aboutsummaryrefslogtreecommitdiffstats
path: root/public/admin/controller/marketplace/install.php
diff options
context:
space:
mode:
Diffstat (limited to 'public/admin/controller/marketplace/install.php')
-rw-r--r--public/admin/controller/marketplace/install.php520
1 files changed, 520 insertions, 0 deletions
diff --git a/public/admin/controller/marketplace/install.php b/public/admin/controller/marketplace/install.php
new file mode 100644
index 0000000..5d3ccb9
--- /dev/null
+++ b/public/admin/controller/marketplace/install.php
@@ -0,0 +1,520 @@
+<?php
+class ControllerMarketplaceInstall extends Controller {
+ public function install() {
+ $this->load->language('marketplace/install');
+
+ $json = array();
+
+ if (isset($this->request->get['extension_install_id'])) {
+ $extension_install_id = $this->request->get['extension_install_id'];
+ } else {
+ $extension_install_id = 0;
+ }
+
+ if (!$this->user->hasPermission('modify', 'marketplace/install')) {
+ $json['error'] = $this->language->get('error_permission');
+ }
+
+ // Make sure the file name is stored in the session.
+ if (!isset($this->session->data['install'])) {
+ $json['error'] = $this->language->get('error_file');
+ } elseif (!is_file(DIR_UPLOAD . $this->session->data['install'] . '.tmp')) {
+ $json['error'] = $this->language->get('error_file');
+ }
+
+ if (!$json) {
+ $json['text'] = $this->language->get('text_unzip');
+
+ $json['next'] = str_replace('&amp;', '&', $this->url->link('marketplace/install/unzip', 'user_token=' . $this->session->data['user_token'] . '&extension_install_id=' . $extension_install_id, true));
+ }
+
+ $this->response->addHeader('Content-Type: application/json');
+ $this->response->setOutput(json_encode($json));
+ }
+
+ public function unzip() {
+ $this->load->language('marketplace/install');
+
+ $json = array();
+
+ if (isset($this->request->get['extension_install_id'])) {
+ $extension_install_id = $this->request->get['extension_install_id'];
+ } else {
+ $extension_install_id = 0;
+ }
+
+ if (!$this->user->hasPermission('modify', 'marketplace/install')) {
+ $json['error'] = $this->language->get('error_permission');
+ }
+
+ if (!isset($this->session->data['install'])) {
+ $json['error'] = $this->language->get('error_file');
+ } elseif (!is_file(DIR_UPLOAD . $this->session->data['install'] . '.tmp')) {
+ $json['error'] = $this->language->get('error_file');
+ }
+
+ // Sanitize the filename
+ if (!$json) {
+ $file = DIR_UPLOAD . $this->session->data['install'] . '.tmp';
+
+ // Unzip the files
+ $zip = new ZipArchive();
+
+ if ($zip->open($file)) {
+ $zip->extractTo(DIR_UPLOAD . 'tmp-' . $this->session->data['install']);
+ $zip->close();
+ } else {
+ $json['error'] = $this->language->get('error_unzip');
+ }
+
+ // Remove Zip
+ unlink($file);
+
+ $json['text'] = $this->language->get('text_move');
+
+ $json['next'] = str_replace('&amp;', '&', $this->url->link('marketplace/install/move', 'user_token=' . $this->session->data['user_token'] . '&extension_install_id=' . $extension_install_id, true));
+ }
+
+ $this->response->addHeader('Content-Type: application/json');
+ $this->response->setOutput(json_encode($json));
+ }
+
+ public function move() {
+ $this->load->language('marketplace/install');
+
+ $json = array();
+
+ if (isset($this->request->get['extension_install_id'])) {
+ $extension_install_id = $this->request->get['extension_install_id'];
+ } else {
+ $extension_install_id = 0;
+ }
+
+ if (!$this->user->hasPermission('modify', 'marketplace/install')) {
+ $json['error'] = $this->language->get('error_permission');
+ }
+
+ if (!isset($this->session->data['install'])) {
+ $json['error'] = $this->language->get('error_directory');
+ } elseif (!is_dir(DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/')) {
+ $json['error'] = $this->language->get('error_directory');
+ }
+
+ if (!$json) {
+ $directory = DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/';
+
+ if (is_dir($directory . 'upload/')) {
+ $files = array();
+
+ // Get a list of files ready to upload
+ $path = array($directory . 'upload/*');
+
+ while (count($path) != 0) {
+ $next = array_shift($path);
+
+ foreach ((array)glob($next) as $file) {
+ if (is_dir($file)) {
+ $path[] = $file . '/*';
+ }
+
+ $files[] = $file;
+ }
+ }
+
+ // A list of allowed directories to be written to
+ $allowed = array(
+ 'admin/controller/extension/',
+ 'admin/language/',
+ 'admin/model/extension/',
+ 'admin/view/image/',
+ 'admin/view/javascript/',
+ 'admin/view/stylesheet/',
+ 'admin/view/template/extension/',
+ 'catalog/controller/extension/',
+ 'catalog/language/',
+ 'catalog/model/extension/',
+ 'catalog/view/javascript/',
+ 'catalog/view/theme/',
+ 'system/config/',
+ 'system/library/',
+ 'image/catalog/'
+ );
+
+ // First we need to do some checks
+ foreach ($files as $file) {
+ $destination = str_replace('\\', '/', substr($file, strlen($directory . 'upload/')));
+
+ $safe = false;
+
+ foreach ($allowed as $value) {
+ if (strlen($destination) < strlen($value) && substr($value, 0, strlen($destination)) == $destination) {
+ $safe = true;
+
+ break;
+ }
+
+ if (strlen($destination) > strlen($value) && substr($destination, 0, strlen($value)) == $value) {
+ $safe = true;
+
+ break;
+ }
+ }
+
+ if ($safe) {
+ // Check if the copy location exists or not
+ if (substr($destination, 0, 5) == 'admin') {
+ $destination = DIR_APPLICATION . substr($destination, 6);
+ }
+
+ if (substr($destination, 0, 7) == 'catalog') {
+ $destination = DIR_CATALOG . substr($destination, 8);
+ }
+
+ if (substr($destination, 0, 5) == 'image') {
+ $destination = DIR_IMAGE . substr($destination, 6);
+ }
+
+ if (substr($destination, 0, 6) == 'system') {
+ $destination = DIR_SYSTEM . substr($destination, 7);
+ }
+ } else {
+ $json['error'] = sprintf($this->language->get('error_allowed'), $destination);
+
+ break;
+ }
+ }
+
+ if (!$json) {
+ $this->load->model('setting/extension');
+
+ foreach ($files as $file) {
+ $destination = str_replace('\\', '/', substr($file, strlen($directory . 'upload/')));
+
+ $path = '';
+
+ if (substr($destination, 0, 5) == 'admin') {
+ $path = DIR_APPLICATION . substr($destination, 6);
+ }
+
+ if (substr($destination, 0, 7) == 'catalog') {
+ $path = DIR_CATALOG . substr($destination, 8);
+ }
+
+ if (substr($destination, 0, 5) == 'image') {
+ $path = DIR_IMAGE . substr($destination, 6);
+ }
+
+ if (substr($destination, 0, 6) == 'system') {
+ $path = DIR_SYSTEM . substr($destination, 7);
+ }
+
+ if (is_dir($file) && !is_dir($path)) {
+ if (mkdir($path, 0777)) {
+ $this->model_setting_extension->addExtensionPath($extension_install_id, $destination);
+ }
+ }
+
+ if (is_file($file)) {
+ if (rename($file, $path)) {
+ $this->model_setting_extension->addExtensionPath($extension_install_id, $destination);
+ }
+ }
+ }
+ }
+ }
+ }
+
+ if (!$json) {
+ $json['text'] = $this->language->get('text_xml');
+
+ $json['next'] = str_replace('&amp;', '&', $this->url->link('marketplace/install/xml', 'user_token=' . $this->session->data['user_token'] . '&extension_install_id=' . $extension_install_id, true));
+ }
+
+ $this->response->addHeader('Content-Type: application/json');
+ $this->response->setOutput(json_encode($json));
+ }
+
+ public function xml() {
+ $this->load->language('marketplace/install');
+
+ $json = array();
+
+ if (isset($this->request->get['extension_install_id'])) {
+ $extension_install_id = $this->request->get['extension_install_id'];
+ } else {
+ $extension_install_id = 0;
+ }
+
+ if (!$this->user->hasPermission('modify', 'marketplace/install')) {
+ $json['error'] = $this->language->get('error_permission');
+ }
+
+ if (!isset($this->session->data['install'])) {
+ $json['error'] = $this->language->get('error_directory');
+ } elseif (!is_dir(DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/')) {
+ $json['error'] = $this->language->get('error_directory');
+ }
+
+ if (!$json) {
+ $file = DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/install.xml';
+
+ if (is_file($file)) {
+ $this->load->model('setting/modification');
+
+ // If xml file just put it straight into the DB
+ $xml = file_get_contents($file);
+
+ if ($xml) {
+ try {
+ $dom = new DOMDocument('1.0', 'UTF-8');
+ $dom->loadXml($xml);
+
+ $name = $dom->getElementsByTagName('name')->item(0);
+
+ if ($name) {
+ $name = $name->nodeValue;
+ } else {
+ $name = '';
+ }
+
+ $code = $dom->getElementsByTagName('code')->item(0);
+
+ if ($code) {
+ $code = $code->nodeValue;
+
+ // Check to see if the modification is already installed or not.
+ $modification_info = $this->model_setting_modification->getModificationByCode($code);
+
+ if ($modification_info) {
+ $this->model_setting_modification->deleteModification($modification_info['modification_id']);
+ }
+ } else {
+ $json['error'] = $this->language->get('error_code');
+ }
+
+ $author = $dom->getElementsByTagName('author')->item(0);
+
+ if ($author) {
+ $author = $author->nodeValue;
+ } else {
+ $author = '';
+ }
+
+ $version = $dom->getElementsByTagName('version')->item(0);
+
+ if ($version) {
+ $version = $version->nodeValue;
+ } else {
+ $version = '';
+ }
+
+ $link = $dom->getElementsByTagName('link')->item(0);
+
+ if ($link) {
+ $link = $link->nodeValue;
+ } else {
+ $link = '';
+ }
+
+ if (!$json) {
+
+
+ $modification_data = array(
+ 'extension_install_id' => $extension_install_id,
+ 'name' => $name,
+ 'code' => $code,
+ 'author' => $author,
+ 'version' => $version,
+ 'link' => $link,
+ 'xml' => $xml,
+ 'status' => 1
+ );
+
+ $this->model_setting_modification->addModification($modification_data);
+ }
+ } catch(Exception $exception) {
+ $json['error'] = sprintf($this->language->get('error_exception'), $exception->getCode(), $exception->getMessage(), $exception->getFile(), $exception->getLine());
+ }
+ }
+ }
+ }
+
+ if (!$json) {
+ $json['text'] = $this->language->get('text_remove');
+
+ $json['next'] = str_replace('&amp;', '&', $this->url->link('marketplace/install/remove', 'user_token=' . $this->session->data['user_token'], true));
+ }
+
+ $this->response->addHeader('Content-Type: application/json');
+ $this->response->setOutput(json_encode($json));
+ }
+
+ public function remove() {
+ $this->load->language('marketplace/install');
+
+ $json = array();
+
+ if (!$this->user->hasPermission('modify', 'marketplace/install')) {
+ $json['error'] = $this->language->get('error_permission');
+ }
+
+ if (!isset($this->session->data['install'])) {
+ $json['error'] = $this->language->get('error_directory');
+ }
+
+ if (!$json) {
+ $directory = DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/';
+
+ if (is_dir($directory)) {
+ // Get a list of files ready to upload
+ $files = array();
+
+ $path = array($directory);
+
+ while (count($path) != 0) {
+ $next = array_shift($path);
+
+ // We have to use scandir function because glob will not pick up dot files.
+ foreach (array_diff(scandir($next), array('.', '..')) as $file) {
+ $file = $next . '/' . $file;
+
+ if (is_dir($file)) {
+ $path[] = $file;
+ }
+
+ $files[] = $file;
+ }
+ }
+
+ rsort($files);
+
+ foreach ($files as $file) {
+ if (is_file($file)) {
+ unlink($file);
+ } elseif (is_dir($file)) {
+ rmdir($file);
+ }
+ }
+
+ if (is_dir($directory)) {
+ rmdir($directory);
+ }
+ }
+
+ $file = DIR_UPLOAD . $this->session->data['install'] . '.tmp';
+
+ if (is_file($file)) {
+ unlink($file);
+ }
+
+ $json['success'] = $this->language->get('text_success');
+ }
+
+ $this->response->addHeader('Content-Type: application/json');
+ $this->response->setOutput(json_encode($json));
+ }
+
+ public function uninstall() {
+ $this->load->language('marketplace/install');
+
+ $json = array();
+
+ if (isset($this->request->get['extension_install_id'])) {
+ $extension_install_id = $this->request->get['extension_install_id'];
+ } else {
+ $extension_install_id = 0;
+ }
+
+ if (!$this->user->hasPermission('modify', 'marketplace/install')) {
+ $json['error'] = $this->language->get('error_permission');
+ }
+
+ if (!$json) {
+ $this->load->model('setting/extension');
+
+ $results = $this->model_setting_extension->getExtensionPathsByExtensionInstallId($extension_install_id);
+
+ rsort($results);
+
+ foreach ($results as $result) {
+ $source = '';
+
+ // Check if the copy location exists or not
+ if (substr($result['path'], 0, 5) == 'admin') {
+ $source = DIR_APPLICATION . substr($result['path'], 6);
+ }
+
+ if (substr($result['path'], 0, 7) == 'catalog') {
+ $source = DIR_CATALOG . substr($result['path'], 8);
+ }
+
+ if (substr($result['path'], 0, 5) == 'image') {
+ $source = DIR_IMAGE . substr($result['path'], 6);
+ }
+
+ if (substr($result['path'], 0, 14) == 'system/library') {
+ $source = DIR_SYSTEM . 'library/' . substr($result['path'], 15);
+ }
+
+ if (is_file($source)) {
+ unlink($source);
+ }
+
+ if (is_dir($source)) {
+ // Get a list of files ready to upload
+ $files = array();
+
+ $path = array($source);
+
+ while (count($path) != 0) {
+ $next = array_shift($path);
+
+ // We have to use scandir function because glob will not pick up dot files.
+ foreach (array_diff(scandir($next), array('.', '..')) as $file) {
+ $file = $next . '/' . $file;
+
+ if (is_dir($file)) {
+ $path[] = $file;
+ }
+
+ $files[] = $file;
+ }
+ }
+
+ rsort($files);
+
+ foreach ($files as $file) {
+ if (is_file($file)) {
+ unlink($file);
+ } elseif (is_dir($file)) {
+ rmdir($file);
+ }
+ }
+
+ if (is_file($source)) {
+ unlink($source);
+ }
+
+ if (is_dir($source)) {
+ rmdir($source);
+ }
+ }
+
+ $this->model_setting_extension->deleteExtensionPath($result['extension_path_id']);
+ }
+
+ // Remove the install
+ $this->model_setting_extension->deleteExtensionInstall($extension_install_id);
+
+ // Remove any xml modifications
+ $this->load->model('setting/modification');
+
+ $this->model_setting_modification->deleteModificationsByExtensionInstallId($extension_install_id);
+
+ $json['success'] = $this->language->get('text_success');
+ }
+
+ $this->response->addHeader('Content-Type: application/json');
+ $this->response->setOutput(json_encode($json));
+ }
+}
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-13 15:22:34 +0000