loadOwnerCompany(); return true; } function init() { if (isset($this->_hasInit)) { return; } $this->_hasInit = true; $boot = HTML_FlexyFramework::get(); // echo'
';print_R($boot);exit; $this->appName= $boot->appName; $this->appNameShort= $boot->appNameShort; $this->appModules= $boot->enable; $this->isDev = empty($boot->Pman['isDev']) ? false : $boot->Pman['isDev']; $this->appDisable = $boot->disable; $this->version = $boot->version; if (!empty($ff->Pman['local_autoauth']) && ($_SERVER['SERVER_ADDR'] == '127.0.0.1') && ($_SERVER['REMOTE_ADDR'] == '127.0.0.1') ) { $this->isDev = true; } } function get($base) { $this->init(); //$this->allowSignup= empty($opts['allowSignup']) ? 0 : 1; $bits = explode('/', $base); //print_R($bits); if ($bits[0] == 'Link') { $this->linkFail = $this->linkAuth(@$bits[1],@$bits[2]); header('Content-type: text/html; charset=utf-8'); return; } if ($bits[0] == 'PasswordReset') { $this->linkFail = $this->resetPassword(@$bits[1],@$bits[2],@$bits[3]); header('Content-type: text/html; charset=utf-8'); return; } if ($this->getAuthUser()) { $this->addEvent("RELOAD"); } if (strlen($base)) { $this->addEvent("BADURL", false, $base); $this->jerr("invalid url"); } // deliver template if (isset($_GET['onloadTrack'])) { $this->onloadTrack = (int)$_GET['onloadTrack']; } // getting this to work with xhtml is a nightmare // = nbsp / issues screw everyting up. //var_dump($this->isDev); // force regeneration on load for development enviroments.. HTML_FlexyFramework::get()->generateDataobjectsCache($this->isDev); //header('Content-type: application/xhtml+xml; charset=utf-8'); header('Content-type: text/html; charset=utf-8'); } function post($base) { return $this->get($base); } /** * ------------- Authentication and permission info about logged in user!!! * * */ function loadOwnerCompany() { $this->company = DB_DataObject::Factory('Companies'); if ($this->company) { // non-core pman projects return; } $this->company->get('comptype', 'OWNER'); } function staticGetAuthUser() { $ff = HTML_FlexyFramework::get(); $tbl = empty($ff->Pman['authTable']) ? 'Person' : $ff->Pman['authTable']; $u = DB_DataObject::factory($tbl); if (!$u->isAuth()) { return false; } return $u->getAuthUser(); } function getAuthUser() { if (!empty($this->authUser)) { return $this->authUser; } $ff = HTML_FlexyFramework::get(); $tbl = empty($ff->Pman['authTable']) ? 'Person' : $ff->Pman['authTable']; $u = DB_DataObject::factory( $tbl ); if (!$u->isAuth()) { return false; } $this->authUser =$u->getAuthUser(); return $this->authUser ; } function hasPerm($name, $lvl) // do we have a permission { static $pcache = array(); $au = $this->getAuthUser(); return $au->hasPerm($name,$lvl); } function hasModule($name) { $this->init(); if (!strpos( $name,'.') ) { // use enable / disable.. $enabled = array('Core') ; $enabled = !empty($this->appModules) ? array_merge($enabled, explode(',', $this->appModules)) : $enabled; $disabled = explode(',', $this->appDisable ? $this->appDisable: ''); //print_R($opts); return in_array($name, $enabled) && !in_array($name, $disabled); } $x = DB_DataObject::factory('Group_Rights'); $ar = $x->defaultPermData(); if (empty($ar[$name]) || empty($ar[$name][0])) { return false; } return true; } /** * ---------------- Global Tools --------------- */ /** * send a template to the user * rcpts are read from the resulting template. * * @arg $templateFile - the file in mail/XXXXXX.txt * @arg $args - variables available to the form as {t.*} over and above 'this' * * */ function sendTemplate($templateFile, $args) { $content = clone($this); foreach((array)$args as $k=>$v) { $content->$k = $v; } $content->msgid = md5(time() . rand()); $content->HTTP_HOST = $_SERVER["HTTP_HOST"]; /* use the regex compiler, as it doesnt parse'Regex', 'filters' => array('SimpleTags','Mail'), // 'debug'=>1, )); // this should be done by having multiple template sources...!!! $template->compile('mail/'. $templateFile.'.txt'); /* use variables from this object to ouput data. */ $mailtext = $template->bufferedOutputObject($content); //echo " ";print_R($mailtext); /* With the output try and send an email, using a few tricks in Mail_MimeDecode. */ require_once 'Mail/mimeDecode.php'; require_once 'Mail.php'; $decoder = new Mail_mimeDecode($mailtext); $parts = $decoder->getSendArray(); if (PEAR::isError($parts)) { return $parts; //echo "PROBLEM: {$parts->message}"; //exit; } list($recipents,$headers,$body) = $parts; ///$recipents = array($this->email); $mailOptions = PEAR::getStaticProperty('Mail','options'); $mail = Mail::factory("SMTP",$mailOptions); $headers['Date'] = date('r'); if (PEAR::isError($mail)) { return $mail; } $oe = error_reporting(E_ALL ^ E_NOTICE); $ret = $mail->send($recipents,$headers,$body); error_reporting($oe); return $ret; } function checkFileUploadError() // check for file upload errors. { if ( empty($_FILES['File']) || empty($_FILES['File']['name']) || empty($_FILES['File']['tmp_name']) || empty($_FILES['File']['type']) || !empty($_FILES['File']['error']) || empty($_FILES['File']['size']) ) { $this->jerr("File upload error:" . print_r($_FILES,true) . print_r($_POST,true) . ""); } } /** * generate a tempory file with an extension (dont forget to delete it) */ function tempName($ext) { $x = tempnam(ini_get('session.save_path'), HTML_FlexyFramework::get()->appNameShort.'TMP'); unlink($x); return $x .'.'. $ext; } /** * ------------- Authentication testing ------ ??? MOVEME? * * */ function linkAuth($trid, $trkey) { $tr = DB_DataObject::factory('Documents_Tracking'); if (!$tr->get($trid)) { return "Invalid URL"; } if (strtolower($tr->authkey) != strtolower($trkey)) { $this->AddEvent("ERROR-L", false, "Invalid Key"); return "Invalid KEY"; } // check date.. $this->onloadTrack = (int) $tr->doc_id; if (strtotime($tr->date_sent) < strtotime("NOW - 14 DAYS")) { $this->AddEvent("ERROR-L", false, "Key Expired"); return "Key Expired"; } // user logged in and not $au = $this->getAuthUser(); if ($au && $au->id && $au->id != $tr->person_id) { $au->logout(); return "Logged Out existing Session\n - reload to log in with correct key"; } if ($au) { // logged in anyway.. $this->AddEvent("LOGIN", false, "With Key (ALREADY)"); header('Location: ' . $this->baseURL.'?onloadTrack='.$this->onloadTrack); exit; return false; } // authenticate the user... // slightly risky... $u = DB_DataObject::factory('Person'); $u->get($tr->person_id); $u->login(); $this->AddEvent("LOGIN", false, "With Key"); // we need to redirect out - otherwise refererer url will include key! header('Location: ' . $this->baseURL.'?onloadTrack='.$this->onloadTrack); exit; return false; } /** * ------------- Authentication password reset ------ ??? MOVEME? * * */ function resetPassword($id,$t, $key) { $au = $this->getAuthUser(); if ($au) { return "Already Logged in - no need to use Password Reset"; } $u = DB_DataObject::factory('Person'); //$u->company_id = $this->company->id; $u->active = 1; if (!$u->get($id) || !strlen($u->passwd)) { return "invalid id"; } // validate key.. if ($key != $u->genPassKey($t)) { return "invalid key"; } $uu = clone($u); $u->no_reset_sent = 0; $u->update($uu); if ($t < strtotime("NOW - 1 DAY")) { return "expired"; } $this->showNewPass = implode("/", array($id,$t,$key)); return false; } /** * ---------------- Standard JSON outputers. - used everywhere */ function jerr($str, $errors=array()) // standard error reporting.. { require_once 'Services/JSON.php'; $json = new Services_JSON(); // log all errors!!! $this->addEvent("ERROR", false, $str); if (!empty($_REQUEST['returnHTML']) || (isset($_SERVER['CONTENT_TYPE']) && preg_match('#multipart/form-data#i', $_SERVER['CONTENT_TYPE'])) ) { header('Content-type: text/html'); echo ""; echo $json->encodeUnsafe(array( 'success'=> false, 'errorMsg' => $str, 'message' => $str, // compate with exeption / loadexception. 'errors' => $errors ? $errors : true, // used by forms to flag errors. 'authFailure' => !empty($errors['authFailure']), )); echo ""; exit; } echo $json->encode(array( 'success'=> false, 'data'=> array(), 'errorMsg' => $str, 'message' => $str, // compate with exeption / loadexception. 'errors' => $errors ? $errors : true, // used by forms to flag errors. 'authFailure' => !empty($errors['authFailure']), )); exit; } function jok($str) { require_once 'Services/JSON.php'; $json = new Services_JSON(); if (!empty($_REQUEST['returnHTML']) || (isset($_SERVER['CONTENT_TYPE']) && preg_match('#multipart/form-data#i', $_SERVER['CONTENT_TYPE'])) ) { header('Content-type: text/html'); echo ""; echo $json->encodeUnsafe(array('success'=> true, 'data' => $str)); echo ""; exit; } echo $json->encode(array('success'=> true, 'data' => $str)); exit; } /** * output data for grids or tree * @ar {Array} ar Array of data * @total {Number|false} total number of records (or false to return count(ar) * @extra {Array} extra key value list of data to pass as extra data. * */ function jdata($ar,$total=false, $extra=array()) { // should do mobile checking??? if ($total == false) { $total = count($ar); } $extra= $extra ? $extra : array(); require_once 'Services/JSON.php'; $json = new Services_JSON(); echo $json->encode(array('success' => true, 'total'=> $total, 'data' => $ar) + $extra); exit; } /** * ---------------- Page output?!?!? */ function hasBg($fn) // used on front page to check if logos exist.. { return file_exists($this->rootDir.'/Pman/'.$this->appNameShort.'/templates/images/'. $fn); } function outputJavascriptIncludes() // includes on devel version.. { $mods = explode(',', $this->appModules); if (in_array('Core',$mods)) { // core has to be the first modules loaded as it contains Pman.js array_unshift($mods, 'Core'); } $mods = array_unique($mods); $disabled = explode(',', $this->appDisable ? $this->appDisable: ''); foreach($mods as $mod) { // add the css file.. if (in_array($mod, $disabled)) { continue; } $files = $this->moduleJavascriptList($mod.'/widgets'); foreach($files as $f) { echo ''."\n"; } $files = $this->moduleJavascriptList($mod); foreach($files as $f) { echo ''."\n"; } } } function outputCSSIncludes() // includes on CSS links. { $mods = explode(',', $this->appModules); array_unshift($mods, 'Core'); $mods = array_unique($mods); foreach($mods as $mod) { // add the css file.. $css = $this->rootDir.'/Pman/'.$mod.'/'.strtolower($mod).'.css'; if (file_exists( $css)){ $css = $this->rootURL .'/Pman/'.$mod.'/'.strtolower($mod).'.css'; echo ''."\n"; } } } function moduleJavascriptList($mod) { $ff = HTML_FlexyFramework::get(); $dir = $this->rootDir.'/Pman/'. $mod; $path = $this->rootURL."/Pman/$mod/"; $base = dirname($_SERVER['SCRIPT_FILENAME']); $cfile = realpath($base .'/_compiled_/' . $mod); $lfile = realpath($base .'/_translations_/' . $mod . '.js'); // var_dump($cfile); if (!file_exists($dir)) { return array(); } $dh = opendir($dir); $maxtime = 0; $ctime = 0; $files = array(); if (file_exists($cfile)) { // $ctime = max(filemtime($cfile), filectime($cfile)); // otherwise use compile dfile.. $maxm = 0; $ar = glob($cfile . '/' . $mod . '*.js'); // default to first.. $cfile = basename($ar[count($ar) -1]); foreach($ar as $fn) { if (filemtime($fn) > $maxm) { $cfile = basename($fn); $maxm = filemtime($fn); } } $files = array( $this->rootURL. "/_compiled_/".$mod . "/" . $cfile); if (file_exists($lfile)) { array_push($files, $this->rootURL."/_translations_/$mod.js"); } return $files; } // works out if stuff has been updated.. // technically the non-dev version should output compiled only?!!? while (false !== ($f = readdir($dh))) { // var_dump($f); if (!preg_match('/\.js$/', $f)) { continue; } // got the 'module file..' $maxtime = max(filemtime($dir . '/'. $f), $maxtime); $files[] = $path . $f; } if (empty($files)) { return $files; } // var_dump(array($maxtime , $ctime)); //if ($maxtime > $ctime) { $lsort = create_function('$a,$b','return strlen($a) > strlen($b) ? 1 : -1;'); usort($files, $lsort); // if (file_exists($lfile)) { // array_unshift($files, $this->rootURL."/_translations_/$mod.js"); //} //var_dump($files); return $files; // } } /** * ---------------- Logging --------------- */ /** * addEventOnce: * Log an action (only if it has not been logged already. * * @param {String} action - group/name of event * @param {DataObject|false} obj - dataobject action occured on. * @param {String} any remarks */ function addEventOnce($act, $obj = false, $remarks = '') { $au = $this->getAuthUser(); $e = DB_DataObject::factory('Events'); $e->init($act,$obj,$remarks); if ($e->find(true)) { return; } $this->addEvent($act, $obj, $remarks); } /** * addEvent: * Log an action. * * @param {String} action - group/name of event * @param {DataObject|false} obj - dataobject action occured on. * @param {String} any remarks */ function addEvent($act, $obj = false, $remarks = '') { $au = $this->getAuthUser(); $e = DB_DataObject::factory('Events'); $e->init($act,$obj,$remarks); $e->event_when = date('Y-m-d H:i:s'); $eid = $e->insert(); $ff = HTML_FlexyFramework::get(); if (empty($ff->Pman['event_log_dir'])) { return; } $file = $ff->Pman['event_log_dir']. date('/Y/m/d/'). $eid . ".php"; if (!file_exists(dirname($file))) { mkdir(dirname($file),0700,true); } file_put_contents($file, var_export(array( 'REQUEST_URI' => empty($_SERVER['REQUEST_URI']) ? 'cli' : $_SERVER['REQUEST_URI'], 'GET' => empty($_GET) ? array() : $_GET, 'POST' => empty($_POST) ? array() : $_POST, ), true)); } }