1
<?php
2
/**
3
 * StatusNet - the distributed open-source microblogging tool
4
 * Copyright (C) 2008, 2009, StatusNet, Inc.
5
 *
6
 * This program is free software: you can redistribute it and/or modify
7
 * it under the terms of the GNU Affero General Public License as published by
8
 * the Free Software Foundation, either version 3 of the License, or
9
 * (at your option) any later version.
10
 *
11
 * This program is distributed in the hope that it will be useful,
12
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14
 * GNU Affero General Public License for more details.
15
 *
16
 * You should have received a copy of the GNU Affero General Public License
17
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
18
 *
19
 * @category StatusNet
20
 * @package  StatusNet
21
 * @author   Brenda Wallace <shiny@cpan.org>
22
 * @author   Christopher Vollick <psycotica0@gmail.com>
23
 * @author   CiaranG <ciaran@ciarang.com>
24
 * @author   Craig Andrews <candrews@integralblue.com>
25
 * @author   Evan Prodromou <evan@controlezvous.ca>
26
 * @author   Gina Haeussge <osd@foosel.net>
27
 * @author   Jeffery To <jeffery.to@gmail.com>
28
 * @author   Mike Cochrane <mikec@mikenz.geek.nz>
29
 * @author   Robin Millette <millette@controlyourself.ca>
30
 * @author   Sarven Capadisli <csarven@controlyourself.ca>
31
 * @author   Tom Adams <tom@holizz.com>
32
 *
33
 * @license  GNU Affero General Public License http://www.gnu.org/licenses/
34
 */
35
36
define('INSTALLDIR', dirname(__FILE__));
37
define('STATUSNET', true);
38
define('LACONICA', true); // compatibility
39
40
require_once INSTALLDIR . '/lib/common.php';
41
42
$user = null;
43
$action = null;
44
45
function getPath($req)
46
{
47
    if ((common_config('site', 'fancy') || !array_key_exists('PATH_INFO', $_SERVER))
48
        && array_key_exists('p', $req)
49
    ) {
50
        return $req['p'];
51
    } else if (array_key_exists('PATH_INFO', $_SERVER)) {
52
        $path = $_SERVER['PATH_INFO'];
53
        $script = $_SERVER['SCRIPT_NAME'];
54
        if (substr($path, 0, mb_strlen($script)) == $script) {
55
            return substr($path, mb_strlen($script));
56
        } else {
57
            return $path;
58
        }
59
    } else {
60
        return null;
61
    }
62
}
63
64
/**
65
 * logs and then displays error messages
66
 *
67
 * @return void
68
 */
69
function handleError($error)
70
{
71
    if ($error->getCode() == DB_DATAOBJECT_ERROR_NODATA) {
72
        return;
73
    }
74
75
    $logmsg = "PEAR error: " . $error->getMessage();
76
    if (common_config('site', 'logdebug')) {
77
        $logmsg .= " : ". $error->getDebugInfo();
78
    }
79
    // DB queries often end up with a lot of newlines; merge to a single line
80
    // for easier grepability...
81
    $logmsg = str_replace("\n", " ", $logmsg);
82
    common_log(LOG_ERR, $logmsg);
83
84
    // @fixme backtrace output should be consistent with exception handling
85
    if (common_config('site', 'logdebug')) {
86
        $bt = $error->getBacktrace();
87
        foreach ($bt as $n => $line) {
88
            common_log(LOG_ERR, formatBacktraceLine($n, $line));
89
        }
90
    }
91
    if ($error instanceof DB_DataObject_Error
92
        || $error instanceof DB_Error
93
    ) {
94
        $msg = sprintf(
95
            _(
96
                'The database for %s isn\'t responding correctly, '.
97
                'so the site won\'t work properly. '.
98
                'The site admins probably know about the problem, '.
99
                'but you can contact them at %s to make sure. '.
100
                'Otherwise, wait a few minutes and try again.'
101
            ),
102
            common_config('site', 'name'),
103
            common_config('site', 'email')
104
        );
105
    } else {
106
        $msg = _(
107
            'An important error occured, probably related to email setup. '.
108
            'Check logfiles for more info..'
109
        );
110
    }
111
112
    $dac = new DBErrorAction($msg, 500);
113
    $dac->showPage();
114
    exit(-1);
115
}
116
117
/**
118
 * Format a backtrace line for debug output roughly like debug_print_backtrace() does.
119
 * Exceptions already have this built in, but PEAR error objects just give us the array.
120
 *
121
 * @param int $n line number
122
 * @param array $line per-frame array item from debug_backtrace()
123
 * @return string
124
 */
125
function formatBacktraceLine($n, $line)
126
{
127
    $out = "#$n ";
128
    if (isset($line['class'])) $out .= $line['class'];
129
    if (isset($line['type'])) $out .= $line['type'];
130
    if (isset($line['function'])) $out .= $line['function'];
131
    $out .= '(';
132
    if (isset($line['args'])) {
133
        $args = array();
134
        foreach ($line['args'] as $arg) {
135
            // debug_print_backtrace seems to use var_export
136
            // but this gets *very* verbose!
137
            $args[] = gettype($arg);
138
        }
139
        $out .= implode(',', $args);
140
    }
141
    $out .= ')';
142
    $out .= ' called at [';
143
    if (isset($line['file'])) $out .= $line['file'];
144
    if (isset($line['line'])) $out .= ':' . $line['line'];
145
    $out .= ']';
146
    return $out;
147
}
148
149
function setupRW()
150
{
151
    global $config;
152
153
    static $alwaysRW = array('session', 'remember_me');
154
155
    // We ensure that these tables always are used
156
    // on the master DB
157
158
    $config['db']['database_rw'] = $config['db']['database'];
159
    $config['db']['ini_rw'] = INSTALLDIR.'/classes/statusnet.ini';
160
161
    foreach ($alwaysRW as $table) {
162
        $config['db']['table_'.$table] = 'rw';
163
    }
164
}
165
166
function checkMirror($action_obj, $args)
167
{
168
    global $config;
169
170
    if (common_config('db', 'mirror') && $action_obj->isReadOnly($args)) {
171
        if (is_array(common_config('db', 'mirror'))) {
172
            // "load balancing", ha ha
173
            $arr = common_config('db', 'mirror');
174
            $k = array_rand($arr);
175
            $mirror = $arr[$k];
176
        } else {
177
            $mirror = common_config('db', 'mirror');
178
        }
179
180
        // everyone else uses the mirror
181
182
        $config['db']['database'] = $mirror;
183
    }
184
}
185
186
function isLoginAction($action)
187
{
188
    static $loginActions =  array('login', 'recoverpassword', 'api', 'doc', 'register', 'publicxrds', 'otp', 'opensearch');
189
190
    $login = null;
191
192
    if (Event::handle('LoginAction', array($action, &$login))) {
193
        $login = in_array($action, $loginActions);
194
    }
195
196
    return $login;
197
}
198
199
function main()
200
{
201
    // fake HTTP redirects using lighttpd's 404 redirects
202
    if (strpos($_SERVER['SERVER_SOFTWARE'], 'lighttpd') !== false) {
203
        $_lighty_url = $base_url.$_SERVER['REQUEST_URI'];
204
        $_lighty_url = @parse_url($_lighty_url);
205
206
        if ($_lighty_url['path'] != '/index.php' && $_lighty_url['path'] != '/') {
207
            $_lighty_path = preg_replace('/^'.preg_quote(common_config('site', 'path')).'\//', '', substr($_lighty_url['path'], 1));
208
            $_SERVER['QUERY_STRING'] = 'p='.$_lighty_path;
209
            if ($_lighty_url['query']) {
210
                $_SERVER['QUERY_STRING'] .= '&'.$_lighty_url['query'];
211
            }
212
            parse_str($_lighty_url['query'], $_lighty_query);
213
            foreach ($_lighty_query as $key => $val) {
214
                $_GET[$key] = $_REQUEST[$key] = $val;
215
            }
216
            $_GET['p'] = $_REQUEST['p'] = $_lighty_path;
217
        }
218
    }
219
    $_SERVER['REDIRECT_URL'] = preg_replace("/\?.+$/", "", $_SERVER['REQUEST_URI']);
220
221
    // quick check for fancy URL auto-detection support in installer.
222
    if (isset($_SERVER['REDIRECT_URL']) && (preg_replace("/^\/$/", "", (dirname($_SERVER['REQUEST_URI']))) . '/check-fancy') === $_SERVER['REDIRECT_URL']) {
223
        die("Fancy URL support detection succeeded. We suggest you enable this to get fancy (pretty) URLs.");
224
    }
225
    global $user, $action;
226
227
    Snapshot::check();
228
229
    if (!_have_config()) {
230
        $msg = sprintf(
231
            _(
232
                "No configuration file found. Try running ".
233
                "the installation program first."
234
            )
235
        );
236
        $sac = new ServerErrorAction($msg);
237
        $sac->showPage();
238
        return;
239
    }
240
241
    // For database errors
242
243
    PEAR::setErrorHandling(PEAR_ERROR_CALLBACK, 'handleError');
244
245
    // Make sure RW database is setup
246
247
    setupRW();
248
249
    // XXX: we need a little more structure in this script
250
251
    // get and cache current user (may hit RW!)
252
253
    $user = common_current_user();
254
255
    // initialize language env
256
257
    common_init_language();
258
259
    $path = getPath($_REQUEST);
260
261
    $r = Router::get();
262
263
    $args = $r->map($path);
264
265
    if (!$args) {
266
        $cac = new ClientErrorAction(_('Unknown page'), 404);
267
        $cac->showPage();
268
        return;
269
    }
270
271
    $args = array_merge($args, $_REQUEST);
272
273
    Event::handle('ArgsInitialize', array(&$args));
274
275
    $action = $args['action'];
276
277
    if (!$action || !preg_match('/^[a-zA-Z0-9_-]*$/', $action)) {
278
        common_redirect(common_local_url('public'));
279
        return;
280
    }
281
282
    // If the site is private, and they're not on one of the "public"
283
    // parts of the site, redirect to login
284
285
    if (!$user && common_config('site', 'private')
286
        && !isLoginAction($action)
287
        && !preg_match('/rss$/', $action)
288
        && $action != 'robotstxt'
289
        && !preg_match('/^Api/', $action)) {
290
291
        // set returnto
292
        $rargs =& common_copy_args($args);
293
        unset($rargs['action']);
294
        if (common_config('site', 'fancy')) {
295
            unset($rargs['p']);
296
        }
297
        if (array_key_exists('submit', $rargs)) {
298
            unset($rargs['submit']);
299
        }
300
        foreach (array_keys($_COOKIE) as $cookie) {
301
            unset($rargs[$cookie]);
302
        }
303
        common_set_returnto(common_local_url($action, $rargs));
304
305
        common_redirect(common_local_url('login'));
306
        return;
307
    }
308
309
    $action_class = ucfirst($action).'Action';
310
311
    if (!class_exists($action_class)) {
312
        $cac = new ClientErrorAction(_('Unknown action'), 404);
313
        $cac->showPage();
314
    } else {
315
        $action_obj = new $action_class();
316
317
        checkMirror($action_obj, $args);
318
319
        try {
320
            if ($action_obj->prepare($args)) {
321
                $action_obj->handle($args);
322
            }
323
        } catch (ClientException $cex) {
324
            $cac = new ClientErrorAction($cex->getMessage(), $cex->getCode());
325
            $cac->showPage();
326
        } catch (ServerException $sex) { // snort snort guffaw
327
            $sac = new ServerErrorAction($sex->getMessage(), $sex->getCode(), $sex);
328
            $sac->showPage();
329
        } catch (Exception $ex) {
330
            $sac = new ServerErrorAction($ex->getMessage(), 500, $ex);
331
            $sac->showPage();
332
        }
333
    }
334
}
335
336
main();
337
338
// XXX: cleanup exit() calls or add an exit handler so
339
// this always gets called
340
341
Event::handle('CleanupPlugin');