Bug 11307: Fix potential XSS attack in public catalog RSS feed
[koha.git] / about.pl
blob6b44ea852b33a58fbc477640c44cc5272c99e969
1 #!/usr/bin/perl
3 # Copyright Pat Eyler 2003
4 # Copyright Biblibre 2006
5 # Parts Copyright Liblime 2008
6 # Parts Copyright Chris Nighswonger 2010
8 # This file is part of Koha.
10 # Koha is free software; you can redistribute it and/or modify it under the
11 # terms of the GNU General Public License as published by the Free Software
12 # Foundation; either version 2 of the License, or (at your option) any later
13 # version.
15 # Koha is distributed in the hope that it will be useful, but WITHOUT ANY
16 # WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
17 # A PARTICULAR PURPOSE. See the GNU General Public License for more details.
19 # You should have received a copy of the GNU General Public License along
20 # with Koha; if not, write to the Free Software Foundation, Inc.,
21 # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
23 use strict;
24 use warnings;
26 use CGI;
27 use LWP::Simple;
28 use XML::Simple;
29 use Config;
31 use C4::Output;
32 use C4::Auth;
33 use C4::Context;
34 use C4::Installer;
36 #use Smart::Comments '####';
38 my $query = new CGI;
39 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
41 template_name => "about.tmpl",
42 query => $query,
43 type => "intranet",
44 authnotrequired => 0,
45 flagsrequired => { catalogue => 1 },
46 debug => 1,
50 my $kohaVersion = C4::Context::KOHAVERSION;
51 my $osVersion = `uname -a`;
52 my $perl_path = $^X;
53 if ($^O ne 'VMS') {
54 $perl_path .= $Config{_exe} unless $perl_path =~ m/$Config{_exe}$/i;
56 my $perlVersion = $];
57 my $mysqlVersion = `mysql -V`;
58 my $apacheVersion = `httpd -v 2> /dev/null`;
59 $apacheVersion = `httpd2 -v 2> /dev/null` unless $apacheVersion;
60 $apacheVersion = (`/usr/sbin/apache2 -V`)[0] unless $apacheVersion;
61 my $zebraVersion = `zebraidx -V`;
63 # Additional system information for warnings
64 my $prefAutoCreateAuthorities = C4::Context->preference('AutoCreateAuthorities');
65 my $prefBiblioAddsAuthorities = C4::Context->preference('BiblioAddsAuthorities');
66 my $warnPrefBiblioAddsAuthorities = ( $prefAutoCreateAuthorities && ( !$prefBiblioAddsAuthorities) );
68 my $prefEasyAnalyticalRecords = C4::Context->preference('EasyAnalyticalRecords');
69 my $prefUseControlNumber = C4::Context->preference('UseControlNumber');
70 my $warnPrefEasyAnalyticalRecords = ( $prefEasyAnalyticalRecords && $prefUseControlNumber );
71 my $warnPrefAnonymousPatron = (
72 C4::Context->preference('OPACPrivacy')
73 and not C4::Context->preference('AnonymousPatron')
76 my $errZebraConnection = C4::Context->Zconn("biblioserver",0)->errcode();
78 my $warnIsRootUser = (! $loggedinuser);
80 $template->param(
81 kohaVersion => $kohaVersion,
82 osVersion => $osVersion,
83 perlPath => $perl_path,
84 perlVersion => $perlVersion,
85 perlIncPath => [ map { perlinc => $_ }, @INC ],
86 mysqlVersion => $mysqlVersion,
87 apacheVersion => $apacheVersion,
88 zebraVersion => $zebraVersion,
89 prefBiblioAddsAuthorities => $prefBiblioAddsAuthorities,
90 prefAutoCreateAuthorities => $prefAutoCreateAuthorities,
91 warnPrefBiblioAddsAuthorities => $warnPrefBiblioAddsAuthorities,
92 warnPrefEasyAnalyticalRecords => $warnPrefEasyAnalyticalRecords,
93 warnPrefAnonymousPatron => $warnPrefAnonymousPatron,
94 errZebraConnection => $errZebraConnection,
95 warnIsRootUser => $warnIsRootUser,
98 my @components = ();
100 my $perl_modules = C4::Installer::PerlModules->new;
101 $perl_modules->version_info;
103 my @pm_types = qw(missing_pm upgrade_pm current_pm);
105 foreach my $pm_type(@pm_types) {
106 my $modules = $perl_modules->get_attr($pm_type);
107 foreach (@$modules) {
108 my ($module, $stats) = each %$_;
109 push(
110 @components,
112 name => $module,
113 version => $stats->{'cur_ver'},
114 missing => ($pm_type eq 'missing_pm' ? 1 : 0),
115 upgrade => ($pm_type eq 'upgrade_pm' ? 1 : 0),
116 current => ($pm_type eq 'current_pm' ? 1 : 0),
117 require => $stats->{'required'},
123 @components = sort {$a->{'name'} cmp $b->{'name'}} @components;
125 my $counter=0;
126 my $row = [];
127 my $table = [];
128 foreach (@components) {
129 push (@$row, $_);
130 unless (++$counter % 4) {
131 push (@$table, {row => $row});
132 $row = [];
135 # Processing the last line (if there are any modules left)
136 if (scalar(@$row) > 0) {
137 # Extending $row to the table size
138 $$row[3] = '';
139 # Pushing the last line
140 push (@$table, {row => $row});
142 ## ## $table
144 $template->param( table => $table );
147 ## ------------------------------------------
148 ## Koha time line code
150 #get file location
151 my $docdir;
152 if ( defined C4::Context->config('docdir') ) {
153 $docdir = C4::Context->config('docdir');
154 } else {
155 # if no <docdir> is defined in koha-conf.xml, use the default location
156 # this is a work-around to stop breakage on upgraded Kohas, bug 8911
157 $docdir = C4::Context->config('intranetdir') . '/docs';
160 if ( open( my $file, "<", "$docdir" . "/history.txt" ) ) {
162 my $i = 0;
164 my @rows2 = ();
165 my $row2 = [];
167 my @lines = <$file>;
168 close($file);
170 shift @lines; #remove header row
172 foreach (@lines) {
173 my ( $date, $desc, $tag ) = split(/\t/);
174 if(!$desc && $date=~ /(?<=\d{4})\s+/) {
175 ($date, $desc)= ($`, $');
177 push(
178 @rows2,
180 date => $date,
181 desc => $desc,
186 my $table2 = [];
187 #foreach my $row2 (@rows2) {
188 foreach (@rows2) {
189 push (@$row2, $_);
190 push( @$table2, { row2 => $row2 } );
191 $row2 = [];
194 $template->param( table2 => $table2 );
195 } else {
196 $template->param( timeline_read_error => 1 );
199 output_html_with_http_headers $query, $cookie, $template->output;