first commit

modules/x13allegro/bc/HelperUploader.php

@@ -0,0 +1,273 @@
+<?php
+
+require_once(dirname(__FILE__) . '/../x13allegro.php');
+
+class HelperUploader extends Uploader
+{
+    const DEFAULT_TEMPLATE_DIRECTORY = 'helpers/uploader';
+    const DEFAULT_TEMPLATE           = 'simple.tpl';
+    const DEFAULT_AJAX_TEMPLATE      = 'ajax.tpl';
+
+    const TYPE_IMAGE                 = 'image';
+    const TYPE_FILE                  = 'file';
+
+    private $_context;
+    private $_drop_zone;
+    private $_id;
+    private $_files;
+    private $_name;
+    private $_max_files;
+    private $_multiple;
+    private $_post_max_size;
+    protected $_template;
+    private $_template_directory;
+    private $_title;
+    private $_url;
+    private $_use_ajax;
+
+    public function setContext($value)
+    {
+        $this->_context = $value;
+        return $this;
+    }
+
+    public function getContext()
+    {
+        if (!isset($this->_context)) {
+            $this->_context = Context::getContext();
+        }
+
+        return $this->_context;
+    }
+
+    public function setDropZone($value)
+    {
+        $this->_drop_zone = $value;
+        return $this;
+    }
+
+    public function getDropZone()
+    {
+        if (!isset($this->_drop_zone)) {
+            $this->setDropZone("$('#".$this->getId()."-add-button')");
+        }
+
+        return $this->_drop_zone;
+    }
+
+    public function setId($value)
+    {
+        $this->_id = (string)$value;
+        return $this;
+    }
+
+    public function getId()
+    {
+        if (!isset($this->_id) || trim($this->_id) === '') {
+            $this->_id = $this->getName();
+        }
+
+        return $this->_id;
+    }
+
+    public function setFiles($value)
+    {
+        $this->_files = $value;
+        return $this;
+    }
+
+    public function getFiles()
+    {
+        if (!isset($this->_files)) {
+            $this->_files = array();
+        }
+
+        return $this->_files;
+    }
+
+    public function setMaxFiles($value)
+    {
+        $this->_max_files = isset($value) ? intval($value) : $value;
+        return $this;
+    }
+
+    public function getMaxFiles()
+    {
+        return $this->_max_files;
+    }
+
+    public function setMultiple($value)
+    {
+        $this->_multiple = (bool)$value;
+        return $this;
+    }
+
+    public function setName($value)
+    {
+        $this->_name = (string)$value;
+        return $this;
+    }
+
+    public function getName()
+    {
+        return $this->_name;
+    }
+
+    public function setPostMaxSize($value)
+    {
+        $this->_post_max_size = $value;
+        $this->setMaxSize($value);
+        return $this;
+    }
+
+    public function getPostMaxSize()
+    {
+        if (!isset($this->_post_max_size)) {
+            $this->_post_max_size = parent::getPostMaxSize();
+        }
+
+        return $this->_post_max_size;
+    }
+
+    public function setTemplate($value)
+    {
+        $this->_template = $value;
+        return $this;
+    }
+
+    public function getTemplate()
+    {
+        if (!isset($this->_template)) {
+            $this->setTemplate(self::DEFAULT_TEMPLATE);
+        }
+
+        return $this->_template;
+    }
+
+    public function setTemplateDirectory($value)
+    {
+        $this->_template_directory = $value;
+        return $this;
+    }
+
+    public function getTemplateDirectory()
+    {
+        if (!isset($this->_template_directory)) {
+            $this->_template_directory = self::DEFAULT_TEMPLATE_DIRECTORY;
+        }
+
+        return $this->_normalizeDirectory($this->_template_directory);
+    }
+
+    public function getTemplateFile($template)
+    {
+        if (preg_match_all('/((?:^|[A-Z])[a-z]+)/', get_class($this->getContext()->controller), $matches) !== false) {
+            $controller_name = strtolower($matches[0][1]);
+        }
+
+        if ($this->getContext()->controller instanceof ModuleAdminController && file_exists($this->_normalizeDirectory(
+                    $this->getContext()->controller->getTemplatePath()).$this->getTemplateDirectory().$template)) {
+            return $this->_normalizeDirectory($this->getContext()->controller->getTemplatePath())
+                .$this->getTemplateDirectory().$template;
+        } elseif ($this->getContext()->controller instanceof AdminController && isset($controller_name)
+            && file_exists($this->_normalizeDirectory($this->getContext()->smarty->getTemplateDir(0)).'controllers'
+                .DIRECTORY_SEPARATOR.$controller_name.DIRECTORY_SEPARATOR.$this->getTemplateDirectory().$template)) {
+            return $this->_normalizeDirectory($this->getContext()->smarty->getTemplateDir(0)).'controllers'
+                .DIRECTORY_SEPARATOR.$controller_name.DIRECTORY_SEPARATOR.$this->getTemplateDirectory().$template;
+        } elseif (file_exists($this->_normalizeDirectory($this->getContext()->smarty->getTemplateDir(1))
+            .$this->getTemplateDirectory().$template)) {
+            return $this->_normalizeDirectory($this->getContext()->smarty->getTemplateDir(1))
+                .$this->getTemplateDirectory().$template;
+        } elseif (file_exists($this->_normalizeDirectory($this->getContext()->smarty->getTemplateDir(0))
+            .$this->getTemplateDirectory().$template)) {
+            return $this->_normalizeDirectory($this->getContext()->smarty->getTemplateDir(0))
+                .$this->getTemplateDirectory().$template;
+        } else {
+            return $this->getTemplateDirectory().$template;
+        }
+    }
+
+    public function setTitle($value)
+    {
+        $this->_title = $value;
+        return $this;
+    }
+
+    public function getTitle()
+    {
+        return $this->_title;
+    }
+
+    public function setUrl($value)
+    {
+        $this->_url = (string)$value;
+        return $this;
+    }
+
+    public function getUrl()
+    {
+        return $this->_url;
+    }
+
+    public function setUseAjax($value)
+    {
+        $this->_use_ajax = (bool)$value;
+        return $this;
+    }
+
+    public function isMultiple()
+    {
+        return (isset($this->_multiple) && $this->_multiple);
+    }
+
+    public function render()
+    {
+        $admin_webpath = str_ireplace(_PS_ROOT_DIR_, '', _PS_ADMIN_DIR_);
+        $admin_webpath = preg_replace('/^'.preg_quote(DIRECTORY_SEPARATOR, '/').'/', '', $admin_webpath);
+        $bo_theme = ((Validate::isLoadedObject($this->getContext()->employee)
+            && $this->getContext()->employee->bo_theme) ? $this->getContext()->employee->bo_theme : 'default');
+
+        if (!file_exists(_PS_BO_ALL_THEMES_DIR_.$bo_theme.DIRECTORY_SEPARATOR
+            .'template')) {
+            $bo_theme = 'default';
+        }
+
+        $this->getContext()->controller->addJs(__PS_BASE_URI__.$admin_webpath
+            .'/themes/'.$bo_theme.'/js/jquery.iframe-transport.js');
+        $this->getContext()->controller->addJs(__PS_BASE_URI__.$admin_webpath
+            .'/themes/'.$bo_theme.'/js/jquery.fileupload.js');
+        $this->getContext()->controller->addJs(__PS_BASE_URI__.$admin_webpath
+            .'/themes/'.$bo_theme.'/js/jquery.fileupload-process.js');
+        $this->getContext()->controller->addJs(__PS_BASE_URI__.$admin_webpath
+            .'/themes/'.$bo_theme.'/js/jquery.fileupload-validate.js');
+        $this->getContext()->controller->addJs(__PS_BASE_URI__.'js/vendor/spin.js');
+        $this->getContext()->controller->addJs(__PS_BASE_URI__.'js/vendor/ladda.js');
+
+        if ($this->useAjax() && !isset($this->_template)) {
+            $this->setTemplate(self::DEFAULT_AJAX_TEMPLATE);
+        }
+
+        $template = $this->getContext()->smarty->createTemplate(
+            $this->getTemplateFile($this->getTemplate()), $this->getContext()->smarty
+        );
+
+        $template->assign(array(
+            'id'            => $this->getId(),
+            'name'          => $this->getName(),
+            'url'           => $this->getUrl(),
+            'multiple'      => $this->isMultiple(),
+            'files'         => $this->getFiles(),
+            'title'         => $this->getTitle(),
+            'max_files'     => $this->getMaxFiles(),
+            'post_max_size' => $this->getPostMaxSizeBytes(),
+            'drop_zone'     => $this->getDropZone()
+        ));
+
+        return $template->fetch();
+    }
+
+    public function useAjax()
+    {
+        return (isset($this->_use_ajax) && $this->_use_ajax);
+    }
+}

modules/x13allegro/bc/Uploader.php

@@ -0,0 +1,277 @@
+<?php
+
+require_once(dirname(__FILE__) . '/../x13allegro.php');
+
+class Uploader
+{
+    const DEFAULT_MAX_SIZE = 10485760;
+
+    private $_check_file_size;
+    private $_accept_types;
+    private $_files;
+    private $_max_size;
+    private $_name;
+    private $_save_path;
+
+    public function __construct($name = null)
+    {
+        $this->setName($name);
+        $this->setCheckFileSize(true);
+        $this->files = array();
+    }
+
+    public function setAcceptTypes($value)
+    {
+        if (is_array($value) && count($value)) {
+            $value = array_map(array('Tools', 'strtolower'), $value);
+        }
+        $this->_accept_types = $value;
+        return $this;
+    }
+
+    public function getAcceptTypes()
+    {
+        return $this->_accept_types;
+    }
+
+    public function setCheckFileSize($value)
+    {
+        $this->_check_file_size = $value;
+        return $this;
+    }
+
+    public function getFilePath($file_name = null)
+    {
+        if (!isset($file_name)) {
+            return tempnam($this->getSavePath(), $this->getUniqueFileName());
+        }
+
+        return $this->getSavePath().$file_name;
+    }
+
+    public function getFiles()
+    {
+        if (!isset($this->_files)) {
+            $this->_files = array();
+        }
+
+        return $this->_files;
+    }
+
+    public function setMaxSize($value)
+    {
+        $this->_max_size = intval($value);
+        return $this;
+    }
+
+    public function getMaxSize()
+    {
+        if (!isset($this->_max_size) || empty($this->_max_size)) {
+            $this->setMaxSize(self::DEFAULT_MAX_SIZE);
+        }
+
+        return $this->_max_size;
+    }
+
+    public function setName($value)
+    {
+        $this->_name = $value;
+        return $this;
+    }
+
+    public function getName()
+    {
+        return $this->_name;
+    }
+
+    public function setSavePath($value)
+    {
+        $this->_save_path = $value;
+        return $this;
+    }
+
+    public function getPostMaxSizeBytes()
+    {
+        $post_max_size = ini_get('post_max_size');
+        $bytes         = trim($post_max_size);
+        $last          = strtolower($post_max_size[strlen($post_max_size) - 1]);
+
+        switch ($last) {
+            case 'g': @$bytes *= 1024; break;
+            case 'm': @$bytes *= 1024; break;
+            case 'k': @$bytes *= 1024; break;
+        }
+
+        if ($bytes == '') {
+            $bytes = null;
+        }
+        return $bytes;
+    }
+
+    public function getSavePath()
+    {
+        if (!isset($this->_save_path)) {
+            $this->setSavePath(_PS_UPLOAD_DIR_);
+        }
+
+        return $this->_normalizeDirectory($this->_save_path);
+    }
+
+    public function getUniqueFileName($prefix = 'PS')
+    {
+        return uniqid($prefix, true);
+    }
+
+    public function checkFileSize()
+    {
+        return (isset($this->_check_file_size) && $this->_check_file_size);
+    }
+
+    public function process($dest = null)
+    {
+        $upload = isset($_FILES[$this->getName()]) ? $_FILES[$this->getName()] : null;
+
+        if ($upload && is_array($upload['tmp_name'])) {
+            $tmp = array();
+            foreach ($upload['tmp_name'] as $index => $value) {
+                $tmp[$index] = array(
+                    'tmp_name' => $upload['tmp_name'][$index],
+                    'name'     => $upload['name'][$index],
+                    'size'     => $upload['size'][$index],
+                    'type'     => $upload['type'][$index],
+                    'error'    => $upload['error'][$index]
+                );
+
+                $this->files[] = $this->upload($tmp[$index], $dest);
+            }
+        } elseif ($upload) {
+            $this->files[] = $this->upload($upload, $dest);
+        }
+
+        return $this->files;
+    }
+
+    public function upload($file, $dest = null)
+    {
+        if ($this->validate($file)) {
+            if (isset($dest) && is_dir($dest)) {
+                $file_path = $dest;
+            } else {
+                $file_path = $this->getFilePath(isset($dest) ? $dest : $file['name']);
+            }
+
+            if ($file['tmp_name'] && is_uploaded_file($file['tmp_name'])) {
+                move_uploaded_file($file['tmp_name'], $file_path);
+            } else {
+                // Non-multipart uploads (PUT method support)
+                file_put_contents($file_path, fopen('php://input', 'r'));
+            }
+
+            $file_size = $this->_getFileSize($file_path, true);
+
+            if ($file_size === $file['size']) {
+                $file['save_path'] = $file_path;
+            } else {
+                $file['size'] = $file_size;
+                unlink($file_path);
+                $file['error'] = Tools::displayError('Server file size is different from local file size');
+            }
+        }
+
+        return $file;
+    }
+
+    protected function checkUploadError($error_code)
+    {
+        $error = 0;
+        switch ($error_code) {
+            case 1:
+                $error = sprintf(Tools::displayError('The uploaded file exceeds %s'), ini_get('upload_max_filesize'));
+                break;
+            case 2:
+                $error = sprintf(Tools::displayError('The uploaded file exceeds %s'), ini_get('post_max_size'));
+                break;
+            case 3:
+                $error = Tools::displayError('The uploaded file was only partially uploaded');
+                break;
+            case 4:
+                $error = Tools::displayError('No file was uploaded');
+                break;
+            case 6:
+                $error = Tools::displayError('Missing temporary folder');
+                break;
+            case 7:
+                $error = Tools::displayError('Failed to write file to disk');
+                break;
+            case 8:
+                $error = Tools::displayError('A PHP extension stopped the file upload');
+                break;
+            default:
+                break;
+        }
+        return $error;
+    }
+
+    protected function validate(&$file)
+    {
+        $file['error'] = $this->checkUploadError($file['error']);
+
+        if ($file['error']) {
+            return false;
+        }
+
+        $post_max_size = $this->getPostMaxSizeBytes();
+
+        if ($post_max_size && ($this->_getServerVars('CONTENT_LENGTH') > $post_max_size)) {
+            $file['error'] = Tools::displayError('The uploaded file exceeds the post_max_size directive in php.ini');
+            return false;
+        }
+
+        if (preg_match('/\%00/', $file['name'])) {
+            $file['error'] = Tools::displayError('Invalid file name');
+            return false;
+        }
+
+        $types = $this->getAcceptTypes();
+
+        //TODO check mime type.
+        if (isset($types) && !in_array(Tools::strtolower(pathinfo($file['name'], PATHINFO_EXTENSION)), $types)) {
+            $file['error'] = Tools::displayError('Filetype not allowed');
+            return false;
+        }
+
+        if ($this->checkFileSize() && $file['size'] > $this->getMaxSize()) {
+            $file['error'] = sprintf(Tools::displayError('File (size : %1s) is too big (max : %2s)'), $file['size'], $this->getMaxSize());
+            return false;
+        }
+
+        return true;
+    }
+
+    protected function _getFileSize($file_path, $clear_stat_cache = false)
+    {
+        if ($clear_stat_cache) {
+            clearstatcache(true, $file_path);
+        }
+
+        return filesize($file_path);
+    }
+
+    protected function _getServerVars($var)
+    {
+        return (isset($_SERVER[$var]) ? $_SERVER[$var] : '');
+    }
+
+    protected function _normalizeDirectory($directory)
+    {
+        $last = $directory[strlen($directory) - 1];
+
+        if (in_array($last, array('/', '\\'))) {
+            $directory[strlen($directory) - 1] = DIRECTORY_SEPARATOR;
+            return $directory;
+        }
+
+        $directory .= DIRECTORY_SEPARATOR;
+        return $directory;
+    }
+}

modules/x13allegro/bc/index.php

@@ -0,0 +1,11 @@
+<?php
+
+header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
+header('Last-Modified: '.gmdate('D, d M Y H:i:s').' GMT');
+
+header('Cache-Control: no-store, no-cache, must-revalidate');
+header('Cache-Control: post-check=0, pre-check=0', false);
+header('Pragma: no-cache');
+
+header('Location: ../');
+exit;