Initial public commit

2026-05-06 11:51:22 -05:00 · 2017-06-06 16:07:08 +02:00
commit b464e14873
144 changed files with 23448 additions and 0 deletions
@@ -0,0 +1,81 @@
+<?php
+##
+## Copyright 2013-2017 Opera Software AS
+##
+## Licensed under the Apache License, Version 2.0 (the "License");
+## you may not use this file except in compliance with the License.
+## You may obtain a copy of the License at
+##
+## http://www.apache.org/licenses/LICENSE-2.0
+##
+## Unless required by applicable law or agreed to in writing, software
+## distributed under the License is distributed on an "AS IS" BASIS,
+## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+## See the License for the specific language governing permissions and
+## limitations under the License.
+##
+
+chdir(dirname(__FILE__));
+require('core.php');
+ob_start();
+set_exception_handler('exception_handler');
+
+if(isset($_SERVER['PHP_AUTH_USER'])) {
+	$active_user = $user_dir->get_user_by_uid($_SERVER['PHP_AUTH_USER']);
+} else {
+	throw new Exception("Not logged in.");
+}
+
+// Work out where we are on the server
+$base_path = dirname(__FILE__);
+$base_url = dirname($_SERVER['SCRIPT_NAME']);
+$request_url = $_SERVER['REQUEST_URI'];
+$relative_request_url = preg_replace('/^'.preg_quote($base_url, '/').'/', '/', $request_url);
+$absolute_request_url = 'http'.(isset($_SERVER['HTTPS']) ? 's' : '').'://'.$_SERVER['HTTP_HOST'].$request_url;
+
+if(empty($config['web']['enabled'])) {
+	require('views/error503.php');
+	die;
+}
+
+if(!empty($_POST)) {
+	// Check CSRF token
+	if(isset($_SERVER['HTTP_X_BYPASS_CSRF_PROTECTION']) && $_SERVER['HTTP_X_BYPASS_CSRF_PROTECTION'] == 1) {
+		// This is being called from script, not a web browser
+	} elseif(!$active_user->check_csrf_token($_POST['csrf_token'])) {
+		require('views/csrf.php');
+		die;
+	}
+}
+
+// Route request to the correct view
+$router = new Router;
+foreach($routes as $path => $service) {
+	$public = array_key_exists($path, $public_routes);
+	$router->add_route($path, $service, $public);
+}
+$router->handle_request($relative_request_url);
+if(isset($router->view)) {
+	$view = path_join($base_path, 'views', $router->view.'.php');
+	if(file_exists($view)) {
+		if($active_user->auth_realm == 'LDAP' || $router->public) {
+			require($view);
+		} else {
+			require('views/error403.php');
+		}
+	} else {
+		throw new Exception("View file $view missing.");
+	}
+}
+
+// Handler for uncaught exceptions
+function exception_handler($e) {
+	global $active_user;
+	$error_number = time();
+	error_log("$error_number: ".str_replace("\n", "\n$error_number: ", $e));
+	while(ob_get_length()) {
+		ob_end_clean();
+	}
+	require('views/error500.php');
+	die;
+}