* @copyright 2007-2015 PrestaShop SA * @license http://opensource.org/licenses/osl-3.0.php Open Software License (OSL 3.0) * International Registered Trademark & Property of PrestaShop SA */ if (!defined('_PS_ADMIN_DIR_')) { define('_PS_ADMIN_DIR_', getcwd()); } require_once(_PS_ADMIN_DIR_.'/../images.inc.php'); function bindDatepicker($id, $time) { if ($time) { echo ' var dateObj = new Date(); var hours = dateObj.getHours(); var mins = dateObj.getMinutes(); var secs = dateObj.getSeconds(); if (hours < 10) { hours = "0" + hours; } if (mins < 10) { mins = "0" + mins; } if (secs < 10) { secs = "0" + secs; } var time = " "+hours+":"+mins+":"+secs;'; } echo ' $(function() { $("#'.Tools::htmlentitiesUTF8($id).'").datepicker({ prevText:"", nextText:"", dateFormat:"yy-mm-dd"'.($time ? '+time' : '').'}); });'; } /** * @deprecated 1.5.3.0 Use Controller::addJqueryUi('ui.datepicker') instead * @param int|array $id ID can be a identifier or an array of identifiers * @param bool $time */ function includeDatepicker($id, $time = false) { Tools::displayAsDeprecated(); echo ''; echo ''; echo ''; $iso = Db::getInstance()->getValue('SELECT iso_code FROM '._DB_PREFIX_.'lang WHERE `id_lang` = '.(int)Context::getContext()->language->id); if ($iso != 'en') { echo ''; } echo ''; } /** * Generate a new settings file, only transmitted parameters are updated * * @param string $baseUri Base URI * @param string $theme Theme name (eg. default) * @param array $array_db Parameters in order to connect to database */ function rewriteSettingsFile($base_urls = null, $theme = null, $array_db = null) { $defines = array(); $defines['_PS_CACHING_SYSTEM_'] = _PS_CACHING_SYSTEM_; $defines['_PS_CACHE_ENABLED_'] = _PS_CACHE_ENABLED_; $defines['_DB_NAME_'] = (($array_db && isset($array_db['_DB_NAME_'])) ? $array_db['_DB_NAME_'] : _DB_NAME_); $defines['_MYSQL_ENGINE_'] = (($array_db && isset($array_db['_MYSQL_ENGINE_'])) ? $array_db['_MYSQL_ENGINE_'] : _MYSQL_ENGINE_); $defines['_DB_SERVER_'] = (($array_db && isset($array_db['_DB_SERVER_'])) ? $array_db['_DB_SERVER_'] : _DB_SERVER_); $defines['_DB_USER_'] = (($array_db && isset($array_db['_DB_USER_'])) ? $array_db['_DB_USER_'] : _DB_USER_); $defines['_DB_PREFIX_'] = (($array_db && isset($array_db['_DB_PREFIX_'])) ? $array_db['_DB_PREFIX_'] : _DB_PREFIX_); $defines['_DB_PASSWD_'] = (($array_db && isset($array_db['_DB_PASSWD_'])) ? $array_db['_DB_PASSWD_'] : _DB_PASSWD_); $defines['_COOKIE_KEY_'] = addslashes(_COOKIE_KEY_); $defines['_COOKIE_IV_'] = addslashes(_COOKIE_IV_); $defines['_PS_CREATION_DATE_'] = addslashes(_PS_CREATION_DATE_); if (defined('_RIJNDAEL_KEY_')) { $defines['_RIJNDAEL_KEY_'] = addslashes(_RIJNDAEL_KEY_); } if (defined('_RIJNDAEL_IV_')) { $defines['_RIJNDAEL_IV_'] = addslashes(_RIJNDAEL_IV_); } $defines['_PS_VERSION_'] = addslashes(_PS_VERSION_); $content = " $value) { if ($k == '_PS_VERSION_') { $content .= 'if (!defined(\''.$k.'\'))'."\n\t"; } $content .= 'define(\''.$k.'\', \''.addslashes($value).'\');'."\n"; } copy(_PS_ADMIN_DIR_.'/../config/settings.inc.php', _PS_ADMIN_DIR_.'/../config/settings.old.php'); if ($fd = fopen(_PS_ADMIN_DIR_.'/../config/settings.inc.php', 'w')) { fwrite($fd, $content); fclose($fd); return true; } return false; } /** * Display SQL date in friendly format * * @param string $sql_date Date in SQL format (YYYY-MM-DD HH:mm:ss) * @param bool $with_time Display both date and time * @todo Several formats (french : DD-MM-YYYY) */ function displayDate($sql_date, $with_time = false) { return strftime('%Y-%m-%d'.($with_time ? ' %H:%M:%S' : ''), strtotime($sql_date)); } /** * Return path to a product category * * @param string $url_base Start URL * @param int $id_category Start category * @param string $path Current path * @param string $highlight String to highlight (in XHTML/CSS) * @param string $type Category type (products/cms) */ function getPath($url_base, $id_category, $path = '', $highlight = '', $category_type = 'catalog', $home = false) { $context = Context::getContext(); if ($category_type == 'catalog') { $category = Db::getInstance()->getRow(' SELECT id_category, level_depth, nleft, nright FROM '._DB_PREFIX_.'category WHERE id_category = '.(int)$id_category); if (isset($category['id_category'])) { $sql = 'SELECT c.id_category, cl.name, cl.link_rewrite FROM '._DB_PREFIX_.'category c LEFT JOIN '._DB_PREFIX_.'category_lang cl ON (cl.id_category = c.id_category'.Shop::addSqlRestrictionOnLang('cl').') WHERE c.nleft <= '.(int)$category['nleft'].' AND c.nright >= '.(int)$category['nright'].' AND cl.id_lang = '.(int)$context->language->id. ($home ? ' AND c.id_category='.(int)$id_category : '').' AND c.id_category != '.(int)Category::getTopCategory()->id.' GROUP BY c.id_category ORDER BY c.level_depth ASC LIMIT '.(!$home ? (int)$category['level_depth'] + 1 : 1); $categories = Db::getInstance()->executeS($sql); $full_path = ''; $n = 1; $n_categories = (int)count($categories); foreach ($categories as $category) { $link = Context::getContext()->link->getAdminLink('AdminCategories'); $edit = ' '; $full_path .= $edit. ($n < $n_categories ? '' : ''). (!empty($highlight) ? str_ireplace($highlight, ''.htmlentities($highlight, ENT_NOQUOTES, 'UTF-8').'', $category['name']) : $category['name']). ($n < $n_categories ? '' : ''). (($n++ != $n_categories || !empty($path)) ? ' > ' : ''); } return $full_path.$path; } } elseif ($category_type == 'cms') { $category = new CMSCategory($id_category, $context->language->id); if (!$category->id) { return $path; } $name = ($highlight != null) ? str_ireplace($highlight, ''.$highlight.'', CMSCategory::hideCMSCategoryPosition($category->name)) : CMSCategory::hideCMSCategoryPosition($category->name); $edit = ' '; if ($category->id == 1) { $edit = '
  • '; } $path = $edit.'
  • '.$name.'
  • > '.$path; if ($category->id == 1) { return substr($path, 0, strlen($path) - 3); } return getPath($url_base, $category->id_parent, $path, '', 'cms'); } } function getDirContent($path) { $content = array(); if (is_dir($path)) { $d = dir($path); while (false !== ($entry = $d->read())) { if ($entry{0} != '.') { $content[] = $entry; } } $d->close(); } return $content; } function createDir($path, $rights) { if (file_exists($path)) { return true; } return @mkdir($path, $rights); } function checkPSVersion() { $upgrader = new Upgrader(); return $upgrader->checkPSVersion(); } /** * @deprecated 1.5.4.1 Use Translate::getAdminTranslation($string) instead * @param string $string * @return string */ function translate($string) { Tools::displayAsDeprecated(); global $_LANGADM; if (!is_array($_LANGADM)) { return str_replace('"', '"', $string); } $key = md5(str_replace('\'', '\\\'', $string)); $str = (array_key_exists('index'.$key, $_LANGADM)) ? $_LANGADM['index'.$key] : ((array_key_exists('index'.$key, $_LANGADM)) ? $_LANGADM['index'.$key] : $string); return str_replace('"', '"', stripslashes($str)); } /** * Returns a new Tab object * * @param string $tab class name * @return mixed(AdminTab, bool) tab object or false if failed */ function checkingTab($tab) { $tab_lowercase = Tools::strtolower(trim($tab)); if (!Validate::isTabName($tab)) { return false; } $row = Db::getInstance(_PS_USE_SQL_SLAVE_)->getRow('SELECT id_tab, module, class_name FROM `'._DB_PREFIX_.'tab` WHERE LOWER(class_name) = \''.pSQL($tab).'\''); if (!$row['id_tab']) { if (isset(AdminTab::$tabParenting[$tab])) { Tools::redirectAdmin('?tab='.AdminTab::$tabParenting[$tab].'&token='.Tools::getAdminTokenLite(AdminTab::$tabParenting[$tab])); } echo sprintf(Tools::displayError('Page %s cannot be found.'), $tab); return false; } // Class file is included in Dispatcher::dispatch() function if (!class_exists($tab, false) || !$row['id_tab']) { echo sprintf(Tools::displayError('The class %s cannot be found.'), $tab); return false; } $admin_obj = new $tab; if (!$admin_obj->viewAccess() && ($admin_obj->table != 'employee' || Context::getContext()->employee->id != Tools::getValue('id_employee') || !Tools::isSubmit('updateemployee'))) { $admin_obj->_errors = array(Tools::displayError('Access denied.')); echo $admin_obj->displayErrors(); return false; } return $admin_obj; } /** * @TODO deprecate for Tab::checkTabRights() */ function checkTabRights($id_tab) { static $tab_accesses = null; if ($tab_accesses === null) { $tab_accesses = Profile::getProfileAccesses(Context::getContext()->employee->id_profile); } if (isset($tab_accesses[(int)$id_tab]['view'])) { return ($tab_accesses[(int)$id_tab]['view'] === '1'); } return false; } /** * Converts a simpleXML element into an array. Preserves attributes and everything. * You can choose to get your elements either flattened, or stored in a custom index that * you define. * For example, for a given element * * if you choose to flatten attributes, you would get: * $array['field']['name'] = 'someName'; * $array['field']['type'] = 'someType'; * If you choose not to flatten, you get: * $array['field']['@attributes']['name'] = 'someName'; * _____________________________________ * Repeating fields are stored in indexed arrays. so for a markup such as: * * a * b * c * * you array would be: * $array['parent']['child'][0] = 'a'; * $array['parent']['child'][1] = 'b'; * ...And so on. * _____________________________________ * @param simpleXMLElement $xml the XML to convert * @param bool $flatten_values Choose wether to flatten values * or to set them under a particular index. * defaults to true; * @param bool $flatten_attributes Choose wether to flatten attributes * or to set them under a particular index. * Defaults to true; * @param bool $flatten_children Choose wether to flatten children * or to set them under a particular index. * Defaults to true; * @param string $value_key index for values, in case $flatten_values was set to false. Defaults to "@value" * @param string $attributes_key index for attributes, in case $flatten_attributes was set to false. Defaults to "@attributes" * @param string $children_key index for children, in case $flatten_children was set to false. Defaults to "@children" * @return array the resulting array. */ function simpleXMLToArray($xml, $flatten_values = true, $flatten_attributes = true, $flatten_children = true, $value_key = '@value', $attributes_key = '@attributes', $children_key = '@children') { $return = array(); if (!($xml instanceof SimpleXMLElement)) { return $return; } $name = $xml->getName(); $value = trim((string)$xml); if (strlen($value) == 0) { $value = null; } if ($value !== null) { if (!$flatten_values) { $return[$value_key] = $value; } else { $return = $value; } } $children = array(); $first = true; foreach ($xml->children() as $element_name => $child) { $value = simpleXMLToArray($child, $flatten_values, $flatten_attributes, $flatten_children, $value_key, $attributes_key, $children_key); if (isset($children[$element_name])) { if ($first) { $temp = $children[$element_name]; unset($children[$element_name]); $children[$element_name][] = $temp; $first = false; } $children[$element_name][] = $value; } else { $children[$element_name] = $value; } } if (count($children) > 0) { if (!$flatten_children) { $return[$children_key] = $children; } else { $return = array_merge($return, $children); } } $attributes = array(); foreach ($xml->attributes() as $name => $value) { $attributes[$name] = trim($value); } if (count($attributes) > 0) { if (!$flatten_attributes) { $return[$attributes_key] = $attributes; } else { $return = array_merge($return, $attributes); } } return $return; } /** * for retrocompatibility with old AdminTab, old index.php * * @return void */ function runAdminTab($tab, $ajax_mode = false) { $ajax_mode = (bool)$ajax_mode; require_once(_PS_ADMIN_DIR_.'/init.php'); $cookie = Context::getContext()->cookie; if (empty($tab) && !count($_POST)) { $tab = 'AdminDashboard'; $_POST['tab'] = $tab; $_POST['token'] = Tools::getAdminTokenLite($tab); } // $tab = $_REQUEST['tab']; if ($admin_obj = checkingTab($tab)) { Context::getContext()->controller = $admin_obj; // init is different for new tabs (AdminController) and old tabs (AdminTab) if ($admin_obj instanceof AdminController) { if ($ajax_mode) { $admin_obj->ajax = true; } $admin_obj->path = dirname($_SERVER['PHP_SELF']); $admin_obj->run(); } else { if (!$ajax_mode) { require_once(_PS_ADMIN_DIR_.'/header.inc.php'); } $iso_user = Context::getContext()->language->id; $tabs = array(); $tabs = Tab::recursiveTab($admin_obj->id, $tabs); $tabs = array_reverse($tabs); $bread = ''; foreach ($tabs as $key => $item) { $bread .= ' >'; if (count($tabs) - 1 > $key) { $bread .= ''; } $bread .= $item['name']; if (count($tabs) - 1 > $key) { $bread .= ''; } } if (!$ajax_mode && Shop::isFeatureActive() && Shop::getContext() != Shop::CONTEXT_ALL && Context::getContext()->controller->multishop_context != Shop::CONTEXT_ALL) { echo '
    '; if (Shop::getContext() == Shop::CONTEXT_GROUP) { $shop_group = new ShopGroup((int)Shop::getContextShopGroupID()); printf(Translate::getAdminTranslation('You are configuring your store for group shop %s'), ''.$shop_group->name.''); } elseif (Shop::getContext() == Shop::CONTEXT_SHOP) { printf(Translate::getAdminTranslation('You are configuring your store for shop %s'), ''.Context::getContext()->shop->name.''); } echo '
    '; } if (Validate::isLoadedObject($admin_obj)) { if ($admin_obj->checkToken()) { if ($ajax_mode) { // the differences with index.php is here $admin_obj->ajaxPreProcess(); $action = Tools::getValue('action'); // no need to use displayConf() here if (!empty($action) && method_exists($admin_obj, 'ajaxProcess'.Tools::toCamelCase($action))) { $admin_obj->{'ajaxProcess'.Tools::toCamelCase($action)}(); } else { $admin_obj->ajaxProcess(); } // @TODO We should use a displayAjaxError $admin_obj->displayErrors(); if (!empty($action) && method_exists($admin_obj, 'displayAjax'.Tools::toCamelCase($action))) { $admin_obj->{'displayAjax'.$action}(); } else { $admin_obj->displayAjax(); } } else { /* Filter memorization */ if (isset($_POST) && !empty($_POST) && isset($admin_obj->table)) { foreach ($_POST as $key => $value) { if (is_array($admin_obj->table)) { foreach ($admin_obj->table as $table) { if (strncmp($key, $table.'Filter_', 7) === 0 || strncmp($key, 'submitFilter', 12) === 0) { $cookie->$key = !is_array($value) ? $value : serialize($value); } } } elseif (strncmp($key, $admin_obj->table.'Filter_', 7) === 0 || strncmp($key, 'submitFilter', 12) === 0) { $cookie->$key = !is_array($value) ? $value : serialize($value); } } } if (isset($_GET) && !empty($_GET) && isset($admin_obj->table)) { foreach ($_GET as $key => $value) { if (is_array($admin_obj->table)) { foreach ($admin_obj->table as $table) { if (strncmp($key, $table.'OrderBy', 7) === 0 || strncmp($key, $table.'Orderway', 8) === 0) { $cookie->$key = $value; } } } elseif (strncmp($key, $admin_obj->table.'OrderBy', 7) === 0 || strncmp($key, $admin_obj->table.'Orderway', 12) === 0) { $cookie->$key = $value; } } } $admin_obj->displayConf(); $admin_obj->postProcess(); $admin_obj->displayErrors(); $admin_obj->display(); include(_PS_ADMIN_DIR_.'/footer.inc.php'); } } else { if ($ajax_mode) { // If this is an XSS attempt, then we should only display a simple, secure page if (ob_get_level() && ob_get_length() > 0) { ob_clean(); } // ${1} in the replacement string of the regexp is required, because the token may begin with a number and mix up with it (e.g. $17) $url = preg_replace('/([&?]token=)[^&]*(&.*)?$/', '${1}'.$admin_obj->token.'$2', $_SERVER['REQUEST_URI']); if (false === strpos($url, '?token=') && false === strpos($url, '&token=')) { $url .= '&token='.$admin_obj->token; } // we can display the correct url // die(Tools::jsonEncode(array(Translate::getAdminTranslation('Invalid security token'),$url))); die(Tools::jsonEncode(Translate::getAdminTranslation('Invalid security token'))); } else { // If this is an XSS attempt, then we should only display a simple, secure page if (ob_get_level() && ob_get_length() > 0) { ob_clean(); } // ${1} in the replacement string of the regexp is required, because the token may begin with a number and mix up with it (e.g. $17) $url = preg_replace('/([&?]token=)[^&]*(&.*)?$/', '${1}'.$admin_obj->token.'$2', $_SERVER['REQUEST_URI']); if (false === strpos($url, '?token=') && false === strpos($url, '&token=')) { $url .= '&token='.$admin_obj->token; } $message = Translate::getAdminTranslation('Invalid security token'); echo ''.$message.'
    '.$message.'
    '; echo ' '; die; } } } } } }