modules/Administration/UpgradeWizard.php

   1 <?php
   2 if(!defined('sugarEntry') || !sugarEntry) die('Not A Valid Entry Point');
   3 /*********************************************************************************
   4  * SugarCRM Community Edition is a customer relationship management program developed by
   5  * SugarCRM, Inc. Copyright (C) 2004-2012 SugarCRM Inc.
   6  *
   7  * This program is free software; you can redistribute it and/or modify it under
   8  * the terms of the GNU Affero General Public License version 3 as published by the
   9  * Free Software Foundation with the addition of the following permission added
  10  * to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED WORK
  11  * IN WHICH THE COPYRIGHT IS OWNED BY SUGARCRM, SUGARCRM DISCLAIMS THE WARRANTY
  12  * OF NON INFRINGEMENT OF THIRD PARTY RIGHTS.
  13  *
  14  * This program is distributed in the hope that it will be useful, but WITHOUT
  15  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
  16  * FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
  17  * details.
  18  *
  19  * You should have received a copy of the GNU Affero General Public License along with
  20  * this program; if not, see http://www.gnu.org/licenses or write to the Free
  21  * Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
  22  * 02110-1301 USA.
  23  *
  24  * You can contact SugarCRM, Inc. headquarters at 10050 North Wolfe Road,
  25  * SW2-130, Cupertino, CA 95014, USA. or at email address contact@sugarcrm.com.
  26  *
  27  * The interactive user interfaces in modified source and object code versions
  28  * of this program must display Appropriate Legal Notices, as required under
  29  * Section 5 of the GNU Affero General Public License version 3.
  30  *
  31  * In accordance with Section 7(b) of the GNU Affero General Public License version 3,
  32  * these Appropriate Legal Notices must retain the display of the "Powered by
  33  * SugarCRM" logo. If the display of the logo is not reasonably feasible for
  34  * technical reasons, the Appropriate Legal Notices must display the words
  35  * "Powered by SugarCRM".
  36  ********************************************************************************/
  37
  38
  39
  40 if(!is_admin($GLOBALS['current_user'])){
  41         sugar_die($GLOBALS['app_strings']['ERR_NOT_ADMIN']);
  42 }
  43 require_once('modules/Administration/UpgradeWizardCommon.php');
  44 require_once('ModuleInstall/PackageManager/PackageManagerDisplay.php');
  45 require_once('ModuleInstall/ModuleScanner.php');
  46 global $mod_strings;
  47 $uh = new UpgradeHistory();
  48
  49 function unlinkTempFiles() {
  50         global $sugar_config;
  51         @unlink($_FILES['upgrade_zip']['tmp_name']);
  52         @unlink("upload://".$_FILES['upgrade_zip']['name']);
  53 }
  54
  55 $base_upgrade_dir       = "upload://upgrades";
  56 $base_tmp_upgrade_dir   = sugar_cached('upgrades/temp');
  57
  58 // make sure dirs exist
  59 foreach( $GLOBALS['subdirs'] as $subdir ){
  60     if(!file_exists("$base_upgrade_dir/$subdir")) {
  61         sugar_mkdir("$base_upgrade_dir/$subdir", 0770, true);
  62     }
  63 }
  64
  65 // get labels and text that are specific to either Module Loader or Upgrade Wizard
  66 if( $view == "module") {
  67         $uploaddLabel = $mod_strings['LBL_UW_UPLOAD_MODULE'];
  68         $descItemsQueued = $mod_strings['LBL_UW_DESC_MODULES_QUEUED'];
  69         $descItemsInstalled = $mod_strings['LBL_UW_DESC_MODULES_INSTALLED'];
  70 }
  71 else {
  72
  73         $uploaddLabel = $mod_strings['LBL_UPLOAD_UPGRADE'];
  74         $descItemsQueued = $mod_strings['DESC_FILES_QUEUED'];
  75         $descItemsInstalled = $mod_strings['DESC_FILES_INSTALLED'];
  76 }
  77
  78 //
  79 // check that the upload limit is set to 6M or greater
  80 //
  81
  82 define('SUGARCRM_MIN_UPLOAD_MAX_FILESIZE_BYTES', 6 * 1024 * 1024);  // 6 Megabytes
  83
  84 $upload_max_filesize = ini_get('upload_max_filesize');
  85 $upload_max_filesize_bytes = return_bytes($upload_max_filesize);
  86 if($upload_max_filesize_bytes < constant('SUGARCRM_MIN_UPLOAD_MAX_FILESIZE_BYTES'))
  87 {
  88         $GLOBALS['log']->debug("detected upload_max_filesize: $upload_max_filesize");
  89         print('<p class="error">' . $mod_strings['MSG_INCREASE_UPLOAD_MAX_FILESIZE'] . ' '
  90                 . get_cfg_var('cfg_file_path') . "</p>\n");
  91 }
  92
  93 //
  94 // process "run" commands
  95 //
  96
  97 if( isset( $_REQUEST['run'] ) && ($_REQUEST['run'] != "") ){
  98     $run = $_REQUEST['run'];
  99
 100     if( $run == "upload" ){
 101         $perform = false;
 102         if(isset($_REQUEST['release_id']) && $_REQUEST['release_id'] != ""){
 103             require_once('ModuleInstall/PackageManager.php');
 104             $pm = new PackageManager();
 105             $tempFile = $pm->download('','',$_REQUEST['release_id']);
 106             $perform = true;
 107             $base_filename = urldecode($tempFile);
 108         } elseif(!empty($_REQUEST['load_module_from_dir'])) {
 109                 //copy file to proper location then call performSetup
 110                 copy($_REQUEST['load_module_from_dir'].'/'.$_REQUEST['upgrade_zip_escaped'], "upload://".$_REQUEST['upgrade_zip_escaped']);
 111
 112                 $perform = true;
 113             $base_filename = urldecode( $_REQUEST['upgrade_zip_escaped'] );
 114         } else {
 115             if( empty( $_FILES['upgrade_zip']['tmp_name'] ) ){
 116                 echo $mod_strings['ERR_UW_NO_UPLOAD_FILE'];
 117             } else{
 118                 $upload = new UploadFile('upgrade_zip');
 119                 if(!$upload->confirm_upload() ||
 120                     strtolower(pathinfo($upload->get_stored_file_name(), PATHINFO_EXTENSION)) != 'zip' ||
 121                     !$upload->final_move($upload->get_stored_file_name())
 122                     ) {
 123                             unlinkTempFiles();
 124                     sugar_die("Invalid Package");
 125                 } else {
 126                              $tempFile = "upload://".$upload->get_stored_file_name();
 127                      $perform = true;
 128                      $base_filename = urldecode( $_REQUEST['upgrade_zip_escaped'] );
 129                     }
 130             }
 131         }
 132         if($perform) {
 133             $manifest_file = extractManifest( $tempFile );
 134                         if(is_file($manifest_file))
 135                         {
 136                         //SCAN THE MANIFEST FILE TO MAKE SURE NO COPIES OR ANYTHING ARE HAPPENING IN IT
 137                         $ms = new ModuleScanner();
 138                         $ms->lockConfig();
 139                         $fileIssues = $ms->scanFile($manifest_file);
 140                         if(!empty($fileIssues)){
 141                                 echo '<h2>' . $mod_strings['ML_MANIFEST_ISSUE'] . '</h2><br>';
 142                                 $ms->displayIssues();
 143                                 die();
 144                         }
 145                         list($manifest, $installdefs) = MSLoadManifest($manifest_file);
 146                         if($ms->checkConfig($manifest_file)) {
 147                                 echo '<h2>' . $mod_strings['ML_MANIFEST_ISSUE'] . '</h2><br>';
 148                                 $ms->displayIssues();
 149                                 die();
 150                         }
 151                         validate_manifest( $manifest );
 152
 153                             $upgrade_zip_type = $manifest['type'];
 154
 155                         // exclude the bad permutations
 156                         if( $view == "module" ) {
 157                                 if ($upgrade_zip_type != "module" && $upgrade_zip_type != "theme" && $upgrade_zip_type != "langpack") {
 158                                         unlinkTempFiles();
 159                                          die($mod_strings['ERR_UW_NOT_ACCEPTIBLE_TYPE']);
 160                                 }
 161                         } elseif( $view == "default" ) {
 162                                 if($upgrade_zip_type != "patch" ) {
 163                                         unlinkTempFiles();
 164                                         die($mod_strings['ERR_UW_ONLY_PATCHES']);
 165                                 }
 166                         }
 167
 168                         $base_filename = pathinfo($tempFile, PATHINFO_BASENAME);
 169
 170                         mkdir_recursive( "$base_upgrade_dir/$upgrade_zip_type" );
 171                         $target_path = "$base_upgrade_dir/$upgrade_zip_type/$base_filename";
 172                             $target_manifest = remove_file_extension( $target_path ) . "-manifest.php";
 173
 174                         if( isset($manifest['icon']) && $manifest['icon'] != "" ){
 175                                  $icon_location = extractFile( $tempFile ,$manifest['icon'] );
 176                                  copy($icon_location, remove_file_extension( $target_path )."-icon.".pathinfo($icon_location, PATHINFO_EXTENSION));
 177                         }
 178
 179                                 if(rename( $tempFile , $target_path )) {
 180                                          copy( $manifest_file, $target_manifest );
 181                                         $GLOBALS['ML_STATUS_MESSAGE'] = $base_filename.$mod_strings['LBL_UW_UPLOAD_SUCCESS'];
 182                 } else{
 183                                          $GLOBALS['ML_STATUS_MESSAGE'] = $mod_strings['ERR_UW_UPLOAD_ERROR'];
 184                                 }
 185                         } else {
 186                                 unlinkTempFiles();
 187                                 die($mod_strings['ERR_UW_NO_MANIFEST']);
 188                         }
 189         }
 190     } else if( $run == $mod_strings['LBL_UW_BTN_DELETE_PACKAGE'] ){
 191         if(!empty ($_REQUEST['install_file']) ){
 192             die($mod_strings['ERR_UW_NO_UPLOAD_FILE']);
 193         }
 194
 195         $delete_me = hashToFile($delete_me);
 196
 197         $checkFile = strtolower($delete_me);
 198
 199         if(substr($delete_me, -4) != ".zip" || substr($delete_me, 0, 9) != "upload://" ||
 200         strpos($checkFile, "..") !== false || !file_exists($checkFile)) {
 201             die("<span class='error'>File is not a zipped archive.</span>");
 202         }
 203                 if(unlink($delete_me)) { // successful deletion?
 204                         echo "Package $delete_me has been removed.<br>";
 205                 } else {
 206                         die("Problem removing package $delete_me.");
 207                 }
 208     }
 209 }
 210
 211 if( $view == "module") {
 212         print( getClassicModuleTitle($mod_strings['LBL_MODULE_NAME'], array($mod_strings['LBL_MODULE_LOADER_TITLE']), false) );
 213 }
 214 else {
 215         print( getClassicModuleTitle($mod_strings['LBL_MODULE_NAME'], array($mod_strings['LBL_MODULE_NAME'],$mod_strings['LBL_UPGRADE_WIZARD_TITLE']), false) );
 216 }
 217
 218 // upload link
 219 if(!empty($GLOBALS['sugar_config']['use_common_ml_dir']) && $GLOBALS['sugar_config']['use_common_ml_dir'] && !empty($GLOBALS['sugar_config']['common_ml_dir'])){
 220         //rrs
 221         $form = '<form name="move_form" action="index.php?module=Administration&view=module&action=UpgradeWizard" method="post"  ><input type=hidden name="run" value="upload" /><input type=hidden name="load_module_from_dir" id="load_module_from_dir" value="'.$GLOBALS['sugar_config']['common_ml_dir'].'" /><input type=hidden name="upgrade_zip_escaped" value="" />';
 222         $form .= '<br>'.$mod_strings['LBL_MODULE_UPLOAD_DISABLE_HELP_TEXT'].'</br>';
 223         $form .='<table width="100%" class="edit view"><tr><th align="left">'.$mod_strings['LBL_ML_NAME'].'</th><th align="left">'.$mod_strings['LBL_ML_ACTION'].'</th></tr>';
 224         if ($handle = opendir($GLOBALS['sugar_config']['common_ml_dir'])) {
 225                 while (false !== ($filename = readdir($handle))) {
 226                 if($filename == '.' || $filename == '..' || !preg_match("#.*\.zip\$#", $filename)) {
 227                 continue;
 228             }
 229                 $form .= '<tr><td>'.$filename.'</td><td><input type=button class="button" value="'.$mod_strings['LBL_UW_BTN_UPLOAD'].'" onClick="document.move_form.upgrade_zip_escaped.value = escape( \''.$filename.'\');document.move_form.submit();" /></td></tr>';
 230             }
 231         }
 232         $form .= '</table></form>';
 233 //rrs
 234
 235 }else{
 236     $form =<<<eoq
 237 <form name="the_form" enctype="multipart/form-data" action="{$form_action}" method="post"  >
 238 <table width="100%" border="0" cellspacing="0" cellpadding="0" class="edit view">
 239 <tr><td>
 240 <table width="450" border="0" cellspacing="0" cellpadding="0">
 241 <tr><td style="white-space:nowrap; padding-right: 10px !important;">
 242 {$uploaddLabel}
 243 <input type="file" name="upgrade_zip" size="40" />
 244 </td>
 245 <td>
 246 <input type=button class="button" value="{$mod_strings['LBL_UW_BTN_UPLOAD']}" onClick="document.the_form.upgrade_zip_escaped.value = escape( document.the_form.upgrade_zip.value );document.the_form.submit();" />
 247 <input type=hidden name="run" value="upload" />
 248 <input type=hidden name="upgrade_zip_escaped" value="" />
 249 </td>
 250 </tr>
 251 </table></td></tr></table>
 252 </form>
 253 eoq;
 254 }
 255
 256 $hidden_fields = "<input type=hidden name=\"run\" value=\"upload\" />";
 257 $hidden_fields .= "<input type=hidden name=\"mode\"/>";
 258
 259 $form2 = PackageManagerDisplay::buildPackageDisplay($form, $hidden_fields, $form_action, array('module'));
 260 $form3 =<<<eoq3
 261
 262
 263 eoq3;
 264
 265 echo $form2.$form3;
 266
 267 // scan for new files (that are not installed)
 268 /*print( "$descItemsQueued<br>\n");
 269 print( "<ul>\n" );
 270 $upgrade_contents = findAllFiles( "$base_upgrade_dir", array() );
 271 $upgrades_available = 0;
 272
 273 print( "<table>\n" );
 274 print( "<tr><th></th><th align=left>{$mod_strings['LBL_ML_NAME']}</th><th>{$mod_strings['LBL_ML_TYPE']}</th><th>{$mod_strings['LBL_ML_VERSION']}</th><th>{$mod_strings['LBL_ML_PUBLISHED']}</th><th>{$mod_strings['LBL_ML_UNINSTALLABLE']}</th><th>{$mod_strings['LBL_ML_DESCRIPTION']}</th></tr>\n" );
 275 foreach($upgrade_contents as $upgrade_content)
 276 {
 277         if(!preg_match("#.*\.zip\$#", $upgrade_content))
 278         {
 279                 continue;
 280         }
 281
 282         $upgrade_content = clean_path($upgrade_content);
 283         $the_base = basename($upgrade_content);
 284         $the_md5 = md5_file($upgrade_content);
 285         $md5_matches = $uh->findByMd5($the_md5);
 286
 287         if(0 == sizeof($md5_matches))
 288         {
 289                 $target_manifest = remove_file_extension( $upgrade_content ) . '-manifest.php';
 290                 require_once($target_manifest);
 291
 292                 $name = empty($manifest['name']) ? $upgrade_content : $manifest['name'];
 293                 $version = empty($manifest['version']) ? '' : $manifest['version'];
 294                 $published_date = empty($manifest['published_date']) ? '' : $manifest['published_date'];
 295                 $icon = '';
 296                 $description = empty($manifest['description']) ? 'None' : $manifest['description'];
 297                 $uninstallable = empty($manifest['is_uninstallable']) ? 'No' : 'Yes';
 298                 $type = getUITextForType( $manifest['type'] );
 299                 $manifest_type = $manifest['type'];
 300
 301                 if($view == 'default' && $manifest_type != 'patch')
 302                 {
 303                         continue;
 304                 }
 305
 306                 if($view == 'module'
 307                         && $manifest_type != 'module' && $manifest_type != 'theme' && $manifest_type != 'langpack')
 308                 {
 309                         continue;
 310                 }
 311
 312                 if(empty($manifest['icon']))
 313                 {
 314                         $icon = getImageForType( $manifest['type'] );
 315                 }
 316                 else
 317                 {
 318                         $path_parts = pathinfo( $manifest['icon'] );
 319                         $icon = "<!--not_in_theme!--><img src=\"" . remove_file_extension( $upgrade_content ) . "-icon." . $path_parts['extension'] . "\" alt =''>";
 320                 }
 321
 322                 $upgrades_available++;
 323                 print( "<tr><td>$icon</td><td>$name</td><td>$type</td><td>$version</td><td>$published_date</td><td>$uninstallable</td><td>$description</td>\n" );
 324
 325                 $upgrade_content = urlencode($upgrade_content);
 326
 327                 $form2 =<<<eoq
 328             <form action="{$form_action}_prepare" method="post">
 329             <td><input type=submit name="btn_mode" onclick="this.form.mode.value='Install';this.form.submit();" value="{$mod_strings['LBL_UW_BTN_INSTALL']}" /></td>
 330             <input type=hidden name="install_file" value="{$upgrade_content}" />
 331                         <input type=hidden name="mode"/>
 332             </form>
 333
 334             <form action="{$form_action}" method="post">
 335             <td><input type=submit name="run" value="{$mod_strings['LBL_UW_BTN_DELETE_PACKAGE']}" /></td>
 336             <input type=hidden name="install_file" value="{$upgrade_content}" />
 337             </form>
 338             </tr>
 339 eoq;
 340                 echo $form2;
 341     }
 342 }
 343 print( "</table>\n" );
 344
 345 if( $upgrades_available == 0 ){
 346     print($mod_strings['LBL_UW_NONE']);
 347 }
 348 print( "</ul>\n" );
 349
 350 ?>
 351 */
 352
 353 $GLOBALS['log']->info( "Upgrade Wizard view");
 354 ?>
 355 </td>
 356 </tr>
 357 </table></td></tr></table>