Issues in XoopsTree.php (master) - Issues in master - XoopsModules25x/wfdownloads - Measure and Improve Code Quality continuously with Scrutinizer

Issues (411)

Security Analysis not enabled

File Inclusion

File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.

Regex Injection

Regex Injection enables an attacker to execute arbitrary code in your PHP process.

SQL Injection

SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.

Response Splitting

Response Splitting can be used to send arbitrary responses.

File Manipulation

File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.

Object Injection

Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.

File Exposure

File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.

XML Injection

XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.

Code Injection

Code Injection enables an attacker to execute arbitrary code on the server.

Variable Injection

Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.

XPath Injection

XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.

Other Vulnerability

This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.

Command Injection

Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.

LDAP Injection

LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.

Cross-Site Scripting

Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.

Header Injection

Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

class/Common/XoopsTree.php (3 issues)

Labels

Unused Code 3

Severity

Minor 3

<?php

namespace XoopsModules\Wfdownloads\Common;

/**
 * XOOPS tree handler
 *
 * You may not change or alter any portion of this comment or credits
 * of supporting developers from this source code or any supporting source code
 * which is considered copyrighted (c) material of the original comment or credit authors.
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 *
 * @copyright       XOOPS Project (https://xoops.org)
 * @license         GNU GPL 2 (https://www.gnu.org/licenses/old-licenses/gpl-2.0.html)
 * @package         kernel
 * @since           2.0.0
 * @author          Kazumi Ono (AKA onokazu) http://www.myweb.ne.jp/, http://jp.xoops.org/
 * @version         $Id: xoopstree.php 12863 2014-11-22 04:11:17Z beckmi $
 */

/**
 * Abstract base class for forms
 *
 * @author     Kazumi Ono <[email protected]>
 * @author     John Neill <[email protected]>
 * @copyright  copyright (c) XOOPS.org
 * @package    kernel
 * @subpackage XoopsTree
 * @access     public
 */
class XoopsTree
{
    public $table; //table with parent-child structure
    public $id; //name of unique id for records in table $table
    public $pid; // name of parent id used in table $table
    public $order; //specifies the order of query results
    public $title; // name of a field in table $table which will be used when  selection box and paths are generated
    public $db;
    //constructor of class XoopsTree
    //sets the names of table, unique id, and parend id

    /**
     * @param $table_name
     * @param $id_name
     * @param $pid_name
     */
    public function __construct($table_name, $id_name, $pid_name)
    {
        //        $GLOBALS['xoopsLogger']->addDeprecated("Class '" . __CLASS__ . "' is deprecated, check 'XoopsObjectTree' in tree.php");
        $this->db    = \XoopsDatabaseFactory::getDatabaseConnection();
        $this->table = $table_name;
        $this->id    = $id_name;
        $this->pid   = $pid_name;
    }

    // returns an array of first child objects for a given id($sel_id)

    /**
     * @param        $sel_id
     * @param string $order
     *
     * @return array
     */
    public function getFirstChild($sel_id, $order = '')
    {
        $sel_id = (int)$sel_id;
        $arr    = [];
        $sql    = 'SELECT * FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . ' ';
        if ('' != $order) {
            $sql .= " ORDER BY $order";
        }
        $result = $this->db->query($sql);
        if ($result) {
            while (false !== ($myrow = $this->db->fetchArray($result))) {
                $arr[] = $myrow;
            }
        }
        return $arr;
    }

    // returns an array of all FIRST child ids of a given id($sel_id)

    /**
     * @param $sel_id
     *
     * @return array
     */
    public function getFirstChildId($sel_id)
    {
        $sel_id  = (int)$sel_id;
        $idarray = [];
        $result  = $this->db->query('SELECT ' . $this->id . ' FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . '');
        $count   = $this->db->getRowsNum($result);
        if (0 == $count) {
            return $idarray;
        }
        while (list($id) = $this->db->fetchRow($result)) {
            $idarray[] = $id;
        }

        return $idarray;
    }

    //returns an array of ALL child ids for a given id($sel_id)

    /**
     * @param        $sel_id
     * @param string $order
     * @param array  $idarray
     *
     * @return array
     */
    public function getAllChildId($sel_id, $order = '', $idarray = [])
    {
        $sel_id = (int)$sel_id;
        $sql    = 'SELECT ' . $this->id . ' FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . '';
        if ('' != $order) {
            $sql .= " ORDER BY $order";
        }
        $result = $this->db->query($sql);
        $count  = $this->db->getRowsNum($result);
        if (0 == $count) {
            return $idarray;
        }
        while (list($r_id) = $this->db->fetchRow($result)) {
            $idarray[] = $r_id;
            $idarray   = $this->getAllChildId($r_id, $order, $idarray);
        }

        return $idarray;
    }

    //returns an array of ALL parent ids for a given id($sel_id)

    /**
     * @param        $sel_id
     * @param string $order
     * @param array  $idarray
     *
     * @return array
     */
    public function getAllParentId($sel_id, $order = '', $idarray = [])
    {
        $sel_id = (int)$sel_id;
        $sql    = 'SELECT ' . $this->pid . ' FROM ' . $this->table . ' WHERE ' . $this->id . '=' . $sel_id . '';
        if ('' != $order) {
            $sql .= " ORDER BY $order";
        }
        $result = $this->db->query($sql);
        [$r_id] = $this->db->fetchRow($result);
        if (0 == $r_id) {
            return $idarray;
        }
        $idarray[] = $r_id;
        $idarray   = $this->getAllParentId($r_id, $order, $idarray);

        return $idarray;
    }

    //generates path from the root id to a given id($sel_id)
    // the path is delimetered with "/"

    /**
     * @param        $sel_id
     * @param        $title
     * @param string $path
     *
     * @return string
     */
    public function getPathFromId($sel_id, $title, $path = '')
    {
        $sel_id = (int)$sel_id;
        $result = $this->db->query('SELECT ' . $this->pid . ', ' . $title . ' FROM ' . $this->table . ' WHERE ' . $this->id . "=$sel_id");
        if (0 == $this->db->getRowsNum($result)) {
            return $path;
        }
        [$parentid, $name] = $this->db->fetchRow($result);
        $myts = \MyTextSanitizer::getInstance();

        $name = htmlspecialchars($name, ENT_QUOTES | ENT_HTML5);
        $path = '/' . $name . $path . '';
        if (0 == $parentid) {
            return $path;
        }
        $path = $this->getPathFromId($parentid, $title, $path);

        return $path;
    }

    //makes a nicely ordered selection box
    //$preset_id is used to specify a preselected item
    //set $none to 1 to add a option with value 0

    /**
     * @param        $title
     * @param string $order
     * @param int    $preset_id
     * @param int    $none
     * @param string $sel_name
     * @param string $onchange
     */
    public function makeMySelBox($title, $order = '', $preset_id = 0, $none = 0, $sel_name = '', $onchange = '')
    {
        if ('' == $sel_name) {
            $sel_name = $this->id;
        }
        $myts = \MyTextSanitizer::getInstance();

        echo "<select name='" . $sel_name . "'";
        if ('' != $onchange) {
            echo " onchange='" . $onchange . "'";
        }
        echo ">\n";
        $sql = 'SELECT ' . $this->id . ', ' . $title . ' FROM ' . $this->table . ' WHERE ' . $this->pid . '=0';
        if ('' != $order) {
            $sql .= " ORDER BY $order";
        }
        $result = $this->db->query($sql);
        if ($none) {
            echo "<option value='0'>----</option>\n";
        }
        while (list($catid, $name) = $this->db->fetchRow($result)) {
            $sel = '';
            if ($catid == $preset_id) {
                $sel = ' selected';
            }
            echo "<option value='$catid'$sel>$name</option>\n";
            $sel = '';
            $arr = $this->getChildTreeArray($catid, $order);
            foreach ($arr as $option) {
                $option['prefix'] = \str_replace('.', '--', $option['prefix']);
                $catpath          = $option['prefix'] . '&nbsp;' . htmlspecialchars($option[$title], ENT_QUOTES | ENT_HTML5);
                if ($option[$this->id] == $preset_id) {
                    $sel = ' selected';
                }
                echo "<option value='" . $option[$this->id] . "'$sel>$catpath</option>\n";
                $sel = '';
            }
        }
        echo "</select>\n";
    }

    //generates nicely formatted linked path from the root id to a given id

    /**
     * @param        $sel_id
     * @param        $title
     * @param        $funcURL
     * @param string $path
     *
     * @return string
     */
    public function getNicePathFromId($sel_id, $title, $funcURL, $path = '')
    {
        $path   = !empty($path) ? '&nbsp;:&nbsp;' . $path : $path;
        $sel_id = (int)$sel_id;
        $sql    = 'SELECT ' . $this->pid . ', ' . $title . ' FROM ' . $this->table . ' WHERE ' . $this->id . "=$sel_id";
        $result = $this->db->query($sql);
        if (0 == $this->db->getRowsNum($result)) {
            return $path;
        }
        [$parentid, $name] = $this->db->fetchRow($result);
        $myts = \MyTextSanitizer::getInstance();

        $name = htmlspecialchars($name, ENT_QUOTES | ENT_HTML5);
        $path = "<a href='" . $funcURL . '&amp;' . $this->id . '=' . $sel_id . "'>" . $name . '</a>' . $path . '';
        if (0 == $parentid) {
            return $path;
        }
        $path = $this->getNicePathFromId($parentid, $title, $funcURL, $path);

        return $path;
    }

    //generates id path from the root id to a given id
    // the path is delimetered with "/"

    /**
     * @param        $sel_id
     * @param string $path
     *
     * @return string
     */
    public function getIdPathFromId($sel_id, $path = '')
    {
        $sel_id = (int)$sel_id;
        $result = $this->db->query('SELECT ' . $this->pid . ' FROM ' . $this->table . ' WHERE ' . $this->id . "=$sel_id");
        if (0 == $this->db->getRowsNum($result)) {
            return $path;
        }
        [$parentid] = $this->db->fetchRow($result);
        $path = '/' . $sel_id . $path . '';
        if (0 == $parentid) {
            return $path;
        }
        $path = $this->getIdPathFromId($parentid, $path);

        return $path;
    }

    /**
     * Enter description here...
     *
     * @param int|mixed    $sel_id
     * @param string|mixed $order
     * @param array|mixed  $parray
     *
     * @return mixed
     */
    public function getAllChild($sel_id = 0, $order = '', $parray = [])
    {
        $sel_id = (int)$sel_id;
        $sql    = 'SELECT * FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . '';
        if ('' != $order) {
            $sql .= " ORDER BY $order";
        }
        $result = $this->db->query($sql);
        $count  = $this->db->getRowsNum($result);
        if (0 == $count) {
            return $parray;
        }
        while (false !== ($row = $this->db->fetchArray($result))) {
            $parray[] = $row;
            $parray   = $this->getAllChild($row[$this->id], $order, $parray);
        }

        return $parray;
    }

    /**
     * Enter description here...
     *
     * @param int|mixed    $sel_id
     * @param string|mixed $order
     * @param array|mixed  $parray
     * @param string|mixed $r_prefix
     *
     * @return mixed
     */
    public function getChildTreeArray($sel_id = 0, $order = '', $parray = [], $r_prefix = '')
    {
        $sel_id = (int)$sel_id;
        $sql    = 'SELECT * FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . '';
        if ('' != $order) {
            $sql .= " ORDER BY $order";
        }
        $result = $this->db->query($sql);
        $count  = $this->db->getRowsNum($result);
        if (0 == $count) {
            return $parray;
        }
        while (false !== ($row = $this->db->fetchArray($result))) {
            $row['prefix'] = $r_prefix . '.';
            $parray[]      = $row;
            $parray        = $this->getChildTreeArray($row[$this->id], $order, $parray, $row['prefix']);
        }

        return $parray;
    }
}


1			<?php
2
3			namespace XoopsModules\Wfdownloads\Common;
4
5			/**
6			* XOOPS tree handler
7			*
8			* You may not change or alter any portion of this comment or credits
9			* of supporting developers from this source code or any supporting source code
10			* which is considered copyrighted (c) material of the original comment or credit authors.
11			* This program is distributed in the hope that it will be useful,
12			* but WITHOUT ANY WARRANTY; without even the implied warranty of
13			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
14			*
15			* @copyright XOOPS Project (https://xoops.org)
16			* @license GNU GPL 2 (https://www.gnu.org/licenses/old-licenses/gpl-2.0.html)
17			* @package kernel
18			* @since 2.0.0
19			* @author Kazumi Ono (AKA onokazu) http://www.myweb.ne.jp/, http://jp.xoops.org/
20			* @version $Id: xoopstree.php 12863 2014-11-22 04:11:17Z beckmi $
21			*/
22
23			/**
24			* Abstract base class for forms
25			*
26			* @author Kazumi Ono <[email protected]>
27			* @author John Neill <[email protected]>
28			* @copyright copyright (c) XOOPS.org
29			* @package kernel
30			* @subpackage XoopsTree
31			* @access public
32			*/
33			class XoopsTree
34			{
35			public $table; //table with parent-child structure
36			public $id; //name of unique id for records in table $table
37			public $pid; // name of parent id used in table $table
38			public $order; //specifies the order of query results
39			public $title; // name of a field in table $table which will be used when selection box and paths are generated
40			public $db;
41			//constructor of class XoopsTree
42			//sets the names of table, unique id, and parend id
43
44			/**
45			* @param $table_name
46			* @param $id_name
47			* @param $pid_name
48			*/
49			public function __construct($table_name, $id_name, $pid_name)
50			{
51			// $GLOBALS['xoopsLogger']->addDeprecated("Class '" . __CLASS__ . "' is deprecated, check 'XoopsObjectTree' in tree.php");
52			$this->db = \XoopsDatabaseFactory::getDatabaseConnection();
53			$this->table = $table_name;
54			$this->id = $id_name;
55			$this->pid = $pid_name;
56			}
57
58			// returns an array of first child objects for a given id($sel_id)
59
60			/**
61			* @param $sel_id
62			* @param string $order
63			*
64			* @return array
65			*/
66			public function getFirstChild($sel_id, $order = '')
67			{
68			$sel_id = (int)$sel_id;
69			$arr = [];
70			$sql = 'SELECT * FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . ' ';
71			if ('' != $order) {
72			$sql .= " ORDER BY $order";
73			}
74			$result = $this->db->query($sql);
75			if ($result) {
76			while (false !== ($myrow = $this->db->fetchArray($result))) {
77			$arr[] = $myrow;
78			}
79			}
80			return $arr;
81			}
82
83			// returns an array of all FIRST child ids of a given id($sel_id)
84
85			/**
86			* @param $sel_id
87			*
88			* @return array
89			*/
90			public function getFirstChildId($sel_id)
91			{
92			$sel_id = (int)$sel_id;
93			$idarray = [];
94			$result = $this->db->query('SELECT ' . $this->id . ' FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . '');
95			$count = $this->db->getRowsNum($result);
96			if (0 == $count) {
97			return $idarray;
98			}
99			while (list($id) = $this->db->fetchRow($result)) {
100			$idarray[] = $id;
101			}
102
103			return $idarray;
104			}
105
106			//returns an array of ALL child ids for a given id($sel_id)
107
108			/**
109			* @param $sel_id
110			* @param string $order
111			* @param array $idarray
112			*
113			* @return array
114			*/
115			public function getAllChildId($sel_id, $order = '', $idarray = [])
116			{
117			$sel_id = (int)$sel_id;
118			$sql = 'SELECT ' . $this->id . ' FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . '';
119			if ('' != $order) {
120			$sql .= " ORDER BY $order";
121			}
122			$result = $this->db->query($sql);
123			$count = $this->db->getRowsNum($result);
124			if (0 == $count) {
125			return $idarray;
126			}
127			while (list($r_id) = $this->db->fetchRow($result)) {
128			$idarray[] = $r_id;
129			$idarray = $this->getAllChildId($r_id, $order, $idarray);
130			}
131
132			return $idarray;
133			}
134
135			//returns an array of ALL parent ids for a given id($sel_id)
136
137			/**
138			* @param $sel_id
139			* @param string $order
140			* @param array $idarray
141			*
142			* @return array
143			*/
144			public function getAllParentId($sel_id, $order = '', $idarray = [])
145			{
146			$sel_id = (int)$sel_id;
147			$sql = 'SELECT ' . $this->pid . ' FROM ' . $this->table . ' WHERE ' . $this->id . '=' . $sel_id . '';
148			if ('' != $order) {
149			$sql .= " ORDER BY $order";
150			}
151			$result = $this->db->query($sql);
152			[$r_id] = $this->db->fetchRow($result);
153			if (0 == $r_id) {
154			return $idarray;
155			}
156			$idarray[] = $r_id;
157			$idarray = $this->getAllParentId($r_id, $order, $idarray);
158
159			return $idarray;
160			}
161
162			//generates path from the root id to a given id($sel_id)
163			// the path is delimetered with "/"
164
165			/**
166			* @param $sel_id
167			* @param $title
168			* @param string $path
169			*
170			* @return string
171			*/
172			public function getPathFromId($sel_id, $title, $path = '')
173			{
174			$sel_id = (int)$sel_id;
175			$result = $this->db->query('SELECT ' . $this->pid . ', ' . $title . ' FROM ' . $this->table . ' WHERE ' . $this->id . "=$sel_id");
176			if (0 == $this->db->getRowsNum($result)) {
177			return $path;
178			}
179			[$parentid, $name] = $this->db->fetchRow($result);
180			$myts = \MyTextSanitizer::getInstance();
			0 ignored issues – show Unused Code introduced 2020-12-05 12:20 UTC by Report Bug Copy Issue Report Show Similar Issues like this The assignment to `$myts` is dead and can be removed. Loading history...
181			$name = htmlspecialchars($name, ENT_QUOTES \| ENT_HTML5);
182			$path = '/' . $name . $path . '';
183			if (0 == $parentid) {
184			return $path;
185			}
186			$path = $this->getPathFromId($parentid, $title, $path);
187
188			return $path;
189			}
190
191			//makes a nicely ordered selection box
192			//$preset_id is used to specify a preselected item
193			//set $none to 1 to add a option with value 0
194
195			/**
196			* @param $title
197			* @param string $order
198			* @param int $preset_id
199			* @param int $none
200			* @param string $sel_name
201			* @param string $onchange
202			*/
203			public function makeMySelBox($title, $order = '', $preset_id = 0, $none = 0, $sel_name = '', $onchange = '')
204			{
205			if ('' == $sel_name) {
206			$sel_name = $this->id;
207			}
208			$myts = \MyTextSanitizer::getInstance();
			0 ignored issues – show Unused Code introduced 2020-12-05 12:20 UTC by Report Bug Copy Issue Report Show Similar Issues like this The assignment to `$myts` is dead and can be removed. Loading history...
209			echo "<select name='" . $sel_name . "'";
210			if ('' != $onchange) {
211			echo " onchange='" . $onchange . "'";
212			}
213			echo ">\n";
214			$sql = 'SELECT ' . $this->id . ', ' . $title . ' FROM ' . $this->table . ' WHERE ' . $this->pid . '=0';
215			if ('' != $order) {
216			$sql .= " ORDER BY $order";
217			}
218			$result = $this->db->query($sql);
219			if ($none) {
220			echo "<option value='0'>----</option>\n";
221			}
222			while (list($catid, $name) = $this->db->fetchRow($result)) {
223			$sel = '';
224			if ($catid == $preset_id) {
225			$sel = ' selected';
226			}
227			echo "<option value='$catid'$sel>$name</option>\n";
228			$sel = '';
229			$arr = $this->getChildTreeArray($catid, $order);
230			foreach ($arr as $option) {
231			$option['prefix'] = \str_replace('.', '--', $option['prefix']);
232			$catpath = $option['prefix'] . ' ' . htmlspecialchars($option[$title], ENT_QUOTES \| ENT_HTML5);
233			if ($option[$this->id] == $preset_id) {
234			$sel = ' selected';
235			}
236			echo "<option value='" . $option[$this->id] . "'$sel>$catpath</option>\n";
237			$sel = '';
238			}
239			}
240			echo "</select>\n";
241			}
242
243			//generates nicely formatted linked path from the root id to a given id
244
245			/**
246			* @param $sel_id
247			* @param $title
248			* @param $funcURL
249			* @param string $path
250			*
251			* @return string
252			*/
253			public function getNicePathFromId($sel_id, $title, $funcURL, $path = '')
254			{
255			$path = !empty($path) ? ' : ' . $path : $path;
256			$sel_id = (int)$sel_id;
257			$sql = 'SELECT ' . $this->pid . ', ' . $title . ' FROM ' . $this->table . ' WHERE ' . $this->id . "=$sel_id";
258			$result = $this->db->query($sql);
259			if (0 == $this->db->getRowsNum($result)) {
260			return $path;
261			}
262			[$parentid, $name] = $this->db->fetchRow($result);
263			$myts = \MyTextSanitizer::getInstance();
			0 ignored issues – show Unused Code introduced 2020-12-05 12:20 UTC by Report Bug Copy Issue Report Show Similar Issues like this The assignment to `$myts` is dead and can be removed. Loading history...
264			$name = htmlspecialchars($name, ENT_QUOTES \| ENT_HTML5);
265			$path = "<a href='" . $funcURL . '&' . $this->id . '=' . $sel_id . "'>" . $name . '</a>' . $path . '';
266			if (0 == $parentid) {
267			return $path;
268			}
269			$path = $this->getNicePathFromId($parentid, $title, $funcURL, $path);
270
271			return $path;
272			}
273
274			//generates id path from the root id to a given id
275			// the path is delimetered with "/"
276
277			/**
278			* @param $sel_id
279			* @param string $path
280			*
281			* @return string
282			*/
283			public function getIdPathFromId($sel_id, $path = '')
284			{
285			$sel_id = (int)$sel_id;
286			$result = $this->db->query('SELECT ' . $this->pid . ' FROM ' . $this->table . ' WHERE ' . $this->id . "=$sel_id");
287			if (0 == $this->db->getRowsNum($result)) {
288			return $path;
289			}
290			[$parentid] = $this->db->fetchRow($result);
291			$path = '/' . $sel_id . $path . '';
292			if (0 == $parentid) {
293			return $path;
294			}
295			$path = $this->getIdPathFromId($parentid, $path);
296
297			return $path;
298			}
299
300			/**
301			* Enter description here...
302			*
303			* @param int\|mixed $sel_id
304			* @param string\|mixed $order
305			* @param array\|mixed $parray
306			*
307			* @return mixed
308			*/
309			public function getAllChild($sel_id = 0, $order = '', $parray = [])
310			{
311			$sel_id = (int)$sel_id;
312			$sql = 'SELECT * FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . '';
313			if ('' != $order) {
314			$sql .= " ORDER BY $order";
315			}
316			$result = $this->db->query($sql);
317			$count = $this->db->getRowsNum($result);
318			if (0 == $count) {
319			return $parray;
320			}
321			while (false !== ($row = $this->db->fetchArray($result))) {
322			$parray[] = $row;
323			$parray = $this->getAllChild($row[$this->id], $order, $parray);
324			}
325
326			return $parray;
327			}
328
329			/**
330			* Enter description here...
331			*
332			* @param int\|mixed $sel_id
333			* @param string\|mixed $order
334			* @param array\|mixed $parray
335			* @param string\|mixed $r_prefix
336			*
337			* @return mixed
338			*/
339			public function getChildTreeArray($sel_id = 0, $order = '', $parray = [], $r_prefix = '')
340			{
341			$sel_id = (int)$sel_id;
342			$sql = 'SELECT * FROM ' . $this->table . ' WHERE ' . $this->pid . '=' . $sel_id . '';
343			if ('' != $order) {
344			$sql .= " ORDER BY $order";
345			}
346			$result = $this->db->query($sql);
347			$count = $this->db->getRowsNum($result);
348			if (0 == $count) {
349			return $parray;
350			}
351			while (false !== ($row = $this->db->fetchArray($result))) {
352			$row['prefix'] = $r_prefix . '.';
353			$parray[] = $row;
354			$parray = $this->getChildTreeArray($row[$this->id], $order, $parray, $row['prefix']);
355			}
356
357			return $parray;
358			}
359			}
360

XoopsModules25x / wfdownloads

Issues (411)

Security Analysis not enabled

class/Common/XoopsTree.php (3 issues)

Labels

Severity

Introduced By

Duplication Side-by-Side

Filter issues like