WebSVN – oidplus – Blame – /trunk/includes/oidplus.inc.php

Rev	Author	Line No.	Line
2	daniel-mar	1	<?php
		2
		3	/*
		4	* OIDplus 2.0
511	daniel-mar	5	* Copyright 2019 - 2021 Daniel Marschall, ViaThinkSoft
2	daniel-mar	6	*
		7	* Licensed under the Apache License, Version 2.0 (the "License");
		8	* you may not use this file except in compliance with the License.
		9	* You may obtain a copy of the License at
		10	*
		11	* http://www.apache.org/licenses/LICENSE-2.0
		12	*
		13	* Unless required by applicable law or agreed to in writing, software
		14	* distributed under the License is distributed on an "AS IS" BASIS,
		15	* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
		16	* See the License for the specific language governing permissions and
		17	* limitations under the License.
		18	*/
		19
236	daniel-mar	20	// Before we do ANYTHING, check for dependencies! Do not include anything (except the GMP supplement) yet.
		21
511	daniel-mar	22	define('INSIDE_OIDPLUS', true);
		23
463	daniel-mar	24	require_once __DIR__ . '/functions.inc.php'; // Required for _L()
		25
236	daniel-mar	26	if (version_compare(PHP_VERSION, '7.0.0') < 0) {
		27	// Reasons why we currently require PHP 7.0:
		28	// - Return values (e.g. "function foo(): array") (added 2020-04-06 at the database classes)
		29	// Note: By removing these return values (e.g. removing ": array"), you might be
		30	// able to run OIDplus with PHP lower than version 7.0 (not tested)
		31	//
269	daniel-mar	32	// Currently we do NOT require 7.1, because some (old-)stable distros are still using PHP 7.0
		33	// (e.g. Debian 9 which has LTS support till May 2022).
		34	// Therefore we commented out following features which would require PHP 7.1:
236	daniel-mar	35	// - Nullable return values (e.g. "function foo(): ?array")
464	daniel-mar	36	// - void return value (e.g. "function foo(): void")
		37	// - private/protected/public consts
463	daniel-mar	38	echo '<!DOCTYPE HTML>';
		39	echo '<html><head><title>'._L('OIDplus error').'</title></head><body>';
360	daniel-mar	40	echo '<h1>'._L('OIDplus error').'</h1>';
		41	echo '<p>'._L('OIDplus requires at least PHP version %1! You are currently using version %2','7.0',PHP_VERSION).'</p>'."\n";
463	daniel-mar	42	echo '</body></html>';
236	daniel-mar	43	die();
		44	}
		45
		46	include_once __DIR__ . '/gmp_supplement.inc.php';
530	daniel-mar	47	include_once __DIR__ . '/../3p/symfony-mbstring-polyfill/bootstrap.php';
480	daniel-mar	48	include_once __DIR__ . '/simplexml_supplement.inc.php';
236	daniel-mar	49
463	daniel-mar	50	require_once __DIR__ . '/oidplus_dependency.inc.php';
236	daniel-mar	51
463	daniel-mar	52	$missing_dependencies = oidplus_get_missing_dependencies();
236	daniel-mar	53
		54	if (count($missing_dependencies) >= 1) {
463	daniel-mar	55	echo '<!DOCTYPE HTML>';
		56	echo '<html><head><title>'._L('OIDplus error').'</title></head><body>';
360	daniel-mar	57	echo '<h1>'._L('OIDplus error').'</h1>';
		58	echo '<p>'._L('The following PHP extensions need to be installed in order to run OIDplus:').'</p>';
236	daniel-mar	59	echo '<ul>';
		60	foreach ($missing_dependencies as $dependency) {
463	daniel-mar	61	echo '<li>'.$dependency.'<br><br></li>';
236	daniel-mar	62	}
		63	echo '</ul>';
463	daniel-mar	64	echo '</body></html>';
236	daniel-mar	65	die();
		66	}
		67
		68	unset($missing_dependencies);
		69
		70	// Now we can continue!
		71
444	daniel-mar	72	if (PHP_SAPI != 'cli') {
476	daniel-mar	73	// TODO: Plugins should be able to extend CSP
50	daniel-mar	74	header('X-Content-Type-Options: nosniff');
		75	header('X-XSS-Protection: 1; mode=block');
178	daniel-mar	76	header("Content-Security-Policy: default-src 'self' blob: https://fonts.gstatic.com https://www.google.com/ https://www.gstatic.com/ https://cdnjs.cloudflare.com/; ".
50	daniel-mar	77	"style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/; ".
476	daniel-mar	78	"img-src blob: data: http: https:; ".
160	daniel-mar	79	"script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google.com/ https://www.gstatic.com/ https://cdnjs.cloudflare.com/ https://polyfill.io/; ".
50	daniel-mar	80	"frame-ancestors 'none'; ".
		81	"object-src 'none'");
		82	header('X-Frame-Options: SAMEORIGIN');
		83	header('Referrer-Policy: no-referrer-when-downgrade');
		84	}
2	daniel-mar	85
		86	require_once __DIR__ . '/oid_utils.inc.php';
16	daniel-mar	87	require_once __DIR__ . '/uuid_utils.inc.php';
286	daniel-mar	88	require_once __DIR__ . '/color_utils.inc.php';
17	daniel-mar	89	require_once __DIR__ . '/ipv4_functions.inc.php';
		90	require_once __DIR__ . '/ipv6_functions.inc.php';
12	daniel-mar	91	require_once __DIR__ . '/anti_xss.inc.php';
2	daniel-mar	92
		93	// ---
		94
229	daniel-mar	95	spl_autoload_register(function ($class_name) {
444	daniel-mar	96	static $class_refs = null;
		97
		98	if (is_null($class_refs)) {
526	daniel-mar	99	$valid_plugin_folders = array(
		100	'adminPages',
		101	'auth',
		102	'database',
		103	'design',
		104	'language',
		105	'logger',
		106	'objectTypes',
		107	'publicPages',
		108	'raPages',
		109	'sqlSlang'
		110	);
		111
571	daniel-mar	112	$func = function(&$class_refs, $class_files, $namespace='') {
		113	foreach ($class_files as $filename) {
		114	$cn = strtolower(basename($filename));
		115	$cn = preg_replace('@(\\.class){0,1}\\.php$@', '', $cn);
		116	if (!empty($namespace)) {
		117	if (substr($namespace,-1,1) !== '\\') $namespace .= '\\';
		118	$cn = strtolower($namespace) . $cn;
		119	}
		120	if (!isset($class_refs[$cn])) {
		121	$class_refs[$cn] = $filename;
		122	}
		123	}
		124	};
		125
527	daniel-mar	126	$class_files = array();
571	daniel-mar	127
		128	// Global namespace / OIDplus
526	daniel-mar	129	foreach ($valid_plugin_folders as $folder) {
		130	$class_files = array_merge($class_files, glob(__DIR__ . '/../plugins/'.$folder.'/'.''.'/'.''.'.class.php'));
		131	}
527	daniel-mar	132	$class_files = array_merge($class_files, glob(__DIR__ . '/classes/'.'*'.'.class.php'));
571	daniel-mar	133	$class_files = array_merge($class_files, glob(__DIR__ . '/../3p/vts_fileformats/'.'*'.'.class.php'));
		134	$func($class_refs, $class_files);
526	daniel-mar	135
571	daniel-mar	136	// Namespace of php-jwt
		137	$class_files = glob(__DIR__ . '/../3p/php-jwt/'.'*'.'.php');
		138	$namespace = "Firebase\\JWT\\";
		139	$func($class_refs, $class_files, $namespace);
		140
		141	// Namespace of 0xbb SHA3
		142	$class_files = glob(__DIR__ . '/../3p/0xbb/'.'*'.'.php');
		143	$namespace = "bb\\Sha3\\";
		144	$func($class_refs, $class_files, $namespace);
277	daniel-mar	145	}
444	daniel-mar	146
527	daniel-mar	147	$class_name = strtolower($class_name);
444	daniel-mar	148	if (isset($class_refs[$class_name])) {
527	daniel-mar	149	require $class_refs[$class_name];
		150	unset($class_refs[$class_name]); // this emulates a "require_once" and is faster
444	daniel-mar	151	}
530	daniel-mar	152	});

Subversion Repositories oidplus

oidplus/trunk/includes/oidplus.inc.php – Rev 571