XoopsModules25x /
xoopsfaq
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php declare(strict_types=1); |
||
| 2 | |||
| 3 | namespace XoopsModules\Xoopsfaq; |
||
| 4 | |||
| 5 | /* |
||
| 6 | You may not change or alter any portion of this comment or credits of |
||
| 7 | supporting developers from this source code or any supporting source code |
||
| 8 | which is considered copyrighted (c) material of the original comment or credit |
||
| 9 | authors. |
||
| 10 | |||
| 11 | This program is distributed in the hope that it will be useful, but |
||
| 12 | WITHOUT ANY WARRANTY; without even the implied warranty of |
||
| 13 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||
| 14 | */ |
||
| 15 | |||
| 16 | /** |
||
| 17 | * Contents (FAQ) and Handler Class Definitions |
||
| 18 | * |
||
| 19 | * @author John Neill |
||
| 20 | * @author XOOPS Module Development Team |
||
| 21 | * @copyright Copyright (c) 2001-2017 {@link https://xoops.org XOOPS Project}
|
||
| 22 | * @license https://www.gnu.org/licenses/gpl-2.0.html GNU Public License |
||
| 23 | * @since :: 1.23 |
||
| 24 | */ |
||
| 25 | |||
| 26 | use Xmf\Module\Admin; |
||
| 27 | |||
| 28 | /** |
||
| 29 | * Contents handles CRUD operations for FAQs |
||
| 30 | * |
||
| 31 | * @author :: John Neill |
||
| 32 | * @copyright:: Copyright (c) 2009 |
||
| 33 | */ |
||
| 34 | final class Contents extends \XoopsObject |
||
| 35 | {
|
||
| 36 | private $contents_id; |
||
| 37 | private $contents_cid; |
||
| 38 | private $contents_title; |
||
| 39 | private $contents_contents; |
||
| 40 | private $contents_publish; |
||
| 41 | private $contents_weight; |
||
| 42 | private $contents_active; |
||
| 43 | private $dohtml; |
||
| 44 | private $doxcode; |
||
| 45 | private $dosmiley; |
||
| 46 | private $doimage; |
||
| 47 | private $dobr; |
||
| 48 | |||
| 49 | /** |
||
| 50 | * @var string contains this modules directory name |
||
| 51 | */ |
||
| 52 | protected $dirname; |
||
| 53 | |||
| 54 | /** |
||
| 55 | * Constructor |
||
| 56 | */ |
||
| 57 | public function __construct() |
||
| 58 | {
|
||
| 59 | $this->dirname = \basename(\dirname(__DIR__)); |
||
| 60 | \xoops_load('constants', $this->dirname);
|
||
| 61 | |||
| 62 | parent::__construct(); |
||
| 63 | $this->initVar('contents_id', \XOBJ_DTYPE_INT, null, false);
|
||
| 64 | $this->initVar('contents_cid', \XOBJ_DTYPE_INT, Constants::DEFAULT_CATEGORY, false);
|
||
| 65 | $this->initVar('contents_title', \XOBJ_DTYPE_TXTBOX, null, true, 255);
|
||
| 66 | $this->initVar('contents_contents', \XOBJ_DTYPE_TXTAREA, null, false);
|
||
| 67 | $this->initVar('contents_publish', \XOBJ_DTYPE_INT, \time(), false);
|
||
| 68 | $this->initVar('contents_weight', \XOBJ_DTYPE_INT, Constants::DEFAULT_WEIGHT, false);
|
||
| 69 | $this->initVar('contents_active', \XOBJ_DTYPE_INT, Constants::ACTIVE, false);
|
||
| 70 | $this->initVar('dohtml', \XOBJ_DTYPE_INT, Constants::SET, false);
|
||
| 71 | $this->initVar('doxcode', \XOBJ_DTYPE_INT, Constants::SET, false);
|
||
| 72 | $this->initVar('dosmiley', \XOBJ_DTYPE_INT, Constants::SET, false);
|
||
| 73 | $this->initVar('doimage', \XOBJ_DTYPE_INT, Constants::SET, false);
|
||
| 74 | $this->initVar('dobr', \XOBJ_DTYPE_INT, Constants::SET, false);
|
||
| 75 | } |
||
| 76 | |||
| 77 | /** |
||
| 78 | * Display Content (FAQ) |
||
| 79 | * |
||
| 80 | * @return string |
||
| 81 | */ |
||
| 82 | public function __toString(): string |
||
| 83 | {
|
||
| 84 | return (string)$this->getVar('contents_title', 's');
|
||
| 85 | } |
||
| 86 | |||
| 87 | /** |
||
| 88 | * Display the Content (FAQ) Editor form for Admin |
||
| 89 | */ |
||
| 90 | public function displayForm(): void |
||
| 91 | {
|
||
| 92 | echo $this->renderForm(); |
||
| 93 | } |
||
| 94 | |||
| 95 | /** |
||
| 96 | * Displays the Content (FAQ) Editor form for Admin |
||
| 97 | */ |
||
| 98 | public function renderForm() |
||
| 99 | {
|
||
| 100 | /** @var CategoryHandler $categoryHandler */ |
||
| 101 | /** @var Helper $helper */ |
||
| 102 | $helper = Helper::getHelper($this->dirname); |
||
| 103 | $categoryHandler = $helper->getHandler('Category');
|
||
| 104 | $catCount = $categoryHandler->getCount(); |
||
| 105 | if (empty($catCount)) {
|
||
| 106 | \xoops_error(\_AM_XOOPSFAQ_ERROR_NO_CATS_EXIST, ''); |
||
| 107 | \xoops_cp_footer(); |
||
| 108 | exit(); |
||
|
0 ignored issues
–
show
|
|||
| 109 | } |
||
| 110 | |||
| 111 | require_once $GLOBALS['xoops']->path('/class/xoopsformloader.php');
|
||
| 112 | |||
| 113 | $caption = ($this->isNew()) ? \_AM_XOOPSFAQ_CREATE_NEW : \sprintf(\_AM_XOOPSFAQ_MODIFY_ITEM, $this->getVar('contents_title'));
|
||
| 114 | $form = new \XoopsThemeForm($caption, 'content', $_SERVER['REQUEST_URI'], 'post', true); |
||
| 115 | // $form->addElement(new \XoopsFormHiddenToken()); |
||
| 116 | $form->addElement(new \XoopsFormHidden('op', 'save'));
|
||
| 117 | $form->addElement(new \XoopsFormHidden('contents_id', $this->getVar('contents_id', 'e')));
|
||
| 118 | |||
| 119 | // Active |
||
| 120 | $contents_active = new \XoopsFormRadioYN(\_AM_XOOPSFAQ_E_CONTENTS_ACTIVE, 'contents_active', $this->getVar('contents_active', 'e'), ' ' . \_YES, ' ' . \_NO);
|
||
| 121 | $contents_active->setDescription(\_AM_XOOPSFAQ_E_CONTENTS_ACTIVE_DESC); |
||
| 122 | $form->addElement($contents_active, false); |
||
| 123 | |||
| 124 | // Title |
||
| 125 | $contents_title = new \XoopsFormText(\_AM_XOOPSFAQ_E_CONTENTS_TITLE, 'contents_title', 50, 150, $this->getVar('contents_title', 'e'));
|
||
| 126 | $contents_title->setDescription(\_AM_XOOPSFAQ_E_CONTENTS_TITLE_DESC); |
||
| 127 | $form->addElement($contents_title, true); |
||
| 128 | |||
| 129 | // Category |
||
| 130 | $catCriteria = new \CriteriaCompo(); |
||
| 131 | $catCriteria->order = 'ASC'; |
||
| 132 | $catCriteria->setSort('category_order');
|
||
| 133 | $objects = $categoryHandler->getList($catCriteria); |
||
| 134 | $contents_cid = new \XoopsFormSelect(\_AM_XOOPSFAQ_E_CONTENTS_CATEGORY, 'contents_cid', $this->getVar('contents_cid', 'e'), 1, false);
|
||
| 135 | $contents_cid->setDescription(\_AM_XOOPSFAQ_E_CONTENTS_CATEGORY_DESC); |
||
| 136 | $contents_cid->addOptionArray($objects); |
||
| 137 | $form->addElement($contents_cid); |
||
| 138 | |||
| 139 | // Weight |
||
| 140 | $contents_weight = new \XoopsFormText(\_AM_XOOPSFAQ_E_CONTENTS_WEIGHT, 'contents_weight', 5, 5, $this->getVar('contents_weight', 'e'));
|
||
| 141 | $contents_weight->setDescription(\_AM_XOOPSFAQ_E_CONTENTS_WEIGHT_DESC); |
||
| 142 | $form->addElement($contents_weight, false); |
||
| 143 | |||
| 144 | // Editor |
||
| 145 | $editorConfigs = []; |
||
| 146 | $options_tray = new \XoopsFormElementTray(\_AM_XOOPSFAQ_E_CONTENTS_CONTENT, '<br>'); |
||
| 147 | if (\class_exists('XoopsFormEditor')) {
|
||
| 148 | // $editorConfigs = array('editor' => $GLOBALS['xoopsConfig']['general_editor'],
|
||
| 149 | $editorConfigs = [ |
||
| 150 | 'editor' => $helper->getConfig('use_wysiwyg', 'dhtmltextarea'),
|
||
| 151 | 'rows' => 25, |
||
| 152 | 'cols' => '100%', |
||
| 153 | 'width' => '100%', |
||
| 154 | 'height' => '600px', |
||
| 155 | 'name' => 'contents_contents', |
||
| 156 | 'value' => $this->getVar('contents_contents', 'e'),
|
||
| 157 | ]; |
||
| 158 | $contents_contents = new \XoopsFormEditor('', 'contents_contents', $editorConfigs);
|
||
| 159 | } else {
|
||
| 160 | $contents_contents = new \XoopsFormDhtmlTextArea('', 'contents_contents', $this->getVar('contents_contents', 'e'), '100%', '100%');
|
||
| 161 | } |
||
| 162 | $options_tray->addElement($contents_contents); |
||
| 163 | $options_tray->setDescription(\_AM_XOOPSFAQ_E_CONTENTS_CONTENT_DESC); |
||
| 164 | |||
| 165 | \xoops_load('XoopsEditorHandler');
|
||
| 166 | $editorHandler = \XoopsEditorHandler::getInstance(); |
||
| 167 | $editorList = $editorHandler->getList(true); |
||
| 168 | if (isset($editorConfigs['editor']) && \in_array($editorConfigs['editor'], \array_flip($editorList), true)) {
|
||
| 169 | $form->addElement(new \XoopsFormHidden('dohtml', Constants::NOTSET));
|
||
| 170 | $form->addElement(new \XoopsFormHidden('dobr', Constants::SET));
|
||
| 171 | } else {
|
||
| 172 | $html_checkbox = new \XoopsFormCheckBox('', 'dohtml', $this->getVar('dohtml', 'e'));
|
||
| 173 | $html_checkbox->addOption(1, \_AM_XOOPSFAQ_E_DOHTML); |
||
| 174 | $options_tray->addElement($html_checkbox); |
||
| 175 | |||
| 176 | $breaks_checkbox = new \XoopsFormCheckBox('', 'dobr', $this->getVar('dobr', 'e'));
|
||
| 177 | $breaks_checkbox->addOption(1, \_AM_XOOPSFAQ_E_BREAKS); |
||
| 178 | $options_tray->addElement($breaks_checkbox); |
||
| 179 | } |
||
| 180 | |||
| 181 | $doimage_checkbox = new \XoopsFormCheckBox('', 'doimage', $this->getVar('doimage', 'e'));
|
||
| 182 | $doimage_checkbox->addOption(1, \_AM_XOOPSFAQ_E_DOIMAGE); |
||
| 183 | $options_tray->addElement($doimage_checkbox); |
||
| 184 | |||
| 185 | $xcodes_checkbox = new \XoopsFormCheckBox('', 'doxcode', $this->getVar('doxcode', 'e'));
|
||
| 186 | $xcodes_checkbox->addOption(1, \_AM_XOOPSFAQ_E_DOXCODE); |
||
| 187 | $options_tray->addElement($xcodes_checkbox); |
||
| 188 | |||
| 189 | $smiley_checkbox = new \XoopsFormCheckBox('', 'dosmiley', $this->getVar('dosmiley', 'e'));
|
||
| 190 | $smiley_checkbox->addOption(1, \_AM_XOOPSFAQ_E_DOSMILEY); |
||
| 191 | $options_tray->addElement($smiley_checkbox); |
||
| 192 | |||
| 193 | $form->addElement($options_tray); |
||
| 194 | |||
| 195 | $contents_publish = new \XoopsFormTextDateSelect(\_AM_XOOPSFAQ_E_CONTENTS_PUBLISH, 'contents_publish', 20, (int)$this->getVar('contents_publish'), $this->isNew());
|
||
| 196 | $contents_publish->setDescription(\_AM_XOOPSFAQ_E_CONTENTS_PUBLISH_DESC); |
||
| 197 | $form->addElement($contents_publish); |
||
| 198 | |||
| 199 | $form->addElement(new \XoopsFormButtonTray('contents_form', \_SUBMIT, 'submit'));
|
||
| 200 | |||
| 201 | return $form->render(); |
||
| 202 | } |
||
| 203 | |||
| 204 | /** |
||
| 205 | * Get the FAQ Active/Inactive icon to display |
||
| 206 | * |
||
| 207 | * @return string HTML <img> tag representing current active status |
||
| 208 | */ |
||
| 209 | public function getActiveIcon(): string |
||
| 210 | {
|
||
| 211 | if ($this->getVar('contents_active') > Constants::INACTIVE) {
|
||
| 212 | $icon = '<img src="' . Admin::iconUrl('green.gif', '16') . '" alt="' . \_YES . '">';
|
||
| 213 | } else {
|
||
| 214 | $icon = '<img src="' . Admin::iconUrl('red.gif', '16') . '" alt="' . \_NO . '">';
|
||
| 215 | } |
||
| 216 | |||
| 217 | return $icon; |
||
| 218 | } |
||
| 219 | |||
| 220 | /** |
||
| 221 | * Get the timestamp for when Content (FAQ) was published |
||
| 222 | * |
||
| 223 | * @param int|string $timestamp Unix timestamp |
||
| 224 | * |
||
| 225 | * @return string formatted timestamp on success, false on failure |
||
| 226 | */ |
||
| 227 | public function getPublished($timestamp = ''): string |
||
| 228 | {
|
||
| 229 | if (!$this->getVar('contents_publish')) {
|
||
| 230 | return ''; |
||
| 231 | } |
||
| 232 | |||
| 233 | return \formatTimestamp($this->getVar('contents_publish'), $timestamp);
|
||
| 234 | } |
||
| 235 | } |
||
| 236 |
In general, usage of exit should be done with care and only when running in a scripting context like a CLI script.