jcheron /
phalcon-jquery
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace Ajax; |
||
| 4 | |||
| 5 | use Ajax\common\traits\JqueryEventsTrait; |
||
| 6 | use Ajax\common\traits\JqueryAjaxTrait; |
||
| 7 | use Ajax\common\traits\JqueryActionsTrait; |
||
| 8 | |||
| 9 | /** |
||
| 10 | * JQuery Phalcon library |
||
| 11 | * |
||
| 12 | * @author jcheron |
||
| 13 | * @version 1.002 |
||
| 14 | * @license Apache 2 http://www.apache.org/licenses/ |
||
| 15 | */ |
||
| 16 | /** |
||
| 17 | * jQuery Class |
||
| 18 | */ |
||
| 19 | class Jquery { |
||
| 20 | use JqueryEventsTrait,JqueryAjaxTrait,JqueryActionsTrait; |
||
| 21 | protected $_ui; |
||
| 22 | protected $_bootstrap; |
||
| 23 | protected $_semantic; |
||
| 24 | protected $libraryFile; |
||
| 25 | protected $_javascript_folder='js'; |
||
| 26 | protected $jquery_code_for_load=array (); |
||
| 27 | protected $jquery_code_for_compile=array (); |
||
| 28 | protected $jquery_corner_active=FALSE; |
||
| 29 | protected $jquery_table_sorter_active=FALSE; |
||
| 30 | protected $jquery_table_sorter_pager_active=FALSE; |
||
| 31 | protected $jsUtils; |
||
| 32 | |||
| 33 | protected $jquery_events=array ( |
||
| 34 | "bind","blur","change","click","dblclick","delegate","die","error","focus","focusin","focusout","hover","keydown","keypress","keyup","live","load","mousedown","mousseenter","mouseleave","mousemove","mouseout","mouseover","mouseup","off","on","one","ready","resize","scroll","select","submit","toggle","trigger","triggerHandler","undind","undelegate","unload" |
||
| 35 | ); |
||
| 36 | |||
| 37 | public function ui($ui=NULL) { |
||
| 38 | if ($ui!==NULL) { |
||
| 39 | $this->_ui=$ui; |
||
| 40 | } |
||
| 41 | return $this->_ui; |
||
| 42 | } |
||
| 43 | |||
| 44 | public function bootstrap($bootstrap=NULL) { |
||
| 45 | if ($bootstrap!==NULL) { |
||
| 46 | $this->_bootstrap=$bootstrap; |
||
| 47 | } |
||
| 48 | return $this->_bootstrap; |
||
| 49 | } |
||
| 50 | |||
| 51 | public function semantic($semantic=NULL) { |
||
| 52 | if ($semantic!==NULL) { |
||
| 53 | $this->_semantic=$semantic; |
||
| 54 | } |
||
| 55 | return $this->_semantic; |
||
| 56 | } |
||
| 57 | |||
| 58 | public function __construct($params,$jsUtils) { |
||
| 59 | $this->params=array(); |
||
|
0 ignored issues
–
show
|
|||
| 60 | foreach ( $params as $key => $val ) { |
||
| 61 | $this->params[$key]=$params[$key]; |
||
| 62 | } |
||
| 63 | $this->jsUtils=$jsUtils; |
||
| 64 | } |
||
| 65 | |||
| 66 | /** |
||
| 67 | * Inline |
||
| 68 | * |
||
| 69 | * Outputs a <script> tag |
||
| 70 | * |
||
| 71 | * @access public |
||
| 72 | * @param string $script |
||
| 73 | * @param boolean $cdata a CDATA section should be added |
||
| 74 | * @return string |
||
| 75 | */ |
||
| 76 | View Code Duplication | public function inline($script, $cdata=TRUE) { |
|
| 77 | $str=$this->_open_script(); |
||
| 78 | $str.=($cdata) ? "\n// <![CDATA[\n{$script}\n// ]]>\n" : "\n{$script}\n"; |
||
| 79 | $str.=$this->_close_script(); |
||
| 80 | |||
| 81 | return $str; |
||
| 82 | } |
||
| 83 | |||
| 84 | /** |
||
| 85 | * Open Script |
||
| 86 | * |
||
| 87 | * Outputs an opening <script> |
||
| 88 | * |
||
| 89 | * @access private |
||
| 90 | * @param string $src |
||
| 91 | * @return string |
||
| 92 | */ |
||
| 93 | private function _open_script($src='') { |
||
| 94 | $str='<script type="text/javascript" '; |
||
| 95 | $str.=($src=='') ? '>' : ' src="'.$src.'">'; |
||
| 96 | return $str; |
||
| 97 | } |
||
| 98 | |||
| 99 | /** |
||
| 100 | * Close Script |
||
| 101 | * |
||
| 102 | * Outputs an closing </script> |
||
| 103 | * |
||
| 104 | * @param string |
||
| 105 | * @return string |
||
| 106 | */ |
||
| 107 | private function _close_script($extra="\n") { |
||
| 108 | return "</script>{$extra}"; |
||
| 109 | } |
||
| 110 | |||
| 111 | public function setLibraryFile($name) { |
||
| 112 | $this->libraryFile=$name; |
||
| 113 | } |
||
| 114 | |||
| 115 | public function _setAjaxLoader($loader) { |
||
| 116 | $this->ajaxLoader=$loader; |
||
| 117 | } |
||
| 118 | |||
| 119 | /** |
||
| 120 | * Outputs script directly |
||
| 121 | * |
||
| 122 | * @param string The element to attach the event to |
||
| 123 | * @param string The code to execute |
||
| 124 | * @return string |
||
| 125 | */ |
||
| 126 | public function _output($array_js='') { |
||
| 127 | if (!is_array($array_js)) { |
||
| 128 | $array_js=array ( |
||
| 129 | $array_js |
||
| 130 | ); |
||
| 131 | } |
||
| 132 | |||
| 133 | foreach ( $array_js as $js ) { |
||
| 134 | $this->jquery_code_for_compile[]="\t$js\n"; |
||
| 135 | } |
||
| 136 | } |
||
| 137 | |||
| 138 | /** |
||
| 139 | * Execute a generic jQuery call with a value. |
||
| 140 | * @param string $jQueryCall |
||
| 141 | * @param string $element |
||
| 142 | * @param string $param |
||
| 143 | * @param boolean $immediatly delayed if false |
||
| 144 | */ |
||
| 145 | View Code Duplication | public function _genericCallValue($jQueryCall,$element='this', $param="", $immediatly=false) { |
|
| 146 | $element=$this->_prep_element($element); |
||
| 147 | if (isset($param)) { |
||
| 148 | $param=$this->_prep_value($param); |
||
| 149 | $str="$({$element}).{$jQueryCall}({$param});"; |
||
| 150 | } else |
||
| 151 | $str="$({$element}).{$jQueryCall}();"; |
||
| 152 | if ($immediatly) |
||
| 153 | $this->jquery_code_for_compile[]=$str; |
||
| 154 | return $str; |
||
| 155 | } |
||
| 156 | /** |
||
| 157 | * Execute a generic jQuery call with 2 elements. |
||
| 158 | * @param string $jQueryCall |
||
| 159 | * @param string $to |
||
| 160 | * @param string $element |
||
| 161 | * @param boolean $immediatly delayed if false |
||
| 162 | * @return string |
||
| 163 | */ |
||
| 164 | public function _genericCallElement($jQueryCall,$to='this', $element, $immediatly=false) { |
||
| 165 | $to=$this->_prep_element($to); |
||
| 166 | $element=$this->_prep_element($element); |
||
| 167 | $str="$({$to}).{$jQueryCall}({$element});"; |
||
| 168 | if ($immediatly) |
||
| 169 | $this->jquery_code_for_compile[]=$str; |
||
| 170 | return $str; |
||
| 171 | } |
||
| 172 | |||
| 173 | /** |
||
| 174 | * Creates a jQuery sortable |
||
| 175 | * |
||
| 176 | * @param string $element |
||
| 177 | * @param array $options |
||
| 178 | * @return void |
||
| 179 | */ |
||
| 180 | public function sortable($element, $options=array()) { |
||
| 181 | if (count($options)>0) { |
||
| 182 | $sort_options=array (); |
||
| 183 | foreach ( $options as $k => $v ) { |
||
| 184 | $sort_options[]="\n\t\t".$k.': '.$v.""; |
||
| 185 | } |
||
| 186 | $sort_options=implode(",", $sort_options); |
||
| 187 | } else { |
||
| 188 | $sort_options=''; |
||
| 189 | } |
||
| 190 | |||
| 191 | return "$(".$this->_prep_element($element).").sortable({".$sort_options."\n\t});"; |
||
| 192 | } |
||
| 193 | |||
| 194 | /** |
||
| 195 | * Table Sorter Plugin |
||
| 196 | * |
||
| 197 | * @param string $table table name |
||
| 198 | * @param string $options plugin location |
||
| 199 | * @return string |
||
| 200 | */ |
||
| 201 | public function tablesorter($table='', $options='') { |
||
| 202 | $this->jquery_code_for_compile[]="\t$(".$this->_prep_element($table).").tablesorter($options);\n"; |
||
| 203 | } |
||
| 204 | |||
| 205 | /** |
||
| 206 | * Constructs the syntax for an event, and adds to into the array for compilation |
||
| 207 | * |
||
| 208 | * @param string $element The element to attach the event to |
||
| 209 | * @param string $js The code to execute |
||
| 210 | * @param string $event The event to pass |
||
| 211 | * @param boolean $preventDefault If set to true, the default action of the event will not be triggered. |
||
| 212 | * @param boolean $stopPropagation Prevents the event from bubbling up the DOM tree, preventing any parent handlers from being notified of the event. |
||
| 213 | * @return string |
||
| 214 | */ |
||
| 215 | public function _add_event($element, $js, $event, $preventDefault=false, $stopPropagation=false,$immediatly=true) { |
||
| 216 | if (is_array($js)) { |
||
| 217 | $js=implode("\n\t\t", $js); |
||
| 218 | } |
||
| 219 | if ($preventDefault===true) { |
||
| 220 | $js="event.preventDefault();\n".$js; |
||
| 221 | } |
||
| 222 | if ($stopPropagation===true) { |
||
| 223 | $js="event.stopPropagation();\n".$js; |
||
| 224 | } |
||
| 225 | if (array_search($event, $this->jquery_events)===false) |
||
| 226 | $event="\n\t$(".$this->_prep_element($element).").bind('{$event}',function(event){\n\t\t{$js}\n\t});\n"; |
||
| 227 | else |
||
| 228 | $event="\n\t$(".$this->_prep_element($element).").{$event}(function(event){\n\t\t{$js}\n\t});\n"; |
||
| 229 | if($immediatly) |
||
| 230 | $this->jquery_code_for_compile[]=$event; |
||
| 231 | return $event; |
||
| 232 | } |
||
| 233 | |||
| 234 | /** |
||
| 235 | * As events are specified, they are stored in an array |
||
| 236 | * This function compiles them all for output on a page |
||
| 237 | * @param view $view |
||
| 238 | * @param string $view_var |
||
| 239 | * @param boolean $script_tags |
||
| 240 | * @return string |
||
| 241 | */ |
||
| 242 | public function _compile(&$view=NULL, $view_var='script_foot', $script_tags=TRUE) { |
||
| 243 | // Components UI |
||
| 244 | $ui=$this->ui(); |
||
| 245 | if ($this->ui()!=NULL) { |
||
| 246 | if ($ui->isAutoCompile()) { |
||
| 247 | $ui->compile(true); |
||
| 248 | } |
||
| 249 | } |
||
| 250 | |||
| 251 | // Components BS |
||
| 252 | $bootstrap=$this->bootstrap(); |
||
| 253 | if ($this->bootstrap()!=NULL) { |
||
| 254 | if ($bootstrap->isAutoCompile()) { |
||
| 255 | $bootstrap->compile(true); |
||
| 256 | } |
||
| 257 | } |
||
| 258 | |||
| 259 | // Components Semantic |
||
| 260 | $semantic=$this->semantic(); |
||
| 261 | if ($semantic!=NULL) { |
||
| 262 | if ($semantic->isAutoCompile()) { |
||
| 263 | $semantic->compile(true); |
||
| 264 | } |
||
| 265 | } |
||
| 266 | |||
| 267 | // External references |
||
| 268 | $external_scripts=implode('', $this->jquery_code_for_load); |
||
| 269 | extract(array ( |
||
| 270 | 'library_src' => $external_scripts |
||
| 271 | )); |
||
| 272 | |||
| 273 | if (count($this->jquery_code_for_compile)==0) { |
||
| 274 | // no inline references, let's just return |
||
| 275 | return; |
||
| 276 | } |
||
| 277 | |||
| 278 | // Inline references |
||
| 279 | $script='$(document).ready(function() {'."\n"; |
||
| 280 | $script.=implode('', $this->jquery_code_for_compile); |
||
| 281 | $script.='});'; |
||
| 282 | |||
| 283 | $this->jquery_code_for_compile=array(); |
||
| 284 | if($this->params["debug"]==false){ |
||
| 285 | $script=$this->minify($script); |
||
| 286 | } |
||
| 287 | $output=($script_tags===FALSE) ? $script : $this->inline($script); |
||
| 288 | |||
| 289 | if ($view!==NULL){ |
||
| 290 | $this->jsUtils->createScriptVariable($view,$view_var, $output); |
||
| 291 | } |
||
| 292 | return $output; |
||
| 293 | } |
||
| 294 | |||
| 295 | public function _addToCompile($jsScript) { |
||
| 296 | $this->jquery_code_for_compile[]=$jsScript; |
||
| 297 | } |
||
| 298 | |||
| 299 | /** |
||
| 300 | * Clears the array of script events collected for output |
||
| 301 | * |
||
| 302 | * @return void |
||
| 303 | */ |
||
| 304 | public function _clear_compile() { |
||
| 305 | $this->jquery_code_for_compile=array (); |
||
| 306 | } |
||
| 307 | |||
| 308 | /** |
||
| 309 | * A wrapper for writing document.ready() |
||
| 310 | * @return string |
||
| 311 | */ |
||
| 312 | public function _document_ready($js) { |
||
| 313 | if (!is_array($js)) { |
||
| 314 | $js=array ( |
||
| 315 | $js |
||
| 316 | ); |
||
| 317 | } |
||
| 318 | |||
| 319 | foreach ( $js as $script ) { |
||
| 320 | $this->jquery_code_for_compile[]=$script; |
||
| 321 | } |
||
| 322 | } |
||
| 323 | |||
| 324 | /** |
||
| 325 | * Puts HTML element in quotes for use in jQuery code |
||
| 326 | * unless the supplied element is the Javascript 'this' |
||
| 327 | * object, in which case no quotes are added |
||
| 328 | * |
||
| 329 | * @param string $element |
||
| 330 | * @return string |
||
| 331 | */ |
||
| 332 | public function _prep_element($element) { |
||
| 333 | View Code Duplication | if (strrpos($element, 'this')===false&&strrpos($element, 'event')===false&&strrpos($element, 'self')===false) { |
|
| 334 | $element='"'.addslashes($element).'"'; |
||
| 335 | } |
||
| 336 | return $element; |
||
| 337 | } |
||
| 338 | |||
| 339 | /** |
||
| 340 | * Puts HTML values in quotes for use in jQuery code |
||
| 341 | * unless the supplied value contains the Javascript 'this' or 'event' |
||
| 342 | * object, in which case no quotes are added |
||
| 343 | * |
||
| 344 | * @param string $value |
||
| 345 | * @return string |
||
| 346 | */ |
||
| 347 | public function _prep_value($value) { |
||
| 348 | if (is_array($value)) { |
||
| 349 | $value=implode(",", $value); |
||
| 350 | } |
||
| 351 | View Code Duplication | if (strrpos($value, 'this')===false&&strrpos($value, 'event')===false&&strrpos($value, 'self')===false) { |
|
| 352 | $value='"'.$value.'"'; |
||
| 353 | } |
||
| 354 | return $value; |
||
| 355 | } |
||
| 356 | |||
| 357 | private function minify($input) { |
||
| 358 | if(trim($input) === "") return $input; |
||
| 359 | return preg_replace( |
||
| 360 | array( |
||
| 361 | // Remove comment(s) |
||
| 362 | '#\s*("(?:[^"\\\]++|\\\.)*+"|\'(?:[^\'\\\\]++|\\\.)*+\')\s*|\s*\/\*(?!\!|@cc_on)(?>[\s\S]*?\*\/)\s*|\s*(?<![\:\=])\/\/.*(?=[\n\r]|$)|^\s*|\s*$#', |
||
| 363 | // Remove white-space(s) outside the string and regex |
||
| 364 | '#("(?:[^"\\\]++|\\\.)*+"|\'(?:[^\'\\\\]++|\\\.)*+\'|\/\*(?>.*?\*\/)|\/(?!\/)[^\n\r]*?\/(?=[\s.,;]|[gimuy]|$))|\s*([!%&*\(\)\-=+\[\]\{\}|;:,.<>?\/])\s*#s', |
||
| 365 | // Remove the last semicolon |
||
| 366 | '#;+\}#', |
||
| 367 | // Minify object attribute(s) except JSON attribute(s). From `{'foo':'bar'}` to `{foo:'bar'}` |
||
| 368 | '#([\{,])([\'])(\d+|[a-z_][a-z0-9_]*)\2(?=\:)#i', |
||
| 369 | // --ibid. From `foo['bar']` to `foo.bar` |
||
| 370 | '#([a-z0-9_\)\]])\[([\'"])([a-z_][a-z0-9_]*)\2\]#i' |
||
| 371 | ), |
||
| 372 | array( |
||
| 373 | '$1', |
||
| 374 | '$1$2', |
||
| 375 | '}', |
||
| 376 | '$1$3', |
||
| 377 | '$1.$3' |
||
| 378 | ), |
||
| 379 | $input); |
||
| 380 | } |
||
| 381 | } |
||
| 382 |
In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code:
Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: