index.php

Go to the documentation of this file.

<?php
 *
 * @package           dbXapp
 * @author            Armin Leonard Braun
 * @copyright         2021 dbXwebApp Org
 * @license           GPL-2.0-or-later
 *
 * Description:       dbXwebApp  (Content, Applications, Views, Forms, Tabels, Grids)
 * Version:           2.0 (dbXapp)
 * Requires PHP:      8.x
 * Author:            Armin L. Braun
 * Author URI:        https://www.dbxwebapp.org/ArminBraun
 * License:           GPL v2 or later
 * License URI:       http://www.gnu.org/licenses/gpl-2.0.txt
 */
 
$__dbx_request_started_at = microtime(true);
 
ob_start("ob_gzhandler");     // Compression
 
 
$https = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || (int)($_SERVER['SERVER_PORT'] ?? 0) === 443;
if (session_status() !== PHP_SESSION_ACTIVE) {
  ini_set('session.use_strict_mode', '1');
  ini_set('session.use_only_cookies', '1');
  ini_set('session.use_trans_sid', '0');
 
  session_set_cookie_params([
    'lifetime' => 0,        // Dauer des Cookies, 0 bedeutet bis der Browser geschlossen wird
    'path' => '/',          // Gültiger Pfad für das Cookie
    'domain' => '',         // Optional: Das Domain-Feld kann leer gelassen werden, wenn nicht spezifisch
    'secure' => $https,     // Nur bei HTTPS erzwingen, damit lokale HTTP-Setups weiter funktionieren
    'httponly' => true,     // Verhindert Zugriff über JavaScript
    'samesite' => 'Lax'     // Optional: Verhindert das Senden bei Cross-Site-Requests
  ]);
  //ini_set('session.use_cookies', '0');
  //ini_set('session.use_only_cookies', '0');
  //ini_set('session.use_trans_sid', '1');
  session_start();
}
 
  // Normale Web-Requests muessen immer die Rechte des angemeldeten Benutzers pruefen.
  // CLI-/Admin-Tools setzen dbxRunAsAdmin bei Bedarf in ihrem eigenen Einstiegspunkt.
  define('dbxSystem', 'dbxWebApp');
  define('dbxRunAsAdmin', 0);
 
function dbx_error_log_file() {
  $dir = __DIR__ . DIRECTORY_SEPARATOR . 'files';
 
  if (!is_dir($dir)) {
    @mkdir($dir, 0775, true);
  }
 
  return $dir . DIRECTORY_SEPARATOR . 'dbxError.log';
}
 
function dbx_error_type($errno) {
  $types = array(
    E_ERROR             => 'E_ERROR',
    E_WARNING           => 'E_WARNING',
    E_PARSE             => 'E_PARSE',
    E_NOTICE            => 'E_NOTICE',
    E_CORE_ERROR        => 'E_CORE_ERROR',
    E_CORE_WARNING      => 'E_CORE_WARNING',
    E_COMPILE_ERROR     => 'E_COMPILE_ERROR',
    E_COMPILE_WARNING   => 'E_COMPILE_WARNING',
    E_USER_ERROR        => 'E_USER_ERROR',
    E_USER_WARNING      => 'E_USER_WARNING',
    E_USER_NOTICE       => 'E_USER_NOTICE',
    E_STRICT            => 'E_STRICT',
    E_RECOVERABLE_ERROR => 'E_RECOVERABLE_ERROR',
    E_DEPRECATED        => 'E_DEPRECATED',
    E_USER_DEPRECATED   => 'E_USER_DEPRECATED',
  );
 
  return $types[$errno] ?? 'E_UNKNOWN';
}
 
function dbx_write_php_error_log($type, $message, $file = '', $line = 0) {
  $request = $_SERVER['REQUEST_METHOD'] ?? 'CLI';
  $uri     = $_SERVER['REQUEST_URI'] ?? '';
  $ip      = $_SERVER['REMOTE_ADDR'] ?? '';
 
  $log = sprintf(
    "[%s] %s: %s in %s:%d | %s %s | IP=%s%s",
    date('Y-m-d H:i:s'),
    $type,
    str_replace(array("\r", "\n"), ' ', (string) $message),
    (string) $file,
    (int) $line,
    $request,
    $uri,
    $ip,
    PHP_EOL
  );
 
  error_log($log, 3, dbx_error_log_file());
}
 
error_reporting(E_ALL & ~E_DEPRECATED & ~E_USER_DEPRECATED & ~E_NOTICE);
date_default_timezone_set('Europe/Berlin');
set_time_limit(600); // long time for Big Data
ini_set('max_execution_time', 600);  // 600 Sekunden
ini_set('display_errors'    , 0); // Fehler nicht direkt ausgeben
ini_set('log_errors'        , 1);      // Fehler protokollieren
ini_set('error_log'         , dbx_error_log_file()); // Fehler in Datei schreiben
 
set_error_handler(function ($errno, $errstr, $errfile, $errline) {
  if (!(error_reporting() & $errno)) {
    return false;
  }
 
  dbx_write_php_error_log(dbx_error_type($errno), $errstr, $errfile, $errline);
 
  return true;
});
 
set_exception_handler(function ($exception) {
  dbx_write_php_error_log(
    get_class($exception),
    $exception->getMessage(),
    $exception->getFile(),
    $exception->getLine()
  );
 
  if (!headers_sent()) {
    http_response_code(500);
  }
});
 
register_shutdown_function(function () {
  $error = error_get_last();
 
  if (!$error) {
    return;
  }
 
  $fatalTypes = array(E_ERROR, E_PARSE, E_CORE_ERROR, E_COMPILE_ERROR, E_RECOVERABLE_ERROR);
 
  if (!in_array($error['type'], $fatalTypes, true)) {
    return;
  }
 
  dbx_write_php_error_log(
    dbx_error_type($error['type']),
    $error['message'] ?? '',
    $error['file'] ?? '',
    $error['line'] ?? 0
  );
});
 
 
 
 
function dbx_get_base_dir($cut_Data=0) {
  $path= (str_replace('\\','/',__DIR__)).'/';
  if ($cut_Data) $path = str_ends_with($path, "/Data/") ? substr($path, 0, -5) : $path;
  $path = rtrim($path, '/') . "/";
  return $path;
};
 
function dbx_os_path_file($path_file) {
 
  // Ersetze alle gemischten Backslashes und Slashes durch einheitliche Slashes
  $path_file = str_replace(['\\', '//', '\\\\'], '/', $path_file);
  //return $path_file;
 
  // Entferne doppelte Slashes außer am Anfang (z. B. für Netzwerkpfade wie //server/share)
  $path_file = preg_replace('#(?<!:)//+#', '/', $path_file);
 
  // Falls unter Windows, konvertiere zu Backslashes
  if (DIRECTORY_SEPARATOR === '\\') {
      $path_file = str_replace('/', '\\', $path_file);
  }
 
  // Prüfe, ob es eine Datei oder ein Ordner ist
  $separator = DIRECTORY_SEPARATOR;
  if (!str_ends_with($path_file, $separator)) {
      if (!str_contains(basename($path_file), '.')) {
          $path_file .= $separator;
      }
  }
 
  return $path_file;
}
 
function dbx_path_is_absolute(string $path): bool {
  $path = str_replace('\\', '/', trim($path));
  if ($path === '') {
    return false;
  }
  if ($path[0] === '/') {
    return true;
  }
  return (bool) preg_match('#^[A-Za-z]:/#', $path);
}
 
function dbx_config_path_store(string $path, bool $dirTrailingSlash = false): string {
  $path = str_replace('\\', '/', trim($path));
  if ($path === '') {
    return '';
  }
  $base = str_replace('\\', '/', dbx_get_base_dir());
  if (dbx_path_is_absolute($path) || str_starts_with($path, $base)) {
    $abs = str_replace('\\', '/', dbx_os_path_file($path));
    $baseNorm = str_replace('\\', '/', dbx_os_path_file($base));
    if (str_starts_with($abs, $baseNorm)) {
      $path = substr($abs, strlen($baseNorm));
    }
  }
  $path = ltrim($path, '/');
  if ($dirTrailingSlash && $path !== '') {
    $path = rtrim($path, '/') . '/';
  }
  return $path;
}
 
function dbx_config_path_resolve(string $path): string {
  $path = str_replace('\\', '/', trim($path));
  if ($path === '') {
    return '';
  }
  if (!dbx_path_is_absolute($path)) {
    $path = dbx_get_base_dir() . ltrim($path, '/');
  }
  return dbx_os_path_file($path);
}
 
function dbx_config_is_module_db_entry(string $key, array $entry): bool {
  $type = strtolower(trim((string) ($entry['type'] ?? '')));
  if ($type === 'sqlite' || $type === 'sqlite3') {
    return true;
  }
  if (preg_match('/\.(db3|sqlite|sqlite3)$/i', $key)) {
    return true;
  }
  $dbName = (string) ($entry['dbname'] ?? ($entry['name'] ?? ''));
  if (strpos($key, '|') !== false && preg_match('/\.(db3|sqlite|sqlite3)$/i', $dbName)) {
    return true;
  }
  return false;
}
 
function dbx_config_strip_module_db_entries(array $config): array {
  if (!isset($config['db']) || !is_array($config['db'])) {
    return $config;
  }
  foreach ($config['db'] as $key => $entry) {
    if (!is_array($entry)) {
      continue;
    }
    if (dbx_config_is_module_db_entry((string) $key, $entry)) {
      unset($config['db'][$key]);
    }
  }
  return $config;
}
 
function dbx_normalize_config_for_store(array $config): array {
  return dbx_config_strip_module_db_entries($config);
}
 
function dbx_get_file_dir() {
  $path=dbx_get_base_dir().'files/';
  return $path;
}
 
$path_file=dbx_get_base_dir().'dbx/vendor/autoload.php';
require $path_file;
 
$path_file=dbx_get_base_dir().'dbx/include/dbxKernel.php';
include_once dbx_os_path_file($path_file);
 
function dbx_media_missing_key($mid, $rel = '') {
  if (trim((string)$rel) !== '') {
    return ltrim(str_replace('\\', '/', (string)$rel), '/');
  }
  $uri = trim((string)($_SERVER['REQUEST_URI'] ?? ''));
  if ($uri !== '') {
    return $uri;
  }
  return 'index.php?dbx_modul=dbxContent&dbx_run1=media&dbx_mid=' . (int)$mid;
}
 
function dbx_media_serve_fail($code, $mid, $rel = '') {
  if ((int)$code === 404) {
    dbx()->log_missing(dbx_media_missing_key($mid, $rel));
  }
  http_response_code((int)$code);
  exit;
}
 
function dbx_serve_content_media_request() {
  $modul = $_GET['dbx_modul'] ?? '';
  $run1  = $_GET['dbx_run1'] ?? '';
  $mid   = isset($_GET['dbx_mid']) ? (int)$_GET['dbx_mid'] : 0;
  $thumb = isset($_GET['dbx_thumb']) && (string)$_GET['dbx_thumb'] === '1';
 
  if ($modul !== 'dbxContent' || $run1 !== 'media' || $mid <= 0) {
    return;
  }
 
  try {
    $db = dbx()->get_system_obj('dbxDB');
    $row = is_object($db) ? $db->select1('dbxMedia', array('id' => $mid, 'active' => 1), '*', 0) : array();
    if (!is_array($row) || (int)($row['id'] ?? 0) <= 0) {
      dbx_media_serve_fail(404, $mid);
    }
 
    $rel_key = $thumb && !empty($row['thumb_file_path']) ? 'thumb_file_path' : 'file_path';
    $rel = rawurldecode((string)($row[$rel_key] ?? ''));
    $rel = str_replace('\\', '/', $rel);
    $rel = ltrim($rel, '/');
    if ($rel === '' || strpos($rel, '..') !== false || !preg_match('~^(media|dbxContent/media)/~i', $rel)) {
      http_response_code(403);
      exit;
    }
 
    $root = dbx_os_path_file(rtrim(dbx_get_file_dir(), '/\\') . '/');
    $file = dbx_os_path_file($root . $rel);
    $base = realpath($root);
    $real = realpath($file);
    if (!$base || !$real || strpos($real, $base) !== 0 || !is_file($real) || !is_readable($real)) {
      if ($thumb && !empty($row['file_path'])) {
        $fallback_rel = rawurldecode((string)$row['file_path']);
        $fallback_rel = ltrim(str_replace('\\', '/', $fallback_rel), '/');
        $fallback_file = dbx_os_path_file($root . $fallback_rel);
        $fallback_real = realpath($fallback_file);
        if ($base && $fallback_real && strpos($fallback_real, $base) === 0 && is_file($fallback_real) && is_readable($fallback_real)) {
          $real = $fallback_real;
          $rel = $fallback_rel;
          $mime = trim((string)($row['mime'] ?? ''));
          if ($mime === '') {
            $detected = function_exists('mime_content_type') ? mime_content_type($real) : '';
            $mime = $detected ?: 'application/octet-stream';
          }
          $file_name = trim((string)($row['file_name'] ?? ''));
          if ($file_name === '') $file_name = basename($real);
          $file_name = str_replace('"', '', basename($file_name));
          if (function_exists('session_status') && session_status() === PHP_SESSION_ACTIVE) {
            session_write_close();
          }
          header('Content-Type: ' . $mime);
          header('Content-Length: ' . filesize($real));
          header('Content-Disposition: inline; filename="' . $file_name . '"');
          header('Accept-Ranges: bytes');
          header('Cache-Control: private, max-age=3600');
          header('X-Content-Type-Options: nosniff');
          readfile($real);
          exit;
        }
      }
      dbx_media_serve_fail(404, $mid, $rel);
    }
 
    while (ob_get_level() > 0) {
      ob_end_clean();
    }
 
    $mime = trim((string)($thumb && !empty($row['thumb_file_path']) ? 'image/jpeg' : ($row['mime'] ?? '')));
    if ($mime === '') {
      $detected = function_exists('mime_content_type') ? mime_content_type($real) : '';
      $mime = $detected ?: 'application/octet-stream';
    }
 
    $file_name = trim((string)($row['file_name'] ?? ''));
    if ($file_name === '') $file_name = basename($real);
    $file_name = str_replace('"', '', basename($file_name));
 
    if (function_exists('session_status') && session_status() === PHP_SESSION_ACTIVE) {
      session_write_close();
    }
 
    $size = filesize($real);
    $start = 0;
    $end = $size > 0 ? $size - 1 : 0;
    $range = isset($_SERVER['HTTP_RANGE']) ? trim((string)$_SERVER['HTTP_RANGE']) : '';
    if ($range !== '' && preg_match('/bytes=(\d*)-(\d*)/i', $range, $m)) {
      if ($m[1] !== '') $start = max(0, (int)$m[1]);
      if ($m[2] !== '') $end = min($end, (int)$m[2]);
      if ($m[1] === '' && $m[2] !== '') {
        $suffix = max(0, (int)$m[2]);
        $start = max(0, $size - $suffix);
      }
      if ($start <= $end && $size > 0) {
        http_response_code(206);
        header('Content-Range: bytes ' . $start . '-' . $end . '/' . $size);
      } else {
        http_response_code(416);
        header('Content-Range: bytes */' . $size);
        exit;
      }
    }
 
    header('Content-Type: ' . $mime);
    header('Content-Length: ' . max(0, $end - $start + 1));
    header('Content-Disposition: inline; filename="' . $file_name . '"');
    header('Accept-Ranges: bytes');
    header('Cache-Control: private, max-age=3600');
    header('X-Content-Type-Options: nosniff');
    $out = fopen($real, 'rb');
    if ($out) {
      if ($start > 0) fseek($out, $start);
      $remaining = $end - $start + 1;
      while ($remaining > 0 && !feof($out)) {
        $chunk = fread($out, min(8192, $remaining));
        if ($chunk === false || $chunk === '') break;
        echo $chunk;
        $remaining -= strlen($chunk);
        if (function_exists('connection_aborted') && connection_aborted()) break;
      }
      fclose($out);
    }
    exit;
  } catch (Throwable $e) {
    dbx_write_php_error_log(get_class($e), $e->getMessage(), $e->getFile(), $e->getLine());
    http_response_code(500);
    exit;
  }
}
 
dbx_serve_content_media_request();
 
 
function run_dbXwebApp() {
  $session_id = session_id();
  $page_content='';
  dbx()->debug("#### Session #### PHP-ID=($session_id)");
 
 
 
 
  dbx()->timer('system','full-app');
  dbx()->timer('system-load','load Kernel');
 
 
 
  $oWebApp      = dbx()->get_system_obj('dbxWebApp');
  $oSession     = dbx()->get_system_obj('dbxSession');
  $oInterpreter = null;
  dbx()->timer('system-load');
 
  dbx()->timer('session-load','Session load');
  $oSession->load_session();
  dbx()->timer('session-load');
 
  dbx()->timer('system-check','System check');
  dbx()->set_system_var('dbx_activ_modul','dbx');     // dbx_set_remember use dbx_activ_modul
 
 
  $oWebApp->check_request();  // set sysvar: base_url base_uri permalink self_url
  $oWebApp->check_remember(); // edit color design
  $oWebApp->check_lng();      // set sysvar: dbx_lng !Important for check_perma()
 
  $oWebApp->check_missing();
  $sync=dbx()->get_request_var('dbx_sync',1,'int');
  $oWebApp->check_perma();   // Permalink-Routing: dbxContent bei Treffer, dbxHome bei Fehler
  $oWebApp->check_config();
  $oWebApp->check_design();    // set design
  $oWebApp->check_modul();     // set modul
 
  //dbx()->login(1); // auto login for test
  $self  =dbx()->get_self_url();
  $base  =dbx()->get_base_url();
  $uid   =dbx()->user();
  $ajax  =dbx()->get_system_var('dbx_ajax',0,'int');
 
  $cache =dbx()->get_config('dbx','cache');
  $perma =dbx()->get_system_var('dbx_permalink','undef');
  $modul =dbx()->get_system_var('dbx_modul'    ,'undef');
  $action=dbx()->get_system_var('dbx_run1'     ,'undef');
  dbx()->debug("#DBX RUN Base-URL($base) Self=($self) Ajax=($ajax) Perma ($perma) User=($uid) SYS CACHE=($cache) ");
 
  dbx()->timer('system-check');
 
  dbx()->timer($modul,'Master-Modul');
  $modul_content=$oWebApp->run();
  dbx()->timer($modul);
 
  dbx()->timer('page-load','Page-Load');
  dbx()->debug("#RUN-DBXWEBAPP SYNC=$sync");
  if ($sync) {
 
    //dbx_debug("sync content");
    $page_content =$oWebApp->design_load($modul_content);
    if ($oInterpreter === null) {
      $oInterpreter = dbx()->get_system_obj('dbxInterpreter');
    }
    dbx()->timer('interpreter','Interpreter');
    $page_content=$oInterpreter->run($page_content);
    dbx()->timer('interpreter');
 
    //dbx_debug('######TRANSLATE#######');
    //$page_content=$oWebApp->translate($page_content);
 
    $page_content=$oWebApp->add_norep($page_content);
    $page_content=$oWebApp->add_editor_files_data($page_content);
    // - - - - - - - - - - - - - -
    //$page_content=$oWebApp->out_filter($page_content));
    $page_content=$oWebApp->out_filter($page_content);
  } else {
    dbx()->debug("no sync no output");
    http_response_code(204); // Kein Inhalt
  }
  dbx()->timer('page-load');
  dbx()->debug("call session_save($sync)");
  $oSession->save_session();
  $oSession->clean_session();
  if (!empty($GLOBALS['dbx_session_destroy_pending'])) {
    $oSession->destroy_php_session();
  }
  dbx()->timer('system');
  return $page_content;
}
 
$response=run_dbXwebApp();
$syncRequest = (int) dbx()->get_request_var('dbx_sync', 1, 'int') === 1;
if ($syncRequest) {
  dbx()->send_runtime_headers();
}
echo $response; // the one and onley Point
while (ob_get_level() > 0) ob_end_flush();
 
dbx()->debug_timer(0); // wenn es länger als 3 sec dauert dann debug timer für Analyse
if ($syncRequest && (int) dbx()->get_system_var('dbx_ajax', 0, 'int') !== 1) {
  dbx()->store_performance_timer();
}
dbx()->debug("#END#");
 
exit;