Subversion Repositories oidplus

<?php

/*

 * OIDplus 2.0

 * Copyright 2019 Daniel Marschall, ViaThinkSoft

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 *

 *     http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */

function oidplus_valid_email($email) {

        return !empty(filter_var($email, FILTER_VALIDATE_EMAIL));

}

function oidplus_link($goto) {

        return 'href="?goto='.urlencode($goto).'" onclick="openOidInPanel('.js_escape($goto).', true); return false;"';

}

function secure_email($email, $linktext, $level=1) {

        // see http://www.spamspan.de/

        /* Level 1 */

        /*

        <span class="spamspan">

        <span class="u">user</span>

        @

        <span class="d">beispiel.de</span>

        (<span class="t">Spam Hasser</span>)

        </span>

        */

        if ($level == 1) {

                @list($user, $domain) = explode('@', $email);

                if (($linktext == $email) || empty($linktext)) {

                        return '<span class="spamspan"><span class="u">'.htmlentities($user).'</span>&#64;<span class="d">'.htmlentities($domain).'</span></span>';

                } else {

                        return '<span class="spamspan"><span class="u">'.htmlentities($user).'</span>&#64;<span class="d">'.htmlentities($domain).'</span>(<span class="t">'.htmlentities($linktext).'</span>)</span>';

                }

        }

        /* Level 2 */

        /*

        <span class="spamspan">

                <span class="u">user</span>

                <img alt="at" width="10" src="@.png">

                <span class="d">beispiel.de</span>

        </span>

        */

        if ($level == 2) {

                list($user, $domain) = explode('@', $email);

                return '<span class="spamspan"><span class="u">'.htmlentities($user).'</span><img alt="at" width="10" src="@.png"><span class="d">'.htmlentities($domain).'</span></span>';

        }

        /* Level 3 */

        /*

        <span class="spamspan">

                <span class="u">user</span>

                [at]

                <span class="d">beispiel [dot] de</span>

        </span>

        */

        if ($level == 3) {

                list($user, $domain) = explode('@', $email);

                $domain = str_replace('.', ' [dot] ', $domain);

                return '<span class="spamspan"><span class="u">'.htmlentities($user).'</span> [at] <span class="d">'.htmlentities($domain).'</span></span>';

        }

        return null;

        // --- Old code ---

        // Attention: document.write() JavaScript will damage the browser cache, which leads to bugs if you navigate back&forth with the browser navigation

        // No new lines to avoid a JavaScript error!

        $linktext = str_replace("\r", ' ', $linktext);

        $linktext = str_replace("\n", ' ', $linktext);

        if (!function_exists('alas_js_crypt'))

        {

                function alas_js_crypt($text)

                {

                        $tmp = '';

                        for ($i=0; $i<strlen($text); $i++)

                        {

                                $tmp .= 'document.write("&#'.ord(substr($text, $i, 1)).';");';

                        }

                        return $tmp;

                }

        }

        if (!function_exists('alas_js_write'))

        {

                function alas_js_write($text)

                {

                        $text = str_replace('\\', '\\\\', $text);

                        $text = str_replace('"', '\"', $text);

                        $text = str_replace('/', '\/', $text); // W3C Validation </a> -> <\/a>

                        return 'document.write("'.$text.'");';

                }

        }

        $aus = '';

        if ($email != '')

        {

                $aus .= '<script><!--'."\n"; // type="text/javascript" is not necessary in HTML5

                $aus .= alas_js_write('<a href="');

                $aus .= alas_js_crypt('mailto:'.$email);

                $aus .= alas_js_write('">');

                $aus .= $crypt_linktext ? alas_js_crypt($linktext) : alas_js_write($linktext);

                $aus .= alas_js_write('</a>').'// --></script>';

        }

        if ($crypt_linktext) $linktext = str_replace('@', '&', $linktext);

        $email = str_replace('@', '&', $email);

        return $aus.'<noscript>'.htmlentities($linktext).' ('.htmlentities($email).')</noscript>';

}

function insertWhitespace($str, $index) {

        return substr($str, 0, $index) . ' ' . substr($str, $index);

}

function js_escape($data) {

        // TODO.... json_encode??

        return "'" . str_replace('\\', '\\\\', $data) . "'";

}

function oidplus_formatdate($date) {

        $date = explode(' ', $date)[0];

        if ($date == '0000-00-00') $date = '';

        return $date;

}

class MailException extends Exception {}

function my_mail($to, $title, $msg, $cc='', $bcc='') {

        $h = new SecureMailer();

        $title = $title;

        $h->addHeader('From', OIDplus::config()->getValue('admin_email'));

        if (!empty($cc)) $h->addHeader('Cc',  $cc);

        if (!empty($bcc)) $h->addHeader('Bcc',  $bcc);

        $h->addHeader('X-Mailer', 'PHP/'.phpversion());

        if (isset($_SERVER['REMOTE_ADDR'])) $h->addHeader('X-RemoteAddr', $_SERVER['REMOTE_ADDR']);

        $h->addHeader('MIME-Version', '1.0');

        $h->addHeader('Content-Type', 'text/plain; charset=ISO-8859-1');

        $sent = $h->sendMail($to, $title, $msg);

        if (!$sent) {

                throw new MailException('Sending mail failed');

        }

}

function trim_br($html) {

        do { $html = preg_replace('@^\s*<\s*br\s*/{0,1}\s*>@isU', '', $html, -1, $count); } while ($count > 0); // left trim

        do { $html = preg_replace('@<\s*br\s*/{0,1}\s*>\s*$@isU', '', $html, -1, $count); } while ($count > 0); // right trim

        return $html;

}

function verify_private_public_key($privKey, $pubKey) {

        try {

                if (empty($privKey)) return false;

                if (empty($pubKey)) return false;

                $data = 'TEST';

                if (!@openssl_public_encrypt($data, $encrypted, $pubKey)) return false;

                if (!@openssl_private_decrypt($encrypted, $decrypted, $privKey)) return false;

                return $decrypted == $data;

        } catch (Exception $e) {

                return false;

        }

}

function smallhash($data) { // get 31 bits from SHA1. Values 0..2147483647

        return (hexdec(substr(sha1($data),-4*2)) & 2147483647);

}

function split_firstname_lastname($name) {

        $ary = explode(' ', $name);

        $last_name = array_pop($ary);

        $first_name = implode(' ', $ary);

        return array($first_name, $last_name);

}

function originHeaders() {

        // CORS

        // Author: Till Wehowski

        header("Access-Control-Allow-Credentials: true");

        header("Access-Control-Allow-Origin: ".strip_tags(((isset($_SERVER['HTTP_ORIGIN'])) ? $_SERVER['HTTP_ORIGIN'] : "*")));

        header("Access-Control-Allow-Headers: If-None-Match, X-Requested-With, Origin, X-Frdlweb-Bugs, Etag, X-Forgery-Protection-Token, X-CSRF-Token");

        if (isset($_SERVER['HTTP_ORIGIN'])) {

                header('X-Frame-Options: ALLOW-FROM '.$_SERVER['HTTP_ORIGIN']);

        } else {

                header_remove("X-Frame-Options");

        }

        $expose = array('Etag', 'X-CSRF-Token');

        foreach (headers_list() as $num => $header) {

                $h = explode(':', $header);

                $expose[] = trim($h[0]);

        }

        header("Access-Control-Expose-Headers: ".implode(',',$expose));

        header("Vary: Origin");

}