Your IP : 216.73.216.224
<?php
/*
* @package RSFirewall!
* @copyright (c) 2009 - 2024 RSJoomla!
* @link https://www.rsjoomla.com/joomla-extensions/joomla-security.html
* @license GNU General Public License https://www.gnu.org/licenses/gpl-3.0.en.html
*/
\defined('_JEXEC') or die;
use Joomla\CMS\MVC\Model\BaseDatabaseModel;
use Joomla\CMS\Factory;
use Joomla\CMS\Language\Text;
use Joomla\Filesystem\File;
use Joomla\Filesystem\Path;
use Joomla\CMS\Client\ClientHelper;
use Joomla\CMS\Table\Table;
class RsfirewallModelFix extends BaseDatabaseModel
{
public function renameAdminUser($id) {
$input = Factory::getApplication()->input;
$user = Factory::getUser($id);
$username = $input->get('username', '', 'raw');
if ($username == 'admin' || $username == '') {
$this->setError(Text::_('COM_RSFIREWALL_PLEASE_CHOOSE_ANOTHER_USERNAME'));
return false;
}
$user->set('username', $username);
if (!$user->save(true)) {
$this->setError($user->getError());
return false;
}
return true;
}
public function saveConfiguration($data) {
if (!$this->saveConfigurationFile($data)) {
$this->setError(Text::_('COM_RSFIREWALL_CONFIGURATION_SAVED_ERROR'));
return false;
}
return true;
}
public function saveFile($file, $data) {
return File::write($file, $data);
}
public function saveConfigurationFile($data)
{
$file = JPATH_CONFIGURATION . '/configuration.php';
// Get the new FTP credentials.
$ftp = ClientHelper::getCredentials('ftp', true);
// Attempt to make the file writeable.
if (!$ftp['enabled'] && Path::isOwner($file))
{
Path::setPermissions($file, '0644');
}
$result = File::write($file, $data);
// Attempt to make the file unwriteable.
if (!$ftp['enabled'] && Path::isOwner($file))
{
Path::setPermissions($file, '0444');
}
return $result;
}
public function loadFile($filename) {
return file_get_contents($filename);
}
public function ignoreFiles() {
$input = Factory::getApplication()->input;
$files = $input->get('files', array(), 'array');
$flags = $input->get('flags', array(), 'array');
$db = $this->getDbo();
$query = $db->getQuery(true);
try {
foreach ($files as $i => $file) {
$table = Table::getInstance('Hashes', 'RsfirewallTable', array());
// 'M' => missing
// '' => no flag, default
// for missing files we add a M flag so that we don't check the hash
$flag = $flags[$i];
// full path to the file
$file_path = JPATH_SITE.DIRECTORY_SEPARATOR.$file;
if (file_exists($file_path) && !is_readable($file_path)) {
$this->setError(Text::sprintf('COM_RSFIREWALL_COULD_NOT_READ_HASH_FILE', $file_path));
return false;
}
if ($flag == 'M') {
// no hash for a missing file
$file_hash = '';
} else {
// this check is done only when the file exists and has the wrong hash
if (!is_file($file_path)) {
$this->setError(Text::sprintf('COM_RSFIREWALL_FILE_NOT_FOUND', $file_path));
return false;
}
// calculate the hash
$file_hash = md5_file($file_path);
}
$query->select($db->qn('id'))
->from($db->qn('#__rsfirewall_hashes'))
->where($db->qn('file').'='.$db->q($file))
->where('('. $db->qn('type') . '=' . $db->q('ignore') . ' OR ' . $db->qn('type') . ' = ' . $db->q($this->getCurrentJoomlaVersion()) . ')');
$db->setQuery($query);
if ($id = $db->loadResult()) {
$table->load($id);
$table->bind(array(
'hash' => $file_hash,
'flag' => $flag,
'date' => Factory::getDate()->toSql()
));
} else {
$table->bind(array(
'file' => $file,
'hash' => $file_hash,
'type' => 'ignore',
'flag' => $flag,
'date' => Factory::getDate()->toSql()
));
}
if (!$table->store()) {
$this->setError($table->getError());
return false;
}
$query->clear();
}
return true;
} catch (Exception $e) {
$this->setError($e->getMessage());
return false;
}
}
public function getCurrentJoomlaVersion()
{
static $current = null;
if (is_null($current))
{
$current = $this->getInstance('Check', 'RsfirewallModel')->getCurrentJoomlaVersion();
}
return $current;
}
public function setPermissions($paths, $perms)
{
$success = array();
if (!is_array($paths))
{
$paths = (array) $paths;
}
foreach ($paths as $path)
{
$success[] = (int) @chmod(JPATH_SITE.DIRECTORY_SEPARATOR.$path, octdec($perms));
}
// the result will be an array with the same length as the input array
// 0 for failure, 1 for success
return $success;
}
}