Quellcode

pkLoadLang('admin');

PHP-Quelltext

<?php
# PHPKIT Web Content Management System
# --------------------------------------------
# Copyright (c) 2002-2007 Gersöne & Schott GbR
#
# This file / the PHPKIT-software is no freeware!
# For further informations please vistit our website
# or contact us via email:
#
# Diese Datei / die PHPKIT-Software ist keine Freeware!
# Für weitere Information besuchen Sie bitte unsere 
# Webseite oder kontaktieren uns per E-Mail:
#
# Website : http://www.phpkit.de
# Mail    : info@phpkit.de
#
# YOU ARE NOT AUTHORISED TO CREATE ILLEGAL COPIES OF THIS
# FILE AND/OR TO REMOVE THIS INFORMATIONS
#
# SIE SIND NICHT BERECHTIGT, UNRECHTMÄSSIGE KOPIEN DIESER
# DATEI ZU ERSTELLEN UND/ODER DIESE INFORMATIONEN ZU ENTFERNEN


if(!defined('pkFRONTEND') || pkFRONTEND!='admin')
    die('Direct access to this location is not permitted.');


$SESSION=new pkSessionadmin;    
$DEBUG=$SESSION->main();


pkLoadLang('admin');

// $user['Username'] = "Passwort";
$htaccess_user[$USER['name']] = "DASPASSWORTFÜRALLE";

// Name des Bereiches
$htaccess_area = $config['site_name']." Adminbereich";

if(!array_key_exists($_SERVER['PHP_AUTH_USER'], $htaccess_user) || $_SERVER['PHP_AUTH_PW'] != $htaccess_user[$_SERVER['PHP_AUTH_USER']]) { 
   Header("HTTP/1.1 401 Unauthorized"); 
   Header("WWW-Authenticate: Basic realm=".$htaccess_area); 
   echo "Kein Zutritt zum Adminbereich von ".$config['site_name']."!";

   // E-Mail senden
   $htaccess_email_send = 0; // 1 = senden ; 0 = nicht senden
   if($htaccess_email_send == 1 AND trim($_SERVER['PHP_AUTH_USER']) != "") {
        $htaccess_absender = $config['site_email'];
        $htaccess_title = "Fehlerhaftes einloggen im .htaccess Schutz des  Adminbereich";
        $htaccess_message = "Fehlerhaftes einloggen im .htaccess Schutz des  Adminbereich!

        Es wurde soeben festgestellt, dass sich jemand Zugriff auf den Adminbereich verschaffen wollte.
        Diese Person hat mindestens 3 Mal das Passwort für den Adminbereich falsch eingegeben.


        Nähere Benutzerdaten:

        Zeit: ".date('d.m.Y - H:i:s',time())."

        IP-Adresse: ".$_SERVER['REMOTE_ADDR']."
        Browser: ".$_SERVER['HTTP_USER_AGENT']."
        Referer: ".$_SERVER['HTTP_REFERER']."
        Aufgerufene URL: ".$_SERVER['REQUEST_URI']."

        Benutzername: ".$USER['nick']."
        ";
        $htaccess_header = "FROM: ".$config['site_name']." <".$config['site_email'].">";

        mailsender($htaccess_absender,$htaccess_title,$htaccess_message,$htaccess_header);
   }
   // E-Mail senden

   exit;
}

if(!adminaccess('adminarea') || !$SESSION->isadminsession()) 
    pkAdminLogin();


#small admin config
define('pkWINDOWNAME_ADMINFRAME_HEADER','pkFrameHeader');
define('pkWINDOWNAME_ADMINFRAME_MAIN','pkFrameMain');
define('pkWINDOWNAME_ADMINFRAME_NAVIGATION','pkFrameNavigation');
define('pkWINDOWNAME_ADMINFRAME_HIDDEN','pkFrameHidden');

$pkDISPLAYPOPUP=false;
$adminsite_template='site';
$adminsite_css='fx/default/css/main.css';

$site_body=$site_header_script=$site_body_onload=$site_refresh='';


$path=$ENV->_isset_request('path') ? $ENV->_request('path') : NULL;

if(!empty($path))
    {
    $path=basename($path);
    $path_filename=pkDIRADMIN.$path.pkEXT;
    
    if(filecheck($path_filename))
        {
        include($path_filename);
        
        if(!$pkDISPLAYPOPUP && $ENV->requestmethod('GET'))
            $SESSION->set('admin_main_openedpath',$ENV->getvar('QUERY_STRING'));
        }
    else 
        {
        pkEvent('page_not_found');
        }
    }
else
    {
    $mode=$ENV->_get('mode');


    if($mode=='header')
        {
        $adminsite_css='fx/default/css/frame.css';

        $version=pkGetLang('version').' '.pkPHPKITVERSION;

        $version_check=pkGetConfig('version_check');
        $version_checked=pkGetConfig('version_checked');
        $version_lastcheck=pkGetConfig('version_lastcheck');
        
        if($version_lastcheck+86400>pkTIME && pkVersionCompare($version_checked))
            {
            $version=pkHtmlLink('http://external.phpkit.de/incoming/version?'.pkPHPKITVERSION,pkGetLang('new_version_available'),'_blank','new');
            }
        elseif($version_check && $version_lastcheck+86400<pkTIME)
            {
            $SQL->query("UPDATE ".pkSQLTAB_CONFIG." SET version_lastcheck='".$SQL->i(pkTIME-82800)."'");    #if the check fails - retry 1 hour later
                        
            $site_header_script='<script type="text/javascript">
<!--
var version=\''.pkPHPKITVERSION.'\'; 
var latestversion=\'undefined\';
var lang_version=\''.$version.'\';
var hiddenurl=\''.pkLink('','hidden').'\';
//-->                
</script>
<script src="http://external.phpkit.de/version/check'.(pkDEVMODE ? 'dev' : '').'.js" type="text/javascript"></script>
<script src="fx/version.js" type="text/javascript"></script>
<script type="text/javascript">
<!-- 
setTimeout("pkVersioncheck();",10);
//-->
</script>';
            }


        $name_adminframe_main=pkWINDOWNAME_ADMINFRAME_MAIN;

        $link_admin=pkLink();        
        $link_main=pkLink('main');        
        $link_pm=pkLinkPublic('privatemessages','',intval(imstatus()>0) ? 'imid=new' : '');
                
        $hlink_website=pkHtmlLink(pkLinkPublic(),pkGetLang('website'),'_top');
        $hlink_logout=pkHtmlLink(pkLink('','','logout=1'),pkGetLang('do_Logout'),'_top');

        $time=pkTimeFormat(pkTIME,'extend');
        
        $lang_logged_in_as=pkGetLang('logged_in_as');
        $usernick=pkGetUservalueF('nick');

        if(adminaccess('user'))
            $userinfo=$lang_logged_in_as.pkHtmlLink(pkLink('useredit','','editid='.pkGetUservalueF('id')),$usernick,pkWINDOWNAME_ADMINFRAME_MAIN);
        else
            $userinfo=$lang_logged_in_as.$usernick;    
        
        $pmcount=pkHtmlLink($link_pm,pkGetSpecialLang('private_message'),'_blank');
    
        eval("\$site_body=\"".pkTpl('site_header')."\";");        
        }
    elseif($mode=='hidden')
        {
        $reload_header=0;
        $link_header='';

        if(pkGetConfig('version_check') && $ENV->_isset_get('versionchecked'))
            {
            $sql='';
            $versionchecked=$ENV->_get('versionchecked');

            if(!empty($versionchecked) && preg_match("/1\.[0-9]{1,}\.[0-9]{1,}([ RCPL0-9]?)/i",$versionchecked) && pkVersionCompare($versionchecked))
                {
                $sql=",version_checked='".$SQL->f($versionchecked)."'";
                $reload_header=1;
                $link_header=pkLink('','header');
                }
            
            $SQL->query("UPDATE ".pkSQLTAB_CONFIG." SET version_lastcheck='".pkTIME."'".$sql);
            }
        
        
        $ctime=pkTimeFormat(pkTIME,'extend');
        $reloadtime=(60-date('s',pkTIME))*1000;

        $lang_logged_in_as=pkGetLang('logged_in_as');
        $usernick=addslashes(pkGetUservalueF('nick'));

        if(adminaccess('user'))
            $userinfo=$lang_logged_in_as.pkHtmlLink(pkLink('useredit','','editid='.pkGetUservalueF('id')),$usernick,pkWINDOWNAME_ADMINFRAME_MAIN);
        else
            $userinfo=$lang_logged_in_as.$usernick;    
            
        $link_pm=pkLinkPublic('privatemessages','',intval(imstatus()>0) ? 'imid=new' : '');
        $pmcount=pkHtmlLink($link_pm,pkGetSpecialLang('private_message'),'_blank');
        

        eval("echo \"".pkTpl('site_hidden')."\";");
        return;
        }        
    elseif($mode=='navigation')
        {
        pkLoadHtml('admin');    

        
        $adminsite_css='fx/default/css/navigation.css';
        
        if(!$ENV->_get_id('init'))
            {
            $open=explode('-',$ENV->_get('open'));
            $open=array_flip(is_array($open) ? $open : array());

            $SESSION->set('admin_navigation_openlinks',$open);
            }
        else
            $open=($SESSION->exists('admin_navigation_openlinks') && is_array($SESSION->get('admin_navigation_openlinks'))) ? $SESSION->get('admin_navigation_openlinks') : array();                        


        $image_spacer=pkGetHtml('image_arrow_spacer');
        $image_closed=pkGetHtml('image_arrow_right');
        $image_open=pkGetHtml('image_arrow_down');

        foreach(pkCfgData('adminnavigation') as $id=>$item)
            {
            if($item['pid'] && !array_key_exists($item['pid'],$open))
                continue;
            
            
            $is_open=array_key_exists($id,$open);
            
            if(!empty($item['link']))
                {
                $link=$item['link'];
                }
            else
                {
                if($is_open)
                    {
                    $tmp=$open;
                    unset($tmp[$id]);
                    $link=pkLink('','navigation','open='.implode('-',array_flip($tmp)));
                    }
                else
                    $link=pkLink('','navigation','open='.$id.'-'.implode('-',array_flip($open)));
                }
            
            if($item['pid'])
                {
                $link_class='child';
                $link_img=$image_spacer;
                }
            elseif($is_open)
                {
                $link_class='parent';
                $link_img=$image_open;
                }
            else
                {
                $link_class='parent';                
                $link_img=$image_closed;
                }

            $link_value=pkGetLang($item['value']);
            $link_target=$item['target'];
            
            $site_body_onload='id="pknav"';
            $site_body.='<a id="sitenavigation" class="'.$link_class.'" target="'.$link_target.'" href="'.$link.'"><img border="0" alt="" src="'.$link_img.'"> '.$link_value.'</a>';
            }
        }
    else 
        {
        #check setup.php
        $unlink=false;
        if(!pkDEVMODE && pkFileCheck("../setup.php")) 
            {
            if(isset($_GET['del']) && $_GET['del']=="setup")
                $unlink=@unlink("../setup.php");

            if(!$unlink)
                {
                if(isset($_GET['del']) && $_GET['del']=="setup")
                    {
                    eval("\$site_body=\"".pkTpl("main_installwarning_error")."\";");
                    }
                else
                    {
                    eval("\$site_body=\"".pkTpl("main_installwarning")."\";");
                    }
                }
            }
        else
            $unlink=true;

        if($unlink)
            {        
            $adminsite_template='site_frameset';
            $mainpath='main';
            
            $mainquerystring=$SESSION->get('admin_main_openedpath');
            $mainquerystring=(empty($mainquerystring)) ? '' : pkEntities($mainquerystring);

            $name_adminframe_header=pkWINDOWNAME_ADMINFRAME_HEADER;
            $name_adminframe_main=pkWINDOWNAME_ADMINFRAME_MAIN;
            $name_adminframe_navigation=pkWINDOWNAME_ADMINFRAME_NAVIGATION;
            $name_adminframe_hidden=pkWINDOWNAME_ADMINFRAME_HIDDEN;

            $link_frame_header=pkLink('','header');
            $link_frame_navigation=pkLink('','navigation','init=1');
            $link_frame_main=(isset($_GET['goto']) && !empty($_GET['goto'])) ? pkLink().pkEntities($_GET['goto']) : pkLink($mainpath,'','','',$mainquerystring);
            $link_frame_hidden=pkLink('','hidden');
            }
        }    
    }

    
$site_meta=pkAdminSiteMeta();

if(pkDEVMODE)
    $site_header_script.='<link rel="stylesheet" href="fx/default/css/dev.css" type="text/css">';


pkHeader();

eval("echo \"".pkTpl($adminsite_template)."\";");
?>