This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php declare(strict_types=1); |
||
2 | |||
3 | namespace XoopsModules\Smartfaq; |
||
4 | |||
5 | /* |
||
6 | * You may not change or alter any portion of this comment or credits |
||
7 | * of supporting developers from this source code or any supporting source code |
||
8 | * which is considered copyrighted (c) material of the original comment or credit authors. |
||
9 | * |
||
10 | * This program is distributed in the hope that it will be useful, |
||
11 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
12 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||
13 | */ |
||
14 | |||
15 | /** |
||
16 | * @copyright XOOPS Project (https://xoops.org) |
||
17 | * @license GNU GPL 2.0 or later (https://www.gnu.org/licenses/gpl-2.0.html) |
||
18 | * @author XOOPS Development Team, Kazumi Ono (AKA onokazu) |
||
19 | */ |
||
20 | |||
21 | /** |
||
22 | * Module: SmartFAQ |
||
23 | * Author: The SmartFactory <www.smartfactory.ca> |
||
24 | */ |
||
25 | |||
26 | use XoopsModules\Smartfaq; |
||
27 | |||
28 | require_once XOOPS_ROOT_PATH . '/class/xoopsform/formelement.php'; |
||
29 | require_once XOOPS_ROOT_PATH . '/class/xoopsform/formhidden.php'; |
||
30 | require_once XOOPS_ROOT_PATH . '/class/xoopsform/formhiddentoken.php'; |
||
31 | require_once XOOPS_ROOT_PATH . '/class/xoopsform/formbutton.php'; |
||
32 | require_once XOOPS_ROOT_PATH . '/class/xoopsform/formelementtray.php'; |
||
33 | require_once XOOPS_ROOT_PATH . '/class/xoopsform/form.php'; |
||
34 | |||
35 | /** |
||
36 | * Renders a form for setting module specific group permissions |
||
37 | * |
||
38 | * @author Kazumi Ono <[email protected]> |
||
39 | * @copyright copyright (c) 2000-2003 XOOPS.org |
||
40 | */ |
||
41 | class GroupPermForm extends \XoopsForm |
||
42 | { |
||
43 | /** |
||
44 | * Module ID |
||
45 | * @var int |
||
46 | */ |
||
47 | public $_modid; |
||
48 | /** |
||
49 | * Tree structure of items |
||
50 | * @var array |
||
51 | */ |
||
52 | public $_itemTree; |
||
53 | /** |
||
54 | * Name of permission |
||
55 | * @var string |
||
56 | */ |
||
57 | public $_permName; |
||
58 | /** |
||
59 | * Description of permission |
||
60 | * @var string |
||
61 | */ |
||
62 | public $_permDesc; |
||
63 | /** |
||
64 | * Appendix |
||
65 | * @var array ('permname'=>,'itemid'=>,'itemname'=>,'selected'=>) |
||
66 | */ |
||
67 | public $_appendix = []; |
||
68 | |||
69 | /** |
||
70 | * Constructor |
||
71 | * @param string $title |
||
72 | * @param string $modid |
||
73 | * @param string $permname |
||
74 | * @param string $permdesc |
||
75 | */ |
||
76 | public function __construct($title, $modid, $permname, $permdesc) |
||
77 | { |
||
78 | // $this->XoopsForm($title, 'groupperm_form', XOOPS_URL.'/modules/system/admin/groupperm.php', 'post'); GIJ |
||
79 | parent::__construct($title, 'groupperm_form', '', 'post'); |
||
80 | $this->_modid = (int)$modid; |
||
81 | $this->_permName = $permname; |
||
82 | $this->_permDesc = $permdesc; |
||
83 | $this->addElement(new \XoopsFormHidden('modid', $this->_modid)); |
||
84 | $this->addElement(new \XoopsFormHiddenToken($permname)); |
||
85 | } |
||
86 | |||
87 | /** |
||
88 | * Adds an item to which permission will be assigned |
||
89 | * |
||
90 | * @param string $itemName |
||
91 | * @param int $itemId |
||
92 | * @param int $itemParent |
||
93 | */ |
||
94 | public function addItem($itemId, $itemName, $itemParent = 0): void |
||
95 | { |
||
96 | $this->_itemTree[$itemParent]['children'][] = $itemId; |
||
97 | $this->_itemTree[$itemId]['parent'] = $itemParent; |
||
98 | $this->_itemTree[$itemId]['name'] = $itemName; |
||
99 | $this->_itemTree[$itemId]['id'] = $itemId; |
||
100 | } |
||
101 | |||
102 | /** |
||
103 | * Add appendix |
||
104 | * |
||
105 | * @param $permName |
||
106 | * @param $itemId |
||
107 | * @param $itemName |
||
108 | */ |
||
109 | public function addAppendix($permName, $itemId, $itemName): void |
||
110 | { |
||
111 | $this->_appendix[] = [ |
||
112 | 'permname' => $permName, |
||
113 | 'itemid' => $itemId, |
||
114 | 'itemname' => $itemName, |
||
115 | 'selected' => false, |
||
116 | ]; |
||
117 | } |
||
118 | |||
119 | /** |
||
120 | * Loads all child ids for an item to be used in javascript |
||
121 | * |
||
122 | * @param int $itemId |
||
123 | * @param array $childIds |
||
124 | */ |
||
125 | public function _loadAllChildItemIds($itemId, &$childIds): void |
||
126 | { |
||
127 | if (!empty($this->_itemTree[$itemId]['children'])) { |
||
128 | $first_child = $this->_itemTree[$itemId]['children']; |
||
129 | foreach ($first_child as $fcid) { |
||
130 | $childIds[] = $fcid; |
||
131 | if (!empty($this->_itemTree[$fcid]['children'])) { |
||
132 | foreach ($this->_itemTree[$fcid]['children'] as $_fcid) { |
||
133 | $childIds[] = $_fcid; |
||
134 | $this->_loadAllChildItemIds($_fcid, $childIds); |
||
135 | } |
||
136 | } |
||
137 | } |
||
138 | } |
||
139 | } |
||
140 | |||
141 | /** |
||
142 | * Renders the form |
||
143 | * |
||
144 | * @return string |
||
145 | */ |
||
146 | public function render() |
||
147 | { |
||
148 | // load all child ids for javascript codes |
||
149 | foreach (\array_keys($this->_itemTree) as $item_id) { |
||
150 | $this->_itemTree[$item_id]['allchild'] = []; |
||
151 | $this->_loadAllChildItemIds($item_id, $this->_itemTree[$item_id]['allchild']); |
||
152 | } |
||
153 | /** @var \XoopsGroupPermHandler $grouppermHandler */ |
||
154 | $grouppermHandler = \xoops_getHandler('groupperm'); |
||
155 | $memberHandler = \xoops_getHandler('member'); |
||
156 | $glist = $memberHandler->getGroupList(); |
||
0 ignored issues
–
show
Bug
introduced
by
![]() |
|||
157 | foreach (\array_keys($glist) as $i) { |
||
158 | // get selected item id(s) for each group |
||
159 | $selected = $grouppermHandler->getItemIds($this->_permName, $i, $this->_modid); |
||
160 | $ele = new GroupFormCheckBox($glist[$i], 'perms[' . $this->_permName . ']', $i, $selected); |
||
161 | $ele->setOptionTree($this->_itemTree); |
||
162 | |||
163 | foreach ($this->_appendix as $key => $append) { |
||
164 | $this->_appendix[$key]['selected'] = $grouppermHandler->checkRight($append['permname'], $append['itemid'], $i, $this->_modid); |
||
165 | } |
||
166 | $ele->setAppendix($this->_appendix); |
||
167 | $this->addElement($ele); |
||
168 | unset($ele); |
||
169 | } |
||
170 | |||
171 | // GIJ start |
||
172 | $jstray = new \XoopsFormElementTray(' '); |
||
173 | $jsuncheckbutton = new \XoopsFormButton('', 'none', \_NONE, 'button'); |
||
174 | $jsuncheckbutton->setExtra("onclick=\"with(document.groupperm_form){for (i=0;i<length;i++) {if (elements[i].type=='checkbox') {elements[i].checked=false;}}}\""); |
||
175 | $jscheckbutton = new \XoopsFormButton('', 'all', \_ALL, 'button'); |
||
176 | $jscheckbutton->setExtra("onclick=\"with(document.groupperm_form){for (i=0;i<length;i++) {if (elements[i].type=='checkbox' && (elements[i].name.indexOf('module_admin')<0 || elements[i].name.indexOf('[groups][1]')>=0)) {elements[i].checked=true;}}}\""); |
||
177 | $jstray->addElement($jsuncheckbutton); |
||
178 | $jstray->addElement($jscheckbutton); |
||
179 | $this->addElement($jstray); |
||
180 | // GIJ end |
||
181 | |||
182 | $tray = new \XoopsFormElementTray(''); |
||
183 | $tray->addElement(new \XoopsFormButton('', 'reset', \_CANCEL, 'reset')); |
||
184 | $tray->addElement(new \XoopsFormButton('', 'submit', \_SUBMIT, 'submit')); |
||
185 | $this->addElement($tray); |
||
186 | |||
187 | $ret = '<h4>' . $this->getTitle() . '</h4>' . $this->_permDesc . '<br>'; |
||
188 | $ret .= "<form name='" . $this->getName() . "' id='" . $this->getName() . "' action='" . $this->getAction() . "' method='" . $this->getMethod() . "'" . $this->getExtra() . ">\n<table width='100%' class='outer' cellspacing='1'>\n"; |
||
189 | $elements = &$this->getElements(); |
||
190 | foreach (\array_keys($elements) as $i) { |
||
191 | if (!\is_object($elements[$i])) { |
||
192 | $ret .= $elements[$i]; |
||
193 | } elseif ($elements[$i]->isHidden()) { |
||
194 | $ret .= $elements[$i]->render(); |
||
0 ignored issues
–
show
Are you sure the usage of
$elements[$i]->render() targeting XoopsFormElement::render() seems to always return null.
This check looks for function or method calls that always return null and whose return value is used. class A
{
function getObject()
{
return null;
}
}
$a = new A();
if ($a->getObject()) {
The method The reason is most likely that a function or method is imcomplete or has been reduced for debug purposes. ![]() |
|||
195 | } else { |
||
196 | $ret .= "<tr valign='top' align='left'><td class='head'>" . $elements[$i]->getCaption(); |
||
197 | if ('' != $elements[$i]->getDescription()) { |
||
198 | $ret .= '<br><br><span style="font-weight: normal;">' . $elements[$i]->getDescription() . '</span>'; |
||
199 | } |
||
200 | $ret .= "</td>\n<td class='even'>\n" . $elements[$i]->render() . "\n</td></tr>\n"; |
||
0 ignored issues
–
show
Are you sure the usage of
$elements[$i]->render() targeting XoopsFormElement::render() seems to always return null.
This check looks for function or method calls that always return null and whose return value is used. class A
{
function getObject()
{
return null;
}
}
$a = new A();
if ($a->getObject()) {
The method The reason is most likely that a function or method is imcomplete or has been reduced for debug purposes. ![]() |
|||
201 | } |
||
202 | } |
||
203 | $ret .= '</table></form>'; |
||
204 | |||
205 | return $ret; |
||
206 | } |
||
207 | } |
||
208 |