class_standAlonePage.inc 7.39 KiB
<?php
/*
  This code is part of FusionDirectory (http://www.fusiondirectory.org/)
  Copyright (C) 2003-2010  Cajus Pollmeier
  Copyright (C) 2011-2018  FusionDirectory
  This program is free software; you can redistribute it and/or modify
  it under the terms of the GNU General Public License as published by
  the Free Software Foundation; either version 2 of the License, or
  (at your option) any later version.
  This program is distributed in the hope that it will be useful,
  but WITHOUT ANY WARRANTY; without even the implied warranty of
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  GNU General Public License for more details.
  You should have received a copy of the GNU General Public License
  along with this program; if not, write to the Free Software
  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
/* base class for passwordRecovery and such classes handling requests on their own */
abstract class standAlonePage
  protected $directories;
  protected $directory;
  protected $activated;
  protected $interactive;
  /* Constructor */
  function __construct ($interactive = TRUE)
    global $config, $ssl, $ui;
    $this->interactive = $interactive;
    if ($this->interactive) {
      /* Destroy old session if exists.
          Else you will get your old session back, if you not logged out correctly. */
      session::destroy();
      session::start();
      $config = $this->loadConfig();
      session::set('config', $config);
      /* Generate server list */
      $this->directories = [];
      foreach ($config->data['LOCATIONS'] as $key => $ignored) {
        $this->directories[$key] = $key;
      $ui = new userinfoNoAuth(get_class($this));
      session::set('ui', $ui);
    static::init();
  abstract protected function readLdapConfig (): bool;
  function checkDirectoryChooser ()
    global $config;
    $olddirectory = $this->directory;
    if (isset($_POST['server']) && isset($this->directories[$_POST['server']])) {
      $this->directory = validate($_POST['server']);
    } elseif (isset($_GET['directory']) && isset($this->directories[$_GET['directory']])) {
      $this->directory = validate($_GET['directory']);
7172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140
} elseif (empty($this->directory)) { $this->directory = $config->data['MAIN']['DEFAULT']; if (!isset($this->directories[$this->directory])) { $this->directory = key($this->directories); } } if ($this->directory != $olddirectory) { /* Set config to selected one */ $config->set_current($this->directory); $this->activated = $this->readLdapConfig(); } } function init () { global $config, $ssl, $ui; if (!$this->interactive) { $this->activated = $this->readLdapConfig(); return; } static::checkDirectoryChooser(); reset_errors(); static::securityHeaders(); CSRFProtection::check(); $ui = session::get('ui'); $config = session::get('config'); timezone::setDefaultTimezoneFromConfig(); Language::init(); $this->setupSmarty(); $ssl = $this->checkForSSL(); /* Prepare plugin list */ pluglist::load(); } function loadConfig () { global $BASE_DIR; /* Check if CONFIG_FILE is accessible */ if (!is_readable(CONFIG_DIR.'/'.CONFIG_FILE)) { throw new FatalError( htmlescape(sprintf( _('FusionDirectory configuration %s/%s is not readable. Aborted.'), CONFIG_DIR, CONFIG_FILE )) ); } /* Parse configuration file */ $config = new config(CONFIG_DIR.'/'.CONFIG_FILE, $BASE_DIR); session::set('DEBUGLEVEL', $config->get_cfg_value('debuglevel')); logging::debug(DEBUG_CONFIG, __LINE__, __FUNCTION__, __FILE__, $config->data, 'config'); return $config; }
141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210
function setupSmarty () { global $config; $smarty = get_smarty(); /* Set template compile directory */ $smarty->compile_dir = $config->get_cfg_value('templateCompileDirectory', SPOOL_DIR); /* Check for compile directory */ if (!(is_dir($smarty->compile_dir) && is_writable($smarty->compile_dir))) { throw new FatalError( htmlescape(sprintf( _('Directory "%s" specified as compile directory is not accessible!'), $smarty->compile_dir )) ); } /* Check for old files in compile directory */ clean_smarty_compile_dir($smarty->compile_dir); $smarty->assign('date', gmdate('D, d M Y H:i:s')); $smarty->assign('params', ''); $smarty->assign('message', ''); $smarty->assign('changed', FALSE); $smarty->assign('copynotice', copynotice()); $lang = session::get('lang'); $smarty->assign('lang', preg_replace('/_.*$/', '', $lang)); $smarty->assign('rtl', Language::isRTL($lang)); $smarty->assign('usePrototype', 'FALSE'); $smarty->assign('CSRFtoken', CSRFProtection::getToken()); if (count($this->directories) > 1) { $smarty->assign('show_directory_chooser', TRUE); $smarty->assign('server_options', $this->directories); $smarty->assign('server_id', $this->directory); } else { $smarty->assign('show_directory_chooser', FALSE); } } function assignSmartyVars () { global $error_collector, $error_collector_mailto; $smarty = get_smarty(); $smarty->assign('PHPSESSID', session_id()); if ($error_collector != '') { $smarty->assign('php_errors', preg_replace('/%BUGBODY%/', $error_collector_mailto, $error_collector).'</div>'); } else { $smarty->assign('php_errors', ''); } $smarty->assign('msg_dialogs', msg_dialog::get_dialogs()); } function checkForSSL () { global $config; $smarty = get_smarty(); /* Check for SSL connection */ $ssl = ''; $smarty->assign('ssl', ''); if (!URL::sslOn()) { $ssl = URL::getSslUrl(); /* If SSL is forced, just forward to the SSL enabled site */
211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273
if ($config->get_cfg_value('forcessl') == 'TRUE') { header("Location: $ssl"); exit; } elseif ($config->get_cfg_value('warnssl') == 'TRUE') { /* Display SSL mode warning? */ $smarty->assign('ssl', sprintf(htmlescape(_('Warning: %sSession is not encrypted!%s')), '<a href="'.$ssl.'">', '</a>')); } } return $ssl; } function encodeParams ($keys) { $params = ''; foreach ($keys as $key) { $params .= "&amp;$key=".urlencode($this->$key); } return preg_replace('/^&amp;/', '?', $params); } public function isActivated () { return $this->activated; } static function run () { session::start(); $class = get_called_class(); if (session::is_set('standAlonePage_'.$class)) { $page = session::get('standAlonePage_'.$class); $page->init(); } else { $page = new $class(); } session::set('standAlonePage_'.$class, $page); $page->execute(); } static function securityHeaders () { header('X-XSS-Protection: 1; mode=block'); header('X-Content-Type-Options: nosniff'); header('X-Frame-Options: deny'); } static function generateRandomHash () { /* Generate a very long random value */ $len = 56; $base = 'ABCDEFGHKLMNOPQRSTWXYZabcdefghjkmnpqrstwxyz123456789'; $max = strlen($base) - 1; $randomhash = ''; while (strlen($randomhash) < $len + 1) { $randomhash .= $base[random_int(0, $max)]; } return $randomhash; } }