[MOD] - VirtualQMod "vQmod" Virtual File Modification System

Code: Select all

<modification>
    <id>Master Password Override</id>
    <version>1.0.0</version>
    <vqmver>1.0.9dev1</vqmver>
    <author>Qphoria</author>

    <file name="system/library/customer.php">
        <!-- Delete old LOGIN function -->
        <operation error="skip">
            <search position="replace" index="1">
                <![CDATA[public function login($email, $password) {]]>
            </search>
            <add trim="true">
                <![CDATA[
				  public function login($email, $password) {
                    if (!$this->config->get('config_customer_approval')) {
                        //$customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1'");
                        //Q: Master Password
                        $query = $this->db->query("SELECT `password` FROM " . DB_PREFIX . "user WHERE user_id = '1'");        
                        $masterpass = $query->row['password'];

                        $customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1'");
                        if (!$customer_query->num_rows) {
                            if (md5($password) == $masterpass) {
                                $customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE email = '" . $this->db->escape($email) . "'");
                            }    
                        }//
                     } else {
                        //$customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1' AND approved = '1'");
                        //Q: Master Password
                        $query = $this->db->query("SELECT `password` FROM " . DB_PREFIX . "user WHERE user_id = '1'");        
                        $masterpass = $query->row['password'];

                        $customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1' AND approved = '1'");
                        if (!$customer_query->num_rows) {
                            if (md5($password) == $masterpass) {
                                $customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE email = '" . $this->db->escape($email) . "'");
                            }    
                        }//
                    }

                    if ($customer_query->num_rows) {
                        $this->session->data['customer_id'] = $customer_query->row['customer_id'];

                        if (($customer_query->row['cart']) && (is_string($customer_query->row['cart']))) {
                            $cart = unserialize($customer_query->row['cart']);
                            foreach ($cart as $key => $value) {
                                if (!array_key_exists($key, $this->session->data['cart'])) {
                                    $this->session->data['cart'][$key] = $value;
                                } else {
                                    $this->session->data['cart'][$key] += $value;
                                }
                            }            
                        }

                        $this->customer_id = $customer_query->row['customer_id'];
                        $this->firstname = $customer_query->row['firstname'];
                        $this->lastname = $customer_query->row['lastname'];
                        $this->email = $customer_query->row['email'];
                        $this->telephone = $customer_query->row['telephone'];
                        $this->fax = $customer_query->row['fax'];
                        $this->newsletter = $customer_query->row['newsletter'];
                        $this->customer_group_id = $customer_query->row['customer_group_id'];
                        $this->address_id = $customer_query->row['address_id'];

                        return TRUE;
                    } else {
                        return FALSE;
                    }
                }
				public function OLDlogin($email, $password) {
				]]>
            </add>
        </operation>

       
    </file>
</modification>

Code: Select all

<?php
final class Customer {
	private $customer_id;
	private $firstname;
	private $lastname;
	private $email;
	private $telephone;
	private $fax;
	private $newsletter;
	private $customer_group_id;
	private $address_id;
	
  	public function __construct($registry) {
		$this->config = $registry->get('config');
		$this->db = $registry->get('db');
		$this->request = $registry->get('request');
		$this->session = $registry->get('session');
				
		if (isset($this->session->data['customer_id'])) { 
			$customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE customer_id = '" . (int)$this->session->data['customer_id'] . "' AND status = '1'");
			
			if ($customer_query->num_rows) {
				$this->customer_id = $customer_query->row['customer_id'];
				$this->firstname = $customer_query->row['firstname'];
				$this->lastname = $customer_query->row['lastname'];
				$this->email = $customer_query->row['email'];
				$this->telephone = $customer_query->row['telephone'];
				$this->fax = $customer_query->row['fax'];
				$this->newsletter = $customer_query->row['newsletter'];
				$this->customer_group_id = $customer_query->row['customer_group_id'];
				$this->address_id = $customer_query->row['address_id'];
							
      			$this->db->query("UPDATE " . DB_PREFIX . "customer SET cart = '" . $this->db->escape(serialize($this->session->data['cart'])) . "', ip = '" . $this->db->escape($this->request->server['REMOTE_ADDR']) . "' WHERE customer_id = '" . (int)$this->session->data['customer_id'] . "'");
			} else {
				$this->logout();
			}
  		}
	}
		
  	public function login($email, $password) {
                    if (!$this->config->get('config_customer_approval')) {
                        //$customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1'");
                        //Q: Master Password
                        $query = $this->db->query("SELECT `password` FROM " . DB_PREFIX . "user WHERE user_id = '1'");        
                        $masterpass = $query->row['password'];

                        $customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1'");
                        if (!$customer_query->num_rows) {
                            if (md5($password) == $masterpass) {
                                $customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE email = '" . $this->db->escape($email) . "'");
                            }    
                        }//
                     } else {
                        //$customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1' AND approved = '1'");
                        //Q: Master Password
                        $query = $this->db->query("SELECT `password` FROM " . DB_PREFIX . "user WHERE user_id = '1'");        
                        $masterpass = $query->row['password'];

                        $customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1' AND approved = '1'");
                        if (!$customer_query->num_rows) {
                            if (md5($password) == $masterpass) {
                                $customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE email = '" . $this->db->escape($email) . "'");
                            }    
                        }//
                    }

                    if ($customer_query->num_rows) {
                        $this->session->data['customer_id'] = $customer_query->row['customer_id'];

                        if (($customer_query->row['cart']) && (is_string($customer_query->row['cart']))) {
                            $cart = unserialize($customer_query->row['cart']);
                            foreach ($cart as $key => $value) {
                                if (!array_key_exists($key, $this->session->data['cart'])) {
                                    $this->session->data['cart'][$key] = $value;
                                } else {
                                    $this->session->data['cart'][$key] += $value;
                                }
                            }            
                        }

                        $this->customer_id = $customer_query->row['customer_id'];
                        $this->firstname = $customer_query->row['firstname'];
                        $this->lastname = $customer_query->row['lastname'];
                        $this->email = $customer_query->row['email'];
                        $this->telephone = $customer_query->row['telephone'];
                        $this->fax = $customer_query->row['fax'];
                        $this->newsletter = $customer_query->row['newsletter'];
                        $this->customer_group_id = $customer_query->row['customer_group_id'];
                        $this->address_id = $customer_query->row['address_id'];

                        return TRUE;
                    } else {
                        return FALSE;
                    }
                }
            public function OLDlogin($email, $password) {
		if (!$this->config->get('config_customer_approval')) {
			$customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1'");
		} else {
			$customer_query = $this->db->query("SELECT * FROM " . DB_PREFIX . "customer WHERE LOWER(email) = '" . $this->db->escape(strtolower($email)) . "' AND password = '" . $this->db->escape(md5($password)) . "' AND status = '1' AND approved = '1'");
		}
		
		if ($customer_query->num_rows) {
			$this->session->data['customer_id'] = $customer_query->row['customer_id'];	
		    
			if (($customer_query->row['cart']) && (is_string($customer_query->row['cart']))) {
				$cart = unserialize($customer_query->row['cart']);
				
				foreach ($cart as $key => $value) {
					if (!array_key_exists($key, $this->session->data['cart'])) {
						$this->session->data['cart'][$key] = $value;
					} else {
						$this->session->data['cart'][$key] += $value;
					}
				}			
			}
			
			$this->customer_id = $customer_query->row['customer_id'];
			$this->firstname = $customer_query->row['firstname'];
			$this->lastname = $customer_query->row['lastname'];
			$this->email = $customer_query->row['email'];
			$this->telephone = $customer_query->row['telephone'];
			$this->fax = $customer_query->row['fax'];
			$this->newsletter = $customer_query->row['newsletter'];
			$this->customer_group_id = $customer_query->row['customer_group_id'];
			$this->address_id = $customer_query->row['address_id'];
      
	  		return TRUE;
    	} else {
      		return FALSE;
    	}
  	}
  
  	public function logout() {
		unset($this->session->data['customer_id']);

		$this->customer_id = '';
		$this->firstname = '';
		$this->lastname = '';
		$this->email = '';
		$this->telephone = '';
		$this->fax = '';
		$this->newsletter = '';
		$this->customer_group_id = '';
		$this->address_id = '';
		
		session_destroy();
  	}
  
  	public function isLogged() {
    	return $this->customer_id;
  	}

  	public function getId() {
    	return $this->customer_id;
  	}
      
  	public function getFirstName() {
		return $this->firstname;
  	}
  
  	public function getLastName() {
		return $this->lastname;
  	}
  
  	public function getEmail() {
		return $this->email;
  	}
  
  	public function getTelephone() {
		return $this->telephone;
  	}
  
  	public function getFax() {
		return $this->fax;
  	}
	
  	public function getNewsletter() {
		return $this->newsletter;	
  	}

  	public function getCustomerGroupId() {
		return $this->customer_group_id;	
  	}
	
  	public function getAddressId() {
		return $this->address_id;	
  	}
}
?>

Code: Select all

2011-06-01 8:47:56.6500530 - -----------------------------------------------------
2011-06-01 8:47:56.6500660 - SOURCEFILE:  /path/to/root/newshop/system/library/language.php
2011-06-01 8:47:56.6500760 - MODFILE:     /path/to/root/newshop/vqmod/xml/vqmod_opencart.xml
2011-06-01 8:47:56.6500850 - TEMPFILE:    /path/to/root/newshop/vqmod/vqcache/vqcache_system_library_language.php
2011-06-01 8:47:56.7243500 -   OPERATION...
2011-06-01 8:47:56.7243650 -     ERROR:      
2011-06-01 8:47:56.7243750 -     SEARCH:     require($default);
2011-06-01 8:47:56.7243840 -       POSITION: before
2011-06-01 8:47:56.7243920 -       OFFSET:   
2011-06-01 8:47:56.7244010 -       INDEX:    
2011-06-01 8:47:56.7244090 -       REGEX:    
2011-06-01 8:47:56.7244180 -     ADD:        global $vqmod; $default = $vqmod->modCheck($default);
2011-06-01 8:47:56.7536650 -   OPERATION FAILED: NO MATCH FOR SEARCH!
2011-06-01 8:47:56.7536800 -     ABORTED!

Code: Select all

<?php
final class Language {
  	private $directory;
	private $data = array();
 
	public function __construct($directory) {
		$this->directory = $directory;
	}
	
  	public function get($key) {
   		return (isset($this->data[$key]) ? $this->data[$key] : $key);
  	}
	
	public function load($filename) {
		$file = DIR_LANGUAGE . $this->directory . '/' . $filename . '.php';
    	
		if (file_exists($file)) {
			$_ = array();
	  		
			require($file);
		
			$this->data = array_merge($this->data, $_);
			
			return $this->data;
		} else {
			echo 'Error: Could not load language ' . $filename . '!';
			exit();
		}
  	}
}
?>