You are on page 1of 270

<?

php
/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/*
Akeeba Kickstart - The server-side archive extraction wizard
Copyright (C) 2008-2019 Nicholas K. Dionysopoulos / AkeebaBackup.com

This program is free software: you can redistribute it and/or modify


it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,


but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/

// Uncomment the following line to enable Kickstart's debug mode


//define('KSDEBUG', 1);

//
===================================================================================
==================================
// DO NOT MODIFY BELOW THIS LINE
//
===================================================================================
==================================
define('KICKSTART', 1);

if (!defined('VERSION'))
{
define('VERSION', '6.0.1');
}

if (!defined('KICKSTARTPRO'))
{
define('KICKSTARTPRO', '0');
}
// Used during development
if (!defined('KSDEBUG') && isset($_SERVER) && isset($_SERVER['HTTP_HOST']) &&
(strpos($_SERVER['HTTP_HOST'], 'local.web') !== false))
{
define('KSDEBUG', 1);
}

define('KSWINDOWS', substr(PHP_OS, 0, 3) == 'WIN');

if (!defined('KSROOTDIR'))
{
define('KSROOTDIR', dirname(__FILE__));
}

if (defined('KSDEBUG'))
{
ini_set('error_log', KSROOTDIR . '/kickstart_error_log');
if (file_exists(KSROOTDIR . '/kickstart_error_log'))
{
@unlink(KSROOTDIR . '/kickstart_error_log');
}
error_reporting(E_ALL | E_STRICT);
}
else
{
@error_reporting(E_NONE);
}

//
===================================================================================
=======
// IIS missing REQUEST_URI workaround
//
===================================================================================
=======

/*
* Based REQUEST_URI for IIS Servers 1.0 by NeoSmart Technologies
* The proper method to solve IIS problems is to take a look at this:
* http://neosmart.net/dl.php?id=7
*/

//This file should be located in the same directory as php.exe or php5isapi.dll

if (!isset($_SERVER['REQUEST_URI']))
{
if (isset($_SERVER['HTTP_REQUEST_URI']))
{
$_SERVER['REQUEST_URI'] = $_SERVER['HTTP_REQUEST_URI'];
//Good to go!
}
else
{
//Someone didn't follow the instructions!
if (isset($_SERVER['SCRIPT_NAME']))
{
$_SERVER['HTTP_REQUEST_URI'] = $_SERVER['SCRIPT_NAME'];
}
else
{
$_SERVER['HTTP_REQUEST_URI'] = $_SERVER['PHP_SELF'];
}
if (isset($_SERVER['QUERY_STRING']) && !
empty($_SERVER['QUERY_STRING']))
{
$_SERVER['HTTP_REQUEST_URI'] .= '?' . $_SERVER['QUERY_STRING'];
}
//WARNING: This is a workaround!
//For guaranteed compatibility, HTTP_REQUEST_URI *MUST* be defined!
//See product documentation for instructions!
$_SERVER['REQUEST_URI'] = $_SERVER['HTTP_REQUEST_URI'];
}
}

// Define the cacert.pem location, if it exists


$cacertpem = KSROOTDIR . '/cacert.pem';
if (is_file($cacertpem))
{
if (is_readable($cacertpem))
{
define('AKEEBA_CACERT_PEM', $cacertpem);
}
}
unset($cacertpem);

/**
* Loads other PHP files containing extra Kickstart features. You can do all sorts
of tricks such as injecting HTML
* and CSS code (see AKFeatureGeorgeWSpecialEdition), adding AJAX task handlers
(see AKFeatureURLImport) etc.
*
* Feature files must follow one of the following naming conventions:
*
* - kickstart.SOMETHING.php
* - script_basename.SOMETHING.php
*
* where script_basename is the base name of Kickstart's PHP file. If you have
renamed kickstart.php to foobar.php this
* means that feature files must be named foobar.SOMETHING.php.
*
* The file must contain a class whose name starts with "AKFeature". The rest of
the name is irrelevant and does not
* have to follow a convention. It is, however, prudent to name the class using
something similar to the filename it is
* stored in to preserve your sanity and avoid potential conflicts.
*
* The class is instantiated ONLY ONCE, when the first call to callExtraFeature()
is made. Its methods are called using
* callExtraFeature() from Kickstart's (non-user-modifiable) code.
*/
function importKickstartFeatures($directory, $prefixes = array('kickstart'))
{
$dh = @opendir($directory);

if ($dh === false)


{
return;
}
// Make sure the prefixes include 'kickstart' and our basename
if (!in_array('kickstart', $prefixes))
{
$prefixes[] = 'kickstart';
}

$selfBasename = basename(defined('KSSELFNAME') ? KSSELFNAME :


basename(__FILE__), '.php');

if (!in_array($selfBasename, $prefixes))
{
$prefixes[] = $selfBasename;
}

// Loop all files in the directory


while ($filename = readdir($dh))
{
if (in_array($filename, array('.', '..')))
{
continue;
}

if (!is_file($directory . '/' . $filename))


{
continue;
}

// Feature files must be prefixed with one of the prefixes.


$found = false;

foreach ($prefixes as $prefix)


{
if (substr($filename, 0, strlen($prefix) + 1) == ($prefix . '.'))
{
$found = true;
break;
}
}

if (!$found)
{
continue;
}

if (substr($filename, -4) != '.php')


{
continue;
}

/**
* We have to ignore files which are just the prefix and a .php
extension (because one of these scripts is the
* currently executing script).
*/
foreach ($prefixes as $prefix)
{
if ($filename == ($prefix . '.php'))
{
continue 2;
}
}

// Op-code busting before loading the feature (in case it's self-
modifying)
if (function_exists('opcache_invalidate'))
{
opcache_invalidate($directory . '/' . $filename);
}

if (function_exists('apc_compile_file'))
{
apc_compile_file($directory . '/' . $filename);
}

if (function_exists('wincache_refresh_if_changed'))
{
wincache_refresh_if_changed(array($directory . '/' . $filename));
}

if (function_exists('xcache_asm'))
{
xcache_asm($directory . '/' . $filename);
}

include_once $directory . '/' . $filename;


}
}

// Import Kickstart features from the top level directory


importKickstartFeatures(KSROOTDIR);

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

define('_AKEEBA_RESTORATION', 1);
defined('DS') or define('DS', DIRECTORY_SEPARATOR);

// Unarchiver run states


define('AK_STATE_NOFILE', 0); // File header not read yet
define('AK_STATE_HEADER', 1); // File header read; ready to process data
define('AK_STATE_DATA', 2); // Processing file data
define('AK_STATE_DATAREAD', 3); // Finished processing file data; ready to post-
process
define('AK_STATE_POSTPROC', 4); // Post-processing
define('AK_STATE_DONE', 5); // Done with post-processing

/* Windows system detection */


if (!defined('_AKEEBA_IS_WINDOWS'))
{
if (function_exists('php_uname'))
{
define('_AKEEBA_IS_WINDOWS', stristr(php_uname(), 'windows'));
}
else
{
define('_AKEEBA_IS_WINDOWS', DIRECTORY_SEPARATOR == '\\');
}
}

// Get the file's root


if (!defined('KSROOTDIR'))
{
define('KSROOTDIR', dirname(__FILE__));
}
if (!defined('KSLANGDIR'))
{
define('KSLANGDIR', KSROOTDIR);
}

// Make sure the locale is correct for basename() to work


if (function_exists('setlocale'))
{
@setlocale(LC_ALL, 'en_US.UTF8');
}

// fnmatch not available on non-POSIX systems


// Thanks to soywiz@php.net for this usefull alternative function
[http://gr2.php.net/fnmatch]
if (!function_exists('fnmatch'))
{
function fnmatch($pattern, $string)
{
return @preg_match(
'/^' . strtr(addcslashes($pattern, '/\\.+^$(){}=!<>|'),
array('*' => '.*', '?' => '.?')) . '$/i', $string
);
}
}

// Unicode-safe binary data length function


if (!function_exists('akstringlen'))
{
if (function_exists('mb_strlen'))
{
function akstringlen($string)
{
return mb_strlen($string, '8bit');
}
}
else
{
function akstringlen($string)
{
return strlen($string);
}
}
}

if (!function_exists('aksubstr'))
{
if (function_exists('mb_strlen'))
{
function aksubstr($string, $start, $length = null)
{
return mb_substr($string, $start, $length, '8bit');
}
}
else
{
function aksubstr($string, $start, $length = null)
{
return substr($string, $start, $length);
}
}
}

/**
* Gets a query parameter from GET or POST data
*
* @param $key
* @param $default
*/
function getQueryParam($key, $default = null)
{
$value = $default;

if (array_key_exists($key, $_REQUEST))
{
$value = $_REQUEST[$key];
}

if (get_magic_quotes_gpc() && !is_null($value))


{
$value = stripslashes($value);
}

return $value;
}

// Debugging function
function debugMsg($msg)
{
if (!defined('KSDEBUG'))
{
return;
}

$fp = fopen('debug.txt', 'at');

fwrite($fp, $msg . "\n");


fclose($fp);

// Echo to stdout if KSDEBUGCLI is defined


if (defined('KSDEBUGCLI'))
{
echo $msg . "\n";
}
}
/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* The base class of Akeeba Engine objects. Allows for error and warnings logging
* and propagation. Largely based on the Joomla! 1.5 JObject class.
*/
abstract class AKAbstractObject
{
/** @var array The queue size of the $_errors array. Set to 0 for
infinite size. */
protected $_errors_queue_size = 0;
/** @var array The queue size of the $_warnings array. Set to 0 for
infinite size. */
protected $_warnings_queue_size = 0;
/** @var array An array of errors */
private $_errors = array();
/** @var array An array of warnings */
private $_warnings = array();

/**
* Public constructor, makes sure we are instantiated only by the factory
class
*/
public function __construct()
{
/*
// Assisted Singleton pattern
if(function_exists('debug_backtrace'))
{
$caller=debug_backtrace();
if(
($caller[1]['class'] != 'AKFactory') &&
($caller[2]['class'] != 'AKFactory') &&
($caller[3]['class'] != 'AKFactory') &&
($caller[4]['class'] != 'AKFactory')
) {
var_dump(debug_backtrace());
trigger_error("You can't create direct descendants of
".__CLASS__, E_USER_ERROR);
}
}
*/
}

/**
* Get the most recent error message
*
* @param integer $i Optional error index
*
* @return string Error message
*/
public function getError($i = null)
{
return $this->getItemFromArray($this->_errors, $i);
}

/**
* Returns the last item of a LIFO string message queue, or a specific item
* if so specified.
*
* @param array $array An array of strings, holding messages
* @param int $i Optional message index
*
* @return mixed The message string, or false if the key doesn't exist
*/
private function getItemFromArray($array, $i = null)
{
// Find the item
if ($i === null)
{
// Default, return the last item
$item = end($array);
}
else if (!array_key_exists($i, $array))
{
// If $i has been specified but does not exist, return false
return false;
}
else
{
$item = $array[$i];
}

return $item;
}

/**
* Return all errors, if any
*
* @return array Array of error messages
*/
public function getErrors()
{
return $this->_errors;
}

/**
* Resets all error messages
*/
public function resetErrors()
{
$this->_errors = array();
}

/**
* Get the most recent warning message
*
* @param integer $i Optional warning index
*
* @return string Error message
*/
public function getWarning($i = null)
{
return $this->getItemFromArray($this->_warnings, $i);
}

/**
* Return all warnings, if any
*
* @return array Array of error messages
*/
public function getWarnings()
{
return $this->_warnings;
}

/**
* Resets all warning messages
*/
public function resetWarnings()
{
$this->_warnings = array();
}

/**
* Propagates errors and warnings to a foreign object. The foreign object
SHOULD
* implement the setError() and/or setWarning() methods but DOESN'T HAVE TO
be of
* AKAbstractObject type. For example, this can even be used to propagate to
a
* JObject instance in Joomla!. Propagated items will be removed from
ourselves.
*
* @param object $object The object to propagate errors and warnings to.
*/
public function propagateToObject(&$object)
{
// Skip non-objects
if (!is_object($object))
{
return;
}

if (method_exists($object, 'setError'))
{
if (!empty($this->_errors))
{
foreach ($this->_errors as $error)
{
$object->setError($error);
}
$this->_errors = array();
}
}

if (method_exists($object, 'setWarning'))
{
if (!empty($this->_warnings))
{
foreach ($this->_warnings as $warning)
{
$object->setWarning($warning);
}
$this->_warnings = array();
}
}
}

/**
* Propagates errors and warnings from a foreign object. Each propagated list
is
* then cleared on the foreign object, as long as it implements resetErrors()
and/or
* resetWarnings() methods.
*
* @param object $object The object to propagate errors and warnings from
*/
public function propagateFromObject(&$object)
{
if (method_exists($object, 'getErrors'))
{
$errors = $object->getErrors();
if (!empty($errors))
{
foreach ($errors as $error)
{
$this->setError($error);
}
}
if (method_exists($object, 'resetErrors'))
{
$object->resetErrors();
}
}

if (method_exists($object, 'getWarnings'))
{
$warnings = $object->getWarnings();
if (!empty($warnings))
{
foreach ($warnings as $warning)
{
$this->setWarning($warning);
}
}
if (method_exists($object, 'resetWarnings'))
{
$object->resetWarnings();
}
}
}

/**
* Add an error message
*
* @param string $error Error message
*/
public function setError($error)
{
if ($this->_errors_queue_size > 0)
{
if (count($this->_errors) >= $this->_errors_queue_size)
{
array_shift($this->_errors);
}
}

$this->_errors[] = $error;
}

/**
* Add an error message
*
* @param string $error Error message
*/
public function setWarning($warning)
{
if ($this->_warnings_queue_size > 0)
{
if (count($this->_warnings) >= $this->_warnings_queue_size)
{
array_shift($this->_warnings);
}
}

$this->_warnings[] = $warning;
}

/**
* Sets the size of the error queue (acts like a LIFO buffer)
*
* @param int $newSize The new queue size. Set to 0 for infinite length.
*/
protected function setErrorsQueueSize($newSize = 0)
{
$this->_errors_queue_size = (int) $newSize;
}

/**
* Sets the size of the warnings queue (acts like a LIFO buffer)
*
* @param int $newSize The new queue size. Set to 0 for infinite length.
*/
protected function setWarningsQueueSize($newSize = 0)
{
$this->_warnings_queue_size = (int) $newSize;
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* The superclass of all Akeeba Kickstart parts. The "parts" are intelligent
stateful
* classes which perform a single procedure and have preparation, running and
* finalization phases. The transition between phases is handled automatically by
* this superclass' tick() final public method, which should be the ONLY public API
* exposed to the rest of the Akeeba Engine.
*/
abstract class AKAbstractPart extends AKAbstractObject
{
/**
* Indicates whether this part has finished its initialisation cycle
*
* @var boolean
*/
protected $isPrepared = false;

/**
* Indicates whether this part has more work to do (it's in running state)
*
* @var boolean
*/
protected $isRunning = false;

/**
* Indicates whether this part has finished its finalization cycle
*
* @var boolean
*/
protected $isFinished = false;

/**
* Indicates whether this part has finished its run cycle
*
* @var boolean
*/
protected $hasRan = false;

/**
* The name of the engine part (a.k.a. Domain), used in return table
* generation.
*
* @var string
*/
protected $active_domain = "";

/**
* The step this engine part is in. Used verbatim in return table and
* should be set by the code in the _run() method.
*
* @var string
*/
protected $active_step = "";

/**
* A more detailed description of the step this engine part is in. Used
* verbatim in return table and should be set by the code in the _run()
* method.
*
* @var string
*/
protected $active_substep = "";

/**
* Any configuration variables, in the form of an array.
*
* @var array
*/
protected $_parametersArray = array();

/** @var string The database root key */


protected $databaseRoot = array();
/** @var array An array of observers */
protected $observers = array();
/** @var int Last reported warnings's position in array */
private $warnings_pointer = -1;

/**
* The public interface to an engine part. This method takes care for
* calling the correct method in order to perform the initialisation -
* run - finalisation cycle of operation and return a proper response array.
*
* @return array A Response Array
*/
final public function tick()
{
// Call the right action method, depending on engine part state
switch ($this->getState())
{
case "init":
$this->_prepare();
break;
case "prepared":
$this->_run();
break;
case "running":
$this->_run();
break;
case "postrun":
$this->_finalize();
break;
}

// Send a Return Table back to the caller


$out = $this->_makeReturnTable();

return $out;
}

/**
* Returns the state of this engine part.
*
* @return string The state of this engine part. It can be one of
* error, init, prepared, running, postrun, finished.
*/
final public function getState()
{
if ($this->getError())
{
return "error";
}

if (!($this->isPrepared))
{
return "init";
}

if (!($this->isFinished) && !($this->isRunning) && !($this->hasRun) &&


($this->isPrepared))
{
return "prepared";
}

if (!($this->isFinished) && $this->isRunning && !($this->hasRun))


{
return "running";
}

if (!($this->isFinished) && !($this->isRunning) && $this->hasRun)


{
return "postrun";
}

if ($this->isFinished)
{
return "finished";
}
}

/**
* Runs the preparation for this part. Should set _isPrepared
* to true
*/
abstract protected function _prepare();

/**
* Runs the main functionality loop for this part. Upon calling,
* should set the _isRunning to true. When it finished, should set
* the _hasRan to true. If an error is encountered, setError should
* be used.
*/
abstract protected function _run();

/**
* Runs the finalisation process for this part. Should set
* _isFinished to true.
*/
abstract protected function _finalize();

/**
* Constructs a Response Array based on the engine part's state.
*
* @return array The Response Array for the current state
*/
final protected function _makeReturnTable()
{
// Get a list of warnings
$warnings = $this->getWarnings();
// Report only new warnings if there is no warnings queue size
if ($this->_warnings_queue_size == 0)
{
if (($this->warnings_pointer > 0) && ($this->warnings_pointer <
(count($warnings))))
{
$warnings = array_slice($warnings, $this->warnings_pointer
+ 1);
$this->warnings_pointer += count($warnings);
}
else
{
$this->warnings_pointer = count($warnings);
}
}

$out = array(
'HasRun' => (!($this->isFinished)),
'Domain' => $this->active_domain,
'Step' => $this->active_step,
'Substep' => $this->active_substep,
'Error' => $this->getError(),
'Warnings' => $warnings
);

return $out;
}

/**
* Returns a copy of the class's status array
*
* @return array
*/
public function getStatusArray()
{
return $this->_makeReturnTable();
}

/**
* Sends any kind of setup information to the engine part. Using this,
* we avoid passing parameters to the constructor of the class. These
* parameters should be passed as an indexed array and should be taken
* into account during the preparation process only. This function will
* set the error flag if it's called after the engine part is prepared.
*
* @param array $parametersArray The parameters to be passed to the
* engine part.
*/
final public function setup($parametersArray)
{
if ($this->isPrepared)
{
$this->setState('error', "Can't modify configuration after the
preparation of " . $this->active_domain);
}
else
{
$this->_parametersArray = $parametersArray;
if (array_key_exists('root', $parametersArray))
{
$this->databaseRoot = $parametersArray['root'];
}
}
}

/**
* Sets the engine part's internal state, in an easy to use manner
*
* @param string $state One of init, prepared, running, postrun,
finished, error
* @param string $errorMessage The reported error message, should the
state be set to error
*/
protected function setState($state = 'init', $errorMessage = 'Invalid
setState argument')
{
switch ($state)
{
case 'init':
$this->isPrepared = false;
$this->isRunning = false;
$this->isFinished = false;
$this->hasRun = false;
break;

case 'prepared':
$this->isPrepared = true;
$this->isRunning = false;
$this->isFinished = false;
$this->hasRun = false;
break;

case 'running':
$this->isPrepared = true;
$this->isRunning = true;
$this->isFinished = false;
$this->hasRun = false;
break;

case 'postrun':
$this->isPrepared = true;
$this->isRunning = false;
$this->isFinished = false;
$this->hasRun = true;
break;

case 'finished':
$this->isPrepared = true;
$this->isRunning = false;
$this->isFinished = true;
$this->hasRun = false;
break;

case 'error':
default:
$this->setError($errorMessage);
break;
}
}

final public function getDomain()


{
return $this->active_domain;
}

final public function getStep()


{
return $this->active_step;
}

final public function getSubstep()


{
return $this->active_substep;
}

/**
* Attaches an observer object
*
* @param AKAbstractPartObserver $obs
*/
function attach(AKAbstractPartObserver $obs)
{
$this->observers["$obs"] = $obs;
}

/**
* Detaches an observer object
*
* @param AKAbstractPartObserver $obs
*/
function detach(AKAbstractPartObserver $obs)
{
unset($this->observers["$obs"]);
}

/**
* Sets the BREAKFLAG, which instructs this engine part that the current step
must break immediately,
* in fear of timing out.
*/
protected function setBreakFlag()
{
AKFactory::set('volatile.breakflag', true);
}

final protected function setDomain($new_domain)


{
$this->active_domain = $new_domain;
}

final protected function setStep($new_step)


{
$this->active_step = $new_step;
}
final protected function setSubstep($new_substep)
{
$this->active_substep = $new_substep;
}

/**
* Notifies observers each time something interesting happened to the part
*
* @param mixed $message The event object
*/
protected function notify($message)
{
foreach ($this->observers as $obs)
{
$obs->update($this, $message);
}
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* The base class of unarchiver classes
*/
abstract class AKAbstractUnarchiver extends AKAbstractPart
{
/** @var array List of the names of all archive parts */
public $archiveList = array();
/** @var int The total size of all archive parts */
public $totalSize = array();
/** @var array Which files to rename */
public $renameFiles = array();
/** @var array Which directories to rename */
public $renameDirs = array();
/** @var array Which files to skip */
public $skipFiles = array();
/** @var string Archive filename */
protected $filename = null;
/** @var integer Current archive part number */
protected $currentPartNumber = -1;
/** @var integer The offset inside the current part */
protected $currentPartOffset = 0;
/** @var bool Should I restore permissions? */
protected $flagRestorePermissions = false;
/** @var AKAbstractPostproc Post processing class */
protected $postProcEngine = null;
/** @var string Absolute path to prepend to extracted files */
protected $addPath = '';
/** @var string Absolute path to remove from extracted files */
protected $removePath = '';
/** @var integer Chunk size for processing */
protected $chunkSize = 524288;

/** @var resource File pointer to the current archive part file */
protected $fp = null;

/** @var int Run state when processing the current archive file */
protected $runState = null;

/** @var stdClass File header data, as read by the readFileHeader() method */
protected $fileHeader = null;

/** @var int How much of the uncompressed data we've read so far */
protected $dataReadLength = 0;

/** @var array Unwriteable files in these directories are always ignored and
do not cause errors when not extracted */
protected $ignoreDirectories = array();

/**
* Public constructor
*/
public function __construct()
{
parent::__construct();
}

/**
* Wakeup function, called whenever the class is unserialized
*/
public function __wakeup()
{
if ($this->currentPartNumber >= 0)
{
$this->fp = @fopen($this->archiveList[$this->currentPartNumber],
'rb');
if ((is_resource($this->fp)) && ($this->currentPartOffset > 0))
{
@fseek($this->fp, $this->currentPartOffset);
}
}
}

/**
* Sleep function, called whenever the class is serialized
*/
public function shutdown()
{
if (is_resource($this->fp))
{
$this->currentPartOffset = @ftell($this->fp);
@fclose($this->fp);
}
}

/**
* Is this file or directory contained in a directory we've decided to ignore
* write errors for? This is useful to let the extraction work despite write
* errors in the log, logs and tmp directories which MIGHT be used by the
system
* on some low quality hosts and Plesk-powered hosts.
*
* @param string $shortFilename The relative path of the file/directory in
the package
*
* @return boolean True if it belongs in an ignored directory
*/
public function isIgnoredDirectory($shortFilename)
{
// return false;

if (substr($shortFilename, -1) == '/')


{
$check = rtrim($shortFilename, '/');
}
else
{
$check = dirname($shortFilename);
}

return in_array($check, $this->ignoreDirectories);


}

/**
* Implements the abstract _prepare() method
*/
final protected function _prepare()
{
parent::__construct();

if (count($this->_parametersArray) > 0)
{
foreach ($this->_parametersArray as $key => $value)
{
switch ($key)
{
// Archive's absolute filename
case 'filename':
$this->filename = $value;

// Sanity check
if (!empty($value))
{
$value = strtolower($value);

if (strlen($value) > 6)
{
if (
(substr($value, 0, 7) ==
'http://')
|| (substr($value, 0, 8) ==
'https://')
|| (substr($value, 0, 6) ==
'ftp://')
|| (substr($value, 0, 7) ==
'ssh2://')
|| (substr($value, 0, 6) ==
'ssl://')
)
{
$this->setState('error',
'Invalid archive location');
}
}
}

break;

// Should I restore permissions?


case 'restore_permissions':
$this->flagRestorePermissions = $value;
break;

// Should I use FTP?


case 'post_proc':
$this->postProcEngine =
AKFactory::getpostProc($value);
break;

// Path to add in the beginning


case 'add_path':
$this->addPath = $value;
$this->addPath = str_replace('\\', '/', $this-
>addPath);
$this->addPath = rtrim($this->addPath, '/');
if (!empty($this->addPath))
{
$this->addPath .= '/';
}
break;

// Path to remove from the beginning


case 'remove_path':
$this->removePath = $value;
$this->removePath = str_replace('\\', '/',
$this->removePath);
$this->removePath = rtrim($this->removePath,
'/');
if (!empty($this->removePath))
{
$this->removePath .= '/';
}
break;

// Which files to rename (hash array)


case 'rename_files':
$this->renameFiles = $value;
break;

// Which files to rename (hash array)


case 'rename_dirs':
$this->renameDirs = $value;
break;

// Which files to skip (indexed array)


case 'skip_files':
$this->skipFiles = $value;
break;

// Which directories to ignore when we can't write


files in them (indexed array)
case 'ignoredirectories':
$this->ignoreDirectories = $value;
break;
}
}
}

$this->scanArchives();

$this->readArchiveHeader();
$errMessage = $this->getError();
if (!empty($errMessage))
{
$this->setState('error', $errMessage);
}
else
{
$this->runState = AK_STATE_NOFILE;
$this->setState('prepared');
}
}

/**
* Scans for archive parts
*/
private function scanArchives()
{
if (defined('KSDEBUG'))
{
@unlink('debug.txt');
}
debugMsg('Preparing to scan archives');

$privateArchiveList = array();

// Get the components of the archive filename


$dirname = dirname($this->filename);
$base_extension = $this->getBaseExtension();
$basename = basename($this->filename, $base_extension);
$this->totalSize = 0;

// Scan for multiple parts until we don't find any more of them
$count = 0;
$found = true;
$this->archiveList = array();
while ($found)
{
++$count;
$extension = substr($base_extension, 0, 2) . sprintf('%02d',
$count);
$filename = $dirname . DIRECTORY_SEPARATOR . $basename .
$extension;
$found = file_exists($filename);
if ($found)
{
debugMsg('- Found archive ' . $filename);
// Add yet another part, with a numeric-appended filename
$this->archiveList[] = $filename;

$filesize = @filesize($filename);
$this->totalSize += $filesize;

$privateArchiveList[] = array($filename, $filesize);


}
else
{
debugMsg('- Found archive ' . $this->filename);
// Add the last part, with the regular extension
$this->archiveList[] = $this->filename;

$filename = $this->filename;
$filesize = @filesize($filename);
$this->totalSize += $filesize;

$privateArchiveList[] = array($filename, $filesize);


}
}
debugMsg('Total archive parts: ' . $count);

$this->currentPartNumber = -1;
$this->currentPartOffset = 0;
$this->runState = AK_STATE_NOFILE;

// Send start of file notification


$message = new stdClass;
$message->type = 'totalsize';
$message->content = new stdClass;
$message->content->totalsize = $this->totalSize;
$message->content->filelist = $privateArchiveList;
$this->notify($message);
}

/**
* Returns the base extension of the file, e.g. '.jpa'
*
* @return string
*/
private function getBaseExtension()
{
static $baseextension;

if (empty($baseextension))
{
$basename = basename($this->filename);
$lastdot = strrpos($basename, '.');
$baseextension = substr($basename, $lastdot);
}

return $baseextension;
}

/**
* Concrete classes are supposed to use this method in order to read the
archive's header and
* prepare themselves to the point of being ready to extract the first file.
*/
protected abstract function readArchiveHeader();

protected function _run()


{
if ($this->getState() == 'postrun')
{
return;
}

$this->setState('running');

$timer = AKFactory::getTimer();

$status = true;
while ($status && ($timer->getTimeLeft() > 0))
{
switch ($this->runState)
{
case AK_STATE_NOFILE:
debugMsg(__CLASS__ . '::_run() - Reading file
header');
$status = $this->readFileHeader();
if ($status)
{
// Send start of file notification
$message = new stdClass;
$message->type = 'startfile';
$message->content = new stdClass;
$message->content->realfile = $this-
>fileHeader->file;
$message->content->file = $this-
>fileHeader->file;
$message->content->uncompressed = $this-
>fileHeader->uncompressed;

if (array_key_exists('realfile',
get_object_vars($this->fileHeader)))
{
$message->content->realfile = $this-
>fileHeader->realFile;
}

if (array_key_exists('compressed',
get_object_vars($this->fileHeader)))
{
$message->content->compressed = $this-
>fileHeader->compressed;
}
else
{
$message->content->compressed = 0;
}

debugMsg(__CLASS__ . '::_run() - Preparing to


extract ' . $message->content->realfile);

$this->notify($message);
}
else
{
debugMsg(__CLASS__ . '::_run() - Could not read
file header');
}
break;

case AK_STATE_HEADER:
case AK_STATE_DATA:
debugMsg(__CLASS__ . '::_run() - Processing file
data');
$status = $this->processFileData();
break;

case AK_STATE_DATAREAD:
case AK_STATE_POSTPROC:
debugMsg(__CLASS__ . '::_run() - Calling post-
processing class');
$this->postProcEngine->timestamp = $this->fileHeader-
>timestamp;
$status = $this-
>postProcEngine->process();
$this->propagateFromObject($this->postProcEngine);
$this->runState = AK_STATE_DONE;
break;

case AK_STATE_DONE:
default:
if ($status)
{
debugMsg(__CLASS__ . '::_run() - Finished
extracting file');
// Send end of file notification
$message = new stdClass;
$message->type = 'endfile';
$message->content = new stdClass;
if (array_key_exists('realfile',
get_object_vars($this->fileHeader)))
{
$message->content->realfile = $this-
>fileHeader->realFile;
}
else
{
$message->content->realfile = $this-
>fileHeader->file;
}
$message->content->file = $this->fileHeader-
>file;
if (array_key_exists('compressed',
get_object_vars($this->fileHeader)))
{
$message->content->compressed = $this-
>fileHeader->compressed;
}
else
{
$message->content->compressed = 0;
}
$message->content->uncompressed = $this-
>fileHeader->uncompressed;
$this->notify($message);
}
$this->runState = AK_STATE_NOFILE;

break;
}
}

$error = $this->getError();
if (!$status && ($this->runState == AK_STATE_NOFILE) && empty($error))
{
debugMsg(__CLASS__ . '::_run() - Just finished');
// We just finished
$this->setState('postrun');
}
elseif (!empty($error))
{
debugMsg(__CLASS__ . '::_run() - Halted with an error:');
debugMsg($error);
$this->setState('error', $error);
}
}

/**
* Concrete classes must use this method to read the file header
*
* @return bool True if reading the file was successful, false if an error
occurred or we reached end of archive
*/
protected abstract function readFileHeader();

/**
* Concrete classes must use this method to process file data. It must set
$runState to AK_STATE_DATAREAD when
* it's finished processing the file data.
*
* @return bool True if processing the file data was successful, false if an
error occurred
*/
protected abstract function processFileData();

protected function _finalize()


{
// Nothing to do
$this->setState('finished');
}

/**
* Opens the next part file for reading
*/
protected function nextFile()
{
debugMsg('Current part is ' . $this->currentPartNumber . '; opening the
next part');
++$this->currentPartNumber;
if ($this->currentPartNumber > (count($this->archiveList) - 1))
{
$this->setState('postrun');

return false;
}
else
{
if (is_resource($this->fp))
{
@fclose($this->fp);
}
debugMsg('Opening file ' . $this->archiveList[$this-
>currentPartNumber]);
$this->fp = @fopen($this->archiveList[$this->currentPartNumber],
'rb');
if ($this->fp === false)
{
debugMsg('Could not open file - crash imminent');
$this-
>setError(AKText::sprintf('ERR_COULD_NOT_OPEN_ARCHIVE_PART', $this-
>archiveList[$this->currentPartNumber]));
}
fseek($this->fp, 0);
$this->currentPartOffset = 0;

return true;
}
}

/**
* Returns true if we have reached the end of file
*
* @param $local bool True to return EOF of the local file, false (default)
to return if we have reached the end of
* the archive set
*
* @return bool True if we have reached End Of File
*/
protected function isEOF($local = false)
{
$eof = @feof($this->fp);

if (!$eof)
{
// Border case: right at the part's end (eeeek!!!). For the life
of me, I don't understand why
// feof() doesn't report true. It expects the fp to be positioned
*beyond* the EOF to report
// true. Incredible! :(
$position = @ftell($this->fp);
$filesize = @filesize($this->archiveList[$this-
>currentPartNumber]);
if ($filesize <= 0)
{
// 2Gb or more files on a 32 bit version of PHP tend to get
screwed up. Meh.
$eof = false;
}
elseif ($position >= $filesize)
{
$eof = true;
}
}

if ($local)
{
return $eof;
}
else
{
return $eof && ($this->currentPartNumber >= (count($this-
>archiveList) - 1));
}
}

/**
* Tries to make a directory user-writable so that we can write a file to it
*
* @param $path string A path to a file
*/
protected function setCorrectPermissions($path)
{
static $rootDir = null;

if (is_null($rootDir))
{
$rootDir = rtrim(AKFactory::get('kickstart.setup.destdir', ''),
'/\\');
}

$directory = rtrim(dirname($path), '/\\');


if ($directory != $rootDir)
{
// Is this an unwritable directory?
if (!is_writeable($directory))
{
$this->postProcEngine->chmod($directory, 0755);
}
}
$this->postProcEngine->chmod($path, 0644);
}

/**
* Reads data from the archive and notifies the observer with the 'reading'
message
*
* @param $fp
* @param $length
*/
protected function fread($fp, $length = null)
{
if (is_numeric($length))
{
if ($length > 0)
{
$data = fread($fp, $length);
}
else
{
$data = fread($fp, PHP_INT_MAX);
}
}
else
{
$data = fread($fp, PHP_INT_MAX);
}
if ($data === false)
{
$data = '';
}

// Send start of file notification


$message = new stdClass;
$message->type = 'reading';
$message->content = new stdClass;
$message->content->length = strlen($data);
$this->notify($message);

return $data;
}

/**
* Removes the configured $removePath from the path $path
*
* @param string $path The path to reduce
*
* @return string The reduced path
*/
protected function removePath($path)
{
if (empty($this->removePath))
{
return $path;
}

if (strpos($path, $this->removePath) === 0)


{
$path = substr($path, strlen($this->removePath));
$path = ltrim($path, '/\\');
}

return $path;
}

/**
* Am I supposed to skip the extraction of the current file? This depends on
*
* @return bool
*/
protected function mustSkip()
{
static $isDryRun = null;

// List of files (and patterns) to extract


static $extractList = null;
// Internal cache of the last file we checked and whether it must be
skipped
static $lastFileName = '';
static $mustSkip = false;

// Make sure the dry run flag is, indeed, populated


if (is_null($isDryRun))
{
$isDryRun = AKFactory::get('kickstart.setup.dryrun', '0');
}

// If it's a Kickstart dry run we have to skip the extraction of the


file
if ($isDryRun)
{
return true;
}

// Make sure I have a list of files and patterns to extract


if (is_null($extractList))
{
$extractList = $this->getExtractList();
}

// No list of files to extract is given; we must extract everything.


if (empty($extractList))
{
return false;
}

// I am asked about the same file again. Return the cached result.
if ($this->fileHeader->file == $lastFileName)
{
return $mustSkip;
}

// Does the current file match the extract patterns or not?


$lastFileName = $this->fileHeader->file;
$lastFileName = (strpos($lastFileName, $this->addPath) === 0) ?
substr($lastFileName, strlen(rtrim($this->addPath, "\\/")) + 1) : $lastFileName;
$mustSkip = !$this->matchesGlobPatterns($lastFileName,
$extractList);

return $mustSkip;
}

/**
* Get the list of files / folders to extract. The list can contain filenames
or glob patterns.
*
* @return array
*/
private function getExtractList()
{
$rawList = AKFactory::get('kickstart.setup.extract_list', '');

// Sometimes I could get an array, e.g. from CLI


if (is_array($rawList))
{
$rawList = implode("\n", $rawList);
}

// Remove any whitespace


$rawList = trim($rawList);

if (empty($rawList))
{
return array();
}

// Convert commas to newlines so we can support both ways to express


lists
$rawList = str_replace(",", "\n", $rawList);
$rawList = trim($rawList);

// Convert the list to an array and clean it


$list = explode("\n", $rawList);
$list = array_map('trim', $list);

return array_unique($list);
}

/**
* Tests whether the item $item matches the list of shell patterns $list.
*
* @param string $item The file name to test
* @param array $list The list of glob patterns to match
*
* @return bool
*/
private function matchesGlobPatterns($item, array $list)
{
if (empty($list))
{
return true;
}

foreach ($list as $pattern)


{
if (fnmatch($pattern, $item))
{
return true;
}
}

return false;
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/
/**
* File post processor engines base class
*/
abstract class AKAbstractPostproc extends AKAbstractObject
{
/** @var int The UNIX timestamp of the file's desired modification date */
public $timestamp = 0;
/** @var string The current (real) file path we'll have to process */
protected $filename = null;
/** @var int The requested permissions */
protected $perms = 0755;
/** @var string The temporary file path we gave to the unarchiver engine */
protected $tempFilename = null;
/** @var string The temporary directory where the data will be stored */
protected $tempDir = '';

/**
* Processes the current file, e.g. moves it from temp to final location by
FTP
*/
abstract public function process();

/**
* The unarchiver tells us the path to the filename it wants to extract and
we give it
* a different path instead.
*
* @param string $filename The path to the real file
* @param int $perms The permissions we need the file to have
*
* @return string The path to the temporary file
*/
abstract public function processFilename($filename, $perms = 0755);

/**
* Recursively creates a directory if it doesn't exist
*
* @param string $dirName The directory to create
* @param int $perms The permissions to give to that directory
*/
abstract public function createDirRecursive($dirName, $perms);

abstract public function chmod($file, $perms);

abstract public function unlink($file);

abstract public function rmdir($directory);

abstract public function rename($from, $to);

/**
* Returns the configured temporary directory
*
* @return string
*/
public function getTempDir()
{
return $this->tempDir;
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Descendants of this class can be used in the unarchiver's observer methods
(attach, detach and notify)
*
* @author Nicholas
*
*/
abstract class AKAbstractPartObserver
{
abstract public function update($object, $message);
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Direct file writer
*/
class AKPostprocDirect extends AKAbstractPostproc
{
public function process()
{
$restorePerms = AKFactory::get('kickstart.setup.restoreperms', false);
if ($restorePerms)
{
@chmod($this->filename, $this->perms);
}
else
{
if (@is_file($this->filename))
{
@chmod($this->filename, 0644);
}
else
{
@chmod($this->filename, 0755);
}
}
if ($this->timestamp > 0)
{
@touch($this->filename, $this->timestamp);
}

return true;
}

public function processFilename($filename, $perms = 0755)


{
$this->perms = $perms;
$this->filename = $filename;

return $filename;
}

public function createDirRecursive($dirName, $perms)


{
if (AKFactory::get('kickstart.setup.dryrun', '0'))
{
return true;
}

if (@mkdir($dirName, 0755, true))


{
@chmod($dirName, 0755);

return true;
}

$root = AKFactory::get('kickstart.setup.destdir');
$root = rtrim(str_replace('\\', '/', $root), '/');
$dir = rtrim(str_replace('\\', '/', $dirName), '/');
if (strpos($dir, $root) === 0)
{
$dir = ltrim(substr($dir, strlen($root)), '/');
$root .= '/';
}
else
{
$root = '';
}

if (empty($dir))
{
return true;
}

$dirArray = explode('/', $dir);


$path = '';
foreach ($dirArray as $dir)
{
$path .= $dir . '/';
$ret = is_dir($root . $path) ? true : @mkdir($root . $path);
if (!$ret)
{
// Is this a file instead of a directory?
if (is_file($root . $path))
{
@unlink($root . $path);
$ret = @mkdir($root . $path);
}
if (!$ret)
{
$this->setError(AKText::sprintf('COULDNT_CREATE_DIR',
$path));

return false;
}
}
// Try to set new directory permissions to 0755
@chmod($root . $path, $perms);
}

return true;
}

public function chmod($file, $perms)


{
if (AKFactory::get('kickstart.setup.dryrun', '0'))
{
return true;
}

return @chmod($file, $perms);


}

public function unlink($file)


{
return @unlink($file);
}

public function rmdir($directory)


{
return @rmdir($directory);
}

public function rename($from, $to)


{
return @rename($from, $to);
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* FTP file writer
*/
class AKPostprocFTP extends AKAbstractPostproc
{
/** @var bool Should I use FTP over implicit SSL? */
public $useSSL = false;
/** @var bool use Passive mode? */
public $passive = true;
/** @var string FTP host name */
public $host = '';
/** @var int FTP port */
public $port = 21;
/** @var string FTP user name */
public $user = '';
/** @var string FTP password */
public $pass = '';
/** @var string FTP initial directory */
public $dir = '';
/** @var resource The FTP handle */
private $handle = null;

public function __construct()


{
parent::__construct();

$this->useSSL = AKFactory::get('kickstart.ftp.ssl', false);


$this->passive = AKFactory::get('kickstart.ftp.passive', true);
$this->host = AKFactory::get('kickstart.ftp.host', '');
$this->port = AKFactory::get('kickstart.ftp.port', 21);
if (trim($this->port) == '')
{
$this->port = 21;
}
$this->user = AKFactory::get('kickstart.ftp.user', '');
$this->pass = AKFactory::get('kickstart.ftp.pass', '');
$this->dir = AKFactory::get('kickstart.ftp.dir', '');
$this->tempDir = AKFactory::get('kickstart.ftp.tempdir', '');

$connected = $this->connect();

if ($connected)
{
if (!empty($this->tempDir))
{
$tempDir = rtrim($this->tempDir, '/\\') . '/';
$writable = $this->isDirWritable($tempDir);
}
else
{
$tempDir = '';
$writable = false;
}

if (!$writable)
{
// Default temporary directory is the current root
$tempDir = KSROOTDIR;
if (empty($tempDir))
{
// Oh, we have no directory reported!
$tempDir = '.';
}
$absoluteDirToHere = $tempDir;
$tempDir = rtrim(str_replace('\\', '/',
$tempDir), '/');
if (!empty($tempDir))
{
$tempDir .= '/';
}
$this->tempDir = $tempDir;
// Is this directory writable?
$writable = $this->isDirWritable($tempDir);
}

if (!$writable)
{
// Nope. Let's try creating a temporary directory in the
site's root.
$tempDir = $absoluteDirToHere .
'/kicktemp';
$trustMeIKnowWhatImDoing = 500 + 10 + 1; // working around
overzealous scanners written by bozos
$this->createDirRecursive($tempDir,
$trustMeIKnowWhatImDoing);
// Try making it writable...
$this->fixPermissions($tempDir);
$writable = $this->isDirWritable($tempDir);
}

// Was the new directory writable?


if (!$writable)
{
// Let's see if the user has specified one
$userdir = AKFactory::get('kickstart.ftp.tempdir', '');
if (!empty($userdir))
{
// Is it an absolute or a relative directory?
$absolute = false;
$absolute = $absolute || (substr($userdir, 0, 1) ==
'/');
$absolute = $absolute || (substr($userdir, 1, 1) ==
':');
$absolute = $absolute || (substr($userdir, 2, 1) ==
':');
if (!$absolute)
{
// Make absolute
$tempDir = $absoluteDirToHere . $userdir;
}
else
{
// it's already absolute
$tempDir = $userdir;
}
// Does the directory exist?
if (is_dir($tempDir))
{
// Yeah. Is it writable?
$writable = $this->isDirWritable($tempDir);
}
}
}
$this->tempDir = $tempDir;
if (!$writable)
{
// No writable directory found!!!
$this->setError(AKText::_('FTP_TEMPDIR_NOT_WRITABLE'));
}
else
{
AKFactory::set('kickstart.ftp.tempdir', $tempDir);
$this->tempDir = $tempDir;
}
}
}

public function connect()


{
// Connect to server, using SSL if so required
if ($this->useSSL)
{
$this->handle = @ftp_ssl_connect($this->host, $this->port);
}
else
{
$this->handle = @ftp_connect($this->host, $this->port);
}
if ($this->handle === false)
{
$this->setError(AKText::_('WRONG_FTP_HOST'));

return false;
}

// Login
if (!@ftp_login($this->handle, $this->user, $this->pass))
{
$this->setError(AKText::_('WRONG_FTP_USER'));
@ftp_close($this->handle);

return false;
}

// Change to initial directory


if (!@ftp_chdir($this->handle, $this->dir))
{
$this->setError(AKText::_('WRONG_FTP_PATH1'));
@ftp_close($this->handle);

return false;
}

// Enable passive mode if the user requested it


if ($this->passive)
{
@ftp_pasv($this->handle, true);
}
else
{
@ftp_pasv($this->handle, false);
}
// Try to download ourselves
$testFilename = defined('KSSELFNAME') ? KSSELFNAME :
basename(__FILE__);
$tempHandle = fopen('php://temp', 'r+');
if (@ftp_fget($this->handle, $tempHandle, $testFilename, FTP_ASCII, 0)
=== false)
{
$this->setError(AKText::_('WRONG_FTP_PATH2'));
@ftp_close($this->handle);
fclose($tempHandle);

return false;
}
fclose($tempHandle);

return true;
}

private function isDirWritable($dir)


{
$fp = @fopen($dir . '/kickstart.dat', 'wb');
if ($fp === false)
{
return false;
}
else
{
@fclose($fp);
unlink($dir . '/kickstart.dat');

return true;
}
}

public function createDirRecursive($dirName, $perms)


{
// Strip absolute filesystem path to website's root
$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
// UNIXize the paths
$removePath = str_replace('\\', '/', $removePath);
$dirName = str_replace('\\', '/', $dirName);
// Make sure they both end in a slash
$removePath = rtrim($removePath, '/\\') . '/';
$dirName = rtrim($dirName, '/\\') . '/';
// Process the path removal
$left = substr($dirName, 0, strlen($removePath));
if ($left == $removePath)
{
$dirName = substr($dirName, strlen($removePath));
}
}
if (empty($dirName))
{
$dirName = '';
} // 'cause the substr() above may return FALSE.

$check = '/' . trim($this->dir, '/') . '/' . trim($dirName, '/');


if ($this->is_dir($check))
{
return true;
}

$alldirs = explode('/', $dirName);


$previousDir = '/' . trim($this->dir);
foreach ($alldirs as $curdir)
{
$check = $previousDir . '/' . $curdir;
if (!$this->is_dir($check))
{
// Proactively try to delete a file by the same name
@ftp_delete($this->handle, $check);

if (@ftp_mkdir($this->handle, $check) === false)


{
// If we couldn't create the directory, attempt to
fix the permissions in the PHP level and retry!
$this->fixPermissions($removePath . $check);
if (@ftp_mkdir($this->handle, $check) === false)
{
// Can we fall back to pure PHP mode, sire?
if (!@mkdir($check))
{
$this-
>setError(AKText::sprintf('FTP_CANT_CREATE_DIR', $check));

return false;
}
else
{
// Since the directory was built by PHP,
change its permissions
$trustMeIKnowWhatImDoing =
500 + 10 + 1; // working around
overzealous scanners written by bozos
@chmod($check, $trustMeIKnowWhatImDoing);

return true;
}
}
}
@ftp_chmod($this->handle, $perms, $check);
}
$previousDir = $check;
}

return true;
}

private function is_dir($dir)


{
return @ftp_chdir($this->handle, $dir);
}

private function fixPermissions($path)


{
// Turn off error reporting
if (!defined('KSDEBUG'))
{
$oldErrorReporting = @error_reporting(E_NONE);
}

// Get UNIX style paths


$relPath = str_replace('\\', '/', $path);
$basePath = rtrim(str_replace('\\', '/', KSROOTDIR), '/');
$basePath = rtrim($basePath, '/');
if (!empty($basePath))
{
$basePath .= '/';
}
// Remove the leading relative root
if (substr($relPath, 0, strlen($basePath)) == $basePath)
{
$relPath = substr($relPath, strlen($basePath));
}
$dirArray = explode('/', $relPath);
$pathBuilt = rtrim($basePath, '/');
foreach ($dirArray as $dir)
{
if (empty($dir))
{
continue;
}
$oldPath = $pathBuilt;
$pathBuilt .= '/' . $dir;
if (is_dir($oldPath . $dir))
{
$trustMeIKnowWhatImDoing = 500 + 10 + 1; // working around
overzealous scanners written by bozos
@chmod($oldPath . $dir, $trustMeIKnowWhatImDoing);
}
else
{
$trustMeIKnowWhatImDoing = 500 + 10 + 1; // working around
overzealous scanners written by bozos
if (@chmod($oldPath . $dir, $trustMeIKnowWhatImDoing) ===
false)
{
@unlink($oldPath . $dir);
}
}
}

// Restore error reporting


if (!defined('KSDEBUG'))
{
@error_reporting($oldErrorReporting);
}
}

function __wakeup()
{
$this->connect();
}

public function process()


{
if (is_null($this->tempFilename))
{
// If an empty filename is passed, it means that we shouldn't do
any post processing, i.e.
// the entity was a directory or symlink
return true;
}

$remotePath = dirname($this->filename);
$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
$removePath = ltrim($removePath, "/");
$remotePath = ltrim($remotePath, "/");
$left = substr($remotePath, 0, strlen($removePath));
if ($left == $removePath)
{
$remotePath = substr($remotePath, strlen($removePath));
}
}

$absoluteFSPath = dirname($this->filename);
$relativeFTPPath = trim($remotePath, '/');
$absoluteFTPPath = '/' . trim($this->dir, '/') . '/' .
trim($remotePath, '/');
$onlyFilename = basename($this->filename);

$remoteName = $absoluteFTPPath . '/' . $onlyFilename;

$ret = @ftp_chdir($this->handle, $absoluteFTPPath);


if ($ret === false)
{
$ret = $this->createDirRecursive($absoluteFSPath, 0755);
if ($ret === false)
{
$this->setError(AKText::sprintf('FTP_COULDNT_UPLOAD',
$this->filename));

return false;
}
$ret = @ftp_chdir($this->handle, $absoluteFTPPath);
if ($ret === false)
{
$this->setError(AKText::sprintf('FTP_COULDNT_UPLOAD',
$this->filename));

return false;
}
}

$ret = @ftp_put($this->handle, $remoteName, $this->tempFilename,


FTP_BINARY);
if ($ret === false)
{
// If we couldn't create the file, attempt to fix the permissions
in the PHP level and retry!
$this->fixPermissions($this->filename);
$this->unlink($this->filename);
$fp = @fopen($this->tempFilename, 'rb');
if ($fp !== false)
{
$ret = @ftp_fput($this->handle, $remoteName, $fp,
FTP_BINARY);
@fclose($fp);
}
else
{
$ret = false;
}
}
@unlink($this->tempFilename);

if ($ret === false)


{
$this->setError(AKText::sprintf('FTP_COULDNT_UPLOAD', $this-
>filename));

return false;
}
$restorePerms = AKFactory::get('kickstart.setup.restoreperms', false);
if ($restorePerms)
{
@ftp_chmod($this->_handle, $this->perms, $remoteName);
}
else
{
@ftp_chmod($this->_handle, 0644, $remoteName);
}

return true;
}

/*
* Tries to fix directory/file permissions in the PHP level, so that
* the FTP operation doesn't fail.
* @param $path string The full path to a directory or file
*/

public function unlink($file)


{
$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
$left = substr($file, 0, strlen($removePath));
if ($left == $removePath)
{
$file = substr($file, strlen($removePath));
}
}

$check = '/' . trim($this->dir, '/') . '/' . trim($file, '/');

return @ftp_delete($this->handle, $check);


}

public function processFilename($filename, $perms = 0755)


{
// Catch some error conditions...
if ($this->getError())
{
return false;
}

// If a null filename is passed, it means that we shouldn't do any post


processing, i.e.
// the entity was a directory or symlink
if (is_null($filename))
{
$this->filename = null;
$this->tempFilename = null;

return null;
}

// Strip absolute filesystem path to website's root


$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
$left = substr($filename, 0, strlen($removePath));
if ($left == $removePath)
{
$filename = substr($filename, strlen($removePath));
}
}

// Trim slash on the left


$filename = ltrim($filename, '/');

$this->filename = $filename;
$this->tempFilename = tempnam($this->tempDir, 'kickstart-');
$this->perms = $perms;

if (empty($this->tempFilename))
{
// Oops! Let's try something different
$this->tempFilename = $this->tempDir . '/kickstart-' . time() .
'.dat';
}

return $this->tempFilename;
}

public function close()


{
@ftp_close($this->handle);
}

public function chmod($file, $perms)


{
return @ftp_chmod($this->handle, $perms, $file);
}

public function rmdir($directory)


{
$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
$left = substr($directory, 0, strlen($removePath));
if ($left == $removePath)
{
$directory = substr($directory, strlen($removePath));
}
}

$check = '/' . trim($this->dir, '/') . '/' . trim($directory, '/');

return @ftp_rmdir($this->handle, $check);


}

public function rename($from, $to)


{
$originalFrom = $from;
$originalTo = $to;

$removePath = AKFactory::get('kickstart.setup.destdir', '');


if (!empty($removePath))
{
$left = substr($from, 0, strlen($removePath));
if ($left == $removePath)
{
$from = substr($from, strlen($removePath));
}
}
$from = '/' . trim($this->dir, '/') . '/' . trim($from, '/');

if (!empty($removePath))
{
$left = substr($to, 0, strlen($removePath));
if ($left == $removePath)
{
$to = substr($to, strlen($removePath));
}
}
$to = '/' . trim($this->dir, '/') . '/' . trim($to, '/');

$result = @ftp_rename($this->handle, $from, $to);


if ($result !== true)
{
return @rename($from, $to);
}
else
{
return true;
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* FTP file writer
*/
class AKPostprocSFTP extends AKAbstractPostproc
{
/** @var bool Should I use FTP over implicit SSL? */
public $useSSL = false;
/** @var bool use Passive mode? */
public $passive = true;
/** @var string FTP host name */
public $host = '';
/** @var int FTP port */
public $port = 21;
/** @var string FTP user name */
public $user = '';
/** @var string FTP password */
public $pass = '';
/** @var string FTP initial directory */
public $dir = '';

/** @var resource SFTP resource handle */


private $handle = null;

/** @var resource SSH2 connection resource handle */


private $_connection = null;

/** @var string Current remote directory, including the remote directory
string */
private $_currentdir;

public function __construct()


{
parent::__construct();

$this->host = AKFactory::get('kickstart.ftp.host', '');


$this->port = AKFactory::get('kickstart.ftp.port', 22);

if (trim($this->port) == '')
{
$this->port = 22;
}

$this->user = AKFactory::get('kickstart.ftp.user', '');


$this->pass = AKFactory::get('kickstart.ftp.pass', '');
$this->dir = AKFactory::get('kickstart.ftp.dir', '');
$this->tempDir = AKFactory::get('kickstart.ftp.tempdir', '');

$connected = $this->connect();

if ($connected)
{
if (!empty($this->tempDir))
{
$tempDir = rtrim($this->tempDir, '/\\') . '/';
$writable = $this->isDirWritable($tempDir);
}
else
{
$tempDir = '';
$writable = false;
}

if (!$writable)
{
// Default temporary directory is the current root
$tempDir = KSROOTDIR;
if (empty($tempDir))
{
// Oh, we have no directory reported!
$tempDir = '.';
}
$absoluteDirToHere = $tempDir;
$tempDir = rtrim(str_replace('\\', '/',
$tempDir), '/');
if (!empty($tempDir))
{
$tempDir .= '/';
}
$this->tempDir = $tempDir;
// Is this directory writable?
$writable = $this->isDirWritable($tempDir);
}

if (!$writable)
{
// Nope. Let's try creating a temporary directory in the
site's root.
$tempDir = $absoluteDirToHere .
'/kicktemp';
$trustMeIKnowWhatImDoing = 500 + 10 + 1; // working around
overzealous scanners written by bozos
$this->createDirRecursive($tempDir,
$trustMeIKnowWhatImDoing);
// Try making it writable...
$this->fixPermissions($tempDir);
$writable = $this->isDirWritable($tempDir);
}

// Was the new directory writable?


if (!$writable)
{
// Let's see if the user has specified one
$userdir = AKFactory::get('kickstart.ftp.tempdir', '');
if (!empty($userdir))
{
// Is it an absolute or a relative directory?
$absolute = false;
$absolute = $absolute || (substr($userdir, 0, 1) ==
'/');
$absolute = $absolute || (substr($userdir, 1, 1) ==
':');
$absolute = $absolute || (substr($userdir, 2, 1) ==
':');
if (!$absolute)
{
// Make absolute
$tempDir = $absoluteDirToHere . $userdir;
}
else
{
// it's already absolute
$tempDir = $userdir;
}
// Does the directory exist?
if (is_dir($tempDir))
{
// Yeah. Is it writable?
$writable = $this->isDirWritable($tempDir);
}
}
}
$this->tempDir = $tempDir;

if (!$writable)
{
// No writable directory found!!!
$this->setError(AKText::_('SFTP_TEMPDIR_NOT_WRITABLE'));
}
else
{
AKFactory::set('kickstart.ftp.tempdir', $tempDir);
$this->tempDir = $tempDir;
}
}
}

public function connect()


{
$this->_connection = false;

if (!function_exists('ssh2_connect'))
{
$this->setError(AKText::_('SFTP_NO_SSH2'));

return false;
}

$this->_connection = @ssh2_connect($this->host, $this->port);

if (!@ssh2_auth_password($this->_connection, $this->user, $this->pass))


{
$this->setError(AKText::_('SFTP_WRONG_USER'));

$this->_connection = false;

return false;
}

$this->handle = @ssh2_sftp($this->_connection);

// I must have an absolute directory


if (!$this->dir)
{
$this->setError(AKText::_('SFTP_WRONG_STARTING_DIR'));

return false;
}

// Change to initial directory


if (!$this->sftp_chdir('/'))
{
$this->setError(AKText::_('SFTP_WRONG_STARTING_DIR'));

unset($this->_connection);
unset($this->handle);

return false;
}

// Try to download ourselves


$testFilename = defined('KSSELFNAME') ? KSSELFNAME :
basename(__FILE__);
$basePath = '/' . trim($this->dir, '/');

if (@fopen("ssh2.sftp://{$this->handle}$basePath/$testFilename", 'r+')
=== false)
{
$this->setError(AKText::_('SFTP_WRONG_STARTING_DIR'));

unset($this->_connection);
unset($this->handle);

return false;
}

return true;
}

/**
* Changes to the requested directory in the remote server. You give only the
* path relative to the initial directory and it does all the rest by itself,
* including doing nothing if the remote directory is the one we want.
*
* @param string $dir The (realtive) remote directory
*
* @return bool True if successful, false otherwise.
*/
private function sftp_chdir($dir)
{
// Strip absolute filesystem path to website's root
$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
// UNIXize the paths
$removePath = str_replace('\\', '/', $removePath);
$dir = str_replace('\\', '/', $dir);

// Make sure they both end in a slash


$removePath = rtrim($removePath, '/\\') . '/';
$dir = rtrim($dir, '/\\') . '/';

// Process the path removal


$left = substr($dir, 0, strlen($removePath));

if ($left == $removePath)
{
$dir = substr($dir, strlen($removePath));
}
}

if (empty($dir))
{
// Because the substr() above may return FALSE.
$dir = '';
}

// Calculate "real" (absolute) SFTP path


$realdir = substr($this->dir, -1) == '/' ? substr($this->dir, 0,
strlen($this->dir) - 1) : $this->dir;
$realdir .= '/' . $dir;
$realdir = substr($realdir, 0, 1) == '/' ? $realdir : '/' . $realdir;

if ($this->_currentdir == $realdir)
{
// Already there, do nothing
return true;
}

$result = @ssh2_sftp_stat($this->handle, $realdir);

if ($result === false)


{
return false;
}
else
{
// Update the private "current remote directory" variable
$this->_currentdir = $realdir;

return true;
}
}

private function isDirWritable($dir)


{
if (@fopen("ssh2.sftp://{$this->handle}$dir/kickstart.dat", 'wb') ===
false)
{
return false;
}
else
{
@ssh2_sftp_unlink($this->handle, $dir . '/kickstart.dat');

return true;
}
}

public function createDirRecursive($dirName, $perms)


{
// Strip absolute filesystem path to website's root
$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
// UNIXize the paths
$removePath = str_replace('\\', '/', $removePath);
$dirName = str_replace('\\', '/', $dirName);
// Make sure they both end in a slash
$removePath = rtrim($removePath, '/\\') . '/';
$dirName = rtrim($dirName, '/\\') . '/';
// Process the path removal
$left = substr($dirName, 0, strlen($removePath));
if ($left == $removePath)
{
$dirName = substr($dirName, strlen($removePath));
}
}
if (empty($dirName))
{
$dirName = '';
} // 'cause the substr() above may return FALSE.

$check = '/' . trim($this->dir, '/ ') . '/' . trim($dirName, '/');

if ($this->is_dir($check))
{
return true;
}

$alldirs = explode('/', $dirName);


$previousDir = '/' . trim($this->dir, '/ ');

foreach ($alldirs as $curdir)


{
if (!$curdir)
{
continue;
}

$check = $previousDir . '/' . $curdir;

if (!$this->is_dir($check))
{
// Proactively try to delete a file by the same name
@ssh2_sftp_unlink($this->handle, $check);

if (@ssh2_sftp_mkdir($this->handle, $check) === false)


{
// If we couldn't create the directory, attempt to
fix the permissions in the PHP level and retry!
$this->fixPermissions($check);

if (@ssh2_sftp_mkdir($this->handle, $check) ===


false)
{
// Can we fall back to pure PHP mode, sire?
if (!@mkdir($check))
{
$this-
>setError(AKText::sprintf('FTP_CANT_CREATE_DIR', $check));
return false;
}
else
{
// Since the directory was built by PHP,
change its permissions
$trustMeIKnowWhatImDoing =
500 + 10 + 1; // working around
overzealous scanners written by bozos
@chmod($check, $trustMeIKnowWhatImDoing);

return true;
}
}
}

@ssh2_sftp_chmod($this->handle, $check, $perms);


}

$previousDir = $check;
}

return true;
}

private function is_dir($dir)


{
return $this->sftp_chdir($dir);
}

private function fixPermissions($path)


{
// Turn off error reporting
if (!defined('KSDEBUG'))
{
$oldErrorReporting = @error_reporting(E_NONE);
}

// Get UNIX style paths


$relPath = str_replace('\\', '/', $path);
$basePath = rtrim(str_replace('\\', '/', KSROOTDIR), '/');
$basePath = rtrim($basePath, '/');

if (!empty($basePath))
{
$basePath .= '/';
}

// Remove the leading relative root


if (substr($relPath, 0, strlen($basePath)) == $basePath)
{
$relPath = substr($relPath, strlen($basePath));
}

$dirArray = explode('/', $relPath);


$pathBuilt = rtrim($basePath, '/');

foreach ($dirArray as $dir)


{
if (empty($dir))
{
continue;
}

$oldPath = $pathBuilt;
$pathBuilt .= '/' . $dir;

if (is_dir($oldPath . '/' . $dir))


{
$trustMeIKnowWhatImDoing = 500 + 10 + 1; // working around
overzealous scanners written by bozos
@chmod($oldPath . '/' . $dir, $trustMeIKnowWhatImDoing);
}
else
{
$trustMeIKnowWhatImDoing = 500 + 10 + 1; // working around
overzealous scanners written by bozos
if (@chmod($oldPath . '/' . $dir, $trustMeIKnowWhatImDoing)
=== false)
{
@unlink($oldPath . $dir);
}
}
}

// Restore error reporting


if (!defined('KSDEBUG'))
{
@error_reporting($oldErrorReporting);
}
}

function __wakeup()
{
$this->connect();
}

/*
* Tries to fix directory/file permissions in the PHP level, so that
* the FTP operation doesn't fail.
* @param $path string The full path to a directory or file
*/

public function process()


{
if (is_null($this->tempFilename))
{
// If an empty filename is passed, it means that we shouldn't do
any post processing, i.e.
// the entity was a directory or symlink
return true;
}

$remotePath = dirname($this->filename);
$absoluteFSPath = dirname($this->filename);
$absoluteFTPPath = '/' . trim($this->dir, '/') . '/' .
trim($remotePath, '/');
$onlyFilename = basename($this->filename);

$remoteName = $absoluteFTPPath . '/' . $onlyFilename;

$ret = $this->sftp_chdir($absoluteFTPPath);

if ($ret === false)


{
$ret = $this->createDirRecursive($absoluteFSPath, 0755);

if ($ret === false)


{
$this->setError(AKText::sprintf('SFTP_COULDNT_UPLOAD',
$this->filename));

return false;
}

$ret = $this->sftp_chdir($absoluteFTPPath);

if ($ret === false)


{
$this->setError(AKText::sprintf('SFTP_COULDNT_UPLOAD',
$this->filename));

return false;
}
}

// Create the file


$ret = $this->write($this->tempFilename, $remoteName);

// If I got a -1 it means that I wasn't able to open the file, so I


have to stop here
if ($ret === -1)
{
$this->setError(AKText::sprintf('SFTP_COULDNT_UPLOAD', $this-
>filename));

return false;
}

if ($ret === false)


{
// If we couldn't create the file, attempt to fix the permissions
in the PHP level and retry!
$this->fixPermissions($this->filename);
$this->unlink($this->filename);

$ret = $this->write($this->tempFilename, $remoteName);


}

@unlink($this->tempFilename);

if ($ret === false)


{
$this->setError(AKText::sprintf('SFTP_COULDNT_UPLOAD', $this-
>filename));
return false;
}
$restorePerms = AKFactory::get('kickstart.setup.restoreperms', false);

if ($restorePerms)
{
$this->chmod($remoteName, $this->perms);
}
else
{
$this->chmod($remoteName, 0644);
}

return true;
}

private function write($local, $remote)


{
$fp = @fopen("ssh2.sftp://{$this->handle}$remote", 'w');
$localfp = @fopen($local, 'rb');

if ($fp === false)


{
return -1;
}

if ($localfp === false)


{
@fclose($fp);

return -1;
}

$res = true;

while (!feof($localfp) && ($res !== false))


{
$buffer = @fread($localfp, 65567);
$res = @fwrite($fp, $buffer);
}

@fclose($fp);
@fclose($localfp);

return $res;
}

public function unlink($file)


{
$check = '/' . trim($this->dir, '/') . '/' . trim($file, '/');

return @ssh2_sftp_unlink($this->handle, $check);


}

public function chmod($file, $perms)


{
return @ssh2_sftp_chmod($this->handle, $file, $perms);
}
public function processFilename($filename, $perms = 0755)
{
// Catch some error conditions...
if ($this->getError())
{
return false;
}

// If a null filename is passed, it means that we shouldn't do any post


processing, i.e.
// the entity was a directory or symlink
if (is_null($filename))
{
$this->filename = null;
$this->tempFilename = null;

return null;
}

// Strip absolute filesystem path to website's root


$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
$left = substr($filename, 0, strlen($removePath));
if ($left == $removePath)
{
$filename = substr($filename, strlen($removePath));
}
}

// Trim slash on the left


$filename = ltrim($filename, '/');

$this->filename = $filename;
$this->tempFilename = tempnam($this->tempDir, 'kickstart-');
$this->perms = $perms;

if (empty($this->tempFilename))
{
// Oops! Let's try something different
$this->tempFilename = $this->tempDir . '/kickstart-' . time() .
'.dat';
}

return $this->tempFilename;
}

public function close()


{
unset($this->_connection);
unset($this->handle);
}

public function rmdir($directory)


{
$check = '/' . trim($this->dir, '/') . '/' . trim($directory, '/');

return @ssh2_sftp_rmdir($this->handle, $check);


}
public function rename($from, $to)
{
$from = '/' . trim($this->dir, '/') . '/' . trim($from, '/');
$to = '/' . trim($this->dir, '/') . '/' . trim($to, '/');

$result = @ssh2_sftp_rename($this->handle, $from, $to);

if ($result !== true)


{
return @rename($from, $to);
}
else
{
return true;
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Hybrid direct / FTP mode file writer
*/
class AKPostprocHybrid extends AKAbstractPostproc
{

/** @var bool Should I use the FTP layer? */


public $useFTP = false;

/** @var bool Should I use FTP over implicit SSL? */


public $useSSL = false;

/** @var bool use Passive mode? */


public $passive = true;

/** @var string FTP host name */


public $host = '';

/** @var int FTP port */


public $port = 21;

/** @var string FTP user name */


public $user = '';

/** @var string FTP password */


public $pass = '';

/** @var string FTP initial directory */


public $dir = '';
/** @var resource The FTP handle */
private $handle = null;

/** @var null The FTP connection handle */


private $_handle = null;

/**
* Public constructor. Tries to connect to the FTP server.
*/
public function __construct()
{
parent::__construct();

$this->useFTP = true;
$this->useSSL = AKFactory::get('kickstart.ftp.ssl', false);
$this->passive = AKFactory::get('kickstart.ftp.passive', true);
$this->host = AKFactory::get('kickstart.ftp.host', '');
$this->port = AKFactory::get('kickstart.ftp.port', 21);
$this->user = AKFactory::get('kickstart.ftp.user', '');
$this->pass = AKFactory::get('kickstart.ftp.pass', '');
$this->dir = AKFactory::get('kickstart.ftp.dir', '');
$this->tempDir = AKFactory::get('kickstart.ftp.tempdir', '');

if (trim($this->port) == '')
{
$this->port = 21;
}

// If FTP is not configured, skip it altogether


if (empty($this->host) || empty($this->user) || empty($this->pass))
{
$this->useFTP = false;
}

// Try to connect to the FTP server


$connected = $this->connect();

// If the connection fails, skip FTP altogether


if (!$connected)
{
$this->useFTP = false;
}

if ($connected)
{
if (!empty($this->tempDir))
{
$tempDir = rtrim($this->tempDir, '/\\') . '/';
$writable = $this->isDirWritable($tempDir);
}
else
{
$tempDir = '';
$writable = false;
}

if (!$writable)
{
// Default temporary directory is the current root
$tempDir = KSROOTDIR;
if (empty($tempDir))
{
// Oh, we have no directory reported!
$tempDir = '.';
}
$absoluteDirToHere = $tempDir;
$tempDir = rtrim(str_replace('\\', '/',
$tempDir), '/');
if (!empty($tempDir))
{
$tempDir .= '/';
}
$this->tempDir = $tempDir;
// Is this directory writable?
$writable = $this->isDirWritable($tempDir);
}

if (!$writable)
{
// Nope. Let's try creating a temporary directory in the
site's root.
$tempDir = $absoluteDirToHere .
'/kicktemp';
$trustMeIKnowWhatImDoing = 500 + 10 + 1; // working around
overzealous scanners written by bozos
$this->createDirRecursive($tempDir,
$trustMeIKnowWhatImDoing);
// Try making it writable...
$this->fixPermissions($tempDir);
$writable = $this->isDirWritable($tempDir);
}

// Was the new directory writable?


if (!$writable)
{
// Let's see if the user has specified one
$userdir = AKFactory::get('kickstart.ftp.tempdir', '');
if (!empty($userdir))
{
// Is it an absolute or a relative directory?
$absolute = false;
$absolute = $absolute || (substr($userdir, 0, 1) ==
'/');
$absolute = $absolute || (substr($userdir, 1, 1) ==
':');
$absolute = $absolute || (substr($userdir, 2, 1) ==
':');
if (!$absolute)
{
// Make absolute
$tempDir = $absoluteDirToHere . $userdir;
}
else
{
// it's already absolute
$tempDir = $userdir;
}
// Does the directory exist?
if (is_dir($tempDir))
{
// Yeah. Is it writable?
$writable = $this->isDirWritable($tempDir);
}
}
}
$this->tempDir = $tempDir;

if (!$writable)
{
// No writable directory found!!!
$this->setError(AKText::_('FTP_TEMPDIR_NOT_WRITABLE'));
}
else
{
AKFactory::set('kickstart.ftp.tempdir', $tempDir);
$this->tempDir = $tempDir;
}
}
}

/**
* Tries to connect to the FTP server
*
* @return bool
*/
public function connect()
{
if (!$this->useFTP)
{
return false;
}

// Connect to server, using SSL if so required


if ($this->useSSL)
{
$this->handle = @ftp_ssl_connect($this->host, $this->port);
}
else
{
$this->handle = @ftp_connect($this->host, $this->port);
}
if ($this->handle === false)
{
$this->setError(AKText::_('WRONG_FTP_HOST'));

return false;
}

// Login
if (!@ftp_login($this->handle, $this->user, $this->pass))
{
$this->setError(AKText::_('WRONG_FTP_USER'));
@ftp_close($this->handle);

return false;
}
// Change to initial directory
if (!@ftp_chdir($this->handle, $this->dir))
{
$this->setError(AKText::_('WRONG_FTP_PATH1'));
@ftp_close($this->handle);

return false;
}

// Enable passive mode if the user requested it


if ($this->passive)
{
@ftp_pasv($this->handle, true);
}
else
{
@ftp_pasv($this->handle, false);
}

// Try to download ourselves


$testFilename = defined('KSSELFNAME') ? KSSELFNAME :
basename(__FILE__);
$tempHandle = fopen('php://temp', 'r+');

if (@ftp_fget($this->handle, $tempHandle, $testFilename, FTP_ASCII, 0)


=== false)
{
$this->setError(AKText::_('WRONG_FTP_PATH2'));
@ftp_close($this->handle);
fclose($tempHandle);

return false;
}

fclose($tempHandle);

return true;
}

/**
* Is the directory writeable?
*
* @param string $dir The directory ti check
*
* @return bool
*/
private function isDirWritable($dir)
{
$fp = @fopen($dir . '/kickstart.dat', 'wb');

if ($fp === false)


{
return false;
}

@fclose($fp);
unlink($dir . '/kickstart.dat');
return true;
}

/**
* Create a directory, recursively
*
* @param string $dirName The directory to create
* @param int $perms The permissions to give to the directory
*
* @return bool
*/
public function createDirRecursive($dirName, $perms)
{
// Strip absolute filesystem path to website's root
$removePath = AKFactory::get('kickstart.setup.destdir', '');

if (!empty($removePath))
{
// UNIXize the paths
$removePath = str_replace('\\', '/', $removePath);
$dirName = str_replace('\\', '/', $dirName);
// Make sure they both end in a slash
$removePath = rtrim($removePath, '/\\') . '/';
$dirName = rtrim($dirName, '/\\') . '/';
// Process the path removal
$left = substr($dirName, 0, strlen($removePath));

if ($left == $removePath)
{
$dirName = substr($dirName, strlen($removePath));
}
}

// 'cause the substr() above may return FALSE.


if (empty($dirName))
{
$dirName = '';
}

$check = '/' . trim($this->dir, '/') . '/' . trim($dirName, '/');


$checkFS = $removePath . trim($dirName, '/');

if ($this->is_dir($check))
{
return true;
}

$alldirs = explode('/', $dirName);


$previousDir = '/' . trim($this->dir);
$previousDirFS = rtrim($removePath, '/\\');

foreach ($alldirs as $curdir)


{
$check = $previousDir . '/' . $curdir;
$checkFS = $previousDirFS . '/' . $curdir;

if (!is_dir($checkFS) && !$this->is_dir($check))


{
// Proactively try to delete a file by the same name
if (!@unlink($checkFS) && $this->useFTP)
{
@ftp_delete($this->handle, $check);
}

$createdDir = @mkdir($checkFS, 0755);

if (!$createdDir && $this->useFTP)


{
$createdDir = @ftp_mkdir($this->handle, $check);
}

if ($createdDir === false)


{
// If we couldn't create the directory, attempt to
fix the permissions in the PHP level and retry!
$this->fixPermissions($checkFS);

$createdDir = @mkdir($checkFS, 0755);


if (!$createdDir && $this->useFTP)
{
$createdDir = @ftp_mkdir($this->handle,
$check);
}

if ($createdDir === false)


{
$this-
>setError(AKText::sprintf('FTP_CANT_CREATE_DIR', $check));

return false;
}
}

if (!@chmod($checkFS, $perms) && $this->useFTP)


{
@ftp_chmod($this->handle, $perms, $check);
}
}

$previousDir = $check;
$previousDirFS = $checkFS;
}

return true;
}

private function is_dir($dir)


{
if ($this->useFTP)
{
return @ftp_chdir($this->handle, $dir);
}

return false;
}

/**
* Tries to fix directory/file permissions in the PHP level, so that
* the FTP operation doesn't fail.
*
* @param $path string The full path to a directory or file
*/
private function fixPermissions($path)
{
// Turn off error reporting
if (!defined('KSDEBUG'))
{
$oldErrorReporting = error_reporting(0);
}

// Get UNIX style paths


$relPath = str_replace('\\', '/', $path);
$basePath = rtrim(str_replace('\\', '/', KSROOTDIR), '/');
$basePath = rtrim($basePath, '/');

if (!empty($basePath))
{
$basePath .= '/';
}

// Remove the leading relative root


if (substr($relPath, 0, strlen($basePath)) == $basePath)
{
$relPath = substr($relPath, strlen($basePath));
}

$dirArray = explode('/', $relPath);


$pathBuilt = rtrim($basePath, '/');

foreach ($dirArray as $dir)


{
if (empty($dir))
{
continue;
}

$oldPath = $pathBuilt;
$pathBuilt .= '/' . $dir;

if (is_dir($oldPath . $dir))
{
$trustMeIKnowWhatImDoing = 500 + 10 + 1; // working around
overzealous scanners written by bozos
@chmod($oldPath . $dir, $trustMeIKnowWhatImDoing);
}
else
{
$trustMeIKnowWhatImDoing = 500 + 10 + 1; // working around
overzealous scanners written by bozos
if (@chmod($oldPath . $dir, $trustMeIKnowWhatImDoing) ===
false)
{
@unlink($oldPath . $dir);
}
}
}
// Restore error reporting
if (!defined('KSDEBUG'))
{
@error_reporting($oldErrorReporting);
}
}

/**
* Called after unserialisation, tries to reconnect to FTP
*/
function __wakeup()
{
if ($this->useFTP)
{
$this->connect();
}
}

function __destruct()
{
if (!$this->useFTP)
{
@ftp_close($this->handle);
}
}

/**
* Post-process an extracted file, using FTP or direct file writes to move it
*
* @return bool
*/
public function process()
{
if (is_null($this->tempFilename))
{
// If an empty filename is passed, it means that we shouldn't do
any post processing, i.e.
// the entity was a directory or symlink
return true;
}

$remotePath = dirname($this->filename);
$removePath = AKFactory::get('kickstart.setup.destdir', '');
$root = rtrim($removePath, '/\\');

if (!empty($removePath))
{
$removePath = ltrim($removePath, "/");
$remotePath = ltrim($remotePath, "/");
$left = substr($remotePath, 0, strlen($removePath));

if ($left == $removePath)
{
$remotePath = substr($remotePath, strlen($removePath));
}
}

$absoluteFSPath = dirname($this->filename);
$relativeFTPPath = trim($remotePath, '/');
$absoluteFTPPath = '/' . trim($this->dir, '/') . '/' .
trim($remotePath, '/');
$onlyFilename = basename($this->filename);

$remoteName = $absoluteFTPPath . '/' . $onlyFilename;

// Does the directory exist?


if (!is_dir($root . '/' . $absoluteFSPath))
{
$ret = $this->createDirRecursive($absoluteFSPath, 0755);

if (($ret === false) && ($this->useFTP))


{
$ret = @ftp_chdir($this->handle, $absoluteFTPPath);
}

if ($ret === false)


{
$this->setError(AKText::sprintf('FTP_COULDNT_UPLOAD',
$this->filename));

return false;
}
}

if ($this->useFTP)
{
$ret = @ftp_chdir($this->handle, $absoluteFTPPath);
}

// Try copying directly


$ret = @copy($this->tempFilename, $root . '/' . $this->filename);

if ($ret === false)


{
$this->fixPermissions($this->filename);
$this->unlink($this->filename);

$ret = @copy($this->tempFilename, $root . '/' . $this->filename);


}

if ($this->useFTP && ($ret === false))


{
$ret = @ftp_put($this->handle, $remoteName, $this->tempFilename,
FTP_BINARY);

if ($ret === false)


{
// If we couldn't create the file, attempt to fix the
permissions in the PHP level and retry!
$this->fixPermissions($this->filename);
$this->unlink($this->filename);

$fp = @fopen($this->tempFilename, 'rb');


if ($fp !== false)
{
$ret = @ftp_fput($this->handle, $remoteName, $fp,
FTP_BINARY);
@fclose($fp);
}
else
{
$ret = false;
}
}
}

@unlink($this->tempFilename);

if ($ret === false)


{
$this->setError(AKText::sprintf('FTP_COULDNT_UPLOAD', $this-
>filename));

return false;
}

$restorePerms = AKFactory::get('kickstart.setup.restoreperms', false);


$perms = $restorePerms ? $this->perms : 0644;

$ret = @chmod($root . '/' . $this->filename, $perms);

if ($this->useFTP && ($ret === false))


{
@ftp_chmod($this->_handle, $perms, $remoteName);
}

return true;
}

public function unlink($file)


{
$ret = @unlink($file);

if (!$ret && $this->useFTP)


{
$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
$left = substr($file, 0, strlen($removePath));
if ($left == $removePath)
{
$file = substr($file, strlen($removePath));
}
}

$check = '/' . trim($this->dir, '/') . '/' . trim($file, '/');

$ret = @ftp_delete($this->handle, $check);


}

return $ret;
}

/**
* Create a temporary filename
*
* @param string $filename The original filename
* @param int $perms The file permissions
*
* @return string
*/
public function processFilename($filename, $perms = 0755)
{
// Catch some error conditions...
if ($this->getError())
{
return false;
}

// If a null filename is passed, it means that we shouldn't do any post


processing, i.e.
// the entity was a directory or symlink
if (is_null($filename))
{
$this->filename = null;
$this->tempFilename = null;

return null;
}

// Strip absolute filesystem path to website's root


$removePath = AKFactory::get('kickstart.setup.destdir', '');

if (!empty($removePath))
{
$left = substr($filename, 0, strlen($removePath));

if ($left == $removePath)
{
$filename = substr($filename, strlen($removePath));
}
}

// Trim slash on the left


$filename = ltrim($filename, '/');

$this->filename = $filename;
$this->tempFilename = tempnam($this->tempDir, 'kickstart-');
$this->perms = $perms;

if (empty($this->tempFilename))
{
// Oops! Let's try something different
$this->tempFilename = $this->tempDir . '/kickstart-' . time() .
'.dat';
}

return $this->tempFilename;
}

/**
* Closes the FTP connection
*/
public function close()
{
if (!$this->useFTP)
{
@ftp_close($this->handle);
}
}

public function chmod($file, $perms)


{
if (AKFactory::get('kickstart.setup.dryrun', '0'))
{
return true;
}

$ret = @chmod($file, $perms);

if (!$ret && $this->useFTP)


{
// Strip absolute filesystem path to website's root
$removePath = AKFactory::get('kickstart.setup.destdir', '');

if (!empty($removePath))
{
$left = substr($file, 0, strlen($removePath));

if ($left == $removePath)
{
$file = substr($file, strlen($removePath));
}
}

// Trim slash on the left


$file = ltrim($file, '/');

$ret = @ftp_chmod($this->handle, $perms, $file);


}

return $ret;
}

public function rmdir($directory)


{
$ret = @rmdir($directory);

if (!$ret && $this->useFTP)


{
$removePath = AKFactory::get('kickstart.setup.destdir', '');
if (!empty($removePath))
{
$left = substr($directory, 0, strlen($removePath));
if ($left == $removePath)
{
$directory = substr($directory, strlen($removePath));
}
}

$check = '/' . trim($this->dir, '/') . '/' . trim($directory,


'/');

$ret = @ftp_rmdir($this->handle, $check);


}
return $ret;
}

public function rename($from, $to)


{
$ret = @rename($from, $to);

if (!$ret && $this->useFTP)


{
$originalFrom = $from;
$originalTo = $to;

$removePath = AKFactory::get('kickstart.setup.destdir', '');


if (!empty($removePath))
{
$left = substr($from, 0, strlen($removePath));
if ($left == $removePath)
{
$from = substr($from, strlen($removePath));
}
}
$from = '/' . trim($this->dir, '/') . '/' . trim($from, '/');

if (!empty($removePath))
{
$left = substr($to, 0, strlen($removePath));
if ($left == $removePath)
{
$to = substr($to, strlen($removePath));
}
}
$to = '/' . trim($this->dir, '/') . '/' . trim($to, '/');

$ret = @ftp_rename($this->handle, $from, $to);


}

return $ret;
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* JPA archive extraction class
*/
class AKUnarchiverJPA extends AKAbstractUnarchiver
{
protected $archiveHeaderData = array();

protected function readArchiveHeader()


{
debugMsg('Preparing to read archive header');
// Initialize header data array
$this->archiveHeaderData = new stdClass();

// Open the first part


debugMsg('Opening the first part');
$this->nextFile();

// Fail for unreadable files


if ($this->fp === false)
{
debugMsg('Could not open the first part');

return false;
}

// Read the signature


$sig = fread($this->fp, 3);

if ($sig != 'JPA')
{
// Not a JPA file
debugMsg('Invalid archive signature');
$this->setError(AKText::_('ERR_NOT_A_JPA_FILE'));

return false;
}

// Read and parse header length


$header_length_array = unpack('v', fread($this->fp, 2));
$header_length = $header_length_array[1];

// Read and parse the known portion of header data (14 bytes)
$bin_data = fread($this->fp, 14);
$header_data = unpack('Cmajor/Cminor/Vcount/Vuncsize/Vcsize',
$bin_data);

// Load any remaining header data (forward compatibility)


$rest_length = $header_length - 19;

if ($rest_length > 0)
{
$junk = fread($this->fp, $rest_length);
}
else
{
$junk = '';
}

// Temporary array with all the data we read


$temp = array(
'signature' => $sig,
'length' => $header_length,
'major' => $header_data['major'],
'minor' => $header_data['minor'],
'filecount' => $header_data['count'],
'uncompressedsize' => $header_data['uncsize'],
'compressedsize' => $header_data['csize'],
'unknowndata' => $junk
);

// Array-to-object conversion
foreach ($temp as $key => $value)
{
$this->archiveHeaderData->{$key} = $value;
}

debugMsg('Header data:');
debugMsg('Length : ' . $header_length);
debugMsg('Major : ' . $header_data['major']);
debugMsg('Minor : ' . $header_data['minor']);
debugMsg('File count : ' . $header_data['count']);
debugMsg('Uncompressed size : ' . $header_data['uncsize']);
debugMsg('Compressed size : ' . $header_data['csize']);

$this->currentPartOffset = @ftell($this->fp);

$this->dataReadLength = 0;

return true;
}

/**
* Concrete classes must use this method to read the file header
*
* @return bool True if reading the file was successful, false if an error
occurred or we reached end of archive
*/
protected function readFileHeader()
{
// If the current part is over, proceed to the next part please
if ($this->isEOF(true))
{
debugMsg('Archive part EOF; moving to next file');
$this->nextFile();
}

$this->currentPartOffset = ftell($this->fp);

debugMsg("Reading file signature; part {$this->currentPartNumber},


offset {$this->currentPartOffset}");
// Get and decode Entity Description Block
$signature = fread($this->fp, 3);

$this->fileHeader = new stdClass();


$this->fileHeader->timestamp = 0;

// Check signature
if ($signature != 'JPF')
{
if ($this->isEOF(true))
{
// This file is finished; make sure it's the last one
$this->nextFile();

if (!$this->isEOF(false))
{
debugMsg('Invalid file signature before end of
archive encountered');
$this-
>setError(AKText::sprintf('INVALID_FILE_HEADER', $this->currentPartNumber, $this-
>currentPartOffset));

return false;
}

// We're just finished


return false;
}
else
{
$screwed = true;

if (AKFactory::get('kickstart.setup.ignoreerrors', false))
{
debugMsg('Invalid file block signature; launching
heuristic file block signature scanner');
$screwed = !$this->heuristicFileHeaderLocator();

if (!$screwed)
{
$signature = 'JPF';
}
else
{
debugMsg('Heuristics failed. Brace yourself for
the imminent crash.');
}
}

if ($screwed)
{
debugMsg('Invalid file block signature');
// This is not a file block! The archive is corrupt.
$this-
>setError(AKText::sprintf('INVALID_FILE_HEADER', $this->currentPartNumber, $this-
>currentPartOffset));

return false;
}
}
}
// This a JPA Entity Block. Process the header.

$isBannedFile = false;

// Read length of EDB and of the Entity Path Data


$length_array = unpack('vblocksize/vpathsize', fread($this->fp, 4));
// Read the path data
if ($length_array['pathsize'] > 0)
{
$file = fread($this->fp, $length_array['pathsize']);
}
else
{
$file = '';
}
// Handle file renaming
$isRenamed = false;
if (is_array($this->renameFiles) && (count($this->renameFiles) > 0))
{
if (array_key_exists($file, $this->renameFiles))
{
$file = $this->renameFiles[$file];
$isRenamed = true;
}
}

// Handle directory renaming


$isDirRenamed = false;
if (is_array($this->renameDirs) && (count($this->renameDirs) > 0))
{
if (array_key_exists(dirname($file), $this->renameDirs))
{
$file = rtrim($this->renameDirs[dirname($file)],
'/') . '/' . basename($file);
$isRenamed = true;
$isDirRenamed = true;
}
}

// Read and parse the known data portion


$bin_data = fread($this->fp, 14);
$header_data =
unpack('Ctype/Ccompression/Vcompsize/Vuncompsize/Vperms', $bin_data);
// Read any unknown data
$restBytes = $length_array['blocksize'] - (21 +
$length_array['pathsize']);

if ($restBytes > 0)
{
// Start reading the extra fields
while ($restBytes >= 4)
{
$extra_header_data = fread($this->fp, 4);
$extra_header = unpack('vsignature/vlength',
$extra_header_data);
$restBytes -= 4;
$extra_header['length'] -= 4;

switch ($extra_header['signature'])
{
case 256:
// File modified timestamp
if ($extra_header['length'] > 0)
{
$bindata = fread($this->fp,
$extra_header['length']);
$restBytes -= $extra_header['length'];
$timestamps =
unpack('Vmodified', substr($bindata, 0, 4));
$filectime =
$timestamps['modified'];
$this->fileHeader->timestamp =
$filectime;
}
break;

default:
// Unknown field
if ($extra_header['length'] > 0)
{
$junk = fread($this->fp,
$extra_header['length']);
$restBytes -= $extra_header['length'];
}
break;
}
}

if ($restBytes > 0)
{
$junk = fread($this->fp, $restBytes);
}
}

$compressionType = $header_data['compression'];

// Populate the return array


$this->fileHeader->file = $file;
$this->fileHeader->compressed = $header_data['compsize'];
$this->fileHeader->uncompressed = $header_data['uncompsize'];

switch ($header_data['type'])
{
case 0:
$this->fileHeader->type = 'dir';
break;

case 1:
$this->fileHeader->type = 'file';
break;

case 2:
$this->fileHeader->type = 'link';
break;
}

switch ($compressionType)
{
case 0:
$this->fileHeader->compression = 'none';
break;
case 1:
$this->fileHeader->compression = 'gzip';
break;
case 2:
$this->fileHeader->compression = 'bzip2';
break;
}

$this->fileHeader->permissions = $header_data['perms'];

// Find hard-coded banned files


if ((basename($this->fileHeader->file) == ".") || (basename($this-
>fileHeader->file) == ".."))
{
$isBannedFile = true;
}

// Also try to find banned files passed in class configuration


if ((count($this->skipFiles) > 0) && (!$isRenamed))
{
if (in_array($this->fileHeader->file, $this->skipFiles))
{
$isBannedFile = true;
}
}

// If we have a banned file, let's skip it


if ($isBannedFile)
{
debugMsg('Skipping file ' . $this->fileHeader->file);
// Advance the file pointer, skipping exactly the size of the
compressed data
$seekleft = $this->fileHeader->compressed;
while ($seekleft > 0)
{
// Ensure that we can seek past archive part boundaries
$curSize = @filesize($this->archiveList[$this-
>currentPartNumber]);
$curPos = @ftell($this->fp);
$canSeek = $curSize - $curPos;
if ($canSeek > $seekleft)
{
$canSeek = $seekleft;
}
@fseek($this->fp, $canSeek, SEEK_CUR);
$seekleft -= $canSeek;
if ($seekleft)
{
$this->nextFile();
}
}

$this->currentPartOffset = @ftell($this->fp);
$this->runState = AK_STATE_DONE;

return true;
}

// Remove the removePath, if any


$this->fileHeader->file = $this->removePath($this->fileHeader->file);

// Last chance to prepend a path to the filename


if (!empty($this->addPath) && !$isDirRenamed)
{
$this->fileHeader->file = $this->addPath . $this->fileHeader-
>file;
}

// Get the translated path name


$restorePerms = AKFactory::get('kickstart.setup.restoreperms', false);
if (!$this->mustSkip())
{
if ($this->fileHeader->type == 'file')
{
// Regular file; ask the postproc engine to process its
filename
if ($restorePerms)
{
$this->fileHeader->realFile =
$this->postProcEngine->processFilename($this-
>fileHeader->file, $this->fileHeader->permissions);
}
else
{
$this->fileHeader->realFile = $this->postProcEngine-
>processFilename($this->fileHeader->file);
}
}
elseif ($this->fileHeader->type == 'dir')
{
$dir = $this->fileHeader->file;

// Directory; just create it


if ($restorePerms)
{
$this->postProcEngine->createDirRecursive($dir,
$this->fileHeader->permissions);
}
else
{
$this->postProcEngine->createDirRecursive($dir,
0755);
}

$this->postProcEngine->processFilename(null);
}
else
{
// Symlink; do not post-process
$this->postProcEngine->processFilename(null);
}

$this->createDirectory();
}

// Header is read
$this->runState = AK_STATE_HEADER;

$this->dataReadLength = 0;

return true;
}

protected function heuristicFileHeaderLocator()


{
$ret = false;
$fullEOF = false;
while (!$ret && !$fullEOF)
{
$this->currentPartOffset = @ftell($this->fp);

if ($this->isEOF(true))
{
$this->nextFile();
}

if ($this->isEOF(false))
{
$fullEOF = true;
continue;
}

// Read 512Kb
$chunk = fread($this->fp, 524288);
$size_read = mb_strlen($chunk, '8bit');
//$pos = strpos($chunk, 'JPF');
$pos = mb_strpos($chunk, 'JPF', 0, '8bit');

if ($pos !== false)


{
// We found it!
$this->currentPartOffset += $pos + 3;
@fseek($this->fp, $this->currentPartOffset, SEEK_SET);
$ret = true;
}
else
{
// Not yet found :(
$this->currentPartOffset = @ftell($this->fp);
}
}

return $ret;
}

/**
* Creates the directory this file points to
*/
protected function createDirectory()
{
if ($this->mustSkip())
{
return true;
}

// Do we need to create a directory?


if (empty($this->fileHeader->realFile))
{
$this->fileHeader->realFile = $this->fileHeader->file;
}

$lastSlash = strrpos($this->fileHeader->realFile, '/');


$dirName = substr($this->fileHeader->realFile, 0, $lastSlash);
$perms = $this->flagRestorePermissions ? $this->fileHeader-
>permissions : 0755;
$ignore = AKFactory::get('kickstart.setup.ignoreerrors', false) ||
$this->isIgnoredDirectory($dirName);

if (($this->postProcEngine->createDirRecursive($dirName, $perms) ==
false) && (!$ignore))
{
$this->setError(AKText::sprintf('COULDNT_CREATE_DIR', $dirName));

return false;
}
else
{
return true;
}
}

/**
* Concrete classes must use this method to process file data. It must set
$runState to AK_STATE_DATAREAD when
* it's finished processing the file data.
*
* @return bool True if processing the file data was successful, false if an
error occurred
*/
protected function processFileData()
{
switch ($this->fileHeader->type)
{
case 'dir':
return $this->processTypeDir();
break;

case 'link':
return $this->processTypeLink();
break;

case 'file':
switch ($this->fileHeader->compression)
{
case 'none':
return $this->processTypeFileUncompressed();
break;

case 'gzip':
case 'bzip2':
return $this-
>processTypeFileCompressedSimple();
break;

}
break;

default:
debugMsg('Unknown file type ' . $this->fileHeader->type);
break;
}
}

/**
* Process the file data of a directory entry
*
* @return bool
*/
private function processTypeDir()
{
// Directory entries in the JPA do not have file data, therefore we're
done processing the entry
$this->runState = AK_STATE_DATAREAD;

return true;
}

/**
* Process the file data of a link entry
*
* @return bool
*/
private function processTypeLink()
{
$readBytes = 0;
$toReadBytes = 0;
$leftBytes = $this->fileHeader->compressed;
$data = '';

while ($leftBytes > 0)


{
$toReadBytes = ($leftBytes > $this->chunkSize) ? $this-
>chunkSize : $leftBytes;
$mydata = $this->fread($this->fp, $toReadBytes);
$reallyReadBytes = akstringlen($mydata);
$data .= $mydata;
$leftBytes -= $reallyReadBytes;

if ($reallyReadBytes < $toReadBytes)


{
// We read less than requested! Why? Did we hit local EOF?
if ($this->isEOF(true) && !$this->isEOF(false))
{
// Yeap. Let's go to the next file
$this->nextFile();
}
else
{
debugMsg('End of local file before reading all data
with no more parts left. The archive is corrupt or truncated.');
// Nope. The archive is corrupt
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}
}

$filename = isset($this->fileHeader->realFile) ? $this->fileHeader-


>realFile : $this->fileHeader->file;

if (!$this->mustSkip())
{
// Try to remove an existing file or directory by the same name
if (file_exists($filename))
{
@unlink($filename);
@rmdir($filename);
}

// Remove any trailing slash


if (substr($filename, -1) == '/')
{
$filename = substr($filename, 0, -1);
}
// Create the symlink - only possible within PHP context. There's
no support built in the FTP protocol, so no postproc use is possible here :(
@symlink($data, $filename);
}

$this->runState = AK_STATE_DATAREAD;

return true; // No matter if the link was created!


}

private function processTypeFileUncompressed()


{
// Uncompressed files are being processed in small chunks, to avoid
timeouts
if (($this->dataReadLength == 0) && !$this->mustSkip())
{
// Before processing file data, ensure permissions are adequate
$this->setCorrectPermissions($this->fileHeader->file);
}

// Open the output file


if (!$this->mustSkip())
{
$ignore =
AKFactory::get('kickstart.setup.ignoreerrors', false) ||
$this->isIgnoredDirectory($this->fileHeader->file);

if ($this->dataReadLength == 0)
{
$outfp = @fopen($this->fileHeader->realFile, 'wb');
}
else
{
$outfp = @fopen($this->fileHeader->realFile, 'ab');
}

// Can we write to the file?


if (($outfp === false) && (!$ignore))
{
// An error occurred
debugMsg('Could not write to output file');
$this->setError(AKText::sprintf('COULDNT_WRITE_FILE',
$this->fileHeader->realFile));

return false;
}
}
// Does the file have any data, at all?
if ($this->fileHeader->compressed == 0)
{
// No file data!
if (!$this->mustSkip() && is_resource($outfp))
{
@fclose($outfp);
}

$this->runState = AK_STATE_DATAREAD;

return true;
}

// Reference to the global timer


$timer = AKFactory::getTimer();

$toReadBytes = 0;
$leftBytes = $this->fileHeader->compressed - $this->dataReadLength;

// Loop while there's data to read and enough time to do it


while (($leftBytes > 0) && ($timer->getTimeLeft() > 0))
{
$toReadBytes = ($leftBytes > $this->chunkSize) ? $this-
>chunkSize : $leftBytes;
$data = $this->fread($this->fp, $toReadBytes);
$reallyReadBytes = akstringlen($data);
$leftBytes -= $reallyReadBytes;
$this->dataReadLength += $reallyReadBytes;

if ($reallyReadBytes < $toReadBytes)


{
// We read less than requested! Why? Did we hit local EOF?
if ($this->isEOF(true) && !$this->isEOF(false))
{
// Yeap. Let's go to the next file
$this->nextFile();
}
else
{
// Nope. The archive is corrupt
debugMsg('Not enough data in file. The archive is
truncated or corrupt.');
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}

if (!$this->mustSkip())
{
if (is_resource($outfp))
{
@fwrite($outfp, $data);
}
}
}

// Close the file pointer


if (!$this->mustSkip())
{
if (is_resource($outfp))
{
@fclose($outfp);
}
}

// Was this a pre-timeout bail out?


if ($leftBytes > 0)
{
$this->runState = AK_STATE_DATA;
}
else
{
// Oh! We just finished!
$this->runState = AK_STATE_DATAREAD;
$this->dataReadLength = 0;
}

return true;
}

private function processTypeFileCompressedSimple()


{
if (!$this->mustSkip())
{
// Before processing file data, ensure permissions are adequate
$this->setCorrectPermissions($this->fileHeader->file);

// Open the output file


$outfp = @fopen($this->fileHeader->realFile, 'wb');

// Can we write to the file?


$ignore =
AKFactory::get('kickstart.setup.ignoreerrors', false) ||
$this->isIgnoredDirectory($this->fileHeader->file);

if (($outfp === false) && (!$ignore))


{
// An error occurred
debugMsg('Could not write to output file');
$this->setError(AKText::sprintf('COULDNT_WRITE_FILE',
$this->fileHeader->realFile));

return false;
}
}

// Does the file have any data, at all?


if ($this->fileHeader->compressed == 0)
{
// No file data!
if (!$this->mustSkip())
{
if (is_resource($outfp))
{
@fclose($outfp);
}
}
$this->runState = AK_STATE_DATAREAD;

return true;
}

// Simple compressed files are processed as a whole; we can't do chunk


processing
$zipData = $this->fread($this->fp, $this->fileHeader->compressed);
while (akstringlen($zipData) < $this->fileHeader->compressed)
{
// End of local file before reading all data, but have more
archive parts?
if ($this->isEOF(true) && !$this->isEOF(false))
{
// Yeap. Read from the next file
$this->nextFile();
$bytes_left = $this->fileHeader->compressed -
akstringlen($zipData);
$zipData .= $this->fread($this->fp, $bytes_left);
}
else
{
debugMsg('End of local file before reading all data with no
more parts left. The archive is corrupt or truncated.');
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}

if ($this->fileHeader->compression == 'gzip')
{
$unzipData = gzinflate($zipData);
}
elseif ($this->fileHeader->compression == 'bzip2')
{
$unzipData = bzdecompress($zipData);
}
unset($zipData);

// Write to the file.


if (!$this->mustSkip() && is_resource($outfp))
{
@fwrite($outfp, $unzipData, $this->fileHeader->uncompressed);
@fclose($outfp);
}
unset($unzipData);

$this->runState = AK_STATE_DATAREAD;

return true;
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* ZIP archive extraction class
*
* Since the file data portion of ZIP and JPA are similarly structured (it's empty
for dirs,
* linked node name for symlinks, dumped binary data for no compressions and dumped
gzipped
* binary data for gzip compression) we just have to subclass AKUnarchiverJPA and
change the
* header reading bits. Reusable code ;)
*/
class AKUnarchiverZIP extends AKUnarchiverJPA
{
var $expectDataDescriptor = false;

protected function readArchiveHeader()


{
debugMsg('Preparing to read archive header');
// Initialize header data array
$this->archiveHeaderData = new stdClass();

// Open the first part


debugMsg('Opening the first part');
$this->nextFile();

// Fail for unreadable files


if ($this->fp === false)
{
debugMsg('The first part is not readable');

return false;
}

// Read a possible multipart signature


$sigBinary = fread($this->fp, 4);
$headerData = unpack('Vsig', $sigBinary);

// Roll back if it's not a multipart archive


if ($headerData['sig'] == 0x04034b50)
{
debugMsg('The archive is not multipart');
fseek($this->fp, -4, SEEK_CUR);
}
else
{
debugMsg('The archive is multipart');
}

$multiPartSigs = array(
0x08074b50, // Multi-part ZIP
0x30304b50, // Multi-part ZIP (alternate)
0x04034b50 // Single file
);
if (!in_array($headerData['sig'], $multiPartSigs))
{
debugMsg('Invalid header signature ' .
dechex($headerData['sig']));
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}

$this->currentPartOffset = @ftell($this->fp);
debugMsg('Current part offset after reading header: ' . $this-
>currentPartOffset);

$this->dataReadLength = 0;

return true;
}

/**
* Concrete classes must use this method to read the file header
*
* @return bool True if reading the file was successful, false if an error
occurred or we reached end of archive
*/
protected function readFileHeader()
{
// If the current part is over, proceed to the next part please
if ($this->isEOF(true))
{
debugMsg('Opening next archive part');
$this->nextFile();
}

$this->currentPartOffset = ftell($this->fp);

if ($this->expectDataDescriptor)
{
// The last file had bit 3 of the general purpose bit flag set.
This means that we have a
// 12 byte data descriptor we need to skip. To make things worse,
there might also be a 4
// byte optional data descriptor header (0x08074b50).
$junk = @fread($this->fp, 4);
$junk = unpack('Vsig', $junk);
if ($junk['sig'] == 0x08074b50)
{
// Yes, there was a signature
$junk = @fread($this->fp, 12);
debugMsg('Data descriptor (w/ header) skipped at ' .
(ftell($this->fp) - 12));
}
else
{
// No, there was no signature, just read another 8 bytes
$junk = @fread($this->fp, 8);
debugMsg('Data descriptor (w/out header) skipped at ' .
(ftell($this->fp) - 8));
}

// And check for EOF, too


if ($this->isEOF(true))
{
debugMsg('EOF before reading header');

$this->nextFile();
}
}

// Get and decode Local File Header


$headerBinary = fread($this->fp, 30);
$headerData =

unpack('Vsig/C2ver/vbitflag/vcompmethod/vlastmodtime/vlastmoddate/Vcrc/Vcompsize/Vu
ncomp/vfnamelen/veflen', $headerBinary);

// Check signature
if (!($headerData['sig'] == 0x04034b50))
{
debugMsg('Not a file signature at ' . (ftell($this->fp) - 4));

// The signature is not the one used for files. Is this a central
directory record (i.e. we're done)?
if ($headerData['sig'] == 0x02014b50)
{
debugMsg('EOCD signature at ' . (ftell($this->fp) - 4));
// End of ZIP file detected. We'll just skip to the end of
file...
while ($this->nextFile())
{
};
@fseek($this->fp, 0, SEEK_END); // Go to EOF
return false;
}
else
{
debugMsg('Invalid signature ' .
dechex($headerData['sig']) . ' at ' . ftell($this->fp));
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}

// If bit 3 of the bitflag is set, expectDataDescriptor is true


$this->expectDataDescriptor = ($headerData['bitflag'] & 4) == 4;

$this->fileHeader = new stdClass();


$this->fileHeader->timestamp = 0;

// Read the last modified data and time


$lastmodtime = $headerData['lastmodtime'];
$lastmoddate = $headerData['lastmoddate'];

if ($lastmoddate && $lastmodtime)


{
// ----- Extract time
$v_hour = ($lastmodtime & 0xF800) >> 11;
$v_minute = ($lastmodtime & 0x07E0) >> 5;
$v_seconde = ($lastmodtime & 0x001F) * 2;

// ----- Extract date


$v_year = (($lastmoddate & 0xFE00) >> 9) + 1980;
$v_month = ($lastmoddate & 0x01E0) >> 5;
$v_day = $lastmoddate & 0x001F;

// ----- Get UNIX date format


$this->fileHeader->timestamp = @mktime($v_hour, $v_minute,
$v_seconde, $v_month, $v_day, $v_year);
}

$isBannedFile = false;

$this->fileHeader->compressed = $headerData['compsize'];
$this->fileHeader->uncompressed = $headerData['uncomp'];
$nameFieldLength = $headerData['fnamelen'];
$extraFieldLength = $headerData['eflen'];

// Read filename field


$this->fileHeader->file = fread($this->fp, $nameFieldLength);

// Handle file renaming


$isRenamed = false;
if (is_array($this->renameFiles) && (count($this->renameFiles) > 0))
{
if (array_key_exists($this->fileHeader->file, $this-
>renameFiles))
{
$this->fileHeader->file = $this->renameFiles[$this-
>fileHeader->file];
$isRenamed = true;
}
}

// Handle directory renaming


$isDirRenamed = false;
if (is_array($this->renameDirs) && (count($this->renameDirs) > 0))
{
if (array_key_exists(dirname($this->fileHeader->file), $this-
>renameDirs))
{
$file =
rtrim($this->renameDirs[dirname($this->fileHeader-
>file)], '/') . '/' . basename($this->fileHeader->file);
$isRenamed = true;
$isDirRenamed = true;
}
}

// Read extra field if present


if ($extraFieldLength > 0)
{
$extrafield = fread($this->fp, $extraFieldLength);
}

debugMsg('*' . ftell($this->fp) . ' IS START OF ' . $this->fileHeader-


>file . ' (' . $this->fileHeader->compressed . ' bytes)');
// Decide filetype -- Check for directories
$this->fileHeader->type = 'file';
if (strrpos($this->fileHeader->file, '/') == strlen($this->fileHeader-
>file) - 1)
{
$this->fileHeader->type = 'dir';
}
// Decide filetype -- Check for symbolic links
if (($headerData['ver1'] == 10) && ($headerData['ver2'] == 3))
{
$this->fileHeader->type = 'link';
}

switch ($headerData['compmethod'])
{
case 0:
$this->fileHeader->compression = 'none';
break;
case 8:
$this->fileHeader->compression = 'gzip';
break;
}

// Find hard-coded banned files


if ((basename($this->fileHeader->file) == ".") || (basename($this-
>fileHeader->file) == ".."))
{
$isBannedFile = true;
}

// Also try to find banned files passed in class configuration


if ((count($this->skipFiles) > 0) && (!$isRenamed))
{
if (in_array($this->fileHeader->file, $this->skipFiles))
{
$isBannedFile = true;
}
}

// If we have a banned file, let's skip it


if ($isBannedFile)
{
// Advance the file pointer, skipping exactly the size of the
compressed data
$seekleft = $this->fileHeader->compressed;
while ($seekleft > 0)
{
// Ensure that we can seek past archive part boundaries
$curSize = @filesize($this->archiveList[$this-
>currentPartNumber]);
$curPos = @ftell($this->fp);
$canSeek = $curSize - $curPos;
if ($canSeek > $seekleft)
{
$canSeek = $seekleft;
}
@fseek($this->fp, $canSeek, SEEK_CUR);
$seekleft -= $canSeek;
if ($seekleft)
{
$this->nextFile();
}
}

$this->currentPartOffset = @ftell($this->fp);
$this->runState = AK_STATE_DONE;

return true;
}

// Remove the removePath, if any


$this->fileHeader->file = $this->removePath($this->fileHeader->file);

// Last chance to prepend a path to the filename


if (!empty($this->addPath) && !$isDirRenamed)
{
$this->fileHeader->file = $this->addPath . $this->fileHeader-
>file;
}

// Get the translated path name


if (!$this->mustSkip())
{
if ($this->fileHeader->type == 'file')
{
$this->fileHeader->realFile = $this->postProcEngine-
>processFilename($this->fileHeader->file);
}
elseif ($this->fileHeader->type == 'dir')
{
$this->fileHeader->timestamp = 0;

$dir = $this->fileHeader->file;

$this->postProcEngine->createDirRecursive($dir, 0755);
$this->postProcEngine->processFilename(null);
}
else
{
// Symlink; do not post-process
$this->fileHeader->timestamp = 0;
$this->postProcEngine->processFilename(null);
}

$this->createDirectory();
}

// Header is read
$this->runState = AK_STATE_HEADER;

return true;
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* JPS archive extraction class
*/
class AKUnarchiverJPS extends AKUnarchiverJPA
{
/**
* Header data for the archive
*
* @var array
*/
protected $archiveHeaderData = array();

/**
* Plaintext password from which the encryption key will be derived with
PBKDF2
*
* @var string
*/
protected $password = '';

/**
* Which hash algorithm should I use for key derivation with PBKDF2.
*
* @var string
*/
private $pbkdf2Algorithm = 'sha1';

/**
* How many iterations should I use for key derivation with PBKDF2
*
* @var int
*/
private $pbkdf2Iterations = 1000;

/**
* Should I use a static salt for key derivation with PBKDF2?
*
* @var bool
*/
private $pbkdf2UseStaticSalt = 0;

/**
* Static salt for key derivation with PBKDF2
*
* @var string
*/
private $pbkdf2StaticSalt = "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0";

/**
* How much compressed data I have read since the last file header read
*
* @var int
*/
private $compressedSizeReadSinceLastFileHeader = 0;

public function __construct()


{
parent::__construct();

$this->password = AKFactory::get('kickstart.jps.password', '');


}

public function __wakeup()


{
parent::__wakeup();

// Make sure the decryption is all set up (required!)


AKEncryptionAES::setPbkdf2Algorithm($this->pbkdf2Algorithm);
AKEncryptionAES::setPbkdf2Iterations($this->pbkdf2Iterations);
AKEncryptionAES::setPbkdf2UseStaticSalt($this->pbkdf2UseStaticSalt);
AKEncryptionAES::setPbkdf2StaticSalt($this->pbkdf2StaticSalt);
}

protected function readArchiveHeader()


{
// Initialize header data array
$this->archiveHeaderData = new stdClass();

// Open the first part


$this->nextFile();

// Fail for unreadable files


if ($this->fp === false)
{
return false;
}

// Read the signature


$sig = fread($this->fp, 3);

if ($sig != 'JPS')
{
// Not a JPA file
$this->setError(AKText::_('ERR_NOT_A_JPS_FILE'));

return false;
}

// Read and parse the known portion of header data (5 bytes)


$bin_data = fread($this->fp, 5);
$header_data = unpack('Cmajor/Cminor/cspanned/vextra', $bin_data);

// Is this a v2 archive?
$versionHumanReadable = $header_data['major'] . '.' .
$header_data['minor'];
$isV2Archive = version_compare($versionHumanReadable, '2.0', 'ge');

// Load any remaining header data


$rest_length = $header_data['extra'];
if ($isV2Archive && $rest_length)
{
// V2 archives only have one kind of extra header
if (!$this->readKeyExpansionExtraHeader())
{
return false;
}
}
elseif ($rest_length > 0)
{
$junk = fread($this->fp, $rest_length);
}

// Temporary array with all the data we read


$temp = array(
'signature' => $sig,
'major' => $header_data['major'],
'minor' => $header_data['minor'],
'spanned' => $header_data['spanned']
);
// Array-to-object conversion
foreach ($temp as $key => $value)
{
$this->archiveHeaderData->{$key} = $value;
}

$this->currentPartOffset = @ftell($this->fp);

$this->dataReadLength = 0;

return true;
}

/**
* Concrete classes must use this method to read the file header
*
* @return bool True if reading the file was successful, false if an error
occurred or we reached end of archive
*/
protected function readFileHeader()
{
// If the current part is over, proceed to the next part please
if ($this->isEOF(true))
{
$this->nextFile();
}

$this->currentPartOffset = ftell($this->fp);

// Get and decode Entity Description Block


$signature = fread($this->fp, 3);

// Check for end-of-archive siganture


if ($signature == 'JPE')
{
$this->setState('postrun');

return true;
}
$this->fileHeader = new stdClass();
$this->fileHeader->timestamp = 0;

// Check signature
if ($signature != 'JPF')
{
if ($this->isEOF(true))
{
// This file is finished; make sure it's the last one
$this->nextFile();
if (!$this->isEOF(false))
{
$this-
>setError(AKText::sprintf('INVALID_FILE_HEADER', $this->currentPartNumber, $this-
>currentPartOffset));

return false;
}

// We're just finished


return false;
}
else
{
fseek($this->fp, -6, SEEK_CUR);
$signature = fread($this->fp, 3);
if ($signature == 'JPE')
{
return false;
}

$this->setError(AKText::sprintf('INVALID_FILE_HEADER',
$this->currentPartNumber, $this->currentPartOffset));

return false;
}
}

// This a JPS Entity Block. Process the header.

$isBannedFile = false;

// Make sure the decryption is all set up


AKEncryptionAES::setPbkdf2Algorithm($this->pbkdf2Algorithm);
AKEncryptionAES::setPbkdf2Iterations($this->pbkdf2Iterations);
AKEncryptionAES::setPbkdf2UseStaticSalt($this->pbkdf2UseStaticSalt);
AKEncryptionAES::setPbkdf2StaticSalt($this->pbkdf2StaticSalt);

// Read and decrypt the header


$edbhData = fread($this->fp, 4);
$edbh = unpack('vencsize/vdecsize', $edbhData);
$bin_data = fread($this->fp, $edbh['encsize']);

// Add the header length to the data read


$this->compressedSizeReadSinceLastFileHeader += $edbh['encsize'] + 4;

// Decrypt and truncate


$bin_data = AKEncryptionAES::AESDecryptCBC($bin_data, $this->password);
$bin_data = substr($bin_data, 0, $edbh['decsize']);

// Read length of EDB and of the Entity Path Data


$length_array = unpack('vpathsize', substr($bin_data, 0, 2));
// Read the path data
$file = substr($bin_data, 2, $length_array['pathsize']);

// Handle file renaming


$isRenamed = false;
if (is_array($this->renameFiles) && (count($this->renameFiles) > 0))
{
if (array_key_exists($file, $this->renameFiles))
{
$file = $this->renameFiles[$file];
$isRenamed = true;
}
}

// Handle directory renaming


$isDirRenamed = false;
if (is_array($this->renameDirs) && (count($this->renameDirs) > 0))
{
if (array_key_exists(dirname($file), $this->renameDirs))
{
$file = rtrim($this->renameDirs[dirname($file)],
'/') . '/' . basename($file);
$isRenamed = true;
$isDirRenamed = true;
}
}

// Read and parse the known data portion


$bin_data = substr($bin_data, 2 + $length_array['pathsize']);
$header_data =
unpack('Ctype/Ccompression/Vuncompsize/Vperms/Vfilectime', $bin_data);

$this->fileHeader->timestamp = $header_data['filectime'];
$compressionType = $header_data['compression'];

// Populate the return array


$this->fileHeader->file = $file;
$this->fileHeader->uncompressed = $header_data['uncompsize'];
switch ($header_data['type'])
{
case 0:
$this->fileHeader->type = 'dir';
break;

case 1:
$this->fileHeader->type = 'file';
break;

case 2:
$this->fileHeader->type = 'link';
break;
}
switch ($compressionType)
{
case 0:
$this->fileHeader->compression = 'none';
break;
case 1:
$this->fileHeader->compression = 'gzip';
break;
case 2:
$this->fileHeader->compression = 'bzip2';
break;
}
$this->fileHeader->permissions = $header_data['perms'];

// Find hard-coded banned files


if ((basename($this->fileHeader->file) == ".") || (basename($this-
>fileHeader->file) == ".."))
{
$isBannedFile = true;
}

// Also try to find banned files passed in class configuration


if ((count($this->skipFiles) > 0) && (!$isRenamed))
{
if (in_array($this->fileHeader->file, $this->skipFiles))
{
$isBannedFile = true;
}
}

// If we have a banned file, let's skip it


if ($isBannedFile)
{
$done = false;
while (!$done)
{
// Read the Data Chunk Block header
$binMiniHead = fread($this->fp, 8);
if (in_array(substr($binMiniHead, 0, 3), array('JPF',
'JPE')))
{
// Not a Data Chunk Block header, I am done skipping
the file
@fseek($this->fp, -8, SEEK_CUR); // Roll back the
file pointer
$done = true; // Mark as done
continue; // Exit loop
}
else
{
// Skip forward by the amount of compressed data
$miniHead = unpack('Vencsize/Vdecsize',
$binMiniHead);
@fseek($this->fp, $miniHead['encsize'], SEEK_CUR);
$this->compressedSizeReadSinceLastFileHeader += 8 +
$miniHead['encsize'];
}
}

$this->currentPartOffset = @ftell($this->fp);
$this->runState = AK_STATE_DONE;
$this->fileHeader->compressed = $this-
>compressedSizeReadSinceLastFileHeader;
$this->compressedSizeReadSinceLastFileHeader = 0;

return true;
}

// Remove the removePath, if any


$this->fileHeader->file = $this->removePath($this->fileHeader->file);

// Last chance to prepend a path to the filename


if (!empty($this->addPath) && !$isDirRenamed)
{
$this->fileHeader->file = $this->addPath . $this->fileHeader-
>file;
}

// Get the translated path name


$restorePerms = AKFactory::get('kickstart.setup.restoreperms', false);

if (!$this->mustSkip())
{
if ($this->fileHeader->type == 'file')
{
// Regular file; ask the postproc engine to process its
filename
if ($restorePerms)
{
$this->fileHeader->realFile =
$this->postProcEngine->processFilename($this-
>fileHeader->file, $this->fileHeader->permissions);
}
else
{
$this->fileHeader->realFile = $this->postProcEngine-
>processFilename($this->fileHeader->file);
}
}
elseif ($this->fileHeader->type == 'dir')
{
$dir = $this->fileHeader->file;
$this->fileHeader->realFile = $dir;

// Directory; just create it


if ($restorePerms)
{
$this->postProcEngine->createDirRecursive($this-
>fileHeader->file, $this->fileHeader->permissions);
}
else
{
$this->postProcEngine->createDirRecursive($this-
>fileHeader->file, 0755);
}

$this->postProcEngine->processFilename(null);
}
else
{
// Symlink; do not post-process
$this->postProcEngine->processFilename(null);
}

$this->createDirectory();
}

$this->fileHeader->compressed = $this-
>compressedSizeReadSinceLastFileHeader;
$this->compressedSizeReadSinceLastFileHeader = 0;

// Header is read
$this->runState = AK_STATE_HEADER;

$this->dataReadLength = 0;

return true;
}

/**
* Creates the directory this file points to
*/
protected function createDirectory()
{
if ($this->mustSkip())
{
return true;
}

// Do we need to create a directory?


$lastSlash = strrpos($this->fileHeader->realFile, '/');
$dirName = substr($this->fileHeader->realFile, 0, $lastSlash);
$perms = 0755;
$ignore = AKFactory::get('kickstart.setup.ignoreerrors', false) ||
$this->isIgnoredDirectory($dirName);

if (($this->postProcEngine->createDirRecursive($dirName, $perms) ==
false) && (!$ignore))
{
$this->setError(AKText::sprintf('COULDNT_CREATE_DIR', $dirName));

return false;
}

return true;
}

/**
* Concrete classes must use this method to process file data. It must set
$runState to AK_STATE_DATAREAD when
* it's finished processing the file data.
*
* @return bool True if processing the file data was successful, false if an
error occurred
*/
protected function processFileData()
{
switch ($this->fileHeader->type)
{
case 'dir':
return $this->processTypeDir();
break;

case 'link':
return $this->processTypeLink();
break;

case 'file':
switch ($this->fileHeader->compression)
{
case 'none':
return $this->processTypeFileUncompressed();
break;

case 'gzip':
case 'bzip2':
return $this-
>processTypeFileCompressedSimple();
break;

}
break;
}
}

/**
* Process the file data of a directory entry
*
* @return bool
*/
private function processTypeDir()
{
// Directory entries in the JPA do not have file data, therefore we're
done processing the entry
$this->runState = AK_STATE_DATAREAD;

return true;
}

/**
* Process the file data of a link entry
*
* @return bool
*/
private function processTypeLink()
{

// Does the file have any data, at all?


if ($this->fileHeader->uncompressed == 0)
{
// No file data!
$this->runState = AK_STATE_DATAREAD;

return true;
}

// Read the mini header


$binMiniHeader = fread($this->fp, 8);
$reallyReadBytes = akstringlen($binMiniHeader);

if ($reallyReadBytes < 8)
{
// We read less than requested! Why? Did we hit local EOF?
if ($this->isEOF(true) && !$this->isEOF(false))
{
// Yeap. Let's go to the next file
$this->nextFile();
// Retry reading the header
$binMiniHeader = fread($this->fp, 8);
$reallyReadBytes = akstringlen($binMiniHeader);
// Still not enough data? If so, the archive is corrupt or
missing parts.
if ($reallyReadBytes < 8)
{
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}
else
{
// Nope. The archive is corrupt
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}

// Read the encrypted data


$miniHeader = unpack('Vencsize/Vdecsize', $binMiniHeader);
$toReadBytes = $miniHeader['encsize'];
$data = $this->fread($this->fp, $toReadBytes);
$reallyReadBytes = akstringlen($data);
$this->compressedSizeReadSinceLastFileHeader += 8 +
$miniHeader['encsize'];

if ($reallyReadBytes < $toReadBytes)


{
// We read less than requested! Why? Did we hit local EOF?
if ($this->isEOF(true) && !$this->isEOF(false))
{
// Yeap. Let's go to the next file
$this->nextFile();
// Read the rest of the data
$toReadBytes -= $reallyReadBytes;
$restData = $this->fread($this->fp, $toReadBytes);
$reallyReadBytes = akstringlen($data);
if ($reallyReadBytes < $toReadBytes)
{
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
$data .= $restData;
}
else
{
// Nope. The archive is corrupt
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}

// Decrypt the data


$data = AKEncryptionAES::AESDecryptCBC($data, $this->password);

// Is the length of the decrypted data less than expected?


$data_length = akstringlen($data);
if ($data_length < $miniHeader['decsize'])
{
$this->setError(AKText::_('ERR_INVALID_JPS_PASSWORD'));

return false;
}

// Trim the data


$data = substr($data, 0, $miniHeader['decsize']);

if (!$this->mustSkip())
{
// Try to remove an existing file or directory by the same name
if (file_exists($this->fileHeader->file))
{
@unlink($this->fileHeader->file);
@rmdir($this->fileHeader->file);
}
// Remove any trailing slash
if (substr($this->fileHeader->file, -1) == '/')
{
$this->fileHeader->file = substr($this->fileHeader->file,
0, -1);
}
// Create the symlink - only possible within PHP context. There's
no support built in the FTP protocol, so no postproc use is possible here :(
@symlink($data, $this->fileHeader->file);
}

$this->runState = AK_STATE_DATAREAD;

return true; // No matter if the link was created!


}

private function processTypeFileUncompressed()


{
// Uncompressed files are being processed in small chunks, to avoid
timeouts
if (($this->dataReadLength == 0) && !$this->mustSkip())
{
// Before processing file data, ensure permissions are adequate
$this->setCorrectPermissions($this->fileHeader->file);
}

// Open the output file


if (!$this->mustSkip())
{
$ignore =
AKFactory::get('kickstart.setup.ignoreerrors', false) ||
$this->isIgnoredDirectory($this->fileHeader->file);
if ($this->dataReadLength == 0)
{
$outfp = @fopen($this->fileHeader->realFile, 'wb');
}
else
{
$outfp = @fopen($this->fileHeader->realFile, 'ab');
}

// Can we write to the file?


if (($outfp === false) && (!$ignore))
{
// An error occurred
$this->setError(AKText::sprintf('COULDNT_WRITE_FILE',
$this->fileHeader->realFile));

return false;
}
}

// Does the file have any data, at all?


if ($this->fileHeader->uncompressed == 0)
{
// No file data!
if (!$this->mustSkip() && is_resource($outfp))
{
@fclose($outfp);
}
$this->runState = AK_STATE_DATAREAD;

return true;
}

$this->setError('An uncompressed file was detected; this is not


supported by this archive extraction utility');

return false;
}

private function processTypeFileCompressedSimple()


{
$timer = AKFactory::getTimer();

// Files are being processed in small chunks, to avoid timeouts


if (($this->dataReadLength == 0) && !$this->mustSkip())
{
// Before processing file data, ensure permissions are adequate
$this->setCorrectPermissions($this->fileHeader->file);
}

// Open the output file


if (!$this->mustSkip())
{
// Open the output file
$outfp = @fopen($this->fileHeader->realFile, 'wb');
// Can we write to the file?
$ignore =
AKFactory::get('kickstart.setup.ignoreerrors', false) ||
$this->isIgnoredDirectory($this->fileHeader->file);
if (($outfp === false) && (!$ignore))
{
// An error occurred
$this->setError(AKText::sprintf('COULDNT_WRITE_FILE',
$this->fileHeader->realFile));

return false;
}
}

// Does the file have any data, at all?


if ($this->fileHeader->uncompressed == 0)
{
// No file data!
if (!$this->mustSkip())
{
if (is_resource($outfp))
{
@fclose($outfp);
}
}
$this->runState = AK_STATE_DATAREAD;

return true;
}

$leftBytes = $this->fileHeader->uncompressed - $this->dataReadLength;

// Loop while there's data to write and enough time to do it


while (($leftBytes > 0) && ($timer->getTimeLeft() > 0))
{
// Read the mini header
$binMiniHeader = fread($this->fp, 8);
$reallyReadBytes = akstringlen($binMiniHeader);
if ($reallyReadBytes < 8)
{
// We read less than requested! Why? Did we hit local EOF?
if ($this->isEOF(true) && !$this->isEOF(false))
{
// Yeap. Let's go to the next file
$this->nextFile();
// Retry reading the header
$binMiniHeader = fread($this->fp, 8);
$reallyReadBytes = akstringlen($binMiniHeader);
// Still not enough data? If so, the archive is
corrupt or missing parts.
if ($reallyReadBytes < 8)
{
$this-
>setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}
else
{
// Nope. The archive is corrupt
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}

// Read the encrypted data


$miniHeader = unpack('Vencsize/Vdecsize', $binMiniHeader);
$toReadBytes = $miniHeader['encsize'];
$data = $this->fread($this->fp, $toReadBytes);
$reallyReadBytes = akstringlen($data);

$this->compressedSizeReadSinceLastFileHeader +=
$miniHeader['encsize'] + 8;

if ($reallyReadBytes < $toReadBytes)


{
// We read less than requested! Why? Did we hit local EOF?
if ($this->isEOF(true) && !$this->isEOF(false))
{
// Yeap. Let's go to the next file
$this->nextFile();
// Read the rest of the data
$toReadBytes -= $reallyReadBytes;
$restData = $this->fread($this->fp,
$toReadBytes);
$reallyReadBytes = akstringlen($restData);
if ($reallyReadBytes < $toReadBytes)
{
$this-
>setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
if (akstringlen($data) == 0)
{
$data = $restData;
}
else
{
$data .= $restData;
}
}
else
{
// Nope. The archive is corrupt
$this->setError(AKText::_('ERR_CORRUPT_ARCHIVE'));

return false;
}
}

// Decrypt the data


$data = AKEncryptionAES::AESDecryptCBC($data, $this->password);

// Is the length of the decrypted data less than expected?


$data_length = akstringlen($data);
if ($data_length < $miniHeader['decsize'])
{
$this->setError(AKText::_('ERR_INVALID_JPS_PASSWORD'));

return false;
}

// Trim the data


$data = substr($data, 0, $miniHeader['decsize']);

// Decompress
$data = gzinflate($data);
$unc_len = akstringlen($data);

// Write the decrypted data


if (!$this->mustSkip())
{
if (is_resource($outfp))
{
@fwrite($outfp, $data, akstringlen($data));
}
}

// Update the read length


$this->dataReadLength += $unc_len;
$leftBytes = $this->fileHeader->uncompressed - $this-
>dataReadLength;
}

// Close the file pointer


if (!$this->mustSkip())
{
if (is_resource($outfp))
{
@fclose($outfp);
}
}

// Was this a pre-timeout bail out?


if ($leftBytes > 0)
{
$this->runState = AK_STATE_DATA;
}
else
{
// Oh! We just finished!
$this->runState = AK_STATE_DATAREAD;
$this->dataReadLength = 0;
}

return true;
}

private function readKeyExpansionExtraHeader()


{
$signature = fread($this->fp, 4);

if ($signature != "JH\x00\x01")
{
// Not a valid JPS file
$this->setError(AKText::_('ERR_NOT_A_JPS_FILE'));

return false;
}

$bin_data = fread($this->fp, 8);


$header_data = unpack('vlength/Calgo/Viterations/CuseStaticSalt',
$bin_data);

if ($header_data['length'] != 76)
{
// Not a valid JPS file
$this->setError(AKText::_('ERR_NOT_A_JPS_FILE'));

return false;
}

switch ($header_data['algo'])
{
case 0:
$algorithm = 'sha1';
break;

case 1:
$algorithm = 'sha256';
break;

case 2:
$algorithm = 'sha512';
break;

default:
// Not a valid JPS file
$this->setError(AKText::_('ERR_NOT_A_JPS_FILE'));

return false;
break;
}

$this->pbkdf2Algorithm = $algorithm;
$this->pbkdf2Iterations = $header_data['iterations'];
$this->pbkdf2UseStaticSalt = $header_data['useStaticSalt'];
$this->pbkdf2StaticSalt = fread($this->fp, 64);

return true;
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Timer class
*/
class AKCoreTimer extends AKAbstractObject
{
/** @var int Maximum execution time allowance per step */
private $max_exec_time = null;

/** @var int Timestamp of execution start */


private $start_time = null;

/**
* Public constructor, creates the timer object and calculates the execution
time limits
*
* @return void
*/
public function __construct()
{
parent::__construct();

// Initialize start time


$this->start_time = $this->microtime_float();

// Get configured max time per step and bias


$config_max_exec_time =
AKFactory::get('kickstart.tuning.max_exec_time', 14);
$bias =
AKFactory::get('kickstart.tuning.run_time_bias', 75) / 100;

// Get PHP's maximum execution time (our upper limit)


if (@function_exists('ini_get'))
{
$php_max_exec_time = @ini_get("maximum_execution_time");
if ((!is_numeric($php_max_exec_time)) || ($php_max_exec_time ==
0))
{
// If we have no time limit, set a hard limit of about 10
seconds
// (safe for Apache and IIS timeouts, verbose enough for
users)
$php_max_exec_time = 14;
}
}
else
{
// If ini_get is not available, use a rough default
$php_max_exec_time = 14;
}

// Apply an arbitrary correction to counter CMS load time


$php_max_exec_time--;

// Apply bias
$php_max_exec_time = $php_max_exec_time * $bias;
$config_max_exec_time = $config_max_exec_time * $bias;

// Use the most appropriate time limit value


if ($config_max_exec_time > $php_max_exec_time)
{
$this->max_exec_time = $php_max_exec_time;
}
else
{
$this->max_exec_time = $config_max_exec_time;
}
}

/**
* Returns the current timestampt in decimal seconds
*/
private function microtime_float()
{
list($usec, $sec) = explode(" ", microtime());

return ((float) $usec + (float) $sec);


}

/**
* Wake-up function to reset internal timer when we get unserialized
*/
public function __wakeup()
{
// Re-initialize start time on wake-up
$this->start_time = $this->microtime_float();
}

/**
* Gets the number of seconds left, before we hit the "must break" threshold
*
* @return float
*/
public function getTimeLeft()
{
return $this->max_exec_time - $this->getRunningTime();
}

/**
* Gets the time elapsed since object creation/unserialization, effectively
how
* long Akeeba Engine has been processing data
*
* @return float
*/
public function getRunningTime()
{
return $this->microtime_float() - $this->start_time;
}

/**
* Enforce the minimum execution time
*/
public function enforce_min_exec_time()
{
// Try to get a sane value for PHP's maximum_execution_time INI
parameter
if (@function_exists('ini_get'))
{
$php_max_exec = @ini_get("maximum_execution_time");
}
else
{
$php_max_exec = 10;
}
if (($php_max_exec == "") || ($php_max_exec == 0))
{
$php_max_exec = 10;
}
// Decrease $php_max_exec time by 500 msec we need (approx.) to tear
down
// the application, as well as another 500msec added for rounding
// error purposes. Also make sure this is never gonna be less than 0.
$php_max_exec = max($php_max_exec * 1000 - 1000, 0);

// Get the "minimum execution time per step" Akeeba Backup


configuration variable
$minexectime = AKFactory::get('kickstart.tuning.min_exec_time', 0);
if (!is_numeric($minexectime))
{
$minexectime = 0;
}

// Make sure we are not over PHP's time limit!


if ($minexectime > $php_max_exec)
{
$minexectime = $php_max_exec;
}

// Get current running time


$elapsed_time = $this->getRunningTime() * 1000;
$minexectime = 1000.0 * $minexectime;

// Only run a sleep delay if we haven't reached the minexectime


execution time
if (($minexectime > $elapsed_time) && ($elapsed_time > 0))
{
$sleep_msec = $minexectime - $elapsed_time;

if (function_exists('usleep'))
{
usleep(1000 * $sleep_msec);
}
elseif (function_exists('time_nanosleep'))
{
$sleep_sec = floor($sleep_msec / 1000);
$sleep_nsec = 1000000 * ($sleep_msec - ($sleep_sec *
1000));
time_nanosleep($sleep_sec, $sleep_nsec);
}
elseif (function_exists('time_sleep_until'))
{
$until_timestamp = time() + $sleep_msec / 1000;
time_sleep_until($until_timestamp);
}
elseif (function_exists('sleep'))
{
$sleep_sec = ceil($sleep_msec / 1000);
sleep($sleep_sec);
}
}
}

/**
* Reset the timer. It should only be used in CLI mode!
*/
public function resetTime()
{
$this->start_time = $this->microtime_float();
}

/**
* @param int $max_exec_time
*/
public function setMaxExecTime($max_exec_time)
{
$this->max_exec_time = $max_exec_time;
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* A filesystem scanner which uses opendir()
*/
class AKUtilsLister extends AKAbstractObject
{
public function &getFiles($folder, $pattern = '*')
{
// Initialize variables
$arr = array();
$false = false;

if (!is_dir($folder))
{
return $false;
}

$handle = @opendir($folder);
// If directory is not accessible, just return FALSE
if ($handle === false)
{
$this->setWarning('Unreadable directory ' . $folder);

return $false;
}

while (($file = @readdir($handle)) !== false)


{
if (!fnmatch($pattern, $file))
{
continue;
}

if (($file != '.') && ($file != '..'))


{
$ds =
($folder == '') || ($folder == '/') ||
(@substr($folder, -1) == '/') || (@substr($folder, -1) == DIRECTORY_SEPARATOR) ?
'' : DIRECTORY_SEPARATOR;
$dir = $folder . $ds . $file;
$isDir = is_dir($dir);
if (!$isDir)
{
$arr[] = $dir;
}
}
}
@closedir($handle);

return $arr;
}

public function &getFolders($folder, $pattern = '*')


{
// Initialize variables
$arr = array();
$false = false;

if (!is_dir($folder))
{
return $false;
}

$handle = @opendir($folder);
// If directory is not accessible, just return FALSE
if ($handle === false)
{
$this->setWarning('Unreadable directory ' . $folder);

return $false;
}

while (($file = @readdir($handle)) !== false)


{
if (!fnmatch($pattern, $file))
{
continue;
}

if (($file != '.') && ($file != '..'))


{
$ds =
($folder == '') || ($folder == '/') ||
(@substr($folder, -1) == '/') || (@substr($folder, -1) == DIRECTORY_SEPARATOR) ?
'' : DIRECTORY_SEPARATOR;
$dir = $folder . $ds . $file;
$isDir = is_dir($dir);
if ($isDir)
{
$arr[] = $dir;
}
}
}
@closedir($handle);

return $arr;
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* A filesystem zapper - removes all files and folders under a root
*/
class AKUtilsZapper extends AKAbstractPart
{
/** @var array Directories left to be deleted */
private $directory_list;

/** @var array Files left to be deleted */


private $file_list;

/**
* Have we finished scanning all subdirectories of the current directory?
*
* @var boolean
*/
private $done_subdir_scanning = false;

/**
* Have we finished scanning all files of the current directory?
*
* @var boolean
*/
private $done_file_scanning = true;

/**
* Is the current directory completely excluded?
*
* @var boolean
*/
private $excluded_folder = false;

/** @var integer How many files have been processed in the current step */
private $processed_files_counter;

/** @var string Current directory being scanned */


private $current_directory;

/** @var string Current root directory being processed */


private $root = '';
/** @var integer Total files to process */
private $total_files = 0;

/** @var integer Total files already processed */


private $done_files = 0;

/** @var integer Total folders to process */


private $total_folders = 0;

/** @var integer Total folders already processed */


private $done_folders = 0;

/** @var array Absolute filesystem patterns to never delete (e.g.


/var/www/html/*.jpa) */
private $excluded = array();

/** @var bool Are we in a dry-run? */


private $dryRun = false;

/**
* Implements the _prepare() abstract method
*
* Configuration parameters:
*
* root The root under which we are going to be deleting files
* excluded Absolute filesystem patterns to never delete (e.g.
/var/www/html/*.jpa)
*
* @return void
*/
protected function _prepare()
{
debugMsg(__CLASS__ . " :: Starting _prepare()");

$defaultExcluded = $this->getDefaultExclusions();

$parameters = array_merge(array(
'root' => rtrim(AKFactory::get('kickstart.setup.destdir'),
'/' . DIRECTORY_SEPARATOR),
'excluded' => $defaultExcluded,
'dryRun' => AKFactory::get('kickstart.setup.dryrun', false)
), $this->_parametersArray);

$this->root = $parameters['root'];
$this->excluded = $parameters['excluded'];
$this->directory_list[] = $this->root;
$this->done_subdir_scanning = true;
$this->done_file_scanning = true;
$this->total_files = 0;
$this->done_files = 0;
$this->total_folders = 0;
$this->done_folders = 0;
$this->dryRun = $parameters['dryRun'];

if (empty($this->root))
{
$error = "The folder to delete was not specified.";
debugMsg(__CLASS__ . " :: " . $error);
$this->setError($error);

return;
}

if (!is_dir($this->root))
{
$error = sprintf("Folder %s does not exist", $this->root);

debugMsg(__CLASS__ . " :: " . $error);


$this->setError($error);

return;
}

$this->setState('prepared');

debugMsg(__CLASS__ . " :: prepared");


}

protected function _run()


{
if ($this->getState() == 'postrun')
{
debugMsg(__CLASS__ . " :: Already finished");
$this->setStep("-");
$this->setSubstep("");

return true;
}

// If I'm done scanning files and subdirectories and there are no more
files to pack get the next
// directory. This block is triggered in the first step in a new root.
if (empty($this->file_list) && $this->done_subdir_scanning && $this-
>done_file_scanning)
{
$this->progressMarkFolderDone();

if (!$this->getNextDirectory())
{
$this->setState('postrun');
return true;
}
}

// If I'm not done scanning for files and the file list is empty then
scan for more files
if (!$this->done_file_scanning && empty($this->file_list))
{
$this->scanFiles();
}
// If I have files left, delete them
elseif (!empty($this->file_list))
{
$this->delete_files();
}
// If I'm not done scanning subdirectories, go ahead and scan some more
of them
elseif (!$this->done_subdir_scanning)
{
$this->scanSubdirs();
}

// Do I have an error?
if ($this->getError())
{
return false;
}

return true;
}

/**
* Implements the _finalize() abstract method
*
*/
protected function _finalize()
{
// No finalization is required
$this->setState('finished');
}

//
===================================================================================
=========
// PRIVATE METHODS
//
===================================================================================
=========

/**
* Gets the next directory to scan from the stack. It also applies folder
* filters (directory exclusion, subdirectory exclusion, file exclusion),
* updating the operation toggle properties of the class.
*
* @return boolean True if we found a directory, false if the directory
* stack is empty. It also returns true if the folder is
* filtered (we are told to skip it)
*/
private function getNextDirectory()
{
// Reset the file / folder scanning positions
$this->done_file_scanning = false;
$this->done_subdir_scanning = false;
$this->excluded_folder = false;

if (count($this->directory_list) == 0)
{
// No directories left to scan
return false;
}

// Get and remove the last entry from the $directory_list array
$this->current_directory = array_pop($this->directory_list);
$this->setStep($this->current_directory);
$this->processed_files_counter = 0;
// Apply directory exclusion filters
if ($this->isFiltered($this->current_directory))
{
debugMsg("Skipping directory " . $this->current_directory);
$this->done_subdir_scanning = true;
$this->done_file_scanning = true;
$this->excluded_folder = true;

return true;
}

return true;
}

/**
* Try to delete some files from the $file_list
*
* @return boolean True if there were files deleted , false otherwise
* (empty filelist or fatal error)
*/
protected function delete_files()
{
// Get a reference to the archiver and the timer classes
$timer = AKFactory::getTimer();

// Normal file removal loop; we keep on processing the file list,


removing files as we go.
if (count($this->file_list) == 0)
{
// No files left to pack. Return true and let the engine loop
$this->progressMarkFolderDone();

return true;
}

debugMsg("Deleting files");

$numberOfFiles = 0;
$postProc = AKFactory::getPostProc();

while ((count($this->file_list) > 0))


{
$file = @array_shift($this->file_list);

$numberOfFiles++;

// Remove the file


$this->setSubstep($file);
$this->notify((object) array(
'type' => 'deleteFile',
'file' => $file
));

if (!$this->dryRun)
{
$postProc->unlink($file);
}
// Mark a done file
$this->progressMarkFileDone();

if ($this->getError())
{
return false;
}

// I am running out of time.


if ($timer->getTimeLeft() <= 0)
{
return true;
}
}

// True if we have more files, false if we're done packing


return (count($this->file_list) > 0);
}

protected function progressAddFile()


{
$this->total_files++;
}

protected function progressMarkFileDone()


{
$this->done_files++;
}

protected function progressAddFolder()


{
$this->total_folders++;
}

protected function progressMarkFolderDone()


{
debugMsg("Deleting directory " . $this->current_directory);

$this->setSubstep($this->current_directory);
$this->notify((object) array(
'type' => 'deleteFolder',
'file' => $this->current_directory
));

if (!$this->dryRun)
{
/**
* The scanner goes from shallow to deep directory. However this means
that when it scans
* <root>/foo/bar/baz/bat
* it will only be able to remove the 'bat' directory, thus leaving
foo/bar/baz on the disk. The following
* method will check if the directory is a subdirectory of the site
root and work its way up the tree until
* it finds the site root. Therefore it will end up deleting the parent
folders as well.
*/
$this->deleteParentFolders($this->current_directory);
}
}

/**
* Returns the site root, the translated site root and the translated current
directory
*
* @return array
*/
protected function getCleanDirectoryComponents()
{
$root = $this->root;
$translated_root = $root;
$dir = TrimTrailingSlash($this->current_directory);

if (strtoupper(substr(PHP_OS, 0, 3)) == 'WIN')


{
$translated_root = TranslateWinPath($translated_root);
$dir = TranslateWinPath($dir);
}

if (substr($dir, 0, strlen($translated_root)) == $translated_root)


{
$dir = substr($dir, strlen($translated_root));
}
elseif (in_array(substr($translated_root, -1), array('/', '\\')))
{
$new_translated_root = rtrim($translated_root, '/\\');

if (substr($dir, 0, strlen($new_translated_root)) ==
$new_translated_root)
{
$dir = substr($dir, strlen($new_translated_root));
}
}

if (substr($dir, 0, 1) == '/')
{
$dir = substr($dir, 1);
}

return array($root, $translated_root, $dir);


}

/**
* Steps the subdirectory scanning of the current directory
*
* @return boolean True on success, false on fatal error
*/
protected function scanSubdirs()
{
$lister = new AKUtilsLister();

list($root, $translated_root, $dir) = $this-


>getCleanDirectoryComponents();

debugMsg("Scanning directories of " . $this->current_directory);

// Get subdirectories
$subdirectories = $lister->getFolders($this->current_directory);
// Error propagation
$this->propagateFromObject($lister);

// Error control
if ($this->getError())
{
return false;
}

// Start adding the subdirectories


if (!empty($subdirectories) && is_array($subdirectories))
{
// Treat symlinks to directories as simple symlink files
foreach ($subdirectories as $subdirectory)
{
if (is_link($subdirectory))
{
// Symlink detected; apply directory filters to it
if (empty($dir))
{
$dirSlash = $dir;
}
else
{
$dirSlash = $dir . '/';
}

$check = $dirSlash . basename($subdirectory);


debugMsg("Directory symlink detected: $check");

if (strtoupper(substr(PHP_OS, 0, 3)) == 'WIN')


{
$check = TranslateWinPath($check);
}

$check = $translated_root . '/' . $check;

// Check for excluded symlinks


if ($this->isFiltered($check))
{
debugMsg("Skipping directory symlink " .
$check);

continue;
}

debugMsg('Adding folder symlink: ' . $check);

$this->file_list[] = $subdirectory;
$this->progressAddFile();
}

$this->directory_list[] = $subdirectory;
$this->progressAddFolder();
}
}

$this->done_subdir_scanning = true;
return true;
}

/**
* Steps the files scanning of the current directory
*
* @return boolean True on success, false on fatal error
*/
protected function scanFiles()
{
$lister = new AKUtilsLister();

list($root, $translated_root, $dir) = $this-


>getCleanDirectoryComponents();

debugMsg("Scanning files of " . $this->current_directory);


$this->processed_files_counter = 0;

// Get file listing


$fileList = $lister->getFiles($this->current_directory);

// Error propagation
$this->propagateFromObject($lister);

// Error control
if ($this->getError())
{
return false;
}

// Do I have an unreadable directory?


if (($fileList === false))
{
$this->setWarning('Unreadable directory ' . $this-
>current_directory);

$this->done_file_scanning = true;

return true;
}

// Directory was readable, process the file list


if (is_array($fileList) && !empty($fileList))
{
// Add required trailing slash to $dir
if (!empty($dir))
{
$dir .= '/';
}

// Scan all directory entries


foreach ($fileList as $fileName)
{
$check = $dir . basename($fileName);

if (strtoupper(substr(PHP_OS, 0, 3)) == 'WIN')


{
$check = TranslateWinPath($check);
}

$check = $translated_root . '/' . $check;


$skipThisFile = $this->isFiltered($check);

if ($skipThisFile)
{
debugMsg("Skipping file $fileName");

continue;
}

$this->file_list[] = $fileName;
$this->processed_files_counter++;
$this->progressAddFile();
}
}

$this->done_file_scanning = true;

return true;
}

/**
* Is a file or folder filtered (protected from deletion)
*
* @param string $fileOrFolder
*
* @return bool
*/
private function isFiltered($fileOrFolder)
{
foreach ($this->excluded as $pattern)
{
if (fnmatch($pattern, $fileOrFolder))
{
return true;
}
}

return false;
}

/**
* Get the default exceptions from deletion
*
* @return array
*/
private function getDefaultExclusions()
{
$ret = array();
$destDir = AKFactory::get('kickstart.setup.destdir');

/**
* Exclude Kickstart / restore.php itself. Otherwise it'd crash!
*/
$myName = defined('KSSELFNAME') ? KSSELFNAME : basename(__FILE__);
$ret[] = KSROOTDIR . '/' . $myName;
/**
* Cheat: exclude the directory used in development (see
source/buildscripts/kickstart_test.php)
*
* This directory contains the non-concatenated source code for
Kickstart. We need to keep it protected.
*/
if (defined('MINIBUILD') && (MINIBUILD != $destDir))
{
$ret[] = TranslateWinPath(MINIBUILD);
}

/**
* Exclude the backup archive directory if it's not the site's root.
This prevents mindlessly deleting all your
* backups before you restore from a previous backup which might not be
the one you actually wanted. I will call
* this feature "clumsy-proofing".
*/
$backupArchive = AKFactory::get('kickstart.setup.sourcefile');
$backupDirectory = AKFactory::get('kickstart.setup.sourcepath');
$backupDirectory = empty($backupDirectory) ? dirname($backupArchive) :
$backupDirectory;

if ($backupDirectory != $destDir)
{
$ret[] = TranslateWinPath($backupDirectory);
}

/**
* Exclude the backup archive files
*
* This obviously only makes sense when the backup archives are stored
in the extraction target folder which is
* the most common use of Kickstart. In this case the backups folder is
not excluded above.
*/
$plainBackupName = basename($backupArchive, '.jpa');
$plainBackupName = basename($plainBackupName, '.jps');
$plainBackupName = basename($plainBackupName, '.zip');
$ret[] = TranslateWinPath($backupDirectory . '/' .
$plainBackupName) . '.*';

/**
* Exclude Kickstart language files. Only applies in Kickstart mode.
*/
if (defined('KICKSTART'))
{
$langDir = defined('KSLANGDIR') ? KSLANGDIR : KSROOTDIR;
$iniFilePattern = basename(KSSELFNAME, '.php') . '.*.ini';

if ($langDir != KSROOTDIR)
{
$ret[] = KSLANGDIR;
}

$ret[] = $langDir . '/' . $iniFilePattern;


$ret[] = KSROOTDIR . '/' . $iniFilePattern;
}
/**
* Exclude Kickstart resources (cacert.pem). Only applies in Kickstart
mode.
*/
if (defined('KICKSTART'))
{
$ret[] = TranslateWinPath(KSROOTDIR . '/cacert.pem');
}

// Exclude the Kickstart temporary directory, if one is used by the


post-processing engine
$postProc = AKFactory::getPostProc();
$tempDir = $postProc->getTempDir();

if (!empty($tempDir) && (realpath($tempDir) != realpath($destDir)))


{
$ret[] = TranslateWinPath($tempDir);
}

/**
* Exclude the configured Skipped Files ('kickstart.setup.skipfiles').
Also exclude the various restoration.php
* files if we are in restore.php mode and the files are present. These
are required for the integrated
* restoration to actually work :)
*/
$skippedFiles = AKFactory::get('kickstart.setup.skipfiles', array(
basename(__FILE__), 'kickstart.php', 'abiautomation.ini',
'htaccess.bak', 'php.ini.bak',
'cacert.pem',
));

if (!defined('KICKSTART'))
{
// In restore.php mode we have to exclude the various
restoration.php files
$skippedFiles = array_merge(array(
// Akeeba Backup for Joomla!
'administrator/components/com_akeeba/restoration.php',
// Joomla! Update
'administrator/components/com_joomlaupdate/restoration.php'
,
// Akeeba Backup for WordPress
'wp-content/plugins/akeebabackupwp/app/restoration.php',
'wp-
content/plugins/akeebabackupcorewp/app/restoration.php',
'wp-content/plugins/akeebabackup/app/restoration.php',
'wp-
content/plugins/akeebabackupwpcore/app/restoration.php',
// Akeeba Solo
'app/restoration.php',
), $skippedFiles);
}

foreach ($skippedFiles as $file)


{
$checkFile = $destDir . '/' . $file;
if (file_exists($checkFile))
{
$ret[] = TranslateWinPath($checkFile);
}
}

/**
* Exclude .htaccess if the stealth feature is enabled. Otherwise we'd
unset the stealth mode.
*/
if (AKFactory::get('kickstart.stealth.enable'))
{
$ret[] = $destDir . '/.htaccess';
}

// Remove any duplicate lines


$ret = array_unique($ret);

return $ret;
}

/**
* Recursively delete an empty folder and any of its empty parent folders.
*
* @param string $folder The folder to deletes
*/
private function deleteParentFolders($folder)
{
// Don't try to delete an empty folder or the filesystem root
if (empty($folder) || ($folder == '/'))
{
return;
}

$folder = TranslateWinPath($folder);
$root = TranslateWinPath($this->root);

// Don't try to delete the site's root


if ($folder === $root)
{
return;
}

// Delete the leaf folder


$postProc = AKFactory::getPostProc();
$postProc->rmdir($folder);

// If the leaf folder is not under the site's root don't delete its parents
if (strpos($folder, $root) !== 0)
{
return;
}

// Get and recursively delete the parent folder


$this->deleteParentFolders(dirname($folder));
}
}

/**
* Runs the Zapper and returns a status table. The Zapper only runs if the feature
is enabled (kickstart.setup.zapbefore
* is 1) and there are more Zapper steps to run (its state is not postrun). If any
of these conditions is not met we
* return boolean false.
*
* @param AKAbstractPartObserver $observer Optional observer to attack to the
Zapper instance
*
* @return bool|array Boolean false or a status array
*/
function runZapper(AKAbstractPartObserver $observer = null)
{
// This method should only run in restore.php mode or when we have Kickstart
Professional.
$isKickstart = defined('KICKSTART');
$isPro = defined('KICKSTARTPRO') ? KICKSTARTPRO : false;
$isDebug = defined('KSDEBUG') ? KSDEBUG : false;

if ($isKickstart && (!$isPro && !$isDebug))


{
return false;
}

// Is the feature enabled?


$enabled = AKFactory::get('kickstart.setup.zapbefore', 0);

if (!$enabled)
{
return false;
}

// Do I still have work to do?


$zapper = AKFactory::getZapper();

if ($zapper->getState() == 'finished')
{
return false;
}

// Attach the observer


if (is_object($observer))
{
$zapper->attach($observer);
}

// Run a step, create and return a status array


$timer = AKFactory::getTimer();

while ($timer->getTimeLeft() > 0)


{
$ret = $zapper->tick();

if ($ret['Error'] != '')
{
break;
}
}
$retArray = array(
'status' => true,
'message' => null,
'done' => false,
);

if ($ret['Error'] != '')
{
$retArray['status'] = false;
$retArray['done'] = true;
$retArray['message'] = $ret['Error'];
}
else
{
$retArray['files'] = 0;
$retArray['bytesIn'] = 0;
$retArray['bytesOut'] = 0;
$retArray['factory'] = AKFactory::serialize();
$retArray['lastfile'] = 'Deleting: ' . $zapper->getSubstep();
}

$timer->enforce_min_exec_time();

return $retArray;
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* A simple INI-based i18n engine
*/
class AKText extends AKAbstractObject
{
/**
* The default (en_GB) translation used when no other translation is
available
*
* @var array
*/
private $default_translation = array(
'AUTOMODEON' => 'Auto-mode enabled',
'ERR_NOT_A_JPA_FILE' => 'The file is not a JPA archive',
'ERR_CORRUPT_ARCHIVE' => 'The archive file is corrupt,
truncated or archive parts are missing',
'ERR_INVALID_LOGIN' => 'Invalid login',
'COULDNT_CREATE_DIR' => 'Could not create %s folder',
'COULDNT_WRITE_FILE' => 'Could not open %s for writing.',
'WRONG_FTP_HOST' => 'Wrong FTP host or port',
'WRONG_FTP_USER' => 'Wrong FTP username or password',
'WRONG_FTP_PATH1' => 'Wrong FTP initial directory - the
directory doesn\'t exist',
'FTP_CANT_CREATE_DIR' => 'Could not create directory %s',
'FTP_TEMPDIR_NOT_WRITABLE' => 'Could not find or create a
writable temporary directory',
'SFTP_TEMPDIR_NOT_WRITABLE' => 'Could not find or create a
writable temporary directory',
'FTP_COULDNT_UPLOAD' => 'Could not upload %s',
'THINGS_HEADER' => 'Things you should know about
Akeeba Kickstart',
'THINGS_01' => 'Kickstart is not an installer. It
is an archive extraction tool. The actual installer was put inside the archive file
at backup time.',
'THINGS_02' => 'Kickstart is not the only way to
extract the backup archive. You can use Akeeba eXtract Wizard and upload the
extracted files using FTP instead.',
'THINGS_03' => 'Kickstart is bound by your
server\'s configuration. As such, it may not work at all.',
'THINGS_04' => 'You should download and upload
your archive files using FTP in Binary transfer mode. Any other method could lead
to a corrupt backup archive and restoration failure.',
'THINGS_05' => 'Post-restoration site load errors
are usually caused by .htaccess or php.ini directives. You should understand that
blank pages, 404 and 500 errors can usually be worked around by editing the
aforementioned files. It is not our job to mess with your configuration files,
because this could be dangerous for your site.',
'THINGS_06' => 'Kickstart overwrites files
without a warning. If you are not sure that you are OK with that do not continue.',
'THINGS_07' => 'Trying to restore to the
temporary URL of a cPanel host (e.g. http://1.2.3.4/~username) will lead to
restoration failure and your site will appear to be not working. This is normal and
it\'s just how your server and CMS software work.',
'THINGS_08' => 'You are supposed to read the
documentation before using this software. Most issues can be avoided, or easily
worked around, by understanding how this software works.',
'THINGS_09' => 'This text does not imply that
there is a problem detected. It is standard text displayed every time you launch
Kickstart.',
'CLOSE_LIGHTBOX' => 'Click here or press ESC to close
this message',
'SELECT_ARCHIVE' => 'Select a backup archive',
'ARCHIVE_FILE' => 'Archive file:',
'SELECT_EXTRACTION' => 'Select an extraction method',
'WRITE_TO_FILES' => 'Write to files:',
'WRITE_HYBRID' => 'Hybrid (use FTP only if needed)',
'WRITE_DIRECTLY' => 'Directly',
'WRITE_FTP' => 'Use FTP for all files',
'WRITE_SFTP' => 'Use SFTP for all files',
'FTP_HOST' => '(S)FTP host name:',
'FTP_PORT' => '(S)FTP port:',
'FTP_FTPS' => 'Use FTP over SSL (FTPS)',
'FTP_PASSIVE' => 'Use FTP Passive Mode',
'FTP_USER' => '(S)FTP user name:',
'FTP_PASS' => '(S)FTP password:',
'FTP_DIR' => '(S)FTP directory:',
'FTP_TEMPDIR' => 'Temporary directory:',
'FTP_CONNECTION_OK' => 'FTP Connection Established',
'SFTP_CONNECTION_OK' => 'SFTP Connection Established',
'FTP_CONNECTION_FAILURE' => 'The FTP Connection Failed',
'SFTP_CONNECTION_FAILURE' => 'The SFTP Connection Failed',
'FTP_TEMPDIR_WRITABLE' => 'The temporary directory is
writable.',
'FTP_TEMPDIR_UNWRITABLE' => 'The temporary directory is not
writable. Please check the permissions.',
'FTPBROWSER_ERROR_HOSTNAME' => "Invalid FTP host or port",
'FTPBROWSER_ERROR_USERPASS' => "Invalid FTP username or
password",
'FTPBROWSER_ERROR_NOACCESS' => "Directory doesn't exist or you
don't have enough permissions to access it",
'FTPBROWSER_ERROR_UNSUPPORTED' => "Sorry, your FTP server doesn't
support our FTP directory browser.",
'FTPBROWSER_LBL_GOPARENT' => "&lt;up one level&gt;",
'FTPBROWSER_LBL_INSTRUCTIONS' => 'Click on a directory to navigate
into it. Click on OK to select that directory, Cancel to abort the procedure.',
'FTPBROWSER_LBL_ERROR' => 'An error occurred',
'SFTP_NO_SSH2' => 'Your web server does not have the
SSH2 PHP module, therefore can not connect to SFTP servers.',
'SFTP_NO_FTP_SUPPORT' => 'Your SSH server does not allow
SFTP connections',
'SFTP_WRONG_USER' => 'Wrong SFTP username or password',
'SFTP_WRONG_STARTING_DIR' => 'You must supply a valid absolute
path',
'SFTPBROWSER_ERROR_NOACCESS' => "Directory doesn't exist or you
don't have enough permissions to access it",
'SFTP_COULDNT_UPLOAD' => 'Could not upload %s',
'SFTP_CANT_CREATE_DIR' => 'Could not create directory %s',
'UI-ROOT' => '&lt;root&gt;',
'CONFIG_UI_FTPBROWSER_TITLE' => 'FTP Directory Browser',
'FTP_BROWSE' => 'Browse',
'BTN_CHECK' => 'Check',
'BTN_RESET' => 'Reset',
'BTN_TESTFTPCON' => 'Test FTP connection',
'BTN_TESTSFTPCON' => 'Test SFTP connection',
'BTN_GOTOSTART' => 'Start over',
'FINE_TUNE' => 'Fine tune',
'MIN_EXEC_TIME' => 'Minimum execution time:',
'MAX_EXEC_TIME' => 'Maximum execution time:',
'TIME_SETTINGS_HELP' => "Increase the minimum to 3 if you
get AJAX errors. Increase the maximum to 10 for faster extraction, decrease back to
5 if you get AJAX errors. Try minimum 5, maximum 1 (not a typo!) if you keep
getting AJAX errors.",
'SECONDS_PER_STEP' => 'seconds per step',
'EXTRACT_FILES' => 'Extract files',
'BTN_START' => 'Start',
'EXTRACTING' => 'Extracting',
'DO_NOT_CLOSE_EXTRACT' => 'Do not close this window while
the extraction is in progress',
'RESTACLEANUP' => 'Restoration and Clean Up',
'BTN_RUNINSTALLER' => 'Run the Installer',
'BTN_CLEANUP' => 'Clean Up',
'BTN_SITEFE' => 'Visit your site\'s frontend',
'BTN_SITEBE' => 'Visit your site\'s backend',
'WARNINGS' => 'Extraction Warnings',
'ERROR_OCCURED' => 'An error occurred',
'STEALTH_MODE' => 'Stealth mode',
'STEALTH_MODE_HELP' => 'When enabled, only visitors from
your IP address will be able to see the site until the restoration is complete.
Everyone else will be redirected to and only see the URL above. Your server must
see the real IP of the visitor (this is controlled by your host, not you or us).',
'STEALTH_URL' => 'HTML file to show to web
visitors',
'ERR_NOT_A_JPS_FILE' => 'The file is not a JPA archive',
'ERR_INVALID_JPS_PASSWORD' => 'The password you gave is wrong or
the archive is corrupt',
'JPS_PASSWORD' => 'Archive Password (for JPS
files)',
'INVALID_FILE_HEADER' => 'Invalid header in archive file,
part %s, offset %s',
'NEEDSOMEHELPKS' => 'Want some help to use this tool?
Read this first:',
'QUICKSTART' => 'Quick Start Guide',
'CANTGETITTOWORK' => 'Can\'t get it to work? Click
me!',
'NOARCHIVESCLICKHERE' => 'No archives detected. Click here
for troubleshooting instructions.',
'POSTRESTORATIONTROUBLESHOOTING' => 'Something not working after the
restoration? Click here for troubleshooting instructions.',
'UPDATE_HEADER' => 'An updated version of Akeeba
Kickstart (<span id="update-version">unknown</span>) is available!',
'UPDATE_NOTICE' => 'You are advised to always use the
latest version of Akeeba Kickstart available. Older versions may be subject to bugs
and will not be supported.',
'UPDATE_DLNOW' => 'Download now',
'UPDATE_MOREINFO' => 'More information',
'IGNORE_MOST_ERRORS' => 'Ignore most errors',
'WRONG_FTP_PATH2' => 'Wrong FTP initial directory - the
directory doesn\'t correspond to your site\'s web root',
'ARCHIVE_DIRECTORY' => 'Archive directory:',
'RELOAD_ARCHIVES' => 'Reload',
'CONFIG_UI_SFTPBROWSER_TITLE' => 'SFTP Directory Browser',
'ERR_COULD_NOT_OPEN_ARCHIVE_PART' => 'Could not open archive part file
%s for reading. Check that the file exists, is readable by the web server and is
not in a directory made out of reach by chroot, open_basedir restrictions or any
other restriction put in place by your host.',
'RENAME_FILES' => 'Rename server configuration
files',
'RENAME_FILES_HELP' => 'Renames .htaccess, web.config,
php.ini and .user.ini contained in the archive while extracting. Files are renamed
with a .bak extension. The file names are restored when you click on Clean Up.',
'RESTORE_PERMISSIONS' => 'Restore file permissions',
'RESTORE_PERMISSIONS_HELP' => 'Applies the file permissions (but
NOT file ownership) which was stored at backup time. Only works with JPA and JPS
archives. Does not work on Windows (PHP does not offer such a feature).',
'EXTRACT_LIST' => 'Files to extract',
'EXTRACT_LIST_HELP' => 'Enter a file path such as
<code>images/cat.png</code> or shell pattern such as <code>images/*.png</code> on
each line. Only files matching this list will be written to disk. Leave empty to
extract everything (default).',
'ZAPBEFORE' => 'Delete everything before
extraction',
'ZAPBEFORE_HELP' => 'Tries to delete all existing
files and folders under the directory where Kickstart is stored before extracting
the backup archive. It DOES NOT take into account which files and folders exist in
the backup archive. Files and folders deleted by this feature CAN NOT be recovered.
<strong>WARNING! THIS MAY DELETE FILES AND FOLDERS WHICH DO NOT BELONG TO YOUR
SITE. USE WITH EXTREME CAUTION. BY ENABLING THIS FEATURE YOU ASSUME ALL
RESPONSIBILITY AND LIABILITY.</strong>',
);

/**
* The array holding the translation keys
*
* @var array
*/
private $strings;

/**
* The currently detected language (ISO code)
*
* @var string
*/
private $language;

/*
* Initializes the translation engine
* @return AKText
*/
public function __construct()
{
// Start with the default translation
$this->strings = $this->default_translation;
// Try loading the translation file in English, if it exists
$this->loadTranslation('en-GB');
// Try loading the translation file in the browser's preferred
language, if it exists
$this->getBrowserLanguage();
if (!is_null($this->language))
{
$this->loadTranslation();
}
}

private function loadTranslation($lang = null)


{
if (defined('KSLANGDIR'))
{
$dirname = KSLANGDIR;
}
else
{
$dirname = KSROOTDIR;
}

$myName = defined('KSSELFNAME') ? KSSELFNAME : basename(__FILE__);


$basename = basename($myName, '.php') . '.ini';

if (empty($lang))
{
$lang = $this->language;
}

$translationFilename = $dirname . DIRECTORY_SEPARATOR . $lang . '.' .


$basename;
if (!@file_exists($translationFilename) && ($basename !=
'kickstart.ini'))
{
$basename = 'kickstart.ini';
$translationFilename = $dirname . DIRECTORY_SEPARATOR . $lang .
'.' . $basename;
}
if (!@file_exists($translationFilename))
{
return;
}
$temp = self::parse_ini_file($translationFilename, false);

if (!is_array($this->strings))
{
$this->strings = array();
}
if (empty($temp))
{
$this->strings = array_merge($this->default_translation, $this-
>strings);
}
else
{
$this->strings = array_merge($this->strings, $temp);
}
}

/**
* A PHP based INI file parser.
*
* Thanks to asohn ~at~ aircanopy ~dot~ net for posting this handy function
on
* the parse_ini_file page on http://gr.php.net/parse_ini_file
*
* @param string $file Filename to process
* @param bool $process_sections True to also process INI sections
*
* @return array An associative array of sections, keys and values
* @access private
*/
public static function parse_ini_file($file, $process_sections = false,
$raw_data = false)
{
$process_sections = ($process_sections !== true) ? false : true;

if (!$raw_data)
{
$ini = @file($file);
}
else
{
$ini = $file;
}
if (count($ini) == 0)
{
return array();
}

$sections = array();
$values = array();
$result = array();
$globals = array();
$i = 0;
if (!empty($ini))
{
foreach ($ini as $line)
{
$line = trim($line);
$line = str_replace("\t", " ", $line);

// Comments
if (!preg_match('/^[a-zA-Z0-9[]/', $line))
{
continue;
}

// Sections
if ($line{0} == '[')
{
$tmp = explode(']', $line);
$sections[] = trim(substr($tmp[0], 1));
$i++;
continue;
}

// Key-value pair
list($key, $value) = explode('=', $line, 2);
$key = trim($key);
$value = trim($value);
if (strstr($value, ";"))
{
$tmp = explode(';', $value);
if (count($tmp) == 2)
{
if ((($value{0} != '"') && ($value{0} != "'"))
||
preg_match('/^".*"\s*;/', $value) ||
preg_match('/^".*;[^"]*$/', $value) ||
preg_match("/^'.*'\s*;/", $value) ||
preg_match("/^'.*;[^']*$/", $value)
)
{
$value = $tmp[0];
}
}
else
{
if ($value{0} == '"')
{
$value = preg_replace('/^"(.*)".*/',
'$1', $value);
}
elseif ($value{0} == "'")
{
$value = preg_replace("/^'(.*)'.*/",
'$1', $value);
}
else
{
$value = $tmp[0];
}
}
}
$value = trim($value);
$value = trim($value, "'\"");

if ($i == 0)
{
if (substr($line, -1, 2) == '[]')
{
$globals[$key][] = $value;
}
else
{
$globals[$key] = $value;
}
}
else
{
if (substr($line, -1, 2) == '[]')
{
$values[$i - 1][$key][] = $value;
}
else
{
$values[$i - 1][$key] = $value;
}
}
}
}

for ($j = 0; $j < $i; $j++)


{
if ($process_sections === true)
{
$result[$sections[$j]] = $values[$j];
}
else
{
$result[] = $values[$j];
}
}

return $result + $globals;


}

public function getBrowserLanguage()


{
// Detection code from Full Operating system language detection, by
Harald Hope
// Retrieved from
http://techpatterns.com/downloads/php_language_detection.php
$user_languages = array();
//check to see if language is set
if (isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]))
{
$languages = strtolower($_SERVER["HTTP_ACCEPT_LANGUAGE"]);
// $languages = ' fr-ch;q=0.3, da, en-us;q=0.8, en;q=0.5,
fr;q=0.3';
// need to remove spaces from strings to avoid error
$languages = str_replace(' ', '', $languages);
$languages = explode(",", $languages);
foreach ($languages as $language_list)
{
// pull out the language, place languages into array of
full and primary
// string structure:
$temp_array = array();
// slice out the part before ; on first step, the part
before - on second, place into array
$temp_array[0] = substr($language_list, 0,
strcspn($language_list, ';'));//full language
$temp_array[1] = substr($language_list, 0, 2);// cut out
primary language
if ((strlen($temp_array[0]) == 5) &&
((substr($temp_array[0], 2, 1) == '-') || (substr($temp_array[0], 2, 1) == '_')))
{
$langLocation = strtoupper(substr($temp_array[0], 3,
2));
$temp_array[0] = $temp_array[1] . '-' .
$langLocation;
}
//place this array into main $user_languages language array
$user_languages[] = $temp_array;
}
}
else// if no languages found
{
$user_languages[0] = array('', ''); //return blank array.
}

$this->language = null;
$basename = basename(__FILE__, '.php') . '.ini';

// Try to match main language part of the filename, irrespective of the


location, e.g. de_DE will do if de_CH doesn't exist.
if (class_exists('AKUtilsLister'))
{
$fs = new AKUtilsLister();
$iniFiles = $fs->getFiles(KSROOTDIR, '*.' . $basename);
if (empty($iniFiles) && ($basename != 'kickstart.ini'))
{
$basename = 'kickstart.ini';
$iniFiles = $fs->getFiles(KSROOTDIR, '*.' . $basename);
}
}
else
{
$iniFiles = null;
}

if (is_array($iniFiles))
{
foreach ($user_languages as $languageStruct)
{
if (is_null($this->language))
{
// Get files matching the main lang part
$iniFiles = $fs->getFiles(KSROOTDIR,
$languageStruct[1] . '-??.' . $basename);
if (count($iniFiles) > 0)
{
$filename = $iniFiles[0];
$filename = substr($filename,
strlen(KSROOTDIR) + 1);
$this->language = substr($filename, 0, 5);
}
else
{
$this->language = null;
}
}
}
}

if (is_null($this->language))
{
// Try to find a full language match
foreach ($user_languages as $languageStruct)
{
if (@file_exists($languageStruct[0] . '.' . $basename) &&
is_null($this->language))
{
$this->language = $languageStruct[0];
}
else
{

}
}
}
else
{
// Do we have an exact match?
foreach ($user_languages as $languageStruct)
{
if (substr($this->language, 0, strlen($languageStruct[1]))
== $languageStruct[1])
{
if (file_exists($languageStruct[0] . '.' .
$basename))
{
$this->language = $languageStruct[0];
}
}
}
}

// Now, scan for full language based on the partial match

public static function sprintf($key)


{
$text = self::getInstance();
$args = func_get_args();
if (count($args) > 0)
{
$args[0] = $text->_($args[0]);
return @call_user_func_array('sprintf', $args);
}

return '';
}

/**
* Singleton pattern for Language
*
* @return AKText The global AKText instance
*/
public static function &getInstance()
{
static $instance;

if (!is_object($instance))
{
$instance = new AKText();
}

return $instance;
}

public static function _($string)


{
$text = self::getInstance();

$key = strtoupper($string);
$key = substr($key, 0, 1) == '_' ? substr($key, 1) : $key;

if (isset ($text->strings[$key]))
{
$string = $text->strings[$key];
}
else
{
if (defined($string))
{
$string = constant($string);
}
}

return $string;
}

public function dumpLanguage()


{
$out = '';
foreach ($this->strings as $key => $value)
{
$out .= "$key=$value\n";
}

return $out;
}

public function asJavascript()


{
$out = '';
foreach ($this->strings as $key => $value)
{
$key = addcslashes($key, '\\\'"');
$value = addcslashes($value, '\\\'"');
if (!empty($out))
{
$out .= ",\n";
}
$out .= "'$key':\t'$value'";
}

return $out;
}

public function resetTranslation()


{
$this->strings = $this->default_translation;
}

public function addDefaultLanguageStrings($stringList = array())


{
if (!is_array($stringList))
{
return;
}
if (empty($stringList))
{
return;
}

$this->strings = array_merge($stringList, $this->strings);


}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* The Akeeba Kickstart Factory class
*
* This class is reponssible for instantiating all Akeeba Kickstart classes
*/
class AKFactory
{
/** @var array A list of instantiated objects */
private $objectlist = array();

/** @var array Simple hash data storage */


private $varlist = array();

/** @var self Static instance */


private static $instance = null;
/**
* AKFactory constructor.
*
* This is a private constructor makes sure we can't instantiate the class
unless we go through the static
* getInstance singleton method. This is different than making the class
abstract (preventing any kind of object
* instantiation).
*/
private function __construct()
{
}

/**
* Gets a serialized snapshot of the Factory for safekeeping (hibernate)
*
* @return string The serialized snapshot of the Factory
*/
public static function serialize()
{
$engine = self::getUnarchiver();
$engine->shutdown();
$serialized = serialize(self::getInstance());

if (function_exists('base64_encode') &&
function_exists('base64_decode'))
{
$serialized = base64_encode($serialized);
}

return $serialized;
}

/**
* Gets the unarchiver engine
*
* @return AKAbstractUnarchiver
*/
public static function &getUnarchiver($configOverride = null)
{
static $class_name;

if (!empty($configOverride) && isset($configOverride['reset']) &&


$configOverride['reset'])
{
$class_name = null;
}

if (empty($class_name))
{
$filetype = self::get('kickstart.setup.filetype', null);

if (empty($filetype))
{
$filename = self::get('kickstart.setup.sourcefile',
null);
$basename = basename($filename);
$baseextension = strtoupper(substr($basename, -3));
switch ($baseextension)
{
case 'JPA':
$filetype = 'JPA';
break;

case 'JPS':
$filetype = 'JPS';
break;

case 'ZIP':
$filetype = 'ZIP';
break;

default:
die('Invalid archive type or extension in file
' . $filename);
break;
}
}

$class_name = 'AKUnarchiver' . ucfirst($filetype);


}

$destdir = self::get('kickstart.setup.destdir', null);

if (empty($destdir))
{
$destdir = KSROOTDIR;
}

/** @var AKAbstractUnarchiver $object */


$object = self::getClassInstance($class_name);

if ($object->getState() == 'init')
{
$sourcePath = self::get('kickstart.setup.sourcepath', '');
$sourceFile = self::get('kickstart.setup.sourcefile', '');

if (!empty($sourcePath))
{
$sourceFile = rtrim($sourcePath, '/\\') . '/' .
$sourceFile;
}

// Initialize the object –– Any change here MUST be reflected to


echoHeadJavascript (default values)
$config = array(
'filename' => $sourceFile,
'restore_permissions' =>
self::get('kickstart.setup.restoreperms', 0),
'post_proc' => self::get('kickstart.procengine',
'direct'),
'add_path' =>
self::get('kickstart.setup.targetpath', $destdir),
'remove_path' =>
self::get('kickstart.setup.removepath', ''),
'rename_files' =>
self::get('kickstart.setup.renamefiles', array(
'.htaccess' => 'htaccess.bak', 'php.ini' =>
'php.ini.bak', 'web.config' => 'web.config.bak',
'.user.ini' => '.user.ini.bak',
)),
'skip_files' =>
self::get('kickstart.setup.skipfiles', array(
basename(__FILE__), 'kickstart.php',
'abiautomation.ini', 'htaccess.bak', 'php.ini.bak',
'cacert.pem',
)),
'ignoredirectories' =>
self::get('kickstart.setup.ignoredirectories', array(
'tmp', 'log', 'logs',
)),
);

if (!defined('KICKSTART'))
{
// In restore.php mode we have to exclude the
restoration.php files
$moreSkippedFiles = array(
// Akeeba Backup for Joomla!
'administrator/components/com_akeeba/restoration.php'
,
// Joomla! Update
'administrator/components/com_joomlaupdate/restoratio
n.php',
// Akeeba Backup for WordPress
'wp-
content/plugins/akeebabackupwp/app/restoration.php',
'wp-
content/plugins/akeebabackupcorewp/app/restoration.php',
'wp-
content/plugins/akeebabackup/app/restoration.php',
'wp-
content/plugins/akeebabackupwpcore/app/restoration.php',
// Akeeba Solo
'app/restoration.php',
);

$config['skip_files'] = array_merge($config['skip_files'],
$moreSkippedFiles);
}

if (!empty($configOverride))
{
$config = array_merge($config, $configOverride);
}

$object->setup($config);
}

return $object;
}

// ========================================================================
// Public factory interface
// ========================================================================
public static function get($key, $default = null)
{
$self = self::getInstance();

if (array_key_exists($key, $self->varlist))
{
return $self->varlist[$key];
}

return $default;
}

/**
* Gets a single, internally used instance of the Factory
*
* @param string $serialized_data [optional] Serialized data to spawn the
instance from
*
* @return AKFactory A reference to the unique Factory object instance
*/
protected static function &getInstance($serialized_data = null)
{
if (!is_object(self::$instance) || !is_null($serialized_data))
{
if (!is_null($serialized_data))
{
self::$instance = unserialize($serialized_data);

return self::$instance;
}

self::$instance = new self();


}

return self::$instance;
}

/**
* Internal function which instantiates a class named $class_name.
* The autoloader
*
* @param string $class_name
*
* @return object
*/
protected static function &getClassInstance($class_name)
{
$self = self::getInstance();

if (!isset($self->objectlist[$class_name]))
{
$self->objectlist[$class_name] = new $class_name;
}

return $self->objectlist[$class_name];
}

// ========================================================================
// Public hash data storage interface
// ========================================================================

/**
* Regenerates the full Factory state from a serialized snapshot (resume)
*
* @param string $serialized_data The serialized snapshot to resume from
*/
public static function unserialize($serialized_data)
{
if (function_exists('base64_encode') &&
function_exists('base64_decode'))
{
$serialized_data = base64_decode($serialized_data);
}

self::getInstance($serialized_data);
}

/**
* Reset the internal factory state, freeing all previously created objects
*/
public static function nuke()
{
self::$instance = null;
}

// ========================================================================
// Akeeba Kickstart classes
// ========================================================================

public static function set($key, $value)


{
$self = self::getInstance();
$self->varlist[$key] = $value;
}

/**
* Gets the post processing engine
*
* @param string $proc_engine
*
* @return AKAbstractPostproc
*/
public static function &getPostProc($proc_engine = null)
{
static $class_name;

if (empty($class_name))
{
if (empty($proc_engine))
{
$proc_engine = self::get('kickstart.procengine', 'direct');
}

$class_name = 'AKPostproc' . ucfirst($proc_engine);


}

return self::getClassInstance($class_name);
}

/**
* Get the a reference to the Akeeba Engine's timer
*
* @return AKCoreTimer
*/
public static function &getTimer()
{
return self::getClassInstance('AKCoreTimer');
}

/**
* Get an instance of the filesystem zapper
*
* @return AKUtilsZapper
*/
public static function &getZapper()
{
return self::getClassInstance('AKUtilsZapper');
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Interface for AES encryption adapters
*/
interface AKEncryptionAESAdapterInterface
{
/**
* Decrypts a string. Returns the raw binary ciphertext, zero-padded.
*
* @param string $plainText The plaintext to encrypt
* @param string $key The raw binary key (will be zero-padded
or chopped if its size is different than the block size)
*
* @return string The raw encrypted binary string.
*/
public function decrypt($plainText, $key);

/**
* Returns the encryption block size in bytes
*
* @return int
*/
public function getBlockSize();

/**
* Is this adapter supported?
*
* @return bool
*/
public function isSupported();
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Abstract AES encryption class
*/
abstract class AKEncryptionAESAdapterAbstract
{
/**
* Trims or zero-pads a key / IV
*
* @param string $key The key or IV to treat
* @param int $size The block size of the currently used algorithm
*
* @return null|string Null if $key is null, treated string of $size byte
length otherwise
*/
public function resizeKey($key, $size)
{
if (empty($key))
{
return null;
}

$keyLength = strlen($key);

if (function_exists('mb_strlen'))
{
$keyLength = mb_strlen($key, 'ASCII');
}

if ($keyLength == $size)
{
return $key;
}

if ($keyLength > $size)


{
if (function_exists('mb_substr'))
{
return mb_substr($key, 0, $size, 'ASCII');
}

return substr($key, 0, $size);


}

return $key . str_repeat("\0", ($size - $keyLength));


}
/**
* Returns null bytes to append to the string so that it's zero padded to the
specified block size
*
* @param string $string The binary string which will be zero padded
* @param int $blockSize The block size
*
* @return string The zero bytes to append to the string to zero pad it to
$blockSize
*/
protected function getZeroPadding($string, $blockSize)
{
$stringSize = strlen($string);

if (function_exists('mb_strlen'))
{
$stringSize = mb_strlen($string, 'ASCII');
}

if ($stringSize == $blockSize)
{
return '';
}

if ($stringSize < $blockSize)


{
return str_repeat("\0", $blockSize - $stringSize);
}

$paddingBytes = $stringSize % $blockSize;

return str_repeat("\0", $blockSize - $paddingBytes);


}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

class Mcrypt extends AKEncryptionAESAdapterAbstract implements


AKEncryptionAESAdapterInterface
{
protected $cipherType = MCRYPT_RIJNDAEL_128;

protected $cipherMode = MCRYPT_MODE_CBC;

public function decrypt($cipherText, $key)


{
$iv_size = $this->getBlockSize();
$key = $this->resizeKey($key, $iv_size);
$iv = substr($cipherText, 0, $iv_size);
$cipherText = substr($cipherText, $iv_size);
$plainText = mcrypt_decrypt($this->cipherType, $key, $cipherText,
$this->cipherMode, $iv);
return $plainText;
}

public function isSupported()


{
if (!function_exists('mcrypt_get_key_size'))
{
return false;
}

if (!function_exists('mcrypt_get_iv_size'))
{
return false;
}

if (!function_exists('mcrypt_create_iv'))
{
return false;
}

if (!function_exists('mcrypt_encrypt'))
{
return false;
}

if (!function_exists('mcrypt_decrypt'))
{
return false;
}

if (!function_exists('mcrypt_list_algorithms'))
{
return false;
}

if (!function_exists('hash'))
{
return false;
}

if (!function_exists('hash_algos'))
{
return false;
}

$algorightms = mcrypt_list_algorithms();

if (!in_array('rijndael-128', $algorightms))
{
return false;
}

if (!in_array('rijndael-192', $algorightms))
{
return false;
}

if (!in_array('rijndael-256', $algorightms))
{
return false;
}

$algorightms = hash_algos();

if (!in_array('sha256', $algorightms))
{
return false;
}

return true;
}

public function getBlockSize()


{
return mcrypt_get_iv_size($this->cipherType, $this->cipherMode);
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

class OpenSSL extends AKEncryptionAESAdapterAbstract implements


AKEncryptionAESAdapterInterface
{
/**
* The OpenSSL options for encryption / decryption
*
* @var int
*/
protected $openSSLOptions = 0;

/**
* The encryption method to use
*
* @var string
*/
protected $method = 'aes-128-cbc';

public function __construct()


{
$this->openSSLOptions = OPENSSL_RAW_DATA | OPENSSL_ZERO_PADDING;
}

public function decrypt($cipherText, $key)


{
$iv_size = $this->getBlockSize();
$key = $this->resizeKey($key, $iv_size);
$iv = substr($cipherText, 0, $iv_size);
$cipherText = substr($cipherText, $iv_size);
$plainText = openssl_decrypt($cipherText, $this->method, $key, $this-
>openSSLOptions, $iv);
return $plainText;
}

public function isSupported()


{
if (!function_exists('openssl_get_cipher_methods'))
{
return false;
}

if (!function_exists('openssl_random_pseudo_bytes'))
{
return false;
}

if (!function_exists('openssl_cipher_iv_length'))
{
return false;
}

if (!function_exists('openssl_encrypt'))
{
return false;
}

if (!function_exists('openssl_decrypt'))
{
return false;
}

if (!function_exists('hash'))
{
return false;
}

if (!function_exists('hash_algos'))
{
return false;
}

$algorightms = openssl_get_cipher_methods();

if (!in_array('aes-128-cbc', $algorightms))
{
return false;
}

$algorightms = hash_algos();

if (!in_array('sha256', $algorightms))
{
return false;
}

return true;
}

/**
* @return int
*/
public function getBlockSize()
{
return openssl_cipher_iv_length($this->method);
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* AES implementation in PHP (c) Chris Veness 2005-2016.
* Right to use and adapt is granted for under a simple creative commons
attribution
* licence. No warranty of any form is offered.
*
* Heavily modified for Akeeba Backup by Nicholas K. Dionysopoulos
* Also added AES-128 CBC mode (with mcrypt and OpenSSL) on top of AES CTR
* Removed CTR encrypt / decrypt (no longer used)
*/
class AKEncryptionAES
{
// Sbox is pre-computed multiplicative inverse in GF(2^8) used in SubBytes
and KeyExpansion [�5.1.1]
protected static $Sbox =
array(0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5, 0x30, 0x01, 0x67,
0x2b, 0xfe, 0xd7, 0xab, 0x76,
0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0, 0xad, 0xd4, 0xa2,
0xaf, 0x9c, 0xa4, 0x72, 0xc0,
0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc, 0x34, 0xa5, 0xe5,
0xf1, 0x71, 0xd8, 0x31, 0x15,
0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a, 0x07, 0x12, 0x80,
0xe2, 0xeb, 0x27, 0xb2, 0x75,
0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0, 0x52, 0x3b, 0xd6,
0xb3, 0x29, 0xe3, 0x2f, 0x84,
0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b, 0x6a, 0xcb, 0xbe,
0x39, 0x4a, 0x4c, 0x58, 0xcf,
0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85, 0x45, 0xf9, 0x02,
0x7f, 0x50, 0x3c, 0x9f, 0xa8,
0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5, 0xbc, 0xb6, 0xda,
0x21, 0x10, 0xff, 0xf3, 0xd2,
0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17, 0xc4, 0xa7, 0x7e,
0x3d, 0x64, 0x5d, 0x19, 0x73,
0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88, 0x46, 0xee, 0xb8,
0x14, 0xde, 0x5e, 0x0b, 0xdb,
0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c, 0xc2, 0xd3, 0xac,
0x62, 0x91, 0x95, 0xe4, 0x79,
0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9, 0x6c, 0x56, 0xf4,
0xea, 0x65, 0x7a, 0xae, 0x08,
0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6, 0xe8, 0xdd, 0x74,
0x1f, 0x4b, 0xbd, 0x8b, 0x8a,
0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e, 0x61, 0x35, 0x57,
0xb9, 0x86, 0xc1, 0x1d, 0x9e,
0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94, 0x9b, 0x1e, 0x87,
0xe9, 0xce, 0x55, 0x28, 0xdf,
0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68, 0x41, 0x99, 0x2d,
0x0f, 0xb0, 0x54, 0xbb, 0x16);

// Rcon is Round Constant used for the Key Expansion [1st col is 2^(r-1) in
GF(2^8)] [�5.2]
protected static $Rcon = array(
array(0x00, 0x00, 0x00, 0x00),
array(0x01, 0x00, 0x00, 0x00),
array(0x02, 0x00, 0x00, 0x00),
array(0x04, 0x00, 0x00, 0x00),
array(0x08, 0x00, 0x00, 0x00),
array(0x10, 0x00, 0x00, 0x00),
array(0x20, 0x00, 0x00, 0x00),
array(0x40, 0x00, 0x00, 0x00),
array(0x80, 0x00, 0x00, 0x00),
array(0x1b, 0x00, 0x00, 0x00),
array(0x36, 0x00, 0x00, 0x00));

protected static $passwords = array();

/**
* The algorithm to use for PBKDF2. Must be a supported hash_hmac algorithm.
Default: sha1
*
* @var string
*/
private static $pbkdf2Algorithm = 'sha1';

/**
* Number of iterations to use for PBKDF2
*
* @var int
*/
private static $pbkdf2Iterations = 1000;

/**
* Should we use a static salt for PBKDF2?
*
* @var int
*/
private static $pbkdf2UseStaticSalt = 0;

/**
* The static salt to use for PBKDF2
*
* @var string
*/
private static $pbkdf2StaticSalt = "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0";

/**
* AES Cipher function: encrypt 'input' with Rijndael algorithm
*
* @param array $input Message as byte-array (16 bytes)
* @param array $w key schedule as 2D byte-array (Nr+1 x Nb bytes) -
* generated from the cipher key by KeyExpansion()
*
* @return string Ciphertext as byte-array (16 bytes)
*/
protected static function Cipher($input, $w)
{
// main Cipher function [�5.1]
$Nb = 4; // block size (in words): no of columns in
state (fixed at 4 for AES)
$Nr = count($w) / $Nb - 1; // no of rounds: 10/12/14 for 128/192/256-
bit keys

$state = array(); // initialise 4xNb byte-array 'state' with input


[�3.4]

for ($i = 0; $i < 4 * $Nb; $i++)


{
$state[$i % 4][floor($i / 4)] = $input[$i];
}

$state = self::AddRoundKey($state, $w, 0, $Nb);

for ($round = 1; $round < $Nr; $round++)


{ // apply Nr rounds
$state = self::SubBytes($state, $Nb);
$state = self::ShiftRows($state, $Nb);
$state = self::MixColumns($state);
$state = self::AddRoundKey($state, $w, $round, $Nb);
}

$state = self::SubBytes($state, $Nb);


$state = self::ShiftRows($state, $Nb);
$state = self::AddRoundKey($state, $w, $Nr, $Nb);

$output = array(4 * $Nb); // convert state to 1-d array before


returning [�3.4]

for ($i = 0; $i < 4 * $Nb; $i++)


{
$output[$i] = $state[$i % 4][floor($i / 4)];
}

return $output;
}

protected static function AddRoundKey($state, $w, $rnd, $Nb)


{
// xor Round Key into state S [�5.1.4]
for ($r = 0; $r < 4; $r++)
{
for ($c = 0; $c < $Nb; $c++)
{
$state[$r][$c] ^= $w[$rnd * 4 + $c][$r];
}
}

return $state;
}

protected static function SubBytes($s, $Nb)


{
// apply SBox to state S [�5.1.1]
for ($r = 0; $r < 4; $r++)
{
for ($c = 0; $c < $Nb; $c++)
{
$s[$r][$c] = self::$Sbox[$s[$r][$c]];
}
}

return $s;
}

protected static function ShiftRows($s, $Nb)


{
// shift row r of state S left by r bytes [�5.1.2]
$t = array(4);

for ($r = 1; $r < 4; $r++)


{
for ($c = 0; $c < 4; $c++)
{
$t[$c] = $s[$r][($c + $r) % $Nb];
} // shift into temp copy

for ($c = 0; $c < 4; $c++)


{
$s[$r][$c] = $t[$c];
} // and copy back
} // note that this will work for Nb=4,5,6, but not 7,8
(always 4 for AES):

return $s; // see


fp.gladman.plus.com/cryptography_technology/rijndael/aes.spec.311.pdf
}

protected static function MixColumns($s)


{
// combine bytes of each col of state S [�5.1.3]
for ($c = 0; $c < 4; $c++)
{
$a = array(4); // 'a' is a copy of the current column from 's'
$b = array(4); // 'b' is a�{02} in GF(2^8)

for ($i = 0; $i < 4; $i++)


{
$a[$i] = $s[$i][$c];
$b[$i] = $s[$i][$c] & 0x80 ? $s[$i][$c] << 1 ^ 0x011b :
$s[$i][$c] << 1;
}

// a[n] ^ b[n] is a�{03} in GF(2^8)


$s[0][$c] = $b[0] ^ $a[1] ^ $b[1] ^ $a[2] ^ $a[3]; // 2*a0 + 3*a1
+ a2 + a3
$s[1][$c] = $a[0] ^ $b[1] ^ $a[2] ^ $b[2] ^ $a[3]; // a0 * 2*a1 +
3*a2 + a3
$s[2][$c] = $a[0] ^ $a[1] ^ $b[2] ^ $a[3] ^ $b[3]; // a0 + a1 +
2*a2 + 3*a3
$s[3][$c] = $a[0] ^ $b[0] ^ $a[1] ^ $a[2] ^ $b[3]; // 3*a0 + a1 +
a2 + 2*a3
}

return $s;
}

/**
* Key expansion for Rijndael Cipher(): performs key expansion on cipher key
* to generate a key schedule
*
* @param array $key Cipher key byte-array (16 bytes)
*
* @return array Key schedule as 2D byte-array (Nr+1 x Nb bytes)
*/
protected static function KeyExpansion($key)
{
// generate Key Schedule from Cipher Key [�5.2]

// block size (in words): no of columns in state (fixed at 4 for AES)


$Nb = 4;
// key length (in words): 4/6/8 for 128/192/256-bit keys
$Nk = (int) (count($key) / 4);
// no of rounds: 10/12/14 for 128/192/256-bit keys
$Nr = $Nk + 6;

$w = array();
$temp = array();

for ($i = 0; $i < $Nk; $i++)


{
$r = array($key[4 * $i], $key[4 * $i + 1], $key[4 * $i + 2],
$key[4 * $i + 3]);
$w[$i] = $r;
}

for ($i = $Nk; $i < ($Nb * ($Nr + 1)); $i++)


{
$w[$i] = array();
for ($t = 0; $t < 4; $t++)
{
$temp[$t] = $w[$i - 1][$t];
}
if ($i % $Nk == 0)
{
$temp = self::SubWord(self::RotWord($temp));
for ($t = 0; $t < 4; $t++)
{
$rConIndex = (int) ($i / $Nk);
$temp[$t] ^= self::$Rcon[$rConIndex][$t];
}
}
else if ($Nk > 6 && $i % $Nk == 4)
{
$temp = self::SubWord($temp);
}
for ($t = 0; $t < 4; $t++)
{
$w[$i][$t] = $w[$i - $Nk][$t] ^ $temp[$t];
}
}
return $w;
}

protected static function SubWord($w)


{
// apply SBox to 4-byte word w
for ($i = 0; $i < 4; $i++)
{
$w[$i] = self::$Sbox[$w[$i]];
}

return $w;
}

/*
* Unsigned right shift function, since PHP has neither >>> operator nor
unsigned ints
*
* @param a number to be shifted (32-bit integer)
* @param b number of bits to shift a to the right (0..31)
* @return a right-shifted and zero-filled by b bits
*/

protected static function RotWord($w)


{
// rotate 4-byte word w left by one byte
$tmp = $w[0];
for ($i = 0; $i < 3; $i++)
{
$w[$i] = $w[$i + 1];
}
$w[3] = $tmp;

return $w;
}

protected static function urs($a, $b)


{
$a &= 0xffffffff;
$b &= 0x1f; // (bounds check)
if ($a & 0x80000000 && $b > 0)
{ // if left-most bit set
$a = ($a >> 1) & 0x7fffffff; // right-shift one bit & clear
left-most bit
$a = $a >> ($b - 1); // remaining right-shifts
}
else
{ // otherwise
$a = ($a >> $b); // use normal right-shift
}

return $a;
}

/**
* AES decryption in CBC mode. This is the standard mode (the CTR methods
* actually use Rijndael-128 in CTR mode, which - technically - isn't AES).
*
* It supports AES-128 only. It assumes that the last 4 bytes
* contain a little-endian unsigned long integer representing the unpadded
* data length.
*
* @since 3.0.1
* @author Nicholas K. Dionysopoulos
*
* @param string $ciphertext The data to encrypt
* @param string $password Encryption password
*
* @return string The plaintext
*/
public static function AESDecryptCBC($ciphertext, $password)
{
$adapter = self::getAdapter();

if (!$adapter->isSupported())
{
return false;
}

// Read the data size


$data_size = unpack('V', substr($ciphertext, -4));

// Do I have a PBKDF2 salt?


$salt = substr($ciphertext, -92, 68);
$rightStringLimit = -4;

$params = self::getKeyDerivationParameters();
$keySizeBytes = $params['keySize'];
$algorithm = $params['algorithm'];
$iterations = $params['iterations'];
$useStaticSalt = $params['useStaticSalt'];

if (substr($salt, 0, 4) == 'JPST')
{
// We have a stored salt. Retrieve it and tell decrypt to process
the string minus the last 44 bytes
// (4 bytes for JPST, 16 bytes for the salt, 4 bytes for JPIV, 16
bytes for the IV, 4 bytes for the
// uncompressed string length - note that using PBKDF2 means
we're also using a randomized IV per the
// format specification).
$salt = substr($salt, 4);
$rightStringLimit -= 68;

$key = self::pbkdf2($password, $salt, $algorithm,


$iterations, $keySizeBytes);
}
elseif ($useStaticSalt)
{
// We have a static salt. Use it for PBKDF2.
$key = self::getStaticSaltExpandedKey($password);
}
else
{
// Get the expanded key from the password. THIS USES THE OLD,
INSECURE METHOD.
$key = self::expandKey($password);
}

// Try to get the IV from the data


$iv = substr($ciphertext, -24, 20);

if (substr($iv, 0, 4) == 'JPIV')
{
// We have a stored IV. Retrieve it and tell mdecrypt to process
the string minus the last 24 bytes
// (4 bytes for JPIV, 16 bytes for the IV, 4 bytes for the
uncompressed string length)
$iv = substr($iv, 4);
$rightStringLimit -= 20;
}
else
{
// No stored IV. Do it the dumb way.
$iv = self::createTheWrongIV($password);
}

// Decrypt
$plaintext = $adapter->decrypt($iv . substr($ciphertext, 0,
$rightStringLimit), $key);

// Trim padding, if necessary


if (strlen($plaintext) > $data_size)
{
$plaintext = substr($plaintext, 0, $data_size);
}

return $plaintext;
}

/**
* That's the old way of creating an IV that's definitely not
cryptographically sound.
*
* DO NOT USE, EVER, UNLESS YOU WANT TO DECRYPT LEGACY DATA
*
* @param string $password The raw password from which we create an IV in a
super bozo way
*
* @return string A 16-byte IV string
*/
public static function createTheWrongIV($password)
{
static $ivs = array();

$key = md5($password);

if (!isset($ivs[$key]))
{
$nBytes = 16; // AES uses a 128 -bit (16 byte) block size,
hence the IV size is always 16 bytes
$pwBytes = array();
for ($i = 0; $i < $nBytes; $i++)
{
$pwBytes[$i] = ord(substr($password, $i, 1)) & 0xff;
}
$iv = self::Cipher($pwBytes, self::KeyExpansion($pwBytes));
$newIV = '';
foreach ($iv as $int)
{
$newIV .= chr($int);
}

$ivs[$key] = $newIV;
}

return $ivs[$key];
}

/**
* Expand the password to an appropriate 128-bit encryption key
*
* @param string $password
*
* @return string
*
* @since 5.2.0
* @author Nicholas K. Dionysopoulos
*/
public static function expandKey($password)
{
// Try to fetch cached key or create it if it doesn't exist
$nBits = 128;
$lookupKey = md5($password . '-' . $nBits);

if (array_key_exists($lookupKey, self::$passwords))
{
$key = self::$passwords[$lookupKey];

return $key;
}

// use AES itself to encrypt password to get cipher key (using plain
password as source for
// key expansion) - gives us well encrypted key.
$nBytes = $nBits / 8; // Number of bytes in key
$pwBytes = array();

for ($i = 0; $i < $nBytes; $i++)


{
$pwBytes[$i] = ord(substr($password, $i, 1)) & 0xff;
}

$key = self::Cipher($pwBytes, self::KeyExpansion($pwBytes));


$key = array_merge($key, array_slice($key, 0, $nBytes - 16)); //
expand key to 16/24/32 bytes long
$newKey = '';

foreach ($key as $int)


{
$newKey .= chr($int);
}

$key = $newKey;
self::$passwords[$lookupKey] = $key;

return $key;
}

/**
* Returns the correct AES-128 CBC encryption adapter
*
* @return AKEncryptionAESAdapterInterface
*
* @since 5.2.0
* @author Nicholas K. Dionysopoulos
*/
public static function getAdapter()
{
static $adapter = null;

if (is_object($adapter) && ($adapter instanceof


AKEncryptionAESAdapterInterface))
{
return $adapter;
}

$adapter = new OpenSSL();

if (!$adapter->isSupported())
{
$adapter = new Mcrypt();
}

return $adapter;
}

/**
* @return string
*/
public static function getPbkdf2Algorithm()
{
return self::$pbkdf2Algorithm;
}

/**
* @param string $pbkdf2Algorithm
* @return void
*/
public static function setPbkdf2Algorithm($pbkdf2Algorithm)
{
self::$pbkdf2Algorithm = $pbkdf2Algorithm;
}

/**
* @return int
*/
public static function getPbkdf2Iterations()
{
return self::$pbkdf2Iterations;
}

/**
* @param int $pbkdf2Iterations
* @return void
*/
public static function setPbkdf2Iterations($pbkdf2Iterations)
{
self::$pbkdf2Iterations = $pbkdf2Iterations;
}

/**
* @return int
*/
public static function getPbkdf2UseStaticSalt()
{
return self::$pbkdf2UseStaticSalt;
}

/**
* @param int $pbkdf2UseStaticSalt
* @return void
*/
public static function setPbkdf2UseStaticSalt($pbkdf2UseStaticSalt)
{
self::$pbkdf2UseStaticSalt = $pbkdf2UseStaticSalt;
}

/**
* @return string
*/
public static function getPbkdf2StaticSalt()
{
return self::$pbkdf2StaticSalt;
}

/**
* @param string $pbkdf2StaticSalt
* @return void
*/
public static function setPbkdf2StaticSalt($pbkdf2StaticSalt)
{
self::$pbkdf2StaticSalt = $pbkdf2StaticSalt;
}

/**
* Get the parameters fed into PBKDF2 to expand the user password into an
encryption key. These are the static
* parameters (key size, hashing algorithm and number of iterations). A new
salt is used for each encryption block
* to minimize the risk of attacks against the password.
*
* @return array
*/
public static function getKeyDerivationParameters()
{
return array(
'keySize' => 16,
'algorithm' => self::$pbkdf2Algorithm,
'iterations' => self::$pbkdf2Iterations,
'useStaticSalt' => self::$pbkdf2UseStaticSalt,
'staticSalt' => self::$pbkdf2StaticSalt,
);
}

/**
* PBKDF2 key derivation function as defined by RSA's PKCS #5:
https://www.ietf.org/rfc/rfc2898.txt
*
* Test vectors can be found here: https://www.ietf.org/rfc/rfc6070.txt
*
* This implementation of PBKDF2 was originally created by https://defuse.ca
* With improvements by http://www.variations-of-shadow.com
* Modified for Akeeba Engine by Akeeba Ltd (removed unnecessary checks to
make it faster)
*
* @param string $password The password.
* @param string $salt A salt that is unique to the password.
* @param string $algorithm The hash algorithm to use. Default is sha1.
* @param int $count Iteration count. Higher is better, but
slower. Default: 1000.
* @param int $key_length The length of the derived key in bytes.
*
* @return string A string of $key_length bytes
*/
public static function pbkdf2($password, $salt, $algorithm = 'sha1', $count =
1000, $key_length = 16)
{
if (function_exists("hash_pbkdf2"))
{
return hash_pbkdf2($algorithm, $password, $salt, $count,
$key_length, true);
}

$hash_length = akstringlen(hash($algorithm, "", true));


$block_count = ceil($key_length / $hash_length);

$output = "";

for ($i = 1; $i <= $block_count; $i++)


{
// $i encoded as 4 bytes, big endian.
$last = $salt . pack("N", $i);

// First iteration
$xorResult = hash_hmac($algorithm, $last, $password, true);
$last = $xorResult;

// Perform the other $count - 1 iterations


for ($j = 1; $j < $count; $j++)
{
$last = hash_hmac($algorithm, $last, $password, true);
$xorResult ^= $last;
}

$output .= $xorResult;
}

return aksubstr($output, 0, $key_length);


}
/**
* Get the expanded key from the user supplied password using a static salt.
The results are cached for performance
* reasons.
*
* @param string $password The user-supplied password, UTF-8 encoded.
*
* @return string The expanded key
*/
private static function getStaticSaltExpandedKey($password)
{
$params = self::getKeyDerivationParameters();
$keySizeBytes = $params['keySize'];
$algorithm = $params['algorithm'];
$iterations = $params['iterations'];
$staticSalt = $params['staticSalt'];

$lookupKey = "PBKDF2-$algorithm-$iterations-" . md5($password .


$staticSalt);

if (!array_key_exists($lookupKey, self::$passwords))
{
self::$passwords[$lookupKey] = self::pbkdf2($password,
$staticSalt, $algorithm, $iterations, $keySizeBytes);
}

return self::$passwords[$lookupKey];
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* A timing safe equals comparison
*
* @param string $safe The internal (safe) value to be checked
* @param string $user The user submitted (unsafe) value
*
* @return boolean True if the two strings are identical.
*
* @see http://blog.ircmaxell.com/2014/11/its-all-about-time.html
*/
function timingSafeEquals($safe, $user)
{
$safeLen = strlen($safe);
$userLen = strlen($user);

if ($userLen != $safeLen)
{
return false;
}
$result = 0;

for ($i = 0; $i < $userLen; $i++)


{
$result |= (ord($safe[$i]) ^ ord($user[$i]));
}

// They are only identical strings if $result is exactly 0...


return $result === 0;
}

/**
* The Master Setup will read the configuration parameters from restoration.php or
* the JSON-encoded "configuration" input variable and return the status.
*
* @return bool True if the master configuration was applied to the Factory object
*/
function masterSetup()
{
// ------------------------------------------------------------
// 1. Import basic setup parameters
// ------------------------------------------------------------

$ini_data = null;

// In restore.php mode, require restoration.php or fail


if (!defined('KICKSTART'))
{
// This is the standalone mode, used by Akeeba Backup Professional. It
looks for a restoration.php
// file to perform its magic. If the file is not there, we will abort.
$setupFile = 'restoration.php';

if (!file_exists($setupFile))
{
AKFactory::set('kickstart.enabled', false);

return false;
}

/**
* If the setup file was created more than 1.5 hours ago we can assume
that it's stale and someone forgot to
* remove it from the server. This hinders brute force attacks against
the Kickstart password. Even a simple
* 8 character simple alphanum (a-z, 0-9) password yields over 2.8e12.
Assuming a very fast server which can
* serve 100 requests to restore.php per second and an easy to attack
password requiring going over just 1% of
* the search space it'd still take over 282 million seconds to brute
force it. Our limit is more than 4 orders
* of magnitude lower than this best practical case scenario, giving us
adequate protection against all but the
* luckiest attacker (spoiler alert: the mathematics of probabilities
say you're not gonna get lucky).
*
* It is still advisable to remove the restoration.php file once you
are done with the extraction. This check
* here is only meant as a failsafe in case of a server error during
the extraction and subsequent lack of user
* action to remove the restoration.php file from their server.
*/
$setupFieCreationTime = filectime($setupFile);

if (abs(time() - $setupFieCreationTime) > 5400)


{
AKFactory::set('kickstart.enabled', false);

return false;
}

// Load restoration.php. It creates a global variable named


$restoration_setup
require_once $setupFile;

$ini_data = $restoration_setup;

if (empty($ini_data))
{
// No parameters fetched. Darn, how am I supposed to work like
that?!
AKFactory::set('kickstart.enabled', false);

return false;
}

AKFactory::set('kickstart.enabled', true);
}
else
{
// Maybe we have $restoration_setup defined in the head of
kickstart.php
global $restoration_setup;

if (!empty($restoration_setup) && !is_array($restoration_setup))


{
$ini_data = AKText::parse_ini_file($restoration_setup, false,
true);
}
elseif (is_array($restoration_setup))
{
$ini_data = $restoration_setup;
}
}

// Import any data from $restoration_setup


if (!empty($ini_data))
{
foreach ($ini_data as $key => $value)
{
AKFactory::set($key, $value);
}
AKFactory::set('kickstart.enabled', true);
}

// Reinitialize $ini_data
$ini_data = null;
/**
* August 2018. Some third party developer with a dubious skill level (or
complete lack thereof) wrote a piece of
* code which uses restore.php with an empty password (and never deleted the
restoration.php file he created).
* According to his code comments he did this because he couldn't figure out
how to make encrypted requests work,
* DESPITE THE FACT that com_joomlaupdate (part of Joomla! itself) has
working code which does EXACTLY THAT. >:-o
*
* As a result of his actions all sites running his software have a massive
vulnerability inflicted upon them. An
* attacker can absuse the (unlocked) restore.php to upload and install any
arbitrary code in a ZIP archive,
* possibly overwriting core code. Discovering this problem takes a few
seconds and there is code which is doing
* exactly that published years ago (during the active maintenance period of
Joomla! 3.4, that long ago).
*
* This bit of code here detects an empty password and disables restore.php.
His badly written software fails to
* execute and, most importantly, the unlucky users of his software will no
longer have a remote code upload /
* remote code execution vulnerability on their sites.
*
* Remember, people, if you can't be bothered to take web application
security seriously DO NOT SELL WEB SOFTWARE
* FOR A LIVING. There are other honest jobs you can do which don't involve
using a computer in a dangerous and
* irresponsible manner.
*/
$password = AKFactory::get('kickstart.security.password', null);

if (empty($password) || (trim($password) == '') || (strlen(trim($password)) <


10))
{
AKFactory::set('kickstart.enabled', false);

return false;
}

// ------------------------------------------------------------
// 2. Explode JSON parameters into $_REQUEST scope
// ------------------------------------------------------------

// Detect a JSON string in the request variable and store it.


$json = getQueryParam('json', null);

// Detect a password in the request variable and store it.


$userPassword = getQueryParam('password', '');

// Remove everything from the request, post and get arrays


if (!empty($_REQUEST))
{
foreach ($_REQUEST as $key => $value)
{
unset($_REQUEST[$key]);
}
}

if (!empty($_POST))
{
foreach ($_POST as $key => $value)
{
unset($_POST[$key]);
}
}

if (!empty($_GET))
{
foreach ($_GET as $key => $value)
{
unset($_GET[$key]);
}
}

// Authentication - Akeeba Restore 5.4.0 or later


$password = AKFactory::get('kickstart.security.password', null);
$isAuthenticated = false;

/**
* Akeeba Restore 5.3.1 and earlier use a custom implementation of AES-128 in
CTR mode to encrypt the JSON data
* between client and server. This is not used as a means to maintain secrecy
(it's symmetrical encryption and the
* key is, by necessity, transmitted with the HTML page to the client). It's
meant as a form of authentication, so
* that the server part can ensure that it only receives commands by an
authorized client.
*
* The downside is that encryption in CTR mode (like CBC) is an all-or-
nothing affair. This opens the possibility
* for a padding oracle attack
(https://en.wikipedia.org/wiki/Padding_oracle_attack). While Akeeba Restore was
* hardened in 2014 to prevent the bulk of suck attacks it is still possible
to attack the encryption using a very
* large number of requests (several dozens of thousands).
*
* Since Akeeba Restore 5.4.0 we have removed this authentication method and
replaced it with the transmission of a
* very large length password. On the server side we use a timing safe
password comparison. By its very nature, it
* will only leak the (well known, constant and large) length of the password
but no more information about the
* password itself. See http://blog.ircmaxell.com/2014/11/its-all-about-
time.html As a result this form of
* authentication is many orders of magnitude harder to crack than regular
encryption.
*
* Now you may wonder "how is sending a password in the clear hardier than
encryption?". If you ask that question
* you were not paying attention. The password needs to be known by BOTH the
server AND the client (browser). Since
* this password is generated programmatically by the server, it MUST be sent
to the client by the server. If an
* attacker is able to intercept this transmission (man in the middle attack)
using encryption is irrelevant: the
* attacker already knows your password. This situation also applies when the
user sends their own password to the
* server, e.g. when logging into their site. The ONLY way to avoid security
issues regarding information being
* stolen in transit is using HTTPS with a commercially signed SSL
certificate. Unlike 2008, when Kickstart was
* originally written, obtaining such a certificate nowadays is trivial and
costs absolutely nothing thanks to Let's
* Encrypt (https://letsencrypt.org/).
*
* TL;DR: Use HTTPS with a commercially signed SSL certificate, e.g. a free
certificate from Let's Encrypt. Client-
* side cryptography does NOT protect you against an attacker (see
* https://www.nccgroup.trust/us/about-us/newsroom-and-
events/blog/2011/august/javascript-cryptography-considered-harmful/).
* Moreover, sending a plaintext password is safer than relying on client-
side encryption for authentication as it
* removes the possibility of an attacker inferring the contents of the
authentication key (password) in a relatively
* easy and automated manner.
*/
if (!empty($password))
{
// Timing-safe password comparison. See
http://blog.ircmaxell.com/2014/11/its-all-about-time.html
if (!timingSafeEquals($password, $userPassword))
{
die('###{"status":false,"message":"Invalid login"}###');
}
}

// No JSON data? Die.


if (empty($json))
{
die('###{"status":false,"message":"Invalid JSON data"}###');
}

// Handle the JSON string


$raw = json_decode($json, true);

// Invalid JSON data?


if (empty($raw))
{
die('###{"status":false,"message":"Invalid JSON data"}###');
}

// Pass all JSON data to the request array


if (!empty($raw))
{
foreach ($raw as $key => $value)
{
$_REQUEST[$key] = $value;
}
}

// ------------------------------------------------------------
// 3. Try the "factory" variable
// ------------------------------------------------------------
// A "factory" variable will override all other settings.
$serialized = getQueryParam('factory', null);

if (!is_null($serialized))
{
// Get the serialized factory
AKFactory::unserialize($serialized);
AKFactory::set('kickstart.enabled', true);

return true;
}

// ------------------------------------------------------------
// 4. Try the configuration variable for Kickstart
// ------------------------------------------------------------
if (defined('KICKSTART'))
{
$configuration = getQueryParam('configuration');

if (!is_null($configuration))
{
// Let's decode the configuration from JSON to array
$ini_data = json_decode($configuration, true);
}
else
{
// Neither exists. Enable Kickstart's interface anyway.
$ini_data = array('kickstart.enabled' => true);
}

// Import any INI data we might have from other sources


if (!empty($ini_data))
{
foreach ($ini_data as $key => $value)
{
AKFactory::set($key, $value);
}

AKFactory::set('kickstart.enabled', true);

return true;
}
}
}

/**
* Akeeba Restore
* A JSON-powered JPA, JPS and ZIP archive extraction library
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

// Mini-controller for restore.php


if (!defined('KICKSTART'))
{
// The observer class, used to report number of files and bytes processed
class RestorationObserver extends AKAbstractPartObserver
{
public $compressedTotal = 0;
public $uncompressedTotal = 0;
public $filesProcessed = 0;

public function update($object, $message)


{
if (!is_object($message))
{
return;
}

if (!array_key_exists('type', get_object_vars($message)))
{
return;
}

if ($message->type == 'startfile')
{
$this->filesProcessed++;
$this->compressedTotal += $message->content->compressed;
$this->uncompressedTotal += $message->content-
>uncompressed;
}
}

public function __toString()


{
return __CLASS__;
}

// Import configuration
masterSetup();

$retArray = array(
'status' => true,
'message' => null
);

$enabled = AKFactory::get('kickstart.enabled', false);

if ($enabled)
{
$task = getQueryParam('task');

switch ($task)
{
case 'ping':
// ping task - really does nothing!
$timer = AKFactory::getTimer();
$timer->enforce_min_exec_time();
break;

/**
* There are two separate steps here since we were using an
inefficient restoration initialization method in
* the past. Now both startRestore and stepRestore are identical.
The difference in behavior depends
* exclusively on the calling Javascript. If no serialized
factory was passed in the request then we start a
* new restoration. If a serialized factory was passed in the
request then the restoration is resumed. For
* this reason we should NEVER call AKFactory::nuke() in
startRestore anymore: that would simply reset the
* extraction engine configuration which was done in
masterSetup() leading to an error about the file being
* invalid (since no file is found).
*/
case 'startRestore':
case 'stepRestore':
/**
* First try to run the filesystem zapper (remove all
existing files and folders). If the Zapper is
* disabled or has already finished running we will get a
FALSE result. Otherwise it's a status array
* which we can pass directly back to the caller.
*/
$ret = runZapper();

// If the Zapper had a step to run we stop here and return


its status array to the caller.
if ($ret !== false)
{
$retArray = array_merge($retArray, $ret);

break;
}

$engine = AKFactory::getUnarchiver(); // Get the engine


$observer = new RestorationObserver(); // Create a new
observer
$engine->attach($observer); // Attach the observer
$engine->tick();
$ret = $engine->getStatusArray();

if ($ret['Error'] != '')
{
$retArray['status'] = false;
$retArray['done'] = true;
$retArray['message'] = $ret['Error'];
}
elseif (!$ret['HasRun'])
{
$retArray['files'] = $observer->filesProcessed;
$retArray['bytesIn'] = $observer->compressedTotal;
$retArray['bytesOut'] = $observer->uncompressedTotal;
$retArray['status'] = true;
$retArray['done'] = true;
}
else
{
$retArray['files'] = $observer->filesProcessed;
$retArray['bytesIn'] = $observer->compressedTotal;
$retArray['bytesOut'] = $observer->uncompressedTotal;
$retArray['status'] = true;
$retArray['done'] = false;
$retArray['factory'] = AKFactory::serialize();
}

$timer = AKFactory::getTimer();
$timer->enforce_min_exec_time();
break;

case 'finalizeRestore':
$root = AKFactory::get('kickstart.setup.destdir');
// Remove the installation directory
recursive_remove_directory($root . '/installation');

$postproc = AKFactory::getPostProc();

/**
* Should I rename the htaccess.bak and web.config.bak
files back to their live filenames...?
*/
$renameFiles =
AKFactory::get('kickstart.setup.postrenamefiles', true);

if ($renameFiles)
{
// Rename htaccess.bak to .htaccess
if (file_exists($root . '/htaccess.bak'))
{
if (file_exists($root . '/.htaccess'))
{
$postproc->unlink($root . '/.htaccess');
}
$postproc->rename($root . '/htaccess.bak',
$root . '/.htaccess');
}

// Rename htaccess.bak to .htaccess


if (file_exists($root . '/web.config.bak'))
{
if (file_exists($root . '/web.config'))
{
$postproc->unlink($root . '/web.config');
}
$postproc->rename($root . '/web.config.bak',
$root . '/web.config');
}
}

// Remove restoration.php
$basepath = KSROOTDIR;
$basepath = rtrim(str_replace('\\', '/', $basepath), '/');
if (!empty($basepath))
{
$basepath .= '/';
}
$postproc->unlink($basepath . 'restoration.php');

// Import a custom finalisation file


$filename = dirname(__FILE__) .
'/restore_finalisation.php';
if (file_exists($filename))
{
// opcode cache busting before including the filename
if (function_exists('opcache_invalidate'))
{
opcache_invalidate($filename);
}
if (function_exists('apc_compile_file'))
{
apc_compile_file($filename);
}
if (function_exists('wincache_refresh_if_changed'))
{
wincache_refresh_if_changed([$filename]);
}
if (function_exists('xcache_asm'))
{
xcache_asm($filename);
}
include_once $filename;
}

// Run a custom finalisation script


if (function_exists('finalizeRestore'))
{
finalizeRestore($root, $basepath);
}
break;

default:
// Invalid task!
$enabled = false;
break;
}
}

// Maybe we weren't authorized or the task was invalid?


if (!$enabled)
{
// Maybe the user failed to enter any information
$retArray['status'] = false;
$retArray['message'] = AKText::_('ERR_INVALID_LOGIN');
}

// JSON encode the message


$json = json_encode($retArray);

// Return the message


echo "###$json###";

// ------------ lixlpixel recursive PHP functions -------------


// recursive_remove_directory( directory to delete, empty )
// expects path to directory and optional TRUE / FALSE to empty
// of course PHP has to have the rights to delete the directory
// you specify and all files and folders inside the directory
// ------------------------------------------------------------
function recursive_remove_directory($directory)
{
// if the path has a slash at the end we remove it here
if (substr($directory, -1) == '/')
{
$directory = substr($directory, 0, -1);
}
// if the path is not valid or is not a directory ...
if (!file_exists($directory) || !is_dir($directory))
{
// ... we return false and exit the function
return false;
// ... if the path is not readable
}
elseif (!is_readable($directory))
{
// ... we return false and exit the function
return false;
// ... else if the path is readable
}
else
{
// we open the directory
$handle = opendir($directory);
$postproc = AKFactory::getPostProc();
// and scan through the items inside
while (false !== ($item = readdir($handle)))
{
// if the filepointer is not the current directory
// or the parent directory
if ($item != '.' && $item != '..')
{
// we build the new path to delete
$path = $directory . '/' . $item;
// if the new path is a directory
if (is_dir($path))
{
// we call this function with the new path
recursive_remove_directory($path);
// if the new path is a file
}
else
{
// we remove the file
$postproc->unlink($path);
}
}
}
// close the directory
closedir($handle);
// try to delete the now empty directory
if (!$postproc->rmdir($directory))
{
// return false if not possible
return false;
}

// return success
return true;
}
}
/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/
class AKKickstartUtils
{
/**
* Guess the best path containing backup archives. The default strategy is
check in the current directory first,
* then attempt to find an Akeeba Backup for Joomla!, Akeeba Solo or Akeeba
Backup for WordPress default backup
* output directory under the current root. The first one containing backup
archives wins.
*
* @return string The path to get archives from
*/
public static function getBestArchivePath()
{
$basePath = self::getPath();
$basePathSlash = (empty($basePath) ? '.' : rtrim($basePath, '/\\')) .
'/';

$paths = array(
// Root, same as the directory we're in
$basePath,
// Standard temporary directory
$basePath . '/kicktemp',
// Akeeba Backup for Joomla!, default output directory
$basePathSlash . 'administrator/components/com_akeeba/backup',
// Akeeba Solo, default output directory
$basePathSlash . 'backups',
// Akeeba Backup for WordPress, default output directory
$basePathSlash . 'wp-content/plugins/akeebabackupwp/app/backups',
);

foreach ($paths as $path)


{
$archives = self::findArchives($path);

if (!empty($archives))
{
return $path;
}
}

return $basePath;
}

/**
* Gets the directory the file is in
*
* @return string
*/
public static function getPath()
{
$path = KSROOTDIR;
$path = rtrim(str_replace('\\', '/', $path), '/');
if (!empty($path))
{
$path .= '/';
}

return $path;
}

/**
* Scans the current directory for archive files (JPA, JPS and ZIP format)
*
* @param string $path The path to look for archives. null for automatic path
*
* @return array
*/
public static function findArchives($path)
{
$ret = array();

if (empty($path))
{
$path = self::getPath();
}

if (empty($path))
{
$path = '.';
}

$dh = @opendir($path);

if ($dh === false)


{
return $ret;
}

while (false !== $file = @readdir($dh))


{
$dotpos = strrpos($file, '.');

if ($dotpos === false)


{
continue;
}

if ($dotpos == strlen($file))
{
continue;
}

$extension = strtolower(substr($file, $dotpos + 1));

if (in_array($extension, array('jpa', 'zip', 'jps')))


{
$ret[] = $file;
}
}

closedir($dh);

if (!empty($ret))
{
return $ret;
}

// On some hosts using opendir doesn't work. Let's try Dir instead
$d = dir($path);

while (false != ($file = $d->read()))


{
$dotpos = strrpos($file, '.');

if ($dotpos === false)


{
continue;
}

if ($dotpos == strlen($file))
{
continue;
}

$extension = strtolower(substr($file, $dotpos + 1));

if (in_array($extension, array('jpa', 'zip', 'jps')))


{
$ret[] = $file;
}
}

return $ret;
}

/**
* Gets the most appropriate temporary path
*
* @return string
*/
public static function getTemporaryPath()
{
$path = self::getPath();

$candidateDirs = array(
$path,
$path . '/kicktemp',
);

if (function_exists('sys_get_temp_dir'))
{
$candidateDirs[] = sys_get_temp_dir();
}

foreach ($candidateDirs as $dir)


{
if (is_dir($dir) && is_writable($dir))
{
return $dir;
}
}

// Failsafe
return $path;
}

/**
* Scans the current directory for archive files and returns them as <OPTION>
tags
*
* @param string $path The path to look for archives. null for automatic path
*
* @return string
*/
public static function getArchivesAsOptions($path = null)
{
$ret = '';

$archives = self::findArchives($path);

if (empty($archives))
{
return $ret;
}

foreach ($archives as $file)


{
//$file = htmlentities($file);
$ret .= '<option value="' . $file . '">' . $file . '</option>' .
"\n";
}

return $ret;
}
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/
class ExtractionObserver extends AKAbstractPartObserver
{
public $compressedTotal = 0;
public $uncompressedTotal = 0;
public $filesProcessed = 0;
public $totalSize = null;
public $fileList = null;
public $lastFile = '';

public function update($object, $message)


{
if (!is_object($message))
{
return;
}

if (!array_key_exists('type', get_object_vars($message)))
{
return;
}

switch ($message->type)
{
// Sent when we read the list of archive parts and their total
size
case 'totalsize':
$this->totalSize = $message->content->totalsize;
$this->fileList = $message->content->filelist;
break;

// Sent when a file header is read from the archive


case 'startfile':
$this->lastFile = $message->content->file;
$this->filesProcessed++;
$this->compressedTotal += $message->content->compressed;
$this->uncompressedTotal += $message->content-
>uncompressed;
break;
}

public function __toString()


{
return __CLASS__;
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

function callExtraFeature($method = null, array $params = array())


{
static $extraFeatureObjects = null;

if (!is_array($extraFeatureObjects))
{
$extraFeatureObjects = array();
$allClasses = get_declared_classes();
foreach ($allClasses as $class)
{
if (substr($class, 0, 9) == 'AKFeature')
{
$extraFeatureObjects[] = new $class;
}
}
}

if (is_null($method))
{
return;
}

if (empty($extraFeatureObjects))
{
return;
}

$result = null;
foreach ($extraFeatureObjects as $o)
{
if (!method_exists($o, $method))
{
continue;
}
$result = call_user_func(array($o, $method), $params);
}

return $result;
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Removes trailing slash or backslash from a pathname
*
* @param string $path The path to treat
*
* @return string The path without the trailing slash/backslash
*/
function TrimTrailingSlash($path)
{
$newpath = $path;

if (substr($path, strlen($path) - 1, 1) == '\\')


{
$newpath = substr($path, 0, strlen($path) - 1);
}

if (substr($path, strlen($path) - 1, 1) == '/')


{
$newpath = substr($path, 0, strlen($path) - 1);
}
return $newpath;
}

function TranslateWinPath($p_path)
{
$is_unc = false;

if (KSWINDOWS)
{
// Is this a UNC path?
$is_unc = (substr($p_path, 0, 2) == '\\\\') || (substr($p_path, 0, 2)
== '//');
// Change potential windows directory separator
if ((strpos($p_path, '\\') > 0) || (substr($p_path, 0, 1) == '\\'))
{
$p_path = strtr($p_path, '\\', '/');
}
}

// Remove multiple slashes


$p_path = str_replace('///', '/', $p_path);
$p_path = str_replace('//', '/', $p_path);

// Fix UNC paths


if ($is_unc)
{
$p_path = '//' . ltrim($p_path, '/');
}

return $p_path;
}

/**
* FTP Functions
*/
function getListing($directory, $host, $port, $username, $password, $passive, $ssl)
{
$directory = resolvePath($directory);
$dir = $directory;

// Parse directory to parts


$parsed_dir = trim($dir, '/');
$parts = empty($parsed_dir) ? array() : explode('/', $parsed_dir);

// Find the path to the parent directory


if (!empty($parts))
{
$copy_of_parts = $parts;
array_pop($copy_of_parts);
if (!empty($copy_of_parts))
{
$parent_directory = '/' . implode('/', $copy_of_parts);
}
else
{
$parent_directory = '/';
}
}
else
{
$parent_directory = '';
}

// Connect to the server


if ($ssl)
{
$con = @ftp_ssl_connect($host, $port);
}
else
{
$con = @ftp_connect($host, $port);
}
if ($con === false)
{
return array(
'error' => 'FTPBROWSER_ERROR_HOSTNAME'
);
}

// Login
$result = @ftp_login($con, $username, $password);
if ($result === false)
{
return array(
'error' => 'FTPBROWSER_ERROR_USERPASS'
);
}

// Set the passive mode -- don't care if it fails, though!


@ftp_pasv($con, $passive);

// Try to chdir to the specified directory


if (!empty($dir))
{
$result = @ftp_chdir($con, $dir);
if ($result === false)
{
return array(
'error' => 'FTPBROWSER_ERROR_NOACCESS'
);
}
}
else
{
$directory = @ftp_pwd($con);

$parsed_dir = trim($directory, '/');


$parts = empty($parsed_dir) ? array() : explode('/',
$parsed_dir);
$parent_directory = $this->directory;
}

// Get a raw directory listing (hoping it's a UNIX server!)


$list = @ftp_rawlist($con, '.');
ftp_close($con);
if ($list === false)
{
return array(
'error' => 'FTPBROWSER_ERROR_UNSUPPORTED'
);
}

// Parse the raw listing into an array


$folders = parse_rawlist($list);

return array(
'error' => '',
'list' => $folders,
'breadcrumbs' => $parts,
'directory' => $directory,
'parent' => $parent_directory
);
}

function parse_rawlist($list)
{
$folders = array();
foreach ($list as $v)
{
$info = array();
$vinfo = preg_split("/[\s]+/", $v, 9);
if ($vinfo[0] !== "total")
{
$perms = $vinfo[0];
if (substr($perms, 0, 1) == 'd')
{
$folders[] = $vinfo[8];
}
}
}

asort($folders);

return $folders;
}

function getSftpListing($directory, $host, $port, $username, $password)


{
$directory = resolvePath($directory);
$dir = $directory;

// Parse directory to parts


$parsed_dir = trim($dir, '/');
$parts = empty($parsed_dir) ? array() : explode('/', $parsed_dir);

// Find the path to the parent directory


if (!empty($parts))
{
$copy_of_parts = $parts;
array_pop($copy_of_parts);
if (!empty($copy_of_parts))
{
$parent_directory = '/' . implode('/', $copy_of_parts);
}
else
{
$parent_directory = '/';
}
}
else
{
$parent_directory = '';
}

// Initialise
$connection = null;
$sftphandle = null;

// Open a connection
if (!function_exists('ssh2_connect'))
{
return array(
'error' => AKText::_('SFTP_NO_SSH2')
);
}

$connection = ssh2_connect($host, $port);

if ($connection === false)


{
return array(
'error' => AKText::_('SFTP_WRONG_USER')
);
}

if (!ssh2_auth_password($connection, $username, $password))


{
return array(
'error' => AKText::_('SFTP_WRONG_USER')
);
}

$sftphandle = ssh2_sftp($connection);

if ($sftphandle === false)


{
return array(
'error' => AKText::_('SFTP_NO_FTP_SUPPORT')
);
}

// Get a raw directory listing (hoping it's a UNIX server!)


$list = array();
$dir = ltrim($dir, '/');

if (empty($dir))
{
$dir = ssh2_sftp_realpath($sftphandle, ".");
$directory = $dir;

// Parse directory to parts


$parsed_dir = trim($dir, '/');
$parts = empty($parsed_dir) ? array() : explode('/', $parsed_dir);
// Find the path to the parent directory
if (!empty($parts))
{
$copy_of_parts = $parts;
array_pop($copy_of_parts);

if (!empty($copy_of_parts))
{
$parent_directory = '/' . implode('/', $copy_of_parts);
}
else
{
$parent_directory = '/';
}
}
else
{
$parent_directory = '';
}
}

$handle = opendir("ssh2.sftp://$sftphandle/$dir");

if (!is_resource($handle))
{
return array(
'error' => AKText::_('SFTPBROWSER_ERROR_NOACCESS')
);
}

while (($entry = readdir($handle)) !== false)


{
if (!is_dir("ssh2.sftp://$sftphandle/$dir/$entry"))
{
continue;
}

$list[] = $entry;
}

closedir($handle);

if (!empty($list))
{
asort($list);
}

return array(
'error' => '',
'list' => $list,
'breadcrumbs' => $parts,
'directory' => $directory,
'parent' => $parent_directory
);
}

/**
* Simple function to resolve relative paths.
* Note that it is unable to resolve pathnames any higher than the present working
directory.
* I.E. It doesn't know about any directory names that you don't tell it about;
hence: ../../foo becomes foo.
*
* @param $filename
*
* @return string
*/
function resolvePath($filename)
{
$filename = str_replace('//', '/', $filename);
$parts = explode('/', $filename);
$out = array();
foreach ($parts as $part)
{
if ($part == '.')
{
continue;
}
if ($part == '..')
{
array_pop($out);
continue;
}
$out[] = $part;
}

return implode('/', $out);


}

function createStealthURL()
{
$filename = AKFactory::get('kickstart.stealth.url', '');
// We need an HTML file!
if (empty($filename))
{
return;
}
// Make sure it ends in .html or .htm
$filename = basename($filename);
if ((strtolower(substr($filename, -5)) != '.html') &&
(strtolower(substr($filename, -4)) != '.htm'))
{
return;
}

$filename_quoted = str_replace('.', '\\.', $filename);


$rewrite_base = trim(dirname(AKFactory::get('kickstart.stealth.url', '')),
'/');

// Get the IP
$userIP = $_SERVER['REMOTE_ADDR'];
$userIP = str_replace('.', '\.', $userIP);

// Get the .htaccess contents


$stealthHtaccess = <<<ENDHTACCESS
RewriteEngine On
RewriteBase /$rewrite_base
RewriteCond %{REMOTE_ADDR} !$userIP
RewriteCond %{REQUEST_URI} !$filename_quoted
RewriteCond %{REQUEST_URI} !
(\.png|\.jpg|\.gif|\.jpeg|\.bmp|\.swf|\.css|\.js)$
RewriteRule (.*) $filename [R=307,L]

ENDHTACCESS;

// Write the new .htaccess, removing the old one first


$postproc = AKFactory::getpostProc();
$postproc->unlink('.htaccess');
$tempfile = $postproc->processFilename('.htaccess');
@file_put_contents($tempfile, $stealthHtaccess);
$postproc->process();
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

function echoCSS()
{
echo <<<CSS

html {
background: #f0f0f0;
font-size: 62.5%;
}

body {
font-size: 12pt;
font-family: Calibri, "Helvetica Neue", Helvetica, Arial, sans-serif;
text-rendering: optimizeLegibility;
background: transparent;
color:#555;
width:100%;
max-width:980px;
margin: 0 auto;
}

#page-container {
position:relative;
margin:5% 0;
background: #f9f9f9;
border: medium solid #ddd;
}

#header {
color: #555;
background: #eaeaea;
background-clip: padding-box;
margin-bottom: 0.7em;
border-bottom: 2px solid #ddd;
padding:.25em;
font-size: 24pt;
line-height: 1.2;
text-align: center;
}

#footer {
font-size: 9pt;
color: #999;
text-align: center;
border-top: 1px solid #ddd;
padding: 1em 1em;
background: #eaeaea;
clear: both;
}

#footer a {
color: #88a;
text-decoration: none;
}

#error, .error {
x-display: none;
border: solid #cc0000;
border-width: 4px 0;
background: rgb(255,255,136);
color: #990000;
padding:1em 2em;
margin-bottom: 1.15em;
text-align:center;
}

#error h3, .error h3 {


margin: 0;
padding: 0;
font-size: 12pt;
}

.clr {
clear: both;
}

.circle {
display: block;
float: left;
border-radius: 2em;
border: 2px solid #e5e5e5;
font-weight: bold;
font-size: 14pt;
line-height:1.5em;
color: #fff;
height: 1.5em;
width: 1.5em;
margin: 0.75em;
text-align: center;
background: rgb(35,83,138);
}

.area-container {
margin: 1em 2em;
}

#page2a .area-container {
margin: 1em 0;
}

#runInstaller,
#runCleanup,
#gotoSite,
#gotoAdministrator,
#gotoPostRestorationRroubleshooting {
margin: 0 2em 1.3em;
}

h2 {
font-size: 18pt;
font-weight: normal;
line-height: 1.3;
border: solid #ddd;
border-left:none;
border-right:none;
padding: 0.5em 0;
background: #eaeaea;
}

#preextraction h2 {
margin-top:0;
border-top:0;
text-align:center;
}

input,
select,
textarea {
font-size : 100%;
margin : 0;
vertical-align : baseline;
*vertical-align: middle;
}

button,
input {
line-height : normal;
font-weight:normal;
*overflow: visible;
}

input,
select,
textarea {
background:#fff;
color:#777;
font-size: 12pt;
border:1px solid #d5d5d5;
border-radius: .25em;
box-sizing: border-box;
width:50%;
padding:0 0 0 .5em;
}
input[type="checkbox"] {
width:auto;
}

.field {
height:1.5em;
}

label {
display:inline-block;
width:30%;
font-size: 95%;
font-weight: normal;
cursor : pointer;
color: #333;
margin:.5em 0;
}

.help {
width: 60%;
margin-left: 30%;
margin-bottom: 1.5em;
font-size: small;
color: #888;
}

input:focus, input:hover {
background-color: #f6f6ff;
}

.button {
display: inline-block;
margin: 1em .25em;
padding: 1em 2em;
background: #2cb12c;
color:#fff;
border: 1px solid #ccc;
cursor: pointer;
border-radius: .25em;
transition: 0.3s linear all;
}

#checkFTPTempDir.button,
#resetFTPTempDir.button,
#testFTP.button,
#browseFTP,
#reloadArchives,
#notWorking.button {
padding: .5em 1em;
}

.button:hover {
background: #259625;
}

.button:active {
background: #3c3;
border: 1px solid #eaeaea;
border-radius: .25em;
}

#notWorking.button, .bluebutton {
text-decoration: none;
background: #66a8ff;
}
#notWorking.button:hover, .bluebutton:hover {
background: #4096ee;
}
#notWorking.button:active, .bluebutton:active {
background: #7abcff;
}

.loprofile {
padding: 0.5em 1em;
font-size: 80%;
}

.black_overlay{
display: none;
position: absolute;
top: 0%;
left: 0%;
width: 100%;
height: 100%;
background-color: black;
z-index:1001;
-moz-opacity: 0.8;
opacity:.80;
filter: alpha(opacity=80);
}

.white_content {
display: none;
position: absolute;
padding: 0 0 1em;
background: #fff;
border: 1px solid #ddd;
border: 1px solid rgba(0,0,0,.3);
z-index:1002;
overflow: hidden;
}
.white_content a{
margin-left:4em;
}
ol {
margin:0 2em;
padding:0 2em 1em;
}
li {
margin : 0 0 .5em;
}

#genericerror {
background-color: #f0f000 !important;
border: 4px solid #fcc !important;
}
#genericerrorInner {
font-size: 110%;
color: #33000;
}

#warn-not-close, .warn-not-close {
padding: 0.2em 0.5em;
text-align: center;
background: #fcfc00;
font-size: smaller;
font-weight: bold;
}

#progressbar, .progressbar {
display: block;
width: 80%;
height: 32px;
border: 1px solid #ccc;
margin: 1em 10% 0.2em;
border-radius: .25em;
}

#progressbar-inner, .progressbar-inner {
display: block;
width: 100%;
height: 100%;
background: #4096ee;
}

#currentFile {
font-family: Consolas, "Courier New", Courier, monospace;
font-size: 9pt;
height: 10pt;
overflow: hidden;
text-overflow: ellipsis;
background: #ccc;
margin: 0 10% 1em;
padding:.125em;
}

#extractionComplete {
}

#warningsContainer {
border-bottom: 2px solid brown;
border-left: 2px solid brown;
border-right: 2px solid brown;
padding: 5px 0;
background: #ffffcc;
border-bottom-right-radius: 5px;
border-bottom-left-radius: 5px;
}

#warningsHeader h2 {
color: black;
border-top: 2px solid brown;
border-left: 2px solid brown;
border-right: 2px solid brown;
border-bottom: thin solid brown;
border-top-right-radius: 5px;
border-top-left-radius: 5px;
background: yellow;
font-size: large;
padding: 2px 5px;
margin: 0px;
}

#warnings {
height: 200px;
overflow-y: scroll;
}

#warnings div {
background: #eeeeee;
font-size: small;
padding: 2px 4px;
border-bottom: thin solid #333333;
}

#automode {
display: inline-block;
padding: 6pt 12pt;
background-color: #cc0000;
border: thick solid yellow;
color: white;
font-weight: bold;
font-size: 125%;
position: absolute;
float: right;
top: 1em;
right: 1em;
}

.helpme,
#warn-not-close {
background: rgb(255,255,136);
padding: 0.75em 0.5em;
border: solid #febf01;
border-width: 1px 0;
text-align: center;
}

#update-notification {
margin: 1em;
padding: 0.5em;
background-color: #FF9;
color: #F33;
text-align: center;
border-radius: 20px;
border: medium solid red;
}

.update-notify {
font-size: 20pt;
font-weight: bold;
}

.update-links {
color: #333;
font-size: 14pt;
}

#update-dlnow {
text-decoration: none;
color: #333;
border: thin solid #333;
padding: 0.5em;
border-radius: 5px;
background-color: #f0f0f0;
}

#update-dlnow:hover {
background-color: #fff;
}

#update-whatsnew {
font-size: 11pt;
color: blue;
text-decoration: underline;
}

.update-whyupdate {
color: #333;
font-size: 9pt;
}

/* FTP Browser */
.breadcrumb {background-color: #F5F5F5; border-radius: 4px; list-style: none
outside none; margin: 0 0 18px; padding: 8px 15px;}
.breadcrumb > li {display: inline-block; text-shadow: 0 1px 0 #FFFFFF;}
#ak_crumbs span {padding: 1px 3px;}
#ak_crumbs a {cursor: pointer;}
#ftpBrowserFolderList a{cursor:pointer}

/* Bootstrap porting */
.table {margin-bottom: 18px;width: 100%;}
.table th, .table td {border-top: 1px solid #DDDDDD; line-height: 18px; padding:
8px; text-align: left; vertical-align: top;}
.table-striped tbody > tr:nth-child(2n+1) > td, .table-striped tbody > tr:nth-
child(2n+1) > th { background-color: #F9F9F9;}

/* Layout helpers
----------------------------------*/
.ui-helper-hidden { display: none; }
.ui-helper-hidden-accessible { border: 0; clip: rect(0 0 0 0); height: 1px; margin:
-1px; overflow: hidden; padding: 0; position: absolute; width: 1px; }
.ui-helper-reset { margin: 0; padding: 0; border: 0; outline: 0; line-height: 1.3;
text-decoration: none; font-size: 100%; list-style: none; }
.ui-helper-clearfix:before, .ui-helper-clearfix:after { content: ""; display:
table; }
.ui-helper-clearfix:after { clear: both; }
.ui-helper-clearfix { zoom: 1; }
.ui-helper-zfix { width: 100%; height: 100%; top: 0; left: 0; position: absolute;
opacity: 0; filter:Alpha(Opacity=0); }

/* Interaction Cues
----------------------------------*/
.ui-state-disabled { cursor: default !important; }

/* Icons
----------------------------------*/

/* states and images */


.ui-icon { display: block; text-indent: -99999px; overflow: hidden; background-
repeat: no-repeat; }

/* Misc visuals
----------------------------------*/

/* Overlays */
.ui-widget-overlay { position: absolute; top: 0; left: 0; width: 100%; height:
100%; }
.ui-resizable { position: relative;}
.ui-resizable-handle { position: absolute;font-size: 0.1px; display: block; }
.ui-resizable-disabled .ui-resizable-handle, .ui-resizable-autohide .ui-resizable-
handle { display: none; }
.ui-resizable-n { cursor: n-resize; height: 7px; width: 100%; top: -5px; left: 0; }
.ui-resizable-s { cursor: s-resize; height: 7px; width: 100%; bottom: -5px; left:
0; }
.ui-resizable-e { cursor: e-resize; width: 7px; right: -5px; top: 0; height:
100%; }
.ui-resizable-w { cursor: w-resize; width: 7px; left: -5px; top: 0; height: 100%; }
.ui-resizable-se { cursor: se-resize; width: 12px; height: 12px; right: 1px;
bottom: 1px; }
.ui-resizable-sw { cursor: sw-resize; width: 9px; height: 9px; left: -5px; bottom:
-5px; }
.ui-resizable-nw { cursor: nw-resize; width: 9px; height: 9px; left: -5px; top:
-5px; }
.ui-resizable-ne { cursor: ne-resize; width: 9px; height: 9px; right: -5px; top:
-5px;}
.ui-button { display: inline-block; position: relative; padding: 0; margin-right: .
1em; cursor: pointer; text-align: center; zoom: 1; overflow: visible; } /* the
overflow property removes extra width in IE */
.ui-button, .ui-button:link, .ui-button:visited, .ui-button:hover, .ui-
button:active { text-decoration: none; }
.ui-button-icon-only { width: 2.2em; } /* to make room for the icon, a width needs
to be set here */
button.ui-button-icon-only { width: 2.4em; } /* button elements seem to need a
little more width */
.ui-button-icons-only { width: 3.4em; }
button.ui-button-icons-only { width: 3.7em; }

/*button text element */


.ui-button .ui-button-text { display: block; line-height: 1.4; }
.ui-button-text-only .ui-button-text { padding: 0; }
.ui-button-icon-only .ui-button-text, .ui-button-icons-only .ui-button-text
{ padding: .4em; text-indent: -9999999px; }
.ui-button-text-icon-primary .ui-button-text, .ui-button-text-icons .ui-button-text
{ padding: .4em 1em .4em 2.1em; }
.ui-button-text-icon-secondary .ui-button-text, .ui-button-text-icons .ui-button-
text { padding: .4em 2.1em .4em 1em; }
.ui-button-text-icons .ui-button-text { padding-left: 2.1em; padding-right:
2.1em; }
/* no icon support for input elements, provide padding by default */
input.ui-button { padding: .4em 1em; }
/*button icon element(s) */
.ui-button-icon-only .ui-icon, .ui-button-text-icon-primary .ui-icon, .ui-button-
text-icon-secondary .ui-icon, .ui-button-text-icons .ui-icon, .ui-button-icons-only
.ui-icon { position: absolute; top: 50%; margin-top: -8px; }
.ui-button-icon-only .ui-icon { left: 50%; margin-left: -8px; }
.ui-button-text-icon-primary .ui-button-icon-primary, .ui-button-text-icons .ui-
button-icon-primary, .ui-button-icons-only .ui-button-icon-primary { left: .5em; }
.ui-button-text-icon-secondary .ui-button-icon-secondary, .ui-button-text-icons
.ui-button-icon-secondary, .ui-button-icons-only .ui-button-icon-secondary { right:
.5em; }
.ui-button-text-icons .ui-button-icon-secondary, .ui-button-icons-only .ui-button-
icon-secondary { right: .5em; }

/*button sets*/
.ui-buttonset { margin-right: 7px; }
.ui-buttonset .ui-button { margin-left: 0; margin-right: -.3em; }

/* workarounds */
button.ui-button::-moz-focus-inner { border: 0; padding: 0; } /* reset extra
padding in Firefox */
.ui-dialog { position: absolute; top: 0; left: 0; padding: .2em; width: 300px;
overflow: hidden; }
.ui-dialog .ui-dialog-titlebar { padding: .4em 1em; position: relative; }
.ui-dialog .ui-dialog-title { float: left; margin: .1em 16px .1em 0; }
.ui-dialog .ui-dialog-titlebar-close { position: absolute; right: .3em; top: 50%;
width: 19px; margin: -10px 0 0 0; padding: 1px; height: 18px; display:none}
.ui-dialog .ui-dialog-titlebar-close span { display: none; margin: 1px; }
.ui-dialog .ui-dialog-titlebar-close:hover, .ui-dialog .ui-dialog-titlebar-
close:focus { padding: 0; }
.ui-dialog .ui-dialog-content { position: relative; border: 0; padding: .5em 1em;
background: none; overflow: auto; zoom: 1; }
.ui-dialog .ui-dialog-buttonpane { text-align: left; border-width: 1px 0 0 0;
background-image: none; margin: .5em 0 0 0; padding: .3em 1em .5em .4em; }
.ui-dialog .ui-dialog-buttonpane .ui-dialog-buttonset { float: right; }
.ui-dialog .ui-dialog-buttonpane button { margin: .5em .4em .5em 0; cursor:
pointer; }
.ui-dialog .ui-resizable-se { width: 14px; height: 14px; right: 3px; bottom: 3px; }
.ui-draggable .ui-dialog-titlebar { cursor: move; }

/* Component containers
----------------------------------*/
.ui-widget-content { border: 1px solid #a6c9e2; background: #fcfdfd; color:
#222222; }
.ui-widget-content a { color: #222222; }
.ui-widget-header { border: 1px solid #4297d7; background: #5c9ccc ; color:
#ffffff; font-weight: bold; }
.ui-widget-header a { color: #ffffff; }

/* Interaction states
----------------------------------*/
.ui-state-default a, .ui-state-default a:link, .ui-state-default a:visited {text-
decoration: none; }
.ui-state-hover, .ui-widget-content .ui-state-hover, .ui-widget-header .ui-state-
hover{
background: #4096ee;
background: -moz-linear-gradient(top, #4096ee 0%, #60abf8 56%, #7abcff 100%);
background: -webkit-gradient(linear, left top, left bottom, color-
stop(0%,#4096ee), color-stop(56%,#60abf8), color-stop(100%,#7abcff));
background: -webkit-linear-gradient(top, #4096ee 0%,#60abf8 56%,#7abcff
100%);
background: -o-linear-gradient(top, #4096ee 0%,#60abf8 56%,#7abcff 100%);
background: -ms-linear-gradient(top, #4096ee 0%,#60abf8 56%,#7abcff 100%);
background: linear-gradient(top, #4096ee 0%,#60abf8 56%,#7abcff 100%);
}
.ui-state-hover a, .ui-state-hover a:hover, .ui-state-hover a:link, .ui-state-hover
a:visited { color: #1d5987; text-decoration: none; }
.ui-state-active a, .ui-state-active a:link, .ui-state-active a:visited { color:
#e17009; text-decoration: none; }

/* Interaction Cues
----------------------------------*/
.ui-state-highlight, .ui-widget-content .ui-state-highlight, .ui-widget-header .ui-
state-highlight {border: 1px solid #fad42e; background: #fbec88 ; color:
#363636; }
.ui-state-highlight a, .ui-widget-content .ui-state-highlight a,.ui-widget-
header .ui-state-highlight a { color: #363636; }
.ui-state-error, .ui-widget-content .ui-state-error, .ui-widget-header .ui-state-
error {border: 1px solid #cd0a0a; background: #fef1ec ; color: #cd0a0a; }
.ui-state-error a, .ui-widget-content .ui-state-error a, .ui-widget-header .ui-
state-error a { color: #cd0a0a; }
.ui-state-error-text, .ui-widget-content .ui-state-error-text, .ui-widget-header
.ui-state-error-text { color: #cd0a0a; }
.ui-priority-primary, .ui-widget-content .ui-priority-primary, .ui-widget-header
.ui-priority-primary { font-weight: bold; }
.ui-priority-secondary, .ui-widget-content .ui-priority-secondary, .ui-widget-
header .ui-priority-secondary { opacity: .7; filter:Alpha(Opacity=70); font-weight:
normal; }
.ui-state-disabled, .ui-widget-content .ui-state-disabled, .ui-widget-header .ui-
state-disabled { opacity: .35; filter:Alpha(Opacity=35); background-image: none; }
.ui-state-disabled .ui-icon { filter:Alpha(Opacity=35); } /* For IE8 - See #6059 */

/* Icons
----------------------------------*/

/* states and images */


.ui-icon { display:none}

/* Misc visuals
----------------------------------*/

/* Corner radius */
.ui-corner-all, .ui-corner-top, .ui-corner-left, .ui-corner-tl { -moz-border-
radius-topleft: 5px; -webkit-border-top-left-radius: 5px; -khtml-border-top-left-
radius: 5px; border-top-left-radius: 5px; }
.ui-corner-all, .ui-corner-top, .ui-corner-right, .ui-corner-tr { -moz-border-
radius-topright: 5px; -webkit-border-top-right-radius: 5px; -khtml-border-top-
right-radius: 5px; border-top-right-radius: 5px; }
.ui-corner-all, .ui-corner-bottom, .ui-corner-left, .ui-corner-bl { -moz-border-
radius-bottomleft: 5px; -webkit-border-bottom-left-radius: 5px; -khtml-border-
bottom-left-radius: 5px; border-bottom-left-radius: 5px; }
.ui-corner-all, .ui-corner-bottom, .ui-corner-right, .ui-corner-br { -moz-border-
radius-bottomright: 5px; -webkit-border-bottom-right-radius: 5px; -khtml-border-
bottom-right-radius: 5px; border-bottom-right-radius: 5px; }

/* Overlays */
.ui-widget-overlay { background: #000000 ; opacity: .8;filter:Alpha(Opacity=80); }
.ui-widget-shadow { margin: -8px 0 0 -8px; padding: 8px; background: #000000 ;
opacity: .8;filter:Alpha(Opacity=80); -moz-border-radius: 8px; -khtml-border-
radius: 8px; -webkit-border-radius: 8px; border-radius: 8px; }

.ui-button {
font-family: Calibri,"Helvetica Neue",Helvetica,Arial,sans-serif;
font-size: 1.4rem;
display: inline-block;
padding: .5em 1em;
margin: 1em .25em;
color:#fff;
text-decoration: none;
background: #7abcff;
border: solid #ddd;
cursor: pointer;
border-radius: .25em;
transition: 0.3s linear all;
}

CSS;

callExtraFeature('onExtraHeadCSS');
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

function echoHeadJavascript()
{
?>
<script type="text/javascript" language="javascript">
var akeeba = {};

var akeeba_debug = <?php echo defined('KSDEBUG') ? 'true' : 'false'


?>;
var akeeba_pro = <?php echo KICKSTARTPRO ? 1 : 0 ?>;
var sftp_path = '<?php echo
TranslateWinPath(defined('KSROOTDIR') ? KSROOTDIR : dirname(__FILE__)); ?>/';
var akeeba_ajax_url = '<?php echo defined('KSSELFNAME') ? KSSELFNAME :
basename(__FILE__); ?>';
var default_temp_dir = '<?php echo
addcslashes(AKKickstartUtils::getPath(), '\\\'"') ?>';
var translation = {
<?php echoTranslationStrings(); ?>
};
var isJoomla = true;

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/*
* https://raw.githubusercontent.com/douglascrockford/JSON-js/master/json2.js
* 2016-05-01
* Public Domain.
* NO WARRANTY EXPRESSED OR IMPLIED. USE AT YOUR OWN RISK.
* See http://www.JSON.org/js.html
*/
// Create a JSON object only if one does not already exist. We create the
// methods in a closure to avoid creating global variables.

if (typeof JSON !== "object")


{
JSON = {};
}

(function ()
{
"use strict";

var rx_one = /^[\],:{}\s]*$/;


var rx_two = /\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g;
var rx_three = /"[^"\\\n\r]*"|true|false|null|-?\d+(?:\.\d*)?(?:[eE]
[+\-]?\d+)?/g;
var rx_four = /(?:^|:|,)(?:\s*\[)+/g;
var rx_escapable =
/[\\\"\u0000-\u001f\u007f-\u009f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\
u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g;
var rx_dangerous =
/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206
f\ufeff\ufff0-\uffff]/g;

function f(n)
{
// Format integers to have at least two digits.
return n < 10
? "0" + n
: n;
}

function this_value()
{
return this.valueOf();
}

if (typeof Date.prototype.toJSON !== "function")


{

Date.prototype.toJSON = function ()
{

return isFinite(this.valueOf())
? this.getUTCFullYear() + "-" +
f(this.getUTCMonth() + 1) + "-" +
f(this.getUTCDate()) + "T" +
f(this.getUTCHours()) + ":" +
f(this.getUTCMinutes()) + ":" +
f(this.getUTCSeconds()) + "Z"
: null;
};

Boolean.prototype.toJSON = this_value;
Number.prototype.toJSON = this_value;
String.prototype.toJSON = this_value;
}

var gap;
var indent;
var meta;
var rep;

function quote(string)
{

// If the string contains no control characters, no quote characters, and no


// backslash characters, then we can safely slap some quotes around it.
// Otherwise we must also replace the offending characters with safe escape
// sequences.

rx_escapable.lastIndex = 0;
return rx_escapable.test(string)
? "\"" + string.replace(rx_escapable, function (a)
{
var c = meta[a];
return typeof c === "string"
? c
: "\\u" + ("0000" + a.charCodeAt(0).toString(16)).slice(-
4);
}) + "\""
: "\"" + string + "\"";
}

function str(key, holder)


{

// Produce a string from holder[key].

var i; // The loop counter.


var k; // The member key.
var v; // The member value.
var length;
var mind = gap;
var partial;
var value = holder[key];

// If the value has a toJSON method, call it to obtain a replacement value.

if (value && typeof value === "object" &&


typeof value.toJSON === "function")
{
value = value.toJSON(key);
}
// If we were called with a replacer function, then call the replacer to
// obtain a replacement value.

if (typeof rep === "function")


{
value = rep.call(holder, key, value);
}

// What happens next depends on the value's type.

switch (typeof value)


{
case "string":
return quote(value);

case "number":

// JSON numbers must be finite. Encode non-finite numbers as null.

return isFinite(value)
? String(value)
: "null";

case "boolean":
case "null":

// If the value is a boolean or null, convert it to a string. Note:


// typeof null does not produce "null". The case is included here in
// the remote chance that this gets fixed someday.

return String(value);

// If the type is "object", we might be dealing with an object or an array or


// null.

case "object":

// Due to a specification blunder in ECMAScript, typeof null is "object",


// so watch out for that case.

if (!value)
{
return "null";
}

// Make an array to hold the partial results of stringifying this object value.

gap += indent;
partial = [];

// Is the value an array?

if (Object.prototype.toString.apply(value) === "[object


Array]")
{

// The value is an array. Stringify every element. Use null as a placeholder


// for non-JSON values.
length = value.length;
for (i = 0; i < length; i += 1)
{
partial[i] = str(i, value) || "null";
}

// Join all of the elements together, separated with commas, and wrap them in
// brackets.

v = partial.length === 0
? "[]"
: gap
? "[\n" + gap + partial.join(",\n" + gap)
+ "\n" + mind + "]"
: "[" + partial.join(",") + "]";
gap = mind;
return v;
}

// If the replacer is an array, use it to select the members to be stringified.

if (rep && typeof rep === "object")


{
length = rep.length;
for (i = 0; i < length; i += 1)
{
if (typeof rep[i] === "string")
{
k = rep[i];
v = str(k, value);
if (v)
{
partial.push(quote(k) + (
gap
? ": "
: ":"
) + v);
}
}
}
}
else
{

// Otherwise, iterate through all of the keys in the object.

for (k in value)
{
if (Object.prototype.hasOwnProperty.call(value,
k))
{
v = str(k, value);
if (v)
{
partial.push(quote(k) + (
gap
? ": "
: ":"
) + v);
}
}
}
}

// Join all of the member texts together, separated with commas,


// and wrap them in braces.

v = partial.length === 0
? "{}"
: gap
? "{\n" + gap + partial.join(",\n" + gap) +
"\n" + mind + "}"
: "{" + partial.join(",") + "}";
gap = mind;
return v;
}
}

// If the JSON object does not yet have a stringify method, give it one.

if (typeof JSON.stringify !== "function")


{
meta = { // table of character substitutions
"\b": "\\b",
"\t": "\\t",
"\n": "\\n",
"\f": "\\f",
"\r": "\\r",
"\"": "\\\"",
"\\": "\\\\"
};
JSON.stringify = function (value, replacer, space)
{

// The stringify method takes a value and an optional replacer, and an optional
// space parameter, and returns a JSON text. The replacer can be a function
// that can replace values, or an array of strings that will select the keys.
// A default replacer method can be provided. Use of the space parameter can
// produce text that is more easily readable.

var i;
gap = "";
indent = "";

// If the space parameter is a number, make an indent string containing that


// many spaces.

if (typeof space === "number")


{
for (i = 0; i < space; i += 1)
{
indent += " ";
}

// If the space parameter is a string, it will be used as the indent string.

}
else if (typeof space === "string")
{
indent = space;
}

// If there is a replacer, it must be a function or an array.


// Otherwise, throw an error.

rep = replacer;
if (replacer && typeof replacer !== "function" &&
(typeof replacer !== "object" ||
typeof replacer.length !== "number"))
{
throw new Error("JSON.stringify");
}

// Make a fake root object containing our value under the key of "".
// Return the result of stringifying the value.

return str("", {"": value});


};
}

// If the JSON object does not yet have a parse method, give it one.

if (typeof JSON.parse !== "function")


{
JSON.parse = function (text, reviver)
{

// The parse method takes a text and an optional reviver function, and returns
// a JavaScript value if the text is a valid JSON text.

var j;

function walk(holder, key)


{

// The walk method is used to recursively walk the resulting structure so


// that modifications can be made.

var k;
var v;
var value = holder[key];
if (value && typeof value === "object")
{
for (k in value)
{
if (Object.prototype.hasOwnProperty.call(value,
k))
{
v = walk(value, k);
if (v !== undefined)
{
value[k] = v;
}
else
{
delete value[k];
}
}
}
}
return reviver.call(holder, key, value);
}

// Parsing happens in four stages. In the first stage, we replace certain


// Unicode characters with escape sequences. JavaScript handles many characters
// incorrectly, either silently deleting them, or treating them as line endings.

text = String(text);
rx_dangerous.lastIndex = 0;
if (rx_dangerous.test(text))
{
text = text.replace(rx_dangerous, function (a)
{
return "\\u" +
("0000" + a.charCodeAt(0).toString(16)).slice(-
4);
});
}

// In the second stage, we run the text against regular expressions that look
// for non-JSON patterns. We are especially concerned with "()" and "new"
// because they can cause invocation, and "=" because it can cause mutation.
// But just to be safe, we want to reject all unexpected forms.

// We split the second stage into 4 regexp operations in order to work around
// crippling inefficiencies in IE's and Safari's regexp engines. First we
// replace the JSON backslash pairs with "@" (a non-JSON character). Second, we
// replace all simple value tokens with "]" characters. Third, we delete all
// open brackets that follow a colon or comma or that begin the text. Finally,
// we look to see that the remaining characters are only whitespace or "]" or
// "," or ":" or "{" or "}". If that is so, then the text is safe for eval.

if (
rx_one.test(
text
.replace(rx_two, "@")
.replace(rx_three, "]")
.replace(rx_four, "")
)
)
{

// In the third stage we use the eval function to compile the text into a
// JavaScript structure. The "{" operator is subject to a syntactic ambiguity
// in JavaScript: it can begin a block or an object literal. We wrap the text
// in parens to eliminate the ambiguity.

j = eval("(" + text + ")");

// In the optional fourth stage, we recursively walk the new structure, passing
// each name/value pair to a reviver function for possible transformation.

return (typeof reviver === "function")


? walk({"": j}, "")
: j;
}

// If the text is not JSON parseable, then a SyntaxError is thrown.

throw new SyntaxError("JSON.parse");


};
}
}());

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Returns the version of Internet Explorer or a -1
* (indicating the use of another browser).
*
* @return integer MSIE version or -1
*/
function getInternetExplorerVersion()
{
var rv = -1; // Return value assumes failure.
if (navigator.appName == "Microsoft Internet Explorer")
{
var ua = navigator.userAgent;
var re = new RegExp("MSIE ([0-9]{1,}[\.0-9]{0,})");
if (re.exec(ua) != null)
{
rv = parseFloat(RegExp.$1);
}
}
return rv;
}

function resolvePath(filename)
{
filename = filename.replace("\/\/g", "\/");
var parts = filename.split("/");
var out = [];

for (var i = 0; i < parts.length; i++)


{
var part = parts[i];

if (part === ".")


{
continue;
}

if (part === "..")


{
out.pop();
continue;
}

out.push(part);
}

return out.join("/");
}

/*
* Courtesy of PHPjs -- http://phpjs.org
* @license GPL, version 2
*/

function version_compare(v1, v2, operator)


{
// BEGIN REDUNDANT
this.php_js = this.php_js || {};
this.php_js.ENV = this.php_js.ENV || {};
// END REDUNDANT
// Important: compare must be initialized at 0.
var i = 0,
x = 0,
compare = 0,
// vm maps textual PHP versions to negatives so they're less than 0.
// PHP currently defines these as CASE-SENSITIVE. It is important to
// leave these as negatives so that they can come before numerical
versions
// and as if no letters were there to begin with.
// (1alpha is < 1 and < 1.1 but > 1dev1)
// If a non-numerical value can't be mapped to this table, it receives
// -7 as its value.
vm = {
'dev': -6,
'alpha': -5,
'a': -5,
'beta': -4,
'b': -4,
'RC': -3,
'rc': -3,
'#': -2,
'p': -1,
'pl': -1
},
// This function will be called to prepare each version argument.
// It replaces every _, -, and + with a dot.
// It surrounds any nonsequence of numbers/dots with dots.
// It replaces sequences of dots with a single dot.
// version_compare('4..0', '4.0') == 0
// Important: A string of 0 length needs to be converted into a value
// even less than an unexisting value in vm (-7), hence [-8].
// It's also important to not strip spaces because of this.
// version_compare('', ' ') == 1
prepVersion = function (v)
{
v = ('' + v).replace(/[_\-+]/g, '.');
v = v.replace(/([^.\d]+)/g, '.$1.').replace(/\.{2,}/g, '.');
return (!v.length ? [-8] : v.split('.'));
},
// This converts a version component to a number.
// Empty component becomes 0.
// Non-numerical component becomes a negative number.
// Numerical component becomes itself as an integer.
numVersion = function (v)
{
return !v ? 0 : (isNaN(v) ? vm[v] || -7 : parseInt(v, 10));
};
v1 = prepVersion(v1);
v2 = prepVersion(v2);
x = Math.max(v1.length, v2.length);
for (i = 0; i < x; i++)
{
if (v1[i] == v2[i])
{
continue;
}
v1[i] = numVersion(v1[i]);
v2[i] = numVersion(v2[i]);
if (v1[i] < v2[i])
{
compare = -1;
break;
}
else if (v1[i] > v2[i])
{
compare = 1;
break;
}
}
if (!operator)
{
return compare;
}

// Important: operator is CASE-SENSITIVE.


// "No operator" seems to be treated as less than
// Any other values seem to make the function return null.
switch (operator)
{
case '>':
case 'gt':
return (compare > 0);
case '>=':
case 'ge':
return (compare >= 0);
case '<=':
case 'le':
return (compare <= 0);
case '==':
case '=':
case 'eq':
return (compare === 0);
case '<>':
case '!=':
case 'ne':
return (compare !== 0);
case '':
case '<':
case 'lt':
return (compare < 0);
default:
return null;
}
}

function is_array(mixed_var)
{
var key = "";
var getFuncName = function (fn)
{
var name = (/\W*function\s+([\w\$]+)\s*\(/).exec(fn);
if (!name)
{
return "(Anonymous)";
}
return name[1];
};

if (!mixed_var)
{
return false;
}

// BEGIN REDUNDANT
this.php_js = this.php_js || {};
this.php_js.ini = this.php_js.ini || {};
// END REDUNDANT

if (typeof mixed_var === "object")


{

if (this.php_js.ini["phpjs.objectsAsArrays"] && // Strict checking for


being a JavaScript array (only check this way if
// call
ini_set('phpjs.objectsAsArrays', 0) to disallow objects as arrays)
(

(this.php_js.ini["phpjs.objectsAsArrays"].local_value.toLowerCase &&

this.php_js.ini["phpjs.objectsAsArrays"].local_value.toLowerCase() === "off")


||

parseInt(this.php_js.ini["phpjs.objectsAsArrays"].local_value, 10) === 0)


)
{
return mixed_var.hasOwnProperty("length") && // Not non-
enumerable because of being on parent class
!mixed_var.propertyIsEnumerable("length") && // Since is
own property, if not enumerable, it must be a

// built-in function
getFuncName(mixed_var.constructor) !== "String"; // exclude
String()
}

if (mixed_var.hasOwnProperty)
{
for (key in mixed_var)
{
// Checks whether the object has the specified property
// if not, we figure it's not an object in the sense of a
php-associative-array.
if (false === mixed_var.hasOwnProperty(key))
{
return false;
}
}
}

// Read discussion at:


http://kevin.vanzonneveld.net/techblog/article/javascript_equivalent_for_phps_is_ar
ray/
return true;
}

return false;
}

function array_key_exists(key, search)


{
if (!search || (search.constructor !== Array && search.constructor !==
Object))
{
return false;
}
return key in search;
}

function basename(path, suffix)


{
var b = path.replace(/^.*[\/\\]/g, "");
if (typeof(suffix) == "string" && b.substr(b.length - suffix.length) ==
suffix)
{
b = b.substr(0, b.length - suffix.length);
}
return b;
}

function number_format(number, decimals, dec_point, thousands_sep)


{
var n = number, c = isNaN(decimals = Math.abs(decimals)) ? 2 : decimals;
var d = dec_point == undefined ? "," : dec_point;
var t = thousands_sep == undefined ? "." : thousands_sep, s = n < 0 ? "-" :
"";
var i = parseInt(n = Math.abs(+n || 0).toFixed(c)) + "", j = (j = i.length) >
3 ? j % 3 : 0;

return s + (j ? i.substr(0, j) + t : "") + i.substr(j)


.replace(/(\d{3})(?=\d)/g, "$1" + t) + (c ? d + Math.abs(n -
i).toFixed(c).slice(2) : "");
}

function size_format(filesize)
{
if (filesize >= 1073741824)
{
filesize = number_format(filesize / 1073741824, 2, ".", "") + " GB";
}
else
{
if (filesize >= 1048576)
{
filesize = number_format(filesize / 1048576, 2, ".", "") + " MB";
}
else
{
filesize = number_format(filesize / 1024, 2, ".", "") + " KB";
}
}
return filesize;
}

/**
* Checks if a variable is empty. From the php.js library.
*/
function empty(mixed_var)
{
var key;

if (mixed_var === "" ||


mixed_var === 0 ||
mixed_var === "0" ||
mixed_var === null ||
mixed_var === false ||
typeof mixed_var === "undefined"
)
{
return true;
}

if (typeof mixed_var == "object")


{
for (key in mixed_var)
{
return false;
}
return true;
}

return false;
}

function ltrim(str, charlist)


{
// Strips whitespace from the beginning of a string
//
// version: 1008.1718
// discuss at: http://phpjs.org/functions/ltrim // + original by: Kevin
van Zonneveld
// (http://kevin.vanzonneveld.net) + input by: Erkekjetter + improved
by: Kevin van Zonneveld
// (http://kevin.vanzonneveld.net) + bugfixed by: Onno Marsman *
example 1: ltrim(' Kevin van Zonneveld
// '); // * returns 1: 'Kevin van Zonneveld '
charlist = !charlist ? " \\s\u00A0" : (charlist + "").replace(/([\[\]\
(\)\.\?\/\*\{\}\+\$\^\:])/g, "$1");
var re = new RegExp("^[" + charlist + "]+", "g");
return (str + "").replace(re, "");
}

function array_shift(inputArr)
{
// http://kevin.vanzonneveld.net
// + original by: Kevin van Zonneveld (http://kevin.vanzonneveld.net)
// + improved by: Martijn Wieringa
// % note 1: Currently does not handle objects
// * example 1: array_shift(['Kevin', 'van', 'Zonneveld']);
// * returns 1: 'Kevin'

var props = false,


shift = undefined, pr = "", allDigits = /^\d$/, int_ct = -1,
_checkToUpIndices = function (arr,
ct, key)
{
// Deal with situation, e.g., if encounter index 4 and try to set
it to 0, but 0 exists later in loop (need
// to increment all subsequent (skipping current key, since we
need its value below) until find unused)
if (arr[ct] !== undefined)
{
var tmp = ct;
ct += 1;
if (ct === key)
{
ct += 1;
}
ct = _checkToUpIndices(arr, ct, key);
arr[ct] = arr[tmp];
delete arr[tmp];
}
return ct;
};

if (inputArr.length === 0)
{
return null;
}
if (inputArr.length > 0)
{
return inputArr.shift();
}
}

function trim(str, charlist)


{
var whitespace, l = 0, i = 0;
str += "";

if (!charlist)
{
// default list
whitespace =
"
\n\r\t\f\x0b\xa0\u2000\u2001\u2002\u2003\u2004\u2005\u2006\u2007\u2008\u2009\u200a\
u200b\u2028\u2029\u3000";
}
else
{
// preg_quote custom list
charlist += "";
whitespace = charlist.replace(/([\[\]\(\)\.\?\/\*\{\}\+\$\^\:])/g,
"$1");
}

l = str.length;
for (i = 0; i < l; i++)
{
if (whitespace.indexOf(str.charAt(i)) === -1)
{
str = str.substring(i);
break;
}
}

l = str.length;
for (i = l - 1; i >= 0; i--)
{
if (whitespace.indexOf(str.charAt(i)) === -1)
{
str = str.substring(0, i + 1);
break;
}
}

return whitespace.indexOf(str.charAt(0)) === -1 ? str : "";


}

function array_merge()
{
// Merges elements from passed arrays into one array
//
// version: 1103.1210
// discuss at: http://phpjs.org/functions/array_merge
// + original by: Brett Zamir (http://brett-zamir.me)
// + bugfixed by: Nate
// + input by: josh
// + bugfixed by: Brett Zamir (http://brett-zamir.me)
// * example 1: arr1 = {"color": "red", 0: 2, 1: 4}
// * example 1: arr2 = {0: "a", 1: "b", "color": "green", "shape":
"trapezoid", 2: 4}
// * example 1: array_merge(arr1, arr2)
// * returns 1: {"color": "green", 0: 2, 1: 4, 2: "a", 3: "b", "shape":
"trapezoid", 4: 4}
// * example 2: arr1 = []
// * example 2: arr2 = {1: "data"}
// * example 2: array_merge(arr1, arr2)
// * returns 2: {0: "data"}
var args = Array.prototype.slice.call(arguments),
retObj = {},
k, j = 0,
i = 0,
retArr = true;

for (i = 0; i < args.length; i++)


{
if (!(args[i] instanceof Array))
{
retArr = false;
break;
}
}

if (retArr)
{
retArr = [];
for (i = 0; i < args.length; i++)
{
retArr = retArr.concat(args[i]);
}
return retArr;
}
var ct = 0;

for (i = 0, ct = 0; i < args.length; i++)


{
if (args[i] instanceof Array)
{
for (j = 0; j < args[i].length; j++)
{
retObj[ct++] = args[i][j];
}
}
else
{
for (k in args[i])
{
if (args[i].hasOwnProperty(k))
{
if (parseInt(k, 10) + "" === k)
{
retObj[ct++] = args[i][k];
}
else
{
retObj[k] = args[i][k];
}
}
}
}
}
return retObj;
}

function array_diff(arr1)
{ // eslint-disable-line camelcase
// discuss at: http://locutus.io/php/array_diff/
// original by: Kevin van Zonneveld (http://kvz.io)
// improved by: Sanjoy Roy
// revised by: Brett Zamir (http://brett-zamir.me)
// example 1: array_diff(['Kevin', 'van', 'Zonneveld'], ['van',
'Zonneveld'])
// returns 1: {0:'Kevin'}

var retArr = {};


var argl = arguments.length;
var k1 = "";
var i = 1;
var k = "";
var arr = {};

arr1keys: for (k1 in arr1)


{
for (i = 1; i < argl; i++)
{
arr = arguments[i];
for (k in arr)
{
if (arr[k] === arr1[k1])
{
// If it reaches here, it was found in at least one
array, so try next value
continue arr1keys;
}
}
retArr[k1] = arr1[k1];
}
}

return retArr;
}

//=============================================================================
// Object.keys polyfill
//=============================================================================

// From https://developer.mozilla.org/en-
US/docs/Web/JavaScript/Reference/Global_Objects/Object/keys
if (!Object.keys)
{
Object.keys = (function () {
"use strict";
var hasOwnProperty = Object.prototype.hasOwnProperty,
hasDontEnumBug = !({toString:
null}).propertyIsEnumerable("toString"),
dontEnums = [
"toString",
"toLocaleString",
"valueOf",
"hasOwnProperty",
"isPrototypeOf",
"propertyIsEnumerable",
"constructor"
],
dontEnumsLength = dontEnums.length;

return function (obj) {


if (typeof obj !== "object" && (typeof obj !== "function" || obj
=== null))
{
throw new TypeError("Object.keys called on non-object");
}

var result = [], prop, i;

for (prop in obj)


{
if (hasOwnProperty.call(obj, prop))
{
result.push(prop);
}
}

if (hasDontEnumBug)
{
for (i = 0; i < dontEnumsLength; i++)
{
if (hasOwnProperty.call(obj, dontEnums[i]))
{
result.push(dontEnums[i]);
}
}
}
return result;
};
}());
}

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

akeeba.System = {};

akeeba.System.documentReady = function (callback, context)


{
};

akeeba.System.notification = {
hasDesktopNotification: false,
iconURL: ''
};
akeeba.System.params = {
AjaxURL: '',
errorCallback: onGenericError,
password: '',
errorDialogId: 'errorDialog',
errorDialogMessageId: 'errorDialogPre'
};

/**
* An extremely simple error handler, dumping error messages to screen
*
* @param error The error message string
*/
akeeba.System.defaultErrorHandler = function (error)
{
alert("An error has occurred\n" + error);
};

akeeba.System.params.errorCallback = onGenericError;

/**
* Performs an AJAX request and returns the parsed JSON output.
* akeeba.System.params.AjaxURL is used as the AJAX proxy URL.
* If there is no errorCallback, the global akeeba.System.params.errorCallback is
used.
*
* @param data An object with the query data, e.g. a serialized form
* @param successCallback A function accepting a single object parameter, called
on success
* @param errorCallback A function accepting a single string parameter, called
on failure
* @param useCaching Should we use the cache?
* @param timeout Timeout before cancelling the request (default 60s)
*/
akeeba.System.doAjax = function (data, successCallback, errorCallback, useCaching,
timeout)
{
if (useCaching == null)
{
useCaching = true;
}

// We always want to burst the cache


var now = new Date().getTime() / 1000;
var s = parseInt(now, 10);
data._cacheBustingJunk = Math.round((now - s) * 1000) / 1000;

if (timeout == null)
{
timeout = 600000;
}

var structure =
{
type: "POST",
url: akeeba.System.params.AjaxURL,
cache: false,
data: data,
timeout: timeout,
success: function (msg)
{
// Initialize
var message = "";

// Get rid of junk before the data


var valid_pos = msg.indexOf('###');

if (valid_pos === -1)


{
// Valid data not found in the response
msg = akeeba.System.sanitizeErrorMessage(msg);
msg = 'Invalid AJAX data: ' + msg;

if (errorCallback == null)
{
if (akeeba.System.params.errorCallback !=
null)
{

akeeba.System.params.errorCallback(msg);
}
}
else
{
errorCallback(msg);
}

return;
}
else if (valid_pos !== 0)
{
// Data is prefixed with junk
message = msg.substr(valid_pos);
}
else
{
message = msg;
}

message = message.substr(3); // Remove triple hash in


the beginning

// Get of rid of junk after the data


valid_pos = message.lastIndexOf('###');
message = message.substr(0, valid_pos); // Remove
triple hash in the end

try
{
var data = JSON.parse(message);
}
catch (err)
{
message =
akeeba.System.sanitizeErrorMessage(message);
msg = err.message + "\n<br/>\n<pre>\n" +
message + "\n</pre>";

if (errorCallback == null)
{
if (akeeba.System.params.errorCallback !=
null)
{

akeeba.System.params.errorCallback(msg);
}
}
else
{
errorCallback(msg);
}

return;
}

// Call the callback function


successCallback(data);
},
error: function (Request, textStatus, errorThrown)
{
var text = Request.responseText ?
Request.responseText : '';
var message = '<strong>AJAX Loading
Error</strong><br/>HTTP Status: ' + Request.status +
' (' + Request.statusText + ')<br/>';

message = message + 'Internal status: ' + textStatus


+ '<br/>';
message = message + 'XHR ReadyState: ' +
Request.readyState + '<br/>';
message = message + 'Raw server response:<br/>' +
akeeba.System.sanitizeErrorMessage(text);

if (errorCallback == null)
{
if (akeeba.System.params.errorCallback != null)
{

akeeba.System.params.errorCallback(message);
}
}
else
{
errorCallback(message);
}
}
};

if (useCaching)
{
akeeba.Ajax.enqueue(structure);
}
else
{
akeeba.Ajax.ajax(structure);
}
};

/**
* Sanitize a message before displaying it in an error dialog. Some servers return
an HTML page with DOM modifying
* JavaScript when they block the backup script for any reason (usually with a 5xx
HTTP error code). Displaying the
* raw response in the error dialog has the side-effect of killing our backup
resumption JavaScript or even completely
* destroy the page, making backup restart impossible.
*
* @param {string} msg The message to sanitize
*
* @returns {string}
*/
akeeba.System.sanitizeErrorMessage = function (msg)
{
if (msg.indexOf("<script") > -1)
{
msg = "(HTML containing script tags)";
}

return msg;
};

/**
* Get and set data to elements. Use:
* akeeba.System.data.set(element, property, value)
* akeeba.System.data.get(element, property, defaultValue)
*
* On modern browsers (minimum IE 11, Chrome 8, FF 6, Opera 11, Safari 6) this will
use the data-* attributes of the
* elements where possible. On old browsers it will use an internal cache and
manually apply data-* attributes.
*/
akeeba.System.data = (function ()
{
var lastId = 0,
store = {};

return {
set: function (element, property, value)
{
// IE 11, modern browsers
if (element.dataset)
{
element.dataset[property] = value;

if (value == null)
{
delete element.dataset[property];
}

return;
}

// IE 8 to 10, old browsers


var id;

if (element.myCustomDataTag === undefined)


{
id = lastId++;
element.myCustomDataTag = id;
}

if (typeof(store[id]) === 'undefined')


{
store[id] = {};
}

// Store the value in the internal cache...


store[id][property] = value;

// ...and the DOM

// Convert the property to dash-format


var dataAttributeName = 'data-' + property.split(/(?=[A-
Z])/).join('-').toLowerCase();

if (element.setAttribute)
{
element.setAttribute(dataAttributeName, value);
}

if (value == null)
{
// IE 8 throws an exception on "delete"
try
{
delete store[id][property];
element.removeAttribute(dataAttributeName);
}
catch (e)
{
store[id][property] = null;
}
}
},

get: function (element, property, defaultValue)


{
// IE 11, modern browsers
if (element.dataset)
{
if (typeof(element.dataset[property]) === 'undefined')
{
element.dataset[property] = defaultValue;
}

return element.dataset[property];
}
// IE 8 to 10, old browsers

if (typeof(defaultValue) === 'undefined')


{
defaultValue = null;
}

// Make sure we have an internal storage


if (typeof(store[element.myCustomDataTag]) === 'undefined')
{
store[element.myCustomDataTag] = {};
}

// Convert the property to dash-format


var dataAttributeName = 'data-' + property.split(/(?=[A-
Z])/).join('-').toLowerCase();

// data-* attributes have precedence


if (typeof(element[dataAttributeName]) !== 'undefined')
{
store[element.myCustomDataTag][property] =
element[dataAttributeName];
}

// No data-* attribute and no stored value? Use the default.


if (typeof(store[element.myCustomDataTag][property]) ===
'undefined')
{
this.set(element, property, defaultValue);
}

// Return the value of the data


return store[element.myCustomDataTag][property];
}
};
}());

/**
* Adds an event listener to an element
*
* @param element
* @param eventName
* @param listener
*/
akeeba.System.addEventListener = function (element, eventName, listener)
{
// Allow the passing of an element ID string instead of the DOM elem
if (typeof element === "string")
{
element = document.getElementById(element);
}

if (element == null)
{
return;
}

if (typeof element !== 'object')


{
return;
}

// Handles the listener in a way that returning boolean false will cancel the
event propagation
function listenHandler(e)
{
var ret = listener.apply(this, arguments);

if (ret === false)


{
if (e.stopPropagation())
{
e.stopPropagation();
}

if (e.preventDefault)
{
e.preventDefault();
}
else
{
e.returnValue = false;
}
}

return (ret);
}

// Equivalent of listenHandler for IE8


function attachHandler()
{
// Normalize the target of the event –– PhpStorm detects this as an
error
// window.event.target = window.event.srcElement;

var ret = listener.call(element, window.event);

if (ret === false)


{
window.event.returnValue = false;
window.event.cancelBubble = true;
}

return (ret);
}

if (element.addEventListener)
{
element.addEventListener(eventName, listenHandler, false);

return;
}

element.attachEvent("on" + eventName, attachHandler);


};

/**
* Remove an event listener from an element
*
* @param element
* @param eventName
* @param listener
*/
akeeba.System.removeEventListener = function (element, eventName, listener)
{
// Allow the passing of an element ID string instead of the DOM elem
if (typeof element === "string")
{
element = document.getElementById(element);
}

if (element == null)
{
return;
}

if (typeof element !== 'object')


{
return;
}

if (element.removeEventListener)
{
element.removeEventListener(eventName, listener);

return;
}

element.detachEvent("on" + eventName, listener);


};

akeeba.System.triggerEvent = function (element, eventName)


{
if (typeof element === 'undefined')
{
return;
}

if (element === null)


{
return;
}

// Allow the passing of an element ID string instead of the DOM elem


if (typeof element === "string")
{
element = document.getElementById(element);
}

if (typeof element !== 'object')


{
return;
}

if (!(element instanceof Element))


{
return;
}

// Use jQuery and be done with it!


if (typeof window.jQuery === 'function')
{
window.jQuery(element).trigger(eventName);

return;
}

// Internet Explorer way


if (document.fireEvent && (typeof window.Event === 'undefined'))
{
element.fireEvent('on' + eventName);

return;
}

// This works on Chrome and Edge but not on Firefox. Ugh.


var event = document.createEvent("Event");
event.initEvent(eventName, true, true);
element.dispatchEvent(event);
};

// document.ready equivalent from


https://github.com/jfriend00/docReady/blob/master/docready.js
(function (funcName, baseObj)
{
funcName = funcName || "documentReady";
baseObj = baseObj || akeeba.System;

var readyList = [];


var readyFired = false;
var readyEventHandlersInstalled = false;

// Call this when the document is ready. This function protects itself
against being called more than once.
function ready()
{
if (!readyFired)
{
// This must be set to true before we start calling callbacks
readyFired = true;

for (var i = 0; i < readyList.length; i++)


{
/**
* If a callback here happens to add new ready handlers,
this function will see that it already
* fired and will schedule the callback to run right after
this event loop finishes so all handlers
* will still execute in order and no new ones will be
added to the readyList while we are
* processing the list.
*/
readyList[i].fn.call(window, readyList[i].ctx);
}

// Allow any closures held by these functions to free


readyList = [];
}
}

/**
* Solely for the benefit of Internet Explorer
*/
function readyStateChange()
{
if (document.readyState === "complete")
{
ready();
}
}

/**
* This is the one public interface:
*
* akeeba.System.documentReady(fn, context);
*
* @param callback The callback function to execute when the document is
ready.
* @param context Optional. If present, it will be passed as an argument
to the callback.
*/
//
//
//
baseObj[funcName] = function (callback, context)
{
// If ready() has already fired, then just schedule the callback to
fire asynchronously
if (readyFired)
{
setTimeout(function ()
{
callback(context);
}, 1);

return;
}

// Add the function and context to the queue


readyList.push({fn: callback, ctx: context});

/**
* If the document is already ready, schedule the ready() function to
run immediately.
*
* Note: IE is only safe when the readyState is "complete", other
browsers are safe when the readyState is
* "interactive"
*/
if (document.readyState === "complete" || (!document.attachEvent &&
document.readyState === "interactive"))
{
setTimeout(ready, 1);

return;
}

// If the handlers are already installed just quit


if (readyEventHandlersInstalled)
{
return;
}

// We don't have event handlers installed, install them


readyEventHandlersInstalled = true;

// -- We have an addEventListener method in the document, this is a


modern browser.

if (document.addEventListener)
{
// Prefer using the DOMContentLoaded event
document.addEventListener("DOMContentLoaded", ready, false);
// Our backup is the window's "load" event
window.addEventListener("load", ready, false);

return;
}

// -- Most likely we're stuck with an ancient version of IE

// Our primary method of activation is the onreadystatechange event


document.attachEvent("onreadystatechange", readyStateChange);

// Our backup is the windows's "load" event


window.attachEvent("onload", ready);
}
})("documentReady", akeeba.System);

akeeba.System.addClass = function (element, newClasses)


{
if (!element || !element.className)
{
return;
}

var currentClasses = element.className.split(' ');

if ((typeof newClasses) === 'string')


{
newClasses = newClasses.split(' ');
}

currentClasses = array_merge(currentClasses, newClasses);

element.className = '';

for (property in currentClasses)


{
if (currentClasses.hasOwnProperty(property))
{
element.className += currentClasses[property] + ' ';
}
}

if (element.className.trim)
{
element.className = element.className.trim();
}
};

akeeba.System.removeClass = function (element, oldClasses)


{
if (!element || !element.className)
{
return;
}

var currentClasses = element.className.split(' ');

if ((typeof oldClasses) === 'string')


{
oldClasses = oldClasses.split(' ');
}

currentClasses = array_diff(currentClasses, oldClasses);

element.className = '';

for (property in currentClasses)


{
if (currentClasses.hasOwnProperty(property))
{
element.className += currentClasses[property] + ' ';
}
}

if (element.className.trim)
{
element.className = element.className.trim();
}
};

akeeba.System.hasClass = function (element, aClass)


{
if (!element || !element.className)
{
return;
}

var currentClasses = element.className.split(' ');

for (i = 0; i < currentClasses.length; i++)


{
if (currentClasses[i] === aClass)
{
return true;
}
}

return false;
};

akeeba.System.toggleClass = function(element, aClass)


{
if (akeeba.System.hasClass(element, aClass))
{
akeeba.System.removeClass(element, aClass);

return;
}

akeeba.System.addClass(element, aClass);
};

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* An AJAX abstraction layer for use with Akeeba software
*/
akeeba.Ajax = {
// Maps nonsense HTTP status codes to what should actually be returned
xhrSuccessStatus: {
// File protocol always yields status code 0, assume 200
0: 200,
// Support: IE <=9 only. Sometimes IE returns 1223 when it should be
204
1223: 204
},
// Used for chained AJAX: each request will be launched once the previous one
is done (successfully or not)
requestArray: [],
processingQueue: false
};

/**
* Performs an asynchronous AJAX request. Mostly compatible with jQuery 1.5+
calling conventions, or at least the
* subset
* of the features we used in our software.
*
* The parameters can be
* method string HTTP method (GET, POST, PUT, ...). Default: POST.
* url string URL to access over AJAX. Required.
* timeout int Request timeout in msec. Default: 600,000 (ten minutes)
* data object Data to send to the AJAX URL. Default: empty
* success function function(string responseText, string responseStatus,
XMLHttpRequest xhr)
* error function function(XMLHttpRequest xhr, string errorType,
Exception e)
* beforeSend function function(XMLHttpRequest xhr, object parameters) You
can modify xhr, not parameters. Return
* false to abort the request.
*
* @param url {string} URL to send the AJAX request to
* @param parameters {object} Configuration parameters
*/
akeeba.Ajax.ajax = function (url, parameters)
{
// Handles jQuery 1.0 calling style of .ajax(parameters), passing the URL as
a property of the parameters object
if (typeof(parameters) === "undefined")
{
parameters = url;
url = parameters.url;
}

// Get the parameters I will use throughout


var method = (typeof(parameters.type) === "undefined") ? "POST" :
parameters.type;
method = method.toUpperCase();
var data = (typeof(parameters.data) === "undefined") ? {} :
parameters.data;
var sendData = null;
var successCallback = (typeof(parameters.success) === "undefined") ? null :
parameters.success;
var errorCallback = (typeof(parameters.error) === "undefined") ? null :
parameters.error;

// === Cache busting


var cache = (typeof(parameters.cache) === "undefined") ? false :
parameters.url;

if (!cache)
{
var now = new Date().getTime() / 1000;
var s = parseInt(now, 10);
data._cacheBustingJunk = Math.round((now - s) * 1000) / 1000;
}

// === Interpolate the data


if ((method === "POST") || (method === "PUT"))
{
sendData = this.interpolateParameters(data);
}
else
{
url += url.indexOf("?") === -1 ? "?" : "&";
url += this.interpolateParameters(data);
}

// === Get the XHR object


var xhr = new XMLHttpRequest();
xhr.open(method, url);

// === Handle POST / PUT data


if ((method === "POST") || (method === "PUT"))
{
xhr.setRequestHeader("Content-Type", "application/x-www-form-
urlencoded");
}

// --- Set the load handler


xhr.onload = function (event)
{
var status = akeeba.Ajax.xhrSuccessStatus[xhr.status] ||
xhr.status;
var statusText = xhr.statusText;
var isBinaryResult = (xhr.responseType || "text") !== "text" || typeof
xhr.responseText !== "string";
var responseText = isBinaryResult ? xhr.response : xhr.responseText;
var headers = xhr.getAllResponseHeaders();

if (status === 200)


{
if (successCallback != null)
{
akeeba.Ajax.triggerCallbacks(successCallback, responseText,
statusText, xhr);
}
return;
}

if (errorCallback)
{
akeeba.Ajax.triggerCallbacks(errorCallback, xhr, "error", null);
}
};

// --- Set the error handler


xhr.onerror = function (event)
{
if (errorCallback)
{
akeeba.Ajax.triggerCallbacks(errorCallback, xhr, "error", null);
}
};

// IE 8 is a pain the butt


if (window.attachEvent && !window.addEventListener)
{
xhr.onreadystatechange = function ()
{
if (this.readyState === 4)
{
var status = akeeba.Ajax.xhrSuccessStatus[this.status] ||
this.status;

if (status >= 200 && status < 400)


{
// Success!
xhr.onload();
}
else
{
xhr.onerror();
}
}
};
}

// --- Set the timeout handler


xhr.ontimeout = function ()
{
if (errorCallback)
{
akeeba.Ajax.triggerCallbacks(errorCallback, xhr, "timeout",
null);
}
};

// --- Set the abort handler


xhr.onabort = function ()
{
if (errorCallback)
{
akeeba.Ajax.triggerCallbacks(errorCallback, xhr, "abort", null);
}
};
// --- Apply the timeout before running the request
var timeout = (typeof(parameters.timeout) === "undefined") ? 600000 :
parameters.timeout;

if (timeout > 0)
{
xhr.timeout = timeout;
}

// --- Call the beforeSend event handler. If it returns false the request is
canceled.
if (typeof(parameters.beforeSend) !== "undefined")
{
if (parameters.beforeSend(xhr, parameters) === false)
{
return;
}
}

xhr.send(sendData);
};

/**
* Adds an AJAX request to the request queue and begins processing the queue if
it's not already started. The request
* queue is a FIFO buffer. Each request will be executed as soon as the one
preceeding it has completed processing
* (successfully or otherwise).
*
* It's the same syntax as .ajax() with the difference that the request is queued
instead of executed right away.
*
* @param url {string} The URL to send the request to
* @param parameters {object} Configuration parameters
*/
akeeba.Ajax.enqueue = function (url, parameters)
{
// Handles jQuery 1.0 calling style of .ajax(parameters), passing the URL as
a property of the parameters object
if (typeof(parameters) === "undefined")
{
parameters = url;
url = parameters.url;
}

parameters.url = url;
akeeba.Ajax.requestArray.push(parameters);

akeeba.Ajax.processQueue();
};

/**
* Converts a simple object containing query string parameters to a single, escaped
query string
*
* @param object {object} A plain object containing the query parameters to
pass
* @param prefix {string} Prefix for array-type parameters
*
* @returns {string}
*
* @access private
*/
akeeba.Ajax.interpolateParameters = function (object, prefix)
{
prefix = prefix || "";
var encodedString = "";

for (var prop in object)


{
if (object.hasOwnProperty(prop))
{
if (encodedString.length > 0)
{
encodedString += "&";
}

if (typeof object[prop] !== "object")


{
if (prefix === "")
{
encodedString += encodeURIComponent(prop) + "=" +
encodeURIComponent(object[prop]);
}
else
{
encodedString += encodeURIComponent(prefix) + "[" +
encodeURIComponent(prop) + "]=" + encodeURIComponent(object[prop]);
}

continue;
}

// Objects need special handling


encodedString += akeeba.Ajax.interpolateParameters(object[prop],
prop);
}
}
return encodedString;
};

/**
* Goes through a list of callbacks and calls them in succession. Accepts a
variable number of arguments.
*/
akeeba.Ajax.triggerCallbacks = function ()
{
// converts arguments to real array
var args = Array.prototype.slice.call(arguments);
var callbackList = args.shift();

if (typeof(callbackList) === "function")


{
return callbackList.apply(null, args);
}

if (callbackList instanceof Array)


{
for (var i = 0; i < callbackList.length; i++)
{
var callBack = callbackList[i];

if (callBack.apply(null, args) === false)


{
return false;
}
}
}

return null;
};

/**
* This helper function triggers the request queue processing using a short (50
msec) timer. This prevents a long
* function nesting which could cause some browser to abort processing.
*
* @access private
*/
akeeba.Ajax.processQueueHelper = function ()
{
akeeba.Ajax.processingQueue = false;

setTimeout("akeeba.Ajax.processQueue();", 50);
};

/**
* Processes the request queue
*
* @access private
*/
akeeba.Ajax.processQueue = function ()
{
// If I don't have any more requests reset and return
if (!akeeba.Ajax.requestArray.length)
{
akeeba.Ajax.processingQueue = false;
return;
}

// If I am already processing an AJAX request do nothing (I will be called


again when the request completes)
if (akeeba.Ajax.processingQueue)
{
return;
}

// Extract the URL from the parameters


var parameters = akeeba.Ajax.requestArray.shift();
var url = parameters.url;

/**
* Add our queue processing helper to the top of the success and error
callback function stacks, ensuring that we
* will process the next request in the queue as soon as the previous one
completes (successfully or not)
*/
var successCallback = (typeof(parameters.success) === "undefined") ? [] :
parameters.success;
var errorCallback = (typeof(parameters.error) === "undefined") ? [] :
parameters.error;

if ((typeof(successCallback) !== "object") || !(successCallback instanceof


Array))
{
successCallback = [successCallback];
}

if ((typeof(errorCallback) !== "object") || !(errorCallback instanceof


Array))
{
errorCallback = [errorCallback];
}

successCallback.unshift(akeeba.Ajax.processQueueHelper);
errorCallback.unshift(akeeba.Ajax.processQueueHelper);

parameters.success = successCallback;
parameters.error = errorCallback;

// Mark the queue as currently being processed, blocking further requests


until this one completes
akeeba.Ajax.processingQueue = true;

// Perform the actual request


akeeba.Ajax.ajax(url, parameters);
};

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

function translateGUI()
{
var allElements = document.querySelectorAll('*');

for (var i = 0; i < allElements.length; i++)


{
var e = allElements[i];

if (typeof e.innerHTML === "undefined")


{
continue;
}

transKey = e.innerHTML;

if (!array_key_exists(transKey, translation))
{
continue;
}

e.innerHTML = translation[transKey];
}
}

function trans(key)
{
if (array_key_exists(key, translation))
{
return translation[key];
}

return key;
}

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

var akeeba_error_callback = onGenericError;


var akeeba_restoration_stat_inbytes = 0;
var akeeba_restoration_stat_outbytes = 0;
var akeeba_restoration_stat_files = 0;
var akeeba_restoration_stat_total = 0;
var akeeba_factory = null;
var akeeba_next_step_post = null;

var akeeba_ftpbrowser_modal = null;


var akeeba_ftpbrowser_host = null;
var akeeba_ftpbrowser_port = 21;
var akeeba_ftpbrowser_username = null;
var akeeba_ftpbrowser_password = null;
var akeeba_ftpbrowser_passive = 1;
var akeeba_ftpbrowser_ssl = 0;
var akeeba_ftpbrowser_directory = "";

var akeeba_sftpbrowser_host = null;


var akeeba_sftpbrowser_port = 21;
var akeeba_sftpbrowser_username = null;
var akeeba_sftpbrowser_password = null;
var akeeba_sftpbrowser_pubkey = null;
var akeeba_sftpbrowser_privkey = null;
var akeeba_sftpbrowser_directory = "";

akeeba.System.documentReady(function () {
// Hide 2nd Page
document.getElementById("page2").style.display = "none";

// Translate the GUI


translateGUI();

// Hook interaction handlers


akeeba.System.addEventListener(document, "keyup", closeLightbox);

akeeba.System.addEventListener(document.getElementById("kickstart.procengine"),
"change", onChangeProcengine);

akeeba.System.addEventListener(document.getElementById("kickstart.setup.sourcepath"
), "change", onArchiveListReload);
akeeba.System.addEventListener(document.getElementById("reloadArchives"),
"click", onArchiveListReload);
akeeba.System.addEventListener(document.getElementById("checkFTPTempDir"),
"click", oncheckFTPTempDirClick);
akeeba.System.addEventListener(document.getElementById("resetFTPTempDir"),
"click", onresetFTPTempDir);
akeeba.System.addEventListener(document.getElementById("testFTP"), "click",
onTestFTPClick);
akeeba.System.addEventListener(document.getElementById("gobutton_top"),
"click", onStartExtraction);
akeeba.System.addEventListener(document.getElementById("gobutton"), "click",
onStartExtraction);
akeeba.System.addEventListener(document.getElementById("gobutton"), "click",
onStartExtraction);
akeeba.System.addEventListener(document.getElementById("runCleanup"),
"click", onRunCleanupClick);
akeeba.System.addEventListener(document.getElementById("runInstaller"),
"click", onRunInstallerClick);
akeeba.System.addEventListener(document.getElementById("gotoStart"), "click",
onGotoStartClick);

akeeba.System.addEventListener(document.getElementById("gotoSite"), "click",
function (event)
{
window.open("index.php", "finalstepsite");
window.close();
});

akeeba.System.addEventListener(document.getElementById("gotoAdministrator"),
"click", function (event)
{
window.open("administrator/index.php", "finalstepadmin");
window.close();
});

// Reset the progress bar


setProgressBar(0);

// Show IE warning
var msieVersion = getInternetExplorerVersion();
if ((msieVersion !== -1) && (msieVersion < 10))
{
document.getElementById("ie7Warning").style.display = "block";
}

if (!akeeba_debug)
{
document.getElementById("preextraction").style.display = "block";
document.getElementById("fade").style.display = "block";
}

// Trigger change, so we avoid problems if the user refreshes the page


akeeba.System.triggerEvent(document.getElementById("kickstart.procengine",
"change"));
});

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Generic error handler
*
* @param {string} msg Error message to display
*/
function onGenericError(msg)
{
document.getElementById("genericerrorInner").innerHTML = msg;
document.getElementById("genericerror").style.display = "block";
document.getElementById("fade").style.display = "block";

akeeba.System.addEventListener(document, "keyup", closeLightbox());


}

/**
* Set the progress bar to a specific percentage
*
* @param {int} percent Percentage (or float 0.0 to 1.0) to display in the
progress bar.
*/
function setProgressBar(percent)
{
var newValue = percent;

if (percent <= 1)
{
newValue = 100 * percent;
}

document.getElementById("progressbar-inner").style.width = newValue + "%";


}

/**
* Close the lightbox
*
* @param {KeyboardEvent|MouseEvent} event
*/
function closeLightbox(event)
{
var closeMe = false;

if ((event == null) || (event === undefined))


{
closeMe = true;
}
else if (event.keyCode == "27")
{
closeMe = true;
}

if (!closeMe)
{
return;
}

document.getElementById("preextraction").style.display = "none";
document.getElementById("genericerror").style.display = "none";
document.getElementById("fade").style.display = "none";

akeeba.System.removeEventListener(document, "keyup", closeLightbox);


}

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Event handler for changing the Archive directory.
*/
function onArchiveListReload()
{
post = {
'task': 'listArchives',
'json': JSON.stringify({
path:
document.getElementById('kickstart\.setup\.sourcepath').value
})
};

akeeba.System.doAjax(post, function (ret)


{
document.getElementById('sourcefileContainer').innerHTML = ret;
});
}

/**
* Event handler for switching the Write To File method
*
* @param {Event} event
*/
function onChangeProcengine(event)
{
var elProcEngine = document.getElementById("kickstart.procengine");
var procEngine = elProcEngine.value;
var elFtpOptions = document.getElementById("ftp-options");
var elPassive = document.getElementById("ftp-ssl-passive");
var elTestBtn = document.getElementById("testFTP");
// Only hide the (S)FTP options when using direct file writes
elFtpOptions.style.display = (procEngine === "direct") ? "none" : "block";

// Set up the interface for a plain FTP or Hybrid extraction engine


elPassive.style.display = "block";
elTestBtn.innerHTML = trans("BTN_TESTFTPCON");

// If the SFTP engine is selected I need to make some interface changes


if (procEngine === "sftp")
{
// Insert the SFTP path if none is currently specified
var elFtpDir = document.getElementById("kickstart.ftp.dir");

if (elFtpDir.value === "")


{
elFtpDir.value = sftp_path;
}

// Hide the passive mode (it's an FTP-only thing) and change the button
label.
elPassive.style.display = "none";
elTestBtn.innerHTML = trans("BTN_TESTSFTPCON");
}
}

/**
* Event handler for the Check button next to the Temporary Directory
*
* @param {MouseEvent} event
*/
function oncheckFTPTempDirClick(event)
{
var data = {
'task': 'checkTempdir',
'json': JSON.stringify({
'kickstart.ftp.tempdir':
document.getElementById('kickstart\.ftp.tempdir').value
})
};

akeeba.System.doAjax(data, function (ret)


{
var key = ret.status ? 'FTP_TEMPDIR_WRITABLE' :
'FTP_TEMPDIR_UNWRITABLE';

alert(trans(key));
});
}

/**
* Event handler for the Reset button next to the Temporary Directory
*
* @param {MouseEvent} event
*/
function onresetFTPTempDir(event)
{
document.getElementById('kickstart\.ftp\.tempdir').value = default_temp_dir;
}
/**
* Event handler for the Test FTP Connection button
*
* @param {MouseEvent} event
*/
function onTestFTPClick(event)
{
var type = 'ftp';

if (document.getElementById('kickstart.procengine').value === 'sftp')


{
type = 'sftp';
}

var data = {
'task': 'checkFTP',
'json': JSON.stringify({
'type': type,
'kickstart.ftp.host':
document.getElementById('kickstart.ftp.host').value,
'kickstart.ftp.port':
document.getElementById('kickstart.ftp.port').value,
'kickstart.ftp.ssl':
document.getElementById('kickstart.ftp.ssl').checked,
'kickstart.ftp.passive':
document.getElementById('kickstart.ftp.passive').checked,
'kickstart.ftp.user':
document.getElementById('kickstart.ftp.user').value,
'kickstart.ftp.pass':
document.getElementById('kickstart.ftp.pass').value,
'kickstart.ftp.dir':
document.getElementById('kickstart.ftp.dir').value,
'kickstart.ftp.tempdir':
document.getElementById('kickstart.ftp.tempdir').value
})
};

akeeba.System.doAjax(data, function (ret)


{
var key = ret.status ? 'FTP_CONNECTION_OK' : 'FTP_CONNECTION_FAILURE';

if (type === 'sftp')


{
key = ret.status ? 'SFTP_CONNECTION_OK' :
'SFTP_CONNECTION_FAILURE';
}

alert(trans(key) + "\n\n" + (ret.status ? '' : ret.message));


});
}

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Generic error handler
*
* @param {string} msg The error message to display
*/
function errorHandler(msg)
{
document.getElementById("errorMessage").innerHTML = msg;
document.getElementById("error").style.display = "block";
}

/**
* Initialize the archive extraction
*/
function onStartExtraction()
{
document.getElementById("page1").style.display = "none";
document.getElementById("page2").style.display = "block";
document.getElementById("currentFile").innerText = "";

akeeba_error_callback = errorHandler;

var zapBefore = 0;
var elZap = document.getElementById("kickstart\.setup\.zapbefore");

if (elZap !== null)


{
zapBefore = elZap.checked;
}

var elRestorePermissions =
document.getElementById("kickstart\.setup\.restoreperms");
var restorePermissions = false;

if (elRestorePermissions !== null)


{
elRestorePermissions.checked;
}

akeeba_next_step_post = {
"task": "startExtracting",
"json": JSON.stringify({
"kickstart.setup.sourcepath":
document.getElementById("kickstart\.setup\.sourcepath").value,
"kickstart.setup.sourcefile":
document.getElementById("kickstart\.setup\.sourcefile").value,
"kickstart.jps.password":
document.getElementById("kickstart\.jps\.password").value,
"kickstart.tuning.min_exec_time":
document.getElementById("kickstart\.tuning\.min_exec_time").value,
"kickstart.tuning.max_exec_time":
document.getElementById("kickstart\.tuning\.max_exec_time").value,
"kickstart.stealth.enable":
document.getElementById("kickstart\.stealth\.enable").checked,
"kickstart.stealth.url":
document.getElementById("kickstart\.stealth\.url").value,
"kickstart.setup.zapbefore": zapBefore,
"kickstart.tuning.run_time_bias": 75,
"kickstart.setup.restoreperms": restorePermissions,
"kickstart.setup.dryrun": 0,
"kickstart.setup.ignoreerrors":
document.getElementById("kickstart\.setup\.ignoreerrors").checked,
"kickstart.enabled": 1,
"kickstart.security.password": "",
"kickstart.setup.renameback":
document.getElementById("kickstart\.setup\.renameback").checked,
"kickstart.procengine":
document.getElementById("kickstart\.procengine").value,
"kickstart.ftp.host":
document.getElementById("kickstart\.ftp\.host").value,
"kickstart.ftp.port":
document.getElementById("kickstart\.ftp\.port").value,
"kickstart.ftp.ssl":
document.getElementById("kickstart\.ftp\.ssl").checked,
"kickstart.ftp.passive":
document.getElementById("kickstart\.ftp\.passive").checked,
"kickstart.ftp.user":
document.getElementById("kickstart\.ftp\.user").value,
"kickstart.ftp.pass":
document.getElementById("kickstart\.ftp\.pass").value,
"kickstart.ftp.dir":
document.getElementById("kickstart\.ftp\.dir").value,
"kickstart.ftp.tempdir":
document.getElementById("kickstart\.ftp\.tempdir").value,
"kickstart.setup.extract_list":
document.getElementById("kickstart\.setup\.extract_list").value
})
};

setTimeout(runNextExtractionStep, 10);
}

/**
* Runs an extraction step.
*
* We call it through setTimeout to avoid crashing the JS due to stack exhaustion
after a long list of chained function
* calls.
*/
function runNextExtractionStep()
{
akeeba.System.doAjax(akeeba_next_step_post, function (ret)
{
processRestorationStep(ret);
});
}

/**
* AJAX callback whenever a restoration step runs
*
* @param {object} data
*/
function processRestorationStep(data)
{
// Look for errors
if (!data.status)
{
errorHandler(data.message);

return;
}

// Propagate warnings to the GUI


if (!empty(data.Warnings))
{
var elWarnings = document.getElementById("warnings");
var elWarningsBox = document.getElementById("warningsBox");

for (var i = 0; i < data.Warnings.length; i++)


{
var item = data.Warnings[i];
var elWarningRow = document.createElement("div");

elWarningRow.innerHTML = item;
elWarnings.appendChild(elWarningRow);
elWarningsBox.style.display = "block";
}
}

// Parse total size, if exists


if (array_key_exists("totalsize", data))
{
if (is_array(data.filelist))
{
akeeba_restoration_stat_total = 0;

for (var j = 0; j < data.filelist.length; j++)


{
var statItem = data.filelist[j];
akeeba_restoration_stat_total += statItem[1];
}
}

akeeba_restoration_stat_outbytes = 0;
akeeba_restoration_stat_inbytes = 0;
akeeba_restoration_stat_files = 0;
}

// Update GUI
akeeba_restoration_stat_inbytes += data.bytesIn;
akeeba_restoration_stat_outbytes += data.bytesOut;
akeeba_restoration_stat_files += data.files;

var percentage = 0;

if (akeeba_restoration_stat_total > 0)
{
percentage = 100 * akeeba_restoration_stat_inbytes /
akeeba_restoration_stat_total;
percentage = Math.max(0, percentage);
percentage = Math.min(percentage, 100);
}

if (data.done)
{
percentage = 100;
}

setProgressBar(percentage);

document.getElementById("currentFile").innerText = data.lastfile;

if (!empty(data.factory))
{
akeeba_factory = data.factory;
}

if (!data.done)
{
akeeba_next_step_post = {
"task": "continueExtracting",
"json": JSON.stringify({factory: akeeba_factory})
};

setTimeout(runNextExtractionStep, 10);

return;
}

document.getElementById("page2a").style.display = "none";
document.getElementById("extractionComplete").style.display = "block";
document.getElementById("runInstaller").style.display = "inline-block";
}

/*
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

function onGotoStartClick(event)
{
document.getElementById("page2").style.display = "none";
document.getElementById("error").style.display = "none";
document.getElementById("page1").style.display = "block";
}

function onRunInstallerClick(event)
{
var windowReference = window.open("installation/index.php", "installer");

if (!windowReference.opener)
{
windowReference.opener = this.window;
}

document.getElementById("runCleanup").style.display = "inline-block";
document.getElementById("runInstaller").style.display = "none";
}
function onRunCleanupClick(event)
{
post = {
"task": "isJoomla",
// Passing the factory preserves the renamed files array
"json": JSON.stringify({factory: akeeba_factory})
};

akeeba.System.doAjax(post, function (ret)


{
isJoomla = ret;
onRealRunCleanupClick();
});
}

function onRealRunCleanupClick()
{
post = {
"task": "cleanUp",
// Passing the factory preserves the renamed files array
"json": JSON.stringify({factory: akeeba_factory})
};

akeeba.System.doAjax(post, function (ret)


{
document.getElementById("runCleanup").style.display
= "none";
document.getElementById("gotoSite").style.display
= "inline-block";
document.getElementById("gotoAdministrator").style.display
= "none";

document.getElementById("gotoPostRestorationRroubleshooting").style.display =
"block";

if (isJoomla)
{
document.getElementById("gotoAdministrator").style.display =
"inline-block";
}
});
}

<?php callExtraFeature('onExtraHeadJavascript'); ?>


</script>
<?php
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/
function echoTranslationStrings()
{
callExtraFeature('onLoadTranslations');
$translation = AKText::getInstance();
echo $translation->asJavascript();
}

function echoPage()
{
$edition = KICKSTARTPRO ? 'Professional' : 'Core';
$bestArchivePath = AKKickstartUtils::getBestArchivePath();
$filelist = AKKickstartUtils::getArchivesAsOptions($bestArchivePath);
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>Akeeba Kickstart <?php echo $edition ?> <?php echo VERSION ?
></title>
<style type="text/css" media="all" rel="stylesheet">
<?php echoCSS();?>
</style>
<?php echoHeadJavascript(); ?>
</head>
<body>

<div id="automode" style="display:none;">


AUTOMODEON
</div>

<div id="fade" class="black_overlay"></div>

<div id="page-container">

<div id="preextraction" class="white_content">


<div id="ie7Warning" style="display:none;">
<h2>Deprecated Internet Explorer version</h2>
<p>
This script is not guaranteed to work properly on
Internet Explorer 8
or earlier versions, or on Internet Explorer 9 and
higher running
in compatibility mode.
</p>
<p>
Please use Internet Explorer 9 or later in native
mode (the
&quot;broken page&quot; icon next to the address bar
should not be
enabled). Alternatively, you may use the latest
versions of Firefox,
Safari, Google Chrome or Opera.
</p>
</div>

<h2>THINGS_HEADER</h2>
<ol>
<li>THINGS_01</li>
<li>THINGS_02</li>
<li>THINGS_03</li>
<li>THINGS_04</li>
<li>THINGS_05</li>
<li>THINGS_06</li>
<li>THINGS_07</li>
<li>THINGS_08</li>
<li>THINGS_09</li>
</ol>
<a href="javascript:void(0)"
onclick="closeLightbox();">CLOSE_LIGHTBOX</a>
</div>

<div id="genericerror" class="white_content">


<pre id="genericerrorInner"></pre>
</div>

<div id="header">
<div class="title">
<img
src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABkAAAAZCAYAAADE6YVjAAAACXBIWXMA
AAHFAAABxQG6eNsrAAAA/0lEQVRIx+WVUQ2DMBCGv01B5wAHYw4qARxMwiQgYQ6YAyRMAjgAB+CgezmSSwO
jZfRplzSXNE2/3t1/V/hXuwMjkKcC5ICTNQImBaRVEAfUKdLkFlaWMorDo8lUHXIvsvEoyEMubFai21TaOQ
ByVeqaFWVUPewRkEz5FqjEa+Aus3KpAfqVojsvjXYtdacVSA8MAgqRaSd+AMrYzt6zgmriv3zaeNS08MhNi
D5UArcvoA64AE+1FySEYiF0I939Fj/3iFVFd6F9g1KU33yNGiX+JDYCbmIkXHm1sd6YX/pT7pKF3VYrSB87
fc8RZyfgJX5I8WEVsfn+5fs1/LV9AHnjYQzAbyUrAAAAAElFTkSuQmCC" alt="Akeeba Kickstart
logo">
Akeeba Kickstart <?php echo $edition ?> 6.0.1
</div>
</div>

<div id="update-notification" style="display: none">


<p class="update-notify">UPDATE_HEADER</p>
<p class="update-whyupdate">UPDATE_NOTICE</p>
<p class="update-links">
<a href="#" id="update-dlnow">UPDATE_DLNOW</a>
<a href="#" id="update-whatsnew"
target="_blank">UPDATE_MOREINFO</a>
</p>
</div>

<div id="page1">
<?php callExtraFeature('onPage1'); ?>

<div id="page1-content">

<div class="helpme">
<span>NEEDSOMEHELPKS</span> <a

href="https://www.akeebabackup.com/documentation/quick-start-guide/using-
kickstart.html"
target="_blank">QUICKSTART</a>
</div>

<div class="step1">
<div class="circle">1</div>
<h2>SELECT_ARCHIVE</h2>
<div class="area-container">
<?php callExtraFeature('onPage1Step1'); ?>
<div class="clr"></div>

<label
for="kickstart.setup.sourcepath">ARCHIVE_DIRECTORY</label>
<span class="field">
<input type="text" id="kickstart.setup.sourcepath"
value="<?php echo htmlentities($bestArchivePath); ?
>"/>
<span class="button" id="reloadArchives" style="margin-
top:0;margin-bottom:0">RELOAD_ARCHIVES</span>
</span>
<br/>

<label
for="kickstart.setup.sourcefile">ARCHIVE_FILE</label>
<span class="field" id="sourcefileContainer">
<?php if (!empty($filelist)): ?>
<select id="kickstart.setup.sourcefile">
<?php echo $filelist; ?>
</select>
<?php else: ?>
<a
href="https://www.akeebabackup.com/documentation/troubleshooter/ksnoarchives.html"
target="_blank">NOARCHIVESCLICKHERE</a>
<?php endif; ?>
</span>
<br/>
<label
for="kickstart.jps.password">JPS_PASSWORD</label>
<span class="field"><input type="password"
id="kickstart.jps.password" value=""/></span>
</div>
<div class="area-container">
<label for="gobutton_top"></label>
<span id="gobutton_top" class="button" style="padding:
0.5em 2em; margin: 0;">BTN_START</span>
</div>
</div>

<div class="clr"></div>

<div class="step2">
<div class="circle">2</div>
<h2>SELECT_EXTRACTION</h2>
<div class="area-container">
<label
for="kickstart.procengine">WRITE_TO_FILES</label>
<span class="field">
<select id="kickstart.procengine">
<option value="hybrid">WRITE_HYBRID</option>
<option value="direct">WRITE_DIRECTLY</option>
<option value="ftp">WRITE_FTP</option>
<option value="sftp">WRITE_SFTP</option>
</select>
</span><br/>

<label
for="kickstart.setup.ignoreerrors">IGNORE_MOST_ERRORS</label>
<span class="field"><input type="checkbox"
id="kickstart.setup.ignoreerrors"/></span>

<div id="ftp-options">
<label
for="kickstart.ftp.host">FTP_HOST</label>
<span class="field"><input type="text"
id="kickstart.ftp.host"

value="localhost"/></span><br/>
<label
for="kickstart.ftp.port">FTP_PORT</label>
<span class="field"><input type="text"
id="kickstart.ftp.port" value="21"/></span><br/>
<div id="ftp-ssl-passive">
<label
for="kickstart.ftp.ssl">FTP_FTPS</label>
<span class="field"><input
type="checkbox" id="kickstart.ftp.ssl"/></span><br/>
<label
for="kickstart.ftp.passive">FTP_PASSIVE</label>
<span class="field"><input
type="checkbox" id="kickstart.ftp.passive"

checked="checked"/></span><br/>
</div>
<label
for="kickstart.ftp.user">FTP_USER</label>
<span class="field"><input type="text"
id="kickstart.ftp.user" value=""/></span><br/>
<label
for="kickstart.ftp.pass">FTP_PASS</label>
<span class="field"><input
type="password" id="kickstart.ftp.pass" value=""/></span><br/>
<label
for="kickstart.ftp.dir">FTP_DIR</label>
<span class="field">
<input type="text" id="kickstart.ftp.dir" value=""/>
<?php //<span class="button" id="browseFTP" style="margin-
top:0;margin-bottom:0">FTP_BROWSE</span> ?>
</span><br/>

<label
for="kickstart.ftp.tempdir">FTP_TEMPDIR</label>
<span class="field">
<input type="text" id="kickstart.ftp.tempdir"
value="<?php echo
htmlentities(AKKickstartUtils::getTemporaryPath()) ?>"/>
<span class="button"
id="checkFTPTempDir">BTN_CHECK</span>
<span class="button"
id="resetFTPTempDir">BTN_RESET</span>
</span><br/>
<label></label>
<span class="button"
id="testFTP">BTN_TESTFTPCON</span>
<a id="notWorking" class="button"

href="https://www.akeebabackup.com/documentation/troubleshooter/kscantextract.html"
target="_blank">CANTGETITTOWORK</a>
<br/>
</div>

</div>
</div>

<div class="clr"></div>

<div class="step3">
<div class="circle">3</div>
<h2>FINE_TUNE</h2>
<div id="fine-tune-holder" class="area-container">
<label
for="kickstart.tuning.min_exec_time">MIN_EXEC_TIME</label>
<span class="field"><input type="text"
id="kickstart.tuning.min_exec_time" value="1"/></span>
<span>SECONDS_PER_STEP</span><br/>
<label
for="kickstart.tuning.max_exec_time">MAX_EXEC_TIME</label>
<span class="field"><input type="text"
id="kickstart.tuning.max_exec_time" value="5"/></span>
<span>SECONDS_PER_STEP</span><br/>
<div class="help">TIME_SETTINGS_HELP</div>

<label
for="kickstart.stealth.enable">STEALTH_MODE</label>
<span class="field"><input type="checkbox"
id="kickstart.stealth.enable"/></span><br/>
<label
for="kickstart.stealth.url">STEALTH_URL</label>
<span class="field"><input type="text"
id="kickstart.stealth.url" value=""/></span><br/>
<div class="help">STEALTH_MODE_HELP</div>

<?php if (defined('KICKSTARTPRO') && KICKSTARTPRO): ?>


<label for="kickstart.setup.zapbefore">ZAPBEFORE</label>
<span class="field"><input type="checkbox"
id="kickstart.setup.zapbefore"/></span><br/>
<div class="help">ZAPBEFORE_HELP</div>
<?php endif; ?>

<label
for="kickstart.setup.renameback">RENAME_FILES</label>
<span class="field"><input type="checkbox"
id="kickstart.setup.renameback"

checked="checked"/></span><br/>
<div class="help">RENAME_FILES_HELP</div>

<label
for="kickstart.setup.restoreperms">RESTORE_PERMISSIONS</label>
<span class="field"><input type="checkbox"
id="kickstart.setup.restoreperms"/></span><br/>
<div class="help">RESTORE_PERMISSIONS_HELP</div>

<label
for="kickstart.setup.extract_list">EXTRACT_LIST</label>
<span class="field"><textarea
id="kickstart.setup.extract_list" rows="5" cols="50"></textarea></span><br/>
<div class="help">EXTRACT_LIST_HELP</div>
</div>
</div>

<div class="clr"></div>

<div class="step4">
<div class="circle">4</div>
<h2>EXTRACT_FILES</h2>
<div class="area-container">
<label for="gobutton"></label>
<span id="gobutton"
class="button">BTN_START</span>
</div>
</div>

<div class="clr"></div>

</div>
</div>

<div id="page2">
<div id="page2a">
<div class="circle">5</div>
<h2>EXTRACTING</h2>
<div class="area-container">
<div id="warn-not-close">DO_NOT_CLOSE_EXTRACT</div>
<div id="progressbar">
<div id="progressbar-inner">&nbsp;</div>
</div>
<div id="currentFile"></div>
</div>
</div>

<div id="extractionComplete" style="display: none">


<div class="circle">6</div>
<h2>RESTACLEANUP</h2>
<div id="runInstaller"
class="button">BTN_RUNINSTALLER</div>
<div id="runCleanup" class="button"
style="display:none">BTN_CLEANUP</div>
<div id="gotoSite" class="button"
style="display:none">BTN_SITEFE</div>
<div id="gotoAdministrator" class="button"
style="display:none">BTN_SITEBE</div>
<div id="gotoPostRestorationRroubleshooting"
style="display:none">
<a
href="https://www.akeebabackup.com/documentation/troubleshooter/post-
restoration.html"
target="_blank">POSTRESTORATIONTROUBLESHOOTING</a>
</div>
</div>

<div id="warningsBox" style="display: none;">


<div id="warningsHeader">
<h2>WARNINGS</h2>
</div>
<div id="warningsContainer">
<div id="warnings"></div>
</div>
</div>

<div id="error" style="display: none;">


<h3>ERROR_OCCURED</h3>
<p id="errorMessage"></p>
<div id="gotoStart" class="button">BTN_GOTOSTART</div>
<div>
<a
href="https://www.akeebabackup.com/documentation/troubleshooter/kscantextract.html"
target="_blank">CANTGETITTOWORK</a>
</div>
</div>
</div>

<div id="footer">
<div class="copyright">Copyright &copy; 2008&ndash;<?php echo
date('Y'); ?> <a
href="http://www.akeebabackup.com">Nicholas K.
Dionysopoulos / Akeeba Backup</a>. All legal rights
reserved.<br/>

This program is free software: you can redistribute it


and/or modify it under the terms of
the <a href="http://www.gnu.org/gpl-
3.htmlhttp://www.gnu.org/copyleft/gpl.html">GNU General
Public License</a> as published by the Free Software
Foundation, either version 3 of the License,
or (at your option) any later version.<br/>
Design credits: <a href="http://internet-
inspired.com/">Internet Inspired</a>, heavily modified by
AkeebaBackup.com
</div>
</div>

</div>

</body>
</html>
<?php
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Clear the code caches for the extracted files. Used when finalizing the
restoration.
*
* @return void
*/
function clearCodeCaches()
{
// Zend OPcache
if (function_exists('opcache_reset'))
{
opcache_reset();
}

// APC code cache


if (function_exists('apc_clear_cache'))
{
@apc_clear_cache();
}
}

/**
* Removes all files pertaining to Kickstart.
*
* Using when finalizing the archive extraction from the web
*
* @param AKAbstractPostproc $postProc The post-processing engine of Akeeba
Restore in use
*/
function removeKickstartFiles(AKAbstractPostproc $postProc)
{
// Remove self
$postProc->unlink(basename(__FILE__));

// Delete translations
removeKickstartTranslationFiles($postProc);

// Delete feature files


deleteKickstartFeatureFiles($postProc);

// Delete the temporary directory IF AND ONLY IF it's called "kicktemp"


deleteKickstartTempDirectory($postProc);

// Delete cacert.pem
$postProc->unlink('cacert.pem');
}

/**
* Remove feature files, e.g. kickstart.transfer.php
*
* @param AKAbstractPostproc $postProc
*
* @return void
*/
function deleteKickstartFeatureFiles(AKAbstractPostproc $postProc)
{
$dh = opendir(AKKickstartUtils::getPath());

if ($dh === false)


{
return;
}

$basename = basename(__FILE__, '.php');

while (false !== $file = @readdir($dh))


{
if (
(substr($file, 0, strlen($basename) + 1) == $basename . '.')
&& (substr($file, -4) == '.php')
)
{
$postProc->unlink($file);
}
}

closedir($dh);
}

/**
* Delete the temporary directory IF AND ONLY IF it's called "kicktemp"
*
* @param AKAbstractPostproc $postProc
*
* @return void
*/
function deleteKickstartTempDirectory(AKAbstractPostproc $postProc)
{
$tempDir = $postProc->getTempDir();
$tempDir = trim($tempDir);

if (empty($tempDir))
{
return;
}

$basename = basename($tempDir);

if (strtolower($basename) != 'kicktemp')
{
return;
}

recursive_remove_directory($tempDir);
}

/**
* Delete language files, e.g. el-GR.kickstart.ini
*
* @param AKAbstractPostproc $postProc
*
* @return void
*/
function removeKickstartTranslationFiles(AKAbstractPostproc $postProc)
{
$dh = opendir(AKKickstartUtils::getPath());

if ($dh === false)


{
return;
}

$basename = basename(__FILE__, '.php');

while (false !== $file = @readdir($dh))


{
if (strstr($file, $basename . '.ini'))
{
$postProc->unlink($file);
}
}

closedir($dh);
}

/**
* Finalization after the restoration. Removes the installation directory, the
backup archive and rolls back automatic
* file renames.
*
* @param AKAbstractUnarchiver $unarchiver The unarchiver engine used by Akeeba
Restore
* @param AKAbstractPostproc $postProc The post-processing engine used by
Akeeba Restore
*/
function finalizeAfterRestoration(AKAbstractUnarchiver $unarchiver,
AKAbstractPostproc $postProc)
{
// Remove installation
recursive_remove_directory('installation');

// Run the renames, backwards


rollbackAutomaticRenames($unarchiver, $postProc);

// Delete the archive


foreach ($unarchiver->archiveList as $archive)
{
$postProc->unlink($archive);
}
}

/**
* Rolls back automatic file renames.
*
* @param AKAbstractUnarchiver $unarchiver The unarchiver engine used by Akeeba
Restore
* @param AKAbstractPostproc $postProc The post-processing engine used by
Akeeba Restore
*/
function rollbackAutomaticRenames(AKAbstractUnarchiver $unarchiver,
AKAbstractPostproc $postProc)
{
$renameBack = AKFactory::get('kickstart.setup.renameback', true);

if ($renameBack)
{
$renames = $unarchiver->renameFiles;

if (!empty($renames))
{
foreach ($renames as $original => $renamed)
{
$postProc->rename($renamed, $original);
}
}
}
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Utility class to parse CLI parameters in a POSIX way
*/
class AKCliParams
{
/**
* POSIX-style CLI options. Access them with through the getOption method.
*
* @var array
*/
protected static $cliOptions = array();

/**
* Parses POSIX command line options and sets the self::$cliOptions
associative array. Each array item contains
* a single dimensional array of values. Arguments without a dash are
silently ignored.
*
* @return void
*/
public static function parseOptions()
{
global $argc, $argv;

// Workaround for PHP-CGI


if (!isset($argc) && !isset($argv))
{
$query = "";

if (!empty($_GET))
{
foreach ($_GET as $k => $v)
{
$query .= " $k";

if ($v != "")
{
$query .= "=$v";
}
}
}

$query = ltrim($query);
$argv = explode(' ', $query);
$argc = count($argv);
}
$currentName = "";
$options = array();

for ($i = 1; $i < $argc; $i++)


{
$argument = $argv[$i];

$value = $argument;

if (strpos($argument, "-") === 0)


{
$argument = ltrim($argument, '-');

$name = $argument;
$value = null;

if (strstr($argument, '='))
{
list($name, $value) = explode('=', $argument, 2);
}

$currentName = $name;

if (!isset($options[$currentName]) ||
($options[$currentName] == null))
{
$options[$currentName] = array();
}
}

if ((!is_null($value)) && (!is_null($currentName)))


{
$key = null;

if (strstr($value, '='))
{
$parts = explode('=', $value, 2);
$key = $parts[0];
$value = $parts[1];
}

$values = $options[$currentName];

if (is_null($values))
{
$values = array();
}

if (is_null($key))
{
$values[] = $value;
}
else
{
$values[$key] = $value;
}

$options[$currentName] = $values;
}
}

self::$cliOptions = $options;
}

/**
* Returns the value of a command line option
*
* @param string $key The full name of the option, e.g. "foobar"
* @param mixed $default The default value to return
* @param bool $array Should I return an array parameter?
*
* @return mixed The value of the option
*/
public static function getOption($key, $default = null, $array = false)
{
// If the key doesn't exist set it to the default value
if (!array_key_exists($key, self::$cliOptions))
{
self::$cliOptions[$key] = is_array($default) ? $default :
array($default);
}

if ($array)
{
return self::$cliOptions[$key];
}

return self::$cliOptions[$key][0];
}

/**
* Is the specified param key used in the command line?
*
* @param string $key The full name of the option, e.g. "foobar"
*
* @return mixed The value of the option
*/
public static function hasOption($key)
{
return array_key_exists($key, self::$cliOptions);
}
}

class CLIExtractionObserver extends ExtractionObserver


{
public static $silent = false;

public function update($object, $message)


{
parent::update($object, $message);

if (self::$silent)
{
return;
}

if (!is_object($message))
{
return;
}

if (!array_key_exists('type', get_object_vars($message)))
{
return;
}

if ($message->type == 'startfile')
{
echo $message->content->file . "\n";
}
}

class CLIDeletionObserver extends ExtractionObserver


{
public static $silent = false;

public function update($object, $message)


{
if (self::$silent)
{
return;
}

if (!is_object($message))
{
return;
}

if (!array_key_exists('type', get_object_vars($message)))
{
return;
}

switch ($message->type)
{
case 'setup':
echo "I will delete existing files and folders\n";
break;

case 'deleteFile':
echo "DELETE FILE : $message->file\n";
break;

case 'deleteFolder':
echo "DELETE FOLDER: $message->file\n";
break;
}
}

/**
* Routes the Kickstart CLI application
*/
function kickstart_application_cli()
{
AKCliParams::parseOptions();
$silent = AKCliParams::hasOption('silent');
$year = gmdate('Y');

if (!$silent)
{
echo <<< BANNER
Akeeba Kickstart CLI 6.0.1
Copyright (c) 2008-$year Akeeba Ltd / Nicholas K. Dionysopoulos
-------------------------------------------------------------------------------
Akeeba Kickstart is Free Software, distributed under the terms of the GNU General
Public License version 3 or, at your option, any later version.
This program comes with ABSOLUTELY NO WARRANTY as per sections 15 & 16 of the
license. See http://www.gnu.org/licenses/gpl-3.0.html for details.
-------------------------------------------------------------------------------

BANNER;
}

$paths = AKCliParams::getOption('', array(), true);

if (empty($paths))
{
global $argv;

echo <<< HOWTOUSE


Usage: {$argv[0]} archive.jpa [output_path] [--password=yourPassword]
[--silent] [--permissions] [--dry-run] [--ignore-errors]
[--delete-before]
[--extract=<pattern>[,<pattern>...]]

HOWTOUSE;

die;
}

AKFactory::nuke();

$targetPath = isset($paths[1]) ? $paths[1] : getcwd();


$targetPath = realpath($targetPath);
$archive = $paths[0];
$archive = realpath($archive);
$archivePath = dirname($archive);
$archivePath = empty($archivePath) ? getcwd() : $archivePath;
$archivePath = empty($archivePath) ? __DIR__ : $archivePath;
$archiveName = basename($paths[0]);

$archiveForDisplay = $archive;
$cwd = getcwd();

if ($archivePath == realpath($cwd))
{
$archiveForDisplay = $archiveName;
}
if (!$silent)
{
echo <<< BANNER
Extracting $archiveForDisplay
to folder $targetPath

BANNER;
}

// What am I extracting?
AKFactory::set('kickstart.setup.sourcepath', $archivePath);
AKFactory::set('kickstart.setup.sourcefile', $archiveName);
// JPS password
AKFactory::set('kickstart.jps.password', AKCliParams::getOption('password'));
// Restore permissions?
AKFactory::set('kickstart.setup.restoreperms',
AKCliParams::hasOption('permissions'));
// Dry run?
AKFactory::set('kickstart.setup.dryrun', AKCliParams::hasOption('dry-run'));
// Ignore errors?
AKFactory::set('kickstart.setup.ignoreerrors',
AKCliParams::hasOption('ignore-errors'));
// Delete all files and folders before extraction?
AKFactory::set('kickstart.setup.zapbefore', AKCliParams::hasOption('delete-
before'));
// Which files should I extract?
AKFactory::set('kickstart.setup.extract_list',
AKCliParams::getOption('extract', '', true));
// Do not rename any files (this is the CLI...)
AKFactory::set('kickstart.setup.renamefiles', array());
// Optimize time limits
AKFactory::set('kickstart.tuning.max_exec_time', 20);
AKFactory::set('kickstart.tuning.run_time_bias', 75);
AKFactory::set('kickstart.tuning.min_exec_time', 0);
AKFactory::set('kickstart.procengine', 'direct');

// Make sure that the destination directory is always set (req'd by both FTP
and Direct Writes modes)
if (empty($targetPath))
{
$targetPath = AKKickstartUtils::getPath();
}

AKFactory::set('kickstart.setup.destdir', $targetPath);

$unarchiver = AKFactory::getUnarchiver();
$observer = new CLIExtractionObserver();
$unarchiver->attach($observer);

if ($silent)
{
CLIExtractionObserver::$silent = true;
}

if (!$silent)
{
echo "\n\n";
}
$retArray = array(
'done' => false,
);

while (!$retArray['done'])
{
$timer = AKFactory::getTimer();
$timer->resetTime();

/**
* First try to run the filesystem zapper (remove all existing files and
folders). If the Zapper is
* disabled or has already finished running we will get a FALSE result.
Otherwise it's a status array
* which we can pass directly back to the caller.
*/
$ret = runZapper(new CLIDeletionObserver());

// If the Zapper had a step to run we stop here and return its status array
to the caller.
if ($ret !== false)
{
continue;
}

$unarchiver->tick();
$ret = $unarchiver->getStatusArray();

if ($ret['Error'] != '')
{
$retArray['status'] = false;
$retArray['done'] = true;
$retArray['message'] = $ret['Error'];
}
elseif (!$ret['HasRun'])
{
$retArray['files'] = $observer->filesProcessed;
$retArray['bytesIn'] = $observer->compressedTotal;
$retArray['bytesOut'] = $observer->uncompressedTotal;
$retArray['status'] = true;
$retArray['done'] = true;
}
else
{
$retArray['files'] = $observer->filesProcessed;
$retArray['bytesIn'] = $observer->compressedTotal;
$retArray['bytesOut'] = $observer->uncompressedTotal;
$retArray['status'] = true;
$retArray['done'] = false;
}

if (!is_null($observer->totalSize))
{
$retArray['totalsize'] = $observer->totalSize;
$retArray['filelist'] = $observer->fileList;
}

$retArray['Warnings'] = $ret['Warnings'];
$retArray['lastfile'] = $observer->lastFile;
if (!empty($retArray['Warnings']) && !$silent)
{
echo "\n\n";

foreach ($retArray['Warnings'] as $line)


{
echo "\t$line\n";
}

echo "\n";
}
}

if (!$silent)
{
echo "\n\n";
}

if (!$retArray['status'])
{
if (!$silent)
{
echo "An error has occurred:\n{$retArray['message']}\n\n";
}

exit(255);
}

// Finalize
$postProc = AKFactory::getPostProc();

rollbackAutomaticRenames($unarchiver, $postProc);
clearCodeCaches();
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

/**
* Routes the Kickstart web application
*/
function kickstart_application_web()
{
$retArray = array(
'status' => true,
'message' => null
);

$task = getQueryParam('task', 'display');


$json = getQueryParam('json');
$ajax = true;
switch ($task)
{
case 'checkTempdir':
$retArray['status'] = false;

if (!empty($json))
{
$data = json_decode($json, true);
$dir = @$data['kickstart.ftp.tempdir'];

if (!empty($dir))
{
$retArray['status'] = is_writable($dir);
}
}
break;

case 'checkFTP':
$retArray['status'] = false;

if (!empty($json))
{
$data = json_decode($json, true);

foreach ($data as $key => $value)


{
AKFactory::set($key, $value);
}

if ($data['type'] == 'ftp')
{
$ftp = new AKPostprocFTP();
}
else
{
$ftp = new AKPostprocSFTP();
}

$retArray['message'] = $ftp->getError();
$retArray['status'] = empty($retArray['message']);
}
break;

case 'ftpbrowse':
if (!empty($json))
{
$data = json_decode($json, true);

$retArray =
getListing($data['directory'], $data['host'],
$data['port'], $data['username'], $data['password'], $data['passive'],
$data['ssl']);
}
break;

case 'sftpbrowse':
if (!empty($json))
{
$data = json_decode($json, true);
$retArray =
getSftpListing($data['directory'], $data['host'],
$data['port'], $data['username'], $data['password']);
}
break;

case 'startExtracting':
case 'continueExtracting':
// Look for configuration values
$retArray['status'] = false;

if (!empty($json))
{
if ($task == 'startExtracting')
{
AKFactory::nuke();
}

$oldJSON = $json;
$json = json_decode($json, true);

if (is_null($json))
{
$json = stripslashes($oldJSON);
$json = json_decode($json, true);
}

if (!empty($json))
{
foreach ($json as $key => $value)
{
if (substr($key, 0, 9) == 'kickstart')
{
AKFactory::set($key, $value);
}
}
}

// A "factory" variable will override all other settings.


if (array_key_exists('factory', $json))
{
// Get the serialized factory
$serialized = $json['factory'];
AKFactory::unserialize($serialized);
AKFactory::set('kickstart.enabled', true);
}

// Make sure that the destination directory is always set


(req'd by both FTP and Direct Writes modes)
$removePath = AKFactory::get('kickstart.setup.destdir',
'');

if (empty($removePath))
{
AKFactory::set('kickstart.setup.destdir',
AKKickstartUtils::getPath());
}
if ($task == 'startExtracting')
{
// If the Stealth Mode is enabled, create the
.htaccess file
if (AKFactory::get('kickstart.stealth.enable',
false))
{
createStealthURL();
}
}

/**
* First try to run the filesystem zapper (remove all existing
files and folders). If the Zapper is
* disabled or has already finished running we will get a FALSE
result. Otherwise it's a status array
* which we can pass directly back to the caller.
*/
$ret = runZapper();

// If the Zapper had a step to run we stop here and return its
status array to the caller.
if ($ret !== false)
{
$retArray = array_merge($retArray, $ret);

break;
}

$engine = AKFactory::getUnarchiver(); // Get the engine


$observer = new ExtractionObserver(); // Create a new
observer
$engine->attach($observer); // Attach the observer
$engine->tick();
$ret = $engine->getStatusArray();

if ($ret['Error'] != '')
{
$retArray['status'] = false;
$retArray['done'] = true;
$retArray['message'] = $ret['Error'];
}
elseif (!$ret['HasRun'])
{
$retArray['files'] = $observer->filesProcessed;
$retArray['bytesIn'] = $observer->compressedTotal;
$retArray['bytesOut'] = $observer->uncompressedTotal;
$retArray['status'] = true;
$retArray['done'] = true;
}
else
{
$retArray['files'] = $observer->filesProcessed;
$retArray['bytesIn'] = $observer->compressedTotal;
$retArray['bytesOut'] = $observer->uncompressedTotal;
$retArray['status'] = true;
$retArray['done'] = false;
$retArray['factory'] = AKFactory::serialize();
}
if (!is_null($observer->totalSize))
{
$retArray['totalsize'] = $observer->totalSize;
$retArray['filelist'] = $observer->fileList;
}

$retArray['Warnings'] = $ret['Warnings'];
$retArray['lastfile'] = empty($observer->lastFile) ?
'Extracting, please wait...' : $observer->lastFile;

$timer = AKFactory::getTimer();
$timer->enforce_min_exec_time();
}
break;

case 'cleanUp':
if (!empty($json))
{
$json = json_decode($json, true);

if (array_key_exists('factory', $json))
{
// Get the serialized factory
$serialized = $json['factory'];
AKFactory::unserialize($serialized);
AKFactory::set('kickstart.enabled', true);
}
}

$unarchiver = AKFactory::getUnarchiver(); // Get the engine


$postProc = AKFactory::getPostProc();

finalizeAfterRestoration($unarchiver, $postProc);
removeKickstartFiles($postProc);
clearCodeCaches();

break;

case 'display':
$ajax = false;
echoPage();
break;

case 'isJoomla':
$ajax = true;

if (!empty($json))
{
$json = json_decode($json, true);

if (array_key_exists('factory', $json))
{
// Get the serialized factory
$serialized = $json['factory'];
AKFactory::unserialize($serialized);
AKFactory::set('kickstart.enabled', true);
}
}
$path = AKFactory::get('kickstart.setup.destdir', '');
$path = rtrim($path, '/\\');
$isJoomla = @is_dir($path . '/administrator');

if ($isJoomla)
{
$isJoomla = @is_dir($path . '/libraries/joomla');
}

$retArray = $isJoomla;

break;

case 'listArchives':
$ajax = true;

$path = null;

if (!empty($json))
{
$json = json_decode($json, true);

if (array_key_exists('path', $json))
{
$path = $json['path'];
}
}

if (empty($path) || !@is_dir($path))
{
$filelist = null;
}
else
{
$filelist = AKKickstartUtils::getArchivesAsOptions($path);
}

if (empty($filelist))
{
$retArray =
'<a
href="https://www.akeebabackup.com/documentation/troubleshooter/ksnoarchives.html"
target="_blank">' .
AKText::_('NOARCHIVESCLICKHERE')
. '</a>';
}
else
{
$retArray = '<select id="kickstart.setup.sourcefile">' .
$filelist . '</select>';
}

break;

default:
$ajax = true;

if (!empty($json))
{
$params = json_decode($json, true);
}
else
{
$params = array();
}

$retArray = callExtraFeature($task, $params);

break;
}

if ($ajax)
{
// JSON encode the message
$json = json_encode($retArray);

// Return the message


echo "###$json###";
}
}

/**
* Akeeba Kickstart
* A JSON-powered archive extraction tool
*
* @copyright Copyright (c)2008-2019 Nicholas K. Dionysopoulos / Akeeba Ltd
* @license GNU GPL v2 or - at your option - any later version
* @package kickstart
*/

// Register additional feature classes


callExtraFeature();

// Is this a CLI call?


$isCli = !isset($_SERVER) || !is_array($_SERVER);

if (isset($_SERVER) && is_array($_SERVER))


{
$isCli = !array_key_exists('REQUEST_METHOD', $_SERVER);
}

if (isset($_GET) && is_array($_GET) && !empty($_GET))


{
if (isset($_GET['cli']))
{
$isCli = $_GET['cli'] == 1;
}
elseif (isset($_GET['web']))
{
$isCli = $_GET['web'] != 1;
}
}

// Route the application


if ($isCli)
{
kickstart_application_cli();
}
else
{
kickstart_application_web();
}

You might also like