| 1 | <?php
 | 
|---|
| 2 | /**
 | 
|---|
| 3 | *
 | 
|---|
| 4 | * @package phpBB3
 | 
|---|
| 5 | * @version $Id$
 | 
|---|
| 6 | * @copyright (c) 2005 phpBB Group
 | 
|---|
| 7 | * @license http://opensource.org/licenses/gpl-license.php GNU Public License
 | 
|---|
| 8 | *
 | 
|---|
| 9 | * Minimum Requirement: PHP 4.3.3
 | 
|---|
| 10 | */
 | 
|---|
| 11 | 
 | 
|---|
| 12 | /**
 | 
|---|
| 13 | */
 | 
|---|
| 14 | if (!defined('IN_PHPBB'))
 | 
|---|
| 15 | {
 | 
|---|
| 16 |         exit;
 | 
|---|
| 17 | }
 | 
|---|
| 18 | 
 | 
|---|
| 19 | $starttime = explode(' ', microtime());
 | 
|---|
| 20 | $starttime = $starttime[1] + $starttime[0];
 | 
|---|
| 21 | 
 | 
|---|
| 22 | // Report all errors, except notices and deprecation messages
 | 
|---|
| 23 | if (!defined('E_DEPRECATED'))
 | 
|---|
| 24 | {
 | 
|---|
| 25 |         define('E_DEPRECATED', 8192);
 | 
|---|
| 26 | }
 | 
|---|
| 27 | error_reporting(E_ALL ^ E_NOTICE ^ E_DEPRECATED);
 | 
|---|
| 28 | 
 | 
|---|
| 29 | /*
 | 
|---|
| 30 | * Remove variables created by register_globals from the global scope
 | 
|---|
| 31 | * Thanks to Matt Kavanagh
 | 
|---|
| 32 | */
 | 
|---|
| 33 | function deregister_globals()
 | 
|---|
| 34 | {
 | 
|---|
| 35 |         $not_unset = array(
 | 
|---|
| 36 |                 'GLOBALS'       => true,
 | 
|---|
| 37 |                 '_GET'          => true,
 | 
|---|
| 38 |                 '_POST'         => true,
 | 
|---|
| 39 |                 '_COOKIE'       => true,
 | 
|---|
| 40 |                 '_REQUEST'      => true,
 | 
|---|
| 41 |                 '_SERVER'       => true,
 | 
|---|
| 42 |                 '_SESSION'      => true,
 | 
|---|
| 43 |                 '_ENV'          => true,
 | 
|---|
| 44 |                 '_FILES'        => true,
 | 
|---|
| 45 |                 'phpEx'         => true,
 | 
|---|
| 46 |                 'phpbb_root_path'       => true
 | 
|---|
| 47 |         );
 | 
|---|
| 48 | 
 | 
|---|
| 49 |         // Not only will array_merge and array_keys give a warning if
 | 
|---|
| 50 |         // a parameter is not an array, array_merge will actually fail.
 | 
|---|
| 51 |         // So we check if _SESSION has been initialised.
 | 
|---|
| 52 |         if (!isset($_SESSION) || !is_array($_SESSION))
 | 
|---|
| 53 |         {
 | 
|---|
| 54 |                 $_SESSION = array();
 | 
|---|
| 55 |         }
 | 
|---|
| 56 | 
 | 
|---|
| 57 |         // Merge all into one extremely huge array; unset this later
 | 
|---|
| 58 |         $input = array_merge(
 | 
|---|
| 59 |                 array_keys($_GET),
 | 
|---|
| 60 |                 array_keys($_POST),
 | 
|---|
| 61 |                 array_keys($_COOKIE),
 | 
|---|
| 62 |                 array_keys($_SERVER),
 | 
|---|
| 63 |                 array_keys($_SESSION),
 | 
|---|
| 64 |                 array_keys($_ENV),
 | 
|---|
| 65 |                 array_keys($_FILES)
 | 
|---|
| 66 |         );
 | 
|---|
| 67 | 
 | 
|---|
| 68 |         foreach ($input as $varname)
 | 
|---|
| 69 |         {
 | 
|---|
| 70 |                 if (isset($not_unset[$varname]))
 | 
|---|
| 71 |                 {
 | 
|---|
| 72 |                         // Hacking attempt. No point in continuing unless it's a COOKIE
 | 
|---|
| 73 |                         if ($varname !== 'GLOBALS' || isset($_GET['GLOBALS']) || isset($_POST['GLOBALS']) || isset($_SERVER['GLOBALS']) || isset($_SESSION['GLOBALS']) || isset($_ENV['GLOBALS']) || isset($_FILES['GLOBALS']))
 | 
|---|
| 74 |                         {
 | 
|---|
| 75 |                                 exit;
 | 
|---|
| 76 |                         }
 | 
|---|
| 77 |                         else
 | 
|---|
| 78 |                         {
 | 
|---|
| 79 |                                 $cookie = &$_COOKIE;
 | 
|---|
| 80 |                                 while (isset($cookie['GLOBALS']))
 | 
|---|
| 81 |                                 {
 | 
|---|
| 82 |                                         foreach ($cookie['GLOBALS'] as $registered_var => $value)
 | 
|---|
| 83 |                                         {
 | 
|---|
| 84 |                                                 if (!isset($not_unset[$registered_var]))
 | 
|---|
| 85 |                                                 {
 | 
|---|
| 86 |                                                         unset($GLOBALS[$registered_var]);
 | 
|---|
| 87 |                                                 }
 | 
|---|
| 88 |                                         }
 | 
|---|
| 89 |                                         $cookie = &$cookie['GLOBALS'];
 | 
|---|
| 90 |                                 }
 | 
|---|
| 91 |                         }
 | 
|---|
| 92 |                 }
 | 
|---|
| 93 | 
 | 
|---|
| 94 |                 unset($GLOBALS[$varname]);
 | 
|---|
| 95 |         }
 | 
|---|
| 96 | 
 | 
|---|
| 97 |         unset($input);
 | 
|---|
| 98 | }
 | 
|---|
| 99 | 
 | 
|---|
| 100 | // If we are on PHP >= 6.0.0 we do not need some code
 | 
|---|
| 101 | if (version_compare(PHP_VERSION, '6.0.0-dev', '>='))
 | 
|---|
| 102 | {
 | 
|---|
| 103 |         /**
 | 
|---|
| 104 |         * @ignore
 | 
|---|
| 105 |         */
 | 
|---|
| 106 |         define('STRIP', false);
 | 
|---|
| 107 | }
 | 
|---|
| 108 | else
 | 
|---|
| 109 | {
 | 
|---|
| 110 |         @set_magic_quotes_runtime(0);
 | 
|---|
| 111 | 
 | 
|---|
| 112 |         // Be paranoid with passed vars
 | 
|---|
| 113 |         if (@ini_get('register_globals') == '1' || strtolower(@ini_get('register_globals')) == 'on' || !function_exists('ini_get'))
 | 
|---|
| 114 |         {
 | 
|---|
| 115 |                 deregister_globals();
 | 
|---|
| 116 |         }
 | 
|---|
| 117 | 
 | 
|---|
| 118 |         define('STRIP', (get_magic_quotes_gpc()) ? true : false);
 | 
|---|
| 119 | }
 | 
|---|
| 120 | 
 | 
|---|
| 121 | if (defined('IN_CRON'))
 | 
|---|
| 122 | {
 | 
|---|
| 123 |         $phpbb_root_path = dirname(__FILE__) . DIRECTORY_SEPARATOR;
 | 
|---|
| 124 | }
 | 
|---|
| 125 | 
 | 
|---|
| 126 | if (!file_exists($phpbb_root_path . 'config.' . $phpEx))
 | 
|---|
| 127 | {
 | 
|---|
| 128 |         die("<p>The config.$phpEx file could not be found.</p><p><a href=\"{$phpbb_root_path}install/index.$phpEx\">Click here to install phpBB</a></p>");
 | 
|---|
| 129 | }
 | 
|---|
| 130 | 
 | 
|---|
| 131 | require($phpbb_root_path . 'config.' . $phpEx);
 | 
|---|
| 132 | 
 | 
|---|
| 133 | if (!defined('PHPBB_INSTALLED'))
 | 
|---|
| 134 | {
 | 
|---|
| 135 |         // Redirect the user to the installer
 | 
|---|
| 136 |         // We have to generate a full HTTP/1.1 header here since we can't guarantee to have any of the information
 | 
|---|
| 137 |         // available as used by the redirect function
 | 
|---|
| 138 |         $server_name = (!empty($_SERVER['HTTP_HOST'])) ? strtolower($_SERVER['HTTP_HOST']) : ((!empty($_SERVER['SERVER_NAME'])) ? $_SERVER['SERVER_NAME'] : getenv('SERVER_NAME'));
 | 
|---|
| 139 |         $server_port = (!empty($_SERVER['SERVER_PORT'])) ? (int) $_SERVER['SERVER_PORT'] : (int) getenv('SERVER_PORT');
 | 
|---|
| 140 |         $secure = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') ? 1 : 0;
 | 
|---|
| 141 | 
 | 
|---|
| 142 |         $script_name = (!empty($_SERVER['PHP_SELF'])) ? $_SERVER['PHP_SELF'] : getenv('PHP_SELF');
 | 
|---|
| 143 |         if (!$script_name)
 | 
|---|
| 144 |         {
 | 
|---|
| 145 |                 $script_name = (!empty($_SERVER['REQUEST_URI'])) ? $_SERVER['REQUEST_URI'] : getenv('REQUEST_URI');
 | 
|---|
| 146 |         }
 | 
|---|
| 147 | 
 | 
|---|
| 148 |         // Replace any number of consecutive backslashes and/or slashes with a single slash
 | 
|---|
| 149 |         // (could happen on some proxy setups and/or Windows servers)
 | 
|---|
| 150 |         $script_path = trim(dirname($script_name)) . '/install/index.' . $phpEx;
 | 
|---|
| 151 |         $script_path = preg_replace('#[\\\\/]{2,}#', '/', $script_path);
 | 
|---|
| 152 | 
 | 
|---|
| 153 |         $url = (($secure) ? 'https://' : 'http://') . $server_name;
 | 
|---|
| 154 | 
 | 
|---|
| 155 |         if ($server_port && (($secure && $server_port <> 443) || (!$secure && $server_port <> 80)))
 | 
|---|
| 156 |         {
 | 
|---|
| 157 |                 // HTTP HOST can carry a port number...
 | 
|---|
| 158 |                 if (strpos($server_name, ':') === false)
 | 
|---|
| 159 |                 {
 | 
|---|
| 160 |                         $url .= ':' . $server_port;
 | 
|---|
| 161 |                 }
 | 
|---|
| 162 |         }
 | 
|---|
| 163 | 
 | 
|---|
| 164 |         $url .= $script_path;
 | 
|---|
| 165 |         header('Location: ' . $url);
 | 
|---|
| 166 |         exit;
 | 
|---|
| 167 | }
 | 
|---|
| 168 | 
 | 
|---|
| 169 | if (defined('DEBUG_EXTRA'))
 | 
|---|
| 170 | {
 | 
|---|
| 171 |         $base_memory_usage = 0;
 | 
|---|
| 172 |         if (function_exists('memory_get_usage'))
 | 
|---|
| 173 |         {
 | 
|---|
| 174 |                 $base_memory_usage = memory_get_usage();
 | 
|---|
| 175 |         }
 | 
|---|
| 176 | }
 | 
|---|
| 177 | 
 | 
|---|
| 178 | // Load Extensions
 | 
|---|
| 179 | // dl() is deprecated and disabled by default as of PHP 5.3.
 | 
|---|
| 180 | if (!empty($load_extensions) && function_exists('dl'))
 | 
|---|
| 181 | {
 | 
|---|
| 182 |         $load_extensions = explode(',', $load_extensions);
 | 
|---|
| 183 | 
 | 
|---|
| 184 |         foreach ($load_extensions as $extension)
 | 
|---|
| 185 |         {
 | 
|---|
| 186 |                 @dl(trim($extension));
 | 
|---|
| 187 |         }
 | 
|---|
| 188 | }
 | 
|---|
| 189 | 
 | 
|---|
| 190 | // Include files
 | 
|---|
| 191 | require($phpbb_root_path . 'includes/acm/acm_' . $acm_type . '.' . $phpEx);
 | 
|---|
| 192 | require($phpbb_root_path . 'includes/cache.' . $phpEx);
 | 
|---|
| 193 | require($phpbb_root_path . 'includes/template.' . $phpEx);
 | 
|---|
| 194 | require($phpbb_root_path . 'includes/session.' . $phpEx);
 | 
|---|
| 195 | require($phpbb_root_path . 'includes/auth.' . $phpEx);
 | 
|---|
| 196 | 
 | 
|---|
| 197 | require($phpbb_root_path . 'includes/functions.' . $phpEx);
 | 
|---|
| 198 | require($phpbb_root_path . 'includes/functions_content.' . $phpEx);
 | 
|---|
| 199 | 
 | 
|---|
| 200 | require($phpbb_root_path . 'includes/constants.' . $phpEx);
 | 
|---|
| 201 | require($phpbb_root_path . 'includes/db/' . $dbms . '.' . $phpEx);
 | 
|---|
| 202 | require($phpbb_root_path . 'includes/utf/utf_tools.' . $phpEx);
 | 
|---|
| 203 | 
 | 
|---|
| 204 | // Set PHP error handler to ours
 | 
|---|
| 205 | set_error_handler(defined('PHPBB_MSG_HANDLER') ? PHPBB_MSG_HANDLER : 'msg_handler');
 | 
|---|
| 206 | 
 | 
|---|
| 207 | // Instantiate some basic classes
 | 
|---|
| 208 | $user           = new user();
 | 
|---|
| 209 | $auth           = new auth();
 | 
|---|
| 210 | $template       = new template();
 | 
|---|
| 211 | $cache          = new cache();
 | 
|---|
| 212 | $db                     = new $sql_db();
 | 
|---|
| 213 | 
 | 
|---|
| 214 | // Connect to DB
 | 
|---|
| 215 | $db->sql_connect($dbhost, $dbuser, $dbpasswd, $dbname, $dbport, false, defined('PHPBB_DB_NEW_LINK') ? PHPBB_DB_NEW_LINK : false);
 | 
|---|
| 216 | 
 | 
|---|
| 217 | // We do not need this any longer, unset for safety purposes
 | 
|---|
| 218 | unset($dbpasswd);
 | 
|---|
| 219 | 
 | 
|---|
| 220 | // Grab global variables, re-cache if necessary
 | 
|---|
| 221 | $config = $cache->obtain_config();
 | 
|---|
| 222 | 
 | 
|---|
| 223 | // Add own hook handler
 | 
|---|
| 224 | require($phpbb_root_path . 'includes/hooks/index.' . $phpEx);
 | 
|---|
| 225 | $phpbb_hook = new phpbb_hook(array('exit_handler', 'phpbb_user_session_handler', 'append_sid', array('template', 'display')));
 | 
|---|
| 226 | 
 | 
|---|
| 227 | foreach ($cache->obtain_hooks() as $hook)
 | 
|---|
| 228 | {
 | 
|---|
| 229 |         @include($phpbb_root_path . 'includes/hooks/' . $hook . '.' . $phpEx);
 | 
|---|
| 230 | }
 | 
|---|
| 231 | 
 | 
|---|
| 232 | ?>
 | 
|---|