mirror of
https://github.com/torrentpier/torrentpier-lts.git
synced 2025-02-28 15:10:54 +03:00
474 lines
9.0 KiB
PHP
474 lines
9.0 KiB
PHP
<?php
|
||
|
||
define('IN_AJAX', true);
|
||
define('BB_SCRIPT', 'ajax');
|
||
define('BB_ROOT', './');
|
||
|
||
$ajax = new ajax_common();
|
||
|
||
require(BB_ROOT .'common.php');
|
||
|
||
$ajax->init();
|
||
|
||
// Init userdata
|
||
$user->session_start();
|
||
|
||
// Load actions required modules
|
||
switch ($ajax->action)
|
||
{
|
||
case 'view_post':
|
||
require(INC_DIR . 'bbcode.php');
|
||
break;
|
||
|
||
case 'posts':
|
||
case 'post_mod_comment':
|
||
require(INC_DIR . 'bbcode.php');
|
||
require(INC_DIR . 'functions_post.php');
|
||
require(INC_DIR . 'functions_admin.php');
|
||
break;
|
||
|
||
case 'view_torrent':
|
||
case 'mod_action':
|
||
case 'change_tor_status':
|
||
case 'gen_passkey':
|
||
require(ATTACH_DIR . 'attachment_mod.php');
|
||
require(INC_DIR . 'functions_torrent.php');
|
||
break;
|
||
|
||
case 'change_torrent':
|
||
require(ATTACH_DIR . 'attachment_mod.php');
|
||
require(INC_DIR . 'functions_torrent.php');
|
||
break;
|
||
|
||
case 'user_register':
|
||
require(INC_DIR . 'functions_validate.php');
|
||
break;
|
||
|
||
case 'manage_user':
|
||
case 'manage_admin':
|
||
require(INC_DIR . 'functions_admin.php');
|
||
break;
|
||
|
||
case 'group_membership':
|
||
case 'manage_group':
|
||
require(INC_DIR . 'functions_group.php');
|
||
break;
|
||
|
||
case 'sitemap':
|
||
require(CLASS_DIR .'sitemap.php');
|
||
break;
|
||
}
|
||
|
||
// Position in $ajax->valid_actions['xxx']
|
||
define('AJAX_AUTH', 0); // 'guest', 'user', 'mod', 'admin', 'super_admin'
|
||
define('AJAX_ALWAYS_ACTIVE', 1); // определяет скрипты, которые будут работать при отключенном форуме
|
||
|
||
$ajax->exec();
|
||
|
||
//
|
||
// Ajax
|
||
//
|
||
class ajax_common
|
||
{
|
||
var $request = array();
|
||
var $response = array();
|
||
|
||
var $valid_actions = array(
|
||
// ACTION NAME AJAX_AUTH AJAX_ALWAYS_ACTIVE
|
||
'edit_user_profile' => array('admin'),
|
||
'change_user_rank' => array('admin'),
|
||
'change_user_opt' => array('admin'),
|
||
'manage_user' => array('admin'),
|
||
'manage_admin' => array('admin', true),
|
||
'sitemap' => array('admin', true),
|
||
|
||
'mod_action' => array('mod'),
|
||
'topic_tpl' => array('mod'),
|
||
'group_membership' => array('mod'),
|
||
'post_mod_comment' => array('mod'),
|
||
|
||
'avatar' => array('user'),
|
||
'gen_passkey' => array('user'),
|
||
'change_torrent' => array('user'),
|
||
'change_tor_status' => array('user'),
|
||
'manage_group' => array('user'),
|
||
|
||
'view_post' => array('guest'),
|
||
'view_torrent' => array('guest'),
|
||
'user_register' => array('guest'),
|
||
'posts' => array('guest'),
|
||
'index_data' => array('guest'),
|
||
);
|
||
|
||
var $action = null;
|
||
|
||
/**
|
||
* Constructor
|
||
*/
|
||
function ajax_common()
|
||
{
|
||
ob_start(array(&$this, 'ob_handler'));
|
||
header('Content-Type: text/plain');
|
||
}
|
||
|
||
/**
|
||
* Perform action
|
||
*/
|
||
function exec()
|
||
{
|
||
global $lang, $bb_cfg;
|
||
|
||
// Exit if we already have errors
|
||
if (!empty($this->response['error_code']))
|
||
{
|
||
$this->send();
|
||
}
|
||
|
||
// Check that requested action is valid
|
||
$action = $this->action;
|
||
|
||
// Action params
|
||
$action_params = null;
|
||
|
||
if (!$action || !is_string($action))
|
||
{
|
||
$this->ajax_die('no action specified');
|
||
}
|
||
elseif (!$action_params =& $this->valid_actions[$action])
|
||
{
|
||
$this->ajax_die('invalid action: ' . $action);
|
||
}
|
||
|
||
// Exit if board is disabled via ON/OFF trigger or by admin
|
||
if ($bb_cfg['board_disable'] || file_exists(BB_DISABLED))
|
||
{
|
||
if (file_exists(BB_DISABLED))
|
||
{
|
||
$this->ajax_die($lang['BOARD_DISABLE_CRON']);
|
||
}
|
||
else if ($bb_cfg['board_disable'] && !DBG_USER)
|
||
{
|
||
$this->ajax_die($lang['BOARD_DISABLE']);
|
||
}
|
||
|
||
// Старый вариант (С выбором определенных скриптов, которые будут доступны всем при выключенном форуме)
|
||
//
|
||
// if (file_exists(BB_DISABLED))
|
||
// {
|
||
// $this->ajax_die($lang['BOARD_DISABLE_CRON']);
|
||
// }
|
||
// else if ($bb_cfg['board_disable'] && (!isset($action_params[AJAX_ALWAYS_ACTIVE]) || $action_params[AJAX_ALWAYS_ACTIVE] === false))
|
||
// {
|
||
// $this->ajax_die($lang['BOARD_DISABLE']);
|
||
// }
|
||
}
|
||
|
||
// Auth check
|
||
switch ($action_params[AJAX_AUTH])
|
||
{
|
||
// GUEST
|
||
case 'guest':
|
||
break;
|
||
|
||
// USER
|
||
case 'user':
|
||
if (IS_GUEST)
|
||
{
|
||
$this->ajax_die($lang['NEED_TO_LOGIN_FIRST']);
|
||
}
|
||
break;
|
||
|
||
// MOD
|
||
case 'mod':
|
||
if (!IS_AM)
|
||
{
|
||
$this->ajax_die($lang['ONLY_FOR_MOD']);
|
||
}
|
||
$this->check_admin_session();
|
||
break;
|
||
|
||
// ADMIN
|
||
case 'admin':
|
||
if (!IS_ADMIN)
|
||
{
|
||
$this->ajax_die($lang['ONLY_FOR_ADMIN']);
|
||
}
|
||
$this->check_admin_session();
|
||
break;
|
||
|
||
// SUPER_ADMIN
|
||
case 'super_admin':
|
||
if (!IS_SUPER_ADMIN)
|
||
{
|
||
$this->ajax_die($lang['ONLY_FOR_SUPER_ADMIN']);
|
||
}
|
||
$this->check_admin_session();
|
||
break;
|
||
|
||
default:
|
||
trigger_error("invalid auth type for $action", E_USER_ERROR);
|
||
}
|
||
|
||
// Run action
|
||
$this->$action();
|
||
|
||
// Send output
|
||
$this->send();
|
||
}
|
||
|
||
/**
|
||
* Exit on error
|
||
*/
|
||
function ajax_die($error_msg, $error_code = E_AJAX_GENERAL_ERROR)
|
||
{
|
||
$this->response['error_code'] = $error_code;
|
||
$this->response['error_msg'] = strip_tags(br2nl($error_msg));
|
||
|
||
// Get caller info
|
||
if (!empty($_COOKIE['explain']))
|
||
{
|
||
$ajax_debug = 'ajax die: ' . $this->debug_find_source();
|
||
$this->response['error_msg'] .= "\n\n" . $ajax_debug;
|
||
$this->response['console_log'] = $ajax_debug;
|
||
}
|
||
|
||
$this->send();
|
||
}
|
||
|
||
/**
|
||
* Initialization
|
||
*/
|
||
function init()
|
||
{
|
||
$this->request = $_POST;
|
||
$this->action =& $this->request['action'];
|
||
}
|
||
|
||
/**
|
||
* Send data
|
||
*/
|
||
function send()
|
||
{
|
||
$this->response['action'] = $this->action;
|
||
|
||
if (DBG_USER && SQL_DEBUG && !empty($_COOKIE['sql_log']))
|
||
{
|
||
$this->response['sql_log'] = get_sql_log();
|
||
}
|
||
|
||
// sending output will be handled by $this->ob_handler()
|
||
exit();
|
||
}
|
||
|
||
/**
|
||
* OB Handler
|
||
*/
|
||
function ob_handler($contents)
|
||
{
|
||
if (DBG_USER)
|
||
{
|
||
if ($contents)
|
||
{
|
||
$this->response['raw_output'] = $contents;
|
||
}
|
||
}
|
||
|
||
$response_js = Zend\Json\Json::encode($this->response);
|
||
|
||
if (GZIP_OUTPUT_ALLOWED && !defined('NO_GZIP'))
|
||
{
|
||
if (UA_GZIP_SUPPORTED && strlen($response_js) > 2000)
|
||
{
|
||
header('Content-Encoding: gzip');
|
||
$response_js = gzencode($response_js, 1);
|
||
}
|
||
}
|
||
|
||
return $response_js;
|
||
}
|
||
|
||
/**
|
||
* Admin session
|
||
*/
|
||
function check_admin_session()
|
||
{
|
||
global $user, $lang;
|
||
|
||
if (!$user->data['session_admin'])
|
||
{
|
||
if (empty($this->request['user_password']))
|
||
{
|
||
$this->prompt_for_password();
|
||
}
|
||
else
|
||
{
|
||
$login_args = array(
|
||
'login_username' => $user->data['username'],
|
||
'login_password' => $_POST['user_password'],
|
||
);
|
||
if (!$user->login($login_args, true))
|
||
{
|
||
$this->ajax_die($lang['ERROR_LOGIN']);
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
/**
|
||
* Prompt for password
|
||
*/
|
||
function prompt_for_password()
|
||
{
|
||
$this->response['prompt_password'] = 1;
|
||
$this->send();
|
||
}
|
||
|
||
/**
|
||
* Prompt for confirmation
|
||
*/
|
||
function prompt_for_confirm($confirm_msg)
|
||
{
|
||
if (empty($confirm_msg)) $this->ajax_die('false');
|
||
|
||
$this->response['prompt_confirm'] = 1;
|
||
$this->response['confirm_msg'] = strip_tags(br2nl($confirm_msg));
|
||
$this->send();
|
||
}
|
||
|
||
/**
|
||
* Verify mod rights
|
||
*/
|
||
function verify_mod_rights($forum_id)
|
||
{
|
||
global $userdata, $lang;
|
||
|
||
$is_auth = auth(AUTH_MOD, $forum_id, $userdata);
|
||
|
||
if (!$is_auth['auth_mod'])
|
||
{
|
||
$this->ajax_die($lang['ONLY_FOR_MOD']);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* Find caller source
|
||
*/
|
||
function debug_find_source ($mode = '')
|
||
{
|
||
if (empty($_COOKIE['explain'])) return 'src disabled';
|
||
foreach (debug_backtrace() as $trace)
|
||
{
|
||
if (!empty($trace['file']) && $trace['file'] !== __FILE__)
|
||
{
|
||
switch ($mode)
|
||
{
|
||
case 'file': return $trace['file'];
|
||
case 'line': return $trace['line'];
|
||
default: return hide_bb_path($trace['file']) .'('. $trace['line'] .')';
|
||
}
|
||
}
|
||
}
|
||
return 'src not found';
|
||
}
|
||
|
||
function edit_user_profile()
|
||
{
|
||
require(AJAX_DIR . 'edit_user_profile.php');
|
||
}
|
||
|
||
function change_user_rank()
|
||
{
|
||
require(AJAX_DIR . 'change_user_rank.php');
|
||
}
|
||
|
||
function change_user_opt()
|
||
{
|
||
require(AJAX_DIR . 'change_user_opt.php');
|
||
}
|
||
|
||
function gen_passkey()
|
||
{
|
||
require(AJAX_DIR . 'gen_passkey.php');
|
||
}
|
||
|
||
function group_membership()
|
||
{
|
||
require(AJAX_DIR . 'group_membership.php');
|
||
}
|
||
|
||
function manage_group()
|
||
{
|
||
require(AJAX_DIR . 'edit_group_profile.php');
|
||
}
|
||
|
||
function post_mod_comment()
|
||
{
|
||
require(AJAX_DIR . 'post_mod_comment.php');
|
||
}
|
||
|
||
function view_post()
|
||
{
|
||
require(AJAX_DIR . 'view_post.php');
|
||
}
|
||
|
||
function change_tor_status()
|
||
{
|
||
require(AJAX_DIR . 'change_tor_status.php');
|
||
}
|
||
|
||
function change_torrent()
|
||
{
|
||
require(AJAX_DIR . 'change_torrent.php');
|
||
}
|
||
|
||
function view_torrent()
|
||
{
|
||
require(AJAX_DIR . 'view_torrent.php');
|
||
}
|
||
|
||
function user_register()
|
||
{
|
||
require(AJAX_DIR . 'user_register.php');
|
||
}
|
||
|
||
function mod_action()
|
||
{
|
||
require(AJAX_DIR . 'mod_action.php');
|
||
}
|
||
|
||
function posts()
|
||
{
|
||
require(AJAX_DIR . 'posts.php');
|
||
}
|
||
|
||
function manage_user()
|
||
{
|
||
require(AJAX_DIR . 'manage_user.php');
|
||
}
|
||
|
||
function manage_admin()
|
||
{
|
||
require(AJAX_DIR . 'manage_admin.php');
|
||
}
|
||
|
||
function topic_tpl()
|
||
{
|
||
require(AJAX_DIR . 'topic_tpl.php');
|
||
}
|
||
|
||
function index_data()
|
||
{
|
||
require(AJAX_DIR . 'index_data.php');
|
||
}
|
||
|
||
function avatar()
|
||
{
|
||
require(AJAX_DIR . 'avatar.php');
|
||
}
|
||
|
||
function sitemap()
|
||
{
|
||
require(AJAX_DIR .'sitemap.php');
|
||
}
|
||
}
|