sunnysideup /
silverstripe-calendar
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | class Calendar extends ViewableData |
||
| 4 | { |
||
| 5 | |||
| 6 | // Static |
||
| 7 | |||
| 8 | private static $names = array(); |
||
| 9 | |||
| 10 | public static $session_calendars = 'Calendars'; |
||
| 11 | |||
| 12 | // Attributes |
||
| 13 | |||
| 14 | protected $controller; |
||
| 15 | |||
| 16 | protected $name; |
||
| 17 | |||
| 18 | protected $initDone = false; |
||
| 19 | |||
| 20 | protected $views = array(); |
||
| 21 | |||
| 22 | protected $view; |
||
| 23 | |||
| 24 | protected $year; |
||
| 25 | protected $month; |
||
| 26 | protected $day; |
||
| 27 | |||
| 28 | protected $defaultView; |
||
| 29 | protected $defaultYear; |
||
| 30 | protected $defaultMonth; |
||
| 31 | protected $defaultDay; |
||
| 32 | |||
| 33 | protected $sessionMode = false; |
||
| 34 | |||
| 35 | protected $navigationBarTemplate; |
||
| 36 | protected $viewBarTemplate; |
||
| 37 | |||
| 38 | // Constructor |
||
| 39 | |||
| 40 | public function __construct($controller, $name, $views = null) |
||
| 41 | { |
||
| 42 | parent::__construct(); |
||
| 43 | |||
| 44 | // 1) Controller Setting |
||
| 45 | |||
| 46 | $this->controller = $controller; |
||
| 47 | |||
| 48 | // 2) Name Setting |
||
| 49 | |||
| 50 | View Code Duplication | if (is_string($name)) { |
|
| 51 | if (! in_array($name, self::$names)) { |
||
| 52 | $this->name = $name; |
||
| 53 | self::$names[] = $name; |
||
| 54 | } else { |
||
| 55 | user_error("Calendar::__construct() : you cannot set the \$name attribute with the value '$name' because an other calendar with this name already exists", E_USER_ERROR); |
||
| 56 | } |
||
| 57 | } else { |
||
| 58 | user_error('Calendar::__construct() : you cannot set the $name attribute with a non string value', E_USER_ERROR); |
||
| 59 | } |
||
| 60 | |||
| 61 | // 3) Views Setting |
||
| 62 | |||
| 63 | if ($views != null) { |
||
| 64 | $this->addViews($views); |
||
| 65 | } |
||
| 66 | } |
||
| 67 | |||
| 68 | public function initValues() |
||
| 69 | { |
||
| 70 | if ($this->initDone) { |
||
| 71 | return; |
||
| 72 | } |
||
| 73 | |||
| 74 | $sessionName = self::$session_calendars . ".$this->name"; |
||
| 75 | $sessionValues = Session::get($sessionName); |
||
| 76 | if ($sessionValues) { |
||
| 77 | $sessionValues = unserialize($sessionValues); |
||
| 78 | } |
||
| 79 | |||
| 80 | // 1) View Setting |
||
| 81 | |||
| 82 | $views = array(); |
||
| 83 | if (isset($_REQUEST[$this->name]['view'])) { |
||
| 84 | $views[] = $_REQUEST[$this->name]['view']; |
||
| 85 | } |
||
| 86 | if ($this->sessionMode && $sessionValues && isset($sessionValues['view'])) { |
||
| 87 | $views[] = $sessionValues['view']; |
||
| 88 | } |
||
| 89 | if ($this->defaultView) { |
||
| 90 | $views[] = is_a($this->defaultView, 'CalendarAbstractView') ? $this->defaultView->getName() : $this->defaultView; |
||
| 91 | } |
||
| 92 | foreach ($views as $view) { |
||
| 93 | $view = $this->getView($view); |
||
| 94 | if ($view) { |
||
| 95 | $this->view = $view; |
||
| 96 | break; |
||
| 97 | } |
||
| 98 | } |
||
| 99 | if (! $this->view) { |
||
| 100 | if (count($this->views) > 0) { |
||
| 101 | $this->view = $this->views[0]; |
||
| 102 | } else { |
||
| 103 | return; |
||
| 104 | } |
||
| 105 | } |
||
| 106 | |||
| 107 | // 2) Year Setting |
||
| 108 | |||
| 109 | $years = array(); |
||
| 110 | View Code Duplication | if (isset($_REQUEST[$this->name]['year'])) { |
|
| 111 | $years[] = $_REQUEST[$this->name]['year']; |
||
| 112 | } |
||
| 113 | View Code Duplication | if ($this->sessionMode && $sessionValues && isset($sessionValues['year'])) { |
|
| 114 | $years[] = $sessionValues['year']; |
||
| 115 | } |
||
| 116 | if ($this->defaultYear) { |
||
| 117 | $years[] = $this->defaultYear; |
||
| 118 | } |
||
| 119 | foreach ($years as $year) { |
||
| 120 | if (is_numeric($year) && is_int($year + 0) && $year >= 1) { |
||
| 121 | $this->year = $year; |
||
| 122 | break; |
||
| 123 | } |
||
| 124 | } |
||
| 125 | if (! $this->year) { |
||
| 126 | $this->year = date('Y'); |
||
| 127 | } |
||
| 128 | |||
| 129 | // 3) Month Setting |
||
| 130 | |||
| 131 | if ($this->view->needsMonth()) { |
||
| 132 | $months = array(); |
||
| 133 | if (isset($_REQUEST[$this->name]['month'])) { |
||
| 134 | $months[] = $_REQUEST[$this->name]['month']; |
||
| 135 | } |
||
| 136 | if ($this->sessionMode && $sessionValues && isset($sessionValues['month'])) { |
||
| 137 | $months[] = $sessionValues['month']; |
||
| 138 | } |
||
| 139 | if ($this->defaultMonth) { |
||
| 140 | $months[] = $this->defaultMonth; |
||
| 141 | } |
||
| 142 | foreach ($months as $month) { |
||
| 143 | if (is_numeric($month) && is_int($month + 0)) { |
||
| 144 | if ($month >= 1 && $month <= 12) { |
||
| 145 | $this->month = $month; |
||
| 146 | } elseif ($month < 1) { |
||
| 147 | $this->year = $this->year > 1 ? $this->year - 1 : date('Y'); |
||
| 148 | $this->month = 12; |
||
| 149 | } else { |
||
| 150 | $this->year++; |
||
| 151 | $this->month = 1; |
||
| 152 | } |
||
| 153 | break; |
||
| 154 | } |
||
| 155 | } |
||
| 156 | if (! $this->month) { |
||
| 157 | $this->month = date('n'); |
||
| 158 | } |
||
| 159 | } |
||
| 160 | |||
| 161 | // 4) Day Setting |
||
| 162 | |||
| 163 | if ($this->view->needsDay()) { |
||
| 164 | View Code Duplication | if (isset($_REQUEST[$this->name]['day'])) { |
|
| 165 | $days[] = $_REQUEST[$this->name]['day']; |
||
| 166 | } |
||
| 167 | View Code Duplication | if ($this->sessionMode && $sessionValues && isset($sessionValues['day'])) { |
|
| 168 | $days[] = $sessionValues['day']; |
||
|
0 ignored issues
–
show
|
|||
| 169 | } |
||
| 170 | if ($this->defaultDay) { |
||
| 171 | $days[] = $this->defaultDay; |
||
| 172 | } |
||
| 173 | $days[] = date('j'); |
||
| 174 | foreach ($days as $day) { |
||
| 175 | if (is_numeric($day) && is_int($day + 0)) { |
||
| 176 | if ($day >= 1 && $day <= 28) { |
||
| 177 | $this->day = $day; |
||
| 178 | } elseif ($day < 1) { |
||
| 179 | if ($this->month == 1) { |
||
| 180 | $this->year = $this->year > 1 ? $this->year - 1 : date('Y'); |
||
| 181 | $this->month = 12; |
||
| 182 | } else { |
||
| 183 | $this->month--; |
||
| 184 | } |
||
| 185 | $dayAfter = mktime(0, 0, 0, $this->month + 1, 1, $this->year); |
||
| 186 | $this->day = date('j', mktime(0, 0, 0, date('n', $dayAfter), date('j', $dayAfter) - 1, date('Y', $dayAfter))); |
||
| 187 | } else { |
||
| 188 | $date = mktime(0, 0, 0, $this->month, $day, $this->year); |
||
| 189 | if (date('n', $date) == $this->month && date('j', $date) == $day && date('Y', $date) == $this->year) { |
||
| 190 | $this->day = $day; |
||
| 191 | } else { |
||
| 192 | if ($this->month == 12) { |
||
| 193 | $this->year++; |
||
| 194 | $this->month = 1; |
||
| 195 | } else { |
||
| 196 | $this->month++; |
||
| 197 | } |
||
| 198 | $this->day = 1; |
||
| 199 | } |
||
| 200 | } |
||
| 201 | break; |
||
| 202 | } |
||
| 203 | } |
||
| 204 | } |
||
| 205 | |||
| 206 | $this->initDone = true; |
||
| 207 | |||
| 208 | // Session Mode |
||
| 209 | |||
| 210 | if ($this->sessionMode) { |
||
| 211 | list($sessionValues, $title) = $this->view->viewLinkParamsAndTitle($this); |
||
| 212 | $sessionValues = array_merge(array('view' => $this->view->getName()), $sessionValues); |
||
| 213 | $sessionValues = serialize($sessionValues); |
||
| 214 | Session::set($sessionName, $sessionValues); |
||
| 215 | } else { |
||
| 216 | Session::clear($sessionName); |
||
| 217 | } |
||
| 218 | |||
| 219 | // Css Requirements |
||
| 220 | Requirements::javascript(SAPPHIRE_DIR .'/thirdparty/jquery/jquery.js'); |
||
| 221 | Requirements::javascript('calendar/javascript/Calendar.js'); |
||
| 222 | Requirements::themedCSS('calendar', 'calendar'); |
||
| 223 | } |
||
| 224 | |||
| 225 | // Field Functions |
||
| 226 | |||
| 227 | View Code Duplication | public function addViews($views) |
|
| 228 | { |
||
| 229 | if (! is_array($views)) { |
||
| 230 | $views = array($views); |
||
| 231 | } |
||
| 232 | foreach ($views as $view) { |
||
| 233 | if (is_a($view, 'CalendarAbstractView')) { |
||
| 234 | if (! in_array($view, $this->views)) { |
||
| 235 | $this->views[] = $view; |
||
| 236 | } |
||
| 237 | } else { |
||
| 238 | user_error('Calendar::addViews() : you cannot add a view which class does not extend \'CalendarAbstractView\'', E_USER_ERROR); |
||
| 239 | } |
||
| 240 | } |
||
| 241 | } |
||
| 242 | |||
| 243 | private function getView($viewName) |
||
| 244 | { |
||
| 245 | foreach ($this->views as $view) { |
||
| 246 | if ($view->getName() == $viewName) { |
||
| 247 | return $view; |
||
| 248 | } |
||
| 249 | } |
||
| 250 | } |
||
| 251 | |||
| 252 | View Code Duplication | public function removeViews($views) |
|
| 253 | { |
||
| 254 | if (! is_array($views)) { |
||
| 255 | $views = array($views); |
||
| 256 | } |
||
| 257 | foreach ($views as $view) { |
||
| 258 | if (is_a($view, 'CalendarAbstractView')) { |
||
| 259 | $index = array_search($view, $this->views); |
||
| 260 | if ($index) { |
||
| 261 | unset($this->views[$index]); |
||
| 262 | } |
||
| 263 | } else { |
||
| 264 | user_error('Calendar::removeViews() : you cannot remove a view which class does not extend \'CalendarAbstractView\'', E_USER_ERROR); |
||
| 265 | } |
||
| 266 | } |
||
| 267 | } |
||
| 268 | |||
| 269 | public function forTemplate() |
||
| 270 | { |
||
| 271 | $this->initValues(); |
||
| 272 | if ($this->view) { |
||
| 273 | return $this->view->showCalendar($this); |
||
| 274 | } |
||
| 275 | } |
||
| 276 | |||
| 277 | public function NavigationBar() |
||
| 278 | { |
||
| 279 | if ($this->navigationBarTemplate) { |
||
| 280 | $templates[] = $this->navigationBarTemplate; |
||
| 281 | } |
||
| 282 | $templates[] = 'CalendarNavigationBar'; |
||
|
0 ignored issues
–
show
The variable
$templates does not seem to be defined for all execution paths leading up to this point.
If you define a variable conditionally, it can happen that it is not defined for all execution paths. Let’s take a look at an example: function myFunction($a) {
switch ($a) {
case 'foo':
$x = 1;
break;
case 'bar':
$x = 2;
break;
}
// $x is potentially undefined here.
echo $x;
}
In the above example, the variable $x is defined if you pass “foo” or “bar” as argument for $a. However, since the switch statement has no default case statement, if you pass any other value, the variable $x would be undefined. Available Fixes
Loading history...
|
|||
| 283 | return $this->renderWith($templates); |
||
| 284 | } |
||
| 285 | |||
| 286 | public function ViewBar() |
||
| 287 | { |
||
| 288 | if ($this->viewBarTemplate) { |
||
| 289 | $templates[] = $this->viewBarTemplate; |
||
| 290 | } |
||
| 291 | $templates[] = 'CalendarViewBar'; |
||
|
0 ignored issues
–
show
The variable
$templates does not seem to be defined for all execution paths leading up to this point.
If you define a variable conditionally, it can happen that it is not defined for all execution paths. Let’s take a look at an example: function myFunction($a) {
switch ($a) {
case 'foo':
$x = 1;
break;
case 'bar':
$x = 2;
break;
}
// $x is potentially undefined here.
echo $x;
}
In the above example, the variable $x is defined if you pass “foo” or “bar” as argument for $a. However, since the switch statement has no default case statement, if you pass any other value, the variable $x would be undefined. Available Fixes
Loading history...
|
|||
| 292 | return $this->renderWith($templates); |
||
| 293 | } |
||
| 294 | |||
| 295 | public function ID() |
||
| 296 | { |
||
| 297 | return "{$this->class}_{$this->name}"; |
||
| 298 | } |
||
| 299 | public function NavigationBarID() |
||
| 300 | { |
||
| 301 | return "{$this->ID()}_NavigationBar"; |
||
| 302 | } |
||
| 303 | public function ViewBarID() |
||
| 304 | { |
||
| 305 | return "{$this->ID()}_ViewBar"; |
||
| 306 | } |
||
| 307 | |||
| 308 | public function ViewTitle() |
||
| 309 | { |
||
| 310 | return $this->view->title(); |
||
| 311 | } |
||
| 312 | public function ViewDateTitle() |
||
| 313 | { |
||
| 314 | $this->initValues(); |
||
| 315 | return $this->view->DateTitle($this); |
||
| 316 | } |
||
| 317 | |||
| 318 | public function Views() |
||
| 319 | { |
||
| 320 | $this->initValues(); |
||
| 321 | foreach ($this->views as $view) { |
||
| 322 | list($params, $title) = $view->viewLinkParamsAndTitle($this); |
||
| 323 | $link = $this->Link($this->controller, $view, $params); |
||
| 324 | $views[] = new ArrayData(array('Title' => $title, 'Link' => $link, 'Current' => $view->getName() == $this->view->getName())); |
||
| 325 | } |
||
| 326 | return new ArrayList($views); |
||
|
0 ignored issues
–
show
The variable
$views does not seem to be defined for all execution paths leading up to this point.
If you define a variable conditionally, it can happen that it is not defined for all execution paths. Let’s take a look at an example: function myFunction($a) {
switch ($a) {
case 'foo':
$x = 1;
break;
case 'bar':
$x = 2;
break;
}
// $x is potentially undefined here.
echo $x;
}
In the above example, the variable $x is defined if you pass “foo” or “bar” as argument for $a. However, since the switch statement has no default case statement, if you pass any other value, the variable $x would be undefined. Available Fixes
Loading history...
|
|||
| 327 | } |
||
| 328 | |||
| 329 | public function PrevLink() |
||
| 330 | { |
||
| 331 | $this->initValues(); |
||
| 332 | $params = $this->view->prevLinkParams($this); |
||
| 333 | return $this->Link($this->controller, $this->view, $params); |
||
| 334 | } |
||
| 335 | |||
| 336 | public function NextLink() |
||
| 337 | { |
||
| 338 | $this->initValues(); |
||
| 339 | $params = $this->view->nextLinkParams($this); |
||
| 340 | return $this->Link($this->controller, $this->view, $params); |
||
| 341 | } |
||
| 342 | |||
| 343 | public function Link($controller, CalendarAbstractView $view, array $params) |
||
| 344 | { |
||
| 345 | $link = is_string($controller) ? $controller : $controller->URLSegment; |
||
| 346 | $params = array_merge(array('view' => $view->getName()), $params); |
||
| 347 | foreach ($params as $id => $val) { |
||
| 348 | $link = HTTP::RAW_setGetVar("$this->name[$id]", $val, $link); |
||
| 349 | } |
||
| 350 | return $link; |
||
| 351 | } |
||
| 352 | |||
| 353 | public function getController() |
||
| 354 | { |
||
| 355 | return $this->controller; |
||
| 356 | } |
||
| 357 | public function getYear() |
||
| 358 | { |
||
| 359 | return $this->year; |
||
| 360 | } |
||
| 361 | public function getMonth() |
||
| 362 | { |
||
| 363 | return $this->month; |
||
| 364 | } |
||
| 365 | public function getDay() |
||
| 366 | { |
||
| 367 | return $this->day; |
||
| 368 | } |
||
| 369 | |||
| 370 | public function setDefaultView($view) |
||
| 371 | { |
||
| 372 | $this->defaultView = $view; |
||
| 373 | } |
||
| 374 | public function setDefaultYear($year) |
||
| 375 | { |
||
| 376 | $this->defaultYear = $year; |
||
| 377 | } |
||
| 378 | public function setDefaultMonth($month) |
||
| 379 | { |
||
| 380 | $this->defaultMonth = $month; |
||
| 381 | } |
||
| 382 | public function setDefaultDay($day) |
||
| 383 | { |
||
| 384 | $this->defaultDay = $day; |
||
| 385 | } |
||
| 386 | |||
| 387 | public function setSessionMode($value) |
||
| 388 | { |
||
| 389 | $this->sessionMode = $value; |
||
| 390 | } |
||
| 391 | |||
| 392 | public function setNavigationBarTemplate($template) |
||
| 393 | { |
||
| 394 | $this->navigationBarTemplate = $template; |
||
| 395 | } |
||
| 396 | public function setViewBarTemplate($template) |
||
| 397 | { |
||
| 398 | $this->viewBarTemplate = $template; |
||
| 399 | } |
||
| 400 | } |
||
| 401 |
If you define a variable conditionally, it can happen that it is not defined for all execution paths.
Let’s take a look at an example:
In the above example, the variable $x is defined if you pass “foo” or “bar” as argument for $a. However, since the switch statement has no default case statement, if you pass any other value, the variable $x would be undefined.
Available Fixes
Check for existence of the variable explicitly:
Define a default value for the variable:
Add a value for the missing path: