ac7467f0b4
- Added comprehensive AI Assistant system (aiassist/ directory): * Vector search and embedding capabilities * Typebot proxy integration * Elastic search functionality * Message classification and chat history * MCP proxy for external integrations - Implemented Court Status API (GetCourtStatus.php): * Real-time court document status checking * Integration with external court systems * Comprehensive error handling and logging - Enhanced S3 integration: * Improved file backup system with metadata * Batch processing capabilities * Enhanced error logging and recovery * Copy operations with URL fixing - Added Telegram contact creation API - Improved error logging across all modules - Enhanced callback system for AI responses - Extensive backup file storage with timestamps - Updated documentation and README files - File storage improvements: * Thousands of backup files with proper metadata * Fix operations for broken file references * Project-specific backup and recovery systems * Comprehensive file integrity checking Total: 26,461+ files added/modified including AWS SDK, vendor dependencies, and extensive backup system.
265 lines
9.7 KiB
PHP
265 lines
9.7 KiB
PHP
<?php
|
|
/*+**********************************************************************************
|
|
* The contents of this file are subject to the vtiger CRM Public License Version 1.1
|
|
* ("License"); You may not use this file except in compliance with the License
|
|
* The Original Code is: vtiger CRM Open Source
|
|
* The Initial Developer of the Original Code is vtiger.
|
|
* Portions created by vtiger are Copyright (C) vtiger.
|
|
* All Rights Reserved.
|
|
************************************************************************************/
|
|
|
|
require_once 'include/utils/utils.php';
|
|
require_once 'include/utils/CommonUtils.php';
|
|
|
|
require_once 'includes/Loader.php';
|
|
vimport ('includes.runtime.EntryPoint');
|
|
|
|
class Vtiger_WebUI extends Vtiger_EntryPoint {
|
|
|
|
/**
|
|
* Function to check if the User has logged in
|
|
* @param Vtiger_Request $request
|
|
* @throws AppException
|
|
*/
|
|
protected function checkLogin (Vtiger_Request $request) {
|
|
if (!$this->hasLogin()) {
|
|
$return_params = $_SERVER['QUERY_STRING'];
|
|
if($return_params && !$_SESSION['return_params']) {
|
|
//Take the url that user would like to redirect after they have successfully logged in.
|
|
$return_params = urlencode($return_params);
|
|
Vtiger_Session::set('return_params', $return_params);
|
|
}
|
|
header ('Location: index.php');
|
|
throw new AppException('Login is required');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Function to get the instance of the logged in User
|
|
* @return Users object
|
|
*/
|
|
function getLogin() {
|
|
$user = parent::getLogin();
|
|
if (!$user && isset($_SESSION['authenticated_user_id'])) {
|
|
$userid = Vtiger_Session::get('AUTHUSERID', $_SESSION['authenticated_user_id']);
|
|
if ($userid && vglobal('application_unique_key')==$_SESSION['app_unique_key']) {
|
|
$user = CRMEntity::getInstance('Users');
|
|
$user->retrieveCurrentUserInfoFromFile($userid);
|
|
$this->setLogin($user);
|
|
}
|
|
}
|
|
return $user;
|
|
}
|
|
|
|
protected function triggerCheckPermission($handler, $request) {
|
|
$moduleName = $request->getModule();
|
|
$moduleModel = Vtiger_Module_Model::getInstance($moduleName);
|
|
|
|
if (empty($moduleModel)) {
|
|
throw new AppException(vtranslate('LBL_HANDLER_NOT_FOUND'));
|
|
}
|
|
|
|
$userPrivilegesModel = Users_Privileges_Model::getCurrentUserPrivilegesModel();
|
|
$permission = $userPrivilegesModel->hasModulePermission($moduleModel->getId());
|
|
|
|
if ($permission) {
|
|
$handler->checkPermission($request);
|
|
return;
|
|
}
|
|
throw new AppException(vtranslate($moduleName, $moduleName).' '.vtranslate('LBL_NOT_ACCESSIBLE'));
|
|
}
|
|
|
|
protected function triggerPreProcess($handler, $request) {
|
|
if($request->isAjax()){
|
|
return true;
|
|
}
|
|
$handler->preProcess($request);
|
|
}
|
|
|
|
protected function triggerPostProcess($handler, $request) {
|
|
if($request->isAjax()){
|
|
return true;
|
|
}
|
|
$handler->postProcess($request);
|
|
}
|
|
|
|
function isInstalled() {
|
|
global $dbconfig;
|
|
if (empty($dbconfig) || empty($dbconfig['db_name']) || $dbconfig['db_name'] == '_DBC_TYPE_') {
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
function process (Vtiger_Request $request) {
|
|
Vtiger_Session::init();
|
|
|
|
// Better place this here as session get initiated
|
|
//skipping the csrf checking for the forgot(reset) password
|
|
if($request->get('mode') != 'reset' && $request->get('action') != 'Login' && $request->get('mode') != 'fromMig')
|
|
require_once 'libraries/csrf-magic/csrf-magic.php';
|
|
|
|
// TODO - Get rid of global variable $current_user
|
|
// common utils api called, depend on this variable right now
|
|
$currentUser = $this->getLogin();
|
|
vglobal('current_user', $currentUser);
|
|
|
|
// SalesPlatform.ru begin Check referer setting
|
|
global $sp_check_site_url;
|
|
if ($sp_check_site_url == 'true') {
|
|
// SalesPlatform.ru end
|
|
// Check we are being connected to on the right host and protocol
|
|
global $site_URL;
|
|
$request_URL = ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']==='on')? 'https': 'http')."://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
|
|
if ($site_URL && stripos($request_URL, $site_URL) !== 0){
|
|
header("Location: $site_URL",TRUE,301);
|
|
exit;
|
|
}
|
|
// SalesPlatform.ru begin Check referer setting
|
|
}
|
|
// SalesPlatform.ru end
|
|
|
|
global $default_language;
|
|
vglobal('default_language', $default_language);
|
|
$currentLanguage = Vtiger_Language_Handler::getLanguage();
|
|
vglobal('current_language',$currentLanguage);
|
|
$module = $request->getModule();
|
|
$qualifiedModuleName = $request->getModule(false);
|
|
|
|
if ($currentUser && $qualifiedModuleName) {
|
|
$moduleLanguageStrings = Vtiger_Language_Handler::getModuleStringsFromFile($currentLanguage,$qualifiedModuleName);
|
|
if(isset($moduleLanguageStrings['languageStrings'])){
|
|
vglobal('mod_strings', $moduleLanguageStrings['languageStrings']);
|
|
}
|
|
}
|
|
|
|
if ($currentUser) {
|
|
$moduleLanguageStrings = Vtiger_Language_Handler::getModuleStringsFromFile($currentLanguage);
|
|
if(isset($moduleLanguageStrings['languageStrings'])){
|
|
vglobal('app_strings', $moduleLanguageStrings['languageStrings']);
|
|
}
|
|
}
|
|
|
|
$view = $request->get('view');
|
|
$action = $request->get('action');
|
|
$response = false;
|
|
|
|
//Not able to open other pages when heavy duty view is open.
|
|
//heavy duty report views are open and to navigate to other module list view / detail view the page loading almost freezes page.
|
|
if ($module == 'Reports' && !$view) {
|
|
Vtiger_Session::readonly();
|
|
}
|
|
|
|
try {
|
|
if($this->isInstalled() === false && $module != 'Install') {
|
|
header('Location:index.php?module=Install&view=Index');
|
|
exit;
|
|
}
|
|
|
|
if(empty($module)) {
|
|
if ($this->hasLogin()) {
|
|
$defaultModule = vglobal('default_module');
|
|
$moduleModel = Vtiger_Module_Model::getInstance($defaultModule);
|
|
if(!empty($defaultModule) && $defaultModule != 'Home' && $moduleModel && $moduleModel->isActive()) {
|
|
$module = $defaultModule; $qualifiedModuleName = $defaultModule; $view = 'List';
|
|
if($module == 'Calendar') {
|
|
// To load MyCalendar instead of list view for calendar
|
|
//TODO: see if it has to enhanced and get the default view from module model
|
|
// SalesPlatform.ru begin
|
|
//$view = 'Calendar';
|
|
$userRecordModel = Users_Record_Model::getCurrentUserModel();
|
|
$defaultCalendarView = $userRecordModel->get('defaultcalendarview');
|
|
switch ($defaultCalendarView) {
|
|
case 'MyCalendar':
|
|
$view = 'Calendar';
|
|
break;
|
|
case 'ListView':
|
|
$view = 'List';
|
|
break;
|
|
case 'SharedCalendar':
|
|
$view = 'SharedCalendar';
|
|
break;
|
|
default:
|
|
$view = 'Calendar';
|
|
}
|
|
// SalesPlatform.ru end
|
|
}
|
|
} else {
|
|
$module = 'Home'; $qualifiedModuleName = 'Home'; $view = 'DashBoard';
|
|
}
|
|
} else {
|
|
$module = 'Users'; $qualifiedModuleName = 'Settings:Users'; $view = 'Login';
|
|
}
|
|
$request->set('module', $module);
|
|
$request->set('view', $view);
|
|
}
|
|
|
|
if (!empty($action)) {
|
|
$componentType = 'Action';
|
|
$componentName = $action;
|
|
} else {
|
|
$componentType = 'View';
|
|
if(empty($view)) {
|
|
$view = 'Index';
|
|
}
|
|
$componentName = $view;
|
|
}
|
|
$handlerClass = Vtiger_Loader::getComponentClassName($componentType, $componentName, $qualifiedModuleName);
|
|
$handler = new $handlerClass();
|
|
|
|
if ($handler) {
|
|
vglobal('currentModule', $module);
|
|
|
|
// Ensure handler validates the request
|
|
$handler->validateRequest($request);
|
|
|
|
if ($handler->loginRequired()) {
|
|
$this->checkLogin ($request);
|
|
}
|
|
|
|
//TODO : Need to review the design as there can potential security threat
|
|
// $skipList = array('Users', 'Home', 'CustomView', 'Import', 'Export', 'Inventory', 'Vtiger', 'PriceBooks', 'Migration', 'Install');
|
|
//
|
|
// if(!in_array($module, $skipList) && stripos($qualifiedModuleName, 'Settings') === false) {
|
|
// $this->triggerCheckPermission($handler, $request);
|
|
// }
|
|
|
|
// Every settings page handler should implement this method
|
|
// if(stripos($qualifiedModuleName, 'Settings') === 0 || ($module == 'Users')) {
|
|
$handler->checkPermission($request);
|
|
// }
|
|
|
|
$notPermittedModules = array('ModComments','Integration','DashBoard');
|
|
|
|
if(in_array($module, $notPermittedModules) && $view == 'List'){
|
|
header('Location:index.php?module=Home&view=DashBoard');
|
|
}
|
|
|
|
$this->triggerPreProcess($handler, $request);
|
|
$response = $handler->process($request);
|
|
$this->triggerPostProcess($handler, $request);
|
|
} else {
|
|
throw new AppException(vtranslate('LBL_HANDLER_NOT_FOUND'));
|
|
}
|
|
} catch(Exception $e) {
|
|
if ($view) {
|
|
// log for development
|
|
global $log;
|
|
$log->debug($e->getMessage().":".$e->getTraceAsString());
|
|
|
|
$viewer = new Vtiger_Viewer();
|
|
$viewer->assign('MESSAGE', $e->getMessage());
|
|
$viewer->view('OperationNotPermitted.tpl', 'Vtiger');
|
|
} else {
|
|
$response = new Vtiger_Response();
|
|
$response->setEmitType(Vtiger_Response::$EMIT_JSON);
|
|
$response->setError($e->getMessage());
|
|
}
|
|
}
|
|
|
|
if ($response) {
|
|
$response->emit();
|
|
}
|
|
}
|
|
}
|