nextcloud /
deck
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 48 | IUserManager $userManager, |
||
| 49 | IGroupManager $groupManager |
||
| 50 | ) { |
||
| 51 | parent::__construct($db, 'deck_boards', Board::class); |
||
|
|
|||
| 52 | $this->labelMapper = $labelMapper; |
||
| 53 | $this->aclMapper = $aclMapper; |
||
| 54 | $this->stackMapper = $stackMapper; |
||
| 70 | public function find($id, $withLabels = false, $withAcl = false) { |
||
| 71 | $sql = 'SELECT id, title, owner, color, archived, deleted_at, last_modified FROM `*PREFIX*deck_boards` ' . |
||
| 72 | 'WHERE `id` = ?'; |
||
| 73 | $board = $this->findEntity($sql, [$id]); |
||
| 74 | |||
| 75 | // Add labels |
||
| 76 | if ($withLabels) { |
||
| 99 | $sql = 'SELECT id, title, owner, color, archived, deleted_at, 0 as shared, last_modified FROM `*PREFIX*deck_boards` WHERE owner = ? AND last_modified > ? UNION ' . |
||
| 100 | 'SELECT boards.id, title, owner, color, archived, deleted_at, 1 as shared, last_modified FROM `*PREFIX*deck_boards` as boards ' . |
||
| 101 | 'JOIN `*PREFIX*deck_board_acl` as acl ON boards.id=acl.board_id WHERE acl.participant=? AND acl.type=? AND boards.owner != ? AND last_modified > ?'; |
||
| 102 | $entries = $this->findEntities($sql, [$userId, $since, $userId, Acl::PERMISSION_TYPE_USER, $userId, $since], $limit, $offset); |
||
| 103 | /* @var Board $entry */ |
||
| 104 | foreach ($entries as $entry) { |
||
| 105 | $acl = $this->aclMapper->findAll($entry->id); |
||
| 106 | $entry->setAcl($acl); |
||
| 123 | } |
||
| 124 | $sql = 'SELECT boards.id, title, owner, color, archived, deleted_at, 2 as shared, last_modified FROM `*PREFIX*deck_boards` as boards ' . |
||
| 125 | 'INNER JOIN `*PREFIX*deck_board_acl` as acl ON boards.id=acl.board_id WHERE owner != ? AND type=? AND ('; |
||
| 126 | View Code Duplication | for ($i = 0, $iMax = count($groups); $i < $iMax; $i++) { |
|
| 127 | $sql .= 'acl.participant = ? '; |
||
| 128 | if (count($groups) > 1 && $i < count($groups) - 1) { |
||
| 129 | $sql .= ' OR '; |
||
| 130 | } |
||
| 131 | } |
||
| 132 | $sql .= ');'; |
||
| 133 | $entries = $this->findEntities($sql, array_merge([$userId, Acl::PERMISSION_TYPE_GROUP], $groups), $limit, $offset); |
||
| 134 | /* @var Board $entry */ |
||
| 135 | foreach ($entries as $entry) { |
||
| 136 | $acl = $this->aclMapper->findAll($entry->id); |
||
| 137 | $entry->setAcl($acl); |
||
| 152 | |||
| 153 | $sql = 'SELECT boards.id, title, owner, color, archived, deleted_at, 2 as shared, last_modified FROM `*PREFIX*deck_boards` as boards ' . |
||
| 154 | 'INNER JOIN `*PREFIX*deck_board_acl` as acl ON boards.id=acl.board_id WHERE owner != ? AND type=? AND ('; |
||
| 155 | View Code Duplication | for ($i = 0, $iMax = count($circles); $i < $iMax; $i++) { |
|
| 156 | $sql .= 'acl.participant = ? '; |
||
| 157 | if (count($circles) > 1 && $i < count($circles) - 1) { |
||
| 158 | $sql .= ' OR '; |
||
| 159 | } |
||
| 160 | } |
||
| 161 | $sql .= ');'; |
||
| 162 | $entries = $this->findEntities($sql, array_merge([$userId, Acl::PERMISSION_TYPE_CIRCLE], $circles), $limit, $offset); |
||
| 163 | /* @var Board $entry */ |
||
| 164 | foreach ($entries as $entry) { |
||
| 165 | $acl = $this->aclMapper->findAll($entry->id); |
||
| 166 | $entry->setAcl($acl); |
||
| 170 | |||
| 171 | public function findAll() { |
||
| 172 | $sql = 'SELECT id from *PREFIX*deck_boards;'; |
||
| 173 | return $this->findEntities($sql); |
||
| 174 | } |
||
| 175 | |||
| 176 | public function findToDelete() { |
||
| 178 | $timeLimit = time() - (60 * 5); |
||
| 179 | $sql = 'SELECT id, title, owner, color, archived, deleted_at, last_modified FROM `*PREFIX*deck_boards` ' . |
||
| 180 | 'WHERE `deleted_at` > 0 AND `deleted_at` < ?'; |
||
| 181 | return $this->findEntities($sql, [$timeLimit]); |
||
| 182 | } |
||
| 183 | |||
| 184 | public function delete(/** @noinspection PhpUnnecessaryFullyQualifiedNameInspection */ |
||
| 186 | // delete acl |
||
| 187 | $acl = $this->aclMapper->findAll($entity->getId()); |
||
| 188 | foreach ($acl as $item) { |
||
| 189 | $this->aclMapper->delete($item); |
||
| 190 | } |
||
| 191 | |||
| 192 | // delete stacks ( includes cards, assigned labels) |
||
| 200 | $this->labelMapper->delete($label); |
||
| 201 | } |
||
| 202 | |||
| 203 | return parent::delete($entity); |
||
| 204 | } |
||
| 205 | |||
| 206 | public function isOwner($userId, $boardId) { |
||
| 216 | $userManager = $this->userManager; |
||
| 217 | $groupManager = $this->groupManager; |
||
| 218 | $acl->resolveRelation('participant', function($participant) use (&$acl, &$userManager, &$groupManager) { |
||
| 219 | View Code Duplication | if ($acl->getType() === Acl::PERMISSION_TYPE_USER) { |
|
| 220 | $user = $userManager->get($participant); |
||
| 221 | if ($user !== null) { |
||
| 222 | return new User($user); |
||
| 224 | \OC::$server->getLogger()->debug('User ' . $acl->getId() . ' not found when mapping acl ' . $acl->getParticipant()); |
||
| 225 | return null; |
||
| 226 | } |
||
| 227 | View Code Duplication | if ($acl->getType() === Acl::PERMISSION_TYPE_GROUP) { |
|
| 228 | $group = $groupManager->get($participant); |
||
| 229 | if ($group !== null) { |
||
| 230 | return new Group($group); |
||
| 238 | if ($circle) { |
||
| 239 | return new Circle($circle); |
||
| 240 | } |
||
| 241 | } catch (\Exception $e) { |
||
| 242 | } |
||
| 243 | return null; |
||
| 244 | } |
||
| 250 | /** |
||
| 251 | * @param Board $board |
||
| 252 | */ |
||
| 253 | View Code Duplication | public function mapOwner(Board &$board) { |
|
| 254 | $userManager = $this->userManager; |
||
| 255 | $board->resolveRelation('owner', function($owner) use (&$userManager) { |
||
| 256 | $user = $userManager->get($owner); |
||
| 266 |
Julius Härtl
Loading history...
This method has been deprecated. The supplier of the class has supplied an explanatory message.
The explanatory message should give you some clue as to whether and when the method will be removed from the class and what other method or class to use instead.