svn/view/index.php

<?php

// Copyright (c) 2009 Katsuhisa Yuasa <berupon [at] gmail.com>
// License http://www.opensource.org/licenses/mit-license.html

require_once 'version_check.php';

require_once 'config.php';

require_once 'common.php';
require_once 'validator.php';
require_once 'domain.php';
require_once 'buggy.class.php';

session_start();

//session_cache_limiter('nocache');

$tpl = array();

try {
        $con = openDatabase(DB_PATH);
}catch (Exception $e) {
        echo 'Caught exception: ',  $e->getMessage(), "\n";
        exit;
}

$params = array_merge($_GET, $_POST);
if (get_magic_quotes_gpc()) {
        function stripslashes_deep($value) {
                $value =
                        is_array($value)
                                ?
                        array_map('stripslashes_deep', $value)
                                :
                        stripslashes($value)
                ;
                return $value;
        }
        
    $params = array_map('stripslashes_deep', $params);
}

// 入力文字列のエンコーディング検査
// http://gihyo.jp/dev/serial/01/php-security/extra/001206
{
        define('INPUT_ENCODING', 'UTF-8');
        function input_encoding_check_cb($k, $v) {
                // input_encoding_checkのコールバック関数
                if (!mb_check_encoding($k, INPUT_ENCODING) || !mb_check_encoding($v, INPUT_ENCODING)) {
                        trigger_error('不正な文字エンコーディングを検出しました');
                        die('System detected some errors');
                }
        }
        array_walk_recursive($params, 'input_encoding_check_cb');
}

// location
$relativePath = '';

$debug = array();

$base = parse_url($_SERVER['SCRIPT_NAME']);
$uri  = parse_url($_SERVER['REQUEST_URI']);
//echo $_SERVER['SCRIPT_NAME'] . "<BR>";
//echo $_SERVER['REQUEST_URI'] . "<BR>";

$base = explode(DIRECTORY_SEPARATOR, $base['path']);
$uri  = explode(DIRECTORY_SEPARATOR, $uri['path']);
$diffs = array_values(array_diff_assoc($uri, $base));
$path = implode(DIRECTORY_SEPARATOR, $diffs);
$relativePath = str_repeat('..'.DIRECTORY_SEPARATOR, max(0, count($diffs)-1));
if (count($path) && strlen($path)) {
        $dest = $path;
}else {
        $dest = 'main';
}

// 認証処理に飛ばす
if (!array_key_exists('authenticated', $_SESSION)) {
        $_SESSION['authenticated'] = false;
}
if ($_SESSION['authenticated']) {
        if ($dest == 'login') {
                $addr = dirname($_SERVER['SCRIPT_NAME']) . DIRECTORY_SEPARATOR . 'index.php';
                header('Location: ' . $addr);
                exit;
        }
}else {
        if ($dest != 'login' && !DISABLE_AUTHENTICATION) {
                $addr = dirname($_SERVER['SCRIPT_NAME']) . DIRECTORY_SEPARATOR . 'login';
                header('Location: ' . $addr);
                exit;
        }
}

$tpl['userid'] = (array_key_exists('userid', $_SESSION)) ? $_SESSION['userid'] : '';
$tpl['relative_path'] = $relativePath;
//$breadcrumbs = '/ ' . str_replace('/', ' / ', $dest);

$privileges = getPrivileges($con);
$tpl['privileges'] = $privileges;
$debug['params'] = $params;
$debug['SESSION'] = $_SESSION;

//usleep(200000);

try {
        $loadPath = $dest . '.inc.php';
        if (file_exists($loadPath)) {
                include $loadPath;
        }else {
                echo <<<HEAR
リクエストされたページは見つかりません。移動します。
<META HTTP-EQUIV=Refresh CONTENT="2; URL=index.php">
HEAR;
        }
        exit;
}catch (PDOException $e) {
        if (IS_DEBUGGING) {
                echo $e;
                var_export($con->errorInfo());
        }
}
