This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php |
||
2 | |||
3 | namespace XoopsModules\Xsitemap; |
||
4 | |||
5 | /* |
||
6 | Utility Class Definition |
||
7 | |||
8 | You may not change or alter any portion of this comment or credits of |
||
9 | supporting developers from this source code or any supporting source code |
||
10 | which is considered copyrighted (c) material of the original comment or credit |
||
11 | authors. |
||
12 | |||
13 | This program is distributed in the hope that it will be useful, but |
||
14 | WITHOUT ANY WARRANTY; without even the implied warranty of |
||
15 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||
16 | */ |
||
17 | |||
18 | /** |
||
19 | * Module: xSitemap |
||
20 | * |
||
21 | * @package \module\Xsitemap\class |
||
22 | * @license http://www.fsf.org/copyleft/gpl.html GNU public license |
||
23 | * @copyright https://xoops.org 2001-2017 © XOOPS Project |
||
24 | * @author ZySpec <[email protected]> |
||
25 | * @author Mamba <[email protected]> |
||
26 | * @since File available since version 1.54 |
||
27 | */ |
||
28 | |||
29 | use XoopsModules\Xsitemap\{ |
||
30 | Common |
||
31 | }; |
||
32 | /** @var Helper $helper */ |
||
33 | /** @var PluginHandler $pluginHandler */ |
||
34 | |||
35 | |||
36 | $helper = Helper::getInstance(); |
||
37 | $moduleDirName = \basename(\dirname(__DIR__)); |
||
38 | \xoops_loadLanguage('admin', $moduleDirName); |
||
39 | //if (!class_exists('DummyObject')) { |
||
40 | // xoops_load('dummy', $moduleDirName); |
||
41 | //} |
||
42 | |||
43 | /** |
||
44 | * Class Utility |
||
45 | */ |
||
46 | class Utility extends Common\SysUtility |
||
47 | { |
||
48 | //--------------- Custom module methods ----------------------------- |
||
49 | /** |
||
50 | * Show Site map |
||
51 | * |
||
52 | * @return array |
||
53 | */ |
||
54 | public static function generateSitemap() |
||
55 | { |
||
56 | $block = []; |
||
57 | $moduleDirName = \basename(\dirname(__DIR__)); |
||
0 ignored issues
–
show
Unused Code
introduced
by
![]() |
|||
58 | /** @internal can't use Helper since function called during install |
||
59 | * $helper = \Xmf\Module\Helper::getHelper($moduleDirName); |
||
60 | * $pluginHandler = $helper->getHandler('Plugin', $moduleDirName); |
||
61 | */ |
||
62 | // xoops_load('plugin', $moduleDirName); |
||
63 | \xoops_load('XoopsModuleConfig'); |
||
64 | // Get list of modules admin wants to hide from xsitemap |
||
65 | $invisibleDirnames = empty($GLOBALS['xoopsModuleConfig']['invisible_dirnames']) ? ['xsitemap'] : \explode(',', $GLOBALS['xoopsModuleConfig']['invisible_dirnames'] . ',xsitemap'); |
||
66 | $invisibleDirnames = \array_map('\trim', $invisibleDirnames); |
||
67 | $invisibleDirnames = \array_map('\mb_strtolower', $invisibleDirnames); |
||
68 | // Get the mid for any of these modules if they're active and hasmain (visible frontside) |
||
69 | /** @var \XoopsModuleHandler $moduleHandler */ |
||
70 | $moduleHandler = \xoops_getHandler('module'); |
||
71 | $invisibleMidArray = []; |
||
72 | foreach ($invisibleDirnames as $hiddenDir) { |
||
73 | $criteria = new \CriteriaCompo(new \Criteria('hasmain', 1)); |
||
74 | $criteria->add(new \Criteria('isactive', 1)); |
||
75 | $criteria->add(new \Criteria('name', $hiddenDir)); |
||
76 | $modObj = $moduleHandler->getByDirname($hiddenDir); |
||
77 | if (false !== $modObj && $modObj instanceof \XoopsModule) { |
||
78 | $invisibleMidArray[] = $modObj->mid(); |
||
79 | } |
||
80 | } |
||
81 | // Where user has permissions |
||
82 | /** @var \XoopsGroupPermHandler $grouppermHandler */ |
||
83 | $grouppermHandler = \xoops_getHandler('groupperm'); |
||
84 | $groups = ($GLOBALS['xoopsUser'] instanceof \XoopsUser) ? $GLOBALS['xoopsUser']->getGroups() : XOOPS_GROUP_ANONYMOUS; |
||
85 | $readAllowed = $grouppermHandler->getItemIds('module_read', $groups); |
||
86 | $filteredMids = \array_diff($readAllowed, $invisibleMidArray); |
||
87 | $pluginHandler = Helper::getInstance()->getHandler('Plugin'); |
||
88 | $criteria = new \CriteriaCompo(new \Criteria('hasmain', 1)); |
||
89 | $criteria->add(new \Criteria('isactive', 1)); |
||
90 | if (\count($filteredMids) > 0) { |
||
91 | $criteria->add(new \Criteria('mid', '(' . \implode(',', $filteredMids) . ')', 'IN')); |
||
92 | } |
||
93 | $modules = $moduleHandler->getObjects($criteria, true); |
||
94 | $criteria = new \CriteriaCompo(); |
||
95 | $criteria->setSort('plugin_id'); |
||
96 | $criteria->order = 'ASC'; |
||
97 | $pluginObjArray = $pluginHandler->getAll($criteria); |
||
98 | /** @var array $sublinks */ |
||
99 | foreach ($modules as $mid => $modObj) { |
||
100 | $sublinks = $modObj->subLink(); |
||
101 | $modDirName = $modObj->getVar('dirname', 'n'); |
||
102 | $block['modules'][$mid] = [ |
||
103 | 'id' => $mid, |
||
104 | 'name' => $modObj->getVar('name'), |
||
105 | 'directory' => $modDirName, |
||
106 | 'sublinks' => [], |
||
107 | // init the sublinks array |
||
108 | ]; |
||
109 | // Now 'patch' the sublink to include module path |
||
110 | if (\count($sublinks) > 0) { |
||
111 | foreach ($sublinks as $sublink) { |
||
112 | $block['modules'][$mid]['sublinks'][] = [ |
||
113 | 'name' => $sublink['name'], |
||
114 | 'url' => $GLOBALS['xoops']->url("www/modules/{$modDirName}/{$sublink['url']}"), |
||
115 | ]; |
||
116 | } |
||
117 | } |
||
118 | foreach ($pluginObjArray as $pObj) { |
||
119 | if ((0 == $pObj->getVar('topic_pid')) && \in_array($pObj->getVar('plugin_mod_table'), (array)$modObj->getInfo('tables'))) { |
||
120 | $objVars = $pObj->getValues(); |
||
121 | if (1 == $objVars['plugin_online']) { |
||
122 | $tmpMap = self::getSitemap($objVars['plugin_mod_table'], $objVars['plugin_cat_id'], $objVars['plugin_cat_pid'], $objVars['plugin_cat_name'], $objVars['plugin_call'], $objVars['plugin_weight'], $objVars['plugin_where']); |
||
123 | $block['modules'][$mid]['parent'] = $tmpMap['parent'] ?? null; |
||
124 | } |
||
125 | } |
||
126 | } |
||
127 | } |
||
128 | return $block; |
||
129 | } |
||
130 | |||
131 | /** |
||
132 | * Get the Sitemap |
||
133 | * |
||
134 | * @param $table |
||
135 | * @param $id_name |
||
136 | * @param $pid_name |
||
137 | * @param $title_name |
||
138 | * @param $url |
||
139 | * @param string $order |
||
140 | * @param string $where |
||
141 | * @return array sitemap links |
||
142 | */ |
||
143 | public static function getSitemap($table, $id_name, $pid_name, $title_name, $url, $order = '', $where = '') |
||
144 | { |
||
145 | require_once XOOPS_ROOT_PATH . '/class/tree.php'; |
||
146 | $helper = Helper::getInstance(); |
||
147 | /** @var \XoopsMySQLDatabase $xoopsDb */ |
||
148 | $xoopsDb = \XoopsDatabaseFactory::getDatabaseConnection(); |
||
149 | $sql = "SELECT `{$id_name}`, `{$pid_name}`, `{$title_name}` FROM " . $xoopsDb->prefix . "_{$table}"; |
||
150 | $result = $xoopsDb->query($sql); |
||
151 | $objsArray = []; |
||
152 | if ($result) { |
||
153 | while (false !== ($row = $xoopsDb->fetchArray($result))) { |
||
154 | $objsArray[] = new DummyObject($row, $id_name, $pid_name, $title_name); |
||
155 | } |
||
156 | } |
||
157 | //$sql = "SELECT `{$id_name}`, `{$title_name}` FROM " . $xoopsDb->prefix . "_{$table} WHERE `{$pid_name}`= 0"; |
||
158 | // v1.54 added in the event categories are flat (don't support hierarchy) |
||
159 | $sql = "SELECT `{$id_name}`, `{$title_name}` FROM " . $xoopsDb->prefix . "_{$table}"; |
||
160 | $sqlWhere = ''; |
||
161 | if ($pid_name !== $id_name) { |
||
162 | $sqlWhere = "`{$pid_name}`= 0"; |
||
163 | } |
||
164 | if ('' !== $where) { |
||
165 | if ('' !== $sqlWhere) { |
||
166 | $sqlWhere .= ' AND '; |
||
167 | } |
||
168 | $sqlWhere .= $where; |
||
169 | } |
||
170 | if ('' !== $sqlWhere) { |
||
171 | $sql .= " WHERE ($sqlWhere)"; |
||
172 | } |
||
173 | if ('' != $order) { |
||
174 | $sql .= " ORDER BY `{$order}`"; |
||
175 | } |
||
176 | $result = $xoopsDb->query($sql); |
||
177 | $i = 0; |
||
178 | $xsitemap = []; |
||
179 | if ($result) { |
||
180 | while (list($catid, $name) = $xoopsDb->fetchRow($result)) { |
||
181 | $xsitemap['parent'][$i] = [ |
||
182 | 'id' => $catid, |
||
183 | 'title' => \htmlspecialchars($name, \ENT_QUOTES | \ENT_HTML5), |
||
184 | 'url' => $url . $catid, |
||
185 | ]; |
||
186 | if (($pid_name !== $id_name) && $helper->getConfig('show_subcategories')) { |
||
187 | $j = 0; |
||
188 | $mytree = new \XoopsObjectTree($objsArray, $id_name, $pid_name); |
||
189 | $child_array = $mytree->getAllChild($catid); |
||
190 | /** @var \XoopsObject $child */ |
||
191 | foreach ($child_array as $child) { |
||
192 | $xsitemap['parent'][$i]['child'][$j] = [ |
||
193 | 'id' => $child->getVar($id_name), |
||
194 | 'title' => $child->getVar($title_name), |
||
195 | 'url' => $url . $child->getVar($id_name), |
||
196 | ]; |
||
197 | ++$j; |
||
198 | } |
||
199 | } |
||
200 | ++$i; |
||
201 | } |
||
202 | } |
||
203 | |||
204 | return $xsitemap; |
||
205 | } |
||
206 | |||
207 | /** |
||
208 | * Save the XML Sitemap |
||
209 | * |
||
210 | * @param array $xsitemap_show |
||
211 | * @return mixed int number of bytes saved | false on failure |
||
212 | */ |
||
213 | public static function saveSitemap(array $xsitemap_show) |
||
214 | { |
||
215 | $xml = new \DOMDocument('1.0', 'UTF-8'); |
||
216 | $xml->preserveWhiteSpace = false; |
||
217 | $xml->formatOutput = true; |
||
218 | $xml_set = $xml->createElement('urlset'); |
||
219 | $xml_set->setAttribute('xmlns', 'http://www.sitemaps.org/schemas/sitemap/0.9'); |
||
220 | if (!empty($xsitemap_show)) { |
||
221 | foreach ($xsitemap_show['modules'] as $mod) { |
||
222 | if ($mod['directory']) { |
||
223 | $xml_url = $xml->createElement('url'); |
||
224 | $xml_url->appendChild($xml->createComment(\htmlspecialchars((\ucwords($mod['name'])) . ' '))); |
||
225 | $loc = $xml->createElement('loc', \htmlspecialchars(($GLOBALS['xoops']->url("www/modules/{$mod['directory']}/index.php")))); |
||
226 | $xml_url->appendChild($loc); |
||
227 | $xml_set->appendChild($xml_url); |
||
228 | } |
||
229 | if ($mod['parent'] ?? null) { |
||
230 | foreach ($mod['parent'] as $parent) { |
||
231 | $xml_parent = $xml->createElement('url'); |
||
232 | $loc = $xml->createElement('loc', \htmlspecialchars($GLOBALS['xoops']->url("www/modules/{$mod['directory']}/{$parent['url']}"))); |
||
233 | $xml_parent->appendChild($loc); |
||
234 | $xml_set->appendChild($xml_parent); |
||
235 | } |
||
236 | $z = 0; |
||
237 | //if ($mod["parent"][$z]["child"]) { |
||
238 | if ($mod['parent'][$z]['child'] ?? null) { |
||
239 | foreach ($mod['parent'][$z]['child'] as $child) { |
||
240 | $xml_child = $xml->createElement('url'); |
||
241 | $loc = $xml->createElement('loc', \htmlspecialchars($GLOBALS['xoops']->url("www/modules/{$mod['directory']}/{$child['url']}"))); |
||
242 | $xml_child->appendChild($loc); |
||
243 | $xml_set->appendChild($xml_child); |
||
244 | } |
||
245 | ++$z; |
||
246 | } |
||
247 | } |
||
248 | } |
||
249 | } |
||
250 | $xml->appendChild($xml_set); |
||
251 | return $xml->save($GLOBALS['xoops']->path('www/xsitemap.xml')); |
||
252 | } |
||
253 | } |
||
254 |