This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * @property integer $id |
||
4 | * @property integer $owner |
||
5 | * @property string $ownerName |
||
6 | * @property string $name |
||
7 | * @property integer $would_compete |
||
8 | * @property string $created |
||
9 | * @property CPagination $pagination |
||
10 | * @property integer $count |
||
11 | * @property array $items |
||
12 | * @property integer $page |
||
13 | * @property array $members |
||
14 | * @property array $entrants |
||
15 | * @property array $challenges |
||
16 | * @property integer $rank |
||
17 | * @property integer $rankActual |
||
18 | */ |
||
19 | class Club extends CModel implements ISubject |
||
20 | { |
||
21 | private $id; |
||
22 | private $owner; |
||
23 | private $ownerName; |
||
24 | private $name; |
||
25 | private $would_compete; |
||
26 | private $created; |
||
27 | private $items = []; |
||
28 | private $page = 0; |
||
29 | private $pagination; |
||
30 | private $count; |
||
31 | private $members = []; |
||
32 | private $entrants = []; |
||
33 | private $challenges = []; |
||
34 | |||
35 | public function attributeNames() |
||
36 | { |
||
37 | return []; |
||
38 | } |
||
39 | |||
40 | public function getId() |
||
41 | { |
||
42 | return $this->id; |
||
43 | } |
||
44 | |||
45 | public function getOwner() |
||
46 | { |
||
47 | return $this->owner; |
||
48 | } |
||
49 | |||
50 | public function getOwnerName() |
||
51 | { |
||
52 | return $this->ownerName; |
||
53 | } |
||
54 | |||
55 | public function getName() |
||
56 | { |
||
57 | return $this->name; |
||
58 | } |
||
59 | |||
60 | public function getWould_compete() |
||
61 | { |
||
62 | return (int)$this->would_compete; |
||
63 | } |
||
64 | |||
65 | public function getCreated() |
||
66 | { |
||
67 | return $this->created; |
||
68 | } |
||
69 | |||
70 | public function getPagination() |
||
71 | { |
||
72 | return $this->pagination; |
||
73 | } |
||
74 | |||
75 | public function getCount() |
||
76 | { |
||
77 | return $this->count; |
||
78 | } |
||
79 | |||
80 | public function getItems() |
||
81 | { |
||
82 | return $this->items; |
||
83 | } |
||
84 | |||
85 | public function getMembers() |
||
86 | { |
||
87 | return $this->members; |
||
88 | } |
||
89 | |||
90 | public function getEntrants() |
||
91 | { |
||
92 | return $this->entrants; |
||
93 | } |
||
94 | |||
95 | public function getChallenges() |
||
96 | { |
||
97 | return $this->challenges; |
||
98 | } |
||
99 | |||
100 | public function getRank($getActual = false) |
||
101 | { |
||
102 | $redis = Yii::app()->redis->getClient(); |
||
103 | |||
104 | $key = $getActual ? 'board_c:' . date('Ym') : 'board_c:6month'; |
||
105 | $rank = $redis->zRevRank($key, $this->id); |
||
106 | if ($rank !== false) { |
||
107 | $rank++; |
||
108 | } |
||
109 | return $rank; |
||
110 | } |
||
111 | |||
112 | public function setId($id) |
||
113 | { |
||
114 | $this->id = (int)$id; |
||
115 | } |
||
116 | |||
117 | public function setSubjectId($id) |
||
118 | { |
||
119 | $this->setId($id); |
||
120 | } |
||
121 | |||
122 | public function setPage($page) |
||
123 | { |
||
124 | $this->page = $page; |
||
125 | } |
||
126 | |||
127 | public function fetch() |
||
128 | { |
||
129 | if (!$this->id) { |
||
130 | return false; |
||
131 | } |
||
132 | |||
133 | //read all from db |
||
134 | $res = Yii::app()->db->createCommand() |
||
135 | ->select('c.owner, c.name, c.created, c.would_compete, m.user AS ownerName') |
||
136 | ->from('club c') |
||
137 | ->leftJoin('main m', 'c.owner=m.uid') |
||
138 | ->where('c.id=:id', [':id'=>$this->id]) |
||
139 | ->queryRow(); |
||
140 | |||
141 | if (!is_array($res)) { |
||
142 | $this->id = 0; |
||
143 | return false; |
||
144 | } |
||
145 | |||
146 | foreach ($res as $k => $v) { |
||
147 | $this->$k = $v; |
||
148 | } |
||
149 | } |
||
150 | |||
151 | public function fetchName() |
||
152 | { |
||
153 | $name = Yii::app()->db->cache(86400)->createCommand() |
||
154 | ->select('name') |
||
155 | ->from('club') |
||
156 | ->where('id=:id', [':id'=>$this->id]) |
||
157 | ->queryScalar(); |
||
158 | $this->name = $name; |
||
159 | } |
||
160 | |||
161 | View Code Duplication | public function getSubjectName() |
|
0 ignored issues
–
show
|
|||
162 | { |
||
163 | $name = Yii::app()->db->cache(86400)->createCommand() |
||
164 | ->select('name') |
||
165 | ->from('club') |
||
166 | ->where('id=:id', [':id'=>$this->id]) |
||
167 | ->queryScalar(); |
||
168 | if (!$name) { |
||
169 | $name = '???'; |
||
170 | } |
||
171 | return $name; |
||
172 | } |
||
173 | |||
174 | public function fetchItems($wouldCompete = false) |
||
175 | { |
||
176 | $where = $wouldCompete ? 'would_compete=1' : ''; |
||
177 | $limit = Yii::app()->params['listPerPage']; |
||
178 | |||
179 | $this->count = Yii::app()->db->createCommand() |
||
180 | ->select('COUNT(*) AS count') |
||
181 | ->from('club') |
||
182 | ->where($where) |
||
183 | ->queryScalar(); |
||
184 | |||
185 | $res = Yii::app()->db->createCommand() |
||
186 | ->select('*') |
||
187 | ->from('club') |
||
188 | ->where($where) |
||
189 | ->order('id DESC') |
||
190 | ->limit($limit, ($this->page * $limit) - $limit) // the trick is here! |
||
191 | ->queryAll(); |
||
192 | |||
193 | $this->pagination = new CPagination($this->count); |
||
194 | $this->pagination->setPageSize(Yii::app()->params['listPerPage']); |
||
195 | |||
196 | $this->items = $res; |
||
197 | } |
||
198 | |||
199 | public function getJoinRequestSent() |
||
200 | { |
||
201 | $res = Yii::app()->db->createCommand() |
||
202 | ->select('club_id') |
||
203 | ->from('club_members') |
||
204 | ->where('uid=:uid', [':uid'=>Yii::app()->player->model->uid]) |
||
205 | ->queryScalar(); |
||
206 | return (int)$res; |
||
207 | } |
||
208 | |||
209 | /** |
||
210 | * @param integer $id |
||
211 | */ |
||
212 | public function joinRequest($id) |
||
213 | { |
||
214 | $player = Yii::app()->player->model; |
||
215 | View Code Duplication | if ($player->level < Yii::app()->params['clubJoinLevelRequirement']) { |
|
0 ignored issues
–
show
This code seems to be duplicated across your project.
Duplicated code is one of the most pungent code smells. If you need to duplicate the same code in three or more different places, we strongly encourage you to look into extracting the code into a single class or operation. You can also find more detailed suggestions in the “Code” section of your repository. ![]() |
|||
216 | throw new CFlashException('Ahhoz, hogy csatlakozhass, el kell érned a ' . Yii::app()->params['clubJoinLevelRequirement'] . '. szintet.'); |
||
217 | } |
||
218 | |||
219 | if ($player->in_club) { |
||
220 | throw new CFlashException('Már tagja vagy egy másik klubnak.'); |
||
221 | } |
||
222 | |||
223 | if ($this->getJoinRequestSent()) { |
||
224 | throw new CFlashException('Már jelentkeztél egy másik klubba.'); |
||
225 | } |
||
226 | |||
227 | if (count($this->entrants) + count($this->members) >= Yii::app()->params['clubMaxMembers']) { |
||
228 | throw new CFlashException('A klubtagok és jelentkezők száma elérte a maximumot (' . Yii::app()->params['clubMaxMembers'] . '), ezért nem jelentkezhetnek többen.'); |
||
229 | } |
||
230 | |||
231 | Yii::app()->db->createCommand() |
||
232 | ->insert( |
||
233 | 'club_members', |
||
234 | [ |
||
235 | 'club_id'=>(int)$id, |
||
236 | 'uid'=>$player->uid |
||
237 | ] |
||
238 | ); |
||
239 | //refresh list |
||
240 | $this->entrants[$player->uid] = [ |
||
241 | 'uid'=>$player->uid, |
||
242 | 'approved'=>0, |
||
243 | 'user'=>$player->user |
||
244 | ]; |
||
245 | |||
246 | return true; |
||
247 | } |
||
248 | |||
249 | /** |
||
250 | * @param integer $id |
||
251 | */ |
||
252 | public function deleteOwnJoinRequest($id) |
||
253 | { |
||
254 | $player = Yii::app()->player->model; |
||
255 | |||
256 | Yii::app()->db->createCommand() |
||
257 | ->delete( |
||
258 | 'club_members', |
||
259 | 'club_id=:club_id AND uid=:uid AND approved=0', |
||
260 | ['club_id'=>(int)$id, 'uid'=>$player->uid] |
||
261 | ); |
||
262 | unset($this->entrants[$player->uid]); |
||
263 | |||
264 | return true; |
||
265 | } |
||
266 | |||
267 | /* members */ |
||
268 | public function fetchMembers() |
||
269 | { |
||
270 | $res = Yii::app()->db->createCommand() |
||
271 | ->select('cm.uid, cm.approved, m.user') |
||
272 | ->from('club_members cm') |
||
273 | ->join('main m', 'cm.uid=m.uid') |
||
274 | ->where('cm.club_id=:club_id', [':club_id'=>$this->id]) |
||
275 | ->queryAll(); |
||
276 | |||
277 | foreach ($res as $u) { |
||
278 | if ($u['approved']) { |
||
279 | $this->members[$u['uid']] = $u; |
||
280 | } else { |
||
281 | $this->entrants[$u['uid']] = $u; |
||
282 | } |
||
283 | } |
||
284 | } |
||
285 | |||
286 | /** |
||
287 | * @param integer $uid |
||
288 | */ |
||
289 | public function fireMember($uid) |
||
290 | { |
||
291 | $player = Yii::app()->player->model; |
||
292 | |||
293 | if ($player->in_club != $this->id) { |
||
294 | return false; |
||
295 | } |
||
296 | |||
297 | $del = Yii::app()->db->createCommand() |
||
298 | ->delete( |
||
299 | 'club_members', |
||
300 | 'club_id=:club_id AND uid=:uid AND approved=1', |
||
301 | ['club_id'=>$this->id, 'uid'=>$uid] |
||
302 | ); |
||
303 | |||
304 | if ($del) { |
||
305 | Yii::app()->db->createCommand() |
||
306 | ->update('main', ['in_club'=>0], 'uid=:uid', [':uid'=>(int)$uid]); |
||
307 | |||
308 | unset($this->members[$uid]); |
||
309 | } |
||
310 | |||
311 | return (bool)$del; |
||
312 | } |
||
313 | |||
314 | /** |
||
315 | * @param integer $uid |
||
316 | */ |
||
317 | public function approveMember($uid) |
||
318 | { |
||
319 | $player = Yii::app()->player->model; |
||
320 | |||
321 | if ($player->in_club != $this->id) { |
||
322 | return false; |
||
323 | } |
||
324 | |||
325 | if (!array_key_exists($uid, $this->entrants)) { |
||
326 | return false; |
||
327 | } |
||
328 | |||
329 | $cnt = count($this->members) + 1; //with owner |
||
330 | if ($cnt >= Yii::app()->params['clubMaxMembers']) { |
||
331 | return false; |
||
332 | } |
||
333 | |||
334 | $update = Yii::app()->db->createCommand() |
||
335 | ->update('club_members', ['approved'=>1], 'uid=:uid', [':uid'=>(int)$uid]); |
||
336 | |||
337 | if ($update) { |
||
338 | Yii::app()->db->createCommand() |
||
339 | ->update('main', ['in_club'=>$this->id], 'uid=:uid', [':uid'=>(int)$uid]); |
||
340 | |||
341 | $this->members[$uid] = $this->entrants[$uid]; |
||
342 | unset($this->entrants[$uid]); |
||
343 | $cnt++; |
||
344 | |||
345 | $b = Yii::app()->badge->model; |
||
346 | $b->uid = $uid; |
||
347 | $b->triggerSimple('club_join'); |
||
348 | |||
349 | $b->uid = $this->owner; |
||
350 | $b->triggerClubMembers($cnt); |
||
351 | $b->uid - $player->uid; //reset |
||
352 | } |
||
353 | |||
354 | return (bool)$update; |
||
355 | } |
||
356 | |||
357 | /** |
||
358 | * @param integer $uid |
||
359 | */ |
||
360 | public function deleteJoinRequest($uid) |
||
361 | { |
||
362 | $del = Yii::app()->db->createCommand() |
||
363 | ->delete( |
||
364 | 'club_members', |
||
365 | 'club_id=:club_id AND uid=:uid AND approved=0', |
||
366 | [':club_id'=>$this->id, 'uid'=>$uid] |
||
367 | ); |
||
368 | unset($this->entrants[$uid]); |
||
369 | |||
370 | return (bool)$del; |
||
371 | } |
||
372 | |||
373 | public function close($pass) |
||
374 | { |
||
375 | if (!$this->requirementsForClose($pass)) { |
||
376 | return false; |
||
377 | } |
||
378 | |||
379 | $this->fireMembers(); |
||
380 | $this->deleteForum(); |
||
381 | $this->deleteClub(); |
||
382 | return true; |
||
383 | } |
||
384 | |||
385 | private function requirementsForClose($pass) |
||
386 | { |
||
387 | if ((new Challenge)->hasActiveChallenge($this->id)) { |
||
388 | throw new CFlashException('A klub nem szüntethető meg verseny közben.'); |
||
389 | } |
||
390 | |||
391 | if (Yii::app()->player->uid <> $this->owner) { |
||
392 | throw new CFlashException('A klubot csak az alapÃtó szüntetheti meg.'); |
||
393 | } |
||
394 | |||
395 | if (md5($pass) !== $_SESSION['pass']) { |
||
396 | throw new CFlashException('A jelszó helytelen.'); |
||
397 | } |
||
398 | |||
399 | return true; |
||
400 | } |
||
401 | |||
402 | private function fireMembers() |
||
403 | { |
||
404 | Yii::app()->db->createCommand() |
||
405 | ->delete( |
||
406 | 'club_members', |
||
407 | 'club_id=:club_id', |
||
408 | [':club_id'=>$this->id] |
||
409 | ); |
||
410 | |||
411 | $this->members[$this->owner] = ['uid'=>$this->owner]; |
||
412 | foreach ($this->members as $member) { |
||
413 | Yii::app()->db->createCommand() |
||
414 | ->update('main', ['in_club'=>0], 'uid=:uid', [':uid'=>(int)$member['uid']]); |
||
415 | } |
||
416 | } |
||
417 | |||
418 | private function deleteForum() |
||
419 | { |
||
420 | Yii::app()->db->createCommand() |
||
421 | ->delete( |
||
422 | 'forum', |
||
423 | 'club_id=:club_id', |
||
424 | [':club_id'=>$this->id] |
||
425 | ); |
||
426 | } |
||
427 | |||
428 | private function deleteClub() |
||
429 | { |
||
430 | Yii::app()->db->createCommand() |
||
431 | ->delete( |
||
432 | 'club', |
||
433 | 'id=:club_id', |
||
434 | [':club_id'=>$this->id] |
||
435 | ); |
||
436 | } |
||
437 | |||
438 | public function switchCompete() |
||
439 | { |
||
440 | $compete = (int)$this->would_compete ? 0 : 1; |
||
441 | Yii::app()->db->createCommand() |
||
442 | ->update('club', ['would_compete'=>$compete], 'id=:id', [':id'=>$this->id]); |
||
443 | $this->would_compete = $compete; |
||
444 | } |
||
445 | |||
446 | public function fetchChallenges($limit = 15) |
||
447 | { |
||
448 | $res = Yii::app()->db->createCommand() |
||
449 | ->select('id, caller, opponent, name_caller, name_opponent, winner, created') |
||
450 | ->from('challenge') |
||
451 | ->where('caller=:club_id OR opponent=:club_id', [':club_id'=>$this->id]) |
||
452 | ->order('id DESC') |
||
453 | ->limit((int)$limit) |
||
454 | ->queryAll(); |
||
455 | |||
456 | foreach ($res as $u) { |
||
457 | $this->challenges[$u['id']] = $u; |
||
458 | } |
||
459 | } |
||
460 | } |
||
461 |
Duplicated code is one of the most pungent code smells. If you need to duplicate the same code in three or more different places, we strongly encourage you to look into extracting the code into a single class or operation.
You can also find more detailed suggestions in the “Code” section of your repository.