335 lines
13 KiB
PHP
335 lines
13 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
/**
|
||
|
|
* @file
|
||
|
|
* Helper functions and form handlers used for the authorize.php script.
|
||
|
|
*/
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Form constructor for the file transfer authorization form.
|
||
|
|
*
|
||
|
|
* Allows the user to choose a FileTransfer type and supply credentials.
|
||
|
|
*
|
||
|
|
* @see authorize_filetransfer_form_validate()
|
||
|
|
* @see authorize_filetransfer_form_submit()
|
||
|
|
* @ingroup forms
|
||
|
|
*/
|
||
|
|
function authorize_filetransfer_form($form, &$form_state) {
|
||
|
|
global $base_url, $is_https;
|
||
|
|
$form = array();
|
||
|
|
|
||
|
|
// If possible, we want to post this form securely via HTTPS.
|
||
|
|
$form['#https'] = TRUE;
|
||
|
|
|
||
|
|
// CSS we depend on lives in modules/system/maintenance.css, which is loaded
|
||
|
|
// via the default maintenance theme.
|
||
|
|
$form['#attached']['js'][] = $base_url . '/misc/authorize.js';
|
||
|
|
|
||
|
|
// Get all the available ways to transfer files.
|
||
|
|
if (empty($_SESSION['authorize_filetransfer_info'])) {
|
||
|
|
drupal_set_message(t('Unable to continue, no available methods of file transfer'), 'error');
|
||
|
|
return array();
|
||
|
|
}
|
||
|
|
$available_backends = $_SESSION['authorize_filetransfer_info'];
|
||
|
|
|
||
|
|
if (!$is_https) {
|
||
|
|
$form['information']['https_warning'] = array(
|
||
|
|
'#prefix' => '<div class="messages error">',
|
||
|
|
'#markup' => t('WARNING: You are not using an encrypted connection, so your password will be sent in plain text. <a href="@https-link">Learn more</a>.', array('@https-link' => 'http://drupal.org/https-information')),
|
||
|
|
'#suffix' => '</div>',
|
||
|
|
);
|
||
|
|
}
|
||
|
|
|
||
|
|
// Decide on a default backend.
|
||
|
|
if (isset($form_state['values']['connection_settings']['authorize_filetransfer_default'])) {
|
||
|
|
$authorize_filetransfer_default = $form_state['values']['connection_settings']['authorize_filetransfer_default'];
|
||
|
|
}
|
||
|
|
elseif ($authorize_filetransfer_default = variable_get('authorize_filetransfer_default', NULL));
|
||
|
|
else {
|
||
|
|
$authorize_filetransfer_default = key($available_backends);
|
||
|
|
}
|
||
|
|
|
||
|
|
$form['information']['main_header'] = array(
|
||
|
|
'#prefix' => '<h3>',
|
||
|
|
'#markup' => t('To continue, provide your server connection details'),
|
||
|
|
'#suffix' => '</h3>',
|
||
|
|
);
|
||
|
|
|
||
|
|
$form['connection_settings']['#tree'] = TRUE;
|
||
|
|
$form['connection_settings']['authorize_filetransfer_default'] = array(
|
||
|
|
'#type' => 'select',
|
||
|
|
'#title' => t('Connection method'),
|
||
|
|
'#default_value' => $authorize_filetransfer_default,
|
||
|
|
'#weight' => -10,
|
||
|
|
);
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Here we create two submit buttons. For a JS enabled client, they will
|
||
|
|
* only ever see submit_process. However, if a client doesn't have JS
|
||
|
|
* enabled, they will see submit_connection on the first form (when picking
|
||
|
|
* what filetransfer type to use, and submit_process on the second one (which
|
||
|
|
* leads to the actual operation).
|
||
|
|
*/
|
||
|
|
$form['submit_connection'] = array(
|
||
|
|
'#prefix' => "<br style='clear:both'/>",
|
||
|
|
'#name' => 'enter_connection_settings',
|
||
|
|
'#type' => 'submit',
|
||
|
|
'#value' => t('Enter connection settings'),
|
||
|
|
'#weight' => 100,
|
||
|
|
);
|
||
|
|
|
||
|
|
$form['submit_process'] = array(
|
||
|
|
'#name' => 'process_updates',
|
||
|
|
'#type' => 'submit',
|
||
|
|
'#value' => t('Continue'),
|
||
|
|
'#weight' => 100,
|
||
|
|
'#attributes' => array('style' => 'display:none'),
|
||
|
|
);
|
||
|
|
|
||
|
|
// Build a container for each connection type.
|
||
|
|
foreach ($available_backends as $name => $backend) {
|
||
|
|
$form['connection_settings']['authorize_filetransfer_default']['#options'][$name] = $backend['title'];
|
||
|
|
$form['connection_settings'][$name] = array(
|
||
|
|
'#type' => 'container',
|
||
|
|
'#attributes' => array('class' => array("filetransfer-$name", 'filetransfer')),
|
||
|
|
);
|
||
|
|
// We can't use #prefix on the container itself since then the header won't
|
||
|
|
// be hidden and shown when the containers are being manipulated via JS.
|
||
|
|
$form['connection_settings'][$name]['header'] = array(
|
||
|
|
'#markup' => '<h4>' . t('@backend connection settings', array('@backend' => $backend['title'])) . '</h4>',
|
||
|
|
);
|
||
|
|
|
||
|
|
$form['connection_settings'][$name] += _authorize_filetransfer_connection_settings($name);
|
||
|
|
|
||
|
|
// Start non-JS code.
|
||
|
|
if (isset($form_state['values']['connection_settings']['authorize_filetransfer_default']) && $form_state['values']['connection_settings']['authorize_filetransfer_default'] == $name) {
|
||
|
|
|
||
|
|
// If the user switches from JS to non-JS, Drupal (and Batch API) will
|
||
|
|
// barf. This is a known bug: http://drupal.org/node/229825.
|
||
|
|
setcookie('has_js', '', time() - 3600, '/');
|
||
|
|
unset($_COOKIE['has_js']);
|
||
|
|
|
||
|
|
// Change the submit button to the submit_process one.
|
||
|
|
$form['submit_process']['#attributes'] = array();
|
||
|
|
unset($form['submit_connection']);
|
||
|
|
|
||
|
|
// Activate the proper filetransfer settings form.
|
||
|
|
$form['connection_settings'][$name]['#attributes']['style'] = 'display:block';
|
||
|
|
// Disable the select box.
|
||
|
|
$form['connection_settings']['authorize_filetransfer_default']['#disabled'] = TRUE;
|
||
|
|
|
||
|
|
// Create a button for changing the type of connection.
|
||
|
|
$form['connection_settings']['change_connection_type'] = array(
|
||
|
|
'#name' => 'change_connection_type',
|
||
|
|
'#type' => 'submit',
|
||
|
|
'#value' => t('Change connection type'),
|
||
|
|
'#weight' => -5,
|
||
|
|
'#attributes' => array('class' => array('filetransfer-change-connection-type')),
|
||
|
|
);
|
||
|
|
}
|
||
|
|
// End non-JS code.
|
||
|
|
}
|
||
|
|
return $form;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Generates the Form API array for a given connection backend's settings.
|
||
|
|
*
|
||
|
|
* @param $backend
|
||
|
|
* The name of the backend (e.g. 'ftp', 'ssh', etc).
|
||
|
|
*
|
||
|
|
* @return
|
||
|
|
* Form API array of connection settings for the given backend.
|
||
|
|
*
|
||
|
|
* @see hook_filetransfer_backends()
|
||
|
|
*/
|
||
|
|
function _authorize_filetransfer_connection_settings($backend) {
|
||
|
|
$defaults = variable_get('authorize_filetransfer_connection_settings_' . $backend, array());
|
||
|
|
$form = array();
|
||
|
|
|
||
|
|
// Create an instance of the file transfer class to get its settings form.
|
||
|
|
$filetransfer = authorize_get_filetransfer($backend);
|
||
|
|
if ($filetransfer) {
|
||
|
|
$form = $filetransfer->getSettingsForm();
|
||
|
|
}
|
||
|
|
// Fill in the defaults based on the saved settings, if any.
|
||
|
|
_authorize_filetransfer_connection_settings_set_defaults($form, NULL, $defaults);
|
||
|
|
return $form;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Sets the default settings on a file transfer connection form recursively.
|
||
|
|
*
|
||
|
|
* The default settings for the file transfer connection forms are saved in
|
||
|
|
* the database. The settings are stored as a nested array in the case of a
|
||
|
|
* settings form that has fieldsets or otherwise uses a nested structure.
|
||
|
|
* Therefore, to properly add defaults, we need to walk through all the
|
||
|
|
* children form elements and process those defaults recursively.
|
||
|
|
*
|
||
|
|
* @param $element
|
||
|
|
* Reference to the Form API form element we're operating on.
|
||
|
|
* @param $key
|
||
|
|
* The key for our current form element, if any.
|
||
|
|
* @param array $defaults
|
||
|
|
* The default settings for the file transfer backend we're operating on.
|
||
|
|
*/
|
||
|
|
function _authorize_filetransfer_connection_settings_set_defaults(&$element, $key, array $defaults) {
|
||
|
|
// If we're operating on a form element which isn't a fieldset, and we have
|
||
|
|
// a default setting saved, stash it in #default_value.
|
||
|
|
if (!empty($key) && isset($defaults[$key]) && isset($element['#type']) && $element['#type'] != 'fieldset') {
|
||
|
|
$element['#default_value'] = $defaults[$key];
|
||
|
|
}
|
||
|
|
// Now, we walk through all the child elements, and recursively invoke
|
||
|
|
// ourself on each one. Since the $defaults settings array can be nested
|
||
|
|
// (because of #tree, any values inside fieldsets will be nested), if
|
||
|
|
// there's a subarray of settings for the form key we're currently
|
||
|
|
// processing, pass in that subarray to the recursive call. Otherwise, just
|
||
|
|
// pass on the whole $defaults array.
|
||
|
|
foreach (element_children($element) as $child_key) {
|
||
|
|
_authorize_filetransfer_connection_settings_set_defaults($element[$child_key], $child_key, ((isset($defaults[$key]) && is_array($defaults[$key])) ? $defaults[$key] : $defaults));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Form validation handler for authorize_filetransfer_form().
|
||
|
|
*
|
||
|
|
* @see authorize_filetransfer_form()
|
||
|
|
* @see authorize_filetransfer_submit()
|
||
|
|
*/
|
||
|
|
function authorize_filetransfer_form_validate($form, &$form_state) {
|
||
|
|
// Only validate the form if we have collected all of the user input and are
|
||
|
|
// ready to proceed with updating or installing.
|
||
|
|
if ($form_state['triggering_element']['#name'] != 'process_updates') {
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (isset($form_state['values']['connection_settings'])) {
|
||
|
|
$backend = $form_state['values']['connection_settings']['authorize_filetransfer_default'];
|
||
|
|
$filetransfer = authorize_get_filetransfer($backend, $form_state['values']['connection_settings'][$backend]);
|
||
|
|
try {
|
||
|
|
if (!$filetransfer) {
|
||
|
|
throw new Exception(t('Error, this type of connection protocol (%backend) does not exist.', array('%backend' => $backend)));
|
||
|
|
}
|
||
|
|
$filetransfer->connect();
|
||
|
|
}
|
||
|
|
catch (Exception $e) {
|
||
|
|
// The format of this error message is similar to that used on the
|
||
|
|
// database connection form in the installer.
|
||
|
|
form_set_error('connection_settings', t('Failed to connect to the server. The server reports the following message: !message For more help installing or updating code on your server, see the <a href="@handbook_url">handbook</a>.', array(
|
||
|
|
'!message' => '<p class="error">' . $e->getMessage() . '</p>',
|
||
|
|
'@handbook_url' => 'http://drupal.org/documentation/install/modules-themes',
|
||
|
|
)));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Form submission handler for authorize_filetransfer_form().
|
||
|
|
*
|
||
|
|
* @see authorize_filetransfer_form()
|
||
|
|
* @see authorize_filetransfer_validate()
|
||
|
|
*/
|
||
|
|
function authorize_filetransfer_form_submit($form, &$form_state) {
|
||
|
|
global $base_url;
|
||
|
|
switch ($form_state['triggering_element']['#name']) {
|
||
|
|
case 'process_updates':
|
||
|
|
|
||
|
|
// Save the connection settings to the DB.
|
||
|
|
$filetransfer_backend = $form_state['values']['connection_settings']['authorize_filetransfer_default'];
|
||
|
|
|
||
|
|
// If the database is available then try to save our settings. We have
|
||
|
|
// to make sure it is available since this code could potentially (will
|
||
|
|
// likely) be called during the installation process, before the
|
||
|
|
// database is set up.
|
||
|
|
try {
|
||
|
|
$connection_settings = array();
|
||
|
|
foreach ($form_state['values']['connection_settings'][$filetransfer_backend] as $key => $value) {
|
||
|
|
// We do *not* want to store passwords in the database, unless the
|
||
|
|
// backend explicitly says so via the magic #filetransfer_save form
|
||
|
|
// property. Otherwise, we store everything that's not explicitly
|
||
|
|
// marked with #filetransfer_save set to FALSE.
|
||
|
|
if (!isset($form['connection_settings'][$filetransfer_backend][$key]['#filetransfer_save'])) {
|
||
|
|
if ($form['connection_settings'][$filetransfer_backend][$key]['#type'] != 'password') {
|
||
|
|
$connection_settings[$key] = $value;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
// The attribute is defined, so only save if set to TRUE.
|
||
|
|
elseif ($form['connection_settings'][$filetransfer_backend][$key]['#filetransfer_save']) {
|
||
|
|
$connection_settings[$key] = $value;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
// Set this one as the default authorize method.
|
||
|
|
variable_set('authorize_filetransfer_default', $filetransfer_backend);
|
||
|
|
// Save the connection settings minus the password.
|
||
|
|
variable_set('authorize_filetransfer_connection_settings_' . $filetransfer_backend, $connection_settings);
|
||
|
|
|
||
|
|
$filetransfer = authorize_get_filetransfer($filetransfer_backend, $form_state['values']['connection_settings'][$filetransfer_backend]);
|
||
|
|
|
||
|
|
// Now run the operation.
|
||
|
|
authorize_run_operation($filetransfer);
|
||
|
|
}
|
||
|
|
catch (Exception $e) {
|
||
|
|
// If there is no database available, we don't care and just skip
|
||
|
|
// this part entirely.
|
||
|
|
}
|
||
|
|
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'enter_connection_settings':
|
||
|
|
$form_state['rebuild'] = TRUE;
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'change_connection_type':
|
||
|
|
$form_state['rebuild'] = TRUE;
|
||
|
|
unset($form_state['values']['connection_settings']['authorize_filetransfer_default']);
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Runs the operation specified in $_SESSION['authorize_operation'].
|
||
|
|
*
|
||
|
|
* @param $filetransfer
|
||
|
|
* The FileTransfer object to use for running the operation.
|
||
|
|
*/
|
||
|
|
function authorize_run_operation($filetransfer) {
|
||
|
|
$operation = $_SESSION['authorize_operation'];
|
||
|
|
unset($_SESSION['authorize_operation']);
|
||
|
|
|
||
|
|
if (!empty($operation['page_title'])) {
|
||
|
|
drupal_set_title($operation['page_title']);
|
||
|
|
}
|
||
|
|
|
||
|
|
require_once DRUPAL_ROOT . '/' . $operation['file'];
|
||
|
|
call_user_func_array($operation['callback'], array_merge(array($filetransfer), $operation['arguments']));
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Gets a FileTransfer class for a specific transfer method and settings.
|
||
|
|
*
|
||
|
|
* @param $backend
|
||
|
|
* The FileTransfer backend to get the class for.
|
||
|
|
* @param $settings
|
||
|
|
* Array of settings for the FileTransfer.
|
||
|
|
*
|
||
|
|
* @return
|
||
|
|
* An instantiated FileTransfer object for the requested method and settings,
|
||
|
|
* or FALSE if there was an error finding or instantiating it.
|
||
|
|
*/
|
||
|
|
function authorize_get_filetransfer($backend, $settings = array()) {
|
||
|
|
$filetransfer = FALSE;
|
||
|
|
if (!empty($_SESSION['authorize_filetransfer_info'][$backend])) {
|
||
|
|
$backend_info = $_SESSION['authorize_filetransfer_info'][$backend];
|
||
|
|
if (!empty($backend_info['file'])) {
|
||
|
|
$file = $backend_info['file path'] . '/' . $backend_info['file'];
|
||
|
|
require_once $file;
|
||
|
|
}
|
||
|
|
if (class_exists($backend_info['class'])) {
|
||
|
|
// PHP 5.2 doesn't support $class::factory() syntax, so we have to
|
||
|
|
// use call_user_func_array() until we can require PHP 5.3.
|
||
|
|
$filetransfer = call_user_func_array(array($backend_info['class'], 'factory'), array(DRUPAL_ROOT, $settings));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return $filetransfer;
|
||
|
|
}
|