config
6 years ago
core
6 years ago
js
6 years ago
lang
6 years ago
libs
6 years ago
plugins
6 years ago
vendor
6 years ago
.htaccess
6 years ago
LEGALNOTICE
6 years ago
LICENSE
6 years ago
PRIVACY.md
6 years ago
README.md
6 years ago
SECURITY.md
6 years ago
bootstrap.php
6 years ago
console
6 years ago
favicon.ico
6 years ago
index.php
6 years ago
matomo.js
6 years ago
matomo.php
6 years ago
piwik.js
6 years ago
piwik.php
6 years ago
robots.txt
6 years ago
bootstrap.php
222 lines
| 1 | <?php |
| 2 | |
| 3 | $GLOBALS['CONFIG_INI_PATH_RESOLVER'] = function () { |
| 4 | if ( defined( 'ABSPATH' ) |
| 5 | && defined( 'MATOMO_CONFIG_PATH' ) ) { |
| 6 | $paths = new \WpMatomo\Paths(); |
| 7 | |
| 8 | return $paths->get_config_ini_path(); |
| 9 | } |
| 10 | }; |
| 11 | |
| 12 | $matomo_is_archive_request = !empty($_SERVER['argv']) |
| 13 | && is_array($_SERVER['argv']) |
| 14 | && in_array('climulti:request', $_SERVER['argv'], true); |
| 15 | |
| 16 | if ( ! defined( 'PIWIK_ENABLE_ERROR_HANDLER' ) ) { |
| 17 | // we prefer using WP error handler... unless we are archiving where we want to prevent any warnings being printed |
| 18 | // as otherwise the archiving would be marked as failed because the cli archive output would contain a warning and |
| 19 | // the output would not be possible to do an unserialize anymore |
| 20 | if (!$matomo_is_archive_request) { |
| 21 | define( 'PIWIK_ENABLE_ERROR_HANDLER', false ); |
| 22 | } |
| 23 | } |
| 24 | |
| 25 | $GLOBALS['MATOMO_LOADED_DIRECTLY'] = ! defined( 'ABSPATH' ); |
| 26 | |
| 27 | function matomo_log_message_no_display($message) |
| 28 | { |
| 29 | $message = 'Matomo ' . $message; |
| 30 | |
| 31 | if ( defined( 'WP_DEBUG' ) && WP_DEBUG === true ) { |
| 32 | if (function_exists('ini_set') && function_exists('ini_get')) { |
| 33 | $value_orig = @ini_get('display_errors'); |
| 34 | $value = @ini_set('display_errors', 'Off'); |
| 35 | if (false !== $value) { |
| 36 | error_log( $message ); |
| 37 | } |
| 38 | @ini_set('display_errors', $value_orig); |
| 39 | } |
| 40 | } |
| 41 | |
| 42 | if (function_exists('update_option') |
| 43 | && class_exists('\WpMatomo\Logger')) { |
| 44 | // only if WordPress was bootstrapped by now... otherwise it will fail |
| 45 | try { |
| 46 | $logger = new \WpMatomo\Logger(); |
| 47 | $logger->log_exception('archive_boot', new Exception($message)); |
| 48 | } catch (Exception $e) { |
| 49 | |
| 50 | } |
| 51 | } |
| 52 | } |
| 53 | |
| 54 | if ( $GLOBALS['MATOMO_LOADED_DIRECTLY'] ) { |
| 55 | |
| 56 | // prevent from loading twice |
| 57 | $matomo_wpload_base = '../../../../wp-load.php'; |
| 58 | $matomo_wpload_full = dirname( __FILE__ ) . '/' . $matomo_wpload_base; |
| 59 | |
| 60 | if ($matomo_is_archive_request) { |
| 61 | ob_start(); |
| 62 | // the matomo error handler will be only loaded after WordPress has been loaded... here we want to prevent |
| 63 | // any warning/notice from being shown while bootstrapping WordPress or otherwise the unserialize of the response |
| 64 | // later in climulti will fail |
| 65 | set_error_handler(function ($errno, $errstr, $errfile, $errline) { |
| 66 | // if the error has been suppressed by the @ we don't handle the error |
| 67 | if (error_reporting() == 0) { |
| 68 | return; |
| 69 | } |
| 70 | |
| 71 | if (in_array($errno, array(E_ERROR, E_PARSE, E_CORE_ERROR, E_CORE_WARNING, E_COMPILE_ERROR, E_COMPILE_WARNING, E_USER_ERROR))) { |
| 72 | return false; //force standard behaviour |
| 73 | } |
| 74 | |
| 75 | matomo_log_message_no_display( sprintf('error: %s: %s in %s:%s', $errno, $errstr, $errfile, $errline ) ); |
| 76 | }); |
| 77 | } |
| 78 | |
| 79 | if (!empty($_SERVER['MATOMO_WP_ROOT_PATH']) && file_exists( rtrim($_SERVER['MATOMO_WP_ROOT_PATH'], '/') . '/wp-load.php')) { |
| 80 | require_once rtrim($_SERVER['MATOMO_WP_ROOT_PATH'], '/') . '/wp-load.php'; |
| 81 | } elseif ( file_exists($matomo_wpload_full ) ) { |
| 82 | require_once $matomo_wpload_full; |
| 83 | } elseif (realpath( $matomo_wpload_full ) && file_exists(realpath( $matomo_wpload_full ))) { |
| 84 | require_once realpath( $matomo_wpload_full ); |
| 85 | } elseif (!empty($_SERVER['SCRIPT_FILENAME']) && file_exists($_SERVER['SCRIPT_FILENAME'])) { |
| 86 | // seems symlinked... eg the wp-content dir or wp-content/plugins dir is symlinked from some very much other place... |
| 87 | $matomo_wpload_full = dirname($_SERVER['SCRIPT_FILENAME']) . '/' . $matomo_wpload_base; |
| 88 | if ( file_exists($matomo_wpload_full ) ) { |
| 89 | require_once $matomo_wpload_full; |
| 90 | } elseif (realpath( $matomo_wpload_full ) && file_exists(realpath( $matomo_wpload_full ))) { |
| 91 | require_once realpath( $matomo_wpload_full ); |
| 92 | } elseif (file_exists(dirname(dirname(dirname(dirname(dirname( $_SERVER['SCRIPT_FILENAME'] ))))) . '/wp-load.php')) { |
| 93 | require_once dirname(dirname(dirname(dirname(dirname( $_SERVER['SCRIPT_FILENAME'] ))))) . '/wp-load.php'; |
| 94 | } |
| 95 | } |
| 96 | |
| 97 | if (!defined( 'ABSPATH')) { |
| 98 | // still not loaded... look in plugins directory if there is a config file for us. |
| 99 | $matomo_wpload_config = dirname(__FILE__) . '/../../matomo.wpload_dir.php'; |
| 100 | if (file_exists( $matomo_wpload_config) && is_readable($matomo_wpload_config)) { |
| 101 | $matomo_wpload_content = @file_get_contents($matomo_wpload_config); // we do not include that file for security reasons |
| 102 | if (!empty($matomo_wpload_content)) { |
| 103 | $matomo_wpload_content = str_replace(array('<?php', 'exit;', 'wp-load.php'), '', $matomo_wpload_content); |
| 104 | $matomo_wpload_content = preg_replace('/\s/', '', $matomo_wpload_content); |
| 105 | $matomo_wpload_content = trim(ltrim(trim($matomo_wpload_content), '#')); // the path may be commented out # /abs/path |
| 106 | if (strpos($matomo_wpload_content, DIRECTORY_SEPARATOR) === 0) { |
| 107 | $matomo_wpload_file = rtrim($matomo_wpload_content, DIRECTORY_SEPARATOR) . '/wp-load.php'; |
| 108 | if (file_exists($matomo_wpload_file) && is_readable($matomo_wpload_file)) { |
| 109 | require_once $matomo_wpload_file; |
| 110 | } |
| 111 | } |
| 112 | } |
| 113 | } |
| 114 | } |
| 115 | |
| 116 | if ($matomo_is_archive_request) { |
| 117 | restore_error_handler(); |
| 118 | if (ob_get_level()) { |
| 119 | $matomo_ob_end_clean_msg = @ob_get_clean(); |
| 120 | if (!empty($matomo_ob_end_clean_msg)) { |
| 121 | matomo_log_message_no_display( $matomo_ob_end_clean_msg ); |
| 122 | } |
| 123 | } |
| 124 | } |
| 125 | } |
| 126 | |
| 127 | if ( ! defined( 'ABSPATH' ) ) { |
| 128 | echo 'Could not find wp-load. If your server uses symlinks or a custom content directory, Matomo may not work for you as we cannot detect the paths correctly. For more information see https://matomo.org/faq/wordpress/how-do-i-make-matomo-for-wordpress-work-when-i-have-a-custom-content-directory/'; |
| 129 | exit; // if accessed directly |
| 130 | } |
| 131 | |
| 132 | if ( !is_plugin_active('matomo/matomo.php') |
| 133 | && (!defined( 'MATOMO_PHPUNIT_TEST' ) || !MATOMO_PHPUNIT_TEST) ) { // during tests the plugin may temporarily not be active |
| 134 | exit; |
| 135 | } |
| 136 | |
| 137 | if ( $GLOBALS['MATOMO_LOADED_DIRECTLY'] ) { |
| 138 | // see https://github.com/matomo-org/wp-matomo/issues/190 |
| 139 | // wp-external-links plugin would register an ob_start(function () {...}) and manipulate any of our API output |
| 140 | // and in some cases the output would get completely lost causing blank pages. |
| 141 | add_filter('wpel_apply_settings', '__return_false', 99999); |
| 142 | |
| 143 | // do not strip slashes if we bootstrap matomo within a regular wordpress request |
| 144 | if (!empty($_GET)) { |
| 145 | $_GET = stripslashes_deep( $_GET ); |
| 146 | } |
| 147 | if (!empty($_POST)) { |
| 148 | $_POST = stripslashes_deep( $_POST ); |
| 149 | } |
| 150 | if (!empty($_COOKIE)) { |
| 151 | $_COOKIE = stripslashes_deep( $_COOKIE ); |
| 152 | } |
| 153 | if (!empty($_SERVER)) { |
| 154 | $_SERVER = stripslashes_deep( $_SERVER ); |
| 155 | } |
| 156 | if (!empty($_REQUEST)) { |
| 157 | $_REQUEST = stripslashes_deep( $_REQUEST ); |
| 158 | } |
| 159 | } |
| 160 | |
| 161 | |
| 162 | if ( matomo_is_app_request() ) { |
| 163 | // pretend we are in the admin... potentially avoiding caching etc |
| 164 | $GLOBALS['hook_suffix'] = ''; |
| 165 | include_once ABSPATH . '/wp-admin/includes/class-wp-screen.php'; |
| 166 | $GLOBALS['current_screen'] = WP_Screen::get(); |
| 167 | |
| 168 | // we disable jsonp |
| 169 | unset($_GET['jsoncallback']); |
| 170 | unset($_GET['callback']); |
| 171 | unset($_POST['jsoncallback']); |
| 172 | unset($_POST['callback']); |
| 173 | } |
| 174 | |
| 175 | if ( ! defined( 'PIWIK_USER_PATH' ) ) { |
| 176 | define( 'PIWIK_USER_PATH', dirname( MATOMO_ANALYTICS_FILE ) ); |
| 177 | } |
| 178 | |
| 179 | if (function_exists('wp_raise_memory_limit') && function_exists('wp_convert_hr_to_bytes')) { |
| 180 | $current_limit = ini_get( 'memory_limit' ); |
| 181 | $current_limit_int = wp_convert_hr_to_bytes( $current_limit ); |
| 182 | $memory128MbInt = 134217728; |
| 183 | if ($current_limit_int && $current_limit_int > 0 && $current_limit_int < $memory128MbInt) { |
| 184 | // we try increase memory if memory is less than 128mb |
| 185 | wp_raise_memory_limit('admin'); |
| 186 | } |
| 187 | } |
| 188 | |
| 189 | $GLOBALS['MATOMO_MODIFY_CONFIG_SETTINGS'] = function ($settings) { |
| 190 | $plugins = $settings['Plugins']; |
| 191 | if (is_array($settings['Plugins'])) { |
| 192 | $pluginsToRemove = array('Marketplace', 'MultiSites', 'TwoFactorAuth', 'Widgetize', 'Monolog', 'Feedback', 'ExamplePlugin', 'ExampleAPI', 'ProfessionalServices', 'MobileAppMeasurable'); |
| 193 | foreach ($pluginsToRemove as $pluginToRemove) { |
| 194 | // Marketplace => this is instead done in wordpress |
| 195 | // MultiSites => doesn't really make sense since we have only one website per installation |
| 196 | // TwoFactorAuth => not needed as login is being handled by WordPress |
| 197 | // widgetize for now we don't want to allow widgetizing as it is based on the token_auth authentication |
| 198 | // Monolog => we use our own logger |
| 199 | // ProfessionalServices => we advertise in the WP plugin itself instead |
| 200 | // feedback => we want to hide things like Need help in the admin etc |
| 201 | // MobileAppMeasurable => for WP mobile apps are not a thing |
| 202 | // custom variables we don't want to enable as we will deprecate them in Matomo 4 anyway => used to be disabled but we need to make sure the columns get installed otherwise matomo has issues... need to wait to matomo 4 to remove it |
| 203 | $pos = array_search($pluginToRemove, $plugins['Plugins']); |
| 204 | if ($pos !== false) { |
| 205 | array_splice($plugins['Plugins'], $pos, 1); |
| 206 | } |
| 207 | } |
| 208 | if (matomo_has_tag_manager()) { |
| 209 | $plugins['Plugins'][] = 'TagManager'; |
| 210 | } |
| 211 | } |
| 212 | if (!empty($GLOBALS['MATOMO_PLUGINS_ENABLED'])) { |
| 213 | foreach ($GLOBALS['MATOMO_PLUGINS_ENABLED'] as $plugin) { |
| 214 | if (!in_array($plugin, $plugins['Plugins'])) { |
| 215 | $plugins['Plugins'][] = $plugin; |
| 216 | } |
| 217 | } |
| 218 | } |
| 219 | $settings['Plugins'] = $plugins; |
| 220 | return $settings; |
| 221 | }; |
| 222 |