shop.balmet.com

install.php (14915B)

---

 <?php
 class ControllerMarketplaceInstall extends Controller {
 	public function install() {
 		$this->load->language('marketplace/install');
 
 		$json = array();
 			
 		if (isset($this->request->get['extension_install_id'])) {
 			$extension_install_id = $this->request->get['extension_install_id'];
 		} else {
 			$extension_install_id = 0;
 		}
 			
 		if (!$this->user->hasPermission('modify', 'marketplace/install')) {
 			$json['error'] = $this->language->get('error_permission');
 		}
 
 		// Make sure the file name is stored in the session.
 		if (!isset($this->session->data['install'])) {
 			$json['error'] = $this->language->get('error_file');
 		} elseif (!is_file(DIR_UPLOAD . $this->session->data['install'] . '.tmp')) {
 			$json['error'] = $this->language->get('error_file');
 		}
 
 		if (!$json) {
 			$json['text'] = $this->language->get('text_unzip');
 
 			$json['next'] = str_replace('&amp;', '&', $this->url->link('marketplace/install/unzip', 'user_token=' . $this->session->data['user_token'] . '&extension_install_id=' . $extension_install_id, true));
 		}
 
 		$this->response->addHeader('Content-Type: application/json');
 		$this->response->setOutput(json_encode($json));
 	}
 
 	public function unzip() {
 		$this->load->language('marketplace/install');
 
 		$json = array();
 
 		if (isset($this->request->get['extension_install_id'])) {
 			$extension_install_id = $this->request->get['extension_install_id'];
 		} else {
 			$extension_install_id = 0;
 		}
 		
 		if (!$this->user->hasPermission('modify', 'marketplace/install')) {
 			$json['error'] = $this->language->get('error_permission');
 		}
 
 		if (!isset($this->session->data['install'])) {
 			$json['error'] = $this->language->get('error_file');
 		} elseif (!is_file(DIR_UPLOAD . $this->session->data['install'] . '.tmp')) {
 			$json['error'] = $this->language->get('error_file');
 		}
 		
 		// Sanitize the filename
 		if (!$json) {
 			$file = DIR_UPLOAD . $this->session->data['install'] . '.tmp';
 					
 			// Unzip the files
 			$zip = new ZipArchive();
 
 			if ($zip->open($file)) {
 				$zip->extractTo(DIR_UPLOAD . 'tmp-' . $this->session->data['install']);
 				$zip->close();
 			} else {
 				$json['error'] = $this->language->get('error_unzip');
 			}
 
 			// Remove Zip
 			unlink($file);
 
 			$json['text'] = $this->language->get('text_move');
 
 			$json['next'] = str_replace('&amp;', '&', $this->url->link('marketplace/install/move', 'user_token=' . $this->session->data['user_token'] . '&extension_install_id=' . $extension_install_id, true));
 		}
 
 		$this->response->addHeader('Content-Type: application/json');
 		$this->response->setOutput(json_encode($json));
 	}
 
 	public function move() {
 		$this->load->language('marketplace/install');
 		
 		$json = array();
 
 		if (isset($this->request->get['extension_install_id'])) {
 			$extension_install_id = $this->request->get['extension_install_id'];
 		} else {
 			$extension_install_id = 0;
 		}
 
 		if (!$this->user->hasPermission('modify', 'marketplace/install')) {
 			$json['error'] = $this->language->get('error_permission');
 		}
 
 		if (!isset($this->session->data['install'])) {
 			$json['error'] = $this->language->get('error_directory');
 		} elseif (!is_dir(DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/')) {
 			$json['error'] = $this->language->get('error_directory');
 		}
 
 		if (!$json) {
 			$directory = DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/';
 		
 			if (is_dir($directory . 'upload/')) {
 				$files = array();
 	
 				// Get a list of files ready to upload
 				$path = array($directory . 'upload/*');
 	
 				while (count($path) != 0) {
 					$next = array_shift($path);
 	
 					foreach ((array)glob($next) as $file) {
 						if (is_dir($file)) {
 							$path[] = $file . '/*';
 						}
 	
 						$files[] = $file;
 					}
 				}
 	
 				// A list of allowed directories to be written to
 				$allowed = array(
 					'admin/controller/extension/',
 					'admin/language/',
 					'admin/model/extension/',
 					'admin/view/image/',
 					'admin/view/javascript/',
 					'admin/view/stylesheet/',
 					'admin/view/template/extension/',
 					'catalog/controller/extension/',
 					'catalog/language/',
 					'catalog/model/extension/',
 					'catalog/view/javascript/',
 					'catalog/view/theme/',
 					'system/config/',
 					'system/library/',
 					'image/catalog/'
 				);
 	
 				// First we need to do some checks
 				foreach ($files as $file) {
 					$destination = str_replace('\\', '/', substr($file, strlen($directory . 'upload/')));
 	
 					$safe = false;
 	
 					foreach ($allowed as $value) {
 						if (strlen($destination) < strlen($value) && substr($value, 0, strlen($destination)) == $destination) {
 							$safe = true;
 	
 							break;
 						}
 	
 						if (strlen($destination) > strlen($value) && substr($destination, 0, strlen($value)) == $value) {
 							$safe = true;
 	
 							break;
 						}
 					}
 					
 					if ($safe) {
 						// Check if the copy location exists or not
 						if (substr($destination, 0, 5) == 'admin') {
 							$destination = DIR_APPLICATION . substr($destination, 6);
 						}
 	
 						if (substr($destination, 0, 7) == 'catalog') {
 							$destination = DIR_CATALOG . substr($destination, 8);
 						}
 	
 						if (substr($destination, 0, 5) == 'image') {
 							$destination = DIR_IMAGE . substr($destination, 6);
 						}
 	
 						if (substr($destination, 0, 6) == 'system') {
 							$destination = DIR_SYSTEM . substr($destination, 7);
 						}
 					} else {
 						$json['error'] = sprintf($this->language->get('error_allowed'), $destination);
 	
 						break;
 					}
 				}
 				
 				if (!$json) {
 					$this->load->model('setting/extension');
 	
 					foreach ($files as $file) {
 						$destination = str_replace('\\', '/', substr($file, strlen($directory . 'upload/')));
 	
 						$path = '';
 	
 						if (substr($destination, 0, 5) == 'admin') {
 							$path = DIR_APPLICATION . substr($destination, 6);
 						}
 	
 						if (substr($destination, 0, 7) == 'catalog') {
 							$path = DIR_CATALOG . substr($destination, 8);
 						}
 	
 						if (substr($destination, 0, 5) == 'image') {
 							$path = DIR_IMAGE . substr($destination, 6);
 						}
 	
 						if (substr($destination, 0, 6) == 'system') {
 							$path = DIR_SYSTEM . substr($destination, 7);
 						}
 	
 						if (is_dir($file) && !is_dir($path)) {
 							if (mkdir($path, 0777)) {
 								$this->model_setting_extension->addExtensionPath($extension_install_id, $destination);
 							}
 						}
 	
 						if (is_file($file)) {
 							if (rename($file, $path)) {
 								$this->model_setting_extension->addExtensionPath($extension_install_id, $destination);
 							}
 						}
 					}
 				}
 			}
 		}
 
 		if (!$json) {
 			$json['text'] = $this->language->get('text_xml');
 
 			$json['next'] = str_replace('&amp;', '&', $this->url->link('marketplace/install/xml', 'user_token=' . $this->session->data['user_token'] . '&extension_install_id=' . $extension_install_id, true));
 		}
 
 		$this->response->addHeader('Content-Type: application/json');
 		$this->response->setOutput(json_encode($json));
 	}
 
 	public function xml() {
 		$this->load->language('marketplace/install');
 
 		$json = array();
 		
 		if (isset($this->request->get['extension_install_id'])) {
 			$extension_install_id = $this->request->get['extension_install_id'];
 		} else {
 			$extension_install_id = 0;
 		}
 
 		if (!$this->user->hasPermission('modify', 'marketplace/install')) {
 			$json['error'] = $this->language->get('error_permission');
 		}
 
 		if (!isset($this->session->data['install'])) {
 			$json['error'] = $this->language->get('error_directory');
 		} elseif (!is_dir(DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/')) {
 			$json['error'] = $this->language->get('error_directory');
 		}
 
 		if (!$json) {
 			$file = DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/install.xml';
 
 			if (is_file($file)) {
 				$this->load->model('setting/modification');
 				
 				// If xml file just put it straight into the DB
 				$xml = file_get_contents($file);
 	
 				if ($xml) {
 					try {
 						$dom = new DOMDocument('1.0', 'UTF-8');
 						$dom->loadXml($xml);
 	
 						$name = $dom->getElementsByTagName('name')->item(0);
 	
 						if ($name) {
 							$name = $name->nodeValue;
 						} else {
 							$name = '';
 						}
 	
 						$code = $dom->getElementsByTagName('code')->item(0);
 	
 						if ($code) {
 							$code = $code->nodeValue;
 	
 							// Check to see if the modification is already installed or not.
 							$modification_info = $this->model_setting_modification->getModificationByCode($code);
 	
 							if ($modification_info) {
 								$this->model_setting_modification->deleteModification($modification_info['modification_id']);
 							}
 						} else {
 							$json['error'] = $this->language->get('error_code');
 						}
 	
 						$author = $dom->getElementsByTagName('author')->item(0);
 	
 						if ($author) {
 							$author = $author->nodeValue;
 						} else {
 							$author = '';
 						}
 	
 						$version = $dom->getElementsByTagName('version')->item(0);
 	
 						if ($version) {
 							$version = $version->nodeValue;
 						} else {
 							$version = '';
 						}
 	
 						$link = $dom->getElementsByTagName('link')->item(0);
 	
 						if ($link) {
 							$link = $link->nodeValue;
 						} else {
 							$link = '';
 						}
 	
 						if (!$json) {
 							
 							
 							$modification_data = array(
 								'extension_install_id' => $extension_install_id,
 								'name'                 => $name,
 								'code'                 => $code,
 								'author'               => $author,
 								'version'              => $version,
 								'link'                 => $link,
 								'xml'                  => $xml,
 								'status'               => 1
 							);
 	
 							$this->model_setting_modification->addModification($modification_data);
 						}
 					} catch(Exception $exception) {
 						$json['error'] = sprintf($this->language->get('error_exception'), $exception->getCode(), $exception->getMessage(), $exception->getFile(), $exception->getLine());
 					}
 				}
 			}
 		}
 
 		if (!$json) {
 			$json['text'] = $this->language->get('text_remove');
 
 			$json['next'] = str_replace('&amp;', '&', $this->url->link('marketplace/install/remove', 'user_token=' . $this->session->data['user_token'], true));
 		}
 
 		$this->response->addHeader('Content-Type: application/json');
 		$this->response->setOutput(json_encode($json));
 	}
 
 	public function remove() {
 		$this->load->language('marketplace/install');
 
 		$json = array();
 
 		if (!$this->user->hasPermission('modify', 'marketplace/install')) {
 			$json['error'] = $this->language->get('error_permission');
 		}
 
 		if (!isset($this->session->data['install'])) {
 			$json['error'] = $this->language->get('error_directory');
 		}
 
 		if (!$json) {
 			$directory = DIR_UPLOAD . 'tmp-' . $this->session->data['install'] . '/';
 			
 			if (is_dir($directory)) {
 				// Get a list of files ready to upload
 				$files = array();
 	
 				$path = array($directory);
 	
 				while (count($path) != 0) {
 					$next = array_shift($path);
 	
 					// We have to use scandir function because glob will not pick up dot files.
 					foreach (array_diff(scandir($next), array('.', '..')) as $file) {
 						$file = $next . '/' . $file;
 	
 						if (is_dir($file)) {
 							$path[] = $file;
 						}
 	
 						$files[] = $file;
 					}
 				}
 	
 				rsort($files);
 	
 				foreach ($files as $file) {
 					if (is_file($file)) {
 						unlink($file);
 					} elseif (is_dir($file)) {
 						rmdir($file);
 					}
 				}
 	
 				if (is_dir($directory)) {
 					rmdir($directory);
 				}
 			}
 			
 			$file = DIR_UPLOAD . $this->session->data['install'] . '.tmp';
 			
 			if (is_file($file)) {
 				unlink($file);
 			}
 							
 			$json['success'] = $this->language->get('text_success');
 		}
 		
 		$this->response->addHeader('Content-Type: application/json');
 		$this->response->setOutput(json_encode($json));
 	}
 
 	public function uninstall() {
 		$this->load->language('marketplace/install');
 
 		$json = array();
 
 		if (isset($this->request->get['extension_install_id'])) {
 			$extension_install_id = $this->request->get['extension_install_id'];
 		} else {
 			$extension_install_id = 0;
 		}
 
 		if (!$this->user->hasPermission('modify', 'marketplace/install')) {
 			$json['error'] = $this->language->get('error_permission');
 		}
 
 		if (!$json) {
 			$this->load->model('setting/extension');
 
 			$results = $this->model_setting_extension->getExtensionPathsByExtensionInstallId($extension_install_id);
 
 			rsort($results);
 
 			foreach ($results as $result) {
 				$source = '';
 
 				// Check if the copy location exists or not
 				if (substr($result['path'], 0, 5) == 'admin') {
 					$source = DIR_APPLICATION . substr($result['path'], 6);
 				}
 
 				if (substr($result['path'], 0, 7) == 'catalog') {
 					$source = DIR_CATALOG . substr($result['path'], 8);
 				}
 
 				if (substr($result['path'], 0, 5) == 'image') {
 					$source = DIR_IMAGE . substr($result['path'], 6);
 				}
 				
 				if (substr($result['path'], 0, 14) == 'system/library') {
 					$source = DIR_SYSTEM . 'library/' . substr($result['path'], 15);
 				}
 				
 				if (is_file($source)) {
 					unlink($source);
 				}
 
 				if (is_dir($source)) {
 					// Get a list of files ready to upload
 					$files = array();
 
 					$path = array($source);
 
 					while (count($path) != 0) {
 						$next = array_shift($path);
 
 						// We have to use scandir function because glob will not pick up dot files.
 						foreach (array_diff(scandir($next), array('.', '..')) as $file) {
 							$file = $next . '/' . $file;
 
 							if (is_dir($file)) {
 								$path[] = $file;
 							}
 
 							$files[] = $file;
 						}
 					}
 
 					rsort($files);
 
 					foreach ($files as $file) {
 						if (is_file($file)) {
 							unlink($file);
 						} elseif (is_dir($file)) {
 							rmdir($file);
 						}
 					}
 
 					if (is_file($source)) {
 						unlink($source);
 					}
 		
 					if (is_dir($source)) {
 						rmdir($source);
 					}					
 				}
 
 				$this->model_setting_extension->deleteExtensionPath($result['extension_path_id']);
 			}
 
 			// Remove the install
 			$this->model_setting_extension->deleteExtensionInstall($extension_install_id);
 			
 			// Remove any xml modifications
 			$this->load->model('setting/modification');
 
 			$this->model_setting_modification->deleteModificationsByExtensionInstallId($extension_install_id);
 			
 			$json['success'] = $this->language->get('text_success');
 		}
 
 		$this->response->addHeader('Content-Type: application/json');
 		$this->response->setOutput(json_encode($json));
 	}	
 }