X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=gosa-core%2Fhtml%2Fmain.php;h=c088754c0c7bf3ada17570e5a0ee3913fd8f454a;hb=43073ac4d0e6b18428c163774622e15629b4ffb5;hp=e459b6599bf03ba3f3b2ff9c2d271501013dbe56;hpb=c83030828a4b33bf18cd2e960b9a657aff0f9b44;p=gosa.git diff --git a/gosa-core/html/main.php b/gosa-core/html/main.php index e459b6599..c088754c0 100644 --- a/gosa-core/html/main.php +++ b/gosa-core/html/main.php @@ -1,21 +1,23 @@ ip){ new log("security","login","",array(),"main.php called with session which has a changed IP address.") ; header ("Location: logout.php"); exit; } -$config= session::get('config'); +$config= session::global_get('config'); $config->check_and_reload(); /* Enable compressed output */ -if (isset($config->data['MAIN']['COMPRESSED']) && preg_match('/^(true|on)$/i', $config->data['MAIN']['COMPRESSED'])){ +if ($config->get_cfg_value("sendCompressedOutput") == "true"){ ob_start("ob_gzhandler"); } /* Check for invalid sessions */ -if(session::get('_LAST_PAGE_REQUEST') == ""){ - session::set('_LAST_PAGE_REQUEST',time()); +if(session::global_get('_LAST_PAGE_REQUEST') == ""){ + session::global_set('_LAST_PAGE_REQUEST',time()); }else{ /* check GOsa.conf for defined session lifetime */ - if(isset($config->data['MAIN']['SESSION_LIFETIME'])){ - $max_life = $config->data['MAIN']['SESSION_LIFETIME']; - }else{ - $max_life = 60*60*2; - } + $max_life= $config->get_cfg_value("sessionLifetime", 60*60*2); /* get time difference between last page reload */ - $request_time = (time()- session::get('_LAST_PAGE_REQUEST')); + $request_time = (time()- session::global_get('_LAST_PAGE_REQUEST')); /* If page wasn't reloaded for more than max_life seconds * kill session @@ -89,40 +88,36 @@ if(session::get('_LAST_PAGE_REQUEST') == ""){ header ("Location: logout.php"); exit; } - session::set('_LAST_PAGE_REQUEST',time()); + session::global_set('_LAST_PAGE_REQUEST',time()); } @DEBUG (DEBUG_CONFIG, __LINE__, __FUNCTION__, __FILE__, $config->data, "config"); /* Set template compile directory */ -if (isset ($config->data['MAIN']['COMPILE'])){ - $smarty->compile_dir= $config->data['MAIN']['COMPILE']; -} else { - $smarty->compile_dir= '/var/spool/gosa/'; -} +$smarty->compile_dir= $config->get_cfg_value("templateCompileDirectory", '/var/spool/gosa'); /* Set default */ $reload_navigation = false; /* Set last initialised language to current, browser settings */ -if(!session::is_set('Last_init_lang')){ +if(!session::global_is_set('Last_init_lang')){ $reload_navigation = true; - session::set('Last_init_lang',get_browser_language()); + session::global_set('Last_init_lang',get_browser_language()); } /* If last language != current force navi reload */ $lang= get_browser_language(); -if(session::get('Last_init_lang',$lang)){ +if(session::global_get('Last_init_lang') != $lang){ $reload_navigation = true; } /* Language setup */ -session::set('Last_init_lang',$lang); +session::global_set('Last_init_lang',$lang); /* Preset current main base */ -if(!session::is_set('CurrentMainBase')){ - session::set('CurrentMainBase',get_base_from_people($ui->dn)); +if(!session::global_is_set('CurrentMainBase')){ + session::global_set('CurrentMainBase',get_base_from_people($ui->dn)); } putenv("LANGUAGE="); @@ -131,49 +126,63 @@ setlocale(LC_ALL, $lang); $GLOBALS['t_language']= $lang; $GLOBALS['t_gettext_message_dir'] = $BASE_DIR.'/locale/'; +/* Check if the config is up to date */ +$config->check_config_version(); + /* Set the text domain as 'messages' */ $domain = 'messages'; -bindtextdomain($domain, "$BASE_DIR/locale"); +bindtextdomain($domain, LOCALE_DIR); textdomain($domain); @DEBUG (DEBUG_TRACE, __LINE__, __FUNCTION__, __FILE__, $lang, "Setting language to"); /* Prepare plugin list */ -if (!session::is_set('plist')){ +if (!session::global_is_set('plist')){ /* Initially load all classes */ $class_list= get_declared_classes(); foreach ($class_mapping as $class => $path){ if (!in_array($class, $class_list)){ + if (is_readable("$BASE_DIR/$path")){ require_once("$BASE_DIR/$path"); + } else { + msg_dialog::display(_("Fatal error"), + sprintf(_("Cannot locate file '%s' - please run '%s' to fix this"), + "$BASE_DIR/$path", "update-gosa"), FATAL_ERROR_DIALOG); + exit; + } } } - - session::set('plist', new pluglist($config, $ui)); + + session::global_set('plist', new pluglist($config, $ui)); /* Load ocMapping into userinfo */ $tmp= new acl($config, NULL, $ui->dn); $ui->ocMapping= $tmp->ocMapping; - session::set('ui',$ui); + session::global_set('ui',$ui); } -$plist= session::get('plist'); +$plist= session::global_get('plist'); /* Check for register globals */ -if (isset($global_check) && $config->data['MAIN']['FORCEGLOBALS'] == 'true'){ - echo _("FATAL: Register globals is on. GOsa will refuse to login unless this is fixed by an administrator."); +if (isset($global_check) && $config->get_cfg_value("forceglobals") == "true"){ + msg_dialog::display( + _("PHP configuration"), + _("FATAL: Register globals is on. GOsa will refuse to login unless this is fixed by an administrator."), + FATAL_ERROR_DIALOG); + new log("security","login","",array(),"Register globals is on. For security reasons, this should be turned off.") ; session::destroy (); - exit (); + exit; } /* Check Plugin variable */ -if (session::is_set('plugin_dir')){ - $old_plugin_dir= session::get('plugin_dir'); +if (session::global_is_set('plugin_dir')){ + $old_plugin_dir= session::global_get('plugin_dir'); } else { $old_plugin_dir= ""; } -if (isset($_GET['plug'])){ +if (isset($_GET['plug']) && $plist->plugin_access_allowed($_GET['plug'])){ $plug= validate($_GET['plug']); $plugin_dir= $plist->get_path($plug); - session::set('plugin_dir',$plugin_dir); + session::global_set('plugin_dir',$plugin_dir); if ($plugin_dir == ""){ new log("security","gosa","",array(),"main.php called with invalid plug parameter \"$plug\"") ; header ("Location: logout.php"); @@ -182,18 +191,33 @@ if (isset($_GET['plug'])){ } else { /* set to welcome page as default plugin */ - session::set('plugin_dir',"welcome"); + session::global_set('plugin_dir',"welcome"); $plugin_dir= "$BASE_DIR/plugins/generic/welcome"; } -/* Check if we need to delete a lock */ -if ($old_plugin_dir != $plugin_dir){ +/* Handle plugin locks. + - Remove the plugin from session if we switched to another. (cleanup) + - Remove all created locks if "reset" was posted. + - Remove all created locks if we switched to another plugin. +*/ +$cleanup = FALSE; +$remove_lock= FALSE; + +/* Check if we have changed the selected plugin +*/ +if($old_plugin_dir != $plugin_dir && $old_plugin_dir != ""){ if (is_file("$old_plugin_dir/main.inc")){ - $remove_lock= true; - require_once ("$old_plugin_dir/main.inc"); + $cleanup = $remove_lock = TRUE; + require ("$old_plugin_dir/main.inc"); + $cleanup = $remove_lock = FALSE; } +}else // elseif + +/* Reset was posted, remove all created locks for the current plugin +*/ +if((isset($_GET['reset']) && $_GET['reset'] == 1) || isset($_POST['delete_lock'])){ + $remove_lock = TRUE; } -$remove_lock= false; /* Check for sizelimits */ eval_sizelimit(); @@ -201,7 +225,7 @@ eval_sizelimit(); /* Check for memory */ if (function_exists("memory_get_usage")){ if (memory_get_usage() > (to_byte(ini_get('memory_limit')) - 2048000 )){ - print_red(_("Warning: memory is getting low - please increase the memory_limit!")); + msg_dialog::display(_("Configuration error"), _("Running out of memory!"), WARNING_DIALOG); } } @@ -231,42 +255,25 @@ if ($_SERVER["REQUEST_METHOD"] == "POST"){ header ("Location: logout.php"); exit; } - - if (isset($_POST['cancel_lock'])){ - session::un_set('dn'); - } } /* Load department list when plugin has changed. That is some kind of compromise between speed and beeing up to date */ if (isset($_GET['reset'])){ - if (session::is_set('objectinfo')){ - session::un_set('objectinfo'); - } -} - -/* Install eGOsa hooks, convert _POST to session */ -if(isset($_GET['explorer'])){ - session::set('eGosa',TRUE); -} -if(session::is_set('POST')){ - $_SERVER["REQUEST_METHOD"] = "POST"; - foreach (session::get('POST') as $key => $dummy){ - $_POST[$key]= $dummy; - } - session::un_set('POST'); + set_object_info(); } /* show web frontend */ $smarty->assign ("date", date("l, dS F Y H:i:s O")); +$smarty->assign ("lang", preg_replace('/_.*$/', '', $lang)); $smarty->assign ("must", "*"); if (isset($plug)){ $plug= "?plug=$plug"; } else { $plug= ""; } -if (session::get('js')==FALSE){ +if (session::global_get('js')==FALSE){ $smarty->assign("javascript", "false"); $smarty->assign("help_method", "href='helpviewer.php$plug' target='_blank'"); } else { @@ -274,11 +281,15 @@ if (session::get('js')==FALSE){ $smarty->assign("help_method"," onclick=\"return popup('helpviewer.php$plug','GOsa help');\""); } -$smarty->assign ("username", $ui->username); +if($ui->ignore_acl_for_current_user()){ + $smarty->assign ("username", ""._("User ACL checks disabled")." ".$ui->username); +}else{ + $smarty->assign ("username", $ui->username); +} $smarty->assign ("go_logo", get_template_path('images/go_logo.png')); $smarty->assign ("go_base", get_template_path('images/dtree.png')); $smarty->assign ("go_home", get_template_path('images/gohome.png')); -$smarty->assign ("go_out", get_template_path('images/stop.png')); +$smarty->assign ("go_out", get_template_path('images/logout.png')); $smarty->assign ("go_top", get_template_path('images/go_top.png')); $smarty->assign ("go_corner", get_template_path('images/go_corner.png')); $smarty->assign ("go_left", get_template_path('images/go_left.png')); @@ -286,84 +297,77 @@ $smarty->assign ("go_help", get_template_path('images/help.png')); /* reload navigation if language changed*/ if($reload_navigation){ - $plist->menu="";; + $plist->menu=""; } $plist->gen_headlines(); $plist->gen_menu(); $smarty->assign ("menu", $plist->menu); $smarty->assign ("plug", "$plug"); -$header= "".$smarty->fetch(get_template_path('headers.tpl')); +$smarty->assign("iePngWorkaround", $config->get_cfg_value("iePngWorkaround","false" ) == "true"); +$smarty->assign("usePrototype", "false"); /* React on clicks */ if ($_SERVER["REQUEST_METHOD"] == "POST"){ - - /* 'delete_lock' is set by the lock removal dialog. We should remove the - lock at this point globally. Plugins do not need to remove it. */ - if (isset($_POST['delete_lock']) && session::is_set('dn')){ - del_lock (session::get('dn')); + if (isset($_POST['delete_lock']) || isset($_POST['open_readonly'])){ /* Set old Post data */ - if(session::is_set('LOCK_VARS_USED')){ - foreach(session::get('LOCK_VARS_USED') as $name => $value){ + if(session::global_is_set('LOCK_VARS_USED_GET')){ + foreach(session::global_get('LOCK_VARS_USED_GET') as $name => $value){ $_GET[$name] = $value; + } + } + if(session::global_is_set('LOCK_VARS_USED_POST')){ + foreach(session::global_get('LOCK_VARS_USED_POST') as $name => $value){ $_POST[$name] = $value; } } - sess_del ('dn'); - } - - - /* I don't want multiple browser windows open. One way to check it is - to count a hidden field and warn the user if SESSION and INPUT count - differ. */ - if (isset($_POST['session_cnt'])){ - if ($_POST['session_cnt'] != session::get('session_cnt')){ - $smarty->display(get_template_path('conflict.tpl')); - exit (); + if(session::global_is_set('LOCK_VARS_USED_REQUEST')){ + foreach(session::global_get('LOCK_VARS_USED_REQUEST') as $name => $value){ + $_REQUEST[$name] = $value; + } } - session::set('session_cnt', (session::get('session_cnt') + 1)); - session::set('post_cnt' , validate($_POST['session_cnt']) + 1); } } -/* Only generate hidden click counter, if post_cnt is defined */ -if (session::is_set('post_cnt')){ - echo "\n"; -} - /* check if we are using account expiration */ -if((isset($config->data['MAIN']['ACCOUNT_EXPIRATION'])) && - preg_match('/true/i', $config->data['MAIN']['ACCOUNT_EXPIRATION'])){ - +if ($config->get_cfg_value("handleExpiredAccounts") == "true"){ $expired= ldap_expired_account($config, $ui->dn, $ui->username); if ($expired == 2){ new log("security","gosa","",array(),"password for user \"$ui->username\" is about to expire") ; - print_red(_("Your password is about to expire, please change your password")); + msg_dialog::display(_("Password change"), _("Your password is about to expire, please change your password!"), INFO_DIALOG); } } /* Load plugin */ if (is_file("$plugin_dir/main.inc")){ - require_once ("$plugin_dir/main.inc"); + $display =""; + require ("$plugin_dir/main.inc"); } else { - echo sprintf(_("FATAL: Can't find any plugin definitions for plugin '%s'!"), $plug); + msg_dialog::display( + _("Plugin"), + sprintf(_("FATAL: Cannot find any plugin definitions for plugin '%s'!"), $plug), + FATAL_ERROR_DIALOG); exit(); } /* Print_out last ErrorMessage repeated string. */ -if(isset($_GET['add'])){ -msg_dialog::display("Error" ,"Kann datei nicht schreiben, bla",ERROR_DIALOG); -msg_dialog::display("Warning" ,"Kann datei nicht schreiben, bla",WARNING_DIALOG); -msg_dialog::display("Info" ,"Kann datei nicht schreiben, bla",INFO_DIALOG); -msg_dialog::display("Confirm" ,"Kann datei nicht schreiben, bla",CONFIRM_DIALOG); -} - $smarty->assign("msg_dialogs", msg_dialog::get_dialogs()); $smarty->assign("contents", $display); +/* If there's some post, take a look if everything is there... */ +if (isset($_POST) && count($_POST)){ + if (!isset($_POST['php_c_check'])){ + msg_dialog::display( + _("Configuration Error"), + sprintf(_("FATAL: not all POST variables have been transfered by PHP - please inform your administrator!")), + FATAL_ERROR_DIALOG); + exit(); + } +} + /* Assign erros to smarty */ if (session::is_set('errors')){ $smarty->assign("errors", session::get('errors')); @@ -387,7 +391,25 @@ $focus.= 'next_msg_dialog();'; $focus.= ''; $smarty->assign("focus", $focus); -$display= $header.$smarty->fetch(get_template_path('framework.tpl')); +/* Set channel if needed */ +#TODO: * move all global session calls to global_ +# * create a new channel where needed (mostly management dialogues) +# * remove regulary created channels when not needed anymore +# * take a look at external php calls (i.e. get fax, ldif, etc.) +# * handle aborted sessions (by pressing anachors i.e. Main, Menu, etc.) +# * check lock removals, is "dn" global or not in this case? +# * last page request -> global or not? +# * check that filters are still global +# * maxC global? +if (isset($_POST['_channel_'])){ + echo "DEBUG - current channel: ".$_POST['_channel_']; + $smarty->assign("channel", $_POST['_channel_']); +} else { + $smarty->assign("channel", ""); +} + +$display= "".$smarty->fetch(get_template_path('headers.tpl')). + $smarty->fetch(get_template_path('framework.tpl')); /* Save dialog filters and selected base in a cookie. So we may be able to restore the filter an base settings on reload. @@ -399,11 +421,13 @@ if(isset($_COOKIE['GOsa_Filter_Settings'])){ }elseif(isset($HTTP_COOKIE_VARS['GOsa_Filter_Settings'])){ $cookie = unserialize(base64_decode($HTTP_COOKIE_VARS['GOsa_Filter_Settings'])); } -if(isset($config->data['MAIN']['SAVE_FILTER']) && preg_match("/true/",$config->data['MAIN']['SAVE_FILTER'])){ + +/* Save filters? */ +if($config->get_cfg_value("storeFilterSettings") == "true"){ $cookie_vars = array("MultiDialogFilters","CurrentMainBase"); foreach($cookie_vars as $var){ - if(session::is_set($var)){ - $cookie[$ui->dn][$var] = session::get($var); + if(session::global_is_set($var)){ + $cookie[$ui->dn][$var] = session::global_get($var); } } if(isset($_GET['plug'])){ @@ -416,8 +440,8 @@ if(isset($config->data['MAIN']['SAVE_FILTER']) && preg_match("/true/",$config->d echo $display; /* Save plist and config */ -session::set('plist',$plist); -session::set('config',$config); +session::global_set('plist',$plist); +session::global_set('config',$config); session::set('errorsAlreadyPosted',array()); // vim:tabstop=2:expandtab:shiftwidth=2:filetype=php:syntax:ruler: