[Summary view] [Print] [Text view]

   1  <?php
   2  // +-----------------------------------------------------------------------+
   3  // | PhpWebGallery - a PHP based picture gallery                           |
   4  // | Copyright (C) 2002-2003 Pierrick LE GALL - pierrick@phpwebgallery.net |
   5  // | Copyright (C) 2003-2005 PhpWebGallery Team - http://phpwebgallery.net |
   6  // +-----------------------------------------------------------------------+
   7  // | branch        : BSF (Best So Far)
   8  // | file          : $RCSfile$
   9  // | last update   : $Date: 2005-09-27 23:57:14 +0200 (mar, 27 sep 2005) $
  10  // | last modifier : $Author: plg $
  11  // | revision      : $Revision: 879 $
  12  // +-----------------------------------------------------------------------+
  13  // | This program is free software; you can redistribute it and/or modify  |
  14  // | it under the terms of the GNU General Public License as published by  |
  15  // | the Free Software Foundation                                          |
  16  // |                                                                       |
  17  // | This program is distributed in the hope that it will be useful, but   |
  18  // | WITHOUT ANY WARRANTY; without even the implied warranty of            |
  19  // | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU      |
  20  // | General Public License for more details.                              |
  21  // |                                                                       |
  22  // | You should have received a copy of the GNU General Public License     |
  23  // | along with this program; if not, write to the Free Software           |
  24  // | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
  25  // | USA.                                                                  |
  26  // +-----------------------------------------------------------------------+
  27  
  28  if (!defined('PHPWG_ROOT_PATH'))
  29  {
  30    die('Hacking attempt!');
  31  }
  32  // determine the initial instant to indicate the generation time of this page
  33  $t1 = explode( ' ', microtime() );
  34  $t2 = explode( '.', $t1[0] );
  35  $t2 = $t1[1].'.'.$t2[1];
  36  
  37  set_magic_quotes_runtime(0); // Disable magic_quotes_runtime
  38  
  39  //
  40  // addslashes to vars if magic_quotes_gpc is off this is a security
  41  // precaution to prevent someone trying to break out of a SQL statement.
  42  //
  43  if( !get_magic_quotes_gpc() )
  44  {
  45    if( is_array( $_GET ) )
  46    {
  47      while( list($k, $v) = each($_GET) )
  48      {
  49        if( is_array($_GET[$k]) )
  50        {
  51          while( list($k2, $v2) = each($_GET[$k]) )
  52          {
  53            $_GET[$k][$k2] = addslashes($v2);
  54          }
  55          @reset($_GET[$k]);
  56        }
  57        else
  58        {
  59          $_GET[$k] = addslashes($v);
  60        }
  61      }
  62      @reset($_GET);
  63    }
  64    
  65    if( is_array($_POST) )
  66    {
  67      while( list($k, $v) = each($_POST) )
  68      {
  69        if( is_array($_POST[$k]) )
  70        {
  71          while( list($k2, $v2) = each($_POST[$k]) )
  72          {
  73            $_POST[$k][$k2] = addslashes($v2);
  74          }
  75          @reset($_POST[$k]);
  76        }
  77        else
  78        {
  79          $_POST[$k] = addslashes($v);
  80        }
  81      }
  82      @reset($_POST);
  83    }
  84  
  85    if( is_array($_COOKIE) )
  86    {
  87      while( list($k, $v) = each($_COOKIE) )
  88      {
  89        if( is_array($_COOKIE[$k]) )
  90        {
  91          while( list($k2, $v2) = each($_COOKIE[$k]) )
  92          {
  93            $_COOKIE[$k][$k2] = addslashes($v2);
  94          }
  95          @reset($_COOKIE[$k]);
  96        }
  97        else
  98        {
  99          $_COOKIE[$k] = addslashes($v);
 100        }
 101      }
 102      @reset($_COOKIE);
 103    }
 104  }
 105  
 106  //
 107  // Define some basic configuration arrays this also prevents malicious
 108  // rewriting of language and otherarray values via URI params
 109  //
 110  $conf = array();
 111  $page = array();
 112  $user = array();
 113  $lang = array();
 114  
 115  
 116  @include (PHPWG_ROOT_PATH .'include/mysql.inc.php');
 117  if (!defined('PHPWG_INSTALLED'))
 118  {
 119    header('Location: install.php');
 120    exit;
 121  }
 122  
 123  include (PHPWG_ROOT_PATH . 'include/config_default.inc.php');
 124  @include(PHPWG_ROOT_PATH. 'include/config_local.inc.php');
 125  include (PHPWG_ROOT_PATH . 'include/constants.php');
 126  include (PHPWG_ROOT_PATH . 'include/functions.inc.php');
 127  include (PHPWG_ROOT_PATH . 'include/template.php');
 128  
 129  // Database connection
 130  mysql_connect( $cfgHote, $cfgUser, $cfgPassword )
 131  or die ( "Could not connect to database server" );
 132  mysql_select_db( $cfgBase )
 133  or die ( "Could not connect to database" );
 134      
 135  //
 136  // Setup gallery wide options, if this fails then we output a CRITICAL_ERROR
 137  // since basic gallery information is not available
 138  //
 139  $query = '
 140  SELECT param,value
 141   FROM '.CONFIG_TABLE.'
 142  ;';
 143  if (!($result = pwg_query($query)))
 144  {
 145    die("Could not query config information");
 146  }
 147  
 148  while ( $row =mysql_fetch_array( $result ) )
 149  {
 150    if ( isset( $row['value'] ) )
 151    {
 152      $conf[$row['param']] = $row['value'];
 153    }
 154    else
 155    {
 156      $conf[$row['param']] = '';
 157    }
 158    // If the field is true or false, the variable is transformed into a
 159    // boolean value.
 160    if ( $conf[$row['param']] == 'true' or $conf[$row['param']] == 'false' )
 161    {
 162      $conf[$row['param']] = get_boolean( $conf[$row['param']] );
 163    }
 164  }
 165  
 166  include (PHPWG_ROOT_PATH.'include/user.inc.php');
 167  
 168  // language files
 169  include_once(get_language_filepath('common.lang.php'));
 170  
 171  if (defined('IN_ADMIN') and IN_ADMIN)
 172  {
 173    include_once(get_language_filepath('admin.lang.php'));
 174  }
 175  
 176  // only now we can set the localized username of the guest user (and not in
 177  // include/user.inc.php)
 178  if ($user['is_the_guest'])
 179  {
 180    $user['username'] = $lang['guest'];
 181  }
 182  
 183  // template instance
 184  $template = new Template(PHPWG_ROOT_PATH.'template/'.$user['template']);
 185  ?>