This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php |
||
2 | /** |
||
3 | * You may not change or alter any portion of this comment or credits |
||
4 | * of supporting developers from this source code or any supporting source code |
||
5 | * which is considered copyrighted (c) material of the original comment or credit authors. |
||
6 | * This program is distributed in the hope that it will be useful, |
||
7 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
8 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||
9 | * |
||
10 | * @copyright XOOPS Project (https://xoops.org) |
||
11 | * @license GNU GPL 2 (https://www.gnu.org/licenses/old-licenses/gpl-2.0.html) |
||
12 | * @since 2.5.9 |
||
13 | * @author Michael Beck (aka Mamba) |
||
14 | */ |
||
15 | |||
16 | use Xmf\Database\TableLoad; |
||
17 | use Xmf\Request; |
||
18 | use Xmf\Yaml; |
||
19 | use XoopsModules\Lexikon\{ |
||
20 | Helper, |
||
21 | Common\Configurator, |
||
22 | Utility |
||
23 | }; |
||
24 | /** @var Helper $helper */ |
||
25 | /** @var Utility $utility */ |
||
26 | /** @var Configurator $configurator */ |
||
27 | |||
28 | require \dirname(__DIR__, 3) . '/include/cp_header.php'; |
||
29 | require \dirname(__DIR__) . '/preloads/autoloader.php'; |
||
30 | |||
31 | $op = Request::getCmd('op', ''); |
||
32 | |||
33 | $moduleDirName = \basename(\dirname(__DIR__)); |
||
34 | $moduleDirNameUpper = mb_strtoupper($moduleDirName); |
||
35 | |||
36 | $helper = Helper::getInstance(); |
||
37 | // Load language files |
||
38 | $helper->loadLanguage('common'); |
||
39 | |||
40 | switch ($op) { |
||
41 | case 'load': |
||
42 | if (Request::hasVar('ok', 'REQUEST') && 1 === Request::getInt('ok', 0)) { |
||
43 | if (!$GLOBALS['xoopsSecurity']->check()) { |
||
44 | redirect_header($helper->url('admin/index.php'), 3, implode(',', $GLOBALS['xoopsSecurity']->getErrors())); |
||
45 | } |
||
46 | loadSampleData(); |
||
47 | } else { |
||
48 | xoops_cp_header(); |
||
49 | xoops_confirm(['ok' => 1, 'op' => 'load'], 'index.php', sprintf(constant('CO_' . $moduleDirNameUpper . '_' . 'LOAD_SAMPLEDATA_CONFIRM')), constant('CO_' . $moduleDirNameUpper . '_' . 'CONFIRM'), true); |
||
50 | xoops_cp_footer(); |
||
51 | } |
||
52 | break; |
||
53 | case 'save': |
||
54 | saveSampleData(); |
||
55 | break; |
||
56 | case 'clear': |
||
57 | clearSampleData(); |
||
58 | break; |
||
59 | } |
||
60 | |||
61 | // XMF TableLoad for SAMPLE data |
||
62 | |||
63 | /** |
||
64 | * |
||
65 | */ |
||
66 | function loadSampleData() |
||
67 | { |
||
68 | global $xoopsConfig; |
||
69 | $moduleDirName = \basename(\dirname(__DIR__)); |
||
70 | $moduleDirNameUpper = mb_strtoupper($moduleDirName); |
||
71 | |||
72 | $utility = new Utility(); |
||
73 | $configurator = new Configurator(); |
||
74 | |||
75 | $tables = \Xmf\Module\Helper::getHelper($moduleDirName)->getModule()->getInfo('tables'); |
||
76 | |||
77 | $language = 'english/'; |
||
78 | if (is_dir(__DIR__ . '/' . $xoopsConfig['language'])) { |
||
79 | $language = $xoopsConfig['language'] . '/'; |
||
80 | } |
||
81 | |||
82 | // load module tables |
||
83 | foreach ($tables as $table) { |
||
84 | $tabledata = Yaml::readWrapped($language . $table . '.yml'); |
||
85 | TableLoad::truncateTable($table); |
||
86 | TableLoad::loadTableFromArray($table, $tabledata); |
||
87 | } |
||
88 | |||
89 | // load permissions |
||
90 | $table = 'group_permission'; |
||
91 | $tabledata = Yaml::readWrapped($language . $table . '.yml'); |
||
92 | $mid = \Xmf\Module\Helper::getHelper($moduleDirName)->getModule()->getVar('mid'); |
||
93 | loadTableFromArrayWithReplace($table, $tabledata, 'gperm_modid', $mid); |
||
94 | |||
95 | // --- COPY test folder files --------------- |
||
96 | if (is_array($configurator->copyTestFolders) && count($configurator->copyTestFolders) > 0) { |
||
97 | // $file = \dirname(__DIR__) . '/testdata/images/'; |
||
98 | foreach (array_keys($configurator->copyTestFolders) as $i) { |
||
99 | $src = $configurator->copyTestFolders[$i][0]; |
||
100 | $dest = $configurator->copyTestFolders[$i][1]; |
||
101 | $utility::rcopy($src, $dest); |
||
102 | } |
||
103 | } |
||
104 | \redirect_header('../admin/index.php', 1, \constant('CO_' . $moduleDirNameUpper . '_' . 'LOAD_SAMPLEDATA_SUCCESS')); |
||
105 | } |
||
106 | |||
107 | /** |
||
108 | * |
||
109 | */ |
||
110 | function saveSampleData() |
||
111 | { |
||
112 | global $xoopsConfig; |
||
113 | $moduleDirName = \basename(\dirname(__DIR__)); |
||
114 | $moduleDirNameUpper = mb_strtoupper($moduleDirName); |
||
115 | $helper = Helper::getInstance(); |
||
116 | $tables = $helper->getModule()->getInfo('tables'); |
||
117 | |||
118 | $languageFolder = __DIR__ . '/' . $xoopsConfig['language']; |
||
119 | if (!file_exists($languageFolder . '/')) { |
||
120 | Utility::createFolder($languageFolder . '/'); |
||
121 | } |
||
122 | $exportFolder = $languageFolder . '/Exports-' . date('Y-m-d-H-i-s') . '/'; |
||
123 | Utility::createFolder($exportFolder); |
||
124 | |||
125 | // save module tables |
||
126 | foreach ($tables as $table) { |
||
127 | TableLoad::saveTableToYamlFile($table, $exportFolder . $table . '.yml'); |
||
128 | } |
||
129 | |||
130 | // save permissions |
||
131 | $criteria = new \CriteriaCompo(); |
||
132 | $criteria->add(new \Criteria('gperm_modid', $helper->getModule()->getVar('mid'))); |
||
0 ignored issues
–
show
Bug
introduced
by
Loading history...
|
|||
133 | $skipColumns[] = 'gperm_id'; |
||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||
134 | TableLoad::saveTableToYamlFile('group_permission', $exportFolder . 'group_permission.yml', $criteria, $skipColumns); |
||
135 | unset($criteria); |
||
136 | |||
137 | \redirect_header('../admin/index.php', 1, \constant('CO_' . $moduleDirNameUpper . '_' . 'SAVE_SAMPLEDATA_SUCCESS')); |
||
138 | } |
||
139 | |||
140 | /** |
||
141 | * |
||
142 | */ |
||
143 | function exportSchema() |
||
144 | { |
||
145 | $moduleDirName = \basename(\dirname(__DIR__)); |
||
146 | $moduleDirNameUpper = mb_strtoupper($moduleDirName); |
||
0 ignored issues
–
show
|
|||
147 | |||
148 | try { |
||
149 | // TODO set exportSchema |
||
150 | // $migrate = new Migrate($moduleDirName); |
||
151 | // $migrate->saveCurrentSchema(); |
||
152 | // |
||
153 | // redirect_header('../admin/index.php', 1, constant('CO_' . $moduleDirNameUpper . '_' . 'EXPORT_SCHEMA_SUCCESS')); |
||
154 | } catch (\Throwable $e) { |
||
0 ignored issues
–
show
catch (\Throwable $e) is not reachable.
This check looks for unreachable code. It uses sophisticated control flow analysis techniques to find statements which will never be executed. Unreachable code is most often the result of function fx() {
try {
doSomething();
return true;
}
catch (\Exception $e) {
return false;
}
return false;
}
In the above example, the last
Loading history...
|
|||
155 | exit(constant('CO_' . $moduleDirNameUpper . '_' . 'EXPORT_SCHEMA_ERROR')); |
||
0 ignored issues
–
show
|
|||
156 | } |
||
157 | } |
||
158 | |||
159 | /** |
||
160 | * loadTableFromArrayWithReplace |
||
161 | * |
||
162 | * @param string $table value with should be used insead of original value of $search |
||
163 | * |
||
164 | * @param array $data array of rows to insert |
||
165 | * Each element of the outer array represents a single table row. |
||
166 | * Each row is an associative array in 'column' => 'value' format. |
||
167 | * @param string $search name of column for which the value should be replaced |
||
168 | * @param $replace |
||
169 | * @return int number of rows inserted |
||
170 | */ |
||
171 | function loadTableFromArrayWithReplace($table, $data, $search, $replace) |
||
172 | { |
||
173 | /** @var \XoopsMySQLDatabase $db */ |
||
174 | $db = \XoopsDatabaseFactory::getDatabaseConnection(); |
||
175 | |||
176 | $prefixedTable = $db->prefix($table); |
||
177 | $count = 0; |
||
178 | |||
179 | $sql = 'DELETE FROM ' . $prefixedTable . ' WHERE `' . $search . '`=' . $db->quote($replace); |
||
180 | |||
181 | $result = $db->queryF($sql); |
||
0 ignored issues
–
show
|
|||
182 | |||
183 | foreach ($data as $row) { |
||
184 | $insertInto = 'INSERT INTO ' . $prefixedTable . ' ('; |
||
185 | $valueClause = ' VALUES ('; |
||
186 | $first = true; |
||
187 | foreach ($row as $column => $value) { |
||
188 | if ($first) { |
||
189 | $first = false; |
||
190 | } else { |
||
191 | $insertInto .= ', '; |
||
192 | $valueClause .= ', '; |
||
193 | } |
||
194 | |||
195 | $insertInto .= $column; |
||
196 | if ($search === $column) { |
||
197 | $valueClause .= $db->quote($replace); |
||
198 | } else { |
||
199 | $valueClause .= $db->quote($value); |
||
200 | } |
||
201 | } |
||
202 | |||
203 | $sql = $insertInto . ') ' . $valueClause . ')'; |
||
204 | |||
205 | $result = $db->queryF($sql); |
||
206 | if (false !== $result) { |
||
207 | ++$count; |
||
208 | } |
||
209 | } |
||
210 | |||
211 | return $count; |
||
212 | } |
||
213 | |||
214 | /** |
||
215 | * |
||
216 | */ |
||
217 | function clearSampleData(){ |
||
218 | $moduleDirName = \basename(\dirname(__DIR__)); |
||
219 | $moduleDirNameUpper = mb_strtoupper($moduleDirName); |
||
220 | $helper = Helper::getInstance(); |
||
221 | // Load language files |
||
222 | $helper->loadLanguage('common'); |
||
223 | $tables = $helper->getModule()->getInfo('tables'); |
||
224 | // truncate module tables |
||
225 | foreach ($tables as $table) { |
||
226 | \Xmf\Database\TableLoad::truncateTable($table); |
||
227 | } |
||
228 | redirect_header($helper->url('admin/index.php'), 1, constant('CO_' . $moduleDirNameUpper . '_' . 'CLEAR_SAMPLEDATA_OK')); |
||
229 | } |
||
230 |