installer: security improvements

2014-10-09 13:11:25 +03:00
parent d2669dba5e
commit 7cfc539ce9
7 changed files with 91 additions and 38 deletions
@@ -0,0 +1,46 @@
+<?php
+/************************************************************************
+ * This file is part of EspoCRM.
+ *
+ * EspoCRM - Open Source CRM application.
+ * Copyright (C) 2014  Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
+ * Website: http://www.espocrm.com
+ *
+ * EspoCRM is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * EspoCRM is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with EspoCRM. If not, see http://www.gnu.org/licenses/.
+ ************************************************************************/
+
+class Utils
+{
+	static public $actionPath = 'install/core/actions';
+
+	static public function isActionExists($actionName)
+	{
+		$actionPath = static::$actionPath;
+		$actionFileName = $actionName . '.php';
+		$actionRealPath = realpath($actionPath . '/' . $actionFileName);
+
+		$fileManager = new \Espo\Core\Utils\File\Manager();
+		$actionList = $fileManager->getFileList($actionPath);
+
+		foreach ($actionList as $fileName) {
+			$fileRealPath = realpath($actionPath . '/' . $fileName);
+
+			if ($fileRealPath === $actionRealPath) {
+				return true;
+			}
+		}
+
+		return false;
+	}
+}