Exemplo n.º 1
0
     if (Configuration::get('PS_LANG_DEFAULT') == 1) {
         $sqlParams[] = 'UPDATE `' . _DB_PREFIX_ . 'configuration` SET `value` = (SELECT id_lang FROM ' . _DB_PREFIX_ . 'lang WHERE iso_code = \'' . pSQL($_GET['isoCode']) . '\') WHERE name = \'PS_LANG_DEFAULT\'';
         // This request is used when _PS_MODE_DEV_ is set to true
         $sqlParams[] = 'UPDATE `' . _DB_PREFIX_ . 'lang` SET `active` = 0 WHERE `iso_code` != \'' . pSQL($_GET['isoCode']) . '\'';
     } else {
         $sqlParams[] = 'UPDATE `' . _DB_PREFIX_ . 'lang` SET `active` = 0 WHERE `id_lang` != ' . Configuration::get('PS_LANG_DEFAULT');
     }
 }
 if (isset($_GET['infosMailMethod']) and $_GET['infosMailMethod'] == "smtp") {
     $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_SERVER', '" . pSQL($_GET['smtpSrv']) . "', NOW(), NOW())";
     $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_USER', '" . pSQL($_GET['smtpLogin']) . "', NOW(), NOW())";
     $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_PASSWD', '" . pSQL($_GET['smtpPassword']) . "', NOW(), NOW())";
     $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_SMTP_ENCRYPTION', '" . pSQL($_GET['smtpEnc']) . "', NOW(), NOW())";
     $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_SMTP_PORT', '" . pSQL($_GET['smtpPort']) . "', NOW(), NOW())";
 }
 $sqlParams[] = 'INSERT INTO ' . _DB_PREFIX_ . 'employee (id_employee, lastname, firstname, email, passwd, last_passwd_gen, bo_theme, active, id_profile, id_lang) VALUES (NULL, \'' . pSQL(ToolsInstall::ucfirst($_GET['infosName'])) . '\', \'' . pSQL(ToolsInstall::ucfirst($_GET['infosFirstname'])) . '\', \'' . pSQL($_GET['infosEmail']) . '\', \'' . md5(pSQL(_COOKIE_KEY_ . $_GET['infosPassword'])) . '\', \'' . date('Y-m-d h:i:s', strtotime('-360 minutes')) . '\', \'oldschool\', 1, 1, (SELECT `value` FROM `' . _DB_PREFIX_ . 'configuration` WHERE `name` = \'PS_LANG_DEFAULT\' LIMIT 1))';
 $sqlParams[] = 'INSERT INTO ' . _DB_PREFIX_ . 'contact (id_contact, email, customer_service) VALUES (NULL, \'' . pSQL($_GET['infosEmail']) . '\', 1), (NULL, \'' . pSQL($_GET['infosEmail']) . '\', 1)';
 if (function_exists('mcrypt_encrypt')) {
     $settings = file_get_contents(dirname(__FILE__) . '/../../config/settings.inc.php');
     if (!strstr($settings, '_RIJNDAEL_KEY_')) {
         $key_size = mcrypt_get_key_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_ECB);
         $key = Tools::passwdGen($key_size);
         $settings = preg_replace('/define\\(\'_COOKIE_KEY_\', \'([a-z0-9=\\/+-_]+)\'\\);/i', 'define(\'_COOKIE_KEY_\', \'\\1\');' . "\n" . 'define(\'_RIJNDAEL_KEY_\', \'' . $key . '\');', $settings);
     }
     if (!strstr($settings, '_RIJNDAEL_IV_')) {
         $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_ECB);
         $iv = base64_encode(mcrypt_create_iv($iv_size, MCRYPT_RAND));
         $settings = preg_replace('/define\\(\'_COOKIE_IV_\', \'([a-z0-9=\\/+-_]+)\'\\);/i', 'define(\'_COOKIE_IV_\', \'\\1\');' . "\n" . 'define(\'_RIJNDAEL_IV_\', \'' . $iv . '\');', $settings);
     }
     if (file_put_contents(dirname(__FILE__) . '/../../config/settings.inc.php', $settings)) {
         $sqlParams[] = 'UPDATE ' . _DB_PREFIX_ . 'configuration SET value = 1 WHERE name = \'PS_CIPHER_ALGORITHM\'';
Exemplo n.º 2
0
    $sqlParams = array();
    $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_SHOP_NAME', '" . pSQL($_GET['infosShop']) . "', NOW(), NOW())";
    $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_SHOP_EMAIL', '" . pSQL($_GET['infosEmail']) . "', NOW(), NOW())";
    $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_METHOD', '" . pSQL($_GET['infosMailMethod'] == "smtp" ? "2" : "1") . "', NOW(), NOW())";
    $sqlParams[] = 'UPDATE ' . _DB_PREFIX_ . 'configuration SET value = (SELECT id_lang FROM ' . _DB_PREFIX_ . 'lang WHERE iso_code = \'' . pSQL($_GET['isoCode']) . '\') WHERE name = \'PS_LANG_DEFAULT\'';
    if (intval($_GET['infosCountry']) != 0) {
        $sqlParams[] = 'UPDATE ' . _DB_PREFIX_ . 'configuration SET value = ' . intval($_GET['infosCountry']) . ' WHERE name = \'PS_COUNTRY_DEFAULT\'';
    }
    if (isset($_GET['infosMailMethod']) and $_GET['infosMailMethod'] == "smtp") {
        $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_SERVER', '" . pSQL($_GET['smtpSrv']) . "', NOW(), NOW())";
        $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_USER', '" . pSQL($_GET['smtpLogin']) . "', NOW(), NOW())";
        $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_PASSWD', '" . pSQL($_GET['smtpPassword']) . "', NOW(), NOW())";
        $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_SMTP_ENCRYPTION', '" . pSQL($_GET['smtpEnc']) . "', NOW(), NOW())";
        $sqlParams[] = "INSERT INTO " . _DB_PREFIX_ . "configuration (name, value, date_add, date_upd) VALUES ('PS_MAIL_SMTP_PORT', '" . pSQL($_GET['smtpPort']) . "', NOW(), NOW())";
    }
    $sqlParams[] = 'INSERT INTO ' . _DB_PREFIX_ . 'employee (id_employee, lastname, firstname, email, passwd, last_passwd_gen, active, id_profile) VALUES (NULL, \'' . pSQL(ToolsInstall::strtoupper($_GET['infosName'])) . '\', \'' . pSQL(ToolsInstall::ucfirst($_GET['infosFirstname'])) . '\', \'' . pSQL($_GET['infosEmail']) . '\', \'' . md5(pSQL(_COOKIE_KEY_ . $_GET['infosPassword'])) . '\', \'' . date('Y-m-d h:i:s', strtotime('-360 minutes')) . '\', 1, 1)';
    $sqlParams[] = 'INSERT INTO ' . _DB_PREFIX_ . 'contact (id_contact, email) VALUES (NULL, \'' . pSQL($_GET['infosEmail']) . '\'), (NULL, \'' . pSQL($_GET['infosEmail']) . '\')';
    $dbInstance = Db::getInstance();
    foreach ($sqlParams as $query) {
        if (!$dbInstance->Execute($query)) {
            $error['infosInsertSQL'] = '11';
        }
    }
    unset($dbInstance);
}
//////////////////////////
// Building XML Response//
//////////////////////////
echo '<shopConfig>' . "\n";
foreach ($error as $key => $line) {
    echo '<field id="' . $key . '" result="' . ($line != "" ? 'fail' : 'ok') . '" error="' . $line . '" />' . "\n";