getValues([ ['site.name:s', 'Misuzu'], 'site.desc:s', 'site.url:s', 'eeprom.path:s', 'eeprom.app:s', ['csrf.secret:s', 'soup'], ]); Template::init($msz, $twigCache ?? null, MSZ_DEBUG); Template::set('globals', [ 'site_name' => $globals['site.name'], 'site_description' => $globals['site.desc'], 'site_url' => $globals['site.url'], 'eeprom' => [ 'path' => $globals['eeprom.path'], 'app' => $globals['eeprom.app'], ], ]); $mszAssetsInfo = json_decode(file_get_contents(MSZ_ASSETS . '/current.json')); if(!empty($mszAssetsInfo)) Template::set('assets', $mszAssetsInfo); unset($mszAssetsInfo); Template::addPath(MSZ_TEMPLATES); $tokenPacker = $msz->createAuthTokenPacker(); if(filter_has_var(INPUT_COOKIE, 'msz_auth')) $tokenInfo = $tokenPacker->unpack(filter_input(INPUT_COOKIE, 'msz_auth')); elseif(filter_has_var(INPUT_COOKIE, 'msz_uid') && filter_has_var(INPUT_COOKIE, 'msz_sid')) { $tokenBuilder = new AuthTokenBuilder; $tokenBuilder->setUserId((string)filter_input(INPUT_COOKIE, 'msz_uid', FILTER_SANITIZE_NUMBER_INT)); $tokenBuilder->setSessionToken((string)filter_input(INPUT_COOKIE, 'msz_sid')); $tokenInfo = $tokenBuilder->toInfo(); $tokenBuilder = null; } else $tokenInfo = AuthTokenInfo::empty(); $userInfo = null; $sessionInfo = null; $userInfoReal = null; if($tokenInfo->hasUserId() && $tokenInfo->hasSessionToken()) { $users = $msz->getUsers(); $sessions = $msz->getSessions(); $tokenBuilder = new AuthTokenBuilder($tokenInfo); try { $sessionInfo = $sessions->getSession(sessionToken: $tokenInfo->getSessionToken()); if($sessionInfo->hasExpired()) { $tokenBuilder->removeUserId(); $tokenBuilder->removeSessionToken(); } elseif($sessionInfo->getUserId() === $tokenInfo->getUserId()) { $userInfo = $users->getUser($tokenInfo->getUserId(), 'id'); if($userInfo->isDeleted()) { $tokenBuilder->removeUserId(); $tokenBuilder->removeSessionToken(); } else { $users->recordUserActivity($userInfo, remoteAddr: $_SERVER['REMOTE_ADDR']); $sessions->recordSessionActivity(sessionInfo: $sessionInfo, remoteAddr: $_SERVER['REMOTE_ADDR']); if($sessionInfo->shouldBumpExpires()) $tokenBuilder->setEdited(); if($tokenInfo->hasImpersonatedUserId()) { $allowToImpersonate = $userInfo->isSuperUser(); $impersonatedUserId = $tokenInfo->getImpersonatedUserId(); if(!$allowToImpersonate) { $allowImpersonateUsers = $cfg->getArray(sprintf('impersonate.allow.u%s', $userInfo->getId())); $allowToImpersonate = in_array((string)$impersonatedUserId, $allowImpersonateUsers, true); } if($allowToImpersonate) { $userInfoReal = $userInfo; try { $userInfo = $users->getUser($impersonatedUserId, 'id'); } catch(RuntimeException $ex) { $userInfo = $userInfoReal; $userInfoReal = null; $tokenBuilder->removeImpersonatedUserId(); } } else $tokenBuilder->removeImpersonatedUserId(); } } } } catch(RuntimeException $ex) { $tokenBuilder->removeUserId(); $tokenBuilder->removeSessionToken(); $tokenBuilder->removeImpersonatedUserId(); $userInfo = null; $sessionInfo = null; $userInfoReal = null; } if($tokenBuilder->isEdited()) { $tokenInfo = $tokenBuilder->toInfo(); AuthTokenCookie::apply($tokenPacker->pack($tokenInfo)); } } $msz->getAuthInfo()->setInfo($tokenInfo, $userInfo, $sessionInfo, $userInfoReal); if(!empty($userInfo)) $userInfo = $users->getUser((string)$userInfo->getId(), 'id'); if(!empty($userInfoReal)) $userInfoReal = $users->getUser((string)$userInfoReal->getId(), 'id'); CSRF::init( $globals['csrf.secret'], ($msz->isLoggedIn() ? $sessionInfo->getToken() : $_SERVER['REMOTE_ADDR']) ); if(!empty($userInfo)) { Template::set('current_user', $userInfo); Template::set('current_user_ban_info', $msz->tryGetActiveBan()); } if(!empty($userInfoReal)) { Template::set('current_user_real', $userInfoReal); Template::set('current_user_real_colour', $users->getUserColour($userInfoReal)); } $inManageMode = str_starts_with($_SERVER['REQUEST_URI'], '/manage'); Template::set('header_menu', $msz->getHeaderMenu($userInfo ?? null)); Template::set('user_menu', $msz->getUserMenu($userInfo ?? null, $inManageMode)); Template::set('display_debug_info', MSZ_DEBUG || (!empty($userInfo) && $userInfo->isSuperUser())); if($inManageMode) { $hasManageAccess = false; if($msz->isLoggedIn() && !$msz->hasActiveBan()) { $manageUser = $msz->getActiveUser(); $manageUserId = $manageUser->getId(); $manageGlobalPerms = $msz->getAuthInfo()->getPerms('global'); if($manageGlobalPerms->check(Perm::G_IS_JANITOR)) { $hasManageAccess = true; $manageMenu = [ 'General' => [ 'Overview' => url('manage-general-overview'), ], ]; if($manageGlobalPerms->check(Perm::G_LOGS_VIEW)) $manageMenu['General']['Logs'] = url('manage-general-logs'); if($manageGlobalPerms->check(Perm::G_EMOTES_MANAGE)) $manageMenu['General']['Emoticons'] = url('manage-general-emoticons'); if($manageGlobalPerms->check(Perm::G_CONFIG_MANAGE)) $manageMenu['General']['Settings'] = url('manage-general-settings'); $manageUserPerms = $msz->getAuthInfo()->getPerms('user'); if($manageUserPerms->check(Perm::U_USERS_MANAGE)) $manageMenu['Users & Roles']['Users'] = url('manage-users'); if($manageUserPerms->check(Perm::U_ROLES_MANAGE)) $manageMenu['Users & Roles']['Roles'] = url('manage-roles'); if($manageUserPerms->check(Perm::U_NOTES_MANAGE)) $manageMenu['Users & Roles']['Notes'] = url('manage-users-notes'); if($manageUserPerms->check(Perm::U_WARNINGS_MANAGE)) $manageMenu['Users & Roles']['Warnings'] = url('manage-users-warnings'); if($manageUserPerms->check(Perm::U_BANS_MANAGE)) $manageMenu['Users & Roles']['Bans'] = url('manage-users-bans'); if($manageGlobalPerms->check(Perm::G_NEWS_POSTS_MANAGE)) $manageMenu['News']['Posts'] = url('manage-news-posts'); if($manageGlobalPerms->check(Perm::G_NEWS_CATEGORIES_MANAGE)) $manageMenu['News']['Categories'] = url('manage-news-categories'); if($manageGlobalPerms->check(Perm::G_FORUM_CATEGORIES_MANAGE)) $manageMenu['Forum']['Permission Calculator'] = url('manage-forum-categories'); if($manageGlobalPerms->check(Perm::G_FORUM_TOPIC_REDIRS_MANAGE)) $manageMenu['Forum']['Topic Redirects'] = url('manage-forum-topic-redirs'); if($manageGlobalPerms->check(Perm::G_CL_CHANGES_MANAGE)) $manageMenu['Changelog']['Changes'] = url('manage-changelog-changes'); if($manageGlobalPerms->check(Perm::G_CL_TAGS_MANAGE)) $manageMenu['Changelog']['Tags'] = url('manage-changelog-tags'); Template::set('manage_menu', $manageMenu); } } if(!$hasManageAccess) { echo render_error(403); exit; } } $mszRequestPath = $request->getPath(); $mszLegacyPathPrefix = MSZ_PUBLIC . '-legacy/'; $mszLegacyPath = realpath($mszLegacyPathPrefix . $mszRequestPath); if(!empty($mszLegacyPath) && str_starts_with($mszLegacyPath, $mszLegacyPathPrefix)) { if(is_dir($mszLegacyPath)) $mszLegacyPath .= '/index.php'; if(is_file($mszLegacyPath)) { require_once $mszLegacyPath; return; } } $msz->setUpHttp(); $msz->dispatchHttp($request);