File manager

File manager - Edit - /home/jardides/www/Jardi-design/plugins/system/plugin_googlemap3/plugin_googlemap3_kmlprxy.php

Back
<?php /------------------------------------------------------------------------ # plugin_googlemap3_proxy.php - Google Maps plugin # ------------------------------------------------------------------------ # author mapsplugin.com # copyright Copyright (C) 2011 mapsplugin.com. All Rights Reserved. # @license - http://www.mapsplugin.com/license.txt # Websites: http://www.mapsplugin.com # Technical Support: http://www.mapsplugin.com # Documentation: http://www.mapsplugin.com/Google-Maps/Documentation-of-plugin-Googlemap/ --------------------------------------------------------------------------/ // No protection of Joomla because this php program may be called directly to deliver content // It uses Joomla framework // defined( '_JEXEC' ) or die( 'Restricted access' ); @define('_JEXEC', 1); if (!defined('DS')) @define( 'DS', DIRECTORY_SEPARATOR ); // Fix magic quotes. @ini_set('magic_quotes_runtime', 0); // Maximise error reporting. //@ini_set('zend.ze1_compatibility_mode', '0'); //error_reporting(E_ALL); //@ini_set('display_errors', 1); /* * Ensure that required path constants are defined. / if (!defined('JPATH_BASE')) { $path = dirname(__FILE__); // Define the path based on the file and remove the path to the plugin $path = str_replace('/plugins/system/plugin_googlemap3', '', $path); $path = str_replace('\plugins\system\plugin_googlemap3', '', $path); define('JPATH_BASE', $path); } require_once ( JPATH_BASE.'/includes/defines.php' ); require_once ( JPATH_BASE.'/includes/framework.php' ); / To use Joomla's Database Class / require_once ( JPATH_BASE.'/libraries/joomla/factory.php' ); $mainframe = JFactory::getApplication('site'); $mainframe->initialise(); $user = JFactory::getUser(); $session = JFactory::getSession(); class plugin_googlemap3_proxy_kml { /* * Display the application. / function doExecute(){ // Get config $plugin = JPluginHelper::getPlugin('system', 'plugin_googlemap3'); $this->jversion = JVERSION; $params = new JRegistry(); $params->loadString($plugin->params); // Get params $this->errorcode = 200; $this->proxy = intval($params->get('proxy', '0')); $response = ""; $debug = intval(JRequest::getVar('debug', '')); if ($debug!=1) @ob_start(); $this->googlewebsite = $params->get( 'googlewebsite', 'maps.google.com' ); // Check access if ($_SERVER['SERVER_PORT'] == 443) $this->protocol = "https://"; else $this->protocol = "http://"; // Restrict access to own domain if (array_key_exists('HTTP_ORIGIN', $_SERVER)) $origin = $_SERVER['HTTP_ORIGIN']; else $origin = ""; $pattern = "/(www.)?".$_SERVER['SERVER_NAME']."/i"; if ($origin!=""&&preg_match($pattern, $origin)==0) $response = $this->_error(403, "Restricted access"); // 403 if (array_key_exists('HTTP_REFERER', $_SERVER)) { $refering=parse_url($_SERVER['HTTP_REFERER']); if($refering['host']!=$_SERVER['SERVER_NAME']) $response = $this->_error(403, "Restricted access"); // 403 } if (!JSession::checkToken( 'get' ) ) $response = $this->_error(401, "Invalid token"); // 401 if ($this->proxy==0) $response = $this->_error(406, "Method not available"); // 406 // Get url $url = JRequest::getVar('url', ''); if (!is_string($url)\|\|$url=='') $response = $this->_error(406, "Wrong url"); // 406 // Valid url $pattern = '/^(?:[;\/?:@&=+$,]\|(?:[^\W_]\|[-_.!~\()\[\] ])\|(?:%[\da-fA-F]{2}))$/'; if( preg_match( $pattern, $url ) == 0 ) { $response = $this->_error(406, "Wrong url"); // 406 } $id = intval(JRequest::getVar('id', '')); if (!$this->_checkurl($id, $url)) $response = $this->_error(406, "Wrong url"); // 406 $url = $this->protocol.$url; // Set headers if ($debug!="1") { header('Content-type: application/vnd.google-earth.kml+xml', true, $this->errorcode); } header('Access-Control-Allow-Origin: '.$this->protocol.$_SERVER['SERVER_NAME']); header('Access-Control-Allow-Credentials: true'); header('Access-Control-Allow-Methods: GET'); if ($response=="") $response = $this->_getkml($url); $oldValue = libxml_disable_entity_loader(true); $dom = new DOMDocument('1.0','UTF-8'); @$dom->loadXML($response); $kmlOutput = $dom->saveXML(); if ($debug!=1) while (@ob_end_clean()); echo $kmlOutput; } function _checkurl($id, $url) { // check if it is the twitter url $twitterurl = (($this->proxy=="0")?$this->base:"")."/plugins/system/plugin_googlemap3/plugin_googlemap3_twitter_kml.php?"; if (strpos($url,$twitterurl) !== false) return true; // Check if it is based on MSID // So maps.google.xxx $googlereg = '/^maps\.google((\.[a-z]{2,3}){1,2})\/maps\/ms\?/'; if (preg_match($googlereg, $url)== 1) { $this->protocol = "https://"; return true; } // Check if it is based on MID // So maps.google.xxx $googlereg = '/^www\.google((\.[a-z]{2,3}){1,2})\/maps\/d\/kml\?/'; if (preg_match($googlereg, $url)== 1) { $this->protocol = "https://"; return true; } // Check if url is defined on the website $database = JFactory::getDBO(); $query = "SELECT CONCAT(a.introtext, a.fulltext) as text FROM #__content as a WHERE a.id=".$id; $database->setQuery($query); if (!$database->query()) return false; $text = $database->loadResult(); if (substr($this->jversion,0,2)=="3.") $text = $database->escape($text); else $text = $database->getEscaped($text); //echo $text."<br/>"; // Get the kml definitions preg_match_all("/kml(($\|\[)[0-9]+($\|\]))?=\\\'(.?)\\\'/msi", $text, $matches); $cnt = count($matches[0]); //print_r($matches); //echo "<br/>Url: ".$url."<br/>"; // Check if the kml definitions are in the url for($counter = 0; $counter < $cnt; $counter++) { preg_match("/\\\'(.*?)\\\'/", $matches[0][$counter], $kml); $kml[1] = str_replace(array('http://', 'https://', '&'), array('', '', '&'), $kml[1]); //echo $kml[1]."<br/>"; if (strpos($url, $kml[1]) !== false) return true; } return false; } function _getkml($url) { if (!isset($HTTP_RAW_POST_DATA)){ $HTTP_RAW_POST_DATA = file_get_contents('php://input'); } $post_data = $HTTP_RAW_POST_DATA; $header[] = "Content-type: text/xml"; $header[] = "Content-length: ".strlen($post_data); //get all session parameters $postcurl = array(); $post = ''; $cookie = ''; $reg = '/^[a-f0-9]+$/si'; foreach ($_COOKIE as $key => $value) { if (preg_match($reg,$key)>0) { $cookie.="$key=$value; "; // separation in cookies is ; with space! $postcurl[$key]=$value; $post.=((strlen($post)>0)?'&':'')."$key=$value"; } } $ok = false; // File_get_contents is not supported anymore because additional headers has to be set // if (ini_get('allow_url_fopen')) // if (($response = @file_get_contents($url))) // $ok = true; if (!$ok) { $ch = curl_init( $url ); // Send authentication $username = ""; $password = ""; // mod_php if (isset($_SERVER['PHP_AUTH_USER'])) { $username = $_SERVER['PHP_AUTH_USER']; $password = $_SERVER['PHP_AUTH_PW']; } // most other servers elseif (isset($_SERVER['HTTP_AUTHENTICATION'])) { if (strpos(strtolower($_SERVER['HTTP_AUTHENTICATION']),'basic')===0) { list($username,$password) = explode(':',base64_decode(substr($_SERVER['HTTP_AUTHORIZATION'], 6))); } } if ($username!=""&&$password!="") { curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY); curl_setopt ($ch, CURLOPT_USERPWD, $username.":".$password); // set referer on redirect } curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); if( !ini_get('safe_mode')&&!ini_get('open_basedir') ) curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); if ( strlen($cookie)>0 ){ curl_setopt($ch, CURLOPT_COOKIESESSION, false); // False to keep all cookies of previous session curl_setopt($ch, CURLOPT_COOKIE, $cookie); } $refering=parse_url($_SERVER['HTTP_REFERER']); curl_setopt($ch, CURLOPT_REFERER, $this->protocol.$refering['host'].$refering['path']); curl_setopt($ch, CURLOPT_TIMEOUT, 80); curl_setopt($ch, CURLOPT_HTTPHEADER, $header); curl_setopt($ch, CURLOPT_FAILONERROR, 0); curl_setopt($ch, CURLOPT_VERBOSE, 1); // curl_setopt($ch, CURLOPT_HEADER, true); // Show header info in response if ( strlen($post_data)>0 ){ curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data); } $response = curl_exec($ch); // echo $url." : ".$response. "<br/>"; // print_r(curl_getinfo($ch)); if (curl_errno($ch)) { print curl_error($ch); } else { curl_close($ch); $ok = true; } } if (!$ok) { $url = urldecode(JRequest::getVar('url', '')); // Do it the safe mode way for local files $pattern = "/(www.)?".$_SERVER["SERVER_NAME"]."/i"; if (preg_match($pattern, $url)!=0) { $url = $_SERVER["DOCUMENT_ROOT"].preg_replace($pattern, "", $url); if (ini_get('allow_url_fopen')) if (($response = file_get_contents($url))) $ok = true; if (!$ok) { $ch = curl_init( $url ); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); if( !ini_get('safe_mode')&&!ini_get('open_basedir') ) curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_TIMEOUT, 80); curl_setopt($ch, CURLOPT_HTTPHEADER, $header); curl_setopt($ch, CURLOPT_FAILONERROR, 0); curl_setopt($ch, CURLOPT_VERBOSE, 1); curl_setopt($ch, CURLOPT_COOKIEFILE, 1); if ( strlen($post_data)>0 ){ curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data); } $response = curl_exec($ch); if (curl_errno($ch)) { print curl_error($ch); } else { curl_close($ch); $ok = true; } } } } return $response; } function _error($errorcode, $errortext) { $this->errorcode = $errorcode; $error = "<errorData>"; $error .= "<errorCode>".$errorcode."</errorCode>"; $error .= "<errorMessage>".$errortext."</errorMessage>"; $error .= "</errorData>"; return $error; } } // Instantiate the application. $web = new plugin_googlemap3_proxy_kml; // Run the application $web->doExecute(); ?>

| ver. 1.4 | Github | . | PHP 7.4.33 | Generation time: 0.03 | proxy | phpinfo | Settings