Issues in go2.php (master) - Issues in master - mambax7/mastopgo2 - Measure and Improve Code Quality continuously with Scrutinizer

Issues (132)

Security Analysis not enabled

File Inclusion

File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.

Regex Injection

Regex Injection enables an attacker to execute arbitrary code in your PHP process.

SQL Injection

SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.

Response Splitting

Response Splitting can be used to send arbitrary responses.

File Manipulation

File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.

Object Injection

Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.

File Exposure

File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.

XML Injection

XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.

Code Injection

Code Injection enables an attacker to execute arbitrary code on the server.

Variable Injection

Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.

XPath Injection

XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.

Other Vulnerability

This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.

Command Injection

Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.

LDAP Injection

LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.

Cross-Site Scripting

Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.

Header Injection

Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

admin/go2.php (4 issues)

Severity

<?php
### =============================================================
### Mastop InfoDigital - Paixão por Internet
### =============================================================
### Arquivo para Manipulação de Destaques
### =============================================================
### Developer: Fernando Santos (topet05), [email protected]
### Copyright: Mastop InfoDigital © 2003-2007
### -------------------------------------------------------------
### www.mastop.com.br
### =============================================================
###
### =============================================================
use Xmf\Request;

require_once __DIR__ . '/admin_header.php';
xoops_cp_header();

$op = Request::getString('op', 'listar', 'GET');
if (isset($_GET)) {
    foreach ($_GET as $k => $v) {
        ${$k} = $v;
    }
}

if (isset($_POST)) {
    foreach ($_POST as $k => $v) {
        ${$k} = $v;
    }
}

//$sec_classe = mgo_getClass(MGO_MOD_TABELA0);
$sec_classe = new \XoopsModules\Mastopgo2\Section();
$sec_todos  = $sec_classe->pegaTudo();
$sec_select = [];
if ($sec_todos) {
    foreach ($sec_todos as $v) {
        $sec_select[$v->getVar($v->id)] = $v->getVar('sec_30_nome');
    }
}

if (Request::hasVar('group_action', 'POST')) {
    switch (Request::getString('group_action', '', 'POST')) {
        case 'group_del':
            if (is_array(Request::getArray('checks', '', 'POST'))) {

                foreach (Request::getArray('checks', '', 'POST') as $k => $v) {
                    //                    $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $k);
                    $go2_classe = new \XoopsModules\Mastopgo2\Go2($k);
                    $go2_classe->delete();
                }
            }
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
            break;
        case 'zera_count':
            if (is_array(Request::getArray('checks', '', 'POST'))) {

                foreach (Request::getArray('checks', '', 'POST') as $k => $v) {
                    //                    $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $k);
                    $go2_classe = new \XoopsModules\Mastopgo2\Go2($k);
                    $go2_classe->setVar('go2_10_acessos', 0);
                    $go2_classe->store();
                }
            }
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
            break;
        case 'desativa':
            if (is_array(Request::getArray('checks', '', 'POST'))) {

                foreach (Request::getArray('checks', '', 'POST') as $k => $v) {
                    //                    $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $k);
                    $go2_classe = new \XoopsModules\Mastopgo2\Go2($k);
                    $go2_classe->desativar();
                }
            }
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
            break;
        case 'ativa':
        default:
            if (is_array(Request::getArray('checks', '', 'POST'))) {

                foreach (Request::getArray('checks', '', 'POST') as $k => $v) {
                    //                    $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $k);
                    $go2_classe = new \XoopsModules\Mastopgo2\Go2($k);
                    $go2_classe->ativar();
                }
            }
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
            break;
    }
}

switch ($op) {
    case 'ativar':
        $go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
        //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
        $go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
        if (empty($go2_10_id) || '' === $go2_classe->getVar('go2_10_id')) {
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?listar', 3, MGO_ADM_404);
        }
        $go2_classe->ativar();
        redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
        break;
    case 'desativar':
        $go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
        //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
        $go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
        if (empty($go2_10_id) || '' === $go2_classe->getVar('go2_10_id')) {
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?listar', 1, MGO_ADM_404);
        }
        $go2_classe->desativar();
        redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 1, MGO_ADM_SUCESS_UPD);
        break;
    case 'dstac_editar':
        $go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
        //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
        $go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
        if (empty($go2_10_id) || '' === $go2_classe->getVar('go2_10_id')) {
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_404);
        }
        $form['titulo'] = MGO_ADM_GO2_EDIT;
        $form['op']     = 'salvar';
        require_once XOOPS_ROOT_PATH . '/modules/' . MGO_MOD_DIR . '/include/go2.form.inc.php';
        $go2_form->display();
        break;
    case 'dstac_deletar':
        $go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
        //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
        $go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
        if (empty($go2_10_id) || '' === $go2_classe->getVar('go2_10_id')) {
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_404);
        }
        xoops_confirm(['op' => 'dstac_deletar_ok', 'go2_10_id' => $go2_10_id], 'go2.php', sprintf(MGO_ADM_GO2_CONFIRMA_DEL, $go2_10_id, $go2_classe->getVar('go2_30_nome')));
        break;
    case 'dstac_deletar_ok':
        $go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
        //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
        $go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
        if (empty($go2_10_id) || '' === $go2_classe->getVar('go2_10_id')) {
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?listar', 3, MGO_ADM_404);
        }
        $go2_classe->delete();
        redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_DEL);
        break;
    case 'novo':
        //        $go2_classe     = mgo_getClass(MGO_MOD_TABELA1);
        $go2_classe     = new \XoopsModules\Mastopgo2\Go2();
        $form['titulo'] = MGO_ADM_GO2_NEW;
        $form['op']     = 'salvar';
        require_once XOOPS_ROOT_PATH . '/modules/' . MGO_MOD_DIR . '/include/go2.form.inc.php';
        $go2_form->display();
        break;
    case 'salvar':
        if (empty($go2_10_id)) {
            //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1);
            $go2_classe = new \XoopsModules\Mastopgo2\Go2();
        } else {
            //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
            $go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
        }
        $go2_classe->setVar('sec_10_id', $sec_10_id);
        $go2_classe->setVar('go2_30_nome', $go2_30_nome);
        $go2_classe->setVar('go2_30_link', $go2_30_link);
        $go2_classe->setVar('go2_11_target', $go2_11_target);
        $go2_classe->setVar('go2_30_imagem', $go2_30_imagem);
        if ('' !== $go2_classe->getVar('go2_10_id')) {
            $msg = 'UPD';
        } else {
            $msg = 'ADD';
        }
        $go2_classe->setVar('go2_12_ativo', $go2_12_ativo);
        $erro = '';
        if (!$go2_classe->store()) {
            ob_start();
            xoops_error(MGO_ADM_DB_ERRO);
            $erro .= ob_get_clean();
        } else {
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, constant('MGO_ADM_SUCESS_' . $msg));
        }

    // no break
    case 'listar_dstac':
        echo !empty($erro) ? $erro . '<br>' : '';
        //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1);
        $go2_classe = new \XoopsModules\Mastopgo2\Go2();
        $go2_10_id  = empty($go2_10_id) ? null : $go2_10_id;
        if (Request::hasVar('sec_10_id')) {
            $sec_10_id                        = Request::getInt('sec_10_id');
            $_SESSION['listar_sec_sec_10_id'] = Request::getInt('sec_10_id');
            //            $sec_classe                       = mgo_getClass(MGO_MOD_TABELA0, $sec_10_id);
            $sec_classe = new \XoopsModules\Mastopgo2\Section($sec_10_id);
        } elseif (!empty($_SESSION['listar_sec_sec_10_id'])) {
            $sec_10_id = $_SESSION['listar_sec_sec_10_id'];
            //            $sec_classe = mgo_getClass(MGO_MOD_TABELA0, $sec_10_id);
            $sec_classe = new \XoopsModules\Mastopgo2\Section($sec_10_id);

        } else {
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_404);
        }
        if ('' === $sec_classe->getVar('sec_10_id')) {
            redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_404);
        }

        // Opções
        $c['op']        = 'listar_dstac';
        $c['form']      = 0; // 0 para exibir os registros em modo visualização, 1 em modo edição
        $c['checks']    = 1;
        $c['print']     = 0;
        $c['group_del'] = 1;

        $c['precrit']['campo'][1] = 'sec_10_id';
        $c['precrit']['valor'][1] = $sec_10_id;

        $c['nome'][1]    = 'go2_10_id';
        $c['rotulo'][1]  = MGO_ADM_ID;
        $c['tipo'][1]    = 'text';
        $c['tamanho'][1] = 5;
        $c['show'][1]    = '$reg->getVar($reg->id)';

        $c['nome'][2]   = 'go2_30_imagem';
        $c['rotulo'][2] = MGO_ADM_IMAGEM;
        $c['tipo'][2]   = 'none';
        $c['nosort'][2] = 1;
        $c['show'][2]   = '"<img src=\'".$reg->pegaImagem()."\' style=\'max-width:200px\'>"';

        $c['nome'][3]   = 'go2_30_nome';
        $c['rotulo'][3] = MGO_ADM_GO2_30_NOME;
        $c['tipo'][3]   = 'text';

        $c['nome'][4]   = 'go2_30_link';
        $c['rotulo'][4] = MGO_ADM_GO2_30_LINK;
        $c['tipo'][4]   = 'text';
        //        $c['show'][4]   = '$reg->pegaLink()';
        $c['show'][4] = '$reg->pegaLink()';

        $c['nome'][5]   = 'go2_10_acessos';
        $c['rotulo'][5] = MGO_ADM_GO2_10_ACESSOS;
        $c['tipo'][5]   = 'none';

        $c['nome'][6]   = 'go2_12_ativo';
        $c['rotulo'][6] = MGO_ADM_ATIVO;
        $c['tipo'][6]   = 'simnao';
        $c['show'][6]   = '($reg->getVar("go2_12_ativo") == 0) ? "<a href=\'go2.php?op=ativar&go2_10_id=".$reg->getVar($reg->id)."\'><img src='
                          . $pathIcon16
                          . '/green_off.gif align=\'absmiddle\'></a> <img src='
                          . $pathIcon16
                          . '/red.gif align=\'absmiddle\'>" : "<img src='
                          . $pathIcon16
                          . '/green.gif align=\'absmiddle\'> <a href=\'go2.php?op=desativar&go2_10_id=".$reg->getVar($reg->id)."\'><img src='
                          . $pathIcon16
                          . '/red_off.gif align=\'absmiddle\'></a>"';

        $c['botoes'][1]['link']   = XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=dstac_editar';
        $c['botoes'][1]['imagem'] = $pathIcon16 . '/edit.png';
        $c['botoes'][1]['texto']  = _EDIT;

        $c['botoes'][2]['link']   = XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=dstac_deletar';
        $c['botoes'][2]['imagem'] = $pathIcon16 . '/delete.png';
        $c['botoes'][2]['texto']  = _DELETE;

        $c['group_action'][1]['texto'] = MGO_ADM_GO2_ATIVA_SEL;
        $c['group_action'][1]['valor'] = 'ativa';
        $c['group_action'][2]['texto'] = MGO_ADM_GO2_DESATIVA_SEL;
        $c['group_action'][2]['valor'] = 'desativa';
        $c['group_action'][3]['texto'] = MGO_ADM_GO2_ZERA_COUNT;
        $c['group_action'][3]['valor'] = 'zera_count';

        // Tradução
        $c['lang']['titulo'] = MGO_ADM_GO2_TITULO . " -> <span style='color:#ff0000'>" . $sec_classe->getVar('sec_30_nome') . '</span>';
        echo $go2_classe->administracao(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php', $c);
        //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
        $go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);

        $form['titulo'] = (empty($go2_10_id) ? MGO_ADM_GO2_NEW : MGO_ADM_GO2_EDIT);
        $form['op']     = 'salvar';

        $sec_classe->setVar('sec_10_id', 0);
        require_once XOOPS_ROOT_PATH . '/modules/' . MGO_MOD_DIR . '/include/go2.form.inc.php';
        $go2_form->display();
        break;
    case 'listar':
    default:
        //mgo_adm_menu();
        $adminObject->displayNavigation(basename(__FILE__));
        echo !empty($erro) ? $erro . '<br>' : '';
        //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1);
        $go2_classe = new \XoopsModules\Mastopgo2\Go2();
        $go2_10_id  = empty($go2_10_id) ? null : $go2_10_id;

        // Opções
        $c['op']        = 'listar';
        $c['form']      = 0; // 0 para exibir os registros em modo visualização, 1 em modo edição
        $c['checks']    = 1;
        $c['print']     = 0;
        $c['group_del'] = 1;

        $c['nome'][1]    = 'go2_10_id';
        $c['rotulo'][1]  = MGO_ADM_ID;
        $c['tipo'][1]    = 'text';
        $c['tamanho'][1] = 5;
        $c['show'][1]    = '$reg->getVar($reg->id)';

        $c['nome'][2]   = 'go2_30_imagem';
        $c['rotulo'][2] = MGO_ADM_IMAGEM;
        $c['tipo'][2]   = 'none';
        $c['nosort'][2] = 1;
        $c['show'][2]   = '"<img src=\'".$reg->pegaImagem()."\' style=\'max-width:200px\'>"';

        $c['nome'][3]    = 'sec_10_id';
        $c['rotulo'][3]  = MGO_ADM_SECTION;
        $c['tipo'][3]    = 'select';
        $c['options'][3] = $sec_select;

        $c['nome'][4]   = 'go2_30_nome';
        $c['rotulo'][4] = MGO_ADM_GO2_30_NOME;
        $c['tipo'][4]   = 'text';

        $c['nome'][5]   = 'go2_30_link';
        $c['rotulo'][5] = MGO_ADM_GO2_30_LINK;
        $c['tipo'][5]   = 'text';
        //        $c['show'][5]   = '$reg->pegaLink()';
        $c['show'][5] = '$reg->pegaLink()';

        $c['nome'][6]   = 'go2_10_acessos';
        $c['rotulo'][6] = MGO_ADM_GO2_10_ACESSOS;
        $c['tipo'][6]   = 'none';

        $c['nome'][7]   = 'go2_12_ativo';
        $c['rotulo'][7] = MGO_ADM_ATIVO;
        $c['tipo'][7]   = 'simnao';
        $c['show'][7]   = '($reg->getVar("go2_12_ativo") == 0) ? "<a href=\'go2.php?op=ativar&go2_10_id=".$reg->getVar($reg->id)."\'><img src='
                          . $pathIcon16
                          . '/green_off.gif align=\'absmiddle\'></a> <img src='
                          . $pathIcon16
                          . '/red.gif align=\'absmiddle\'>" : "<img src='
                          . $pathIcon16
                          . '/green.gif align=\'absmiddle\'> <a href=\'go2.php?op=desativar&go2_10_id=".$reg->getVar($reg->id)."\'><img src='
                          . $pathIcon16
                          . '/red_off.gif align=\'absmiddle\'></a>"';

        $c['botoes'][1]['link']   = XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=dstac_editar';
        $c['botoes'][1]['imagem'] = $pathIcon16 . '/edit.png';
        $c['botoes'][1]['texto']  = _EDIT;

        $c['botoes'][2]['link']   = XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=dstac_deletar';
        $c['botoes'][2]['imagem'] = $pathIcon16 . '/delete.png';
        $c['botoes'][2]['texto']  = _DELETE;

        $c['group_action'][1]['texto'] = MGO_ADM_GO2_ATIVA_SEL;
        $c['group_action'][1]['valor'] = 'ativa';
        $c['group_action'][2]['texto'] = MGO_ADM_GO2_DESATIVA_SEL;
        $c['group_action'][2]['valor'] = 'desativa';
        $c['group_action'][3]['texto'] = MGO_ADM_GO2_ZERA_COUNT;
        $c['group_action'][3]['valor'] = 'zera_count';

        // Tradução
        $c['lang']['titulo'] = MGO_ADM_GO2_TITULO;
        echo $go2_classe->administracao(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php', $c);
        //        $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
        $go2_classe     = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
        $form['titulo'] = (empty($go2_10_id) ? MGO_ADM_GO2_NEW : MGO_ADM_GO2_EDIT);
        $form['op']     = 'salvar';
        require_once XOOPS_ROOT_PATH . '/modules/' . MGO_MOD_DIR . '/include/go2.form.inc.php';
        $go2_form->display();
        break;
}

echo "<div align='center' style='margin-top:10px'><a target='_blank' href='http://www.mastop.com.br/conteudo/open-source/mastop-go2-english.mstp'><img src='../assets/images/mgo2_footer.gif'></a><br><br></div>";
require_once __DIR__ . '/admin_footer.php';


1			<?php
2			### =============================================================
3			### Mastop InfoDigital - Paixão por Internet
4			### =============================================================
5			### Arquivo para Manipulação de Destaques
6			### =============================================================
7			### Developer: Fernando Santos (topet05), [email protected]
8			### Copyright: Mastop InfoDigital © 2003-2007
9			### -------------------------------------------------------------
10			### www.mastop.com.br
11			### =============================================================
12			###
13			### =============================================================
14			use Xmf\Request;
15
16			require_once __DIR__ . '/admin_header.php';
17			xoops_cp_header();
18
19			$op = Request::getString('op', 'listar', 'GET');
20			if (isset($_GET)) {
21			foreach ($_GET as $k => $v) {
22			${$k} = $v;
23			}
24			}
25
26			if (isset($_POST)) {
27			foreach ($_POST as $k => $v) {
28			${$k} = $v;
29			}
30			}
31
32			//$sec_classe = mgo_getClass(MGO_MOD_TABELA0);
33			$sec_classe = new \XoopsModules\Mastopgo2\Section();
34			$sec_todos = $sec_classe->pegaTudo();
35			$sec_select = [];
36			if ($sec_todos) {
37			foreach ($sec_todos as $v) {
38			$sec_select[$v->getVar($v->id)] = $v->getVar('sec_30_nome');
39			}
40			}
41
42			if (Request::hasVar('group_action', 'POST')) {
43			switch (Request::getString('group_action', '', 'POST')) {
44			case 'group_del':
45			if (is_array(Request::getArray('checks', '', 'POST'))) {
			0 ignored issues – show introduced 2019-06-10 07:44 UTC by Report Bug Copy Issue Report Show Similar Issues like this The condition `is_array(Xmf\Request::ge...('checks', '', 'POST'))` is always `true`. Loading history...
46			foreach (Request::getArray('checks', '', 'POST') as $k => $v) {
47			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $k);
48			$go2_classe = new \XoopsModules\Mastopgo2\Go2($k);
49			$go2_classe->delete();
50			}
51			}
52			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
53			break;
54			case 'zera_count':
55			if (is_array(Request::getArray('checks', '', 'POST'))) {
			0 ignored issues – show introduced 2019-06-10 07:44 UTC by Report Bug Copy Issue Report Show Similar Issues like this The condition `is_array(Xmf\Request::ge...('checks', '', 'POST'))` is always `true`. Loading history...
56			foreach (Request::getArray('checks', '', 'POST') as $k => $v) {
57			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $k);
58			$go2_classe = new \XoopsModules\Mastopgo2\Go2($k);
59			$go2_classe->setVar('go2_10_acessos', 0);
60			$go2_classe->store();
61			}
62			}
63			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
64			break;
65			case 'desativa':
66			if (is_array(Request::getArray('checks', '', 'POST'))) {
			0 ignored issues – show introduced 2019-06-10 07:44 UTC by Report Bug Copy Issue Report Show Similar Issues like this The condition `is_array(Xmf\Request::ge...('checks', '', 'POST'))` is always `true`. Loading history...
67			foreach (Request::getArray('checks', '', 'POST') as $k => $v) {
68			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $k);
69			$go2_classe = new \XoopsModules\Mastopgo2\Go2($k);
70			$go2_classe->desativar();
71			}
72			}
73			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
74			break;
75			case 'ativa':
76			default:
77			if (is_array(Request::getArray('checks', '', 'POST'))) {
			0 ignored issues – show introduced 2019-06-10 07:44 UTC by Report Bug Copy Issue Report Show Similar Issues like this The condition `is_array(Xmf\Request::ge...('checks', '', 'POST'))` is always `true`. Loading history...
78			foreach (Request::getArray('checks', '', 'POST') as $k => $v) {
79			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $k);
80			$go2_classe = new \XoopsModules\Mastopgo2\Go2($k);
81			$go2_classe->ativar();
82			}
83			}
84			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
85			break;
86			}
87			}
88
89			switch ($op) {
90			case 'ativar':
91			$go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
92			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
93			$go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
94			if (empty($go2_10_id) \|\| '' === $go2_classe->getVar('go2_10_id')) {
95			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?listar', 3, MGO_ADM_404);
96			}
97			$go2_classe->ativar();
98			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_UPD);
99			break;
100			case 'desativar':
101			$go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
102			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
103			$go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
104			if (empty($go2_10_id) \|\| '' === $go2_classe->getVar('go2_10_id')) {
105			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?listar', 1, MGO_ADM_404);
106			}
107			$go2_classe->desativar();
108			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 1, MGO_ADM_SUCESS_UPD);
109			break;
110			case 'dstac_editar':
111			$go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
112			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
113			$go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
114			if (empty($go2_10_id) \|\| '' === $go2_classe->getVar('go2_10_id')) {
115			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_404);
116			}
117			$form['titulo'] = MGO_ADM_GO2_EDIT;
118			$form['op'] = 'salvar';
119			require_once XOOPS_ROOT_PATH . '/modules/' . MGO_MOD_DIR . '/include/go2.form.inc.php';
120			$go2_form->display();
121			break;
122			case 'dstac_deletar':
123			$go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
124			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
125			$go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
126			if (empty($go2_10_id) \|\| '' === $go2_classe->getVar('go2_10_id')) {
127			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_404);
128			}
129			xoops_confirm(['op' => 'dstac_deletar_ok', 'go2_10_id' => $go2_10_id], 'go2.php', sprintf(MGO_ADM_GO2_CONFIRMA_DEL, $go2_10_id, $go2_classe->getVar('go2_30_nome')));
130			break;
131			case 'dstac_deletar_ok':
132			$go2_10_id = !empty($go2_10_id) ? $go2_10_id : 0;
133			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
134			$go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
135			if (empty($go2_10_id) \|\| '' === $go2_classe->getVar('go2_10_id')) {
136			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?listar', 3, MGO_ADM_404);
137			}
138			$go2_classe->delete();
139			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_SUCESS_DEL);
140			break;
141			case 'novo':
142			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1);
143			$go2_classe = new \XoopsModules\Mastopgo2\Go2();
144			$form['titulo'] = MGO_ADM_GO2_NEW;
145			$form['op'] = 'salvar';
146			require_once XOOPS_ROOT_PATH . '/modules/' . MGO_MOD_DIR . '/include/go2.form.inc.php';
147			$go2_form->display();
148			break;
149			case 'salvar':
150			if (empty($go2_10_id)) {
151			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1);
152			$go2_classe = new \XoopsModules\Mastopgo2\Go2();
153			} else {
154			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
155			$go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
156			}
157			$go2_classe->setVar('sec_10_id', $sec_10_id);
158			$go2_classe->setVar('go2_30_nome', $go2_30_nome);
159			$go2_classe->setVar('go2_30_link', $go2_30_link);
160			$go2_classe->setVar('go2_11_target', $go2_11_target);
161			$go2_classe->setVar('go2_30_imagem', $go2_30_imagem);
162			if ('' !== $go2_classe->getVar('go2_10_id')) {
163			$msg = 'UPD';
164			} else {
165			$msg = 'ADD';
166			}
167			$go2_classe->setVar('go2_12_ativo', $go2_12_ativo);
168			$erro = '';
169			if (!$go2_classe->store()) {
170			ob_start();
171			xoops_error(MGO_ADM_DB_ERRO);
172			$erro .= ob_get_clean();
173			} else {
174			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, constant('MGO_ADM_SUCESS_' . $msg));
175			}
176
177			// no break
178			case 'listar_dstac':
179			echo !empty($erro) ? $erro . '<br>' : '';
180			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1);
181			$go2_classe = new \XoopsModules\Mastopgo2\Go2();
182			$go2_10_id = empty($go2_10_id) ? null : $go2_10_id;
183			if (Request::hasVar('sec_10_id')) {
184			$sec_10_id = Request::getInt('sec_10_id');
185			$_SESSION['listar_sec_sec_10_id'] = Request::getInt('sec_10_id');
186			// $sec_classe = mgo_getClass(MGO_MOD_TABELA0, $sec_10_id);
187			$sec_classe = new \XoopsModules\Mastopgo2\Section($sec_10_id);
188			} elseif (!empty($_SESSION['listar_sec_sec_10_id'])) {
189			$sec_10_id = $_SESSION['listar_sec_sec_10_id'];
190			// $sec_classe = mgo_getClass(MGO_MOD_TABELA0, $sec_10_id);
191			$sec_classe = new \XoopsModules\Mastopgo2\Section($sec_10_id);
192
193			} else {
194			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_404);
195			}
196			if ('' === $sec_classe->getVar('sec_10_id')) {
197			redirect_header(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=listar', 3, MGO_ADM_404);
198			}
199
200			// Opções
201			$c['op'] = 'listar_dstac';
202			$c['form'] = 0; // 0 para exibir os registros em modo visualização, 1 em modo edição
203			$c['checks'] = 1;
204			$c['print'] = 0;
205			$c['group_del'] = 1;
206
207			$c['precrit']['campo'][1] = 'sec_10_id';
208			$c['precrit']['valor'][1] = $sec_10_id;
209
210			$c['nome'][1] = 'go2_10_id';
211			$c['rotulo'][1] = MGO_ADM_ID;
212			$c['tipo'][1] = 'text';
213			$c['tamanho'][1] = 5;
214			$c['show'][1] = '$reg->getVar($reg->id)';
215
216			$c['nome'][2] = 'go2_30_imagem';
217			$c['rotulo'][2] = MGO_ADM_IMAGEM;
218			$c['tipo'][2] = 'none';
219			$c['nosort'][2] = 1;
220			$c['show'][2] = '"<img src=\'".$reg->pegaImagem()."\' style=\'max-width:200px\'>"';
221
222			$c['nome'][3] = 'go2_30_nome';
223			$c['rotulo'][3] = MGO_ADM_GO2_30_NOME;
224			$c['tipo'][3] = 'text';
225
226			$c['nome'][4] = 'go2_30_link';
227			$c['rotulo'][4] = MGO_ADM_GO2_30_LINK;
228			$c['tipo'][4] = 'text';
229			// $c['show'][4] = '$reg->pegaLink()';
230			$c['show'][4] = '$reg->pegaLink()';
231
232			$c['nome'][5] = 'go2_10_acessos';
233			$c['rotulo'][5] = MGO_ADM_GO2_10_ACESSOS;
234			$c['tipo'][5] = 'none';
235
236			$c['nome'][6] = 'go2_12_ativo';
237			$c['rotulo'][6] = MGO_ADM_ATIVO;
238			$c['tipo'][6] = 'simnao';
239			$c['show'][6] = '($reg->getVar("go2_12_ativo") == 0) ? "<a href=\'go2.php?op=ativar&go2_10_id=".$reg->getVar($reg->id)."\'><img src='
240			. $pathIcon16
241			. '/green_off.gif align=\'absmiddle\'></a> <img src='
242			. $pathIcon16
243			. '/red.gif align=\'absmiddle\'>" : "<img src='
244			. $pathIcon16
245			. '/green.gif align=\'absmiddle\'> <a href=\'go2.php?op=desativar&go2_10_id=".$reg->getVar($reg->id)."\'><img src='
246			. $pathIcon16
247			. '/red_off.gif align=\'absmiddle\'></a>"';
248
249			$c['botoes'][1]['link'] = XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=dstac_editar';
250			$c['botoes'][1]['imagem'] = $pathIcon16 . '/edit.png';
251			$c['botoes'][1]['texto'] = _EDIT;
252
253			$c['botoes'][2]['link'] = XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=dstac_deletar';
254			$c['botoes'][2]['imagem'] = $pathIcon16 . '/delete.png';
255			$c['botoes'][2]['texto'] = _DELETE;
256
257			$c['group_action'][1]['texto'] = MGO_ADM_GO2_ATIVA_SEL;
258			$c['group_action'][1]['valor'] = 'ativa';
259			$c['group_action'][2]['texto'] = MGO_ADM_GO2_DESATIVA_SEL;
260			$c['group_action'][2]['valor'] = 'desativa';
261			$c['group_action'][3]['texto'] = MGO_ADM_GO2_ZERA_COUNT;
262			$c['group_action'][3]['valor'] = 'zera_count';
263
264			// Tradução
265			$c['lang']['titulo'] = MGO_ADM_GO2_TITULO . " -> <span style='color:#ff0000'>" . $sec_classe->getVar('sec_30_nome') . '</span>';
266			echo $go2_classe->administracao(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php', $c);
267			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
268			$go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
269
270			$form['titulo'] = (empty($go2_10_id) ? MGO_ADM_GO2_NEW : MGO_ADM_GO2_EDIT);
271			$form['op'] = 'salvar';
272
273			$sec_classe->setVar('sec_10_id', 0);
274			require_once XOOPS_ROOT_PATH . '/modules/' . MGO_MOD_DIR . '/include/go2.form.inc.php';
275			$go2_form->display();
276			break;
277			case 'listar':
278			default:
279			//mgo_adm_menu();
280			$adminObject->displayNavigation(basename(__FILE__));
281			echo !empty($erro) ? $erro . '<br>' : '';
282			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1);
283			$go2_classe = new \XoopsModules\Mastopgo2\Go2();
284			$go2_10_id = empty($go2_10_id) ? null : $go2_10_id;
285
286			// Opções
287			$c['op'] = 'listar';
288			$c['form'] = 0; // 0 para exibir os registros em modo visualização, 1 em modo edição
289			$c['checks'] = 1;
290			$c['print'] = 0;
291			$c['group_del'] = 1;
292
293			$c['nome'][1] = 'go2_10_id';
294			$c['rotulo'][1] = MGO_ADM_ID;
295			$c['tipo'][1] = 'text';
296			$c['tamanho'][1] = 5;
297			$c['show'][1] = '$reg->getVar($reg->id)';
298
299			$c['nome'][2] = 'go2_30_imagem';
300			$c['rotulo'][2] = MGO_ADM_IMAGEM;
301			$c['tipo'][2] = 'none';
302			$c['nosort'][2] = 1;
303			$c['show'][2] = '"<img src=\'".$reg->pegaImagem()."\' style=\'max-width:200px\'>"';
304
305			$c['nome'][3] = 'sec_10_id';
306			$c['rotulo'][3] = MGO_ADM_SECTION;
307			$c['tipo'][3] = 'select';
308			$c['options'][3] = $sec_select;
309
310			$c['nome'][4] = 'go2_30_nome';
311			$c['rotulo'][4] = MGO_ADM_GO2_30_NOME;
312			$c['tipo'][4] = 'text';
313
314			$c['nome'][5] = 'go2_30_link';
315			$c['rotulo'][5] = MGO_ADM_GO2_30_LINK;
316			$c['tipo'][5] = 'text';
317			// $c['show'][5] = '$reg->pegaLink()';
318			$c['show'][5] = '$reg->pegaLink()';
319
320			$c['nome'][6] = 'go2_10_acessos';
321			$c['rotulo'][6] = MGO_ADM_GO2_10_ACESSOS;
322			$c['tipo'][6] = 'none';
323
324			$c['nome'][7] = 'go2_12_ativo';
325			$c['rotulo'][7] = MGO_ADM_ATIVO;
326			$c['tipo'][7] = 'simnao';
327			$c['show'][7] = '($reg->getVar("go2_12_ativo") == 0) ? "<a href=\'go2.php?op=ativar&go2_10_id=".$reg->getVar($reg->id)."\'><img src='
328			. $pathIcon16
329			. '/green_off.gif align=\'absmiddle\'></a> <img src='
330			. $pathIcon16
331			. '/red.gif align=\'absmiddle\'>" : "<img src='
332			. $pathIcon16
333			. '/green.gif align=\'absmiddle\'> <a href=\'go2.php?op=desativar&go2_10_id=".$reg->getVar($reg->id)."\'><img src='
334			. $pathIcon16
335			. '/red_off.gif align=\'absmiddle\'></a>"';
336
337			$c['botoes'][1]['link'] = XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=dstac_editar';
338			$c['botoes'][1]['imagem'] = $pathIcon16 . '/edit.png';
339			$c['botoes'][1]['texto'] = _EDIT;
340
341			$c['botoes'][2]['link'] = XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php?op=dstac_deletar';
342			$c['botoes'][2]['imagem'] = $pathIcon16 . '/delete.png';
343			$c['botoes'][2]['texto'] = _DELETE;
344
345			$c['group_action'][1]['texto'] = MGO_ADM_GO2_ATIVA_SEL;
346			$c['group_action'][1]['valor'] = 'ativa';
347			$c['group_action'][2]['texto'] = MGO_ADM_GO2_DESATIVA_SEL;
348			$c['group_action'][2]['valor'] = 'desativa';
349			$c['group_action'][3]['texto'] = MGO_ADM_GO2_ZERA_COUNT;
350			$c['group_action'][3]['valor'] = 'zera_count';
351
352			// Tradução
353			$c['lang']['titulo'] = MGO_ADM_GO2_TITULO;
354			echo $go2_classe->administracao(XOOPS_URL . '/modules/' . MGO_MOD_DIR . '/admin/go2.php', $c);
355			// $go2_classe = mgo_getClass(MGO_MOD_TABELA1, $go2_10_id);
356			$go2_classe = new \XoopsModules\Mastopgo2\Go2($go2_10_id);
357			$form['titulo'] = (empty($go2_10_id) ? MGO_ADM_GO2_NEW : MGO_ADM_GO2_EDIT);
358			$form['op'] = 'salvar';
359			require_once XOOPS_ROOT_PATH . '/modules/' . MGO_MOD_DIR . '/include/go2.form.inc.php';
360			$go2_form->display();
361			break;
362			}
363
364			echo "<div align='center' style='margin-top:10px'><a target='_blank' href='http://www.mastop.com.br/conteudo/open-source/mastop-go2-english.mstp'><img src='../assets/images/mgo2_footer.gif'></a><br><br></div>";
365			require_once __DIR__ . '/admin_footer.php';
366

mambax7 / mastopgo2

Issues (132)

Security Analysis not enabled

admin/go2.php (4 issues)

Severity

Introduced By

Duplication Side-by-Side

Filter issues like