SwiftPanelPHP8/include.php at master · aLbanesoNET/SwiftPanelPHP8 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
<?php
declare(strict_types=1);

/*
 * Production error posture: log everything, display nothing. Displaying
 * warnings/notices would also corrupt redirects (headers already sent) and
 * leak internals. Override in php.ini during development if needed.
 */
error_reporting(E_ALL);
ini_set('display_errors', '0');
ini_set('log_errors', '1');

require_once __DIR__ . '/includes/security.php';

session_name('PHPSESSION');
session_cache_expire(30);
hardenSessionCookieParams();
session_start();

$page   = $page   ?? '';
$title  = $title  ?? '';
$return = $return ?? null;

if (empty($_SESSION['clientid']) && !empty($return)) {
	if ($return === true) {
		header('Location: login.php');
		exit;
	}
	header('Location: login.php?return=' . urlencode((string) $return));
	exit;
}

require_once __DIR__ . '/includes/functions1.php';
require_once __DIR__ . '/includes/functions3.php';
require_once __DIR__ . '/includes/mysql.php';

$panelName = dbRow(
	"SELECT `value` FROM `config` WHERE `setting` = 'panelname' LIMIT 1",
	true
);

define('SITENAME', $panelName['value'] ?? 'Swift Panel');

// Active template — read from the `template` config row (set on the admin
// General Settings page). Sanitised to a folder name and checked to exist;
// falls back to 'default' if unset or invalid.
$templateRow  = dbRow("SELECT `value` FROM `config` WHERE `setting` = 'template' LIMIT 1", true);
$templateName = preg_replace('/[^A-Za-z0-9_-]/', '', (string) ($templateRow['value'] ?? ''));
if ($templateName === '' || !is_dir(__DIR__ . '/templates/' . $templateName)) {
	$templateName = 'default';
}
define('TEMPLATE', $templateName);

/**
 * Absolute path to a template partial for the active theme, falling back to
 * templates/default when the active theme does not ship its own copy. This is
 * what lets a theme restructure the markup (its own header/footer/page views),
 * not merely restyle the 2009 default layout with CSS.
 */
function tpl(string $name): string
{
	$active = __DIR__ . '/templates/' . TEMPLATE . '/' . $name . '.php';

	return is_file($active)
		? $active
		: __DIR__ . '/templates/default/' . $name . '.php';
}

$SITE_NAME  = SITENAME;
$SITE_TITLE = $title !== '' ? $title . ' - ' . SITENAME : SITENAME;
$LOGGED_IN  = ($page !== 'login');

$FLASH_MSG1 = $_SESSION['msg1'] ?? null;
$FLASH_MSG2 = $_SESSION['msg2'] ?? null;

unset($_SESSION['msg1'], $_SESSION['msg2']);

// Client-databases feature toggle (config row absent on pre-feature databases).
$cdbEnabledRow    = dbRow("SELECT `value` FROM `config` WHERE `setting` = 'clientdb_enabled' LIMIT 1", true);
$CLIENTDB_ENABLED = (($cdbEnabledRow['value'] ?? '0') === '1');

// Active announcements for the client dashboard (table absent on older DBs).
$ANNOUNCEMENTS = [];
$annRes = dbQuery("SELECT `title`, `body`, `created` FROM `announcement` WHERE `active` = '1' ORDER BY `annid` DESC LIMIT 5");
while ($annRes && ($annRow = dbFetch($annRes))) {
	$ANNOUNCEMENTS[] = $annRow;
}

// In-panel notification bell.
require_once __DIR__ . '/includes/notify.php';
$NOTIF_UNSEEN = notifyUnseenCount((int) ($_SESSION['clientid'] ?? 0));