mytinytodo/src/init.php

<?php
/*
	This file is part of myTinyTodo.
	(C) Copyright 2009-2010,2020 Max Pozdeev <maxpozdeev@gmail.com>
	Licensed under the GNU GPL v2 license. See file COPYRIGHT for details.
*/

define('MTT_VERSION', '@VERSION');

##### MyTinyTodo requires php 7.0 and above! #####
if (version_compare(PHP_VERSION, '7.0.0') < 0) {
	die("PHP 7.0+ is required");
}

if(!defined('MTTPATH')) define('MTTPATH', dirname(__FILE__) .'/');
if(!defined('MTTINC'))  define('MTTINC', MTTPATH. 'includes/');
if(!defined('MTTCONTENT'))  define('MTTCONTENT', MTTPATH. 'content/');
if(!defined('MTTLANG'))  define('MTTLANG', MTTCONTENT. 'lang/');
if(!defined('MTTTHEMES'))  define('MTTTHEMES', MTTCONTENT. 'themes/');

if (getenv('MTT_ENABLE_DEBUG') == 'YES') {
	define('MTT_DEBUG', true);
	error_reporting(E_ALL);
	ini_set('display_errors', '1');
	ini_set('log_errors', '1');
}
else {
	//ini_set('display_errors', '0');
	//ini_set('log_errors', '1');
	define('MTT_DEBUG', false);
}

require_once(MTTINC. 'common.php');
require_once(MTTINC. 'class.dbconnection.php');
require_once(MTTINC. 'class.config.php');
require_once(MTTPATH. 'db/config.php');

if(!isset($config)) global $config;
Config::loadConfig($config);
unset($config);

date_default_timezone_set(Config::get('timezone'));

# MySQL Database Connection
if (Config::get('db') == 'mysql')
{
	if (Config::get('mysqli')) require_once(MTTINC. 'class.db.mysqli.php');
	else require_once(MTTINC. 'class.db.mysql.php');
	$db = DBConnection::init(new Database_Mysql);
	try {
		$db->connect( array(
			'host' => Config::get('mysql.host'),
			'user' => Config::get('mysql.user'),
			'password' => Config::get('mysql.password'),
			'db' => Config::get('mysql.db')
		));
	}
	catch(Exception $e) {
		logAndDie("Failed to connect to mysql database: ". $e->getMessage());
	}
	$db->dq("SET NAMES utf8");
}

# SQLite3 Database
elseif(Config::get('db') == 'sqlite')
{
	require_once(MTTINC. 'class.db.sqlite3.php');
	$db = DBConnection::init(new Database_Sqlite3);
	$db->connect( array( 'filename' => MTTPATH. 'db/todolist.db' ) );
}
else {
	# It seems not installed
	die("Not installed. Run <a href=setup.php>setup.php</a> first.");
}
DBConnection::setPrefix(Config::get('prefix'));

//User can override language setting by cookies or query
$forceLang = '';
if( isset($_COOKIE['lang']) ) $forceLang = $_COOKIE['lang'];
//else if ( isset($_GET['lang']) ) $forceLang = $_GET['lang'];

if ( $forceLang != '' && preg_match("/^[a-z-]+$/i", $forceLang) ) {
	Config::set('lang', $forceLang); //TODO: special for demo, do not change config
}

require_once(MTTINC. 'class.lang.php');
Lang::loadLang( Config::get('lang') );

$_mttinfo = array();

if (need_auth() && !isset($dontStartSession))
{
	if(Config::get('session') == 'files')
	{
		session_save_path(MTTPATH. 'tmp/sessions');
		ini_set('session.gc_maxlifetime', '1209600'); # 14 days session file minimum lifetime
		ini_set('session.gc_probability', 1);
		ini_set('session.gc_divisor', 10);
	}

	ini_set('session.use_cookies', true);
	ini_set('session.use_only_cookies', true);
	session_set_cookie_params(1209600, url_dir(Config::get('url')=='' ? getRequestUri() : Config::getUrl('url'))); # 14 days session cookie lifetime
	session_name('mtt-session');
	session_start();
}

function need_auth()
{
	return (Config::get('password') != '') ? 1 : 0;
}

function is_logged()
{
	if ( !need_auth() ) return true;
	if ( isset($_SESSION['logged']) && $_SESSION['logged'] ) return true;
	return false;
}

function is_readonly()
{
	if ( !is_logged() ) return true;
	return false;
}

function timestampToDatetime($timestamp)
{
	$format = Config::get('dateformat') .' '. (Config::get('clock') == 12 ? 'g:i A' : 'H:i');
	return formatTime($format, $timestamp);
}

function formatTime($format, $timestamp=0)
{
	$lang = Lang::instance();
	if($timestamp == 0) $timestamp = time();
	$newformat = strtr($format, array('F'=>'%1', 'M'=>'%2'));
	$adate = explode(',', date('n,'.$newformat, $timestamp), 2);
	$s = $adate[1];
	if($newformat != $format)
	{
		$am = (int)$adate[0];
		$ml = $lang->get('months_long');
		$ms = $lang->get('months_short');
		$F = $ml[$am-1];
		$M = $ms[$am-1];
		$s = strtr($s, array('%1'=>$F, '%2'=>$M));
	}
	return $s;
}

function _e($s)
{
	echo Lang::instance()->get($s);
}

function __($s)
{
	return Lang::instance()->get($s);
}

function mttinfo($v, $escape = true)
{
	echo $escape ? get_mttinfo($v) : get_unsafe_mttinfo($v);
}

/*
 * Returned values from get_unsafe_mttinfo() can be unsafe for html.
 * But '\r' and '\n' in URLs taken from config are removed.
 */
function get_unsafe_mttinfo($v)
{
	global $_mttinfo;
	if (isset($_mttinfo[$v])) {
		return $_mttinfo[$v];
	}
	switch($v)
	{
		case 'template_url':
			$_mttinfo['template_url'] = get_unsafe_mttinfo('mtt_url'). 'content/themes/'. Config::get('template') . '/';
			return $_mttinfo['template_url'];
		case 'includes_url':
			$_mttinfo['includes_url'] = get_unsafe_mttinfo('mtt_url'). 'includes/';
			return $_mttinfo['includes_url'];
		case 'url':
			/* full url to homepage: directory with root index.php or custom index file in the root. */
			/* ex: http://my.site/mytinytodo/   or  https://my.site/mytinytodo/home_for_2nd_theme.php  */
			/* Should not contain a query string. Have to be set in config if custom port is used or wrong detection. */
			$_mttinfo['url'] = Config::getUrl('url');
			if ($_mttinfo['url'] == '') {
				$is_https = (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on') ? true : false;
				$_mttinfo['url'] = ($is_https ? 'https://' : 'http://'). $_SERVER['HTTP_HOST']. url_dir(getRequestUri());
			}
			return $_mttinfo['url'];
		case 'mtt_url':
			/* Directory with ajax.php. No need to set if you use default directory structure. */
			$_mttinfo['mtt_url'] = Config::getUrl('mtt_url'); // need to have a trailing slash
			if ($_mttinfo['mtt_url'] == '') {
				$_mttinfo['mtt_url'] = url_dir( get_unsafe_mttinfo('url'), 0 );
			}
			return $_mttinfo['mtt_url'];
		case 'title':
			$_mttinfo['title'] = (Config::get('title') != '') ? Config::get('title') : __('My Tiny Todolist');
			return $_mttinfo['title'];
		case 'version':
			if (MTT_VERSION != '@'.'VERSION') {
				$_mttinfo['version'] = MTT_VERSION;
				return $_mttinfo['version'];
			}
			return time(); //force no-cache for dev needs
	}
}

function get_mttinfo($v)
{
	return htmlspecialchars( get_unsafe_mttinfo($v) );
}

function reset_mttinfo($key)
{
	global $_mttinfo;
	unset( $_mttinfo[$key] );
}

function getRequestUri()
{
	// Do not use HTTP_X_REWRITE_URL due to CVE-2018-14773
	// SCRIPT_NAME or PATH_INFO ?
	if (isset($_SERVER['REQUEST_URI'])) {
		return $_SERVER['REQUEST_URI'];
	}
	else if (isset($_SERVER['ORIG_PATH_INFO']))  // IIS 5.0 CGI
	{
		$uri = $_SERVER['ORIG_PATH_INFO']; //has no query
		if (!empty($_SERVER['QUERY_STRING'])) $uri .= '?'. $_SERVER['QUERY_STRING'];
		return $uri;
	}
}

function jsonExit($data)
{
	header('Content-type: application/json; charset=utf-8');
	echo json_encode($data);
	exit;
}

function logAndDie($userText, $errText = null)
{
	$errText === null ? error_log($userText) : error_log($errText);
	if (ini_get('display_errors')) {
		echo $userText;
	}
	else {
		echo "Error! See details in error log.";
	}
	exit(1);
}

?>