Passed
Branch master (50b35e)
by Martijn van
03:00
created
code/AdminLogin.php 3 patches
Doc Comments   +4 added lines patch added patch discarded remove patch
@@ -69,6 +69,9 @@  discard block
 block discarded – undo
69 69
 		return strstr(self::getBackUrl(), '/admin/');
70 70
 	}
71 71
 	
72
+	/**
73
+	 * @return string
74
+	 */
72 75
 	public static function getBackUrl() {
73 76
 		if(isset($_REQUEST['BackURL'])) {
74 77
 			return $_REQUEST['BackURL'];
@@ -84,6 +87,7 @@  discard block
 block discarded – undo
84 87
 	/**
85 88
 	 * @see Security::getPasswordResetLink()
86 89
 	 * We overload this, so we can add the BackURL to the password resetlink
90
+	 * @param DataObject $member
87 91
 	 */
88 92
 	public static function getPasswordResetLink($member, $autologinToken) {
89 93
 		$autologinToken = urldecode($autologinToken);		
Please login to merge, or discard this patch.
Spacing   +10 added lines, -10 removed lines patch added patch discarded remove patch
@@ -8,8 +8,8 @@  discard block
 block discarded – undo
8 8
 	
9 9
 	// redirect to AdminSecurity, when we are coming from /admin/*
10 10
 	function onBeforeSecurityLogin() {
11
-		if(isset($_GET['BackURL']) && strstr($_GET['BackURL'], '/admin/')) {
12
-			if(Controller::curr()->class != 'AdminSecurity') {
11
+		if (isset($_GET['BackURL']) && strstr($_GET['BackURL'], '/admin/')) {
12
+			if (Controller::curr()->class != 'AdminSecurity') {
13 13
 				$link = 'AdminSecurity/login' . '?BackURL=' . urlencode($_GET['BackURL']);
14 14
 				return $this->owner->redirect($link);
15 15
 			}
@@ -41,24 +41,24 @@  discard block
 block discarded – undo
41 41
 	public function init() {
42 42
 		parent::init();
43 43
 		
44
-		if(Config::inst()->get('IpAccess', 'enabled')) {
44
+		if (Config::inst()->get('IpAccess', 'enabled')) {
45 45
 			$ipAccess = new IpAccess($this->owner->getRequest()->getIP(), Config::inst()->get('IpAccess', 'allowed_ips'));
46
-			if(!$ipAccess->hasAccess()) {
46
+			if (!$ipAccess->hasAccess()) {
47 47
 				$reponse = '';
48
-				if(class_exists('ErrorPage', true)) {
48
+				if (class_exists('ErrorPage', true)) {
49 49
 					$response = ErrorPage::response_for(404);
50 50
 				}
51 51
 				return $this->owner->httpError(404, $response ? $response : 'The requested page could not be found.');
52 52
 			}
53 53
 		}
54 54
 		
55
-		if(Config::inst()->get('AdminLogin', 'UseTheme') !== true) {
55
+		if (Config::inst()->get('AdminLogin', 'UseTheme') !== true) {
56 56
 			// this prevents loading frontend css and javscript files
57
-			Object::useCustomClass('Page_Controller','AdminLoginPage_Controller');
57
+			Object::useCustomClass('Page_Controller', 'AdminLoginPage_Controller');
58 58
 			Requirements::css('adminlogin/css/style.css');
59 59
 		}
60 60
 
61
-		Object::useCustomClass('MemberLoginForm','AdminLoginForm');
61
+		Object::useCustomClass('MemberLoginForm', 'AdminLoginForm');
62 62
 	}
63 63
 	
64 64
 	public function Link($action = null) {
@@ -70,9 +70,9 @@  discard block
 block discarded – undo
70 70
 	}
71 71
 	
72 72
 	public static function getBackUrl() {
73
-		if(isset($_REQUEST['BackURL'])) {
73
+		if (isset($_REQUEST['BackURL'])) {
74 74
 			return $_REQUEST['BackURL'];
75
-		}elseif(isset($_SESSION['BackURL'])) {
75
+		}elseif (isset($_SESSION['BackURL'])) {
76 76
 			return $_SESSION['BackURL'];
77 77
 		}
78 78
 	}
Please login to merge, or discard this patch.
Braces   +1 added lines, -1 removed lines patch added patch discarded remove patch
@@ -72,7 +72,7 @@
 block discarded – undo
72 72
 	public static function getBackUrl() {
73 73
 		if(isset($_REQUEST['BackURL'])) {
74 74
 			return $_REQUEST['BackURL'];
75
-		}elseif(isset($_SESSION['BackURL'])) {
75
+		} elseif(isset($_SESSION['BackURL'])) {
76 76
 			return $_SESSION['BackURL'];
77 77
 		}
78 78
 	}
Please login to merge, or discard this patch.
code/model/IpAccess.php 2 patches
Spacing   +25 added lines, -25 removed lines patch added patch discarded remove patch
@@ -13,35 +13,35 @@  discard block
 block discarded – undo
13 13
  */
14 14
 class IpAccess {
15 15
 	
16
-	public $allowedIps	= array();
16
+	public $allowedIps = array();
17 17
 	
18
-	private $ip			= '';
18
+	private $ip = '';
19 19
 	
20 20
 	public function __construct($ip = '', $allowedIps = array()) {
21
-		$this->ip			= $ip;
22
-		$this->allowedIps	= $allowedIps;
21
+		$this->ip = $ip;
22
+		$this->allowedIps = $allowedIps;
23 23
 	}
24 24
 	
25 25
 	public function setIp($ip) {
26
-		$this->ip			= $ip;
26
+		$this->ip = $ip;
27 27
 	}
28 28
 	
29 29
 	public function hasAccess() {
30
-		if(!$this->allowedIps) {
30
+		if (!$this->allowedIps) {
31 31
 			return 'allowed';
32
-		}elseif($match = $this->matchExact()){
32
+		}elseif ($match = $this->matchExact()) {
33 33
 			return $match;
34
-		}elseif($match = $this->matchRange()){
34
+		}elseif ($match = $this->matchRange()) {
35 35
 			return $match;
36
-		}elseif($match = $this->matchCIDR()){
36
+		}elseif ($match = $this->matchCIDR()) {
37 37
 			return $match;
38
-		}elseif($match = $this->matchWildCard()){
38
+		}elseif ($match = $this->matchWildCard()) {
39 39
 			return $match;
40 40
 		}
41 41
 	}
42 42
 	
43 43
 	public function matchExact() {
44
-		if(in_array($this->ip, $this->allowedIps)) {
44
+		if (in_array($this->ip, $this->allowedIps)) {
45 45
 			return $this->ip;
46 46
 		}
47 47
 	}
@@ -51,13 +51,13 @@  discard block
 block discarded – undo
51 51
 	 * Example : 192.168.1.50-100
52 52
 	 */
53 53
 	public function matchRange() {
54
-		if($ranges = array_filter($this->allowedIps, function($ip) { return strstr($ip, '-'); })) {
55
-			foreach($ranges as $range) {
56
-				$first = substr($range, 0, strrpos($range ,'.') + 1);
57
-				$last = substr(strrchr($range,'.'), 1);
58
-				list ($start, $end) = explode('-',$last);
59
-				for($i = $start; $i <= $end; $i++) {
60
-					if($this->ip === $first . $i) {
54
+		if ($ranges = array_filter($this->allowedIps, function($ip) { return strstr($ip, '-'); })) {
55
+			foreach ($ranges as $range) {
56
+				$first = substr($range, 0, strrpos($range, '.') + 1);
57
+				$last = substr(strrchr($range, '.'), 1);
58
+				list ($start, $end) = explode('-', $last);
59
+				for ($i = $start; $i <= $end; $i++) {
60
+					if ($this->ip === $first . $i) {
61 61
 						return $range;
62 62
 					}
63 63
 				}
@@ -70,10 +70,10 @@  discard block
 block discarded – undo
70 70
 	 * Example : 192.168.1.0/24
71 71
 	 */
72 72
 	public function matchCIDR() {
73
-		if($ranges = array_filter($this->allowedIps, function($ip) { return strstr($ip, '/'); })) {
74
-			foreach($ranges as $cidr) {
75
-				list ($net, $mask) = explode ('/', $cidr);
76
-				if(( ip2long ($this->ip) & ~((1 << (32 - $mask)) - 1) ) == ip2long ($net)) {
73
+		if ($ranges = array_filter($this->allowedIps, function($ip) { return strstr($ip, '/'); })) {
74
+			foreach ($ranges as $cidr) {
75
+				list ($net, $mask) = explode('/', $cidr);
76
+				if ((ip2long($this->ip) & ~((1 << (32 - $mask)) - 1)) == ip2long($net)) {
77 77
 					return $cidr;
78 78
 				}
79 79
 			}
@@ -86,9 +86,9 @@  discard block
 block discarded – undo
86 86
 	 * Example : 192.168.*
87 87
 	 */
88 88
 	public function matchWildCard() {
89
-		if($ranges = array_filter($this->allowedIps, function($ip) { return substr($ip, -1) === '*'; })) {
90
-			foreach($ranges as $range) {
91
-				if(substr($this->ip, 0, strlen(substr($range, 0, -1))) === substr($range, 0, -1)) {
89
+		if ($ranges = array_filter($this->allowedIps, function($ip) { return substr($ip, -1) === '*'; })) {
90
+			foreach ($ranges as $range) {
91
+				if (substr($this->ip, 0, strlen(substr($range, 0, -1))) === substr($range, 0, -1)) {
92 92
 					return $range;
93 93
 				}
94 94
 			}
Please login to merge, or discard this patch.
Braces   +4 added lines, -4 removed lines patch added patch discarded remove patch
@@ -29,13 +29,13 @@
 block discarded – undo
29 29
 	public function hasAccess() {
30 30
 		if(!$this->allowedIps) {
31 31
 			return 'allowed';
32
-		}elseif($match = $this->matchExact()){
32
+		} elseif($match = $this->matchExact()){
33 33
 			return $match;
34
-		}elseif($match = $this->matchRange()){
34
+		} elseif($match = $this->matchRange()){
35 35
 			return $match;
36
-		}elseif($match = $this->matchCIDR()){
36
+		} elseif($match = $this->matchCIDR()){
37 37
 			return $match;
38
-		}elseif($match = $this->matchWildCard()){
38
+		} elseif($match = $this->matchWildCard()){
39 39
 			return $match;
40 40
 		}
41 41
 	}
Please login to merge, or discard this patch.
code/AdminLoginForm.php 1 patch
Spacing   +4 added lines, -4 removed lines patch added patch discarded remove patch
@@ -8,7 +8,7 @@  discard block
 block discarded – undo
8 8
 		parent::__construct($controller, $name, $fields, $actions, $checkCurrentUser);
9 9
 		
10 10
 		
11
-		if($field = $this->Actions()->fieldByName('forgotPassword')) {
11
+		if ($field = $this->Actions()->fieldByName('forgotPassword')) {
12 12
 			// replaceField won't work, since it's a dataless field
13 13
 			$this->Actions()->removeByName('forgotPassword');
14 14
 			$this->Actions()->push(new LiteralField(
@@ -36,11 +36,11 @@  discard block
 block discarded – undo
36 36
 		$member = DataObject::get_one('Member', "\"Email\" = '{$SQL_email}'");
37 37
 		
38 38
 		$backUrlString = '';
39
-		if(isset($data['BackURL']) && $backURL = $data['BackURL']) {
39
+		if (isset($data['BackURL']) && $backURL = $data['BackURL']) {
40 40
 			$backUrlString = '?BackURL=' . $backURL;
41 41
 		}
42 42
 		
43
-		if($member) {
43
+		if ($member) {
44 44
 			$token = $member->generateAutologinTokenAndStoreHash();
45 45
 
46 46
 			$e = Member_ForgotPasswordEmail::create();
@@ -52,7 +52,7 @@  discard block
 block discarded – undo
52 52
 			$e->send();
53 53
 
54 54
 			$this->controller->redirect('AdminSecurity/passwordsent/' . urlencode($data['Email']));
55
-		} elseif($data['Email']) {
55
+		} elseif ($data['Email']) {
56 56
 			// Avoid information disclosure by displaying the same status,
57 57
 			// regardless wether the email address actually exists
58 58
 			$this->controller->redirect('AdminSecurity/passwordsent/' . urlencode($data['Email']));
Please login to merge, or discard this patch.
code/LimitAdminAccessExtension.php 1 patch
Spacing   +3 added lines, -3 removed lines patch added patch discarded remove patch
@@ -3,11 +3,11 @@
 block discarded – undo
3 3
 class LimitAdminAccessExtension extends Extension {
4 4
 	
5 5
 	function onBeforeInit() {
6
-		if(Config::inst()->get('IpAccess', 'enabled')) {
6
+		if (Config::inst()->get('IpAccess', 'enabled')) {
7 7
 			$ipAccess = new IpAccess($this->owner->getRequest()->getIP(), Config::inst()->get('IpAccess', 'allowed_ips'));
8 8
 				
9
-			if(!$ipAccess->hasAccess()) {
10
-				if(class_exists('ErrorPage', true)) {
9
+			if (!$ipAccess->hasAccess()) {
10
+				if (class_exists('ErrorPage', true)) {
11 11
 					$response = ErrorPage::response_for(403);
12 12
 				}
13 13
 
Please login to merge, or discard this patch.