/inc/bx/popoon/components/actions/bxcms.php

<?php
// +----------------------------------------------------------------------+
// | popoon                                                               |
// +----------------------------------------------------------------------+
// | Copyright (c) 2001-2009 Liip AG                                      |
// +----------------------------------------------------------------------+
// | Licensed under the Apache License, Version 2.0 (the "License");      |
// | you may not use this file except in compliance with the License.     |
// | You may obtain a copy of the License at                              |
// | http://www.apache.org/licenses/LICENSE-2.0                           |
// | Unless required by applicable law or agreed to in writing, software  |
// | distributed under the License is distributed on an "AS IS" BASIS,    |
// | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or      |
// | implied. See the License for the specific language governing         |
// | permissions and limitations under the License.                       |
// +----------------------------------------------------------------------+
// | Author: Christian Stocker <chregu@liip.ch>                           |
// +----------------------------------------------------------------------+
//
// $Id$

/**
 *
 * @author   Christian Stocker <chregu@liip.ch>
 * @version  $Id$
 * @package  popoon
 */

class popoon_components_actions_bxcms extends popoon_components_action {

    /**
     * Constructor
     *
     */
    function __construct(&$sitemap) {
        parent::__construct($sitemap);
    }

    function init($attribs) {
        parent::init($attribs);
    }

    function act() {
        // set YADIS Header
        if ($this->getParameterDefault("noAdminDisclosure") != "true") {
            $this->sitemap->setHeader("X-XRDS-Location", BX_WEBROOT . "admin/openid/xrds.xml");
        }

        // set X-PoweredBy
        if ($this->getParameterDefault("noPoweredBy") != "true") {
            $this->sitemap->setHeader("X-CMS-Powered-By", "Flux CMS " . BXCMS_VERSION.'/'.BXCMS_BUILD_DATE ." <http://flux-cms.org>");
        }


        // check for an id...
        $mode = "output";
        if (isset($_GET["admin"])) {
            $this->sitemap->options->popoonmap["admin"] = true;
        }

        if ($id = $this->getParameterDefault("id")) {
            $parts =  bx_collections::getCollectionAndFileParts($id, $mode);
            $fulluri = $parts['coll']->getRequestById($parts['rawname']);
            $lang = $GLOBALS['POOL']->config->getOutputLanguage();
        } else {

            $fulluri = "/".$this->getAttrib("uri");

            //shorturl if it starts with a . or ~
            $firstChar = substr($fulluri,0,2);
            if ($firstChar == '/.' || $firstChar == '/~') {

                $sh = new bx_helpers_shorturl();
                $url = $sh->getUrlFromCode(substr($fulluri,2));
                if ($url) {
                    header("Location: ".BX_WEBROOT."$url", true, 301);
                    die();
                }
            }

            /* using _ as start of a (virtual)collection is not allowed for external requests
             * only for internal for example in bx_streams_blog
             *   $xml = $p->getContentById("/","_all/index");
             */
            if (strpos($fulluri,"/__") !== false) {
                throw new BxPageNotFoundException(substr($_SERVER['REQUEST_URI'],1));
            }

            $mo = (strpos($fulluri, '/mo/') === 0);
            if ($GLOBALS['POOL']->config->mobileMode == 'true') {
                if ($mo || (isset($_COOKIE['isMobile']) && $_COOKIE['isMobile'] == "true")) {
                    if (isset($_GET['isMobile']) && $_GET['isMobile'] == "false") {
                        setcookie("isMobile", false, 0, "/");
                    } else {
                        setcookie("isMobile", "true", time() + 60 * 60 * 24 * 30 * 6, "/");
                        $GLOBALS['POOL']->config->theme = "mobile";
                        $GLOBALS['POOL']->config->themeCss = "main.css";
                    }
                    if ($mo) {
                        $fulluri = substr($fulluri, 3);
                    }

                }
            } else  if ($mo) {
                //redirect to without $mo, if mobileMode is not enabled
                $fulluri = substr($fulluri, 3);
                header("Location: $fulluri", true, 301);
                die();
            }

            if (strpos($fulluri, ".") === false) {
                //if no / at the end of fulluri and no . in filename, we assume, it's a subcollection
                // and do redirect here
                if (substr($fulluri,-1) != "/") {
                    header("Location: ".BX_WEBROOT.preg_replace("#^/#","",$fulluri)."/", true, 301);
                    die();
                }
                $fulluri .= "index.html";
            }

            $req_fulluri = $fulluri;
            list($fulluri, $lang) = bx_collections::getLanguage($fulluri);

            if($GLOBALS['POOL']->config->getConfProperty('languageCookies') == 'true') {
                if(isset($_SESSION['lang']) && $_SESSION['lang'] != $lang) {
                    header("Location: /" . $_SESSION['lang'] . $fulluri, true, 301);
                    die();
                }
                // if the default language is requested specifically (if you change
                // from another language) redirect to the full uri without the language
                // prefix. If this is a POST request don't redirect, otherwise some existing
                // forms might break
                if((strpos($req_fulluri, '/'.BX_DEFAULT_LANGUAGE.'/') === 0
                || strpos($req_fulluri, BX_DEFAULT_LANGUAGE.'/') === 0)
                && empty($_POST)) {
                    header("Location: " . $fulluri, true, 301);
                    die();
                }
            }
            $GLOBALS['POOL']->config->setOutputLanguage($lang);

            //comma to GET parameter...
            if (($pos = strpos($fulluri,",")) !== false && !isset($_GET['nocomma']) && !$_GET['nocomma']) {
                $_gets = str_replace(",","&",substr($fulluri,$pos + 1));
                parse_str(str_replace('$_$',"/",$_gets),$vars);
                foreach($vars as $key => $value) {
                    if (!isset($_REQUEST[$key])) {

                        $_REQUEST[$key] = $value;
                        $_GET[$key] = $value;
                    }
                }
                $fulluri = substr($fulluri,0,$pos);
            }


        }
        $parts = bx_collections::getCollectionAndFileParts($fulluri, $mode);
        $collection = $parts['coll'] ;
        if (!$collection) {
            throw new Exception ("No collection object found");
        }

        if($GLOBALS['POOL']->config->advancedRedirect == 'true'){
            /*
             * userdir
             */
            $userdir = bx_resourcemanager::getFirstPropertyAndPath($fulluri,'redirect');
            if( $userdir !== NULL && $userdir['property'] == '{userdir}' ){

                $user = bx_helpers_perm::getUsername();
                if($user != ''){
                    $fulluri = str_replace($userdir['path'], '', $fulluri);
                    $fulluri = $userdir['path'].'/'.$user.$fulluri;
                    $parts = bx_collections::getCollectionAndFileParts($fulluri, $mode);
                    $collection = $parts['coll'];
                }
            }
        }
        /* 	Check for redirect
         * 	Old "normal" redirect ;)
         */
        $redirect = $collection->getProperty('redirect');
        if ( $redirect !== NULL && ($parts['rawname'] == 'index.html') && $redirect != '{userdir}' ) {

            // absolute path
            if (strpos($redirect, '/') === 0) {
                $fulluri = $redirect;
            } else {
                if(strpos($redirect, '.') === FALSE) {
                    $fulluri = preg_replace("#[a-zA-Z_\-]+\.[a-z]+$#", sprintf("%s\\0", $redirect), $fulluri);
                } else {
                    $fulluri = preg_replace("#[a-zA-Z_\-]+\.[a-z]+$#", $redirect, $fulluri);
                }
            }

            $parts = bx_collections::getCollectionAndFileParts($fulluri, $mode);
            $collection = $parts['coll'];
        }
        $filename = $parts['name'];
        $ext = $parts['ext'];
        $fileNumber = $parts['number'];
        $GLOBALS['POOL']->config->currentFileNumber = $fileNumber;

        if(!isset($_GET["admin"]) && ($collection === FALSE || !$collection->resourceExistsByRequest($filename,$ext) )) {

            /*
             * add <searchCollectionRecursive>true</searchCollectionRecursive>
             * to config.xml to turn on recursive search for existing collections
             */
            if($GLOBALS['POOL']->config->searchCollectionRecursive == 'true'){
                /**
                 * lookuop recursive for an existing html collection
                 */
                while($collection === FALSE || !$collection->resourceExistsByRequest($filename,$ext) ) {

                    $tmp = explode('/',$fulluri);
                    array_pop($tmp);
                    $count = count($tmp);
                    $fulluri = implode('/',$tmp);

                    $checkuri = $fulluri.'/index.html';
                    $parts = bx_collections::getCollectionAndFileParts($checkuri, $mode);

                    $collection = $parts['coll'];
                    $filename = $parts['name'];
                    $ext = $parts['ext'];

                    // break on top
                    // some installation do not have a /index.html
                    // so lets redirect to root
                    if($count == 0) {
                        header("Location: /");
                        die();
                    }
                }

                if($collection === FALSE || !$collection->resourceExistsByRequest($filename,$ext) ) {
                    throw new BxPageNotFoundException($this->getAttrib("uri"));
                }

                $redirect = str_replace('index.html','',$checkuri);

                header("Location: $redirect");
                die();
            }
            throw new BxPageNotFoundException($this->getAttrib("uri"));

        } else {
            //call postHandles...
            //FIXME: to be implemented...
            if ($filename == "") {
                $plugins = $collection->getPluginMapByRequest("/",$ext);
            } else {
                $plugins = $collection->getPluginMapByRequest($filename,$ext);
            }
            $retcode = 0;
            if (isset($_POST['bx']) && isset($_POST['bx']['plugins'])){

                foreach($plugins as $id => $plugin) {
                    if (isset($_POST['bx']['plugins'][$plugin['plugin']->name]) && isset($_POST['bx']['plugins'][$plugin['plugin']->name]['_all'])) {
                        $data = bx_helpers_globals::stripMagicQuotes($_POST);
                        foreach ($data['bx']['plugins'][$plugin['plugin']->name] as $name => $value) {
                            $data[$name] = $value;
                            unset ($data['bx']['plugins'][$plugin['plugin']->name][$name]);
                        }
                        unset($data['bx']['plugins'][$plugin['plugin']->name]);
                        if (count($data['bx']['plugins']) == 0) {
                            unset ($data['bx']['plugins']);
                            if (count($data['bx']) == 0) {
                                unset ($data['bx']);
                            }
                        }

                        $retcode = $plugin['plugin']->handlePublicPost($collection->uri,$id,$data);
                    } else if (isset($_POST['bx']['plugins'][$plugin['plugin']->name])) {
                        $data = bx_helpers_globals::stripMagicQuotes($_POST['bx']['plugins'][$plugin['plugin']->name]);

                        $retcode = $plugin['plugin']->handlePublicPost($collection->uri,$id,$data);

                    }
                }
            }

            bx_helpers_uri::defineWebrootLang($lang);
            define('BX_WEBROOT_LANG_W', substr(BX_WEBROOT_LANG,0,-1));

            if ($GLOBALS['POOL']->config->dynamicHttpExpires == "true") {
                $expires = bx_resourcemanager::getFirstProperty($collection->uri,"expires");
                if ($expires === NULL) {
                    $expires = 10;
                }
            } else {
                $expires = 10;
            }

            $GLOBALS['POOL']->config->uniqueId = bx_resourcemanager::getProperty($collection->uri,"unique-id");

            $GLOBALS['POOL']->config->expires = $expires;
            $a =  array(

                "collection" => $collection,
                "collectionUri" => $collection->uri,
                "filename" => $filename,
                "ext" => $ext,
                "requestUri" => $fulluri,
                "mode" => $mode,
                'lang' => $lang,
                'locale' => $GLOBALS['POOL']->config->getOutputLocale(),
                'webrootLang' => BX_WEBROOT_LANG,
                'fileNumber' => $fileNumber
            );
            $a = array_merge($a,$collection->getPipelineParametersByRequest($filename,$ext));
            $a = array_merge($a,$collection->getPipelineProperties());
            //Do we need that?
            /*
            foreach( $collection->getFirstResource($filename,$ext)->getAllProperties(BX_PROPERTY_PIPELINE_NAMESPACE) as $p) {
            $a[$p['name']] = $p['value'];
            }*/
            if (!isset($a['xslt'])) {
                @session_start();
                if (!($_SESSION['_authsession']['registered'] && isset($_GET['XML']) && $_GET['XML'] == 1)) {

                    throw new Exception ("No xslt provided. Either this URL should only be accessed internally and therefore correct,
                or the sysadmin made a mistake");
                }
            }
            return $a;
        }
    }
}