evolution-cms / evolution

            $guid = mysqli_real_escape_string($conn, $moduleModule[4]);

            $shared = mysqli_real_escape_string($conn, $moduleModule[5]);

            $category = mysqli_real_escape_string($conn, $moduleModule[6]);

            if (!file_exists($filecontent))

                echo "<p>&nbsp;&nbsp;$name: <span class=\"notok\">" . $_lang['unable_install_module'] . " '$filecontent' " . $_lang['not_found'] . ".</span></p>";

            else {

                // Create the category if it does not already exist

                $category = getCreateDbCategory($category, $sqlParser);

                $module = end(preg_split("/(\/\/)?\s*\<\?php/", file_get_contents($filecontent), 2));

                // $module = removeDocblock($module, 'module'); // Modules have no fileBinding, keep docblock for info-tab

                $module = mysqli_real_escape_string($conn, $module);

                $rs = mysqli_query($sqlParser->conn, "SELECT * FROM $dbase.`" . $table_prefix . "site_modules` WHERE name='$name'");

                if (mysqli_num_rows($rs)) {

                    $row = mysqli_fetch_assoc($rs);

                    $props = mysqli_real_escape_string($conn, propUpdate($properties,$row['properties']));

                    if (!mysqli_query($sqlParser->conn, "UPDATE $dbase.`" . $table_prefix . "site_modules` SET modulecode='$module', description='$desc', properties='$props', enable_sharedparams='$shared' WHERE name='$name';")) {

                        echo "<p>" . mysqli_error($sqlParser->conn) . "</p>";

                        return;

                    }

                    echo "<p>&nbsp;&nbsp;$name: <span class=\"ok\">" . $_lang['upgraded'] . "</span></p>";

                } else {

                    $properties = mysqli_real_escape_string($conn, parseProperties($properties, true));

                    if (!mysqli_query($sqlParser->conn, "INSERT INTO $dbase.`" . $table_prefix . "site_modules` (name,description,modulecode,properties,guid,enable_sharedparams,category) VALUES('$name','$desc','$module','$properties','$guid','$shared', $category);")) {

                        echo "<p>" . mysqli_error($sqlParser->conn) . "</p>";

                        return;

                    }

                    echo "<p>&nbsp;&nbsp;$name: <span class=\"ok\">" . $_lang['installed'] . "</span></p>";

                }

            }

        }

    }

}

            $filecontent = $moduleSnippet[2];

            $properties = $moduleSnippet[3];

            $category = mysqli_real_escape_string($conn, $moduleSnippet[4]);

            if (!file_exists($filecontent))

                echo "<p>&nbsp;&nbsp;$name: <span class=\"notok\">" . $_lang['unable_install_snippet'] . " '$filecontent' " . $_lang['not_found'] . ".</span></p>";

            else {

                // Create the category if it does not already exist

                $category = getCreateDbCategory($category, $sqlParser);

                $snippet = end(preg_split("/(\/\/)?\s*\<\?php/", file_get_contents($filecontent)));

                $snippet = removeDocblock($snippet, 'snippet');

                $snippet = mysqli_real_escape_string($conn, $snippet);

                $rs = mysqli_query($sqlParser->conn, "SELECT * FROM $dbase.`" . $table_prefix . "site_snippets` WHERE name='$name'");

                if (mysqli_num_rows($rs)) {

                    $row = mysqli_fetch_assoc($rs);

                    $props = mysqli_real_escape_string($conn, propUpdate($properties,$row['properties']));

                    if (!mysqli_query($sqlParser->conn, "UPDATE $dbase.`" . $table_prefix . "site_snippets` SET snippet='$snippet', description='$desc', properties='$props' WHERE name='$name';")) {

                        echo "<p>" . mysqli_error($sqlParser->conn) . "</p>";

                        return;

                    }

                    echo "<p>&nbsp;&nbsp;$name: <span class=\"ok\">" . $_lang['upgraded'] . "</span></p>";

                } else {

                    $properties = mysqli_real_escape_string($conn, parseProperties($properties, true));

                    if (!mysqli_query($sqlParser->conn, "INSERT INTO $dbase.`" . $table_prefix . "site_snippets` (name,description,snippet,properties,category) VALUES('$name','$desc','$snippet','$properties',$category);")) {

                        echo "<p>" . mysqli_error($sqlParser->conn) . "</p>";

                        return;

                    }

                    echo "<p>&nbsp;&nbsp;$name: <span class=\"ok\">" . $_lang['installed'] . "</span></p>";

                }

            }

        }

    }

}