imagecms / ImageCMS

application/modules/admin/admin.php

<?php

if (!defined('BASEPATH')) {
    exit('No direct script access allowed');
}

/**
 * Image CMS
 * Admin Class
 *
 * TODO:
 * check local ip;
 *
 * @property Lib_admin $lib_admin
 * @property Lib_category $lib_category
 *
 * @property Admin_logs $admin_logs
 * @property Admin_search $admin_search
 * @property Backup $backup
 * @property Cache_all $cache_all
 * @property Categories $categories
 * @property Components $components
 * @property Dashboard $dashboard
 * @property Languages $languages
 * @property Login $login
 * @property Mod_search $mod_search
 * @property Pages $pages
 * @property Rbac $rbac
 * @property Settings $settings
 * @property Sys_info $sys_info
 * @property Sys_update $sys_update
 * @property Sys_upgrade $sys_upgrade
 * @property Widgets_manager $widgets_manager
 */
class Admin extends MY_Controller
{

    private $request_url = 'http://requests.imagecms.net/index.php/requests/req';

    public function __construct() {

        parent::__construct();
        $this->load->library('DX_Auth');

        $lang = new MY_Lang();
        $lang->load('admin');

        admin_or_redirect();

        $this->load->library('lib_admin');
        $this->load->library('lib_category');
        $this->lib_admin->init_settings();
    }

    public function init() {

        if (isset($_SESSION['redirect_after_login'])) {
            $redirectAfterLogin = $_SESSION['redirect_after_login'];
            unset($_SESSION['redirect_after_login']);
            redirect($redirectAfterLogin);
        }

        if (SHOP_INSTALLED) {
            redirect('/admin/components/run/shop/dashboard');
        } else {
            $this->index();
        }
    }

    public function index() {

        if ($this->dx_auth->is_admin() == true and SHOP_INSTALLED) {
            redirect('/admin/components/run/shop/orders/index');
        }
        //just show dashboard
        $this->load->module('admin/dashboard');
        $this->dashboard->index();
        exit;
    }

    /**
     * Delete cached files
     *
     * @param string
     * @access public
     * @return boolean|null
     */
    public function delete_cache() {

        //cp_check_perm('cache_clear');

        $param = $this->input->post('param');

        $this->lib_admin->log(lang('Cleared the cache', 'admin'));

        switch ($param) {
            case 'all':
                $this->getCache()->flushAll();
                $files = $this->cache->delete_all();
                /** clear Doctrine cache */
                $this->getCache()->deleteAll();
                if ($files) {
                    $message = lang('Files deleted', 'admin') . ':' . $files;
                } else {
                    $message = lang('Cache has been cleared', 'admin');
                }
                break;

            case 'expried':
                $files = $this->cache->Clean();
                if ($files) {
                    $message = lang('Outdated files have been deleted', 'admin') . $files;
                } else {
                    $message = lang('Cache has been cleared', 'admin');
                }
                break;
            default:
                $message = lang('Clearing cache error', 'admin');
                $result = false;
        }

        echo json_encode(
            [
             'message'    => $message,
             'result'     => $result,
             'color'      => 'r',
             'filesCount' => $this->cache->cache_file(),
            ]
        );
    }

    //initialyze elFinder

    public function elfinder_init($edMode = false) {

        $this->load->helper('path');

        if (!$edMode) {
            $path = 'uploads';
        } else {
            $path = 'templates';
        }

        if ($this->input->get('path')) {
            $path = $this->input->get('path');
        }

        $opts = [
            // 'debug' => true,
                 'roots' => [
                             [
                              'driver'        => 'LocalFileSystem',
                              'path'          => set_realpath($path),
                              'URL'           => site_url() . $path,
                              'accessControl' => 'access',
                              'attributes'    => [
                                                  [
                                                   'pattern' => '/administrator/', //You can also set permissions for file types by adding, for example, .jpg inside pattern.
                                                   'read'    => false,
                                                   'write'   => false,
                                                   'locked'  => true,
                                                  ],
                                                 ],
                              // more elFinder options here
                             ],
                            ],
                ];
        $this->load->library('elfinder_lib', $opts);
    }

    public function get_csrf() {

        echo form_csrf();
    }

    public function sidebar_cats() {

        echo '<div id="categories">';
        if ($this->input->get('first')) {
            $this->db->where('name', 'shop');
            $this->db->limit(1);
            $query = $this->db->get('components');
            if ($query->num_rows() > 0) {
                ShopCore::app()->SAdminSidebarRenderer->render();
                exit;
            }
        }

        $this->template->assign('tree', $this->lib_category->build());
        $this->template->show('cats_sidebar', false);
        echo '</div>';
    }

    /**
     * Clear session data;
     *
     * @access public
     */
    public function logout() {

        $this->lib_admin->log(lang('Exited the control panel', 'admin'));
        $this->dx_auth->logout();
        redirect('/admin/login', 'refresh');
    }

    public function report_bug() {

        $this->load->library('Form_validation');
        /** @var CI_Form_validation $val */
        $val = $this->form_validation;
        $val->set_rules('name', lang('Your Name', 'admin'), 'trim|required|xss_clean');
        $val->set_rules('email', lang('Your Email', 'admin'), 'trim|required|xss_clean|valid_email');
        $val->set_rules('text', lang('Your remark', 'admin'), 'trim|required|xss_clean');

        $response = [
                     'status'  => 0,
                     'message' => '',
                    ];
        if ($val->run()) {
            $message = '';
            $this->load->library('email');

            $config['charset'] = 'utf-8';

$config was never initialized. Although not strictly required by PHP, it is generally a good practice to add $config = array(); before regardless.

            $config['mailtype'] = 'html';
            $config['wordwrap'] = true;
            $this->email->initialize($config);

            /* pack message */
            $message .= lang('Site address', 'admin') . trim(strip_tags($this->input->get('hostname'))) . ';' . lang('page', 'admin') . ': ' . trim(strip_tags($this->input->get('pathname'))) . ';' . lang('ip-address') . ': ' . trim(strip_tags($this->input->get('ip_address'))) . '; ' . lang('user name', 'admin') . ': ' . trim(strip_tags($this->input->get('user_name'))) . '; <br/> ' . lang('Message', 'admin') . ': ' . trim(strip_tags($this->input->get('text')));

            $this->email->from('bugs@imagecms.net', 'Admin Robot');
            $this->email->to('report@imagecms.net');
            $this->email->bcc('dev@imagecms.net');
            $this->email->subject('Admin report from "' . trim(strip_tags($this->input->get('hostname'))) . '"');
            $this->email->message(stripslashes($message));
            if (!$this->email->send()) {
                $response['message'] = '<div class="alert alert-error">' . lang('An error occurred while sending a message', 'admin') . '</div>';
            } else {
                $response['message'] = '<div class="alert alert-success">' . lang('Your message has been sent', 'admin') . '</div>';
                $response['status'] = 1;
            }
        } else {
            $response['message'] = '<div class="alert alert-error">' . $val->error_string() . '</div>';
        }

        echo json_encode($response);
    }

}

/* End of admin.php */