国内流行的内容管理系统(CMS)多端全媒体解决方案 https://www.dedebiz.com
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

356 lines
9.6KB

  1. <?php
  2. /**
  3. * @version $Id: common.inc.php 3 17:44 2010-11-23 tianya $
  4. * @package DedeCMS.Libraries
  5. * @copyright Copyright (c) 2007 - 2020, DesDev, Inc.
  6. * @license http://help.dedecms.com/usersguide/license.html
  7. * @link http://www.dedecms.com
  8. */
  9. // 生产环境使用production
  10. define('DEDE_ENVIRONMENT', 'dev');
  11. if ( DEDE_ENVIRONMENT == 'production' )
  12. {
  13. error_reporting(E_ALL || ~E_NOTICE);
  14. } else {
  15. error_reporting(E_ALL);
  16. }
  17. define('DEDEINC', str_replace("\\", '/', dirname(__FILE__) ) );
  18. define('DEDEROOT', str_replace("\\", '/', substr(DEDEINC,0,-8) ) );
  19. define('DEDEDATA', DEDEROOT.'/data');
  20. define('DEDEMEMBER', DEDEROOT.'/member');
  21. define('DEDETEMPLATE', DEDEROOT.'/templets');
  22. // ------------------------------------------------------------------------
  23. define('DEDEMODEL', './model');
  24. define('DEDECONTROL', './control');
  25. define('DEDEAPPTPL', './templates');
  26. define('DEBUG_LEVEL', FALSE);
  27. if (version_compare(PHP_VERSION, '5.3.0', '<') && function_exists("get_magic_quotes_gpc"))
  28. {
  29. set_magic_quotes_runtime(0);
  30. }
  31. if (version_compare(PHP_VERSION, '5.4.0', '>='))
  32. {
  33. if (!function_exists('session_register'))
  34. {
  35. function session_register()
  36. {
  37. $args = func_get_args();
  38. foreach ($args as $key){
  39. $_SESSION[$key]=$GLOBALS[$key];
  40. }
  41. }
  42. function session_is_registered($key)
  43. {
  44. return isset($_SESSION[$key]);
  45. }
  46. function session_unregister($key){
  47. unset($_SESSION[$key]);
  48. }
  49. }
  50. }
  51. //是否启用mb_substr替换cn_substr来提高效率
  52. $cfg_is_mb = $cfg_is_iconv = FALSE;
  53. if(function_exists('mb_substr')) $cfg_is_mb = TRUE;
  54. if(function_exists('iconv_substr')) $cfg_is_iconv = TRUE;
  55. function _RunMagicQuotes(&$svar)
  56. {
  57. if(function_exists("get_magic_quotes_gpc") && !@get_magic_quotes_gpc())
  58. {
  59. if( is_array($svar) )
  60. {
  61. foreach($svar as $_k => $_v) $svar[$_k] = _RunMagicQuotes($_v);
  62. }
  63. else
  64. {
  65. if( strlen($svar)>0 && preg_match('#^(cfg_|GLOBALS|_GET|_POST|_COOKIE|_SESSION)#',$svar) )
  66. {
  67. exit('Request var not allow!');
  68. }
  69. $svar = addslashes($svar);
  70. }
  71. }
  72. return $svar;
  73. }
  74. if (!defined('DEDEREQUEST'))
  75. {
  76. //检查和注册外部提交的变量 (2011.8.10 修改登录时相关过滤)
  77. function CheckRequest(&$val) {
  78. if (is_array($val)) {
  79. foreach ($val as $_k=>$_v) {
  80. if($_k == 'nvarname') continue;
  81. CheckRequest($_k);
  82. CheckRequest($val[$_k]);
  83. }
  84. } else
  85. {
  86. if( strlen($val)>0 && preg_match('#^(cfg_|GLOBALS|_GET|_POST|_COOKIE|_SESSION)#',$val) )
  87. {
  88. exit('Request var not allow!');
  89. }
  90. }
  91. }
  92. //var_dump($_REQUEST);exit;
  93. CheckRequest($_REQUEST);
  94. CheckRequest($_COOKIE);
  95. foreach(Array('_GET','_POST','_COOKIE') as $_request)
  96. {
  97. foreach($$_request as $_k => $_v)
  98. {
  99. if($_k == 'nvarname') ${$_k} = $_v;
  100. else ${$_k} = _RunMagicQuotes($_v);
  101. }
  102. }
  103. }
  104. //系统相关变量检测
  105. if(!isset($needFilter))
  106. {
  107. $needFilter = false;
  108. }
  109. $registerGlobals = @ini_get("register_globals");
  110. $isUrlOpen = @ini_get("allow_url_fopen");
  111. $isSafeMode = @ini_get("safe_mode");
  112. if( preg_match('/windows/i', @getenv('OS')) )
  113. {
  114. $isSafeMode = false;
  115. }
  116. //系统配置参数
  117. require_once(DEDEDATA."/config.cache.inc.php");
  118. //Session保存路径
  119. $sessSaveHandler = @ini_get("session.save_handler");
  120. if ($sessSaveHandler !== "files") {
  121. @ini_set("session.save_handler", "files");
  122. }
  123. $enkey = substr(md5(substr($cfg_cookie_encode,0,5)),0,10);
  124. $sessSavePath = DEDEDATA."/sessions_{$enkey}";
  125. if ( !is_dir($sessSavePath) ) mkdir($sessSavePath);
  126. if(is_writeable($sessSavePath) && is_readable($sessSavePath))
  127. {
  128. session_save_path($sessSavePath);
  129. }
  130. //转换上传的文件相关的变量及安全处理、并引用前台通用的上传函数
  131. if($_FILES)
  132. {
  133. require_once(DEDEINC.'/uploadsafe.inc.php');
  134. }
  135. //数据库配置文件
  136. require_once(DEDEDATA.'/common.inc.php');
  137. if ( !isset($cfg_dbtype) )
  138. {
  139. $cfg_dbtype = 'mysql';
  140. }
  141. //载入系统验证安全配置
  142. if(file_exists(DEDEDATA.'/safe/inc_safe_config.php'))
  143. {
  144. require_once(DEDEDATA.'/safe/inc_safe_config.php');
  145. if(!empty($safe_faqs)) $safefaqs = unserialize($safe_faqs);
  146. }
  147. //Session跨域设置
  148. if(!empty($cfg_domain_cookie))
  149. {
  150. @session_set_cookie_params(0,'/',$cfg_domain_cookie);
  151. }
  152. //php5.1版本以上时区设置
  153. //由于这个函数对于是php5.1以下版本并无意义,因此实际上的时间调用,应该用MyDate函数调用
  154. if(PHP_VERSION > '5.1')
  155. {
  156. $time51 = $cfg_cli_time * -1;
  157. @date_default_timezone_set('Etc/GMT'.$time51);
  158. }
  159. $cfg_isUrlOpen = @ini_get("allow_url_fopen");
  160. //用户访问的网站host
  161. $cfg_clihost = 'http://'.$_SERVER['HTTP_HOST'];
  162. //站点根目录
  163. $cfg_basedir = preg_replace('#'.$cfg_cmspath.'\/include$#i', '', DEDEINC);
  164. if($cfg_multi_site == 'Y')
  165. {
  166. $cfg_mainsite = $cfg_basehost;
  167. }
  168. else
  169. {
  170. $cfg_mainsite = '';
  171. }
  172. //模板的存放目录
  173. $cfg_templets_dir = $cfg_cmspath.'/templets';
  174. $cfg_templeturl = $cfg_mainsite.$cfg_templets_dir;
  175. $cfg_templets_skin = empty($cfg_df_style)? $cfg_mainsite.$cfg_templets_dir."/default" : $cfg_mainsite.$cfg_templets_dir."/$cfg_df_style";
  176. //cms安装目录的网址
  177. $cfg_cmsurl = $cfg_mainsite.$cfg_cmspath;
  178. //插件目录,这个目录是用于存放计数器、投票、评论等程序的必要动态程序
  179. $cfg_plus_dir = $cfg_cmspath.'/plus';
  180. $cfg_phpurl = $cfg_mainsite.$cfg_plus_dir;
  181. $cfg_static_dir = $cfg_cmspath.'/static';
  182. $cfg_staticurl = $cfg_mainsite.$cfg_static_dir;
  183. $cfg_mobile_dir = $cfg_cmspath.'/m';
  184. $cfg_mobileurl = $cfg_mainsite.$cfg_mobile_dir;
  185. $cfg_data_dir = $cfg_cmspath.'/data';
  186. $cfg_dataurl = $cfg_mainsite.$cfg_data_dir;
  187. //会员目录
  188. $cfg_member_dir = $cfg_cmspath.'/member';
  189. $cfg_memberurl = $cfg_mainsite.$cfg_member_dir;
  190. //专题列表的存放路径
  191. $cfg_special = $cfg_cmspath.'/special';
  192. $cfg_specialurl = $cfg_mainsite.$cfg_special;
  193. //附件目录
  194. $cfg_medias_dir = $cfg_cmspath.$cfg_medias_dir;
  195. $cfg_mediasurl = $cfg_mainsite.$cfg_medias_dir;
  196. //上传的普通图片的路径,建议按默认
  197. $cfg_image_dir = $cfg_medias_dir.'/allimg';
  198. //上传的缩略图
  199. $ddcfg_image_dir = $cfg_medias_dir.'/litimg';
  200. //用户投稿图片存放目录
  201. $cfg_user_dir = $cfg_medias_dir.'/userup';
  202. //上传的软件目录
  203. $cfg_soft_dir = $cfg_medias_dir.'/soft';
  204. //上传的多媒体文件目录
  205. $cfg_other_medias = $cfg_medias_dir.'/media';
  206. //软件摘要信息,****请不要删除本项**** 否则系统无法正确接收系统漏洞或升级信息
  207. $cfg_version = 'V6_UTF8';
  208. $cfg_soft_lang = 'utf-8';
  209. $cfg_soft_public = 'base';
  210. $cfg_softname = '织梦内容管理系统';
  211. $cfg_soft_enname = 'DedeCMS';
  212. $cfg_soft_devteam = 'DedeCMS官方团队';
  213. //文档的默认命名规则
  214. $art_shortname = $cfg_df_ext = '.html';
  215. $cfg_df_namerule = '{typedir}/{Y}/{M}{D}/{aid}'.$cfg_df_ext;
  216. //新建目录的权限,如果你使用别的属性,本程不保证程序能顺利在Linux或Unix系统运行
  217. if(isset($cfg_ftp_mkdir) && $cfg_ftp_mkdir=='Y')
  218. {
  219. $cfg_dir_purview = '0755';
  220. }
  221. else
  222. {
  223. $cfg_dir_purview = 0755;
  224. }
  225. //会员是否使用精简模式(已禁用)
  226. $cfg_mb_lit = 'N';
  227. //特殊全局变量
  228. $_sys_globals['curfile'] = '';
  229. $_sys_globals['typeid'] = 0;
  230. $_sys_globals['typename'] = '';
  231. $_sys_globals['aid'] = 0;
  232. if(empty($cfg_addon_savetype))
  233. {
  234. $cfg_addon_savetype = 'Ymd';
  235. }
  236. if($cfg_sendmail_bysmtp=='Y' && !empty($cfg_smtp_usermail))
  237. {
  238. $cfg_adminemail = $cfg_smtp_usermail;
  239. }
  240. //对全局分页传递参数进行过滤
  241. if (isset($GLOBALS['PageNo'])) {
  242. $GLOBALS['PageNo'] = intval($GLOBALS['PageNo']);
  243. }
  244. if (isset($GLOBALS['TotalResult'])) {
  245. $GLOBALS['TotalResult'] = intval($GLOBALS['TotalResult']);
  246. }
  247. // ------------------------------------------------------------------------
  248. // 设定缓存配置信息
  249. if ($cfg_memcache_enable == 'Y')
  250. {
  251. $cache_helper_config = array();
  252. $cache_helper_config['memcache']['is_mc_enable'] = $GLOBALS["cfg_memcache_enable"];
  253. $cache_helper_config['memcache']['mc'] = array (
  254. 'default' => $GLOBALS["cfg_memcache_mc_defa"],
  255. 'other' => $GLOBALS["cfg_memcache_mc_oth"]
  256. );
  257. $cache_helper_config['memcache']['mc_cache_time'] = $GLOBALS["cfg_puccache_time"];
  258. }
  259. if(!isset($cfg_NotPrintHead)) {
  260. header("Content-Type: text/html; charset={$cfg_soft_lang}");
  261. }
  262. //自动加载类库处理
  263. if (version_compare(PHP_VERSION, '7.2.0', '>='))
  264. {
  265. require_once(DEDEINC.'/autoload7.inc.php');
  266. } else {
  267. require_once(DEDEINC.'/autoload.inc.php');
  268. }
  269. //引入数据库类
  270. if ( $GLOBALS['cfg_dbtype'] =='mysql' )
  271. {
  272. if ($GLOBALS['cfg_mysql_type'] == 'mysqli' && function_exists("mysqli_init") || !function_exists('mysql_connect'))
  273. {
  274. require_once(DEDEINC.'/dedesqli.class.php');
  275. } else {
  276. require_once(DEDEINC.'/dedesql.class.php');
  277. }
  278. } else {
  279. require_once(DEDEINC.'/dedesqlite.class.php');
  280. }
  281. //全局常用函数
  282. require_once(DEDEINC.'/common.func.php');
  283. // 模块MVC框架需要的控制器和模型基类
  284. require_once(DEDEINC.'/control.class.php');
  285. require_once(DEDEINC.'/model.class.php');
  286. //全局常用函数
  287. require_once(DEDEINC.'/dedebiz.class.php');
  288. //载入小助手配置,并对其进行默认初始化
  289. if(file_exists(DEDEDATA.'/helper.inc.php'))
  290. {
  291. require_once(DEDEDATA.'/helper.inc.php');
  292. // 若没有载入配置,则初始化一个默认小助手配置
  293. if (!isset($cfg_helper_autoload))
  294. {
  295. $cfg_helper_autoload = array('util', 'charset', 'string', 'time', 'cookie');
  296. }
  297. // 初始化小助手
  298. helper($cfg_helper_autoload);
  299. }