app = $application; $this->fileHelper = $this->app->make('helper/file'); $this->config = $this->app->make('config'); $this->databaseConfig = $this->app->make('config/database'); $this->urlResolver = $this->app->make(PathUrlResolver::class); $this->request = $this->app->make(Request::class); $this->isConnected = false; $this->isConnected(); } /** * @return bool */ public function isConnected(): bool { if ($this->isConnected) { return true; } if (!$this->config->get('concrete.marketplace.enabled')) { $this->connectionError = self::E_MARKETPLACE_SUPPORT_MANUALLY_DISABLED; return false; } $csToken = $this->databaseConfig->get('concrete.marketplace.token'); $this->isConnected = false; if ($csToken != '') { $ms = ''; $installationService = $this->app->make(InstallationService::class); if ($installationService->isMultisiteEnabled()) { $ms = '&ms=1'; } $csiURL = urlencode($this->getSiteURL()); $url = $this->config->get('concrete.urls.concrete_secure') . $this->config->get('concrete.urls.paths.marketplace.connect_validate') . "?csToken={$csToken}&csiURL=" . $csiURL . '&csiVersion=' . APP_VERSION . $ms; $vn = $this->app->make('helper/validation/numbers'); $r = $this->get($url); if ($r === null && !$this->connectionError) { $this->isConnected = true; } else { if ($vn->integer($r)) { $this->isConnected = false; $this->connectionError = $r; if ($this->connectionError == self::E_DELETED_SITE_TOKEN) { $this->databaseConfig->clear('concrete.marketplace.token'); $this->databaseConfig->clear('concrete.marketplace.url_token'); } } else { $this->isConnected = false; $this->connectionError = self::E_GENERAL_CONNECTION_ERROR; } } } return $this->isConnected; } /** * @return static|Marketplace */ public static function getInstance(): self { static $instance; if (!isset($instance)) { $instance = Application::getFacadeApplication()->make(__CLASS__); } return $instance; } /** * @param $file * * @return int|mixed|string */ public static function downloadRemoteFile($file) { // Get the marketplace instance $marketplace = static::getInstance(); $file .= '?csiURL=' . urlencode($marketplace->getSiteURL()) . '&csiVersion=' . APP_VERSION; $timestamp = time(); $tmpFile = $marketplace->fileHelper->getTemporaryDirectory() . '/' . $timestamp . '.zip'; $error = $marketplace->app->make('error'); $chunksize = 1 * (1024 * 1024); // split into 1MB chunks $handle = fopen($file, 'rb'); $fp = fopen($tmpFile, 'w'); if ($handle === false) { $error->add(t('An error occurred while downloading the package.')); } elseif ($fp === false) { $error->add(t('Concrete was not able to save the package.')); } else { while (!feof($handle)) { $data = fread($handle, $chunksize); $data = is_numeric($data) ? (int) $data : $data; if ($data === Package::E_PACKAGE_INVALID_APP_VERSION) { $error->add(t('This package isn\'t currently available for this version of Concrete . Please contact the maintainer of this package for assistance.')); } else { fwrite($fp, $data, strlen($data)); } } fclose($handle); fclose($fp); } if ($error->has()) { if (file_exists($tmpFile)) { @unlink($tmpFile); } return $error; } return $timestamp; } /** * Runs through all packages on the marketplace, sees if they're installed here, and updates the available version number for them. */ public static function checkPackageUpdates() { $marketplace = static::getInstance(); $skipPackages = $marketplace->config->get('concrete.updates.skip_packages'); if ($skipPackages === true) { return; } if (!$skipPackages) { // In case someone uses false or NULL or an empty string $skipPackages = []; } else { // In case someone uses a single package handle $skipPackages = (array) $skipPackages; } /** @var EntityManagerInterface $em */ $em = $marketplace->app->make(EntityManagerInterface::class); /** @var PackageService $packageService */ $packageService = $marketplace->app->make(PackageService::class); $items = self::getAvailableMarketplaceItems(false); foreach ($items as $i) { if (in_array($i->getHandle(), $skipPackages, true)) { continue; } $p = $packageService->getByHandle($i->getHandle()); if (is_object($p)) { /** * @var \Concrete\Core\Entity\Package $p */ $p->setPackageAvailableVersion($i->getVersion()); $em->persist($p); } } $em->flush(); } public static function getAvailableMarketplaceItems($filterInstalled = true): array { $marketplace = static::getInstance(); /** @var PackageService $packageService */ $packageService = $marketplace->app->make(PackageService::class); $fh = $marketplace->fileHelper; if (!$fh) { return []; } // Retrieve the URL contents $csToken = $marketplace->databaseConfig->get('concrete.marketplace.token'); $csiURL = urlencode($marketplace->getSiteURL()); $url = $marketplace->config->get('concrete.urls.concrete_secure') . $marketplace->config->get('concrete.urls.paths.marketplace.purchases'); $url .= "?csToken={$csToken}&csiURL=" . $csiURL . '&csiVersion=' . APP_VERSION; $json = $marketplace->get($url); $addons = []; $objects = @$marketplace->app->make('helper/json')->decode($json); if (is_array($objects)) { try { foreach ($objects as $addon) { $mi = new RemoteItem(); $mi->setPropertiesFromJSONObject($addon); $remoteCID = $mi->getRemoteCollectionID(); if (!empty($remoteCID)) { $addons[$mi->getHandle()] = $mi; } } } catch (Exception $e) { } if ($filterInstalled) { $handles = $packageService->getInstalledHandles(); if (is_array($handles)) { $adlist = []; foreach ($addons as $key => $ad) { if (!in_array($ad->getHandle(), $handles)) { $adlist[$key] = $ad; } } $addons = $adlist; } } } return $addons; } public function getConnectionError() { return $this->connectionError; } public function getSitePageURL(): string { $token = $this->databaseConfig->get('concrete.marketplace.url_token'); $url = $this->config->get('concrete.urls.concrete_secure') . $this->config->get('concrete.urls.paths.site_page'); return $url . '/' . $token; } public function getMarketplaceFrame($width = '100%', $height = '300', $completeURL = false, $connectMethod = 'view'): string { // if $mpID is passed, we are going to either // a. go to its purchase page // b. pass you through to the page AFTER connecting. $tp = new TaskPermission(); if ($this->request->getScheme() === 'https') { $frameURL = $this->config->get('concrete.urls.concrete_secure'); } else { $frameURL = $this->config->get('concrete.urls.concrete'); } if ($tp->canInstallPackages()) { $csToken = null; if (!$this->isConnected()) { if (!$completeURL) { $completeURL = $this->urlResolver->resolve(['/dashboard/extend/connect', 'connect_complete']); $completeURL = $completeURL->setQuery([ 'ccm_token' => $this->app->make('token')->generate('marketplace/connect'), ]); } $csReferrer = urlencode($completeURL); $csiURL = urlencode($this->getSiteURL()); // this used to be the BASE_URL and not BASE_URL . DIR_REL but I don't have a method for that // and honestly I'm not sure why it needs to be that way $csiBaseURL = $csiURL; if ($this->hasConnectionError()) { if ($this->connectionError == self::E_DELETED_SITE_TOKEN) { $connectMethod = 'view'; $csToken = self::generateSiteToken(); if (!$csToken) { return '
' . t('Unable to generate a marketplace token. Request timed out.') . '
'; } } else { $csToken = $this->getSiteToken(); } } else { // new connection $csToken = self::generateSiteToken(); if (!$csToken) { return '
' . t('Unable to generate a marketplace token. Request timed out.') . '
'; } } $url = $frameURL . $this->config->get('concrete.urls.paths.marketplace.connect') . '/-/' . $connectMethod; $url = $url . '?ts=' . time() . '&csiBaseURL=' . $csiBaseURL . '&csiURL=' . $csiURL . '&csToken=' . $csToken . '&csReferrer=' . $csReferrer . '&csName=' . htmlspecialchars( $this->app->make('site')->getSite()->getSiteName(), ENT_QUOTES, APP_CHARSET ); } else { $csiBaseURL = urlencode($this->getSiteURL()); $url = $frameURL . $this->config->get('concrete.urls.paths.marketplace.connect_success') . '?csToken=' . $this->getSiteToken() . '&csiBaseURL=' . $csiBaseURL; } if (!$csToken && !$this->isConnected()) { return '
' . t( 'Unable to generate a marketplace token. Please ensure that allow_url_fopen is turned on, or that cURL is enabled on your server. If these are both true, It\'s possible your site\'s IP address may be denylisted for some reason on our server. Please ask your webhost what your site\'s outgoing cURL request IP address is, and email it to us at help@concretecms.com.' ) . '
'; } $time = time(); $ifr = ''; $ifr .= ''; return $ifr; } return '
' . t( 'You do not have permission to connect this site to the marketplace.' ) . '
'; } public function hasConnectionError(): bool { return $this->connectionError != false; } public function generateSiteToken() { return $this->get( $this->config->get('concrete.urls.concrete_secure') . $this->config->get('concrete.urls.paths.marketplace.connect_new_token') ); } public static function getSiteToken() { $marketplace = static::getInstance(); $dbConfig = $marketplace->app->make('config/database'); $token = $dbConfig->get('concrete.marketplace.token'); return $token; } public function getSiteURL(): string { $url = $this->app->make('url/canonical'); return rtrim((string) $url, '/'); } public function getMarketplacePurchaseFrame($mp, $width = '100%', $height = '530'): string { $tp = new TaskPermission(); if ($tp->canInstallPackages()) { if (!is_object($mp)) { return '
' . t( 'Unable to get information about this product.' ) . '
'; } $url = ''; if ($this->isConnected()) { $url = $this->config->get('concrete.urls.concrete_secure') . $this->config->get('concrete.urls.paths.marketplace.checkout'); $csiURL = urlencode($this->getSiteURL()); $csiBaseURL = $csiURL; $csToken = $this->getSiteToken(); $url = $url . '/' . $mp->getProductBlockID() . '?ts=' . time() . '&csiBaseURL=' . $csiBaseURL . '&csiURL=' . $csiURL . '&csToken=' . $csToken; } $time = time(); $ifr = ''; $ifr .= ''; return $ifr; } return '
' . t( 'You do not have permission to connect this site to the marketplace.' ) . '
'; } /** * Get the contents of a URL. * * @param $url * * @return string|null */ private function get($url) { try { $result = $this->fileHelper->getContents( $url, $this->config->get('concrete.marketplace.request_timeout') ); } catch (Exception $e) { $this->connectionError = self::E_GENERAL_CONNECTION_ERROR; return null; } if ($result === false) { $this->connectionError = self::E_GENERAL_CONNECTION_ERROR; } return $result ?: null; } }