".$lang_functions['std_server_load_very_high']." |
';
- array_map(function ($var) {
- var_dump($var);
- }, func_get_args());
- echo '';
- exit(0);
-}
-
-function do_log($log)
-{
- global $TWEAK;
- if (!empty($TWEAK['logging'])) {
- $backtrace = debug_backtrace(DEBUG_BACKTRACE_IGNORE_ARGS, 2);
- $content = sprintf(
- "[%s] %s:%s %s%s%s %s%s",
- date('Y-m-d H:i:s'),
- $backtrace[0]['file'] ?? '',
- $backtrace[0]['line'] ?? '',
- $backtrace[1]['class'] ?? '',
- $backtrace[1]['type'] ?? '',
- $backtrace[1]['function'] ?? '',
- $log,
- PHP_EOL
- );
- file_put_contents($TWEAK['logging'], $content, FILE_APPEND);
- }
-}
-
-/**
- * get translation for given name
- *
- * @author xiaomlove
- * @date 2021/1/11
- * @param null $name
- * @param null $prefix
- * @return mixed|string
- */
-function __($name = null, $prefix = null)
-{
- static $i18n;
- static $i18nWithoutPrefix;
- $userLocale = get_langfolder_cookie();
- $defaultLocale = 'en';
- if (is_null($prefix)) {
- //get prefix from scripe name
- $prefix = basename($_SERVER['SCRIPT_NAME']);
- $prefix = strstr($prefix, '.php', true);
- }
- if (is_null($i18n)) {
- //get all in18 may be used, incldue user locale and default locale, and name in('_target', 'functions') (because they are common) or prefixed with given prefix
- $sql = "select locale, name, translation from i18n where locale in (" . sqlesc($userLocale) . ", " . sqlesc($defaultLocale) . ") and (name in ('_target', 'functions') or name like '{$prefix}%')";
- $result = sql_query($sql);
- while ($row = mysql_fetch_assoc($result)) {
- $i18n[$row['locale']][$row['name']] = $row['translation'];
- $i18nWithoutPrefix[$row['locale']][substr($row['name'], strpos($row['name'], '.') + 1)] = $row['translation'];
- }
- }
- if (is_null($name)) {
- return $i18nWithoutPrefix[$userLocale] ?? $i18nWithoutPrefix[$defaultLocale] ?? [];
- }
- $name = "$prefix.$name";
- return $i18n[$userLocale][$name] ?? $i18n[$defaultLocale][$name] ?? '';
-
-}
-
-function config($key, $default = null)
-{
- static $configs;
- if (is_null($configs)) {
- //get all configuration from config file
- $files = glob($rootpath . 'config/*.php');
- foreach ($files as $file) {
- $basename = basename($file);
- if ($basename != 'allconfig.php') {
- continue;
- }
- $values = require $file;
- $configPrefix = strstr($basename, '.php', true);
- foreach ($values as $key => $value) {
- $configs["$configPrefix.$key"] = $value;
- }
- }
- }
- return $configs[$key] ?? $default;
-}
-
-/**
- * get setting for given name and prefix
- *
- * $name == null and $prefix == null, return all
- * $name == null and $prefix != null, return with specified prefix, but the result's prefix will be stripped
- *
- * @author xiaomlove
- * @date 2021/1/11
- * @param null $name
- * @param null $prefix
- * @return array|mixed|string
- */
-function get_setting($name = null, $prefix = null)
-{
- static $settings;
- if (is_null($settings)) {
- //get all settings from database
- $sql = "select config_name, config_value from configs";
- $result = sql_query($sql);
- while ($row = mysql_fetch_assoc($result)) {
- $value = $row['config_value'];
- $arr = json_decode($value, true);
- if (is_array($arr)) {
- $value = $arr;
- }
- $settings[$row['config_name']] = $value;
- }
-
- }
- if (!is_null($name)) {
- if (!is_null($prefix)) {
- $name = "$prefix.$name";
- }
- return $settings[$name] ?? null;
- }
- if (is_null($prefix)) {
- return $settings;
- }
- $filtered = [];
- foreach ($settings as $name => $value) {
- if (preg_match("/^$prefix/", $name)) {
- $nameWithoutPrefix = substr($name, strpos($name, '.') + 1);
- $filtered[$nameWithoutPrefix] = $value;
- }
- }
- return $filtered;
-
-}
-
-function env($key, $default = null)
-{
- static $env;
- if (is_null($env)) {
- $envFile = $rootpath . '.env';
- if (!file_exists($envFile)) {
- throw new \RuntimeException(".env file is not exists in the root path.");
- }
- $fp = fopen($envFile, 'r');
- if ($fp === false) {
- throw new \RuntimeException(".env file: $envFile is not readable.");
- }
- while ($line = trim(fgets($fp))) {
- if (empty($line)) {
- continue;
- }
- $pos = strpos($line, '=');
- $key = normalize_env(mb_substr($line, 0, $pos, 'utf-8'));
- $value = normalize_env(mb_substr($line, $pos + 1, null, 'utf-8'));
- $env[$key] = $value;
- }
- }
- return $env[$key] ?? $default;
-
-}
-
-function normalize_env($value)
-{
- $value = trim($value);
- $toStrip = ['\'', '"'];
- if (in_array(mb_substr($value, 0, 1, 'utf-8'), $toStrip)) {
- $value = mb_substr($value, 1, null, 'utf-8');
- }
- if (in_array(mb_substr($value, -1, 'utf-8'), $toStrip)) {
- $value = mb_substr($value, 0, -1, 'utf-8');
- }
- switch (strtolower($value)) {
- case 'true':
- return true;
- case 'false':
- return false;
- case 'null':
- return null;
- default:
- return $value;
- }
-}
-
?>
diff --git a/include/functions_announce.php b/include/functions_announce.php
index 7784850e..644d2f80 100644
--- a/include/functions_announce.php
+++ b/include/functions_announce.php
@@ -2,21 +2,18 @@
# IMPORTANT: Do not edit below unless you know what you are doing!
if(!defined('IN_TRACKER'))
die('Hacking attempt!');
-include_once($rootpath . 'include/globalfunctions.php');
-include_once($rootpath . 'include/config.php');
function dbconn_announce() {
- global $mysql_host, $mysql_user, $mysql_pass, $mysql_db;
- global $BASIC;
- if (!@mysql_connect($mysql_host, $mysql_user, $mysql_pass, $BASIC['mysql_db'], $BASIC['mysql_port']))
+ $config = config('database.mysql');
+
+ if (!@mysql_connect($config['host'], $config['username'], $config['password'], $config['database'], $config['port']))
{
die('dbconn: mysql_connect: ' . mysql_error());
}
mysql_query("SET NAMES UTF8");
mysql_query("SET collation_connection = 'utf8_general_ci'");
mysql_query("SET sql_mode=''");
- mysql_select_db($mysql_db) or die('dbconn: mysql_select_db: ' + mysql_error());
}
function hash_where_arr($name, $hash_arr) {
diff --git a/include/globalfunctions.php b/include/globalfunctions.php
index 664f320e..0c6504c2 100644
--- a/include/globalfunctions.php
+++ b/include/globalfunctions.php
@@ -67,12 +67,12 @@ function getip() {
function sql_query($query)
{
- $begin = getmicrotime();
+ $begin = microtime(true);
global $query_name;
$result = mysql_query($query);
$query_name[] = [
'query' => $query,
- 'time' => sprintf('%.3f', getmicrotime() - $begin),
+ 'time' => microtime(true) - $begin,
];
return $result;
}
@@ -93,4 +93,254 @@ function hash_where($name, $hash) {
$shhash = preg_replace('/ *$/s', "", $hash);
return "($name = " . sqlesc($hash) . " OR $name = " . sqlesc($shhash) . ")";
}
+
+
+function strip_magic_quotes($arr)
+{
+ foreach ($arr as $k => $v)
+ {
+ if (is_array($v))
+ {
+ $arr[$k] = strip_magic_quotes($v);
+ } else {
+ $arr[$k] = stripslashes($v);
+ }
+ }
+ return $arr;
+}
+
+if (function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc())
+{
+ if (!empty($_GET)) {
+ $_GET = strip_magic_quotes($_GET);
+ }
+ if (!empty($_POST)) {
+ $_POST = strip_magic_quotes($_POST);
+ }
+ if (!empty($_COOKIE)) {
+ $_COOKIE = strip_magic_quotes($_COOKIE);
+ }
+}
+
+
+function get_langfolder_list()
+{
+ //do not access db for speed up, or for flexibility
+ return array("en", "chs", "cht", "ko", "ja");
+}
+
+function printLine($line, $exist = false)
+{
+ echo "[" . date('Y-m-d H:i:s') . "] $line';
+ array_map(function ($var) {
+ var_dump($var);
+ }, func_get_args());
+ echo '';
+ exit(0);
+}
+
+function do_log($log)
+{
+ global $TWEAK;
+ if (!empty($TWEAK['logging'])) {
+ $backtrace = debug_backtrace(DEBUG_BACKTRACE_IGNORE_ARGS, 2);
+ $content = sprintf(
+ "[%s] %s:%s %s%s%s %s%s",
+ date('Y-m-d H:i:s'),
+ $backtrace[0]['file'] ?? '',
+ $backtrace[0]['line'] ?? '',
+ $backtrace[1]['class'] ?? '',
+ $backtrace[1]['type'] ?? '',
+ $backtrace[1]['function'] ?? '',
+ $log,
+ PHP_EOL
+ );
+ file_put_contents($TWEAK['logging'], $content, FILE_APPEND);
+ }
+}
+
+/**
+ * get translation for given name
+ *
+ * @author xiaomlove
+ * @date 2021/1/11
+ * @param null $name
+ * @param null $prefix
+ * @return mixed|string
+ */
+function __($name = null, $prefix = null)
+{
+ static $i18n;
+ static $i18nWithoutPrefix;
+ $userLocale = get_langfolder_cookie();
+ $defaultLocale = 'en';
+ if (is_null($prefix)) {
+ //get prefix from scripe name
+ $prefix = basename($_SERVER['SCRIPT_NAME']);
+ $prefix = strstr($prefix, '.php', true);
+ }
+ if (is_null($i18n)) {
+ //get all in18 may be used, incldue user locale and default locale, and name in('_target', 'functions') (because they are common) or prefixed with given prefix
+ $sql = "select locale, name, translation from i18n where locale in (" . sqlesc($userLocale) . ", " . sqlesc($defaultLocale) . ") and (name in ('_target', 'functions') or name like '{$prefix}%')";
+ $result = sql_query($sql);
+ while ($row = mysql_fetch_assoc($result)) {
+ $i18n[$row['locale']][$row['name']] = $row['translation'];
+ $i18nWithoutPrefix[$row['locale']][substr($row['name'], strpos($row['name'], '.') + 1)] = $row['translation'];
+ }
+ }
+ if (is_null($name)) {
+ return $i18nWithoutPrefix[$userLocale] ?? $i18nWithoutPrefix[$defaultLocale] ?? [];
+ }
+ $name = "$prefix.$name";
+ return $i18n[$userLocale][$name] ?? $i18n[$defaultLocale][$name] ?? '';
+
+}
+
+function config($key, $default = null)
+{
+ global $rootpath;
+ static $configs;
+ if (is_null($configs)) {
+ //get all configuration from config file
+ $files = glob($rootpath . 'config/*.php');
+ foreach ($files as $file) {
+ $basename = basename($file);
+ if ($basename == 'allconfig.php') {
+ //exclude the NexusPHP default config file
+ continue;
+ }
+ $values = require $file;
+ $configPrefix = strstr($basename, '.php', true);
+ $configs[$configPrefix] = $values;
+ }
+ }
+ return arr_get($configs, $key, $default);
+}
+
+/**
+ * get setting for given name and prefix
+ *
+ * $name == null and $prefix == null, return all
+ * $name == null and $prefix != null, return with specified prefix, but the result's prefix will be stripped
+ *
+ * @author xiaomlove
+ * @date 2021/1/11
+ * @param null $name
+ * @param null $prefix
+ * @return array|mixed|string
+ */
+function get_setting($name = null, $prefix = null)
+{
+ static $settings;
+ if (is_null($settings)) {
+ //get all settings from database
+ $sql = "select config_name, config_value from configs";
+ $result = sql_query($sql);
+ while ($row = mysql_fetch_assoc($result)) {
+ $value = $row['config_value'];
+ $arr = json_decode($value, true);
+ if (is_array($arr)) {
+ $value = $arr;
+ }
+ $settings[$row['config_name']] = $value;
+ }
+
+ }
+ if (!is_null($name)) {
+ if (!is_null($prefix)) {
+ $name = "$prefix.$name";
+ }
+ return $settings[$name] ?? null;
+ }
+ if (is_null($prefix)) {
+ return $settings;
+ }
+ $filtered = [];
+ foreach ($settings as $name => $value) {
+ if (preg_match("/^$prefix/", $name)) {
+ $nameWithoutPrefix = substr($name, strpos($name, '.') + 1);
+ $filtered[$nameWithoutPrefix] = $value;
+ }
+ }
+ return $filtered;
+
+}
+
+function env($key, $default = null)
+{
+ global $rootpath;
+ static $env;
+ if (is_null($env)) {
+ $envFile = $rootpath . '.env';
+ if (!file_exists($envFile)) {
+ throw new \RuntimeException(".env file is not exists in the root path.");
+ }
+ $fp = fopen($envFile, 'r');
+ if ($fp === false) {
+ throw new \RuntimeException(".env file: $envFile is not readable.");
+ }
+ while ($line = trim(fgets($fp))) {
+ if (empty($line)) {
+ continue;
+ }
+ $pos = strpos($line, '=');
+ if ($pos <= 0) {
+ continue;
+ }
+ if (mb_substr($line, 0, 1, 'utf-8') == '#') {
+ continue;
+ }
+ $lineKey = normalize_env(mb_substr($line, 0, $pos, 'utf-8'));
+ $lineValue = normalize_env(mb_substr($line, $pos + 1, null, 'utf-8'));
+ $env[$lineKey] = $lineValue;
+ }
+ }
+ return $env[$key] ?? $default;
+
+}
+
+function normalize_env($value)
+{
+ $value = trim($value);
+ $toStrip = ['\'', '"'];
+ if (in_array(mb_substr($value, 0, 1, 'utf-8'), $toStrip)) {
+ $value = mb_substr($value, 1, null, 'utf-8');
+ }
+ if (in_array(mb_substr($value, -1, null,'utf-8'), $toStrip)) {
+ $value = mb_substr($value, 0, -1, 'utf-8');
+ }
+ switch (strtolower($value)) {
+ case 'true':
+ return true;
+ case 'false':
+ return false;
+ case 'null':
+ return null;
+ default:
+ return $value;
+ }
+}
+
+function arr_get($array, $key, $default = null)
+{
+ if (strpos($key, '.') === false) {
+ return $array[$key] ?? $default;
+ }
+ foreach (explode('.', $key) as $segment) {
+ if (isset($array[$segment])) {
+ $array = $array[$segment];
+ } else {
+ return $default;
+ }
+ }
+ return $array;
+}
?>
diff --git a/invite.php b/invite.php
index f26f199a..3e66bbbb 100644
--- a/invite.php
+++ b/invite.php
@@ -9,7 +9,7 @@ $type = unesc($_GET["type"] ?? '');
registration_check('invitesystem',true,false);
-if (($CURUSER[id] != $id && get_user_class() < $viewinvite_class) || !is_valid_id($id))
+if (($CURUSER['id'] != $id && get_user_class() < $viewinvite_class) || !is_valid_id($id))
stderr($lang_invite['std_sorry'],$lang_invite['std_permission_denied']);
if (get_user_class() < $sendinvite_class)
stderr($lang_invite['std_sorry'],$lang_invite['std_only'].get_user_class_name($sendinvite_class,false,true,true).$lang_invite['std_or_above_can_invite'],false);
@@ -19,7 +19,7 @@ stdhead($lang_invite['head_invites']);
print("");
print("".$user['username'].$lang_invite['text_invite_system'].""); - $sent = htmlspecialchars($_GET['sent']); + $sent = htmlspecialchars($_GET['sent'] ?? ''); if ($sent == 1){ $msg = $lang_invite['text_invite_code_sent']; print("".$msg." "); @@ -108,7 +108,7 @@ if ($type == 'new'){ } } - if ($CURUSER[id] == $id || get_user_class() >= UC_SYSOP) + if ($CURUSER['id'] == $id || get_user_class() >= UC_SYSOP) { $pendingcount = number_format(get_row_count("users", "WHERE status='pending' AND invited_by=$CURUSER[id]")); @@ -117,7 +117,7 @@ if ($type == 'new'){ print(" | ||||||