mirror of
https://github.com/Dolibarr/dolibarr.git
synced 2026-03-10 12:26:56 +01:00
246 lines
8.2 KiB
PHP
246 lines
8.2 KiB
PHP
<?php
|
|
/* Copyright (C) 2014-2017 Laurent Destailleur <eldy@users.sourceforge.net>
|
|
* Copyright (C) 2024 MDW <mdeweerd@users.noreply.github.com>
|
|
* Copyright (C) 2024 Frédéric France <frederic.france@free.fr>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
* or see https://www.gnu.org/
|
|
*/
|
|
|
|
/**
|
|
* \file htdocs/core/actions_setmoduleoptions.inc.php
|
|
* \brief Code for actions on setting notes of object page
|
|
*/
|
|
|
|
// $error must have been initialized to 0
|
|
// $action must be defined
|
|
// $arrayofparameters must be set to list of parameters to update for action 'update' on constants
|
|
// $nomessageinupdate can be set to 1
|
|
// $nomessageinsetmoduleoptions can be set to 1
|
|
// $formSetup may be defined
|
|
|
|
/**
|
|
* @var Conf $conf
|
|
* @var DoliDB $db
|
|
* @var FormSetup $formSetup
|
|
* @var Translate $langs
|
|
* @var User $user
|
|
*
|
|
* @var string $action
|
|
* @var int $error
|
|
* @var ?int $nomessageinupdate
|
|
* @var ?int $nomessageinsetmoduleoptions
|
|
* @var ?string $modulepart
|
|
* @var ?string $websitetemplateconf
|
|
* @var ?array<string,mixed> $arrayofparameters
|
|
*/
|
|
|
|
'
|
|
@phan-var-force FormSetup $formSetup
|
|
';
|
|
|
|
if (($action == 'update' || !empty($websitetemplateconf)) && !empty($formSetup) && is_object($formSetup) && !empty($user->admin)) {
|
|
$formSetup->saveConfFromPost();
|
|
return;
|
|
}
|
|
|
|
$upload_dir = null;
|
|
|
|
if (($action == 'update' || !empty($websitetemplateconf)) && !empty($arrayofparameters) && is_array($arrayofparameters) && !empty($user->admin)) {
|
|
$db->begin();
|
|
|
|
foreach ($arrayofparameters as $key => $val) {
|
|
// Modify constant only if key was posted (avoid resetting key to the null value)
|
|
if (GETPOSTISSET($key)) {
|
|
if (isset($val['type']) && preg_match('/category:/', $val['type'])) {
|
|
if (GETPOSTINT($key) == '-1') {
|
|
$val_const = '';
|
|
} else {
|
|
$val_const = GETPOSTINT($key);
|
|
}
|
|
} elseif (isset($val['type']) && $val['type'] == 'html') {
|
|
$val_const = GETPOST($key, 'restricthtml');
|
|
} else {
|
|
$val_const = GETPOST($key, 'alpha');
|
|
}
|
|
|
|
$result = dolibarr_set_const($db, $key, $val_const, 'chaine', 0, '', $conf->entity);
|
|
if ($result < 0) {
|
|
$error++;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!$error) {
|
|
$db->commit();
|
|
if (empty($nomessageinupdate)) {
|
|
setEventMessages($langs->trans("SetupSaved"), null, 'mesgs');
|
|
}
|
|
} else {
|
|
$db->rollback();
|
|
if (empty($nomessageinupdate)) {
|
|
setEventMessages($langs->trans("SetupNotSaved"), null, 'errors');
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($action == 'deletefile' && $modulepart == 'doctemplates' && !empty($user->admin)) {
|
|
include_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
|
|
$keyforuploaddir = GETPOST('keyforuploaddir', 'aZ09');
|
|
$listofdir = explode(',', preg_replace('/[\r\n]+/', ',', trim(getDolGlobalString($keyforuploaddir))));
|
|
|
|
foreach ($listofdir as $key => $tmpdir) {
|
|
$tmpdir = preg_replace('/DOL_DATA_ROOT\/*/', '', $tmpdir); // Clean string if we found a hardcoded DOL_DATA_ROOT
|
|
if (!$tmpdir) {
|
|
unset($listofdir[$key]);
|
|
continue;
|
|
}
|
|
$tmpdir = DOL_DATA_ROOT.'/'.$tmpdir; // Complete with DOL_DATA_ROOT. Only files into DOL_DATA_ROOT can be reach/set
|
|
if (!is_dir($tmpdir)) {
|
|
if (empty($nomessageinsetmoduleoptions)) {
|
|
setEventMessages($langs->trans("ErrorDirNotFound", $tmpdir), null, 'warnings');
|
|
}
|
|
} else {
|
|
$upload_dir = $tmpdir;
|
|
break; // So we take the first directory found into setup $conf->global->$keyforuploaddir
|
|
}
|
|
}
|
|
|
|
$filetodelete = $tmpdir.'/'.GETPOST('file');
|
|
$result = dol_delete_file($filetodelete);
|
|
if ($result > 0) {
|
|
setEventMessages($langs->trans("FileWasRemoved", GETPOST('file')), null, 'mesgs');
|
|
}
|
|
}
|
|
|
|
// Define constants for submodules that contains parameters (forms with param1, param2, ... and value1, value2, ...)
|
|
if ($action == 'setModuleOptions' && !empty($user->admin)) {
|
|
$db->begin();
|
|
|
|
// Process common param fields
|
|
if (is_array($_POST)) {
|
|
foreach ($_POST as $key => $val) {
|
|
$reg = array();
|
|
if (preg_match('/^param(\d*)$/', $key, $reg)) { // Works for POST['param'], POST['param1'], POST['param2'], ...
|
|
$param = GETPOST("param".$reg[1], 'aZ09');
|
|
$value = GETPOST("value".$reg[1], 'alpha');
|
|
if ($param) {
|
|
$res = dolibarr_set_const($db, $param, $value, 'chaine', 0, '', $conf->entity);
|
|
if (!($res > 0)) {
|
|
$error++;
|
|
}
|
|
|
|
// Case we modify the list of directories for ODT templases, we want to be sure directory exists
|
|
if (preg_match('/_ADDON_PDF_ODT_PATH$/', $param) && preg_match('/^DOL_DATA_ROOT/', $value)) {
|
|
$tmpdir = preg_replace('/^DOL_DATA_ROOT/', DOL_DATA_ROOT, $value);
|
|
dol_mkdir($tmpdir, DOL_DATA_ROOT);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Process upload fields
|
|
if (GETPOST('upload', 'alpha') && GETPOST('keyforuploaddir', 'aZ09')) {
|
|
include_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
|
|
$keyforuploaddir = GETPOST('keyforuploaddir', 'aZ09');
|
|
$listofdir = explode(',', preg_replace('/[\r\n]+/', ',', trim(getDolGlobalString($keyforuploaddir))));
|
|
|
|
foreach ($listofdir as $key => $tmpdir) {
|
|
$tmpdir = trim($tmpdir);
|
|
$tmpdir = preg_replace('/DOL_DATA_ROOT\/*/', '', $tmpdir); // Clean string if we found a hardcoded DOL_DATA_ROOT
|
|
if (!$tmpdir) {
|
|
unset($listofdir[$key]);
|
|
continue;
|
|
}
|
|
$tmpdir = DOL_DATA_ROOT.'/'.$tmpdir; // Complete with DOL_DATA_ROOT. Only files into DOL_DATA_ROOT can be reach/set
|
|
if (!is_dir($tmpdir)) {
|
|
if (empty($nomessageinsetmoduleoptions)) {
|
|
setEventMessages($langs->trans("ErrorDirNotFound", $tmpdir), null, 'warnings');
|
|
}
|
|
} else {
|
|
$upload_dir = $tmpdir;
|
|
break; // So we take the first directory found into setup $conf->global->$keyforuploaddir
|
|
}
|
|
}
|
|
|
|
// Restrict uploads for ODT template setup pages.
|
|
if (preg_match('/_ADDON_PDF_ODT_PATH$/', $keyforuploaddir) && !empty($_FILES['uploadfile'])) {
|
|
$allowedext = array('odt', 'ods');
|
|
$allowedmimes = array(
|
|
'application/vnd.oasis.opendocument.text',
|
|
'application/vnd.oasis.opendocument.spreadsheet',
|
|
'application/zip',
|
|
'application/x-zip-compressed',
|
|
'application/octet-stream'
|
|
);
|
|
$files = $_FILES['uploadfile'];
|
|
if (!is_array($files['name'])) {
|
|
foreach ($files as $key => &$val) {
|
|
$val = array($val);
|
|
}
|
|
unset($val);
|
|
}
|
|
foreach ($files['name'] as $idx => $filename) {
|
|
if (empty($filename)) {
|
|
continue;
|
|
}
|
|
|
|
$extension = strtolower(pathinfo((string) $filename, PATHINFO_EXTENSION));
|
|
if (!in_array($extension, $allowedext, true)) {
|
|
$error++;
|
|
setEventMessages($langs->trans("ErrorFileNotUploaded").' (Only .odt/.ods templates are allowed)', null, 'errors');
|
|
dol_syslog(__FILE__." ODT template upload refused on extension filename=".$filename, LOG_WARNING);
|
|
break;
|
|
}
|
|
|
|
$detectedmime = '';
|
|
if (!empty($files['tmp_name'][$idx]) && function_exists('finfo_open')) {
|
|
$finfo = finfo_open(FILEINFO_MIME_TYPE);
|
|
if ($finfo) {
|
|
$detectedmime = (string) finfo_file($finfo, $files['tmp_name'][$idx]);
|
|
finfo_close($finfo);
|
|
}
|
|
}
|
|
if (!empty($detectedmime) && !in_array(strtolower($detectedmime), $allowedmimes, true)) {
|
|
$error++;
|
|
setEventMessages($langs->trans("ErrorFileNotUploaded").' (Invalid MIME type for ODT/ODS template)', null, 'errors');
|
|
dol_syslog(__FILE__." ODT template upload refused on mime filename=".$filename." mime=".$detectedmime, LOG_WARNING);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($upload_dir && !$error) {
|
|
$result = dol_add_file_process($upload_dir, 1, 1, 'uploadfile', '');
|
|
if ($result <= 0) {
|
|
$error++;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!$error) {
|
|
$db->commit();
|
|
if (empty($nomessageinsetmoduleoptions)) {
|
|
setEventMessages($langs->trans("SetupSaved"), null, 'mesgs');
|
|
}
|
|
} else {
|
|
$db->rollback();
|
|
if (empty($nomessageinsetmoduleoptions)) {
|
|
setEventMessages($langs->trans("SetupNotSaved"), null, 'errors');
|
|
}
|
|
}
|
|
}
|