This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * Copyright: Deux Huit Huit 2014 |
||
4 | * LICENCE: MIT https://deuxhuithuit.mit-license.org |
||
5 | */ |
||
6 | |||
7 | if(!defined("__IN_SYMPHONY__")) die("<h2>Error</h2><p>You cannot directly access this file</p>"); |
||
8 | |||
9 | require_once(TOOLKIT . '/class.xmlpage.php'); |
||
10 | require_once(EXTENSIONS . '/entry_relationship_field/lib/class.cacheablefetch.php'); |
||
11 | require_once(EXTENSIONS . '/entry_relationship_field/lib/class.erfxsltutilities.php'); |
||
12 | |||
13 | class contentExtensionEntry_Relationship_FieldRender extends XMLPage { |
||
14 | |||
15 | const NUMBER_OF_URL_PARAMETERS = 2; |
||
16 | |||
17 | private $sectionManager; |
||
18 | private $fieldManager; |
||
19 | private $entryManager; |
||
20 | |||
21 | public function __construct() { |
||
22 | parent::__construct(); |
||
23 | $this->sectionManager = new CacheableFetch('SectionManager'); |
||
24 | $this->fieldManager = new CacheableFetch('FieldManager'); |
||
25 | $this->entryManager = new CacheableFetch('EntryManager'); |
||
26 | // fix jquery |
||
27 | $this->_Result->setIncludeHeader(false); |
||
28 | $this->addHeaderToPage('Content-Type', 'text/html'); |
||
29 | } |
||
30 | |||
31 | /** |
||
32 | * |
||
33 | * Builds the content view |
||
34 | */ |
||
35 | public function view() { |
||
36 | View Code Duplication | if (class_exists('FLang')) { |
|
37 | try { |
||
38 | FLang::setMainLang(Lang::get()); |
||
39 | FLang::setLangCode(Lang::get(), ''); |
||
40 | } catch (Exception $ex) {} |
||
0 ignored issues
–
show
Coding Style
Comprehensibility
introduced
by
![]() |
|||
41 | } |
||
42 | // _context[0] => entry values |
||
43 | // _context[1] => fieldId |
||
44 | if (!is_array($this->_context) || empty($this->_context) || $this->_context[0] === 'null') { |
||
45 | $this->_Result->appendChild(new XMLElement('error', __('Parameters not found'))); |
||
46 | return; |
||
47 | } |
||
48 | else if (count($this->_context) < self::NUMBER_OF_URL_PARAMETERS) { |
||
49 | $this->_Result->appendChild(new XMLElement('error', __('Not enough parameters'))); |
||
50 | return; |
||
51 | } |
||
52 | else if (count($this->_context) > self::NUMBER_OF_URL_PARAMETERS) { |
||
53 | $this->_Result->appendChild(new XMLElement('error', __('Too many parameters'))); |
||
54 | return; |
||
55 | } |
||
56 | |||
57 | $entriesId = explode(',', MySQL::cleanValue($this->_context[0])); |
||
58 | $entriesId = array_map(array('General', 'intval'), $entriesId); |
||
59 | if (!is_array($entriesId) || empty($entriesId)) { |
||
60 | $this->_Result->appendChild(new XMLElement('error', __('No entry no found'))); |
||
61 | return; |
||
62 | } |
||
63 | |||
64 | $parentFieldId = General::intval($this->_context[1]); |
||
65 | if ($parentFieldId < 1) { |
||
66 | $this->_Result->appendChild(new XMLElement('error', __('Parent field id not valid'))); |
||
67 | return; |
||
68 | } |
||
69 | |||
70 | $parentField = $this->fieldManager->fetch($parentFieldId); |
||
71 | View Code Duplication | if (!$parentField || empty($parentField)) { |
|
72 | $this->_Result->appendChild(new XMLElement('error', __('Parent field not found'))); |
||
73 | return; |
||
74 | } |
||
75 | |||
76 | View Code Duplication | if (!($parentField instanceof FieldRelationship)) { |
|
77 | $this->_Result->appendChild(new XMLElement('error', __('Parent field is `%s`, not `relationship field`', array($parentField->get('type'))))); |
||
78 | return; |
||
79 | } |
||
80 | if (!$parentField->get('elements')) { |
||
81 | $parentField->set('elements', '*'); |
||
82 | } |
||
83 | if (!$parentField->get('sections') && $parentField->get('linked_section_id')) { |
||
84 | $parentField->set('sections', $parentField->get('linked_section_id')); |
||
85 | } |
||
86 | |||
87 | // Get entries one by one since they may belong to |
||
88 | // different sections, which prevents us from |
||
89 | // passing an array of entryId. |
||
90 | foreach ($entriesId as $key => $entryId) { |
||
91 | $entry = $this->entryManager->fetch($entryId); |
||
92 | if (empty($entry)) { |
||
93 | $li = new XMLElement('li', null, array( |
||
94 | 'data-entry-id' => $entryId |
||
95 | )); |
||
96 | $header = new XMLElement('header', null, array('class' => 'frame-header no-content ignore-collapsible')); |
||
97 | $title = new XMLElement('h4'); |
||
98 | $title->appendChild(new XMLElement('strong', __('Entry %s not found', array($entryId)))); |
||
99 | $header->appendChild($title); |
||
100 | $options = new XMLElement('div', null, array('class' => 'destructor')); |
||
101 | $options->appendChild(new XMLElement('a', __('Un-link'), array( |
||
102 | 'class' => 'unlink ignore-collapsible', |
||
103 | 'data-unlink' => $entryId, |
||
104 | ))); |
||
105 | $header->appendChild($options); |
||
106 | $li->appendChild($header); |
||
107 | $this->_Result->appendChild($li); |
||
108 | } else { |
||
109 | $entry = $entry[0]; |
||
110 | $entrySection = $this->sectionManager->fetch($entry->get('section_id')); |
||
111 | $entryVisibleFields = $entrySection->fetchVisibleColumns(); |
||
112 | $entryFields = $entrySection->fetchFields(); |
||
113 | $entrySectionHandle = $this->getSectionName($entry, 'handle'); |
||
114 | |||
115 | $li = new XMLElement('li', null, array( |
||
116 | 'data-entry-id' => $entryId, |
||
117 | 'data-section' => $entrySectionHandle, |
||
118 | 'data-section-id' => $entrySection->get('id'), |
||
119 | 'data-timestamp' => $entry->get('modification_date'), |
||
120 | )); |
||
121 | if ($parentField->is('show_header')) { |
||
122 | $header = new XMLElement('header', null, array( |
||
123 | 'class' => 'frame-header', |
||
124 | 'data-orderable-handle' => '', |
||
125 | 'data-collapsible-handle' => '' |
||
126 | )); |
||
127 | $title = new XMLElement('h4', null, array('class' => 'ignore-collapsible')); |
||
128 | if (!$parentField->get('mode_header')) { |
||
129 | $title->appendChildArray($this->buildDefaultTitle($entry, $entryVisibleFields, $entryFields)); |
||
130 | } |
||
131 | else { |
||
132 | $title->setValue(ERFXSLTUTilities::processXSLT($parentField, $entry, $entrySectionHandle, $entryFields, 'mode_header')); |
||
133 | } |
||
134 | $header->appendChild($title); |
||
135 | |||
136 | $options = new XMLElement('div', null, array('class' => 'destructor')); |
||
137 | if ($parentField->is('allow_edit')) { |
||
138 | $title->setAttribute('data-edit', $entryId); |
||
139 | $options->appendChild(new XMLElement('a', __('Edit'), array( |
||
140 | 'class' => 'edit ignore-collapsible', |
||
141 | 'data-edit' => $entryId, |
||
142 | ))); |
||
143 | } |
||
144 | if ($parentField->is('allow_delete')) { |
||
145 | $options->appendChild(new XMLElement('a', __('Delete'), array( |
||
146 | 'class' => 'delete ignore-collapsible', |
||
147 | 'data-delete' => $entryId, |
||
148 | ))); |
||
149 | } |
||
150 | if ($parentField->is('allow_link')) { |
||
151 | $options->appendChild(new XMLElement('a', __('Replace'), array( |
||
152 | 'class' => 'unlink ignore-collapsible', |
||
153 | 'data-replace' => $entryId, |
||
154 | ))); |
||
155 | } |
||
156 | if ($parentField->is('allow_goto')) { |
||
157 | $options->appendChild(new XMLElement('a', __('Go to'), array( |
||
158 | 'class' => 'goto ignore-collapsible', |
||
159 | 'data-goto' => $entryId, |
||
160 | ))); |
||
161 | } |
||
162 | if ($parentField->is('allow_delete') || |
||
163 | $parentField->is('allow_link') || $parentField->is('allow_unlink') || |
||
164 | $parentField->is('allow_search')) { |
||
165 | $options->appendChild(new XMLElement('a', __('Un-link'), array( |
||
166 | 'class' => 'unlink ignore-collapsible', |
||
167 | 'data-unlink' => $entryId, |
||
168 | ))); |
||
169 | } |
||
170 | $header->appendChild($options); |
||
171 | $li->appendChild($header); |
||
172 | } |
||
173 | |||
174 | $content = ERFXSLTUTilities::processXSLT($parentField, $entry, $entrySectionHandle, $entryFields, 'mode', isset($_REQUEST['debug'])); |
||
175 | |||
176 | if ($content) { |
||
177 | $li->appendChild(new XMLElement('div', $content, array( |
||
178 | 'class' => 'content', |
||
179 | 'data-collapsible-content' => '', |
||
180 | ))); |
||
181 | } |
||
182 | else { |
||
183 | if ($parentField->is('show_header')) { |
||
184 | $header->setAttribute('class', $header->getAttribute('class') . ' no-content'); |
||
0 ignored issues
–
show
The variable
$header does not seem to be defined for all execution paths leading up to this point.
If you define a variable conditionally, it can happen that it is not defined for all execution paths. Let’s take a look at an example: function myFunction($a) {
switch ($a) {
case 'foo':
$x = 1;
break;
case 'bar':
$x = 2;
break;
}
// $x is potentially undefined here.
echo $x;
}
In the above example, the variable $x is defined if you pass “foo” or “bar” as argument for $a. However, since the switch statement has no default case statement, if you pass any other value, the variable $x would be undefined. Available Fixes
![]() |
|||
185 | } |
||
186 | else { |
||
187 | $content = new XMLElement('div', null, array('class' => 'content')); |
||
188 | $content->appendChildArray($this->buildDefaultTitle($entry, $entryVisibleFields, $entryFields)); |
||
189 | $li->appendChild($content); |
||
190 | } |
||
191 | } |
||
192 | |||
193 | $this->_Result->appendChild($li); |
||
194 | } |
||
195 | } |
||
196 | } |
||
197 | |||
198 | public function getSectionName($entry, $name = 'name') { |
||
199 | $sectionId = $entry->get('section_id'); |
||
200 | return $this->sectionManager->fetch($sectionId)->get($name); |
||
201 | } |
||
202 | |||
203 | public function getEntryTitle($entry, $entryVisibleFields, $entryFields) { |
||
204 | $data = $entry->getData(); |
||
205 | $field = empty($entryVisibleFields) ? $entryFields : $entryVisibleFields; |
||
206 | if (is_array($field)) { |
||
207 | $field = current($field); |
||
208 | } |
||
209 | |||
210 | if ($field == null) { |
||
211 | return __('None'); |
||
212 | } |
||
213 | |||
214 | return $field->prepareReadableValue($data[$field->get('id')], $entry->get('id'), true); |
||
215 | } |
||
216 | |||
217 | public function buildDefaultTitle($entry, $entryVisibleFields, $entryFields) { |
||
218 | return array( |
||
219 | new XMLElement('strong', $this->getEntryTitle($entry, $entryVisibleFields, $entryFields), array('class' => 'ignore-collapsible')), |
||
220 | new XMLElement('span', $this->getSectionName($entry), array('class' => 'ignore-collapsible')) |
||
221 | ); |
||
222 | } |
||
223 | } |