Kleeja/includes/adm/j_plugins.php

<?php
/**
 *
 * @package adm
 * @copyright (c) 2007 Kleeja.com
 * @license http://www.kleeja.com/license
 *
 */


// not for directly open
if (!defined('IN_ADMIN'))
{
    exit();
}


#turn time-limit off
@set_time_limit(0);


#get current case
$case = g('case', 'str', 'installed');

#set _get form key
$GET_FORM_KEY = kleeja_add_form_key_get('PLUGINS_FORM_KEY');
$H_FORM_KEYS	= kleeja_add_form_key('adm_plugins');

$action = ADMIN_PATH . '?cp=' . basename(__file__, '.php');

$plugin_install_link = ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '&amp;case=install&amp;' . $GET_FORM_KEY . '&amp;plg=';
$plugin_uninstall_link = ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '&amp;case=uninstall&amp;' . $GET_FORM_KEY . '&amp;plg=';
$plugin_enable_link = ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '&amp;case=enable&amp;' . $GET_FORM_KEY . '&amp;plg=';
$plugin_disable_link = ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '&amp;case=disable&amp;' . $GET_FORM_KEY . '&amp;plg=';
$plugin_download_link = ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '&amp;case=download&amp;' . $GET_FORM_KEY . '&amp;plg=';
$plugin_update_link = ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '&amp;case=update&amp;' . $GET_FORM_KEY . '&amp;plg=';


//check _GET Csrf token
if (!empty($case) && in_array($case, array('install', 'uninstall', 'enable', 'disable' , 'download' , 'update')))
{
    if (!kleeja_check_form_key_get('PLUGINS_FORM_KEY'))
    {
        kleeja_admin_err($lang['INVALID_GET_KEY'], $action);
        exit;
    }
}


if(ip('newplugin'))
{
    if(!kleeja_check_form_key('adm_plugins'))
    {
        kleeja_admin_err($lang['INVALID_FORM_KEY'], true, $lang['ERROR'], true, $action);
        exit;
    }

    $case = 'upload';
}

switch ($case):

    default:
    case 'local':
    case 'store':
    case 'check':

        # Get installed plugins
        $query = array(
            'SELECT' => "plg_id, plg_name, plg_ver, plg_disabled, plg_author, plg_dsc",
            'FROM' => "{$dbprefix}plugins",
            'ORDER BY' => "plg_id ASC",
        );


        $result = $SQL->build($query);

        $installed_plugins = array();

        while ($row = $SQL->fetch($result))
        {

            $installed_plugins[$row['plg_name']] = $row;

            $installed_plugins[$row['plg_name']]['extra_info'] = Plugins::getInstance()->installed_plugin_info($row['plg_name']);


            $installed_plugins[$row['plg_name']]['icon'] = file_exists(
                PATH . KLEEJA_PLUGINS_FOLDER . '/' . $row['plg_name'] . "/icon.png"
                )
                ? PATH . KLEEJA_PLUGINS_FOLDER . '/' . $row['plg_name'] . "/icon.png"
                : $STYLE_PATH_ADMIN . 'images/plugin.png';


            foreach (array('plugin_title', 'plugin_description') as $localizedInfo)
            {
                if (is_array($installed_plugins[$row['plg_name']]['extra_info'][$localizedInfo]))
                {
                    if (!empty($installed_plugins[$row['plg_name']]['extra_info'][$localizedInfo][$config['language']]))
                    {
                        $installed_plugins[$row['plg_name']]['extra_info'][$localizedInfo] =
                            shorten_text($installed_plugins[$row['plg_name']]['extra_info'][$localizedInfo][$config['language']], 100);
                    }
                    else if (!empty($installed_plugins[$row['plg_name']]['extra_info'][$localizedInfo]['en']))
                    {
                        $installed_plugins[$row['plg_name']]['extra_info'][$localizedInfo] =
                            shorten_text($installed_plugins[$row['plg_name']]['extra_info'][$localizedInfo]['en'], 100);
                    }
                    else
                    {
                        $installed_plugins[$row['plg_name']]['extra_info'][$localizedInfo] =
                            shorten_text($installed_plugins[$row['plg_name']]['extra_info'][$localizedInfo][0], 100);
                    }
                }
            }
        }
        $SQL->free($result);


        #get available plugins
        $dh = opendir(PATH . KLEEJA_PLUGINS_FOLDER);
        $available_plugins = array();
        while (false !== ($folder_name = readdir($dh)))
        {
            if (is_dir(PATH . KLEEJA_PLUGINS_FOLDER . '/' . $folder_name) && preg_match('/[a-z0-9_.]{3,}/', $folder_name)) 
            {
                if (empty($installed_plugins[$folder_name]))
                {
                    array_push($available_plugins,
                        array(
                            'name' => $folder_name,
                            'icon' => file_exists(PATH . KLEEJA_PLUGINS_FOLDER . '/' . $folder_name . "/icon.png")
                                ? PATH . KLEEJA_PLUGINS_FOLDER . '/' . $folder_name . "/icon.png"
                                : $STYLE_PATH_ADMIN . 'images/plugin.png',

                        )
                    );
                }
            }
        }
        @closedir($dh);

        $no_plugins = sizeof($available_plugins) == 0 && sizeof($installed_plugins) == 0;

        $stylee = "admin_plugins";

        //do not proceed if not store case
        if(! in_array($case, ['store', 'check']))
        {
            break;
        }

        // plugins avilable in kleeja remote catalog 
        if (!($catalog_plugins = $cache->get('catalog_plugins'))) 
        {
            $store_link = 'https://raw.githubusercontent.com/kleeja-official/plugin-catalog/master/plugins.json';

            $catalog_plugins = fetch_remote_file($store_link);
            $catalog_plugins = json_decode($catalog_plugins , true);

            if(json_last_error() == JSON_ERROR_NONE)
            {
                $cache->save('catalog_plugins', $catalog_plugins);
            }
        }

        // make an array for all plugins in kleeja remote catalog
        // that are not exsisted locally.
        $store_plugins = array();
        $available_plugins_names = array_column($available_plugins, 'name');
        foreach ($catalog_plugins as $plugin_info) 
        {
            if ($case == 'store' && (in_array($plugin_info['name'] , $available_plugins_names) ||
                 ! empty($installed_plugins[$plugin_info['name']]) )
                 )
            {
                continue;
            }

            // is there a new version of this in the store
            if ($case == 'check' && (! empty($installed_plugins[$plugin_info['name']]) && 
                version_compare(
                    strtolower($installed_plugins[$row['plg_name']]['extra_info']['plugin_version']),
                    $plugin_info['file']['version'],
                '>=') ||  empty($installed_plugins[$plugin_info['name']]))
            ) { 
                continue;
            }

            $store_plugins[$plugin_info['name']] = array(
                'name'            => $plugin_info['name'],
                'developer'       => $plugin_info['developer'],
                'version'         => $plugin_info['file']['version'],
                'title'           => ! empty($plugin_info['title'][$config['language']]) ? $plugin_info['title'][$config['language']] : $plugin_info['title']['en'],
                'website'         => $plugin_info['website'],
                'kj_min_version'  => $plugin_info['kleeja_version']['min'],
                'kj_max_version'  => $plugin_info['kleeja_version']['max'],
                'kj_version_cmtp'  => sprintf($lang[ 'KLJ_VER_NO_PLUGIN'], $plugin_info['kleeja_version']['min'], $plugin_info['kleeja_version']['max']),
                'icon'            => $plugin_info['icon'] ,
                'NotCompatible'   => version_compare(strtolower($plugin_info['kleeja_version']['min']), KLEEJA_VERSION , '<=')
                                    && version_compare(strtolower($plugin_info['kleeja_version']['max']), KLEEJA_VERSION , '>=')
                                    ? false : true,
            );
        }

        $no_store_plugins = sizeof($store_plugins) == 0;

        break;

    //
    //upload a plugin
    //
    case 'upload':
        $ERRORS = array();

        if(intval($userinfo['founder']) !== 1)
        {
            $ERRORS[] = $lang['HV_NOT_PRVLG_ACCESS'];
        }

        #is uploaded?
        if(empty($_FILES['plugin_file']['tmp_name']))
        {
            $ERRORS[] = $lang['CHOSE_F'];
        }

        #extract it to plugins folder
        if(!sizeof($ERRORS))
        {
            if(class_exists('ZipArchive'))
            {
                $zip = new ZipArchive;
                if ($zip->open($_FILES['plugin_file']['tmp_name']) === true)
                {
                    if(!$zip->extractTo(PATH . KLEEJA_PLUGINS_FOLDER))
                    {
                        $ERRORS[] = sprintf($lang['EXTRACT_ZIP_FAILED'], KLEEJA_PLUGINS_FOLDER);
                    }
                    $zip->close();
                }
                else
                {
                    $ERRORS[] = sprintf($lang['EXTRACT_ZIP_FAILED'], KLEEJA_PLUGINS_FOLDER);
                }
            }
            else
            {
                $ERRORS[] = $lang['NO_ZIP_ARCHIVE'];
            }
        }

        if(!empty($_FILES['plugin_file']['tmp_name']))
        {
            @unlink($_FILES['plugin_file']['tmp_name']);
        }

        if(!sizeof($ERRORS))
        {
            kleeja_admin_info($lang['NO_PROBLEM_AFTER_ZIP'], true, '', true, $action);
        }
        else
        {
            kleeja_admin_err('- ' . implode('<br>- ', $ERRORS), true, '', true, ADMIN_PATH . '?cp=' . basename(__file__, '.php'));
        }

        break;


    //
    //install a plugin
    //
    case 'install':

        if(intval($userinfo['founder']) !== 1)
        {
            kleeja_admin_err($lang['HV_NOT_PRVLG_ACCESS'], ADMIN_PATH . '?cp=' . basename(__file__, '.php'));
            exit;
        }

        $plg_name = g('plg', 'str');

        if (empty($plg_name))
        {
            if (defined('DEBUG'))
            {
                exit('empty($plg_name)');
            }
            //no plugin selected? back
            redirect(ADMIN_PATH . "?cp=" . basename(__file__, '.php'));
        }
        else
        {
            if (!file_exists(PATH . KLEEJA_PLUGINS_FOLDER . '/' . $plg_name . '/init.php'))
            {
                if (defined('DEBUG'))
                {
                    exit('!file_exists($plg_name)');
                }

                redirect(ADMIN_PATH . "?cp=" . basename(__file__, '.php'));
                exit;
            }

            #if already installed, show a message
            if (!empty(Plugins::getInstance()->installed_plugin_info($plg_name)))
            {
                kleeja_admin_info($lang['PLUGIN_EXISTS_BEFORE'], true, '', true, ADMIN_PATH . '?cp=' . basename(__file__, '.php'));
                exit;
            }

            $kleeja_plugin = array();

            include PATH . KLEEJA_PLUGINS_FOLDER . '/' . $plg_name . '/init.php';

            $install_callback = $kleeja_plugin[$plg_name]['install'];
            $plugin_info = $kleeja_plugin[$plg_name]['information'];
            $plugin_first_run = false;

            if (!empty($kleeja_plugin[$plg_name]['first_run'][$config['language']]))
            {
                $plugin_first_run = $kleeja_plugin[$plg_name]['first_run'][$config['language']];
            }
            else if (!empty($kleeja_plugin[$plg_name]['first_run']['en']))
            {
                $plugin_first_run = $kleeja_plugin[$plg_name]['first_run']['en'];
            }

            #check if compatible with kleeja
            #'plugin_kleeja_version_min' => '1.8',
            # Max version of Kleeja that's required to run this plugin
            #'plugin_kleeja_version_max' => '3.8',

            if (version_compare(KLEEJA_VERSION, $plugin_info['plugin_kleeja_version_min'], '<'))
            {
                kleeja_admin_info(
                    $lang['PLUGIN_N_CMPT_KLJ'] . '<br>k:' . KLEEJA_VERSION . '|<|p.min:' . $plugin_info['plugin_kleeja_version_min'], 
                    true, '', true, ADMIN_PATH . '?cp=' . basename(__file__, '.php')
                );
                exit;
            }

            if ($plugin_info['plugin_kleeja_version_max'] != '0')
            {
                if (version_compare(KLEEJA_VERSION, $plugin_info['plugin_kleeja_version_max'], '>'))
                {
                    kleeja_admin_info(
                        $lang['PLUGIN_N_CMPT_KLJ'] . '<br>k:' . KLEEJA_VERSION . '|>|p.max:' . $plugin_info['plugin_kleeja_version_max'], 
                        true, '', true, ADMIN_PATH . '?cp=' . basename(__file__, '.php')
                    );
                    exit;
                }
            }

            delete_cache('', true);

            if (is_array($plugin_info['plugin_description']))
            {
                $plugin_info['plugin_description'] = !empty($plugin_info['plugin_description']['en']) ? $plugin_info['plugin_description']['en'] : $plugin_info['plugin_description'][0];
            }

            #add to database
            $insert_query = array(
                'INSERT' => '`plg_name` ,`plg_ver`, `plg_author`, `plg_dsc`, `plg_icon`, `plg_uninstall`, `plg_instructions`, `plg_store`, `plg_files`',
                'INTO' => "{$dbprefix}plugins",
                'VALUES' => "'" . $SQL->escape($plg_name) . "','" . $SQL->escape($plugin_info['plugin_version']) . "', '" . $SQL->escape($plugin_info['plugin_developer']) . "','" . $SQL->escape($plugin_info['plugin_description']) . "', '', '', '', '', ''",
            );

            $SQL->build($insert_query);

            #may God protect you brother.
            if(is_callable($install_callback))
            {
                $install_callback($SQL->insert_id());
            }

            #show done, msg
            $text = '<h3>' . $lang['NEW_PLUGIN_ADDED'] . '</h3>';
            if ($plugin_first_run)
            {
                $text .= $plugin_first_run;
                $text .= '<br><hr><a href="' . ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '" class="btn btn-primary btn-lg">' . $lang['GO_BACK_BROWSER'] . '</a>';
            }
            else
            {
                $text .= '<script type="text/javascript"> setTimeout("get_kleeja_link(\'' . ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '\');", 2000);</script>' . "\n";
            }


            $stylee = 'admin_info';
        }

        break;

    //
    //uninstall a plugin
    //
    case 'uninstall':

        if(intval($userinfo['founder']) !== 1)
        {
            kleeja_admin_err($lang['HV_NOT_PRVLG_ACCESS'], ADMIN_PATH . '?cp=' . basename(__file__, '.php'));
            exit;
        }

        $plg_name = g('plg', 'str');

        if (empty($plg_name))
        {
            if (defined('DEV_STAGE'))
            {
                exit('empty($plg_name)');
            }

            //no plugin selected? back
            redirect(ADMIN_PATH . "?cp=" . basename(__file__, '.php'));
        }
        else
        {
            if (!file_exists(PATH . KLEEJA_PLUGINS_FOLDER . '/' . $plg_name . '/init.php'))
            {
                if (defined('DEV_STAGE'))
                {
                    exit('!file_exists($plg_name)');
                }

                redirect(ADMIN_PATH . "?cp=" . basename(__file__, '.php'));
                exit;
            }

            $kleeja_plugin = array();

            include PATH . KLEEJA_PLUGINS_FOLDER . '/' . $plg_name . '/init.php';

            $uninstall_callback = $kleeja_plugin[$plg_name]['uninstall'];

            if (!is_callable($uninstall_callback))
            {
                redirect(ADMIN_PATH . "?cp=" . basename(__file__, '.php'));
                exit;
            }


            $query = array(
                'SELECT' => "plg_id",
                'FROM' => "{$dbprefix}plugins",
                'WHERE' => "plg_name='" . $SQL->escape($plg_name) . "'"
            );

            $result = $SQL->build($query);

            $pluginDatabaseInfo = $SQL->fetch($result);

            #sad to see you go, brother
            $uninstall_callback(!empty($pluginDatabaseInfo) ? $pluginDatabaseInfo['plg_id'] : 0);

            delete_cache('', true);

            #remove from database
            $query_del = array(
                'DELETE' => "`{$dbprefix}plugins`",
                'WHERE' => "plg_name='" . $SQL->escape($plg_name) . "'"
            );

            $SQL->build($query_del);

            #show done, msg
            $text = '<h3>' . $lang['PLUGIN_DELETED'] . '</h3>';
            $text .= '<script type="text/javascript"> setTimeout("get_kleeja_link(\'' . ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '\');", 2000);</script>' . "\n";

            $stylee = 'admin_info';
        }

        break;


    //
    // disable a plugin
    //
    case 'disable':
    case 'enable':

        if(intval($userinfo['founder']) !== 1)
        {
            kleeja_admin_err($lang['HV_NOT_PRVLG_ACCESS'], ADMIN_PATH . '?cp=' . basename(__file__, '.php'));
            exit;
        }

        $plg_name = g('plg', 'str');

        if (empty($plg_name))
        {
            if (defined('DEV_STAGE'))
            {
                exit('empty($plg_name)');
            }
            //no plugin selected? back
            redirect(ADMIN_PATH . "?cp=" . basename(__file__, '.php'));
        }
        else
        {
            #update database
            $update_query = array(
                'UPDATE' => "{$dbprefix}plugins",
                'SET' => "plg_disabled=" . ($case == 'disable' ? 1 : 0),
                'WHERE' => "plg_name='" . $SQL->escape($plg_name) . "'"
            );


            $SQL->build($update_query);

            delete_cache('', true);

            #show done, msg
            $text = '<h3>' . $lang['PLGUIN_DISABLED_ENABLED'] . '</h3>';
            $text .= '<script type="text/javascript"> setTimeout("get_kleeja_link(\'' . ADMIN_PATH . '?cp=' . basename(__file__, '.php') . '\');", 2000);</script>' . "\n";


            $stylee = 'admin_info';
        }

        break;

    case 'download':

        if(intval($userinfo['founder']) !== 1)
        {
            kleeja_admin_err($lang['HV_NOT_PRVLG_ACCESS'], ADMIN_PATH . '?cp=' . basename(__file__, '.php'));
            exit;
        }

        // plugins avilable in kleeja store 
        $store_link = 'https://raw.githubusercontent.com/kleeja-official/plugin-catalog/master/plugins.json';

        $catalog_plugins = fetch_remote_file($store_link);

        if ($catalog_plugins) 
        {
            $catalog_plugins = json_decode($catalog_plugins , true);

            $store_plugins = array();
            
            // make an arry for all plugins in kleeja store that not included in our server
            foreach ($catalog_plugins as $plugin_info) 
            {
                $store_plugins[$plugin_info['name']] = array(
                    'name'  => $plugin_info['name'] ,
                    'plg_version'  => $plugin_info['file']['version'] ,
                    'url'  => $plugin_info['file']['url'] ,
                    'kj_min_version' => $plugin_info['kleeja_version']['min'] ,
                    'kj_max_version' => $plugin_info['kleeja_version']['max'] ,
                );
            }

            $download_plugin = g('plg');

            // // => this plugin is hosted in our store
            if (isset($store_plugins[$download_plugin]))
            {
                // check if the version of the plugin is compatible with our kleeja version or not
                if (
                    version_compare(strtolower($store_plugins[$download_plugin]['kj_min_version']), KLEEJA_VERSION , '<=')
                    && version_compare(strtolower($store_plugins[$download_plugin]['kj_max_version']), KLEEJA_VERSION , '>=') 
                    )
                {
                    $download_plugin_link = $store_plugins[$download_plugin]['url'];

                    $downloaded_plugin_zip = fetch_remote_file($download_plugin_link, PATH . 'cache/' . $download_plugin . '.zip', 60, false, 10, true);

                    if ($downloaded_plugin_zip) 
                    {
                        if (file_exists(PATH . 'cache/' . $download_plugin . '.zip' ) ) 
                        {
                            $zip = new ZipArchive();
                            if ($zip->open(PATH . 'cache/' . $download_plugin . '.zip' ) === true)
                            {
                                if( $zip->extractTo(PATH . KLEEJA_PLUGINS_FOLDER))
                                {
                                    $zip->close();
                                    // we dont need the zip file anymore
                                    unlink(PATH . 'cache/' . $download_plugin . '.zip');

                                    // for example :: When we extract zip file , the name will be ( advanced-extras-1.0 )
                                    // so we need to remove the version from folder name and replace ( - ) with ( _ )
                                    // and done
                                    $plugin_folder_name = PATH . KLEEJA_PLUGINS_FOLDER. '/' . str_replace('_' , '-' , $download_plugin) . '-' . $store_plugins[$download_plugin]['plg_version'];
                                    rename($plugin_folder_name , PATH . KLEEJA_PLUGINS_FOLDER. '/' . $download_plugin);

                                    // download or update msg
                                    kleeja_admin_info(
                                        sprintf($lang[ig('update')  ? 'PLUGIN_UPDATED' : 'PLUGIN_DOWNLOADED'], $download_plugin), 
                                        ADMIN_PATH . '?cp=' . basename(__file__, '.php')
                                    );
                    
                                    exit;
                                }
                                else 
                                {
                                    kleeja_admin_err($lang['EXTRACT_ZIP_FAILED']);
                                }
                            }
                        }
                        else
                        {
                            kleeja_admin_err($lang['PLUGIN_FILE_NOT_FOUND']);
                        }
                    }
                    else 
                    {
                        kleeja_admin_err($lang['PLUGINS_SERVER_ERROR']);
                    }
                }
                else
                {
                    kleeja_admin_err($lang['PLUGIN_N_CMPT_KLJ']);
                }
            }
            else 
            {
                kleeja_admin_err(sprintf($lang['PLUGIN_REMOTE_FILE_MISSING'], $download_plugin));
            }
        }
        else
        {
            kleeja_admin_err($lang['PLUGINS_SERVER_ERROR']);
        }

        break;

    case 'update':

        $update_plugin = g('plg');

        $plugin_folder_name = PATH . KLEEJA_PLUGINS_FOLDER . '/' . $update_plugin;

        if (is_dir($plugin_folder_name)) 
        {
            delete_plugin_folder($plugin_folder_name);
        }

        redirect($plugin_download_link . $update_plugin . '&amp;update' );
        break;

endswitch;