This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php |
||
2 | |||
3 | namespace XoopsModules\Xoositemap; |
||
4 | |||
5 | /** |
||
6 | * Xoopreferences : Preferences Manager |
||
7 | * |
||
8 | * You may not change or alter any portion of this comment or credits |
||
9 | * of supporting developers from this source code or any supporting source code |
||
10 | * which is considered copyrighted (c) material of the original comment or credit authors. |
||
11 | * This program is distributed in the hope that it will be useful, |
||
12 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||
14 | * |
||
15 | * @copyright XOOPS Project (https://xoops.org) |
||
16 | * @license GNU GPL 2 (http://www.gnu.org/licenses/old-licenses/gpl-2.0.html) |
||
17 | * @package Xoositemap |
||
18 | * @since 2.6.0 |
||
19 | * @author Laurent JEN (Aka DuGris) |
||
20 | |||
21 | */ |
||
22 | class Preferences |
||
23 | { |
||
24 | public $config = []; |
||
25 | public $basicConfig = []; |
||
26 | public $configPath; |
||
27 | public $configFile; |
||
28 | private $moduleDirName = 'xoositemap'; |
||
29 | |||
30 | /** |
||
31 | * Xoositemap\Preferences constructor. |
||
32 | */ |
||
33 | public function __construct() |
||
34 | { |
||
35 | $xoops = \Xoops::getInstance(); |
||
36 | $this->configFile = 'config.' . $this->moduleDirName . '.php'; |
||
37 | |||
38 | $this->configPath = \XoopsBaseConfig::get('var-path') . '/configs/' . $this->moduleDirName . '/'; |
||
39 | |||
40 | $this->basicConfig = $this->loadBasicConfig(); |
||
41 | $this->config = @$this->loadConfig(); |
||
42 | |||
43 | if (count($this->config) != count($this->basicConfig)) { |
||
44 | $this->config = array_merge($this->basicConfig, $this->config); |
||
45 | $this->writeConfig($this->config); |
||
46 | } |
||
47 | } |
||
48 | |||
49 | /** |
||
50 | * @return mixed |
||
51 | */ |
||
52 | public static function getInstance() |
||
53 | { |
||
54 | static $instance; |
||
55 | if (!isset($instance)) { |
||
56 | $class = __CLASS__; |
||
57 | $instance = new $class(); |
||
58 | } |
||
59 | |||
60 | return $instance; |
||
61 | } |
||
62 | |||
63 | /** |
||
64 | * @return array |
||
65 | */ |
||
66 | public function getConfig() |
||
67 | { |
||
68 | return $this->config; |
||
69 | } |
||
70 | |||
71 | /** |
||
72 | * Xoositemap\Preferences::loadConfig() |
||
73 | * |
||
74 | * @return array |
||
75 | */ |
||
76 | public function loadConfig() |
||
77 | { |
||
78 | if (!$config = $this->readConfig()) { |
||
79 | $config = $this->loadBasicConfig(); |
||
80 | $this->writeConfig($config); |
||
81 | } |
||
82 | |||
83 | return $config; |
||
84 | } |
||
85 | |||
86 | /** |
||
87 | * Xoositemap\Preferences::loadBasicConfig() |
||
88 | * |
||
89 | * @return array |
||
90 | */ |
||
91 | public function loadBasicConfig() |
||
92 | { |
||
93 | if (file_exists($file_path = dirname(__DIR__) . '/include/' . $this->configFile)) { |
||
94 | $config = include $file_path; |
||
95 | } |
||
96 | |||
97 | return $config; |
||
98 | } |
||
99 | |||
100 | /** |
||
101 | * Xoositemap\Preferences::readConfig() |
||
102 | * |
||
103 | * @return array |
||
104 | */ |
||
105 | public function readConfig() |
||
106 | { |
||
107 | $file_path = $this->configPath . $this->configFile; |
||
108 | \XoopsLoad::load('XoopsFile'); |
||
109 | $file = \XoopsFile::getHandler('file', $file_path); |
||
110 | |||
111 | return eval(@$file->read()); |
||
112 | } |
||
113 | |||
114 | /** |
||
115 | * Xoositemap\Preferences::writeConfig() |
||
116 | * |
||
117 | * @param array $config |
||
118 | * @return bool|null |
||
119 | * @internal param string $filename |
||
120 | */ |
||
121 | public function writeConfig($config) |
||
122 | { |
||
123 | if ($this->createPath($this->configPath)) { |
||
124 | $file_path = $this->configPath . $this->configFile; |
||
125 | \XoopsLoad::load('XoopsFile'); |
||
126 | $file = \XoopsFile::getHandler('file', $file_path); |
||
127 | |||
128 | return $file->write('return ' . var_export($config, true) . ';'); |
||
129 | } |
||
130 | |||
131 | return null; |
||
132 | } |
||
133 | |||
134 | /** |
||
135 | * @param $pathname |
||
136 | * @param mixed|string $pathout |
||
137 | * @return bool |
||
138 | */ |
||
139 | private function createPath($pathname, $pathout = XOOPS_ROOT_PATH) |
||
140 | { |
||
141 | $xoops = \Xoops::getInstance(); |
||
142 | $pathname = mb_substr($pathname, mb_strlen(\XoopsBaseConfig::get('root-path'))); |
||
143 | $pathname = str_replace(DIRECTORY_SEPARATOR, '/', $pathname); |
||
144 | |||
145 | $dest = $pathout; |
||
146 | $paths = explode('/', $pathname); |
||
147 | |||
148 | foreach ($paths as $path) { |
||
149 | if (!empty($path)) { |
||
150 | $dest = $dest . '/' . $path; |
||
151 | if (!is_dir($dest)) { |
||
152 | if (!mkdir($dest, 0755) && !is_dir($dest)) { |
||
153 | return false; |
||
154 | } |
||
155 | $this->writeIndex(\XoopsBaseConfig::get('uploads-path'), 'index.html', $dest); |
||
156 | } |
||
157 | } |
||
158 | } |
||
159 | |||
160 | return true; |
||
161 | } |
||
162 | |||
163 | /** |
||
164 | * @param $folder_in |
||
165 | * @param $source_file |
||
166 | * @param $folder_out |
||
167 | * @return bool |
||
168 | */ |
||
169 | private function writeIndex($folder_in, $source_file, $folder_out) |
||
170 | { |
||
171 | if (!is_dir($folder_out)) { |
||
172 | if (!$this->createPath($folder_out)) { |
||
173 | return false; |
||
174 | } |
||
175 | } |
||
176 | |||
177 | // Simple copy for a file |
||
178 | if (is_file($folder_in . '/' . $source_file)) { |
||
179 | return copy($folder_in . '/' . $source_file, $folder_out . '/' . basename($source_file)); |
||
180 | } |
||
181 | |||
182 | return false; |
||
183 | } |
||
184 | |||
185 | /** |
||
186 | * @param null $data |
||
0 ignored issues
–
show
Documentation
Bug
introduced
by
![]() |
|||
187 | * @param bool|true $module |
||
188 | * @return array |
||
189 | */ |
||
190 | public function prepare2Save($data = null, $module = true) |
||
191 | { |
||
192 | if (!isset($data)) { |
||
193 | $data = $_POST; |
||
194 | } |
||
195 | |||
196 | $config = []; |
||
197 | foreach (array_keys($data) as $k) { |
||
198 | if (is_array($data[$k])) { |
||
199 | $config[$k] = $this->prepare2Save($data[$k], false); |
||
200 | } else { |
||
201 | if (false !== mb_strpos($k, $this->moduleDirName . '_') || !$module) { |
||
202 | $config[$k] = $data[$k]; |
||
203 | } |
||
204 | } |
||
205 | } |
||
206 | |||
207 | return $config; |
||
208 | } |
||
209 | } |
||
210 |