Source for file _blog_main.inc.php

Documentation is available at _blog_main.inc.php

<?php
/**
* This file loads and initializes the blog to be displayed.
*
* This file is part of the b2evolution/evocms project - {@link http://b2evolution.net/}.
* See also {@link http://sourceforge.net/projects/evocms/}.
*
* Parts of this file are copyright (c)2004-2005 by Daniel HAHLER - {@link http://thequod.de/contact}.
* Parts of this file are copyright (c)2004-2005 by The University of North Carolina at Charlotte as
* contributed by Jason Edgecombe {@link http://tst.uncc.edu/team/members/jason_bio.php}.
*
* @license http://b2evolution.net/about/license.html GNU General Public License (GPL)
*
* {@internal Open Source relicensing agreement:
* Daniel HAHLER grants Francois PLANQUE the right to license
* Daniel HAHLER's contributions to this file and the b2evolution project
* under any OSI approved OSS license (http://www.opensource.org/licenses/).
*
* The University of North Carolina at Charlotte grants Francois PLANQUE the right to license
* Jason EDGECOMBE's contributions to this file and the b2evolution project
* under the GNU General Public License (http://www.opensource.org/licenses/gpl-license.php)
* and the Mozilla Public License (http://www.opensource.org/licenses/mozilla1.1.php).
* }}}
*
* @package main
*
* {@internal Below is a list of authors who have contributed to design/coding of this file: }}
* @author blueyed: Daniel HAHLER
* @author fplanque: Francois PLANQUE
* @author jeffbearer: Jeff BEARER
* @author jwedgeco: Jason EDGECOMBE (for hire by UNC-Charlotte)
* @author edgester: Jason EDGECOMBE (personal contributions, not for hire)
*
* {@internal Below is a list of former authors whose contributions to this file have been
* either removed or redesigned and rewritten anew:
* - cafelog (team)
* - t3dworld
* }}}
*
* @version $Id: _blog_main.inc.php,v 1.21.2.12 2006/12/02 02:41:27 fplanque Exp $
*/
if( !defined('EVO_CONFIG_LOADED') ) die( 'Please, do not access this page directly.' );
/**
* Initialize everything:
*/
require_once dirname(__FILE__).'/_main.inc.php';
require_once $model_path.'items/_itemlist2.class.php';
$Timer->resume( 'blog_main.inc' );
// Getting GET or POST parameters:
$Request->param( 'blog', 'integer', 0, true ); // Can't use $default_to_blog because the param must always be included in regenerate_url() when present
$Request->param( 'p', 'integer', '', true ); // Specific post number to display
$Request->param( 'title', 'string', '', true ); // urtitle of post to display
$Request->param( 'm', 'integer', '', true ); // YearMonth(Day) to display
$Request->param( 'w', 'integer', -1, true ); // Week number
$Request->param( 'dstart', 'integer', '', true ); // YearMonth(Day) to start at
$Request->param( 'unit', 'string', '', true ); // list unit: 'posts' or 'days'
$Request->param( 'cat', '/^[*\-]?([0-9]+(,[0-9]+)*)?$/', '', true ); // List of cats to restrict to
$Request->param( 'catsel', 'array', array(), true ); // Array of cats to restrict to
foreach( $catsel as $k => $v )
{ // make sure this are all integers, to prevent SQL injection! TODO: use param( , 'array[integer]' )
$catsel[$k] = (int)$v;
}
$Request->set_param( 'catsel', $catsel );
// Let's compile those values right away (we use them in several different places):
$cat_array = array();
$cat_modifier = '';
compile_cat_array( $cat, $catsel, /* by ref */ $cat_array, /* by ref */ $cat_modifier, $blog == 1 ? 0 : $blog );
$Request->param( 'author', '/^-?[0-9]+(,[0-9]+)*$/', '', true ); // List of authors to restrict to
$Request->param( 'order', 'string', 'DESC', true ); // ASC or DESC
$Request->param( 'orderby', 'string', '', true ); // list of fields to order by
$Request->param( 'posts', 'integer', 0, true ); // # of units to display on the page
$Request->param( 'paged', 'integer', '', true ); // List page number in paged display
$Request->param( 'poststart', 'integer', '', true ); // Start results at this position
$Request->param( 'postend', 'integer', '', true ); // End results at this position
$Request->param( 's', 'string', '', true ); // Search string
$Request->param( 'sentence', 'string', 'AND', true ); // Search for sentence or for words
$Request->param( 'exact', 'integer', '', true ); // Require exact match of title or contents
$Request->param( 'preview', 'integer', 0, true ); // Is this preview ?
$Request->param( 'calendar', 'string', '', true ); // Display a specific month in the calendar
$Request->param( 'page', 'integer', '', true );
$Request->param( 'more', 'integer', 0, true );
$Request->param( 'c', 'string', '', true );
$Request->param( 'tb', 'integer', 0, true );
$Request->param( 'pb', 'integer', 0, true );
$Request->param( 'disp', 'string', 'posts', true );
$Request->param( 'stats', 'integer', 0 ); // deprecated
$Request->param( 'tempskin', 'string', '', true );
if( !isset($timestamp_min) ) $timestamp_min = '';
if( !isset($timestamp_max) ) $timestamp_max = '';
if( $preview )
{ // Ignore this hit
$Hit->ignore = true;
}
if( empty($disp) )
{ // Conversion support for old params:
if( $c == 'last')
{ // Translate old last comments caller
$disp = 'comments';
}
elseif( $stats )
{ // Translate old stats caller
$disp = 'stats';
}
}
if( $disp == 'stats' )
{
require $view_path.'errors/_410_stats_gone.page.php'; // error & exit
}
// Getting current blog info:
$Blog = Blog_get_by_ID( $blog ); /* TODO: TMP: */ $blogparams = get_blogparams_by_ID( $blog );
/*
TODO: blueyed>> This should get moved as default to the locale detection in _main.inc.php,
as we only want to activate the I/O charset, which is probably the user's..
It prevents using a locale/charset in the front office, apart from the one given as default for the blog!!
fp>there is no blog defined in _main and there should not be any
blueyed> Sure, but that means we should either split it, or use the locale here only, if there's no-one given with higher priority.
*/
// Activate matching locale:
$Debuglog->add( 'Activating blog locale: '.$Blog->get('locale'), 'locale' );
locale_activate( $Blog->get('locale') );
// TODO: factorize the code below with the one in main.inc
// Check and possibly adjust $evo_charset:
// NOTE: this is quite the same as with _main.inc.php, because of the (overriding) blog's locale above
if( $io_charset != locale_charset(false) )
{ // io_charset changed from the initial setting in _main.inc.php
$io_charset = locale_charset(false);
if( ! empty($mb_output_handler_started) || $evo_charset != $io_charset )
{ // we have to convert for I/O, which requires mbstrings extension
if( ! function_exists('mb_convert_encoding') )
{
$Debuglog->add( '$evo_charset differs from $io_charset, but mbstrings does not seem to be installed.', array('errors','locale') );
$evo_charset = $io_charset; // we cannot convert I/O to internal charset
}
else
{ // check if the encodings are supported:
if( function_exists('mb_list_encodings') ) // PHP5
{
$mb_encodings = mb_list_encodings();
}
else
{
$mb_encodings = NULL;
}
if( isset($mb_encodings) && ! in_array( strtoupper($io_charset), $mb_encodings ) )
{
$Debuglog->add( 'Cannot I/O convert because I/O charset ['.$io_charset.'] is not in mb_list_encodings()!', array('errors','locale') );
$evo_charset = $io_charset;
}
elseif( isset($mb_encodings) && ! in_array( strtoupper($evo_charset), $mb_encodings ) )
{
$Debuglog->add( 'Cannot I/O convert because $evo_charset='.$evo_charset.' is not in mb_list_encodings()!', array('errors','locale') );
$evo_charset = $io_charset;
}
else
{
mb_http_output( $io_charset );
if( empty($mb_output_handler_started) )
{ // has not been started in _main.inc.php already:
ob_start( 'mb_output_handler' );
}
}
unset($mb_encodings);
}
}
// Tell mbstrings what the internal encoding is:
if( function_exists('mb_internal_encoding') )
{
mb_internal_encoding( $evo_charset );
}
$Debuglog->add( 'Adjusted I/O charset for blog', 'locale' );
if( empty($db_config['connection_charset']) )
{ // Set encoding for MySQL connection (not overriding explicitely set one):
$DB->set_connection_charset( $evo_charset, true );
}
$Debuglog->add( 'evo_charset: '.$evo_charset, 'locale' );
$Debuglog->add( 'io_charset: '.$io_charset, 'locale' );
// Reload Blog(s) (for encoding of name, tagline etc):
// unset Cache:
$cache_blogs = array();
// fills whole cache again:
$Blog = Blog_get_by_ID( $blog ); /* TODO: TMP: */ $blogparams = get_blogparams_by_ID( $blog );
} // end of "if charset changed by blog"
// -------------------------
// Extra path info decoding:
// -------------------------
if( ! isset( $resolve_extra_path ) ) { $resolve_extra_path = true; }
if( $resolve_extra_path )
{
// Check and Remove blog base URI from ReqPath:
$blog_baseuri = substr( $Blog->get('baseurl'), strlen( $Blog->get('baseurlroot') ) );
$Debuglog->add( 'blog_baseuri: "'.$blog_baseuri.'"', 'params' );
if( ($pos = strpos( $ReqPath, $blog_baseuri )) !== false )
{ // note: $pos will typically be 0
$path_string = substr( $ReqPath, $pos+strlen( $blog_baseuri ) );
$Debuglog->add( 'Extra path info found! path_string=' . $path_string , 'params' );
//echo "path=[$path_string] ";
// Slice the path:
$path_split = explode( '/', $path_string, 20 );
// Remove empty slots:
$path_elements = array();
foreach( $path_split as $path_element )
{
if( !empty( $path_element ) )
{
$path_elements[] = $path_element;
}
}
// echo count( $path_elements );
$path_error = 0;
$i=0;
// echo $path_elements[$i];
if( isset( $path_elements[$i] ) && preg_match( '#.+\.php[0-9]?#', $path_elements[$i] ) ) // QUESTION: add "$" at the end of the pattern to avoid false matches?
{ // Ignore *.php
$i++;
$Debuglog->add( 'Ignoring *.php in extra path info' , 'params' );
}
if( isset( $path_elements[$i] ) && preg_match( '#^'.$Blog->get( 'stub' ).'(\.php)?$#', $path_elements[$i] ) )
{ // Ignore stub file
$i++;
$Debuglog->add( 'Ignoring stub file in extra path info' , 'params' );
}
// echo $path_elements[$i];
if( isset( $path_elements[$i] ) )
{
if( is_numeric( $path_elements[$i] ) )
{ // We'll consider this to be the year
$m = $path_elements[$i++];
$Debuglog->add( 'Setting year from extra path info. $m=' . $m , 'params' );
if( isset( $path_elements[$i] ) && is_numeric( $path_elements[$i] ) )
{ // We'll consider this to be the month
$m .= $path_elements[$i++];
$Debuglog->add( 'Setting month from extra path info. $m=' . $m , 'params' );
if( isset( $path_elements[$i] ) && is_numeric( $path_elements[$i] ) )
{ // We'll consider this to be the day
$m .= $path_elements[$i++];
$Debuglog->add( 'Setting day from extra path info. $m=' . $m , 'params' );
if( isset( $path_elements[$i] ) && (!empty( $path_elements[$i] )) )
{ // We'll consider this to be a ref to a post
// We are accessing a post by permalink
// Set a lot of defaults as if we had received a complex URL:
$m = '';
$more = 1; // Display the extended entries' text
$c = 1; // Display comments
$tb = 1; // Display trackbacks
$pb = 1; // Display pingbacks
if( preg_match( "#^p([0-9]+)$#", $path_elements[$i], $req_post ) )
{ // The last param is of the form p000
// echo 'post number';
$p = $req_post[1]; // Post to display
}
else
{ // Last param is a string, we'll consider this to be a post urltitle
$title = $path_elements[$i];
// echo 'post title : ', $title;
}
}
}
}
elseif( isset( $path_elements[$i] ) && substr( $path_elements[$i], 0, 1 ) == 'w' )
{ // We consider this a week number
$w = substr( $path_elements[$i], 1, 2 );
}
}
else
{ // We did not get a number/year...
$path_error = 404;
}
}
if( $path_error == 404 )
{ // The request points to something we won't be able to resolve:
// First check, if it's an old-style backoffice-Path (from a redirect-everything non-existing to index.php mod_rewrite rule):
if( strpos( $ReqPath, '/admin/' ) === 0 )
{
// Redirect to admin url and pass request_uri as path_info, so it can be resolved by admin.php to the right menu entry:
header( 'Location: '.$admin_url.'/'.substr($ReqURI, 7) );
exit;
}
require $view_path.'errors/_404_not_found.page.php'; // error & exit
}
}
}
if( (!empty($p)) || (!empty($title)) || (!empty($preview)) )
{ // We are going to display a single post
$disp = 'single';
}
if( empty( $disp ) )
{ // default display:
$disp = 'posts';
}
if( ($disp == 'posts') || ($disp == 'single') )
{ // If we are going to display posts and not something special...
// On single post requests, check if we're on the right blog!
if( $redirect_to_postblog && ( $disp == 'single' ) && ! $preview )
{ // Yes we need to check.
if( !empty($p) )
$Item = & $ItemCache->get_by_ID( $p, false );
else
$Item = & $ItemCache->get_by_urltitle( $title, false );
if( ($Item !== false) && ($Item->blog_ID != $blog) )
{ // We're on the wrong blog (probably an old permalink) let's redirect
$new_permalink = $Item->get_permanent_url( '', '', false, '&' );
header ("Location: $new_permalink");
exit();
}
}
// Note: even if we request the same post, the following will do more restrictions (dates, etc.)
// TODO: There's a bug here with using $catsel (instead of $cat_array), which I've reported to dev-ML (don't remember). Francois, please look into it.
$MainList = & new ItemList(
$blog, $show_statuses, $p, $m, $w, $cat, $catsel, $author, $order,
$orderby, $posts, $paged, $poststart, $postend, $s, $sentence, $exact,
$preview, $unit, $timestamp_min, $timestamp_max, $title, $dstart );
$MainList->get_max_paged();
// Old style globals for category.funcs:
$postIDlist = & $MainList->postIDlist;
$postIDarray = & $MainList->postIDarray;
}
// Default display params:
// Displaying of blog list on templates?
if( !isset($display_blog_list) )
{ // If not already set in stub:
$display_blog_list = $Blog->get('disp_bloglist');
}
/*
* Now, we'll jump to displaying!
*/
// Trigger plugin event:
$Plugins->trigger_event( 'BeforeBlogDisplay' );
// Check if a temporary skin has been requested (used for RSS syndication for example):
if( !empty($tempskin) )
{
// This will be handled like any other skin, except that it will not be stored in a cookie:
$skin = $tempskin;
$default_skin = '_rss'; // That's gonna be the fallback for now.
// TODO [post-phoenix]: decide when or when not you are allowed to override a 'force_skin' directive,
// and when or when not you are allowed to fall back to $default_skin.
}
// Let's check if a skin has been forced in the stub file:
// Note: URL skin requests are handled with param() 20 lines below
// Note: with "register_globals = On" this may be set from URL.. (in which case the code 20 line sbelow becomes useless)
// blueyed>> You've said that it's not security issue etc.. but I still would init $skin in /conf/_advanced.php and use empty() here.
if( !isset( $skin ) )
{ // No skin forced in stub (not even '' for no-skin)...
$Debuglog->add( 'No skin forced.', 'skin' );
// We're going to need a default skin:
if( ( !isset( $default_skin ) ) // No default skin forced in stub
|| ( !skin_exists( $default_skin ) ) ) // Or the forced default does not exist
{ // Use default from the database
$default_skin = $Blog->get('default_skin');
}
if( !skin_exists( $default_skin ) || empty( $default_skin ) )
{ // blog's default skin does not exist
// Because a lot of bloggers will set themseleves a cookie and delete the default skin,
// we have to make this fool proof extra checking!
printf( T_('The default skin [%s] set for blog [%s] does not exist. It must be properly set in the <a %s>blog properties</a> or properly overriden in a stub file. Contact the <a %s>webmaster</a>...'), $default_skin , $Blog->dget('shortname'), 'href="'.$admin_url.'?ctrl=collections&action=edit&blog='.$Blog->ID.'"', 'href="mailto:'.$admin_email.'"');
debug_die();
}
$Debuglog->add( '$default_skin = '.$default_skin, 'skin' );
if( $Blog->get('force_skin') )
{ // Blog params tell us to force the use of default skin
$skin = $default_skin;
$Debuglog->add( 'Forced skin: '.$skin, 'skin' );
}
else
{ // Get the saved skin in cookie or default:
$Request->param( $cookie_state, 'string', $default_skin, false, true ); // override (in case there has been "param($cookie_state)" before, which set it already to '')
$Debuglog->add( 'Skin after looking at cookie: '.$$cookie_state, 'skin' );
// Get skin by params or default to cookie
// (if cookie was not set, the $$cookie_state contains default skin!)
$Request->param( 'skin', 'string', $$cookie_state );
$Debuglog->add( 'Skin after looking at params: '.$skin, 'skin' );
}
}
// At this point $skin holds the name of the skin we want to use, or '' for no skin!
// check to see if we want to display the popup or the main template
$Request->param( 'template', 'string', 'main', true );
if( !empty( $skin ) )
{ // We want to display now:
if( empty( $tempskin )
&& ( !empty($_GET['skin']) || !empty($_POST['skin'] ) ) )
{ // We have just asked for a skin change explicitely
// Set a cookie to remember it:
// Including config and functions files ??
if( ! setcookie( $cookie_state, $skin, $cookie_expires, $Blog->get('cookie_path'), $Blog->get('cookie_domain')) )
{ // This damn failed !
echo "setcookie failed!";
}
}
if( ereg( '([^-A-Za-z0-9._]|\.\.)', $skin ) )
{
// echo ("Invalid skin name!");
$skin = $default_skin;
}
elseif( !skin_exists($skin) )
{
// echo "Oops, no such skin!";
$skin = $default_skin;
}
// TODO: sanitize $template and allow any request on _xxx.tpl.php or sth like that.
if( $template == 'popup' )
{ // Do the popup display
require( get_path( 'skins' ).$skin.'/_popup.php' );
}
else
{ // Do the main display
require( get_path( 'skins' ).$skin.'/_main.php' );
}
}
else
{ // we don't want to use a skin
if( $template == 'popup' )
{ // Do the popup display
require( get_path( 'skins' ).'_popup.php' );
exit();
}
$Debuglog->add( 'No skin or popup requested.', 'skin' );
// If we end up here the blog file should be a full template, not just a stub...
}
/*
nolog */
?>

Multilingual multiuser multiblog engine

Source for file _blog_main.inc.php

Packages