dst] = $data->src; } $cache = 1; } return $map; } function drupal_rebuild_path_map() { drupal_get_path_map("rebuild"); } function error_handler($errno, $message, $filename, $line, $variables) { $types = array(1 => "error", 2 => "warning", 4 => "parse error", 8 => "notice", 16 => "core error", 32 => "core warning", 64 => "compile error", 128 => "compile warning", 256 => "user error", 512 => "user warning", 1024 => "user notice"); $entry = $types[$errno] .": $message in $filename on line $line."; if ($errno & E_ALL ^ E_NOTICE) { watchdog("error", $types[$errno] .": $message in $filename on line $line."); print "
$entry
"; } } function watchdog($type, $message, $link = NULL) { global $user; db_query("INSERT INTO {watchdog} (uid, type, message, link, location, hostname, timestamp) VALUES (%d, '%s', '%s', '%s', '%s', '%s', %d)", $user->uid, $type, $message, $link, request_uri(), getenv("REMOTE_ADDR"), time()); } function throttle($type, $rate) { if (!user_access("access administration pages")) { if ($throttle = db_fetch_object(db_query("SELECT * FROM {watchdog} WHERE type = '$type' AND hostname = '". getenv("REMOTE_ADDR") ."' AND ". time() ." - timestamp < $rate"))) { watchdog("warning", "throttle: '". getenv("REMOTE_ADDR") ."' exceeded submission rate - $throttle->type"); die(message_throttle()); } else { watchdog($type, "throttle"); } } } function _fix_gpc_magic_array(&$items) { foreach ($items as $k => $i) { if (is_array($i)) _fix_gpc_magic_array($items[$k]); else $items[$k] = stripslashes($i); } } function fix_gpc_magic() { static $fixed = false; if ($fixed) return; if (ini_get("magic_quotes_gpc") == 0) return; _fix_gpc_magic_array($_GET); _fix_gpc_magic_array($_POST); _fix_gpc_magic_array($_COOKIE); $fixed = true; } function array2object($node) { if (is_array($node)) { foreach ($node as $key => $value) { $object->$key = $value; } } else { $object = $node; } return $object; } function object2array($node) { if (is_object($node)) { foreach ($node as $key => $value) { $array[$key] = $value; } } else { $array = $node; } return $array; } function message_access() { return t("You are not authorized to access this page."); } function message_na() { return t("n/a"); } function message_throttle() { return t("You exceeded the maximum submission rate. Please wait a few minutes and try again."); } function locale_init() { global $languages, $user; if ($user->uid && $languages[$user->language]) { return $user->language; } else { return key($languages); } } function t($string, $args = 0) { global $languages; /* ** About the usage of t(). We try to keep strings whole as much as ** possible and are unafraid of HTML markup within translation strings ** if necessary. The suggested syntax for a link embedded within a ** translation string is for example: ** ** $msg = t("You must login below or create a new ** account before viewing the next page.", array("%url" ** => url("user/register"))); */ $string = ($languages && module_exist("locale") ? locale($string) : $string); if (!$args) { return $string; } else { return strtr($string, $args); } } function drupal_specialchars($input, $quotes = ENT_NOQUOTES) { /* ** Note that we'd like to go 'htmlspecialchars($input, $quotes, "utf-8")' ** like the PHP manual tells us to, but we can't because there's a bug in ** PHP <4.3 that makes it mess up multibyte charsets if we specify the ** charset. Change this later once we make PHP 4.3 a requirement. */ return htmlspecialchars($input, $quotes); } /** * Verify the syntax of the given e-mail address. Empty e-mail addresses * are allowed. See RFC 2822 for details. * * @param $mail a email address */ function valid_email_address($mail) { $user = '[a-zA-Z0-9_\-\.\+\^!#\$%&*+\/\=\?\`\|\{\}~\']+'; $domain = '(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-]*[a-zA-Z0-9]\.?)+'; $ipv4 = '[0-9]{1,3}(\.[0-9]{1,3}){3}'; $ipv6 = '[0-9a-fA-F]{1,4}(\:[0-9a-fA-F]{1,4}){7}'; if (preg_match("/^$user@($domain|(\[($ipv4|$ipv6)\]))$/", $mail)) { return 1; } else { return 0; } } /** * Verify the syntax of the given URL. * * @param $url an URL */ function valid_url($url) { if (preg_match("/^[a-zA-z0-9\/:_\-_\.,]+$/", $url)) { return 1; } else { return 0; } } /** * Format a single result entry of a search query: * * @param $item a single search result as returned by module_search of * type array("count" => ..., "link" => ..., "title" => ..., "user" => ..., * "date" => ..., "keywords" => ...) * @param $type module type of this item */ function search_item($item, $type) { /* ** Modules may implement the "search_item" hook in order to overwrite ** the default function to display search results. */ if (module_hook($type, "search_item")) { $output = module_invoke($type, "search_item", $item); } else { $output .= " ". $item["title"] ."
"; $output .= " " . t($type) . ($item["user"] ? " - ". $item["user"] : "") ."". ($item["date"] ? " - ". format_date($item["date"], "small") : "") .""; $output .= "

"; } return $output; } /** * Render a generic search form. * * "Generic" means "universal usable" - that is, usable not only from * 'site.com/search', but also as a simple seach box (without * "Restrict search to", help text, etc) from theme's header etc. * This means: provide options to only conditionally render certain * parts of this form. * * @param $action Form action. Defaults to 'site.com/search'. * @param $keys string containing keywords for the search. * @param $options != 0: Render additional form fields/text * ("Restrict search to", help text, etc). */ function search_form($action = NULL, $keys = NULL, $options = NULL) { if (!$action) { $action = url("search"); } $output .= "
"; $output .= " \n"; if ($options != 0) { $output .= "
"; $output .= t("Restrict search to") .": "; foreach (module_list() as $name) { if (module_hook($name, "search")) { $output .= " ". t($name); } } } $form .= "
"; return form($output, "post", $action); } /* * Collect the search results: */ function search_data($keys = NULL) { $edit = $_POST["edit"]; if (isset($keys)) { foreach (module_list() as $name) { if (module_hook($name, "search") && (!$edit["type"] || $edit["type"][$name]) && ($result = module_invoke($name, "search", $keys))) { if ($name == "node" || $name == "comment") { $output .= "

". t("Matching ". $name ."s ranked in order of relevance") .":

"; } else { $output .= "

". t("Matching ". $name ."s") .":

"; } foreach ($result as $entry) { $output .= search_item($entry, $name); } } } } return $output; } /** * Display the search form and the resulting data. * * @param $type If set, search only nodes of this type. * Otherwise, search all types. * @param $action Form action. Defaults to 'site.com/search'. * @param $keys Query string. Defaults to global $keys. * @param $options != 0: Render additional form fields/text * ("Restrict search to", help text, etc). */ function search_type($type, $action = NULL, $keys = NULL, $options = NULL) { $_POST["edit"]["type"][$type] = "on"; return search_form($action, $keys, $options) . "
". search_data($keys); } function drupal_goto($url) { /* ** Translate & to simply & */ $url = str_replace("&", "&", $url); /* ** It is advised to use "drupal_goto()" instead of PHP's "header()" as ** "drupal_goto()" will append the user's session ID to the URI when PHP ** is compiled with "--enable-trans-sid". */ if (!ini_get("session.use_trans_sid") || !session_id() || strstr($url, session_id())) { header("Location: $url"); } else { $sid = session_name() . "=" . session_id(); if (strstr($url, "?") && !strstr($url, $sid)) { header("Location: $url&". $sid); } else { header("Location: $url?". $sid); } } /* ** The "Location" header sends a REDIRECT status code to the http ** daemon. In some cases this can go wrong, so we make sure none ** of the code /below/ gets executed when we redirect. */ exit(); } function valid_input_data($data) { if (is_array($data) || is_object($data)) { /* ** Form data can contain a number of nested arrays. */ foreach ($data as $key => $value) { if (!valid_input_data($value)) { return 0; } } } else { /* ** Detect evil input data. */ // check strings: $match = preg_match("/\Wjavascript\s*:/i", $data); $match += preg_match("/\Wexpression\s*\(/i", $data); $match += preg_match("/\Walert\s*\(/i", $data); // check attributes: $match += preg_match("/\W(dynsrc|datasrc|data|lowsrc|on[a-z]+)\s*=[^>]+?>/i", $data); // check tags: $match += preg_match("/<\s*(applet|script|object|style|embed|form|blink|meta|html|frame|iframe|layer|ilayer|head|frameset|xml)/i", $data); if ($match) { watchdog("warning", "terminated request because of suspicious input data: ". drupal_specialchars($data)); return 0; } } return 1; } function check_form($text) { return drupal_specialchars($text, ENT_QUOTES); } function filter($text) { $modules = module_list(); /* ** Make sure the HTML filters that are part of the node module ** are run first. */ if (in_array("node", $modules)) { $text = module_invoke("node", "filter", $text); } foreach ($modules as $name) { if (module_hook($name, "filter") && $name != "node") { $text = module_invoke($name, "filter", $text); } } return $text; } function rewrite_old_urls($text) { global $base_url; $end = substr($base_url, 12); /* ** This is a *temporary* filter to rewrite old-style URLs to new-style ** URLs (clean URLs). Currently, URLs are being rewritten dynamically ** (ie. "on output"), however when these rewrite rules have been tested ** enough, we will use them to permanently rewrite the links in node ** and comment bodies. */ if (variable_get("clean_url", "0") == "0") { /* ** Relative URLs: */ // rewrite 'node.php?id=[&cid=]' style URLs: $text = eregi_replace("\"(node)\.php\?id=([[:digit:]]+)(&cid=)?([[:digit:]]*)", "\"?q=\\1/view/\\2/\\4", $text); // rewrite 'module.php?mod={&=}' style URLs: $text = ereg_replace("\"module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))", "\"?q=\\2/\\4/\\6" , $text); $text = ereg_replace("\"module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))", "\"?q=\\2/\\4", $text); $text = ereg_replace("\"module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))", "\"?q=\\2", $text); /* ** Absolute URLs: */ // rewrite 'node.php?id=[&cid=]' style URLs: $text = eregi_replace("$end/(node)\.php\?id=([[:digit:]]+)(&cid=)?([[:digit:]]*)", "$end/?q=\\1/view/\\2/\\4", $text); // rewrite 'module.php?mod={&=}' style URLs: $text = ereg_replace("$end/module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))", "$end/?q=\\2/\\4/\\6" , $text); $text = ereg_replace("$end/module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))", "$end/?q=\\2/\\4", $text); $text = ereg_replace("$end/module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))", "\"$end/?q=\\2", $text); } else { /* ** Relative URLs: */ // rewrite 'node.php?id=[&cid=]' style URLs: $text = eregi_replace("\"(node)\.php\?id=([[:digit:]]+)(&cid=)?([[:digit:]]*)", "\"\\1/view/\\2/\\4", $text); // rewrite 'module.php?mod={&=}' style URLs: $text = ereg_replace("\"module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))", "\"\\2/\\4/\\6", $text); $text = ereg_replace("\"module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))", "\"\\2/\\4", $text); $text = ereg_replace("\"module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))", "\"\\2", $text); /* ** Absolute URLs: */ // rewrite 'node.php?id=[&cid=]' style URLs: $text = eregi_replace("$end/(node)\.php\?id=([[:digit:]]+)(&cid=)?([[:digit:]]*)", "$end/\\1/view/\\2/\\4", $text); // rewrite 'module.php?mod={&=}' style URLs: $text = ereg_replace("$end/module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))", "$end/\\2/\\4/\\6", $text); $text = ereg_replace("$end/module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))(&?[[:alpha:]]+=([[:alnum:]]+))", "$end/\\2/\\4", $text); $text = ereg_replace("$end/module\.php\?(&?[[:alpha:]]+=([[:alnum:]]+))", "$end/\\2", $text); } return $text; } function check_output($text) { if (isset($text)) { // filter content on output: $text = filter($text); // get the line breaks right: if (strip_tags($text, "") == $text) { $text = nl2br($text); } } else { $text = message_na(); } return $text; } function check_file($filename) { return is_uploaded_file($filename); } function format_rss_channel($title, $link, $description, $items, $language = "en", $args = array()) { // arbitrary elements may be added using the $args associative array $output .= "\n"; $output .= " ". drupal_specialchars(strip_tags($title)) ."\n"; $output .= " ". drupal_specialchars(strip_tags($link)) ."\n"; $output .= " ". drupal_specialchars($description) ."\n"; $output .= " ". drupal_specialchars(strip_tags($language)) ."\n"; foreach ($args as $key => $value) { $output .= " <$key>". drupal_specialchars(strip_tags($value)) ."\n"; } $output .= $items; $output .= "\n"; return $output; } function format_rss_item($title, $link, $description, $args = array()) { // arbitrary elements may be added using the $args associative array $output .= "\n"; $output .= " ". drupal_specialchars(strip_tags($title)) ."\n"; $output .= " ". drupal_specialchars(strip_tags($link)) ."\n"; $output .= " ". drupal_specialchars(check_output($description)) ."\n"; foreach ($args as $key => $value) { $output .= "<$key>". drupal_specialchars(strip_tags($value)) .""; } $output .= "\n"; return $output; } /** * Formats a string with a count of items so that the string is pluralized * correctly. * format_plural calls t() by itself, make sure not to pass already localized * strings to it. * * @param $count The item count to display. * @param $singular The string for the singular case. Please make sure it's clear * this is singular, to ease translation. ("1 new comment" instead of * "1 new"). * @param $plural The string for the plrual case. Please make sure it's clear * this is plural, to ease translation. Use %count in places of the * item count, as in "%count new comments". */ function format_plural($count, $singular, $plural) { return t($count == 1 ? $singular : $plural, array("%count" => $count)); } function format_size($size) { $suffix = t("bytes"); if ($size > 1024) { $size = round($size / 1024, 2); $suffix = t("KB"); } if ($size > 1024) { $size = round($size / 1024, 2); $suffix = t("MB"); } return t("%size %suffix", array("%size" => $size, "%suffix" => $suffix)); } function format_interval($timestamp) { $units = array("1 year|%count years" => 31536000, "1 week|%count weeks" => 604800, "1 day|%count days" => 86400, "1 hour|%count hours" => 3600, "1 min|%count min" => 60, "1 sec|%count sec" => 1); foreach ($units as $key=>$value) { $key = explode("|", $key); if ($timestamp >= $value) { $output .= ($output ? " " : "") . format_plural(floor($timestamp / $value), $key[0], $key[1]); $timestamp %= $value; } } return ($output) ? $output : t("0 sec"); } function format_date($timestamp, $type = "medium", $format = "") { global $user; $timestamp += ($user->timezone) ? $user->timezone - date("Z") : 0; switch ($type) { case "small": $format = variable_get("date_format_short", "m/d/Y - H:i"); break; case "large": $format = variable_get("date_format_long", "l, F j, Y - H:i"); break; case "custom": // No change to format break; case "medium": default: $format = variable_get("date_format_medium", "D, m/d/Y - H:i"); } for ($i = strlen($format); $i >= 0; $c = $format[--$i]) { if (strstr("DFlMSw", $c)) { $date = t(date($c, $timestamp)) . $date; } else if (strstr("AaBdgGhHiIjLmnOrstTUWYyZz", $c)) { $date = date($c, $timestamp) . $date; } else { $date = $c.$date; } } return $date; } function format_name($object) { if ($object->uid && $object->name) { /* ** Shorten the name when it is too long or it will break many ** tables. */ if (strlen($object->name) > 20) { $name = substr($object->name, 0, 15) ."..."; } else { $name = $object->name; } if (arg(0) == "admin") { $output = l($name, "admin/user/edit/$object->uid", array("title" => t("Administer user profile."))); } else { $output = l($name, "user/view/$object->uid", array("title" => t("View user profile."))); } } else if ($object->name) { /* ** Sometimes modules display content composed by people who are ** not registers members of the site (i.e. mailing list or news ** aggregator modules). This clause enables modules to display ** the true author of the content. */ $output = $object->name; } else { $output = t(variable_get("anonymous", "Anonymous")); } return $output; } function form($form, $method = "post", $action = 0, $options = 0) { if (!$action) { $action = request_uri(); } return "
\n$form\n
\n"; } function form_item($title, $value, $description = 0) { return theme("form_element", $title, $value, $description); } function form_group($legend, $group, $description = 0) { return "
" . ($legend ? "$legend" : "") . $group . ($description ? "
$description
" : "") . "
\n"; } function form_radio($title, $name, $value = 1, $checked = 0, $description = 0, $attributes = 0) { return theme("form_element", 0, " $title", $description); } function form_checkbox($title, $name, $value = 1, $checked = 0, $description = 0, $attributes = 0) { return form_hidden($name, 0) . theme("form_element", 0, " $title", $description); } function form_textfield($title, $name, $value, $size, $maxlength, $description = 0, $attributes = 0) { $size = $size ? " size=\"$size\"" : ""; return theme("form_element", $title, "", $description); } function form_password($title, $name, $value, $size, $maxlength, $description = 0, $attributes = 0) { $size = $size ? " size=\"$size\"" : ""; return theme("form_element", $title, "", $description); } function form_textarea($title, $name, $value, $cols, $rows, $description = 0, $attributes = 0) { $cols = $cols ? " cols=\"$cols\"" : ""; module_invoke_all("textarea", $name); // eg. optionally plug in a WYSIWYG editor return theme("form_element", $title, "", $description); } function form_select($title, $name, $value, $options, $description = 0, $extra = 0, $multiple = 0) { if (count($options) > 0) { foreach ($options as $key=>$choice) { $select .= ""; } return theme("form_element", $title, "", $description); } } function form_radios($title, $name, $value, $options, $description = 0) { if (count($options) > 0) { foreach ($options as $key=>$choice) { $output .= form_radio($choice, $name, $key, ($key == $value)); } return theme("form_element", $title, $output, $description); } } function form_file($title, $name, $size, $description = 0) { return theme("form_element", $title, "\n", $description); } function form_hidden($name, $value) { return "\n"; } function form_submit($value, $name = "op", $attributes = 0) { return "\n"; } function form_weight($title = NULL, $name = "weight", $value = 0, $delta = 10, $description = 0, $extra = 0) { for ($n = (-1 * $delta); $n <= $delta; $n++) { $weights[$n] = $n; } return form_select($title, $name, $value, $weights, $description, $extra); } function form_allowed_tags_text() { return variable_get("allowed_html", "") ? (t("Allowed HTML tags") .": ". htmlspecialchars(variable_get("allowed_html", ""))) : ""; } /** * Given an old url, return the alias. */ function drupal_get_path_alias($path) { $map = drupal_get_path_map(); if ($map) { return array_search($path, $map); } } /** * Given an alias, return the default url. */ function drupal_get_normal_path($path) { $map = drupal_get_path_map(); return $map[$path]; } function url($url = NULL, $query = NULL) { global $base_url; static $script; if (empty($script)) { /* ** On some webservers such as IIS we can't omit "index.php". As such we ** generate "index.php?q=foo" instead of "?q=foo" on anything that is not ** Apache. */ $script = (strpos($_SERVER["SERVER_SOFTWARE"], "Apache") === false) ? "index.php" : ""; } if ($alias = drupal_get_path_alias($url)) { $url = $alias; } if (variable_get("clean_url", "0") == "0") { if (isset($url)) { if (isset($query)) { return "$base_url/$script?q=$url&$query"; } else { return "$base_url/$script?q=$url"; } } else { if (isset($query)) { return "$base_url/$script?$query"; } else { return "$base_url/"; } } } else { if (isset($url)) { if (isset($query)) { return "$base_url/$url?$query"; } else { return "$base_url/$url"; } } else { if (isset($query)) { return "$base_url/$script?$query"; } else { return "$base_url/"; } } } } function drupal_attributes($attributes = 0) { if (is_array($attributes)) { $t = array(); foreach ($attributes as $key => $value) { $t[] = "$key=\"$value\""; } return " ". implode($t, " "); } } function l($text, $url, $attributes = array(), $query = NULL) { return "
$text"; } function field_get($string, $name) { ereg(",?$name=([^,]+)", ", $string", $regs); return $regs[1]; } function field_set($string, $name, $value) { $rval = ereg_replace(",$name=[^,]+", "", ",$string"); if (isset($value)) { $rval .= ($rval == "," ? "" : ",") ."$name=$value"; } return substr($rval, 1); } function link_page() { global $custom_links; if (is_array($custom_links)) { return $custom_links; } else { $links = module_invoke_all("link", "page"); array_unshift($links, l(t("home"), "", array("title" => t("Return to the main page.")))); return $links; } } function link_node($node, $main = 0) { return module_invoke_all("link", "node", $node, $main); } function drupal_page_footer() { if (variable_get("cache", 0)) { page_set_cache(); } /* ** A hook for modules where modules may take action at the end of a ** request good uses include setting a cache, page logging, etc. */ module_invoke_all("exit"); } include_once "includes/theme.inc"; include_once "includes/pager.inc"; include_once "includes/menu.inc"; include_once "includes/xmlrpc.inc"; include_once "includes/tablesort.inc"; // set error handler: set_error_handler("error_handler"); // spit out the correct charset http header header("Content-Type: text/html; charset=utf-8"); // initialize the _GET["q"] prior to loading the modules and invoking their 'init' hook: if (!empty($_GET["q"])) { if ($path = drupal_get_normal_path(trim($_GET["q"], "/"))) { $_GET["q"] = $path; } } else { if ($path = drupal_get_normal_path(variable_get("site_frontpage", "node"))) { $_GET["q"] = $path; } else { $_GET["q"] = variable_get("site_frontpage", "node"); } } // initialize installed modules: module_init(); if (!user_access("bypass input data check")) { if (!valid_input_data($_REQUEST)) { die("terminated request because of suspicious input data"); } } // initialize localization system: $locale = locale_init(); // initialize theme: $theme = init_theme(); ?>