GitHub Access Token became invalid

It seems like the GitHub access token used for retrieving details about this repository from GitHub became invalid. This might prevent certain types of inspections from being run (in particular, everything related to pull requests).
Please ask an admin of your repository to re-new the access token on this website.

Issues (423)

Security Analysis    not enabled

This project does not seem to handle request data directly as such no vulnerable execution paths were found.

  Cross-Site Scripting
Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.
  File Exposure
File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.
  File Manipulation
File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.
  Object Injection
Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.
  Code Injection
Code Injection enables an attacker to execute arbitrary code on the server.
  Response Splitting
Response Splitting can be used to send arbitrary responses.
  File Inclusion
File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.
  Command Injection
Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.
  SQL Injection
SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.
  XPath Injection
XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.
  LDAP Injection
LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.
  Header Injection
  Other Vulnerability
This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.
  Regex Injection
Regex Injection enables an attacker to execute arbitrary code in your PHP process.
  XML Injection
XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.
  Variable Injection
Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.
Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

system/helpers/smiley_helper.php (1 issue)

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

1
<?php
0 ignored issues
show
Coding Style Compatibility introduced by
For compatibility and reusability of your code, PSR1 recommends that a file should introduce either new symbols (like classes, functions, etc.) or have side-effects (like outputting something, or including other files), but not both at the same time. The first symbol is defined on line 66 and the first side effect is on line 38.

The PSR-1: Basic Coding Standard recommends that a file should either introduce new symbols, that is classes, functions, constants or similar, or have side effects. Side effects are anything that executes logic, like for example printing output, changing ini settings or writing to a file.

The idea behind this recommendation is that merely auto-loading a class should not change the state of an application. It also promotes a cleaner style of programming and makes your code less prone to errors, because the logic is not spread out all over the place.

To learn more about the PSR-1, please see the PHP-FIG site on the PSR-1.

Loading history...
2
/**
3
 * CodeIgniter
4
 *
5
 * An open source application development framework for PHP
6
 *
7
 * This content is released under the MIT License (MIT)
8
 *
9
 * Copyright (c) 2014 - 2015, British Columbia Institute of Technology
10
 *
11
 * Permission is hereby granted, free of charge, to any person obtaining a copy
12
 * of this software and associated documentation files (the "Software"), to deal
13
 * in the Software without restriction, including without limitation the rights
14
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
15
 * copies of the Software, and to permit persons to whom the Software is
16
 * furnished to do so, subject to the following conditions:
17
 *
18
 * The above copyright notice and this permission notice shall be included in
19
 * all copies or substantial portions of the Software.
20
 *
21
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
22
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
23
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
24
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
25
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
26
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
27
 * THE SOFTWARE.
28
 *
29
 * @package	CodeIgniter
30
 * @author	EllisLab Dev Team
31
 * @copyright	Copyright (c) 2008 - 2014, EllisLab, Inc. (http://ellislab.com/)
32
 * @copyright	Copyright (c) 2014 - 2015, British Columbia Institute of Technology (http://bcit.ca/)
33
 * @license	http://opensource.org/licenses/MIT	MIT License
34
 * @link	http://codeigniter.com
35
 * @since	Version 1.0.0
36
 * @filesource
37
 */
38
defined('BASEPATH') OR exit('No direct script access allowed');
39
40
/**
41
 * CodeIgniter Smiley Helpers
42
 *
43
 * @package		CodeIgniter
44
 * @subpackage	Helpers
45
 * @category	Helpers
46
 * @author		EllisLab Dev Team
47
 * @link		http://codeigniter.com/user_guide/helpers/smiley_helper.html
48
 * @deprecated	3.0.0	This helper is too specific for CI.
49
 */
50
51
// ------------------------------------------------------------------------
52
53
if ( ! function_exists('smiley_js'))
54
{
55
	/**
56
	 * Smiley Javascript
57
	 *
58
	 * Returns the javascript required for the smiley insertion.  Optionally takes
59
	 * an array of aliases to loosely couple the smiley array to the view.
60
	 *
61
	 * @param	mixed	alias name or array of alias->field_id pairs
62
	 * @param	string	field_id if alias name was passed in
63
	 * @param	bool
64
	 * @return	array
65
	 */
66
	function smiley_js($alias = '', $field_id = '', $inline = TRUE)
67
	{
68
		static $do_setup = TRUE;
69
		$r = '';
70
71
		if ($alias !== '' && ! is_array($alias))
72
		{
73
			$alias = array($alias => $field_id);
74
		}
75
76
		if ($do_setup === TRUE)
77
		{
78
			$do_setup = FALSE;
79
			$m = array();
80
81
			if (is_array($alias))
82
			{
83
				foreach ($alias as $name => $id)
84
				{
85
					$m[] = '"'.$name.'" : "'.$id.'"';
86
				}
87
			}
88
89
			$m = '{'.implode(',', $m).'}';
90
91
			$r .= <<<EOF
92
			var smiley_map = {$m};
93
94
			function insert_smiley(smiley, field_id) {
95
				var el = document.getElementById(field_id), newStart;
96
97
				if ( ! el && smiley_map[field_id]) {
98
					el = document.getElementById(smiley_map[field_id]);
99
100
					if ( ! el)
101
						return false;
102
				}
103
104
				el.focus();
105
				smiley = " " + smiley;
106
107
				if ('selectionStart' in el) {
108
					newStart = el.selectionStart + smiley.length;
109
110
					el.value = el.value.substr(0, el.selectionStart) +
111
									smiley +
112
									el.value.substr(el.selectionEnd, el.value.length);
113
					el.setSelectionRange(newStart, newStart);
114
				}
115
				else if (document.selection) {
116
					document.selection.createRange().text = smiley;
117
				}
118
			}
119
EOF;
120
		}
121
		elseif (is_array($alias))
122
		{
123
			foreach ($alias as $name => $id)
124
			{
125
				$r .= 'smiley_map["'.$name.'"] = "'.$id."\";\n";
126
			}
127
		}
128
129
		return ($inline)
130
			? '<script type="text/javascript" charset="utf-8">/*<![CDATA[ */'.$r.'// ]]></script>'
131
			: $r;
132
	}
133
}
134
135
// ------------------------------------------------------------------------
136
137
if ( ! function_exists('get_clickable_smileys'))
138
{
139
	/**
140
	 * Get Clickable Smileys
141
	 *
142
	 * Returns an array of image tag links that can be clicked to be inserted
143
	 * into a form field.
144
	 *
145
	 * @param	string	the URL to the folder containing the smiley images
146
	 * @param	array
147
	 * @return	array
148
	 */
149
	function get_clickable_smileys($image_url, $alias = '')
150
	{
151
		// For backward compatibility with js_insert_smiley
152
		if (is_array($alias))
153
		{
154
			$smileys = $alias;
155
		}
156
		elseif (FALSE === ($smileys = _get_smiley_array()))
157
		{
158
			return FALSE;
159
		}
160
161
		// Add a trailing slash to the file path if needed
162
		$image_url = rtrim($image_url, '/').'/';
163
164
		$used = array();
165
		foreach ($smileys as $key => $val)
166
		{
167
			// Keep duplicates from being used, which can happen if the
168
			// mapping array contains multiple identical replacements. For example:
169
			// :-) and :) might be replaced with the same image so both smileys
170
			// will be in the array.
171
			if (isset($used[$smileys[$key][0]]))
172
			{
173
				continue;
174
			}
175
176
			$link[] = '<a href="javascript:void(0);" onclick="insert_smiley(\''.$key.'\', \''.$alias.'\')"><img src="'.$image_url.$smileys[$key][0].'" alt="'.$smileys[$key][3].'" style="width: '.$smileys[$key][1].'; height: '.$smileys[$key][2].'; border: 0;" /></a>';
177
			$used[$smileys[$key][0]] = TRUE;
178
		}
179
180
		return $link;
181
	}
182
}
183
184
// ------------------------------------------------------------------------
185
186
if ( ! function_exists('parse_smileys'))
187
{
188
	/**
189
	 * Parse Smileys
190
	 *
191
	 * Takes a string as input and swaps any contained smileys for the actual image
192
	 *
193
	 * @param	string	the text to be parsed
194
	 * @param	string	the URL to the folder containing the smiley images
195
	 * @param	array
196
	 * @return	string
197
	 */
198
	function parse_smileys($str = '', $image_url = '', $smileys = NULL)
199
	{
200
		if ($image_url === '' OR ( ! is_array($smileys) && FALSE === ($smileys = _get_smiley_array())))
201
		{
202
			return $str;
203
		}
204
205
		// Add a trailing slash to the file path if needed
206
		$image_url = rtrim($image_url, '/').'/';
207
208
		foreach ($smileys as $key => $val)
209
		{
210
			$str = str_replace($key, '<img src="'.$image_url.$smileys[$key][0].'" alt="'.$smileys[$key][3].'" style="width: '.$smileys[$key][1].'; height: '.$smileys[$key][2].'; border: 0;" />', $str);
211
		}
212
213
		return $str;
214
	}
215
}
216
217
// ------------------------------------------------------------------------
218
219
if ( ! function_exists('_get_smiley_array'))
220
{
221
	/**
222
	 * Get Smiley Array
223
	 *
224
	 * Fetches the config/smiley.php file
225
	 *
226
	 * @return	mixed
227
	 */
228
	function _get_smiley_array()
229
	{
230
		static $_smileys;
231
232 View Code Duplication
		if ( ! is_array($_smileys))
233
		{
234
			if (file_exists(APPPATH.'config/smileys.php'))
235
			{
236
				include(APPPATH.'config/smileys.php');
237
			}
238
239
			if (file_exists(APPPATH.'config/'.ENVIRONMENT.'/smileys.php'))
240
			{
241
				include(APPPATH.'config/'.ENVIRONMENT.'/smileys.php');
242
			}
243
244
			if (empty($smileys) OR ! is_array($smileys))
245
			{
246
				$_smileys = array();
247
				return FALSE;
248
			}
249
250
			$_smileys = $smileys;
251
		}
252
253
		return $_smileys;
254
	}
255
}
256