You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
102 lines
3.7 KiB
102 lines
3.7 KiB
<?php
|
|
|
|
// (c) Copyright by authors of the Tiki Wiki CMS Groupware Project
|
|
//
|
|
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
|
|
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
|
|
// $Id$
|
|
|
|
use Tiki\TikiInit;
|
|
|
|
//this script may only be included - so its better to die if called directly.
|
|
if (strpos($_SERVER["SCRIPT_NAME"], basename(__FILE__)) !== false) {
|
|
header("location: index.php");
|
|
exit;
|
|
}
|
|
|
|
/* Automatically set params used for absolute URLs - BEGIN */
|
|
|
|
// Note: need to substitute \ for / for windows.
|
|
$tikipath = str_replace('\\', '/', __DIR__);
|
|
if (! defined('TIKI_PATH')) {
|
|
define('TIKI_PATH', $tikipath);
|
|
}
|
|
|
|
if (getcwd()) {
|
|
$scriptDirectory = getcwd();
|
|
} else {
|
|
// On some systems, SCRIPT_FILENAME contains the full path to the cgi script
|
|
// that calls the script we are looking for. In this case, we have to
|
|
// fallback to PATH_TRANSLATED. This one may be wrong on some systems, this
|
|
// is why SCRIPT_FILENAME is tried first.
|
|
|
|
// I can't make sense of the above paragraph, but SCRIPT_FILENAME appears to always work, as the alternative case was broken for 2 years. Chealer
|
|
|
|
if (substr($_SERVER['SCRIPT_FILENAME'], 0, strlen($tikipath)) != $tikipath) {
|
|
// PATH_TRANSLATED is not always set on PHP5, so try to get first value of get_included_files() in this case
|
|
$scriptDirectory = empty($_SERVER['PATH_TRANSLATED']) ? current(get_included_files()) : $_SERVER['PATH_TRANSLATED'];
|
|
} else {
|
|
$scriptDirectory = $_SERVER['SCRIPT_FILENAME'];
|
|
}
|
|
$scriptDirectory = dirname(realpath($scriptDirectory));
|
|
}
|
|
// Note: need to substitute \ for / for Windows.
|
|
$scriptDirectory = str_replace('\\', '/', $scriptDirectory);
|
|
|
|
$dir_level = substr_count(str_replace($tikipath, '', $scriptDirectory), "/");
|
|
|
|
// If unallowed chars (regarding to RFC1738) have been found in REQUEST_URI, then urlencode them
|
|
$unallowed_uri_chars = ["'", '"', '<', '>', '{', '}', '|', '\\', '^', '~', '`'];
|
|
$unallowed_uri_chars_encoded = array_map('urlencode', $unallowed_uri_chars);
|
|
if (isset($_SERVER['REQUEST_URI'])) {
|
|
$_SERVER['REQUEST_URI'] = str_replace($unallowed_uri_chars, $unallowed_uri_chars_encoded, $_SERVER['REQUEST_URI']);
|
|
}
|
|
|
|
// Same as above, but for PHP_SELF which does not contain URL params
|
|
// Usually, PHP_SELF also differs from REQUEST_URI in that PHP_SELF is URL decoded and REQUEST_URI is exactly what the client sent
|
|
$unallowed_uri_chars = array_merge($unallowed_uri_chars, ['#', '[', ']']);
|
|
$unallowed_uri_chars_encoded = array_merge($unallowed_uri_chars_encoded, array_map('urlencode', ['#', '[', ']']));
|
|
$_SERVER['SCRIPT_NAME'] = str_replace($unallowed_uri_chars, $unallowed_uri_chars_encoded, $_SERVER['SCRIPT_NAME']);
|
|
|
|
// Note: need to substitute \ for / for Windows.
|
|
$tikiroot = str_replace('\\', '/', dirname($_SERVER['SCRIPT_NAME']));
|
|
|
|
// remove beginning dot if it is a relative path on the filesystem
|
|
if (php_sapi_name() == 'cli') {
|
|
$tikiroot = preg_replace('/^\.\//', '/', $tikiroot);
|
|
if ($tikiroot == '.') {
|
|
$tikiroot = '';
|
|
}
|
|
}
|
|
|
|
if ($dir_level > 0) {
|
|
$tikiroot = preg_replace('#(/[^/]+){' . $dir_level . '}$#', '', $tikiroot);
|
|
chdir($tikipath);
|
|
}
|
|
|
|
if (substr($tikiroot, -1, 1) != '/') {
|
|
$tikiroot .= '/';
|
|
}
|
|
if (substr($tikipath, -1, 1) != '/') {
|
|
$tikipath .= '/';
|
|
}
|
|
|
|
// Add global filter for xajax and cookie // AJAX_TODO?
|
|
global $inputConfiguration;
|
|
if (empty($inputConfiguration)) {
|
|
$inputConfiguration = [];
|
|
}
|
|
array_unshift(
|
|
$inputConfiguration,
|
|
[
|
|
'staticKeyFilters' => [
|
|
'cookietab' => 'int',
|
|
'callback' => 'word',
|
|
],
|
|
'staticKeyFiltersForArrays' => [
|
|
]
|
|
]
|
|
);
|
|
|
|
require_once('lib/init/initlib.php');
|
|
TikiInit::appendIncludePath($tikipath);
|