AjaxController.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Install\Controller;

/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */

class AjaxController extends AbstractController
{
    protected $unauthorized = 'unauthorized';

    protected $authenticationActions = [
        'extensionCompatibilityTester',
        'uninstallExtension',
        'clearCache',
        'coreUpdateUpdateVersionMatrix',
        'coreUpdateIsUpdateAvailable',
        'coreUpdateCheckPreConditions',
        'coreUpdateDownload',
        'coreUpdateVerifyChecksum',
        'coreUpdateUnpack',
        'coreUpdateMove',
        'coreUpdateActivate',
        'folderStatus',
        'environmentStatus'
    ];

    public function execute()
    {
        $this->loadBaseExtensions();
        $this->initializeObjectManager();
        // Warning: Order of these methods is security relevant and interferes with different access
        // conditions (new/existing installation). See the single method comments for details.
        $this->outputInstallToolNotEnabledMessageIfNeeded();
        $this->checkInstallToolPasswordNotSet();
        $this->initializeSession();
        $this->checkSessionToken();
        $this->checkSessionLifetime();
        $this->checkLogin();
        $this->dispatchAuthenticationActions();
    }

    protected function outputInstallToolNotEnabledMessageIfNeeded()
    {
        if (!$this->isInstallToolAvailable()) {
            $this->output($this->unauthorized);
        }
    }

    protected function checkInstallToolPasswordNotSet()
    {
        if (empty($GLOBALS['TYPO3_CONF_VARS']['BE']['installToolPassword'])) {
            $this->output($this->unauthorized);
        }
    }

    protected function checkLogin()
    {
        if (!$this->session->isAuthorized()) {
            $this->output($this->unauthorized);
        } else {
            $this->session->refreshSession();
        }
    }

    protected function handleSessionTokenCheck($tokenOk)
    {
        if (!$tokenOk) {
            $this->output($this->unauthorized);
        }
    }

    protected function handleSessionLifeTimeExpired()
    {
        $this->output($this->unauthorized);
    }

    protected function dispatchAuthenticationActions()
    {
        $action = $this->getAction();
        if ($action === '') {
            $this->output('noAction');
        }
        $this->validateAuthenticationAction($action);
        $actionClass = ucfirst($action);
        $toolAction = $this->objectManager->get('TYPO3\\CMS\\Install\\Controller\\Action\\Ajax\\' . $actionClass);
        if (!($toolAction instanceof Action\ActionInterface)) {
            throw new Exception(
                $action . ' does not implement ActionInterface',
                1369474308
            );
        }
        $toolAction->setController('ajax');
        $toolAction->setAction($action);
        $toolAction->setToken($this->generateTokenForAction($action));
        $toolAction->setPostValues($this->getPostValues());
        $this->output($toolAction->handle());
    }

    protected function output($content = '')
    {
        ob_clean();
        header('Content-Type: application/json; charset=utf-8');
        header('Cache-Control: no-cache, must-revalidate');
        header('Pragma: no-cache');
        echo $content;
        die;
    }
}