sydney/IPB
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Version 4.5.0

Browse Source
This commit is contained in:
Neo committed 2025-12-19 05:51:58 -08:00
1 parent 1a0c7fd3c2
commit f79dcf067a
3791 files changed
+248032 -76372
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

applications/cms/extensions/core/EditorLocations/BlockContent.php
+1 -1
View File
@@ -12,7 +12,7 @@
namespace IPS\cms\extensions\core\EditorLocations;
/* To prevent PHP errors (extending class does not exist) revealing path */
if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
{
header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
exit;
applications/cms/extensions/core/EditorLocations/Records.php
+38 -6
View File
@@ -12,7 +12,7 @@
namespace IPS\cms\extensions\core\EditorLocations;
/* To prevent PHP errors (extending class does not exist) revealing path */
if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
{
header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
exit;
@@ -73,18 +73,48 @@ class _Records
{
throw new \OutOfRangeException;
}
$className = $this->_getClassName( $id3 );
$id = ( mb_strpos( $className, 'Review' ) !== FALSE OR mb_strpos( $className, 'Comment' ) !== FALSE ) ? $id2 : $id1;
try
{
$recordClass = '\IPS\cms\Records' . $id3;
return $recordClass::load( $id1 )->canView( $member );
return $className::load( $id )->canView( $member );
}
catch ( \OutOfRangeException $e )
{
return FALSE;
}
}
/**
* Figure out the correct class name to return
*
* @param string|int $id3 The id3 value stored
* @return string
*/
protected function _getClassName( $id3 )
{
/* Review? */
if( mb_strpos( $id3, '-review' ) )
{
$bits = explode( '-', $id3 );
$className = '\IPS\cms\Records\Review' . $bits[0];
}
/* Comment? */
elseif( mb_strpos( $id3, '-comment' ) )
{
$bits = explode( '-', $id3 );
$className = '\IPS\cms\Records\Comment' . $bits[0];
}
/* Record */
else
{
$className = '\IPS\cms\Records' . $id3;
}
return $className;
}
/**
* Attachment lookup
@@ -101,8 +131,10 @@ class _Records
{
if ( $id3 )
{
$recordClass = '\IPS\cms\Records' . $id3;
$return = $recordClass::load( $id1 );
$className = $this->_getClassName( $id3 );
$id = ( mb_strpos( $className, 'Review' ) !== FALSE OR mb_strpos( $className, 'Comment' ) !== FALSE ) ? $id2 : $id1;
$return = $className::load( $id );
$return->url(); // Need to check that won't throw an exception later, which might happen if the database no longer has a page
return $return;
}
applications/cms/extensions/core/EditorLocations/Widgets.php
+1 -1
View File
@@ -12,7 +12,7 @@
namespace IPS\cms\extensions\core\EditorLocations;
/* To prevent PHP errors (extending class does not exist) revealing path */
if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) )
if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
{
header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
exit;