@@ -32,7 +32,7 @@ |
||
32 | 32 | use TeampassClasses\OAuth2Controller\OAuth2Controller; |
33 | 33 | use TeampassClasses\SessionManager\SessionManager; |
34 | 34 | |
35 | -require_once __DIR__. '/../../includes/config/include.php'; |
|
35 | +require_once __DIR__.'/../../includes/config/include.php'; |
|
36 | 36 | require_once __DIR__.'/../../sources/main.functions.php'; |
37 | 37 | |
38 | 38 | // init |
@@ -67,7 +67,7 @@ discard block |
||
67 | 67 | |
68 | 68 | $processToPerform = DB::queryfirstrow( |
69 | 69 | 'SELECT * |
70 | - FROM ' . prefixTable('background_tasks') . ' |
|
70 | + FROM ' . prefixTable('background_tasks').' |
|
71 | 71 | WHERE (finished_at IS NULL OR finished_at = "") AND process_type = %s |
72 | 72 | ORDER BY increment_id ASC', |
73 | 73 | 'create_user_keys' |
@@ -109,7 +109,7 @@ discard block |
||
109 | 109 | $subTaskParams = json_decode($subTask['task'], true); |
110 | 110 | |
111 | 111 | if (WIP === true) { |
112 | - error_log('Subtask in progress: '.$subTask['increment_id']." (".$taskId.") - "./** @scrutinizer ignore-type */ print_r($subTaskParams,true)); |
|
112 | + error_log('Subtask in progress: '.$subTask['increment_id']." (".$taskId.") - "./** @scrutinizer ignore-type */ print_r($subTaskParams, true)); |
|
113 | 113 | } |
114 | 114 | |
115 | 115 | // Build all subtasks if first one |
@@ -118,7 +118,7 @@ discard block |
||
118 | 118 | // Get total number of items |
119 | 119 | DB::query( |
120 | 120 | 'SELECT * |
121 | - FROM ' . prefixTable('items') . ' |
|
121 | + FROM ' . prefixTable('items').' |
|
122 | 122 | '.(isset($taskArgumentsArray['only_personal_items']) === true && $taskArgumentsArray['only_personal_items'] === 1 ? 'WHERE perso = 1' : '') |
123 | 123 | ); |
124 | 124 | createAllSubTasks($subTaskParams['step'], DB::count(), $subTaskParams['nb'], $taskId); |
@@ -127,7 +127,7 @@ discard block |
||
127 | 127 | // Get total number of items |
128 | 128 | DB::query( |
129 | 129 | 'SELECT * |
130 | - FROM ' . prefixTable('log_items') . ' |
|
130 | + FROM ' . prefixTable('log_items').' |
|
131 | 131 | WHERE raison LIKE "at_pw :%" AND encryption_type = "teampass_aes"' |
132 | 132 | ); |
133 | 133 | createAllSubTasks($subTaskParams['step'], DB::count(), $subTaskParams['nb'], $taskId); |
@@ -136,7 +136,7 @@ discard block |
||
136 | 136 | // Get total number of items |
137 | 137 | DB::query( |
138 | 138 | 'SELECT * |
139 | - FROM ' . prefixTable('categories_items') . ' |
|
139 | + FROM ' . prefixTable('categories_items').' |
|
140 | 140 | WHERE encryption_type = "teampass_aes"' |
141 | 141 | ); |
142 | 142 | createAllSubTasks($subTaskParams['step'], DB::count(), $subTaskParams['nb'], $taskId); |
@@ -153,9 +153,9 @@ discard block |
||
153 | 153 | // Get total number of items |
154 | 154 | DB::query( |
155 | 155 | 'SELECT * |
156 | - FROM ' . prefixTable('files') . ' AS f |
|
157 | - INNER JOIN ' . prefixTable('items') . ' AS i ON i.id = f.id_item |
|
158 | - WHERE f.status = "' . TP_ENCRYPTION_NAME . '"' |
|
156 | + FROM ' . prefixTable('files').' AS f |
|
157 | + INNER JOIN ' . prefixTable('items').' AS i ON i.id = f.id_item |
|
158 | + WHERE f.status = "' . TP_ENCRYPTION_NAME.'"' |
|
159 | 159 | ); |
160 | 160 | createAllSubTasks($subTaskParams['step'], DB::count(), $subTaskParams['nb'], $taskId); |
161 | 161 | } |
@@ -182,7 +182,7 @@ discard block |
||
182 | 182 | // Check if subtasks have to be created |
183 | 183 | DB::query( |
184 | 184 | 'SELECT * |
185 | - FROM ' . prefixTable('background_subtasks') . ' |
|
185 | + FROM ' . prefixTable('background_subtasks').' |
|
186 | 186 | WHERE task_id = %i AND task LIKE %ss', |
187 | 187 | $taskId, |
188 | 188 | $action |
@@ -210,7 +210,7 @@ discard block |
||
210 | 210 | function countActiveSymfonyProcesses() { |
211 | 211 | // Count the number of active processes |
212 | 212 | return DB::queryFirstField( |
213 | - 'SELECT COUNT(*) FROM ' . prefixTable('background_subtasks') . |
|
213 | + 'SELECT COUNT(*) FROM '.prefixTable('background_subtasks'). |
|
214 | 214 | ' WHERE process_id IS NOT NULL AND finished_at IS NULL' |
215 | 215 | ); |
216 | 216 | } |
@@ -221,7 +221,7 @@ discard block |
||
221 | 221 | function getSubTasks($taskId) { |
222 | 222 | $task_to_perform = DB::query( |
223 | 223 | 'SELECT * |
224 | - FROM ' . prefixTable('background_subtasks') . ' |
|
224 | + FROM ' . prefixTable('background_subtasks').' |
|
225 | 225 | WHERE task_id = %i AND finished_at IS NULL |
226 | 226 | ORDER BY increment_id ASC', |
227 | 227 | $taskId |
@@ -270,7 +270,7 @@ discard block |
||
270 | 270 | function reloadSubTask($subTaskId) { |
271 | 271 | // Retrieve subtask information from the database |
272 | 272 | $subTask = DB::queryFirstRow( |
273 | - 'SELECT * FROM ' . prefixTable('background_subtasks') . ' WHERE increment_id = %i', |
|
273 | + 'SELECT * FROM '.prefixTable('background_subtasks').' WHERE increment_id = %i', |
|
274 | 274 | $subTaskId |
275 | 275 | ); |
276 | 276 | |
@@ -315,7 +315,7 @@ discard block |
||
315 | 315 | // Get all processes |
316 | 316 | $subtasks = DB::query( |
317 | 317 | 'SELECT * |
318 | - FROM ' . prefixTable('background_subtasks') . ' |
|
318 | + FROM ' . prefixTable('background_subtasks').' |
|
319 | 319 | WHERE process_id IS NOT NULL AND finished_at IS NULL' |
320 | 320 | ); |
321 | 321 |
@@ -71,7 +71,7 @@ discard block |
||
71 | 71 | function purgeTemporaryFiles(): void |
72 | 72 | { |
73 | 73 | // Load expected files |
74 | - require_once __DIR__. '/../sources/main.functions.php'; |
|
74 | + require_once __DIR__.'/../sources/main.functions.php'; |
|
75 | 75 | |
76 | 76 | // $SETTINGS is set then read folder |
77 | 77 | if (is_dir($SETTINGS['path_to_files_folder']) === true) { |
@@ -80,7 +80,7 @@ discard block |
||
80 | 80 | //delete file FILES |
81 | 81 | while (false !== ($f = readdir($dir))) { |
82 | 82 | if ($f !== '.' && $f !== '..' && $f !== '.htaccess') { |
83 | - $filePath = $SETTINGS['path_to_files_folder'] . '/' . $f; |
|
83 | + $filePath = $SETTINGS['path_to_files_folder'].'/'.$f; |
|
84 | 84 | if (file_exists($filePath) && ((time() - filectime($filePath)) > 604800)) { |
85 | 85 | fileDelete($filePath, $SETTINGS); |
86 | 86 | } |
@@ -101,7 +101,7 @@ discard block |
||
101 | 101 | while (false !== ($f = readdir($dir))) { |
102 | 102 | if ($f !== '.' && $f !== '..') { |
103 | 103 | if (strpos($f, '_delete.') > 0) { |
104 | - fileDelete($SETTINGS['path_to_upload_folder'] . '/' . $f, $SETTINGS); |
|
104 | + fileDelete($SETTINGS['path_to_upload_folder'].'/'.$f, $SETTINGS); |
|
105 | 105 | } |
106 | 106 | } |
107 | 107 | } |
@@ -64,7 +64,7 @@ discard block |
||
64 | 64 | ) { |
65 | 65 | // Not allowed page |
66 | 66 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
67 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
67 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
68 | 68 | exit; |
69 | 69 | } |
70 | 70 | |
@@ -125,7 +125,7 @@ discard block |
||
125 | 125 | ); |
126 | 126 | |
127 | 127 | $lastFolderChange = DB::queryfirstrow( |
128 | - 'SELECT valeur FROM ' . prefixTable('misc') . ' |
|
128 | + 'SELECT valeur FROM '.prefixTable('misc').' |
|
129 | 129 | WHERE type = %s AND intitule = %s', |
130 | 130 | 'timestamp', |
131 | 131 | 'last_folder_change' |
@@ -346,7 +346,7 @@ discard block |
||
346 | 346 | $nbItemsInSubfolders = (int) $node->nb_items_in_subfolders; |
347 | 347 | $nbItemsInFolder = (int) $node->nb_items_in_folder; |
348 | 348 | $nbSubfolders = (int) $node->nb_subfolders; |
349 | - break; // Get out as soon as we find a valid node. |
|
349 | + break; // Get out as soon as we find a valid node. |
|
350 | 350 | } |
351 | 351 | |
352 | 352 | if ($displayThisNode === true) { |
@@ -458,7 +458,7 @@ discard block |
||
458 | 458 | foreach ($currentNode->children as $child) { |
459 | 459 | recursiveTree( |
460 | 460 | (int) $child, |
461 | - $tree->getNode($child),// get node info for this child |
|
461 | + $tree->getNode($child), // get node info for this child |
|
462 | 462 | /** @scrutinizer ignore-type */ $tree, |
463 | 463 | $listFoldersLimitedKeys, |
464 | 464 | $listRestrictedFoldersForItemsKeys, |
@@ -505,7 +505,7 @@ discard block |
||
505 | 505 | $lang = new Language($session->get('user-language') ?? 'english'); |
506 | 506 | |
507 | 507 | // prepare json return for current node |
508 | - $parent = $currentNode->parent_id === '0' ? '#' : 'li_' . $currentNode->parent_id; |
|
508 | + $parent = $currentNode->parent_id === '0' ? '#' : 'li_'.$currentNode->parent_id; |
|
509 | 509 | |
510 | 510 | // handle displaying |
511 | 511 | if (isKeyExistingAndEqual('show_only_accessible_folders', 1, $SETTINGS) === true) { |
@@ -522,17 +522,17 @@ discard block |
||
522 | 522 | array_push( |
523 | 523 | $ret_json, |
524 | 524 | array( |
525 | - 'id' => 'li_' . $nodeId, |
|
525 | + 'id' => 'li_'.$nodeId, |
|
526 | 526 | 'parent' => $last_visible_parent === -1 ? $parent : $last_visible_parent, |
527 | 527 | 'text' => '<i class="'.$currentNode->fa_icon.' tree-folder mr-2" data-folder="'.$currentNode->fa_icon.'" data-folder-selected="'.$currentNode->fa_icon_selected.'"></i>'.$text.htmlspecialchars($currentNode->title).$nodeData['html'], |
528 | 528 | 'li_attr' => array( |
529 | 529 | 'class' => 'jstreeopen', |
530 | - 'title' => 'ID [' . $nodeId . '] ' . $nodeData['title'], |
|
530 | + 'title' => 'ID ['.$nodeId.'] '.$nodeData['title'], |
|
531 | 531 | ), |
532 | 532 | 'a_attr' => array( |
533 | - 'id' => 'fld_' . $nodeId, |
|
533 | + 'id' => 'fld_'.$nodeId, |
|
534 | 534 | 'class' => $nodeData['folderClass'], |
535 | - 'onclick' => 'ListerItems(' . $nodeId . ', ' . $nodeData['restricted'] . ', 0, 1)', |
|
535 | + 'onclick' => 'ListerItems('.$nodeId.', '.$nodeData['restricted'].', 0, 1)', |
|
536 | 536 | 'data-title' => htmlspecialchars($currentNode->title), |
537 | 537 | ), |
538 | 538 | 'is_pf' => in_array($nodeId, $inputData['personalFolders']) === true ? 1 : 0, |
@@ -548,12 +548,12 @@ discard block |
||
548 | 548 | array_push( |
549 | 549 | $ret_json, |
550 | 550 | array( |
551 | - 'id' => 'li_' . $nodeId, |
|
551 | + 'id' => 'li_'.$nodeId, |
|
552 | 552 | 'parent' => $last_visible_parent === -1 ? $parent : $last_visible_parent, |
553 | 553 | 'text' => '<i class="'.$currentNode->fa_icon.' tree-folder mr-2" data-folder="'.$currentNode->fa_icon.'" data-folder-selected="'.$currentNode->fa_icon_selected.'"></i>'.'<i class="fas fa-times fa-xs text-danger mr-1 ml-1"></i>'.$text.htmlspecialchars($currentNode->title).$nodeData['html'], |
554 | 554 | 'li_attr' => array( |
555 | 555 | 'class' => '', |
556 | - 'title' => 'ID [' . $nodeId . '] ' . $lang->get('no_access'), |
|
556 | + 'title' => 'ID ['.$nodeId.'] '.$lang->get('no_access'), |
|
557 | 557 | ), |
558 | 558 | ) |
559 | 559 | ); |
@@ -613,7 +613,7 @@ discard block |
||
613 | 613 | if (in_array($nodeId, $session_read_only_folders) === true) { |
614 | 614 | return [ |
615 | 615 | 'html' => '<i class="far fa-eye fa-xs mr-1 ml-1"></i>'. |
616 | - ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . $nbItemsInFolder .'/'.$nbItemsInSubfolders .'/'.$nbSubfolders. '</span>' : ''), |
|
616 | + ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.$nbItemsInFolder.'/'.$nbItemsInSubfolders.'/'.$nbSubfolders.'</span>' : ''), |
|
617 | 617 | 'title' => $lang->get('read_only_account'), |
618 | 618 | 'restricted' => 1, |
619 | 619 | 'folderClass' => 'folder_not_droppable', |
@@ -628,7 +628,7 @@ discard block |
||
628 | 628 | ) { |
629 | 629 | return [ |
630 | 630 | 'html' => '<i class="far fa-eye fa-xs mr-1"></i>'. |
631 | - ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . $nbItemsInFolder .'/'.$nbItemsInSubfolders .'/'.$nbSubfolders. '</span>' : ''), |
|
631 | + ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.$nbItemsInFolder.'/'.$nbItemsInSubfolders.'/'.$nbSubfolders.'</span>' : ''), |
|
632 | 632 | 'title' => $lang->get('read_only_account'), |
633 | 633 | 'restricted' => 0, |
634 | 634 | 'folderClass' => 'folder', |
@@ -639,7 +639,7 @@ discard block |
||
639 | 639 | } |
640 | 640 | |
641 | 641 | return [ |
642 | - 'html' => ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . $nbItemsInFolder .'/'.$nbItemsInSubfolders .'/'.$nbSubfolders. '</span>' : ''), |
|
642 | + 'html' => ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.$nbItemsInFolder.'/'.$nbItemsInSubfolders.'/'.$nbSubfolders.'</span>' : ''), |
|
643 | 643 | 'title' => '', |
644 | 644 | 'restricted' => 0, |
645 | 645 | 'folderClass' => 'folder', |
@@ -650,8 +650,8 @@ discard block |
||
650 | 650 | |
651 | 651 | } elseif (in_array($nodeId, $listFoldersLimitedKeys) === true) { |
652 | 652 | return [ |
653 | - 'html' => ($session_user_read_only === true ? '<i class="far fa-eye fa-xs mr-1"></i>' : '') . |
|
654 | - ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . count($session_list_folders_limited[$nodeId]) . '</span>' : ''), |
|
653 | + 'html' => ($session_user_read_only === true ? '<i class="far fa-eye fa-xs mr-1"></i>' : ''). |
|
654 | + ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.count($session_list_folders_limited[$nodeId]).'</span>' : ''), |
|
655 | 655 | 'title' => '', |
656 | 656 | 'restricted' => 1, |
657 | 657 | 'folderClass' => 'folder', |
@@ -662,8 +662,8 @@ discard block |
||
662 | 662 | |
663 | 663 | } elseif (in_array($nodeId, $listRestrictedFoldersForItemsKeys) === true) { |
664 | 664 | return [ |
665 | - 'html' => $session_user_read_only === true ? '<i class="far fa-eye fa-xs mr-1"></i>' : '' . |
|
666 | - '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . count($session_list_restricted_folders_for_items[$nodeId]) . '</span>', |
|
665 | + 'html' => $session_user_read_only === true ? '<i class="far fa-eye fa-xs mr-1"></i>' : ''. |
|
666 | + '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.count($session_list_restricted_folders_for_items[$nodeId]).'</span>', |
|
667 | 667 | 'title' => '', |
668 | 668 | 'restricted' => 1, |
669 | 669 | 'folderClass' => 'folder', |
@@ -773,7 +773,7 @@ discard block |
||
773 | 773 | // Does this user has a tree cache |
774 | 774 | $userCacheTree = DB::queryfirstrow( |
775 | 775 | 'SELECT data |
776 | - FROM ' . prefixTable('cache_tree') . ' |
|
776 | + FROM ' . prefixTable('cache_tree').' |
|
777 | 777 | WHERE user_id = %i', |
778 | 778 | $userId |
779 | 779 | ); |
@@ -73,7 +73,7 @@ discard block |
||
73 | 73 | if ($checkUserAccess->checkSession() === false || $checkUserAccess->userAccessPage('profile') === false) { |
74 | 74 | // Not allowed page |
75 | 75 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
76 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
76 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
77 | 77 | exit; |
78 | 78 | } |
79 | 79 | |
@@ -144,7 +144,7 @@ discard block |
||
144 | 144 | |
145 | 145 | // Get info about user to modify |
146 | 146 | $targetUserInfos = DB::queryfirstrow( |
147 | - 'SELECT admin, gestionnaire, can_manage_all_users, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
147 | + 'SELECT admin, gestionnaire, can_manage_all_users, isAdministratedByRole FROM '.prefixTable('users').' |
|
148 | 148 | WHERE id = %i', |
149 | 149 | (int) $dataReceived['user_id'] |
150 | 150 | ); |
@@ -264,7 +264,7 @@ discard block |
||
264 | 264 | // Check if user already exists |
265 | 265 | $data = DB::query( |
266 | 266 | 'SELECT id, fonction_id, groupes_interdits, groupes_visibles |
267 | - FROM ' . prefixTable('users') . ' |
|
267 | + FROM ' . prefixTable('users').' |
|
268 | 268 | WHERE login = %s |
269 | 269 | AND deleted_at IS NULL', |
270 | 270 | $login |
@@ -483,7 +483,7 @@ discard block |
||
483 | 483 | |
484 | 484 | // Get info about user to delete |
485 | 485 | $data_user = DB::queryfirstrow( |
486 | - 'SELECT login, admin, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
486 | + 'SELECT login, admin, isAdministratedByRole FROM '.prefixTable('users').' |
|
487 | 487 | WHERE id = %i', |
488 | 488 | $post_id |
489 | 489 | ); |
@@ -517,7 +517,7 @@ discard block |
||
517 | 517 | ); |
518 | 518 | // delete personal folder and subfolders |
519 | 519 | $data = DB::queryfirstrow( |
520 | - 'SELECT id FROM ' . prefixTable('nested_tree') . ' |
|
520 | + 'SELECT id FROM '.prefixTable('nested_tree').' |
|
521 | 521 | WHERE title = %s AND personal_folder = %i', |
522 | 522 | $post_id, |
523 | 523 | '1' |
@@ -530,7 +530,7 @@ discard block |
||
530 | 530 | DB::delete(prefixTable('nested_tree'), 'id = %i AND personal_folder = %i', $folder->id, '1'); |
531 | 531 | // delete items & logs |
532 | 532 | $items = DB::query( |
533 | - 'SELECT id FROM ' . prefixTable('items') . ' |
|
533 | + 'SELECT id FROM '.prefixTable('items').' |
|
534 | 534 | WHERE id_tree=%i AND perso = %i', |
535 | 535 | $folder->id, |
536 | 536 | '1' |
@@ -554,7 +554,7 @@ discard block |
||
554 | 554 | // Delete any process related to user |
555 | 555 | $processes = DB::query( |
556 | 556 | 'SELECT increment_id |
557 | - FROM ' . prefixTable('background_tasks') . ' |
|
557 | + FROM ' . prefixTable('background_tasks').' |
|
558 | 558 | WHERE JSON_EXTRACT(arguments, "$.new_user_id") = %i', |
559 | 559 | $post_id |
560 | 560 | ); |
@@ -607,7 +607,7 @@ discard block |
||
607 | 607 | $return = array(); |
608 | 608 | // Check if folder exists |
609 | 609 | $data = DB::query( |
610 | - 'SELECT * FROM ' . prefixTable('nested_tree') . ' |
|
610 | + 'SELECT * FROM '.prefixTable('nested_tree').' |
|
611 | 611 | WHERE title = %s AND parent_id = %i', |
612 | 612 | filter_input(INPUT_POST, 'domain', FILTER_SANITIZE_FULL_SPECIAL_CHARS), |
613 | 613 | '0' |
@@ -620,7 +620,7 @@ discard block |
||
620 | 620 | } |
621 | 621 | // Check if role exists |
622 | 622 | $data = DB::query( |
623 | - 'SELECT * FROM ' . prefixTable('roles_title') . ' |
|
623 | + 'SELECT * FROM '.prefixTable('roles_title').' |
|
624 | 624 | WHERE title = %s', |
625 | 625 | filter_input(INPUT_POST, 'domain', FILTER_SANITIZE_FULL_SPECIAL_CHARS) |
626 | 626 | ); |
@@ -649,7 +649,7 @@ discard block |
||
649 | 649 | // Get info about user to delete |
650 | 650 | $data_user = DB::queryfirstrow( |
651 | 651 | 'SELECT admin, isAdministratedByRole, gestionnaire |
652 | - FROM ' . prefixTable('users') . ' |
|
652 | + FROM ' . prefixTable('users').' |
|
653 | 653 | WHERE id = %i', |
654 | 654 | $post_user_id |
655 | 655 | ); |
@@ -705,7 +705,7 @@ discard block |
||
705 | 705 | // Get info about user |
706 | 706 | $rowUser = DB::queryfirstrow( |
707 | 707 | 'SELECT * |
708 | - FROM ' . prefixTable('users') . ' |
|
708 | + FROM ' . prefixTable('users').' |
|
709 | 709 | WHERE id = %i', |
710 | 710 | $post_id |
711 | 711 | ); |
@@ -730,7 +730,7 @@ discard block |
||
730 | 730 | $selected = ''; |
731 | 731 | $users_functions = array_filter(array_unique(explode(';', empty($rowUser['fonction_id'].';'.$rowUser['roles_from_ad_groups']) === true ? '' : $rowUser['fonction_id'].';'.$rowUser['roles_from_ad_groups']))); |
732 | 732 | |
733 | - $rows = DB::query('SELECT id,title,creator_id FROM ' . prefixTable('roles_title')); |
|
733 | + $rows = DB::query('SELECT id,title,creator_id FROM '.prefixTable('roles_title')); |
|
734 | 734 | foreach ($rows as $record) { |
735 | 735 | if ( |
736 | 736 | (int) $session->get('user-admin') === 1 |
@@ -765,7 +765,7 @@ discard block |
||
765 | 765 | $rolesList = array(); |
766 | 766 | $managedBy = array(); |
767 | 767 | $selected = ''; |
768 | - $rows = DB::query('SELECT id,title FROM ' . prefixTable('roles_title') . ' ORDER BY title ASC'); |
|
768 | + $rows = DB::query('SELECT id,title FROM '.prefixTable('roles_title').' ORDER BY title ASC'); |
|
769 | 769 | foreach ($rows as $reccord) { |
770 | 770 | $rolesList[$reccord['id']] = array('id' => $reccord['id'], 'title' => $reccord['title']); |
771 | 771 | } |
@@ -796,7 +796,7 @@ discard block |
||
796 | 796 | array_push( |
797 | 797 | $managedBy, |
798 | 798 | array( |
799 | - 'title' => $lang->get('managers_of') . ' ' . $fonction['title'], |
|
799 | + 'title' => $lang->get('managers_of').' '.$fonction['title'], |
|
800 | 800 | 'id' => $fonction['id'], |
801 | 801 | 'selected' => $selected, |
802 | 802 | ) |
@@ -878,9 +878,9 @@ discard block |
||
878 | 878 | |
879 | 879 | // get USER STATUS |
880 | 880 | if ($rowUser['disabled'] == 1) { |
881 | - $arrData['info'] = $lang->get('user_info_locked') . '<br><input type="checkbox" value="unlock" name="1" class="chk"> <label for="1">' . $lang->get('user_info_unlock_question') . '</label><br><input type="checkbox" value="delete" id="account_delete" class="chk mr-2" name="2" onclick="confirmDeletion()">label for="2">' . $lang->get('user_info_delete_question') . '</label>'; |
|
881 | + $arrData['info'] = $lang->get('user_info_locked').'<br><input type="checkbox" value="unlock" name="1" class="chk"> <label for="1">'.$lang->get('user_info_unlock_question').'</label><br><input type="checkbox" value="delete" id="account_delete" class="chk mr-2" name="2" onclick="confirmDeletion()">label for="2">'.$lang->get('user_info_delete_question').'</label>'; |
|
882 | 882 | } else { |
883 | - $arrData['info'] = $lang->get('user_info_active') . '<br><input type="checkbox" value="lock" class="chk"> ' . $lang->get('user_info_lock_question'); |
|
883 | + $arrData['info'] = $lang->get('user_info_active').'<br><input type="checkbox" value="lock" class="chk"> '.$lang->get('user_info_lock_question'); |
|
884 | 884 | } |
885 | 885 | |
886 | 886 | $arrData['error'] = false; |
@@ -967,7 +967,7 @@ discard block |
||
967 | 967 | |
968 | 968 | // Get info about user to modify |
969 | 969 | $data_user = DB::queryfirstrow( |
970 | - 'SELECT admin, gestionnaire, can_manage_all_users, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
970 | + 'SELECT admin, gestionnaire, can_manage_all_users, isAdministratedByRole FROM '.prefixTable('users').' |
|
971 | 971 | WHERE id = %i', |
972 | 972 | $post_id |
973 | 973 | ); |
@@ -978,7 +978,7 @@ discard block |
||
978 | 978 | // count number of admins |
979 | 979 | $users = DB::query( |
980 | 980 | 'SELECT id |
981 | - FROM ' . prefixTable('users') . ' |
|
981 | + FROM ' . prefixTable('users').' |
|
982 | 982 | WHERE admin = 1 AND email != "" AND pw != "" AND id != %i', |
983 | 983 | $post_id |
984 | 984 | ); |
@@ -1001,7 +1001,7 @@ discard block |
||
1001 | 1001 | // Exclude roles from AD - PR #3635 |
1002 | 1002 | $adRoles = DB::query( |
1003 | 1003 | 'SELECT roles_from_ad_groups |
1004 | - FROM ' . prefixTable('users') . ' |
|
1004 | + FROM ' . prefixTable('users').' |
|
1005 | 1005 | WHERE id = %i', |
1006 | 1006 | $post_id |
1007 | 1007 | )[0]['roles_from_ad_groups']; |
@@ -1105,7 +1105,7 @@ discard block |
||
1105 | 1105 | ); |
1106 | 1106 | // delete personal folder and subfolders |
1107 | 1107 | $data = DB::queryfirstrow( |
1108 | - 'SELECT id FROM ' . prefixTable('nested_tree') . ' |
|
1108 | + 'SELECT id FROM '.prefixTable('nested_tree').' |
|
1109 | 1109 | WHERE title = %s AND personal_folder = %i', |
1110 | 1110 | $post_id, |
1111 | 1111 | '1' |
@@ -1118,7 +1118,7 @@ discard block |
||
1118 | 1118 | DB::delete(prefixTable('nested_tree'), 'id = %i AND personal_folder = %i', $folder->id, '1'); |
1119 | 1119 | // delete items & logs |
1120 | 1120 | $items = DB::query( |
1121 | - 'SELECT id FROM ' . prefixTable('items') . ' |
|
1121 | + 'SELECT id FROM '.prefixTable('items').' |
|
1122 | 1122 | WHERE id_tree=%i AND perso = %i', |
1123 | 1123 | $folder->id, |
1124 | 1124 | '1' |
@@ -1139,7 +1139,7 @@ discard block |
||
1139 | 1139 | } else { |
1140 | 1140 | // Get old data about user |
1141 | 1141 | $oldData = DB::queryfirstrow( |
1142 | - 'SELECT * FROM ' . prefixTable('users') . ' |
|
1142 | + 'SELECT * FROM '.prefixTable('users').' |
|
1143 | 1143 | WHERE id = %i', |
1144 | 1144 | $post_id |
1145 | 1145 | ); |
@@ -1176,7 +1176,7 @@ discard block |
||
1176 | 1176 | |
1177 | 1177 | // update LOG |
1178 | 1178 | if ($oldData['email'] !== $post_email) { |
1179 | - logEvents($SETTINGS, 'user_mngt', 'at_user_email_changed:' . $oldData['email'], (string) $session->get('user-id'), $session->get('user-login'), $post_id); |
|
1179 | + logEvents($SETTINGS, 'user_mngt', 'at_user_email_changed:'.$oldData['email'], (string) $session->get('user-id'), $session->get('user-login'), $post_id); |
|
1180 | 1180 | } |
1181 | 1181 | } |
1182 | 1182 | echo prepareExchangedData( |
@@ -1224,7 +1224,7 @@ discard block |
||
1224 | 1224 | } |
1225 | 1225 | |
1226 | 1226 | DB::queryfirstrow( |
1227 | - 'SELECT * FROM ' . prefixTable('users') . ' |
|
1227 | + 'SELECT * FROM '.prefixTable('users').' |
|
1228 | 1228 | WHERE login = %s |
1229 | 1229 | AND deleted_at IS NULL', |
1230 | 1230 | filter_input(INPUT_POST, 'login', FILTER_SANITIZE_FULL_SPECIAL_CHARS) |
@@ -1276,7 +1276,7 @@ discard block |
||
1276 | 1276 | // get User info |
1277 | 1277 | $rowUser = DB::queryFirstRow( |
1278 | 1278 | 'SELECT login, name, lastname, email, disabled, fonction_id, groupes_interdits, groupes_visibles, isAdministratedByRole, avatar_thumb, roles_from_ad_groups |
1279 | - FROM ' . prefixTable('users') . ' |
|
1279 | + FROM ' . prefixTable('users').' |
|
1280 | 1280 | WHERE id = %i', |
1281 | 1281 | $post_id |
1282 | 1282 | ); |
@@ -1286,7 +1286,7 @@ discard block |
||
1286 | 1286 | $html = ''; |
1287 | 1287 | |
1288 | 1288 | if (isset($SETTINGS['ldap_mode']) === true && (int) $SETTINGS['ldap_mode'] === 1 && isset($SETTINGS['enable_ad_users_with_ad_groups']) === true && (int) $SETTINGS['enable_ad_users_with_ad_groups'] === 1) { |
1289 | - $rowUser['fonction_id'] = empty($rowUser['fonction_id']) === true ? $rowUser['roles_from_ad_groups'] : $rowUser['fonction_id']. ';' . $rowUser['roles_from_ad_groups']; |
|
1289 | + $rowUser['fonction_id'] = empty($rowUser['fonction_id']) === true ? $rowUser['roles_from_ad_groups'] : $rowUser['fonction_id'].';'.$rowUser['roles_from_ad_groups']; |
|
1290 | 1290 | } |
1291 | 1291 | $arrData['functions'] = array_filter(explode(';', $rowUser['fonction_id'])); |
1292 | 1292 | $arrData['allowed_folders'] = array_filter(explode(';', $rowUser['groupes_visibles'])); |
@@ -1297,7 +1297,7 @@ discard block |
||
1297 | 1297 | // refine folders based upon roles |
1298 | 1298 | $rows = DB::query( |
1299 | 1299 | 'SELECT folder_id, type |
1300 | - FROM ' . prefixTable('roles_values') . ' |
|
1300 | + FROM ' . prefixTable('roles_values').' |
|
1301 | 1301 | WHERE role_id IN %ls |
1302 | 1302 | ORDER BY folder_id ASC', |
1303 | 1303 | $arrData['functions'] |
@@ -1320,7 +1320,7 @@ discard block |
||
1320 | 1320 | } |
1321 | 1321 | |
1322 | 1322 | // add allowed folders |
1323 | - foreach($arrData['allowed_folders'] as $Fld) { |
|
1323 | + foreach ($arrData['allowed_folders'] as $Fld) { |
|
1324 | 1324 | array_push($arrFolders, array('id' => $Fld, 'type' => 'W', 'special' => true)); |
1325 | 1325 | } |
1326 | 1326 | |
@@ -1331,7 +1331,7 @@ discard block |
||
1331 | 1331 | // get folder name |
1332 | 1332 | $row = DB::queryFirstRow( |
1333 | 1333 | 'SELECT title, nlevel, id |
1334 | - FROM ' . prefixTable('nested_tree') . ' |
|
1334 | + FROM ' . prefixTable('nested_tree').' |
|
1335 | 1335 | WHERE id = %i', |
1336 | 1336 | $fld['id'] |
1337 | 1337 | ); |
@@ -1344,38 +1344,38 @@ discard block |
||
1344 | 1344 | |
1345 | 1345 | // manage right icon |
1346 | 1346 | if ($fld['type'] == 'W') { |
1347 | - $label = '<i class="fas fa-indent infotip text-success mr-2" title="' . $lang->get('write') . '"></i>' . |
|
1348 | - '<i class="fas fa-edit infotip text-success mr-2" title="' . $lang->get('edit') . '"></i>' . |
|
1349 | - '<i class="fas fa-eraser infotip text-success" title="' . $lang->get('delete') . '"></i>'; |
|
1347 | + $label = '<i class="fas fa-indent infotip text-success mr-2" title="'.$lang->get('write').'"></i>'. |
|
1348 | + '<i class="fas fa-edit infotip text-success mr-2" title="'.$lang->get('edit').'"></i>'. |
|
1349 | + '<i class="fas fa-eraser infotip text-success" title="'.$lang->get('delete').'"></i>'; |
|
1350 | 1350 | } elseif ($fld['type'] == 'ND') { |
1351 | - $label = '<i class="fas fa-indent infotip text-warning mr-2" title="' . $lang->get('write') . '"></i>' . |
|
1352 | - '<i class="fas fa-edit infotip text-success mr-2" title="' . $lang->get('edit') . '"></i>' . |
|
1353 | - '<i class="fas fa-eraser infotip text-danger" title="' . $lang->get('no_delete') . '"></i>'; |
|
1351 | + $label = '<i class="fas fa-indent infotip text-warning mr-2" title="'.$lang->get('write').'"></i>'. |
|
1352 | + '<i class="fas fa-edit infotip text-success mr-2" title="'.$lang->get('edit').'"></i>'. |
|
1353 | + '<i class="fas fa-eraser infotip text-danger" title="'.$lang->get('no_delete').'"></i>'; |
|
1354 | 1354 | } elseif ($fld['type'] == 'NE') { |
1355 | - $label = '<i class="fas fa-indent infotip text-warning mr-2" title="' . $lang->get('write') . '"></i>' . |
|
1356 | - '<i class="fas fa-edit infotip text-danger mr-2" title="' . $lang->get('no_edit') . '"></i>' . |
|
1357 | - '<i class="fas fa-eraser infotip text-success" title="' . $lang->get('delete') . '"></i>'; |
|
1355 | + $label = '<i class="fas fa-indent infotip text-warning mr-2" title="'.$lang->get('write').'"></i>'. |
|
1356 | + '<i class="fas fa-edit infotip text-danger mr-2" title="'.$lang->get('no_edit').'"></i>'. |
|
1357 | + '<i class="fas fa-eraser infotip text-success" title="'.$lang->get('delete').'"></i>'; |
|
1358 | 1358 | } elseif ($fld['type'] == 'NDNE') { |
1359 | - $label = '<i class="fas fa-indent infotip text-warning mr-2" title="' . $lang->get('write') . '"></i>' . |
|
1360 | - '<i class="fas fa-edit infotip text-danger mr-2" title="' . $lang->get('no_edit') . '"></i>' . |
|
1361 | - '<i class="fas fa-eraser infotip text-danger" title="' . $lang->get('no_delete') . '"></i>'; |
|
1359 | + $label = '<i class="fas fa-indent infotip text-warning mr-2" title="'.$lang->get('write').'"></i>'. |
|
1360 | + '<i class="fas fa-edit infotip text-danger mr-2" title="'.$lang->get('no_edit').'"></i>'. |
|
1361 | + '<i class="fas fa-eraser infotip text-danger" title="'.$lang->get('no_delete').'"></i>'; |
|
1362 | 1362 | } elseif ($fld['type'] == '') { |
1363 | - $label = '<i class="fas fa-eye-slash infotip text-danger mr-2" title="' . $lang->get('no_access') . '"></i>'; |
|
1363 | + $label = '<i class="fas fa-eye-slash infotip text-danger mr-2" title="'.$lang->get('no_access').'"></i>'; |
|
1364 | 1364 | } else { |
1365 | - $label = '<i class="fas fa-eye infotip text-info mr-2" title="' . $lang->get('read') . '"></i>'; |
|
1365 | + $label = '<i class="fas fa-eye infotip text-info mr-2" title="'.$lang->get('read').'"></i>'; |
|
1366 | 1366 | } |
1367 | 1367 | |
1368 | - $html .= '<tr><td>' . $ident . $row['title'] . |
|
1369 | - ' <small class="text-info">[' . $row['id'] . ']</small>'. |
|
1370 | - ($fld['special'] === true ? '<i class="fas fa-user-tag infotip text-primary ml-5" title="' . $lang->get('user_specific_right') . '"></i>' : ''). |
|
1371 | - '</td><td>' . $label . '</td></tr>'; |
|
1368 | + $html .= '<tr><td>'.$ident.$row['title']. |
|
1369 | + ' <small class="text-info">['.$row['id'].']</small>'. |
|
1370 | + ($fld['special'] === true ? '<i class="fas fa-user-tag infotip text-primary ml-5" title="'.$lang->get('user_specific_right').'"></i>' : ''). |
|
1371 | + '</td><td>'.$label.'</td></tr>'; |
|
1372 | 1372 | break; |
1373 | 1373 | } |
1374 | 1374 | } |
1375 | 1375 | } |
1376 | 1376 | |
1377 | - $html_full = '<table id="table-folders" class="table table-bordered table-striped dt-responsive nowrap" style="width:100%"><tbody>' . |
|
1378 | - $html . '</tbody></table>'; |
|
1377 | + $html_full = '<table id="table-folders" class="table table-bordered table-striped dt-responsive nowrap" style="width:100%"><tbody>'. |
|
1378 | + $html.'</tbody></table>'; |
|
1379 | 1379 | } else { |
1380 | 1380 | $html_full = ''; |
1381 | 1381 | } |
@@ -1421,7 +1421,7 @@ discard block |
||
1421 | 1421 | if ((int) $session->get('user-admin') === 0 && (int) $session->get('user-can_manage_all_users') === 0) { |
1422 | 1422 | $rows = DB::query( |
1423 | 1423 | 'SELECT * |
1424 | - FROM ' . prefixTable('users') . ' |
|
1424 | + FROM ' . prefixTable('users').' |
|
1425 | 1425 | WHERE admin = %i AND isAdministratedByRole IN %ls', |
1426 | 1426 | '0', |
1427 | 1427 | array_filter($session->get('user-roles_array')) |
@@ -1429,7 +1429,7 @@ discard block |
||
1429 | 1429 | } else { |
1430 | 1430 | $rows = DB::query( |
1431 | 1431 | 'SELECT * |
1432 | - FROM ' . prefixTable('users') . ' |
|
1432 | + FROM ' . prefixTable('users').' |
|
1433 | 1433 | WHERE admin = %i', |
1434 | 1434 | '0' |
1435 | 1435 | ); |
@@ -1441,7 +1441,7 @@ discard block |
||
1441 | 1441 | $groupIds = []; |
1442 | 1442 | foreach (explode(';', $record['fonction_id']) as $group) { |
1443 | 1443 | $tmp = DB::queryfirstrow( |
1444 | - 'SELECT id, title FROM ' . prefixTable('roles_title') . ' |
|
1444 | + 'SELECT id, title FROM '.prefixTable('roles_title').' |
|
1445 | 1445 | WHERE id = %i', |
1446 | 1446 | $group |
1447 | 1447 | ); |
@@ -1453,7 +1453,7 @@ discard block |
||
1453 | 1453 | |
1454 | 1454 | // Get managed_by |
1455 | 1455 | $managedBy = DB::queryfirstrow( |
1456 | - 'SELECT id, title FROM ' . prefixTable('roles_title') . ' |
|
1456 | + 'SELECT id, title FROM '.prefixTable('roles_title').' |
|
1457 | 1457 | WHERE id = %i', |
1458 | 1458 | $record['isAdministratedByRole'] |
1459 | 1459 | ); |
@@ -1463,7 +1463,7 @@ discard block |
||
1463 | 1463 | $foldersAllowedIds = []; |
1464 | 1464 | foreach (explode(';', $record['groupes_visibles']) as $role) { |
1465 | 1465 | $tmp = DB::queryfirstrow( |
1466 | - 'SELECT id, title FROM ' . prefixTable('nested_tree') . ' |
|
1466 | + 'SELECT id, title FROM '.prefixTable('nested_tree').' |
|
1467 | 1467 | WHERE id = %i', |
1468 | 1468 | $role |
1469 | 1469 | ); |
@@ -1476,7 +1476,7 @@ discard block |
||
1476 | 1476 | $foldersForbiddenIds = []; |
1477 | 1477 | foreach (explode(';', $record['groupes_interdits']) as $role) { |
1478 | 1478 | $tmp = DB::queryfirstrow( |
1479 | - 'SELECT id, title FROM ' . prefixTable('nested_tree') . ' |
|
1479 | + 'SELECT id, title FROM '.prefixTable('nested_tree').' |
|
1480 | 1480 | WHERE id = %i', |
1481 | 1481 | $role |
1482 | 1482 | ); |
@@ -1494,7 +1494,7 @@ discard block |
||
1494 | 1494 | 'login' => $record['login'], |
1495 | 1495 | 'groups' => implode(', ', $groups), |
1496 | 1496 | 'groupIds' => $groupIds, |
1497 | - 'managedBy' => $managedBy=== null ? $lang->get('administrator') : $managedBy['title'], |
|
1497 | + 'managedBy' => $managedBy === null ? $lang->get('administrator') : $managedBy['title'], |
|
1498 | 1498 | 'managedById' => $managedBy === null ? 0 : $managedBy['id'], |
1499 | 1499 | 'foldersAllowed' => implode(', ', $foldersAllowed), |
1500 | 1500 | 'foldersAllowedIds' => $foldersAllowedIds, |
@@ -1595,7 +1595,7 @@ discard block |
||
1595 | 1595 | |
1596 | 1596 | // Get info about user |
1597 | 1597 | $data_user = DB::queryfirstrow( |
1598 | - 'SELECT admin, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
1598 | + 'SELECT admin, isAdministratedByRole FROM '.prefixTable('users').' |
|
1599 | 1599 | WHERE id = %i', |
1600 | 1600 | $inputData['source_id'] |
1601 | 1601 | ); |
@@ -1797,14 +1797,14 @@ discard block |
||
1797 | 1797 | if (empty($post_context) === false && $post_context === 'add_one_role_to_user') { |
1798 | 1798 | $data_user = DB::queryfirstrow( |
1799 | 1799 | 'SELECT fonction_id, public_key |
1800 | - FROM ' . prefixTable('users') . ' |
|
1800 | + FROM ' . prefixTable('users').' |
|
1801 | 1801 | WHERE id = %i', |
1802 | 1802 | $post_user_id |
1803 | 1803 | ); |
1804 | 1804 | |
1805 | 1805 | if ($data_user) { |
1806 | 1806 | // Ensure array is unique |
1807 | - $post_new_value = str_replace(',', ';', $data_user['fonction_id']) . ';' . $post_new_value; |
|
1807 | + $post_new_value = str_replace(',', ';', $data_user['fonction_id']).';'.$post_new_value; |
|
1808 | 1808 | $post_new_value = implode(';', array_unique(explode(';', $post_new_value))); |
1809 | 1809 | } else { |
1810 | 1810 | // User not found |
@@ -1820,14 +1820,14 @@ discard block |
||
1820 | 1820 | } |
1821 | 1821 | |
1822 | 1822 | // Manage specific case of api key |
1823 | - if($post_field === 'user_api_key') { |
|
1823 | + if ($post_field === 'user_api_key') { |
|
1824 | 1824 | $encrypted_key = encryptUserObjectKey(base64_encode($post_new_value), $session->get('user-public_key')); |
1825 | 1825 | $session->set('user-api_key', $post_new_value); |
1826 | 1826 | |
1827 | 1827 | // test if user has an api key |
1828 | 1828 | $data_user = DB::queryfirstrow( |
1829 | 1829 | 'SELECT value |
1830 | - FROM ' . prefixTable('api') . ' |
|
1830 | + FROM ' . prefixTable('api').' |
|
1831 | 1831 | WHERE user_id = %i', |
1832 | 1832 | $post_user_id |
1833 | 1833 | ); |
@@ -1947,7 +1947,7 @@ discard block |
||
1947 | 1947 | } catch (\LdapRecord\Auth\BindException $e) { |
1948 | 1948 | $error = $e->getDetailedError(); |
1949 | 1949 | if ($error && defined('LOG_TO_SERVER') && LOG_TO_SERVER === true) { |
1950 | - error_log('TEAMPASS Error - LDAP - '.$error->getErrorCode()." - ".$error->getErrorMessage(). " - ".$error->getDiagnosticMessage()); |
|
1950 | + error_log('TEAMPASS Error - LDAP - '.$error->getErrorCode()." - ".$error->getErrorMessage()." - ".$error->getDiagnosticMessage()); |
|
1951 | 1951 | } |
1952 | 1952 | // deepcode ignore ServerLeak: No important data is sent and it is encrypted before sending |
1953 | 1953 | echo prepareExchangedData( |
@@ -1977,7 +1977,7 @@ discard block |
||
1977 | 1977 | } catch (\LdapRecord\Auth\BindException $e) { |
1978 | 1978 | $error = $e->getDetailedError(); |
1979 | 1979 | if ($error && defined('LOG_TO_SERVER') && LOG_TO_SERVER === true) { |
1980 | - error_log('TEAMPASS Error - LDAP - '.$error->getErrorCode()." - ".$error->getErrorMessage(). " - ".$error->getDiagnosticMessage()); |
|
1980 | + error_log('TEAMPASS Error - LDAP - '.$error->getErrorCode()." - ".$error->getErrorMessage()." - ".$error->getDiagnosticMessage()); |
|
1981 | 1981 | } |
1982 | 1982 | // deepcode ignore ServerLeak: No important data is sent and it is encrypted before sending |
1983 | 1983 | echo prepareExchangedData( |
@@ -1994,7 +1994,7 @@ discard block |
||
1994 | 1994 | if (isset($adUser[$SETTINGS['ldap_user_attribute']][0]) === false) continue; |
1995 | 1995 | // Build the list of all groups in AD |
1996 | 1996 | if (isset($adUser['memberof']) === true) { |
1997 | - foreach($adUser['memberof'] as $j => $adUserGroup) { |
|
1997 | + foreach ($adUser['memberof'] as $j => $adUserGroup) { |
|
1998 | 1998 | if (empty($adUserGroup) === false && $j !== "count") { |
1999 | 1999 | $adGroup = substr($adUserGroup, 3, strpos($adUserGroup, ',') - 3); |
2000 | 2000 | if (in_array($adGroup, $adRoles) === false && empty($adGroup) === false) { |
@@ -2010,7 +2010,7 @@ discard block |
||
2010 | 2010 | // Get his ID |
2011 | 2011 | $userInfo = DB::queryfirstrow( |
2012 | 2012 | 'SELECT id, login, fonction_id, auth_type |
2013 | - FROM ' . prefixTable('users') . ' |
|
2013 | + FROM ' . prefixTable('users').' |
|
2014 | 2014 | WHERE login = %s', |
2015 | 2015 | $userLogin |
2016 | 2016 | ); |
@@ -2046,7 +2046,7 @@ discard block |
||
2046 | 2046 | |
2047 | 2047 | // Get all groups in Teampass |
2048 | 2048 | $teampassRoles = array(); |
2049 | - $rows = DB::query('SELECT id,title FROM ' . prefixTable('roles_title')); |
|
2049 | + $rows = DB::query('SELECT id,title FROM '.prefixTable('roles_title')); |
|
2050 | 2050 | foreach ($rows as $record) { |
2051 | 2051 | array_push( |
2052 | 2052 | $teampassRoles, |
@@ -2110,7 +2110,7 @@ discard block |
||
2110 | 2110 | // Check if user already exists |
2111 | 2111 | $data = DB::query( |
2112 | 2112 | 'SELECT id, fonction_id, groupes_interdits, groupes_visibles |
2113 | - FROM ' . prefixTable('users') . ' |
|
2113 | + FROM ' . prefixTable('users').' |
|
2114 | 2114 | WHERE login = %s', |
2115 | 2115 | $post_login |
2116 | 2116 | ); |
@@ -2287,7 +2287,7 @@ discard block |
||
2287 | 2287 | // Check if user already exists |
2288 | 2288 | DB::query( |
2289 | 2289 | 'SELECT id |
2290 | - FROM ' . prefixTable('users') . ' |
|
2290 | + FROM ' . prefixTable('users').' |
|
2291 | 2291 | WHERE id = %i', |
2292 | 2292 | $post_id |
2293 | 2293 | ); |
@@ -2373,7 +2373,7 @@ discard block |
||
2373 | 2373 | // Check if user already exists |
2374 | 2374 | DB::query( |
2375 | 2375 | 'SELECT id |
2376 | - FROM ' . prefixTable('users') . ' |
|
2376 | + FROM ' . prefixTable('users').' |
|
2377 | 2377 | WHERE id = %i', |
2378 | 2378 | $post_id |
2379 | 2379 | ); |
@@ -2440,7 +2440,7 @@ discard block |
||
2440 | 2440 | // Search TP_USER in db |
2441 | 2441 | $userTP = DB::queryFirstRow( |
2442 | 2442 | 'SELECT pw |
2443 | - FROM ' . prefixTable('users') . ' |
|
2443 | + FROM ' . prefixTable('users').' |
|
2444 | 2444 | WHERE id = %i', |
2445 | 2445 | TP_USER_ID |
2446 | 2446 | ); |
@@ -2462,8 +2462,8 @@ discard block |
||
2462 | 2462 | 'process_type' => 'create_user_keys', |
2463 | 2463 | 'arguments' => json_encode([ |
2464 | 2464 | 'new_user_id' => (int) $post_user_id, |
2465 | - 'new_user_pwd' => empty($post_user_pwd) === true ? '' : cryption($post_user_pwd, '','encrypt', $SETTINGS)['string'], |
|
2466 | - 'new_user_code' => cryption($post_user_code, '','encrypt', $SETTINGS)['string'], |
|
2465 | + 'new_user_pwd' => empty($post_user_pwd) === true ? '' : cryption($post_user_pwd, '', 'encrypt', $SETTINGS)['string'], |
|
2466 | + 'new_user_code' => cryption($post_user_code, '', 'encrypt', $SETTINGS)['string'], |
|
2467 | 2467 | 'owner_id' => (int) TP_USER_ID, |
2468 | 2468 | 'creator_pwd' => $userTP['pw'], |
2469 | 2469 | 'email_body' => $lang->get('email_body_user_config_5'), |
@@ -2638,8 +2638,8 @@ discard block |
||
2638 | 2638 | // get user info |
2639 | 2639 | $processesProgress = DB::query( |
2640 | 2640 | 'SELECT u.ongoing_process_id, pt.task, pt.updated_at, pt.finished_at, pt.is_in_progress |
2641 | - FROM ' . prefixTable('users') . ' AS u |
|
2642 | - INNER JOIN ' . prefixTable('background_subtasks') . ' AS pt ON (pt.task_id = u.ongoing_process_id) |
|
2641 | + FROM ' . prefixTable('users').' AS u |
|
2642 | + INNER JOIN ' . prefixTable('background_subtasks').' AS pt ON (pt.task_id = u.ongoing_process_id) |
|
2643 | 2643 | WHERE u.id = %i', |
2644 | 2644 | $user_id |
2645 | 2645 | ); |
@@ -2647,9 +2647,9 @@ discard block |
||
2647 | 2647 | //print_r($processesProgress); |
2648 | 2648 | $finished_steps = 0; |
2649 | 2649 | $nb_steps = count($processesProgress); |
2650 | - foreach($processesProgress as $process) { |
|
2650 | + foreach ($processesProgress as $process) { |
|
2651 | 2651 | if ((int) $process['is_in_progress'] === -1) { |
2652 | - $finished_steps ++; |
|
2652 | + $finished_steps++; |
|
2653 | 2653 | } |
2654 | 2654 | } |
2655 | 2655 | |
@@ -2658,7 +2658,7 @@ discard block |
||
2658 | 2658 | 'error' => false, |
2659 | 2659 | 'message' => '', |
2660 | 2660 | 'user_id' => $user_id, |
2661 | - 'status' => $finished_steps === $nb_steps ? 'finished' : number_format($finished_steps/$nb_steps*100, 0).'%', |
|
2661 | + 'status' => $finished_steps === $nb_steps ? 'finished' : number_format($finished_steps / $nb_steps * 100, 0).'%', |
|
2662 | 2662 | 'debug' => $finished_steps.",".$nb_steps, |
2663 | 2663 | ), |
2664 | 2664 | 'encode' |
@@ -2722,7 +2722,7 @@ discard block |
||
2722 | 2722 | |
2723 | 2723 | // Get info about user |
2724 | 2724 | $data_user = DB::queryfirstrow( |
2725 | - 'SELECT admin, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
2725 | + 'SELECT admin, isAdministratedByRole FROM '.prefixTable('users').' |
|
2726 | 2726 | WHERE id = %i', |
2727 | 2727 | $value[1] |
2728 | 2728 | ); |
@@ -2756,7 +2756,7 @@ discard block |
||
2756 | 2756 | logEvents( |
2757 | 2757 | $SETTINGS, |
2758 | 2758 | 'user_mngt', |
2759 | - 'at_user_new_' . $value[0] . ':' . $value[1], |
|
2759 | + 'at_user_new_'.$value[0].':'.$value[1], |
|
2760 | 2760 | (string) $session->get('user-id'), |
2761 | 2761 | $session->get('user-login'), |
2762 | 2762 | filter_input(INPUT_POST, 'id', FILTER_SANITIZE_FULL_SPECIAL_CHARS) |
@@ -2790,7 +2790,7 @@ discard block |
||
2790 | 2790 | |
2791 | 2791 | // Get info about user |
2792 | 2792 | $data_user = DB::queryfirstrow( |
2793 | - 'SELECT admin, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
2793 | + 'SELECT admin, isAdministratedByRole FROM '.prefixTable('users').' |
|
2794 | 2794 | WHERE id = %i', |
2795 | 2795 | $value[1] |
2796 | 2796 | ); |
@@ -147,7 +147,7 @@ discard block |
||
147 | 147 | $sessionPwdAttempts = $session->get('pwd_attempts'); |
148 | 148 | $sessionUrl = $session->get('user-initial_url'); |
149 | 149 | $server = []; |
150 | - $server['PHP_AUTH_USER'] = $request->getUser(); |
|
150 | + $server['PHP_AUTH_USER'] = $request->getUser(); |
|
151 | 151 | $server['PHP_AUTH_PW'] = $request->getPassword(); |
152 | 152 | |
153 | 153 | // decrypt and retreive data in JSON format |
@@ -162,18 +162,18 @@ discard block |
||
162 | 162 | } |
163 | 163 | |
164 | 164 | // Check if Duo auth is in progress and pass the pw and login back to the standard login process |
165 | - if( |
|
165 | + if ( |
|
166 | 166 | isKeyExistingAndEqual('duo', 1, $SETTINGS) === true |
167 | 167 | && $dataReceived['user_2fa_selection'] === 'duo' |
168 | 168 | && $session->get('user-duo_status') === 'IN_PROGRESS' |
169 | 169 | && !empty($dataReceived['duo_state']) |
170 | - ){ |
|
170 | + ) { |
|
171 | 171 | $key = hash('sha256', $dataReceived['duo_state']); |
172 | 172 | $iv = substr(hash('sha256', $dataReceived['duo_state']), 0, 16); |
173 | 173 | $duo_data_dec = openssl_decrypt(base64_decode($session->get('user-duo_data')), 'AES-256-CBC', $key, 0, $iv); |
174 | 174 | // Clear the data from the Duo process to continue clean with the standard login process |
175 | - $session->set('user-duo_data',''); |
|
176 | - if($duo_data_dec === false) { |
|
175 | + $session->set('user-duo_data', ''); |
|
176 | + if ($duo_data_dec === false) { |
|
177 | 177 | // Add failed authentication log |
178 | 178 | addFailedAuthentication($username, getClientIpServer()); |
179 | 179 | |
@@ -191,7 +191,7 @@ discard block |
||
191 | 191 | $dataReceived['login'] = $duo_data['duo_login']; |
192 | 192 | } |
193 | 193 | |
194 | - if(isset($dataReceived['pw']) === false || isset($dataReceived['login']) === false) { |
|
194 | + if (isset($dataReceived['pw']) === false || isset($dataReceived['login']) === false) { |
|
195 | 195 | echo json_encode([ |
196 | 196 | 'data' => prepareExchangedData( |
197 | 197 | [ |
@@ -538,7 +538,7 @@ discard block |
||
538 | 538 | } |
539 | 539 | // Append with roles from AD groups |
540 | 540 | if (is_null($userInfo['roles_from_ad_groups']) === false) { |
541 | - $userInfo['fonction_id'] = empty($userInfo['fonction_id']) === true ? $userInfo['roles_from_ad_groups'] : $userInfo['fonction_id']. ';' . $userInfo['roles_from_ad_groups']; |
|
541 | + $userInfo['fonction_id'] = empty($userInfo['fonction_id']) === true ? $userInfo['roles_from_ad_groups'] : $userInfo['fonction_id'].';'.$userInfo['roles_from_ad_groups']; |
|
542 | 542 | } |
543 | 543 | // store |
544 | 544 | $session->set('user-roles', $userInfo['fonction_id']); |
@@ -550,7 +550,7 @@ discard block |
||
550 | 550 | if (count($session->get('user-roles_array')) > 0) { |
551 | 551 | $rolesList = DB::query( |
552 | 552 | 'SELECT id, title, complexity |
553 | - FROM ' . prefixTable('roles_title') . ' |
|
553 | + FROM ' . prefixTable('roles_title').' |
|
554 | 554 | WHERE id IN %li', |
555 | 555 | $session->get('user-roles_array') |
556 | 556 | ); |
@@ -596,7 +596,7 @@ discard block |
||
596 | 596 | if ($adjustPermissions) { |
597 | 597 | $session->set('user-admin', (int) $userInfo['admin']); |
598 | 598 | $session->set('user-manager', (int) $userInfo['gestionnaire']); |
599 | - $session->set('user-can_manage_all_users',(int) $userInfo['can_manage_all_users']); |
|
599 | + $session->set('user-can_manage_all_users', (int) $userInfo['can_manage_all_users']); |
|
600 | 600 | $session->set('user-read_only', (int) $userInfo['read_only']); |
601 | 601 | DB::update( |
602 | 602 | prefixTable('users'), |
@@ -667,10 +667,10 @@ discard block |
||
667 | 667 | $session->set('user-latest_items_tab', []); |
668 | 668 | $session->set('user-nb_roles', 0); |
669 | 669 | foreach ($session->get('user-latest_items') as $item) { |
670 | - if (! empty($item)) { |
|
670 | + if (!empty($item)) { |
|
671 | 671 | $dataLastItems = DB::queryFirstRow( |
672 | 672 | 'SELECT id,label,id_tree |
673 | - FROM ' . prefixTable('items') . ' |
|
673 | + FROM ' . prefixTable('items').' |
|
674 | 674 | WHERE id=%i', |
675 | 675 | $item |
676 | 676 | ); |
@@ -679,7 +679,7 @@ discard block |
||
679 | 679 | [ |
680 | 680 | 'id' => $item, |
681 | 681 | 'label' => $dataLastItems['label'], |
682 | - 'url' => 'index.php?page=items&group=' . $dataLastItems['id_tree'] . '&id=' . $item, |
|
682 | + 'url' => 'index.php?page=items&group='.$dataLastItems['id_tree'].'&id='.$item, |
|
683 | 683 | ], |
684 | 684 | 'add' |
685 | 685 | ); |
@@ -689,7 +689,7 @@ discard block |
||
689 | 689 | // Get cahce tree info |
690 | 690 | $cacheTreeData = DB::queryFirstRow( |
691 | 691 | 'SELECT visible_folders |
692 | - FROM ' . prefixTable('cache_tree') . ' |
|
692 | + FROM ' . prefixTable('cache_tree').' |
|
693 | 693 | WHERE user_id=%i', |
694 | 694 | (int) $session->get('user-id') |
695 | 695 | ); |
@@ -721,7 +721,7 @@ discard block |
||
721 | 721 | && (int) $sessionAdmin !== 1 |
722 | 722 | ) { |
723 | 723 | // get all Admin users |
724 | - $val = DB::queryfirstrow('SELECT email FROM ' . prefixTable('users') . " WHERE admin = %i and email != ''", 1); |
|
724 | + $val = DB::queryfirstrow('SELECT email FROM '.prefixTable('users')." WHERE admin = %i and email != ''", 1); |
|
725 | 725 | if (DB::count() > 0) { |
726 | 726 | // Add email to table |
727 | 727 | prepareSendingEmail( |
@@ -733,7 +733,7 @@ discard block |
||
733 | 733 | '#tp_time#', |
734 | 734 | ], |
735 | 735 | [ |
736 | - ' ' . $session->get('user-login') . ' (IP: ' . getClientIpServer() . ')', |
|
736 | + ' '.$session->get('user-login').' (IP: '.getClientIpServer().')', |
|
737 | 737 | date($SETTINGS['date_format'], (int) $session->get('user-last_connection')), |
738 | 738 | date($SETTINGS['time_format'], (int) $session->get('user-last_connection')), |
739 | 739 | ], |
@@ -844,7 +844,7 @@ discard block |
||
844 | 844 | { |
845 | 845 | $rows = DB::query( |
846 | 846 | 'SELECT date |
847 | - FROM ' . prefixTable('log_system') . " |
|
847 | + FROM ' . prefixTable('log_system')." |
|
848 | 848 | WHERE field_1 = %s |
849 | 849 | AND type = 'failed_auth' |
850 | 850 | AND label = 'password_is_not_correct' |
@@ -858,7 +858,7 @@ discard block |
||
858 | 858 | foreach ($rows as $record) { |
859 | 859 | array_push( |
860 | 860 | $arrAttempts, |
861 | - date($SETTINGS['date_format'] . ' ' . $SETTINGS['time_format'], (int) $record['date']) |
|
861 | + date($SETTINGS['date_format'].' '.$SETTINGS['time_format'], (int) $record['date']) |
|
862 | 862 | ); |
863 | 863 | } |
864 | 864 | } |
@@ -893,7 +893,7 @@ discard block |
||
893 | 893 | $ldapConnection |
894 | 894 | ) : bool |
895 | 895 | { |
896 | - include_once $SETTINGS['cpassman_dir'] . '/sources/main.functions.php'; |
|
896 | + include_once $SETTINGS['cpassman_dir'].'/sources/main.functions.php'; |
|
897 | 897 | |
898 | 898 | if ((int) $userInfoDisabled === 1) { |
899 | 899 | return false; |
@@ -1088,7 +1088,7 @@ discard block |
||
1088 | 1088 | } catch (Exception $e) { |
1089 | 1089 | return [ |
1090 | 1090 | 'error' => true, |
1091 | - 'message' => "Error: " . $e->getMessage(), |
|
1091 | + 'message' => "Error: ".$e->getMessage(), |
|
1092 | 1092 | ]; |
1093 | 1093 | } |
1094 | 1094 | } |
@@ -1119,7 +1119,7 @@ discard block |
||
1119 | 1119 | 'type' => 'OpenLDAP' |
1120 | 1120 | ]; |
1121 | 1121 | default: |
1122 | - throw new Exception("Unsupported LDAP type: " . $SETTINGS['ldap_type']); |
|
1122 | + throw new Exception("Unsupported LDAP type: ".$SETTINGS['ldap_type']); |
|
1123 | 1123 | } |
1124 | 1124 | } |
1125 | 1125 | |
@@ -1256,7 +1256,7 @@ discard block |
||
1256 | 1256 | ); |
1257 | 1257 | } |
1258 | 1258 | |
1259 | - throw new Exception("Unsupported LDAP type: " . $ldapHandler['type']); |
|
1259 | + throw new Exception("Unsupported LDAP type: ".$ldapHandler['type']); |
|
1260 | 1260 | } |
1261 | 1261 | |
1262 | 1262 | /** |
@@ -1273,12 +1273,12 @@ discard block |
||
1273 | 1273 | if (isset($SETTINGS['enable_ad_users_with_ad_groups']) === true && (int) $SETTINGS['enable_ad_users_with_ad_groups'] === 1) { |
1274 | 1274 | // Get user groups from AD |
1275 | 1275 | $user_ad_groups = []; |
1276 | - foreach($groups as $group) { |
|
1276 | + foreach ($groups as $group) { |
|
1277 | 1277 | //print_r($group); |
1278 | 1278 | // get relation role id for AD group |
1279 | 1279 | $role = DB::queryFirstRow( |
1280 | 1280 | 'SELECT lgr.role_id |
1281 | - FROM ' . prefixTable('ldap_groups_roles') . ' AS lgr |
|
1281 | + FROM ' . prefixTable('ldap_groups_roles').' AS lgr |
|
1282 | 1282 | WHERE lgr.ldap_group_id = %s', |
1283 | 1283 | $group |
1284 | 1284 | ); |
@@ -1423,7 +1423,7 @@ discard block |
||
1423 | 1423 | } |
1424 | 1424 | |
1425 | 1425 | // Now check yubico validity |
1426 | - include_once $SETTINGS['cpassman_dir'] . '/includes/libraries/Authentication/Yubico/Yubico.php'; |
|
1426 | + include_once $SETTINGS['cpassman_dir'].'/includes/libraries/Authentication/Yubico/Yubico.php'; |
|
1427 | 1427 | $yubi = new Auth_Yubico($yubico_user_id, $yubico_user_key); |
1428 | 1428 | $auth = $yubi->verify($yubico_key); |
1429 | 1429 | //, null, null, null, 60 |
@@ -1482,7 +1482,7 @@ discard block |
||
1482 | 1482 | // Check if exists in DB |
1483 | 1483 | $groupData = DB::queryFirstRow( |
1484 | 1484 | 'SELECT id |
1485 | - FROM ' . prefixTable('roles_title') . ' |
|
1485 | + FROM ' . prefixTable('roles_title').' |
|
1486 | 1486 | WHERE title = %s', |
1487 | 1487 | $group["displayName"] |
1488 | 1488 | ); |
@@ -1611,7 +1611,7 @@ discard block |
||
1611 | 1611 | |
1612 | 1612 | // generate new QR |
1613 | 1613 | $new_2fa_qr = $tfa->getQRCodeImageAsDataUri( |
1614 | - 'Teampass - ' . $username, |
|
1614 | + 'Teampass - '.$username, |
|
1615 | 1615 | $userInfo['ga'] |
1616 | 1616 | ); |
1617 | 1617 | // clear temporary code from DB |
@@ -1624,7 +1624,7 @@ discard block |
||
1624 | 1624 | $userInfo['id'] |
1625 | 1625 | ); |
1626 | 1626 | $firstTime = [ |
1627 | - 'value' => '<img src="' . $new_2fa_qr . '">', |
|
1627 | + 'value' => '<img src="'.$new_2fa_qr.'">', |
|
1628 | 1628 | 'user_admin' => isset($sessionAdmin) ? (int) $sessionAdmin : '', |
1629 | 1629 | 'initial_url' => isset($sessionUrl) === true ? $sessionUrl : '', |
1630 | 1630 | 'pwd_attempts' => (int) $sessionPwdAttempts, |
@@ -1780,7 +1780,7 @@ discard block |
||
1780 | 1780 | }*/ |
1781 | 1781 | return [ |
1782 | 1782 | 'error' => true, |
1783 | - 'message' => $duo_error . $lang->get('duo_error_check_config'), |
|
1783 | + 'message' => $duo_error.$lang->get('duo_error_check_config'), |
|
1784 | 1784 | 'pwd_attempts' => (int) $sessionPwdAttempts, |
1785 | 1785 | 'debug_message' => $e->getMessage(), |
1786 | 1786 | 'proceedIdentification' => false, |
@@ -1796,7 +1796,7 @@ discard block |
||
1796 | 1796 | } catch (DuoException $e) { |
1797 | 1797 | return [ |
1798 | 1798 | 'error' => true, |
1799 | - 'message' => $duo_error . $lang->get('duo_error_url'), |
|
1799 | + 'message' => $duo_error.$lang->get('duo_error_url'), |
|
1800 | 1800 | 'pwd_attempts' => (int) $sessionPwdAttempts, |
1801 | 1801 | 'debug_message' => $e->getMessage(), |
1802 | 1802 | 'proceedIdentification' => false, |
@@ -1804,7 +1804,7 @@ discard block |
||
1804 | 1804 | } |
1805 | 1805 | |
1806 | 1806 | // Somethimes Duo return success but fail to return a URL, double check if the URL has been created |
1807 | - if (!empty($duo_redirect_url) && isset($duo_redirect_url) && filter_var($duo_redirect_url,FILTER_SANITIZE_URL)) { |
|
1807 | + if (!empty($duo_redirect_url) && isset($duo_redirect_url) && filter_var($duo_redirect_url, FILTER_SANITIZE_URL)) { |
|
1808 | 1808 | // Since Duo Universal requires a redirect, let's store some info when the user get's back after completing the Duo prompt |
1809 | 1809 | $key = hash('sha256', $duo_state); |
1810 | 1810 | $iv = substr(hash('sha256', $duo_state), 0, 16); |
@@ -1832,7 +1832,7 @@ discard block |
||
1832 | 1832 | } else { |
1833 | 1833 | return [ |
1834 | 1834 | 'error' => true, |
1835 | - 'message' => $duo_error . $lang->get('duo_error_url'), |
|
1835 | + 'message' => $duo_error.$lang->get('duo_error_url'), |
|
1836 | 1836 | 'pwd_attempts' => (int) $sessionPwdAttempts, |
1837 | 1837 | 'proceedIdentification' => false, |
1838 | 1838 | ]; |
@@ -1853,8 +1853,8 @@ discard block |
||
1853 | 1853 | // return the response (which should be the user name) |
1854 | 1854 | if ($decoded_token['preferred_username'] === $username) { |
1855 | 1855 | $session->set('user-duo_status', 'COMPLET'); |
1856 | - $session->set('user-duo_state',''); |
|
1857 | - $session->set('user-duo_data',''); |
|
1856 | + $session->set('user-duo_state', ''); |
|
1857 | + $session->set('user-duo_data', ''); |
|
1858 | 1858 | $session->set('user-login', $username); |
1859 | 1859 | |
1860 | 1860 | return [ |
@@ -1865,9 +1865,9 @@ discard block |
||
1865 | 1865 | ]; |
1866 | 1866 | } else { |
1867 | 1867 | // Something wrong, username from the original Duo request is different than the one received now |
1868 | - $session->set('user-duo_status',''); |
|
1869 | - $session->set('user-duo_state',''); |
|
1870 | - $session->set('user-duo_data',''); |
|
1868 | + $session->set('user-duo_status', ''); |
|
1869 | + $session->set('user-duo_state', ''); |
|
1870 | + $session->set('user-duo_data', ''); |
|
1871 | 1871 | |
1872 | 1872 | return [ |
1873 | 1873 | 'error' => true, |
@@ -1878,9 +1878,9 @@ discard block |
||
1878 | 1878 | } |
1879 | 1879 | } |
1880 | 1880 | // If we are here something wrong |
1881 | - $session->set('user-duo_status',''); |
|
1882 | - $session->set('user-duo_state',''); |
|
1883 | - $session->set('user-duo_data',''); |
|
1881 | + $session->set('user-duo_status', ''); |
|
1882 | + $session->set('user-duo_state', ''); |
|
1883 | + $session->set('user-duo_data', ''); |
|
1884 | 1884 | return [ |
1885 | 1885 | 'error' => true, |
1886 | 1886 | 'message' => $lang->get('duo_login_mismatch'), |
@@ -1992,7 +1992,7 @@ discard block |
||
1992 | 1992 | // Check for existing lock |
1993 | 1993 | $unlock_at = DB::queryFirstField( |
1994 | 1994 | 'SELECT MAX(unlock_at) |
1995 | - FROM ' . prefixTable('auth_failures') . ' |
|
1995 | + FROM ' . prefixTable('auth_failures').' |
|
1996 | 1996 | WHERE unlock_at > %s |
1997 | 1997 | AND ((source = %s AND value = %s) OR (source = %s AND value = %s))', |
1998 | 1998 | date('Y-m-d H:i:s', time()), |
@@ -2014,8 +2014,8 @@ discard block |
||
2014 | 2014 | // Get user info from DB |
2015 | 2015 | $data = DB::queryFirstRow( |
2016 | 2016 | 'SELECT u.*, a.value AS api_key |
2017 | - FROM ' . prefixTable('users') . ' AS u |
|
2018 | - LEFT JOIN ' . prefixTable('api') . ' AS a ON (u.id = a.user_id) |
|
2017 | + FROM ' . prefixTable('users').' AS u |
|
2018 | + LEFT JOIN ' . prefixTable('api').' AS a ON (u.id = a.user_id) |
|
2019 | 2019 | WHERE login = %s AND deleted_at IS NULL', |
2020 | 2020 | $login |
2021 | 2021 | ); |
@@ -2140,7 +2140,7 @@ discard block |
||
2140 | 2140 | 'array' => [ |
2141 | 2141 | 'value' => 'bruteforce_wait', |
2142 | 2142 | 'error' => true, |
2143 | - 'message' => $lang->get('bruteforce_wait') . (string) $e->getMessage(), |
|
2143 | + 'message' => $lang->get('bruteforce_wait').(string) $e->getMessage(), |
|
2144 | 2144 | ] |
2145 | 2145 | ]; |
2146 | 2146 | } |
@@ -2551,15 +2551,15 @@ discard block |
||
2551 | 2551 | |
2552 | 2552 | if ($ret['error'] !== false) { |
2553 | 2553 | logEvents($SETTINGS, 'failed_auth', 'bad_duo_mfa', '', stripslashes($username), stripslashes($username)); |
2554 | - $session->set('user-duo_status',''); |
|
2555 | - $session->set('user-duo_state',''); |
|
2556 | - $session->set('user-duo_data',''); |
|
2554 | + $session->set('user-duo_status', ''); |
|
2555 | + $session->set('user-duo_state', ''); |
|
2556 | + $session->set('user-duo_data', ''); |
|
2557 | 2557 | return [ |
2558 | 2558 | 'error' => true, |
2559 | 2559 | 'mfaData' => $ret, |
2560 | 2560 | 'mfaQRCodeInfos' => false, |
2561 | 2561 | ]; |
2562 | - } else if ($ret['duo_url_ready'] === true){ |
|
2562 | + } else if ($ret['duo_url_ready'] === true) { |
|
2563 | 2563 | return [ |
2564 | 2564 | 'error' => false, |
2565 | 2565 | 'mfaData' => $ret, |
@@ -2623,7 +2623,7 @@ discard block |
||
2623 | 2623 | // Count failed attempts from this source |
2624 | 2624 | $count = DB::queryFirstField( |
2625 | 2625 | 'SELECT COUNT(*) |
2626 | - FROM ' . prefixTable('auth_failures') . ' |
|
2626 | + FROM ' . prefixTable('auth_failures').' |
|
2627 | 2627 | WHERE source = %s AND value = %s', |
2628 | 2628 | $source, |
2629 | 2629 | $value |
@@ -69,7 +69,7 @@ discard block |
||
69 | 69 | if ($checkUserAccess->checkSession() === false || $checkUserAccess->userAccessPage('mfa') === false) { |
70 | 70 | // Not allowed page |
71 | 71 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
72 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
72 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
73 | 73 | exit; |
74 | 74 | } |
75 | 75 | |
@@ -141,7 +141,7 @@ discard block |
||
141 | 141 | $roles = getRolesTitles(); |
142 | 142 | foreach ($roles as $role) { |
143 | 143 | echo ' |
144 | - <option value="' . $role['id'] . '"', in_array($role['id'], $arrRolesMFA) === true ? ' selected' : '', '>' . addslashes($role['title']) . '</option>'; |
|
144 | + <option value="' . $role['id'].'"', in_array($role['id'], $arrRolesMFA) === true ? ' selected' : '', '>'.addslashes($role['title']).'</option>'; |
|
145 | 145 | } |
146 | 146 | ?> |
147 | 147 | </select> |
@@ -69,7 +69,7 @@ discard block |
||
69 | 69 | if ($checkUserAccess->checkSession() === false || $checkUserAccess->userAccessPage('options') === false) { |
70 | 70 | // Not allowed page |
71 | 71 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
72 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
72 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
73 | 73 | exit; |
74 | 74 | } |
75 | 75 | |
@@ -322,7 +322,7 @@ discard block |
||
322 | 322 | // get list of all timezones |
323 | 323 | foreach ($zones as $key => $zone) { |
324 | 324 | echo ' |
325 | - <option value="' . $key . '"', isset($SETTINGS['timezone']) === true && $SETTINGS['timezone'] === $key ? ' selected' : '', '>' . $zone . '</option>'; |
|
325 | + <option value="' . $key.'"', isset($SETTINGS['timezone']) === true && $SETTINGS['timezone'] === $key ? ' selected' : '', '>'.$zone.'</option>'; |
|
326 | 326 | } |
327 | 327 | ?> |
328 | 328 | </select> |
@@ -373,7 +373,7 @@ discard block |
||
373 | 373 | <?php |
374 | 374 | foreach ($languagesList as $teampassLang) { |
375 | 375 | echo ' |
376 | - <option value="' . $teampassLang . '"', isset($SETTINGS['default_language']) === true && $SETTINGS['default_language'] === $teampassLang ? ' selected' : '', '>' . $teampassLang . '</option>'; |
|
376 | + <option value="' . $teampassLang.'"', isset($SETTINGS['default_language']) === true && $SETTINGS['default_language'] === $teampassLang ? ' selected' : '', '>'.$teampassLang.'</option>'; |
|
377 | 377 | } |
378 | 378 | ?> |
379 | 379 | </select> |
@@ -470,7 +470,7 @@ discard block |
||
470 | 470 | <?php |
471 | 471 | foreach (TP_PW_COMPLEXITY as $complex) { |
472 | 472 | echo ' |
473 | - <option value="' . $complex[0] . '"', isset($SETTINGS['personal_saltkey_security_level']) === true && $SETTINGS['personal_saltkey_security_level'] === $complex[0] ? ' selected' : '', '>' . $complex[1] . '</option>'; |
|
473 | + <option value="' . $complex[0].'"', isset($SETTINGS['personal_saltkey_security_level']) === true && $SETTINGS['personal_saltkey_security_level'] === $complex[0] ? ' selected' : '', '>'.$complex[1].'</option>'; |
|
474 | 474 | } |
475 | 475 | ?> |
476 | 476 | </select> |
@@ -802,7 +802,7 @@ discard block |
||
802 | 802 | $roles = getRolesTitles(); |
803 | 803 | foreach ($roles as $role) { |
804 | 804 | echo ' |
805 | - <option value="' . htmlspecialchars($role['id']) . '"', in_array($role['id'], $arrRolesToPrint) === true ? ' selected' : '', '>' . htmlspecialchars(addslashes($role['title'])) . '</option>'; |
|
805 | + <option value="' . htmlspecialchars($role['id']).'"', in_array($role['id'], $arrRolesToPrint) === true ? ' selected' : '', '>'.htmlspecialchars(addslashes($role['title'])).'</option>'; |
|
806 | 806 | } |
807 | 807 | } |
808 | 808 | ?> |
@@ -1029,7 +1029,7 @@ discard block |
||
1029 | 1029 | <?php |
1030 | 1030 | foreach (TP_PW_COMPLEXITY as $complex) { |
1031 | 1031 | echo ' |
1032 | - <option value="' . $complex[0] . '"', isset($SETTINGS['offline_key_level']) === true && $SETTINGS['offline_key_level'] === $complex[0] ? ' selected' : '', '>' . $complex[1] . '</option>'; |
|
1032 | + <option value="' . $complex[0].'"', isset($SETTINGS['offline_key_level']) === true && $SETTINGS['offline_key_level'] === $complex[0] ? ' selected' : '', '>'.$complex[1].'</option>'; |
|
1033 | 1033 | } |
1034 | 1034 | ?> |
1035 | 1035 | </select> |
@@ -77,7 +77,7 @@ discard block |
||
77 | 77 | ) { |
78 | 78 | // Not allowed page |
79 | 79 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
80 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
80 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
81 | 81 | exit; |
82 | 82 | } |
83 | 83 | |
@@ -138,21 +138,21 @@ discard block |
||
138 | 138 | // Prepare variables |
139 | 139 | $post_key = filter_var($dataReceived['encryptionKey'], FILTER_SANITIZE_FULL_SPECIAL_CHARS); |
140 | 140 | |
141 | - require_once $SETTINGS['cpassman_dir'] . '/sources/main.functions.php'; |
|
141 | + require_once $SETTINGS['cpassman_dir'].'/sources/main.functions.php'; |
|
142 | 142 | $return = ''; |
143 | 143 | |
144 | 144 | //Get all tables |
145 | 145 | $tables = array(); |
146 | 146 | $result = DB::query('SHOW TABLES'); |
147 | 147 | foreach ($result as $row) { |
148 | - $tables[] = $row['Tables_in_' . DB_NAME]; |
|
148 | + $tables[] = $row['Tables_in_'.DB_NAME]; |
|
149 | 149 | } |
150 | 150 | |
151 | 151 | //cycle through |
152 | 152 | foreach ($tables as $table) { |
153 | 153 | if (empty($pre) || substr_count($table, $pre) > 0) { |
154 | 154 | // Do query |
155 | - $result = DB::queryRaw('SELECT * FROM ' . $table); |
|
155 | + $result = DB::queryRaw('SELECT * FROM '.$table); |
|
156 | 156 | DB::queryRaw( |
157 | 157 | 'SELECT * |
158 | 158 | FROM INFORMATION_SCHEMA.COLUMNS |
@@ -164,17 +164,17 @@ discard block |
||
164 | 164 | $numFields = DB::count(); |
165 | 165 | |
166 | 166 | // prepare a drop table |
167 | - $return .= 'DROP TABLE ' . $table . ';'; |
|
168 | - $row2 = DB::queryfirstrow('SHOW CREATE TABLE ' . $table); |
|
169 | - $return .= "\n\n" . $row2['Create Table'] . ";\n\n"; |
|
167 | + $return .= 'DROP TABLE '.$table.';'; |
|
168 | + $row2 = DB::queryfirstrow('SHOW CREATE TABLE '.$table); |
|
169 | + $return .= "\n\n".$row2['Create Table'].";\n\n"; |
|
170 | 170 | |
171 | 171 | //prepare all fields and datas |
172 | 172 | for ($i = 0; $i < $numFields; ++$i) { |
173 | 173 | while ($row = $result->fetch_row()) { |
174 | - $return .= 'INSERT INTO ' . $table . ' VALUES('; |
|
174 | + $return .= 'INSERT INTO '.$table.' VALUES('; |
|
175 | 175 | for ($j = 0; $j < $numFields; ++$j) { |
176 | 176 | // Manage NULL values |
177 | - $value = $row[$j] === null ? 'NULL' : '"' . addslashes(preg_replace("/\n/", '\\n', $row[$j])) . '"'; |
|
177 | + $value = $row[$j] === null ? 'NULL' : '"'.addslashes(preg_replace("/\n/", '\\n', $row[$j])).'"'; |
|
178 | 178 | $return .= $value; |
179 | 179 | if ($j < ($numFields - 1)) { |
180 | 180 | $return .= ','; |
@@ -192,8 +192,8 @@ discard block |
||
192 | 192 | $token = GenerateCryptKey(20, false, true, true, false, true); |
193 | 193 | |
194 | 194 | //save file |
195 | - $filename = time() . '-' . $token . '.sql'; |
|
196 | - $handle = fopen($SETTINGS['path_to_files_folder'] . '/' . $filename, 'w+'); |
|
195 | + $filename = time().'-'.$token.'.sql'; |
|
196 | + $handle = fopen($SETTINGS['path_to_files_folder'].'/'.$filename, 'w+'); |
|
197 | 197 | if ($handle !== false) { |
198 | 198 | //write file |
199 | 199 | fwrite($handle, $return); |
@@ -205,16 +205,16 @@ discard block |
||
205 | 205 | // Encrypt the file |
206 | 206 | prepareFileWithDefuse( |
207 | 207 | 'encrypt', |
208 | - $SETTINGS['path_to_files_folder'] . '/' . $filename, |
|
209 | - $SETTINGS['path_to_files_folder'] . '/defuse_temp_' . $filename, |
|
208 | + $SETTINGS['path_to_files_folder'].'/'.$filename, |
|
209 | + $SETTINGS['path_to_files_folder'].'/defuse_temp_'.$filename, |
|
210 | 210 | $post_key |
211 | 211 | ); |
212 | 212 | |
213 | 213 | // Do clean |
214 | - unlink($SETTINGS['path_to_files_folder'] . '/' . $filename); |
|
214 | + unlink($SETTINGS['path_to_files_folder'].'/'.$filename); |
|
215 | 215 | rename( |
216 | - $SETTINGS['path_to_files_folder'] . '/defuse_temp_' . $filename, |
|
217 | - $SETTINGS['path_to_files_folder'] . '/' . $filename |
|
216 | + $SETTINGS['path_to_files_folder'].'/defuse_temp_'.$filename, |
|
217 | + $SETTINGS['path_to_files_folder'].'/'.$filename |
|
218 | 218 | ); |
219 | 219 | } |
220 | 220 | |
@@ -234,9 +234,9 @@ discard block |
||
234 | 234 | array( |
235 | 235 | 'error' => false, |
236 | 236 | 'message' => '', |
237 | - 'download' => 'sources/downloadFile.php?name=' . urlencode($filename) . |
|
238 | - '&sub=files&file=' . $filename . '&type=sql&key=' . $session->get('key') . '&key_tmp=' . |
|
239 | - $session->get('user-key_tmp') . '&pathIsFiles=1', |
|
237 | + 'download' => 'sources/downloadFile.php?name='.urlencode($filename). |
|
238 | + '&sub=files&file='.$filename.'&type=sql&key='.$session->get('key').'&key_tmp='. |
|
239 | + $session->get('user-key_tmp').'&pathIsFiles=1', |
|
240 | 240 | ), |
241 | 241 | 'encode' |
242 | 242 | ); |
@@ -303,13 +303,13 @@ discard block |
||
303 | 303 | |
304 | 304 | if (WIP === true) error_log('DEBUG: Offset -> '.$post_offset.'/'.$post_totalSize.' | File -> '.$post_clearFilename.' | key -> '.$post_key); |
305 | 305 | |
306 | - include_once $SETTINGS['cpassman_dir'] . '/sources/main.functions.php'; |
|
306 | + include_once $SETTINGS['cpassman_dir'].'/sources/main.functions.php'; |
|
307 | 307 | |
308 | 308 | if (empty($post_clearFilename) === true) { |
309 | 309 | // Get filename from database |
310 | 310 | $data = DB::queryFirstRow( |
311 | 311 | 'SELECT valeur |
312 | - FROM ' . prefixTable('misc') . ' |
|
312 | + FROM ' . prefixTable('misc').' |
|
313 | 313 | WHERE increment_id = %i', |
314 | 314 | $post_backupFile |
315 | 315 | ); |
@@ -329,8 +329,8 @@ discard block |
||
329 | 329 | |
330 | 330 | $ret = prepareFileWithDefuse( |
331 | 331 | 'decrypt', |
332 | - $SETTINGS['path_to_files_folder'] . '/' . $post_backupFile, |
|
333 | - $SETTINGS['path_to_files_folder'] . '/defuse_temp_' . $post_backupFile, |
|
332 | + $SETTINGS['path_to_files_folder'].'/'.$post_backupFile, |
|
333 | + $SETTINGS['path_to_files_folder'].'/defuse_temp_'.$post_backupFile, |
|
334 | 334 | $post_key |
335 | 335 | ); |
336 | 336 | |
@@ -346,8 +346,8 @@ discard block |
||
346 | 346 | } |
347 | 347 | |
348 | 348 | // Do clean |
349 | - fileDelete($SETTINGS['path_to_files_folder'] . '/' . $post_backupFile, $SETTINGS); |
|
350 | - $post_backupFile = $SETTINGS['path_to_files_folder'] . '/defuse_temp_' . $post_backupFile; |
|
349 | + fileDelete($SETTINGS['path_to_files_folder'].'/'.$post_backupFile, $SETTINGS); |
|
350 | + $post_backupFile = $SETTINGS['path_to_files_folder'].'/defuse_temp_'.$post_backupFile; |
|
351 | 351 | } else { |
352 | 352 | echo prepareExchangedData( |
353 | 353 | array( |