PHP Decode

<?php 
/*------------------------------------------------------------------------ 
# plugin_googlemap3_proxy.php - Google Maps plugin 
# ------------------------------------------------------------------------ 
# author    Mike Reumer 
# copyright Copyright (C) 2011 tech.reumer.net. All Rights Reserved. 
# @license - http://www.gnu.org/copyleft/gpl.html GNU/GPL 
# Websites: http://tech.reumer.net 
# Technical Support: http://tech.reumer.net/Contact-Us/Mike-Reumer.html  
# Documentation: http://tech.reumer.net/Google-Maps/Documentation-of-plugin-Googlemap/ 
--------------------------------------------------------------------------*/ 
 
// No protection of Joomla because this php program may be called directly to deliver content 
// defined( '_JEXEC' ) or die( 'Restricted access' ); 
 
// No protection of Joomla because this php program may be called directly to deliver content 
// It uses Joomla framework 
// defined( '_JEXEC' ) or die( 'Restricted access' ); 
 
@define('_JEXEC', 1); 
if (!defined('DS')) 
	@define( 'DS', DIRECTORY_SEPARATOR ); 
 
// Fix magic quotes. 
@ini_set('magic_quotes_runtime', 0); 
  
// Maximise error reporting. 
//@ini_set('zend.ze1_compatibility_mode', '0'); 
//error_reporting(E_ALL); 
//@ini_set('display_errors', 1); 
  
/* 
 * Ensure that required path constants are defined. 
 */ 
if (!defined('JPATH_BASE')) 
{ 
	$path = dirname(__FILE__); 
	// Joomla 1.6.x/1.7.x/2.5.x 
	$path = str_replace('/plugins/system/plugin_googlemap3', '', $path); 
	$path = str_replace('\plugins\system\plugin_googlemap3', '', $path); 
	 
	define('JPATH_BASE', $path); 
} 
 
require_once ( JPATH_BASE.'/includes/defines.php' ); 
require_once ( JPATH_BASE.'/includes/framework.php' ); 
/* To use Joomla's Database Class */ 
require_once ( JPATH_BASE.'/libraries/joomla/factory.php' ); 
$mainframe = JFactory::getApplication('site'); 
$mainframe->initialise(); 
$user = JFactory::getUser(); 
$session = JFactory::getSession(); 
 
class plugin_googlemap3_proxy_kml 
{ 
	/** 
	 * Display the application. 
	 */ 
	function doExecute(){ 
		// Get config 
		$plugin = JPluginHelper::getPlugin('system', 'plugin_googlemap3'); 
		 
		$this->jversion = JVERSION; 
		$params = new JRegistry(); 
		$params->loadString($plugin->params); 
 
		// Get params 
		$this->errorcode = 200; 
		$this->proxy = intval($params->get('proxy', '0')); 
		$response = ""; 
		$debug = intval(JRequest::getVar('debug', '')); 
		if ($debug!=1) 
			@ob_start(); 
			 
		$this->googlewebsite = $params->get( 'googlewebsite', 'maps.google.com' ); 
 
		// Check access 
		if ($_SERVER['SERVER_PORT'] == 443) 
			$this->protocol = "https://"; 
		else 
			$this->protocol = "http://"; 
 
		// Restrict access to own domain 
		if (array_key_exists('HTTP_ORIGIN', $_SERVER)) 
			$origin = $_SERVER['HTTP_ORIGIN']; 
		else  
			$origin = ""; 
		$pattern = "/(www.)?".$_SERVER['SERVER_NAME']."/i"; 
		if ($origin!=""&&preg_match($pattern, $origin)==0) 
			$response = $this->_error(403, "Restricted access"); // 403 
		 
		if (array_key_exists('HTTP_REFERER', $_SERVER)) { 
			$refering=parse_url($_SERVER['HTTP_REFERER']); 
			if($refering['host']!=$_SERVER['SERVER_NAME']) 
				$response = $this->_error(403, "Restricted access"); // 403 
		} 
		 
		if (!JSession::checkToken( 'get' ) ) 
			$response = $this->_error(401, "Invalid token"); // 401 
		 
		if ($this->proxy==0) 
			$response = $this->_error(406, "Method not available"); // 406 
 
//		Get url 
		$url = JRequest::getVar('url', ''); 
		if (!is_string($url)||$url=='') 
			$response = $this->_error(406, "Wrong url"); // 406 
 
		// Valid url 
		$pattern = '/^(?:[;\/?:@&=+$,]|(?:[^\W_]|[-_.!~*\()\[\] ])|(?:%[\da-fA-F]{2}))*$/'; 
		if( preg_match( $pattern, $url ) == 0 ) { 
			$response = $this->_error(406, "Wrong url"); // 406 
		} 
		 
		$id = intval(JRequest::getVar('id', '')); 
 
		if (!$this->_checkurl($id, $url)) 
			$response = $this->_error(406, "Wrong url"); // 406 
		 
		$url = $this->protocol.$url; 
 
		// Set headers 
		if ($debug!="1") { 
			header('Content-type: application/vnd.google-earth.kml+xml', true, $this->errorcode); 
		} 
 
		header('Access-Control-Allow-Origin: '.$this->protocol.$_SERVER['SERVER_NAME']); 
		header('Access-Control-Allow-Credentials: true'); 
		header('Access-Control-Allow-Methods: GET'); 
 
		if ($response=="") 
			$response = $this->_getkml($url); 
 
		$oldValue = libxml_disable_entity_loader(true); 
		$dom =  new DOMDocument('1.0','UTF-8'); 
		@$dom->loadXML($response); 
		$kmlOutput = $dom->saveXML(); 
		 
		if ($debug!=1) 
			while (@ob_end_clean()); 
		 
		echo $kmlOutput; 
	} 
	 
	function _checkurl($id, $url) { 
		// check if it is the twitter url 
		$twitterurl = (($this->proxy=="0")?$this->base:"")."/plugins/system/plugin_googlemap3/plugin_googlemap3_twitter_kml.php?"; 
		if (strpos($url,$twitterurl) !== false) 
			return true; 
			 
		// Check if it is based on MSID 
		// So maps.google.xxx 
		$googlereg = '/^maps\.google((\.[a-z]{2,3}){1,2})\/maps\/ms\?/'; 
		 
		if (preg_match($googlereg, $url)== 1) { 
			$this->protocol = "https://"; 
			return true; 
		} 
				 
		// Check if url is defined on the website 
		$database  = JFactory::getDBO(); 
		$query = "SELECT CONCAT(a.introtext, a.fulltext) as text FROM #__content as a WHERE a.id=".$id; 
		$database->setQuery($query); 
		 
		if (!$database->query()) 
			return false; 
 
		$text = $database->loadResult(); 
		if (substr($this->jversion,0,2)=="3.") 
			$text = $database->escape($text); 
		else 
			$text = $database->getEscaped($text); 
		//echo $text."<br/>"; 
		// Get the kml definitions 
		preg_match_all("/kml((\(|\[)[0-9]+(\)|\]))?=\\'(.*?)\\'/msi", $text, $matches); 
		$cnt = count($matches[0]); 
		//print_r($matches); 
		//echo "<br/>Url: ".$url."<br/>"; 
		// Check if the kml definitions are in the url 
		for($counter = 0; $counter < $cnt; $counter++) { 
			preg_match("/\\'(.*?)\\'/", $matches[0][$counter], $kml); 
			$kml[1] = str_replace(array('http://', 'https://', '&amp;'), array('', '', '&'), $kml[1]); 
			//echo $kml[1]."<br/>"; 
			if (strpos($url, $kml[1]) !== false) 
				return true; 
		} 
 
		return false; 
	} 
	 
	function _getkml($url) { 
		if (!isset($HTTP_RAW_POST_DATA)){ 
			$HTTP_RAW_POST_DATA = file_get_contents('php://input'); 
		} 
		$post_data = $HTTP_RAW_POST_DATA; 
		 
		$header[] = "Content-type: text/xml"; 
		$header[] = "Content-length: ".strlen($post_data); 
 
		//get all session parameters 
		$postcurl  = array(); 
		$post  = ''; 
		$cookie = ''; 
		$reg = '/^[a-f0-9]+$/si'; 
		foreach ($_COOKIE as $key => $value) { 
			if (preg_match($reg,$key)>0) { 
				$cookie.="$key=$value; "; // separation in cookies is ; with space! 
				$postcurl[$key]=$value; 
				$post.=((strlen($post)>0)?'&':'')."$key=$value"; 
			} 
		} 
 
		$ok = false; 
 
//		File_get_contents is not supported anymore because additional headers has to be set 
//		if (ini_get('allow_url_fopen')) 
//			if (($response = @file_get_contents($url))) 
//				$ok = true; 
		 
		if (!$ok) { 
			$ch = curl_init( $url ); 
			 
			// Send authentication 
			$username = ""; 
			$password = ""; 
			// mod_php 
			if (isset($_SERVER['PHP_AUTH_USER'])) { 
				$username = $_SERVER['PHP_AUTH_USER']; 
				$password = $_SERVER['PHP_AUTH_PW']; 
			} 
		   // most other servers 
			elseif (isset($_SERVER['HTTP_AUTHENTICATION'])) { 
				if (strpos(strtolower($_SERVER['HTTP_AUTHENTICATION']),'basic')===0) { 
					list($username,$password) = explode(':',base64_decode(substr($_SERVER['HTTP_AUTHORIZATION'], 6))); 
				}   
			} 
			if ($username!=""&&$password!="") { 
				curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY); 
				curl_setopt ($ch, CURLOPT_USERPWD, $username.":".$password); // set referer on redirect 
			} 
		 
			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
			if( !ini_get('safe_mode')&&!ini_get('open_basedir') ) 
				curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); 
 
			if ( strlen($cookie)>0 ){ 
				curl_setopt($ch, CURLOPT_COOKIESESSION, false);  // False to keep all cookies of previous session 
				curl_setopt($ch, CURLOPT_COOKIE, $cookie); 
			} 
			$refering=parse_url($_SERVER['HTTP_REFERER']); 
			curl_setopt($ch, CURLOPT_REFERER, $this->protocol.$refering['host'].$refering['path']);				 
			curl_setopt($ch, CURLOPT_TIMEOUT, 80); 
			curl_setopt($ch, CURLOPT_HTTPHEADER, $header); 
			curl_setopt($ch, CURLOPT_FAILONERROR, 0); 
			curl_setopt($ch, CURLOPT_VERBOSE, 1); 
//			curl_setopt($ch, CURLOPT_HEADER, true); // Show header info in response 
			 
			if ( strlen($post_data)>0 ){ 
				curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data); 
			} 
			 
			$response = curl_exec($ch); 
			 
//			echo $url." : ".$response. "<br/>"; 
//			print_r(curl_getinfo($ch)); 
			if (curl_errno($ch)) { 
				print curl_error($ch); 
			} else { 
				curl_close($ch); 
				$ok = true; 
			} 
		} 
		 
		if (!$ok) { 
			$url = urldecode(JRequest::getVar('url', '')); 
		 
			// Do it the safe mode way for local files 
			$pattern = "/(www.)?".$_SERVER["SERVER_NAME"]."/i"; 
			if (preg_match($pattern, $url)!=0) { 
				$url = $_SERVER["DOCUMENT_ROOT"].preg_replace($pattern, "", $url); 
			 
				if (ini_get('allow_url_fopen')) 
					if (($response = file_get_contents($url))) 
						$ok = true; 
				 
				if (!$ok) { 
					$ch = curl_init( $url ); 
				 
					curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
					if( !ini_get('safe_mode')&&!ini_get('open_basedir') ) 
						curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); 
					curl_setopt($ch, CURLOPT_TIMEOUT, 80); 
					curl_setopt($ch, CURLOPT_HTTPHEADER, $header); 
					curl_setopt($ch, CURLOPT_FAILONERROR, 0); 
					curl_setopt($ch, CURLOPT_VERBOSE, 1); 
					curl_setopt($ch, CURLOPT_COOKIEFILE, 1); 
					 
					if ( strlen($post_data)>0 ){ 
						curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data); 
					} 
					 
					$response = curl_exec($ch);     
					if (curl_errno($ch)) { 
						print curl_error($ch); 
					} else { 
						curl_close($ch); 
						$ok = true; 
					} 
				} 
			} 
		} 
 
		return $response; 
	} 
	 
	function _error($errorcode, $errortext) { 
		$this->errorcode = $errorcode; 
		 
		$error = "<errorData>"; 
		$error .= "<errorCode>".$errorcode."</errorCode>"; 
		$error .= "<errorMessage>".$errortext."</errorMessage>"; 
		$error .= "</errorData>"; 
 
		return $error;		 
	} 
} 
 
// Instantiate the application. 
$web = new plugin_googlemap3_proxy_kml; 
  
// Run the application 
$web->doExecute(); 
 
?>