* Fixed wrong/missing label tags around radio input elements
[Packages/TYPO3.CMS.git] / typo3 / sysext / cms / tslib / class.tslib_fe.php
1 <?php
2 /***************************************************************
3 * Copyright notice
4 *
5 * (c) 1999-2005 Kasper Skaarhoj (kasperYYYY@typo3.com)
6 * All rights reserved
7 *
8 * This script is part of the TYPO3 project. The TYPO3 project is
9 * free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
13 *
14 * The GNU General Public License can be found at
15 * http://www.gnu.org/copyleft/gpl.html.
16 * A copy is found in the textfile GPL.txt and important notices to the license
17 * from the author is found in LICENSE.txt distributed with these scripts.
18 *
19 *
20 * This script is distributed in the hope that it will be useful,
21 * but WITHOUT ANY WARRANTY; without even the implied warranty of
22 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
23 * GNU General Public License for more details.
24 *
25 * This copyright notice MUST APPEAR in all copies of the script!
26 ***************************************************************/
27 /**
28 * Class for the built TypoScript based Front End
29 *
30 * This class has a lot of functions and internal variable which are use from index_ts.php.
31 * The class is instantiated as $GLOBALS['TSFE'] in index_ts.php.
32 * The use of this class should be inspired by the order of function calls as found in index_ts.php.
33 *
34 * $Id$
35 * Revised for TYPO3 3.6 June/2003 by Kasper Skaarhoj
36 * XHTML compliant
37 *
38 * @author Kasper Skaarhoj <kasperYYYY@typo3.com>
39 */
40 /**
41 * [CLASS/FUNCTION INDEX of SCRIPT]
42 *
43 *
44 *
45 * 207: class tslib_fe
46 * 375: function tslib_fe($TYPO3_CONF_VARS, $id, $type, $no_cache='', $cHash='', $jumpurl='',$MP='',$RDCT='')
47 * 408: function connectToMySQL()
48 * 418: function connectToDB()
49 * 463: function sendRedirect()
50 *
51 * SECTION: Initializing, resolving page id
52 * 501: function initFEuser()
53 * 551: function initUserGroups()
54 * 586: function isUserOrGroupSet()
55 * 611: function checkAlternativeIdMethods()
56 * 663: function clear_preview()
57 * 676: function determineId()
58 * 811: function fetch_the_id()
59 * 904: function getPageAndRootline()
60 * 975: function getPageShortcut($SC,$mode,$thisUid,$itera=20,$pageLog=array())
61 * 1025: function checkRootlineForIncludeSection()
62 * 1062: function checkEnableFields($row,$bypassGroupCheck=FALSE)
63 * 1078: function checkPageGroupAccess($row, $groupList=NULL)
64 * 1097: function checkPagerecordForIncludeSection($row)
65 * 1106: function checkIfLoginAllowedInBranch()
66 * 1131: function getPageAccessFailureReasons()
67 * 1163: function setIDfromArgV()
68 * 1179: function getPageAndRootlineWithDomain($domainStartPage)
69 * 1206: function setSysPageWhereClause()
70 * 1218: function findDomainRecord($recursive=0)
71 * 1238: function pageNotFoundAndExit($reason='', $header='')
72 * 1253: function pageNotFoundHandler($code, $header='', $reason='')
73 * 1297: function checkAndSetAlias()
74 * 1312: function idPartsAnalyze($str)
75 * 1337: function mergingWithGetVars($GET_VARS)
76 *
77 * SECTION: Template and caching related functions.
78 * 1386: function makeCacheHash()
79 * 1410: function reqCHash()
80 * 1432: function cHashParams($addQueryParams)
81 * 1441: function initTemplate()
82 * 1453: function getFromCache()
83 * 1498: function getFromCache_queryRow()
84 * 1526: function headerNoCache()
85 * 1555: function getHash()
86 * 1575: function getConfigArray()
87 *
88 * SECTION: Further initialization and data processing
89 * 1714: function getCompressedTCarray()
90 * 1768: function includeTCA($TCAloaded=1)
91 * 1795: function settingLanguage()
92 * 1885: function settingLocale()
93 * 1910: function checkDataSubmission()
94 * 1935: function fe_tce()
95 * 1949: function locDataCheck($locationData)
96 * 1965: function sendFormmail()
97 * 2016: function extractRecipientCopy($bodytext)
98 * 2031: function checkJumpUrl()
99 * 2113: function jumpUrl()
100 * 2157: function setUrlIdToken()
101 *
102 * SECTION: Page generation; cache handling
103 * 2200: function isGeneratePage()
104 * 2210: function tempPageCacheContent()
105 * 2251: function realPageCacheContent()
106 * 2280: function setPageCacheContent($c,$d,$t)
107 * 2304: function clearPageCacheContent()
108 * 2314: function clearPageCacheContent_pidList($pidList)
109 * 2325: function setSysLastChanged()
110 *
111 * SECTION: Page generation; rendering and inclusion
112 * 2361: function generatePage_preProcessing()
113 * 2383: function generatePage_whichScript()
114 * 2395: function generatePage_postProcessing()
115 * 2487: function INTincScript()
116 * 2547: function INTincScript_loadJSCode()
117 * 2588: function isINTincScript()
118 * 2597: function doXHTML_cleaning()
119 * 2606: function doLocalAnchorFix()
120 *
121 * SECTION: Finished off; outputting, storing session data, statistics...
122 * 2637: function isOutputting()
123 * 2660: function processOutput()
124 * 2728: function sendCacheHeaders()
125 * 2796: function isStaticCacheble()
126 * 2809: function contentStrReplace()
127 * 2835: function isEXTincScript()
128 * 2844: function storeSessionData()
129 * 2854: function setParseTime()
130 * 2866: function statistics()
131 * 2974: function previewInfo()
132 * 3002: function hook_eofe()
133 * 3018: function beLoginLinkIPList()
134 *
135 * SECTION: Various internal API functions
136 * 3073: function makeSimulFileName($inTitle,$page,$type,$addParams='',$no_cache='')
137 * 3120: function simulateStaticDocuments_pEnc_onlyP_proc($linkVars)
138 * 3149: function getSimulFileName()
139 * 3163: function fileNameASCIIPrefix($inTitle,$titleChars,$mergeChar='.')
140 * 3181: function encryptEmail($string,$back=0)
141 * 3207: function codeString($string, $decode=FALSE)
142 * 3233: function roundTripCryptString($string)
143 * 3253: function checkFileInclude($incFile)
144 * 3268: function newCObj()
145 * 3281: function setAbsRefPrefix()
146 * 3295: function baseUrlWrap($url)
147 * 3314: function printError($label,$header='Error!')
148 * 3325: function updateMD5paramsRecord($hash)
149 * 3336: function tidyHTML($content)
150 * 3362: function prefixLocalAnchorsWithScript()
151 * 3373: function workspacePreviewInit()
152 * 3382: function doWorkspacePreview()
153 * 3392: function whichWorkspace($returnTitle = FALSE)
154 *
155 * SECTION: Various external API functions - for use in plugins etc.
156 * 3450: function getStorageSiterootPids()
157 * 3465: function getPagesTSconfig()
158 * 3498: function setJS($key,$content='')
159 * 3536: function setCSS($key,$content)
160 * 3551: function make_seed()
161 * 3564: function uniqueHash($str='')
162 * 3573: function set_no_cache()
163 * 3583: function set_cache_timeout_default($seconds)
164 * 3599: function plainMailEncoded($email,$subject,$message,$headers='')
165 *
166 * SECTION: Localization and character set conversion
167 * 3640: function sL($input)
168 * 3669: function readLLfile($fileRef)
169 * 3680: function getLLL($index,$LOCAL_LANG)
170 * 3694: function initLLvars()
171 * 3728: function csConv($str,$from='')
172 * 3746: function convOutputCharset($content,$label='')
173 * 3759: function convPOSTCharset()
174 *
175 * TOTAL FUNCTIONS: 110
176 * (This index is automatically created/updated by the extension "extdeveval")
177 *
178 */
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200 /**
201 * Main frontend class, instantiated in the index_ts.php script as the global object TSFE
202 *
203 * @author Kasper Skaarhoj <kasperYYYY@typo3.com>
204 * @package TYPO3
205 * @subpackage tslib
206 */
207 class tslib_fe {
208
209 // CURRENT PAGE:
210 var $id=''; // The page id (int)
211 var $type=''; // RO The type (int)
212 var $idParts=array(); // Loaded with the id, exploded by ','
213 var $cHash=''; // The submitted cHash
214 var $no_cache=''; // Page will not be cached. Write only true. Never clear value (some other code might have reasons to set it true)
215 var $rootLine=''; // The rootLine (all the way to tree root, not only the current site!) (array)
216 var $page=''; // The pagerecord (array)
217 var $contentPid=0; // This will normally point to the same value as id, but can be changed to point to another page from which content will then be displayed instead.
218 var $sys_page=''; // The object with pagefunctions (object)
219 var $jumpurl='';
220 var $pageNotFound=0; // Is set to 1 if a pageNotFound handler could have been called.
221 var $domainStartPage=0; // Domain start page
222 var $pageAccessFailureHistory=array(); // Array containing a history of why a requested page was not accessible.
223 var $MP='';
224 var $RDCT='';
225 var $page_cache_reg1=0; // This can be set from applications as a way to tag cached versions of a page and later perform some external cache management, like clearing only a part of the cache of a page...
226 var $siteScript=''; // Contains the value of the current script path that activated the frontend. Typically "index.php" but by rewrite rules it could be something else! Used for Speaking Urls / Simulate Static Documents.
227
228 // USER
229 var $fe_user=''; // The user (object)
230 var $loginUser=''; // Global flag indicating that a front-end user is logged in. This is set only if a user really IS logged in. The group-list may show other groups (like added by IP filter or so) even though there is no user.
231 var $gr_list=''; // (RO=readonly) The group list, sorted numerically. Group '0,-1' is the default group, but other groups may be added by other means than a user being logged in though...
232 var $beUserLogin=''; // Flag that indicates if a Backend user is logged in!
233 var $workspacePreview=''; // Integer, that indicates which workspace is being previewed.
234 var $loginAllowedInBranch = TRUE; // Shows whether logins are allowed in branch
235
236 // PREVIEW
237 var $fePreview=''; // Flag indication that preview is active. This is based on the login of a backend user and whether the backend user has read access to the current page. A value of 1 means ordinary preview, 2 means preview of a non-live workspace
238 var $showHiddenPage=''; // Flag indicating that hidden pages should be shown, selected and so on. This goes for almost all selection of pages!
239 var $showHiddenRecords=''; // Flag indicating that hidden records should be shown. This includes sys_template, pages_language_overlay and even fe_groups in addition to all other regular content. So in effect, this includes everything except pages.
240 var $simUserGroup='0'; // Value that contains the simulated usergroup if any
241
242 // CONFIGURATION
243 var $TYPO3_CONF_VARS=array(); // The configuration array as set up in t3lib/config_default.php. Should be an EXACT copy of the global array.
244 var $config=''; // 'CONFIG' object from TypoScript. Array generated based on the TypoScript configuration of the current page. Saved with the cached pages.
245 var $TCAcachedExtras=array(); // Array of cached information from TCA. This is NOT TCA itself!
246
247 // TEMPLATE / CACHE
248 var $tmpl=''; // The TypoScript template object. Used to parse the TypoScript template
249 var $cacheTimeOutDefault=''; // Is set to the time-to-live time of cached pages. If false, default is 60*60*24, which is 24 hours.
250 var $cacheContentFlag=''; // Set internally if cached content is fetched from the database
251 var $cacheExpires=0; // Set to the expire time of cached content
252 var $isClientCachable=FALSE; // Set if cache headers allowing caching are sent.
253 var $all=''; // $all used by template fetching system. This array is an identification of the template. If $this->all is empty it's because the template-data is not cached, which it must be.
254 var $sPre=''; // toplevel - objArrayName, eg 'page'
255 var $pSetup=''; // TypoScript configuration of the page-object pointed to by sPre. $this->tmpl->setup[$this->sPre.'.']
256 var $newHash=''; // This hash is unique to the template, the $this->id and $this->type vars and the gr_list (list of groups). Used to get and later store the cached data
257 var $getMethodUrlIdToken=''; // If config.ftu (Frontend Track User) is set in TypoScript for the current page, the string value of this var is substituted in the rendered source-code with the string, '&ftu=[token...]' which enables GET-method usertracking as opposed to cookie based
258 var $no_CacheBeforePageGen=''; // This flag is set before inclusion of pagegen.php IF no_cache is set. If this flag is set after the inclusion of pagegen.php, no_cache is forced to be set. This is done in order to make sure that php-code from pagegen does not falsely clear the no_cache flag.
259 var $tempContent = FALSE; // This flag indicates if temporary content went into the cache during page-generation.
260 var $forceTemplateParsing=''; // Boolean, passed to TypoScript template class and tells it to render the template forcibly
261 var $cHash_array=array(); // The array which cHash_calc is based on, see ->makeCacheHash().
262 var $hash_base=''; // Loaded with the serialized array that is used for generating a hashstring for the cache
263 var $pagesTSconfig=''; // May be set to the pagesTSconfig
264 // PAGE-GENERATION / cOBJ
265 /*
266 Eg. insert JS-functions in this array ($additionalHeaderData) to include them once. Use associative keys.
267 Keys in use:
268 JSFormValidate : <script type="text/javascript" src="'.$GLOBALS["TSFE"]->absRefPrefix.'t3lib/jsfunc.validateform.js"></script>
269 JSincludeFormupdate : <script type="text/javascript" src="t3lib/jsfunc.updateform.js"></script>
270 JSMenuCode, JSMenuCode_menu : JavaScript for the JavaScript menu
271 JSCode : reserved
272 JSImgCode : reserved
273 */
274 var $defaultBodyTag='<body>'; // Default bodytag, if nothing else is set. This can be overridden by applications like TemplaVoila.
275 var $additionalHeaderData=array(); // used to accumulate additional HTML-code for the header-section, <head>...</head>. Insert either associative keys (like additionalHeaderData['myStyleSheet'], see reserved keys above) or num-keys (like additionalHeaderData[] = '...')
276 var $additionalJavaScript=array(); // used to accumulate additional JavaScript-code. Works like additionalHeaderData. Reserved keys at 'openPic' and 'mouseOver'
277 var $additionalCSS=array(); // used to accumulate additional Style code. Works like additionalHeaderData.
278 var $JSeventFuncCalls = array( // you can add JavaScript functions to each entry in these arrays. Please see how this is done in the GMENU_LAYERS script. The point is that many applications on a page can set handlers for onload, onmouseover and onmouseup
279 'onmousemove' => array(),
280 'onmouseup' => array(),
281 'onload' => array(),
282 );
283 var $JSCode=''; // Depreciated, use additionalJavaScript instead.
284 var $JSImgCode=''; // Used to accumulate JavaScript loaded images (by menus)
285 var $divSection=''; // Used to accumulate DHTML-layers.
286
287 // RENDERING configuration, settings from TypoScript is loaded into these vars. See pagegen.php
288 var $debug=''; // Debug flag, may output special debug html-code.
289 var $intTarget=''; // Default internal target
290 var $extTarget=''; // Default external target
291 var $MP_defaults=array(); // Keys are page ids and values are default &MP (mount point) values to set when using the linking features...)
292 var $spamProtectEmailAddresses=0; // If set, typolink() function encrypts email addresses. Is set in pagegen-class.
293 var $absRefPrefix=''; // Absolute Reference prefix
294 var $absRefPrefix_force=0; // Absolute Reference prefix force flag. This is set, if the type and id is retrieve from PATH_INFO and thus we NEED to prefix urls with at least '/'
295 var $compensateFieldWidth=''; // Factor for form-field widths compensation
296 var $lockFilePath=''; // Lock file path
297 var $ATagParams=''; // <A>-tag parameters
298 var $sWordRegEx=''; // Search word regex, calculated if there has been search-words send. This is used to mark up the found search words on a page when jumped to from a link in a search-result.
299 var $sWordList=''; // Is set to the incoming array sword_list in case of a page-view jumped to from a search-result.
300 var $linkVars=''; // A string prepared for insertion in all links on the page as url-parameters. Based on configuration in TypoScript where you defined which GET_VARS you would like to pass on.
301 var $excludeCHashVars=''; // A string set with a comma list of additional GET vars which should NOT be included in the cHash calculation. These vars should otherwise be detected and involved in caching, eg. through a condition in TypoScript.
302 var $displayEditIcons=''; // If set, edit icons are rendered aside content records. Must be set only if the ->beUserLogin flag is set and set_no_cache() must be called as well.
303 var $displayFieldEditIcons=''; // If set, edit icons are rendered aside individual fields of content. Must be set only if the ->beUserLogin flag is set and set_no_cache() must be called as well.
304 var $sys_language_uid=0; // Site language, 0 (zero) is default, int+ is uid pointing to a sys_language record. Should reflect which language it DOES actually display!
305 var $sys_language_mode=''; // Site language mode
306 var $sys_language_content=0; // Site content selection uid
307 var $sys_language_contentOL=0; // Site content overlay flag; If set - and sys_language_content is > 0 - , records selected will try to look for a translation pointing to their uid. (If configured in [ctrl][languageField] / [ctrl][transOrigP...]
308 var $sys_language_isocode = ''; // Is set to the iso code of the sys_language_content if that is properly defined by the sys_language record representing the sys_language_uid. (Requires the extension "static_info_tables")
309
310 // RENDERING data
311 var $applicationData=Array(); // 'Global' Storage for various applications. Keys should be 'tx_'.extKey for extensions.
312 var $register=Array();
313 var $registerStack=Array(); // Stack used for storing array and retrieving register arrays (see LOAD_REGISTER and CLEAR_REGISTER)
314 var $cObjectDepthCounter = 50; // Checking that the function is not called eternally. This is done by interrupting at a depth of 50
315 var $recordRegister = Array(); // used by cObj->RECORDS and cObj->CONTENT to ensure the a records is NOT rendered twice through it!
316 var $currentRecord = ''; // This is set to the [table]:[uid] of the latest record rendered. Note that class tslib_cObj has an equal value, but that is pointing to the record delivered in the $data-array of the tslib_cObj instance, if the cObjects CONTENT or RECORD created that instance
317 var $accessKey =array(); // Used by class tslib_menu to keep track of access-keys.
318 var $imagesOnPage=array(); // Numerical array where image filenames are added if they are referenced in the rendered document. This includes only TYPO3 generated/inserted images.
319 var $lastImageInfo=array(); // Is set in tslib_cObj->cImage() function to the info-array of the most recent rendered image. The information is used in tslib_cObj->IMGTEXT
320 var $uniqueCounter=0; // Used to generate page-unique keys. Point is that uniqid() functions is very slow, so a unikey key is made based on this, see function uniqueHash()
321 var $uniqueString='';
322 var $indexedDocTitle=''; // This value will be used as the title for the page in the indexer (if indexing happens)
323 var $altPageTitle=''; // Alternative page title (normally the title of the page record). Can be set from applications you make.
324 var $pEncAllowedParamNames=array(); // An array that holds parameter names (keys) of GET parameters which MAY be MD5/base64 encoded with simulate_static_documents method.
325 var $baseUrl=''; // The Base url set for the page header.
326 var $anchorPrefix=''; // The proper anchor prefix needed when using speaking urls. (only set if baseUrl is set)
327
328 // Page content render object
329 var $cObj =''; // is instantiated object of tslib_cObj
330
331 // CONTENT accumulation
332 var $content=''; // All page content is accumulated in this variable. See pagegen.php
333
334 // GENERAL
335 var $clientInfo=''; // Set to the browser: net / msie if 4+ browsers
336 var $scriptParseTime=0;
337 var $TCAloaded = 0; // Set ONLY if the full TCA is loaded
338
339 // Character set (charset) conversion object:
340 var $csConvObj; // An instance of the "t3lib_cs" class. May be used by any application.
341 var $defaultCharSet = 'iso-8859-1'; // The default charset used in the frontend if nothing else is set.
342 var $renderCharset=''; // Internal charset of the frontend during rendering: Defaults to "forceCharset" and if that is not set, to ->defaultCharSet
343 var $metaCharset=''; // Output charset of the websites content. This is the charset found in the header, meta tag etc. If different from $renderCharset a conversion happens before output to browser. Defaults to ->renderCharset if not set.
344 var $localeCharset=''; // Assumed charset of locale strings.
345
346 // LANG:
347 var $lang=''; // Set to the system language key (used on the site)
348 var $langSplitIndex=0; // Set to the index number of the language key
349 var $labelsCharset=''; // Charset of the labels from locallang (based on $this->lang)
350 var $convCharsetToFrom=''; // Set to the charsets to convert from/to IF there are any difference. Otherwise this stays a string
351 var $LL_labels_cache=array();
352 var $LL_files_cache=array();
353
354
355
356
357
358 /**
359 * Class constructor
360 * Takes a number of GET/POST input variable as arguments and stores them internally.
361 * The processing of these variables goes on later in this class.
362 * Also sets internal clientInfo array (browser information) and a unique string (->uniqueString) for this script instance; A md5 hash of the microtime()
363 *
364 * @param array The global $TYPO3_CONF_VARS array. Will be set internally in ->TYPO3_CONF_VARS
365 * @param mixed The value of t3lib_div::_GP('id')
366 * @param integer The value of t3lib_div::_GP('type')
367 * @param boolean The value of t3lib_div::_GP('no_cache'), evaluated to 1/0
368 * @param string The value of t3lib_div::_GP('cHash')
369 * @param string The value of t3lib_div::_GP('jumpurl')
370 * @param string The value of t3lib_div::_GP('MP')
371 * @param string The value of t3lib_div::_GP('RDCT')
372 * @return void
373 * @see index_ts.php
374 */
375 function tslib_fe($TYPO3_CONF_VARS, $id, $type, $no_cache='', $cHash='', $jumpurl='',$MP='',$RDCT='') {
376
377 // Setting some variables:
378 $this->TYPO3_CONF_VARS = $TYPO3_CONF_VARS;
379 $this->id = $id;
380 $this->type = $type;
381 $this->no_cache = $no_cache ? 1 : 0;
382 $this->cHash = $cHash;
383 $this->jumpurl = $jumpurl;
384 $this->MP = $this->TYPO3_CONF_VARS['FE']['enable_mount_pids'] ? (string)$MP : '';
385 $this->RDCT = $RDCT;
386 $this->clientInfo = t3lib_div::clientInfo();
387 $this->uniqueString=md5(microtime());
388
389 $this->csConvObj = t3lib_div::makeInstance('t3lib_cs');
390
391 // Call post processing function for constructor:
392 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['tslib_fe-PostProc'])) {
393 $_params = array('pObj' => &$this);
394 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['tslib_fe-PostProc'] as $_funcRef) {
395 t3lib_div::callUserFunction($_funcRef,$_params,$this);
396 }
397 }
398 }
399
400 /**
401 * Connect to MySQL database
402 * May exit after outputting an error message or some JavaScript redirecting to the install tool.
403 * Use connectToDB() instead!
404 *
405 * @return void
406 * @deprecated
407 */
408 function connectToMySQL() {
409 $this->connectToDB();
410 }
411
412 /**
413 * Connect to SQL database
414 * May exit after outputting an error message or some JavaScript redirecting to the install tool.
415 *
416 * @return void
417 */
418 function connectToDB() {
419 if ($GLOBALS['TYPO3_DB']->sql_pconnect(TYPO3_db_host, TYPO3_db_username, TYPO3_db_password)) {
420 if (!TYPO3_db) {
421 $this->printError('No database selected','Database Error');
422 // Redirects to the Install Tool:
423 echo '<script type="text/javascript">
424 /*<![CDATA[*/
425 document.location = "'.TYPO3_mainDir.'install/index.php?mode=123&step=1&password=joh316";
426 /*]]>*/
427 </script>';
428 exit;
429 } elseif (!$GLOBALS['TYPO3_DB']->sql_select_db(TYPO3_db)) {
430 $this->printError('Cannot connect to the current database, "'.TYPO3_db.'"','Database Error');
431 exit;
432 }
433 } else {
434 if (!TYPO3_db) {
435 // Redirects to the Install Tool:
436 echo '<script type="text/javascript">
437 /*<![CDATA[*/
438 document.location = "'.TYPO3_mainDir.'install/index.php?mode=123&step=1&password=joh316";
439 /*]]>*/
440 </script>';
441 exit;
442 }
443 $this->printError('The current username, password or host was not accepted when the connection to the database was attempted to be established!','Database Error');
444 exit;
445 }
446
447
448 // Call post processing function for DB connection:
449 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['connectToDB'])) {
450 $_params = array('pObj' => &$this);
451 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['connectToDB'] as $_funcRef) {
452 t3lib_div::callUserFunction($_funcRef,$_params,$this);
453 }
454 }
455 }
456
457 /**
458 * Looks up the value of $this->RDCT in the database and if it is found to be associated with a redirect URL then the redirection is carried out with a 'Location:' header
459 * May exit after sending a location-header.
460 *
461 * @return void
462 */
463 function sendRedirect() {
464 $res = $GLOBALS['TYPO3_DB']->exec_SELECTquery('params', 'cache_md5params', 'md5hash='.$GLOBALS['TYPO3_DB']->fullQuoteStr($this->RDCT, 'cache_md5params'));
465 if ($row = $GLOBALS['TYPO3_DB']->sql_fetch_assoc($res)) {
466 $this->updateMD5paramsRecord($this->RDCT);
467 header('Location: '.$row['params']);
468 exit;
469 }
470 }
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489 /********************************************
490 *
491 * Initializing, resolving page id
492 *
493 ********************************************/
494
495
496 /**
497 * Initializes the front-end login user.
498 *
499 * @return void
500 */
501 function initFEuser() {
502 $this->fe_user = t3lib_div::makeInstance('tslib_feUserAuth');
503
504 $this->fe_user->lockIP = $this->TYPO3_CONF_VARS['FE']['lockIP'];
505 $this->fe_user->lockHashKeyWords = $this->TYPO3_CONF_VARS['FE']['lockHashKeyWords'];
506 $this->fe_user->checkPid = $this->TYPO3_CONF_VARS['FE']['checkFeUserPid'];
507 $this->fe_user->lifetime = intval($this->TYPO3_CONF_VARS['FE']['lifetime']);
508 $this->fe_user->checkPid_value = $GLOBALS['TYPO3_DB']->cleanIntList(t3lib_div::_GP('pid')); // List of pid's acceptable
509
510 // Check if a session is transferred:
511 if (t3lib_div::_GP('FE_SESSION_KEY')) {
512 $fe_sParts = explode('-',t3lib_div::_GP('FE_SESSION_KEY'));
513 if (!strcmp(md5($fe_sParts[0].'/'.$this->TYPO3_CONF_VARS['SYS']['encryptionKey']), $fe_sParts[1])) { // If the session key hash check is OK:
514 $_COOKIE[$this->fe_user->name] = $fe_sParts[0];
515 $this->fe_user->forceSetCookie = 1;
516 }
517 }
518
519 if ($this->TYPO3_CONF_VARS['FE']['dontSetCookie']) {
520 $this->fe_user->dontSetCookie=1;
521 }
522
523 $this->fe_user->start();
524 $this->fe_user->unpack_uc('');
525 $this->fe_user->fetchSessionData(); // Gets session data
526 $recs = t3lib_div::_GP('recs');
527 if (is_array($recs)) { // If any record registration is submitted, register the record.
528 $this->fe_user->record_registration($recs, $this->TYPO3_CONF_VARS['FE']['maxSessionDataSize']);
529 }
530
531 // Call hook for possible manipulation of frontend user object
532 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['initFEuser'])) {
533 $_params = array('pObj' => &$this);
534 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['initFEuser'] as $_funcRef) {
535 t3lib_div::callUserFunction($_funcRef,$_params,$this);
536 }
537 }
538
539 // For every 60 seconds the is_online timestamp is updated.
540 if (is_array($this->fe_user->user) && $this->fe_user->user['uid'] && $this->fe_user->user['is_online']<($GLOBALS['EXEC_TIME']-60)) {
541 $GLOBALS['TYPO3_DB']->exec_UPDATEquery('fe_users', 'uid='.intval($this->fe_user->user['uid']), array('is_online' => $GLOBALS['EXEC_TIME']));
542 }
543 }
544
545 /**
546 * Initializes the front-end user groups.
547 * Sets ->loginUser and ->gr_list based on front-end user status.
548 *
549 * @return void
550 */
551 function initUserGroups() {
552
553 $this->fe_user->showHiddenRecords = $this->showHiddenRecords; // This affects the hidden-flag selecting the fe_groups for the user!
554 $this->fe_user->fetchGroupData(); // no matter if we have an active user we try to fetch matching groups which can be set without an user (simulation for instance!)
555
556 if (is_array($this->fe_user->user) && count($this->fe_user->groupData['uid'])) {
557 $this->loginUser=1; // global flag!
558 $this->gr_list = '0,-2'; // group -2 is not an existing group, but denotes a 'default' group when a user IS logged in. This is used to let elements be shown for all logged in users!
559 $gr_array = $this->fe_user->groupData['uid'];
560 } else {
561 $this->loginUser=0;
562 $this->gr_list = '0,-1'; // group -1 is not an existing group, but denotes a 'default' group when not logged in. This is used to let elements be hidden, when a user is logged in!
563
564 if ($this->loginAllowedInBranch) {
565 $gr_array = $this->fe_user->groupData['uid']; // For cases where logins are not banned from a branch usergroups can be set based on IP masks so we should add the usergroups uids.
566 } else {
567 $gr_array = array(); // Set to blank since we will NOT risk any groups being set when no logins are allowed!
568 }
569 }
570
571 // Clean up.
572 $gr_array = array_unique($gr_array); // Make unique...
573 sort($gr_array); // sort
574 if (count($gr_array)) {
575 $this->gr_list.=','.implode(',',$gr_array);
576 }
577
578 if ($this->fe_user->writeDevLog) t3lib_div::devLog('Valid usergroups for TSFE: '.$this->gr_list, 'tslib_fe');
579 }
580
581 /**
582 * Checking if a user is logged in or a group constellation different from "0,-1"
583 *
584 * @return boolean TRUE if either a login user is found (array fe_user->user) OR if the gr_list is set to something else than '0,-1' (could be done even without a user being logged in!)
585 */
586 function isUserOrGroupSet() {
587 return is_array($this->fe_user->user) || $this->gr_list!=='0,-1';
588 }
589
590 /**
591 * Provides ways to bypass the '?id=[xxx]&type=[xx]' format, using either PATH_INFO or virtual HTML-documents (using Apache mod_rewrite)
592 *
593 * Three options:
594 * 1) Apache mod_rewrite: Here a .htaccess file maps all .html-files to index.php and then we extract the id and type from the name of that HTML-file. (AKA "simulateStaticDocuments")
595 * 2) Use PATH_INFO (also Apache) to extract id and type from that var. Does not require any special modules compiled with apache. (less typical)
596 * 3) Using hook which enables features like those provided from "realurl" extension (AKA "Speaking URLs")
597 *
598 * Support for RewriteRule to generate (simulateStaticDocuments)
599 * With the mod_rewrite compiled into apache, put these lines into a .htaccess in this directory:
600 * RewriteEngine On
601 * RewriteRule ^[^/]*\.html$ index.php
602 * The url must end with '.html' and the format must comply with either of these:
603 * 1: '[title].[id].[type].html' - title is just for easy recognition in the logfile!; no practical use of the title for TYPO3.
604 * 2: '[id].[type].html' - above, but title is omitted; no practical use of the title for TYPO3.
605 * 3: '[id].html' - only id, type is set to the default, zero!
606 * NOTE: In all case 'id' may be the uid-number OR the page alias (if any)
607 *
608 * @return void
609 * @link http://typo3.org/doc.0.html?&tx_extrepmgm_pi1[extUid]=270&cHash=4ad9d7acb4
610 */
611 function checkAlternativeIdMethods() {
612
613 $this->siteScript = t3lib_div::getIndpEnv('TYPO3_SITE_SCRIPT');
614
615 // Resolving of "simulateStaticDocuments" URLs:
616 if ($this->siteScript && substr($this->siteScript,0,9)!='index.php') { // If there has been a redirect (basically; we arrived here otherwise than via "index.php" in the URL) this can happend either due to a CGI-script or because of reWrite rule. Earlier we used $_SERVER['REDIRECT_URL'] to check but
617 $uParts = parse_url($this->siteScript); // Parse the path:
618 $fI = t3lib_div::split_fileref($uParts['path']);
619
620 if (!$fI['path'] && $fI['file'] && substr($fI['file'],-5)=='.html') {
621 $parts = explode('.',$fI['file']);
622 $pCount = count($parts);
623 if ($pCount>2) {
624 $this->type = intval($parts[$pCount-2]);
625 $this->id = $parts[$pCount-3];
626 } else {
627 $this->type = 0;
628 $this->id = $parts[0];
629 }
630 }
631 }
632
633 // If PATH_INFO
634 if (t3lib_div::getIndpEnv('PATH_INFO')) { // If pathinfo contains stuff...
635 $parts=t3lib_div::trimExplode('/',t3lib_div::getIndpEnv('PATH_INFO'),1);
636 $parts[]='html';
637 $pCount = count($parts);
638 if ($pCount>2) {
639 $this->type = intval($parts[$pCount-2]);
640 $this->id = $parts[$pCount-3];
641 } else {
642 $this->type = 0;
643 $this->id = $parts[0];
644 }
645 $this->absRefPrefix_force=1;
646 }
647
648 // Call post processing function for custom URL methods.
649 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['checkAlternativeIdMethods-PostProc'])) {
650 $_params = array('pObj' => &$this);
651 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['checkAlternativeIdMethods-PostProc'] as $_funcRef) {
652 t3lib_div::callUserFunction($_funcRef,$_params,$this);
653 }
654 }
655 }
656
657 /**
658 * Clears the preview-flags, sets sim_exec_time to current time.
659 * Hidden pages must be hidden as default, $GLOBALS['SIM_EXEC_TIME'] is set to $GLOBALS['EXEC_TIME'] in t3lib/config_default.inc. Alter it by adding or subtracting seconds.
660 *
661 * @return void
662 */
663 function clear_preview() {
664 $this->showHiddenPage = 0;
665 $this->showHiddenRecords = 0;
666 $GLOBALS['SIM_EXEC_TIME'] = $GLOBALS['EXEC_TIME'];
667 $this->fePreview = 0;
668 }
669
670 /**
671 * Determines the id and evaluates any preview settings
672 * Basically this function is about determining whether a backend user is logged in, if he has read access to the page and if he's previewing the page. That all determines which id to show and how to initialize the id.
673 *
674 * @return void
675 */
676 function determineId() {
677
678 // Getting ARG-v values if some
679 $this->setIDfromArgV();
680
681 // If there is a Backend login we are going to check for any preview settings:
682 $GLOBALS['TT']->push('beUserLogin','');
683 if ($this->beUserLogin || $this->doWorkspacePreview()) {
684
685 // Backend user preview features:
686 if ($this->beUserLogin) {
687 $this->fePreview = $GLOBALS['BE_USER']->extGetFeAdminValue('preview') ? 1 : 0;
688
689 // If admin panel preview is enabled...
690 if ($this->fePreview) {
691 $fe_user_OLD_USERGROUP = $this->fe_user->user['usergroup'];
692
693 $this->showHiddenPage = $GLOBALS['BE_USER']->extGetFeAdminValue('preview','showHiddenPages');
694 $this->showHiddenRecords = $GLOBALS['BE_USER']->extGetFeAdminValue('preview','showHiddenRecords');
695 // simulate date
696 $simTime = $GLOBALS['BE_USER']->extGetFeAdminValue('preview','simulateDate');
697 if ($simTime) $GLOBALS['SIM_EXEC_TIME']=$simTime;
698 // simulate user
699 $simUserGroup = $GLOBALS['BE_USER']->extGetFeAdminValue('preview','simulateUserGroup');
700 $this->simUserGroup = $simUserGroup;
701 if ($simUserGroup) $this->fe_user->user['usergroup']=$simUserGroup;
702 if (!$simUserGroup && !$simTime && !$this->showHiddenPage && !$this->showHiddenRecords) {
703 $this->fePreview=0;
704 }
705 }
706 }
707
708 if ($this->id) {
709
710 // Now it's investigated if the raw page-id points to a hidden page and if so, the flag is set.
711 // This does not require the preview flag to be set in the admin panel
712 $idQ = t3lib_div::testInt($this->id) ? 'uid='.intval($this->id) : 'alias='.$GLOBALS['TYPO3_DB']->fullQuoteStr($this->id, 'pages').' AND pid>=0'; // pid>=0 added for the sake of versioning...
713 $res = $GLOBALS['TYPO3_DB']->exec_SELECTquery('hidden', 'pages', $idQ.' AND hidden!=0 AND deleted=0');
714 if ($GLOBALS['TYPO3_DB']->sql_num_rows($res)) {
715 $this->fePreview = 1; // The preview flag is set only if the current page turns out to actually be hidden!
716 $this->showHiddenPage = 1;
717 }
718
719 // For Live workspace: Check root line for proper connection to tree root (done because of possible preview of page / branch versions)
720 if (!$this->fePreview && $this->whichWorkspace()===0) {
721
722 // Initialize the page-select functions to check rootline:
723 $temp_sys_page = t3lib_div::makeInstance('t3lib_pageSelect');
724 $temp_sys_page->init($this->showHiddenPage);
725
726 // If root line contained NO records and ->error_getRootLine_failPid tells us that it was because of a pid=-1 (indicating a "version" record)...:
727 if (!count($temp_sys_page->getRootLine($this->id,$this->MP)) && $temp_sys_page->error_getRootLine_failPid==-1) {
728
729 // Setting versioningPreview flag and try again:
730 $temp_sys_page->versioningPreview = TRUE;
731 if (count($temp_sys_page->getRootLine($this->id,$this->MP))) {
732 // Finally, we got a root line (meaning that it WAS due to versioning preview of a page somewhere) and we set the fePreview flag which in itself will allow sys_page class to display previews of versionized records.
733 $this->fePreview = 1;
734 }
735 }
736 }
737 }
738
739 // The preview flag will be set if a backend user is in an offline workspace
740 if (($GLOBALS['BE_USER']->user['workspace_preview'] || t3lib_div::_GP('ADMCMD_view') || $this->doWorkspacePreview()) && ($this->whichWorkspace()===-1 || $this->whichWorkspace()>0)) {
741 $this->fePreview = 2; // Will show special preview message.
742 }
743
744 // If the front-end is showing a preview, caching MUST be disabled.
745 if ($this->fePreview) {
746 $this->set_no_cache();
747 }
748 }
749 $GLOBALS['TT']->pull();
750
751 // Now, get the id, validate access etc:
752 $this->fetch_the_id();
753
754 // Check if backend user has read access to this page. If not, recalculate the id.
755 if ($this->beUserLogin && $this->fePreview) {
756 if (!$GLOBALS['BE_USER']->doesUserHaveAccess($this->page,1)) {
757
758 // Resetting
759 $this->clear_preview();
760 $this->fe_user->user['usergroup'] = $fe_user_OLD_USERGROUP;
761
762 // Fetching the id again, now with the preview settings reset.
763 $this->fetch_the_id();
764 }
765 }
766
767 // Checks if user logins are blocked for a certain branch and if so, will unset user login and re-fetch ID.
768 $this->loginAllowedInBranch = $this->checkIfLoginAllowedInBranch();
769 if (!$this->loginAllowedInBranch) { // Logins are not allowed:
770 if ($this->isUserOrGroupSet()) { // Only if there is a login will we run this...
771
772 // Clear out user and group:
773 unset($this->fe_user->user);
774 $this->gr_list = '0,-1';
775
776 // Fetching the id again, now with the preview settings reset.
777 $this->fetch_the_id();
778 }
779 }
780
781 // Final cleaning.
782 $this->id = $this->contentPid = intval($this->id); // Make sure it's an integer
783 $this->type = intval($this->type); // Make sure it's an integer
784
785 // Look for alternative content PID if page is under version preview:
786 if ($this->fePreview) {
787 if ($this->page['_ORIG_pid']==-1 && $this->page['t3ver_swapmode']==0) { // Current page must have been an offline version and have swapmode set to 0:
788 // Setting contentPid here for preview might not be completely correct to do. Strictly the "_ORIG_uid" value should be used for tables where "versioning_followPages" is set and for others not. However this is a working quick-fix to display content elements at least!
789 $this->contentPid = $this->page['_ORIG_uid'];
790 }
791 }
792
793 // Call post processing function for id determination:
794 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['determineId-PostProc'])) {
795 $_params = array('pObj' => &$this);
796 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['determineId-PostProc'] as $_funcRef) {
797 t3lib_div::callUserFunction($_funcRef,$_params,$this);
798 }
799 }
800 }
801
802 /**
803 * Get The Page ID
804 * This gets the id of the page, checks if the page is in the domain and if the page is accessible
805 * Sets variables such as $this->sys_page, $this->loginUser, $this->gr_list, $this->id, $this->type, $this->domainStartPage, $this->idParts
806 *
807 * @return void
808 * @access private
809 */
810 function fetch_the_id() {
811 $GLOBALS['TT']->push('fetch_the_id initialize/','');
812
813 // Initialize the page-select functions.
814 $this->sys_page = t3lib_div::makeInstance('t3lib_pageSelect');
815 $this->sys_page->versioningPreview = $this->fePreview ? TRUE : FALSE;
816 $this->sys_page->versioningWorkspaceId = $this->whichWorkspace();
817 $this->sys_page->init($this->showHiddenPage);
818
819 // Set the valid usergroups for FE
820 $this->initUserGroups();
821
822 // Sets sys_page where-clause
823 $this->setSysPageWhereClause();
824
825 // Splitting $this->id by a period (.). First part is 'id' and second part - if exists - will overrule the &type param if given
826 $pParts = explode('.',$this->id);
827 $this->id = $pParts[0]; // Set it.
828 if (isset($pParts[1])) {$this->type=$pParts[1];}
829
830 // Splitting $this->id by a comma (,). First part is 'id' and other parts are just stored for use in scripts.
831 $this->idParts = explode(',',$this->id);
832
833 // Splitting by a '+' sign - used for base64/md5 methods of parameter encryption for simulate static documents.
834 list($pgID,$SSD_p)=explode('+',$this->idParts[0],2);
835 if ($SSD_p) { $this->idPartsAnalyze($SSD_p); }
836 $this->id = $pgID; // Set id
837
838 // If $this->id is a string, it's an alias
839 $this->checkAndSetAlias();
840
841 // The id and type is set to the integer-value - just to be sure...
842 $this->id = intval($this->id);
843 $this->type = intval($this->type);
844 $GLOBALS['TT']->pull();
845
846 // We find the first page belonging to the current domain
847 $GLOBALS['TT']->push('fetch_the_id domain/','');
848 $this->domainStartPage = $this->findDomainRecord($this->TYPO3_CONF_VARS['SYS']['recursiveDomainSearch']); // the page_id of the current domain
849 if (!$this->id) {
850 if ($this->domainStartPage) {
851 $this->id = $this->domainStartPage; // If the id was not previously set, set it to the id of the domain.
852 } else {
853 $theFirstPage = $this->sys_page->getFirstWebPage($this->id); // Find the first 'visible' page in that domain
854 if ($theFirstPage) {
855 $this->id = $theFirstPage['uid'];
856 } else {
857 $this->printError('No pages are found on the rootlevel!');
858 exit;
859 }
860 }
861 }
862 $GLOBALS['TT']->pull();
863
864 $GLOBALS['TT']->push('fetch_the_id rootLine/','');
865 $requestedId = $this->id; // We store the originally requested id
866 $this->getPageAndRootlineWithDomain($this->domainStartPage);
867 $GLOBALS['TT']->pull();
868
869 if ($this->pageNotFound && $this->TYPO3_CONF_VARS['FE']['pageNotFound_handling']) {
870 $pNotFoundMsg = array(
871 1 => 'ID was not an accessible page',
872 2 => 'Subsection was found and not accessible',
873 3 => 'ID was outside the domain',
874 );
875 $this->pageNotFoundAndExit($pNotFoundMsg[$this->pageNotFound]);
876 }
877
878 // set no_cache if set
879 if ($this->page['no_cache']) {
880 $this->set_no_cache();
881 }
882
883 // Init SYS_LASTCHANGED
884 $this->register['SYS_LASTCHANGED'] = intval($this->page['tstamp']);
885 if ($this->register['SYS_LASTCHANGED'] < intval($this->page['SYS_LASTCHANGED'])) {
886 $this->register['SYS_LASTCHANGED'] = intval($this->page['SYS_LASTCHANGED']);
887 }
888 }
889
890 /**
891 * Gets the page and rootline arrays based on the id, $this->id
892 *
893 * If the id does not correspond to a proper page, the 'previous' valid page in the rootline is found
894 * If the page is a shortcut (doktype=4), the ->id is loaded with that id
895 *
896 * Whether or not the ->id is changed to the shortcut id or the previous id in rootline (eg if a page is hidden), the ->page-array and ->rootline is found and must also be valid.
897 *
898 * Sets or manipulates internal variables such as: $this->id, $this->page, $this->rootLine, $this->MP, $this->pageNotFound
899 *
900 * @return void
901 * @access private
902 */
903 function getPageAndRootline() {
904 $this->page = $this->sys_page->getPage($this->id);
905 if (!count($this->page)) {
906 // If no page, we try to find the page before in the rootLine.
907 $this->pageNotFound=1; // Page is 'not found' in case the id itself was not an accessible page. code 1
908 $this->rootLine = $this->sys_page->getRootLine($this->id,$this->MP);
909 if (count($this->rootLine)) {
910 $c=count($this->rootLine)-1;
911 while($c>0) {
912
913 // Add to page access failure history:
914 $this->pageAccessFailureHistory['direct_access'][] = $this->rootLine[$c];
915
916 // Decrease to next page in rootline and check the access to that, if OK, set as page record and ID value.
917 $c--;
918 $this->id = $this->rootLine[$c]['uid'];
919 $this->page = $this->sys_page->getPage($this->id);
920 if (count($this->page)){ break; }
921 }
922 }
923 // If still no page...
924 if (!count($this->page)) {
925 if ($this->TYPO3_CONF_VARS['FE']['pageNotFound_handling']) {
926 $this->pageNotFoundAndExit('The requested page does not exist!');
927 } else {
928 $this->printError('The requested page does not exist!');
929 exit;
930 }
931 }
932 }
933 // Is the ID a link to another page??
934 if ($this->page['doktype']==4) {
935 $this->MP = ''; // We need to clear MP if the page is a shortcut. Reason is if the short cut goes to another page, then we LEAVE the rootline which the MP expects.
936 $this->page = $this->getPageShortcut($this->page['shortcut'],$this->page['shortcut_mode'],$this->page['uid']);
937 $this->id = $this->page['uid'];
938 }
939 // Gets the rootLine
940 $this->rootLine = $this->sys_page->getRootLine($this->id,$this->MP);
941
942 // If not rootline we're off...
943 if (!count($this->rootLine)) {
944 $this->printError('The requested page didn\'t have a proper connection to the tree-root! <br /><br />('.$this->sys_page->error_getRootLine.')');
945 exit;
946 }
947
948 // Checking for include section regarding the hidden/starttime/endtime/fe_user (that is access control of a whole subbranch!)
949 if ($this->checkRootlineForIncludeSection()) {
950 if (!count($this->rootLine)) {
951 $this->printError('The requested page was not accessible!');
952 exit;
953 } else {
954 $el = reset($this->rootLine);
955 $this->id = $el['uid'];
956 $this->page = $this->sys_page->getPage($this->id);
957 $this->rootLine = $this->sys_page->getRootLine($this->id,$this->MP);
958 }
959 }
960 }
961
962 /**
963 * Get page shortcut; Finds the records pointed to by input value $SC (the shortcut value)
964 *
965 * @param integer The value of the "shortcut" field from the pages record
966 * @param integer The shortcut mode: 1 and 2 will select either first subpage or random subpage; the default is the page pointed to by $SC
967 * @param integer The current page UID of the page which is a shortcut
968 * @param integer Safety feature which makes sure that the function is calling itself recursively max 20 times (since this function can find shortcuts to other shortcuts to other shortcuts...)
969 * @param array An array filled with previous page uids tested by the function - new page uids are evaluated against this to avoid going in circles.
970 * @return mixed Returns the page record of the page that the shortcut pointed to.
971 * @access private
972 * @see getPageAndRootline()
973 */
974 function getPageShortcut($SC,$mode,$thisUid,$itera=20,$pageLog=array()) {
975 $idArray = t3lib_div::intExplode(',',$SC);
976
977 // Find $page record depending on shortcut mode:
978 switch($mode) {
979 case 1:
980 case 2:
981 $pageArray = $this->sys_page->getMenu($idArray[0]?$idArray[0]:$thisUid,'*','sorting','AND pages.doktype<199 AND pages.doktype!=6');
982 $pO = 0;
983 if ($mode==2 && count($pageArray)) { // random
984 $this->make_seed();
985 $randval = intval(rand(0,count($pageArray)-1));
986 $pO = $randval;
987 }
988 $c = 0;
989 reset($pageArray);
990 while(list(,$pV)=each($pageArray)) {
991 if ($c==$pO) {
992 $page = $pV;
993 break;
994 }
995 $c++;
996 }
997 break;
998 default:
999 $page = $this->sys_page->getPage($idArray[0]);
1000 break;
1001 }
1002
1003 // Check if short cut page was a shortcut itself, if so look up recursively:
1004 if ($page['doktype']==4) {
1005 if (!in_array($page['uid'],$pageLog) && $itera>0) {
1006 $pageLog[] = $page['uid'];
1007 $page = $this->getPageShortcut($page['shortcut'],$page['shortcut_mode'],$page['uid'],$itera-1,$pageLog);
1008 } else {
1009 $pageLog[] = $page['uid'];
1010 $this->printError('Page shortcuts were looping in uids '.implode(',',$pageLog).'...!');
1011 exit;
1012 }
1013 }
1014 // Return resulting page:
1015 return $page;
1016 }
1017
1018 /**
1019 * Checks the current rootline for defined sections.
1020 *
1021 * @return boolean
1022 * @access private
1023 */
1024 function checkRootlineForIncludeSection() {
1025 $c=count($this->rootLine);
1026 $removeTheRestFlag=0;
1027
1028 for ($a=0;$a<$c;$a++) {
1029 if (!$this->checkPagerecordForIncludeSection($this->rootLine[$a])) {
1030 // Add to page access failure history:
1031 $this->pageAccessFailureHistory['sub_section'][] = $this->rootLine[$a];
1032 $removeTheRestFlag=1;
1033 }
1034 if ($this->rootLine[$a]['doktype']==6) {
1035 if ($this->beUserLogin) { // If there is a backend user logged in, check if he has read access to the page:
1036 $res = $GLOBALS['TYPO3_DB']->exec_SELECTquery('uid', 'pages', 'uid='.intval($this->id).' AND '.$GLOBALS['BE_USER']->getPagePermsClause(1)); // versionOL()?
1037 list($isPage) = $GLOBALS['TYPO3_DB']->sql_fetch_row($res);
1038 if (!$isPage) $removeTheRestFlag=1; // If there was no page selected, the user apparently did not have read access to the current PAGE (not position in rootline) and we set the remove-flag...
1039 } else { // Dont go here, if there is no backend user logged in.
1040 $removeTheRestFlag=1;
1041 }
1042 }
1043 if ($removeTheRestFlag) {
1044 $this->pageNotFound=2; // Page is 'not found' in case a subsection was found and not accessible, code 2
1045 unset($this->rootLine[$a]);
1046 }
1047 }
1048 return $removeTheRestFlag;
1049 }
1050
1051 /**
1052 * Checks page record for enableFields
1053 * Returns true if enableFields does not disable the page record.
1054 * Takes notice of the ->showHiddenPage flag and uses SIM_EXEC_TIME for start/endtime evaluation
1055 *
1056 * @param array The page record to evaluate (needs fields: hidden, starttime, endtime, fe_group)
1057 * @param boolean Bypass group-check
1058 * @return boolean True, if record is viewable.
1059 * @see tslib_cObj::getTreeList(), checkPagerecordForIncludeSection()
1060 */
1061 function checkEnableFields($row,$bypassGroupCheck=FALSE) {
1062 if ((!$row['hidden'] || $this->showHiddenPage)
1063 && $row['starttime']<=$GLOBALS['SIM_EXEC_TIME']
1064 && ($row['endtime']==0 || $row['endtime']>$GLOBALS['SIM_EXEC_TIME'])
1065 && ($bypassGroupCheck || $this->checkPageGroupAccess($row))
1066 ) { return TRUE; }
1067 }
1068
1069 /**
1070 * Check group access against a page record
1071 *
1072 * @param array The page record to evaluate (needs field: fe_group)
1073 * @param mixed List of group id's (comma list or array). Default is $this->gr_list
1074 * @return boolean True, if group access is granted.
1075 * @access private
1076 */
1077 function checkPageGroupAccess($row, $groupList=NULL) {
1078 if(is_null($groupList)) {
1079 $groupList = $this->gr_list;
1080 }
1081 if(!is_array($groupList)) {
1082 $groupList = explode(',', $groupList);
1083 }
1084 $pageGroupList = explode(',', $row['fe_group'] ? $row['fe_group'] : 0);
1085 return count(array_intersect($groupList, $pageGroupList)) > 0;
1086 }
1087
1088 /**
1089 * Checks page record for include section
1090 *
1091 * @param array The page record to evaluate (needs fields: extendToSubpages + hidden, starttime, endtime, fe_group)
1092 * @return boolean Returns true if either extendToSubpages is not checked or if the enableFields does not disable the page record.
1093 * @access private
1094 * @see checkEnableFields(), tslib_cObj::getTreeList(), checkRootlineForIncludeSection()
1095 */
1096 function checkPagerecordForIncludeSection($row) {
1097 return (!$row['extendToSubpages'] || $this->checkEnableFields($row)) ? 1 : 0;
1098 }
1099
1100 /**
1101 * Checks if logins are allowed in the current branch of the page tree. Traverses the full root line and returns TRUE if logins are OK, otherwise false (and then the login user must be unset!)
1102 *
1103 * @return boolean returns TRUE if logins are OK, otherwise false (and then the login user must be unset!)
1104 */
1105 function checkIfLoginAllowedInBranch() {
1106
1107 // Initialize:
1108 $c = count($this->rootLine);
1109 $disable = FALSE;
1110
1111 // Traverse root line from root and outwards:
1112 for ($a=0; $a<$c; $a++) {
1113
1114 // If a value is set for login state:
1115 if ($this->rootLine[$a]['fe_login_mode'] > 0) {
1116
1117 // Determine state from value:
1118 $disable = (int)$this->rootLine[$a]['fe_login_mode'] === 1 ? TRUE : FALSE;
1119 }
1120 }
1121
1122 return !$disable;
1123 }
1124
1125 /**
1126 * Analysing $this->pageAccessFailureHistory into a summary array telling which features disabled display and on which pages and conditions. That data can be used inside a page-not-found handler
1127 *
1128 * @return array Summary of why page access was not allowed.
1129 */
1130 function getPageAccessFailureReasons() {
1131 $output = array();
1132
1133 $combinedRecords = array_merge(
1134 is_array($this->pageAccessFailureHistory['direct_access']) ? $this->pageAccessFailureHistory['direct_access'] : array(array('fe_group'=>0)), // Adding fake first record for direct access if none, otherwise $k==0 below will be indicating a sub-section record to be first direct_access record which is of course false!
1135 is_array($this->pageAccessFailureHistory['sub_section']) ? $this->pageAccessFailureHistory['sub_section'] : array()
1136 );
1137
1138 if (count($combinedRecords)) {
1139 foreach($combinedRecords as $k => $pagerec) {
1140 // If $k=0 then it is the very first page the original ID was pointing at and that will get a full check of course
1141 // If $k>0 it is parent pages being tested. They are only significant for the access to the first page IF they had the extendToSubpages flag set, hence checked only then!
1142 if (!$k || $pagerec['extendToSubpages']) {
1143 if ($pagerec['hidden']) $output['hidden'][$pagerec['uid']] = TRUE;
1144 if ($pagerec['starttime'] > $GLOBALS['SIM_EXEC_TIME']) $output['starttime'][$pagerec['uid']] = $pagerec['starttime'];
1145 if ($pagerec['endtime']!=0 && $pagerec['endtime'] <= $GLOBALS['SIM_EXEC_TIME']) $output['endtime'][$pagerec['uid']] = $pagerec['endtime'];
1146 if (!$this->checkPageGroupAccess($pagerec)) $output['fe_group'][$pagerec['uid']] = $pagerec['fe_group'];
1147 }
1148 }
1149 }
1150
1151 return $output;
1152 }
1153
1154 /**
1155 * This checks if there are ARGV-parameters in the QUERY_STRING and if so, those are used for the id
1156 * $this->id must be 'false' in order for any processing to happen in here
1157 * If an id/alias value is extracted from the QUERY_STRING it is set in $this->id
1158 *
1159 * @return void
1160 * @access private
1161 */
1162 function setIDfromArgV() {
1163 if (!$this->id) {
1164 list($theAlias) = explode('&',t3lib_div::getIndpEnv('QUERY_STRING'));
1165 $theAlias = trim($theAlias);
1166 $this->id = $theAlias ? $theAlias : 0;
1167 }
1168 }
1169
1170 /**
1171 * Gets ->page and ->rootline information based on ->id. ->id may change during this operation.
1172 * If not inside domain, then default to first page in domain.
1173 *
1174 * @param integer Page uid of the page where the found domain record is (pid of the domain record)
1175 * @return void
1176 * @access private
1177 */
1178 function getPageAndRootlineWithDomain($domainStartPage) {
1179 $this->getPageAndRootline();
1180
1181 // Checks if the $domain-startpage is in the rootLine. This is necessary so that references to page-id's from other domains are not possible.
1182 if ($domainStartPage && is_array($this->rootLine)) {
1183 reset ($this->rootLine);
1184 $idFound = 0;
1185 while(list($key,$val)=each($this->rootLine)) {
1186 if ($val['uid']==$domainStartPage) {
1187 $idFound=1;
1188 break;
1189 }
1190 }
1191 if (!$idFound) {
1192 $this->pageNotFound=3; // Page is 'not found' in case the id was outside the domain, code 3
1193 $this->id = $domainStartPage;
1194 $this->getPageAndRootline(); //re-get the page and rootline if the id was not found.
1195 }
1196 }
1197 }
1198
1199 /**
1200 * Sets sys_page where-clause
1201 *
1202 * @return void
1203 * @access private
1204 */
1205 function setSysPageWhereClause() {
1206 $this->sys_page->where_hid_del.=' AND pages.doktype<200';
1207 $this->sys_page->where_groupAccess = $this->sys_page->getMultipleGroupsWhereClause('pages.fe_group', 'pages');
1208 }
1209
1210 /**
1211 * Looking up a domain record based on HTTP_HOST
1212 *
1213 * @param boolean If set, it looks "recursively" meaning that a domain like "123.456.typo3.com" would find a domain record like "typo3.com" if "123.456.typo3.com" or "456.typo3.com" did not exist.
1214 * @return integer Returns the page id of the page where the domain record was found.
1215 * @access private
1216 */
1217 function findDomainRecord($recursive=0) {
1218 if ($recursive) {
1219 $host = explode('.',t3lib_div::getIndpEnv('HTTP_HOST'));
1220 while(count($host)) {
1221 $pageUid = $this->sys_page->getDomainStartPage(implode('.',$host),t3lib_div::getIndpEnv('SCRIPT_NAME'),t3lib_div::getIndpEnv('REQUEST_URI'));
1222 if ($pageUid) return $pageUid; else array_shift($host);
1223 }
1224 return $pageUid;
1225 } else {
1226 return $this->sys_page->getDomainStartPage(t3lib_div::getIndpEnv('HTTP_HOST'),t3lib_div::getIndpEnv('SCRIPT_NAME'),t3lib_div::getIndpEnv('REQUEST_URI'));
1227 }
1228 }
1229
1230 /**
1231 * Page-not-found handler for use in frontend plugins from extensions.
1232 *
1233 * @param string Reason text
1234 * @param string HTTP header to send
1235 * @return void Function exits.
1236 */
1237 function pageNotFoundAndExit($reason='', $header='') {
1238 $header = $header ? $header : $this->TYPO3_CONF_VARS['FE']['pageNotFound_handling_statheader'];
1239 $this->pageNotFoundHandler($this->TYPO3_CONF_VARS['FE']['pageNotFound_handling'], $header, $reason);
1240 exit;
1241 }
1242
1243 /**
1244 * Page not found handler.
1245 * Exits.
1246 *
1247 * @param mixed Which type of handling; If a true PHP-boolean and TRUE then a ->printError message is outputted. If integer an error message with that number is shown. Otherwise the $code value is expected to be a "Location:" header value.
1248 * @param string If set, this is passed directly to the PHP function, header()
1249 * @param string If set, error messages will also mention this as the reason for the page-not-found.
1250 * @return void (The function exists!)
1251 */
1252 function pageNotFoundHandler($code, $header='', $reason='') {
1253 // Issue header in any case:
1254 if ($header) {header($header);}
1255
1256 // Create response:
1257 if (gettype($code)=='boolean' || !strcmp($code,1)) { // Simply boolean; Just shows TYPO3 error page with reason:
1258 $this->printError('The page did not exist or was inaccessible.'.($reason ? ' Reason: '.htmlspecialchars($reason) : ''));
1259 exit;
1260 } elseif (t3lib_div::isFirstPartOfStr($code,'USER_FUNCTION:')) {
1261 $funcRef = trim(substr($code,14));
1262 $params = array(
1263 'currentUrl' => t3lib_div::getIndpEnv('REQUEST_URI'),
1264 'reasonText' => $reason,
1265 'pageAccessFailureReasons' => $this->getPageAccessFailureReasons()
1266 );
1267 echo t3lib_div::callUserFunction($funcRef,$params,$this);
1268 exit;
1269 } elseif (t3lib_div::isFirstPartOfStr($code,'READFILE:')) {
1270 $readFile = t3lib_div::getFileAbsFileName(trim(substr($code,9)));
1271 if (@is_file($readFile)) {
1272 $fileContent = t3lib_div::getUrl($readFile);
1273 $fileContent = str_replace('###CURRENT_URL###', t3lib_div::getIndpEnv('REQUEST_URI'), $fileContent);
1274 $fileContent = str_replace('###REASON###', htmlspecialchars($reason), $fileContent);
1275 echo $fileContent;
1276 } else {
1277 $this->printError('Configuration Error: 404 page "'.$readFile.'" could not be found.');
1278 }
1279 exit;
1280 } elseif (strlen($code)) {
1281 header('Location: '.t3lib_div::locationHeaderUrl($code));
1282 exit;
1283 } else {
1284 $this->printError('Error.'.($reason ? ' Reason: '.htmlspecialchars($reason) : ''));
1285 exit;
1286 }
1287 }
1288
1289 /**
1290 * Fetches the integer page id for a page alias.
1291 * Looks if ->id is not an integer and if so it will search for a page alias and if found the page uid of that page is stored in $this->id
1292 *
1293 * @return void
1294 * @access private
1295 */
1296 function checkAndSetAlias() {
1297 if ($this->id && !t3lib_div::testInt($this->id)) {
1298 $aid = $this->sys_page->getPageIdFromAlias($this->id);
1299 if ($aid) {$this->id = $aid;}
1300 }
1301 }
1302
1303 /**
1304 * Analyzes the second part of a id-string (after the "+"), looking for B6 or M5 encoding and if found it will resolve it and restore the variables in global $_GET
1305 * If values for ->cHash, ->no_cache, ->jumpurl and ->MP is found, they are also loaded into the internal vars of this class.
1306 *
1307 * @param string String to analyze
1308 * @return void
1309 * @access private
1310 */
1311 function idPartsAnalyze($str) {
1312 $GET_VARS = '';
1313 switch(substr($str,0,2)) {
1314 case 'B6':
1315 $addParams = base64_decode(str_replace('_','=',str_replace('-','/',substr($str,2))));
1316 parse_str($addParams,$GET_VARS);
1317 break;
1318 case 'M5':
1319 $res = $GLOBALS['TYPO3_DB']->exec_SELECTquery('params', 'cache_md5params', 'md5hash='.$GLOBALS['TYPO3_DB']->fullQuoteStr(substr($str,2), 'cache_md5params'));
1320 $row = $GLOBALS['TYPO3_DB']->sql_fetch_assoc($res);
1321
1322 $this->updateMD5paramsRecord(substr($str,2));
1323 parse_str($row['params'],$GET_VARS);
1324 break;
1325 }
1326
1327 $this->mergingWithGetVars($GET_VARS);
1328 }
1329
1330 /**
1331 * Merging values into the global $_GET
1332 *
1333 * @param array Array of key/value pairs that will be merged into the current GET-vars. (Non-escaped values)
1334 * @return void
1335 */
1336 function mergingWithGetVars($GET_VARS) {
1337 if (is_array($GET_VARS)) {
1338 $realGet = t3lib_div::_GET(); // Getting $_GET var, unescaped.
1339 if (!is_array($realGet)) $realGet = array();
1340
1341 // Merge new values on top:
1342 $realGet = t3lib_div::array_merge_recursive_overrule($realGet,$GET_VARS);
1343
1344 // Write values back to $_GET:
1345 t3lib_div::_GETset($realGet);
1346
1347 // Setting these specifically (like in the init-function):
1348 if (isset($GET_VARS['type'])) $this->type = intval($GET_VARS['type']);
1349 if (isset($GET_VARS['cHash'])) $this->cHash = $GET_VARS['cHash'];
1350 if (isset($GET_VARS['jumpurl'])) $this->jumpurl = $GET_VARS['jumpurl'];
1351 if (isset($GET_VARS['MP'])) $this->MP = $this->TYPO3_CONF_VARS['FE']['enable_mount_pids'] ? $GET_VARS['MP'] : '';
1352
1353 if (isset($GET_VARS['no_cache']) && $GET_VARS['no_cache']) $this->set_no_cache();
1354 }
1355 }
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373 /********************************************
1374 *
1375 * Template and caching related functions.
1376 *
1377 *******************************************/
1378
1379 /**
1380 * Calculates a hash string based on additional parameters in the url. This is used to cache pages with more parameters than just id and type
1381 *
1382 * @return void
1383 * @see reqCHash()
1384 */
1385 function makeCacheHash() {
1386 $GET = t3lib_div::_GET();
1387 if ($this->cHash && is_array($GET)) {
1388 $this->cHash_array = t3lib_div::cHashParams(t3lib_div::implodeArrayForUrl('',$GET));
1389 $cHash_calc = t3lib_div::shortMD5(serialize($this->cHash_array));
1390
1391 if ($cHash_calc!=$this->cHash) {
1392 if ($this->TYPO3_CONF_VARS['FE']['pageNotFoundOnCHashError']) {
1393 $this->pageNotFoundAndExit('Request parameters could not be validated (&cHash comparison failed)');
1394 } else {
1395 $this->set_no_cache();
1396 $GLOBALS['TT']->setTSlogMessage('The incoming cHash "'.$this->cHash.'" and calculated cHash "'.$cHash_calc.'" did not match, so caching was disabled. The fieldlist used was "'.implode(',',array_keys($this->cHash_array)).'"',2);
1397 }
1398 }
1399 }
1400 }
1401
1402 /**
1403 * Will disable caching if the cHash value was not set.
1404 * This function should be called to check the _existence_ of "&cHash" whenever a plugin generating cachable output is using extra GET variables. If there _is_ a cHash value the validation of it automatically takes place in makeCacheHash() (see above)
1405 *
1406 * @return void
1407 * @see makeCacheHash(), tslib_pibase::pi_cHashCheck()
1408 */
1409 function reqCHash() {
1410 if (!$this->cHash) {
1411 if ($this->TYPO3_CONF_VARS['FE']['pageNotFoundOnCHashError']) {
1412 if ($this->tempContent) { $this->clearPageCacheContent(); }
1413 $this->pageNotFoundAndExit('Request parameters could not be validated (&cHash empty)');
1414 } else {
1415 $this->set_no_cache();
1416 $GLOBALS['TT']->setTSlogMessage('TSFE->reqCHash(): No &cHash parameter was sent for GET vars though required so caching is disabled ',2);
1417 }
1418 }
1419 }
1420
1421 /**
1422 * Splits the input query-parameters into an array with certain parameters filtered out.
1423 * Used to create the cHash value
1424 *
1425 * @param string Query-parameters: "&xxx=yyy&zzz=uuu"
1426 * @return array Array with key/value pairs of query-parameters WITHOUT a certain list of variable names (like id, type, no_cache etc) and WITH a variable, encryptionKey, specific for this server/installation
1427 * @access private
1428 * @see makeCacheHash(), tslib_cObj::typoLink()
1429 * @obsolete
1430 */
1431 function cHashParams($addQueryParams) {
1432 return t3lib_div::cHashParams($addQueryParams);
1433 }
1434
1435 /**
1436 * Initialize the TypoScript template parser
1437 *
1438 * @return void
1439 */
1440 function initTemplate() {
1441 $this->tmpl = t3lib_div::makeInstance('t3lib_TStemplate');
1442 $this->tmpl->init();
1443 $this->tmpl->tt_track= $this->beUserLogin ? 1 : 0;
1444 }
1445
1446 /**
1447 * See if page is in cache and get it if so
1448 * Stores the page content in $this->content if something is found.
1449 *
1450 * @return void
1451 */
1452 function getFromCache() {
1453 $this->tmpl->getCurrentPageData();
1454 $cc = Array();
1455 if (is_array($this->tmpl->currentPageData)) {
1456 // BE CAREFULL to change the content of the cc-array. This array is serialized and an md5-hash based on this is used for caching the page.
1457 // If this hash is not the same in here in this section and after page-generation the page will not be properly cached!
1458
1459 $cc['all'] = $this->tmpl->currentPageData['all'];
1460 $cc['rowSum'] = $this->tmpl->currentPageData['rowSum'];
1461 $cc['rootLine'] = $this->tmpl->currentPageData['rootLine']; // This rootline is used with templates only (matching()-function)
1462 $this->all = $this->tmpl->matching($cc); // This array is an identification of the template. If $this->all is empty it's because the template-data is not cached, which it must be.
1463 ksort($this->all);
1464 }
1465
1466 $this->content=''; // clearing the content-variable, which will hold the pagecontent
1467 unset($this->config); // Unsetting the lowlevel config
1468 $this->cacheContentFlag = 0;
1469
1470 // Look for page in cache only if caching is not disabled and if a shift-reload is not sent to the server.
1471 if ($this->all && !$this->no_cache && !$this->headerNoCache()) {
1472
1473 $this->newHash = $this->getHash();
1474
1475 $GLOBALS['TT']->push('Cache Row','');
1476 if ($row = $this->getFromCache_queryRow()) {
1477
1478 $this->config = (array)unserialize($row['cache_data']); // Fetches the lowlevel config stored with the cached data
1479 $this->content = $row['HTML']; // Getting the content
1480 $this->cacheContentFlag = 1; // Setting flag, so we know, that some cached content is gotten.
1481 $this->cacheExpires = $row['expires'];
1482
1483 if ($this->TYPO3_CONF_VARS['FE']['debug'] || $this->config['config']['debug']) {
1484 $this->content.=chr(10).'<!-- Cached page generated '.Date('d/m Y H:i', $row['tstamp']).'. Expires '.Date('d/m Y H:i', $row['expires']).' -->';
1485 }
1486
1487 }
1488 $GLOBALS['TT']->pull();
1489 }
1490 }
1491
1492 /**
1493 * Returning the cached version of page with hash ->newHash
1494 *
1495 * @return array Cached row, if any. Otherwise void.
1496 */
1497 function getFromCache_queryRow() {
1498
1499 $GLOBALS['TT']->push('Cache Query','');
1500 $res = $GLOBALS['TYPO3_DB']->exec_SELECTquery(
1501 'S.*',
1502 'cache_pages S,pages P',
1503 'S.hash='.$GLOBALS['TYPO3_DB']->fullQuoteStr($this->newHash, 'cache_pages').'
1504 AND S.page_id=P.uid
1505 AND S.expires > '.intval($GLOBALS['EXEC_TIME']).'
1506 AND P.deleted=0
1507 AND P.hidden=0
1508 AND P.starttime<='.intval($GLOBALS['EXEC_TIME']).'
1509 AND (P.endtime=0 OR P.endtime>'.intval($GLOBALS['EXEC_TIME']).')'
1510 );
1511 $GLOBALS['TT']->pull();
1512
1513 $row = $GLOBALS['TYPO3_DB']->sql_fetch_assoc($res);
1514 $GLOBALS['TYPO3_DB']->sql_free_result($res);
1515 return $row;
1516 }
1517
1518 /**
1519 * Detecting if shift-reload has been clicked
1520 * Will not be called if re-generation of page happens by other reasons (for instance that the page is not in cache yet!)
1521 * Also, a backend user MUST be logged in for the shift-reload to be detected due to DoS-attack-security reasons.
1522 *
1523 * @return boolean If shift-reload in client browser has been clicked, disable getting cached page (and regenerate it).
1524 */
1525 function headerNoCache() {
1526 $disableAcquireCacheData = FALSE;
1527
1528 if ($this->beUserLogin) {
1529 if (strtolower($_SERVER['HTTP_CACHE_CONTROL'])==='no-cache' || strtolower($_SERVER['HTTP_PRAGMA'])==='no-cache') {
1530 $disableAcquireCacheData = TRUE;
1531 }
1532 }
1533
1534 // Call hook for possible by-pass of requiring of page cache (for recaching purpose)
1535 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['headerNoCache'])) {
1536 $_params = array('pObj' => &$this, 'disableAcquireCacheData' => &$disableAcquireCacheData);
1537 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['headerNoCache'] as $_funcRef) {
1538 t3lib_div::callUserFunction($_funcRef,$_params,$this);
1539 }
1540 }
1541
1542 return $disableAcquireCacheData;
1543 }
1544
1545 /**
1546 * Calculates the cache-hash
1547 * This hash is unique to the template, the variables ->id, ->type, ->gr_list (list of groups), ->MP (Mount Points) and cHash array
1548 * Used to get and later store the cached data.
1549 *
1550 * @return string MD5 hash of $this->hash_base which is a serialized version of there variables.
1551 * @access private
1552 * @see getFromCache()
1553 */
1554 function getHash() {
1555 $this->hash_base = serialize(
1556 array(
1557 'all' => $this->all,
1558 'id' => intval($this->id),
1559 'type' => intval($this->type),
1560 'gr_list' => (string)$this->gr_list,
1561 'MP' => (string)$this->MP,
1562 'cHash' => $this->cHash_array
1563 )
1564 );
1565
1566 return md5($this->hash_base);
1567 }
1568
1569 /**
1570 * Checks if config-array exists already but if not, gets it
1571 *
1572 * @return void
1573 */
1574 function getConfigArray() {
1575 $setStatPageName = false;
1576
1577 if (!is_array($this->config) || is_array($this->config['INTincScript']) || $this->forceTemplateParsing) { // If config is not set by the cache (which would be a major mistake somewhere) OR if INTincScripts-include-scripts have been registered, then we must parse the template in order to get it
1578 $GLOBALS['TT']->push('Parse template','');
1579
1580 // Force parsing, if set?:
1581 $this->tmpl->forceTemplateParsing = $this->forceTemplateParsing;
1582
1583 // Start parsing the TS template. Might return cached version.
1584 $this->tmpl->start($this->rootLine);
1585 $GLOBALS['TT']->pull();
1586
1587 if ($this->tmpl->loaded) {
1588 $GLOBALS['TT']->push('Setting the config-array','');
1589 // t3lib_div::print_array($this->tmpl->setup);
1590 $this->sPre = $this->tmpl->setup['types.'][$this->type]; // toplevel - objArrayName
1591 $this->pSetup = $this->tmpl->setup[$this->sPre.'.'];
1592
1593 if (!is_array($this->pSetup)) {
1594 $this->printError('The page is not configured! [type= '.$this->type.']['.$this->sPre.']');
1595 exit;
1596 } else {
1597 $this->config['config']=Array();
1598
1599 // Filling the config-array.
1600 if (is_array($this->tmpl->setup['config.'])) {
1601 $this->config['config'] = $this->tmpl->setup['config.'];
1602 }
1603 if (is_array($this->pSetup['config.'])) {
1604 reset($this->pSetup['config.']);
1605 while(list($theK,$theV)=each($this->pSetup['config.'])) {
1606 $this->config['config'][$theK] = $theV;
1607 }
1608 }
1609 // if .simulateStaticDocuments was not present, the default value will rule.
1610 if (!isset($this->config['config']['simulateStaticDocuments'])) {
1611 $this->config['config']['simulateStaticDocuments'] = $this->TYPO3_CONF_VARS['FE']['simulateStaticDocuments'];
1612 }
1613
1614 // Processing for the config_array:
1615 $this->config['rootLine'] = $this->tmpl->rootLine;
1616 $this->config['mainScript'] = trim($this->config['config']['mainScript']) ? trim($this->config['config']['mainScript']) : 'index.php';
1617
1618 // STAT:
1619 $theLogFile = $this->TYPO3_CONF_VARS['FE']['logfile_dir'].$this->config['config']['stat_apache_logfile'];
1620 // Add PATH_site left to $theLogFile if the path is not absolute yet
1621 if (!t3lib_div::isAbsPath($theLogFile)) $theLogFile = PATH_site.$theLogFile;
1622
1623 if ($this->config['config']['stat_apache'] && $this->config['config']['stat_apache_logfile'] && !strstr($this->config['config']['stat_apache_logfile'],'/')) {
1624 if (t3lib_div::isAllowedAbsPath($theLogFile)) {
1625 if (!@is_file($theLogFile)) {
1626 touch($theLogFile); // Try to create the logfile
1627 t3lib_div::fixPermissions($theLogFile);
1628 }
1629
1630 if (@is_file($theLogFile) && @is_writable($theLogFile)) {
1631 $this->config['stat_vars']['logFile'] = $theLogFile;
1632 $setStatPageName = true; // Set page name later on
1633 } else {
1634 $GLOBALS['TT']->setTSlogMessage('Could not set logfile path. Check filepath and permissions.',3);
1635 }
1636 }
1637 }
1638
1639 $this->config['FEData'] = $this->tmpl->setup['FEData'];
1640 $this->config['FEData.'] = $this->tmpl->setup['FEData.'];
1641 }
1642 $GLOBALS['TT']->pull();
1643 } else {
1644 $this->printError('No template found!');
1645 exit;
1646 }
1647 }
1648
1649 // Initialize charset settings etc.
1650 $this->initLLvars();
1651
1652 // We want nice names, so we need to know the charset
1653 if ($setStatPageName) {
1654 if ($this->config['config']['stat_apache_niceTitle']) {
1655 $shortTitle = $this->csConvObj->specCharsToASCII($this->renderCharset,$this->page['title']);
1656 } else {
1657 $shortTitle = $this->page['title'];
1658 }
1659 $shortTitle = substr(preg_replace('/[^.[:alnum:]_-]/','_',$shortTitle),0,30);
1660 $pageName = $this->config['config']['stat_apache_pagenames'] ? $this->config['config']['stat_apache_pagenames'] : '[path][title]--[uid].html';
1661 $pageName = str_replace('[title]', $shortTitle ,$pageName);
1662 $pageName = str_replace('[uid]',$this->page['uid'],$pageName);
1663 $pageName = str_replace('[alias]',$this->page['alias'],$pageName);
1664 $pageName = str_replace('[type]',$this->type,$pageName);
1665 $temp = $this->config['rootLine'];
1666 array_pop($temp);
1667 if ($this->config['config']['stat_apache_noRoot']) {
1668 array_shift($temp);
1669 }
1670 $len = t3lib_div::intInRange($this->config['config']['stat_titleLen'],1,100,20);
1671 if ($this->config['config']['stat_apache_niceTitle']) {
1672 $path = $this->csConvObj->specCharsToASCII($this->renderCharset,$this->sys_page->getPathFromRootline($temp,$len));
1673 } else {
1674 $path = $this->sys_page->getPathFromRootline($temp,$len);
1675 }
1676 $this->config['stat_vars']['pageName'] = str_replace('[path]', preg_replace('/[^.[:alnum:]\/_-]/','_',$path.'/'), $pageName);
1677 }
1678
1679 // No cache
1680 if ($this->config['config']['no_cache']) { $this->set_no_cache(); } // Set $this->no_cache true if the config.no_cache value is set!
1681
1682 // Check PATH_INFO url
1683 if ($this->absRefPrefix_force && strcmp($this->config['config']['simulateStaticDocuments'],'PATH_INFO')) {
1684 $redirectUrl = t3lib_div::getIndpEnv('TYPO3_REQUEST_DIR').'index.php?id='.$this->id.'&type='.$this->type;
1685 if ($this->config['config']['simulateStaticDocuments_dontRedirectPathInfoError']) {
1686 $this->printError('PATH_INFO was not configured for this website, and the URL tries to find the page by PATH_INFO!<br /><br /><a href="'.htmlspecialchars($redirectUrl).'">Click here to get to the right page.</a>','Error: PATH_INFO not configured');
1687 } else {
1688 header('Location: '.t3lib_div::locationHeaderUrl($redirectUrl));
1689 }
1690 exit;
1691 // $this->set_no_cache(); // Set no_cache if PATH_INFO is NOT used as simulateStaticDoc. and if absRefPrefix_force shows that such an URL has been passed along.
1692 }
1693 }
1694
1695
1696
1697
1698
1699
1700
1701
1702
1703
1704
1705
1706
1707
1708 /********************************************
1709 *
1710 * Further initialization and data processing
1711 * (jumpurl/submission of forms)
1712 *
1713 *******************************************/
1714
1715 /**
1716 * Get the compressed $TCA array for use in the front-end
1717 * A compressed $TCA array holds only the ctrl- and feInterface-part for each table. But the column-definitions are omitted in order to save some memory and be more efficient.
1718 * Operates on the global variable, $TCA
1719 *
1720 * @return void
1721 * @see includeTCA()
1722 */
1723 function getCompressedTCarray() {
1724 global $TCA;
1725
1726 $GLOBALS['TT']->push('Get Compressed TC array');
1727 if (!$this->TCAloaded) {
1728 // Create hash string for storage / retrieval of cached content:
1729 $tempHash = md5('tables.php:'.
1730 filemtime(TYPO3_extTableDef_script ? PATH_typo3conf.TYPO3_extTableDef_script : PATH_t3lib.'stddb/tables.php').
1731 (TYPO3_extTableDef_script?filemtime(PATH_typo3conf.TYPO3_extTableDef_script):'').
1732 ($GLOBALS['TYPO3_LOADED_EXT']['_CACHEFILE'] ? filemtime(PATH_typo3conf.$GLOBALS['TYPO3_LOADED_EXT']['_CACHEFILE'].'_ext_tables.php') : '')
1733 );
1734 // Try to fetch if:
1735 list($TCA,$this->TCAcachedExtras) = unserialize($this->sys_page->getHash($tempHash, 0));
1736 // If no result, create it:
1737 if (!is_array($TCA)) {
1738 $this->includeTCA(0);
1739 $newTc = Array();
1740 $this->TCAcachedExtras = array(); // Collects other information
1741
1742 foreach($TCA as $key => $val) {
1743 $newTc[$key]['ctrl'] = $val['ctrl'];
1744 $newTc[$key]['feInterface'] = $val['feInterface'];
1745
1746 // Collect information about localization exclusion of fields:
1747 t3lib_div::loadTCA($key);
1748 if (is_array($TCA[$key]['columns'])) {
1749 $this->TCAcachedExtras[$key]['l10n_mode'] = array();
1750 foreach($TCA[$key]['columns'] as $fN => $fV) {
1751 if ($fV['l10n_mode']) {
1752 $this->TCAcachedExtras[$key]['l10n_mode'][$fN] = $fV['l10n_mode'];
1753 }
1754 }
1755 }
1756 }
1757
1758 // Store it in cache:
1759 $TCA = $newTc;
1760 $this->sys_page->storeHash($tempHash, serialize(array($newTc,$this->TCAcachedExtras)), 'SHORT TC');
1761 }
1762 }
1763 $GLOBALS['TT']->pull();
1764 }
1765
1766 /**
1767 * Includes full TCA.
1768 * Normally in the frontend only a part of the global $TCA array is loaded, for instance the "ctrl" part. Thus it doesn't take up too much memory.
1769 * If you need the FULL TCA available for some reason (like plugins using it) you should call this function which will include the FULL TCA.
1770 * Global vars $TCA, $PAGES_TYPES, $LANG_GENERAL_LABELS can/will be affected.
1771 * The flag $this->TCAloaded will make sure that such an inclusion happens only once since; If $this->TCAloaded is set, nothing is included.
1772 *
1773 * @param boolean Probably, keep hands of this value. Just don't set it. (This may affect the first-ever time this function is called since if you set it to zero/false any subsequent call will still trigger the inclusion; In other words, this value will be set in $this->TCAloaded after inclusion and therefore if its false, another inclusion will be possible on the next call. See ->getCompressedTCarray())
1774 * @return void
1775 * @see getCompressedTCarray()
1776 */
1777 function includeTCA($TCAloaded=1) {
1778 global $TCA, $PAGES_TYPES, $LANG_GENERAL_LABELS, $TBE_MODULES;
1779 if (!$this->TCAloaded) {
1780 $TCA = Array();
1781 include (TYPO3_tables_script ? PATH_typo3conf.TYPO3_tables_script : PATH_t3lib.'stddb/tables.php');
1782 // Extension additions
1783 if ($GLOBALS['TYPO3_LOADED_EXT']['_CACHEFILE']) {
1784 include(PATH_typo3conf.$GLOBALS['TYPO3_LOADED_EXT']['_CACHEFILE'].'_ext_tables.php');
1785 } else {
1786 include(PATH_t3lib.'stddb/load_ext_tables.php');
1787 }
1788 // ext-script
1789 if (TYPO3_extTableDef_script) {
1790 include (PATH_typo3conf.TYPO3_extTableDef_script);
1791 }
1792
1793 $this->TCAloaded = $TCAloaded;
1794 }
1795 }
1796
1797 /**
1798 * Setting the language key that'll be used by the current page.
1799 * In this function it should be checked, 1) that this language exists, 2) that a page_overlay_record exists, .. and if not the default language, 0 (zero), should be set.
1800 *
1801 * @return void
1802 * @access private
1803 */
1804 function settingLanguage() {
1805
1806 // Get values from TypoScript:
1807 $this->sys_language_uid = $this->sys_language_content = intval($this->config['config']['sys_language_uid']);
1808 list($this->sys_language_mode,$sys_language_content) = t3lib_div::trimExplode(';', $this->config['config']['sys_language_mode']);
1809 $this->sys_language_contentOL = $this->config['config']['sys_language_overlay'];
1810
1811 // If sys_language_uid is set to another language than default:
1812 if ($this->sys_language_uid>0) {
1813 // Request the overlay record for the sys_language_uid:
1814 $olRec = $this->sys_page->getPageOverlay($this->id, $this->sys_language_uid);
1815 if (!count($olRec)) {
1816
1817 // If no OL record exists and a foreign language is asked for...
1818 if ($this->sys_language_uid) {
1819
1820 // If requested translation is not available:
1821 if (t3lib_div::hideIfNotTranslated($this->page['l18n_cfg'])) {
1822 $this->pageNotFoundAndExit('Page is not available in the requested language.');
1823 } else {
1824 switch((string)$this->sys_language_mode) {
1825 case 'strict':
1826 $this->pageNotFoundAndExit('Page is not available in the requested language (strict).');
1827 break;
1828 case 'content_fallback':
1829 $fallBackOrder = t3lib_div::intExplode(',', $sys_language_content);
1830 foreach($fallBackOrder as $orderValue) {
1831 if (!strcmp($orderValue,'0') || count($this->sys_page->getPageOverlay($this->id, $orderValue))) {
1832 $this->sys_language_content = $orderValue; // Setting content uid (but leaving the sys_language_uid)
1833 break;
1834 }
1835 }
1836 break;
1837 default:
1838 // Default is that everything defaults to the default language...
1839 $this->sys_language_uid = $this->sys_language_content = 0;
1840 break;
1841 }
1842 }
1843 }
1844 } else {
1845 // Setting sys_language if an overlay record was found (which it is only if a language is used)
1846 $this->page = $this->sys_page->getPageOverlay($this->page, $this->sys_language_uid);
1847 }
1848 }
1849
1850 // Setting sys_language_uid inside sys-page:
1851 $this->sys_page->sys_language_uid = $this->sys_language_uid;
1852
1853 // If default translation is not available:
1854 if ((!$this->sys_language_uid || !$this->sys_language_content) && $this->page['l18n_cfg']&1) {
1855 $this->pageNotFoundAndExit('Page is not available in default language.');
1856 }
1857
1858 // Updating content of the two rootLines IF the language key is set!
1859 if ($this->sys_language_uid && is_array($this->tmpl->rootLine)) {
1860 reset($this->tmpl->rootLine);
1861 while(list($rLk)=each($this->tmpl->rootLine)) {
1862 $this->tmpl->rootLine[$rLk] = $this->sys_page->getPageOverlay($this->tmpl->rootLine[$rLk]);
1863 }
1864 }
1865 if ($this->sys_language_uid && is_array($this->rootLine)) {
1866 reset($this->rootLine);
1867 while(list($rLk)=each($this->rootLine)) {
1868 $this->rootLine[$rLk] = $this->sys_page->getPageOverlay($this->rootLine[$rLk]);
1869 }
1870 }
1871
1872 // Finding the ISO code:
1873 if (t3lib_extMgm::isLoaded('static_info_tables') && $this->sys_language_content) { // using sys_language_content because the ISO code only (currently) affect content selection from FlexForms - which should follow "sys_language_content"
1874 $sys_language_row = $this->sys_page->getRawRecord('sys_language',$this->sys_language_content,'static_lang_isocode');
1875 if (is_array($sys_language_row) && $sys_language_row['static_lang_isocode']) {
1876 $stLrow = $this->sys_page->getRawRecord('static_languages',$sys_language_row['static_lang_isocode'],'lg_iso_2');
1877 $this->sys_language_isocode = $stLrow['lg_iso_2'];
1878 }
1879 }
1880
1881 // Setting softMergeIfNotBlank:
1882 $table_fields = t3lib_div::trimExplode(',', $this->config['config']['sys_language_softMergeIfNotBlank'],1);
1883 foreach($table_fields as $TF) {
1884 list($tN,$fN) = explode(':',$TF);
1885 $this->TCAcachedExtras[$tN]['l10n_mode'][$fN] = 'mergeIfNotBlank';
1886 }
1887 }
1888
1889 /**
1890 * Setting locale for frontend rendering
1891 *
1892 * @return void
1893 */
1894 function settingLocale() {
1895
1896 // Setting locale
1897 if ($this->config['config']['locale_all']) {
1898 # Change by Rene Fritz, 22/10 2002
1899 # there's a problem that PHP parses float values in scripts wrong if the locale LC_NUMERIC is set to something with a comma as decimal point
1900 # this does not work in php 4.2.3
1901 #setlocale('LC_ALL',$this->config['config']['locale_all']);
1902 #setlocale('LC_NUMERIC','en_US');
1903
1904 # so we set all except LC_NUMERIC
1905 setlocale(LC_COLLATE,$this->config['config']['locale_all']);
1906 setlocale(LC_CTYPE,$this->config['config']['locale_all']);
1907 setlocale(LC_MONETARY,$this->config['config']['locale_all']);
1908 setlocale(LC_TIME,$this->config['config']['locale_all']);
1909
1910 $this->localeCharset = $this->csConvObj->get_locale_charset($this->config['config']['locale_all']);
1911 }
1912 }
1913
1914 /**
1915 * Checks if any email-submissions or submission via the fe_tce
1916 *
1917 * @return string 'email' if a formmail has been send, 'fe_tce' if front-end data submission (like forums, guestbooks) is send. '' if none.
1918 */
1919 function checkDataSubmission() {
1920 if ($_POST['formtype_db'] || $_POST['formtype_mail']) {
1921 $refInfo = parse_url(t3lib_div::getIndpEnv('HTTP_REFERER'));
1922 if (t3lib_div::getIndpEnv('TYPO3_HOST_ONLY')==$refInfo['host'] || $this->TYPO3_CONF_VARS['SYS']['doNotCheckReferer']) {
1923 if ($this->locDataCheck($_POST['locationData'])) {
1924 $ret = '';
1925 if ($_POST['formtype_mail']) {
1926 $ret = 'email';
1927 } elseif ($_POST['formtype_db'] && is_array($_POST['data'])) {
1928 $ret = 'fe_tce';
1929 }
1930 $GLOBALS['TT']->setTSlogMessage('"Check Data Submission": Return value: '.$ret,0);
1931 return $ret;
1932 }
1933 } else $GLOBALS['TT']->setTSlogMessage('"Check Data Submission": HTTP_HOST and REFERER HOST did not match when processing submitted formdata!',3);
1934 }
1935 }
1936
1937 /**
1938 * Processes submitted user data (obsolete "Frontend TCE")
1939 *
1940 * @return void
1941 * @see tslib_feTCE
1942 * @link http://typo3.org/doc.0.html?&tx_extrepmgm_pi1[extUid]=270&tx_extrepmgm_pi1[tocEl]=342&cHash=fdf55adb3b
1943 */
1944 function fe_tce() {
1945 $fe_tce = t3lib_div::makeInstance('tslib_feTCE');
1946 $fe_tce->start(t3lib_div::_POST('data'),$this->config['FEData.']);
1947 $fe_tce->includeScripts();
1948 }
1949
1950 /**
1951 * Checks if a formmail submission can be sent as email
1952 *
1953 * @param string The input from $_POST['locationData']
1954 * @return void
1955 * @access private
1956 * @see checkDataSubmission()
1957 */
1958 function locDataCheck($locationData) {
1959 $locData = explode(':',$locationData);
1960 if (!$locData[1] || $this->sys_page->checkRecord($locData[1],$locData[2],1)) {
1961 if (count($this->sys_page->getPage($locData[0]))) { // $locData[1] -check means that a record is checked only if the locationData has a value for a record else than the page.
1962 return 1;
1963 } else $GLOBALS['TT']->setTSlogMessage('LocationData Error: The page pointed to by location data ('.$locationData.') was not accessible.',2);
1964 } else $GLOBALS['TT']->setTSlogMessage('LocationData Error: Location data ('.$locationData.') record pointed to was not accessible.',2);
1965 }
1966
1967 /**
1968 * Sends the emails from the formmail content object.
1969 *
1970 * @return void
1971 * @access private
1972 * @see checkDataSubmission()
1973 */
1974 function sendFormmail() {
1975 $formmail = t3lib_div::makeInstance('t3lib_formmail');
1976
1977 $EMAIL_VARS = t3lib_div::_POST();
1978 $locationData = $EMAIL_VARS['locationData'];
1979 unset($EMAIL_VARS['locationData']);
1980 unset($EMAIL_VARS['formtype_mail']);
1981
1982 $integrityCheck = $this->TYPO3_CONF_VARS['FE']['strictFormmail'];
1983
1984 if(!$this->TYPO3_CONF_VARS['FE']['secureFormmail']) {
1985 // Check recipient field:
1986 $encodedFields = explode(',','recipient,recipient_copy'); // These two fields are the ones which contain recipient addresses that can be misused to send mail from foreign servers.
1987 foreach($encodedFields as $fieldKey) {
1988 if (strlen($EMAIL_VARS[$fieldKey])) {
1989 if ($res = $this->codeString($EMAIL_VARS[$fieldKey], TRUE)) { // Decode...
1990 $EMAIL_VARS[$fieldKey] = $res; // Set value if OK
1991 } elseif ($integrityCheck) { // Otherwise abort:
1992 $GLOBALS['TT']->setTSlogMessage('"Formmail" discovered a field ('.$fieldKey.') which could not be decoded to a valid string. Sending formmail aborted due to security reasons!',3);
1993 return false;
1994 } else {
1995 $GLOBALS['TT']->setTSlogMessage('"Formmail" discovered a field ('.$fieldKey.') which could not be decoded to a valid string. The security level accepts this, but you should consider a correct coding though!',2);
1996 }
1997 }
1998 }
1999 } else {
2000 $locData = explode(':',$locationData);
2001 $record = $this->sys_page->checkRecord($locData[1],$locData[2],1);
2002 $EMAIL_VARS['recipient'] = $record['subheader'];
2003 $EMAIL_VARS['recipient_copy'] = $this->extractRecipientCopy($record['bodytext']);
2004 }
2005
2006 // Hook for preprocessing of the content for formmails:
2007 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['sendFormmail-PreProcClass'])) {
2008 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['sendFormmail-PreProcClass'] as $_classRef) {
2009 $_procObj = &t3lib_div::getUserObj($_classRef);
2010 $EMAIL_VARS = $_procObj->sendFormmail_preProcessVariables($EMAIL_VARS,$this);
2011 }
2012 }
2013
2014 $formmail->start($EMAIL_VARS);
2015 $formmail->sendtheMail();
2016 $GLOBALS['TT']->setTSlogMessage('"Formmail" invoked, sending mail to '.$EMAIL_VARS['recipient'],0);
2017 }
2018
2019 /**
2020 * Extracts the value of recipient copy field from a formmail CE bodytext
2021 *
2022 * @param string $bodytext The content of the related bodytext field
2023 * @return string The value of the recipient_copy field, or an empty string
2024 */
2025 function extractRecipientCopy($bodytext) {
2026 $recipient_copy = '';
2027 $fdef = array();
2028 //|recipient_copy=hidden|karsten@localhost.localdomain
2029 preg_match('/^[\s]*\|[\s]*recipient_copy[\s]*=[\s]*hidden[\s]*\|(.*)$/m', $bodytext, $fdef);
2030 $recipient_copy = (!empty($fdef[1])) ? $fdef[1] : '';
2031 return $recipient_copy;
2032 }
2033
2034 /**
2035 * Checks if jumpurl is set.
2036 * This function also takes care of jumpurl utilized by the Direct Mail module (ext: direct_mail) which may set an integer value for jumpurl which refers to a link in a certain mail-record, mid
2037 *
2038 * @return void
2039 */
2040 function checkJumpUrl() {
2041 global $TCA;
2042
2043 $mid = t3lib_div::_GP('mid'); // mail id, if direct mail link
2044 $rid = t3lib_div::_GP('rid'); // recipient id, if direct mail link
2045 if ((strcmp($this->jumpurl,'') && ((t3lib_div::getIndpEnv('HTTP_REFERER') || $this->TYPO3_CONF_VARS['SYS']['doNotCheckReferer']) || $mid)) || ($this->jumpurl = $this->sys_page->getExtURL($this->page,$this->config['config']['disablePageExternalUrl']))) {
2046 if ($mid && is_array($TCA['sys_dmail'])) { // Yes, it's OK if the link comes from a direct mail. AND sys_dmail module has installed the table, sys_dmail (and therefore we expect sys_dmail_maillog as well!)
2047 $temp_recip=explode('_',$rid);
2048 $url_id=0;
2049 if (t3lib_div::testInt($this->jumpurl)) {
2050 $temp_res = $GLOBALS['TYPO3_DB']->exec_SELECTquery('mailContent', 'sys_dmail', 'uid='.intval($mid));
2051 if ($row = $GLOBALS['TYPO3_DB']->sql_fetch_assoc($temp_res)) {
2052 $temp_unpackedMail = unserialize($row['mailContent']);
2053 $url_id=$this->jumpurl;
2054 if ($this->jumpurl>=0) {
2055 $responseType=1; // Link (number)
2056 $this->jumpurl = $temp_unpackedMail['html']['hrefs'][$url_id]['absRef'];
2057 } else {
2058 $responseType=2; // Link (number, plaintext)
2059 $this->jumpurl = $temp_unpackedMail['plain']['link_ids'][abs($url_id)];
2060 }
2061 switch($temp_recip[0]) {
2062 case 't':
2063 $theTable = 'tt_address';
2064 break;
2065 case 'f':
2066 $theTable = 'fe_users';
2067 break;
2068 default:
2069 $theTable='';
2070 break;
2071 }
2072 if ($theTable) {
2073 $recipRow = $this->sys_page->getRawRecord($theTable,$temp_recip[1]);
2074 if (is_array($recipRow)) {
2075 // debug($recipRow);
2076 $authCode = t3lib_div::stdAuthCode($recipRow['uid']);
2077 $rowFieldsArray = explode(',', 'uid,name,title,email,phone,www,address,company,city,zip,country,fax,firstname');
2078 reset($rowFieldsArray);
2079 while(list(,$substField)=each($rowFieldsArray)) {
2080 $this->jumpurl = str_replace('###USER_'.$substField.'###', $recipRow[$substField], $this->jumpurl);
2081 }
2082 $this->jumpurl = str_replace('###SYS_TABLE_NAME###', $tableNameChar, $this->jumpurl); // Put in the tablename of the userinformation
2083 $this->jumpurl = str_replace('###SYS_MAIL_ID###', $mid, $this->jumpurl); // Put in the uid of the mail-record
2084 $this->jumpurl = str_replace('###SYS_AUTHCODE###', $authCode, $this->jumpurl);
2085
2086 // debug($this->jumpurl);
2087 }
2088 }
2089 }
2090
2091 $GLOBALS['TYPO3_DB']->sql_free_result($temp_res);
2092
2093 if (!$this->jumpurl) die('Error: No further link. Please report error to the mail sender.');
2094 } else {
2095 $responseType=-1; // received (url, dmailerping)
2096 }
2097 if ($responseType!=0) {
2098 $insertFields = array(
2099 'mid' => intval($mid),
2100 'rtbl' => $temp_recip[0],
2101 'rid' => intval($temp_recip[1]),
2102 'tstamp' => time(),
2103 'url' => $this->jumpurl,
2104 'response_type' => intval($responseType),
2105 'url_id' => intval($url_id)
2106 );
2107
2108 $GLOBALS['TYPO3_DB']->exec_INSERTquery('sys_dmail_maillog', $insertFields);
2109 }
2110 }
2111 } else {
2112 unset($this->jumpurl);
2113 }
2114 }
2115
2116 /**
2117 * Sends a header 'Location' to jumpurl, if jumpurl is set.
2118 * Will exit if a location header is sent (for instance if JumpUrl was triggered)
2119 *
2120 * @return void
2121 */
2122 function jumpUrl() {
2123 if ($this->jumpurl) {
2124 if (t3lib_div::_GP('juSecure')) {
2125 $hArr = array(
2126 $this->jumpurl,
2127 t3lib_div::_GP('locationData'),
2128 $this->TYPO3_CONF_VARS['SYS']['encryptionKey']
2129 );
2130 $calcJuHash=t3lib_div::shortMD5(serialize($hArr));
2131 $locationData = t3lib_div::_GP('locationData');
2132 $juHash = t3lib_div::_GP('juHash');
2133 if ($juHash == $calcJuHash) {
2134 if ($this->locDataCheck($locationData)) {
2135 $this->jumpurl = rawurldecode($this->jumpurl); // 211002 - goes with cObj->filelink() rawurlencode() of filenames so spaces can be allowed.
2136 if (@is_file($this->jumpurl)) {
2137 $mimeType = t3lib_div::_GP('mimeType');
2138 $mimeType = $mimeType ? $mimeType : 'application/octet-stream';
2139 Header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
2140 Header('Content-Type: '.$mimeType);
2141 Header('Content-Disposition: attachment; filename='.basename($this->jumpurl));
2142 readfile($this->jumpurl);
2143 exit;
2144 } else die('jumpurl Secure: "'.$this->jumpurl.'" was not a valid file!');
2145 } else die('jumpurl Secure: locationData, '.$locationData.', was not accessible.');
2146 } else die('jumpurl Secure: Calculated juHash, '.$calcJuHash.', did not match the submitted juHash.');
2147 } else {
2148 $TSConf = $this->getPagesTSconfig();
2149 if ($TSConf['TSFE.']['jumpUrl_transferSession']) {
2150 $uParts = parse_url($this->jumpurl);
2151 $params = '&FE_SESSION_KEY='.rawurlencode($this->fe_user->id.'-'.md5($this->fe_user->id.'/'.$this->TYPO3_CONF_VARS['SYS']['encryptionKey']));
2152 $this->jumpurl.=($uParts['query']?'':'?').$params; // Add the session parameter ...
2153 }
2154 Header('Location: '.$this->jumpurl);
2155 exit;
2156 }
2157 }
2158 }
2159
2160 /**
2161 * Sets the URL_ID_TOKEN in the internal var, $this->getMethodUrlIdToken
2162 *
2163 * @return void
2164 * @access private
2165 */
2166 function setUrlIdToken() {
2167 if ($this->config['config']['ftu']) {
2168 $this->getMethodUrlIdToken = $this->TYPO3_CONF_VARS['FE']['get_url_id_token'];
2169 } else {
2170 $this->getMethodUrlIdToken = '';
2171 }
2172 }
2173
2174
2175
2176
2177
2178
2179
2180
2181
2182
2183
2184
2185
2186
2187
2188
2189
2190
2191
2192
2193
2194
2195
2196
2197 /********************************************
2198 *
2199 * Page generation; cache handling
2200 *
2201 *******************************************/
2202
2203 /**
2204 * Returns true if the page should be generated
2205 * That is if jumpurl is not set and the cacheContentFlag is not set.
2206 *
2207 * @return boolean
2208 */
2209 function isGeneratePage() {
2210 return (!$this->cacheContentFlag && !$this->jumpurl);
2211 }
2212
2213 /**
2214 * Temp cache content
2215 * The temporary cache will expire after a few seconds (typ. 30) or will be cleared by the rendered page, which will also clear and rewrite the cache.
2216 *
2217 * @return void
2218 */
2219 function tempPageCacheContent() {
2220 $this->tempContent = FALSE;
2221
2222 if (!$this->no_cache) {
2223 $seconds = 30;
2224 $stdMsg = '
2225 <?xml version="1.0" encoding="UTF-8"?>
2226 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
2227 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
2228 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
2229 <head>
2230 <title>'.htmlspecialchars($this->tmpl->printTitle($this->page['title'])).'</title>
2231 <script type="text/javascript">
2232 window.setTimeout("location.reload()", 3000);
2233 </script>
2234 </head>
2235 <body style="background-color:white; font-family:Verdana,Arial,Helvetica; color:#cccccc; text-align:center;">
2236 <strong>Page is being generated.</strong><br />
2237 If this message does not disappear within '.$seconds.' seconds, please reload.
2238 </body>
2239 </html>';
2240 $temp_content = $this->config['config']['message_page_is_being_generated'] ? $this->config['config']['message_page_is_being_generated'] : $stdMsg;
2241
2242 if (!$this->headerNoCache() && $cachedRow = $this->getFromCache_queryRow()) {
2243 // We are here because between checking for cached content earlier and now some other HTTP-process managed to store something in cache AND it was not due to a shift-reload by-pass.
2244 // This is either the "Page is being generated" screen or it can be the final result.
2245 // In any case we should not begin another rendering process also, so we silently disable caching and render the page ourselves and thats it.
2246 // Actually $cachedRow contains content that we could show instead of rendering. Maybe we should do that to gain more performance but then we should set all the stuff done in $this->getFromCache()... For now we stick to this...
2247 $this->set_no_cache();
2248 } else {
2249 $this->setPageCacheContent($temp_content, $this->config, $GLOBALS['EXEC_TIME']+$seconds);
2250 $this->tempContent = TRUE; // This flag shows that temporary content is put in the cache
2251 }
2252 }
2253 }
2254
2255 /**
2256 * Set cache content to $this->content
2257 *
2258 * @return void
2259 */
2260 function realPageCacheContent() {
2261 $cache_timeout = $this->page['cache_timeout'] ? $this->page['cache_timeout'] : ($this->cacheTimeOutDefault ? $this->cacheTimeOutDefault : 60*60*24); // seconds until a cached page is too old
2262 $timeOutTime = $GLOBALS['EXEC_TIME']+$cache_timeout;
2263 if ($this->config['config']['cache_clearAtMidnight']) {
2264 $midnightTime = mktime (0,0,0,date('m',$timeOutTime),date('d',$timeOutTime),date('Y',$timeOutTime));
2265 if ($midnightTime > $GLOBALS['EXEC_TIME']) { // If the midnight time of the expire-day is greater than the current time, we may set the timeOutTime to the new midnighttime.
2266 $timeOutTime = $midnightTime;
2267 }
2268 }
2269 $this->setPageCacheContent($this->content, $this->config, $timeOutTime);
2270
2271 // Hook for cache post processing (eg. writing static files!)
2272 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['insertPageIncache'])) {
2273 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['insertPageIncache'] as $_classRef) {
2274 $_procObj = &t3lib_div::getUserObj($_classRef);
2275 $_procObj->insertPageIncache($this,$timeOutTime);
2276 }
2277 }
2278 }
2279
2280 /**
2281 * Sets cache content; Inserts the content string into the cache_pages table.
2282 *
2283 * @param string The content to store in the HTML field of the cache table
2284 * @param mixed The additional cache_data array, fx. $this->config
2285 * @param integer Timestamp
2286 * @return void
2287 * @see realPageCacheContent(), tempPageCacheContent()
2288 */
2289 function setPageCacheContent($content,$data,$tstamp) {
2290 $this->clearPageCacheContent();
2291 $insertFields = array(
2292 'hash' => $this->newHash,
2293 'page_id' => $this->id,
2294 'HTML' => $content,
2295 'cache_data' => serialize($data),
2296 'expires' => $tstamp,
2297 'tstamp' => $GLOBALS['EXEC_TIME']
2298 );
2299
2300 $this->cacheExpires = $tstamp;
2301
2302 if ($this->page_cache_reg1) {
2303 $insertFields['reg1'] = intval($this->page_cache_reg1);
2304 }
2305 $GLOBALS['TYPO3_DB']->exec_INSERTquery('cache_pages', $insertFields);
2306 }
2307
2308 /**
2309 * Clears cache content (for $this->newHash)
2310 *
2311 * @return void
2312 */
2313 function clearPageCacheContent() {
2314 $GLOBALS['TYPO3_DB']->exec_DELETEquery('cache_pages', 'hash='.$GLOBALS['TYPO3_DB']->fullQuoteStr($this->newHash, 'cache_pages'));
2315 }
2316
2317 /**
2318 * Clears cache content for a list of page ids
2319 *
2320 * @param string A list of INTEGER numbers which points to page uids for which to clear entries in the cache_pages table (page content cache)
2321 * @return void
2322 */
2323 function clearPageCacheContent_pidList($pidList) {
2324 $GLOBALS['TYPO3_DB']->exec_DELETEquery('cache_pages', 'page_id IN ('.$GLOBALS['TYPO3_DB']->cleanIntList($pidList).')');
2325 }
2326
2327 /**
2328 * Sets sys last changed
2329 * Setting the SYS_LASTCHANGED value in the pagerecord: This value will thus be set to the highest tstamp of records rendered on the page. This includes all records with no regard to hidden records, userprotection and so on.
2330 *
2331 * @return void
2332 * @see tslib_cObj::lastChanged()
2333 */
2334 function setSysLastChanged() {
2335 if ($this->page['SYS_LASTCHANGED'] < intval($this->register['SYS_LASTCHANGED'])) {
2336 $GLOBALS['TYPO3_DB']->exec_UPDATEquery('pages', 'uid='.intval($this->id), array('SYS_LASTCHANGED' => intval($this->register['SYS_LASTCHANGED'])));
2337 }
2338 }
2339
2340
2341
2342
2343
2344
2345
2346
2347
2348
2349
2350
2351
2352
2353
2354
2355
2356
2357
2358
2359 /********************************************
2360 *
2361 * Page generation; rendering and inclusion
2362 *
2363 *******************************************/
2364
2365 /**
2366 * Does some processing BEFORE the pagegen script is included.
2367 *
2368 * @return void
2369 */
2370 function generatePage_preProcessing() {
2371 ksort($this->all);
2372 // Same codeline as in getFromCache(). BUT $this->all has been set in the meantime, so we can't just skip this line and let it be set above! Keep this line!
2373 $this->newHash = $this->getHash();
2374 $this->config['hash_base'] = $this->hash_base; // For cache management informational purposes.
2375
2376 // Here we put some temporary stuff in the cache in order to let the first hit generate the page. The temporary cache will expire after a few seconds (typ. 30) or will be cleared by the rendered page, which will also clear and rewrite the cache.
2377 $this->tempPageCacheContent();
2378
2379 // Setting cache_timeout_default. May be overridden by PHP include scritps.
2380 $this->cacheTimeOutDefault = intval($this->config['config']['cache_period']);
2381
2382 // page is generated
2383 $this->no_cacheBeforePageGen = $this->no_cache;
2384 }
2385
2386 /**
2387 * Determines to include custom or pagegen.php script
2388 * returns script-filename if a TypoScript (config) script is defined and should be include instead of pagegen.php
2389 *
2390 * @return string The relative filepath of "config.pageGenScript" if found and allowed
2391 */
2392 function generatePage_whichScript() {
2393 if (!$this->TYPO3_CONF_VARS['FE']['noPHPscriptInclude'] && $this->config['config']['pageGenScript']) {
2394 return $this->tmpl->getFileName($this->config['config']['pageGenScript']);
2395 }
2396 }
2397
2398 /**
2399 * Does some processing AFTER the pagegen script is included.
2400 * This includes calling tidy (if configured), XHTML cleaning (if configured), caching the page, indexing the page (if configured) and setting sysLastChanged
2401 *
2402 * @return void
2403 */
2404 function generatePage_postProcessing() {
2405 // This is to ensure, that the page is NOT cached if the no_cache parameter was set before the page was generated. This is a safety precaution, as it could have been unset by some script.
2406 if ($this->no_cacheBeforePageGen) $this->set_no_cache();
2407
2408 // Tidy up the code, if flag...
2409 if ($this->TYPO3_CONF_VARS['FE']['tidy_option'] == 'all') {
2410 $GLOBALS['TT']->push('Tidy, all','');
2411 $this->content = $this->tidyHTML($this->content);
2412 $GLOBALS['TT']->pull();
2413 }
2414
2415 // XHTML-clean the code, if flag set
2416 if ($this->doXHTML_cleaning() == 'all') {
2417 $GLOBALS['TT']->push('XHTML clean, all','');
2418 $XHTML_clean = t3lib_div::makeInstance('t3lib_parsehtml');
2419 $this->content = $XHTML_clean->XHTML_clean($this->content);
2420 $GLOBALS['TT']->pull();
2421 }
2422
2423 // Fix local anchors in links, if flag set
2424 if ($this->doLocalAnchorFix() == 'all') {
2425 $GLOBALS['TT']->push('Local anchor fix, all','');
2426 $this->prefixLocalAnchorsWithScript();
2427 $GLOBALS['TT']->pull();
2428 }
2429
2430 // Hook for post-processing of page content cached/non-cached:
2431 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['contentPostProc-all'])) {
2432 $_params = array('pObj' => &$this);
2433 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['contentPostProc-all'] as $_funcRef) {
2434 t3lib_div::callUserFunction($_funcRef,$_params,$this);
2435 }
2436 }
2437
2438 // Processing if caching is enabled:
2439 if (!$this->no_cache) {
2440 // Tidy up the code, if flag...
2441 if ($this->TYPO3_CONF_VARS['FE']['tidy_option'] == 'cached') {
2442 $GLOBALS['TT']->push('Tidy, cached','');
2443 $this->content = $this->tidyHTML($this->content);
2444 $GLOBALS['TT']->pull();
2445 }
2446 // XHTML-clean the code, if flag set
2447 if ($this->doXHTML_cleaning() == 'cached') {
2448 $GLOBALS['TT']->push('XHTML clean, cached','');
2449 $XHTML_clean = t3lib_div::makeInstance('t3lib_parsehtml');
2450 $this->content = $XHTML_clean->XHTML_clean($this->content);
2451 $GLOBALS['TT']->pull();
2452 }
2453 // Fix local anchors in links, if flag set
2454 if ($this->doLocalAnchorFix() == 'cached') {
2455 $GLOBALS['TT']->push('Local anchor fix, cached','');
2456 $this->prefixLocalAnchorsWithScript();
2457 $GLOBALS['TT']->pull();
2458 }
2459
2460 // Hook for post-processing of page content before being cached:
2461 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['contentPostProc-cached'])) {
2462 $_params = array('pObj' => &$this);
2463 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['contentPostProc-cached'] as $_funcRef) {
2464 t3lib_div::callUserFunction($_funcRef,$_params,$this);
2465 }
2466 }
2467 }
2468
2469 // Convert char-set for output: (should be BEFORE indexing of the content (changed 22/4 2005)), because otherwise indexed search might convert from the wrong charset! One thing is that the charset mentioned in the HTML header would be wrong since the output charset (metaCharset) has not been converted to from renderCharset. And indexed search will internally convert from metaCharset to renderCharset so the content MUST be in metaCharset already!
2470 $this->content = $this->convOutputCharset($this->content,'mainpage');
2471
2472 // Hook for indexing pages
2473 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['pageIndexing'])) {
2474 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['pageIndexing'] as $_classRef) {
2475 $_procObj = &t3lib_div::getUserObj($_classRef);
2476 $_procObj->hook_indexContent($this);
2477 }
2478 }
2479
2480 // Storing for cache:
2481 if (!$this->no_cache) {
2482 $this->realPageCacheContent();
2483 } elseif ($this->tempContent) { // If there happens to be temporary content in the cache and the cache was not cleared due to new content put in it... ($this->no_cache=0)
2484 $this->clearPageCacheContent();
2485 }
2486
2487 // Sets sys-last-change:
2488 $this->setSysLastChanged();
2489 }
2490
2491 /**
2492 * Processes the INTinclude-scripts
2493 *
2494 * @return void
2495 */
2496 function INTincScript() {
2497 $GLOBALS['TT']->push('Split content');
2498 $INTiS_splitC = explode('<!--INT_SCRIPT.',$this->content); // Splits content with the key.
2499 $this->content='';
2500 $GLOBALS['TT']->setTSlogMessage('Parts: '.count($INTiS_splitC));
2501 $GLOBALS['TT']->pull();
2502
2503 // Depreciated stuff:
2504 $this->additionalHeaderData = is_array($this->config['INTincScript_ext']['additionalHeaderData']) ? $this->config['INTincScript_ext']['additionalHeaderData'] : array();
2505 $this->additionalJavaScript = $this->config['INTincScript_ext']['additionalJavaScript'];
2506 $this->additionalCSS = $this->config['INTincScript_ext']['additionalCSS'];
2507 $this->JSCode = $this->additionalHeaderData['JSCode'];
2508 $this->JSImgCode = $this->additionalHeaderData['JSImgCode'];
2509 $this->divSection='';
2510
2511 $INTiS_config = $GLOBALS['TSFE']->config['INTincScript'];
2512 foreach($INTiS_splitC as $INTiS_c => $INTiS_cPart) {
2513 if (substr($INTiS_cPart,32,3)=='-->') { // If the split had a comment-end after 32 characters it's probably a split-string
2514 $GLOBALS['TT']->push('Include '.$INTiS_config[$INTiS_key]['file'],'');
2515 $INTiS_key = 'INT_SCRIPT.'.substr($INTiS_cPart,0,32);
2516 $incContent='';
2517 if (is_array($INTiS_config[$INTiS_key])) {
2518 $INTiS_cObj = unserialize($INTiS_config[$INTiS_key]['cObj']);
2519 $INTiS_cObj->INT_include=1;
2520 switch($INTiS_config[$INTiS_key]['type']) {
2521 case 'SCRIPT':
2522 $incContent = $INTiS_cObj->PHP_SCRIPT($INTiS_config[$INTiS_key]['conf']);
2523 break;
2524 case 'COA':
2525 $incContent = $INTiS_cObj->COBJ_ARRAY($INTiS_config[$INTiS_key]['conf']);
2526 break;
2527 case 'FUNC':
2528 $incContent = $INTiS_cObj->USER($INTiS_config[$INTiS_key]['conf']);
2529 break;
2530 case 'POSTUSERFUNC':
2531 $incContent = $INTiS_cObj->callUserFunction($INTiS_config[$INTiS_key]['postUserFunc'], $INTiS_config[$INTiS_key]['conf'], $INTiS_config[$INTiS_key]['content']);
2532 break;
2533 }
2534 }
2535 $this->content.= $this->convOutputCharset($incContent,'INC-'.$INTiS_c);
2536 $this->content.= substr($INTiS_cPart,35);
2537 $GLOBALS['TT']->pull($incContent);
2538 } else {
2539 $this->content.= ($INTiS_c?'<!--INT_SCRIPT.':'').$INTiS_cPart;
2540 }
2541 }
2542 $GLOBALS['TT']->push('Substitute header section');
2543 $this->INTincScript_loadJSCode();
2544 $this->content = str_replace('<!--HD_'.$this->config['INTincScript_ext']['divKey'].'-->', $this->convOutputCharset(implode(chr(10),$this->additionalHeaderData),'HD'), $this->content);
2545 $this->content = str_replace('<!--TDS_'.$this->config['INTincScript_ext']['divKey'].'-->', $this->convOutputCharset($this->divSection,'TDS'), $this->content);
2546 $this->setAbsRefPrefix();
2547 $GLOBALS['TT']->pull();
2548 }
2549
2550 /**
2551 * Loads the JavaScript code for INTincScript
2552 *
2553 * @return void
2554 * @access private
2555 */
2556 function INTincScript_loadJSCode() {
2557 if ($this->JSImgCode) { // If any images added, then add them to the javascript section
2558 $this->additionalHeaderData['JSImgCode']='
2559 <script type="text/javascript">
2560 /*<![CDATA[*/
2561 <!--
2562 if (version == "n3") {
2563 '.trim($this->JSImgCode).'
2564 }
2565 // -->
2566 /*]]>*/
2567 </script>';
2568 }
2569 if ($this->JSCode || count($this->additionalJavaScript)) { // Add javascript
2570 $this->additionalHeaderData['JSCode']='
2571 <script type="text/javascript">
2572 /*<![CDATA[*/
2573 <!--
2574 '.implode(chr(10),$this->additionalJavaScript).'
2575 '.trim($this->JSCode).'
2576 // -->
2577 /*]]>*/
2578 </script>';
2579 }
2580 if (count($this->additionalCSS)) { // Add javascript
2581 $this->additionalHeaderData['_CSS']='
2582 <style type="text/css">
2583 /*<![CDATA[*/
2584 <!--
2585 '.implode(chr(10),$this->additionalCSS).'
2586 // -->
2587 /*]]>*/
2588 </style>';
2589 }
2590 }
2591
2592 /**
2593 * Determines if there are any INTincScripts to include
2594 *
2595 * @return boolean Returns true if scripts are found (and not jumpurl)
2596 */
2597 function isINTincScript() {
2598 return (is_array($this->config['INTincScript']) && !$this->jumpurl);
2599 }
2600
2601 /**
2602 * Returns the mode of XHTML cleaning
2603 *
2604 * @return string Keyword: "all", "cached" or "output"
2605 */
2606 function doXHTML_cleaning() {
2607 return $this->config['config']['xhtml_cleaning'];
2608 }
2609
2610 /**
2611 * Returns the mode of Local Anchor prefixing
2612 *
2613 * @return string Keyword: "all", "cached" or "output"
2614 */
2615 function doLocalAnchorFix() {
2616 return $this->config['config']['prefixLocalAnchors'];
2617 }
2618
2619
2620
2621
2622
2623
2624
2625
2626
2627
2628
2629
2630
2631
2632
2633
2634 /********************************************
2635 *
2636 * Finished off; outputting, storing session data, statistics...
2637 *
2638 *******************************************/
2639
2640 /**
2641 * Determines if content should be outputted.
2642 * Outputting content is done only if jumpurl is NOT set.
2643 *
2644 * @return boolean Returns true if $this->jumpurl is not set.
2645 */
2646 function isOutputting() {
2647
2648 // Initialize by status of jumpUrl:
2649 $enableOutput = (!$this->jumpurl);
2650
2651 // Call hook for possible disabling of output:
2652 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['isOutputting'])) {
2653 $_params = array('pObj' => &$this, 'enableOutput' => &$enableOutput);
2654 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['isOutputting'] as $_funcRef) {
2655 t3lib_div::callUserFunction($_funcRef,$_params,$this);
2656 }
2657 }
2658
2659 return $enableOutput;
2660 }
2661
2662 /**
2663 * Processes the output before it's actually outputted. Sends headers also.
2664 * This includes substituting the USERNAME comment, getMethodUrlIdToken, sending additional headers (as defined in the TypoScript "config.additionalheaders" object), tidy'ing content, XHTML cleaning content (if configured)
2665 * Works on $this->content
2666 *
2667 * @return void
2668 */
2669 function processOutput() {
2670
2671 // Set header for charset-encoding unless disabled
2672 if (!$this->config['config']['disableCharsetHeader']) {
2673 $headLine = 'Content-Type:text/html;charset='.trim($this->metaCharset);
2674 header($headLine);
2675 }
2676
2677 // Set cache related headers to client (used to enable proxy / client caching!)
2678 if ($this->config['config']['sendCacheHeaders']) {
2679 $this->sendCacheHeaders();
2680 }
2681
2682 // Set headers, if any
2683 if ($this->config['config']['additionalHeaders']) {
2684 $headerArray = explode('|', $this->config['config']['additionalHeaders']);
2685 while(list(,$headLine)=each($headerArray)) {
2686 $headLine = trim($headLine);
2687 header($headLine);
2688 }
2689 }
2690
2691 // Make substitution of eg. username/uid in content only if cache-headers for client/proxy caching is NOT sent!
2692 if (!$this->isClientCachable) {
2693 $this->contentStrReplace();
2694 }
2695
2696 // Tidy up the code, if flag...
2697 if ($this->TYPO3_CONF_VARS['FE']['tidy_option'] == 'output') {
2698 $GLOBALS['TT']->push('Tidy, output','');
2699 $this->content = $this->tidyHTML($this->content);
2700 $GLOBALS['TT']->pull();
2701 }
2702 // XHTML-clean the code, if flag set
2703 if ($this->doXHTML_cleaning() == 'output') {
2704 $GLOBALS['TT']->push('XHTML clean, output','');
2705 $XHTML_clean = t3lib_div::makeInstance('t3lib_parsehtml');
2706 $this->content = $XHTML_clean->XHTML_clean($this->content);
2707 $GLOBALS['TT']->pull();
2708 }
2709 // Fix local anchors in links, if flag set
2710 if ($this->doLocalAnchorFix() == 'output') {
2711 $GLOBALS['TT']->push('Local anchor fix, output','');
2712 $this->prefixLocalAnchorsWithScript();
2713 $GLOBALS['TT']->pull();
2714 }
2715
2716 // Hook for post-processing of page content before output:
2717 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['contentPostProc-output'])) {
2718 $_params = array('pObj' => &$this);
2719 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['contentPostProc-output'] as $_funcRef) {
2720 t3lib_div::callUserFunction($_funcRef,$_params,$this);
2721 }
2722 }
2723
2724 // Send content-lenght header. Notice that all HTML content outside the length of the content-length header will be cut off! Therefore content of unknown length from included PHP-scripts and if admin users are logged in (admin panel might show...) we disable it!
2725 if ($this->config['config']['enableContentLengthHeader'] && !$this->isEXTincScript() && !$this->beUserLogin && !$this->doWorkspacePreview()) {
2726 header('Content-Length: '.strlen($this->content));
2727 }
2728 }
2729
2730 /**
2731 * Send cache headers good for client/reverse proxy caching
2732 * This function should not be called if the page content is temporary (like for "Page is being generated..." message, but in that case it is ok because the config-variables are not yet available and so will not allow to send cache headers)
2733 *
2734 * @return void
2735 * @co-author Ole Tange, Forbrugernes Hus, Denmark
2736 */
2737 function sendCacheHeaders() {
2738
2739 // Getting status whether we can send cache control headers for proxy caching:
2740 $doCache = $this->isStaticCacheble();
2741
2742 // This variable will be TRUE unless cache headers are configured to be sent ONLY if a branch does not allow logins and logins turns out to be allowed anyway...
2743 $loginsDeniedCfg = !$this->config['config']['sendCacheHeaders_onlyWhenLoginDeniedInBranch'] || !$this->loginAllowedInBranch;
2744
2745 // Finally, when backend users are logged in, do not send cache headers at all (Admin Panel might be displayed for instance).
2746 if ($doCache
2747 && !$this->beUserLogin
2748 && !$this->doWorkspacePreview()
2749 && $loginsDeniedCfg) {
2750
2751 // Build headers:
2752 $headers = array(
2753 'Last-Modified: '.gmdate('D, d M Y H:i:s T', $this->register['SYS_LASTCHANGED']),
2754 'Expires: '.gmdate('D, d M Y H:i:s T', $this->cacheExpires),
2755 'ETag: '.md5($this->content),
2756 'Cache-Control: max-age='.($this->cacheExpires - $GLOBALS['EXEC_TIME']), // no-cache
2757 'Pragma: public',
2758 );
2759
2760 $this->isClientCachable = TRUE;
2761 } else {
2762 // Build headers:
2763 $headers = array(
2764 #'Last-Modified: '.gmdate('D, d M Y H:i:s T', $this->register['SYS_LASTCHANGED']),
2765 #'ETag: '.md5($this->content),
2766
2767 #'Cache-Control: no-cache',
2768 #'Pragma: no-cache',
2769 'Cache-Control: private', // Changed to this according to Ole Tange, FI.dk
2770 );
2771
2772 $this->isClientCachable = FALSE;
2773
2774 // Now, if a backend user is logged in, tell him in the Admin Panel log what the caching status would have been:
2775 if ($this->beUserLogin) {
2776 if ($doCache) {
2777 $GLOBALS['TT']->setTSlogMessage('Cache-headers with max-age "'.($this->cacheExpires - $GLOBALS['EXEC_TIME']).'" would have been sent');
2778 } else {
2779 $reasonMsg = '';
2780 $reasonMsg.= !$this->no_cache ? '' : 'Caching disabled (no_cache). ';
2781 $reasonMsg.= !$this->isINTincScript() ? '' : '*_INT object(s) on page. ';
2782 $reasonMsg.= !$this->isEXTincScript() ? '' : '*_EXT object(s) on page. ';
2783 $reasonMsg.= !is_array($this->fe_user->user) ? '' : 'Frontend user logged in. ';
2784 $GLOBALS['TT']->setTSlogMessage('Cache-headers would disable proxy caching! Reason(s): "'.$reasonMsg.'"',1);
2785 }
2786 }
2787 }
2788
2789 // Send headers:
2790 foreach($headers as $hL) {
2791 header($hL);
2792 }
2793 }
2794
2795 /**
2796 * Reporting status whether we can send cache control headers for proxy caching or publishing to static files
2797 *
2798 * Rules are:
2799 * no_cache cannot be set: If it is, the page might contain dynamic content and should never be cached.
2800 * There can be no USER_INT objects on the page ("isINTincScript()" / "isEXTincScript()") because they implicitly indicate dynamic content
2801 * There can be no logged in user because user sessions are based on a cookie and thereby does not offer client caching a chance to know if the user is logged in. Actually, there will be a reverse problem here; If a page will somehow change when a user is logged in he may not see it correctly if the non-login version sent a cache-header! So do NOT use cache headers in page sections where user logins change the page content. (unless using such as realurl to apply a prefix in case of login sections)
2802 *
2803 * @return boolean
2804 */
2805 function isStaticCacheble() {
2806 $doCache = !$this->no_cache
2807 && !$this->isINTincScript()
2808 && !$this->isEXTincScript()
2809 && !$this->isUserOrGroupSet();
2810 return $doCache;
2811 }
2812
2813 /**
2814 * Substitute various tokens in content. This should happen only if the content is not cached by proxies or client browsers.
2815 *
2816 * @return void
2817 */
2818 function contentStrReplace() {
2819 // Substitutes username mark with the username
2820 if ($this->fe_user->user['uid']) {
2821
2822 // User name:
2823 $token = trim($this->config['config']['USERNAME_substToken']);
2824 $this->content = str_replace($token ? $token : '<!--###USERNAME###-->',$this->fe_user->user['username'],$this->content);
2825
2826 // User uid (if configured):
2827 $token = trim($this->config['config']['USERUID_substToken']);
2828 if ($token) {
2829 $this->content = str_replace($token, $this->fe_user->user['uid'], $this->content);
2830 }
2831 }
2832 // Substitutes get_URL_ID in case of GET-fallback
2833 if ($this->getMethodUrlIdToken) {
2834 $this->content = str_replace($this->getMethodUrlIdToken, $this->fe_user->get_URL_ID, $this->content);
2835 }
2836 }
2837
2838 /**
2839 * Determines if any EXTincScripts should be included
2840 *
2841 * @return boolean True, if external php scripts should be included (set by PHP_SCRIPT_EXT cObjects)
2842 * @see tslib_cObj::PHP_SCRIPT
2843 */
2844 function isEXTincScript() {
2845 return is_array($this->config['EXTincScript']);
2846 }
2847
2848 /**
2849 * Stores session data for the front end user
2850 *
2851 * @return void
2852 */
2853 function storeSessionData() {
2854 $this->fe_user->storeSessionData();
2855 }
2856
2857 /**
2858 * Sets the parsetime of the page.
2859 *
2860 * @return void
2861 * @access private
2862 */
2863 function setParseTime() {
2864 // Compensates for the time consumed with Back end user initialization.
2865 $this->scriptParseTime = $GLOBALS['TT']->convertMicrotime($GLOBALS['TYPO3_MISC']['microtime_end'])
2866 - $GLOBALS['TT']->convertMicrotime($GLOBALS['TYPO3_MISC']['microtime_start'])
2867 - ($GLOBALS['TT']->convertMicrotime($GLOBALS['TYPO3_MISC']['microtime_BE_USER_end'])-$GLOBALS['TT']->convertMicrotime($GLOBALS['TYPO3_MISC']['microtime_BE_USER_start']));
2868 }
2869
2870 /**
2871 * Saves hit statistics
2872 *
2873 * @return void
2874 */
2875 function statistics() {
2876 if ($this->config['config']['stat'] &&
2877 (!strcmp('',$this->config['config']['stat_typeNumList']) || t3lib_div::inList(str_replace(' ','',$this->config['config']['stat_typeNumList']), $this->type)) &&
2878 (!$this->config['config']['stat_excludeBEuserHits'] || !$this->beUserLogin) &&
2879 (!$this->config['config']['stat_excludeIPList'] || !t3lib_div::cmpIP(t3lib_div::getIndpEnv('REMOTE_ADDR'),str_replace(' ','',$this->config['config']['stat_excludeIPList'])))) {
2880
2881 $GLOBALS['TT']->push('Stat');
2882 if (t3lib_extMgm::isLoaded('sys_stat') && $this->config['config']['stat_mysql']) {
2883
2884 // Jumpurl:
2885 $sword = t3lib_div::_GP('sword');
2886 if ($sword) {
2887 $jumpurl_msg = 'sword:'.$sword;
2888 } elseif ($this->jumpurl) {
2889 $jumpurl_msg = 'jumpurl:'.$this->jumpurl;
2890 } else {
2891 $jumpurl_msg = '';
2892 }
2893
2894 // Flags: bits: 0 = BE_user, 1=Cached page?
2895 $flags=0;
2896 if ($this->beUserLogin) {$flags|=1;}
2897 if ($this->cacheContentFlag) {$flags|=2;}
2898
2899 // Ref url:
2900 $refUrl = t3lib_div::getIndpEnv('HTTP_REFERER');
2901 $thisUrl = t3lib_div::getIndpEnv('TYPO3_REQUEST_DIR');
2902 if (t3lib_div::isFirstPartOfStr($refUrl,$thisUrl)) {
2903 $refUrl='[LOCAL]';
2904 }
2905
2906 $insertFields = array(
2907 'page_id' => intval($this->id), // id
2908 'page_type' => intval($this->type), // type
2909 'jumpurl' => $jumpurl_msg, // jumpurl message
2910 'feuser_id' => $this->fe_user->user['uid'], // fe_user id, integer
2911 'cookie' => $this->fe_user->id, // cookie as set or retrieve. If people has cookies disabled this will vary all the time...
2912 'sureCookie' => hexdec(substr($this->fe_user->cookieId,0,8)), // This is the cookie value IF the cookie WAS actually set. However the first hit where the cookie is set will thus NOT be logged here. So this lets you select for a session of at least two clicks...
2913 'rl0' => $this->config['rootLine'][0]['uid'], // RootLevel 0 uid
2914 'rl1' => $this->config['rootLine'][1]['uid'], // RootLevel 1 uid
2915 'client_browser' => $GLOBALS['CLIENT']['BROWSER'], // Client browser (net, msie, opera)
2916 'client_version' => $GLOBALS['CLIENT']['VERSION'], // Client version (double value)
2917 'client_os' => $GLOBALS['CLIENT']['SYSTEM'], // Client Operating system (win, mac, unix)
2918 'parsetime' => intval($this->scriptParseTime), // Parsetime for the page.
2919 'flags' => $flags, // Flags: Is be user logged in? Is page cached?
2920 'IP' => t3lib_div::getIndpEnv('REMOTE_ADDR'), // Remote IP address
2921 'host' => t3lib_div::getIndpEnv('REMOTE_HOST'), // Remote Host Address
2922 'referer' => $refUrl, // Referer URL
2923 'browser' => t3lib_div::getIndpEnv('HTTP_USER_AGENT'), // User Agent Info.
2924 'tstamp' => $GLOBALS['EXEC_TIME'] // Time stamp
2925 );
2926
2927 // Hook for preprocessing the list of fields to insert into sys_stat:
2928 if (is_array($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['sys_stat-PreProcClass'])) {
2929 foreach($this->TYPO3_CONF_VARS['SC_OPTIONS']['tslib/class.tslib_fe.php']['sys_stat-PreProcClass'] as $_classRef) {
2930 $_procObj = &t3lib_div::getUserObj($_classRef);
2931 $insertFields = $_procObj->sysstat_preProcessFields($insertFields,$this);
2932 }
2933 }
2934