This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | class Calendar extends ViewableData |
||
4 | { |
||
5 | |||
6 | // Static |
||
7 | |||
8 | private static $names = array(); |
||
9 | |||
10 | public static $session_calendars = 'Calendars'; |
||
11 | |||
12 | // Attributes |
||
13 | |||
14 | protected $controller; |
||
15 | |||
16 | protected $name; |
||
17 | |||
18 | protected $initDone = false; |
||
19 | |||
20 | protected $views = array(); |
||
21 | |||
22 | protected $view; |
||
23 | |||
24 | protected $year; |
||
25 | protected $month; |
||
26 | protected $day; |
||
27 | |||
28 | protected $defaultView; |
||
29 | protected $defaultYear; |
||
30 | protected $defaultMonth; |
||
31 | protected $defaultDay; |
||
32 | |||
33 | protected $sessionMode = false; |
||
34 | |||
35 | protected $navigationBarTemplate; |
||
36 | protected $viewBarTemplate; |
||
37 | |||
38 | // Constructor |
||
39 | |||
40 | public function __construct($controller, $name, $views = null) |
||
41 | { |
||
42 | parent::__construct(); |
||
43 | |||
44 | // 1) Controller Setting |
||
45 | |||
46 | $this->controller = $controller; |
||
47 | |||
48 | // 2) Name Setting |
||
49 | |||
50 | View Code Duplication | if (is_string($name)) { |
|
51 | if (! in_array($name, self::$names)) { |
||
52 | $this->name = $name; |
||
53 | self::$names[] = $name; |
||
54 | } else { |
||
55 | user_error("Calendar::__construct() : you cannot set the \$name attribute with the value '$name' because an other calendar with this name already exists", E_USER_ERROR); |
||
56 | } |
||
57 | } else { |
||
58 | user_error('Calendar::__construct() : you cannot set the $name attribute with a non string value', E_USER_ERROR); |
||
59 | } |
||
60 | |||
61 | // 3) Views Setting |
||
62 | |||
63 | if ($views != null) { |
||
64 | $this->addViews($views); |
||
65 | } |
||
66 | } |
||
67 | |||
68 | public function initValues() |
||
69 | { |
||
70 | if ($this->initDone) { |
||
71 | return; |
||
72 | } |
||
73 | |||
74 | $sessionName = self::$session_calendars . ".$this->name"; |
||
75 | $sessionValues = Session::get($sessionName); |
||
76 | if ($sessionValues) { |
||
77 | $sessionValues = unserialize($sessionValues); |
||
78 | } |
||
79 | |||
80 | // 1) View Setting |
||
81 | |||
82 | $views = array(); |
||
83 | if (isset($_REQUEST[$this->name]['view'])) { |
||
84 | $views[] = $_REQUEST[$this->name]['view']; |
||
85 | } |
||
86 | if ($this->sessionMode && $sessionValues && isset($sessionValues['view'])) { |
||
87 | $views[] = $sessionValues['view']; |
||
88 | } |
||
89 | if ($this->defaultView) { |
||
90 | $views[] = is_a($this->defaultView, 'CalendarAbstractView') ? $this->defaultView->getName() : $this->defaultView; |
||
91 | } |
||
92 | foreach ($views as $view) { |
||
93 | $view = $this->getView($view); |
||
94 | if ($view) { |
||
95 | $this->view = $view; |
||
96 | break; |
||
97 | } |
||
98 | } |
||
99 | if (! $this->view) { |
||
100 | if (count($this->views) > 0) { |
||
101 | $this->view = $this->views[0]; |
||
102 | } else { |
||
103 | return; |
||
104 | } |
||
105 | } |
||
106 | |||
107 | // 2) Year Setting |
||
108 | |||
109 | $years = array(); |
||
110 | View Code Duplication | if (isset($_REQUEST[$this->name]['year'])) { |
|
111 | $years[] = $_REQUEST[$this->name]['year']; |
||
112 | } |
||
113 | View Code Duplication | if ($this->sessionMode && $sessionValues && isset($sessionValues['year'])) { |
|
114 | $years[] = $sessionValues['year']; |
||
115 | } |
||
116 | if ($this->defaultYear) { |
||
117 | $years[] = $this->defaultYear; |
||
118 | } |
||
119 | foreach ($years as $year) { |
||
120 | if (is_numeric($year) && is_int($year + 0) && $year >= 1) { |
||
121 | $this->year = $year; |
||
122 | break; |
||
123 | } |
||
124 | } |
||
125 | if (! $this->year) { |
||
126 | $this->year = date('Y'); |
||
127 | } |
||
128 | |||
129 | // 3) Month Setting |
||
130 | |||
131 | if ($this->view->needsMonth()) { |
||
132 | $months = array(); |
||
133 | if (isset($_REQUEST[$this->name]['month'])) { |
||
134 | $months[] = $_REQUEST[$this->name]['month']; |
||
135 | } |
||
136 | if ($this->sessionMode && $sessionValues && isset($sessionValues['month'])) { |
||
137 | $months[] = $sessionValues['month']; |
||
138 | } |
||
139 | if ($this->defaultMonth) { |
||
140 | $months[] = $this->defaultMonth; |
||
141 | } |
||
142 | foreach ($months as $month) { |
||
143 | if (is_numeric($month) && is_int($month + 0)) { |
||
144 | if ($month >= 1 && $month <= 12) { |
||
145 | $this->month = $month; |
||
146 | } elseif ($month < 1) { |
||
147 | $this->year = $this->year > 1 ? $this->year - 1 : date('Y'); |
||
148 | $this->month = 12; |
||
149 | } else { |
||
150 | $this->year++; |
||
151 | $this->month = 1; |
||
152 | } |
||
153 | break; |
||
154 | } |
||
155 | } |
||
156 | if (! $this->month) { |
||
157 | $this->month = date('n'); |
||
158 | } |
||
159 | } |
||
160 | |||
161 | // 4) Day Setting |
||
162 | |||
163 | if ($this->view->needsDay()) { |
||
164 | View Code Duplication | if (isset($_REQUEST[$this->name]['day'])) { |
|
165 | $days[] = $_REQUEST[$this->name]['day']; |
||
0 ignored issues
–
show
|
|||
166 | } |
||
167 | View Code Duplication | if ($this->sessionMode && $sessionValues && isset($sessionValues['day'])) { |
|
168 | $days[] = $sessionValues['day']; |
||
169 | } |
||
170 | if ($this->defaultDay) { |
||
171 | $days[] = $this->defaultDay; |
||
172 | } |
||
173 | $days[] = date('j'); |
||
174 | foreach ($days as $day) { |
||
175 | if (is_numeric($day) && is_int($day + 0)) { |
||
176 | if ($day >= 1 && $day <= 28) { |
||
177 | $this->day = $day; |
||
178 | } elseif ($day < 1) { |
||
179 | if ($this->month == 1) { |
||
180 | $this->year = $this->year > 1 ? $this->year - 1 : date('Y'); |
||
181 | $this->month = 12; |
||
182 | } else { |
||
183 | $this->month--; |
||
184 | } |
||
185 | $dayAfter = mktime(0, 0, 0, $this->month + 1, 1, $this->year); |
||
186 | $this->day = date('j', mktime(0, 0, 0, date('n', $dayAfter), date('j', $dayAfter) - 1, date('Y', $dayAfter))); |
||
187 | } else { |
||
188 | $date = mktime(0, 0, 0, $this->month, $day, $this->year); |
||
189 | if (date('n', $date) == $this->month && date('j', $date) == $day && date('Y', $date) == $this->year) { |
||
190 | $this->day = $day; |
||
191 | } else { |
||
192 | if ($this->month == 12) { |
||
193 | $this->year++; |
||
194 | $this->month = 1; |
||
195 | } else { |
||
196 | $this->month++; |
||
197 | } |
||
198 | $this->day = 1; |
||
199 | } |
||
200 | } |
||
201 | break; |
||
202 | } |
||
203 | } |
||
204 | } |
||
205 | |||
206 | $this->initDone = true; |
||
207 | |||
208 | // Session Mode |
||
209 | |||
210 | if ($this->sessionMode) { |
||
211 | list($sessionValues, $title) = $this->view->viewLinkParamsAndTitle($this); |
||
212 | $sessionValues = array_merge(array('view' => $this->view->getName()), $sessionValues); |
||
213 | $sessionValues = serialize($sessionValues); |
||
214 | Session::set($sessionName, $sessionValues); |
||
215 | } else { |
||
216 | Session::clear($sessionName); |
||
217 | } |
||
218 | |||
219 | // Css Requirements |
||
220 | Requirements::javascript(SAPPHIRE_DIR .'/thirdparty/jquery/jquery.js'); |
||
221 | Requirements::javascript('calendar/javascript/Calendar.js'); |
||
222 | Requirements::themedCSS('calendar', 'calendar'); |
||
223 | } |
||
224 | |||
225 | // Field Functions |
||
226 | |||
227 | View Code Duplication | public function addViews($views) |
|
228 | { |
||
229 | if (! is_array($views)) { |
||
230 | $views = array($views); |
||
231 | } |
||
232 | foreach ($views as $view) { |
||
233 | if (is_a($view, 'CalendarAbstractView')) { |
||
234 | if (! in_array($view, $this->views)) { |
||
235 | $this->views[] = $view; |
||
236 | } |
||
237 | } else { |
||
238 | user_error('Calendar::addViews() : you cannot add a view which class does not extend \'CalendarAbstractView\'', E_USER_ERROR); |
||
239 | } |
||
240 | } |
||
241 | } |
||
242 | |||
243 | private function getView($viewName) |
||
244 | { |
||
245 | foreach ($this->views as $view) { |
||
246 | if ($view->getName() == $viewName) { |
||
247 | return $view; |
||
248 | } |
||
249 | } |
||
250 | } |
||
251 | |||
252 | View Code Duplication | public function removeViews($views) |
|
253 | { |
||
254 | if (! is_array($views)) { |
||
255 | $views = array($views); |
||
256 | } |
||
257 | foreach ($views as $view) { |
||
258 | if (is_a($view, 'CalendarAbstractView')) { |
||
259 | $index = array_search($view, $this->views); |
||
260 | if ($index) { |
||
261 | unset($this->views[$index]); |
||
262 | } |
||
263 | } else { |
||
264 | user_error('Calendar::removeViews() : you cannot remove a view which class does not extend \'CalendarAbstractView\'', E_USER_ERROR); |
||
265 | } |
||
266 | } |
||
267 | } |
||
268 | |||
269 | public function forTemplate() |
||
270 | { |
||
271 | $this->initValues(); |
||
272 | if ($this->view) { |
||
273 | return $this->view->showCalendar($this); |
||
274 | } |
||
275 | } |
||
276 | |||
277 | public function NavigationBar() |
||
278 | { |
||
279 | if ($this->navigationBarTemplate) { |
||
280 | $templates[] = $this->navigationBarTemplate; |
||
0 ignored issues
–
show
Coding Style
Comprehensibility
introduced
by
$templates was never initialized. Although not strictly required by PHP, it is generally a good practice to add $templates = array(); before regardless.
Adding an explicit array definition is generally preferable to implicit array definition as it guarantees a stable state of the code. Let’s take a look at an example: foreach ($collection as $item) {
$myArray['foo'] = $item->getFoo();
if ($item->hasBar()) {
$myArray['bar'] = $item->getBar();
}
// do something with $myArray
}
As you can see in this example, the array This might or might not be intended. To make your intention clear, your code more readible and to avoid accidental bugs, we recommend to add an explicit initialization $myArray = array() either outside or inside the foreach loop. ![]() |
|||
281 | } |
||
282 | $templates[] = 'CalendarNavigationBar'; |
||
283 | return $this->renderWith($templates); |
||
284 | } |
||
285 | |||
286 | public function ViewBar() |
||
287 | { |
||
288 | if ($this->viewBarTemplate) { |
||
289 | $templates[] = $this->viewBarTemplate; |
||
0 ignored issues
–
show
Coding Style
Comprehensibility
introduced
by
$templates was never initialized. Although not strictly required by PHP, it is generally a good practice to add $templates = array(); before regardless.
Adding an explicit array definition is generally preferable to implicit array definition as it guarantees a stable state of the code. Let’s take a look at an example: foreach ($collection as $item) {
$myArray['foo'] = $item->getFoo();
if ($item->hasBar()) {
$myArray['bar'] = $item->getBar();
}
// do something with $myArray
}
As you can see in this example, the array This might or might not be intended. To make your intention clear, your code more readible and to avoid accidental bugs, we recommend to add an explicit initialization $myArray = array() either outside or inside the foreach loop. ![]() |
|||
290 | } |
||
291 | $templates[] = 'CalendarViewBar'; |
||
292 | return $this->renderWith($templates); |
||
293 | } |
||
294 | |||
295 | public function ID() |
||
296 | { |
||
297 | return "{$this->class}_{$this->name}"; |
||
298 | } |
||
299 | public function NavigationBarID() |
||
300 | { |
||
301 | return "{$this->ID()}_NavigationBar"; |
||
302 | } |
||
303 | public function ViewBarID() |
||
304 | { |
||
305 | return "{$this->ID()}_ViewBar"; |
||
306 | } |
||
307 | |||
308 | public function ViewTitle() |
||
309 | { |
||
310 | return $this->view->title(); |
||
311 | } |
||
312 | public function ViewDateTitle() |
||
313 | { |
||
314 | $this->initValues(); |
||
315 | return $this->view->DateTitle($this); |
||
316 | } |
||
317 | |||
318 | public function Views() |
||
319 | { |
||
320 | $this->initValues(); |
||
321 | foreach ($this->views as $view) { |
||
322 | list($params, $title) = $view->viewLinkParamsAndTitle($this); |
||
323 | $link = $this->Link($this->controller, $view, $params); |
||
324 | $views[] = new ArrayData(array('Title' => $title, 'Link' => $link, 'Current' => $view->getName() == $this->view->getName())); |
||
0 ignored issues
–
show
Coding Style
Comprehensibility
introduced
by
$views was never initialized. Although not strictly required by PHP, it is generally a good practice to add $views = array(); before regardless.
Adding an explicit array definition is generally preferable to implicit array definition as it guarantees a stable state of the code. Let’s take a look at an example: foreach ($collection as $item) {
$myArray['foo'] = $item->getFoo();
if ($item->hasBar()) {
$myArray['bar'] = $item->getBar();
}
// do something with $myArray
}
As you can see in this example, the array This might or might not be intended. To make your intention clear, your code more readible and to avoid accidental bugs, we recommend to add an explicit initialization $myArray = array() either outside or inside the foreach loop. ![]() |
|||
325 | } |
||
326 | return new ArrayList($views); |
||
327 | } |
||
328 | |||
329 | public function PrevLink() |
||
330 | { |
||
331 | $this->initValues(); |
||
332 | $params = $this->view->prevLinkParams($this); |
||
333 | return $this->Link($this->controller, $this->view, $params); |
||
334 | } |
||
335 | |||
336 | public function NextLink() |
||
337 | { |
||
338 | $this->initValues(); |
||
339 | $params = $this->view->nextLinkParams($this); |
||
340 | return $this->Link($this->controller, $this->view, $params); |
||
341 | } |
||
342 | |||
343 | public function Link($controller, CalendarAbstractView $view, array $params) |
||
344 | { |
||
345 | $link = is_string($controller) ? $controller : $controller->URLSegment; |
||
346 | $params = array_merge(array('view' => $view->getName()), $params); |
||
347 | foreach ($params as $id => $val) { |
||
348 | $link = HTTP::RAW_setGetVar("$this->name[$id]", $val, $link); |
||
349 | } |
||
350 | return $link; |
||
351 | } |
||
352 | |||
353 | public function getController() |
||
354 | { |
||
355 | return $this->controller; |
||
356 | } |
||
357 | public function getYear() |
||
358 | { |
||
359 | return $this->year; |
||
360 | } |
||
361 | public function getMonth() |
||
362 | { |
||
363 | return $this->month; |
||
364 | } |
||
365 | public function getDay() |
||
366 | { |
||
367 | return $this->day; |
||
368 | } |
||
369 | |||
370 | public function setDefaultView($view) |
||
371 | { |
||
372 | $this->defaultView = $view; |
||
373 | } |
||
374 | public function setDefaultYear($year) |
||
375 | { |
||
376 | $this->defaultYear = $year; |
||
377 | } |
||
378 | public function setDefaultMonth($month) |
||
379 | { |
||
380 | $this->defaultMonth = $month; |
||
381 | } |
||
382 | public function setDefaultDay($day) |
||
383 | { |
||
384 | $this->defaultDay = $day; |
||
385 | } |
||
386 | |||
387 | public function setSessionMode($value) |
||
388 | { |
||
389 | $this->sessionMode = $value; |
||
390 | } |
||
391 | |||
392 | public function setNavigationBarTemplate($template) |
||
393 | { |
||
394 | $this->navigationBarTemplate = $template; |
||
395 | } |
||
396 | public function setViewBarTemplate($template) |
||
397 | { |
||
398 | $this->viewBarTemplate = $template; |
||
399 | } |
||
400 | } |
||
401 |
Adding an explicit array definition is generally preferable to implicit array definition as it guarantees a stable state of the code.
Let’s take a look at an example:
As you can see in this example, the array
$myArray
is initialized the first time when the foreach loop is entered. You can also see that the value of thebar
key is only written conditionally; thus, its value might result from a previous iteration.This might or might not be intended. To make your intention clear, your code more readible and to avoid accidental bugs, we recommend to add an explicit initialization $myArray = array() either outside or inside the foreach loop.