ManageServer.php 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893
  1. <?php
  2. /**
  3. * Contains all the functionality required to be able to edit the
  4. * core server settings. This includes anything from which an error may
  5. * result in the forum destroying itself in a firey fury.
  6. *
  7. * Adding options to one of the setting screens isn't hard. Call prepareDBSettingsContext;
  8. * The basic format for a checkbox is:
  9. * array('check', 'nameInModSettingsAndSQL'),
  10. * And for a text box:
  11. * array('text', 'nameInModSettingsAndSQL')
  12. * (NOTE: You have to add an entry for this at the bottom!)
  13. *
  14. * In these cases, it will look for $txt['nameInModSettingsAndSQL'] as the description,
  15. * and $helptxt['nameInModSettingsAndSQL'] as the help popup description.
  16. *
  17. * Here's a quick explanation of how to add a new item:
  18. *
  19. * * A text input box. For textual values.
  20. * ie. array('text', 'nameInModSettingsAndSQL', 'OptionalInputBoxWidth'),
  21. *
  22. * * A text input box. For numerical values.
  23. * ie. array('int', 'nameInModSettingsAndSQL', 'OptionalInputBoxWidth'),
  24. *
  25. * * A text input box. For floating point values.
  26. * ie. array('float', 'nameInModSettingsAndSQL', 'OptionalInputBoxWidth'),
  27. *
  28. * * A large text input box. Used for textual values spanning multiple lines.
  29. * ie. array('large_text', 'nameInModSettingsAndSQL', 'OptionalNumberOfRows'),
  30. *
  31. * * A check box. Either one or zero. (boolean)
  32. * ie. array('check', 'nameInModSettingsAndSQL'),
  33. *
  34. * * A selection box. Used for the selection of something from a list.
  35. * ie. array('select', 'nameInModSettingsAndSQL', array('valueForSQL' => $txt['displayedValue'])),
  36. * Note that just saying array('first', 'second') will put 0 in the SQL for 'first'.
  37. *
  38. * * A password input box. Used for passwords, no less!
  39. * ie. array('password', 'nameInModSettingsAndSQL', 'OptionalInputBoxWidth'),
  40. *
  41. * * A permission - for picking groups who have a permission.
  42. * ie. array('permissions', 'manage_groups'),
  43. *
  44. * * A BBC selection box.
  45. * ie. array('bbc', 'sig_bbc'),
  46. *
  47. * For each option:
  48. * type (see above), variable name, size/possible values.
  49. * OR make type '' for an empty string for a horizontal rule.
  50. * SET preinput - to put some HTML prior to the input box.
  51. * SET postinput - to put some HTML following the input box.
  52. * SET invalid - to mark the data as invalid.
  53. * PLUS you can override label and help parameters by forcing their keys in the array, for example:
  54. * array('text', 'invalidlabel', 3, 'label' => 'Actual Label')
  55. *
  56. * Simple Machines Forum (SMF)
  57. *
  58. * @package SMF
  59. * @author Simple Machines http://www.simplemachines.org
  60. * @copyright 2011 Simple Machines
  61. * @license http://www.simplemachines.org/about/smf/license.php BSD
  62. *
  63. * @version 2.1 Alpha 1
  64. */
  65. if (!defined('SMF'))
  66. die('Hacking attempt...');
  67. /**
  68. * This is the main dispatcher. Sets up all the available sub-actions, all the tabs and selects
  69. * the appropriate one based on the sub-action.
  70. * Requires the admin_forum permission.
  71. * Redirects to the appropriate function based on the sub-action.
  72. *
  73. * @uses edit_settings adminIndex.
  74. */
  75. function ModifySettings()
  76. {
  77. global $context, $txt, $scripturl, $boarddir;
  78. // This is just to keep the database password more secure.
  79. isAllowedTo('admin_forum');
  80. // Load up all the tabs...
  81. $context[$context['admin_menu_name']]['tab_data'] = array(
  82. 'title' => $txt['admin_server_settings'],
  83. 'help' => 'serversettings',
  84. 'description' => $txt['admin_basic_settings'],
  85. );
  86. checkSession('request');
  87. // The settings are in here, I swear!
  88. loadLanguage('ManageSettings');
  89. $context['page_title'] = $txt['admin_server_settings'];
  90. $context['sub_template'] = 'show_settings';
  91. $subActions = array(
  92. 'general' => 'ModifyGeneralSettings',
  93. 'database' => 'ModifyDatabaseSettings',
  94. 'cookie' => 'ModifyCookieSettings',
  95. 'cache' => 'ModifyCacheSettings',
  96. 'loads' => 'ModifyLoadBalancingSettings',
  97. 'phpinfo' => 'ShowPHPinfoSettings',
  98. );
  99. call_integration_hook('integrate_server_settings', array(&$subActions));
  100. // By default we're editing the core settings
  101. $_REQUEST['sa'] = isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : 'general';
  102. $context['sub_action'] = $_REQUEST['sa'];
  103. // Warn the user if there's any relevant information regarding Settings.php.
  104. if ($_REQUEST['sa'] != 'cache')
  105. {
  106. // Warn the user if the backup of Settings.php failed.
  107. $settings_not_writable = !is_writable($boarddir . '/Settings.php');
  108. $settings_backup_fail = !@is_writable($boarddir . '/Settings_bak.php') || !@copy($boarddir . '/Settings.php', $boarddir . '/Settings_bak.php');
  109. if ($settings_not_writable)
  110. $context['settings_message'] = '<div class="centertext"><strong>' . $txt['settings_not_writable'] . '</strong></div><br />';
  111. elseif ($settings_backup_fail)
  112. $context['settings_message'] = '<div class="centertext"><strong>' . $txt['admin_backup_fail'] . '</strong></div><br />';
  113. $context['settings_not_writable'] = $settings_not_writable;
  114. }
  115. // Call the right function for this sub-action.
  116. $subActions[$_REQUEST['sa']]();
  117. }
  118. /**
  119. * General forum settings - forum name, maintenance mode, etc.
  120. * Practically, this shows an interface for the settings in Settings.php
  121. * to be changed.
  122. * It uses the rawdata sub template (not theme-able.)
  123. * Requires the admin_forum permission.
  124. * Uses the edit_settings administration area.
  125. * Contains the actual array of settings to show from Settings.php.
  126. * Accessed from ?action=admin;area=serversettings;sa=general.
  127. *
  128. * @param $return_config
  129. */
  130. function ModifyGeneralSettings($return_config = false)
  131. {
  132. global $scripturl, $context, $txt;
  133. /* If you're writing a mod, it's a bad idea to add things here....
  134. For each option:
  135. variable name, description, type (constant), size/possible values, helptext.
  136. OR an empty string for a horizontal rule.
  137. OR a string for a titled section. */
  138. $config_vars = array(
  139. array('mbname', $txt['admin_title'], 'file', 'text', 30),
  140. '',
  141. array('maintenance', $txt['admin_maintain'], 'file', 'check'),
  142. array('mtitle', $txt['maintenance_subject'], 'file', 'text', 36),
  143. array('mmessage', $txt['maintenance_message'], 'file', 'text', 36),
  144. '',
  145. array('webmaster_email', $txt['admin_webmaster_email'], 'file', 'text', 30),
  146. '',
  147. array('enableCompressedOutput', $txt['enableCompressedOutput'], 'db', 'check', null, 'enableCompressedOutput'),
  148. array('disableTemplateEval', $txt['disableTemplateEval'], 'db', 'check', null, 'disableTemplateEval'),
  149. array('disableHostnameLookup', $txt['disableHostnameLookup'], 'db', 'check', null, 'disableHostnameLookup'),
  150. );
  151. call_integration_hook('integrate_general_settings', array(&$config_vars));
  152. if ($return_config)
  153. return $config_vars;
  154. // Setup the template stuff.
  155. $context['post_url'] = $scripturl . '?action=admin;area=serversettings;sa=general;save';
  156. $context['settings_title'] = $txt['general_settings'];
  157. // Saving settings?
  158. if (isset($_REQUEST['save']))
  159. {
  160. call_integration_hook('integrate_save_general_settings');
  161. saveSettings($config_vars);
  162. redirectexit('action=admin;area=serversettings;sa=general;' . $context['session_var'] . '=' . $context['session_id']);
  163. }
  164. // Fill the config array.
  165. prepareServerSettingsContext($config_vars);
  166. }
  167. /**
  168. * Basic database and paths settings - database name, host, etc.
  169. * It shows an interface for the settings in Settings.php to be changed.
  170. * It contains the actual array of settings to show from Settings.php.
  171. * It uses the rawdata sub template (not theme-able.)
  172. * Requires the admin_forum permission.
  173. * Uses the edit_settings administration area.
  174. * Accessed from ?action=admin;area=serversettings;sa=database.
  175. *
  176. * @param $return_config
  177. */
  178. function ModifyDatabaseSettings($return_config = false)
  179. {
  180. global $scripturl, $context, $settings, $txt, $boarddir;
  181. /* If you're writing a mod, it's a bad idea to add things here....
  182. For each option:
  183. variable name, description, type (constant), size/possible values, helptext.
  184. OR an empty string for a horizontal rule.
  185. OR a string for a titled section. */
  186. $config_vars = array(
  187. array('db_server', $txt['database_server'], 'file', 'text'),
  188. array('db_user', $txt['database_user'], 'file', 'text'),
  189. array('db_passwd', $txt['database_password'], 'file', 'password'),
  190. array('db_name', $txt['database_name'], 'file', 'text'),
  191. array('db_prefix', $txt['database_prefix'], 'file', 'text'),
  192. array('db_persist', $txt['db_persist'], 'file', 'check', null, 'db_persist'),
  193. array('db_error_send', $txt['db_error_send'], 'file', 'check'),
  194. array('ssi_db_user', $txt['ssi_db_user'], 'file', 'text', null, 'ssi_db_user'),
  195. array('ssi_db_passwd', $txt['ssi_db_passwd'], 'file', 'password'),
  196. '',
  197. array('autoFixDatabase', $txt['autoFixDatabase'], 'db', 'check', false, 'autoFixDatabase'),
  198. array('autoOptMaxOnline', $txt['autoOptMaxOnline'], 'db', 'int'),
  199. '',
  200. array('boardurl', $txt['admin_url'], 'file', 'text', 36),
  201. array('boarddir', $txt['boarddir'], 'file', 'text', 36),
  202. array('sourcedir', $txt['sourcesdir'], 'file', 'text', 36),
  203. array('cachedir', $txt['cachedir'], 'file', 'text', 36),
  204. );
  205. call_integration_hook('integrate_database_settings', array(&$config_vars));
  206. if ($return_config)
  207. return $config_vars;
  208. // Setup the template stuff.
  209. $context['post_url'] = $scripturl . '?action=admin;area=serversettings;sa=database;save';
  210. $context['settings_title'] = $txt['database_paths_settings'];
  211. $context['save_disabled'] = $context['settings_not_writable'];
  212. // Saving settings?
  213. if (isset($_REQUEST['save']))
  214. {
  215. call_integration_hook('integrate_save_database_settings');
  216. saveSettings($config_vars);
  217. redirectexit('action=admin;area=serversettings;sa=database;' . $context['session_var'] . '=' . $context['session_id']);
  218. }
  219. // Fill the config array.
  220. prepareServerSettingsContext($config_vars);
  221. }
  222. /**
  223. * This function handles cookies settings modifications.
  224. *
  225. * @param bool $return_config = false
  226. */
  227. function ModifyCookieSettings($return_config = false)
  228. {
  229. global $context, $scripturl, $txt, $sourcedir, $modSettings, $cookiename, $user_settings;
  230. // Define the variables we want to edit.
  231. $config_vars = array(
  232. // Cookies...
  233. array('cookiename', $txt['cookie_name'], 'file', 'text', 20),
  234. array('cookieTime', $txt['cookieTime'], 'db', 'int'),
  235. array('localCookies', $txt['localCookies'], 'db', 'check', false, 'localCookies'),
  236. array('globalCookies', $txt['globalCookies'], 'db', 'check', false, 'globalCookies'),
  237. array('secureCookies', $txt['secureCookies'], 'db', 'check', false, 'secureCookies', 'disabled' => !isset($_SERVER['HTTPS']) || !(strtolower($_SERVER['HTTPS']) == 'on' || strtolower($_SERVER['HTTPS']) == '1')),
  238. array('httponlyCookies', $txt['httponlyCookies'], 'db', 'check', false, 'httponlyCookies'),
  239. '',
  240. // Sessions
  241. array('databaseSession_enable', $txt['databaseSession_enable'], 'db', 'check', false, 'databaseSession_enable'),
  242. array('databaseSession_loose', $txt['databaseSession_loose'], 'db', 'check', false, 'databaseSession_loose'),
  243. array('databaseSession_lifetime', $txt['databaseSession_lifetime'], 'db', 'int', false, 'databaseSession_lifetime'),
  244. );
  245. call_integration_hook('integrate_cookie_settings', array(&$config_vars));
  246. if ($return_config)
  247. return $config_vars;
  248. $context['post_url'] = $scripturl . '?action=admin;area=serversettings;sa=cookie;save';
  249. $context['settings_title'] = $txt['cookies_sessions_settings'];
  250. // Saving settings?
  251. if (isset($_REQUEST['save']))
  252. {
  253. call_integration_hook('integrate_save_cookie_settings');
  254. saveSettings($config_vars);
  255. // If the cookie name was changed, reset the cookie.
  256. if ($cookiename != $_POST['cookiename'])
  257. {
  258. $original_session_id = $context['session_id'];
  259. include_once($sourcedir . '/Subs-Auth.php');
  260. // Remove the old cookie.
  261. setLoginCookie(-3600, 0);
  262. // Set the new one.
  263. $cookiename = $_POST['cookiename'];
  264. setLoginCookie(60 * $modSettings['cookieTime'], $user_settings['id_member'], sha1($user_settings['passwd'] . $user_settings['password_salt']));
  265. redirectexit('action=admin;area=serversettings;sa=cookie;' . $context['session_var'] . '=' . $original_session_id, $context['server']['needs_login_fix']);
  266. }
  267. redirectexit('action=admin;area=serversettings;sa=cookie;' . $context['session_var'] . '=' . $context['session_id']);
  268. }
  269. // Fill the config array.
  270. prepareServerSettingsContext($config_vars);
  271. }
  272. /**
  273. * Simply modifying cache functions
  274. *
  275. * @param bool $return_config = false
  276. */
  277. function ModifyCacheSettings($return_config = false)
  278. {
  279. global $context, $scripturl, $txt, $helptxt, $modSettings;
  280. // Define the variables we want to edit.
  281. $config_vars = array(
  282. // Only a couple of settings, but they are important
  283. array('select', 'cache_enable', array($txt['cache_off'], $txt['cache_level1'], $txt['cache_level2'], $txt['cache_level3'])),
  284. array('text', 'cache_memcached'),
  285. );
  286. call_integration_hook('integrate_modify_cache_settings', array(&$config_vars));
  287. if ($return_config)
  288. return $config_vars;
  289. // Saving again?
  290. if (isset($_GET['save']))
  291. {
  292. call_integration_hook('integrate_save_cache_settings');
  293. saveDBSettings($config_vars);
  294. // We have to manually force the clearing of the cache otherwise the changed settings might not get noticed.
  295. $modSettings['cache_enable'] = 1;
  296. cache_put_data('modSettings', null, 90);
  297. redirectexit('action=admin;area=serversettings;sa=cache;' . $context['session_var'] . '=' . $context['session_id']);
  298. }
  299. $context['post_url'] = $scripturl . '?action=admin;area=serversettings;sa=cache;save';
  300. $context['settings_title'] = $txt['caching_settings'];
  301. $context['settings_message'] = $txt['caching_information'];
  302. // Detect an optimizer?
  303. if (function_exists('eaccelerator_put'))
  304. $detected = 'eAccelerator';
  305. elseif (function_exists('mmcache_put'))
  306. $detected = 'MMCache';
  307. elseif (function_exists('apc_store'))
  308. $detected = 'APC';
  309. elseif (function_exists('output_cache_put'))
  310. $detected = 'Zend';
  311. elseif (function_exists('memcache_set') || function_exists('memcached_set'))
  312. $detected = 'Memcached';
  313. elseif (function_exists('xcache_set'))
  314. $detected = 'XCache';
  315. else
  316. $detected = 'no_caching';
  317. $context['settings_message'] = sprintf($context['settings_message'], $txt['detected_' . $detected]);
  318. // Prepare the template.
  319. prepareDBSettingContext($config_vars);
  320. }
  321. /**
  322. * Allows to edit load balancing settings.
  323. *
  324. * @param bool $return_config = false
  325. */
  326. function ModifyLoadBalancingSettings($return_config = false)
  327. {
  328. global $txt, $scripturl, $context, $settings, $modSettings;
  329. // Setup a warning message, but disabled by default.
  330. $disabled = true;
  331. $context['settings_message'] = $txt['loadavg_disabled_conf'];
  332. if (strpos(strtolower(PHP_OS), 'win') === 0)
  333. $context['settings_message'] = $txt['loadavg_disabled_windows'];
  334. else
  335. {
  336. $modSettings['load_average'] = @file_get_contents('/proc/loadavg');
  337. if (!empty($modSettings['load_average']) && preg_match('~^([^ ]+?) ([^ ]+?) ([^ ]+)~', $modSettings['load_average'], $matches) !== 0)
  338. $modSettings['load_average'] = (float) $matches[1];
  339. elseif (($modSettings['load_average'] = @`uptime`) !== null && preg_match('~load averages?: (\d+\.\d+), (\d+\.\d+), (\d+\.\d+)~i', $modSettings['load_average'], $matches) !== 0)
  340. $modSettings['load_average'] = (float) $matches[1];
  341. else
  342. unset($modSettings['load_average']);
  343. if (!empty($modSettings['load_average']))
  344. {
  345. $context['settings_message'] = sprintf($txt['loadavg_warning'], $modSettings['load_average']);
  346. $disabled = false;
  347. }
  348. }
  349. // Start with a simple checkbox.
  350. $config_vars = array(
  351. array('check', 'loadavg_enable'),
  352. );
  353. // Set the default values for each option.
  354. $default_values = array(
  355. 'loadavg_auto_opt' => '1.0',
  356. 'loadavg_search' => '2.5',
  357. 'loadavg_allunread' => '2.0',
  358. 'loadavg_unreadreplies' => '3.5',
  359. 'loadavg_show_posts' => '2.0',
  360. 'loadavg_bbc' => '30.0',
  361. 'loadavg_forum' => '40.0',
  362. );
  363. // Loop through the settings.
  364. foreach ($default_values as $name => $value)
  365. {
  366. // Use the default value if the setting isn't set yet.
  367. $value = !isset($modSettings[$name]) ? $value : $modSettings[$name];
  368. $config_vars[] = array('text', $name, 'value' => $value, 'disabled' => $disabled);
  369. }
  370. call_integration_hook('integrate_loadavg_settings', array(&$config_vars));
  371. if ($return_config)
  372. return $config_vars;
  373. $context['post_url'] = $scripturl . '?action=admin;area=serversettings;sa=loads;save';
  374. $context['settings_title'] = $txt['load_balancing_settings'];
  375. // Saving?
  376. if (isset($_GET['save']))
  377. {
  378. // Stupidity is not allowed.
  379. foreach ($_POST as $key => $value)
  380. {
  381. if (strpos($key, 'loadavg') === 0 || $key === 'loadavg_enable')
  382. continue;
  383. elseif ($key == 'loadavg_auto_opt' && $value <= 1)
  384. $_POST['loadavg_auto_opt'] = '1.0';
  385. elseif ($key == 'loadavg_forum' && $value < 10)
  386. $_POST['loadavg_forum'] = '10.0';
  387. elseif ($value < 2)
  388. $_POST[$key] = '2.0';
  389. }
  390. call_integration_hook('integrate_save_loadavg_settings');
  391. saveDBSettings($config_vars);
  392. redirectexit('action=admin;area=serversettings;sa=loads;' . $context['session_var'] . '=' . $context['session_id']);
  393. }
  394. prepareDBSettingContext($config_vars);
  395. }
  396. /**
  397. * Helper function, it sets up the context for the manage server settings.
  398. *
  399. * @param array $config_vars
  400. */
  401. function prepareServerSettingsContext(&$config_vars)
  402. {
  403. global $context, $modSettings;
  404. $context['config_vars'] = array();
  405. foreach ($config_vars as $identifier => $config_var)
  406. {
  407. if (!is_array($config_var) || !isset($config_var[1]))
  408. $context['config_vars'][] = $config_var;
  409. else
  410. {
  411. $varname = $config_var[0];
  412. global $$varname;
  413. $context['config_vars'][] = array(
  414. 'label' => $config_var[1],
  415. 'help' => isset($config_var[5]) ? $config_var[5] : '',
  416. 'type' => $config_var[3],
  417. 'size' => empty($config_var[4]) ? 0 : $config_var[4],
  418. 'data' => isset($config_var[4]) && is_array($config_var[4]) ? $config_var[4] : array(),
  419. 'name' => $config_var[0],
  420. 'value' => $config_var[2] == 'file' ? htmlspecialchars($$varname) : (isset($modSettings[$config_var[0]]) ? htmlspecialchars($modSettings[$config_var[0]]) : (in_array($config_var[3], array('int', 'float')) ? 0 : '')),
  421. 'disabled' => !empty($context['settings_not_writable']) || !empty($config_var['disabled']),
  422. 'invalid' => false,
  423. 'javascript' => '',
  424. 'preinput' => '',
  425. 'postinput' => '',
  426. );
  427. }
  428. }
  429. createToken('admin-ssc');
  430. createToken('admin-dbsc');
  431. }
  432. /**
  433. * Helper function, it sets up the context for database settings.
  434. * @todo see rev. 10406 from 2.1-requests
  435. *
  436. * @param array $config_vars
  437. */
  438. function prepareDBSettingContext(&$config_vars)
  439. {
  440. global $txt, $helptxt, $context, $modSettings, $sourcedir;
  441. loadLanguage('Help');
  442. $context['config_vars'] = array();
  443. $inlinePermissions = array();
  444. $bbcChoice = array();
  445. foreach ($config_vars as $config_var)
  446. {
  447. // HR?
  448. if (!is_array($config_var))
  449. $context['config_vars'][] = $config_var;
  450. else
  451. {
  452. // If it has no name it doesn't have any purpose!
  453. if (empty($config_var[1]))
  454. continue;
  455. // Special case for inline permissions
  456. if ($config_var[0] == 'permissions' && allowedTo('manage_permissions'))
  457. $inlinePermissions[] = $config_var[1];
  458. elseif ($config_var[0] == 'permissions')
  459. continue;
  460. // Are we showing the BBC selection box?
  461. if ($config_var[0] == 'bbc')
  462. $bbcChoice[] = $config_var[1];
  463. $context['config_vars'][$config_var[1]] = array(
  464. 'label' => isset($config_var['text_label']) ? $config_var['text_label'] : (isset($txt[$config_var[1]]) ? $txt[$config_var[1]] : (isset($config_var[3]) && !is_array($config_var[3]) ? $config_var[3] : '')),
  465. 'help' => isset($helptxt[$config_var[1]]) ? $config_var[1] : '',
  466. 'type' => $config_var[0],
  467. 'size' => !empty($config_var[2]) && !is_array($config_var[2]) ? $config_var[2] : (in_array($config_var[0], array('int', 'float')) ? 6 : 0),
  468. 'data' => array(),
  469. 'name' => $config_var[1],
  470. 'value' => isset($modSettings[$config_var[1]]) ? ($config_var[0] == 'select' ? $modSettings[$config_var[1]] : htmlspecialchars($modSettings[$config_var[1]])) : (in_array($config_var[0], array('int', 'float')) ? 0 : ''),
  471. 'disabled' => false,
  472. 'invalid' => !empty($config_var['invalid']),
  473. 'javascript' => '',
  474. 'var_message' => !empty($config_var['message']) && isset($txt[$config_var['message']]) ? $txt[$config_var['message']] : '',
  475. 'preinput' => isset($config_var['preinput']) ? $config_var['preinput'] : '',
  476. 'postinput' => isset($config_var['postinput']) ? $config_var['postinput'] : '',
  477. );
  478. // If this is a select box handle any data.
  479. if (!empty($config_var[2]) && is_array($config_var[2]))
  480. {
  481. // If we allow multiple selections, we need to adjust a few things.
  482. if ($config_var[0] == 'select' && !empty($config_var['multiple']))
  483. {
  484. $context['config_vars'][$config_var[1]]['name'] .= '[]';
  485. $context['config_vars'][$config_var[1]]['value'] = unserialize($context['config_vars'][$config_var[1]]['value']);
  486. }
  487. // If it's associative
  488. if (isset($config_var[2][0]) && is_array($config_var[2][0]))
  489. $context['config_vars'][$config_var[1]]['data'] = $config_var[2];
  490. else
  491. {
  492. foreach ($config_var[2] as $key => $item)
  493. $context['config_vars'][$config_var[1]]['data'][] = array($key, $item);
  494. }
  495. }
  496. // Finally allow overrides - and some final cleanups.
  497. foreach ($config_var as $k => $v)
  498. {
  499. if (!is_numeric($k))
  500. {
  501. if (substr($k, 0, 2) == 'on')
  502. $context['config_vars'][$config_var[1]]['javascript'] .= ' ' . $k . '="' . $v . '"';
  503. else
  504. $context['config_vars'][$config_var[1]][$k] = $v;
  505. }
  506. // See if there are any other labels that might fit?
  507. if (isset($txt['setting_' . $config_var[1]]))
  508. $context['config_vars'][$config_var[1]]['label'] = $txt['setting_' . $config_var[1]];
  509. elseif (isset($txt['groups_' . $config_var[1]]))
  510. $context['config_vars'][$config_var[1]]['label'] = $txt['groups_' . $config_var[1]];
  511. }
  512. // Set the subtext in case it's part of the label.
  513. // @todo Temporary. Preventing divs inside label tags.
  514. $divPos = strpos($context['config_vars'][$config_var[1]]['label'], '<div');
  515. if ($divPos !== false)
  516. {
  517. $context['config_vars'][$config_var[1]]['subtext'] = preg_replace('~</?div[^>]*>~', '', substr($context['config_vars'][$config_var[1]]['label'], $divPos));
  518. $context['config_vars'][$config_var[1]]['label'] = substr($context['config_vars'][$config_var[1]]['label'], 0, $divPos);
  519. }
  520. }
  521. }
  522. // If we have inline permissions we need to prep them.
  523. if (!empty($inlinePermissions) && allowedTo('manage_permissions'))
  524. {
  525. require_once($sourcedir . '/ManagePermissions.php');
  526. init_inline_permissions($inlinePermissions, isset($context['permissions_excluded']) ? $context['permissions_excluded'] : array());
  527. }
  528. // What about any BBC selection boxes?
  529. if (!empty($bbcChoice))
  530. {
  531. // What are the options, eh?
  532. $temp = parse_bbc(false);
  533. $bbcTags = array();
  534. foreach ($temp as $tag)
  535. $bbcTags[] = $tag['tag'];
  536. $bbcTags = array_unique($bbcTags);
  537. $totalTags = count($bbcTags);
  538. // The number of columns we want to show the BBC tags in.
  539. $numColumns = isset($context['num_bbc_columns']) ? $context['num_bbc_columns'] : 3;
  540. // Start working out the context stuff.
  541. $context['bbc_columns'] = array();
  542. $tagsPerColumn = ceil($totalTags / $numColumns);
  543. $col = 0; $i = 0;
  544. foreach ($bbcTags as $tag)
  545. {
  546. if ($i % $tagsPerColumn == 0 && $i != 0)
  547. $col++;
  548. $context['bbc_columns'][$col][] = array(
  549. 'tag' => $tag,
  550. // @todo 'tag_' . ?
  551. 'show_help' => isset($helptxt[$tag]),
  552. );
  553. $i++;
  554. }
  555. // Now put whatever BBC options we may have into context too!
  556. $context['bbc_sections'] = array();
  557. foreach ($bbcChoice as $bbc)
  558. {
  559. $context['bbc_sections'][$bbc] = array(
  560. 'title' => isset($txt['bbc_title_' . $bbc]) ? $txt['bbc_title_' . $bbc] : $txt['bbcTagsToUse_select'],
  561. 'disabled' => empty($modSettings['bbc_disabled_' . $bbc]) ? array() : $modSettings['bbc_disabled_' . $bbc],
  562. 'all_selected' => empty($modSettings['bbc_disabled_' . $bbc]),
  563. );
  564. }
  565. }
  566. call_integration_hook('integrate_prepare_server_settings', array(&$config_vars));
  567. createToken('admin-dbsc');
  568. }
  569. /**
  570. * Helper function. Saves settings by putting them in Settings.php or saving them in the settings table.
  571. * Saves those settings set from ?action=admin;area=serversettings.
  572. * Requires the admin_forum permission.
  573. * Contains arrays of the types of data to save into Settings.php.
  574. * @param $config_vars
  575. */
  576. function saveSettings(&$config_vars)
  577. {
  578. global $boarddir, $sc, $cookiename, $modSettings, $user_settings;
  579. global $sourcedir, $context, $cachedir;
  580. validateToken('admin-ssc');
  581. // Fix the darn stupid cookiename! (more may not be allowed, but these for sure!)
  582. if (isset($_POST['cookiename']))
  583. $_POST['cookiename'] = preg_replace('~[,;\s\.$]+~' . ($context['utf8'] ? 'u' : ''), '', $_POST['cookiename']);
  584. // Fix the forum's URL if necessary.
  585. if (isset($_POST['boardurl']))
  586. {
  587. if (substr($_POST['boardurl'], -10) == '/index.php')
  588. $_POST['boardurl'] = substr($_POST['boardurl'], 0, -10);
  589. elseif (substr($_POST['boardurl'], -1) == '/')
  590. $_POST['boardurl'] = substr($_POST['boardurl'], 0, -1);
  591. if (substr($_POST['boardurl'], 0, 7) != 'http://' && substr($_POST['boardurl'], 0, 7) != 'file://' && substr($_POST['boardurl'], 0, 8) != 'https://')
  592. $_POST['boardurl'] = 'http://' . $_POST['boardurl'];
  593. }
  594. // Any passwords?
  595. $config_passwords = array(
  596. 'db_passwd',
  597. 'ssi_db_passwd',
  598. );
  599. // All the strings to write.
  600. $config_strs = array(
  601. 'mtitle', 'mmessage',
  602. 'language', 'mbname', 'boardurl',
  603. 'cookiename',
  604. 'webmaster_email',
  605. 'db_name', 'db_user', 'db_server', 'db_prefix', 'ssi_db_user',
  606. 'boarddir', 'sourcedir', 'cachedir',
  607. );
  608. // All the numeric variables.
  609. $config_ints = array(
  610. );
  611. // All the checkboxes.
  612. $config_bools = array(
  613. 'db_persist', 'db_error_send',
  614. 'maintenance',
  615. );
  616. // Now sort everything into a big array, and figure out arrays and etc.
  617. $new_settings = array();
  618. foreach ($config_passwords as $config_var)
  619. {
  620. if (isset($_POST[$config_var][1]) && $_POST[$config_var][0] == $_POST[$config_var][1])
  621. $new_settings[$config_var] = '\'' . addcslashes($_POST[$config_var][0], '\'\\') . '\'';
  622. }
  623. foreach ($config_strs as $config_var)
  624. {
  625. if (isset($_POST[$config_var]))
  626. $new_settings[$config_var] = '\'' . addcslashes($_POST[$config_var], '\'\\') . '\'';
  627. }
  628. foreach ($config_ints as $config_var)
  629. {
  630. if (isset($_POST[$config_var]))
  631. $new_settings[$config_var] = (int) $_POST[$config_var];
  632. }
  633. foreach ($config_bools as $key)
  634. {
  635. if (!empty($_POST[$key]))
  636. $new_settings[$key] = '1';
  637. else
  638. $new_settings[$key] = '0';
  639. }
  640. // Save the relevant settings in the Settings.php file.
  641. require_once($sourcedir . '/Subs-Admin.php');
  642. updateSettingsFile($new_settings);
  643. // Now loopt through the remaining (database-based) settings.
  644. $new_settings = array();
  645. foreach ($config_vars as $config_var)
  646. {
  647. // We just saved the file-based settings, so skip their definitions.
  648. if (!is_array($config_var) || $config_var[2] == 'file')
  649. continue;
  650. // Rewrite the definition a bit.
  651. $new_settings[] = array($config_var[3], $config_var[0]);
  652. }
  653. // Save the new database-based settings, if any.
  654. if (!empty($new_settings))
  655. saveDBSettings($new_settings);
  656. }
  657. /**
  658. * Helper function for saving database settings.
  659. * @todo see rev. 10406 from 2.1-requests
  660. *
  661. * @param array $config_vars
  662. */
  663. function saveDBSettings(&$config_vars)
  664. {
  665. global $sourcedir, $context;
  666. validateToken('admin-dbsc');
  667. $inlinePermissions = array();
  668. foreach ($config_vars as $var)
  669. {
  670. if (!isset($var[1]) || (!isset($_POST[$var[1]]) && $var[0] != 'check' && $var[0] != 'permissions' && ($var[0] != 'bbc' || !isset($_POST[$var[1] . '_enabledTags']))))
  671. continue;
  672. // Checkboxes!
  673. elseif ($var[0] == 'check')
  674. $setArray[$var[1]] = !empty($_POST[$var[1]]) ? '1' : '0';
  675. // Select boxes!
  676. elseif ($var[0] == 'select' && in_array($_POST[$var[1]], array_keys($var[2])))
  677. $setArray[$var[1]] = $_POST[$var[1]];
  678. elseif ($var[0] == 'select' && !empty($var['multiple']) && array_intersect($_POST[$var[1]], array_keys($var[2])) != array())
  679. {
  680. // For security purposes we validate this line by line.
  681. $options = array();
  682. foreach ($_POST[$var[1]] as $invar)
  683. if (in_array($invar, array_keys($var[2])))
  684. $options[] = $invar;
  685. $setArray[$var[1]] = serialize($options);
  686. }
  687. // Integers!
  688. elseif ($var[0] == 'int')
  689. $setArray[$var[1]] = (int) $_POST[$var[1]];
  690. // Floating point!
  691. elseif ($var[0] == 'float')
  692. $setArray[$var[1]] = (float) $_POST[$var[1]];
  693. // Text!
  694. elseif ($var[0] == 'text' || $var[0] == 'large_text')
  695. $setArray[$var[1]] = $_POST[$var[1]];
  696. // Passwords!
  697. elseif ($var[0] == 'password')
  698. {
  699. if (isset($_POST[$var[1]][1]) && $_POST[$var[1]][0] == $_POST[$var[1]][1])
  700. $setArray[$var[1]] = $_POST[$var[1]][0];
  701. }
  702. // BBC.
  703. elseif ($var[0] == 'bbc')
  704. {
  705. $bbcTags = array();
  706. foreach (parse_bbc(false) as $tag)
  707. $bbcTags[] = $tag['tag'];
  708. if (!isset($_POST[$var[1] . '_enabledTags']))
  709. $_POST[$var[1] . '_enabledTags'] = array();
  710. elseif (!is_array($_POST[$var[1] . '_enabledTags']))
  711. $_POST[$var[1] . '_enabledTags'] = array($_POST[$var[1] . '_enabledTags']);
  712. $setArray[$var[1]] = implode(',', array_diff($bbcTags, $_POST[$var[1] . '_enabledTags']));
  713. }
  714. // Permissions?
  715. elseif ($var[0] == 'permissions')
  716. $inlinePermissions[] = $var[1];
  717. }
  718. if (!empty($setArray))
  719. updateSettings($setArray);
  720. // If we have inline permissions we need to save them.
  721. if (!empty($inlinePermissions) && allowedTo('manage_permissions'))
  722. {
  723. require_once($sourcedir . '/ManagePermissions.php');
  724. save_inline_permissions($inlinePermissions);
  725. }
  726. }
  727. /**
  728. * Allows us to see the servers php settings
  729. * - loads the settings into an array for display in a template
  730. * - drops cookie values just in case
  731. *
  732. */
  733. function ShowPHPinfoSettings()
  734. {
  735. global $context;
  736. $info_lines = array();
  737. $category = 'General';
  738. // get the data
  739. ob_start();
  740. phpinfo();
  741. // We only want it for its body, pigs that we are
  742. $info_lines = preg_replace('~^.*<body>(.*)</body>.*$~', '$1', ob_get_contents());
  743. $info_lines = explode("\n", strip_tags($info_lines, "<tr><td><h2>"));
  744. ob_end_clean();
  745. // put all of it into an array
  746. foreach ($info_lines as $line)
  747. {
  748. // lets not load/show these.
  749. if (strpos($line, '_COOKIE') !== false || strpos($line, 'Cookie') !== false)
  750. continue;
  751. // new category?
  752. if (strpos($line, '<h2>') !== false)
  753. $category = preg_match('~<h2>(.*)</h2>~', $line, $title) ? $category = $title[1] : $category;
  754. // load it as setting => value or the old setting local master
  755. if (preg_match('~<tr><td[^>]+>([^<]*)</td><td[^>]+>([^<]*)</td></tr>~', $line, $val))
  756. $pinfo[$category][$val[1]] = $val[2];
  757. elseif (preg_match('~<tr><td[^>]+>([^<]*)</td><td[^>]+>([^<]*)</td><td[^>]+>([^<]*)</td></tr>~', $line, $val))
  758. $pinfo[$category][$val[1]] = array('local' => $val[2], 'master' => $val[3]);
  759. }
  760. // load it in to context and display it
  761. $context['pinfo'] = $pinfo;
  762. $context['page_title'] = $txt['admin_server_settings'];
  763. $context['sub_template'] = 'php_info';
  764. return;
  765. }
  766. ?>