This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php |
||
2 | /** |
||
3 | * Layout class. |
||
4 | * |
||
5 | * @package App |
||
6 | * |
||
7 | * @copyright YetiForce S.A. |
||
8 | * @license YetiForce Public License 6.5 (licenses/LicenseEN.txt or yetiforce.com) |
||
9 | * @author Mariusz Krzaczkowski <[email protected]> |
||
10 | * @author Radosław Skrzypczak <[email protected]> |
||
11 | */ |
||
12 | |||
13 | namespace App; |
||
14 | |||
15 | /** |
||
16 | * Layout class. |
||
17 | */ |
||
18 | class Layout |
||
19 | { |
||
20 | /** |
||
21 | * Get active layout name. |
||
22 | 2 | * |
|
23 | * @return string |
||
24 | 2 | */ |
|
25 | 2 | public static function getActiveLayout() |
|
26 | { |
||
27 | 1 | if (Session::has('layout')) { |
|
28 | return Session::get('layout'); |
||
0 ignored issues
–
show
Bug
Best Practice
introduced
by
![]() |
|||
29 | } |
||
30 | return \App\Config::main('defaultLayout'); |
||
31 | } |
||
32 | |||
33 | /** |
||
34 | * Get file from layout. |
||
35 | * |
||
36 | * @param string $name |
||
37 | 1 | * |
|
38 | * @return string |
||
39 | 1 | */ |
|
40 | 1 | public static function getLayoutFile($name) |
|
41 | 1 | { |
|
42 | 1 | $basePath = 'layouts' . '/' . \App\Config::main('defaultLayout') . '/'; |
|
43 | 1 | $filePath = \Vtiger_Loader::resolveNameToPath('~' . $basePath . $name); |
|
44 | if (is_file($filePath)) { |
||
45 | if (!IS_PUBLIC_DIR) { |
||
46 | 1 | $basePath = 'public_html/' . $basePath; |
|
47 | } |
||
48 | 1 | return $basePath . $name; |
|
49 | 1 | } |
|
50 | 1 | $basePath = 'layouts' . '/' . \Vtiger_Viewer::getDefaultLayoutName() . '/'; |
|
51 | if (!IS_PUBLIC_DIR) { |
||
52 | 1 | $basePath = 'public_html/' . $basePath; |
|
53 | } |
||
54 | return $basePath . $name; |
||
55 | } |
||
56 | |||
57 | /** |
||
58 | * Gets layout paths. |
||
59 | * |
||
60 | 2 | * @return array |
|
61 | */ |
||
62 | 2 | public static function getLayoutPaths(): array |
|
63 | { |
||
64 | 2 | $basePrefix = 'layouts/' . self::getActiveLayout() . \DIRECTORY_SEPARATOR; |
|
65 | $defaultPrefix = 'layouts/' . \Vtiger_Viewer::getDefaultLayoutName() . \DIRECTORY_SEPARATOR; |
||
66 | 2 | if (\App\Config::performance('LOAD_CUSTOM_FILES')) { |
|
67 | 1 | $layoutsPath['custom/'] = 'custom/'; |
|
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||
68 | $layoutsPath["custom/{$basePrefix}"] = "custom/{$basePrefix}"; |
||
69 | 2 | $layoutsPath["custom/{$defaultPrefix}"] = "custom/{$defaultPrefix}"; |
|
70 | } |
||
71 | $layoutsPath[''] = ''; |
||
72 | $layoutsPath[$basePrefix] = $basePrefix; |
||
73 | $layoutsPath[$defaultPrefix] = $defaultPrefix; |
||
74 | return $layoutsPath; |
||
75 | } |
||
76 | |||
77 | /** |
||
78 | * Get all layouts list. |
||
79 | * |
||
80 | 2 | * @return string[] |
|
81 | */ |
||
82 | 2 | public static function getAllLayouts() |
|
83 | 2 | { |
|
84 | 1 | $all = (new \App\Db\Query())->select(['name', 'label'])->from('vtiger_layout')->all(); |
|
85 | $folders = [ |
||
86 | 2 | 'basic' => Language::translate('LBL_DEFAULT'), |
|
87 | 2 | ]; |
|
88 | foreach ($all as $row) { |
||
89 | 2 | $folders[$row['name']] = Language::translate($row['label']); |
|
90 | } |
||
91 | return $folders; |
||
92 | } |
||
93 | |||
94 | /** |
||
95 | * Get public url from file. |
||
96 | * |
||
97 | * @param string $name |
||
98 | * @param bool $full |
||
99 | 1 | * |
|
100 | * @return string |
||
101 | 1 | */ |
|
102 | public static function getPublicUrl($name, $full = false) |
||
103 | { |
||
104 | $basePath = ''; |
||
105 | if ($full) { |
||
106 | $basePath .= \App\Config::main('site_URL'); |
||
107 | } |
||
108 | if (!IS_PUBLIC_DIR) { |
||
109 | $basePath .= 'public_html/'; |
||
110 | } |
||
111 | return $basePath . $name; |
||
112 | 1 | } |
|
113 | |||
114 | 1 | /** |
|
115 | * The function get path to the image. |
||
116 | * |
||
117 | * @param string $imageName |
||
118 | * |
||
119 | * @return array |
||
120 | */ |
||
121 | public static function getImagePath($imageName) |
||
122 | { |
||
123 | return \Vtiger_Theme::getImagePath($imageName); |
||
0 ignored issues
–
show
|
|||
124 | 1 | } |
|
125 | |||
126 | 1 | /** |
|
127 | * Function takes a template path. |
||
128 | * |
||
129 | * @param string $templateName |
||
130 | * @param string $moduleName |
||
131 | * |
||
132 | * @return string |
||
133 | */ |
||
134 | public static function getTemplatePath(string $templateName, string $moduleName = ''): string |
||
135 | { |
||
136 | return \Vtiger_Viewer::getInstance()->getTemplatePath($templateName, $moduleName); |
||
137 | } |
||
138 | |||
139 | /** |
||
140 | * Check if template exists. |
||
141 | * |
||
142 | * @param string $templateName |
||
143 | * @param string $moduleName |
||
144 | * |
||
145 | * @return bool |
||
146 | */ |
||
147 | public static function checkTemplatePath(string $templateName, string $moduleName = ''): bool |
||
148 | { |
||
149 | self::getTemplatePath($templateName, $moduleName); |
||
150 | return file_exists(\Vtiger_Viewer::$completeTemplatePath); |
||
151 | } |
||
152 | |||
153 | /** |
||
154 | * Get unique id for HTML ids. |
||
155 | * |
||
156 | * @param string $name |
||
157 | * |
||
158 | * @return string |
||
159 | */ |
||
160 | public static function getUniqueId($name = '') |
||
161 | { |
||
162 | return str_replace([' ', '"', "'"], '', $name) . random_int(100, 99999); |
||
163 | } |
||
164 | |||
165 | /** |
||
166 | * Truncating plain text and adding a button showing all the text. |
||
167 | * |
||
168 | * @param string $text |
||
169 | * @param int $length |
||
170 | * @param bool $showIcon |
||
171 | * @param bool $nl2br |
||
172 | * |
||
173 | * @return string |
||
174 | */ |
||
175 | public static function truncateText(string $text, int $length, bool $showIcon = false, bool $nl2br = false): string |
||
176 | { |
||
177 | if (\mb_strlen($text) < $length) { |
||
178 | return $nl2br ? nl2br($text) : $text; |
||
179 | } |
||
180 | $teaser = Purifier::encodeHtml(TextUtils::textTruncate($text, $length)); |
||
181 | $text = Purifier::encodeHtml($text); |
||
182 | if ($showIcon) { |
||
183 | $btn = '<span class="mdi mdi-overscan"></span>'; |
||
184 | } else { |
||
185 | $btn = Language::translate('LBL_MORE_BTN'); |
||
186 | } |
||
187 | return "<div class=\"js-more-content c-text-divider\"><pre class=\"teaserContent u-pre\">$teaser</pre><span class=\"fullContent d-none\"><pre class=\"u-pre\">$text</pre></span><span class=\"text-right\"><button type=\"button\" class=\"btn btn-link btn-sm p-0 js-more\">{$btn}</button></span></div>"; |
||
188 | } |
||
189 | |||
190 | /** |
||
191 | * Truncating HTML and adding a button showing all the text. |
||
192 | * |
||
193 | * @param string $html |
||
194 | * @param string $size |
||
195 | * @param int $length |
||
196 | * @param mixed $showBtn |
||
197 | * |
||
198 | * @return string |
||
199 | */ |
||
200 | public static function truncateHtml(?string $html, ?string $size = 'medium', ?int $length = 200, $showBtn = false): string |
||
201 | { |
||
202 | if (empty($html)) { |
||
203 | return ''; |
||
204 | } |
||
205 | $teaser = $css = $btn = ''; |
||
206 | $loadData = $iframe = true; |
||
207 | $btnTemplate = function (string $popoverText = '', ?string $btnClass = '', string $data = 'data-iframe="true"'): string { |
||
208 | $popoverText = \App\Language::translate($popoverText); |
||
209 | return "<a href=\"#\" class=\"js-more noLinkBtn font-weight-lighter js-popover-tooltip ml-2 {$btnClass}\" {$data} data-content=\"{$popoverText}\"><span class=\"mdi mdi-overscan\"></span></a>"; |
||
210 | }; |
||
211 | $iframeClass = 'modal-iframe js-modal-iframe'; |
||
212 | switch ($size) { |
||
213 | case 'full': |
||
214 | $iframeClass = 'js-iframe-full-height'; |
||
215 | break; |
||
216 | case 'medium': |
||
217 | $btn = $btnTemplate('LBL_FULLSCREEN', 'c-btn-floating-right-bottom btn btn-primary'); |
||
218 | break; |
||
219 | case 'mini': |
||
220 | $btn = $btnTemplate('LBL_SHOW_ORIGINAL_CONTENT'); |
||
221 | $css = 'display: none;'; |
||
222 | $teaser = TextUtils::textTruncate(trim(strip_tags($html)), $length); |
||
223 | $loadData = false; |
||
224 | break; |
||
225 | case 'miniHtml': |
||
226 | $btn = $btnTemplate('LBL_SHOW_ORIGINAL_CONTENT', '', 'data-modal-size="modal-md"'); |
||
227 | $css = 'display: none;'; |
||
228 | $teaserBefore = str_replace('<br>', '', $html); |
||
229 | $teaser = TextUtils::htmlTruncateByWords(str_replace('<br>', '', $teaserBefore), $length); |
||
230 | if (false === $showBtn && $teaserBefore == $teaser) { |
||
231 | $html = $btn = ''; |
||
232 | } |
||
233 | $iframe = false; |
||
234 | break; |
||
235 | default: |
||
236 | break; |
||
237 | } |
||
238 | if ($iframe) { |
||
239 | $html = Purifier::encodeHtml($html); |
||
240 | $content = "<div class=\"js-iframe-content\">{$teaser}<iframe sandbox=\"allow-same-origin allow-popups allow-popups-to-escape-sandbox\" class=\"w-100 {$iframeClass}\" frameborder=\"0\" style=\"{$css}\" " . ($loadData ? 'srcdoc' : 'srcdoctemp') . "=\"{$html}\"></iframe>"; |
||
241 | } else { |
||
242 | $content = "<div class=\"js-more-content\">{$teaser}<div class=\"w-100 {$iframeClass} fullContent\" style=\"{$css}\">{$html}</div>"; |
||
243 | } |
||
244 | return $content . $btn . '</div>'; |
||
245 | } |
||
246 | } |
||
247 |