Initial commit

2026-04-19 07:48:38 +02:00 · 2020-10-20 14:39:50 +02:00
commit 648ded8896
1225 changed files with 216511 additions and 0 deletions
@@ -0,0 +1,58 @@
+<?php
+
+# No direct access
+$secureSrcClassName  = 'WCFE\Modules\Editor\Model\EmergencyRestore';
+( class_exists( $secureSrcClassName ) && defined( 'WCFE_RESTORE_ENDPOINT' ) ) or die( 'Access Denied' );
+?>
+
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html>
+	<head>
+		<title>Config File Editor Emergency Restore Interface</title>
+		<style type="text/css">
+			body 
+			{
+				background-color: #161616;
+				color: white;
+				font-family: sans-serif;
+				font-size: 14px;
+			}
+			div#wcfe-restore-tools 
+			{
+		    margin: auto;
+		    width: 400px;
+		    height: 300px;
+		    text-align: center;
+			}
+			#wcfe-restore-tools .restore-button
+			{
+		    margin-top: 50px;
+		    width: 200px;
+		    height: 200px;
+		    background-color: #10FF00;
+		    font-size: 38px;
+		    border-color: #10FF00;
+		    color: white;
+			}
+		</style>
+	</head>
+	<body>
+	
+<?php if ( $showForm ) : ?>
+
+		<div id="wcfe-restore">			
+			<div id="wcfe-restore-tools">
+				<form method="post">
+					<input class="restore-button" type="submit" name="Restore" value="Restore" />
+				</form>
+			</div>
+		</div>
+		
+<?php else : ?>
+
+	<span><?php echo $message; ?></span>
+
+<?php endif; ?>
+
+	</body>
+</html>
@@ -0,0 +1,120 @@
+<?php
+
+# Config File Editor Plugin autoload
+require __DIR__ . DIRECTORY_SEPARATOR . '..' . DIRECTORY_SEPARATOR . 'vendor' . DIRECTORY_SEPARATOR . 'autoload.php';
+
+define( 'WCFE_RESTORE_ENDPOINT', true );
+define( 'INVALID_INPUTS_MESSAGE', 'Invalid Inputs' );
+
+# initialize
+$showForm = true;
+
+# Read inputs
+$inputs = array();
+$inputNames = array
+(
+	'secureKey',
+	'dataFileSecure',
+	'absPath',
+	'contentDir',
+);
+
+# DIE if any single input is missing
+foreach ( $inputNames as $input )
+{
+	
+	if ( ! isset( $_GET[ $input ] ) || ! $_GET[ $input ] )
+	{
+		
+		die( INVALID_INPUTS_MESSAGE );
+		
+	}
+	
+	$inputs[ $input ] = $_GET[ $input ];
+	
+}
+
+# Secure keys must be 32 characters long
+if ( ( strlen( $inputs[ 'secureKey' ] ) != 32 ) || ( strlen( $inputs[ 'dataFileSecure' ] ) != 32 ) )
+{
+	die( INVALID_INPUTS_MESSAGE );
+	
+}
+
+# Make sure passed ABS paths is part of system path!
+if ( strpos( __DIR__, $inputs[ 'absPath' ] ) !== 0 )
+{
+
+	die( INVALID_INPUTS_MESSAGE );
+	
+}
+
+# Load Emergency Restore model
+$emergencyRestore = new \WCFE\Modules\Editor\Model\EmergencyRestore
+(
+	$inputs[ 'secureKey' ],
+	$inputs[ 'dataFileSecure' ],
+	$inputs[ 'absPath' ],
+	$inputs[ 'contentDir' ]
+);
+
+# Check backup
+try
+{
+	
+	# Confirm backup request (secure keys, paths, file hash, etc...)
+	$emergencyRestore->confirm();
+	
+	try
+	{
+		
+		# Validate if backup can be used (e.g not expired)
+		$emergencyRestore->validate();
+		
+	}
+	catch ( Exception $exception )
+	{
+		
+		# Delete expired backup
+		$emergencyRestore->delete();
+		
+		die( 'Backup Expired!! WCFE deleted the expired backup!!' );
+		
+	}
+	
+}
+catch( Exception $exception )
+{
+	
+	die( 'Access denied!! Invalid backup sepecified' );
+	
+}
+
+# Restore backup
+if( $_SERVER[ 'REQUEST_METHOD' ] == 'POST' )
+{
+	
+	try
+	{
+		# Restore
+		$emergencyRestore->restore();
+		
+		# Delete backup
+		$emergencyRestore->delete();
+		
+		$message = 'Config File Restored Successful!';
+		
+	}
+	catch( Exception $exception )
+	{
+		
+		$message = $exception->getMessage();
+		
+	}
+
+	$showForm = false;
+		
+}
+
+# Normal View / Display Backup button
+require __DIR__ . DIRECTORY_SEPARATOR . 'Restore.html.php';