root.php

Go to the documentation of this file.

<?php
/*
 * Copyright (c) 2022 - 2024 Bearsampp
 * License:  GNU General Public License version 3 or later; see LICENSE.txt
 * Website: https://bearsampp.com
 * Github: https://github.com/Bearsampp
 */

const APP_AUTHOR_NAME       = 'N6REJ';
const APP_TITLE             = 'Bearsampp';
const APP_WEBSITE           = 'https://bearsampp.com';
const APP_LOCALHOST         = '127.0.0.1';
const APP_LICENSE           = 'GPL3 License';
const APP_GITHUB_USER       = 'Bearsampp';
const APP_GITHUB_REPO       = 'Bearsampp';
const APP_GITHUB_USERAGENT  = 'Bearsampp';
const APP_GITHUB_LATEST_URL = 'https://api.github.com/repos/' . APP_GITHUB_USER . '/' . APP_GITHUB_REPO . '/releases/latest';
const RETURN_TAB            = ' ';
 
// Membership Pro API key & URL
// NOTE: This key is a PUBLIC identifier baked into an open-source (GPL-3) build.
// It is not a secret/credential and must not be used for authorization decisions;
// license validation relies on the per-user DOWNLOADID + server-side check instead.
const QUICKPICK_API_KEY = '4abe15e5-95f2-4663-ad12-eadb245b28b4';
const QUICKPICK_API_URL = APP_WEBSITE . '/index.php?option=com_osmembership&task=api.get_active_plan_ids&api_key=';
 
// URL where quickpick-releases.json lives
const QUICKPICK_JSON_URL = 'https://raw.githubusercontent.com/' . APP_GITHUB_USER . '/' . APP_GITHUB_REPO . '/main/core/resources/quickpick-releases.json';
 
// GitHub API proxy. Authentication for GitHub requests is handled server-side
// (the real PAT is held by the proxy at bearsampp.com and never ships with the
// client). The proxy key below is a PUBLIC shared identifier baked into an
// open-source (GPL-3) build - it only gates proxy usage/rate limits and must
// never be treated as a credential. All GitHub-hosted traffic is routed here.
const APP_GITHUB_PROXY_URL = APP_WEBSITE . '/proxy.php';
const APP_GITHUB_PROXY_KEY = '050390e9727be9a24566d641d17a16fdfafb639b14db443e70718f9334851154';
 
// CRITICAL: Check for elevation IMMEDIATELY - must be FAST to minimize console window visibility
if (isset($_SERVER['argv']) && isset($_SERVER['argv'][1]) && $_SERVER['argv'][1] === 'startup') {
    $flagFile = sys_get_temp_dir() . '/bearsampp_no_admin.lock';
 
    // Quick exit if we already determined no admin recently
    if (file_exists($flagFile) && (time() - filemtime($flagFile)) < 10) {
        $currentPid = getmypid();
        $killCmd    = 'powershell.exe -WindowStyle Hidden -Command "Stop-Process -Id ' . (int)$currentPid . ' -Force -ErrorAction SilentlyContinue; Stop-Process -Name bearsampp -Force -ErrorAction SilentlyContinue"';
        try {
            // WScript.Shell.Run with style=0 (hidden) avoids cmd.exe flash that popen causes
            $wshKill = new COM('WScript.Shell');
            $wshKill->Run($killCmd, 0, false);
        } catch (Exception $e) {
            pclose(popen($killCmd, 'r'));
        }
        exit(1);
    }
 
    // FAST elevation check - use WScript.Shell.Run with hidden window (style=0) to avoid console flash
    $isElevated = false;
    try {
        $wsh = new COM('WScript.Shell');
        // intWindowStyle=0 = completely hidden (no window, no taskbar entry), bWaitOnReturn=true
        // net session exits 0 when elevated, non-zero when access denied
        $exitCode   = $wsh->Run('net session', 0, true);
        $isElevated = ($exitCode === 0);
    } catch (Exception $e) {
        // COM unavailable — fall back to shell_exec (may flash briefly)
        $netOutput = @shell_exec('net session 2>&1');
        if ($netOutput !== null) {
            if (stripos($netOutput, 'Access is denied') === false &&
                stripos($netOutput, 'System error 5') === false &&
                $netOutput !== '') {
                $isElevated = true;
            }
        }
    }
 
    if (!$isElevated) {
        // Create flag file immediately
        @file_put_contents($flagFile, time());
 
        // Load language file for error message
        $langFile = dirname(__FILE__) . '/langs/english.lang';
        $langData = @parse_ini_file($langFile);
 
        // Get localized messages
        $title       = isset($langData['errorAdminRequiredTitle']) ? $langData['errorAdminRequiredTitle'] : 'Administrator Rights Required';
        $messageText = isset($langData['errorAdminRequiredText']) ? $langData['errorAdminRequiredText'] : '%s requires administrator privileges to install and manage Windows services.@nl@@nl@Please right-click on bearsampp.exe and select "Run as administrator" to start the application.';
 
        // Replace placeholders
        $messageText = sprintf($messageText, APP_TITLE);
        $messageText = str_replace('@nl@', '|||NEWLINE|||', $messageText);
 
        // Split by newline placeholder
        $messageParts = explode('|||NEWLINE|||', $messageText);
 
        // Create PowerShell script that handles everything (no window flashing)
        $psFile     = sys_get_temp_dir() . '/bearsampp_admin_error.ps1';
        $flagFilePs = str_replace('/', '\\', $flagFile);
        $psFilePs   = str_replace('/', '\\', $psFile);
 
        // Escape for PowerShell
        $title      = str_replace("'", "''", $title);
        $currentPid = getmypid();
 
        // PowerShell script that shows message FIRST, then kills processes
        $psContent = "# Show error message using Windows Forms\n";
        $psContent .= "Add-Type -AssemblyName System.Windows.Forms\n";
 
        // Build message from parts
        $psContent .= "\$messageParts = @(\n";
        $lastIndex = count($messageParts) - 1;
        foreach ($messageParts as $index => $part) {
            $part = str_replace("'", "''", trim($part));
            // Don't add comma after last item
            $comma     = ($index < $lastIndex) ? ',' : '';
            $psContent .= "    '" . $part . "'" . $comma . "\n";
        }
        $psContent .= ")\n";
        $psContent .= "\$message = \$messageParts -join [Environment]::NewLine\n";
        $psContent .= "[System.Windows.Forms.MessageBox]::Show(\$message, '" . $title . "', [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Error) | Out-Null\n";
        $psContent .= "\n";
        $psContent .= "# After user clicks OK, kill only Bearsampp-related processes\n";
        $psContent .= "Stop-Process -Id " . (int)$currentPid . " -Force -ErrorAction SilentlyContinue\n";
        $psContent .= "Stop-Process -Name bearsampp -Force -ErrorAction SilentlyContinue\n";
        $psContent .= "\n";
        $psContent .= "# Clean up\n";
        $psContent .= "Remove-Item -Path '" . $flagFilePs . "' -Force -ErrorAction SilentlyContinue\n";
        $psContent .= "Remove-Item -Path '" . $psFilePs . "' -Force -ErrorAction SilentlyContinue\n";
 
        @file_put_contents($psFile, $psContent);
 
        // Launch PowerShell to show the error message — use COM Run(style=0) to avoid cmd.exe flash
        if (isset($wsh)) {
            $wsh->Run('powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File "' . $psFile . '"', 0, false);
        } else {
            pclose(popen('start "" powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File "' . $psFile . '"', 'r'));
        }
 
        // Exit immediately - PowerShell will handle showing the message and cleanup
        exit(1);
    } else {
        // We're elevated, clean up any old flag
        @unlink($flagFile);
    }
}

require_once dirname(__FILE__) . '/classes/class.path.php';
require_once dirname(__FILE__) . '/classes/class.root.php';
$bearsamppRoot = new Root(dirname(__FILE__));
$bearsamppRoot->register();

$bearsamppCacert = Path::getPhpPath() . '/extras/ssl/cacert.pem';
if (is_file($bearsamppCacert)) {
    stream_context_set_default(array(
        'ssl' => array(
            'verify_peer'       => true,
            'verify_peer_name'  => true,
            'allow_self_signed' => false,
            'cafile'            => $bearsamppCacert,
        )
    ));
}

$bearsamppAction = new Action();
$bearsamppAction->process();

if ($bearsamppRoot->isRoot()) {
    $currentAction = isset($_SERVER['argv'][1]) ? $_SERVER['argv'][1] : '';
    if ($currentAction !== Action::LOADING && $currentAction !== Action::STARTUP) {
        Log::debug('root.php: script ending, calling Util::stopLoading() for action: ' . $currentAction);
        Util::stopLoading();
    }
}

global $bearsamppLang;
$locale = $bearsamppLang->getValue('locale');