PageRenderTime 55ms CodeModel.GetById 14ms RepoModel.GetById 0ms app.codeStats 1ms

/htdocs/main.inc.php

https://github.com/asterix14/dolibarr
PHP | 1616 lines | 1230 code | 149 blank | 237 comment | 225 complexity | eb717a7f7df4043b49304157eeea19f2 MD5 | raw file
Possible License(s): LGPL-2.0

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /* Copyright (C) 2002-2007 Rodolphe Quiedeville <rodolphe@quiedeville.org>
    3. 

  3.  * Copyright (C) 2003      Xavier Dutoit        <doli@sydesy.com>
    4. 

  4.  * Copyright (C) 2004-2011 Laurent Destailleur  <eldy@users.sourceforge.net>
    5. 

  5.  * Copyright (C) 2004      Sebastien Di Cintio  <sdicintio@ressource-toi.org>
    6. 

  6.  * Copyright (C) 2004      Benoit Mortier       <benoit.mortier@opensides.be>
    7. 

  7.  * Copyright (C) 2005-2011 Regis Houssin        <regis@dolibarr.fr>
    8. 

  8.  * Copyright (C) 2011      Philippe Grand       <philippe.grand@atoo-net.com>
    9. 

  9.  * Copyright (C) 2008      Matteli
    10. 

  10.  * Copyright (C) 2011      Juanjo Menent		<jmenent@2byte.es>
    11. 

  11.  *
    12. 

  12.  * This program is free software; you can redistribute it and/or modify
    13. 

  13.  * it under the terms of the GNU General Public License as published by
    14. 

  14.  * the Free Software Foundation; either version 2 of the License, or
    15. 

  15.  * (at your option) any later version.
    16. 

  16.  *
    17. 

  17.  * This program is distributed in the hope that it will be useful,
    18. 

  18.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
    19. 

  19.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    20. 

  20.  * GNU General Public License for more details.
    21. 

  21.  *
    22. 

  22.  * You should have received a copy of the GNU General Public License
    23. 

  23.  * along with this program. If not, see <http://www.gnu.org/licenses/>.
    24. 

  24.  */
    25. 

  25. 

  26. /**
    27. 

  27.  *	\file       htdocs/main.inc.php
    28. 

  28.  *	\ingroup	core
    29. 

  29.  *	\brief      File that defines environment for Dolibarr pages only (variables not required by scripts)
    30. 

  30.  */
    31. 

  31. 

  32. //@ini_set('memory_limit', '64M');	// This may be useless if memory is hard limited by your PHP
    33. 

  33. 

  34. // For optionnal tuning. Enabled if environment variable DOL_TUNING is defined.
    35. 

  35. // A call first. Is the equivalent function dol_microtime_float not yet loaded.
    36. 

  36. $micro_start_time=0;
    37. 

  37. if (! empty($_SERVER['DOL_TUNING']))
    38. 

  38. {
    39. 

  39. 	list($usec, $sec) = explode(" ", microtime());
    40. 

  40. 	$micro_start_time=((float) $usec + (float) $sec);
    41. 

  41. 	// Add Xdebug code coverage
    42. 

  42. 	//define('XDEBUGCOVERAGE',1);
    43. 

  43. 	if (defined('XDEBUGCOVERAGE')) { xdebug_start_code_coverage(); }
    44. 

  44. }
    45. 

  45. 

  46. // Removed magic_quotes
    47. 

  47. if (function_exists('get_magic_quotes_gpc'))	// magic_quotes_* removed in PHP6
    48. 

  48. {
    49. 

  49. 	if (get_magic_quotes_gpc())
    50. 

  50. 	{
    51. 

  51. 		// Forcing parameter setting magic_quotes_gpc and cleaning parameters
    52. 

  52. 		// (Otherwise he would have for each position, condition
    53. 

  53. 		// Reading stripslashes variable according to state get_magic_quotes_gpc).
    54. 

  54. 		// Off mode (recommended, you just do $db->escape when an insert / update.
    55. 

  55. 		function stripslashes_deep($value)
    56. 

  56. 		{
    57. 

  57. 			return (is_array($value) ? array_map('stripslashes_deep', $value) : stripslashes($value));
    58. 

  58. 		}
    59. 

  59. 		$_GET     = array_map('stripslashes_deep', $_GET);
    60. 

  60. 		$_POST    = array_map('stripslashes_deep', $_POST);
    61. 

  61. 		//$_COOKIE  = array_map('stripslashes_deep', $_COOKIE); // Useless because a cookie should never be outputed on screen nor used into sql
    62. 

  62. 		@set_magic_quotes_runtime(0);
    63. 

  63. 	}
    64. 

  64. }
    65. 

  65. 

  66. /**
    67. 

  67.  * Security: SQL Injection and XSS Injection (scripts) protection (Filters on GET, POST, PHP_SELF)
    68. 

  68.  *
    69. 

  69.  * @param		string		$val		Value
    70. 

  70.  * @param		string		$type		1=GET, 0=POST, 2=PHP_SELF
    71. 

  71.  * @return		boolean					true if there is an injection
    72. 

  72.  */
    73. 

  73. function test_sql_and_script_inject($val, $type)
    74. 

  74. {
    75. 

  75. 	$sql_inj = 0;
    76. 

  76. 	// For SQL Injection (only GET and POST are used to be included into bad escaped SQL requests)
    77. 

  77. 	if ($type != 2)
    78. 

  78. 	{
    79. 

  79.     	$sql_inj += preg_match('/delete[\s]+from/i', $val);
    80. 

  80.     	$sql_inj += preg_match('/create[\s]+table/i', $val);
    81. 

  81.     	$sql_inj += preg_match('/update.+set.+=/i', $val);
    82. 

  82.     	$sql_inj += preg_match('/insert[\s]+into/i', $val);
    83. 

  83.     	$sql_inj += preg_match('/select.+from/i', $val);
    84. 

  84.     	$sql_inj += preg_match('/union.+select/i', $val);
    85. 

  85.     	$sql_inj += preg_match('/(\.\.%2f)+/i', $val);
    86. 

  86. 	}
    87. 

  87. 	// For XSS Injection done by adding javascript with script
    88. 

  88. 	// This is all cases a browser consider text is javascript:
    89. 

  89. 	// When it found '<script', 'javascript:', '<style', 'onload\s=' on body tag, '="&' on a tag size with old browsers
    90. 

  90. 	// All examples on page: http://ha.ckers.org/xss.html#XSScalc
    91. 

  91.     $sql_inj += preg_match('/<script/i', $val);
    92. 

  92.     $sql_inj += preg_match('/<style/i', $val);
    93. 

  93.     $sql_inj += preg_match('/base[\s]+href/i', $val);
    94. 

  94.     if ($type == 1)
    95. 

  95.     {
    96. 

  96. 	    $sql_inj += preg_match('/javascript:/i', $val);
    97. 

  97. 	    $sql_inj += preg_match('/vbscript:/i', $val);
    98. 

  98.     }
    99. 

  99. 	// For XSS Injection done by adding javascript closing html tags like with onmousemove, etc... (closing a src or href tag with not cleaned param)
    100. 

  100. 	if ($type == 1) $sql_inj += preg_match('/"/i', $val);      // We refused " in GET parameters value
    101. 

  101. 	if ($type == 2) $sql_inj += preg_match('/[\s;"]/', $val);    // PHP_SELF is an url and must match url syntax
    102. 

  102. 	return $sql_inj;
    103. 

  103. }
    104. 

  104. 

  105. /**
    106. 

  106.  * Security: Return true if OK, false otherwise
    107. 

  107.  *
    108. 

  108.  * @param		string		&$var		Variable name
    109. 

  109.  * @param		string		$type		1=GET, 0=POST, 2=PHP_SELF
    110. 

  110.  * @return		boolean					true if ther is an injection
    111. 

  111.  */
    112. 

  112. function analyse_sql_and_script(&$var, $type)
    113. 

  113. {
    114. 

  114. 	if (is_array($var))
    115. 

  115. 	{
    116. 

  116. 		foreach ($var as $key => $value)
    117. 

  117. 		{
    118. 

  118. 			if (analyse_sql_and_script($value,$type))
    119. 

  119. 			{
    120. 

  120. 				$var[$key] = $value;
    121. 

  121. 			}
    122. 

  122. 			else
    123. 

  123. 			{
    124. 

  124. 				print 'Access refused by SQL/Script injection protection in main.inc.php';
    125. 

  125. 				exit;
    126. 

  126. 			}
    127. 

  127. 		}
    128. 

  128. 		return true;
    129. 

  129. 	}
    130. 

  130. 	else
    131. 

  131. 	{
    132. 

  132. 		return (test_sql_and_script_inject($var,$type) <= 0);
    133. 

  133. 	}
    134. 

  134. }
    135. 

  135. 

  136. // Sanity check on URL
    137. 

  137. if (! empty($_SERVER["PHP_SELF"]))
    138. 

  138. {
    139. 

  139.     $morevaltochecklikepost=array($_SERVER["PHP_SELF"]);
    140. 

  140.     analyse_sql_and_script($morevaltochecklikepost,2);
    141. 

  141. }
    142. 

  142. // Sanity check on GET parameters
    143. 

  143. if (! empty($_SERVER["QUERY_STRING"]))
    144. 

  144. {
    145. 

  145.     $morevaltochecklikeget=array($_SERVER["QUERY_STRING"]);
    146. 

  146.     analyse_sql_and_script($morevaltochecklikeget,1);
    147. 

  147. }
    148. 

  148. // Sanity check on POST
    149. 

  149. analyse_sql_and_script($_POST,0);
    150. 

  150. 

  151. // This is to make Dolibarr working with Plesk
    152. 

  152. if (! empty($_SERVER['DOCUMENT_ROOT'])) set_include_path($_SERVER['DOCUMENT_ROOT'].'/htdocs');
    153. 

  153. 

  154. // Include the conf.php and functions.lib.php
    155. 

  155. require_once("filefunc.inc.php");
    156. 

  156. 

  157. // Init session. Name of session is specific to Dolibarr instance.
    158. 

  158. $prefix=dol_getprefix();
    159. 

  159. $sessionname='DOLSESSID_'.$prefix;
    160. 

  160. $sessiontimeout='DOLSESSTIMEOUT_'.$prefix;
    161. 

  161. if (! empty($_COOKIE[$sessiontimeout])) ini_set('session.gc_maxlifetime',$_COOKIE[$sessiontimeout]);
    162. 

  162. session_name($sessionname);
    163. 

  163. session_start();
    164. 

  164. 

  165. // Init the 5 global objects
    166. 

  166. // This include will set: $conf, $db, $langs, $user, $mysoc objects
    167. 

  167. require_once("master.inc.php");
    168. 

  168. 

  169. // Activate end of page function
    170. 

  170. register_shutdown_function('dol_shutdown');
    171. 

  171. 

  172. // Detection browser
    173. 

  173. if (isset($_SERVER["HTTP_USER_AGENT"]))
    174. 

  174. {
    175. 

  175. 	// If phone/smartphone, we set phone os name.
    176. 

  176. 	if (preg_match('/android/i',$_SERVER["HTTP_USER_AGENT"]))			$conf->browser->phone='android';
    177. 

  177. 	elseif (preg_match('/blackberry/i',$_SERVER["HTTP_USER_AGENT"]))	$conf->browser->phone='blackberry';
    178. 

  178. 	elseif (preg_match('/iphone/i',$_SERVER["HTTP_USER_AGENT"]))		$conf->browser->phone='iphone';
    179. 

  179. 	elseif (preg_match('/ipod/i',$_SERVER["HTTP_USER_AGENT"]))			$conf->browser->phone='iphone';
    180. 

  180. 	elseif (preg_match('/palm/i',$_SERVER["HTTP_USER_AGENT"]))			$conf->browser->phone='palm';
    181. 

  181. 	elseif (preg_match('/symbian/i',$_SERVER["HTTP_USER_AGENT"]))		$conf->browser->phone='symbian';
    182. 

  182. 	elseif (preg_match('/webos/i',$_SERVER["HTTP_USER_AGENT"]))			$conf->browser->phone='webos';
    183. 

  183. 	elseif (preg_match('/maemo/i',$_SERVER["HTTP_USER_AGENT"]))			$conf->browser->phone='maemo';
    184. 

  184. 	// MS products at end
    185. 

  185. 	elseif (preg_match('/iemobile/i',$_SERVER["HTTP_USER_AGENT"]))		$conf->browser->phone='windowsmobile';
    186. 

  186. 	elseif (preg_match('/windows ce/i',$_SERVER["HTTP_USER_AGENT"]))	$conf->browser->phone='windowsmobile';
    187. 

  187. 	// Name
    188. 

  188. 	if (preg_match('/firefox/i',$_SERVER["HTTP_USER_AGENT"]))       $conf->browser->name='firefox';
    189. 

  189. 	elseif (preg_match('/chrome/i',$_SERVER["HTTP_USER_AGENT"]))    $conf->browser->name='chrome';
    190. 

  190. 	elseif (preg_match('/iceweasel/i',$_SERVER["HTTP_USER_AGENT"])) $conf->browser->name='iceweasel';
    191. 

  191. 	elseif ((empty($conf->browser->phone) || preg_match('/iphone/i',$_SERVER["HTTP_USER_AGENT"])) && preg_match('/safari/i',$_SERVER["HTTP_USER_AGENT"]))    $conf->browser->name='safari';	// Safari is often present in string but its not.
    192. 

  192. 	elseif (preg_match('/opera/i',$_SERVER["HTTP_USER_AGENT"]))     $conf->browser->name='opera';
    193. 

  193. 	// MS products at end
    194. 

  194. 	elseif (preg_match('/msie/i',$_SERVER["HTTP_USER_AGENT"]))      $conf->browser->name='ie';
    195. 

  195. 	else $conf->browser->name='unknown';
    196. 

  196. 	// Other
    197. 

  197. 	if (in_array($conf->browser->name,array('firefox','iceweasel'))) $conf->browser->firefox=1;
    198. 

  198. 	//$conf->browser->phone='android';
    199. 

  199. }
    200. 

  200. 

  201. 

  202. // Force HTTPS if required ($conf->file->main_force_https is 0/1 or https dolibarr root url)
    203. 

  203. if (! empty($conf->file->main_force_https))
    204. 

  204. {
    205. 

  205. 	$newurl='';
    206. 

  206. 	if ($conf->file->main_force_https == '1')
    207. 

  207. 	{
    208. 

  208. 		if (! empty($_SERVER["SCRIPT_URI"]))	// If SCRIPT_URI supported by server
    209. 

  209. 		{
    210. 

  210. 			if (preg_match('/^http:/i',$_SERVER["SCRIPT_URI"]) && ! preg_match('/^https:/i',$_SERVER["SCRIPT_URI"]))	// If link is http
    211. 

  211. 			{
    212. 

  212. 				$newurl=preg_replace('/^http:/i','https:',$_SERVER["SCRIPT_URI"]);
    213. 

  213. 			}
    214. 

  214. 		}
    215. 

  215. 		else	// Check HTTPS environment variable (Apache/mod_ssl only)
    216. 

  216. 		{
    217. 

  217. 			// $_SERVER["HTTPS"] is 'on' when link is https, otherwise $_SERVER["HTTPS"] is empty or 'off'
    218. 

  218. 			if (empty($_SERVER["HTTPS"]) || $_SERVER["HTTPS"] != 'on')		// If link is http
    219. 

  219. 			{
    220. 

  220. 				$newurl=preg_replace('/^http:/i','https:',DOL_MAIN_URL_ROOT).$_SERVER["REQUEST_URI"];
    221. 

  221. 			}
    222. 

  222. 		}
    223. 

  223. 	}
    224. 

  224. 	else
    225. 

  225. 	{
    226. 

  226. 		$newurl=$conf->file->main_force_https.$_SERVER["REQUEST_URI"];
    227. 

  227. 	}
    228. 

  228. 	// Start redirect
    229. 

  229. 	if ($newurl)
    230. 

  230. 	{
    231. 

  231. 		dol_syslog("main.inc: dolibarr_main_force_https is on, we make a redirect to ".$newurl);
    232. 

  232. 		header("Location: ".$newurl);
    233. 

  233. 		exit;
    234. 

  234. 	}
    235. 

  235. 	else
    236. 

  236. 	{
    237. 

  237. 		dol_syslog("main.inc: dolibarr_main_force_https is on but we failed to forge new https url so no redirect is done", LOG_WARNING);
    238. 

  238. 	}
    239. 

  239. }
    240. 

  240. 

  241. 

  242. // Chargement des includes complementaires de presentation
    243. 

  243. if (! defined('NOREQUIREMENU')) require_once(DOL_DOCUMENT_ROOT ."/core/class/menu.class.php");			// Need 10ko memory (11ko in 2.2)
    244. 

  244. if (! defined('NOREQUIREHTML')) require_once(DOL_DOCUMENT_ROOT ."/core/class/html.form.class.php");	    // Need 660ko memory (800ko in 2.2)
    245. 

  245. if (! defined('NOREQUIREAJAX') && $conf->use_javascript_ajax) require_once(DOL_DOCUMENT_ROOT.'/core/lib/ajax.lib.php');	// Need 22ko memory
    246. 

  246. 

  247. // If install or upgrade process not done or not completely finished, we call the install page.
    248. 

  248. if (! empty($conf->global->MAIN_NOT_INSTALLED) || ! empty($conf->global->MAIN_NOT_UPGRADED))
    249. 

  249. {
    250. 

  250. 	dol_syslog("main.inc: A previous install or upgrade was not complete. Redirect to install page.", LOG_WARNING);
    251. 

  251. 	Header("Location: ".DOL_URL_ROOT."/install/index.php");
    252. 

  252. 	exit;
    253. 

  253. }
    254. 

  254. // If an upgrade process is required, we call the install page.
    255. 

  255. if ((! empty($conf->global->MAIN_VERSION_LAST_UPGRADE) && ($conf->global->MAIN_VERSION_LAST_UPGRADE != DOL_VERSION))
    256. 

  256. || (empty($conf->global->MAIN_VERSION_LAST_UPGRADE) && ! empty($conf->global->MAIN_VERSION_LAST_INSTALL) && ($conf->global->MAIN_VERSION_LAST_INSTALL != DOL_VERSION)))
    257. 

  257. {
    258. 

  258.     $versiontocompare=empty($conf->global->MAIN_VERSION_LAST_UPGRADE)?$conf->global->MAIN_VERSION_LAST_INSTALL:$conf->global->MAIN_VERSION_LAST_UPGRADE;
    259. 

  259.     require_once(DOL_DOCUMENT_ROOT ."/core/lib/admin.lib.php");
    260. 

  260. 	$dolibarrversionlastupgrade=preg_split('/[.-]/',$versiontocompare);
    261. 

  261. 	$dolibarrversionprogram=preg_split('/[.-]/',DOL_VERSION);
    262. 

  262.     $rescomp=versioncompare($dolibarrversionprogram,$dolibarrversionlastupgrade);
    263. 

  263.     if ($rescomp > 0)   // Programs have a version higher than database. We did not add "&& $rescomp < 3" because we want upgrade process for build upgrades
    264. 

  264. 	{
    265. 

  265. 		dol_syslog("main.inc: database version ".$versiontocompare." is lower than programs version ".DOL_VERSION.". Redirect to install page.", LOG_WARNING);
    266. 

  266. 		Header("Location: ".DOL_URL_ROOT."/install/index.php");
    267. 

  267. 		exit;
    268. 

  268. 	}
    269. 

  269. }
    270. 

  270. 

  271. // Creation of a token against CSRF vulnerabilities
    272. 

  272. if (! defined('NOTOKENRENEWAL'))
    273. 

  273. {
    274. 

  274. 	$token = dol_hash(uniqid(mt_rand(),TRUE)); // Genere un hash d'un nombre aleatoire
    275. 

  275. 	// roulement des jetons car cree a chaque appel
    276. 

  276. 	if (isset($_SESSION['newtoken'])) $_SESSION['token'] = $_SESSION['newtoken'];
    277. 

  277. 	$_SESSION['newtoken'] = $token;
    278. 

  278. }
    279. 

  279. if (! empty($conf->global->MAIN_SECURITY_CSRF))	// Check validity of token, only if option enabled (this option breaks some features sometimes)
    280. 

  280. {
    281. 

  281. 	if (isset($_POST['token']) && isset($_SESSION['token']))
    282. 

  282. 	{
    283. 

  283. 		if (($_POST['token'] != $_SESSION['token']))
    284. 

  284. 		{
    285. 

  285. 			dol_syslog("Invalid token in ".$_SERVER['HTTP_REFERER'].", action=".$_POST['action'].", _POST['token']=".$_POST['token'].", _SESSION['token']=".$_SESSION['token'],LOG_WARNING);
    286. 

  286. 			//print 'Unset POST by CSRF protection in main.inc.php.';	// Do not output anything because this create problems when using the BACK button on browsers.
    287. 

  287. 			unset($_POST);
    288. 

  288. 		}
    289. 

  289. 	}
    290. 

  290. }
    291. 

  291. 

  292. // Disable modules (this must be after session_start and after conf has been loaded)
    293. 

  293. if (GETPOST('disablemodules'))  $_SESSION["disablemodules"]=GETPOST('disablemodules');
    294. 

  294. if (! empty($_SESSION["disablemodules"]))
    295. 

  295. {
    296. 

  296. 	$disabled_modules=explode(',',$_SESSION["disablemodules"]);
    297. 

  297. 	foreach($disabled_modules as $module)
    298. 

  298. 	{
    299. 

  299. 		if ($module) $conf->$module->enabled=false;
    300. 

  300. 	}
    301. 

  301. }
    302. 

  302. 

  303. 

  304. /*
    305. 

  305.  * Phase authentication / login
    306. 

  306.  */
    307. 

  307. $login='';
    308. 

  308. if (! defined('NOLOGIN'))
    309. 

  309. {
    310. 

  310. 	// $authmode lists the different means of identification to be tested in order of preference.
    311. 

  311. 	// Example: 'http'
    312. 

  312. 	// Example: 'dolibarr'
    313. 

  313. 	// Example: 'ldap'
    314. 

  314. 	// Example: 'http,forceuser'
    315. 

  315. 

  316. 	// Authentication mode
    317. 

  317. 	if (empty($dolibarr_main_authentication)) $dolibarr_main_authentication='http,dolibarr';
    318. 

  318. 	// Authentication mode: forceuser
    319. 

  319. 	if ($dolibarr_main_authentication == 'forceuser' && empty($dolibarr_auto_user)) $dolibarr_auto_user='auto';
    320. 

  320. 	// Set authmode
    321. 

  321. 	$authmode=explode(',',$dolibarr_main_authentication);
    322. 

  322. 

  323. 	// No authentication mode
    324. 

  324. 	if (! count($authmode) && empty($conf->login_method_modules))
    325. 

  325. 	{
    326. 

  326. 		$langs->load('main');
    327. 

  327. 		dol_print_error('',$langs->trans("ErrorConfigParameterNotDefined",'dolibarr_main_authentication'));
    328. 

  328. 		exit;
    329. 

  329. 	}
    330. 

  330. 

  331. 	// If requested by the login has already occurred, it is retrieved from the session
    332. 

  332. 	// Call module if not realized that his request.
    333. 

  333. 	// At the end of this phase, the variable $login is defined.
    334. 

  334. 	$resultFetchUser='';
    335. 

  335. 	$test=true;
    336. 

  336. 	if (! isset($_SESSION["dol_login"]))
    337. 

  337. 	{
    338. 

  338. 		// It is not already authenticated, it requests the login / password
    339. 

  339. 

  340. 	    // If in demo mode, we check we go to home page through the public/demo/index.php page
    341. 

  341. 	    if ($dolibarr_main_demo && $_SERVER['PHP_SELF'] == DOL_URL_ROOT.'/index.php')  // We ask index page
    342. 

  342.         {
    343. 

  343.             if (! preg_match('/public/',$_SERVER['HTTP_REFERER']))
    344. 

  344.             {
    345. 

  345.                 dol_syslog("Call index page from another url than demo page");
    346. 

  346.                 header("Location: ".DOL_URL_ROOT.'/public/demo/index.php');
    347. 

  347.                 exit;
    348. 

  348.             }
    349. 

  349.         }
    350. 

  350. 

  351. 		// Verification security graphic code
    352. 

  352. 		if (GETPOST("username","alpha",2) && ! empty($conf->global->MAIN_SECURITY_ENABLECAPTCHA))
    353. 

  353. 		{
    354. 

  354. 			require_once(ARTICHOW_PATH.'Artichow.cfg.php');
    355. 

  355. 			require_once(ARTICHOW.'/AntiSpam.class.php');
    356. 

  356. 

  357. 			$object = new AntiSpam();
    358. 

  358. 

  359. 			// Verifie code
    360. 

  360. 			if (! $object->check('dol_antispam_value',$_POST['code'],true))
    361. 

  361. 			{
    362. 

  362. 				dol_syslog('Bad value for code, connexion refused');
    363. 

  363. 				$langs->load('main');
    364. 

  364. 				$langs->load('errors');
    365. 

  365. 

  366. 				$user->trigger_mesg='ErrorBadValueForCode - login='.GETPOST("username","alpha",2);
    367. 

  367. 				$_SESSION["dol_loginmesg"]=$langs->trans("ErrorBadValueForCode");
    368. 

  368. 				$test=false;
    369. 

  369. 

  370. 				// Appel des triggers
    371. 

  371. 				include_once(DOL_DOCUMENT_ROOT . "/core/class/interfaces.class.php");
    372. 

  372. 				$interface=new Interfaces($db);
    373. 

  373. 				$result=$interface->run_triggers('USER_LOGIN_FAILED',$user,$user,$langs,$conf,GETPOST('entity'));
    374. 

  374. 				if ($result < 0) { $error++; }
    375. 

  375. 				// Fin appel triggers
    376. 

  376. 			}
    377. 

  377. 		}
    378. 

  378. 

  379. 		$usertotest		= (! empty($_COOKIE['login_dolibarr']) ? $_COOKIE['login_dolibarr'] : GETPOST("username","alpha",2));
    380. 

  380. 		$passwordtotest	= (! empty($_COOKIE['password_dolibarr']) ? $_COOKIE['password_dolibarr'] : $_POST["password"]);
    381. 

  381. 		$entitytotest	= (! empty($_POST["entity"]) ? $_POST["entity"] : 1);
    382. 

  382. 

  383. 		// Validation of login/pass/entity
    384. 

  384. 		// If ok, the variable login will be returned
    385. 

  385. 		// If error, we will put error message in session under the name dol_loginmesg
    386. 

  386. 		$goontestloop=false;
    387. 

  387. 		if (isset($_SERVER["REMOTE_USER"]) && in_array('http',$authmode)) $goontestloop=true;
    388. 

  388. 		if (GETPOST("username","alpha",2) || ! empty($_COOKIE['login_dolibarr']) || GETPOST('openid_mode','alpha',1)) $goontestloop=true;
    389. 

  389. 

  390. 		if ($test && $goontestloop)
    391. 

  391. 		{
    392. 

  392. 			$login = checkLoginPassEntity($usertotest,$passwordtotest,$entitytotest,$authmode);
    393. 

  393. 			if ($login)
    394. 

  394. 			{
    395. 

  395. 				$dol_authmode=$conf->authmode;	// This properties is defined only when logged to say what mode was successfully used
    396. 

  396. 				$dol_tz=$_POST["tz"];
    397. 

  397. 				$dol_dst=0;
    398. 

  398. 				if (isset($_POST["dst_first"]) && isset($_POST["dst_second"]))
    399. 

  399. 				{
    400. 

  400.                     $datenow=dol_now();
    401. 

  401.                     $datefirst=dol_stringtotime($_POST["dst_first"]);
    402. 

  402.                     $datesecond=dol_stringtotime($_POST["dst_second"]);
    403. 

  403.                     if ($datenow >= $datefirst && $datenow < $datesecond) $dol_dst=1;
    404. 

  404. 				}
    405. 

  405. 				//print $datefirst.'-'.$datesecond.'-'.$datenow; exit;
    406. 

  406. 				$dol_dst_observed=$_POST["dst_observed"];
    407. 

  407. 				$dol_dst_first=$_POST["dst_first"];
    408. 

  408. 				$dol_dst_second=$_POST["dst_second"];
    409. 

  409. 				$dol_screenwidth=$_POST["screenwidth"];
    410. 

  410. 				$dol_screenheight=$_POST["screenheight"];
    411. 

  411. 			}
    412. 

  412. 

  413. 			if (! $login)
    414. 

  414. 			{
    415. 

  415. 				dol_syslog('Bad password, connexion refused',LOG_DEBUG);
    416. 

  416. 				$langs->load('main');
    417. 

  417. 				$langs->load('errors');
    418. 

  418. 

  419. 				// Bad password. No authmode has found a good password.
    420. 

  420. 				$user->trigger_mesg=$langs->trans("ErrorBadLoginPassword").' - login='.GETPOST("username","alpha",2);
    421. 

  421. 				$_SESSION["dol_loginmesg"]=$langs->trans("ErrorBadLoginPassword");
    422. 

  422. 

  423. 				// Appel des triggers
    424. 

  424. 				include_once(DOL_DOCUMENT_ROOT . "/core/class/interfaces.class.php");
    425. 

  425. 				$interface=new Interfaces($db);
    426. 

  426. 				$result=$interface->run_triggers('USER_LOGIN_FAILED',$user,$user,$langs,$conf,GETPOST("username","alpha",2));
    427. 

  427. 				if ($result < 0) { $error++; }
    428. 

  428. 				// Fin appel triggers
    429. 

  429. 			}
    430. 

  430. 		}
    431. 

  431. 

  432. 		// End test login / passwords
    433. 

  433. 		if (! $login)
    434. 

  434. 		{
    435. 

  435. 			// We show login page
    436. 

  436. 			if (! is_object($langs)) // This can occurs when calling page with NOREQUIRETRAN defined
    437. 

  437. 			{
    438. 

  438.                 include_once(DOL_DOCUMENT_ROOT."/core/class/translate.class.php");
    439. 

  439. 				$langs=new Translate("",$conf);
    440. 

  440. 			}
    441. 

  441. 			dol_loginfunction($langs,$conf,$mysoc);
    442. 

  442. 			exit;
    443. 

  443. 		}
    444. 

  444. 

  445. 		$resultFetchUser=$user->fetch('',$login);
    446. 

  446. 		if ($resultFetchUser <= 0)
    447. 

  447. 		{
    448. 

  448. 			dol_syslog('User not found, connexion refused');
    449. 

  449. 			session_destroy();
    450. 

  450. 			session_name($sessionname);
    451. 

  451. 			session_start();
    452. 

  452. 

  453. 			if ($resultFetchUser == 0)
    454. 

  454. 			{
    455. 

  455. 				$langs->load('main');
    456. 

  456. 				$langs->load('errors');
    457. 

  457. 

  458. 				$user->trigger_mesg='ErrorCantLoadUserFromDolibarrDatabase - login='.$login;
    459. 

  459. 				$_SESSION["dol_loginmesg"]=$langs->trans("ErrorCantLoadUserFromDolibarrDatabase",$login);
    460. 

  460. 			}
    461. 

  461. 			if ($resultFetchUser < 0)
    462. 

  462. 			{
    463. 

  463. 				$user->trigger_mesg=$user->error;
    464. 

  464. 				$_SESSION["dol_loginmesg"]=$user->error;
    465. 

  465. 			}
    466. 

  466. 

  467. 			// Call triggers
    468. 

  468. 			include_once(DOL_DOCUMENT_ROOT . "/core/class/interfaces.class.php");
    469. 

  469. 			$interface=new Interfaces($db);
    470. 

  470. 			$result=$interface->run_triggers('USER_LOGIN_FAILED',$user,$user,$langs,$conf,$_POST["entity"]);
    471. 

  471. 			if ($result < 0) { $error++; }
    472. 

  472. 			// End call triggers
    473. 

  473. 

  474. 			header('Location: '.DOL_URL_ROOT.'/index.php');
    475. 

  475. 			exit;
    476. 

  476. 		}
    477. 

  477. 	}
    478. 

  478. 	else
    479. 

  479. 	{
    480. 

  480. 		// We are already into an authenticated session
    481. 

  481. 		$login=$_SESSION["dol_login"];
    482. 

  482. 		dol_syslog("This is an already logged session. _SESSION['dol_login']=".$login);
    483. 

  483. 

  484. 		$resultFetchUser=$user->fetch('',$login);
    485. 

  485. 		if ($resultFetchUser <= 0)
    486. 

  486. 		{
    487. 

  487. 			// Account has been removed after login
    488. 

  488. 			dol_syslog("Can't load user even if session logged. _SESSION['dol_login']=".$login, LOG_WARNING);
    489. 

  489. 			session_destroy();
    490. 

  490. 			session_name($sessionname);
    491. 

  491. 			session_start();
    492. 

  492. 

  493. 			if ($resultFetchUser == 0)
    494. 

  494. 			{
    495. 

  495. 				$langs->load('main');
    496. 

  496. 				$langs->load('errors');
    497. 

  497. 

  498. 				$user->trigger_mesg='ErrorCantLoadUserFromDolibarrDatabase - login='.$login;
    499. 

  499. 				$_SESSION["dol_loginmesg"]=$langs->trans("ErrorCantLoadUserFromDolibarrDatabase",$login);
    500. 

  500. 			}
    501. 

  501. 			if ($resultFetchUser < 0)
    502. 

  502. 			{
    503. 

  503. 				$user->trigger_mesg=$user->error;
    504. 

  504. 				$_SESSION["dol_loginmesg"]=$user->error;
    505. 

  505. 			}
    506. 

  506. 

  507. 			// Call triggers
    508. 

  508. 			include_once(DOL_DOCUMENT_ROOT . "/core/class/interfaces.class.php");
    509. 

  509. 			$interface=new Interfaces($db);
    510. 

  510. 			$result=$interface->run_triggers('USER_LOGIN_FAILED',$user,$user,$langs,$conf,(isset($_POST["entity"])?$_POST["entity"]:0));
    511. 

  511. 			if ($result < 0) { $error++; }
    512. 

  512. 			// End call triggers
    513. 

  513. 

  514. 			header('Location: '.DOL_URL_ROOT.'/index.php');
    515. 

  515. 			exit;
    516. 

  516. 		}
    517. 

  517. 		else
    518. 

  518. 		{
    519. 

  519. 		    if (! empty($conf->global->MAIN_ACTIVATE_UPDATESESSIONTRIGGER))	// We do not execute such trigger at each page load by default
    520. 

  520. 		    {
    521. 

  521.     			// Call triggers
    522. 

  522.     			include_once(DOL_DOCUMENT_ROOT . "/core/class/interfaces.class.php");
    523. 

  523.     			$interface=new Interfaces($db);
    524. 

  524.     			$result=$interface->run_triggers('USER_UPDATE_SESSION',$user,$user,$langs,$conf,$conf->entity);
    525. 

  525.     			if ($result < 0) { $error++; }
    526. 

  526.     			// End call triggers
    527. 

  527. 		    }
    528. 

  528. 		}
    529. 

  529. 	}
    530. 

  530. 

  531. 	// Is it a new session that has started ?
    532. 

  532. 	// If we are here, this means authentication was successfull.
    533. 

  533. 	if (! isset($_SESSION["dol_login"]))
    534. 

  534. 	{
    535. 

  535. 		$error=0;
    536. 

  536. 

  537. 		// New session for this login
    538. 

  538. 		$_SESSION["dol_login"]=$user->login;
    539. 

  539. 		$_SESSION["dol_authmode"]=isset($dol_authmode)?$dol_authmode:'';
    540. 

  540. 		$_SESSION["dol_tz"]=isset($dol_tz)?$dol_tz:'';
    541. 

  541. 		$_SESSION["dol_dst"]=isset($dol_dst)?$dol_dst:'';
    542. 

  542. 		$_SESSION["dol_dst_observed"]=isset($dol_dst_observed)?$dol_dst_observed:'';
    543. 

  543. 		$_SESSION["dol_dst_first"]=isset($dol_dst_first)?$dol_dst_first:'';
    544. 

  544. 		$_SESSION["dol_dst_second"]=isset($dol_dst_second)?$dol_dst_second:'';
    545. 

  545. 		$_SESSION["dol_screenwidth"]=isset($dol_screenwidth)?$dol_screenwidth:'';
    546. 

  546. 		$_SESSION["dol_screenheight"]=isset($dol_screenheight)?$dol_screenheight:'';
    547. 

  547. 		$_SESSION["dol_company"]=$conf->global->MAIN_INFO_SOCIETE_NOM;
    548. 

  548. 		if (! empty($conf->multicompany->enabled)) $_SESSION["dol_entity"]=$conf->entity;
    549. 

  549. 		dol_syslog("This is a new started user session. _SESSION['dol_login']=".$_SESSION["dol_login"].' Session id='.session_id());
    550. 

  550. 

  551. 		$db->begin();
    552. 

  552. 

  553. 		$user->update_last_login_date();
    554. 

  554. 

  555. 		// Call triggers
    556. 

  556. 		include_once(DOL_DOCUMENT_ROOT . "/core/class/interfaces.class.php");
    557. 

  557. 		$interface=new Interfaces($db);
    558. 

  558. 		$result=$interface->run_triggers('USER_LOGIN',$user,$user,$langs,$conf,$_POST["entity"]);
    559. 

  559. 		if ($result < 0) { $error++; }
    560. 

  560. 		// End call triggers
    561. 

  561. 

  562. 		if ($error)
    563. 

  563. 		{
    564. 

  564. 			$db->rollback();
    565. 

  565. 			session_destroy();
    566. 

  566. 			dol_print_error($db,'Error in some triggers on action USER_LOGIN',LOG_ERR);
    567. 

  567. 			exit;
    568. 

  568. 		}
    569. 

  569. 		else
    570. 

  570. 		{
    571. 

  571. 			$db->commit();
    572. 

  572. 		}
    573. 

  573. 

  574. 		// Create entity cookie, just used for login page
    575. 

  575. 		if (!empty($conf->global->MAIN_MODULE_MULTICOMPANY) && !empty($conf->global->MAIN_MULTICOMPANY_COOKIE) && isset($_POST["entity"]))
    576. 

  576. 		{
    577. 

  577. 			include_once(DOL_DOCUMENT_ROOT."/core/class/cookie.class.php");
    578. 

  578. 

  579. 			$entity = $_SESSION["dol_login"].'|'.$_POST["entity"];
    580. 

  580. 

  581. 			$prefix=dol_getprefix();
    582. 

  582. 			$entityCookieName = 'DOLENTITYID_'.$prefix;
    583. 

  583. 			// TTL : is defined in the config page multicompany
    584. 

  584. 			$ttl = (! empty($conf->global->MAIN_MULTICOMPANY_COOKIE_TTL) ? $conf->global->MAIN_MULTICOMPANY_COOKIE_TTL : time()+60*60*8 );
    585. 

  585. 			// Cryptkey : will be created randomly in the config page multicompany
    586. 

  586. 			$cryptkey = (! empty($conf->file->cookie_cryptkey) ? $conf->file->cookie_cryptkey : '' );
    587. 

  587. 

  588. 			$entityCookie = new DolCookie($cryptkey);
    589. 

  589. 			$entityCookie->_setCookie($entityCookieName, $entity, $ttl);
    590. 

  590. 		}
    591. 

  591. 

  592.         // Hooks on successfull login
    593. 

  593.         $action='';
    594. 

  594.         include_once(DOL_DOCUMENT_ROOT.'/core/class/hookmanager.class.php');
    595. 

  595.         $hookmanager=new HookManager($db);
    596. 

  596.         $hookmanager->callHooks(array('login'));
    597. 

  597.         $parameters=array('dol_authmode'=>$dol_authmode);
    598. 

  598.         $reshook=$hookmanager->executeHooks('afterLogin',$parameters,$user,$action);    // Note that $action and $object may have been modified by some hooks
    599. 

  599. 		if ($reshook < 0) $error++;
    600. 

  600. 	}
    601. 

  601. 

  602. 

  603. 	// If user admin, we force the rights-based modules
    604. 

  604. 	if ($user->admin)
    605. 

  605. 	{
    606. 

  606. 		$user->rights->user->user->lire=1;
    607. 

  607. 		$user->rights->user->user->creer=1;
    608. 

  608. 		$user->rights->user->user->password=1;
    609. 

  609. 		$user->rights->user->user->supprimer=1;
    610. 

  610. 		$user->rights->user->self->creer=1;
    611. 

  611. 		$user->rights->user->self->password=1;
    612. 

  612. 	}
    613. 

  613. 

  614. 	/*
    615. 

  615. 	 * Overwrite configs global by peronal configs
    616. 

  616. 	 */
    617. 

  617. 	// Set liste_limit
    618. 

  618. 	if (isset($user->conf->MAIN_SIZE_LISTE_LIMIT))	// Can be 0
    619. 

  619. 	{
    620. 

  620. 		$conf->liste_limit = $user->conf->MAIN_SIZE_LISTE_LIMIT;
    621. 

  621. 	}
    622. 

  622. 	if (isset($user->conf->PRODUIT_LIMIT_SIZE))		// Can be 0
    623. 

  623. 	{
    624. 

  624. 		$conf->product->limit_size = $user->conf->PRODUIT_LIMIT_SIZE;
    625. 

  625. 	}
    626. 

  626. 	// Replace conf->css by personalized value
    627. 

  627. 	if (isset($user->conf->MAIN_THEME) && $user->conf->MAIN_THEME)
    628. 

  628. 	{
    629. 

  629. 		$conf->theme=$user->conf->MAIN_THEME;
    630. 

  630. 		$conf->css  = "/theme/".$conf->theme."/style.css.php";
    631. 

  631. 	}
    632. 

  632. 

  633. 	// If theme support optim like flip-hide left menu and we use a smartphone, we force it
    634. 

  634. 	if (! empty($conf->global->MAIN_SMARTPHONE_OPTIM) && $conf->browser->phone && $conf->theme == 'eldy') $conf->global->MAIN_MENU_USE_JQUERY_LAYOUT='forced';
    635. 

  635. 

  636. 	// Set javascript option
    637. 

  637.     if (! GETPOST('nojs'))   // If javascript was not disabled on URL
    638. 

  638.     {
    639. 

  639.     	if (! empty($user->conf->MAIN_DISABLE_JAVASCRIPT))
    640. 

  640.     	{
    641. 

  641.     		$conf->use_javascript_ajax=! $user->conf->MAIN_DISABLE_JAVASCRIPT;
    642. 

  642.     	}
    643. 

  643.     }
    644. 

  644.     else $conf->use_javascript_ajax=0;
    645. 

  645. }
    646. 

  646. 

  647. if (! defined('NOREQUIRETRAN'))
    648. 

  648. {
    649. 

  649. 	if (! GETPOST('lang'))	// If language was not forced on URL
    650. 

  650. 	{
    651. 

  651. 		// If user has chosen its own language
    652. 

  652. 		if (! empty($user->conf->MAIN_LANG_DEFAULT))
    653. 

  653. 		{
    654. 

  654. 			// If different than current language
    655. 

  655. 			//print ">>>".$langs->getDefaultLang()."-".$user->conf->MAIN_LANG_DEFAULT;
    656. 

  656. 			if ($langs->getDefaultLang() != $user->conf->MAIN_LANG_DEFAULT)
    657. 

  657. 			{
    658. 

  658. 				$langs->setDefaultLang($user->conf->MAIN_LANG_DEFAULT);
    659. 

  659. 			}
    660. 

  660. 		}
    661. 

  661. 	}
    662. 

  662. 	else	// If language was forced on URL
    663. 

  663. 	{
    664. 

  664. 		$langs->setDefaultLang(GETPOST('lang','alpha',1));
    665. 

  665. 	}
    666. 

  666. }
    667. 

  667. 

  668. // Case forcing style from url
    669. 

  669. if (GETPOST('theme'))
    670. 

  670. {
    671. 

  671. 	$conf->theme=GETPOST('theme','alpha',1);
    672. 

  672. 	$conf->css  = "/theme/".$conf->theme."/style.css.php";
    673. 

  673. }
    674. 

  674. 

  675. 

  676. if (! defined('NOLOGIN'))
    677. 

  677. {
    678. 

  678. 	// If the login is not recovered, it is identified with an account that does not exist.
    679. 

  679. 	// Hacking attempt?
    680. 

  680. 	if (! $user->login) accessforbidden();
    681. 

  681. 

  682. 	// Check if user is active
    683. 

  683. 	if ($user->statut < 1)
    684. 

  684. 	{
    685. 

  685. 		// If not active, we refuse the user
    686. 

  686. 		$langs->load("other");
    687. 

  687. 		dol_syslog("Authentification ko as login is disabled");
    688. 

  688. 		accessforbidden($langs->trans("ErrorLoginDisabled"));
    689. 

  689. 		exit;
    690. 

  690. 	}
    691. 

  691. 

  692. 	// Load permissions
    693. 

  693. 	$user->getrights();
    694. 

  694. }
    695. 

  695. 

  696. 

  697. dol_syslog("--- Access to ".$_SERVER["PHP_SELF"]);
    698. 

  698. //Another call for easy debugg
    699. 

  699. //dol_syslog("Access to ".$_SERVER["PHP_SELF"].' GET='.join(',',array_keys($_GET)).'->'.join(',',$_GET).' POST:'.join(',',array_keys($_POST)).'->'.join(',',$_POST));
    700. 

  700. 

  701. // Load main languages files
    702. 

  702. if (! defined('NOREQUIRETRAN'))
    703. 

  703. {
    704. 

  704. 	$langs->load("main");
    705. 

  705. 	$langs->load("dict");
    706. 

  706. }
    707. 

  707. 

  708. // Define some constants used for style of arrays
    709. 

  709. $bc=array(0=>'class="impair"',1=>'class="pair"');
    710. 

  710. $bcdd=array(0=>'class="impair drag drop"',1=>'class="pair drag drop"');
    711. 

  711. $bcnd=array(0=>'class="impair nodrag nodrop"',1=>'class="pair nodrag nodrop"');
    712. 

  712. 

  713. // Constants used to defined number of lines in textarea
    714. 

  714. if (empty($conf->browser->firefox))
    715. 

  715. {
    716. 

  716. 	define('ROWS_1',1);
    717. 

  717. 	define('ROWS_2',2);
    718. 

  718. 	define('ROWS_3',3);
    719. 

  719. 	define('ROWS_4',4);
    720. 

  720. 	define('ROWS_5',5);
    721. 

  721. 	define('ROWS_6',6);
    722. 

  722. 	define('ROWS_7',7);
    723. 

  723. 	define('ROWS_8',8);
    724. 

  724. 	define('ROWS_9',9);
    725. 

  725. }
    726. 

  726. else
    727. 

  727. {
    728. 

  728. 	define('ROWS_1',0);
    729. 

  729. 	define('ROWS_2',1);
    730. 

  730. 	define('ROWS_3',2);
    731. 

  731. 	define('ROWS_4',3);
    732. 

  732. 	define('ROWS_5',4);
    733. 

  733. 	define('ROWS_6',5);
    734. 

  734. 	define('ROWS_7',6);
    735. 

  735. 	define('ROWS_8',7);
    736. 

  736. 	define('ROWS_9',8);
    737. 

  737. }
    738. 

  738. 

  739. $heightforframes=48;
    740. 

  740. 

  741. // Switch to another entity
    742. 

  742. if (!empty($conf->global->MAIN_MODULE_MULTICOMPANY))
    743. 

  743. {
    744. 

  744. 	if (GETPOST('action') == 'switchentity')
    745. 

  745. 	{
    746. 

  746. 		$res = @dol_include_once("/multicompany/class/actions_multicompany.class.php");
    747. 

  747. 

  748. 		if ($res)
    749. 

  749. 		{
    750. 

  750. 			$mc = new ActionsMulticompany($db);
    751. 

  751. 

  752. 			if($mc->switchEntity(GETPOST('entity')) >= 0)
    753. 

  753. 			{
    754. 

  754. 				Header("Location: ".DOL_URL_ROOT.'/');
    755. 

  755. 				exit;
    756. 

  756. 			}
    757. 

  757. 		}
    758. 

  758. 	}
    759. 

  759. }
    760. 

  760. 

  761. 

  762. // Functions
    763. 

  763. 

  764. if (! function_exists("llxHeader"))
    765. 

  765. {
    766. 

  766. 	/**
    767. 

  767. 	 *	Show HTML header HTML + BODY + Top menu + left menu + DIV
    768. 

  768. 	 *
    769. 

  769.      * @param 	string 	$head				Optionnal head lines
    770. 

  770.      * @param 	string 	$title				HTML title
    771. 

  771.      * @param	string	$help_url			Url links to help page
    772. 

  772. 	 * 		                            	Syntax is: For a wiki page: EN:EnglishPage|FR:FrenchPage|ES:SpanishPage
    773. 

  773. 	 *                                  	For other external page: http://server/url
    774. 

  774. 	 * @param	string	$target				Target to use on links
    775. 

  775.      * @param 	int    	$disablejs			More content into html header
    776. 

  776.      * @param 	int    	$disablehead		More content into html header
    777. 

  777.      * @param 	array  	$arrayofjs			Array of complementary js files
    778. 

  778.      * @param 	array  	$arrayofcss			Array of complementary css files
    779. 

  779. 	 * @param	string	$morequerystring	Query string to add to the link "print" to get same parameters (use only if autodetect fails)
    780. 

  780. 	 * @return	void
    781. 

  781. 	 */
    782. 

  782. 	function llxHeader($head = '', $title='', $help_url='', $target='', $disablejs=0, $disablehead=0, $arrayofjs='', $arrayofcss='', $morequerystring='')
    783. 

  783. 	{
    784. 

  784. 		top_htmlhead($head, $title, $disablejs, $disablehead, $arrayofjs, $arrayofcss);	// Show html headers
    785. 

  785. 		top_menu($head, $title, $target, $disablejs, $disablehead, $arrayofjs, $arrayofcss, $morequerystring);
    786. 

  786. 		left_menu('', $help_url, '', '', 1, $title);
    787. 

  787. 		main_area($title);
    788. 

  788. 	}
    789. 

  789. }
    790. 

  790. 

  791. 

  792. /**
    793. 

  793.  *  Show HTTP header
    794. 

  794.  *
    795. 

  795.  *  @return	void
    796. 

  796.  */
    797. 

  797. function top_httphead()
    798. 

  798. {
    799. 

  799.     global $conf;
    800. 

  800. 

  801.     //header("Content-type: text/html; charset=UTF-8");
    802. 

  802.     header("Content-type: text/html; charset=".$conf->file->character_set_client);
    803. 

  803. 

  804.     // On the fly GZIP compression for all pages (if browser support it). Must set the bit 3 of constant to 1.
    805. 

  805.     if (isset($conf->global->MAIN_OPTIMIZE_SPEED) && ($conf->global->MAIN_OPTIMIZE_SPEED & 0x04)) { ob_start("ob_gzhandler"); }
    806. 

  806. }
    807. 

  807. 

  808. /**
    809. 

  809.  * Replace the default llxHeader function
    810. 

  810.  *
    811. 

  811.  * @param 	string 	$head			Optionnal head lines
    812. 

  812.  * @param 	string 	$title			HTML title
    813. 

  813.  * @param 	int    	$disablejs		More content into html header
    814. 

  814.  * @param 	int    	$disablehead	More content into html header
    815. 

  815.  * @param 	array  	$arrayofjs		Array of complementary js files
    816. 

  816.  * @param 	array  	$arrayofcss		Array of complementary css files
    817. 

  817.  * @return	void
    818. 

  818.  */
    819. 

  819. function top_htmlhead($head, $title='', $disablejs=0, $disablehead=0, $arrayofjs='', $arrayofcss='')
    820. 

  820. {
    821. 

  821. 	global $user, $conf, $langs, $db;
    822. 

  822. 

  823. 	top_httphead();
    824. 

  824. 

  825. 	if (empty($conf->css)) $conf->css = '/theme/eldy/style.css.php';	// If not defined, eldy by default
    826. 

  826. 

  827. 	print '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">';
    828. 

  828. 	//print '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/1999/REC-html401-19991224/strict.dtd">';
    829. 

  829. 	//print '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">';
    830. 

  830. 	//print '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">';
    831. 

  831. 	//print '<!DOCTYPE html>';
    832. 

  832. 	print "\n";
    833. 

  833. 	if (! empty($conf->global->MAIN_USE_CACHE_MANIFEST)) print '<html manifest="cache.manifest">'."\n";
    834. 

  834. 	else print '<html>'."\n";
    835. 

  835. 	//print '<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr">'."\n";
    836. 

  836. 	if (empty($disablehead))
    837. 

  837. 	{
    838. 

  838. 		print "<head>\n";
    839. 

  839. 

  840. 		print "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=".$conf->file->character_set_client."\">\n";
    841. 

  841. 

  842. 		// Displays meta
    843. 

  843. 		print '<meta name="robots" content="noindex,nofollow">'."\n";      // Evite indexation par robots
    844. 

  844. 		print '<meta name="author" content="Dolibarr Development Team">'."\n";
    845. 

  845. 		$favicon=DOL_URL_ROOT.'/theme/'.$conf->theme.'/img/favicon.ico';
    846. 

  846. 		print '<link rel="shortcut icon" type="image/x-icon" href="'.$favicon.'"/>'."\n";
    847. 

  847. 		// Displays title
    848. 

  848. 		$appli='Dolibarr';
    849. 

  849. 		if (!empty($conf->global->MAIN_APPLICATION_TITLE)) $appli=$conf->global->MAIN_APPLICATION_TITLE;
    850. 

  850. 

  851. 		if ($title) print '<title>'.$appli.' - '.$title.'</title>';
    852. 

  852. 		else print "<title>".$appli."</title>";
    853. 

  853. 		print "\n";
    854. 

  854. 

  855.         if (! defined('DISABLE_JQUERY') && ! $disablejs && $conf->use_javascript_ajax)
    856. 

  856.         {
    857. 

  857.             print '<!-- Includes for JQuery (Ajax library) -->'."\n";
    858. 

  858.             $jquerytheme = 'smoothness';
    859. 

  859.             if (!empty($conf->global->MAIN_USE_JQUERY_THEME)) $jquerytheme = $conf->global->MAIN_USE_JQUERY_THEME;
    860. 

  860.             print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/css/'.$jquerytheme.'/jquery-ui-latest.custom.css" />'."\n";    // JQuery
    861. 

  861.             print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/tiptip/tipTip.css" />'."\n";                           // Tooltip
    862. 

  862.             print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/jnotify/jquery.jnotify-alt.min.css" />'."\n";          // JNotify
    863. 

  863.             //print '<link rel="stylesheet" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/lightbox/css/jquery.lightbox-0.5.css" media="screen" />'."\n";       // Lightbox
    864. 

  864.             if (! empty($conf->global->MAIN_USE_JQUERY_FILEUPLOAD))     // jQuery fileupload
    865. 

  865.             {
    866. 

  866.             	print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/fileupload/jquery.fileupload-ui.css" />'."\n";
    867. 

  867.             }
    868. 

  868.         	if (! empty($conf->global->MAIN_USE_JQUERY_DATATABLES))     // jQuery datatables
    869. 

  869.             {
    870. 

  870.             	//print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/css/jquery.dataTables.css" />'."\n";
    871. 

  871.             	print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/css/jquery.dataTables_jui.css" />'."\n";
    872. 

  872.             	print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/extras/ColReorder/css/ColReorder.css" />'."\n";
    873. 

  873.             	print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/extras/ColVis/css/ColVis.css" />'."\n";
    874. 

  874.             	//print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/extras/ColVis/css/ColVisAlt.css" />'."\n";
    875. 

  875.             	print '<link rel="stylesheet" type="text/css" href="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/extras/TableTools/css/TableTools.css" />'."\n";
    876. 

  876.             }
    877. 

  877.         }
    878. 

  878. 

  879.         print '<!-- Includes for Dolibarr, modules or specific pages-->'."\n";
    880. 

  880.         // Output style sheets (optioncss='print' or '')
    881. 

  881.         $themepath=dol_buildpath((empty($conf->global->MAIN_FORCETHEMEDIR)?'':$conf->global->MAIN_FORCETHEMEDIR).$conf->css,1);
    882. 

  882.         //print 'themepath='.$themepath;exit;
    883. 

  883. 		print '<link rel="stylesheet" type="text/css" title="default" href="'.$themepath.'?lang='.$langs->defaultlang.'&theme='.$conf->theme.(GETPOST('optioncss')?'&optioncss='.GETPOST('optioncss','alpha',1):'').'">'."\n";
    884. 

  884. 		// CSS forced by modules (relative url starting with /)
    885. 

  885. 		if (is_array($conf->css_modules))
    886. 

  886. 		{
    887. 

  887. 			foreach($conf->css_modules as $cssfile)
    888. 

  888. 			{	// cssfile is an absolute path
    889. 

  889. 				print '<link rel="stylesheet" type="text/css" title="default" href="'.dol_buildpath($cssfile,1);
    890. 

  890.                 // We add params only if page is not static, because some web server setup does not return content type text/css if url has parameters and browser cache is not used.
    891. 

  891. 				if (!preg_match('/\.css$/i',$cssfile)) print '?lang='.$langs->defaultlang.'&theme='.$conf->theme.(GETPOST('optioncss')?'&optioncss='.GETPOST('optioncss','alpha',1):'');
    892. 

  892. 				print '">'."\n";
    893. 

  893. 			}
    894. 

  894. 		}
    895. 

  895. 		// CSS forced by page in top_htmlhead call (relative url starting with /)
    896. 

  896. 		if (is_array($arrayofcss))
    897. 

  897. 		{
    898. 

  898. 			foreach($arrayofcss as $cssfile)
    899. 

  899. 			{
    900. 

  900. 				print '<link rel="stylesheet" type="text/css" title="default" href="'.dol_buildpath($cssfile,1);
    901. 

  901.                 // We add params only if page is not static, because some web server setup does not return content type text/css if url has parameters and browser cache is not used.
    902. 

  902. 				if (!preg_match('/\.css$/i',$cssfile)) print '?lang='.$langs->defaultlang.'&theme='.$conf->theme.(GETPOST('optioncss')?'&optioncss='.GETPOST('optioncss','alpha',1):'');
    903. 

  903. 				print '">'."\n";
    904. 

  904. 			}
    905. 

  905. 		}
    906. 

  906. 

  907. 		if (empty($conf->global->MAIN_OPTIMIZEFORTEXTBROWSER)) print '<link rel="top" title="'.$langs->trans("Home").'" href="'.(DOL_URL_ROOT?DOL_URL_ROOT:'/').'">'."\n";
    908. 

  908. 		if (empty($conf->global->MAIN_OPTIMIZEFORTEXTBROWSER)) print '<link rel="copyright" title="GNU General Public License" href="http://www.gnu.org/copyleft/gpl.html#SEC1">'."\n";
    909. 

  909. 		if (empty($conf->global->MAIN_OPTIMIZEFORTEXTBROWSER)) print '<link rel="author" title="Dolibarr Development Team" href="http://www.dolibarr.org">'."\n";
    910. 

  910. 

  911. 		// Output standard javascript links
    912. 

  912. 		if (! $disablejs && $conf->use_javascript_ajax)
    913. 

  913. 		{
    914. 

  914. 			// Other external js
    915. 

  915. 			require_once DOL_DOCUMENT_ROOT.'/core/lib/ajax.lib.php';
    916. 

  916. 

  917. 			$ext='.js';
    918. 

  918. 			if (isset($conf->global->MAIN_OPTIMIZE_SPEED) && ($conf->global->MAIN_OPTIMIZE_SPEED & 0x01)) { $ext='.jgz'; }	// mini='_mini', ext='.gz'
    919. 

  919. 

  920. 			// JQuery. Must be before other includes
    921. 

  921. 			print '<!-- Includes JS for JQuery -->'."\n";
    922. 

  922.             print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/js/jquery-latest.min'.$ext.'"></script>'."\n";
    923. 

  923. 			print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/js/jquery-ui-latest.custom.min'.$ext.'"></script>'."\n";
    924. 

  924. 			print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/tablednd/jquery.tablednd_0_5'.$ext.'"></script>'."\n";
    925. 

  925.             print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/tiptip/jquery.tipTip.min'.$ext.'"></script>'."\n";
    926. 

  926.             //print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/lightbox/js/jquery.lightbox-0.5.min'.$ext.'"></script>'."\n";
    927. 

  927.             // jQuery Layout
    928. 

  928. 			if (! empty($conf->global->MAIN_MENU_USE_JQUERY_LAYOUT) || defined('REQUIRE_JQUERY_LAYOUT'))
    929. 

  929. 			{
    930. 

  930.                 print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/layout/jquery.layout-latest'.$ext.'"></script>'."\n";
    931. 

  931. 			}
    932. 

  932. 			// jQuery jnotify
    933. 

  933. 			if (empty($conf->global->MAIN_DISABLE_JQUERY_JNOTIFY))
    934. 

  934. 			{
    935. 

  935. 				print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/jnotify/jquery.jnotify.min.js"></script>'."\n";
    936. 

  936. 				print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/core/js/jnotify.js"></script>'."\n";
    937. 

  937. 			}
    938. 

  938. 			// Flot
    939. 

  939. 			if (empty($conf->global->MAIN_DISABLE_JQUERY_FLOT))
    940. 

  940. 			{
    941. 

  941. 				print '<!--[if lte IE 8]><script language="javascript" type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/flot/excanvas.min.js"></script><![endif]-->'."\n";
    942. 

  942. 				print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/flot/jquery.flot.min.js"></script>'."\n";
    943. 

  943. 				print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/flot/jquery.flot.pie.min.js"></script>'."\n";
    944. 

  944. 				print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/flot/jquery.flot.stack.min.js"></script>'."\n";
    945. 

  945. 			}
    946. 

  946.             // CKEditor
    947. 

  947.             if (! empty($conf->fckeditor->enabled) && ! empty($conf->global->FCKEDITOR_EDITORNAME) && $conf->global->FCKEDITOR_EDITORNAME == 'ckeditor')
    948. 

  948.             {
    949. 

  949.                 print '<!-- Includes JS for CKEditor -->'."\n";
    950. 

  950.                 print '<script type="text/javascript">var CKEDITOR_BASEPATH = \''.DOL_URL_ROOT.'/includes/ckeditor/\';</script>'."\n";
    951. 

  951.                 print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/ckeditor/ckeditor_basic.js"></script>'."\n";
    952. 

  952.             }
    953. 

  953.             // jQuery jeditable
    954. 

  954.             if (! empty($conf->global->MAIN_USE_JQUERY_JEDITABLE))
    955. 

  955.             {
    956. 

  956.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/jeditable/jquery.jeditable.min'.$ext.'"></script>'."\n";
    957. 

  957.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/jeditable/jquery.jeditable.ui-datepicker.js"></script>'."\n";
    958. 

  958.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/jeditable/jquery.jeditable.ui-autocomplete.js"></script>'."\n";
    959. 

  959.             	print '<script type="text/javascript">'."\n";
    960. 

  960.             	print 'var urlSaveInPlace = \''.DOL_URL_ROOT.'/core/ajax/saveinplace.php\';'."\n";
    961. 

  961.             	print 'var urlLoadInPlace = \''.DOL_URL_ROOT.'/core/ajax/loadinplace.php\';'."\n";
    962. 

  962.             	print 'var tooltipInPlace = \''.$langs->transnoentities('ClickToEdit').'\';'."\n";
    963. 

  963.             	print 'var placeholderInPlace = \''.$langs->trans('ClickToEdit').'\';'."\n";
    964. 

  964.             	print 'var cancelInPlace = \''.$langs->trans('Cancel').'\';'."\n";
    965. 

  965.             	print 'var submitInPlace = \''.$langs->trans('Ok').'\';'."\n";
    966. 

  966.             	print 'var indicatorInPlace = \'<img src="'.DOL_URL_ROOT."/theme/".$conf->theme."/img/working.gif".'">\';'."\n";
    967. 

  967.             	print 'var ckeditorConfig = \''.dol_buildpath('/theme/'.$conf->theme.'/ckeditor/config.js',1).'\';'."\n";
    968. 

  968.             	print '</script>'."\n";
    969. 

  969.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/core/js/editinplace.js"></script>'."\n";
    970. 

  970.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/jeditable/jquery.jeditable.ckeditor.js"></script>'."\n";
    971. 

  971.             }
    972. 

  972.             // File Upload
    973. 

  973.             if (! empty($conf->global->MAIN_USE_JQUERY_FILEUPLOAD))
    974. 

  974.             {
    975. 

  975.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/fileupload/jquery.tmpl.min.js"></script>'."\n";
    976. 

  976. 				print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/fileupload/jquery.iframe-transport.js"></script>'."\n";
    977. 

  977. 				print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/fileupload/jquery.fileupload.js"></script>'."\n";
    978. 

  978. 				print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/fileupload/jquery.fileupload-ui.js"></script>'."\n";
    979. 

  979.             }
    980. 

  980. 			// DataTables
    981. 

  981.             if (! empty($conf->global->MAIN_USE_JQUERY_DATATABLES))
    982. 

  982.             {
    983. 

  983.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/js/jquery.dataTables.min'.$ext.'"></script>'."\n";
    984. 

  984.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/extras/ColReorder/js/ColReorder.min'.$ext.'"></script>'."\n";
    985. 

  985.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/extras/ColVis/js/ColVis.min'.$ext.'"></script>'."\n";
    986. 

  986.             	print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/includes/jquery/plugins/datatables/extras/TableTools/js/TableTools.min'.$ext.'"></script>'."\n";
    987. 

  987.             }
    988. 

  988. 

  989.             // Global js function
    990. 

  990.             print '<!-- Includes JS of Dolibarr -->'."\n";
    991. 

  991.             print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/core/js/lib_head.js"></script>'."\n";
    992. 

  992. 

  993.             // Add datepicker default options
    994. 

  994.             print '<script type="text/javascript" src="'.DOL_URL_ROOT.'/core/js/datepicker.js.php?lang='.$langs->defaultlang.'"></script>'."\n";
    995. 

  995. 

  996.             // Output module javascript
    997. 

  997.             if (is_array($arrayofjs))
    998. 

  998.             {
    999. 

  999.             	print '<!-- Includes JS specific to page -->'."\n";
    1000. 

  1000.             	foreach($arrayofjs as $jsfile)
    1001. 

  1001.             	{
    1002. 

  1002.             		if (preg_match('/^http/i',$jsfile))
    1003. 

  1003.             		{
    1004. 

  1004.             			print '<script type="text/javascript" src="'.$jsfile.'"></script>'."\n";
    1005. 

  1005.             		}
    1006. 

  1006.             		else
    1007. 

  1007.             		{
    1008. 

  1008.             			if (! preg_match('/^\//',$jsfile)) $jsfile='/'.$jsfile;	// For backward compatibility
    1009. 

  1009.             			print '<script type="text/javascript" src="'.dol_buildpath($jsfile,1).'"></script>'."\n";
    1010. 

  1010.             		}
    1011. 

  1011.             	}
    1012. 

  1012.             }
    1013. 

  1013. 		}
    1014. 

  1014. 

  1015. 		if (! empty($head)) print $head."\n";
    1016. 

  1016. 		if (! empty($conf->global->MAIN_HTML_HEADER)) print $conf->global->MAIN_HTML_HEADER."\n";
    1017. 

  1017. 

  1018. 		print "</head>\n\n";
    1019. 

  1019. 	}
    1020. 

  1020. 

  1021. 	$conf->headerdone=1;	// To tell header was output
    1022. 

  1022. }
    1023. 

  1023. 

  1024. 

  1025. /**
    1026. 

  1026.  *  Show an HTML header + a BODY + The top menu bar
    1027. 

  1027.  *
    1028. 

  1028.  *  @param      string	$head    			Lines in the HEAD
    1029. 

  1029.  *  @param      string	$title   			Title of web page
    1030. 

  1030.  *  @param      string	$target  			Target to use in menu links
    1031. 

  1031.  *	@param		int		$disablejs			Do not output links to js (Ex: qd fonction utilisee par sous formulaire Ajax)
    1032. 

  1032.  *	@param		int		$disablehead		Do not output head section
    1033. 

  1033.  *	@param		array	$arrayofjs			Array of js files to add in header
    1034. 

  1034.  *	@param		array	$arrayofcss			Array of css files to add in header
    1035. 

  1035.  *  @param		string	$morequerystring	Query string to add to the link "print" to get same parameters (use only if autodetect fails)
    1036. 

  1036.  *  @return		void
    1037. 

  1037.  */
    1038. 

  1038. function top_menu($head, $title='', $target='', $disablejs=0, $disablehead=0, $arrayofjs='', $arrayofcss='', $morequerystring='')
    1039. 

  1039. {
    1040. 

  1040. 	global $user, $conf, $langs, $db, $dolibarr_main_authentication;
    1041. 

  1041. 

  1042. 	$form=new Form($db);
    1043. 

  1043. 

  1044. 	if (! $conf->top_menu)  $conf->top_menu ='eldy_backoffice.php';
    1045. 

  1045. 

  1046. 	// For backward compatibility with old modules
    1047. 

  1047. 	if (empty($conf->headerdone)) top_htmlhead($head, $title, $disablejs, $disablehead, $arrayofjs, $arrayofcss);
    1048. 

  1048. 

  1049. 	print '<body id="mainbody">';
    1050. 

  1050. 

  1051. 	if ($conf->use_javascript_ajax)
    1052. 

  1052. 	{
    1053. 

  1053. 		if ($conf->global->MAIN_MENU_USE_JQUERY_LAYOUT)
    1054. 

  1054. 		{
    1055. 

  1055. 			print '<script type="text/javascript">
    1056. 

  1056. 				jQuery(document).ready(function () {
    1057. 

  1057. 					jQuery("body").layout(layoutSettings);
    1058. 

  1058. 				});
    1059. 

  1059. 				var layoutSettings = {
    1060. 

  1060. 					name: "mainlayout",
    1061. 

  1061. 					defaults: {
    1062. 

  1062. 						useStateCookie: true,
    1063. 

  1063. 						size: "auto",
    1064. 

  1064. 						resizable: false,
    1065. 

  1065. 						//paneClass: "none",
    1066. 

  1066. 						//resizerClass: "resizer",
    1067. 

  1067. 						//togglerClass: "toggler",
    1068. 

  1068. 						//buttonClass: "button",
    1069. 

  1069. 						//contentSelector: ".content",
    1070. 

  1070. 						//contentIgnoreSelector: "span",
    1071. 

  1071. 						togglerTip_open: "Close This Pane",
    1072. 

  1072. 						togglerTip_closed: "Open This Pane",
    1073. 

  1073. 						resizerTip:	"Resize This Pane",
    1074. 

  1074. 						fxSpeed: "fast"
    1075. 

  1075. 					},
    1076. 

  1076. 					west: {
    1077. 

  1077. 						paneClass: "leftContent",
    1078. 

  1078. 						//spacing_closed:	14,
    1079. 

  1079. 						//togglerLength_closed: 14,
    1080. 

  1080. 						//togglerAlign_closed: "auto",
    1081. 

  1081. 						//togglerLength_open: 0,
    1082. 

  1082. 						//	effect defaults - overridden on some panes
    1083. 

  1083. 						//slideTrigger_open:	"mouseover",
    1084. 

  1084. 						initClosed:	'.(empty($conf->browser->phone)?'false':'true').',
    1085. 

  1085. 						fxName:	"drop",
    1086. 

  1086. 						fxSpeed: "fast",
    1087. 

  1087. 						fxSettings: { easing: "" }
    1088. 

  1088. 					},
    1089. 

  1089. 					north: {
    1090. 

  1090. 						paneClass: "none",
    1091. 

  1091. 						resizerClass: "none",
    1092. 

  1092. 						togglerClass: "none",
    1093. 

  1093. 						spacing_open: 0,
    1094. 

  1094. 						togglerLength_open:	0,
    1095. 

  1095. 						togglerLength_closed: -1,
    1096. 

  1096. 						slidable: false,
    1097. 

  1097. 						fxName:	"none",
    1098. 

  1098. 						fxSpeed: "fast"
    1099. 

  1099. 					},
    1100. 

  1100. 					center: {
    1101. 

  1101. 						paneSelector: "#mainContent"
    1102. 

  1102. 					}
    1103. 

  1103. 				}
    1104. 

  1104.     		</script>';
    1105. 

  1105. 		}
    1106. 

  1106. 

  1107. 		if (! empty($conf->global->MAIN_MENU_USE_JQUERY_ACCORDION))
    1108. 

  1108. 		{
    1109. 

  1109. 			print "\n".'<script type="text/javascript">
    1110. 

  1110. 					jQuery(document).ready(function () {
    1111. 

  1111. 						jQuery( ".vmenu" ).accordion({
    1112. 

  1112. 							autoHeight: false,
    1113. 

  1113. 							event: "mouseover",
    1114. 

  1114. 							//collapsible: true,
    1115. 

  1115. 							//active: 2,
    1116. 

  1116. 							header: "> .blockvmenupair > .menu_titre"
    1117. 

  1117. 						});
    1118. 

  1118. 					});
    1119. 

  1119. 					</script>';
    1120. 

  1120. 		}
    1121. 

  1121. 

  1122.     	// Wrapper to show tooltips
    1123. 

  1123.     	print "\n".'<script type="text/javascript">
    1124. 

  1124.                     jQuery(document).ready(function () {
    1125. 

  1125.                     	jQuery(function() {
    1126. 

  1126.                         	jQuery(".classfortooltip").tipTip({maxWidth: "'.dol_size(600,'width').'px", edgeOffset: 10, delay: 50, fadeIn: 50, fadeOut: 50});
    1127. 

  1127.                         });
    1128. 

  1128.                     });
    1129. 

  1129.                 </script>';
    1130. 

  1130. 	}
    1131. 

  1131. 

  1132. 	/*
    1133. 

  1133. 	 * Top menu
    1134. 

  1134. 	 */
    1135. 

  1135.     $top_menu=isset($conf->browser->phone)?$conf->smart_menu:$conf->top_menu;
    1136. 

  1136.     if (GETPOST('menu')) $top_menu=GETPOST('menu'); // menu=eldy_backoffice.php
    1137. 

  1137. 

  1138. 	// Load the top menu manager
    1139. 

  1139. 	$result=dol_include_once("/core/menus/standard/".$top_menu);
    1140. 

  1140. 	if (! $result)	// If failed to include, we try with standard
    1141. 

  1141. 	{
    1142. 

  1142. 		$top_menu='eldy_backoffice.php';
    1143. 

  1143. 		include_once(DOL_DOCUMENT_ROOT."/core/menus/standard/".$top_menu);
    1144. 

  1144. 	}
    1145. 

  1145. 

  1146. 

  1147.     print "\n".'<!-- Start top horizontal menu '.$top_menu.' -->'."\n";
    1148. 

  1148. 

  1149.     if ($conf->use_javascript_ajax && $conf->global->MAIN_MENU_USE_JQUERY_LAYOUT) print '<div class="ui-layout-north"> <!-- Begin top layout -->'."\n";
    1150. 

  1150. 

  1151.     print '<div id="tmenu_tooltip" class="tmenu">'."\n";
    1152. 

  1152. 

  1153.     // Show menu
    1154. 

  1154.     $menutop = new MenuTop($db);
    1155. 

  1155. 	$menutop->atarget=$target;
    1156. 

  1156. 	$menutop->showmenu();      // This contains a \n
    1157. 

  1157. 

  1158. 	print "</div>\n";
    1159. 

  1159. 

  1160. 	// Link to login card
    1161. 

  1161. 	$loginhtmltext=''; $logintext='';
    1162. 

  1162. 	if ($user->societe_id)
    1163. 

  1163. 	{
    1164. 

  1164. 		$thirdpartystatic=new Societe($db);
    1165. 

  1165. 		$thirdpartystatic->fetch($user->societe_id);
    1166. 

  1166. 		$companylink=' ('.$thirdpartystatic->getNomUrl('','').')';
    1167. 

  1167. 		$company=' ('.$langs->trans("Company").': '.$thirdpartystatic->name.')';
    1168. 

  1168. 	}
    1169. 

  1169. 	$logintext='<div class="login"><a href="'.DOL_URL_ROOT.'/user/fiche.php?id='.$user->id.'"';
    1170. 

  1170. 	$logintext.=$menutop->atarget?(' target="'.$menutop->atarget.'"'):'';
    1171. 

  1171. 	$logintext.='>'.$user->login.'</a>';
    1172. 

  1172. 	if ($user->societe_id) $logintext.=$companylink;
    1173. 

  1173. 	$logintext.='</div>';
    1174. 

  1174. 	$loginhtmltext.='<u>'.$langs->trans("User").'</u>';
    1175. 

  1175. 	$loginhtmltext.='<br><b>'.$langs->trans("Name").'</b>: '.$user->getFullName($langs);
    1176. 

  1176. 	$loginhtmltext.='<br><b>'.$langs->trans("Login").'</b>: '.$user->login;
    1177. 

  1177. 	$loginhtmltext.='<br><b>'.$langs->trans("Administrator").'</b>: '.yn($user->admin);
    1178. 

  1178. 	$type=($user->societe_id?$langs->trans("External").$company:$langs->trans("Internal"));
    1179. 

  1179. 	$loginhtmltext.='<br><b>'.$langs->trans("Type").'</b>: '.$type;
    1180. 

  1180.     $loginhtmltext.='<br><b>'.$langs->trans("IPAddress").'</b>: '.$_SERVER["REMOTE_ADDR"];
    1181. 

  1181. 	$loginhtmltext.='<br>';
    1182. 

  1182. 	$loginhtmltext.='<br><u>'.$langs->trans("Connection").'</u>';
    1183. 

  1183. 	if ($conf->global->MAIN_MODULE_MULTICOMPANY) $loginhtmltext.='<br><b>'.$langs->trans("ConnectedOnMultiCompany").'</b>: '.$conf->entity.' (user entity '.$user->entity.')';
    1184. 

  1184. 	$loginhtmltext.='<br><b>'.$langs->trans("ConnectedSince").'</b>: '.dol_print_date($user->datelastlogin,"dayhour");
    1185. 

  1185. 	$loginhtmltext.='<br><b>'.$langs->trans…
    1186.

Large files files are truncated, but you can click here to view the full file