Issue:
Analisis de los resultados de escaneo de las funciones en ProcessMaker. Plugin/trigger code scanner.
Cause:
Nueva solicitud de funciones
Solution:
Se ha implementado esta nueva funcionalidad, que consta de lo siguiente:
- Escaneo de codigo al importar un plugin (no se aplica a plugins enterprise)
- Escaneo de codigo al habilitar un plugin (si el plugin ya se encuentra fisicamente en el directorio de los plugins)
- Escaneo de codigo al importar un proceso
- Escaneo de codigo al crear/modificar codigo de un trigger
- Escaneo de codigo al ejecutar un caso que tenga seteados triggers en sus steps (si el trigger tiene codigo
no deseado, no se ejecuta el trigger)
- Se ha agregado la opcion "check-plugin-disabled-code" al comando "./gulliver", el mismo muestra
informacion sobre los plugins con codigo no deseado.
Ej: $ ./gulliver check-plugin-disabled-code [enterprise-plugin|custom-plugin|all|<plugin-name>]
- Se ha agregado la opcion "check-workspace-disabled-code" al comando "./processmaker", el mismo muestra
informacion sobre los workspaces con codigo no deseado en sus triggers.
Ej: $ ./processmaker check-workspace-disabled-code <myWorkspace>
- Por defecto ProcessMaker no realiza el escaneo de codigo, si se desea escanear codigo no deseado, se
debera definir el atributo "enable_blacklist = 1" en el archivo "env.ini", este atributo no se aplica
a las nuevas opciones creadas para los comandos "./gulliver" y "./processmaker"
- Para una configuracion personalizada de codigo no deseado (lista negra), se pueden definir las mismas en
el archivo "path/to/processmaker/workflow/engine/config/blacklist.ini" (si no existe el
archivo se puede crear), o tambien en el atributo "disable_functions" esto en el archivo "php.ini"
Ejemplo de "blacklist.ini":
;Classes
;=======
DashletInterface
;Functions
;=========
eval
exec
;date
;echo
strlen
235 lines
8.7 KiB
PHP
Executable File
235 lines
8.7 KiB
PHP
Executable File
<?php
|
|
/**
|
|
* AppHistory.php
|
|
* @package workflow.engine.classes.model
|
|
*/
|
|
|
|
//require_once 'classes/model/om/BaseAppHistory.php';
|
|
|
|
|
|
/**
|
|
* Skeleton subclass for representing a row from the 'APP_HISTORY' table.
|
|
*
|
|
*
|
|
*
|
|
* You should add additional methods to this class to meet the
|
|
* application requirements. This class will only be generated as
|
|
* long as it does not already exist in the output directory.
|
|
*
|
|
* @package workflow.engine.classes.model
|
|
*/
|
|
class AppHistory extends BaseAppHistory
|
|
{
|
|
public function insertHistory($aData)
|
|
{
|
|
$this->setAppUid($aData['APP_UID']);
|
|
$this->setDelIndex($aData['DEL_INDEX']);
|
|
$this->setProUid($aData['PRO_UID']);
|
|
$this->setTasUid($aData['TAS_UID']);
|
|
$this->setDynUid($aData['CURRENT_DYNAFORM']);
|
|
$this->setUsrUid($aData['USER_UID']);
|
|
$this->setAppStatus($aData['APP_STATUS']);
|
|
$this->setHistoryDate($aData['APP_UPDATE_DATE']);
|
|
$this->setHistoryData($aData['APP_DATA']);
|
|
|
|
if (isset($aData["OBJECT_TYPE"])) {
|
|
$this->setObjType($aData["OBJECT_TYPE"]);
|
|
}
|
|
|
|
if ($this->validate() ) {
|
|
$res = $this->save();
|
|
} else {
|
|
// Something went wrong. We can now get the validationFailures and handle them.
|
|
$msg = '';
|
|
$validationFailuresArray = $this->getValidationFailures();
|
|
foreach ($validationFailuresArray as $objValidationFailure) {
|
|
$msg .= $objValidationFailure->getMessage() . "<br/>";
|
|
}
|
|
}
|
|
}
|
|
|
|
public function getDynaformHistory($PRO_UID, $TAS_UID, $APP_UID, $DYN_UID = "")
|
|
{
|
|
G::LoadClass('case');
|
|
$oCase = new Cases();
|
|
|
|
$oCase->verifyTable();
|
|
|
|
$aObjectPermissions = $oCase->getAllObjects($PRO_UID, $APP_UID, $TAS_UID, $_SESSION['USER_LOGGED']);
|
|
|
|
if (!is_array($aObjectPermissions)) {
|
|
$aObjectPermissions = array('DYNAFORMS' => array(-1), 'INPUT_DOCUMENTS' => array(-1), 'OUTPUT_DOCUMENTS' => array(-1));
|
|
}
|
|
if (!isset($aObjectPermissions['DYNAFORMS'])) {
|
|
$aObjectPermissions['DYNAFORMS'] = array(-1);
|
|
} else {
|
|
if (!is_array($aObjectPermissions['DYNAFORMS'])) {
|
|
$aObjectPermissions['DYNAFORMS'] = array(-1);
|
|
}
|
|
}
|
|
if (!isset($aObjectPermissions['INPUT_DOCUMENTS'])) {
|
|
$aObjectPermissions['INPUT_DOCUMENTS'] = array(-1);
|
|
} else {
|
|
if (!is_array($aObjectPermissions['INPUT_DOCUMENTS'])) {
|
|
$aObjectPermissions['INPUT_DOCUMENTS'] = array(-1);
|
|
}
|
|
}
|
|
if (!isset($aObjectPermissions['OUTPUT_DOCUMENTS'])) {
|
|
$aObjectPermissions['OUTPUT_DOCUMENTS'] = array(-1);
|
|
} else {
|
|
if (!is_array($aObjectPermissions['OUTPUT_DOCUMENTS'])) {
|
|
$aObjectPermissions['OUTPUT_DOCUMENTS'] = array(-1);
|
|
}
|
|
}
|
|
|
|
$appDocument = new AppDocument();
|
|
|
|
foreach (array("INPUT_DOCUMENTS", "OUTPUT_DOCUMENTS") as $value) {
|
|
$key = $value;
|
|
|
|
if ($aObjectPermissions[$key]) {
|
|
foreach ($aObjectPermissions[$key] as $key2 => $value2) {
|
|
$appDocumentUid = $value2;
|
|
|
|
try {
|
|
$arrayAppDocumentData = $appDocument->load($appDocumentUid);
|
|
|
|
$aObjectPermissions[$key][$key2] = $arrayAppDocumentData["DOC_UID"];
|
|
} catch (Exception $e) {
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
$dynaForm = new Dynaform();
|
|
$inputDocument = new InputDocument();
|
|
$outputDocument = new OutputDocument();
|
|
|
|
$c = new Criteria('workflow');
|
|
$c->addSelectColumn(AppHistoryPeer::APP_UID);
|
|
$c->addSelectColumn(AppHistoryPeer::DEL_INDEX);
|
|
$c->addSelectColumn(AppHistoryPeer::PRO_UID);
|
|
$c->addSelectColumn(AppHistoryPeer::TAS_UID);
|
|
$c->addSelectColumn(AppHistoryPeer::DYN_UID);
|
|
$c->addSelectColumn(AppHistoryPeer::OBJ_TYPE);
|
|
$c->addSelectColumn(AppHistoryPeer::USR_UID);
|
|
$c->addSelectColumn(AppHistoryPeer::APP_STATUS);
|
|
$c->addSelectColumn(AppHistoryPeer::HISTORY_DATE);
|
|
$c->addSelectColumn(AppHistoryPeer::HISTORY_DATA);
|
|
$c->addSelectColumn(UsersPeer::USR_FIRSTNAME);
|
|
$c->addSelectColumn(UsersPeer::USR_LASTNAME);
|
|
$c->addAsColumn('USR_NAME', "CONCAT(USR_LASTNAME, ' ', USR_FIRSTNAME)");
|
|
$c->addJoin(AppHistoryPeer::USR_UID, UsersPeer::USR_UID, Criteria::LEFT_JOIN);
|
|
|
|
//WHERE
|
|
$c->add(
|
|
$c->getNewCriterion(AppHistoryPeer::DYN_UID, $aObjectPermissions["DYNAFORMS"], Criteria::IN)->addOr(
|
|
$c->getNewCriterion(AppHistoryPeer::DYN_UID, $aObjectPermissions["INPUT_DOCUMENTS"], Criteria::IN))->addOr(
|
|
$c->getNewCriterion(AppHistoryPeer::DYN_UID, $aObjectPermissions["OUTPUT_DOCUMENTS"], Criteria::IN))
|
|
);
|
|
|
|
$c->add(AppHistoryPeer::PRO_UID, $PRO_UID);
|
|
$c->add(AppHistoryPeer::APP_UID, $APP_UID);
|
|
if ((isset($DYN_UID))&&($DYN_UID!="")) {
|
|
$c->add(AppHistoryPeer::DYN_UID, $DYN_UID);
|
|
}
|
|
|
|
//Execute
|
|
$oDataset = AppHistoryPeer::doSelectRS($c);
|
|
$oDataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);
|
|
|
|
$aDynHistory = array();
|
|
$aDynHistory[] = array(
|
|
'DYN_TITLE' => 'char'
|
|
);
|
|
|
|
while ($oDataset->next()) {
|
|
$aRow = $oDataset->getRow();
|
|
|
|
$title = "";
|
|
|
|
switch ($aRow["OBJ_TYPE"]) {
|
|
case "DYNAFORM":
|
|
$arrayDynaFormData = $dynaForm->Load($aRow["DYN_UID"]);
|
|
|
|
$title = $arrayDynaFormData["DYN_TITLE"] . " (" . G::LoadTranslation("ID_DYNAFORM") . ")";
|
|
break;
|
|
case "INPUT_DOCUMENT":
|
|
$arrayInputDocumentData = $inputDocument->load($aRow["DYN_UID"]);
|
|
|
|
$title = $arrayInputDocumentData["INP_DOC_TITLE"] . " (" . G::LoadTranslation("ID_INPUT_DOCUMENT") . ")";
|
|
break;
|
|
case "OUTPUT_DOCUMENT":
|
|
$arrayOutputDocumentData = $outputDocument->load($aRow["DYN_UID"]);
|
|
|
|
$title = $arrayOutputDocumentData["OUT_DOC_TITLE"] . " (" . G::LoadTranslation("ID_OUTPUT_DOCUMENT") . ")";
|
|
break;
|
|
case "ASSIGN_TASK":
|
|
$title = G::LoadTranslation("ID_ASSIGN_TASK") . " (" . G::LoadTranslation("ID_TRIGGERS") . ")";
|
|
break;
|
|
}
|
|
|
|
$aRow["DYN_TITLE"] = $title;
|
|
|
|
$changedValues=unserialize($aRow['HISTORY_DATA']);
|
|
$html="<table border='0' cellpadding='0' cellspacing='0'>";
|
|
$sw_add=false;
|
|
foreach ($changedValues as $key => $value) {
|
|
if (($value!=null) && (!is_array($value))) {
|
|
$sw_add=true;
|
|
$html.="<tr>";
|
|
$html.="<td><b>$key:</b> </td>";
|
|
$html.="<td>$value</td>";
|
|
$html.="</tr>";
|
|
}
|
|
if (is_array($value)) {
|
|
$html.="<tr>";
|
|
$html.="<td><b>$key (grid):</b> </td>";
|
|
$html.="<td>";
|
|
$html.="<table>";
|
|
foreach ($value as $key1 => $value1) {
|
|
$html.="<tr>";
|
|
$html.="<td><b>$key1</b></td>";
|
|
$html.="<td>";
|
|
if (is_array($value1)) {
|
|
$sw_add=true;
|
|
$html.="<table>";
|
|
foreach ($value1 as $key2 => $value2) {
|
|
$html.="<tr>";
|
|
$html.="<td><b>$key2</b></td>";
|
|
$html.="<td>$value2</td>";
|
|
$html.="</tr>";
|
|
}
|
|
$html.="</table>";
|
|
}
|
|
$html.="</td>";
|
|
$html.="</tr>";
|
|
}
|
|
$html.="</table>";
|
|
$html.="</td>";
|
|
$html.="</tr>";
|
|
$html.="</td>";
|
|
}
|
|
}
|
|
$html.="</table>";
|
|
|
|
$aRow['FIELDS'] = $html;
|
|
|
|
if ($sw_add) {
|
|
$aDynHistory[] = $aRow;
|
|
}
|
|
}
|
|
|
|
global $_DBArray;
|
|
$_DBArray['DynaformsHistory'] = $aDynHistory;
|
|
$_SESSION['_DBArray'] = $_DBArray;
|
|
G::LoadClass('ArrayPeer');
|
|
$oCriteria = new Criteria('dbarray');
|
|
$oCriteria->setDBArrayTable('DynaformsHistory');
|
|
$oCriteria->addAscendingOrderByColumn(AppHistoryPeer::HISTORY_DATE);
|
|
|
|
return $oCriteria;
|
|
}
|
|
}
|
|
|