mirror of
https://github.com/NNTmux/newznab-tmux.git
synced 2026-08-29 09:18:54 +00:00
DariusIII
360 lines
9.8 KiB
PHP
360 lines
9.8 KiB
PHP
<?php
|
|
require_once SMARTY_DIR . 'Smarty.class.php';
|
|
require_once NN_LIB . 'utility' . DS . 'SmartyUtils.php';
|
|
|
|
use newznab\controllers\Captcha;
|
|
use newznab\db\Settings;
|
|
|
|
class BasePage
|
|
{
|
|
/**
|
|
* @var \newznab\db\Settings
|
|
*/
|
|
public $settings = null;
|
|
|
|
/**
|
|
* Public access to Captcha object for error checking.
|
|
*
|
|
* @var \newznab\controllers\Captcha
|
|
*/
|
|
public $captcha;
|
|
|
|
/**
|
|
* @var Users
|
|
*/
|
|
public $users = null;
|
|
|
|
public $title = '';
|
|
public $content = '';
|
|
public $head = '';
|
|
public $body = '';
|
|
public $meta_keywords = '';
|
|
public $meta_title = '';
|
|
public $meta_description = '';
|
|
public $page = '';
|
|
public $page_template = '';
|
|
public $smarty = '';
|
|
public $userdata = array();
|
|
public $serverurl = '';
|
|
public $site = '';
|
|
public $secure_connection = false;
|
|
|
|
|
|
/**
|
|
* Set up session / smarty / user variables.
|
|
*/
|
|
public function __construct()
|
|
{
|
|
@session_start();
|
|
|
|
if (NN_FLOOD_CHECK) {
|
|
$this->floodCheck();
|
|
}
|
|
|
|
if ((function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) || ini_get('magic_quotes_sybase')) {
|
|
$this->stripSlashes($_GET);
|
|
$this->stripSlashes($_POST);
|
|
$this->stripSlashes($_REQUEST);
|
|
$this->stripSlashes($_COOKIE);
|
|
}
|
|
|
|
// set site variable
|
|
$s = new Sites();
|
|
$this->site = $s->get();
|
|
$this->pdo = new Settings();
|
|
|
|
// Buffer settings/DB connection.
|
|
$this->settings = new newznab\db\Settings();
|
|
$this->smarty = new Smarty();
|
|
$this->captcha = new Captcha(['Settings' => $this->settings]);
|
|
|
|
$this->smarty->setTemplateDir(
|
|
array(
|
|
'user_frontend' => NN_WWW . 'templates/' . $this->pdo->getSetting('style') . '/views/frontend',
|
|
'frontend' => NN_WWW . 'templates/default/views/frontend'
|
|
)
|
|
);
|
|
$this->smarty->setCompileDir(SMARTY_DIR.'templates_c'.DIRECTORY_SEPARATOR);
|
|
$this->smarty->setConfigDir(SMARTY_DIR.'configs'.DIRECTORY_SEPARATOR);
|
|
$this->smarty->setCacheDir(SMARTY_DIR.'cache'.DIRECTORY_SEPARATOR);
|
|
$this->smarty->error_reporting = ((NN_DEBUG ? E_ALL : E_ALL - E_NOTICE));
|
|
$this->secure_connection = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == 443)) ;
|
|
|
|
if (file_exists(WWW_DIR.'templates/'.$this->pdo->getSetting('style').'/theme.php'))
|
|
require_once(WWW_DIR.'templates/'.$this->pdo->getSetting('style').'/theme.php');
|
|
$this->smarty->assign('themevars', (isset($themevars) ? $themevars : null));
|
|
|
|
$servername = null;
|
|
if (defined('EXTERNAL_PROXY_IP') && defined('EXTERNAL_HOST_NAME') && isset($_SERVER["REMOTE_ADDR"]) && $_SERVER["REMOTE_ADDR"] == EXTERNAL_PROXY_IP)
|
|
$servername = EXTERNAL_HOST_NAME;
|
|
elseif (isset($_SERVER["SERVER_NAME"]))
|
|
$servername = $_SERVER["SERVER_NAME"];
|
|
|
|
if ($servername != "")
|
|
{
|
|
$this->serverurl = ($this->secure_connection ? "https://" : "http://").$servername.(($_SERVER["SERVER_PORT"] != "80" && $_SERVER["SERVER_PORT"] != "443") ? ":".$_SERVER["SERVER_PORT"] : "").WWW_TOP.'/';
|
|
$this->smarty->assign('serverroot', $this->serverurl);
|
|
}
|
|
|
|
$this->page = (isset($_GET['page'])) ? $_GET['page'] : 'content';
|
|
|
|
$this->users = new Users(['Settings' => $this->settings]);
|
|
if ($this->users->isLoggedIn())
|
|
{
|
|
$this->userdata = $this->users->getById($this->users->currentUserId());
|
|
|
|
//
|
|
// user can still be logged in but have been disabled by admin, so if they are, log them off
|
|
//
|
|
if ($this->userdata["role"] == Users::ROLE_DISABLED)
|
|
{
|
|
$this->users->logout();
|
|
$this->show403();
|
|
}
|
|
|
|
$this->userdata["categoryexclusions"] = $this->users->getCategoryExclusion($this->users->currentUserId());
|
|
|
|
// Change the theme to user's selected theme if they selected one, else use the admin one.
|
|
if ($this->pdo->getSetting('userselstyle') == 1) {
|
|
if (isset($this->userdata['style']) && $this->userdata['style'] !== 'None') {
|
|
$this->smarty->setTemplateDir(
|
|
array(
|
|
'user_frontend' => NN_WWW . 'templates/' . $this->userdata['style'] . '/views/frontend',
|
|
'frontend' => NN_WWW . 'templates/default/views/frontend'
|
|
)
|
|
);
|
|
}
|
|
}
|
|
|
|
//update lastlogin every 15 mins
|
|
if (strtotime($this->userdata['now'])-900 > strtotime($this->userdata['lastlogin']))
|
|
$this->users->updateSiteAccessed($this->userdata['id']);
|
|
|
|
$this->smarty->assign('userdata',$this->userdata);
|
|
$this->smarty->assign('loggedin',"true");
|
|
|
|
if (!empty($this->userdata['nzbvortex_api_key']) && (!empty($this->userdata['nzbvortex_server_url'])))
|
|
$this->smarty->assign('weHasVortex', true);
|
|
|
|
$sab = new SABnzbd($this);
|
|
$this->smarty->assign('sabintegrated', $sab->integratedBool);
|
|
if ($sab->integratedBool !== false && $sab->url != '' && $sab->apikey != '') {
|
|
$this->smarty->assign('sabapikeytype', $sab->apikeytype);
|
|
}
|
|
if ($this->userdata["role"] == Users::ROLE_ADMIN)
|
|
$this->smarty->assign('isadmin',"true");
|
|
|
|
if ($this->userdata["hideads"] == "1")
|
|
{
|
|
$this->pdo->setSetting(['adheader', '']);
|
|
$this->pdo->setSetting(['adbrowse', '']);
|
|
$this->pdo->setSetting(['addetail', '']);
|
|
}
|
|
|
|
$this->floodCheck($this->userdata["role"]);
|
|
}
|
|
else
|
|
{
|
|
$this->smarty->assign('isadmin',"false");
|
|
$this->smarty->assign('loggedin',"false");
|
|
$this->floodCheck();
|
|
$this->handleCaptcha();
|
|
|
|
}
|
|
|
|
$this->smarty->assign('site', $this->site);
|
|
$this->smarty->assign('page', $this);
|
|
}
|
|
|
|
/**
|
|
* Allow display on pages that require captcha
|
|
* and handle captcha responses.
|
|
*
|
|
* @notes Optimized for speed over code brevity since it's
|
|
* executed on every singe page.
|
|
* Instantiating Captcha() doesn't initialize the underlying libraries.
|
|
* shouldDisplay() does it if applicable.
|
|
*/
|
|
private function handleCaptcha() {
|
|
if ($this->captcha->shouldDisplay($this->page)) {
|
|
$this->smarty->assign('showCaptcha', true);
|
|
$this->smarty->assign('sitekey', $this->captcha->getSiteKey());
|
|
|
|
if ($this->isPostBack()) {
|
|
if (!$this->captcha->processCaptcha($_POST, $_SERVER['REMOTE_ADDR'])) {
|
|
$this->smarty->assign('error', $this->captcha->getError());
|
|
}
|
|
//Delete this key after using so it doesn't interfere with normal $_POST
|
|
//processing. (i.e. contact-us)
|
|
unset($_POST[Captcha::RECAPTCHA_POSTKEY]);
|
|
}
|
|
} else {
|
|
$this->smarty->assign('showCaptcha', false);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Unquotes quoted strings recursively in an array.
|
|
*
|
|
* @param $array
|
|
*/
|
|
private function stripSlashes(&$array)
|
|
{
|
|
foreach ($array as $key => $value) {
|
|
$array[$key] = (is_array($value) ? array_map('stripslashes', $value) : stripslashes($value));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Check if the user is flooding.
|
|
*/
|
|
public function floodCheck()
|
|
{
|
|
$waitTime = (NN_FLOOD_WAIT_TIME < 1 ? 5 : NN_FLOOD_WAIT_TIME);
|
|
// Check if this is not from CLI.
|
|
if (empty($argc)) {
|
|
// If flood wait set, the user must wait x seconds until they can access a page.
|
|
if (isset($_SESSION['flood_wait_until']) && $_SESSION['flood_wait_until'] > microtime(true)) {
|
|
$this->showFloodWarning($waitTime);
|
|
} else {
|
|
// If user not an admin, they are allowed three requests in FLOOD_THREE_REQUESTS_WITHIN_X_SECONDS seconds.
|
|
if (!isset($_SESSION['flood_check_hits'])) {
|
|
$_SESSION['flood_check_hits'] = 1;
|
|
$_SESSION['flood_check_time'] = microtime(true);
|
|
} else {
|
|
if ($_SESSION['flood_check_hits'] >= (NN_FLOOD_MAX_REQUESTS_PER_SECOND < 1 ? 5 : NN_FLOOD_MAX_REQUESTS_PER_SECOND)) {
|
|
if ($_SESSION['flood_check_time'] + 1 > microtime(true)) {
|
|
$_SESSION['flood_wait_until'] = microtime(true) + $waitTime;
|
|
unset($_SESSION['flood_check_hits']);
|
|
$this->showFloodWarning($waitTime);
|
|
} else {
|
|
$_SESSION['flood_check_hits'] = 1;
|
|
$_SESSION['flood_check_time'] = microtime(true);
|
|
}
|
|
} else {
|
|
$_SESSION['flood_check_hits']++;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Done in html here to reduce any smarty processing burden if a large flood is underway.
|
|
*
|
|
* @param int $seconds
|
|
*/
|
|
public function showFloodWarning($seconds = 5)
|
|
{
|
|
header('Retry-After: ' . $seconds);
|
|
$this->show503(
|
|
sprintf(
|
|
'Too many requests!</p><p>You must wait <b>%s seconds</b> before trying again.',
|
|
$seconds
|
|
)
|
|
);
|
|
}
|
|
|
|
//
|
|
// Inject content into the html head
|
|
//
|
|
public function addToHead($headcontent)
|
|
{
|
|
$this->head = $this->head."\n".$headcontent;
|
|
}
|
|
|
|
//
|
|
// Inject js/attributes into the html body tag
|
|
//
|
|
public function addToBody($attr)
|
|
{
|
|
$this->body = $this->body." ".$attr;
|
|
}
|
|
|
|
public function isPostBack()
|
|
{
|
|
return (strtoupper($_SERVER["REQUEST_METHOD"]) === "POST");
|
|
}
|
|
|
|
/**
|
|
* Show 404 page.
|
|
*/
|
|
public function show404()
|
|
{
|
|
header('HTTP/1.1 404 Not Found');
|
|
exit(
|
|
sprintf("
|
|
<html>
|
|
<head>
|
|
<title>404 - File not found.</title>
|
|
</head>
|
|
<body>
|
|
<h1>404 - File not found.</h1>
|
|
<p>%s%s</p>
|
|
<p>We could not find the above page on our servers.</p>
|
|
</body>
|
|
</html>",
|
|
$this->serverurl,
|
|
$this->page
|
|
)
|
|
);
|
|
}
|
|
|
|
public function show403($from_admin = false)
|
|
{
|
|
$redirect_path = ($from_admin) ? str_replace('/admin', '', WWW_TOP) : WWW_TOP;
|
|
header("Location: $redirect_path/login?redirect=".urlencode($_SERVER["REQUEST_URI"]));
|
|
die();
|
|
}
|
|
|
|
/**
|
|
* Show 503 page.
|
|
*
|
|
* @param string $message Message to display.
|
|
*/
|
|
public function show503($message = 'Your maximum api or download limit has been reached for the day.')
|
|
{
|
|
header('HTTP/1.1 503 Service Temporarily Unavailable');
|
|
exit(
|
|
sprintf("
|
|
<html>
|
|
<head>
|
|
<title>Service Unavailable.</title>
|
|
</head>
|
|
<body>
|
|
<h1>Service Unavailable.</h1>
|
|
<p>%s</p>
|
|
</body>
|
|
</html>",
|
|
$message
|
|
)
|
|
);
|
|
}
|
|
|
|
public function show429($retry='')
|
|
{
|
|
header('HTTP/1.1 429 Too Many Requests');
|
|
if ($retry != '')
|
|
header('Retry-After: '.$retry);
|
|
|
|
echo "
|
|
<html>
|
|
<head>
|
|
<title>Too Many Requests</title>
|
|
</head>
|
|
|
|
<body>
|
|
<h1>Too Many Requests</h1>
|
|
|
|
<p>Wait ".(($retry != '') ? ceil($retry/60).' minutes ' : '')."or risk being temporarily banned.</p>
|
|
|
|
</body>
|
|
</html>";
|
|
die();
|
|
}
|
|
|
|
public function render()
|
|
{
|
|
$this->smarty->display($this->page_template);
|
|
}
|
|
} |