/concrete/core/controllers/single_pages/dashboard/system/backup_restore/update.php

<?php 

defined('C5_EXECUTE') or die("Access Denied.");
Loader::library('update');
Loader::library('archive');

class UpdateArchive extends Archive {
	
	public function __construct() {
		parent::__construct();
		$this->targetDirectory = DIR_APP_UPDATES;
	}

	public function install($file) {
		parent::install($file, true);
	}
	
}

if (!ini_get('safe_mode')) {
	@set_time_limit(0);
	ini_set('max_execution_time', 0);
}

class Concrete5_Controller_Dashboard_System_BackupRestore_Update extends DashboardBaseController { 	 
	
	function view() {  
		$upd = new Update();
		$updates = $upd->getLocalAvailableUpdates();
		$remote = $upd->getApplicationUpdateInformation();
		$this->set('updates', $updates);
		if (MULTI_SITE == 0) {
			$this->set('showDownloadBox', true);
		} else {
			$this->set('showDownloadBox', false);
		}
		if (is_object($remote) && version_compare($remote->version, APP_VERSION, '>')) {
			// loop through local updates
			$downloadableUpgradeAvailable = true;
			foreach($updates as $upd) {
				if ($upd->getUpdateVersion() == $remote->version) {
					// we have a LOCAL version ready to install that is the same, so we abort
					$downloadableUpgradeAvailable = false;
					$this->set('showDownloadBox', false);
					break;
				}
			}
			
			$this->set('downloadableUpgradeAvailable', $downloadableUpgradeAvailable);
			$this->set('update', $remote);
		} else {
			$this->set('downloadableUpgradeAvailable', false);
		}
	}
	
	public function check_for_updates() {
		Config::clear('APP_VERSION_LATEST', false);
		Update::getLatestAvailableVersionNumber();
		$this->redirect('/dashboard/system/backup_restore/update');
	}
	
	public function on_start() {
		$this->error = Loader::helper('validation/error');
		$cnt = Loader::controller('/upgrade');
		$cnt->secCheck();
	}

	public function on_before_render() {
		$this->set('error', $this->error);
	}
	
	public function download_update() {
		if (MULTI_SITE == 1) {
			return false;
		}
		
		$vt = Loader::helper('validation/token');
		if (!$vt->validate('download_update')) {
			$this->error->add($vt->getErrorMessage());
		}
		if (!is_dir(DIR_APP_UPDATES)) {
			$this->error->add(t('The directory %s does not exist.', DIR_APP_UPDATES));
		} else if (!is_writable(DIR_APP_UPDATES)) {
			$this->error->add(t('The directory %s must be writable by the web server.', DIR_APP_UPDATES));
		}
		
		if (!$this->error->has()) {
			$remote = Update::getApplicationUpdateInformation();
			if (is_object($remote)) {
				// try to download
				Loader::library("marketplace");
				$r = Marketplace::downloadRemoteFile($remote->url);
				if (empty($r) || $r == Package::E_PACKAGE_DOWNLOAD) {
					$response = array(Package::E_PACKAGE_DOWNLOAD);
				} else if ($r == Package::E_PACKAGE_SAVE) {
					$response = array($r);
				}
				
				if (isset($response)) {
					$errors = Package::mapError($response);
					foreach($errors as $e) {
						$this->error->add($e);
					}
				}
				
				if (!$this->error->has()) {
					// the file exists in the right spot
					Loader::library('archive');
					$ar = new UpdateArchive();
					try {
						$ar->install($r);
					} catch(Exception $e) {
						$this->error->add($e->getMessage());
					}
						
				}
			} else {
				$this->error->add(t('Unable to retrieve software from update server.'));
			}
		}
		$this->view();
	}
	
	public function do_update() {
		$updateVersion = $this->post('updateVersion');
		if (!$updateVersion) {
			$this->error->add(t('Invalid version'));
		} else {
			$upd = ApplicationUpdate::getByVersionNumber($updateVersion);
		}
		
		if (!is_object($upd)) {
			$this->error->add(t('Invalid version'));
		} else {
			if (version_compare($upd->getUpdateVersion(), APP_VERSION, '<=')) {
				$this->error->add(t('You may only apply updates with a greater version number than the version you are currently running.'));
			}
		}
		
		if (!$this->error->has()) {
			$resp = $upd->apply();
			if ($resp !== true) {
				switch($resp) {
					case ApplicationUpdate::E_UPDATE_WRITE_CONFIG:
						$this->error->add(t('Unable to write to config/site.php. You must make config/site.php writable in order to upgrade in this manner.'));
						break;
				}
			} else {
				header('Location: ' . BASE_URL . REL_DIR_FILES_TOOLS_REQUIRED .  '/upgrade?source=dashboard_update');
				exit;
			}
		}
		$this->view();

	}
}