mirror of https://github.com/avecms/AVE.cms.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
627 lines
16 KiB
627 lines
16 KiB
<?php |
|
|
|
/** |
|
* AVE.cms |
|
* |
|
* @package AVE.cms |
|
* @subpackage admin |
|
* @filesource |
|
*/ |
|
|
|
|
|
/** |
|
* Если был referer, то перенапрявляем на него |
|
* |
|
* @param |
|
* @return $link |
|
*/ |
|
function get_referer_admin_link() |
|
{ |
|
static $link = null; |
|
|
|
if ($link === null) |
|
{ |
|
if (isset($_SERVER['HTTP_REFERER'])) |
|
{ |
|
$link = parse_url($_SERVER['HTTP_REFERER']); |
|
$ok = (trim($link['host']) == $_SERVER['HTTP_HOST']) ? true : false; |
|
$ok = (trim($link['path']) != '/admin/admin.php') ? true : false; |
|
|
|
} |
|
$link = ($ok === true ? $_SERVER['HTTP_REFERER'] : '/admin/index.php'); |
|
} |
|
|
|
return $link; |
|
} |
|
|
|
|
|
/** |
|
* Получаем кол-во записей в журналах событий |
|
* |
|
* @return Array массив из кол-ва записей |
|
*/ |
|
function getLogRecords() |
|
{ |
|
global $AVE_DB, $AVE_Template; |
|
|
|
$logs = array(); |
|
$logdata = array(); |
|
$log404 = array(); |
|
$logsql = array(); |
|
|
|
$_404dir = BASE_DIR . '/tmp/logs/404.php'; |
|
$_logdir = BASE_DIR . '/tmp/logs/log.php'; |
|
$_sqldir = BASE_DIR . '/tmp/logs/sql.php'; |
|
|
|
if (file_exists($_logdir)) |
|
@eval(' ?>' . file_get_contents($_logdir) . '<?php '); |
|
|
|
$logs['logs'] = count($logdata); |
|
|
|
if (file_exists($_404dir)) |
|
@eval(' ?>' . file_get_contents($_404dir) . '<?php '); |
|
|
|
$logs['404'] = count($log404); |
|
|
|
if (file_exists($_sqldir)) |
|
@eval(' ?>' . file_get_contents($_sqldir) . '<?php '); |
|
|
|
$logs['sql'] = count($logsql); |
|
|
|
unset($logdata); |
|
unset($log404); |
|
unset($logsql); |
|
|
|
// Передаем данные в шаблон для вывода |
|
$AVE_Template->assign('logs', $logs); |
|
} |
|
|
|
|
|
/** |
|
* Список пользователей за последние $onlinetime секунд |
|
* |
|
* @param int $onlinetime количество секунд |
|
* @return Array массив из пользователей отсортированный по последней активности |
|
*/ |
|
function get_online_users($onlinetime = USERS_TIME_SHOW) |
|
{ |
|
global $AVE_DB, $AVE_Template; |
|
|
|
$time=(time()-intval($onlinetime)); |
|
|
|
$sql=@$AVE_DB->Query("SELECT * FROM ".PREFIX."_users WHERE last_visit>".$time." ORDER BY last_visit DESC"); |
|
|
|
$online_users=Array(); |
|
|
|
while ($row = $sql->FetchRow()) |
|
{ |
|
$row->user_name = get_username_by_id($row->Id); |
|
$row->user_group_name = get_usergroup_by_id($row->user_group); |
|
array_push($online_users,$row); |
|
} |
|
|
|
$AVE_Template->assign('online_users', $online_users); |
|
} |
|
|
|
|
|
/** |
|
* Форматированный вывод размера |
|
* |
|
* @param int $file_size размер |
|
* @return string нормированный размер с единицой измерения |
|
*/ |
|
function format_size($file_size) |
|
{ |
|
if ($file_size >= 1073741824) |
|
$file_size = round($file_size / 1073741824 * 100) / 100 . ' Gb'; |
|
elseif ($file_size >= 1048576) |
|
$file_size = round($file_size / 1048576 * 100) / 100 . ' Mb'; |
|
elseif ($file_size >= 1024) |
|
$file_size = round($file_size / 1024 * 100) / 100 . ' Kb'; |
|
else |
|
$file_size = $file_size . ' b'; |
|
|
|
return $file_size; |
|
} |
|
|
|
/** |
|
* Извлечение из БД статистики по основным компонентам системы |
|
* |
|
*/ |
|
function get_ave_info() |
|
{ |
|
global $AVE_DB, $AVE_Template; |
|
|
|
$cnts = array(); |
|
|
|
$cnts['templates'] = $AVE_DB->Query("SELECT COUNT(*) FROM " . PREFIX . "_templates")->GetCell(); |
|
$cnts['request'] = $AVE_DB->Query("SELECT COUNT(*) FROM " . PREFIX . "_request")->GetCell(); |
|
$cnts['rubrics'] = $AVE_DB->Query("SELECT COUNT(*) FROM " . PREFIX . "_rubrics")->GetCell(); |
|
|
|
$sql = $AVE_DB->Query(" |
|
SELECT |
|
`ModuleStatus`, |
|
COUNT(`ModuleStatus`) AS cntStatus |
|
FROM |
|
" . PREFIX . "_module |
|
GROUP BY `ModuleStatus` |
|
"); |
|
|
|
while ($row = $sql->FetchRow()) |
|
$cnts['modules_' . $row->ModuleStatus] = $row->cntStatus; |
|
|
|
$sql = $AVE_DB->Query(" |
|
SELECT |
|
status, |
|
COUNT(status) AS cntStatus |
|
FROM |
|
" . PREFIX . "_users |
|
GROUP BY status |
|
"); |
|
|
|
while ($row = $sql->FetchRow()) |
|
$cnts['users_' . $row->status] = $row->cntStatus; |
|
|
|
$AVE_Template->assign('cnts', $cnts); |
|
} |
|
|
|
|
|
function countDocuments($rubric_id = null) |
|
{ |
|
global $AVE_DB; |
|
|
|
if (is_numeric($rubric_id) && $rubric_id > 0) |
|
$count = $AVE_DB->Query("SELECT COUNT(*) FROM " . PREFIX . "_documents WHERE rubric_id = '".$rubric_id."'")->GetCell(); |
|
else |
|
$count = $AVE_DB->Query("SELECT COUNT(*) FROM " . PREFIX . "_documents")->GetCell(); |
|
|
|
echo $count; |
|
} |
|
|
|
|
|
/** |
|
* Размер дириктории |
|
* |
|
* @param string $directory наименование директории |
|
* @return int |
|
*/ |
|
function get_dir_size($directory) |
|
{ |
|
if (!is_dir($directory)) return -1; |
|
|
|
$size = 0; |
|
|
|
if ($DIR = opendir($directory)) |
|
{ |
|
while (($dirfile = readdir($DIR)) !== false) |
|
{ |
|
if (@is_link($directory . '/' . $dirfile) || $dirfile == '.' || $dirfile == '..') |
|
continue; |
|
|
|
if (@is_file($directory . '/' . $dirfile)) |
|
{ |
|
$size += filesize($directory . '/' . $dirfile); |
|
} |
|
elseif (@is_dir($directory . '/' . $dirfile)) |
|
{ |
|
$dirSize = get_dir_size($directory . '/' . $dirfile); |
|
|
|
if ($dirSize >= 0) |
|
$size += $dirSize; |
|
else |
|
return -1; |
|
} |
|
} |
|
|
|
closedir($DIR); |
|
} |
|
|
|
return $size; |
|
} |
|
|
|
|
|
/** |
|
* Размер базы данных |
|
* |
|
* @return int |
|
*/ |
|
function get_mysql_size() |
|
{ |
|
global $AVE_DB; |
|
|
|
$mysql_size = 0; |
|
|
|
$sql = $AVE_DB->Query("SHOW TABLE STATUS LIKE '" . PREFIX . "_%'"); |
|
|
|
while ($row = $sql->FetchAssocArray()) |
|
$mysql_size += $row['Data_length'] + $row['Index_length']; |
|
|
|
return format_size($mysql_size); |
|
} |
|
|
|
|
|
function get_ave_tags($srcfile) |
|
{ |
|
if (@include_once($srcfile)) |
|
{ |
|
reset ($vorlage); |
|
$vl = array(); |
|
|
|
while (list($key, $value) = each($vorlage)) |
|
{ |
|
$tag = new stdClass; |
|
$tag->cp_tag = $key; |
|
$tag->cp_desc = $value; |
|
array_push($vl, $tag); |
|
unset($tag); |
|
} |
|
|
|
return $vl; |
|
} |
|
|
|
return null; |
|
} |
|
|
|
|
|
function get_all_templates() |
|
{ |
|
global $AVE_DB; |
|
|
|
static $templates = null; |
|
|
|
if ($templates == null) |
|
{ |
|
$templates = array(); |
|
|
|
$sql = $AVE_DB->Query(" |
|
SELECT |
|
Id, |
|
template_title |
|
FROM " . PREFIX . "_templates |
|
"); |
|
|
|
while ($row = $sql->FetchRow()) |
|
{ |
|
array_push($templates, $row); |
|
} |
|
} |
|
|
|
return $templates; |
|
} |
|
|
|
|
|
function getInstaledModules() |
|
{ |
|
global $AVE_DB, $AVE_Template, $AVE_Module; |
|
|
|
$modules = $AVE_Module->_modules; |
|
|
|
$modules_instaled = array(); |
|
|
|
foreach ($modules AS $module) |
|
{ |
|
if ($module['ModuleAdminEdit'] == 1 && $module['ModuleStatus']) |
|
$modules_instaled[] = array( |
|
'ModuleName' => $module['ModuleName'], |
|
'ModuleSysName' => $module['ModuleSysName'] |
|
); |
|
} |
|
|
|
unset ($modules); |
|
|
|
$AVE_Template->assign('modules', $modules_instaled); |
|
} |
|
|
|
|
|
function get_mime_type($file) |
|
{ |
|
$file_extension = strtolower(mb_substr(strrchr($file, '.'), 1)); |
|
|
|
switch ($file_extension) |
|
{ |
|
case 'psd': $ctype = 'image/x-photoshop'; break; |
|
case 'rar': $ctype = 'application/x-rar-compressed'; break; |
|
case 'zip': $ctype = 'application/x-zip-compressed'; break; |
|
case 'pdf': $ctype = 'application/pdf'; break; |
|
case 'bz2': $ctype = 'application/bzip2'; break; |
|
case 'doc': |
|
case 'dot': |
|
case 'wiz': |
|
case 'wzs': $ctype = 'application/msword'; break; |
|
case 'eps': $ctype = 'application/postscript'; break; |
|
case 'pot': |
|
case 'ppa': |
|
case 'pps': |
|
case 'ppt': |
|
case 'pwz': $ctype = 'application/vnd.ms-powerpoint'; break; |
|
case 'rtf': $ctype = 'application/rtf'; break; |
|
case 'rnx': $ctype = 'application/vnd.rn-realmedia'; break; |
|
case 'hlp': $ctype = 'hlp'; break; |
|
case 'gtar': $ctype = 'application/x-gtar'; break; |
|
case 'gzip': |
|
case 'tgz': $ctype = 'application/x-gzip'; break; |
|
case 'lnx': $ctype = 'application/x-latex'; break; |
|
case 'exe': $ctype = 'application/x-msdownload'; break; |
|
case 'swf': $ctype = 'application/x-shockwafe-flash'; break; |
|
case 'xml': $ctype = 'application/xml'; break; |
|
case 'midi': $ctype = 'audio/midi'; break; |
|
case 'mp3': |
|
case 'mp2': |
|
case 'mpga': $ctype = 'audio/mpeg'; break; |
|
case 'wav': $ctype = 'audio/wav'; break; |
|
case 'bmp': $ctype = 'audio/wav'; break; |
|
case 'gif': $ctype = 'image/gif'; break; |
|
case 'jpeg': |
|
case 'jpg': |
|
case 'jpe': $ctype = 'image/jpeg'; break; |
|
case 'png': $ctype = 'image/png'; break; |
|
case 'tif': |
|
case 'tiff': $ctype = 'image/tiff'; break; |
|
case 'ico': $ctype = 'image/x-icon'; break; |
|
case 'csv': $ctype = 'text/comma-separated-values'; break; |
|
case 'css': $ctype = 'text/css'; break; |
|
case 'htm': |
|
case 'html': |
|
case 'shtml': $ctype = 'text/html'; break; |
|
case 'txt': |
|
case 'klp': |
|
case 'tex': |
|
case 'php': |
|
case 'asp': |
|
case 'aspx': |
|
case 'php3': |
|
case 'php4': |
|
case 'php5': |
|
case 'sql': $ctype = 'text/plain'; break; |
|
case 'xml': $ctype = 'text/xml'; break; |
|
case 'xhtm': $ctype = 'text/xhtml'; break; |
|
case 'wml': $ctype = 'text/wml'; break; |
|
case 'mpeg': |
|
case 'mpg': |
|
case 'mpe': |
|
case 'mlv': |
|
case 'mpa': |
|
case 'wma': |
|
case 'wmv': $ctype = 'video/mpeg'; break; |
|
case 'avi': $ctype = 'video/x-msvideo'; break; |
|
case 'mov': $ctype = 'video/quicktime'; break; |
|
case 'xls': $ctype = 'application/vnd.ms-excel'; break; |
|
case 'ai': $ctype = 'application/postscript'; break; |
|
case 'rm': $ctype = 'application/vnd.rn-realmedia'; break; |
|
case 'gz': $ctype = 'application/x-gzip'; break; |
|
case 'js': $ctype = 'application/x-javascript'; break; |
|
case 'pl': |
|
case 'cc': $ctype = 'text/plain'; break; |
|
case 'qt': $ctype = 'video/quicktime'; break; |
|
default : $ctype='application/force-download'; |
|
} |
|
|
|
return $ctype; |
|
} |
|
|
|
|
|
function file_download($filename, $retbytes = true) |
|
{ |
|
$chunksize = 1*(1024*1024); |
|
$buffer = ''; |
|
$cnt = 0; |
|
|
|
$handle = fopen($filename, 'rb'); |
|
|
|
if ($handle === false) |
|
return false; |
|
|
|
while (!feof($handle)) |
|
{ |
|
$buffer = fread($handle, $chunksize); |
|
|
|
echo $buffer; |
|
|
|
flush(); |
|
|
|
if ($retbytes) |
|
$cnt += strlen($buffer); |
|
} |
|
|
|
$status = fclose($handle); |
|
|
|
if ($retbytes && $status) return $cnt; |
|
|
|
return $status; |
|
} |
|
|
|
|
|
function is_php_code($check_code) |
|
{ |
|
$check_code = stripslashes($check_code); |
|
$check_code = str_replace(' ', '', $check_code); |
|
$check_code = strtolower($check_code); |
|
|
|
if (strpos($check_code, '<?php') !== false || |
|
strpos($check_code, '<?') !== false || |
|
strpos($check_code, '<? ') !== false || |
|
strpos($check_code, '<?=') !== false || |
|
strpos($check_code, '<script language="php">') !== false || |
|
strpos($check_code, 'language="php"') !== false || |
|
strpos($check_code, "language='php'") !== false || |
|
strpos($check_code, 'language=php') !== false) |
|
{ |
|
return true; |
|
} |
|
|
|
return false; |
|
} |
|
|
|
|
|
function check_permission_acp($perm) |
|
{ |
|
if (! check_permission($perm)) |
|
{ |
|
if (! defined('NOPERM')) |
|
define('NOPERM', 1); |
|
|
|
return false; |
|
} |
|
|
|
return true; |
|
} |
|
|
|
|
|
//Проверка на наличие модуля Контакты и новых писем |
|
function ContactsModuleCheck() { |
|
global $AVE_DB, $AVE_Template; |
|
|
|
$sql = $AVE_DB->Query("SELECT * FROM " . PREFIX . "_module WHERE ModuleFunction = 'contact' and ModuleStatus = '1'"); |
|
$enable = $sql->numrows(); |
|
if ($enable != "0" || $enable != ""){ |
|
$contacts = "1"; |
|
$sql_num = $AVE_DB->Query("SELECT * FROM " . PREFIX . "_modul_contact_info WHERE Aw_Zeit = '0'"); |
|
$num_posts = $sql_num->numrows(); |
|
} else { |
|
$contacts = "0"; |
|
} |
|
$AVE_Template->assign('num_posts', $num_posts); |
|
$AVE_Template->assign('contacts', $contacts); |
|
} |
|
|
|
|
|
//Проверка на наличие модуля Логин |
|
function LoginModuleCheck() { |
|
global $AVE_DB, $AVE_Template; |
|
|
|
$sql = $AVE_DB->Query("SELECT * FROM " . PREFIX . "_module WHERE ModuleFunction = 'mod_login' and ModuleStatus = '1'"); |
|
$enable = $sql->numrows(); |
|
if ($enable != "0" || $enable != ""){ |
|
$login_menu = "1"; |
|
} else { |
|
$login_menu = "0"; |
|
} |
|
$AVE_Template->assign('login_menu', $login_menu); |
|
} |
|
|
|
|
|
//Выводим на главную список последних 15 документов |
|
function DisplayMainDocuments() |
|
{ |
|
global $AVE_DB, $AVE_Template; |
|
|
|
$doc_start = array(); |
|
|
|
$sql = $AVE_DB->Query(" |
|
SELECT |
|
doc.*, |
|
rub.rubric_admin_teaser_template |
|
FROM " . PREFIX . "_documents doc |
|
LEFT JOIN " . PREFIX . "_rubrics AS rub ON rub.Id = doc.rubric_id |
|
WHERE 1 = 1 |
|
AND rub.rubric_docs_active = '1' |
|
ORDER BY doc.document_published DESC LIMIT 0,10"); |
|
while($row = $sql->fetchrow()) { |
|
$row->rubric_title = showrubricName($row->rubric_id); |
|
$row->document_title = stripslashes(htmlspecialchars_decode(pretty_chars($row->document_title))); |
|
$row->document_breadcrum_title = stripslashes(htmlspecialchars_decode(pretty_chars($row->document_breadcrum_title))); |
|
$row->document_author = get_username_by_id($row->document_author_id); // Получаем имя пользователя (Автора) |
|
$row->cantEdit = 0; |
|
$row->canDelete = 0; |
|
$row->canEndDel = 0; |
|
$row->canOpenClose = 0; |
|
$row->rubric_admin_teaser_template = @eval2var(' ?>'.($row->rubric_admin_teaser_template > '' |
|
? @showrequestelement($row, $row->rubric_admin_teaser_template) |
|
: '').'<?php '); |
|
|
|
// разрешаем редактирование и удаление |
|
// если автор имеет право изменять свои документы в рубрике |
|
// или пользователю разрешено изменять все документы в рубрике |
|
if ( ($row->document_author_id == @$_SESSION['user_id'] |
|
&& isset($_SESSION[$row->rubric_id . '_editown']) && @$_SESSION[$row->rubric_id . '_editown'] == 1) |
|
|| (isset($_SESSION[$row->rubric_id . '_editall']) && $_SESSION[$row->rubric_id . '_editall'] == 1) ) |
|
{ |
|
$row->cantEdit = 1; |
|
$row->canDelete = 1; |
|
} |
|
// запрещаем редактирование главной страницы и страницу ошибки 404 если требуется одобрение Администратора |
|
if ( ($row->Id == 1 || $row->Id == PAGE_NOT_FOUND_ID) |
|
&& isset($_SESSION[$row->rubric_id . '_newnow']) && @$_SESSION[$row->rubric_id . '_newnow'] != 1) |
|
{ |
|
$row->cantEdit = 0; |
|
} |
|
// разрешаем автору блокировать и разблокировать свои документы если не требуется одобрение Администратора |
|
if ($row->document_author_id == @$_SESSION['user_id'] |
|
&& isset($_SESSION[$row->rubric_id . '_newnow']) && @$_SESSION[$row->rubric_id . '_newnow'] == 1) |
|
{ |
|
$row->canOpenClose = 1; |
|
} |
|
// разрешаем всё, если пользователь принадлежит группе Администраторов или имеет все права на рубрику |
|
if (UGROUP == 1 || @$_SESSION[$row->rubric_id . '_alles'] == 1) |
|
{ |
|
$row->cantEdit = 1; |
|
$row->canDelete = 1; |
|
$row->canEndDel = 1; |
|
$row->canOpenClose = 1; |
|
} |
|
// Запрещаем удаление Главной страницы и страницы с 404 ошибкой |
|
if ($row->Id == 1 || $row->Id == PAGE_NOT_FOUND_ID) |
|
{ |
|
$row->canDelete = 0; |
|
$row->canEndDel = 0; |
|
} |
|
array_push($doc_start, $row); |
|
} |
|
$AVE_Template->assign('doc_start', $doc_start); |
|
} |
|
|
|
function showrubricName($id) |
|
{ |
|
global $AVE_DB; |
|
|
|
$sql = $AVE_DB->Query("SELECT rubric_title FROM " . PREFIX . "_rubrics WHERE Id='$id'"); |
|
$row = $sql->fetchrow(); |
|
return $row->rubric_title; |
|
} |
|
|
|
function showuserName($id) |
|
{ |
|
global $AVE_DB; |
|
|
|
$sql = $AVE_DB->Query("SELECT user_name FROM " . PREFIX . "_users WHERE Id='$id'"); |
|
$row = $sql->fetchrow(); |
|
return $row->user_name; |
|
} |
|
|
|
function cacheShow() |
|
{ |
|
global $AVE_Template; |
|
|
|
$showCache = format_size(get_dir_size($AVE_Template->cache_dir_root)); |
|
echo json_encode(array($showCache, 'accept')); |
|
} |
|
|
|
|
|
|
|
|
|
function templateName($id) |
|
{ |
|
global $AVE_DB; |
|
|
|
$sql = $AVE_DB->Query(" |
|
SELECT * FROM " . PREFIX . "_templates |
|
WHERE Id = '$id' |
|
"); |
|
$row = $sql->fetchrow(); |
|
|
|
return $row->template_title; |
|
} |
|
|
|
function groupName($id) |
|
{ |
|
global $AVE_DB; |
|
|
|
$sql = $AVE_DB->Query(" |
|
SELECT * FROM " . PREFIX . "_user_groups |
|
WHERE user_group = '$id' |
|
"); |
|
$row = $sql->fetchrow(); |
|
|
|
return $row->user_group_name; |
|
} |
|
?>
|