Issues in index.php (master) - Issues in master - XoopsModules25x/news - Measure and Improve Code Quality continuously with Scrutinizer

Issues (384)

Security Analysis not enabled

File Inclusion
File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.
Regex Injection
Regex Injection enables an attacker to execute arbitrary code in your PHP process.
SQL Injection
SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.
Response Splitting
Response Splitting can be used to send arbitrary responses.
File Manipulation
File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.
Object Injection
Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.
File Exposure
File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.
XML Injection
XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.
Code Injection
Code Injection enables an attacker to execute arbitrary code on the server.
Variable Injection
Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.
XPath Injection
XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.
Other Vulnerability
This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.
Command Injection
Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.
LDAP Injection
LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.
Cross-Site Scripting
Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.
Header Injection
Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.
admin/index.php (30 issues)

Labels

Severity

Mamba 30
<?php declare(strict_types=1);
//
// ------------------------------------------------------------------------ //
// XOOPS - PHP Content Management System                                    //
// Copyright (c) 2000-2020 XOOPS.org                                             //
// <https://xoops.org>                                                  //
// ------------------------------------------------------------------------ //
// This program is free software; you can redistribute it and/or modify     //
// it under the terms of the GNU General Public License as published by     //
// the Free Software Foundation; either version 2 of the License, or        //
// (at your option) any later version.                                      //
//                                                                          //
// You may not change or alter any portion of this comment or credits       //
// of supporting developers from this source code or any supporting         //
// source code which is considered copyrighted (c) material of the          //
// original comment or credit authors.                                      //
//                                                                          //
// This program is distributed in the hope that it will be useful,          //
// but WITHOUT ANY WARRANTY; without even the implied warranty of           //
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            //
// GNU General Public License for more details.                             //
//                                                                          //
// You should have received a copy of the GNU General Public License        //
// along with this program; if not, write to the Free Software              //
// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA //
// ------------------------------------------------------------------------ //

use Xmf\Module\Admin;
use Xmf\Request;
.
|-- OtherDir
|   |-- Bar.php
|   `-- Foo.php
`-- SomeDir
    `-- Foo.php
use Xmf\Yaml;
use XoopsModules\News\{
    Blacklist,
    Common,
    Common\TestdataButtons,
    Files,
    Helper,
    NewsStory,
    NewsTopic,
    ObjectTree,
    PageNav,
    Registryfile,
    Utility
};

/** @var Admin $adminObject */
/** @var Helper $helper */
/** @var Utility $utility */
require_once __DIR__ . '/admin_header.php';
// require_once XOOPS_ROOT_PATH . '/modules/news/class/xoopstopic.php';
require_once XOOPS_ROOT_PATH . '/class/xoopslists.php';
require_once XOOPS_ROOT_PATH . '/modules/news/config.php';
//require_once XOOPS_ROOT_PATH . '/modules/news/class/class.newsstory.php';
//require_once XOOPS_ROOT_PATH . '/modules/news/class/class.newstopic.php';
//require_once XOOPS_ROOT_PATH . '/modules/news/class/class.sfiles.php';
//require_once XOOPS_ROOT_PATH . '/modules/news/class/blacklist.php';
//require_once XOOPS_ROOT_PATH . '/modules/news/class/registryfile.php';
require_once XOOPS_ROOT_PATH . '/class/uploader.php';
//require_once XOOPS_ROOT_PATH . '/class/pagenav.php';
require_once XOOPS_ROOT_PATH . '/modules/news/admin/functions.php';

$helper = Helper::getInstance();

// require_once XOOPS_ROOT_PATH . '/modules/news/class/tree.php';
$dateformat  = Utility::getModuleOption('dateformat');
$myts        = \MyTextSanitizer::getInstance();
$topicscount = 0;

$storiesTableName = $xoopsDB->prefix('news_stories');
if (!Utility::existField('picture', $storiesTableName)) {
    Utility::addField('`picture` VARCHAR( 50 ) NOT NULL', $storiesTableName);
}

/**
 * Show new submissions
 *
 * This list can be view in the module's admin when you click on the tab named "Post/Edit News"
 * Submissions are news that was submit by users but who are not approved, so you need to edit
 * them to approve them.
 * Actually you can see the the story's title, the topic, the posted date, the author and a
 * link to delete the story. If you click on the story's title, you will be able to edit the news.
 * The table contains the last x new submissions.
 * The system's block called "Waiting Contents" is listing the number of those news.
 */
function newSubmissions(): void
{
    global $dateformat, $pathIcon16;
    $start       = Request::getInt('startnew', 0, 'GET');
    $newsubcount = NewsStory::getAllStoriesCount(3, false);
    $storyarray  = NewsStory::getAllSubmitted(Utility::getModuleOption('storycountadmin'), true, Utility::getModuleOption('restrictindex'), $start);
    $storyarray  = NewsStory::getAllSubmitted(/** @scrutinizer ignore-type */ Utility::getModuleOption('storycountadmin'), true, Utility::getModuleOption('restrictindex'), $start);
    if (count($storyarray) > 0) {
        $pagenav = new PageNav($newsubcount, Utility::getModuleOption('storycountadmin'), $start, 'startnew', 'op=newarticle');
        $pagenav = new PageNav($newsubcount, /** @scrutinizer ignore-type */ Utility::getModuleOption('storycountadmin'), $start, 'startnew', 'op=newarticle');
        news_collapsableBar('newsub', 'topnewsubicon');
        echo "<img onclick=\"toggle('toptable'); toggleIcon('toptableicon');\" id='topnewsubicon' name='topnewsubicon' src='" . $pathIcon16 . "/close12.gif' alt=''></a>&nbsp;" . _AM_NEWSUB . '</h4>';
        echo "<div id='newsub'>";
        echo '<br>';
        echo "<div class='center;'><table width='100%' cellspacing='1' cellpadding='3' border='0' class='outer'><tr class='bg3'><th align='center'>"
             . _AM_TITLE
             . "</th><th align='center'>"
             . _AM_TOPIC
             . "</th><th align='center'>"
             . _AM_POSTED
             . "</th><th align='center'>"
             . _AM_POSTER
             . "</th><th align='center'>"
             . _AM_NEWS_ACTION
             . "</th></tr>\n";
        $class = '';
        foreach ($storyarray as $newstory) {
            $class = ('even' === $class) ? 'odd' : 'even';
            echo "<tr class='" . $class . "'><td align='left'>\n";
            $title = $newstory->title();
            if (!isset($title) || ('' === $title)) {
                echo "<a href='" . XOOPS_URL . '/modules/news/admin/index.php?op=edit&amp;returnside=1&amp;storyid=' . $newstory->storyid() . "'>" . _MD_NEWS_NOSUBJECT . "</a>\n";
            } else {
                echo "&nbsp;<a href='" . XOOPS_URL . '/modules/news/submit.php?returnside=1&amp;op=edit&amp;storyid=' . $newstory->storyid() . "'>" . $title . "</a>\n";
            }
            echo '</td><td>'
                 . $newstory->topic_title()
                 . "</td><td align='center' class='nw'>"
                 . formatTimestamp($newstory->created(), $dateformat)
                 . "</td><td align='center'><a href='"
                 . XOOPS_URL
                 . '/userinfo.php?uid='
                 . $newstory->uid()
                 . "'>"
                 . $newstory->uname()
                 . "</a></td><td align='center'><a href='"
                 . XOOPS_URL
                 . '/modules/news/submit.php?returnside=1&amp;op=edit&amp;storyid='
                 . $newstory->storyid()
                 . "'><img src='"
                 . $pathIcon16
                 . "/edit.png' title='"
                 . _AM_EDIT
                 . "'></a><a href='"
                 . XOOPS_URL
                 . '/modules/news/admin/index.php?op=delete&amp;storyid='
                 . $newstory->storyid()
                 . "'><img src='"
                 . $pathIcon16
                 . "/delete.png' title='"
                 . _AM_DELETE
                 . "'></a></td></tr>\n";
        }

        echo '</table></div>';
        echo "<div align='right'>" . $pagenav->renderNav() . '</div><br>';
        echo '<br></div><br>';
    }
}

/**
 * Shows all automated stories
 *
 * Automated stories are stories that have a publication's date greater than "now"
 * This list can be view in the module's admin when you click on the tab named "Post/Edit News"
 * Actually you can see the story's ID, its title, the topic, the author, the
 * programmed date and time, the expiration's date  and two links. The first link is
 * used to edit the story while the second is used to remove the story.
 * The list only contains the last (x) automated news
 */
function autoStories(): void
{
    global $dateformat, $pathIcon16;

    $start        = Request::getInt('startauto', 0, 'GET');
    $storiescount = NewsStory::getAllStoriesCount(2, false);
    $storyarray   = NewsStory::getAllAutoStory(Utility::getModuleOption('storycountadmin'), true, $start);
    $storyarray   = NewsStory::getAllAutoStory(/** @scrutinizer ignore-type */ Utility::getModuleOption('storycountadmin'), true, $start);
    $class        = '';
    if (count($storyarray) > 0) {
        $pagenav = new PageNav($storiescount, Utility::getModuleOption('storycountadmin'), $start, 'startauto', 'op=newarticle');
        $pagenav = new PageNav($storiescount, /** @scrutinizer ignore-type */ Utility::getModuleOption('storycountadmin'), $start, 'startauto', 'op=newarticle');
        news_collapsableBar('autostories', 'topautostories');
        echo "<img onclick=\"toggle('toptable'); toggleIcon('toptableicon');\" id='topautostories' name='topautostories' src='" . $pathIcon16 . "/close12.gif' alt=''></a>&nbsp;" . _AM_AUTOARTICLES . '</h4>';
        echo "<div id='autostories'>";
        echo '<br>';
        echo "<div class='center;'>\n";
        echo "<table width='100%' cellspacing='1' cellpadding='3' border='0' class='outer'><tr class='bg3'><th align='center'>"
             . _AM_STORYID
             . "</th><th align='center'>"
             . _AM_TITLE
             . "</th><th align='center'>"
             . _AM_TOPIC
             . "</th><th align='center'>"
             . _AM_POSTER
             . "</th><th align='center' class='nw'>"
             . _AM_PROGRAMMED
             . "</th><th align='center' class='nw'>"
             . _AM_EXPIRED
             . "</th><th align='center'>"
             . _AM_NEWS_ACTION
             . '</th></tr>';
        foreach ($storyarray as $autostory) {
            $topic  = $autostory->topic();
            $expire = ($autostory->expired() > 0) ? formatTimestamp($autostory->expired(), $dateformat) : '';
            $class  = ('even' === $class) ? 'odd' : 'even';
            echo "<tr class='" . $class . "'>";
            echo "<td align='center'><b>"
                 . $autostory->storyid()
                 . "</b>
                </td><td align='left'><a href='"
                 . XOOPS_URL
                 . '/modules/news/article.php?storyid='
                 . $autostory->storyid()
                 . "'>"
                 . $autostory->title()
                 . "</a>
                </td><td align='center'>"
                 . $topic->topic_title()
                 . "
                </td><td align='center'><a href='"
                 . XOOPS_URL
                 . '/userinfo.php?uid='
                 . $autostory->uid()
                 . "'>"
                 . $autostory->uname()
                 . "</a></td><td align='center' class='nw'>"
                 . formatTimestamp($autostory->published(), $dateformat)
                 . "</td><td align='center'>"
                 . $expire
                 . "</td><td align='center'><a href='"
                 . XOOPS_URL
                 . '/modules/news/submit.php?returnside=1&amp;op=edit&amp;storyid='
                 . $autostory->storyid()
                 . "'><img src='"
                 . $pathIcon16
                 . "/edit.png' title="
                 . _AM_EDIT
                 . "> </a> <a href='"
                 . XOOPS_URL
                 . '/modules/news/admin/index.php?op=delete&amp;storyid='
                 . $autostory->storyid()
                 . "'><img src='"
                 . $pathIcon16
                 . "/delete.png' title='"
                 . _AM_DELETE
                 . "'></a>";

            echo "</td></tr>\n";
        }
        echo '</table></div>';
        echo "<div align='right'>" . $pagenav->renderNav() . '</div><br>';
        echo '</div><br>';
    }
}

/**
 * Shows last x published stories
 *
 * This list can be view in the module's admin when you click on the tab named "Post/Edit News"
 * Actually you can see the the story's ID, its title, the topic, the author, the number of hits
 * and two links. The first link is used to edit the story while the second is used to remove the story.
 * The table only contains the last X published stories.
 * You can modify the number of visible stories with the module's option named
 * "Number of new articles to display in admin area".
 * As the number of displayed stories is limited, below this list you can find a text box
 * that you can use to enter a story's Id, then with the scrolling list you can select
 * if you want to edit or delete the story.
 */
function lastStories(): void
{
    global $dateformat, $pathIcon16;
    news_collapsableBar('laststories', 'toplaststories');
    echo "<img onclick=\"toggle('toptable'); toggleIcon('toptableicon');\" id='toplaststories' name='toplaststories' src='" . $pathIcon16 . "/close12.gif' alt=''></a>&nbsp;" . sprintf(_AM_LAST10ARTS, Utility::getModuleOption('storycountadmin')) . '</h4>';
    echo "<div id='laststories'>";
    echo '<br>';
    echo "<div class='center;'>";
    $start        = Request::getInt('start', 0, 'GET');
    $storyarray   = NewsStory::getAllPublished(Utility::getModuleOption('storycountadmin'), $start, false, 0, 1);
    $storyarray   = NewsStory::getAllPublished(/** @scrutinizer ignore-type */ Utility::getModuleOption('storycountadmin'), $start, false, 0, 1);
    $storiescount = NewsStory::getAllStoriesCount(4, false);
    $pagenav      = new PageNav($storiescount, Utility::getModuleOption('storycountadmin'), $start, 'start', 'op=newarticle');
    $pagenav      = new PageNav($storiescount, /** @scrutinizer ignore-type */ Utility::getModuleOption('storycountadmin'), $start, 'start', 'op=newarticle');
    $class        = '';
    echo "<table width='100%' cellspacing='1' cellpadding='3' border='0' class='outer'><tr class='bg3'><th align='center'>"
         . _AM_STORYID
         . "</th><th align='center'>"
         . _AM_TITLE
         . "</th><th align='center'>"
         . _AM_TOPIC
         . "</th><th align='center'>"
         . _AM_POSTER
         . "</th><th align='center' class='nw'>"
         . _AM_PUBLISHED
         . "</th><th align='center' class='nw'>"
         . _AM_HITS
         . "</th><th align='center'>"
         . _AM_NEWS_ACTION
         . '</th></tr>';
    foreach ($storyarray as $eachstory) {
        $published = formatTimestamp($eachstory->published(), $dateformat);
        // $expired = ( $eachstory -> expired() > 0 ) ? formatTimestamp($eachstory->expired(),$dateformat) : '---';
        $topic = $eachstory->topic();
        $class = ('even' === $class) ? 'odd' : 'even';
        echo "<tr class='" . $class . "'>";
        echo "<td align='center'><b>" . $eachstory->storyid() . "</b>
            </td><td align='left'><a href='" . XOOPS_URL . '/modules/news/article.php?storyid=' . $eachstory->storyid() . "'>" . $eachstory->title() . "</a>
            </td><td align='center'>" . $topic->topic_title() . "
            </td><td align='center'><a href='" . XOOPS_URL . '/userinfo.php?uid=' . $eachstory->uid() . "'>" . $eachstory->uname() . "</a></td><td align='center' class='nw'>" . $published . "</td><td align='center'>" . $eachstory->counter() . "</td><td align='center'>
            <a href='" . XOOPS_URL . '/modules/news/submit.php?returnside=1&amp;op=edit&amp;storyid=' . $eachstory->storyid() . "'> <img src='" . $pathIcon16 . "/edit.png' title=" . _AM_EDIT . "> </a>
            <a href='" . XOOPS_URL . '/modules/news/admin/index.php?op=delete&amp;storyid=' . $eachstory->storyid() . "'><img src='" . $pathIcon16 . "/delete.png' title='" . _AM_DELETE . "'></a>";

        echo "</td></tr>\n";
    }
    echo '</table><br>';
    echo "<div align='right'>" . $pagenav->renderNav() . '</div><br>';

    echo "<form action='index.php' method='get'>" . _AM_STORYID . " <input type='text' name='storyid' size='10'>
        <select name='op'>
            <option value='edit' selected>" . _AM_EDIT . "</option>
            <option value='delete'>" . _AM_DELETE . "</option>
        </select>
        <input type='hidden' name='returnside' value='1'>
        <input type='submit' value='" . _AM_GO . "'>
        </form>
    </div>";
    echo '</div><br>';
}

/**
 * Display a list of the expired stories
 *
 * This list can be view in the module's admin when you click on the tab named "Post/Edit News"
 * Actually you can see the story's ID, the title, the topic, the author,
 * the creation and expiration's date and you have two links, one to delete
 * the story and the other to edit the story.
 * The table only contains the last X expired stories.
 * You can modify the number of visible stories with the module's option named
 * "Number of new articles to display in admin area".
 * As the number of displayed stories is limited, below this list you can find a text box
 * that you can use to enter a story's Id, then with the scrolling list you can select
 * if you want to edit or delete the story.
 */
function expStories(): void
{
    global $dateformat, $pathIcon16;
    $start        = Request::getInt('startexp', 0, 'GET');
    $expiredcount = NewsStory::getAllStoriesCount(1, false);
    $storyarray   = NewsStory::getAllExpired(Utility::getModuleOption('storycountadmin'), $start, 0, 1);
    $storyarray   = NewsStory::getAllExpired(/** @scrutinizer ignore-type */ Utility::getModuleOption('storycountadmin'), $start, 0, 1);
    $pagenav      = new PageNav($expiredcount, Utility::getModuleOption('storycountadmin'), $start, 'startexp', 'op=newarticle');
    $pagenav      = new PageNav($expiredcount, /** @scrutinizer ignore-type */ Utility::getModuleOption('storycountadmin'), $start, 'startexp', 'op=newarticle');

    if (count($storyarray) > 0) {
        $class = '';
        news_collapsableBar('expstories', 'topexpstories');
        echo "<img onclick=\"toggle('toptable'); toggleIcon('toptableicon');\" id='topexpstories' name='topexpstories' src='" . $pathIcon16 . "/close12.gif' alt=''></a>&nbsp;" . _AM_EXPARTS . '</h4>';
        echo "<div id='expstories'>";
        echo '<br>';
        echo "<div class='center;'>";
        echo "<table width='100%' cellspacing='1' cellpadding='3' border='0' class='outer'><tr class='bg3'><th align='center'>"
             . _AM_STORYID
             . "</th><th align='center'>"
             . _AM_TITLE
             . "</th><th align='center'>"
             . _AM_TOPIC
             . "</th><th align='center'>"
             . _AM_POSTER
             . "</th><th align='center' class='nw'>"
             . _AM_CREATED
             . "</th><th align='center' class='nw'>"
             . _AM_EXPIRED
             . "</th><th align='center'>"
             . _AM_NEWS_ACTION
             . '</th></tr>';
        foreach ($storyarray as $eachstory) {
            $created = formatTimestamp($eachstory->created(), $dateformat);
            $expired = formatTimestamp($eachstory->expired(), $dateformat);
            $topic   = $eachstory->topic();
            // added exired value field to table
            $class = ('even' === $class) ? 'odd' : 'even';
            echo "<tr class='" . $class . "'>";
            echo "<td align='center'><b>" . $eachstory->storyid() . "</b>
                </td><td align='left'><a href='" . XOOPS_URL . '/modules/news/article.php?returnside=1&amp;storyid=' . $eachstory->storyid() . "'>" . $eachstory->title() . "</a>
                </td><td align='center'>" . $topic->topic_title() . "
                </td><td align='center'><a href='" . XOOPS_URL . '/userinfo.php?uid=' . $eachstory->uid() . "'>" . $eachstory->uname() . "</a></td><td align='center' class='nw'>" . $created . "</td><td align='center' class='nw'>" . $expired . "</td><td align='center'>
                <a href='" . XOOPS_URL . '/modules/news/submit.php?returnside=1&amp;op=edit&amp;storyid=' . $eachstory->storyid() . "'> <img src='" . $pathIcon16 . "/edit.png' title=" . _AM_EDIT . "></a>
                <a href='" . XOOPS_URL . '/modules/news/admin/index.php?op=delete&amp;storyid=' . $eachstory->storyid() . "'><img src='" . $pathIcon16 . "/delete.png' title='" . _AM_DELETE . "'></a>";

            echo "</td></tr>\n";
        }
        echo '</table><br>';
        echo "<div align='right'>" . $pagenav->renderNav() . '</div><br>';
        echo "<form action='index.php' method='get'>
            " . _AM_STORYID . " <input type='text' name='storyid' size='10'>
            <select name='op'>
                <option value='edit' selected>" . _AM_EDIT . "</option>
                <option value='delete'>" . _AM_DELETE . "</option>
            </select>
            <input type='hidden' name='returnside' value='1'>
            <input type='submit' value='" . _AM_GO . "'>
            </form>
        </div>";
        echo '</div><br>';
    }
}

/**
 * Delete (purge/prune) old stories
 *
 * You can use this function in the module's admin when you click on the tab named "Prune News"
 * It's useful to remove old stories. It is, of course, recommended
 * to backup (or export) your news before to purge news.
 * You must first specify a date. This date will be used as a reference, everything
 * that was published before this date will be deleted.
 * The option "Only remove stories who have expired" will enable you to only remove
 * expired stories published before the given date.
 * Finally, you can select the topics inside wich you will remove news.
 * Once you have set all the parameters, the script will first show you a confirmation's
 * message with the number of news that will be removed.
 * Note, the topics are not deleted (even if there are no more news inside them).
 */
function setPruneManager(): void
{
    require_once XOOPS_ROOT_PATH . '/class/xoopsformloader.php';
    xoops_cp_header();
    $adminObject = Admin::getInstance();
    $adminObject->displayNavigation('index.php?op=prune');
    echo '<br><br><br>';
    $sform = new \XoopsThemeForm(_AM_NEWS_PRUNENEWS, 'pruneform', XOOPS_URL . '/modules/news/admin/index.php', 'post', true);
    $sform->addElement(new \XoopsFormTextDateSelect(_AM_NEWS_PRUNE_BEFORE, 'prune_date', 15, time()), true);
    $onlyexpired = new \XoopsFormCheckBox('', 'onlyexpired');
    $onlyexpired->addOption(1, _AM_NEWS_PRUNE_EXPIREDONLY);
    $sform->addElement($onlyexpired, false);
    $sform->addElement(new \XoopsFormHidden('op', 'confirmbeforetoprune'), false);
    $topiclist  = new \XoopsFormSelect(_AM_NEWS_PRUNE_TOPICS, 'pruned_topics', '', 5, true);
    $topics_arr = [];

    $xt         = new NewsTopic();
    $allTopics  = $xt->getAllTopics(false); // The webmaster can see everything
    $topic_tree = new ObjectTree($allTopics, 'topic_id', 'topic_pid');
    $topics_arr = $topic_tree->getAllChild(0);
    if (count($topics_arr)) {
        foreach ($topics_arr as $onetopic) {
            $topiclist->addOption($onetopic->topic_id(), $onetopic->topic_title());
        }
    }
    $topiclist->setDescription(_AM_NEWS_EXPORT_PRUNE_DSC);
    $sform->addElement($topiclist, false);
    $buttonTray = new \XoopsFormElementTray('', '');
    $submit_btn = new \XoopsFormButton('', 'post', _SUBMIT, 'submit');
    $buttonTray->addElement($submit_btn);
    $sform->addElement($buttonTray);
    $sform->display();
}

// A confirmation is asked before to prune stories
function confirmBeforePrune(): void
{
    global $dateformat;
    $story = new NewsStory();
    xoops_cp_header();
    $topiclist = '';
    if (Request::hasVar('pruned_topics', 'POST')) {
        $topiclist = implode(',', $_POST['pruned_topics']);
    }
    echo '<h4>' . _AM_NEWS_PRUNENEWS . '</h4>';
    $expired = 0;
    if (Request::hasVar('onlyexpired', 'POST')) {
        $expired = Request::getInt('onlyexpired', 0, 'POST');
    }
    $date      = $_POST['prune_date'];
    $timestamp = mktime(0, 0, 0, (int)mb_substr($date, 5, 2), (int)mb_substr($date, 8, 2), (int)mb_substr($date, 0, 4));
    $count     = $story->getCountStoriesPublishedBefore($timestamp, $expired, $topiclist);
    if ($count) {
        $displaydate = formatTimestamp($timestamp, $dateformat);
        $msg         = sprintf(_AM_NEWS_PRUNE_CONFIRM, $displaydate, $count);
        xoops_confirm(
            [
                'op'            => 'prunenews',
                'expired'       => $expired,
                'pruned_topics' => $topiclist,
                'prune_date'    => $timestamp,
                'ok'            => 1,
            ],
            'index.php',
            $msg
        );
    } else {
        printf(_AM_NEWS_NOTHING_PRUNE);
    }
    unset($story);
}

// Effectively delete stories (published before a date), no more confirmation
function pruneNews(): void
{
    $story     = new NewsStory();

    $timestamp = Request::getInt('prune_date', 0, 'POST');
    $expired   = Request::getInt('expired', 0, 'POST');
    $topiclist = '';
    if (Request::hasVar('pruned_topics', 'POST')) {
        $topiclist = $_POST['pruned_topics'];
    }

    if (1 == Request::getInt('ok', 0, 'POST')) {
        $story = new NewsStory();
        xoops_cp_header();
        $count = $story->getCountStoriesPublishedBefore($timestamp, $expired, $topiclist);
        $msg   = sprintf(_AM_NEWS_PRUNE_DELETED, $count);
        $story->deleteBeforeDate($timestamp, $expired, $topiclist);
        unset($story);
        Utility::updateCache();
        redirect_header('index.php', 3, $msg);
    }
}

/**
 * Newsletter's configuration
 *
 * You can create a newsletter's content from the admin part of the News module when you click on the tab named "Newsletter"
 * First, let be clear, this module'functionality will not send the newsletter but it will prepare its content for you.
 * To send the newsletter, you can use many specialized modules like evennews.
 * You first select a range of dates and if you want, a selection of topics to use for the search.
 * Once it's done, the script will use the file named /xoops/modules/language/yourlanguage/newsletter.php to create
 * the newsletter's content. When it's finished, the script generates a file in the upload folder.
 */
function createNewsletter(): void
{
    require_once XOOPS_ROOT_PATH . '/class/xoopsformloader.php';
    xoops_cp_header();
    $adminObject = Admin::getInstance();
    $adminObject->displayNavigation('index.php?op=configurenewsletter');
    echo '<br><br><br>';
    $sform      = new \XoopsThemeForm(_AM_NEWS_NEWSLETTER, 'newsletterform', XOOPS_URL . '/modules/news/admin/index.php', 'post', true);
    $dates_tray = new \XoopsFormElementTray(_AM_NEWS_NEWSLETTER_BETWEEN);
    $date1      = new \XoopsFormTextDateSelect('', 'date1', 15, time());
    $date2      = new \XoopsFormTextDateSelect(_AM_NEWS_EXPORT_AND, 'date2', 15, time());
    $dates_tray->addElement($date1);
    $dates_tray->addElement($date2);
    $sform->addElement($dates_tray);

    $topiclist  = new \XoopsFormSelect(_AM_NEWS_PRUNE_TOPICS, 'export_topics', '', 5, true);
    $topics_arr = [];

    $xt         = new NewsTopic();
    $allTopics  = $xt->getAllTopics(false); // The webmaster can see everything
    $topic_tree = new ObjectTree($allTopics, 'topic_id', 'topic_pid');
    $topics_arr = $topic_tree->getAllChild(0);
    if (count($topics_arr)) {
        foreach ($topics_arr as $onetopic) {
            $topiclist->addOption($onetopic->topic_id(), $onetopic->topic_title());
        }
    }
    $topiclist->setDescription(_AM_NEWS_EXPORT_PRUNE_DSC);
    $sform->addElement($topiclist, false);
    $sform->addElement(new \XoopsFormHidden('op', 'launchnewsletter'), false);
    $sform->addElement(new \XoopsFormRadioYN(_AM_NEWS_REMOVE_BR, 'removebr', 1), false);
    $sform->addElement(new \XoopsFormRadioYN(_AM_NEWS_NEWSLETTER_HTML_TAGS, 'removehtml', 0), false);
    $sform->addElement(new \XoopsFormTextArea(_AM_NEWS_NEWSLETTER_HEADER, 'header', '', 4, 70), false);
    $sform->addElement(new \XoopsFormTextArea(_AM_NEWS_NEWSLETTER_FOOTER, 'footer', '', 4, 70), false);
    $buttonTray = new \XoopsFormElementTray('', '');
    $submit_btn = new \XoopsFormButton('', 'post', _SUBMIT, 'submit');
    $buttonTray->addElement($submit_btn);
    $sform->addElement($buttonTray);
    $sform->display();
}

/**
 * Launch the creation of the newsletter's content
 */
function launchNewsletter(): void
{
    global $xoopsConfig, $dateformat;
    xoops_cp_header();
    $adminObject = Admin::getInstance();
    $adminObject->displayNavigation('index.php?op=configurenewsletter');
    $newslettertemplate = '';
    $helper             = Helper::getInstance();
    $helper->loadLanguage('newsletter');
    echo '<br>';
    $story           = new NewsStory();
    $exportedstories = [];

    $topiclist       = '';
    $removebr        = Request::getInt('removebr', 0, 'POST');
    $removehtml      = Request::getInt('removehtml', 0, 'POST');
    $header          = Request::getString('header', '', 'POST');
    $footer          = Request::getString('footer', '', 'POST');
    $date1           = $_POST['date1'];
    $date2           = $_POST['date2'];
    $timestamp1      = mktime(0, 0, 0, (int)mb_substr($date1, 5, 2), (int)mb_substr($date1, 8, 2), (int)mb_substr($date1, 0, 4));
    $timestamp2      = mktime(23, 59, 59, (int)mb_substr($date2, 5, 2), (int)mb_substr($date2, 8, 2), (int)mb_substr($date2, 0, 4));
    if (Request::hasVar('export_topics', 'POST')) {
        $topiclist = implode(',', $_POST['export_topics']);
    }
    $tbltopics       = [];
    $exportedstories = $story->exportNews($timestamp1, $timestamp2, $topiclist, 0, $tbltopics);
    $newsfile        = XOOPS_ROOT_PATH . '/uploads/news/letter.txt';
    if (count($exportedstories)) {
        $fp = fopen($newsfile, 'wb');
        if (!$fp) {

            redirect_header('index.php', 4, sprintf(_AM_NEWS_EXPORT_ERROR, $newsfile));
        }
        if ('' !== xoops_trim($header)) {
            fwrite($fp, $header);
        }
        foreach ($exportedstories as $onestory) {
            $content         = $newslettertemplate;
            $search_pattern  = [
                '%title%',
                '%uname%',
                '%created%',
                '%published%',
                '%expired%',
                '%hometext%',
                '%bodytext%',
                '%description%',
                '%keywords%',
                '%reads%',
                '%topicid%',
                '%topic_title%',
                '%comments%',
                '%rating%',
                '%votes%',
                '%publisher%',
                '%publisher_id%',
                '%link%',
            ];
            $replace_pattern = [
                $onestory->title(),
                $onestory->uname(),
                formatTimestamp($onestory->created(), $dateformat),
                formatTimestamp($onestory->published(), $dateformat),
                formatTimestamp($onestory->expired(), $dateformat),
                $onestory->hometext(),
                $onestory->bodytext(),
                $onestory->description(),
                $onestory->keywords(),
                $onestory->counter(),
                $onestory->topicid(),
                $onestory->topic_title(),
                $onestory->comments(),
                $onestory->rating(),
                $onestory->votes(),
                $onestory->uname(),
                $onestory->uid(),
                XOOPS_URL . '/modules/news/article.php?storyid=' . $onestory->storyid(),
            ];
            $content         = str_replace($search_pattern, $replace_pattern, $content);
            if ($removebr) {
                $content = str_replace('<br>', "\r\n", $content);
            }
            if ($removehtml) {
                $content = strip_tags($content);
            }
            fwrite($fp, $content);
        }
        if ('' !== xoops_trim($footer)) {
            fwrite($fp, $footer);
        }
        fclose($fp);
        $newsfile = XOOPS_URL . '/uploads/news/newsletter.txt';
        printf(_AM_NEWS_NEWSLETTER_READY, $newsfile, XOOPS_URL . '/modules/news/admin/index.php?op=deletefile&amp;type=newsletter');
    } else {
        printf(_AM_NEWS_NOTHING);
    }
}

/**
 * News export
 *
 * You can use this function in the module's admin when you click on the tab named "News Export"
 * First select a range of date, possibly a range of topics and if you want, check the option "Include Topics Definitions"
 * to also export the topics.
 * News, and topics, will be exported to the XML format.
 */
function exportNews(): void
{
    require_once XOOPS_ROOT_PATH . '/class/xoopsformloader.php';
    xoops_cp_header();
    $adminObject = Admin::getInstance();
    $adminObject->displayNavigation('index.php?op=export');
    echo '<br><br><br>';
    $sform      = new \XoopsThemeForm(_AM_NEWS_EXPORT_NEWS, 'exportform', XOOPS_URL . '/modules/news/admin/index.php', 'post', true);
    $dates_tray = new \XoopsFormElementTray(_AM_NEWS_EXPORT_BETWEEN);
    $date1      = new \XoopsFormTextDateSelect('', 'date1', 15, time());
    $date2      = new \XoopsFormTextDateSelect(_AM_NEWS_EXPORT_AND, 'date2', 15, time());
    $dates_tray->addElement($date1);
    $dates_tray->addElement($date2);
    $sform->addElement($dates_tray);

    $topiclist  = new \XoopsFormSelect(_AM_NEWS_PRUNE_TOPICS, 'export_topics', '', 5, true);
    $topics_arr = [];

    $xt         = new NewsTopic();
    $allTopics  = $xt->getAllTopics(false); // The webmaster can see everything
    $topic_tree = new ObjectTree($allTopics, 'topic_id', 'topic_pid');
    $topics_arr = $topic_tree->getAllChild(0);
    if (count($topics_arr)) {
        foreach ($topics_arr as $onetopic) {
            $topiclist->addOption($onetopic->topic_id(), $onetopic->topic_title());
        }
    }
    $topiclist->setDescription(_AM_NEWS_EXPORT_PRUNE_DSC);
    $sform->addElement($topiclist, false);
    $sform->addElement(new \XoopsFormRadioYN(_AM_NEWS_EXPORT_INCTOPICS, 'includetopics', 0), false);
    $sform->addElement(new \XoopsFormHidden('op', 'launchexport'), false);
    $buttonTray = new \XoopsFormElementTray('', '');
    $submit_btn = new \XoopsFormButton('', 'post', _SUBMIT, 'submit');
    $buttonTray->addElement($submit_btn);
    $sform->addElement($buttonTray);
    $sform->display();
}

/**
 * @param $text
 *
 * @return string
 */
function news_utf8_encode($text)
{
    return xoops_utf8_encode($text);
}

// Launch stories export (to the xml's format)
function launchExport(): void
{
    xoops_cp_header();
    $adminObject = Admin::getInstance();
    $adminObject->displayNavigation('index.php?op=export');
    echo '<br>';
    $story           = new NewsStory();
    $topic           = new NewsTopic();

    $exportedstories = [];

    $date1           = $_POST['date1'];
    $date2           = $_POST['date2'];
    $timestamp1      = mktime(0, 0, 0, (int)mb_substr($date1, 5, 2), (int)mb_substr($date1, 8, 2), (int)mb_substr($date1, 0, 4));
    $timestamp2      = mktime(23, 59, 59, (int)mb_substr($date2, 5, 2), (int)mb_substr($date2, 8, 2), (int)mb_substr($date2, 0, 4));
    $topiclist       = '';
    if (Request::hasVar('export_topics', 'POST')) {
        $topiclist = implode(',', $_POST['export_topics']);
    }
    $topicsexport    = Request::getInt('includetopics', 0, 'POST');
    $tbltopics       = [];
    $exportedstories = $story->exportNews($timestamp1, $timestamp2, $topiclist, $topicsexport, $tbltopics);
    if (count($exportedstories)) {
        $xmlfile = XOOPS_ROOT_PATH . '/uploads/news/stories.xml';
        $fp      = fopen($xmlfile, 'wb');
        if (!$fp) {

            redirect_header('index.php', 4, sprintf(_AM_NEWS_EXPORT_ERROR, $xmlfile));
        }

        fwrite($fp, news_utf8_encode("<?xml version=\"1.0\" encoding=\"UTF-8\" ?>\n"));
        fwrite($fp, news_utf8_encode("<news_stories>\n"));
        if ($topicsexport) {
            foreach ($tbltopics as $onetopic) {
                $topic   = new NewsTopic($onetopic);
                $content = "<news_topic>\n";
                $content .= sprintf("\t<topic_id>%u</topic_id>\n", $topic->topic_id());
                $content .= sprintf("\t<topic_pid>%u</topic_pid>\n", $topic->topic_pid());
                $content .= sprintf("\t<topic_imgurl>%s</topic_imgurl>\n", $topic->topic_imgurl());
                $content .= sprintf("\t<topic_title>%s</topic_title>\n", $topic->topic_title('F'));
                $content .= sprintf("\t<menu>%d</menu>\n", $topic->menu());
                $content .= sprintf("\t<topic_frontpage>%d</topic_frontpage>\n", $topic->topic_frontpage());
                $content .= sprintf("\t<topic_rssurl>%s</topic_rssurl>\n", $topic->topic_rssurl('E'));
                $content .= sprintf("\t<topic_description>%s</topic_description>\n", $topic->topic_description());
                $content .= "</news_topic>\n";
                $content = news_utf8_encode($content);
                fwrite($fp, $content);
            }
        }

        foreach ($exportedstories as $onestory) {
            $content = "<xoops_story>\n";
            $content .= sprintf("\t<storyid>%u</storyid>\n", $onestory->storyid());
            $content .= sprintf("\t<uid>%u</uid>\n", $onestory->uid());
            $content .= sprintf("\t<uname>%s</uname>\n", $onestory->uname());
            $content .= sprintf("\t<title>%s</title>\n", $onestory->title());
            $content .= sprintf("\t<created>%u</created>\n", $onestory->created());
            $content .= sprintf("\t<published>%u</published>\n", $onestory->published());
            $content .= sprintf("\t<expired>%u</expired>\n", $onestory->expired());
            $content .= sprintf("\t<hostname>%s</hostname>\n", $onestory->hostname());
            $content .= sprintf("\t<nohtml>%d</nohtml>\n", $onestory->nohtml());
            $content .= sprintf("\t<nosmiley>%d</nosmiley>\n", $onestory->nosmiley());
            $content .= sprintf("\t<hometext>%s</hometext>\n", $onestory->hometext());
            $content .= sprintf("\t<bodytext>%s</bodytext>\n", $onestory->bodytext());
            $content .= sprintf("\t<description>%s</description>\n", $onestory->description());
            $content .= sprintf("\t<keywords>%s</keywords>\n", $onestory->keywords());
            $content .= sprintf("\t<counter>%u</counter>\n", $onestory->counter());
            $content .= sprintf("\t<topicid>%u</topicid>\n", $onestory->topicid());
            $content .= sprintf("\t<ihome>%d</ihome>\n", $onestory->ihome());
            $content .= sprintf("\t<notifypub>%d</notifypub>\n", $onestory->notifypub());
            $content .= sprintf("\t<story_type>%s</story_type>\n", $onestory->type());
            $content .= sprintf("\t<topicdisplay>%d</topicdisplay>\n", $onestory->topicdisplay());
            $content .= sprintf("\t<topicalign>%s</topicalign>\n", $onestory->topicalign());
            $content .= sprintf("\t<comments>%u</comments>\n", $onestory->comments());
            $content .= sprintf("\t<rating>%f</rating>\n", $onestory->rating());
            $content .= sprintf("\t<votes>%u</votes>\n", $onestory->votes());
            $content .= "</xoops_story>\n";
            $content = news_utf8_encode($content);
            fwrite($fp, $content);
        }
        fwrite($fp, news_utf8_encode("</news_stories>\n"));
        fclose($fp);
        $xmlfile = XOOPS_URL . '/uploads/news/stories.xml';
        printf(_AM_NEWS_EXPORT_READY, $xmlfile, XOOPS_URL . '/modules/news/admin/index.php?op=deletefile&amp;type=xml');
    } else {
        printf(_AM_NEWS_EXPORT_NOTHING);
    }
}

/*
* Topics manager
*
* It's from here that you can list, add, modify an delete topics
* At first, you can see a list of all the topics in your databases. This list contains the topic's ID, its name,
* its parent topic, if it should be visible in the Xoops main menu and an action (Edit or Delete topic)
* Below this list you find the form used to create and edit the topics.
* use this form to :
* - Type the topic's title
* - Enter its description
* - Select its parent topic
* - Choose a color
* - Select if it must appear in the Xoops main menu
* - Choose if you want to see in the front page. If it's not the case, visitors will have to use the navigation box to see it
* - And finally you ca select an image to represent the topic
* The text box called "URL of RSS feed" is, for this moment, not used.
*/
function topicsmanager(): void
{
    global $xoopsDB, $xoopsConfig, $xoopsModule, $myts;
    require_once XOOPS_ROOT_PATH . '/class/xoopsformloader.php';
    xoops_cp_header();
    $adminObject = Admin::getInstance();
    $adminObject->displayNavigation('index.php?op=topicsmanager');

    global $pathIcon16;

    $uploadfolder   = sprintf(_AM_UPLOAD_WARNING, XOOPS_URL . '/uploads/news/image');

    $uploadirectory = '/uploads/news/image';
    $start          = Request::getInt('start', 0, 'GET');

    $xt          = new NewsTopic($xoopsDB->prefix('news_topics'), 'topic_id', 'topic_pid');
    $xt          = /** @scrutinizer ignore-call */ new NewsTopic($xoopsDB->prefix('news_topics'), 'topic_id', 'topic_pid');
    $topics_arr  = $xt->getChildTreeArray(0, 'topic_title');
    $totaltopics = count($topics_arr);
    $class       = '';

    //echo '<h4>' . _AM_CONFIG . '</h4>';
    //news_collapsableBar('topicsmanager', 'toptopicsmanager');

    //echo "<img onclick=\"toggle('toptable'); toggleIcon('toptableicon');\" id='toptopicsmanager' name='toptopicsmanager' src='" . $pathIcon16."/close12.gif' alt=''></a>&nbsp;"._AM_TOPICSMNGR . ' (' . $totaltopics . ')'."</h4>";

    echo "<div id='topicsmanager'>";
    echo '<br>';
    echo "<div class='center;'>";
    echo "<table width='100%' cellspacing='1' cellpadding='3' border='0' class='outer'><tr class='bg3'><th align='center'>"
         . _AM_TOPIC
         . "</th><th align='left'>"
         . _AM_TOPICNAME
         . "</th><th align='center'>"
         . _AM_PARENTTOPIC
         . "</th><th align='center'>"
         . _AM_SUB_MENU_YESNO
         . "</th><th align='center'>"
         . _AM_NEWS_ACTION
         . '</th></tr>';
    if (is_array($topics_arr) && $totaltopics) {
        $cpt    = 1;
        $tmpcpt = $start;
        $ok     = true;
        $output = '';
        while ($ok) {
            if ($tmpcpt < $totaltopics) {
                $action_edit   = '<a href=index.php?op=topicsmanager&amp;topic_id=' . $topics_arr[$tmpcpt]['topic_id'] . '><img src=' . $pathIcon16 . 'edit.png title=' . _AM_EDIT . '></a>';
                $action_delete = '<a href=index.php?op=delTopic&amp;topic_id=' . $topics_arr[$tmpcpt]['topic_id'] . '><img src=' . $pathIcon16 . '/delete.png title=' . _AM_DELETE . "'></a>";

                $parent = '&nbsp;';
                if ($topics_arr[$tmpcpt]['topic_pid'] > 0) {
                    $xttmp  = new XoopsTopic($xoopsDB->prefix('news_topics'), $topics_arr[$tmpcpt]['topic_pid']);
                    $parent = $xttmp->topic_title();
                    unset($xttmp);
                }
                if (0 != $topics_arr[$tmpcpt]['topic_pid']) {
                    $topics_arr[$tmpcpt]['prefix'] = str_replace('.', '-', $topics_arr[$tmpcpt]['prefix']) . '&nbsp;';
                } else {
                    $topics_arr[$tmpcpt]['prefix'] = str_replace('.', '', $topics_arr[$tmpcpt]['prefix']);
                }
                $submenu = $topics_arr[$tmpcpt]['menu'] ? _YES : _NO;
                $class   = ('even' === $class) ? 'odd' : 'even';

                $output .= "<tr class='" . $class . "'><td>" . $topics_arr[$tmpcpt]['topic_id'] . "</td><td align='left'>" . $topics_arr[$tmpcpt]['prefix'] . $myts->displayTarea($topics_arr[$tmpcpt]['topic_title']) . "</td><td align='left'>" . $parent . "</td><td align='center'>" . $submenu . "</td><td align='center'>" . $action_edit . $action_delete . '</td></tr>';
            } else {
                $ok = false;
            }
            if ($cpt >= Utility::getModuleOption('storycountadmin')) {
                $ok = false;
            }
            ++$tmpcpt;
            ++$cpt;
        }
        echo $output;
    }
    $pagenav = new PageNav($totaltopics, Utility::getModuleOption('storycountadmin'), $start, 'start', 'op=topicsmanager');
    $pagenav = new PageNav($totaltopics, /** @scrutinizer ignore-type */ Utility::getModuleOption('storycountadmin'), $start, 'start', 'op=topicsmanager');
    echo "</table><div align='right'>" . $pagenav->renderNav() . '</div><br>';
    echo "</div></div><br>\n";

    $topic_id = Request::getInt('topic_id', 0, 'GET');
    if ($topic_id > 0) {
        $xtmod             = new NewsTopic($topic_id);
        $topic_title       = $xtmod->topic_title('E');
        $topic_description = $xtmod->topic_description('E');
        $topic_rssfeed     = $xtmod->topic_rssurl('E');

        $op                = 'modTopicS';
        if ('' !== xoops_trim($xtmod->topic_imgurl())) {
            $topicimage = $xtmod->topic_imgurl();
        } else {
            $topicimage = 'blank.png';
        }
        $btnlabel        = _AM_MODIFY;
        $parent          = $xtmod->topic_pid();
        $formlabel       = _AM_MODIFYTOPIC;
        $submenu         = $xtmod->menu();
        $topic_frontpage = $xtmod->topic_frontpage();
        $topic_color     = $xtmod->topic_color();
        unset($xtmod);
    } else {
        $topic_title       = '';
        $topic_frontpage   = 1;
        $topic_description = '';
        $op                = 'addTopic';
        $topicimage        = 'xoops.gif';
        $btnlabel          = _AM_ADD;
        $parent            = -1;
        $submenu           = 0;
        $topic_rssfeed     = '';
        $formlabel         = _AM_ADD_TOPIC;
        $topic_color       = '000000';
    }

    $sform = new \XoopsThemeForm($formlabel, 'topicform', XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/admin/index.php', 'post', true);
    $sform->setExtra('enctype="multipart/form-data"');
    $sform->addElement(new \XoopsFormText(_AM_TOPICNAME, 'topic_title', 50, 255, $topic_title), true);
    $editor = Utility::getWysiwygForm(_AM_TOPIC_DESCR, 'topic_description', $topic_description, 15, 60, 'hometext_hidden');
    if ($editor) {
        $sform->addElement($editor, false);
    }

    $sform->addElement(new \XoopsFormHidden('op', $op), false);
    $sform->addElement(new \XoopsFormHidden('topic_id', $topic_id), false);

    //    require_once XOOPS_ROOT_PATH . '/modules/news/class/class.newstopic.php';
    $xt = new NewsTopic();
    $sform->addElement(new \XoopsFormLabel(_AM_PARENTTOPIC, $xt->makeMyTopicSelBox(1, $parent, 'topic_pid', '', false)));
    // Topic's color
    // Code stolen to Zoullou, thank you Zoullou ;-)
    $select_color = "\n<select name='topic_color'  onchange='xoopsGetElementById(\"NewsColorSelect\").style.backgroundColor = \"#\" + this.options[this.selectedIndex].value;'>\n<option value='000000'>" . _AM_NEWS_COLOR . "</option>\n";
    $color_values = [
        '000000',
        '000033',
        '000066',
        '000099',
        '0000CC',
        '0000FF',
        '003300',
        '003333',
        '003366',
        '0033CC',
        '0033FF',
        '006600',
        '006633',
        '006666',
        '006699',
        '0066CC',
        '0066FF',
        '009900',
        '009933',
        '009966',
        '009999',
        '0099CC',
        '0099FF',
        '00CC00',
        '00CC33',
        '00CC66',
        '00CC99',
        '00CCCC',
        '00CCFF',
        '00FF00',
        '00FF33',
        '00FF66',
        '00FF99',
        '00FFCC',
        '00FFFF',
        '330000',
        '330033',
        '330066',
        '330099',
        '3300CC',
        '3300FF',
        '333300',
        '333333',
        '333366',
        '333399',
        '3333CC',
        '3333FF',
        '336600',
        '336633',
        '336666',
        '336699',
        '3366CC',
        '3366FF',
        '339900',
        '339933',
        '339966',
        '339999',
        '3399CC',
        '3399FF',
        '33CC00',
        '33CC33',
        '33CC66',
        '33CC99',
        '33CCCC',
        '33CCFF',
        '33FF00',
        '33FF33',
        '33FF66',
        '33FF99',
        '33FFCC',
        '33FFFF',
        '660000',
        '660033',
        '660066',
        '660099',
        '6600CC',
        '6600FF',
        '663300',
        '663333',
        '663366',
        '663399',
        '6633CC',
        '6633FF',
        '666600',
        '666633',
        '666666',
        '666699',
        '6666CC',
        '6666FF',
        '669900',
        '669933',
        '669966',
        '669999',
        '6699CC',
        '6699FF',
        '66CC00',
        '66CC33',
        '66CC66',
        '66CC99',
        '66CCCC',
        '66CCFF',
        '66FF00',
        '66FF33',
        '66FF66',
        '66FF99',
        '66FFCC',
        '66FFFF',
        '990000',
        '990033',
        '990066',
        '990099',
        '9900CC',
        '9900FF',
        '993300',
        '993333',
        '993366',
        '993399',
        '9933CC',
        '9933FF',
        '996600',
        '996633',
        '996666',
        '996699',
        '9966CC',
        '9966FF',
        '999900',
        '999933',
        '999966',
        '999999',
        '9999CC',
        '9999FF',
        '99CC00',
        '99CC33',
        '99CC66',
        '99CC99',
        '99CCCC',
        '99CCFF',
        '99FF00',
        '99FF33',
        '99FF66',
        '99FF99',
        '99FFCC',
        '99FFFF',
        'CC0000',
        'CC0033',
        'CC0066',
        'CC0099',
        'CC00CC',
        'CC00FF',
        'CC3300',
        'CC3333',
        'CC3366',
        'CC3399',
        'CC33CC',
        'CC33FF',
        'CC6600',
        'CC6633',
        'CC6666',
        'CC6699',
        'CC66CC',
        'CC66FF',
        'CC9900',
        'CC9933',
        'CC9966',
        'CC9999',
        'CC99CC',
        'CC99FF',
        'CCCC00',
        'CCCC33',
        'CCCC66',
        'CCCC99',
        'CCCCCC',
        'CCCCFF',
        'CCFF00',
        'CCFF33',
        'CCFF66',
        'CCFF99',
        'CCFFCC',
        'CCFFFF',
        'FF0000',
        'FF0033',
        'FF0066',
        'FF0099',
        'FF00CC',
        'FF00FF',
        'FF3300',
        'FF3333',
        'FF3366',
        'FF3399',
        'FF33CC',
        'FF33FF',
        'FF6600',
        'FF6633',
        'FF6666',
        'FF6699',
        'FF66CC',
        'FF66FF',
        'FF9900',
        'FF9933',
        'FF9966',
        'FF9999',
        'FF99CC',
        'FF99FF',
        'FFCC00',
        'FFCC33',
        'FFCC66',
        'FFCC99',
        'FFCCCC',
        'FFCCFF',
        'FFFF00',
        'FFFF33',
        'FFFF66',
        'FFFF99',
        'FFFFCC',
        'FFFFFF',
    ];

    foreach ($color_values as $color_value) {
        if ($topic_color == $color_value) {
            $selected = ' selected';
        } else {
            $selected = '';
        }
        $select_color .= '<option' . $selected . " value='" . $color_value . "' style='background-color:#" . $color_value . ';color:#' . $color_value . ";'>#" . $color_value . "</option>\n";
    }

    $select_color .= "</select>&nbsp;\n<span id='NewsColorSelect'>&nbsp;&nbsp;&nbsp;&nbsp;</span>";
    $sform->addElement(new \XoopsFormLabel(_AM_NEWS_TOPIC_COLOR, $select_color));
    // Sub menu ?
    $sform->addElement(new \XoopsFormRadioYN(_AM_SUB_MENU, 'submenu', $submenu, _YES, _NO));
    $sform->addElement(new \XoopsFormRadioYN(_AM_PUBLISH_FRONTPAGE, 'topic_frontpage', $topic_frontpage, _YES, _NO));
    // Unused for this moment... sorry
    //$sform->addElement(new \XoopsFormText(_AM_NEWS_RSS_URL, 'topic_rssfeed', 50, 255, $topic_rssfeed), false);
    // ********** Picture
    $imgtray = new \XoopsFormElementTray(_AM_TOPICIMG, '<br>');

    $imgpath      = sprintf(_AM_IMGNAEXLOC, 'uploads/news/image/');
    $imageselect  = new \XoopsFormSelect($imgpath, 'topic_imgurl', $topicimage);
    $topics_array = \XoopsLists:: getImgListAsArray(XOOPS_ROOT_PATH . '/uploads/news/image/');
    foreach ($topics_array as $image) {
        $imageselect->addOption((string)$image, $image);
    }
    $imageselect->setExtra("onchange='showImgSelected(\"image3\", \"topic_imgurl\", \"" . $uploadirectory . '", "", "' . XOOPS_URL . "\")'");
    $imgtray->addElement($imageselect, false);
    $imgtray->addElement(new XoopsFormLabel('', "<br><img src='" . XOOPS_URL . $uploadirectory . '/' . $topicimage . "' name='image3' id='image3' alt=''>"));

    $uploadfolder = sprintf(_AM_UPLOAD_WARNING, XOOPS_URL . '/uploads/news/image');
    $fileseltray  = new \XoopsFormElementTray('', '<br>');
    $fileseltray->addElement(new \XoopsFormFile(_AM_TOPIC_PICTURE, 'attachedfile', Utility::getModuleOption('maxuploadsize')), false);
    $fileseltray->addElement(new \XoopsFormFile(_AM_TOPIC_PICTURE, 'attachedfile', /** @scrutinizer ignore-type */ Utility::getModuleOption('maxuploadsize')), false);
    $fileseltray->addElement(new \XoopsFormLabel($uploadfolder), false);
    $imgtray->addElement($fileseltray);
    $sform->addElement($imgtray);

    // Permissions
    /** @var \XoopsMemberHandler $memberHandler */
    $memberHandler = xoops_getHandler('member');
    $group_list    = $memberHandler->getGroupList();
    /** @var \XoopsGroupPermHandler $grouppermHandler */
    $grouppermHandler = xoops_getHandler('groupperm');
    $full_list        = array_keys($group_list);

    $groups_ids = [];
    if ($topic_id > 0) { // Edit mode
        $groups_ids                       = $grouppermHandler->getGroupIds('news_approve', $topic_id, $xoopsModule->getVar('mid'));
        $groups_ids                       = array_values($groups_ids);
        $groups_news_can_approve_checkbox = new \XoopsFormCheckBox(_AM_APPROVEFORM, 'groups_news_can_approve[]', $groups_ids);
    } else { // Creation mode
        $groups_news_can_approve_checkbox = new \XoopsFormCheckBox(_AM_APPROVEFORM, 'groups_news_can_approve[]', $full_list);
    }
    $groups_news_can_approve_checkbox->addOptionArray($group_list);
    $sform->addElement($groups_news_can_approve_checkbox);

    $groups_ids = [];
    if ($topic_id > 0) { // Edit mode
        $groups_ids                      = $grouppermHandler->getGroupIds('news_submit', $topic_id, $xoopsModule->getVar('mid'));
        $groups_ids                      = array_values($groups_ids);
        $groups_news_can_submit_checkbox = new \XoopsFormCheckBox(_AM_SUBMITFORM, 'groups_news_can_submit[]', $groups_ids);
    } else { // Creation mode
        $groups_news_can_submit_checkbox = new \XoopsFormCheckBox(_AM_SUBMITFORM, 'groups_news_can_submit[]', $full_list);
    }
    $groups_news_can_submit_checkbox->addOptionArray($group_list);
    $sform->addElement($groups_news_can_submit_checkbox);

    $groups_ids = [];

    if ($topic_id > 0) { // Edit mode
        $groups_ids                    = $grouppermHandler->getGroupIds('news_view', $topic_id, $xoopsModule->getVar('mid'));
        $groups_ids                    = array_values($groups_ids);
        $groups_news_can_view_checkbox = new \XoopsFormCheckBox(_AM_VIEWFORM, 'groups_news_can_view[]', $groups_ids);
    } else { // Creation mode
        $groups_news_can_view_checkbox = new \XoopsFormCheckBox(_AM_VIEWFORM, 'groups_news_can_view[]', $full_list);
    }
    $groups_news_can_view_checkbox->addOptionArray($group_list);
    $sform->addElement($groups_news_can_view_checkbox);

    // Submit buttons
    $buttonTray = new \XoopsFormElementTray('', '');
    $submit_btn = new \XoopsFormButton('', 'post', $btnlabel, 'submit');
    $buttonTray->addElement($submit_btn);
    $sform->addElement($buttonTray);
    $sform->display();
    echo "<script type='text/javascript'>\n";
    echo 'xoopsGetElementById("NewsColorSelect").style.backgroundColor = "#' . $topic_color . '";';
    echo "</script>\n";
}

// Save a topic after it has been modified
function modTopicS(): void
{
    global $xoopsDB, $xoopsModule;
    $helper = Helper::getInstance();

    $xt = new NewsTopic(Request::getInt('topic_id', 0, 'POST'));
    if (Request::getInt('topic_pid', 0, 'POST') == Request::getInt('topic_id', 0, 'POST')) {
        redirect_header('index.php?op=topicsmanager', 2, _AM_ADD_TOPIC_ERROR1);
    }
    $xt->setTopicPid(Request::getInt('topic_pid', 0, 'POST'));
    if (empty($_POST['topic_title'])) {
        redirect_header('index.php?op=topicsmanager', 2, _AM_ERRORTOPICNAME);
    }
    if (Request::hasVar('items_count', 'SESSION')) {
        $_SESSION['items_count'] = -1;
    }
    $xt->setTopicTitle($_POST['topic_title']);
    if (Request::hasVar('topic_imgurl', 'POST') && '' !== $_POST['topic_imgurl']) {
        $xt->setTopicImgurl($_POST['topic_imgurl']);
    }
    $xt->setMenu(Request::getInt('submenu', 0, 'POST'));
    $xt->setTopicFrontpage(Request::getInt('topic_frontpage', 0, 'POST'));
    if (Request::hasVar('topic_description', 'POST')) {
        $xt->setTopicDescription($_POST['topic_description']);
    } else {
        $xt->setTopicDescription('');
    }
    //$xt->setTopicRssUrl($_POST['topic_rssfeed']);
    $xt->setTopic_color($_POST['topic_color']);

    if (Request::hasVar('xoops_upload_file', 'POST')) {
        $fldname = $_FILES[$_POST['xoops_upload_file'][0]];
        $fldname = $fldname['name'];
        if (xoops_trim('' !== $fldname)) {
            $sfiles         = new Files();
            $dstpath        = XOOPS_ROOT_PATH . '/uploads/news/image';
            $destname       = $sfiles->createUploadName($dstpath, $fldname, true);
            $permittedtypes = ['image/gif', 'image/jpeg', 'image/pjpeg', 'image/x-png', 'image/png'];
            $uploader       = new \XoopsMediaUploader($dstpath, $permittedtypes, $helper->getConfig('maxuploadsize'));
            $uploader->setTargetFileName($destname);
            if ($uploader->fetchMedia($_POST['xoops_upload_file'][0])) {
                if ($uploader->upload()) {
                    $xt->setTopicImgurl(basename($destname));
                } else {
                    echo _AM_UPLOAD_ERROR . ' ' . $uploader->getErrors();
                }
            } else {
                echo $uploader->getErrors();
            }
        }
    }
    $xt->store();

    // Permissions
    /** @var \XoopsGroupPermHandler $grouppermHandler */
    $grouppermHandler = xoops_getHandler('groupperm');
    $criteria         = new \CriteriaCompo();
    $criteria->add(new \Criteria('gperm_itemid', $xt->topic_id(), '='));
    $criteria->add(new \Criteria('gperm_modid', $xoopsModule->getVar('mid'), '='));
    $criteria->add(new \Criteria('gperm_name', 'news_approve', '='));
    $grouppermHandler->deleteAll($criteria);

    $criteria = new \CriteriaCompo();
    $criteria->add(new \Criteria('gperm_itemid', $xt->topic_id(), '='));
    $criteria->add(new \Criteria('gperm_modid', $xoopsModule->getVar('mid'), '='));
    $criteria->add(new \Criteria('gperm_name', 'news_submit', '='));
    $grouppermHandler->deleteAll($criteria);

    $criteria = new \CriteriaCompo();
    $criteria->add(new \Criteria('gperm_itemid', $xt->topic_id(), '='));
    $criteria->add(new \Criteria('gperm_modid', $xoopsModule->getVar('mid'), '='));
    $criteria->add(new \Criteria('gperm_name', 'news_view', '='));
    $grouppermHandler->deleteAll($criteria);

    if (Request::hasVar('groups_news_can_approve', 'POST')) {
        foreach ($_POST['groups_news_can_approve'] as $onegroup_id) {
            $grouppermHandler->addRight('news_approve', $xt->topic_id(), $onegroup_id, $xoopsModule->getVar('mid'));
        }
    }

    if (Request::hasVar('groups_news_can_submit', 'POST')) {
        foreach ($_POST['groups_news_can_submit'] as $onegroup_id) {
            $grouppermHandler->addRight('news_submit', $xt->topic_id(), $onegroup_id, $xoopsModule->getVar('mid'));
        }
    }

    if (Request::hasVar('groups_news_can_view', 'POST')) {
        foreach ($_POST['groups_news_can_view'] as $onegroup_id) {
            $grouppermHandler->addRight('news_view', $xt->topic_id(), $onegroup_id, $xoopsModule->getVar('mid'));
        }
    }

    Utility::updateCache();
    redirect_header('index.php?op=topicsmanager', 1, _AM_DBUPDATED);
}

// Delete a topic and its subtopics and its stories and the related stories
function delTopic(): void
{
    global $xoopsDB, $xoopsModule;
    if (!isset($_POST['ok'])) {
        xoops_cp_header();
        echo '<h4>' . _AM_CONFIG . '</h4>';
        $xt = new XoopsTopic($xoopsDB->prefix('news_topics'), Request::getInt('topic_id', 0, 'GET'));
        xoops_confirm(['op' => 'delTopic', 'topic_id' => Request::getInt('topic_id', 0, 'GET'), 'ok' => 1], 'index.php', _AM_WAYSYWTDTTAL . '<br>' . $xt->topic_title('S'));
    } else {
        xoops_cp_header();
        $xt = new \XoopsTopic($xoopsDB->prefix('news_topics'), Request::getInt('topic_id', 0, 'POST'));
        if (Request::hasVar('items_count', 'SESSION')) {
            $_SESSION['items_count'] = -1;
        }
        // get all subtopics under the specified topic
        $topic_arr   = $xt->getAllChildTopics();
        $topic_arr[] = $xt;
        foreach ($topic_arr as $eachtopic) {
            // get all stories in each topic
            $story_arr = NewsStory::getByTopic($eachtopic->topic_id());
            foreach ($story_arr as $eachstory) {
                if (false !== $eachstory->delete()) {
                    xoops_comment_delete($xoopsModule->getVar('mid'), $eachstory->storyid());
                    xoops_notification_deletebyitem($xoopsModule->getVar('mid'), 'story', $eachstory->storyid());
                }
            }
            // all stories for each topic is deleted, now delete the topic data
            $eachtopic->delete();
            // Delete also the notifications and permissions
            xoops_notification_deletebyitem($xoopsModule->getVar('mid'), 'category', $eachtopic->topic_id);
            xoops_groupperm_deletebymoditem($xoopsModule->getVar('mid'), 'news_approve', $eachtopic->topic_id);
            xoops_groupperm_deletebymoditem($xoopsModule->getVar('mid'), 'news_submit', $eachtopic->topic_id);
            xoops_groupperm_deletebymoditem($xoopsModule->getVar('mid'), 'news_view', $eachtopic->topic_id);
        }
        Utility::updateCache();
        redirect_header('index.php?op=topicsmanager', 1, _AM_DBUPDATED);
    }
}

// Add a new topic
function addTopic(): void
{
    global $xoopsDB, $xoopsModule;
    $helper = Helper::getInstance();

    $topicpid = Request::getInt('topic_pid', 0, 'POST');
    $xt       = new NewsTopic();
    if (!$xt->topicExists($topicpid, $_POST['topic_title'])) {
        $xt->setTopicPid($topicpid);
        if (empty($_POST['topic_title']) || '' == xoops_trim($_POST['topic_title'])) {
            redirect_header('index.php?op=topicsmanager', 2, _AM_ERRORTOPICNAME);
        }
        $xt->setTopicTitle($_POST['topic_title']);
        //$xt->setTopicRssUrl($_POST['topic_rssfeed']);
        $xt->setTopic_color($_POST['topic_color']);
        if (Request::hasVar('topic_imgurl', 'POST') && '' !== $_POST['topic_imgurl']) {
            $xt->setTopicImgurl($_POST['topic_imgurl']);
        }
        $xt->setMenu(Request::getInt('submenu', 0, 'POST'));
        $xt->setTopicFrontpage(Request::getInt('topic_frontpage', 0, 'POST'));
        if (Request::hasVar('items_count', 'SESSION')) {
            $_SESSION['items_count'] = -1;
        }
        if (Request::hasVar('xoops_upload_file', 'POST')) {
            $fldname = $_FILES[$_POST['xoops_upload_file'][0]];
            $fldname = $fldname['name'];
            if ('' !== xoops_trim($fldname)) {
                $sfiles         = new Files();
                $dstpath        = XOOPS_ROOT_PATH . '/uploads/news/image';
                $destname       = $sfiles->createUploadName($dstpath, $fldname, true);
                $permittedtypes = ['image/gif', 'image/jpeg', 'image/pjpeg', 'image/x-png', 'image/png'];
                $uploader       = new \XoopsMediaUploader($dstpath, $permittedtypes, $helper->getConfig('maxuploadsize'));
                $uploader->setTargetFileName($destname);
                if ($uploader->fetchMedia($_POST['xoops_upload_file'][0])) {
                    if ($uploader->upload()) {
                        $xt->setTopicImgurl(basename($destname));
                    } else {
                        echo _AM_UPLOAD_ERROR . ' ' . $uploader->getErrors();
                    }
                } else {
                    echo $uploader->getErrors();
                }
            }
        }
        if (Request::hasVar('topic_description', 'POST')) {
            $xt->setTopicDescription($_POST['topic_description']);
        } else {
            $xt->setTopicDescription('');
        }
        $xt->store();
        // Permissions
        /** @var \XoopsGroupPermHandler $grouppermHandler */
        $grouppermHandler = xoops_getHandler('groupperm');
        if (Request::hasVar('groups_news_can_approve', 'POST')) {
            foreach ($_POST['groups_news_can_approve'] as $onegroup_id) {
                $grouppermHandler->addRight('news_approve', $xt->topic_id(), $onegroup_id, $xoopsModule->getVar('mid'));
            }
        }

        if (Request::hasVar('groups_news_can_submit', 'POST')) {
            foreach ($_POST['groups_news_can_submit'] as $onegroup_id) {
                $grouppermHandler->addRight('news_submit', $xt->topic_id(), $onegroup_id, $xoopsModule->getVar('mid'));
            }
        }

        if (Request::hasVar('groups_news_can_view', 'POST')) {
            foreach ($_POST['groups_news_can_view'] as $onegroup_id) {
                $grouppermHandler->addRight('news_view', $xt->topic_id(), $onegroup_id, $xoopsModule->getVar('mid'));
            }
        }
        Utility::updateCache();
        /** @var \XoopsNotificationHandler $notificationHandler */
        $notificationHandler = xoops_getHandler('notification');
        $tags                = [];
        $tags['TOPIC_NAME']  = $_POST['topic_title'];
        $notificationHandler->triggerEvent('global', 0, 'new_category', $tags);
        redirect_header('index.php?op=topicsmanager', 1, _AM_DBUPDATED);
    } else {
        redirect_header('index.php?op=topicsmanager', 2, _AM_ADD_TOPIC_ERROR);
    }
}

/**
 * Statistics about stories, topics and authors
 *
 * You can reach the statistics from the admin part of the news module by clicking on the "Statistics" tabs
 * The number of visible elements in each table is equal to the module's option called "storycountadmin"
 * There are 3 kind of different statistics :
 * - Topics statistics
 *   For each topic you can see its number of articles, the number of time each topics was viewed, the number
 *   of attached files, the number of expired articles and the number of unique authors.
 * - Articles statistics
 *   This part is decomposed in 3 tables :
 *   a) Most readed articles
 *      This table resumes, for all the news in your database, the most readed articles.
 *      The table contains, for each news, its topic, its title, the author and the number of views.
 *   b) Less readed articles
 *      That's the opposite action of the previous table and its content is the same
 *   c) Best rated articles
 *      You will find here the best rated articles, the content is the same that the previous tables, the last column is just changing and contains the article's rating
 * - Authors statistics
 *   This part is also decomposed in 3 tables
 *   a) Most readed authors
 *        To create this table, the program compute the total number of reads per author and displays the most readed author and the number of views
 *   b) Best rated authors
 *      To created this table's content, the program compute the rating's average of each author and create a table
 *   c) Biggest contributors
 *      The goal of this table is to know who is creating the biggest number of articles.
 */
function getStats(): void
{
    global $xoopsModule, $xoopsConfig;
    xoops_cp_header();
    $myts   = \MyTextSanitizer::getInstance();
    $helper = Helper::getInstance();
    $helper->loadLanguage('main');

    $adminObject = Admin::getInstance();
    $adminObject->displayNavigation('index.php?op=stats');
    $news   = new NewsStory();
    $stats  = [];

    /** @var array $stats */
    $stats  = $news->getStats(Utility::getModuleOption('storycountadmin'));
    $totals = [0, 0, 0, 0, 0];
    //printf("<h1>%s</h1>\n",_AM_NEWS_STATS);

    // First part of the stats, everything about topics
    $storiespertopic = $stats['storiespertopic'];
    $readspertopic   = $stats['readspertopic'];
    $filespertopic   = $stats['filespertopic'];
    $expiredpertopic = $stats['expiredpertopic'];
    $authorspertopic = $stats['authorspertopic'];
    $class           = '';

    echo "<div class='center;'><b>" . _AM_NEWS_STATS0 . "</b><br>\n";
    echo "<table border='0' width='100%'><tr class='bg3'><th align='center'>" . _AM_TOPIC . "</th><th align='center'>" . _NW_ARTICLES . '</th><th>' . _NW_VIEWS . '</th><th>' . _AM_UPLOAD_ATTACHFILE . '</th><th>' . _AM_EXPARTS . '</th><th>' . _AM_NEWS_STATS1 . '</th></tr>';
    foreach ($storiespertopic as $topicid => $data) {
        $url   = XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/index.php?storytopic=' . $topicid;
        $views = 0;
        if (array_key_exists($topicid, $readspertopic)) {
            $views = $readspertopic[$topicid];
        }
        $attachedfiles = 0;
        if (array_key_exists($topicid, $filespertopic)) {
            $attachedfiles = $filespertopic[$topicid];
        }
        $expired = 0;
        if (array_key_exists($topicid, $expiredpertopic)) {
            $expired = $expiredpertopic[$topicid];
        }
        $authors = 0;
        if (array_key_exists($topicid, $authorspertopic)) {
            $authors = $authorspertopic[$topicid];
        }
        $articles = $data['cpt'];

        $totals[0] += $articles;
        $totals[1] += $views;
        $totals[2] += $attachedfiles;
        $totals[3] += $expired;
        $class     = ('even' === $class) ? 'odd' : 'even';
        printf(
            "<tr class='" . $class . "'><td align='left'><a href='%s' target ='_blank'>%s</a></td><td align='right'>%u</td><td align='right'>%u</td><td align='right'>%u</td><td align='right'>%u</td><td align='right'>%u</td></tr>\n",
            $url,
            $myts->displayTarea($data['topic_title']),
            $articles,
            $views,
            $attachedfiles,
            $expired,
            $authors
        );
    }
    $class = ('even' === $class) ? 'odd' : 'even';
    printf("<tr class='" . $class . "'><td align='center'><b>%s</b></td><td align='right'><b>%u</b></td><td align='right'><b>%u</b></td><td align='right'><b>%u</b></td><td align='right'><b>%u</b></td><td>&nbsp;</td>\n", _AM_NEWS_STATS2, $totals[0], $totals[1], $totals[2], $totals[3]);
    echo '</table></div><br><br><br>';

    // Second part of the stats, everything about stories
    // a) Most readed articles
    $mostreadednews = $stats['mostreadednews'];
    echo "<div class='center;'><b>" . _AM_NEWS_STATS3 . '</b><br><br>' . _AM_NEWS_STATS4 . "<br>\n";
    echo "<table border='0' width='100%'><tr class='bg3'><th align='center'>" . _AM_TOPIC . "</th><th align='center'>" . _AM_TITLE . '</th><th>' . _AM_POSTER . '</th><th>' . _NW_VIEWS . "</th></tr>\n";
    foreach ($mostreadednews as $storyid => $data) {
        $url1  = XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/index.php?storytopic=' . $data['topicid'];
        $url2  = XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/article.php?storyid=' . $storyid;
        $url3  = XOOPS_URL . '/userinfo.php?uid=' . $data['uid'];
        $class = ('even' === $class) ? 'odd' : 'even';
        printf(
            "<tr class='" . $class . "'><td align='left'><a href='%s' target ='_blank'>%s</a></td><td align='left'><a href='%s' target='_blank'>%s</a></td><td><a href='%s' target='_blank'>%s</a></td><td align='right'>%u</td></tr>\n",
            $url1,
            $myts->displayTarea($data['topic_title']),
            $url2,
            $myts->displayTarea($data['title']),
            $url3,
            htmlspecialchars($news->uname($data['uid']), ENT_QUOTES | ENT_HTML5),
            htmlspecialchars(/** @scrutinizer ignore-type */ $news->uname($data['uid']), ENT_QUOTES | ENT_HTML5),
            $data['counter']
        );
    }
    echo '</table>';

    // b) Less readed articles
    $lessreadednews = $stats['lessreadednews'];
    echo '<br><br>' . _AM_NEWS_STATS5;
    echo "<table border='0' width='100%'><tr class='bg3'><th align='center'>" . _AM_TOPIC . "</th><th align='center'>" . _AM_TITLE . '</th><th>' . _AM_POSTER . '</th><th>' . _NW_VIEWS . "</th></tr>\n";
    foreach ($lessreadednews as $storyid => $data) {
        $url1  = XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/index.php?storytopic=' . $data['topicid'];
        $url2  = XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/article.php?storyid=' . $storyid;
        $url3  = XOOPS_URL . '/userinfo.php?uid=' . $data['uid'];
        $class = ('even' === $class) ? 'odd' : 'even';
        printf(
            "<tr class='" . $class . "'><td align='left'><a href='%s' target ='_blank'>%s</a></td><td align='left'><a href='%s' target='_blank'>%s</a></td><td><a href='%s' target='_blank'>%s</a></td><td align='right'>%u</td></tr>\n",
            $url1,
            $myts->displayTarea($data['topic_title']),
            $url2,
            $myts->displayTarea($data['title']),
            $url3,
            htmlspecialchars($news->uname($data['uid']), ENT_QUOTES | ENT_HTML5),
            $data['counter']
        );
    }
    echo '</table>';

    // c) Best rated articles (this is an average)
    $besratednews = $stats['besratednews'];
    echo '<br><br>' . _AM_NEWS_STATS6;
    echo "<table border='0' width='100%'><tr class='bg3'><th align='center'>" . _AM_TOPIC . "</th><th align='center'>" . _AM_TITLE . '</th><th>' . _AM_POSTER . '</th><th>' . _NW_RATING . "</th></tr>\n";
    foreach ($besratednews as $storyid => $data) {
        $url1  = XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/index.php?storytopic=' . $data['topicid'];
        $url2  = XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/article.php?storyid=' . $storyid;
        $url3  = XOOPS_URL . '/userinfo.php?uid=' . $data['uid'];
        $class = ('even' === $class) ? 'odd' : 'even';
        printf(
            "<tr class='" . $class . "'><td align='left'><a href='%s' target ='_blank'>%s</a></td><td align='left'><a href='%s' target='_blank'>%s</a></td><td><a href='%s' target='_blank'>%s</a></td><td align='right'>%s</td></tr>\n",
            $url1,
            $myts->displayTarea($data['topic_title']),
            $url2,
            $myts->displayTarea($data['title']),
            $url3,
            htmlspecialchars($news->uname($data['uid']), ENT_QUOTES | ENT_HTML5),
            number_format((float)$data['rating'], 2)
        );
    }
    echo '</table></div><br><br><br>';

    // Last part of the stats, everything about authors
    // a) Most readed authors
    $mostreadedauthors = $stats['mostreadedauthors'];
    echo "<div class='center;'><b>" . _AM_NEWS_STATS10 . '</b><br><br>' . _AM_NEWS_STATS7 . "<br>\n";
    echo "<table border='0' width='100%'><tr class='bg3'><th>" . _AM_POSTER . '</th><th>' . _NW_VIEWS . "</th></tr>\n";
    foreach ($mostreadedauthors as $uid => $reads) {
        $url   = XOOPS_URL . '/userinfo.php?uid=' . $uid;
        $class = ('even' === $class) ? 'odd' : 'even';
        printf("<tr class='" . $class . "'><td align='left'><a href='%s' target ='_blank'>%s</a></td><td align='right'>%u</td></tr>\n", $url, htmlspecialchars($news->uname($uid), ENT_QUOTES | ENT_HTML5), $reads);
    }
    echo '</table>';

    // b) Best rated authors
    $bestratedauthors = $stats['bestratedauthors'];
    echo '<br><br>' . _AM_NEWS_STATS8;
    echo "<table border='0' width='100%'><tr class='bg3'><th>" . _AM_POSTER . '</th><th>' . _NW_RATING . "</th></tr>\n";
    foreach ($bestratedauthors as $uid => $rating) {
        $url   = XOOPS_URL . '/userinfo.php?uid=' . $uid;
        $class = ('even' === $class) ? 'odd' : 'even';
        printf("<tr class='" . $class . "'><td align='left'><a href='%s' target ='_blank'>%s</a></td><td align='right'>%u</td></tr>\n", $url, htmlspecialchars($news->uname($uid), ENT_QUOTES | ENT_HTML5), $rating);
    }
    echo '</table>';

    // c) Biggest contributors
    $biggestcontributors = $stats['biggestcontributors'];
    echo '<br><br>' . _AM_NEWS_STATS9;
    echo "<table border='0' width='100%'><tr class='bg3'><th>" . _AM_POSTER . '</th><th>' . _AM_NEWS_STATS11 . "</th></tr>\n";
    foreach ($biggestcontributors as $uid => $count) {
        $url   = XOOPS_URL . '/userinfo.php?uid=' . $uid;
        $class = ('even' === $class) ? 'odd' : 'even';
        printf("<tr class='" . $class . "'><td align='left'><a href='%s' target ='_blank'>%s</a></td><td align='right'>%u</td></tr>\n", $url, htmlspecialchars($news->uname($uid), ENT_QUOTES | ENT_HTML5), $count);
    }
    echo '</table></div><br>';
}

/**
 * Metagen
 *
 * Metagen is a system that can help you to have your page best indexed by search engines.
 * Except if you type meta keywords and meta descriptions yourself, the module will automatically create them.
 * From here you can also manage some other options like the maximum number of meta keywords to create and
 * the keywords apparition's order.
 */
function getMetagen(): void
{
    require_once XOOPS_ROOT_PATH . '/class/xoopsformloader.php';
    global $xoopsModule, $xoopsConfig, $cfg;
    $helper = Helper::getInstance();


    xoops_cp_header();
    $myts   = \MyTextSanitizer::getInstance();

    $helper = Helper::getInstance();
    $helper->loadLanguage('main');

    $adminObject = Admin::getInstance();
    $adminObject->displayNavigation('index.php?op=metagen');
    //echo "<h1>"._AM_NEWS_METAGEN."</h1>";
    echo _AM_NEWS_METAGEN_DESC . '<br><br>';

    // Metagen Options
    $registry = new Registryfile('news_metagen_options.txt');
    /** @var string $content */
    $content = $registry->getfile();
    if ('' !== xoops_trim($content)) {
        [$keywordscount, $keywordsorder] = explode(',', $content);
    } else {
        $keywordscount = $cfg['meta_keywords_count'];
        $keywordsorder = $cfg['meta_keywords_order'];
    }
    $sform = new \XoopsThemeForm(_OPTIONS, 'metagenoptions', XOOPS_URL . '/modules/news/admin/index.php', 'post', true);
    $sform->addElement(new \XoopsFormHidden('op', 'metagenoptions'), false);
    $sform->addElement(new \XoopsFormText(_AM_NEWS_META_KEYWORDS_CNT, 'keywordscount', 4, 6, $keywordscount), true);
    $keywordsorder = new \XoopsFormRadio(_AM_NEWS_META_KEYWORDS_ORDER, 'keywordsorder', $keywordsorder);
    $keywordsorder->addOption(0, _AM_NEWS_META_KEYWORDS_INTEXT);
    $keywordsorder->addOption(1, _AM_NEWS_META_KEYWORDS_FREQ1);
    $keywordsorder->addOption(2, _AM_NEWS_META_KEYWORDS_FREQ2);
    $sform->addElement($keywordsorder, false);
    $buttonTray = new \XoopsFormElementTray('', '');
    $submit_btn = new \XoopsFormButton('', 'post', _AM_MODIFY, 'submit');
    $buttonTray->addElement($submit_btn);
    $sform->addElement($buttonTray);
    $sform->display();

    // Blacklist
    $sform = new \XoopsThemeForm(_AM_NEWS_BLACKLIST, 'metagenblacklist', XOOPS_URL . '/modules/news/admin/index.php', 'post', true);
    $sform->addElement(new \XoopsFormHidden('op', 'metagenblacklist'), false);

    // Remove words
    $remove_tray = new \XoopsFormElementTray(_AM_NEWS_BLACKLIST);
    $remove_tray->setDescription(_AM_NEWS_BLACKLIST_DESC);
    $blacklist = new \XoopsFormSelect('', 'blacklist', '', 5, true);
    $words     = [];


    $metablack = new Blacklist();
    $words     = $metablack->getAllKeywords();
    if ($words && is_array($words)) {
        foreach ($words as $key => $value) {
            $blacklist->addOption($key, $value);
        }
    }

    $blacklist->setDescription(_AM_NEWS_BLACKLIST_DESC);
    $remove_tray->addElement($blacklist, false);
    $remove_btn = new \XoopsFormButton('', 'go', _AM_DELETE, 'submit');
    $remove_tray->addElement($remove_btn, false);
    $sform->addElement($remove_tray);

    // Add some words
    $add_tray = new \XoopsFormElementTray(_AM_NEWS_BLACKLIST_ADD);
    $add_tray->setDescription(_AM_NEWS_BLACKLIST_ADD_DSC);
    $add_field = new \XoopsFormTextArea('', 'keywords', '', 5, 70);
    $add_tray->addElement($add_field, false);
    $add_btn = new \XoopsFormButton('', 'go', _AM_ADD, 'submit');
    $add_tray->addElement($add_btn, false);
    $sform->addElement($add_tray);
    $sform->display();
}

/**
 * Save metagen's blacklist words
 */
function saveMetagenBlackList(): void
{
    $blacklist = new Blacklist();
    $words     = $blacklist->getAllKeywords();


    if (Request::hasVar('go', 'POST') && _AM_DELETE == $_POST['go']) {
        foreach ($_POST['blacklist'] as $black_id) {
            $blacklist->delete($black_id);
        }
        $blacklist->store();
    } elseif (Request::hasVar('go', 'POST') && _AM_ADD == $_POST['go']) {
        $p_keywords = $_POST['keywords'];
        $keywords   = explode("\n", $p_keywords);
        foreach ($keywords as $keyword) {
            if ('' !== xoops_trim($keyword)) {
                $blacklist->addkeywords(xoops_trim($keyword));
            }
        }
        $blacklist->store();
    }
    redirect_header('index.php?op=metagen', 0, _AM_DBUPDATED);
}

/**
 * Save Metagen Options
 */
function saveMetagenOptions(): void
{
    $registry = new Registryfile('news_metagen_options.txt');
    $registry->savefile(Request::getInt('keywordscount', 0, 'POST') . ',' . Request::getInt('keywordsorder', 0, 'POST'));
    redirect_header('index.php?op=metagen', 0, _AM_DBUPDATED);
}

// **********************************************************************************************************************************************
// **** Main
// **********************************************************************************************************************************************
$op          = Request::getString('op', 'default');
$adminObject = Admin::getInstance();
switch ($op) {
    case 'deletefile':
        xoops_cp_header();
        if ('newsletter' === $_GET['type']) {
            $newsfile = XOOPS_ROOT_PATH . '/uploads/news/newsletter.txt';
            if (unlink($newsfile)) {
                redirect_header('index.php', 2, _AM_NEWS_DELETED_OK);
            } else {
                redirect_header('index.php', 2, _AM_NEWS_DELETED_PB);
            }
        } elseif ('xml' === $_GET['type']) {
            $xmlfile = XOOPS_ROOT_PATH . '/uploads/news/stories.xml';
            if (unlink($xmlfile)) {
                redirect_header('index.php', 2, _AM_NEWS_DELETED_OK);
            } else {
                redirect_header('index.php', 2, _AM_NEWS_DELETED_PB);
            }
        }
        break;
    case 'newarticle':
        xoops_cp_header();
        $adminObject->displayNavigation('index.php?op=newarticle');
        echo '<h4>' . _AM_CONFIG . '</h4>';
        require_once XOOPS_ROOT_PATH . '/class/module.textsanitizer.php';
        newSubmissions();
        autoStories();
        lastStories();
        expStories();
        echo '<br>';
        echo '<h4>' . _AM_POSTNEWARTICLE . '</h4>';
        $type         = 'admin';
        $title        = '';
        $topicdisplay = 0;
        $topicalign   = 'R';
        $ihome        = 0;
        $hometext     = '';
        $bodytext     = '';
        $notifypub    = 1;
        $nohtml       = 0;
        $approve      = 0;
        $nosmiley     = 0;
        $autodate     = '';
        $expired      = '';
        $topicid      = 0;
        $returnside   = 1;
        $published    = 0;
        $description  = '';
        $keywords     = '';
        $helper       = Helper::getInstance();
        $helper->loadLanguage('main');

        if (1 == $helper->getConfig('autoapprove')) {
            $approve = 1;
        } elseif (1 == $helper->getConfig('moduleAdminApproveChecked') && (is_object($xoopsUser) && $xoopsUser->isAdmin($xoopsModule->getVar('mid')))) {
            $approve = 1;
        }
        $approveprivilege = 1;
        require_once XOOPS_ROOT_PATH . '/modules/news/include/storyform.original.php';
        break;
    case 'delete':
        $storyid = 0;
        if (Request::hasVar('storyid', 'GET')) {
            $storyid = Request::getInt('storyid', 0, 'GET');
        } elseif (Request::hasVar('storyid', 'POST')) {
            $storyid = Request::getInt('storyid', 0, 'POST');
        }

        if (Request::hasVar('ok', 'POST')) {
            if (empty($storyid)) {
                redirect_header('index.php?op=newarticle', 2, _AM_EMPTYNODELETE);
            }
            $story = new NewsStory($storyid);
            $story->delete();
            $sfiles   = new Files();
            /** @var array $filesarr */
            $filesarr = $sfiles->getAllbyStory($storyid);
            if (count($filesarr) > 0) {
                foreach ($filesarr as $onefile) {
                    $onefile->delete();
                }
            }
            xoops_comment_delete($xoopsModule->getVar('mid'), $storyid);
            xoops_notification_deletebyitem($xoopsModule->getVar('mid'), 'story', $storyid);
            Utility::updateCache();
            redirect_header('index.php?op=newarticle', 1, _AM_DBUPDATED);
        } else {
            $story = new NewsStory($storyid);
            xoops_cp_header();
            echo '<h4>' . _AM_CONFIG . '</h4>';
            xoops_confirm(['op' => 'delete', 'storyid' => $storyid, 'ok' => 1], 'index.php', _AM_RUSUREDEL . '<br>' . $story->title());
        }
        break;
    case 'topicsmanager':
        topicsmanager();
        break;
    case 'addTopic':
        addTopic();
        break;
    case 'delTopic':
        delTopic();
        break;
    case 'modTopicS':
        modTopicS();
        break;
    case 'edit':
        $helper = Helper::getInstance();
        $helper->loadLanguage('main');
        require_once XOOPS_ROOT_PATH . '/modules/news/submit.php';
        break;
    case 'prune':
        setPruneManager();
        break;
    case 'confirmbeforetoprune':
        confirmBeforePrune();
        break;
    case 'prunenews':
        pruneNews();
        break;
    case 'export':
        exportNews();
        break;
    case 'launchexport':
        launchExport();
        break;
    case 'configurenewsletter':
        createNewsletter();
        break;
    case 'launchnewsletter':
        launchNewsletter();
        break;
    case 'stats':
        getStats();
        break;
    case 'metagen':
        getMetagen();
        break;
    case 'metagenoptions':
        saveMetagenOptions();
        break;
    case 'metagenblacklist':
        saveMetagenBlackList();
        break;
    case 'verifydb':
        xoops_cp_header();
        //news_adminmenu();
        $tbllist = $xoopsDB->prefix('news_stories') . ',' . $xoopsDB->prefix('news_topics') . ',' . $xoopsDB->prefix('news_stories_files') . ',' . $xoopsDB->prefix('news_stories_votedata');
        $xoopsDB->queryF('OPTIMIZE TABLE ' . $tbllist);
        $xoopsDB->queryF('CHECK TABLE ' . $tbllist);
        $xoopsDB->queryF('ANALYZE TABLE ' . $tbllist);
        redirect_header('index.php', 3, _AM_DBUPDATED);
        break;
    case 'default':
    default:
        xoops_cp_header();

        $folder = [
            XOOPS_ROOT_PATH . '/uploads/news/',
            XOOPS_ROOT_PATH . '/uploads/news/file',
            XOOPS_ROOT_PATH . '/uploads/news/image',
        ];

        $topicsHandler  = $helper->getHandler('NewsTopics');
        $storiesHandler = $helper->getHandler('NewsStories');

        //compte "total"
        $count_stories = $storiesHandler->getCount();
        //compte "attente"
        $criteria = new \CriteriaCompo();
        $criteria->add(new \Criteria('ihome', 1));
        $stories_ihome = $storiesHandler->getCount($criteria);

        $criteria = new \CriteriaCompo();
        $criteria->add(new \Criteria('published', 0, '>'));
        $stories_published = $storiesHandler->getCount($criteria);

        $stories_need_approval = $count_stories - $stories_published;

        $criteria = new \CriteriaCompo();
        $criteria->add(new \Criteria('expired', 0, '>'));
        $criteria->add(new \Criteria('expired', time(), '<'));
        $stories_expired = $storiesHandler->getCount($criteria);

        $criteria = new \CriteriaCompo();
        $criteria->add(new \Criteria('expired', 0, '>'));
        $criteria->add(new \Criteria('expired', time(), '>'));
        $stories_expired_soon = $storiesHandler->getCount($criteria);

        //compte "total"
        $count_topics = $topicsHandler->getCount();
        //compte "attente"
        $criteria = new \CriteriaCompo();
        $criteria->add(new \Criteria('menu', 1));
        $topics_menu = $topicsHandler->getCount($criteria);

        $clr_count_stories = (0 == $count_stories) ? 'red' : 'green';
        $clr_count_topics  = (0 == $count_topics) ? 'red' : 'green';
        $clr_ihome_stories = (0 == $stories_ihome) ? 'red' : 'green';
        $clr_menu_topics   = (0 == $topics_menu) ? 'red' : 'green';

        $clr_published_stories         = (0 == $stories_published) ? 'red' : 'green';
        $clr_need_approval_stories     = (0 == $stories_need_approval) ? 'green' : 'red';
        $clr_expired_stories           = (0 == $stories_expired) ? 'red' : 'green';
        $clr_need_expired_soon_stories = (0 == $stories_expired_soon) ? 'red' : 'green';

        $adminObject->addInfoBox(_AM_NEWS_STATISTICS);
        $adminObject->addInfoBoxLine(sprintf(_AM_NEWS_THEREARE_TOPICS, $count_topics), '', $clr_count_topics);
        $adminObject->addInfoBoxLine(sprintf(_AM_NEWS_THEREARE_TOPICS_ONLINE, $topics_menu), '', $clr_menu_topics);
        $adminObject->addInfoBoxLine(sprintf(_AM_NEWS_THEREARE_STORIES, $count_stories), '', $clr_count_stories);
        $adminObject->addInfoBoxLine(sprintf(_AM_NEWS_THEREARE_STORIES_ONLINE, $stories_ihome), '', $clr_ihome_stories);

        $adminObject->addInfoBoxLine(sprintf(_AM_NEWS_THEREARE_STORIES_APPROVED, $stories_published), '', $clr_ihome_stories);
        $adminObject->addInfoBoxLine(sprintf(_AM_NEWS_THEREARE_STORIES_NEED_APPROVAL, $stories_need_approval), '', $clr_need_approval_stories);
        $adminObject->addInfoBoxLine(sprintf(_AM_NEWS_THEREARE_STORIES_EXPIRED, $stories_expired), '', $clr_expired_stories);
        $adminObject->addInfoBoxLine(sprintf(_AM_NEWS_THEREARE_STORIES_EXPIRED_SOON, $stories_expired_soon), '', $clr_need_expired_soon_stories);

        foreach (array_keys($folder) as $i) {
            $adminObject->addConfigBoxLine($folder[$i], 'folder');
            $adminObject->addConfigBoxLine([$folder[$i], '777'], 'chmod');
        }

        $adminObject->displayNavigation(basename(__FILE__));

        //check for latest release
        //$newRelease = $utility::checkVerModule($helper);
        //if (null !== $newRelease) {
        //    $adminObject->addItemButton($newRelease[0], $newRelease[1], 'download', 'style="color : Red"');
        //}

        //------------- Test Data Buttons ----------------------------
        if ($helper->getConfig('displaySampleButton')) {
            TestdataButtons::loadButtonConfig($adminObject);
            $adminObject->displayButton('left', '');
        }
        $op = Request::getString('op', 0, 'GET');
        switch ($op) {
            case 'hide_buttons':
                TestdataButtons::hideButtons();
                break;
            case 'show_buttons':
                TestdataButtons::showButtons();
                break;
        }
        //------------- End Test Data Buttons ----------------------------

        $adminObject->displayIndex();

        echo $utility::getServerStats();

        break;
}
require_once __DIR__ . '/admin_footer.php';

XoopsModules25x / news

Issues (384)

Security Analysis not enabled

admin/index.php (30 issues)

Labels

Severity

Introduced By

Duplication Side-by-Side

Filter issues like
