This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * @package fwolflib |
||
4 | * @subpackage class |
||
5 | * @copyright Copyright © 2010, Fwolf |
||
6 | * @author Fwolf <[email protected]> |
||
7 | * @since 2010-11-23 |
||
8 | */ |
||
9 | |||
10 | |||
11 | require_once(dirname(__FILE__) . '/fwolflib.php'); |
||
12 | require_once(FWOLFLIB . 'func/uuid.php'); |
||
13 | |||
14 | |||
15 | /** |
||
16 | * SMS treat and send. |
||
17 | * |
||
18 | * Using gammu daemon to send sms. |
||
19 | * |
||
20 | * @deprecated Use Fwlib\Net\Sms\SmsSender |
||
21 | * @package fwolflib |
||
22 | * @subpackage class |
||
23 | * @copyright Copyright © 2010, Fwolf |
||
24 | * @author Fwolf <[email protected]> |
||
25 | * @since 2010-11-23 |
||
26 | */ |
||
27 | class Sms extends Fwolflib { |
||
28 | |||
29 | /** |
||
30 | * Db object to connect sms stat db |
||
31 | * @var object |
||
32 | */ |
||
33 | protected $oDb = null; |
||
34 | |||
35 | |||
36 | /** |
||
37 | * construct |
||
38 | * |
||
39 | * @param object $o_db |
||
40 | */ |
||
41 | public function __construct ($o_db = null) { |
||
42 | parent::__construct(); |
||
43 | |||
44 | if (!is_null($o_db)) |
||
45 | $this->oDb = &$o_db; |
||
46 | } // end of class __construct |
||
47 | |||
48 | |||
49 | /** |
||
50 | * Count sms will split to N part to send |
||
51 | * |
||
52 | * If only ascii chars include, 140 chars for 1 sms part, |
||
53 | * if has chinese chars, 70 chars for 1 sms part only. |
||
54 | * |
||
55 | * 1 chinese char will count as 1 char. |
||
56 | * |
||
57 | * @param string $s_sms |
||
58 | * @return integer |
||
59 | */ |
||
60 | public function CountPart ($s_sms = '') { |
||
61 | // Is there chinese in sms ? |
||
62 | View Code Duplication | if (mb_strlen($s_sms, 'utf-8') == strlen($s_sms)) { |
|
63 | // No chinese, 140 chars per part |
||
64 | return (ceil(strlen($s_sms) / 140)); |
||
65 | } |
||
66 | else { |
||
67 | // Convert chinese char to ascii, for count |
||
68 | return (ceil(mb_strlen($s_sms, 'utf-8') / 70)); |
||
69 | } |
||
70 | } // end of func CountPart |
||
71 | |||
72 | |||
73 | /** |
||
74 | * Parse dest/phone number string. |
||
75 | * |
||
76 | * Do: |
||
77 | * Split phone number. |
||
78 | * Format phone number. |
||
79 | * Remove duplicate number. |
||
80 | * |
||
81 | * @param mixed $s_dest |
||
82 | * @return array |
||
83 | */ |
||
84 | public function DestParse ($s_dest) { |
||
85 | // If array given, still need convert to string |
||
86 | // to format and validate phone number. |
||
87 | if (is_array($s_dest)) |
||
88 | $s_dest = implode(',', $s_dest); |
||
89 | |||
90 | // Replace all special chars to ',' |
||
91 | $s_dest = str_replace(',', ',', $s_dest); |
||
92 | $s_dest = preg_replace('/[ ,;\r\n\t]{1,}/' |
||
93 | , ',', $s_dest); |
||
94 | $ar_dest = explode(',', $s_dest); |
||
95 | |||
96 | // Remove +86, 0086 |
||
97 | foreach ($ar_dest as &$dest) { |
||
98 | if ('+86' == substr($dest, 0, 3)) |
||
99 | $dest = substr($dest, 3); |
||
100 | elseif ('0086' == substr($dest, 0, 4)) |
||
101 | $dest = substr($dest, 4); |
||
102 | } |
||
103 | |||
104 | // Remove duplicate |
||
105 | $ar = array(); |
||
106 | foreach ($ar_dest as &$dest) { |
||
107 | // Invalid length |
||
108 | if (11 != strlen($dest) && '10' != substr($dest, 0, 2)) |
||
109 | continue; |
||
110 | |||
111 | if (false == in_array($dest, $ar)) |
||
0 ignored issues
–
show
|
|||
112 | $ar[] = $dest; |
||
113 | } |
||
114 | |||
115 | return $ar; |
||
116 | } // end of func DestParse |
||
117 | |||
118 | |||
119 | /** |
||
120 | * Write sent sms stat information. |
||
121 | * |
||
122 | * @param array $ar_dest |
||
123 | * @param string $s_sms |
||
124 | * @param integer $i_cat |
||
125 | */ |
||
126 | protected function DestStatSet ($ar_dest, $s_sms, $i_cat) { |
||
127 | if (is_null($this->oDb)) { |
||
128 | $this->Log('No db connection.', 5); |
||
129 | return; |
||
130 | } |
||
131 | |||
132 | // Gen data array |
||
133 | $ar_data = array(); |
||
134 | $ar_data['uuid'] = Uuid(); |
||
135 | $ar_data['st'] = date('Y-m-d H:i:s'); |
||
136 | $ar_data['cat'] = $i_cat; |
||
137 | $ar_data['cnt'] = count($ar_dest); |
||
138 | $ar_data['cnt_cm'] = 0; |
||
139 | $ar_data['cnt_cu'] = 0; |
||
140 | $ar_data['cnt_ct'] = 0; |
||
141 | $ar_data['dest'] = implode(',', $ar_dest); |
||
142 | $ar_data['cnt_part']= $this->CountPart($s_sms); |
||
143 | $ar_data['sms'] = $s_sms; |
||
144 | |||
145 | // Which company's number ? |
||
146 | $ar_cm = array(134, 135, 136, 137, 138, 139, 147 |
||
147 | , 150, 151, 152, 157, 158, 159, 187, 188); |
||
148 | $ar_cu = array(130, 131, 132, 155, 156, 185, 186); |
||
149 | $ar_ct = array(133, 153, 180, 189); |
||
150 | View Code Duplication | foreach ($ar_dest as $dest) { |
|
151 | $i = intval(substr($dest, 0, 3)); |
||
152 | if (in_array($i, $ar_cm)) |
||
153 | $ar_data['cnt_cm'] ++; |
||
154 | elseif (in_array($i, $ar_cu)) |
||
155 | $ar_data['cnt_cu'] ++; |
||
156 | elseif (in_array($i, $ar_ct)) |
||
157 | $ar_data['cnt_ct'] ++; |
||
158 | } |
||
159 | |||
160 | // Save to db |
||
161 | $this->oDb->Write('sms_stat', $ar_data, 'I'); |
||
162 | } // end of func DestStatSet |
||
163 | |||
164 | |||
165 | /** |
||
166 | * Detect and set path of gammu smsd inject cmd |
||
167 | * |
||
168 | * @param $s_path Manual additional path |
||
169 | * @return string |
||
170 | */ |
||
171 | public function GetPathGammuSmsdInject ($s_path = '') { |
||
172 | $ar_path = $this->aCfg['path_bin']; |
||
173 | |||
174 | if (!empty($s_path)) { |
||
175 | // Add to array |
||
176 | array_unshift($ar_path, $s_path); |
||
177 | } |
||
178 | |||
179 | // Find a usable path |
||
180 | $b_found = false; |
||
181 | View Code Duplication | while (!$b_found && !empty($ar_path)) { |
|
182 | $s_cmd = $ar_path[0] . 'gammu-smsd-inject'; |
||
183 | if (is_executable($s_cmd)) { |
||
184 | $b_found = true; |
||
185 | break; |
||
186 | } |
||
187 | array_shift($ar_path); |
||
188 | } |
||
189 | if ($b_found) { |
||
190 | $this->Log('Got gammu smsd inject execute file: ' |
||
191 | . $s_cmd, 1); |
||
192 | $this->aCfg['path_gammu_smsd_inject'] = $s_cmd; |
||
193 | } |
||
194 | else { |
||
195 | $this->Log('Can\' find gammu smsd inject execute file.', 5); |
||
196 | exit(); |
||
197 | } |
||
198 | |||
199 | return $this->aCfg['path_gammu_smsd_inject']; |
||
200 | } // end of func GetPathGammuSmsdInject |
||
201 | |||
202 | |||
203 | /** |
||
204 | * Init config vars, give default value. |
||
205 | * |
||
206 | * @return this |
||
207 | */ |
||
208 | public function Init () { |
||
209 | parent::Init(); |
||
210 | |||
211 | // Possible bin path |
||
212 | $this->aCfg['path_bin'] = array( |
||
213 | '/usr/bin/', |
||
214 | '/usr/local/bin/', |
||
215 | '/bin/', |
||
216 | ); |
||
217 | |||
218 | // Path of gammu-smsd-inject |
||
219 | $this->aCfg['path_gammu_smsd_inject'] = ''; |
||
220 | |||
221 | // Cmd template of gammu-smsd-inject cmd |
||
222 | $this->aCfg['cmd_gammu_smsd_inject'] |
||
223 | = '[cmd] TEXT [dest] -autolen 600 -report -validity MAX -unicode -textutf8 "[sms]"'; |
||
224 | |||
225 | return $this; |
||
226 | } // end of func Init |
||
227 | |||
228 | |||
229 | /** |
||
230 | * Send sms using gammu smsd inject method. |
||
231 | * |
||
232 | * Notice: On webserver, need assign www-data to gammu group, |
||
233 | * and make /var/log/gammu-smsd.log g+w . |
||
234 | * Modem server need not, only conn to db is required. |
||
235 | * |
||
236 | * @param mixed $ar_dest Dest phone number array |
||
237 | * or string split by ' ,;,\r\n'. |
||
238 | * @param string $s_sms Msg to send. |
||
239 | * @param integer $i_cat Category of sms, for stat. |
||
240 | * @return integer Actual valid phone number sent. |
||
241 | */ |
||
242 | public function SendUsingGammuSmsdInject ($ar_dest, $s_sms, $i_cat = 0) { |
||
243 | if (empty($this->aCfg['path_gammu_smsd_inject'])) |
||
244 | $this->GetPathGammuSmsdInject(); |
||
245 | |||
246 | $ar_dest = $this->DestParse($ar_dest); |
||
247 | if (1 > count($ar_dest)) { |
||
248 | $this->Log('No valid number to sent.', 4); |
||
249 | return 0; |
||
250 | } |
||
251 | $this->DestStatSet($ar_dest, $s_sms, $i_cat); |
||
252 | |||
253 | // Prepare sms to sent |
||
254 | $s_sms = str_replace(array('[cmd]', '[sms]') |
||
255 | , array($this->aCfg['path_gammu_smsd_inject'], $s_sms) |
||
256 | , $this->aCfg['cmd_gammu_smsd_inject']); |
||
257 | $i = strpos($s_sms, '[dest]'); |
||
258 | if (1 > $i) { |
||
259 | $this->Log('Something wrong with gammu smsd inject cmd template' |
||
260 | , 5); |
||
261 | exit(); |
||
262 | } |
||
263 | $s_sms1 = substr($s_sms, 0, $i); |
||
264 | $s_sms2 = substr($s_sms, $i + 6); // 6 is length of '[dest]' |
||
265 | |||
266 | // Loop to sent |
||
267 | foreach ($ar_dest as $dest) { |
||
268 | $s_cmd = $s_sms1 . $dest . $s_sms2; |
||
269 | //exec($s_cmd); |
||
270 | $ar_output = array(); |
||
271 | $i_return = 0; |
||
272 | exec($s_cmd, $ar_output, $i_return); |
||
273 | if (0 != $i_return) { |
||
274 | // Error occur |
||
275 | $this->Log('Gammu inject error: ' . $ar_output[1], 5); |
||
276 | return 0; |
||
277 | } |
||
278 | } |
||
279 | |||
280 | return count($ar_dest); |
||
281 | } // end of func SendUsingGammuSmsdInject |
||
282 | |||
283 | |||
284 | } // end of class Sms |
||
285 | |||
286 | |||
287 | /* |
||
288 | -- |
||
289 | -- stat table |
||
290 | -- |
||
291 | CREATE TABLE sms_stat ( |
||
292 | uuid CHAR(36) NOT NULL, |
||
293 | -- Sent time |
||
294 | st DATETIME NOT NULL, |
||
295 | -- Cat of msg |
||
296 | cat INTEGER NOT NULL DEFAULT 0, |
||
297 | -- Total dest number count |
||
298 | cnt INTEGER NOT NULL DEFAULT 0, |
||
299 | -- Count of China Mobile |
||
300 | cnt_cm INTEGER NOT NULL DEFAULT 0, |
||
301 | -- Count of China Unicom |
||
302 | cnt_cu INTEGER NOT NULL DEFAULT 0, |
||
303 | -- Count of China Telecom |
||
304 | cnt_ct INTEGER NOT NULL DEFAULT 0, |
||
305 | -- Dest phone numbers |
||
306 | dest TEXT NOT NULL, |
||
307 | -- Will sms split to N part to send |
||
308 | cnt_part INTEGER NOT NULL DEFAULT 0, |
||
309 | -- Msg |
||
310 | sms TEXT NOT NULL, |
||
311 | ts TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, |
||
312 | PRIMARY KEY (uuid), |
||
313 | INDEX idx_sms_stat_1 (st) |
||
314 | ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci; |
||
315 | */ |
||
316 | ?> |
||
317 |
When comparing two booleans, it is generally considered safer to use the strict comparison operator.