348 lines
7.6 KiB
PHP
348 lines
7.6 KiB
PHP
<?php
|
|
|
|
@ignore_user_abort(TRUE);
|
|
|
|
@set_magic_quotes_runtime(0);
|
|
|
|
header("Content-Type: text/html;charset=utf-8");
|
|
|
|
if (!defined("_FCORE")) die('non autorise');
|
|
|
|
if (is_file(_FCORE."ban.xlist"))
|
|
{
|
|
$banlist = file(_FCORE."ban.xlist",FILE_IGNORE_NEW_LINES|FILE_SKIP_EMPTY_LINES);
|
|
if(in_array($_SERVER['REMOTE_ADDR'], $banlist)) die('banni');
|
|
}
|
|
else die('blacklist introuvable');
|
|
|
|
$config = array();
|
|
|
|
function load_conf($file,&$config)
|
|
{
|
|
if(is_file($file))
|
|
{
|
|
$fconfig = file($file,FILE_IGNORE_NEW_LINES|FILE_SKIP_EMPTY_LINES);
|
|
|
|
$exp = '#^(\\w{3,30})(\\[(\\w{0,30})\\])?\\s?\:\\s?"(.{0,500})"$#ui';
|
|
foreach ($fconfig as $conf_value)
|
|
{
|
|
if (preg_match($exp,trim($conf_value)))
|
|
{
|
|
preg_match_all($exp,trim($conf_value),$m);
|
|
|
|
if(!empty($m[3][0]) && !empty($m[2][0]))
|
|
{
|
|
$config[$m[1][0]][$m[3][0]] = $m[4][0];
|
|
}
|
|
elseif(empty($m[3][0]) && !empty($m[2][0]))
|
|
{
|
|
$config[$m[1][0]][] = $m[4][0];
|
|
}
|
|
else
|
|
{
|
|
$config[$m[1][0]] = $m[4][0];
|
|
}
|
|
}
|
|
else die("Fichier de configuration incorrect!");
|
|
}
|
|
}
|
|
else die("fichier de configuration introuvable!");
|
|
}
|
|
|
|
load_conf(_FCORE."config.xconf",$config);
|
|
|
|
if(defined('_PROFILE')) load_conf(_FCORE."profiles/"._PROFILE.".xconf",$config);
|
|
|
|
if($config['actif']!='1') die('desactive');
|
|
|
|
if($config['log_error'] == '1')
|
|
{
|
|
@ini_set('log_errors','on');
|
|
@ini_set('error_log',_FCORE.'/logs/php/');
|
|
}
|
|
|
|
if($config['hide_error'] == '1')
|
|
{
|
|
@ini_set('display_errors','off');
|
|
@ini_set('track_errors','on');
|
|
}
|
|
else
|
|
{
|
|
@error_reporting(E_ALL);
|
|
}
|
|
|
|
setLocale(LC_TIME, $config['locales']);
|
|
|
|
if(!is_writable(_FCORE."logs/")) die('log non accessible en ecriture');
|
|
|
|
function file_log($message,$level = 0,$dir = NULL,$file = NULL)
|
|
{
|
|
$dir = empty($dir) ? _FCORE."logs" : $dir;
|
|
$file = empty($file) ? strftime('%d-%m-%Y').".xlog" : $file;
|
|
|
|
if($fichier = @fopen("$dir/$file",'a+'))
|
|
{
|
|
switch($level)
|
|
{
|
|
default:
|
|
case 0: $level = 'MESSAGE'; break;
|
|
case 1: $level = 'AVERTISSEMENT'; break;
|
|
case 2: $level = 'ERREUR'; break;
|
|
}
|
|
$time = strftime('%H:%M:%S');
|
|
$req = isset($_SERVER['REQUEST_METHOD']) ? $_SERVER['REQUEST_METHOD']: '';
|
|
$arg = isset($_SERVER['REQUEST_URI']) ? $_SERVER['REQUEST_URI']: '';
|
|
$remote = isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR']: '';
|
|
$ua = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT']: '';
|
|
$referer = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER']: '';
|
|
$line = "[$time] $level : $message [$remote] [$req] [$arg] [$ua] [$referer]\r\n";
|
|
fwrite($fichier,$line);
|
|
fclose($fichier);
|
|
}
|
|
else die('log non accessible en ecriture');
|
|
}
|
|
|
|
function hexstr($var)
|
|
{
|
|
$var = pack('H*',$var);
|
|
return $var;
|
|
}
|
|
|
|
function strhex($var)
|
|
{
|
|
$var = array_shift(unpack('H*',$var));
|
|
return $var;
|
|
}
|
|
|
|
function bitstr($var)
|
|
{
|
|
$r = NULL;
|
|
|
|
for($i = 0; $i < strlen($var); $i += 8)
|
|
{
|
|
$r .= chr(bindec(substr($var,$i,8)));
|
|
}
|
|
return $r;
|
|
}
|
|
|
|
function bithex($var)
|
|
{
|
|
$r = NULL;
|
|
|
|
for($i = 0; $i < strlen($var); $i += 4)
|
|
{
|
|
$r .= base_convert(substr($var,$i,4),2,16);
|
|
}
|
|
return $r;
|
|
}
|
|
|
|
function cxor($msg,$cle)
|
|
{
|
|
$xor = NULL;
|
|
|
|
for($i = 0; $i < strlen($msg);$i++)
|
|
{
|
|
$xor .= substr($msg,$i,1) ^ substr($cle,$i % strlen($cle),1);
|
|
}
|
|
return $xor;
|
|
}
|
|
|
|
function random($l=128)
|
|
{
|
|
$r = NULL;
|
|
for($i = 1;$i <= $l/128 && $l/128 <= 32; $i++)
|
|
{
|
|
$var = time().microtime().mt_rand().md5(time()).md5(microtime()).md5(mt_rand()).sha1(time()).sha1(microtime()).sha1(mt_rand());
|
|
$r .= md5(cxor(hexstr(md5($var)),hexstr(sha1($var))));
|
|
}
|
|
|
|
return $r;
|
|
}
|
|
|
|
function hash_var($var,$algo = NULL)
|
|
{
|
|
if(function_exists('hash'))
|
|
{
|
|
$algo = empty($algo) ? 'whirlpool' : $algo;
|
|
|
|
if(in_array($algo,hash_algos()))
|
|
{
|
|
$hash = hash($algo, $var);
|
|
}
|
|
else
|
|
{
|
|
$hash = md5($var);
|
|
}
|
|
}
|
|
elseif($algo == 'sha1')
|
|
{
|
|
$hash = sha1($var);
|
|
}
|
|
else
|
|
{
|
|
$hash = md5($var);
|
|
}
|
|
|
|
return $hash;
|
|
}
|
|
|
|
function decode_ip($int_ip)
|
|
{
|
|
$hexipbang = explode('.', chunk_split($int_ip, 2, '.'));
|
|
return hexdec($hexipbang[0]). '.' . hexdec($hexipbang[1]) . '.' . hexdec($hexipbang[2]) . '.' . hexdec($hexipbang[3]);
|
|
}
|
|
|
|
function encode_ip($dotquad_ip=FALSE)
|
|
{
|
|
if(!$dotquad_ip)
|
|
{
|
|
$dotquad_ip = $_SERVER['REMOTE_ADDR'];
|
|
}
|
|
$ip_sep = explode('.', $dotquad_ip);
|
|
return sprintf('%02x%02x%02x%02x', $ip_sep[0], $ip_sep[1], $ip_sep[2], $ip_sep[3]);
|
|
}
|
|
|
|
function gpc($name,$method='get')
|
|
{
|
|
switch($method)
|
|
{
|
|
default:
|
|
case 'get': $var = isset($_GET[$name])?$_GET[$name]:NULL; break;
|
|
case 'post': $var = isset($_POST[$name])?$_POST[$name]:NULL; break;
|
|
case 'cookie': $var = isset($_COOKIE[$name])?$_COOKIE[$name]:NULL; break;
|
|
}
|
|
|
|
if(isset($var) && $var!=='')
|
|
{
|
|
$var = get_magic_quotes_gpc()?stripslashes($var):$var;
|
|
return $var;
|
|
}
|
|
else return FALSE;
|
|
}
|
|
|
|
function cookie($name,$value,$time=NULL)
|
|
{
|
|
global $config;
|
|
|
|
if(empty($time))
|
|
{
|
|
$time = time()+$config['session_time'];
|
|
}
|
|
|
|
setcookie($name,$value,$time);
|
|
}
|
|
|
|
function url($string,$external=FALSE)
|
|
{
|
|
global $config;
|
|
|
|
if($external) return htmlspecialchars($string);
|
|
|
|
if($config['url_rewriting'] != '1')
|
|
{
|
|
$masque = $config['url_masque'];
|
|
$replace = $config['url_replace'];
|
|
$var = preg_replace($masque,$replace,$string);
|
|
return htmlspecialchars($var);
|
|
}
|
|
else return htmlspecialchars($string);
|
|
}
|
|
|
|
function bbcode($var,$level=0)
|
|
{
|
|
global $config;
|
|
|
|
switch($level)
|
|
{
|
|
case 1:
|
|
$pattern[] = '#\\[code\\](.+?)\\[/code\\]#us';
|
|
$replace[] = '<pre>$1</pre>';
|
|
|
|
$pattern[] = '#\\[size=([1-3][0-9])\\](.+?)\\[/size\\]#us';
|
|
$replace[] = '<span style="font-size: $1px;">$2</span>';
|
|
|
|
$pattern[] = '#\\[color=(aqua|black|blue|fuchsia|gray|green|lime|maroon|navy|olive|purple|red|silver|teal|white|yellow|\\#[0-9A-Fa-f]{6})\\](.+?)\\[/color\\]#us';
|
|
$replace[] = '<span style="color: $1;">$2</span>';
|
|
|
|
$pattern[] = '#\\[img\\]http(s)?://([a-zA-Z0-9_/.%*+~,;:\\#-]+)\\[/img\\]#u';
|
|
$replace[] = '<img src="http$1://$2" alt="$2" />';
|
|
|
|
default:
|
|
case 0:
|
|
$pattern[] = '#\\[url=(?:http(s)?://)?([a-zA-Z0-9_/.%*+~,;:?&=\\#-]+)\\](.+?)\\[/url\\]#u';
|
|
$replace[] = '<a href="http$1://$2">$3</a>';
|
|
|
|
$pattern[] = '#\\[url\\](?:http(s)?://)?([a-zA-Z0-9_/.%*+~,;:?&=\\#-]+)\\[/url\\]#u';
|
|
$replace[] = '<a href="http$1://$2">$2</a>';
|
|
|
|
$pattern[] = '#\\[cite\\](.+?)\\[/cite\\]#us';
|
|
$replace[] = '<q>$1</q>';
|
|
|
|
$pattern[] = '#\\[u\\](.+?)\\[/u\\]#us';
|
|
$replace[] = '<ins>$1</ins>';
|
|
|
|
$pattern[] = '#\\[i\\](.+?)\\[/i\\]#us';
|
|
$replace[] = '<em>$1</em>';
|
|
|
|
$pattern[] = '#\\[b\\](.+?)\\[/b\\]#us';
|
|
$replace[] = '<strong>$1</strong>';
|
|
|
|
foreach($config['smiley'] as $keys => $values)
|
|
{
|
|
$pattern[] = '#'.preg_quote($values).'#u';
|
|
$replace[] = '<img src="'.$config['smiley_dir'].'/'.$keys.'.gif" alt="'.$keys.'" />';
|
|
}
|
|
}
|
|
|
|
$pattern = array_reverse($pattern);
|
|
$replace = array_reverse($replace);
|
|
|
|
$var = preg_replace($pattern,$replace,$var);
|
|
return $var;
|
|
}
|
|
|
|
require_once(_FCORE."access.php");
|
|
|
|
if($config['db_crypt'] == '1')
|
|
{
|
|
foreach($var___db as $key => $value)
|
|
{
|
|
$var___db[$key]['password'] = cxor(base64_decode($value['password']),hash_var($config['db_cle']));
|
|
}
|
|
}
|
|
|
|
define('SMARTY_DIR',_FCORE.'smarty/');
|
|
|
|
require_once(SMARTY_DIR."Smarty.class.php");
|
|
|
|
switch($config['db_type'])
|
|
{
|
|
case 'mysql' :
|
|
case 'postgresql' :
|
|
|
|
$db = $config['db_type'];
|
|
require_once(_FCORE."bdd.$db.class.php");
|
|
require_once(_FCORE."session.$db.class.php");
|
|
}
|
|
|
|
define('_TEMPLATE_DIR',_FCORE.$config['template']['dir']);
|
|
define('_TEMPLATE_COMPILE',_FCORE.$config['template']['compile']);
|
|
define('_TEMPLATE_CONFIG',_FCORE.$config['template']['config']);
|
|
define('_TEMPLATE_CACHE',_FCORE.$config['template']['cache']);
|
|
|
|
class Template extends Smarty
|
|
{
|
|
var $template_dir = _TEMPLATE_DIR;
|
|
var $compile_dir = _TEMPLATE_COMPILE;
|
|
var $config_dir = _TEMPLATE_CONFIG;
|
|
var $cache_dir = _TEMPLATE_CACHE;
|
|
}
|
|
|
|
function no_db()
|
|
{
|
|
global $config;
|
|
die($config['no_db_message']);
|
|
}
|
|
|
|
?>
|