XoopsModules25x /
xoopsfaq
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php declare(strict_types=1); |
||||
| 2 | /* |
||||
| 3 | You may not change or alter any portion of this comment or credits of |
||||
| 4 | supporting developers from this source code or any supporting source code |
||||
| 5 | which is considered copyrighted (c) material of the original comment or credit |
||||
| 6 | authors. |
||||
| 7 | |||||
| 8 | This program is distributed in the hope that it will be useful, but |
||||
| 9 | WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
| 10 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||||
| 11 | */ |
||||
| 12 | |||||
| 13 | /** |
||||
| 14 | * Recent Term Block file |
||||
| 15 | * |
||||
| 16 | * @author ZySpec |
||||
| 17 | * @author XOOPS Module Development Team |
||||
| 18 | * @copyright Copyright (c) 2001-2020 {@link https://xoops.org XOOPS Project}
|
||||
| 19 | * @license https://www.gnu.org/licenses/gpl-2.0.html GNU Public License |
||||
| 20 | * @since :: 1.25 |
||||
| 21 | * |
||||
| 22 | * @see Xmf\Module\Helper |
||||
| 23 | * @see MyTextSanitizer |
||||
| 24 | */ |
||||
| 25 | |||||
| 26 | use Xmf\Module\Helper\Permission; |
||||
| 27 | use XoopsModules\Xoopsfaq\{
|
||||
| 28 | Constants, |
||||
| 29 | CategoryHandler, |
||||
| 30 | Helper |
||||
| 31 | }; |
||||
| 32 | |||||
| 33 | /** |
||||
| 34 | * Display the most recent FAQs added |
||||
| 35 | * |
||||
| 36 | * @param array $options for display parameters |
||||
| 37 | * [0] = num of FAQs to show |
||||
| 38 | * [1] = num chars in answer(s) to show |
||||
| 39 | * [2] = display date added |
||||
| 40 | * [3] = FAQ categories to use |
||||
| 41 | * |
||||
| 42 | * @return array contains recent FAQ(s) parameters |
||||
| 43 | */ |
||||
| 44 | function b_xoopsfaq_recent_show(array $options) |
||||
| 45 | {
|
||||
| 46 | $moduleDirName = \basename(\dirname(__DIR__)); |
||||
| 47 | |||||
| 48 | $myts = \MyTextSanitizer::getInstance(); |
||||
| 49 | |||||
| 50 | /** @var Helper $helper */ |
||||
| 51 | $helper = Helper::getInstance(); |
||||
| 52 | $contentsHandler = $helper->getHandler('Contents');
|
||||
| 53 | $permHelper = new Permission($moduleDirName); |
||||
| 54 | $block = []; |
||||
| 55 | |||||
| 56 | $criteria = new \CriteriaCompo(); |
||||
| 57 | $criteria->add(new \Criteria('contents_active', Constants::ACTIVE, '='));
|
||||
| 58 | $criteria->setSort('contents_publish DESC, contents_weight');
|
||||
| 59 | $criteria->order = 'ASC'; |
||||
| 60 | $criteria->setLimit($options[0]); |
||||
| 61 | |||||
| 62 | $options[3] = $options[3] ?? [0]; |
||||
| 63 | $cTu = $catsToUse = (false === mb_strpos($options[3], ',')) ? (array)$options[3] : explode(',', $options[3]);
|
||||
|
0 ignored issues
–
show
Bug
introduced
by
Loading history...
It seems like
$options[3] can also be of type array<integer,integer>; however, parameter $haystack of mb_strpos() does only seem to accept string, maybe add an additional type check?
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
Loading history...
|
|||||
| 64 | if (in_array(0, $catsToUse, true) || empty($catsToUse)) {
|
||||
| 65 | // Get a list of all cats |
||||
| 66 | $categoryHandler = $helper->getHandler('Category');
|
||||
| 67 | $catListArray = $categoryHandler->getList(); |
||||
| 68 | $cTu = $catsToUse = array_keys($catListArray); |
||||
| 69 | } |
||||
| 70 | // Remove any cats this user doesn't have rights to view |
||||
| 71 | foreach ($cTu as $key => $thisCat) {
|
||||
| 72 | if (false === $permHelper->checkPermission('viewcat', $thisCat)) {
|
||||
| 73 | unset($catsToUse[$key]); |
||||
| 74 | } |
||||
| 75 | } |
||||
| 76 | if (!empty($catsToUse)) {
|
||||
| 77 | $criteria->add(new \Criteria('contents_cid', '(' . implode(',', $catsToUse) . ')', 'IN'));
|
||||
| 78 | } else {
|
||||
| 79 | return $block; |
||||
| 80 | } |
||||
| 81 | |||||
| 82 | $fieldsArray = ['contents_cid', 'contents_title', 'contents_contents']; |
||||
| 83 | $faqObjArray = $contentsHandler->getAll($criteria, $fieldsArray); |
||||
| 84 | $faqCount = is_array($faqObjArray) ? count($faqObjArray) : 0; |
||||
|
0 ignored issues
–
show
|
|||||
| 85 | if ($faqCount > 0) {
|
||||
| 86 | $block['title'] = _MB_XOOPSFAQ_RECENT_TITLE; |
||||
| 87 | $block['show_date'] = (isset($options[2]) && $options[2] > 0) ? 1 : 0; |
||||
| 88 | foreach ($faqObjArray as $fId => $faqObj) {
|
||||
| 89 | $faqTitle = $myts->displayTarea($faqObj->getVar('contents_title'));
|
||||
| 90 | if (!empty($options[1])) {
|
||||
| 91 | $txtAns = strip_tags($faqObj->getVar('contents_contents')); // get rid of html for block
|
||||
| 92 | $faqAns = $myts->displayTarea(xoops_substr($txtAns, 0, $options[1]), 0, 0, 0, 0, 0); |
||||
| 93 | } else {
|
||||
| 94 | $faqAns = $myts->displayTarea( |
||||
| 95 | $faqObj->getVar('contents_contents'),
|
||||
| 96 | (int)$faqObj->getVar('dohtml'),
|
||||
| 97 | (int)$faqObj->getVar('dosmiley'),
|
||||
| 98 | (int)$faqObj->getVar('doxcode'),
|
||||
| 99 | 1, |
||||
| 100 | (int)$faqObj->getVar('dobr')
|
||||
| 101 | ); |
||||
| 102 | } |
||||
| 103 | $block['faq'][] = [ |
||||
| 104 | 'title' => $faqTitle, |
||||
| 105 | 'ans' => $faqAns, |
||||
| 106 | 'published' => $faqObj->getPublished(_SHORTDATESTRING), |
||||
| 107 | 'id' => $faqObj->getVar('contents_id'),
|
||||
| 108 | 'cid' => $faqObj->getVar('contents_cid'),
|
||||
| 109 | ]; |
||||
| 110 | } |
||||
| 111 | } |
||||
| 112 | |||||
| 113 | return $block; |
||||
| 114 | } |
||||
| 115 | |||||
| 116 | /** |
||||
| 117 | * Edit the most recent FAQs block parameters |
||||
| 118 | * |
||||
| 119 | * @param array $options for display parameters |
||||
| 120 | * [0] = num of FAQs to show |
||||
| 121 | * [1] = num chars in answer(s) to show |
||||
| 122 | * [2] = display date added |
||||
| 123 | * [3] = FAQ categories to use |
||||
| 124 | * |
||||
| 125 | * @return string HTML to display to get input from user |
||||
| 126 | */ |
||||
| 127 | function b_xoopsfaq_recent_edit(array $options) |
||||
| 128 | {
|
||||
| 129 | $moduleDirName = \basename(\dirname(__DIR__)); |
||||
|
0 ignored issues
–
show
|
|||||
| 130 | xoops_load('XoopsFormSelect');
|
||||
| 131 | |||||
| 132 | /** @var CategoryHandler $categoryHandler */ |
||||
| 133 | /** @var Helper $helper */ |
||||
| 134 | $helper = Helper::getInstance(); |
||||
| 135 | $categoryHandler = $helper->getHandler('Category');
|
||||
| 136 | |||||
| 137 | $catList = $categoryHandler->getList(); |
||||
| 138 | $optionArray = array_merge([0 => _MB_XOOPSFAQ_ALL_CATS], $catList); |
||||
| 139 | $formSelect = new \XoopsFormSelect('category', 'options[3]', null, 3, true);
|
||||
| 140 | $formSelect->addOptionArray($optionArray); |
||||
| 141 | $selOptions = (false === mb_strpos($options[3], ',')) ? $options[3] : explode(',', $options[3]);
|
||||
| 142 | $formSelect->setValue($selOptions); |
||||
| 143 | $selectCat = $formSelect->render(); |
||||
| 144 | |||||
| 145 | $ychck = (isset($options[2]) && ($options[2] > 0)) ? ' checked' : ''; |
||||
| 146 | $nchck = !empty($ychck) ? '' : ' checked'; |
||||
| 147 | |||||
| 148 | $form = '<div class="line140">' |
||||
| 149 | . _MB_XOOPSFAQ_NUM_FAQS |
||||
| 150 | . ' ' |
||||
| 151 | . '<input type="number" name="options[0]" value="' |
||||
| 152 | . $options[0] |
||||
| 153 | . '" style="width: 5em;" min="0" class="right"><br>' |
||||
| 154 | . _MB_XOOPSFAQ_CHARS |
||||
| 155 | . ' <input type="number" name="options[1]" value="' |
||||
| 156 | . $options[1] |
||||
| 157 | . '" style="width: 5em;" min="0" class="right"> ' |
||||
| 158 | . _MB_XOOPSFAQ_LENGTH |
||||
| 159 | . '<br>' |
||||
| 160 | . _MB_XOOPSFAQ_SHOW_DATE |
||||
| 161 | . ' ' |
||||
| 162 | . '<label for="r0">' |
||||
| 163 | . _NO |
||||
| 164 | . '</label>' |
||||
| 165 | . '<input type="radio" name="options[2]" id="r0" value="0"' |
||||
| 166 | . $nchck |
||||
| 167 | . '> ' |
||||
| 168 | . '<label for="r1">' |
||||
| 169 | . _YES |
||||
| 170 | . '</label>' |
||||
| 171 | . '<input type="radio" name="options[2]" id="r1" value="1"' |
||||
| 172 | . $ychck |
||||
| 173 | . '>' |
||||
| 174 | . '<br><br>' |
||||
| 175 | . _MB_XOOPSFAQ_ALL_CATS_INTRO |
||||
| 176 | . ' ' |
||||
| 177 | . $selectCat |
||||
| 178 | . '</div>'; |
||||
| 179 | |||||
| 180 | return $form; |
||||
| 181 | } |
||||
| 182 |