evolution-cms / evolution

                $guid = mysqli_real_escape_string($conn, $moduleModule[4]);

                $shared = mysqli_real_escape_string($conn, $moduleModule[5]);

                $category = mysqli_real_escape_string($conn, $moduleModule[6]);

                if (!file_exists($filecontent)) {

                    $installDataLevel['modules'][$moduleModule[0]]['error'] = array(

                        'type' => 'file_not_found'

                    );

                } else {

                    // Create the category if it does not already exist

                    $category = getCreateDbCategory($category, $sqlParser);

                    $module = end(preg_split("/(\/\/)?\s*\<\?php/", file_get_contents($filecontent), 2));

                    // $module = removeDocblock($module, 'module'); // Modules have no fileBinding, keep docblock for info-tab

                    $module = mysqli_real_escape_string($conn, $module);

                    $rs = mysqli_query($sqlParser->conn,

                        "SELECT * FROM $dbase.`" . $table_prefix . "site_modules` WHERE name='$name'");

                    if (mysqli_num_rows($rs)) {

                        $installDataLevel['modules'][$moduleModule[0]]['type'] = 'update';

                        $row = mysqli_fetch_assoc($rs);

                        $props = mysqli_real_escape_string($conn, propUpdate($properties, $row['properties']));

                        if (!mysqli_query($sqlParser->conn,

                            "UPDATE $dbase.`" . $table_prefix . "site_modules` SET modulecode='$module', description='$desc', properties='$props', enable_sharedparams='$shared' WHERE name='$name';")) {

                            $installDataLevel['modules'][$moduleModule[0]]['error'] = array(

                                'type' => 'sql',

                                'content' => mysqli_error($sqlParser->conn)

                            );

                            $errorData = true;

                            break;

                        }

                    } else {

                        $installDataLevel['modules'][$moduleModule[0]]['type'] = 'create';

                        $properties = mysqli_real_escape_string($conn, parseProperties($properties, true));

                        if (!mysqli_query($sqlParser->conn,

                            "INSERT INTO $dbase.`" . $table_prefix . "site_modules` (name,description,modulecode,properties,guid,enable_sharedparams,category) VALUES('$name','$desc','$module','$properties','$guid','$shared', $category);")) {

                            $installDataLevel['modules'][$moduleModule[0]]['error'] = array(

                                'type' => 'sql',

                                'content' => mysqli_error($sqlParser->conn)

                            );

                            $errorData = true;

                            break;

                        }

                    }

                }

            } else {

                $installDataLevel['modules'][$moduleModule[0]]['type'] = 'skip';

            }

                $filecontent = $moduleSnippet[2];

                $properties = $moduleSnippet[3];

                $category = mysqli_real_escape_string($conn, $moduleSnippet[4]);

                if (!file_exists($filecontent)) {

                    $installDataLevel['snippets'][$moduleSnippet[0]]['error'] = array(

                        'type' => 'file_not_found'

                    );

                } else {

                    // Create the category if it does not already exist

                    $category = getCreateDbCategory($category, $sqlParser);

                    $snippet = end(preg_split("/(\/\/)?\s*\<\?php/", file_get_contents($filecontent)));

                    $snippet = removeDocblock($snippet, 'snippet');

                    $snippet = mysqli_real_escape_string($conn, $snippet);

                    $rs = mysqli_query($sqlParser->conn,

                        "SELECT * FROM $dbase.`" . $table_prefix . "site_snippets` WHERE name='$name'");

                    if (mysqli_num_rows($rs)) {

                        $installDataLevel['snippets'][$moduleSnippet[0]]['type'] = 'update';

                        $row = mysqli_fetch_assoc($rs);

                        $props = mysqli_real_escape_string($conn, propUpdate($properties, $row['properties']));

                        if (!mysqli_query($sqlParser->conn,

                            "UPDATE $dbase.`" . $table_prefix . "site_snippets` SET snippet='$snippet', description='$desc', properties='$props' WHERE name='$name';")) {

                            $installDataLevel['snippets'][$moduleSnippet[0]]['error'] = array(

                                'type' => 'sql',

                                'content' => mysqli_error($sqlParser->conn)

                            );

                            $errorData = true;

                            break;

                        }

                    } else {

                        $installDataLevel['snippets'][$moduleSnippet[0]]['type'] = 'create';

                        $properties = mysqli_real_escape_string($conn, parseProperties($properties, true));

                        if (!mysqli_query($sqlParser->conn,

                            "INSERT INTO $dbase.`" . $table_prefix . "site_snippets` (name,description,snippet,properties,category) VALUES('$name','$desc','$snippet','$properties',$category);")) {

                            $installDataLevel['snippets'][$moduleSnippet[0]]['error'] = array(

                                'type' => 'sql',

                                'content' => mysqli_error($sqlParser->conn)

                            );

                            $errorData = true;

                            break;

                        }

                    }

                }

            } else {

                $installDataLevel['snippets'][$moduleSnippet[0]]['type'] = 'skip';

            }