mambax7 /
wflinks
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Module: WF-Links |
||
| 4 | * Version: v1.0.3 |
||
| 5 | * Release Date: 21 June 2005 |
||
| 6 | * Developer: John N |
||
| 7 | * Team: WF-Projects |
||
| 8 | * Licence: GNU |
||
| 9 | */ |
||
| 10 | |||
| 11 | use XoopsModules\Wflinks; |
||
| 12 | |||
| 13 | $module_link = ''; |
||
| 14 | |||
| 15 | /** @var Wflinks\Helper $helper */ |
||
| 16 | $helper = Wflinks\Helper::getInstance(); |
||
| 17 | |||
| 18 | $link['id'] = (int)$link_arr['lid']; |
||
| 19 | $link['cid'] = (int)$link_arr['cid']; |
||
| 20 | $link['published'] = (int)$link_arr['published'] ? true : false; |
||
| 21 | |||
| 22 | $path = $mytree->getPathFromId($link_arr['cid'], 'title'); |
||
| 23 | $path = mb_substr($path, 1); |
||
| 24 | $path = basename($path); |
||
| 25 | $path = str_replace('/', '', $path); |
||
| 26 | $link['category'] = $path; |
||
| 27 | |||
| 28 | $rating = round(number_format($link_arr['rating'], 0) / 2); |
||
| 29 | $link['rateimg'] = 'rate' . $rating . '.gif'; |
||
| 30 | unset($rating); |
||
| 31 | |||
| 32 | $link['votes'] = (1 == $link_arr['votes']) ? _MD_WFL_ONEVOTE : sprintf(_MD_WFL_NUMVOTES, $link_arr['votes']); |
||
| 33 | $link['hits'] = sprintf(_MD_WFL_LINKHITS, (int)$link_arr['hits']); |
||
| 34 | $xoopsTpl->assign('lang_dltimes', $link['hits']); |
||
| 35 | |||
| 36 | $link['title'] = $link_arr['title']; |
||
| 37 | $link['url'] = $link_arr['url']; |
||
| 38 | |||
| 39 | // Get Google Pagerank |
||
| 40 | if (null !== $helper->getConfig('showpagerank') && 1 == $helper->getConfig('showpagerank')) { |
||
| 41 | $link['pagerank'] = Wflinks\Utility::pagerank($link['url']); |
||
| 42 | } |
||
| 43 | |||
| 44 | if (isset($link_arr['screenshot'])) { |
||
| 45 | $link['screenshot_full'] = htmlspecialchars($link_arr['screenshot']); |
||
| 46 | if (!empty($link_arr['screenshot']) |
||
| 47 | && file_exists(XOOPS_ROOT_PATH . '/' . $helper->getConfig('screenshots') . '/' . xoops_trim($link_arr['screenshot']))) { |
||
| 48 | if (null !== $helper->getConfig('usethumbs') && 1 == $helper->getConfig('usethumbs')) { |
||
| 49 | $_thumb_image = new Wflinks\ThumbsNails($link['screenshot_full'], $helper->getConfig('screenshots'), 'thumbs'); |
||
| 50 | if ($_thumb_image) { |
||
|
0 ignored issues
–
show
introduced
by
Loading history...
|
|||
| 51 | $_thumb_image->setUseThumbs(1); |
||
| 52 | $_thumb_image->setImageType('gd2'); |
||
| 53 | $_image = $_thumb_image->createThumb($helper->getConfig('shotwidth'), $helper->getConfig('shotheight'), $helper->getConfig('imagequality'), $helper->getConfig('updatethumbs'), $helper->getConfig('keepaspect')); |
||
| 54 | } |
||
| 55 | $link['screenshot_thumb'] = XOOPS_URL . "/{$helper->getConfig('screenshots')}/$_image"; |
||
| 56 | } else { |
||
| 57 | $link['screenshot_thumb'] = XOOPS_URL . "/{$helper->getConfig('screenshots')}/" . xoops_trim($link_arr['screenshot']); |
||
| 58 | } |
||
| 59 | } |
||
| 60 | } |
||
| 61 | |||
| 62 | if (0 == $moderate) { |
||
| 63 | $time = (0 != $link_arr['updated']) ? $link_arr['updated'] : $link_arr['published']; |
||
| 64 | $is_updated = (0 != $link_arr['updated']) ? _MD_WFL_UPDATEDON : _MD_WFL_PUBLISHDATE; |
||
| 65 | $xoopsTpl->assign('lang_subdate', $is_updated); |
||
| 66 | } else { |
||
| 67 | $time = $link_arr['date']; |
||
| 68 | $is_updated = _MD_WFL_SUBMITDATE; |
||
| 69 | $xoopsTpl->assign('lang_subdate', $is_updated); |
||
| 70 | } |
||
| 71 | |||
| 72 | $link['updated'] = formatTimestamp($time, $helper->getConfig('dateformat')); |
||
| 73 | $description = $myts->displayTarea($link_arr['description'], 1, 1, 1, 1, 1); |
||
| 74 | |||
| 75 | $link['description'] = xoops_substr($description, 0, $helper->getConfig('totalchars'), '...'); |
||
| 76 | xoops_load('XoopsUserUtility'); |
||
| 77 | $link['submitter'] = \XoopsUserUtility::getUnameFromId($link_arr['submitter']); |
||
| 78 | $link['publisher'] = (isset($link_arr['publisher']) |
||
| 79 | && !empty($link_arr['publisher'])) ? htmlspecialchars($link_arr['publisher']) : _MD_WFL_NOTSPECIFIED; |
||
| 80 | |||
| 81 | $country = $link_arr['country']; |
||
| 82 | $link['country'] = XOOPS_URL . '/' . $helper->getConfig('flagimage') . '/' . $country . '.gif'; |
||
| 83 | $link['countryname'] = Wflinks\Utility::getCountryName($link_arr['country']); |
||
| 84 | |||
| 85 | $mail_subject = rawurlencode(sprintf(_MD_WFL_INTFILEFOUND, $xoopsConfig['sitename'])); |
||
| 86 | $mail_body = rawurlencode(sprintf(_MD_WFL_INTFILEFOUND, $xoopsConfig['sitename']) . ': ' . XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/singlelink.php?cid=' . $link_arr['cid'] . '&lid=' . $link_arr['lid']); |
||
| 87 | $link['isadmin'] = ((is_object($xoopsUser) && !empty($xoopsUser)) |
||
| 88 | && $xoopsUser->isAdmin($xoopsModule->mid())); |
||
| 89 | $link['comments'] = $link_arr['comments']; |
||
| 90 | $whoisurl = str_replace('http://', '', $link['url']); |
||
| 91 | |||
| 92 | $link['adminlink'] = ''; |
||
| 93 | if (0 == $moderate && true === $link['isadmin']) { |
||
| 94 | $link['adminlink'] = '<a href="' |
||
| 95 | . XOOPS_URL |
||
| 96 | . '/modules/' |
||
| 97 | . $xoopsModule->getVar('dirname') |
||
| 98 | . '/admin/index.php"><img src="' |
||
| 99 | . XOOPS_URL |
||
| 100 | . '/modules/' |
||
| 101 | . $xoopsModule->getVar('dirname') |
||
| 102 | . '/assets/images/icon/computer.png" alt="' |
||
| 103 | . _MD_WFL_ADMINSECTION |
||
| 104 | . '" title="' |
||
| 105 | . _MD_WFL_ADMINSECTION |
||
| 106 | . '" align="absmiddle"></a> '; |
||
| 107 | $link['adminlink'] .= '<a href="' |
||
| 108 | . XOOPS_URL |
||
| 109 | . '/modules/' |
||
| 110 | . $xoopsModule->getVar('dirname') |
||
| 111 | . '/admin/main.php?op=edit&lid=' |
||
| 112 | . $link_arr['lid'] |
||
| 113 | . '"><img src="' |
||
| 114 | . \Xmf\Module\Admin::iconUrl('', 16) |
||
| 115 | . '/edit.png" alt="' |
||
| 116 | . _MD_WFL_EDIT |
||
| 117 | . '" title="' |
||
| 118 | . _MD_WFL_EDIT |
||
| 119 | . '" align="absmiddle"></a> '; |
||
| 120 | $link['adminlink'] .= '<a href="' |
||
| 121 | . XOOPS_URL |
||
| 122 | . '/modules/' |
||
| 123 | . $xoopsModule->getVar('dirname') |
||
| 124 | . '/admin/main.php?op=delete&lid=' |
||
| 125 | . $link_arr['lid'] |
||
| 126 | . '"><img src="' |
||
| 127 | . \Xmf\Module\Admin::iconUrl('', 16) |
||
| 128 | . '/delete.png" alt="' |
||
| 129 | . _MD_WFL_DELETE |
||
| 130 | . '" title="' |
||
| 131 | . _MD_WFL_DELETE |
||
| 132 | . '" align="absmiddle"></a> '; |
||
| 133 | $link['adminlink'] .= '<a href="http://whois.domaintools.com/' . $whoisurl . '" target="_blank"><img src="' . XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/assets/images/icon/domaintools.png" alt="WHOIS" title="WHOIS" align="absmiddle"></a>'; |
||
| 134 | } else { |
||
| 135 | $link['adminlink'] = '[ <a href="' . XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/submit.php?op=edit&lid=' . $link_arr['lid'] . '&approve=1">' . _MD_WFL_APPROVE . '</a> | '; |
||
| 136 | $link['adminlink'] .= '<a href="' . XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/submit.php?op=delete&lid=' . $link_arr['lid'] . '">' . _MD_WFL_DELETE . '</a> ]'; |
||
| 137 | } |
||
| 138 | |||
| 139 | $votestring = (1 == $link_arr['votes']) ? _MD_WFL_ONEVOTE : sprintf(_MD_WFL_NUMVOTES, $link_arr['votes']); |
||
| 140 | |||
| 141 | $link['useradminlink'] = 0; |
||
| 142 | if (is_object($xoopsUser) && !empty($xoopsUser)) { |
||
| 143 | $_user_submitter = $xoopsUser->getVar('uid') == $link_arr['submitter']; |
||
| 144 | if (true === Wflinks\Utility::checkGroups($cid)) { |
||
| 145 | $link['useradminlink'] = 1; |
||
| 146 | if ($xoopsUser->getVar('uid') == $link_arr['submitter']) { |
||
| 147 | $link['usermodify'] = '<a href="' . XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/submit.php?lid=' . $link_arr['lid'] . '"> ' . _MD_WFL_MODIFY . '</a> |'; |
||
| 148 | } |
||
| 149 | } |
||
| 150 | } |
||
| 151 | |||
| 152 | switch ($helper->getConfig('selectforum')) { |
||
| 153 | case '1': |
||
| 154 | $forum = 'newbb'; |
||
| 155 | $forum_path_prefix = '/modules/newbb/viewforum.php?forum='; |
||
| 156 | break; |
||
| 157 | case '2': |
||
| 158 | $forum = 'ipboard'; |
||
| 159 | $forum_path_prefix = '/modules/ipboard/index.php?showforum='; |
||
| 160 | break; |
||
| 161 | case '3': |
||
| 162 | $forum = 'pbboard'; |
||
| 163 | $forum_path_prefix = '/modules/pbboard/viewforum.php?f='; |
||
| 164 | break; |
||
| 165 | case '4': |
||
| 166 | $forum = 'newbbex'; |
||
| 167 | $forum_path_prefix = '/modules/newbbex/viewforum.php?forum='; |
||
| 168 | break; |
||
| 169 | } |
||
| 170 | $xoopsforumModule = $xoopsModule::getByDirname($forum); |
||
| 171 | if (is_object($xoopsforumModule) && $xoopsforumModule->getVar('isactive')) { |
||
| 172 | $link['forumid'] = ($link_arr['forumid'] > 0) ? $link_arr['forumid'] : 0; |
||
| 173 | $link['forum_path'] = $forum_path_prefix . (string)$link['forumid']; |
||
| 174 | } |
||
| 175 | |||
| 176 | $xoopsTpl->assign('ratethislink', '<a href="' . XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/ratelink.php?cid=' . $link_arr['cid'] . '&lid=' . $link_arr['lid'] . '">' . _MD_WFL_RATETHISFILE . '</a>'); |
||
| 177 | |||
| 178 | $xoopsTpl->assign('reportbroken', '<a href="' . XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/brokenlink.php?lid=' . $link_arr['lid'] . '">' . _MD_WFL_REPORTBROKEN . '</a>'); |
||
| 179 | |||
| 180 | $xoopsTpl->assign('mailto', '<a href="mailto:?subject=' . $mail_subject . '&body=' . $mail_body . '" target="_top">' . _MD_WFL_TELLAFRIEND . '</a>'); |
||
| 181 | |||
| 182 | $xoopsTpl->assign('commentz', '<a href="' . XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/singlelink.php?cid=' . $link_arr['cid'] . '&lid=' . $link_arr['lid'] . '">' . _COMMENTS . ' (' . $link_arr['comments'] . ')</a>'); |
||
| 183 | |||
| 184 | $xoopsTpl->assign('print', '<a href="' . XOOPS_URL . '/modules/' . $xoopsModule->getVar('dirname') . '/print.php?lid=' . $link_arr['lid'] . '" target="_blank">' . _MD_WFL_PRINT . '</a>'); |
||
| 185 | |||
| 186 | $link['icons'] = Wflinks\Utility::displayIcons($link_arr['published'], $link_arr['status'], $link_arr['hits']); |
||
| 187 | $link['allow_rating'] = Wflinks\Utility::checkGroups($cid, 'WFLinkRatePerms') ? true : false; |
||
| 188 | $link['total_chars'] = $helper->getConfig('totalchars'); |
||
| 189 | $link['module_dir'] = $xoopsModule->getVar('dirname'); |
||
| 190 | $link['otherlinx'] = $helper->getConfig('otherlinks'); |
||
| 191 | $link['showpagerank'] = $helper->getConfig('showpagerank'); |
||
| 192 | $link['quickview'] = $helper->getConfig('quickview'); |
||
| 193 | $link['comment_rules'] = $helper->getConfig('com_rule'); |
||
| 194 | $link['autoscrshot'] = $helper->getConfig('useautothumb'); |
||
| 195 |