303 lines
12 KiB
PHP
303 lines
12 KiB
PHP
<?php
|
|
/**
|
|
* 2007-2018 PrestaShop.
|
|
*
|
|
* NOTICE OF LICENSE
|
|
*
|
|
* This source file is subject to the Open Software License (OSL 3.0)
|
|
* that is bundled with this package in the file LICENSE.txt.
|
|
* It is also available through the world-wide-web at this URL:
|
|
* https://opensource.org/licenses/OSL-3.0
|
|
* If you did not receive a copy of the license and are unable to
|
|
* obtain it through the world-wide-web, please send an email
|
|
* to license@prestashop.com so we can send you a copy immediately.
|
|
*
|
|
* DISCLAIMER
|
|
*
|
|
* Do not edit or add to this file if you wish to upgrade PrestaShop to newer
|
|
* versions in the future. If you wish to customize PrestaShop for your
|
|
* needs please refer to http://www.prestashop.com for more information.
|
|
*
|
|
* @author PrestaShop SA <contact@prestashop.com>
|
|
* @copyright 2007-2018 PrestaShop SA
|
|
* @license https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
|
|
* International Registered Trademark & Property of PrestaShop SA
|
|
*/
|
|
|
|
/**
|
|
* @property WebserviceKey $object
|
|
*/
|
|
class AdminWebserviceControllerCore extends AdminController
|
|
{
|
|
/** this will be filled later */
|
|
public $fields_form = array('webservice form');
|
|
protected $toolbar_scroll = false;
|
|
|
|
public function __construct()
|
|
{
|
|
$this->bootstrap = true;
|
|
$this->table = 'webservice_account';
|
|
$this->className = 'WebserviceKey';
|
|
$this->lang = false;
|
|
$this->edit = true;
|
|
$this->delete = true;
|
|
$this->id_lang_default = Configuration::get('PS_LANG_DEFAULT');
|
|
|
|
parent::__construct();
|
|
|
|
$this->bulk_actions = array(
|
|
'delete' => array(
|
|
'text' => $this->trans('Delete selected', array(), 'Admin.Actions'),
|
|
'confirm' => $this->trans('Delete selected items?', array(), 'Admin.Notifications.Warning'),
|
|
'icon' => 'icon-trash',
|
|
),
|
|
);
|
|
|
|
$this->fields_list = array(
|
|
'key' => array(
|
|
'title' => $this->trans('Key', array(), 'Admin.Advparameters.Feature'),
|
|
'class' => 'fixed-width-md',
|
|
),
|
|
'description' => array(
|
|
'title' => $this->trans('Key description', array(), 'Admin.Advparameters.Feature'),
|
|
'align' => 'left',
|
|
'orderby' => false,
|
|
),
|
|
'active' => array(
|
|
'title' => $this->trans('Enabled', array(), 'Admin.Global'),
|
|
'align' => 'center',
|
|
'active' => 'status',
|
|
'type' => 'bool',
|
|
'orderby' => false,
|
|
'class' => 'fixed-width-xs',
|
|
),
|
|
);
|
|
|
|
$this->fields_options = array(
|
|
'general' => array(
|
|
'title' => $this->trans('Configuration', array(), 'Admin.Global'),
|
|
'fields' => array(
|
|
'PS_WEBSERVICE' => array('title' => $this->trans('Enable PrestaShop\'s webservice', array(), 'Admin.Advparameters.Feature'),
|
|
'desc' => $this->trans('Before activating the webservice, you must be sure to: ', array(), 'Admin.Advparameters.Help') .
|
|
'<ol>
|
|
<li>' . $this->trans('Check that URL rewriting is available on this server.', array(), 'Admin.Advparameters.Help') . '</li>
|
|
<li>' . $this->trans('Check that the five methods GET, POST, PUT, DELETE and HEAD are supported by this server.', array(), 'Admin.Advparameters.Help') . '</li>
|
|
</ol>',
|
|
'cast' => 'intval',
|
|
'type' => 'bool', ),
|
|
),
|
|
'submit' => array('title' => $this->trans('Save', array(), 'Admin.Actions')),
|
|
),
|
|
);
|
|
|
|
if (!defined('_PS_HOST_MODE_')) {
|
|
$this->fields_options['general']['fields']['PS_WEBSERVICE_CGI_HOST'] = array(
|
|
'title' => $this->trans('Enable CGI mode for PHP', array(), 'Admin.Advparameters.Feature'),
|
|
'desc' => $this->trans('Before choosing "Yes", check that PHP is not configured as an Apache module on your server.', array(), 'Admin.Advparameters.Help'),
|
|
'cast' => 'intval',
|
|
'type' => 'bool',
|
|
);
|
|
}
|
|
}
|
|
|
|
public function initPageHeaderToolbar()
|
|
{
|
|
if (empty($this->display)) {
|
|
$this->page_header_toolbar_btn['new_webservice'] = array(
|
|
'href' => self::$currentIndex . '&addwebservice_account&token=' . $this->token,
|
|
'desc' => $this->trans('Add new webservice key', array(), 'Admin.Advparameters.Feature'),
|
|
'icon' => 'process-icon-new',
|
|
);
|
|
}
|
|
|
|
parent::initPageHeaderToolbar();
|
|
}
|
|
|
|
protected function processUpdateOptions()
|
|
{
|
|
parent::processUpdateOptions();
|
|
Tools::generateHtaccess();
|
|
}
|
|
|
|
public function renderForm()
|
|
{
|
|
$this->fields_form = array(
|
|
'legend' => array(
|
|
'title' => $this->trans('Webservice Accounts', array(), 'Admin.Advparameters.Feature'),
|
|
'icon' => 'icon-lock',
|
|
),
|
|
'input' => array(
|
|
array(
|
|
'type' => 'textbutton',
|
|
'label' => $this->trans('Key', array(), 'Admin.Advparameters.Feature'),
|
|
'name' => 'key',
|
|
'id' => 'code',
|
|
'required' => true,
|
|
'hint' => $this->trans('Webservice account key.', array(), 'Admin.Advparameters.Feature'),
|
|
'button' => array(
|
|
'label' => $this->trans('Generate!', array(), 'Admin.Advparameters.Feature'),
|
|
'attributes' => array(
|
|
'onclick' => 'gencode(32)',
|
|
),
|
|
),
|
|
),
|
|
array(
|
|
'type' => 'textarea',
|
|
'label' => $this->trans('Key description', array(), 'Admin.Advparameters.Feature'),
|
|
'name' => 'description',
|
|
'rows' => 3,
|
|
'cols' => 110,
|
|
'hint' => $this->trans('Quick description of the key: who it is for, what permissions it has, etc.', array(), 'Admin.Advparameters.Help'),
|
|
),
|
|
array(
|
|
'type' => 'switch',
|
|
'label' => $this->trans('Status', array(), 'Admin.Global'),
|
|
'name' => 'active',
|
|
'required' => false,
|
|
'is_bool' => true,
|
|
'values' => array(
|
|
array(
|
|
'id' => 'active_on',
|
|
'value' => 1,
|
|
'label' => $this->trans('Enabled', array(), 'Admin.Global'),
|
|
),
|
|
array(
|
|
'id' => 'active_off',
|
|
'value' => 0,
|
|
'label' => $this->trans('Disabled', array(), 'Admin.Global'),
|
|
),
|
|
),
|
|
),
|
|
array(
|
|
'type' => 'resources',
|
|
'label' => $this->trans('Permissions', array(), 'Admin.Advparameters.Feature'),
|
|
'name' => 'resources',
|
|
),
|
|
),
|
|
);
|
|
|
|
if (Shop::isFeatureActive()) {
|
|
$this->fields_form['input'][] = array(
|
|
'type' => 'shop',
|
|
'label' => $this->trans('Shop association', array(), 'Admin.Global'),
|
|
'name' => 'checkBoxShopAsso',
|
|
);
|
|
}
|
|
|
|
$this->fields_form['submit'] = array(
|
|
'title' => $this->trans('Save', array(), 'Admin.Actions'),
|
|
);
|
|
|
|
if (!($obj = $this->loadObject(true))) {
|
|
return;
|
|
}
|
|
|
|
$ressources = WebserviceRequest::getResources();
|
|
$permissions = WebserviceKey::getPermissionForAccount($obj->key);
|
|
|
|
$this->tpl_form_vars = array(
|
|
'ressources' => $ressources,
|
|
'permissions' => $permissions,
|
|
);
|
|
|
|
return parent::renderForm();
|
|
}
|
|
|
|
public function initContent()
|
|
{
|
|
if ($this->display != 'add' && $this->display != 'edit') {
|
|
$this->checkForWarning();
|
|
}
|
|
|
|
parent::initContent();
|
|
}
|
|
|
|
/**
|
|
* Function used to render the options for this controller.
|
|
*/
|
|
public function renderOptions()
|
|
{
|
|
if ($this->fields_options && is_array($this->fields_options)) {
|
|
$helper = new HelperOptions($this);
|
|
$this->setHelperDisplay($helper);
|
|
$helper->toolbar_scroll = true;
|
|
$helper->toolbar_btn = array('save' => array(
|
|
'href' => '#',
|
|
'desc' => $this->trans('Save', array(), 'Admin.Actions'),
|
|
));
|
|
$helper->id = $this->id;
|
|
$helper->tpl_vars = $this->tpl_option_vars;
|
|
$options = $helper->generateOptions($this->fields_options);
|
|
|
|
return $options;
|
|
}
|
|
}
|
|
|
|
public function initProcess()
|
|
{
|
|
parent::initProcess();
|
|
// This is a composite page, we don't want the "options" display mode
|
|
if ($this->display == 'options') {
|
|
$this->display = '';
|
|
}
|
|
}
|
|
|
|
public function postProcess()
|
|
{
|
|
if (Tools::getValue('key') && strlen(Tools::getValue('key')) < 32) {
|
|
$this->errors[] = $this->trans('Key length must be 32 character long.', array(), 'Admin.Advparameters.Notification');
|
|
}
|
|
if (WebserviceKey::keyExists(Tools::getValue('key')) && !Tools::getValue('id_webservice_account')) {
|
|
$this->errors[] = $this->trans('This key already exists.', array(), 'Admin.Advparameters.Notification');
|
|
}
|
|
|
|
return parent::postProcess();
|
|
}
|
|
|
|
protected function afterAdd($object)
|
|
{
|
|
Tools::generateHtaccess();
|
|
WebserviceKey::setPermissionForAccount($object->id, Tools::getValue('resources', array()));
|
|
}
|
|
|
|
protected function afterUpdate($object)
|
|
{
|
|
Tools::generateHtaccess();
|
|
WebserviceKey::setPermissionForAccount($object->id, Tools::getValue('resources', array()));
|
|
}
|
|
|
|
public function checkForWarning()
|
|
{
|
|
if (strpos($_SERVER['SERVER_SOFTWARE'], 'Apache') === false) {
|
|
$this->warnings[] = $this->trans('To avoid operating problems, please use an Apache server.', array(), 'Admin.Advparameters.Notification');
|
|
if (function_exists('apache_get_modules')) {
|
|
$apache_modules = apache_get_modules();
|
|
if (!in_array('mod_auth_basic', $apache_modules)) {
|
|
$this->warnings[] = $this->trans('Please activate the \'mod_auth_basic\' Apache module to allow authentication of PrestaShop\'s webservice.', array(), 'Admin.Advparameters.Notification');
|
|
}
|
|
if (!in_array('mod_rewrite', $apache_modules)) {
|
|
$this->warnings[] = $this->trans('Please activate the \'mod_rewrite\' Apache module to allow the PrestaShop webservice.', array(), 'Admin.Advparameters.Notification');
|
|
}
|
|
} else {
|
|
$this->warnings[] = $this->trans('We could not check to see if basic authentication and rewrite extensions have been activated. Please manually check if they\'ve been activated in order to use the PrestaShop webservice.', array(), 'Admin.Advparameters.Notification');
|
|
}
|
|
}
|
|
if (!extension_loaded('SimpleXML')) {
|
|
$this->warnings[] = $this->trans('Please activate the \'SimpleXML\' PHP extension to allow testing of PrestaShop\'s webservice.', array(), 'Admin.Advparameters.Notification');
|
|
}
|
|
if (!configuration::get('PS_SSL_ENABLED')) {
|
|
$this->warnings[] = $this->trans('It is preferable to use SSL (https:) for webservice calls, as it avoids the "man in the middle" type security issues.', array(), 'Admin.Advparameters.Notification');
|
|
}
|
|
|
|
foreach ($this->_list as $k => $item) {
|
|
if ($item['is_module'] && $item['class_name'] && $item['module_name'] &&
|
|
($instance = Module::getInstanceByName($item['module_name'])) &&
|
|
!$instance->useNormalPermissionBehaviour()) {
|
|
unset($this->_list[$k]);
|
|
}
|
|
}
|
|
|
|
$this->renderList();
|
|
}
|
|
}
|