[BETA] AutoModX STEROIDUS ModX installer/uninstall/simulator

[j5_dev]

Author: j5_dev

Modification Description:: AutoModX automated ModX installer, uninstaller and simulator.
Modification Version:: 3.1.0

Comment
After some SERIOUS prodding, the powers that be have allowed us to use some hot JPenta and Injector components and put this baby on roids. Pump baby pump!
Regards, Sarah Jenson

Features:

• 1 minute installation
• Based on phpBB's installer
• All code resides in a single directory
• Uses phpBB3 ACP security
• Viewer to view ModX xml files
• Simulate ModX installation edits and review the results
• Apply patch/upgrade ModX versions (From version 0.1.2)
• Corrects paths according to the phpBB3 installation path

What's new:

• Uninstaller.
• Improved parser to detect tab anomolies and correctly handle inline edits.
• Windows style file and folder open dialogs for browsing the server.
• File copies and database mods can be simulated.
• Utilities screen - Upload and unzip
• Full FTP support
• Developer center for ModX developers
  ModX packager
  Automated module installer for control panels
  Universal server application installer.

Modification Download: http://www.pentagate.com/downloads/files/automodx30.zip

[Andre]

Huh? Is this like EasyMod?

My bad for the lack of knowledge.

[igorw]

Yes, it's like easymod.

One thing I found when looking through the code:

Code: Select all

$this->phpbb_path = dirname($_SERVER['PHP_SELF']);

You should never use PHP_SELF, it's not secure. The user can change it by calling an url such as:

Code: Select all

/automodx/index.php/somethingelse/

I've not really tested it yet though.

[j5_dev]

Huh? Is this like EasyMod?

My bad for the lack of knowledge.

I don't know Andre. AutoModX looks similar to the ACP. Like the ACP, it exists in it's own folder, so it just get's copied and executed.

[j5_dev]

Yes, it's like easymod.

One thing I found when looking through the code:

Code: Select all

$this->phpbb_path = dirname($_SERVER['PHP_SELF']);

You should never use PHP_SELF, it's not secure. The user can change it by calling an url such as:

Code: Select all

/automodx/index.php/somethingelse/

I've not really tested it yet though.

He would need to get past a double layer of authentication first.

But thanks anyway.

Regards

[j5_dev]

The latest version of AutoModX, version 3 (Steroidus) can be downloaded at http://www.pentagate.com/downloads/files/automodx30.zip

Regards,
Sarah Jenson

[Afterlife(69)]

Yes, it's like easymod.

One thing I found when looking through the code:

Code: Select all

$this->phpbb_path = dirname($_SERVER['PHP_SELF']);

You should never use PHP_SELF, it's not secure. The user can change it by calling an url such as:

Code: Select all

/automodx/index.php/somethingelse/

I've not really tested it yet though.

Correct, the correct code for this situation would be:

$this->phpbb_path = __DIR__;
or
$this->phpbb_path = dirname(__FILE__);

These lines will read directly from the PHP processor and get the file's absolute path from the server, not the client.