This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php declare(strict_types=1); |
||||||
2 | |||||||
3 | namespace XoopsModules\Marquee; |
||||||
4 | |||||||
5 | use Xmf\Request; |
||||||
6 | |||||||
7 | /** @var Helper $helper */ |
||||||
8 | |||||||
9 | /** |
||||||
10 | * Class Utility |
||||||
11 | */ |
||||||
12 | class Utility extends Common\SysUtility |
||||||
13 | { |
||||||
14 | //--------------- Custom module methods ----------------------------- |
||||||
15 | public const MODULE_NAME = 'marquee'; |
||||||
16 | |||||||
17 | /** |
||||||
18 | * Access the only instance of this class |
||||||
19 | * |
||||||
20 | * @return \XoopsModules\Marquee\Utility |
||||||
21 | * |
||||||
22 | * @static |
||||||
23 | * @staticvar object |
||||||
24 | */ |
||||||
25 | public static function getInstance() |
||||||
26 | { |
||||||
27 | static $instance; |
||||||
28 | if (null === $instance) { |
||||||
29 | $instance = new static(); |
||||||
30 | } |
||||||
31 | |||||||
32 | return $instance; |
||||||
33 | } |
||||||
34 | |||||||
35 | /** |
||||||
36 | * Retrieve an editor according to the module's option "form_options" |
||||||
37 | * |
||||||
38 | * @param string $caption Caption to give to the editor |
||||||
39 | * @param string $name Editor's name |
||||||
40 | * @param string $value Editor's value |
||||||
41 | * @param string $width Editor's width |
||||||
42 | * @param string $height Editor's height |
||||||
43 | * @param string $supplemental |
||||||
44 | * |
||||||
45 | * @return \XoopsFormDhtmlTextArea|\XoopsFormEditor The editor to use |
||||||
46 | */ |
||||||
47 | public static function getWysiwygForm( |
||||||
48 | $caption, |
||||||
49 | $name, |
||||||
50 | $value = '', |
||||||
51 | $width = '100%', |
||||||
0 ignored issues
–
show
|
|||||||
52 | $height = '400px', |
||||||
0 ignored issues
–
show
The parameter
$height is not used and could be removed.
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
This check looks for parameters that have been defined for a function or method, but which are not used in the method body. ![]() |
|||||||
53 | $supplemental = '' |
||||||
0 ignored issues
–
show
The parameter
$supplemental is not used and could be removed.
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
This check looks for parameters that have been defined for a function or method, but which are not used in the method body. ![]() |
|||||||
54 | ) { |
||||||
55 | $helper = Helper::getInstance(); |
||||||
56 | if (\class_exists('XoopsFormEditor')) { |
||||||
57 | $options['name'] = $name; |
||||||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||||||
58 | $options['value'] = $value; |
||||||
59 | $options['rows'] = 35; |
||||||
60 | $options['cols'] = '100%'; |
||||||
61 | $options['width'] = '100%'; |
||||||
62 | $options['height'] = '400px'; |
||||||
63 | $editor = new \XoopsFormEditor($caption, $helper->getConfig('form_options'), $options, $nohtml = false, $onfailure = 'textarea'); |
||||||
64 | } else { |
||||||
65 | $editor = new \XoopsFormDhtmlTextArea($caption, $name, $value); |
||||||
66 | } |
||||||
67 | |||||||
68 | return $editor; |
||||||
69 | } |
||||||
70 | |||||||
71 | /** |
||||||
72 | * Create (in a link) a javascript confirmation's box |
||||||
73 | * |
||||||
74 | * @param string $message Message to display |
||||||
75 | * @param bool $form Is this a confirmation for a form ? |
||||||
76 | * |
||||||
77 | * @return string the javascript code to insert in the link (or in the form) |
||||||
78 | */ |
||||||
79 | public static function javascriptLinkConfirm($message, $form = false) |
||||||
80 | { |
||||||
81 | if (!$form) { |
||||||
82 | return "onclick=\"javascript:return confirm('" . \str_replace("'", ' ', $message) . "')\""; |
||||||
83 | } |
||||||
84 | |||||||
85 | return "onSubmit=\"javascript:return confirm('" . \str_replace("'", ' ', $message) . "')\""; |
||||||
86 | } |
||||||
87 | |||||||
88 | /** |
||||||
89 | * Redirect user with a message |
||||||
90 | * |
||||||
91 | * @param string $message message to display |
||||||
92 | * @param string $url The place where to go |
||||||
93 | * @param mixed $time |
||||||
94 | */ |
||||||
95 | public static function redirect($message = '', $url = 'index.php', $time = 2): void |
||||||
96 | { |
||||||
97 | \redirect_header($url, $time, $message); |
||||||
98 | } |
||||||
99 | |||||||
100 | /** |
||||||
101 | * Internal function used to get the handler of the current module |
||||||
102 | * @return \XoopsModule The module |
||||||
103 | * @deprecated use $helper->getModule(); |
||||||
104 | */ |
||||||
105 | protected static function getModule() |
||||||
106 | { |
||||||
107 | $moduleDirName = \basename(\dirname(__DIR__)); |
||||||
108 | static $mymodule; |
||||||
109 | if (null === $mymodule) { |
||||||
110 | global $xoopsModule; |
||||||
111 | if (null !== $xoopsModule && \is_object($xoopsModule) && $moduleDirName == $xoopsModule->getVar('dirname')) { |
||||||
112 | $mymodule = $xoopsModule; |
||||||
113 | } else { |
||||||
114 | $moduleHandler = \xoops_getHandler('module'); |
||||||
115 | $mymodule = $moduleHandler->getByDirname($moduleDirName); |
||||||
0 ignored issues
–
show
The method
getByDirname() does not exist on XoopsObjectHandler . It seems like you code against a sub-type of XoopsObjectHandler such as XoopsModuleHandler or XoopsPersistableObjectHandler .
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
![]() |
|||||||
116 | } |
||||||
117 | } |
||||||
118 | |||||||
119 | return $mymodule; |
||||||
120 | } |
||||||
121 | |||||||
122 | /** |
||||||
123 | * This function indicates if the current Xoops version needs to add asterisks to required fields in forms |
||||||
124 | * |
||||||
125 | * @return bool Yes = we need to add them, false = no |
||||||
126 | */ |
||||||
127 | public static function needsAsterisk() |
||||||
128 | { |
||||||
129 | if (false === mb_stripos(\XOOPS_VERSION, 'legacy')) { |
||||||
130 | $xv = \xoops_trim(\str_replace('XOOPS ', '', \XOOPS_VERSION)); |
||||||
131 | if ((int)mb_substr($xv, 4, 2) >= 17) { |
||||||
132 | return false; |
||||||
133 | } |
||||||
134 | } |
||||||
135 | |||||||
136 | return true; |
||||||
137 | } |
||||||
138 | |||||||
139 | /** |
||||||
140 | * Mark the mandatory fields of a form with a star |
||||||
141 | * |
||||||
142 | * @param \XoopsThemeForm $sform The form to modify |
||||||
143 | * |
||||||
144 | * @return \XoopsThemeForm The modified form |
||||||
145 | * @internal param string $caracter The character to use to mark fields |
||||||
146 | */ |
||||||
147 | public static function formMarkRequiredFields($sform) |
||||||
148 | { |
||||||
149 | $required = $elements = []; |
||||||
0 ignored issues
–
show
|
|||||||
150 | if (self::needsAsterisk()) { |
||||||
151 | foreach ($sform->getRequired() as $item) { |
||||||
152 | $required[] = $item->_name; |
||||||
153 | } |
||||||
154 | $elements = &$sform->getElements(); |
||||||
155 | foreach ($elements as $i => $iValue) { |
||||||
156 | if (\is_object($iValue) && \in_array($iValue->_name, $required, true)) { |
||||||
157 | $iValue->_caption .= ' *'; |
||||||
158 | } |
||||||
159 | } |
||||||
160 | } |
||||||
161 | |||||||
162 | return $sform; |
||||||
163 | } |
||||||
164 | |||||||
165 | /** |
||||||
166 | * @param $option |
||||||
167 | * @param string $repmodule |
||||||
168 | * @return bool |
||||||
169 | */ |
||||||
170 | public static function getModuleOption($option, $repmodule = 'marquee') |
||||||
171 | { |
||||||
172 | global $xoopsModule; |
||||||
173 | $helper = Helper::getInstance(); |
||||||
174 | static $tbloptions = []; |
||||||
175 | if (\is_array($tbloptions) && \array_key_exists($option, $tbloptions)) { |
||||||
176 | return $tbloptions[$option]; |
||||||
177 | } |
||||||
178 | $retval = false; |
||||||
179 | if (null !== $helper->getModule() |
||||||
180 | && (\is_object($xoopsModule) && $xoopsModule->getVar('dirname') == $repmodule |
||||||
181 | && $xoopsModule->getVar('isactive'))) { |
||||||
182 | if ('' !== $helper->getConfig($option)) { |
||||||
183 | $retval = $helper->getConfig($option); |
||||||
184 | } |
||||||
185 | } else { |
||||||
186 | /** @var \XoopsModuleHandler $moduleHandler */ |
||||||
187 | $moduleHandler = \xoops_getHandler('module'); |
||||||
188 | $module = $moduleHandler->getByDirname($repmodule); |
||||||
189 | /** @var \XoopsConfigHandler $configHandler */ |
||||||
190 | $configHandler = \xoops_getHandler('config'); |
||||||
191 | if ($module) { |
||||||
192 | $moduleConfig = $configHandler->getConfigsByCat(0, $module->getVar('mid')); |
||||||
193 | if (isset($moduleConfig[$option])) { |
||||||
194 | $retval = $moduleConfig[$option]; |
||||||
195 | } |
||||||
196 | } |
||||||
197 | } |
||||||
198 | $tbloptions[$option] = $retval; |
||||||
199 | |||||||
200 | return $retval; |
||||||
201 | } |
||||||
202 | |||||||
203 | /** |
||||||
204 | * Verify if the current "user" is a bot or not |
||||||
205 | * |
||||||
206 | * If you have a problem with this function, insert the folowing code just before the line if (\Xmf\Request::hasVar('news_cache_bot', 'SESSION'))) { : |
||||||
207 | * return false; |
||||||
208 | * |
||||||
209 | * @author Hervé Thouzard (https://www.herve-thouzard.com) |
||||||
210 | * @copyright (c) Hervé Thouzard |
||||||
211 | */ |
||||||
212 | public static function isBot() |
||||||
213 | { |
||||||
214 | if (Request::hasVar('marquee_cache_bot', 'SESSION')) { |
||||||
215 | return $_SESSION['marquee_cache_bot']; |
||||||
216 | } |
||||||
217 | // Add here every bot you know separated by a pipe | (not matter with the upper or lower cases) |
||||||
218 | // If you want to see the result for yourself, add your navigator's user agent at the end (mozilla for example) |
||||||
219 | $botlist = 'AbachoBOT|Arachnoidea|ASPSeek|Atomz|cosmos|crawl25-public.alexa.com|CrawlerBoy Pinpoint.com|Crawler|DeepIndex|EchO!|exabot|Excalibur Internet Spider|FAST-WebCrawler|Fluffy the spider|GAIS Robot/1.0B2|GaisLab data gatherer|Google|Googlebot-Image|googlebot|Gulliver|ia_archiver|Infoseek|Links2Go|Lycos_Spider_(modspider)|Lycos_Spider_(T-Rex)|MantraAgent|Mata Hari|Mercator|MicrosoftPrototypeCrawler|[email protected]|MSNBOT|NEC Research Agent|NetMechanic|Nokia-WAPToolkit|nttdirectory_robot|Openfind|Oracle Ultra Search|PicoSearch|Pompos|Scooter|Slider_Search_v1-de|Slurp|Slurp.so|SlySearch|Spider|Spinne|SurferF3|Surfnomore Spider|suzuran|teomaagent1|TurnitinBot|Ultraseek|VoilaBot|vspider|W3C_Validator|Web Link Validator|WebTrends|WebZIP|whatUseek_winona|WISEbot|Xenu Link Sleuth|ZyBorg'; |
||||||
220 | $botlist = \mb_strtoupper($botlist); |
||||||
221 | $currentagent = \mb_strtoupper(\xoops_getenv('HTTP_USER_AGENT')); |
||||||
222 | $retval = false; |
||||||
223 | $botarray = \explode('|', $botlist); |
||||||
224 | foreach ($botarray as $onebot) { |
||||||
225 | if (false !== \mb_strpos($currentagent, $onebot)) { |
||||||
226 | $retval = true; |
||||||
227 | break; |
||||||
228 | } |
||||||
229 | } |
||||||
230 | $_SESSION['marquee_cache_bot'] = $retval; |
||||||
231 | |||||||
232 | return $retval; |
||||||
233 | } |
||||||
234 | |||||||
235 | /** |
||||||
236 | * Escape a string so that it can be included in a javascript string |
||||||
237 | * |
||||||
238 | * @param string $string |
||||||
239 | * |
||||||
240 | * @return mixed |
||||||
241 | */ |
||||||
242 | public static function javascriptEscape($string) |
||||||
243 | { |
||||||
244 | return \str_replace("'", "\\'", $string); |
||||||
245 | } |
||||||
246 | } |
||||||
247 |
This check looks for parameters that have been defined for a function or method, but which are not used in the method body.