danielebarchiesi@0: <?php
danielebarchiesi@0: 
danielebarchiesi@0: /**
danielebarchiesi@0:  * @file
danielebarchiesi@0:  * Administrative script for running authorized file operations.
danielebarchiesi@0:  *
danielebarchiesi@0:  * Using this script, the site owner (the user actually owning the files on the
danielebarchiesi@0:  * webserver) can authorize certain file-related operations to proceed with
danielebarchiesi@0:  * elevated privileges, for example to deploy and upgrade modules or themes.
danielebarchiesi@0:  * Users should not visit this page directly, but instead use an administrative
danielebarchiesi@0:  * user interface which knows how to redirect the user to this script as part of
danielebarchiesi@0:  * a multistep process. This script actually performs the selected operations
danielebarchiesi@0:  * without loading all of Drupal, to be able to more gracefully recover from
danielebarchiesi@0:  * errors. Access to the script is controlled by a global killswitch in
danielebarchiesi@0:  * settings.php ('allow_authorize_operations') and via the 'administer software
danielebarchiesi@0:  * updates' permission.
danielebarchiesi@0:  *
danielebarchiesi@0:  * There are helper functions for setting up an operation to run via this
danielebarchiesi@0:  * system in modules/system/system.module. For more information, see:
danielebarchiesi@0:  * @link authorize Authorized operation helper functions @endlink
danielebarchiesi@0:  */
danielebarchiesi@0: 
danielebarchiesi@0: /**
danielebarchiesi@0:  * Defines the root directory of the Drupal installation.
danielebarchiesi@0:  */
danielebarchiesi@0: define('DRUPAL_ROOT', getcwd());
danielebarchiesi@0: 
danielebarchiesi@0: /**
danielebarchiesi@0:  * Global flag to identify update.php and authorize.php runs.
danielebarchiesi@0:  *
danielebarchiesi@0:  * Identifies update.php and authorize.php runs, avoiding unwanted operations
danielebarchiesi@0:  * such as hook_init() and hook_exit() invokes, css/js preprocessing and
danielebarchiesi@0:  * translation, and solves some theming issues. The flag is checked in other
danielebarchiesi@0:  * places in Drupal code (not just authorize.php).
danielebarchiesi@0:  */
danielebarchiesi@0: define('MAINTENANCE_MODE', 'update');
danielebarchiesi@0: 
danielebarchiesi@0: /**
danielebarchiesi@0:  * Renders a 403 access denied page for authorize.php.
danielebarchiesi@0:  */
danielebarchiesi@0: function authorize_access_denied_page() {
danielebarchiesi@0:   drupal_add_http_header('Status', '403 Forbidden');
danielebarchiesi@0:   watchdog('access denied', 'authorize.php', NULL, WATCHDOG_WARNING);
danielebarchiesi@0:   drupal_set_title('Access denied');
danielebarchiesi@0:   return t('You are not allowed to access this page.');
danielebarchiesi@0: }
danielebarchiesi@0: 
danielebarchiesi@0: /**
danielebarchiesi@0:  * Determines if the current user is allowed to run authorize.php.
danielebarchiesi@0:  *
danielebarchiesi@0:  * The killswitch in settings.php overrides all else, otherwise, the user must
danielebarchiesi@0:  * have access to the 'administer software updates' permission.
danielebarchiesi@0:  *
danielebarchiesi@0:  * @return
danielebarchiesi@0:  *   TRUE if the current user can run authorize.php, and FALSE if not.
danielebarchiesi@0:  */
danielebarchiesi@0: function authorize_access_allowed() {
danielebarchiesi@0:   return variable_get('allow_authorize_operations', TRUE) && user_access('administer software updates');
danielebarchiesi@0: }
danielebarchiesi@0: 
danielebarchiesi@0: // *** Real work of the script begins here. ***
danielebarchiesi@0: 
danielebarchiesi@0: require_once DRUPAL_ROOT . '/includes/bootstrap.inc';
danielebarchiesi@0: require_once DRUPAL_ROOT . '/includes/common.inc';
danielebarchiesi@0: require_once DRUPAL_ROOT . '/includes/file.inc';
danielebarchiesi@0: require_once DRUPAL_ROOT . '/includes/module.inc';
danielebarchiesi@0: require_once DRUPAL_ROOT . '/includes/ajax.inc';
danielebarchiesi@0: 
danielebarchiesi@0: // We prepare only a minimal bootstrap. This includes the database and
danielebarchiesi@0: // variables, however, so we have access to the class autoloader registry.
danielebarchiesi@0: drupal_bootstrap(DRUPAL_BOOTSTRAP_SESSION);
danielebarchiesi@0: 
danielebarchiesi@0: // This must go after drupal_bootstrap(), which unsets globals!
danielebarchiesi@0: global $conf;
danielebarchiesi@0: 
danielebarchiesi@0: // We have to enable the user and system modules, even to check access and
danielebarchiesi@0: // display errors via the maintenance theme.
danielebarchiesi@0: $module_list['system']['filename'] = 'modules/system/system.module';
danielebarchiesi@0: $module_list['user']['filename'] = 'modules/user/user.module';
danielebarchiesi@0: module_list(TRUE, FALSE, FALSE, $module_list);
danielebarchiesi@0: drupal_load('module', 'system');
danielebarchiesi@0: drupal_load('module', 'user');
danielebarchiesi@0: 
danielebarchiesi@0: // We also want to have the language system available, but we do *NOT* want to
danielebarchiesi@0: // actually call drupal_bootstrap(DRUPAL_BOOTSTRAP_LANGUAGE), since that would
danielebarchiesi@0: // also force us through the DRUPAL_BOOTSTRAP_PAGE_HEADER phase, which loads
danielebarchiesi@0: // all the modules, and that's exactly what we're trying to avoid.
danielebarchiesi@0: drupal_language_initialize();
danielebarchiesi@0: 
danielebarchiesi@0: // Initialize the maintenance theme for this administrative script.
danielebarchiesi@0: drupal_maintenance_theme();
danielebarchiesi@0: 
danielebarchiesi@0: $output = '';
danielebarchiesi@0: $show_messages = TRUE;
danielebarchiesi@0: 
danielebarchiesi@0: if (authorize_access_allowed()) {
danielebarchiesi@0:   // Load both the Form API and Batch API.
danielebarchiesi@0:   require_once DRUPAL_ROOT . '/includes/form.inc';
danielebarchiesi@0:   require_once DRUPAL_ROOT . '/includes/batch.inc';
danielebarchiesi@0:   // Load the code that drives the authorize process.
danielebarchiesi@0:   require_once DRUPAL_ROOT . '/includes/authorize.inc';
danielebarchiesi@0: 
danielebarchiesi@0:   // For the sake of Batch API and a few other low-level functions, we need to
danielebarchiesi@0:   // initialize the URL path into $_GET['q']. However, we do not want to raise
danielebarchiesi@0:   // our bootstrap level, nor do we want to call drupal_initialize_path(),
danielebarchiesi@0:   // since that is assuming that modules are loaded and invoking hooks.
danielebarchiesi@0:   // However, all we really care is if we're in the middle of a batch, in which
danielebarchiesi@0:   // case $_GET['q'] will already be set, we just initialize it to an empty
danielebarchiesi@0:   // string if it's not already defined.
danielebarchiesi@0:   if (!isset($_GET['q'])) {
danielebarchiesi@0:     $_GET['q'] = '';
danielebarchiesi@0:   }
danielebarchiesi@0: 
danielebarchiesi@0:   if (isset($_SESSION['authorize_operation']['page_title'])) {
danielebarchiesi@0:     drupal_set_title($_SESSION['authorize_operation']['page_title']);
danielebarchiesi@0:   }
danielebarchiesi@0:   else {
danielebarchiesi@0:     drupal_set_title(t('Authorize file system changes'));
danielebarchiesi@0:   }
danielebarchiesi@0: 
danielebarchiesi@0:   // See if we've run the operation and need to display a report.
danielebarchiesi@0:   if (isset($_SESSION['authorize_results']) && $results = $_SESSION['authorize_results']) {
danielebarchiesi@0: 
danielebarchiesi@0:     // Clear the session out.
danielebarchiesi@0:     unset($_SESSION['authorize_results']);
danielebarchiesi@0:     unset($_SESSION['authorize_operation']);
danielebarchiesi@0:     unset($_SESSION['authorize_filetransfer_info']);
danielebarchiesi@0: 
danielebarchiesi@0:     if (!empty($results['page_title'])) {
danielebarchiesi@0:       drupal_set_title($results['page_title']);
danielebarchiesi@0:     }
danielebarchiesi@0:     if (!empty($results['page_message'])) {
danielebarchiesi@0:       drupal_set_message($results['page_message']['message'], $results['page_message']['type']);
danielebarchiesi@0:     }
danielebarchiesi@0: 
danielebarchiesi@0:     $output = theme('authorize_report', array('messages' => $results['messages']));
danielebarchiesi@0: 
danielebarchiesi@0:     $links = array();
danielebarchiesi@0:     if (is_array($results['tasks'])) {
danielebarchiesi@0:       $links += $results['tasks'];
danielebarchiesi@0:     }
danielebarchiesi@0:     else {
danielebarchiesi@0:       $links = array_merge($links, array(
danielebarchiesi@0:         l(t('Administration pages'), 'admin'),
danielebarchiesi@0:         l(t('Front page'), '<front>'),
danielebarchiesi@0:       ));
danielebarchiesi@0:     }
danielebarchiesi@0: 
danielebarchiesi@0:     $output .= theme('item_list', array('items' => $links, 'title' => t('Next steps')));
danielebarchiesi@0:   }
danielebarchiesi@0:   // If a batch is running, let it run.
danielebarchiesi@0:   elseif (isset($_GET['batch'])) {
danielebarchiesi@0:     $output = _batch_page();
danielebarchiesi@0:   }
danielebarchiesi@0:   else {
danielebarchiesi@0:     if (empty($_SESSION['authorize_operation']) || empty($_SESSION['authorize_filetransfer_info'])) {
danielebarchiesi@0:       $output = t('It appears you have reached this page in error.');
danielebarchiesi@0:     }
danielebarchiesi@0:     elseif (!$batch = batch_get()) {
danielebarchiesi@0:       // We have a batch to process, show the filetransfer form.
danielebarchiesi@0:       $elements = drupal_get_form('authorize_filetransfer_form');
danielebarchiesi@0:       $output = drupal_render($elements);
danielebarchiesi@0:     }
danielebarchiesi@0:   }
danielebarchiesi@0:   // We defer the display of messages until all operations are done.
danielebarchiesi@0:   $show_messages = !(($batch = batch_get()) && isset($batch['running']));
danielebarchiesi@0: }
danielebarchiesi@0: else {
danielebarchiesi@0:   $output = authorize_access_denied_page();
danielebarchiesi@0: }
danielebarchiesi@0: 
danielebarchiesi@0: if (!empty($output)) {
danielebarchiesi@0:   print theme('update_page', array('content' => $output, 'show_messages' => $show_messages));
danielebarchiesi@0: }