X-Git-Url: http://git.polytechnique.org/?a=blobdiff_plain;f=classes%2Fplatal.php;h=4c1f60a8521886e19383b2ba1dad53e083c4bcec;hb=07e48b6bbcc3da03e8867d9ec4c0198109691596;hp=81900f0320c4847788e1ddb146521ea9780d45c0;hpb=862a62fb38d4d1ba1b5b70a2fd2d57c5081b8627;p=platal.git diff --git a/classes/platal.php b/classes/platal.php index 81900f0..4c1f60a 100644 --- a/classes/platal.php +++ b/classes/platal.php @@ -1,6 +1,6 @@ __mods[$module] = $m = PLModule::factory($module); $this->__hooks += $m->handlers(); } + + global $globals; + if ($globals->mode == '') { + pl_redirect('index.html'); + } } public function pl_self($n = null) @@ -85,6 +93,7 @@ class Platal return null; } + $this->https = ($hook['type'] & NO_HTTPS) ? false : true; $this->argv = explode('/', substr($this->path, strlen($p))); $this->argv[0] = $p; @@ -112,14 +121,16 @@ class Platal continue; } $lev = levenshtein($key, $k); - if ((!isset($val) || $lev < $val) && $lev <= (strlen($k)*2)/3) { + + if ((!isset($val) || $lev < $val) + && ($lev <= strlen($k)/2 || strpos($k, $key) !== false || strpos($key, $k) !== false)) { $val = $lev; $best = $k; } } if (!isset($best) && $has_end) { return "#final#"; - } else { + } else if (isset($best)) { return $best; } return null; @@ -128,8 +139,9 @@ class Platal public function near_hook() { $hooks = array(); + $leafs = array(); foreach ($this->__hooks as $hook=>$handler) { - if (!empty($handler['perms']) && $handler['perms'] != S::v('perms')) { + if (!$this->check_perms($handler['perms'])) { continue; } $parts = split('/', $hook); @@ -138,11 +150,20 @@ class Platal if (!isset($place[$part])) { $place[$part] = array(); } - $place =& $place[$part]; + $place =& $place[$part]; + } + $leaf = $parts[count($parts)-1]; + if (!isset($leafs[$leaf])) { + $leafs[$leaf] = $hook; + } else if (is_array($leafs[$leaf])) { + $leafs[$leaf][] = $hook; + } else { + $leafs[$leaf] = array($hook, $leafs[$leaf]); } $place["#final#"] = array(); } + // search for the nearest full path $p = split('/', $this->path); $place =& $hooks; $link = ''; @@ -154,7 +175,8 @@ class Platal } if ($key == "#final#") { if (!array_key_exists($link, $this->__hooks)) { - return null; + $link = ''; + break; } $key = $k; $ended = true; @@ -166,13 +188,38 @@ class Platal $link .= $key; $place =& $place[$key]; } else { - return null; + $link = ''; + break; } } - if ($link != $this->path) { + if ($link == $this->path) { + $link = ''; + } + if ($link && levenshtein($link, $this->path) < strlen($link)/3) { return $link; } - return null; + + // search for missing namespace (the given name is a leaf) + $leaf = array_shift($p); + $args = count($p) ? '/' . implode('/', $p) : ''; + if (isset($leafs[$leaf]) && !is_array($leafs[$leaf]) && $leafs[$leaf] != $this->path) { + return $leafs[$leaf] . $args; + } + unset($val); + $best = null; + foreach ($leafs as $k=>&$path) { + if (is_array($path)) { + continue; + } + $lev = levenshtein($leaf, $k); + + if ((!isset($val) || $lev < $val) + && ($lev <= strlen($k)/2 || strpos($k, $leaf) !== false || strpos($leaf, $k) !== false)) { + $val = $lev; + $best = $path; + } + } + return $best == null ? ( $link ? $link : null ) : $best . $args; } protected function check_perms($perms) @@ -181,23 +228,7 @@ class Platal return true; } $s_perms = S::v('perms'); - - // hook perms syntax is - $perms = explode(',', $perms); - foreach ($perms as $perm) - { - $ok = true; - $rights = explode(':', $perm); - foreach ($rights as $right) { - if (($right{0} == '!' && $s_perms->hasFlag(substr($right, 1))) || !$s_perms->hasFlag($right)) { - $ok = false; - } - } - if ($ok) { - return true; - } - } - return false; + return $s_perms->hasFlagCombination($perms); } private function call_hook(PlatalPage &$page) @@ -206,14 +237,16 @@ class Platal if (empty($hook)) { return PL_NOT_FOUND; } + global $globals; + if ($this->https && !$_SERVER['HTTPS'] && $globals->core->secure_domain) { + http_redirect('https://' . $globals->core->secure_domain . $_SERVER['REQUEST_URI']); + } - $args = $this->argv; - $args[0] = &$page; + $args = $this->argv; + $args[0] =& $page; if ($hook['auth'] > S::v('auth', AUTH_PUBLIC)) { - if ($hook['type'] == DO_AUTH) { - global $globals; - + if ($hook['type'] & DO_AUTH) { if (!call_user_func(array($globals->session, 'doAuth'))) { $this->force_login($page); } @@ -227,7 +260,6 @@ class Platal $val = call_user_func_array($hook['hook'], $args); if ($val == PL_DO_AUTH) { - global $globals; // The handler need a better auth with the current args if (!call_user_func(array($globals->session, 'doAuth'))) { $this->force_login($page); @@ -239,6 +271,7 @@ class Platal public function force_login(PlatalPage &$page) { + header($_SERVER['SERVER_PROTOCOL'] . ' 403 Forbidden'); if (S::logged()) { $page->changeTpl('core/password_prompt_logged.tpl'); $page->addJsLink('do_challenge_response_logged.js'); @@ -275,7 +308,7 @@ class Platal $page->run(); } - private function on_subscribe($forlife, $uid, $promo, $pass) + public function on_subscribe($forlife, $uid, $promo, $pass) { $args = func_get_args(); foreach ($this->__mods as $mod) {