silverstripe-cms/code/Controllers/ContentController.php

559 lines
18 KiB
PHP
Raw Permalink Normal View History

<?php
2016-07-22 01:32:32 +02:00
namespace SilverStripe\CMS\Controllers;
use SilverStripe\CMS\Model\SiteTree;
use SilverStripe\Control\Controller;
use SilverStripe\Control\Director;
2016-09-09 01:26:24 +02:00
use SilverStripe\Control\HTTPRequest;
use SilverStripe\Control\HTTPResponse;
use SilverStripe\Control\HTTPResponse_Exception;
use SilverStripe\Control\Middleware\HTTPCacheControlMiddleware;
use SilverStripe\Core\Convert;
use SilverStripe\Core\Injector\Injector;
use SilverStripe\Core\Manifest\ModuleManifest;
use SilverStripe\i18n\i18n;
use SilverStripe\ORM\ArrayList;
use SilverStripe\ORM\DataObject;
2016-08-10 06:08:39 +02:00
use SilverStripe\ORM\FieldType\DBDatetime;
use SilverStripe\ORM\FieldType\DBField;
use SilverStripe\ORM\FieldType\DBHTMLText;
use SilverStripe\ORM\FieldType\DBVarchar;
use SilverStripe\ORM\SS_List;
use SilverStripe\Security\MemberAuthenticator\MemberAuthenticator;
use SilverStripe\Security\Permission;
use SilverStripe\Security\Security;
use SilverStripe\SiteConfig\SiteConfig;
2017-06-08 08:02:18 +02:00
use SilverStripe\Versioned\Versioned;
use SilverStripe\View\ArrayData;
use SilverStripe\View\Parsers\URLSegmentFilter;
use SilverStripe\View\Requirements;
use SilverStripe\View\SSViewer;
2016-07-22 01:32:32 +02:00
use Translatable;
/**
* The most common kind of controller; effectively a controller linked to a {@link DataObject}.
*
* ContentControllers are most useful in the content-focused areas of a site. This is generally
* the bulk of a site; however, they may be less appropriate in, for example, the user management
* section of an application.
*
* On its own, content controller does very little. Its constructor is passed a {@link DataObject}
* which is stored in $this->dataRecord. Any unrecognised method calls, for example, Title()
* and Content(), will be passed along to the data record,
*
* Subclasses of ContentController are generally instantiated by ModelAsController; this will create
* a controller based on the URLSegment action variable, by looking in the SiteTree table.
2016-03-08 21:50:55 +01:00
*
* @todo Can this be used for anything other than SiteTree controllers?
*/
2017-01-25 21:59:25 +01:00
class ContentController extends Controller
{
/**
* @var SiteTree
*/
2017-01-25 21:59:25 +01:00
protected $dataRecord;
private static $extensions = [
OldPageRedirector::class,
];
2017-01-25 21:59:25 +01:00
private static $allowed_actions = [
2017-01-25 21:59:25 +01:00
'successfullyinstalled',
'deleteinstallfiles', // secured through custom code
'LoginForm',
];
2017-01-25 21:59:25 +01:00
2018-05-02 12:54:59 +02:00
private static $casting = [
2018-05-01 13:59:53 +02:00
'SilverStripeNavigator' => 'HTMLFragment',
2018-05-02 12:54:59 +02:00
];
2018-05-01 13:59:53 +02:00
2017-01-25 21:59:25 +01:00
/**
* The ContentController will take the URLSegment parameter from the URL and use that to look
* up a SiteTree record.
*
* @param SiteTree $dataRecord
*/
public function __construct($dataRecord = null)
{
if (!$dataRecord) {
$dataRecord = new SiteTree();
if ($this->hasMethod("Title")) {
$dataRecord->Title = $this->Title();
}
$dataRecord->URLSegment = static::class;
$dataRecord->ID = -1;
}
$this->dataRecord = $dataRecord;
parent::__construct();
$this->setFailover($this->dataRecord);
}
/**
* Return the link to this controller, but force the expanded link to be returned so that form methods and
* similar will function properly.
*
* @param string|null $action Action to link to.
* @return string
*/
public function Link($action = null)
{
return $this->data()->Link(($action ? $action : true));
}
//----------------------------------------------------------------------------------//
// These flexible data methods remove the need for custom code to do simple stuff
/**
* Return the children of a given page. The parent reference can either be a page link or an ID.
*
* @param string|int $parentRef
* @return SS_List
*/
public function ChildrenOf($parentRef)
{
$parent = SiteTree::get_by_link($parentRef);
if (!$parent && is_numeric($parentRef)) {
$parent = DataObject::get_by_id(SiteTree::class, $parentRef);
2017-01-25 21:59:25 +01:00
}
if ($parent) {
return $parent->Children();
}
return null;
}
/**
* @param string $link
* @return SiteTree
*/
public function Page($link)
{
return SiteTree::get_by_link($link);
}
protected function init()
{
parent::init();
// In the CMS Preview or draft contexts, we never want to cache page output.
if ($this->getRequest()->getVar('CMSPreview') === '1'
|| $this->getRequest()->getVar('stage') === Versioned::DRAFT
) {
HTTPCacheControlMiddleware::singleton()->disableCache(true);
}
2017-01-25 21:59:25 +01:00
// If we've accessed the homepage as /home/, then we should redirect to /.
if ($this->dataRecord instanceof SiteTree
&& RootURLController::should_be_on_root($this->dataRecord)
2018-05-02 12:54:59 +02:00
&& (!isset($this->urlParams['Action']) || !$this->urlParams['Action'])
2017-01-25 21:59:25 +01:00
&& !$_POST && !$_FILES && !$this->redirectedTo()
) {
$getVars = $_GET;
unset($getVars['url']);
if ($getVars) {
2022-04-13 07:07:59 +02:00
$url = "?" . http_build_query($getVars ?? []);
2017-01-25 21:59:25 +01:00
} else {
$url = "";
}
$this->redirect($url, 301);
return;
}
if ($this->dataRecord) {
$this->dataRecord->extend('contentcontrollerInit', $this);
} else {
SiteTree::singleton()->extend('contentcontrollerInit', $this);
}
if ($this->redirectedTo()) {
return;
}
// Check page permissions
/** @skipUpgrade */
if ($this->dataRecord && $this->URLSegment != 'Security' && !$this->dataRecord->canView()) {
Security::permissionFailure($this);
return;
}
}
/**
* This acts the same as {@link Controller::handleRequest()}, but if an action cannot be found this will attempt to
* fall over to a child controller in order to provide functionality for nested URLs.
*
* @param HTTPRequest $request
* @return HTTPResponse
* @throws HTTPResponse_Exception
*/
2017-06-08 08:02:18 +02:00
public function handleRequest(HTTPRequest $request)
2017-01-25 21:59:25 +01:00
{
/** @var SiteTree $child */
2018-05-02 12:54:59 +02:00
$child = null;
2017-01-25 21:59:25 +01:00
$action = $request->param('Action');
// If nested URLs are enabled, and there is no action handler for the current request then attempt to pass
// control to a child controller. This allows for the creation of chains of controllers which correspond to a
// nested URL.
if ($action && SiteTree::config()->nested_urls && !$this->hasAction($action)) {
// See ModelAdController->getNestedController() for similar logic
if (class_exists('Translatable')) {
Translatable::disable_locale_filter();
}
$filter = URLSegmentFilter::create();
2017-01-25 21:59:25 +01:00
// look for a page with this URLSegment
2018-05-02 12:54:59 +02:00
$child = SiteTree::get()->filter([
2017-01-25 21:59:25 +01:00
'ParentID' => $this->ID,
// url encode unless it's multibyte (already pre-encoded in the database)
'URLSegment' => $filter->getAllowMultibyte() ? $action : rawurlencode($action),
2018-05-02 12:54:59 +02:00
])->first();
2017-01-25 21:59:25 +01:00
if (class_exists('Translatable')) {
Translatable::enable_locale_filter();
}
}
// we found a page with this URLSegment.
if ($child) {
$request->shiftAllParams();
$request->shift();
2017-06-08 08:02:18 +02:00
$response = ModelAsController::controller_for($child)->handleRequest($request);
2017-01-25 21:59:25 +01:00
} else {
// If a specific locale is requested, and it doesn't match the page found by URLSegment,
// look for a translation and redirect (see #5001). Only happens on the last child in
// a potentially nested URL chain.
if (class_exists('Translatable')) {
$locale = $request->getVar('locale');
if ($locale
2017-01-26 05:21:00 +01:00
&& i18n::getData()->validate($locale)
2017-01-25 21:59:25 +01:00
&& $this->dataRecord
&& $this->dataRecord->Locale != $locale
) {
$translation = $this->dataRecord->getTranslation($locale);
if ($translation) {
$response = new HTTPResponse();
$response->redirect($translation->Link(), 301);
throw new HTTPResponse_Exception($response);
}
}
}
Director::set_current_page($this->data());
try {
2017-06-08 08:02:18 +02:00
$response = parent::handleRequest($request);
2017-01-25 21:59:25 +01:00
Director::set_current_page(null);
} catch (HTTPResponse_Exception $e) {
$this->popCurrent();
Director::set_current_page(null);
throw $e;
}
}
return $response;
}
/**
* Get the project name
*
* @return string
*/
public function project()
{
2017-07-21 00:10:53 +02:00
return ModuleManifest::config()->get('project');
2017-01-25 21:59:25 +01:00
}
/**
* Returns the associated database record
*/
public function data()
{
return $this->dataRecord;
}
/*--------------------------------------------------------------------------------*/
/**
* Returns a fixed navigation menu of the given level.
* @param int $level Menu level to return.
* @return ArrayList
*/
public function getMenu($level = 1)
{
if ($level == 1) {
2018-05-02 12:54:59 +02:00
$result = SiteTree::get()->filter([
2017-01-25 21:59:25 +01:00
"ShowInMenus" => 1,
2018-05-02 12:54:59 +02:00
"ParentID" => 0,
]);
2017-01-25 21:59:25 +01:00
} else {
$parent = $this->data();
2018-05-02 12:54:59 +02:00
$stack = [$parent];
2017-01-25 21:59:25 +01:00
if ($parent) {
while (($parent = $parent->Parent()) && $parent->exists()) {
array_unshift($stack, $parent);
}
}
2018-05-02 12:54:59 +02:00
if (isset($stack[$level - 2])) {
$result = $stack[$level - 2]->Children();
2017-01-25 21:59:25 +01:00
}
}
2018-05-02 12:54:59 +02:00
$visible = [];
2017-01-25 21:59:25 +01:00
// Remove all entries the can not be viewed by the current user
// We might need to create a show in menu permission
if (isset($result)) {
foreach ($result as $page) {
/** @var SiteTree $page */
2017-01-25 21:59:25 +01:00
if ($page->canView()) {
$visible[] = $page;
}
}
}
return new ArrayList($visible);
}
public function Menu($level)
{
return $this->getMenu($level);
}
/**
* Returns the default log-in form.
*
* @todo Check if here should be returned just the default log-in form or
* all available log-in forms (also OpenID...)
* @return \SilverStripe\Security\MemberAuthenticator\MemberLoginForm
2017-01-25 21:59:25 +01:00
*/
public function LoginForm()
{
return Injector::inst()->get(MemberAuthenticator::class)->getLoginHandler($this->Link())->loginForm();
2017-01-25 21:59:25 +01:00
}
public function SilverStripeNavigator()
{
$member = Security::getCurrentUser();
2017-01-25 21:59:25 +01:00
$items = '';
$message = '';
if (Director::isDev() || Permission::check('CMS_ACCESS_CMSMain') || Permission::check('VIEW_DRAFT_CONTENT')) {
if ($this->dataRecord) {
Requirements::css('silverstripe/cms: client/dist/styles/SilverStripeNavigator.css');
Requirements::javascript('silverstripe/cms: client/dist/js/SilverStripeNavigator.js');
2017-01-25 21:59:25 +01:00
$return = $nav = SilverStripeNavigator::get_for_record($this->dataRecord);
$items = $return['items'];
$message = $return['message'];
}
if ($member) {
$firstname = Convert::raw2xml($member->FirstName);
$surname = Convert::raw2xml($member->Surname);
$logInMessage = _t(__CLASS__ . '.LOGGEDINAS', 'Logged in as') . " {$firstname} {$surname} - <a href=\"Security/logout\">" . _t(__CLASS__ . '.LOGOUT', 'Log out') . "</a>";
2017-01-25 21:59:25 +01:00
} else {
$logInMessage = sprintf(
'%s - <a href="%s">%s</a>',
_t(__CLASS__ . '.NOTLOGGEDIN', 'Not logged in'),
2017-01-25 21:59:25 +01:00
Security::config()->login_url,
_t(__CLASS__ . '.LOGIN', 'Login') . "</a>"
2017-01-25 21:59:25 +01:00
);
}
$viewPageIn = _t(__CLASS__ . '.VIEWPAGEIN', 'View Page in:');
2017-01-25 21:59:25 +01:00
return <<<HTML
<div id="SilverStripeNavigator">
<div class="holder">
<div id="logInStatus">
$logInMessage
</div>
<div id="switchView" class="bottomTabs">
2016-03-08 21:50:55 +01:00
$viewPageIn
$items
</div>
</div>
</div>
$message
HTML;
2018-05-02 12:54:59 +02:00
// On live sites we should still see the archived message
2017-01-25 21:59:25 +01:00
} else {
if ($date = Versioned::current_archived_date()) {
Requirements::css('silverstripe/cms: client/dist/styles/SilverStripeNavigator.css');
2017-01-25 21:59:25 +01:00
/** @var DBDatetime $dateObj */
$dateObj = DBField::create_field('Datetime', $date);
// $dateObj->setVal($date);
return "<div id=\"SilverStripeNavigatorMessage\">" .
_t(__CLASS__ . '.ARCHIVEDSITEFROM', 'Archived site from') .
"<br>" . $dateObj->Nice() . "</div>";
2017-01-25 21:59:25 +01:00
}
}
return null;
}
public function SiteConfig()
{
if (method_exists($this->dataRecord, 'getSiteConfig')) {
return $this->dataRecord->getSiteConfig();
} else {
return SiteConfig::current_site_config();
}
}
/**
* Returns an RFC1766 compliant locale string, e.g. 'fr-CA'.
* Inspects the associated {@link dataRecord} for a {@link SiteTree->Locale} value if present,
* and falls back to {@link Translatable::get_current_locale()} or {@link i18n::default_locale()},
* depending if Translatable is enabled.
*
* Suitable for insertion into lang= and xml:lang=
* attributes in HTML or XHTML output.
*
* @return string
*/
public function ContentLocale()
{
if ($this->dataRecord && $this->dataRecord->hasExtension('Translatable')) {
$locale = $this->dataRecord->Locale;
} elseif (class_exists('Translatable') && SiteTree::has_extension('Translatable')) {
$locale = Translatable::get_current_locale();
} else {
$locale = i18n::get_locale();
}
return i18n::convert_rfc1766($locale);
}
/**
* Return an SSViewer object to render the template for the current page.
*
* @param $action string
*
* @return SSViewer
*/
public function getViewer($action)
{
// Manually set templates should be dealt with by Controller::getViewer()
if (!empty($this->templates[$action])
|| !empty($this->templates['index'])
2017-01-25 21:59:25 +01:00
|| $this->template
) {
return parent::getViewer($action);
}
// Prepare action for template search
$action = $action === 'index' ? '' : '_' . $action;
2017-01-25 21:59:25 +01:00
$templatesFound = [];
// Find templates for the record + action together - e.g. Page_action.ss
if ($this->dataRecord instanceof SiteTree) {
$templatesFound[] = $this->dataRecord->getViewerTemplates($action);
}
// Find templates for the controller + action together - e.g. PageController_action.ss
$templatesFound[] = SSViewer::get_templates_by_class(static::class, $action, Controller::class);
// Find templates for the record without an action - e.g. Page.ss
if ($this->dataRecord instanceof SiteTree) {
$templatesFound[] = $this->dataRecord->getViewerTemplates();
}
// Find the templates for the controller without an action - e.g. PageController.ss
$templatesFound[] = SSViewer::get_templates_by_class(static::class, "", Controller::class);
2017-01-25 21:59:25 +01:00
$templates = array_merge(...$templatesFound);
2017-07-13 05:45:35 +02:00
return SSViewer::create($templates);
2017-01-25 21:59:25 +01:00
}
/**
* This action is called by the installation system
*/
public function successfullyinstalled()
{
// Return 410 Gone if this site is not actually a fresh installation
if (!file_exists(PUBLIC_PATH . '/install.php')) {
2017-01-25 21:59:25 +01:00
$this->httpError(410);
}
// TODO Allow this to work when allow_url_fopen=0
if (isset($_SESSION['StatsID']) && $_SESSION['StatsID']) {
$url = 'http://ss2stat.silverstripe.com/Installation/installed?ID=' . $_SESSION['StatsID'];
2022-04-13 07:07:59 +02:00
@file_get_contents($url ?? '');
2017-01-25 21:59:25 +01:00
}
global $project;
2018-05-02 12:54:59 +02:00
$data = new ArrayData([
2017-01-25 21:59:25 +01:00
'Project' => Convert::raw2xml($project),
2017-06-08 08:02:18 +02:00
'Username' => Convert::raw2xml($this->getRequest()->getSession()->get('username')),
'Password' => Convert::raw2xml($this->getRequest()->getSession()->get('password')),
2018-05-02 12:54:59 +02:00
]);
2017-01-25 21:59:25 +01:00
2018-05-02 12:54:59 +02:00
return [
"Title" => _t(__CLASS__ . ".INSTALL_SUCCESS", "Installation Successful!"),
2017-01-25 21:59:25 +01:00
"Content" => $data->renderWith([
'type' => 'Includes',
2018-05-02 12:54:59 +02:00
'Install_successfullyinstalled',
2017-01-25 21:59:25 +01:00
]),
2018-05-02 12:54:59 +02:00
];
2017-01-25 21:59:25 +01:00
}
public function deleteinstallfiles()
{
if (!Permission::check("ADMIN")) {
return Security::permissionFailure($this);
}
$title = new DBVarchar("Title");
$content = new DBHTMLText('Content');
// As of SS4, index.php is required and should never be deleted.
$installfiles = [
2017-01-25 21:59:25 +01:00
'install.php',
'install-frameworkmissing.html',
'index.html'
];
2017-01-25 21:59:25 +01:00
$unsuccessful = new ArrayList();
foreach ($installfiles as $installfile) {
$installfilepath = PUBLIC_PATH . '/' . $installfile;
2022-04-13 07:07:59 +02:00
if (file_exists($installfilepath ?? '')) {
@unlink($installfilepath ?? '');
2017-01-25 21:59:25 +01:00
}
2022-04-13 07:07:59 +02:00
if (file_exists($installfilepath ?? '')) {
$unsuccessful->push(new ArrayData(['File' => $installfile]));
2017-01-25 21:59:25 +01:00
}
}
2018-05-02 12:54:59 +02:00
$data = new ArrayData([
2017-06-08 08:02:18 +02:00
'Username' => Convert::raw2xml($this->getRequest()->getSession()->get('username')),
'Password' => Convert::raw2xml($this->getRequest()->getSession()->get('password')),
2018-05-02 12:54:59 +02:00
'UnsuccessfulFiles' => $unsuccessful,
]);
2017-01-25 21:59:25 +01:00
$content->setValue($data->renderWith([
'type' => 'Includes',
2018-05-02 12:54:59 +02:00
'Install_deleteinstallfiles',
2017-01-25 21:59:25 +01:00
]));
2018-05-02 12:54:59 +02:00
return [
2017-01-25 21:59:25 +01:00
"Title" => $title,
"Content" => $content,
2018-05-02 12:54:59 +02:00
];
2017-01-25 21:59:25 +01:00
}
}