Files
crm.e5.pl/modules/UpgradeWizard/upload.php
2024-04-27 09:23:34 +02:00

383 lines
15 KiB
PHP
Executable File

<?php
if(!defined('sugarEntry') || !sugarEntry) die('Not A Valid Entry Point');
/*********************************************************************************
* SugarCRM is a customer relationship management program developed by
* SugarCRM, Inc. Copyright (C) 2004-2010 SugarCRM Inc.
*
* This program is free software; you can redistribute it and/or modify it under
* the terms of the GNU Affero General Public License version 3 as published by the
* Free Software Foundation with the addition of the following permission added
* to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED WORK
* IN WHICH THE COPYRIGHT IS OWNED BY SUGARCRM, SUGARCRM DISCLAIMS THE WARRANTY
* OF NON INFRINGEMENT OF THIRD PARTY RIGHTS.
*
* This program is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
* FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
* details.
*
* You should have received a copy of the GNU Affero General Public License along with
* this program; if not, see http://www.gnu.org/licenses or write to the Free
* Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
* 02110-1301 USA.
*
* You can contact SugarCRM, Inc. headquarters at 10050 North Wolfe Road,
* SW2-130, Cupertino, CA 95014, USA. or at email address contact@sugarcrm.com.
*
* The interactive user interfaces in modified source and object code versions
* of this program must display Appropriate Legal Notices, as required under
* Section 5 of the GNU Affero General Public License version 3.
*
* In accordance with Section 7(b) of the GNU Affero General Public License version 3,
* these Appropriate Legal Notices must retain the display of the "Powered by
* SugarCRM" logo. If the display of the logo is not reasonably feasible for
* technical reasons, the Appropriate Legal Notices must display the words
* "Powered by SugarCRM".
********************************************************************************/
/*********************************************************************************
* Description:
* Portions created by SugarCRM are Copyright (C) SugarCRM, Inc. All Rights
* Reserved. Contributor(s): ______________________________________..
* *******************************************************************************/
logThis('At upload.php');
//set the upgrade progress status.
set_upgrade_progress('upload','in_progress');
$stop = true; // flag to show "next"
$run = isset($_REQUEST['run']) ? $_REQUEST['run'] : '';
$out = '';
if(file_exists('ModuleInstall/PackageManager/PackageManagerDisplay.php')) {
require_once('ModuleInstall/PackageManager/PackageManagerDisplay.php');
}
///////////////////////////////////////////////////////////////////////////////
//// UPLOAD FILE PROCESSING
switch($run) {
case 'upload':
logThis('running upload');
$perform = false;
$tempFile = '';
if(isset($_REQUEST['release_id']) && $_REQUEST['release_id'] != ""){
require_once('ModuleInstall/PackageManager/PackageManager.php');
$pm = new PackageManager();
$tempFile = '';
$perform = false;
if(!empty($_SESSION['ML_PATCHES'])){
$release_map = $_SESSION['ML_PATCHES'][$_REQUEST['release_id']];
if(!empty($release_map)){
$tempFile = $pm->download($release_map['category_id'], $release_map['package_id'], $_REQUEST['release_id'], getcwd().'/'.$sugar_config['upload_dir']);
$perform = true;
if($release_map['type'] != 'patch'){
$pm->performSetup($tempFile, $release_map['type'], false);
header('Location: index.php?module=Administration&action=UpgradeWizard&view=module');
}
}
}
$base_filename = urldecode($tempFile);
}
else if( empty( $_FILES['upgrade_zip']['tmp_name'] ) ) {
logThis('ERROR: no file uploaded!');
echo $mod_strings['ERR_UW_NO_FILE_UPLOADED'];
// add PHP error if isset
if(isset($_FILES['upgrade_zip']['error']) && !empty($_FILES['upgrade_zip']['error'])) {
$out = "<b><span class='error'>{$mod_strings['ERR_UW_PHP_FILE_ERRORS'][$_FILES['upgrade_zip']['error']]}</span></b><br />";
}
} else {
if(!move_uploaded_file($_FILES['upgrade_zip']['tmp_name'], getcwd().'/'.$sugar_config['upload_dir'].$_FILES['upgrade_zip']['name'])) {
logThis('ERROR: could not move temporary file to final destination!');
unlinkTempFiles();
$out = "<b><span class='error'>{$mod_strings['ERR_UW_NOT_VALID_UPLOAD']}</span></b><br />";
} else {
$tempFile = getcwd().'/'.$sugar_config['upload_dir'].$_FILES['upgrade_zip']['name'];
logThis('File uploaded to '.$tempFile);
$base_filename = urldecode( $_REQUEST['upgrade_zip_escaped'] );
$perform = true;
}
}
if($perform){
$manifest_file = extractManifest($tempFile);
if(is_file($manifest_file)) {
require_once( $manifest_file );
$error = validate_manifest( $manifest );
if(!empty($error)) {
$out = "<b><span class='error'>{$error}</span></b><br />";
break;
}
$upgrade_zip_type = $manifest['type'];
// exclude the bad permutations
if($upgrade_zip_type != "patch") {
logThis('ERROR: incorrect patch type found: '.$upgrade_zip_type);
unlinkTempFiles();
$out = "<b><span class='error'>{$mod_strings['ERR_UW_ONLY_PATCHES']}</span></b><br />";
break;
}
$base_filename = preg_replace( "#\\\\#", "/", $base_filename );
$base_filename = basename( $base_filename );
mkdir_recursive( "$base_upgrade_dir/$upgrade_zip_type" );
$target_path = "$base_upgrade_dir/$upgrade_zip_type/$base_filename";
$target_manifest = remove_file_extension( $target_path ) . "-manifest.php";
if(isset($manifest['icon']) && $manifest['icon'] != "" ) {
logThis('extracting icons.');
$icon_location = extractFile( $tempFile ,$manifest['icon'] );
$path_parts = pathinfo( $icon_location );
copy( $icon_location, remove_file_extension( $target_path ) . "-icon." . $path_parts['extension'] );
}
if(copy($tempFile , $target_path)){
logThis('copying manifest.php to final destination.');
copy($manifest_file, $target_manifest);
$out .= "{$base_filename} {$mod_strings['LBL_UW_FILE_UPLOADED']}.<br>\n";
} else {
logThis('ERROR: cannot copy manifest.php to final destination.');
$out .= "<b><span class='error'>{$mod_strings['ERR_UW_UPLOAD_ERR']}</span></b><br />";
break;
}
} else {
logThis('ERROR: no manifest.php file found!');
unlinkTempFiles();
$out = "<b><span class='error'>{$mod_strings['ERR_UW_NO_MANIFEST']}</span></b><br />";
break;
}
$_SESSION['install_file'] = clean_path($tempFile);
logThis('zip file moved to ['.$_SESSION['install_file'].']');
//rrs serialize manifest for saving in the db
$serial_manifest = array();
$serial_manifest['manifest'] = (isset($manifest) ? $manifest : '');
$serial_manifest['installdefs'] = (isset($installdefs) ? $installdefs : '');
$serial_manifest['upgrade_manifest'] = (isset($upgrade_manifest) ? $upgrade_manifest : '');
$_SESSION['install_manifest'] = base64_encode(serialize($serial_manifest));
}
if(!empty($tempFile)) {
upgradeUWFiles($tempFile);
//set the upgrade progress status. actually it should be set when a file is uploaded
set_upgrade_progress('upload','done');
}
break; // end 'upload'
case 'delete':
logThis('running delete');
if(!isset($_REQUEST['install_file']) || ($_REQUEST['install_file'] == "")) {
logThis('ERROR: trying to delete non-existent file: ['.$_REQUEST['install_file'].']');
$error = $mod_strings['ERR_UW_NO_FILE_UPLOADED'];
}
// delete file in upgrades/patch
$delete_me = urldecode( $_REQUEST['install_file'] );
if(@unlink($delete_me)) {
logThis('unlinking: '.$delete_me);
$out = basename($delete_me).$mod_strings['LBL_UW_FILE_DELETED'];
} else {
logThis('ERROR: could not delete ['.$delete_me.']');
$error = $mod_strings['ERR_UW_FILE_NOT_DELETED'].$delete_me;
}
// delete file in cache/upload
$fileS = explode('/', $delete_me);
$c = count($fileS);
$fileName = (isset($fileS[$c-1]) && !empty($fileS[$c-1])) ? $fileS[$c-1] : $fileS[$c-2];
$deleteUpload = getcwd().'/'.$sugar_config['upload_dir'].$fileName;
logThis('Trying to delete '.$deleteUpload);
if(!@unlink($deleteUpload)) {
logThis('ERROR: could not delete: ['.$deleteUpload.']');
$error = $mod_strings['ERR_UW_FILE_NOT_DELETED'].$sugar_config['upload_dir'].$fileName;
}
if(!empty($error)) {
$out = "<b><span class='error'>{$error}</span></b><br />";
}
unlinkTempFiles();
unlinkUploadFiles();
//set the upgrade progress status. actually it should be set when a file is uploaded
set_upgrade_progress('upload','in_progress');
break;
}
//// END UPLOAD FILE PROCESSING FORM
///////////////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////////////
//// READY TO INSTALL UPGRADES
$validReturn = getValidPatchName();
$ready = $validReturn['ready'];
$disabled = $validReturn['disabled'];
//// END READY TO INSTALL UPGRADES
///////////////////////////////////////////////////////////////////////////////
if(isset($_SESSION['install_file']) && !empty($_SESSION['install_file']) && is_file($_SESSION['install_file'])) {
$stop = false;
} else {
$stop = true;
}
if($stop == false) set_upgrade_progress('upload','done');
$frozen = $out;
///////////////////////////////////////////////////////////////////////////////
//// UPLOAD FORM
$form = '';
if(empty($GLOBALS['sugar_config']['disable_uw_upload'])){
$form =<<<eoq
<form name="the_form" id='the_form' enctype="multipart/form-data" action="index.php" method="post">
<input type="hidden" name="module" value="UpgradeWizard">
<input type="hidden" name="action" value="index">
<input type="hidden" name="step" value="{$_REQUEST['step']}">
<input type="hidden" name="run" value="upload">
<table width="100%" border="0" cellspacing="0" cellpadding="0" class="edit view">
<tr><td>
<table width="450" border="0" cellspacing="0" cellpadding="0">
<tr>
<td>
{$mod_strings['LBL_UPLOAD_UPGRADE']}
<input type="file" onchange="uploadCheck();" name="upgrade_zip" id="upgrade_zip" size="40" />
</td>
<td valign="bottom">&nbsp;
<input id="upload_button" class='button' type=button
{$disabled}
disabled="disabled"
value="{$mod_strings['LBL_UW_TITLE_UPLOAD']}"
onClick="uploadCheck();upgradeP('uploadingUpgardePackage');document.the_form.upgrade_zip_escaped.value = escape( document.the_form.upgrade_zip.value );document.the_form.submit();" />
<input type=hidden name="upgrade_zip_escaped" value="" />
</td>
</tr>
</table>
</td></tr>
</table>
</form>
eoq;
}
$hidden_fields = "<input type=\"hidden\" name=\"module\" value=\"UpgradeWizard\">";
$hidden_fields .= "<input type=\"hidden\" name=\"action\" value=\"index\">";
$hidden_fields .= "<input type=\"hidden\" name=\"step\" value=\"{$_REQUEST['step']}\">";
$hidden_fields .= "<input type=\"hidden\" name=\"run\" value=\"upload\">";
$form2 = '';
/* Removing Install From Sugar tab from Upgradewizard.
if(class_exists("PackageManagerDisplay")) {
$form2 = PackageManagerDisplay::buildPatchDisplay($form, $hidden_fields, 'index.php', array('patch', 'module'));
}
*/
if($form2 == null){
$form2 = $form;
}
$form3 =<<<eoq2
<br>
<table width="100%" border="0" cellspacing="0" cellpadding="0" class="edit view">
<tr><td>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td>
{$mod_strings['LBL_UW_FILES_QUEUED']}<br>
{$ready}
</td>
</tr>
</table>
</td></tr>
</table>
<script type="text/javascript" language="Javascript" src="include/JSON.js"></script>
<script>
function fileBrowseLoaded(){
//alert(document.the_form.upgrade_zip.value.length);
if(escape(document.the_form.upgrade_zip.value).length == 0 || escape(document.the_form.upgrade_zip.value) == 'undefined'){
document.the_form.upload_button.disabled= 'disabled';
}
else{
document.the_form.upload_button.disabled= '';
}
var len = escape(document.the_form.upgrade_zip.value).length;
}
function uploadCheck(){
var len = escape(document.the_form.upgrade_zip.value).length;
var file_extn = escape(document.the_form.upgrade_zip.value).substr(len-3,len);
if(file_extn.toLowerCase() !='zip'){
//document.the_form.upgrade_zip.value = '';
//document.getElementById("upgrade_zip").value = '';
alert('Not a zip file');
document.getElementById("upgrade_zip").value='';
document.getElementById("upload_button").disabled='disabled';
}
else{
//AJAX call for checking the file size and comparing with php.ini settings.
var callback = {
success:function(r) {
var file_size = r.responseText;
//alert(file_size.length);
if(file_size.length >0){
var msg = SUGAR.language.get('UpgradeWizard','LBL_UW_FILE_SIZE');
msg1 =SUGAR.language.get('UpgradeWizard','LBL_UW_FILE_BIGGER_MSG');
msg2 = SUGAR.language.get('UpgradeWizard','LBL_BYTES_WEBSERVER_MSG');
if(msg == 'undefined') msg = 'The file size, ';
if(msg1 == 'undefined') msg1 = ' Bytes, is greater than what is allowed by the upload_max_filesize and/or the post_max_size settings in php.ini. Change the settings so that they are greater than ';
if(msg2 == 'undefined') msg2 = ' Bytes and restart the webserver.';
msg = msg+file_size+msg1;
msg = msg+file_size+msg2;
alert(msg);
document.getElementById("upload_button").disabled='disabled';
}
else{
document.getElementById("upload_button").disabled='';
}
}
}
//var file_name = document.getElementById('upgrade_zip').value;
var file_name = document.the_form.upgrade_zip.value;
postData = 'file_name=' + JSON.stringify(file_name) + '&module=UpgradeWizard&action=UploadFileCheck&to_pdf=1';
YAHOO.util.Connect.asyncRequest('POST', 'index.php', callback, postData);
}
}
</script>
eoq2;
$form5 =<<<eoq5
<br>
<div id="upgradeDiv" style="display:none">
<table cellspacing="0" cellpadding="0" border="0">
<tr><td>
<p><img src='modules/UpgradeWizard/processing.gif'> <br>{$mod_strings['LBL_UPGRADE_TAKES_TIME_HAVE_PATIENCE']}</p>
</td></tr>
</table>
</div>
eoq5;
$uwMain = $form2.$form3.$form5;
//// END UPLOAD FORM
///////////////////////////////////////////////////////////////////////////////
//set the upgrade progress status. actually it should be set when a file is uploaded
//set_upgrade_progress('upload','done');
$showBack = true;
$showCancel = true;
$showRecheck = true;
$showNext = ($stop) ? false : true;
$stepBack = $_REQUEST['step'] - 1;
$stepNext = $_REQUEST['step'] + 1;
$stepCancel = -1;
$stepRecheck = $_REQUEST['step'];
$_SESSION['step'][$steps['files'][$_REQUEST['step']]] = ($stop) ? 'failed' : 'success';
?>