<?php
ini_set('display_errors', TRUE);//false  //TRUE
//ini_set("error_reporting","E_ALL & ~E_NOTICE");
define('IN_DEMOSOSO', TRUE);
//define('HERE_ROOT', substr(dirname(__FILE__), 0, -7));//include - 7,inc-3
//define('HERE_ROOT', dirname(__FILE__));//这是一个知识点，这是根目录，
define('HERE_ROOT', substr(dirname(__FILE__), 0, -8));//这是本目录。3 mean inc number.is incc ,then is 4./通常是用这个。方便每个目录下的文件用这个。此法也是为了rewrite .
//THE folder need to be end by '\'

$sta_kvtothumb =   $switchlanglink = '';

$dirnamefile = dirname(__FILE__);

$dirnamefile=str_replace('\\','/',$dirnamefile);

$heredir_arr = explode('/',$dirnamefile);
$heredir_arr2 = array_slice($heredir_arr,-2,1);

$heredirlen = count($heredir_arr)-2;
$heredir_root = array_slice($heredir_arr,0,$heredirlen);
$heredir_root_string = implode('/', $heredir_root).'/';

 
define('ADMINDIR',@$_COOKIE['admindir']);
//-------------------

define('WEB_ROOT', $heredir_root_string);

require_once WEB_ROOT.'component/dm-config/session_config.php';


$adminstring = $heredir_arr2[0];
if(substr($adminstring,0,8)<>'admindm-'){
	echo '<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />';
	echo '后台目录必须以admindm-开头，比如admindm-yournameyourname*** (admindm-后面不受限制)';
	exit;}


define('ADMIN', 'y');//use url function link target
   //echo WEB_ROOT.'CM-static';
  //echo UPLOADROOTIMAGE;
$submenu='';
 $baseurl_def = $_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'];
  $php_self = $_SERVER['PHP_SELF'];
 //echo $baseurl_def;
 //echo '<br />';
$baseurlarr = explode("/", $baseurl_def);
$baseurl_dir_len=count($baseurlarr)-3;
$baseurl_root = array_slice($baseurlarr,0,$baseurl_dir_len);
//echo $baseurl_dir_len;
$baseurl_root_string = implode('/', $baseurl_root).'/';
//新版本已经自动判断是否用https
function isdm_https() {
    if ( !empty($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') {
        return true;
    } elseif ( isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' ) {
        return true;
	}
	elseif ( isset($_SERVER['HTTP_X_CLIENT_SCHEME']) && $_SERVER['HTTP_X_CLIENT_SCHEME'] === 'https' ) {
        return true;
    } elseif ( !empty($_SERVER['HTTP_FRONT_END_HTTPS']) && strtolower($_SERVER['HTTP_FRONT_END_HTTPS']) !== 'off') {
        return true;
    }
    return false;
}

if(isdm_https()) $httpv= 'https://';
else $httpv= 'http://';

$baseurl = $httpv.$baseurl_root_string;//16 is admin_yourname1
define("BASEURL", $baseurl);
define("HOSTNAME", $_SERVER['HTTP_HOST']);
//echo BASEURL;
  	$user2510='bh2010079002demososo';	//also  in login.php....
	define('USERBH', $user2510);  //user2510 and USERBH need baoliu...,

define('TEMPLATEROOT',WEB_ROOT.'DMYI-template/');
define('TEMPLATEPATH',BASEURL.'DMYI-template/');
define('INCLUDE_ROOT',WEB_ROOT.'component/dm-include/');



define('BLOCKROOT', WEB_ROOT.'DM-block/');//base hmtl dir
define('SYSBLOCKROOT', WEB_ROOT.'DM-block/sysblock/');//base hmtl dir
define('BLOCKPATH',BASEURL.'DM-block/');
define('JTHOMEROOT', WEB_ROOT.'DM-block/jthome/'); define('JTHOMEPATH',$baseurl.'DM-block/jthome/');
define('JTEFFECTROOT', WEB_ROOT.'DM-block/jteffect/'); define('JTEFFECTPATH',$baseurl.'DM-block/jteffect/');
define('ZSTATICROOT', WEB_ROOT.'DM-block/jteffect/zstatic/'); define('ZSTATICPATH',$baseurl.'DM-block/jteffect/zstatic/');

define('JTBLOCKROOT', WEB_ROOT.'DM-block/jtblock/'); define('JTBLOCKPATH',$baseurl.'DM-block/jtblock/');
define('HEADERROOT', WEB_ROOT.'DM-block/header/'); define('HEADERPATH',$baseurl.'DM-block/header/');
//-----------------------------------------------------
define('CONFIG_ROOT', WEB_ROOT.'component/dm-config/');//base hmtl dir
 require_once CONFIG_ROOT.'inc_table.php'; //move to above
 require_once CONFIG_ROOT.'config.php';//move to above
 require_once CONFIG_ROOT.'text_can.php';
 $arrdatabase =  require_once CONFIG_ROOT.'database.php';
//require_once WEB_ROOT.'component/dm-config/database.php';
require_once CONFIG_ROOT.'mysql.php';
//require_once CONFIG_ROOT.'sqlite_func.php';

function htmlentitdm2($v){
$v = str_replace("..'", "===-", $v); //filter something
//$v = str_replace(':','===-', $v);
$v = str_replace('\\','===-', $v);
   return htmlentities(trim($v),ENT_QUOTES,"utf-8");
}//end func

 $lang_temp = htmlentitdm2(trim(@$_GET['lang']));

if(!isset($lang_temp) || trim($lang_temp)=='') { echo 'sorry,no lang...';exit; }

if($lang_temp=='') $lang_temp =$mainlang;

 define('LANG', $lang_temp);
 $domain = $baseurl;
   $sql  = "SELECT langpath,domain from ".TABLE_LANG." where   lang='".LANG."' and pbh='".USERBH."' order by id limit 1";//pidname is not path;
   			 if(getnum($sql)==0){
   			 	echo '<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />';
				 	$websitename = '提示：当前语言出错,请<a href="../g.php">重新登录！</a>';
				 	//alert($websitename);
				 	 echo '<meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><script>window.alert("'.$websitename.'")</script>';
					 echo $websitename;exit;
			 }
		     else{
				 	$row = getrow($sql);
					 $langpath = $row['langpath'];
					 $domain = $row['domain'];
					 $uploaddir=LANG.'/';  //front in loaddm.php


				 }

//----------------
//$fronthomeurl= $baseurl;
$baseurl_tempdefine =  $baseurl;


     if(SITEIDBYDOMAIN=='y'){
		//$fronthomeurl=  HTTPS.'://'.$domain.'/';
		$baseurl_tempdefine = HTTPS.'://'.$domain.'/';
	 }
	 else{
		if(LANG<>$mainlang) {
			if(ENABLEMULTISITE=='y') {
				//$fronthomeurl= $baseurl.$langpath.'/';
				$baseurl_tempdefine =  $baseurl.$langpath.'/';
			}
		}
	}



define('BASEURLPATH', $baseurl_tempdefine);
//echo BASEURLPATH;


 $adminurl = '../mod_common/mod_index.php?lang='.LANG;

//---------------------------------------


//require_once WEB_ROOT.'component/dm-config/inc_table.php'; //move to above
//require_once WEB_ROOT.'component/dm-config/config.php';//move to above

require_once WEB_ROOT.'component/dm-config/global.common.php';
require_once HERE_ROOT.'config_a/func.2010.php';
require_once HERE_ROOT.'config_a/func.2010.select.php';
require_once HERE_ROOT.'config_a/func.2010.lang.theme.php';
require_once HERE_ROOT.'config_a/func.2010.if.php';

 //----------
$stapath=$baseurl.$stadir;
define('STAPATH', $stapath);  define('ASSETSPATH', $stapath.'assets/');
define('UPLOADPATH', $stapath.'upload/');
define('UPLOADPATHIMAGE', UPLOADPATH.'image/'.$uploaddir);
define('STAROOT',WEB_ROOT.$stadir);  define('ASSETSROOT',WEB_ROOT.$stadir.'assets/');
define('UPLOADROOT',STAROOT.'upload/');
define('UPLOADROOTIMAGE',STAROOT.'upload/image/'.$uploaddir);
define('TMIMG',STAPATH.'img/tm.gif');
//-------
//echo '<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />';



//	$userdirr2=@$_SESSION[$ses1];
	//$userps=substr(@$_SESSION[$ses2ps],0,-6);
//@$_COOKIE["curstyle"]
      $cookiesecret='xylive029';
	  $usercookie = htmlentitdm(@$_COOKIE['usercookie']);

	  $useridarr = explode("-", $usercookie);
	  $userid = htmlentitdm($useridarr[0]);

	 // pre($_SESSION);
	 // echo $_SESSION['sessionsec'];

	  // pre($_SESSION);exit;
	 //pre($_COOKIE);
	 if(@$_COOKIE['isadmin']<>'y') {
		echo '<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />' ;
		echo 'sorry,pls login，对不起，<a href="../g.php">请登录</a>';
		exit;
	 }
	$ss_98373="select * from  ".TABLE_USER."  where id='$userid'  order by id desc limit 1";
	 // echo $ss_98373;//exit;

	$rowweb = getrow($ss_98373);
	$logouturl = '../mod_common/logout.php';

//	pre($_SESSION);


	if($rowweb=='no'){
		 //alert('out');
		// echo 'pls login...';
		echo '<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />' ;
		echo 'error1........';
		echo '<p>请确保根目录下的cache/session有写的权限</p>';
		echo 'sorry,pls login，对不起，<a href="../g.php">请登录</a>';
		exit;

	     // jump($logouturl);
	} {
          $userps = $rowweb['ps'];

          if($session_type=='cookie') {
			    $usercookievcompare = $userid.'-'.md5($userps.@$_COOKIE['sessionsec']);
			}else{
				 $usercookievcompare = $userid.'-'.md5($userps.@$_SESSION['sessionsec']);
			}


         
        // echo '<Br>'.$usercookievcompare;
        // echo '<Br>'.$usercookie;

          if($usercookievcompare<>$usercookie)
          	{
				//echo 'pls login';
          		 echo '<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />' ;
					echo 'error2........';
					echo '<p>登录超时。。。<br />或 <br />请确保根目录下的cache/session有写的权限</p>';
					echo 'sorry,pls login，对不起，<a href="../g.php">请登录</a>';
					exit;
					// jump($logouturl);
          	}
	}
//-----------------
	$usertype = $rowweb['type'];
	$user_stanoaccess = $rowweb['user_stanoaccess'];
	$useremail = $rowweb['email'];//use for tpl_account.php
	$arrayprevi = $rowweb['previ'];
	//pre($arrayprevi);
	if(!isset($mod_previ)) $mod_previ = 'admin';
	 //first set admin here. default all is admin.then other set normal. like node,alias , feildvalue,album...etc.


//-end login or out-------------------------------------------------------------------------
//------------------------------------------



$act = @htmlentitdm($_GET['act']);$act2 = @htmlentitdm($_GET['act2']);
$tid = @htmlentitdm($_GET['tid']);  if($tid<>'') $tid = @intval($_GET['tid']);
$theme = @htmlentitdm($_GET['theme']);  $themeid = @htmlentitdm($_GET['themeid']);
$submit = @htmlentitdm($_GET['submit']);$file = @htmlentitdm($_GET['file']);$file2 = @htmlentitdm($_GET['file2']);
$catid = @htmlentitdm($_GET['catid']);$catpid = @htmlentitdm($_GET['catpid']);$catzj = @htmlentitdm($_GET['catzj']);
$pidname = @htmlentitdm($_GET['pidname']);$pidname2 = @htmlentitdm($_GET['pidname2']);
$pidfile = @htmlentitdm($_GET['pidfile']);
 
$ppid = @htmlentitdm($_GET['ppid']);$pid = @htmlentitdm($_GET['pid']);$pid2 = @htmlentitdm($_GET['pid2']);
$page = @intval($_GET['page']);
$v = @htmlentitdm($_GET['v']);$success = @htmlentitdm($_GET['success']);
$name = @htmlspecialchars($_GET['name']);//htmlspecialchars avoid zhongwen
$bs = @htmlentitdm($_GET['bs']);$editid = @htmlentitdm($_GET['editid']);$editid2 = @htmlentitdm($_GET['editid2']);
$type = @htmlentitdm($_GET['type']);$pidtype = @htmlentitdm($_GET['pidtype']);
$type2 = @htmlentitdm($_GET['type2']);
$position = @htmlentitdm($_GET['position']);//for block
$key = @htmlentitdm($_GET['key']);
$dbname = @htmlentitdm($_GET['dbname']);

if($act == "")$act = "list";
 if($file == "")$file = "list";
 $page_total = 0;
//about lang
$script_name = $_SERVER['SCRIPT_NAME'];//$pos = strpos($mystring, $findme);


//no need set mainlang
  $sqlmain = "SELECT * from ".TABLE_LANG." where   lang='".LANG."' and pbh='".USERBH."' order by id limit 1";//pidname is not path;

				 if(getnum($sqlmain)==0){
				 	$websitename = '提示：当前语言出错,请<a href="../g.php">重新登录！</a>';alert($websitename);
					 echo $websitename;exit;}
				 else{


				 		$rowlang= getrow($sqlmain);
					   $websitename = $rowlang['sitename'];
					   if($websitename =='') $websitename ='请填写标题';
					   $waterimg = $rowlang['water'];  $waterposi='y';$waterpercent=30;
						 $arr_basicset = $rowlang['arr_basicset'];
						// pre($arr_basicset);
						 $admincolor = $rowlang['admincolor'];

						 $waterimgv= UPLOADROOT.'image/'.$waterimg;
if(!is_file($waterimgv))  $waterimgv= TMIMG;

					   $curstyle = $rowlang['curstyle'];


					   if(DMFABU=='n'){
						  if(@$_COOKIE["adminbuju"]<>'') 	 $curstyle = $_COOKIE["adminbuju"];
						  else {
							  echo 'DMFABU is n, demo test,need  cookie $adminbuju';
							 // exit;
						  }
					   }

					   		$bscntarr = explode('==#==',$arr_basicset);
						     if(count($bscntarr)>1){
						          foreach ($bscntarr as   $bsvalue) {
						             if(strpos($bsvalue, ':##')){
						               $bsvaluearr = explode(':##',$bsvalue);
						               $bsccc = $bsvaluearr[0];
						               $$bsccc=$bsvaluearr[1];
						             }
						          }
						      }


					 }


//-------------end lang --------------------------------------------------------------
if($mod_previ=='admin')
require_once HERE_ROOT.'config_a/func.previ.php';//put here,because need lang
//-----------
require_once HERE_ROOT.'config_a/text.2010.php';//put here,because need lang
require_once HERE_ROOT.'config_a/text.2010.blocktpl.php';//put here,because need lang

// if(LANG=='cn') $arr_stylebh = $arr_stylebh_cn;
// else if(LANG=='en') $arr_stylebh = $arr_stylebh_en;
// else   $arr_stylebh = $arr_stylebh_other;



//if mod_previ is normal,then require is in mod.php.bec need catid variable.
//-----------------------------------------------------

$andlangbh=" and lang='".LANG."'    and pbh='".USERBH."' ";
define('ANDLANGBH', $andlangbh);
$noandlangbh=" lang='".LANG."' and pbh='".USERBH."' ";
define('NOANDLANGBH', $noandlangbh);

$up_add_s='n';
//---------------------------------
					   $sqlstyle = "SELECT * from ".TABLE_STYLE." where pidname='$curstyle' $andlangbh limit 1";
					    $rowstyle = getrow($sqlstyle);
					   //  pre($rowstyle);
             if($rowstyle<>'no'){
					    $style_blockid = $rowstyle['style_blockid'];
						 
						 $htmldir = $rowstyle['htmldir'];
						 $styletitle = $rowstyle['title'];
           } else{
             $htmldir='skyblue';
             $style_blockid='';
             $styletitle = '请先添加数据';
           }

						 define('HTMLDIR',$htmldir);
						 define('TPLCURROOTADMIN',WEB_ROOT.'DMYI-template/'.$htmldir.'/');
						 define('TPLCURROOT',WEB_ROOT.'DMYI-template/'.$htmldir.'/');
						  define('TPLCURPATH',TEMPLATEPATH.$htmldir.'/');
						 define('DEFAULTIMG',STAPATH.'img/defaultimg.jpg');
    					define('DEFAULTIMGDIV','<img src="'.DEFAULTIMG.'" alt="" />');


					    /*-----------style_blockid-----------------*/
					    $bscntarr = explode('==#==',$style_blockid);

					    $bsbannertop=$bsbanner=$bsbannermob=$bsindex=$bsindexmob=$bsmenu=$bsheadertop=$bsheader=$bsfooterbegin=$bsfooter=$bsfooterlast=$bsfooternavmob=$bsblock404=$sta_narrowscreen=$sta_header_fullwidth=$sta_menuright=$sta_menufix='';



					     if(count($bscntarr)>1){
					        foreach ($bscntarr as   $bsvalue) {
					           $bsvaluearr = explode(':##',$bsvalue);
					           $bsccc = $bsvaluearr[0];
					           $$bsccc=$bsvaluearr[1];
					        }
					    }
					    //-------------------

//$stylename = '<div class="stylename">当前模板：<span style="color:blue">'.get_field(TABLE_STYLE,'title',$curstyle,'pidname').'</span> ('.$curstyle.' - '.HTMLDIR.')</div>';

$tomblink = '../mod_style/mod_style.php?lang='.LANG;
 $stylename = '<div class="stylename">当前模板：<a href="'.$tomblink.'" style="color:blue">'.$styletitle.'</a> ('.$curstyle.' - '.HTMLDIR.')</div>';


//require  CONFIG_ROOT.'sqlite_conn.php';


 //echo $stylename;
//-------------
$leftsidecollapsed='n';//not del
$menuactive_cate = $menuactive_block = $menuactive_module = '';


if(is_file(TPLCURROOT.'tpl/mbconfig.php')) require  TPLCURROOT.'tpl/mbconfig.php';

?>
