first commit

admin-kalsport/backup.php

@@ -0,0 +1,118 @@
+<?php
+/**
+ * Copyright since 2007 PrestaShop SA and Contributors
+ * PrestaShop is an International Registered Trademark & Property of PrestaShop SA
+ *
+ * NOTICE OF LICENSE
+ *
+ * This source file is subject to the Open Software License (OSL 3.0)
+ * that is bundled with this package in the file LICENSE.md.
+ * It is also available through the world-wide-web at this URL:
+ * https://opensource.org/licenses/OSL-3.0
+ * If you did not receive a copy of the license and are unable to
+ * obtain it through the world-wide-web, please send an email
+ * to license@prestashop.com so we can send you a copy immediately.
+ *
+ * DISCLAIMER
+ *
+ * Do not edit or add to this file if you wish to upgrade PrestaShop to newer
+ * versions in the future. If you wish to customize PrestaShop for your
+ * needs please refer to https://devdocs.prestashop.com/ for more information.
+ *
+ * @author    PrestaShop SA and Contributors <contact@prestashop.com>
+ * @copyright Since 2007 PrestaShop SA and Contributors
+ * @license   https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
+ */
+@trigger_error('Using '.__FILE__.' to make an ajax call is deprecated since 1.7.6.0 and will be removed in the next major version. Use a controller instead.', E_USER_DEPRECATED);
+
+/**
+ * @deprecated
+ * Opens a backup file for download
+ *
+ * -> Duplicated in Symfony (route: admin_backup_download)
+ */
+
+if (!defined('_PS_ADMIN_DIR_')) {
+    define('_PS_ADMIN_DIR_', __DIR__);
+}
+include _PS_ADMIN_DIR_.'/../config/config.inc.php';
+
+if (!Context::getContext()->employee->isLoggedBack()) {
+    Tools::redirectAdmin(Context::getContext()->link->getAdminLink('AdminLogin'));
+}
+
+$tabAccess = Profile::getProfileAccess(
+    Context::getContext()->employee->id_profile,
+    Tab::getIdFromClassName('AdminBackup')
+);
+
+if ($tabAccess['view'] !== '1') {
+    die(Context::getContext()->getTranslator()->trans(
+        'You do not have permission to view this.',
+        array(),
+        'Admin.Advparameters.Notification'
+    ));
+}
+
+$backupdir = realpath(PrestaShopBackup::getBackupPath());
+
+if ($backupdir === false) {
+    die(Context::getContext()->getTranslator()->trans(
+        'There is no "/backup" directory.',
+        array(),
+        'Admin.Advparameters.Notification'
+    ));
+}
+
+if (!$backupfile = Tools::getValue('filename')) {
+    die(Context::getContext()->getTranslator()->trans(
+        'No file has been specified.',
+        array(),
+        'Admin.Advparameters.Notification'
+    ));
+}
+
+// Check the realpath so we can validate the backup file is under the backup directory
+$backupfile = realpath($backupdir.DIRECTORY_SEPARATOR.$backupfile);
+
+if ($backupfile === false || strncmp($backupdir, $backupfile, strlen($backupdir)) != 0) {
+    die(Tools::dieOrLog('The backup file does not exist.'));
+}
+
+if (substr($backupfile, -4) == '.bz2') {
+    $contentType = 'application/x-bzip2';
+} elseif (substr($backupfile, -3) == '.gz') {
+    $contentType = 'application/x-gzip';
+} else {
+    $contentType = 'text/x-sql';
+}
+$fp = @fopen($backupfile, 'rb');
+
+if ($fp === false) {
+    die(Context::getContext()->getTranslator()->trans(
+            'Unable to open backup file(s).',
+            array(),
+            'Admin.Advparameters.Notification'
+        ).' "'.addslashes($backupfile).'"'
+    );
+}
+
+// Add the correct headers, this forces the file is saved
+header('Content-Type: '.$contentType);
+header('Content-Disposition: attachment; filename="'.Tools::getValue('filename'). '"');
+
+if (ob_get_level() && ob_get_length() > 0) {
+    ob_clean();
+}
+$ret = @fpassthru($fp);
+
+fclose($fp);
+
+if ($ret === false) {
+    die(Context::getContext()->getTranslator()->trans(
+            'Unable to display backup file(s).',
+            array(),
+            'Admin.Advparameters.Notification'
+        ).' "'.addslashes($backupfile).'"'
+    );
+}