mambax7 /
newbb5
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php |
||
| 2 | |||
| 3 | namespace XoopsModules\Newbb; |
||
| 4 | |||
| 5 | /** |
||
| 6 | * NewBB 5.0x, the forum module for XOOPS project |
||
| 7 | * |
||
| 8 | * @copyright XOOPS Project (https://xoops.org) |
||
| 9 | * @license GNU GPL 2 or later (https://www.gnu.org/licenses/gpl-2.0.html) |
||
| 10 | * @author Taiwen Jiang (phppp or D.J.) <[email protected]> |
||
| 11 | * @since 4.00 |
||
| 12 | * @package module::newbb |
||
| 13 | */ |
||
| 14 | |||
| 15 | use XoopsModules\Newbb; |
||
| 16 | |||
| 17 | /** |
||
| 18 | * Class DigestHandler |
||
| 19 | */ |
||
| 20 | class DigestHandler extends \XoopsPersistableObjectHandler |
||
| 21 | { |
||
| 22 | public $last_digest; |
||
| 23 | |||
| 24 | /** |
||
| 25 | * Constructor |
||
| 26 | * |
||
| 27 | * @param null|\XoopsDatabase $db database connection |
||
| 28 | */ |
||
| 29 | public function __construct(\XoopsDatabase $db = null) |
||
| 30 | { |
||
| 31 | parent::__construct($db, 'newbb_digest', Digest::class, 'digest_id'); |
||
| 32 | } |
||
| 33 | |||
| 34 | /** |
||
| 35 | * @param bool $isForced |
||
| 36 | * @return int |
||
| 37 | */ |
||
| 38 | public function process($isForced = false) |
||
| 39 | { |
||
| 40 | $this->getLastDigest(); |
||
| 41 | if (!$isForced) { |
||
| 42 | $status = $this->checkStatus(); |
||
| 43 | if ($status < 1) { |
||
| 44 | return 1; |
||
| 45 | } |
||
| 46 | } |
||
| 47 | $digest = $this->create(); |
||
| 48 | $status = $this->buildDigest($digest); |
||
| 49 | if (!$status) { |
||
| 50 | return 2; |
||
| 51 | } |
||
| 52 | $status = $this->insert($digest); |
||
| 53 | if (!$status) { |
||
| 54 | return 3; |
||
| 55 | } |
||
| 56 | $status = $this->notify($digest); |
||
| 57 | if (!$status) { |
||
|
0 ignored issues
–
show
introduced
by
Loading history...
|
|||
| 58 | return 4; |
||
| 59 | } |
||
| 60 | |||
| 61 | return 0; |
||
| 62 | } |
||
| 63 | |||
| 64 | /** |
||
| 65 | * @param \XoopsObject $digest |
||
| 66 | * @return bool |
||
| 67 | */ |
||
| 68 | public function notify(\XoopsObject $digest) |
||
| 69 | { |
||
| 70 | //$content = $digest->getVar('digest_content'); |
||
| 71 | /** @var \XoopsNotificationHandler $notificationHandler */ |
||
| 72 | $notificationHandler = \xoops_getHandler('notification'); |
||
| 73 | $tags['DIGEST_ID'] = $digest->getVar('digest_id'); |
||
| 74 | $tags['DIGEST_CONTENT'] = $digest->getVar('digest_content', 'E'); |
||
| 75 | $notificationHandler->triggerEvent('global', 0, 'digest', $tags); |
||
| 76 | |||
| 77 | return true; |
||
| 78 | } |
||
| 79 | |||
| 80 | /** |
||
| 81 | * @param $start |
||
| 82 | * @param int $perpage |
||
| 83 | * @return array |
||
| 84 | */ |
||
| 85 | public function getAllDigests($start = 0, $perpage = 5) |
||
| 86 | { |
||
| 87 | // if (empty($start)) { |
||
| 88 | // $start = 0; |
||
| 89 | // } |
||
| 90 | |||
| 91 | $sql = 'SELECT * FROM ' . $this->db->prefix('newbb_digest') . ' ORDER BY digest_id DESC'; |
||
| 92 | $result = $this->db->query($sql, $perpage, $start); |
||
| 93 | $ret = []; |
||
| 94 | // $reportHandler = Newbb\Helper::getInstance()->getHandler('Report'); |
||
| 95 | while (false !== ($myrow = $this->db->fetchArray($result))) { |
||
| 96 | $ret[] = $myrow; // return as array |
||
| 97 | } |
||
| 98 | |||
| 99 | return $ret; |
||
| 100 | } |
||
| 101 | |||
| 102 | /** |
||
| 103 | * @return int |
||
| 104 | */ |
||
| 105 | public function getDigestCount() |
||
| 106 | { |
||
| 107 | $sql = 'SELECT COUNT(*) AS count FROM ' . $this->db->prefix('newbb_digest'); |
||
| 108 | $result = $this->db->query($sql); |
||
| 109 | if (!$result) { |
||
| 110 | return 0; |
||
| 111 | } |
||
| 112 | $array = $this->db->fetchArray($result); |
||
| 113 | |||
| 114 | return $array['count']; |
||
| 115 | } |
||
| 116 | |||
| 117 | public function getLastDigest() |
||
| 118 | { |
||
| 119 | $sql = 'SELECT MAX(digest_time) AS last_digest FROM ' . $this->db->prefix('newbb_digest'); |
||
| 120 | $result = $this->db->query($sql); |
||
| 121 | if (!$result) { |
||
| 122 | $this->last_digest = 0; |
||
| 123 | // echo "<br>no data:".$query; |
||
| 124 | } else { |
||
| 125 | $array = $this->db->fetchArray($result); |
||
| 126 | $this->last_digest = isset($array['last_digest']) ? $array['last_digest'] : 0; |
||
| 127 | } |
||
| 128 | } |
||
| 129 | |||
| 130 | /** |
||
| 131 | * @return int |
||
| 132 | */ |
||
| 133 | public function checkStatus() |
||
| 134 | { |
||
| 135 | if (!isset($this->last_digest)) { |
||
| 136 | $this->getLastDigest(); |
||
| 137 | } |
||
| 138 | $deadline = (1 == $GLOBALS['xoopsModuleConfig']['email_digest']) ? 60 * 60 * 24 : 60 * 60 * 24 * 7; |
||
| 139 | $time_diff = \time() - $this->last_digest; |
||
| 140 | |||
| 141 | return $time_diff - $deadline; |
||
| 142 | } |
||
| 143 | |||
| 144 | /** |
||
| 145 | * @param \XoopsObject $digest |
||
| 146 | * @param bool $force flag to force the query execution despite security settings |
||
| 147 | * @return mixed object ID or false |
||
| 148 | */ |
||
| 149 | public function insert(\XoopsObject $digest, $force = true) |
||
| 150 | { |
||
| 151 | $digest->setVar('digest_time', \time()); |
||
| 152 | |||
| 153 | return parent::insert($digest, $force); |
||
| 154 | /* |
||
| 155 | $content = $digest->getVar('digest_content', 'E'); |
||
| 156 | |||
| 157 | $id = $this->db->genId($digest->table . '_digest_id_seq'); |
||
| 158 | $sql = 'INSERT INTO ' . $digest->table . ' (digest_id, digest_time, digest_content) VALUES (' . $id . ', ' . time() . ', ' . $this->db->quoteString($content) . ' )'; |
||
| 159 | |||
| 160 | if (!$this->db->queryF($sql)) { |
||
| 161 | //echo "<br>digest insert error::" . $sql; |
||
| 162 | return false; |
||
| 163 | } |
||
| 164 | if (empty($id)) { |
||
| 165 | $id = $this->db->getInsertId(); |
||
| 166 | } |
||
| 167 | $digest->setVar('digest_id', $id); |
||
| 168 | |||
| 169 | return true; |
||
| 170 | */ |
||
| 171 | } |
||
| 172 | |||
| 173 | /** |
||
| 174 | * @param \XoopsObject $digest |
||
| 175 | * @param bool $force (ignored) |
||
| 176 | * @return bool FALSE if failed. |
||
| 177 | */ |
||
| 178 | public function delete(\XoopsObject $digest, $force = false) |
||
| 179 | { |
||
| 180 | $digest_id = $digest->getVar('digest_id'); |
||
| 181 | |||
| 182 | if (!isset($this->last_digest)) { |
||
| 183 | $this->getLastDigest(); |
||
| 184 | } |
||
| 185 | if ($this->last_digest == $digest_id) { |
||
| 186 | return false; |
||
| 187 | } // It is not allowed to delete the last digest |
||
| 188 | |||
| 189 | return parent::delete($digest, true); |
||
| 190 | } |
||
| 191 | |||
| 192 | /** |
||
| 193 | * @param \XoopsObject $digest |
||
| 194 | * @return bool |
||
| 195 | */ |
||
| 196 | public function buildDigest(\XoopsObject $digest) |
||
| 197 | { |
||
| 198 | global $xoopsModule; |
||
| 199 | |||
| 200 | if (!\defined('SUMMARY_LENGTH')) { |
||
| 201 | \define('SUMMARY_LENGTH', 100); |
||
| 202 | } |
||
| 203 | |||
| 204 | /** @var Newbb\ForumHandler $forumHandler */ |
||
| 205 | $forumHandler = \XoopsModules\Newbb\Helper::getInstance()->getHandler('Forum'); |
||
| 206 | $thisUser = $GLOBALS['xoopsUser']; |
||
| 207 | $GLOBALS['xoopsUser'] = null; // To get posts accessible by anonymous |
||
| 208 | $GLOBALS['xoopsUser'] = $thisUser; |
||
| 209 | |||
| 210 | $accessForums = $forumHandler->getIdsByPermission(); // get all accessible forums |
||
| 211 | $forumCriteria = ' AND t.forum_id IN (' . \implode(',', $accessForums) . ')'; |
||
| 212 | $approveCriteria = ' AND t.approved = 1 AND p.approved = 1'; |
||
| 213 | $time_criteria = ' AND t.digest_time > ' . $this->last_digest; |
||
| 214 | |||
| 215 | $karma_criteria = $GLOBALS['xoopsModuleConfig']['enable_karma'] ? ' AND p.post_karma=0' : ''; |
||
| 216 | $reply_criteria = $GLOBALS['xoopsModuleConfig']['allow_require_reply'] ? ' AND p.require_reply=0' : ''; |
||
| 217 | |||
| 218 | $query = 'SELECT t.topic_id, t.forum_id, t.topic_title, t.topic_time, t.digest_time, p.uid, p.poster_name, pt.post_text FROM ' |
||
| 219 | . $this->db->prefix('newbb_topics') |
||
| 220 | . ' t, ' |
||
| 221 | . $this->db->prefix('newbb_posts_text') |
||
| 222 | . ' pt, ' |
||
| 223 | . $this->db->prefix('newbb_posts') |
||
| 224 | . ' p WHERE t.topic_digest = 1 AND p.topic_id=t.topic_id AND p.pid=0 ' |
||
| 225 | . $forumCriteria |
||
| 226 | . $approveCriteria |
||
| 227 | . $time_criteria |
||
| 228 | . $karma_criteria |
||
| 229 | . $reply_criteria |
||
| 230 | . ' AND pt.post_id=p.post_id ORDER BY t.digest_time DESC'; |
||
| 231 | if (!$result = $this->db->query($query)) { |
||
| 232 | //echo "<br>No result:<br>$query"; |
||
| 233 | return false; |
||
| 234 | } |
||
| 235 | $rows = []; |
||
| 236 | $users = []; |
||
| 237 | while (false !== ($row = $this->db->fetchArray($result))) { |
||
| 238 | $users[$row['uid']] = 1; |
||
| 239 | $rows[] = $row; |
||
| 240 | } |
||
| 241 | if (\count($rows) < 1) { |
||
| 242 | return false; |
||
| 243 | } |
||
| 244 | $uids = \array_keys($users); |
||
| 245 | if (\count($uids) > 0) { |
||
| 246 | /** @var \XoopsMemberHandler $memberHandler */ |
||
| 247 | $memberHandler = \xoops_getHandler('member'); |
||
| 248 | $user_criteria = new \Criteria('uid', '(' . \implode(',', $uids) . ')', 'IN'); |
||
| 249 | $users = $memberHandler->getUsers($user_criteria, true); |
||
| 250 | } else { |
||
| 251 | $users = []; |
||
| 252 | } |
||
| 253 | |||
| 254 | foreach ($rows as $topic) { |
||
| 255 | if ($topic['uid'] > 0) { |
||
| 256 | if (isset($users[$topic['uid']]) && \is_object($users[$topic['uid']]) |
||
| 257 | && $users[$topic['uid']]->isActive()) { |
||
| 258 | $topic['uname'] = $users[$topic['uid']]->getVar('uname'); |
||
| 259 | } else { |
||
| 260 | $topic['uname'] = $GLOBALS['xoopsConfig']['anonymous']; |
||
| 261 | } |
||
| 262 | } else { |
||
| 263 | $topic['uname'] = $topic['poster_name'] ?: $GLOBALS['xoopsConfig']['anonymous']; |
||
| 264 | } |
||
| 265 | $summary = \Xmf\Metagen::generateDescription($topic['post_text'], SUMMARY_LENGTH); |
||
| 266 | $author = $topic['uname'] . ' (' . \formatTimestamp($topic['topic_time']) . ')'; |
||
| 267 | $link = XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/viewtopic.php?topic_id=' . $topic['topic_id'] . '&forum=' . $topic['forum_id']; |
||
| 268 | $title = $topic['topic_title']; |
||
| 269 | $digest->addItem($title, $link, $author, $summary); |
||
| 270 | } |
||
| 271 | $digest->buildContent(); |
||
| 272 | |||
| 273 | return true; |
||
| 274 | } |
||
| 275 | } |
||
| 276 |