DakuTree /
manga-tracker
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php declare(strict_types=1); defined('BASEPATH') OR exit('No direct script access allowed'); |
||
| 2 | |||
| 3 | class AdminPanel extends Admin_Controller { |
||
| 4 | public function __construct() { |
||
| 5 | parent::__construct(); |
||
| 6 | |||
| 7 | $this->load->library('table'); |
||
| 8 | |||
| 9 | $this->load->helper('form'); |
||
| 10 | $this->load->library('form_validation'); |
||
| 11 | } |
||
| 12 | |||
| 13 | public function index() : void { |
||
| 14 | $this->header_data['title'] = 'Admin Panel'; |
||
| 15 | $this->header_data['page'] = 'admin-panel'; |
||
| 16 | |||
| 17 | $this->body_data['complete_list'] = array_merge([['id', 'site_class', 'url']], $this->_list_complete_titles()); |
||
| 18 | $this->body_data['id_sql'] = 'SELECT * FROM `tracker_titles` WHERE id IN('.implode(',', array_column($this->body_data['complete_list'], 'id')).')'; |
||
| 19 | |||
| 20 | $template = array( |
||
| 21 | 'table_open' => '<table class="table table-striped">' |
||
| 22 | ); |
||
| 23 | |||
| 24 | $this->table->set_template($template); |
||
| 25 | $this->_render_page('AdminPanel'); |
||
| 26 | } |
||
| 27 | |||
| 28 | public function update_normal() { |
||
| 29 | set_time_limit(0); |
||
| 30 | |||
| 31 | ob_start(); |
||
| 32 | $this->Tracker->admin->updateLatestChapters(); |
||
| 33 | ob_end_clean(); |
||
| 34 | |||
| 35 | $this->_redirect('Normal Update complete.'); |
||
| 36 | } |
||
| 37 | public function update_custom() { |
||
| 38 | set_time_limit(0); |
||
| 39 | ob_start(); |
||
| 40 | $this->Tracker->admin->updateCustom(); |
||
| 41 | ob_end_clean(); |
||
| 42 | |||
| 43 | $this->_redirect('Custom Update complete.'); |
||
| 44 | } |
||
| 45 | public function update_titles() { |
||
| 46 | set_time_limit(0); |
||
| 47 | $this->Tracker->admin->updateTitles(); |
||
|
0 ignored issues
–
show
|
|||
| 48 | |||
| 49 | $this->_redirect('(Actual) Titles updated.'); |
||
| 50 | } |
||
| 51 | public function update_mal_id() { |
||
| 52 | set_time_limit(0); |
||
| 53 | $this->_update_mal_backend(); |
||
| 54 | |||
| 55 | $this->_redirect('MAL Backend IDs updated.'); |
||
| 56 | } |
||
| 57 | public function populate_db() { |
||
| 58 | if(ENVIRONMENT === 'development') { |
||
| 59 | //Populate list |
||
| 60 | $randomUpdateData = [ |
||
| 61 | ['mangadex.org', '18806:--:English', '12612:--:v1/c1'], |
||
| 62 | ['helveticascans.com', 'mousou-telepathy', 'en/0/1'], |
||
| 63 | ['elpsycongroo.tk', 'otomedanshi', 'en/1/1'] |
||
| 64 | ]; |
||
| 65 | foreach($randomUpdateData as $updateData) { |
||
| 66 | $updateData[] = TRUE; //Active marker |
||
| 67 | $this->Tracker->list->update($this->User->id, ...$updateData); |
||
|
0 ignored issues
–
show
$updateData is of type array<integer,string|boolean>, but the function expects a string.
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
Loading history...
|
|||
| 68 | |||
| 69 | } |
||
| 70 | |||
| 71 | //Populate favorites |
||
| 72 | $randomFavouriteData = [ |
||
| 73 | ['mangadex.org', '18806:--:English', '306123:--:c19', 10], |
||
| 74 | ['helveticascans.com', 'mousou-telepathy', 'en/0/564', NULL], |
||
| 75 | ['elpsycongroo.tk', 'otomedanshi', 'en/2/239', NULL] |
||
| 76 | ]; |
||
| 77 | foreach($randomFavouriteData as $favouriteData) { |
||
| 78 | $favouriteData[] = FALSE; |
||
| 79 | $this->Tracker->favourites->set($this->User->id, ...$favouriteData); |
||
|
0 ignored issues
–
show
$favouriteData is of type array<integer,?>, but the function expects a string.
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
Loading history...
|
|||
| 80 | } |
||
| 81 | |||
| 82 | $this->_redirect('Populated Dev DB with data.'); |
||
| 83 | } else { |
||
| 84 | $this->_redirect('Populate Dev DB failed as ENVIRONMENT is not development.'); |
||
| 85 | } |
||
| 86 | } |
||
| 87 | |||
| 88 | private function _redirect(string $message) : void { |
||
| 89 | $this->session->set_flashdata('notices', $message); |
||
| 90 | redirect(site_url('admin_panel')); |
||
| 91 | } |
||
| 92 | |||
| 93 | private function _list_complete_titles() { |
||
| 94 | $query = $this->db->select('tracker_titles.id, tracker_sites.site_class, tracker_titles.title, tracker_titles.title_url') |
||
| 95 | ->from('tracker_chapters') |
||
| 96 | ->join('tracker_titles', 'tracker_chapters.title_id = tracker_titles.id', 'left') |
||
| 97 | ->join('tracker_sites', 'tracker_sites.id = tracker_titles.site_id', 'left') |
||
| 98 | ->like('tracker_chapters.tags', 'complete') |
||
| 99 | ->where('tracker_titles.status', 0) |
||
| 100 | ->get(); |
||
| 101 | |||
| 102 | $completeList = []; |
||
| 103 | if($query->num_rows() > 0) { |
||
| 104 | foreach($query->result() as $row) { |
||
| 105 | $data = [ |
||
| 106 | 'id' => $row->id, |
||
| 107 | 'site_class' => $row->site_class, |
||
| 108 | 'url' => "<a href='".$this->Tracker->sites->{$row->site_class}->getFullTitleURL($row->title_url)."'>{$row->title}</a>" |
||
| 109 | ]; |
||
| 110 | $completeList[] = $data; |
||
| 111 | } |
||
| 112 | } |
||
| 113 | |||
| 114 | return $completeList; |
||
| 115 | } |
||
| 116 | |||
| 117 | private function _update_mal_backend() : void { |
||
| 118 | //Would prefer to use the query generator here, but don't think it's possible with what I'd like to do here. |
||
| 119 | |||
| 120 | //Set backend MAL id if more than one person has it set as the same ID. |
||
| 121 | //- This should be bumped up as we get more users to avoid abuse. |
||
| 122 | $this->db->query(' |
||
| 123 | UPDATE |
||
| 124 | tracker_titles dest, |
||
| 125 | ( |
||
| 126 | SELECT tt.id, tc.mal_id |
||
| 127 | FROM `tracker_chapters` tc |
||
| 128 | LEFT JOIN `tracker_titles` tt ON tt.`id` = tc.`title_id` |
||
| 129 | WHERE tt.mal_id IS NULL AND tc.mal_id IS NOT NULL |
||
| 130 | GROUP BY tt.id, tc.mal_id |
||
| 131 | HAVING COUNT(tc.mal_id) > 1 |
||
| 132 | ) src |
||
| 133 | SET dest.mal_id = src.mal_id |
||
| 134 | WHERE dest.id = src.id |
||
| 135 | '); |
||
| 136 | |||
| 137 | //Set backend MAL id if an admin has it set. |
||
| 138 | //TODO: Preferably we'd have a trusted users group, but that is for later down the line... |
||
| 139 | $this->db->query(' |
||
| 140 | UPDATE |
||
| 141 | tracker_titles dest, |
||
| 142 | ( |
||
| 143 | SELECT tt.id, tc.mal_id |
||
| 144 | FROM `tracker_chapters` tc |
||
| 145 | LEFT JOIN `tracker_titles` tt ON tt.`id` = tc.`title_id` |
||
| 146 | LEFT JOIN `auth_users_groups` aug ON tc.`user_id` = aug.`user_id` |
||
| 147 | WHERE tc.mal_id IS NOT NULL |
||
| 148 | AND aug.`group_id` = 1 |
||
| 149 | ) src |
||
| 150 | SET dest.mal_id = src.mal_id |
||
| 151 | WHERE dest.id = src.id |
||
| 152 | '); |
||
| 153 | } |
||
| 154 | } |
||
| 155 |
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces.
This is most likely a typographical error or the method has been renamed.