admin/inst_module.php

   1 <?php
   2 /**********************************************************************
   3     Copyright (C) FrontAccounting, LLC.
   4         Released under the terms of the GNU General Public License, GPL,
   5         as published by the Free Software Foundation, either version 3
   6         of the License, or (at your option) any later version.
   7     This program is distributed in the hope that it will be useful,
   8     but WITHOUT ANY WARRANTY; without even the implied warranty of
   9     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  10     See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
  11 ***********************************************************************/
  12 $page_security = 'SA_CREATEMODULES';
  13 $path_to_root="..";
  14 include_once($path_to_root . "/includes/session.inc");
  15
  16 page(_($help_context = "Install/Activate extensions"));
  17
  18 include_once($path_to_root . "/includes/date_functions.inc");
  19 include_once($path_to_root . "/admin/db/company_db.inc");
  20 include_once($path_to_root . "/admin/db/maintenance_db.inc");
  21 include_once($path_to_root . "/includes/ui.inc");
  22
  23 simple_page_mode(true);
  24
  25 //---------------------------------------------------------------------------------------------
  26 function update_extensions($extensions) {
  27         global $db_connections;
  28
  29         if (!write_extensions($extensions)) {
  30                 display_notification(_("Cannot update system extensions list."));
  31                 return false;
  32         }
  33
  34         // update per company files
  35         $cnt = count($db_connections);
  36         for($i = 0; $i < $cnt; $i++)
  37         {
  38                 $newexts = $extensions;
  39                 // update 'active' status
  40                 $exts = get_company_extensions($i);
  41                 foreach ($exts as $key => $ext)
  42                 {
  43                         if (isset($newexts[$key]))
  44                                 $newexts[$key]['active'] = $exts[$key]['active'];
  45                 }
  46                 if(!write_extensions($newexts, $i))
  47                 {
  48                         display_notification(sprintf(_("Cannot update extensions list for company '%s'."),
  49                                 $db_connections[$i]['name']));
  50                  return false;
  51                 }
  52         }
  53         return true;
  54 }
  55
  56 function check_data($id, $exts)
  57 {
  58         if ($_POST['name'] == "") {
  59                 display_error(_("Extension name cannot be empty."));
  60                 return false;
  61         }
  62         foreach($exts as $n =>$ext) {
  63                 if ($_POST['name'] == $ext['name'] && $id != $n) {
  64                         display_error(_("Extension name have to be unique."));
  65                         return false;
  66                 }
  67         }
  68
  69         if ($_POST['title'] == "") {
  70                 display_error(_("Extension title cannot be empty."));
  71                 return false;
  72         }
  73         if ($_POST['path'] == "") {
  74                 display_error(_("Extension folder name cannot be empty."));
  75                 return false;
  76         }
  77         if ($id == -1 && !is_uploaded_file($_FILES['uploadfile']['tmp_name'])) {
  78                 display_error(_("You have to select plugin file to upload"));
  79                 return false;
  80         }
  81         return true;
  82 }
  83
  84 //---------------------------------------------------------------------------------------------
  85
  86 function handle_submit()
  87 {
  88         global $path_to_root, $db_connections, $selected_id, $next_extension_id;
  89
  90         $extensions = get_company_extensions();
  91         if (!check_data($selected_id, $extensions))
  92                 return false;
  93         $id = $selected_id==-1 ? $next_extension_id : $selected_id;
  94
  95         if ($selected_id != -1 && $extensions[$id]['type'] != 'plugin') {
  96                 display_error(_('Module installation support is not implemented yet. You have to do it manually.'));
  97                 return;
  98         }
  99
 100         $extensions[$id]['tab'] = $_POST['tab'];
 101         $extensions[$id]['name'] = $_POST['name'];
 102         $extensions[$id]['path'] = $_POST['path'];
 103         $extensions[$id]['title'] = $_POST['title'];
 104         $extensions[$id]['active'] = check_value('active');
 105
 106         // Currently we support only plugin extensions here.
 107         $extensions[$id]['type'] = 'plugin';
 108         $directory = $path_to_root . "/modules/" . $_POST['path'];
 109         if (!file_exists($directory))
 110         {
 111                 mkdir($directory);
 112         }
 113         if (is_uploaded_file($_FILES['uploadfile']['tmp_name']))
 114         {
 115                 $extensions[$id]['filename'] = $_FILES['uploadfile']['name'];
 116                 $file1 = $_FILES['uploadfile']['tmp_name'];
 117                 $file2 = $directory . "/".$_FILES['uploadfile']['name'];
 118                 if (file_exists($file2))
 119                         unlink($file2);
 120                 move_uploaded_file($file1, $file2);
 121         }
 122         else
 123                 $extensions[$id]['filename'] = get_post('filename');
 124         if (is_uploaded_file($_FILES['uploadfile2']['tmp_name']))
 125         {
 126                 $file1 = $_FILES['uploadfile2']['tmp_name'];
 127                 $file2 = $directory . "/".$_FILES['uploadfile2']['name'];
 128                 if (file_exists($file2))
 129                         unlink($file2);
 130                 move_uploaded_file($file1, $file2);
 131                 $db_name = $_SESSION["wa_current_user"]->company;
 132                 db_import($file2, $db_connections[$db_name]);
 133         }
 134
 135         if (is_uploaded_file($_FILES['uploadfile3']['tmp_name']))
 136         {
 137                 $extensions[$id]['acc_file'] = $_FILES['uploadfile3']['name'];
 138                 $file1 = $_FILES['uploadfile3']['tmp_name'];
 139                 $file2 = $directory . "/".$_FILES['uploadfile3']['name'];
 140                 if (file_exists($file2))
 141                         unlink($file2);
 142                 move_uploaded_file($file1, $file2);
 143         }
 144         else
 145                 $extensions[$id]['acc_file'] = get_post('acc_file');
 146
 147         // security area guess for plugins
 148         if ($extensions[$id]['type'] == 'plugin'){
 149                 $exttext = file_get_contents($path_to_root.'/modules/'
 150                         .$extensions[$id]['path'].'/'.$extensions[$id]['filename']);
 151                 $area = 'SA_OPEN';
 152                 if (preg_match('/.*\$page_security\s*=\s*[\'"]([^\'"]*)/', $exttext, $match)) {
 153                         $area = trim($match[1]);
 154                 }
 155                 $extensions[$id]['access'] = $area;
 156         }
 157
 158         if ($selected_id == -1)
 159         {
 160                 $next_extension_id++;
 161         }
 162         if (!update_extensions($extensions))
 163                 return false;
 164         return true;
 165 }
 166
 167 function handle_delete()
 168 {
 169         global  $path_to_root, $db_connections, $selected_id;
 170
 171         $extensions = get_company_extensions();
 172
 173         $id = $selected_id;
 174
 175         $filename = $path_to_root
 176                 . ($extensions[$id]['type']=='plugin' ? "/modules/": '/')
 177                 . $extensions[$id]['path'];
 178
 179         flush_dir($filename);
 180         rmdir($filename);
 181         unset($extensions[$id]);
 182         if (update_extensions($extensions))
 183                 display_notification(_("Selected extension has been successfully deleted"));
 184         return true;
 185 }
 186
 187 //---------------------------------------------------------------------------------------------
 188
 189 function display_extensions()
 190 {
 191         start_table(TABLESTYLE);
 192         $th = array(_("Name"),_("Tab"), _("Link text"), _("Folder"), _("Filename"),
 193                 _("Access extensions"),"", "");
 194         table_header($th);
 195
 196         $k = 0;
 197         $mods = get_company_extensions();
 198         $mods = array_natsort($mods, null, 'name');
 199
 200         foreach($mods as $i => $mod)
 201         {
 202                 $is_mod = $mod['type'] == 'module';
 203                 alt_table_row_color($k);
 204                 label_cell($mod['name']);
 205                 label_cell( $is_mod ?
 206                         $mod['title'] : access_string($_SESSION['App']->applications[$mod['tab']]->name, true));
 207                 $ttl = access_string($mod['title']);
 208                 label_cell($ttl[0]);
 209                 label_cell($mod['path']);
 210                 label_cell($mod['filename']);
 211                 label_cell(@$mod['acc_file']);
 212                 if ($is_mod)
 213                 {
 214                         label_cell(''); // not implemented (yet)
 215                 }
 216                 else
 217                 {
 218                         edit_button_cell("Edit".$i, _("Edit"));
 219                 }
 220                         delete_button_cell("Delete".$i, _("Delete"));
 221                 submit_js_confirm('Delete'.$i, _('You are about to delete this extension\nDo you want to continue?'));
 222                 end_row();
 223         }
 224
 225         end_table(1);
 226 }
 227
 228 function company_extensions($id)
 229 {
 230         start_table(TABLESTYLE);
 231
 232         $th = array(_("Name"),_("Tab"), _("Link text"), _("Active"));
 233
 234         // get all available extensions and display
 235         // with current status stored in company directory.
 236
 237         $mods = get_company_extensions();
 238         $exts = get_company_extensions($id);
 239         foreach($mods as $key => $ins) {
 240                 foreach($exts as $ext)
 241                         if ($ext['name'] == $ins['name']) {
 242                                 $mods[$key]['active'] = @$ext['active'];
 243                                 continue 2;
 244                         }
 245         }
 246         $mods = array_natsort($mods, null, 'name');
 247         table_header($th);
 248         $k = 0;
 249         foreach($mods as $i => $mod)
 250         {
 251                 alt_table_row_color($k);
 252                 label_cell($mod['name']);
 253                 label_cell( $mod['type'] == 'module' ?
 254                         $mod['title'] : access_string($_SESSION['App']->applications[$mod['tab']]->name, true));
 255                 $ttl = access_string($mod['title']);
 256                 label_cell($ttl[0]);
 257                 check_cells(null, 'Active'.$i, @$mod['active'] ? 1:0,
 258                         false, false, "align='center'");
 259                 end_row();
 260         }
 261
 262         end_table(1);
 263         submit_center('Update', _('Update'), true, false, 'default');
 264 }
 265
 266 //---------------------------------------------------------------------------------------------
 267
 268 function display_ext_edit($selected_id)
 269 {
 270         global $Mode;
 271
 272
 273         $extensions = get_company_extensions();
 274
 275         start_table(TABLESTYLE2);
 276
 277         if ($selected_id != -1 && $extensions[$selected_id]['type'] == 'plugin')
 278         {
 279                 if ($Mode == 'Edit') {
 280                         $mod = $extensions[$selected_id];
 281                         $_POST['tab']  = $mod['tab'];
 282                         $_POST['name'] = $mod['name'];
 283                         $_POST['title'] = $mod['title'];
 284                         $_POST['path'] = $mod['path'];
 285                         $_POST['filename'] = $mod['filename'];
 286                         $_POST['acc_file'] = @$mod['acc_file'];
 287                         hidden('filename', $_POST['filename']);
 288                         hidden('acc_file', $_POST['acc_file']);
 289                 }
 290                 hidden('selected_id', $selected_id);
 291         }
 292         text_row_ex(_("Name"), 'name', 30);
 293         text_row_ex(_("Folder"), 'path', 20);
 294
 295         tab_list_row(_("Menu Tab"), 'tab', null, true);
 296         text_row_ex(_("Menu Link Text"), 'title', 30);
 297
 298         record_status_list_row(_("Default status"), 'active');
 299
 300         file_row(_("Module File"), 'uploadfile');
 301         file_row(_("Access Levels Extensions"), 'uploadfile3');
 302         file_row(_("SQL File"), 'uploadfile2');
 303
 304         end_table(0);
 305         display_note(_("Select your module PHP file from your local harddisk."), 0, 1);
 306         submit_add_or_update_center($selected_id == -1, '', 'both');
 307 }
 308
 309 //---------------------------------------------------------------------------------------------
 310 if ($Mode=='ADD_ITEM' || $Mode == 'UPDATE_ITEM') {
 311         if(handle_submit()) {
 312                 if ($selected_id != -1)
 313                         display_notification(_("Extension data has been updated."));
 314                 else
 315                         display_notification(_("Extension has been installed."));
 316         $Mode = 'RESET';
 317         }
 318 }
 319 if ($Mode == 'Delete')
 320 {
 321         handle_delete();
 322         $Mode = 'RESET';
 323 }
 324 if (get_post('Update')) {
 325         $exts = get_company_extensions();
 326         foreach($exts as $i => $ext) {
 327                 $exts[$i]['active'] = check_value('Active'.$i);
 328         }
 329         write_extensions($exts, get_post('extset'));
 330         if (get_post('extset') == user_company())
 331                 $installed_extensions = $exts;
 332         display_notification(_('Current active extensions set has been saved.'));
 333 }
 334
 335 if ($Mode == 'RESET')
 336 {
 337         $selected_id = -1;
 338         unset($_POST);
 339 }
 340
 341 //---------------------------------------------------------------------------------------------
 342 start_form(true);
 343 if (list_updated('extset'))
 344         $Ajax->activate('_page_body');
 345
 346 echo "<center>" . _('Extensions:') . "&nbsp;&nbsp;";
 347 echo extset_list('extset', null, true);
 348 echo "</center><br>";
 349
 350 $set = get_post('extset', -1);
 351 if ($set == -1) {
 352         display_extensions();
 353
 354         display_ext_edit($selected_id);
 355 } else {
 356         company_extensions($set);
 357 }
 358 //---------------------------------------------------------------------------------------------
 359 end_form();
 360
 361 end_page();
 362
 363 ?>