diff --git a/.appveyor.yml b/.appveyor.yml
index 681dfa94698e4..c63d855a4e7f6 100644
--- a/.appveyor.yml
+++ b/.appveyor.yml
@@ -34,6 +34,19 @@ install:
# Get the MSSQL DLL's
- ps: >-
If ($env:PHP -eq "1") {
+<<<<<<< HEAD
+=======
+ If ($env:php_ver_target -eq "5.6") {
+ $source = "https://cdn.joomla.org/ci/php-sqlsrv.zip"
+ $destination = "c:\tools\php\php-sqlsrv.zip"
+ Invoke-WebRequest $source -OutFile $destination
+ #appveyor-retry appveyor DownloadFile https://cdn.joomla.org/ci/php-sqlsrv.zip
+ 7z x -y php-sqlsrv.zip > $null
+ copy SQLSRV\php_sqlsrv_56_nts.dll ext\php_sqlsrv_nts.dll
+ copy SQLSRV\php_pdo_sqlsrv_56_nts.dll ext\php_pdo_sqlsrv_nts.dll
+ Remove-Item C:\tools\php\* -include .zip
+ } Else {
+>>>>>>> staging
$DLLVersion = "4.3.0"
cd c:\tools\php\ext
$source = "http://windows.php.net/downloads/pecl/releases/sqlsrv/$($DLLVersion)/php_sqlsrv-$($DLLVersion)-$($env:php_ver_target)-nts-vc14-x64.zip"
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000000000..3af433d8336f1
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,60 @@
+# Custom Fields
+administrator/components/com_fields/* @laoneo
+components/com_fields/* @laoneo
+plugins/content/fields/* @laoneo
+plugins/editors-xtd/fields/* @laoneo
+plugins/fields/* @laoneo
+plugins/systems/fields/* @laoneo
+
+# Smart Search
+administrator/components/com_finder/* @mbabker
+components/com_finder/* @mbabker
+modules/mod_finder/* @mbabker
+plugins/content/finder/* @mbabker
+plugins/finder/* @mbabker
+
+# Language strings
+administrator/language/en-GB/* @brianteeman
+installation/language/en-GB/* @brianteeman
+language/en-GB/* @brianteeman
+README.md @brianteeman
+README.txt @brianteeman
+
+# CodeMirror
+media/editors/codemirror/* @okonomiyaki3000
+plugins/editors/codemirror/* @okonomiyaki3000
+
+# Statistics Server
+plugins/system/stats/* @mbabker @wilsonge
+
+# Release Tools
+build.xml @mbabker
+build/build.php @mbabker @rdeutz @wilsonge
+build/bump.php @mbabker @rdeutz @wilsonge
+build/deleted_file_check.php @mbabker @rdeutz @wilsonge
+
+# Core/Extension Install/Update Tools
+administrator/components/com_joomlaupdate/* @mbabker @rdeutz @wilsonge @zero-24
+libraries/src/Installer/* @mbabker @rdeutz @wilsonge @zero-24
+libraries/src/Updater/* @mbabker @rdeutz @wilsonge @zero-24
+
+# Automated Testing
+build/jenkins/* @mbabker @rdeutz
+build/travis/* @mbabker @rdeutz
+tests/codeception/* @rdeutz
+tests/javascript/* @dgt41 @rdeutz
+tests/unit/* @mbabker @rdeutz
+.appveyor.yml @mbabker @rdeutz
+.drone.yml @rdeutz
+.hound.yml @mbabker
+.travis.yml @mbabker @rdeutz
+appveyor-phpunit.xml @mbabker @rdeutz
+codeception.yml @rdeutz
+karma.conf.js @dgt41 @rdeutz
+phpunit.xml.dist @mbabker @rdeutz
+RoboFile.dist.ini @rdeutz
+RoboFile.php @rdeutz
+travis-phpunit.xml @mbabker @rdeutz
+
+# Core JS
+media/*/js/* @dgt41
diff --git a/.github/ISSUE_TEMPLATE/Bug_report.md b/.github/ISSUE_TEMPLATE/Bug_report.md
new file mode 100644
index 0000000000000..f234699b23618
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/Bug_report.md
@@ -0,0 +1,23 @@
+---
+name: Bug report
+about: Create a report to help us improve
+
+---
+
+### Steps to reproduce the issue
+
+
+
+### Expected result
+
+
+
+### Actual result
+
+
+
+### System information (as much as possible)
+
+
+
+### Additional comments
diff --git a/.github/ISSUE_TEMPLATE/Custom.md b/.github/ISSUE_TEMPLATE/Custom.md
new file mode 100644
index 0000000000000..1c32a221edc25
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/Custom.md
@@ -0,0 +1,16 @@
+---
+name: Fix this template
+about: Suggest a fix it
+
+---
+
+### What needs to be fixed
+
+
+### Why this should be fixed
+
+
+### How would you fix it
+
+
+### Side Effects expected
diff --git a/.github/ISSUE_TEMPLATE/Feature_request.md b/.github/ISSUE_TEMPLATE/Feature_request.md
new file mode 100644
index 0000000000000..e853c4610a791
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/Feature_request.md
@@ -0,0 +1,15 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+
+---
+
+### Is your feature request related to a problem? Please describe.
+
+
+
+### Describe the solution you'd like
+
+
+
+### Additional context
diff --git a/README.md b/README.md
index 60fcfcd128c51..042332ea30017 100644
--- a/README.md
+++ b/README.md
@@ -3,13 +3,9 @@ Joomla! CMS™ [](https://travis-ci.org/joomla/joomla-cms)
-
-Drone -CI: [](http://213.160.72.75/joomla/joomla-cms)
-
-AppVeyor: [](https://ci.appveyor.com/project/joomla/joomla-cms)
-
-Jenkins: [](http://build.joomla.org/job/cms/)
+| Travis-CI | Drone-CI | AppVeyor | Jenkins |
+| ------------- | ------------- | ------------- | ------------- |
+| [](https://travis-ci.org/joomla/joomla-cms) | [](http://213.160.72.75/joomla/joomla-cms) | [](https://ci.appveyor.com/project/joomla/joomla-cms) | [](http://build.joomla.org/job/cms/) |
What is this?
---------------------
@@ -91,7 +87,7 @@ Do you want to improve Joomla?
Copyright
---------------------
-* Copyright (C) 2005 - 2017 Open Source Matters. All rights reserved.
+* Copyright (C) 2005 - 2018 Open Source Matters. All rights reserved.
* [Special Thanks](https://docs.joomla.org/Special:MyLanguage/Joomla!_Credits_and_Thanks)
* Distributed under the GNU General Public License version 2 or later
* See [License details](https://docs.joomla.org/Special:MyLanguage/Joomla_Licenses)
diff --git a/README.txt b/README.txt
index 0153d6173b2d9..006fedcd41833 100644
--- a/README.txt
+++ b/README.txt
@@ -67,7 +67,7 @@
* Documentation for Web designers: https://docs.joomla.org/Special:MyLanguage/Web_designers
Copyright:
- * Copyright (C) 2005 - 2017 Open Source Matters. All rights reserved.
+ * Copyright (C) 2005 - 2018 Open Source Matters. All rights reserved.
* Special Thanks: https://docs.joomla.org/Special:MyLanguage/Joomla!_Credits_and_Thanks
* Distributed under the GNU General Public License version 2 or later
* See Licenses details at https://docs.joomla.org/Special:MyLanguage/Joomla_Licenses
diff --git a/RoboFile.php b/RoboFile.php
index bd0a5ba6cb1cd..8754e212e8c05 100644
--- a/RoboFile.php
+++ b/RoboFile.php
@@ -3,7 +3,7 @@
* @package Joomla.Site
* @subpackage RoboFile
*
- * @copyright Copyright (C) 2005 - 2017 Open Source Matters, Inc. All rights reserved.
+ * @copyright Copyright (C) 2005 - 2018 Open Source Matters, Inc. All rights reserved.
* @license GNU General Public License version 2 or later; see LICENSE.txt
*/
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000000..449c2a5978fdd
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,39 @@
+# Security Policies and Procedures
+
+This document outlines security procedures and policies for the `Joomla! Project`.
+
+ * [Reporting a Bug](#reporting-a-bug)
+ * [Response Handling](#response-handling)
+ * [Security Announcement Policy](#security-announcement-policy)
+ * [Further Details on the Joomla! Security Policies](https://security.joomla.org)
+
+## Reporting a Bug
+
+The `Joomla` team and community take all security bugs in `Joomla` seriously.
+
+The Joomla! Project takes security vulnerabilities very seriously. As such, the Joomla! Security Strike Team (JSST) oversees the project's security issues and follows some specific procedures when dealing with these issues.
+
+If you find a possible vulnerability, please report it to the JSST using the [online form](https://developer.joomla.org/security/contact-the-team.html) or via email at security@joomla.org
+
+We maintain a list of [GPG keys and addresses](https://developer.joomla.org/security/gpg-keys.html) for the security@joomla.org address and members of the JSST to allow signed and encrypted communications.
+
+To report an issue in a Joomla! extension, please submit it to the [Vulnerable Extensions List.](https://vel.joomla.org/submit-vel)
+
+For support with a site which has been attacked, please visit the [Joomla! Forum.](https://forum.joomla.org/viewforum.php?f=714)
+
+Thank you for improving the security of `Joomla`.
+
+## Response Handling
+
+The JSST aims to ensure all issues are handled in a timely manner and for clear communication between the team and issue reporters. As such, we have established the following guidelines for responding to issue reports:
+
+* Within 24 hours every report gets acknowledged
+* Within 7 days every report gets a further response stating either
+ * the issue is closed (and why)
+ * the issue is still under investigation; if needed, additional information will be requested
+* Within 21 days every report must be resolved unless there are exceptional circumstances requiring additional time
+
+## Security Announcement Policy
+* Verified vulnerabilities will only be publicly announced AFTER a release is issued which fixes the vulnerability.
+* All announcements will contain as much information as possible, but will NOT contain step-by-step instructions for the vulnerability.
+* The `Joomla! Project` will properly credit individuals and/or organizations who responsibly disclose security issues to the JSST. You can indicate the way you would like to be referred to in the advisory about the vulnerability. Our preference is to use full names. If you do not specify then we will use the contact name associated with the email address the report was received from. You can also request a pseudonym or having your name withheld.
diff --git a/administrator/components/com_admin/admin.php b/administrator/components/com_admin/admin.php
new file mode 100644
index 0000000000000..3e0986cdaeed3
--- /dev/null
+++ b/administrator/components/com_admin/admin.php
@@ -0,0 +1,17 @@
+execute(JFactory::getApplication()->input->get('task'));
+$controller->redirect();
diff --git a/administrator/components/com_admin/admin.xml b/administrator/components/com_admin/admin.xml
index 8d34fdb99a2e7..c964ee62448fa 100644
--- a/administrator/components/com_admin/admin.xml
+++ b/administrator/components/com_admin/admin.xml
@@ -3,7 +3,7 @@
com_admin
Joomla! Project
April 2006
- (C) 2005 - 2017 Open Source Matters. All rights reserved.
+ (C) 2005 - 2018 Open Source Matters. All rights reserved.
GNU General Public License version 2 or later; see LICENSE.txt
admin@joomla.org
www.joomla.org
diff --git a/administrator/components/com_admin/controller.php b/administrator/components/com_admin/controller.php
new file mode 100644
index 0000000000000..305dbc4fe703a
--- /dev/null
+++ b/administrator/components/com_admin/controller.php
@@ -0,0 +1,19 @@
+id;
+ }
+
+ /**
+ * Overrides parent save method to check the submitted passwords match.
+ *
+ * @param string $key The name of the primary key of the URL variable.
+ * @param string $urlVar The name of the URL variable if different from the primary key (sometimes required to avoid router collisions).
+ *
+ * @return boolean True if successful, false otherwise.
+ *
+ * @since 3.2
+ */
+ public function save($key = null, $urlVar = null)
+ {
+ $this->setRedirect(JRoute::_('index.php?option=com_admin&view=profile&layout=edit&id=' . JFactory::getUser()->id, false));
+
+ $return = parent::save();
+
+ if ($this->getTask() != 'apply')
+ {
+ // Redirect to the main page.
+ $this->setRedirect(JRoute::_('index.php', false));
+ }
+
+ return $return;
+ }
+
+ /**
+ * Method to cancel an edit.
+ *
+ * @param string $key The name of the primary key of the URL variable.
+ *
+ * @return boolean True if access level checks pass, false otherwise.
+ *
+ * @since 1.6
+ */
+ public function cancel($key = null)
+ {
+ $return = parent::cancel($key);
+
+ // Redirect to the main page.
+ $this->setRedirect(JRoute::_('index.php', false));
+
+ return $return;
+ }
+}
diff --git a/administrator/components/com_admin/helpers/html/directory.php b/administrator/components/com_admin/helpers/html/directory.php
index 367988faff920..70df263efb66c 100644
--- a/administrator/components/com_admin/helpers/html/directory.php
+++ b/administrator/components/com_admin/helpers/html/directory.php
@@ -3,7 +3,7 @@
* @package Joomla.Administrator
* @subpackage com_admin
*
- * @copyright Copyright (C) 2005 - 2017 Open Source Matters, Inc. All rights reserved.
+ * @copyright Copyright (C) 2005 - 2018 Open Source Matters, Inc. All rights reserved.
* @license GNU General Public License version 2 or later; see LICENSE.txt
*/
diff --git a/administrator/components/com_admin/helpers/html/phpsetting.php b/administrator/components/com_admin/helpers/html/phpsetting.php
index bf753492dec2d..d84f3cb93ee7e 100644
--- a/administrator/components/com_admin/helpers/html/phpsetting.php
+++ b/administrator/components/com_admin/helpers/html/phpsetting.php
@@ -3,7 +3,7 @@
* @package Joomla.Administrator
* @subpackage com_admin
*
- * @copyright Copyright (C) 2005 - 2017 Open Source Matters, Inc. All rights reserved.
+ * @copyright Copyright (C) 2005 - 2018 Open Source Matters, Inc. All rights reserved.
* @license GNU General Public License version 2 or later; see LICENSE.txt
*/
diff --git a/administrator/components/com_admin/helpers/html/system.php b/administrator/components/com_admin/helpers/html/system.php
index 6d8c3dc7fb804..cd17d6eb05c3e 100644
--- a/administrator/components/com_admin/helpers/html/system.php
+++ b/administrator/components/com_admin/helpers/html/system.php
@@ -3,7 +3,7 @@
* @package Joomla.Administrator
* @subpackage com_admin
*
- * @copyright Copyright (C) 2005 - 2017 Open Source Matters, Inc. All rights reserved.
+ * @copyright Copyright (C) 2005 - 2018 Open Source Matters, Inc. All rights reserved.
* @license GNU General Public License version 2 or later; see LICENSE.txt
*/
diff --git a/administrator/components/com_admin/models/forms/profile.xml b/administrator/components/com_admin/models/forms/profile.xml
new file mode 100644
index 0000000000000..a9242de35fd0a
--- /dev/null
+++ b/administrator/components/com_admin/models/forms/profile.xml
@@ -0,0 +1,163 @@
+
+
diff --git a/administrator/components/com_admin/models/help.php b/administrator/components/com_admin/models/help.php
new file mode 100644
index 0000000000000..ed29c3ab6a1d3
--- /dev/null
+++ b/administrator/components/com_admin/models/help.php
@@ -0,0 +1,209 @@
+help_search))
+ {
+ $this->help_search = JFactory::getApplication()->input->getString('helpsearch');
+ }
+
+ return $this->help_search;
+ }
+
+ /**
+ * Method to get the page
+ *
+ * @return string The page
+ *
+ * @since 1.6
+ */
+ public function &getPage()
+ {
+ if (is_null($this->page))
+ {
+ $this->page = JHelp::createUrl(JFactory::getApplication()->input->get('page', 'JHELP_START_HERE'));
+ }
+
+ return $this->page;
+ }
+
+ /**
+ * Method to get the lang tag
+ *
+ * @return string lang iso tag
+ *
+ * @since 1.6
+ */
+ public function getLangTag()
+ {
+ if (is_null($this->lang_tag))
+ {
+ $this->lang_tag = JFactory::getLanguage()->getTag();
+
+ if (!is_dir(JPATH_BASE . '/help/' . $this->lang_tag))
+ {
+ // Use English as fallback
+ $this->lang_tag = 'en-GB';
+ }
+ }
+
+ return $this->lang_tag;
+ }
+
+ /**
+ * Method to get the table of contents
+ *
+ * @return array Table of contents
+ */
+ public function &getToc()
+ {
+ if (!is_null($this->toc))
+ {
+ return $this->toc;
+ }
+
+ // Get vars
+ $lang_tag = $this->getLangTag();
+ $help_search = $this->getHelpSearch();
+
+ // New style - Check for a TOC JSON file
+ if (file_exists(JPATH_BASE . '/help/' . $lang_tag . '/toc.json'))
+ {
+ $data = json_decode(file_get_contents(JPATH_BASE . '/help/' . $lang_tag . '/toc.json'));
+
+ // Loop through the data array
+ foreach ($data as $key => $value)
+ {
+ $this->toc[$key] = JText::_('COM_ADMIN_HELP_' . $value);
+ }
+
+ // Sort the Table of Contents
+ asort($this->toc);
+
+ return $this->toc;
+ }
+
+ // Get Help files
+ jimport('joomla.filesystem.folder');
+ $files = JFolder::files(JPATH_BASE . '/help/' . $lang_tag, '\.xml$|\.html$');
+ $this->toc = array();
+
+ foreach ($files as $file)
+ {
+ $buffer = file_get_contents(JPATH_BASE . '/help/' . $lang_tag . '/' . $file);
+
+ if (!preg_match('#(.*?)#', $buffer, $m))
+ {
+ continue;
+ }
+
+ $title = trim($m[1]);
+
+ if (!$title)
+ {
+ continue;
+ }
+
+ // Translate the page title
+ $title = JText::_($title);
+
+ // Strip the extension
+ $file = preg_replace('#\.xml$|\.html$#', '', $file);
+
+ if ($help_search && StringHelper::strpos(StringHelper::strtolower(strip_tags($buffer)), StringHelper::strtolower($help_search)) === false)
+ {
+ continue;
+ }
+
+ // Add an item in the Table of Contents
+ $this->toc[$file] = $title;
+ }
+
+ // Sort the Table of Contents
+ asort($this->toc);
+
+ return $this->toc;
+ }
+
+ /**
+ * Method to get the latest version check
+ *
+ * @return string Latest Version Check URL
+ */
+ public function &getLatestVersionCheck()
+ {
+ if (!$this->latest_version_check)
+ {
+ $override = 'https://help.joomla.org/proxy/index.php?keyref=Help{major}{minor}:'
+ . 'Joomla_Version_{major}_{minor}_{maintenance}/{langcode}&lang={langcode}';
+ $this->latest_version_check = JHelp::createUrl('JVERSION', false, $override);
+ }
+
+ return $this->latest_version_check;
+ }
+}
diff --git a/administrator/components/com_admin/models/profile.php b/administrator/components/com_admin/models/profile.php
new file mode 100644
index 0000000000000..79f84acb803e6
--- /dev/null
+++ b/administrator/components/com_admin/models/profile.php
@@ -0,0 +1,162 @@
+loadForm('com_admin.profile', 'profile', array('control' => 'jform', 'load_data' => $loadData));
+
+ if (empty($form))
+ {
+ return false;
+ }
+
+ // Check for username compliance and parameter set
+ $isUsernameCompliant = true;
+
+ if ($this->loadFormData()->username)
+ {
+ $username = $this->loadFormData()->username;
+ $isUsernameCompliant = !(preg_match('#[<>"\'%;()&\\\\]|\\.\\./#', $username) || strlen(utf8_decode($username)) < 2
+ || trim($username) != $username);
+ }
+
+ $this->setState('user.username.compliant', $isUsernameCompliant);
+
+ if (!JComponentHelper::getParams('com_users')->get('change_login_name') && $isUsernameCompliant)
+ {
+ $form->setFieldAttribute('username', 'required', 'false');
+ $form->setFieldAttribute('username', 'readonly', 'true');
+ $form->setFieldAttribute('username', 'description', 'COM_ADMIN_USER_FIELD_NOCHANGE_USERNAME_DESC');
+ }
+
+ // When multilanguage is set, a user's default site language should also be a Content Language
+ if (JLanguageMultilang::isEnabled())
+ {
+ $form->setFieldAttribute('language', 'type', 'frontend_language', 'params');
+ }
+
+ // If the user needs to change their password, mark the password fields as required
+ if (JFactory::getUser()->requireReset)
+ {
+ $form->setFieldAttribute('password', 'required', 'true');
+ $form->setFieldAttribute('password2', 'required', 'true');
+ }
+
+ return $form;
+ }
+
+ /**
+ * Method to get the data that should be injected in the form.
+ *
+ * @return mixed The data for the form.
+ *
+ * @since 1.6
+ */
+ protected function loadFormData()
+ {
+ // Check the session for previously entered form data.
+ $data = JFactory::getApplication()->getUserState('com_users.edit.user.data', array());
+
+ if (empty($data))
+ {
+ $data = $this->getItem();
+ }
+
+ // Load the users plugins.
+ JPluginHelper::importPlugin('user');
+
+ $this->preprocessData('com_admin.profile', $data);
+
+ return $data;
+ }
+
+ /**
+ * Method to get a single record.
+ *
+ * @param integer $pk The id of the primary key.
+ *
+ * @return mixed Object on success, false on failure.
+ *
+ * @since 1.6
+ */
+ public function getItem($pk = null)
+ {
+ return parent::getItem(JFactory::getUser()->id);
+ }
+
+ /**
+ * Method to save the form data.
+ *
+ * @param array $data The form data.
+ *
+ * @return boolean True on success.
+ *
+ * @since 1.6
+ */
+ public function save($data)
+ {
+ $user = JFactory::getUser();
+
+ unset($data['id']);
+ unset($data['groups']);
+ unset($data['sendEmail']);
+ unset($data['block']);
+
+ $isUsernameCompliant = $this->getState('user.username.compliant');
+
+ if (!JComponentHelper::getParams('com_users')->get('change_login_name') && $isUsernameCompliant)
+ {
+ unset($data['username']);
+ }
+
+ // Bind the data.
+ if (!$user->bind($data))
+ {
+ $this->setError($user->getError());
+
+ return false;
+ }
+
+ $user->groups = null;
+
+ // Store the data.
+ if (!$user->save())
+ {
+ $this->setError($user->getError());
+
+ return false;
+ }
+
+ $this->setState('user.id', $user->id);
+
+ return true;
+ }
+}
diff --git a/administrator/components/com_admin/models/sysinfo.php b/administrator/components/com_admin/models/sysinfo.php
new file mode 100644
index 0000000000000..b08decc9be32a
--- /dev/null
+++ b/administrator/components/com_admin/models/sysinfo.php
@@ -0,0 +1,744 @@
+ array(
+ 'CONTEXT_DOCUMENT_ROOT',
+ 'Cookie',
+ 'DOCUMENT_ROOT',
+ 'extension_dir',
+ 'error_log',
+ 'Host',
+ 'HTTP_COOKIE',
+ 'HTTP_HOST',
+ 'HTTP_ORIGIN',
+ 'HTTP_REFERER',
+ 'HTTP Request',
+ 'include_path',
+ 'mysql.default_socket',
+ 'MYSQL_SOCKET',
+ 'MYSQL_INCLUDE',
+ 'MYSQL_LIBS',
+ 'mysqli.default_socket',
+ 'MYSQLI_SOCKET',
+ 'PATH',
+ 'Path to sendmail',
+ 'pdo_mysql.default_socket',
+ 'Referer',
+ 'REMOTE_ADDR',
+ 'SCRIPT_FILENAME',
+ 'sendmail_path',
+ 'SERVER_ADDR',
+ 'SERVER_ADMIN',
+ 'Server Administrator',
+ 'SERVER_NAME',
+ 'Server Root',
+ 'session.name',
+ 'session.save_path',
+ 'upload_tmp_dir',
+ 'User/Group',
+ 'open_basedir',
+ ),
+ 'other' => array(
+ 'db',
+ 'dbprefix',
+ 'fromname',
+ 'live_site',
+ 'log_path',
+ 'mailfrom',
+ 'memcache_server_host',
+ 'memcached_server_host',
+ 'open_basedir',
+ 'Origin',
+ 'proxy_host',
+ 'proxy_user',
+ 'proxy_pass',
+ 'redis_server_host',
+ 'redis_server_auth',
+ 'secret',
+ 'sendmail',
+ 'session.save_path',
+ 'session_memcache_server_host',
+ 'session_memcached_server_host',
+ 'session_redis_server_host',
+ 'session_redis_server_auth',
+ 'sitename',
+ 'smtphost',
+ 'tmp_path',
+ 'open_basedir',
+ )
+ );
+
+ /**
+ * System values that can be "safely" shared
+ *
+ * @var array
+ *
+ * @since 3.5
+ */
+ protected $safeData;
+
+ /**
+ * Information about writable state of directories
+ *
+ * @var array
+ * @since 1.6
+ */
+ protected $directories = array();
+
+ /**
+ * The current editor.
+ *
+ * @var string
+ * @since 1.6
+ */
+ protected $editor = null;
+
+ /**
+ * Remove sections of data marked as private in the privateSettings
+ *
+ * @param array $dataArray Array with data tha may contain private informati
+ * @param string $dataType Type of data to search for a specific section in the privateSettings array
+ *
+ * @return array
+ *
+ * @since 3.5
+ */
+ protected function cleanPrivateData($dataArray, $dataType = 'other')
+ {
+ $dataType = isset($this->privateSettings[$dataType]) ? $dataType : 'other';
+
+ $privateSettings = $this->privateSettings[$dataType];
+
+ if (!$privateSettings)
+ {
+ return $dataArray;
+ }
+
+ foreach ($dataArray as $section => $values)
+ {
+ if (is_array($values))
+ {
+ $dataArray[$section] = $this->cleanPrivateData($values, $dataType);
+ }
+
+ if (in_array($section, $privateSettings, true))
+ {
+ $dataArray[$section] = $this->cleanSectionPrivateData($values);
+ }
+ }
+
+ return $dataArray;
+ }
+
+ /**
+ * Obfuscate section values
+ *
+ * @param mixed $sectionValues Section data
+ *
+ * @return mixed
+ *
+ * @since 3.5
+ */
+ protected function cleanSectionPrivateData($sectionValues)
+ {
+ if (!is_array($sectionValues))
+ {
+ if (strstr($sectionValues, JPATH_ROOT))
+ {
+ $sectionValues = 'xxxxxx';
+ }
+
+ return strlen($sectionValues) ? 'xxxxxx' : '';
+ }
+
+ foreach ($sectionValues as $setting => $value)
+ {
+ $sectionValues[$setting] = strlen($value) ? 'xxxxxx' : '';
+ }
+
+ return $sectionValues;
+ }
+
+ /**
+ * Method to get the PHP settings
+ *
+ * @return array Some PHP settings
+ *
+ * @since 1.6
+ */
+ public function &getPhpSettings()
+ {
+ if (!empty($this->php_settings))
+ {
+ return $this->php_settings;
+ }
+
+ $this->php_settings = array(
+ 'safe_mode' => ini_get('safe_mode') == '1',
+ 'display_errors' => ini_get('display_errors') == '1',
+ 'short_open_tag' => ini_get('short_open_tag') == '1',
+ 'file_uploads' => ini_get('file_uploads') == '1',
+ 'magic_quotes_gpc' => ini_get('magic_quotes_gpc') == '1',
+ 'register_globals' => ini_get('register_globals') == '1',
+ 'output_buffering' => (int) ini_get('output_buffering') !== 0,
+ 'open_basedir' => ini_get('open_basedir'),
+ 'session.save_path' => ini_get('session.save_path'),
+ 'session.auto_start' => ini_get('session.auto_start'),
+ 'disable_functions' => ini_get('disable_functions'),
+ 'xml' => extension_loaded('xml'),
+ 'zlib' => extension_loaded('zlib'),
+ 'zip' => function_exists('zip_open') && function_exists('zip_read'),
+ 'mbstring' => extension_loaded('mbstring'),
+ 'iconv' => function_exists('iconv'),
+ 'max_input_vars' => ini_get('max_input_vars'),
+ );
+
+ return $this->php_settings;
+ }
+
+ /**
+ * Method to get the config
+ *
+ * @return array config values
+ *
+ * @since 1.6
+ */
+ public function &getConfig()
+ {
+ if (!empty($this->config))
+ {
+ return $this->config;
+ }
+
+ $registry = new Registry(new JConfig);
+ $this->config = $registry->toArray();
+ $hidden = array('host', 'user', 'password', 'ftp_user', 'ftp_pass', 'smtpuser', 'smtppass',);
+
+ foreach ($hidden as $key)
+ {
+ $this->config[$key] = 'xxxxxx';
+ }
+
+ return $this->config;
+ }
+
+ /**
+ * Method to get the system information
+ *
+ * @return array System information values
+ *
+ * @since 1.6
+ */
+ public function &getInfo()
+ {
+ if (!empty($this->info))
+ {
+ return $this->info;
+ }
+
+ $version = new JVersion;
+ $platform = new JPlatform;
+ $db = $this->getDbo();
+
+ $this->info = array(
+ 'php' => php_uname(),
+ 'dbserver' => $db->getServerType(),
+ 'dbversion' => $db->getVersion(),
+ 'dbcollation' => $db->getCollation(),
+ 'dbconnectioncollation' => $db->getConnectionCollation(),
+ 'phpversion' => phpversion(),
+ 'server' => isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : getenv('SERVER_SOFTWARE'),
+ 'sapi_name' => php_sapi_name(),
+ 'version' => $version->getLongVersion(),
+ 'platform' => $platform->getLongVersion(),
+ 'useragent' => isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '',
+ );
+
+ return $this->info;
+ }
+
+ /**
+ * Check if the phpinfo function is enabled
+ *
+ * @return boolean True if enabled
+ *
+ * @since 3.4.1
+ */
+ public function phpinfoEnabled()
+ {
+ return !in_array('phpinfo', explode(',', ini_get('disable_functions')));
+ }
+
+ /**
+ * Method to get filter data from the model
+ *
+ * @param string $dataType Type of data to get safely
+ * @param bool $public If true no sensitive information will be removed
+ *
+ * @return array
+ *
+ * @since 3.5
+ */
+ public function getSafeData($dataType, $public = true)
+ {
+ if (isset($this->safeData[$dataType]))
+ {
+ return $this->safeData[$dataType];
+ }
+
+ $methodName = 'get' . ucfirst($dataType);
+
+ if (!method_exists($this, $methodName))
+ {
+ return array();
+ }
+
+ $data = $this->$methodName($public);
+
+ $this->safeData[$dataType] = $this->cleanPrivateData($data, $dataType);
+
+ return $this->safeData[$dataType];
+ }
+
+ /**
+ * Method to get the PHP info
+ *
+ * @return string PHP info
+ *
+ * @since 1.6
+ */
+ public function &getPHPInfo()
+ {
+ if (!$this->phpinfoEnabled())
+ {
+ $this->php_info = JText::_('COM_ADMIN_PHPINFO_DISABLED');
+
+ return $this->php_info;
+ }
+
+ if (!is_null($this->php_info))
+ {
+ return $this->php_info;
+ }
+
+ ob_start();
+ date_default_timezone_set('UTC');
+ phpinfo(INFO_GENERAL | INFO_CONFIGURATION | INFO_MODULES);
+ $phpInfo = ob_get_contents();
+ ob_end_clean();
+ preg_match_all('#]*>(.*) #siU', $phpInfo, $output);
+ $output = preg_replace('#