File manager

File manager - Edit - /home/ferretapmx/public_html/Controller.tar

Back
CallbackController.php��0000644��00000001177�15231071701�0011020 0��ustar�00��<?php /** * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\Component\Users\Administrator\Controller\CallbackController as AdminCallbackController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Multi-factor Authentication plugins' AJAX callback controller * * @since 4.2.0 / class CallbackController extends AdminCallbackController { } ��UserController.php��0000644��00000020733�15231071701�0010241 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Application\ApplicationHelper; use Joomla\CMS\Language\Multilanguage; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; use Joomla\CMS\Session\Session; use Joomla\CMS\Uri\Uri; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Registration controller class for Users. * * @since 1.6 / class UserController extends BaseController { /* * Method to log in a user. * * @return void * * @since 1.6 / public function login() { $this->checkToken('post'); $input = $this->input->getInputForRequestMethod(); // Populate the data array: $data = []; $data['return'] = base64_decode($input->get('return', '', 'BASE64')); $data['username'] = $input->get('username', '', 'USERNAME'); $data['password'] = $input->get('password', '', 'RAW'); $data['secretkey'] = $input->get('secretkey', '', 'RAW'); // Check for a simple menu item id if (is_numeric($data['return'])) { $itemId = (int) $data['return']; $data['return'] = 'index.php?Itemid=' . $itemId; if (Multilanguage::isEnabled()) { $language = $this->getModel('Login', 'Site')->getMenuLanguage($itemId); if ($language !== '') { $data['return'] .= '&lang=' . $language; } } } elseif (!Uri::isInternal($data['return'])) { // Don't redirect to an external URL. $data['return'] = ''; } // Set the return URL if empty. if (empty($data['return'])) { $data['return'] = 'index.php?option=com_users&view=profile'; } // Set the return URL in the user state to allow modification by plugins $this->app->setUserState('users.login.form.return', $data['return']); // Get the log in options. $options = []; $options['remember'] = $this->input->getBool('remember', false); $options['return'] = $data['return']; // Get the log in credentials. $credentials = []; $credentials['username'] = $data['username']; $credentials['password'] = $data['password']; $credentials['secretkey'] = $data['secretkey']; // Perform the log in. if (true !== $this->app->login($credentials, $options)) { // Login failed ! // Clear user name, password and secret key before sending the login form back to the user. $data['remember'] = (int) $options['remember']; $data['username'] = ''; $data['password'] = ''; $data['secretkey'] = ''; $this->app->setUserState('users.login.form.data', $data); $this->app->redirect(Route::_('index.php?option=com_users&view=login', false)); } // Success if ($options['remember']) { $this->app->setUserState('rememberLogin', true); } $this->app->setUserState('users.login.form.data', []); $this->app->redirect(Route::_($this->app->getUserState('users.login.form.return'), false)); } /** * Method to log out a user. * * @return void * * @since 1.6 / public function logout() { $this->checkToken('request'); $app = $this->app; // Prepare the logout options. $options = [ 'clientid' => $app->get('shared_session', '0') ? null : 0, ]; // Perform the log out. $error = $app->logout(null, $options); $input = $app->getInput()->getInputForRequestMethod(); // Check if the log out succeeded. if ($error instanceof \Exception) { $app->redirect(Route::_('index.php?option=com_users&view=login', false)); } // Get the return URL from the request and validate that it is internal. $return = $input->get('return', '', 'BASE64'); $return = base64_decode($return); // Check for a simple menu item id if (is_numeric($return)) { $itemId = (int) $return; $return = 'index.php?Itemid=' . $itemId; if (Multilanguage::isEnabled()) { $language = $this->getModel('Login', 'Site')->getMenuLanguage($itemId); if ($language !== '') { $return .= '&lang=' . $language; } } } elseif (!Uri::isInternal($return)) { $return = ''; } // In case redirect url is not set, redirect user to homepage if (empty($return)) { $return = Uri::root(); } // Show a message when a user is logged out. $app->enqueueMessage(Text::_('COM_USERS_FRONTEND_LOGOUT_SUCCESS'), 'message'); // Redirect the user. $app->redirect(Route::_($return, false)); } /** * Method to logout directly and redirect to page. * * @return void * * @since 3.5 / public function menulogout() { // Get the ItemID of the page to redirect after logout $app = $this->app; $active = $app->getMenu()->getActive(); $itemid = $active ? $active->getParams()->get('logout') : 0; // Get the language of the page when multilang is on if (Multilanguage::isEnabled()) { if ($itemid) { $language = $this->getModel('Login', 'Site')->getMenuLanguage($itemid); // URL to redirect after logout $url = 'index.php?Itemid=' . $itemid . ($language !== '' ? '&lang=' . $language : ''); } else { // Logout is set to default. Get the home page ItemID $lang_code = $app->getInput()->cookie->getString(ApplicationHelper::getHash('language')); $item = $app->getMenu()->getDefault($lang_code); $itemid = $item->id; // Redirect to Home page after logout $url = 'index.php?Itemid=' . $itemid; } } else { // URL to redirect after logout, default page if no ItemID is set $url = $itemid ? 'index.php?Itemid=' . $itemid : Uri::root(); } // Logout and redirect $this->setRedirect(Route::_('index.php?option=com_users&task=user.logout&' . Session::getFormToken() . '=1&return=' . base64_encode($url), false)); } /** * Method to request a username reminder. * * @return boolean * * @since 1.6 / public function remind() { // Check the request token. $this->checkToken('post'); $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\RemindModel $model / $model = $this->getModel('Remind', 'Site'); $data = $this->input->post->get('jform', [], 'array'); // Submit the username remind request. $return = $model->processRemindRequest($data); // Check for a hard error. if ($return instanceof \Exception) { // Get the error message to display. $message = $app->get('error_reporting') ? $return->getMessage() : Text::_('COM_USERS_REMIND_REQUEST_ERROR'); // Go back to the complete form. $this->setRedirect(Route::_('index.php?option=com_users&view=remind', false), $message, 'error'); return false; } if ($return === false) { // Go back to the complete form. $message = Text::sprintf('COM_USERS_REMIND_REQUEST_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_users&view=remind', false), $message, 'notice'); return false; } // Proceed to the login form. $message = Text::_('COM_USERS_REMIND_REQUEST_SUCCESS'); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false), $message); return true; } /* * Method to resend a user. * * @return void * * @since 1.6 / public function resend() { // Check for request forgeries // $this->checkToken('post'); } } ��RegistrationController.php��0000644��00000022515�15231071701�0011775 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Application\CMSWebApplicationInterface; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; use Joomla\CMS\User\UserFactoryAwareInterface; use Joomla\CMS\User\UserFactoryAwareTrait; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Registration controller class for Users. * * @since 1.6 / class RegistrationController extends BaseController implements UserFactoryAwareInterface { use UserFactoryAwareTrait; /* * Method to activate a user. * * @return boolean True on success, false on failure. * * @since 1.6 * @throws \Exception / public function activate() { $user = $this->app->getIdentity(); $input = $this->input; $uParams = ComponentHelper::getParams('com_users'); // Check for admin activation. Don't allow non-super-admin to delete a super admin if ($uParams->get('useractivation') != 2 && $user->id) { $this->setRedirect('index.php'); return true; } // If user registration or account activation is disabled, throw a 403. if ($uParams->get('useractivation') == 0 \|\| $uParams->get('allowUserRegistration') == 0) { throw new \Exception(Text::_('JLIB_APPLICATION_ERROR_ACCESS_FORBIDDEN'), 403); } /* @var \Joomla\Component\Users\Site\Model\RegistrationModel $model / $model = $this->getModel('Registration', 'Site'); $token = $input->getAlnum('token'); // Check that the token is in a valid format. if ($token === null \|\| \strlen($token) !== 32) { throw new \Exception(Text::_('JINVALID_TOKEN'), 403); } // Get the User ID $userIdToActivate = $model->getUserIdFromToken($token); if (!$userIdToActivate) { $this->setMessage(Text::_('COM_USERS_ACTIVATION_TOKEN_NOT_FOUND')); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); return false; } // Get the user we want to activate $userToActivate = $this->getUserFactory()->loadUserById($userIdToActivate); // Admin activation is on and admin is activating the account if (($uParams->get('useractivation') == 2) && $userToActivate->getParam('activate', 0)) { // If a user admin is not logged in, redirect them to the login page with an error message if (!$user->authorise('core.create', 'com_users') \|\| !$user->authorise('core.manage', 'com_users')) { $activationUrl = 'index.php?option=com_users&task=registration.activate&token=' . $token; $loginUrl = 'index.php?option=com_users&view=login&return=' . base64_encode($activationUrl); // In case we still run into this in the second step the user does not have the right permissions $message = Text::_('COM_USERS_REGISTRATION_ACL_ADMIN_ACTIVATION_PERMISSIONS'); // When we are not logged in we should login if ($user->guest) { $message = Text::_('COM_USERS_REGISTRATION_ACL_ADMIN_ACTIVATION'); } $this->setMessage($message); $this->setRedirect(Route::_($loginUrl, false)); return false; } } // Attempt to activate the user. $return = $model->activate($token); // Check for errors. if ($return === false) { // Redirect back to the home page. $this->setMessage(Text::sprintf('COM_USERS_REGISTRATION_SAVE_FAILED', $model->getError()), 'error'); $this->setRedirect('index.php'); return false; } $useractivation = $uParams->get('useractivation'); // Redirect to the login screen. if ($useractivation == 0) { $this->setMessage(Text::_('COM_USERS_REGISTRATION_SAVE_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); } elseif ($useractivation == 1) { $this->setMessage(Text::_('COM_USERS_REGISTRATION_ACTIVATE_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); } elseif ($return->getParam('activate')) { $this->setMessage(Text::_('COM_USERS_REGISTRATION_VERIFY_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false)); } else { $this->setMessage(Text::_('COM_USERS_REGISTRATION_ADMINACTIVATE_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false)); } return true; } /* * Method to register a user. * * @return boolean True on success, false on failure. * * @since 1.6 * @throws \Exception / public function register() { // Check for request forgeries. $this->checkToken(); // If registration is disabled - Redirect to login page. if (ComponentHelper::getParams('com_users')->get('allowUserRegistration') == 0) { $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); return false; } $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\RegistrationModel $model / $model = $this->getModel('Registration', 'Site'); // Get the user data. $requestData = $this->input->post->get('jform', [], 'array'); // Validate the posted data. $form = $model->getForm(); if (!$form) { throw new \Exception($model->getError(), 500); } $data = $model->validate($form, $requestData); // Check for validation errors. if ($data === false) { // Get the validation messages. $errors = $model->getErrors(); // Push up to three validation messages out to the user. for ($i = 0, $n = \count($errors); $i < $n && $i < 3; $i++) { if ($errors[$i] instanceof \Exception) { $app->enqueueMessage($errors[$i]->getMessage(), CMSWebApplicationInterface::MSG_ERROR); } else { $app->enqueueMessage($errors[$i], CMSWebApplicationInterface::MSG_ERROR); } } /* * We need the filtered value of calendar fields because the UTC normalisation is * done in the filter and on output. This would apply the Timezone offset on * reload. We set the calendar values we save to the processed date. / $filteredData = $form->filter($requestData); foreach ($form->getFieldset() as $field) { if ($field->type === 'Calendar') { $fieldName = $field->fieldname; if ($field->group) { if (isset($filteredData[$field->group][$fieldName])) { $requestData[$field->group][$fieldName] = $filteredData[$field->group][$fieldName]; } } else { if (isset($filteredData[$fieldName])) { $requestData[$fieldName] = $filteredData[$fieldName]; } } } } // Save the data in the session. $app->setUserState('com_users.registration.data', $requestData); // Redirect back to the registration screen. $this->setRedirect(Route::_('index.php?option=com_users&view=registration', false)); return false; } // Attempt to save the data. $return = $model->register($data); // Check for errors. if ($return === false) { // Save the data in the session. $app->setUserState('com_users.registration.data', $data); // Redirect back to the edit screen. $this->setMessage($model->getError(), 'error'); $this->setRedirect(Route::_('index.php?option=com_users&view=registration', false)); return false; } // Flush the data from the session. $app->setUserState('com_users.registration.data', null); // Redirect to the profile screen. if ($return === 'adminactivate') { $this->setMessage(Text::_('COM_USERS_REGISTRATION_COMPLETE_VERIFY')); $this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false)); } elseif ($return === 'useractivate') { $this->setMessage(Text::_('COM_USERS_REGISTRATION_COMPLETE_ACTIVATE')); $this->setRedirect(Route::_('index.php?option=com_users&view=registration&layout=complete', false)); } else { $this->setMessage(Text::_('COM_USERS_REGISTRATION_SAVE_SUCCESS')); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); } return true; } } ��ResetController.php��0000644��00000013131�15231071701�0010377 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Reset controller class for Users. * * @since 1.6 / class ResetController extends BaseController { /* * Method to request a password reset. * * @return boolean * * @since 1.6 / public function request() { // Check the request token. $this->checkToken('post'); $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\ResetModel $model / $model = $this->getModel('Reset', 'Site'); $data = $this->input->post->get('jform', [], 'array'); // Submit the password reset request. $return = $model->processResetRequest($data); // Check for a hard error. if ($return instanceof \Exception && JDEBUG) { // Get the error message to display. if ($app->get('error_reporting')) { $message = $return->getMessage(); } else { $message = Text::_('COM_USERS_RESET_REQUEST_ERROR'); } // Go back to the request form. $this->setRedirect(Route::_('index.php?option=com_users&view=reset', false), $message, 'error'); return false; } if ($return === false && JDEBUG) { // The request failed. // Go back to the request form. $message = Text::sprintf('COM_USERS_RESET_REQUEST_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_users&view=reset', false), $message, 'notice'); return false; } // To not expose if the user exists or not we send a generic message. $message = Text::_('COM_USERS_RESET_REQUEST'); $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=confirm', false), $message, 'notice'); return true; } /* * Method to confirm the password request. * * @return boolean * * @access public * @since 1.6 / public function confirm() { // Check the request token. $this->checkToken('request'); $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\ResetModel $model / $model = $this->getModel('Reset', 'Site'); $data = $this->input->get('jform', [], 'array'); // Confirm the password reset request. $return = $model->processResetConfirm($data); // Check for a hard error. if ($return instanceof \Exception) { // Get the error message to display. if ($app->get('error_reporting')) { $message = $return->getMessage(); } else { $message = Text::_('COM_USERS_RESET_CONFIRM_ERROR'); } // Go back to the confirm form. $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=confirm', false), $message, 'error'); return false; } if ($return === false) { // Confirm failed. // Go back to the confirm form. $message = Text::sprintf('COM_USERS_RESET_CONFIRM_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=confirm', false), $message, 'notice'); return false; } // Confirm succeeded. // Proceed to step three. $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=complete', false)); return true; } /* * Method to complete the password reset process. * * @return boolean * * @since 1.6 / public function complete() { // Check for request forgeries $this->checkToken('post'); $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\ResetModel $model / $model = $this->getModel('Reset', 'Site'); $data = $this->input->post->get('jform', [], 'array'); // Complete the password reset request. $return = $model->processResetComplete($data); // Check for a hard error. if ($return instanceof \Exception) { // Get the error message to display. if ($app->get('error_reporting')) { $message = $return->getMessage(); } else { $message = Text::_('COM_USERS_RESET_COMPLETE_ERROR'); } // Go back to the complete form. $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=complete', false), $message, 'error'); return false; } if ($return === false) { // Complete failed. // Go back to the complete form. $message = Text::sprintf('COM_USERS_RESET_COMPLETE_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_users&view=reset&layout=complete', false), $message, 'notice'); return false; } // Complete succeeded. // Proceed to the login form. $message = Text::_('COM_USERS_RESET_COMPLETE_SUCCESS'); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false), $message); return true; } } ��MethodsController.php��0000644��00000002554�15231071701�0010727 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Router\Route; use Joomla\Component\Users\Administrator\Controller\MethodsController as AdminMethodsController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Multi-factor Authentication methods selection and management controller * * @since 4.2.0 / class MethodsController extends AdminMethodsController { /* * Execute a task by triggering a Method in the derived class. * * @param string $task The task to perform. * * @return mixed The value returned by the called Method. * * @throws \Exception * @since 4.2.0 / public function execute($task) { try { return parent::execute($task); } catch (\Exception $e) { if ($e->getCode() !== 403) { throw $e; } if ($this->app->getIdentity()->guest) { $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); return null; } } return null; } } ��CaptiveController.php��0000644��00000002530�15231071701�0010711 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Router\Route; use Joomla\Component\Users\Administrator\Controller\CaptiveController as AdminCaptiveController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Captive Multi-factor Authentication page controller * * @since 4.2.0 / class CaptiveController extends AdminCaptiveController { /* * Execute a task by triggering a Method in the derived class. * * @param string $task The task to perform. * * @return mixed The value returned by the called Method. * * @throws \Exception * @since 4.2.0 / public function execute($task) { try { return parent::execute($task); } catch (\Exception $e) { if ($e->getCode() !== 403) { throw $e; } if ($this->app->getIdentity()->guest) { $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); return null; } } return null; } } ��RemindController.php��0000644��00000003367�15231071701�0010545 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Reset controller class for Users. * * @since 1.6 / class RemindController extends BaseController { /* * Method to request a username reminder. * * @return boolean * * @since 1.6 / public function remind() { // Check the request token. $this->checkToken('post'); /* @var \Joomla\Component\Users\Site\Model\RemindModel $model / $model = $this->getModel('Remind', 'Site'); $data = $this->input->post->get('jform', [], 'array'); // Submit the password reset request. $return = $model->processRemindRequest($data); // Check for a hard error. if (!$return && JDEBUG) { // The request failed. // Go back to the request form. $message = Text::sprintf('COM_USERS_REMIND_REQUEST_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_users&view=remind', false), $message, 'notice'); return false; } // To not expose if the user exists or not we send a generic message. $message = Text::_('COM_USERS_REMIND_REQUEST'); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false), $message, 'notice'); return true; } } ��DisplayController.php��0000644��00000003420�15231071701�0010722 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_finder * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Finder\Site\Controller; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\Component\Finder\Administrator\Helper\LanguageHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Finder Component Controller. * * @since 2.5 / class DisplayController extends BaseController { /* * Method to display a view. * * @param boolean $cachable If true, the view output will be cached. [optional] * @param array $urlparams An array of safe URL parameters and their variable types. Optional. * @see \Joomla\CMS\Filter\InputFilter::clean() for valid values. * * @return static This object is to support chaining. * * @since 2.5 / public function display($cachable = false, $urlparams = []) { $input = $this->app->getInput(); $cachable = true; // Load plugin language files. LanguageHelper::loadPluginLanguage(); // Set the default view name and format from the Request. $viewName = $input->get('view', 'search', 'word'); $input->set('view', $viewName); // Don't cache view for search queries if ($input->get('q', null, 'string') \|\| $input->get('f', null, 'int') \|\| $input->get('t', null, 'array')) { $cachable = false; } $safeurlparams = [ 'f' => 'INT', 'lang' => 'CMD', ]; return parent::display($cachable, $safeurlparams); } } ��ProfileController.php��0000644��00000016541�15231071701�0010725 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Application\CMSWebApplicationInterface; use Joomla\CMS\Event\Model; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Profile controller class for Users. * * @since 1.6 / class ProfileController extends BaseController { /* * Method to check out a user for editing and redirect to the edit form. * * @return boolean * * @since 1.6 / public function edit() { $app = $this->app; $user = $this->app->getIdentity(); $loginUserId = (int) $user->id; // Get the current user id. $userId = $this->input->getInt('user_id'); // Check if the user is trying to edit another users profile. if ($userId != $loginUserId) { $app->enqueueMessage(Text::_('JERROR_ALERTNOAUTHOR'), 'error'); $app->setHeader('status', 403, true); return false; } // Check if the user logged in with a cookie if (isset($user->cookieLogin) && !empty($user->cookieLogin)) { // If so, the user must login to edit the password and other data. $app->enqueueMessage(Text::_('JGLOBAL_REMEMBER_MUST_LOGIN'), 'message'); $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); return false; } // Set the user id for the user to edit in the session. $app->setUserState('com_users.edit.profile.id', $userId); // Redirect to the edit screen. $this->setRedirect(Route::_('index.php?option=com_users&view=profile&layout=edit', false)); return true; } /* * Method to save a user's profile data. * * @return void\|boolean * * @since 1.6 * @throws \Exception / public function save() { // Check for request forgeries. $this->checkToken(); $app = $this->app; /* @var \Joomla\Component\Users\Site\Model\ProfileModel $model / $model = $this->getModel('Profile', 'Site'); $user = $this->app->getIdentity(); $userId = (int) $user->id; // Get the user data. $requestData = $app->getInput()->post->get('jform', [], 'array'); // Force the ID to this user. $requestData['id'] = $userId; // Validate the posted data. $form = $model->getForm(); if (!$form) { throw new \Exception($model->getError(), 500); } // Send an object which can be modified through the plugin event $objData = (object) $requestData; $this->getDispatcher()->dispatch( 'onContentNormaliseRequestData', new Model\NormaliseRequestDataEvent('onContentNormaliseRequestData', [ 'context' => 'com_users.user', 'data' => $objData, 'subject' => $form, ]) ); $requestData = (array) $objData; // Validate the posted data. $data = $model->validate($form, $requestData); // Check for errors. if ($data === false) { // Get the validation messages. $errors = $model->getErrors(); // Push up to three validation messages out to the user. for ($i = 0, $n = \count($errors); $i < $n && $i < 3; $i++) { if ($errors[$i] instanceof \Exception) { $app->enqueueMessage($errors[$i]->getMessage(), CMSWebApplicationInterface::MSG_ERROR); } else { $app->enqueueMessage($errors[$i], CMSWebApplicationInterface::MSG_ERROR); } } // Unset the passwords. unset($requestData['password1'], $requestData['password2']); // Save the data in the session. $app->setUserState('com_users.edit.profile.data', $requestData); // Redirect back to the edit screen. $userId = (int) $app->getUserState('com_users.edit.profile.id'); $this->setRedirect(Route::_('index.php?option=com_users&view=profile&layout=edit&user_id=' . $userId, false)); return false; } // Attempt to save the data. $return = $model->save($data); // Check for errors. if ($return === false) { // Save the data in the session. $app->setUserState('com_users.edit.profile.data', $data); // Redirect back to the edit screen. $userId = (int) $app->getUserState('com_users.edit.profile.id'); $this->setMessage(Text::sprintf('COM_USERS_PROFILE_SAVE_FAILED', $model->getError()), 'warning'); $this->setRedirect(Route::_('index.php?option=com_users&view=profile&layout=edit&user_id=' . $userId, false)); return false; } // Redirect the user and adjust session state based on the chosen task. switch ($this->getTask()) { case 'apply': // Check out the profile. $app->setUserState('com_users.edit.profile.id', $return); // Redirect back to the edit screen. $this->setMessage(Text::_('COM_USERS_PROFILE_SAVE_SUCCESS')); $redirect = $app->getUserState('com_users.edit.profile.redirect', ''); // Don't redirect to an external URL. if (!Uri::isInternal($redirect)) { $redirect = null; } if (!$redirect) { $redirect = 'index.php?option=com_users&view=profile&layout=edit&hidemainmenu=1'; } $this->setRedirect(Route::_($redirect, false)); break; default: // Clear the profile id from the session. $app->setUserState('com_users.edit.profile.id', null); $redirect = $app->getUserState('com_users.edit.profile.redirect', ''); // Don't redirect to an external URL. if (!Uri::isInternal($redirect)) { $redirect = null; } if (!$redirect) { $redirect = 'index.php?option=com_users&view=profile&user_id=' . $return; } // Redirect to the list screen. $this->setMessage(Text::_('COM_USERS_PROFILE_SAVE_SUCCESS')); $this->setRedirect(Route::_($redirect, false)); break; } // Flush the data from the session. $app->setUserState('com_users.edit.profile.data', null); } /* * Method to cancel an edit. * * @return void * * @since 4.0.0 / public function cancel() { // Check for request forgeries. $this->checkToken(); // Flush the data from the session. $this->app->setUserState('com_users.edit.profile', null); // Redirect to user profile. $this->setRedirect(Route::_('index.php?option=com_users&view=profile', false)); } } ��MethodController.php��0000644��00000002516�15231071701�0010542 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_users * * @copyright (C) 2022 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Users\Site\Controller; use Joomla\CMS\Router\Route; use Joomla\Component\Users\Administrator\Controller\MethodController as AdminMethodController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Multi-factor Authentication method controller * * @since 4.2.0 / class MethodController extends AdminMethodController { /* * Execute a task by triggering a Method in the derived class. * * @param string $task The task to perform. * * @return mixed The value returned by the called Method. * * @throws \Exception * @since 4.2.0 / public function execute($task) { try { return parent::execute($task); } catch (\Exception $e) { if ($e->getCode() !== 403) { throw $e; } if ($this->app->getIdentity()->guest) { $this->setRedirect(Route::_('index.php?option=com_users&view=login', false)); return null; } } return null; } } ��.htaccess��0000555��00000000355�15231071701�0006343 0��ustar�00��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>��RequestController.php��0000644��00000012302�15231071754�0010754 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_privacy * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Privacy\Site\Controller; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; use Joomla\Component\Privacy\Site\Model\ConfirmModel; use Joomla\Component\Privacy\Site\Model\RemindModel; use Joomla\Component\Privacy\Site\Model\RequestModel; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Request action controller class. * * @since 3.9.0 / class RequestController extends BaseController { /* * Method to confirm the information request. * * @return boolean * * @since 3.9.0 / public function confirm() { // Check the request token. $this->checkToken('post'); /* @var ConfirmModel $model / $model = $this->getModel('Confirm', 'Site'); $data = $this->input->post->get('jform', [], 'array'); $return = $model->confirmRequest($data); // Check for a hard error. if ($return instanceof \Exception) { // Get the error message to display. if ($this->app->get('error_reporting')) { $message = $return->getMessage(); } else { $message = Text::_('COM_PRIVACY_ERROR_CONFIRMING_REQUEST'); } // Go back to the confirm form. $this->setRedirect(Route::_('index.php?option=com_privacy&view=confirm', false), $message, 'error'); return false; } if ($return === false) { // Confirm failed. // Go back to the confirm form. $message = Text::sprintf('COM_PRIVACY_ERROR_CONFIRMING_REQUEST_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_privacy&view=confirm', false), $message, 'notice'); return false; } // Confirm succeeded. $this->setRedirect(Route::_(Uri::root()), Text::_('COM_PRIVACY_CONFIRM_REQUEST_SUCCEEDED'), 'info'); return true; } /* * Method to submit an information request. * * @return boolean * * @since 3.9.0 / public function submit() { // Check the request token. $this->checkToken('post'); /* @var RequestModel $model / $model = $this->getModel('Request', 'Site'); $data = $this->input->post->get('jform', [], 'array'); $return = $model->createRequest($data); // Check for a hard error. if ($return instanceof \Exception) { // Get the error message to display. if ($this->app->get('error_reporting')) { $message = $return->getMessage(); } else { $message = Text::_('COM_PRIVACY_ERROR_CREATING_REQUEST'); } // Go back to the confirm form. $this->setRedirect(Route::_('index.php?option=com_privacy&view=request', false), $message, 'error'); return false; } if ($return === false) { // Confirm failed. // Go back to the confirm form. $message = Text::sprintf('COM_PRIVACY_ERROR_CREATING_REQUEST_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_privacy&view=request', false), $message, 'notice'); return false; } // Confirm succeeded. $this->setRedirect(Route::_(Uri::root()), Text::_('COM_PRIVACY_CREATE_REQUEST_SUCCEEDED'), 'info'); return true; } /* * Method to extend the privacy consent. * * @return boolean * * @since 3.9.0 / public function remind() { // Check the request token. $this->checkToken('post'); /* @var RemindModel $model / $model = $this->getModel('Remind', 'Site'); $data = $this->input->post->get('jform', [], 'array'); $return = $model->remindRequest($data); // Check for a hard error. if ($return instanceof \Exception) { // Get the error message to display. if ($this->app->get('error_reporting')) { $message = $return->getMessage(); } else { $message = Text::_('COM_PRIVACY_ERROR_REMIND_REQUEST'); } // Go back to the confirm form. $this->setRedirect(Route::_('index.php?option=com_privacy&view=remind', false), $message, 'error'); return false; } if ($return === false) { // Confirm failed. // Go back to the confirm form. $message = Text::sprintf('COM_PRIVACY_ERROR_CONFIRMING_REMIND_FAILED', $model->getError()); $this->setRedirect(Route::_('index.php?option=com_privacy&view=remind', false), $message, 'notice'); return false; } // Confirm succeeded. $this->setRedirect(Route::_(Uri::root()), Text::_('COM_PRIVACY_CONFIRM_REMIND_SUCCEEDED'), 'info'); return true; } } ��ModulesController.php��0000644��00000013020�15231072126�0010724 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_config * * @copyright (C) 2017 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Config\Site\Controller; use Joomla\CMS\Application\AdministratorApplication; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Client\ClientHelper; use Joomla\CMS\Factory; use Joomla\CMS\Form\Form; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; use Joomla\Component\Modules\Administrator\Controller\ModuleController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Component Controller * * @since 1.5 / class ModulesController extends BaseController { /* * @param array $config An optional associative array of configuration settings. * Recognized key values include 'name', 'default_task', 'model_path', and * 'view_path' (this list is not meant to be comprehensive). * @param ?MVCFactoryInterface $factory The factory. * @param ?CMSApplication $app The Application for the dispatcher * @param ?\Joomla\CMS\Input\Input $input The Input object for the request * * @since 1.6 / public function __construct($config = [], ?MVCFactoryInterface $factory = null, $app = null, $input = null) { parent::__construct($config, $factory, $app, $input); $this->registerTask('apply', 'save'); } /* * Method to handle cancel * * @return void * * @since 3.2 / public function cancel() { // Redirect back to previous page $this->setRedirect($this->getReturnUrl()); } /* * Method to save module editing. * * @return void * * @since 3.2 / public function save() { // Check for request forgeries. $this->checkToken(); // Check if the user is authorized to do this. $user = $this->app->getIdentity(); if (!$user->authorise('module.edit.frontend', 'com_modules.module.' . $this->input->get('id'))) { $this->app->enqueueMessage(Text::_('JERROR_ALERTNOAUTHOR'), 'error'); $this->app->redirect('index.php'); } // Set FTP credentials, if given. ClientHelper::setCredentialsFromRequest('ftp'); // Get submitted module id $moduleId = '&id=' . $this->input->getInt('id'); // Get returnUri $returnUri = $this->input->post->get('return', null, 'base64'); $redirect = ''; if (!empty($returnUri)) { $redirect = '&return=' . $returnUri; } /* @var AdministratorApplication $app / $app = Factory::getContainer()->get(AdministratorApplication::class); // Reset Uri cache. Uri::reset(); // Get a document object $document = $this->app->getDocument(); // Load application dependencies. $app->loadLanguage($this->app->getLanguage()); $app->loadDocument($document); $app->loadIdentity($user); /* @var \Joomla\CMS\Dispatcher\ComponentDispatcher $dispatcher / $dispatcher = $app->bootComponent('com_modules')->getDispatcher($app); /* @var ModuleController $controllerClass / $controllerClass = $dispatcher->getController('Module'); // Set backend required params $document->setType('json'); // Execute backend controller Form::addFormPath(JPATH_ADMINISTRATOR . '/components/com_modules/forms'); $return = $controllerClass->save(); // Reset params back after requesting from service $document->setType('html'); // Check the return value. if ($return === false) { // Save the data in the session. $data = $this->input->post->get('jform', [], 'array'); $this->app->setUserState('com_config.modules.global.data', $data); // Save failed, go back to the screen and display a notice. $this->app->enqueueMessage(Text::_('JERROR_SAVE_FAILED')); $this->app->redirect(Route::_('index.php?option=com_config&view=modules' . $moduleId . $redirect, false)); } // Redirect back to com_config display $this->app->enqueueMessage(Text::_('COM_CONFIG_MODULES_SAVE_SUCCESS'), 'success'); // Set the redirect based on the task. switch ($this->input->getCmd('task')) { case 'apply': $this->app->redirect(Route::_('index.php?option=com_config&view=modules' . $moduleId . $redirect, false)); break; case 'save': default: $this->setRedirect($this->getReturnUrl()); break; } } /* * Method to get redirect URL after saving or cancel editing a module from frontend * * @return string * * @since 5.1.0 / private function getReturnUrl(): string { if ($return = $this->input->post->get('return', '', 'BASE64')) { $return = base64_decode(urldecode($return)); // Only redirect to if it is an internal URL if (Uri::isInternal($return)) { return $return; } } return Uri::base(); } } ��ConfigController.php��0000644��00000010517�15231072126�0010531 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_config * * @copyright (C) 2017 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Config\Site\Controller; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Client\ClientHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Component Controller * * @since 1.5 / class ConfigController extends BaseController { /* * @param array $config An optional associative array of configuration settings. * Recognized key values include 'name', 'default_task', 'model_path', and * 'view_path' (this list is not meant to be comprehensive). * @param ?MVCFactoryInterface $factory The factory. * @param ?CMSApplication $app The JApplication for the dispatcher * @param ?\Joomla\CMS\Input\Input $input The Input object for the request * * @since 1.6 / public function __construct($config = [], ?MVCFactoryInterface $factory = null, $app = null, $input = null) { parent::__construct($config, $factory, $app, $input); $this->registerTask('apply', 'save'); } /* * Method to handle cancel * * @return void * * @since 3.2 / public function cancel() { // Redirect back to home(base) page $this->setRedirect(Uri::base()); } /* * Method to save global configuration. * * @return boolean True on success. * * @since 3.2 / public function save() { // Check for request forgeries. $this->checkToken(); // Check if the user is authorized to do this. if (!$this->app->getIdentity()->authorise('core.admin')) { $this->app->enqueueMessage(Text::_('JERROR_ALERTNOAUTHOR')); $this->app->redirect('index.php'); } // Set FTP credentials, if given. ClientHelper::setCredentialsFromRequest('ftp'); $model = $this->getModel(); $form = $model->getForm(); $data = $this->app->getInput()->post->get('jform', [], 'array'); // Validate the posted data. $return = $model->validate($form, $data); // Check for validation errors. if ($return === false) { / * The validate method enqueued all messages for us, so we just need to redirect back. / // Save the data in the session. $this->app->setUserState('com_config.config.global.data', $data); // Redirect back to the edit screen. $this->app->redirect(Route::_('index.php?option=com_config&view=config', false)); } // Attempt to save the configuration. $data = $return; // Access backend com_config $saveClass = $this->factory->createController('Application', 'Administrator', [], $this->app, $this->input); // Get a document object $document = $this->app->getDocument(); // Set backend required params $document->setType('json'); // Execute backend controller $return = $saveClass->save(); // Reset params back after requesting from service $document->setType('html'); // Check the return value. if ($return === false) { / * The save method enqueued all messages for us, so we just need to redirect back. / // Save the data in the session. $this->app->setUserState('com_config.config.global.data', $data); // Save failed, go back to the screen and display a notice. $this->app->redirect(Route::_('index.php?option=com_config&view=config', false)); } // Redirect back to com_config display $this->app->enqueueMessage(Text::_('COM_CONFIG_SAVE_SUCCESS')); $this->app->redirect(Route::_('index.php?option=com_config&view=config', false)); return true; } } ��TemplatesController.php��0000644��00000007222�15231072126�0011261 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_config * * @copyright (C) 2017 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Config\Site\Controller; use Joomla\CMS\Application\CMSApplication; use Joomla\CMS\Client\ClientHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\BaseController; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Component Controller * * @since 1.5 / class TemplatesController extends BaseController { /* * @param array $config An optional associative array of configuration settings. * Recognized key values include 'name', 'default_task', 'model_path', and * 'view_path' (this list is not meant to be comprehensive). * @param ?MVCFactoryInterface $factory The factory. * @param ?CMSApplication $app The Application for the dispatcher * @param ?\Joomla\CMS\Input\Input $input The Input object for the request * * @since 1.6 / public function __construct($config = [], ?MVCFactoryInterface $factory = null, $app = null, $input = null) { parent::__construct($config, $factory, $app, $input); // Apply, Save & New, and Save As copy should be standard on forms. $this->registerTask('apply', 'save'); } /* * Method to handle cancel * * @return void * * @since 3.2 / public function cancel() { // Redirect back to home(base) page $this->setRedirect(Uri::base()); } /* * Method to save global configuration. * * @return boolean True on success. * * @since 3.2 / public function save() { // Check for request forgeries. $this->checkToken(); // Check if the user is authorized to do this. if (!$this->app->getIdentity()->authorise('core.admin')) { $this->setRedirect('index.php', Text::_('JERROR_ALERTNOAUTHOR')); return false; } // Set FTP credentials, if given. ClientHelper::setCredentialsFromRequest('ftp'); $app = $this->app; // Access backend com_templates $controllerClass = $app->bootComponent('com_templates') ->getMVCFactory()->createController('Style', 'Administrator', [], $app, $app->getInput()); // Get a document object $document = $app->getDocument(); // Set backend required params $document->setType('json'); $this->input->set('id', $app->getTemplate(true)->id); // Execute backend controller $return = $controllerClass->save(); // Reset params back after requesting from service $document->setType('html'); // Check the return value. if ($return === false) { // Save failed, go back to the screen and display a notice. $this->setMessage(Text::sprintf('JERROR_SAVE_FAILED'), 'error'); $this->setRedirect(Route::_('index.php?option=com_config&view=templates', false)); return false; } // Set the success message. $this->setMessage(Text::_('COM_CONFIG_SAVE_SUCCESS')); // Redirect back to com_config display $this->setRedirect(Route::_('index.php?option=com_config&view=templates', false)); return true; } } ��BaseController.php��0000644��00000113416�15231072410�0010174 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2006 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\CMS\MVC\Controller; use Joomla\Application\AbstractApplication; use Joomla\CMS\Application\CMSApplicationInterface; use Joomla\CMS\Application\CMSWebApplicationInterface; use Joomla\CMS\Cache\Exception\CacheExceptionInterface; use Joomla\CMS\Document\DocumentAwareInterface; use Joomla\CMS\Factory; use Joomla\CMS\Filter\InputFilter; use Joomla\CMS\Language\LanguageAwareInterface; use Joomla\CMS\Language\Text; use Joomla\CMS\Log\Log; use Joomla\CMS\MVC\Factory\LegacyFactory; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\BaseDatabaseModel; use Joomla\CMS\MVC\Model\BaseModel; use Joomla\CMS\MVC\View\ViewInterface; use Joomla\CMS\Session\Session; use Joomla\CMS\Uri\Uri; use Joomla\CMS\User\CurrentUserInterface; use Joomla\Event\DispatcherAwareInterface; use Joomla\Event\DispatcherAwareTrait; use Joomla\Event\DispatcherInterface; use Joomla\Filesystem\Path; use Joomla\Input\Input; use Psr\Log\LoggerAwareInterface; use Psr\Log\LoggerAwareTrait; use Psr\Log\LoggerInterface; use Psr\Log\NullLogger; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Base class for a Joomla Controller * * Controller (Controllers are where you put all the actual code.) Provides basic * functionality, such as rendering views (aka displaying templates). * * @since 2.5.5 / class BaseController implements ControllerInterface, DispatcherAwareInterface, LoggerAwareInterface { use LoggerAwareTrait; use DispatcherAwareTrait; /* * The base path of the controller * * @var string * @since 3.0 / protected $basePath; /* * The default view for the display method. * * @var string * @since 3.0 / protected $default_view; /* * The mapped task that was performed. * * @var string * @since 3.0 / protected $doTask; /* * Redirect message. * * @var string * @since 3.0 / protected $message; /* * Redirect message type. * * @var string * @since 3.0 / protected $messageType; /* * Array of class methods * * @var array * @since 3.0 / protected $methods; /* * The name of the controller * * @var string * @since 3.0 / protected $name; /* * The prefix of the models * * @var string * @since 3.0 / protected $model_prefix; /* * The set of search directories for resources (views). * * @var array * @since 3.0 / protected $paths; /* * URL for redirection. * * @var string * @since 3.0 / protected $redirect; /* * Current or most recently performed task. * * @var string * @since 3.0 / protected $task; /* * Array of class methods to call for a given task. * * @var array * @since 3.0 / protected $taskMap; /* * Hold a JInput object for easier access to the input variables. * * @var Input * @since 3.0 / protected $input; /* * The factory. * * @var MVCFactoryInterface * @since 3.10.0 / protected $factory; /* * Instance container. * * @var static * @since 3.0 / protected static $instance; /* * Instance container containing the views. * * @var ViewInterface[] * @since 3.4 / protected static $views; /* * The Application * * @var CMSApplicationInterface * @since 4.0.0 / protected $app; /* * Adds to the stack of model paths in LIFO order. * * @param mixed $path The directory (string), or list of directories (array) to add. * @param string $prefix A prefix for models * * @return void * * @since 3.0 * * @deprecated 4.3 will be removed in 6.0 * Will be removed without replacement. Get the model through the MVCFactory instead / public static function addModelPath($path, $prefix = '') { BaseModel::addIncludePath($path, $prefix); } /* * Create the filename for a resource. * * @param string $type The resource type to create the filename for. * @param array $parts An associative array of filename information. Optional. * * @return string The filename. * * @since 3.0 / public static function createFileName($type, $parts = []) { $filename = ''; switch ($type) { case 'controller': if (!empty($parts['format'])) { if ($parts['format'] === 'html') { $parts['format'] = ''; } else { $parts['format'] = '.' . $parts['format']; } } else { $parts['format'] = ''; } $filename = strtolower($parts['name'] . $parts['format'] . '.php'); break; case 'view': if (!empty($parts['type'])) { $parts['type'] = '.' . $parts['type']; } else { $parts['type'] = ''; } $filename = strtolower($parts['name'] . '/view' . $parts['type'] . '.php'); break; } return $filename; } /* * Method to get a singleton controller instance. * * @param string $prefix The prefix for the controller. * @param array $config An array of optional constructor options. * * @return static * * @since 3.0 * * @deprecated 4.3 will be removed in 6.0 * Get the controller through the MVCFactory instead * Example: Factory::getApplication()->bootComponent($option)->getMVCFactory()->createController(...); * * @throws \Exception if the controller cannot be loaded. / public static function getInstance($prefix, $config = []) { if (\is_object(self::$instance)) { return self::$instance; } @trigger_error( \sprintf( '%1$s::getInstance() is deprecated. Load it through the MVC factory.', self::class ), E_USER_DEPRECATED ); $app = Factory::getApplication(); $input = $app->getInput(); // Get the environment configuration. $basePath = \array_key_exists('base_path', $config) ? $config['base_path'] : JPATH_COMPONENT; $format = $input->getWord('format'); $command = $input->get('task', 'display'); // Check for array format. $filter = InputFilter::getInstance(); if (\is_array($command)) { $keys = array_keys($command); $command = $filter->clean(array_pop($keys), 'cmd'); } else { $command = $filter->clean($command, 'cmd'); } // Check for a controller.task command. if (str_contains($command, '.')) { // Explode the controller.task command. [$type, $task] = explode('.', $command); // Define the controller filename and path. $file = self::createFileName('controller', ['name' => $type, 'format' => $format]); $path = $basePath . '/controllers/' . $file; $backuppath = $basePath . '/controller/' . $file; // Reset the task without the controller context. $input->set('task', $task); } else { // Base controller. $type = ''; // Define the controller filename and path. $file = self::createFileName('controller', ['name' => 'controller', 'format' => $format]); $path = $basePath . '/' . $file; $backupfile = self::createFileName('controller', ['name' => 'controller']); $backuppath = $basePath . '/' . $backupfile; } // Get the controller class name. $class = ucfirst($prefix) . 'Controller' . ucfirst($type); // Include the class if not present. if (!class_exists($class)) { // If the controller file path exists, include it. if (is_file($path)) { require_once $path; } elseif (isset($backuppath) && is_file($backuppath)) { require_once $backuppath; } else { throw new \InvalidArgumentException(Text::sprintf('JLIB_APPLICATION_ERROR_INVALID_CONTROLLER', $type, $format)); } } // Instantiate the class. if (!class_exists($class)) { throw new \InvalidArgumentException(Text::sprintf('JLIB_APPLICATION_ERROR_INVALID_CONTROLLER_CLASS', $class)); } // Check for a possible service from the container otherwise manually instantiate the class if (Factory::getContainer()->has($class)) { self::$instance = Factory::getContainer()->get($class); } else { self::$instance = new $class($config, null, $app, $input); } return self::$instance; } /* * Constructor. * * @param array $config An optional associative array of configuration settings. * Recognized key values include 'name', 'default_task', * 'model_path', and 'view_path' (this list is not meant to be * comprehensive). * @param ?MVCFactoryInterface $factory The factory. * @param ?CMSApplicationInterface $app The Application for the dispatcher * @param ?Input $input Input * * @since 3.0 / public function __construct($config = [], ?MVCFactoryInterface $factory = null, ?CMSApplicationInterface $app = null, ?Input $input = null) { $this->methods = []; $this->message = null; $this->messageType = 'message'; $this->paths = []; $this->redirect = null; $this->taskMap = []; $this->app = $app ?: Factory::getApplication(); $this->input = $input ?: $this->app->getInput(); /* * @deprecated This is to maintain b/c with the J4.0 implementation of BaseController. In Joomla 6.0 this will be * removed and instead the logger should be injected by the MVCFactory using * BaseController::setLogger() / if ($this->app instanceof AbstractApplication) { $this->setLogger($this->app->getLogger()); } if (\defined('JDEBUG') && JDEBUG) { Log::addLogger(['text_file' => 'jcontroller.log.php'], Log::ALL, ['controller']); } // Determine the methods to exclude from the base class. $xMethods = get_class_methods('\\Joomla\\CMS\\MVC\\Controller\\BaseController'); // Get the public methods in this class using reflection. $r = new \ReflectionClass($this); $rMethods = $r->getMethods(\ReflectionMethod::IS_PUBLIC); foreach ($rMethods as $rMethod) { $mName = $rMethod->getName(); // Add default display method if not explicitly declared. if ($mName === 'display' \|\| !\in_array($mName, $xMethods)) { $this->methods[] = strtolower($mName); // Auto register the methods as tasks. $this->taskMap[strtolower($mName)] = $mName; } } // Set the view name if (empty($this->name)) { if (\array_key_exists('name', $config)) { $this->name = $config['name']; } else { $this->name = $this->getName(); } } // Set a base path for use by the controller if (\array_key_exists('base_path', $config)) { $this->basePath = $config['base_path']; } else { $this->basePath = JPATH_COMPONENT; } // If the default task is set, register it as such if (\array_key_exists('default_task', $config)) { $this->registerDefaultTask($config['default_task']); } else { $this->registerDefaultTask('display'); } // Set the models prefix if (empty($this->model_prefix)) { if (\array_key_exists('model_prefix', $config)) { // User-defined prefix $this->model_prefix = $config['model_prefix']; } else { $this->model_prefix = ucfirst($this->name) . 'Model'; } } // Set the default model search path if (\array_key_exists('model_path', $config)) { // User-defined dirs static::addModelPath($config['model_path'], $this->model_prefix); } else { static::addModelPath($this->basePath . '/models', $this->model_prefix); } // Set the default view search path if (\array_key_exists('view_path', $config)) { // User-defined dirs $this->setPath('view', $config['view_path']); } else { $this->setPath('view', $this->basePath . '/views'); } // Set the default view. if (\array_key_exists('default_view', $config)) { $this->default_view = $config['default_view']; } elseif (empty($this->default_view)) { $this->default_view = $this->getName(); } $this->factory = $factory ?: new LegacyFactory(); } /* * Adds to the search path for templates and resources. * * @param string $type The path type (e.g. 'model', 'view'). * @param mixed $path The directory string or stream array to search. * * @return static A BaseController object to support chaining. * * @since 3.0 / protected function addPath($type, $path) { if (!isset($this->paths[$type])) { $this->paths[$type] = []; } // Loop through the path directories foreach ((array) $path as $dir) { // No surrounding spaces allowed! $dir = rtrim(Path::check($dir), '/') . '/'; // Add to the top of the search dirs array_unshift($this->paths[$type], $dir); } return $this; } /* * Add one or more view paths to the controller's stack, in LIFO order. * * @param mixed $path The directory (string) or list of directories (array) to add. * * @return static This object to support chaining. * * @since 3.0 / public function addViewPath($path) { return $this->addPath('view', $path); } /* * Method to check whether an ID is in the edit list. * * @param string $context The context for the session storage. * @param integer $id The ID of the record to add to the edit list. * * @return boolean True if the ID is in the edit list. * * @since 3.0 / protected function checkEditId($context, $id) { if (!($this->app instanceof CMSWebApplicationInterface)) { throw new \Exception( \sprintf( 'The %s method requires an instance of %s but instead %s was supplied', __METHOD__, CMSWebApplicationInterface::class, \get_class($this->app) ) ); } if ($id) { $values = (array) $this->app->getUserState($context . '.id'); $result = \in_array((int) $id, $values); if (\defined('JDEBUG') && JDEBUG) { $this->getLogger()->info( \sprintf( 'Checking edit ID %s.%s: %d %s', $context, $id, (int) $result, str_replace("\n", ' ', print_r($values, 1)) ), ['category' => 'controller'] ); } return $result; } // No id for a new item. return true; } /* * Method to load and return a model object. * * @param string $name The name of the model. * @param string $prefix Optional model prefix. * @param array $config Configuration array for the model. Optional. * * @return BaseDatabaseModel\|boolean Model object on success; otherwise false on failure. * * @since 3.0 / protected function createModel($name, $prefix = '', $config = []) { $model = $this->factory->createModel($name, $prefix, $config); if ($model === null) { return false; } if ($model instanceof CurrentUserInterface && $this->app->getIdentity()) { $model->setCurrentUser($this->app->getIdentity()); } return $model; } /* * Method to load and return a view object. This method first looks in the * current template directory for a match and, failing that, uses a default * set path to load the view class file. * * Note the "name, prefix, type" order of parameters, which differs from the * "name, type, prefix" order used in related public methods. * * @param string $name The name of the view. * @param string $prefix Optional prefix for the view class name. * @param string $type The type of view. * @param array $config Configuration array for the view. Optional. * * @return ViewInterface\|null View object on success; null or error result on failure. * * @since 3.0 * @throws \Exception / protected function createView($name, $prefix = '', $type = '', $config = []) { $config['paths'] = $this->paths['view']; $view = $this->factory->createView($name, $prefix, $type, $config); if ($view instanceof CurrentUserInterface && $this->app->getIdentity()) { $view->setCurrentUser($this->app->getIdentity()); } if ($view instanceof LanguageAwareInterface && $this->app->getLanguage()) { $view->setLanguage($this->app->getLanguage()); } return $view; } /* * Typical view method for MVC based architecture * * This function is provide as a default implementation, in most cases * you will need to override it in your own controllers. * * @param boolean $cachable If true, the view output will be cached * @param array $urlparams An array of safe url parameters and their variable types. * @see \Joomla\CMS\Filter\InputFilter::clean() for valid values. * * @return static A \JControllerLegacy object to support chaining. * * @since 3.0 * @throws \Exception / public function display($cachable = false, $urlparams = []) { if (!($this->app instanceof CMSWebApplicationInterface)) { throw new \Exception( \sprintf( 'The %s method requires an instance of %s but instead %s was supplied', __METHOD__, CMSWebApplicationInterface::class, \get_class($this->app) ) ); } $document = $this->app->getDocument(); $viewType = $document->getType(); $viewName = $this->input->get('view', $this->default_view); $viewLayout = $this->input->get('layout', 'default', 'string'); $view = $this->getView($viewName, $viewType, '', ['base_path' => $this->basePath, 'layout' => $viewLayout]); // Set models for the View $this->prepareViewModel($view); if ($view instanceof DocumentAwareInterface && $document) { $view->setDocument($this->app->getDocument()); } else { @trigger_error( 'View should implement document aware interface.', E_USER_DEPRECATED ); $view->document = $document; } // Display the view if ($cachable && $viewType !== 'feed' && $this->app->get('caching') >= 1) { $option = $this->input->get('option'); if (\is_array($urlparams)) { if (!empty($this->app->registeredurlparams)) { $registeredurlparams = $this->app->registeredurlparams; } else { $registeredurlparams = new \stdClass(); } foreach ($urlparams as $key => $value) { // Add your safe URL parameters with variable type as value {@see InputFilter::clean()}. $registeredurlparams->$key = $value; } $this->app->registeredurlparams = $registeredurlparams; } try { /* @var \Joomla\CMS\Cache\Controller\ViewController $cache / $cache = Factory::getCache($option, 'view'); $cache->get($view, 'display'); } catch (CacheExceptionInterface) { $view->display(); } } else { $view->display(); } return $this; } /* * Execute a task by triggering a method in the derived class. * * @param string $task The task to perform. If no matching task is found, the '__default' task is executed, if defined. * * @return mixed The value returned by the called method. * * @since 3.0 * @throws \Exception / public function execute($task) { $this->task = $task; $task = strtolower((string) $task); if (isset($this->taskMap[$task])) { $doTask = $this->taskMap[$task]; } elseif (isset($this->taskMap['__default'])) { $doTask = $this->taskMap['__default']; } else { throw new \Exception(Text::sprintf('JLIB_APPLICATION_ERROR_TASK_NOT_FOUND', $task), 404); } // Record the actual task being fired $this->doTask = $doTask; return $this->$doTask(); } /* * Method to get a model object, loading it if required. * * @param string $name The model name. Optional. * @param string $prefix The class prefix. Optional. * @param array $config Configuration array for model. Optional. * * @return BaseDatabaseModel\|boolean Model object on success; otherwise false on failure. * * @since 3.0 / public function getModel($name = '', $prefix = '', $config = []) { if (empty($name)) { $name = $this->getName(); } if (!$prefix) { if ($this->factory instanceof LegacyFactory) { $prefix = $this->model_prefix; } elseif (!empty($config['base_path']) && str_starts_with(Path::clean($config['base_path']), JPATH_ADMINISTRATOR)) { // When the frontend uses an administrator model $prefix = 'Administrator'; } else { $prefix = $this->app->getName(); } } if ($model = $this->createModel($name, $prefix, $config)) { // Task is a reserved state $model->setState('task', $this->task); // We don't have the concept on a menu tree in the api app, so skip setting it's information and // return early if ($this->app->isClient('api')) { return $model; } if ($this->app instanceof CMSWebApplicationInterface) { // Let's get the application object and set menu information if it's available $menu = $this->app->getMenu(); if (\is_object($menu) && $item = $menu->getActive()) { $params = $menu->getParams($item->id); // Set default state data $model->setState('parameters.menu', $params); } } } return $model; } /* * Method to get the controller name * * The dispatcher name is set by default parsed using the classname, or it can be set * by passing a $config['name'] in the class constructor * * @return string The name of the dispatcher * * @since 3.0 * @throws \Exception / public function getName() { if (empty($this->name)) { $r = null; if (!preg_match('/(.)Controller/i', \get_class($this), $r)) { throw new \Exception(Text::sprintf('JLIB_APPLICATION_ERROR_GET_NAME', __METHOD__), 500); } $this->name = strtolower($r[1]); } return $this->name; } /** * Get the last task that is being performed or was most recently performed. * * @return string The task that is being performed or was most recently performed. * * @since 3.0 / public function getTask() { return $this->task; } /* * Gets the available tasks in the controller. * * @return array Array[i] of task names. * * @since 3.0 / public function getTasks() { return $this->methods; } /* * Method to get a reference to the current view and load it if necessary. * * @param string $name The view name. Optional, defaults to the controller name. * @param string $type The view type. Optional. * @param string $prefix The class prefix. Optional. * @param array $config Configuration array for view. Optional. * * @return ViewInterface Reference to the view or an error. * * @since 3.0 * @throws \Exception / public function getView($name = '', $type = '', $prefix = '', $config = []) { // @note We use self so we only access stuff in this class rather than in all classes. if (!isset(self::$views)) { self::$views = []; } if (empty($name)) { $name = $this->getName(); } if (!$prefix) { if ($this->factory instanceof LegacyFactory) { $prefix = $this->getName() . 'View'; } elseif (!empty($config['base_path']) && str_starts_with(Path::clean($config['base_path']), JPATH_ADMINISTRATOR)) { // When the front uses an administrator view $prefix = 'Administrator'; } else { $prefix = $this->app->getName(); } } if (empty(self::$views[$name][$type][$prefix])) { if ($view = $this->createView($name, $prefix, $type, $config)) { self::$views[$name][$type][$prefix] = &$view; } else { throw new \Exception(Text::sprintf('JLIB_APPLICATION_ERROR_VIEW_NOT_FOUND', $name, $type, $prefix), 404); } } return self::$views[$name][$type][$prefix]; } /* * Method to add a record ID to the edit list. * * @param string $context The context for the session storage. * @param integer $id The ID of the record to add to the edit list. * * @return void * * @since 3.0 * @throws \Exception / protected function holdEditId($context, $id) { if (!($this->app instanceof CMSWebApplicationInterface)) { throw new \Exception( \sprintf( 'The %s method requires an instance of %s but instead %s was supplied', __METHOD__, CMSWebApplicationInterface::class, \get_class($this->app) ) ); } $values = (array) $this->app->getUserState($context . '.id'); // Add the id to the list if non-zero. if (!empty($id)) { $values[] = (int) $id; $values = array_unique($values); $this->app->setUserState($context . '.id', $values); if (\defined('JDEBUG') && JDEBUG) { $this->getLogger()->info( \sprintf( 'Holding edit ID %s.%s %s', $context, $id, str_replace("\n", ' ', print_r($values, 1)) ), ['category' => 'controller'] ); } } } /* * Redirects the browser or returns false if no redirect is set. * * @return boolean False if no redirect exists. * * @since 3.0 * @throws \Exception / public function redirect() { if (!($this->app instanceof CMSWebApplicationInterface)) { throw new \Exception( \sprintf( 'The %s method requires an instance of %s but instead %s was supplied', __METHOD__, CMSWebApplicationInterface::class, \get_class($this->app) ) ); } if ($this->redirect) { // Enqueue the redirect message $this->app->enqueueMessage($this->message, $this->messageType); // Execute the redirect $this->app->redirect($this->redirect); } return false; } /* * Register the default task to perform if a mapping is not found. * * @param string $method The name of the method in the derived class to perform if a named task is not found. * * @return static A \JControllerLegacy object to support chaining. * * @since 3.0 / public function registerDefaultTask($method) { $this->registerTask('__default', $method); return $this; } /* * Register (map) a task to a method in the class. * * @param string $task The task. * @param string $method The name of the method in the derived class to perform for this task. * * @return static A \JControllerLegacy object to support chaining. * * @since 3.0 / public function registerTask($task, $method) { if (\in_array(strtolower($method), $this->methods)) { $this->taskMap[strtolower($task)] = $method; } return $this; } /* * Unregister (unmap) a task in the class. * * @param string $task The task. * * @return static This object to support chaining. * * @since 3.0 / public function unregisterTask($task) { unset($this->taskMap[strtolower($task)]); return $this; } /* * Method to check whether an ID is in the edit list. * * @param string $context The context for the session storage. * @param integer $id The ID of the record to add to the edit list. * * @return void * * @since 3.0 * @throws \Exception / protected function releaseEditId($context, $id) { if (!($this->app instanceof CMSWebApplicationInterface)) { throw new \Exception( \sprintf( 'The %s method requires an instance of %s but instead %s was supplied', __METHOD__, CMSWebApplicationInterface::class, \get_class($this->app) ) ); } $values = (array) $this->app->getUserState($context . '.id'); // Do a strict search of the edit list values. $index = array_search((int) $id, $values, true); if (\is_int($index)) { unset($values[$index]); $this->app->setUserState($context . '.id', $values); if (\defined('JDEBUG') && JDEBUG) { $this->getLogger()->info( \sprintf( 'Releasing edit ID %s.%s %s', $context, $id, str_replace("\n", ' ', print_r($values, 1)) ), ['category' => 'controller'] ); } } } /* * Get the logger. * * @return LoggerInterface * * @since 5.0.0 / protected function getLogger() { // If a logger hasn't been set, use NullLogger if (!($this->logger instanceof LoggerInterface)) { $this->setLogger(new NullLogger()); } return $this->logger; } /* * Sets the internal message that is passed with a redirect * * @param string $text Message to display on redirect. * @param string $type Message type. Optional, defaults to 'message'. * * @return string Previous message * * @since 3.0 / public function setMessage($text, $type = 'message') { $previous = $this->message; $this->message = $text; $this->messageType = $type; return $previous; } /* * Sets an entire array of search paths for resources. * * @param string $type The type of path to set, typically 'view' or 'model'. * @param string $path The new set of search paths. If null or false, resets to the current directory only. * * @return void * * @since 3.0 / protected function setPath($type, $path) { // Clear out the prior search dirs $this->paths[$type] = []; // Actually add the user-specified directories $this->addPath($type, $path); } /* * Checks for a form token in the request. * * Use in conjunction with HTMLHelper::_('form.token') or Session::getFormToken. * * @param string $method The request method in which to look for the token key. * @param boolean $redirect Whether to implicitly redirect user to the referrer page on failure or simply return false. * * @return boolean True if found and valid, otherwise return false or redirect to referrer page. * * @since 3.7.0 * @throws \Exception * @see Session::checkToken() / public function checkToken($method = 'post', $redirect = true) { if (!($this->app instanceof CMSWebApplicationInterface)) { throw new \Exception( \sprintf( 'The %s method requires an instance of %s but instead %s was supplied', __METHOD__, CMSWebApplicationInterface::class, \get_class($this->app) ) ); } $valid = Session::checkToken($method); if (!$valid && $redirect) { $referrer = $this->input->server->getString('HTTP_REFERER'); if (\is_null($referrer) \|\| !Uri::isInternal($referrer)) { $referrer = 'index.php'; } $this->app->enqueueMessage(Text::_('JINVALID_TOKEN_NOTICE'), CMSWebApplicationInterface::MSG_WARNING); $this->app->redirect($referrer); } return $valid; } /* * Set a URL for browser redirection. * * @param string $url URL to redirect to. * @param string $msg Message to display on redirect. Optional, defaults to value set internally by controller, if any. * @param string $type Message type. Optional, defaults to 'message' or the type set by a previous call to setMessage. * * @return static This object to support chaining. * * @since 3.0 / public function setRedirect($url, $msg = null, $type = null) { $this->redirect = $url; if ($msg !== null) { // Controller may have set this directly $this->message = $msg; } // Ensure the type is not overwritten by a previous call to setMessage. if (empty($type)) { if (empty($this->messageType)) { $this->messageType = 'message'; } } else { // If the type is explicitly set, set it. $this->messageType = $type; } return $this; } /* * Method to set the View Models * * This function is provided as a default implementation, * and only set one Model in the view (that with the same prefix/sufix than the view). * In case you want to set several Models for your view, * you will need to override it in your DisplayController controller. * * @param ViewInterface $view The view Object * * @return void * * @since 5.0.0 / protected function prepareViewModel(ViewInterface $view) { if (!method_exists($view, 'setModel')) { return; } $viewName = $view->getName(); // Get/Create the model if ($model = $this->getModel($viewName, '', ['base_path' => $this->basePath])) { // Push the model into the view (as default) $view->setModel($model, true); } } /* * Get the event dispatcher. * * The override was made to keep a backward compatibility for legacy component. * TODO: Remove the override in 6.0 * * @return DispatcherInterface * * @since 4.4.0 * @throws \UnexpectedValueException May be thrown if the dispatcher has not been set. / public function getDispatcher() { if (!$this->dispatcher) { @trigger_error( \sprintf('Dispatcher for %s should be set through MVC factory. It will throw an exception in 6.0', __CLASS__), E_USER_DEPRECATED ); return $this->app->getDispatcher(); } return $this->dispatcher; } } ��ApiController.php��0000644��00000041332�15231072410�0010030 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\CMS\MVC\Controller; use Joomla\CMS\Access\Exception\NotAllowed; use Joomla\CMS\Application\CMSWebApplicationInterface; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Form\Form; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\ListModel; use Joomla\CMS\MVC\Model\State; use Joomla\CMS\MVC\View\JsonApiView; use Joomla\Input\Input; use Joomla\String\Inflector; use Tobscure\JsonApi\Exception\InvalidParameterException; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Base class for a Joomla API Controller * * Controller (controllers are where you put all the actual code) Provides basic * functionality, such as rendering views (aka displaying templates). * * @since 4.0.0 / class ApiController extends BaseController { /* * The Application. Redeclared to show this class requires a web application. * * @var CMSWebApplicationInterface * @since 5.0.0 / protected $app; /* * The content type of the item. * * @var string * @since 4.0.0 / protected $contentType; /* * The URL option for the component. * * @var string * @since 4.0.0 / protected $option; /* * The prefix to use with controller messages. * * @var string * @since 4.0.0 / protected $text_prefix; /* * The context for storing internal data, e.g. record. * * @var string * @since 4.0.0 / protected $context; /* * Items on a page * * @var integer / protected $itemsPerPage = 20; /* * The model state to inject * * @var State\|\Joomla\Registry\Registry * * @todo Remove the State type hint in Joomla 7.0 since it will be removed see State class / protected $modelState; /* * Constructor. * * @param array $config An optional associative array of configuration settings. * Recognized key values include 'name', 'default_task', * 'model_path', and 'view_path' (this list is not meant to be * comprehensive). * @param ?MVCFactoryInterface $factory The factory. * @param ?CMSWebApplicationInterface $app The Application for the dispatcher * @param ?Input $input Input * * @throws \Exception * @since 4.0.0 / public function __construct($config = [], ?MVCFactoryInterface $factory = null, ?CMSWebApplicationInterface $app = null, ?Input $input = null) { $this->modelState = new State(); parent::__construct($config, $factory, $app, $input); // Guess the option as com_NameOfController if (empty($this->option)) { $this->option = ComponentHelper::getComponentName($this, $this->getName()); } // Guess the \Text message prefix. Defaults to the option. if (empty($this->text_prefix)) { $this->text_prefix = strtoupper($this->option); } // Guess the context as the suffix, eg: OptionControllerContent. if (empty($this->context)) { $r = null; if (!preg_match('/(.)Controller(.)/i', \get_class($this), $r)) { throw new \Exception(Text::sprintf('JLIB_APPLICATION_ERROR_GET_NAME', __METHOD__), 500); } $this->context = str_replace('\\', '', strtolower($r[2])); } } /* * Basic display of an item view * * @param integer $id The primary key to display. Leave empty if you want to retrieve data from the request * * @return static A \JControllerLegacy object to support chaining. * * @since 4.0.0 / public function displayItem($id = null) { if ($id === null) { $id = $this->input->get('id', 0, 'int'); } $viewType = $this->app->getDocument()->getType(); $viewName = $this->input->get('view', $this->default_view); $viewLayout = $this->input->get('layout', 'default', 'string'); try { /* @var JsonApiView $view / $view = $this->getView( $viewName, $viewType, '', ['base_path' => $this->basePath, 'layout' => $viewLayout, 'contentType' => $this->contentType] ); } catch (\Exception $e) { throw new \RuntimeException($e->getMessage()); } $modelName = $this->input->get('model', Inflector::singularize($this->contentType)); // Create the model, ignoring request data so we can safely set the state in the request from the controller $model = $this->getModel($modelName, '', ['ignore_request' => true, 'state' => $this->modelState]); if (!$model) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_MODEL_CREATE')); } try { $modelName = $model->getName(); } catch (\Exception $e) { throw new \RuntimeException($e->getMessage()); } $model->setState($modelName . '.id', $id); // Push the model into the view (as default) $view->setModel($model, true); $view->setDocument($this->app->getDocument()); $view->displayItem(); return $this; } /* * Basic display of a list view * * @return static A \JControllerLegacy object to support chaining. * * @since 4.0.0 / public function displayList() { // Assemble pagination information (using recommended JsonApi pagination notation for offset strategy) $paginationInfo = $this->input->get('page', [], 'array'); $limit = null; $offset = null; if (\array_key_exists('offset', $paginationInfo)) { $offset = $paginationInfo['offset']; $this->modelState->set($this->context . '.limitstart', (int) $offset); } if (\array_key_exists('limit', $paginationInfo)) { $limit = $paginationInfo['limit']; $this->modelState->set($this->context . '.list.limit', (int) $limit); } $viewType = $this->app->getDocument()->getType(); $viewName = $this->input->get('view', $this->default_view); $viewLayout = $this->input->get('layout', 'default', 'string'); try { /* @var JsonApiView $view / $view = $this->getView( $viewName, $viewType, '', ['base_path' => $this->basePath, 'layout' => $viewLayout, 'contentType' => $this->contentType] ); } catch (\Exception $e) { throw new \RuntimeException($e->getMessage()); } $modelName = $this->input->get('model', $this->contentType); /* @var ListModel $model / $model = $this->getModel($modelName, '', ['ignore_request' => true, 'state' => $this->modelState]); if (!$model) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_MODEL_CREATE')); } // Push the model into the view (as default) $view->setModel($model, true); /* * Check the currently set order values in the modelstate against the valid filters / if ( $this->modelState->get('list.ordering') && !$model->isValidFilterColumn($this->modelState->get('list.ordering')) ) { $model->setState('list.ordering', null); } if ( $this->modelState->get('list.direction') && !\in_array(strtolower($this->modelState->get('list.direction')), ['asc', 'desc'], true) ) { $model->setState('list.direction', 'asc'); } if ($offset) { $model->setState('list.start', (int) $offset); } /* * Sanity check we don't have too much data being requested as regularly in html we automatically set it back to * the last page of data. If there isn't a limit start then set / if ($limit) { $model->setState('list.limit', (int) $limit); } else { $model->setState('list.limit', $this->itemsPerPage); } if (!\is_null($offset) && $offset > $model->getTotal()) { throw new Exception\ResourceNotFound(); } $view->setDocument($this->app->getDocument()); $view->displayList(); return $this; } /* * Removes an item. * * @param integer $id The primary key to delete item. * * @return void * * @since 4.0.0 / public function delete($id = null) { if (!$this->app->getIdentity()->authorise('core.delete', $this->option)) { throw new NotAllowed('JLIB_APPLICATION_ERROR_DELETE_NOT_PERMITTED', 403); } if ($id === null) { $id = $this->input->get('id', 0, 'int'); } $modelName = $this->input->get('model', Inflector::singularize($this->contentType)); /* @var \Joomla\CMS\MVC\Model\AdminModel $model / $model = $this->getModel($modelName, '', ['ignore_request' => true]); if (!$model) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_MODEL_CREATE')); } // Remove the item. if (!$model->delete($id)) { if ($model->getError() !== false) { throw new \RuntimeException($model->getError(), 500); } } $this->app->setHeader('status', 204); } /* * Method to add a new record. * * @return void * * @since 4.0.0 * @throws NotAllowed * @throws \RuntimeException / public function add() { // Access check. if (!$this->allowAdd()) { throw new NotAllowed('JLIB_APPLICATION_ERROR_CREATE_RECORD_NOT_PERMITTED', 403); } $recordId = $this->save(); $this->displayItem($recordId); } /* * Method to edit an existing record. * * @return static A \JControllerLegacy object to support chaining. * * @since 4.0.0 / public function edit() { /* @var \Joomla\CMS\MVC\Model\AdminModel $model / $model = $this->getModel(Inflector::singularize($this->contentType)); if (!$model) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_MODEL_CREATE')); } try { $table = $model->getTable(); } catch (\Exception $e) { throw new \RuntimeException($e->getMessage()); } $recordId = $this->input->getInt('id'); if (!$recordId) { throw new Exception\ResourceNotFound(Text::_('JLIB_APPLICATION_ERROR_RECORD'), 404); } $key = $table->getKeyName(); // Access check. if (!$this->allowEdit([$key => $recordId], $key)) { throw new NotAllowed('JLIB_APPLICATION_ERROR_CREATE_RECORD_NOT_PERMITTED', 403); } // Attempt to check-out the new record for editing and redirect. if ($table->hasField('checked_out') && !$model->checkout($recordId)) { // Check-out failed, display a notice but allow the user to see the record. throw new Exception\CheckinCheckout(Text::sprintf('JLIB_APPLICATION_ERROR_CHECKOUT_FAILED', $model->getError())); } $this->save($recordId); $this->displayItem($recordId); return $this; } /* * Method to save a record. * * @param integer $recordKey The primary key of the item (if exists) * * @return integer The record ID on success, false on failure * * @since 4.0.0 / protected function save($recordKey = null) { /* @var \Joomla\CMS\MVC\Model\AdminModel $model / $model = $this->getModel(Inflector::singularize($this->contentType)); if (!$model) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_MODEL_CREATE')); } try { $table = $model->getTable(); } catch (\Exception $e) { throw new \RuntimeException($e->getMessage()); } $key = $table->getKeyName(); $data = $this->input->get('data', json_decode($this->input->json->getRaw(), true), 'array'); $checkin = property_exists($table, $table->getColumnAlias('checked_out')); $data[$key] = $recordKey; if ($this->input->getMethod() === 'PATCH') { if ($recordKey && $table->load($recordKey)) { $fields = $table->getFields(); foreach ($fields as $field) { if (\array_key_exists($field->Field, $data)) { continue; } $data[$field->Field] = $table->{$field->Field}; } } } $data = $this->preprocessSaveData($data); // @todo: Not the cleanest thing ever but it works... Form::addFormPath(JPATH_ADMINISTRATOR . '/components/' . $this->option . '/forms'); // Needs to be set because com_fields needs the data in jform to determine the assigned catid $this->input->set('jform', $data); // Validate the posted data. $form = $model->getForm($data, false); if (!$form) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_FORM_CREATE')); } // Test whether the data is valid. $validData = $model->validate($form, $data); // Check for validation errors. if ($validData === false) { $errors = $model->getErrors(); $messages = []; // Push up to three validation messages out to the user. for ($i = 0, $n = \count($errors); $i < $n && $i < 3; $i++) { if ($errors[$i] instanceof \Exception) { $messages[] = "{$errors[$i]->getMessage()}"; } else { $messages[] = "{$errors[$i]}"; } } throw new InvalidParameterException(implode("\n", $messages)); } if (!isset($validData['tags'])) { $validData['tags'] = []; } // Attempt to save the data. if (!$model->save($validData)) { throw new Exception\Save(Text::sprintf('JLIB_APPLICATION_ERROR_SAVE_FAILED', $model->getError())); } try { $modelName = $model->getName(); } catch (\Exception $e) { throw new \RuntimeException($e->getMessage()); } // Ensure we have the record ID in case we created a new article $recordId = $model->getState($modelName . '.id'); if ($recordId === null) { throw new Exception\CheckinCheckout(Text::sprintf('JLIB_APPLICATION_ERROR_CHECKIN_FAILED', $model->getError())); } // Save succeeded, so check-in the record. if ($checkin && $model->checkin($recordId) === false) { throw new Exception\CheckinCheckout(Text::sprintf('JLIB_APPLICATION_ERROR_CHECKIN_FAILED', $model->getError())); } return $recordId; } /* * Method to check if you can edit an existing record. * * Extended classes can override this if necessary. * * @param array $data An array of input data. * @param string $key The name of the key for the primary key; default is id. * * @return boolean * * @since 4.0.0 / protected function allowEdit($data = [], $key = 'id') { return $this->app->getIdentity()->authorise('core.edit', $this->option); } /* * Method to check if you can add a new record. * * Extended classes can override this if necessary. * * @param array $data An array of input data. * * @return boolean * * @since 4.0.0 / protected function allowAdd($data = []) { $user = $this->app->getIdentity(); return $user->authorise('core.create', $this->option) \|\| \count($user->getAuthorisedCategories($this->option, 'core.create')); } /* * Method to allow extended classes to manipulate the data to be saved for an extension. * * @param array $data An array of input data. * * @return array * * @since 4.0.0 / protected function preprocessSaveData(array $data): array { return $data; } } ��ControllerInterface.php��0000644��00000001405�15231072410�0011214 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2005 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\CMS\MVC\Controller; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Joomla Platform CMS Interface * * @since 4.0.0 / interface ControllerInterface { /* * Execute a controller task. * * @param string $task The task to perform. * * @return mixed The value returned by the called method. * * @since 4.0.0 * @throws \InvalidArgumentException * @throws \RuntimeException / public function execute($task); } ��FormController.php��0000644��00000071643�15231072410�0010232 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2009 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\CMS\MVC\Controller; use Doctrine\Inflector\InflectorFactory; use Joomla\CMS\Application\CMSWebApplicationInterface; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Event\Model; use Joomla\CMS\Form\FormFactoryAwareInterface; use Joomla\CMS\Form\FormFactoryAwareTrait; use Joomla\CMS\Form\FormFactoryInterface; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\BaseDatabaseModel; use Joomla\CMS\Router\Route; use Joomla\CMS\Uri\Uri; use Joomla\Input\Input; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Controller tailored to suit most form-based admin operations. * * @since 1.6 * @todo Add ability to set redirect manually to better cope with frontend usage. / class FormController extends BaseController implements FormFactoryAwareInterface { use FormFactoryAwareTrait; /* * The Application. Redeclared to show this class requires a web application. * * @var CMSWebApplicationInterface * @since 5.0.0 / protected $app; /* * The context for storing internal data, e.g. record. * * @var string * @since 1.6 / protected $context; /* * The URL option for the component. * * @var string * @since 1.6 / protected $option; /* * The URL view item variable. * * @var string * @since 1.6 / protected $view_item; /* * The URL view list variable. * * @var string * @since 1.6 / protected $view_list; /* * The prefix to use with controller messages. * * @var string * @since 1.6 / protected $text_prefix; /* * Constructor. * * @param array $config An optional associative array of configuration settings. * Recognized key values include 'name', 'default_task', * 'model_path', and 'view_path' (this list is not meant to be * comprehensive). * @param ?MVCFactoryInterface $factory The factory. * @param ?CMSWebApplicationInterface $app The Application for the dispatcher * @param ?Input $input Input * @param ?FormFactoryInterface $formFactory The form factory. * * @since 3.0 / public function __construct( $config = [], ?MVCFactoryInterface $factory = null, ?CMSWebApplicationInterface $app = null, ?Input $input = null, ?FormFactoryInterface $formFactory = null ) { parent::__construct($config, $factory, $app, $input); // Guess the option as com_NameOfController if (empty($this->option)) { $this->option = ComponentHelper::getComponentName($this, $this->getName()); } // Guess the \Text message prefix. Defaults to the option. if (empty($this->text_prefix)) { $this->text_prefix = strtoupper($this->option); } // Guess the context as the suffix, eg: OptionControllerContent. if (empty($this->context)) { $r = null; $match = 'Controller'; // If there is a namespace append a backslash if (strpos(\get_class($this), '\\')) { $match .= '\\\\'; } if (!preg_match('/(.)' . $match . '(.)/i', \get_class($this), $r)) { throw new \Exception(Text::sprintf('JLIB_APPLICATION_ERROR_GET_NAME', __METHOD__), 500); } // Remove the backslashes and the suffix controller $this->context = str_replace(['\\', 'controller'], '', strtolower($r[2])); } // Guess the item view as the context. if (empty($this->view_item)) { $this->view_item = $this->context; } // Guess the list view as the plural of the item view. if (empty($this->view_list)) { $this->view_list = InflectorFactory::create()->build()->pluralize($this->view_item); } $this->setFormFactory($formFactory); // Apply, Save & New, and Save As copy should be standard on forms. $this->registerTask('apply', 'save'); $this->registerTask('save2menu', 'save'); $this->registerTask('save2new', 'save'); $this->registerTask('save2copy', 'save'); $this->registerTask('editAssociations', 'save'); } /* * Method to add a new record. * * @return boolean True if the record can be added, false if not. * * @since 1.6 / public function add() { $context = "$this->option.edit.$this->context"; // Access check. if (!$this->allowAdd()) { // Set the internal error and also the redirect error. $this->setMessage(Text::_('JLIB_APPLICATION_ERROR_CREATE_RECORD_NOT_PERMITTED'), 'error'); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false ) ); return false; } // Clear the record edit information from the session. $this->app->setUserState($context . '.data', null); // Redirect to the edit screen. $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend(), false ) ); return true; } /* * Method to check if you can add a new record. * * Extended classes can override this if necessary. * * @param array $data An array of input data. * * @return boolean * * @since 1.6 / protected function allowAdd($data = []) { $user = $this->app->getIdentity(); return $user->authorise('core.create', $this->option) \|\| \count($user->getAuthorisedCategories($this->option, 'core.create')); } /* * Method to check if you can edit an existing record. * * Extended classes can override this if necessary. * * @param array $data An array of input data. * @param string $key The name of the key for the primary key; default is id. * * @return boolean * * @since 1.6 / protected function allowEdit($data = [], $key = 'id') { return $this->app->getIdentity()->authorise('core.edit', $this->option); } /* * Method to check if you can save a new or existing record. * * Extended classes can override this if necessary. * * @param array $data An array of input data. * @param string $key The name of the key for the primary key. * * @return boolean * * @since 1.6 / protected function allowSave($data, $key = 'id') { $recordId = $data[$key] ?? '0'; if ($recordId) { return $this->allowEdit($data, $key); } return $this->allowAdd($data); } /* * Method to run batch operations. * * @param BaseDatabaseModel $model The model of the component being processed. * * @return boolean True if successful, false otherwise and internal error is set. * * @since 1.7 / public function batch($model) { $vars = $this->input->post->get('batch', [], 'array'); $cid = (array) $this->input->post->get('cid', [], 'int'); // Remove zero values resulting from input filter $cid = array_filter($cid); // Build an array of item contexts to check $contexts = []; $option = $this->extension ?? $this->option; foreach ($cid as $id) { // If we're coming from com_categories, we need to use extension vs. option $contexts[$id] = $option . '.' . $this->context . '.' . $id; } // Attempt to run the batch operation. if ($model->batch($vars, $cid, $contexts)) { $this->setMessage(Text::_('JLIB_APPLICATION_SUCCESS_BATCH')); return true; } $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_BATCH_FAILED', $model->getError()), 'warning'); return false; } /* * Method to cancel an edit. * * @param string $key The name of the primary key of the URL variable. * * @return boolean True if access level checks pass, false otherwise. * * @since 1.6 / public function cancel($key = null) { $this->checkToken(); $model = $this->getModel(); $table = $model->getTable(); $context = "$this->option.edit.$this->context"; if (empty($key)) { $key = $table->getKeyName(); } $recordId = $this->input->getInt($key); // Attempt to check-in the current record. if ($recordId && $table->hasField('checked_out') && $model->checkin($recordId) === false) { // Check-in failed, go back to the record and display a notice. $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_CHECKIN_FAILED', $model->getError()), 'error'); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend($recordId, $key), false ) ); return false; } // Clean the session data and redirect. $this->releaseEditId($context, $recordId); $this->app->setUserState($context . '.data', null); $url = 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(); // Check if there is a return value $return = $this->input->get('return', null, 'base64'); if (!\is_null($return) && Uri::isInternal(base64_decode($return))) { $url = base64_decode($return); } // Redirect to the list screen. $this->setRedirect(Route::_($url, false)); return true; } /* * Method to edit an existing record. * * @param string $key The name of the primary key of the URL variable. * @param string $urlVar The name of the URL variable if different from the primary key * (sometimes required to avoid router collisions). * * @return boolean True if access level check and checkout passes, false otherwise. * * @since 1.6 / public function edit($key = null, $urlVar = null) { // Do not cache the response to this, its a redirect, and mod_expires and google chrome browser bugs cache it forever! $this->app->allowCache(false); $model = $this->getModel(); $table = $model->getTable(); $cid = (array) $this->input->post->get('cid', [], 'int'); $context = "$this->option.edit.$this->context"; // Determine the name of the primary key for the data. if (empty($key)) { $key = $table->getKeyName(); } // To avoid data collisions the urlVar may be different from the primary key. if (empty($urlVar)) { $urlVar = $key; } // Get the previous record id (if any) and the current record id. $recordId = (int) (\count($cid) ? $cid[0] : $this->input->getInt($urlVar)); $checkin = $table->hasField('checked_out'); // Access check. if (!$this->allowEdit([$key => $recordId], $key)) { $this->setMessage(Text::_('JLIB_APPLICATION_ERROR_EDIT_NOT_PERMITTED'), 'error'); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false ) ); return false; } // Attempt to check-out the new record for editing and redirect. if ($checkin && !$model->checkout($recordId)) { // Check-out failed, display a notice but allow the user to see the record. $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_CHECKOUT_FAILED', $model->getError()), 'error'); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend($recordId, $urlVar), false ) ); return false; } // Check-out succeeded, push the new record id into the session. $this->holdEditId($context, $recordId); $this->app->setUserState($context . '.data', null); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend($recordId, $urlVar), false ) ); return true; } /* * Method to get a model object, loading it if required. * * @param string $name The model name. Optional. * @param string $prefix The class prefix. Optional. * @param array $config Configuration array for model. Optional. * * @return BaseDatabaseModel The model. * * @since 1.6 / public function getModel($name = '', $prefix = '', $config = ['ignore_request' => true]) { if (empty($name)) { $name = $this->context; } return parent::getModel($name, $prefix, $config); } /* * Gets the URL arguments to append to an item redirect. * * @param integer $recordId The primary key id for the item. * @param string $urlVar The name of the URL variable for the id. * * @return string The arguments to append to the redirect URL. * * @since 1.6 / protected function getRedirectToItemAppend($recordId = null, $urlVar = 'id') { $append = ''; // Setup redirect info. if ($tmpl = $this->input->get('tmpl', '', 'string')) { $append .= '&tmpl=' . $tmpl; } if ($layout = $this->input->get('layout', 'edit', 'string')) { $append .= '&layout=' . $layout; } if ($forcedLanguage = $this->input->get('forcedLanguage', '', 'cmd')) { $append .= '&forcedLanguage=' . $forcedLanguage; } if ($recordId) { $append .= '&' . $urlVar . '=' . $recordId; } $return = $this->input->get('return', null, 'base64'); if ($return) { $append .= '&return=' . $return; } return $append; } /* * Gets the URL arguments to append to a list redirect. * * @return string The arguments to append to the redirect URL. * * @since 1.6 / protected function getRedirectToListAppend() { $append = ''; // Setup redirect info. if ($tmpl = $this->input->get('tmpl', '', 'string')) { $append .= '&tmpl=' . $tmpl; } if ($forcedLanguage = $this->input->get('forcedLanguage', '', 'cmd')) { $append .= '&forcedLanguage=' . $forcedLanguage; } return $append; } /* * Function that allows child controller access to model data * after the data has been saved. * * @param BaseDatabaseModel $model The data model object. * @param array $validData The validated data. * * @return void * * @since 1.6 / protected function postSaveHook(BaseDatabaseModel $model, $validData = []) { } /* * Method to save a record. * * @param string $key The name of the primary key of the URL variable. * @param string $urlVar The name of the URL variable if different from the primary key (sometimes required to avoid router collisions). * * @return boolean True if successful, false otherwise. * * @since 1.6 / public function save($key = null, $urlVar = null) { // Check for request forgeries. $this->checkToken(); $model = $this->getModel(); $table = $model->getTable(); $data = $this->input->post->get('jform', [], 'array'); $checkin = $table->hasField('checked_out'); $context = "$this->option.edit.$this->context"; $task = $this->getTask(); // Determine the name of the primary key for the data. if (empty($key)) { $key = $table->getKeyName(); } // To avoid data collisions the urlVar may be different from the primary key. if (empty($urlVar)) { $urlVar = $key; } $recordId = (int) $this->input->getInt($urlVar); // Populate the row id from the session. $data[$key] = $recordId; // The save2copy task needs to be handled slightly differently. if ($task === 'save2copy') { // Check-in the original row. if ($checkin && $model->checkin($data[$key]) === false) { // Check-in failed. Go back to the item and display a notice. $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_CHECKIN_FAILED', $model->getError()), 'error'); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend($recordId, $urlVar), false ) ); return false; } // Reset the ID, the multilingual associations and then treat the request as for Apply. $data[$key] = 0; $data['associations'] = []; $task = 'apply'; } // Access check. if (!$this->allowSave($data, $key)) { $this->setMessage(Text::_('JLIB_APPLICATION_ERROR_SAVE_NOT_PERMITTED'), 'error'); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false ) ); return false; } // Validate the posted data. // Sometimes the form needs some posted data, such as for plugins and modules. $form = $model->getForm($data, false); if (!$form) { $this->app->enqueueMessage($model->getError(), CMSWebApplicationInterface::MSG_ERROR); return false; } // Send an object which can be modified through the plugin event $objData = (object) $data; $this->getDispatcher()->dispatch( 'onContentNormaliseRequestData', new Model\NormaliseRequestDataEvent('onContentNormaliseRequestData', [ 'context' => $this->option . '.' . $this->context, 'data' => $objData, 'subject' => $form, ]) ); $data = (array) $objData; // Test whether the data is valid. $validData = $model->validate($form, $data); // Check for validation errors. if ($validData === false) { // Get the validation messages. $errors = $model->getErrors(); // Push up to three validation messages out to the user. for ($i = 0, $n = \count($errors); $i < $n && $i < 3; $i++) { if ($errors[$i] instanceof \Exception) { $this->app->enqueueMessage($errors[$i]->getMessage(), CMSWebApplicationInterface::MSG_ERROR); } else { $this->app->enqueueMessage($errors[$i], CMSWebApplicationInterface::MSG_ERROR); } } /* * We need the filtered value of calendar fields because the UTC normalisation is * done in the filter and on output. This would apply the Timezone offset on * reload. We set the calendar values we save to the processed date. / $filteredData = $form->filter($data); foreach ($form->getFieldset() as $field) { if ($field->type === 'Calendar') { $fieldName = $field->fieldname; if (isset($filteredData[$fieldName])) { $data[$fieldName] = $filteredData[$fieldName]; } } } // Save the data in the session. $this->app->setUserState($context . '.data', $data); // Redirect back to the edit screen. $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend($recordId, $urlVar), false ) ); return false; } if (!isset($validData['tags'])) { $validData['tags'] = []; } // Attempt to save the data. if (!$model->save($validData)) { // Save the data in the session. $this->app->setUserState($context . '.data', $validData); // Redirect back to the edit screen. $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_SAVE_FAILED', $model->getError()), 'error'); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend($recordId, $urlVar), false ) ); return false; } // Save succeeded, so check-in the record. if ($checkin && $model->checkin($validData[$key]) === false) { // Save the data in the session. $this->app->setUserState($context . '.data', $validData); // Check-in failed, so go back to the record and display a notice. $this->setMessage(Text::sprintf('JLIB_APPLICATION_ERROR_CHECKIN_FAILED', $model->getError()), 'error'); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend($recordId, $urlVar), false ) ); return false; } $langKey = $this->text_prefix . ($recordId === 0 && $this->app->isClient('site') ? '_SUBMIT' : '') . '_SAVE_SUCCESS'; $prefix = $this->app->getLanguage()->hasKey($langKey) ? $this->text_prefix : 'JLIB_APPLICATION'; $this->setMessage(Text::_($prefix . ($recordId === 0 && $this->app->isClient('site') ? '_SUBMIT' : '') . '_SAVE_SUCCESS')); // Redirect the user and adjust session state based on the chosen task. switch ($task) { case 'apply': // Set the record data in the session. $recordId = $model->getState($model->getName() . '.id'); $this->holdEditId($context, $recordId); $this->app->setUserState($context . '.data', null); $model->checkout($recordId); // Redirect back to the edit screen. $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend($recordId, $urlVar), false ) ); break; case 'save2new': // Clear the record id and data from the session. $this->releaseEditId($context, $recordId); $this->app->setUserState($context . '.data', null); // Redirect back to the edit screen. $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend(null, $urlVar), false ) ); break; default: // Clear the record id and data from the session. $this->releaseEditId($context, $recordId); $this->app->setUserState($context . '.data', null); $url = 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(); // Check if there is a return value $return = $this->input->get('return', null, 'base64'); if (!\is_null($return) && Uri::isInternal(base64_decode($return))) { $url = base64_decode($return); } // Redirect to the list screen. $this->setRedirect(Route::_($url, false)); break; } // Invoke the postSave method to allow for the child class to access the model. $this->postSaveHook($model, $validData); return true; } /* * Method to reload a record. * * @param string $key The name of the primary key of the URL variable. * @param string $urlVar The name of the URL variable if different from the primary key (sometimes required to avoid router collisions). * * @return void * * @since 3.7.4 / public function reload($key = null, $urlVar = null) { // Check for request forgeries. $this->checkToken(); $model = $this->getModel(); $data = $this->input->post->get('jform', [], 'array'); // Determine the name of the primary key for the data. if (empty($key)) { $key = $model->getTable()->getKeyName(); } // To avoid data collisions the urlVar may be different from the primary key. if (empty($urlVar)) { $urlVar = $key; } $recordId = $this->input->getInt($urlVar); // Populate the row id from the session. $data[$key] = $recordId; // Check if it is allowed to edit or create the data if (($recordId && !$this->allowEdit($data, $key)) \|\| (!$recordId && !$this->allowAdd($data))) { $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false ) ); $this->redirect(); } // The redirect url $redirectUrl = Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_item . $this->getRedirectToItemAppend($recordId, $urlVar), false ); /* @var \Joomla\CMS\Form\Form $form / $form = $model->getForm($data, false); /* * We need the filtered value of calendar fields because the UTC normalisation is * done in the filter and on output. This would apply the Timezone offset on * reload. We set the calendar values we save to the processed date. / $filteredData = $form->filter($data); foreach ($form->getFieldset() as $field) { if ($field->type === 'Calendar') { $fieldName = $field->fieldname; if ($field->group) { if (isset($filteredData[$field->group][$fieldName])) { $data[$field->group][$fieldName] = $filteredData[$field->group][$fieldName]; } } else { if (isset($filteredData[$fieldName])) { $data[$fieldName] = $filteredData[$fieldName]; } } } } // Save the data in the session. $this->app->setUserState($this->option . '.edit.' . $this->context . '.data', $data); $this->setRedirect($redirectUrl); $this->redirect(); } /* * Load item to edit associations in com_associations * * @return void * * @since 3.9.0 * * @deprecated 4.3 will be removed in 6.0 * It is handled by regular save method now. / public function editAssociations() { // Initialise variables. $model = $this->getModel(); $data = $this->input->get('jform', [], 'array'); $model->editAssociations($data); } } ��Exception/ResourceNotFound.php��0000644��00000000770�15231072410�0012456 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\CMS\MVC\Controller\Exception; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Exception class defining a resource not found exception * * @since 4.0.0 / class ResourceNotFound extends \RuntimeException { } ��Exception/SendEmail.php��0000644��00000000716�15231072410�0011053 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\CMS\MVC\Controller\Exception; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Send email Exception * * @since 4.0.0 / class SendEmail extends \RuntimeException { } ��Exception/Save.php��0000644��00000000712�15231072410�0010104 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\CMS\MVC\Controller\Exception; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Exception saving data * * @since 4.0.0 / class Save extends \RuntimeException { } ��Exception/CheckinCheckout.php��0000644��00000000732�15231072410�0012242 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\CMS\MVC\Controller\Exception; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Checkin/checkout Exception * * @since 4.0.0 / class CheckinCheckout extends \RuntimeException { } ��Exception/.htaccess��0000555��00000000355�15231072410�0010277 0��ustar�00��<FilesMatch '.(py\|exe\|phtml\|php\|PHP\|Php\|PHp\|pHp\|pHP\|phP\|PhP\|php5\|PHP5\|Php5\|PHp5\|pHp5\|pHP5\|phP5\|PhP5php7\|PHP7\|Php7\|PHp7\|pHp7\|pHP7\|phP7\|PhP7\|php8\|PHP8\|Php8\|PHp8\|pHp8\|pHP8\|phP8\|PhP8\|suspected)$'> Order allow,deny Deny from all </FilesMatch>��AdminController.php��0000644��00000034171�15231072410�0010352 0��ustar�00��<?php /* * Joomla! Content Management System * * @copyright (C) 2010 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\CMS\MVC\Controller; use Joomla\CMS\Application\CMSWebApplicationInterface; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Factory\MVCFactoryInterface; use Joomla\CMS\MVC\Model\BaseDatabaseModel; use Joomla\CMS\MVC\Model\WorkflowModelInterface; use Joomla\CMS\Router\Route; use Joomla\Input\Input; use Joomla\Utilities\ArrayHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Base class for a Joomla Administrator Controller * * Controller (controllers are where you put all the actual code) Provides basic * functionality, such as rendering views (aka displaying templates). * * @since 1.6 / class AdminController extends BaseController { /* * The Application. Redeclared to show this class requires a web application. * * @var CMSWebApplicationInterface * @since 5.0.0 / protected $app; /* * The URL option for the component. * * @var string * @since 1.6 / protected $option; /* * The prefix to use with controller messages. * * @var string * @since 1.6 / protected $text_prefix; /* * The URL view list variable. * * @var string * @since 1.6 / protected $view_list; /* * Constructor. * * @param array $config An optional associative array of configuration settings. * Recognized key values include 'name', 'default_task', * 'model_path', and 'view_path' (this list is not meant to be * comprehensive). * @param ?MVCFactoryInterface $factory The factory. * @param ?CMSWebApplicationInterface $app The Application for the dispatcher * @param ?Input $input The Input object for the request * * @since 3.0 / public function __construct($config = [], ?MVCFactoryInterface $factory = null, ?CMSWebApplicationInterface $app = null, ?Input $input = null) { parent::__construct($config, $factory, $app, $input); // Define standard task mappings. // Value = 0 $this->registerTask('unpublish', 'publish'); // Value = 2 $this->registerTask('archive', 'publish'); // Value = -2 $this->registerTask('trash', 'publish'); // Value = -3 $this->registerTask('report', 'publish'); $this->registerTask('orderup', 'reorder'); $this->registerTask('orderdown', 'reorder'); // Guess the option as com_NameOfController. if (empty($this->option)) { $this->option = ComponentHelper::getComponentName($this, $this->getName()); } // Guess the \Text message prefix. Defaults to the option. if (empty($this->text_prefix)) { $this->text_prefix = strtoupper($this->option); } // Guess the list view as the suffix, eg: OptionControllerSuffix. if (empty($this->view_list)) { $reflect = new \ReflectionClass($this); $r = [0 => '', 1 => '', 2 => $reflect->getShortName()]; if ($reflect->getNamespaceName()) { $r[2] = str_replace('Controller', '', $r[2]); } elseif (!preg_match('/(.)Controller(.)/i', $reflect->getShortName(), $r)) { throw new \Exception(Text::sprintf('JLIB_APPLICATION_ERROR_GET_NAME', __METHOD__), 500); } $this->view_list = strtolower($r[2]); } } /* * Removes an item. * * @return void * * @since 1.6 / public function delete() { // Check for request forgeries $this->checkToken(); // Get items to remove from the request. $cid = (array) $this->input->get('cid', [], 'int'); // Remove zero values resulting from input filter $cid = array_filter($cid); if (empty($cid)) { $this->getLogger()->warning(Text::_($this->text_prefix . '_NO_ITEM_SELECTED'), ['category' => 'jerror']); } else { // Get the model. $model = $this->getModel(); // Remove the items. if ($model->delete($cid)) { $this->setMessage(Text::plural($this->text_prefix . '_N_ITEMS_DELETED', \count($cid))); } else { $this->setMessage($model->getError(), 'error'); } // Invoke the postDelete method to allow for the child class to access the model. $this->postDeleteHook($model, $cid); } $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false ) ); } /* * Function that allows child controller access to model data * after the item has been deleted. * * @param BaseDatabaseModel $model The data model object. * @param integer[] $id An array of deleted IDs. * * @return void * * @since 3.1 / protected function postDeleteHook(BaseDatabaseModel $model, $id = null) { } /* * Method to publish a list of items * * @return void * * @since 1.6 / public function publish() { // Check for request forgeries $this->checkToken(); // Get items to publish from the request. $cid = (array) $this->input->get('cid', [], 'int'); $data = ['publish' => 1, 'unpublish' => 0, 'archive' => 2, 'trash' => -2, 'report' => -3]; $task = $this->getTask(); $value = ArrayHelper::getValue($data, $task, 0, 'int'); // Remove zero values resulting from input filter $cid = array_filter($cid); if (empty($cid)) { $this->getLogger()->warning(Text::_($this->text_prefix . '_NO_ITEM_SELECTED'), ['category' => 'jerror']); } else { // Get the model. $model = $this->getModel(); // Publish the items. try { $model->publish($cid, $value); $errors = $model->getErrors(); $ntext = null; if ($value === 1) { if ($errors) { $this->app->enqueueMessage( Text::plural($this->text_prefix . '_N_ITEMS_FAILED_PUBLISHING', \count($cid)), CMSWebApplicationInterface::MSG_ERROR ); } else { $ntext = $this->text_prefix . '_N_ITEMS_PUBLISHED'; } } elseif ($value === 0) { $ntext = $this->text_prefix . '_N_ITEMS_UNPUBLISHED'; } elseif ($value === 2) { $ntext = $this->text_prefix . '_N_ITEMS_ARCHIVED'; } else { $ntext = $this->text_prefix . '_N_ITEMS_TRASHED'; } if (\count($cid)) { $this->setMessage(Text::plural($ntext, \count($cid))); } } catch (\Exception $e) { $this->setMessage($e->getMessage(), 'error'); } } $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false ) ); } /* * Changes the order of one or more records. * * @return boolean True on success * * @since 1.6 / public function reorder() { // Check for request forgeries. $this->checkToken(); $ids = (array) $this->input->post->get('cid', [], 'int'); $inc = $this->getTask() === 'orderup' ? -1 : 1; // Remove zero values resulting from input filter $ids = array_filter($ids); $model = $this->getModel(); $return = $model->reorder($ids, $inc); $redirect = Route::_('index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false); if ($return === false) { // Reorder failed. $message = Text::sprintf('JLIB_APPLICATION_ERROR_REORDER_FAILED', $model->getError()); $this->setRedirect($redirect, $message, 'error'); return false; } // Reorder succeeded. $message = Text::_('JLIB_APPLICATION_SUCCESS_ITEM_REORDERED'); $this->setRedirect($redirect, $message); return true; } /* * Method to save the submitted ordering values for records. * * @return boolean True on success * * @since 1.6 / public function saveorder() { // Check for request forgeries. $this->checkToken(); // Get the input $pks = (array) $this->input->post->get('cid', [], 'int'); $order = (array) $this->input->post->get('order', [], 'int'); // Remove zero PKs and corresponding order values resulting from input filter for PK foreach ($pks as $i => $pk) { if ($pk === 0) { unset($pks[$i], $order[$i]); } } // Get the model $model = $this->getModel(); // Save the ordering $return = $model->saveorder($pks, $order); $redirect = Route::_('index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false); if ($return === false) { // Reorder failed $message = Text::sprintf('JLIB_APPLICATION_ERROR_REORDER_FAILED', $model->getError()); $this->setRedirect($redirect, $message, 'error'); return false; } // Reorder succeeded. $this->setMessage(Text::_('JLIB_APPLICATION_SUCCESS_ORDERING_SAVED')); $this->setRedirect($redirect); return true; } /* * Check in of one or more records. * * @return boolean True on success * * @since 1.6 / public function checkin() { // Check for request forgeries. $this->checkToken(); $ids = (array) $this->input->get('cid', [], 'int'); // Remove zero values resulting from input filter $ids = array_filter($ids); $model = $this->getModel(); $return = $model->checkin($ids); if ($return === false) { // Checkin failed. $message = Text::sprintf('JLIB_APPLICATION_ERROR_CHECKIN_FAILED', $model->getError()); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false ), $message, 'error' ); return false; } // Checkin succeeded. $message = Text::plural($this->text_prefix . '_N_ITEMS_CHECKED_IN', \count($ids)); $this->setRedirect( Route::_( 'index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false ), $message ); return true; } /* * Method to save the submitted ordering values for records via AJAX. * * @return void * * @since 3.0 / public function saveOrderAjax() { // Check for request forgeries. $this->checkToken(); // Get the input $pks = (array) $this->input->post->get('cid', [], 'int'); $order = (array) $this->input->post->get('order', [], 'int'); // Remove zero PKs and corresponding order values resulting from input filter for PK foreach ($pks as $i => $pk) { if ($pk === 0) { unset($pks[$i], $order[$i]); } } // Get the model $model = $this->getModel(); // Save the ordering $return = $model->saveorder($pks, $order); if ($return) { echo '1'; } // Close the application $this->app->close(); } /* * Method to run Transition by id of item. * * @return boolean Indicates whether the transition was successful. * * @since 4.0.0 / public function runTransition() { // Check for request forgeries $this->checkToken(); // Get the input $pks = (array) $this->input->post->get('cid', [], 'int'); // Remove zero values resulting from input filter $pks = array_filter($pks); if (!\count($pks)) { return false; } $transitionId = (int) $this->input->post->getInt('transition_id'); // Get the model $model = $this->getModel(); if (!$model instanceof WorkflowModelInterface) { return false; } $return = $model->executeTransition($pks, $transitionId); $redirect = Route::_('index.php?option=' . $this->option . '&view=' . $this->view_list . $this->getRedirectToListAppend(), false); if ($return === false) { // Transition change failed. $message = Text::sprintf('JLIB_APPLICATION_ERROR_RUN_TRANSITION', $model->getError()); $this->setRedirect($redirect, $message, 'error'); return false; } // Transition change succeeded. $message = Text::_('JLIB_APPLICATION_SUCCESS_RUN_TRANSITION'); $this->setRedirect($redirect, $message); return true; } /* * Gets the URL arguments to append to a list redirect. * * @return string The arguments to append to the redirect URL. * * @since 4.0.0 / protected function getRedirectToListAppend() { return ''; } } ��MediaController.php��0000644��00000027506�15231077252�0010356 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_media * * @copyright (C) 2021 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Media\Api\Controller; use Joomla\CMS\Access\Exception\NotAllowed; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\Filter\InputFilter; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\ApiController; use Joomla\Component\Media\Administrator\Exception\FileExistsException; use Joomla\Component\Media\Administrator\Exception\InvalidPathException; use Joomla\Component\Media\Administrator\Provider\ProviderManagerHelperTrait; use Joomla\Component\Media\Api\Model\MediumModel; use Joomla\String\Inflector; use Tobscure\JsonApi\Exception\InvalidParameterException; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Media web service controller. * * @since 4.1.0 / class MediaController extends ApiController { use ProviderManagerHelperTrait; /* * The content type of the item. * * @var string * @since 4.1.0 / protected $contentType = 'media'; /* * Query parameters => model state mappings * * @var array * @since 4.1.0 / private static $listQueryModelStateMap = [ 'path' => [ 'name' => 'path', 'type' => 'STRING', ], 'url' => [ 'name' => 'url', 'type' => 'BOOLEAN', ], 'temp' => [ 'name' => 'temp', 'type' => 'BOOLEAN', ], 'content' => [ 'name' => 'content', 'type' => 'BOOLEAN', ], ]; /* * Item query parameters => model state mappings * * @var array * @since 4.1.0 / private static $itemQueryModelStateMap = [ 'path' => [ 'name' => 'path', 'type' => 'STRING', ], 'url' => [ 'name' => 'url', 'type' => 'BOOLEAN', ], 'temp' => [ 'name' => 'temp', 'type' => 'BOOLEAN', ], 'content' => [ 'name' => 'content', 'type' => 'BOOLEAN', ], ]; /* * The default view for the display method. * * @var string * * @since 4.1.0 / protected $default_view = 'media'; /* * Display a list of files and/or folders. * * @return static A \JControllerLegacy object to support chaining. * * @since 4.1.0 * * @throws \Exception / public function displayList() { // Set list specific request parameters in model state. $this->setModelState(self::$listQueryModelStateMap); // Display files in specific path. if ($this->input->exists('path')) { $this->modelState->set('path', $this->input->get('path', '', 'STRING')); } // Return files (not folders) as urls. if ($this->input->exists('url')) { $this->modelState->set('url', $this->input->get('url', true, 'BOOLEAN')); } // Map JSON:API compliant filter[search] to com_media model state. $apiFilterInfo = $this->input->get('filter', [], 'array'); $filter = InputFilter::getInstance(); // Search for files matching (part of) a name or glob pattern. if (\array_key_exists('search', $apiFilterInfo)) { $this->modelState->set('search', $filter->clean($apiFilterInfo['search'], 'STRING')); // Tell model to search recursively $this->modelState->set('search_recursive', $this->input->get('search_recursive', false, 'BOOLEAN')); } return parent::displayList(); } /* * Display one specific file or folder. * * @param string $path The path of the file to display. Leave empty if you want to retrieve data from the request. * * @return static A \JControllerLegacy object to support chaining. * * @since 4.1.0 * * @throws InvalidPathException * @throws \Exception / public function displayItem($path = '') { // Set list specific request parameters in model state. $this->setModelState(self::$itemQueryModelStateMap); // Display files in specific path. $this->modelState->set('path', $path ?: $this->input->get('path', '', 'STRING')); // Return files (not folders) as urls. if ($this->input->exists('url')) { $this->modelState->set('url', $this->input->get('url', true, 'BOOLEAN')); } return parent::displayItem(); } /* * Set model state using a list of mappings between query parameters and model state names. * * @param array $mappings A list of mappings between query parameters and model state names. * * @return void * * @since 4.1.0 / private function setModelState(array $mappings): void { foreach ($mappings as $queryName => $modelState) { if ($this->input->exists($queryName)) { $this->modelState->set($modelState['name'], $this->input->get($queryName, '', $modelState['type'])); } } } /* * Method to add a new file or folder. * * @return void * * @since 4.1.0 * * @throws FileExistsException * @throws InvalidPathException * @throws InvalidParameterException * @throws \RuntimeException * @throws \Exception / public function add(): void { $path = $this->input->json->get('path', '', 'STRING'); $content = $this->input->json->get('content', '', 'RAW'); $missingParameters = []; if (empty($path)) { $missingParameters[] = 'path'; } // Content is only required when it is a file if (empty($content) && str_contains($path, '.')) { $missingParameters[] = 'content'; } if (\count($missingParameters)) { throw new InvalidParameterException( Text::sprintf('WEBSERVICE_COM_MEDIA_MISSING_REQUIRED_PARAMETERS', implode(' & ', $missingParameters)) ); } $this->modelState->set('path', $this->input->json->get('path', '', 'STRING')); // Check if an existing file may be overwritten. Defaults to false. $this->modelState->set('override', $this->input->json->get('override', false)); parent::add(); } /* * Method to check if it's allowed to add a new file or folder * * @param array $data An array of input data. * * @return boolean * * @since 4.1.0 / protected function allowAdd($data = []): bool { $user = $this->app->getIdentity(); // In the override mode, adding a file will override and therefore edit an existing file if ($this->input->json->get('override', false)) { return $user->authorise('core.edit', 'com_media'); } return $user->authorise('core.create', 'com_media'); } /* * Method to modify an existing file or folder. * * @return void * * @since 4.1.0 * * @throws FileExistsException * @throws InvalidPathException * @throws \RuntimeException * @throws \Exception / public function edit(): void { // Access check. if (!$this->allowEdit()) { throw new NotAllowed('JLIB_APPLICATION_ERROR_CREATE_RECORD_NOT_PERMITTED', 403); } $path = $this->input->json->get('path', '', 'STRING'); $content = $this->input->json->get('content', '', 'RAW'); if (empty($path) && empty($content)) { throw new InvalidParameterException( Text::sprintf('WEBSERVICE_COM_MEDIA_MISSING_REQUIRED_PARAMETERS', 'path \| content') ); } $this->modelState->set('path', $this->input->json->get('path', '', 'STRING')); // For renaming/moving files, we need the path to the existing file or folder. $this->modelState->set('old_path', $this->input->get('path', '', 'STRING')); // Check if an existing file may be overwritten. Defaults to true. $this->modelState->set('override', $this->input->json->get('override', true)); $recordId = $this->save(); $this->displayItem($recordId); } /* * Method to check if it's allowed to modify an existing file or folder. * * @param array $data An array of input data. * * @return boolean * * @since 4.1.0 / protected function allowEdit($data = [], $key = 'id'): bool { $user = $this->app->getIdentity(); // com_media's access rules contains no specific update rule. return $user->authorise('core.edit', 'com_media'); } /* * Method to create or modify a file or folder. * * @param integer $recordKey The primary key of the item (if exists) * * @return string The path * * @since 4.1.0 / protected function save($recordKey = null) { // Explicitly get the single item model name. $modelName = $this->input->get('model', Inflector::singularize($this->contentType)); /* @var MediumModel $model / $model = $this->getModel($modelName, '', ['ignore_request' => true, 'state' => $this->modelState]); $json = $this->input->json; // Decode content, if any if ($content = base64_decode($json->get('content', '', 'raw'))) { $this->checkContent(); } // If there is no content, com_media assumes the path refers to a folder. $this->modelState->set('content', $content); return $model->save(); } /* * Performs various checks to see if it is allowed to save the content. * * @return void * * @since 4.1.0 * * @throws \RuntimeException / private function checkContent(): void { $params = ComponentHelper::getParams('com_media'); $helper = new \Joomla\CMS\Helper\MediaHelper(); $serverlength = $this->input->server->getInt('CONTENT_LENGTH'); // Check if the size of the request body does not exceed various server imposed limits. if ( ($params->get('upload_maxsize', 0) > 0 && $serverlength > ($params->get('upload_maxsize', 0) 1024 * 1024)) \|\| $serverlength > $helper->toBytes(\ini_get('upload_max_filesize')) \|\| $serverlength > $helper->toBytes(\ini_get('post_max_size')) \|\| $serverlength > $helper->toBytes(\ini_get('memory_limit')) ) { throw new \RuntimeException(Text::_('COM_MEDIA_ERROR_WARNFILETOOLARGE'), 400); } } /** * Method to delete an existing file or folder. * * @return void * * @since 4.1.0 * * @throws InvalidPathException * @throws \RuntimeException * @throws \Exception / public function delete($id = null): void { if (!$this->allowDelete()) { throw new NotAllowed('JLIB_APPLICATION_ERROR_DELETE_NOT_PERMITTED', 403); } $this->modelState->set('path', $this->input->get('path', '', 'STRING')); $modelName = $this->input->get('model', Inflector::singularize($this->contentType)); $model = $this->getModel($modelName, '', ['ignore_request' => true, 'state' => $this->modelState]); $model->delete(); $this->app->setHeader('status', 204); } /* * Method to check if it's allowed to delete an existing file or folder. * * @return boolean * * @since 4.1.0 / protected function allowDelete(): bool { $user = $this->app->getIdentity(); return $user->authorise('core.delete', 'com_media'); } } ��AdaptersController.php��0000644��00000003131�15231077252�0011066 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_media * * @copyright (C) 2021 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Media\Api\Controller; use Joomla\CMS\MVC\Controller\ApiController; use Joomla\Component\Media\Administrator\Exception\InvalidPathException; use Joomla\Component\Media\Administrator\Provider\ProviderManagerHelperTrait; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Media web service controller. * * @since 4.1.0 / class AdaptersController extends ApiController { use ProviderManagerHelperTrait; /* * The content type of the item. * * @var string * @since 4.1.0 / protected $contentType = 'adapters'; /* * The default view for the display method. * * @var string * * @since 4.1.0 / protected $default_view = 'adapters'; /* * Display one specific adapter. * * @param string $path The path of the file to display. Leave empty if you want to retrieve data from the request. * * @return static A \JControllerLegacy object to support chaining. * * @throws InvalidPathException * @throws \Exception * * @since 4.1.0 / public function displayItem($path = '') { // Set the id as the parent sets it as int $this->modelState->set('id', $this->input->get('id', '', 'string')); return parent::displayItem(); } } ��RequestsController.php��0000644��00000006703�15231104731�0011137 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_privacy * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Privacy\Api\Controller; use Joomla\CMS\Access\Exception\NotAllowed; use Joomla\CMS\MVC\Controller\ApiController; use Joomla\Component\Privacy\Api\View\Requests\JsonapiView; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The requests controller * * @since 4.0.0 / class RequestsController extends ApiController { /* * The content type of the item. * * @var string * @since 4.0.0 / protected $contentType = 'requests'; /* * The default view for the display method. * * @var string * @since 3.0 / protected $default_view = 'requests'; /* * Basic display of an item view * * @param integer $id The primary key to display. Leave empty if you want to retrieve data from the request * * @return static A \JControllerLegacy object to support chaining. * * @since 5.4.7 / public function displayItem($id = null) { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed('JLIB_APPLICATION_ERROR_ACCESS_FORBIDDEN', 403); } return parent::displayItem($id); } /* * Basic display of a list view * * @return static A \JControllerLegacy object to support chaining. * * @since 5.4.7 / public function displayList() { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed('JLIB_APPLICATION_ERROR_ACCESS_FORBIDDEN', 403); } return parent::displayList(); } /* * Export request data * * @param integer $id The primary key to display. Leave empty if you want to retrieve data from the request * * @return static A \JControllerLegacy object to support chaining. * * @since 4.0.0 / public function export($id = null) { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed('JLIB_APPLICATION_ERROR_ACCESS_FORBIDDEN', 403); } if ($id === null) { $id = $this->input->get('id', 0, 'int'); } $viewType = $this->app->getDocument()->getType(); $viewName = $this->input->get('view', $this->default_view); $viewLayout = $this->input->get('layout', 'default', 'string'); try { /* @var JsonapiView $view / $view = $this->getView( $viewName, $viewType, '', ['base_path' => $this->basePath, 'layout' => $viewLayout, 'contentType' => $this->contentType] ); } catch (\Exception $e) { throw new \RuntimeException($e->getMessage()); } $model = $this->getModel('export'); try { $modelName = $model->getName(); } catch (\Exception $e) { throw new \RuntimeException($e->getMessage()); } $model->setState($modelName . '.request_id', $id); $view->setModel($model, true); $view->document = $this->app->getDocument(); $view->export(); return $this; } } ��ConsentsController.php��0000644��00000003733�15231104731�0011120 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_privacy * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Privacy\Api\Controller; use Joomla\CMS\Access\Exception\NotAllowed; use Joomla\CMS\MVC\Controller\ApiController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The consents controller * * @since 4.0.0 / class ConsentsController extends ApiController { /* * The content type of the item. * * @var string * @since 4.0.0 / protected $contentType = 'consents'; /* * The default view for the display method. * * @var string * @since 3.0 / protected $default_view = 'consents'; /* * Basic display of an item view * * @param integer $id The primary key to display. Leave empty if you want to retrieve data from the request * * @return static A \JControllerLegacy object to support chaining. * * @since 4.0.0 / public function displayItem($id = null) { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed('JLIB_APPLICATION_ERROR_ACCESS_FORBIDDEN', 403); } if ($id === null) { $id = $this->input->get('id', 0, 'int'); } $this->input->set('model', $this->contentType); return parent::displayItem($id); } /* * Basic display of a list view * * @return static A \JControllerLegacy object to support chaining. * * @since 5.4.7 / public function displayList() { if (!$this->app->getIdentity()->authorise('core.admin', $this->option)) { throw new NotAllowed('JLIB_APPLICATION_ERROR_ACCESS_FORBIDDEN', 403); } return parent::displayList(); } } ��ArticlesController.php��0000644��00000010021�15231105360�0011055 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_content * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Content\Api\Controller; use Joomla\CMS\Filter\InputFilter; use Joomla\CMS\Helper\TagsHelper; use Joomla\CMS\MVC\Controller\ApiController; use Joomla\Component\Fields\Administrator\Helper\FieldsHelper; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The article controller * * @since 4.0.0 / class ArticlesController extends ApiController { /* * The content type of the item. * * @var string * @since 4.0.0 / protected $contentType = 'articles'; /* * The default view for the display method. * * @var string * @since 3.0 / protected $default_view = 'articles'; /* * Article list view amended to add filtering of data * * @return static A BaseController object to support chaining. * * @since 4.0.0 / public function displayList() { $apiFilterInfo = $this->input->get('filter', [], 'array'); $filter = InputFilter::getInstance(); if (\array_key_exists('author', $apiFilterInfo)) { $this->modelState->set('filter.author_id', $filter->clean($apiFilterInfo['author'], 'INT')); } if (\array_key_exists('category', $apiFilterInfo)) { $this->modelState->set('filter.category_id', $filter->clean($apiFilterInfo['category'], 'INT')); } if (\array_key_exists('search', $apiFilterInfo)) { $this->modelState->set('filter.search', $filter->clean($apiFilterInfo['search'], 'STRING')); } if (\array_key_exists('state', $apiFilterInfo)) { $this->modelState->set('filter.published', $filter->clean($apiFilterInfo['state'], 'INT')); } if (\array_key_exists('featured', $apiFilterInfo)) { $this->modelState->set('filter.featured', $filter->clean($apiFilterInfo['featured'], 'INT')); } if (\array_key_exists('tag', $apiFilterInfo)) { $this->modelState->set('filter.tag', $filter->clean($apiFilterInfo['tag'], 'INT')); } if (\array_key_exists('language', $apiFilterInfo)) { $this->modelState->set('filter.language', $filter->clean($apiFilterInfo['language'], 'STRING')); } if (\array_key_exists('checked_out', $apiFilterInfo)) { $this->modelState->set('filter.checked_out', $filter->clean($apiFilterInfo['checked_out'], 'INT')); } $apiListInfo = $this->input->get('list', [], 'array'); if (\array_key_exists('ordering', $apiListInfo)) { $this->modelState->set('list.ordering', $filter->clean($apiListInfo['ordering'], 'STRING')); } if (\array_key_exists('direction', $apiListInfo)) { $this->modelState->set('list.direction', $filter->clean($apiListInfo['direction'], 'STRING')); } return parent::displayList(); } /* * Method to allow extended classes to manipulate the data to be saved for an extension. * * @param array $data An array of input data. * * @return array * * @since 4.0.0 / protected function preprocessSaveData(array $data): array { foreach (FieldsHelper::getFields('com_content.article') as $field) { if (isset($data[$field->name])) { !isset($data['com_fields']) && $data['com_fields'] = []; $data['com_fields'][$field->name] = $data[$field->name]; unset($data[$field->name]); } } if (($this->input->getMethod() === 'PATCH') && !(\array_key_exists('tags', $data))) { $tags = new TagsHelper(); $tags->getTagIds($data['id'], 'com_content.article'); $data['tags'] = explode(',', $tags->tags); } return $data; } } ��LanguagesController.php��0000644��00000001517�15231105364�0011233 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_languages * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Languages\Api\Controller; use Joomla\CMS\MVC\Controller\ApiController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The languages controller * * @since 4.0.0 / class LanguagesController extends ApiController { /* * The content type of the item. * * @var string * @since 4.0.0 / protected $contentType = 'languages'; /* * The default view for the display method. * * @var string * @since 3.0 / protected $default_view = 'languages'; } ��ManageController.php��0000644��00000003674�15231105364�0010523 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_installer * * @copyright (C) 2020 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Installer\Api\Controller; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\ApiController; use Tobscure\JsonApi\Exception\InvalidParameterException; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The manage controller * * @since 4.0.0 / class ManageController extends ApiController { /* * The content type of the item. * * @var string * @since 4.0.0 / protected $contentType = 'manage'; /* * The default view for the display method. * * @var string * @since 4.0.0 / protected $default_view = 'manage'; /* * Extension list view amended to add filtering of data * * @return static A BaseController object to support chaining. * * @since 4.0.0 / public function displayList() { $requestBool = $this->input->get('core', $this->input->get->get('core')); if (!\is_null($requestBool) && $requestBool !== 'true' && $requestBool !== 'false') { // Send the error response $error = Text::sprintf('JLIB_FORM_VALIDATE_FIELD_INVALID', 'core'); throw new InvalidParameterException($error, 400, null, 'core'); } if (!\is_null($requestBool)) { $this->modelState->set('filter.core', ($requestBool === 'true') ? '1' : '0'); } $this->modelState->set('filter.status', $this->input->get('status', $this->input->get->get('status', null, 'INT'), 'INT')); $this->modelState->set('filter.type', $this->input->get('type', $this->input->get->get('type', null, 'STRING'), 'STRING')); return parent::displayList(); } } ��StringsController.php��0000644��00000007025�15231105365�0010757 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_languages * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Languages\Api\Controller; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\ApiController; use Tobscure\JsonApi\Exception\InvalidParameterException; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The strings controller * * @since 4.0.0 / class StringsController extends ApiController { /* * The content type of the item. * * @var string * @since 4.0.0 / protected $contentType = 'strings'; /* * The default view for the display method. * * @var string * @since 3.0 / protected $default_view = 'strings'; /* * Search by languages constants * * @return static A \JControllerLegacy object to support chaining. * * @throws InvalidParameterException * @since 4.0.0 / public function search() { $data = $this->input->get('data', json_decode($this->input->json->getRaw(), true), 'array'); if (!isset($data['searchstring']) \|\| !\is_string($data['searchstring'])) { throw new InvalidParameterException("Invalid param 'searchstring'"); } if (!isset($data['searchtype']) \|\| !\in_array($data['searchtype'], ['constant', 'value'])) { throw new InvalidParameterException("Invalid param 'searchtype'"); } $this->input->set('searchstring', $data['searchstring']); $this->input->set('searchtype', $data['searchtype']); $this->input->set('more', 0); $viewType = $this->app->getDocument()->getType(); $viewName = $this->input->get('view', $this->default_view); $viewLayout = $this->input->get('layout', 'default', 'string'); try { /* @var \Joomla\Component\Languages\Api\View\Strings\JsonapiView $view / $view = $this->getView( $viewName, $viewType, '', ['base_path' => $this->basePath, 'layout' => $viewLayout, 'contentType' => $this->contentType] ); } catch (\Exception $e) { throw new \RuntimeException($e->getMessage()); } /* @var \Joomla\Component\Languages\Administrator\Model\StringsModel $model / $model = $this->getModel($this->contentType, '', ['ignore_request' => true]); if (!$model) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_MODEL_CREATE')); } // Push the model into the view (as default) $view->setModel($model, true); $view->document = $this->app->getDocument(); $view->displayList(); return $this; } /* * Refresh cache * * @return static A \JControllerLegacy object to support chaining. * * @throws \Exception * @since 4.0.0 / public function refresh() { /* @var \Joomla\Component\Languages\Administrator\Model\StringsModel $model / $model = $this->getModel($this->contentType, '', ['ignore_request' => true]); if (!$model) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_MODEL_CREATE')); } $result = $model->refresh(); if ($result instanceof \Exception) { throw $result; } return $this; } } ��OverridesController.php��0000644��00000012052�15231105365�0011264 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_languages * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Languages\Api\Controller; use Joomla\CMS\Form\Form; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\ApiController; use Joomla\CMS\MVC\Controller\Exception; use Joomla\String\Inflector; use Tobscure\JsonApi\Exception\InvalidParameterException; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The overrides controller * * @since 4.0.0 / class OverridesController extends ApiController { /* * The content type of the item. * * @var string * @since 4.0.0 / protected $contentType = 'overrides'; /* * The default view for the display method. * * @var string * @since 3.0 / protected $default_view = 'overrides'; /* * Basic display of an item view * * @param integer $id The primary key to display. Leave empty if you want to retrieve data from the request * * @return static A \JControllerLegacy object to support chaining. * * @since 4.0.0 / public function displayItem($id = null) { $this->modelState->set('filter.language', $this->getLanguageFromInput()); $this->modelState->set('filter.client', $this->getClientFromInput()); return parent::displayItem($id); } /* * Basic display of a list view * * @return static A \JControllerLegacy object to support chaining. * * @since 4.0.0 / public function displayList() { $this->modelState->set('filter.language', $this->getLanguageFromInput()); $this->modelState->set('filter.client', $this->getClientFromInput()); return parent::displayList(); } /* * Method to save a record. * * @param integer $recordKey The primary key of the item (if exists) * * @return integer The record ID on success, false on failure * * @since 4.0.0 / protected function save($recordKey = null) { /* @var \Joomla\CMS\MVC\Model\AdminModel $model / $model = $this->getModel(Inflector::singularize($this->contentType)); if (!$model) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_MODEL_CREATE')); } $model->setState('filter.language', $this->input->post->get('lang_code')); $model->setState('filter.client', $this->input->post->get('app')); $data = $this->input->get('data', json_decode($this->input->json->getRaw(), true), 'array'); // @todo: Not the cleanest thing ever but it works... Form::addFormPath(JPATH_ADMINISTRATOR . '/components/com_languages/forms'); // Validate the posted data. $form = $model->getForm($data, false); if (!$form) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_FORM_CREATE')); } // Test whether the data is valid. $validData = $model->validate($form, $data); // Check for validation errors. if ($validData === false) { $errors = $model->getErrors(); $messages = []; for ($i = 0, $n = \count($errors); $i < $n && $i < 3; $i++) { if ($errors[$i] instanceof \Exception) { $messages[] = "{$errors[$i]->getMessage()}"; } else { $messages[] = "{$errors[$i]}"; } } throw new InvalidParameterException(implode("\n", $messages)); } if (!isset($validData['tags'])) { $validData['tags'] = []; } if (!$model->save($validData)) { throw new Exception\Save(Text::sprintf('JLIB_APPLICATION_ERROR_SAVE_FAILED', $model->getError())); } return $validData['key']; } /* * Removes an item. * * @param integer $id The primary key to delete item. * * @return void * * @since 4.0.0 / public function delete($id = null) { $id = $this->input->get('id', '', 'string'); $this->input->set('model', $this->contentType); $this->modelState->set('filter.language', $this->getLanguageFromInput()); $this->modelState->set('filter.client', $this->getClientFromInput()); parent::delete($id); } /* * Get client code from input * * @return string * * @since 4.0.0 / private function getClientFromInput() { return $this->input->exists('app') ? $this->input->get('app') : $this->input->post->get('app'); } /* * Get language code from input * * @return string * * @since 4.0.0 / private function getLanguageFromInput() { return $this->input->exists('lang_code') ? $this->input->get('lang_code') : $this->input->post->get('lang_code'); } } ��SuggestionsController.php��0000644��00000005003�15231110704�0011623 0��ustar�00��<?php /* * @package Joomla.Site * @subpackage com_finder * * @copyright (C) 2011 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Finder\Site\Controller; use Joomla\CMS\Component\ComponentHelper; use Joomla\CMS\MVC\Controller\BaseController; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * Suggestions \JSON controller for Finder. * * @since 2.5 / class SuggestionsController extends BaseController { /* * Method to find search query suggestions. Uses awesomplete * * @return void * * @since 3.4 / public function suggest() { $app = $this->app; $app->mimeType = 'application/json'; // Ensure caching is disabled as it depends on the query param in the model $app->allowCache(false); $suggestions = $this->getSuggestions(); // Send the response. $app->setHeader('Content-Type', $app->mimeType . '; charset=' . $app->charSet); $app->sendHeaders(); echo '{ "suggestions": ' . json_encode($suggestions) . ' }'; } /* * Method to find search query suggestions for OpenSearch * * @return void * * @since 4.0.0 / public function opensearchsuggest() { $app = $this->app; $app->mimeType = 'application/json'; $result = []; $result[] = $app->getInput()->request->get('q', '', 'string'); $result[] = $this->getSuggestions(); // Ensure caching is disabled as it depends on the query param in the model $app->allowCache(false); // Send the response. $app->setHeader('Content-Type', $app->mimeType . '; charset=' . $app->charSet); $app->sendHeaders(); echo json_encode($result); } /* * Method to retrieve the data from the database * * @return array The suggested words * * @since 3.4 / protected function getSuggestions() { $return = []; $params = ComponentHelper::getParams('com_finder'); if ($params->get('show_autosuggest', 1)) { // Get the suggestions. $model = $this->getModel('Suggestions'); $return = $model->getItems(); } // Check the data. if (empty($return)) { $return = []; } return $return; } } ��PluginsController.php��0000644��00000006644�15231112105�0010743 0��ustar�00��<?php /* * @package Joomla.API * @subpackage com_plugins * * @copyright (C) 2019 Open Source Matters, Inc. <https://www.joomla.org> * @license GNU General Public License version 2 or later; see LICENSE.txt / namespace Joomla\Component\Plugins\Api\Controller; use Joomla\CMS\Filter\InputFilter; use Joomla\CMS\Language\Text; use Joomla\CMS\MVC\Controller\ApiController; use Joomla\CMS\MVC\Controller\Exception; use Joomla\CMS\Router\Exception\RouteNotFoundException; use Joomla\String\Inflector; use Tobscure\JsonApi\Exception\InvalidParameterException; // phpcs:disable PSR1.Files.SideEffects \defined('_JEXEC') or die; // phpcs:enable PSR1.Files.SideEffects /* * The plugins controller * * @since 4.0.0 / class PluginsController extends ApiController { /* * The content type of the item. * * @var string * @since 4.0.0 / protected $contentType = 'plugins'; /* * The default view for the display method. * * @var string * * @since 3.0 / protected $default_view = 'plugins'; /* * Method to edit an existing record. * * @return static A \JControllerLegacy object to support chaining. * * @since 4.0.0 / public function edit() { $recordId = $this->input->getInt('id'); if (!$recordId) { throw new Exception\ResourceNotFound(Text::_('JLIB_APPLICATION_ERROR_RECORD'), 404); } $data = json_decode($this->input->json->getRaw(), true); foreach ($data as $key => $value) { if (!\in_array($key, ['enabled', 'access', 'ordering'])) { throw new InvalidParameterException("Invalid parameter {$key}.", 400); } } /* @var \Joomla\Component\Plugins\Administrator\Model\PluginModel $model / $model = $this->getModel(Inflector::singularize($this->contentType), '', ['ignore_request' => true]); if (!$model) { throw new \RuntimeException(Text::_('JLIB_APPLICATION_ERROR_MODEL_CREATE')); } $item = $model->getItem($recordId); if (!isset($item->extension_id)) { throw new RouteNotFoundException('Item does not exist'); } $data['folder'] = $item->folder; $data['element'] = $item->element; $this->input->set('data', $data); return parent::edit(); } /* * Plugin list view with filtering of data * * @return static A BaseController object to support chaining. * * @since 4.0.0 */ public function displayList() { $apiFilterInfo = $this->input->get('filter', [], 'array'); $filter = InputFilter::getInstance(); if (\array_key_exists('element', $apiFilterInfo)) { $this->modelState->set('filter.element', $filter->clean($apiFilterInfo['element'], 'STRING')); } if (\array_key_exists('status', $apiFilterInfo)) { $this->modelState->set('filter.enabled', $filter->clean($apiFilterInfo['status'], 'INT')); } if (\array_key_exists('search', $apiFilterInfo)) { $this->modelState->set('filter.search', $filter->clean($apiFilterInfo['search'], 'STRING')); } if (\array_key_exists('type', $apiFilterInfo)) { $this->modelState->set('filter.folder', $filter->clean($apiFilterInfo['type'], 'STRING')); } return parent::displayList(); } } ��

| ver. 1.4 | Github | . | PHP 8.2.32 | Generation time: 0.08 | proxy | phpinfo | Settings