PageRenderTime 54ms CodeModel.GetById 23ms RepoModel.GetById 0ms app.codeStats 0ms

/upload/admin/controller/catalog/download.php

https://github.com/opencartlite/opencart
PHP | 530 lines | 392 code | 136 blank | 2 comment | 96 complexity | 77894606a79b5c3a334dc4c202e0876f MD5 | raw file
Possible License(s): MPL-2.0-no-copyleft-exception, GPL-3.0
  1. <?php
  2. class ControllerCatalogDownload extends Controller {
  3. private $error = array();
  4. public function index() {
  5. $this->data += $this->language->load('catalog/download');
  6. $this->document->setTitle($this->language->get('heading_title'));
  7. $this->load->model('catalog/download');
  8. $this->getList();
  9. }
  10. public function insert() {
  11. $this->data += $this->language->load('catalog/download');
  12. $this->document->setTitle($this->language->get('heading_title'));
  13. $this->load->model('catalog/download');
  14. if (($this->request->server['REQUEST_METHOD'] == 'POST') && $this->validateForm()) {
  15. $this->model_catalog_download->addDownload($this->request->post);
  16. $this->session->data['success'] = $this->language->get('text_success');
  17. $url = '';
  18. if (isset($this->request->get['sort'])) {
  19. $url .= '&sort=' . $this->request->get['sort'];
  20. }
  21. if (isset($this->request->get['order'])) {
  22. $url .= '&order=' . $this->request->get['order'];
  23. }
  24. if (isset($this->request->get['page'])) {
  25. $url .= '&page=' . $this->request->get['page'];
  26. }
  27. $this->redirect($this->url->link('catalog/download', 'token=' . $this->session->data['token'] . $url, 'SSL'));
  28. }
  29. $this->getForm();
  30. }
  31. public function update() {
  32. $this->data += $this->language->load('catalog/download');
  33. $this->document->setTitle($this->language->get('heading_title'));
  34. $this->load->model('catalog/download');
  35. if (($this->request->server['REQUEST_METHOD'] == 'POST') && $this->validateForm()) {
  36. $this->model_catalog_download->editDownload($this->request->get['download_id'], $this->request->post);
  37. $this->session->data['success'] = $this->language->get('text_success');
  38. $url = '';
  39. if (isset($this->request->get['sort'])) {
  40. $url .= '&sort=' . $this->request->get['sort'];
  41. }
  42. if (isset($this->request->get['order'])) {
  43. $url .= '&order=' . $this->request->get['order'];
  44. }
  45. if (isset($this->request->get['page'])) {
  46. $url .= '&page=' . $this->request->get['page'];
  47. }
  48. $this->redirect($this->url->link('catalog/download', 'token=' . $this->session->data['token'] . $url, 'SSL'));
  49. }
  50. $this->getForm();
  51. }
  52. public function delete() {
  53. $this->data += $this->language->load('catalog/download');
  54. $this->document->setTitle($this->language->get('heading_title'));
  55. $this->load->model('catalog/download');
  56. if (isset($this->request->post['selected']) && $this->validateDelete()) {
  57. foreach ($this->request->post['selected'] as $download_id) {
  58. $this->model_catalog_download->deleteDownload($download_id);
  59. }
  60. $this->session->data['success'] = $this->language->get('text_success');
  61. $url = '';
  62. if (isset($this->request->get['sort'])) {
  63. $url .= '&sort=' . $this->request->get['sort'];
  64. }
  65. if (isset($this->request->get['order'])) {
  66. $url .= '&order=' . $this->request->get['order'];
  67. }
  68. if (isset($this->request->get['page'])) {
  69. $url .= '&page=' . $this->request->get['page'];
  70. }
  71. $this->redirect($this->url->link('catalog/download', 'token=' . $this->session->data['token'] . $url, 'SSL'));
  72. }
  73. $this->getList();
  74. }
  75. protected function getList() {
  76. if (isset($this->request->get['sort'])) {
  77. $sort = $this->request->get['sort'];
  78. } else {
  79. $sort = 'dd.name';
  80. }
  81. if (isset($this->request->get['order'])) {
  82. $order = $this->request->get['order'];
  83. } else {
  84. $order = 'ASC';
  85. }
  86. if (isset($this->request->get['page'])) {
  87. $page = $this->request->get['page'];
  88. } else {
  89. $page = 1;
  90. }
  91. $url = '';
  92. if (isset($this->request->get['sort'])) {
  93. $url .= '&sort=' . $this->request->get['sort'];
  94. }
  95. if (isset($this->request->get['order'])) {
  96. $url .= '&order=' . $this->request->get['order'];
  97. }
  98. if (isset($this->request->get['page'])) {
  99. $url .= '&page=' . $this->request->get['page'];
  100. }
  101. $this->data['breadcrumbs'] = array();
  102. $this->data['breadcrumbs'][] = array(
  103. 'text' => $this->language->get('text_home'),
  104. 'href' => $this->url->link('common/home', 'token=' . $this->session->data['token'], 'SSL')
  105. );
  106. $this->data['breadcrumbs'][] = array(
  107. 'text' => $this->language->get('heading_title'),
  108. 'href' => $this->url->link('catalog/download', 'token=' . $this->session->data['token'] . $url, 'SSL')
  109. );
  110. $this->data['insert'] = $this->url->link('catalog/download/insert', 'token=' . $this->session->data['token'] . $url, 'SSL');
  111. $this->data['delete'] = $this->url->link('catalog/download/delete', 'token=' . $this->session->data['token'] . $url, 'SSL');
  112. $this->data['downloads'] = array();
  113. $data = array(
  114. 'sort' => $sort,
  115. 'order' => $order,
  116. 'start' => ($page - 1) * $this->config->get('config_admin_limit'),
  117. 'limit' => $this->config->get('config_admin_limit')
  118. );
  119. $download_total = $this->model_catalog_download->getTotalDownloads();
  120. $results = $this->model_catalog_download->getDownloads($data);
  121. foreach ($results as $result) {
  122. $action = array();
  123. $action[] = array(
  124. 'text' => $this->language->get('text_edit'),
  125. 'href' => $this->url->link('catalog/download/update', 'token=' . $this->session->data['token'] . '&download_id=' . $result['download_id'] . $url, 'SSL')
  126. );
  127. $this->data['downloads'][] = array(
  128. 'download_id' => $result['download_id'],
  129. 'name' => $result['name'],
  130. 'remaining' => $result['remaining'],
  131. 'selected' => isset($this->request->post['selected']) && in_array($result['download_id'], $this->request->post['selected']),
  132. 'action' => $action
  133. );
  134. }
  135. if (isset($this->error['warning'])) {
  136. $this->data['error_warning'] = $this->error['warning'];
  137. } else {
  138. $this->data['error_warning'] = '';
  139. }
  140. if (isset($this->session->data['success'])) {
  141. $this->data['success'] = $this->session->data['success'];
  142. unset($this->session->data['success']);
  143. } else {
  144. $this->data['success'] = '';
  145. }
  146. $url = '';
  147. if ($order == 'ASC') {
  148. $url .= '&order=DESC';
  149. } else {
  150. $url .= '&order=ASC';
  151. }
  152. if (isset($this->request->get['page'])) {
  153. $url .= '&page=' . $this->request->get['page'];
  154. }
  155. $this->data['sort_name'] = $this->url->link('catalog/download', 'token=' . $this->session->data['token'] . '&sort=dd.name' . $url, 'SSL');
  156. $this->data['sort_remaining'] = $this->url->link('catalog/download', 'token=' . $this->session->data['token'] . '&sort=d.remaining' . $url, 'SSL');
  157. $url = '';
  158. if (isset($this->request->get['sort'])) {
  159. $url .= '&sort=' . $this->request->get['sort'];
  160. }
  161. if (isset($this->request->get['order'])) {
  162. $url .= '&order=' . $this->request->get['order'];
  163. }
  164. $pagination = new Pagination();
  165. $pagination->total = $download_total;
  166. $pagination->page = $page;
  167. $pagination->limit = $this->config->get('config_admin_limit');
  168. $pagination->text = $this->language->get('text_pagination');
  169. $pagination->url = $this->url->link('catalog/download', 'token=' . $this->session->data['token'] . $url . '&page={page}', 'SSL');
  170. $this->data['pagination'] = $pagination->render();
  171. $this->data['sort'] = $sort;
  172. $this->data['order'] = $order;
  173. $this->template = 'catalog/download_list.tpl';
  174. $this->children = array(
  175. 'common/header',
  176. 'common/footer'
  177. );
  178. $this->response->setOutput($this->render());
  179. }
  180. protected function getForm() {
  181. if (isset($this->error['warning'])) {
  182. $this->data['error_warning'] = $this->error['warning'];
  183. } else {
  184. $this->data['error_warning'] = '';
  185. }
  186. if (isset($this->error['name'])) {
  187. $this->data['error_name'] = $this->error['name'];
  188. } else {
  189. $this->data['error_name'] = array();
  190. }
  191. if (isset($this->error['filename'])) {
  192. $this->data['error_filename'] = $this->error['filename'];
  193. } else {
  194. $this->data['error_filename'] = '';
  195. }
  196. if (isset($this->error['mask'])) {
  197. $this->data['error_mask'] = $this->error['mask'];
  198. } else {
  199. $this->data['error_mask'] = '';
  200. }
  201. $url = '';
  202. if (isset($this->request->get['sort'])) {
  203. $url .= '&sort=' . $this->request->get['sort'];
  204. }
  205. if (isset($this->request->get['order'])) {
  206. $url .= '&order=' . $this->request->get['order'];
  207. }
  208. if (isset($this->request->get['page'])) {
  209. $url .= '&page=' . $this->request->get['page'];
  210. }
  211. $this->data['breadcrumbs'] = array();
  212. $this->data['breadcrumbs'][] = array(
  213. 'text' => $this->language->get('text_home'),
  214. 'href' => $this->url->link('common/home', 'token=' . $this->session->data['token'], 'SSL')
  215. );
  216. $this->data['breadcrumbs'][] = array(
  217. 'text' => $this->language->get('heading_title'),
  218. 'href' => $this->url->link('catalog/download', 'token=' . $this->session->data['token'] . $url, 'SSL')
  219. );
  220. if (!isset($this->request->get['download_id'])) {
  221. $this->data['action'] = $this->url->link('catalog/download/insert', 'token=' . $this->session->data['token'] . $url, 'SSL');
  222. } else {
  223. $this->data['action'] = $this->url->link('catalog/download/update', 'token=' . $this->session->data['token'] . '&download_id=' . $this->request->get['download_id'] . $url, 'SSL');
  224. }
  225. $this->data['cancel'] = $this->url->link('catalog/download', 'token=' . $this->session->data['token'] . $url, 'SSL');
  226. $this->load->model('localisation/language');
  227. $this->data['languages'] = $this->model_localisation_language->getLanguages();
  228. if (isset($this->request->get['download_id']) && ($this->request->server['REQUEST_METHOD'] != 'POST')) {
  229. $download_info = $this->model_catalog_download->getDownload($this->request->get['download_id']);
  230. }
  231. $this->data['token'] = $this->session->data['token'];
  232. if (isset($this->request->get['download_id'])) {
  233. $this->data['download_id'] = $this->request->get['download_id'];
  234. } else {
  235. $this->data['download_id'] = 0;
  236. }
  237. if (isset($this->request->post['download_description'])) {
  238. $this->data['download_description'] = $this->request->post['download_description'];
  239. } elseif (isset($this->request->get['download_id'])) {
  240. $this->data['download_description'] = $this->model_catalog_download->getDownloadDescriptions($this->request->get['download_id']);
  241. } else {
  242. $this->data['download_description'] = array();
  243. }
  244. if (isset($this->request->post['filename'])) {
  245. $this->data['filename'] = $this->request->post['filename'];
  246. } elseif (!empty($download_info)) {
  247. $this->data['filename'] = $download_info['filename'];
  248. } else {
  249. $this->data['filename'] = '';
  250. }
  251. if (isset($this->request->post['mask'])) {
  252. $this->data['mask'] = $this->request->post['mask'];
  253. } elseif (!empty($download_info)) {
  254. $this->data['mask'] = $download_info['mask'];
  255. } else {
  256. $this->data['mask'] = '';
  257. }
  258. if (isset($this->request->post['remaining'])) {
  259. $this->data['remaining'] = $this->request->post['remaining'];
  260. } elseif (!empty($download_info)) {
  261. $this->data['remaining'] = $download_info['remaining'];
  262. } else {
  263. $this->data['remaining'] = 1;
  264. }
  265. if (isset($this->request->post['update'])) {
  266. $this->data['update'] = $this->request->post['update'];
  267. } else {
  268. $this->data['update'] = false;
  269. }
  270. $this->template = 'catalog/download_form.tpl';
  271. $this->children = array(
  272. 'common/header',
  273. 'common/footer'
  274. );
  275. $this->response->setOutput($this->render());
  276. }
  277. protected function validateForm() {
  278. if (!$this->user->hasPermission('modify', 'catalog/download')) {
  279. $this->error['warning'] = $this->language->get('error_permission');
  280. }
  281. foreach ($this->request->post['download_description'] as $language_id => $value) {
  282. if ((utf8_strlen($value['name']) < 3) || (utf8_strlen($value['name']) > 64)) {
  283. $this->error['name'][$language_id] = $this->language->get('error_name');
  284. }
  285. }
  286. if ((utf8_strlen($this->request->post['filename']) < 3) || (utf8_strlen($this->request->post['filename']) > 128)) {
  287. $this->error['filename'] = $this->language->get('error_filename');
  288. }
  289. if (!file_exists(DIR_DOWNLOAD . $this->request->post['filename']) && !is_file(DIR_DOWNLOAD . $this->request->post['filename'])) {
  290. $this->error['filename'] = $this->language->get('error_exists');
  291. }
  292. if ((utf8_strlen($this->request->post['mask']) < 3) || (utf8_strlen($this->request->post['mask']) > 128)) {
  293. $this->error['mask'] = $this->language->get('error_mask');
  294. }
  295. if (!$this->error) {
  296. return true;
  297. } else {
  298. return false;
  299. }
  300. }
  301. protected function validateDelete() {
  302. if (!$this->user->hasPermission('modify', 'catalog/download')) {
  303. $this->error['warning'] = $this->language->get('error_permission');
  304. }
  305. $this->load->model('catalog/product');
  306. foreach ($this->request->post['selected'] as $download_id) {
  307. $product_total = $this->model_catalog_product->getTotalProductsByDownloadId($download_id);
  308. if ($product_total) {
  309. $this->error['warning'] = sprintf($this->language->get('error_product'), $product_total);
  310. }
  311. }
  312. if (!$this->error) {
  313. return true;
  314. } else {
  315. return false;
  316. }
  317. }
  318. public function upload() {
  319. $this->data += $this->language->load('sale/order');
  320. $json = array();
  321. if (!$this->user->hasPermission('modify', 'catalog/download')) {
  322. $json['error'] = $this->language->get('error_permission');
  323. }
  324. if (!isset($json['error'])) {
  325. if (!empty($this->request->files['file']['name'])) {
  326. $filename = basename(html_entity_decode($this->request->files['file']['name'], ENT_QUOTES, 'UTF-8'));
  327. if ((utf8_strlen($filename) < 3) || (utf8_strlen($filename) > 128)) {
  328. $json['error'] = $this->language->get('error_filename');
  329. }
  330. // Allowed file extension types
  331. $allowed = array();
  332. $filetypes = explode("\n", $this->config->get('config_file_extension_allowed'));
  333. foreach ($filetypes as $filetype) {
  334. $allowed[] = trim($filetype);
  335. }
  336. if (!in_array(substr(strrchr($filename, '.'), 1), $allowed)) {
  337. $json['error'] = $this->language->get('error_filetype');
  338. }
  339. // Allowed file mime types
  340. $allowed = array();
  341. $filetypes = explode("\n", $this->config->get('config_file_mime_allowed'));
  342. foreach ($filetypes as $filetype) {
  343. $allowed[] = trim($filetype);
  344. }
  345. if (!in_array($this->request->files['file']['type'], $allowed)) {
  346. $json['error'] = $this->language->get('error_filetype');
  347. }
  348. if ($this->request->files['file']['error'] != UPLOAD_ERR_OK) {
  349. $json['error'] = $this->language->get('error_upload_' . $this->request->files['file']['error']);
  350. }
  351. if ($this->request->files['file']['error'] != UPLOAD_ERR_OK) {
  352. $json['error'] = $this->language->get('error_upload_' . $this->request->files['file']['error']);
  353. }
  354. } else {
  355. $json['error'] = $this->language->get('error_upload');
  356. }
  357. }
  358. if (!isset($json['error'])) {
  359. if (is_uploaded_file($this->request->files['file']['tmp_name']) && file_exists($this->request->files['file']['tmp_name'])) {
  360. $ext = md5(mt_rand());
  361. $json['filename'] = $filename . '.' . $ext;
  362. $json['mask'] = $filename;
  363. move_uploaded_file($this->request->files['file']['tmp_name'], DIR_DOWNLOAD . $filename . '.' . $ext);
  364. }
  365. $json['success'] = $this->language->get('text_upload');
  366. }
  367. $this->response->setOutput(json_encode($json));
  368. }
  369. public function autocomplete() {
  370. $json = array();
  371. if (isset($this->request->get['filter_name'])) {
  372. $this->load->model('catalog/download');
  373. $data = array(
  374. 'filter_name' => $this->request->get['filter_name'],
  375. 'start' => 0,
  376. 'limit' => 20
  377. );
  378. $results = $this->model_catalog_download->getDownloads($data);
  379. foreach ($results as $result) {
  380. $json[] = array(
  381. 'download_id' => $result['download_id'],
  382. 'name' => strip_tags(html_entity_decode($result['name'], ENT_QUOTES, 'UTF-8'))
  383. );
  384. }
  385. }
  386. $sort_order = array();
  387. foreach ($json as $key => $value) {
  388. $sort_order[$key] = $value['name'];
  389. }
  390. array_multisort($sort_order, SORT_ASC, $json);
  391. $this->response->setOutput(json_encode($json));
  392. }
  393. }
  394. ?>