David Mudrák
af96f120e9
There is a new hook in the index.php file. If valid HTTP parameter installaddonrequest is detected, the installer asks the administrator to confirm the request. If confirmed, the installer calls download.moodle.org/api/1.2/pluginfo.php service to get information about the given plugin version. The essential data are the URL of the ZIP to download and the MD5 hash of the ZIP. These data must be fetched via HTTPS to protect against MiM attack. If the ZIP is downloaded and the MD5 content hash is correct, the user is redirected to the previously implemented ZIP validation page, as if the ZIP was uploaded manually. The valid format of the installaddonrequest is documented via the test_decode_remote_request() unit test method.
68 lines
2.3 KiB
PHP
68 lines
2.3 KiB
PHP
<?php
|
|
|
|
// This file is part of Moodle - http://moodle.org/
|
|
//
|
|
// Moodle is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// Moodle is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
/**
|
|
* The main screen of the tool.
|
|
*
|
|
* @package tool_installaddon
|
|
* @copyright 2013 David Mudrak <david@moodle.com>
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
|
|
*/
|
|
|
|
require(dirname(__FILE__) . '/../../../config.php');
|
|
require_once($CFG->libdir.'/adminlib.php');
|
|
require_once(dirname(__FILE__).'/classes/installer.php');
|
|
|
|
admin_externalpage_setup('tool_installaddon_index');
|
|
|
|
if (!empty($CFG->disableonclickaddoninstall)) {
|
|
notice(get_string('featuredisabled', 'tool_installaddon'));
|
|
}
|
|
|
|
$installer = tool_installaddon_installer::instance();
|
|
|
|
$output = $PAGE->get_renderer('tool_installaddon');
|
|
$output->set_installer_instance($installer);
|
|
|
|
// Handle the eventual request for installing from remote repository.
|
|
$remoterequest = optional_param('installaddonrequest', null, PARAM_RAW);
|
|
$confirmed = optional_param('confirm', false, PARAM_BOOL);
|
|
$installer->handle_remote_request($output, $remoterequest, $confirmed);
|
|
|
|
$form = $installer->get_installfromzip_form();
|
|
|
|
if ($form->is_cancelled()) {
|
|
redirect($PAGE->url);
|
|
|
|
} else if ($data = $form->get_data()) {
|
|
// Save the ZIP file into a temporary location.
|
|
$jobid = md5(rand().uniqid('', true));
|
|
$sourcedir = make_temp_directory('tool_installaddon/'.$jobid.'/source');
|
|
$zipfilename = $installer->save_installfromzip_file($form, $sourcedir);
|
|
// Redirect to the validation page.
|
|
$nexturl = new moodle_url('/admin/tool/installaddon/validate.php', array(
|
|
'sesskey' => sesskey(),
|
|
'jobid' => $jobid,
|
|
'zip' => $zipfilename,
|
|
'type' => $data->plugintype,
|
|
'rootdir' => $data->rootdir));
|
|
redirect($nexturl);
|
|
}
|
|
|
|
// Output starts here.
|
|
echo $output->index_page();
|