@@ -40,7 +40,7 @@ discard block |
||
40 | 40 | private function inputValidationError($customtext) |
41 | 41 | { |
42 | 42 | \core\common\Entity::intoThePotatoes(); |
43 | - $retval = "<p>" . _("Input validation error: ") . $customtext . "</p>"; |
|
43 | + $retval = "<p>"._("Input validation error: ").$customtext."</p>"; |
|
44 | 44 | \core\common\Entity::outOfThePotatoes(); |
45 | 45 | return $retval; |
46 | 46 | } |
@@ -541,7 +541,7 @@ discard block |
||
541 | 541 | try { |
542 | 542 | $image->readImageBlob($binary); |
543 | 543 | } catch (\ImagickException $exception) { |
544 | - echo "Error" . $exception->getMessage(); |
|
544 | + echo "Error".$exception->getMessage(); |
|
545 | 545 | return FALSE; |
546 | 546 | } |
547 | 547 | // image survived the sanity check |
@@ -249,7 +249,7 @@ discard block |
||
249 | 249 | const ACTIONS = [ |
250 | 250 | // Inst-level actions. |
251 | 251 | API::ACTION_NEWINST_BY_REF => [ |
252 | - "REQ" => [API::AUXATTRIB_EXTERNALID,], |
|
252 | + "REQ" => [API::AUXATTRIB_EXTERNALID, ], |
|
253 | 253 | "OPT" => [ |
254 | 254 | 'general:geo_coordinates', |
255 | 255 | 'general:logo_file', |
@@ -266,7 +266,7 @@ discard block |
||
266 | 266 | ], |
267 | 267 | ], |
268 | 268 | API::ACTION_NEWINST => [ |
269 | - "REQ" => [API::AUXATTRIB_INSTTYPE,], // "IdP", "SP" or "IdPSP" |
|
269 | + "REQ" => [API::AUXATTRIB_INSTTYPE, ], // "IdP", "SP" or "IdPSP" |
|
270 | 270 | "OPT" => [ |
271 | 271 | 'general:instname', |
272 | 272 | 'general:geo_coordinates', |
@@ -562,8 +562,8 @@ discard block |
||
562 | 562 | |
563 | 563 | case \core\Options::TYPECODE_COORDINATES: |
564 | 564 | $extension = \core\Options::TYPECODE_TEXT; |
565 | - $coercedInline["option"][$basename] = $oneAttrib['NAME'] . "#"; |
|
566 | - $coercedInline["value"][$basename . "-" . $extension] = $oneAttrib['VALUE']; |
|
565 | + $coercedInline["option"][$basename] = $oneAttrib['NAME']."#"; |
|
566 | + $coercedInline["value"][$basename."-".$extension] = $oneAttrib['VALUE']; |
|
567 | 567 | break; |
568 | 568 | case \core\Options::TYPECODE_TEXT: |
569 | 569 | // Fall-through: they all get the same treatment. |
@@ -573,18 +573,18 @@ discard block |
||
573 | 573 | // Fall-through: they all get the same treatment. |
574 | 574 | case \core\Options::TYPECODE_INTEGER: |
575 | 575 | $extension = $optionInfo['type']; |
576 | - $coercedInline["option"][$basename] = $oneAttrib['NAME'] . "#"; |
|
577 | - $coercedInline["value"][$basename . "-" . $extension] = $oneAttrib['VALUE']; |
|
576 | + $coercedInline["option"][$basename] = $oneAttrib['NAME']."#"; |
|
577 | + $coercedInline["value"][$basename."-".$extension] = $oneAttrib['VALUE']; |
|
578 | 578 | if ($optionInfo['flag'] == "ML") { |
579 | - $coercedInline["value"][$basename . "-lang"] = $oneAttrib['LANG']; |
|
579 | + $coercedInline["value"][$basename."-lang"] = $oneAttrib['LANG']; |
|
580 | 580 | } |
581 | 581 | break; |
582 | 582 | case \core\Options::TYPECODE_FILE: |
583 | 583 | // Binary data is expected in base64 encoding. This is true also for PEM files! |
584 | 584 | $extension = $optionInfo['type']; |
585 | - $coercedInline["option"][$basename] = $oneAttrib['NAME'] . "#"; |
|
586 | - file_put_contents($dir['dir'] . "/" . $basename . "-" . $extension, base64_decode($oneAttrib['VALUE'])); |
|
587 | - $coercedFile["value"]['tmp_name'][$basename . "-" . $extension] = $dir['dir'] . "/" . $basename . "-" . $extension; |
|
585 | + $coercedInline["option"][$basename] = $oneAttrib['NAME']."#"; |
|
586 | + file_put_contents($dir['dir']."/".$basename."-".$extension, base64_decode($oneAttrib['VALUE'])); |
|
587 | + $coercedFile["value"]['tmp_name'][$basename."-".$extension] = $dir['dir']."/".$basename."-".$extension; |
|
588 | 588 | break; |
589 | 589 | default: |
590 | 590 | throw new Exception("We don't seem to know this type code!"); |
@@ -613,7 +613,7 @@ discard block |
||
613 | 613 | public function returnSuccess($details) { |
614 | 614 | $output = json_encode(["result" => "SUCCESS", "details" => $details], JSON_PRETTY_PRINT); |
615 | 615 | if ($output === FALSE) { |
616 | - $this->returnError(API::ERROR_INTERNAL_ERROR, "Unable to JSON encode return data: ". json_last_error(). " - ". json_last_error_msg()); |
|
616 | + $this->returnError(API::ERROR_INTERNAL_ERROR, "Unable to JSON encode return data: ".json_last_error()." - ".json_last_error_msg()); |
|
617 | 617 | } |
618 | 618 | else { |
619 | 619 | echo $output; |
@@ -20,7 +20,7 @@ discard block |
||
20 | 20 | /* |
21 | 21 | * Class autoloader invocation, should be included prior to any other code at the entry points to the application |
22 | 22 | */ |
23 | -require_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
23 | +require_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
24 | 24 | |
25 | 25 | $auth = new \web\lib\admin\Authentication(); |
26 | 26 | $auth->authenticate(); |
@@ -53,7 +53,7 @@ discard block |
||
53 | 53 | $fed = new \core\Federation($inst->federation); |
54 | 54 | $allowSb = $fed->getAttributes("fed:silverbullet"); |
55 | 55 | if (count($allowSb) == 0) { |
56 | - throw new Exception("We were told to create a new SB profile, but this " . \config\ConfAssistant::CONSORTIUM['nomenclature_federation'] . " does not allow SB at all!"); |
|
56 | + throw new Exception("We were told to create a new SB profile, but this ".\config\ConfAssistant::CONSORTIUM['nomenclature_federation']." does not allow SB at all!"); |
|
57 | 57 | } |
58 | 58 | // okay, new SB profiles are allowed. |
59 | 59 | // but is there a support:email attribute on inst level? |
@@ -64,7 +64,7 @@ discard block |
||
64 | 64 | // Create one. |
65 | 65 | $newProfile = $inst->newProfile(core\AbstractProfile::PROFILETYPE_SILVERBULLET); |
66 | 66 | // and modify the REQUEST_URI to add the new profile ID |
67 | - $_SERVER['REQUEST_URI'] = $_SERVER['REQUEST_URI'] . "&profile_id=" . $newProfile->identifier; |
|
67 | + $_SERVER['REQUEST_URI'] = $_SERVER['REQUEST_URI']."&profile_id=".$newProfile->identifier; |
|
68 | 68 | $_GET['profile_id'] = $newProfile->identifier; |
69 | 69 | $profile = $newProfile; |
70 | 70 | } else { |
@@ -89,7 +89,7 @@ discard block |
||
89 | 89 | if (isset($_POST['command'])) { |
90 | 90 | switch ($_POST['command']) { |
91 | 91 | case \web\lib\common\FormElements::BUTTON_CLOSE: |
92 | - header("Location: overview_idp.php?inst_id=" . $inst->identifier); |
|
92 | + header("Location: overview_idp.php?inst_id=".$inst->identifier); |
|
93 | 93 | break; |
94 | 94 | case \web\lib\common\FormElements::BUTTON_TERMSOFUSE: |
95 | 95 | if (isset($_POST['agreement']) && $_POST['agreement'] == 'true') { |
@@ -132,7 +132,7 @@ discard block |
||
132 | 132 | break; |
133 | 133 | } |
134 | 134 | $properName = $validator->syntaxConformUser($elements[0]); |
135 | - $properDate = new DateTime($elements[1] . " 00:00:00"); |
|
135 | + $properDate = new DateTime($elements[1]." 00:00:00"); |
|
136 | 136 | $numberOfActivations = $elements[2] ?? 5; |
137 | 137 | $number = $validator->integer($numberOfActivations); |
138 | 138 | if ($number === FALSE) { // invalid input received, default to sane |
@@ -235,18 +235,18 @@ discard block |
||
235 | 235 | // warn and ask for confirmation unless already confirmed |
236 | 236 | if (!isset($_POST['insecureconfirm']) || $_POST['insecureconfirm'] != "CONFIRM") { |
237 | 237 | echo $deco->pageheader(_("Insecure mail domain!"), "ADMIN-IDP-USERS"); |
238 | - echo "<p>" . sprintf(_("The mail domain of the mail address <strong>%s</strong> is not secure: some or all of the mail servers are not accepting encrypted connections (no consistent support for STARTTLS)."), $properEmail) . "</p>"; |
|
239 | - echo "<p>" . _("The invitation would need to be sent in cleartext across the internet, and can possibly be read and abused by anyone in transit.") . "</p>"; |
|
240 | - echo "<p>" . _("Do you want the system to send this mail anyway?") . "</p>"; |
|
238 | + echo "<p>".sprintf(_("The mail domain of the mail address <strong>%s</strong> is not secure: some or all of the mail servers are not accepting encrypted connections (no consistent support for STARTTLS)."), $properEmail)."</p>"; |
|
239 | + echo "<p>"._("The invitation would need to be sent in cleartext across the internet, and can possibly be read and abused by anyone in transit.")."</p>"; |
|
240 | + echo "<p>"._("Do you want the system to send this mail anyway?")."</p>"; |
|
241 | 241 | echo $formtext; |
242 | - echo "<button type='submit' class='delete'>" . _("DO NOT SEND") . "</button>"; |
|
242 | + echo "<button type='submit' class='delete'>"._("DO NOT SEND")."</button>"; |
|
243 | 243 | echo "</form>"; |
244 | 244 | echo $formtext; |
245 | - echo "<input type='hidden' name='command' value='" . \web\lib\common\FormElements::BUTTON_SENDINVITATIONMAILBYCAT . "'</>"; |
|
245 | + echo "<input type='hidden' name='command' value='".\web\lib\common\FormElements::BUTTON_SENDINVITATIONMAILBYCAT."'</>"; |
|
246 | 246 | echo "<input type='hidden' name='address' value='$properEmail'</>"; |
247 | - echo "<input type='hidden' name='token' value='" . $invitationObject->invitationTokenString . "'</>"; |
|
247 | + echo "<input type='hidden' name='token' value='".$invitationObject->invitationTokenString."'</>"; |
|
248 | 248 | echo "<input type='hidden' name='insecureconfirm' value='CONFIRM'/>"; |
249 | - echo "<button type='submit'>" . _("Send anyway.") . "</button>"; |
|
249 | + echo "<button type='submit'>"._("Send anyway.")."</button>"; |
|
250 | 250 | echo "</form>"; |
251 | 251 | echo $deco->footer(); |
252 | 252 | exit; |
@@ -297,7 +297,7 @@ discard block |
||
297 | 297 | $activeUsers = $profile->listActiveUsers(); |
298 | 298 | |
299 | 299 | |
300 | -echo $deco->defaultPagePrelude(sprintf(_('Managing %s users'), \core\ProfileSilverbullet::PRODUCTNAME )); |
|
300 | +echo $deco->defaultPagePrelude(sprintf(_('Managing %s users'), \core\ProfileSilverbullet::PRODUCTNAME)); |
|
301 | 301 | |
302 | 302 | ?> |
303 | 303 | <script src='js/option_expand.js' type='text/javascript'></script> |
@@ -360,19 +360,19 @@ discard block |
||
360 | 360 | case "NOSTIPULATION": |
361 | 361 | break; |
362 | 362 | case "EMAIL-SENT": |
363 | - echo $boundaryPre . $uiElements->boxOkay(_("The e-mail was sent successfully."), _("E-mail OK."), FALSE) . $boundaryPost; |
|
363 | + echo $boundaryPre.$uiElements->boxOkay(_("The e-mail was sent successfully."), _("E-mail OK."), FALSE).$boundaryPost; |
|
364 | 364 | break; |
365 | 365 | case "EMAIL-NOTSENT": |
366 | - echo $boundaryPre . $uiElements->boxError(_("The e-mail was NOT sent."), _("E-mail not OK."), FALSE) . $boundaryPost; |
|
366 | + echo $boundaryPre.$uiElements->boxError(_("The e-mail was NOT sent."), _("E-mail not OK."), FALSE).$boundaryPost; |
|
367 | 367 | break; |
368 | 368 | case "SMS-SENT": |
369 | - echo $boundaryPre . $uiElements->boxOkay(_("The SMS was sent successfully."), _("SMS OK."), FALSE) . $boundaryPost; |
|
369 | + echo $boundaryPre.$uiElements->boxOkay(_("The SMS was sent successfully."), _("SMS OK."), FALSE).$boundaryPost; |
|
370 | 370 | break; |
371 | 371 | case "SMS-NOTSENT": |
372 | - echo $boundaryPre . $uiElements->boxOkay(_("The SMS was NOT sent."), _("SMS not OK."), FALSE) . $boundaryPost; |
|
372 | + echo $boundaryPre.$uiElements->boxOkay(_("The SMS was NOT sent."), _("SMS not OK."), FALSE).$boundaryPost; |
|
373 | 373 | break; |
374 | 374 | case "SMS-FRAGMENT": |
375 | - echo $boundaryPre . $uiElements->boxWarning(_("Only a fragment of the SMS was sent. You should re-send it."), _("SMS Fragment."), FALSE) . $boundaryPost; |
|
375 | + echo $boundaryPre.$uiElements->boxWarning(_("Only a fragment of the SMS was sent. You should re-send it."), _("SMS Fragment."), FALSE).$boundaryPost; |
|
376 | 376 | break; |
377 | 377 | } |
378 | 378 | ?> |
@@ -385,17 +385,17 @@ discard block |
||
385 | 385 | <?php |
386 | 386 | $bufferCurrentUsers = "<table class='sb-user-table' style='max-width:1920px;'> |
387 | 387 | <tr class='sb-title-row'> |
388 | - <td>" . _("User") . "</td> |
|
389 | - <td>" . _("Token/Certificate details") . "</td> |
|
390 | - <td>" . _("User/Token Expiry") . "</td> |
|
391 | - <td>" . _("Actions") . "</td> |
|
388 | + <td>" . _("User")."</td> |
|
389 | + <td>" . _("Token/Certificate details")."</td> |
|
390 | + <td>" . _("User/Token Expiry")."</td> |
|
391 | + <td>" . _("Actions")."</td> |
|
392 | 392 | </tr>"; |
393 | 393 | $bufferPreviousUsers = "<table class='sb-user-table' style='max-width:1920px;'> |
394 | 394 | <tr class='sb-title-row'> |
395 | - <td>" . _("User") . "</td> |
|
396 | - <td>" . _("Certificate details") . "</td> |
|
397 | - <td>" . _("User Expiry") . "</td> |
|
398 | - <td>" . _("Actions") . "</td> |
|
395 | + <td>" . _("User")."</td> |
|
396 | + <td>" . _("Certificate details")."</td> |
|
397 | + <td>" . _("User Expiry")."</td> |
|
398 | + <td>" . _("Actions")."</td> |
|
399 | 399 | </tr>"; |
400 | 400 | |
401 | 401 | natsort($allUsers); |
@@ -452,23 +452,23 @@ discard block |
||
452 | 452 | $display = empty(devices\Devices::listDevices()[$oneCert->device]['display']) ? $oneCert->device : devices\Devices::listDevices()[$oneCert->device]['display']; |
453 | 453 | |
454 | 454 | $bufferText = "<div class='sb-certificate-summary ca-summary' $style> |
455 | - <div class='sb-certificate-details'>" . _("Device:") . " " . $display . |
|
456 | - "<br>" . _("Serial Number:") . " " . dechex($oneCert->serial) . |
|
457 | - "<br>" . _("CN:") . " " . explode('@', $oneCert->username)[0] . "@…" . |
|
458 | - "<br>" . _("Expiry:") . " " . $oneCert->expiry . |
|
459 | - "<br>" . _("Issued:") . " " . $oneCert->issued . |
|
460 | - "</div>" . |
|
455 | + <div class='sb-certificate-details'>"._("Device:")." ".$display. |
|
456 | + "<br>"._("Serial Number:")." ".dechex($oneCert->serial). |
|
457 | + "<br>"._("CN:")." ".explode('@', $oneCert->username)[0]."@…". |
|
458 | + "<br>"._("Expiry:")." ".$oneCert->expiry. |
|
459 | + "<br>"._("Issued:")." ".$oneCert->issued. |
|
460 | + "</div>". |
|
461 | 461 | "<div style='text-align:right;padding-top: 5px; $buttonStyle'>"; |
462 | 462 | |
463 | 463 | if ($buttonText == "") { |
464 | 464 | $bufferText .= $formtext |
465 | - . "<input type='hidden' name='certSerial' value='" . $oneCert->serial . "'/>" |
|
466 | - . "<input type='hidden' name='certAlgo' value='" . $oneCert->ca_type . "'/>" |
|
465 | + . "<input type='hidden' name='certSerial' value='".$oneCert->serial."'/>" |
|
466 | + . "<input type='hidden' name='certAlgo' value='".$oneCert->ca_type."'/>" |
|
467 | 467 | . "<button type='submit' " |
468 | 468 | . "name='command' " |
469 | - . "value='" . \web\lib\common\FormElements::BUTTON_REVOKECREDENTIAL . "' " |
|
469 | + . "value='".\web\lib\common\FormElements::BUTTON_REVOKECREDENTIAL."' " |
|
470 | 470 | . "class='delete' " |
471 | - . "onclick='return confirm(\"" . sprintf(_("The device in question will stop functioning with %s. The revocation cannot be undone. Are you sure you want to do this?"), \config\ConfAssistant::CONSORTIUM['display_name']) . "\")'>" |
|
471 | + . "onclick='return confirm(\"".sprintf(_("The device in question will stop functioning with %s. The revocation cannot be undone. Are you sure you want to do this?"), \config\ConfAssistant::CONSORTIUM['display_name'])."\")'>" |
|
472 | 472 | . _("Revoke") |
473 | 473 | . "</button>" |
474 | 474 | . "</form>"; |
@@ -493,13 +493,13 @@ discard block |
||
493 | 493 | } |
494 | 494 | // wrap the revoked and expired certs in a div that is hidden by default |
495 | 495 | if ($textRevokedCerts !== "") { |
496 | - $textRevokedCerts = "<span style='text-decoration: underline;' id='$oneUserId-revoked-heading' onclick='document.getElementById(\"$oneUserId-revoked-certs\").style.display = \"block\"; document.getElementById(\"$oneUserId-revoked-heading\").style.display = \"none\";'>" . sprintf(ngettext("(show %d revoked certificate)", "(show %d revoked certificates)", $countRevoked), $countRevoked) . "</span><div id='$oneUserId-revoked-certs' style='display:none;'>" . $textRevokedCerts . "</div>"; |
|
496 | + $textRevokedCerts = "<span style='text-decoration: underline;' id='$oneUserId-revoked-heading' onclick='document.getElementById(\"$oneUserId-revoked-certs\").style.display = \"block\"; document.getElementById(\"$oneUserId-revoked-heading\").style.display = \"none\";'>".sprintf(ngettext("(show %d revoked certificate)", "(show %d revoked certificates)", $countRevoked), $countRevoked)."</span><div id='$oneUserId-revoked-certs' style='display:none;'>".$textRevokedCerts."</div>"; |
|
497 | 497 | } |
498 | 498 | if ($textExpiredCerts !== "") { |
499 | - $textExpiredCerts = "<span style='text-decoration: underline;' id='$oneUserId-expired-heading' onclick='document.getElementById(\"$oneUserId-expired-certs\").style.display = \"block\"; document.getElementById(\"$oneUserId-expired-heading\").style.display = \"none\";'>" . sprintf(ngettext("(show %d expired certificate)", "(show %d expired certificates)", $countExpired), $countExpired) . "</span><div id='$oneUserId-expired-certs' style='display:none;'>" . $textExpiredCerts . "</div>"; |
|
499 | + $textExpiredCerts = "<span style='text-decoration: underline;' id='$oneUserId-expired-heading' onclick='document.getElementById(\"$oneUserId-expired-certs\").style.display = \"block\"; document.getElementById(\"$oneUserId-expired-heading\").style.display = \"none\";'>".sprintf(ngettext("(show %d expired certificate)", "(show %d expired certificates)", $countExpired), $countExpired)."</span><div id='$oneUserId-expired-certs' style='display:none;'>".$textExpiredCerts."</div>"; |
|
500 | 500 | } |
501 | 501 | // and push out the HTML |
502 | - ${$outputBuffer} .= $textActiveCerts . "<br/>" . $textExpiredCerts . " " . $textRevokedCerts . "</td>"; |
|
502 | + ${$outputBuffer} .= $textActiveCerts."<br/>".$textExpiredCerts." ".$textRevokedCerts."</td>"; |
|
503 | 503 | $tokenHtmlBuffer = ""; |
504 | 504 | $hasOnePendingInvite = FALSE; |
505 | 505 | foreach ($tokensWithoutCerts as $invitationObject) { |
@@ -510,38 +510,38 @@ discard block |
||
510 | 510 | $tokenHtmlBuffer .= "<tr class='sb-certificate-row'><td></td>"; |
511 | 511 | $jsEncodedBody = str_replace('\n', '%0D%0A', str_replace('"', '', json_encode($invitationObject->invitationMailBody()))); |
512 | 512 | $tokenHtmlBuffer .= "<td>"; |
513 | - $tokenHtmlBuffer .= sprintf(_("The invitation token %s is ready for sending! Choose how to send it:"), "<input type='text' readonly='readonly' style='background-color:lightgrey;' size='60' value='" . $invitationObject->link() . "' name='token' class='identifiedtokenarea-" . $invitationObject->identifier . "'>(…)<br/>"); |
|
513 | + $tokenHtmlBuffer .= sprintf(_("The invitation token %s is ready for sending! Choose how to send it:"), "<input type='text' readonly='readonly' style='background-color:lightgrey;' size='60' value='".$invitationObject->link()."' name='token' class='identifiedtokenarea-".$invitationObject->identifier."'>(…)<br/>"); |
|
514 | 514 | $tokenHtmlBuffer .= "<table> |
515 | - <tr><td style='vertical-align:bottom;'>" . _("E-Mail:") . "</td><td> |
|
515 | + <tr><td style='vertical-align:bottom;'>" . _("E-Mail:")."</td><td> |
|
516 | 516 | $formtext |
517 | - <input type='hidden' value='" . $invitationObject->invitationTokenString . "' name='token'><br/> |
|
517 | + <input type='hidden' value='".$invitationObject->invitationTokenString."' name='token'><br/> |
|
518 | 518 | <input type='text' name='address' id='address-$invitationObject->identifier'/> |
519 | - <button type='button' onclick='window.location=\"mailto:\"+document.getElementById(\"address-$invitationObject->identifier\").value+\"?subject=" . $invitationObject->invitationMailSubject() . "&body=$jsEncodedBody\"; return false;'>" . _("Local mail client") . "</button> |
|
520 | - <button type='submit' name='command' onclick='document.getElementById(\"spin\").style.display =\"block\"' value='" . \web\lib\common\FormElements::BUTTON_SENDINVITATIONMAILBYCAT . "'>" . _("Send with CAT") . "</button> |
|
519 | + <button type='button' onclick='window.location=\"mailto:\"+document.getElementById(\"address-$invitationObject->identifier\").value+\"?subject=".$invitationObject->invitationMailSubject()."&body=$jsEncodedBody\"; return false;'>"._("Local mail client")."</button> |
|
520 | + <button type='submit' name='command' onclick='document.getElementById(\"spin\").style.display =\"block\"' value='" . \web\lib\common\FormElements::BUTTON_SENDINVITATIONMAILBYCAT."'>"._("Send with CAT")."</button> |
|
521 | 521 | </form> |
522 | 522 | </td></tr> |
523 | - <tr><td style='vertical-align:bottom;'>" . _("SMS:") . "</td><td> |
|
523 | + <tr><td style='vertical-align:bottom;'>" . _("SMS:")."</td><td> |
|
524 | 524 | $formtext |
525 | - <input type='hidden' value='" . $invitationObject->invitationTokenString . "' name='token'><br/> |
|
525 | + <input type='hidden' value='".$invitationObject->invitationTokenString."' name='token'><br/> |
|
526 | 526 | <input type='text' name='smsnumber' /> |
527 | - <button type='submit' name='command' value='" . \web\lib\common\FormElements::BUTTON_SENDINVITATIONSMS . "'>" . _("Send in SMS...") . "</button> |
|
527 | + <button type='submit' name='command' value='" . \web\lib\common\FormElements::BUTTON_SENDINVITATIONSMS."'>"._("Send in SMS...")."</button> |
|
528 | 528 | </form> |
529 | 529 | </td></tr> |
530 | - <tr><td style='vertical-align:bottom;'>" . _("Manual:") . "</td><td> |
|
531 | - <button type='button' class='clipboardButton' onclick='clipboardCopy(" . $invitationObject->identifier . ");'>" . _("Copy to Clipboard") . "</button> |
|
530 | + <tr><td style='vertical-align:bottom;'>" . _("Manual:")."</td><td> |
|
531 | + <button type='button' class='clipboardButton' onclick='clipboardCopy(" . $invitationObject->identifier.");'>"._("Copy to Clipboard")."</button> |
|
532 | 532 | <form style='display:inline-block;' method='post' action='inc/displayQRcode.inc.php' onsubmit='popupQRWindow(this); return false;' accept-charset='UTF-8'> |
533 | - <input type='hidden' value='" . $invitationObject->invitationTokenString . "' name='token'><br/> |
|
534 | - <button type='submit'>" . _("Display QR code") . "</button> |
|
533 | + <input type='hidden' value='" . $invitationObject->invitationTokenString."' name='token'><br/> |
|
534 | + <button type='submit'>" . _("Display QR code")."</button> |
|
535 | 535 | </form> |
536 | 536 | </td></tr> |
537 | 537 | |
538 | 538 | </table> |
539 | 539 | </td>"; |
540 | - $tokenHtmlBuffer .= "<td>" . _("Expiry Date:") . " " . $invitationObject->expiry . " UTC<br>" . _("Activations remaining:") . " " . sprintf(_("%d of %d"), $invitationObject->activationsRemaining, $invitationObject->activationsTotal) . "</td>"; |
|
540 | + $tokenHtmlBuffer .= "<td>"._("Expiry Date:")." ".$invitationObject->expiry." UTC<br>"._("Activations remaining:")." ".sprintf(_("%d of %d"), $invitationObject->activationsRemaining, $invitationObject->activationsTotal)."</td>"; |
|
541 | 541 | $tokenHtmlBuffer .= "<td>" |
542 | 542 | . $formtext |
543 | - . "<input type='hidden' name='invitationtoken' value='" . $invitationObject->invitationTokenString . "'/>" |
|
544 | - . "<button type='submit' name='command' value='" . \web\lib\common\FormElements::BUTTON_REVOKEINVITATION . "' class='delete'>" . _("Revoke") . "</button></form>" |
|
543 | + . "<input type='hidden' name='invitationtoken' value='".$invitationObject->invitationTokenString."'/>" |
|
544 | + . "<button type='submit' name='command' value='".\web\lib\common\FormElements::BUTTON_REVOKEINVITATION."' class='delete'>"._("Revoke")."</button></form>" |
|
545 | 545 | . "</td></tr>"; |
546 | 546 | break; |
547 | 547 | case core\SilverbulletInvitation::SB_TOKENSTATUS_EXPIRED: |
@@ -557,10 +557,10 @@ discard block |
||
557 | 557 | } |
558 | 558 | ${$outputBuffer} .= "<td>$formtext |
559 | 559 | <div class='sb-date-container' style='min-width: 200px;'> |
560 | - <span><input type='text' maxlength='19' class='sb-date-picker' name='userexpiry' value='" . $profile->getUserExpiryDate($oneUserId) . "'> (UTC)</span> |
|
560 | + <span><input type='text' maxlength='19' class='sb-date-picker' name='userexpiry' value='".$profile->getUserExpiryDate($oneUserId)."'> (UTC)</span> |
|
561 | 561 | </div> |
562 | 562 | <input type='hidden' name='userid' value='$oneUserId'/> |
563 | - <button type='submit' name='command' value='" . \web\lib\common\FormElements::BUTTON_CHANGEUSEREXPIRY . "'>" . _("Update") . "</button> |
|
563 | + <button type='submit' name='command' value='".\web\lib\common\FormElements::BUTTON_CHANGEUSEREXPIRY."'>"._("Update")."</button> |
|
564 | 564 | </form> |
565 | 565 | </td> |
566 | 566 | <td> |
@@ -568,33 +568,33 @@ discard block |
||
568 | 568 | |
569 | 569 | if ($hasOnePendingInvite || count($validCerts) > 0) { |
570 | 570 | $deletionText = sprintf(_("All of the currently active devices will stop functioning with %s. This cannot be undone. While the user can be re-activated later, they will then need to be re-provisioned with new invitation tokens. Are you sure you want to do this?"), \config\ConfAssistant::CONSORTIUM['display_name']); |
571 | - ${$outputBuffer} .= $formtext . " |
|
571 | + ${$outputBuffer} .= $formtext." |
|
572 | 572 | <input type='hidden' name='userid' value='$oneUserId'/> |
573 | 573 | <button type='submit' " |
574 | 574 | . "name='command' " |
575 | - . "value='" . \web\lib\common\FormElements::BUTTON_DEACTIVATEUSER . "' " |
|
575 | + . "value='".\web\lib\common\FormElements::BUTTON_DEACTIVATEUSER."' " |
|
576 | 576 | . "class='delete' " |
577 | - . ( count($validCerts) > 0 ? "onclick='return confirm(\"" . $deletionText . "\")' " : "" ) |
|
577 | + . (count($validCerts) > 0 ? "onclick='return confirm(\"".$deletionText."\")' " : "") |
|
578 | 578 | . ">" |
579 | 579 | . _("Deactivate User") |
580 | 580 | . "</button> |
581 | 581 | </form>"; |
582 | 582 | } |
583 | - ${$outputBuffer} .= "<form method='post' action='inc/userStats.inc.php?inst_id=" . $profile->institution . "&profile_id=" . $profile->identifier . "&user_id=$oneUserId' onsubmit='popupStatsWindow(this); return false;' accept-charset='UTF-8'> |
|
584 | - <button type='submit'>" . _("Show Authentication Records") . "</button> |
|
583 | + ${$outputBuffer} .= "<form method='post' action='inc/userStats.inc.php?inst_id=".$profile->institution."&profile_id=".$profile->identifier."&user_id=$oneUserId' onsubmit='popupStatsWindow(this); return false;' accept-charset='UTF-8'> |
|
584 | + <button type='submit'>"._("Show Authentication Records")."</button> |
|
585 | 585 | </form>"; |
586 | 586 | if (new DateTime() < new DateTime($expiryDate)) { // current user, allow sending new token |
587 | - ${$outputBuffer} .= $formtext . " |
|
587 | + ${$outputBuffer} .= $formtext." |
|
588 | 588 | <input type='hidden' name='userid' value='$oneUserId'/> |
589 | - <button type='submit' name='command' value='" . \web\lib\common\FormElements::BUTTON_NEWINVITATION . "'>" . _("New Invitation") . "</button> |
|
590 | - <label>" . _("Activations:") . " |
|
589 | + <button type='submit' name='command' value='".\web\lib\common\FormElements::BUTTON_NEWINVITATION."'>"._("New Invitation")."</button> |
|
590 | + <label>" . _("Activations:")." |
|
591 | 591 | <input type='text' name='invitationsquantity' value='5' maxlength='3' style='width: 30px;'/> |
592 | 592 | </label> |
593 | 593 | </form>"; |
594 | 594 | } elseif (count($profile->getUserAuthRecords($oneUserId)) == 0) { // previous user; if there are NO authentication records, allow full deletion - otherwise, need to keep user trace for abuse handling |
595 | - ${$outputBuffer} .= $formtext . " |
|
595 | + ${$outputBuffer} .= $formtext." |
|
596 | 596 | <input type='hidden' name='userid' value='$oneUserId'/> |
597 | - <button type='submit' class='delete' name='command' value='" . \web\lib\common\FormElements::BUTTON_DELETE . "'>" . _("Delete User") . "</button> |
|
597 | + <button type='submit' class='delete' name='command' value='".\web\lib\common\FormElements::BUTTON_DELETE."'>"._("Delete User")."</button> |
|
598 | 598 | </form>"; |
599 | 599 | } |
600 | 600 | ${$outputBuffer} .= "</div> |
@@ -626,13 +626,13 @@ discard block |
||
626 | 626 | . ' If all accounts shown as active above are indeed still valid, please check the box below and push "Save".' |
627 | 627 | . ' If any of the accounts are stale, please deactivate them by pushing the corresponding button before doing this.'), \config\ConfAssistant::SILVERBULLET['gracetime'] ?? core\ProfileSilverbullet::SB_ACKNOWLEDGEMENT_REQUIRED_DAYS); |
628 | 628 | |
629 | - echo $formtext . "<div style='padding-bottom: 20px;'>" |
|
629 | + echo $formtext."<div style='padding-bottom: 20px;'>" |
|
630 | 630 | . " |
631 | 631 | <p>$acknowledgeText</p> |
632 | 632 | <input type='checkbox' name='acknowledge' value='true'> |
633 | - <label>" . sprintf(_("I have verified that all configured users are still eligible for %s."),\config\ConfAssistant::CONSORTIUM['display_name']) . "</label> |
|
633 | + <label>".sprintf(_("I have verified that all configured users are still eligible for %s."), \config\ConfAssistant::CONSORTIUM['display_name'])."</label> |
|
634 | 634 | </div> |
635 | - <button type='submit' name='command' value='" . \web\lib\common\FormElements::BUTTON_ACKUSERELIGIBILITY . "'>" . _("Save") . "</button></form>"; |
|
635 | + <button type='submit' name='command' value='" . \web\lib\common\FormElements::BUTTON_ACKUSERELIGIBILITY."'>"._("Save")."</button></form>"; |
|
636 | 636 | } |
637 | 637 | ?> |
638 | 638 | </div> |
@@ -26,7 +26,7 @@ discard block |
||
26 | 26 | */ |
27 | 27 | ?> |
28 | 28 | <?php |
29 | -require_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
29 | +require_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
30 | 30 | |
31 | 31 | $deco = new \web\lib\admin\PageDecoration(); |
32 | 32 | $validator = new \web\lib\common\InputValidation(); |
@@ -36,7 +36,7 @@ discard block |
||
36 | 36 | |
37 | 37 | if (!isset($_GET['deployment_id'])) { |
38 | 38 | $my_inst->newDeployment(\core\AbstractDeployment::DEPLOYMENTTYPE_MANAGED); |
39 | - header("Location: overview_sp.php?inst_id=" . $my_inst->identifier); |
|
39 | + header("Location: overview_sp.php?inst_id=".$my_inst->identifier); |
|
40 | 40 | exit(0); |
41 | 41 | } |
42 | 42 | // if we have come this far, we are editing an existing deployment |
@@ -48,7 +48,7 @@ discard block |
||
48 | 48 | if (in_array('OK', $response)) { |
49 | 49 | $deployment->deactivate(); |
50 | 50 | } |
51 | - header("Location: overview_sp.php?inst_id=" . $my_inst->identifier . '&' . urldecode(http_build_query($response))); |
|
51 | + header("Location: overview_sp.php?inst_id=".$my_inst->identifier.'&'.urldecode(http_build_query($response))); |
|
52 | 52 | exit(0); |
53 | 53 | } |
54 | 54 | |
@@ -57,7 +57,7 @@ discard block |
||
57 | 57 | if (in_array('OK', $response)) { |
58 | 58 | $deployment->activate(); |
59 | 59 | } |
60 | - header("Location: overview_sp.php?inst_id=" . $my_inst->identifier . '&' . urldecode(http_build_query($response))); |
|
60 | + header("Location: overview_sp.php?inst_id=".$my_inst->identifier.'&'.urldecode(http_build_query($response))); |
|
61 | 61 | exit(0); |
62 | 62 | } |
63 | 63 | |
@@ -78,7 +78,7 @@ discard block |
||
78 | 78 | $deployment->status = core\DeploymentManaged::INACTIVE; |
79 | 79 | $response = $deployment->setRADIUSconfig(); |
80 | 80 | } |
81 | - header("Location: overview_sp.php?inst_id=" . $my_inst->identifier . '&' . urldecode(http_build_query($response))); |
|
81 | + header("Location: overview_sp.php?inst_id=".$my_inst->identifier.'&'.urldecode(http_build_query($response))); |
|
82 | 82 | exit(0); |
83 | 83 | } |
84 | 84 | } |
@@ -106,12 +106,12 @@ discard block |
||
106 | 106 | echo $uiElements->instLevelInfoBoxes($my_inst); |
107 | 107 | $deploymentOptions = $deployment->getAttributes(); |
108 | 108 | echo "<form enctype='multipart/form-data' action='edit_hotspot.php?inst_id=$my_inst->identifier&deployment_id=$deployment->identifier' method='post' accept-charset='UTF-8'> |
109 | - <input type='hidden' name='MAX_FILE_SIZE' value='" . \config\Master::MAX_UPLOAD_SIZE . "'>"; |
|
109 | + <input type='hidden' name='MAX_FILE_SIZE' value='".\config\Master::MAX_UPLOAD_SIZE."'>"; |
|
110 | 110 | $optionDisplay = new \web\lib\admin\OptionDisplay($deploymentOptions, "Profile"); |
111 | 111 | ?> |
112 | 112 | <?php |
113 | 113 | echo "<fieldset class='option_container' id='managedsp_override'> |
114 | - <legend><strong>" . _("Options for this deployment") . "</strong></legend>"; |
|
114 | + <legend><strong>" . _("Options for this deployment")."</strong></legend>"; |
|
115 | 115 | ?> |
116 | 116 | <table> |
117 | 117 | <tr> |
@@ -129,7 +129,7 @@ discard block |
||
129 | 129 | <!-- input for VLAN identifier for home users--> |
130 | 130 | <td> |
131 | 131 | <span id='vlan_label'> |
132 | - <?php echo sprintf(_("VLAN tag for own users%s:"), ($vlan === NULL ? "" : " " . _("(unset with '0')"))); ?> |
|
132 | + <?php echo sprintf(_("VLAN tag for own users%s:"), ($vlan === NULL ? "" : " "._("(unset with '0')"))); ?> |
|
133 | 133 | </span> |
134 | 134 | </td> |
135 | 135 | <td> |
@@ -144,10 +144,10 @@ discard block |
||
144 | 144 | </table> |
145 | 145 | <?php |
146 | 146 | echo $optionDisplay->prefilledOptionTable("managedsp"); |
147 | - echo "<button type='button' class='newoption' onclick='getXML(\"managedsp\")'>" . _("Add new option") . "</button>"; |
|
147 | + echo "<button type='button' class='newoption' onclick='getXML(\"managedsp\")'>"._("Add new option")."</button>"; |
|
148 | 148 | echo "</fieldset>"; |
149 | 149 | |
150 | 150 | |
151 | - echo "<p><button type='submit' name='submitbutton' value='" . web\lib\common\FormElements::BUTTON_SAVE . "'>" . _("Save data") . "</button><button type='button' class='delete' name='abortbutton' value='abort' onclick='javascript:window.location = \"overview_sp.php?inst_id=$my_inst->identifier\"'>" . _("Discard changes") . "</button></p></form>"; |
|
151 | + echo "<p><button type='submit' name='submitbutton' value='".web\lib\common\FormElements::BUTTON_SAVE."'>"._("Save data")."</button><button type='button' class='delete' name='abortbutton' value='abort' onclick='javascript:window.location = \"overview_sp.php?inst_id=$my_inst->identifier\"'>"._("Discard changes")."</button></p></form>"; |
|
152 | 152 | echo $deco->footer(); |
153 | 153 |
@@ -17,9 +17,9 @@ discard block |
||
17 | 17 | class CertificationAuthorityEduPkiServer extends EntityWithDBProperties implements CertificationAuthorityInterface |
18 | 18 | { |
19 | 19 | |
20 | - private const LOCATION_RA_CERT = ROOT . "/config/SilverbulletClientCerts/edupki-test-ra.pem"; |
|
21 | - private const LOCATION_RA_KEY = ROOT . "/config/SilverbulletClientCerts/edupki-test-ra.clearkey"; |
|
22 | - private const LOCATION_WEBROOT = ROOT . "/config/SilverbulletClientCerts/eduPKI-webserver-root.pem"; |
|
20 | + private const LOCATION_RA_CERT = ROOT."/config/SilverbulletClientCerts/edupki-test-ra.pem"; |
|
21 | + private const LOCATION_RA_KEY = ROOT."/config/SilverbulletClientCerts/edupki-test-ra.clearkey"; |
|
22 | + private const LOCATION_WEBROOT = ROOT."/config/SilverbulletClientCerts/eduPKI-webserver-root.pem"; |
|
23 | 23 | private const EDUPKI_RA_ID = 700; |
24 | 24 | private const EDUPKI_CERT_PROFILE = "Radius Server SOAP"; |
25 | 25 | private const EDUPKI_RA_PKEY_PASSPHRASE = "..."; |
@@ -35,13 +35,13 @@ discard block |
||
35 | 35 | parent::__construct(); |
36 | 36 | |
37 | 37 | if (stat(CertificationAuthorityEduPkiServer::LOCATION_RA_CERT) === FALSE) { |
38 | - throw new Exception("RA operator PEM file not found: " . CertificationAuthorityEduPkiServer::LOCATION_RA_CERT); |
|
38 | + throw new Exception("RA operator PEM file not found: ".CertificationAuthorityEduPkiServer::LOCATION_RA_CERT); |
|
39 | 39 | } |
40 | 40 | if (stat(CertificationAuthorityEduPkiServer::LOCATION_RA_KEY) === FALSE) { |
41 | - throw new Exception("RA operator private key file not found: " . CertificationAuthorityEduPkiServer::LOCATION_RA_KEY); |
|
41 | + throw new Exception("RA operator private key file not found: ".CertificationAuthorityEduPkiServer::LOCATION_RA_KEY); |
|
42 | 42 | } |
43 | 43 | if (stat(CertificationAuthorityEduPkiServer::LOCATION_WEBROOT) === FALSE) { |
44 | - throw new Exception("CA website root CA file not found: " . CertificationAuthorityEduPkiServer::LOCATION_WEBROOT); |
|
44 | + throw new Exception("CA website root CA file not found: ".CertificationAuthorityEduPkiServer::LOCATION_WEBROOT); |
|
45 | 45 | } |
46 | 46 | } |
47 | 47 | |
@@ -96,19 +96,19 @@ discard block |
||
96 | 96 | // initialise connection to eduPKI CA / eduroam RA and send the request to them |
97 | 97 | try { |
98 | 98 | $altArray = [# Array mit den Subject Alternative Names |
99 | - "email:" . $csr["USERMAIL"] |
|
99 | + "email:".$csr["USERMAIL"] |
|
100 | 100 | ]; |
101 | 101 | $soapPub = $this->initEduPKISoapSession("PUBLIC"); |
102 | 102 | $this->loggerInstance->debug(5, "FIRST ACTUAL SOAP REQUEST (Public, newRequest)!\n"); |
103 | - $this->loggerInstance->debug(5, "PARAM_1: " . CertificationAuthorityEduPkiServer::EDUPKI_RA_ID . "\n"); |
|
104 | - $this->loggerInstance->debug(5, "PARAM_2: " . $csr["CSR"] . "\n"); |
|
103 | + $this->loggerInstance->debug(5, "PARAM_1: ".CertificationAuthorityEduPkiServer::EDUPKI_RA_ID."\n"); |
|
104 | + $this->loggerInstance->debug(5, "PARAM_2: ".$csr["CSR"]."\n"); |
|
105 | 105 | $this->loggerInstance->debug(5, "PARAM_3: "); |
106 | 106 | $this->loggerInstance->debug(5, $altArray); |
107 | - $this->loggerInstance->debug(5, "PARAM_4: " . CertificationAuthorityEduPkiServer::EDUPKI_CERT_PROFILE . "\n"); |
|
108 | - $this->loggerInstance->debug(5, "PARAM_5: " . sha1("notused") . "\n"); |
|
109 | - $this->loggerInstance->debug(5, "PARAM_6: " . $csr["USERNAME"] . "\n"); |
|
110 | - $this->loggerInstance->debug(5, "PARAM_7: " . $csr["USERMAIL"] . "\n"); |
|
111 | - $this->loggerInstance->debug(5, "PARAM_8: " . ProfileSilverbullet::PRODUCTNAME . "\n"); |
|
107 | + $this->loggerInstance->debug(5, "PARAM_4: ".CertificationAuthorityEduPkiServer::EDUPKI_CERT_PROFILE."\n"); |
|
108 | + $this->loggerInstance->debug(5, "PARAM_5: ".sha1("notused")."\n"); |
|
109 | + $this->loggerInstance->debug(5, "PARAM_6: ".$csr["USERNAME"]."\n"); |
|
110 | + $this->loggerInstance->debug(5, "PARAM_7: ".$csr["USERMAIL"]."\n"); |
|
111 | + $this->loggerInstance->debug(5, "PARAM_8: ".ProfileSilverbullet::PRODUCTNAME."\n"); |
|
112 | 112 | $this->loggerInstance->debug(5, "PARAM_9: false\n"); |
113 | 113 | $soapNewRequest = $soapPub->newRequest( |
114 | 114 | CertificationAuthorityEduPkiServer::EDUPKI_RA_ID, # RA-ID |
@@ -130,11 +130,11 @@ discard block |
||
130 | 130 | } catch (Exception $e) { |
131 | 131 | // PHP 7.1 can do this much better |
132 | 132 | if (is_soap_fault($e)) { |
133 | - throw new Exception("Error when sending SOAP request: " . "{$e->faultcode}: { |
|
133 | + throw new Exception("Error when sending SOAP request: "."{$e->faultcode}: { |
|
134 | 134 | $e->faultstring |
135 | 135 | }\n"); |
136 | 136 | } |
137 | - throw new Exception("Something odd happened while doing the SOAP request:" . $e->getMessage()); |
|
137 | + throw new Exception("Something odd happened while doing the SOAP request:".$e->getMessage()); |
|
138 | 138 | } |
139 | 139 | try { |
140 | 140 | $soap = $this->initEduPKISoapSession("RA"); |
@@ -168,7 +168,7 @@ discard block |
||
168 | 168 | // for obnoxious reasons, we have to dump the request into a file and let pkcs7_sign read from the file |
169 | 169 | // rather than just using the string. Grr. |
170 | 170 | $tempdir = \core\common\Entity::createTemporaryDirectory("test"); |
171 | - file_put_contents($tempdir['dir'] . "/content.txt", $soapCleartext); |
|
171 | + file_put_contents($tempdir['dir']."/content.txt", $soapCleartext); |
|
172 | 172 | // retrieve our RA cert from filesystem |
173 | 173 | // the RA certificates are not needed right now because we |
174 | 174 | // have resorted to S/MIME signatures with openssl command-line |
@@ -180,7 +180,7 @@ discard block |
||
180 | 180 | // sign the data, using cmdline because openssl_pkcs7_sign produces strange results |
181 | 181 | // -binary didn't help, nor switch -md to sha1 sha256 or sha512 |
182 | 182 | $this->loggerInstance->debug(5, "Actual content to be signed is this:\n $soapCleartext\n"); |
183 | - $execCmd = \config\Master::PATHS['openssl'] . " smime -sign -binary -in " . $tempdir['dir'] . "/content.txt -out " . $tempdir['dir'] . "/signature.txt -outform pem -inkey " . ROOT . "/config/SilverbulletClientCerts/edupki-test-ra.clearkey -signer " . ROOT . "/config/SilverbulletClientCerts/edupki-test-ra.pem"; |
|
183 | + $execCmd = \config\Master::PATHS['openssl']." smime -sign -binary -in ".$tempdir['dir']."/content.txt -out ".$tempdir['dir']."/signature.txt -outform pem -inkey ".ROOT."/config/SilverbulletClientCerts/edupki-test-ra.clearkey -signer ".ROOT."/config/SilverbulletClientCerts/edupki-test-ra.pem"; |
|
184 | 184 | $this->loggerInstance->debug(2, "Calling openssl smime with following cmdline: $execCmd\n"); |
185 | 185 | $output = []; |
186 | 186 | $return = 999; |
@@ -189,21 +189,21 @@ discard block |
||
189 | 189 | throw new Exception("Non-zero return value from openssl smime!"); |
190 | 190 | } |
191 | 191 | // and get the signature blob back from the filesystem |
192 | - $detachedSig = trim(file_get_contents($tempdir['dir'] . "/signature.txt")); |
|
192 | + $detachedSig = trim(file_get_contents($tempdir['dir']."/signature.txt")); |
|
193 | 193 | $this->loggerInstance->debug(5, "Request for server approveRequest has parameters:\n"); |
194 | - $this->loggerInstance->debug(5, $soapReqnum . "\n"); |
|
195 | - $this->loggerInstance->debug(5, $soapCleartext . "\n"); // PHP magically encodes this as base64 while sending! |
|
196 | - $this->loggerInstance->debug(5, $detachedSig . "\n"); |
|
194 | + $this->loggerInstance->debug(5, $soapReqnum."\n"); |
|
195 | + $this->loggerInstance->debug(5, $soapCleartext."\n"); // PHP magically encodes this as base64 while sending! |
|
196 | + $this->loggerInstance->debug(5, $detachedSig."\n"); |
|
197 | 197 | $soapIssueCert = $soap->approveRequest($soapReqnum, $soapCleartext, $detachedSig); |
198 | - $this->loggerInstance->debug(5, "approveRequest Request was: \n" . $soap->__getLastRequest()); |
|
199 | - $this->loggerInstance->debug(5, "approveRequest Response was: \n" . $soap->__getLastResponse()); |
|
198 | + $this->loggerInstance->debug(5, "approveRequest Request was: \n".$soap->__getLastRequest()); |
|
199 | + $this->loggerInstance->debug(5, "approveRequest Response was: \n".$soap->__getLastResponse()); |
|
200 | 200 | if ($soapIssueCert === FALSE) { |
201 | 201 | throw new Exception("The locally approved request was NOT processed by the CA."); |
202 | 202 | } |
203 | 203 | } catch (SoapFault $e) { |
204 | - throw new Exception("SoapFault: Error when sending or receiving SOAP message: " . "{$e->faultcode}: {$e->faultname}: {$e->faultstring}: {$e->faultactor}: {$e->detail}: {$e->headerfault}\n"); |
|
204 | + throw new Exception("SoapFault: Error when sending or receiving SOAP message: "."{$e->faultcode}: {$e->faultname}: {$e->faultstring}: {$e->faultactor}: {$e->detail}: {$e->headerfault}\n"); |
|
205 | 205 | } catch (Exception $e) { |
206 | - throw new Exception("Exception: Something odd happened between the SOAP requests:" . $e->getMessage()); |
|
206 | + throw new Exception("Exception: Something odd happened between the SOAP requests:".$e->getMessage()); |
|
207 | 207 | } |
208 | 208 | return $soapReqnum; |
209 | 209 | } |
@@ -255,9 +255,9 @@ discard block |
||
255 | 255 | throw new Exception("CAInfo has no root certificate for us!"); |
256 | 256 | } |
257 | 257 | } catch (SoapFault $e) { |
258 | - throw new Exception("SoapFault: Error when sending or receiving SOAP message: " . "{$e->faultcode}: {$e->faultname}: {$e->faultstring}: {$e->faultactor}: {$e->detail}: {$e->headerfault}\n"); |
|
258 | + throw new Exception("SoapFault: Error when sending or receiving SOAP message: "."{$e->faultcode}: {$e->faultname}: {$e->faultstring}: {$e->faultactor}: {$e->detail}: {$e->headerfault}\n"); |
|
259 | 259 | } catch (Exception $e) { |
260 | - throw new Exception("Exception: Something odd happened between the SOAP requests:" . $e->getMessage()); |
|
260 | + throw new Exception("Exception: Something odd happened between the SOAP requests:".$e->getMessage()); |
|
261 | 261 | } |
262 | 262 | return [ |
263 | 263 | "CERT" => openssl_x509_read($parsedCert['pem']), |
@@ -290,12 +290,12 @@ discard block |
||
290 | 290 | // for obnoxious reasons, we have to dump the request into a file and let pkcs7_sign read from the file |
291 | 291 | // rather than just using the string. Grr. |
292 | 292 | $tempdir = \core\common\Entity::createTemporaryDirectory("test"); |
293 | - file_put_contents($tempdir['dir'] . "/content.txt", $soapRawRevRequest); |
|
293 | + file_put_contents($tempdir['dir']."/content.txt", $soapRawRevRequest); |
|
294 | 294 | // retrieve our RA cert from filesystem |
295 | 295 | // sign the data, using cmdline because openssl_pkcs7_sign produces strange results |
296 | 296 | // -binary didn't help, nor switch -md to sha1 sha256 or sha512 |
297 | 297 | $this->loggerInstance->debug(5, "Actual content to be signed is this:\n$soapRawRevRequest\n"); |
298 | - $execCmd = \config\Master::PATHS['openssl'] . " smime -sign -binary -in " . $tempdir['dir'] . "/content.txt -out " . $tempdir['dir'] . "/signature.txt -outform pem -inkey " . CertificationAuthorityEduPkiServer::LOCATION_RA_KEY . " -signer " . CertificationAuthorityEduPkiServer::LOCATION_RA_CERT; |
|
298 | + $execCmd = \config\Master::PATHS['openssl']." smime -sign -binary -in ".$tempdir['dir']."/content.txt -out ".$tempdir['dir']."/signature.txt -outform pem -inkey ".CertificationAuthorityEduPkiServer::LOCATION_RA_KEY." -signer ".CertificationAuthorityEduPkiServer::LOCATION_RA_CERT; |
|
299 | 299 | $this->loggerInstance->debug(2, "Calling openssl smime with following cmdline: $execCmd\n"); |
300 | 300 | $output = []; |
301 | 301 | $return = 999; |
@@ -304,7 +304,7 @@ discard block |
||
304 | 304 | throw new Exception("Non-zero return value from openssl smime!"); |
305 | 305 | } |
306 | 306 | // and get the signature blob back from the filesystem |
307 | - $detachedSig = trim(file_get_contents($tempdir['dir'] . "/signature.txt")); |
|
307 | + $detachedSig = trim(file_get_contents($tempdir['dir']."/signature.txt")); |
|
308 | 308 | $soapIssueRev = $soap->approveRevocationRequest($soapRevocationSerial, $soapRawRevRequest, $detachedSig); |
309 | 309 | if ($soapIssueRev === FALSE) { |
310 | 310 | throw new Exception("The locally approved revocation request was NOT processed by the CA."); |
@@ -312,9 +312,9 @@ discard block |
||
312 | 312 | } catch (Exception $e) { |
313 | 313 | // PHP 7.1 can do this much better |
314 | 314 | if (is_soap_fault($e)) { |
315 | - throw new Exception("Error when sending SOAP request: " . "{$e->faultcode}: {$e->faultstring}\n"); |
|
315 | + throw new Exception("Error when sending SOAP request: "."{$e->faultcode}: {$e->faultstring}\n"); |
|
316 | 316 | } |
317 | - throw new Exception("Something odd happened while doing the SOAP request:" . $e->getMessage()); |
|
317 | + throw new Exception("Something odd happened while doing the SOAP request:".$e->getMessage()); |
|
318 | 318 | } |
319 | 319 | } |
320 | 320 | |
@@ -414,9 +414,9 @@ discard block |
||
414 | 414 | */ |
415 | 415 | public function soapToXmlInteger($x) |
416 | 416 | { |
417 | - return '<' . $x[0] . '>' |
|
417 | + return '<'.$x[0].'>' |
|
418 | 418 | . htmlentities($x[1], ENT_NOQUOTES | ENT_XML1) |
419 | - . '</' . $x[0] . '>'; |
|
419 | + . '</'.$x[0].'>'; |
|
420 | 420 | } |
421 | 421 | |
422 | 422 | /** |
@@ -435,9 +435,9 @@ discard block |
||
435 | 435 | // dump private key into directory |
436 | 436 | $outstring = ""; |
437 | 437 | openssl_pkey_export($privateKey, $outstring); |
438 | - file_put_contents($tempdir . "/pkey.pem", $outstring); |
|
438 | + file_put_contents($tempdir."/pkey.pem", $outstring); |
|
439 | 439 | // PHP can only do one DC in the Subject. But we need three. |
440 | - $execCmd = \config\Master::PATHS['openssl'] . " req -new -sha256 -key $tempdir/pkey.pem -out $tempdir/request.csr -subj /DC=test/DC=test/DC=eduroam/C=$fed/O=" . \config\ConfAssistant::CONSORTIUM['name'] . "/OU=$fed/CN=$username/emailAddress=$username"; |
|
440 | + $execCmd = \config\Master::PATHS['openssl']." req -new -sha256 -key $tempdir/pkey.pem -out $tempdir/request.csr -subj /DC=test/DC=test/DC=eduroam/C=$fed/O=".\config\ConfAssistant::CONSORTIUM['name']."/OU=$fed/CN=$username/emailAddress=$username"; |
|
441 | 441 | $this->loggerInstance->debug(2, "Calling openssl req with following cmdline: $execCmd\n"); |
442 | 442 | $output = []; |
443 | 443 | $return = 999; |
@@ -21,7 +21,7 @@ discard block |
||
21 | 21 | |
22 | 22 | namespace core; |
23 | 23 | |
24 | -require_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
24 | +require_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
25 | 25 | |
26 | 26 | $instMgmt = new \core\UserManagement(); |
27 | 27 | $deco = new \web\lib\admin\PageDecoration(); |
@@ -51,7 +51,7 @@ discard block |
||
51 | 51 | <?php echo $uiElements->infoblock($user->getAttributes(), "user", "User"); ?> |
52 | 52 | <tr> |
53 | 53 | <td> |
54 | - <?php echo "" . _("Unique Identifier") ?> |
|
54 | + <?php echo ""._("Unique Identifier") ?> |
|
55 | 55 | </td> |
56 | 56 | <td> |
57 | 57 | </td> |
@@ -64,14 +64,14 @@ discard block |
||
64 | 64 | <div> |
65 | 65 | <?php |
66 | 66 | if (\config\Master::DB['USER']['readonly'] === FALSE) { |
67 | - echo "<a href='edit_user.php'><button>" . _("Edit User Details") . "</button></a>"; |
|
67 | + echo "<a href='edit_user.php'><button>"._("Edit User Details")."</button></a>"; |
|
68 | 68 | } |
69 | 69 | |
70 | 70 | if ($user->isFederationAdmin()) { |
71 | - echo "<form action='overview_federation.php' method='GET' accept-charset='UTF-8'><button type='submit'>" . sprintf(_('Click here for %s management tasks'), $uiElements->nomenclatureFed) . "</button></form>"; |
|
71 | + echo "<form action='overview_federation.php' method='GET' accept-charset='UTF-8'><button type='submit'>".sprintf(_('Click here for %s management tasks'), $uiElements->nomenclatureFed)."</button></form>"; |
|
72 | 72 | } |
73 | 73 | if ($user->isSuperadmin()) { |
74 | - echo "<form action='112365365321.php' method='GET' accept-charset='UTF-8'><button type='submit'>" . _('Click here to access the superadmin page') . "</button></form>"; |
|
74 | + echo "<form action='112365365321.php' method='GET' accept-charset='UTF-8'><button type='submit'>"._('Click here to access the superadmin page')."</button></form>"; |
|
75 | 75 | } |
76 | 76 | ?> |
77 | 77 | </div> |
@@ -84,7 +84,7 @@ discard block |
||
84 | 84 | if (\config\Master::FUNCTIONALITY_LOCATIONS['CONFASSISTANT_SILVERBULLET'] == "LOCAL") { |
85 | 85 | $target = "https://wiki.geant.org/x/6Zg7Bw"; // Managed IdP manual |
86 | 86 | } |
87 | - $helptext = "<h3 style='display:inline;'>" . sprintf(_("(Need help? Refer to the <a href='%s'>%s administrator manual</a>)"), $target, $uiElements->nomenclatureInst) . "</h3>"; |
|
87 | + $helptext = "<h3 style='display:inline;'>".sprintf(_("(Need help? Refer to the <a href='%s'>%s administrator manual</a>)"), $target, $uiElements->nomenclatureInst)."</h3>"; |
|
88 | 88 | } else { |
89 | 89 | $helptext = ""; |
90 | 90 | } |
@@ -93,7 +93,7 @@ discard block |
||
93 | 93 | // we need to run the Federation constructor |
94 | 94 | $cat = new \core\CAT; |
95 | 95 | /// first parameter: number of Identity Providers; second param is the literal configured term for 'Identity Provider' (you may or may not be able to add a plural suffix for your locale) |
96 | - echo "<h2>" . sprintf(ngettext("You are managing the following <span style='display:none'>%d </span>%s:", "You are managing the following <strong>%d</strong> %s:", sizeof($hasInst)), sizeof($hasInst), $uiElements->nomenclatureParticipant) . "</h2>"; |
|
96 | + echo "<h2>".sprintf(ngettext("You are managing the following <span style='display:none'>%d </span>%s:", "You are managing the following <strong>%d</strong> %s:", sizeof($hasInst)), sizeof($hasInst), $uiElements->nomenclatureParticipant)."</h2>"; |
|
97 | 97 | $instlist = []; |
98 | 98 | $my_idps = []; |
99 | 99 | $myFeds = []; |
@@ -137,7 +137,7 @@ discard block |
||
137 | 137 | <?php |
138 | 138 | foreach ($myFeds as $fed_id => $fed_name) { |
139 | 139 | /// nomenclature 'fed', fed name, nomenclature 'inst' |
140 | - echo "<tr><td colspan='4'><strong>" . sprintf(_("%s %s: %s list"), $uiElements->nomenclatureFed, $fed_name, $uiElements->nomenclatureParticipant) . "</strong></td></tr>"; |
|
140 | + echo "<tr><td colspan='4'><strong>".sprintf(_("%s %s: %s list"), $uiElements->nomenclatureFed, $fed_name, $uiElements->nomenclatureParticipant)."</strong></td></tr>"; |
|
141 | 141 | |
142 | 142 | $fedOrganisations = $my_idps[$fed_id]; |
143 | 143 | asort($fedOrganisations); |
@@ -146,7 +146,7 @@ discard block |
||
146 | 146 | $the_inst = $oneinst['object']; |
147 | 147 | |
148 | 148 | echo "<tr>" |
149 | - . "<td>" . $oneinst['name'] . "</td>"; |
|
149 | + . "<td>".$oneinst['name']."</td>"; |
|
150 | 150 | echo "<td>"; |
151 | 151 | $admins = $the_inst->listOwners(); |
152 | 152 | $blessedUser = FALSE; |
@@ -155,7 +155,7 @@ discard block |
||
155 | 155 | $coadmin = new \core\User($username['ID']); |
156 | 156 | $coadmin_name = $coadmin->getAttributes('user:realname'); |
157 | 157 | if (count($coadmin_name) > 0) { |
158 | - echo $coadmin_name[0]['value'] . "<br/>"; |
|
158 | + echo $coadmin_name[0]['value']."<br/>"; |
|
159 | 159 | unset($admins[$number]); |
160 | 160 | } |
161 | 161 | } else { // don't list self |
@@ -166,11 +166,11 @@ discard block |
||
166 | 166 | } |
167 | 167 | $otherAdminCount = count($admins); // only the unnamed remain |
168 | 168 | if ($otherAdminCount > 0) { |
169 | - echo sprintf(ngettext("%d other user", "%d other users", $otherAdminCount),$otherAdminCount); |
|
169 | + echo sprintf(ngettext("%d other user", "%d other users", $otherAdminCount), $otherAdminCount); |
|
170 | 170 | } |
171 | 171 | echo "</td><td>"; |
172 | 172 | if ($blessedUser && \config\Master::DB['INST']['readonly'] === FALSE) { |
173 | - echo "<div style='white-space: nowrap;'><form method='post' action='inc/manageAdmins.inc.php?inst_id=" . $the_inst->identifier . "' onsubmit='popupRedirectWindow(this); return false;' accept-charset='UTF-8'><button type='submit'>" . _("Add/Remove Administrators") . "</button></form></div>"; |
|
173 | + echo "<div style='white-space: nowrap;'><form method='post' action='inc/manageAdmins.inc.php?inst_id=".$the_inst->identifier."' onsubmit='popupRedirectWindow(this); return false;' accept-charset='UTF-8'><button type='submit'>"._("Add/Remove Administrators")."</button></form></div>"; |
|
174 | 174 | } |
175 | 175 | echo "</td></tr>"; |
176 | 176 | } |
@@ -210,7 +210,7 @@ discard block |
||
210 | 210 | echo "</td><td>"; // danger zone |
211 | 211 | ?> |
212 | 212 | <form action='edit_participant_result.php?inst_id=<?php echo $the_inst->identifier; ?>' method='post' accept-charset='UTF-8'> |
213 | - <button class='delete' type='submit' name='submitbutton' value='<?php echo \web\lib\common\FormElements::BUTTON_DELETE; ?>' onclick="return confirm('<?php echo ( \config\ConfAssistant::CONSORTIUM['selfservice_registration'] === NULL ? sprintf(_("After deleting the %s, you can not recreate it yourself - you need a new invitation token from the %s administrator!"), $uiElements->nomenclatureInst, $uiElements->nomenclatureFed) . " " : "" ) . sprintf(_("Do you really want to delete your %s %s?"), $uiElements->nomenclatureParticipant, $my_inst->name); ?>')"><?php echo sprintf(_("Delete %s"), $uiElements->nomenclatureParticipant); ?></button> |
|
213 | + <button class='delete' type='submit' name='submitbutton' value='<?php echo \web\lib\common\FormElements::BUTTON_DELETE; ?>' onclick="return confirm('<?php echo (\config\ConfAssistant::CONSORTIUM['selfservice_registration'] === NULL ? sprintf(_("After deleting the %s, you can not recreate it yourself - you need a new invitation token from the %s administrator!"), $uiElements->nomenclatureInst, $uiElements->nomenclatureFed)." " : "").sprintf(_("Do you really want to delete your %s %s?"), $uiElements->nomenclatureParticipant, $my_inst->name); ?>')"><?php echo sprintf(_("Delete %s"), $uiElements->nomenclatureParticipant); ?></button> |
|
214 | 214 | </form> |
215 | 215 | <form action='edit_participant_result.php?inst_id=<?php echo $the_inst->identifier; ?>' method='post' accept-charset='UTF-8'> |
216 | 216 | <button class='delete' type='submit' name='submitbutton' value='<?php echo \web\lib\common\FormElements::BUTTON_FLUSH_AND_RESTART; ?>' onclick="return confirm('<?php echo sprintf(_("This action will delete all properties of the %s and start over the configuration from scratch. Do you really want to reset all settings of the %s %s?"), $uiElements->nomenclatureParticipant, $uiElements->nomenclatureParticipant, $my_inst->name); ?>')"><?php echo sprintf(_("Reset all %s settings"), $uiElements->nomenclatureParticipant); ?></button> |
@@ -221,18 +221,18 @@ discard block |
||
221 | 221 | } |
222 | 222 | echo "</table>"; |
223 | 223 | } else { |
224 | - echo "<h2>" . sprintf(_("You are not managing any %s."), $uiElements->nomenclatureInst) . "</h2>"; |
|
224 | + echo "<h2>".sprintf(_("You are not managing any %s."), $uiElements->nomenclatureInst)."</h2>"; |
|
225 | 225 | } |
226 | 226 | if (\config\Master::DB['INST']['readonly'] === FALSE) { |
227 | 227 | if (\config\ConfAssistant::CONSORTIUM['selfservice_registration'] === NULL) { |
228 | - echo "<p>" . sprintf(_("Please ask your %s administrator to invite you to become an %s administrator."), $uiElements->nomenclatureFed, $uiElements->nomenclatureParticipant) . "</p>"; |
|
228 | + echo "<p>".sprintf(_("Please ask your %s administrator to invite you to become an %s administrator."), $uiElements->nomenclatureFed, $uiElements->nomenclatureParticipant)."</p>"; |
|
229 | 229 | echo "<hr/> |
230 | 230 | <div style='white-space: nowrap;'> |
231 | 231 | <form action='action_enrollment.php' method='get' accept-charset='UTF-8'>" . |
232 | - sprintf(_("Did you receive an invitation token to manage an %s? Please paste it here:"), $uiElements->nomenclatureParticipant) . |
|
232 | + sprintf(_("Did you receive an invitation token to manage an %s? Please paste it here:"), $uiElements->nomenclatureParticipant). |
|
233 | 233 | " <input type='text' id='token' name='token'/> |
234 | 234 | <button type='submit'>" . |
235 | - _("Go!") . " |
|
235 | + _("Go!")." |
|
236 | 236 | </button> |
237 | 237 | </form> |
238 | 238 | </div>"; |
@@ -241,7 +241,7 @@ discard block |
||
241 | 241 | <div style='white-space: nowrap;'> |
242 | 242 | <form action='action_enrollment.php' method='get'><button type='submit' accept-charset='UTF-8'> |
243 | 243 | <input type='hidden' id='token' name='token' value='SELF-REGISTER'/>" . |
244 | - sprintf(_("New %s Registration"), $uiElements->nomenclatureParticipant) . " |
|
244 | + sprintf(_("New %s Registration"), $uiElements->nomenclatureParticipant)." |
|
245 | 245 | </button> |
246 | 246 | </form> |
247 | 247 | </div>"; |
@@ -170,12 +170,12 @@ |
||
170 | 170 | 'db' => 'radacct', |
171 | 171 | 'user' => 'someuser', |
172 | 172 | 'pass' => 'somepass', |
173 | - 'readonly' => TRUE,], |
|
173 | + 'readonly' => TRUE, ], |
|
174 | 174 | 'RADIUS_2' => [ |
175 | 175 | 'host' => 'auth-2.hosted.eduroam.org', |
176 | 176 | 'db' => 'radacct', |
177 | 177 | 'user' => 'someuser', |
178 | 178 | 'pass' => 'somepass', |
179 | - 'readonly' => TRUE,], |
|
179 | + 'readonly' => TRUE, ], |
|
180 | 180 | ]; |
181 | 181 | } |
@@ -254,7 +254,7 @@ discard block |
||
254 | 254 | $serverCandidates[IdPlist::geoDistance($adminLocation, ['lat' => $iterator->location_lat, 'lon' => $iterator->location_lon])] = $iterator->server_id; |
255 | 255 | } |
256 | 256 | if ($clients > $maxSupportedClients * 0.9) { |
257 | - $this->loggerInstance->debug(1, "A RADIUS server for Managed SP (" . $iterator->server_id . ") is serving at more than 90% capacity!"); |
|
257 | + $this->loggerInstance->debug(1, "A RADIUS server for Managed SP (".$iterator->server_id.") is serving at more than 90% capacity!"); |
|
258 | 258 | } |
259 | 259 | } |
260 | 260 | if (count($serverCandidates) == 0 && $federation != "DEFAULT") { |
@@ -263,7 +263,7 @@ discard block |
||
263 | 263 | return $this->findGoodServerLocation($adminLocation, "DEFAULT", $blacklistedServers); |
264 | 264 | } |
265 | 265 | if (count($serverCandidates) == 0) { |
266 | - throw new Exception("No available server found for new SP! $federation " . print_r($serverCandidates, true)); |
|
266 | + throw new Exception("No available server found for new SP! $federation ".print_r($serverCandidates, true)); |
|
267 | 267 | } |
268 | 268 | // put the nearest server on top of the list |
269 | 269 | ksort($serverCandidates); |
@@ -291,7 +291,7 @@ discard block |
||
291 | 291 | $foundFreePort1 = 0; |
292 | 292 | while ($foundFreePort1 == 0) { |
293 | 293 | $portCandidate = random_int(1200, 65535); |
294 | - $check = $this->databaseHandle->exec("SELECT port_instance_1 FROM deployment WHERE radius_instance_1 = '" . $ourserver . "' AND port_instance_1 = $portCandidate"); |
|
294 | + $check = $this->databaseHandle->exec("SELECT port_instance_1 FROM deployment WHERE radius_instance_1 = '".$ourserver."' AND port_instance_1 = $portCandidate"); |
|
295 | 295 | if (mysqli_num_rows(/** @scrutinizer ignore-type */ $check) == 0) { |
296 | 296 | $foundFreePort1 = $portCandidate; |
297 | 297 | } |
@@ -300,14 +300,14 @@ discard block |
||
300 | 300 | $foundFreePort2 = 0; |
301 | 301 | while ($foundFreePort2 == 0) { |
302 | 302 | $portCandidate = random_int(1200, 65535); |
303 | - $check = $this->databaseHandle->exec("SELECT port_instance_2 FROM deployment WHERE radius_instance_2 = '" . $ourSecondServer . "' AND port_instance_2 = $portCandidate"); |
|
303 | + $check = $this->databaseHandle->exec("SELECT port_instance_2 FROM deployment WHERE radius_instance_2 = '".$ourSecondServer."' AND port_instance_2 = $portCandidate"); |
|
304 | 304 | if (mysqli_num_rows(/** @scrutinizer ignore-type */ $check) == 0) { |
305 | 305 | $foundFreePort2 = $portCandidate; |
306 | 306 | } |
307 | 307 | } |
308 | 308 | // and make up a shared secret that is halfways readable |
309 | 309 | $futureSecret = $this->randomString(16, "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"); |
310 | - $this->databaseHandle->exec("UPDATE deployment SET radius_instance_1 = '" . $ourserver . "', radius_instance_2 = '" . $ourSecondServer . "', port_instance_1 = $foundFreePort1, port_instance_2 = $foundFreePort2, secret = '$futureSecret' WHERE deployment_id = $this->identifier"); |
|
310 | + $this->databaseHandle->exec("UPDATE deployment SET radius_instance_1 = '".$ourserver."', radius_instance_2 = '".$ourSecondServer."', port_instance_1 = $foundFreePort1, port_instance_2 = $foundFreePort2, secret = '$futureSecret' WHERE deployment_id = $this->identifier"); |
|
311 | 311 | return ["port_instance_1" => $foundFreePort1, "port_instance_2" => $foundFreePort2, "secret" => $futureSecret, "radius_instance_1" => $ourserver, "radius_instance_2" => $ourserver]; |
312 | 312 | } |
313 | 313 | |
@@ -354,7 +354,7 @@ discard block |
||
354 | 354 | */ |
355 | 355 | public function deactivate() |
356 | 356 | { |
357 | - $this->databaseHandle->exec("UPDATE deployment SET status = " . DeploymentManaged::INACTIVE . " WHERE deployment_id = $this->identifier"); |
|
357 | + $this->databaseHandle->exec("UPDATE deployment SET status = ".DeploymentManaged::INACTIVE." WHERE deployment_id = $this->identifier"); |
|
358 | 358 | } |
359 | 359 | |
360 | 360 | /** |
@@ -365,7 +365,7 @@ discard block |
||
365 | 365 | */ |
366 | 366 | public function activate() |
367 | 367 | { |
368 | - $this->databaseHandle->exec("UPDATE deployment SET status = " . DeploymentManaged::ACTIVE . " WHERE deployment_id = $this->identifier"); |
|
368 | + $this->databaseHandle->exec("UPDATE deployment SET status = ".DeploymentManaged::ACTIVE." WHERE deployment_id = $this->identifier"); |
|
369 | 369 | } |
370 | 370 | |
371 | 371 | /** |
@@ -377,7 +377,7 @@ discard block |
||
377 | 377 | { |
378 | 378 | $customAttrib = $this->getAttributes("managedsp:operatorname"); |
379 | 379 | if (count($customAttrib) == 0) { |
380 | - return "1sp." . $this->identifier . "-" . $this->institution . \config\ConfAssistant::SILVERBULLET['realm_suffix']; |
|
380 | + return "1sp.".$this->identifier."-".$this->institution.\config\ConfAssistant::SILVERBULLET['realm_suffix']; |
|
381 | 381 | } |
382 | 382 | return $customAttrib[0]["value"]; |
383 | 383 | } |
@@ -393,13 +393,13 @@ discard block |
||
393 | 393 | { |
394 | 394 | |
395 | 395 | $hostname = "radius_hostname_$idx"; |
396 | - $ch = curl_init("http://" . $this->$hostname); |
|
396 | + $ch = curl_init("http://".$this->$hostname); |
|
397 | 397 | if ($ch === FALSE) { |
398 | 398 | $res = 'FAILURE'; |
399 | 399 | } else { |
400 | 400 | curl_setopt($ch, CURLOPT_POST, 1); |
401 | 401 | curl_setopt($ch, CURLOPT_POSTFIELDS, $post); |
402 | - $this->loggerInstance->debug(1, "Posting to http://" . $this->$hostname . ": $post\n"); |
|
402 | + $this->loggerInstance->debug(1, "Posting to http://".$this->$hostname.": $post\n"); |
|
403 | 403 | curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); |
404 | 404 | curl_setopt($ch, CURLOPT_HEADER, 0); |
405 | 405 | curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); |
@@ -408,13 +408,13 @@ discard block |
||
408 | 408 | $this->loggerInstance->debug(1, "curl_exec failure"); |
409 | 409 | $res = 'FAILURE'; |
410 | 410 | } else { |
411 | - $res = (string)$exec; // it is always a string due to RETURNTRANSFER but let's make Scrutinizer which thinks this could be TRUE as well |
|
411 | + $res = (string) $exec; // it is always a string due to RETURNTRANSFER but let's make Scrutinizer which thinks this could be TRUE as well |
|
412 | 412 | } |
413 | 413 | $this->loggerInstance->debug(1, "Response from FR configurator: $res\n"); |
414 | 414 | $this->loggerInstance->debug(1, $this); |
415 | 415 | } |
416 | 416 | $this->loggerInstance->debug(1, "Database update"); |
417 | - $this->databaseHandle->exec("UPDATE deployment SET radius_status_$idx = " . ($res == 'OK' ? \core\AbstractDeployment::RADIUS_OK : \core\AbstractDeployment::RADIUS_FAILURE) . " WHERE deployment_id = $this->identifier"); |
|
417 | + $this->databaseHandle->exec("UPDATE deployment SET radius_status_$idx = ".($res == 'OK' ? \core\AbstractDeployment::RADIUS_OK : \core\AbstractDeployment::RADIUS_FAILURE)." WHERE deployment_id = $this->identifier"); |
|
418 | 418 | return $res; |
419 | 419 | } |
420 | 420 | |
@@ -435,19 +435,19 @@ discard block |
||
435 | 435 | } else { |
436 | 436 | $txt = $remove ? _('Profile dectivation failed') : _('Profile activation/modification failed'); |
437 | 437 | } |
438 | - $txt = $txt . ' '; |
|
438 | + $txt = $txt.' '; |
|
439 | 439 | if (array_count_values($response)[$status] == 2) { |
440 | - $txt = $txt . _('on both RADIUS servers: primary and backup') . '.'; |
|
440 | + $txt = $txt._('on both RADIUS servers: primary and backup').'.'; |
|
441 | 441 | } else { |
442 | 442 | if ($response['res[1]'] == $status) { |
443 | - $txt = $txt . _('on primary RADIUS server') . '.'; |
|
443 | + $txt = $txt._('on primary RADIUS server').'.'; |
|
444 | 444 | } else { |
445 | - $txt = $txt . _('on backup RADIUS server') . '.'; |
|
445 | + $txt = $txt._('on backup RADIUS server').'.'; |
|
446 | 446 | } |
447 | 447 | } |
448 | 448 | $mail = \core\common\OutsideComm::mailHandle(); |
449 | 449 | $email = $this->getAttributes("support:email")[0]['value']; |
450 | - $mail->FromName = \config\Master::APPEARANCE['productname'] . " Notification System"; |
|
450 | + $mail->FromName = \config\Master::APPEARANCE['productname']." Notification System"; |
|
451 | 451 | $mail->addAddress($email); |
452 | 452 | if ($status == 'OK') { |
453 | 453 | $mail->Subject = _('RADIUS profile update problem fixed'); |
@@ -481,7 +481,7 @@ discard block |
||
481 | 481 | return NULL; |
482 | 482 | } |
483 | 483 | $timeout = 10; |
484 | - curl_setopt($ch, CURLOPT_URL, 'http://' . $host); |
|
484 | + curl_setopt($ch, CURLOPT_URL, 'http://'.$host); |
|
485 | 485 | curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); |
486 | 486 | curl_setopt($ch, CURLOPT_TIMEOUT, $timeout); |
487 | 487 | curl_exec($ch); |
@@ -572,32 +572,32 @@ discard block |
||
572 | 572 | { |
573 | 573 | $remove = ($this->status == \core\AbstractDeployment::INACTIVE) ? 0 : 1; |
574 | 574 | $toPost = ($onlyone ? array($onlyone => '') : array(1 => '', 2 => '')); |
575 | - $toPostTemplate = 'instid=' . $this->institution . '&deploymentid=' . $this->identifier . '&secret=' . $this->secret . '&country=' . $this->getAttributes("internal:country")[0]['value'] . '&'; |
|
575 | + $toPostTemplate = 'instid='.$this->institution.'&deploymentid='.$this->identifier.'&secret='.$this->secret.'&country='.$this->getAttributes("internal:country")[0]['value'].'&'; |
|
576 | 576 | if ($remove) { |
577 | - $toPostTemplate = $toPostTemplate . 'remove=1&'; |
|
577 | + $toPostTemplate = $toPostTemplate.'remove=1&'; |
|
578 | 578 | } else { |
579 | 579 | if ($this->getAttributes("managedsp:operatorname")[0]['value'] ?? NULL) { |
580 | - $toPostTemplate = $toPostTemplate . 'operatorname=' . $this->getAttributes("managedsp:operatorname")[0]['value'] . '&'; |
|
580 | + $toPostTemplate = $toPostTemplate.'operatorname='.$this->getAttributes("managedsp:operatorname")[0]['value'].'&'; |
|
581 | 581 | } |
582 | 582 | if ($this->getAttributes("managedsp:vlan")[0]['value'] ?? NULL) { |
583 | 583 | $allRealms = $this->getAllRealms(); |
584 | 584 | if (!empty($allRealms)) { |
585 | - $toPostTemplate = $toPostTemplate . 'vlan=' . $this->getAttributes("managedsp:vlan")[0]['value'] . '&'; |
|
586 | - $toPostTemplate = $toPostTemplate . 'realmforvlan[]=' . implode('&realmforvlan[]=', $allRealms) . '&'; |
|
585 | + $toPostTemplate = $toPostTemplate.'vlan='.$this->getAttributes("managedsp:vlan")[0]['value'].'&'; |
|
586 | + $toPostTemplate = $toPostTemplate.'realmforvlan[]='.implode('&realmforvlan[]=', $allRealms).'&'; |
|
587 | 587 | } |
588 | 588 | } |
589 | 589 | } |
590 | 590 | foreach (array_keys($toPost) as $key) { |
591 | - $elem = 'port' . $key; |
|
592 | - $toPost[$key] = $toPostTemplate . 'port=' . $this->$elem; |
|
591 | + $elem = 'port'.$key; |
|
592 | + $toPost[$key] = $toPostTemplate.'port='.$this->$elem; |
|
593 | 593 | } |
594 | 594 | $response = array(); |
595 | 595 | foreach ($toPost as $key => $value) { |
596 | - $this->loggerInstance->debug(1, 'toPost ' . $toPost[$key] . "\n"); |
|
597 | - $response['res[' . $key . ']'] = $this->sendToRADIUS($key, $toPost[$key]); |
|
596 | + $this->loggerInstance->debug(1, 'toPost '.$toPost[$key]."\n"); |
|
597 | + $response['res['.$key.']'] = $this->sendToRADIUS($key, $toPost[$key]); |
|
598 | 598 | } |
599 | 599 | if ($onlyone) { |
600 | - $response['res[' . ($onlyone == 1) ? 2 : 1 . ']'] = \core\AbstractDeployment::RADIUS_OK; |
|
600 | + $response['res['.($onlyone == 1) ? 2 : 1.']'] = \core\AbstractDeployment::RADIUS_OK; |
|
601 | 601 | } |
602 | 602 | foreach (array('OK', 'FAILURE') as $status) { |
603 | 603 | if ((($status == 'OK' && $notify) || ($status == 'FAILURE')) && in_array($status, $response)) { |
@@ -26,7 +26,7 @@ discard block |
||
26 | 26 | */ |
27 | 27 | ?> |
28 | 28 | <?php |
29 | -require_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
29 | +require_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
30 | 30 | |
31 | 31 | $auth = new \web\lib\admin\Authentication(); |
32 | 32 | $deco = new \web\lib\admin\PageDecoration(); |
@@ -72,7 +72,7 @@ discard block |
||
72 | 72 | // also send user back to the overview page |
73 | 73 | if (isset($_POST['requestcert']) && $_POST['requestcert'] == \web\lib\common\FormElements::BUTTON_SAVE) { |
74 | 74 | // basic sanity checks before we hand this over to openssl |
75 | - $sanitisedCsr = $validator->string($_POST['CSR'] ?? "" , TRUE); |
|
75 | + $sanitisedCsr = $validator->string($_POST['CSR'] ?? "", TRUE); |
|
76 | 76 | if (openssl_csr_get_public_key($sanitisedCsr) === FALSE) { |
77 | 77 | throw new Exception("Sorry: Unable to parse the submitted public key - no public key inside?"); |
78 | 78 | } |
@@ -86,7 +86,7 @@ discard block |
||
86 | 86 | $fed = $validator->existingFederation($_POST['NRO-list']); |
87 | 87 | $country = strtoupper($fed->tld); |
88 | 88 | $DN[] = "C=$country"; |
89 | - $DN[] = "O=NRO of " . $cat->knownFederations[strtoupper($fed->tld)]; |
|
89 | + $DN[] = "O=NRO of ".$cat->knownFederations[strtoupper($fed->tld)]; |
|
90 | 90 | $DN[] = "CN=comes.from.eduroam.db"; |
91 | 91 | $policies[] = "eduroam IdP"; |
92 | 92 | $policies[] = "eduroam SP"; |
@@ -104,11 +104,11 @@ discard block |
||
104 | 104 | default: |
105 | 105 | throw new Exception("Sorry: Unknown level of issuance requested."); |
106 | 106 | } |
107 | - echo "<p>" . _("Requesting a certificate with the following properties"); |
|
107 | + echo "<p>"._("Requesting a certificate with the following properties"); |
|
108 | 108 | echo "<ul>"; |
109 | - echo "<li>" . _("Policy OIDs: ") . implode(", ", $policies) . "</li>"; |
|
110 | - echo "<li>" . _("Distinguished Name: ") . implode(", ", $DN) . "</li>"; |
|
111 | - echo "<li>" . _("Requester Contact Details: will come from eduroam DB (using stub 'Someone, <[email protected]>').") . "</li>"; |
|
109 | + echo "<li>"._("Policy OIDs: ").implode(", ", $policies)."</li>"; |
|
110 | + echo "<li>"._("Distinguished Name: ").implode(", ", $DN)."</li>"; |
|
111 | + echo "<li>"._("Requester Contact Details: will come from eduroam DB (using stub 'Someone, <[email protected]>').")."</li>"; |
|
112 | 112 | echo "</ul></p>"; |
113 | 113 | /* $ossl = proc_open("openssl req -subj '/".implode("/", $DN)."'", [ 0 => ["pipe", "r"], 1 => ["pipe", "w"], 2 => [ "file", "/tmp/voodoo-error", "a"] ], $pipes); |
114 | 114 | if (is_resource($ossl)) { |
@@ -121,13 +121,13 @@ discard block |
||
121 | 121 | throw new Exception("Calling openssl in a fancy way did not work."); |
122 | 122 | } |
123 | 123 | echo "<p>"._("This is the new CSR (return code was $retval)")."<pre>$newCsr</pre></p>"; */ |
124 | - $newCsrWithMeta = ["CSR" => /* $newCsr */ $_POST['CSR'], "USERNAME" => "Someone", "USERMAIL" => "[email protected]", "SUBJECT" => implode(",", $DN) ,"FED" => $country]; |
|
124 | + $newCsrWithMeta = ["CSR" => /* $newCsr */ $_POST['CSR'], "USERNAME" => "Someone", "USERMAIL" => "[email protected]", "SUBJECT" => implode(",", $DN), "FED" => $country]; |
|
125 | 125 | // our certs can be good for max 5 years |
126 | 126 | $fed->requestCertificate($newCsrWithMeta, 1825); |
127 | 127 | echo "<p>"._("The certificate was requested.")."</p>"; |
128 | 128 | ?> |
129 | 129 | <form action="overview_certificates.php" method="GET"> |
130 | - <button type="submit"><?php echo _("Back to Certificate Overview");?></button> |
|
130 | + <button type="submit"><?php echo _("Back to Certificate Overview"); ?></button> |
|
131 | 131 | </form> |
132 | 132 | <?php |
133 | 133 | echo $deco->footer(); |
@@ -136,14 +136,14 @@ discard block |
||
136 | 136 | |
137 | 137 | // if we did not get a SAVE button, display UI for a fresh request instead |
138 | 138 | ?> |
139 | - <h2><?php echo _("1. Certificate Holder Details");?></h2> |
|
139 | + <h2><?php echo _("1. Certificate Holder Details"); ?></h2> |
|
140 | 140 | <form action="action_req_certificate.php" method="POST"> |
141 | 141 | <input type="radio" name="LEVEL" id="NRO" value="NRO" checked><?php printf(_("Certificate for %s role"), $uiElements->nomenclatureFed); ?></input> |
142 | 142 | <?php |
143 | 143 | if (count($feds) == 1) { |
144 | 144 | $fedObject = new \core\Federation($feds[0]['value']); |
145 | - echo " <strong>" . $cat->knownFederations[$fedObject->tld] . "</strong>"; |
|
146 | - echo '<input type="hidden" name="NRO-list" id="NRO-list" value="' . $fedObject->tld . '"/>'; |
|
145 | + echo " <strong>".$cat->knownFederations[$fedObject->tld]."</strong>"; |
|
146 | + echo '<input type="hidden" name="NRO-list" id="NRO-list" value="'.$fedObject->tld.'"/>'; |
|
147 | 147 | } else { |
148 | 148 | ?> |
149 | 149 | <select name="NRO-list" id="NRO-list"> |
@@ -151,7 +151,7 @@ discard block |
||
151 | 151 | <?php |
152 | 152 | foreach ($feds as $oneFed) { |
153 | 153 | $fedObject = new \core\Federation($oneFed['value']); |
154 | - echo '<option value="' . strtoupper($fedObject->tld) . '">' . $cat->knownFederations[$fedObject->tld] . "</option>"; |
|
154 | + echo '<option value="'.strtoupper($fedObject->tld).'">'.$cat->knownFederations[$fedObject->tld]."</option>"; |
|
155 | 155 | } |
156 | 156 | ?> |
157 | 157 | </select> |
@@ -171,15 +171,15 @@ discard block |
||
171 | 171 | } |
172 | 172 | } |
173 | 173 | foreach ($allIdPs as $id => $name) { |
174 | - echo '<option value="' . $id . '">' . $name . "</option>"; |
|
174 | + echo '<option value="'.$id.'">'.$name."</option>"; |
|
175 | 175 | } |
176 | 176 | ?> |
177 | 177 | </select> |
178 | 178 | <br/> |
179 | - <h2><?php echo _("2. CSR generation");?></h2> |
|
180 | - <p><?php echo _("One way to generate an acceptable certificate request is via this openssl one-liner:");?></p> |
|
179 | + <h2><?php echo _("2. CSR generation"); ?></h2> |
|
180 | + <p><?php echo _("One way to generate an acceptable certificate request is via this openssl one-liner:"); ?></p> |
|
181 | 181 | <p>openssl req -new -newkey rsa:4096 -out test.csr -keyout test.key -subj /DC=test/DC=test/DC=eduroam/C=XY/O=WillBeReplaced/CN=will.be.replaced</p> |
182 | - <h2><?php echo _("3. Submission");?></h2> |
|
182 | + <h2><?php echo _("3. Submission"); ?></h2> |
|
183 | 183 | <?php echo _("Please paste your CSR here:"); ?><br/><textarea name="CSR" id="CSR" rows="20" cols="85"/></textarea><br/> |
184 | 184 | <button type="submit" name="requestcert" id="requestcert" value="<?php echo \web\lib\common\FormElements::BUTTON_SAVE ?>"><?php echo _("Send request"); ?></button> |
185 | 185 | </form> |