ThemeManager.php | searchcode

/plugins/admin/ThemeManager.php

https://code.google.com/p/enanocms/
PHP | 428 lines | 352 code | 52 blank | 24 comment | 70 complexity | 3229ba10bc39b37ff5babb31c66dc192 MD5 | raw file
Possible License(s): GPL-2.0

<?php

/*
 * Enano - an open-source CMS capable of wiki functions, Drupal-like sidebar blocks, and everything in between
 * Copyright (C) 2006-2009 Dan Fuhry
 *
 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.
 */

function page_Admin_ThemeManager($force_no_json = false)
{
	global $db, $session, $paths, $template, $plugins; // Common objects
	global $lang;
	global $cache;
	
	if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )
	{
		$login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);
		echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';
		echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';
		return;
	}
	
	$system_themes =& $template->system_themes;
	
	// Obtain the list of themes (both available and already installed) and the styles available for each
	$dh = @opendir(ENANO_ROOT . '/themes');
	if ( !$dh )
		die('Couldn\'t open themes directory');
	$themes = array();
	while ( $dr = @readdir($dh) )
	{
		if ( $dr == '.' || $dr == '..' )
			continue;
		if ( !is_dir(ENANO_ROOT . "/themes/$dr") )
			continue;
		if ( !file_exists(ENANO_ROOT . "/themes/$dr/theme.cfg") || !is_dir(ENANO_ROOT . "/themes/$dr/css") )
			continue;
		$cdh = @opendir(ENANO_ROOT . "/themes/$dr/css");
		if ( !$cdh )
			continue;
		
		require(ENANO_ROOT . "/themes/$dr/theme.cfg");
		global $theme;
		
		$themes[$dr] = array(
				'css' => array(),
				'theme_name' => $theme['theme_name']
			);
		while ( $cdr = @readdir($cdh) )
		{
			if ( $cdr == '.' || $cdr == '..' )
				continue;
			if ( preg_match('/\.css$/i', $cdr) )
				$themes[$dr]['css'][] = substr($cdr, 0, -4);
		}
	}
	
	// Decide which themes are not installed
	$installable = array_flip(array_keys($themes));
	// FIXME: sanitize directory names or check with preg_match()
	$where_clause = 'theme_id = \'' . implode('\' OR theme_id = \'', array_flip($installable)) . '\'';
	$q = $db->sql_query('SELECT theme_id, theme_name, enabled FROM ' . table_prefix . "themes WHERE $where_clause;");
	if ( !$q )
		$db->_die();
	
	while ( $row = $db->fetchrow() )
	{
		$tid =& $row['theme_id'];
		unset($installable[$tid]);
		$themes[$tid]['theme_name'] = $row['theme_name'];
		$themes[$tid]['enabled'] = ( $row['enabled'] == 1 );
	}
	
	foreach ( $system_themes as $st )
	{
		unset($installable[$st]);
	}
	
	$installable = array_flip($installable);
	
	// AJAX code
	if ( $paths->getParam(0) === 'action.json' && !$force_no_json )
	{
		return ajaxServlet_Admin_ThemeManager($themes);
	}
	
	// List installed themes
	?>
	<div style="float: right;">
		<a href="#" id="systheme_toggler" onclick="ajaxToggleSystemThemes(); return false;"><?php echo $lang->get('acptm_btn_system_themes_show'); ?></a>
	</div>
	<?php
	echo '<h3>' . $lang->get('acptm_heading_edit_themes') . '</h3>';
	echo '<div id="theme_list_edit">';
	foreach ( $themes as $theme_id => $theme_data )
	{
		if ( in_array($theme_id, $installable) )
			continue;
		if ( file_exists(ENANO_ROOT . "/themes/$theme_id/preview.png") )
		{
			$preview_path = scriptPath . "/themes/$theme_id/preview.png";
		}
		else
		{
			$preview_path = scriptPath . "/images/themepreview.png";
		}
		$d = ( @$theme_data['enabled'] ) ? '' : ' themebutton_theme_disabled';
		$st = ( in_array($theme_id, $system_themes) ) ? ' themebutton_theme_system' : '';
		echo '<div class="themebutton' . $st . '' . $d . '" id="themebtn_edit_' . $theme_id . '" style="background-image: url(' . $preview_path . ');">';
		if ( in_array($theme_id, $system_themes) )
		{
			echo   '<a class="tb-inner" href="#" onclick="return false;">
								' . $lang->get('acptm_btn_theme_system') . '
								<span class="themename">' . htmlspecialchars($theme_data['theme_name']) . '</span>
							</a>';
		}
		else
		{
			echo   '<a class="tb-inner" href="#" onclick="ajaxEditTheme(\'' . $theme_id . '\'); return false;">
								' . $lang->get('acptm_btn_theme_edit') . '
								<span class="themename">' . htmlspecialchars($theme_data['theme_name']) . '</span>
							</a>';
		}
		echo '</div>';
	}
	echo '</div>';
	echo '<span class="menuclear"></span>';
	
	if ( count($installable) > 0 )
	{
		echo '<h3>' . $lang->get('acptm_heading_install_themes') . '</h3>';
	
		echo '<div id="theme_list_install">';
		foreach ( $installable as $i => $theme_id )
		{
			if ( file_exists(ENANO_ROOT . "/themes/$theme_id/preview.png") )
			{
				$preview_path = scriptPath . "/themes/$theme_id/preview.png";
			}
			else
			{
				$preview_path = scriptPath . "/images/themepreview.png";
			}
			echo '<div class="themebutton" id="themebtn_install_' . $theme_id . '" enano:themename="' . htmlspecialchars($themes[$theme_id]['theme_name']) . '" style="background-image: url(' . $preview_path . ');">';
			echo   '<a class="tb-inner" href="#" onclick="ajaxInstallTheme(\'' . $theme_id . '\'); return false;">
								' . $lang->get('acptm_btn_theme_install') . '
								<span class="themename">' . htmlspecialchars($themes[$theme_id]['theme_name']) . '</span>
							</a>';
			echo '</div>';
		}
		echo '</div>';
		echo '<span class="menuclear"></span>';
	}
}

function ajaxServlet_Admin_ThemeManager(&$themes)
{
	global $db, $session, $paths, $template, $plugins; // Common objects
	global $lang;
	global $cache;
	
	if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )
	{
		$login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);
		echo '<h3>' . $lang->get('adm_err_not_auth_title') . '</h3>';
		echo '<p>' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '</p>';
		return;
	}
	
	if ( !isset($_POST['r']) )
		return false;
	
	try
	{
		$request = enano_json_decode($_POST['r']);
	}
	catch ( Exception $e )
	{
		die('Exception in JSON parser, probably invalid input.');
	}
	
	if ( !isset($request['mode']) )
	{
		die('No mode specified in JSON request.');
	}
	
	switch ( $request['mode'] )
	{
		case 'fetch_theme':
			$theme_id = $db->escape($request['theme_id']);
			if ( empty($theme_id) )
				die('Invalid theme_id');
			
			$q = $db->sql_query("SELECT theme_id, theme_name, default_style, enabled, group_policy, group_list FROM " . table_prefix . "themes WHERE theme_id = '$theme_id';");
			if ( !$q )
				$db->die_json();
			
			if ( $db->numrows() < 1 )
				die('BUG: no theme with that theme_id installed.');
			
			$row = $db->fetchrow();
			$row['enabled'] = ( $row['enabled'] == 1 );
			$row['css'] = @$themes[$theme_id]['css'];
			$row['default_style'] = preg_replace('/\.css$/', '', $row['default_style']);
			$row['is_default'] = ( getConfig('theme_default') === $theme_id );
			$row['group_list'] = ( empty($row['group_list']) ) ? array() : enano_json_decode($row['group_list']);
			
			// Build a list of group names
			$row['group_names'] = array();
			$q = $db->sql_query('SELECT group_id, group_name FROM ' . table_prefix . 'groups;');
			if ( !$q )
				$db->die_json();
			while ( $gr = $db->fetchrow() )
			{
				$row['group_names'][ intval($gr['group_id']) ] = $gr['group_name'];
			}
			$db->free_result();
			
			// Build a list of usernames
			$row['usernames'] = array();
			foreach ( $row['group_list'] as $el )
			{
				if ( !preg_match('/^u:([0-9]+)$/', $el, $match) )
					continue;
				$uid =& $match[1];
				$q = $db->sql_query('SELECT username FROM ' . table_prefix . "users WHERE user_id = $uid;");
				if ( !$q )
					$db->die_json();
				if ( $db->numrows() < 1 )
				{
					$db->free_result();
					continue;
				}
				list($username) = $db->fetchrow_num();
				$row['usernames'][$uid] = $username;
				$db->free_result();
			}
			
			echo enano_json_encode($row);
			break;
		case 'uid_lookup':
			$username = @$request['username'];
			if ( empty($username) )
			{
				die(enano_json_encode(array(
						'mode' => 'error',
						'error' => $lang->get('acptm_err_invalid_username')
					)));
			}
			$username = $db->escape(strtolower($username));
			$q = $db->sql_query('SELECT user_id, username FROM ' . table_prefix . "users WHERE " . ENANO_SQLFUNC_LOWERCASE . "(username) = '$username';");
			if ( !$q )
				$db->die_json();
			
			if ( $db->numrows() < 1 )
			{
				die(enano_json_encode(array(
						'mode' => 'error',
						'error' => $lang->get('acptm_err_username_not_found')
					)));
			}
			
			list($uid, $username_real) = $db->fetchrow_num();
			$db->free_result();
			
			echo enano_json_encode(array(
					'uid' => $uid,
					'username' => $username_real
				));
			break;
		case 'save_theme':
			if ( !isset($request['theme_data']) )
			{
				die(enano_json_encode(array(
						'mode' => 'error',
						'error' => 'No theme data in request'
					)));
			}
			$theme_data =& $request['theme_data'];
			// Perform integrity check on theme data
			$chk_theme_exists = isset($themes[@$theme_data['theme_id']]);
			$theme_data['theme_name'] = trim(@$theme_data['theme_name']);
			$chk_name_good = !empty($theme_data['theme_name']);
			$chk_policy_good = in_array(@$theme_data['group_policy'], array('allow_all', 'whitelist', 'blacklist'));
			$chk_grouplist_good = true;
			foreach ( $theme_data['group_list'] as $acl_entry )
			{
				if ( !preg_match('/^(u|g):[0-9]+$/', $acl_entry) )
				{
					$chk_grouplist_good = false;
					break;
				}
			}
			$chk_style_good = @in_array(@$theme_data['default_style'], @$themes[@$theme_data['theme_id']]['css']);
			if ( !$chk_theme_exists || !$chk_name_good || !$chk_policy_good || !$chk_grouplist_good || !$chk_style_good )
			{
				die(enano_json_encode(array(
						'mode' => 'error',
						'error' => $lang->get('acptm_err_save_validation_failed')
					)));
			}
			
			$enable = ( $theme_data['enabled'] ) ? '1' : '0';
			$theme_default = getConfig('theme_default');
			$warn_default = ( $theme_default === $theme_data['theme_id'] || $theme_data['make_default'] ) ?
												' ' . $lang->get('acptm_warn_access_with_default') . ' ' :
												' ';
			if ( $enable == 0 && ( $theme_default === $theme_data['theme_id'] || $theme_data['make_default'] ) )
			{
				$enable = '1';
				$warn_default .= '<b>' . $lang->get('acptm_warn_cant_disable_default') . '</b>';
			}
			
			// We're good. Update the theme...
			$q = $db->sql_query('UPDATE ' . table_prefix . 'themes SET
 															theme_name = \'' . $db->escape($theme_data['theme_name']) . '\',
 															default_style = \'' . $db->escape($theme_data['default_style']) . '\',
 															group_list = \'' . $db->escape(enano_json_encode($theme_data['group_list'])) . '\',
 															group_policy = \'' . $db->escape($theme_data['group_policy']) . '\',
 															enabled = ' . $enable . '
 														WHERE theme_id = \'' . $db->escape($theme_data['theme_id']) . '\';');
			if ( !$q )
				$db->die_json();
			
			if ( $theme_data['make_default'] && !defined('ENANO_DEMO_MODE') )
			{
				setConfig('theme_default', $theme_data['theme_id']);
			}
			
			$cache->purge('themes');
			
			echo '<div class="info-box"><b>' . $lang->get('acptm_msg_save_success') . '</b>' . $warn_default . '</div>';
			
			page_Admin_ThemeManager(true);
			break;
		case 'install':
			$theme_id =& $request['theme_id'];
			if ( !isset($themes[$theme_id]) )
			{
				die(enano_json_encode(array(
						'mode' => 'error',
						'error' => 'Theme was deleted from themes/ directory or couldn\'t read theme metadata from filesystem'
					)));
			}
			if ( !isset($themes[$theme_id]['css'][0]) )
			{
				die(enano_json_encode(array(
						'mode' => 'error',
						'error' => 'Theme doesn\'t have any files in css/, thus it can\'t be installed. (translators: l10n?)'
					)));
			}
			// build dataset
			$theme_name = $db->escape($themes[$theme_id]['theme_name']);
			$default_style = $db->escape($themes[$theme_id]['css'][0]);
			$theme_id = $db->escape($theme_id);
			
			// insert it
			$q = $db->sql_query('INSERT INTO ' . table_prefix . "themes(theme_id, theme_name, default_style, enabled, group_list, group_policy)\n"
												. "  VALUES( '$theme_id', '$theme_name', '$default_style', 1, '[]', 'allow_all' );");
			if ( !$q )
				$db->die_json();
			
			$cache->purge('themes');
			
			// The response isn't processed unless it's in JSON.
			echo 'Roger that, over and out.';
			
			break;
		case 'uninstall':
			$theme_id =& $request['theme_id'];
			$theme_default = getConfig('theme_default');
			
			// Validation
			if ( !isset($themes[$theme_id]) )
			{
				die(enano_json_encode(array(
						'mode' => 'error',
						'error' => 'Theme was deleted from themes/ directory or couldn\'t read theme metadata from filesystem'
					)));
			}
			
			if ( $theme_id == $theme_default )
			{
				die(enano_json_encode(array(
						'mode' => 'error',
						'error' => $lang->get('acptm_err_uninstalling_default')
					)));
			}
			
			if ( $theme_id == 'oxygen' )
			{
				die(enano_json_encode(array(
						'mode' => 'error',
						'error' => $lang->get('acptm_err_uninstalling_oxygen')
					)));
			}
			
			$theme_id = $db->escape($theme_id);
			
			$q = $db->sql_query('DELETE FROM ' . table_prefix . "themes WHERE theme_id = '$theme_id';");
			if ( !$q )
				$db->die_json();
			
			$cache->purge('themes');
			
			// Change all the users that were on that theme to the default
			$default_style = $template->named_theme_list[$theme_default]['default_style'];
			$default_style = preg_replace('/\.css$/', '', $default_style);
			
			$theme_default = $db->escape($theme_default);
			$default_style = $db->escape($default_style);
			
			$q = $db->sql_query('UPDATE ' . table_prefix . "users SET theme = '$theme_default', style = '$default_style' WHERE theme = '$theme_id';");
			if ( !$q )
				$db->die_json();
			
			echo '<div class="info-box">' . $lang->get('acptm_msg_uninstall_success') . '</div>';
			
			page_Admin_ThemeManager(true);
			break;
	}
}