download.php (16740B)
1 <?php 2 class ControllerCatalogDownload extends Controller { 3 private $error = array(); 4 5 public function index() { 6 $this->load->language('catalog/download'); 7 8 $this->document->setTitle($this->language->get('heading_title')); 9 10 $this->load->model('catalog/download'); 11 12 $this->getList(); 13 } 14 15 public function add() { 16 $this->load->language('catalog/download'); 17 18 $this->document->setTitle($this->language->get('heading_title')); 19 20 $this->load->model('catalog/download'); 21 22 if (($this->request->server['REQUEST_METHOD'] == 'POST') && $this->validateForm()) { 23 $this->model_catalog_download->addDownload($this->request->post); 24 25 $this->session->data['success'] = $this->language->get('text_success'); 26 27 $url = ''; 28 29 if (isset($this->request->get['sort'])) { 30 $url .= '&sort=' . $this->request->get['sort']; 31 } 32 33 if (isset($this->request->get['order'])) { 34 $url .= '&order=' . $this->request->get['order']; 35 } 36 37 if (isset($this->request->get['page'])) { 38 $url .= '&page=' . $this->request->get['page']; 39 } 40 41 $this->response->redirect($this->url->link('catalog/download', 'user_token=' . $this->session->data['user_token'] . $url, true)); 42 } 43 44 $this->getForm(); 45 } 46 47 public function edit() { 48 $this->load->language('catalog/download'); 49 50 $this->document->setTitle($this->language->get('heading_title')); 51 52 $this->load->model('catalog/download'); 53 54 if (($this->request->server['REQUEST_METHOD'] == 'POST') && $this->validateForm()) { 55 $this->model_catalog_download->editDownload($this->request->get['download_id'], $this->request->post); 56 57 $this->session->data['success'] = $this->language->get('text_success'); 58 59 $url = ''; 60 61 if (isset($this->request->get['sort'])) { 62 $url .= '&sort=' . $this->request->get['sort']; 63 } 64 65 if (isset($this->request->get['order'])) { 66 $url .= '&order=' . $this->request->get['order']; 67 } 68 69 if (isset($this->request->get['page'])) { 70 $url .= '&page=' . $this->request->get['page']; 71 } 72 73 $this->response->redirect($this->url->link('catalog/download', 'user_token=' . $this->session->data['user_token'] . $url, true)); 74 } 75 76 $this->getForm(); 77 } 78 79 public function delete() { 80 $this->load->language('catalog/download'); 81 82 $this->document->setTitle($this->language->get('heading_title')); 83 84 $this->load->model('catalog/download'); 85 86 if (isset($this->request->post['selected']) && $this->validateDelete()) { 87 foreach ($this->request->post['selected'] as $download_id) { 88 $this->model_catalog_download->deleteDownload($download_id); 89 } 90 91 $this->session->data['success'] = $this->language->get('text_success'); 92 93 $url = ''; 94 95 if (isset($this->request->get['sort'])) { 96 $url .= '&sort=' . $this->request->get['sort']; 97 } 98 99 if (isset($this->request->get['order'])) { 100 $url .= '&order=' . $this->request->get['order']; 101 } 102 103 if (isset($this->request->get['page'])) { 104 $url .= '&page=' . $this->request->get['page']; 105 } 106 107 $this->response->redirect($this->url->link('catalog/download', 'user_token=' . $this->session->data['user_token'] . $url, true)); 108 } 109 110 $this->getList(); 111 } 112 113 protected function getList() { 114 if (isset($this->request->get['sort'])) { 115 $sort = $this->request->get['sort']; 116 } else { 117 $sort = 'dd.name'; 118 } 119 120 if (isset($this->request->get['order'])) { 121 $order = $this->request->get['order']; 122 } else { 123 $order = 'ASC'; 124 } 125 126 if (isset($this->request->get['page'])) { 127 $page = $this->request->get['page']; 128 } else { 129 $page = 1; 130 } 131 132 $url = ''; 133 134 if (isset($this->request->get['sort'])) { 135 $url .= '&sort=' . $this->request->get['sort']; 136 } 137 138 if (isset($this->request->get['order'])) { 139 $url .= '&order=' . $this->request->get['order']; 140 } 141 142 if (isset($this->request->get['page'])) { 143 $url .= '&page=' . $this->request->get['page']; 144 } 145 146 $data['breadcrumbs'] = array(); 147 148 $data['breadcrumbs'][] = array( 149 'text' => $this->language->get('text_home'), 150 'href' => $this->url->link('common/dashboard', 'user_token=' . $this->session->data['user_token'], true) 151 ); 152 153 $data['breadcrumbs'][] = array( 154 'text' => $this->language->get('heading_title'), 155 'href' => $this->url->link('catalog/download', 'user_token=' . $this->session->data['user_token'] . $url, true) 156 ); 157 158 $data['add'] = $this->url->link('catalog/download/add', 'user_token=' . $this->session->data['user_token'] . $url, true); 159 $data['delete'] = $this->url->link('catalog/download/delete', 'user_token=' . $this->session->data['user_token'] . $url, true); 160 161 $data['downloads'] = array(); 162 163 $filter_data = array( 164 'sort' => $sort, 165 'order' => $order, 166 'start' => ($page - 1) * $this->config->get('config_limit_admin'), 167 'limit' => $this->config->get('config_limit_admin') 168 ); 169 170 $download_total = $this->model_catalog_download->getTotalDownloads(); 171 172 $results = $this->model_catalog_download->getDownloads($filter_data); 173 174 foreach ($results as $result) { 175 $data['downloads'][] = array( 176 'download_id' => $result['download_id'], 177 'name' => $result['name'], 178 'date_added' => date($this->language->get('date_format_short'), strtotime($result['date_added'])), 179 'edit' => $this->url->link('catalog/download/edit', 'user_token=' . $this->session->data['user_token'] . '&download_id=' . $result['download_id'] . $url, true) 180 ); 181 } 182 183 if (isset($this->error['warning'])) { 184 $data['error_warning'] = $this->error['warning']; 185 } else { 186 $data['error_warning'] = ''; 187 } 188 189 if (isset($this->session->data['success'])) { 190 $data['success'] = $this->session->data['success']; 191 192 unset($this->session->data['success']); 193 } else { 194 $data['success'] = ''; 195 } 196 197 if (isset($this->request->post['selected'])) { 198 $data['selected'] = (array)$this->request->post['selected']; 199 } else { 200 $data['selected'] = array(); 201 } 202 203 $url = ''; 204 205 if ($order == 'ASC') { 206 $url .= '&order=DESC'; 207 } else { 208 $url .= '&order=ASC'; 209 } 210 211 if (isset($this->request->get['page'])) { 212 $url .= '&page=' . $this->request->get['page']; 213 } 214 215 $data['sort_name'] = $this->url->link('catalog/download', 'user_token=' . $this->session->data['user_token'] . '&sort=dd.name' . $url, true); 216 $data['sort_date_added'] = $this->url->link('catalog/download', 'user_token=' . $this->session->data['user_token'] . '&sort=d.date_added' . $url, true); 217 218 $url = ''; 219 220 if (isset($this->request->get['sort'])) { 221 $url .= '&sort=' . $this->request->get['sort']; 222 } 223 224 if (isset($this->request->get['order'])) { 225 $url .= '&order=' . $this->request->get['order']; 226 } 227 228 $pagination = new Pagination(); 229 $pagination->total = $download_total; 230 $pagination->page = $page; 231 $pagination->limit = $this->config->get('config_limit_admin'); 232 $pagination->url = $this->url->link('catalog/download', 'user_token=' . $this->session->data['user_token'] . $url . '&page={page}', true); 233 234 $data['pagination'] = $pagination->render(); 235 236 $data['results'] = sprintf($this->language->get('text_pagination'), ($download_total) ? (($page - 1) * $this->config->get('config_limit_admin')) + 1 : 0, ((($page - 1) * $this->config->get('config_limit_admin')) > ($download_total - $this->config->get('config_limit_admin'))) ? $download_total : ((($page - 1) * $this->config->get('config_limit_admin')) + $this->config->get('config_limit_admin')), $download_total, ceil($download_total / $this->config->get('config_limit_admin'))); 237 238 $data['sort'] = $sort; 239 $data['order'] = $order; 240 241 $data['header'] = $this->load->controller('common/header'); 242 $data['column_left'] = $this->load->controller('common/column_left'); 243 $data['footer'] = $this->load->controller('common/footer'); 244 245 $this->response->setOutput($this->load->view('catalog/download_list', $data)); 246 } 247 248 protected function getForm() { 249 $data['text_form'] = !isset($this->request->get['download_id']) ? $this->language->get('text_add') : $this->language->get('text_edit'); 250 251 if (isset($this->error['warning'])) { 252 $data['error_warning'] = $this->error['warning']; 253 } else { 254 $data['error_warning'] = ''; 255 } 256 257 if (isset($this->error['name'])) { 258 $data['error_name'] = $this->error['name']; 259 } else { 260 $data['error_name'] = array(); 261 } 262 263 if (isset($this->error['filename'])) { 264 $data['error_filename'] = $this->error['filename']; 265 } else { 266 $data['error_filename'] = ''; 267 } 268 269 if (isset($this->error['mask'])) { 270 $data['error_mask'] = $this->error['mask']; 271 } else { 272 $data['error_mask'] = ''; 273 } 274 275 $url = ''; 276 277 if (isset($this->request->get['sort'])) { 278 $url .= '&sort=' . $this->request->get['sort']; 279 } 280 281 if (isset($this->request->get['order'])) { 282 $url .= '&order=' . $this->request->get['order']; 283 } 284 285 if (isset($this->request->get['page'])) { 286 $url .= '&page=' . $this->request->get['page']; 287 } 288 289 $data['breadcrumbs'] = array(); 290 291 $data['breadcrumbs'][] = array( 292 'text' => $this->language->get('text_home'), 293 'href' => $this->url->link('common/dashboard', 'user_token=' . $this->session->data['user_token'], true) 294 ); 295 296 $data['breadcrumbs'][] = array( 297 'text' => $this->language->get('heading_title'), 298 'href' => $this->url->link('catalog/download', 'user_token=' . $this->session->data['user_token'] . $url, true) 299 ); 300 301 if (!isset($this->request->get['download_id'])) { 302 $data['action'] = $this->url->link('catalog/download/add', 'user_token=' . $this->session->data['user_token'] . $url, true); 303 } else { 304 $data['action'] = $this->url->link('catalog/download/edit', 'user_token=' . $this->session->data['user_token'] . '&download_id=' . $this->request->get['download_id'] . $url, true); 305 } 306 307 $data['cancel'] = $this->url->link('catalog/download', 'user_token=' . $this->session->data['user_token'] . $url, true); 308 309 $this->load->model('localisation/language'); 310 311 $data['languages'] = $this->model_localisation_language->getLanguages(); 312 313 if (isset($this->request->get['download_id']) && ($this->request->server['REQUEST_METHOD'] != 'POST')) { 314 $download_info = $this->model_catalog_download->getDownload($this->request->get['download_id']); 315 } 316 317 $data['user_token'] = $this->session->data['user_token']; 318 319 if (isset($this->request->get['download_id'])) { 320 $data['download_id'] = $this->request->get['download_id']; 321 } else { 322 $data['download_id'] = 0; 323 } 324 325 if (isset($this->request->post['download_description'])) { 326 $data['download_description'] = $this->request->post['download_description']; 327 } elseif (isset($this->request->get['download_id'])) { 328 $data['download_description'] = $this->model_catalog_download->getDownloadDescriptions($this->request->get['download_id']); 329 } else { 330 $data['download_description'] = array(); 331 } 332 333 if (isset($this->request->post['filename'])) { 334 $data['filename'] = $this->request->post['filename']; 335 } elseif (!empty($download_info)) { 336 $data['filename'] = $download_info['filename']; 337 } else { 338 $data['filename'] = ''; 339 } 340 341 if (isset($this->request->post['mask'])) { 342 $data['mask'] = $this->request->post['mask']; 343 } elseif (!empty($download_info)) { 344 $data['mask'] = $download_info['mask']; 345 } else { 346 $data['mask'] = ''; 347 } 348 349 $data['header'] = $this->load->controller('common/header'); 350 $data['column_left'] = $this->load->controller('common/column_left'); 351 $data['footer'] = $this->load->controller('common/footer'); 352 353 $this->response->setOutput($this->load->view('catalog/download_form', $data)); 354 } 355 356 protected function validateForm() { 357 if (!$this->user->hasPermission('modify', 'catalog/download')) { 358 $this->error['warning'] = $this->language->get('error_permission'); 359 } 360 361 foreach ($this->request->post['download_description'] as $language_id => $value) { 362 if ((utf8_strlen($value['name']) < 3) || (utf8_strlen($value['name']) > 64)) { 363 $this->error['name'][$language_id] = $this->language->get('error_name'); 364 } 365 } 366 367 if ((utf8_strlen($this->request->post['filename']) < 3) || (utf8_strlen($this->request->post['filename']) > 128)) { 368 $this->error['filename'] = $this->language->get('error_filename'); 369 } 370 371 if (!is_file(DIR_DOWNLOAD . $this->request->post['filename'])) { 372 $this->error['filename'] = $this->language->get('error_exists'); 373 } 374 375 if ((utf8_strlen($this->request->post['mask']) < 3) || (utf8_strlen($this->request->post['mask']) > 128)) { 376 $this->error['mask'] = $this->language->get('error_mask'); 377 } 378 379 return !$this->error; 380 } 381 382 protected function validateDelete() { 383 if (!$this->user->hasPermission('modify', 'catalog/download')) { 384 $this->error['warning'] = $this->language->get('error_permission'); 385 } 386 387 $this->load->model('catalog/product'); 388 389 foreach ($this->request->post['selected'] as $download_id) { 390 $product_total = $this->model_catalog_product->getTotalProductsByDownloadId($download_id); 391 392 if ($product_total) { 393 $this->error['warning'] = sprintf($this->language->get('error_product'), $product_total); 394 } 395 } 396 397 return !$this->error; 398 } 399 400 public function upload() { 401 $this->load->language('catalog/download'); 402 403 $json = array(); 404 405 // Check user has permission 406 if (!$this->user->hasPermission('modify', 'catalog/download')) { 407 $json['error'] = $this->language->get('error_permission'); 408 } 409 410 if (!$json) { 411 if (!empty($this->request->files['file']['name']) && is_file($this->request->files['file']['tmp_name'])) { 412 // Sanitize the filename 413 $filename = basename(html_entity_decode($this->request->files['file']['name'], ENT_QUOTES, 'UTF-8')); 414 415 // Validate the filename length 416 if ((utf8_strlen($filename) < 3) || (utf8_strlen($filename) > 128)) { 417 $json['error'] = $this->language->get('error_filename'); 418 } 419 420 // Allowed file extension types 421 $allowed = array(); 422 423 $extension_allowed = preg_replace('~\r?\n~', "\n", $this->config->get('config_file_ext_allowed')); 424 425 $filetypes = explode("\n", $extension_allowed); 426 427 foreach ($filetypes as $filetype) { 428 $allowed[] = trim($filetype); 429 } 430 431 if (!in_array(strtolower(substr(strrchr($filename, '.'), 1)), $allowed)) { 432 $json['error'] = $this->language->get('error_filetype'); 433 } 434 435 // Allowed file mime types 436 $allowed = array(); 437 438 $mime_allowed = preg_replace('~\r?\n~', "\n", $this->config->get('config_file_mime_allowed')); 439 440 $filetypes = explode("\n", $mime_allowed); 441 442 foreach ($filetypes as $filetype) { 443 $allowed[] = trim($filetype); 444 } 445 446 if (!in_array($this->request->files['file']['type'], $allowed)) { 447 $json['error'] = $this->language->get('error_filetype'); 448 } 449 450 // Check to see if any PHP files are trying to be uploaded 451 $content = file_get_contents($this->request->files['file']['tmp_name']); 452 453 if (preg_match('/\<\?php/i', $content)) { 454 $json['error'] = $this->language->get('error_filetype'); 455 } 456 457 // Return any upload error 458 if ($this->request->files['file']['error'] != UPLOAD_ERR_OK) { 459 $json['error'] = $this->language->get('error_upload_' . $this->request->files['file']['error']); 460 } 461 } else { 462 $json['error'] = $this->language->get('error_upload'); 463 } 464 } 465 466 if (!$json) { 467 $file = $filename . '.' . token(32); 468 469 move_uploaded_file($this->request->files['file']['tmp_name'], DIR_DOWNLOAD . $file); 470 471 $json['filename'] = $file; 472 $json['mask'] = $filename; 473 474 $json['success'] = $this->language->get('text_upload'); 475 } 476 477 $this->response->addHeader('Content-Type: application/json'); 478 $this->response->setOutput(json_encode($json)); 479 } 480 481 public function autocomplete() { 482 $json = array(); 483 484 if (isset($this->request->get['filter_name'])) { 485 $this->load->model('catalog/download'); 486 487 $filter_data = array( 488 'filter_name' => $this->request->get['filter_name'], 489 'start' => 0, 490 'limit' => 5 491 ); 492 493 $results = $this->model_catalog_download->getDownloads($filter_data); 494 495 foreach ($results as $result) { 496 $json[] = array( 497 'download_id' => $result['download_id'], 498 'name' => strip_tags(html_entity_decode($result['name'], ENT_QUOTES, 'UTF-8')) 499 ); 500 } 501 } 502 503 $sort_order = array(); 504 505 foreach ($json as $key => $value) { 506 $sort_order[$key] = $value['name']; 507 } 508 509 array_multisort($sort_order, SORT_ASC, $json); 510 511 $this->response->addHeader('Content-Type: application/json'); 512 $this->response->setOutput(json_encode($json)); 513 } 514 }