/
index.php
467 lines (410 loc) · 21.3 KB
/
index.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
<?php
// Project: Web Reference Database (refbase) <http://www.refbase.net>
// Copyright: Matthias Steffens <mailto:refbase@extracts.de> and the file's
// original author(s).
//
// This code is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY. Please see the GNU General Public
// License for more details.
//
// File: ./index.php
// Repository: $HeadURL: http://svn.code.sf.net/p/refbase/code/trunk/index.php $
// Author(s): Matthias Steffens <mailto:refbase@extracts.de>
//
// Created: 29-Jul-02, 16:45
// Modified: $Date: 2013-04-16 13:23:21 -0700 (Tue, 16 Apr 2013) $
// $Author: msteffens $
// $Revision: 1372 $
// This script builds the main page.
// It provides login and quick search forms
// as well as links to various search forms.
// Incorporate some include files:
include 'initialize/db.inc.php'; // 'db.inc.php' is included to hide username and password
include 'includes/header.inc.php'; // include header
include 'includes/footer.inc.php'; // include footer
include 'includes/include.inc.php'; // include common functions
include 'initialize/ini.inc.php'; // include common variables
// --------------------------------------------------------------------
// START A SESSION:
// call the 'start_session()' function (from 'include.inc.php') which will also read out available session variables:
start_session(true);
// --------------------------------------------------------------------
// Initialize preferred display language:
// (note that 'locales.inc.php' has to be included *after* the call to the 'start_session()' function)
include 'includes/locales.inc.php'; // include the locales
// --------------------------------------------------------------------
// If there's no stored message available:
if (!isset($_SESSION['HeaderString']))
$HeaderString = $loc["Default Welcome Message"]; // Provide the default welcome message
else
{
$HeaderString = $_SESSION['HeaderString']; // extract 'HeaderString' session variable (only necessary if register globals is OFF!)
// Note: though we clear the session variable, the current message is still available to this script via '$HeaderString':
deleteSessionVariable("HeaderString"); // function 'deleteSessionVariable()' is defined in 'include.inc.php'
}
// Extract the view type requested by the user (either 'Mobile', 'Print', 'Web' or ''):
// ('' will produce the default 'Web' output style)
if (isset($_REQUEST['viewType']))
$viewType = $_REQUEST['viewType'];
else
$viewType = "";
// Setup an array of arrays holding URL and title information for all RSS feeds available on this page:
// (appropriate <link...> tags will be included in the HTML header for every URL specified)
$rssURLArray = array();
if (isset($_SESSION['user_permissions']) AND preg_match("/allow_rss_feeds/", $_SESSION['user_permissions'])) // if the 'user_permissions' session variable contains 'allow_rss_feeds'...
{
$showRows = $_SESSION['userRecordsPerPage']; // get the default number of records per page preferred by the current user
$rssURLArray[] = array("href" => generateURL("show.php", $defaultFeedFormat, array("where" => 'serial RLIKE ".+"'), true, $showRows), // function 'generateURL()' is defined in 'include.inc.php', variable '$defaultFeedFormat' is defined in 'ini.inc.php'
"title" => "records added most recently");
$rssURLArray[] = array("href" => generateURL("show.php", $defaultFeedFormat, array("where" => 'created_date = CURDATE()'), true, $showRows),
"title" => "records added today");
$rssURLArray[] = array("href" => generateURL("show.php", $defaultFeedFormat, array("where" => 'modified_date = CURDATE()'), true, $showRows),
"title" => "records edited today");
}
// --------------------------------------------------------------------
// Adjust the width of the right-hand column according to the calling user agent:
// NOTE: strictly, this isn't really necessary but it helps to achieve a similar appearance of the login form on Firefox/Gecko & Safari/WebKit browsers (with all supported GUI languages)
// TODO: figure out a better way (which isn't based on user agent sniffing); the problem could also be avoided by simply stacking <input> fields & their labels on top of each other
if (isset($_SERVER['HTTP_USER_AGENT']) AND preg_match("/AppleWebKit/i", $_SERVER['HTTP_USER_AGENT']))
$rightColumnWidth = "215";
else
$rightColumnWidth = "225";
// Get the total number of records:
$recordCount = getTotalNumberOfRecords(); // function 'getTotalNumberOfRecords()' is defined in 'include.inc.php'
// Show the login status:
showLogin(); // (function 'showLogin()' is defined in 'include.inc.php')
// (4) DISPLAY header:
// call the 'displayHTMLhead()' and 'showPageHeader()' functions (which are defined in 'header.inc.php'):
displayHTMLhead(encodeHTML($officialDatabaseName) . " -- " . $loc["Home"], "index,follow", "Search the " . encodeHTML($officialDatabaseName), "", true, "", $viewType, $rssURLArray);
showPageHeader($HeaderString);
// Define variables holding common drop-down elements, i.e. build properly formatted <option> tag elements:
// - "Browse My Refs" form:
$dropDownFieldNameArray2 = array("author" => $loc["DropDownFieldName_Author"],
"year" => $loc["DropDownFieldName_Year"],
"publication" => $loc["DropDownFieldName_Publication"],
"keywords" => $loc["DropDownFieldName_Keywords"],
"user_keys" => $loc["DropDownFieldName_UserKeys"]);
$dropDownItems2 = buildSelectMenuOptions($dropDownFieldNameArray2, "//", "\t\t\t\t\t", true); // function 'buildSelectMenuOptions()' is defined in 'include.inc.php'
// --------------------------------------------------------------------
?>
<table align="center" width="95%" summary="This table explains features, goals and usage of the <?php echo encodeHTML($officialDatabaseName); ?>">
<tr>
<td colspan="2"><h3><?php echo $loc["RecentChanges"]; ?></h3></td>
<td width="<?php echo $rightColumnWidth; ?>" valign="bottom" rowspan="2">
<?php
if (!isset($_SESSION['loginEmail']))
{
?>
<?php /*
<div id="userlogin" class="box">
<div class="boxHead">
<h3><?php echo $loc["Login"]; ?>:</h3>
</div>
<div class="boxBody">
<form action="user_login.php" method="POST" name="login">
<fieldset>
<legend><?php echo $loc["Login"]; ?>:</legend>
<input type="hidden" name="referer" value="index.php">
<div id="loginUser">
<div id="loginUserLabel">
<label for="loginEmail"><?php echo $loc["Email"]; ?>:</label>
</div>
<div id="loginUserInput">
<input type="text" id="loginEmail" name="loginEmail">
</div>
</div>
<div id="loginPwd">
<div id="loginPwdLabel">
<label for="loginPassword"><?php echo $loc["Password"]; ?>:</label>
</div>
<div id="loginPwdInput">
<input type="password" id="loginPassword" name="loginPassword">
</div>
</div>
<div id="loginSubmit">
<input type="submit" class="button secondary small-12" value="<?php echo $loc["ButtonTitle_Login"]; ?>">
</div><?php
if ($addNewUsers == "everyone")
{
?>
<div id="register">
<a href="user_details.php" title="<?php echo $loc["registerAccount"]; ?>"><?php echo $loc["Register"]; ?></a>
</div><?php
}
?>
</fieldset>
</form>
</div>
</div>
*/ ?>
<?php
}
elseif (isset($_SESSION['loginEmail']) AND (isset($_SESSION['user_permissions']) AND preg_match("/allow_user_groups/", $_SESSION['user_permissions']))) // if a user is logged in AND the 'user_permissions' session variable contains 'allow_user_groups', show the 'Show My Groups' form:
{
if (!isset($_SESSION['userGroups']))
$groupSearchDisabled = " disabled"; // disable the 'Show My Groups' form if the session variable holding the user's groups isnt't available
else
$groupSearchDisabled = "";
?>
<div id="showgroupmain" class="box">
<div class="boxHead">
<h3><?php echo $loc["ShowMyGroup"]; ?>:</h3>
</div>
<div class="boxBody">
<form action="search.php" method="GET" name="groupSearch">
<fieldset>
<legend><?php echo $loc["ShowMyGroup"]; ?>:</legend>
<input type="hidden" name="formType" value="groupSearch">
<input type="hidden" name="showQuery" value="0">
<input type="hidden" name="showLinks" value="1">
<div id="groupSelect">
<label for="groupSearchSelector"><?php echo $loc["My"]; ?>:</label>
<select name="groupSearchSelector"<?php echo $groupSearchDisabled; ?>><?php
if (isset($_SESSION['userGroups']))
{
$optionTags = buildSelectMenuOptions($_SESSION['userGroups'], "/ *; */", "\t\t\t\t\t\t\t\t\t", false); // build properly formatted <option> tag elements from the items listed in the 'userGroups' session variable
echo $optionTags;
}
else
{
?>
<option>(<?php echo $loc["NoGroupsAvl"]; ?>)</option><?php
}
?>
</select>
</div>
<div id="groupSubmit">
<input type="submit" class="button secondary small-12" value="<?php echo $loc["ButtonTitle_Show"]; ?>"<?php echo $groupSearchDisabled; ?>>
</div>
</fieldset>
</form>
</div>
</div><?php
}
else
{
?>
<?php
}
?>
</td>
</tr>
<tr>
<td width="15"> </td>
<td valign="top">
<?php
// Get the current year & date in order to include them into query URLs:
$CurrentYear = date('Y');
$CurrentDate = date('Y-m-d');
// We'll also need yesterday's date for inclusion into query URLs:
$TimeStampYesterday = mktime(0, 0, 0, date('m'), (date('d') - 1), date('Y'));
$DateYesterday = date('Y-m-d', $TimeStampYesterday);
// Plus, we'll calculate the date that's a week ago (again, for inclusion into query URLs):
$TimeStampLastWeek = mktime(0, 0, 0, date('m'), (date('d') - 7), date('Y'));
$DateLastWeek = date('Y-m-d', $TimeStampLastWeek);
if (isset($_SESSION['loginEmail'])) // if a user is logged in
{
// Get the date & time of the last login for the current user:
if (!empty($lastLogin)) // '$lastLogin' is provided as session variable
{
$lastLoginDate = date('Y-m-d', strtotime($lastLogin));
$lastLoginTime = date('H:i:s', strtotime($lastLogin));
}
else
{
$lastLoginDate = "";
$lastLoginTime = "";
}
}
?>
<div id="recentlinks">
<ul>
<li><?php echo $loc["added"]; ?>: <a href="show.php?date=<?php echo $CurrentDate; ?>"><?php echo $loc["today"]; ?></a> | <a href="show.php?date=<?php echo $DateYesterday; ?>"><?php echo $loc["yesterday"]; ?></a> | <a href="show.php?date=<?php echo $DateLastWeek; ?>&range=after"><?php echo $loc["last 7 days"]; ?></a><?php if (isset($_SESSION['loginEmail']) AND !empty($lastLoginDate) AND !empty($lastLoginTime)) { ?> | <a href="show.php?date=<?php echo $lastLoginDate; ?>&time=<?php echo $lastLoginTime; ?>&range=equal_or_after"><?php echo $loc["since last login"]; ?></a><?php } ?></li>
<li><?php echo $loc["edited"]; ?>: <a href="show.php?date=<?php echo $CurrentDate; ?>&when=edited"><?php echo $loc["today"]; ?></a> | <a href="show.php?date=<?php echo $DateYesterday; ?>&when=edited"><?php echo $loc["yesterday"]; ?></a> | <a href="show.php?date=<?php echo $DateLastWeek; ?>&when=edited&range=after"><?php echo $loc["last 7 days"]; ?></a><?php if (isset($_SESSION['loginEmail']) AND !empty($lastLoginDate) AND !empty($lastLoginTime)) { ?> | <a href="show.php?date=<?php echo $lastLoginDate; ?>&time=<?php echo $lastLoginTime; ?>&when=edited&range=equal_or_after"><?php echo $loc["since last login"]; ?></a><?php } ?></li>
<li><?php echo $loc["published in"]; ?>: <a href="show.php?year=<?php echo $CurrentYear; ?>"><?php echo $CurrentYear; ?></a> | <a href="show.php?year=<?php echo ($CurrentYear - 1); ?>"><?php echo ($CurrentYear - 1); ?></a> | <a href="show.php?year=<?php echo ($CurrentYear - 2); ?>"><?php echo ($CurrentYear - 2); ?></a> | <a href="show.php?year=<?php echo ($CurrentYear - 3); ?>"><?php echo ($CurrentYear - 3); ?></a></li>
</ul>
</div>
</td>
</tr><?php
if (isset($_SESSION['user_permissions']) AND preg_match("/allow_browse_view/", $_SESSION['user_permissions'])) // if the 'user_permissions' session variable contains 'allow_browse_view'...
{
?>
<tr>
<td width="15"> </td>
<td>
<?php echo $loc["browse all"]; ?>:
</td>
<td width="<?php echo $rightColumnWidth; ?>" valign="top">
<?php
if (isset($_SESSION['loginEmail']) AND (isset($_SESSION['user_permissions']) AND preg_match("/allow_browse_view/", $_SESSION['user_permissions'])))
{
?>
<h5><?php echo $loc["BrowseMyRefs"]; ?>:</h5><?php
}
else
{
?>
<?php
}
?>
</td>
</tr>
<tr>
<td width="15"> </td>
<td>
<ul type="circle" class="moveup">
<li><a href="show.php?submit=Browse&by=author"><?php echo $loc["author"]; ?></a> | <a href="show.php?submit=Browse&by=year"><?php echo $loc["year"]; ?></a> | <a href="show.php?submit=Browse&by=publication"><?php echo $loc["publication"]; ?></a> | <a href="show.php?submit=Browse&by=keywords"><?php echo $loc["keywords"]; ?></a></li>
<li><a href="show.php?submit=Browse&by=location"><?php echo $loc["location"]; ?></a> | <a href="show.php?submit=Browse&by=area"><?php echo $loc["area"]; ?></a> | <a href="show.php?submit=Browse&by=language"><?php echo $loc["language"]; ?></a> | <a href="show.php?submit=Browse&by=type"><?php echo $loc["type"]; ?></a></li>
</ul>
</td>
<td width="<?php echo $rightColumnWidth; ?>" valign="top">
<?php
if (isset($_SESSION['loginEmail']) AND (isset($_SESSION['user_permissions']) AND preg_match("/allow_browse_view/", $_SESSION['user_permissions']))) // if a user is logged in AND the 'user_permissions' session variable contains 'allow_browse_view', show the 'Browse My Refs' form:
{
?>
<form action="search.php" method="GET">
<input type="hidden" name="formType" value="myRefsBrowse">
<input type="hidden" name="submit" value="Browse">
<input type="hidden" name="showQuery" value="0">
<input type="hidden" name="showLinks" value="1">
<input type="hidden" name="showRows" value="10">
<select name="browseFieldSelector"><?php
$browseMyRefsDropDownItems = preg_replace("/<option([^>]*)>" . $loc["DropDownFieldName_Author"] . "/", "<option\\1 selected>" . $loc["DropDownFieldName_Author"], $dropDownItems2); // select the 'author' menu entry ...
echo $browseMyRefsDropDownItems;
?>
</select>
<br>
<input type="submit" class="button secondary small-12" value="<?php echo $loc["ButtonTitle_Browse"]; ?>">
</form><?php
}
else
{
?>
<?php
}
?>
</td>
</tr><?php
}
?>
<tr>
<td width="15"> </td>
<td>
<?php echo $loc["MostRecentPublications"]; ?>:
</td>
<td width="<?php echo $rightColumnWidth; ?>" valign="top" rowspan="2">
<?php
if (isset($_SESSION['loginEmail']) AND (isset($_SESSION['user_permissions']) AND preg_match("/allow_user_queries/", $_SESSION['user_permissions']))) // if a user is logged in AND the 'user_permissions' session variable contains 'allow_user_queries', show the 'Recall My Query' form:
{
if (!isset($_SESSION['userQueries']))
$querySearchDisabled = " disabled"; // disable the 'Recall My Query' form if the session variable holding the user's queries isn't available
else
$querySearchDisabled = "";
?>
<div id="recallquerymain" class="box">
<div class="boxHead">
<h3><?php echo $loc["RecallMyQuery"]; ?>:</h3>
</div>
<div class="boxBody">
<form action="queries.php" method="GET" name="querySearch">
<fieldset>
<legend><?php echo $loc["RecallMyQuery"]; ?>:</legend>
<input type="hidden" name="formType" value="querySearch">
<input type="hidden" name="showQuery" value="0">
<input type="hidden" name="showLinks" value="1">
<div id="recallSelect">
<label for="querySearchSelector"><?php echo $loc["Query"]; ?>:</label>
<select name="querySearchSelector"<?php echo $querySearchDisabled; ?>><?php
if (isset($_SESSION['userQueries']))
{
$optionTags = buildSelectMenuOptions($_SESSION['userQueries'], "/ *; */", "\t\t\t\t\t\t\t\t\t", false); // build properly formatted <option> tag elements from the items listed in the 'userQueries' session variable
echo $optionTags;
}
else
{
?>
<option>(<?php echo $loc["NoQueriesAvl"]; ?>)</option><?php
}
?>
</select>
</div>
<div id="recallSubmit">
<ul class="stack button-group">
<li>
<input type="submit" class="button secondary small-12" name="submit" value="<?php echo $loc["ButtonTitle_Go"]; ?>"<?php echo $querySearchDisabled; ?>>
</li>
<li>
<input type="submit" class="button secondary small-12" name="submit" value="<?php echo $loc["ButtonTitle_Edit"]; ?>"<?php echo $querySearchDisabled; ?>>
</li>
</ul>
</div>
</fieldset>
</form>
</div>
</div><?php
}
else
{
?>
<?php
}
?>
</td>
</tr>
<tr>
<td width="15"> </td>
<td>
<div id="includerefs"><?php
// Fetch the most recently added publications (as formatted citations), or link to them:
$recentAdditionsResultTable = "";
// Get all user permissions for the anonymous user (userID = 0):
// NOTE: since function 'fetchDataFromURL()' retrieves citations anonymously (i.e. the
// current user's session is not maintained, see note below), we need to check the
// permissions for the *anonymous* user (userID = 0) here
$anonymousUserPermissionsArray = getPermissions(0, "user", false); // function 'getPermissions()' is defined in 'include.inc.php'
if (isset($_SESSION['user_permissions']) AND ($anonymousUserPermissionsArray["allow_cite"] == "yes")) // if the anonymous user is allowed to output records as citations
{
// NOTE: - as an alternative to the below code block, we could also fetch citations via an AJAX event and let the JavaScript functions in file 'javascript/show.js' ' write the results into the '<div id="includerefs">' section;
// to do so:
// 1. pass the JavaScript file 'javascript/show.js' as the 6th parameter to the 'displayHTMLhead' function (see above)
// 2. call JavaScript function 'showRefs()' via an 'onload' event in the body tag of function 'displayHTMLhead()' in 'includes/header.inc.php': onload="showRefs('records=all&showRows=5&citeOrder=creation-date')"
// TODO: function 'displayHTMLhead()' should get modified so that it only calls the 'onload' event if necessary/requested
//
// - the above alternative works within the user's current session, i.e. the links section will contain any edit or file links (if the user has appropriate permissions);
// however, the below method (which uses function 'fetchDataFromURL()') does NOT maintain the user's current session (and adding the user's current PHPSESSID doesn't seem to work ?:-/)
// Prepare a query that will fetch a HTML table with the most recently added publications (as formatted citations):
$recentAdditionsQueryURL = $databaseBaseURL . "show.php?records=all&submit=Cite&showRows=5&citeOrder=creation-date&client=inc-refbase-1.0&wrapResults=0"; // variable '$databaseBaseURL' is defined in 'ini.inc.php'
$recentAdditionsResultTable = fetchDataFromURL($recentAdditionsQueryURL); // function 'fetchDataFromURL()' is defined in 'include.inc.php'
}
if (!empty($recentAdditionsResultTable))
{
echo $recentAdditionsResultTable;
}
else
{
?>
<a href="show.php?records=all&citeOrder=creation-date"><?php echo $loc["ShowAll"]; ?></a><?php
}
?>
</div>
</td>
</tr>
<!-- <tr>-->
<!-- <td colspan="3"><h3>--><?php //echo $loc["about"]; ?><!--</h3></td>-->
<!-- </tr>-->
<!-- <tr>-->
<!-- <td width="15"> </td>-->
<!-- <td>--><?php //echo $loc["ThisDatabaseIsMaintained"]; ?><!-- <a href="--><?php //echo $hostInstitutionURL; ?><!--">--><?php //echo encodeHTML($hostInstitutionName); ?><!--</a> (--><?php //echo encodeHTML($hostInstitutionAbbrevName); ?><!--). --><?php //echo $loc["You are welcome to send"]; ?><!-- <a href="mailto:--><?php //echo $feedbackEmail; ?><!--">--><?php //echo $loc["feedback address"]; ?><!--</a>. --><?php //echo $loc["refbaseDesc"]; ?><!--</td>-->
<!-- <td width="--><?php //echo $rightColumnWidth; ?><!--" valign="top" align="center"><a href="http://www.refbase.net/"><img src="img/refbase_credit.gif" alt="powered by refbase" width="142" height="51" hspace="0" border="0"></a></td>-->
<!-- </tr>-->
</table><?php
// --------------------------------------------------------------------
// (5) CLOSE the database connection:
disconnectFromMySQLDatabase(); // function 'disconnectFromMySQLDatabase()' is defined in 'include.inc.php'
// --------------------------------------------------------------------
// DISPLAY THE HTML FOOTER:
// call the 'showPageFooter()' and 'displayHTMLfoot()' functions (which are defined in 'footer.inc.php')
showPageFooter($HeaderString);
displayHTMLfoot();
// --------------------------------------------------------------------
?>