Merge branch 'master' of /home/git/platal into profile_edit
[platal.git] / classes / platal.php
index 1a317f3..46de900 100644 (file)
@@ -1,6 +1,6 @@
 <?php
 /***************************************************************************
- *  Copyright (C) 2003-2006 Polytechnique.org                              *
+ *  Copyright (C) 2003-2007 Polytechnique.org                              *
  *  http://opensource.polytechnique.org/                                   *
  *                                                                         *
  *  This program is free software; you can redistribute it and/or modify   *
  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
  ***************************************************************************/
 
+define('PL_DO_AUTH',   300);
 define('PL_FORBIDDEN', 403);
 define('PL_NOT_FOUND', 404);
 
 class Platal
 {
-    var $__mods;
-    var $__hooks;
+    private $__mods;
+    private $__hooks;
 
-    var $ns;
-    var $path;
-    var $argv;
+    protected $https;
 
-    function Platal()
+    public $ns;
+    public $path;
+    public $argv;
+
+    public function __construct()
     {
         $modules    = func_get_args();
+        if (is_array($modules[0])) {
+            $modules = $modules[0];
+        }
         $this->path = trim(Get::_get('n', null), '/');
 
         $this->__mods  = array();
@@ -41,12 +47,13 @@ class Platal
 
         array_unshift($modules, 'core');
         foreach ($modules as $module) {
+            $module = strtolower($module);
             $this->__mods[$module] = $m = PLModule::factory($module);
             $this->__hooks += $m->handlers();
         }
     }
 
-    function pl_self($n = null)
+    public function pl_self($n = null)
     {
         if (is_null($n))
             return $this->path;
@@ -60,7 +67,7 @@ class Platal
         return join('/', array_slice($this->argv, 0, $n));
     }
 
-    function find_hook()
+    protected function find_hook()
     {
         $p = $this->path;
 
@@ -81,56 +88,168 @@ class Platal
             return null;
         }
 
+        $this->https = ($hook['type'] & NO_HTTPS) ? false : true;
         $this->argv    = explode('/', substr($this->path, strlen($p)));
         $this->argv[0] = $p;
 
         return $hook;
     }
 
-    function call_hook(&$page)
+    protected function find_nearest_key($key, array &$array)
     {
-        $hook = $this->find_hook();
+        $keys    = array_keys($array);
+        if (in_array($key, $keys)) {
+            return $key;
+        }
+
+        if (($pos = strpos($key, '.php')) !== false) {
+            $key = substr($key, 0, $pos);
+        }
+
+        $has_end = in_array("#final#", $keys);
+        if (strlen($key) > 24 && $has_end) {
+            return "#final#";
+        }
+
+        foreach ($keys as $k) {
+            if ($k == "#final#") {
+                continue;
+            }
+            $lev = levenshtein($key, $k);
+            if ((!isset($val) || $lev < $val) && $lev <= (strlen($k)*2)/3) {
+                $val  = $lev;
+                $best = $k;
+            }
+        }
+        if (!isset($best) && $has_end) {
+            return "#final#";
+        } else {
+            return $best;
+        }
+        return null;
+    }
+
+    public function near_hook()
+    {
+        $hooks = array();
+        foreach ($this->__hooks as $hook=>$handler) {
+            if (!empty($handler['perms']) && $handler['perms'] != S::v('perms')) {
+                continue;
+            }
+            $parts = split('/', $hook);
+            $place =& $hooks;
+            foreach ($parts as $part) {
+                if (!isset($place[$part])) {
+                    $place[$part] = array();
+                }
+                $place =& $place[$part];
+            }
+            $place["#final#"] = array();
+        }
 
-        if (is_null($hook)) {
+        $p = split('/', $this->path);
+        $place =& $hooks;
+        $link  = '';
+        foreach ($p as $k) {
+            if (!isset($ended)) {
+                $key = $this->find_nearest_key($k, $place);
+            } else {
+                $key = $k;
+            }
+            if ($key == "#final#") {
+                if (!array_key_exists($link, $this->__hooks)) {
+                    return null;
+                }
+                $key = $k;
+                $ended = true;
+            }
+            if (!is_null($key)) {
+                if (!empty($link)) {
+                    $link .= '/';
+                }
+                $link .= $key;
+                $place =& $place[$key];
+            } else {
+                return null;
+            }
+        }
+        if ($link != $this->path) {
+            return $link;
+        }
+        return null;
+    }
+
+    protected function check_perms($perms)
+    {
+        if (!$perms) { // No perms, no check
+            return true;
+        }
+        $s_perms = S::v('perms');
+        return $s_perms->hasFlagCombination($perms);
+    }
+
+    private function call_hook(PlatalPage &$page)
+    {
+        $hook = $this->find_hook();
+        if (empty($hook)) {
             return PL_NOT_FOUND;
         }
+        global $globals;
+        if ($this->https && !$_SERVER['HTTPS'] && $globals->core->secure_domain) {
+            http_redirect('https://' . $globals->core->secure_domain . $_SERVER['REQUEST_URI']);
+        }
 
-        $args    = $this->argv;
-        $args[0] = &$page;
+        $args    =  $this->argv;
+        $args[0] =$page;
 
         if ($hook['auth'] > S::v('auth', AUTH_PUBLIC)) {
-            global $globals;
+            if ($hook['type'] & DO_AUTH) {
+                if (!call_user_func(array($globals->session, 'doAuth'))) {
+                    $this->force_login($page);
+                }
+            } else {
+                return PL_FORBIDDEN;
+            }
+        }
+        if ($hook['auth'] != AUTH_PUBLIC && !$this->check_perms($hook['perms'])) {
+            return PL_FORBIDDEN;
+        }
 
+        $val = call_user_func_array($hook['hook'], $args);
+        if ($val & PL_DO_AUTH) {
+            // The handler need a better auth with the current args
             if (!call_user_func(array($globals->session, 'doAuth'))) {
                 $this->force_login($page);
             }
+            $val = call_user_func_array($hook['hook'], $args);
         }
-
-        return call_user_func_array($hook['hook'], $args);
+        return $val;
     }
 
-    function force_login(&$page)
+    public function force_login(PlatalPage &$page)
     {
         if (S::logged()) {
-            $page->changeTpl('password_prompt_logged.tpl');
+            $page->changeTpl('core/password_prompt_logged.tpl');
             $page->addJsLink('do_challenge_response_logged.js');
         } else {
-            $page->changeTpl('password_prompt.tpl');
+            $page->changeTpl('core/password_prompt.tpl');
             $page->addJsLink('do_challenge_response.js');
-       }
+        }
+        $page->assign('platal', $this);
         $page->run();
     }
 
-    function run()
+    public function run()
     {
         global $page;
 
-        new_skinned_page('index.tpl');
+        new_skinned_page('platal/index.tpl');
 
         if (empty($this->path)) {
             $this->path = 'index';
         }
 
+        $page->assign('platal', $this);
         switch ($this->call_hook($page)) {
           case PL_FORBIDDEN:
             $this->__mods['core']->handler_403($page);
@@ -140,11 +259,12 @@ class Platal
             $this->__mods['core']->handler_404($page);
             break;
         }
-        $page->assign_by_ref('platal', $this);
+
+        $page->assign('platal', $this);
         $page->run();
     }
 
-    function on_subscribe($forlife, $uid, $promo, $pass)
+    public function on_subscribe($forlife, $uid, $promo, $pass)
     {
         $args = func_get_args();
         foreach ($this->__mods as $mod) {
@@ -155,4 +275,5 @@ class Platal
     }
 }
 
+// vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
 ?>