Elep

<?php
/*
 * Your installation or use of this SugarCRM file is subject to the applicable
 * terms available at
 * http://support.sugarcrm.com/Resources/Master_Subscription_Agreements/.
 * If you do not agree to all of the applicable terms or do not have the
 * authority to bind the entity as an authorized representative, then do not
 * install or use this SugarCRM file.
 *
 * Copyright (C) SugarCRM Inc. All rights reserved.
 */

use Sugarcrm\Sugarcrm\Security\InputValidation\InputValidation;

if (!is_admin($GLOBALS['current_user'])) {
    sugar_die('Unauthorized access to administration.');
}
if (isset($GLOBALS['sugar_config']['hide_admin_diagnostics']) && $GLOBALS['sugar_config']['hide_admin_diagnostics']) {
    sugar_die('Unauthorized access to diagnostic tool.');
}

echo getClassicModuleTitle(
    'Administration',
    [
        "<a href='#Administration'>{$mod_strings['LBL_MODULE_NAME']}</a>",
        translate('LBL_DIAGNOSTIC_TITLE'),
    ],
    true
);

$request = InputValidation::getService();
$file = $request->getValidInputRequest('file');
$guid = $request->getValidInputRequest('guid', 'Assert\Guid');

if (empty($file) || empty($guid)) {
    echo $mod_strings['LBL_DIAGNOSTIC_DELETE_ERROR'];
} else {
    // Make sure the guid and file are valid file names for security purposes
    clean_string($guid, 'ALPHANUM');
    clean_string($file, 'FILE');

//Making sure someone doesn't pass a variable name as a false reference
    //  to delete a file
    if (strcmp(substr($file, 0, 10), 'diagnostic') != 0) {
        die($mod_strings['LBL_DIAGNOSTIC_DELETE_DIE']);
    }

if (file_exists($cachedfile = sugar_cached('diagnostic/' . $guid . '/' . $file . '.zip'))) {
        unlink($cachedfile);
        rmdir(dirname($cachedfile));
        echo $mod_strings['LBL_DIAGNOSTIC_DELETED'] . '<br><br>';
    } else {
        echo $mod_strings['LBL_DIAGNOSTIC_FILE'] . $file . $mod_strings['LBL_DIAGNOSTIC_ZIP'];
    }
}

$onclick = "if(parent.SUGAR.App) parent.SUGAR.App.router.navigate('#Administration', {trigger: true});" .
    " else window.location=window.location.href.substr(0,window.location.href.indexOf('index.php'))+'#Administration';";
print "<a onclick=\"$onclick\" href=\"javascript:void(0)\">" . $mod_strings['LBL_DIAGNOSTIC_DELETE_RETURN'] . '</a><br>';