@@ -80,13 +80,13 @@ discard block |
||
80 | 80 | */ |
81 | 81 | public function __construct(session_helper_interface $session_helper, user $user, request_interface $request, driver_interface $db, template $template, config $config, $php_ext, $root_path) |
82 | 82 | { |
83 | - $this->session_helper = $session_helper; |
|
84 | - $this->user = $user; |
|
85 | - $this->request = $request; |
|
86 | - $this->config = $config; |
|
87 | - $this->db = $db; |
|
83 | + $this->session_helper = $session_helper; |
|
84 | + $this->user = $user; |
|
85 | + $this->request = $request; |
|
86 | + $this->config = $config; |
|
87 | + $this->db = $db; |
|
88 | 88 | $this->template = $template; |
89 | - $this->php_ext = $php_ext; |
|
89 | + $this->php_ext = $php_ext; |
|
90 | 90 | $this->root_path = $root_path; |
91 | 91 | } |
92 | 92 | |
@@ -137,7 +137,7 @@ discard block |
||
137 | 137 | if ($this->user->data['is_bot'] == false && $this->user->data['user_id'] != ANONYMOUS && $this->session_helper->is_tfa_required($this->user->data['user_id'], false, $this->user->data) && !$this->session_helper->is_tfa_registered($this->user->data['user_id'])) |
138 | 138 | { |
139 | 139 | @define('SKIP_CHECK_DISABLED', true); |
140 | - if ($this->user->page['page_name'] === 'memberlist.' . $this->php_ext && $this->request->variable('mode', '') == 'contactadmin') |
|
140 | + if ($this->user->page['page_name'] === 'memberlist.'.$this->php_ext && $this->request->variable('mode', '') == 'contactadmin') |
|
141 | 141 | { |
142 | 142 | // We are at the contact admin page. We will allow this in all cases. |
143 | 143 | return; |
@@ -145,19 +145,19 @@ discard block |
||
145 | 145 | |
146 | 146 | $this->user->set_cookie('rn', $this->user->data['session_id'], time() + 3600 * 24, true); |
147 | 147 | |
148 | - $msg_title = $this->user->lang['INFORMATION']; |
|
148 | + $msg_title = $this->user->lang['INFORMATION']; |
|
149 | 149 | if ($this->session_helper->is_tfa_key_registred($this->user->data['user_id'])) |
150 | 150 | { |
151 | 151 | // the user has keys registered, but they are not usable (Might be due to browser requirements, or others) |
152 | 152 | // We will not allow them to register a new key. They will need to contact the admin instead unfortunately. |
153 | 153 | $this->user->add_lang_ext('paul999/tfa', 'common'); |
154 | 154 | $url = phpbb_get_board_contact_link($this->config, $this->root_path, $this->php_ext); |
155 | - $msg_text = $this->user->lang('TFA_REQUIRED_KEY_AVAILABLE_BUT_UNUSABLE', '<a href="' . $url . '">', '</a>'); |
|
155 | + $msg_text = $this->user->lang('TFA_REQUIRED_KEY_AVAILABLE_BUT_UNUSABLE', '<a href="'.$url.'">', '</a>'); |
|
156 | 156 | $this->user->session_kill(); |
157 | 157 | $this->generate_fatal_error($msg_title, $msg_text); |
158 | 158 | } |
159 | 159 | |
160 | - $sql = 'SELECT module_id FROM ' . MODULES_TABLE . " WHERE module_langname = 'UCP_TFA' OR module_langname = 'UCP_TFA_MANAGE'"; |
|
160 | + $sql = 'SELECT module_id FROM '.MODULES_TABLE." WHERE module_langname = 'UCP_TFA' OR module_langname = 'UCP_TFA_MANAGE'"; |
|
161 | 161 | $result = $this->db->sql_query($sql, 3600); |
162 | 162 | $allowed_i = array(); |
163 | 163 | |
@@ -169,19 +169,19 @@ discard block |
||
169 | 169 | $ucp_mode = '-paul999-tfa-ucp-tfa_module'; |
170 | 170 | $allowed_i[] = $ucp_mode; |
171 | 171 | |
172 | - if ($this->user->page['page_name'] === 'ucp.' . $this->php_ext && in_array($this->request->variable('i', ''), $allowed_i)) |
|
172 | + if ($this->user->page['page_name'] === 'ucp.'.$this->php_ext && in_array($this->request->variable('i', ''), $allowed_i)) |
|
173 | 173 | { |
174 | 174 | return; // We are at our UCP page, so skip any other checks. This page is always available |
175 | 175 | } |
176 | 176 | $this->user->add_lang_ext('paul999/tfa', 'common'); |
177 | 177 | $url = append_sid("{$this->root_path}ucp.{$this->php_ext}", "i={$ucp_mode}"); |
178 | - $msg_text = $this->user->lang('TFA_REQUIRED_KEY_MISSING', '<a href="' . $url . '">', '</a>'); |
|
178 | + $msg_text = $this->user->lang('TFA_REQUIRED_KEY_MISSING', '<a href="'.$url.'">', '</a>'); |
|
179 | 179 | |
180 | 180 | $this->generate_fatal_error($msg_title, $msg_text); |
181 | 181 | } |
182 | 182 | |
183 | 183 | // If the user had no key when logged in, but now has a key, we will force him to use the key. |
184 | - if ($this->user->data['is_bot'] == false && $this->user->data['user_id'] != ANONYMOUS && $this->request->variable($this->config['cookie_name'] . '_rn', '', false, request_interface::COOKIE) !== '' && $this->session_helper->is_tfa_required($this->user->data['user_id'], false, $this->user->data)) |
|
184 | + if ($this->user->data['is_bot'] == false && $this->user->data['user_id'] != ANONYMOUS && $this->request->variable($this->config['cookie_name'].'_rn', '', false, request_interface::COOKIE) !== '' && $this->session_helper->is_tfa_required($this->user->data['user_id'], false, $this->user->data)) |
|
185 | 185 | { |
186 | 186 | $this->session_helper->generate_page($this->user->data['user_id'], false, $this->user->data['session_autologin'], $this->user->data['session_viewonline'], $this->user->page['page'], true); |
187 | 187 | } |
@@ -81,14 +81,14 @@ discard block |
||
81 | 81 | */ |
82 | 82 | public function __construct(driver_interface $db, template $template, user $user, request_interface $request, log $log, session_helper_interface $session_helper, $root_path, $php_ext) |
83 | 83 | { |
84 | - $this->template = $template; |
|
85 | - $this->db = $db; |
|
86 | - $this->user = $user; |
|
84 | + $this->template = $template; |
|
85 | + $this->db = $db; |
|
86 | + $this->user = $user; |
|
87 | 87 | $this->request = $request; |
88 | - $this->session_helper = $session_helper; |
|
89 | - $this->root_path = $root_path; |
|
88 | + $this->session_helper = $session_helper; |
|
89 | + $this->root_path = $root_path; |
|
90 | 90 | $this->php_ext = $php_ext; |
91 | - $this->log = $log; |
|
91 | + $this->log = $log; |
|
92 | 92 | } |
93 | 93 | |
94 | 94 | /** |
@@ -123,9 +123,9 @@ discard block |
||
123 | 123 | 'tfa_random' => '', |
124 | 124 | 'tfa_uid' => 0, |
125 | 125 | ); |
126 | - $sql = 'UPDATE ' . SESSIONS_TABLE . ' SET ' . $this->db->sql_build_array('UPDATE', $sql_ary) . " |
|
126 | + $sql = 'UPDATE '.SESSIONS_TABLE.' SET '.$this->db->sql_build_array('UPDATE', $sql_ary)." |
|
127 | 127 | WHERE |
128 | - session_id = '" . $this->db->sql_escape($this->user->data['session_id']) . "' AND |
|
128 | + session_id = '" . $this->db->sql_escape($this->user->data['session_id'])."' AND |
|
129 | 129 | session_user_id = " . (int) $this->user->data['user_id']; |
130 | 130 | $this->db->sql_query($sql); |
131 | 131 | |
@@ -146,7 +146,7 @@ discard block |
||
146 | 146 | { |
147 | 147 | if (!$module->login($user_id)) |
148 | 148 | { |
149 | - $this->log->add('critical', $this->user->data['user_id'], $this->user->ip, 'LOG_TFA_EXCEPTION',false, ['TFA_INCORRECT_KEY']); |
|
149 | + $this->log->add('critical', $this->user->data['user_id'], $this->user->ip, 'LOG_TFA_EXCEPTION', false, ['TFA_INCORRECT_KEY']); |
|
150 | 150 | $this->template->assign_var('S_ERROR', $this->user->lang('TFA_INCORRECT_KEY')); |
151 | 151 | $this->session_helper->generate_page($user_id, $admin, $auto_login, $viewonline, $redirect); |
152 | 152 | } |
@@ -190,8 +190,8 @@ discard block |
||
190 | 190 | if ($admin) |
191 | 191 | { |
192 | 192 | // the login array is used because the user ids do not differ for re-authentication |
193 | - $sql = 'DELETE FROM ' . SESSIONS_TABLE . " |
|
194 | - WHERE session_id = '" . $this->db->sql_escape($old_session_id) . "' |
|
193 | + $sql = 'DELETE FROM '.SESSIONS_TABLE." |
|
194 | + WHERE session_id = '" . $this->db->sql_escape($old_session_id)."' |
|
195 | 195 | AND session_user_id = " . (int) $user_id; |
196 | 196 | $this->db->sql_query($sql); |
197 | 197 |
@@ -88,14 +88,14 @@ discard block |
||
88 | 88 | */ |
89 | 89 | public function __construct(driver_interface $db, config $config, user $user, service_collection $modules, template $template, helper $controller_helper, $registration_table, $user_table) |
90 | 90 | { |
91 | - $this->db = $db; |
|
92 | - $this->user = $user; |
|
93 | - $this->config = $config; |
|
94 | - $this->template = $template; |
|
91 | + $this->db = $db; |
|
92 | + $this->user = $user; |
|
93 | + $this->config = $config; |
|
94 | + $this->template = $template; |
|
95 | 95 | $this->controller_helper = $controller_helper; |
96 | 96 | $this->registration_table = $registration_table; |
97 | - $this->user_table = $user_table; |
|
98 | - $this->module_data = $modules; |
|
97 | + $this->user_table = $user_table; |
|
98 | + $this->module_data = $modules; |
|
99 | 99 | } |
100 | 100 | |
101 | 101 | /** |
@@ -283,9 +283,9 @@ discard block |
||
283 | 283 | 'tfa_random' => $random, |
284 | 284 | 'tfa_uid' => $user_id, |
285 | 285 | ); |
286 | - $sql = 'UPDATE ' . SESSIONS_TABLE . ' SET ' . $this->db->sql_build_array('UPDATE', $sql_ary) . " |
|
286 | + $sql = 'UPDATE '.SESSIONS_TABLE.' SET '.$this->db->sql_build_array('UPDATE', $sql_ary)." |
|
287 | 287 | WHERE |
288 | - session_id = '" . $this->db->sql_escape($this->user->data['session_id']) . "' AND |
|
288 | + session_id = '" . $this->db->sql_escape($this->user->data['session_id'])."' AND |
|
289 | 289 | session_user_id = " . (int) $this->user->data['user_id']; |
290 | 290 | $this->db->sql_query($sql); |
291 | 291 | |
@@ -314,7 +314,7 @@ discard block |
||
314 | 314 | { |
315 | 315 | if (empty($userdata)) |
316 | 316 | { |
317 | - $sql = 'SELECT * FROM ' . $this->user_table . ' WHERE user_id = ' . (int) $user_id; |
|
317 | + $sql = 'SELECT * FROM '.$this->user_table.' WHERE user_id = '.(int) $user_id; |
|
318 | 318 | $result = $this->db->sql_query($sql); |
319 | 319 | $userdata = $this->db->sql_fetchrow($result); |
320 | 320 | $this->db->sql_freeresult($result); |
@@ -59,16 +59,16 @@ discard block |
||
59 | 59 | $this->user = $user; |
60 | 60 | $this->request = $request; |
61 | 61 | $this->template = $template; |
62 | - $this->root_path= $root_path; |
|
62 | + $this->root_path = $root_path; |
|
63 | 63 | |
64 | - $this->registration_table = $registration_table; |
|
64 | + $this->registration_table = $registration_table; |
|
65 | 65 | } |
66 | 66 | |
67 | 67 | private function getU2f() |
68 | 68 | { |
69 | 69 | if (empty($this->u2f)) |
70 | 70 | { |
71 | - $this->u2f = new \paul999\u2f\U2F('https://' . $this->request->server('HTTP_HOST')); |
|
71 | + $this->u2f = new \paul999\u2f\U2F('https://'.$this->request->server('HTTP_HOST')); |
|
72 | 72 | } |
73 | 73 | return $this->u2f; |
74 | 74 | } |
@@ -212,9 +212,9 @@ discard block |
||
212 | 212 | try |
213 | 213 | { |
214 | 214 | $sql = 'SELECT u2f_request |
215 | - FROM ' . SESSIONS_TABLE . " |
|
215 | + FROM ' . SESSIONS_TABLE." |
|
216 | 216 | WHERE |
217 | - session_id = '" . $this->db->sql_escape($this->user->data['session_id']) . "' AND |
|
217 | + session_id = '" . $this->db->sql_escape($this->user->data['session_id'])."' AND |
|
218 | 218 | session_user_id = " . (int) $this->user->data['user_id']; |
219 | 219 | $result = $this->db->sql_query($sql); |
220 | 220 | $row = $this->db->sql_fetchrow($result); |
@@ -244,7 +244,7 @@ discard block |
||
244 | 244 | 'last_used' => time(), |
245 | 245 | ); |
246 | 246 | |
247 | - $sql = 'UPDATE ' . $this->registration_table . ' SET ' . $this->db->sql_build_array('UPDATE', $sql_ary) . ' WHERE registration_id = ' . (int) $reg->getId(); |
|
247 | + $sql = 'UPDATE '.$this->registration_table.' SET '.$this->db->sql_build_array('UPDATE', $sql_ary).' WHERE registration_id = '.(int) $reg->getId(); |
|
248 | 248 | $this->db->sql_query($sql); |
249 | 249 | |
250 | 250 | return true; |
@@ -341,7 +341,7 @@ discard block |
||
341 | 341 | 'last_used' => time(), |
342 | 342 | ); |
343 | 343 | |
344 | - $sql = 'INSERT INTO ' . $this->registration_table . ' ' . $this->db->sql_build_array('INSERT', $sql_ary); |
|
344 | + $sql = 'INSERT INTO '.$this->registration_table.' '.$this->db->sql_build_array('INSERT', $sql_ary); |
|
345 | 345 | $this->db->sql_query($sql); |
346 | 346 | |
347 | 347 | $sql_ary = array( |
@@ -373,8 +373,8 @@ discard block |
||
373 | 373 | */ |
374 | 374 | public function delete($key) |
375 | 375 | { |
376 | - $sql = 'DELETE FROM ' . $this->registration_table . ' |
|
377 | - WHERE user_id = ' . (int) $this->user->data['user_id'] . ' |
|
376 | + $sql = 'DELETE FROM '.$this->registration_table.' |
|
377 | + WHERE user_id = ' . (int) $this->user->data['user_id'].' |
|
378 | 378 | AND registration_id =' . (int) $key; |
379 | 379 | |
380 | 380 | $this->db->sql_query($sql); |
@@ -416,7 +416,7 @@ discard block |
||
416 | 416 | */ |
417 | 417 | private function getRegistrations($user_id) |
418 | 418 | { |
419 | - $sql = 'SELECT * FROM ' . $this->registration_table . ' WHERE user_id = ' . (int) $user_id; |
|
419 | + $sql = 'SELECT * FROM '.$this->registration_table.' WHERE user_id = '.(int) $user_id; |
|
420 | 420 | $result = $this->db->sql_query($sql); |
421 | 421 | $rows = array(); |
422 | 422 | |
@@ -504,9 +504,9 @@ discard block |
||
504 | 504 | */ |
505 | 505 | private function update_session($sql_ary) |
506 | 506 | { |
507 | - $sql = 'UPDATE ' . SESSIONS_TABLE . ' SET ' . $this->db->sql_build_array('UPDATE', $sql_ary) . " |
|
507 | + $sql = 'UPDATE '.SESSIONS_TABLE.' SET '.$this->db->sql_build_array('UPDATE', $sql_ary)." |
|
508 | 508 | WHERE |
509 | - session_id = '" . $this->db->sql_escape($this->user->data['session_id']) . "' AND |
|
509 | + session_id = '" . $this->db->sql_escape($this->user->data['session_id'])."' AND |
|
510 | 510 | session_user_id = " . (int) $this->user->data['user_id']; |
511 | 511 | $this->db->sql_query($sql); |
512 | 512 |