Issues (175)

Security Analysis    no request data  

This project does not seem to handle request data directly as such no vulnerable execution paths were found.

  Cross-Site Scripting
Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.
  File Exposure
File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.
  File Manipulation
File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.
  Object Injection
Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.
  Code Injection
Code Injection enables an attacker to execute arbitrary code on the server.
  Response Splitting
Response Splitting can be used to send arbitrary responses.
  File Inclusion
File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.
  Command Injection
Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.
  SQL Injection
SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.
  XPath Injection
XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.
  LDAP Injection
LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.
  Header Injection
  Other Vulnerability
This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.
  Regex Injection
Regex Injection enables an attacker to execute arbitrary code in your PHP process.
  XML Injection
XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.
  Variable Injection
Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.
Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

language/english/admin.php (1 issue)

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

1
<?php
2
3
define('_AM_INSTRUCTION_FORMADDCAT', 'Category submission form');
4
define('_AM_INSTRUCTION_FORMEDITCAT', 'Category edit form');
5
define('_AM_INSTRUCTION_FORMADDINSTR', 'Instruction submission form');
6
define('_AM_INSTRUCTION_FORMEDITINSTR', 'Instruction edit form');
7
define('_AM_INSTRUCTION_FORMADDPAGE', 'Page submission form');
8
define('_AM_INSTRUCTION_FORMEDITPAGE', 'Page edit form');
9
define('_AM_INSTRUCTION_FORMDELPAGE', 'Do you really want to delete the page: "%s" ?');
10
define('_AM_INSTRUCTION_FORMDELCAT', 'Do you really want to delete the category: "%s" ?');
11
define('_AM_INSTRUCTION_FORMDELINSTR', 'Do you really want to delete the instruction "%s" , and all its pages  ?');
12
13
// Кнопки формы
14
define('_AM_INSTR_SAVEFORM', 'Save');
15
//
16
//Try again
17
define('_AM_INSTR_TRY_AGAIN', 'Please, try again');
18
19
// Элементы форм
20
define('_AM_INSTRUCTION_TITLEC', 'Title:');
21
define('_AM_INSTRUCTION_DSCC', 'Description:');
22
define('_AM_INSTRUCTION_PCATC', 'Parent category:');
23
define('_AM_INSTRUCTION_PPAGEC', 'Parent page:');
24
define('_AM_INSTRUCTION_WEIGHTC', 'Weight:');
25
define('_AM_INSTRUCTION_CATC', 'Category:');
26
define('_AM_INSTRUCTION_ACTIVEC', 'Active:');
27
define('_AM_INSTRUCTION_HOMETEXTC', 'Main text:');
28
define('_AM_INSTRUCTION_FOOTNOTEC', 'Reference:');
29
define('_AM_INSTRUCTION_DESCRIPTIONC', 'Description:');
30
define('_AM_INSTRUCTION_METAKEYWORDSC', 'Meta keywords:');
31
define('_AM_INSTRUCTION_METADESCRIPTIONC', 'Meta description:');
32
define('_AM_INSTR_DOSMILEY', 'Allow smileys');
33
define('_AM_INSTR_DOHTML', 'Allow HTML tags');
34
define('_AM_INSTR_DOAUTOWRAP', 'Move lines automatically');
35
define('_AM_INSTR_DOXCODE', 'Allow BB-codes');
36
define('_AM_INSTR_PAGETYPEC', 'Page type:');
37
define('_AM_INSTR_PAGETYPEC_DESC', 'Tree leaf - a Page is displayed like a leaf of a instruction tree  with no link to it. <br>This is a general page.');
38
39
// Описание элементов форм
40
define('_AM_INSTRUCTION_FOOTNOTE_DSC', 'Reference is in the bottom of a page. <br>Should be divided with "|".');
41
42
define('_AM_INSTRUCTION_TITLE', 'Title');
43
define('_AM_INSTRUCTION_WEIGHT', 'Weight');
44
define('_AM_INSTR_INSTRS', 'Instructions');
45
define('_AM_INSTR_LISTALLCATS', 'List of all instructions');
46
define('_AM_INSTRUCTION_ACTION', 'Action');
47
define('_AM_INSTRUCTION_DEL', 'Delete');
48
define('_AM_INSTR_NODELCAT', 'Failed to delete (the category is not empty or child categories exist)');
49
define('_AM_INSTR_NODELPAGE', 'Failed to delete (child pages exist)');
50
define('_AM_INSTR_VIEWINSTR', 'Show instructions');
51
define('_AM_INSTR_NOVIEWINSTR', 'No instructions');
52
define('_AM_INSTRUCTION_DSC', 'Description');
53
define('_AM_INSTRUCTION_CAT', 'Category');
54
define('_AM_INSTRUCTION_PAGES', 'Pages');
55
define('_AM_INSTRUCTION_PPAGES', 'Pages');
56
57
//
58
define('_AM_INSTRUCTION_LISTPAGESININSTR', 'List of pages in the instruction "%s"');
59
define('_AM_INSTR_LISTINSTRINCAT', 'List of instructions in the category "%s"');
60
define('_AM_INSTR_LISTINSTRALL', 'List of all instructions');
61
62
//
63
define('_AM_INSTRUCTION_DISPLAY', 'Show');
64
define('_AM_INSTRUCTION_LOCK', 'Unblock');
65
define('_AM_INSTRUCTION_UNLOCK', 'Unblock');
66
define('_AM_INSTRUCTION_ADDPAGE', 'Submit a page');
67
define('_AM_INSTRUCTION_ADDSUBPAGE', 'Submit a subpage');
68
define('_AM_INSTRUCTION_ADDINSTR', 'Submit an instruction');
69
define('_AM_INSTRUCTION_EDIT', 'Edit');
70
define('_AM_INSTR_DISPLAY_NOCACHE', 'Do not cache to view');
71
72
// Breadcrumd
73
define('_AM_INSTRUCTION_BC_LISTINSTR', 'List of instructions');
74
define('_AM_INSTRUCTION_BC_EDITINSTR', 'Edit instruction');
75
define('_AM_INSTRUCTION_BC_DELINSTR', 'Delete instruction');
76
define('_AM_INSTRUCTION_BC_LISTPAGE', 'List of pages');
77
define('_AM_INSTRUCTION_BC_EDITPAGE', 'Page edit');
78
define('_AM_INSTRUCTION_BC_DELPAGE', 'Page removal');
79
define('_AM_INSTRUCTION_BC_PERM', 'Permissions');
80
81
// Права
82
define('_AM_INSTRUCTION_PERM_VIEW', 'Permissions to view');
83
define('_AM_INSTRUCTION_PERM_VIEW_DSC', 'Groups allowed to read instructions from categories.');
84
define('_AM_INSTRUCTION_PERM_SUBMIT', 'Permissions to submit');
85
define('_AM_INSTRUCTION_PERM_SUBMIT_DSC', 'Groups allowed to submit instructions in categories.');
86
define('_AM_INSTRUCTION_PERM_EDIT', 'Permissions to edit');
87
define('_AM_INSTRUCTION_PERM_EDIT_DSC', 'Groups allowed to edit instructions from categories.');
88
89
// Типы страницы
90
define('_AM_INSTR_PT_0', 'Tree leaf');
91
define('_AM_INSTR_PT_1', 'Page');
92
93
// Редиректы
94
define('_AM_INSTRUCTION_NEWCATADDED', 'New category is saved successfully.');
95
define('_AM_INSTRUCTION_INSTRADDED', 'New instruction is submitted successfully.');
96
define('_AM_INSTRUCTION_INSTRMODIFY', 'The instruction is edited successfully.');
97
define('_AM_INSTRUCTION_INSTRDELETED', 'The instruction is deleted successfully.');
98
define('_AM_INSTRUCTION_PAGEADDED', 'New page is submitted successfully.');
99
define('_AM_INSTRUCTION_PAGEDELETED', 'The page is deleted successfully.');
100
define('_AM_INSTRUCTION_PAGEMODIFY', 'The page is edited successfully.');
101
define('_AM_INSTRUCTION_PAGESUPDATE', 'Pages updated.');
102
define('_AM_INSTRUCTION_CATDELETED', 'The category is deleted successfully.');
103
104
// Ошибки
105
define('_AM_INSTR_ERR_TITLE', 'Error: Title is empty!');
106
define('_AM_INSTR_ERR_HOMETEXT', 'Error: Main text is empty!');
107
define('_AM_INSTR_ERR_DESCRIPTION', 'Error: Description is empty!');
108
109
define('_AM_INSTRUCTION_ERR_WEIGHT', 'Error: Weight not specified!');
110
define('_AM_INSTRUCTION_ERR_CAT', 'Error: Category not specified!');
111
define('_AM_INSTRUCTION_ERR_PCAT', 'Error: Parent category is specified wrong!');
112
define('_AM_INSTRUCTION_ERR_INSTR', 'Error: You have not chosen an instruction to submit to');
113
define('_AM_INSTRUCTION_ERR_DELPAGE', 'Error: Failed to delete the page!');
114
define('_AM_INSTRUCTION_ERR_DELINSTR', 'Error: Failed to delete the instruction!');
115
define('_AM_INSTRUCTION_ERR_PPAGE', 'Error: Parent page is specified wrong!');
116
define('_AM_INSTRUCTION_ERR_DELCAT', 'Error: Failed to delete the category!');
117
define('_AM_INSTRUCTION_ERR_CATNOTEMPTY', 'Error: There are instructions in the category!');
118
define('_AM_INSTRUCTION_ERR_CATNOTSELECT', 'Error: Category not chosen!');
119
define('_AM_INSTRUCTION_ERR_CATCHILDREN', 'Error: The category has child categories!');
120
121
define('_AM_INSTRUCTION_BADREQUEST', 'Wrong query...');
122
//define('_AM_MODULEADMIN_ABOUT_BY', 'by ');
0 ignored issues
show
Unused Code Comprehensibility introduced by
68% of this comment could be valid code. Did you maybe forget this after debugging?

Sometimes obsolete code just ends up commented out instead of removed. In this case it is better to remove the code once you have checked you do not need it.

The code might also have been commented out for debugging purposes. In this case it is vital that someone uncomments it again or your project may behave in very unexpected ways in production.

This check looks for comments that seem to be mostly valid code and reports them.

Loading history...
123
//define('_AM_MODULEADMIN_ABOUT_AMOUNT', 'Amount');
124
//define('_AM_MODULEADMIN_ABOUT_AMOUNT_TTL', 'Please enter USD amount e.g. $25.00');
125
//define('_AM_MODULEADMIN_ABOUT_AMOUNT_CURRENCY', 'USD');
126
//define('_AM_MODULEADMIN_ABOUT_AMOUNT_SUGGESTED', '25.00');
127
//define('_AM_MODULEADMIN_ABOUT_AMOUNT_PATTERN', '\\$?[0-9]+(,[0-9]{3})*(\\.[0-9]{0,2})?$');
128
//define('_AM_MODULEADMIN_ABOUT_DONATE_IMG_ALT', 'Donate using PayPal or a major credit card online!');
129
130
define('_AM_INSTRUCTION_TOTAL', 'Total in the module');
131
define('_AM_INSTRUCTION_TOTAL_CAT', 'Total Categories');
132
define('_AM_INSTRUCTION_TOTAL_INSTR', 'Total Instructions');
133
define('_AM_INSTRUCTION_TOTAL_PAGE', 'Total pages');
134
135
define('_AM_INSTRUCTION_UPGRADEFAILED0', "Update failed - couldn't rename field '%s'");
136
define('_AM_INSTRUCTION_UPGRADEFAILED1', "Update failed - couldn't add new fields");
137
define('_AM_INSTRUCTION_UPGRADEFAILED2', "Update failed - couldn't rename table '%s'");
138
define('_AM_INSTRUCTION_ERROR_COLUMN', 'Could not create column in database : %s');
139
define('_AM_INSTRUCTION_ERROR_BAD_XOOPS', 'This module requires XOOPS %s+ (%s installed)');
140
define('_AM_INSTRUCTION_ERROR_BAD_PHP', 'This module requires PHP version %s+ (%s installed)');
141
define('_AM_INSTRUCTION_ERROR_TAG_REMOVAL', 'Could not remove tags from Tag Module');
142
143
define('_AM_INSTRUCTION_FOLDERS_DELETED_OK', 'Upload Folders have been deleted');
144
145
// Error Msgs
146
define('_AM_INSTRUCTION_ERROR_BAD_DEL_PATH', 'Could not delete %s directory');
147
define('_AM_INSTRUCTION_ERROR_BAD_REMOVE', 'Could not delete %s');
148
define('_AM_INSTRUCTION_ERROR_NO_PLUGIN', 'Could not load plugin');
149