FM / front

/home/sharedstore/public_html/prestashop.sharedstore.ma/controllers/front/

/home/sharedstore/public_html/prestashop.sharedstore.ma/controllers/front

Name	Size	Mode	Actions
listing/	-	0755	rm
AddressController.php	6518	0644	edit dl rm
AddressesController.php	2354	0644	edit dl rm
AttachmentController.php	2813	0644	edit dl rm
AuthController.php	3500	0644	edit dl rm
CartController.php	26745	0644	edit dl rm
ChangeCurrencyController.php	1621	0644	edit dl rm
CmsController.php	9718	0644	edit dl rm
ContactController.php	1963	0644	edit dl rm
DiscountController.php	6468	0644	edit dl rm
GetFileController.php	14904	0644	edit dl rm
GuestTrackingController.php	7601	0644	edit dl rm
HistoryController.php	4495	0644	edit dl rm
IdentityController.php	3340	0644	edit dl rm
index.php	1372	0644	edit dl rm
IndexController.php	1674	0644	edit dl rm
MyAccountController.php	2011	0644	edit dl rm
OrderConfirmationController.php	13078	0644	edit dl rm
OrderController.php	14405	0644	edit dl rm
OrderDetailController.php	10397	0644	edit dl rm
OrderFollowController.php	5725	0644	edit dl rm
OrderReturnController.php	7516	0644	edit dl rm
OrderSlipController.php	3566	0644	edit dl rm
PageNotFoundController.php	2350	0644	edit dl rm
PasswordController.php	14450	0644	edit dl rm
PdfInvoiceController.php	3712	0644	edit dl rm
PdfOrderReturnController.php	2770	0644	edit dl rm
PdfOrderSlipController.php	2330	0644	edit dl rm
ProductController.php	71351	0644	edit dl rm
RegistrationController.php	4005	0644	edit dl rm
SitemapController.php	8574	0644	edit dl rm
StatisticsController.php	3401	0644	edit dl rm
StoresController.php	9025	0644	edit dl rm
UploadController.php	2901	0644	edit dl rm

Edit: /home/sharedstore/public_html/prestashop.sharedstore.ma/controllers/front/UploadController.php (2901B)

<?php
/**
 * Copyright since 2007 PrestaShop SA and Contributors
 * PrestaShop is an International Registered Trademark & Property of PrestaShop SA
 *
 * NOTICE OF LICENSE
 *
 * This source file is subject to the Open Software License (OSL 3.0)
 * that is bundled with this package in the file LICENSE.md.
 * It is also available through the world-wide-web at this URL:
 * https://opensource.org/licenses/OSL-3.0
 * If you did not receive a copy of the license and are unable to
 * obtain it through the world-wide-web, please send an email
 * to license@prestashop.com so we can send you a copy immediately.
 *
 * DISCLAIMER
 *
 * Do not edit or add to this file if you wish to upgrade PrestaShop to newer
 * versions in the future. If you wish to customize PrestaShop for your
 * needs please refer to https://devdocs.prestashop.com/ for more information.
 *
 * @author    PrestaShop SA and Contributors <contact@prestashop.com>
 * @copyright Since 2007 PrestaShop SA and Contributors
 * @license   https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
 */

declare(strict_types=1);

class UploadControllerCore extends GetFileController
{
    private $filename;

public function init()
    {
        FrontController::init();
        if (Tools::getValue('file') !== null) {
            $this->filename = pSQL(Tools::getValue('file'));
        }

if (!file_exists($this->getPath()) || (!$this->isCustomization() && !$this->isEmployee())) {
            $this->redirect_after = '404';
            $this->redirect();
        }
    }

private function isEmployee(): bool
    {
        return !empty((new Cookie('psAdmin'))->id_employee);
    }

private function isCustomization(): bool
    {
        if ($this->filename === null || !($this->context->cart instanceof Cart)) {
            return false;
        }

$isCustomization = Db::getInstance()->getValue('SELECT 1
            FROM ' . _DB_PREFIX_ . 'cart c
            INNER JOIN ' . _DB_PREFIX_ . 'customization cu ON c.id_cart = cu.id_cart
            INNER JOIN ' . _DB_PREFIX_ . 'customized_data cd ON cd.id_customization = cu.id_customization
            LEFT JOIN ' . _DB_PREFIX_ . 'orders o ON c.id_cart = o.id_cart
            WHERE (c.id_customer = ' . (int) $this->context->cart->id_customer . '
            AND c.id_guest = ' . (int) $this->context->cart->id_guest . '
            OR o.reference = "' . pSQL(Tools::getValue('reference')) . '")
            AND cd.type = ' . Product::CUSTOMIZE_FILE . '
            AND (cd.value = "' . $this->filename . '" OR CONCAT(cd.value, "_small") = "' . $this->filename . '")');

return (bool) $isCustomization;
    }

public function postProcess()
    {
        $this->sendFile($this->getPath(), $this->filename, false);
    }

private function getPath(): string
    {
        return _PS_UPLOAD_DIR_ . basename($this->filename);
    }
}

* @copyright Since 2007 PrestaShop SA and Contributors * @license https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0) */ declare(strict_types=1); class UploadControllerCore extends GetFileController { private $filename; public function init() { FrontController::init(); if (Tools::getValue('file') !== null) { $this->filename = pSQL(Tools::getValue('file')); } if (!file_exists($this->getPath()) || (!$this->isCustomization() && !$this->isEmployee())) { $this->redirect_after = '404'; $this->redirect(); } } private function isEmployee(): bool { return !empty((new Cookie('psAdmin'))->id_employee); } private function isCustomization(): bool { if ($this->filename === null || !($this->context->cart instanceof Cart)) { return false; } $isCustomization = Db::getInstance()->getValue('SELECT 1 FROM ' . _DB_PREFIX_ . 'cart c INNER JOIN ' . _DB_PREFIX_ . 'customization cu ON c.id_cart = cu.id_cart INNER JOIN ' . _DB_PREFIX_ . 'customized_data cd ON cd.id_customization = cu.id_customization LEFT JOIN ' . _DB_PREFIX_ . 'orders o ON c.id_cart = o.id_cart WHERE (c.id_customer = ' . (int) $this->context->cart->id_customer . ' AND c.id_guest = ' . (int) $this->context->cart->id_guest . ' OR o.reference = "' . pSQL(Tools::getValue('reference')) . '") AND cd.type = ' . Product::CUSTOMIZE_FILE . ' AND (cd.value = "' . $this->filename . '" OR CONCAT(cd.value, "_small") = "' . $this->filename . '")'); return (bool) $isCustomization; } public function postProcess() { $this->sendFile($this->getPath(), $this->filename, false); } private function getPath(): string { return _PS_UPLOAD_DIR_ . basename($this->filename); } }