XoopsModules25x /
oledrion
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php |
||
| 2 | /* |
||
| 3 | You may not change or alter any portion of this comment or credits |
||
| 4 | of supporting developers from this source code or any supporting source code |
||
| 5 | which is considered copyrighted (c) material of the original comment or credit authors. |
||
| 6 | |||
| 7 | This program is distributed in the hope that it will be useful, |
||
| 8 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
| 9 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||
| 10 | */ |
||
| 11 | |||
| 12 | /** |
||
| 13 | * oledrion |
||
| 14 | * |
||
| 15 | * @copyright {@link https://xoops.org/ XOOPS Project} |
||
| 16 | * @license {@link http://www.fsf.org/copyleft/gpl.html GNU public license} |
||
| 17 | * @author Hervé Thouzard (http://www.herve-thouzard.com/) |
||
| 18 | */ |
||
| 19 | |||
| 20 | use XoopsModules\Oledrion; |
||
| 21 | |||
| 22 | /** |
||
| 23 | * Sélecteur de produits |
||
| 24 | */ |
||
| 25 | require_once __DIR__ . '/admin_header.php'; |
||
| 26 | require_once XOOPS_ROOT_PATH . '/class/template.php'; |
||
| 27 | // require_once OLEDRION_PATH . 'class/tree.php'; |
||
| 28 | |||
| 29 | if (!isset($xoopsUser) || !is_object($xoopsUser)) { |
||
| 30 | exit; |
||
| 31 | } |
||
| 32 | if (!Oledrion\Utility::isAdmin()) { |
||
| 33 | exit; |
||
| 34 | } |
||
| 35 | $xoopsTpl = new \XoopsTpl(); |
||
| 36 | $ts = \MyTextSanitizer::getInstance(); |
||
| 37 | $limit = Oledrion\Utility::getModuleOption('items_count'); // Nombre maximum d'éléments à afficher dans l'admin |
||
| 38 | |||
| 39 | //$oledrionHandlers = HandlerManager::getInstance(); |
||
| 40 | $searchFields = [ |
||
| 41 | 'product_title' => _OLEDRION_TITLE, |
||
| 42 | 'product_summary' => _OLEDRION_SUMMARY, |
||
| 43 | 'product_description' => _OLEDRION_DESCRIPTION, |
||
| 44 | 'product_id' => _AM_OLEDRION_ID, |
||
| 45 | 'product_sku' => _OLEDRION_NUMBER, |
||
| 46 | 'product_extraid' => _OLEDRION_EXTRA_ID, |
||
| 47 | ]; |
||
| 48 | $searchCriterias = [ |
||
| 49 | XOOPS_MATCH_START => _STARTSWITH, |
||
| 50 | XOOPS_MATCH_END => _ENDSWITH, |
||
| 51 | XOOPS_MATCH_EQUAL => _MATCHES, |
||
| 52 | XOOPS_MATCH_CONTAIN => _CONTAINS, |
||
| 53 | ]; |
||
| 54 | |||
| 55 | $vendors = []; |
||
| 56 | $db = \XoopsDatabaseFactory::getDatabaseConnection(); |
||
| 57 | $vendorsHandler = new Oledrion\VendorsHandler($db); |
||
| 58 | $categoryHandler = new Oledrion\CategoryHandler($db); |
||
| 59 | $vendors = $vendorsHandler->getList(); |
||
| 60 | $vendors[0] = '---'; |
||
| 61 | sort($vendors); |
||
| 62 | //$categories = $oledrionHandlers->h_oledrion_cat->getAllCategories(new Oledrion\Parameters()); |
||
| 63 | $categories = $categoryHandler->getAllCategories(new Oledrion\Parameters()); |
||
| 64 | $mytree = new Oledrion\XoopsObjectTree($categories, 'cat_cid', 'cat_pid'); |
||
| 65 | $searchVendorSelected = $selectedCategory = $selectedSearchField = 0; |
||
| 66 | |||
| 67 | $start = \Xmf\Request::getInt('start', 0, 'REQUEST'); |
||
| 68 | $mutipleSelect = \Xmf\Request::getInt('mutipleSelect', 0, 'REQUEST'); |
||
| 69 | $callerName = \Xmf\Request::getString('callerName', '', 'REQUEST'); |
||
| 70 | |||
| 71 | if (\Xmf\Request::hasVar('op', 'REQUEST') && 'search' === $_REQUEST['op']) { |
||
| 72 | $searchField = \Xmf\Request::getString('searchField', '', 'REQUEST'); |
||
| 73 | $searchCriteria = \Xmf\Request::getString('searchCriteria', '', 'REQUEST'); |
||
| 74 | $searchText = isset($_REQUEST['searchText']) ? trim($_REQUEST['searchText']) : ''; |
||
| 75 | $searchVendor = \Xmf\Request::getInt('searchVendor', 0, 'REQUEST'); |
||
| 76 | $product_cid = \Xmf\Request::getInt('product_cid', 0, 'REQUEST'); |
||
| 77 | |||
| 78 | $selectedSearchField = $searchField; |
||
| 79 | $xoopsTpl->assign('searchCriteriaSelected', $searchCriteria); |
||
| 80 | $searchVendorSelected = $searchVendor; |
||
| 81 | $selectedCategory = $product_cid; |
||
| 82 | $additionnalParameters = []; |
||
| 83 | |||
| 84 | $additionnalParameters['op'] = 'search'; |
||
| 85 | $additionnalParameters['mutipleSelect'] = $mutipleSelect; |
||
| 86 | $additionnalParameters['callerName'] = $callerName; |
||
| 87 | $additionnalParameters['searchField'] = $searchField; |
||
| 88 | // $additionnalParameters['searchField'] = $searchField; |
||
| 89 | $additionnalParameters['searchCriteria'] = $searchCriteria; |
||
| 90 | $additionnalParameters['searchText'] = $searchText; |
||
| 91 | $additionnalParameters['searchVendor'] = $searchVendor; |
||
| 92 | $additionnalParameters['product_cid'] = $product_cid; |
||
| 93 | |||
| 94 | $criteria = new \CriteriaCompo(); |
||
| 95 | if ('' !== $searchText) { |
||
| 96 | $xoopsTpl->assign('searchTextValue', $ts->htmlSpecialChars($searchText)); |
||
| 97 | if (array_key_exists($searchField, $searchFields)) { |
||
| 98 | switch ($searchCriteria) { |
||
| 99 | case XOOPS_MATCH_START: |
||
| 100 | |||
| 101 | $criteria->add(new \Criteria($searchField, $searchText . '%', 'LIKE')); |
||
| 102 | |||
| 103 | break; |
||
| 104 | case XOOPS_MATCH_END: |
||
| 105 | |||
| 106 | $criteria->add(new \Criteria($searchField, '%' . $searchText, 'LIKE')); |
||
| 107 | |||
| 108 | break; |
||
| 109 | case XOOPS_MATCH_EQUAL: |
||
| 110 | |||
| 111 | $criteria->add(new \Criteria($searchField, $searchText, '=')); |
||
| 112 | |||
| 113 | break; |
||
| 114 | case XOOPS_MATCH_CONTAIN: |
||
| 115 | |||
| 116 | $criteria->add(new \Criteria($searchField, '%' . $searchText . '%', 'LIKE')); |
||
| 117 | |||
| 118 | break; |
||
| 119 | } |
||
| 120 | } |
||
| 121 | } |
||
| 122 | |||
| 123 | if ($searchVendor > 0) { |
||
| 124 | $criteria->add(new \Criteria('product_vendor_id', $searchVendor, '=')); |
||
| 125 | } |
||
| 126 | if ($product_cid > 0) { |
||
| 127 | $criteria->add(new \Criteria('product_cid', $product_cid, '=')); |
||
| 128 | } |
||
| 129 | $itemsCount = $productsHandler->getCount($criteria); |
||
| 130 | $xoopsTpl->assign('productsCount', $itemsCount); |
||
| 131 | if ($itemsCount > $limit) { |
||
| 132 | require_once XOOPS_ROOT_PATH . '/class/pagenav.php'; |
||
| 133 | $pagenav = new \XoopsPageNav($itemsCount, $limit, $start, 'start', http_build_query($additionnalParameters, null, '&')); |
||
|
0 ignored issues
–
show
Bug
introduced
by
Loading history...
|
|||
| 134 | $xoopsTpl->assign('pagenav', $pagenav->renderNav()); |
||
| 135 | } |
||
| 136 | $criteria->setStart($start); |
||
| 137 | $criteria->setLimit($limit); |
||
| 138 | $products = []; |
||
| 139 | $products = $productsHandler->getObjects($criteria); |
||
| 140 | $javascriptSearch = ["'", '"']; |
||
| 141 | $javascriptReplace = [' ', ' ']; |
||
| 142 | |||
| 143 | if (count($products) > 0) { |
||
| 144 | foreach ($products as $product) { |
||
| 145 | $productData = $product->toArray(); |
||
| 146 | $productData['product_title_javascript'] = str_replace($javascriptSearch, $javascriptReplace, $product->getVar('product_title', 'n')); |
||
| 147 | //$productData['product_title_javascript'] = $product->getVar('product_title', 'n'); |
||
| 148 | $xoopsTpl->append('products', $productData); |
||
| 149 | } |
||
| 150 | } |
||
| 151 | } |
||
| 152 | |||
| 153 | $helper->loadLanguage('modinfo'); |
||
| 154 | $helper->loadLanguage('main'); |
||
| 155 | |||
| 156 | $categoriesSelect = $mytree->makeSelectElement('product_cid', 'cat_title', '-', $selectedCategory, true, 0, '', ''); |
||
| 157 | $xoopsTpl->assign('searchCategory', $categoriesSelect->render()); |
||
| 158 | |||
| 159 | $xoopsTpl->assign('callerName', $callerName); |
||
| 160 | $xoopsTpl->assign('sart', $start); |
||
| 161 | $xoopsTpl->assign('theme_set', xoops_getcss($xoopsConfig['theme_set'])); |
||
| 162 | $xoopsTpl->assign('xoopsConfig', $xoopsConfig); |
||
| 163 | $xoopsTpl->assign('mutipleSelect', $mutipleSelect); |
||
| 164 | $xoopsTpl->assign('searchVendorSelected', $searchVendorSelected); |
||
| 165 | $xoopsTpl->assign('baseurl', OLEDRION_URL . 'admin/' . basename(__FILE__)); // URL de ce script |
||
| 166 | $xoopsTpl->assign('searchVendor', $vendors); |
||
| 167 | $xoopsTpl->assign('searchCriteria', $searchCriterias); |
||
| 168 | $xoopsTpl->assign('searchField', $searchFields); |
||
| 169 | $xoopsTpl->assign('searchCategory', $categoriesSelect); |
||
| 170 | $xoopsTpl->assign('searchFieldSelected', $selectedSearchField); |
||
| 171 | |||
| 172 | echo $xoopsTpl->fetch('db:oledrion_productsselector.tpl'); |
||
| 173 |