950628b540
* FIX avoid php warnings (#39556) * Fix help * Doc * FIX: Broken feature 'Generate Child Mo' (#39560) * Fix broken 'Generate Child Mo' * Fix phan * QUAL add hook printWebsitePageContent --------- Co-authored-by: Laurent Destailleur <eldy@destailleur.fr> Co-authored-by: Francis Appels <francis.appels@yahoo.com>
1195 lines
57 KiB
PHP
1195 lines
57 KiB
PHP
<?php
|
|
/* Copyright (C) 2017 Laurent Destailleur <eldy@users.sourceforge.net>
|
|
* Copyright (C) 2024 Frédéric France <frederic.france@free.fr>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
/**
|
|
* \file htdocs/core/lib/website2.lib.php
|
|
* \ingroup website
|
|
* \brief Library for website module (rare functions not required for execution of website)
|
|
*/
|
|
|
|
|
|
/**
|
|
* Save content of a page on disk
|
|
*
|
|
* @param string $filemaster Full path of filename master.inc.php for website to generate
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveMasterFile($filemaster)
|
|
{
|
|
// Now generate the master.inc.php page
|
|
dol_syslog("We regenerate the master.inc.php file");
|
|
|
|
dol_delete_file($filemaster);
|
|
|
|
$mastercontent = '<?php'."\n";
|
|
$mastercontent .= '// File generated to link to the master file - DO NOT MODIFY - It is just an include'."\n";
|
|
$mastercontent .= "if (! defined('USEDOLIBARRSERVER') && ! defined('USEDOLIBARREDITOR')) {\n";
|
|
$mastercontent .= " if (! defined('USEEXTERNALSERVER')) define('USEEXTERNALSERVER', 1);\n";
|
|
$mastercontent .= " require_once '".DOL_DOCUMENT_ROOT."/master.inc.php';\n";
|
|
$mastercontent .= "}\n";
|
|
$mastercontent .= '?>'."\n";
|
|
$result = file_put_contents($filemaster, $mastercontent);
|
|
dolChmod($filemaster);
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Save an alias page on disk (A page that include the reference page).
|
|
* It saves file into the root directory but also into language subdirectory.
|
|
*
|
|
* @param string $filealias Full path of filename to generate
|
|
* @param Website $object Object website
|
|
* @param WebsitePage $objectpage Object websitepage
|
|
* @return boolean True if OK
|
|
* @see dolSavePageContent()
|
|
*/
|
|
function dolSavePageAlias($filealias, $object, $objectpage)
|
|
{
|
|
// Now create the .tpl file
|
|
dol_syslog("dolSavePageAlias We regenerate the alias page filealias=".$filealias." and a wrapper into all language subdirectories");
|
|
|
|
$aliascontent = '<?php'."\n";
|
|
$aliascontent .= "// File generated to wrap the alias page - DO NOT MODIFY - It is just a wrapper to real page\n";
|
|
$aliascontent .= 'global $dolibarr_main_data_root;'."\n";
|
|
$aliascontent .= 'if (empty($dolibarr_main_data_root)) $res=include \'./page'.$objectpage->id.'.tpl.php\'; ';
|
|
$aliascontent .= 'else $res=include $dolibarr_main_data_root.\'/website/\'.$website->ref.\'/page'.$objectpage->id.'.tpl.php\';'."\n";
|
|
$aliascontent .= 'if ($res === false) { http_response_code(500); print \'Failed to make include\'; }'."\n";
|
|
$aliascontent .= '?>'."\n";
|
|
$result = file_put_contents($filealias, $aliascontent);
|
|
if ($result === false) {
|
|
dol_syslog("Failed to write file ".$filealias, LOG_WARNING);
|
|
}
|
|
dolChmod($filealias);
|
|
|
|
// Save also alias into language subdirectory if it is not a main language
|
|
if ($objectpage->lang && in_array($objectpage->lang, explode(',', $object->otherlang))) {
|
|
$dirname = dirname($filealias);
|
|
$filename = basename($filealias);
|
|
$filealiassub = $dirname.'/'.$objectpage->lang.'/'.$filename;
|
|
|
|
dol_mkdir($dirname.'/'.$objectpage->lang, DOL_DATA_ROOT);
|
|
|
|
$aliascontent = '<?php'."\n";
|
|
$aliascontent .= "// File generated to wrap the alias page - DO NOT MODIFY - It is just a wrapper to real page\n";
|
|
$aliascontent .= 'global $dolibarr_main_data_root;'."\n";
|
|
$aliascontent .= 'if (empty($dolibarr_main_data_root)) $res=include \'../page'.$objectpage->id.'.tpl.php\'; ';
|
|
$aliascontent .= 'else $res=include $dolibarr_main_data_root.\'/website/\'.$website->ref.\'/page'.$objectpage->id.'.tpl.php\';'."\n";
|
|
$aliascontent .= 'if ($res === false) { http_response_code(500); print \'Failed to make include\'; }'."\n";
|
|
$aliascontent .= '?>'."\n";
|
|
$result = file_put_contents($filealiassub, $aliascontent);
|
|
if ($result === false) {
|
|
dol_syslog("Failed to write file ".$filealiassub, LOG_WARNING);
|
|
}
|
|
dolChmod($filealiassub);
|
|
} elseif (empty($objectpage->lang) || !in_array($objectpage->lang, explode(',', $object->otherlang))) {
|
|
// Save also alias into all language subdirectories if it is a main language
|
|
if (!getDolGlobalString('WEBSITE_DISABLE_MAIN_LANGUAGE_INTO_LANGSUBDIR') && !empty($object->otherlang)) {
|
|
$dirname = dirname($filealias);
|
|
$filename = basename($filealias);
|
|
foreach (explode(',', $object->otherlang) as $sublang) {
|
|
// Avoid to erase main alias file if $sublang is empty string
|
|
if (empty(trim($sublang))) {
|
|
continue;
|
|
}
|
|
$filealiassub = $dirname.'/'.$sublang.'/'.$filename;
|
|
|
|
$aliascontent = '<?php'."\n";
|
|
$aliascontent .= "// File generated to wrap the alias page - DO NOT MODIFY - It is just a wrapper to real page\n";
|
|
$aliascontent .= 'global $dolibarr_main_data_root;'."\n";
|
|
$aliascontent .= 'if (empty($dolibarr_main_data_root)) $res=include \'../page'.$objectpage->id.'.tpl.php\'; ';
|
|
$aliascontent .= 'else $res=include $dolibarr_main_data_root.\'/website/\'.$website->ref.\'/page'.$objectpage->id.'.tpl.php\';'."\n";
|
|
$aliascontent .= 'if ($res === false) { http_response_code(500); print \'Failed to make include\'; }'."\n";
|
|
$aliascontent .= '?>'."\n";
|
|
|
|
dol_mkdir($dirname.'/'.$sublang);
|
|
$result = file_put_contents($filealiassub, $aliascontent);
|
|
if ($result === false) {
|
|
dol_syslog("Failed to write file ".$filealiassub, LOG_WARNING);
|
|
}
|
|
dolChmod($filealiassub);
|
|
}
|
|
}
|
|
}
|
|
|
|
return ($result ? true : false);
|
|
}
|
|
|
|
|
|
/**
|
|
* Save content of a page on disk (page name is generally ID_of_page.php).
|
|
* Page contents are always saved into "root" directory. Only aliases pages saved with dolSavePageAlias() can be in root or language subdir.
|
|
*
|
|
* @param string $filetpl Full path of filename to generate
|
|
* @param Website $object Object website
|
|
* @param WebsitePage $objectpage Object websitepage
|
|
* @param int $backupold 1=Make a backup of old page
|
|
* @return boolean True if OK
|
|
* @see dolSavePageAlias()
|
|
*/
|
|
function dolSavePageContent($filetpl, Website $object, WebsitePage $objectpage, $backupold = 0)
|
|
{
|
|
global $conf, $db;
|
|
|
|
// Now create the .tpl file (duplicate code with actions updatesource or updatecontent but we need this to save new header)
|
|
dol_syslog("dolSavePageContent We regenerate the tpl page filetpl=".$filetpl);
|
|
|
|
include_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
|
|
|
|
if (dol_is_file($filetpl)) {
|
|
if ($backupold) {
|
|
$result = archiveOrBackupFile($filetpl);
|
|
if (! $result) {
|
|
return false;
|
|
}
|
|
} else {
|
|
dol_delete_file($filetpl);
|
|
}
|
|
}
|
|
|
|
$shortlangcode = '';
|
|
if ($objectpage->lang) {
|
|
$shortlangcode = substr($objectpage->lang, 0, 2); // en_US or en-US -> en
|
|
}
|
|
if (empty($shortlangcode)) {
|
|
// Take the language of website
|
|
$shortlangcode = substr($object->lang, 0, 2); // en_US or en-US -> en
|
|
}
|
|
|
|
if (!empty($objectpage->type_container) && in_array($objectpage->type_container, array('library', 'service'))) {
|
|
$originalcontentonly = 1;
|
|
}
|
|
|
|
$tplcontent = '';
|
|
if (!isset($originalcontentonly)) {
|
|
// If we want to generate a page with some code to manage PHP content
|
|
$tplcontent .= "<?php // BEGIN PHP\n";
|
|
$tplcontent .= '$websitekey=basename(__DIR__); if (empty($websitepagefile)) $websitepagefile=__FILE__;'."\n";
|
|
$tplcontent .= "if (! defined('USEDOLIBARRSERVER') && ! defined('USEDOLIBARREDITOR')) {\n";
|
|
$tplcontent .= ' $pathdepth = count(explode(\'/\', $_SERVER[\'SCRIPT_NAME\'])) - 2;'."\n";
|
|
$tplcontent .= ' require_once ($pathdepth ? str_repeat(\'../\', $pathdepth) : \'./\').\'master.inc.php\';'."\n";
|
|
if ($objectpage->disable_waf != 'all') {
|
|
if (strpos($objectpage->disable_waf, 'NOSCANAUDIOFORINJECTION') !== false) {
|
|
$tplcontent .= ' define(\'NOSCANAUDIOFORINJECTION\', 1);'."\n";
|
|
}
|
|
if (strpos($objectpage->disable_waf, 'NOSCANIFRAMEFORINJECTION') !== false) {
|
|
$tplcontent .= ' define(\'NOSCANIFRAMEFORINJECTION\', 1);'."\n";
|
|
}
|
|
if (strpos($objectpage->disable_waf, 'NOSCANOBJECTFORINJECTION') !== false) {
|
|
$tplcontent .= ' define(\'NOSCANOBJECTFORINJECTION\', 1);'."\n";
|
|
}
|
|
$tplcontent .= ' require_once DOL_DOCUMENT_ROOT.\'/waf.inc.php\';'."\n";
|
|
}
|
|
$tplcontent .= "}\n";
|
|
$tplcontent .= "require_once DOL_DOCUMENT_ROOT.'/core/lib/website.lib.php';\n";
|
|
$tplcontent .= "require_once DOL_DOCUMENT_ROOT.'/core/website.inc.php';\n";
|
|
if (in_array($objectpage->type_container, array('page', 'blogpost', 'service'))) {
|
|
$tplcontent .= 'dol_syslog("--- Prepare content of page '.((int) $objectpage->id).' - '.$objectpage->pageurl.'");'."\n";
|
|
}
|
|
$tplcontent .= "ob_start();\n";
|
|
$tplcontent .= "try {\n";
|
|
$tplcontent .= "// END PHP ?>\n";
|
|
if (getDolGlobalString('WEBSITE_FORCE_DOCTYPE_HTML5')) {
|
|
$tplcontent .= "<!DOCTYPE html>\n";
|
|
}
|
|
// If a language was forced on page, we use it, else we use the lang of visitor else the lang of web site
|
|
$tplcontent .= '<html'.($objectpage->lang ? ' lang="'.substr($objectpage->lang, 0, 2).'"' : '<?php echo $weblangs->shortlang ? \' lang="\'.$weblangs->shortlang.\'"\' : \'\' ?>').'>'."\n";
|
|
$tplcontent .= '<head>'."\n";
|
|
$tplcontent .= '<title>'.dol_string_nohtmltag($objectpage->title, 1, 'UTF-8').'</title>'."\n";
|
|
$tplcontent .= '<meta charset="utf-8">'."\n";
|
|
$tplcontent .= '<meta http-equiv="content-type" content="text/html; charset=utf-8" />'."\n";
|
|
$tplcontent .= '<meta name="robots" content="'.($objectpage->index ? 'index' : 'noindex').', '.($objectpage->follow ? 'follow' : 'nofollow').'" />'."\n";
|
|
$tplcontent .= '<meta name="viewport" content="width=device-width, initial-scale=1.0">'."\n";
|
|
$tplcontent .= '<meta name="keywords" content="'.dol_string_nohtmltag($objectpage->keywords, 1, 'UTF-8').'" />'."\n";
|
|
$tplcontent .= '<meta name="title" content="'.dol_string_nohtmltag($objectpage->title, 1, 'UTF-8').'" />'."\n";
|
|
$tplcontent .= '<meta name="description" content="'.dol_string_nohtmltag($objectpage->description, 1, 'UTF-8').'" />'."\n";
|
|
$tplcontent .= '<meta name="generator" content="'.DOL_APPLICATION_TITLE.' '.DOL_VERSION.' (https://www.dolibarr.org)" />'."\n";
|
|
$tplcontent .= '<meta name="dolibarr:pageid" content="'.((int) $objectpage->id).'" />'."\n";
|
|
|
|
// Add favicon if not already done in htmlheader
|
|
$htmldeaderindestdir = dol_sanitizePathName($conf->website->dir_temp.'/'.$object->ref.'/containers/htmlheader.html');
|
|
$htmlheader = file_get_contents($htmldeaderindestdir);
|
|
if (in_array($objectpage->type_container, array('page', 'blogpost')) && !preg_match('/'.preg_quote('rel="icon"', '/').'/', $htmlheader)) {
|
|
$tplcontent .= '<link rel="icon" type="image/png" href="/favicon.png" />'."\n";
|
|
}
|
|
|
|
$listofaltlang = $object->otherlang;
|
|
|
|
// Note: $object is website, $objectpage is website page
|
|
if ($object->virtualhost) {
|
|
// Add the link of the canonical reference
|
|
$canonicalurladdidlang = '';
|
|
if ($objectpage->lang) { // A language is forced on the page, it means we may have other language files with hard links into properties of page
|
|
$canonicalurl = (($objectpage->id == $object->fk_default_home) ? '/' : (($shortlangcode != substr($object->lang, 0, 2) ? '/'.$shortlangcode : '').'/'.$objectpage->pageurl.'.php'));
|
|
} else { // No language forced, it means the canonical is the one with params making url unique
|
|
$canonicalurl = '/'.$objectpage->pageurl.'.php';
|
|
|
|
if ($object->lang && $listofaltlang) {
|
|
// Add parameter ID required to be unique/canonical
|
|
$canonicalurladdidlang = '?__SEO_CANONICAL_URL_PARAMS__';
|
|
$canonicalurladdidlang .= '&l=__SEO_CANONICAL_LANG__';
|
|
} else {
|
|
// Add parameter ID required to be unique/canonical
|
|
$canonicalurladdidlang = '?__SEO_CANONICAL_URL_PARAMS__';
|
|
}
|
|
}
|
|
|
|
$tplcontent .= '<link rel="canonical" href="<?php echo $website->virtualhost; ?>'.$canonicalurl.$canonicalurladdidlang.'" />'."\n";
|
|
|
|
// Add the link of alternate translation reference
|
|
if ($listofaltlang) { // If website has other languages to support
|
|
if ($objectpage->lang) { // A language is forced on the page, it means we may have other language files with hard links into properties of page
|
|
// Add page "translation of"
|
|
$translationof = $objectpage->fk_page;
|
|
if ($translationof) {
|
|
$tmppage = new WebsitePage($db);
|
|
$tmppage->fetch($translationof);
|
|
if ($tmppage->id > 0) {
|
|
$tmpshortlangcode = '';
|
|
if ($tmppage->lang) {
|
|
$tmpshortlangcode = preg_replace('/[_-].*$/', '', $tmppage->lang); // en_US or en-US -> en
|
|
}
|
|
if (empty($tmpshortlangcode)) {
|
|
$tmpshortlangcode = preg_replace('/[_-].*$/', '', $object->lang); // en_US or en-US -> en
|
|
}
|
|
if ($tmpshortlangcode != $shortlangcode) {
|
|
$tplcontent .= '<link rel="alternate" hreflang="'.$tmpshortlangcode.'" href="<?php echo $website->virtualhost; ?>'.($object->fk_default_home == $tmppage->id ? '/' : (($tmpshortlangcode != substr($object->lang, 0, 2)) ? '/'.$tmpshortlangcode : '').'/'.$tmppage->pageurl.'.php').'" />'."\n";
|
|
}
|
|
}
|
|
}
|
|
|
|
// Add "has translation pages"
|
|
$sql = "SELECT rowid as id, lang, pageurl from ".MAIN_DB_PREFIX.'website_page where fk_page IN ('.$db->sanitize($objectpage->id.($translationof ? ", ".$translationof : '')).")";
|
|
$resql = $db->query($sql);
|
|
if ($resql) {
|
|
$num_rows = $db->num_rows($resql);
|
|
if ($num_rows > 0) {
|
|
while ($obj = $db->fetch_object($resql)) {
|
|
$tmpshortlangcode = '';
|
|
if ($obj->lang) {
|
|
$tmpshortlangcode = preg_replace('/[_-].*$/', '', $obj->lang); // en_US or en-US -> en
|
|
}
|
|
if ($tmpshortlangcode != $shortlangcode) {
|
|
$tplcontent .= '<link rel="alternate" hreflang="'.$tmpshortlangcode.'" href="<?php echo $website->virtualhost; ?>'.($object->fk_default_home == $obj->id ? '/' : (($tmpshortlangcode != substr($object->lang, 0, 2) ? '/'.$tmpshortlangcode : '')).'/'.$obj->pageurl.'.php').'" />'."\n";
|
|
}
|
|
}
|
|
}
|
|
} else {
|
|
dol_print_error($db);
|
|
}
|
|
|
|
// Add myself
|
|
$tplcontent .= '<?php if ($_SERVER["PHP_SELF"] == "'.(($object->fk_default_home == $objectpage->id) ? '/' : (($shortlangcode != substr($object->lang, 0, 2)) ? '/'.$shortlangcode : '')).'/'.$objectpage->pageurl.'.php") { ?>'."\n";
|
|
$tplcontent .= '<link rel="alternate" hreflang="'.$shortlangcode.'" href="<?php echo $website->virtualhost; ?>'.(($object->fk_default_home == $objectpage->id) ? '/' : (($shortlangcode != substr($object->lang, 0, 2)) ? '/'.$shortlangcode : '').'/'.$objectpage->pageurl.'.php').'" />'."\n";
|
|
|
|
$tplcontent .= '<?php } ?>'."\n";
|
|
} else { // No language forced, it means the canonical is the one withparams making url unique
|
|
$canonicalurl = '/'.$objectpage->pageurl.'.php';
|
|
$arrayofaltlang = explode(',', $listofaltlang);
|
|
|
|
foreach ($arrayofaltlang as $altlang) {
|
|
// Add parameter ID required to be unique/canonical
|
|
$canonicalurladdidlang = '?__SEO_CANONICAL_URL_PARAMS__';
|
|
$canonicalurladdidlang .= '&l='.$altlang;
|
|
$tplcontent .= '<link rel="alternate" hreflang="'.$altlang.'" href="<?php echo $website->virtualhost; ?>'.$canonicalurl.$canonicalurladdidlang.'" />'."\n";
|
|
}
|
|
|
|
$tmpshortlangcode = preg_replace('/[_-].*$/', '', $object->lang); // en_US or en-US -> en
|
|
$canonicalurladdidlang = '?__SEO_CANONICAL_URL_PARAMS__';
|
|
$canonicalurladdidlang .= '&l='.$tmpshortlangcode;
|
|
$tplcontent .= '<link rel="alternate" hreflang="'.$tmpshortlangcode.'" href="<?php echo $website->virtualhost; ?>'.$canonicalurl.$canonicalurladdidlang.'" />'."\n";
|
|
}
|
|
}
|
|
}
|
|
|
|
// Add manifest.json. Do we have to add it only on home page ?
|
|
$tplcontent .= '<?php if ($website->use_manifest) { print \'<link rel="manifest" href="/manifest.json.php" />\'."\n"; } ?>'."\n";
|
|
|
|
// Add HTML headers (must be before the Add of the common CSS and js). The common js may content javascript using jquery or a framework loaded by the HTML header.
|
|
$tplcontent .= '<!-- Include HTML header from common file -->'."\n";
|
|
$tplcontent .= '<?php if (file_exists(DOL_DATA_ROOT."/website/".$websitekey."/htmlheader.html")) include DOL_DATA_ROOT."/website/".$websitekey."/htmlheader.html"; ?>'."\n";
|
|
$tplcontent .= '<!-- Include HTML header from page header block -->'."\n";
|
|
$tplcontent .= preg_replace('/<\/?html>/ims', '', $objectpage->htmlheader)."\n";
|
|
|
|
// Add css
|
|
$tplcontent .= '<!-- Include link to common CSS file -->'."\n";
|
|
$tplcontent .= '<link rel="stylesheet" href="/styles.css.php?website=<?php echo $websitekey; ?>" type="text/css" />'."\n";
|
|
|
|
// Add js
|
|
$tplcontent .= '<!-- Include link to common JS file -->'."\n";
|
|
$tplcontent .= '<script nonce="'.getNonce().'" async src="/javascript.js.php?website=<?php echo $websitekey; ?>"></script>'."\n";
|
|
$tplcontent .= '</head>'."\n";
|
|
$tplcontent .= "\n";
|
|
|
|
// Page content
|
|
$tplcontent .= '<!-- File content defined in Dolibarr website module editor -->'."\n";
|
|
$tplcontent .= '<body id="bodywebsite" class="bodywebsite bodywebpage-'.$objectpage->ref.'">'."\n";
|
|
|
|
// Import necessary environment for the config page
|
|
if ($objectpage->type_container == 'setup') {
|
|
$content = '';
|
|
$content .= '<?php'."\n";
|
|
$content .= 'require_once DOL_DOCUMENT_ROOT.\'/core/class/html.formsetup.class.php\';'."\n";
|
|
$content .= '$formSetup = new FormSetup($db);'."\n";
|
|
$content .= '?>'."\n";
|
|
$tplcontent .= $content."\n";
|
|
}
|
|
|
|
$tplcontent .= $objectpage->content."\n";
|
|
|
|
// Add logic to handle view and actions for managing parameters in the special config page
|
|
if ($objectpage->type_container == 'setup') {
|
|
$content = '<div id="websitetemplateconfigpage">'."\n";
|
|
$content .= '<?php'."\n";
|
|
$content .= '/*' . "\n";
|
|
$content .= ' * Actions' . "\n";
|
|
$content .= ' */' . "\n";
|
|
$content .= '$websitetemplateconf = GETPOSTINT(\'websitetemplateconf\');' . "\n";
|
|
$content .= 'include DOL_DOCUMENT_ROOT.\'/core/actions_setmoduleoptions.inc.php\';' . "\n";
|
|
$content .= '' . "\n";
|
|
$content .= '/*' . "\n";
|
|
$content .= ' * View' . "\n";
|
|
$content .= ' */' . "\n";
|
|
$content .= 'print load_fiche_titre($langs->trans(\'SetupAndProperties\'), \'\', \'title_setup\');' . "\n";
|
|
$content .= '' . "\n";
|
|
$content .= 'if (!empty($message)) {' . "\n";
|
|
$content .= ' print $message;' . "\n";
|
|
$content .= '}' . "\n";
|
|
$content .= '' . "\n";
|
|
$content .= 'if (!empty($formSetup->items)) {' . "\n";
|
|
$content .= ' $html = \'\';' . "\n";
|
|
$content .= '' . "\n";
|
|
$content .= ' $html .= \'<form action="config.php" method="POST">\';' . "\n";
|
|
$content .= ' // Generate hidden values from $formSetup->formHiddenInputs' . "\n";
|
|
$content .= ' if (!empty($formSetup->formHiddenInputs) && is_array($formSetup->formHiddenInputs)) {' . "\n";
|
|
$content .= ' foreach ($formSetup->formHiddenInputs as $hiddenKey => $hiddenValue) {' . "\n";
|
|
$content .= ' $html .= \'<input type="hidden" name="\' . dol_escape_htmltag($hiddenKey) . \'" value="\' . dol_escape_htmltag($hiddenValue) . \'">\';' . "\n";
|
|
$content .= ' }' . "\n";
|
|
$content .= ' }' . "\n";
|
|
$content .= '' . "\n";
|
|
$content .= ' // Generate output table' . "\n";
|
|
$content .= ' $html .= $formSetup->generateTableOutput(true);' . "\n";
|
|
$content .= '' . "\n";
|
|
$content .= ' // Submit button' . "\n";
|
|
$content .= ' $html .= \'<input type="hidden" name="action" value="preview">\';' . "\n";
|
|
$content .= ' $html .= \'<input type="hidden" name="websitetemplateconf" value="1">\';' . "\n";
|
|
$content .= ' $html .= \'<br>\';' . "\n";
|
|
$content .= ' $html .= \'<div class="form-setup-button-container center">\';' . "\n";
|
|
$content .= ' $html .= \'<input class="button button-submit" type="submit" value="\' . $langs->trans("Save") . \'">\';' . "\n";
|
|
$content .= ' $html .= \'</div>\';' . "\n";
|
|
$content .= ' $html .= \'</form>\';' . "\n";
|
|
$content .= '' . "\n";
|
|
$content .= ' print $html;' . "\n";
|
|
$content .= '}' . "\n";
|
|
$content .= '?>' . "\n";
|
|
$content .= '</div>' . "\n";
|
|
$tplcontent .= $content."\n";
|
|
}
|
|
|
|
|
|
$tplcontent .= '</body>'."\n";
|
|
$tplcontent .= '</html>'."\n";
|
|
|
|
$tplcontent .= '<?php // BEGIN PHP'."\n";
|
|
$tplcontent .= '} catch(Exception $e) { print $e->getMessage(); }'."\n";
|
|
$tplcontent .= '$tmp = ob_get_contents(); ob_end_clean();'."\n"; // replace with ob_get_clean ?
|
|
|
|
$tplcontent .= "// Now fix the content for SEO or multilanguage\n";
|
|
// Old method for custom SEO
|
|
if (strpos($objectpage->content, '$__PAGE__KEYWORDS__') !== false) {
|
|
$tplcontent .= '$tmp = preg_replace("/^<meta name=\"keywords\" content=\".*?\" \/>/ms", "<meta name=\"keywords\" content=\"" . dolPrintHTMLForAttribute($__PAGE__KEYWORDS__ ?? "", 1) . "\" />", $tmp);'."\n";
|
|
}
|
|
if (strpos($objectpage->content, '$__PAGE__TITLE__') !== false) {
|
|
$tplcontent .= '$tmp = preg_replace("/^<title>.*?<\/title>/ms", "<title>" . dolPrintHTMLForAttribute($__PAGE__TITLE__ ?? "", 1) . "</title>", $tmp);'."\n";
|
|
$tplcontent .= '$tmp = preg_replace("/^<meta name=\"title\" content=\".*?\" \/>/ms", "<meta name=\"title\" content=\"" . dolPrintHTMLForAttribute($__PAGE__TITLE__ ?? "", 1) . "\" />", $tmp);'."\n";
|
|
}
|
|
if (strpos($objectpage->content, '$__PAGE__DESC__') !== false) {
|
|
$tplcontent .= '$tmp = preg_replace("/^<meta name=\"description\" content=\".*?\" \/>/ms", "<meta name=\"description\" content=\"" . dolPrintHTMLForAttribute($__PAGE__DESC__ ?? "", 1) . "\" />", $tmp);'."\n";
|
|
}
|
|
// New method for custom SEO
|
|
if (strpos($objectpage->content, 'define("__SEO_PAGE_LANG__"') !== false) {
|
|
$tmpshortlangcode = preg_replace('/[_-].*$/', '', $object->lang); // en_US or en-US -> en
|
|
$tplcontent .= '$tmp = preg_replace("/^<html lang=\"[a-z]+\"/ms", "<html lang=\"" . dolPrintHTMLForAttribute(defined("__SEO_PAGE_LANG__") ? preg_replace(\'/\[_-\].*$/\', "", constant("__SEO_PAGE_LANG__")) : (empty($weblangs->shortlang) ? "'.$tmpshortlangcode.'" : $weblangs->shortlang), 1) . "\"", $tmp);'."\n";
|
|
}
|
|
if (strpos($objectpage->content, 'define("__SEO_PAGE_KEYWORDS__"') !== false) {
|
|
$tplcontent .= '$tmp = preg_replace("/^<meta name=\"keywords\" content=\".*?\" \/>/ms", "<meta name=\"keywords\" content=\"" . dolPrintHTMLForAttribute(constant("__SEO_PAGE_KEYWORDS__"), 1) . "\" />", $tmp);'."\n";
|
|
}
|
|
if (strpos($objectpage->content, 'define("__SEO_PAGE_TITLE__"') !== false) {
|
|
$tplcontent .= '$tmp = preg_replace("/^<title>.*?<\/title>/ms", "<title>" . dolPrintHTMLForAttribute(defined("__SEO_PAGE_TITLE__") ? constant("__SEO_PAGE_TITLE__") : "", 1) . "</title>", $tmp);'."\n";
|
|
$tplcontent .= '$tmp = preg_replace("/^<meta name=\"title\" content=\".*?\" \/>/ms", "<meta name=\"title\" content=\"" . dolPrintHTMLForAttribute(defined("__SEO_PAGE_TITLE__") ? constant("__SEO_PAGE_TITLE__") : "", 1) . "\" />", $tmp);'."\n";
|
|
}
|
|
if (strpos($objectpage->content, 'define("__SEO_PAGE_DESC__"') !== false) {
|
|
$tplcontent .= '$tmp = preg_replace("/^<meta name=\"description\" content=\".*?\" \/>/ms", "<meta name=\"description\" content=\"" . dolPrintHTMLForAttribute(constant("__SEO_PAGE_DESC__"), 1) . "\" />", $tmp);'."\n";
|
|
}
|
|
if (empty($objectpage->lang)) { // We may need to use param into the canonical url
|
|
$tplcontent .= 'defined("__SEO_CANONICAL_URL_PARAMS__") ? ($tmp = preg_replace("/__SEO_CANONICAL_URL_PARAMS__/", dolPrintHTMLForAttributeUrl(constant("__SEO_CANONICAL_URL_PARAMS__")), $tmp)) : ($tmp = preg_replace("/\?__SEO_CANONICAL_URL_PARAMS__\"/", "\"", preg_replace("/\?__SEO_CANONICAL_URL_PARAMS__&/", "?", $tmp)));'."\n";
|
|
|
|
$tmpshortlangcode = preg_replace('/[_-].*$/', '', $object->lang); // en_US or en-US -> en
|
|
$tplcontent .= '$tmp = preg_replace("/__SEO_CANONICAL_LANG__/", (defined("__SEO_PAGE_LANG__") ? preg_replace(\'/\[_-\].*$/\', "", constant("__SEO_PAGE_LANG__")) : (empty($weblangs->shortlang) ? "'.$tmpshortlangcode.'" : $weblangs->shortlang)), $tmp);'."\n";
|
|
}
|
|
|
|
// Let modules rewrite the final page content (e.g. canonical/hreflang links, when a module
|
|
// implements its own URL rewriting scheme that core has no knowledge of). Runs on every
|
|
// request (not only at page compile time), so it applies no matter which code path last
|
|
// recompiled this page (website editor, inline AJAX edit, a module's own template reset...).
|
|
$tplcontent .= "// Let modules rewrite the final page content (hook)\n";
|
|
$tplcontent .= 'global $hookmanager;'."\n";
|
|
$tplcontent .= 'if (is_object($hookmanager)) {'."\n";
|
|
$tplcontent .= ' $hookmanager->initHooks(array(\'websitepagecontent\'));'."\n";
|
|
$tplcontent .= ' $parameters = array(\'tmp\' => &$tmp);'."\n";
|
|
$tplcontent .= ' $hookmanager->executeHooks(\'printWebsitePageContent\', $parameters, $websitepage);'."\n";
|
|
$tplcontent .= '}'."\n";
|
|
|
|
$tplcontent .= "// Now output the generated page content\n";
|
|
$tplcontent .= 'dolWebsiteOutput($tmp, "html", '.((int) $objectpage->id).'); dolWebsiteIncrementCounter('.((int) $object->id).', "'.$objectpage->type_container.'", '.((int) $objectpage->id).');'."\n";
|
|
$tplcontent .= "// END PHP ?>\n";
|
|
} else {
|
|
$tplcontent .= "<?php // BEGIN PHP\n";
|
|
$tplcontent .= '$websitekey=basename(__DIR__); if (empty($websitepagefile)) $websitepagefile=__FILE__;'."\n";
|
|
$tplcontent .= "if (! defined('USEDOLIBARRSERVER') && ! defined('USEDOLIBARREDITOR')) {\n";
|
|
$tplcontent .= ' $pathdepth = count(explode(\'/\', $_SERVER[\'SCRIPT_NAME\'])) - 2;'."\n";
|
|
$tplcontent .= ' require_once ($pathdepth ? str_repeat(\'../\', $pathdepth) : \'./\').\'master.inc.php\';'."\n";
|
|
if ($objectpage->disable_waf != 'all') {
|
|
if (strpos($objectpage->disable_waf, 'NOSCANAUDIOFORINJECTION') !== false) {
|
|
$tplcontent .= ' define(\'NOSCANAUDIOFORINJECTION\', 1);'."\n";
|
|
}
|
|
if (strpos($objectpage->disable_waf, 'NOSCANIFRAMEFORINJECTION') !== false) {
|
|
$tplcontent .= ' define(\'NOSCANIFRAMEFORINJECTION\', 1);'."\n";
|
|
}
|
|
if (strpos($objectpage->disable_waf, 'NOSCANOBJECTFORINJECTION') !== false) {
|
|
$tplcontent .= ' define(\'NOSCANOBJECTFORINJECTION\', 1);'."\n";
|
|
}
|
|
$tplcontent .= ' require_once DOL_DOCUMENT_ROOT.\'/waf.inc.php\';'."\n";
|
|
}
|
|
$tplcontent .= "}\n";
|
|
$tplcontent .= "require_once DOL_DOCUMENT_ROOT.'/core/lib/website.lib.php';\n";
|
|
$tplcontent .= "require_once DOL_DOCUMENT_ROOT.'/core/website.inc.php';\n";
|
|
if (in_array($objectpage->type_container, array('page', 'blogpost', 'service'))) {
|
|
$tplcontent .= 'dol_syslog("--- Prepare content of page '.((int) $objectpage->id).' - '.$objectpage->pageurl.'");'."\n";
|
|
}
|
|
$tplcontent .= "// END PHP ?>\n";
|
|
|
|
$tplcontent .= $objectpage->content;
|
|
}
|
|
|
|
//var_dump($filetpl);exit;
|
|
$result = file_put_contents($filetpl, $tplcontent);
|
|
|
|
dolChmod($filetpl);
|
|
|
|
return $result;
|
|
}
|
|
|
|
|
|
/**
|
|
* Save content of the index.php and/or the wrapper.php page
|
|
*
|
|
* @param string $pathofwebsite Path of website root
|
|
* @param string $fileindex Full path of file index.php
|
|
* @param string $filetpl File tpl the index.php page redirect to (used only if $fileindex is provided)
|
|
* @param string $filewrapper Full path of file wrapper.php
|
|
* @param Website $object Object website
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveIndexPage($pathofwebsite, $fileindex, $filetpl, $filewrapper, $object = null)
|
|
{
|
|
global $db;
|
|
|
|
$result1 = false;
|
|
$result2 = false;
|
|
|
|
dol_mkdir($pathofwebsite);
|
|
|
|
if ($fileindex) {
|
|
dol_delete_file($fileindex);
|
|
$indexcontent = '<?php'."\n";
|
|
$indexcontent .= "// BEGIN PHP File generated to provide an index.php as Home Page or alias redirector - DO NOT MODIFY - It is just a generated wrapper.\n";
|
|
$indexcontent .= '$websitekey=basename(__DIR__); if (empty($websitepagefile)) $websitepagefile=__FILE__;'."\n";
|
|
$indexcontent .= "if (! defined('USEDOLIBARRSERVER') && ! defined('USEDOLIBARREDITOR')) { require_once './master.inc.php'; } // Load master if not already loaded\n";
|
|
$indexcontent .= 'if (!empty($_GET[\'pageref\']) || !empty($_GET[\'pagealiasalt\']) || !empty($_GET[\'pageid\'])) {'."\n";
|
|
$indexcontent .= " require_once DOL_DOCUMENT_ROOT.'/core/lib/website.lib.php';\n";
|
|
$indexcontent .= " require_once DOL_DOCUMENT_ROOT.'/core/website.inc.php';\n";
|
|
$indexcontent .= ' redirectToContainer($_GET[\'pageref\'], $_GET[\'pagealiasalt\'], $_GET[\'pageid\']);'."\n";
|
|
$indexcontent .= "}\n";
|
|
$indexcontent .= "include_once './".basename($filetpl)."'\n";
|
|
$indexcontent .= '// END PHP ?>'."\n";
|
|
|
|
$result1 = file_put_contents($fileindex, $indexcontent);
|
|
|
|
dolChmod($fileindex);
|
|
|
|
if (is_object($object) && $object->fk_default_home > 0) {
|
|
$objectpage = new WebsitePage($db);
|
|
$objectpage->fetch($object->fk_default_home);
|
|
|
|
// Create a version for sublanguages
|
|
if (empty($objectpage->lang) || !in_array($objectpage->lang, explode(',', $object->otherlang))) {
|
|
if (!getDolGlobalString('WEBSITE_DISABLE_MAIN_LANGUAGE_INTO_LANGSUBDIR') && is_object($object) && !empty($object->otherlang)) {
|
|
$dirname = dirname($fileindex);
|
|
foreach (explode(',', $object->otherlang) as $sublang) {
|
|
// Avoid to erase main alias file if $sublang is empty string
|
|
if (empty(trim($sublang))) {
|
|
continue;
|
|
}
|
|
$fileindexsub = $dirname.'/'.$sublang.'/index.php';
|
|
|
|
// Same indexcontent than previously but with ../ instead of ./ for master and tpl file include/require_once.
|
|
$relpath = '..';
|
|
$indexcontent = '<?php'."\n";
|
|
$indexcontent .= "// BEGIN PHP File generated to provide an index.php as Home Page or alias redirector - DO NOT MODIFY - It is just a generated wrapper.\n";
|
|
$indexcontent .= '$websitekey=basename(__DIR__); if (empty($websitepagefile)) $websitepagefile=__FILE__;'."\n";
|
|
$indexcontent .= "if (! defined('USEDOLIBARRSERVER') && ! defined('USEDOLIBARREDITOR')) { require_once '".$relpath."/master.inc.php'; } // Load master if not already loaded\n";
|
|
$indexcontent .= 'if (!empty($_GET[\'pageref\']) || !empty($_GET[\'pagealiasalt\']) || !empty($_GET[\'pageid\'])) {'."\n";
|
|
$indexcontent .= " require_once DOL_DOCUMENT_ROOT.'/core/lib/website.lib.php';\n";
|
|
$indexcontent .= " require_once DOL_DOCUMENT_ROOT.'/core/website.inc.php';\n";
|
|
$indexcontent .= ' redirectToContainer($_GET[\'pageref\'], $_GET[\'pagealiasalt\'], $_GET[\'pageid\']);'."\n";
|
|
$indexcontent .= "}\n";
|
|
$indexcontent .= "include_once '".$relpath."/".basename($filetpl)."'\n"; // use .. instead of .
|
|
$indexcontent .= '// END PHP ?>'."\n";
|
|
$result = file_put_contents($fileindexsub, $indexcontent);
|
|
if ($result === false) {
|
|
dol_syslog("Failed to write file ".$fileindexsub, LOG_WARNING);
|
|
}
|
|
dolChmod($fileindexsub);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} else {
|
|
$result1 = true;
|
|
}
|
|
|
|
if ($filewrapper) {
|
|
dol_delete_file($filewrapper);
|
|
$wrappercontent = file_get_contents(DOL_DOCUMENT_ROOT.'/website/samples/wrapper.php');
|
|
|
|
$result2 = file_put_contents($filewrapper, $wrappercontent);
|
|
dolChmod($filewrapper);
|
|
} else {
|
|
$result2 = true;
|
|
}
|
|
|
|
return ($result1 && $result2);
|
|
}
|
|
|
|
|
|
/**
|
|
* Save content of a page on disk
|
|
*
|
|
* @param string $filehtmlheader Full path of filename to generate
|
|
* @param string $htmlheadercontent Content of file
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveHtmlHeader($filehtmlheader, $htmlheadercontent)
|
|
{
|
|
global $pathofwebsite;
|
|
|
|
dol_syslog("Save html header into ".$filehtmlheader);
|
|
|
|
dol_mkdir($pathofwebsite);
|
|
$result = file_put_contents($filehtmlheader, $htmlheadercontent);
|
|
dolChmod($filehtmlheader);
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Save content of a page on disk
|
|
*
|
|
* @param string $filecss Full path of filename to generate
|
|
* @param string $csscontent Content of file
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveCssFile($filecss, $csscontent)
|
|
{
|
|
global $pathofwebsite;
|
|
|
|
dol_syslog("Save css file into ".$filecss);
|
|
|
|
dol_mkdir($pathofwebsite);
|
|
$result = file_put_contents($filecss, $csscontent);
|
|
dolChmod($filecss);
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Save content of a page on disk. For example into documents/website/mywebsite/javascript.js.php file.
|
|
*
|
|
* @param string $filejs Full path of filename to generate
|
|
* @param string $jscontent Content of file
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveJsFile($filejs, $jscontent)
|
|
{
|
|
global $pathofwebsite;
|
|
|
|
dol_syslog("Save js file into ".$filejs);
|
|
|
|
dol_mkdir($pathofwebsite);
|
|
$result = file_put_contents($filejs, $jscontent);
|
|
dolChmod($filejs);
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Save content of a page on disk
|
|
*
|
|
* @param string $filerobot Full path of filename to generate
|
|
* @param string $robotcontent Content of file
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveRobotFile($filerobot, $robotcontent)
|
|
{
|
|
global $pathofwebsite;
|
|
|
|
dol_syslog("Save robot file into ".$filerobot);
|
|
|
|
dol_mkdir($pathofwebsite);
|
|
$result = file_put_contents($filerobot, $robotcontent);
|
|
dolChmod($filerobot);
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Save content of a page on disk
|
|
*
|
|
* @param string $filehtaccess Full path of filename to generate
|
|
* @param string $htaccess Content of file
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveHtaccessFile($filehtaccess, $htaccess)
|
|
{
|
|
global $pathofwebsite;
|
|
|
|
dol_syslog("Save htaccess file into ".$filehtaccess);
|
|
|
|
dol_mkdir($pathofwebsite);
|
|
$result = file_put_contents($filehtaccess, $htaccess);
|
|
dolChmod($filehtaccess);
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Save content of a page on disk
|
|
*
|
|
* @param string $file Full path of filename to generate
|
|
* @param string $content Content of file
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveManifestJson($file, $content)
|
|
{
|
|
global $pathofwebsite;
|
|
|
|
dol_syslog("Save manifest.js.php file into ".$file);
|
|
|
|
dol_mkdir($pathofwebsite);
|
|
$result = file_put_contents($file, $content);
|
|
dolChmod($file);
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Save content of a page on disk
|
|
*
|
|
* @param string $file Full path of filename to generate
|
|
* @param string $content Content of file
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveReadme($file, $content)
|
|
{
|
|
global $pathofwebsite;
|
|
|
|
dol_syslog("Save README.md file into ".$file);
|
|
|
|
dol_mkdir($pathofwebsite);
|
|
$result = file_put_contents($file, $content);
|
|
dolChmod($file);
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Save content of a page on disk
|
|
*
|
|
* @param string $file Full path of filename to generate
|
|
* @param string $content Content of file
|
|
* @return boolean True if OK
|
|
*/
|
|
function dolSaveLicense($file, $content)
|
|
{
|
|
global $pathofwebsite;
|
|
|
|
dol_syslog("Save LICENSE file into ".$file);
|
|
|
|
dol_mkdir($pathofwebsite);
|
|
$result = file_put_contents($file, $content);
|
|
dolChmod($file);
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Show list of themes. Show all thumbs of themes/skins
|
|
*
|
|
* @param Website $website Object website to load the template into
|
|
* @param int $refresh 1 = Recopy templates into sources not into documents
|
|
* @return void
|
|
*/
|
|
function showWebsiteTemplates(Website $website, int $refresh)
|
|
{
|
|
global $conf, $langs, $form, $user;
|
|
|
|
// We want only one directory for dir of website templates. If an external module need to provide a template, the template must be copied into this directory
|
|
// when module is enabled.
|
|
$dirthemes = array('/doctemplates/websites');
|
|
|
|
$warningtoshow = '';
|
|
$arrayoftemplatesfound = array();
|
|
|
|
if (count($dirthemes)) {
|
|
$i = 0;
|
|
// Scan dir to get all deployed qualified templates
|
|
foreach ($dirthemes as $dir) {
|
|
$dirtheme = DOL_DATA_ROOT.$dir;
|
|
|
|
if (is_dir($dirtheme)) {
|
|
$handle = opendir($dirtheme);
|
|
if (is_resource($handle)) {
|
|
while (($subdir = readdir($handle)) !== false) { // Scan files of directory
|
|
//var_dump($dirtheme.'/'.$subdir);
|
|
if (dol_is_file($dirtheme."/".$subdir) && substr($subdir, 0, 1) != '.' && substr($subdir, 0, 3) != 'CVS' && preg_match('/\.zip$/i', $subdir)) {
|
|
$subdirwithoutzip = preg_replace('/\.zip$/i', '', $subdir);
|
|
$subdirwithoutzipwithoutver = preg_replace('/(_exp|_dev)$/i', '', $subdirwithoutzip);
|
|
|
|
// Disable not stable themes (dir ends with _exp or _dev)
|
|
if (getDolGlobalInt('MAIN_FEATURES_LEVEL') < 2 && preg_match('/_dev$/i', $subdirwithoutzip)) {
|
|
continue;
|
|
}
|
|
if (getDolGlobalInt('MAIN_FEATURES_LEVEL') < 1 && preg_match('/_exp$/i', $subdirwithoutzip)) {
|
|
continue;
|
|
}
|
|
|
|
$arrayoftemplatesfound[$subdirwithoutzip] = array('id' => $subdirwithoutzip);
|
|
$i++;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Now test if we found template available into source not copied into documents
|
|
$arrayofsourcetemplates = dol_dir_list(DOL_DOCUMENT_ROOT.'/install/doctemplates/websites', 'directories', 0, 'website_.*$');
|
|
$arrayofsourcetemplatesnotdeployed = array();
|
|
foreach ($arrayofsourcetemplates as $val) {
|
|
// Disable not stable themes (dir ends with _exp or _dev)
|
|
if (getDolGlobalInt('MAIN_FEATURES_LEVEL') < 2 && preg_match('/_dev$/i', $val['relativename'])) {
|
|
continue;
|
|
}
|
|
if (getDolGlobalInt('MAIN_FEATURES_LEVEL') < 1 && preg_match('/_exp$/i', $val['relativename'])) {
|
|
continue;
|
|
}
|
|
|
|
if (empty($arrayoftemplatesfound[$val['relativename']])) {
|
|
// We found a template into sources that is not into documents
|
|
if ($refresh) { // We copy it
|
|
$src = DOL_DOCUMENT_ROOT.'/install/doctemplates/websites/'.$val['name'];
|
|
$dest = DOL_DATA_ROOT.'/doctemplates/websites/'.$val['name'];
|
|
|
|
dol_delete_file($dest.'.zip');
|
|
|
|
// Compress it
|
|
global $errormsg; // Used by dol_compress_dir
|
|
$errormsg = '';
|
|
$result = dol_compress_dir($src, $dest.'.zip', 'zip');
|
|
if ($result < 0) {
|
|
dol_syslog("Error in compress of dir ".$src, LOG_ERR);
|
|
}
|
|
|
|
$srcfile = DOL_DOCUMENT_ROOT.'/install/doctemplates/websites/'.preg_replace('/(_exp|_dev)$/', '', $val['name']).'.jpg';
|
|
$destfile = DOL_DATA_ROOT.'/doctemplates/websites/'.preg_replace('/(_exp|_dev)$/', '', $val['name']).'.jpg';
|
|
|
|
dol_copy($srcfile, $destfile);
|
|
} else {
|
|
$arrayofsourcetemplatesnotdeployed[$val['relativename']] = $val;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (count($arrayofsourcetemplatesnotdeployed)) {
|
|
$warningtoshow = img_picto($langs->trans("WarningTemplatesFoundNotDeployedClickRefresh").': '.implode(', ', array_keys($arrayofsourcetemplatesnotdeployed)).'. '.$langs->trans("WarningTemplatesFoundNotDeployedClickRefresh2"), 'warning', 'class="valignmiddle paddingright"');
|
|
}
|
|
}
|
|
|
|
$colspan = 2;
|
|
|
|
$importButtonIsDisabled = 0;
|
|
|
|
global $dolibarr_website_allow_custom_php;
|
|
if (!empty($dolibarr_website_allow_custom_php) && $dolibarr_website_allow_custom_php == 1) {
|
|
$notdisabledsystemfunction = '';
|
|
$systemfunctions = array("exec", "passthru", "shell_exec", "system", "popen", "proc_open");
|
|
foreach ($systemfunctions as $systemfunction) {
|
|
// @phpstan-ignore-next-line
|
|
if (function_exists($systemfunction)) {
|
|
$notdisabledsystemfunction .= ($notdisabledsystemfunction ? ', ' : '').$systemfunction;
|
|
}
|
|
}
|
|
if ($notdisabledsystemfunction) {
|
|
print '<div class="warning">';
|
|
print $langs->trans("ImportOfWebsiteTemplateIncludingPHPIsAllowedIf", 'warning');
|
|
print '</div>';
|
|
|
|
$importButtonIsDisabled = 1;
|
|
}
|
|
}
|
|
if (empty($dolibarr_website_allow_custom_php)) {
|
|
print '<div class="warning">';
|
|
print $langs->trans("ImportOfWebsiteTemplateIncludingPHPIsDisabled", 'warning');
|
|
print '</div>';
|
|
|
|
$importButtonIsDisabled = 1;
|
|
}
|
|
|
|
print '<!-- For website template import -->'."\n";
|
|
print '<table class="noborder centpercent">';
|
|
|
|
// Title
|
|
print '<tr class="liste_titre"><th class="titlefield">';
|
|
print $form->textwithpicto($langs->trans("Templates"), $langs->trans("ThemeDir").' : '.implode(", ", $dirthemes));
|
|
print ' ';
|
|
print '<a class="valignmiddle" href="'.$_SERVER["PHP_SELF"].'?website='.urlencode($website->ref).'&importsite=2" rel="noopener noreferrer external">';
|
|
print $warningtoshow;
|
|
print img_picto($langs->trans("Refresh"), 'refresh', 'class="valignmiddle"');
|
|
print '</a>';
|
|
print '</th>';
|
|
print '<th class="right">';
|
|
$url = 'https://www.dolistore.com/index.php?cat=84';
|
|
print '<a href="'.$url.'" target="_blank" rel="noopener noreferrer external">';
|
|
print img_picto('', 'globe', 'class="pictofixedwidth"').$langs->trans('DownloadMoreSkins');
|
|
print '</a>';
|
|
print '</th></tr>';
|
|
|
|
print '<tr><td colspan="'.$colspan.'">';
|
|
|
|
print '<table class="nobordernopadding centpercent"><tr><td><div class="display-flex">';
|
|
|
|
if (count($dirthemes)) {
|
|
$i = 0;
|
|
foreach ($dirthemes as $dir) {
|
|
$dirtheme = DOL_DATA_ROOT.$dir;
|
|
|
|
if (is_dir($dirtheme)) {
|
|
$handle = opendir($dirtheme);
|
|
if (is_resource($handle)) {
|
|
while (($subdir = readdir($handle)) !== false) { // Scan files of directory
|
|
//var_dump($dirtheme.'/'.$subdir);
|
|
if (dol_is_file($dirtheme."/".$subdir) && substr($subdir, 0, 1) != '.' && substr($subdir, 0, 3) != 'CVS' && preg_match('/\.zip$/i', $subdir)) {
|
|
$subdirwithoutzip = preg_replace('/\.zip$/i', '', $subdir);
|
|
$subdirwithoutzipwithoutver = preg_replace('/(_exp|_dev)$/i', '', $subdirwithoutzip);
|
|
|
|
// Disable not stable themes (dir ends with _exp or _dev)
|
|
if (getDolGlobalInt('MAIN_FEATURES_LEVEL') < 2 && preg_match('/_dev$/i', $subdirwithoutzip)) {
|
|
continue;
|
|
}
|
|
if (getDolGlobalInt('MAIN_FEATURES_LEVEL') < 1 && preg_match('/_exp$/i', $subdirwithoutzip)) {
|
|
continue;
|
|
}
|
|
|
|
$arrayoftemplatesfound[$subdirwithoutzip] = array('id' => $subdirwithoutzip);
|
|
|
|
print '<div class="inline-block center flex-item" style="min-width: 250px; max-width: 400px; margin-top: 10px; margin-bottom: 10px; margin-right: 20px; margin-left: 20px;">';
|
|
|
|
$templatedir = $dirtheme."/".$subdir;
|
|
$file = $dirtheme."/".$subdirwithoutzipwithoutver.".jpg";
|
|
$url = DOL_URL_ROOT.'/viewimage.php?modulepart=doctemplateswebsite&file='.$subdirwithoutzipwithoutver.".jpg";
|
|
|
|
if (!file_exists($file)) {
|
|
$url = DOL_URL_ROOT.'/public/theme/common/nophoto.png';
|
|
}
|
|
|
|
$originalimgfile = basename($file);
|
|
$entity = $conf->entity;
|
|
$modulepart = 'doctemplateswebsite';
|
|
$cache = '';
|
|
$title = $file;
|
|
|
|
$ret = '';
|
|
$urladvanced = getAdvancedPreviewUrl($modulepart, $originalimgfile, 1, '&entity='.$entity);
|
|
if (!empty($urladvanced)) {
|
|
$ret .= '<a class="'.$urladvanced['css'].'" target="'.$urladvanced['target'].'" mime="'.$urladvanced['mime'].'" href="'.$urladvanced['url'].'">';
|
|
} else {
|
|
$ret .= '<a href="'.DOL_URL_ROOT.'/viewimage.php?modulepart='.urlencode($modulepart).'&entity='.((int) $entity).'&file='.urlencode($originalimgfile).'&cache='.((int) $cache).'">';
|
|
}
|
|
print $ret;
|
|
print '<img class="img-skinthumb shadow" src="'.$url.'" border="0" alt="'.$title.'" title="'.$title.'" style="margin-bottom: 5px;">';
|
|
print '</a>';
|
|
|
|
print '<br>';
|
|
print $subdir;
|
|
print '<br>';
|
|
print '<span class="opacitymedium">'.dol_print_size(dol_filesize($dirtheme."/".$subdir), 1, 1).' - '.dol_print_date(dol_filemtime($templatedir), 'dayhour', 'tzuserrel').'</span>';
|
|
if ($user->hasRight('website', 'delete')) {
|
|
print ' <a href="'.$_SERVER["PHP_SELF"].'?action=deletetemplate&token='.newToken().'&website='.urlencode($website->ref).'&templateuserfile='.urlencode($subdir).'">'.img_picto('', 'delete').'</a>';
|
|
}
|
|
print '<br><a href="'.$_SERVER["PHP_SELF"].'?action=importsiteconfirm&token='.newToken().'&website='.urlencode($website->ref).'&templateuserfile='.urlencode($subdir).'" class="button'.($importButtonIsDisabled ? ' disabled' : '').'">'.$langs->trans("Load").'</a>';
|
|
print '</div>';
|
|
|
|
$i++;
|
|
}
|
|
}
|
|
print '<div class="inline-block center flex-item" style="min-width: 250px; max-width: 400px;margin-top: 10px; margin-bottom: 10px; margin-right: 20px; margin-left: 20px;"></div>';
|
|
print '<div class="inline-block center flex-item" style="min-width: 250px; max-width: 400px;margin-top: 10px; margin-bottom: 10px; margin-right: 20px; margin-left: 20px;"></div>';
|
|
print '<div class="inline-block center flex-item" style="min-width: 250px; max-width: 400px;margin-top: 10px; margin-bottom: 10px; margin-right: 20px; margin-left: 20px;"></div>';
|
|
print '<div class="inline-block center flex-item" style="min-width: 250px; max-width: 400px;margin-top: 10px; margin-bottom: 10px; margin-right: 20px; margin-left: 20px;"></div>';
|
|
print '<div class="inline-block center flex-item" style="min-width: 250px; max-width: 400px;margin-top: 10px; margin-bottom: 10px; margin-right: 20px; margin-left: 20px;"></div>';
|
|
}
|
|
}
|
|
}
|
|
} else {
|
|
print '<span class="opacitymedium">'.$langs->trans("None").'</span>';
|
|
}
|
|
|
|
print '</div></td></tr></table>';
|
|
|
|
print '</td></tr>';
|
|
print '</table>';
|
|
}
|
|
|
|
|
|
/**
|
|
* Check that the new string $phpfullcodestring contains only php code (including <php tag)
|
|
* - Block if user has no permission to change PHP code.
|
|
* - Block also if bad code found in the new string.
|
|
* This does not check for evil callable function (like dol_eval_standard could do), because php concat should be allowed so obfuscation is always possible so
|
|
* detecting callable function can't be guaranteed. For this reason, application is protected by a global variable $dolibarr_website_allow_custom_php = 0 by default
|
|
* that disallow PHP code. If $dolibarr_website_allow_custom_php=1, PHP code is allowed only if all RCE PHP functions are disabled.
|
|
* Any PHP code is allowed if $dolibarr_website_allow_custom_php=2 but setup explains that an apparmor or SE protection is required to restrict allowed RCE commands.
|
|
* Called by website->importWebSite() via dolKeepOnlyPhpCode() or when editing a page.
|
|
*
|
|
* @param string $phpfullcodestringold PHP old string (before the change). For example "<?php echo 'a' ?><php echo 'b' ?>"
|
|
* @param string $phpfullcodestring PHP new string. For example "<?php echo 'a' ?><php echo 'c' ?>"
|
|
* @return int Error or not
|
|
* @see dolKeepOnlyPhpCode(), dol_eval() to see sanitizing rules that should be very close.
|
|
*/
|
|
function checkPHPCode(&$phpfullcodestringold, &$phpfullcodestring)
|
|
{
|
|
global $langs, $user;
|
|
|
|
$error = 0;
|
|
|
|
if (empty($phpfullcodestringold) && empty($phpfullcodestring)) {
|
|
return 0;
|
|
}
|
|
|
|
// First check permission
|
|
if ($phpfullcodestringold != $phpfullcodestring) {
|
|
global $dolibarr_website_allow_custom_php;
|
|
if (empty($dolibarr_website_allow_custom_php)) { // Case of $dolibarr_website_allow_custom_php = 0
|
|
$error++;
|
|
setEventMessages($langs->trans("NotAllowedToAddDynamicContentDisabledGlobaly", 'dolibarr_website_allow_custom_php'), null, 'errors');
|
|
} elseif ($dolibarr_website_allow_custom_php == 1) { // Case of $dolibarr_website_allow_custom_php = 1
|
|
$notdisabledsystemfunction = '';
|
|
$systemfunctions = array("exec", "passthru", "shell_exec", "system", "popen", "proc_open");
|
|
foreach ($systemfunctions as $systemfunction) {
|
|
// @phpstan-ignore-next-line
|
|
if (function_exists($systemfunction)) {
|
|
$notdisabledsystemfunction .= ($notdisabledsystemfunction ? ', ' : '').$systemfunction;
|
|
}
|
|
}
|
|
if ($notdisabledsystemfunction) {
|
|
$error++;
|
|
$langs->load("errors");
|
|
setEventMessages($langs->trans("ErrorDynamicPHPContentNotAllowed", 'dolibarr_website_allow_custom_php'), null, 'errors');
|
|
}
|
|
}
|
|
|
|
if (!$error && !$user->hasRight('website', 'writephp')) {
|
|
$error++;
|
|
setEventMessages($langs->trans("NotAllowedToAddDynamicContent"), null, 'errors');
|
|
}
|
|
}
|
|
|
|
$phpfullcodestringnew = $phpfullcodestring;
|
|
|
|
// Then check forbidden commands
|
|
if (!$error) {
|
|
if (getDolGlobalString("WEBSITE_DISALLOW_DOLLAR_UNDERSCORE")) {
|
|
$phpfullcodestring = preg_replace('/\$_COOKIE\[/', '__DOLLARCOOKIE__', $phpfullcodestring);
|
|
$phpfullcodestring = preg_replace('/\$_FILES\[/', '__DOLLARFILES__', $phpfullcodestring);
|
|
$phpfullcodestring = preg_replace('/\$_SESSION\[/', '__DOLLARSESSION__', $phpfullcodestring);
|
|
$forbiddenphpstrings = array('$$', '$_', '}[');
|
|
} else {
|
|
$forbiddenphpstrings = array('$$', '}[');
|
|
}
|
|
//$forbiddenphpstrings = array_merge($forbiddenphpstrings, array('_ENV', '_FILES', '_SESSION', '_COOKIE', '_GET', '_POST', '_REQUEST', 'ReflectionFunction'));
|
|
$forbiddenphpstrings = array_merge($forbiddenphpstrings, array('_ENV', 'ReflectionFunction'));
|
|
|
|
$forbiddenphpfunctions = array();
|
|
//$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("base64"."_"."decode", "rawurl"."decode", "url"."decode", "str"."_rot13", "hex"."2bin")); // name of forbidden functions are split to avoid false positive
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("override_function", "session_id", "session_create_id", "session_regenerate_id"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("get_defined_functions", "get_defined_vars", "get_defined_constants", "get_declared_classes"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("call_user_func", "call_user_func_array"));
|
|
//$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("require", "include", "require_once", "include_once"));
|
|
|
|
if (!getDolGlobalString('WEBSITE_PHP_ALLOW_EXEC')) { // If experimental option is not on, we TRY to disallow functions to execute commands
|
|
// WARNING: This is not reliable. If you don't want user to run code on the server, just NEVER give him permission to execute dynamic PHP in website module (or never enable website module).
|
|
// The following list shares a lot of content with the whitelist guard in dol_eval() function.
|
|
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("ob_start"));
|
|
|
|
// Functions with callable parameters
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("call_user_func", "call_user_func_array"));
|
|
//$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("array_all", "array_any", "array_diff_ukey", "array_filter", "array_find", "array_find_key", "array_map", "array_reduce", "array_intersect_uassoc", "array_intersect_ukey", "array_walk", "array_walk_recursive"));
|
|
//$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("usort", "uasort", "uksort"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("preg_replace_callback", "preg_replace_callback_array", "header_register_callback"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("error_log", "set_error_handler", "set_exception_handler", "libxml_set_external_entity_loader", "register_shutdown_function", "register_tick_function", "unregister_tick_function"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("spl_autoload_register", "spl_autoload_unregister", "iterator_apply", "session_set_save_handler"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("forward_static_call", "forward_static_call_array", "register_postsend_function"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("readline_completion_function", "readline_callback_handler_install"));
|
|
|
|
// Exec functions
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("exec", "passthru", "shell_exec", "system", "proc_open", "popen"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("pcntl_alarm", "pcntl_exec", "pcntl_fork", "pcntl_waitpid", "pcntl_wait", "pcntl_wifexited", "pcntl_wifstopped", "pcntl_wifsignaled", "pcntl_wifcontinued", "pcntl_wexitstatus", "pcntl_wtermsig", "pcntl_wstopsig", "pcntl_signal"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("pcntl_signal_get_handler", "pcntl_signal_dispatch", "pcntl_get_last_error", "pcntl_strerror", "pcntl_sigprocmask", "pcntl_sigwaitinfo", "pcntl_sigtimedwait", "pcntl_getpriority", "pcntl_async_signals", "pcntl_unshare", ));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("putenv", "dl", "apache_child_terminate", "apache_setenv"));
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("dol_eval", "dol_eval_new", "dol_eval_standard", "executeCLI", "verifCond", "dolEncrypt", "dolDecrypt")); // native dolibarr functions
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("eval", "create_function", "assert", "mb_ereg_replace")); // function with eval capabilities
|
|
|
|
// Include functions
|
|
//$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("require", "include", "require_once", "include_once"));
|
|
}
|
|
if (!getDolGlobalString('WEBSITE_PHP_ALLOW_WRITE')) { // If option is not on, we disallow functions to write files
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("dol_compress_dir", "dol_decode", "dol_dir_list", "dol_dir_list_in_database", "dol_delete_file", "dol_delete_dir", "dol_delete_dir_recursive", "dol_copy", "archiveOrBackupFile")); // more dolibarr functions
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("chdir", "dir", "fopen", "file", "file_exists", "file_get_contents", "file_put_contents", "fget", "fgetc", "fgetcsv", "flock", "fputs", "fputscsv", "fpassthru", "fscanf", "fseek", "fwrite", "is_file", "is_dir", "is_link", "mkdir", "opendir", "rmdir", "scandir", "symlink", "touch", "unlink", "umask"));
|
|
}
|
|
if (getDolGlobalString('WEBSITE_PHP_DISALLOW_READ')) { // If option is not on, we disallow functions to read files
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("dol_decode")); // more dolibarr functions
|
|
$forbiddenphpfunctions = array_merge($forbiddenphpfunctions, array("file", "fopen", "file_get_contents", "fgets", "fgetscsv", "fgetss", "fread"));
|
|
}
|
|
|
|
$forbiddenphpmethods = array('invoke', 'invokeArgs'); // Method of ReflectionFunction to execute a function
|
|
|
|
foreach ($forbiddenphpstrings as $forbiddenphpstring) {
|
|
if (preg_match('/'.preg_quote($forbiddenphpstring, '/').'/ims', $phpfullcodestring)) {
|
|
$error++;
|
|
setEventMessages($langs->trans("DynamicPHPCodeContainsAForbiddenInstruction", $forbiddenphpstring), null, 'errors');
|
|
break;
|
|
}
|
|
}
|
|
/* replaced with next block
|
|
foreach ($forbiddenphpfunctions as $forbiddenphpfunction) { // Check "function(" but also "'function'(" and "function ("
|
|
if (preg_match('/'.$forbiddenphpfunction.'[\'\s]*\(/ims', $phpfullcodestring)) {
|
|
$error++;
|
|
setEventMessages($langs->trans("DynamicPHPCodeContainsAForbiddenInstruction", $forbiddenphpfunction), null, 'errors');
|
|
break;
|
|
}
|
|
}*/
|
|
foreach ($forbiddenphpfunctions as $forbiddenphpfunction) { // Check "function" whatever is "function(" or "function'(" or "function (" or "function"
|
|
$reg = array();
|
|
if (preg_match('/\b'.$forbiddenphpfunction.'(=| class=|\b)/ims', $phpfullcodestring, $reg)) {
|
|
if ($reg[1] != '=' && $reg[1] != ' class=') { // So we may accept string ...&file=... even if 'file' is in forbiddenphpfunction. And we accept content with '<dl class=...'
|
|
$error++;
|
|
//setEventMessages($langs->trans("DynamicPHPCodeContainsAForbiddenInstruction", $forbiddenphpfunction)." :<br>\n".$phpfullcodestring, null, 'errors');
|
|
setEventMessages($langs->trans("DynamicPHPCodeContainsAForbiddenInstruction", $forbiddenphpfunction), null, 'errors');
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
foreach ($forbiddenphpmethods as $forbiddenphpmethod) {
|
|
if (preg_match('/->'.$forbiddenphpmethod.'/ims', $phpfullcodestring)) {
|
|
$error++;
|
|
setEventMessages($langs->trans("DynamicPHPCodeContainsAForbiddenInstruction", $forbiddenphpmethod), null, 'errors');
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
// This char can be used to execute RCE for example by using echo `ls`
|
|
if (!$error) {
|
|
$forbiddenphpchars = array();
|
|
if (!getDolGlobalString('WEBSITE_PHP_ALLOW_DANGEROUS_CHARS')) { // If option is not on, we disallow functions to execute commands
|
|
$forbiddenphpchars = array("`");
|
|
}
|
|
foreach ($forbiddenphpchars as $forbiddenphpchar) {
|
|
if (preg_match('/'.$forbiddenphpchar.'/ims', $phpfullcodestring)) {
|
|
$error++;
|
|
setEventMessages($langs->trans("DynamicPHPCodeContainsAForbiddenInstruction", $forbiddenphpchar), null, 'errors');
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
// Deny code to call a function obfuscated with comment, like "exec/*...*/ ('ls')";
|
|
if (!$error) {
|
|
if (preg_match('/\*\/\s*\(/ims', $phpfullcodestring)) {
|
|
$error++;
|
|
setEventMessages($langs->trans("DynamicPHPCodeContainsAForbiddenInstruction", "exec/*...*/ ('ls')"), null, 'errors');
|
|
}
|
|
}
|
|
|
|
// Deny dynamic functions '${a}(' or '$a[b](' => So we refuse '}(' and ']('
|
|
if (!$error) {
|
|
if (preg_match('/[}\]]\s*\(/ims', $phpfullcodestring)) {
|
|
$error++;
|
|
setEventMessages($langs->trans("DynamicPHPCodeContainsAForbiddenInstruction", ']('), null, 'errors');
|
|
}
|
|
}
|
|
|
|
// Deny dynamic functions '$xxx(' or '$xxx (' or '$xxx" ('
|
|
if (!$error) {
|
|
if (preg_match('/\$[a-z0-9_\-\/\*\"]+\s*\(/ims', $phpfullcodestring)) {
|
|
$error++;
|
|
setEventMessages($langs->trans("DynamicPHPCodeContainsAForbiddenInstruction", '$...('), null, 'errors');
|
|
}
|
|
}
|
|
|
|
// No need to block $conf->global->aaa() because PHP try to run the method aaa of $conf->global and not the function into $conf->global->aaa.
|
|
|
|
// Then check if installmodules.lock does not block dynamic PHP code change.
|
|
if ($phpfullcodestringold != $phpfullcodestringnew) {
|
|
if (!$error) {
|
|
$dolibarrdataroot = preg_replace('/([\\/]+)$/i', '', DOL_DATA_ROOT);
|
|
$allowimportsite = true;
|
|
include_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
|
|
if (dol_is_file($dolibarrdataroot.'/installmodules.lock')) {
|
|
$allowimportsite = false;
|
|
}
|
|
|
|
if (!$allowimportsite) {
|
|
$error++;
|
|
// Blocked by installmodules.lock
|
|
if (getDolGlobalString('MAIN_MESSAGE_INSTALL_MODULES_DISABLED_CONTACT_US')) {
|
|
// Show clean corporate message
|
|
$message = $langs->trans('InstallModuleFromWebHasBeenDisabledContactUs');
|
|
} else {
|
|
// Show technical generic message
|
|
$message = $langs->trans("InstallModuleFromWebHasBeenDisabledByFile", $dolibarrdataroot.'/installmodules.lock');
|
|
}
|
|
setEventMessages($message, null, 'errors');
|
|
}
|
|
}
|
|
}
|
|
|
|
return $error;
|
|
}
|