inc/infoutils.php

   1 <?php
   2 /**
   3  * Information and debugging functions
   4  *
   5  * @license    GPL 2 (http://www.gnu.org/licenses/gpl.html)
   6  * @author     Andreas Gohr <andi@splitbrain.org>
   7  */
   8
   9 use dokuwiki\HTTP\DokuHTTPClient;
  10
  11 if(!defined('DOKU_MESSAGEURL')){
  12     if(in_array('ssl', stream_get_transports())) {
  13         define('DOKU_MESSAGEURL','https://update.dokuwiki.org/check/');
  14     }else{
  15         define('DOKU_MESSAGEURL','http://update.dokuwiki.org/check/');
  16     }
  17 }
  18
  19 /**
  20  * Check for new messages from upstream
  21  *
  22  * @author Andreas Gohr <andi@splitbrain.org>
  23  */
  24 function checkUpdateMessages(){
  25     global $conf;
  26     global $INFO;
  27     global $updateVersion;
  28     if(!$conf['updatecheck']) return;
  29     if($conf['useacl'] && !$INFO['ismanager']) return;
  30
  31     $cf = getCacheName($updateVersion, '.updmsg');
  32     $lm = @filemtime($cf);
  33     $is_http = substr(DOKU_MESSAGEURL, 0, 5) != 'https';
  34
  35     // check if new messages needs to be fetched
  36     if($lm < time()-(60*60*24) || $lm < @filemtime(DOKU_INC.DOKU_SCRIPT)){
  37         @touch($cf);
  38         dbglog("checkUpdateMessages(): downloading messages to ".$cf.($is_http?' (without SSL)':' (with SSL)'));
  39         $http = new DokuHTTPClient();
  40         $http->timeout = 12;
  41         $resp = $http->get(DOKU_MESSAGEURL.$updateVersion);
  42         if(is_string($resp) && ($resp == "" || substr(trim($resp), -1) == '%')) {
  43             // basic sanity check that this is either an empty string response (ie "no messages")
  44             // or it looks like one of our messages, not WiFi login or other interposed response
  45             io_saveFile($cf,$resp);
  46         } else {
  47             dbglog("checkUpdateMessages(): unexpected HTTP response received");
  48         }
  49     }else{
  50         dbglog("checkUpdateMessages(): messages up to date");
  51     }
  52
  53     $data = io_readFile($cf);
  54     // show messages through the usual message mechanism
  55     $msgs = explode("\n%\n",$data);
  56     foreach($msgs as $msg){
  57         if($msg) msg($msg,2);
  58     }
  59 }
  60
  61
  62 /**
  63  * Return DokuWiki's version (split up in date and type)
  64  *
  65  * @author Andreas Gohr <andi@splitbrain.org>
  66  */
  67 function getVersionData(){
  68     $version = array();
  69     //import version string
  70     if(file_exists(DOKU_INC.'VERSION')){
  71         //official release
  72         $version['date'] = trim(io_readFile(DOKU_INC.'VERSION'));
  73         $version['type'] = 'Release';
  74     }elseif(is_dir(DOKU_INC.'.git')){
  75         $version['type'] = 'Git';
  76         $version['date'] = 'unknown';
  77
  78         $inventory = DOKU_INC.'.git/logs/HEAD';
  79         if(is_file($inventory)){
  80             $sz   = filesize($inventory);
  81             $seek = max(0,$sz-2000); // read from back of the file
  82             $fh   = fopen($inventory,'rb');
  83             fseek($fh,$seek);
  84             $chunk = fread($fh,2000);
  85             fclose($fh);
  86             $chunk = trim($chunk);
  87             $chunk = @array_pop(explode("\n",$chunk));   //last log line
  88             $chunk = @array_shift(explode("\t",$chunk)); //strip commit msg
  89             $chunk = explode(" ",$chunk);
  90             array_pop($chunk); //strip timezone
  91             $date = date('Y-m-d',array_pop($chunk));
  92             if($date) $version['date'] = $date;
  93         }
  94     }else{
  95         global $updateVersion;
  96         $version['date'] = 'update version '.$updateVersion;
  97         $version['type'] = 'snapshot?';
  98     }
  99     return $version;
 100 }
 101
 102 /**
 103  * Return DokuWiki's version (as a string)
 104  *
 105  * @author Anika Henke <anika@selfthinker.org>
 106  */
 107 function getVersion(){
 108     $version = getVersionData();
 109     return $version['type'].' '.$version['date'];
 110 }
 111
 112 /**
 113  * Run a few sanity checks
 114  *
 115  * @author Andreas Gohr <andi@splitbrain.org>
 116  */
 117 function check(){
 118     global $conf;
 119     global $INFO;
 120     /* @var Input $INPUT */
 121     global $INPUT;
 122
 123     if ($INFO['isadmin'] || $INFO['ismanager']){
 124         msg('DokuWiki version: '.getVersion(),1);
 125
 126         if(version_compare(phpversion(),'5.6.0','<')){
 127             msg('Your PHP version is too old ('.phpversion().' vs. 5.6.0+ needed)',-1);
 128         }else{
 129             msg('PHP version '.phpversion(),1);
 130         }
 131     } else {
 132         if(version_compare(phpversion(),'5.6.0','<')){
 133             msg('Your PHP version is too old',-1);
 134         }
 135     }
 136
 137     $mem = (int) php_to_byte(ini_get('memory_limit'));
 138     if($mem){
 139         if ($mem === -1) {
 140             msg('PHP memory is unlimited', 1);
 141         } else if ($mem < 16777216) {
 142             msg('PHP is limited to less than 16MB RAM (' . filesize_h($mem) . ').
 143             Increase memory_limit in php.ini', -1);
 144         } else if ($mem < 20971520) {
 145             msg('PHP is limited to less than 20MB RAM (' . filesize_h($mem) . '),
 146                 you might encounter problems with bigger pages. Increase memory_limit in php.ini', -1);
 147         } else if ($mem < 33554432) {
 148             msg('PHP is limited to less than 32MB RAM (' . filesize_h($mem) . '),
 149                 but that should be enough in most cases. If not, increase memory_limit in php.ini', 0);
 150         } else {
 151             msg('More than 32MB RAM (' . filesize_h($mem) . ') available.', 1);
 152         }
 153     }
 154
 155     if(is_writable($conf['changelog'])){
 156         msg('Changelog is writable',1);
 157     }else{
 158         if (file_exists($conf['changelog'])) {
 159             msg('Changelog is not writable',-1);
 160         }
 161     }
 162
 163     if (isset($conf['changelog_old']) && file_exists($conf['changelog_old'])) {
 164         msg('Old changelog exists', 0);
 165     }
 166
 167     if (file_exists($conf['changelog'].'_failed')) {
 168         msg('Importing old changelog failed', -1);
 169     } else if (file_exists($conf['changelog'].'_importing')) {
 170         msg('Importing old changelog now.', 0);
 171     } else if (file_exists($conf['changelog'].'_import_ok')) {
 172         msg('Old changelog imported', 1);
 173         if (!plugin_isdisabled('importoldchangelog')) {
 174             msg('Importoldchangelog plugin not disabled after import', -1);
 175         }
 176     }
 177
 178     if(is_writable(DOKU_CONF)){
 179         msg('conf directory is writable',1);
 180     }else{
 181         msg('conf directory is not writable',-1);
 182     }
 183
 184     if($conf['authtype'] == 'plain'){
 185         global $config_cascade;
 186         if(is_writable($config_cascade['plainauth.users']['default'])){
 187             msg('conf/users.auth.php is writable',1);
 188         }else{
 189             msg('conf/users.auth.php is not writable',0);
 190         }
 191     }
 192
 193     if(function_exists('mb_strpos')){
 194         if(defined('UTF8_NOMBSTRING')){
 195             msg('mb_string extension is available but will not be used',0);
 196         }else{
 197             msg('mb_string extension is available and will be used',1);
 198             if(ini_get('mbstring.func_overload') != 0){
 199                 msg('mb_string function overloading is enabled, this will cause problems and should be disabled',-1);
 200             }
 201         }
 202     }else{
 203         msg('mb_string extension not available - PHP only replacements will be used',0);
 204     }
 205
 206     if (!UTF8_PREGSUPPORT) {
 207         msg('PHP is missing UTF-8 support in Perl-Compatible Regular Expressions (PCRE)', -1);
 208     }
 209     if (!UTF8_PROPERTYSUPPORT) {
 210         msg('PHP is missing Unicode properties support in Perl-Compatible Regular Expressions (PCRE)', -1);
 211     }
 212
 213     $loc = setlocale(LC_ALL, 0);
 214     if(!$loc){
 215         msg('No valid locale is set for your PHP setup. You should fix this',-1);
 216     }elseif(stripos($loc,'utf') === false){
 217         msg('Your locale <code>'.hsc($loc).'</code> seems not to be a UTF-8 locale,
 218              you should fix this if you encounter problems.',0);
 219     }else{
 220         msg('Valid locale '.hsc($loc).' found.', 1);
 221     }
 222
 223     if($conf['allowdebug']){
 224         msg('Debugging support is enabled. If you don\'t need it you should set $conf[\'allowdebug\'] = 0',-1);
 225     }else{
 226         msg('Debugging support is disabled',1);
 227     }
 228
 229     if($INFO['userinfo']['name']){
 230         msg('You are currently logged in as '.$INPUT->server->str('REMOTE_USER').' ('.$INFO['userinfo']['name'].')',0);
 231         msg('You are part of the groups '.join($INFO['userinfo']['grps'],', '),0);
 232     }else{
 233         msg('You are currently not logged in',0);
 234     }
 235
 236     msg('Your current permission for this page is '.$INFO['perm'],0);
 237
 238     if (file_exists($INFO['filepath']) && is_writable($INFO['filepath'])) {
 239         msg('The current page is writable by the webserver', 1);
 240     } elseif (!file_exists($INFO['filepath']) && is_writable(dirname($INFO['filepath']))) {
 241         msg('The current page can be created by the webserver', 1);
 242     } else {
 243         msg('The current page is not writable by the webserver', -1);
 244     }
 245
 246     if ($INFO['writable']) {
 247         msg('The current page is writable by you', 1);
 248     } else {
 249         msg('The current page is not writable by you', -1);
 250     }
 251
 252     // Check for corrupted search index
 253     $lengths = idx_listIndexLengths();
 254     $index_corrupted = false;
 255     foreach ($lengths as $length) {
 256         if (count(idx_getIndex('w', $length)) != count(idx_getIndex('i', $length))) {
 257             $index_corrupted = true;
 258             break;
 259         }
 260     }
 261
 262     foreach (idx_getIndex('metadata', '') as $index) {
 263         if (count(idx_getIndex($index.'_w', '')) != count(idx_getIndex($index.'_i', ''))) {
 264             $index_corrupted = true;
 265             break;
 266         }
 267     }
 268
 269     if($index_corrupted) {
 270         msg(
 271             'The search index is corrupted. It might produce wrong results and most
 272                 probably needs to be rebuilt. See
 273                 <a href="http://www.dokuwiki.org/faq:searchindex">faq:searchindex</a>
 274                 for ways to rebuild the search index.', -1
 275         );
 276     } elseif(!empty($lengths)) {
 277         msg('The search index seems to be working', 1);
 278     } else {
 279         msg(
 280             'The search index is empty. See
 281                 <a href="http://www.dokuwiki.org/faq:searchindex">faq:searchindex</a>
 282                 for help on how to fix the search index. If the default indexer
 283                 isn\'t used or the wiki is actually empty this is normal.'
 284         );
 285     }
 286
 287     // rough time check
 288     $http = new DokuHTTPClient();
 289     $http->max_redirect = 0;
 290     $http->timeout = 3;
 291     $http->sendRequest('http://www.dokuwiki.org', '', 'HEAD');
 292     $now = time();
 293     if(isset($http->resp_headers['date'])) {
 294         $time = strtotime($http->resp_headers['date']);
 295         $diff = $time - $now;
 296
 297         if(abs($diff) < 4) {
 298             msg("Server time seems to be okay. Diff: {$diff}s", 1);
 299         } else {
 300             msg("Your server's clock seems to be out of sync!
 301                  Consider configuring a sync with a NTP server.  Diff: {$diff}s");
 302         }
 303     }
 304
 305 }
 306
 307 /**
 308  * Display a message to the user
 309  *
 310  * If HTTP headers were not sent yet the message is added
 311  * to the global message array else it's printed directly
 312  * using html_msgarea()
 313  *
 314  * Triggers INFOUTIL_MSG_SHOW
 315  *
 316  * @see    html_msgarea()
 317  * @param string $message
 318  * @param int    $lvl   -1 = error, 0 = info, 1 = success, 2 = notify
 319  * @param string $line  line number
 320  * @param string $file  file number
 321  * @param int    $allow who's allowed to see the message, see MSG_* constants
 322  */
 323 function msg($message,$lvl=0,$line='',$file='',$allow=MSG_PUBLIC){
 324     global $MSG, $MSG_shown;
 325     static $errors = [
 326         -1 => 'error',
 327         0 => 'info',
 328         1 => 'success',
 329         2 => 'notify',
 330     ];
 331
 332     $msgdata = [
 333         'msg' => $message,
 334         'lvl' => $errors[$lvl],
 335         'allow' => $allow,
 336         'line' => $line,
 337         'file' => $file,
 338     ];
 339
 340     $evt = new \dokuwiki\Extension\Event('INFOUTIL_MSG_SHOW', $msgdata);
 341     if ($evt->advise_before()) {
 342         /* Show msg normally - event could suppress message show */
 343         if($msgdata['line'] || $msgdata['file']) {
 344             $basename = \dokuwiki\Utf8\PhpString::basename($msgdata['file']);
 345             $msgdata['msg'] .=' ['.$basename.':'.$msgdata['line'].']';
 346         }
 347
 348         if(!isset($MSG)) $MSG = array();
 349         $MSG[] = $msgdata;
 350         if(isset($MSG_shown) || headers_sent()){
 351             if(function_exists('html_msgarea')){
 352                 html_msgarea();
 353             }else{
 354                 print "ERROR(".$msgdata['lvl'].") ".$msgdata['msg']."\n";
 355             }
 356             unset($GLOBALS['MSG']);
 357         }
 358     }
 359     $evt->advise_after();
 360     unset($evt);
 361 }
 362 /**
 363  * Determine whether the current user is allowed to view the message
 364  * in the $msg data structure
 365  *
 366  * @param  $msg   array    dokuwiki msg structure
 367  *                         msg   => string, the message
 368  *                         lvl   => int, level of the message (see msg() function)
 369  *                         allow => int, flag used to determine who is allowed to see the message
 370  *                                       see MSG_* constants
 371  * @return bool
 372  */
 373 function info_msg_allowed($msg){
 374     global $INFO, $auth;
 375
 376     // is the message public? - everyone and anyone can see it
 377     if (empty($msg['allow']) || ($msg['allow'] == MSG_PUBLIC)) return true;
 378
 379     // restricted msg, but no authentication
 380     if (empty($auth)) return false;
 381
 382     switch ($msg['allow']){
 383         case MSG_USERS_ONLY:
 384             return !empty($INFO['userinfo']);
 385
 386         case MSG_MANAGERS_ONLY:
 387             return $INFO['ismanager'];
 388
 389         case MSG_ADMINS_ONLY:
 390             return $INFO['isadmin'];
 391
 392         default:
 393             trigger_error('invalid msg allow restriction.  msg="'.$msg['msg'].'" allow='.$msg['allow'].'"',
 394                           E_USER_WARNING);
 395             return $INFO['isadmin'];
 396     }
 397
 398     return false;
 399 }
 400
 401 /**
 402  * print debug messages
 403  *
 404  * little function to print the content of a var
 405  *
 406  * @author Andreas Gohr <andi@splitbrain.org>
 407  *
 408  * @param string $msg
 409  * @param bool $hidden
 410  */
 411 function dbg($msg,$hidden=false){
 412     if($hidden){
 413         echo "<!--\n";
 414         print_r($msg);
 415         echo "\n-->";
 416     }else{
 417         echo '<pre class="dbg">';
 418         echo hsc(print_r($msg,true));
 419         echo '</pre>';
 420     }
 421 }
 422
 423 /**
 424  * Print info to a log file
 425  *
 426  * @author Andreas Gohr <andi@splitbrain.org>
 427  *
 428  * @param string $msg
 429  * @param string $header
 430  */
 431 function dbglog($msg,$header=''){
 432     global $conf;
 433     /* @var Input $INPUT */
 434     global $INPUT;
 435
 436     // The debug log isn't automatically cleaned thus only write it when
 437     // debugging has been enabled by the user.
 438     if($conf['allowdebug'] !== 1) return;
 439     if(is_object($msg) || is_array($msg)){
 440         $msg = print_r($msg,true);
 441     }
 442
 443     if($header) $msg = "$header\n$msg";
 444
 445     $file = $conf['cachedir'].'/debug.log';
 446     $fh = fopen($file,'a');
 447     if($fh){
 448         fwrite($fh,date('H:i:s ').$INPUT->server->str('REMOTE_ADDR').': '.$msg."\n");
 449         fclose($fh);
 450     }
 451 }
 452
 453 /**
 454  * Log accesses to deprecated fucntions to the debug log
 455  *
 456  * @param string $alternative The function or method that should be used instead
 457  * @triggers INFO_DEPRECATION_LOG
 458  */
 459 function dbg_deprecated($alternative = '') {
 460     \dokuwiki\Debug\DebugHelper::dbgDeprecatedFunction($alternative, 2);
 461 }
 462
 463 /**
 464  * Print a reversed, prettyprinted backtrace
 465  *
 466  * @author Gary Owen <gary_owen@bigfoot.com>
 467  */
 468 function dbg_backtrace(){
 469     // Get backtrace
 470     $backtrace = debug_backtrace();
 471
 472     // Unset call to debug_print_backtrace
 473     array_shift($backtrace);
 474
 475     // Iterate backtrace
 476     $calls = array();
 477     $depth = count($backtrace) - 1;
 478     foreach ($backtrace as $i => $call) {
 479         $location = $call['file'] . ':' . $call['line'];
 480         $function = (isset($call['class'])) ?
 481             $call['class'] . $call['type'] . $call['function'] : $call['function'];
 482
 483         $params = array();
 484         if (isset($call['args'])){
 485             foreach($call['args'] as $arg){
 486                 if(is_object($arg)){
 487                     $params[] = '[Object '.get_class($arg).']';
 488                 }elseif(is_array($arg)){
 489                     $params[] = '[Array]';
 490                 }elseif(is_null($arg)){
 491                     $params[] = '[NULL]';
 492                 }else{
 493                     $params[] = (string) '"'.$arg.'"';
 494                 }
 495             }
 496         }
 497         $params = implode(', ',$params);
 498
 499         $calls[$depth - $i] = sprintf('%s(%s) called at %s',
 500                 $function,
 501                 str_replace("\n", '\n', $params),
 502                 $location);
 503     }
 504     ksort($calls);
 505
 506     return implode("\n", $calls);
 507 }
 508
 509 /**
 510  * Remove all data from an array where the key seems to point to sensitive data
 511  *
 512  * This is used to remove passwords, mail addresses and similar data from the
 513  * debug output
 514  *
 515  * @author Andreas Gohr <andi@splitbrain.org>
 516  *
 517  * @param array $data
 518  */
 519 function debug_guard(&$data){
 520     foreach($data as $key => $value){
 521         if(preg_match('/(notify|pass|auth|secret|ftp|userinfo|token|buid|mail|proxy)/i',$key)){
 522             $data[$key] = '***';
 523             continue;
 524         }
 525         if(is_array($value)) debug_guard($data[$key]);
 526     }
 527 }