- The Module\BaseAdmin::post method checked credentials but didn't abort the process when it failed - Created Module\BaseAdmin::checkAdminAccess method
		
			
				
	
	
		
			132 lines
		
	
	
	
		
			3.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			132 lines
		
	
	
	
		
			3.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
<?php
 | 
						|
/**
 | 
						|
 * @copyright Copyright (C) 2020, Friendica
 | 
						|
 *
 | 
						|
 * @license GNU AGPL version 3 or any later version
 | 
						|
 *
 | 
						|
 * This program is free software: you can redistribute it and/or modify
 | 
						|
 * it under the terms of the GNU Affero General Public License as
 | 
						|
 * published by the Free Software Foundation, either version 3 of the
 | 
						|
 * License, or (at your option) any later version.
 | 
						|
 *
 | 
						|
 * This program is distributed in the hope that it will be useful,
 | 
						|
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						|
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
						|
 * GNU Affero General Public License for more details.
 | 
						|
 *
 | 
						|
 * You should have received a copy of the GNU Affero General Public License
 | 
						|
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 | 
						|
 *
 | 
						|
 */
 | 
						|
 | 
						|
namespace Friendica\Module\Admin\Addons;
 | 
						|
 | 
						|
use Friendica\Content\Text\Markdown;
 | 
						|
use Friendica\Core\Addon;
 | 
						|
use Friendica\Core\Renderer;
 | 
						|
use Friendica\DI;
 | 
						|
use Friendica\Module\BaseAdmin;
 | 
						|
use Friendica\Util\Strings;
 | 
						|
 | 
						|
class Details extends BaseAdmin
 | 
						|
{
 | 
						|
	public static function post(array $parameters = [])
 | 
						|
	{
 | 
						|
		self::checkAdminAccess();
 | 
						|
 | 
						|
		$addon = Strings::sanitizeFilePathItem($parameters['addon']);
 | 
						|
 | 
						|
		$redirect = 'admin/addons/' . $addon;
 | 
						|
 | 
						|
		if (is_file('addon/' . $addon . '/' . $addon . '.php')) {
 | 
						|
			include_once 'addon/' . $addon . '/' . $addon . '.php';
 | 
						|
 | 
						|
			if (function_exists($addon . '_addon_admin_post')) {
 | 
						|
				self::checkFormSecurityTokenRedirectOnError($redirect, 'admin_addons_details');
 | 
						|
 | 
						|
				$func = $addon . '_addon_admin_post';
 | 
						|
				$func(DI::app());
 | 
						|
			}
 | 
						|
		}
 | 
						|
 | 
						|
		DI::baseUrl()->redirect($redirect);
 | 
						|
	}
 | 
						|
 | 
						|
	public static function content(array $parameters = [])
 | 
						|
	{
 | 
						|
		parent::content($parameters);
 | 
						|
 | 
						|
		$a = DI::app();
 | 
						|
 | 
						|
		$addons_admin = Addon::getAdminList();
 | 
						|
 | 
						|
		$addon = Strings::sanitizeFilePathItem($parameters['addon']);
 | 
						|
		if (!is_file("addon/$addon/$addon.php")) {
 | 
						|
			notice(DI::l10n()->t('Addon not found.'));
 | 
						|
			Addon::uninstall($addon);
 | 
						|
			DI::baseUrl()->redirect('admin/addons');
 | 
						|
		}
 | 
						|
 | 
						|
		if (($_GET['action'] ?? '') == 'toggle') {
 | 
						|
			self::checkFormSecurityTokenRedirectOnError('/admin/addons', 'admin_addons_details', 't');
 | 
						|
 | 
						|
			// Toggle addon status
 | 
						|
			if (Addon::isEnabled($addon)) {
 | 
						|
				Addon::uninstall($addon);
 | 
						|
				info(DI::l10n()->t('Addon %s disabled.', $addon));
 | 
						|
			} else {
 | 
						|
				Addon::install($addon);
 | 
						|
				info(DI::l10n()->t('Addon %s enabled.', $addon));
 | 
						|
			}
 | 
						|
 | 
						|
			DI::baseUrl()->redirect('admin/addons/' . $addon);
 | 
						|
		}
 | 
						|
 | 
						|
		// display addon details
 | 
						|
		if (Addon::isEnabled($addon)) {
 | 
						|
			$status = 'on';
 | 
						|
			$action = DI::l10n()->t('Disable');
 | 
						|
		} else {
 | 
						|
			$status = 'off';
 | 
						|
			$action = DI::l10n()->t('Enable');
 | 
						|
		}
 | 
						|
 | 
						|
		$readme = null;
 | 
						|
		if (is_file("addon/$addon/README.md")) {
 | 
						|
			$readme = Markdown::convert(file_get_contents("addon/$addon/README.md"), false);
 | 
						|
		} elseif (is_file("addon/$addon/README")) {
 | 
						|
			$readme = '<pre>' . file_get_contents("addon/$addon/README") . '</pre>';
 | 
						|
		}
 | 
						|
 | 
						|
		$admin_form = '';
 | 
						|
		if (array_key_exists($addon, $addons_admin)) {
 | 
						|
			require_once "addon/$addon/$addon.php";
 | 
						|
			$func = $addon . '_addon_admin';
 | 
						|
			$func($a, $admin_form);
 | 
						|
		}
 | 
						|
 | 
						|
		$t = Renderer::getMarkupTemplate('admin/addons/details.tpl');
 | 
						|
 | 
						|
		return Renderer::replaceMacros($t, [
 | 
						|
			'$title' => DI::l10n()->t('Administration'),
 | 
						|
			'$page' => DI::l10n()->t('Addons'),
 | 
						|
			'$toggle' => DI::l10n()->t('Toggle'),
 | 
						|
			'$settings' => DI::l10n()->t('Settings'),
 | 
						|
			'$baseurl' => DI::baseUrl()->get(true),
 | 
						|
 | 
						|
			'$addon' => $addon,
 | 
						|
			'$status' => $status,
 | 
						|
			'$action' => $action,
 | 
						|
			'$info' => Addon::getInfo($addon),
 | 
						|
			'$str_author' => DI::l10n()->t('Author: '),
 | 
						|
			'$str_maintainer' => DI::l10n()->t('Maintainer: '),
 | 
						|
 | 
						|
			'$admin_form' => $admin_form,
 | 
						|
			'$function' => 'addons',
 | 
						|
			'$screenshot' => '',
 | 
						|
			'$readme' => $readme,
 | 
						|
 | 
						|
			'$form_security_token' => self::getFormSecurityToken('admin_addons_details'),
 | 
						|
		]);
 | 
						|
	}
 | 
						|
}
 |