privilegedemarque/adm/backup.php

77 lines
2.7 KiB
PHP
Raw Normal View History

2016-04-14 16:14:31 +02:00
<?php
/*
* 2007-2014 PrestaShop
*
* NOTICE OF LICENSE
*
* This source file is subject to the Open Software License (OSL 3.0)
* that is bundled with this package in the file LICENSE.txt.
* It is also available through the world-wide-web at this URL:
* http://opensource.org/licenses/osl-3.0.php
* If you did not receive a copy of the license and are unable to
* obtain it through the world-wide-web, please send an email
* to license@prestashop.com so we can send you a copy immediately.
*
* DISCLAIMER
*
* Do not edit or add to this file if you wish to upgrade PrestaShop to newer
* versions in the future. If you wish to customize PrestaShop for your
* needs please refer to http://www.prestashop.com for more information.
*
* @author PrestaShop SA <contact@prestashop.com>
* @copyright 2007-2014 PrestaShop SA
* @license http://opensource.org/licenses/osl-3.0.php Open Software License (OSL 3.0)
* International Registered Trademark & Property of PrestaShop SA
*/
if (!defined('_PS_ADMIN_DIR_'))
define('_PS_ADMIN_DIR_', getcwd());
include(_PS_ADMIN_DIR_.'/../config/config.inc.php');
if (!Context::getContext()->employee->isLoggedBack())
Tools::redirectAdmin(Context::getContext()->link->getAdminLink('AdminLogin'));
$tabAccess = Profile::getProfileAccess(Context::getContext()->employee->id_profile,
Tab::getIdFromClassName('AdminBackup'));
if ($tabAccess['view'] !== '1')
die (Tools::displayError('You do not have permission to view this.'));
$backupdir = realpath(PrestaShopBackup::getBackupPath());
if ($backupdir === false)
die (Tools::displayError('There is no "/backup" directory.'));
if (!$backupfile = Tools::getValue('filename'))
die (Tools::displayError('No file has been specified.'));
// Check the realpath so we can validate the backup file is under the backup directory
$backupfile = realpath($backupdir.DIRECTORY_SEPARATOR.$backupfile);
if ($backupfile === false OR strncmp($backupdir, $backupfile, strlen($backupdir)) != 0 )
die (Tools::dieOrLog('The backup file does not exist.'));
if (substr($backupfile, -4) == '.bz2')
$contentType = 'application/x-bzip2';
else if (substr($backupfile, -3) == '.gz')
$contentType = 'application/x-gzip';
else
$contentType = 'text/x-sql';
$fp = @fopen($backupfile, 'r');
if ($fp === false)
die (Tools::displayError('Unable to open backup file(s).').' "'.addslashes($backupfile).'"');
// Add the correct headers, this forces the file is saved
header('Content-Type: '.$contentType);
header('Content-Disposition: attachment; filename="'.Tools::getValue('filename'). '"');
if (ob_get_level() && ob_get_length() > 0)
ob_clean();
$ret = @fpassthru($fp);
fclose($fp);
if ($ret === false)
die (Tools::displayError('Unable to display backup file(s).').' "'.addslashes($backupfile).'"');