in $fichier (l.$ligne)";
- }
- try{
- AJXP_Logger::logAction("error", array("message" => $message));
- }catch(Exception $e){
- // This will probably trigger a double exception!
- echo "Error in error";
- debug_print_backtrace();
- echo "
";
- die("Recursive exception. Original error was : ".$message. " in $fichier , line $ligne");
- }
- if(!headers_sent()) AJXP_XMLWriter::header();
- AJXP_XMLWriter::sendMessage(null, SystemTextEncoding::toUTF8($message), true);
- AJXP_XMLWriter::close();
- exit(1);
- }
-
- /**
- * Catch exceptions, @see catchError
- * @param Exception $exception
- */
- static function catchException($exception){
- try{
- AJXP_XMLWriter::catchError($exception->getCode(), SystemTextEncoding::fromUTF8($exception->getMessage()), $exception->getFile(), $exception->getLine(), null);
- }catch(Exception $innerEx){
- print get_class($innerEx)." thrown within the exception handler! Message was: ".$innerEx->getMessage()." in ".$innerEx->getFile()." on line ".$innerEx->getLine()." ".$innerEx->getTraceAsString();
- }
- }
- /**
- * Dynamically replace XML keywords with their live values.
- * AJXP_SERVER_ACCESS, AJXP_MIMES_*,AJXP_ALL_MESSAGES, etc.
- * @static
- * @param string $xml
- * @param bool $stripSpaces
- * @return mixed
- */
- static function replaceAjxpXmlKeywords($xml, $stripSpaces = false){
- $messages = ConfService::getMessages();
- $confMessages = ConfService::getMessagesConf();
- $matches = array();
- if(isSet($_SESSION["AJXP_SERVER_PREFIX_URI"])){
- //$xml = str_replace("AJXP_THEME_FOLDER", $_SESSION["AJXP_SERVER_PREFIX_URI"].AJXP_THEME_FOLDER, $xml);
- $xml = str_replace("AJXP_SERVER_ACCESS", $_SESSION["AJXP_SERVER_PREFIX_URI"].AJXP_SERVER_ACCESS, $xml);
- }else{
- //$xml = str_replace("AJXP_THEME_FOLDER", AJXP_THEME_FOLDER, $xml);
- $xml = str_replace("AJXP_SERVER_ACCESS", AJXP_SERVER_ACCESS, $xml);
- }
- $xml = str_replace("AJXP_MIMES_EDITABLE", AJXP_Utils::getAjxpMimes("editable"), $xml);
- $xml = str_replace("AJXP_MIMES_IMAGE", AJXP_Utils::getAjxpMimes("image"), $xml);
- $xml = str_replace("AJXP_MIMES_AUDIO", AJXP_Utils::getAjxpMimes("audio"), $xml);
- $xml = str_replace("AJXP_MIMES_ZIP", AJXP_Utils::getAjxpMimes("zip"), $xml);
- $authDriver = ConfService::getAuthDriverImpl();
- if($authDriver != NULL){
- $loginRedirect = $authDriver->getLoginRedirect();
- $xml = str_replace("AJXP_LOGIN_REDIRECT", ($loginRedirect!==false?"'".$loginRedirect."'":"false"), $xml);
- }
- $xml = str_replace("AJXP_REMOTE_AUTH", "false", $xml);
- $xml = str_replace("AJXP_NOT_REMOTE_AUTH", "true", $xml);
- $xml = str_replace("AJXP_ALL_MESSAGES", "MessageHash=".json_encode(ConfService::getMessages()).";", $xml);
-
- if(preg_match_all("/AJXP_MESSAGE(\[.*?\])/", $xml, $matches, PREG_SET_ORDER)){
- foreach($matches as $match){
- $messId = str_replace("]", "", str_replace("[", "", $match[1]));
- $xml = str_replace("AJXP_MESSAGE[$messId]", $messages[$messId], $xml);
- }
- }
- if(preg_match_all("/CONF_MESSAGE(\[.*?\])/", $xml, $matches, PREG_SET_ORDER)){
- foreach($matches as $match){
- $messId = str_replace(array("[", "]"), "", $match[1]);
- $message = $messId;
- if(array_key_exists($messId, $confMessages)){
- $message = $confMessages[$messId];
- }
- $xml = str_replace("CONF_MESSAGE[$messId]", $message, $xml);
- }
- }
- if(preg_match_all("/MIXIN_MESSAGE(\[.*?\])/", $xml, $matches, PREG_SET_ORDER)){
- foreach($matches as $match){
- $messId = str_replace(array("[", "]"), "", $match[1]);
- $message = $messId;
- if(array_key_exists($messId, $confMessages)){
- $message = $confMessages[$messId];
- }
- $xml = str_replace("MIXIN_MESSAGE[$messId]", $message, $xml);
- }
- }
- if($stripSpaces){
- $xml = preg_replace("/[\n\r]?/", "", $xml);
- $xml = preg_replace("/\t/", " ", $xml);
- }
- $xml = str_replace(array('xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"','xsi:noNamespaceSchemaLocation="file:../core.ajaxplorer/ajxp_registry.xsd"'), "", $xml);
- $tab = array(&$xml);
- AJXP_Controller::applyIncludeHook("xml.filter", $tab);
- return $xml;
- }
- /**
- * Send a XML instruction for refreshing the list
- * @static
- * @param string $nodePath
- * @param string $pendingSelection
- * @param bool $print
- * @return string
- */
- static function reloadDataNode($nodePath="", $pendingSelection="", $print = true){
- $nodePath = AJXP_Utils::xmlEntities($nodePath, true);
- $pendingSelection = AJXP_Utils::xmlEntities($pendingSelection, true);
- return AJXP_XMLWriter::write("", $print);
- }
-
-
- /**
- * Send a XML instruction for refreshing the list
- * @static
- * @param string $nodePath
- * @param string $pendingSelection
- * @param bool $print
- * @return string
- */
- static function writeNodesDiff($diffNodes, $print = false){
- $mess = ConfService::getMessages();
- $buffer = "";
- if(isSet($diffNodes["REMOVE"]) && count($diffNodes["REMOVE"])){
- $buffer .= "";
- foreach($diffNodes["REMOVE"] as $nodePath){
- $nodePath = AJXP_Utils::xmlEntities($nodePath, true);
- $buffer .= "";
- }
- $buffer .= "";
- }
- if(isSet($diffNodes["ADD"]) && count($diffNodes["ADD"])){
- $buffer .= "";
- foreach($diffNodes["ADD"] as $ajxpNode){
- $ajxpNode->loadNodeInfo(false, false, "all");
- if(!empty($ajxpNode->metaData["mimestring_id"]) && array_key_exists($ajxpNode->metaData["mimestring_id"], $mess)){
- $ajxpNode->mergeMetadata(array("mimestring" => $mess[$ajxpNode->metaData["mimestring_id"]]));
- }
- $buffer .= self::renderAjxpNode($ajxpNode, true, false);
- }
- $buffer .= "";
- }
- if(isSet($diffNodes["UPDATE"]) && count($diffNodes["UPDATE"])){
- $buffer .= "";
- foreach($diffNodes["UPDATE"] as $originalPath => $ajxpNode){
- $ajxpNode->loadNodeInfo(false, false, "all");
- if(!empty($ajxpNode->metaData["mimestring_id"]) && array_key_exists($ajxpNode->metaData["mimestring_id"], $mess)){
- $ajxpNode->mergeMetadata(array("mimestring" => $mess[$ajxpNode->metaData["mimestring_id"]]));
- }
- $ajxpNode->original_path = $originalPath;
- $buffer .= self::renderAjxpNode($ajxpNode, true, false);
- }
- $buffer .= "";
- }
- $buffer .= "";
- return AJXP_XMLWriter::write($buffer, $print);
-
- /*
- $nodePath = AJXP_Utils::xmlEntities($nodePath, true);
- $pendingSelection = AJXP_Utils::xmlEntities($pendingSelection, true);
- return AJXP_XMLWriter::write("", $print);
- */
- }
-
-
- /**
- * Send a XML instruction for refreshing the repositories list
- * @static
- * @param bool $print
- * @return string
- */
- static function reloadRepositoryList($print = true){
- return AJXP_XMLWriter::write("", $print);
- }
- /**
- * Outputs a tag
- * @static
- * @param bool $print
- * @return string
- */
- static function requireAuth($print = true)
- {
- return AJXP_XMLWriter::write("", $print);
- }
- /**
- * Triggers a background action client side
- * @static
- * @param $actionName
- * @param $parameters
- * @param $messageId
- * @param bool $print
- * @param int $delay
- * @return string
- */
- static function triggerBgAction($actionName, $parameters, $messageId, $print=true, $delay = 0){
- $messageId = AJXP_Utils::xmlEntities($messageId);
- $data = AJXP_XMLWriter::write("", $print);
- foreach ($parameters as $paramName=>$paramValue){
- $paramValue = AJXP_Utils::xmlEntities($paramValue);
- $data .= AJXP_XMLWriter::write("", $print);
- }
- $data .= AJXP_XMLWriter::write("", $print);
- return $data;
- }
-
- static function triggerBgJSAction($jsCode, $messageId, $print=true, $delay = 0){
- $data = AJXP_XMLWriter::write("", $print);
- $data .= AJXP_XMLWriter::write("", $print);
- $data .= AJXP_XMLWriter::write("", $print);
- return $data;
- }
-
- /**
- * List all bookmmarks as XML
- * @static
- * @param $allBookmarks
- * @param bool $print
- * @param string $format legacy|node_list
- * @return string
- */
- static function writeBookmarks($allBookmarks, $print = true, $format = "legacy")
- {
- if($format == "node_list") {
- $driver = ConfService::loadRepositoryDriver();
- if(!is_a($driver, "AjxpWrapperProvider")){
- $driver = false;
- }
- }
- $buffer = "";
- foreach ($allBookmarks as $bookmark)
- {
- $path = ""; $title = "";
- if(is_array($bookmark)){
- $path = $bookmark["PATH"];
- $title = $bookmark["TITLE"];
- }else if(is_string($bookmark)){
- $path = $bookmark;
- $title = basename($bookmark);
- }
- if($format == "node_list"){
- if($driver){
- $node = new AJXP_Node($driver->getResourceUrl($path));
- $buffer .= AJXP_XMLWriter::renderAjxpNode($node, true, false);
- }else{
- $buffer .= AJXP_XMLWriter::renderNode($path, $title, false, array('icon' => "mime_empty.png"), true, false);
- }
- }else{
- $buffer .= "";
- }
- }
- if($print) print $buffer;
- else return $buffer;
- }
- /**
- * Utilitary for generating a tag for the FilesList component
- * @static
- * @param $config
- * @return void
- */
- static function sendFilesListComponentConfig($config){
- if(is_string($config)){
- print("$config");
- }
- }
- /**
- * Send a success or error message to the client.
- * @static
- * @param $logMessage
- * @param $errorMessage
- * @param bool $print
- * @return string
- */
- static function sendMessage($logMessage, $errorMessage, $print = true)
- {
- $messageType = "";
- $message = "";
- if($errorMessage == null)
- {
- $messageType = "SUCCESS";
- $message = AJXP_Utils::xmlContentEntities($logMessage);
- }
- else
- {
- $messageType = "ERROR";
- $message = AJXP_Utils::xmlContentEntities($errorMessage);
- }
- return AJXP_XMLWriter::write("".$message."", $print);
- }
- /**
- * Writes the user data as XML
- * @static
- * @param null $userObject
- * @param bool $details
- * @return void
- */
- static function sendUserData($userObject = null, $details=false){
- print(AJXP_XMLWriter::getUserXML($userObject, $details));
- }
- /**
- * Extract all the user data and put it in XML
- * @static
- * @param null $userObject
- * @param bool $details
- * @return string
- */
- static function getUserXML($userObject = null, $details=false)
- {
- $buffer = "";
- $loggedUser = AuthService::getLoggedUser();
- $confDriver = ConfService::getConfStorageImpl();
- if($userObject != null) $loggedUser = $userObject;
- if(!AuthService::usersEnabled()){
- $buffer.="";
- if(!$details){
- $buffer.="";
- }
- $buffer.= AJXP_XMLWriter::writeRepositoriesData(null, $details);
- $buffer.="";
- }else if($loggedUser != null){
- $lock = $loggedUser->getLock();
- $buffer.="id."\">";
- if(!$details){
- $buffer.="canWrite(ConfService::getCurrentRepositoryId())?"1":"0")."\" read=\"".($loggedUser->canRead(ConfService::getCurrentRepositoryId())?"1":"0")."\"/>";
- }else{
- $buffer .= "";
- foreach ($loggedUser->getRoles() as $roleId => $boolean){
- if($boolean === true) $buffer.= "";
- }
- $buffer .= "";
- }
- $buffer.= AJXP_XMLWriter::writeRepositoriesData($loggedUser, $details);
- $buffer.="";
- $preferences = $confDriver->getExposedPreferences($loggedUser);
- foreach($preferences as $prefName => $prefData){
- $atts = "";
- if(isSet($prefData["exposed"]) && $prefData["exposed"] == true){
- foreach($prefData as $k => $v) {
- if($k=="name") continue;
- if($k == "value") $k = "default";
- $atts .= "$k='$v' ";
- }
- }
- if(isset($prefData["pluginId"])){
- $atts .= "pluginId='".$prefData["pluginId"]."' ";
- }
- if($prefData["type"] == "string"){
- $buffer.="";
- }else if($prefData["type"] == "json"){
- $buffer.="";
- }
- }
- $buffer.="";
- $buffer.="isAdmin()?"1":"0")."\" ".($lock!==false?"lock=\"$lock\"":"")."/>";
- $bMarks = $loggedUser->getBookmarks();
- if(count($bMarks)){
- $buffer.= "".AJXP_XMLWriter::writeBookmarks($bMarks, false)."";
- }
- $buffer.="";
- }
- return $buffer;
- }
- /**
- * Write the repositories access rights in XML format
- * @static
- * @param AbstractAjxpUser|null $loggedUser
- * @param bool $details
- * @return string
- */
- static function writeRepositoriesData($loggedUser, $details=false){
- $st = "";
- $streams = ConfService::detectRepositoryStreams(false);
- foreach(ConfService::getAccessibleRepositories($loggedUser, $details, false) as $repoId => $repoObject){
- $toLast = false;
- if($repoObject->getAccessType()=="ajxp_conf"){
- if(AuthService::usersEnabled() && !$loggedUser->isAdmin())continue;
- $toLast = true;
- }
- $rightString = "";
- if($details){
- $rightString = " r=\"".($loggedUser->canRead($repoId)?"1":"0")."\" w=\"".($loggedUser->canWrite($repoId)?"1":"0")."\"";
- }
- $streamString = "";
- if(in_array($repoObject->accessType, $streams)){
- $streamString = "allowCrossRepositoryCopy=\"true\"";
- }
- if($repoObject->getUniqueUser()){
- $streamString .= " user_editable_repository=\"true\" ";
- }
- $slugString = "";
- $slug = $repoObject->getSlug();
- if(!empty($slug)){
- $slugString = "repositorySlug=\"$slug\"";
- }
- $isSharedString = "";
- if($repoObject->hasOwner()){
- $uId = $repoObject->getOwner();
- $uObject = ConfService::getConfStorageImpl()->createUserObject($uId);
- $label = $uObject->personalRole->filterParameterValue("core.conf", "USER_DISPLAY_NAME", AJXP_REPO_SCOPE_ALL, $uId);
- $isSharedString = "owner='".$label."'";
- }
- $descTag = "";
- $description = $repoObject->getDescription();
- if(!empty($description)){
- $descTag = ''.AJXP_Utils::xmlEntities($description, true).'';
- }
- $xmlString = "accessType."\" id=\"".$repoId."\"$rightString $streamString $slugString $isSharedString>".$descTag.$repoObject->getClientSettings()."";
- if($toLast){
- $lastString = $xmlString;
- }else{
- $st .= $xmlString;
- }
- }
-
- if(isSet($lastString)){
- $st.= $lastString;
- }
- $st .= "";
- return $st;
- }
- /**
- * Writes a tag
- * @static
- * @param integer $result
- * @param string $rememberLogin
- * @param string $rememberPass
- * @param string $secureToken
- * @return void
- */
- static function loggingResult($result, $rememberLogin="", $rememberPass = "", $secureToken="")
- {
- $remString = "";
- if($rememberPass != "" && $rememberLogin!= ""){
- $remString = " remember_login=\"$rememberLogin\" remember_pass=\"$rememberPass\"";
- }
- if($secureToken != ""){
- $remString .= " secure_token=\"$secureToken\"";
- }
- print("");
- }
-
-}
-
-?>
+
+ * This file is part of AjaXplorer.
+ *
+ * AjaXplorer is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * AjaXplorer is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with AjaXplorer. If not, see .
+ *
+ * The latest code can be found at .
+ */
+defined('AJXP_EXEC') or die( 'Access not allowed');
+
+/**
+ * XML output Generator
+ * @package AjaXplorer
+ * @subpackage Core
+ */
+class AJXP_XMLWriter
+{
+ public static $headerSent = false;
+
+ /**
+ * Output Headers, XML tag and a root node
+ * @static
+ * @param string $docNode
+ * @param array $attributes
+ */
+ public static function header($docNode="tree", $attributes=array())
+ {
+ if(self::$headerSent !== false && self::$headerSent == $docNode) return ;
+ header('Content-Type: text/xml; charset=UTF-8');
+ header('Cache-Control: no-cache');
+ print('');
+ $attString = "";
+ if (count($attributes)) {
+ foreach ($attributes as $name=>$value) {
+ $attString.="$name=\"$value\" ";
+ }
+ }
+ self::$headerSent = $docNode;
+ print("<$docNode $attString>");
+
+ }
+ /**
+ * Outputs a closing root not ()
+ * @static
+ * @param string $docNode
+ * @return void
+ */
+ public static function close($docNode="tree")
+ {
+ print("");
+ }
+
+ /**
+ * @static
+ * @param string $data
+ * @param bool $print
+ * @return string
+ */
+ public static function write($data, $print)
+ {
+ if ($print) {
+ print($data);
+ return "";
+ } else {
+ return $data;
+ }
+ }
+
+ /**
+ * Ouput the tag
+ * @static
+ * @param integer $count
+ * @param integer $currentPage
+ * @param integer $totalPages
+ * @param integer $dirsCount
+ * @return void
+ */
+ public static function renderPaginationData($count, $currentPage, $totalPages, $dirsCount = -1)
+ {
+ $string = '';
+ AJXP_XMLWriter::write($string, true);
+ }
+ /**
+ * Prints out the XML headers and preamble, then an open node
+ * @static
+ * @param $nodeName
+ * @param $nodeLabel
+ * @param $isLeaf
+ * @param array $metaData
+ * @return void
+ */
+ public static function renderHeaderNode($nodeName, $nodeLabel, $isLeaf, $metaData = array())
+ {
+ header('Content-Type: text/xml; charset=UTF-8');
+ header('Cache-Control: no-cache');
+ print('');
+ self::$headerSent = "tree";
+ AJXP_XMLWriter::renderNode($nodeName, $nodeLabel, $isLeaf, $metaData, false);
+ }
+
+ /**
+ * @static
+ * @param AJXP_Node $ajxpNode
+ * @return void
+ */
+ public static function renderAjxpHeaderNode($ajxpNode)
+ {
+ header('Content-Type: text/xml; charset=UTF-8');
+ header('Cache-Control: no-cache');
+ print('');
+ self::$headerSent = "tree";
+ self::renderAjxpNode($ajxpNode, false);
+ }
+
+ /**
+ * The basic node
+ * @static
+ * @param string $nodeName
+ * @param string $nodeLabel
+ * @param bool $isLeaf
+ * @param array $metaData
+ * @param bool $close
+ * @param bool $print
+ * @return void|string
+ */
+ public static function renderNode($nodeName, $nodeLabel, $isLeaf, $metaData = array(), $close=true, $print = true)
+ {
+ $string = " $value) {
+ $value = AJXP_Utils::xmlEntities($value, true);
+ $string .= " $key=\"$value\"";
+ }
+ if ($close) {
+ $string .= "/>";
+ } else {
+ $string .= ">";
+ }
+ return AJXP_XMLWriter::write($string, $print);
+ }
+
+ /**
+ * @static
+ * @param AJXP_Node $ajxpNode
+ * @param bool $close
+ * @param bool $print
+ * @return void|string
+ */
+ public static function renderAjxpNode($ajxpNode, $close = true, $print = true)
+ {
+ return AJXP_XMLWriter::renderNode(
+ $ajxpNode->getPath(),
+ $ajxpNode->getLabel(),
+ $ajxpNode->isLeaf(),
+ $ajxpNode->metadata,
+ $close,
+ $print);
+ }
+
+ /**
+ * Render a node with arguments passed as array
+ * @static
+ * @param $array
+ * @return void
+ */
+ public static function renderNodeArray($array)
+ {
+ self::renderNode($array[0],$array[1],$array[2],$array[3]);
+ }
+ /**
+ * Error Catcher for PHP errors. Depending on the SERVER_DEBUG config
+ * shows the file/line info or not.
+ * @static
+ * @param $code
+ * @param $message
+ * @param $fichier
+ * @param $ligne
+ * @param $context
+ * @return
+ */
+ public static function catchError($code, $message, $fichier, $ligne, $context)
+ {
+ if(error_reporting() == 0) return ;
+ if (ConfService::getConf("SERVER_DEBUG")) {
+ $message = "$message in $fichier (l.$ligne)";
+ }
+ try {
+ AJXP_Logger::logAction("error", array("message" => $message));
+ } catch (Exception $e) {
+ // This will probably trigger a double exception!
+ echo "Error in error";
+ debug_print_backtrace();
+ echo "
";
+ die("Recursive exception. Original error was : ".$message. " in $fichier , line $ligne");
+ }
+ if(!headers_sent()) AJXP_XMLWriter::header();
+ AJXP_XMLWriter::sendMessage(null, SystemTextEncoding::toUTF8($message), true);
+ AJXP_XMLWriter::close();
+ exit(1);
+ }
+
+ /**
+ * Catch exceptions, @see catchError
+ * @param Exception $exception
+ */
+ public static function catchException($exception)
+ {
+ try {
+ AJXP_XMLWriter::catchError($exception->getCode(), SystemTextEncoding::fromUTF8($exception->getMessage()), $exception->getFile(), $exception->getLine(), null);
+ } catch (Exception $innerEx) {
+ print get_class($innerEx)." thrown within the exception handler! Message was: ".$innerEx->getMessage()." in ".$innerEx->getFile()." on line ".$innerEx->getLine()." ".$innerEx->getTraceAsString();
+ }
+ }
+ /**
+ * Dynamically replace XML keywords with their live values.
+ * AJXP_SERVER_ACCESS, AJXP_MIMES_*,AJXP_ALL_MESSAGES, etc.
+ * @static
+ * @param string $xml
+ * @param bool $stripSpaces
+ * @return mixed
+ */
+ public static function replaceAjxpXmlKeywords($xml, $stripSpaces = false)
+ {
+ $messages = ConfService::getMessages();
+ $confMessages = ConfService::getMessagesConf();
+ $matches = array();
+ if (isSet($_SESSION["AJXP_SERVER_PREFIX_URI"])) {
+ //$xml = str_replace("AJXP_THEME_FOLDER", $_SESSION["AJXP_SERVER_PREFIX_URI"].AJXP_THEME_FOLDER, $xml);
+ $xml = str_replace("AJXP_SERVER_ACCESS", $_SESSION["AJXP_SERVER_PREFIX_URI"].AJXP_SERVER_ACCESS, $xml);
+ } else {
+ //$xml = str_replace("AJXP_THEME_FOLDER", AJXP_THEME_FOLDER, $xml);
+ $xml = str_replace("AJXP_SERVER_ACCESS", AJXP_SERVER_ACCESS, $xml);
+ }
+ $xml = str_replace("AJXP_MIMES_EDITABLE", AJXP_Utils::getAjxpMimes("editable"), $xml);
+ $xml = str_replace("AJXP_MIMES_IMAGE", AJXP_Utils::getAjxpMimes("image"), $xml);
+ $xml = str_replace("AJXP_MIMES_AUDIO", AJXP_Utils::getAjxpMimes("audio"), $xml);
+ $xml = str_replace("AJXP_MIMES_ZIP", AJXP_Utils::getAjxpMimes("zip"), $xml);
+ $authDriver = ConfService::getAuthDriverImpl();
+ if ($authDriver != NULL) {
+ $loginRedirect = $authDriver->getLoginRedirect();
+ $xml = str_replace("AJXP_LOGIN_REDIRECT", ($loginRedirect!==false?"'".$loginRedirect."'":"false"), $xml);
+ }
+ $xml = str_replace("AJXP_REMOTE_AUTH", "false", $xml);
+ $xml = str_replace("AJXP_NOT_REMOTE_AUTH", "true", $xml);
+ $xml = str_replace("AJXP_ALL_MESSAGES", "MessageHash=".json_encode(ConfService::getMessages()).";", $xml);
+
+ if (preg_match_all("/AJXP_MESSAGE(\[.*?\])/", $xml, $matches, PREG_SET_ORDER)) {
+ foreach ($matches as $match) {
+ $messId = str_replace("]", "", str_replace("[", "", $match[1]));
+ $xml = str_replace("AJXP_MESSAGE[$messId]", $messages[$messId], $xml);
+ }
+ }
+ if (preg_match_all("/CONF_MESSAGE(\[.*?\])/", $xml, $matches, PREG_SET_ORDER)) {
+ foreach ($matches as $match) {
+ $messId = str_replace(array("[", "]"), "", $match[1]);
+ $message = $messId;
+ if (array_key_exists($messId, $confMessages)) {
+ $message = $confMessages[$messId];
+ }
+ $xml = str_replace("CONF_MESSAGE[$messId]", $message, $xml);
+ }
+ }
+ if (preg_match_all("/MIXIN_MESSAGE(\[.*?\])/", $xml, $matches, PREG_SET_ORDER)) {
+ foreach ($matches as $match) {
+ $messId = str_replace(array("[", "]"), "", $match[1]);
+ $message = $messId;
+ if (array_key_exists($messId, $confMessages)) {
+ $message = $confMessages[$messId];
+ }
+ $xml = str_replace("MIXIN_MESSAGE[$messId]", $message, $xml);
+ }
+ }
+ if ($stripSpaces) {
+ $xml = preg_replace("/[\n\r]?/", "", $xml);
+ $xml = preg_replace("/\t/", " ", $xml);
+ }
+ $xml = str_replace(array('xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"','xsi:noNamespaceSchemaLocation="file:../core.ajaxplorer/ajxp_registry.xsd"'), "", $xml);
+ $tab = array(&$xml);
+ AJXP_Controller::applyIncludeHook("xml.filter", $tab);
+ return $xml;
+ }
+ /**
+ * Send a XML instruction for refreshing the list
+ * @static
+ * @param string $nodePath
+ * @param string $pendingSelection
+ * @param bool $print
+ * @return string
+ */
+ public static function reloadDataNode($nodePath="", $pendingSelection="", $print = true)
+ {
+ $nodePath = AJXP_Utils::xmlEntities($nodePath, true);
+ $pendingSelection = AJXP_Utils::xmlEntities($pendingSelection, true);
+ return AJXP_XMLWriter::write("", $print);
+ }
+
+
+ /**
+ * Send a XML instruction for refreshing the list
+ * @static
+ * @param string $nodePath
+ * @param string $pendingSelection
+ * @param bool $print
+ * @return string
+ */
+ public static function writeNodesDiff($diffNodes, $print = false)
+ {
+ $mess = ConfService::getMessages();
+ $buffer = "";
+ if (isSet($diffNodes["REMOVE"]) && count($diffNodes["REMOVE"])) {
+ $buffer .= "";
+ foreach ($diffNodes["REMOVE"] as $nodePath) {
+ $nodePath = AJXP_Utils::xmlEntities($nodePath, true);
+ $buffer .= "";
+ }
+ $buffer .= "";
+ }
+ if (isSet($diffNodes["ADD"]) && count($diffNodes["ADD"])) {
+ $buffer .= "";
+ foreach ($diffNodes["ADD"] as $ajxpNode) {
+ $ajxpNode->loadNodeInfo(false, false, "all");
+ if (!empty($ajxpNode->metaData["mimestring_id"]) && array_key_exists($ajxpNode->metaData["mimestring_id"], $mess)) {
+ $ajxpNode->mergeMetadata(array("mimestring" => $mess[$ajxpNode->metaData["mimestring_id"]]));
+ }
+ $buffer .= self::renderAjxpNode($ajxpNode, true, false);
+ }
+ $buffer .= "";
+ }
+ if (isSet($diffNodes["UPDATE"]) && count($diffNodes["UPDATE"])) {
+ $buffer .= "";
+ foreach ($diffNodes["UPDATE"] as $originalPath => $ajxpNode) {
+ $ajxpNode->loadNodeInfo(false, false, "all");
+ if (!empty($ajxpNode->metaData["mimestring_id"]) && array_key_exists($ajxpNode->metaData["mimestring_id"], $mess)) {
+ $ajxpNode->mergeMetadata(array("mimestring" => $mess[$ajxpNode->metaData["mimestring_id"]]));
+ }
+ $ajxpNode->original_path = $originalPath;
+ $buffer .= self::renderAjxpNode($ajxpNode, true, false);
+ }
+ $buffer .= "";
+ }
+ $buffer .= "";
+ return AJXP_XMLWriter::write($buffer, $print);
+
+ /*
+ $nodePath = AJXP_Utils::xmlEntities($nodePath, true);
+ $pendingSelection = AJXP_Utils::xmlEntities($pendingSelection, true);
+ return AJXP_XMLWriter::write("", $print);
+ */
+ }
+
+
+ /**
+ * Send a XML instruction for refreshing the repositories list
+ * @static
+ * @param bool $print
+ * @return string
+ */
+ public static function reloadRepositoryList($print = true)
+ {
+ return AJXP_XMLWriter::write("", $print);
+ }
+ /**
+ * Outputs a tag
+ * @static
+ * @param bool $print
+ * @return string
+ */
+ public static function requireAuth($print = true)
+ {
+ return AJXP_XMLWriter::write("", $print);
+ }
+ /**
+ * Triggers a background action client side
+ * @static
+ * @param $actionName
+ * @param $parameters
+ * @param $messageId
+ * @param bool $print
+ * @param int $delay
+ * @return string
+ */
+ public static function triggerBgAction($actionName, $parameters, $messageId, $print=true, $delay = 0)
+ {
+ $messageId = AJXP_Utils::xmlEntities($messageId);
+ $data = AJXP_XMLWriter::write("", $print);
+ foreach ($parameters as $paramName=>$paramValue) {
+ $paramValue = AJXP_Utils::xmlEntities($paramValue);
+ $data .= AJXP_XMLWriter::write("", $print);
+ }
+ $data .= AJXP_XMLWriter::write("", $print);
+ return $data;
+ }
+
+ public static function triggerBgJSAction($jsCode, $messageId, $print=true, $delay = 0)
+ {
+ $data = AJXP_XMLWriter::write("", $print);
+ $data .= AJXP_XMLWriter::write("", $print);
+ $data .= AJXP_XMLWriter::write("", $print);
+ return $data;
+ }
+
+ /**
+ * List all bookmmarks as XML
+ * @static
+ * @param $allBookmarks
+ * @param bool $print
+ * @param string $format legacy|node_list
+ * @return string
+ */
+ public static function writeBookmarks($allBookmarks, $print = true, $format = "legacy")
+ {
+ if ($format == "node_list") {
+ $driver = ConfService::loadRepositoryDriver();
+ if (!is_a($driver, "AjxpWrapperProvider")) {
+ $driver = false;
+ }
+ }
+ $buffer = "";
+ foreach ($allBookmarks as $bookmark) {
+ $path = ""; $title = "";
+ if (is_array($bookmark)) {
+ $path = $bookmark["PATH"];
+ $title = $bookmark["TITLE"];
+ } else if (is_string($bookmark)) {
+ $path = $bookmark;
+ $title = basename($bookmark);
+ }
+ if ($format == "node_list") {
+ if ($driver) {
+ $node = new AJXP_Node($driver->getResourceUrl($path));
+ $buffer .= AJXP_XMLWriter::renderAjxpNode($node, true, false);
+ } else {
+ $buffer .= AJXP_XMLWriter::renderNode($path, $title, false, array('icon' => "mime_empty.png"), true, false);
+ }
+ } else {
+ $buffer .= "";
+ }
+ }
+ if($print) print $buffer;
+ else return $buffer;
+ }
+ /**
+ * Utilitary for generating a tag for the FilesList component
+ * @static
+ * @param $config
+ * @return void
+ */
+ public static function sendFilesListComponentConfig($config)
+ {
+ if (is_string($config)) {
+ print("$config");
+ }
+ }
+ /**
+ * Send a success or error message to the client.
+ * @static
+ * @param $logMessage
+ * @param $errorMessage
+ * @param bool $print
+ * @return string
+ */
+ public static function sendMessage($logMessage, $errorMessage, $print = true)
+ {
+ $messageType = "";
+ $message = "";
+ if ($errorMessage == null) {
+ $messageType = "SUCCESS";
+ $message = AJXP_Utils::xmlContentEntities($logMessage);
+ } else {
+ $messageType = "ERROR";
+ $message = AJXP_Utils::xmlContentEntities($errorMessage);
+ }
+ return AJXP_XMLWriter::write("".$message."", $print);
+ }
+ /**
+ * Writes the user data as XML
+ * @static
+ * @param null $userObject
+ * @param bool $details
+ * @return void
+ */
+ public static function sendUserData($userObject = null, $details=false)
+ {
+ print(AJXP_XMLWriter::getUserXML($userObject, $details));
+ }
+ /**
+ * Extract all the user data and put it in XML
+ * @static
+ * @param null $userObject
+ * @param bool $details
+ * @return string
+ */
+ public static function getUserXML($userObject = null, $details=false)
+ {
+ $buffer = "";
+ $loggedUser = AuthService::getLoggedUser();
+ $confDriver = ConfService::getConfStorageImpl();
+ if($userObject != null) $loggedUser = $userObject;
+ if (!AuthService::usersEnabled()) {
+ $buffer.="";
+ if (!$details) {
+ $buffer.="";
+ }
+ $buffer.= AJXP_XMLWriter::writeRepositoriesData(null, $details);
+ $buffer.="";
+ } else if ($loggedUser != null) {
+ $lock = $loggedUser->getLock();
+ $buffer.="id."\">";
+ if (!$details) {
+ $buffer.="canWrite(ConfService::getCurrentRepositoryId())?"1":"0")."\" read=\"".($loggedUser->canRead(ConfService::getCurrentRepositoryId())?"1":"0")."\"/>";
+ } else {
+ $buffer .= "";
+ foreach ($loggedUser->getRoles() as $roleId => $boolean) {
+ if($boolean === true) $buffer.= "";
+ }
+ $buffer .= "";
+ }
+ $buffer.= AJXP_XMLWriter::writeRepositoriesData($loggedUser, $details);
+ $buffer.="";
+ $preferences = $confDriver->getExposedPreferences($loggedUser);
+ foreach ($preferences as $prefName => $prefData) {
+ $atts = "";
+ if (isSet($prefData["exposed"]) && $prefData["exposed"] == true) {
+ foreach ($prefData as $k => $v) {
+ if($k=="name") continue;
+ if($k == "value") $k = "default";
+ $atts .= "$k='$v' ";
+ }
+ }
+ if (isset($prefData["pluginId"])) {
+ $atts .= "pluginId='".$prefData["pluginId"]."' ";
+ }
+ if ($prefData["type"] == "string") {
+ $buffer.="";
+ } else if ($prefData["type"] == "json") {
+ $buffer.="";
+ }
+ }
+ $buffer.="";
+ $buffer.="isAdmin()?"1":"0")."\" ".($lock!==false?"lock=\"$lock\"":"")."/>";
+ $bMarks = $loggedUser->getBookmarks();
+ if (count($bMarks)) {
+ $buffer.= "".AJXP_XMLWriter::writeBookmarks($bMarks, false)."";
+ }
+ $buffer.="";
+ }
+ return $buffer;
+ }
+ /**
+ * Write the repositories access rights in XML format
+ * @static
+ * @param AbstractAjxpUser|null $loggedUser
+ * @param bool $details
+ * @return string
+ */
+ public static function writeRepositoriesData($loggedUser, $details=false)
+ {
+ $st = "";
+ $streams = ConfService::detectRepositoryStreams(false);
+ foreach (ConfService::getAccessibleRepositories($loggedUser, $details, false) as $repoId => $repoObject) {
+ $toLast = false;
+ if ($repoObject->getAccessType()=="ajxp_conf") {
+ if(AuthService::usersEnabled() && !$loggedUser->isAdmin())continue;
+ $toLast = true;
+ }
+ $rightString = "";
+ if ($details) {
+ $rightString = " r=\"".($loggedUser->canRead($repoId)?"1":"0")."\" w=\"".($loggedUser->canWrite($repoId)?"1":"0")."\"";
+ }
+ $streamString = "";
+ if (in_array($repoObject->accessType, $streams)) {
+ $streamString = "allowCrossRepositoryCopy=\"true\"";
+ }
+ if ($repoObject->getUniqueUser()) {
+ $streamString .= " user_editable_repository=\"true\" ";
+ }
+ $slugString = "";
+ $slug = $repoObject->getSlug();
+ if (!empty($slug)) {
+ $slugString = "repositorySlug=\"$slug\"";
+ }
+ $isSharedString = "";
+ if ($repoObject->hasOwner()) {
+ $uId = $repoObject->getOwner();
+ $uObject = ConfService::getConfStorageImpl()->createUserObject($uId);
+ $label = $uObject->personalRole->filterParameterValue("core.conf", "USER_DISPLAY_NAME", AJXP_REPO_SCOPE_ALL, $uId);
+ $isSharedString = "owner='".$label."'";
+ }
+ $descTag = "";
+ $description = $repoObject->getDescription();
+ if (!empty($description)) {
+ $descTag = ''.AJXP_Utils::xmlEntities($description, true).'';
+ }
+ $xmlString = "accessType."\" id=\"".$repoId."\"$rightString $streamString $slugString $isSharedString>".$descTag.$repoObject->getClientSettings()."";
+ if ($toLast) {
+ $lastString = $xmlString;
+ } else {
+ $st .= $xmlString;
+ }
+ }
+
+ if (isSet($lastString)) {
+ $st.= $lastString;
+ }
+ $st .= "";
+ return $st;
+ }
+ /**
+ * Writes a tag
+ * @static
+ * @param integer $result
+ * @param string $rememberLogin
+ * @param string $rememberPass
+ * @param string $secureToken
+ * @return void
+ */
+ public static function loggingResult($result, $rememberLogin="", $rememberPass = "", $secureToken="")
+ {
+ $remString = "";
+ if ($rememberPass != "" && $rememberLogin!= "") {
+ $remString = " remember_login=\"$rememberLogin\" remember_pass=\"$rememberPass\"";
+ }
+ if ($secureToken != "") {
+ $remString .= " secure_token=\"$secureToken\"";
+ }
+ print("");
+ }
+
+}
diff --git a/core/src/core/classes/class.AbstractTest.php b/core/src/core/classes/class.AbstractTest.php
index e2b423822d..00d3046a9c 100644
--- a/core/src/core/classes/class.AbstractTest.php
+++ b/core/src/core/classes/class.AbstractTest.php
@@ -32,19 +32,19 @@
class AbstractTest
{
/** The test name */
- var $name;
+ public $name;
/** The test information when failed */
- var $failedInfo;
+ public $failedInfo;
/** The test results output (used for report) */
- var $resultOutput;
+ public $resultOutput;
/** Tested params - When used as a diagnostic tool, can store variables used by the test*/
- var $testedParas;
+ public $testedParas;
/** The test level when failed (warning, info or error, default to error) */
- var $failedLevel;
+ public $failedLevel;
/** The test parameters */
- var $params;
-
- function AbstractTest($name, $failedInfo, $params = NULL)
+ public $params;
+
+ public function AbstractTest($name, $failedInfo, $params = NULL)
{
$this->name = $name;
$this->failedInfo = $failedInfo;
@@ -54,42 +54,41 @@ function AbstractTest($name, $failedInfo, $params = NULL)
global $MAIN_testsArray;
$MAIN_testsArray[] = $this;
}
-
+
/**
* Perform the test, should be overwritten in concrete classes
* @abstract
* @return Boolean
*/
- function doTest() { return FALSE; }
-
- /**
- * Perform the test on a given repository object, should be overwritten in concrete classes
+ public function doTest() { return FALSE; }
+
+ /**
+ * Perform the test on a given repository object, should be overwritten in concrete classes
* @param Repository $repository
* @return Boolean
*/
- function doRepositoryTest($repository) { return FALSE; }
-
+ public function doRepositoryTest($repository) { return FALSE; }
+
/**
* Utilitary to convert php config to numerical values.
*
* @param String $val
* @return Integer
*/
- function returnBytes($val) {
- $val = trim($val);
- $last = strtolower($val[strlen($val)-1]);
- switch($last) {
- // Le modifieur 'G' est disponible depuis PHP 5.1.0
- case 'g':
- $val *= 1024;
- case 'm':
- $val *= 1024;
- case 'k':
- $val *= 1024;
- }
+ public function returnBytes($val)
+ {
+ $val = trim($val);
+ $last = strtolower($val[strlen($val)-1]);
+ switch ($last) {
+ // Le modifieur 'G' est disponible depuis PHP 5.1.0
+ case 'g':
+ $val *= 1024;
+ case 'm':
+ $val *= 1024;
+ case 'k':
+ $val *= 1024;
+ }
- return $val;
+ return $val;
}
};
-
-?>
\ No newline at end of file
diff --git a/core/src/core/classes/class.AjxpRole.php b/core/src/core/classes/class.AjxpRole.php
index eedbdc9371..8eca3f5de8 100644
--- a/core/src/core/classes/class.AjxpRole.php
+++ b/core/src/core/classes/class.AjxpRole.php
@@ -29,65 +29,71 @@
*/
class AjxpRole implements AjxpGroupPathProvider
{
- private $id;
- private $rights = array();
+ private $id;
+ private $rights = array();
private $default = false;
/**
* @var String
*/
protected $groupPath;
- /**
+ /**
* Constructor
* @param string $id
* @return void
*/
- function AjxpRole($id){
- $this->id = $id;
- }
- /**
+ public function AjxpRole($id)
+ {
+ $this->id = $id;
+ }
+ /**
* @param $id
* @return void
*/
- function setId($id){
- $this->id = $id;
- }
- /**
+ public function setId($id)
+ {
+ $this->id = $id;
+ }
+ /**
* @return string
*/
- function getId(){
- return $this->id;
- }
- /**
+ public function getId()
+ {
+ return $this->id;
+ }
+ /**
* Whether this role can read the given repo
* @param string $rootDirId Repository ID
* @return bool
*/
- function canRead($rootDirId){
- $right = $this->getRight($rootDirId);
- if($right == "rw" || $right == "r") return true;
- return false;
- }
-
+ public function canRead($rootDirId)
+ {
+ $right = $this->getRight($rootDirId);
+ if($right == "rw" || $right == "r") return true;
+ return false;
+ }
+
/**
* Whether this role can write the given repo
* @param string $rootDirId Repository ID
* @return bool
*/
- function canWrite($rootDirId){
- $right = $this->getRight($rootDirId);
- if($right == "rw" || $right == "w") return true;
- return false;
- }
-
+ public function canWrite($rootDirId)
+ {
+ $right = $this->getRight($rootDirId);
+ if($right == "rw" || $right == "w") return true;
+ return false;
+ }
+
/**
* Current definitioon (r, rw, w, empty string) for the given repo
* @param string $rootDirId Repository ID
* @return string
*/
- function getRight($rootDirId){
- if(isSet($this->rights[$rootDirId])) return $this->rights[$rootDirId];
- return "";
- }
+ public function getRight($rootDirId)
+ {
+ if(isSet($this->rights[$rootDirId])) return $this->rights[$rootDirId];
+ return "";
+ }
/**
* Set the right
@@ -95,51 +101,56 @@ function getRight($rootDirId){
* @param string $rightString ("r", "rw", "w", "")
* @return void
*/
- function setRight($rootDirId, $rightString){
- $this->rights[$rootDirId] = $rightString;
- }
- /**
+ public function setRight($rootDirId, $rightString)
+ {
+ $this->rights[$rootDirId] = $rightString;
+ }
+ /**
* Remove a right entry for the repository
* @param string $rootDirId
* @return void
*/
- function removeRights($rootDirId){
- if(isSet($this->rights[$rootDirId])) unset($this->rights[$rootDirId]);
- }
- /**
+ public function removeRights($rootDirId)
+ {
+ if(isSet($this->rights[$rootDirId])) unset($this->rights[$rootDirId]);
+ }
+ /**
* Remove all rights
* @return void
*/
- function clearRights(){
- $this->rights = array();
- }
- /**
+ public function clearRights()
+ {
+ $this->rights = array();
+ }
+ /**
* Get the specific actions rights (see setSpecificActionsRights)
* @param $rootDirId
* @return array
*/
- function getSpecificActionsRights($rootDirId){
- $res = array();
- if($rootDirId."" != "ajxp.all"){
- $res = $this->getSpecificActionsRights("ajxp.all");
- }
- if(isSet($this->rights["ajxp.actions"]) && isSet($this->rights["ajxp.actions"][$rootDirId])){
- $res = array_merge($res, $this->rights["ajxp.actions"][$rootDirId]);
- }
- return $res;
- }
- /**
+ public function getSpecificActionsRights($rootDirId)
+ {
+ $res = array();
+ if ($rootDirId."" != "ajxp.all") {
+ $res = $this->getSpecificActionsRights("ajxp.all");
+ }
+ if (isSet($this->rights["ajxp.actions"]) && isSet($this->rights["ajxp.actions"][$rootDirId])) {
+ $res = array_merge($res, $this->rights["ajxp.actions"][$rootDirId]);
+ }
+ return $res;
+ }
+ /**
* This method allows to specifically disable some actions for a given role for one or more repository.
* @param string $rootDirId Repository id or "ajxp.all" for all repositories
* @param string $actionName
* @param bool $allowed
* @return void
*/
- function setSpecificActionRight($rootDirId, $actionName, $allowed){
- if(!isSet($this->rights["ajxp.actions"])) $this->rights["ajxp.actions"] = array();
- if(!isset($this->rights["ajxp.actions"][$rootDirId])) $this->rights["ajxp.actions"][$rootDirId] = array();
- $this->rights["ajxp.actions"][$rootDirId][$actionName] = $allowed;
- }
+ public function setSpecificActionRight($rootDirId, $actionName, $allowed)
+ {
+ if(!isSet($this->rights["ajxp.actions"])) $this->rights["ajxp.actions"] = array();
+ if(!isset($this->rights["ajxp.actions"][$rootDirId])) $this->rights["ajxp.actions"][$rootDirId] = array();
+ $this->rights["ajxp.actions"][$rootDirId][$actionName] = $allowed;
+ }
public function setDefault($default)
{
@@ -168,5 +179,3 @@ public function getGroupPath()
}
}
-
-?>
\ No newline at end of file
diff --git a/core/src/core/classes/class.AuthService.php b/core/src/core/classes/class.AuthService.php
index e798c98e4c..7337e5d57d 100644
--- a/core/src/core/classes/class.AuthService.php
+++ b/core/src/core/classes/class.AuthService.php
@@ -1,998 +1,1020 @@
-
- * This file is part of AjaXplorer.
- *
- * AjaXplorer is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * AjaXplorer is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with AjaXplorer. If not, see .
- *
- * The latest code can be found at .
- */
-defined('AJXP_EXEC') or die( 'Access not allowed');
-
-/**
- * Static access to the authentication mechanism. Encapsulates the authDriver implementation
- * @package AjaXplorer
- * @subpackage Core
- */
-class AuthService
-{
- static $roles;
- public static $useSession = true;
- private static $currentUser;
- /**
- * Whether the whole users management system is enabled or not.
- * @static
- * @return bool
- */
- static function usersEnabled()
- {
- return ConfService::getCoreConf("ENABLE_USERS", "auth");
- }
- /**
- * Whether the current auth driver supports password update or not
- * @static
- * @return bool
- */
- static function changePasswordEnabled()
- {
- $authDriver = ConfService::getAuthDriverImpl();
- return $authDriver->passwordsEditable();
- }
- /**
- * Get a unique seed from the current auth driver
- * @static
- * @return int|string
- */
- static function generateSeed(){
- $authDriver = ConfService::getAuthDriverImpl();
- return $authDriver->getSeed(true);
- }
-
- /**
- * Put a secure token in the session
- * @static
- * @return
- */
- static function generateSecureToken(){
-
- $_SESSION["SECURE_TOKEN"] = AJXP_Utils::generateRandomString(32); //md5(time());
- return $_SESSION["SECURE_TOKEN"];
- }
- /**
- * Get the secure token from the session
- * @static
- * @return string|bool
- */
- static function getSecureToken(){
- return (isSet($_SESSION["SECURE_TOKEN"])?$_SESSION["SECURE_TOKEN"]:FALSE);
- }
- /**
- * Verify a secure token value from the session
- * @static
- * @param string $token
- * @return bool
- */
- static function checkSecureToken($token){
- if(isSet($_SESSION["SECURE_TOKEN"]) && $_SESSION["SECURE_TOKEN"] == $token){
- return true;
- }
- return false;
- }
-
- /**
- * Get the currently logged user object
- * @return AbstractAjxpUser
- */
- static function getLoggedUser()
- {
- if(self::$useSession && isSet($_SESSION["AJXP_USER"])) {
- if(is_a($_SESSION["AJXP_USER"], "__PHP_Incomplete_Class")){
- session_unset("AJXP_USER");
- return null;
- }
- return $_SESSION["AJXP_USER"];
- }
- if(!self::$useSession && isSet(self::$currentUser)) return self::$currentUser;
- return null;
- }
- /**
- * Call the preLogUser() functino on the auth driver implementation
- * @static
- * @param string $remoteSessionId
- * @return void
- */
- static function preLogUser($remoteSessionId = "")
- {
- if(AuthService::getLoggedUser() != null) return ;
- $authDriver = ConfService::getAuthDriverImpl();
- $authDriver->preLogUser($remoteSessionId);
- return ;
- }
- /**
- * The array is located in the AjxpTmpDir/failedAJXP.log
- * @static
- * @return array
- */
- static function getBruteForceLoginArray()
- {
- $failedLog = AJXP_Utils::getAjxpTmpDir()."/failedAJXP.log";
- $loginAttempt = @file_get_contents($failedLog);
- $loginArray = unserialize($loginAttempt);
- $ret = array();
- $curTime = time();
- if (is_array($loginArray)){
- // Filter the array (all old time are cleaned)
- foreach($loginArray as $key => $login)
- {
- if (($curTime - $login["time"]) <= 60 * 60 * 24) $ret[$key] = $login;
- }
- }
- return $ret;
- }
- /**
- * Store the array
- * @static
- * @param $loginArray
- * @return void
- */
- static function setBruteForceLoginArray($loginArray)
- {
- $failedLog = AJXP_Utils::getAjxpTmpDir()."/failedAJXP.log";
- @file_put_contents($failedLog, serialize($loginArray));
- }
- /**
- * Determines whether the user is try to make many attemps
- * @static
- * @param $loginArray
- * @return bool
- */
- static function checkBruteForceLogin(&$loginArray)
- {
- if(isSet($_SERVER['REMOTE_ADDR'])){
- $serverAddress = $_SERVER['REMOTE_ADDR'];
- }else{
- $serverAddress = $_SERVER['SERVER_ADDR'];
- }
- $login = null;
- if(isSet($loginArray[$serverAddress])){
- $login = $loginArray[$serverAddress];
- }
- if (is_array($login)){
- $login["count"]++;
- } else $login = array("count"=>1, "time"=>time());
- $loginArray[$serverAddress] = $login;
- if ($login["count"] > 3) {
- if(AJXP_SERVER_DEBUG){
- AJXP_Logger::debug("DEBUG : IGNORING BRUTE FORCE ATTEMPTS!");
- return true;
- }
- return FALSE;
- }
- return TRUE;
- }
- /**
- * Is there a brute force login attempt?
- * @static
- * @return bool
- */
- static function suspectBruteForceLogin(){
- $loginAttempt = AuthService::getBruteForceLoginArray();
- return !AuthService::checkBruteForceLogin($loginAttempt);
- }
-
- static function filterUserSensitivity($user){
- if(!ConfService::getCoreConf("CASE_SENSITIVE", "auth")){
- return strtolower($user);
- }else{
- return $user;
- }
- }
-
- static function ignoreUserCase(){
- return !ConfService::getCoreConf("CASE_SENSITIVE", "auth");
- }
-
- /**
- * @static
- * @param AbstractAjxpUser $user
- */
- static function refreshRememberCookie($user){
- $current = $_COOKIE["AjaXplorer-remember"];
- if(!empty($current)){
- $user->invalidateCookieString(substr($current, strpos($current, ":")+1));
- }
- $rememberPass = $user->getCookieString();
- setcookie("AjaXplorer-remember", $user->id.":".$rememberPass, time()+3600*24*10, null, null, (isSet($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) == "on"), true);
- }
-
- /**
- * @static
- * @return bool
- */
- static function hasRememberCookie(){
- return (isSet($_COOKIE["AjaXplorer-remember"]) && !empty($_COOKIE["AjaXplorer-remember"]));
- }
-
- /**
- * @static
- * Warning, must be called before sending other headers!
- */
- static function clearRememberCookie(){
- $current = $_COOKIE["AjaXplorer-remember"];
- $user = AuthService::getLoggedUser();
- if(!empty($current) && $user != null){
- $user->invalidateCookieString(substr($current, strpos($current, ":")+1));
- }
- setcookie("AjaXplorer-remember", "", time()-3600, null, null, (isSet($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) == "on"), true);
- }
-
- static function logTemporaryUser($parentUserId, $temporaryUserId){
- $parentUserId = self::filterUserSensitivity($parentUserId);
- $temporaryUserId = self::filterUserSensitivity($temporaryUserId);
- $confDriver = ConfService::getConfStorageImpl();
- $parentUser = $confDriver->createUserObject($parentUserId);
- $temporaryUser = $confDriver->createUserObject($temporaryUserId);
- $temporaryUser->mergedRole = $parentUser->mergedRole;
- $temporaryUser->rights = $parentUser->rights;
- $temporaryUser->setGroupPath($parentUser->getGroupPath());
- $temporaryUser->setParent($parentUserId);
- $temporaryUser->setResolveAsParent(true);
- AJXP_Logger::logAction("Log in", array("temporary user" => $temporaryUserId, "owner" => $parentUserId));
- self::updateUser($temporaryUser);
- }
-
- static function clearTemporaryUser($temporaryUserId){
- AJXP_Logger::logAction("Log out", array("temporary user"), $temporaryUserId);
- if(isSet($_SESSION["AJXP_USER"]) || isSet(self::$currentUser)){
- AJXP_Logger::logAction("Log Out");
- unset($_SESSION["AJXP_USER"]);
- if(isSet(self::$currentUser)) unset(self::$currentUser);
- if(ConfService::getCoreConf("SESSION_SET_CREDENTIALS", "auth")){
- AJXP_Safe::clearCredentials();
- }
- }
- }
-
- /**
- * Log the user from its credentials
- * @static
- * @param string $user_id The user id
- * @param string $pwd The password
- * @param bool $bypass_pwd Ignore password or not
- * @param bool $cookieLogin Is it a logging from the remember me cookie?
- * @param string $returnSeed The unique seed
- * @return int
- */
- static function logUser($user_id, $pwd, $bypass_pwd = false, $cookieLogin = false, $returnSeed="")
- {
- $user_id = self::filterUserSensitivity($user_id);
- if($cookieLogin && !isSet($_COOKIE["AjaXplorer-remember"])){
- return -5; // SILENT IGNORE
- }
- if($cookieLogin){
- list($user_id, $pwd) = explode(":", $_COOKIE["AjaXplorer-remember"]);
- }
- $confDriver = ConfService::getConfStorageImpl();
- if($user_id == null)
- {
- if(self::$useSession){
- if(isSet($_SESSION["AJXP_USER"]) && is_object($_SESSION["AJXP_USER"])) return 1;
- }else{
- if(isSet(self::$currentUser) && is_object(self::$currentUser)) return 1;
- }
- if(ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth"))
- {
- $authDriver = ConfService::getAuthDriverImpl();
- if(!$authDriver->userExists("guest"))
- {
- AuthService::createUser("guest", "");
- $guest = $confDriver->createUserObject("guest");
- $guest->save("superuser");
- }
- AuthService::logUser("guest", null);
- return 1;
- }
- return -1;
- }
- $authDriver = ConfService::getAuthDriverImpl();
- // CHECK USER PASSWORD HERE!
- $loginAttempt = AuthService::getBruteForceLoginArray();
- $bruteForceLogin = AuthService::checkBruteForceLogin($loginAttempt);
- AuthService::setBruteForceLoginArray($loginAttempt);
-
- if(!$authDriver->userExists($user_id)){
- if ($bruteForceLogin === FALSE){
- return -4;
- }else{
- return -1;
- }
- }
- if(!$bypass_pwd){
- if(!AuthService::checkPassword($user_id, $pwd, $cookieLogin, $returnSeed)){
- if ($bruteForceLogin === FALSE){
- return -4;
- }else{
- if($cookieLogin) return -5;
- return -1;
- }
- }
- }
- // Successful login attempt
- unset($loginAttempt[$_SERVER["REMOTE_ADDR"]]);
- AuthService::setBruteForceLoginArray($loginAttempt);
-
- // Setting session credentials if asked in config
- if(ConfService::getCoreConf("SESSION_SET_CREDENTIALS", "auth")) {
- list($authId, $authPwd) = $authDriver->filterCredentials($user_id, $pwd);
- AJXP_Safe::storeCredentials($authId, $authPwd);
- }
-
- $user = $confDriver->createUserObject($user_id);
- if($user->getLock() == "logout"){
- return -1;
- }
- if($authDriver->isAjxpAdmin($user_id)){
- $user->setAdmin(true);
- }
- if($user->isAdmin())
- {
- $user = AuthService::updateAdminRights($user);
- }
- else{
- if(!$user->hasParent() && $user_id != "guest"){
- //$user->setAcl("ajxp_shared", "rw");
- }
- }
- if(self::$useSession) $_SESSION["AJXP_USER"] = $user;
- else self::$currentUser = $user;
-
- if($authDriver->autoCreateUser() && !$user->storageExists()){
- $user->save("superuser"); // make sure update rights now
- }
- AJXP_Logger::logAction("Log In");
- return 1;
- }
- /**
- * Store the object in the session
- * @static
- * @param $userObject
- * @return void
- */
- static function updateUser($userObject)
- {
- if(self::$useSession) $_SESSION["AJXP_USER"] = $userObject;
- else self::$currentUser = $userObject;
- }
- /**
- * Clear the session
- * @static
- * @return void
- */
- static function disconnect()
- {
- if(isSet($_SESSION["AJXP_USER"]) || isSet(self::$currentUser)){
- AuthService::clearRememberCookie();
- AJXP_Logger::logAction("Log Out");
- unset($_SESSION["AJXP_USER"]);
- if(isSet(self::$currentUser)) unset(self::$currentUser);
- if(ConfService::getCoreConf("SESSION_SET_CREDENTIALS", "auth")){
- AJXP_Safe::clearCredentials();
- }
- }
- }
- /**
- * Specific operations to perform at boot time
- * @static
- * @param array $START_PARAMETERS A HashTable of parameters to send back to the client
- * @return void
- */
- public static function bootSequence(&$START_PARAMETERS){
-
- if(AJXP_Utils::detectApplicationFirstRun()) return;
- if(file_exists(AJXP_CACHE_DIR."/admin_counted")) return;
- $rootRole = AuthService::getRole("ROOT_ROLE", false);
- if($rootRole === false){
- $rootRole = new AJXP_Role("ROOT_ROLE");
- $rootRole->setLabel("Root Role");
- $rootRole->setAutoApplies(array("standard"));
- foreach (ConfService::getRepositoriesList("all") as $repositoryId => $repoObject)
- {
- if($repoObject->isTemplate) continue;
- $gp = $repoObject->getGroupPath();
- if(empty($gp) || $gp == "/"){
- if($repoObject->getDefaultRight() != ""){
- $rootRole->setAcl($repositoryId, $repoObject->getDefaultRight());
- }
- }
- }
- AuthService::updateRole($rootRole);
- }
- $miniRole = AuthService::getRole("MINISITE", false);
- if($miniRole === false){
- $rootRole = new AJXP_Role("MINISITE");
- $rootRole->setLabel("Minisite Users");
- $actions = array(
- "access.fs" => array("ajxp_link", "chmod", "purge"),
- "meta.watch" => array("toggle_watch"),
- "conf.serial"=> array("get_bookmarks"),
- "conf.sql"=> array("get_bookmarks"),
- "index.lucene" => array("index"),
- "action.share" => array("share"),
- "gui.ajax" => array("bookmark"),
- "auth.serial" => array("pass_change"),
- "auth.sql" => array("pass_change"),
- );
- foreach($actions as $pluginId => $acts){
- foreach($acts as $act){
- $rootRole->setActionState($pluginId, $act, AJXP_REPO_SCOPE_SHARED, false);
- }
- }
- AuthService::updateRole($rootRole);
- }
- $miniRole = AuthService::getRole("MINISITE_NODOWNLOAD", false);
- if($miniRole === false){
- $rootRole = new AJXP_Role("MINISITE_NODOWNLOAD");
- $rootRole->setLabel("Minisite Users - No Download");
- $actions = array(
- "access.fs" => array("download", "download_chunk", "prepare_chunk_dl", "download_all")
- );
- foreach($actions as $pluginId => $acts){
- foreach($acts as $act){
- $rootRole->setActionState($pluginId, $act, AJXP_REPO_SCOPE_SHARED, false);
- }
- }
- AuthService::updateRole($rootRole);
- }
- $miniRole = AuthService::getRole("GUEST", false);
- if($miniRole === false){
- $rootRole = new AJXP_Role("GUEST");
- $rootRole->setLabel("Guest user role");
- $actions = array(
- "access.fs" => array("purge"),
- "meta.watch" => array("toggle_watch"),
- "index.lucene" => array("index"),
- );
- $rootRole->setAutoApplies(array("guest"));
- foreach($actions as $pluginId => $acts){
- foreach($acts as $act){
- $rootRole->setActionState($pluginId, $act, AJXP_REPO_SCOPE_ALL);
- }
- }
- AuthService::updateRole($rootRole);
- }
- $adminCount = AuthService::countAdminUsers();
- if($adminCount == 0){
- $authDriver = ConfService::getAuthDriverImpl();
- $adminPass = ADMIN_PASSWORD;
- if($authDriver->getOption("TRANSMIT_CLEAR_PASS") !== true){
- $adminPass = md5(ADMIN_PASSWORD);
- }
- AuthService::createUser("admin", $adminPass, true);
- if(ADMIN_PASSWORD == INITIAL_ADMIN_PASSWORD)
- {
- $userObject = ConfService::getConfStorageImpl()->createUserObject("admin");
- $userObject->setAdmin(true);
- AuthService::updateAdminRights($userObject);
- if(AuthService::changePasswordEnabled()){
- $userObject->setLock("pass_change");
- }
- $userObject->save("superuser");
- $START_PARAMETERS["ALERT"] .= "Warning! User 'admin' was created with the initial password '". INITIAL_ADMIN_PASSWORD ."'. \\nPlease log in as admin and change the password now!";
- }
- AuthService::updateUser($userObject);
- }else if($adminCount == -1){
- // Here we may come from a previous version! Check the "admin" user and set its right as admin.
- $confStorage = ConfService::getConfStorageImpl();
- $adminUser = $confStorage->createUserObject("admin");
- $adminUser->setAdmin(true);
- $adminUser->save("superuser");
- $START_PARAMETERS["ALERT"] .= "There is an admin user, but without admin right. Now any user can have the administration rights, \\n your 'admin' user was set with the admin rights. Please check that this suits your security configuration.";
- }
- file_put_contents(AJXP_CACHE_DIR."/admin_counted", "true");
-
- }
- /**
- * If the auth driver implementatino has a logout redirect URL, clear session and return it.
- * @static
- * @param bool $logUserOut
- * @return bool
- */
- static function getLogoutAddress($logUserOut = true)
- {
- $authDriver = ConfService::getAuthDriverImpl();
- $logout = $authDriver->getLogoutRedirect();
- if($logUserOut){
- self::disconnect();
- }
- return $logout;
- }
- /**
- * Compute the default repository id to log the current user
- * @static
- * @return int|string
- */
- static function getDefaultRootId()
- {
- $loggedUser = AuthService::getLoggedUser();
- if($loggedUser == null) return 0;
- $repoList = ConfService::getRepositoriesList();
- foreach ($repoList as $rootDirIndex => $rootDirObject)
- {
- if($loggedUser->canRead($rootDirIndex."") || $loggedUser->canWrite($rootDirIndex."")) {
- // Warning : do not grant access to admin repository to a non admin, or there will be
- // an "Empty Repository Object" error.
- if($rootDirObject->getAccessType()=="ajxp_conf" && AuthService::usersEnabled() && !$loggedUser->isAdmin()){
- continue;
- }
- if($rootDirObject->getAccessType() == "ajxp_shared" && count($repoList) > 1){
- continue;
- }
- return $rootDirIndex;
- }
- }
- return 0;
- }
-
- /**
- * Update a user with admin rights and return it
- * @param AbstractAjxpUser $adminUser
- * @return AbstractAjxpUser
- */
- static function updateAdminRights($adminUser)
- {
- foreach (ConfService::getRepositoriesList() as $repoId => $repoObject)
- {
- if(!self::allowedForCurrentGroup($repoObject, $adminUser)) continue;
- if($repoObject->hasParent() && $repoObject->getParentId() != $adminUser->getId()) continue;
- $adminUser->personalRole->setAcl($repoId, "rw");
- $adminUser->recomputeMergedRole();
- }
- $adminUser->save("superuser");
- return $adminUser;
- }
-
- /**
- * Update a user object with the default repositories rights
- *
- * @param AbstractAjxpUser $userObject
- */
- static function updateDefaultRights(&$userObject){
- if(!$userObject->hasParent()){
- $changes = false;
- foreach (ConfService::getRepositoriesList() as $repositoryId => $repoObject)
- {
- if(!self::allowedForCurrentGroup($repoObject, $userObject)) continue;
- if($repoObject->isTemplate) continue;
- if($repoObject->getDefaultRight() != ""){
- $changes = true;
- $userObject->personalRole->setAcl($repositoryId, $repoObject->getDefaultRight());
- }
- }
- if($changes) {
- $userObject->recomputeMergedRole();
- }
- foreach(AuthService::getRolesList(array(), true) as $roleId => $roleObject){
- if(!self::allowedForCurrentGroup($roleObject, $userObject)) continue;
- if($userObject->getProfile() == "shared" && $roleObject->autoAppliesTo("shared")){
- $userObject->addRole($roleObject);
- }else if($roleObject->autoAppliesTo("standard")){
- $userObject->addRole($roleObject);
- }
- }
- }
- }
-
- /**
- * @static
- * @param AbstractAjxpUser $userObject
- */
- static function updateAutoApplyRole(&$userObject){
- foreach(AuthService::getRolesList(array(), true) as $roleId => $roleObject){
- if(!self::allowedForCurrentGroup($roleObject, $userObject)) continue;
- if($roleObject->autoAppliesTo($userObject->getProfile()) || $roleObject->autoAppliesTo("all")){
- $userObject->addRole($roleObject);
- }
- }
- }
-
- static function updateAuthProvidedData(&$userObject){
- ConfService::getAuthDriverImpl()->updateUserObject($userObject);
- }
-
- /**
- * Use driver implementation to check whether the user exists or not.
- * @static
- * @param String $userId
- * @param String $mode "r" or "w"
- * @return bool
- */
- static function userExists($userId, $mode = "r")
- {
- if($userId == "guest" && !ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth")){
- return false;
- }
- $userId = AuthService::filterUserSensitivity($userId);
- $authDriver = ConfService::getAuthDriverImpl();
- if($mode == "w"){
- return $authDriver->userExistsWrite($userId);
- }
- return $authDriver->userExists($userId);
- }
-
- /**
- * Make sure a user id is not reserved for low-level tasks (currently "guest" and "shared").
- * @static
- * @param String $username
- * @return bool
- */
- static function isReservedUserId($username){
- $username = AuthService::filterUserSensitivity($username);
- return in_array($username, array("guest", "shared"));
- }
-
- /**
- * Simple password encoding, should be deported in a more complex/configurable function
- * @static
- * @param $pass
- * @return string
- */
- static function encodePassword($pass){
- return md5($pass);
- }
- /**
- * Check a password
- * @static
- * @param $userId
- * @param $userPass
- * @param bool $cookieString
- * @param string $returnSeed
- * @return bool|void
- */
- static function checkPassword($userId, $userPass, $cookieString = false, $returnSeed = "")
- {
- if(ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth") && $userId == "guest") return true;
- $userId = AuthService::filterUserSensitivity($userId);
- $authDriver = ConfService::getAuthDriverImpl();
- if($cookieString){
- $confDriver = ConfService::getConfStorageImpl();
- $userObject = $confDriver->createUserObject($userId);
- $res = $userObject->checkCookieString($userPass);
- return $res;
- }
- $seed = $authDriver->getSeed(false);
- if($seed != $returnSeed) return false;
- return $authDriver->checkPassword($userId, $userPass, $returnSeed);
- }
- /**
- * Update the password in the auth driver implementation.
- * @static
- * @throws Exception
- * @param $userId
- * @param $userPass
- * @return bool
- */
- static function updatePassword($userId, $userPass)
- {
- if(strlen($userPass) < ConfService::getCoreConf("PASSWORD_MINLENGTH", "auth")){
- $messages = ConfService::getMessages();
- throw new Exception($messages[378]);
- }
- $userId = AuthService::filterUserSensitivity($userId);
- $authDriver = ConfService::getAuthDriverImpl();
- $authDriver->changePassword($userId, $userPass);
- if($authDriver->getOption("TRANSMIT_CLEAR_PASS") === true){
- // We can directly update the HA1 version of the WEBDAV Digest
- $realm = ConfService::getCoreConf("WEBDAV_DIGESTREALM");
- $ha1 = md5("{$userId}:{$realm}:{$userPass}");
- $zObj = ConfService::getConfStorageImpl()->createUserObject($userId);
- $wData = $zObj->getPref("AJXP_WEBDAV_DATA");
- if(!is_array($wData)) $wData = array();
- $wData["HA1"] = $ha1;
- $zObj->setPref("AJXP_WEBDAV_DATA", $wData);
- $zObj->save();
- }
- AJXP_Logger::logAction("Update Password", array("user_id"=>$userId));
- return true;
- }
- /**
- * Create a user
- * @static
- * @throws Exception
- * @param $userId
- * @param $userPass
- * @param bool $isAdmin
- * @return null
- * @todo the minlength check is probably causing problem with the bridges
- */
- static function createUser($userId, $userPass, $isAdmin=false)
- {
- $userId = AuthService::filterUserSensitivity($userId);
- AJXP_Controller::applyHook("user.before_create", array($userId, $userPass, $isAdmin));
- if(!ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth") && $userId == "guest"){
- throw new Exception("Reserved user id");
- }
- /*
- if(strlen($userPass) < ConfService::getCoreConf("PASSWORD_MINLENGTH", "auth") && $userId != "guest"){
- $messages = ConfService::getMessages();
- throw new Exception($messages[378]);
- }
- */
- $authDriver = ConfService::getAuthDriverImpl();
- $confDriver = ConfService::getConfStorageImpl();
- $authDriver->createUser($userId, $userPass);
- $user = null;
- if($isAdmin){
- $user = $confDriver->createUserObject($userId);
- $user->setAdmin(true);
- $user->save("superuser");
- }
- if($authDriver->getOption("TRANSMIT_CLEAR_PASS") === true){
- $realm = ConfService::getCoreConf("WEBDAV_DIGESTREALM");
- $ha1 = md5("{$userId}:{$realm}:{$userPass}");
- if(!isSet($user)){
- $user = $confDriver->createUserObject($userId);
- }
- $wData = $user->getPref("AJXP_WEBDAV_DATA");
- if(!is_array($wData)) $wData = array();
- $wData["HA1"] = $ha1;
- $user->setPref("AJXP_WEBDAV_DATA", $wData);
- $user->save();
- }
- AJXP_Controller::applyHook("user.after_create", array($user));
- AJXP_Logger::logAction("Create User", array("user_id"=>$userId));
- return null;
- }
- /**
- * Detect the number of admin users
- * @static
- * @return int|void
- */
- static function countAdminUsers(){
- $confDriver = ConfService::getConfStorageImpl();
- $auth = ConfService::getAuthDriverImpl();
- $count = $confDriver->countAdminUsers();
- if(!$count && $auth->userExists("admin") && $confDriver->getName() == "serial"){
- return -1;
- }
- return $count;
- }
-
- /**
- * Delete a user in the auth/conf driver impl
- * @static
- * @param $userId
- * @return bool
- */
- static function deleteUser($userId)
- {
- $userId = AuthService::filterUserSensitivity($userId);
- AJXP_Controller::applyHook("user.before_delete", array($userId));
- $authDriver = ConfService::getAuthDriverImpl();
- $authDriver->deleteUser($userId);
- $subUsers = array();
- ConfService::getConfStorageImpl()->deleteUser($userId, $subUsers);
- foreach ($subUsers as $deletedUser){
- $authDriver->deleteUser($deletedUser);
- }
- AJXP_Controller::applyHook("user.after_delete", array($userId));
- AJXP_Logger::logAction("Delete User", array("user_id"=>$userId, "sub_user" => implode(",", $subUsers)));
- return true;
- }
-
- static function filterBaseGroup($baseGroup){
- $u = self::getLoggedUser();
- // make sure it starts with a slash.
- $baseGroup = "/".ltrim($baseGroup, "/");
- if($u == null) return $baseGroup;
- if($u->getGroupPath() != "/") {
- if($baseGroup == "/") return $u->getGroupPath();
- else return $u->getGroupPath().$baseGroup;
- }else{
- return $baseGroup;
- }
- }
-
- static function listChildrenGroups($baseGroup = "/"){
-
- return ConfService::getAuthDriverImpl()->listChildrenGroups(self::filterBaseGroup($baseGroup));
-
- }
-
- static function createGroup($baseGroup, $groupName, $groupLabel){
- ConfService::getConfStorageImpl()->createGroup(rtrim(self::filterBaseGroup($baseGroup), "/")."/".$groupName, $groupLabel);
- }
-
- static function deleteGroup($baseGroup, $groupName){
- ConfService::getConfStorageImpl()->deleteGroup(rtrim(self::filterBaseGroup($baseGroup), "/")."/".$groupName);
- }
-
- static function getChildrenUsers($parentUserId){
- return ConfService::getConfStorageImpl()->getUserChildren($parentUserId);
- }
-
- static function getUsersForRepository($repositoryId){
- return ConfService::getConfStorageImpl()->getUsersForRepository($repositoryId);
- }
-
- /**
- * @static
- * @param string $baseGroup
- * @param null $regexp
- * @param $offset
- * @param $limit
- * @param bool $cleanLosts
- * @return array
- */
- static function listUsers($baseGroup = "/", $regexp = null, $offset = -1, $limit = -1, $cleanLosts = true)
- {
- $baseGroup = self::filterBaseGroup($baseGroup);
- $authDriver = ConfService::getAuthDriverImpl();
- $confDriver = ConfService::getConfStorageImpl();
- $allUsers = array();
- $paginated = false;
- if(($regexp != null || $offset != -1 || $limit != -1) && $authDriver->supportsUsersPagination()){
- $users = $authDriver->listUsersPaginated($baseGroup, $regexp, $offset, $limit);
- $paginated = true;
- }else{
- $users = $authDriver->listUsers($baseGroup);
- }
- foreach (array_keys($users) as $userId)
- {
- if(($userId == "guest" && !ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth")) || $userId == "ajxp.admin.users" || $userId == "") continue;
- if($regexp != null && !$authDriver->supportsUsersPagination() && !preg_match("/$regexp/i", $userId)) continue;
- $allUsers[$userId] = $confDriver->createUserObject($userId);
- if($paginated){
- // Make sure to reload all children objects
- foreach($confDriver->getUserChildren($userId) as $childObject){
- $allUsers[$childObject->getId()] = $childObject;
- }
- }
- }
- if($paginated && $cleanLosts){
- // Remove 'lost' items (children without parents).
- foreach($allUsers as $id => $object){
- if($object->hasParent() && !array_key_exists($object->getParent(), $allUsers)){
- unset($allUsers[$id]);
- }
- }
- }
- return $allUsers;
- }
-
- static function authSupportsPagination(){
- $authDriver = ConfService::getAuthDriverImpl();
- return $authDriver->supportsUsersPagination();
- }
-
- static function authCountUsers($baseGroup="/", $regexp=""){
- $authDriver = ConfService::getAuthDriverImpl();
- return $authDriver->getUsersCount($baseGroup, $regexp);
- }
-
- static function getAuthScheme($userName){
- $authDriver = ConfService::getAuthDriverImpl();
- return $authDriver->getAuthScheme($userName);
- }
-
- static function driverSupportsAuthSchemes(){
- $authDriver = ConfService::getAuthDriverImpl();
- return $authDriver->supportsAuthSchemes();
- }
-
- /**
- * Get Role by Id
- *
- * @param string $roleId
- * @param boolean $createIfNotExists
- * @return AJXP_Role
- */
- static function getRole($roleId, $createIfNotExists = false){
- $roles = self::getRolesList(array($roleId));
- if(isSet($roles[$roleId])) return $roles[$roleId];
- if($createIfNotExists){
- $role = new AJXP_Role($roleId);
- if(self::getLoggedUser()!=null && self::getLoggedUser()->getGroupPath()!=null){
- $role->setGroupPath(self::getLoggedUser()->getGroupPath());
- }
- self::updateRole($role);
- return $role;
- }
- return false;
- }
-
- /**
- * Create or update role
- *
- * @param AJXP_Role $roleObject
- */
- static function updateRole($roleObject, $userObject = null){
- ConfService::getConfStorageImpl()->updateRole($roleObject, $userObject);
- }
- /**
- * Delete a role by its id
- * @static
- * @param string $roleId
- * @return void
- */
- static function deleteRole($roleId){
- ConfService::getConfStorageImpl()->deleteRole($roleId);
- }
-
- static function filterPluginParameters($pluginId, $params, $repoId = null){
- $logged = self::getLoggedUser();
- if($logged == null) return $params;
- if($repoId == null){
- $repo = ConfService::getRepository();
- if($repo!=null) $repoId = $repo->getId();
- }
- if($logged == null || $logged->mergedRole == null) return $params;
- $roleParams = $logged->mergedRole->listParameters();
- if(iSSet($roleParams[AJXP_REPO_SCOPE_ALL][$pluginId])){
- $params = array_merge($params, $roleParams[AJXP_REPO_SCOPE_ALL][$pluginId]);
- }
- if($repoId != null && isSet($roleParams[$repoId][$pluginId])){
- $params = array_merge($params, $roleParams[$repoId][$pluginId]);
- }
- return $params;
- }
-
- /**
- * Get all defined roles
- * @static
- * @param array $roleIds
- * @param boolean $excludeReserved,
- * @return AJXP_Role[]
- */
- static function getRolesList($roleIds = array(), $excludeReserved = false){
- //if(isSet(self::$roles)) return self::$roles;
- $confDriver = ConfService::getConfStorageImpl();
- self::$roles = $confDriver->listRoles($roleIds, $excludeReserved);
- $repoList = null;
- foreach(self::$roles as $roleId => $roleObject){
- if(is_a($roleObject, "AjxpRole")){
- if($repoList == null) $repoList = ConfService::getRepositoriesList("all");
- $newRole = new AJXP_Role($roleId);
- $newRole->migrateDeprectated($repoList, $roleObject);
- self::$roles[$roleId] = $newRole;
- self::updateRole($newRole);
- }
- }
- return self::$roles;
- }
-
- static function allowedForCurrentGroup(AjxpGroupPathProvider $provider, $userObject = null){
- $l = ($userObject == null ? self::getLoggedUser() : $userObject);
- $pGP = $provider->getGroupPath();
- if(empty($pGP)) $pGP = "/";
- if($l == null || $l->getGroupPath() == null || $pGP == null) return true;
- return (strpos($l->getGroupPath(), $pGP, 0) === 0);
- }
-
- static function canAdministrate(AjxpGroupPathProvider $provider, $userObject = null){
- $l = ($userObject == null ? self::getLoggedUser() : $userObject);
- $pGP = $provider->getGroupPath();
- if(empty($pGP)) $pGP = "/";
- if($l == null || $l->getGroupPath() == null || $pGP == null) return true;
- return (strpos($pGP, $l->getGroupPath(), 0) === 0);
- }
-
- static function canAssign(AjxpGroupPathProvider $provider, $userObject = null){
- $l = ($userObject == null ? self::getLoggedUser() : $userObject);
- $pGP = $provider->getGroupPath();
- if(empty($pGP)) $pGP = "/";
- if($l == null || $l->getGroupPath() == null || $pGP == null) return true;
- return (strpos($l->getGroupPath(), $pGP, 0) === 0);
- }
-
-}
\ No newline at end of file
+
+ * This file is part of AjaXplorer.
+ *
+ * AjaXplorer is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * AjaXplorer is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with AjaXplorer. If not, see .
+ *
+ * The latest code can be found at .
+ */
+defined('AJXP_EXEC') or die( 'Access not allowed');
+
+/**
+ * Static access to the authentication mechanism. Encapsulates the authDriver implementation
+ * @package AjaXplorer
+ * @subpackage Core
+ */
+class AuthService
+{
+ public static $roles;
+ public static $useSession = true;
+ private static $currentUser;
+ /**
+ * Whether the whole users management system is enabled or not.
+ * @static
+ * @return bool
+ */
+ public static function usersEnabled()
+ {
+ return ConfService::getCoreConf("ENABLE_USERS", "auth");
+ }
+ /**
+ * Whether the current auth driver supports password update or not
+ * @static
+ * @return bool
+ */
+ public static function changePasswordEnabled()
+ {
+ $authDriver = ConfService::getAuthDriverImpl();
+ return $authDriver->passwordsEditable();
+ }
+ /**
+ * Get a unique seed from the current auth driver
+ * @static
+ * @return int|string
+ */
+ public static function generateSeed()
+ {
+ $authDriver = ConfService::getAuthDriverImpl();
+ return $authDriver->getSeed(true);
+ }
+
+ /**
+ * Put a secure token in the session
+ * @static
+ * @return
+ */
+ public static function generateSecureToken()
+ {
+ $_SESSION["SECURE_TOKEN"] = AJXP_Utils::generateRandomString(32); //md5(time());
+ return $_SESSION["SECURE_TOKEN"];
+ }
+ /**
+ * Get the secure token from the session
+ * @static
+ * @return string|bool
+ */
+ public static function getSecureToken()
+ {
+ return (isSet($_SESSION["SECURE_TOKEN"])?$_SESSION["SECURE_TOKEN"]:FALSE);
+ }
+ /**
+ * Verify a secure token value from the session
+ * @static
+ * @param string $token
+ * @return bool
+ */
+ public static function checkSecureToken($token)
+ {
+ if (isSet($_SESSION["SECURE_TOKEN"]) && $_SESSION["SECURE_TOKEN"] == $token) {
+ return true;
+ }
+ return false;
+ }
+
+ /**
+ * Get the currently logged user object
+ * @return AbstractAjxpUser
+ */
+ public static function getLoggedUser()
+ {
+ if (self::$useSession && isSet($_SESSION["AJXP_USER"])) {
+ if (is_a($_SESSION["AJXP_USER"], "__PHP_Incomplete_Class")) {
+ session_unset("AJXP_USER");
+ return null;
+ }
+ return $_SESSION["AJXP_USER"];
+ }
+ if(!self::$useSession && isSet(self::$currentUser)) return self::$currentUser;
+ return null;
+ }
+ /**
+ * Call the preLogUser() functino on the auth driver implementation
+ * @static
+ * @param string $remoteSessionId
+ * @return void
+ */
+ public static function preLogUser($remoteSessionId = "")
+ {
+ if(AuthService::getLoggedUser() != null) return ;
+ $authDriver = ConfService::getAuthDriverImpl();
+ $authDriver->preLogUser($remoteSessionId);
+ return ;
+ }
+ /**
+ * The array is located in the AjxpTmpDir/failedAJXP.log
+ * @static
+ * @return array
+ */
+ public static function getBruteForceLoginArray()
+ {
+ $failedLog = AJXP_Utils::getAjxpTmpDir()."/failedAJXP.log";
+ $loginAttempt = @file_get_contents($failedLog);
+ $loginArray = unserialize($loginAttempt);
+ $ret = array();
+ $curTime = time();
+ if (is_array($loginArray)) {
+ // Filter the array (all old time are cleaned)
+ foreach ($loginArray as $key => $login) {
+ if (($curTime - $login["time"]) <= 60 * 60 * 24) $ret[$key] = $login;
+ }
+ }
+ return $ret;
+ }
+ /**
+ * Store the array
+ * @static
+ * @param $loginArray
+ * @return void
+ */
+ public static function setBruteForceLoginArray($loginArray)
+ {
+ $failedLog = AJXP_Utils::getAjxpTmpDir()."/failedAJXP.log";
+ @file_put_contents($failedLog, serialize($loginArray));
+ }
+ /**
+ * Determines whether the user is try to make many attemps
+ * @static
+ * @param $loginArray
+ * @return bool
+ */
+ public static function checkBruteForceLogin(&$loginArray)
+ {
+ if (isSet($_SERVER['REMOTE_ADDR'])) {
+ $serverAddress = $_SERVER['REMOTE_ADDR'];
+ } else {
+ $serverAddress = $_SERVER['SERVER_ADDR'];
+ }
+ $login = null;
+ if (isSet($loginArray[$serverAddress])) {
+ $login = $loginArray[$serverAddress];
+ }
+ if (is_array($login)) {
+ $login["count"]++;
+ } else $login = array("count"=>1, "time"=>time());
+ $loginArray[$serverAddress] = $login;
+ if ($login["count"] > 3) {
+ if (AJXP_SERVER_DEBUG) {
+ AJXP_Logger::debug("DEBUG : IGNORING BRUTE FORCE ATTEMPTS!");
+ return true;
+ }
+ return FALSE;
+ }
+ return TRUE;
+ }
+ /**
+ * Is there a brute force login attempt?
+ * @static
+ * @return bool
+ */
+ public static function suspectBruteForceLogin()
+ {
+ $loginAttempt = AuthService::getBruteForceLoginArray();
+ return !AuthService::checkBruteForceLogin($loginAttempt);
+ }
+
+ public static function filterUserSensitivity($user)
+ {
+ if (!ConfService::getCoreConf("CASE_SENSITIVE", "auth")) {
+ return strtolower($user);
+ } else {
+ return $user;
+ }
+ }
+
+ public static function ignoreUserCase()
+ {
+ return !ConfService::getCoreConf("CASE_SENSITIVE", "auth");
+ }
+
+ /**
+ * @static
+ * @param AbstractAjxpUser $user
+ */
+ public static function refreshRememberCookie($user)
+ {
+ $current = $_COOKIE["AjaXplorer-remember"];
+ if (!empty($current)) {
+ $user->invalidateCookieString(substr($current, strpos($current, ":")+1));
+ }
+ $rememberPass = $user->getCookieString();
+ setcookie("AjaXplorer-remember", $user->id.":".$rememberPass, time()+3600*24*10, null, null, (isSet($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) == "on"), true);
+ }
+
+ /**
+ * @static
+ * @return bool
+ */
+ public static function hasRememberCookie()
+ {
+ return (isSet($_COOKIE["AjaXplorer-remember"]) && !empty($_COOKIE["AjaXplorer-remember"]));
+ }
+
+ /**
+ * @static
+ * Warning, must be called before sending other headers!
+ */
+ public static function clearRememberCookie()
+ {
+ $current = $_COOKIE["AjaXplorer-remember"];
+ $user = AuthService::getLoggedUser();
+ if (!empty($current) && $user != null) {
+ $user->invalidateCookieString(substr($current, strpos($current, ":")+1));
+ }
+ setcookie("AjaXplorer-remember", "", time()-3600, null, null, (isSet($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) == "on"), true);
+ }
+
+ public static function logTemporaryUser($parentUserId, $temporaryUserId)
+ {
+ $parentUserId = self::filterUserSensitivity($parentUserId);
+ $temporaryUserId = self::filterUserSensitivity($temporaryUserId);
+ $confDriver = ConfService::getConfStorageImpl();
+ $parentUser = $confDriver->createUserObject($parentUserId);
+ $temporaryUser = $confDriver->createUserObject($temporaryUserId);
+ $temporaryUser->mergedRole = $parentUser->mergedRole;
+ $temporaryUser->rights = $parentUser->rights;
+ $temporaryUser->setGroupPath($parentUser->getGroupPath());
+ $temporaryUser->setParent($parentUserId);
+ $temporaryUser->setResolveAsParent(true);
+ AJXP_Logger::logAction("Log in", array("temporary user" => $temporaryUserId, "owner" => $parentUserId));
+ self::updateUser($temporaryUser);
+ }
+
+ public static function clearTemporaryUser($temporaryUserId)
+ {
+ AJXP_Logger::logAction("Log out", array("temporary user"), $temporaryUserId);
+ if (isSet($_SESSION["AJXP_USER"]) || isSet(self::$currentUser)) {
+ AJXP_Logger::logAction("Log Out");
+ unset($_SESSION["AJXP_USER"]);
+ if(isSet(self::$currentUser)) unset(self::$currentUser);
+ if (ConfService::getCoreConf("SESSION_SET_CREDENTIALS", "auth")) {
+ AJXP_Safe::clearCredentials();
+ }
+ }
+ }
+
+ /**
+ * Log the user from its credentials
+ * @static
+ * @param string $user_id The user id
+ * @param string $pwd The password
+ * @param bool $bypass_pwd Ignore password or not
+ * @param bool $cookieLogin Is it a logging from the remember me cookie?
+ * @param string $returnSeed The unique seed
+ * @return int
+ */
+ public static function logUser($user_id, $pwd, $bypass_pwd = false, $cookieLogin = false, $returnSeed="")
+ {
+ $user_id = self::filterUserSensitivity($user_id);
+ if ($cookieLogin && !isSet($_COOKIE["AjaXplorer-remember"])) {
+ return -5; // SILENT IGNORE
+ }
+ if ($cookieLogin) {
+ list($user_id, $pwd) = explode(":", $_COOKIE["AjaXplorer-remember"]);
+ }
+ $confDriver = ConfService::getConfStorageImpl();
+ if ($user_id == null) {
+ if (self::$useSession) {
+ if(isSet($_SESSION["AJXP_USER"]) && is_object($_SESSION["AJXP_USER"])) return 1;
+ } else {
+ if(isSet(self::$currentUser) && is_object(self::$currentUser)) return 1;
+ }
+ if (ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth")) {
+ $authDriver = ConfService::getAuthDriverImpl();
+ if (!$authDriver->userExists("guest")) {
+ AuthService::createUser("guest", "");
+ $guest = $confDriver->createUserObject("guest");
+ $guest->save("superuser");
+ }
+ AuthService::logUser("guest", null);
+ return 1;
+ }
+ return -1;
+ }
+ $authDriver = ConfService::getAuthDriverImpl();
+ // CHECK USER PASSWORD HERE!
+ $loginAttempt = AuthService::getBruteForceLoginArray();
+ $bruteForceLogin = AuthService::checkBruteForceLogin($loginAttempt);
+ AuthService::setBruteForceLoginArray($loginAttempt);
+
+ if (!$authDriver->userExists($user_id)) {
+ if ($bruteForceLogin === FALSE) {
+ return -4;
+ } else {
+ return -1;
+ }
+ }
+ if (!$bypass_pwd) {
+ if (!AuthService::checkPassword($user_id, $pwd, $cookieLogin, $returnSeed)) {
+ if ($bruteForceLogin === FALSE) {
+ return -4;
+ } else {
+ if($cookieLogin) return -5;
+ return -1;
+ }
+ }
+ }
+ // Successful login attempt
+ unset($loginAttempt[$_SERVER["REMOTE_ADDR"]]);
+ AuthService::setBruteForceLoginArray($loginAttempt);
+
+ // Setting session credentials if asked in config
+ if (ConfService::getCoreConf("SESSION_SET_CREDENTIALS", "auth")) {
+ list($authId, $authPwd) = $authDriver->filterCredentials($user_id, $pwd);
+ AJXP_Safe::storeCredentials($authId, $authPwd);
+ }
+
+ $user = $confDriver->createUserObject($user_id);
+ if ($user->getLock() == "logout") {
+ return -1;
+ }
+ if ($authDriver->isAjxpAdmin($user_id)) {
+ $user->setAdmin(true);
+ }
+ if ($user->isAdmin()) {
+ $user = AuthService::updateAdminRights($user);
+ } else {
+ if (!$user->hasParent() && $user_id != "guest") {
+ //$user->setAcl("ajxp_shared", "rw");
+ }
+ }
+ if(self::$useSession) $_SESSION["AJXP_USER"] = $user;
+ else self::$currentUser = $user;
+
+ if ($authDriver->autoCreateUser() && !$user->storageExists()) {
+ $user->save("superuser"); // make sure update rights now
+ }
+ AJXP_Logger::logAction("Log In");
+ return 1;
+ }
+ /**
+ * Store the object in the session
+ * @static
+ * @param $userObject
+ * @return void
+ */
+ public static function updateUser($userObject)
+ {
+ if(self::$useSession) $_SESSION["AJXP_USER"] = $userObject;
+ else self::$currentUser = $userObject;
+ }
+ /**
+ * Clear the session
+ * @static
+ * @return void
+ */
+ public static function disconnect()
+ {
+ if (isSet($_SESSION["AJXP_USER"]) || isSet(self::$currentUser)) {
+ AuthService::clearRememberCookie();
+ AJXP_Logger::logAction("Log Out");
+ unset($_SESSION["AJXP_USER"]);
+ if(isSet(self::$currentUser)) unset(self::$currentUser);
+ if (ConfService::getCoreConf("SESSION_SET_CREDENTIALS", "auth")) {
+ AJXP_Safe::clearCredentials();
+ }
+ }
+ }
+ /**
+ * Specific operations to perform at boot time
+ * @static
+ * @param array $START_PARAMETERS A HashTable of parameters to send back to the client
+ * @return void
+ */
+ public static function bootSequence(&$START_PARAMETERS)
+ {
+ if(AJXP_Utils::detectApplicationFirstRun()) return;
+ if(file_exists(AJXP_CACHE_DIR."/admin_counted")) return;
+ $rootRole = AuthService::getRole("ROOT_ROLE", false);
+ if ($rootRole === false) {
+ $rootRole = new AJXP_Role("ROOT_ROLE");
+ $rootRole->setLabel("Root Role");
+ $rootRole->setAutoApplies(array("standard"));
+ foreach (ConfService::getRepositoriesList("all") as $repositoryId => $repoObject) {
+ if($repoObject->isTemplate) continue;
+ $gp = $repoObject->getGroupPath();
+ if (empty($gp) || $gp == "/") {
+ if ($repoObject->getDefaultRight() != "") {
+ $rootRole->setAcl($repositoryId, $repoObject->getDefaultRight());
+ }
+ }
+ }
+ AuthService::updateRole($rootRole);
+ }
+ $miniRole = AuthService::getRole("MINISITE", false);
+ if ($miniRole === false) {
+ $rootRole = new AJXP_Role("MINISITE");
+ $rootRole->setLabel("Minisite Users");
+ $actions = array(
+ "access.fs" => array("ajxp_link", "chmod", "purge"),
+ "meta.watch" => array("toggle_watch"),
+ "conf.serial"=> array("get_bookmarks"),
+ "conf.sql"=> array("get_bookmarks"),
+ "index.lucene" => array("index"),
+ "action.share" => array("share"),
+ "gui.ajax" => array("bookmark"),
+ "auth.serial" => array("pass_change"),
+ "auth.sql" => array("pass_change"),
+ );
+ foreach ($actions as $pluginId => $acts) {
+ foreach ($acts as $act) {
+ $rootRole->setActionState($pluginId, $act, AJXP_REPO_SCOPE_SHARED, false);
+ }
+ }
+ AuthService::updateRole($rootRole);
+ }
+ $miniRole = AuthService::getRole("MINISITE_NODOWNLOAD", false);
+ if ($miniRole === false) {
+ $rootRole = new AJXP_Role("MINISITE_NODOWNLOAD");
+ $rootRole->setLabel("Minisite Users - No Download");
+ $actions = array(
+ "access.fs" => array("download", "download_chunk", "prepare_chunk_dl", "download_all")
+ );
+ foreach ($actions as $pluginId => $acts) {
+ foreach ($acts as $act) {
+ $rootRole->setActionState($pluginId, $act, AJXP_REPO_SCOPE_SHARED, false);
+ }
+ }
+ AuthService::updateRole($rootRole);
+ }
+ $miniRole = AuthService::getRole("GUEST", false);
+ if ($miniRole === false) {
+ $rootRole = new AJXP_Role("GUEST");
+ $rootRole->setLabel("Guest user role");
+ $actions = array(
+ "access.fs" => array("purge"),
+ "meta.watch" => array("toggle_watch"),
+ "index.lucene" => array("index"),
+ );
+ $rootRole->setAutoApplies(array("guest"));
+ foreach ($actions as $pluginId => $acts) {
+ foreach ($acts as $act) {
+ $rootRole->setActionState($pluginId, $act, AJXP_REPO_SCOPE_ALL);
+ }
+ }
+ AuthService::updateRole($rootRole);
+ }
+ $adminCount = AuthService::countAdminUsers();
+ if ($adminCount == 0) {
+ $authDriver = ConfService::getAuthDriverImpl();
+ $adminPass = ADMIN_PASSWORD;
+ if ($authDriver->getOption("TRANSMIT_CLEAR_PASS") !== true) {
+ $adminPass = md5(ADMIN_PASSWORD);
+ }
+ AuthService::createUser("admin", $adminPass, true);
+ if (ADMIN_PASSWORD == INITIAL_ADMIN_PASSWORD) {
+ $userObject = ConfService::getConfStorageImpl()->createUserObject("admin");
+ $userObject->setAdmin(true);
+ AuthService::updateAdminRights($userObject);
+ if (AuthService::changePasswordEnabled()) {
+ $userObject->setLock("pass_change");
+ }
+ $userObject->save("superuser");
+ $START_PARAMETERS["ALERT"] .= "Warning! User 'admin' was created with the initial password '". INITIAL_ADMIN_PASSWORD ."'. \\nPlease log in as admin and change the password now!";
+ }
+ AuthService::updateUser($userObject);
+ } else if ($adminCount == -1) {
+ // Here we may come from a previous version! Check the "admin" user and set its right as admin.
+ $confStorage = ConfService::getConfStorageImpl();
+ $adminUser = $confStorage->createUserObject("admin");
+ $adminUser->setAdmin(true);
+ $adminUser->save("superuser");
+ $START_PARAMETERS["ALERT"] .= "There is an admin user, but without admin right. Now any user can have the administration rights, \\n your 'admin' user was set with the admin rights. Please check that this suits your security configuration.";
+ }
+ file_put_contents(AJXP_CACHE_DIR."/admin_counted", "true");
+
+ }
+ /**
+ * If the auth driver implementatino has a logout redirect URL, clear session and return it.
+ * @static
+ * @param bool $logUserOut
+ * @return bool
+ */
+ public static function getLogoutAddress($logUserOut = true)
+ {
+ $authDriver = ConfService::getAuthDriverImpl();
+ $logout = $authDriver->getLogoutRedirect();
+ if ($logUserOut) {
+ self::disconnect();
+ }
+ return $logout;
+ }
+ /**
+ * Compute the default repository id to log the current user
+ * @static
+ * @return int|string
+ */
+ public static function getDefaultRootId()
+ {
+ $loggedUser = AuthService::getLoggedUser();
+ if($loggedUser == null) return 0;
+ $repoList = ConfService::getRepositoriesList();
+ foreach ($repoList as $rootDirIndex => $rootDirObject) {
+ if ($loggedUser->canRead($rootDirIndex."") || $loggedUser->canWrite($rootDirIndex."")) {
+ // Warning : do not grant access to admin repository to a non admin, or there will be
+ // an "Empty Repository Object" error.
+ if ($rootDirObject->getAccessType()=="ajxp_conf" && AuthService::usersEnabled() && !$loggedUser->isAdmin()) {
+ continue;
+ }
+ if ($rootDirObject->getAccessType() == "ajxp_shared" && count($repoList) > 1) {
+ continue;
+ }
+ return $rootDirIndex;
+ }
+ }
+ return 0;
+ }
+
+ /**
+ * Update a user with admin rights and return it
+ * @param AbstractAjxpUser $adminUser
+ * @return AbstractAjxpUser
+ */
+ public static function updateAdminRights($adminUser)
+ {
+ foreach (ConfService::getRepositoriesList() as $repoId => $repoObject) {
+ if(!self::allowedForCurrentGroup($repoObject, $adminUser)) continue;
+ if($repoObject->hasParent() && $repoObject->getParentId() != $adminUser->getId()) continue;
+ $adminUser->personalRole->setAcl($repoId, "rw");
+ $adminUser->recomputeMergedRole();
+ }
+ $adminUser->save("superuser");
+ return $adminUser;
+ }
+
+ /**
+ * Update a user object with the default repositories rights
+ *
+ * @param AbstractAjxpUser $userObject
+ */
+ public static function updateDefaultRights(&$userObject)
+ {
+ if (!$userObject->hasParent()) {
+ $changes = false;
+ foreach (ConfService::getRepositoriesList() as $repositoryId => $repoObject) {
+ if(!self::allowedForCurrentGroup($repoObject, $userObject)) continue;
+ if($repoObject->isTemplate) continue;
+ if ($repoObject->getDefaultRight() != "") {
+ $changes = true;
+ $userObject->personalRole->setAcl($repositoryId, $repoObject->getDefaultRight());
+ }
+ }
+ if ($changes) {
+ $userObject->recomputeMergedRole();
+ }
+ foreach (AuthService::getRolesList(array(), true) as $roleId => $roleObject) {
+ if(!self::allowedForCurrentGroup($roleObject, $userObject)) continue;
+ if ($userObject->getProfile() == "shared" && $roleObject->autoAppliesTo("shared")) {
+ $userObject->addRole($roleObject);
+ } else if ($roleObject->autoAppliesTo("standard")) {
+ $userObject->addRole($roleObject);
+ }
+ }
+ }
+ }
+
+ /**
+ * @static
+ * @param AbstractAjxpUser $userObject
+ */
+ public static function updateAutoApplyRole(&$userObject)
+ {
+ foreach (AuthService::getRolesList(array(), true) as $roleId => $roleObject) {
+ if(!self::allowedForCurrentGroup($roleObject, $userObject)) continue;
+ if ($roleObject->autoAppliesTo($userObject->getProfile()) || $roleObject->autoAppliesTo("all")) {
+ $userObject->addRole($roleObject);
+ }
+ }
+ }
+
+ public static function updateAuthProvidedData(&$userObject)
+ {
+ ConfService::getAuthDriverImpl()->updateUserObject($userObject);
+ }
+
+ /**
+ * Use driver implementation to check whether the user exists or not.
+ * @static
+ * @param String $userId
+ * @param String $mode "r" or "w"
+ * @return bool
+ */
+ public static function userExists($userId, $mode = "r")
+ {
+ if ($userId == "guest" && !ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth")) {
+ return false;
+ }
+ $userId = AuthService::filterUserSensitivity($userId);
+ $authDriver = ConfService::getAuthDriverImpl();
+ if ($mode == "w") {
+ return $authDriver->userExistsWrite($userId);
+ }
+ return $authDriver->userExists($userId);
+ }
+
+ /**
+ * Make sure a user id is not reserved for low-level tasks (currently "guest" and "shared").
+ * @static
+ * @param String $username
+ * @return bool
+ */
+ public static function isReservedUserId($username)
+ {
+ $username = AuthService::filterUserSensitivity($username);
+ return in_array($username, array("guest", "shared"));
+ }
+
+ /**
+ * Simple password encoding, should be deported in a more complex/configurable function
+ * @static
+ * @param $pass
+ * @return string
+ */
+ public static function encodePassword($pass)
+ {
+ return md5($pass);
+ }
+ /**
+ * Check a password
+ * @static
+ * @param $userId
+ * @param $userPass
+ * @param bool $cookieString
+ * @param string $returnSeed
+ * @return bool|void
+ */
+ public static function checkPassword($userId, $userPass, $cookieString = false, $returnSeed = "")
+ {
+ if(ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth") && $userId == "guest") return true;
+ $userId = AuthService::filterUserSensitivity($userId);
+ $authDriver = ConfService::getAuthDriverImpl();
+ if ($cookieString) {
+ $confDriver = ConfService::getConfStorageImpl();
+ $userObject = $confDriver->createUserObject($userId);
+ $res = $userObject->checkCookieString($userPass);
+ return $res;
+ }
+ $seed = $authDriver->getSeed(false);
+ if($seed != $returnSeed) return false;
+ return $authDriver->checkPassword($userId, $userPass, $returnSeed);
+ }
+ /**
+ * Update the password in the auth driver implementation.
+ * @static
+ * @throws Exception
+ * @param $userId
+ * @param $userPass
+ * @return bool
+ */
+ public static function updatePassword($userId, $userPass)
+ {
+ if (strlen($userPass) < ConfService::getCoreConf("PASSWORD_MINLENGTH", "auth")) {
+ $messages = ConfService::getMessages();
+ throw new Exception($messages[378]);
+ }
+ $userId = AuthService::filterUserSensitivity($userId);
+ $authDriver = ConfService::getAuthDriverImpl();
+ $authDriver->changePassword($userId, $userPass);
+ if ($authDriver->getOption("TRANSMIT_CLEAR_PASS") === true) {
+ // We can directly update the HA1 version of the WEBDAV Digest
+ $realm = ConfService::getCoreConf("WEBDAV_DIGESTREALM");
+ $ha1 = md5("{$userId}:{$realm}:{$userPass}");
+ $zObj = ConfService::getConfStorageImpl()->createUserObject($userId);
+ $wData = $zObj->getPref("AJXP_WEBDAV_DATA");
+ if(!is_array($wData)) $wData = array();
+ $wData["HA1"] = $ha1;
+ $zObj->setPref("AJXP_WEBDAV_DATA", $wData);
+ $zObj->save();
+ }
+ AJXP_Logger::logAction("Update Password", array("user_id"=>$userId));
+ return true;
+ }
+ /**
+ * Create a user
+ * @static
+ * @throws Exception
+ * @param $userId
+ * @param $userPass
+ * @param bool $isAdmin
+ * @return null
+ * @todo the minlength check is probably causing problem with the bridges
+ */
+ public static function createUser($userId, $userPass, $isAdmin=false)
+ {
+ $userId = AuthService::filterUserSensitivity($userId);
+ AJXP_Controller::applyHook("user.before_create", array($userId, $userPass, $isAdmin));
+ if (!ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth") && $userId == "guest") {
+ throw new Exception("Reserved user id");
+ }
+ /*
+ if (strlen($userPass) < ConfService::getCoreConf("PASSWORD_MINLENGTH", "auth") && $userId != "guest") {
+ $messages = ConfService::getMessages();
+ throw new Exception($messages[378]);
+ }
+ */
+ $authDriver = ConfService::getAuthDriverImpl();
+ $confDriver = ConfService::getConfStorageImpl();
+ $authDriver->createUser($userId, $userPass);
+ $user = null;
+ if ($isAdmin) {
+ $user = $confDriver->createUserObject($userId);
+ $user->setAdmin(true);
+ $user->save("superuser");
+ }
+ if ($authDriver->getOption("TRANSMIT_CLEAR_PASS") === true) {
+ $realm = ConfService::getCoreConf("WEBDAV_DIGESTREALM");
+ $ha1 = md5("{$userId}:{$realm}:{$userPass}");
+ if (!isSet($user)) {
+ $user = $confDriver->createUserObject($userId);
+ }
+ $wData = $user->getPref("AJXP_WEBDAV_DATA");
+ if(!is_array($wData)) $wData = array();
+ $wData["HA1"] = $ha1;
+ $user->setPref("AJXP_WEBDAV_DATA", $wData);
+ $user->save();
+ }
+ AJXP_Controller::applyHook("user.after_create", array($user));
+ AJXP_Logger::logAction("Create User", array("user_id"=>$userId));
+ return null;
+ }
+ /**
+ * Detect the number of admin users
+ * @static
+ * @return int|void
+ */
+ public static function countAdminUsers()
+ {
+ $confDriver = ConfService::getConfStorageImpl();
+ $auth = ConfService::getAuthDriverImpl();
+ $count = $confDriver->countAdminUsers();
+ if (!$count && $auth->userExists("admin") && $confDriver->getName() == "serial") {
+ return -1;
+ }
+ return $count;
+ }
+
+ /**
+ * Delete a user in the auth/conf driver impl
+ * @static
+ * @param $userId
+ * @return bool
+ */
+ public static function deleteUser($userId)
+ {
+ $userId = AuthService::filterUserSensitivity($userId);
+ AJXP_Controller::applyHook("user.before_delete", array($userId));
+ $authDriver = ConfService::getAuthDriverImpl();
+ $authDriver->deleteUser($userId);
+ $subUsers = array();
+ ConfService::getConfStorageImpl()->deleteUser($userId, $subUsers);
+ foreach ($subUsers as $deletedUser) {
+ $authDriver->deleteUser($deletedUser);
+ }
+ AJXP_Controller::applyHook("user.after_delete", array($userId));
+ AJXP_Logger::logAction("Delete User", array("user_id"=>$userId, "sub_user" => implode(",", $subUsers)));
+ return true;
+ }
+
+ public static function filterBaseGroup($baseGroup)
+ {
+ $u = self::getLoggedUser();
+ // make sure it starts with a slash.
+ $baseGroup = "/".ltrim($baseGroup, "/");
+ if($u == null) return $baseGroup;
+ if ($u->getGroupPath() != "/") {
+ if($baseGroup == "/") return $u->getGroupPath();
+ else return $u->getGroupPath().$baseGroup;
+ } else {
+ return $baseGroup;
+ }
+ }
+
+ public static function listChildrenGroups($baseGroup = "/")
+ {
+ return ConfService::getAuthDriverImpl()->listChildrenGroups(self::filterBaseGroup($baseGroup));
+
+ }
+
+ public static function createGroup($baseGroup, $groupName, $groupLabel)
+ {
+ ConfService::getConfStorageImpl()->createGroup(rtrim(self::filterBaseGroup($baseGroup), "/")."/".$groupName, $groupLabel);
+ }
+
+ public static function deleteGroup($baseGroup, $groupName)
+ {
+ ConfService::getConfStorageImpl()->deleteGroup(rtrim(self::filterBaseGroup($baseGroup), "/")."/".$groupName);
+ }
+
+ public static function getChildrenUsers($parentUserId)
+ {
+ return ConfService::getConfStorageImpl()->getUserChildren($parentUserId);
+ }
+
+ public static function getUsersForRepository($repositoryId)
+ {
+ return ConfService::getConfStorageImpl()->getUsersForRepository($repositoryId);
+ }
+
+ /**
+ * @static
+ * @param string $baseGroup
+ * @param null $regexp
+ * @param $offset
+ * @param $limit
+ * @param bool $cleanLosts
+ * @return array
+ */
+ public static function listUsers($baseGroup = "/", $regexp = null, $offset = -1, $limit = -1, $cleanLosts = true)
+ {
+ $baseGroup = self::filterBaseGroup($baseGroup);
+ $authDriver = ConfService::getAuthDriverImpl();
+ $confDriver = ConfService::getConfStorageImpl();
+ $allUsers = array();
+ $paginated = false;
+ if (($regexp != null || $offset != -1 || $limit != -1) && $authDriver->supportsUsersPagination()) {
+ $users = $authDriver->listUsersPaginated($baseGroup, $regexp, $offset, $limit);
+ $paginated = true;
+ } else {
+ $users = $authDriver->listUsers($baseGroup);
+ }
+ foreach (array_keys($users) as $userId) {
+ if(($userId == "guest" && !ConfService::getCoreConf("ALLOW_GUEST_BROWSING", "auth")) || $userId == "ajxp.admin.users" || $userId == "") continue;
+ if($regexp != null && !$authDriver->supportsUsersPagination() && !preg_match("/$regexp/i", $userId)) continue;
+ $allUsers[$userId] = $confDriver->createUserObject($userId);
+ if ($paginated) {
+ // Make sure to reload all children objects
+ foreach ($confDriver->getUserChildren($userId) as $childObject) {
+ $allUsers[$childObject->getId()] = $childObject;
+ }
+ }
+ }
+ if ($paginated && $cleanLosts) {
+ // Remove 'lost' items (children without parents).
+ foreach ($allUsers as $id => $object) {
+ if ($object->hasParent() && !array_key_exists($object->getParent(), $allUsers)) {
+ unset($allUsers[$id]);
+ }
+ }
+ }
+ return $allUsers;
+ }
+
+ public static function authSupportsPagination()
+ {
+ $authDriver = ConfService::getAuthDriverImpl();
+ return $authDriver->supportsUsersPagination();
+ }
+
+ public static function authCountUsers($baseGroup="/", $regexp="")
+ {
+ $authDriver = ConfService::getAuthDriverImpl();
+ return $authDriver->getUsersCount($baseGroup, $regexp);
+ }
+
+ public static function getAuthScheme($userName)
+ {
+ $authDriver = ConfService::getAuthDriverImpl();
+ return $authDriver->getAuthScheme($userName);
+ }
+
+ public static function driverSupportsAuthSchemes()
+ {
+ $authDriver = ConfService::getAuthDriverImpl();
+ return $authDriver->supportsAuthSchemes();
+ }
+
+ /**
+ * Get Role by Id
+ *
+ * @param string $roleId
+ * @param boolean $createIfNotExists
+ * @return AJXP_Role
+ */
+ public static function getRole($roleId, $createIfNotExists = false)
+ {
+ $roles = self::getRolesList(array($roleId));
+ if(isSet($roles[$roleId])) return $roles[$roleId];
+ if ($createIfNotExists) {
+ $role = new AJXP_Role($roleId);
+ if (self::getLoggedUser()!=null && self::getLoggedUser()->getGroupPath()!=null) {
+ $role->setGroupPath(self::getLoggedUser()->getGroupPath());
+ }
+ self::updateRole($role);
+ return $role;
+ }
+ return false;
+ }
+
+ /**
+ * Create or update role
+ *
+ * @param AJXP_Role $roleObject
+ */
+ public static function updateRole($roleObject, $userObject = null)
+ {
+ ConfService::getConfStorageImpl()->updateRole($roleObject, $userObject);
+ }
+ /**
+ * Delete a role by its id
+ * @static
+ * @param string $roleId
+ * @return void
+ */
+ public static function deleteRole($roleId)
+ {
+ ConfService::getConfStorageImpl()->deleteRole($roleId);
+ }
+
+ public static function filterPluginParameters($pluginId, $params, $repoId = null)
+ {
+ $logged = self::getLoggedUser();
+ if($logged == null) return $params;
+ if ($repoId == null) {
+ $repo = ConfService::getRepository();
+ if($repo!=null) $repoId = $repo->getId();
+ }
+ if($logged == null || $logged->mergedRole == null) return $params;
+ $roleParams = $logged->mergedRole->listParameters();
+ if (iSSet($roleParams[AJXP_REPO_SCOPE_ALL][$pluginId])) {
+ $params = array_merge($params, $roleParams[AJXP_REPO_SCOPE_ALL][$pluginId]);
+ }
+ if ($repoId != null && isSet($roleParams[$repoId][$pluginId])) {
+ $params = array_merge($params, $roleParams[$repoId][$pluginId]);
+ }
+ return $params;
+ }
+
+ /**
+ * Get all defined roles
+ * @static
+ * @param array $roleIds
+ * @param boolean $excludeReserved,
+ * @return AJXP_Role[]
+ */
+ public static function getRolesList($roleIds = array(), $excludeReserved = false)
+ {
+ //if(isSet(self::$roles)) return self::$roles;
+ $confDriver = ConfService::getConfStorageImpl();
+ self::$roles = $confDriver->listRoles($roleIds, $excludeReserved);
+ $repoList = null;
+ foreach (self::$roles as $roleId => $roleObject) {
+ if (is_a($roleObject, "AjxpRole")) {
+ if($repoList == null) $repoList = ConfService::getRepositoriesList("all");
+ $newRole = new AJXP_Role($roleId);
+ $newRole->migrateDeprectated($repoList, $roleObject);
+ self::$roles[$roleId] = $newRole;
+ self::updateRole($newRole);
+ }
+ }
+ return self::$roles;
+ }
+
+ public static function allowedForCurrentGroup(AjxpGroupPathProvider $provider, $userObject = null)
+ {
+ $l = ($userObject == null ? self::getLoggedUser() : $userObject);
+ $pGP = $provider->getGroupPath();
+ if(empty($pGP)) $pGP = "/";
+ if($l == null || $l->getGroupPath() == null || $pGP == null) return true;
+ return (strpos($l->getGroupPath(), $pGP, 0) === 0);
+ }
+
+ public static function canAdministrate(AjxpGroupPathProvider $provider, $userObject = null)
+ {
+ $l = ($userObject == null ? self::getLoggedUser() : $userObject);
+ $pGP = $provider->getGroupPath();
+ if(empty($pGP)) $pGP = "/";
+ if($l == null || $l->getGroupPath() == null || $pGP == null) return true;
+ return (strpos($pGP, $l->getGroupPath(), 0) === 0);
+ }
+
+ public static function canAssign(AjxpGroupPathProvider $provider, $userObject = null)
+ {
+ $l = ($userObject == null ? self::getLoggedUser() : $userObject);
+ $pGP = $provider->getGroupPath();
+ if(empty($pGP)) $pGP = "/";
+ if($l == null || $l->getGroupPath() == null || $pGP == null) return true;
+ return (strpos($l->getGroupPath(), $pGP, 0) === 0);
+ }
+
+}
diff --git a/core/src/core/classes/class.CaptchaProvider.php b/core/src/core/classes/class.CaptchaProvider.php
index ed79ac46b9..c6965d63a2 100644
--- a/core/src/core/classes/class.CaptchaProvider.php
+++ b/core/src/core/classes/class.CaptchaProvider.php
@@ -27,48 +27,49 @@
* @package AjaXplorer
* @subpackage Core
*/
-class CaptchaProvider{
- /**
+class CaptchaProvider
+{
+ /**
* Print out a Captcha image
* @static
* @return void
*/
- public static function sendCaptcha(){
-
- $libPath = AJXP_BIN_FOLDER."/securimage";
-
- $img = new Securimage();
- $img->wordlist_file = $libPath."/words/words.txt";
- $img->gd_font_file = $libPath."/gdfonts/automatic.gdf";
- $img->signature_font = $img->ttf_file = $libPath."/AHGBold.ttf";
-
- $img->image_height = 80;
- $img->image_width = 170;
- $img->perturbation = 0.85;
- $img->image_bg_color = new Securimage_Color("#f6f6f6");
- $img->multi_text_color = array(new Securimage_Color("#3399ff"),
- new Securimage_Color("#3300cc"),
- new Securimage_Color("#3333cc"),
- new Securimage_Color("#6666ff"),
- new Securimage_Color("#99cccc")
- );
- $img->use_multi_text = true;
- $img->text_angle_minimum = -5;
- $img->text_angle_maximum = 5;
- $img->use_transparent_text = true;
- $img->text_transparency_percentage = 30; // 100 = completely transparent
- $img->num_lines = 5;
- $img->line_color = new Securimage_Color("#eaeaea");
- $img->signature_color = new Securimage_Color(rand(0, 64), rand(64, 128), rand(128, 255));
- $img->use_wordlist = true;
- if(!function_exists('imagettftext')){
- $img->use_gd_font = true;
- $img->use_transparent_text = false;
- $img->use_multi_text = false;
- }
- //$img->show($libPath."/backgrounds/bg3.jpg");
- $img->show();
- }
+ public static function sendCaptcha()
+ {
+ $libPath = AJXP_BIN_FOLDER."/securimage";
+
+ $img = new Securimage();
+ $img->wordlist_file = $libPath."/words/words.txt";
+ $img->gd_font_file = $libPath."/gdfonts/automatic.gdf";
+ $img->signature_font = $img->ttf_file = $libPath."/AHGBold.ttf";
+
+ $img->image_height = 80;
+ $img->image_width = 170;
+ $img->perturbation = 0.85;
+ $img->image_bg_color = new Securimage_Color("#f6f6f6");
+ $img->multi_text_color = array(new Securimage_Color("#3399ff"),
+ new Securimage_Color("#3300cc"),
+ new Securimage_Color("#3333cc"),
+ new Securimage_Color("#6666ff"),
+ new Securimage_Color("#99cccc")
+ );
+ $img->use_multi_text = true;
+ $img->text_angle_minimum = -5;
+ $img->text_angle_maximum = 5;
+ $img->use_transparent_text = true;
+ $img->text_transparency_percentage = 30; // 100 = completely transparent
+ $img->num_lines = 5;
+ $img->line_color = new Securimage_Color("#eaeaea");
+ $img->signature_color = new Securimage_Color(rand(0, 64), rand(64, 128), rand(128, 255));
+ $img->use_wordlist = true;
+ if (!function_exists('imagettftext')) {
+ $img->use_gd_font = true;
+ $img->use_transparent_text = false;
+ $img->use_multi_text = false;
+ }
+ //$img->show($libPath."/backgrounds/bg3.jpg");
+ $img->show();
+ }
/**
* Verify the code against the current image.
@@ -76,13 +77,11 @@ public static function sendCaptcha(){
* @param $code
* @return bool
*/
- public static function checkCaptchaResult($code){
-
- $img = new Securimage();
- return $img->check($code);
-
- }
-
-}
+ public static function checkCaptchaResult($code)
+ {
+ $img = new Securimage();
+ return $img->check($code);
+
+ }
-?>
\ No newline at end of file
+}
diff --git a/core/src/core/classes/class.ConfService.php b/core/src/core/classes/class.ConfService.php
index 9d1ef26882..94e7b19f3d 100644
--- a/core/src/core/classes/class.ConfService.php
+++ b/core/src/core/classes/class.ConfService.php
@@ -1,1246 +1,1288 @@
-
- * This file is part of AjaXplorer.
- *
- * AjaXplorer is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as published by
- * the Free Software Foundation, either version 3 of the License, or
- * (at your option) any later version.
- *
- * AjaXplorer is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with AjaXplorer. If not, see .
- *
- * The latest code can be found at .
- */
-defined('AJXP_EXEC') or die( 'Access not allowed');
-
-/**
- * Configuration holder. Singleton class accessed statically, encapsulates the confDriver implementation.
- * @package AjaXplorer
- * @subpackage Core
- */
-class ConfService
-{
- private static $instance;
- private $errors = array();
- private $configs = array();
-
- /**
- * @param AJXP_PluginsService $ajxpPluginService
- * @return AbstractConfDriver
- */
- public function confPluginSoftLoad($ajxpPluginService){
-
- $booter = $ajxpPluginService->softLoad("boot.conf", array());
- $coreConfigs = $booter->loadPluginConfig("core", "conf");
- $corePlug = $ajxpPluginService->softLoad("core.conf", array());
- $corePlug->loadConfigs($coreConfigs);
- return $corePlug->getConfImpl();
-
- }
-
- /**
- * @return AbstractConfDriver
- */
- public static function getBootConfStorageImpl(){
- $inst = AJXP_PluginsService::getInstance()->findPluginById("boot.conf");
- if(empty($inst)){
- $inst = AJXP_PluginsService::getInstance()->softLoad("boot.conf", array());
- }
- return $inst;
- }
-
- /**
- * Initialize singleton
- * @static
- * @return void
- */
- public static function init(){
- $inst = self::getInstance();
- $inst->initInst();
- }
- /**
- * Load the boostrap_* files and their configs
- * @return void
- */
- public function initInst()
- {
- // INIT AS GLOBAL
- $this->configs["AVAILABLE_LANG"] = self::listAvailableLanguages();
- if(isSet($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) == "on"){
- $this->configs["USE_HTTPS"] = true;
- }
- if(isSet($this->configs["USE_HTTPS"])){
- AJXP_Utils::safeIniSet("session.cookie_secure", true);
- }
- $this->configs["JS_DEBUG"] = AJXP_CLIENT_DEBUG;
- $this->configs["SERVER_DEBUG"] = AJXP_SERVER_DEBUG;
-
-
- if(is_file(AJXP_CONF_PATH."/bootstrap_repositories.php")){
- include(AJXP_CONF_PATH."/bootstrap_repositories.php");
- $this->configs["DEFAULT_REPOSITORIES"] = $REPOSITORIES;
- }else{
- $this->configs["DEFAULT_REPOSITORIES"] = array();
- }
- }
- /**
- * Start the singleton
- * @static
- * @return void
- */
- public static function start(){
- $inst = self::getInstance();
- $inst->startInst();
- }
- /**
- * Init CONF, AUTH drivers
- * Init Repositories
- * @return void
- */
- public function startInst(){
- AJXP_PluginsService::getInstance()->setPluginUniqueActiveForType("conf", self::getConfStorageImpl()->getName());
- }
- /**
- * Get errors generated by the boot sequence (init/start)
- * @static
- * @return array
- */
- public static function getErrors(){
- return self::getInstance()->errors;
- }
-
- /**
- * @static
- * @param $globalsArray
- * @param string $interfaceCheck
- * @internal param string $bootstrapConfigKey
- * @internal param string $bootstrapConfigType
- * @return AJXP_Plugin|null
- */
- public static function instanciatePluginFromGlobalParams($globalsArray, $interfaceCheck = ""){
-
- $plugin = false;
-
- if(is_string($globalsArray)){
- $globalsArray = array("instance_name" => $globalsArray);
- }
-
- if(isSet($globalsArray["instance_name"])){
- $pName = $globalsArray["instance_name"];
- unset($globalsArray["instance_name"]);
- $plugin = AJXP_PluginsService::getInstance()->softLoad($pName, $globalsArray);
- $plugin->performChecks();
- }
-
- if($plugin != false && !empty($interfaceCheck)){
- if(!is_a($plugin, $interfaceCheck)){
- $plugin = false;
- }
- }
- if($plugin !== false){
- AJXP_PluginsService::getInstance()->setPluginActive($plugin->getType(), $plugin->getName(), true, $plugin);
- }
- return $plugin;
-
- }
- /**
- * Check if the STDIN constant is defined
- * @static
- * @return bool
- */
- public static function currentContextIsCommandLine(){
- return php_sapi_name() === "cli";
- }
- /**
- * Check the presence of mcrypt and option CMDLINE_ACTIVE
- * @static
- * @return bool
- */
- public static function backgroundActionsSupported(){
- return function_exists("mcrypt_create_iv") && ConfService::getCoreConf("CMDLINE_ACTIVE");
- }
-
- /**
- * @var AbstractConfDriver
- */
- private static $tmpConfStorageImpl;
- /**
- * @var AbstractAuthDriver
- */
- private static $tmpAuthStorageImpl;
-
- /**
- * @param $confStorage AbstractConfDriver
- * @param $authStorage AbstractAuthDriver
- */
- public static function setTmpStorageImplementations($confStorage, $authStorage){
- self::$tmpConfStorageImpl = $confStorage;
- self::$tmpAuthStorageImpl = $authStorage;
- }
-
- /**
- * Get conf driver implementation
- *
- * @return AbstractConfDriver
- */
- public static function getConfStorageImpl(){
- if(isSet(self::$tmpConfStorageImpl)) return self::$tmpConfStorageImpl;
- return AJXP_PluginsService::getInstance()->getPluginById("core.conf")->getConfImpl();
- }
-
- /**
- * Get auth driver implementation
- *
- * @return AbstractAuthDriver
- */
- public static function getAuthDriverImpl(){
- if(isSet(self::$tmpAuthStorageImpl)) return self::$tmpAuthStorageImpl;
- return AJXP_PluginsService::getInstance()->getPluginById("core.auth")->getAuthImpl();
- }
-
- public static function switchUserToActiveRepository($loggedUser, $parameterId = -1){
- if(isSet($_SESSION["PENDING_REPOSITORY_ID"]) && isSet($_SESSION["PENDING_FOLDER"])){
- $loggedUser->setArrayPref("history", "last_repository", $_SESSION["PENDING_REPOSITORY_ID"]);
- $loggedUser->setPref("pending_folder", $_SESSION["PENDING_FOLDER"]);
- $loggedUser->save("user");
- AuthService::updateUser($loggedUser);
- unset($_SESSION["PENDING_REPOSITORY_ID"]);
- unset($_SESSION["PENDING_FOLDER"]);
- }
- $currentRepoId = ConfService::getCurrentRepositoryId();
- $lastRepoId = $loggedUser->getArrayPref("history", "last_repository");
- $defaultRepoId = AuthService::getDefaultRootId();
- if($defaultRepoId == -1){
- return false;
- }else {
- if($lastRepoId !== "" && $lastRepoId!==$currentRepoId && $parameterId == -1 && $loggedUser->canSwitchTo($lastRepoId)){
- ConfService::switchRootDir($lastRepoId);
- }else if($parameterId != -1 && $loggedUser->canSwitchTo($parameterId)){
- ConfService::switchRootDir($parameterId);
- }else if(!$loggedUser->canSwitchTo($currentRepoId)){
- ConfService::switchRootDir($defaultRepoId);
- }
- }
- return true;
- }
-
-
- /**
- * See instance method
- * @static
- * @param $rootDirIndex
- * @param bool $temporary
- * @return void
- */
- public static function switchRootDir($rootDirIndex = -1, $temporary = false){
- self::getInstance()->switchRootDirInst($rootDirIndex, $temporary);
- }
- /**
- * Switch the current repository
- * @param $rootDirIndex
- * @param bool $temporary
- * @return void
- */
- public function switchRootDirInst($rootDirIndex=-1, $temporary=false)
- {
- $currentRepos = $this->getLoadedRepositories();
- if($rootDirIndex == -1){
- if(isSet($_SESSION['REPO_ID']) && array_key_exists($_SESSION['REPO_ID'], $currentRepos))
- {
- $this->configs["REPOSITORY"] = $currentRepos[$_SESSION['REPO_ID']];
- }
- else
- {
- $keys = array_keys($currentRepos);
- $this->configs["REPOSITORY"] = $currentRepos[$keys[0]];
- $_SESSION['REPO_ID'] = $keys[0];
- }
- }
- else
- {
- if($temporary && isSet($_SESSION['REPO_ID'])){
- $crtId = $_SESSION['REPO_ID'];
- if($crtId != $rootDirIndex && !isSet($_SESSION['SWITCH_BACK_REPO_ID'])){
- $_SESSION['SWITCH_BACK_REPO_ID'] = $crtId;
- //AJXP_Logger::debug("switching to $rootDirIndex, registering $crtId");
- }
- }else{
- $crtId = $_SESSION['REPO_ID'];
- $_SESSION['PREVIOUS_REPO_ID'] = $crtId;
- //AJXP_Logger::debug("switching back to $rootDirIndex");
- }
- $this->configs["REPOSITORY"] = $currentRepos[$rootDirIndex];
- $_SESSION['REPO_ID'] = $rootDirIndex;
- if(isSet($this->configs["ACCESS_DRIVER"])) unset($this->configs["ACCESS_DRIVER"]);
- }
-
- if(isSet($this->configs["REPOSITORY"]) && $this->configs["REPOSITORY"]->getOption("CHARSET")!=""){
- $_SESSION["AJXP_CHARSET"] = $this->configs["REPOSITORY"]->getOption("CHARSET");
- }else{
- if(isSet($_SESSION["AJXP_CHARSET"])){
- unset($_SESSION["AJXP_CHARSET"]);
- }
- }
-
-
- if($rootDirIndex!=-1 && AuthService::usersEnabled() && AuthService::getLoggedUser()!=null){
- $loggedUser = AuthService::getLoggedUser();
- $loggedUser->setArrayPref("history", "last_repository", $rootDirIndex);
- $loggedUser->save("user");
- }
-
- }
-
- /**
- * See instance method
- * @static
- * @param String $scope "user" or "all"
- * @return Repository[]
- */
- public static function getRepositoriesList($scope = "user"){
- if($scope == "user"){
- return self::getInstance()->getLoadedRepositories();
- }else{
- return self::getInstance()->initRepositoriesListInst("all");
- }
- }
-
- /**
- * @return Repository[]
- */
- private function getLoadedRepositories(){
- if(isSet($this->configs["REPOSITORIES"])){
- return $this->configs["REPOSITORIES"];
- }
- $this->configs["REPOSITORIES"] = $this->initRepositoriesListInst();
- return $this->configs["REPOSITORIES"];
- }
-
- private function invalidateLoadedRepositories(){
- $this->configs["REPOSITORIES"] = null;
- }
-
- /**
- * @static
- * @param AbstractAjxpUser $userObject
- * @param bool $details
- * @param bool $labelOnly
- * @param bool $skipShared
- * @return Repository[]
- */
- public static function getAccessibleRepositories($userObject=null, $details=false, $labelOnly = false, $skipShared = false){
- $result = array();
- $allReps = ConfService::getRepositoriesList("all");
- foreach ($allReps as $repositoryId => $repositoryObject)
- {
- if(!ConfService::repositoryIsAccessible($repositoryId, $repositoryObject, $userObject, $details, $skipShared)){
- continue;
- }
-
- if($labelOnly){
- $result[$repositoryId] = $repositoryObject->getDisplay();
- }else{
- $result[$repositoryId] = $repositoryObject;
- }
-
- }
- return $result;
- }
-
- /**
- * @param String $repositoryId
- * @param Repository $repositoryObject
- * @param AbstractAjxpUser $userObject
- * @param bool $details
- * @param bool $skipShared
- *
- * @return bool
- */
- public static function repositoryIsAccessible($repositoryId, $repositoryObject, $userObject = null, $details=false, $skipShared=false){
- if($userObject == null) $userObject = AuthService::getLoggedUser();
- if($userObject == null && AuthService::usersEnabled()){
- return false;
- }
- if(!AuthService::canAssign($repositoryObject, $userObject)) {
- return false;
- }
- if($repositoryObject->isTemplate) {
- return false;
- }
- if($repositoryObject->getAccessType()=="ajxp_conf" && $userObject != null){
- if(AuthService::usersEnabled() && !$userObject->isAdmin()){
- return false;
- }
- }
- if($repositoryObject->getAccessType() == "ajxp_shared" && !AuthService::usersEnabled()){
- return false;
- }
- if($repositoryObject->getUniqueUser() && (!AuthService::usersEnabled() || $userObject == null || $userObject->getId() == "shared" || $userObject->getId() != $repositoryObject->getUniqueUser() )){
- return false;
- }
- if( $userObject != null && !($userObject->canRead($repositoryId) || $userObject->canWrite($repositoryId)) && !$details){
- return false;
- }
- if($userObject == null || $userObject->canRead($repositoryId) || $userObject->canWrite($repositoryId) || $details) {
- // Do not display standard repositories even in details mode for "sub"users
- if($userObject != null && $userObject->hasParent() && !($userObject->canRead($repositoryId) || $userObject->canWrite($repositoryId) )) {
- return false;
- }
- // Do not display shared repositories otherwise.
- if($repositoryObject->hasOwner() && $skipShared){
- return false;
- }
- if($userObject != null && $repositoryObject->hasOwner() && !$userObject->hasParent()){
- // Display the repositories if allow_crossusers is ok
- if(ConfService::getCoreConf("ALLOW_CROSSUSERS_SHARING", "conf") === false
- || ConfService::getCoreConf("ALLOW_CROSSUSERS_SHARING", "conf") === 0) {
- return false;
- }
- // But still do not display its own shared repositories!
- if($repositoryObject->getOwner() == $userObject->getId()) {
- return false;
- }
- }
- if($repositoryObject->hasOwner() && $userObject != null && $details && !($userObject->canRead($repositoryId) || $userObject->canWrite($repositoryId) ) ){
- return false;
- }
- }
- return true;
- }
-
- /**
- * Return the full list of repositories, as id => objects
- * @return array
- */
- public function getRepositoriesListInst()
- {
- return $this->getLoadedRepositories();
- }
-
- /**
- * See instance method
- * @static
- * @return string
- */
- public static function getCurrentRepositoryId(){
- return self::getInstance()->getCurrentRepositoryIdInst();
- }
- /**
- * Get the current repository ID;
- * @return string
- */
- public function getCurrentRepositoryIdInst()
- {
- $currentRepos = $this->getLoadedRepositories();
- if(isSet($_SESSION['REPO_ID']) && isSet($currentRepos[$_SESSION['REPO_ID']])){
- return $_SESSION['REPO_ID'];
- }
- return array_shift(array_keys($currentRepos));
- }
- /**
- * Get the current repo label
- * @static
- * @return string
- */
- public static function getCurrentRootDirDisplay(){
- return self::getInstance()->getCurrentRootDirDisplayInst();
- }
- /**
- * @return string
- */
- public function getCurrentRootDirDisplayInst()
- {
- $currentRepos = $this->getLoadedRepositories();
- if(isSet($currentRepos[$_SESSION['REPO_ID']])){
- $repo = $currentRepos[$_SESSION['REPO_ID']];
- return $repo->getDisplay();
- }
- return "";
- }
-
- /**
- * @param $scope String "user", "all"
- * @return array
- */
- protected function initRepositoriesListInst($scope = "user")
- {
- // APPEND CONF FILE REPOSITORIES
-
- $objList = array();
- foreach($this->configs["DEFAULT_REPOSITORIES"] as $index=>$repository)
- {
- $repo = self::createRepositoryFromArray($index, $repository);
- $repo->setWriteable(false);
- $objList[$repo->getId()] = $repo;
- }
- // LOAD FROM DRIVER
- $confDriver = self::getConfStorageImpl();
- $drvList = $confDriver->listRepositories($scope == "user" ? AuthService::getLoggedUser() : null);
- if(is_array($drvList)){
- foreach ($drvList as $repoId=>$repoObject){
- $driver = AJXP_PluginsService::getInstance()->getPluginByTypeName("access", $repoObject->getAccessType());
- if(!is_object($driver) || !$driver->isEnabled()){
- unset($drvList[$repoId]);
- }else{
- $repoObject->setId($repoId);
- $drvList[$repoId] = $repoObject;
- }
- }
- $objList = array_merge($objList, $drvList);
- }
- return $objList;
- }
- /**
- * See instance method
- * @static
- * @param bool $register
- * @return array
- */
- public static function detectRepositoryStreams($register = false){
- return self::getInstance()->detectRepositoryStreamsInst($register);
- }
- /**
- * Call the detectStreamWrapper method
- * @param bool $register
- * @return array
- */
- public function detectRepositoryStreamsInst($register = false){
- $streams = array();
- $currentRepos = $this->getLoadedRepositories();
- foreach ($currentRepos as $repository) {
- $repository->detectStreamWrapper($register, $streams);
- }
- return $streams;
- }
-
- /**
- * Create a repository object from a config options array
- *
- * @param integer $index
- * @param Array $repository
- * @return Repository
- */
- public static function createRepositoryFromArray($index, $repository){
- return self::getInstance()->createRepositoryFromArrayInst($index, $repository);
- }
- /**
- * See static method
- * @param string $index
- * @param array $repository
- * @return Repository
- */
- public function createRepositoryFromArrayInst($index, $repository){
- $repo = new Repository($index, $repository["DISPLAY"], $repository["DRIVER"]);
- if(isSet($repository["DISPLAY_ID"])){
- $repo->setDisplayStringId($repository["DISPLAY_ID"]);
- }
- if(isSet($repository["DESCRIPTION_ID"])){
- $repo->setDescription($repository["DESCRIPTION_ID"]);
- }
- if(isSet($repository["AJXP_SLUG"])){
- $repo->setSlug($repository["AJXP_SLUG"]);
- }
- if(isSet($repository["IS_TEMPLATE"]) && $repository["IS_TEMPLATE"]){
- $repo->isTemplate = true;
- $repo->uuid = $index;
- }
- if(array_key_exists("DRIVER_OPTIONS", $repository) && is_array($repository["DRIVER_OPTIONS"])){
- foreach ($repository["DRIVER_OPTIONS"] as $oName=>$oValue){
- $repo->addOption($oName, $oValue);
- }
- }
- // BACKWARD COMPATIBILITY!
- if(array_key_exists("PATH", $repository)){
- $repo->addOption("PATH", $repository["PATH"]);
- $repo->addOption("CREATE", $repository["CREATE"]);
- $repo->addOption("RECYCLE_BIN", $repository["RECYCLE_BIN"]);
- }
- return $repo;
- }
-
- /**
- * Add dynamically created repository
- *
- * @param Repository $oRepository
- * @return void|-1 if error
- */
- public static function addRepository($oRepository){
- return self::getInstance()->addRepositoryInst($oRepository);
- }
- /**
- * @param $oRepository
- * @return void|-1 on error
- */
- public function addRepositoryInst($oRepository){
- $confStorage = self::getConfStorageImpl();
- $res = $confStorage->saveRepository($oRepository);
- if($res == -1){
- return $res;
- }
- AJXP_Logger::logAction("Create Repository", array("repo_name"=>$oRepository->getDisplay()));
- $this->invalidateLoadedRepositories();
- }
-
- public static function findRepositoryByIdOrAlias($idOrAlias){
- $repository = ConfService::getRepositoryById($idOrAlias);
- if($repository != null ) return $repository;
- $repository = ConfService::getRepositoryByAlias($idOrAlias);
- if($repository != null) return $repository;
- return null;
- }
-
- /**
- * Retrieve a repository object
- *
- * @param String $repoId
- * @return Repository
- */
- public static function getRepositoryById($repoId){
- return self::getInstance()->getRepositoryByIdInst($repoId);
- }
- /**
- * See static method
- * @param $repoId
- * @return Repository|null
- */
- public function getRepositoryByIdInst($repoId){
- $currentRepos = $this->getLoadedRepositories();
- if(isSet($currentRepos[$repoId])){
- return $currentRepos[$repoId];
- }
- return $this->getConfStorageImpl()->getRepositoryById($repoId);
- }
-
- /**
- * Retrieve a repository object by its slug
- *
- * @param String $repoAlias
- * @return Repository
- */
- public static function getRepositoryByAlias($repoAlias){
- $repo = self::getConfStorageImpl()->getRepositoryByAlias($repoAlias);
- if($repo !== null) return $repo;
- // check default repositories
- return self::getInstance()->getRepositoryByAliasInstDefaults($repoAlias);
- }
- /**
- * See static method
- * @param $repoAlias
- * @return Repository|null
- */
- public function getRepositoryByAliasInstDefaults($repoAlias){
- $conf = $this->configs["DEFAULT_REPOSITORIES"];
- foreach($conf as $repoId => $repoDef){
- if($repoDef["AJXP_SLUG"] == $repoAlias){
- return $this->getRepositoryByIdInst($repoId);
- }
- }
- return null;
- }
-
-
- /**
- * Replace a repository by an update one.
- *
- * @param String $oldId
- * @param Repository $oRepositoryObject
- * @return mixed
- */
- public static function replaceRepository($oldId, $oRepositoryObject){
- return self::getInstance()->replaceRepositoryInst($oldId, $oRepositoryObject);
- }
- /**
- * See static method
- * @param $oldId
- * @param $oRepositoryObject
- * @return void
- */
- public function replaceRepositoryInst($oldId, $oRepositoryObject){
- $confStorage = self::getConfStorageImpl();
- $res = $confStorage->saveRepository($oRepositoryObject, true);
- if($res == -1){
- return $res;
- }
- AJXP_Logger::logAction("Edit Repository", array("repo_name"=>$oRepositoryObject->getDisplay()));
- $this->invalidateLoadedRepositories();
- }
- /**
- * Set a temp repository id but not in the session
- * @static
- * @param $repositoryObject
- * @return void
- */
- public static function tmpReplaceRepository($repositoryObject){
- $inst = self::getInstance();
- if(isSet($inst->configs["REPOSITORIES"][$repositoryObject->getUniqueId()])){
- $inst->configs["REPOSITORIES"][$repositoryObject->getUniqueId()] = $repositoryObject;
- }
- }
- /**
- * Remove a repository using the conf driver implementation
- * @static
- * @param $repoId
- * @return void
- */
- public static function deleteRepository($repoId){
- return self::getInstance()->deleteRepositoryInst($repoId);
- }
- /**
- * See static method
- * @param $repoId
- * @return void
- */
- public function deleteRepositoryInst($repoId){
- $confStorage = self::getConfStorageImpl();
- $res = $confStorage->deleteRepository($repoId);
- if($res == -1){
- return $res;
- }
- AJXP_Logger::logAction("Delete Repository", array("repo_id"=>$repoId));
- $this->invalidateLoadedRepositories();
- }
-
- /**
- * Check if the gzopen function exists
- * @static
- * @return bool
- */
- public static function zipEnabled()
- {
- if(ConfService::getCoreConf("DISABLE_ZIP_BROWSING") === true) return false;
- return (function_exists("gzopen")?true:false);
- }
- /**
- * Get the list of all "conf" messages
- * @static
- * @param bool $forceRefresh Refresh the list
- * @return
- */
- public static function getMessagesConf($forceRefresh = false){
- return self::getInstance()->getMessagesInstConf($forceRefresh);
- }
- /**
- * See static method
- * @param bool $forceRefresh
- * @return
- */
- public function getMessagesInstConf($forceRefresh = false)
- {
- // make sure they are loaded
- $mess = $this->getMessagesInst($forceRefresh);
- return $this->configs["CONF_MESSAGES"];
- }
-
- /**
- * Get all i18n message
- * @static
- * @param bool $forceRefresh
- * @return
- */
- public static function getMessages($forceRefresh = false){
- return self::getInstance()->getMessagesInst($forceRefresh);
- }
- /**
- * Get i18n messages
- * @param bool $forceRefresh
- * @return
- */
- public function getMessagesInst($forceRefresh = false)
- {
- $crtLang = self::getLanguage();
- $messageCacheDir = dirname(AJXP_PLUGINS_MESSAGES_FILE)."/i18n";
- $messageFile = $messageCacheDir."/".$crtLang."_".basename(AJXP_PLUGINS_MESSAGES_FILE);
- if(isSet($this->configs["MESSAGES"]) && !$forceRefresh){
- return $this->configs["MESSAGES"];
- }
- if(!isset($this->configs["MESSAGES"]) && is_file($messageFile)){
- include($messageFile);
- if(isSet($MESSAGES)){
- $this->configs["MESSAGES"] = $MESSAGES;
- }
- if(isSet($CONF_MESSAGES)){
- $this->configs["CONF_MESSAGES"] = $CONF_MESSAGES;
- }
- }else {
- $this->configs["MESSAGES"] = array();
- $this->configs["CONF_MESSAGES"] = array();
- $nodes = AJXP_PluginsService::getInstance()->searchAllManifests("//i18n", "nodes");
- foreach ($nodes as $node){
- $nameSpace = $node->getAttribute("namespace");
- $path = $node->getAttribute("path");
- $lang = $crtLang;
- if(!is_file($path."/".$crtLang.".php")){
- $lang = "en"; // Default language, minimum required.
- }
- if(is_file($path."/".$lang.".php")){
- require($path."/".$lang.".php");
- if(isSet($mess)){
- foreach ($mess as $key => $message){
- $this->configs["MESSAGES"][(empty($nameSpace)?"":$nameSpace.".").$key] = $message;
- }
- }
- }
- $lang = $crtLang;
- if(!is_file($path."/conf/".$crtLang.".php")){
- $lang = "en";
- }
- if(is_file($path."/conf/".$lang.".php")){
- require($path."/conf/".$lang.".php");
- $this->configs["CONF_MESSAGES"] = array_merge($this->configs["CONF_MESSAGES"], $mess);
- }
- }
- if(!is_dir($messageCacheDir)) mkdir($messageCacheDir);
- @file_put_contents($messageFile, "configs["MESSAGES"], true) ." ; \$CONF_MESSAGES = ".var_export($this->configs["CONF_MESSAGES"], true) ." ; ");
- }
-
- return $this->configs["MESSAGES"];
- }
-
- /**
- * Get all registered extensions, from both the conf/extensions.conf.php and from the plugins
- * @static
- * @return
- */
- public static function getRegisteredExtensions(){
- return self::getInstance()->getRegisteredExtensionsInst();
- }
- /**
- * See static method
- * @return
- */
- public function getRegisteredExtensionsInst(){
- if(!isSet($this->configs["EXTENSIONS"])){
- $EXTENSIONS = array();
- $RESERVED_EXTENSIONS = array();
- include_once(AJXP_CONF_PATH."/extensions.conf.php");
- $EXTENSIONS = array_merge($RESERVED_EXTENSIONS, $EXTENSIONS);
- foreach($EXTENSIONS as $key => $value){
- unset($EXTENSIONS[$key]);
- $EXTENSIONS[$value[0]] = $value;
- }
- $nodes = AJXP_PluginsService::getInstance()->searchAllManifests("//extensions/extension", "nodes", true);
- $res = array();
- foreach($nodes as $node){
- $res[$node->getAttribute("mime")] = array($node->getAttribute("mime"), $node->getAttribute("icon"), $node->getAttribute("messageId"));
- }
- if(count($res)){
- $EXTENSIONS = array_merge($EXTENSIONS, $res);
- }
- $this->configs["EXTENSIONS"] = $EXTENSIONS;
- }
- return $this->configs["EXTENSIONS"];
- }
- /**
- * Get the actions that declare to skip the secure token in the plugins
- * @static
- * @return array
- */
- public static function getDeclaredUnsecureActions(){
- $test = AJXP_PluginsService::getInstance()->loadFromPluginQueriesCache("//action[@skipSecureToken]");
- if(!empty($test) && is_array($test)) {
- return $test;
- }else{
- $nodes = AJXP_PluginsService::getInstance()->searchAllManifests("//action[@skipSecureToken]", "nodes");
- $res = array();
- foreach($nodes as $node){
- $res[] = $node->getAttribute("name");
- }
- AJXP_PluginsService::getInstance()->storeToPluginQueriesCache("//action[@skipSecureToken]", $res);
- return $res;
- }
-
- }
- /**
- * Detect available languages from the core i18n library
- * @static
- * @return array
- */
- public static function listAvailableLanguages(){
- // Cache in session!
- if(isSet($_SESSION["AJXP_LANGUAGES"]) && !isSet($_GET["refresh_langs"])){
- return $_SESSION["AJXP_LANGUAGES"];
- }
- $langDir = AJXP_COREI18N_FOLDER;
- $languages = array();
- if(($dh = opendir($langDir))!==FALSE){
- while (($file = readdir($dh)) !== false) {
- $matches = array();
- if(preg_match("/(.*)\.php/", $file, $matches) == 1){
- $fRadical = $matches[1];
- include($langDir."/".$fRadical.".php");
- $langName = isSet($mess["languageLabel"])?$mess["languageLabel"]:"Not Found";
- $languages[$fRadical] = $langName;
- }
- }
- closedir($dh);
- }
- if(count($languages)){
- $_SESSION["AJXP_LANGUAGES"] = $languages;
- }
- return $languages;
- }
-
- /**
- * Get a config by its name
- * @static
- * @param string $varName
- * @return mixed
- */
- public static function getConf($varName){
- return self::getInstance()->getConfInst($varName);
- }
- /**
- * Set a config by its name
- * @static
- * @param string $varName
- * @param mixed $varValue
- * @return void
- */
- public static function setConf($varName, $varValue){
- return self::getInstance()->setConfInst($varName, $varValue);
- }
- /**
- * See static method
- * @param $varName
- * @return mixed
- */
- public function getConfInst($varName)
- {
- if(isSet($this->configs[$varName])){
- return $this->configs[$varName];
- }
- if(defined("AJXP_".$varName)){
- return eval("return AJXP_".$varName.";");
- }
- return null;
- }
- /**
- * See static method
- * @param $varName
- * @param $varValue
- * @return void
- */
- public function setConfInst($varName, $varValue)
- {
- $this->configs[$varName] = $varValue;
- }
- /**
- * Get config from the core.$coreType plugin
- * @static
- * @param string $varName
- * @param string $coreType
- * @return mixed|null|string
- */
- public static function getCoreConf($varName, $coreType = "ajaxplorer"){
- $coreP = AJXP_PluginsService::getInstance()->findPlugin("core", $coreType);
- if($coreP === false) return null;
- $confs = $coreP->getConfigs();
- $confs = AuthService::filterPluginParameters("core.".$coreType, $confs);
- return (isSet($confs[$varName]) ? AJXP_VarsFilter::filter($confs[$varName]) : null);
- }
-
- /**
- * Set the language in the session
- * @static
- * @param string $lang
- * @return void
- */
- public static function setLanguage($lang){
- return self::getInstance()->setLanguageInst($lang);
- }
- /**
- * See static method
- * @param string $lang
- * @return void
- */
- public function setLanguageInst($lang)
- {
- if(array_key_exists($lang, $this->configs["AVAILABLE_LANG"]))
- {
- $this->configs["LANGUE"] = $lang;
- }
- }
- /**
- * Get the language from the session
- * @static
- * @return string
- */
- public static function getLanguage()
- {
- $lang = self::getInstance()->getConfInst("LANGUE");
- if($lang == null){
- $lang = self::getInstance()->getCoreConf("DEFAULT_LANGUAGE");
- }
- if(empty($lang)) return "en";
- return $lang;
- }
-
- /**
- * The current repository
- * @return Repository
- */
- public static function getRepository(){
- return self::getInstance()->getRepositoryInst();
- }
- /**
- * See static method
- * @return Repository
- */
- public function getRepositoryInst()
- {
- if(isSet($_SESSION['REPO_ID']) && isSet($this->configs["REPOSITORIES"]) && isSet($this->configs["REPOSITORIES"][$_SESSION['REPO_ID']])){
- return $this->configs["REPOSITORIES"][$_SESSION['REPO_ID']];
- }
- return $this->configs["REPOSITORY"];
- }
-
- /**
- * Returns the repository access driver
- * @return AJXP_Plugin
- */
- public static function loadRepositoryDriver(){
- return self::getInstance()->loadRepositoryDriverInst();
- }
- /**
- * See static method
- * @throws Exception
- * @return AJXP_Plugin
- */
- public function loadRepositoryDriverInst()
- {
- if(isSet($this->configs["ACCESS_DRIVER"]) && is_a($this->configs["ACCESS_DRIVER"], "AbstractAccessDriver")){
- return $this->configs["ACCESS_DRIVER"];
- }
- $this->switchRootDirInst();
- $crtRepository = $this->getRepositoryInst();
- $accessType = $crtRepository->getAccessType();
- $pServ = AJXP_PluginsService::getInstance();
- $plugInstance = $pServ->getPluginByTypeName("access", $accessType);
-
- // TRIGGER BEFORE INIT META
- $metaSources = $crtRepository->getOption("META_SOURCES");
- if(isSet($metaSources) && is_array($metaSources) && count($metaSources)){
- $keys = array_keys($metaSources);
- foreach ($keys as $plugId){
- if($plugId == "") continue;
- $split = explode(".", $plugId);
- $instance = $pServ->getPluginById($plugId);
- if(!is_object($instance)) {
- continue;
- }
- if(!method_exists($instance, "beforeInitMeta")){
- continue;
- }
- try{
- $instance->init(AuthService::filterPluginParameters($plugId, $metaSources[$plugId], $crtRepository->getId()));
- $instance->beforeInitMeta($plugInstance);
- }catch(Exception $e){
- AJXP_Logger::logAction('ERROR : Cannot instanciate Meta plugin, reason : '.$e->getMessage());
- $this->errors[] = $e->getMessage();
- }
- }
- }
-
- // INIT MAIN DRIVER
- $plugInstance->init($crtRepository);
- try{
- $plugInstance->initRepository();
- $crtRepository->driverInstance = $plugInstance;
- }catch (Exception $e){
- // Remove repositories from the lists
- unset($this->configs["REPOSITORIES"][$crtRepository->getId()]);
- if(isSet($_SESSION["PREVIOUS_REPO_ID"]) && $_SESSION["PREVIOUS_REPO_ID"] !=$crtRepository->getId()){
- $this->switchRootDir($_SESSION["PREVIOUS_REPO_ID"]);
- }else{
- $this->switchRootDir();
- }
- throw $e;
- }
- $pServ->setPluginUniqueActiveForType("access", $accessType);
-
- // TRIGGER INIT META
- $metaSources = $crtRepository->getOption("META_SOURCES");
- if(isSet($metaSources) && is_array($metaSources) && count($metaSources)){
- $keys = array_keys($metaSources);
- foreach ($keys as $plugId){
- if($plugId == "") continue;
- $split = explode(".", $plugId);
- $instance = $pServ->getPluginById($plugId);
- if(!is_object($instance)) {
- continue;
- }
- try{
- $instance->init(AuthService::filterPluginParameters($plugId, $metaSources[$plugId], $crtRepository->getId()));
- $instance->initMeta($plugInstance);
- }catch(Exception $e){
- AJXP_Logger::logAction('ERROR : Cannot instanciate Meta plugin, reason : '.$e->getMessage());
- $this->errors[] = $e->getMessage();
- }
- $pServ->setPluginActive($split[0], $split[1]);
- }
- }
- if(count($this->errors)>0){
- $e = new AJXP_Exception("Error while loading repository feature : ".implode(",",$this->errors));
- // Remove repositories from the lists
- unset($this->configs["REPOSITORIES"][$crtRepository->getId()]);
- if(isSet($_SESSION["PREVIOUS_REPO_ID"]) && $_SESSION["PREVIOUS_REPO_ID"] !=$crtRepository->getId()){
- $this->switchRootDir($_SESSION["PREVIOUS_REPO_ID"]);
- }else{
- $this->switchRootDir();
- }
- throw $e;
- }
-
- $this->configs["ACCESS_DRIVER"] = $plugInstance;
- return $this->configs["ACCESS_DRIVER"];
- }
-
- /**
- * @static
- * @param Repository $repository
- * @return AbstractAccessDriver
- */
- public static function loadDriverForRepository(&$repository){
- return self::getInstance()->loadRepositoryDriverREST($repository);
- }
-
- /**
- * See static method
- * @param Repository $repository
- * @throws AJXP_Exception|Exception
- * @return AbstractAccessDriver
- */
- public function loadRepositoryDriverREST(&$repository)
- {
- if(isset($repository->driverInstance)) {
- return $repository->driverInstance;
- }
- $accessType = $repository->getAccessType();
- $pServ = AJXP_PluginsService::getInstance();
- $plugInstance = $pServ->getPluginByTypeName("access", $accessType);
-
- // TRIGGER BEFORE INIT META
- $metaSources = $repository->getOption("META_SOURCES");
- if(isSet($metaSources) && is_array($metaSources) && count($metaSources)){
- $keys = array_keys($metaSources);
- foreach ($keys as $plugId){
- if($plugId == "") continue;
- $instance = $pServ->getPluginById($plugId);
- if(!is_object($instance)) {
- continue;
- }
- if(!method_exists($instance, "beforeInitMeta")){
- continue;
- }
- try{
- $instance->init(AuthService::filterPluginParameters($plugId, $metaSources[$plugId], $repository->getId()));
- $instance->beforeInitMeta($plugInstance);
- }catch(Exception $e){
- AJXP_Logger::logAction('ERROR : Cannot instanciate Meta plugin, reason : '.$e->getMessage());
- $this->errors[] = $e->getMessage();
- }
- }
- }
-
- // INIT MAIN DRIVER
- $plugInstance->init($repository);
- try{
- $plugInstance->initRepository();
- }catch (Exception $e){
- throw $e;
- }
- $pServ->setPluginUniqueActiveForType("access", $accessType);
-
- // TRIGGER INIT META
- $metaSources = $repository->getOption("META_SOURCES");
- if(isSet($metaSources) && is_array($metaSources) && count($metaSources)){
- $keys = array_keys($metaSources);
- foreach ($keys as $plugId){
- if($plugId == "") continue;
- $split = explode(".", $plugId);
- $instance = $pServ->getPluginById($plugId);
- if(!is_object($instance)) {
- continue;
- }
- try{
- $instance->init(AuthService::filterPluginParameters($plugId, $metaSources[$plugId], $repository->getId()));
- $instance->initMeta($plugInstance);
- }catch(Exception $e){
- AJXP_Logger::logAction('ERROR : Cannot instanciate Meta plugin, reason : '.$e->getMessage());
- $this->errors[] = $e->getMessage();
- }
- $pServ->setPluginActive($split[0], $split[1]);
- }
- }
- if(count($this->errors)>0){
- $e = new AJXP_Exception("Error while loading repository feature : ".implode(",",$this->errors));
- throw $e;
- }
-
- $repository->driverInstance = $plugInstance;
- if(isSet($_SESSION["REPO_ID"]) && $_SESSION["REPO_ID"] == $repository->getId()){
- $this->configs["REPOSITORY"] = $repository;
- $this->configs["REPOSITORIES"][$_SESSION['REPO_ID']] = $repository;
- }
- return $plugInstance;
- }
-
- /**
- * Search the manifests declaring ajxpdriver as their root node. Remove ajxp_conf & ajxp_shared
- * @static
- * @param string $filterByTagName
- * @param string $filterByDriverName
- * @param bool $limitToEnabledPlugins
- * @return string
- */
- public static function availableDriversToXML($filterByTagName = "", $filterByDriverName="", $limitToEnabledPlugins = false){
- $nodeList = AJXP_PluginsService::searchAllManifests("//ajxpdriver", "node", false, $limitToEnabledPlugins);
- $xmlBuffer = "";
- foreach($nodeList as $node){
- $dName = $node->getAttribute("name");
- if($filterByDriverName != "" && $dName != $filterByDriverName) continue;
- if($dName == "ajxp_conf" || $dName == "ajxp_shared") continue;
- if($filterByTagName == ""){
- $xmlBuffer .= $node->ownerDocument->saveXML($node);
- continue;
- }
- $q = new DOMXPath($node->ownerDocument);
- $cNodes = $q->query("//".$filterByTagName, $node);
- $nodeAttr = $node->attributes;
- $xmlBuffer .= "attributes as $attr) $xmlBuffer.= " $attr->name=\"$attr->value\" ";
- $xmlBuffer .=">";
- foreach($cNodes as $child){
- $xmlBuffer .= $child->ownerDocument->saveXML($child);
- }
- $xmlBuffer .= "";
- }
- return $xmlBuffer;
- }
-
- /**
- * Singleton method
- *
- * @return ConfService the service instance
- */
- public static function getInstance()
- {
- if(!isSet(self::$instance)){
- $c = __CLASS__;
- self::$instance = new $c;
- }
- return self::$instance;
- }
- private function __construct(){}
- public function __clone(){
- trigger_error("Cannot clone me, i'm a singleton!", E_USER_ERROR);
- }
-
-}
\ No newline at end of file
+
+ * This file is part of AjaXplorer.
+ *
+ * AjaXplorer is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * AjaXplorer is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with AjaXplorer. If not, see .
+ *
+ * The latest code can be found at .
+ */
+defined('AJXP_EXEC') or die( 'Access not allowed');
+
+/**
+ * Configuration holder. Singleton class accessed statically, encapsulates the confDriver implementation.
+ * @package AjaXplorer
+ * @subpackage Core
+ */
+class ConfService
+{
+ private static $instance;
+ private $errors = array();
+ private $configs = array();
+
+ /**
+ * @param AJXP_PluginsService $ajxpPluginService
+ * @return AbstractConfDriver
+ */
+ public function confPluginSoftLoad($ajxpPluginService)
+ {
+ $booter = $ajxpPluginService->softLoad("boot.conf", array());
+ $coreConfigs = $booter->loadPluginConfig("core", "conf");
+ $corePlug = $ajxpPluginService->softLoad("core.conf", array());
+ $corePlug->loadConfigs($coreConfigs);
+ return $corePlug->getConfImpl();
+
+ }
+
+ /**
+ * @return AbstractConfDriver
+ */
+ public static function getBootConfStorageImpl()
+ {
+ $inst = AJXP_PluginsService::getInstance()->findPluginById("boot.conf");
+ if (empty($inst)) {
+ $inst = AJXP_PluginsService::getInstance()->softLoad("boot.conf", array());
+ }
+ return $inst;
+ }
+
+ /**
+ * Initialize singleton
+ * @static
+ * @return void
+ */
+ public static function init()
+ {
+ $inst = self::getInstance();
+ $inst->initInst();
+ }
+ /**
+ * Load the boostrap_* files and their configs
+ * @return void
+ */
+ public function initInst()
+ {
+ // INIT AS GLOBAL
+ $this->configs["AVAILABLE_LANG"] = self::listAvailableLanguages();
+ if (isSet($_SERVER["HTTPS"]) && strtolower($_SERVER["HTTPS"]) == "on") {
+ $this->configs["USE_HTTPS"] = true;
+ }
+ if (isSet($this->configs["USE_HTTPS"])) {
+ AJXP_Utils::safeIniSet("session.cookie_secure", true);
+ }
+ $this->configs["JS_DEBUG"] = AJXP_CLIENT_DEBUG;
+ $this->configs["SERVER_DEBUG"] = AJXP_SERVER_DEBUG;
+
+
+ if (is_file(AJXP_CONF_PATH."/bootstrap_repositories.php")) {
+ include(AJXP_CONF_PATH."/bootstrap_repositories.php");
+ $this->configs["DEFAULT_REPOSITORIES"] = $REPOSITORIES;
+ } else {
+ $this->configs["DEFAULT_REPOSITORIES"] = array();
+ }
+ }
+ /**
+ * Start the singleton
+ * @static
+ * @return void
+ */
+ public static function start()
+ {
+ $inst = self::getInstance();
+ $inst->startInst();
+ }
+ /**
+ * Init CONF, AUTH drivers
+ * Init Repositories
+ * @return void
+ */
+ public function startInst()
+ {
+ AJXP_PluginsService::getInstance()->setPluginUniqueActiveForType("conf", self::getConfStorageImpl()->getName());
+ }
+ /**
+ * Get errors generated by the boot sequence (init/start)
+ * @static
+ * @return array
+ */
+ public static function getErrors()
+ {
+ return self::getInstance()->errors;
+ }
+
+ /**
+ * @static
+ * @param $globalsArray
+ * @param string $interfaceCheck
+ * @internal param string $bootstrapConfigKey
+ * @internal param string $bootstrapConfigType
+ * @return AJXP_Plugin|null
+ */
+ public static function instanciatePluginFromGlobalParams($globalsArray, $interfaceCheck = "")
+ {
+ $plugin = false;
+
+ if (is_string($globalsArray)) {
+ $globalsArray = array("instance_name" => $globalsArray);
+ }
+
+ if (isSet($globalsArray["instance_name"])) {
+ $pName = $globalsArray["instance_name"];
+ unset($globalsArray["instance_name"]);
+ $plugin = AJXP_PluginsService::getInstance()->softLoad($pName, $globalsArray);
+ $plugin->performChecks();
+ }
+
+ if ($plugin != false && !empty($interfaceCheck)) {
+ if (!is_a($plugin, $interfaceCheck)) {
+ $plugin = false;
+ }
+ }
+ if ($plugin !== false) {
+ AJXP_PluginsService::getInstance()->setPluginActive($plugin->getType(), $plugin->getName(), true, $plugin);
+ }
+ return $plugin;
+
+ }
+ /**
+ * Check if the STDIN constant is defined
+ * @static
+ * @return bool
+ */
+ public static function currentContextIsCommandLine()
+ {
+ return php_sapi_name() === "cli";
+ }
+ /**
+ * Check the presence of mcrypt and option CMDLINE_ACTIVE
+ * @static
+ * @return bool
+ */
+ public static function backgroundActionsSupported()
+ {
+ return function_exists("mcrypt_create_iv") && ConfService::getCoreConf("CMDLINE_ACTIVE");
+ }
+
+ /**
+ * @var AbstractConfDriver
+ */
+ private static $tmpConfStorageImpl;
+ /**
+ * @var AbstractAuthDriver
+ */
+ private static $tmpAuthStorageImpl;
+
+ /**
+ * @param $confStorage AbstractConfDriver
+ * @param $authStorage AbstractAuthDriver
+ */
+ public static function setTmpStorageImplementations($confStorage, $authStorage)
+ {
+ self::$tmpConfStorageImpl = $confStorage;
+ self::$tmpAuthStorageImpl = $authStorage;
+ }
+
+ /**
+ * Get conf driver implementation
+ *
+ * @return AbstractConfDriver
+ */
+ public static function getConfStorageImpl()
+ {
+ if(isSet(self::$tmpConfStorageImpl)) return self::$tmpConfStorageImpl;
+ return AJXP_PluginsService::getInstance()->getPluginById("core.conf")->getConfImpl();
+ }
+
+ /**
+ * Get auth driver implementation
+ *
+ * @return AbstractAuthDriver
+ */
+ public static function getAuthDriverImpl()
+ {
+ if(isSet(self::$tmpAuthStorageImpl)) return self::$tmpAuthStorageImpl;
+ return AJXP_PluginsService::getInstance()->getPluginById("core.auth")->getAuthImpl();
+ }
+
+ public static function switchUserToActiveRepository($loggedUser, $parameterId = -1)
+ {
+ if (isSet($_SESSION["PENDING_REPOSITORY_ID"]) && isSet($_SESSION["PENDING_FOLDER"])) {
+ $loggedUser->setArrayPref("history", "last_repository", $_SESSION["PENDING_REPOSITORY_ID"]);
+ $loggedUser->setPref("pending_folder", $_SESSION["PENDING_FOLDER"]);
+ $loggedUser->save("user");
+ AuthService::updateUser($loggedUser);
+ unset($_SESSION["PENDING_REPOSITORY_ID"]);
+ unset($_SESSION["PENDING_FOLDER"]);
+ }
+ $currentRepoId = ConfService::getCurrentRepositoryId();
+ $lastRepoId = $loggedUser->getArrayPref("history", "last_repository");
+ $defaultRepoId = AuthService::getDefaultRootId();
+ if ($defaultRepoId == -1) {
+ return false;
+ } else {
+ if ($lastRepoId !== "" && $lastRepoId!==$currentRepoId && $parameterId == -1 && $loggedUser->canSwitchTo($lastRepoId)) {
+ ConfService::switchRootDir($lastRepoId);
+ } else if ($parameterId != -1 && $loggedUser->canSwitchTo($parameterId)) {
+ ConfService::switchRootDir($parameterId);
+ } else if (!$loggedUser->canSwitchTo($currentRepoId)) {
+ ConfService::switchRootDir($defaultRepoId);
+ }
+ }
+ return true;
+ }
+
+
+ /**
+ * See instance method
+ * @static
+ * @param $rootDirIndex
+ * @param bool $temporary
+ * @return void
+ */
+ public static function switchRootDir($rootDirIndex = -1, $temporary = false)
+ {
+ self::getInstance()->switchRootDirInst($rootDirIndex, $temporary);
+ }
+ /**
+ * Switch the current repository
+ * @param $rootDirIndex
+ * @param bool $temporary
+ * @return void
+ */
+ public function switchRootDirInst($rootDirIndex=-1, $temporary=false)
+ {
+ $currentRepos = $this->getLoadedRepositories();
+ if ($rootDirIndex == -1) {
+ if (isSet($_SESSION['REPO_ID']) && array_key_exists($_SESSION['REPO_ID'], $currentRepos)) {
+ $this->configs["REPOSITORY"] = $currentRepos[$_SESSION['REPO_ID']];
+ } else {
+ $keys = array_keys($currentRepos);
+ $this->configs["REPOSITORY"] = $currentRepos[$keys[0]];
+ $_SESSION['REPO_ID'] = $keys[0];
+ }
+ } else {
+ if ($temporary && isSet($_SESSION['REPO_ID'])) {
+ $crtId = $_SESSION['REPO_ID'];
+ if ($crtId != $rootDirIndex && !isSet($_SESSION['SWITCH_BACK_REPO_ID'])) {
+ $_SESSION['SWITCH_BACK_REPO_ID'] = $crtId;
+ //AJXP_Logger::debug("switching to $rootDirIndex, registering $crtId");
+ }
+ } else {
+ $crtId = $_SESSION['REPO_ID'];
+ $_SESSION['PREVIOUS_REPO_ID'] = $crtId;
+ //AJXP_Logger::debug("switching back to $rootDirIndex");
+ }
+ $this->configs["REPOSITORY"] = $currentRepos[$rootDirIndex];
+ $_SESSION['REPO_ID'] = $rootDirIndex;
+ if(isSet($this->configs["ACCESS_DRIVER"])) unset($this->configs["ACCESS_DRIVER"]);
+ }
+
+ if (isSet($this->configs["REPOSITORY"]) && $this->configs["REPOSITORY"]->getOption("CHARSET")!="") {
+ $_SESSION["AJXP_CHARSET"] = $this->configs["REPOSITORY"]->getOption("CHARSET");
+ } else {
+ if (isSet($_SESSION["AJXP_CHARSET"])) {
+ unset($_SESSION["AJXP_CHARSET"]);
+ }
+ }
+
+
+ if ($rootDirIndex!=-1 && AuthService::usersEnabled() && AuthService::getLoggedUser()!=null) {
+ $loggedUser = AuthService::getLoggedUser();
+ $loggedUser->setArrayPref("history", "last_repository", $rootDirIndex);
+ $loggedUser->save("user");
+ }
+
+ }
+
+ /**
+ * See instance method
+ * @static
+ * @param String $scope "user" or "all"
+ * @return Repository[]
+ */
+ public static function getRepositoriesList($scope = "user")
+ {
+ if ($scope == "user") {
+ return self::getInstance()->getLoadedRepositories();
+ } else {
+ return self::getInstance()->initRepositoriesListInst("all");
+ }
+ }
+
+ /**
+ * @return Repository[]
+ */
+ private function getLoadedRepositories()
+ {
+ if (isSet($this->configs["REPOSITORIES"])) {
+ return $this->configs["REPOSITORIES"];
+ }
+ $this->configs["REPOSITORIES"] = $this->initRepositoriesListInst();
+ return $this->configs["REPOSITORIES"];
+ }
+
+ private function invalidateLoadedRepositories()
+ {
+ $this->configs["REPOSITORIES"] = null;
+ }
+
+ /**
+ * @static
+ * @param AbstractAjxpUser $userObject
+ * @param bool $details
+ * @param bool $labelOnly
+ * @param bool $skipShared
+ * @return Repository[]
+ */
+ public static function getAccessibleRepositories($userObject=null, $details=false, $labelOnly = false, $skipShared = false)
+ {
+ $result = array();
+ $allReps = ConfService::getRepositoriesList("all");
+ foreach ($allReps as $repositoryId => $repositoryObject) {
+ if (!ConfService::repositoryIsAccessible($repositoryId, $repositoryObject, $userObject, $details, $skipShared)) {
+ continue;
+ }
+
+ if ($labelOnly) {
+ $result[$repositoryId] = $repositoryObject->getDisplay();
+ } else {
+ $result[$repositoryId] = $repositoryObject;
+ }
+
+ }
+ return $result;
+ }
+
+ /**
+ * @param String $repositoryId
+ * @param Repository $repositoryObject
+ * @param AbstractAjxpUser $userObject
+ * @param bool $details
+ * @param bool $skipShared
+ *
+ * @return bool
+ */
+ public static function repositoryIsAccessible($repositoryId, $repositoryObject, $userObject = null, $details=false, $skipShared=false)
+ {
+ if($userObject == null) $userObject = AuthService::getLoggedUser();
+ if ($userObject == null && AuthService::usersEnabled()) {
+ return false;
+ }
+ if (!AuthService::canAssign($repositoryObject, $userObject)) {
+ return false;
+ }
+ if ($repositoryObject->isTemplate) {
+ return false;
+ }
+ if ($repositoryObject->getAccessType()=="ajxp_conf" && $userObject != null) {
+ if (AuthService::usersEnabled() && !$userObject->isAdmin()) {
+ return false;
+ }
+ }
+ if ($repositoryObject->getAccessType() == "ajxp_shared" && !AuthService::usersEnabled()) {
+ return false;
+ }
+ if ($repositoryObject->getUniqueUser() && (!AuthService::usersEnabled() || $userObject == null || $userObject->getId() == "shared" || $userObject->getId() != $repositoryObject->getUniqueUser() )) {
+ return false;
+ }
+ if ( $userObject != null && !($userObject->canRead($repositoryId) || $userObject->canWrite($repositoryId)) && !$details) {
+ return false;
+ }
+ if ($userObject == null || $userObject->canRead($repositoryId) || $userObject->canWrite($repositoryId) || $details) {
+ // Do not display standard repositories even in details mode for "sub"users
+ if ($userObject != null && $userObject->hasParent() && !($userObject->canRead($repositoryId) || $userObject->canWrite($repositoryId) )) {
+ return false;
+ }
+ // Do not display shared repositories otherwise.
+ if ($repositoryObject->hasOwner() && $skipShared) {
+ return false;
+ }
+ if ($userObject != null && $repositoryObject->hasOwner() && !$userObject->hasParent()) {
+ // Display the repositories if allow_crossusers is ok
+ if(ConfService::getCoreConf("ALLOW_CROSSUSERS_SHARING", "conf") === false
+ || ConfService::getCoreConf("ALLOW_CROSSUSERS_SHARING", "conf") === 0) {
+ return false;
+ }
+ // But still do not display its own shared repositories!
+ if ($repositoryObject->getOwner() == $userObject->getId()) {
+ return false;
+ }
+ }
+ if ($repositoryObject->hasOwner() && $userObject != null && $details && !($userObject->canRead($repositoryId) || $userObject->canWrite($repositoryId) ) ) {
+ return false;
+ }
+ }
+ return true;
+ }
+
+ /**
+ * Return the full list of repositories, as id => objects
+ * @return array
+ */
+ public function getRepositoriesListInst()
+ {
+ return $this->getLoadedRepositories();
+ }
+
+ /**
+ * See instance method
+ * @static
+ * @return string
+ */
+ public static function getCurrentRepositoryId()
+ {
+ return self::getInstance()->getCurrentRepositoryIdInst();
+ }
+ /**
+ * Get the current repository ID;
+ * @return string
+ */
+ public function getCurrentRepositoryIdInst()
+ {
+ $currentRepos = $this->getLoadedRepositories();
+ if (isSet($_SESSION['REPO_ID']) && isSet($currentRepos[$_SESSION['REPO_ID']])) {
+ return $_SESSION['REPO_ID'];
+ }
+ return array_shift(array_keys($currentRepos));
+ }
+ /**
+ * Get the current repo label
+ * @static
+ * @return string
+ */
+ public static function getCurrentRootDirDisplay()
+ {
+ return self::getInstance()->getCurrentRootDirDisplayInst();
+ }
+ /**
+ * @return string
+ */
+ public function getCurrentRootDirDisplayInst()
+ {
+ $currentRepos = $this->getLoadedRepositories();
+ if (isSet($currentRepos[$_SESSION['REPO_ID']])) {
+ $repo = $currentRepos[$_SESSION['REPO_ID']];
+ return $repo->getDisplay();
+ }
+ return "";
+ }
+
+ /**
+ * @param $scope String "user", "all"
+ * @return array
+ */
+ protected function initRepositoriesListInst($scope = "user")
+ {
+ // APPEND CONF FILE REPOSITORIES
+
+ $objList = array();
+ foreach ($this->configs["DEFAULT_REPOSITORIES"] as $index=>$repository) {
+ $repo = self::createRepositoryFromArray($index, $repository);
+ $repo->setWriteable(false);
+ $objList[$repo->getId()] = $repo;
+ }
+ // LOAD FROM DRIVER
+ $confDriver = self::getConfStorageImpl();
+ $drvList = $confDriver->listRepositories($scope == "user" ? AuthService::getLoggedUser() : null);
+ if (is_array($drvList)) {
+ foreach ($drvList as $repoId=>$repoObject) {
+ $driver = AJXP_PluginsService::getInstance()->getPluginByTypeName("access", $repoObject->getAccessType());
+ if (!is_object($driver) || !$driver->isEnabled()) {
+ unset($drvList[$repoId]);
+ } else {
+ $repoObject->setId($repoId);
+ $drvList[$repoId] = $repoObject;
+ }
+ }
+ $objList = array_merge($objList, $drvList);
+ }
+ return $objList;
+ }
+ /**
+ * See instance method
+ * @static
+ * @param bool $register
+ * @return array
+ */
+ public static function detectRepositoryStreams($register = false)
+ {
+ return self::getInstance()->detectRepositoryStreamsInst($register);
+ }
+ /**
+ * Call the detectStreamWrapper method
+ * @param bool $register
+ * @return array
+ */
+ public function detectRepositoryStreamsInst($register = false)
+ {
+ $streams = array();
+ $currentRepos = $this->getLoadedRepositories();
+ foreach ($currentRepos as $repository) {
+ $repository->detectStreamWrapper($register, $streams);
+ }
+ return $streams;
+ }
+
+ /**
+ * Create a repository object from a config options array
+ *
+ * @param integer $index
+ * @param Array $repository
+ * @return Repository
+ */
+ public static function createRepositoryFromArray($index, $repository)
+ {
+ return self::getInstance()->createRepositoryFromArrayInst($index, $repository);
+ }
+ /**
+ * See static method
+ * @param string $index
+ * @param array $repository
+ * @return Repository
+ */
+ public function createRepositoryFromArrayInst($index, $repository)
+ {
+ $repo = new Repository($index, $repository["DISPLAY"], $repository["DRIVER"]);
+ if (isSet($repository["DISPLAY_ID"])) {
+ $repo->setDisplayStringId($repository["DISPLAY_ID"]);
+ }
+ if (isSet($repository["DESCRIPTION_ID"])) {
+ $repo->setDescription($repository["DESCRIPTION_ID"]);
+ }
+ if (isSet($repository["AJXP_SLUG"])) {
+ $repo->setSlug($repository["AJXP_SLUG"]);
+ }
+ if (isSet($repository["IS_TEMPLATE"]) && $repository["IS_TEMPLATE"]) {
+ $repo->isTemplate = true;
+ $repo->uuid = $index;
+ }
+ if (array_key_exists("DRIVER_OPTIONS", $repository) && is_array($repository["DRIVER_OPTIONS"])) {
+ foreach ($repository["DRIVER_OPTIONS"] as $oName=>$oValue) {
+ $repo->addOption($oName, $oValue);
+ }
+ }
+ // BACKWARD COMPATIBILITY!
+ if (array_key_exists("PATH", $repository)) {
+ $repo->addOption("PATH", $repository["PATH"]);
+ $repo->addOption("CREATE", $repository["CREATE"]);
+ $repo->addOption("RECYCLE_BIN", $repository["RECYCLE_BIN"]);
+ }
+ return $repo;
+ }
+
+ /**
+ * Add dynamically created repository
+ *
+ * @param Repository $oRepository
+ * @return void|-1 if error
+ */
+ public static function addRepository($oRepository)
+ {
+ return self::getInstance()->addRepositoryInst($oRepository);
+ }
+ /**
+ * @param $oRepository
+ * @return void|-1 on error
+ */
+ public function addRepositoryInst($oRepository)
+ {
+ $confStorage = self::getConfStorageImpl();
+ $res = $confStorage->saveRepository($oRepository);
+ if ($res == -1) {
+ return $res;
+ }
+ AJXP_Logger::logAction("Create Repository", array("repo_name"=>$oRepository->getDisplay()));
+ $this->invalidateLoadedRepositories();
+ }
+
+ public static function findRepositoryByIdOrAlias($idOrAlias)
+ {
+ $repository = ConfService::getRepositoryById($idOrAlias);
+ if($repository != null ) return $repository;
+ $repository = ConfService::getRepositoryByAlias($idOrAlias);
+ if($repository != null) return $repository;
+ return null;
+ }
+
+ /**
+ * Retrieve a repository object
+ *
+ * @param String $repoId
+ * @return Repository
+ */
+ public static function getRepositoryById($repoId)
+ {
+ return self::getInstance()->getRepositoryByIdInst($repoId);
+ }
+ /**
+ * See static method
+ * @param $repoId
+ * @return Repository|null
+ */
+ public function getRepositoryByIdInst($repoId)
+ {
+ $currentRepos = $this->getLoadedRepositories();
+ if (isSet($currentRepos[$repoId])) {
+ return $currentRepos[$repoId];
+ }
+ return $this->getConfStorageImpl()->getRepositoryById($repoId);
+ }
+
+ /**
+ * Retrieve a repository object by its slug
+ *
+ * @param String $repoAlias
+ * @return Repository
+ */
+ public static function getRepositoryByAlias($repoAlias)
+ {
+ $repo = self::getConfStorageImpl()->getRepositoryByAlias($repoAlias);
+ if($repo !== null) return $repo;
+ // check default repositories
+ return self::getInstance()->getRepositoryByAliasInstDefaults($repoAlias);
+ }
+ /**
+ * See static method
+ * @param $repoAlias
+ * @return Repository|null
+ */
+ public function getRepositoryByAliasInstDefaults($repoAlias)
+ {
+ $conf = $this->configs["DEFAULT_REPOSITORIES"];
+ foreach ($conf as $repoId => $repoDef) {
+ if ($repoDef["AJXP_SLUG"] == $repoAlias) {
+ return $this->getRepositoryByIdInst($repoId);
+ }
+ }
+ return null;
+ }
+
+
+ /**
+ * Replace a repository by an update one.
+ *
+ * @param String $oldId
+ * @param Repository $oRepositoryObject
+ * @return mixed
+ */
+ public static function replaceRepository($oldId, $oRepositoryObject)
+ {
+ return self::getInstance()->replaceRepositoryInst($oldId, $oRepositoryObject);
+ }
+ /**
+ * See static method
+ * @param $oldId
+ * @param $oRepositoryObject
+ * @return void
+ */
+ public function replaceRepositoryInst($oldId, $oRepositoryObject)
+ {
+ $confStorage = self::getConfStorageImpl();
+ $res = $confStorage->saveRepository($oRepositoryObject, true);
+ if ($res == -1) {
+ return $res;
+ }
+ AJXP_Logger::logAction("Edit Repository", array("repo_name"=>$oRepositoryObject->getDisplay()));
+ $this->invalidateLoadedRepositories();
+ }
+ /**
+ * Set a temp repository id but not in the session
+ * @static
+ * @param $repositoryObject
+ * @return void
+ */
+ public static function tmpReplaceRepository($repositoryObject)
+ {
+ $inst = self::getInstance();
+ if (isSet($inst->configs["REPOSITORIES"][$repositoryObject->getUniqueId()])) {
+ $inst->configs["REPOSITORIES"][$repositoryObject->getUniqueId()] = $repositoryObject;
+ }
+ }
+ /**
+ * Remove a repository using the conf driver implementation
+ * @static
+ * @param $repoId
+ * @return void
+ */
+ public static function deleteRepository($repoId)
+ {
+ return self::getInstance()->deleteRepositoryInst($repoId);
+ }
+ /**
+ * See static method
+ * @param $repoId
+ * @return void
+ */
+ public function deleteRepositoryInst($repoId)
+ {
+ $confStorage = self::getConfStorageImpl();
+ $res = $confStorage->deleteRepository($repoId);
+ if ($res == -1) {
+ return $res;
+ }
+ AJXP_Logger::logAction("Delete Repository", array("repo_id"=>$repoId));
+ $this->invalidateLoadedRepositories();
+ }
+
+ /**
+ * Check if the gzopen function exists
+ * @static
+ * @return bool
+ */
+ public static function zipEnabled()
+ {
+ if(ConfService::getCoreConf("DISABLE_ZIP_BROWSING") === true) return false;
+ return (function_exists("gzopen")?true:false);
+ }
+ /**
+ * Get the list of all "conf" messages
+ * @static
+ * @param bool $forceRefresh Refresh the list
+ * @return
+ */
+ public static function getMessagesConf($forceRefresh = false)
+ {
+ return self::getInstance()->getMessagesInstConf($forceRefresh);
+ }
+ /**
+ * See static method
+ * @param bool $forceRefresh
+ * @return
+ */
+ public function getMessagesInstConf($forceRefresh = false)
+ {
+ // make sure they are loaded
+ $mess = $this->getMessagesInst($forceRefresh);
+ return $this->configs["CONF_MESSAGES"];
+ }
+
+ /**
+ * Get all i18n message
+ * @static
+ * @param bool $forceRefresh
+ * @return
+ */
+ public static function getMessages($forceRefresh = false)
+ {
+ return self::getInstance()->getMessagesInst($forceRefresh);
+ }
+ /**
+ * Get i18n messages
+ * @param bool $forceRefresh
+ * @return
+ */
+ public function getMessagesInst($forceRefresh = false)
+ {
+ $crtLang = self::getLanguage();
+ $messageCacheDir = dirname(AJXP_PLUGINS_MESSAGES_FILE)."/i18n";
+ $messageFile = $messageCacheDir."/".$crtLang."_".basename(AJXP_PLUGINS_MESSAGES_FILE);
+ if (isSet($this->configs["MESSAGES"]) && !$forceRefresh) {
+ return $this->configs["MESSAGES"];
+ }
+ if (!isset($this->configs["MESSAGES"]) && is_file($messageFile)) {
+ include($messageFile);
+ if (isSet($MESSAGES)) {
+ $this->configs["MESSAGES"] = $MESSAGES;
+ }
+ if (isSet($CONF_MESSAGES)) {
+ $this->configs["CONF_MESSAGES"] = $CONF_MESSAGES;
+ }
+ } else {
+ $this->configs["MESSAGES"] = array();
+ $this->configs["CONF_MESSAGES"] = array();
+ $nodes = AJXP_PluginsService::getInstance()->searchAllManifests("//i18n", "nodes");
+ foreach ($nodes as $node) {
+ $nameSpace = $node->getAttribute("namespace");
+ $path = $node->getAttribute("path");
+ $lang = $crtLang;
+ if (!is_file($path."/".$crtLang.".php")) {
+ $lang = "en"; // Default language, minimum required.
+ }
+ if (is_file($path."/".$lang.".php")) {
+ require($path."/".$lang.".php");
+ if (isSet($mess)) {
+ foreach ($mess as $key => $message) {
+ $this->configs["MESSAGES"][(empty($nameSpace)?"":$nameSpace.".").$key] = $message;
+ }
+ }
+ }
+ $lang = $crtLang;
+ if (!is_file($path."/conf/".$crtLang.".php")) {
+ $lang = "en";
+ }
+ if (is_file($path."/conf/".$lang.".php")) {
+ require($path."/conf/".$lang.".php");
+ $this->configs["CONF_MESSAGES"] = array_merge($this->configs["CONF_MESSAGES"], $mess);
+ }
+ }
+ if(!is_dir($messageCacheDir)) mkdir($messageCacheDir);
+ @file_put_contents($messageFile, "configs["MESSAGES"], true) ." ; \$CONF_MESSAGES = ".var_export($this->configs["CONF_MESSAGES"], true) ." ; ");
+ }
+
+ return $this->configs["MESSAGES"];
+ }
+
+ /**
+ * Get all registered extensions, from both the conf/extensions.conf.php and from the plugins
+ * @static
+ * @return
+ */
+ public static function getRegisteredExtensions()
+ {
+ return self::getInstance()->getRegisteredExtensionsInst();
+ }
+ /**
+ * See static method
+ * @return
+ */
+ public function getRegisteredExtensionsInst()
+ {
+ if (!isSet($this->configs["EXTENSIONS"])) {
+ $EXTENSIONS = array();
+ $RESERVED_EXTENSIONS = array();
+ include_once(AJXP_CONF_PATH."/extensions.conf.php");
+ $EXTENSIONS = array_merge($RESERVED_EXTENSIONS, $EXTENSIONS);
+ foreach ($EXTENSIONS as $key => $value) {
+ unset($EXTENSIONS[$key]);
+ $EXTENSIONS[$value[0]] = $value;
+ }
+ $nodes = AJXP_PluginsService::getInstance()->searchAllManifests("//extensions/extension", "nodes", true);
+ $res = array();
+ foreach ($nodes as $node) {
+ $res[$node->getAttribute("mime")] = array($node->getAttribute("mime"), $node->getAttribute("icon"), $node->getAttribute("messageId"));
+ }
+ if (count($res)) {
+ $EXTENSIONS = array_merge($EXTENSIONS, $res);
+ }
+ $this->configs["EXTENSIONS"] = $EXTENSIONS;
+ }
+ return $this->configs["EXTENSIONS"];
+ }
+ /**
+ * Get the actions that declare to skip the secure token in the plugins
+ * @static
+ * @return array
+ */
+ public static function getDeclaredUnsecureActions()
+ {
+ $test = AJXP_PluginsService::getInstance()->loadFromPluginQueriesCache("//action[@skipSecureToken]");
+ if (!empty($test) && is_array($test)) {
+ return $test;
+ } else {
+ $nodes = AJXP_PluginsService::getInstance()->searchAllManifests("//action[@skipSecureToken]", "nodes");
+ $res = array();
+ foreach ($nodes as $node) {
+ $res[] = $node->getAttribute("name");
+ }
+ AJXP_PluginsService::getInstance()->storeToPluginQueriesCache("//action[@skipSecureToken]", $res);
+ return $res;
+ }
+
+ }
+ /**
+ * Detect available languages from the core i18n library
+ * @static
+ * @return array
+ */
+ public static function listAvailableLanguages()
+ {
+ // Cache in session!
+ if (isSet($_SESSION["AJXP_LANGUAGES"]) && !isSet($_GET["refresh_langs"])) {
+ return $_SESSION["AJXP_LANGUAGES"];
+ }
+ $langDir = AJXP_COREI18N_FOLDER;
+ $languages = array();
+ if (($dh = opendir($langDir))!==FALSE) {
+ while (($file = readdir($dh)) !== false) {
+ $matches = array();
+ if (preg_match("/(.*)\.php/", $file, $matches) == 1) {
+ $fRadical = $matches[1];
+ include($langDir."/".$fRadical.".php");
+ $langName = isSet($mess["languageLabel"])?$mess["languageLabel"]:"Not Found";
+ $languages[$fRadical] = $langName;
+ }
+ }
+ closedir($dh);
+ }
+ if (count($languages)) {
+ $_SESSION["AJXP_LANGUAGES"] = $languages;
+ }
+ return $languages;
+ }
+
+ /**
+ * Get a config by its name
+ * @static
+ * @param string $varName
+ * @return mixed
+ */
+ public static function getConf($varName)
+ {
+ return self::getInstance()->getConfInst($varName);
+ }
+ /**
+ * Set a config by its name
+ * @static
+ * @param string $varName
+ * @param mixed $varValue
+ * @return void
+ */
+ public static function setConf($varName, $varValue)
+ {
+ return self::getInstance()->setConfInst($varName, $varValue);
+ }
+ /**
+ * See static method
+ * @param $varName
+ * @return mixed
+ */
+ public function getConfInst($varName)
+ {
+ if (isSet($this->configs[$varName])) {
+ return $this->configs[$varName];
+ }
+ if (defined("AJXP_".$varName)) {
+ return eval("return AJXP_".$varName.";");
+ }
+ return null;
+ }
+ /**
+ * See static method
+ * @param $varName
+ * @param $varValue
+ * @return void
+ */
+ public function setConfInst($varName, $varValue)
+ {
+ $this->configs[$varName] = $varValue;
+ }
+ /**
+ * Get config from the core.$coreType plugin
+ * @static
+ * @param string $varName
+ * @param string $coreType
+ * @return mixed|null|string
+ */
+ public static function getCoreConf($varName, $coreType = "ajaxplorer")
+ {
+ $coreP = AJXP_PluginsService::getInstance()->findPlugin("core", $coreType);
+ if($coreP === false) return null;
+ $confs = $coreP->getConfigs();
+ $confs = AuthService::filterPluginParameters("core.".$coreType, $confs);
+ return (isSet($confs[$varName]) ? AJXP_VarsFilter::filter($confs[$varName]) : null);
+ }
+
+ /**
+ * Set the language in the session
+ * @static
+ * @param string $lang
+ * @return void
+ */
+ public static function setLanguage($lang)
+ {
+ return self::getInstance()->setLanguageInst($lang);
+ }
+ /**
+ * See static method
+ * @param string $lang
+ * @return void
+ */
+ public function setLanguageInst($lang)
+ {
+ if (array_key_exists($lang, $this->configs["AVAILABLE_LANG"])) {
+ $this->configs["LANGUE"] = $lang;
+ }
+ }
+ /**
+ * Get the language from the session
+ * @static
+ * @return string
+ */
+ public static function getLanguage()
+ {
+ $lang = self::getInstance()->getConfInst("LANGUE");
+ if ($lang == null) {
+ $lang = self::getInstance()->getCoreConf("DEFAULT_LANGUAGE");
+ }
+ if(empty($lang)) return "en";
+ return $lang;
+ }
+
+ /**
+ * The current repository
+ * @return Repository
+ */
+ public static function getRepository()
+ {
+ return self::getInstance()->getRepositoryInst();
+ }
+ /**
+ * See static method
+ * @return Repository
+ */
+ public function getRepositoryInst()
+ {
+ if (isSet($_SESSION['REPO_ID']) && isSet($this->configs["REPOSITORIES"]) && isSet($this->configs["REPOSITORIES"][$_SESSION['REPO_ID']])) {
+ return $this->configs["REPOSITORIES"][$_SESSION['REPO_ID']];
+ }
+ return $this->configs["REPOSITORY"];
+ }
+
+ /**
+ * Returns the repository access driver
+ * @return AJXP_Plugin
+ */
+ public static function loadRepositoryDriver()
+ {
+ return self::getInstance()->loadRepositoryDriverInst();
+ }
+ /**
+ * See static method
+ * @throws Exception
+ * @return AJXP_Plugin
+ */
+ public function loadRepositoryDriverInst()
+ {
+ if (isSet($this->configs["ACCESS_DRIVER"]) && is_a($this->configs["ACCESS_DRIVER"], "AbstractAccessDriver")) {
+ return $this->configs["ACCESS_DRIVER"];
+ }
+ $this->switchRootDirInst();
+ $crtRepository = $this->getRepositoryInst();
+ $accessType = $crtRepository->getAccessType();
+ $pServ = AJXP_PluginsService::getInstance();
+ $plugInstance = $pServ->getPluginByTypeName("access", $accessType);
+
+ // TRIGGER BEFORE INIT META
+ $metaSources = $crtRepository->getOption("META_SOURCES");
+ if (isSet($metaSources) && is_array($metaSources) && count($metaSources)) {
+ $keys = array_keys($metaSources);
+ foreach ($keys as $plugId) {
+ if($plugId == "") continue;
+ $split = explode(".", $plugId);
+ $instance = $pServ->getPluginById($plugId);
+ if (!is_object($instance)) {
+ continue;
+ }
+ if (!method_exists($instance, "beforeInitMeta")) {
+ continue;
+ }
+ try {
+ $instance->init(AuthService::filterPluginParameters($plugId, $metaSources[$plugId], $crtRepository->getId()));
+ $instance->beforeInitMeta($plugInstance);
+ } catch (Exception $e) {
+ AJXP_Logger::logAction('ERROR : Cannot instanciate Meta plugin, reason : '.$e->getMessage());
+ $this->errors[] = $e->getMessage();
+ }
+ }
+ }
+
+ // INIT MAIN DRIVER
+ $plugInstance->init($crtRepository);
+ try {
+ $plugInstance->initRepository();
+ $crtRepository->driverInstance = $plugInstance;
+ } catch (Exception $e) {
+ // Remove repositories from the lists
+ unset($this->configs["REPOSITORIES"][$crtRepository->getId()]);
+ if (isSet($_SESSION["PREVIOUS_REPO_ID"]) && $_SESSION["PREVIOUS_REPO_ID"] !=$crtRepository->getId()) {
+ $this->switchRootDir($_SESSION["PREVIOUS_REPO_ID"]);
+ } else {
+ $this->switchRootDir();
+ }
+ throw $e;
+ }
+ $pServ->setPluginUniqueActiveForType("access", $accessType);
+
+ // TRIGGER INIT META
+ $metaSources = $crtRepository->getOption("META_SOURCES");
+ if (isSet($metaSources) && is_array($metaSources) && count($metaSources)) {
+ $keys = array_keys($metaSources);
+ foreach ($keys as $plugId) {
+ if($plugId == "") continue;
+ $split = explode(".", $plugId);
+ $instance = $pServ->getPluginById($plugId);
+ if (!is_object($instance)) {
+ continue;
+ }
+ try {
+ $instance->init(AuthService::filterPluginParameters($plugId, $metaSources[$plugId], $crtRepository->getId()));
+ $instance->initMeta($plugInstance);
+ } catch (Exception $e) {
+ AJXP_Logger::logAction('ERROR : Cannot instanciate Meta plugin, reason : '.$e->getMessage());
+ $this->errors[] = $e->getMessage();
+ }
+ $pServ->setPluginActive($split[0], $split[1]);
+ }
+ }
+ if (count($this->errors)>0) {
+ $e = new AJXP_Exception("Error while loading repository feature : ".implode(",",$this->errors));
+ // Remove repositories from the lists
+ unset($this->configs["REPOSITORIES"][$crtRepository->getId()]);
+ if (isSet($_SESSION["PREVIOUS_REPO_ID"]) && $_SESSION["PREVIOUS_REPO_ID"] !=$crtRepository->getId()) {
+ $this->switchRootDir($_SESSION["PREVIOUS_REPO_ID"]);
+ } else {
+ $this->switchRootDir();
+ }
+ throw $e;
+ }
+
+ $this->configs["ACCESS_DRIVER"] = $plugInstance;
+ return $this->configs["ACCESS_DRIVER"];
+ }
+
+ /**
+ * @static
+ * @param Repository $repository
+ * @return AbstractAccessDriver
+ */
+ public static function loadDriverForRepository(&$repository)
+ {
+ return self::getInstance()->loadRepositoryDriverREST($repository);
+ }
+
+ /**
+ * See static method
+ * @param Repository $repository
+ * @throws AJXP_Exception|Exception
+ * @return AbstractAccessDriver
+ */
+ public function loadRepositoryDriverREST(&$repository)
+ {
+ if (isset($repository->driverInstance)) {
+ return $repository->driverInstance;
+ }
+ $accessType = $repository->getAccessType();
+ $pServ = AJXP_PluginsService::getInstance();
+ $plugInstance = $pServ->getPluginByTypeName("access", $accessType);
+
+ // TRIGGER BEFORE INIT META
+ $metaSources = $repository->getOption("META_SOURCES");
+ if (isSet($metaSources) && is_array($metaSources) && count($metaSources)) {
+ $keys = array_keys($metaSources);
+ foreach ($keys as $plugId) {
+ if($plugId == "") continue;
+ $instance = $pServ->getPluginById($plugId);
+ if (!is_object($instance)) {
+ continue;
+ }
+ if (!method_exists($instance, "beforeInitMeta")) {
+ continue;
+ }
+ try {
+ $instance->init(AuthService::filterPluginParameters($plugId, $metaSources[$plugId], $repository->getId()));
+ $instance->beforeInitMeta($plugInstance);
+ } catch (Exception $e) {
+ AJXP_Logger::logAction('ERROR : Cannot instanciate Meta plugin, reason : '.$e->getMessage());
+ $this->errors[] = $e->getMessage();
+ }
+ }
+ }
+
+ // INIT MAIN DRIVER
+ $plugInstance->init($repository);
+ try {
+ $plugInstance->initRepository();
+ } catch (Exception $e) {
+ throw $e;
+ }
+ $pServ->setPluginUniqueActiveForType("access", $accessType);
+
+ // TRIGGER INIT META
+ $metaSources = $repository->getOption("META_SOURCES");
+ if (isSet($metaSources) && is_array($metaSources) && count($metaSources)) {
+ $keys = array_keys($metaSources);
+ foreach ($keys as $plugId) {
+ if($plugId == "") continue;
+ $split = explode(".", $plugId);
+ $instance = $pServ->getPluginById($plugId);
+ if (!is_object($instance)) {
+ continue;
+ }
+ try {
+ $instance->init(AuthService::filterPluginParameters($plugId, $metaSources[$plugId], $repository->getId()));
+ $instance->initMeta($plugInstance);
+ } catch (Exception $e) {
+ AJXP_Logger::logAction('ERROR : Cannot instanciate Meta plugin, reason : '.$e->getMessage());
+ $this->errors[] = $e->getMessage();
+ }
+ $pServ->setPluginActive($split[0], $split[1]);
+ }
+ }
+ if (count($this->errors)>0) {
+ $e = new AJXP_Exception("Error while loading repository feature : ".implode(",",$this->errors));
+ throw $e;
+ }
+
+ $repository->driverInstance = $plugInstance;
+ if (isSet($_SESSION["REPO_ID"]) && $_SESSION["REPO_ID"] == $repository->getId()) {
+ $this->configs["REPOSITORY"] = $repository;
+ $this->configs["REPOSITORIES"][$_SESSION['REPO_ID']] = $repository;
+ }
+ return $plugInstance;
+ }
+
+ /**
+ * Search the manifests declaring ajxpdriver as their root node. Remove ajxp_conf & ajxp_shared
+ * @static
+ * @param string $filterByTagName
+ * @param string $filterByDriverName
+ * @param bool $limitToEnabledPlugins
+ * @return string
+ */
+ public static function availableDriversToXML($filterByTagName = "", $filterByDriverName="", $limitToEnabledPlugins = false)
+ {
+ $nodeList = AJXP_PluginsService::searchAllManifests("//ajxpdriver", "node", false, $limitToEnabledPlugins);
+ $xmlBuffer = "";
+ foreach ($nodeList as $node) {
+ $dName = $node->getAttribute("name");
+ if($filterByDriverName != "" && $dName != $filterByDriverName) continue;
+ if($dName == "ajxp_conf" || $dName == "ajxp_shared") continue;
+ if ($filterByTagName == "") {
+ $xmlBuffer .= $node->ownerDocument->saveXML($node);
+ continue;
+ }
+ $q = new DOMXPath($node->ownerDocument);
+ $cNodes = $q->query("//".$filterByTagName, $node);
+ $nodeAttr = $node->attributes;
+ $xmlBuffer .= "attributes as $attr) $xmlBuffer.= " $attr->name=\"$attr->value\" ";
+ $xmlBuffer .=">";
+ foreach ($cNodes as $child) {
+ $xmlBuffer .= $child->ownerDocument->saveXML($child);
+ }
+ $xmlBuffer .= "";
+ }
+ return $xmlBuffer;
+ }
+
+ /**
+ * Singleton method
+ *
+ * @return ConfService the service instance
+ */
+ public static function getInstance()
+ {
+ if (!isSet(self::$instance)) {
+ $c = __CLASS__;
+ self::$instance = new $c;
+ }
+ return self::$instance;
+ }
+ private function __construct(){}
+ public function __clone()
+ {
+ trigger_error("Cannot clone me, i'm a singleton!", E_USER_ERROR);
+ }
+
+}
diff --git a/core/src/core/classes/class.HTMLWriter.php b/core/src/core/classes/class.HTMLWriter.php
index 3624bf22e2..9653f1b829 100644
--- a/core/src/core/classes/class.HTMLWriter.php
+++ b/core/src/core/classes/class.HTMLWriter.php
@@ -34,12 +34,12 @@ class HTMLWriter
* @param string $errorMessage
* @return void
*/
- static function displayMessage($logMessage, $errorMessage)
- {
- $mess = ConfService::getMessages();
- echo "| ".(isset($logMessage)?$logMessage:$errorMessage)." | ".$mess[98]." |
| ".(isset($logMessage)?$logMessage:$errorMessage)." | ".$mess[98]." |
", file($realName));
- $content = preg_replace("(http:\/\/[a-z|.|\/|\-|0-9]*)", "$0", $content);
- $content = preg_replace("(\[(.*)\])", "$1
", $content);
- $content = preg_replace("(\+\+ (.*) \+\+)", "$1
", $content);
- $content = str_replace("__AJXP_VERSION__", AJXP_VERSION, $content);
- $content = str_replace("__AJXP_VERSION_DATE__", AJXP_VERSION_DATE, $content);
- return $content;
- }
- return "File not found : ".$docFileName;
+ $realName = AJXP_DOCS_FOLDER."/".$docFileName.".txt";
+ if (is_file($realName)) {
+ $content = implode("
", file($realName));
+ $content = preg_replace("(http:\/\/[a-z|.|\/|\-|0-9]*)", "$0", $content);
+ $content = preg_replace("(\[(.*)\])", "$1
", $content);
+ $content = preg_replace("(\+\+ (.*) \+\+)", "$1
", $content);
+ $content = str_replace("__AJXP_VERSION__", AJXP_VERSION, $content);
+ $content = str_replace("__AJXP_VERSION_DATE__", AJXP_VERSION_DATE, $content);
+ return $content;
+ }
+ return "File not found : ".$docFileName;
}
/**
* Write repository data directly as javascript string
* @static
* @return mixed|string
*/
- static function repositoryDataAsJS(){
- if(AuthService::usersEnabled()) return "";
- require_once(AJXP_BIN_FOLDER."/class.SystemTextEncoding.php");
- require_once(AJXP_BIN_FOLDER."/class.AJXP_XMLWriter.php");
- return str_replace("'", "\'", AJXP_XMLWriter::writeRepositoriesData(null));
+ public static function repositoryDataAsJS()
+ {
+ if(AuthService::usersEnabled()) return "";
+ require_once(AJXP_BIN_FOLDER."/class.SystemTextEncoding.php");
+ require_once(AJXP_BIN_FOLDER."/class.AJXP_XMLWriter.php");
+ return str_replace("'", "\'", AJXP_XMLWriter::writeRepositoriesData(null));
}
/**
* Write the messages as Javascript
@@ -79,26 +79,22 @@ static function repositoryDataAsJS(){
* @param array $mess
* @return void
*/
- static function writeI18nMessagesClass($mess)
+ public static function writeI18nMessagesClass($mess)
{
- echo "\n";
+ }
+ echo "MessageHash;";
+ echo "\n";
}
/**
@@ -108,10 +104,11 @@ static function writeI18nMessagesClass($mess)
* @param string $charset
* @return void
*/
- static function internetExplorerMainDocumentHeader(){
- if(strstr($_SERVER["HTTP_USER_AGENT"], "MSIE 9.")){
+ public static function internetExplorerMainDocumentHeader()
+ {
+ if (strstr($_SERVER["HTTP_USER_AGENT"], "MSIE 9.")) {
header("X-UA-Compatible: IE=9");
- }else if(strstr($_SERVER["HTTP_USER_AGENT"], "MSIE 10.")){
+ } else if (strstr($_SERVER["HTTP_USER_AGENT"], "MSIE 10.")) {
header("X-UA-Compatible: IE=Edge,chrome=1");
}
}
@@ -123,16 +120,18 @@ static function internetExplorerMainDocumentHeader(){
* @param string $charset
* @return void
*/
- static function charsetHeader($type = 'text/html', $charset='UTF-8'){
- header("Content-type:$type; charset=$charset");
+ public static function charsetHeader($type = 'text/html', $charset='UTF-8')
+ {
+ header("Content-type:$type; charset=$charset");
}
/**
* Write a closing