XoopsModules25x /
smartpartner
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | /** |
||
| 4 | * |
||
| 5 | * Module: SmartPartner |
||
| 6 | * Author: The SmartFactory <www.smartfactory.ca> |
||
| 7 | * Licence: GNU |
||
| 8 | */ |
||
| 9 | |||
| 10 | /** |
||
| 11 | *Ceci nous produira un tableau de forme: |
||
| 12 | * |
||
| 13 | *PartnersArray[] = |
||
| 14 | * PartnersArray[TopCat1][info] = (nom, description) |
||
| 15 | * PartnersArray[TopCat1][partners] = array de partner (via fct get_partners_array()) |
||
| 16 | * PartnersArray[TopCat1][subcats][0][info] = (nom, description) |
||
| 17 | * PartnersArray[TopCat1][subcats][0][partners] = array de partner |
||
| 18 | * PartnersArray[TopCat1][subcats][0][subcats].... |
||
| 19 | * Ainsi de suite |
||
| 20 | * |
||
| 21 | *ex: PartnersArray[TopCat1][partners][0][nom] contiendra le nom du 1er partenaire de TopCat1 |
||
| 22 | * |
||
| 23 | */ |
||
| 24 | |||
| 25 | /** |
||
| 26 | *Loop inside the array of all partners to match with current category |
||
| 27 | * |
||
| 28 | *param $categoryid - id of the current category |
||
| 29 | *return array of partners for the current category |
||
| 30 | * @param $categoryid |
||
| 31 | * @return array |
||
| 32 | */ |
||
| 33 | function get_partners_array($categoryid) |
||
| 34 | { |
||
| 35 | global $every_partners_array, $count, $xoopsModuleConfig, $view_category_id; |
||
|
0 ignored issues
–
show
|
|||
| 36 | $partners = array(); |
||
| 37 | foreach ($every_partners_array as $partnerObj) { |
||
| 38 | if (in_array($categoryid, explode('|', $partnerObj->categoryid())) && ($view_category_id || (!$view_category_id && count($partners) < $xoopsModuleConfig['percat_user']))) { |
||
| 39 | $partner = $partnerObj->toArray('index'); |
||
| 40 | $partners[] = $partner; |
||
| 41 | } |
||
| 42 | } |
||
| 43 | |||
| 44 | return $partners; |
||
| 45 | } |
||
| 46 | |||
| 47 | /** |
||
| 48 | *Loop inside the array of all categories to find subcats for current category |
||
| 49 | *recusrive function: for each subcat found, call to function getcontent to |
||
| 50 | *get partners and subcats within it |
||
| 51 | * |
||
| 52 | *param $categoryid - id of the current category |
||
| 53 | *return array of subcats for the current category |
||
| 54 | * @param $every_categories_array |
||
| 55 | * @param $categoryid |
||
| 56 | * @param $level |
||
| 57 | * @return array |
||
| 58 | */ |
||
| 59 | function get_subcats($every_categories_array, $categoryid, $level) |
||
| 60 | { |
||
| 61 | |||
| 62 | //global $every_categories_array; |
||
| 63 | $subcatArray = array(); |
||
| 64 | ++$level; |
||
| 65 | |||
| 66 | foreach ($every_categories_array as $subcatObj) { |
||
| 67 | if ($subcatObj->parentid() == $categoryid) { |
||
| 68 | $subcatArray[] = get_cat_content($every_categories_array, $subcatObj, $level); |
||
| 69 | } |
||
| 70 | } |
||
| 71 | |||
| 72 | return $subcatArray; |
||
| 73 | } |
||
| 74 | |||
| 75 | /** |
||
| 76 | *Retrieve content for the current category |
||
| 77 | * |
||
| 78 | *param $categoryid - id of the current category |
||
| 79 | *return array of content for the current category |
||
| 80 | * @param $every_categories_array |
||
| 81 | * @param $categoryObj |
||
| 82 | * @param $level |
||
| 83 | * @return array |
||
| 84 | */ |
||
| 85 | function get_cat_content($every_categories_array, $categoryObj, $level) |
||
| 86 | { |
||
| 87 | $category = array(); |
||
| 88 | $decalage = ''; |
||
| 89 | /*for ($i=0;$i<$level;++$i) { |
||
| 90 | $decalage .= '--'; |
||
| 91 | }*/ |
||
| 92 | $decalage .= ' '; |
||
| 93 | $category['title'] = $decalage . '' . $categoryObj->name(); |
||
| 94 | $category['categoryid'] = $categoryObj->categoryid(); |
||
| 95 | $category['description'] = $categoryObj->description(); |
||
| 96 | $category['link_view'] = $categoryObj->getCategoryUrl(); |
||
| 97 | $category['partners'] = get_partners_array($categoryObj->categoryid()); |
||
| 98 | $category['image_url'] = $categoryObj->getImageUrl(true); |
||
| 99 | $category['subcats'] = get_subcats($every_categories_array, $categoryObj->categoryid(), $level); |
||
| 100 | |||
| 101 | return $category; |
||
| 102 | } |
||
| 103 | |||
| 104 | include __DIR__ . '/header.php'; |
||
| 105 | $xoopsOption['template_main'] = 'smartpartner_index.tpl'; |
||
| 106 | include XOOPS_ROOT_PATH . '/header.php'; |
||
| 107 | include __DIR__ . '/footer.php'; |
||
| 108 | |||
| 109 | // At which record shall we start |
||
| 110 | $start = isset($_GET['start']) ? (int)$_GET['start'] : 0; |
||
| 111 | |||
| 112 | $view_category_id = isset($_GET['view_category_id']) ? (int)$_GET['view_category_id'] : 0; |
||
| 113 | |||
| 114 | $partners_total = $smartPartnerPartnerHandler->getPartnerCount(); |
||
| 115 | |||
| 116 | if ($xoopsModuleConfig['index_sortby'] === 'title' || $xoopsModuleConfig['index_sortby'] === 'weight') { |
||
| 117 | $order = 'ASC'; |
||
| 118 | } else { |
||
| 119 | $order = 'DESC'; |
||
| 120 | } |
||
| 121 | //Retreive all records from database |
||
| 122 | $every_categories_array = $smartPartnerCategoryHandler->getCategories(0, 0, -1, 'weight', 'ASC', true); |
||
| 123 | $every_partners_array = $smartPartnerPartnerHandler->getPartnersForIndex(-1, _SPARTNER_STATUS_ACTIVE, $xoopsModuleConfig['index_sortby'], $order); |
||
| 124 | |||
| 125 | $partnersArray = array(); |
||
| 126 | |||
| 127 | //display All categories and partners |
||
| 128 | if (!$view_category_id) { |
||
| 129 | //get orphan first if preference says so |
||
| 130 | if ($xoopsModuleConfig['orphan_first']) { |
||
| 131 | $partnersArray['orphan']['partners'] = get_partners_array(0); |
||
| 132 | } |
||
| 133 | |||
| 134 | //get all categories and content |
||
| 135 | foreach ($every_categories_array as $categoryObj) { |
||
| 136 | if ($categoryObj->parentid() == 0) { |
||
| 137 | $partnersArray[] = get_cat_content($every_categories_array, $categoryObj, 0); |
||
| 138 | } |
||
| 139 | } |
||
| 140 | |||
| 141 | //get orphan last if preference says so |
||
| 142 | if (!$xoopsModuleConfig['orphan_first']) { |
||
| 143 | $partnersArray['orphan']['partners'] = get_partners_array(0); |
||
| 144 | } |
||
| 145 | |||
| 146 | $categoryPath = ''; |
||
| 147 | } //viewing a specific category |
||
| 148 | else { |
||
| 149 | $currentCategoryObj = $every_categories_array[$view_category_id]; |
||
| 150 | $partnersArray[] = get_cat_content($every_categories_array, $currentCategoryObj, 0); |
||
| 151 | |||
| 152 | if (!$partnersArray[0]['partners'] && !$partnersArray[0]['subcats']) { |
||
| 153 | redirect_header(SMARTPARTNER_URL, 3, _MD_SPARTNER_CATEGORY_EMPTY); |
||
| 154 | } |
||
| 155 | // Retreiving the category path |
||
| 156 | $categoryPath = $currentCategoryObj->getCategoryPath(); |
||
| 157 | } |
||
| 158 | |||
| 159 | //$partners_total_onpage = $count;.partners |
||
| 160 | $xoopsTpl->assign('partners', $partnersArray); |
||
| 161 | |||
| 162 | //end new code to implement categories |
||
| 163 | |||
| 164 | // Partners Navigation Bar |
||
| 165 | //$pagenav = new XoopsPageNav($partners_total_onpage, $xoopsModuleConfig['perpage_user'], $start, 'start', ''); |
||
| 166 | //$xoopsTpl->assign('pagenav', '<div style="text-align:right;">' . $pagenav->renderNav() . '</div>'); |
||
| 167 | $xoopsTpl->assign('view_deteils_cat', _MD_SPARTNER_DETAIL_CAT); |
||
| 168 | $xoopsTpl->assign('on_index_page', $view_category_id == 0); |
||
| 169 | $xoopsTpl->assign('sitename', $xoopsConfig['sitename']); |
||
| 170 | $xoopsTpl->assign('displayjoin', $xoopsModuleConfig['allowsubmit'] && (is_object($xoopsUser) || $xoopsModuleConfig['anonpost'])); |
||
| 171 | $xoopsTpl->assign('img_max_width', $xoopsModuleConfig['img_max_width']); |
||
| 172 | $xoopsTpl->assign('module_home', '<a href="' . SMARTPARTNER_URL . '">' . $smartPartnerModuleName . '</a>'); |
||
| 173 | $xoopsTpl->assign('categoryPath', $categoryPath); |
||
| 174 | $xoopsTpl->assign('lang_intro_text', $myts->displayTarea($xoopsModuleConfig['welcomemsg'])); |
||
| 175 | $xoopsTpl->assign('lang_partner', _MD_SPARTNER_PARTNER); |
||
| 176 | $xoopsTpl->assign('lang_desc', _MD_SPARTNER_DESCRIPTION); |
||
| 177 | $xoopsTpl->assign('lang_edit', _MD_SPARTNER_EDIT); |
||
| 178 | $xoopsTpl->assign('lang_delete', _MD_SPARTNER_DELETE); |
||
| 179 | $xoopsTpl->assign('lang_hits', _MD_SPARTNER_HITS); |
||
| 180 | $xoopsTpl->assign('lang_join', _MD_SPARTNER_JOIN); |
||
| 181 | $xoopsTpl->assign('lang_no_partners', _MD_SPARTNER_NOPART); |
||
| 182 | $xoopsTpl->assign('lang_main_partner', _MD_SPARTNER_PARTNERS); |
||
| 183 | $xoopsTpl->assign('lang_readmore', _MD_SPARTNER_READMORE); |
||
| 184 | $xoopsTpl->assign('partview_msg', $xoopsModuleConfig['partview_msg']); |
||
| 185 | if (!$xoopsModuleConfig['hide_module_name']) { |
||
| 186 | $xoopsTpl->assign('lang_partnerstitle', $myts->displayTarea($xoopsModule->getVar('name'))); |
||
| 187 | } |
||
| 188 | include_once XOOPS_ROOT_PATH . '/footer.php'; |
||
| 189 |
Instead of relying on
globalstate, we recommend one of these alternatives:1. Pass all data via parameters
2. Create a class that maintains your state