@@ -28,7 +28,7 @@ discard block |
||
28 | 28 | require_once 'SecureHandler.php'; |
29 | 29 | session_name('teampass_session'); |
30 | 30 | session_start(); |
31 | -if (! isset($_SESSION['CPM']) || $_SESSION['CPM'] === false || ! isset($_SESSION['key']) || empty($_SESSION['key'])) { |
|
31 | +if (!isset($_SESSION['CPM']) || $_SESSION['CPM'] === false || !isset($_SESSION['key']) || empty($_SESSION['key'])) { |
|
32 | 32 | die('Hacking attempt...'); |
33 | 33 | } |
34 | 34 | |
@@ -42,17 +42,17 @@ discard block |
||
42 | 42 | } |
43 | 43 | |
44 | 44 | // Do checks |
45 | -require_once $SETTINGS['cpassman_dir'] . '/includes/config/include.php'; |
|
46 | -require_once $SETTINGS['cpassman_dir'] . '/sources/checks.php'; |
|
45 | +require_once $SETTINGS['cpassman_dir'].'/includes/config/include.php'; |
|
46 | +require_once $SETTINGS['cpassman_dir'].'/sources/checks.php'; |
|
47 | 47 | if (checkUser($_SESSION['user_id'], $_SESSION['key'], 'items', $SETTINGS) === false) { |
48 | 48 | // Not allowed page |
49 | 49 | $_SESSION['error']['code'] = ERR_NOT_ALLOWED; |
50 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
50 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
51 | 51 | exit; |
52 | 52 | } |
53 | 53 | |
54 | -require_once $SETTINGS['cpassman_dir'] . '/includes/language/' . $_SESSION['user_language'] . '.php'; |
|
55 | -require_once $SETTINGS['cpassman_dir'] . '/includes/config/settings.php'; |
|
54 | +require_once $SETTINGS['cpassman_dir'].'/includes/language/'.$_SESSION['user_language'].'.php'; |
|
55 | +require_once $SETTINGS['cpassman_dir'].'/includes/config/settings.php'; |
|
56 | 56 | header('Content-type: text/html; charset=utf-8'); |
57 | 57 | header('Cache-Control: no-cache, must-revalidate'); |
58 | 58 | require_once 'main.functions.php'; |
@@ -60,12 +60,12 @@ discard block |
||
60 | 60 | if (isset($_SESSION['groupes_visibles']) === false |
61 | 61 | || empty($_SESSION['groupes_visibles']) === true |
62 | 62 | ) { |
63 | - echo '{"sEcho": ' . intval($_GET['sEcho']) . ' ,"iTotalRecords": "0", "iTotalDisplayRecords": "0", "aaData": [] }'; |
|
63 | + echo '{"sEcho": '.intval($_GET['sEcho']).' ,"iTotalRecords": "0", "iTotalDisplayRecords": "0", "aaData": [] }'; |
|
64 | 64 | exit; |
65 | 65 | } |
66 | 66 | |
67 | 67 | //Connect to DB |
68 | -require_once $SETTINGS['cpassman_dir'] . '/includes/libraries/Database/Meekrodb/db.class.php'; |
|
68 | +require_once $SETTINGS['cpassman_dir'].'/includes/libraries/Database/Meekrodb/db.class.php'; |
|
69 | 69 | if (defined('DB_PASSWD_CLEAR') === false) { |
70 | 70 | define('DB_PASSWD_CLEAR', defuseReturnDecrypted(DB_PASSWD, $SETTINGS)); |
71 | 71 | } |
@@ -89,7 +89,7 @@ discard block |
||
89 | 89 | $folders = $_SESSION['groupes_visibles']; |
90 | 90 | } else { |
91 | 91 | // Build tree |
92 | - $tree = new SplClassLoader('Tree\NestedTree', $SETTINGS['cpassman_dir'] . '/includes/libraries'); |
|
92 | + $tree = new SplClassLoader('Tree\NestedTree', $SETTINGS['cpassman_dir'].'/includes/libraries'); |
|
93 | 93 | $tree->register(); |
94 | 94 | $tree = new Tree\NestedTree\NestedTree(prefixTable('nested_tree'), 'id', 'parent_id', 'title'); |
95 | 95 | $folders = $tree->getDescendants(filter_var($_GET['limited'], FILTER_SANITIZE_NUMBER_INT), true); |
@@ -98,7 +98,7 @@ discard block |
||
98 | 98 | |
99 | 99 | //Get current user "personal folder" ID |
100 | 100 | $row = DB::query( |
101 | - 'SELECT id FROM ' . prefixTable('nested_tree') . ' WHERE title = %i', |
|
101 | + 'SELECT id FROM '.prefixTable('nested_tree').' WHERE title = %i', |
|
102 | 102 | intval($_SESSION['user_id']) |
103 | 103 | ); |
104 | 104 | //get list of personal folders |
@@ -107,20 +107,20 @@ discard block |
||
107 | 107 | $listPf = ''; |
108 | 108 | if (empty($row['id']) === false) { |
109 | 109 | $rows = DB::query( |
110 | - 'SELECT id FROM ' . prefixTable('nested_tree') . ' |
|
110 | + 'SELECT id FROM '.prefixTable('nested_tree').' |
|
111 | 111 | WHERE personal_folder = 1 AND NOT parent_id = %i AND NOT title = %i', |
112 | 112 | filter_var($row['id'], FILTER_SANITIZE_NUMBER_INT), |
113 | 113 | filter_var($_SESSION['user_id'], FILTER_SANITIZE_NUMBER_INT) |
114 | 114 | ); |
115 | 115 | foreach ($rows as $record) { |
116 | - if (! in_array($record['id'], $arrayPf)) { |
|
116 | + if (!in_array($record['id'], $arrayPf)) { |
|
117 | 117 | //build an array of personal folders ids |
118 | 118 | array_push($arrayPf, $record['id']); |
119 | 119 | //build also a string with those ids |
120 | 120 | if (empty($listPf)) { |
121 | 121 | $listPf = $record['id']; |
122 | 122 | } else { |
123 | - $listPf .= ', ' . $record['id']; |
|
123 | + $listPf .= ', '.$record['id']; |
|
124 | 124 | } |
125 | 125 | } |
126 | 126 | } |
@@ -130,7 +130,7 @@ discard block |
||
130 | 130 | //Paging |
131 | 131 | $sLimit = ''; |
132 | 132 | if (isset($_GET['start']) === true && $_GET['length'] !== '-1') { |
133 | - $sLimit = 'LIMIT ' . filter_var($_GET['start'], FILTER_SANITIZE_NUMBER_INT) . ', ' . filter_var($_GET['length'], FILTER_SANITIZE_NUMBER_INT) . ''; |
|
133 | + $sLimit = 'LIMIT '.filter_var($_GET['start'], FILTER_SANITIZE_NUMBER_INT).', '.filter_var($_GET['length'], FILTER_SANITIZE_NUMBER_INT).''; |
|
134 | 134 | } |
135 | 135 | |
136 | 136 | //Ordering |
@@ -143,8 +143,8 @@ discard block |
||
143 | 143 | } |
144 | 144 | $sOrder = 'ORDER BY '; |
145 | 145 | if ($_GET['order'][0]['column'] >= 0) { |
146 | - $sOrder .= '' . $aColumns[filter_var($_GET['order'][0]['column'], FILTER_SANITIZE_NUMBER_INT)] . ' ' |
|
147 | - . filter_var($_GET['order'][0]['dir'], FILTER_SANITIZE_STRING) . ', '; |
|
146 | + $sOrder .= ''.$aColumns[filter_var($_GET['order'][0]['column'], FILTER_SANITIZE_NUMBER_INT)].' ' |
|
147 | + . filter_var($_GET['order'][0]['dir'], FILTER_SANITIZE_STRING).', '; |
|
148 | 148 | } |
149 | 149 | |
150 | 150 | $sOrder = substr_replace($sOrder, '', -2); |
@@ -152,7 +152,7 @@ discard block |
||
152 | 152 | $sOrder = ''; |
153 | 153 | } |
154 | 154 | } else { |
155 | - $sOrder = 'ORDER BY ' . $aColumns[1] . ' ASC'; |
|
155 | + $sOrder = 'ORDER BY '.$aColumns[1].' ASC'; |
|
156 | 156 | } |
157 | 157 | |
158 | 158 | // Define criteria |
@@ -174,9 +174,9 @@ discard block |
||
174 | 174 | if (empty($search_criteria) === false) { |
175 | 175 | $sWhere .= ' AND ('; |
176 | 176 | for ($i = 0; $i < count($aColumns); ++$i) { |
177 | - $sWhere .= $aColumns[$i] . ' LIKE %ss_' . $i . ' OR '; |
|
177 | + $sWhere .= $aColumns[$i].' LIKE %ss_'.$i.' OR '; |
|
178 | 178 | } |
179 | - $sWhere = substr_replace((string) $sWhere, '', -3) . ') '; |
|
179 | + $sWhere = substr_replace((string) $sWhere, '', -3).') '; |
|
180 | 180 | $crit = [ |
181 | 181 | 'idtree' => array_unique($folders), |
182 | 182 | '0' => $search_criteria, |
@@ -214,13 +214,13 @@ discard block |
||
214 | 214 | if (empty($sWhere) === false) { |
215 | 215 | $sWhere .= ' AND '; |
216 | 216 | } |
217 | - $sWhere = 'WHERE ' . $sWhere . 'id_tree NOT IN %ls_pf '; |
|
217 | + $sWhere = 'WHERE '.$sWhere.'id_tree NOT IN %ls_pf '; |
|
218 | 218 | } else { |
219 | - $sWhere = 'WHERE ' . $sWhere; |
|
219 | + $sWhere = 'WHERE '.$sWhere; |
|
220 | 220 | } |
221 | 221 | |
222 | 222 | DB::query( |
223 | - 'SELECT id FROM ' . prefixTable('cache') . " |
|
223 | + 'SELECT id FROM '.prefixTable('cache')." |
|
224 | 224 | ${sWhere} |
225 | 225 | ${sOrder}", |
226 | 226 | $crit |
@@ -228,7 +228,7 @@ discard block |
||
228 | 228 | $iTotal = DB::count(); |
229 | 229 | $rows = DB::query( |
230 | 230 | 'SELECT id, label, description, tags, id_tree, perso, restricted_to, login, folder, author, renewal_period, url, timestamp |
231 | - FROM ' . prefixTable('cache') . " |
|
231 | + FROM ' . prefixTable('cache')." |
|
232 | 232 | ${sWhere} |
233 | 233 | ${sOrder} |
234 | 234 | ${sLimit}", |
@@ -241,7 +241,7 @@ discard block |
||
241 | 241 | if (isset($_GET['type']) === false) { |
242 | 242 | $sOutput = '{'; |
243 | 243 | if (isset($_GET['draw']) === true) { |
244 | - $sOutput .= '"draw": ' . intval($_GET['draw']) . ', '; |
|
244 | + $sOutput .= '"draw": '.intval($_GET['draw']).', '; |
|
245 | 245 | } |
246 | 246 | $sOutput .= '"data": ['; |
247 | 247 | $sOutputConst = ''; |
@@ -258,7 +258,7 @@ discard block |
||
258 | 258 | foreach (explode(';', $_SESSION['fonction_id']) as $role) { |
259 | 259 | //db::debugmode(true); |
260 | 260 | $access = DB::queryFirstRow( |
261 | - 'SELECT type FROM ' . prefixTable('roles_values') . ' WHERE role_id = %i AND folder_id = %i', |
|
261 | + 'SELECT type FROM '.prefixTable('roles_values').' WHERE role_id = %i AND folder_id = %i', |
|
262 | 262 | $role, |
263 | 263 | $record['id_tree'] |
264 | 264 | ); |
@@ -278,7 +278,7 @@ discard block |
||
278 | 278 | } |
279 | 279 | $accessLevel = count($arrTmp) > 0 ? min($arrTmp) : $accessLevel; |
280 | 280 | if ($accessLevel === 0) { |
281 | - $checkbox = '<input type=\"checkbox\" value=\"0\" class=\"mass_op_cb\" data-id=\"' . $record['id'] . '\">'; |
|
281 | + $checkbox = '<input type=\"checkbox\" value=\"0\" class=\"mass_op_cb\" data-id=\"'.$record['id'].'\">'; |
|
282 | 282 | } |
283 | 283 | |
284 | 284 | if ((int) $accessLevel === 0) { |
@@ -318,22 +318,22 @@ discard block |
||
318 | 318 | if (empty($restrictedTo)) { |
319 | 319 | $restrictedTo = $_SESSION['user_id']; |
320 | 320 | } else { |
321 | - $restrictedTo .= ',' . $_SESSION['user_id']; |
|
321 | + $restrictedTo .= ','.$_SESSION['user_id']; |
|
322 | 322 | } |
323 | 323 | } |
324 | 324 | |
325 | 325 | //col1 |
326 | - $sOutputItem .= '"<i class=\"fa fa-external-link-alt infotip mr-2\" title=\"' . langHdl('open_url_link') . '\" onClick=\"window.location.href='index.php?page=items&group=' . $record['id_tree'] . '&id=' . $record['id'] . ''\" style=\"cursor:pointer;\"></i>' . |
|
327 | - '<i class=\"fa fa-eye infotip mr-2 item-detail\" title=\"' . langHdl('see_item_title') . '\" data-id=\"' . $record['id'] . '\" data-perso=\"' . $record['perso'] . '\" data-tree-id=\"' . $record['id_tree'] . '\" data-expired=\"' . $expired . '\" data-restricted-to=\"' . $restrictedTo . '\" data-rights=\"' . $right . '\" style=\"cursor:pointer;\"></i>' . $checkbox . '", '; |
|
326 | + $sOutputItem .= '"<i class=\"fa fa-external-link-alt infotip mr-2\" title=\"'.langHdl('open_url_link').'\" onClick=\"window.location.href='index.php?page=items&group='.$record['id_tree'].'&id='.$record['id'].''\" style=\"cursor:pointer;\"></i>'. |
|
327 | + '<i class=\"fa fa-eye infotip mr-2 item-detail\" title=\"'.langHdl('see_item_title').'\" data-id=\"'.$record['id'].'\" data-perso=\"'.$record['perso'].'\" data-tree-id=\"'.$record['id_tree'].'\" data-expired=\"'.$expired.'\" data-restricted-to=\"'.$restrictedTo.'\" data-rights=\"'.$right.'\" style=\"cursor:pointer;\"></i>'.$checkbox.'", '; |
|
328 | 328 | //col2 |
329 | - $sOutputItem .= '"<span id=\"item_label-' . $record['id'] . '\">' . str_replace("\\", "\", (string) $record['label']) . '</span>", '; // replace backslash #3015 |
|
329 | + $sOutputItem .= '"<span id=\"item_label-'.$record['id'].'\">'.str_replace("\\", "\", (string) $record['label']).'</span>", '; // replace backslash #3015 |
|
330 | 330 | //col3 |
331 | - $sOutputItem .= '"' . str_replace('&', '&', htmlspecialchars(stripslashes((string) $record['login']), ENT_QUOTES)) . '", '; |
|
331 | + $sOutputItem .= '"'.str_replace('&', '&', htmlspecialchars(stripslashes((string) $record['login']), ENT_QUOTES)).'", '; |
|
332 | 332 | //col4 |
333 | 333 | //get restriction from ROles |
334 | 334 | $restrictedToRole = false; |
335 | 335 | $rTmp = DB::queryFirstColumn( |
336 | - 'SELECT role_id FROM ' . prefixTable('restriction_to_roles') . ' WHERE item_id = %i', |
|
336 | + 'SELECT role_id FROM '.prefixTable('restriction_to_roles').' WHERE item_id = %i', |
|
337 | 337 | $record['id'] |
338 | 338 | ); |
339 | 339 | // We considere here that if user has at least one group similar to the object ones |
@@ -351,14 +351,14 @@ discard block |
||
351 | 351 | } else { |
352 | 352 | $txt = str_replace(['\n', '<br />', '\\'], [' ', ' ', '', ' '], strip_tags($record['description'])); |
353 | 353 | if (strlen($txt) > 50) { |
354 | - $sOutputItem .= '"' . substr(stripslashes(preg_replace('~/<[\/]{0,1}[^>]*>\//|[ \t]/~', '', $txt)), 0, 50) . '", '; |
|
354 | + $sOutputItem .= '"'.substr(stripslashes(preg_replace('~/<[\/]{0,1}[^>]*>\//|[ \t]/~', '', $txt)), 0, 50).'", '; |
|
355 | 355 | } else { |
356 | - $sOutputItem .= '"' . stripslashes(preg_replace('~/<[^>]*>|[ \t]/~', '', $txt)) . '", '; |
|
356 | + $sOutputItem .= '"'.stripslashes(preg_replace('~/<[^>]*>|[ \t]/~', '', $txt)).'", '; |
|
357 | 357 | } |
358 | 358 | } |
359 | 359 | |
360 | 360 | //col5 - TAGS |
361 | - $sOutputItem .= '"' . htmlspecialchars(stripslashes((string) $record['tags']), ENT_QUOTES) . '", '; |
|
361 | + $sOutputItem .= '"'.htmlspecialchars(stripslashes((string) $record['tags']), ENT_QUOTES).'", '; |
|
362 | 362 | // col6 - URL |
363 | 363 | if ($record['url'] !== '0') { |
364 | 364 | $sOutputItem .= '"'.filter_var($record['url'], FILTER_SANITIZE_URL).'", '; |
@@ -367,7 +367,7 @@ discard block |
||
367 | 367 | } |
368 | 368 | |
369 | 369 | //col7 - Prepare the Treegrid |
370 | - $sOutputItem .= '"' . htmlspecialchars(stripslashes((string) $record['folder']), ENT_QUOTES) . '"'; |
|
370 | + $sOutputItem .= '"'.htmlspecialchars(stripslashes((string) $record['folder']), ENT_QUOTES).'"'; |
|
371 | 371 | //Finish the line |
372 | 372 | $sOutputItem .= '], '; |
373 | 373 | if ($getItemInList === true) { |
@@ -376,16 +376,16 @@ discard block |
||
376 | 376 | --$iTotal; |
377 | 377 | } |
378 | 378 | } |
379 | - if (! empty($sOutputConst)) { |
|
379 | + if (!empty($sOutputConst)) { |
|
380 | 380 | $sOutput .= substr_replace($sOutputConst, '', -2); |
381 | 381 | } |
382 | 382 | $sOutput .= '], '; |
383 | - $sOutput .= '"recordsTotal": ' . $iTotal . ', '; |
|
384 | - $sOutput .= '"recordsFiltered": ' . $iTotal . ' }'; |
|
383 | + $sOutput .= '"recordsTotal": '.$iTotal.', '; |
|
384 | + $sOutput .= '"recordsFiltered": '.$iTotal.' }'; |
|
385 | 385 | echo $sOutput; |
386 | 386 | } elseif (isset($_GET['type']) && ($_GET['type'] === 'search_for_items' || $_GET['type'] === 'search_for_items_with_tags')) { |
387 | 387 | include_once 'main.functions.php'; |
388 | - include_once $SETTINGS['cpassman_dir'] . '/includes/language/' . $_SESSION['user_language'] . '.php'; |
|
388 | + include_once $SETTINGS['cpassman_dir'].'/includes/language/'.$_SESSION['user_language'].'.php'; |
|
389 | 389 | |
390 | 390 | $arr_data = []; |
391 | 391 | foreach ($rows as $record) { |
@@ -405,7 +405,7 @@ discard block |
||
405 | 405 | |
406 | 406 | // Anyone can modify? |
407 | 407 | $tmp = DB::queryfirstrow( |
408 | - 'SELECT anyone_can_modify FROM ' . prefixTable('items') . ' WHERE id = %i', |
|
408 | + 'SELECT anyone_can_modify FROM '.prefixTable('items').' WHERE id = %i', |
|
409 | 409 | $record['id'] |
410 | 410 | ); |
411 | 411 | if (count($tmp) > 0) { |
@@ -436,7 +436,7 @@ discard block |
||
436 | 436 | // => récupérer un tableau contenant les roles associés à cet ID (a partir table restriction_to_roles) |
437 | 437 | $user_is_included_in_role = 0; |
438 | 438 | $roles = DB::query( |
439 | - 'SELECT role_id FROM ' . prefixTable('restriction_to_roles') . ' WHERE item_id=%i', |
|
439 | + 'SELECT role_id FROM '.prefixTable('restriction_to_roles').' WHERE item_id=%i', |
|
440 | 440 | $record['id'] |
441 | 441 | ); |
442 | 442 | if (count($roles) > 0) { |
@@ -459,7 +459,7 @@ discard block |
||
459 | 459 | if (empty($restrictedTo)) { |
460 | 460 | $restrictedTo = $_SESSION['user_id']; |
461 | 461 | } else { |
462 | - $restrictedTo .= ',' . $_SESSION['user_id']; |
|
462 | + $restrictedTo .= ','.$_SESSION['user_id']; |
|
463 | 463 | } |
464 | 464 | } |
465 | 465 | |
@@ -557,7 +557,7 @@ discard block |
||
557 | 557 | $arrTmp = []; |
558 | 558 | foreach (explode(';', $_SESSION['fonction_id']) as $role) { |
559 | 559 | $access = DB::queryFirstRow( |
560 | - 'SELECT type FROM ' . prefixTable('roles_values') . ' WHERE role_id = %i AND folder_id = %i', |
|
560 | + 'SELECT type FROM '.prefixTable('roles_values').' WHERE role_id = %i AND folder_id = %i', |
|
561 | 561 | $role, |
562 | 562 | $record['id_tree'] |
563 | 563 | ); |
@@ -606,8 +606,8 @@ discard block |
||
606 | 606 | ) { |
607 | 607 | $data_item = DB::queryFirstRow( |
608 | 608 | 'SELECT i.pw AS pw, s.share_key AS share_key |
609 | - FROM ' . prefixTable('items') . ' AS i |
|
610 | - INNER JOIN ' . prefixTable('sharekeys_items') . ' AS s ON (s.object_id = i.id) |
|
609 | + FROM ' . prefixTable('items').' AS i |
|
610 | + INNER JOIN ' . prefixTable('sharekeys_items').' AS s ON (s.object_id = i.id) |
|
611 | 611 | WHERE i.id = %i AND s.user_id = %i', |
612 | 612 | $record['id'], |
613 | 613 | $_SESSION['user_id'] |
@@ -653,5 +653,5 @@ discard block |
||
653 | 653 | 'start' => (int) (isset($_GET['start']) === true && (int) $_GET['length'] !== -1) ? (int) $_GET['start'] + (int) $_GET['length'] : -1, |
654 | 654 | ]; |
655 | 655 | echo prepareExchangedData( |
656 | - $SETTINGS['cpassman_dir'],$returnValues, 'encode'); |
|
656 | + $SETTINGS['cpassman_dir'], $returnValues, 'encode'); |
|
657 | 657 | } |
@@ -1038,4 +1038,4 @@ |
||
1038 | 1038 | |
1039 | 1039 | |
1040 | 1040 | |
1041 | ->>>>>>> ea385d6dd3e6d00f358e96c37ff539392e0cd240 |
|
1041 | +>> >> >> > ea385d6dd3e6d00f358e96c37ff539392e0cd240 |