Subs-Admin.php 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539
  1. <?php
  2. /**
  3. * This file contains functions that are specifically done by administrators.
  4. *
  5. * Simple Machines Forum (SMF)
  6. *
  7. * @package SMF
  8. * @author Simple Machines http://www.simplemachines.org
  9. * @copyright 2013 Simple Machines and individual contributors
  10. * @license http://www.simplemachines.org/about/smf/license.php BSD
  11. *
  12. * @version 2.1 Alpha 1
  13. */
  14. if (!defined('SMF'))
  15. die('No direct access...');
  16. /**
  17. * Get a list of versions that are currently installed on the server.
  18. * @param array $checkFor
  19. */
  20. function getServerVersions($checkFor)
  21. {
  22. global $txt, $db_connection, $_PHPA, $smcFunc, $memcached, $modSettings;
  23. loadLanguage('Admin');
  24. $versions = array();
  25. // Is GD available? If it is, we should show version information for it too.
  26. if (in_array('gd', $checkFor) && function_exists('gd_info'))
  27. {
  28. $temp = gd_info();
  29. $versions['gd'] = array('title' => $txt['support_versions_gd'], 'version' => $temp['GD Version']);
  30. }
  31. // Why not have a look at ImageMagick? If it's installed, we should show version information for it too.
  32. if (in_array('imagemagick', $checkFor) && (class_exists('Imagick') || function_exists('MagickGetVersionString')))
  33. {
  34. if (class_exists('Imagick'))
  35. {
  36. $temp = New Imagick;
  37. $temp2 = $temp->getVersion();
  38. $im_version = $temp2['versionString'];
  39. $extension_version = 'Imagick ' . phpversion('Imagick');
  40. }
  41. else
  42. {
  43. $im_version = MagickGetVersionString();
  44. $extension_version = 'MagickWand ' . phpversion('MagickWand');
  45. }
  46. // We already know it's ImageMagick and the website isn't needed...
  47. $im_version = str_replace(array('ImageMagick ', ' http://www.imagemagick.org'), '', $im_version);
  48. $versions['imagemagick'] = array('title' => $txt['support_versions_imagemagick'], 'version' => $im_version . ' (' . $extension_version . ')');
  49. }
  50. // Now lets check for the Database.
  51. if (in_array('db_server', $checkFor))
  52. {
  53. db_extend();
  54. if (!isset($db_connection) || $db_connection === false)
  55. trigger_error('getServerVersions(): you need to be connected to the database in order to get its server version', E_USER_NOTICE);
  56. else
  57. {
  58. $versions['db_server'] = array('title' => sprintf($txt['support_versions_db'], $smcFunc['db_title']), 'version' => '');
  59. $versions['db_server']['version'] = $smcFunc['db_get_version']();
  60. }
  61. }
  62. // If we're using memcache we need the server info.
  63. if (empty($memcached) && function_exists('memcache_get') && isset($modSettings['cache_memcached']) && trim($modSettings['cache_memcached']) != '')
  64. get_memcached_server();
  65. // Check to see if we have any accelerators installed...
  66. if (in_array('mmcache', $checkFor) && defined('MMCACHE_VERSION'))
  67. $versions['mmcache'] = array('title' => 'Turck MMCache', 'version' => MMCACHE_VERSION);
  68. if (in_array('eaccelerator', $checkFor) && defined('EACCELERATOR_VERSION'))
  69. $versions['eaccelerator'] = array('title' => 'eAccelerator', 'version' => EACCELERATOR_VERSION);
  70. if (in_array('phpa', $checkFor) && isset($_PHPA))
  71. $versions['phpa'] = array('title' => 'ionCube PHP-Accelerator', 'version' => $_PHPA['VERSION']);
  72. if (in_array('apc', $checkFor) && extension_loaded('apc'))
  73. $versions['apc'] = array('title' => 'Alternative PHP Cache', 'version' => phpversion('apc'));
  74. if (in_array('memcache', $checkFor) && function_exists('memcache_set'))
  75. $versions['memcache'] = array('title' => 'Memcached', 'version' => empty($memcached) ? '???' : memcache_get_version($memcached));
  76. if (in_array('xcache', $checkFor) && function_exists('xcache_set'))
  77. $versions['xcache'] = array('title' => 'XCache', 'version' => XCACHE_VERSION);
  78. if (in_array('php', $checkFor))
  79. $versions['php'] = array('title' => 'PHP', 'version' => PHP_VERSION, 'more' => '?action=admin;area=serversettings;sa=phpinfo');
  80. if (in_array('server', $checkFor))
  81. $versions['server'] = array('title' => $txt['support_versions_server'], 'version' => $_SERVER['SERVER_SOFTWARE']);
  82. return $versions;
  83. }
  84. /**
  85. * Search through source, theme and language files to determine their version.
  86. * Get detailed version information about the physical SMF files on the server.
  87. *
  88. * - the input parameter allows to set whether to include SSI.php and whether
  89. * the results should be sorted.
  90. * - returns an array containing information on source files, templates and
  91. * language files found in the default theme directory (grouped by language).
  92. *
  93. * @param array &$versionOptions
  94. */
  95. function getFileVersions(&$versionOptions)
  96. {
  97. global $boarddir, $sourcedir, $settings;
  98. // Default place to find the languages would be the default theme dir.
  99. $lang_dir = $settings['default_theme_dir'] . '/languages';
  100. $version_info = array(
  101. 'file_versions' => array(),
  102. 'default_template_versions' => array(),
  103. 'template_versions' => array(),
  104. 'default_language_versions' => array(),
  105. );
  106. // Find the version in SSI.php's file header.
  107. if (!empty($versionOptions['include_ssi']) && file_exists($boarddir . '/SSI.php'))
  108. {
  109. $fp = fopen($boarddir . '/SSI.php', 'rb');
  110. $header = fread($fp, 4096);
  111. fclose($fp);
  112. // The comment looks rougly like... that.
  113. if (preg_match('~\*\s@version\s+(.+)[\s]{2}~i', $header, $match) == 1)
  114. $version_info['file_versions']['SSI.php'] = $match[1];
  115. // Not found! This is bad.
  116. else
  117. $version_info['file_versions']['SSI.php'] = '??';
  118. }
  119. // Do the paid subscriptions handler?
  120. if (!empty($versionOptions['include_subscriptions']) && file_exists($boarddir . '/subscriptions.php'))
  121. {
  122. $fp = fopen($boarddir . '/subscriptions.php', 'rb');
  123. $header = fread($fp, 4096);
  124. fclose($fp);
  125. // Found it?
  126. if (preg_match('~\*\s@version\s+(.+)[\s]{2}~i', $header, $match) == 1)
  127. $version_info['file_versions']['subscriptions.php'] = $match[1];
  128. // If we haven't how do we all get paid?
  129. else
  130. $version_info['file_versions']['subscriptions.php'] = '??';
  131. }
  132. // Load all the files in the Sources directory, except this file and the redirect.
  133. $sources_dir = dir($sourcedir);
  134. while ($entry = $sources_dir->read())
  135. {
  136. if (substr($entry, -4) === '.php' && !is_dir($sourcedir . '/' . $entry) && $entry !== 'index.php')
  137. {
  138. // Read the first 4k from the file.... enough for the header.
  139. $fp = fopen($sourcedir . '/' . $entry, 'rb');
  140. $header = fread($fp, 4096);
  141. fclose($fp);
  142. // Look for the version comment in the file header.
  143. if (preg_match('~\*\s@version\s+(.+)[\s]{2}~i', $header, $match) == 1)
  144. $version_info['file_versions'][$entry] = $match[1];
  145. // It wasn't found, but the file was... show a '??'.
  146. else
  147. $version_info['file_versions'][$entry] = '??';
  148. }
  149. }
  150. $sources_dir->close();
  151. // Load all the files in the default template directory - and the current theme if applicable.
  152. $directories = array('default_template_versions' => $settings['default_theme_dir']);
  153. if ($settings['theme_id'] != 1)
  154. $directories += array('template_versions' => $settings['theme_dir']);
  155. foreach ($directories as $type => $dirname)
  156. {
  157. $this_dir = dir($dirname);
  158. while ($entry = $this_dir->read())
  159. {
  160. if (substr($entry, -12) == 'template.php' && !is_dir($dirname . '/' . $entry))
  161. {
  162. // Read the first 768 bytes from the file.... enough for the header.
  163. $fp = fopen($dirname . '/' . $entry, 'rb');
  164. $header = fread($fp, 768);
  165. fclose($fp);
  166. // Look for the version comment in the file header.
  167. if (preg_match('~\*\s@version\s+(.+)[\s]{2}~i', $header, $match) == 1)
  168. $version_info[$type][$entry] = $match[1];
  169. // It wasn't found, but the file was... show a '??'.
  170. else
  171. $version_info[$type][$entry] = '??';
  172. }
  173. }
  174. $this_dir->close();
  175. }
  176. // Load up all the files in the default language directory and sort by language.
  177. $this_dir = dir($lang_dir);
  178. while ($entry = $this_dir->read())
  179. {
  180. if (substr($entry, -4) == '.php' && $entry != 'index.php' && !is_dir($lang_dir . '/' . $entry))
  181. {
  182. // Read the first 768 bytes from the file.... enough for the header.
  183. $fp = fopen($lang_dir . '/' . $entry, 'rb');
  184. $header = fread($fp, 768);
  185. fclose($fp);
  186. // Split the file name off into useful bits.
  187. list ($name, $language) = explode('.', $entry);
  188. // Look for the version comment in the file header.
  189. if (preg_match('~(?://|/\*)\s*Version:\s+(.+?);\s*' . preg_quote($name, '~') . '(?:[\s]{2}|\*/)~i', $header, $match) == 1)
  190. $version_info['default_language_versions'][$language][$name] = $match[1];
  191. // It wasn't found, but the file was... show a '??'.
  192. else
  193. $version_info['default_language_versions'][$language][$name] = '??';
  194. }
  195. }
  196. $this_dir->close();
  197. // Sort the file versions by filename.
  198. if (!empty($versionOptions['sort_results']))
  199. {
  200. ksort($version_info['file_versions']);
  201. ksort($version_info['default_template_versions']);
  202. ksort($version_info['template_versions']);
  203. ksort($version_info['default_language_versions']);
  204. // For languages sort each language too.
  205. foreach ($version_info['default_language_versions'] as $language => $dummy)
  206. ksort($version_info['default_language_versions'][$language]);
  207. }
  208. return $version_info;
  209. }
  210. /**
  211. * Update the Settings.php file.
  212. *
  213. * The most important function in this file for mod makers happens to be the
  214. * updateSettingsFile() function, but it shouldn't be used often anyway.
  215. *
  216. * - updates the Settings.php file with the changes supplied in config_vars.
  217. * - expects config_vars to be an associative array, with the keys as the
  218. * variable names in Settings.php, and the values the variable values.
  219. * - does not escape or quote values.
  220. * - preserves case, formatting, and additional options in file.
  221. * - writes nothing if the resulting file would be less than 10 lines
  222. * in length (sanity check for read lock.)
  223. * - check for changes to db_last_error and passes those off to a separate handler
  224. * - attempts to create a backup file and will use it should the writing of the
  225. * new settings file fail
  226. *
  227. * @param array $config_vars
  228. */
  229. function updateSettingsFile($config_vars)
  230. {
  231. global $boarddir, $cachedir, $context;
  232. // Updating the db_last_error, then don't mess around with Settings.php
  233. if (count($config_vars) === 1 && isset($config_vars['db_last_error']))
  234. {
  235. updateDbLastError($config_vars['db_last_error']);
  236. return;
  237. }
  238. // When was Settings.php last changed?
  239. $last_settings_change = filemtime($boarddir . '/Settings.php');
  240. // Load the settings file.
  241. $settingsArray = trim(file_get_contents($boarddir . '/Settings.php'));
  242. // Break it up based on \r or \n, and then clean out extra characters.
  243. if (strpos($settingsArray, "\n") !== false)
  244. $settingsArray = explode("\n", $settingsArray);
  245. elseif (strpos($settingsArray, "\r") !== false)
  246. $settingsArray = explode("\r", $settingsArray);
  247. else
  248. return;
  249. // Presumably, the file has to have stuff in it for this function to be called :P.
  250. if (count($settingsArray) < 10)
  251. return;
  252. // remove any /r's that made there way in here
  253. foreach ($settingsArray as $k => $dummy)
  254. $settingsArray[$k] = strtr($dummy, array("\r" => '')) . "\n";
  255. // go line by line and see whats changing
  256. for ($i = 0, $n = count($settingsArray); $i < $n; $i++)
  257. {
  258. // Don't trim or bother with it if it's not a variable.
  259. if (substr($settingsArray[$i], 0, 1) != '$')
  260. continue;
  261. $settingsArray[$i] = trim($settingsArray[$i]) . "\n";
  262. // Look through the variables to set....
  263. foreach ($config_vars as $var => $val)
  264. {
  265. // be sure someone is not updating db_last_error this with a group
  266. if ($var === 'db_last_error')
  267. {
  268. updateDbLastError($val);
  269. unset($config_vars[$var]);
  270. }
  271. elseif (strncasecmp($settingsArray[$i], '$' . $var, 1 + strlen($var)) == 0)
  272. {
  273. $comment = strstr(substr($settingsArray[$i], strpos($settingsArray[$i], ';')), '#');
  274. $settingsArray[$i] = '$' . $var . ' = ' . $val . ';' . ($comment == '' ? '' : "\t\t" . rtrim($comment)) . "\n";
  275. // This one's been 'used', so to speak.
  276. unset($config_vars[$var]);
  277. }
  278. }
  279. // End of the file ... maybe
  280. if (substr(trim($settingsArray[$i]), 0, 2) == '?' . '>')
  281. $end = $i;
  282. }
  283. // This should never happen, but apparently it is happening.
  284. if (empty($end) || $end < 10)
  285. $end = count($settingsArray) - 1;
  286. // Still more variables to go? Then lets add them at the end.
  287. if (!empty($config_vars))
  288. {
  289. if (trim($settingsArray[$end]) == '?' . '>')
  290. $settingsArray[$end++] = '';
  291. else
  292. $end++;
  293. // Add in any newly defined vars that were passed
  294. foreach ($config_vars as $var => $val)
  295. $settingsArray[$end++] = '$' . $var . ' = ' . $val . ';' . "\n";
  296. $settingsArray[$end] = '?' . '>';
  297. }
  298. else
  299. $settingsArray[$end] = trim($settingsArray[$end]);
  300. // Sanity error checking: the file needs to be at least 12 lines.
  301. if (count($settingsArray) < 12)
  302. return;
  303. // Try to avoid a few pitfalls:
  304. // - like a possible race condition,
  305. // - or a failure to write at low diskspace
  306. //
  307. // Check before you act: if cache is enabled, we can do a simple write test
  308. // to validate that we even write things on this filesystem.
  309. if ((empty($cachedir) || !file_exists($cachedir)) && file_exists($boarddir . '/cache'))
  310. $cachedir = $boarddir . '/cache';
  311. $test_fp = @fopen($cachedir . '/settings_update.tmp', "w+");
  312. if ($test_fp)
  313. {
  314. fclose($test_fp);
  315. $written_bytes = file_put_contents($cachedir . '/settings_update.tmp', 'test', LOCK_EX);
  316. @unlink($cachedir . '/settings_update.tmp');
  317. if ($written_bytes !== 4)
  318. {
  319. // Oops. Low disk space, perhaps. Don't mess with Settings.php then.
  320. // No means no. :P
  321. return;
  322. }
  323. }
  324. // Protect me from what I want! :P
  325. clearstatcache();
  326. if (filemtime($boarddir . '/Settings.php') === $last_settings_change)
  327. {
  328. // save the old before we do anything
  329. $file = $boarddir . '/Settings.php';
  330. $settings_backup_fail = !@is_writable($boarddir . '/Settings_bak.php') || !@copy($boarddir . '/Settings.php', $boarddir . '/Settings_bak.php');
  331. $settings_backup_fail = !$settings_backup_fail ? (!file_exists($boarddir . '/Settings_bak.php') || filesize($boarddir . '/Settings_bak.php') === 0) : $settings_backup_fail;
  332. // write out the new
  333. $write_settings = implode('', $settingsArray);
  334. $written_bytes = file_put_contents($boarddir . '/Settings.php', $write_settings, LOCK_EX);
  335. // survey says ...
  336. if ($written_bytes !== strlen($write_settings) && !$settings_backup_fail)
  337. {
  338. // Well this is not good at all, lets see if we can save this
  339. $context['settings_message'] = 'settings_error';
  340. if (file_exists($boarddir . '/Settings_bak.php'))
  341. @copy($boarddir . '/Settings_bak.php', $boarddir . '/Settings.php');
  342. }
  343. }
  344. }
  345. /**
  346. * Saves the time of the last db error for the error log
  347. * - Done separately from updateSettingsFile to avoid race conditions
  348. * which can occur during a db error
  349. * - If it fails Settings.php will assume 0
  350. *
  351. * @param type $time
  352. */
  353. function updateDbLastError($time)
  354. {
  355. global $boarddir;
  356. // Write out the db_last_error file with the error timestamp
  357. file_put_contents($boarddir . '/db_last_error.php', '<' . '?' . "php\n" . '$db_last_error = ' . $time . ';' . "\n" . '?' . '>', LOCK_EX);
  358. @touch($boarddir . '/' . 'Settings.php');
  359. }
  360. /**
  361. * Saves the admins current preferences to the database.
  362. */
  363. function updateAdminPreferences()
  364. {
  365. global $options, $context, $smcFunc, $settings, $user_info;
  366. // This must exist!
  367. if (!isset($context['admin_preferences']))
  368. return false;
  369. // This is what we'll be saving.
  370. $options['admin_preferences'] = serialize($context['admin_preferences']);
  371. // Just check we haven't ended up with something theme exclusive somehow.
  372. $smcFunc['db_query']('', '
  373. DELETE FROM {db_prefix}themes
  374. WHERE id_theme != {int:default_theme}
  375. AND variable = {string:admin_preferences}',
  376. array(
  377. 'default_theme' => 1,
  378. 'admin_preferences' => 'admin_preferences',
  379. )
  380. );
  381. // Update the themes table.
  382. $smcFunc['db_insert']('replace',
  383. '{db_prefix}themes',
  384. array('id_member' => 'int', 'id_theme' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
  385. array($user_info['id'], 1, 'admin_preferences', $options['admin_preferences']),
  386. array('id_member', 'id_theme', 'variable')
  387. );
  388. // Make sure we invalidate any cache.
  389. cache_put_data('theme_settings-' . $settings['theme_id'] . ':' . $user_info['id'], null, 0);
  390. }
  391. /**
  392. * Send all the administrators a lovely email.
  393. * - loads all users who are admins or have the admin forum permission.
  394. * - uses the email template and replacements passed in the parameters.
  395. * - sends them an email.
  396. *
  397. * @param string $template
  398. * @param array $replacements
  399. * @param array $additional_recipients
  400. */
  401. function emailAdmins($template, $replacements = array(), $additional_recipients = array())
  402. {
  403. global $smcFunc, $sourcedir, $language, $modSettings;
  404. // We certainly want this.
  405. require_once($sourcedir . '/Subs-Post.php');
  406. // Load all groups which are effectively admins.
  407. $request = $smcFunc['db_query']('', '
  408. SELECT id_group
  409. FROM {db_prefix}permissions
  410. WHERE permission = {string:admin_forum}
  411. AND add_deny = {int:add_deny}
  412. AND id_group != {int:id_group}',
  413. array(
  414. 'add_deny' => 1,
  415. 'id_group' => 0,
  416. 'admin_forum' => 'admin_forum',
  417. )
  418. );
  419. $groups = array(1);
  420. while ($row = $smcFunc['db_fetch_assoc']($request))
  421. $groups[] = $row['id_group'];
  422. $smcFunc['db_free_result']($request);
  423. $request = $smcFunc['db_query']('', '
  424. SELECT id_member, member_name, real_name, lngfile, email_address
  425. FROM {db_prefix}members
  426. WHERE (id_group IN ({array_int:group_list}) OR FIND_IN_SET({raw:group_array_implode}, additional_groups) != 0)
  427. AND notify_types != {int:notify_types}
  428. ORDER BY lngfile',
  429. array(
  430. 'group_list' => $groups,
  431. 'notify_types' => 4,
  432. 'group_array_implode' => implode(', additional_groups) != 0 OR FIND_IN_SET(', $groups),
  433. )
  434. );
  435. $emails_sent = array();
  436. while ($row = $smcFunc['db_fetch_assoc']($request))
  437. {
  438. // Stick their particulars in the replacement data.
  439. $replacements['IDMEMBER'] = $row['id_member'];
  440. $replacements['REALNAME'] = $row['member_name'];
  441. $replacements['USERNAME'] = $row['real_name'];
  442. // Load the data from the template.
  443. $emaildata = loadEmailTemplate($template, $replacements, empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile']);
  444. // Then send the actual email.
  445. sendmail($row['email_address'], $emaildata['subject'], $emaildata['body'], null, null, false, 1);
  446. // Track who we emailed so we don't do it twice.
  447. $emails_sent[] = $row['email_address'];
  448. }
  449. $smcFunc['db_free_result']($request);
  450. // Any additional users we must email this to?
  451. if (!empty($additional_recipients))
  452. foreach ($additional_recipients as $recipient)
  453. {
  454. if (in_array($recipient['email'], $emails_sent))
  455. continue;
  456. $replacements['IDMEMBER'] = $recipient['id'];
  457. $replacements['REALNAME'] = $recipient['name'];
  458. $replacements['USERNAME'] = $recipient['name'];
  459. // Load the template again.
  460. $emaildata = loadEmailTemplate($template, $replacements, empty($recipient['lang']) || empty($modSettings['userLanguage']) ? $language : $recipient['lang']);
  461. // Send off the email.
  462. sendmail($recipient['email'], $emaildata['subject'], $emaildata['body'], null, null, false, 1);
  463. }
  464. }
  465. ?>