@@ -73,7 +73,7 @@ discard block |
||
73 | 73 | csrfProtector::init(); |
74 | 74 | |
75 | 75 | // Load functions |
76 | -require_once __DIR__. '/includes/config/include.php'; |
|
76 | +require_once __DIR__.'/includes/config/include.php'; |
|
77 | 77 | require_once __DIR__.'/sources/main.functions.php'; |
78 | 78 | |
79 | 79 | // init |
@@ -107,7 +107,7 @@ discard block |
||
107 | 107 | $SETTINGS = $antiXss->xss_clean($SETTINGS); |
108 | 108 | |
109 | 109 | // Load Core library |
110 | -require_once $SETTINGS['cpassman_dir'] . '/sources/core.php'; |
|
110 | +require_once $SETTINGS['cpassman_dir'].'/sources/core.php'; |
|
111 | 111 | // Prepare POST variables |
112 | 112 | $post_language = filter_input(INPUT_POST, 'language', FILTER_SANITIZE_FULL_SPECIAL_CHARS); |
113 | 113 | $session_user_language = $session->get('user-language'); |
@@ -146,8 +146,8 @@ discard block |
||
146 | 146 | //get default language |
147 | 147 | $dataLanguage = DB::queryFirstRow( |
148 | 148 | 'SELECT m.valeur AS valeur, l.flag AS flag |
149 | - FROM ' . prefixTable('misc') . ' AS m |
|
150 | - INNER JOIN ' . prefixTable('languages') . ' AS l ON (m.valeur = l.name) |
|
149 | + FROM ' . prefixTable('misc').' AS m |
|
150 | + INNER JOIN ' . prefixTable('languages').' AS l ON (m.valeur = l.name) |
|
151 | 151 | WHERE m.type=%s_type AND m.intitule=%s_intitule', |
152 | 152 | [ |
153 | 153 | 'type' => 'admin', |
@@ -178,7 +178,7 @@ discard block |
||
178 | 178 | $session_user_language = $SETTINGS['default_language']; |
179 | 179 | } |
180 | 180 | } |
181 | -$lang = new Language($session_user_language, __DIR__. '/includes/language/'); |
|
181 | +$lang = new Language($session_user_language, __DIR__.'/includes/language/'); |
|
182 | 182 | |
183 | 183 | if (isset($SETTINGS['cpassman_dir']) === false || $SETTINGS['cpassman_dir'] === '') { |
184 | 184 | $SETTINGS['cpassman_dir'] = __DIR__; |
@@ -269,12 +269,12 @@ discard block |
||
269 | 269 | <!-- Toastr --> |
270 | 270 | <link rel="stylesheet" href="plugins/toastr/toastr.min.css?v=<?php echo TP_VERSION; ?>" /> |
271 | 271 | <!-- favicon --> |
272 | - <link rel="shortcut icon" type="image/png" href="<?php echo $favicon;?>"/> |
|
272 | + <link rel="shortcut icon" type="image/png" href="<?php echo $favicon; ?>"/> |
|
273 | 273 | <!-- manifest (PWA) --> |
274 | 274 | <link rel="manifest" href="includes/manifest.json?v=<?php echo TP_VERSION; ?>"> |
275 | 275 | <!-- Custom style --> |
276 | 276 | <?php |
277 | - if (file_exists(__DIR__ . '/includes/css/custom.css') === true) {?> |
|
277 | + if (file_exists(__DIR__.'/includes/css/custom.css') === true) {?> |
|
278 | 278 | <link rel="stylesheet" href="includes/css/custom.css?v=<?php echo TP_VERSION; ?>"> |
279 | 279 | <?php |
280 | 280 | } ?> |
@@ -323,7 +323,7 @@ discard block |
||
323 | 323 | <div class="dropdown show"> |
324 | 324 | <a class="btn btn-primary dropdown-toggle" href="#" data-toggle="dropdown"> |
325 | 325 | <?php |
326 | - echo $session_name . ' ' . $session_lastname; ?> |
|
326 | + echo $session_name.' '.$session_lastname; ?> |
|
327 | 327 | </a> |
328 | 328 | |
329 | 329 | <div class="dropdown-menu dropdown-menu-right"> |
@@ -347,7 +347,7 @@ discard block |
||
347 | 347 | </a> |
348 | 348 | <?php |
349 | 349 | } ?> |
350 | - <a class="dropdown-item user-menu<?php echo (int) $session_user_admin === 1 ? ' hidden' : '';?>" href="#" data-name="generate-new_keys"> |
|
350 | + <a class="dropdown-item user-menu<?php echo (int) $session_user_admin === 1 ? ' hidden' : ''; ?>" href="#" data-name="generate-new_keys"> |
|
351 | 351 | <i class="fa-solid fa-spray-can-sparkles fa-fw mr-2"></i><?php echo $lang->get('generate_new_keys'); ?> |
352 | 352 | </a> |
353 | 353 | |
@@ -381,7 +381,7 @@ discard block |
||
381 | 381 | <!-- Main Sidebar Container --> |
382 | 382 | <aside class="main-sidebar sidebar-dark-primary elevation-4"> |
383 | 383 | <!-- Brand Logo --> |
384 | - <a href="<?php echo $cpassman_url . '/index.php?page=' . ((int) $session_user_admin === 1 ? 'admin' : 'items'); ?>" class="brand-link"> |
|
384 | + <a href="<?php echo $cpassman_url.'/index.php?page='.((int) $session_user_admin === 1 ? 'admin' : 'items'); ?>" class="brand-link"> |
|
385 | 385 | <img src="includes/images/teampass-logo2-home.png" alt="Teampass Logo" class="brand-image"> |
386 | 386 | <span class="brand-text font-weight-light"><?php echo TP_TOOL_NAME; ?></span> |
387 | 387 | </a> |
@@ -399,20 +399,20 @@ discard block |
||
399 | 399 | <a href="#" data-name="items" class="nav-link', $get['page'] === 'items' ? ' active' : '', '"> |
400 | 400 | <i class="nav-icon fa-solid fa-key"></i> |
401 | 401 | <p> |
402 | - ' . $lang->get('pw') . ' |
|
402 | + ' . $lang->get('pw').' |
|
403 | 403 | </p> |
404 | 404 | </a> |
405 | 405 | </li>'; |
406 | 406 | } |
407 | 407 | |
408 | 408 | // IMPORT menu |
409 | - if (isset($SETTINGS['allow_import']) === true && (int) $SETTINGS['allow_import'] === 1&& $session_user_admin === 0) { |
|
409 | + if (isset($SETTINGS['allow_import']) === true && (int) $SETTINGS['allow_import'] === 1 && $session_user_admin === 0) { |
|
410 | 410 | echo ' |
411 | 411 | <li class="nav-item"> |
412 | 412 | <a href="#" data-name="import" class="nav-link', $get['page'] === 'import' ? ' active' : '', '"> |
413 | 413 | <i class="nav-icon fa-solid fa-file-import"></i> |
414 | 414 | <p> |
415 | - ' . $lang->get('import') . ' |
|
415 | + ' . $lang->get('import').' |
|
416 | 416 | </p> |
417 | 417 | </a> |
418 | 418 | </li>'; |
@@ -433,7 +433,7 @@ discard block |
||
433 | 433 | <a href="#" data-name="export" class="nav-link', $get['page'] === 'export' ? ' active' : '', '"> |
434 | 434 | <i class="nav-icon fa-solid fa-file-export"></i> |
435 | 435 | <p> |
436 | - ' . $lang->get('export') . ' |
|
436 | + ' . $lang->get('export').' |
|
437 | 437 | </p> |
438 | 438 | </a> |
439 | 439 | </li>'; |
@@ -460,7 +460,7 @@ discard block |
||
460 | 460 | <a href="#" data-name="search" class="nav-link', $get['page'] === 'search' ? ' active' : '', '"> |
461 | 461 | <i class="nav-icon fa-solid fa-search"></i> |
462 | 462 | <p> |
463 | - ' . $lang->get('find') . ' |
|
463 | + ' . $lang->get('find').' |
|
464 | 464 | </p> |
465 | 465 | </a> |
466 | 466 | </li>'; |
@@ -476,7 +476,7 @@ discard block |
||
476 | 476 | <a href="#" data-name="favourites" class="nav-link', $get['page'] === 'favourites' ? ' active' : '', '"> |
477 | 477 | <i class="nav-icon fa-solid fa-star"></i> |
478 | 478 | <p> |
479 | - ' . $lang->get('favorites') . ' |
|
479 | + ' . $lang->get('favorites').' |
|
480 | 480 | </p> |
481 | 481 | </a> |
482 | 482 | </li>'; |
@@ -506,7 +506,7 @@ discard block |
||
506 | 506 | <a href="#" data-name="suggestion" class="nav-link', $get['page'] === 'suggestion' ? ' active' : '', '"> |
507 | 507 | <i class="nav-icon fa-solid fa-lightbulb"></i> |
508 | 508 | <p> |
509 | - ' . $lang->get('suggestion_menu') . ' |
|
509 | + ' . $lang->get('suggestion_menu').' |
|
510 | 510 | </p> |
511 | 511 | </a> |
512 | 512 | </li>'; |
@@ -519,7 +519,7 @@ discard block |
||
519 | 519 | <a href="#" data-name="admin" class="nav-link', $get['page'] === 'admin' ? ' active' : '', '"> |
520 | 520 | <i class="nav-icon fa-solid fa-info"></i> |
521 | 521 | <p> |
522 | - ' . $lang->get('admin_main') . ' |
|
522 | + ' . $lang->get('admin_main').' |
|
523 | 523 | </p> |
524 | 524 | </a> |
525 | 525 | </li> |
@@ -527,7 +527,7 @@ discard block |
||
527 | 527 | <a href="#" class="nav-link"> |
528 | 528 | <i class="nav-icon fa-solid fa-wrench"></i> |
529 | 529 | <p> |
530 | - ' . $lang->get('admin_settings') . ' |
|
530 | + ' . $lang->get('admin_settings').' |
|
531 | 531 | <i class="fa-solid fa-angle-left right"></i> |
532 | 532 | </p> |
533 | 533 | </a> |
@@ -535,63 +535,63 @@ discard block |
||
535 | 535 | <li class="nav-item"> |
536 | 536 | <a href="#" data-name="options" class="nav-link', $get['page'] === 'options' ? ' active' : '', '"> |
537 | 537 | <i class="fa-solid fa-check-double nav-icon"></i> |
538 | - <p>' . $lang->get('options') . '</p> |
|
538 | + <p>' . $lang->get('options').'</p> |
|
539 | 539 | </a> |
540 | 540 | </li> |
541 | 541 | <li class="nav-item"> |
542 | 542 | <a href="#" data-name="2fa" class="nav-link', $get['page'] === '2fa' ? ' active' : '', '"> |
543 | 543 | <i class="fa-solid fa-qrcode nav-icon"></i> |
544 | - <p>' . $lang->get('mfa_short') . '</p> |
|
544 | + <p>' . $lang->get('mfa_short').'</p> |
|
545 | 545 | </a> |
546 | 546 | </li> |
547 | 547 | <li class="nav-item"> |
548 | 548 | <a href="#" data-name="api" class="nav-link', $get['page'] === 'api' ? ' active' : '', '"> |
549 | 549 | <i class="fa-solid fa-cubes nav-icon"></i> |
550 | - <p>' . $lang->get('api') . '</p> |
|
550 | + <p>' . $lang->get('api').'</p> |
|
551 | 551 | </a> |
552 | 552 | </li> |
553 | 553 | <li class="nav-item"> |
554 | 554 | <a href="#" data-name="backups" class="nav-link', $get['page'] === 'backups' ? ' active' : '', '"> |
555 | 555 | <i class="fa-solid fa-database nav-icon"></i> |
556 | - <p>' . $lang->get('backups') . '</p> |
|
556 | + <p>' . $lang->get('backups').'</p> |
|
557 | 557 | </a> |
558 | 558 | </li> |
559 | 559 | <li class="nav-item"> |
560 | 560 | <a href="#" data-name="emails" class="nav-link', $get['page'] === 'emails' ? ' active' : '', '"> |
561 | 561 | <i class="fa-solid fa-envelope nav-icon"></i> |
562 | - <p>' . $lang->get('emails') . '</p> |
|
562 | + <p>' . $lang->get('emails').'</p> |
|
563 | 563 | </a> |
564 | 564 | </li> |
565 | 565 | <li class="nav-item"> |
566 | 566 | <a href="#" data-name="fields" class="nav-link', $get['page'] === 'fields' ? ' active' : '', '"> |
567 | 567 | <i class="fa-solid fa-keyboard nav-icon"></i> |
568 | - <p>' . $lang->get('fields') . '</p> |
|
568 | + <p>' . $lang->get('fields').'</p> |
|
569 | 569 | </a> |
570 | 570 | </li> |
571 | 571 | <li class="nav-item"> |
572 | 572 | <a href="#" data-name="ldap" class="nav-link', $get['page'] === 'ldap' ? ' active' : '', '"> |
573 | 573 | <i class="fa-solid fa-id-card nav-icon"></i> |
574 | - <p>' . $lang->get('ldap') . '</p> |
|
574 | + <p>' . $lang->get('ldap').'</p> |
|
575 | 575 | </a> |
576 | 576 | </li> |
577 | 577 | |
578 | 578 | <li class="nav-item"> |
579 | 579 | <a href="#" data-name="oauth" class="nav-link', $get['page'] === 'oauth' ? ' active' : '', '"> |
580 | 580 | <i class="fa-solid fa-plug nav-icon"></i> |
581 | - <p>' . $lang->get('oauth') . '</p> |
|
581 | + <p>' . $lang->get('oauth').'</p> |
|
582 | 582 | </a> |
583 | 583 | </li> |
584 | 584 | |
585 | 585 | <li class="nav-item"> |
586 | 586 | <a href="#" data-name="uploads" class="nav-link', $get['page'] === 'uploads' ? ' active' : '', '"> |
587 | 587 | <i class="fa-solid fa-file-upload nav-icon"></i> |
588 | - <p>' . $lang->get('uploads') . '</p> |
|
588 | + <p>' . $lang->get('uploads').'</p> |
|
589 | 589 | </a> |
590 | 590 | </li> |
591 | 591 | <li class="nav-item"> |
592 | 592 | <a href="#" data-name="statistics" class="nav-link', $get['page'] === 'statistics' ? ' active' : '', '"> |
593 | 593 | <i class="fa-solid fa-chart-bar nav-icon"></i> |
594 | - <p>' . $lang->get('statistics') . '</p> |
|
594 | + <p>' . $lang->get('statistics').'</p> |
|
595 | 595 | </a> |
596 | 596 | </li> |
597 | 597 | </ul> |
@@ -602,7 +602,7 @@ discard block |
||
602 | 602 | <li class="nav-item"> |
603 | 603 | <a href="#" data-name="tasks" class="nav-link', $get['page'] === 'tasks' ? ' active' : '', '"> |
604 | 604 | <i class="fa-solid fa-tasks nav-icon"></i> |
605 | - <p>' . $lang->get('tasks') . '</p> |
|
605 | + <p>' . $lang->get('tasks').'</p> |
|
606 | 606 | </a> |
607 | 607 | </li>'; |
608 | 608 | } |
@@ -613,7 +613,7 @@ discard block |
||
613 | 613 | <a href="#" data-name="tools" class="nav-link', $get['page'] === 'tools' ? ' active' : '', '"> |
614 | 614 | <i class="nav-icon fa-solid fa-screwdriver-wrench"></i> |
615 | 615 | <p> |
616 | - ' . $lang->get('tools') . ' |
|
616 | + ' . $lang->get('tools').' |
|
617 | 617 | </p> |
618 | 618 | </a> |
619 | 619 | </li>'; |
@@ -630,7 +630,7 @@ discard block |
||
630 | 630 | <a href="#" data-name="folders" class="nav-link', $get['page'] === 'folders' ? ' active' : '', '"> |
631 | 631 | <i class="nav-icon fa-solid fa-folder-open"></i> |
632 | 632 | <p> |
633 | - ' . $lang->get('folders') . ' |
|
633 | + ' . $lang->get('folders').' |
|
634 | 634 | </p> |
635 | 635 | </a> |
636 | 636 | </li> |
@@ -638,7 +638,7 @@ discard block |
||
638 | 638 | <a href="#" data-name="roles" class="nav-link', $get['page'] === 'roles' ? ' active' : '', '"> |
639 | 639 | <i class="nav-icon fa-solid fa-graduation-cap"></i> |
640 | 640 | <p> |
641 | - ' . $lang->get('roles') . ' |
|
641 | + ' . $lang->get('roles').' |
|
642 | 642 | </p> |
643 | 643 | </a> |
644 | 644 | </li> |
@@ -646,38 +646,38 @@ discard block |
||
646 | 646 | <a href="#" data-name="users" class="nav-link', $get['page'] === 'users' ? ' active' : '', '"> |
647 | 647 | <i class="nav-icon fa-solid fa-users"></i> |
648 | 648 | <p> |
649 | - ' . $lang->get('users') . ' |
|
649 | + ' . $lang->get('users').' |
|
650 | 650 | </p> |
651 | 651 | </a> |
652 | 652 | </li> |
653 | 653 | <li class="nav-item has-treeview', $menuUtilities === true ? ' menu-open' : '', '"> |
654 | 654 | <a href="#" class="nav-link"> |
655 | 655 | <i class="nav-icon fa-solid fa-cubes"></i> |
656 | - <p>' . $lang->get('admin_views') . '<i class="fa-solid fa-angle-left right"></i></p> |
|
656 | + <p>' . $lang->get('admin_views').'<i class="fa-solid fa-angle-left right"></i></p> |
|
657 | 657 | </a> |
658 | 658 | <ul class="nav nav-treeview"> |
659 | 659 | <li class="nav-item"> |
660 | 660 | <a href="#" data-name="utilities.renewal" class="nav-link', $get['page'] === 'utilities.renewal' ? ' active' : '', '"> |
661 | 661 | <i class="far fa-calendar-alt nav-icon"></i> |
662 | - <p>' . $lang->get('renewal') . '</p> |
|
662 | + <p>' . $lang->get('renewal').'</p> |
|
663 | 663 | </a> |
664 | 664 | </li> |
665 | 665 | <li class="nav-item"> |
666 | 666 | <a href="#" data-name="utilities.deletion" class="nav-link', $get['page'] === 'utilities.deletion' ? ' active' : '', '"> |
667 | 667 | <i class="fa-solid fa-trash-alt nav-icon"></i> |
668 | - <p>' . $lang->get('deletion') . '</p> |
|
668 | + <p>' . $lang->get('deletion').'</p> |
|
669 | 669 | </a> |
670 | 670 | </li> |
671 | 671 | <li class="nav-item"> |
672 | 672 | <a href="#" data-name="utilities.logs" class="nav-link', $get['page'] === 'utilities.logs' ? ' active' : '', '"> |
673 | 673 | <i class="fa-solid fa-history nav-icon"></i> |
674 | - <p>' . $lang->get('logs') . '</p> |
|
674 | + <p>' . $lang->get('logs').'</p> |
|
675 | 675 | </a> |
676 | 676 | </li> |
677 | 677 | <li class="nav-item"> |
678 | 678 | <a href="#" data-name="utilities.database" class="nav-link', $get['page'] === 'utilities.database' ? ' active' : '', '"> |
679 | 679 | <i class="fa-solid fa-database nav-icon"></i> |
680 | - <p>' . $lang->get('database') . '</p> |
|
680 | + <p>' . $lang->get('database').'</p> |
|
681 | 681 | </a> |
682 | 682 | </li> |
683 | 683 | </ul> |
@@ -688,10 +688,10 @@ discard block |
||
688 | 688 | <!-- /.sidebar-menu --> |
689 | 689 | <div class="menu-footer"> |
690 | 690 | <div class="" id="sidebar-footer"> |
691 | - <i class="fa-solid fa-clock-o mr-2 infotip text-info pointer" title="<?php echo $lang->get('server_time') . ' ' . |
|
692 | - date($date_format, (int) $server['request_time']) . ' - ' . |
|
691 | + <i class="fa-solid fa-clock-o mr-2 infotip text-info pointer" title="<?php echo $lang->get('server_time').' '. |
|
692 | + date($date_format, (int) $server['request_time']).' - '. |
|
693 | 693 | date($time_format, (int) $server['request_time']); ?>"></i> |
694 | - <i class="fa-solid fa-users mr-2 infotip text-info pointer" title="<?php echo $session_nb_users_online . ' ' . $lang->get('users_online'); ?>"></i> |
|
694 | + <i class="fa-solid fa-users mr-2 infotip text-info pointer" title="<?php echo $session_nb_users_online.' '.$lang->get('users_online'); ?>"></i> |
|
695 | 695 | <a href="<?php echo DOCUMENTATION_URL; ?>" target="_blank" class="text-info"><i class="fa-solid fa-book mr-2 infotip" title="<?php echo $lang->get('documentation_canal'); ?>"></i></a> |
696 | 696 | <a href="<?php echo HELP_URL; ?>" target="_blank" class="text-info"><i class="fa-solid fa-life-ring mr-2 infotip" title="<?php echo $lang->get('admin_help'); ?>"></i></a> |
697 | 697 | <?php if ($session_user_admin === 1) : ?><i class="fa-solid fa-bug infotip pointer text-info" title="<?php echo $lang->get('bugs_page'); ?>" onclick="generateBugReport()"></i><?php endif; ?> |
@@ -840,7 +840,7 @@ discard block |
||
840 | 840 | </div> |
841 | 841 | <div class="mt-3"> |
842 | 842 | <label> |
843 | - <span class="mr-2 pointer fw-normal"><i class="fa-solid fa-eye mr-2 text-orange"></i><?php echo $lang->get('show_user_password');?></span> |
|
843 | + <span class="mr-2 pointer fw-normal"><i class="fa-solid fa-eye mr-2 text-orange"></i><?php echo $lang->get('show_user_password'); ?></span> |
|
844 | 844 | <input type="checkbox" id="dialog-admin-change-user-password-do-show-password" class="pointer"> |
845 | 845 | </label> |
846 | 846 | </div> |
@@ -999,34 +999,34 @@ discard block |
||
999 | 999 | if ($get['page'] === 'items') { |
1000 | 1000 | // SHow page with Items |
1001 | 1001 | if ((int) $session_user_admin !== 1) { |
1002 | - include $SETTINGS['cpassman_dir'] . '/pages/items.php'; |
|
1002 | + include $SETTINGS['cpassman_dir'].'/pages/items.php'; |
|
1003 | 1003 | } elseif ((int) $session_user_admin === 1) { |
1004 | - include $SETTINGS['cpassman_dir'] . '/pages/admin.php'; |
|
1004 | + include $SETTINGS['cpassman_dir'].'/pages/admin.php'; |
|
1005 | 1005 | } else { |
1006 | 1006 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
1007 | 1007 | //not allowed page |
1008 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
1008 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
1009 | 1009 | } |
1010 | 1010 | } elseif (in_array($get['page'], array_keys($mngPages)) === true) { |
1011 | 1011 | // Define if user is allowed to see management pages |
1012 | 1012 | if ($session_user_admin === 1) { |
1013 | 1013 | // deepcode ignore FileInclusion: $get['page'] is secured through usage of array_keys test bellow |
1014 | - include $SETTINGS['cpassman_dir'] . '/pages/' . basename($mngPages[$get['page']]); |
|
1014 | + include $SETTINGS['cpassman_dir'].'/pages/'.basename($mngPages[$get['page']]); |
|
1015 | 1015 | } elseif ($session_user_manager === 1 || $session_user_human_resources === 1) { |
1016 | 1016 | if ($get['page'] === 'manage_main' || $get['page'] === 'manage_settings' |
1017 | 1017 | ) { |
1018 | 1018 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
1019 | 1019 | //not allowed page |
1020 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
1020 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
1021 | 1021 | } |
1022 | 1022 | } else { |
1023 | 1023 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
1024 | 1024 | //not allowed page |
1025 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
1025 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
1026 | 1026 | } |
1027 | - } elseif (empty($get['page']) === false && file_exists($SETTINGS['cpassman_dir'] . '/pages/' . $get['page'] . '.php') === true) { |
|
1027 | + } elseif (empty($get['page']) === false && file_exists($SETTINGS['cpassman_dir'].'/pages/'.$get['page'].'.php') === true) { |
|
1028 | 1028 | // deepcode ignore FileInclusion: $get['page'] is tested against file_exists just below |
1029 | - include $SETTINGS['cpassman_dir'] . '/pages/' . basename($get['page'] . '.php'); |
|
1029 | + include $SETTINGS['cpassman_dir'].'/pages/'.basename($get['page'].'.php'); |
|
1030 | 1030 | } else { |
1031 | 1031 | $session->set('system-array_roles', ERR_NOT_EXIST); |
1032 | 1032 | //page doesn't exist |
@@ -1076,7 +1076,7 @@ discard block |
||
1076 | 1076 | echo ' |
1077 | 1077 | <input type="hidden" id="temps_restant" value="', $session->get('user-session_duration') ?? '', '" />'; |
1078 | 1078 | // display an item in the context of OTV link |
1079 | -} elseif ((null === $session->get('user-validite_pw')|| empty($session->get('user-validite_pw')) === true || empty($session->get('user-id')) === true) |
|
1079 | +} elseif ((null === $session->get('user-validite_pw') || empty($session->get('user-validite_pw')) === true || empty($session->get('user-id')) === true) |
|
1080 | 1080 | && empty($get['otv']) === false |
1081 | 1081 | ) { |
1082 | 1082 | // case where one-shot viewer |
@@ -1095,7 +1095,7 @@ discard block |
||
1095 | 1095 | FILTER_SANITIZE_URL |
1096 | 1096 | ) |
1097 | 1097 | ); |
1098 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
1098 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
1099 | 1099 | } |
1100 | 1100 | } elseif (//(empty($session->get('user-id')) === false && $session->get('user-id') !== null) || |
1101 | 1101 | empty($session->get('user-id')) === true |
@@ -1127,7 +1127,7 @@ discard block |
||
1127 | 1127 | } |
1128 | 1128 | |
1129 | 1129 | // LOGIN form |
1130 | - include $SETTINGS['cpassman_dir'] . '/includes/core/login.php'; |
|
1130 | + include $SETTINGS['cpassman_dir'].'/includes/core/login.php'; |
|
1131 | 1131 | |
1132 | 1132 | } else { |
1133 | 1133 | // Clear session |
@@ -1398,65 +1398,65 @@ discard block |
||
1398 | 1398 | |
1399 | 1399 | // Load links, css and javascripts |
1400 | 1400 | if (isset($SETTINGS['cpassman_dir']) === true) { |
1401 | - include_once $SETTINGS['cpassman_dir'] . '/includes/core/load.js.php'; |
|
1401 | + include_once $SETTINGS['cpassman_dir'].'/includes/core/load.js.php'; |
|
1402 | 1402 | if ($menuAdmin === true) { |
1403 | - include_once $SETTINGS['cpassman_dir'] . '/pages/admin.js.php'; |
|
1403 | + include_once $SETTINGS['cpassman_dir'].'/pages/admin.js.php'; |
|
1404 | 1404 | if ($get['page'] === '2fa') { |
1405 | - include_once $SETTINGS['cpassman_dir'] . '/pages/2fa.js.php'; |
|
1405 | + include_once $SETTINGS['cpassman_dir'].'/pages/2fa.js.php'; |
|
1406 | 1406 | } elseif ($get['page'] === 'api') { |
1407 | - include_once $SETTINGS['cpassman_dir'] . '/pages/api.js.php'; |
|
1407 | + include_once $SETTINGS['cpassman_dir'].'/pages/api.js.php'; |
|
1408 | 1408 | } elseif ($get['page'] === 'backups') { |
1409 | - include_once $SETTINGS['cpassman_dir'] . '/pages/backups.js.php'; |
|
1409 | + include_once $SETTINGS['cpassman_dir'].'/pages/backups.js.php'; |
|
1410 | 1410 | } elseif ($get['page'] === 'emails') { |
1411 | - include_once $SETTINGS['cpassman_dir'] . '/pages/emails.js.php'; |
|
1411 | + include_once $SETTINGS['cpassman_dir'].'/pages/emails.js.php'; |
|
1412 | 1412 | } elseif ($get['page'] === 'ldap') { |
1413 | - include_once $SETTINGS['cpassman_dir'] . '/pages/ldap.js.php'; |
|
1413 | + include_once $SETTINGS['cpassman_dir'].'/pages/ldap.js.php'; |
|
1414 | 1414 | } elseif ($get['page'] === 'uploads') { |
1415 | - include_once $SETTINGS['cpassman_dir'] . '/pages/uploads.js.php'; |
|
1415 | + include_once $SETTINGS['cpassman_dir'].'/pages/uploads.js.php'; |
|
1416 | 1416 | } elseif ($get['page'] === 'fields') { |
1417 | - include_once $SETTINGS['cpassman_dir'] . '/pages/fields.js.php'; |
|
1417 | + include_once $SETTINGS['cpassman_dir'].'/pages/fields.js.php'; |
|
1418 | 1418 | } elseif ($get['page'] === 'options') { |
1419 | - include_once $SETTINGS['cpassman_dir'] . '/pages/options.js.php'; |
|
1419 | + include_once $SETTINGS['cpassman_dir'].'/pages/options.js.php'; |
|
1420 | 1420 | } elseif ($get['page'] === 'statistics') { |
1421 | - include_once $SETTINGS['cpassman_dir'] . '/pages/statistics.js.php'; |
|
1421 | + include_once $SETTINGS['cpassman_dir'].'/pages/statistics.js.php'; |
|
1422 | 1422 | } elseif ($get['page'] === 'tasks') { |
1423 | - include_once $SETTINGS['cpassman_dir'] . '/pages/tasks.js.php'; |
|
1423 | + include_once $SETTINGS['cpassman_dir'].'/pages/tasks.js.php'; |
|
1424 | 1424 | } elseif ($get['page'] === 'oauth' && WIP === true) { |
1425 | - include_once $SETTINGS['cpassman_dir'] . '/pages/oauth.js.php'; |
|
1425 | + include_once $SETTINGS['cpassman_dir'].'/pages/oauth.js.php'; |
|
1426 | 1426 | } elseif ($get['page'] === 'tools') { |
1427 | - include_once $SETTINGS['cpassman_dir'] . '/pages/tools.js.php'; |
|
1427 | + include_once $SETTINGS['cpassman_dir'].'/pages/tools.js.php'; |
|
1428 | 1428 | } |
1429 | 1429 | } elseif (isset($get['page']) === true && $get['page'] !== '') { |
1430 | 1430 | if ($get['page'] === 'items') { |
1431 | - include_once $SETTINGS['cpassman_dir'] . '/pages/items.js.php'; |
|
1431 | + include_once $SETTINGS['cpassman_dir'].'/pages/items.js.php'; |
|
1432 | 1432 | } elseif ($get['page'] === 'import') { |
1433 | - include_once $SETTINGS['cpassman_dir'] . '/pages/import.js.php'; |
|
1433 | + include_once $SETTINGS['cpassman_dir'].'/pages/import.js.php'; |
|
1434 | 1434 | } elseif ($get['page'] === 'export') { |
1435 | - include_once $SETTINGS['cpassman_dir'] . '/pages/export.js.php'; |
|
1435 | + include_once $SETTINGS['cpassman_dir'].'/pages/export.js.php'; |
|
1436 | 1436 | } elseif ($get['page'] === 'offline') { |
1437 | - include_once $SETTINGS['cpassman_dir'] . '/pages/offline.js.php'; |
|
1437 | + include_once $SETTINGS['cpassman_dir'].'/pages/offline.js.php'; |
|
1438 | 1438 | } elseif ($get['page'] === 'search') { |
1439 | - include_once $SETTINGS['cpassman_dir'] . '/pages/search.js.php'; |
|
1439 | + include_once $SETTINGS['cpassman_dir'].'/pages/search.js.php'; |
|
1440 | 1440 | } elseif ($get['page'] === 'profile') { |
1441 | - include_once $SETTINGS['cpassman_dir'] . '/pages/profile.js.php'; |
|
1441 | + include_once $SETTINGS['cpassman_dir'].'/pages/profile.js.php'; |
|
1442 | 1442 | } elseif ($get['page'] === 'favourites') { |
1443 | - include_once $SETTINGS['cpassman_dir'] . '/pages/favorites.js.php'; |
|
1443 | + include_once $SETTINGS['cpassman_dir'].'/pages/favorites.js.php'; |
|
1444 | 1444 | } elseif ($get['page'] === 'folders') { |
1445 | - include_once $SETTINGS['cpassman_dir'] . '/pages/folders.js.php'; |
|
1445 | + include_once $SETTINGS['cpassman_dir'].'/pages/folders.js.php'; |
|
1446 | 1446 | } elseif ($get['page'] === 'users') { |
1447 | - include_once $SETTINGS['cpassman_dir'] . '/pages/users.js.php'; |
|
1447 | + include_once $SETTINGS['cpassman_dir'].'/pages/users.js.php'; |
|
1448 | 1448 | } elseif ($get['page'] === 'roles') { |
1449 | - include_once $SETTINGS['cpassman_dir'] . '/pages/roles.js.php'; |
|
1449 | + include_once $SETTINGS['cpassman_dir'].'/pages/roles.js.php'; |
|
1450 | 1450 | } elseif ($get['page'] === 'utilities.deletion') { |
1451 | - include_once $SETTINGS['cpassman_dir'] . '/pages/utilities.deletion.js.php'; |
|
1451 | + include_once $SETTINGS['cpassman_dir'].'/pages/utilities.deletion.js.php'; |
|
1452 | 1452 | } elseif ($get['page'] === 'utilities.logs') { |
1453 | - include_once $SETTINGS['cpassman_dir'] . '/pages/utilities.logs.js.php'; |
|
1453 | + include_once $SETTINGS['cpassman_dir'].'/pages/utilities.logs.js.php'; |
|
1454 | 1454 | } elseif ($get['page'] === 'utilities.database') { |
1455 | - include_once $SETTINGS['cpassman_dir'] . '/pages/utilities.database.js.php'; |
|
1455 | + include_once $SETTINGS['cpassman_dir'].'/pages/utilities.database.js.php'; |
|
1456 | 1456 | } elseif ($get['page'] === 'utilities.renewal') { |
1457 | - include_once $SETTINGS['cpassman_dir'] . '/pages/utilities.renewal.js.php'; |
|
1457 | + include_once $SETTINGS['cpassman_dir'].'/pages/utilities.renewal.js.php'; |
|
1458 | 1458 | } |
1459 | 1459 | } else { |
1460 | - include_once $SETTINGS['cpassman_dir'] . '/includes/core/login.js.php'; |
|
1460 | + include_once $SETTINGS['cpassman_dir'].'/includes/core/login.js.php'; |
|
1461 | 1461 | } |
1462 | 1462 | } |
@@ -66,7 +66,7 @@ |
||
66 | 66 | DB::debugmode(false); |
67 | 67 | $rows = DB::query( |
68 | 68 | 'SELECT * |
69 | - FROM ' . prefixTable('background_tasks') . ' |
|
69 | + FROM ' . prefixTable('background_tasks').' |
|
70 | 70 | WHERE is_in_progress = %i AND process_type = %s |
71 | 71 | ORDER BY increment_id ASC LIMIT 0,' . $number_users_build_cache_tree, |
72 | 72 | 0, |
@@ -137,14 +137,14 @@ discard block |
||
137 | 137 | && $t->personal_folder == 0 |
138 | 138 | ) { |
139 | 139 | // get $t->parent_id |
140 | - $data = DB::queryFirstRow('SELECT title FROM ' . prefixTable('nested_tree') . ' WHERE id = %i', $t->parent_id); |
|
140 | + $data = DB::queryFirstRow('SELECT title FROM '.prefixTable('nested_tree').' WHERE id = %i', $t->parent_id); |
|
141 | 141 | if ($t->nlevel == 1) { |
142 | 142 | $data['title'] = $lang->get('root'); |
143 | 143 | } |
144 | 144 | |
145 | 145 | // get rights on this folder |
146 | 146 | $arrayRights = array(); |
147 | - $rows = DB::query('SELECT fonction_id FROM ' . prefixTable('rights') . ' WHERE authorized=%i AND tree_id = %i', 1, $t->id); |
|
147 | + $rows = DB::query('SELECT fonction_id FROM '.prefixTable('rights').' WHERE authorized=%i AND tree_id = %i', 1, $t->id); |
|
148 | 148 | foreach ($rows as $record) { |
149 | 149 | array_push($arrayRights, $record['fonction_id']); |
150 | 150 | } |
@@ -162,8 +162,8 @@ discard block |
||
162 | 162 | 'SELECT m.valeur AS valeur, n.renewal_period AS renewal_period, |
163 | 163 | n.bloquer_creation AS bloquer_creation, n.bloquer_modification AS bloquer_modification, |
164 | 164 | n.fa_icon, n.fa_icon_selected |
165 | - FROM ' . prefixTable('misc') . ' AS m, |
|
166 | - ' . prefixTable('nested_tree') . ' AS n |
|
165 | + FROM ' . prefixTable('misc').' AS m, |
|
166 | + ' . prefixTable('nested_tree').' AS n |
|
167 | 167 | WHERE m.type=%s AND m.intitule = n.id AND m.intitule = %i', |
168 | 168 | 'complex', |
169 | 169 | $t->id |
@@ -191,16 +191,16 @@ discard block |
||
191 | 191 | $arrayColumns['folderComplexity'] = ''; |
192 | 192 | } |
193 | 193 | |
194 | - if (is_null($node_data)=== false) { |
|
194 | + if (is_null($node_data) === false) { |
|
195 | 195 | $arrayColumns['renewalPeriod'] = (int) $node_data['renewal_period']; |
196 | 196 | } else { |
197 | - $arrayColumns['renewalPeriod']=0; |
|
197 | + $arrayColumns['renewalPeriod'] = 0; |
|
198 | 198 | } |
199 | 199 | |
200 | 200 | //col7 |
201 | 201 | $data7 = DB::queryFirstRow( |
202 | 202 | 'SELECT bloquer_creation,bloquer_modification |
203 | - FROM ' . prefixTable('nested_tree') . ' |
|
203 | + FROM ' . prefixTable('nested_tree').' |
|
204 | 204 | WHERE id = %i', |
205 | 205 | intval($t->id) |
206 | 206 | ); |
@@ -359,7 +359,7 @@ discard block |
||
359 | 359 | // Get info about this folder |
360 | 360 | $dataFolder = DB::queryfirstrow( |
361 | 361 | 'SELECT * |
362 | - FROM ' . prefixTable('nested_tree') . ' |
|
362 | + FROM ' . prefixTable('nested_tree').' |
|
363 | 363 | WHERE id = %i', |
364 | 364 | $inputData['id'] |
365 | 365 | ); |
@@ -395,7 +395,7 @@ discard block |
||
395 | 395 | //check if parent folder is personal |
396 | 396 | $dataParent = DB::queryfirstrow( |
397 | 397 | 'SELECT personal_folder, bloquer_creation, bloquer_modification |
398 | - FROM ' . prefixTable('nested_tree') . ' |
|
398 | + FROM ' . prefixTable('nested_tree').' |
|
399 | 399 | WHERE id = %i', |
400 | 400 | $inputData['parentId'] |
401 | 401 | ); |
@@ -424,7 +424,7 @@ discard block |
||
424 | 424 | // get complexity level for this folder |
425 | 425 | $data = DB::queryfirstrow( |
426 | 426 | 'SELECT valeur |
427 | - FROM ' . prefixTable('misc') . ' |
|
427 | + FROM ' . prefixTable('misc').' |
|
428 | 428 | WHERE intitule = %i AND type = %s', |
429 | 429 | $inputData['parentId'], |
430 | 430 | 'complex' |
@@ -435,7 +435,7 @@ discard block |
||
435 | 435 | array( |
436 | 436 | 'error' => true, |
437 | 437 | 'message' => $lang->get('error_folder_complexity_lower_than_top_folder') |
438 | - . ' [<b>' . TP_PW_COMPLEXITY[$data['valeur']][1] . '</b>]', |
|
438 | + . ' [<b>'.TP_PW_COMPLEXITY[$data['valeur']][1].'</b>]', |
|
439 | 439 | ), |
440 | 440 | 'encode' |
441 | 441 | ); |
@@ -596,7 +596,7 @@ discard block |
||
596 | 596 | // Check if parent folder is personal |
597 | 597 | $dataParent = DB::queryfirstrow( |
598 | 598 | 'SELECT personal_folder |
599 | - FROM ' . prefixTable('nested_tree') . ' |
|
599 | + FROM ' . prefixTable('nested_tree').' |
|
600 | 600 | WHERE id = %i', |
601 | 601 | $inputData['parentId'] |
602 | 602 | ); |
@@ -636,7 +636,7 @@ discard block |
||
636 | 636 | echo prepareExchangedData( |
637 | 637 | array( |
638 | 638 | 'error' => $creationStatus['error'], |
639 | - 'message' => $creationStatus['error'] === true ? $lang->get('error_not_allowed_to') : $lang->get('folder_created') , |
|
639 | + 'message' => $creationStatus['error'] === true ? $lang->get('error_not_allowed_to') : $lang->get('folder_created'), |
|
640 | 640 | 'newId' => $creationStatus['newId'], |
641 | 641 | ), |
642 | 642 | 'encode' |
@@ -684,7 +684,7 @@ discard block |
||
684 | 684 | echo prepareExchangedData( |
685 | 685 | array( |
686 | 686 | 'error' => true, |
687 | - 'message' => $lang->get('error_not_allowed_to'). " (You can't delete the root folder)", |
|
687 | + 'message' => $lang->get('error_not_allowed_to')." (You can't delete the root folder)", |
|
688 | 688 | ), |
689 | 689 | 'encode' |
690 | 690 | ); |
@@ -694,7 +694,7 @@ discard block |
||
694 | 694 | // Ensure that user has access to all folders |
695 | 695 | $foldersAccessible = DB::query( |
696 | 696 | 'SELECT id |
697 | - FROM ' . prefixTable('nested_tree') . ' |
|
697 | + FROM ' . prefixTable('nested_tree').' |
|
698 | 698 | WHERE id IN %li AND id IN %li', |
699 | 699 | $post_folders, |
700 | 700 | $session->get('user-accessible_folders') |
@@ -708,7 +708,7 @@ discard block |
||
708 | 708 | echo prepareExchangedData( |
709 | 709 | array( |
710 | 710 | 'error' => true, |
711 | - 'message' => $lang->get('error_not_allowed_to') . ' (The following folders are not accessible or do not exist: ' . implode(', ', $missingFolders) . ')', |
|
711 | + 'message' => $lang->get('error_not_allowed_to').' (The following folders are not accessible or do not exist: '.implode(', ', $missingFolders).')', |
|
712 | 712 | ), |
713 | 713 | 'encode' |
714 | 714 | ); |
@@ -725,7 +725,7 @@ discard block |
||
725 | 725 | // Check if parent folder is personal |
726 | 726 | $dataParent = DB::queryfirstrow( |
727 | 727 | 'SELECT personal_folder |
728 | - FROM ' . prefixTable('nested_tree') . ' |
|
728 | + FROM ' . prefixTable('nested_tree').' |
|
729 | 729 | WHERE id = %i', |
730 | 730 | $folderId |
731 | 731 | ); |
@@ -771,10 +771,10 @@ discard block |
||
771 | 771 | prefixTable('misc'), |
772 | 772 | array( |
773 | 773 | 'type' => 'folder_deleted', |
774 | - 'intitule' => 'f' . $thisSubFolders->id, |
|
775 | - 'valeur' => $thisSubFolders->id . ', ' . $thisSubFolders->parent_id . ', ' . |
|
776 | - $thisSubFolders->title . ', ' . $thisSubFolders->nleft . ', ' . $thisSubFolders->nright . ', ' . |
|
777 | - $thisSubFolders->nlevel . ', 0, 0, 0, 0', |
|
774 | + 'intitule' => 'f'.$thisSubFolders->id, |
|
775 | + 'valeur' => $thisSubFolders->id.', '.$thisSubFolders->parent_id.', '. |
|
776 | + $thisSubFolders->title.', '.$thisSubFolders->nleft.', '.$thisSubFolders->nright.', '. |
|
777 | + $thisSubFolders->nlevel.', 0, 0, 0, 0', |
|
778 | 778 | 'created_at' => time(), |
779 | 779 | ) |
780 | 780 | ); |
@@ -783,7 +783,7 @@ discard block |
||
783 | 783 | |
784 | 784 | //delete items & logs |
785 | 785 | $itemsInSubFolder = DB::query( |
786 | - 'SELECT id FROM ' . prefixTable('items') . ' |
|
786 | + 'SELECT id FROM '.prefixTable('items').' |
|
787 | 787 | WHERE id_tree=%i', |
788 | 788 | $thisSubFolders->id |
789 | 789 | ); |
@@ -813,7 +813,7 @@ discard block |
||
813 | 813 | } |
814 | 814 | |
815 | 815 | //Update CACHE table |
816 | - updateCacheTable('delete_value',(int) $item['id']); |
|
816 | + updateCacheTable('delete_value', (int) $item['id']); |
|
817 | 817 | } |
818 | 818 | |
819 | 819 | //Actualize the variable |
@@ -923,7 +923,7 @@ discard block |
||
923 | 923 | // Check if target parent folder is personal |
924 | 924 | $dataParent = DB::queryfirstrow( |
925 | 925 | 'SELECT personal_folder |
926 | - FROM ' . prefixTable('nested_tree') . ' |
|
926 | + FROM ' . prefixTable('nested_tree').' |
|
927 | 927 | WHERE id = %i', |
928 | 928 | $post_target_folder_id |
929 | 929 | ); |
@@ -977,7 +977,7 @@ discard block |
||
977 | 977 | // get complexity of current node |
978 | 978 | $nodeComplexity = DB::queryfirstrow( |
979 | 979 | 'SELECT valeur |
980 | - FROM ' . prefixTable('misc') . ' |
|
980 | + FROM ' . prefixTable('misc').' |
|
981 | 981 | WHERE intitule = %i AND type= %s', |
982 | 982 | $nodeInfo->id, |
983 | 983 | 'complex' |
@@ -1054,7 +1054,7 @@ discard block |
||
1054 | 1054 | // If it is a subfolder, then give access to it for all roles that allows the parent folder |
1055 | 1055 | $rows = DB::query( |
1056 | 1056 | 'SELECT role_id, type |
1057 | - FROM ' . prefixTable('roles_values') . ' |
|
1057 | + FROM ' . prefixTable('roles_values').' |
|
1058 | 1058 | WHERE folder_id = %i', |
1059 | 1059 | $parentId |
1060 | 1060 | ); |
@@ -1062,7 +1062,7 @@ discard block |
||
1062 | 1062 | // Add access to this subfolder after checking that it is not already set |
1063 | 1063 | DB::query( |
1064 | 1064 | 'SELECT * |
1065 | - FROM ' . prefixTable('roles_values') . ' |
|
1065 | + FROM ' . prefixTable('roles_values').' |
|
1066 | 1066 | WHERE folder_id = %i AND role_id = %i', |
1067 | 1067 | $newFolderId, |
1068 | 1068 | $record['role_id'] |
@@ -1082,7 +1082,7 @@ discard block |
||
1082 | 1082 | // if parent folder has Custom Fields Categories then add to this child one too |
1083 | 1083 | $rows = DB::query( |
1084 | 1084 | 'SELECT id_category |
1085 | - FROM ' . prefixTable('categories_folders') . ' |
|
1085 | + FROM ' . prefixTable('categories_folders').' |
|
1086 | 1086 | WHERE id_folder = %i', |
1087 | 1087 | $nodeInfo->id |
1088 | 1088 | ); |
@@ -1101,7 +1101,7 @@ discard block |
||
1101 | 1101 | |
1102 | 1102 | $rows = DB::query( |
1103 | 1103 | 'SELECT * |
1104 | - FROM ' . prefixTable('items') . ' |
|
1104 | + FROM ' . prefixTable('items').' |
|
1105 | 1105 | WHERE id_tree = %i', |
1106 | 1106 | $nodeInfo->id |
1107 | 1107 | ); |
@@ -1110,7 +1110,7 @@ discard block |
||
1110 | 1110 | // if it is then don't copy it |
1111 | 1111 | $item_deleted = DB::queryFirstRow( |
1112 | 1112 | 'SELECT * |
1113 | - FROM ' . prefixTable('log_items') . ' |
|
1113 | + FROM ' . prefixTable('log_items').' |
|
1114 | 1114 | WHERE id_item = %i AND action = %s |
1115 | 1115 | ORDER BY date DESC |
1116 | 1116 | LIMIT 0, 1', |
@@ -1121,7 +1121,7 @@ discard block |
||
1121 | 1121 | |
1122 | 1122 | $item_restored = DB::queryFirstRow( |
1123 | 1123 | 'SELECT * |
1124 | - FROM ' . prefixTable('log_items') . ' |
|
1124 | + FROM ' . prefixTable('log_items').' |
|
1125 | 1125 | WHERE id_item = %i AND action = %s |
1126 | 1126 | ORDER BY date DESC |
1127 | 1127 | LIMIT 0, 1', |
@@ -1136,7 +1136,7 @@ discard block |
||
1136 | 1136 | // Get the ITEM object key for the user |
1137 | 1137 | $userKey = DB::queryFirstRow( |
1138 | 1138 | 'SELECT share_key |
1139 | - FROM ' . prefixTable('sharekeys_items') . ' |
|
1139 | + FROM ' . prefixTable('sharekeys_items').' |
|
1140 | 1140 | WHERE user_id = %i AND object_id = %i', |
1141 | 1141 | $session->get('user-id'), |
1142 | 1142 | $record['id'] |
@@ -1209,7 +1209,7 @@ discard block |
||
1209 | 1209 | // Manage Custom Fields |
1210 | 1210 | $categories = DB::query( |
1211 | 1211 | 'SELECT * |
1212 | - FROM ' . prefixTable('categories_items') . ' |
|
1212 | + FROM ' . prefixTable('categories_items').' |
|
1213 | 1213 | WHERE item_id = %i', |
1214 | 1214 | $record['id'] |
1215 | 1215 | ); |
@@ -1256,15 +1256,15 @@ discard block |
||
1256 | 1256 | $files = DB::query( |
1257 | 1257 | 'SELECT f.id AS id, f.file AS file, f.name AS name, f.status AS status, f.extension AS extension, |
1258 | 1258 | f.size AS size, f.type AS type, s.share_key AS share_key |
1259 | - FROM ' . prefixTable('files') . ' AS f |
|
1260 | - INNER JOIN ' . prefixTable('sharekeys_files') . ' AS s ON (f.id = s.object_id) |
|
1259 | + FROM ' . prefixTable('files').' AS f |
|
1260 | + INNER JOIN ' . prefixTable('sharekeys_files').' AS s ON (f.id = s.object_id) |
|
1261 | 1261 | WHERE s.user_id = %i AND f.id_item = %i', |
1262 | 1262 | $session->get('user-id'), |
1263 | 1263 | $record['id'] |
1264 | 1264 | ); |
1265 | 1265 | foreach ($files as $file) { |
1266 | 1266 | // Check if file still exists |
1267 | - if (file_exists($SETTINGS['path_to_upload_folder'] . DIRECTORY_SEPARATOR . TP_FILE_PREFIX . base64_decode($file['file'])) === true) { |
|
1267 | + if (file_exists($SETTINGS['path_to_upload_folder'].DIRECTORY_SEPARATOR.TP_FILE_PREFIX.base64_decode($file['file'])) === true) { |
|
1268 | 1268 | // Step1 - decrypt the file |
1269 | 1269 | $fileContent = decryptFile( |
1270 | 1270 | $file['file'], |
@@ -1274,9 +1274,9 @@ discard block |
||
1274 | 1274 | |
1275 | 1275 | // Step2 - create file |
1276 | 1276 | // deepcode ignore InsecureHash: Is not a password, just a random string for a file name |
1277 | - $newFileName = md5(time() . '_' . $file['id']) . '.' . $file['extension']; |
|
1277 | + $newFileName = md5(time().'_'.$file['id']).'.'.$file['extension']; |
|
1278 | 1278 | |
1279 | - $outstream = fopen($SETTINGS['path_to_upload_folder'] . DIRECTORY_SEPARATOR . $newFileName, 'ab'); |
|
1279 | + $outstream = fopen($SETTINGS['path_to_upload_folder'].DIRECTORY_SEPARATOR.$newFileName, 'ab'); |
|
1280 | 1280 | if ($outstream === false) { |
1281 | 1281 | echo prepareExchangedData( |
1282 | 1282 | array( |
@@ -1425,7 +1425,7 @@ discard block |
||
1425 | 1425 | // Get path |
1426 | 1426 | $text = ''; |
1427 | 1427 | foreach ($tree->getPath($folder->id, false) as $fld) { |
1428 | - $text .= empty($text) === true ? ' [<i>' . $fld->title : ' > ' . $fld->title; |
|
1428 | + $text .= empty($text) === true ? ' [<i>'.$fld->title : ' > '.$fld->title; |
|
1429 | 1429 | } |
1430 | 1430 | |
1431 | 1431 | // Save array |
@@ -1435,7 +1435,7 @@ discard block |
||
1435 | 1435 | 'id' => (int) $folder->id, |
1436 | 1436 | 'label' => $folder->title, |
1437 | 1437 | 'level' => $folder->nlevel, |
1438 | - 'path' => empty($text) === true ? '' : $text . '</i>]' |
|
1438 | + 'path' => empty($text) === true ? '' : $text.'</i>]' |
|
1439 | 1439 | ) |
1440 | 1440 | ); |
1441 | 1441 | } |
@@ -74,7 +74,7 @@ discard block |
||
74 | 74 | ) { |
75 | 75 | // Not allowed page |
76 | 76 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
77 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
77 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
78 | 78 | exit; |
79 | 79 | } |
80 | 80 | |
@@ -130,7 +130,7 @@ discard block |
||
130 | 130 | |
131 | 131 | if ( |
132 | 132 | is_array($dataReceived) && // check if the data is an array |
133 | - array_diff_key(array_flip($requiredKeys), $dataReceived) === [] && // check if all required keys have a valuekeys are present |
|
133 | + array_diff_key(array_flip($requiredKeys), $dataReceived) === [] && // check if all required keys have a valuekeys are present |
|
134 | 134 | count(array_filter($dataReceived)) === count($requiredKeys) && // check if all required |
135 | 135 | in_array($dataReceived['action'], ['at_password_shown', 'at_password_copied'], true) && // only log these actions |
136 | 136 | $session->get('user-id') === (int) filter_var($dataReceived['user_id'], FILTER_SANITIZE_NUMBER_INT) // only log actions of the current user |
@@ -175,7 +175,7 @@ discard block |
||
175 | 175 | |
176 | 176 | // Show passwords inputs and form |
177 | 177 | $('#dialog-user-change-password-info') |
178 | - .html('<i class="icon fa-solid fa-info mr-2"></i><?php echo $lang->get('user_has_to_change_password_info');?>') |
|
178 | + .html('<i class="icon fa-solid fa-info mr-2"></i><?php echo $lang->get('user_has_to_change_password_info'); ?>') |
|
179 | 179 | .removeClass('hidden'); |
180 | 180 | $('#dialog-user-change-password').removeClass('hidden'); |
181 | 181 | |
@@ -188,7 +188,7 @@ discard block |
||
188 | 188 | |
189 | 189 | // Show passwords inputs and form |
190 | 190 | $('#dialog-ldap-user-change-password-info') |
191 | - .html('<i class="icon fa-solid fa-info mr-2"></i><?php echo $lang->get('ldap_user_has_changed_his_password');?>') |
|
191 | + .html('<i class="icon fa-solid fa-info mr-2"></i><?php echo $lang->get('ldap_user_has_changed_his_password'); ?>') |
|
192 | 192 | .removeClass('hidden'); |
193 | 193 | $('#dialog-ldap-user-change-password').removeClass('hidden'); |
194 | 194 | |
@@ -216,7 +216,7 @@ discard block |
||
216 | 216 | |
217 | 217 | if (data.queryResults.auth_type === 'oauth2') { |
218 | 218 | // LDAP or local account to OAuth2 account |
219 | - var info_message = '<?php echo $lang->get('oauth2_need_user_old_password');?>'; |
|
219 | + var info_message = '<?php echo $lang->get('oauth2_need_user_old_password'); ?>'; |
|
220 | 220 | |
221 | 221 | // Hide the "new password" field that users can't fill in manually |
222 | 222 | $('#new-password-field').hide(); |
@@ -228,7 +228,7 @@ discard block |
||
228 | 228 | $('#dialog-ldap-user-change-password-current').val(oauth2_encryption_hash); |
229 | 229 | } else { |
230 | 230 | // LDAP password updated |
231 | - var info_message = '<?php echo $lang->get('ldap_user_has_changed_his_password');?>'; |
|
231 | + var info_message = '<?php echo $lang->get('ldap_user_has_changed_his_password'); ?>'; |
|
232 | 232 | } |
233 | 233 | |
234 | 234 | // Display info tip |
@@ -339,7 +339,7 @@ discard block |
||
339 | 339 | /*console.log('User has to regenerate keys') |
340 | 340 | // HIde |
341 | 341 | $('.content-header, .content').addClass('hidden'); |
342 | - $('#dialog-user-temporary-code-info').html('<i class="icon fa-solid fa-info mr-2"></i><?php echo $lang->get('renecyption_expected');?>'); |
|
342 | + $('#dialog-user-temporary-code-info').html('<i class="icon fa-solid fa-info mr-2"></i><?php echo $lang->get('renecyption_expected'); ?>'); |
|
343 | 343 | |
344 | 344 | // Show passwords inputs and form |
345 | 345 | $('#dialog-user-temporary-code').removeClass('hidden'); |
@@ -421,13 +421,13 @@ discard block |
||
421 | 421 | { |
422 | 422 | if (step === 'psk') { |
423 | 423 | // Inform user |
424 | - $("#user-current-defuse-psk-progress").html('<b><?php echo $lang->get('encryption_keys'); ?> </b> [' + start + ' - ' + (parseInt(start) + <?php echo NUMBER_ITEMS_IN_BATCH;?>) + '] ' + |
|
424 | + $("#user-current-defuse-psk-progress").html('<b><?php echo $lang->get('encryption_keys'); ?> </b> [' + start + ' - ' + (parseInt(start) + <?php echo NUMBER_ITEMS_IN_BATCH; ?>) + '] ' + |
|
425 | 425 | '... <?php echo $lang->get('please_wait'); ?><i class="fa-solid fa-spinner fa-pulse ml-3 text-primary"></i>'); |
426 | 426 | |
427 | 427 | var data = { |
428 | 428 | 'userPsk' : $('#user-current-defuse-psk').val(), |
429 | 429 | 'start': start, |
430 | - 'length': <?php echo NUMBER_ITEMS_IN_BATCH;?>, |
|
430 | + 'length': <?php echo NUMBER_ITEMS_IN_BATCH; ?>, |
|
431 | 431 | 'user_id': userId, |
432 | 432 | 'counterItemsToTreat': counterItemsToTreat |
433 | 433 | }; |
@@ -503,7 +503,7 @@ discard block |
||
503 | 503 | |
504 | 504 | // Show passwords inputs and form |
505 | 505 | $('#dialog-ldap-user-change-password-info') |
506 | - .html('<i class="icon fa-solid fa-info mr-2"></i><?php echo $lang->get('ldap_user_has_changed_his_password');?>') |
|
506 | + .html('<i class="icon fa-solid fa-info mr-2"></i><?php echo $lang->get('ldap_user_has_changed_his_password'); ?>') |
|
507 | 507 | .removeClass('hidden'); |
508 | 508 | $('#dialog-ldap-user-change-password').removeClass('hidden'); |
509 | 509 | |
@@ -593,7 +593,7 @@ discard block |
||
593 | 593 | '</div>' + |
594 | 594 | '</div>' + |
595 | 595 | '</div>' + |
596 | - '<div class="row mt-2<?php echo isset($SETTINGS['enable_pf_feature']) === true && (int) $SETTINGS['enable_pf_feature'] === 1 ? '' : ' hidden'; ?>">' + |
|
596 | + '<div class="row mt-2<?php echo isset($SETTINGS['enable_pf_feature']) === true && (int) $SETTINGS['enable_pf_feature'] === 1 ? '' : ' hidden'; ?>">' + |
|
597 | 597 | '<h6><?php echo $lang->get('provide_recovery_keys'); ?></h6>' + |
598 | 598 | '<div class="input-group mb-2">' + |
599 | 599 | '<div class="input-group-prepend">' + |
@@ -608,7 +608,7 @@ discard block |
||
608 | 608 | '<textarea rows="2" id="recovery-private-key" class="form-control form-item-control"></textarea>' + |
609 | 609 | '</div>' + |
610 | 610 | '</div>' + |
611 | - '<div class="row mt-2<?php echo isset($SETTINGS['enable_pf_feature']) === true && (int) $SETTINGS['enable_pf_feature'] === 1 ? '' : ' hidden'; ?>">' + |
|
611 | + '<div class="row mt-2<?php echo isset($SETTINGS['enable_pf_feature']) === true && (int) $SETTINGS['enable_pf_feature'] === 1 ? '' : ' hidden'; ?>">' + |
|
612 | 612 | '<div class="alert" id="confirm-no-recovery-keys-div">' + |
613 | 613 | '<div class="form-check">' + |
614 | 614 | '<input type="checkbox" class="form-check-input" id="confirm-no-recovery-keys">' + |
@@ -1172,15 +1172,15 @@ discard block |
||
1172 | 1172 | // Prepare data |
1173 | 1173 | var data = { |
1174 | 1174 | 'receipt': $('#temp-user-email').val(), |
1175 | - 'subject': '[Teampass] <?php echo $lang->get('your_new_password');?>', |
|
1176 | - 'body': '<?php echo $lang->get('email_body_temporary_login_password');?>', |
|
1175 | + 'subject': '[Teampass] <?php echo $lang->get('your_new_password'); ?>', |
|
1176 | + 'body': '<?php echo $lang->get('email_body_temporary_login_password'); ?>', |
|
1177 | 1177 | 'pre_replace' : { |
1178 | 1178 | '#enc_code#' : $('#temp-user-pwd').val(), |
1179 | 1179 | } |
1180 | 1180 | } |
1181 | 1181 | if (debugJavascript === true) console.log(data); |
1182 | 1182 | // Prepare form |
1183 | - $('#dialog-admin-change-user-password-info').html('<?php echo $lang->get('sending_email_message');?>'); |
|
1183 | + $('#dialog-admin-change-user-password-info').html('<?php echo $lang->get('sending_email_message'); ?>'); |
|
1184 | 1184 | toastr.remove(); |
1185 | 1185 | toastr.info( |
1186 | 1186 | '<?php echo $lang->get('in_progress'); ?><i class="fa-solid fa-circle-notch fa-spin fa-2x ml-3"></i>' |
@@ -1702,7 +1702,7 @@ discard block |
||
1702 | 1702 | '#warningModal', |
1703 | 1703 | '<i class="fa-solid fa-clock fa-lg warning mr-2"></i><?php echo $lang->get('index_add_one_hour'); ?>', |
1704 | 1704 | '<div class="form-group">' + |
1705 | - '<label for="warningModal-input" class="col-form-label"><?php echo $lang->get('extend_session_duration_by') . ' (' . $lang->get('minutes') . ')'; ?>:</label>' + |
|
1705 | + '<label for="warningModal-input" class="col-form-label"><?php echo $lang->get('extend_session_duration_by').' ('.$lang->get('minutes').')'; ?>:</label>' + |
|
1706 | 1706 | '<input type="number" max="'+(60*60*24)+'" class="form-control" id="warningModal-input" value="60">' + |
1707 | 1707 | '</div>' + |
1708 | 1708 | '<div class="form-text text-muted"><i class=\"fa-solid fa-info-circle mr-2\"></i><?php echo $lang->get('maximum_session_expiration_time'); ?>: '+data.max_session_duration+'</div>', |
@@ -111,7 +111,7 @@ discard block |
||
111 | 111 | DB::update( |
112 | 112 | prefixTable('background_subtasks'), |
113 | 113 | array( |
114 | - 'sub_task_in_progress' => 0, // flag sub task is no more in prgoress |
|
114 | + 'sub_task_in_progress' => 0, // flag sub task is no more in prgoress |
|
115 | 115 | 'is_in_progress' => 0, |
116 | 116 | 'finished_at' => time(), |
117 | 117 | 'updated_at' => time(), |
@@ -147,7 +147,7 @@ discard block |
||
147 | 147 | // Check if user exists |
148 | 148 | $userInfo = DB::queryFirstRow( |
149 | 149 | 'SELECT public_key, private_key |
150 | - FROM ' . prefixTable('users') . ' |
|
150 | + FROM ' . prefixTable('users').' |
|
151 | 151 | WHERE id = %i', |
152 | 152 | $post_user_id |
153 | 153 | ); |
@@ -260,13 +260,13 @@ discard block |
||
260 | 260 | { |
261 | 261 | $userInfo = DB::queryFirstRow( |
262 | 262 | 'SELECT pw, public_key, private_key, login, name |
263 | - FROM ' . prefixTable('users') . ' |
|
263 | + FROM ' . prefixTable('users').' |
|
264 | 264 | WHERE id = %i', |
265 | 265 | $owner_id |
266 | 266 | ); |
267 | 267 | |
268 | 268 | // decrypt owner password |
269 | - $pwd = cryption($owner_pwd, '','decrypt', $SETTINGS)['string']; |
|
269 | + $pwd = cryption($owner_pwd, '', 'decrypt', $SETTINGS)['string']; |
|
270 | 270 | // decrypt private key and send back |
271 | 271 | return [ |
272 | 272 | 'private_key' => decryptPrivateKey($pwd, $userInfo['private_key']), |
@@ -306,17 +306,17 @@ discard block |
||
306 | 306 | // Loop on items |
307 | 307 | $rows = DB::query( |
308 | 308 | 'SELECT id, pw, perso |
309 | - FROM ' . prefixTable('items') . ' |
|
309 | + FROM ' . prefixTable('items').' |
|
310 | 310 | '.(isset($extra_arguments['only_personal_items']) === true && $extra_arguments['only_personal_items'] === 1 ? 'WHERE perso = 1' : '').' |
311 | 311 | ORDER BY id ASC |
312 | - LIMIT ' . $post_start . ', ' . $post_length |
|
312 | + LIMIT ' . $post_start.', '.$post_length |
|
313 | 313 | ); |
314 | 314 | // WHERE perso = 0 |
315 | 315 | foreach ($rows as $record) { |
316 | 316 | // Get itemKey from current user |
317 | 317 | $currentUserKey = DB::queryFirstRow( |
318 | 318 | 'SELECT share_key, increment_id |
319 | - FROM ' . prefixTable('sharekeys_items') . ' |
|
319 | + FROM ' . prefixTable('sharekeys_items').' |
|
320 | 320 | WHERE object_id = %i AND user_id = %i', |
321 | 321 | $record['id'], |
322 | 322 | //$extra_arguments['owner_id'] |
@@ -345,7 +345,7 @@ discard block |
||
345 | 345 | |
346 | 346 | $currentUserKey = DB::queryFirstRow( |
347 | 347 | 'SELECT increment_id |
348 | - FROM ' . prefixTable('sharekeys_items') . ' |
|
348 | + FROM ' . prefixTable('sharekeys_items').' |
|
349 | 349 | WHERE object_id = %i AND user_id = %i', |
350 | 350 | $record['id'], |
351 | 351 | $post_user_id |
@@ -419,15 +419,15 @@ discard block |
||
419 | 419 | // Loop on logs |
420 | 420 | $rows = DB::query( |
421 | 421 | 'SELECT increment_id |
422 | - FROM ' . prefixTable('log_items') . ' |
|
422 | + FROM ' . prefixTable('log_items').' |
|
423 | 423 | WHERE raison LIKE "at_pw :%" AND encryption_type = "teampass_aes" |
424 | - LIMIT ' . $post_start . ', ' . $post_length |
|
424 | + LIMIT ' . $post_start.', '.$post_length |
|
425 | 425 | ); |
426 | 426 | foreach ($rows as $record) { |
427 | 427 | // Get itemKey from current user |
428 | 428 | $currentUserKey = DB::queryFirstRow( |
429 | 429 | 'SELECT share_key |
430 | - FROM ' . prefixTable('sharekeys_logs') . ' |
|
430 | + FROM ' . prefixTable('sharekeys_logs').' |
|
431 | 431 | WHERE object_id = %i AND user_id = %i', |
432 | 432 | $record['increment_id'], |
433 | 433 | $extra_arguments['owner_id'] |
@@ -459,7 +459,7 @@ discard block |
||
459 | 459 | if ((int) $post_user_id !== (int) $extra_arguments['owner_id']) { |
460 | 460 | $currentUserKey = DB::queryFirstRow( |
461 | 461 | 'SELECT increment_id |
462 | - FROM ' . prefixTable('sharekeys_items') . ' |
|
462 | + FROM ' . prefixTable('sharekeys_items').' |
|
463 | 463 | WHERE object_id = %i AND user_id = %i', |
464 | 464 | $record['id'], |
465 | 465 | $post_user_id |
@@ -481,7 +481,7 @@ discard block |
||
481 | 481 | // SHould we change step? |
482 | 482 | DB::query( |
483 | 483 | 'SELECT increment_id |
484 | - FROM ' . prefixTable('log_items') . ' |
|
484 | + FROM ' . prefixTable('log_items').' |
|
485 | 485 | WHERE raison LIKE "at_pw :%" AND encryption_type = "teampass_aes"' |
486 | 486 | ); |
487 | 487 | |
@@ -521,15 +521,15 @@ discard block |
||
521 | 521 | // Loop on fields |
522 | 522 | $rows = DB::query( |
523 | 523 | 'SELECT id |
524 | - FROM ' . prefixTable('categories_items') . ' |
|
524 | + FROM ' . prefixTable('categories_items').' |
|
525 | 525 | WHERE encryption_type = "teampass_aes" |
526 | - LIMIT ' . $post_start . ', ' . $post_length |
|
526 | + LIMIT ' . $post_start.', '.$post_length |
|
527 | 527 | ); |
528 | 528 | foreach ($rows as $record) { |
529 | 529 | // Get itemKey from current user |
530 | 530 | $currentUserKey = DB::queryFirstRow( |
531 | 531 | 'SELECT share_key |
532 | - FROM ' . prefixTable('sharekeys_fields') . ' |
|
532 | + FROM ' . prefixTable('sharekeys_fields').' |
|
533 | 533 | WHERE object_id = %i AND user_id = %i', |
534 | 534 | $record['id'], |
535 | 535 | $extra_arguments['owner_id'] |
@@ -557,7 +557,7 @@ discard block |
||
557 | 557 | if ((int) $post_user_id !== (int) $extra_arguments['owner_id']) { |
558 | 558 | $currentUserKey = DB::queryFirstRow( |
559 | 559 | 'SELECT increment_id |
560 | - FROM ' . prefixTable('sharekeys_items') . ' |
|
560 | + FROM ' . prefixTable('sharekeys_items').' |
|
561 | 561 | WHERE object_id = %i AND user_id = %i', |
562 | 562 | $record['id'], |
563 | 563 | $post_user_id |
@@ -580,7 +580,7 @@ discard block |
||
580 | 580 | // SHould we change step? |
581 | 581 | DB::query( |
582 | 582 | 'SELECT * |
583 | - FROM ' . prefixTable('categories_items') . ' |
|
583 | + FROM ' . prefixTable('categories_items').' |
|
584 | 584 | WHERE encryption_type = "teampass_aes"' |
585 | 585 | ); |
586 | 586 | |
@@ -620,14 +620,14 @@ discard block |
||
620 | 620 | // Loop on suggestions |
621 | 621 | $rows = DB::query( |
622 | 622 | 'SELECT id |
623 | - FROM ' . prefixTable('suggestion') . ' |
|
624 | - LIMIT ' . $post_start . ', ' . $post_length |
|
623 | + FROM ' . prefixTable('suggestion').' |
|
624 | + LIMIT ' . $post_start.', '.$post_length |
|
625 | 625 | ); |
626 | 626 | foreach ($rows as $record) { |
627 | 627 | // Get itemKey from current user |
628 | 628 | $currentUserKey = DB::queryFirstRow( |
629 | 629 | 'SELECT share_key |
630 | - FROM ' . prefixTable('sharekeys_suggestions') . ' |
|
630 | + FROM ' . prefixTable('sharekeys_suggestions').' |
|
631 | 631 | WHERE object_id = %i AND user_id = %i', |
632 | 632 | $record['id'], |
633 | 633 | $extra_arguments['owner_id'] |
@@ -659,7 +659,7 @@ discard block |
||
659 | 659 | if ((int) $post_user_id !== (int) $extra_arguments['owner_id']) { |
660 | 660 | $currentUserKey = DB::queryFirstRow( |
661 | 661 | 'SELECT increment_id |
662 | - FROM ' . prefixTable('sharekeys_items') . ' |
|
662 | + FROM ' . prefixTable('sharekeys_items').' |
|
663 | 663 | WHERE object_id = %i AND user_id = %i', |
664 | 664 | $record['id'], |
665 | 665 | $post_user_id |
@@ -719,16 +719,16 @@ discard block |
||
719 | 719 | // Loop on files |
720 | 720 | $rows = DB::query( |
721 | 721 | 'SELECT f.id AS id, i.perso AS perso |
722 | - FROM ' . prefixTable('files') . ' AS f |
|
723 | - INNER JOIN ' . prefixTable('items') . ' AS i ON i.id = f.id_item |
|
724 | - WHERE f.status = "' . TP_ENCRYPTION_NAME . '" |
|
725 | - LIMIT ' . $post_start . ', ' . $post_length |
|
722 | + FROM ' . prefixTable('files').' AS f |
|
723 | + INNER JOIN ' . prefixTable('items').' AS i ON i.id = f.id_item |
|
724 | + WHERE f.status = "' . TP_ENCRYPTION_NAME.'" |
|
725 | + LIMIT ' . $post_start.', '.$post_length |
|
726 | 726 | ); //aes_encryption |
727 | 727 | foreach ($rows as $record) { |
728 | 728 | // Get itemKey from current user |
729 | 729 | $currentUserKey = DB::queryFirstRow( |
730 | 730 | 'SELECT share_key, increment_id |
731 | - FROM ' . prefixTable('sharekeys_files') . ' |
|
731 | + FROM ' . prefixTable('sharekeys_files').' |
|
732 | 732 | WHERE object_id = %i AND user_id = %i', |
733 | 733 | $record['id'], |
734 | 734 | (int) $record['perso'] === 0 ? $extra_arguments['owner_id'] : $extra_arguments['new_user_id'] |
@@ -756,7 +756,7 @@ discard block |
||
756 | 756 | |
757 | 757 | $currentUserKey = DB::queryFirstRow( |
758 | 758 | 'SELECT increment_id |
759 | - FROM ' . prefixTable('sharekeys_files') . ' |
|
759 | + FROM ' . prefixTable('sharekeys_files').' |
|
760 | 760 | WHERE object_id = %i AND user_id = %i', |
761 | 761 | $record['id'], |
762 | 762 | $post_user_id |
@@ -787,8 +787,8 @@ discard block |
||
787 | 787 | // SHould we change step? Finished ? |
788 | 788 | DB::query( |
789 | 789 | 'SELECT * |
790 | - FROM ' . prefixTable('files') . ' |
|
791 | - WHERE status = "' . TP_ENCRYPTION_NAME . '"' |
|
790 | + FROM ' . prefixTable('files').' |
|
791 | + WHERE status = "' . TP_ENCRYPTION_NAME.'"' |
|
792 | 792 | ); |
793 | 793 | $counter = DB::count(); |
794 | 794 | $next_start = (int) $post_start + (int) $post_length; |
@@ -854,7 +854,7 @@ discard block |
||
854 | 854 | // get user info |
855 | 855 | $userInfo = DB::queryFirstRow( |
856 | 856 | 'SELECT email, login, auth_type, special, lastname, name |
857 | - FROM ' . prefixTable('users') . ' |
|
857 | + FROM ' . prefixTable('users').' |
|
858 | 858 | WHERE id = %i', |
859 | 859 | $extra_arguments['new_user_id'] |
860 | 860 | ); |
@@ -869,10 +869,10 @@ discard block |
||
869 | 869 | filter_var($userInfo['email'], FILTER_SANITIZE_FULL_SPECIAL_CHARS), |
870 | 870 | // @scrutinizer ignore-type |
871 | 871 | empty($extra_arguments['email_body']) === false ? $extra_arguments['email_body'] : $lang->get('email_body_user_config_1'), |
872 | - 'TEAMPASS - ' . $lang->get('login_credentials'), |
|
872 | + 'TEAMPASS - '.$lang->get('login_credentials'), |
|
873 | 873 | (array) filter_var_array( |
874 | 874 | [ |
875 | - '#code#' => cryption($extra_arguments['new_user_code'], '','decrypt', $SETTINGS)['string'], |
|
875 | + '#code#' => cryption($extra_arguments['new_user_code'], '', 'decrypt', $SETTINGS)['string'], |
|
876 | 876 | '#lastname#' => isset($userInfo['name']) === true ? $userInfo['name'] : '', |
877 | 877 | '#login#' => isset($userInfo['login']) === true ? $userInfo['login'] : '', |
878 | 878 | ], |
@@ -73,7 +73,7 @@ discard block |
||
73 | 73 | ) { |
74 | 74 | // Not allowed page |
75 | 75 | $session->set('system-error_code', ERR_NOT_ALLOWED); |
76 | - include $SETTINGS['cpassman_dir'] . '/error.php'; |
|
76 | + include $SETTINGS['cpassman_dir'].'/error.php'; |
|
77 | 77 | exit; |
78 | 78 | } |
79 | 79 | |
@@ -106,7 +106,7 @@ discard block |
||
106 | 106 | $post_isNewItem = $request->request->filter('isNewItem', null, FILTER_SANITIZE_NUMBER_INT); |
107 | 107 | $post_randomId = $request->request->filter('randomId', null, FILTER_SANITIZE_NUMBER_INT); |
108 | 108 | $post_isPersonal = $request->request->filter('isPersonal', null, FILTER_SANITIZE_NUMBER_INT); |
109 | -$post_fileSize= $request->request->filter('file_size', null, FILTER_SANITIZE_NUMBER_INT); |
|
109 | +$post_fileSize = $request->request->filter('file_size', null, FILTER_SANITIZE_NUMBER_INT); |
|
110 | 110 | $chunk = $request->request->filter('chunk', 0, FILTER_SANITIZE_NUMBER_INT); |
111 | 111 | $chunks = $request->request->filter('chunks', 0, FILTER_SANITIZE_NUMBER_INT); |
112 | 112 | $fileName = $request->request->filter('name', '', FILTER_SANITIZE_FULL_SPECIAL_CHARS); |
@@ -165,7 +165,7 @@ discard block |
||
165 | 165 | // check if token is expired |
166 | 166 | $data = DB::queryFirstRow( |
167 | 167 | 'SELECT end_timestamp |
168 | - FROM ' . prefixTable('tokens') . ' |
|
168 | + FROM ' . prefixTable('tokens').' |
|
169 | 169 | WHERE user_id = %i AND token = %s', |
170 | 170 | $session->get('user-id'), |
171 | 171 | $post_user_token |
@@ -198,7 +198,7 @@ discard block |
||
198 | 198 | |
199 | 199 | // HTTP headers for no cache etc |
200 | 200 | header('Expires: Mon, 26 Jul 1997 05:00:00 GMT'); |
201 | -header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT'); |
|
201 | +header('Last-Modified: '.gmdate('D, d M Y H:i:s').' GMT'); |
|
202 | 202 | header('Cache-Control: no-store, no-cache, must-revalidate'); |
203 | 203 | header('Cache-Control: post-check=0, pre-check=0', false); |
204 | 204 | |
@@ -244,7 +244,7 @@ discard block |
||
244 | 244 | // Validate file name (for our purposes we'll just remove invalid characters) |
245 | 245 | $file_name = preg_replace('[^A-Za-z0-9]', '', strtolower(basename($_FILES['file']['name']))); |
246 | 246 | if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) { |
247 | - handleAttachmentError('Invalid file name: ' . $file_name . '.', 114); |
|
247 | + handleAttachmentError('Invalid file name: '.$file_name.'.', 114); |
|
248 | 248 | } |
249 | 249 | |
250 | 250 | // Validate file extension |
@@ -254,8 +254,8 @@ discard block |
||
254 | 254 | $ext, |
255 | 255 | explode( |
256 | 256 | ',', |
257 | - $SETTINGS['upload_docext'] . ',' . $SETTINGS['upload_imagesext'] . |
|
258 | - ',' . $SETTINGS['upload_pkgext'] . ',' . $SETTINGS['upload_otherext'] |
|
257 | + $SETTINGS['upload_docext'].','.$SETTINGS['upload_imagesext']. |
|
258 | + ','.$SETTINGS['upload_pkgext'].','.$SETTINGS['upload_otherext'] |
|
259 | 259 | ) |
260 | 260 | ) === false |
261 | 261 | ) { |
@@ -267,24 +267,24 @@ discard block |
||
267 | 267 | |
268 | 268 | // Clean the fileName for security reasons |
269 | 269 | $fileInfo = pathinfo($fileName); |
270 | -$fileName = base64_encode($fileInfo['filename']) . '.' . $fileInfo['extension']; |
|
270 | +$fileName = base64_encode($fileInfo['filename']).'.'.$fileInfo['extension']; |
|
271 | 271 | $fileFullSize = 0; |
272 | 272 | |
273 | 273 | // Make sure the fileName is unique but only if chunking is disabled |
274 | -if ($chunks < 2 && file_exists($targetDir . DIRECTORY_SEPARATOR . $fileName)) { |
|
274 | +if ($chunks < 2 && file_exists($targetDir.DIRECTORY_SEPARATOR.$fileName)) { |
|
275 | 275 | $ext = strrpos($fileName, '.'); |
276 | 276 | $fileNameA = substr($fileName, 0, $ext); |
277 | 277 | $fileNameB = substr($fileName, $ext); |
278 | 278 | |
279 | 279 | $count = 1; |
280 | - while (file_exists($targetDir . DIRECTORY_SEPARATOR . $fileNameA . '_' . $count . $fileNameB)) { |
|
280 | + while (file_exists($targetDir.DIRECTORY_SEPARATOR.$fileNameA.'_'.$count.$fileNameB)) { |
|
281 | 281 | ++$count; |
282 | 282 | } |
283 | 283 | |
284 | - $fileName = $fileNameA . '_' . $count . $fileNameB; |
|
284 | + $fileName = $fileNameA.'_'.$count.$fileNameB; |
|
285 | 285 | } |
286 | 286 | |
287 | -$filePath = $targetDir . DIRECTORY_SEPARATOR . $fileName; |
|
287 | +$filePath = $targetDir.DIRECTORY_SEPARATOR.$fileName; |
|
288 | 288 | |
289 | 289 | // Create target dir |
290 | 290 | if (file_exists($targetDir) === false) { |
@@ -298,7 +298,7 @@ discard block |
||
298 | 298 | // Remove old temp files |
299 | 299 | if ($cleanupTargetDir && is_dir($targetDir) && ($dir = opendir($targetDir))) { |
300 | 300 | while (($file = readdir($dir)) !== false) { |
301 | - $tmpfilePath = $targetDir . DIRECTORY_SEPARATOR . $file; |
|
301 | + $tmpfilePath = $targetDir.DIRECTORY_SEPARATOR.$file; |
|
302 | 302 | |
303 | 303 | // Remove temp file if it is older than the max age and is not the current file |
304 | 304 | if ( |
@@ -420,8 +420,8 @@ discard block |
||
420 | 420 | // This is a public object |
421 | 421 | $users = DB::query( |
422 | 422 | 'SELECT id, public_key |
423 | - FROM ' . prefixTable('users') . ' |
|
424 | - WHERE id NOT IN ("' . OTV_USER_ID . '","' . SSH_USER_ID . '","' . API_USER_ID . '") |
|
423 | + FROM ' . prefixTable('users').' |
|
424 | + WHERE id NOT IN ("' . OTV_USER_ID.'","'.SSH_USER_ID.'","'.API_USER_ID.'") |
|
425 | 425 | AND public_key != ""' |
426 | 426 | ); |
427 | 427 | foreach ($users as $user) { |
@@ -459,14 +459,14 @@ discard block |
||
459 | 459 | 'date' => time(), |
460 | 460 | 'id_user' => $session->get('user-id'), |
461 | 461 | 'action' => 'at_modification', |
462 | - 'raison' => 'at_add_file : ' . $fileName . ':' . $newID, |
|
462 | + 'raison' => 'at_add_file : '.$fileName.':'.$newID, |
|
463 | 463 | ) |
464 | 464 | ); |
465 | 465 | } |
466 | 466 | } |
467 | 467 | |
468 | 468 | // Return JSON-RPC response |
469 | -die('{"jsonrpc" : "2.0", "result" : null, "id" : "' . $newID . '"}'); |
|
469 | +die('{"jsonrpc" : "2.0", "result" : null, "id" : "'.$newID.'"}'); |
|
470 | 470 | |
471 | 471 | /** |
472 | 472 | * Handle errors and kill script. |
@@ -482,7 +482,7 @@ discard block |
||
482 | 482 | http_response_code($http_code); |
483 | 483 | |
484 | 484 | // json error message |
485 | - echo '{"jsonrpc" : "2.0", "error" : {"code": ' . htmlentities((string) $code, ENT_QUOTES) . ', "message": "' . htmlentities((string) $message, ENT_QUOTES) . '"}, "id" : "id"}'; |
|
485 | + echo '{"jsonrpc" : "2.0", "error" : {"code": '.htmlentities((string) $code, ENT_QUOTES).', "message": "'.htmlentities((string) $message, ENT_QUOTES).'"}, "id" : "id"}'; |
|
486 | 486 | |
487 | 487 | // Force exit to avoid bypass filters. |
488 | 488 | exit; |
@@ -239,7 +239,7 @@ |
||
239 | 239 | $configManager = new ConfigManager(); |
240 | 240 | $SETTINGS = $configManager->getAllSettings(); |
241 | 241 | |
242 | - $payload = [ |
|
242 | + $payload = [ |
|
243 | 243 | 'username' => $login, |
244 | 244 | 'id' => $id, |
245 | 245 | 'exp' => (time() + $SETTINGS['api_token_duration'] + 600), |
@@ -49,7 +49,7 @@ discard block |
||
49 | 49 | public function getUserAuth(string $login, string $password, string $apikey): array |
50 | 50 | { |
51 | 51 | // Sanitize |
52 | - include_once API_ROOT_PATH . '/../sources/main.functions.php'; |
|
52 | + include_once API_ROOT_PATH.'/../sources/main.functions.php'; |
|
53 | 53 | $inputData = dataSanitizer( |
54 | 54 | [ |
55 | 55 | 'login' => isset($login) === true ? $login : '', |
@@ -74,8 +74,8 @@ discard block |
||
74 | 74 | // Check if user exists |
75 | 75 | $userInfo = DB::queryfirstrow( |
76 | 76 | "SELECT u.id, u.pw, u.login, u.admin, u.gestionnaire, u.can_manage_all_users, u.fonction_id, u.can_create_root_folder, u.public_key, u.private_key, u.personal_folder, u.fonction_id, u.groupes_visibles, u.groupes_interdits, a.value AS user_api_key, a.allowed_folders as user_api_allowed_folders, a.enabled, a.allowed_to_create, a.allowed_to_read, a.allowed_to_update, a.allowed_to_delete |
77 | - FROM " . prefixTable('users') . " AS u |
|
78 | - INNER JOIN " . prefixTable('api') . " AS a ON (a.user_id=u.id) |
|
77 | + FROM " . prefixTable('users')." AS u |
|
78 | + INNER JOIN " . prefixTable('api')." AS a ON (a.user_id=u.id) |
|
79 | 79 | WHERE login = %s", |
80 | 80 | $inputData['login'] |
81 | 81 | ); |
@@ -251,7 +251,7 @@ discard block |
||
251 | 251 | if (count($userFunctionId) > 0) { |
252 | 252 | $rows = DB::query( |
253 | 253 | 'SELECT * |
254 | - FROM ' . prefixTable('roles_values') . ' |
|
254 | + FROM ' . prefixTable('roles_values').' |
|
255 | 255 | WHERE role_id IN %li AND type IN ("W", "ND", "NE", "NDNE", "R")', |
256 | 256 | $userFunctionId |
257 | 257 | ); |
@@ -277,7 +277,7 @@ discard block |
||
277 | 277 | $inc = 0; |
278 | 278 | $rows = DB::query( |
279 | 279 | 'SELECT id, id_tree |
280 | - FROM ' . prefixTable('items') . ' |
|
280 | + FROM ' . prefixTable('items').' |
|
281 | 281 | WHERE restricted_to LIKE %s'. |
282 | 282 | (count($userFunctionId) > 0 ? ' AND id_tree NOT IN %li' : ''), |
283 | 283 | $userInfo['id'], |
@@ -292,8 +292,8 @@ discard block |
||
292 | 292 | // Check for the users roles if some specific rights exist on items |
293 | 293 | $rows = DB::query( |
294 | 294 | 'SELECT i.id_tree, r.item_id |
295 | - FROM ' . prefixTable('items') . ' AS i |
|
296 | - INNER JOIN ' . prefixTable('restriction_to_roles') . ' AS r ON (r.item_id=i.id) |
|
295 | + FROM ' . prefixTable('items').' AS i |
|
296 | + INNER JOIN ' . prefixTable('restriction_to_roles').' AS r ON (r.item_id=i.id) |
|
297 | 297 | WHERE '.(count($userFunctionId) > 0 ? ' id_tree NOT IN %li AND ' : '').' i.id_tree != "" |
298 | 298 | ORDER BY i.id_tree ASC', |
299 | 299 | count($userFunctionId) > 0 ? $userFunctionId : DB::sqleval('0') |
@@ -309,7 +309,7 @@ discard block |
||
309 | 309 | // Add all personal folders |
310 | 310 | $rows = DB::queryFirstRow( |
311 | 311 | 'SELECT id |
312 | - FROM ' . prefixTable('nested_tree') . ' |
|
312 | + FROM ' . prefixTable('nested_tree').' |
|
313 | 313 | WHERE title = %i AND personal_folder = 1'. |
314 | 314 | (count($userFunctionId) > 0 ? ' AND id NOT IN %li' : ''), |
315 | 315 | $userInfo['id'], |
@@ -25,18 +25,18 @@ discard block |
||
25 | 25 | |
26 | 26 | use TeampassClasses\ConfigManager\ConfigManager; |
27 | 27 | |
28 | -define("API_ROOT_PATH", __DIR__ . "/.."); |
|
28 | +define("API_ROOT_PATH", __DIR__."/.."); |
|
29 | 29 | |
30 | 30 | // include main configuration file |
31 | -require API_ROOT_PATH . '/../sources/main.functions.php'; |
|
31 | +require API_ROOT_PATH.'/../sources/main.functions.php'; |
|
32 | 32 | |
33 | 33 | // include the base controller file |
34 | -require API_ROOT_PATH . "/Controller/Api/BaseController.php"; |
|
34 | +require API_ROOT_PATH."/Controller/Api/BaseController.php"; |
|
35 | 35 | |
36 | 36 | // include the use model file |
37 | -require API_ROOT_PATH . "/Model/UserModel.php"; |
|
38 | -require API_ROOT_PATH . "/Model/ItemModel.php"; |
|
39 | -require API_ROOT_PATH . "/Model/FolderModel.php"; |
|
37 | +require API_ROOT_PATH."/Model/UserModel.php"; |
|
38 | +require API_ROOT_PATH."/Model/ItemModel.php"; |
|
39 | +require API_ROOT_PATH."/Model/FolderModel.php"; |
|
40 | 40 | |
41 | 41 | /** |
42 | 42 | * Launch expected action for ITEM |
@@ -55,9 +55,9 @@ discard block |
||
55 | 55 | ); |
56 | 56 | } |
57 | 57 | // Perform the action |
58 | - require API_ROOT_PATH . "/Controller/Api/ItemController.php"; |
|
58 | + require API_ROOT_PATH."/Controller/Api/ItemController.php"; |
|
59 | 59 | $objFeedController = new ItemController(); |
60 | - $strMethodName = $actions[0] . 'Action'; |
|
60 | + $strMethodName = $actions[0].'Action'; |
|
61 | 61 | $objFeedController->{$strMethodName}($userData); |
62 | 62 | } |
63 | 63 | |
@@ -78,9 +78,9 @@ discard block |
||
78 | 78 | ); |
79 | 79 | } |
80 | 80 | // Perform the action |
81 | - require API_ROOT_PATH . "/Controller/Api/FolderController.php"; |
|
81 | + require API_ROOT_PATH."/Controller/Api/FolderController.php"; |
|
82 | 82 | $objFeedController = new FolderController(); |
83 | - $strMethodName = $actions[0] . 'Action'; |
|
83 | + $strMethodName = $actions[0].'Action'; |
|
84 | 84 | $objFeedController->{$strMethodName}($userData); |
85 | 85 | } |
86 | 86 | |
@@ -137,7 +137,7 @@ discard block |
||
137 | 137 | */ |
138 | 138 | function verifyAuth(): string |
139 | 139 | { |
140 | - include_once API_ROOT_PATH . '/inc/jwt_utils.php'; |
|
140 | + include_once API_ROOT_PATH.'/inc/jwt_utils.php'; |
|
141 | 141 | $bearer_token = get_bearer_token(); |
142 | 142 | |
143 | 143 | if (empty($bearer_token) === false && is_jwt_valid($bearer_token) === true) { |
@@ -167,7 +167,7 @@ discard block |
||
167 | 167 | */ |
168 | 168 | function getDataFromToken(): string |
169 | 169 | { |
170 | - include_once API_ROOT_PATH . '/inc/jwt_utils.php'; |
|
170 | + include_once API_ROOT_PATH.'/inc/jwt_utils.php'; |
|
171 | 171 | $bearer_token = get_bearer_token(); |
172 | 172 | |
173 | 173 | if (empty($bearer_token) === false) { |