JEMBOT MAWOT Bypass Shell
<?php
/**
* Copyright since 2007 PrestaShop SA and Contributors
* PrestaShop is an International Registered Trademark & Property of PrestaShop SA
*
* NOTICE OF LICENSE
*
* This source file is subject to the Open Software License (OSL 3.0)
* that is bundled with this package in the file LICENSE.md.
* It is also available through the world-wide-web at this URL:
* https://opensource.org/licenses/OSL-3.0
* If you did not receive a copy of the license and are unable to
* obtain it through the world-wide-web, please send an email
* to license@prestashop.com so we can send you a copy immediately.
*
* DISCLAIMER
*
* Do not edit or add to this file if you wish to upgrade PrestaShop to newer
* versions in the future. If you wish to customize PrestaShop for your
* needs please refer to https://devdocs.prestashop.com/ for more information.
*
* @author PrestaShop SA and Contributors <contact@prestashop.com>
* @copyright Since 2007 PrestaShop SA and Contributors
* @license https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
*/
use PrestaShop\PrestaShop\Core\Domain\Product\Stock\ValueObject\OutOfStockType;
class CartControllerCore extends FrontController
{
/** @var string */
public $php_self = 'cart';
protected $id_product;
protected $id_product_attribute;
protected $id_address_delivery;
protected $customization_id;
protected $qty;
/**
* To specify if you are in the preview mode or not.
*
* @var bool
*/
protected $preview;
/** @var bool */
public $ssl = true;
/**
* An array of errors, in case the update action of product is wrong.
*
* @var string[]
*/
protected $updateOperationError = [];
/**
* This is not a public page, so the canonical redirection is disabled.
*
* @param string $canonicalURL
*/
public function canonicalRedirection($canonicalURL = '')
{
}
/**
* Initialize cart controller.
*
* @see FrontController::init()
*/
public function init()
{
parent::init();
// Send noindex to avoid ghost carts by bots
header('X-Robots-Tag: noindex, nofollow', true);
// Get page main parameters
$this->id_product = (int) Tools::getValue('id_product', null);
$this->id_product_attribute = (int) Tools::getValue('id_product_attribute', Tools::getValue('ipa'));
$this->customization_id = (int) Tools::getValue('id_customization');
$this->qty = abs(Tools::getValue('qty', 1));
$this->id_address_delivery = (int) Tools::getValue('id_address_delivery');
$this->preview = ('1' === Tools::getValue('preview'));
/* Check if the products in the cart are available */
if ('show' === Tools::getValue('action')) {
$isAvailable = $this->areProductsAvailable();
if (Tools::getIsset('checkout')) {
return Tools::redirect($this->context->link->getPageLink('order'));
}
if (true !== $isAvailable) {
$this->errors[] = $isAvailable;
}
}
}
/**
* @see FrontController::initContent()
*/
public function initContent()
{
if (Configuration::isCatalogMode() && Tools::getValue('action') === 'show') {
Tools::redirect('index.php');
}
/*
* Check that minimal quantity conditions are respected for each product in the cart
* (this is to be applied only on page load, not for ajax calls)
*/
if (!Tools::getValue('ajax')) {
$this->checkCartProductsMinimalQuantities();
}
if ($this->context->cart->hasProducts()) {
$this->setTemplate('checkout/cart');
} else {
$this->context->smarty->assign([
'allProductsLink' => $this->context->link->getCategoryLink(
(int) Configuration::get('PS_HOME_CATEGORY')
),
]);
$this->setTemplate('checkout/cart-empty');
}
parent::initContent();
}
public function displayAjaxUpdate()
{
if (Configuration::isCatalogMode()) {
return;
}
$productsInCart = $this->context->cart->getProducts();
$updatedProducts = array_filter($productsInCart, [$this, 'productInCartMatchesCriteria']);
$updatedProduct = reset($updatedProducts);
$productQuantity = $updatedProduct['quantity'] ?? 0;
if (!$this->errors) {
$presentedCart = $this->cart_presenter->present($this->context->cart);
// filter product output
$presentedCart['products'] = $this->get('prestashop.core.filter.front_end_object.product_collection')
->filter($presentedCart['products']);
$this->ajaxRender(json_encode([
'success' => true,
'id_product' => $this->id_product,
'id_product_attribute' => $this->id_product_attribute,
'id_customization' => $this->customization_id,
'quantity' => $productQuantity,
'cart' => $presentedCart,
'errors' => empty($this->updateOperationError) ? '' : reset($this->updateOperationError),
]));
return;
} else {
$this->ajaxRender(json_encode([
'hasError' => true,
'errors' => $this->errors,
'quantity' => $productQuantity,
]));
return;
}
}
public function displayAjaxRefresh()
{
if (Configuration::isCatalogMode()) {
return;
}
ob_end_clean();
header('Content-Type: application/json');
$this->ajaxRender(json_encode([
'cart_detailed' => $this->render('checkout/_partials/cart-detailed'),
'cart_detailed_totals' => $this->render('checkout/_partials/cart-detailed-totals'),
'cart_summary_items_subtotal' => $this->render('checkout/_partials/cart-summary-items-subtotal'),
'cart_summary_products' => $this->render('checkout/_partials/cart-summary-products'),
'cart_summary_subtotals_container' => $this->render('checkout/_partials/cart-summary-subtotals'),
'cart_summary_totals' => $this->render('checkout/_partials/cart-summary-totals'),
'cart_detailed_actions' => $this->render('checkout/_partials/cart-detailed-actions'),
'cart_voucher' => $this->render('checkout/_partials/cart-voucher'),
'cart_summary_top' => $this->render('checkout/_partials/cart-summary-top'),
]));
}
/**
* @deprecated 1.7.3.1 the product link is now accessible
* in #quantity_wanted[data-url-update]
*/
public function displayAjaxProductRefresh()
{
if ($this->id_product) {
$idProductAttribute = 0;
$groups = Tools::getValue('group');
if (!empty($groups)) {
$idProductAttribute = (int) Product::getIdProductAttributeByIdAttributes(
$this->id_product,
$groups,
true
);
}
$url = $this->context->link->getProductLink(
$this->id_product,
null,
null,
null,
$this->context->language->id,
null,
$idProductAttribute,
false,
false,
true,
[
'quantity_wanted' => (int) $this->qty,
'preview' => $this->preview,
]
);
} else {
$url = false;
}
ob_end_clean();
header('Content-Type: application/json');
$this->ajaxRender(json_encode([
'success' => true,
'productUrl' => $url,
]));
}
public function postProcess()
{
$this->updateCart();
}
protected function updateCart()
{
// Update the cart ONLY if it's not a bot, in order to avoid ghost carts
if (!Connection::isBot()
&& !$this->errors
&& !($this->context->customer->isLogged() && !$this->isTokenValid())
) {
if (Tools::getIsset('add') || Tools::getIsset('update')) {
$this->processChangeProductInCart();
} elseif (Tools::getIsset('delete')) {
$this->processDeleteProductInCart();
} elseif (CartRule::isFeatureActive()) {
if (Tools::getIsset('addDiscount')) {
if (!($code = trim(Tools::getValue('discount_name')))) {
$this->errors[] = $this->trans(
'You must enter a voucher code.',
[],
'Shop.Notifications.Error'
);
} elseif (!Validate::isCleanHtml($code)) {
$this->errors[] = $this->trans(
'The voucher code is invalid.',
[],
'Shop.Notifications.Error'
);
} else {
$cartRule = new CartRule(CartRule::getIdByCode($code));
if (Validate::isLoadedObject($cartRule)) {
if ($error = $cartRule->checkValidity($this->context)) {
$this->errors[] = $error;
} else {
$this->context->cart->addCartRule($cartRule->id);
}
} else {
$this->errors[] = $this->trans(
'This voucher does not exist.',
[],
'Shop.Notifications.Error'
);
}
}
} elseif (($id_cart_rule = (int) Tools::getValue('deleteDiscount'))
&& Validate::isUnsignedId($id_cart_rule)
) {
$this->context->cart->removeCartRule($id_cart_rule);
CartRule::autoAddToCart($this->context);
}
}
} elseif (!$this->isTokenValid() && Tools::getValue('action') !== 'show' && !Tools::getValue('ajax')) {
Tools::redirect('index.php');
}
}
/**
* This process delete a product from the cart.
*/
protected function processDeleteProductInCart()
{
$customization_product = Db::getInstance()->executeS(
'SELECT * FROM `' . _DB_PREFIX_ . 'customization`'
. ' WHERE `id_cart` = ' . (int) $this->context->cart->id
. ' AND `id_product` = ' . (int) $this->id_product
. ' AND `id_customization` != ' . (int) $this->customization_id
. ' AND `in_cart` = 1'
. ' AND `quantity` > 0'
);
if (count($customization_product)) {
$product = new Product((int) $this->id_product);
if ($this->id_product_attribute > 0) {
$minimal_quantity = (int) ProductAttribute::getAttributeMinimalQty($this->id_product_attribute);
} else {
$minimal_quantity = (int) $product->minimal_quantity;
}
$total_quantity = 0;
foreach ($customization_product as $custom) {
$total_quantity += $custom['quantity'];
}
if ($total_quantity < $minimal_quantity) {
$this->errors[] = $this->trans(
'You must add %quantity% minimum quantity',
['%quantity%' => $minimal_quantity],
'Shop.Notifications.Error'
);
return false;
}
}
$data = [
'id_cart' => (int) $this->context->cart->id,
'id_product' => (int) $this->id_product,
'id_product_attribute' => (int) $this->id_product_attribute,
'customization_id' => (int) $this->customization_id,
'id_address_delivery' => (int) $this->id_address_delivery,
];
// An array [module_name => module_output] will be returned (no effect)
Hook::exec('actionObjectProductInCartDeleteBefore', $data, null, true);
if ($this->context->cart->deleteProduct(
$this->id_product,
$this->id_product_attribute,
$this->customization_id,
$this->id_address_delivery
)) {
Hook::exec('actionObjectProductInCartDeleteAfter', $data);
if (!Cart::getNbProducts((int) $this->context->cart->id)) {
$this->context->cart->setDeliveryOption(null);
$this->context->cart->gift = 0;
$this->context->cart->gift_message = '';
$this->context->cart->update();
}
$isAvailable = $this->areProductsAvailable();
if (true !== $isAvailable) {
$this->updateOperationError[] = $isAvailable;
}
}
CartRule::autoRemoveFromCart();
CartRule::autoAddToCart();
}
/**
* This process add or update a product in the cart.
*/
protected function processChangeProductInCart()
{
$mode = (Tools::getIsset('update') && $this->id_product) ? 'update' : 'add';
$ErrorKey = ('update' === $mode) ? 'updateOperationError' : 'errors';
if (Tools::getIsset('group')) {
$this->id_product_attribute = (int) Product::getIdProductAttributeByIdAttributes(
$this->id_product,
Tools::getValue('group')
);
}
if ($this->qty == 0) {
$this->{$ErrorKey}[] = $this->trans(
'Null quantity.',
[],
'Shop.Notifications.Error'
);
} elseif (!$this->id_product) {
$this->{$ErrorKey}[] = $this->trans(
'Product not found',
[],
'Shop.Notifications.Error'
);
}
$product = new Product($this->id_product, true, $this->context->language->id);
if (!$product->id || !$product->active || !$product->checkAccess($this->context->cart->id_customer)) {
$this->{$ErrorKey}[] = $this->trans(
'This product (%product%) is no longer available.',
['%product%' => $product->name],
'Shop.Notifications.Error'
);
return;
}
if (!$this->id_product_attribute && $product->hasAttributes()) {
$minimum_quantity = ($product->out_of_stock == OutOfStockType::OUT_OF_STOCK_DEFAULT)
? !Configuration::get('PS_ORDER_OUT_OF_STOCK')
: !$product->out_of_stock;
$this->id_product_attribute = Product::getDefaultAttribute($product->id, (int) $minimum_quantity);
// @todo do something better than a redirect admin !!
if (!$this->id_product_attribute) {
Tools::redirectAdmin($this->context->link->getProductLink($product));
}
}
$qty_to_check = $this->qty;
$cart_products = $this->context->cart->getProducts();
if (is_array($cart_products)) {
foreach ($cart_products as $cart_product) {
if ($this->productInCartMatchesCriteria($cart_product)) {
$qty_to_check = $cart_product['cart_quantity'];
if (Tools::getValue('op', 'up') == 'down') {
$qty_to_check -= $this->qty;
} else {
$qty_to_check += $this->qty;
}
break;
}
}
}
// Check product quantity availability
if ('update' !== $mode && $this->shouldAvailabilityErrorBeRaised($product, $qty_to_check)) {
/*
* If the product can't be in the cart in this quantity, we raise an error.
* For the purpose of this error message, we must get the real quantity in stock.
* No subtracting of quantity in the cart here.
*/
$availableProductQuantity = Product::getQuantity($this->id_product, $this->id_product_attribute);
$this->errors[] = $this->trans(
'You can only buy %quantity% "%product%". Please adjust the quantity in your cart to continue.',
[
'%product%' => $product->name,
'%quantity%' => $availableProductQuantity,
],
'Shop.Notifications.Error'
);
return;
}
// Check minimal_quantity
if (!$this->id_product_attribute) {
if ($qty_to_check < $product->minimal_quantity) {
$this->errors[] = $this->trans(
'The minimum purchase order quantity for the product %product% is %quantity%.',
['%product%' => $product->name, '%quantity%' => $product->minimal_quantity],
'Shop.Notifications.Error'
);
return;
}
} else {
$combination = new Combination($this->id_product_attribute);
if ($qty_to_check < $combination->minimal_quantity) {
$this->errors[] = $this->trans(
'The minimum purchase order quantity for the product %product% is %quantity%.',
['%product%' => $product->name, '%quantity%' => $combination->minimal_quantity],
'Shop.Notifications.Error'
);
return;
}
}
// If no errors, process product addition
if (!$this->errors) {
// Add cart if no cart found
if (!$this->context->cart->id) {
if (Context::getContext()->cookie->id_guest) {
$guest = new Guest((int) Context::getContext()->cookie->id_guest);
$this->context->cart->mobile_theme = $guest->mobile_theme;
}
$this->context->cart->add();
if (Validate::isLoadedObject($this->context->cart)) {
$this->context->cookie->id_cart = (int) $this->context->cart->id;
}
}
// Check customizable fields
if (!$product->hasAllRequiredCustomizableFields() && !$this->customization_id) {
$this->{$ErrorKey}[] = $this->trans(
'Please fill in all of the required fields, and then save your customizations.',
[],
'Shop.Notifications.Error'
);
}
$update_quantity = $this->context->cart->updateQty(
$this->qty,
$this->id_product,
$this->id_product_attribute,
$this->customization_id,
Tools::getValue('op', 'up'),
$this->id_address_delivery,
null,
true,
true
);
if ($update_quantity < 0) {
// If product has attribute, minimal quantity is set with minimal quantity of attribute
$minimal_quantity = ($this->id_product_attribute)
? ProductAttribute::getAttributeMinimalQty($this->id_product_attribute)
: $product->minimal_quantity;
$this->{$ErrorKey}[] = $this->trans(
'You must add %quantity% minimum quantity',
['%quantity%' => $minimal_quantity],
'Shop.Notifications.Error'
);
} elseif (!$update_quantity) {
$this->errors[] = $this->trans(
'You already have the maximum quantity available for this product.',
[],
'Shop.Notifications.Error'
);
} elseif ($this->shouldAvailabilityErrorBeRaised($product, $qty_to_check)) {
/*
* If the product can't be in the cart in this quantity, we raise an error.
* For the purpose of this error message, we must get the real quantity in stock.
* No subtracting of quantity in the cart here.
*/
$availableProductQuantity = Product::getQuantity($this->id_product, $this->id_product_attribute);
$this->{$ErrorKey}[] = $this->trans(
'You can only buy %quantity% "%product%". Please adjust the quantity in your cart to continue.',
[
'%product%' => $product->name,
'%quantity%' => $availableProductQuantity,
],
'Shop.Notifications.Error'
);
}
}
// Check validity of all cart rules in cart and check if there are some automatic ones that should be applied
CartRule::autoRemoveFromCart();
CartRule::autoAddToCart();
// Finally check that all other products are also available, but only if there was no previous error
if ('add' !== $mode && empty($this->{$ErrorKey})) {
$areProductsAvailable = $this->areProductsAvailable();
if (true !== $areProductsAvailable) {
$this->{$ErrorKey}[] = $areProductsAvailable;
}
}
}
/**
* @param array $productInCart
*
* @return bool
*/
public function productInCartMatchesCriteria($productInCart)
{
return (
!isset($this->id_product_attribute) ||
(
$productInCart['id_product_attribute'] == $this->id_product_attribute &&
$productInCart['id_customization'] == $this->customization_id
)
) && isset($this->id_product) && $productInCart['id_product'] == $this->id_product;
}
public function getTemplateVarPage()
{
$page = parent::getTemplateVarPage();
$presented_cart = $this->cart_presenter->present($this->context->cart);
if (count($presented_cart['products']) == 0) {
$page['body_classes']['cart-empty'] = true;
}
return $page;
}
/**
* Check product quantity availability to acknowledge whether
* an availability error should be raised.
*
* If shop has been configured to oversell, answer is no.
* If there is no items available (no stock), answer is yes.
* If there is items available, but the Cart already contains more than the quantity,
* answer is yes.
*
* @param Product $product
* @param int $qtyToCheck
*
* @return bool
*/
protected function shouldAvailabilityErrorBeRaised($product, $qtyToCheck)
{
if (($this->id_product_attribute)) {
return !Product::isAvailableWhenOutOfStock($product->out_of_stock)
&& !ProductAttribute::checkAttributeQty($this->id_product_attribute, $qtyToCheck);
} elseif (Product::isAvailableWhenOutOfStock($product->out_of_stock)) {
return false;
}
/*
* We check if this product is out-of-stock.
*/
$availableProductQuantity = Product::getQuantity($this->id_product, $this->id_product_attribute);
if ($availableProductQuantity < $qtyToCheck) {
return true;
}
// Check if this product is out-of-stock after cart quantities have been removed from stock
// Be aware that Product::getQuantity() returns the available quantity after decreasing products in cart
$productQuantityAvailableAfterCartItemsHaveBeenRemovedFromStock = Product::getQuantity(
$this->id_product,
$this->id_product_attribute,
null,
$this->context->cart,
false
);
return $productQuantityAvailableAfterCartItemsHaveBeenRemovedFromStock < 0;
}
/**
* Check if the products in the cart are available.
* This is a general check that is handy when you want to check whole cart,
* for example when loading the cart or order page.
*
* @return bool|string
*/
protected function areProductsAvailable()
{
$products = $this->context->cart->getProducts();
foreach ($products as $product) {
$currentProduct = new Product();
$currentProduct->hydrate($product);
if ($currentProduct->hasAttributes() && $product['id_product_attribute'] === '0') {
return $this->trans(
'The item %product% in your cart is now a product with attributes. Please delete it and choose one of its combinations to proceed with your order.',
['%product%' => $product['name']],
'Shop.Notifications.Error'
);
}
}
$product = $this->context->cart->checkQuantities(true);
if (true === $product || !is_array($product)) {
return true;
}
if ($product['active']) {
return $this->trans(
'You can only buy %quantity% "%product%". Please adjust the quantity in your cart to continue.',
[
'%product%' => $product['name'],
'%quantity%' => $product['quantity_available'],
],
'Shop.Notifications.Error'
);
}
return $this->trans(
'This product (%product%) is no longer available.',
['%product%' => $product['name']],
'Shop.Notifications.Error'
);
}
/**
* Check that minimal quantity conditions are respected for each product in the cart
*/
private function checkCartProductsMinimalQuantities()
{
$productList = $this->context->cart->getProducts();
foreach ($productList as $product) {
if ($product['minimal_quantity'] > $product['cart_quantity']) {
// display minimal quantity warning error message
$this->errors[] = $this->trans(
'The minimum purchase order quantity for the product %product% is %quantity%.',
[
'%product%' => $product['name'],
'%quantity%' => $product['minimal_quantity'],
],
'Shop.Notifications.Error'
);
}
}
}
}
xxxxx1.0, XXX xxxx