index.php

Go to the documentation of this file.

<?php
/* Copyright (C) 2016-2017 Laurent Destailleur  <eldy@users.sourceforge.net>
 * Copyright (C) 2024-2025  MDW             <mdeweerd@users.noreply.github.com>
 * Copyright (C) 2024-2025  Frédéric France             <frederic.france@free.fr>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 *
 * Note about $_SERVER:
 * REQUEST_URI: /test/before_rewrite/script.php/path/info?q=helloword
 * PHP_SELF: /test/after_rewrite/script.php/path/info
 * QUERY_STRING: q=helloword
 * SCRIPT_NAME: /test/after_rewrite/script.php
 * PATH_INFO: /path/info
 * SCRIPT_FILENAME: /var/www/test/php/script.php
 * __FILE__ : /var/www/test/php/script_included.php
 */
 
if (!defined('NOTOKENRENEWAL')) {
  define('NOTOKENRENEWAL', 1); // Disables token renewal
}
if (!defined('NOLOGIN')) {
  define("NOLOGIN", 1);
}
if (!defined('NOCSRFCHECK')) {
  define("NOCSRFCHECK", 1); // We accept to go on this page from external web site.
}
if (!defined('NOREQUIREMENU')) {
  define('NOREQUIREMENU', '1');
}
if (!defined('NOREQUIREHTML')) {
  define('NOREQUIREHTML', '1');
}
if (!defined('NOREQUIREAJAX')) {
  define('NOREQUIREAJAX', '1');
}
if (!defined('NOIPCHECK')) {
  define('NOIPCHECK', '1'); // Do not check IP defined into conf $dolibarr_main_restrict_ip
}
if (!defined('NOBROWSERNOTIF')) {
  define('NOBROWSERNOTIF', '1');
}
 
function llxHeader($head = '', $title = '', $help_url = '', $target = '', $disablejs = 0, $disablehead = 0, $arrayofjs = '', $arrayofcss = '', $morequerystring = '', $morecssonbody = '', $replacemainareaby = '', $disablenofollow = 0, $disablenoindex = 0)  // @phan-suppress-current-line PhanRedefineFunction
{
}
function llxFooter($comment = '', $zone = 'private', $disabledoutputofmessages = 0)  // @phan-suppress-current-line PhanRedefineFunction
{
}
 
require '../../master.inc.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
$error = 0;
$websitekey = GETPOST('website', 'alpha');
$pageid = GETPOST('page', 'alpha') ? GETPOST('page', 'alpha') : GETPOST('pageid', 'alpha');
$pageref = GETPOST('pageref', 'alphanohtml') ? GETPOST('pageref', 'alphanohtml') : '';
// If page is xx/pagename, xx is a language, we set $pageref to pagename
$reg = array();
if (preg_match('/^(\w\w)\/(.*)$/', $pageref, $reg)) {
  $pageref = $reg[2];
}
 
$accessallowed = 1;
$type = '';
 
 
if (empty($pageid)) {
  require_once DOL_DOCUMENT_ROOT.'/website/class/website.class.php';
  require_once DOL_DOCUMENT_ROOT.'/website/class/websitepage.class.php';
 
  $object = new Website($db);
  $object->fetch(0, $websitekey);
 
  if (empty($object->id)) {
    if (empty($pageid)) {
      // Return header 404
      header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found", true, 404);
 
      include DOL_DOCUMENT_ROOT.'/public/error-404.php';
      exit;
    }
  }
 
  $objectpage = new WebsitePage($db);
 
  if ($pageref) {
    // @phan-suppress-next-line PhanPluginSuspiciousParamPosition
    $result = $objectpage->fetch(0, (string) $object->id, $pageref);
    if ($result > 0) {
      $pageid = $objectpage->id;
    } elseif ($result == 0) {
      // Page not found from ref=pageurl, we try using alternative alias
      // @phan-suppress-next-line PhanPluginSuspiciousParamPosition
      $result = $objectpage->fetch(0, (string) $object->id, null, $pageref);
      if ($result > 0) {
        $pageid = $objectpage->id;
      }
    }
  } else {
    if ($object->fk_default_home > 0) {
      $result = $objectpage->fetch($object->fk_default_home);
      if ($result > 0) {
        $pageid = $objectpage->id;
      }
    }
 
    if (empty($pageid)) {
      $array = $objectpage->fetchAll($object->id); // TODO Can filter on container of type pages only ?
      if (is_array($array) && count($array) > 0) {
        $firstrep = reset($array);
        $pageid = $firstrep->id;
      }
    }
  }
}
if (empty($pageid)) {
  // Return header 404
  header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found", true, 404);
 
  $langs->load("website");
 
  if (!GETPOSTISSET('pageref')) {
    print $langs->trans("PreviewOfSiteNotYetAvailable", $websitekey);
  }
 
  include DOL_DOCUMENT_ROOT.'/public/error-404.php';
  exit;
}
if (empty($pageref)) {
  $objectpage = new WebsitePage($db);
  $result = $objectpage->fetch($pageid);
  if ($result > 0) {
    $pageref = (string) $objectpage->ref;
  }
}
if (preg_match('/^_(library|service)_page_/', $pageref)) {
  $originalcontentonly = 1;
}
 
$appli = constant('DOL_APPLICATION_TITLE');
if (getDolGlobalString('MAIN_APPLICATION_TITLE')) {
  $appli = getDolGlobalString('MAIN_APPLICATION_TITLE');
}
 
 
 
/*
 * View
 */
 
//print 'Directory with '.$appli.' websites.<br>';
 
 
// Security: Delete string ../ into $original_file
global $dolibarr_main_data_root;
 
if ($pageid == 'css') {   // No more used ?
  header('Content-type: text/css');
  // Important: Following code is to avoid page request by browser and PHP CPU at each Dolibarr page access.
  //header('Cache-Control: max-age=3600, public, must-revalidate');
  header('Cache-Control: no-cache');
  $original_file = $dolibarr_main_data_root.($conf->entity > 1 ? '/'.$conf->entity : '').'/website/'.$websitekey.'/styles.css.php';
} else {
  $original_file = $dolibarr_main_data_root.($conf->entity > 1 ? '/'.$conf->entity : '').'/website/'.$websitekey.'/page'.$pageid.'.tpl.php';
}
 
// Find the subdirectory name as the reference
$refname = basename(dirname($original_file)."/");
 
// Security:
// Limit access if permissions are insufficient
if (!$accessallowed) {
  accessforbidden();
}
 
// Security:
// On interdit les remontees de repertoire ainsi que les pipe dans
// les noms de fichiers.
if (preg_match('/\.\./', $original_file) || preg_match('/[<>|]/', $original_file)) {
  dol_syslog("Refused to deliver file ".$original_file);
  $file = basename($original_file); // Do no show plain path of original_file in shown error message
  dol_print_error(null, $langs->trans("ErrorFileNameInvalid", $file));
  exit;
}
 
clearstatcache();
 
$filename = basename($original_file);
 
// Output file on browser
dol_syslog("index.php include $original_file $filename content-type=$type");
$original_file_osencoded = dol_osencode($original_file); // New file name encoded in OS encoding charset
 
// This test if file exists should be useless. We keep it to find bug more easily
if (!file_exists($original_file_osencoded)) {
  // Return header 404
  header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found", true, 404);
 
  $langs->load("website");
  print $langs->trans("RequestedPageHasNoContentYet", $pageid);
 
  include DOL_DOCUMENT_ROOT.'/public/error-404.php';
  exit;
}
 
 
// Output page content
define('USEDOLIBARRSERVER', 1);
if (!isset($originalcontentonly)) {
  print '<!-- Page content '.$original_file.' rendered with DOLIBARR SERVER : Html with CSS link and html header + Body that was saved into tpl dir -->'."\n";
}
include_once $original_file_osencoded; // Note: The pageXXX.tpl.php showed here contains a formatage with dolWebsiteOutput() at end of page.
 
if (is_object($db)) {
  $db->close();
}