Paypal plugin know issues

Version 1.3.0

Search return all products. Please replace plugin_dopluginsearch_paypal function in functions.inc Fix in vers. 1.3.0.2

function plugin_dopluginsearch_paypal($query, $datestart, $dateend, $topic, $type, $author, $keyType, $page, $perpage)
{
    global $_TABLES, $_PAY_CONF, $LANG_PAYPAL_1;
 
    // Make sure the query is SQL safe
    $query = trim(addslashes($query));
 
    $sql = "SELECT id, name as title, price, pi_filename, short_description  as description, UNIX_TIMESTAMP() AS date, owner_id AS uid, hits, ";
    $sql .= "CONCAT('/{$_PAY_CONF['paypal_folder']}/product_detail.php?product=', id) AS url ";
    $sql .= "FROM {$_TABLES['paypal_products']} AS p ";
    $sql .= "LEFT JOIN {$_TABLES['paypal_images']} AS i
            ON i.pi_pid = p.id AND i.pi_img_num IN (SELECT MIN(pi_img_num) FROM {$_TABLES['paypal_images']} WHERE pi_img_num = 1 AND pi_pid = p.id) ";
    $sql .= "WHERE active = '1'
            AND hidden = '0' ";
 
    $search = new SearchCriteria('paypal', $LANG_paypal_1['products']);
 
    $columns = array('name', 'short_description');
    list($sql,$ftsql) = $search->buildSearchSQL($keyType, $query, $columns, $sql);
 
    $search->setRank(3);
 
    $formattedResults = array();
 
    $result = DB_query($sql);
    if ($result) {
        if (DB_numRows($result) == 0) {
            return '';
        }
        while ($row = DB_fetchArray($result)) {
            //First product image
            if ($row['pi_filename'] == '') {
                $image = '';
            } else {
                $image = ' <a class="lightbox" href="' . $_PAY_CONF['images_url'] . $row['pi_filename'] . '"><img class="lightbox" src="'. $_PAY_CONF['site_url'] . '/timthumb.php?src=' . $_PAY_CONF['images_url'] . $row['pi_filename'] . '&amp;h=55&amp;zc=1&amp;q=100" alt="' . $row['title'] . '" align="top" style="margin-top:3px;"/></a>';
            }
            $formattedResults[] = array(LF_SOURCE_NAME=>'paypal',
                                LF_SOURCE_TITLE=>$LANG_paypal_1['products'],
                                'title'=>$row['title'] . ' | ' . $row['price'] . ' ' . $_PAY_CONF['currency'],
                                'description'=>$row['description'],
                                'date'=>$row['date'],
                                'url'=>$row['url'],
                                'hits'=>$row['hits'],
                                'uid'=> COM_createLink(htmlspecialchars(COM_getDisplayName( $row['uid'] )),
                                    $_CONF['site_url'] . '/users.php?mode=profile&amp;uid=' . $row['uid']) . $image
                                 );
        }
    }
 
 
 
    $search->setResults($formattedResults);
 
    return $search;
}

Version 1.2.1

Reported by Ivy : Usage of the COM_startBlock on the index page (function PAYPAL_displayProducts) is not a good choice. This will be change in the next version.

Reported by Ivy : Old images in the cache folder are not delete and in some case the timthumb script can make an error reading the image file. Please replace the public_html/paypal/timthumb.php file

<?php
/*
    TimThumb script created by Tim McDaniels and Darren Hoyt with tweaks by Ben Gillbanks
    http://code.google.com/p/timthumb/
 
    MIT License: http://www.opensource.org/licenses/mit-license.php
 
    Paramters
    ---------
    w: width
    h: height
    zc: zoom crop (0 or 1)
    q: quality (default is 75 and max is 100)
 
    HTML example: <img src="/scripts/timthumb.php?src=/images/whatever.jpg&w=150&h=200&zc=1" alt="" />
*/
 
/*
$sizeLimits = array(
    "100x100",
    "150x150",
);
*/
 
define ('CACHE_SIZE', 250);        // number of files to store before clearing cache
define ('CACHE_CLEAR', 5);        // maximum number of files to delete on each cache clear
define ('VERSION', '1.1');        // version number (to force a cache refresh
 
$imageFilters = array(
    "1" => array(IMG_FILTER_NEGATE, 0),
    "2" => array(IMG_FILTER_GRAYSCALE, 0),
    "3" => array(IMG_FILTER_BRIGHTNESS, 1),
    "4" => array(IMG_FILTER_CONTRAST, 1),
    "5" => array(IMG_FILTER_COLORIZE, 4),
    "6" => array(IMG_FILTER_EDGEDETECT, 0),
    "7" => array(IMG_FILTER_EMBOSS, 0),
    "8" => array(IMG_FILTER_GAUSSIAN_BLUR, 0),
    "9" => array(IMG_FILTER_SELECTIVE_BLUR, 0),
    "10" => array(IMG_FILTER_MEAN_REMOVAL, 0),
    "11" => array(IMG_FILTER_SMOOTH, 0),
);
 
// sort out image source
$src = get_request("src", "");
if($src == "" || strlen($src) <= 3) {
    displayError("no image specified");
}
 
// clean params before use
$src = cleanSource($src);
// last modified time (for caching)
$lastModified = filemtime($src);
 
// get properties
$new_width         = preg_replace("/[^0-9]+/", "", get_request("w", 0));
$new_height     = preg_replace("/[^0-9]+/", "", get_request("h", 0));
$zoom_crop         = preg_replace("/[^0-9]+/", "", get_request("zc", 1));
$quality         = preg_replace("/[^0-9]+/", "", get_request("q", 80));
$filters        = get_request("f", "");
 
if ($new_width == 0 && $new_height == 0) {
    $new_width = 100;
    $new_height = 100;
}
 
// set path to cache directory (default is ./cache)
// this can be changed to a different location
require_once '../lib-common.php';
$cache_dir = $_CONF['path_images'] . '/paypal/cache';
 
// get mime type of src
$mime_type = mime_type($src);
 
// check to see if this image is in the cache already
check_cache( $cache_dir, $mime_type );
 
// if not in cache then clear some space and generate a new file
cleanCache($cache_dir);
 
ini_set('memory_limit', "30M");
 
// make sure that the src is gif/jpg/png
if(!valid_src_mime_type($mime_type)) {
    displayError("Invalid src mime type: " .$mime_type);
}
 
// check to see if GD function exist
if(!function_exists('imagecreatetruecolor')) {
    displayError("GD Library Error: imagecreatetruecolor does not exist");
}
 
if(strlen($src) && file_exists($src)) {
 
    // open the existing image
    $image = open_image($mime_type, $src);
    if($image === false) {
        displayError('Unable to open image : ' . $src);
    }
 
    // Get original width and height
    $width = imagesx($image);
    $height = imagesy($image);
 
    // don't allow new width or height to be greater than the original
    if( $new_width > $width ) {
        $new_width = $width;
    }
    if( $new_height > $height ) {
        $new_height = $height;
    }
 
    // generate new w/h if not provided
    if( $new_width && !$new_height ) {
 
        $new_height = $height * ( $new_width / $width );
 
    } elseif($new_height && !$new_width) {
 
        $new_width = $width * ( $new_height / $height );
 
    } elseif(!$new_width && !$new_height) {
 
        $new_width = $width;
        $new_height = $height;
 
    }
 
    // create a new true color image
    $canvas = imagecreatetruecolor( $new_width, $new_height );
    imagealphablending($canvas, false);
    // Create a new transparent color for image
    $color = imagecolorallocatealpha($canvas, 0, 0, 0, 127);
    // Completely fill the background of the new image with allocated color.
    imagefill($canvas, 0, 0, $color);
    // Restore transparency blending
    imagesavealpha($canvas, true);
 
    if( $zoom_crop ) {
 
        $src_x = $src_y = 0;
        $src_w = $width;
        $src_h = $height;
 
        $cmp_x = $width  / $new_width;
        $cmp_y = $height / $new_height;
 
        // calculate x or y coordinate and width or height of source
 
        if ( $cmp_x > $cmp_y ) {
 
            $src_w = round( ( $width / $cmp_x * $cmp_y ) );
            $src_x = round( ( $width - ( $width / $cmp_x * $cmp_y ) ) / 2 );
 
        } elseif ( $cmp_y > $cmp_x ) {
 
            $src_h = round( ( $height / $cmp_y * $cmp_x ) );
            $src_y = round( ( $height - ( $height / $cmp_y * $cmp_x ) ) / 2 );
 
        }
 
        imagecopyresampled( $canvas, $image, 0, 0, $src_x, $src_y, $new_width, $new_height, $src_w, $src_h );
 
    } else {
 
        // copy and resize part of an image with resampling
        imagecopyresampled( $canvas, $image, 0, 0, 0, 0, $new_width, $new_height, $width, $height );
 
    }
 
    if ($filters != "") {
        // apply filters to image
        $filterList = explode("|", $filters);
        foreach($filterList as $fl) {
            $filterSettings = explode(",", $fl);
            if(isset($imageFilters[$filterSettings[0]])) {
 
                for($i = 0; $i < 4; $i ++) {
                    if(!isset($filterSettings[$i])) {
                        $filterSettings[$i] = null;
                    }
                }
 
                switch($imageFilters[$filterSettings[0]][1]) {
 
                    case 1:
 
                        imagefilter($canvas, $imageFilters[$filterSettings[0]][0], $filterSettings[1]);
                        break;
 
                    case 2:
 
                        imagefilter($canvas, $imageFilters[$filterSettings[0]][0], $filterSettings[1], $filterSettings[2]);
                        break;
 
                    case 3:
 
                        imagefilter($canvas, $imageFilters[$filterSettings[0]][0], $filterSettings[1], $filterSettings[2], $filterSettings[3]);
                        break;
 
                    default:
 
                        imagefilter($canvas, $imageFilters[$filterSettings[0]][0]);
                        break;
 
                }
            }
        }
    }
 
    // output image to browser based on mime type
    show_image($mime_type, $canvas, $cache_dir);
 
    // remove image from memory
    imagedestroy($canvas);
 
} else {
 
    if(strlen($src)) {
        displayError("image " . $src . " not found");
    } else {
        displayError("no source specified");
    }
 
}
 
/**
 *
 */
function show_image($mime_type, $image_resized, $cache_dir) {
 
    global $quality;
 
    // check to see if we can write to the cache directory
    $is_writable = 0;
    $cache_file_name = $cache_dir . '/' . get_cache_file();
 
    if(touch($cache_file_name)) {
 
        // give 666 permissions so that the developer
        // can overwrite web server user
        chmod($cache_file_name, 0666);
        $is_writable = 1;
 
    } else {
 
        $cache_file_name = NULL;
        header('Content-type: ' . $mime_type);
 
    }
 
    $quality = floor($quality * 0.09);
 
    imagepng($image_resized, $cache_file_name, $quality);
 
    if($is_writable) {
        show_cache_file($cache_dir, $mime_type);
    }
 
    imagedestroy($image_resized);
 
    displayError("error showing image");
 
}
 
/**
 *
 */
function get_request( $property, $default = 0 ) {
 
    if( isset($_REQUEST[$property]) ) {
 
        return $_REQUEST[$property];
 
    } else {
 
        return $default;
 
    }
 
}
 
/**
 *
 */
function open_image($mime_type, $src) {
 
    if(stristr($mime_type, 'gif')) {
 
        $image = imagecreatefromgif($src);
 
    } elseif(stristr($mime_type, 'jpeg')) {
 
        @ini_set('gd.jpeg_ignore_warning', 1);
        $image = imagecreatefromjpeg($src);
 
    } elseif( stristr($mime_type, 'png')) {
 
        $image = imagecreatefrompng($src);
 
    }
 
    return $image;
 
}
 
/**
 * clean out old files from the cache
 * you can change the number of files to store and to delete per loop in the defines at the top of the code
 */
function cleanCache($cache_dir) {
 
    $files = glob($cache_dir . "/*", GLOB_BRACE);
 
    $yesterday = time() - (24 * 60 * 60);
 
    if (count($files) > 0 && is_array($files) ){
 
        usort($files, "filemtime_compare");
        $i = 0;
 
        if (count($files) > CACHE_SIZE) {
 
            foreach ($files as $file) {
 
                $i ++;
 
                if ($i >= CACHE_CLEAR) {
                    return;
                }
 
                if (filemtime($file) > $yesterday) {
                    return;
                }
 
                unlink($file);
 
            }
 
        }
 
    }
 
}
 
/**
 * compare the file time of two files
 */
function filemtime_compare($a, $b) {
 
    return filemtime($a) - filemtime($b);
 
}
 
/**
 * determine the file mime type
 */
function mime_type($file) {
 
    if (stristr(PHP_OS, 'WIN')) {
        $os = 'WIN';
    } else {
        $os = PHP_OS;
    }
 
    $mime_type = '';
 
    if (function_exists('mime_content_type')) {
        $mime_type = mime_content_type($file);
    }
 
    // use PECL fileinfo to determine mime type
    if (!valid_src_mime_type($mime_type)) {
        if (function_exists('finfo_open')) {
            $finfo = finfo_open(FILEINFO_MIME);
            $mime_type = finfo_file($finfo, $file);
            finfo_close($finfo);
        }
    }
 
    // try to determine mime type by using unix file command
    // this should not be executed on windows
    if (!valid_src_mime_type($mime_type) && $os != "WIN") {
        if (preg_match("/FREEBSD|LINUX/", $os)) {
            $mime_type = trim(@shell_exec('file -bi "' . $file . '"'));
        }
    }
 
    // use file's extension to determine mime type
    if (!valid_src_mime_type($mime_type)) {
 
        // set defaults
        $mime_type = 'image/png';
        // file details
        $fileDetails = pathinfo($file);
        $ext = strtolower($fileDetails["extension"]);
        // mime types
        $types = array(
             'jpg'  => 'image/jpeg',
             'jpeg' => 'image/jpeg',
             'png'  => 'image/png',
             'gif'  => 'image/gif'
         );
 
        if (strlen($ext) && strlen($types[$ext])) {
            $mime_type = $types[$ext];
        }
 
    }
 
    return $mime_type;
 
}
 
/**
 *
 */
function valid_src_mime_type($mime_type) {
 
    if (preg_match("/jpg|jpeg|gif|png/i", $mime_type)) {
        return true;
    }
 
    return false;
 
}
 
/**
 *
 */
function check_cache($cache_dir, $mime_type) {
 
    // make sure cache dir exists
    if (!file_exists($cache_dir)) {
        // give 777 permissions so that developer can overwrite
        // files created by web server user
        mkdir($cache_dir);
        chmod($cache_dir, 0755);
    }
 
    show_cache_file($cache_dir, $mime_type);
 
}
 
/**
 *
 */
function show_cache_file($cache_dir) {
 
    $cache_file = $cache_dir . '/' . get_cache_file();
 
    if (file_exists($cache_file)) {
 
        $gmdate_mod = gmdate("D, d M Y H:i:s", filemtime($cache_file));
 
        if(! strstr($gmdate_mod, "GMT")) {
            $gmdate_mod .= " GMT";
        }
 
        if (isset($_SERVER["HTTP_IF_MODIFIED_SINCE"])) {
 
            // check for updates
            $if_modified_since = preg_replace("/;.*$/", "", $_SERVER["HTTP_IF_MODIFIED_SINCE"]);
 
            if ($if_modified_since == $gmdate_mod) {
                header("HTTP/1.1 304 Not Modified");
                exit;
            }
 
        }
 
        $fileSize = filesize($cache_file);
 
        // send headers then display image
        header("Content-Type: image/png");
        header("Accept-Ranges: bytes");
        header("Last-Modified: " . $gmdate_mod);
        header("Content-Length: " . $fileSize);
        header("Cache-Control: max-age=9999, must-revalidate");
        header("Expires: " . $gmdate_mod);
 
        readfile($cache_file);
 
        exit;
 
    }
 
}
 
/**
 *
 */
function get_cache_file() {
 
    global $lastModified;
    static $cache_file;
 
    if(!$cache_file) {
        $cachename = $_SERVER['QUERY_STRING'] . VERSION . $lastModified;
        $cache_file = md5($cachename) . '.png';
    }
 
    return $cache_file;
 
}
 
/**
 * check to if the url is valid or not
 */
function valid_extension ($ext) {
 
    if (preg_match("/jpg|jpeg|png|gif/i", $ext)) {
        return TRUE;
    } else {
        return FALSE;
    }
 
}
 
/**
 * tidy up the image source url
 */
function cleanSource($src) {
 
    // remove slash from start of string
    if(strpos($src, "/") == 0) {
        $src = substr($src, -(strlen($src) - 1));
    }
 
    // remove http/ https/ ftp
    $src = preg_replace("/^((ht|f)tp(s|):\/\/)/i", "", $src);
    // remove domain name from the source url
    $host = $_SERVER["HTTP_HOST"];
    $src = str_replace($host, "", $src);
    $host = str_replace("www.", "", $host);
    $src = str_replace($host, "", $src);
 
    // don't allow users the ability to use '../'
    // in order to gain access to files below document root
 
    // src should be specified relative to document root like:
    // src=images/img.jpg or src=/images/img.jpg
    // not like:
    // src=../images/img.jpg
    $src = preg_replace("/\.\.+\//", "", $src);
 
    // get path to image on file system
    $src = get_document_root($src) . '/' . $src;
 
    return $src;
 
}
 
/**
 *
 */
function get_document_root ($src) {
 
    // check for unix servers
    if(@file_exists($_SERVER['DOCUMENT_ROOT'] . '/' . $src)) {
        return $_SERVER['DOCUMENT_ROOT'];
    }
 
    // check from script filename (to get all directories to timthumb location)
    $parts = array_diff(explode('/', $_SERVER['SCRIPT_FILENAME']), explode('/', $_SERVER['DOCUMENT_ROOT']));
    $path = $_SERVER['DOCUMENT_ROOT'] . '/';
    foreach ($parts as $part) {
        $path .= $part . '/';
        if (file_exists($path . $src)) {
            return $path;
        }
    }
 
    // the relative paths below are useful if timthumb is moved outside of document root
    // specifically if installed in wordpress themes like mimbo pro:
    // /wp-content/themes/mimbopro/scripts/timthumb.php
    $paths = array(
        ".",
        "..",
        "../..",
        "../../..",
        "../../../..",
        "../../../../.."
    );
 
    foreach($paths as $path) {
        if(@file_exists($path . '/' . $src)) {
            return $path;
        }
    }
 
    // special check for microsoft servers
    if(!isset($_SERVER['DOCUMENT_ROOT'])) {
        $path = str_replace("/", "\\", $_SERVER['ORIG_PATH_INFO']);
        $path = str_replace($path, "", $_SERVER['SCRIPT_FILENAME']);
 
        if( @file_exists( $path . '/' . $src ) ) {
            return $path;
        }
    }
 
    displayError('file not found ' . $src);
 
}
 
/**
 * generic error message
 */
function displayError($errorString = '') {
 
    header('HTTP/1.1 400 Bad Request');
    die($errorString);
 
}
?>