This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php |
||||||
2 | |||||||
3 | namespace XoopsModules\Soapbox; |
||||||
4 | |||||||
5 | use XoopsModules\Soapbox; |
||||||
6 | |||||||
7 | /** |
||||||
8 | * Class Utility |
||||||
9 | */ |
||||||
10 | class Utility extends \XoopsObject |
||||||
11 | { |
||||||
12 | use Common\VersionChecks; //checkVerXoops, checkVerPhp Traits |
||||||
0 ignored issues
–
show
introduced
by
![]() |
|||||||
13 | |||||||
14 | use Common\ServerStats; // getServerStats Trait |
||||||
15 | |||||||
16 | use Common\FilesManagement; // Files Management Trait |
||||||
17 | |||||||
18 | /** |
||||||
19 | * getLinkedUnameFromId() |
||||||
20 | * |
||||||
21 | * @param int $userid Userid of author etc |
||||||
22 | * @param int $name : 0 Use Usenamer 1 Use realname |
||||||
23 | * @return string |
||||||
24 | */ |
||||||
25 | public static function getLinkedUnameFromId($userid = 0, $name = 0) |
||||||
26 | { |
||||||
27 | if (!is_numeric($userid)) { |
||||||
0 ignored issues
–
show
|
|||||||
28 | return $userid; |
||||||
29 | } |
||||||
30 | $myts = \MyTextSanitizer::getInstance(); |
||||||
31 | $userid = (int)$userid; |
||||||
32 | if ($userid > 0) { |
||||||
33 | $memberHandler = xoops_getHandler('member'); |
||||||
34 | $user = $memberHandler->getUser($userid); |
||||||
0 ignored issues
–
show
The method
getUser() does not exist on XoopsObjectHandler . It seems like you code against a sub-type of XoopsObjectHandler such as XoopsAvatarHandler or XoopsPersistableObjectHandler .
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
![]() |
|||||||
35 | |||||||
36 | if (is_object($user)) { |
||||||
37 | $username = $user->getVar('uname'); |
||||||
38 | $usernameu = $user->getVar('name'); |
||||||
39 | |||||||
40 | if ($name && !empty($usernameu)) { |
||||||
41 | $username = $user->getVar('name'); |
||||||
42 | } |
||||||
43 | if (!empty($usernameu)) { |
||||||
44 | $linkeduser = $myts->htmlSpecialChars($usernameu) . " [<a href='" . XOOPS_URL . '/userinfo.php?uid=' . $userid . "'>" . $myts->htmlSpecialChars($username) . '</a>]'; |
||||||
45 | } else { |
||||||
46 | // $linkeduser = "<a href='".XOOPS_URL."/userinfo.php?uid=".$userid."'>". ucfirst($ts->htmlSpecialChars($username)) .'</a>'; |
||||||
47 | $linkeduser = "<a href='" . XOOPS_URL . '/userinfo.php?uid=' . $userid . "'>" . $myts->htmlSpecialChars($username) . '</a>'; |
||||||
48 | } |
||||||
49 | |||||||
50 | return $linkeduser; |
||||||
51 | } |
||||||
52 | } |
||||||
53 | |||||||
54 | return $myts->htmlSpecialChars($GLOBALS['xoopsConfig']['anonymous']); |
||||||
55 | } |
||||||
56 | |||||||
57 | /* |
||||||
58 | public static function displayimage($image = 'blank.gif', $path = '', $imgsource = '', $alttext = '') |
||||||
59 | { |
||||||
60 | global $xoopsConfig, $xoopsUser, $xoopsModule; |
||||||
61 | $myts = \MyTextSanitizer::getInstance(); |
||||||
62 | $showimage = ''; |
||||||
63 | |||||||
64 | if ($path) { |
||||||
65 | $showimage = "<a href='" . $myts->htmlSpecialChars(strip_tags($path)) . "'>"; |
||||||
66 | } |
||||||
67 | |||||||
68 | if (!is_dir(XOOPS_ROOT_PATH."/".$imgsource."/".$image) && file_exists(XOOPS_ROOT_PATH."/".$imgsource."/".$image)) { |
||||||
69 | $showimage .= "<img src='".XOOPS_URL."/".$myts->htmlSpecialChars(strip_tags($imgsource))."/".$myts->htmlSpecialChars(strip_tags($image))."' border='0' alt=".$myts->htmlSpecialChars(strip_tags($alttext))."></a>"; |
||||||
70 | } else { |
||||||
71 | if ($xoopsUser && $xoopsUser->isAdmin($xoopsModule->mid())) { |
||||||
72 | $showimage .= "<img src='".XOOPS_URL.'/modules/'.$xoopsModule->dirname()."/assets/images/brokenimg.png' border='0' alt='"._AM_SOAPBOX_ISADMINNOTICE."'></a>"; |
||||||
73 | } else { |
||||||
74 | $showimage .= "<img src='".XOOPS_URL.'/modules/'.$xoopsModule->dirname()."/assets/images/blank.png' border='0' alt=".$myts->htmlSpecialChars(strip_tags($alttext))."></a>"; |
||||||
75 | } |
||||||
76 | } |
||||||
77 | // clearstatcache(); |
||||||
78 | return $showimage; |
||||||
79 | } |
||||||
80 | */ |
||||||
81 | |||||||
82 | /** |
||||||
83 | * @param $allowed_mimetypes |
||||||
84 | * @param $httppostfiles |
||||||
85 | * @param string $redirecturl |
||||||
86 | * @param int $num |
||||||
87 | * @param string $dir |
||||||
88 | * @param int $redirect |
||||||
89 | */ |
||||||
90 | public static function uploadFile( |
||||||
91 | $allowed_mimetypes, |
||||||
92 | $httppostfiles, |
||||||
0 ignored issues
–
show
The parameter
$httppostfiles is not used and could be removed.
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
This check looks for parameters that have been defined for a function or method, but which are not used in the method body. ![]() |
|||||||
93 | $redirecturl = 'index.php', |
||||||
94 | $num = 0, |
||||||
95 | $dir = 'uploads', |
||||||
96 | $redirect = 0) |
||||||
97 | { |
||||||
98 | require_once XOOPS_ROOT_PATH . '/class/uploader.php'; |
||||||
99 | $myts = \MyTextSanitizer::getInstance(); |
||||||
100 | |||||||
101 | global $xoopsConfig, $_POST; |
||||||
102 | /** @var Soapbox\Helper $helper */ |
||||||
103 | $helper = Soapbox\Helper::getInstance(); |
||||||
104 | |||||||
105 | $maxfilesize = (int)$helper->getConfig('maxfilesize'); |
||||||
106 | $maxfilewidth = (int)$helper->getConfig('maximgwidth'); |
||||||
107 | $maxfileheight = (int)$helper->getConfig('maximgheight'); |
||||||
108 | $uploaddir = XOOPS_ROOT_PATH . '/' . $myts->htmlSpecialChars(strip_tags($dir)) . '/'; |
||||||
109 | |||||||
110 | $uploader = new \XoopsMediaUploader($uploaddir, $allowed_mimetypes, $maxfilesize, $maxfilewidth, $maxfileheight); |
||||||
111 | |||||||
112 | if ($uploader->fetchMedia($myts->htmlSpecialChars(strip_tags($_POST['xoops_upload_file'][$num])))) { |
||||||
113 | if (!$uploader->upload()) { |
||||||
114 | $errors = $uploader->getErrors(); |
||||||
115 | redirect_header($redirecturl, 1, $errors); |
||||||
116 | } else { |
||||||
117 | if ($redirect) { |
||||||
118 | redirect_header($redirecturl, '1', 'Image Uploaded'); |
||||||
119 | } |
||||||
120 | } |
||||||
121 | } else { |
||||||
122 | $errors = $uploader->getErrors(); |
||||||
123 | redirect_header($redirecturl, 1, $errors); |
||||||
124 | } |
||||||
125 | } |
||||||
126 | |||||||
127 | /* |
||||||
128 | public static function htmlarray($thishtmlpage, $thepath) |
||||||
129 | { |
||||||
130 | global $xoopsConfig, $wfsConfig; |
||||||
131 | |||||||
132 | $file_array = filesarray( $thepath ); |
||||||
133 | |||||||
134 | echo "<select size='1' name='htmlpage'>"; |
||||||
135 | echo "<option value='-1'>------</option>"; |
||||||
136 | foreach ($file_array as $htmlpage) { |
||||||
137 | if ($htmlpage == $thishtmlpage) { |
||||||
138 | $opt_selected = "selected"; |
||||||
139 | } else { |
||||||
140 | $opt_selected = ""; |
||||||
141 | } |
||||||
142 | echo "<option value='" . $htmlpage . "' $opt_selected>" . $htmlpage . "</option>"; |
||||||
143 | } |
||||||
144 | echo "</select>"; |
||||||
145 | |||||||
146 | return $htmlpage; |
||||||
147 | } |
||||||
148 | */ |
||||||
149 | /* |
||||||
150 | public static function filesarray($filearray) |
||||||
151 | { |
||||||
152 | $files = array(); |
||||||
153 | $dir = opendir( $filearray ); |
||||||
154 | |||||||
155 | while ( ( $file = readdir( $dir ) ) !== false ) { |
||||||
156 | if ( ( !preg_match( "/^[.]{1,2}$/", $file ) && preg_match( "/[.htm|.html|.xhtml]$/i", $file ) && !is_dir( $file ) ) ) { |
||||||
157 | if ( strtolower( $file ) != 'cvs' && !is_dir( $file ) ) { |
||||||
158 | $files[$file] = $file; |
||||||
159 | } |
||||||
160 | } |
||||||
161 | } |
||||||
162 | closedir( $dir ); |
||||||
163 | asort( $files ); |
||||||
164 | reset( $files ); |
||||||
165 | |||||||
166 | return $files; |
||||||
167 | } |
||||||
168 | */ |
||||||
169 | /* |
||||||
170 | public static function getuserForm($user) |
||||||
171 | { |
||||||
172 | global $xoopsDB, $xoopsConfig; |
||||||
173 | $myts = \MyTextSanitizer::getInstance(); |
||||||
174 | |||||||
175 | echo "<select name='author'>"; |
||||||
176 | echo "<option value='-1'>------</option>"; |
||||||
177 | $result = $xoopsDB->query("SELECT uid, uname FROM ".$xoopsDB->prefix("users")." ORDER BY uname"); |
||||||
178 | |||||||
179 | while (false !== (list($uid, $uname) = $xoopsDB->fetchRow($result))) { |
||||||
180 | if ($uid == $user) { |
||||||
181 | $opt_selected = "selected"; |
||||||
182 | } else { |
||||||
183 | $opt_selected = ""; |
||||||
184 | } |
||||||
185 | echo "<option value='".(int)($uid)."' $opt_selected>".$myts->htmlSpecialChars($uname)."</option>"; |
||||||
186 | } |
||||||
187 | echo "</select>"; |
||||||
188 | } |
||||||
189 | */ |
||||||
190 | |||||||
191 | /** |
||||||
192 | * @param $author |
||||||
193 | * @return string |
||||||
194 | */ |
||||||
195 | public static function getAuthorName($author) |
||||||
196 | { |
||||||
197 | $ret = ''; |
||||||
0 ignored issues
–
show
|
|||||||
198 | //get author |
||||||
199 | $_authoruserHandler = xoops_getHandler('user'); |
||||||
200 | $_authoruser = $_authoruserHandler->get($author); |
||||||
201 | if (!is_object($_authoruser)) { |
||||||
202 | $name3 = ''; |
||||||
0 ignored issues
–
show
|
|||||||
203 | $uname3 = ''; |
||||||
204 | $authorname = ''; |
||||||
205 | } else { |
||||||
206 | $name3 = $_authoruser->getVar('name'); |
||||||
207 | $uname3 = $_authoruser->getVar('uname'); |
||||||
208 | $authorname = $name3; |
||||||
209 | } |
||||||
210 | //------------------------------------- |
||||||
211 | $ret = $authorname; |
||||||
212 | if (empty($authorname) || '' === $authorname) { |
||||||
213 | $ret = $uname3; |
||||||
214 | } |
||||||
215 | |||||||
216 | return $ret; |
||||||
217 | //------------------------------------- |
||||||
218 | } |
||||||
219 | |||||||
220 | /** |
||||||
221 | * @param int $showCreate |
||||||
222 | */ |
||||||
223 | public static function showColumns($showCreate = 0) |
||||||
0 ignored issues
–
show
The parameter
$showCreate is not used and could be removed.
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
This check looks for parameters that have been defined for a function or method, but which are not used in the method body. ![]() |
|||||||
224 | { |
||||||
225 | global $xoopsModule; |
||||||
226 | /** @var Soapbox\Helper $helper */ |
||||||
227 | $helper = Soapbox\Helper::getInstance(); |
||||||
228 | |||||||
229 | $pathIcon16 = \Xmf\Module\Admin::iconUrl('', 16); |
||||||
230 | $myts = \MyTextSanitizer::getInstance(); |
||||||
0 ignored issues
–
show
|
|||||||
231 | require_once XOOPS_ROOT_PATH . '/class/pagenav.php'; |
||||||
232 | require_once XOOPS_ROOT_PATH . '/class/xoopsform/grouppermform.php'; |
||||||
233 | // require_once XOOPS_ROOT_PATH . '/modules/' . $xoopsModule->dirname() . '/include/cleantags.php'; |
||||||
234 | $module_id = $xoopsModule->getVar('mid'); |
||||||
0 ignored issues
–
show
|
|||||||
235 | $startcol = \Xmf\Request::getInt('startcol', 0, 'GET'); |
||||||
236 | |||||||
237 | /* Code to show existing columns */ |
||||||
238 | echo "<h3 style='color: #2F5376; margin: 0 0 4px 0;'>" . _AM_SOAPBOX_SHOWCOLS . '</h3>'; |
||||||
239 | echo '<span style="color: #567; margin: 3px 0 12px 0; font-size: small; display: block; ">' . _AM_SOAPBOX_COLSTEXT . '</span>'; |
||||||
240 | |||||||
241 | // if ($showCreate == 1) { |
||||||
242 | // echo |
||||||
243 | // "<a style='border: 1px solid #5E5D63; color: #000000; font-family: verdana, tahoma, arial, helvetica, sans-serif; font-size: 1em; padding: 4px 8px; text-align:center;' href='column.php'>" |
||||||
244 | // . _AM_SOAPBOX_CREATECOL . "</a><br><br>"; |
||||||
245 | // } |
||||||
246 | // To create existing columns table |
||||||
247 | //---------------------------- |
||||||
248 | //get category object |
||||||
249 | /** @var \XoopsModules\Soapbox\EntrydataHandler $entrydataHandler */ |
||||||
250 | $entrydataHandler = new \XoopsModules\Soapbox\EntrydataHandler(); |
||||||
251 | $numrows = $entrydataHandler->getColumnCount(); |
||||||
252 | $criteria = new \CriteriaCompo(); |
||||||
253 | $criteria->setSort('weight'); |
||||||
254 | $criteria->setLimit((int)$helper->getConfig('perpage')); |
||||||
255 | $criteria->setStart($startcol); |
||||||
256 | $categoryobArray = $entrydataHandler->getColumns($criteria); |
||||||
257 | unset($criteria); |
||||||
258 | if ($numrows > 0) { |
||||||
259 | echo '<form action="column.php" method="post" name="reordercols">'; |
||||||
260 | } |
||||||
261 | echo "<table width='100%' cellspacing='1' cellpadding='3' border='0' class='outer'>"; |
||||||
262 | echo '<tr>'; |
||||||
263 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_ID . '</b></td>'; |
||||||
264 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_WEIGHT . '</b></td>'; |
||||||
265 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_AUTHOR . '</b></td>'; |
||||||
266 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_ARTCOLNAME . '</b></td>'; |
||||||
267 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_DESCRIP . '</b></td>'; |
||||||
268 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_ACTION . '</b></td>'; |
||||||
269 | echo '</tr>'; |
||||||
270 | |||||||
271 | if ($numrows > 0) { // That is, if there ARE columns in the system |
||||||
272 | //---------------------------- |
||||||
273 | $cont = 0; |
||||||
274 | foreach ($categoryobArray as $_categoryob) { |
||||||
275 | //---------------------------- |
||||||
276 | //get vars |
||||||
277 | ++$cont; |
||||||
278 | $category = $_categoryob->toArray(); //all assign |
||||||
279 | $category_vars = $_categoryob->getVars(); |
||||||
280 | foreach ($category_vars as $k => $v) { |
||||||
281 | ${$k} = $_categoryob->getVar($k); |
||||||
282 | } |
||||||
283 | //---------------------------- |
||||||
284 | |||||||
285 | $author = self::getLinkedUnameFromId($author, 0); |
||||||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||||||
286 | $modify = "<a href='column.php?op=mod&columnID=" . $category['columnID'] . "'><img src='" . $pathIcon16 . "/edit.png' ALT='" . _AM_SOAPBOX_EDITCOL . "'></a>"; |
||||||
287 | $delete = "<a href='column.php?op=del&columnID=" . $category['columnID'] . "'><img src='" . $pathIcon16 . "/delete.png' ALT='" . _AM_SOAPBOX_DELETECOL . "'></a>"; |
||||||
288 | $style = (0 === ($cont % 2)) ? 'even' : 'odd'; |
||||||
289 | echo '<tr class="' . $style . '">'; |
||||||
290 | echo '<td class="txtcenter">' . $category['columnID'] . '</td>'; |
||||||
291 | echo '<td class="txtcenter"><input type="text" name="columnweight[' . $category['columnID'] . ']" value="' . $weight . '" size="3" maxlength="3" style="text-align: center;"></td>'; |
||||||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||||||
292 | echo '<td class="txtcenter">' . $category['author'] . '</td>'; |
||||||
293 | echo '<td class="txtcenter">' . $category['name'] . '</td>'; |
||||||
294 | echo '<td class="txtcenter">' . $category['description'] . '</td>'; |
||||||
295 | echo '<td class="txtcenter">' . $modify . ' ' . $delete . '</td>'; |
||||||
296 | echo '</tr>'; |
||||||
297 | } |
||||||
298 | } else { // that is, $numrows = 0, there's no columns yet |
||||||
299 | echo '<tr>'; |
||||||
300 | echo "<td class='head' align='center' colspan= '7'>" . _AM_SOAPBOX_NOCOLS . '</td>'; |
||||||
301 | echo '</tr>'; |
||||||
302 | $category['columnID'] = '0'; |
||||||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||||||
303 | } |
||||||
304 | echo "</table>\n"; |
||||||
305 | $pagenav = new \XoopsPageNav($numrows, (int)$helper->getConfig('perpage'), $startcol, 'startcol', 'columnID=' . $category['columnID']); |
||||||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||||||
306 | echo '<div style="text-align:right;">' . $pagenav->renderNav() . '</div>'; |
||||||
307 | echo "<br>\n"; |
||||||
308 | |||||||
309 | if ($numrows > 0) { |
||||||
310 | echo "<input type='hidden' name='op' value='reorder'>"; |
||||||
311 | //-------------------- |
||||||
312 | echo $GLOBALS['xoopsSecurity']->getTokenHTML(); |
||||||
313 | //-------------------- |
||||||
314 | echo '<div style="margin-bottom: 18px;"><input type="submit" name="submit" class="formButton" value="' . _AM_SOAPBOX_REORDERCOL . '"></div>'; |
||||||
315 | echo '</form>'; |
||||||
316 | } |
||||||
317 | } |
||||||
318 | |||||||
319 | /** |
||||||
320 | * @param int $showCreate |
||||||
321 | */ |
||||||
322 | public static function showArticles($showCreate = 0) |
||||||
0 ignored issues
–
show
The parameter
$showCreate is not used and could be removed.
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
This check looks for parameters that have been defined for a function or method, but which are not used in the method body. ![]() |
|||||||
323 | { |
||||||
324 | global $xoopsModule; |
||||||
325 | $myts = \MyTextSanitizer::getInstance(); |
||||||
326 | /** @var Soapbox\Helper $helper */ |
||||||
327 | $helper = Soapbox\Helper::getInstance(); |
||||||
328 | |||||||
329 | $pathIcon16 = \Xmf\Module\Admin::iconUrl('', 16); |
||||||
330 | require_once XOOPS_ROOT_PATH . '/class/xoopslists.php'; |
||||||
331 | require_once XOOPS_ROOT_PATH . '/class/pagenav.php'; |
||||||
332 | require_once XOOPS_ROOT_PATH . '/class/xoopsform/grouppermform.php'; |
||||||
333 | // require_once XOOPS_ROOT_PATH . '/modules/' . $xoopsModule->dirname() . '/include/cleantags.php'; |
||||||
334 | |||||||
335 | $module_id = $xoopsModule->getVar('mid'); |
||||||
0 ignored issues
–
show
|
|||||||
336 | $startart = \Xmf\Request::getInt('startart', 0, 'GET'); |
||||||
337 | if (\Xmf\Request::hasVar('entries', 'POST')) { |
||||||
338 | $entries = \Xmf\Request::getInt('entries', 0, 'POST'); |
||||||
339 | } else { |
||||||
340 | $entries = \Xmf\Request::getInt('entries', 0, 'GET'); |
||||||
341 | } |
||||||
342 | //---GET view sort -- |
||||||
343 | $sortname = isset($_GET['sortname']) ? mb_strtolower(trim(strip_tags($myts->stripSlashesGPC($_GET['sortname'])))) : 'datesub'; |
||||||
344 | if (!in_array($sortname, ['datesub', 'weight', 'counter', 'rating', 'headline'], true)) { |
||||||
345 | $sortname = 'datesub'; |
||||||
346 | } |
||||||
347 | $sortorder = isset($_GET['sortorder']) ? mb_strtoupper(trim(strip_tags($myts->stripSlashesGPC($_GET['sortorder'])))) : 'DESC'; |
||||||
348 | if (!in_array($sortorder, ['ASC', 'DESC'], true)) { |
||||||
349 | $sortorder = 'DESC'; |
||||||
350 | } |
||||||
351 | //--------------- |
||||||
352 | /* Code to show existing articles */ |
||||||
353 | echo "<h3 style='color: #2F5376; margin: 0 0 4px 0;'>" . _AM_SOAPBOX_SHOWARTS . '</h3>'; |
||||||
354 | echo '<span style="color: #567; margin: 3px 0 12px 0; font-size: small; display: block; ">' . _AM_SOAPBOX_ARTSTEXT . '</span>'; |
||||||
355 | |||||||
356 | // if ($showCreate == 1) { |
||||||
357 | // echo |
||||||
358 | // "<a style='border: 1px solid #5E5D63; color: #000000; font-family: verdana, tahoma, arial, helvetica, sans-serif; font-size: 1em; padding: 4px 8px; text-align:center;' href='article.php'>" |
||||||
359 | // . _AM_SOAPBOX_CREATEART . "</a><br><br>"; |
||||||
360 | // } |
||||||
361 | // Articles count |
||||||
362 | /** @var \XoopsModules\Soapbox\EntrydataHandler $entrydataHandler */ |
||||||
363 | $entrydataHandler = new \XoopsModules\Soapbox\EntrydataHandler(); |
||||||
364 | //---------------------------- |
||||||
365 | $criteria = new \CriteriaCompo(); |
||||||
366 | $criteria->add(new \Criteria('submit', 0)); |
||||||
367 | $criteria->add(new \Criteria('offline', 0)); |
||||||
368 | $tot_published = $entrydataHandler->getArticleCount($criteria); |
||||||
369 | unset($criteria); |
||||||
370 | //---------------------------- |
||||||
371 | $criteria = new \CriteriaCompo(); |
||||||
372 | $criteria->add(new \Criteria('submit', 0)); |
||||||
373 | $criteria->add(new \Criteria('offline', 1)); |
||||||
374 | $tot_offline = $entrydataHandler->getArticleCount($criteria); |
||||||
375 | unset($criteria); |
||||||
376 | //---------------------------- |
||||||
377 | $criteria = new \CriteriaCompo(); |
||||||
378 | $criteria->add(new \Criteria('submit', 1)); |
||||||
379 | $tot_submitted = $entrydataHandler->getArticleCount($criteria); |
||||||
380 | unset($criteria); |
||||||
381 | //---------------------------- |
||||||
382 | $tot_all = $entrydataHandler->getArticleCount(); |
||||||
383 | //---------------------------- |
||||||
384 | $criteria = new \CriteriaCompo(); |
||||||
385 | $criteria->add(new \Criteria('submit', 0)); |
||||||
386 | $tot_ok = $entrydataHandler->getArticleCount($criteria); |
||||||
387 | unset($criteria); |
||||||
388 | //---------------------------- |
||||||
389 | |||||||
390 | // Prepare string for table head |
||||||
391 | if (0 === $entries) { |
||||||
392 | $string = _AM_SOAPBOX_SHWALL; |
||||||
393 | } |
||||||
394 | if (1 === $entries) { |
||||||
395 | $string = _AM_SOAPBOX_SHWONL; |
||||||
396 | } |
||||||
397 | if (2 === $entries) { |
||||||
398 | $string = _AM_SOAPBOX_SHWOFF; |
||||||
399 | } |
||||||
400 | if (3 === $entries) { |
||||||
401 | $string = _AM_SOAPBOX_SHWSUB; |
||||||
402 | } |
||||||
403 | if (4 === $entries) { |
||||||
404 | $string = _AM_SOAPBOX_SHWAPV; |
||||||
405 | } |
||||||
406 | |||||||
407 | /* Code to show selected articles */ |
||||||
408 | echo "<form name='pick' id='pick' action='" . $myts->htmlSpecialChars(xoops_getenv('PHP_SELF')) . "' method='POST' style='margin: 0;'>"; ?> |
||||||
409 | <table width='100%' cellspacing='1' cellpadding='2' border='0' |
||||||
410 | style='border-left: 1px solid #c0c0c0; border-top: 1px solid #c0c0c0; border-right: 1px solid #c0c0c0;'> |
||||||
411 | <tr> |
||||||
412 | <td class='odd'><span style='font-weight: bold; font-variant: small-caps;'><?php echo $string ?></span></td> |
||||||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||||||
413 | <td class='odd' width='40%' align='right'><?php echo _AM_SOAPBOX_SELECTSTATUS; ?> |
||||||
414 | <select name='entries' onchange='submit()'> |
||||||
415 | <option value='0' |
||||||
416 | <?php |
||||||
417 | if (0 === $entries) { |
||||||
418 | echo 'selected'; |
||||||
419 | } ?>> |
||||||
420 | <?php echo _AM_SOAPBOX_SELALL; ?> |
||||||
421 | [<?php echo $tot_all; ?>] |
||||||
422 | </option> |
||||||
423 | <option value='1' <?php if (1 === $entries) { |
||||||
424 | echo 'selected'; |
||||||
425 | } ?>><?php echo _AM_SOAPBOX_SELONL; ?> |
||||||
426 | [<?php echo $tot_published; ?>] |
||||||
427 | </option> |
||||||
428 | <option value='2' <?php if (2 === $entries) { |
||||||
429 | echo 'selected'; |
||||||
430 | } ?>> |
||||||
431 | <?php echo _AM_SOAPBOX_SELOFF; ?> |
||||||
432 | [<?php echo $tot_offline; ?>] |
||||||
433 | </option> |
||||||
434 | <option value='3' <?php if (3 === $entries) { |
||||||
435 | echo 'selected'; |
||||||
436 | } ?>> |
||||||
437 | <?php echo _AM_SOAPBOX_SELSUB; ?> |
||||||
438 | [<?php echo $tot_submitted; ?>] |
||||||
439 | </option> |
||||||
440 | <option value='4' <?php if (4 === $entries) { |
||||||
441 | echo 'selected'; |
||||||
442 | } ?>><?php echo _AM_SOAPBOX_SELAPV; ?> |
||||||
443 | [<?php echo $tot_ok; ?>] |
||||||
444 | </option> |
||||||
445 | </select> |
||||||
446 | </td> |
||||||
447 | </tr> |
||||||
448 | </table> |
||||||
449 | </form> |
||||||
450 | <?php |
||||||
451 | |||||||
452 | //---------------------------- |
||||||
453 | // Put column names in an array, to avoid a query in the while loop further ahead |
||||||
454 | switch ($entries) { |
||||||
455 | case 1: |
||||||
456 | $submit = 0; |
||||||
457 | $offline = 0; |
||||||
458 | break; |
||||||
459 | case 2: |
||||||
460 | //---------------------------- |
||||||
461 | $submit = 0; |
||||||
462 | $offline = 1; |
||||||
463 | break; |
||||||
464 | case 3: |
||||||
465 | //---------------------------- |
||||||
466 | $submit = 1; |
||||||
467 | $offline = null; |
||||||
468 | break; |
||||||
469 | case 4: |
||||||
470 | //---------------------------- |
||||||
471 | $submit = 0; |
||||||
472 | break; |
||||||
473 | case 0: |
||||||
474 | default: |
||||||
475 | $submit = null; |
||||||
476 | $offline = null; |
||||||
477 | break; |
||||||
478 | } |
||||||
479 | // function getArticlesAllPermcheck( |
||||||
480 | // $limit=0, $start=0, |
||||||
481 | // $checkRight = true, $published = true, $submit = 0, $offline = 0, $block = null , |
||||||
482 | // $sortname = 'datesub', $sortorder = 'DESC', |
||||||
483 | // $select_sbcolumns = null , $NOTarticleIDs = null , |
||||||
484 | // $approve_submit = false , |
||||||
485 | // $id_as_key = false ) |
||||||
486 | //------------------------------------- |
||||||
487 | $entryobArray = $entrydataHandler->getArticlesAllPermcheck((int)$helper->getConfig('perpage'), $startart, false, false, $submit, $offline, null, $sortname, $sortorder, null, null, false, true); |
||||||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||||||
488 | // Get number of articles in the selected condition ($cond) |
||||||
489 | $numrows = $entrydataHandler->total_getArticlesAllPermcheck; |
||||||
490 | if ($numrows > 0) { |
||||||
491 | echo '<form action="article.php" method="post" name="reorderarticles\">'; |
||||||
492 | } |
||||||
493 | echo "<table width='100%' cellspacing='1' cellpadding='3' border='0' class='outer'>"; |
||||||
494 | echo '<tr>'; |
||||||
495 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_ARTID . '</b></td>'; |
||||||
496 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_WEIGHT . '</b></td>'; |
||||||
497 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_ARTCOLNAME . '</b></td>'; |
||||||
498 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_ARTHEADLINE . '</b></td>'; |
||||||
499 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_ARTCREATED . '</b></td>'; |
||||||
500 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_STATUS . '</b></td>'; |
||||||
501 | echo '<th class="txtcenter"><b>' . _AM_SOAPBOX_ACTION . '</b></td>'; |
||||||
502 | echo '</tr>'; |
||||||
503 | |||||||
504 | if ($numrows > 0) { // That is, if there ARE articles in the said condition |
||||||
505 | // Retrieve rows for those items |
||||||
506 | |||||||
507 | $colarray = []; |
||||||
0 ignored issues
–
show
|
|||||||
508 | $cont = 0; |
||||||
509 | |||||||
510 | foreach ($entryobArray as $key => $_entryob) { |
||||||
511 | //get vars |
||||||
512 | ++$cont; |
||||||
513 | //------------------------------------- |
||||||
514 | $articles = $_entryob->toArray(); |
||||||
515 | //-------------------- |
||||||
516 | $colname = !empty($_entryob->_sbcolumns) ? $_entryob->_sbcolumns->getVar('name') : ''; |
||||||
517 | //-------------------- |
||||||
518 | $created = $myts->htmlSpecialChars(formatTimestamp($articles['datesub'], $helper->getConfig('dateformat'))); |
||||||
519 | $modify = "<a href='article.php?op=mod&articleID=" . $articles['articleID'] . "'><img src='" . $pathIcon16 . "/edit.png' ALT='" . _AM_SOAPBOX_EDITART . "'></a>"; |
||||||
520 | $delete = "<a href='article.php?op=del&articleID=" . $articles['articleID'] . "'><img src='" . $pathIcon16 . "/delete.png' ALT='" . _AM_SOAPBOX_DELETEART . "'></a>"; |
||||||
521 | |||||||
522 | //if ($offline == 0) { |
||||||
523 | if (0 === $articles['offline']) { |
||||||
524 | $status = "<img src='" . $pathIcon16 . "/1.png' alt='" . _AM_SOAPBOX_ARTISON . "'>"; |
||||||
525 | } else { |
||||||
526 | //if ($offline == 1 && $submit == 0) { |
||||||
527 | if (0 === $submit && 1 === $articles['offline']) { |
||||||
528 | $status = "<img src='" . $pathIcon16 . "/0.png' alt='" . _AM_SOAPBOX_ARTISOFF . "'>"; |
||||||
529 | } else { |
||||||
530 | if (1 === $submit) { |
||||||
531 | $status = '<img src=' . XOOPS_URL . '/modules/' . $xoopsModule->dirname() . "/assets/images/icon/sub.gif alt='" . _AM_SOAPBOX_ARTISSUB . "'>"; |
||||||
532 | } |
||||||
533 | } |
||||||
534 | } |
||||||
535 | |||||||
536 | //mb ---------------------------- |
||||||
537 | //echo $cont.' - '.$offline.': '.$status.'</br>'; |
||||||
538 | |||||||
539 | $style = (0 === ($cont % 2)) ? 'even' : 'odd'; |
||||||
540 | echo '<tr class="' . $style . '">'; |
||||||
541 | echo '<td align="center"><a href="' . XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/article.php?articleID=' . $articles['articleID'] . '" title="' . $articles['headline'] . '" target="_blank">' . $articles['articleID'] . '</a></td>'; |
||||||
542 | echo '<td class="txtcenter"><input type="text" name="articleweight[' . $articles['articleID'] . ']" value="' . $articles['weight'] . '" size="3" maxlength="3" style="text-align: center;"></td>'; |
||||||
543 | echo '<td class="txtcenter">' . $colname . '</td>'; |
||||||
544 | echo '<td>' . $articles['headline'] . '</td>'; |
||||||
545 | echo '<td class="txtcenter">' . $created . '</td>'; |
||||||
546 | echo '<td class="txtcenter">' . $status . '</td>'; |
||||||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||||||
547 | echo '<td class="txtcenter">' . $modify . $delete . '</td>'; |
||||||
548 | echo '</tr>'; |
||||||
549 | } |
||||||
550 | } else { // that is, $numrows = 0, there's no columns yet |
||||||
551 | echo '<tr>'; |
||||||
552 | echo "<td class='head' align='center' colspan= '7'>" . _AM_SOAPBOX_NOARTS . '</td>'; |
||||||
553 | echo '</tr>'; |
||||||
554 | } |
||||||
555 | echo "</table>\n"; |
||||||
556 | $pagenav = new \XoopsPageNav($numrows, (int)$helper->getConfig('perpage'), $startart, 'startart', 'entries=' . $entries . '&sortname=' . $sortname . '&sortorder=' . $sortorder); |
||||||
557 | echo '<div style="text-align:right;">' . $pagenav->renderNav() . '</div>'; |
||||||
558 | |||||||
559 | if ($numrows > 0) { |
||||||
560 | echo "<input type='hidden' name='op' value='reorder'>"; |
||||||
561 | //-------------------- |
||||||
562 | echo $GLOBALS['xoopsSecurity']->getTokenHTML(); |
||||||
563 | //-------------------- |
||||||
564 | echo '<div style="margin-bottom: 18px;"><input type="submit" name="submit" class="formButton" value="' . _AM_SOAPBOX_REORDERART . '"></div>'; |
||||||
565 | echo '</form>'; |
||||||
566 | } |
||||||
567 | echo "<br>\n"; |
||||||
568 | } |
||||||
569 | |||||||
570 | public static function showSubmissions() |
||||||
571 | { |
||||||
572 | global $xoopsModule; |
||||||
573 | /** @var Soapbox\Helper $helper */ |
||||||
574 | $helper = Soapbox\Helper::getInstance(); |
||||||
575 | |||||||
576 | $pathIcon16 = \Xmf\Module\Admin::iconUrl('', 16); |
||||||
577 | $myts = \MyTextSanitizer::getInstance(); |
||||||
578 | require_once XOOPS_ROOT_PATH . '/class/xoopslists.php'; |
||||||
579 | require_once XOOPS_ROOT_PATH . '/class/pagenav.php'; |
||||||
580 | require_once XOOPS_ROOT_PATH . '/class/xoopsform/grouppermform.php'; |
||||||
581 | // require_once XOOPS_ROOT_PATH . '/modules/' . $xoopsModule->dirname() . '/include/cleantags.php'; |
||||||
582 | $module_id = $xoopsModule->getVar('mid'); |
||||||
0 ignored issues
–
show
|
|||||||
583 | $startsub = \Xmf\Request::getInt('startsub', 0, 'GET'); |
||||||
584 | $datesub = \Xmf\Request::getInt('datesub', 0, 'GET'); |
||||||
585 | |||||||
586 | //---GET view sort -- |
||||||
587 | $sortname = isset($_GET['sortname']) ? mb_strtolower(trim(strip_tags($myts->stripSlashesGPC($_GET['sortname'])))) : 'datesub'; |
||||||
588 | if (!in_array($sortname, ['datesub', 'weight', 'counter', 'rating', 'headline'], true)) { |
||||||
589 | $sortname = 'datesub'; |
||||||
590 | } |
||||||
591 | $sortorder = isset($_GET['sortorder']) ? mb_strtoupper(trim(strip_tags($myts->stripSlashesGPC($_GET['sortorder'])))) : 'DESC'; |
||||||
592 | if (!in_array($sortorder, ['ASC', 'DESC'], true)) { |
||||||
593 | $sortorder = 'DESC'; |
||||||
594 | } |
||||||
595 | //--------------- |
||||||
596 | /* Code to show submitted articles */ |
||||||
597 | echo "<h3 style='color: #2F5376; margin: 0 0 4px 0;'>" . _AM_SOAPBOX_SHOWSUBMISSIONS . '</h3>'; |
||||||
598 | echo '<span style="color: #567; margin: 3px 0 12px 0; font-size: small; display: block; ">' . _AM_SOAPBOX_SUBTEXT . '</span>'; |
||||||
599 | echo "<table width='100%' cellspacing=1 cellpadding=3 border=0 class = outer>"; |
||||||
600 | echo '<tr>'; |
||||||
601 | echo "<td width='40' class='bg3' align='center'><b>" . _AM_SOAPBOX_ARTID . '</b></td>'; |
||||||
602 | echo "<td width='20%' class='bg3' align='center'><b>" . _AM_SOAPBOX_ARTCOLNAME . '</b></td>'; |
||||||
603 | echo "<td width='45%' class='bg3' align='center'><b>" . _AM_SOAPBOX_ARTHEADLINE . '</b></td>'; |
||||||
604 | echo "<td width='90' class='bg3' align='center'><b>" . _AM_SOAPBOX_ARTCREATED . '</b></td>'; |
||||||
605 | echo "<td width='60' class='bg3' align='center'><b>" . _AM_SOAPBOX_ACTION . '</b></td>'; |
||||||
606 | echo '</tr>'; |
||||||
607 | |||||||
608 | // Put column names in an array, to avoid a query in the while loop farther ahead |
||||||
609 | /* Code to show submitted articles */ |
||||||
610 | // Articles count |
||||||
611 | // function getArticlesAllPermcheck( |
||||||
612 | // $limit=0, $start=0, |
||||||
613 | // $checkRight = true, $published = true, $submit = 0, $offline = 0, $block = null , |
||||||
614 | // $sortname = 'datesub', $sortorder = 'DESC', |
||||||
615 | // $select_sbcolumns = null , $NOTarticleIDs = null , |
||||||
616 | // $approve_submit = false , |
||||||
617 | // $id_as_key = false ) |
||||||
618 | // Articles count |
||||||
619 | /** @var \XoopsModules\Soapbox\EntrydataHandler $entrydataHandler */ |
||||||
620 | $entrydataHandler = new \XoopsModules\Soapbox\EntrydataHandler(); |
||||||
621 | //------------------------------------- |
||||||
622 | $entryobArray = $entrydataHandler->getArticlesAllPermcheck((int)$helper->getConfig('perpage'), $startsub, false, false, 1, null, null, $sortname, $sortorder, null, null, false); |
||||||
623 | // Get number of articles in the selected condition ($cond) |
||||||
624 | $numrows = $entrydataHandler->total_getArticlesAllPermcheck; |
||||||
625 | |||||||
626 | if ($numrows > 0) { // That is, if there ARE unauthorized articles in the system |
||||||
627 | foreach ($entryobArray as $_entryob) { |
||||||
628 | //get vars |
||||||
629 | //------------------------------------- |
||||||
630 | $articles = $_entryob->toArray(); |
||||||
631 | //-------------------- |
||||||
632 | $colname = !empty($_entryob->_sbcolumns) ? $_entryob->_sbcolumns->getVar('name') : ''; |
||||||
633 | $created = $myts->htmlSpecialChars(formatTimestamp($datesub, $helper->getConfig('dateformat'))); |
||||||
634 | $modify = "<a href='submissions.php?op=mod&articleID=" . $articles['articleID'] . "'><img src='" . $pathIcon16 . "/edit.png' ALT='" . _AM_SOAPBOX_EDITSUBM . "'></a>"; |
||||||
635 | $delete = "<a href='submissions.php?op=del&articleID=" . $articles['articleID'] . "'><img src='" . $pathIcon16 . "/delete.png' ALT='" . _AM_SOAPBOX_DELETESUBM . "'></a>"; |
||||||
636 | |||||||
637 | echo '<tr>'; |
||||||
638 | echo "<td class='head' align='center'>" . $articles['articleID'] . '</td>'; |
||||||
639 | echo "<td class='even' align='left'>" . $colname . '</td>'; |
||||||
640 | echo "<td class='even' align='left'>" . $articles['headline'] . '</td>'; |
||||||
641 | echo "<td class='even' align='center'>" . $created . '</td>'; |
||||||
642 | echo "<td class='even' align='center'>" . $modify . $delete . '</td>'; |
||||||
643 | echo '</tr>'; |
||||||
644 | } |
||||||
645 | } else { // that is, $numrows = 0, there's no columns yet |
||||||
646 | echo '<tr>'; |
||||||
647 | echo "<td class='head' align='center' colspan= '7'>" . _AM_SOAPBOX_NOSUBMISSYET . '</td>'; |
||||||
648 | echo '</tr>'; |
||||||
649 | } |
||||||
650 | echo "</table>\n"; |
||||||
651 | $pagenav = new \XoopsPageNav($numrows, $helper->getConfig('perpage'), $startsub, 'startsub', '&sortname=' . $sortname . '&sortorder=' . $sortorder); |
||||||
652 | echo '<div style="text-align:right;">' . $pagenav->renderNav() . '</div>'; |
||||||
653 | echo "<br>\n"; |
||||||
654 | } |
||||||
655 | |||||||
656 | //HACK bydomifara for add method |
||||||
657 | |||||||
658 | /** |
||||||
659 | * @return string |
||||||
660 | */ |
||||||
661 | public static function getAcceptLang() |
||||||
662 | { |
||||||
663 | //---access language |
||||||
664 | $al = 'en'; |
||||||
665 | if (\Xmf\Request::hasVar('HTTP_ACCEPT_LANGUAGE', 'SERVER')) { |
||||||
666 | $accept_langs = explode(',', $_SERVER['HTTP_ACCEPT_LANGUAGE']); |
||||||
667 | foreach ($accept_langs as $al) { |
||||||
668 | $al = mb_strtolower($al); |
||||||
669 | $al_len = mb_strlen($al); |
||||||
670 | if ($al_len > 2) { |
||||||
671 | if (preg_match('/([a-z]{2});q=[0-9.]+$/', $al, $al_match)) { |
||||||
672 | $al = $al_match[1]; |
||||||
673 | break; |
||||||
674 | } |
||||||
675 | continue; |
||||||
676 | } |
||||||
677 | } |
||||||
678 | } |
||||||
679 | |||||||
680 | return $al; |
||||||
681 | } |
||||||
682 | } |
||||||
683 |