This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /* zKillboard |
||
3 | * Copyright (C) 2012-2015 EVE-KILL Team and EVSCO. |
||
4 | * |
||
5 | * This program is free software: you can redistribute it and/or modify |
||
6 | * it under the terms of the GNU Affero General Public License as published by |
||
7 | * the Free Software Foundation, either version 3 of the License, or |
||
8 | * (at your option) any later version. |
||
9 | * |
||
10 | * This program is distributed in the hope that it will be useful, |
||
11 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
12 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||
13 | * GNU Affero General Public License for more details. |
||
14 | * |
||
15 | * You should have received a copy of the GNU Affero General Public License |
||
16 | * along with this program. If not, see <http://www.gnu.org/licenses/>. |
||
17 | */ |
||
18 | $app->notFound(function () use ($app) { |
||
19 | $app->redirect("..", 302); |
||
20 | }); |
||
21 | |||
22 | // Default route |
||
23 | $app->get("/(page/:page/)", function ($page = 1) use ($app){ |
||
24 | include( "view/index.php" ); |
||
25 | }); |
||
26 | |||
27 | $app->get("/kills.html/", function($page = "about") use ($app) { |
||
0 ignored issues
–
show
|
|||
28 | die("<script type='text/javascript'>location.reload();</script>"); |
||
29 | }); |
||
30 | |||
31 | // Information about zKillboard |
||
32 | $app->get("/information/(:page/)(:subPage/)", function($page = "about", $subPage = null) use ($app) { |
||
33 | include( "view/information.php" ); |
||
34 | }); |
||
35 | |||
36 | // Support |
||
37 | $app->get("/livechat/", function() use ($app) { |
||
38 | include( "view/livechat.php" ); |
||
39 | }); |
||
40 | |||
41 | // Tickets |
||
42 | $app->map("/tickets/", function() use ($app) { |
||
43 | include( "view/tickets.php" ); |
||
44 | })->via("GET", "POST"); |
||
45 | |||
46 | $app->map("/tickets/view/:id/", function($id) use ($app) { |
||
47 | include( "view/tickets_view.php" ); |
||
48 | })->via("GET", "POST"); |
||
49 | |||
50 | // Campaigns |
||
51 | $app->map("/campaign/:uri/", function($uri) use($app) { |
||
52 | include( "view/campaign.php" ); |
||
53 | })->via("GET"); |
||
54 | |||
55 | // Tracker |
||
56 | $app->get("/tracker(/page/:page)/", function($page = 1) use ($app) { |
||
57 | include( "view/tracker.php" ); |
||
58 | }); |
||
59 | |||
60 | // View kills |
||
61 | $app->get("/kills/page/:page/", function($page = 1) use ($app) { |
||
62 | $type = NULL; |
||
63 | include( "view/kills.php" ); |
||
64 | }); |
||
65 | $app->get("/kills(/:type)(/page/:page)/", function($type = NULL, $page = 1) use ($app) { |
||
66 | include( "view/kills.php" ); |
||
67 | }); |
||
68 | |||
69 | // View related kills |
||
70 | $app->get("/related/:system/:time/(o/:options/)", function($system, $time, $options = "") use ($app) { |
||
71 | include( "view/related.php" ); |
||
72 | }); |
||
73 | |||
74 | // View Battle Report |
||
75 | $app->get("/br/:battleID/", function($battleID) use ($app) { |
||
76 | include( "view/battle_report.php" ); |
||
77 | }); |
||
78 | |||
79 | // View Battle Report |
||
80 | $app->get("/brsave/", function() use ($app) { |
||
81 | include( "view/brsave.php" ); |
||
82 | }); |
||
83 | |||
84 | // View top |
||
85 | $app->get("/top/lasthour/", function() use ($app) { |
||
86 | include( "view/lasthour.php" ); |
||
87 | }); |
||
88 | $app->get("/ranks/:pageType/:subType/", function($pageType, $subType) use ($app) { |
||
89 | include( "view/ranks.php" ); |
||
90 | }); |
||
91 | |||
92 | $app->get("/top(/:type)(/:page)(/:time+)/", function($type = "weekly", $page = NULL, $time = array()) use ($app) { |
||
93 | include( "view/top.php" ); |
||
94 | }); |
||
95 | |||
96 | // Raw Kill Detail |
||
97 | $app->get("/raw/:id/", function($id) use ($app) { |
||
98 | include( "view/raw.php" ); |
||
99 | }); |
||
100 | |||
101 | // Kill Detail View |
||
102 | $app->get("/detail/:id(/:pageview)/", function($id, $pageview = "overview") use ($app) { |
||
103 | $app->redirect("/kill/$id/", 301); // Permanent redirect |
||
104 | die(); |
||
105 | }); |
||
106 | $app->get("/kill/:id(/:pageview)/", function($id, $pageview = "overview") use ($app) { |
||
107 | include( "view/detail.php" ); |
||
108 | })->via("GET", "POST"); |
||
109 | |||
110 | // Search |
||
111 | $app->map("/search(/:search)/", function($search = NULL) use ($app) { |
||
112 | include( "view/search.php" ); |
||
113 | })->via("GET", "POST"); |
||
114 | |||
115 | // Login stuff |
||
116 | $app->map("/dlogin/", function() use ($app) { |
||
117 | global $cookie_name, $cookie_time; |
||
118 | include( "view/dlogin.php" ); |
||
119 | })->via("GET", "POST"); |
||
120 | |||
121 | $app->map("/login/", function() use ($app) { |
||
122 | global $cookie_name, $cookie_time; |
||
123 | include( "view/login.php" ); |
||
124 | })->via("GET", "POST"); |
||
125 | |||
126 | // Sitemap |
||
127 | $app->get("/sitemap/", function() use ($app) { |
||
128 | global $cookie_name, $cookie_time, $baseAddr; |
||
129 | include( "view/sitemap.php" ); |
||
130 | }); |
||
131 | |||
132 | // Logout |
||
133 | $app->get("/logout/", function() use ($app) { |
||
134 | global $cookie_name, $cookie_time, $baseAddr; |
||
135 | include( "view/logout.php" ); |
||
136 | }); |
||
137 | |||
138 | // Forgot password |
||
139 | $app->map("/forgotpassword/", function() use ($app) { |
||
140 | global $cookie_name, $cookie_time; |
||
141 | include( "view/forgotpassword.php" ); |
||
142 | })->via("GET", "POST"); |
||
143 | |||
144 | // Change password |
||
145 | $app->map("/changepassword/:hash/", function($hash) use ($app) { |
||
146 | include( "view/changepassword.php" ); |
||
147 | })->via("GET", "POST"); |
||
148 | |||
149 | // Register |
||
150 | $app->map("/register/", function() use ($app) { |
||
151 | global $cookie_name, $cookie_time; |
||
152 | include( "view/register.php" ); |
||
153 | })->via("GET", "POST"); |
||
154 | |||
155 | // Account |
||
156 | $app->map("/account(/:req)(/:reqid)/", function($req = NULL, $reqid = NULL) use ($app) { |
||
157 | global $cookie_name, $cookie_time; |
||
158 | include( "view/account.php" ); |
||
159 | })->via("GET", "POST"); |
||
160 | |||
161 | // Moderator |
||
162 | $app->map("/moderator(/:req)(/:id)(/page/:page)/", function ($req = NULL, $id = NULL, $page = 1) use ($app) { |
||
163 | global $cookie_name, $cookie_time; |
||
164 | include( "view/moderator.php" ); |
||
165 | })->via("GET", "POST"); |
||
166 | |||
167 | // EveInfo |
||
168 | $app->get("/item/:id/", function($id) use ($app) { |
||
169 | global $oracleURL; |
||
170 | include ("view/item.php" ); |
||
171 | }); |
||
172 | |||
173 | // StackTrace |
||
174 | $app->get("/stacktrace/:hash/", function($hash) use ($app) { |
||
175 | $q = Db::query("SELECT error, url FROM zz_errors WHERE id = :hash", array(":hash" => $hash)); |
||
176 | $trace = $q[0]["error"]; |
||
177 | $url = $q[0]["url"]; |
||
178 | $app->render("/components/stacktrace.html", array("stacktrace" => $trace, "url" => $url)); |
||
179 | }); |
||
180 | |||
181 | $app->get("/comments/", function() use ($app) { |
||
182 | $app->render("/comments.html"); |
||
183 | }); |
||
184 | |||
185 | // API |
||
186 | $app->get("/api(/:flags+)/", function($flags = NULL) use ($app) { |
||
187 | include( "view/api.php" ); |
||
188 | }); |
||
189 | |||
190 | // Kills in the last hour |
||
191 | $app->get("/killslasthour/", function() use ($app) { |
||
192 | die("<script type='text/javascript'>location.reload();</script>"); |
||
193 | die(number_format(Storage::retrieve("KillsLastHour", null))); |
||
194 | }); |
||
195 | |||
196 | // Post |
||
197 | $app->get("/post/", function() use ($app) { |
||
198 | include( "view/postmail.php" ); |
||
199 | }); |
||
200 | $app->post("/post/", function() use ($app) { |
||
201 | include( "view/postmail.php" ); |
||
202 | }); |
||
203 | |||
204 | // Autocomplete |
||
205 | $app->map("/autocomplete/", function() use ($app) { |
||
206 | include( "view/autocomplete.php" ); |
||
207 | })->via("POST"); |
||
208 | |||
209 | // Intel |
||
210 | $app->get("/intel/supers/", function() use ($app) { |
||
211 | include( "view/intel.php" ); |
||
212 | }); |
||
213 | |||
214 | // primer |
||
215 | $app->get("/primer/", function() use ($app) { |
||
216 | include("view/primer.php"); |
||
217 | }); |
||
218 | |||
219 | // Sharing Crest Mails |
||
220 | $app->get("/crestmail/:killID/:hash/", function($killID, $hash) use ($app) { |
||
221 | include("view/crestmail.php"); |
||
222 | }); |
||
223 | |||
224 | // War! |
||
225 | $app->get("/war/:warID/", function($warID) use ($app) { |
||
226 | include("view/war.php"); |
||
227 | }); |
||
228 | $app->get("/wars/", function() use ($app) { |
||
229 | include("view/wars.php"); |
||
230 | }); |
||
231 | |||
232 | // EVE SSO |
||
233 | $app->get("/auth/eve/", function() use ($app){ |
||
234 | global $ssoEnable; |
||
235 | |||
236 | if($ssoEnable == false) |
||
237 | die("SSO is disabled"); |
||
238 | |||
239 | $code = isset($_GET["code"]) ? $_GET["code"] : null; |
||
240 | $state = isset($_GET["state"]) ? $_GET["state"] : null; |
||
241 | //header("Content-type: application/json;charset=utf-8"); |
||
242 | |||
243 | if(!$code) |
||
244 | { |
||
245 | echo json_encode(array("Error")); |
||
246 | die(); |
||
247 | } |
||
248 | OAuth::eveSSOLoginToken($code, $state); |
||
249 | }); |
||
250 | |||
251 | // Merge accounts |
||
252 | $app->map("/merge/:characterID/", function($characterID) use ($app){ |
||
253 | global $ssoEnable; |
||
254 | |||
255 | if($ssoEnable == false) |
||
256 | die("SSO is disabled"); |
||
257 | |||
258 | include("view/merge.php"); |
||
259 | })->via("GET", "POST"); |
||
260 | |||
261 | // Character |
||
262 | $app->get("/character/:character(/:pageType)(/:subPages+)/", function($character, $pageType = "overview", $subPages = array()) use ($app) { |
||
263 | include("view/character.php"); |
||
264 | }); |
||
265 | |||
266 | // Corporation |
||
267 | $app->get("/corporation/:corporation(/:pageType)(/:subPages+)/", function($corporation, $pageType = "overview", $subPages = array()) use ($app) { |
||
268 | include("view/corporation.php"); |
||
269 | }); |
||
270 | |||
271 | // Alliance |
||
272 | $app->get("/alliance/:alliance(/:pageType)(/:subPages+)/", function($alliance, $pageType = "overview", $subPages = array()) use ($app) { |
||
273 | include("view/alliance.php"); |
||
274 | }); |
||
275 | |||
276 | // Faction |
||
277 | $app->get("/faction/:faction(/:pageType)(/:subPages+)/", function($faction, $pageType = "overview", $subPages = array()) use ($app) { |
||
278 | include("view/faction.php"); |
||
279 | }); |
||
280 | |||
281 | // System |
||
282 | $app->get("/system/:solarSystem(/:pageType)(/:subPages+)/", function($solarSystem, $pageType = "overview", $subPages = array()) use ($app) { |
||
283 | include("view/system.php"); |
||
284 | }); |
||
285 | |||
286 | // Region |
||
287 | $app->get("/region/:region(/:pageType)(/:subPages+)/", function($region, $pageType = "overview", $subPages = array()) use ($app) { |
||
288 | include("view/region.php"); |
||
289 | }); |
||
290 | |||
291 | // Ship |
||
292 | $app->get("/ship/:shipType(/:pageType)(/:subPages+)/", function($shipType, $pageType = "overview", $subPages = array()) use ($app) { |
||
293 | include("view/ship.php"); |
||
294 | }); |
||
295 | |||
296 | // Group |
||
297 | $app->get("/group/:group(/:pageType)(/:subPages+)/", function($group, $pageType = "overview", $subPages = array()) use ($app) { |
||
298 | include("view/group.php"); |
||
299 | }); |
||
300 | |||
301 | // The Overview stuff |
||
302 | $app->get("/:input+/", function($input) use ($app) { |
||
303 | include("view/overview.php"); |
||
304 | }); |
||
305 |
This check looks from parameters that have been defined for a function or method, but which are not used in the method body.