Failed Conditions
Push — interwiki-remove-golucky ( 52fcdb...768be5 )
by Henry
15:30 queued 12:50
created

inc/infoutils.php (1 issue)

Labels
Severity

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

1
<?php
2
/**
3
 * Information and debugging functions
4
 *
5
 * @license    GPL 2 (http://www.gnu.org/licenses/gpl.html)
6
 * @author     Andreas Gohr <[email protected]>
7
 */
8
9
use dokuwiki\HTTP\DokuHTTPClient;
0 ignored issues
show
This use statement conflicts with another class in this namespace, DokuHTTPClient.

Let’s assume that you have a directory layout like this:

.
|-- OtherDir
|   |-- Bar.php
|   `-- Foo.php
`-- SomeDir
    `-- Foo.php

and let’s assume the following content of Bar.php:

// Bar.php
namespace OtherDir;

use SomeDir\Foo; // This now conflicts the class OtherDir\Foo

If both files OtherDir/Foo.php and SomeDir/Foo.php are loaded in the same runtime, you will see a PHP error such as the following:

PHP Fatal error:  Cannot use SomeDir\Foo as Foo because the name is already in use in OtherDir/Foo.php

However, as OtherDir/Foo.php does not necessarily have to be loaded and the error is only triggered if it is loaded before OtherDir/Bar.php, this problem might go unnoticed for a while. In order to prevent this error from surfacing, you must import the namespace with a different alias:

// Bar.php
namespace OtherDir;

use SomeDir\Foo as SomeDirFoo; // There is no conflict anymore.
Loading history...
10
11
if(!defined('DOKU_MESSAGEURL')){
12
    if(in_array('ssl', stream_get_transports())) {
13
        define('DOKU_MESSAGEURL','https://update.dokuwiki.org/check/');
14
    }else{
15
        define('DOKU_MESSAGEURL','http://update.dokuwiki.org/check/');
16
    }
17
}
18
19
/**
20
 * Check for new messages from upstream
21
 *
22
 * @author Andreas Gohr <[email protected]>
23
 */
24
function checkUpdateMessages(){
25
    global $conf;
26
    global $INFO;
27
    global $updateVersion;
28
    if(!$conf['updatecheck']) return;
29
    if($conf['useacl'] && !$INFO['ismanager']) return;
30
31
    $cf = getCacheName($updateVersion, '.updmsg');
32
    $lm = @filemtime($cf);
33
    $is_http = substr(DOKU_MESSAGEURL, 0, 5) != 'https';
34
35
    // check if new messages needs to be fetched
36
    if($lm < time()-(60*60*24) || $lm < @filemtime(DOKU_INC.DOKU_SCRIPT)){
37
        @touch($cf);
38
        dbglog("checkUpdateMessages(): downloading messages to ".$cf.($is_http?' (without SSL)':' (with SSL)'));
39
        $http = new DokuHTTPClient();
40
        $http->timeout = 12;
41
        $resp = $http->get(DOKU_MESSAGEURL.$updateVersion);
42
        if(is_string($resp) && ($resp == "" || substr(trim($resp), -1) == '%')) {
43
            // basic sanity check that this is either an empty string response (ie "no messages")
44
            // or it looks like one of our messages, not WiFi login or other interposed response
45
            io_saveFile($cf,$resp);
46
        } else {
47
            dbglog("checkUpdateMessages(): unexpected HTTP response received");
48
        }
49
    }else{
50
        dbglog("checkUpdateMessages(): messages up to date");
51
    }
52
53
    $data = io_readFile($cf);
54
    // show messages through the usual message mechanism
55
    $msgs = explode("\n%\n",$data);
56
    foreach($msgs as $msg){
57
        if($msg) msg($msg,2);
58
    }
59
}
60
61
62
/**
63
 * Return DokuWiki's version (split up in date and type)
64
 *
65
 * @author Andreas Gohr <[email protected]>
66
 */
67
function getVersionData(){
68
    $version = array();
69
    //import version string
70
    if(file_exists(DOKU_INC.'VERSION')){
71
        //official release
72
        $version['date'] = trim(io_readFile(DOKU_INC.'VERSION'));
73
        $version['type'] = 'Release';
74
    }elseif(is_dir(DOKU_INC.'.git')){
75
        $version['type'] = 'Git';
76
        $version['date'] = 'unknown';
77
78
        $inventory = DOKU_INC.'.git/logs/HEAD';
79
        if(is_file($inventory)){
80
            $sz   = filesize($inventory);
81
            $seek = max(0,$sz-2000); // read from back of the file
82
            $fh   = fopen($inventory,'rb');
83
            fseek($fh,$seek);
84
            $chunk = fread($fh,2000);
85
            fclose($fh);
86
            $chunk = trim($chunk);
87
            $chunk = @array_pop(explode("\n",$chunk));   //last log line
88
            $chunk = @array_shift(explode("\t",$chunk)); //strip commit msg
89
            $chunk = explode(" ",$chunk);
90
            array_pop($chunk); //strip timezone
91
            $date = date('Y-m-d',array_pop($chunk));
92
            if($date) $version['date'] = $date;
93
        }
94
    }else{
95
        global $updateVersion;
96
        $version['date'] = 'update version '.$updateVersion;
97
        $version['type'] = 'snapshot?';
98
    }
99
    return $version;
100
}
101
102
/**
103
 * Return DokuWiki's version (as a string)
104
 *
105
 * @author Anika Henke <[email protected]>
106
 */
107
function getVersion(){
108
    $version = getVersionData();
109
    return $version['type'].' '.$version['date'];
110
}
111
112
/**
113
 * Run a few sanity checks
114
 *
115
 * @author Andreas Gohr <[email protected]>
116
 */
117
function check(){
118
    global $conf;
119
    global $INFO;
120
    /* @var Input $INPUT */
121
    global $INPUT;
122
123
    if ($INFO['isadmin'] || $INFO['ismanager']){
124
        msg('DokuWiki version: '.getVersion(),1);
125
126
        if(version_compare(phpversion(),'5.6.0','<')){
127
            msg('Your PHP version is too old ('.phpversion().' vs. 5.6.0+ needed)',-1);
128
        }else{
129
            msg('PHP version '.phpversion(),1);
130
        }
131
    } else {
132
        if(version_compare(phpversion(),'5.6.0','<')){
133
            msg('Your PHP version is too old',-1);
134
        }
135
    }
136
137
    $mem = (int) php_to_byte(ini_get('memory_limit'));
138
    if($mem){
139
        if ($mem === -1) {
140
            msg('PHP memory is unlimited', 1);
141
        } else if ($mem < 16777216) {
142
            msg('PHP is limited to less than 16MB RAM (' . filesize_h($mem) . '). 
143
            Increase memory_limit in php.ini', -1);
144
        } else if ($mem < 20971520) {
145
            msg('PHP is limited to less than 20MB RAM (' . filesize_h($mem) . '), 
146
                you might encounter problems with bigger pages. Increase memory_limit in php.ini', -1);
147
        } else if ($mem < 33554432) {
148
            msg('PHP is limited to less than 32MB RAM (' . filesize_h($mem) . '), 
149
                but that should be enough in most cases. If not, increase memory_limit in php.ini', 0);
150
        } else {
151
            msg('More than 32MB RAM (' . filesize_h($mem) . ') available.', 1);
152
        }
153
    }
154
155
    if(is_writable($conf['changelog'])){
156
        msg('Changelog is writable',1);
157
    }else{
158
        if (file_exists($conf['changelog'])) {
159
            msg('Changelog is not writable',-1);
160
        }
161
    }
162
163
    if (isset($conf['changelog_old']) && file_exists($conf['changelog_old'])) {
164
        msg('Old changelog exists', 0);
165
    }
166
167
    if (file_exists($conf['changelog'].'_failed')) {
168
        msg('Importing old changelog failed', -1);
169
    } else if (file_exists($conf['changelog'].'_importing')) {
170
        msg('Importing old changelog now.', 0);
171
    } else if (file_exists($conf['changelog'].'_import_ok')) {
172
        msg('Old changelog imported', 1);
173
        if (!plugin_isdisabled('importoldchangelog')) {
174
            msg('Importoldchangelog plugin not disabled after import', -1);
175
        }
176
    }
177
178
    if(is_writable(DOKU_CONF)){
179
        msg('conf directory is writable',1);
180
    }else{
181
        msg('conf directory is not writable',-1);
182
    }
183
184
    if($conf['authtype'] == 'plain'){
185
        global $config_cascade;
186
        if(is_writable($config_cascade['plainauth.users']['default'])){
187
            msg('conf/users.auth.php is writable',1);
188
        }else{
189
            msg('conf/users.auth.php is not writable',0);
190
        }
191
    }
192
193
    if(function_exists('mb_strpos')){
194
        if(defined('UTF8_NOMBSTRING')){
195
            msg('mb_string extension is available but will not be used',0);
196
        }else{
197
            msg('mb_string extension is available and will be used',1);
198
            if(ini_get('mbstring.func_overload') != 0){
199
                msg('mb_string function overloading is enabled, this will cause problems and should be disabled',-1);
200
            }
201
        }
202
    }else{
203
        msg('mb_string extension not available - PHP only replacements will be used',0);
204
    }
205
206
    if (!UTF8_PREGSUPPORT) {
207
        msg('PHP is missing UTF-8 support in Perl-Compatible Regular Expressions (PCRE)', -1);
208
    }
209
    if (!UTF8_PROPERTYSUPPORT) {
210
        msg('PHP is missing Unicode properties support in Perl-Compatible Regular Expressions (PCRE)', -1);
211
    }
212
213
    $loc = setlocale(LC_ALL, 0);
214
    if(!$loc){
215
        msg('No valid locale is set for your PHP setup. You should fix this',-1);
216
    }elseif(stripos($loc,'utf') === false){
217
        msg('Your locale <code>'.hsc($loc).'</code> seems not to be a UTF-8 locale,
218
             you should fix this if you encounter problems.',0);
219
    }else{
220
        msg('Valid locale '.hsc($loc).' found.', 1);
221
    }
222
223
    if($conf['allowdebug']){
224
        msg('Debugging support is enabled. If you don\'t need it you should set $conf[\'allowdebug\'] = 0',-1);
225
    }else{
226
        msg('Debugging support is disabled',1);
227
    }
228
229
    if($INFO['userinfo']['name']){
230
        msg('You are currently logged in as '.$INPUT->server->str('REMOTE_USER').' ('.$INFO['userinfo']['name'].')',0);
231
        msg('You are part of the groups '.join($INFO['userinfo']['grps'],', '),0);
232
    }else{
233
        msg('You are currently not logged in',0);
234
    }
235
236
    msg('Your current permission for this page is '.$INFO['perm'],0);
237
238
    if(is_writable($INFO['filepath'])){
239
        msg('The current page is writable by the webserver',0);
240
    }else{
241
        msg('The current page is not writable by the webserver',0);
242
    }
243
244
    if($INFO['writable']){
245
        msg('The current page is writable by you',0);
246
    }else{
247
        msg('The current page is not writable by you',0);
248
    }
249
250
    // Check for corrupted search index
251
    $lengths = idx_listIndexLengths();
252
    $index_corrupted = false;
253
    foreach ($lengths as $length) {
254
        if (count(idx_getIndex('w', $length)) != count(idx_getIndex('i', $length))) {
255
            $index_corrupted = true;
256
            break;
257
        }
258
    }
259
260
    foreach (idx_getIndex('metadata', '') as $index) {
261
        if (count(idx_getIndex($index.'_w', '')) != count(idx_getIndex($index.'_i', ''))) {
262
            $index_corrupted = true;
263
            break;
264
        }
265
    }
266
267
    if($index_corrupted) {
268
        msg(
269
            'The search index is corrupted. It might produce wrong results and most
270
                probably needs to be rebuilt. See
271
                <a href="http://www.dokuwiki.org/faq:searchindex">faq:searchindex</a>
272
                for ways to rebuild the search index.', -1
273
        );
274
    } elseif(!empty($lengths)) {
275
        msg('The search index seems to be working', 1);
276
    } else {
277
        msg(
278
            'The search index is empty. See
279
                <a href="http://www.dokuwiki.org/faq:searchindex">faq:searchindex</a>
280
                for help on how to fix the search index. If the default indexer
281
                isn\'t used or the wiki is actually empty this is normal.'
282
        );
283
    }
284
285
    // rough time check
286
    $http = new DokuHTTPClient();
287
    $http->max_redirect = 0;
288
    $http->timeout = 3;
289
    $http->sendRequest('http://www.dokuwiki.org', '', 'HEAD');
290
    $now = time();
291
    if(isset($http->resp_headers['date'])) {
292
        $time = strtotime($http->resp_headers['date']);
293
        $diff = $time - $now;
294
295
        if(abs($diff) < 4) {
296
            msg("Server time seems to be okay. Diff: {$diff}s", 1);
297
        } else {
298
            msg("Your server's clock seems to be out of sync!
299
                 Consider configuring a sync with a NTP server.  Diff: {$diff}s");
300
        }
301
    }
302
303
}
304
305
/**
306
 * print a message
307
 *
308
 * If HTTP headers were not sent yet the message is added
309
 * to the global message array else it's printed directly
310
 * using html_msgarea()
311
 *
312
 *
313
 * Levels can be:
314
 *
315
 * -1 error
316
 *  0 info
317
 *  1 success
318
 *
319
 * @author Andreas Gohr <[email protected]>
320
 * @see    html_msgarea
321
 */
322
323
define('MSG_PUBLIC', 0);
324
define('MSG_USERS_ONLY', 1);
325
define('MSG_MANAGERS_ONLY',2);
326
define('MSG_ADMINS_ONLY',4);
327
328
/**
329
 * Display a message to the user
330
 *
331
 * @param string $message
332
 * @param int    $lvl   -1 = error, 0 = info, 1 = success, 2 = notify
333
 * @param string $line  line number
334
 * @param string $file  file number
335
 * @param int    $allow who's allowed to see the message, see MSG_* constants
336
 */
337
function msg($message,$lvl=0,$line='',$file='',$allow=MSG_PUBLIC){
338
    global $MSG, $MSG_shown;
339
    $errors = array();
340
    $errors[-1] = 'error';
341
    $errors[0]  = 'info';
342
    $errors[1]  = 'success';
343
    $errors[2]  = 'notify';
344
345
    if($line || $file) $message.=' ['.\dokuwiki\Utf8\PhpString::basename($file).':'.$line.']';
346
347
    if(!isset($MSG)) $MSG = array();
348
    $MSG[]=array('lvl' => $errors[$lvl], 'msg' => $message, 'allow' => $allow);
349
    if(isset($MSG_shown) || headers_sent()){
350
        if(function_exists('html_msgarea')){
351
            html_msgarea();
352
        }else{
353
            print "ERROR($lvl) $message";
354
        }
355
        unset($GLOBALS['MSG']);
356
    }
357
}
358
/**
359
 * Determine whether the current user is allowed to view the message
360
 * in the $msg data structure
361
 *
362
 * @param  $msg   array    dokuwiki msg structure
363
 *                         msg   => string, the message
364
 *                         lvl   => int, level of the message (see msg() function)
365
 *                         allow => int, flag used to determine who is allowed to see the message
366
 *                                       see MSG_* constants
367
 * @return bool
368
 */
369
function info_msg_allowed($msg){
370
    global $INFO, $auth;
371
372
    // is the message public? - everyone and anyone can see it
373
    if (empty($msg['allow']) || ($msg['allow'] == MSG_PUBLIC)) return true;
374
375
    // restricted msg, but no authentication
376
    if (empty($auth)) return false;
377
378
    switch ($msg['allow']){
379
        case MSG_USERS_ONLY:
380
            return !empty($INFO['userinfo']);
381
382
        case MSG_MANAGERS_ONLY:
383
            return $INFO['ismanager'];
384
385
        case MSG_ADMINS_ONLY:
386
            return $INFO['isadmin'];
387
388
        default:
389
            trigger_error('invalid msg allow restriction.  msg="'.$msg['msg'].'" allow='.$msg['allow'].'"',
390
                          E_USER_WARNING);
391
            return $INFO['isadmin'];
392
    }
393
394
    return false;
395
}
396
397
/**
398
 * print debug messages
399
 *
400
 * little function to print the content of a var
401
 *
402
 * @author Andreas Gohr <[email protected]>
403
 *
404
 * @param string $msg
405
 * @param bool $hidden
406
 */
407
function dbg($msg,$hidden=false){
408
    if($hidden){
409
        echo "<!--\n";
410
        print_r($msg);
411
        echo "\n-->";
412
    }else{
413
        echo '<pre class="dbg">';
414
        echo hsc(print_r($msg,true));
415
        echo '</pre>';
416
    }
417
}
418
419
/**
420
 * Print info to a log file
421
 *
422
 * @author Andreas Gohr <[email protected]>
423
 *
424
 * @param string $msg
425
 * @param string $header
426
 */
427
function dbglog($msg,$header=''){
428
    global $conf;
429
    /* @var Input $INPUT */
430
    global $INPUT;
431
432
    // The debug log isn't automatically cleaned thus only write it when
433
    // debugging has been enabled by the user.
434
    if($conf['allowdebug'] !== 1) return;
435
    if(is_object($msg) || is_array($msg)){
436
        $msg = print_r($msg,true);
437
    }
438
439
    if($header) $msg = "$header\n$msg";
440
441
    $file = $conf['cachedir'].'/debug.log';
442
    $fh = fopen($file,'a');
443
    if($fh){
444
        fwrite($fh,date('H:i:s ').$INPUT->server->str('REMOTE_ADDR').': '.$msg."\n");
445
        fclose($fh);
446
    }
447
}
448
449
/**
450
 * Log accesses to deprecated fucntions to the debug log
451
 *
452
 * @param string $alternative The function or method that should be used instead
453
 * @triggers INFO_DEPRECATION_LOG
454
 */
455
function dbg_deprecated($alternative = '') {
456
    \dokuwiki\Debug\DebugHelper::dbgDeprecatedFunction($alternative, 2);
457
}
458
459
/**
460
 * Print a reversed, prettyprinted backtrace
461
 *
462
 * @author Gary Owen <[email protected]>
463
 */
464
function dbg_backtrace(){
465
    // Get backtrace
466
    $backtrace = debug_backtrace();
467
468
    // Unset call to debug_print_backtrace
469
    array_shift($backtrace);
470
471
    // Iterate backtrace
472
    $calls = array();
473
    $depth = count($backtrace) - 1;
474
    foreach ($backtrace as $i => $call) {
475
        $location = $call['file'] . ':' . $call['line'];
476
        $function = (isset($call['class'])) ?
477
            $call['class'] . $call['type'] . $call['function'] : $call['function'];
478
479
        $params = array();
480
        if (isset($call['args'])){
481
            foreach($call['args'] as $arg){
482
                if(is_object($arg)){
483
                    $params[] = '[Object '.get_class($arg).']';
484
                }elseif(is_array($arg)){
485
                    $params[] = '[Array]';
486
                }elseif(is_null($arg)){
487
                    $params[] = '[NULL]';
488
                }else{
489
                    $params[] = (string) '"'.$arg.'"';
490
                }
491
            }
492
        }
493
        $params = implode(', ',$params);
494
495
        $calls[$depth - $i] = sprintf('%s(%s) called at %s',
496
                $function,
497
                str_replace("\n", '\n', $params),
498
                $location);
499
    }
500
    ksort($calls);
501
502
    return implode("\n", $calls);
503
}
504
505
/**
506
 * Remove all data from an array where the key seems to point to sensitive data
507
 *
508
 * This is used to remove passwords, mail addresses and similar data from the
509
 * debug output
510
 *
511
 * @author Andreas Gohr <[email protected]>
512
 *
513
 * @param array $data
514
 */
515
function debug_guard(&$data){
516
    foreach($data as $key => $value){
517
        if(preg_match('/(notify|pass|auth|secret|ftp|userinfo|token|buid|mail|proxy)/i',$key)){
518
            $data[$key] = '***';
519
            continue;
520
        }
521
        if(is_array($value)) debug_guard($data[$key]);
522
    }
523
}
524