input->clean_array_gpc('r', array('pluginid' => TYPE_UINT));
// ############################# LOG ACTION ###############################
log_admin_action(iif($vbulletin->GPC['pluginid'] != 0, 'plugin id = ' . $vbulletin->GPC['pluginid']));
// #############################################################################
// ########################### START MAIN SCRIPT ###############################
// #############################################################################
if ($_REQUEST['do'] != 'download' AND $_REQUEST['do'] != 'productexport')
{
print_cp_header($vbphrase['plugin_products_system']);
}
if (empty($_REQUEST['do']))
{
$_REQUEST['do'] = 'modify';
}
if (in_array($_REQUEST['do'], array('modify', 'files', 'edit', 'add', 'product', 'productadd', 'productedit')))
{
if (!$vbulletin->options['enablehooks'] OR defined('DISABLE_HOOKS'))
{
print_table_start();
if (!$vbulletin->options['enablehooks'])
{
print_description_row($vbphrase['plugins_disabled_options']);
}
else
{
print_description_row($vbphrase['plugins_disable_config']);
}
print_table_footer(2, '', '', false);
}
}
// ###################### Start import plugin XML #######################
if ($_REQUEST['do'] == 'files')
{
$products = fetch_product_list();
// download form
print_form_header('plugin', 'download', 0, 1, 'downloadform" target="download');
print_table_header($vbphrase['download']);
print_input_row($vbphrase['filename'], 'filename', 'vbulletin-plugins.xml');
$plugins = $db->query_read("SELECT * FROM " . TABLE_PREFIX . "plugin ORDER BY hookname, title");
$prevhook = '';
while ($plugin = $db->fetch_array($plugins))
{
if ($plugin['hookname'] != $prevhook)
{
$prevhook = $plugin['hookname'];
print_description_row("$vbphrase[hook_location] : " . $plugin['hookname'], 0, 2, 'tfoot');
}
$title = htmlspecialchars_uni($plugin['title']);
$title = $plugin['active'] ? $title : "$title";
$product = $products[($plugin['product'] ? $plugin['product'] : 'vbulletin')];
if (!$product)
{
$product = "$plugin[product]";
}
print_label_row("
", $product);
}
print_submit_row($vbphrase['download']);
?>
input->clean_array_gpc('p', array(
'serverfile' => TYPE_STR,
));
$vbulletin->input->clean_array_gpc('f', array(
'pluginfile' => TYPE_FILE
));
// got an uploaded file?
if (file_exists($vbulletin->GPC['pluginfile']['tmp_name']))
{
$xml = file_read($vbulletin->GPC['pluginfile']['tmp_name']);
}
// no uploaded file - got a local file?
else if (file_exists($vbulletin->GPC['serverfile']))
{
$xml = file_read($vbulletin->GPC['serverfile']);
}
// no uploaded file and no local file - ERROR
else
{
print_stop_message('no_file_uploaded_and_no_local_file_found');
}
print_dots_start('' . $vbphrase['importing_plugins'] . ", $vbphrase[please_wait]", ':', 'dspan');
require_once(DIR . '/includes/class_xml.php');
$xmlobj = new vB_XML_Parser($xml);
if ($xmlobj->error_no == 1)
{
print_dots_stop();
print_stop_message('no_xml_and_no_path');
}
if(!$arr = $xmlobj->parse())
{
print_dots_stop();
print_stop_message('xml_error_x_at_line_y', $xmlobj->error_string(), $xmlobj->error_line());
}
if (!$arr['plugin'])
{
print_dots_stop();
if (!empty($arr['productid']))
{
print_stop_message('this_file_appears_to_be_a_product');
}
else
{
print_stop_message('invalid_file_specified');
}
}
if (!is_array($arr['plugin'][0]))
{
$arr['plugin'] = array($arr['plugin']);
}
$maxid = $db->query_first("SELECT MAX(pluginid) AS max FROM " . TABLE_PREFIX . "plugin");
foreach ($arr['plugin'] AS $plugin)
{
unset($plugin['devkey']); // make sure we don't try to set this as it's no longer used
$db->query_write(fetch_query_sql($plugin, 'plugin'));
}
// rebuild the $vboptions array
vBulletinHook::build_datastore($db);
// stop the 'dots' counter feedback
print_dots_stop();
print_cp_redirect("plugin.php?" . $vbulletin->session->vars['sessionurl'], 0);
}
// #############################################################################
if ($_POST['do'] == 'download')
{
$vbulletin->input->clean_array_gpc('p', array(
'filename' => TYPE_STR,
'download' => TYPE_ARRAY_UINT,
));
if (empty($vbulletin->GPC['download']) OR empty($vbulletin->GPC['filename']))
{
print_stop_message('please_complete_required_fields');
}
require_once(DIR . '/includes/class_xml.php');
$xml = new vB_XML_Builder($vbulletin);
$xml->add_group('plugins');
$plugins = $db->query_read("SELECT * FROM " . TABLE_PREFIX . "plugin WHERE pluginid IN (" . implode(', ', $vbulletin->GPC['download']) . ")");
while ($plugin = $db->fetch_array($plugins))
{
$params = array('active' => $plugin['active'], 'executionorder' => $plugin['executionorder']);
if ($plugin['product'])
{
$params['product'] = $plugin['product'];
}
$xml->add_group('plugin', $params);
$xml->add_tag('title', $plugin['title']);
$xml->add_tag('hookname', $plugin['hookname']);
$xml->add_tag('phpcode', $plugin['phpcode']);
$xml->close_group();
}
$xml->close_group();
$doc = "\r\n\r\n";
$doc .= $xml->output();
$xml = null;
require_once(DIR . '/includes/functions_file.php');
file_download($doc, $vbulletin->GPC['filename'], 'text/xml');
}
// #############################################################################
if ($_POST['do'] == 'updateactive')
{
$vbulletin->input->clean_array_gpc('p', array(
'active' => TYPE_ARRAY_UINT,
));
$cond = '';
$plugins = $db->query_read("SELECT * FROM " . TABLE_PREFIX . "plugin");
while ($plugin = $db->fetch_array($plugins))
{
$cond .= "WHEN $plugin[pluginid] THEN " . (isset($vbulletin->GPC['active']["$plugin[pluginid]"]) ? 1 : 0) . "\n";
}
if (!empty($cond))
{
$db->query_write("
UPDATE " . TABLE_PREFIX . "plugin SET active = CASE pluginid
$cond
ELSE active END
");
}
// update the datastore
vBulletinHook::build_datastore($db);
$_REQUEST['do'] = 'modify';
}
// #############################################################################
if ($_POST['do'] == 'kill')
{
$db->query_write("DELETE FROM " . TABLE_PREFIX . "plugin WHERE pluginid = " . $vbulletin->GPC['pluginid']);
vBulletinHook::build_datastore($db);
define('CP_REDIRECT', 'plugin.php');
print_stop_message('deleted_plugin_successfully');
}
// #############################################################################
if ($_REQUEST['do'] == 'delete')
{
$vbulletin->input->clean_array_gpc('r', array(
'pluginid' => TYPE_UINT,
'name' => TYPE_STR
));
print_delete_confirmation('plugin', $vbulletin->GPC['pluginid'], 'plugin', 'kill');
}
// #############################################################################
if ($_POST['do'] == 'update')
{
$vbulletin->input->clean_array_gpc('p', array(
'hookname' => TYPE_STR,
'title' => TYPE_STR,
'phpcode' => TYPE_STR,
'active' => TYPE_BOOL,
'product' => TYPE_STR,
'executionorder' => TYPE_UINT,
'return' => TYPE_STR
));
if (!$vbulletin->GPC['hookname'] OR !$vbulletin->GPC['title'] OR !$vbulletin->GPC['phpcode'])
{
print_stop_message('please_complete_required_fields');
}
if ($vbulletin->GPC['pluginid'])
{
$db->query_write("
UPDATE " . TABLE_PREFIX . "plugin
SET
hookname = '" . $db->escape_string($vbulletin->GPC['hookname']) . "',
title = '" . $db->escape_string($vbulletin->GPC['title']) . "',
phpcode = '" . $db->escape_string($vbulletin->GPC['phpcode']) . "',
product = '" . $db->escape_string($vbulletin->GPC['product']) . "',
active = " . intval($vbulletin->GPC['active']) . ",
executionorder = " . intval($vbulletin->GPC['executionorder']) . "
WHERE pluginid = " . $vbulletin->GPC['pluginid'] . "
");
}
else
{
/*insert query*/
$db->query_write("
INSERT INTO " . TABLE_PREFIX . "plugin
(hookname, title, phpcode, product, active, executionorder)
VALUES
('" . $db->escape_string($vbulletin->GPC['hookname']) . "',
'" . $db->escape_string($vbulletin->GPC['title']) . "',
'" . $db->escape_string($vbulletin->GPC['phpcode']) . "',
'" . $db->escape_string($vbulletin->GPC['product']) . "',
" . intval($vbulletin->GPC['active']) . ",
" . intval($vbulletin->GPC['executionorder']) . ")
");
$vbulletin->GPC['pluginid'] = $db->insert_id();
}
// update the datastore
vBulletinHook::build_datastore($db);
// stuff to handle the redirect
if ($vbulletin->GPC['return'])
{
define('CP_REDIRECT', "plugin.php?do=edit&pluginid=" . $vbulletin->GPC['pluginid']);
}
else
{
define('CP_REDIRECT', 'plugin.php');
}
print_stop_message('saved_plugin_successfully');
}
// #############################################################################
if ($_REQUEST['do'] == 'edit' OR $_REQUEST['do'] == 'add')
{
$products = fetch_product_list();
$hooklocations = array();
require_once(DIR . '/includes/class_xml.php');
$handle = opendir(DIR . '/includes/xml/');
while (($file = readdir($handle)) !== false)
{
if (!preg_match('#^hooks_(.*).xml$#i', $file, $matches))
{
continue;
}
$product = $matches[1];
$phrased_product = $products[($product ? $product : 'vbulletin')];
if (!$phrased_product)
{
$phrased_product = $product;
}
$xmlobj = new vB_XML_Parser(false, DIR . "/includes/xml/$file");
$xml = $xmlobj->parse();
if (!is_array($xml['hooktype'][0]))
{
// ugly kludge but it works...
$xml['hooktype'] = array($xml['hooktype']);
}
foreach ($xml['hooktype'] AS $key => $hooks)
{
if (!is_numeric($key))
{
continue;
}
$phrased_type = isset($vbphrase["hooktype_$hooks[type]"]) ? $vbphrase["hooktype_$hooks[type]"] : $hooks['type'];
$hooktype = $phrased_product . ' : ' . $phrased_type;
if (!is_array($hooks['hook']))
{
$hooks['hook'] = array($hooks['hook']);
}
foreach ($hooks['hook'] AS $hook)
{
$hookid = trim(is_string($hook) ? $hook : $hook['value']);
if ($hookid !== '')
{
$hooklocations["$hookid"] = $hookid . ($product != 'vbulletin' ? " ($phrased_product)" : '');
}
}
}
}
uksort($hooklocations, 'strnatcasecmp');
$plugin = $db->query_first("
SELECT plugin.*,
IF(product.productid IS NULL, 0, 1) AS foundproduct,
IF(plugin.product = 'vbulletin', 1, product.active) AS productactive
FROM " . TABLE_PREFIX . "plugin AS plugin
LEFT JOIN " . TABLE_PREFIX . "product AS product ON(product.productid = plugin.product)
WHERE pluginid = " . $vbulletin->GPC['pluginid']
);
if (!$plugin)
{
$plugin = array('executionorder' => 5);
}
print_form_header('plugin', 'update');
construct_hidden_code('pluginid', $plugin['pluginid']);
if ($_REQUEST['do'] == 'add')
{
$heading = $vbphrase['add_new_plugin'];
}
else
{
$heading = construct_phrase($vbphrase['edit_plugin_x'], htmlspecialchars_uni($plugin['title']));
}
print_table_header($heading);
print_select_row($vbphrase['product'], 'product', fetch_product_list(), $plugin['product'] ? $plugin['product'] : 'vbulletin');
print_select_row("$vbphrase[hook_location] $vbphrase[hook_location_desc]",
'hookname',
array_merge(array('' => ''), $hooklocations),
$plugin['hookname']
);
print_input_row("$vbphrase[title] $vbphrase[plugin_title_desc]", 'title', $plugin['title'], 1, 60);
print_input_row("$vbphrase[plugin_execution_order] $vbphrase[plugin_order_desc]", 'executionorder', $plugin['executionorder'], 1, 10);
print_textarea_row(
"$vbphrase[plugin_php_code] $vbphrase[plugin_code_desc]",
'phpcode',
htmlspecialchars($plugin['phpcode']),
10, '45" style="width:100%',
false,
true,
'ltr',
'code'
);
if ($plugin['foundproduct'] AND !$plugin['productactive'])
{
print_description_row(construct_phrase($vbphrase['plugin_inactive_due_to_product_disabled'], $products["$plugin[product]"]));
}
print_yes_no_row("$vbphrase[plugin_is_active] $vbphrase[plugin_active_desc]", 'active', $plugin['active']);
print_submit_row($vbphrase['save'], '_default_', 2, '', "");
if ($plugin['phpcode'] != '')
{
// highlight the string
$code = $plugin['phpcode'];
// do we have an opening ";
$addedtags = true;
}
else
{
$addedtags = false;
}
// highlight the string
$oldlevel = error_reporting(0);
$code = highlight_string($code, true);
error_reporting($oldlevel);
// if we added tags above, now get rid of them from the resulting string
if ($addedtags)
{
$search = array(
'#(<|<)\?php( | )BEGIN__VBULLETIN__CODE__SNIPPET( | )#siU',
'#(<(span|font).*>)(<|<)\?((<\\2.*>))php( | )BEGIN__VBULLETIN__CODE__SNIPPET( | )#siU',
'#END__VBULLETIN__CODE__SNIPPET( | )\?(>|>)#siU'
);
$replace = array(
'',
'\\5',
''
);
$code = preg_replace($search, $replace, $code);
}
print_form_header('', '');
print_table_header($vbphrase['plugin_php_code']);
print_description_row("$code
");
print_table_footer();
}
}
// #############################################################################
if ($_REQUEST['do'] == 'modify')
{
$vbulletin->input->clean_array_gpc('r', array(
'sort' => TYPE_NOHTML
));
$products = fetch_product_list(true);
print_form_header('plugin', 'updateactive');
print_table_header($vbphrase['plugin_system'], 4);
switch ($vbulletin->GPC['sort'])
{
case 'hook':
{
$plugins = $db->query_read("
SELECT *
FROM " . TABLE_PREFIX . "plugin
ORDER BY hookname, title
");
print_cells_row(
array(
$vbphrase['title'],
"session->vars['sessionurl'] . "do=modify&sort=product\">$vbphrase[product]",
$vbphrase['active'],
$vbphrase['controls']
),
1
);
$group_by = 'hook';
}
break;
case 'product':
default:
{
$plugins = $db->query_read("
SELECT plugin.*, IF(plugin.product = '', 'vbulletin', product.title) AS producttitle
FROM " . TABLE_PREFIX . "plugin AS plugin
LEFT JOIN " . TABLE_PREFIX . "product AS product ON (plugin.product = product.productid)
ORDER BY producttitle, plugin.title
");
print_cells_row(
array(
$vbphrase['title'],
"session->vars['sessionurl'] . "do=modify&sort=hook\">$vbphrase[hook_location]",
$vbphrase['active'],
$vbphrase['controls']
),
1
);
$group_by = 'product';
}
}
$prevgroup = '';
while ($plugin = $db->fetch_array($plugins))
{
$product = $products[($plugin['product'] ? $plugin['product'] : 'vbulletin')];
if (!$product)
{
$product = array('title' => "$plugin[product]", 'active' => 1);
}
else
{
$product['title'] = htmlspecialchars_uni($product['title']);
}
if ($group_by == 'hook')
{
if ($plugin['hookname'] != $prevgroup)
{
$prevgroup = $plugin['hookname'];
print_description_row("$vbphrase[hook_location] : " . $plugin['hookname'], 0, 4, 'tfoot');
}
}
else if ($group_by == 'product')
{
if ($product['title'] != $prevgroup)
{
$prevgroup = $product['title'];
print_description_row("$vbphrase[product] : " . $product['title'], 0, 4, 'tfoot');
}
}
if (!$product['active'])
{
$product['title'] = "$product[title]";
}
$title = htmlspecialchars_uni($plugin['title']);
$title = ($plugin['active'] AND $product['active']) ? $title : "$title";
print_cells_row(array(
"session->vars['sessionurl'] . "do=edit&pluginid=$plugin[pluginid]\">$title",
($group_by == 'hook' ? $product['title'] : $plugin['hookname']),
"",
construct_link_code($vbphrase['edit'], "plugin.php?" . $vbulletin->session->vars['sessionurl'] . "do=edit&pluginid=$plugin[pluginid]") .
construct_link_code($vbphrase['delete'], "plugin.php?" . $vbulletin->session->vars['sessionurl'] . "do=delete&pluginid=$plugin[pluginid]")
));
}
print_submit_row($vbphrase['save_active_status'], false, 4);
echo '' . construct_link_code($vbphrase['add_new_plugin'], "plugin.php?" . $vbulletin->session->vars['sessionurl'] . "do=add") . '
';
}
// #############################################################################
// #############################################################################
// #############################################################################
if ($_REQUEST['do'] == 'product')
{
?>
vBulletin', $vbulletin->options['templateversion'], '', ''), false, '', -2);
// used for