/**
* Run the controller and parse the password template
*
* @return Response
*/
public function run()
{
/** @var BackendTemplate|object $objTemplate */
$objTemplate = new \BackendTemplate('be_password');
if (\Input::post('FORM_SUBMIT') == 'tl_password') {
$pw = \Input::postUnsafeRaw('password');
$cnf = \Input::postUnsafeRaw('confirm');
// The passwords do not match
if ($pw != $cnf) {
\Message::addError($GLOBALS['TL_LANG']['ERR']['passwordMatch']);
} elseif (Utf8::strlen($pw) < \Config::get('minPasswordLength')) {
\Message::addError(sprintf($GLOBALS['TL_LANG']['ERR']['passwordLength'], \Config::get('minPasswordLength')));
} elseif ($pw == $this->User->username) {
\Message::addError($GLOBALS['TL_LANG']['ERR']['passwordName']);
} else {
// Make sure the password has been changed
if (\Encryption::verify($pw, $this->User->password)) {
\Message::addError($GLOBALS['TL_LANG']['MSC']['pw_change']);
} else {
$this->loadDataContainer('tl_user');
// Trigger the save_callback
if (is_array($GLOBALS['TL_DCA']['tl_user']['fields']['password']['save_callback'])) {
foreach ($GLOBALS['TL_DCA']['tl_user']['fields']['password']['save_callback'] as $callback) {
if (is_array($callback)) {
$this->import($callback[0]);
$pw = $this->{$callback[0]}->{$callback[1]}($pw);
} elseif (is_callable($callback)) {
$pw = $callback($pw);
}
}
}
$objUser = \UserModel::findByPk($this->User->id);
$objUser->pwChange = '';
$objUser->password = \Encryption::hash($pw);
$objUser->save();
\Message::addConfirmation($GLOBALS['TL_LANG']['MSC']['pw_changed']);
$this->redirect('contao/main.php');
}
}
$this->reload();
}
$objTemplate->theme = \Backend::getTheme();
$objTemplate->messages = \Message::generate();
$objTemplate->base = \Environment::get('base');
$objTemplate->language = $GLOBALS['TL_LANGUAGE'];
$objTemplate->title = \StringUtil::specialchars($GLOBALS['TL_LANG']['MSC']['pw_new']);
$objTemplate->charset = \Config::get('characterSet');
$objTemplate->action = ampersand(\Environment::get('request'));
$objTemplate->headline = $GLOBALS['TL_LANG']['MSC']['pw_change'];
$objTemplate->submitButton = \StringUtil::specialchars($GLOBALS['TL_LANG']['MSC']['continue']);
$objTemplate->password = $GLOBALS['TL_LANG']['MSC']['password'][0];
$objTemplate->confirm = $GLOBALS['TL_LANG']['MSC']['confirm'][0];
return $objTemplate->getResponse();
}
/**
* Rebuild Vimeo cache
*
* @param DataContainer $dc
*/
public function rebuildVimeoCache(DataContainer $dc)
{
$rebuilder = new Rebuilder();
try {
$result = $rebuilder->rebuildElementCache(ContentModel::findByPk($dc->id));
} catch (\InvalidArgumentException $e) {
return;
} catch (\RuntimeException $e) {
System::log(sprintf('Unable to rebuild Vimeo cache of element ID %s: %s', $dc->id, $e->getMessage()), __METHOD__, TL_ERROR);
$result = false;
}
if ($result === true) {
Message::addConfirmation($GLOBALS['TL_LANG']['tl_content']['vimeo_cacheConfirm']);
} elseif ($result === false) {
Message::addError($GLOBALS['TL_LANG']['tl_content']['vimeo_cacheError']);
}
}
/**
* @param null $dc
*/
public function sendPasswordEmail($dc = null)
{
// Front end call
if (!$dc instanceof DataContainer) {
return;
}
if ($this->isDisabledAccountmail($dc)) {
return;
}
// Return if there is no active record
if (!$dc->activeRecord) {
return;
}
// Send login data
if ($dc->activeRecord->sendLoginData == 1) {
// Set different passwords on overrideAll mode, when no password was given
if (Input::get('act') == 'overrideAll' && $GLOBALS['ACCOUNTMAIL']['AUTO_PASSWORD'] === true) {
$this->setPostPassword('', $dc->id);
}
if ($this->getPostPassword($dc->id) == '' || $this->getPostPassword($dc->id) == '*****') {
// Set empty password
$this->setPostPassword('', $dc->id);
// Generate new password
$this->setAutoPassword($dc);
}
if ($this->getPostPassword($dc->id) != '' && $this->getPostPassword($dc->id) != '*****') {
$strType = $this->getType($dc);
$arrParameters = $this->getParameters($dc);
$strLanguage = $this->getAccountLanguage($dc);
if (!strlen($strType)) {
return;
}
if ($this->sendEmail($dc->activeRecord->email, $strType, $arrParameters, $strLanguage)) {
// Disable sendLoginData field
$dc->activeRecord->sendLoginData = '';
// Disable sendLoginData field in the database
Database::getInstance()->prepare("UPDATE " . $dc->table . " SET sendLoginData='', loginDataAlreadySent='1' WHERE id=?")->execute($dc->activeRecord->id);
// Show success message
Message::addConfirmation($GLOBALS['TL_LANG']['MSC']['login_data_send']);
} else {
// Show error message
Message::addError($GLOBALS['TL_LANG']['MSC']['login_data_not_send']);
}
}
}
}
/**
* Add an error message
*
* @param string $strMessage The error message
*
* @deprecated Deprecated since Contao 4.0, to be removed in Contao 5.0.
* Use Message::addError() instead.
*/
protected function addErrorMessage($strMessage)
{
@trigger_error('Using System::addErrorMessage() has been deprecated and will no longer work in Contao 5.0. Use Message::addError() instead.', E_USER_DEPRECATED);
\Message::addError($strMessage);
}
/**
* Compares the current host to the phpbb Cookie Domain
* and adds Warning Msg if they differ
*/
public function testCookieDomain()
{
$result = $this->compareCookieDomains();
if ($result === false) {
Message::addError('WARNING: The current Host (' . Environment::get('host') . ') differs from the cookie_domain configured in phpbb. Please make sure the used frontend domain is the same to: ' . System::getContainer()->get('phpbb_bridge.connector')->getDbConfig('cookie_domain'));
}
}
/**
* Return a form to choose a CSV file and import it
*
* @return string
*/
public function importRecipients()
{
if (\Input::get('key') != 'import') {
return '';
}
$this->import('BackendUser', 'User');
$class = $this->User->uploader;
// See #4086 and #7046
if (!class_exists($class) || $class == 'DropZone') {
$class = 'FileUpload';
}
/** @var FileUpload $objUploader */
$objUploader = new $class();
// Import recipients
if (\Input::post('FORM_SUBMIT') == 'tl_recipients_import') {
$arrUploaded = $objUploader->uploadTo('system/tmp');
if (empty($arrUploaded)) {
\Message::addError($GLOBALS['TL_LANG']['ERR']['all_fields']);
$this->reload();
}
$time = time();
$intTotal = 0;
$intInvalid = 0;
foreach ($arrUploaded as $strCsvFile) {
$objFile = new \File($strCsvFile);
if ($objFile->extension != 'csv') {
\Message::addError(sprintf($GLOBALS['TL_LANG']['ERR']['filetype'], $objFile->extension));
continue;
}
// Get separator
switch (\Input::post('separator')) {
case 'semicolon':
$strSeparator = ';';
break;
case 'tabulator':
$strSeparator = "\t";
break;
case 'linebreak':
$strSeparator = "\n";
break;
default:
$strSeparator = ',';
break;
}
$arrRecipients = array();
$resFile = $objFile->handle;
while (($arrRow = @fgetcsv($resFile, null, $strSeparator)) !== false) {
$arrRecipients = array_merge($arrRecipients, $arrRow);
}
$arrRecipients = array_filter(array_unique($arrRecipients));
foreach ($arrRecipients as $strRecipient) {
// Skip invalid entries
if (!\Validator::isEmail($strRecipient)) {
$this->log('Recipient address "' . $strRecipient . '" seems to be invalid and was not imported', __METHOD__, TL_ERROR);
++$intInvalid;
continue;
}
// Check whether the e-mail address exists
$objRecipient = $this->Database->prepare("SELECT COUNT(*) AS count FROM tl_newsletter_recipients WHERE pid=? AND email=?")->execute(\Input::get('id'), $strRecipient);
if ($objRecipient->count > 0) {
continue;
}
// Check whether the e-mail address has been blacklisted
$objBlacklist = $this->Database->prepare("SELECT COUNT(*) AS count FROM tl_newsletter_blacklist WHERE pid=? AND hash=?")->execute(\Input::get('id'), md5($strRecipient));
if ($objBlacklist->count > 0) {
$this->log('Recipient address "' . $strRecipient . '" has been unsubscribed and was not imported', __METHOD__, TL_ERROR);
continue;
}
$this->Database->prepare("INSERT INTO tl_newsletter_recipients SET pid=?, tstamp={$time}, email=?, active=1")->execute(\Input::get('id'), $strRecipient);
++$intTotal;
}
}
\Message::addConfirmation(sprintf($GLOBALS['TL_LANG']['tl_newsletter_recipients']['confirm'], $intTotal));
if ($intInvalid > 0) {
\Message::addInfo(sprintf($GLOBALS['TL_LANG']['tl_newsletter_recipients']['invalid'], $intInvalid));
}
\System::setCookie('BE_PAGE_OFFSET', 0, 0);
$this->reload();
}
// Return form
return '
<div id="tl_buttons">
<a href="' . ampersand(str_replace('&key=import', '', \Environment::get('request'))) . '" class="header_back" title="' . specialchars($GLOBALS['TL_LANG']['MSC']['backBTTitle']) . '" accesskey="b">' . $GLOBALS['TL_LANG']['MSC']['backBT'] . '</a>
</div>
' . \Message::generate() . '
<form action="' . ampersand(\Environment::get('request'), true) . '" id="tl_recipients_import" class="tl_form" method="post" enctype="multipart/form-data">
<div class="tl_formbody_edit">
<input type="hidden" name="FORM_SUBMIT" value="tl_recipients_import">
<input type="hidden" name="REQUEST_TOKEN" value="' . REQUEST_TOKEN . '">
<input type="hidden" name="MAX_FILE_SIZE" value="' . \Config::get('maxFileSize') . '">
<div class="tl_tbox">
<h3><label for="separator">' . $GLOBALS['TL_LANG']['MSC']['separator'][0] . '</label></h3>
<select name="separator" id="separator" class="tl_select" onfocus="Backend.getScrollOffset()">
<option value="comma">' . $GLOBALS['TL_LANG']['MSC']['comma'] . '</option>
<option value="semicolon">' . $GLOBALS['TL_LANG']['MSC']['semicolon'] . '</option>
<option value="tabulator">' . $GLOBALS['TL_LANG']['MSC']['tabulator'] . '</option>
<option value="linebreak">' . $GLOBALS['TL_LANG']['MSC']['linebreak'] . '</option>
</select>' . ($GLOBALS['TL_LANG']['MSC']['separator'][1] != '' ? '
<p class="tl_help tl_tip">' . $GLOBALS['TL_LANG']['MSC']['separator'][1] . '</p>' : '') . '
<h3>' . $GLOBALS['TL_LANG']['MSC']['source'][0] . '</h3>' . $objUploader->generateMarkup() . (isset($GLOBALS['TL_LANG']['MSC']['source'][1]) ? '
<p class="tl_help tl_tip">' . $GLOBALS['TL_LANG']['MSC']['source'][1] . '</p>' : '') . '
</div>
</div>
<div class="tl_formbody_submit">
<div class="tl_submit_container">
<button type="submit" name="save" id="save" class="tl_submit" accesskey="s">' . $GLOBALS['TL_LANG']['tl_newsletter_recipients']['import'][0] . '</button>
</div>
</div>
</form>';
}
/**
* Move one or more local files to the server
*
* @param boolean $blnIsAjax
*
* @return string
*
* @throws AccessDeniedException
*/
public function move($blnIsAjax = false)
{
$strFolder = \Input::get('pid', true);
if (!file_exists(TL_ROOT . '/' . $strFolder) || !$this->isMounted($strFolder)) {
throw new AccessDeniedException('Folder "' . $strFolder . '" is not mounted or is not a directory.');
}
if (!preg_match('/^' . preg_quote(\Config::get('uploadPath'), '/') . '/i', $strFolder)) {
throw new AccessDeniedException('Parent folder "' . $strFolder . '" is not within the files directory.');
}
// Empty clipboard
if (!$blnIsAjax) {
/** @var SessionInterface $objSession */
$objSession = \System::getContainer()->get('session');
$arrClipboard = $objSession->get('CLIPBOARD');
$arrClipboard[$this->strTable] = array();
$objSession->set('CLIPBOARD', $arrClipboard);
}
// Instantiate the uploader
$this->import('BackendUser', 'User');
$class = $this->User->uploader;
// See #4086
if (!class_exists($class)) {
$class = 'FileUpload';
}
/** @var FileUpload $objUploader */
$objUploader = new $class();
// Process the uploaded files
if (\Input::post('FORM_SUBMIT') == 'tl_upload') {
// Generate the DB entries
if ($this->blnIsDbAssisted && \Dbafs::shouldBeSynchronized($strFolder)) {
// Upload the files
$arrUploaded = $objUploader->uploadTo($strFolder);
if (empty($arrUploaded)) {
\Message::addError($GLOBALS['TL_LANG']['ERR']['emptyUpload']);
$this->reload();
}
foreach ($arrUploaded as $strFile) {
\Dbafs::addResource($strFile);
}
} else {
// Not DB-assisted, so just upload the file
$arrUploaded = $objUploader->uploadTo($strFolder);
}
// HOOK: post upload callback
if (isset($GLOBALS['TL_HOOKS']['postUpload']) && is_array($GLOBALS['TL_HOOKS']['postUpload'])) {
foreach ($GLOBALS['TL_HOOKS']['postUpload'] as $callback) {
if (is_array($callback)) {
$this->import($callback[0]);
$this->{$callback[0]}->{$callback[1]}($arrUploaded);
} elseif (is_callable($callback)) {
$callback($arrUploaded);
}
}
}
// Update the hash of the target folder
if ($this->blnIsDbAssisted && \Dbafs::shouldBeSynchronized($strFolder)) {
\Dbafs::updateFolderHashes($strFolder);
}
// Redirect or reload
if (!$objUploader->hasError()) {
// Do not purge the html folder (see #2898)
if (isset($_POST['uploadNback']) && !$objUploader->hasResized()) {
\Message::reset();
$this->redirect($this->getReferer());
}
$this->reload();
}
}
// Submit buttons
$arrButtons = array();
$arrButtons['upload'] = '<button type="submit" name="upload" class="tl_submit" accesskey="s">' . $GLOBALS['TL_LANG'][$this->strTable]['upload'] . '</button>';
$arrButtons['uploadNback'] = '<button type="submit" name="uploadNback" class="tl_submit" accesskey="c">' . $GLOBALS['TL_LANG'][$this->strTable]['uploadNback'] . '</button>';
// Call the buttons_callback (see #4691)
if (is_array($GLOBALS['TL_DCA'][$this->strTable]['edit']['buttons_callback'])) {
foreach ($GLOBALS['TL_DCA'][$this->strTable]['edit']['buttons_callback'] as $callback) {
if (is_array($callback)) {
$this->import($callback[0]);
$arrButtons = $this->{$callback[0]}->{$callback[1]}($arrButtons, $this);
} elseif (is_callable($callback)) {
$arrButtons = $callback($arrButtons, $this);
}
}
}
// Display the upload form
return '
<div id="tl_buttons">
<a href="' . $this->getReferer(true) . '" class="header_back" title="' . specialchars($GLOBALS['TL_LANG']['MSC']['backBTTitle']) . '" accesskey="b" onclick="Backend.getScrollOffset()">' . $GLOBALS['TL_LANG']['MSC']['backBT'] . '</a>
</div>
' . \Message::generate() . '
<form action="' . ampersand(\Environment::get('request'), true) . '" id="' . $this->strTable . '" class="tl_form" method="post"' . (!empty($this->onsubmit) ? ' onsubmit="' . implode(' ', $this->onsubmit) . '"' : '') . ' enctype="multipart/form-data">
<div class="tl_formbody_edit">
<input type="hidden" name="FORM_SUBMIT" value="tl_upload">
<input type="hidden" name="REQUEST_TOKEN" value="' . REQUEST_TOKEN . '">
<input type="hidden" name="MAX_FILE_SIZE" value="' . \Config::get('maxFileSize') . '">
<div class="tl_tbox">
<h3>' . $GLOBALS['TL_LANG'][$this->strTable]['fileupload'][0] . '</h3>' . $objUploader->generateMarkup() . '
</div>
</div>
<div class="tl_formbody_submit">
<div class="tl_submit_container">
' . implode(' ', $arrButtons) . '
</div>
</div>
</form>';
}
/**
* Extract the theme files and write the data to the database
*
* @param array $arrFiles
* @param array $arrDbFields
*/
protected function extractThemeFiles($arrFiles, $arrDbFields)
{
foreach ($arrFiles as $strZipFile) {
$xml = null;
// Open the archive
$objArchive = new \ZipReader($strZipFile);
// Extract all files
while ($objArchive->next()) {
// Load the XML file
if ($objArchive->file_name == 'theme.xml') {
$xml = new \DOMDocument();
$xml->preserveWhiteSpace = false;
$xml->loadXML($objArchive->unzip());
continue;
}
// Limit file operations to files and the templates directory
if (strncmp($objArchive->file_name, 'files/', 6) !== 0 && strncmp($objArchive->file_name, 'tl_files/', 9) !== 0 && strncmp($objArchive->file_name, 'templates/', 10) !== 0) {
\Message::addError(sprintf($GLOBALS['TL_LANG']['ERR']['invalidFile'], $objArchive->file_name));
continue;
}
// Extract the files
try {
\File::putContent($this->customizeUploadPath($objArchive->file_name), $objArchive->unzip());
} catch (\Exception $e) {
\Message::addError($e->getMessage());
}
}
// Continue if there is no XML file
if (!$xml instanceof \DOMDocument) {
\Message::addError(sprintf($GLOBALS['TL_LANG']['tl_theme']['missing_xml'], basename($strZipFile)));
continue;
}
$arrMapper = array();
$tables = $xml->getElementsByTagName('table');
$arrNewFolders = array();
// Extract the folder names from the XML file
for ($i = 0; $i < $tables->length; $i++) {
if ($tables->item($i)->getAttribute('name') == 'tl_theme') {
$fields = $tables->item($i)->childNodes->item(0)->childNodes;
for ($k = 0; $k < $fields->length; $k++) {
if ($fields->item($k)->getAttribute('name') == 'folders') {
$arrNewFolders = \StringUtil::deserialize($fields->item($k)->nodeValue);
break;
}
}
break;
}
}
// Sync the new folder(s)
if (!empty($arrNewFolders) && is_array($arrNewFolders)) {
foreach ($arrNewFolders as $strFolder) {
$strCustomized = $this->customizeUploadPath($strFolder);
if (\Dbafs::shouldBeSynchronized($strCustomized)) {
\Dbafs::addResource($strCustomized);
}
}
}
// Lock the tables
$arrLocks = array('tl_files' => 'WRITE', 'tl_theme' => 'WRITE', 'tl_style_sheet' => 'WRITE', 'tl_style' => 'WRITE', 'tl_module' => 'WRITE', 'tl_layout' => 'WRITE', 'tl_image_size' => 'WRITE', 'tl_image_size_item' => 'WRITE');
// Load the DCAs of the locked tables (see #7345)
foreach (array_keys($arrLocks) as $table) {
$this->loadDataContainer($table);
}
$this->Database->lockTables($arrLocks);
// Get the current auto_increment values
$tl_files = $this->Database->getNextId('tl_files');
$tl_theme = $this->Database->getNextId('tl_theme');
$tl_style_sheet = $this->Database->getNextId('tl_style_sheet');
$tl_style = $this->Database->getNextId('tl_style');
$tl_module = $this->Database->getNextId('tl_module');
$tl_layout = $this->Database->getNextId('tl_layout');
$tl_image_size = $this->Database->getNextId('tl_image_size');
$tl_image_size_item = $this->Database->getNextId('tl_image_size_item');
// Build the mapper data (see #8326)
for ($i = 0; $i < $tables->length; $i++) {
$rows = $tables->item($i)->childNodes;
$table = $tables->item($i)->getAttribute('name');
// Skip invalid tables
if (!in_array($table, array_keys($arrLocks))) {
continue;
}
// Loop through the rows
for ($j = 0; $j < $rows->length; $j++) {
$fields = $rows->item($j)->childNodes;
// Loop through the fields
for ($k = 0; $k < $fields->length; $k++) {
// Increment the ID
if ($fields->item($k)->getAttribute('name') == 'id') {
$arrMapper[$table][$fields->item($k)->nodeValue] = ${$table}++;
break;
}
}
}
}
// Loop through the tables
for ($i = 0; $i < $tables->length; $i++) {
$rows = $tables->item($i)->childNodes;
$table = $tables->item($i)->getAttribute('name');
// Skip invalid tables
if (!in_array($table, array_keys($arrLocks))) {
continue;
}
// Get the order fields
$objDcaExtractor = \DcaExtractor::getInstance($table);
$arrOrder = $objDcaExtractor->getOrderFields();
// Loop through the rows
for ($j = 0; $j < $rows->length; $j++) {
$set = array();
$fields = $rows->item($j)->childNodes;
// Loop through the fields
for ($k = 0; $k < $fields->length; $k++) {
$value = $fields->item($k)->nodeValue;
$name = $fields->item($k)->getAttribute('name');
// Skip NULL values
if ($value == 'NULL') {
continue;
} elseif ($name == 'id') {
$value = $arrMapper[$table][$value];
} elseif ($name == 'pid') {
if ($table == 'tl_style') {
$value = $arrMapper['tl_style_sheet'][$value];
} elseif ($table == 'tl_image_size_item') {
$value = $arrMapper['tl_image_size'][$value];
} else {
$value = $arrMapper['tl_theme'][$value];
}
} elseif ($name == 'fallback') {
$value = '';
} elseif ($table == 'tl_layout' && $name == 'stylesheet') {
$stylesheets = \StringUtil::deserialize($value);
if (is_array($stylesheets)) {
foreach (array_keys($stylesheets) as $key) {
$stylesheets[$key] = $arrMapper['tl_style_sheet'][$stylesheets[$key]];
}
$value = serialize($stylesheets);
}
} elseif ($table == 'tl_layout' && $name == 'modules') {
$modules = \StringUtil::deserialize($value);
if (is_array($modules)) {
foreach ($modules as $key => $mod) {
if ($mod['mod'] > 0) {
$modules[$key]['mod'] = $arrMapper['tl_module'][$mod['mod']];
}
}
$value = serialize($modules);
}
} elseif (($table == 'tl_theme' || $table == 'tl_style_sheet') && $name == 'name') {
$objCount = $this->Database->prepare("SELECT COUNT(*) AS count FROM " . $table . " WHERE name=?")->execute($value);
if ($objCount->count > 0) {
$value = preg_replace('/( |\\-)[0-9]+$/', '', $value);
$value .= ($table == 'tl_style_sheet' ? '-' : ' ') . ${$table};
}
} elseif (($table == 'tl_style_sheet' || $table == 'tl_style' || $table == 'tl_files' && $name == 'path') && strpos($value, 'files') !== false) {
$tmp = \StringUtil::deserialize($value);
if (is_array($tmp)) {
foreach ($tmp as $kk => $vv) {
$tmp[$kk] = $this->customizeUploadPath($vv);
}
$value = serialize($tmp);
} else {
$value = $this->customizeUploadPath($value);
}
} elseif ($GLOBALS['TL_DCA'][$table]['fields'][$name]['inputType'] == 'fileTree' && !$GLOBALS['TL_DCA'][$table]['fields'][$name]['eval']['multiple']) {
if (!$value) {
$value = null;
// Contao >= 3.2
} else {
// Do not use the FilesModel here – tables are locked!
$objFile = $this->Database->prepare("SELECT uuid FROM tl_files WHERE path=?")->limit(1)->execute($this->customizeUploadPath($value));
$value = $objFile->uuid;
}
} elseif ($GLOBALS['TL_DCA'][$table]['fields'][$name]['inputType'] == 'fileTree' || in_array($name, $arrOrder)) {
$tmp = \StringUtil::deserialize($value);
if (is_array($tmp)) {
foreach ($tmp as $kk => $vv) {
// Do not use the FilesModel here – tables are locked!
$objFile = $this->Database->prepare("SELECT uuid FROM tl_files WHERE path=?")->limit(1)->execute($this->customizeUploadPath($vv));
$tmp[$kk] = $objFile->uuid;
}
$value = serialize($tmp);
}
} elseif ($GLOBALS['TL_DCA'][$table]['fields'][$name]['inputType'] == 'imageSize') {
$imageSizes = \StringUtil::deserialize($value, true);
if (!empty($imageSizes)) {
if (is_numeric($imageSizes[2])) {
$imageSizes[2] = $arrMapper['tl_image_size'][$imageSizes[2]];
}
}
$value = serialize($imageSizes);
}
$set[$name] = $value;
}
// Skip fields that are not in the database (e.g. because of missing extensions)
foreach ($set as $k => $v) {
if (!in_array($k, $arrDbFields[$table])) {
unset($set[$k]);
}
}
// Create the templates folder even if it is empty (see #4793)
if ($table == 'tl_theme' && isset($set['templates']) && strncmp($set['templates'], 'templates/', 10) === 0 && !is_dir(TL_ROOT . '/' . $set['templates'])) {
new \Folder($set['templates']);
}
// Update tl_files (entries have been created by the Dbafs class)
if ($table == 'tl_files') {
$this->Database->prepare("UPDATE {$table} %s WHERE path=?")->set($set)->execute($set['path']);
} else {
$this->Database->prepare("INSERT INTO {$table} %s")->set($set)->execute();
}
}
}
// Unlock the tables
$this->Database->unlockTables();
// Update the style sheets
$this->import('StyleSheets');
$this->StyleSheets->updateStyleSheets();
// Notify the user
\Message::addConfirmation(sprintf($GLOBALS['TL_LANG']['tl_theme']['theme_imported'], basename($strZipFile)));
// HOOK: add custom logic
if (isset($GLOBALS['TL_HOOKS']['extractThemeFiles']) && is_array($GLOBALS['TL_HOOKS']['extractThemeFiles'])) {
$intThemeId = empty($arrMapper['tl_theme']) ? null : reset($arrMapper['tl_theme']);
foreach ($GLOBALS['TL_HOOKS']['extractThemeFiles'] as $callback) {
\System::importStatic($callback[0])->{$callback[1]}($xml, $objArchive, $intThemeId, $arrMapper);
}
}
unset($tl_files, $tl_theme, $tl_style_sheet, $tl_style, $tl_module, $tl_layout, $tl_image_size, $tl_image_size_item);
}
\System::setCookie('BE_PAGE_OFFSET', 0, 0);
/** @var SessionInterface $objSession */
$objSession = \System::getContainer()->get('session');
$objSession->remove('uploaded_themes');
// Redirect
$this->redirect(str_replace('&key=importTheme', '', \Environment::get('request')));
}
/**
* Auto-generate a form to edit the local configuration file
*
* @return string
*/
public function edit()
{
$return = '';
$ajaxId = null;
if (\Environment::get('isAjaxRequest')) {
$ajaxId = func_get_arg(1);
}
// Build an array from boxes and rows
$this->strPalette = $this->getPalette();
$boxes = trimsplit(';', $this->strPalette);
$legends = array();
if (!empty($boxes)) {
foreach ($boxes as $k => $v) {
$boxes[$k] = trimsplit(',', $v);
foreach ($boxes[$k] as $kk => $vv) {
if (preg_match('/^\\[.*\\]$/', $vv)) {
continue;
}
if (preg_match('/^\\{.*\\}$/', $vv)) {
$legends[$k] = substr($vv, 1, -1);
unset($boxes[$k][$kk]);
} elseif ($GLOBALS['TL_DCA'][$this->strTable]['fields'][$vv]['exclude'] || !is_array($GLOBALS['TL_DCA'][$this->strTable]['fields'][$vv])) {
unset($boxes[$k][$kk]);
}
}
// Unset a box if it does not contain any fields
if (empty($boxes[$k])) {
unset($boxes[$k]);
}
}
/** @var AttributeBagInterface $objSessionBag */
$objSessionBag = \System::getContainer()->get('session')->getBag('contao_backend');
// Render boxes
$class = 'tl_tbox';
$fs = $objSessionBag->get('fieldset_states');
$blnIsFirst = true;
foreach ($boxes as $k => $v) {
$strAjax = '';
$blnAjax = false;
$key = '';
$cls = '';
$legend = '';
if (isset($legends[$k])) {
list($key, $cls) = explode(':', $legends[$k]);
$legend = "\n" . '<legend onclick="AjaxRequest.toggleFieldset(this, \'' . $key . '\', \'' . $this->strTable . '\')">' . (isset($GLOBALS['TL_LANG'][$this->strTable][$key]) ? $GLOBALS['TL_LANG'][$this->strTable][$key] : $key) . '</legend>';
}
if (isset($fs[$this->strTable][$key])) {
$class .= $fs[$this->strTable][$key] ? '' : ' collapsed';
} else {
$class .= $cls && $legend ? ' ' . $cls : '';
}
$return .= "\n\n" . '<fieldset' . ($key ? ' id="pal_' . $key . '"' : '') . ' class="' . $class . ($legend ? '' : ' nolegend') . '">' . $legend;
// Build rows of the current box
foreach ($v as $vv) {
if ($vv == '[EOF]') {
if ($blnAjax && \Environment::get('isAjaxRequest')) {
return $strAjax . '<input type="hidden" name="FORM_FIELDS[]" value="' . specialchars($this->strPalette) . '">';
}
$blnAjax = false;
$return .= "\n " . '</div>';
continue;
}
if (preg_match('/^\\[.*\\]$/', $vv)) {
$thisId = 'sub_' . substr($vv, 1, -1);
$blnAjax = $ajaxId == $thisId && \Environment::get('isAjaxRequest') ? true : false;
$return .= "\n " . '<div id="' . $thisId . '">';
continue;
}
$this->strField = $vv;
$this->strInputName = $vv;
$this->varValue = \Config::get($this->strField);
// Handle entities
if ($GLOBALS['TL_DCA'][$this->strTable]['fields'][$this->strField]['inputType'] == 'text' || $GLOBALS['TL_DCA'][$this->strTable]['fields'][$this->strField]['inputType'] == 'textarea') {
if ($GLOBALS['TL_DCA'][$this->strTable]['fields'][$this->strField]['eval']['multiple']) {
$this->varValue = deserialize($this->varValue);
}
if (!is_array($this->varValue)) {
$this->varValue = htmlspecialchars($this->varValue);
} else {
foreach ($this->varValue as $k => $v) {
$this->varValue[$k] = htmlspecialchars($v);
}
}
}
// Autofocus the first field
if ($blnIsFirst && $GLOBALS['TL_DCA'][$this->strTable]['fields'][$this->strField]['inputType'] == 'text') {
$GLOBALS['TL_DCA'][$this->strTable]['fields'][$this->strField]['eval']['autofocus'] = 'autofocus';
$blnIsFirst = false;
}
// Call load_callback
if (is_array($GLOBALS['TL_DCA'][$this->strTable]['fields'][$this->strField]['load_callback'])) {
foreach ($GLOBALS['TL_DCA'][$this->strTable]['fields'][$this->strField]['load_callback'] as $callback) {
if (is_array($callback)) {
$this->import($callback[0]);
$this->varValue = $this->{$callback}[0]->{$callback}[1]($this->varValue, $this);
} elseif (is_callable($callback)) {
$this->varValue = $callback($this->varValue, $this);
}
}
}
// Build row
$blnAjax ? $strAjax .= $this->row() : ($return .= $this->row());
}
$class = 'tl_box';
$return .= "\n" . '</fieldset>';
}
}
$this->import('Files');
// Check whether the target file is writeable
if (!$this->Files->is_writeable('system/config/localconfig.php')) {
\Message::addError(sprintf($GLOBALS['TL_LANG']['ERR']['notWriteable'], 'system/config/localconfig.php'));
}
// Submit buttons
$arrButtons = array();
$arrButtons['save'] = '<button type="submit" name="save" id="save" class="tl_submit" accesskey="s">' . $GLOBALS['TL_LANG']['MSC']['save'] . '</button>';
$arrButtons['saveNclose'] = '<button type="submit" name="saveNclose" id="saveNclose" class="tl_submit" accesskey="c">' . $GLOBALS['TL_LANG']['MSC']['saveNclose'] . '</button>';
// Call the buttons_callback (see #4691)
if (is_array($GLOBALS['TL_DCA'][$this->strTable]['edit']['buttons_callback'])) {
foreach ($GLOBALS['TL_DCA'][$this->strTable]['edit']['buttons_callback'] as $callback) {
if (is_array($callback)) {
$this->import($callback[0]);
$arrButtons = $this->{$callback}[0]->{$callback}[1]($arrButtons, $this);
} elseif (is_callable($callback)) {
$arrButtons = $callback($arrButtons, $this);
}
}
}
// Add the buttons and end the form
$return .= '
</div>
<div class="tl_formbody_submit">
<div class="tl_submit_container">
' . implode(' ', $arrButtons) . '
</div>
</div>
</form>
<script>
window.addEvent(\'domready\', function() {
Theme.focusInput("' . $this->strTable . '");
});
</script>';
// Begin the form (-> DO NOT CHANGE THIS ORDER -> this way the onsubmit attribute of the form can be changed by a field)
$return = '
<div id="tl_buttons">
<a href="' . $this->getReferer(true) . '" class="header_back" title="' . specialchars($GLOBALS['TL_LANG']['MSC']['backBTTitle']) . '" accesskey="b" onclick="Backend.getScrollOffset()">' . $GLOBALS['TL_LANG']['MSC']['backBT'] . '</a>
</div>
' . \Message::generate() . '
<form action="' . ampersand(\Environment::get('request'), true) . '" id="' . $this->strTable . '" class="tl_form" method="post"' . (!empty($this->onsubmit) ? ' onsubmit="' . implode(' ', $this->onsubmit) . '"' : '') . '>
<div class="tl_formbody_edit">
<input type="hidden" name="FORM_SUBMIT" value="' . $this->strTable . '">
<input type="hidden" name="REQUEST_TOKEN" value="' . REQUEST_TOKEN . '">
<input type="hidden" name="FORM_FIELDS[]" value="' . specialchars($this->strPalette) . '">' . ($this->noReload ? '
<p class="tl_error">' . $GLOBALS['TL_LANG']['ERR']['general'] . '</p>' : '') . $return;
// Reload the page to prevent _POST variables from being sent twice
if (\Input::post('FORM_SUBMIT') == $this->strTable && !$this->noReload) {
// Call onsubmit_callback
if (is_array($GLOBALS['TL_DCA'][$this->strTable]['config']['onsubmit_callback'])) {
foreach ($GLOBALS['TL_DCA'][$this->strTable]['config']['onsubmit_callback'] as $callback) {
if (is_array($callback)) {
$this->import($callback[0]);
$this->{$callback}[0]->{$callback}[1]($this);
} elseif (is_callable($callback)) {
$callback($this);
}
}
}
// Reload
if (isset($_POST['saveNclose'])) {
\Message::reset();
\System::setCookie('BE_PAGE_OFFSET', 0, 0);
$this->redirect($this->getReferer());
}
$this->reload();
}
// Set the focus if there is an error
if ($this->noReload) {
$return .= '
<script>
window.addEvent(\'domready\', function() {
Backend.vScrollTo(($(\'' . $this->strTable . '\').getElement(\'label.error\').getPosition().y - 20));
});
</script>';
}
return $return;
}
/**
* Import files from selected folder
*
* @param string $strPath
*/
protected function importFromPath($strPath)
{
$arrFiles = scan(TL_ROOT . '/' . $strPath);
if (empty($arrFiles)) {
Message::addError($GLOBALS['TL_LANG']['MSC']['noFilesInFolder']);
Controller::reload();
}
$blnEmpty = true;
$arrDelete = array();
$objProducts = \Database::getInstance()->prepare("SELECT * FROM tl_iso_product WHERE pid=0")->execute();
while ($objProducts->next()) {
$arrImageNames = array();
$arrImages = deserialize($objProducts->images);
if (!is_array($arrImages)) {
$arrImages = array();
} else {
foreach ($arrImages as $row) {
if ($row['src']) {
$arrImageNames[] = $row['src'];
}
}
}
$arrPattern = array();
$arrPattern[] = $objProducts->alias ? standardize($objProducts->alias) : null;
$arrPattern[] = $objProducts->sku ? $objProducts->sku : null;
$arrPattern[] = $objProducts->sku ? standardize($objProducts->sku) : null;
$arrPattern[] = !empty($arrImageNames) ? implode('|', $arrImageNames) : null;
// !HOOK: add custom import regex patterns
if (isset($GLOBALS['ISO_HOOKS']['addAssetImportRegexp']) && is_array($GLOBALS['ISO_HOOKS']['addAssetImportRegexp'])) {
foreach ($GLOBALS['ISO_HOOKS']['addAssetImportRegexp'] as $callback) {
$objCallback = System::importStatic($callback[0]);
$arrPattern = $objCallback->{$callback}[1]($arrPattern, $objProducts);
}
}
$strPattern = '@^(' . implode('|', array_filter($arrPattern)) . ')@i';
$arrMatches = preg_grep($strPattern, $arrFiles);
if (!empty($arrMatches)) {
$arrNewImages = array();
foreach ($arrMatches as $file) {
if (is_dir(TL_ROOT . '/' . $strPath . '/' . $file)) {
$arrSubfiles = scan(TL_ROOT . '/' . $strPath . '/' . $file);
if (!empty($arrSubfiles)) {
foreach ($arrSubfiles as $subfile) {
if (is_file($strPath . '/' . $file . '/' . $subfile)) {
$objFile = new File($strPath . '/' . $file . '/' . $subfile);
if ($objFile->isGdImage) {
$arrNewImages[] = $strPath . '/' . $file . '/' . $subfile;
}
}
}
}
} elseif (is_file(TL_ROOT . '/' . $strPath . '/' . $file)) {
$objFile = new \File($strPath . '/' . $file);
if ($objFile->isGdImage) {
$arrNewImages[] = $strPath . '/' . $file;
}
}
}
if (!empty($arrNewImages)) {
foreach ($arrNewImages as $strFile) {
$pathinfo = pathinfo(TL_ROOT . '/' . $strFile);
// Will recursively create the folder
$objFolder = new \Folder('isotope/' . strtolower(substr($pathinfo['filename'], 0, 1)));
$strCacheName = $pathinfo['filename'] . '-' . substr(md5_file(TL_ROOT . '/' . $strFile), 0, 8) . '.' . $pathinfo['extension'];
\Files::getInstance()->copy($strFile, $objFolder->path . '/' . $strCacheName);
$arrImages[] = array('src' => $strCacheName);
$arrDelete[] = $strFile;
Message::addConfirmation(sprintf($GLOBALS['TL_LANG']['MSC']['assetImportConfirmation'], $pathinfo['filename'] . '.' . $pathinfo['extension'], $objProducts->name));
$blnEmpty = false;
}
\Database::getInstance()->prepare("UPDATE tl_iso_product SET images=? WHERE id=?")->execute(serialize($arrImages), $objProducts->id);
}
}
}
if (!empty($arrDelete)) {
$arrDelete = array_unique($arrDelete);
foreach ($arrDelete as $file) {
\Files::getInstance()->delete($file);
}
}
if ($blnEmpty) {
\Message::addInfo($GLOBALS['TL_LANG']['MSC']['assetImportNoFilesFound']);
}
\Controller::reload();
}
/**
* Check the account status and return true if it is active
*
* @return boolean True if the account is active
*/
protected function checkAccountStatus()
{
$time = time();
// Check whether the account is locked
if ($this->locked + \Config::get('lockPeriod') > $time) {
\Message::addError(sprintf($GLOBALS['TL_LANG']['ERR']['accountLocked'], ceil(($this->locked + \Config::get('lockPeriod') - $time) / 60)));
return false;
} elseif ($this->disable) {
\Message::addError($GLOBALS['TL_LANG']['ERR']['invalidLogin']);
$this->log('The account has been disabled', __METHOD__, TL_ACCESS);
return false;
} elseif ($this instanceof FrontendUser && !$this->login) {
\Message::addError($GLOBALS['TL_LANG']['ERR']['invalidLogin']);
$this->log('User "' . $this->username . '" is not allowed to log in', __METHOD__, TL_ACCESS);
return false;
} elseif ($this->start != '' || $this->stop != '') {
$time = \Date::floorToMinute($time);
if ($this->start != '' && $this->start > $time) {
\Message::addError($GLOBALS['TL_LANG']['ERR']['invalidLogin']);
$this->log('The account was not active yet (activation date: ' . \Date::parse(\Config::get('dateFormat'), $this->start) . ')', __METHOD__, TL_ACCESS);
return false;
}
if ($this->stop != '' && $this->stop <= $time + 60) {
\Message::addError($GLOBALS['TL_LANG']['ERR']['invalidLogin']);
$this->log('The account was not active anymore (deactivation date: ' . \Date::parse(\Config::get('dateFormat'), $this->stop) . ')', __METHOD__, TL_ACCESS);
return false;
}
}
return true;
}
/**
* Generate the module
*
* @return string
*/
public function run()
{
if (!\Config::get('enableSearch')) {
return '';
}
$time = time();
/** @var BackendTemplate|object $objTemplate */
$objTemplate = new \BackendTemplate('be_rebuild_index');
$objTemplate->action = ampersand(\Environment::get('request'));
$objTemplate->indexHeadline = $GLOBALS['TL_LANG']['tl_maintenance']['searchIndex'];
$objTemplate->isActive = $this->isActive();
$objTemplate->message = \Message::generateUnwrapped();
// Rebuild the index
if (\Input::get('act') == 'index') {
// Check the request token (see #4007)
if (!isset($_GET['rt']) || !\RequestToken::validate(\Input::get('rt'))) {
/** @var SessionInterface $objSession */
$objSession = \System::getContainer()->get('session');
$objSession->set('INVALID_TOKEN_URL', \Environment::get('request'));
$this->redirect('contao/confirm.php');
}
$arrPages = $this->findSearchablePages();
// HOOK: take additional pages
if (isset($GLOBALS['TL_HOOKS']['getSearchablePages']) && is_array($GLOBALS['TL_HOOKS']['getSearchablePages'])) {
foreach ($GLOBALS['TL_HOOKS']['getSearchablePages'] as $callback) {
$this->import($callback[0]);
$arrPages = $this->{$callback[0]}->{$callback[1]}($arrPages);
}
}
// Return if there are no pages
if (empty($arrPages)) {
\Message::addError($GLOBALS['TL_LANG']['tl_maintenance']['noSearchable']);
$this->redirect($this->getReferer());
}
// Truncate the search tables
$this->import('Automator');
$this->Automator->purgeSearchTables();
// Hide unpublished elements
$this->setCookie('FE_PREVIEW', 0, $time - 86400, null, null, \Environment::get('ssl'), true);
// Calculate the hash
$strHash = $this->getSessionHash('FE_USER_AUTH');
// Remove old sessions
$this->Database->prepare("DELETE FROM tl_session WHERE tstamp<? OR hash=?")->execute($time - \Config::get('sessionTimeout'), $strHash);
// Log in the front end user
if (is_numeric(\Input::get('user')) && \Input::get('user') > 0) {
// Insert a new session
$this->Database->prepare("INSERT INTO tl_session (pid, tstamp, name, sessionID, ip, hash) VALUES (?, ?, ?, ?, ?, ?)")->execute(\Input::get('user'), $time, 'FE_USER_AUTH', \System::getContainer()->get('session')->getId(), \Environment::get('ip'), $strHash);
// Set the cookie
$this->setCookie('FE_USER_AUTH', $strHash, $time + \Config::get('sessionTimeout'), null, null, \Environment::get('ssl'), true);
} else {
// Unset the cookies
$this->setCookie('FE_USER_AUTH', $strHash, $time - 86400, null, null, \Environment::get('ssl'), true);
$this->setCookie('FE_AUTO_LOGIN', \Input::cookie('FE_AUTO_LOGIN'), $time - 86400, null, null, \Environment::get('ssl'), true);
}
$strBuffer = '';
$rand = rand();
// Display the pages
for ($i = 0, $c = count($arrPages); $i < $c; $i++) {
$strBuffer .= '<span class="page_url" data-url="' . $arrPages[$i] . '#' . $rand . $i . '">' . \StringUtil::substr($arrPages[$i], 100) . '</span><br>';
unset($arrPages[$i]);
// see #5681
}
$objTemplate->content = $strBuffer;
$objTemplate->note = $GLOBALS['TL_LANG']['tl_maintenance']['indexNote'];
$objTemplate->loading = $GLOBALS['TL_LANG']['tl_maintenance']['indexLoading'];
$objTemplate->complete = $GLOBALS['TL_LANG']['tl_maintenance']['indexComplete'];
$objTemplate->indexContinue = $GLOBALS['TL_LANG']['MSC']['continue'];
$objTemplate->theme = \Backend::getTheme();
$objTemplate->isRunning = true;
return $objTemplate->parse();
}
$arrUser = array('' => '-');
// Get active front end users
$objUser = $this->Database->execute("SELECT id, username FROM tl_member WHERE disable!='1' AND (start='' OR start<='{$time}') AND (stop='' OR stop>'" . ($time + 60) . "') ORDER BY username");
while ($objUser->next()) {
$arrUser[$objUser->id] = $objUser->username . ' (' . $objUser->id . ')';
}
// Default variables
$objTemplate->user = $arrUser;
$objTemplate->indexLabel = $GLOBALS['TL_LANG']['tl_maintenance']['frontendUser'][0];
$objTemplate->indexHelp = \Config::get('showHelp') && strlen($GLOBALS['TL_LANG']['tl_maintenance']['frontendUser'][1]) ? $GLOBALS['TL_LANG']['tl_maintenance']['frontendUser'][1] : '';
$objTemplate->indexSubmit = $GLOBALS['TL_LANG']['tl_maintenance']['indexSubmit'];
return $objTemplate->parse();
}
