AjaxController.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Install\Controller;

class AjaxController extends AbstractController {

    protected $unauthorized = 'unauthorized';

    protected $authenticationActions = array(
        'extensionCompatibilityTester',
        'uninstallExtension',
        'clearCache',
        'coreUpdateUpdateVersionMatrix',
        'coreUpdateIsUpdateAvailable',
        'coreUpdateCheckPreConditions',
        'coreUpdateDownload',
        'coreUpdateVerifyChecksum',
        'coreUpdateUnpack',
        'coreUpdateMove',
        'coreUpdateActivate',
        'folderStatus',
        'environmentStatus'
    );

    public function execute() {
        $this->loadBaseExtensions();
        $this->initializeObjectManager();
        // Warning: Order of these methods is security relevant and interferes with different access
        // conditions (new/existing installation). See the single method comments for details.
        $this->outputInstallToolNotEnabledMessageIfNeeded();
        $this->checkInstallToolPasswordNotSet();
        $this->initializeSession();
        $this->checkSessionToken();
        $this->checkSessionLifetime();
        $this->checkLogin();
        $this->dispatchAuthenticationActions();
    }

    protected function outputInstallToolNotEnabledMessageIfNeeded() {
        if (!$this->isInstallToolAvailable()) {
            $this->output($this->unauthorized);
        }
    }

    protected function checkInstallToolPasswordNotSet() {
        if (empty($GLOBALS['TYPO3_CONF_VARS']['BE']['installToolPassword'])) {
            $this->output($this->unauthorized);
        }
    }

    protected function checkLogin() {
        if (!$this->session->isAuthorized()) {
            $this->output($this->unauthorized);
        } else {
            $this->session->refreshSession();
        }
    }

    protected function handleSessionTokenCheck($tokenOk) {
        if (!$tokenOk) {
            $this->output($this->unauthorized);
        }
    }

    protected function handleSessionLifeTimeExpired() {
        $this->output($this->unauthorized);
    }

    protected function dispatchAuthenticationActions() {
        $action = $this->getAction();
        if ($action === '') {
            $this->output('noAction');
        }
        $this->validateAuthenticationAction($action);
        $actionClass = ucfirst($action);
        $toolAction = $this->objectManager->get('TYPO3\\CMS\\Install\\Controller\\Action\\Ajax\\' . $actionClass);
        if (!($toolAction instanceof Action\ActionInterface)) {
            throw new Exception(
                $action . ' does not implement ActionInterface',
                1369474308
            );
        }
        $toolAction->setController('ajax');
        $toolAction->setAction($action);
        $toolAction->setToken($this->generateTokenForAction($action));
        $toolAction->setPostValues($this->getPostValues());
        $this->output($toolAction->handle());
    }

    protected function output($content = '') {
        ob_clean();
        header('Content-Type: application/json; charset=utf-8');
        header('Cache-Control: no-cache, must-revalidate');
        header('Pragma: no-cache');
        echo $content;
        die;
    }
}