XoopsModules25x / xoopstube

include/directorychecker.php

<?php

For compatibility and reusability of your code, PSR1 recommends that a file should introduce either new symbols (like classes, functions, etc.) or have side-effects (like outputting something, or including other files), but not both at the same time. The first symbol is defined on line 30 and the first side effect is on line 24.

/*
 You may not change or alter any portion of this comment or credits
 of supporting developers from this source code or any supporting source code
 which is considered copyrighted (c) material of the original comment or credit authors.

 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 */
/**
 * WF-Downloads module
 *
 * @copyright       The XOOPS Project http://sourceforge.net/projects/xoops/
 * @license         GNU GPL 2 or later (http://www.gnu.org/licenses/gpl-2.0.html)
 * @package         wfdownload
 * @since           3.23
 * @author          Xoops Development Team
 * @version         svn:$id$
 */

//defined('XOOPS_ROOT_PATH') || die('XOOPS Root Path not defined');

75% of this comment could be valid code. Did you maybe forget this after debugging?

require_once dirname(dirname(dirname(__DIR__))) . '/include/cp_header.php';

/**
 * Class DirectoryChecker
 * check status of a directory
 */
class DirectoryChecker
{
    /**
     * @param       $path
     * @param int   $mode
     * @param array $languageConstants
     * @param       $redirectFile
     *
     * @return bool|string
     */
    public static function getDirectoryStatus($path, $mode = 0777, $languageConstants = array(), $redirectFile)
    {
        global $pathIcon16;

        $languageConstants1 = array($languageConstants[5], $languageConstants[6]);
        $languageConstants2 = array($languageConstants[7], $languageConstants[8]);

        $myWords1 = urlencode(json_encode($languageConstants1));
        $myWords2 = urlencode(json_encode($languageConstants2));

        if (empty($path)) {
            return false;
        }
        if (!@is_dir($path)) {
            $path_status
                = "<img src='" . $pathIcon16 . "/0.png'   >" . $path . ' ( ' . $languageConstants[1] . ' ) ' . "<a href=" . $_SERVER['PHP_SELF'] . "?op=dashboard&dircheck=createdir&amp;path=$path&amp;redirect=$redirectFile&amp;languageConstants=$myWords1>"
                . $languageConstants[2] . '</a>';
        } elseif (@is_writable($path)) {
            $path_status = "<img src='" . $pathIcon16 . "/1.png'   >" . $path . ' ( ' . $languageConstants[0] . ' ) ';
            $currentMode = (substr(decoct(fileperms($path)), 2));
            if ($currentMode != decoct($mode)) {
                $path_status = "<img src='" . $pathIcon16 . "/0.png'   >" . $path . sprintf(
                        $languageConstants[3],
                        decoct($mode),
                        $currentMode
                    ) . "<a href=" . $_SERVER['PHP_SELF'] . "?op=dashboard&dircheck=setperm&amp;mode=$mode&amp;path=$path&amp;redirect=$redirectFile&amp;languageConstants=$myWords2> "
                    . $languageConstants[4] . '</a>';
            }
        } else {
            $currentMode = (substr(decoct(fileperms($path)), 2));
            $path_status = "<img src='" . $pathIcon16 . "/0.png'   >" . $path . sprintf(
                    $languageConstants[3],
                    decoct($mode),
                    $currentMode
                ) . "<a href=" . $_SERVER['PHP_SELF'] . "?mode&amp;path=$path&amp;redirect=$redirectFile&amp;languageConstants=$myWords2> " . $languageConstants[4] . '</a>';
        }

        return $path_status;
    }

    /**
     * @param     $target
     * @param int $mode
     *
     * @return bool
     */
    public static function createDirectory($target, $mode = 0777)
    {
        $target = str_replace("..", "", $target);
        // http://www.php.net/manual/en/function.mkdir.php
        /*

49% of this comment could be valid code. Did you maybe forget this after debugging?

                $dirs = array();

                while (realpath($target) === false && !empty($target)) {
                    array_unshift($dirs, basename($target));
                    $target = dirname($target);
                };
                $target = realpath($target);
        // this next test should handle bug on BSD with PHP < 5.3.0
                if (!is_dir($target)) {
                    array_unshift($dirs, basename($target));
                    $target = realpath(dirname($target));
                }

        */

        return is_dir($target) or (self::createDirectory(dirname($target), $mode) and mkdir($target, $mode));
    }

    /**
     * @param     $target
     * @param int $mode
     *
     * @return bool
     */
    public static function setDirectoryPermissions($target, $mode = 0777)
    {
        $target = str_replace("..", "", $target);

        return @chmod($target, (int)$mode);
    }
}

$dircheck = (isset($_GET['dircheck'])) ? filter_input(INPUT_GET, 'dircheck', FILTER_SANITIZE_STRING) : "";

switch ($dircheck) {
    case "createdir":
        $languageConstants = array();
        if (isset($_GET['path'])) {
            $path = filter_input(INPUT_GET, 'path', FILTER_SANITIZE_STRING);
        }
        if (isset($_GET['redirect'])) {
            $redirect = filter_input(INPUT_GET, 'redirect', FILTER_SANITIZE_STRING);
        }
        if (isset($_GET['languageConstants'])) {
            $languageConstants = json_decode($_GET['languageConstants']);
        }
        $result = DirectoryChecker::createDirectory($path);
        $msg    = ($result) ? $languageConstants[0] : $languageConstants[1];
        redirect_header($redirect, 2, $msg . ': ' . $path);
        exit();
        break;
    case "setperm":
        $languageConstants = array();
        if (isset($_GET['path'])) {
            $path = filter_input(INPUT_GET, 'path', FILTER_SANITIZE_STRING);
        }
        if (isset($_GET['mode'])) {
            $mode = filter_input(INPUT_GET, 'mode', FILTER_SANITIZE_STRING);
        }
        if (isset($_GET['redirect'])) {
            $redirect = filter_input(INPUT_GET, 'redirect', FILTER_SANITIZE_STRING);
        }
        if (isset($_GET['languageConstants'])) {
            $languageConstants = json_decode($_GET['languageConstants']);
        }
        $result = DirectoryChecker::setDirectoryPermissions($path, $mode);
        $msg    = ($result) ? $languageConstants[0] : $languageConstants[1];
        redirect_header($redirect, 2, $msg . ': ' . $path);
        exit();
        break;
}