1<?php 2/** 3 * Information and debugging functions 4 * 5 * @license GPL 2 (http://www.gnu.org/licenses/gpl.html) 6 * @author Andreas Gohr <andi@splitbrain.org> 7 */ 8 9use dokuwiki\HTTP\DokuHTTPClient; 10use dokuwiki\Search\PageIndex; 11 12if(!defined('DOKU_MESSAGEURL')){ 13 if(in_array('ssl', stream_get_transports())) { 14 define('DOKU_MESSAGEURL','https://update.dokuwiki.org/check/'); 15 }else{ 16 define('DOKU_MESSAGEURL','http://update.dokuwiki.org/check/'); 17 } 18} 19 20/** 21 * Check for new messages from upstream 22 * 23 * @author Andreas Gohr <andi@splitbrain.org> 24 */ 25function checkUpdateMessages(){ 26 global $conf; 27 global $INFO; 28 global $updateVersion; 29 if(!$conf['updatecheck']) return; 30 if($conf['useacl'] && !$INFO['ismanager']) return; 31 32 $cf = getCacheName($updateVersion, '.updmsg'); 33 $lm = @filemtime($cf); 34 $is_http = substr(DOKU_MESSAGEURL, 0, 5) != 'https'; 35 36 // check if new messages needs to be fetched 37 if($lm < time()-(60*60*24) || $lm < @filemtime(DOKU_INC.DOKU_SCRIPT)){ 38 @touch($cf); 39 dbglog("checkUpdateMessages(): downloading messages to ".$cf.($is_http?' (without SSL)':' (with SSL)')); 40 $http = new DokuHTTPClient(); 41 $http->timeout = 12; 42 $resp = $http->get(DOKU_MESSAGEURL.$updateVersion); 43 if(is_string($resp) && ($resp == "" || substr(trim($resp), -1) == '%')) { 44 // basic sanity check that this is either an empty string response (ie "no messages") 45 // or it looks like one of our messages, not WiFi login or other interposed response 46 io_saveFile($cf,$resp); 47 } else { 48 dbglog("checkUpdateMessages(): unexpected HTTP response received"); 49 } 50 }else{ 51 dbglog("checkUpdateMessages(): messages up to date"); 52 } 53 54 $data = io_readFile($cf); 55 // show messages through the usual message mechanism 56 $msgs = explode("\n%\n",$data); 57 foreach($msgs as $msg){ 58 if($msg) msg($msg,2); 59 } 60} 61 62 63/** 64 * Return DokuWiki's version (split up in date and type) 65 * 66 * @author Andreas Gohr <andi@splitbrain.org> 67 */ 68function getVersionData(){ 69 $version = array(); 70 //import version string 71 if(file_exists(DOKU_INC.'VERSION')){ 72 //official release 73 $version['date'] = trim(io_readFile(DOKU_INC.'VERSION')); 74 $version['type'] = 'Release'; 75 }elseif(is_dir(DOKU_INC.'.git')){ 76 $version['type'] = 'Git'; 77 $version['date'] = 'unknown'; 78 79 $inventory = DOKU_INC.'.git/logs/HEAD'; 80 if(is_file($inventory)){ 81 $sz = filesize($inventory); 82 $seek = max(0,$sz-2000); // read from back of the file 83 $fh = fopen($inventory,'rb'); 84 fseek($fh,$seek); 85 $chunk = fread($fh,2000); 86 fclose($fh); 87 $chunk = trim($chunk); 88 $chunk = @array_pop(explode("\n",$chunk)); //last log line 89 $chunk = @array_shift(explode("\t",$chunk)); //strip commit msg 90 $chunk = explode(" ",$chunk); 91 array_pop($chunk); //strip timezone 92 $date = date('Y-m-d',array_pop($chunk)); 93 if($date) $version['date'] = $date; 94 } 95 }else{ 96 global $updateVersion; 97 $version['date'] = 'update version '.$updateVersion; 98 $version['type'] = 'snapshot?'; 99 } 100 return $version; 101} 102 103/** 104 * Return DokuWiki's version (as a string) 105 * 106 * @author Anika Henke <anika@selfthinker.org> 107 */ 108function getVersion(){ 109 $version = getVersionData(); 110 return $version['type'].' '.$version['date']; 111} 112 113/** 114 * Run a few sanity checks 115 * 116 * @author Andreas Gohr <andi@splitbrain.org> 117 */ 118function check(){ 119 global $conf; 120 global $INFO; 121 /* @var Input $INPUT */ 122 global $INPUT; 123 124 if ($INFO['isadmin'] || $INFO['ismanager']){ 125 msg('DokuWiki version: '.getVersion(),1); 126 127 if(version_compare(phpversion(),'5.6.0','<')){ 128 msg('Your PHP version is too old ('.phpversion().' vs. 5.6.0+ needed)',-1); 129 }else{ 130 msg('PHP version '.phpversion(),1); 131 } 132 } else { 133 if(version_compare(phpversion(),'5.6.0','<')){ 134 msg('Your PHP version is too old',-1); 135 } 136 } 137 138 $mem = (int) php_to_byte(ini_get('memory_limit')); 139 if($mem){ 140 if ($mem === -1) { 141 msg('PHP memory is unlimited', 1); 142 } else if ($mem < 16777216) { 143 msg('PHP is limited to less than 16MB RAM (' . filesize_h($mem) . '). 144 Increase memory_limit in php.ini', -1); 145 } else if ($mem < 20971520) { 146 msg('PHP is limited to less than 20MB RAM (' . filesize_h($mem) . '), 147 you might encounter problems with bigger pages. Increase memory_limit in php.ini', -1); 148 } else if ($mem < 33554432) { 149 msg('PHP is limited to less than 32MB RAM (' . filesize_h($mem) . '), 150 but that should be enough in most cases. If not, increase memory_limit in php.ini', 0); 151 } else { 152 msg('More than 32MB RAM (' . filesize_h($mem) . ') available.', 1); 153 } 154 } 155 156 if(is_writable($conf['changelog'])){ 157 msg('Changelog is writable',1); 158 }else{ 159 if (file_exists($conf['changelog'])) { 160 msg('Changelog is not writable',-1); 161 } 162 } 163 164 if (isset($conf['changelog_old']) && file_exists($conf['changelog_old'])) { 165 msg('Old changelog exists', 0); 166 } 167 168 if (file_exists($conf['changelog'].'_failed')) { 169 msg('Importing old changelog failed', -1); 170 } else if (file_exists($conf['changelog'].'_importing')) { 171 msg('Importing old changelog now.', 0); 172 } else if (file_exists($conf['changelog'].'_import_ok')) { 173 msg('Old changelog imported', 1); 174 if (!plugin_isdisabled('importoldchangelog')) { 175 msg('Importoldchangelog plugin not disabled after import', -1); 176 } 177 } 178 179 if(is_writable(DOKU_CONF)){ 180 msg('conf directory is writable',1); 181 }else{ 182 msg('conf directory is not writable',-1); 183 } 184 185 if($conf['authtype'] == 'plain'){ 186 global $config_cascade; 187 if(is_writable($config_cascade['plainauth.users']['default'])){ 188 msg('conf/users.auth.php is writable',1); 189 }else{ 190 msg('conf/users.auth.php is not writable',0); 191 } 192 } 193 194 if(function_exists('mb_strpos')){ 195 if(defined('UTF8_NOMBSTRING')){ 196 msg('mb_string extension is available but will not be used',0); 197 }else{ 198 msg('mb_string extension is available and will be used',1); 199 if(ini_get('mbstring.func_overload') != 0){ 200 msg('mb_string function overloading is enabled, this will cause problems and should be disabled',-1); 201 } 202 } 203 }else{ 204 msg('mb_string extension not available - PHP only replacements will be used',0); 205 } 206 207 if (!UTF8_PREGSUPPORT) { 208 msg('PHP is missing UTF-8 support in Perl-Compatible Regular Expressions (PCRE)', -1); 209 } 210 if (!UTF8_PROPERTYSUPPORT) { 211 msg('PHP is missing Unicode properties support in Perl-Compatible Regular Expressions (PCRE)', -1); 212 } 213 214 $loc = setlocale(LC_ALL, 0); 215 if(!$loc){ 216 msg('No valid locale is set for your PHP setup. You should fix this',-1); 217 }elseif(stripos($loc,'utf') === false){ 218 msg('Your locale <code>'.hsc($loc).'</code> seems not to be a UTF-8 locale, 219 you should fix this if you encounter problems.',0); 220 }else{ 221 msg('Valid locale '.hsc($loc).' found.', 1); 222 } 223 224 if($conf['allowdebug']){ 225 msg('Debugging support is enabled. If you don\'t need it you should set $conf[\'allowdebug\'] = 0',-1); 226 }else{ 227 msg('Debugging support is disabled',1); 228 } 229 230 if($INFO['userinfo']['name']){ 231 msg('You are currently logged in as '.$INPUT->server->str('REMOTE_USER').' ('.$INFO['userinfo']['name'].')',0); 232 msg('You are part of the groups '.join($INFO['userinfo']['grps'],', '),0); 233 }else{ 234 msg('You are currently not logged in',0); 235 } 236 237 msg('Your current permission for this page is '.$INFO['perm'],0); 238 239 if(is_writable($INFO['filepath'])){ 240 msg('The current page is writable by the webserver',0); 241 }else{ 242 msg('The current page is not writable by the webserver',0); 243 } 244 245 if($INFO['writable']){ 246 msg('The current page is writable by you',0); 247 }else{ 248 msg('The current page is not writable by you',0); 249 } 250 251 $Indexer = PageIndex::getInstance(); 252 253 // Check for corrupted fulltext search index 254 $lengths = $Indexer->PagewordIndex->listIndexLengths(); 255 $index_corrupted = false; 256 foreach ($lengths as $length) { 257 if (count($Indexer->getIndex('w', $length)) != count($Indexer->getIndex('i', $length))) { 258 $index_corrupted = true; 259 break; 260 } 261 } 262 263 // Check for corrupted metadata index 264 foreach ($Indexer->getIndex('metadata', '') as $name) { 265 if (count($Indexer->getIndex($name.'_w', '')) != count($Indexer->getIndex($name.'_i', ''))) { 266 $index_corrupted = true; 267 break; 268 } 269 } 270 271 if($index_corrupted) { 272 msg( 273 'The search index is corrupted. It might produce wrong results and most 274 probably needs to be rebuilt. See 275 <a href="http://www.dokuwiki.org/faq:searchindex">faq:searchindex</a> 276 for ways to rebuild the search index.', -1 277 ); 278 } elseif(!empty($lengths)) { 279 msg('The search index seems to be working', 1); 280 } else { 281 msg( 282 'The search index is empty. See 283 <a href="http://www.dokuwiki.org/faq:searchindex">faq:searchindex</a> 284 for help on how to fix the search index. If the default indexer 285 isn\'t used or the wiki is actually empty this is normal.' 286 ); 287 } 288 289 // rough time check 290 $http = new DokuHTTPClient(); 291 $http->max_redirect = 0; 292 $http->timeout = 3; 293 $http->sendRequest('http://www.dokuwiki.org', '', 'HEAD'); 294 $now = time(); 295 if(isset($http->resp_headers['date'])) { 296 $time = strtotime($http->resp_headers['date']); 297 $diff = $time - $now; 298 299 if(abs($diff) < 4) { 300 msg("Server time seems to be okay. Diff: {$diff}s", 1); 301 } else { 302 msg("Your server's clock seems to be out of sync! 303 Consider configuring a sync with a NTP server. Diff: {$diff}s"); 304 } 305 } 306 307} 308 309/** 310 * print a message 311 * 312 * If HTTP headers were not sent yet the message is added 313 * to the global message array else it's printed directly 314 * using html_msgarea() 315 * 316 * 317 * Levels can be: 318 * 319 * -1 error 320 * 0 info 321 * 1 success 322 * 323 * @author Andreas Gohr <andi@splitbrain.org> 324 * @see html_msgarea 325 */ 326 327define('MSG_PUBLIC', 0); 328define('MSG_USERS_ONLY', 1); 329define('MSG_MANAGERS_ONLY',2); 330define('MSG_ADMINS_ONLY',4); 331 332/** 333 * Display a message to the user 334 * 335 * @param string $message 336 * @param int $lvl -1 = error, 0 = info, 1 = success, 2 = notify 337 * @param string $line line number 338 * @param string $file file number 339 * @param int $allow who's allowed to see the message, see MSG_* constants 340 */ 341function msg($message,$lvl=0,$line='',$file='',$allow=MSG_PUBLIC){ 342 global $MSG, $MSG_shown; 343 $errors = array(); 344 $errors[-1] = 'error'; 345 $errors[0] = 'info'; 346 $errors[1] = 'success'; 347 $errors[2] = 'notify'; 348 349 if($line || $file) $message.=' ['.\dokuwiki\Utf8\PhpString::basename($file).':'.$line.']'; 350 351 if(!isset($MSG)) $MSG = array(); 352 $MSG[]=array('lvl' => $errors[$lvl], 'msg' => $message, 'allow' => $allow); 353 if(isset($MSG_shown) || headers_sent()){ 354 if(function_exists('html_msgarea')){ 355 html_msgarea(); 356 }else{ 357 print "ERROR($lvl) $message"; 358 } 359 unset($GLOBALS['MSG']); 360 } 361} 362/** 363 * Determine whether the current user is allowed to view the message 364 * in the $msg data structure 365 * 366 * @param $msg array dokuwiki msg structure 367 * msg => string, the message 368 * lvl => int, level of the message (see msg() function) 369 * allow => int, flag used to determine who is allowed to see the message 370 * see MSG_* constants 371 * @return bool 372 */ 373function info_msg_allowed($msg){ 374 global $INFO, $auth; 375 376 // is the message public? - everyone and anyone can see it 377 if (empty($msg['allow']) || ($msg['allow'] == MSG_PUBLIC)) return true; 378 379 // restricted msg, but no authentication 380 if (empty($auth)) return false; 381 382 switch ($msg['allow']){ 383 case MSG_USERS_ONLY: 384 return !empty($INFO['userinfo']); 385 386 case MSG_MANAGERS_ONLY: 387 return $INFO['ismanager']; 388 389 case MSG_ADMINS_ONLY: 390 return $INFO['isadmin']; 391 392 default: 393 trigger_error('invalid msg allow restriction. msg="'.$msg['msg'].'" allow='.$msg['allow'].'"', 394 E_USER_WARNING); 395 return $INFO['isadmin']; 396 } 397 398 return false; 399} 400 401/** 402 * print debug messages 403 * 404 * little function to print the content of a var 405 * 406 * @author Andreas Gohr <andi@splitbrain.org> 407 * 408 * @param string $msg 409 * @param bool $hidden 410 */ 411function dbg($msg,$hidden=false){ 412 if($hidden){ 413 echo "<!--\n"; 414 print_r($msg); 415 echo "\n-->"; 416 }else{ 417 echo '<pre class="dbg">'; 418 echo hsc(print_r($msg,true)); 419 echo '</pre>'; 420 } 421} 422 423/** 424 * Print info to a log file 425 * 426 * @author Andreas Gohr <andi@splitbrain.org> 427 * 428 * @param string $msg 429 * @param string $header 430 */ 431function dbglog($msg,$header=''){ 432 global $conf; 433 /* @var Input $INPUT */ 434 global $INPUT; 435 436 // The debug log isn't automatically cleaned thus only write it when 437 // debugging has been enabled by the user. 438 if($conf['allowdebug'] !== 1) return; 439 if(is_object($msg) || is_array($msg)){ 440 $msg = print_r($msg,true); 441 } 442 443 if($header) $msg = "$header\n$msg"; 444 445 $file = $conf['cachedir'].'/debug.log'; 446 $fh = fopen($file,'a'); 447 if($fh){ 448 fwrite($fh,date('H:i:s ').$INPUT->server->str('REMOTE_ADDR').': '.$msg."\n"); 449 fclose($fh); 450 } 451} 452 453/** 454 * Log accesses to deprecated fucntions to the debug log 455 * 456 * @param string $alternative The function or method that should be used instead 457 * @triggers INFO_DEPRECATION_LOG 458 */ 459function dbg_deprecated($alternative = '') { 460 \dokuwiki\Debug\DebugHelper::dbgDeprecatedFunction($alternative, 2); 461} 462 463/** 464 * Print a reversed, prettyprinted backtrace 465 * 466 * @author Gary Owen <gary_owen@bigfoot.com> 467 */ 468function dbg_backtrace(){ 469 // Get backtrace 470 $backtrace = debug_backtrace(); 471 472 // Unset call to debug_print_backtrace 473 array_shift($backtrace); 474 475 // Iterate backtrace 476 $calls = array(); 477 $depth = count($backtrace) - 1; 478 foreach ($backtrace as $i => $call) { 479 $location = $call['file'] . ':' . $call['line']; 480 $function = (isset($call['class'])) ? 481 $call['class'] . $call['type'] . $call['function'] : $call['function']; 482 483 $params = array(); 484 if (isset($call['args'])){ 485 foreach($call['args'] as $arg){ 486 if(is_object($arg)){ 487 $params[] = '[Object '.get_class($arg).']'; 488 }elseif(is_array($arg)){ 489 $params[] = '[Array]'; 490 }elseif(is_null($arg)){ 491 $params[] = '[NULL]'; 492 }else{ 493 $params[] = (string) '"'.$arg.'"'; 494 } 495 } 496 } 497 $params = implode(', ',$params); 498 499 $calls[$depth - $i] = sprintf('%s(%s) called at %s', 500 $function, 501 str_replace("\n", '\n', $params), 502 $location); 503 } 504 ksort($calls); 505 506 return implode("\n", $calls); 507} 508 509/** 510 * Remove all data from an array where the key seems to point to sensitive data 511 * 512 * This is used to remove passwords, mail addresses and similar data from the 513 * debug output 514 * 515 * @author Andreas Gohr <andi@splitbrain.org> 516 * 517 * @param array $data 518 */ 519function debug_guard(&$data){ 520 foreach($data as $key => $value){ 521 if(preg_match('/(notify|pass|auth|secret|ftp|userinfo|token|buid|mail|proxy)/i',$key)){ 522 $data[$key] = '***'; 523 continue; 524 } 525 if(is_array($value)) debug_guard($data[$key]); 526 } 527} 528