173 lines
11 KiB
PHP
173 lines
11 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
/**
|
|
* Prüft die Mehrsprachigkeit auf echten Seiten: Sprachwechsel über lang.php, übersetzte Kundenportal- und Mitarbeiterseiten, Sammelmodus.
|
|
*/
|
|
|
|
date_default_timezone_set('Europe/Berlin'); // wie in der Test-Installation
|
|
$root = dirname(__DIR__);
|
|
$work = sys_get_temp_dir() . '/deskhub-i18np-' . bin2hex(random_bytes(4));
|
|
$tmp = $work . '/inst';
|
|
mkdir($tmp, 0755, true);
|
|
$webPort = random_int(37500, 37999);
|
|
$skip = '#^(config/config\.php|database/[^/]+\.sqlite[^/]*|backups|uploads|tests|plugins/[^/]+|\.git)(/|$)#';
|
|
foreach (new RecursiveIteratorIterator(new RecursiveDirectoryIterator($root, FilesystemIterator::SKIP_DOTS), RecursiveIteratorIterator::SELF_FIRST) as $f) {
|
|
$rel = str_replace(chr(92), '/', substr($f->getPathname(), strlen($root) + 1));
|
|
if (preg_match($skip, $rel) && !preg_match('#^(backups|uploads|plugins)/(\.htaccess|README\.md)$#', $rel)) continue;
|
|
if ($f->isDir()) { @mkdir($tmp . '/' . $rel, 0755, true); continue; }
|
|
@mkdir(dirname($tmp . '/' . $rel), 0755, true);
|
|
copy($f->getPathname(), $tmp . '/' . $rel);
|
|
}
|
|
@mkdir($tmp . '/uploads');
|
|
@mkdir($tmp . '/config');
|
|
file_put_contents($tmp . '/config/config.php', '<?php return ' . var_export([
|
|
'app_key' => bin2hex(random_bytes(32)),
|
|
'db' => ['driver' => 'sqlite', 'sqlite_path' => $tmp . '/database/deskhub.sqlite'],
|
|
'site' => ['name' => 'Test', 'url' => 'http://127.0.0.1', 'admin_email' => 'a@test.de', 'timezone' => 'Europe/Berlin'],
|
|
'uploads' => ['max_size_bytes' => 10485760, 'allowed_extensions' => ['png'], 'path' => $tmp . '/uploads'],
|
|
], true) . ';');
|
|
|
|
putenv('DESKHUB_CONFIG_JSON');
|
|
putenv('DESKHUB_SQLITE_PATH');
|
|
putenv('DESKHUB_TESTING');
|
|
putenv('DESKHUB_API_ALLOW_INSECURE=1');
|
|
require_once $root . '/database/sqlite_schema.php';
|
|
require_once $root . '/database/migrate.php';
|
|
$db = new PDO('sqlite:' . $tmp . '/database/deskhub.sqlite');
|
|
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
$db->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
|
|
$db->exec('PRAGMA foreign_keys = ON');
|
|
$db->exec(convert_schema_to_sqlite((string) file_get_contents($root . '/database/schema.sql')));
|
|
$mig = run_migrations($db, true);
|
|
$now = date('Y-m-d H:i:s');
|
|
$dept = (int) $db->query('SELECT id FROM departments ORDER BY id LIMIT 1')->fetchColumn();
|
|
$db->exec('DELETE FROM staff');
|
|
$ins = $db->prepare('INSERT INTO staff (name, email, password_hash, role, department_id, is_active, created_at) VALUES (?,?,?,?,?,1,?)');
|
|
$ids = [];
|
|
foreach ([['Chef', 'chef@test.de', 'admin'], ['Agent', 'agent@test.de', 'agent']] as [$n, $e, $r]) {
|
|
$ins->execute([$n, $e, password_hash('Sehr-Sicher-1234', PASSWORD_DEFAULT), $r, $dept, $now]);
|
|
$ids[$n] = (int) $db->lastInsertId();
|
|
}
|
|
$db = null;
|
|
|
|
$failures = [];
|
|
$total = 0;
|
|
$check = function (bool $ok, string $what) use (&$failures, &$total): void { $total++; if (!$ok) $failures[] = $what; };
|
|
$webProc = proc_open([PHP_BINARY, '-S', "127.0.0.1:$webPort", '-t', $tmp], [['pipe', 'r'], ['file', $work . '/web.out', 'w'], ['file', $work . '/web.out', 'a']], $wp, $tmp);
|
|
|
|
try {
|
|
for ($i = 0; $i < 50; $i++) { if (@fsockopen('127.0.0.1', $webPort)) break; usleep(100000); }
|
|
$pdo = function () use ($tmp): PDO {
|
|
$p = new PDO('sqlite:' . $tmp . '/database/deskhub.sqlite');
|
|
$p->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
$p->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
|
|
return $p;
|
|
};
|
|
// Sprachpakete in die Test-Installation einspielen (wie über Plugins → Hochladen)
|
|
putenv('DESKHUB_SQLITE_PATH=' . $tmp . '/database/deskhub.sqlite');
|
|
$zips = [];
|
|
foreach (['lang-en', 'lang-de'] as $slug) {
|
|
$src = $root . '/../Plugins/plugins/' . $slug;
|
|
$zp = $work . '/' . $slug . '.zip';
|
|
$z = new ZipArchive();
|
|
$z->open($zp, ZipArchive::CREATE);
|
|
foreach (new RecursiveIteratorIterator(new RecursiveDirectoryIterator($src, FilesystemIterator::SKIP_DOTS)) as $f) $z->addFile($f->getPathname(), str_replace(chr(92), '/', substr($f->getPathname(), strlen($src) + 1)));
|
|
$z->close();
|
|
$zips[] = $zp;
|
|
}
|
|
$script = $work . '/install.php';
|
|
file_put_contents($script, "<?php\nrequire " . var_export($tmp . '/includes/bootstrap.php', true) . ";\n\$pdo = get_db();\nforeach (" . var_export($zips, true) . " as \$z) { \$r = plugin_install_zip(\$pdo, \$z); if (!\$r['ok']) { echo 'FEHLER ' . \$r['error']; exit(1); } plugin_set_active(\$pdo, \$r['slug'], true, []); }\necho 'ok';");
|
|
$out = (string) shell_exec(escapeshellarg(PHP_BINARY) . ' ' . escapeshellarg($script) . ' 2>&1');
|
|
$check(trim($out) === 'ok', 'Sprachpakete in der Test-Installation installiert: ' . $out);
|
|
|
|
$call = function (string $method, string $path, string $jar, array $form = [], array $headers = []) use ($webPort): array {
|
|
$ch = curl_init("http://127.0.0.1:$webPort$path");
|
|
curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER => true, CURLOPT_FOLLOWLOCATION => false, CURLOPT_HEADER => true, CURLOPT_TIMEOUT => 60, CURLOPT_COOKIEJAR => $jar, CURLOPT_COOKIEFILE => $jar, CURLOPT_HTTPHEADER => array_merge(['Sec-Fetch-Mode: navigate'], $headers)]);
|
|
if ($method === 'POST') { curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($form)); }
|
|
$raw = (string) curl_exec($ch);
|
|
$s = (int) curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
|
|
$hs = (int) curl_getinfo($ch, CURLINFO_HEADER_SIZE);
|
|
curl_close($ch);
|
|
return [$s, substr($raw, $hs), substr($raw, 0, $hs)];
|
|
};
|
|
$jar = fn() => tempnam(sys_get_temp_dir(), 'i18n');
|
|
|
|
// Gast: erst deutsch, mit Flaggen
|
|
$g = $jar();
|
|
[$s, $b] = $call('GET', '/login.php', $g);
|
|
$check($s === 200 && str_contains($b, 'Passwort vergessen?') && str_contains($b, '<html lang="de">') && substr_count($b, 'class="lang-switch"') === 1 && substr_count($b, 'data:image/svg+xml;base64') >= 2, 'Anmeldeseite: deutsch, mit Sprachwechsler (zwei Flaggen)');
|
|
// Wechsel zu English
|
|
[$s, , $h] = $call('GET', '/lang.php?l=en&back=%2Flogin.php', $g);
|
|
$check($s === 302 && preg_match('#^Location: /login\.php#mi', $h) === 1 && stripos($h, 'Set-Cookie: deskhub_lang=en') !== false && stripos($h, 'SameSite=Lax') !== false, 'lang.php setzt das Cookie und springt zurück');
|
|
[$s, $b] = $call('GET', '/login.php', $g);
|
|
$check(str_contains($b, 'Forgot your password?') && str_contains($b, '<html lang="en">') && !str_contains($b, 'Passwort vergessen?'), 'Anmeldeseite ist englisch');
|
|
[, $b] = $call('GET', '/ticket_new.php', $g);
|
|
$check(str_contains($b, 'Create new ticket') && str_contains($b, 'Subject') && str_contains($b, 'Open a new ticket') | str_contains($b, 'Support center home'), 'Neues Ticket ist englisch');
|
|
[, $b] = $call('GET', '/ticket_lookup.php', $g);
|
|
$check(str_contains($b, 'Check ticket status') || str_contains($b, 'Ticket number'), 'Ticketstatus-Seite ist englisch');
|
|
[, $b] = $call('GET', '/staff/login.php', $g);
|
|
$check(str_contains($b, '<html lang="en">') && str_contains($b, 'class="lang-switch"'), 'Mitarbeiter-Anmeldung: englisch, mit Wechsler');
|
|
// Ungültiges wird ignoriert
|
|
$g2 = $jar();
|
|
[$s, , $h] = $call('GET', '/lang.php?l=zz&back=https%3A%2F%2Fevil.example', $g2);
|
|
$check($s === 302 && stripos($h, 'deskhub_lang') === false && preg_match('#^Location: /\s*$#mi', $h) === 1, 'unbekannte Sprache und fremde Rücksprung-Adresse werden ignoriert');
|
|
[$s, , $h] = $call('GET', '/lang.php?l=en&back=%2F%2Fevil.example', $g2);
|
|
$check(preg_match('#^Location: /\s*$#mi', $h) === 1, 'Rücksprung-Adresse mit // wird verworfen');
|
|
|
|
// Mitarbeiterbereich auf Englisch
|
|
$adm = $jar();
|
|
[, $lp] = $call('GET', '/staff/login.php', $adm);
|
|
preg_match('/name="csrf_token" value="([a-f0-9]+)"/', $lp, $m);
|
|
$call('POST', '/staff/login.php', $adm, ['csrf_token' => $m[1] ?? '', 'email' => 'chef@test.de', 'password' => 'Sehr-Sicher-1234']);
|
|
$call('GET', '/lang.php?l=en&back=%2F', $adm);
|
|
[$s, $b] = $call('GET', '/staff/departments.php', $adm);
|
|
$check($s === 200 && str_contains($b, '<html lang="en">') && str_contains($b, 'Departments') && str_contains($b, 'Sign out') && str_contains($b, 'class="lang-switch"'), 'Mitarbeiterseite ist englisch, Wechsler in der Seitenleiste');
|
|
$call('GET', '/lang.php?l=de&back=%2F', $adm);
|
|
[, $b] = $call('GET', '/staff/departments.php', $adm);
|
|
$check(str_contains($b, 'Abteilungen') && str_contains($b, 'Abmelden'), 'zurück auf Deutsch');
|
|
|
|
// Seite „Sprachen“, Standardsprache, Sammelmodus
|
|
[$s, $b] = $call('GET', '/staff/languages.php', $adm);
|
|
$check($s === 200 && str_contains($b, 'English') && str_contains($b, 'lang-en') && str_contains($b, 'Vorlage laden'), 'Seite „Sprachen“ zeigt die installierten Sprachen');
|
|
preg_match('/name="csrf_token" value="([a-f0-9]+)"/', $b, $m);
|
|
$call('POST', '/staff/languages.php', $adm, ['csrf_token' => $m[1] ?? '', 'action' => 'save', 'default_language' => 'en', 'i18n_collect' => '1']);
|
|
$fresh = $jar();
|
|
[, $b] = $call('GET', '/login.php', $fresh);
|
|
$check(str_contains($b, 'Forgot your password?') && str_contains($b, '<html lang="en">'), 'Standardsprache gilt für Besucher ohne Cookie');
|
|
$call('GET', '/lang.php?l=de&back=%2F', $fresh);
|
|
$call('GET', '/login.php', $fresh);
|
|
$call('GET', '/ticket_lookup.php', $fresh);
|
|
$check((int) $pdo()->query('SELECT COUNT(*) FROM i18n_missing')->fetchColumn() > 3, 'Sammelmodus merkt sich Texte, auch im deutschen Modus');
|
|
[$s, $b, $h] = $call('GET', '/staff/languages.php?download=en', $adm);
|
|
$tpl = json_decode($b, true);
|
|
$check($s === 200 && is_array($tpl) && stripos($h, 'application/json') !== false && stripos($h, 'attachment') !== false && ($tpl['Anmelden'] ?? null) === 'Sign in', 'Vorlage zum Herunterladen: vorhandene Übersetzungen eingetragen');
|
|
// Schnittstellen bleiben unberührt (JSON)
|
|
[$s, $b] = $call('POST', '/api/staff/v1/login.php', $fresh, [], ['Content-Type: application/json']);
|
|
$check(json_decode($b, true) !== null, 'Schnittstelle liefert weiter reines JSON');
|
|
[$s, $b] = $call('POST', '/staff/languages.php', $adm, ['csrf_token' => 'falsch', 'action' => 'clear']);
|
|
$check($s === 403, 'Löschen der gesammelten Texte braucht das CSRF-Token');
|
|
// Nicht-Admins kommen nicht auf die Seite
|
|
$ag = $jar();
|
|
[, $lp] = $call('GET', '/staff/login.php', $ag);
|
|
preg_match('/name="csrf_token" value="([a-f0-9]+)"/', $lp, $m);
|
|
$call('POST', '/staff/login.php', $ag, ['csrf_token' => $m[1] ?? '', 'email' => 'agent@test.de', 'password' => 'Sehr-Sicher-1234']);
|
|
[$s, , $h] = $call('GET', '/staff/languages.php', $ag);
|
|
$check($s === 302, 'Mitarbeiter ohne Adminrechte werden von der Seite „Sprachen“ umgeleitet');
|
|
} finally {
|
|
if (isset($webProc) && is_resource($webProc)) { proc_terminate($webProc); proc_close($webProc); }
|
|
}
|
|
|
|
usleep(300000);
|
|
$rm = function (string $d) use (&$rm) {
|
|
foreach (scandir($d) ?: [] as $e) { if ($e === '.' || $e === '..') continue; is_dir("$d/$e") && !is_link("$d/$e") ? $rm("$d/$e") : @unlink("$d/$e"); }
|
|
@rmdir($d);
|
|
};
|
|
if (str_starts_with($work, sys_get_temp_dir() . '/deskhub-i18np-')) $rm($work);
|
|
|
|
if ($failures) {
|
|
fwrite(STDERR, "Fehlgeschlagen:\n - " . implode("\n - ", $failures) . "\n");
|
|
exit(1);
|
|
}
|
|
echo "i18n pages checks passed ({$total} Prüfungen).\n";
|