ggoffy /
modulebuilder
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php |
||||
| 2 | |||||
| 3 | namespace XoopsModules\Modulebuilder; |
||||
| 4 | |||||
| 5 | /* |
||||
| 6 | Utility Class Definition |
||||
| 7 | |||||
| 8 | You may not change or alter any portion of this comment or credits of |
||||
| 9 | supporting developers from this source code or any supporting source code |
||||
| 10 | which is considered copyrighted (c) material of the original comment or credit |
||||
| 11 | authors. |
||||
| 12 | |||||
| 13 | This program is distributed in the hope that it will be useful, but |
||||
| 14 | WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
| 15 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||||
| 16 | */ |
||||
| 17 | |||||
| 18 | /** |
||||
| 19 | * Module: modulebuilder |
||||
| 20 | * |
||||
| 21 | * @package \module\modulebuilder\class |
||||
| 22 | * @license http://www.fsf.org/copyleft/gpl.html GNU public license |
||||
| 23 | * @copyright https://xoops.org 2001-2017 © XOOPS Project |
||||
| 24 | * @author Goffy https://myxoops.org |
||||
| 25 | * @author Mamba <[email protected]> |
||||
| 26 | * @since |
||||
| 27 | */ |
||||
| 28 | |||||
| 29 | use XoopsModules\Modulebuilder; |
||||
| 30 | |||||
| 31 | /** |
||||
| 32 | * Class Devtools |
||||
| 33 | */ |
||||
| 34 | class Devtools |
||||
| 35 | { |
||||
| 36 | /* function to add function qualifier to module */ |
||||
| 37 | /** |
||||
| 38 | * @param $src_path |
||||
| 39 | * @param $dst_path |
||||
| 40 | * @param $moduleName |
||||
| 41 | */ |
||||
| 42 | public static function function_qualifier($src_path, $dst_path, $moduleName) { |
||||
| 43 | |||||
| 44 | $functions = []; |
||||
| 45 | $constants = []; |
||||
| 46 | |||||
| 47 | //php functions |
||||
| 48 | $functions[] = [ |
||||
| 49 | 'array_diff', |
||||
| 50 | 'array_filter', |
||||
| 51 | 'array_key_exists', |
||||
| 52 | 'array_keys', |
||||
| 53 | 'array_search', |
||||
| 54 | 'array_slice', |
||||
| 55 | 'array_unshift', |
||||
| 56 | 'array_values', |
||||
| 57 | 'array_flip', |
||||
| 58 | 'assert', |
||||
| 59 | 'basename', |
||||
| 60 | 'boolval', |
||||
| 61 | 'call_user_func', |
||||
| 62 | 'call_user_func_array', |
||||
| 63 | 'chr', |
||||
| 64 | 'class_exists', |
||||
| 65 | 'closedir', |
||||
| 66 | 'constant', |
||||
| 67 | 'copy', |
||||
| 68 | 'count', |
||||
| 69 | 'curl_close', |
||||
| 70 | 'curl_error', |
||||
| 71 | 'curl_exec', |
||||
| 72 | 'curl_file_create', |
||||
| 73 | 'curl_getinfo', |
||||
| 74 | 'curl_init', |
||||
| 75 | 'curl_setopt', |
||||
| 76 | 'define', |
||||
| 77 | 'defined', |
||||
| 78 | 'dirname', |
||||
| 79 | 'doubleval', |
||||
| 80 | 'explode', |
||||
| 81 | 'extension_loaded', |
||||
| 82 | 'file_exists', |
||||
| 83 | 'finfo_open', |
||||
| 84 | 'floatval', |
||||
| 85 | 'floor', |
||||
| 86 | 'formatTimestamp', |
||||
| 87 | 'func_get_args', |
||||
| 88 | 'func_num_args', |
||||
| 89 | 'function_exists', |
||||
| 90 | 'get_called_class', |
||||
| 91 | 'get_class', |
||||
| 92 | 'getimagesize', |
||||
| 93 | 'gettype', |
||||
| 94 | 'imagecopyresampled', |
||||
| 95 | 'imagecreatefromgif', |
||||
| 96 | 'imagecreatefromjpeg', |
||||
| 97 | 'imagecreatefrompng', |
||||
| 98 | 'imagecreatefromstring', |
||||
| 99 | 'imagecreatetruecolor', |
||||
| 100 | 'imagedestroy', |
||||
| 101 | 'imagegif', |
||||
| 102 | 'imagejpeg', |
||||
| 103 | 'imagepng', |
||||
| 104 | 'imagerotate', |
||||
| 105 | 'imagesx', |
||||
| 106 | 'imagesy', |
||||
| 107 | 'implode', |
||||
| 108 | 'in_array', |
||||
| 109 | 'ini_get', |
||||
| 110 | 'intval', |
||||
| 111 | 'include', |
||||
| 112 | 'is_array', |
||||
| 113 | 'is_bool', |
||||
| 114 | 'is_callable', |
||||
| 115 | 'is_dir', |
||||
| 116 | 'is_double', |
||||
| 117 | 'is_float', |
||||
| 118 | 'is_int', |
||||
| 119 | 'is_integer', |
||||
| 120 | 'is_link', |
||||
| 121 | 'is_long', |
||||
| 122 | 'is_null', |
||||
| 123 | 'is_object', |
||||
| 124 | 'is_real', |
||||
| 125 | 'is_resource', |
||||
| 126 | 'is_string', |
||||
| 127 | 'json_decode', |
||||
| 128 | 'json_encode', |
||||
| 129 | 'mime_content_type', |
||||
| 130 | 'mkdir', |
||||
| 131 | 'mktime', |
||||
| 132 | 'opendir', |
||||
| 133 | 'ord', |
||||
| 134 | 'pathinfo', |
||||
| 135 | 'preg_match', |
||||
| 136 | 'preg_match_all', |
||||
| 137 | 'preg_replace', |
||||
| 138 | 'readdir', |
||||
| 139 | 'readlink', |
||||
| 140 | 'redirect_header', |
||||
| 141 | 'rename', |
||||
| 142 | 'require', |
||||
| 143 | 'rmdir', |
||||
| 144 | 'round', |
||||
| 145 | 'scandir', |
||||
| 146 | 'sprintf', |
||||
| 147 | 'str_replace', |
||||
| 148 | 'strip_tags', |
||||
| 149 | 'strlen', |
||||
| 150 | 'strpos', |
||||
| 151 | 'strtotime', |
||||
| 152 | 'strval', |
||||
| 153 | 'substr', |
||||
| 154 | 'symlink', |
||||
| 155 | 'time', |
||||
| 156 | 'trigger_error', |
||||
| 157 | 'trim', |
||||
| 158 | 'ucfirst', |
||||
| 159 | 'unlink', |
||||
| 160 | 'version_compare', |
||||
| 161 | 'mb_strtoupper', |
||||
| 162 | 'mb_strtolower', |
||||
| 163 | 'mb_strpos', |
||||
| 164 | 'mb_strlen', |
||||
| 165 | 'mb_strrpos', |
||||
| 166 | ]; |
||||
| 167 | |||||
| 168 | // xoops functions |
||||
| 169 | $functions[] = [ |
||||
| 170 | 'xoops_getHandler', |
||||
| 171 | 'xoops_load', |
||||
| 172 | 'xoops_loadLanguage', |
||||
| 173 | ]; |
||||
| 174 | // xoops const |
||||
| 175 | $constants[] = [ |
||||
| 176 | 'XOBJ_DTYPE_', |
||||
| 177 | 'XOOPS_URL', |
||||
| 178 | 'XOOPS_ROOT_PATH', |
||||
| 179 | 'XOOPS_GROUP_', |
||||
| 180 | ]; |
||||
| 181 | |||||
| 182 | $moduleNameUpper = \mb_strtoupper($moduleName); |
||||
| 183 | // module language defines |
||||
| 184 | $constants[] = [ |
||||
| 185 | '_AM_' . $moduleNameUpper .'_', |
||||
| 186 | '_MI_' . $moduleNameUpper .'_', |
||||
| 187 | '_MB_' . $moduleNameUpper .'_', |
||||
| 188 | '_MA_' . $moduleNameUpper .'_', |
||||
| 189 | ]; |
||||
| 190 | |||||
| 191 | // repair known errors |
||||
| 192 | $errors = [ |
||||
| 193 | 'substr_\count(' => 'substr_count(', |
||||
| 194 | 'micro\time(' => 'microtime(', |
||||
| 195 | 'mk\time(' => 'mktime(', |
||||
| 196 | 'strto\time(' => 'strtotime(', |
||||
| 197 | 'mb_\strlen(' => 'mb_strlen(', |
||||
| 198 | 'mb_\substr(' => 'mb_substr(', |
||||
| 199 | 'x\copy' => 'xcopy', |
||||
| 200 | 'r\rmdir' => 'rrmdir', |
||||
| 201 | 'r\copy' => 'rcopy', |
||||
| 202 | 'r\trim' => 'rtrim', |
||||
| 203 | 'l\trim' => 'ltrim', |
||||
| 204 | '\dirname()' => 'dirname()', |
||||
| 205 | 'assw\ord' => 'assword', |
||||
| 206 | 'mb_\strpos' => 'mb_strpos', |
||||
| 207 | 'image\copy(' => 'imagecopy(', |
||||
| 208 | '<{if \count(' => '<{if count(', |
||||
| 209 | 'define(\_' => 'define(_', |
||||
| 210 | '\strr\chr(' => '\strrchr(', |
||||
| 211 | 'strf\time(' => 'strftime(', |
||||
| 212 | "'\_AM_" . $moduleNameUpper .'_' => "'_AM_" . $moduleNameUpper .'_', |
||||
| 213 | "'\_MI_" . $moduleNameUpper .'_' => "'_MI_" . $moduleNameUpper .'_', |
||||
| 214 | "'\_MB_" . $moduleNameUpper .'_' => "'_MB_" . $moduleNameUpper .'_', |
||||
| 215 | "'\_MA_" . $moduleNameUpper .'_' => "'_MA_" . $moduleNameUpper .'_', |
||||
| 216 | ]; |
||||
| 217 | |||||
| 218 | $patterns = []; |
||||
| 219 | foreach ($functions as $function) { |
||||
| 220 | //reset existing in order to avoid double \\ |
||||
| 221 | foreach ($function as $item) { |
||||
| 222 | $patterns['\\' . $item . '('] = $item . '('; |
||||
| 223 | } |
||||
| 224 | //apply now for all |
||||
| 225 | foreach ($function as $item) { |
||||
| 226 | $patterns[$item . '('] = '\\' . $item . '('; |
||||
| 227 | } |
||||
| 228 | } |
||||
| 229 | foreach ($constants as $constant) { |
||||
| 230 | //reset existing in order to avoid double \\ |
||||
| 231 | foreach ($constant as $item) { |
||||
| 232 | $patterns['\\' . $item ] = $item; |
||||
| 233 | } |
||||
| 234 | //apply now for all |
||||
| 235 | foreach ($constant as $item) { |
||||
| 236 | $patterns[$item] = '\\' . $item; |
||||
| 237 | } |
||||
| 238 | } |
||||
| 239 | |||||
| 240 | //add errors |
||||
| 241 | foreach ($errors as $key => $value) { |
||||
| 242 | $patterns[$key] = $value; |
||||
| 243 | } |
||||
| 244 | |||||
| 245 | $patKeys = \array_keys($patterns); |
||||
| 246 | $patValues = \array_values($patterns); |
||||
| 247 | Devtools::cloneFileFolder($src_path, $dst_path, $patKeys, $patValues); |
||||
| 248 | |||||
| 249 | } |
||||
| 250 | |||||
| 251 | /* function to add function qualifier to module */ |
||||
| 252 | /** |
||||
| 253 | * @param $src_path |
||||
| 254 | * @param $dst_path |
||||
| 255 | * @param $moduleName |
||||
| 256 | */ |
||||
| 257 | public static function function_tabreplacer($src_path, $dst_path) { |
||||
| 258 | $patKeys = []; |
||||
| 259 | $patValues = []; |
||||
| 260 | Devtools::cloneFileFolder($src_path, $dst_path, $patKeys, $patValues, true); |
||||
| 261 | } |
||||
| 262 | |||||
| 263 | // recursive cloning script |
||||
| 264 | /** |
||||
| 265 | * @param $src_path |
||||
| 266 | * @param $dst_path |
||||
| 267 | * @param array $patKeys |
||||
| 268 | * @param array $patValues |
||||
| 269 | * @param bool $replaceTabs |
||||
| 270 | */ |
||||
| 271 | public static function cloneFileFolder($src_path, $dst_path, $patKeys = [], $patValues =[], $replaceTabs = false) |
||||
| 272 | { |
||||
| 273 | // open the source directory |
||||
| 274 | $dir = \opendir($src_path); |
||||
| 275 | // Make the destination directory if not exist |
||||
| 276 | @\mkdir($dst_path); |
||||
|
0 ignored issues
–
show
|
|||||
| 277 | // Loop through the files in source directory |
||||
| 278 | while( $file = \readdir($dir) ) { |
||||
| 279 | if (( $file != '.' ) && ( $file != '..' )) { |
||||
| 280 | if ( \is_dir($src_path . '/' . $file) ) { |
||||
| 281 | // Recursively calling custom copy function for sub directory |
||||
| 282 | Devtools::cloneFileFolder($src_path . '/' . $file, $dst_path . '/' . $file, $patKeys, $patValues, $replaceTabs); |
||||
| 283 | } else { |
||||
| 284 | Devtools::cloneFile($src_path . '/' . $file, $dst_path . '/' . $file, $patKeys, $patValues, $replaceTabs); |
||||
| 285 | } |
||||
| 286 | } |
||||
| 287 | } |
||||
| 288 | \closedir($dir); |
||||
| 289 | } |
||||
| 290 | |||||
| 291 | /** |
||||
| 292 | * @param $src_file |
||||
| 293 | * @param $dst_file |
||||
| 294 | * @param array $patKeys |
||||
| 295 | * @param array $patValues |
||||
| 296 | * @param array $patValues |
||||
| 297 | * @param bool $replaceTabs |
||||
| 298 | */ |
||||
| 299 | private static function cloneFile($src_file, $dst_file, $patKeys = [], $patValues =[], $replaceTabs = false) |
||||
| 300 | { |
||||
| 301 | $replace_code = false; |
||||
| 302 | $changeExtensions = ['php']; |
||||
| 303 | if (\in_array(\mb_strtolower(\pathinfo($src_file, PATHINFO_EXTENSION)), $changeExtensions)) { |
||||
|
0 ignored issues
–
show
It seems like
pathinfo($src_file, Xoop...der\PATHINFO_EXTENSION) can also be of type array; however, parameter $string of mb_strtolower() does only seem to accept string, maybe add an additional type check?
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
Loading history...
|
|||||
| 304 | $replace_code = true; |
||||
| 305 | } |
||||
| 306 | if (\strpos( $dst_file, basename(__FILE__)) > 0) { |
||||
| 307 | //skip myself |
||||
| 308 | $replace_code = false; |
||||
| 309 | } |
||||
| 310 | if ($replace_code) { |
||||
| 311 | // file, read it and replace text |
||||
| 312 | $content = \file_get_contents($src_file); |
||||
| 313 | if ($replaceTabs) { |
||||
| 314 | $content = \preg_replace("/[\t]+/", " ", $content); |
||||
| 315 | } else { |
||||
| 316 | $content = \str_replace($patKeys, $patValues, $content); |
||||
| 317 | } |
||||
| 318 | //check file name whether it contains replace code |
||||
| 319 | $path_parts = \pathinfo($dst_file); |
||||
| 320 | $path = $path_parts['dirname']; |
||||
| 321 | $file = $path_parts['basename']; |
||||
| 322 | $dst_file = $path . '/' . \str_replace($patKeys, $patValues, $file); |
||||
| 323 | \file_put_contents($dst_file, $content); |
||||
| 324 | } else { |
||||
| 325 | \copy($src_file, $dst_file); |
||||
| 326 | } |
||||
| 327 | } |
||||
| 328 | |||||
| 329 | /** |
||||
| 330 | * get form with all existing modules |
||||
| 331 | * @param bool $action |
||||
| 332 | * @return \XoopsSimpleForm |
||||
| 333 | */ |
||||
| 334 | public static function getFormModulesFq($action = false) |
||||
| 335 | { |
||||
| 336 | if (!$action) { |
||||
| 337 | $action = $_SERVER['REQUEST_URI']; |
||||
| 338 | } |
||||
| 339 | // Get Theme Form |
||||
| 340 | \xoops_load('XoopsFormLoader'); |
||||
| 341 | $form = new \XoopsSimpleForm('', 'form', $action, 'post', true); |
||||
| 342 | $form->setExtra('enctype="multipart/form-data"'); |
||||
| 343 | // Form Select Module |
||||
| 344 | $modulesSelect = new \XoopsFormSelect(\_AM_MODULEBUILDER_DEVTOOLS_FQ_MODULE, 'fq_module', ''); |
||||
| 345 | $modulesArr = \XoopsLists::getModulesList(); |
||||
| 346 | $modulesSelect->addOption('', ' '); |
||||
| 347 | foreach ($modulesArr as $mod) { |
||||
| 348 | $modulesSelect->addOption($mod, $mod); |
||||
| 349 | } |
||||
| 350 | $form->addElement($modulesSelect, true); |
||||
| 351 | // To Save |
||||
| 352 | $form->addElement(new \XoopsFormHidden('op', 'fq')); |
||||
| 353 | $form->addElement(new \XoopsFormButtonTray('', \_SUBMIT, 'submit', '', false)); |
||||
| 354 | |||||
| 355 | return $form; |
||||
| 356 | } |
||||
| 357 | |||||
| 358 | /** |
||||
| 359 | * get form with all existing modules |
||||
| 360 | * @param bool $action |
||||
| 361 | * @return \XoopsSimpleForm |
||||
| 362 | */ |
||||
| 363 | public static function getFormModulesCl($action = false) |
||||
| 364 | { |
||||
| 365 | if (!$action) { |
||||
| 366 | $action = $_SERVER['REQUEST_URI']; |
||||
| 367 | } |
||||
| 368 | // Get Theme Form |
||||
| 369 | \xoops_load('XoopsFormLoader'); |
||||
| 370 | $form = new \XoopsSimpleForm('', 'form', $action, 'post', true); |
||||
| 371 | $form->setExtra('enctype="multipart/form-data"'); |
||||
| 372 | // Form Select Module |
||||
| 373 | $modulesSelect = new \XoopsFormSelect(\_AM_MODULEBUILDER_DEVTOOLS_CL_MODULE, 'cl_module', ''); |
||||
| 374 | $modulesArr = \XoopsLists::getModulesList(); |
||||
| 375 | $modulesSelect->addOption('', ' '); |
||||
| 376 | foreach ($modulesArr as $mod) { |
||||
| 377 | $modulesSelect->addOption($mod, $mod); |
||||
| 378 | } |
||||
| 379 | $form->addElement($modulesSelect, true); |
||||
| 380 | // To Save |
||||
| 381 | $form->addElement(new \XoopsFormHidden('op', 'check_lang')); |
||||
| 382 | $form->addElement(new \XoopsFormButtonTray('', \_SUBMIT, 'submit', '', false)); |
||||
| 383 | |||||
| 384 | return $form; |
||||
| 385 | } |
||||
| 386 | |||||
| 387 | /** |
||||
| 388 | * get form with all existing modules |
||||
| 389 | * @param bool $action |
||||
| 390 | * @return \XoopsSimpleForm |
||||
| 391 | */ |
||||
| 392 | public static function getFormModulesTab($action = false) |
||||
| 393 | { |
||||
| 394 | if (!$action) { |
||||
| 395 | $action = $_SERVER['REQUEST_URI']; |
||||
| 396 | } |
||||
| 397 | // Get Theme Form |
||||
| 398 | \xoops_load('XoopsFormLoader'); |
||||
| 399 | $form = new \XoopsSimpleForm('', 'form', $action, 'post', true); |
||||
| 400 | $form->setExtra('enctype="multipart/form-data"'); |
||||
| 401 | // Form Select Module |
||||
| 402 | $modulesSelect = new \XoopsFormSelect(\_AM_MODULEBUILDER_DEVTOOLS_TAB_MODULE, 'tab_module', ''); |
||||
| 403 | $modulesArr = \XoopsLists::getModulesList(); |
||||
| 404 | $modulesSelect->addOption('', ' '); |
||||
| 405 | foreach ($modulesArr as $mod) { |
||||
| 406 | $modulesSelect->addOption($mod, $mod); |
||||
| 407 | } |
||||
| 408 | $form->addElement($modulesSelect, true); |
||||
| 409 | // To Save |
||||
| 410 | $form->addElement(new \XoopsFormHidden('op', 'tab_replacer')); |
||||
| 411 | $form->addElement(new \XoopsFormButtonTray('', \_SUBMIT, 'submit', '', false)); |
||||
| 412 | |||||
| 413 | return $form; |
||||
| 414 | } |
||||
| 415 | } |
||||
| 416 |
If you suppress an error, we recommend checking for the error condition explicitly: