X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=includes%2Fmain.inc;h=1101584eca779028dd8b6f1bec7547fddad91b7b;hb=e8ebca8f2b08eeb3bfd3da04ca946dfa8cc1fb3f;hp=e45f5973856f65c3dd4b55ca3036bac4963f4fd8;hpb=ce2a1cae35df4f60c3b993d79cb9eb65cb2cb82e;p=fa-stable.git diff --git a/includes/main.inc b/includes/main.inc index e45f5973..1101584e 100644 --- a/includes/main.inc +++ b/includes/main.inc @@ -11,34 +11,35 @@ ***********************************************************************/ include_once($path_to_root . "/includes/db/connect_db.inc"); -include_once($path_to_root . "/includes/reserved.inc"); -include_once($path_to_root . "/includes/errors.inc"); include_once($path_to_root . "/includes/types.inc"); include_once($path_to_root . "/includes/systypes.inc"); include_once($path_to_root . "/includes/references.inc"); -include_once($path_to_root . "/includes/prefs/sysprefs.inc"); include_once($path_to_root . "/includes/db/comments_db.inc"); include_once($path_to_root . "/includes/db/sql_functions.inc"); include_once($path_to_root . "/includes/db/audit_trail_db.inc"); -include_once($path_to_root . "/includes/validation.inc"); +//include_once($path_to_root . "/includes/validation.inc"); include_once($path_to_root . "/admin/db/users_db.inc"); include_once($path_to_root . "/includes/ui/ui_view.inc"); include_once($path_to_root . "/includes/ui/ui_controls.inc"); -include_once($path_to_root . "/installed_extensions.php"); - -function page($title, $no_menu=false, $is_index=false, $onload="", $js="", $script_only=false) + +$page_nested = -1; + +function page($title, $no_menu=false, $is_index=false, $onload="", $js="", $script_only=false, $css='') { - global $path_to_root; + global $path_to_root, $page_security, $page_nested; + + if (++$page_nested) return; $hide_menu = $no_menu; - include($path_to_root . "/includes/page/header.inc"); + include_once($path_to_root . "/includes/page/header.inc"); - page_header($title, $no_menu, $is_index, $onload, $js); + page_header($title, $no_menu, $is_index, $onload, $js, $css); + check_page_security($page_security); // error_box(); - if($script_only) { + if($script_only) { echo ''; @@ -48,26 +49,18 @@ function page($title, $no_menu=false, $is_index=false, $onload="", $js="", $scri } } -function end_page($no_menu=false, $is_index=false) +function end_page($no_menu=false, $is_index=false, $final_screen=false, $type_no=0, $trans_no=0) { - global $path_to_root, $Ajax; - $hide_menu = $no_menu; - div_end(); // _page_body section - include($path_to_root . "/includes/page/footer.inc"); - page_footer($no_menu, $is_index); -} + global $path_to_root, $page_nested; -function flush_dir($path) -{ - $dir = opendir($path); - while(false !== ($fname = readdir($dir))) { - if($fname=='.' || $fname=='..' || $fname=='index.php') continue; - if(is_dir($path.'/'.$fname)) { - flush_dir($path.'/'.$fname); - @rmdir($path.'/'.$fname); - } else - @unlink($path.'/'.$fname); - } + if ($page_nested-- > 0) return; + + if (!$is_index && function_exists('hyperlink_back')) + hyperlink_back(true, $no_menu, $type_no, $trans_no, $final_screen); + div_end(); // end of _page_body section + + include_once($path_to_root . "/includes/page/footer.inc"); + page_footer($no_menu, $is_index); } function cache_js_file($fpath, $text) @@ -141,10 +134,11 @@ function js_compress($sJS) $inNormalComment = false; //loop through line's characters and take out any literal strings, replace them with ___i___ where i is the index of this string - for($j=0;$j $el) { - if(is_int($key)) - $array[] = $el; - else - $array[$key] = $el; + global $installed_extensions, $path_to_root, $local_path_to_root; + + // customized per company version + $path = company_path(); + $file = $path.$rep; + if (file_exists($file)) { + // add local include path + $local_path_to_root = $path; + set_include_path(dirname($file).PATH_SEPARATOR.get_include_path()); + return $file; + } + // file added by active extension modules + if (count($installed_extensions) > 0) + { + $extensions = $installed_extensions; + foreach ($extensions as $ext) + if (($ext['active'] && $ext['type'] == 'extension')) { + $path = $path_to_root.'/'.$ext['path']; + $file = $path.$rep; + if (file_exists($file)) { + set_include_path($path.PATH_SEPARATOR.get_include_path()); + $local_path_to_root = $path; + return $file; + } + } } + // standard location + $file = $path_to_root.$rep; + if (file_exists($file)) + return $file; + + return null; +} +/* + + Protect against directory traversal. + Changes all not POSIX compatible chars to underscore. +*/ +function clean_file_name($filename) { + return preg_replace('/[^a-zA-Z0-9.\-_]/', '_', $filename); } ?> \ No newline at end of file