Gecko [ 167.86.127.34 ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
.mad-root	0 B	-rw-r--r--
AdminAccessController.php	7.78 KB	-rwxrwxrwx
AdminAddressesController.php	23.22 KB	-rwxrwxrwx
AdminAttachmentsController.php	10.82 KB	-rwxrwxrwx
AdminAttributeGeneratorControl...	11.64 KB	-rwxrwxrwx
AdminAttributesGroupsControlle...	39.86 KB	-rwxrwxrwx
AdminCarrierWizardController.p...	41.3 KB	-rwxrwxrwx
AdminCarriersController.php	32.71 KB	-rwxrwxrwx
AdminCartRulesController.php	36.98 KB	-rwxrwxrwx
AdminCartsController.php	43.43 KB	-rwxrwxrwx
AdminCmsCategoriesController.p...	15.95 KB	-rwxrwxrwx
AdminCmsContentController.php	12.28 KB	-rwxrwxrwx
AdminCmsController.php	21.71 KB	-rwxrwxrwx
AdminCountriesController.php	22.32 KB	-rwxrwxrwx
AdminCustomerThreadsController...	55.03 KB	-rwxrwxrwx
AdminDashboardController.php	27.3 KB	-rwxrwxrwx
AdminFeaturesController.php	24.43 KB	-rwxrwxrwx
AdminGendersController.php	8.68 KB	-rwxrwxrwx
AdminGroupsController.php	26.44 KB	-rwxrwxrwx
AdminImagesController.php	38.1 KB	-rwxrwxrwx
AdminImportController.php	243.47 KB	-rwxrwxrwx
AdminLegacyLayoutController.ph...	5.3 KB	-rwxrwxrwx
AdminLoginController.php	18.83 KB	-rwxrwxrwx
AdminManufacturersController.p...	33.08 KB	-rwxrwxrwx
AdminModulesController.php	76.11 KB	-rwxrwxrwx
AdminModulesPositionsControlle...	29.95 KB	-rwxrwxrwx
AdminNotFoundController.php	1.63 KB	-rwxrwxrwx
AdminOrderMessageController.ph...	3.75 KB	-rwxrwxrwx
AdminOrdersController.php	163.18 KB	-rwxrwxrwx
AdminOutstandingController.php	6.35 KB	-rwxrwxrwx
AdminPatternsController.php	25.68 KB	-rwxrwxrwx
AdminPdfController.php	8.29 KB	-rwxrwxrwx
AdminPreferencesController.php	13.12 KB	-rwxrwxrwx
AdminProductsController.php	160.91 KB	-rwxrwxrwx
AdminQuickAccessesController.p...	9.71 KB	-rwxrwxrwx
AdminReferrersController.php	22.15 KB	-rwxrwxrwx
AdminRequestSqlController.php	21.3 KB	-rwxrwxrwx
AdminReturnController.php	14.81 KB	-rwxrwxrwx
AdminSearchConfController.php	20 KB	-rwxrwxrwx
AdminSearchController.php	23.76 KB	-rwxrwxrwx
AdminSearchEnginesController.p...	3.63 KB	-rwxrwxrwx
AdminShopController.php	37 KB	-rwxrwxrwx
AdminShopGroupController.php	14.86 KB	-rwxrwxrwx
AdminShopUrlController.php	24.39 KB	-rwxrwxrwx
AdminSlipController.php	7.49 KB	-rwxrwxrwx
AdminSpecificPriceRuleControll...	16.15 KB	-rwxrwxrwx
AdminStatesController.php	12.87 KB	-rwxrwxrwx
AdminStatsController.php	45.06 KB	-rwxrwxrwx
AdminStatsTabController.php	11.74 KB	-rwxrwxrwx
AdminStatusesController.php	28.42 KB	-rwxrwxrwx
AdminStoresController.php	25.29 KB	-rwxrwxrwx
AdminSuppliersController.php	24.36 KB	-rwxrwxrwx
AdminTabsController.php	14.39 KB	-rwxrwxrwx
AdminTagsController.php	5.61 KB	-rwxrwxrwx
AdminTaxRulesGroupController.p...	22.51 KB	-rwxrwxrwx
AdminTrackingController.php	19.57 KB	-rwxrwxrwx
AdminTranslationsController.ph...	149.28 KB	-rwxrwxrwx
AdminZonesController.php	5.38 KB	-rwxrwxrwx
BoOrder.php	1.25 KB	-rwxrwxrwx
index.php	1.29 KB	-rwxrwxrwx
pwnkit	10.99 KB	-rwxr-xr-x

Code Editor : AdminAccessController.php

<?php
/**
 * 2007-2019 PrestaShop and Contributors
 *
 * NOTICE OF LICENSE
 *
 * This source file is subject to the Open Software License (OSL 3.0)
 * that is bundled with this package in the file LICENSE.txt.
 * It is also available through the world-wide-web at this URL:
 * https://opensource.org/licenses/OSL-3.0
 * If you did not receive a copy of the license and are unable to
 * obtain it through the world-wide-web, please send an email
 * to license@prestashop.com so we can send you a copy immediately.
 *
 * DISCLAIMER
 *
 * Do not edit or add to this file if you wish to upgrade PrestaShop to newer
 * versions in the future. If you wish to customize PrestaShop for your
 * needs please refer to https://www.prestashop.com for more information.
 *
 * @author    PrestaShop SA <contact@prestashop.com>
 * @copyright 2007-2019 PrestaShop SA and Contributors
 * @license   https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
 * International Registered Trademark & Property of PrestaShop SA
 */

/**
 * @property Profile $object
 */
class AdminAccessControllerCore extends AdminController
{
    /** @var array : Black list of id_tab that do not have access */
    public $accesses_black_list = array();

public function __construct()
    {
        $this->bootstrap = true;
        $this->show_toolbar = false;
        $this->table = 'access';
        $this->className = 'Profile';
        $this->multishop_context = Shop::CONTEXT_ALL;
        $this->lang = false;
        $this->context = Context::getContext();

// Blacklist AdminLogin
        $this->accesses_black_list[] = Tab::getIdFromClassName('AdminLogin');

parent::__construct();
    }

/**
     * AdminController::renderForm() override.
     *
     * @see AdminController::renderForm()
     */
    public function renderForm()
    {
        $current_profile = (int) $this->getCurrentProfileId();
        $profiles = Profile::getProfiles($this->context->language->id);
        $tabs = Tab::getTabs($this->context->language->id);

$accesses = array();
        foreach ($profiles as $profile) {
            $accesses[$profile['id_profile']] = Profile::getProfileAccesses($profile['id_profile']);
        }

// Deleted id_tab that do not have access
        foreach ($tabs as $key => $tab) {
            // Don't allow permissions for unnamed tabs (ie. AdminLogin)
            if (empty($tab['name'])) {
                unset($tabs[$key]);
            }

foreach ($this->accesses_black_list as $id_tab) {
                if ($tab['id_tab'] == (int) $id_tab) {
                    unset($tabs[$key]);
                }
            }
        }

$modules = array();
        foreach ($profiles as $profile) {
            $modules[$profile['id_profile']] = Module::getModulesAccessesByIdProfile($profile['id_profile']);
            uasort($modules[$profile['id_profile']], array($this, 'sortModuleByName'));
        }

$this->fields_form = array('');
        $this->tpl_form_vars = array(
            'profiles' => $profiles,
            'accesses' => $accesses,
            'id_tab_parentmodule' => (int) Tab::getIdFromClassName('AdminParentModules'),
            'id_tab_module' => (int) Tab::getIdFromClassName('AdminModules'),
            'tabs' => $this->displayTabs($tabs),
            'current_profile' => (int) $current_profile,
            'admin_profile' => (int) _PS_ADMIN_PROFILE_,
            'access_edit' => $this->access('edit'),
            'perms' => array('view', 'add', 'edit', 'delete'),
            'id_perms' => array('view' => 0, 'add' => 1, 'edit' => 2, 'delete' => 3, 'all' => 4),
            'modules' => $modules,
            'link' => $this->context->link,
            'employee_profile_id' => (int) $this->context->employee->id_profile,
        );

return parent::renderForm();
    }

/**
     * AdminController::initContent() override.
     *
     * @see AdminController::initContent()
     */
    public function initContent()
    {
        $this->display = 'edit';

if (!$this->loadObject(true)) {
            return;
        }

$this->content .= $this->renderForm();

$this->context->smarty->assign(array(
            'content' => $this->content,
        ));
    }

public function initToolbarTitle()
    {
        $this->toolbar_title = array_unique($this->breadcrumbs);
    }

public function initPageHeaderToolbar()
    {
        parent::initPageHeaderToolbar();
        unset($this->page_header_toolbar_btn['cancel']);
    }

public function ajaxProcessUpdateAccess()
    {
        if (_PS_MODE_DEMO_) {
            throw new PrestaShopException($this->trans('This functionality has been disabled.', array(), 'Admin.Notifications.Error'));
        }
        if ($this->access('edit') != '1') {
            throw new PrestaShopException($this->trans('You do not have permission to edit this.', array(), 'Admin.Notifications.Error'));
        }

if (Tools::isSubmit('submitAddAccess')) {
            $access = new Access();
            $perm = Tools::getValue('perm');
            if (!in_array($perm, array('view', 'add', 'edit', 'delete', 'all'))) {
                throw new PrestaShopException('permission does not exist');
            }

$enabled = (int) Tools::getValue('enabled');
            $id_tab = (int) Tools::getValue('id_tab');
            $id_profile = (int) Tools::getValue('id_profile');
            $addFromParent = (int) Tools::getValue('addFromParent');

die($access->updateLgcAccess((int) $id_profile, $id_tab, $perm, $enabled, $addFromParent));
        }
    }

public function ajaxProcessUpdateModuleAccess()
    {
        if (_PS_MODE_DEMO_) {
            throw new PrestaShopException($this->trans('This functionality has been disabled.', array(), 'Admin.Notifications.Error'));
        }
        if ($this->access('edit') != '1') {
            throw new PrestaShopException($this->trans('You do not have permission to edit this.', array(), 'Admin.Notifications.Error'));
        }

if (Tools::isSubmit('changeModuleAccess')) {
            $access = new Access();
            $perm = Tools::getValue('perm');
            $enabled = (int) Tools::getValue('enabled');
            $id_module = (int) Tools::getValue('id_module');
            $id_profile = (int) Tools::getValue('id_profile');

if (!in_array($perm, array('view', 'configure', 'uninstall'))) {
                throw new PrestaShopException('permission does not exist');
            }

die($access->updateLgcModuleAccess((int) $id_profile, $id_module, $perm, $enabled));
        }
    }

/**
     * Get the current profile id.
     *
     * @return int the $_GET['profile'] if valid, else 1 (the first profile id)
     */
    public function getCurrentProfileId()
    {
        return (isset($_GET['id_profile']) && !empty($_GET['id_profile']) && is_numeric($_GET['id_profile'])) ? (int) $_GET['id_profile'] : 1;
    }

/**
     * @param array $a module data
     * @param array $b module data
     *
     * @return int
     */
    protected function sortModuleByName($a, $b)
    {
        $moduleAName = isset($a['name']) ? $a['name'] : null;
        $moduleBName = isset($b['name']) ? $b['name'] : null;

return strnatcmp($moduleAName, $moduleBName);
    }

/**
     * return human readable Tabs hierarchy for display.
     */
    protected function displayTabs(array $tabs)
    {
        $tabsTree = $this->getChildrenTab($tabs);

return $tabsTree;
    }

protected function getChildrenTab(array &$tabs, $id_parent = 0)
    {
        $children = [];
        foreach ($tabs as &$tab) {
            $id = $tab['id_tab'];

if ($tab['id_parent'] == $id_parent) {
                $children[$id] = $tab;
                $children[$id]['children'] = $this->getChildrenTab($tabs, $id);
            }
        }

return $children;
    }
}

${this.title}

Code Editor : AdminAccessController.php