From 8df3db566a3a937b45ebf11adb90d265e6f5e2d4 Mon Sep 17 00:00:00 2001
From: Andreas Baumann <mail@andreasbaumann.cc>
Date: Sun, 17 Nov 2019 20:45:02 +0100
Subject: initial checking of customized version 1.0rc9

---
 header.php | 75 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 75 insertions(+)
 create mode 100644 header.php

(limited to 'header.php')

diff --git a/header.php b/header.php
new file mode 100644
index 0000000..3e36110
--- /dev/null
+++ b/header.php
@@ -0,0 +1,75 @@
+<?php
+
+// cant easly for the time being because of globals
+require_once dirname(__FILE__) . '/includes/fix.inc.php';
+require_once dirname(__FILE__) . '/includes/class.flyspray.php';
+require_once dirname(__FILE__) . '/includes/constants.inc.php';
+require_once BASEDIR . '/includes/i18n.inc.php';
+require_once BASEDIR . '/includes/class.tpl.php';
+require_once BASEDIR . '/includes/class.csp.php';
+
+// Get the translation for the wrapper page (this page)
+setlocale(LC_ALL, str_replace('-', '_', L('locale')) . '.utf8');
+
+// make browsers back button work
+header('Expires: -1');
+header('Pragma: no-cache');
+header('Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0');
+
+if(is_readable(BASEDIR . '/vendor/autoload.php')){
+        // Use composer autoloader
+        require 'vendor/autoload.php';
+}else{
+        Flyspray::redirect('setup/composertest.php');
+        exit;
+}
+
+$csp= new ContentSecurityPolicy();
+# deny everything first, then whitelist what is required.
+$csp->add('default-src', "'none'");
+
+// If it is empty, take the user to the setup page
+if (!$conf) {
+    Flyspray::redirect('setup/index.php');
+}
+
+$db = new Database();
+$db->dbOpenFast($conf['database']);
+$fs = new Flyspray();
+
+// If version number of database and files do not match, run upgrader
+if (Flyspray::base_version($fs->version) != Flyspray::base_version($fs->prefs['fs_ver'])) {
+    Flyspray::redirect('setup/upgrade.php');
+}
+
+
+# load the correct $proj early also for checks on quickedit.php taskediting calls
+if( (BASEDIR.DIRECTORY_SEPARATOR.'js'.DIRECTORY_SEPARATOR.'callbacks'.DIRECTORY_SEPARATOR.'quickedit.php' == $_SERVER['SCRIPT_FILENAME']) && Post::num('task_id')){
+        $result = $db->query('SELECT project_id FROM {tasks} WHERE task_id = ?', array(Post::num('task_id')));
+        $project_id = $db->fetchOne($result);
+}
+# Any "do" mode that accepts a task_id field should be added here.
+elseif (in_array(Req::val('do'), array('details', 'depends', 'editcomment'))) {
+    if (Req::num('task_id')) {
+        $result = $db->query('SELECT project_id FROM {tasks} WHERE task_id = ?', array(Req::num('task_id')));
+        $project_id = $db->fetchOne($result);
+    }
+}
+
+if (Req::val('do') =='pm' && Req::val('area')=='editgroup') {
+    if (Req::num('id')) {
+        $result = $db->query('SELECT project_id FROM {groups} WHERE group_id = ?', array(Req::num('id')));
+        $project_id = $db->fetchOne($result);
+    }
+}
+
+if (!isset($project_id)) {
+        $project_id = $fs->prefs['default_project'];
+        # Force default value if input format is not allowed
+        if(is_array(Req::val('project'))) {
+                Req::set('project', $fs->prefs['default_project']);
+        }
+        $project_id = Req::val('project', Req::val('project_id', $project_id));
+}
+
+$proj = new Project($project_id);
-- 
cgit v1.2.3-54-g00ecf