@@ -33,7 +33,7 @@ |
||
33 | 33 | use TeampassClasses\SessionManager\SessionManager; |
34 | 34 | use TeampassClasses\ConfigManager\ConfigManager; |
35 | 35 | |
36 | -require_once __DIR__. '/../../includes/config/include.php'; |
|
36 | +require_once __DIR__.'/../../includes/config/include.php'; |
|
37 | 37 | require_once __DIR__.'/../../sources/main.functions.php'; |
38 | 38 | |
39 | 39 | // init |
@@ -74,7 +74,7 @@ discard block |
||
74 | 74 | ) { |
75 | 75 | // Not allowed page |
76 | 76 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
77 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
77 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
78 | 78 | exit; |
79 | 79 | } |
80 | 80 | |
@@ -107,7 +107,7 @@ discard block |
||
107 | 107 | $post_isNewItem = $request->request->filter('isNewItem', null, FILTER_SANITIZE_NUMBER_INT); |
108 | 108 | $post_randomId = $request->request->filter('randomId', null, FILTER_SANITIZE_NUMBER_INT); |
109 | 109 | $post_isPersonal = $request->request->filter('isPersonal', null, FILTER_SANITIZE_NUMBER_INT); |
110 | -$post_fileSize= $request->request->filter('file_size', null, FILTER_SANITIZE_NUMBER_INT); |
|
110 | +$post_fileSize = $request->request->filter('file_size', null, FILTER_SANITIZE_NUMBER_INT); |
|
111 | 111 | $chunk = $request->request->filter('chunk', 0, FILTER_SANITIZE_NUMBER_INT); |
112 | 112 | $chunks = $request->request->filter('chunks', 0, FILTER_SANITIZE_NUMBER_INT); |
113 | 113 | $fileName = $request->request->filter('name', '', FILTER_SANITIZE_FULL_SPECIAL_CHARS); |
@@ -122,10 +122,10 @@ discard block |
||
122 | 122 | $unit = strtoupper(substr(trim($POST_MAX_SIZE), -1)); // Assurez-vous de bien gérer les espaces éventuels |
123 | 123 | $units = ['G' => 1073741824, 'M' => 1048576, 'K' => 1024]; |
124 | 124 | $multiplier = $units[$unit] ?? 1; // Vérifie si l'unité est dans le tableau, sinon 1 |
125 | - $maxSize = (int)$POST_MAX_SIZE * $multiplier; |
|
125 | + $maxSize = (int) $POST_MAX_SIZE * $multiplier; |
|
126 | 126 | |
127 | 127 | // CHeck if the POST is too big |
128 | - if (!empty($_SERVER['CONTENT_LENGTH']) && (int)$_SERVER['CONTENT_LENGTH'] > $maxSize && $maxSize > 0) { |
|
128 | + if (!empty($_SERVER['CONTENT_LENGTH']) && (int) $_SERVER['CONTENT_LENGTH'] > $maxSize && $maxSize > 0) { |
|
129 | 129 | handleAttachmentError('POST exceeded maximum allowed size.', 111, 413); |
130 | 130 | } |
131 | 131 | |
@@ -134,7 +134,7 @@ discard block |
||
134 | 134 | handleAttachmentError('File exceeds the maximum allowed size', 120, 413); |
135 | 135 | die(); |
136 | 136 | } |
137 | - if (WIP === true) error_log('POST_MAX_SIZE: ' . $POST_MAX_SIZE." - CONTENT_LENGTH: ".$_SERVER['CONTENT_LENGTH']." - UNIT: ".$unit." - MAX: ".$maxSize." - MULTIPLIER: ".$multiplier." - FILE_SIZE: ".$post_fileSize); |
|
137 | + if (WIP === true) error_log('POST_MAX_SIZE: '.$POST_MAX_SIZE." - CONTENT_LENGTH: ".$_SERVER['CONTENT_LENGTH']." - UNIT: ".$unit." - MAX: ".$maxSize." - MULTIPLIER: ".$multiplier." - FILE_SIZE: ".$post_fileSize); |
|
138 | 138 | |
139 | 139 | // delete expired tokens |
140 | 140 | DB::delete(prefixTable('tokens'), 'end_timestamp < %i', time()); |
@@ -185,7 +185,7 @@ discard block |
||
185 | 185 | // check if token is expired |
186 | 186 | $data = DB::queryFirstRow( |
187 | 187 | 'SELECT end_timestamp |
188 | - FROM ' . prefixTable('tokens') . ' |
|
188 | + FROM ' . prefixTable('tokens').' |
|
189 | 189 | WHERE user_id = %i AND token = %s', |
190 | 190 | $session->get('user-id'), |
191 | 191 | $post_user_token |
@@ -218,7 +218,7 @@ discard block |
||
218 | 218 | |
219 | 219 | // HTTP headers for no cache etc |
220 | 220 | header('Expires: Mon, 26 Jul 1997 05:00:00 GMT'); |
221 | -header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT'); |
|
221 | +header('Last-Modified: '.gmdate('D, d M Y H:i:s').' GMT'); |
|
222 | 222 | header('Cache-Control: no-store, no-cache, must-revalidate'); |
223 | 223 | header('Cache-Control: post-check=0, pre-check=0', false); |
224 | 224 | |
@@ -256,7 +256,7 @@ discard block |
||
256 | 256 | // Validate file name (for our purposes we'll just remove invalid characters) |
257 | 257 | $file_name = preg_replace('[^A-Za-z0-9]', '', strtolower(basename($_FILES['file']['name']))); |
258 | 258 | if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) { |
259 | - handleAttachmentError('Invalid file name: ' . $file_name . '.', 114); |
|
259 | + handleAttachmentError('Invalid file name: '.$file_name.'.', 114); |
|
260 | 260 | } |
261 | 261 | |
262 | 262 | // Validate file extension |
@@ -266,8 +266,8 @@ discard block |
||
266 | 266 | $ext, |
267 | 267 | explode( |
268 | 268 | ',', |
269 | - $SETTINGS['upload_docext'] . ',' . $SETTINGS['upload_imagesext'] . |
|
270 | - ',' . $SETTINGS['upload_pkgext'] . ',' . $SETTINGS['upload_otherext'] |
|
269 | + $SETTINGS['upload_docext'].','.$SETTINGS['upload_imagesext']. |
|
270 | + ','.$SETTINGS['upload_pkgext'].','.$SETTINGS['upload_otherext'] |
|
271 | 271 | ) |
272 | 272 | ) === false |
273 | 273 | ) { |
@@ -279,24 +279,24 @@ discard block |
||
279 | 279 | |
280 | 280 | // Clean the fileName for security reasons |
281 | 281 | $fileInfo = pathinfo($fileName); |
282 | -$fileName = base64_encode($fileInfo['filename']) . '.' . $fileInfo['extension']; |
|
282 | +$fileName = base64_encode($fileInfo['filename']).'.'.$fileInfo['extension']; |
|
283 | 283 | $fileFullSize = 0; |
284 | 284 | |
285 | 285 | // Make sure the fileName is unique but only if chunking is disabled |
286 | -if ($chunks < 2 && file_exists($targetDir . DIRECTORY_SEPARATOR . $fileName)) { |
|
286 | +if ($chunks < 2 && file_exists($targetDir.DIRECTORY_SEPARATOR.$fileName)) { |
|
287 | 287 | $ext = strrpos($fileName, '.'); |
288 | 288 | $fileNameA = substr($fileName, 0, $ext); |
289 | 289 | $fileNameB = substr($fileName, $ext); |
290 | 290 | |
291 | 291 | $count = 1; |
292 | - while (file_exists($targetDir . DIRECTORY_SEPARATOR . $fileNameA . '_' . $count . $fileNameB)) { |
|
292 | + while (file_exists($targetDir.DIRECTORY_SEPARATOR.$fileNameA.'_'.$count.$fileNameB)) { |
|
293 | 293 | ++$count; |
294 | 294 | } |
295 | 295 | |
296 | - $fileName = $fileNameA . '_' . $count . $fileNameB; |
|
296 | + $fileName = $fileNameA.'_'.$count.$fileNameB; |
|
297 | 297 | } |
298 | 298 | |
299 | -$filePath = $targetDir . DIRECTORY_SEPARATOR . $fileName; |
|
299 | +$filePath = $targetDir.DIRECTORY_SEPARATOR.$fileName; |
|
300 | 300 | |
301 | 301 | // Create target dir |
302 | 302 | if (file_exists($targetDir) === false) { |
@@ -310,7 +310,7 @@ discard block |
||
310 | 310 | // Remove old temp files |
311 | 311 | if ($cleanupTargetDir && is_dir($targetDir) && ($dir = opendir($targetDir))) { |
312 | 312 | while (($file = readdir($dir)) !== false) { |
313 | - $tmpfilePath = $targetDir . DIRECTORY_SEPARATOR . $file; |
|
313 | + $tmpfilePath = $targetDir.DIRECTORY_SEPARATOR.$file; |
|
314 | 314 | |
315 | 315 | // Remove temp file if it is older than the max age and is not the current file |
316 | 316 | if ( |
@@ -429,8 +429,8 @@ discard block |
||
429 | 429 | // This is a public object |
430 | 430 | $users = DB::query( |
431 | 431 | 'SELECT id, public_key |
432 | - FROM ' . prefixTable('users') . ' |
|
433 | - WHERE id NOT IN ("' . OTV_USER_ID . '","' . SSH_USER_ID . '","' . API_USER_ID . '") |
|
432 | + FROM ' . prefixTable('users').' |
|
433 | + WHERE id NOT IN ("' . OTV_USER_ID.'","'.SSH_USER_ID.'","'.API_USER_ID.'") |
|
434 | 434 | AND public_key != ""' |
435 | 435 | ); |
436 | 436 | foreach ($users as $user) { |
@@ -464,14 +464,14 @@ discard block |
||
464 | 464 | 'date' => time(), |
465 | 465 | 'id_user' => $session->get('user-id'), |
466 | 466 | 'action' => 'at_modification', |
467 | - 'raison' => 'at_add_file : ' . $fileName . ':' . $newID, |
|
467 | + 'raison' => 'at_add_file : '.$fileName.':'.$newID, |
|
468 | 468 | ) |
469 | 469 | ); |
470 | 470 | } |
471 | 471 | } |
472 | 472 | |
473 | 473 | // Return JSON-RPC response |
474 | -die('{"jsonrpc" : "2.0", "result" : null, "id" : "' . $newID . '"}'); |
|
474 | +die('{"jsonrpc" : "2.0", "result" : null, "id" : "'.$newID.'"}'); |
|
475 | 475 | |
476 | 476 | /** |
477 | 477 | * Handle errors and kill script. |
@@ -73,7 +73,7 @@ discard block |
||
73 | 73 | if ($checkUserAccess->checkSession() === false || $checkUserAccess->userAccessPage('profile') === false) { |
74 | 74 | // Not allowed page |
75 | 75 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
76 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
76 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
77 | 77 | exit; |
78 | 78 | } |
79 | 79 | |
@@ -144,7 +144,7 @@ discard block |
||
144 | 144 | |
145 | 145 | // Get info about user to modify |
146 | 146 | $targetUserInfos = DB::queryFirstRow( |
147 | - 'SELECT admin, gestionnaire, can_manage_all_users, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
147 | + 'SELECT admin, gestionnaire, can_manage_all_users, isAdministratedByRole FROM '.prefixTable('users').' |
|
148 | 148 | WHERE id = %i', |
149 | 149 | (int) $dataReceived['user_id'] |
150 | 150 | ); |
@@ -276,7 +276,7 @@ discard block |
||
276 | 276 | // Check if user already exists |
277 | 277 | $data = DB::query( |
278 | 278 | 'SELECT id, fonction_id, groupes_interdits, groupes_visibles |
279 | - FROM ' . prefixTable('users') . ' |
|
279 | + FROM ' . prefixTable('users').' |
|
280 | 280 | WHERE login = %s |
281 | 281 | AND deleted_at IS NULL', |
282 | 282 | $login |
@@ -495,7 +495,7 @@ discard block |
||
495 | 495 | |
496 | 496 | // Get info about user to delete |
497 | 497 | $data_user = DB::queryFirstRow( |
498 | - 'SELECT login, admin, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
498 | + 'SELECT login, admin, isAdministratedByRole FROM '.prefixTable('users').' |
|
499 | 499 | WHERE id = %i', |
500 | 500 | $post_id |
501 | 501 | ); |
@@ -529,7 +529,7 @@ discard block |
||
529 | 529 | ); |
530 | 530 | // delete personal folder and subfolders |
531 | 531 | $data = DB::queryFirstRow( |
532 | - 'SELECT id FROM ' . prefixTable('nested_tree') . ' |
|
532 | + 'SELECT id FROM '.prefixTable('nested_tree').' |
|
533 | 533 | WHERE title = %s AND personal_folder = %i', |
534 | 534 | $post_id, |
535 | 535 | '1' |
@@ -542,7 +542,7 @@ discard block |
||
542 | 542 | DB::delete(prefixTable('nested_tree'), 'id = %i AND personal_folder = %i', $folder->id, '1'); |
543 | 543 | // delete items & logs |
544 | 544 | $items = DB::query( |
545 | - 'SELECT id FROM ' . prefixTable('items') . ' |
|
545 | + 'SELECT id FROM '.prefixTable('items').' |
|
546 | 546 | WHERE id_tree=%i AND perso = %i', |
547 | 547 | $folder->id, |
548 | 548 | '1' |
@@ -566,7 +566,7 @@ discard block |
||
566 | 566 | // Delete any process related to user |
567 | 567 | $processes = DB::query( |
568 | 568 | 'SELECT increment_id |
569 | - FROM ' . prefixTable('background_tasks') . ' |
|
569 | + FROM ' . prefixTable('background_tasks').' |
|
570 | 570 | WHERE JSON_EXTRACT(arguments, "$.new_user_id") = %i', |
571 | 571 | $post_id |
572 | 572 | ); |
@@ -619,7 +619,7 @@ discard block |
||
619 | 619 | $return = array(); |
620 | 620 | // Check if folder exists |
621 | 621 | $data = DB::query( |
622 | - 'SELECT * FROM ' . prefixTable('nested_tree') . ' |
|
622 | + 'SELECT * FROM '.prefixTable('nested_tree').' |
|
623 | 623 | WHERE title = %s AND parent_id = %i', |
624 | 624 | filter_input(INPUT_POST, 'domain', FILTER_SANITIZE_FULL_SPECIAL_CHARS), |
625 | 625 | '0' |
@@ -632,7 +632,7 @@ discard block |
||
632 | 632 | } |
633 | 633 | // Check if role exists |
634 | 634 | $data = DB::query( |
635 | - 'SELECT * FROM ' . prefixTable('roles_title') . ' |
|
635 | + 'SELECT * FROM '.prefixTable('roles_title').' |
|
636 | 636 | WHERE title = %s', |
637 | 637 | filter_input(INPUT_POST, 'domain', FILTER_SANITIZE_FULL_SPECIAL_CHARS) |
638 | 638 | ); |
@@ -661,7 +661,7 @@ discard block |
||
661 | 661 | // Get info about user to delete |
662 | 662 | $data_user = DB::queryFirstRow( |
663 | 663 | 'SELECT admin, isAdministratedByRole, gestionnaire |
664 | - FROM ' . prefixTable('users') . ' |
|
664 | + FROM ' . prefixTable('users').' |
|
665 | 665 | WHERE id = %i', |
666 | 666 | $post_user_id |
667 | 667 | ); |
@@ -717,7 +717,7 @@ discard block |
||
717 | 717 | // Get info about user |
718 | 718 | $rowUser = DB::queryFirstRow( |
719 | 719 | 'SELECT * |
720 | - FROM ' . prefixTable('users') . ' |
|
720 | + FROM ' . prefixTable('users').' |
|
721 | 721 | WHERE id = %i', |
722 | 722 | $post_id |
723 | 723 | ); |
@@ -742,7 +742,7 @@ discard block |
||
742 | 742 | $selected = ''; |
743 | 743 | $users_functions = array_filter(array_unique(explode(';', empty($rowUser['fonction_id'].';'.$rowUser['roles_from_ad_groups']) === true ? '' : $rowUser['fonction_id'].';'.$rowUser['roles_from_ad_groups']))); |
744 | 744 | |
745 | - $rows = DB::query('SELECT id,title,creator_id FROM ' . prefixTable('roles_title')); |
|
745 | + $rows = DB::query('SELECT id,title,creator_id FROM '.prefixTable('roles_title')); |
|
746 | 746 | foreach ($rows as $record) { |
747 | 747 | if ( |
748 | 748 | (int) $session->get('user-admin') === 1 |
@@ -777,7 +777,7 @@ discard block |
||
777 | 777 | $rolesList = array(); |
778 | 778 | $managedBy = array(); |
779 | 779 | $selected = ''; |
780 | - $rows = DB::query('SELECT id,title FROM ' . prefixTable('roles_title') . ' ORDER BY title ASC'); |
|
780 | + $rows = DB::query('SELECT id,title FROM '.prefixTable('roles_title').' ORDER BY title ASC'); |
|
781 | 781 | foreach ($rows as $reccord) { |
782 | 782 | $rolesList[$reccord['id']] = array('id' => $reccord['id'], 'title' => $reccord['title']); |
783 | 783 | } |
@@ -808,7 +808,7 @@ discard block |
||
808 | 808 | array_push( |
809 | 809 | $managedBy, |
810 | 810 | array( |
811 | - 'title' => $lang->get('managers_of') . ' ' . $fonction['title'], |
|
811 | + 'title' => $lang->get('managers_of').' '.$fonction['title'], |
|
812 | 812 | 'id' => $fonction['id'], |
813 | 813 | 'selected' => $selected, |
814 | 814 | ) |
@@ -890,9 +890,9 @@ discard block |
||
890 | 890 | |
891 | 891 | // get USER STATUS |
892 | 892 | if ($rowUser['disabled'] == 1) { |
893 | - $arrData['info'] = $lang->get('user_info_locked') . '<br><input type="checkbox" value="unlock" name="1" class="chk"> <label for="1">' . $lang->get('user_info_unlock_question') . '</label><br><input type="checkbox" value="delete" id="account_delete" class="chk mr-2" name="2" onclick="confirmDeletion()">label for="2">' . $lang->get('user_info_delete_question') . '</label>'; |
|
893 | + $arrData['info'] = $lang->get('user_info_locked').'<br><input type="checkbox" value="unlock" name="1" class="chk"> <label for="1">'.$lang->get('user_info_unlock_question').'</label><br><input type="checkbox" value="delete" id="account_delete" class="chk mr-2" name="2" onclick="confirmDeletion()">label for="2">'.$lang->get('user_info_delete_question').'</label>'; |
|
894 | 894 | } else { |
895 | - $arrData['info'] = $lang->get('user_info_active') . '<br><input type="checkbox" value="lock" class="chk"> ' . $lang->get('user_info_lock_question'); |
|
895 | + $arrData['info'] = $lang->get('user_info_active').'<br><input type="checkbox" value="lock" class="chk"> '.$lang->get('user_info_lock_question'); |
|
896 | 896 | } |
897 | 897 | |
898 | 898 | $arrData['error'] = false; |
@@ -979,7 +979,7 @@ discard block |
||
979 | 979 | |
980 | 980 | // Get info about user to modify |
981 | 981 | $data_user = DB::queryFirstRow( |
982 | - 'SELECT admin, gestionnaire, can_manage_all_users, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
982 | + 'SELECT admin, gestionnaire, can_manage_all_users, isAdministratedByRole FROM '.prefixTable('users').' |
|
983 | 983 | WHERE id = %i', |
984 | 984 | $post_id |
985 | 985 | ); |
@@ -990,7 +990,7 @@ discard block |
||
990 | 990 | // count number of admins |
991 | 991 | $users = DB::query( |
992 | 992 | 'SELECT id |
993 | - FROM ' . prefixTable('users') . ' |
|
993 | + FROM ' . prefixTable('users').' |
|
994 | 994 | WHERE admin = 1 AND email != "" AND pw != "" AND id != %i', |
995 | 995 | $post_id |
996 | 996 | ); |
@@ -1013,7 +1013,7 @@ discard block |
||
1013 | 1013 | // Exclude roles from AD - PR #3635 |
1014 | 1014 | $adRoles = DB::query( |
1015 | 1015 | 'SELECT roles_from_ad_groups |
1016 | - FROM ' . prefixTable('users') . ' |
|
1016 | + FROM ' . prefixTable('users').' |
|
1017 | 1017 | WHERE id = %i', |
1018 | 1018 | $post_id |
1019 | 1019 | )[0]['roles_from_ad_groups']; |
@@ -1117,7 +1117,7 @@ discard block |
||
1117 | 1117 | ); |
1118 | 1118 | // delete personal folder and subfolders |
1119 | 1119 | $data = DB::queryFirstRow( |
1120 | - 'SELECT id FROM ' . prefixTable('nested_tree') . ' |
|
1120 | + 'SELECT id FROM '.prefixTable('nested_tree').' |
|
1121 | 1121 | WHERE title = %s AND personal_folder = %i', |
1122 | 1122 | $post_id, |
1123 | 1123 | '1' |
@@ -1130,7 +1130,7 @@ discard block |
||
1130 | 1130 | DB::delete(prefixTable('nested_tree'), 'id = %i AND personal_folder = %i', $folder->id, '1'); |
1131 | 1131 | // delete items & logs |
1132 | 1132 | $items = DB::query( |
1133 | - 'SELECT id FROM ' . prefixTable('items') . ' |
|
1133 | + 'SELECT id FROM '.prefixTable('items').' |
|
1134 | 1134 | WHERE id_tree=%i AND perso = %i', |
1135 | 1135 | $folder->id, |
1136 | 1136 | '1' |
@@ -1151,7 +1151,7 @@ discard block |
||
1151 | 1151 | } else { |
1152 | 1152 | // Get old data about user |
1153 | 1153 | $oldData = DB::queryFirstRow( |
1154 | - 'SELECT * FROM ' . prefixTable('users') . ' |
|
1154 | + 'SELECT * FROM '.prefixTable('users').' |
|
1155 | 1155 | WHERE id = %i', |
1156 | 1156 | $post_id |
1157 | 1157 | ); |
@@ -1188,7 +1188,7 @@ discard block |
||
1188 | 1188 | |
1189 | 1189 | // update LOG |
1190 | 1190 | if ($oldData['email'] !== $post_email) { |
1191 | - logEvents($SETTINGS, 'user_mngt', 'at_user_email_changed:' . $oldData['email'], (string) $session->get('user-id'), $session->get('user-login'), $post_id); |
|
1191 | + logEvents($SETTINGS, 'user_mngt', 'at_user_email_changed:'.$oldData['email'], (string) $session->get('user-id'), $session->get('user-login'), $post_id); |
|
1192 | 1192 | } |
1193 | 1193 | } |
1194 | 1194 | echo prepareExchangedData( |
@@ -1236,7 +1236,7 @@ discard block |
||
1236 | 1236 | } |
1237 | 1237 | |
1238 | 1238 | DB::queryFirstRow( |
1239 | - 'SELECT * FROM ' . prefixTable('users') . ' |
|
1239 | + 'SELECT * FROM '.prefixTable('users').' |
|
1240 | 1240 | WHERE login = %s |
1241 | 1241 | AND deleted_at IS NULL', |
1242 | 1242 | filter_input(INPUT_POST, 'login', FILTER_SANITIZE_FULL_SPECIAL_CHARS) |
@@ -1288,7 +1288,7 @@ discard block |
||
1288 | 1288 | // get User info |
1289 | 1289 | $rowUser = DB::queryFirstRow( |
1290 | 1290 | 'SELECT login, name, lastname, email, disabled, fonction_id, groupes_interdits, groupes_visibles, isAdministratedByRole, avatar_thumb, roles_from_ad_groups |
1291 | - FROM ' . prefixTable('users') . ' |
|
1291 | + FROM ' . prefixTable('users').' |
|
1292 | 1292 | WHERE id = %i', |
1293 | 1293 | $post_id |
1294 | 1294 | ); |
@@ -1298,7 +1298,7 @@ discard block |
||
1298 | 1298 | $html = ''; |
1299 | 1299 | |
1300 | 1300 | if (isset($SETTINGS['ldap_mode']) === true && (int) $SETTINGS['ldap_mode'] === 1 && isset($SETTINGS['enable_ad_users_with_ad_groups']) === true && (int) $SETTINGS['enable_ad_users_with_ad_groups'] === 1) { |
1301 | - $rowUser['fonction_id'] = empty($rowUser['fonction_id']) === true ? $rowUser['roles_from_ad_groups'] : $rowUser['fonction_id']. ';' . $rowUser['roles_from_ad_groups']; |
|
1301 | + $rowUser['fonction_id'] = empty($rowUser['fonction_id']) === true ? $rowUser['roles_from_ad_groups'] : $rowUser['fonction_id'].';'.$rowUser['roles_from_ad_groups']; |
|
1302 | 1302 | } |
1303 | 1303 | $arrData['functions'] = array_filter(explode(';', $rowUser['fonction_id'])); |
1304 | 1304 | $arrData['allowed_folders'] = array_filter(explode(';', $rowUser['groupes_visibles'])); |
@@ -1309,7 +1309,7 @@ discard block |
||
1309 | 1309 | // refine folders based upon roles |
1310 | 1310 | $rows = DB::query( |
1311 | 1311 | 'SELECT folder_id, type |
1312 | - FROM ' . prefixTable('roles_values') . ' |
|
1312 | + FROM ' . prefixTable('roles_values').' |
|
1313 | 1313 | WHERE role_id IN %ls |
1314 | 1314 | ORDER BY folder_id ASC', |
1315 | 1315 | $arrData['functions'] |
@@ -1332,7 +1332,7 @@ discard block |
||
1332 | 1332 | } |
1333 | 1333 | |
1334 | 1334 | // add allowed folders |
1335 | - foreach($arrData['allowed_folders'] as $Fld) { |
|
1335 | + foreach ($arrData['allowed_folders'] as $Fld) { |
|
1336 | 1336 | array_push($arrFolders, array('id' => $Fld, 'type' => 'W', 'special' => true)); |
1337 | 1337 | } |
1338 | 1338 | |
@@ -1343,7 +1343,7 @@ discard block |
||
1343 | 1343 | // get folder name |
1344 | 1344 | $row = DB::queryFirstRow( |
1345 | 1345 | 'SELECT title, nlevel, id |
1346 | - FROM ' . prefixTable('nested_tree') . ' |
|
1346 | + FROM ' . prefixTable('nested_tree').' |
|
1347 | 1347 | WHERE id = %i', |
1348 | 1348 | $fld['id'] |
1349 | 1349 | ); |
@@ -1356,38 +1356,38 @@ discard block |
||
1356 | 1356 | |
1357 | 1357 | // manage right icon |
1358 | 1358 | if ($fld['type'] == 'W') { |
1359 | - $label = '<i class="fas fa-indent infotip text-success mr-2" title="' . $lang->get('write') . '"></i>' . |
|
1360 | - '<i class="fas fa-edit infotip text-success mr-2" title="' . $lang->get('edit') . '"></i>' . |
|
1361 | - '<i class="fas fa-eraser infotip text-success" title="' . $lang->get('delete') . '"></i>'; |
|
1359 | + $label = '<i class="fas fa-indent infotip text-success mr-2" title="'.$lang->get('write').'"></i>'. |
|
1360 | + '<i class="fas fa-edit infotip text-success mr-2" title="'.$lang->get('edit').'"></i>'. |
|
1361 | + '<i class="fas fa-eraser infotip text-success" title="'.$lang->get('delete').'"></i>'; |
|
1362 | 1362 | } elseif ($fld['type'] == 'ND') { |
1363 | - $label = '<i class="fas fa-indent infotip text-warning mr-2" title="' . $lang->get('write') . '"></i>' . |
|
1364 | - '<i class="fas fa-edit infotip text-success mr-2" title="' . $lang->get('edit') . '"></i>' . |
|
1365 | - '<i class="fas fa-eraser infotip text-danger" title="' . $lang->get('no_delete') . '"></i>'; |
|
1363 | + $label = '<i class="fas fa-indent infotip text-warning mr-2" title="'.$lang->get('write').'"></i>'. |
|
1364 | + '<i class="fas fa-edit infotip text-success mr-2" title="'.$lang->get('edit').'"></i>'. |
|
1365 | + '<i class="fas fa-eraser infotip text-danger" title="'.$lang->get('no_delete').'"></i>'; |
|
1366 | 1366 | } elseif ($fld['type'] == 'NE') { |
1367 | - $label = '<i class="fas fa-indent infotip text-warning mr-2" title="' . $lang->get('write') . '"></i>' . |
|
1368 | - '<i class="fas fa-edit infotip text-danger mr-2" title="' . $lang->get('no_edit') . '"></i>' . |
|
1369 | - '<i class="fas fa-eraser infotip text-success" title="' . $lang->get('delete') . '"></i>'; |
|
1367 | + $label = '<i class="fas fa-indent infotip text-warning mr-2" title="'.$lang->get('write').'"></i>'. |
|
1368 | + '<i class="fas fa-edit infotip text-danger mr-2" title="'.$lang->get('no_edit').'"></i>'. |
|
1369 | + '<i class="fas fa-eraser infotip text-success" title="'.$lang->get('delete').'"></i>'; |
|
1370 | 1370 | } elseif ($fld['type'] == 'NDNE') { |
1371 | - $label = '<i class="fas fa-indent infotip text-warning mr-2" title="' . $lang->get('write') . '"></i>' . |
|
1372 | - '<i class="fas fa-edit infotip text-danger mr-2" title="' . $lang->get('no_edit') . '"></i>' . |
|
1373 | - '<i class="fas fa-eraser infotip text-danger" title="' . $lang->get('no_delete') . '"></i>'; |
|
1371 | + $label = '<i class="fas fa-indent infotip text-warning mr-2" title="'.$lang->get('write').'"></i>'. |
|
1372 | + '<i class="fas fa-edit infotip text-danger mr-2" title="'.$lang->get('no_edit').'"></i>'. |
|
1373 | + '<i class="fas fa-eraser infotip text-danger" title="'.$lang->get('no_delete').'"></i>'; |
|
1374 | 1374 | } elseif ($fld['type'] == '') { |
1375 | - $label = '<i class="fas fa-eye-slash infotip text-danger mr-2" title="' . $lang->get('no_access') . '"></i>'; |
|
1375 | + $label = '<i class="fas fa-eye-slash infotip text-danger mr-2" title="'.$lang->get('no_access').'"></i>'; |
|
1376 | 1376 | } else { |
1377 | - $label = '<i class="fas fa-eye infotip text-info mr-2" title="' . $lang->get('read') . '"></i>'; |
|
1377 | + $label = '<i class="fas fa-eye infotip text-info mr-2" title="'.$lang->get('read').'"></i>'; |
|
1378 | 1378 | } |
1379 | 1379 | |
1380 | - $html .= '<tr><td>' . $ident . $row['title'] . |
|
1381 | - ' <small class="text-info">[' . $row['id'] . ']</small>'. |
|
1382 | - ($fld['special'] === true ? '<i class="fas fa-user-tag infotip text-primary ml-5" title="' . $lang->get('user_specific_right') . '"></i>' : ''). |
|
1383 | - '</td><td>' . $label . '</td></tr>'; |
|
1380 | + $html .= '<tr><td>'.$ident.$row['title']. |
|
1381 | + ' <small class="text-info">['.$row['id'].']</small>'. |
|
1382 | + ($fld['special'] === true ? '<i class="fas fa-user-tag infotip text-primary ml-5" title="'.$lang->get('user_specific_right').'"></i>' : ''). |
|
1383 | + '</td><td>'.$label.'</td></tr>'; |
|
1384 | 1384 | break; |
1385 | 1385 | } |
1386 | 1386 | } |
1387 | 1387 | } |
1388 | 1388 | |
1389 | - $html_full = '<table id="table-folders" class="table table-bordered table-striped dt-responsive nowrap" style="width:100%"><tbody>' . |
|
1390 | - $html . '</tbody></table>'; |
|
1389 | + $html_full = '<table id="table-folders" class="table table-bordered table-striped dt-responsive nowrap" style="width:100%"><tbody>'. |
|
1390 | + $html.'</tbody></table>'; |
|
1391 | 1391 | } else { |
1392 | 1392 | $html_full = ''; |
1393 | 1393 | } |
@@ -1433,7 +1433,7 @@ discard block |
||
1433 | 1433 | if ((int) $session->get('user-admin') === 0 && (int) $session->get('user-can_manage_all_users') === 0) { |
1434 | 1434 | $rows = DB::query( |
1435 | 1435 | 'SELECT * |
1436 | - FROM ' . prefixTable('users') . ' |
|
1436 | + FROM ' . prefixTable('users').' |
|
1437 | 1437 | WHERE admin = %i AND isAdministratedByRole IN %ls', |
1438 | 1438 | '0', |
1439 | 1439 | array_filter($session->get('user-roles_array')) |
@@ -1441,7 +1441,7 @@ discard block |
||
1441 | 1441 | } else { |
1442 | 1442 | $rows = DB::query( |
1443 | 1443 | 'SELECT * |
1444 | - FROM ' . prefixTable('users') . ' |
|
1444 | + FROM ' . prefixTable('users').' |
|
1445 | 1445 | WHERE admin = %i', |
1446 | 1446 | '0' |
1447 | 1447 | ); |
@@ -1453,7 +1453,7 @@ discard block |
||
1453 | 1453 | $groupIds = []; |
1454 | 1454 | foreach (explode(';', $record['fonction_id']) as $group) { |
1455 | 1455 | $tmp = DB::queryFirstRow( |
1456 | - 'SELECT id, title FROM ' . prefixTable('roles_title') . ' |
|
1456 | + 'SELECT id, title FROM '.prefixTable('roles_title').' |
|
1457 | 1457 | WHERE id = %i', |
1458 | 1458 | $group |
1459 | 1459 | ); |
@@ -1465,7 +1465,7 @@ discard block |
||
1465 | 1465 | |
1466 | 1466 | // Get managed_by |
1467 | 1467 | $managedBy = DB::queryFirstRow( |
1468 | - 'SELECT id, title FROM ' . prefixTable('roles_title') . ' |
|
1468 | + 'SELECT id, title FROM '.prefixTable('roles_title').' |
|
1469 | 1469 | WHERE id = %i', |
1470 | 1470 | $record['isAdministratedByRole'] |
1471 | 1471 | ); |
@@ -1475,7 +1475,7 @@ discard block |
||
1475 | 1475 | $foldersAllowedIds = []; |
1476 | 1476 | foreach (explode(';', $record['groupes_visibles']) as $role) { |
1477 | 1477 | $tmp = DB::queryFirstRow( |
1478 | - 'SELECT id, title FROM ' . prefixTable('nested_tree') . ' |
|
1478 | + 'SELECT id, title FROM '.prefixTable('nested_tree').' |
|
1479 | 1479 | WHERE id = %i', |
1480 | 1480 | $role |
1481 | 1481 | ); |
@@ -1488,7 +1488,7 @@ discard block |
||
1488 | 1488 | $foldersForbiddenIds = []; |
1489 | 1489 | foreach (explode(';', $record['groupes_interdits']) as $role) { |
1490 | 1490 | $tmp = DB::queryFirstRow( |
1491 | - 'SELECT id, title FROM ' . prefixTable('nested_tree') . ' |
|
1491 | + 'SELECT id, title FROM '.prefixTable('nested_tree').' |
|
1492 | 1492 | WHERE id = %i', |
1493 | 1493 | $role |
1494 | 1494 | ); |
@@ -1506,7 +1506,7 @@ discard block |
||
1506 | 1506 | 'login' => $record['login'], |
1507 | 1507 | 'groups' => implode(', ', $groups), |
1508 | 1508 | 'groupIds' => $groupIds, |
1509 | - 'managedBy' => $managedBy=== null ? $lang->get('administrator') : $managedBy['title'], |
|
1509 | + 'managedBy' => $managedBy === null ? $lang->get('administrator') : $managedBy['title'], |
|
1510 | 1510 | 'managedById' => $managedBy === null ? 0 : $managedBy['id'], |
1511 | 1511 | 'foldersAllowed' => implode(', ', $foldersAllowed), |
1512 | 1512 | 'foldersAllowedIds' => $foldersAllowedIds, |
@@ -1607,7 +1607,7 @@ discard block |
||
1607 | 1607 | |
1608 | 1608 | // Get info about user |
1609 | 1609 | $data_user = DB::queryFirstRow( |
1610 | - 'SELECT admin, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
1610 | + 'SELECT admin, isAdministratedByRole FROM '.prefixTable('users').' |
|
1611 | 1611 | WHERE id = %i', |
1612 | 1612 | $inputData['source_id'] |
1613 | 1613 | ); |
@@ -1834,14 +1834,14 @@ discard block |
||
1834 | 1834 | if (empty($post_context) === false && $post_context === 'add_one_role_to_user') { |
1835 | 1835 | $data_user = DB::queryFirstRow( |
1836 | 1836 | 'SELECT fonction_id, public_key |
1837 | - FROM ' . prefixTable('users') . ' |
|
1837 | + FROM ' . prefixTable('users').' |
|
1838 | 1838 | WHERE id = %i', |
1839 | 1839 | $post_user_id |
1840 | 1840 | ); |
1841 | 1841 | |
1842 | 1842 | if ($data_user) { |
1843 | 1843 | // Ensure array is unique |
1844 | - $post_new_value = str_replace(',', ';', $data_user['fonction_id']) . ';' . $post_new_value; |
|
1844 | + $post_new_value = str_replace(',', ';', $data_user['fonction_id']).';'.$post_new_value; |
|
1845 | 1845 | $post_new_value = implode(';', array_unique(explode(';', $post_new_value))); |
1846 | 1846 | } else { |
1847 | 1847 | // User not found |
@@ -1857,14 +1857,14 @@ discard block |
||
1857 | 1857 | } |
1858 | 1858 | |
1859 | 1859 | // Manage specific case of api key |
1860 | - if($post_field === 'user_api_key') { |
|
1860 | + if ($post_field === 'user_api_key') { |
|
1861 | 1861 | $encrypted_key = encryptUserObjectKey(base64_encode($post_new_value), $session->get('user-public_key')); |
1862 | 1862 | $session->set('user-api_key', $post_new_value); |
1863 | 1863 | |
1864 | 1864 | // test if user has an api key |
1865 | 1865 | $data_user = DB::queryFirstRow( |
1866 | 1866 | 'SELECT value |
1867 | - FROM ' . prefixTable('api') . ' |
|
1867 | + FROM ' . prefixTable('api').' |
|
1868 | 1868 | WHERE user_id = %i', |
1869 | 1869 | $post_user_id |
1870 | 1870 | ); |
@@ -1984,7 +1984,7 @@ discard block |
||
1984 | 1984 | } catch (\LdapRecord\Auth\BindException $e) { |
1985 | 1985 | $error = $e->getDetailedError(); |
1986 | 1986 | if ($error && defined('LOG_TO_SERVER') && LOG_TO_SERVER === true) { |
1987 | - error_log('TEAMPASS Error - LDAP - '.$error->getErrorCode()." - ".$error->getErrorMessage(). " - ".$error->getDiagnosticMessage()); |
|
1987 | + error_log('TEAMPASS Error - LDAP - '.$error->getErrorCode()." - ".$error->getErrorMessage()." - ".$error->getDiagnosticMessage()); |
|
1988 | 1988 | } |
1989 | 1989 | // deepcode ignore ServerLeak: No important data is sent and it is encrypted before sending |
1990 | 1990 | echo prepareExchangedData( |
@@ -2014,7 +2014,7 @@ discard block |
||
2014 | 2014 | } catch (\LdapRecord\Auth\BindException $e) { |
2015 | 2015 | $error = $e->getDetailedError(); |
2016 | 2016 | if ($error && defined('LOG_TO_SERVER') && LOG_TO_SERVER === true) { |
2017 | - error_log('TEAMPASS Error - LDAP - '.$error->getErrorCode()." - ".$error->getErrorMessage(). " - ".$error->getDiagnosticMessage()); |
|
2017 | + error_log('TEAMPASS Error - LDAP - '.$error->getErrorCode()." - ".$error->getErrorMessage()." - ".$error->getDiagnosticMessage()); |
|
2018 | 2018 | } |
2019 | 2019 | // deepcode ignore ServerLeak: No important data is sent and it is encrypted before sending |
2020 | 2020 | echo prepareExchangedData( |
@@ -2031,7 +2031,7 @@ discard block |
||
2031 | 2031 | if (isset($adUser[$SETTINGS['ldap_user_attribute']][0]) === false) continue; |
2032 | 2032 | // Build the list of all groups in AD |
2033 | 2033 | if (isset($adUser['memberof']) === true) { |
2034 | - foreach($adUser['memberof'] as $j => $adUserGroup) { |
|
2034 | + foreach ($adUser['memberof'] as $j => $adUserGroup) { |
|
2035 | 2035 | if (empty($adUserGroup) === false && $j !== "count") { |
2036 | 2036 | $adGroup = substr($adUserGroup, 3, strpos($adUserGroup, ',') - 3); |
2037 | 2037 | if (in_array($adGroup, $adRoles) === false && empty($adGroup) === false) { |
@@ -2047,7 +2047,7 @@ discard block |
||
2047 | 2047 | // Get his ID |
2048 | 2048 | $userInfo = DB::queryFirstRow( |
2049 | 2049 | 'SELECT id, login, fonction_id, auth_type |
2050 | - FROM ' . prefixTable('users') . ' |
|
2050 | + FROM ' . prefixTable('users').' |
|
2051 | 2051 | WHERE login = %s', |
2052 | 2052 | $userLogin |
2053 | 2053 | ); |
@@ -2083,7 +2083,7 @@ discard block |
||
2083 | 2083 | |
2084 | 2084 | // Get all groups in Teampass |
2085 | 2085 | $teampassRoles = array(); |
2086 | - $rows = DB::query('SELECT id,title FROM ' . prefixTable('roles_title')); |
|
2086 | + $rows = DB::query('SELECT id,title FROM '.prefixTable('roles_title')); |
|
2087 | 2087 | foreach ($rows as $record) { |
2088 | 2088 | array_push( |
2089 | 2089 | $teampassRoles, |
@@ -2147,7 +2147,7 @@ discard block |
||
2147 | 2147 | // Check if user already exists |
2148 | 2148 | $data = DB::query( |
2149 | 2149 | 'SELECT id, fonction_id, groupes_interdits, groupes_visibles |
2150 | - FROM ' . prefixTable('users') . ' |
|
2150 | + FROM ' . prefixTable('users').' |
|
2151 | 2151 | WHERE login = %s', |
2152 | 2152 | $post_login |
2153 | 2153 | ); |
@@ -2324,7 +2324,7 @@ discard block |
||
2324 | 2324 | // Check if user already exists |
2325 | 2325 | DB::query( |
2326 | 2326 | 'SELECT id |
2327 | - FROM ' . prefixTable('users') . ' |
|
2327 | + FROM ' . prefixTable('users').' |
|
2328 | 2328 | WHERE id = %i', |
2329 | 2329 | $post_id |
2330 | 2330 | ); |
@@ -2410,7 +2410,7 @@ discard block |
||
2410 | 2410 | // Check if user already exists |
2411 | 2411 | DB::query( |
2412 | 2412 | 'SELECT id |
2413 | - FROM ' . prefixTable('users') . ' |
|
2413 | + FROM ' . prefixTable('users').' |
|
2414 | 2414 | WHERE id = %i', |
2415 | 2415 | $post_id |
2416 | 2416 | ); |
@@ -2477,7 +2477,7 @@ discard block |
||
2477 | 2477 | // Search TP_USER in db |
2478 | 2478 | $userTP = DB::queryFirstRow( |
2479 | 2479 | 'SELECT pw |
2480 | - FROM ' . prefixTable('users') . ' |
|
2480 | + FROM ' . prefixTable('users').' |
|
2481 | 2481 | WHERE id = %i', |
2482 | 2482 | TP_USER_ID |
2483 | 2483 | ); |
@@ -2499,8 +2499,8 @@ discard block |
||
2499 | 2499 | 'process_type' => 'create_user_keys', |
2500 | 2500 | 'arguments' => json_encode([ |
2501 | 2501 | 'new_user_id' => (int) $post_user_id, |
2502 | - 'new_user_pwd' => empty($post_user_pwd) === true ? '' : cryption($post_user_pwd, '','encrypt', $SETTINGS)['string'], |
|
2503 | - 'new_user_code' => cryption($post_user_code, '','encrypt', $SETTINGS)['string'], |
|
2502 | + 'new_user_pwd' => empty($post_user_pwd) === true ? '' : cryption($post_user_pwd, '', 'encrypt', $SETTINGS)['string'], |
|
2503 | + 'new_user_code' => cryption($post_user_code, '', 'encrypt', $SETTINGS)['string'], |
|
2504 | 2504 | 'owner_id' => (int) TP_USER_ID, |
2505 | 2505 | 'creator_pwd' => $userTP['pw'], |
2506 | 2506 | 'email_body' => $lang->get('email_body_user_config_5'), |
@@ -2675,8 +2675,8 @@ discard block |
||
2675 | 2675 | // get user info |
2676 | 2676 | $processesProgress = DB::query( |
2677 | 2677 | 'SELECT u.ongoing_process_id, pt.task, pt.updated_at, pt.finished_at, pt.is_in_progress |
2678 | - FROM ' . prefixTable('users') . ' AS u |
|
2679 | - INNER JOIN ' . prefixTable('background_subtasks') . ' AS pt ON (pt.task_id = u.ongoing_process_id) |
|
2678 | + FROM ' . prefixTable('users').' AS u |
|
2679 | + INNER JOIN ' . prefixTable('background_subtasks').' AS pt ON (pt.task_id = u.ongoing_process_id) |
|
2680 | 2680 | WHERE u.id = %i', |
2681 | 2681 | $user_id |
2682 | 2682 | ); |
@@ -2684,9 +2684,9 @@ discard block |
||
2684 | 2684 | //print_r($processesProgress); |
2685 | 2685 | $finished_steps = 0; |
2686 | 2686 | $nb_steps = count($processesProgress); |
2687 | - foreach($processesProgress as $process) { |
|
2687 | + foreach ($processesProgress as $process) { |
|
2688 | 2688 | if ((int) $process['is_in_progress'] === -1) { |
2689 | - $finished_steps ++; |
|
2689 | + $finished_steps++; |
|
2690 | 2690 | } |
2691 | 2691 | } |
2692 | 2692 | |
@@ -2695,7 +2695,7 @@ discard block |
||
2695 | 2695 | 'error' => false, |
2696 | 2696 | 'message' => '', |
2697 | 2697 | 'user_id' => $user_id, |
2698 | - 'status' => $finished_steps === $nb_steps ? 'finished' : number_format($finished_steps/$nb_steps*100, 0).'%', |
|
2698 | + 'status' => $finished_steps === $nb_steps ? 'finished' : number_format($finished_steps / $nb_steps * 100, 0).'%', |
|
2699 | 2699 | 'debug' => $finished_steps.",".$nb_steps, |
2700 | 2700 | ), |
2701 | 2701 | 'encode' |
@@ -2785,7 +2785,7 @@ discard block |
||
2785 | 2785 | |
2786 | 2786 | // Get info about user |
2787 | 2787 | $data_user = DB::queryFirstRow( |
2788 | - 'SELECT admin, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
2788 | + 'SELECT admin, isAdministratedByRole FROM '.prefixTable('users').' |
|
2789 | 2789 | WHERE id = %i', |
2790 | 2790 | $value[1] |
2791 | 2791 | ); |
@@ -2819,7 +2819,7 @@ discard block |
||
2819 | 2819 | logEvents( |
2820 | 2820 | $SETTINGS, |
2821 | 2821 | 'user_mngt', |
2822 | - 'at_user_new_' . $value[0] . ':' . $value[1], |
|
2822 | + 'at_user_new_'.$value[0].':'.$value[1], |
|
2823 | 2823 | (string) $session->get('user-id'), |
2824 | 2824 | $session->get('user-login'), |
2825 | 2825 | filter_input(INPUT_POST, 'id', FILTER_SANITIZE_FULL_SPECIAL_CHARS) |
@@ -2853,7 +2853,7 @@ discard block |
||
2853 | 2853 | |
2854 | 2854 | // Get info about user |
2855 | 2855 | $data_user = DB::queryFirstRow( |
2856 | - 'SELECT admin, isAdministratedByRole FROM ' . prefixTable('users') . ' |
|
2856 | + 'SELECT admin, isAdministratedByRole FROM '.prefixTable('users').' |
|
2857 | 2857 | WHERE id = %i', |
2858 | 2858 | $id[1] |
2859 | 2859 | ); |
@@ -76,7 +76,7 @@ discard block |
||
76 | 76 | ) { |
77 | 77 | // Not allowed page |
78 | 78 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
79 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
79 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
80 | 80 | exit; |
81 | 81 | } |
82 | 82 | |
@@ -461,7 +461,7 @@ discard block |
||
461 | 461 | ); |
462 | 462 | |
463 | 463 | // add new role to user |
464 | - $tmp = $data_tmp['fonction_id'] . (substr($data_tmp['fonction_id'], -1) == ';' ? $role_id : ';' . $role_id); |
|
464 | + $tmp = $data_tmp['fonction_id'].(substr($data_tmp['fonction_id'], -1) == ';' ? $role_id : ';'.$role_id); |
|
465 | 465 | $session->set('user-roles', str_replace(';;', ';', $tmp)); |
466 | 466 | |
467 | 467 | // store in DB |
@@ -649,7 +649,7 @@ discard block |
||
649 | 649 | $groupsData = $openLdapExtra->getADGroups($ldapConnection, $SETTINGS); |
650 | 650 | break; |
651 | 651 | default: |
652 | - throw new Exception("Unsupported LDAP type: " . $SETTINGS['ldap_type']); |
|
652 | + throw new Exception("Unsupported LDAP type: ".$SETTINGS['ldap_type']); |
|
653 | 653 | } |
654 | 654 | } catch (Exception $e) { |
655 | 655 | if (defined('LOG_TO_SERVER') && LOG_TO_SERVER === true) { |
@@ -669,7 +669,7 @@ discard block |
||
669 | 669 | } else { |
670 | 670 | // Handle successful retrieval of groups |
671 | 671 | // exists in Teampass |
672 | - foreach($groupsData['userGroups'] as $key => $group) { |
|
672 | + foreach ($groupsData['userGroups'] as $key => $group) { |
|
673 | 673 | $role_detail = DB::queryFirstRow( |
674 | 674 | 'SELECT a.increment_id as increment_id, a.role_id as role_id, r.title as title |
675 | 675 | FROM '.prefixTable('ldap_groups_roles').' AS a |
@@ -694,7 +694,7 @@ discard block |
||
694 | 694 | |
695 | 695 | // Get all groups in Teampass |
696 | 696 | $teampassRoles = array(); |
697 | - $rows = DB::query('SELECT id,title FROM ' . prefixTable('roles_title')); |
|
697 | + $rows = DB::query('SELECT id,title FROM '.prefixTable('roles_title')); |
|
698 | 698 | foreach ($rows as $record) { |
699 | 699 | array_push( |
700 | 700 | $teampassRoles, |
@@ -91,7 +91,7 @@ discard block |
||
91 | 91 | |
92 | 92 | $parentComplexity = $this->checkComplexityLevel($parentFolderData, $complexity, $parent_id); |
93 | 93 | if (isset($parentComplexity['error']) && $parentComplexity['error'] === true) { |
94 | - return $this->errorResponse($this->lang->get('error_folder_complexity_lower_than_top_folder') . " [<b>{$this->settings['TP_PW_COMPLEXITY'][$parentComplexity['valeur']][1]}</b>]"); |
|
94 | + return $this->errorResponse($this->lang->get('error_folder_complexity_lower_than_top_folder')." [<b>{$this->settings['TP_PW_COMPLEXITY'][$parentComplexity['valeur']][1]}</b>]"); |
|
95 | 95 | } |
96 | 96 | |
97 | 97 | return $this->createFolder($params, array_merge($parentFolderData, $parentComplexity), $options); |
@@ -144,7 +144,7 @@ discard block |
||
144 | 144 | ) { |
145 | 145 | DB::query( |
146 | 146 | 'SELECT * |
147 | - FROM ' . prefixTable('nested_tree') . ' |
|
147 | + FROM ' . prefixTable('nested_tree').' |
|
148 | 148 | WHERE title = %s AND personal_folder = 0', |
149 | 149 | $title |
150 | 150 | ); |
@@ -168,7 +168,7 @@ discard block |
||
168 | 168 | //check if parent folder is personal |
169 | 169 | $data = DB::queryFirstRow( |
170 | 170 | 'SELECT personal_folder, bloquer_creation, bloquer_modification |
171 | - FROM ' . prefixTable('nested_tree') . ' |
|
171 | + FROM ' . prefixTable('nested_tree').' |
|
172 | 172 | WHERE id = %i', |
173 | 173 | $parent_id |
174 | 174 | ); |
@@ -207,7 +207,7 @@ discard block |
||
207 | 207 | // get complexity level for this folder |
208 | 208 | $data = DB::queryFirstRow( |
209 | 209 | 'SELECT valeur |
210 | - FROM ' . prefixTable('misc') . ' |
|
210 | + FROM ' . prefixTable('misc').' |
|
211 | 211 | WHERE intitule = %i AND type = %s', |
212 | 212 | $parent_id, |
213 | 213 | 'complex' |
@@ -278,11 +278,11 @@ discard block |
||
278 | 278 | */ |
279 | 279 | private function canCreateFolder($isPersonal, $user_is_admin, $user_is_manager, $user_can_manage_all_users, $user_can_create_root_folder) |
280 | 280 | { |
281 | - return (int)$isPersonal === 1 || |
|
282 | - (int)$user_is_admin === 1 || |
|
283 | - ((int)$user_is_manager === 1 || (int)$user_can_manage_all_users === 1) || |
|
281 | + return (int) $isPersonal === 1 || |
|
282 | + (int) $user_is_admin === 1 || |
|
283 | + ((int) $user_is_manager === 1 || (int) $user_can_manage_all_users === 1) || |
|
284 | 284 | ($this->settings['enable_user_can_create_folders'] ?? false) || |
285 | - ((int)$user_can_create_root_folder === 1); |
|
285 | + ((int) $user_can_create_root_folder === 1); |
|
286 | 286 | } |
287 | 287 | |
288 | 288 | /** |
@@ -362,7 +362,7 @@ discard block |
||
362 | 362 | $path = ''; |
363 | 363 | $tree_path = $tree->getPath(0, false); |
364 | 364 | foreach ($tree_path as $fld) { |
365 | - $path .= empty($path) ? $fld->title : '/' . $fld->title; |
|
365 | + $path .= empty($path) ? $fld->title : '/'.$fld->title; |
|
366 | 366 | } |
367 | 367 | |
368 | 368 | $new_json = [ |
@@ -376,7 +376,7 @@ discard block |
||
376 | 376 | "is_visible_active" => 0, |
377 | 377 | ]; |
378 | 378 | |
379 | - $cache_tree = DB::queryFirstRow('SELECT increment_id, folders, visible_folders FROM ' . prefixTable('cache_tree') . ' WHERE user_id = %i', (int)$user_id); |
|
379 | + $cache_tree = DB::queryFirstRow('SELECT increment_id, folders, visible_folders FROM '.prefixTable('cache_tree').' WHERE user_id = %i', (int) $user_id); |
|
380 | 380 | |
381 | 381 | if (empty($cache_tree)) { |
382 | 382 | DB::insert(prefixTable('cache_tree'), [ |
@@ -396,7 +396,7 @@ discard block |
||
396 | 396 | 'folders' => json_encode($folders), |
397 | 397 | 'visible_folders' => json_encode($visible_folders), |
398 | 398 | 'timestamp' => time(), |
399 | - ], 'increment_id = %i', (int)$cache_tree['increment_id']); |
|
399 | + ], 'increment_id = %i', (int) $cache_tree['increment_id']); |
|
400 | 400 | } |
401 | 401 | } |
402 | 402 | |
@@ -406,7 +406,7 @@ discard block |
||
406 | 406 | private function manageFolderPermissions($parent_id, $newId, $user_roles, $access_rights, $user_is_admin) |
407 | 407 | { |
408 | 408 | if ($parent_id !== 0 && $this->settings['subfolder_rights_as_parent'] ?? false) { |
409 | - $rows = DB::query('SELECT role_id, type FROM ' . prefixTable('roles_values') . ' WHERE folder_id = %i', $parent_id); |
|
409 | + $rows = DB::query('SELECT role_id, type FROM '.prefixTable('roles_values').' WHERE folder_id = %i', $parent_id); |
|
410 | 410 | foreach ($rows as $record) { |
411 | 411 | DB::insert(prefixTable('roles_values'), [ |
412 | 412 | 'role_id' => $record['role_id'], |
@@ -414,7 +414,7 @@ discard block |
||
414 | 414 | 'type' => $record['type'], |
415 | 415 | ]); |
416 | 416 | } |
417 | - } elseif ((int)$user_is_admin !== 1) { |
|
417 | + } elseif ((int) $user_is_admin !== 1) { |
|
418 | 418 | foreach (array_unique(explode(';', $user_roles)) as $role) { |
419 | 419 | if (!empty($role)) { |
420 | 420 | DB::insert(prefixTable('roles_values'), [ |
@@ -432,7 +432,7 @@ discard block |
||
432 | 432 | */ |
433 | 433 | private function copyCustomFieldsCategories($parent_id, $newId) |
434 | 434 | { |
435 | - $rows = DB::query('SELECT id_category FROM ' . prefixTable('categories_folders') . ' WHERE id_folder = %i', $parent_id); |
|
435 | + $rows = DB::query('SELECT id_category FROM '.prefixTable('categories_folders').' WHERE id_folder = %i', $parent_id); |
|
436 | 436 | foreach ($rows as $record) { |
437 | 437 | DB::insert(prefixTable('categories_folders'), [ |
438 | 438 | 'id_category' => $record['id_category'], |
@@ -457,7 +457,7 @@ discard block |
||
457 | 457 | // Search for existing job |
458 | 458 | $count = DB::queryFirstRow( |
459 | 459 | 'SELECT COUNT(*) AS count |
460 | - FROM ' . prefixTable('background_tasks') . ' |
|
460 | + FROM ' . prefixTable('background_tasks').' |
|
461 | 461 | WHERE is_in_progress = %i AND process_type = %s AND arguments = %s', |
462 | 462 | 0, |
463 | 463 | 'user_build_cache_tree', |
@@ -491,7 +491,7 @@ discard block |
||
491 | 491 | return [ |
492 | 492 | 'error' => true, |
493 | 493 | 'message' => $message, |
494 | - 'newId' => '' . $newIdSuffix, |
|
494 | + 'newId' => ''.$newIdSuffix, |
|
495 | 495 | ]; |
496 | 496 | } |
497 | 497 | } |
@@ -147,7 +147,7 @@ discard block |
||
147 | 147 | $sessionPwdAttempts = $session->get('pwd_attempts'); |
148 | 148 | $sessionUrl = $session->get('user-initial_url'); |
149 | 149 | $server = []; |
150 | - $server['PHP_AUTH_USER'] = $request->getUser(); |
|
150 | + $server['PHP_AUTH_USER'] = $request->getUser(); |
|
151 | 151 | $server['PHP_AUTH_PW'] = $request->getPassword(); |
152 | 152 | |
153 | 153 | // decrypt and retreive data in JSON format |
@@ -162,18 +162,18 @@ discard block |
||
162 | 162 | } |
163 | 163 | |
164 | 164 | // Check if Duo auth is in progress and pass the pw and login back to the standard login process |
165 | - if( |
|
165 | + if ( |
|
166 | 166 | isKeyExistingAndEqual('duo', 1, $SETTINGS) === true |
167 | 167 | && $dataReceived['user_2fa_selection'] === 'duo' |
168 | 168 | && $session->get('user-duo_status') === 'IN_PROGRESS' |
169 | 169 | && !empty($dataReceived['duo_state']) |
170 | - ){ |
|
170 | + ) { |
|
171 | 171 | $key = hash('sha256', $dataReceived['duo_state']); |
172 | 172 | $iv = substr(hash('sha256', $dataReceived['duo_state']), 0, 16); |
173 | 173 | $duo_data_dec = openssl_decrypt(base64_decode($session->get('user-duo_data')), 'AES-256-CBC', $key, 0, $iv); |
174 | 174 | // Clear the data from the Duo process to continue clean with the standard login process |
175 | - $session->set('user-duo_data',''); |
|
176 | - if($duo_data_dec === false) { |
|
175 | + $session->set('user-duo_data', ''); |
|
176 | + if ($duo_data_dec === false) { |
|
177 | 177 | // Add failed authentication log |
178 | 178 | addFailedAuthentication(filter_var($dataReceived['login'], FILTER_SANITIZE_FULL_SPECIAL_CHARS), getClientIpServer()); |
179 | 179 | |
@@ -191,7 +191,7 @@ discard block |
||
191 | 191 | $dataReceived['login'] = $duo_data['duo_login']; |
192 | 192 | } |
193 | 193 | |
194 | - if(isset($dataReceived['pw']) === false || isset($dataReceived['login']) === false) { |
|
194 | + if (isset($dataReceived['pw']) === false || isset($dataReceived['login']) === false) { |
|
195 | 195 | echo json_encode([ |
196 | 196 | 'data' => prepareExchangedData( |
197 | 197 | [ |
@@ -536,7 +536,7 @@ discard block |
||
536 | 536 | } |
537 | 537 | // Append with roles from AD groups |
538 | 538 | if (is_null($userInfo['roles_from_ad_groups']) === false) { |
539 | - $userInfo['fonction_id'] = empty($userInfo['fonction_id']) === true ? $userInfo['roles_from_ad_groups'] : $userInfo['fonction_id']. ';' . $userInfo['roles_from_ad_groups']; |
|
539 | + $userInfo['fonction_id'] = empty($userInfo['fonction_id']) === true ? $userInfo['roles_from_ad_groups'] : $userInfo['fonction_id'].';'.$userInfo['roles_from_ad_groups']; |
|
540 | 540 | } |
541 | 541 | // store |
542 | 542 | $session->set('user-roles', $userInfo['fonction_id']); |
@@ -548,7 +548,7 @@ discard block |
||
548 | 548 | if (count($session->get('user-roles_array')) > 0) { |
549 | 549 | $rolesList = DB::query( |
550 | 550 | 'SELECT id, title, complexity |
551 | - FROM ' . prefixTable('roles_title') . ' |
|
551 | + FROM ' . prefixTable('roles_title').' |
|
552 | 552 | WHERE id IN %li', |
553 | 553 | $session->get('user-roles_array') |
554 | 554 | ); |
@@ -594,7 +594,7 @@ discard block |
||
594 | 594 | if ($adjustPermissions) { |
595 | 595 | $session->set('user-admin', (int) $userInfo['admin']); |
596 | 596 | $session->set('user-manager', (int) $userInfo['gestionnaire']); |
597 | - $session->set('user-can_manage_all_users',(int) $userInfo['can_manage_all_users']); |
|
597 | + $session->set('user-can_manage_all_users', (int) $userInfo['can_manage_all_users']); |
|
598 | 598 | $session->set('user-read_only', (int) $userInfo['read_only']); |
599 | 599 | DB::update( |
600 | 600 | prefixTable('users'), |
@@ -665,10 +665,10 @@ discard block |
||
665 | 665 | $session->set('user-latest_items_tab', []); |
666 | 666 | $session->set('user-nb_roles', 0); |
667 | 667 | foreach ($session->get('user-latest_items') as $item) { |
668 | - if (! empty($item)) { |
|
668 | + if (!empty($item)) { |
|
669 | 669 | $dataLastItems = DB::queryFirstRow( |
670 | 670 | 'SELECT id,label,id_tree |
671 | - FROM ' . prefixTable('items') . ' |
|
671 | + FROM ' . prefixTable('items').' |
|
672 | 672 | WHERE id=%i', |
673 | 673 | $item |
674 | 674 | ); |
@@ -677,7 +677,7 @@ discard block |
||
677 | 677 | [ |
678 | 678 | 'id' => $item, |
679 | 679 | 'label' => $dataLastItems['label'], |
680 | - 'url' => 'index.php?page=items&group=' . $dataLastItems['id_tree'] . '&id=' . $item, |
|
680 | + 'url' => 'index.php?page=items&group='.$dataLastItems['id_tree'].'&id='.$item, |
|
681 | 681 | ], |
682 | 682 | 'add' |
683 | 683 | ); |
@@ -687,7 +687,7 @@ discard block |
||
687 | 687 | // Get cahce tree info |
688 | 688 | $cacheTreeData = DB::queryFirstRow( |
689 | 689 | 'SELECT visible_folders |
690 | - FROM ' . prefixTable('cache_tree') . ' |
|
690 | + FROM ' . prefixTable('cache_tree').' |
|
691 | 691 | WHERE user_id=%i', |
692 | 692 | (int) $session->get('user-id') |
693 | 693 | ); |
@@ -719,7 +719,7 @@ discard block |
||
719 | 719 | && (int) $sessionAdmin !== 1 |
720 | 720 | ) { |
721 | 721 | // get all Admin users |
722 | - $val = DB::queryFirstRow('SELECT email FROM ' . prefixTable('users') . " WHERE admin = %i and email != ''", 1); |
|
722 | + $val = DB::queryFirstRow('SELECT email FROM '.prefixTable('users')." WHERE admin = %i and email != ''", 1); |
|
723 | 723 | if (DB::count() > 0) { |
724 | 724 | // Add email to table |
725 | 725 | prepareSendingEmail( |
@@ -731,7 +731,7 @@ discard block |
||
731 | 731 | '#tp_time#', |
732 | 732 | ], |
733 | 733 | [ |
734 | - ' ' . $session->get('user-login') . ' (IP: ' . getClientIpServer() . ')', |
|
734 | + ' '.$session->get('user-login').' (IP: '.getClientIpServer().')', |
|
735 | 735 | date($SETTINGS['date_format'], (int) $session->get('user-last_connection')), |
736 | 736 | date($SETTINGS['time_format'], (int) $session->get('user-last_connection')), |
737 | 737 | ], |
@@ -842,7 +842,7 @@ discard block |
||
842 | 842 | { |
843 | 843 | $rows = DB::query( |
844 | 844 | 'SELECT date |
845 | - FROM ' . prefixTable('log_system') . " |
|
845 | + FROM ' . prefixTable('log_system')." |
|
846 | 846 | WHERE field_1 = %s |
847 | 847 | AND type = 'failed_auth' |
848 | 848 | AND label = 'password_is_not_correct' |
@@ -856,7 +856,7 @@ discard block |
||
856 | 856 | foreach ($rows as $record) { |
857 | 857 | array_push( |
858 | 858 | $arrAttempts, |
859 | - date($SETTINGS['date_format'] . ' ' . $SETTINGS['time_format'], (int) $record['date']) |
|
859 | + date($SETTINGS['date_format'].' '.$SETTINGS['time_format'], (int) $record['date']) |
|
860 | 860 | ); |
861 | 861 | } |
862 | 862 | } |
@@ -891,7 +891,7 @@ discard block |
||
891 | 891 | $ldapConnection |
892 | 892 | ) : bool |
893 | 893 | { |
894 | - include_once $SETTINGS['cpassman_dir'] . '/sources/main.functions.php'; |
|
894 | + include_once $SETTINGS['cpassman_dir'].'/sources/main.functions.php'; |
|
895 | 895 | |
896 | 896 | if ((int) $userInfoDisabled === 1) { |
897 | 897 | return false; |
@@ -1086,7 +1086,7 @@ discard block |
||
1086 | 1086 | } catch (Exception $e) { |
1087 | 1087 | return [ |
1088 | 1088 | 'error' => true, |
1089 | - 'message' => "Error: " . $e->getMessage(), |
|
1089 | + 'message' => "Error: ".$e->getMessage(), |
|
1090 | 1090 | ]; |
1091 | 1091 | } |
1092 | 1092 | } |
@@ -1117,7 +1117,7 @@ discard block |
||
1117 | 1117 | 'type' => 'OpenLDAP' |
1118 | 1118 | ]; |
1119 | 1119 | default: |
1120 | - throw new Exception("Unsupported LDAP type: " . $SETTINGS['ldap_type']); |
|
1120 | + throw new Exception("Unsupported LDAP type: ".$SETTINGS['ldap_type']); |
|
1121 | 1121 | } |
1122 | 1122 | } |
1123 | 1123 | |
@@ -1254,7 +1254,7 @@ discard block |
||
1254 | 1254 | ); |
1255 | 1255 | } |
1256 | 1256 | |
1257 | - throw new Exception("Unsupported LDAP type: " . $ldapHandler['type']); |
|
1257 | + throw new Exception("Unsupported LDAP type: ".$ldapHandler['type']); |
|
1258 | 1258 | } |
1259 | 1259 | |
1260 | 1260 | /** |
@@ -1271,12 +1271,12 @@ discard block |
||
1271 | 1271 | if (isset($SETTINGS['enable_ad_users_with_ad_groups']) === true && (int) $SETTINGS['enable_ad_users_with_ad_groups'] === 1) { |
1272 | 1272 | // Get user groups from AD |
1273 | 1273 | $user_ad_groups = []; |
1274 | - foreach($groups as $group) { |
|
1274 | + foreach ($groups as $group) { |
|
1275 | 1275 | //print_r($group); |
1276 | 1276 | // get relation role id for AD group |
1277 | 1277 | $role = DB::queryFirstRow( |
1278 | 1278 | 'SELECT lgr.role_id |
1279 | - FROM ' . prefixTable('ldap_groups_roles') . ' AS lgr |
|
1279 | + FROM ' . prefixTable('ldap_groups_roles').' AS lgr |
|
1280 | 1280 | WHERE lgr.ldap_group_id = %s', |
1281 | 1281 | $group |
1282 | 1282 | ); |
@@ -1407,7 +1407,7 @@ discard block |
||
1407 | 1407 | // Check if exists in DB |
1408 | 1408 | $groupData = DB::queryFirstRow( |
1409 | 1409 | 'SELECT id |
1410 | - FROM ' . prefixTable('roles_title') . ' |
|
1410 | + FROM ' . prefixTable('roles_title').' |
|
1411 | 1411 | WHERE title = %s', |
1412 | 1412 | $group["displayName"] |
1413 | 1413 | ); |
@@ -1537,7 +1537,7 @@ discard block |
||
1537 | 1537 | |
1538 | 1538 | // generate new QR |
1539 | 1539 | $new_2fa_qr = $tfa->getQRCodeImageAsDataUri( |
1540 | - 'Teampass - ' . $username, |
|
1540 | + 'Teampass - '.$username, |
|
1541 | 1541 | $userInfo['ga'] |
1542 | 1542 | ); |
1543 | 1543 | // clear temporary code from DB |
@@ -1550,7 +1550,7 @@ discard block |
||
1550 | 1550 | $userInfo['id'] |
1551 | 1551 | ); |
1552 | 1552 | $firstTime = [ |
1553 | - 'value' => '<img src="' . $new_2fa_qr . '">', |
|
1553 | + 'value' => '<img src="'.$new_2fa_qr.'">', |
|
1554 | 1554 | 'user_admin' => isset($sessionAdmin) ? (int) $sessionAdmin : '', |
1555 | 1555 | 'initial_url' => isset($sessionUrl) === true ? $sessionUrl : '', |
1556 | 1556 | 'pwd_attempts' => (int) $sessionPwdAttempts, |
@@ -1706,7 +1706,7 @@ discard block |
||
1706 | 1706 | }*/ |
1707 | 1707 | return [ |
1708 | 1708 | 'error' => true, |
1709 | - 'message' => $duo_error . $lang->get('duo_error_check_config'), |
|
1709 | + 'message' => $duo_error.$lang->get('duo_error_check_config'), |
|
1710 | 1710 | 'pwd_attempts' => (int) $sessionPwdAttempts, |
1711 | 1711 | 'debug_message' => $e->getMessage(), |
1712 | 1712 | 'proceedIdentification' => false, |
@@ -1722,7 +1722,7 @@ discard block |
||
1722 | 1722 | } catch (DuoException $e) { |
1723 | 1723 | return [ |
1724 | 1724 | 'error' => true, |
1725 | - 'message' => $duo_error . $lang->get('duo_error_url'), |
|
1725 | + 'message' => $duo_error.$lang->get('duo_error_url'), |
|
1726 | 1726 | 'pwd_attempts' => (int) $sessionPwdAttempts, |
1727 | 1727 | 'debug_message' => $e->getMessage(), |
1728 | 1728 | 'proceedIdentification' => false, |
@@ -1730,7 +1730,7 @@ discard block |
||
1730 | 1730 | } |
1731 | 1731 | |
1732 | 1732 | // Somethimes Duo return success but fail to return a URL, double check if the URL has been created |
1733 | - if (!empty($duo_redirect_url) && filter_var($duo_redirect_url,FILTER_SANITIZE_URL)) { |
|
1733 | + if (!empty($duo_redirect_url) && filter_var($duo_redirect_url, FILTER_SANITIZE_URL)) { |
|
1734 | 1734 | // Since Duo Universal requires a redirect, let's store some info when the user get's back after completing the Duo prompt |
1735 | 1735 | $key = hash('sha256', $duo_state); |
1736 | 1736 | $iv = substr(hash('sha256', $duo_state), 0, 16); |
@@ -1758,7 +1758,7 @@ discard block |
||
1758 | 1758 | } else { |
1759 | 1759 | return [ |
1760 | 1760 | 'error' => true, |
1761 | - 'message' => $duo_error . $lang->get('duo_error_url'), |
|
1761 | + 'message' => $duo_error.$lang->get('duo_error_url'), |
|
1762 | 1762 | 'pwd_attempts' => (int) $sessionPwdAttempts, |
1763 | 1763 | 'proceedIdentification' => false, |
1764 | 1764 | ]; |
@@ -1779,8 +1779,8 @@ discard block |
||
1779 | 1779 | // return the response (which should be the user name) |
1780 | 1780 | if ($decoded_token['preferred_username'] === $username) { |
1781 | 1781 | $session->set('user-duo_status', 'COMPLET'); |
1782 | - $session->set('user-duo_state',''); |
|
1783 | - $session->set('user-duo_data',''); |
|
1782 | + $session->set('user-duo_state', ''); |
|
1783 | + $session->set('user-duo_data', ''); |
|
1784 | 1784 | $session->set('user-login', $username); |
1785 | 1785 | |
1786 | 1786 | return [ |
@@ -1791,9 +1791,9 @@ discard block |
||
1791 | 1791 | ]; |
1792 | 1792 | } else { |
1793 | 1793 | // Something wrong, username from the original Duo request is different than the one received now |
1794 | - $session->set('user-duo_status',''); |
|
1795 | - $session->set('user-duo_state',''); |
|
1796 | - $session->set('user-duo_data',''); |
|
1794 | + $session->set('user-duo_status', ''); |
|
1795 | + $session->set('user-duo_state', ''); |
|
1796 | + $session->set('user-duo_data', ''); |
|
1797 | 1797 | |
1798 | 1798 | return [ |
1799 | 1799 | 'error' => true, |
@@ -1804,9 +1804,9 @@ discard block |
||
1804 | 1804 | } |
1805 | 1805 | } |
1806 | 1806 | // If we are here something wrong |
1807 | - $session->set('user-duo_status',''); |
|
1808 | - $session->set('user-duo_state',''); |
|
1809 | - $session->set('user-duo_data',''); |
|
1807 | + $session->set('user-duo_status', ''); |
|
1808 | + $session->set('user-duo_state', ''); |
|
1809 | + $session->set('user-duo_data', ''); |
|
1810 | 1810 | return [ |
1811 | 1811 | 'error' => true, |
1812 | 1812 | 'message' => $lang->get('duo_login_mismatch'), |
@@ -1918,7 +1918,7 @@ discard block |
||
1918 | 1918 | // Check for existing lock |
1919 | 1919 | $unlock_at = DB::queryFirstField( |
1920 | 1920 | 'SELECT MAX(unlock_at) |
1921 | - FROM ' . prefixTable('auth_failures') . ' |
|
1921 | + FROM ' . prefixTable('auth_failures').' |
|
1922 | 1922 | WHERE unlock_at > %s |
1923 | 1923 | AND ((source = %s AND value = %s) OR (source = %s AND value = %s))', |
1924 | 1924 | date('Y-m-d H:i:s', time()), |
@@ -1940,8 +1940,8 @@ discard block |
||
1940 | 1940 | // Get user info from DB |
1941 | 1941 | $data = DB::queryFirstRow( |
1942 | 1942 | 'SELECT u.*, a.value AS api_key |
1943 | - FROM ' . prefixTable('users') . ' AS u |
|
1944 | - LEFT JOIN ' . prefixTable('api') . ' AS a ON (u.id = a.user_id) |
|
1943 | + FROM ' . prefixTable('users').' AS u |
|
1944 | + LEFT JOIN ' . prefixTable('api').' AS a ON (u.id = a.user_id) |
|
1945 | 1945 | WHERE login = %s AND deleted_at IS NULL', |
1946 | 1946 | $login |
1947 | 1947 | ); |
@@ -2061,7 +2061,7 @@ discard block |
||
2061 | 2061 | 'array' => [ |
2062 | 2062 | 'value' => 'bruteforce_wait', |
2063 | 2063 | 'error' => true, |
2064 | - 'message' => $lang->get('bruteforce_wait') . (string) $e->getMessage(), |
|
2064 | + 'message' => $lang->get('bruteforce_wait').(string) $e->getMessage(), |
|
2065 | 2065 | ] |
2066 | 2066 | ]; |
2067 | 2067 | } |
@@ -2478,15 +2478,15 @@ discard block |
||
2478 | 2478 | |
2479 | 2479 | if ($ret['error'] !== false) { |
2480 | 2480 | logEvents($SETTINGS, 'failed_auth', 'bad_duo_mfa', '', stripslashes($username), stripslashes($username)); |
2481 | - $session->set('user-duo_status',''); |
|
2482 | - $session->set('user-duo_state',''); |
|
2483 | - $session->set('user-duo_data',''); |
|
2481 | + $session->set('user-duo_status', ''); |
|
2482 | + $session->set('user-duo_state', ''); |
|
2483 | + $session->set('user-duo_data', ''); |
|
2484 | 2484 | return [ |
2485 | 2485 | 'error' => true, |
2486 | 2486 | 'mfaData' => $ret, |
2487 | 2487 | 'mfaQRCodeInfos' => false, |
2488 | 2488 | ]; |
2489 | - } else if ($ret['duo_url_ready'] === true){ |
|
2489 | + } else if ($ret['duo_url_ready'] === true) { |
|
2490 | 2490 | return [ |
2491 | 2491 | 'error' => false, |
2492 | 2492 | 'mfaData' => $ret, |
@@ -2550,7 +2550,7 @@ discard block |
||
2550 | 2550 | // Count failed attempts from this source |
2551 | 2551 | $count = DB::queryFirstField( |
2552 | 2552 | 'SELECT COUNT(*) |
2553 | - FROM ' . prefixTable('auth_failures') . ' |
|
2553 | + FROM ' . prefixTable('auth_failures').' |
|
2554 | 2554 | WHERE source = %s AND value = %s', |
2555 | 2555 | $source, |
2556 | 2556 | $value |
@@ -64,7 +64,7 @@ discard block |
||
64 | 64 | ) { |
65 | 65 | // Not allowed page |
66 | 66 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
67 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
67 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
68 | 68 | exit; |
69 | 69 | } |
70 | 70 | |
@@ -125,7 +125,7 @@ discard block |
||
125 | 125 | ); |
126 | 126 | |
127 | 127 | $lastFolderChange = DB::queryFirstRow( |
128 | - 'SELECT valeur FROM ' . prefixTable('misc') . ' |
|
128 | + 'SELECT valeur FROM '.prefixTable('misc').' |
|
129 | 129 | WHERE type = %s AND intitule = %s', |
130 | 130 | 'timestamp', |
131 | 131 | 'last_folder_change' |
@@ -346,7 +346,7 @@ discard block |
||
346 | 346 | $nbItemsInSubfolders = (int) $node->nb_items_in_subfolders; |
347 | 347 | $nbItemsInFolder = (int) $node->nb_items_in_folder; |
348 | 348 | $nbSubfolders = (int) $node->nb_subfolders; |
349 | - break; // Get out as soon as we find a valid node. |
|
349 | + break; // Get out as soon as we find a valid node. |
|
350 | 350 | } |
351 | 351 | |
352 | 352 | if ($displayThisNode === true) { |
@@ -458,7 +458,7 @@ discard block |
||
458 | 458 | foreach ($currentNode->children as $child) { |
459 | 459 | recursiveTree( |
460 | 460 | (int) $child, |
461 | - $tree->getNode($child),// get node info for this child |
|
461 | + $tree->getNode($child), // get node info for this child |
|
462 | 462 | /** @scrutinizer ignore-type */ $tree, |
463 | 463 | $listFoldersLimitedKeys, |
464 | 464 | $listRestrictedFoldersForItemsKeys, |
@@ -505,7 +505,7 @@ discard block |
||
505 | 505 | $lang = new Language($session->get('user-language') ?? 'english'); |
506 | 506 | |
507 | 507 | // prepare json return for current node |
508 | - $parent = $currentNode->parent_id === '0' ? '#' : 'li_' . $currentNode->parent_id; |
|
508 | + $parent = $currentNode->parent_id === '0' ? '#' : 'li_'.$currentNode->parent_id; |
|
509 | 509 | |
510 | 510 | // handle displaying |
511 | 511 | if (isKeyExistingAndEqual('show_only_accessible_folders', 1, $SETTINGS) === true) { |
@@ -522,17 +522,17 @@ discard block |
||
522 | 522 | array_push( |
523 | 523 | $ret_json, |
524 | 524 | array( |
525 | - 'id' => 'li_' . $nodeId, |
|
525 | + 'id' => 'li_'.$nodeId, |
|
526 | 526 | 'parent' => $last_visible_parent === -1 ? $parent : $last_visible_parent, |
527 | 527 | 'text' => '<i class="'.$currentNode->fa_icon.' tree-folder mr-2" data-folder="'.$currentNode->fa_icon.'" data-folder-selected="'.$currentNode->fa_icon_selected.'"></i>'.$text.htmlspecialchars($currentNode->title).$nodeData['html'], |
528 | 528 | 'li_attr' => array( |
529 | 529 | 'class' => 'jstreeopen', |
530 | - 'title' => 'ID [' . $nodeId . '] ' . $nodeData['title'], |
|
530 | + 'title' => 'ID ['.$nodeId.'] '.$nodeData['title'], |
|
531 | 531 | ), |
532 | 532 | 'a_attr' => array( |
533 | - 'id' => 'fld_' . $nodeId, |
|
533 | + 'id' => 'fld_'.$nodeId, |
|
534 | 534 | 'class' => $nodeData['folderClass'], |
535 | - 'onclick' => 'ListerItems(' . $nodeId . ', ' . $nodeData['restricted'] . ', 0, 1)', |
|
535 | + 'onclick' => 'ListerItems('.$nodeId.', '.$nodeData['restricted'].', 0, 1)', |
|
536 | 536 | 'data-title' => htmlspecialchars($currentNode->title), |
537 | 537 | ), |
538 | 538 | 'is_pf' => in_array($nodeId, $inputData['personalFolders']) === true ? 1 : 0, |
@@ -548,12 +548,12 @@ discard block |
||
548 | 548 | array_push( |
549 | 549 | $ret_json, |
550 | 550 | array( |
551 | - 'id' => 'li_' . $nodeId, |
|
551 | + 'id' => 'li_'.$nodeId, |
|
552 | 552 | 'parent' => $last_visible_parent === -1 ? $parent : $last_visible_parent, |
553 | 553 | 'text' => '<i class="'.$currentNode->fa_icon.' tree-folder mr-2" data-folder="'.$currentNode->fa_icon.'" data-folder-selected="'.$currentNode->fa_icon_selected.'"></i>'.'<i class="fas fa-times fa-xs text-danger mr-1 ml-1"></i>'.$text.htmlspecialchars($currentNode->title).$nodeData['html'], |
554 | 554 | 'li_attr' => array( |
555 | 555 | 'class' => '', |
556 | - 'title' => 'ID [' . $nodeId . '] ' . $lang->get('no_access'), |
|
556 | + 'title' => 'ID ['.$nodeId.'] '.$lang->get('no_access'), |
|
557 | 557 | ), |
558 | 558 | ) |
559 | 559 | ); |
@@ -613,7 +613,7 @@ discard block |
||
613 | 613 | if (in_array($nodeId, $session_read_only_folders) === true) { |
614 | 614 | return [ |
615 | 615 | 'html' => '<i class="far fa-eye fa-xs mr-1 ml-1"></i>'. |
616 | - ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . $nbItemsInFolder .'/'.$nbItemsInSubfolders .'/'.$nbSubfolders. '</span>' : ''), |
|
616 | + ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.$nbItemsInFolder.'/'.$nbItemsInSubfolders.'/'.$nbSubfolders.'</span>' : ''), |
|
617 | 617 | 'title' => $lang->get('read_only_account'), |
618 | 618 | 'restricted' => 1, |
619 | 619 | 'folderClass' => 'folder_not_droppable', |
@@ -628,7 +628,7 @@ discard block |
||
628 | 628 | ) { |
629 | 629 | return [ |
630 | 630 | 'html' => '<i class="far fa-eye fa-xs mr-1"></i>'. |
631 | - ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . $nbItemsInFolder .'/'.$nbItemsInSubfolders .'/'.$nbSubfolders. '</span>' : ''), |
|
631 | + ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.$nbItemsInFolder.'/'.$nbItemsInSubfolders.'/'.$nbSubfolders.'</span>' : ''), |
|
632 | 632 | 'title' => $lang->get('read_only_account'), |
633 | 633 | 'restricted' => 0, |
634 | 634 | 'folderClass' => 'folder', |
@@ -639,7 +639,7 @@ discard block |
||
639 | 639 | } |
640 | 640 | |
641 | 641 | return [ |
642 | - 'html' => ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . $nbItemsInFolder .'/'.$nbItemsInSubfolders .'/'.$nbSubfolders. '</span>' : ''), |
|
642 | + 'html' => ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.$nbItemsInFolder.'/'.$nbItemsInSubfolders.'/'.$nbSubfolders.'</span>' : ''), |
|
643 | 643 | 'title' => '', |
644 | 644 | 'restricted' => 0, |
645 | 645 | 'folderClass' => 'folder', |
@@ -650,8 +650,8 @@ discard block |
||
650 | 650 | |
651 | 651 | } elseif (in_array($nodeId, $listFoldersLimitedKeys) === true) { |
652 | 652 | return [ |
653 | - 'html' => ($session_user_read_only === true ? '<i class="far fa-eye fa-xs mr-1"></i>' : '') . |
|
654 | - ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . count($session_list_folders_limited[$nodeId]) . '</span>' : ''), |
|
653 | + 'html' => ($session_user_read_only === true ? '<i class="far fa-eye fa-xs mr-1"></i>' : ''). |
|
654 | + ($tree_counters === 1 ? '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.count($session_list_folders_limited[$nodeId]).'</span>' : ''), |
|
655 | 655 | 'title' => '', |
656 | 656 | 'restricted' => 1, |
657 | 657 | 'folderClass' => 'folder', |
@@ -662,8 +662,8 @@ discard block |
||
662 | 662 | |
663 | 663 | } elseif (in_array($nodeId, $listRestrictedFoldersForItemsKeys) === true) { |
664 | 664 | return [ |
665 | - 'html' => $session_user_read_only === true ? '<i class="far fa-eye fa-xs mr-1"></i>' : '' . |
|
666 | - '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_' . $nodeId . '">' . count($session_list_restricted_folders_for_items[$nodeId]) . '</span>', |
|
665 | + 'html' => $session_user_read_only === true ? '<i class="far fa-eye fa-xs mr-1"></i>' : ''. |
|
666 | + '<span class="badge badge-pill badge-light ml-2 items_count" id="itcount_'.$nodeId.'">'.count($session_list_restricted_folders_for_items[$nodeId]).'</span>', |
|
667 | 667 | 'title' => '', |
668 | 668 | 'restricted' => 1, |
669 | 669 | 'folderClass' => 'folder', |
@@ -773,7 +773,7 @@ discard block |
||
773 | 773 | // Does this user has a tree cache |
774 | 774 | $userCacheTree = DB::queryFirstRow( |
775 | 775 | 'SELECT data |
776 | - FROM ' . prefixTable('cache_tree') . ' |
|
776 | + FROM ' . prefixTable('cache_tree').' |
|
777 | 777 | WHERE user_id = %i', |
778 | 778 | $userId |
779 | 779 | ); |
@@ -76,7 +76,7 @@ discard block |
||
76 | 76 | ) { |
77 | 77 | // Not allowed page |
78 | 78 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
79 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
79 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
80 | 80 | exit; |
81 | 81 | } |
82 | 82 | |
@@ -118,19 +118,19 @@ discard block |
||
118 | 118 | $get_filename = str_replace('"', '\"', $get_filename); |
119 | 119 | |
120 | 120 | // Use Content-Disposition header with double quotes around filename |
121 | -header('Content-Disposition: attachment; filename="' . rawurldecode($get_filename) . '"'); |
|
121 | +header('Content-Disposition: attachment; filename="'.rawurldecode($get_filename).'"'); |
|
122 | 122 | header('Content-Type: application/octet-stream'); |
123 | 123 | header('Cache-Control: must-revalidate, no-cache, no-store'); |
124 | 124 | header('Expires: 0'); |
125 | 125 | if (null !== $request->query->get('pathIsFiles') && (int) $get_pathIsFiles === 1) { |
126 | - readfile($SETTINGS['path_to_files_folder'] . '/' . basename($get_filename)); |
|
126 | + readfile($SETTINGS['path_to_files_folder'].'/'.basename($get_filename)); |
|
127 | 127 | } else { |
128 | 128 | // get file key |
129 | 129 | $file_info = DB::queryFirstRow( |
130 | 130 | 'SELECT f.id AS id, f.file AS file, f.name AS name, f.status AS status, f.extension AS extension, |
131 | 131 | s.share_key AS share_key |
132 | - FROM ' . prefixTable('files') . ' AS f |
|
133 | - INNER JOIN ' . prefixTable('sharekeys_files') . ' AS s ON (f.id = s.object_id) |
|
132 | + FROM ' . prefixTable('files').' AS f |
|
133 | + INNER JOIN ' . prefixTable('sharekeys_files').' AS s ON (f.id = s.object_id) |
|
134 | 134 | WHERE s.user_id = %i AND s.object_id = %i', |
135 | 135 | $session->get('user-id'), |
136 | 136 | $get_fileid |
@@ -149,7 +149,7 @@ discard block |
||
149 | 149 | // if not encrypted |
150 | 150 | $file_info = DB::queryFirstRow( |
151 | 151 | 'SELECT f.id AS id, f.file AS file, f.name AS name, f.status AS status, f.extension AS extension |
152 | - FROM ' . prefixTable('files') . ' AS f |
|
152 | + FROM ' . prefixTable('files').' AS f |
|
153 | 153 | WHERE f.id = %i', |
154 | 154 | $get_fileid |
155 | 155 | ); |
@@ -159,25 +159,25 @@ discard block |
||
159 | 159 | // Set the filename of the download |
160 | 160 | $filename = basename($file_info['name'], '.'.$file_info['extension']); |
161 | 161 | $filename = isBase64($filename) === true ? base64_decode($filename) : $filename; |
162 | - $filename = $filename . '.' . $file_info['extension']; |
|
162 | + $filename = $filename.'.'.$file_info['extension']; |
|
163 | 163 | // Get the full path to the file to be downloaded |
164 | - if (file_exists($SETTINGS['path_to_upload_folder'] . '/' .TP_FILE_PREFIX . $file_info['file'])) { |
|
165 | - $filePath = $SETTINGS['path_to_upload_folder'] . '/' . TP_FILE_PREFIX . $file_info['file']; |
|
164 | + if (file_exists($SETTINGS['path_to_upload_folder'].'/'.TP_FILE_PREFIX.$file_info['file'])) { |
|
165 | + $filePath = $SETTINGS['path_to_upload_folder'].'/'.TP_FILE_PREFIX.$file_info['file']; |
|
166 | 166 | } else { |
167 | - $filePath = $SETTINGS['path_to_upload_folder'] . '/' . TP_FILE_PREFIX . base64_decode($file_info['file']); |
|
167 | + $filePath = $SETTINGS['path_to_upload_folder'].'/'.TP_FILE_PREFIX.base64_decode($file_info['file']); |
|
168 | 168 | } |
169 | 169 | $filePath = realpath($filePath); |
170 | 170 | |
171 | - if (WIP === true) error_log('downloadFile.php: filePath: ' . $filePath." - "); |
|
171 | + if (WIP === true) error_log('downloadFile.php: filePath: '.$filePath." - "); |
|
172 | 172 | |
173 | 173 | if ($filePath && is_readable($filePath) && strpos($filePath, realpath($SETTINGS['path_to_upload_folder'])) === 0) { |
174 | 174 | header('Content-Description: File Transfer'); |
175 | 175 | header('Content-Type: application/octet-stream'); |
176 | - header('Content-Disposition: attachment; filename="' . basename($filename) . '"'); |
|
176 | + header('Content-Disposition: attachment; filename="'.basename($filename).'"'); |
|
177 | 177 | header('Expires: 0'); |
178 | 178 | header('Cache-Control: must-revalidate'); |
179 | 179 | header('Pragma: public'); |
180 | - header('Content-Length: ' . filesize($filePath)); |
|
180 | + header('Content-Length: '.filesize($filePath)); |
|
181 | 181 | flush(); // Clear system output buffer |
182 | 182 | if (empty($fileContent) === true) { |
183 | 183 | // deepcode ignore PT: File and path are secured directly inside the function decryptFile() |
@@ -78,7 +78,7 @@ discard block |
||
78 | 78 | ) { |
79 | 79 | // Not allowed page |
80 | 80 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
81 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
81 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
82 | 82 | exit; |
83 | 83 | } |
84 | 84 | |
@@ -100,7 +100,7 @@ discard block |
||
100 | 100 | $antiXss = new AntiXSS(); |
101 | 101 | |
102 | 102 | // User's language loading |
103 | -require_once $SETTINGS['cpassman_dir'] . '/includes/language/' . $session->get('user-language') . '.php'; |
|
103 | +require_once $SETTINGS['cpassman_dir'].'/includes/language/'.$session->get('user-language').'.php'; |
|
104 | 104 | |
105 | 105 | // Prepare POST variables |
106 | 106 | $id = filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT); |
@@ -151,9 +151,9 @@ discard block |
||
151 | 151 | 'SELECT i.id as id, i.id_tree as id_tree, i.restricted_to as restricted_to, i.perso as perso, |
152 | 152 | i.label as label, i.description as description, i.pw as pw, i.login as login, i.url as url, |
153 | 153 | i.email as email,l.date as date, i.pw_iv as pw_iv,n.renewal_period as renewal_period |
154 | - FROM ' . prefixTable('items') . ' as i |
|
155 | - INNER JOIN ' . prefixTable('nested_tree') . ' as n ON (i.id_tree = n.id) |
|
156 | - INNER JOIN ' . prefixTable('log_items') . ' as l ON (i.id = l.id_item) |
|
154 | + FROM ' . prefixTable('items').' as i |
|
155 | + INNER JOIN ' . prefixTable('nested_tree').' as n ON (i.id_tree = n.id) |
|
156 | + INNER JOIN ' . prefixTable('log_items').' as l ON (i.id = l.id_item) |
|
157 | 157 | WHERE i.inactif = %i |
158 | 158 | AND i.id_tree= %i |
159 | 159 | AND (l.action = %s OR (l.action = %s AND l.raison LIKE %s)) |
@@ -176,8 +176,8 @@ discard block |
||
176 | 176 | // Run query |
177 | 177 | $dataItem = DB::queryFirstRow( |
178 | 178 | 'SELECT i.pw AS pw, s.share_key AS share_key |
179 | - FROM ' . prefixTable('items') . ' AS i |
|
180 | - INNER JOIN ' . prefixTable('sharekeys_items') . ' AS s ON (s.object_id = i.id) |
|
179 | + FROM ' . prefixTable('items').' AS i |
|
180 | + INNER JOIN ' . prefixTable('sharekeys_items').' AS s ON (s.object_id = i.id) |
|
181 | 181 | WHERE user_id = %i AND i.id = %i', |
182 | 182 | $session->get('user-id'), |
183 | 183 | $record['id'] |
@@ -201,8 +201,8 @@ discard block |
||
201 | 201 | $arr_kbs = []; |
202 | 202 | $rows_kb = DB::query( |
203 | 203 | 'SELECT b.label, b.id |
204 | - FROM ' . prefixTable('kb_items') . ' AS a |
|
205 | - INNER JOIN ' . prefixTable('kb') . ' AS b ON (a.kb_id = b.id) |
|
204 | + FROM ' . prefixTable('kb_items').' AS a |
|
205 | + INNER JOIN ' . prefixTable('kb').' AS b ON (a.kb_id = b.id) |
|
206 | 206 | WHERE a.item_id = %i', |
207 | 207 | $record['id'] |
208 | 208 | ); |
@@ -214,7 +214,7 @@ discard block |
||
214 | 214 | $arr_tags = []; |
215 | 215 | $rows_tag = DB::query( |
216 | 216 | 'SELECT tag |
217 | - FROM ' . prefixTable('tags') . ' |
|
217 | + FROM ' . prefixTable('tags').' |
|
218 | 218 | WHERE item_id = %i', |
219 | 219 | $record['id'] |
220 | 220 | ); |
@@ -226,18 +226,18 @@ discard block |
||
226 | 226 | $arr_trees = []; |
227 | 227 | $rows_child_tree = DB::query( |
228 | 228 | 'SELECT t.id, t.title |
229 | - FROM ' . prefixTable('nested_tree') . ' AS t |
|
230 | - INNER JOIN ' . prefixTable('items') . ' AS i ON (t.id = i.id_tree) |
|
229 | + FROM ' . prefixTable('nested_tree').' AS t |
|
230 | + INNER JOIN ' . prefixTable('items').' AS i ON (t.id = i.id_tree) |
|
231 | 231 | WHERE i.id = %i', |
232 | 232 | $record['id'] |
233 | 233 | ); |
234 | 234 | foreach ($rows_child_tree as $rec_child_tree) { |
235 | 235 | $stack = array(); |
236 | 236 | $parent = $rec_child_tree['id']; |
237 | - while($parent != 0){ |
|
237 | + while ($parent != 0) { |
|
238 | 238 | $rows_parent_tree = DB::query( |
239 | 239 | 'SELECT parent_id, title |
240 | - FROM ' . prefixTable('nested_tree') . ' |
|
240 | + FROM ' . prefixTable('nested_tree').' |
|
241 | 241 | WHERE id = %i', |
242 | 242 | $parent |
243 | 243 | ); |
@@ -324,7 +324,7 @@ discard block |
||
324 | 324 | // Prepare variables |
325 | 325 | $post_export_tag = filter_var($dataReceived['export_tag'], FILTER_SANITIZE_FULL_SPECIAL_CHARS); |
326 | 326 | if (empty($post_export_tag) === false) { |
327 | - DB::query('DELETE FROM ' . prefixTable('export') . ' WHERE export_tag = %s', $post_export_tag); |
|
327 | + DB::query('DELETE FROM '.prefixTable('export').' WHERE export_tag = %s', $post_export_tag); |
|
328 | 328 | } |
329 | 329 | break; |
330 | 330 | |
@@ -374,9 +374,9 @@ discard block |
||
374 | 374 | l.date as date, i.pw_iv as pw_iv, |
375 | 375 | n.renewal_period as renewal_period, |
376 | 376 | i.id_tree as tree_id |
377 | - FROM ' . prefixTable('items') . ' as i |
|
378 | - INNER JOIN ' . prefixTable('nested_tree') . ' as n ON (i.id_tree = n.id) |
|
379 | - INNER JOIN ' . prefixTable('log_items') . ' as l ON (i.id = l.id_item) |
|
377 | + FROM ' . prefixTable('items').' as i |
|
378 | + INNER JOIN ' . prefixTable('nested_tree').' as n ON (i.id_tree = n.id) |
|
379 | + INNER JOIN ' . prefixTable('log_items').' as l ON (i.id = l.id_item) |
|
380 | 380 | WHERE i.inactif = %i |
381 | 381 | AND i.id_tree= %i |
382 | 382 | AND (l.action = %s OR (l.action = %s AND l.raison LIKE %s)) |
@@ -402,8 +402,8 @@ discard block |
||
402 | 402 | // Run query |
403 | 403 | $dataItem = DB::queryFirstRow( |
404 | 404 | 'SELECT i.pw AS pw, s.share_key AS share_key |
405 | - FROM ' . prefixTable('items') . ' AS i |
|
406 | - INNER JOIN ' . prefixTable('sharekeys_items') . ' AS s ON (s.object_id = i.id) |
|
405 | + FROM ' . prefixTable('items').' AS i |
|
406 | + INNER JOIN ' . prefixTable('sharekeys_items').' AS s ON (s.object_id = i.id) |
|
407 | 407 | WHERE user_id = %i AND i.id = %i', |
408 | 408 | $session->get('user-id'), |
409 | 409 | $record['id'] |
@@ -427,8 +427,8 @@ discard block |
||
427 | 427 | $arr_kbs = ''; |
428 | 428 | $rows_kb = DB::query( |
429 | 429 | 'SELECT b.label, b.id |
430 | - FROM ' . prefixTable('kb_items') . ' AS a |
|
431 | - INNER JOIN ' . prefixTable('kb') . ' AS b ON (a.kb_id = b.id) |
|
430 | + FROM ' . prefixTable('kb_items').' AS a |
|
431 | + INNER JOIN ' . prefixTable('kb').' AS b ON (a.kb_id = b.id) |
|
432 | 432 | WHERE a.item_id = %i', |
433 | 433 | $record['id'] |
434 | 434 | ); |
@@ -436,7 +436,7 @@ discard block |
||
436 | 436 | if (empty($arr_kbs)) { |
437 | 437 | $arr_kbs = $rec_kb['label']; |
438 | 438 | } else { |
439 | - $arr_kbs .= ' | ' . $rec_kb['label']; |
|
439 | + $arr_kbs .= ' | '.$rec_kb['label']; |
|
440 | 440 | } |
441 | 441 | } |
442 | 442 | |
@@ -444,7 +444,7 @@ discard block |
||
444 | 444 | $arr_tags = ''; |
445 | 445 | $rows_tag = DB::query( |
446 | 446 | 'SELECT tag |
447 | - FROM ' . prefixTable('tags') . ' |
|
447 | + FROM ' . prefixTable('tags').' |
|
448 | 448 | WHERE item_id = %i', |
449 | 449 | $record['id'] |
450 | 450 | ); |
@@ -452,7 +452,7 @@ discard block |
||
452 | 452 | if (empty($arr_tags)) { |
453 | 453 | $arr_tags = $rec_tag['tag']; |
454 | 454 | } else { |
455 | - $arr_tags .= ' ' . $rec_tag['tag']; |
|
455 | + $arr_tags .= ' '.$rec_tag['tag']; |
|
456 | 456 | } |
457 | 457 | } |
458 | 458 | |
@@ -530,7 +530,7 @@ discard block |
||
530 | 530 | // query |
531 | 531 | $rows = DB::query( |
532 | 532 | 'SELECT * |
533 | - FROM ' . prefixTable('export') . ' |
|
533 | + FROM ' . prefixTable('export').' |
|
534 | 534 | WHERE export_tag = %s', |
535 | 535 | $dataReceived['export_tag'] |
536 | 536 | ); |
@@ -542,7 +542,7 @@ discard block |
||
542 | 542 | $prev_path = ''; |
543 | 543 | |
544 | 544 | //Prepare the PDF file |
545 | - include $SETTINGS['cpassman_dir'] . '/vendor/tecnickcom/tcpdf/tcpdf.php'; |
|
545 | + include $SETTINGS['cpassman_dir'].'/vendor/tecnickcom/tcpdf/tcpdf.php'; |
|
546 | 546 | |
547 | 547 | $pdf = new TCPDF(PDF_PAGE_ORIENTATION, PDF_UNIT, PDF_PAGE_FORMAT, true, 'UTF-8', false); |
548 | 548 | $pdf->SetProtection(array('print'), $dataReceived['pdf_password'], null); |
@@ -554,7 +554,7 @@ discard block |
||
554 | 554 | |
555 | 555 | // set default header data |
556 | 556 | $pdf->SetHeaderData( |
557 | - $SETTINGS['cpassman_dir'] . '/includes/images/teampass-logo2-home.png', |
|
557 | + $SETTINGS['cpassman_dir'].'/includes/images/teampass-logo2-home.png', |
|
558 | 558 | PDF_HEADER_LOGO_WIDTH, |
559 | 559 | 'Teampass export', |
560 | 560 | $session->get('user-lastname')." ".$session->get('user-name').' @ '.date($SETTINGS['date_format']." ".$SETTINGS['time_format'], (int) time()) |
@@ -664,7 +664,7 @@ discard block |
||
664 | 664 | logEvents($SETTINGS, 'pdf_export', '', (string) $session->get('user-id'), $session->get('user-login')); |
665 | 665 | |
666 | 666 | //clean table |
667 | - DB::query('TRUNCATE TABLE ' . prefixTable('export')); |
|
667 | + DB::query('TRUNCATE TABLE '.prefixTable('export')); |
|
668 | 668 | |
669 | 669 | // Clean any content of the output buffer |
670 | 670 | ob_end_clean(); |
@@ -702,13 +702,13 @@ discard block |
||
702 | 702 | // step 1: |
703 | 703 | // - prepare export file |
704 | 704 | // - get full list of objects id to export |
705 | - include $SETTINGS['cpassman_dir'] . '/includes/config/include.php'; |
|
705 | + include $SETTINGS['cpassman_dir'].'/includes/config/include.php'; |
|
706 | 706 | $idsList = array(); |
707 | 707 | |
708 | 708 | // query |
709 | 709 | $rows = DB::query( |
710 | 710 | 'SELECT * |
711 | - FROM ' . prefixTable('export') . ' |
|
711 | + FROM ' . prefixTable('export').' |
|
712 | 712 | WHERE export_tag = %s', |
713 | 713 | $inputData['export_tag'] |
714 | 714 | ); |
@@ -745,13 +745,13 @@ discard block |
||
745 | 745 | } |
746 | 746 | // prepare export file |
747 | 747 | //save the file |
748 | - $outstream = fopen($SETTINGS['path_to_files_folder'] . (substr($SETTINGS['path_to_files_folder'] , -1) === '/' ? '' : '/') . $inputData['filename'], 'w'); |
|
748 | + $outstream = fopen($SETTINGS['path_to_files_folder'].(substr($SETTINGS['path_to_files_folder'], -1) === '/' ? '' : '/').$inputData['filename'], 'w'); |
|
749 | 749 | if ($outstream === false) { |
750 | 750 | echo (string) prepareExchangedData( |
751 | 751 | [ |
752 | 752 | 'error' => true, |
753 | 753 | 'message' => $lang->get('error_while_creating_file'), |
754 | - 'detail' => $SETTINGS['path_to_files_folder'] . $inputData['filename'], |
|
754 | + 'detail' => $SETTINGS['path_to_files_folder'].$inputData['filename'], |
|
755 | 755 | ], |
756 | 756 | 'encode' |
757 | 757 | ); |
@@ -777,12 +777,12 @@ discard block |
||
777 | 777 | </style> |
778 | 778 | </head> |
779 | 779 | <body> |
780 | - <input type="hidden" id="generation_date" value="' . GibberishAES::enc(/** @scrutinizer ignore-type */ (string) time(), $inputData['password']) . '" /> |
|
780 | + <input type="hidden" id="generation_date" value="' . GibberishAES::enc(/** @scrutinizer ignore-type */ (string) time(), $inputData['password']).'" /> |
|
781 | 781 | <div id="header"> |
782 | - ' . TP_TOOL_NAME . ' - Off Line mode |
|
782 | + ' . TP_TOOL_NAME.' - Off Line mode |
|
783 | 783 | </div> |
784 | 784 | <div style="margin:10px; font-size:9px;"> |
785 | - <i>This page was generated by <b>' . $session->get('user-name') . ' ' . $session->get('user-lastname') . '</b>, the ' . date('Y/m/d H:i:s') . '.</i> |
|
785 | + <i>This page was generated by <b>' . $session->get('user-name').' '.$session->get('user-lastname').'</b>, the '.date('Y/m/d H:i:s').'.</i> |
|
786 | 786 | <span id="info_page" style="margin-left:20px; font-weight:bold; font-size: 14px; color:red;"></span> |
787 | 787 | </div> |
788 | 788 | <div id="information"></div> |
@@ -793,11 +793,11 @@ discard block |
||
793 | 793 | <div> |
794 | 794 | <table id="itemsTable"> |
795 | 795 | <thead><tr> |
796 | - <th style="width:15%;">' . $lang->get('label') . '</th> |
|
797 | - <th style="width:10%;">' . $lang->get('pw') . '</th> |
|
798 | - <th style="width:30%;">' . $lang->get('description') . '</th> |
|
799 | - <th style="width:5%;">' . $lang->get('user_login') . '</th> |
|
800 | - <th style="width:20%;">' . $lang->get('url') . '</th> |
|
796 | + <th style="width:15%;">' . $lang->get('label').'</th> |
|
797 | + <th style="width:10%;">' . $lang->get('pw').'</th> |
|
798 | + <th style="width:30%;">' . $lang->get('description').'</th> |
|
799 | + <th style="width:5%;">' . $lang->get('user_login').'</th> |
|
800 | + <th style="width:20%;">' . $lang->get('url').'</th> |
|
801 | 801 | </tr></thead> |
802 | 802 | <tbody id="itemsTable_tbody">' |
803 | 803 | ); |
@@ -811,8 +811,8 @@ discard block |
||
811 | 811 | 'loop' => true, |
812 | 812 | 'ids_list' => json_encode($idsList), |
813 | 813 | 'ids_count' => count($idsList), |
814 | - 'file_path' => $SETTINGS['path_to_files_folder'] . (substr($SETTINGS['path_to_files_folder'] , -1) === '/' ? '' : '/') . $inputData['filename'], |
|
815 | - 'file_link' => $SETTINGS['url_to_files_folder'] . (substr($SETTINGS['path_to_files_folder'] , -1) === '/' ? '' : '/') . $inputData['filename'], |
|
814 | + 'file_path' => $SETTINGS['path_to_files_folder'].(substr($SETTINGS['path_to_files_folder'], -1) === '/' ? '' : '/').$inputData['filename'], |
|
815 | + 'file_link' => $SETTINGS['url_to_files_folder'].(substr($SETTINGS['path_to_files_folder'], -1) === '/' ? '' : '/').$inputData['filename'], |
|
816 | 816 | 'export_tag' => $inputData['export_tag'], |
817 | 817 | ], |
818 | 818 | 'encode' |
@@ -851,12 +851,12 @@ discard block |
||
851 | 851 | $full_listing = array(); |
852 | 852 | $items_id_list = array(); |
853 | 853 | $outstream = ''; |
854 | - include $SETTINGS['cpassman_dir'] . '/includes/config/include.php'; |
|
854 | + include $SETTINGS['cpassman_dir'].'/includes/config/include.php'; |
|
855 | 855 | |
856 | 856 | // query |
857 | 857 | $rows = DB::query( |
858 | 858 | 'SELECT * |
859 | - FROM ' . prefixTable('export') . ' |
|
859 | + FROM ' . prefixTable('export').' |
|
860 | 860 | WHERE export_tag = %s AND item_id IN %ls', |
861 | 861 | $inputData['export_tag'], |
862 | 862 | $inputData['idsList'] |
@@ -870,7 +870,7 @@ discard block |
||
870 | 870 | [ |
871 | 871 | 'error' => true, |
872 | 872 | 'message' => $lang->get('error_while_creating_file'), |
873 | - 'detail' => $SETTINGS['path_to_files_folder'] . $inputData['filename'], |
|
873 | + 'detail' => $SETTINGS['path_to_files_folder'].$inputData['filename'], |
|
874 | 874 | ], |
875 | 875 | 'encode' |
876 | 876 | ); |
@@ -912,13 +912,13 @@ discard block |
||
912 | 912 | if (empty($arboHtml)) { |
913 | 913 | $arboHtml = $arboHtml_tmp; |
914 | 914 | } else { |
915 | - $arboHtml .= ' » ' . $arboHtml_tmp; |
|
915 | + $arboHtml .= ' » '.$arboHtml_tmp; |
|
916 | 916 | } |
917 | 917 | } |
918 | 918 | fputs( |
919 | 919 | $outstream, |
920 | 920 | ' |
921 | - <tr class="path"><td colspan="5">' . $arboHtml . '</td></tr>' |
|
921 | + <tr class="path"><td colspan="5">' . $arboHtml.'</td></tr>' |
|
922 | 922 | ); |
923 | 923 | $idTree = $record['folder_id']; |
924 | 924 | |
@@ -926,12 +926,12 @@ discard block |
||
926 | 926 | fputs( |
927 | 927 | $outstream, |
928 | 928 | ' |
929 | - <tr class="' . $lineType . '"> |
|
930 | - <td>' . addslashes($record['label']) . '</td> |
|
931 | - <td align="center"><span class="span_pw" id="span_' . $record['item_id'] . '"><a href="#" onclick="decryptme(' . $record['item_id'] . ', \'' . $encPw . '\');return false;">Decrypt </a></span><input type="hidden" id="hide_' . $record['item_id'] . '" value="' . $encPw . '" /></td> |
|
932 | - <td>' . (empty($record['description']) === true ? ' ' : addslashes(str_replace(array(';', '<br />'), array('|', "\n\r"), stripslashes(mb_convert_encoding($record['description'], 'ISO-8859-1', 'UTF-8'))))) . '</td> |
|
933 | - <td align="center">' . (empty($record['login']) === true ? ' ' : addslashes($record['login'])) . '</td> |
|
934 | - <td align="center">' . (empty($record['url']) === true ? ' ' : addslashes($record['url'])) . '</td> |
|
929 | + <tr class="' . $lineType.'"> |
|
930 | + <td>' . addslashes($record['label']).'</td> |
|
931 | + <td align="center"><span class="span_pw" id="span_' . $record['item_id'].'"><a href="#" onclick="decryptme('.$record['item_id'].', \''.$encPw.'\');return false;">Decrypt </a></span><input type="hidden" id="hide_'.$record['item_id'].'" value="'.$encPw.'" /></td> |
|
932 | + <td>' . (empty($record['description']) === true ? ' ' : addslashes(str_replace(array(';', '<br />'), array('|', "\n\r"), stripslashes(mb_convert_encoding($record['description'], 'ISO-8859-1', 'UTF-8'))))).'</td> |
|
933 | + <td align="center">' . (empty($record['login']) === true ? ' ' : addslashes($record['login'])).'</td> |
|
934 | + <td align="center">' . (empty($record['url']) === true ? ' ' : addslashes($record['url'])).'</td> |
|
935 | 935 | </tr>' |
936 | 936 | ); |
937 | 937 | } |
@@ -980,7 +980,7 @@ discard block |
||
980 | 980 | $inputData['password'] = (string) filter_var($dataReceived['password'], FILTER_SANITIZE_FULL_SPECIAL_CHARS); |
981 | 981 | |
982 | 982 | // Load includes |
983 | - include $SETTINGS['cpassman_dir'] . '/includes/config/include.php'; |
|
983 | + include $SETTINGS['cpassman_dir'].'/includes/config/include.php'; |
|
984 | 984 | |
985 | 985 | // read the content of the temporary file |
986 | 986 | $handle = fopen($inputData['filename'].'.txt', 'r'); |
@@ -989,7 +989,7 @@ discard block |
||
989 | 989 | [ |
990 | 990 | 'error' => true, |
991 | 991 | 'message' => $lang->get('error_while_creating_file'), |
992 | - 'detail' => $SETTINGS['path_to_files_folder'] . $inputData['filename'], |
|
992 | + 'detail' => $SETTINGS['path_to_files_folder'].$inputData['filename'], |
|
993 | 993 | ], |
994 | 994 | 'encode' |
995 | 995 | ); |
@@ -1001,7 +1001,7 @@ discard block |
||
1001 | 1001 | [ |
1002 | 1002 | 'error' => true, |
1003 | 1003 | 'message' => $lang->get('error_while_creating_file'), |
1004 | - 'detail' => $SETTINGS['path_to_files_folder'] . $inputData['filename'], |
|
1004 | + 'detail' => $SETTINGS['path_to_files_folder'].$inputData['filename'], |
|
1005 | 1005 | ], |
1006 | 1006 | 'encode' |
1007 | 1007 | ); |
@@ -1017,9 +1017,9 @@ discard block |
||
1017 | 1017 | $chunks = explode('|#|#|', chunk_split($contents, 10000, '|#|#|')); |
1018 | 1018 | foreach ($chunks as $chunk) { |
1019 | 1019 | if (empty($encrypted_text) === true) { |
1020 | - $encrypted_text = GibberishAES::enc(/** @scrutinizer ignore-type */ $chunk, $inputData['password'] ); |
|
1020 | + $encrypted_text = GibberishAES::enc(/** @scrutinizer ignore-type */ $chunk, $inputData['password']); |
|
1021 | 1021 | } else { |
1022 | - $encrypted_text .= '|#|#|' . GibberishAES::enc(/** @scrutinizer ignore-type */ $chunk, $inputData['password'] ); |
|
1022 | + $encrypted_text .= '|#|#|'.GibberishAES::enc(/** @scrutinizer ignore-type */ $chunk, $inputData['password']); |
|
1023 | 1023 | } |
1024 | 1024 | } |
1025 | 1025 | |
@@ -1030,7 +1030,7 @@ discard block |
||
1030 | 1030 | [ |
1031 | 1031 | 'error' => true, |
1032 | 1032 | 'message' => $lang->get('error_while_creating_file'), |
1033 | - 'detail' => $SETTINGS['path_to_files_folder'] . $inputData['filename'], |
|
1033 | + 'detail' => $SETTINGS['path_to_files_folder'].$inputData['filename'], |
|
1034 | 1034 | ], |
1035 | 1035 | 'encode' |
1036 | 1036 | ); |
@@ -1043,9 +1043,9 @@ discard block |
||
1043 | 1043 | </table></div> |
1044 | 1044 | <input type="button" value="Hide all" onclick="hideAll()" /> |
1045 | 1045 | <div id="footer" style="text-align:center;"> |
1046 | - <a href="https://teampass.net/about/" target="_blank">' . TP_TOOL_NAME . ' ' . TP_VERSION . ' ' . TP_COPYRIGHT . '</a> |
|
1046 | + <a href="https://teampass.net/about/" target="_blank">' . TP_TOOL_NAME.' '.TP_VERSION.' '.TP_COPYRIGHT.'</a> |
|
1047 | 1047 | </div> |
1048 | - <div id="enc_html" style="display:none;">' . $encrypted_text . '</div> |
|
1048 | + <div id="enc_html" style="display:none;">' . $encrypted_text.'</div> |
|
1049 | 1049 | </body> |
1050 | 1050 | </html> |
1051 | 1051 | <script type="text/javascript"> |
@@ -1148,12 +1148,12 @@ discard block |
||
1148 | 1148 | fclose($outstream); |
1149 | 1149 | |
1150 | 1150 | //clean table |
1151 | - DB::query('TRUNCATE TABLE ' . prefixTable('export')); |
|
1151 | + DB::query('TRUNCATE TABLE '.prefixTable('export')); |
|
1152 | 1152 | |
1153 | 1153 | echo (string) prepareExchangedData( |
1154 | 1154 | [ |
1155 | 1155 | 'error' => false, |
1156 | - 'filelink' => $inputData['file_link'] , |
|
1156 | + 'filelink' => $inputData['file_link'], |
|
1157 | 1157 | ], |
1158 | 1158 | 'encode' |
1159 | 1159 | ); |