Subversion Repositories oidplus

Rev

Rev 592 | Rev 702 | Go to most recent revision | Blame | Compare with Previous | Last modification | View Log | RSS feed

  1. <?php
  2.  
  3. /*
  4.  * OIDplus 2.0
  5.  * Copyright 2019 - 2021 Daniel Marschall, ViaThinkSoft
  6.  *
  7.  * Licensed under the Apache License, Version 2.0 (the "License");
  8.  * you may not use this file except in compliance with the License.
  9.  * You may obtain a copy of the License at
  10.  *
  11.  *     http://www.apache.org/licenses/LICENSE-2.0
  12.  *
  13.  * Unless required by applicable law or agreed to in writing, software
  14.  * distributed under the License is distributed on an "AS IS" BASIS,
  15.  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16.  * See the License for the specific language governing permissions and
  17.  * limitations under the License.
  18.  */
  19.  
  20. header('Content-Type:text/html; charset=UTF-8');
  21.  
  22. require_once __DIR__ . '/includes/oidplus.inc.php';
  23.  
  24. set_exception_handler(array('OIDplusGui', 'html_exception_handler'));
  25.  
  26. ob_start(); // allow cookie headers to be sent
  27.  
  28. OIDplus::init(true);
  29.  
  30. $static_node_id = isset($_REQUEST['goto']) ? $_REQUEST['goto'] : 'oidplus:system';
  31. $static = OIDplus::gui()->generateContentPage($static_node_id);
  32. $static_title = $static['title'];
  33. $static_icon = $static['icon'];
  34. $static_content = $static['text'];
  35.  
  36. if (!isset($_COOKIE['csrf_token'])) {
  37.         // This is the main CSRF token used for AJAX.
  38.         $token = OIDplus::authUtils()->genCSRFToken();
  39.         OIDplus::cookieUtils()->setcookie('csrf_token', $token, 0, false);
  40.         unset($token);
  41. }
  42.  
  43. if (!isset($_COOKIE['csrf_token_weak'])) {
  44.         // This CSRF token is created with SameSite=Lax and must be used
  45.         // for OAuth 2.0 redirects or similar purposes.
  46.         $token = OIDplus::authUtils()->genCSRFToken();
  47.         OIDplus::cookieUtils()->setcookie('csrf_token_weak', $token, 0, false, 'Lax');
  48.         unset($token);
  49. }
  50.  
  51. OIDplus::handleLangArgument();
  52.  
  53. function combine_systemtitle_and_pagetitle($systemtitle, $pagetitle) {
  54.         // Please also change the function in oidplus_base.js
  55.         if ($systemtitle == $pagetitle) {
  56.                 return $systemtitle;
  57.         } else {
  58.                 return $pagetitle . ' - ' . $systemtitle;
  59.         }
  60. }
  61.  
  62. $add_css_args = array();
  63. if (class_exists('OIDplusPageAdminColors')) {
  64.         // Usually, such things would be done using "features" (implementsFeature),
  65.         // but there are following reasons why we DON'T do it:
  66.         // 1. Just having a "CSS URL parameter feature" would change the URL parameter,
  67.         //    but it would not affect the custom code in oidplus.min.css.php
  68.         // 2. The JS function OIDplusPageAdminColors.test_color_theme() has an hardcoded set of parameters
  69.         //    and does not follow the arguments that might be set by other plugins.
  70.         $add_css_args[] = 'theme='.urlencode(OIDplus::config()->getValue('design'));
  71.         $add_css_args[] = 'invert='.urlencode(OIDplus::config()->getValue('color_invert'));
  72.         $add_css_args[] = 'h_shift='.urlencode(number_format(OIDplus::config()->getValue('color_hue_shift')/360,5,'.',''));
  73.         $add_css_args[] = 's_shift='.urlencode(number_format(OIDplus::config()->getValue('color_sat_shift')/100,5,'.',''));
  74.         $add_css_args[] = 'v_shift='.urlencode(number_format(OIDplus::config()->getValue('color_val_shift')/100,5,'.',''));
  75. }
  76. $add_css_args = count($add_css_args) > 0 ? '?'.implode('&',$add_css_args) : '';
  77.  
  78. ?><!DOCTYPE html>
  79. <html lang="<?php echo substr(OIDplus::getCurrentLang(),0,2); ?>">
  80.  
  81. <head>
  82.         <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  83.         <meta name="OIDplus-SystemTitle" content="<?php echo htmlentities(OIDplus::config()->getValue('system_title')); /* Do not remove. This meta tag is acessed by oidplus_base.js */ ?>">
  84.         <meta name="theme-color" content="#A9DCF0">
  85.         <meta name="viewport" content="width=device-width, initial-scale=1.0">
  86.  
  87.         <title><?php echo htmlentities(combine_systemtitle_and_pagetitle(OIDplus::config()->getValue('system_title'), $static_title)); ?></title>
  88.  
  89.         <script src="polyfill.min.js.php"></script>
  90.         <?php
  91.         if (OIDplus::baseConfig()->getValue('RECAPTCHA_ENABLED', false) == true) {
  92.                 echo '<script src="https://www.google.com/recaptcha/api.js"></script>';
  93.         }
  94.         ?>
  95.         <script src="oidplus.min.js.php"></script>
  96.  
  97.         <link rel="stylesheet" href="oidplus.min.css.php<?php echo htmlentities($add_css_args); ?>">
  98.         <link rel="shortcut icon" type="image/x-icon" href="favicon.ico.php">
  99. </head>
  100.  
  101. <body>
  102.  
  103. <div id="loading" style="display:none">Loading&#8230;</div>
  104.  
  105. <div id="frames">
  106.         <div id="content_window" class="borderbox">
  107.                 <?php
  108.                 $static_content = preg_replace_callback(
  109.                         '|<a\s([^>]*)href="mailto:([^"]+)"([^>]*)>([^<]*)</a>|ismU',
  110.                         function ($treffer) {
  111.                                 $email = $treffer[2];
  112.                                 $text = $treffer[4];
  113.                                 return OIDplus::mailUtils()->secureEmailAddress($email, $text, 1); // AntiSpam
  114.                         }, $static_content);
  115.  
  116.                 echo '<h1 id="real_title">';
  117.                 if ($static_icon != '') echo '<img src="'.htmlentities($static_icon).'" width="48" height="48" alt=""> ';
  118.                 echo htmlentities($static_title).'</h1>';
  119.                 echo '<div id="real_content">'.$static_content.'</div>';
  120.                 if ((!isset($_SERVER['REQUEST_METHOD'])) || ($_SERVER['REQUEST_METHOD'] == 'GET')) {
  121.                         echo '<br><p><img src="img/share.png" width="15" height="15" alt="'._L('Share').'"> <a href="?goto='.htmlentities($static_node_id).'" id="static_link" class="gray_footer_font">'._L('Static link to this page').'</a>';
  122.                         echo '</p>';
  123.                 }
  124.                 echo '<br>';
  125.                 ?>
  126.         </div>
  127.  
  128.         <div id="system_title_bar">
  129.                 <?php
  130.                 echo '<div id="system_title_menu" onclick="mobileNavButtonClick(this)" onmouseenter="mobileNavButtonHover(this)" onmouseleave="mobileNavButtonHover(this)">';
  131.                 echo '  <div id="bar1"></div>';
  132.                 echo '  <div id="bar2"></div>';
  133.                 echo '  <div id="bar3"></div>';
  134.                 echo '</div>';
  135.                 echo '';
  136.                 echo '<div id="system_title_text">';
  137.                 echo '  <a '.OIDplus::gui()->link('oidplus:system').' id="system_title_a">';
  138.                 echo '          <span id="system_title_logo"></span>';
  139.                 echo '          <span id="system_title_1">'._L('ViaThinkSoft OIDplus 2.0').'</span><br>';
  140.                 echo '          <span id="system_title_2">'.htmlentities(OIDplus::config()->getValue('system_title')).'</span>';
  141.                 echo '  </a>';
  142.                 echo '</div>';
  143.                 ?>
  144.         </div>
  145.  
  146.         <?php
  147.         echo OIDplus::gui()->getLanguageBox($static_node_id, true);
  148.         ?>
  149.  
  150.         <div id="gotobox">
  151.                 <?php
  152.                 echo '<input type="text" name="goto" id="gotoedit" value="'.htmlentities($static_node_id).'">';
  153.                 echo '<input type="button" value="'._L('Go').'" onclick="gotoButtonClicked()" id="gotobutton">';
  154.                 ?>
  155.         </div>
  156.  
  157.         <div id="oidtree" class="borderbox">
  158.                 <?php
  159.                 //echo '<noscript>';
  160.                 //echo '<p><b>'._L('Please enable JavaScript to use all features').'</b></p>';
  161.                 //echo '</noscript>';
  162.                 OIDplus::menuUtils()->nonjs_menu();
  163.                 ?>
  164.         </div>
  165. </div>
  166.  
  167. </body>
  168. </html>
  169. <?php
  170.  
  171. $cont = ob_get_contents();
  172. ob_end_clean();
  173.  
  174. OIDplus::invoke_shutdown();
  175.  
  176. echo $cont;
  177.