This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | class TrainingPage extends Page |
||
|
0 ignored issues
–
show
|
|||
| 4 | { |
||
| 5 | private static $icon = "mysite/images/treeicons/TrainingPage"; |
||
|
0 ignored issues
–
show
|
|||
| 6 | |||
| 7 | private static $db = array( |
||
|
0 ignored issues
–
show
|
|||
| 8 | "Date" => "Date", |
||
| 9 | "EndDate" => "Date", |
||
| 10 | "Location" => "Varchar(255)", |
||
| 11 | "Price" => "Currency", |
||
| 12 | "IsOpenForBookings" => "Boolean", |
||
| 13 | "PlacesAvailable" => "Int", |
||
| 14 | "PeopleSignedUpElseWhere" => "Int", |
||
| 15 | "MoreInformation" => "HTMLText", |
||
| 16 | "Options" => "Text" |
||
| 17 | ); |
||
| 18 | |||
| 19 | private static $has_one = array( |
||
|
0 ignored issues
–
show
|
|||
| 20 | "DownloadFile" => "File" |
||
| 21 | ); |
||
| 22 | |||
| 23 | private static $many_many = array( |
||
|
0 ignored issues
–
show
|
|||
| 24 | "Attendees" => "Member" |
||
| 25 | ); |
||
| 26 | |||
| 27 | private static $many_many_extraFields = array( |
||
|
0 ignored issues
–
show
|
|||
| 28 | "Attendees" => array( |
||
| 29 | "SelectedOption" => "Varchar(255)", |
||
| 30 | "BookingCode" => "Varchar(255)" |
||
| 31 | ) |
||
| 32 | ); |
||
| 33 | |||
| 34 | //parents and children in sitetree |
||
| 35 | private static $allowed_children = "none"; //can also be "none"; |
||
|
0 ignored issues
–
show
|
|||
| 36 | private static $default_parent = "TrainingHolder"; |
||
|
0 ignored issues
–
show
|
|||
| 37 | private static $can_be_root = false; //default is true |
||
|
0 ignored issues
–
show
|
|||
| 38 | |||
| 39 | public function getCMSFields() |
||
|
0 ignored issues
–
show
The return type could not be reliably inferred; please add a
@return annotation.
Our type inference engine in quite powerful, but sometimes the code does not
provide enough clues to go by. In these cases we request you to add a Loading history...
|
|||
| 40 | { |
||
| 41 | $fields = parent::getCMSFields(); |
||
| 42 | $fields->addFieldToTab("Root.WhoWhereWhat", new DateField("Date", "Start Date")); |
||
| 43 | $fields->addFieldToTab("Root.WhoWhereWhat", new DateField("EndDate", "End Date - can be left blank for one day events")); |
||
| 44 | $fields->addFieldToTab("Root.WhoWhereWhat", new TextField("Location")); |
||
| 45 | $fields->addFieldToTab("Root.WhoWhereWhat", new CurrencyField("Price")); |
||
| 46 | $fields->addFieldToTab("Root.MoreInformation", new UploadField("DownloadFile", "Download File")); |
||
| 47 | $fields->addFieldToTab("Root.MoreInformation", new HtmlEditorField("MoreInformation", "More Information")); |
||
| 48 | $fields->addFieldToTab("Root.Bookings", new CheckboxField("IsOpenForBookings", "Is Open For Bookings")); |
||
| 49 | $fields->addFieldToTab("Root.Bookings", new HeaderField("ActualPlacesAvailableHeader", "Actual Places Available: ".$this->ActualPlacesAvailable(), 3)); |
||
| 50 | $fields->addFieldToTab("Root.Bookings", new LiteralField("ActualPlacesAvailableData", "Calculated as: Places Available [-] Minus People Signed up elsewhere [-] Minus People Signed up through this Website)")); |
||
| 51 | $fields->addFieldToTab("Root.Bookings", new NumericField("PlacesAvailable", "Places Available")); |
||
| 52 | $fields->addFieldToTab("Root.Bookings", new NumericField("PeopleSignedUpElseWhere", "People Signed Up Else Where (thus excluding the ones signed up on this website)")); |
||
| 53 | $fields->addFieldToTab("Root.Bookings", new HeaderField("FormAdditions", "Form Additions", 3)); |
||
| 54 | $fields->addFieldToTab("Root.Bookings", new TextareaField("Options", "Options available (separate by comma) - if any (e.g. venues)")); |
||
| 55 | $fields->addFieldToTab("Root.Bookings", new HeaderField("Current Registrations", "Current Registrations", 3)); |
||
| 56 | $fields->addFieldToTab( |
||
| 57 | "Root.Bookings", |
||
| 58 | $this->MemberField() |
||
| 59 | ); |
||
| 60 | return $fields; |
||
| 61 | } |
||
| 62 | |||
| 63 | public function MemberField() |
||
| 64 | { |
||
| 65 | $memberField = new GridField( |
||
| 66 | $name = "Attendees", |
||
| 67 | $sourceClass = "Attendees", |
||
| 68 | $this->Attendees(), |
||
| 69 | GridFieldConfig_RelationEditor::create() |
||
| 70 | ); |
||
| 71 | return $memberField; |
||
| 72 | } |
||
| 73 | |||
| 74 | public function addAttendee($member, $extraFields = null) |
||
| 75 | { |
||
| 76 | $existingMembers = $this->Attendees(); |
||
| 77 | $existingMembers->add($member, $extraFields); |
||
| 78 | } |
||
| 79 | |||
| 80 | public function DifferentEndDate() |
||
| 81 | { |
||
| 82 | if ($this->Date != $this->EndDate && $this->EndDate) { |
||
| 83 | return true; |
||
| 84 | } |
||
| 85 | } |
||
| 86 | |||
| 87 | public function DifferentEndMonth() |
||
| 88 | { |
||
| 89 | if ($this->DifferentEndDate()) { |
||
| 90 | if (Date("F", $this->Date) || Date("F", $this->EndDate)) { |
||
| 91 | return true; |
||
| 92 | } |
||
| 93 | } |
||
| 94 | } |
||
| 95 | |||
| 96 | public function ActualPlacesAvailable() |
||
| 97 | { |
||
| 98 | return intval($this->PlacesAvailable - $this->PeopleSignedUpElseWhere - $this->Attendees("\"TrainingPageID\" = ".$this->ID)->count()); |
||
| 99 | } |
||
| 100 | } |
||
| 101 | |||
| 102 | class TrainingPage_Controller extends Page_Controller |
||
|
0 ignored issues
–
show
PSR1 recommends that each class must be in a namespace of at least one level to avoid collisions.
You can fix this by adding a namespace to your class: namespace YourVendor;
class YourClass { }
When choosing a vendor namespace, try to pick something that is not too generic to avoid conflicts with other libraries. Loading history...
|
|||
| 103 | { |
||
| 104 | private static $allowed_actions = array( |
||
|
0 ignored issues
–
show
|
|||
| 105 | "thankyou", |
||
| 106 | "SignUpForm" |
||
| 107 | ); |
||
| 108 | |||
| 109 | public function SignUpForm() |
||
| 110 | { |
||
| 111 | if ( |
||
| 112 | !$this->IsOpenForBookings || |
||
| 113 | "thankyou" == $this->getRequest()->param("Action") || |
||
| 114 | $this->MemberAlreadySignedUp() || |
||
| 115 | $this->ActualPlacesAvailable() < 1 |
||
| 116 | ) { |
||
| 117 | return false; |
||
| 118 | } |
||
| 119 | $form = new TrainingSignupForm($this, "SignUpForm", "Sign-Up for ".$this->Title); |
||
| 120 | return $form; |
||
| 121 | } |
||
| 122 | |||
| 123 | public function thankyou() |
||
| 124 | { |
||
| 125 | $this->Title = "Thank You"; |
||
| 126 | $this->Content = "We will be in touch soon"; |
||
| 127 | return array(); |
||
| 128 | } |
||
| 129 | |||
| 130 | public function MemberAlreadySignedUp() |
||
| 131 | { |
||
| 132 | if ($id = Member::currentUserID()) { |
||
| 133 | if ($this->Attendees("\"MemberID\" = ".$id.' AND \"TrainingPageID\" = '.$this->ID)->count()) { |
||
| 134 | return true; |
||
| 135 | } |
||
| 136 | } |
||
| 137 | return false; |
||
| 138 | } |
||
| 139 | } |
||
| 140 |
You can fix this by adding a namespace to your class:
When choosing a vendor namespace, try to pick something that is not too generic to avoid conflicts with other libraries.