source: trunk/admin/plugins_new.php @ 14709

Last change on this file since 14709 was 13962, checked in by plg, 13 years ago

merge r13961 from branch 2.3 to trunk

bug 2612 fixed: sanitize $_GETinstallstatus before display for
themes/languages/plugins installation

  • Property svn:eol-style set to LF
File size: 5.3 KB
RevLine 
[2242]1<?php
2// +-----------------------------------------------------------------------+
[8728]3// | Piwigo - a PHP based photo gallery                                    |
[2297]4// +-----------------------------------------------------------------------+
[12922]5// | Copyright(C) 2008-2012 Piwigo Team                  http://piwigo.org |
[2297]6// | Copyright(C) 2003-2008 PhpWebGallery Team    http://phpwebgallery.net |
7// | Copyright(C) 2002-2003 Pierrick LE GALL   http://le-gall.net/pierrick |
8// +-----------------------------------------------------------------------+
9// | This program is free software; you can redistribute it and/or modify  |
10// | it under the terms of the GNU General Public License as published by  |
11// | the Free Software Foundation                                          |
12// |                                                                       |
13// | This program is distributed in the hope that it will be useful, but   |
14// | WITHOUT ANY WARRANTY; without even the implied warranty of            |
15// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU      |
16// | General Public License for more details.                              |
17// |                                                                       |
18// | You should have received a copy of the GNU General Public License     |
19// | along with this program; if not, write to the Free Software           |
20// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
21// | USA.                                                                  |
22// +-----------------------------------------------------------------------+
[2242]23
24if( !defined("PHPWG_ROOT_PATH") )
25{
26  die ("Hacking attempt!");
27}
28
[2263]29include_once(PHPWG_ROOT_PATH.'admin/include/plugins.class.php');
[2255]30
[2530]31$template->set_filenames(array('plugins' => 'plugins_new.tpl'));
[2255]32
[10638]33$base_url = get_root_url().'admin.php?page='.$page['page'].'&tab='.$page['tab'];
[2255]34
[2264]35$plugins = new plugins();
[2242]36
37//------------------------------------------------------automatic installation
[5406]38if (isset($_GET['revision']) and isset($_GET['extension']))
[2242]39{
[5406]40  if (!is_webmaster())
41  {
42    array_push($page['errors'], l10n('Webmaster status is required.'));
43  }
44  else
45  {
46    check_pwg_token();
47   
48    $install_status = $plugins->extract_plugin_files('install', $_GET['revision'], $_GET['extension']);
[2264]49
[5406]50    redirect($base_url.'&installstatus='.$install_status);
51  }
[2242]52}
53
54//--------------------------------------------------------------install result
55if (isset($_GET['installstatus']))
56{
[2264]57  switch ($_GET['installstatus'])
58  {
59    case 'ok':
60      array_push($page['infos'],
[5021]61        l10n('Plugin has been successfully copied'),
62        l10n('You might go to plugin list to install and activate it.'));
[2264]63      break;
64
65    case 'temp_path_error':
[5021]66      array_push($page['errors'], l10n('Can\'t create temporary file.'));
[2264]67      break;
68
69    case 'dl_archive_error':
[5021]70      array_push($page['errors'], l10n('Can\'t download archive.'));
[2264]71      break;
72
73    case 'archive_error':
[5021]74      array_push($page['errors'], l10n('Can\'t read or extract archive.'));
[2264]75      break;
76
77    default:
78      array_push($page['errors'],
[13962]79        sprintf(l10n('An error occured during extraction (%s).'), htmlspecialchars($_GET['installstatus'])),
[5297]80        l10n('Please check "plugins" folder and sub-folders permissions (CHMOD).'));
[2264]81  } 
[2242]82}
83
[2264]84//---------------------------------------------------------------Order options
85$template->assign('order_options',
86  array(
[9598]87    'date' => l10n('Post date'),
88    'revision' => l10n('Last revisions'),
89    'name' => l10n('Name'),
90    'author' => l10n('Author'),
91    'downloads' => l10n('Number of downloads')));
[2264]92
[2242]93// +-----------------------------------------------------------------------+
94// |                     start template output                             |
95// +-----------------------------------------------------------------------+
[2880]96if ($plugins->get_server_plugins(true))
[2242]97{
[11222]98  /* order plugins */
99  if (pwg_get_session_var('plugins_new_order') != null)
100  {
101    $order_selected = pwg_get_session_var('plugins_new_order');
102    $plugins->sort_server_plugins($order_selected);
103    $template->assign('order_selected', $order_selected);
104  }
105  else
106  {
107    $plugins->sort_server_plugins('date');
108    $template->assign('order_selected', 'date');
109  }
[2272]110
[2263]111  foreach($plugins->server_plugins as $plugin)
[2243]112  {
[5515]113    $ext_desc = trim($plugin['extension_description'], " \n\r");
114    list($small_desc) = explode("\n", wordwrap($ext_desc, 200));
[2647]115
[2264]116    $url_auto_install = htmlentities($base_url)
[2647]117      . '&amp;revision=' . $plugin['revision_id']
[5195]118      . '&amp;extension=' . $plugin['extension_id']
119      . '&amp;pwg_token='.get_pwg_token()
120    ;
[2245]121
[2647]122    $template->append('plugins', array(
[5515]123      'ID' => $plugin['extension_id'],
[2647]124      'EXT_NAME' => $plugin['extension_name'],
125      'EXT_URL' => PEM_URL.'/extension_view.php?eid='.$plugin['extension_id'],
[5515]126      'SMALL_DESC' => trim($small_desc, " \r\n"),
127      'BIG_DESC' => $ext_desc,
[2647]128      'VERSION' => $plugin['revision_name'],
[9598]129      'REVISION_DATE' => preg_replace('/[^0-9]/', '', $plugin['revision_date']),
[2647]130      'AUTHOR' => $plugin['author_name'],
[5516]131      'DOWNLOADS' => $plugin['extension_nb_downloads'],
[2647]132      'URL_INSTALL' => $url_auto_install,
133      'URL_DOWNLOAD' => $plugin['download_url'] . '&amp;origin=piwigo_download'));
[2243]134  }
[2242]135}
136else
137{
[5021]138  array_push($page['errors'], l10n('Can\'t connect to server.'));
[2242]139}
140
[2255]141$template->assign_var_from_handle('ADMIN_CONTENT', 'plugins');
[2242]142?>
Note: See TracBrowser for help on using the repository browser.