This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php |
||
2 | |||
3 | namespace XoopsModules\Modulebuilder\Files\Admin; |
||
4 | |||
5 | use XoopsModules\Modulebuilder; |
||
6 | use XoopsModules\Modulebuilder\Files; |
||
7 | |||
8 | /* |
||
9 | You may not change or alter any portion of this comment or credits |
||
10 | of supporting developers from this source code or any supporting source code |
||
11 | which is considered copyrighted (c) material of the original comment or credit authors. |
||
12 | |||
13 | This program is distributed in the hope that it will be useful, |
||
14 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
15 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||
16 | */ |
||
17 | /** |
||
18 | * modulebuilder module. |
||
19 | * |
||
20 | * @copyright XOOPS Project (https://xoops.org) |
||
21 | * @license GNU GPL 2 (https://www.gnu.org/licenses/old-licenses/gpl-2.0.html) |
||
22 | * |
||
23 | * @since 2.5.0 |
||
24 | * |
||
25 | * @author Txmod Xoops https://xoops.org |
||
26 | * Goffy https://myxoops.org |
||
27 | * |
||
28 | */ |
||
29 | |||
30 | /** |
||
31 | * Class AdminPermissions. |
||
32 | */ |
||
33 | class AdminPermissions extends Files\CreateFile |
||
34 | { |
||
35 | /** |
||
36 | * @var mixed |
||
37 | */ |
||
38 | private $axc = null; |
||
39 | |||
40 | /** |
||
41 | * @var mixed |
||
42 | */ |
||
43 | private $xc = null; |
||
44 | |||
45 | /** |
||
46 | * @var mixed |
||
47 | */ |
||
48 | private $pc = null; |
||
49 | |||
50 | /** |
||
51 | * @var mixed |
||
52 | */ |
||
53 | private $cxc = null; |
||
54 | |||
55 | /** |
||
56 | * @public function constructor |
||
57 | * @param null |
||
58 | */ |
||
59 | public function __construct() |
||
60 | { |
||
61 | parent::__construct(); |
||
62 | $this->xc = Modulebuilder\Files\CreateXoopsCode::getInstance(); |
||
63 | $this->pc = Modulebuilder\Files\CreatePhpCode::getInstance(); |
||
64 | $this->axc = Modulebuilder\Files\Admin\AdminXoopsCode::getInstance(); |
||
65 | $this->cxc = Modulebuilder\Files\Classes\ClassXoopsCode::getInstance(); |
||
66 | } |
||
67 | |||
68 | /** |
||
69 | * @static function getInstance |
||
70 | * |
||
71 | * @param null |
||
72 | * |
||
73 | * @return AdminPermissions |
||
74 | */ |
||
75 | public static function getInstance() |
||
76 | { |
||
77 | static $instance = false; |
||
78 | if (!$instance) { |
||
79 | $instance = new self(); |
||
80 | } |
||
81 | |||
82 | return $instance; |
||
83 | } |
||
84 | |||
85 | /** |
||
86 | * @public function write |
||
87 | * |
||
88 | * @param string $module |
||
89 | * @param mixed $tables |
||
90 | * @param string $filename |
||
91 | * |
||
92 | * @return null |
||
93 | */ |
||
94 | public function write($module, $tables, $filename) |
||
95 | { |
||
96 | $this->setModule($module); |
||
97 | $this->setTables($tables); |
||
98 | $this->setFileName($filename); |
||
99 | return null; |
||
100 | } |
||
101 | |||
102 | /** |
||
103 | * @private function getPermissionsHeader |
||
104 | * |
||
105 | * @param $module |
||
106 | * @param $language |
||
107 | * |
||
108 | * @return string |
||
109 | */ |
||
110 | private function getPermissionsHeader($module, $language) |
||
111 | { |
||
112 | $moduleDirname = $module->getVar('mod_dirname'); |
||
113 | $tables = $this->getTableTables($module->getVar('mod_id')); |
||
114 | $tableNames = []; |
||
115 | foreach (\array_keys($tables) as $t) { |
||
116 | if (1 == $tables[$t]->getVar('table_permissions')) { |
||
117 | $tableNames[] = $tables[$t]->getVar('table_name'); |
||
118 | } |
||
119 | } |
||
120 | $ret = $this->pc->getPhpCodeUseNamespace(['Xmf', 'Request'], '', ''); |
||
121 | $ret .= $this->pc->getPhpCodeUseNamespace(['XoopsModules', $moduleDirname], '', ''); |
||
122 | $ret .= $this->pc->getPhpCodeUseNamespace(['XoopsModules', $moduleDirname, 'Constants']); |
||
123 | $ret .= $this->getRequire('header'); |
||
124 | $ret .= $this->pc->getPhpCodeBlankLine(); |
||
125 | $ret .= $this->pc->getPhpCodeCommentLine('Template Index'); |
||
126 | $ret .= $this->axc->getAdminTemplateMain($moduleDirname, 'permissions'); |
||
127 | $ret .= $this->xc->getXcXoopsTplAssign('navigation', "\$adminObject->displayNavigation('permissions.php')"); |
||
128 | $ret .= $this->pc->getPhpCodeBlankLine(); |
||
129 | $ret .= $this->xc->getXcXoopsRequest('op', 'op', 'global', 'Cmd'); |
||
130 | $ret .= $this->pc->getPhpCodeBlankLine(); |
||
131 | $ret .= $this->pc->getPhpCodeCommentLine('Get Form'); |
||
132 | $ret .= $this->pc->getPhpCodeIncludeDir('\XOOPS_ROOT_PATH', 'class/xoopsform/grouppermform', true); |
||
133 | $ret .= $this->xc->getXcXoopsLoad('XoopsFormLoader'); |
||
134 | $optionsSelect['global'] = "{$language}PERMISSIONS_GLOBAL"; |
||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
![]() |
|||
135 | foreach ($tableNames as $tableName) { |
||
136 | $ucfTablename = \ucfirst($tableName); |
||
137 | $optionsSelect["approve_{$tableName}"] = "{$language}PERMISSIONS_APPROVE . ' {$ucfTablename}'"; |
||
138 | $optionsSelect["submit_{$tableName}"] = "{$language}PERMISSIONS_SUBMIT . ' {$ucfTablename}'"; |
||
139 | $optionsSelect["view_{$tableName}"] = "{$language}PERMISSIONS_VIEW . ' {$ucfTablename}'"; |
||
140 | } |
||
141 | $formSelect = $this->xc->getXoopsFormSelectExtraOptions('formSelect', '\'\'', 'op', $optionsSelect, 'onchange="document.fselperm.submit()"'); |
||
142 | $ret .= $this->cxc->getXoopsSimpleForm('permTableForm', 'formSelect', $formSelect, '\'\'', 'fselperm', 'permissions'); |
||
143 | |||
144 | return $ret; |
||
145 | } |
||
146 | |||
147 | /** |
||
148 | * @private function getPermissionsSwitch |
||
149 | * @param $module |
||
150 | * @param $language |
||
151 | * |
||
152 | * @return string |
||
153 | */ |
||
154 | private function getPermissionsSwitch($module, $language) |
||
155 | { |
||
156 | $moduleDirname = $module->getVar('mod_dirname'); |
||
157 | $tables = $this->getTableTables($module->getVar('mod_id')); |
||
158 | $t = "\t\t"; |
||
159 | $n = "\n"; |
||
160 | $cases['global']= [ |
||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||
161 | "{$t}\$formTitle = {$language}PERMISSIONS_GLOBAL;{$n}", |
||
162 | "{$t}\$permName = '{$moduleDirname}_ac';{$n}", |
||
163 | "{$t}\$permDesc = {$language}PERMISSIONS_GLOBAL_DESC;{$n}", |
||
164 | "{$t}\$globalPerms = ['4' => {$language}PERMISSIONS_GLOBAL_4, '8' => {$language}PERMISSIONS_GLOBAL_8, '16' => {$language}PERMISSIONS_GLOBAL_16 ];{$n}", |
||
165 | ]; |
||
166 | foreach (\array_keys($tables) as $i) { |
||
167 | if (1 == $tables[$i]->getVar('table_permissions')) { |
||
168 | $tableName = $tables[$i]->getVar('table_name'); |
||
169 | $ucfTablename = \ucfirst($tableName); |
||
170 | $cases["approve_{$tableName}"] = [ |
||
171 | "{$t}\$formTitle = {$language}PERMISSIONS_APPROVE;{$n}", |
||
172 | "{$t}\$permName = '{$moduleDirname}_approve_{$tableName}';{$n}", |
||
173 | "{$t}\$permDesc = {$language}PERMISSIONS_APPROVE_DESC . ' {$ucfTablename}';{$n}", |
||
174 | "{$t}\$handler = \$helper->getHandler('{$tableName}');{$n}", |
||
175 | ]; |
||
176 | $cases["submit_{$tableName}"] = [ |
||
177 | "{$t}\$formTitle = {$language}PERMISSIONS_SUBMIT;{$n}", |
||
178 | "{$t}\$permName = '{$moduleDirname}_submit_{$tableName}';{$n}", |
||
179 | "{$t}\$permDesc = {$language}PERMISSIONS_SUBMIT_DESC . ' {$ucfTablename}';{$n}", |
||
180 | "{$t}\$handler = \$helper->getHandler('{$tableName}');{$n}", |
||
181 | ]; |
||
182 | $cases["view_{$tableName}"] = [ |
||
183 | "{$t}\$formTitle = {$language}PERMISSIONS_VIEW;{$n}", |
||
184 | "{$t}\$permName = '{$moduleDirname}_view_{$tableName}';{$n}", |
||
185 | "{$t}\$permDesc = {$language}PERMISSIONS_VIEW_DESC . ' {$ucfTablename}';{$n}", |
||
186 | "{$t}\$handler = \$helper->getHandler('{$tableName}');{$n}", |
||
187 | ]; |
||
188 | } |
||
189 | } |
||
190 | $contentSwitch = $this->pc->getPhpCodeCaseSwitch($cases, true, false, "\t"); |
||
191 | |||
192 | return $this->pc->getPhpCodeSwitch('op', $contentSwitch); |
||
193 | } |
||
194 | |||
195 | /** |
||
196 | * @private function getPermissionsBody |
||
197 | * |
||
198 | * @param string $module |
||
199 | * @param string $language |
||
200 | * |
||
201 | * @return string |
||
202 | */ |
||
203 | private function getPermissionsBody($module, $language) |
||
204 | { |
||
205 | $tables = $this->getTableTables($module->getVar('mod_id')); |
||
206 | |||
207 | $ret = $this->xc->getXcGetVar('moduleId', 'xoopsModule', 'mid'); |
||
208 | $ret .= $this->xc->getXcXoopsFormGroupPerm('permform', '$formTitle', '$moduleId', '$permName', '$permDesc', "'admin/permissions.php'"); |
||
209 | $ret .= $this->xc->getXcEqualsOperator('$permFound', 'false'); |
||
210 | $foreach1 = $this->xc->getXcAddItem('permform', '$gPermId', '$gPermName', "\t\t"); |
||
211 | $if1 = $this->pc->getPhpCodeForeach('globalPerms', false, 'gPermId', 'gPermName', $foreach1, "\t"); |
||
212 | $if1 .= $this->xc->getXcXoopsTplAssign('form', '$permform->render()', true, "\t"); |
||
213 | $if1 .= $this->xc->getXcEqualsOperator('$permFound', 'true', null, "\t"); |
||
214 | $ret .= $this->pc->getPhpCodeConditions("'global'", ' === ', '$op', $if1, false); |
||
215 | |||
216 | foreach (\array_keys($tables) as $t) { |
||
217 | if (1 == $tables[$t]->getVar('table_permissions')) { |
||
218 | $tableId = $tables[$t]->getVar('table_id'); |
||
219 | $tableMid = $tables[$t]->getVar('table_mid'); |
||
220 | $tableName = $tables[$t]->getVar('table_name'); |
||
221 | $fields = $this->getTableFields($tableMid, $tableId); |
||
222 | $fieldId = 'id'; |
||
223 | $fieldMain = 'title'; |
||
224 | foreach (\array_keys($fields) as $f) { |
||
225 | $fieldName = $fields[$f]->getVar('field_name'); |
||
226 | if (0 == $f) { |
||
227 | $fieldId = $fieldName; |
||
228 | } |
||
229 | if (1 == $fields[$f]->getVar('field_main')) { |
||
230 | $fieldMain = $fieldName; |
||
231 | } |
||
232 | } |
||
233 | $if_count = $this->xc->getXcHandlerAllObj($tableName, $fieldMain, 0, 0, "\t\t"); |
||
234 | $getVar1 = $this->xc->getXcGetVar('', "{$tableName}All[\$i]", $fieldId, true); |
||
235 | $getVar2 = $this->xc->getXcGetVar('', "{$tableName}All[\$i]", $fieldMain, true); |
||
236 | $fe_content = $this->xc->getXcAddItem('permform', $getVar1, $getVar2, "\t\t\t"); |
||
237 | $if_table = $this->xc->getXcHandlerCountObj($tableName, "\t"); |
||
238 | $if_count .= $this->pc->getPhpCodeForeach("{$tableName}All", true, false, 'i', $fe_content, "\t\t"); |
||
239 | $if_count .= $this->xc->getXcXoopsTplAssign('form', '$permform->render()', true, "\t\t"); |
||
240 | $if_table .= $this->pc->getPhpCodeConditions("\${$tableName}Count", ' > ', '0', $if_count, false, "\t"); |
||
241 | $if_table .= $this->xc->getXcEqualsOperator('$permFound', 'true', null, "\t"); |
||
242 | $cond = "'approve_{$tableName}' === \$op || 'submit_{$tableName}' === \$op || 'view_{$tableName}' === \$op"; |
||
243 | $ret .= $this->pc->getPhpCodeConditions($cond, '', '', $if_table, false); |
||
244 | } |
||
245 | } |
||
246 | |||
247 | $ret .= $this->pc->getPhpCodeUnset('permform'); |
||
248 | $elseInter = $this->xc->getXcRedirectHeader("'permissions.php'", '', '3', "{$language}NO_PERMISSIONS_SET", false, "\t"); |
||
249 | $elseInter .= $this->getSimpleString("exit();", "\t"); |
||
250 | $ret .= $this->pc->getPhpCodeConditions('$permFound', ' !== ', 'true', $elseInter, false); |
||
251 | |||
252 | return $ret; |
||
253 | } |
||
254 | |||
255 | /** |
||
256 | * @public function render |
||
257 | * |
||
258 | * @param null |
||
259 | * |
||
260 | * @return bool|string |
||
261 | */ |
||
262 | public function render() |
||
263 | { |
||
264 | $module = $this->getModule(); |
||
265 | $filename = $this->getFileName(); |
||
266 | $moduleDirname = $module->getVar('mod_dirname'); |
||
267 | $language = $this->getLanguage($moduleDirname, 'AM'); |
||
268 | $content = $this->getHeaderFilesComments($module); |
||
269 | $content .= $this->getPermissionsHeader($module, $language); |
||
270 | $content .= $this->getPermissionsSwitch($module, $language); |
||
271 | $content .= $this->getPermissionsBody($module, $language); |
||
272 | $content .= $this->getRequire('footer'); |
||
273 | |||
274 | $this->create($moduleDirname, 'admin', $filename, $content, \_AM_MODULEBUILDER_FILE_CREATED, \_AM_MODULEBUILDER_FILE_NOTCREATED); |
||
275 | |||
276 | return $this->renderFile(); |
||
277 | } |
||
278 | } |
||
279 |