/usr/share/gforge/plugins/headermenu/action/updateLinkValue.php is in fusionforge-plugin-headermenu 5.3.2+20141104-3+deb8u3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 | <?php
/**
* headermenu plugin : updateLinkValue action
*
* Copyright 2012-2013, Franck Villaume - TrivialDev
* http://fusionforge.org
*
* This file is part of FusionForge. FusionForge is free software;
* you can redistribute it and/or modify it under the terms of the
* GNU General Public License as published by the Free Software
* Foundation; either version 2 of the Licence, or (at your option)
* any later version.
*
* FusionForge is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along
* with FusionForge; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*/
global $headermenu;
global $group_id;
$idLink = getIntFromRequest('linkid');
$link = getStringFromRequest('link');
$name = strip_tags(getStringFromRequest('name'));
$description = strip_tags(getStringFromRequest('description'));
$typemenu = getStringFromRequest('typemenu');
$linkmenu = getStringFromRequest('linkmenu');
$htmlcode = TextSanitizer::purify(getStringFromRequest('htmlcode'));
$type = getStringFromRequest('type');
$redirect_url = '/plugins/'.$headermenu->name.'/?type='.$type;
if (isset($group_id) && $group_id) {
$redirect_url .= '&group_id='.$group_id;
}
if (!empty($idLink) && !empty($name)) {
switch ($linkmenu) {
case 'headermenu': {
if (!empty($link)) {
if (util_check_url($link)) {
if ($headermenu->updateLink($idLink, $link, $name, $description, $linkmenu)) {
$feedback = _('Task succeeded.');
session_redirect($redirect_url.'&feedback='.urlencode($feedback));
}
$error_msg = _('Task failed');
session_redirect($redirect_url.'&error_msg='.urlencode($error_msg));
} else {
$error_msg = _('Provided Link is not a valid URL.');
session_redirect($redirect_url.'&error_msg='.urlencode($error_msg));
}
}
$warning_msg = _('Missing Link URL.');
session_redirect($redirect_url.'&warning_msg='.urlencode($warning_msg));
break;
}
case 'outermenu':
case 'groupmenu': {
if (!empty($link) && ($typemenu == 'url' || $typemenu == 'iframe')) {
if (util_check_url($link)) {
if ($headermenu->updateLink($idLink, $link, $name, $description, $linkmenu, $typemenu)) {
$feedback = _('Task succeeded.');
session_redirect($redirect_url.'&feedback='.urlencode($feedback));
}
$error_msg = _('Task failed');
session_redirect($redirect_url.'&error_msg='.urlencode($error_msg));
} else {
$error_msg = _('Provided Link is not a valid URL.');
session_redirect($redirect_url.'&error_msg='.urlencode($error_msg));
}
}
if (!empty($htmlcode) && $typemenu == 'htmlcode') {
if ($headermenu->updateLink($idLink, '', $name, $description, $linkmenu, 'htmlcode', $htmlcode)) {
$feedback = _('Task succeeded.');
session_redirect($redirect_url.'&feedback='.urlencode($feedback));
}
$error_msg = _('Task failed');
session_redirect($redirect_url.'&error_msg='.urlencode($error_msg));
}
$warning_msg = _('Missing Link URL or HTML Page.');
session_redirect($redirect_url.'&warning_msg='.urlencode($warning_msg));
}
}
}
$warning_msg = _('No link to update or name missing.');
session_redirect($redirect_url.'&warning_msg='.urlencode($warning_msg));
|