Classes
class	dbxActionTokenAutomationReport
class	dbxActionTokenAutomationForm

Variables
	$fail
	$_SESSION = array()
	$_GET = array()
	$_POST = array()
	$web = dbx()->get_system_obj('dbxWebApp')
	$navigation = '?dbx_modul=testModule&dbx_run1=list&dbx_page=admin'
if(dbx() ->action_url($navigation) !==$navigation)	$automaticDeleteUrl = '?dbx_modul=testModule&dbx_run1=delete&rid=17'
	$automaticSecuredDeleteUrl = dbx()->action_url($automaticDeleteUrl)
	$automaticDeleteRoute = $web->parse_route_url($automaticSecuredDeleteUrl)
	$automaticDeletePolicy = $web->action_policy_for_url($automaticSecuredDeleteUrl)
	$automaticDeleteToken = (string)($automaticDeleteRoute['params']['dbx_token'] ?? '')
if((string)($automaticDeletePolicy['source'] ?? '') !=='automatic'\|\|(string)($automaticDeletePolicy['action'] ?? '') !=='dbxAction.delete'\|\|(string)($automaticDeletePolicy['bindings']['rid'] ?? '') !=='17'\|\|!dbx() ->check_action_token((string)($automaticDeletePolicy['scope'] ?? ''), $automaticDeleteToken))	$automaticSaveUrl = '?dbx_modul=testModule&dbx_run1=edit&dbx_run2=save&rid=23'
	$automaticSecuredSaveUrl = dbx()->action_url($automaticSaveUrl)
	$automaticSaveRoute = $web->parse_route_url($automaticSecuredSaveUrl)
	$automaticSavePolicy = $web->action_policy_for_url($automaticSecuredSaveUrl)
if((string)($automaticSavePolicy['source'] ?? '') !=='automatic'\|\|(string)($automaticSavePolicy['action'] ?? '') !=='dbxAction.save'\|\|!dbx() ->check_action_token((string)($automaticSavePolicy['scope'] ?? ''),(string)($automaticSaveRoute['params']['dbx_token'] ?? '')))	$namedDeleteUrl = '?dbx_modul=testModule&dbx_run1=invoice_delete&rid=25'
	$namedDeletePolicy = $web->action_policy_for_url($namedDeleteUrl)
if((string)($namedDeletePolicy['action'] ?? '') !=='dbxAction.delete')	$undeleteUrl = '?dbx_modul=testModule&dbx_run1=undelete&rid=25'
if(dbx() ->action_url($undeleteUrl) !==$undeleteUrl)	$deleteWithoutRid = '?dbx_modul=testModule&dbx_run1=delete'
if(dbx() ->action_url($deleteWithoutRid) !==$deleteWithoutRid)	$navigationWithRid = '?dbx_modul=testModule&dbx_run1=form&rid=17'
if(dbx() ->action_url($navigationWithRid) !==$navigationWithRid)	$changedAutomaticDeletePolicy
	$automaticCurrentPolicy = $web->current_action_policy()
	$deleteUrl = '?dbx_modul=testModule&dbx_run1=list&dbx_do=row_delete&rid=17'
	$securedDeleteUrl = dbx()->action_url($deleteUrl)
	$deleteRoute = $web->parse_route_url($securedDeleteUrl)
	$deleteToken = (string)($deleteRoute['params']['dbx_token'] ?? '')
	$deletePolicy = $web->action_policy_for_url($securedDeleteUrl)
if(!preg_match('/^[a-f0-9]{64}$/', $deleteToken)\|\|(string)($deletePolicy['action'] ?? '') !=='dbxReport.row_delete'\|\|!dbx() ->check_action_token((string)($deletePolicy['scope'] ?? ''), $deleteToken))	$changedRidUrl = '?dbx_modul=testModule&dbx_run1=list&dbx_do=row_delete&rid=18'
	$changedRidPolicy = $web->action_policy_for_url($changedRidUrl)
if(dbx() ->check_action_token((string)($changedRidPolicy['scope'] ?? ''), $deleteToken))	$securityStore = $_SESSION['dbx']['session']['dbx']['security'] ?? array()
if(dbx() ->check_action_token( 'missing.scope', '')) if(isset($_SESSION['dbx']['session']['dbx']['security']['action_token_secret']))	$unknownToken = str_repeat('a', 64)
if(dbx() ->check_action_token( 'missing.scope', $unknownToken)) if(isset($_SESSION['dbx']['session']['dbx']['security']['action_token_secret']))	$legacyToken = bin2hex(random_bytes(32))
if(!dbx() ->check_action_token('legacy.scope', $legacyToken))	$dbxConfig = dbx()->get_config('dbx')
	$dbxConfig ['action_routes']
	$_SESSION ['dbx']['config']['dbx'] = $dbxConfig
	$customUrl = '?dbx_modul=dbx&dbx_run1=test_action&dbx_do=remove&id=44'
	$customSecuredUrl = dbx()->action_url($customUrl)
	$customRoute = $web->parse_route_url($customSecuredUrl)
	$customPolicy = $web->action_policy_for_url($customSecuredUrl)
if((string)($customPolicy['source'] ?? '') !=='module'\|\|(string)($customPolicy['action'] ?? '') !=='dbx.custom_delete'\|\|!dbx() ->check_action_token((string)($customPolicy['scope'] ?? ''),(string)($customRoute['params']['dbx_token'] ?? '')))	$currentSecuredUrl = dbx()->action_url($deleteUrl)
	$currentRoute = $web->parse_route_url($currentSecuredUrl)
	$currentPolicy = $web->current_action_policy()
if(! $currentPolicy\|\|! $web->current_action_request_is_valid($currentPolicy))	$_GET ['dbx_token'] = str_repeat('0', 64)
	$form = new dbxActionTokenAutomationForm()
	$formAction = $form->mergedAction()
	$formActionRoute = $web->parse_route_url($formAction)
	$formActionPolicy = $web->action_policy_for_url($formAction)
if((string)($formActionPolicy['action'] ?? '') !=='dbxAction.save'\|\|!dbx() ->check_action_token((string)($formActionPolicy['scope'] ?? ''),(string)($formActionRoute['params']['dbx_token'] ?? '')))	$report = new dbxActionTokenAutomationReport()
	$rowAction = $report->rowDeleteData(array('id' => 23))
	$rowRoute = $web->parse_route_url((string)($rowAction['action'] ?? ''))
	$rowPolicy = $web->action_policy_for_url((string)($rowAction['action'] ?? ''))
	$deleteTableHtml = html_entity_decode($report->deleteTableButton(), ENT_QUOTES \| ENT_HTML5, 'UTF-8')
if(strpos($deleteTableHtml, 'dbx_do=delete_tab')===false\|\|strpos($deleteTableHtml, 'dbx_token=')===false)	$adminDeleteUrl = '?dbx_modul=dbxAdmin&dbx_run1=trace&dbx_run2=list_trace&dbx_do=delete_tab'
	$adminSecuredDeleteUrl = dbx()->action_url($adminDeleteUrl)
	$adminDeleteRoute = $web->parse_route_url($adminSecuredDeleteUrl)
	$adminDeletePolicy = $web->action_policy_for_url($adminSecuredDeleteUrl)
if((string)( $adminDeletePolicy[ 'action'] ?? '') !=='dbxReport.delete_tab'\|\|!dbx() ->check_action_token((string)( $adminDeletePolicy[ 'scope'] ?? ''),(string)( $adminDeleteRoute[ 'params'][ 'dbx_token'] ?? ''))) foreach(array(dirname(__DIR__, 2) . '/modules/dbxAdmin/include/dbxTrace.class.php', dirname(__DIR__, 2) . '/modules/dbxAdmin/include/dbxMissing.class.php', dirname(__DIR__, 2) . '/modules/dbxAdmin/include/dbxSession.class.php', dirname(__DIR__, 2) . '/modules/dbxAdmin/include/dbxSysMsg.class.php',) as $adminReportSourceFile)	$sysMsgSource
	if (strpos( $sysMsgSource, 'dbx_do=delete_error_log &rid=error_log')===false\|\|strpos( $sysMsgSource, "dbx()->action_url(")===false)
	$adminUser = new \dbx\dbxAdmin\dbxUser()
	$adminUserAction = new ReflectionMethod($adminUser, 'action_url')
	$adminUserDeleteUrl
	$adminUserDeleteRoute = $web->parse_route_url($adminUserDeleteUrl)
	$adminUserDeletePolicy = $web->action_policy_for_url($adminUserDeleteUrl)
if((string)($adminUserDeletePolicy['action'] ?? '') !=='dbxReport.row_delete'\|\|!dbx() ->check_action_token((string)($adminUserDeletePolicy['scope'] ?? ''),(string)($adminUserDeleteRoute['params']['dbx_token'] ?? '')))	$adminVerifyUrl9
	$adminVerifyUrl10
	$adminVerifyToken9
	$adminVerifyToken10
	$shopAdmin = new \dbx\dbxShop_admin\dbxShopAdmin()
	$shopAction = new ReflectionMethod($shopAdmin, 'actionUrl')
	$shopDeleteUrl
	$shopDeleteRoute = $web->parse_route_url($shopDeleteUrl)
	$shopDeletePolicy = $web->action_policy_for_url($shopDeleteUrl)
	$multiAction = $report->multiAction('multi_delete')
	$multiRoute = $web->parse_route_url((string)($multiAction['action'] ?? ''))
	$multiPolicy = $web->action_policy_for_url((string)($multiAction['action'] ?? ''))
if(!dbx() ->check_action_token((string)($multiPolicy['scope'] ?? ''),(string)($multiRoute['params']['dbx_token'] ?? '')))	$gridBase = '?dbx_modul=testModule&dbx_run1=grid'
	$gridUrls
if((string)( $gridUrls[ 'read_url'] ?? '') !==$gridBase . '&dbx_run2=records_grid_read') foreach(array('save', 'insert', 'delete', 'sort', 'sync') as $gridAction)	$unrecognizedGridUrls
if((string)($unrecognizedGridUrls['save_url'] ?? '') !=='')	$directGridRoute
	$directGridPolicy = $web->current_action_policy()
	$realGridRoutes
foreach($realGridRoutes as $realGridUrl=> $expectedGridAction)	$tokenBeforeAuthChange = dbx()->action_token('auth.boundary')
	$tokenAfterAuthChange = dbx()->action_token('auth.boundary')
if($tokenBeforeAuthChange===$tokenAfterAuthChange\|\|dbx() ->check_action_token('auth.boundary', $tokenBeforeAuthChange))	$sessionSource
if(substr_count($sessionSource, 'dbx() ->invalidate_action_tokens();')< 2)	$webAppSource
	$runSource
	$policyPosition = strpos($runSource, '$actionPolicy = $this->current_action_policy();')
	$modulePosition = strpos($runSource, '$dbxModul=dbx()->get_modul_obj($modul);')

Variable Documentation

◆ $_GET [1/2]

if (! $currentPolicy||! $web->current_action_request_is_valid( $currentPolicy)) $_GET[ 'dbx_token'] = str_repeat('0', 64)

Definition at line 206 of file dbxActionTokenAutomation_test.php.

◆ $_GET [2/2]

if ((string)( $directGridPolicy[ 'action'] ?? '') !=='dbxReport.grid_delete'||$web->current_action_request_is_valid( $directGridPolicy)) $_GET = array()

Definition at line 12 of file dbxActionTokenAutomation_test.php.

Referenced by dbx\dbxShop\dbxShopService\catalog(), dbxWebApp\check_request(), dbxWebApp\check_uri(), dbxRequest\get(), dbxApi\get_modul_var(), dbxApi\get_system_var(), dbx\dbxKi\dbxKiBundleService\handleProcess(), dbxRequest\request(), dbx\dbxSetup\dbxInstall\run(), dbx\dbxContent\dbxContentMediaResponse\serve_request(), and dbxWebApp\setRequestUriToGet().

◆ $_POST

$_POST = array()

Definition at line 13 of file dbxActionTokenAutomation_test.php.

Referenced by dbx\dbxShop\dbxShopService\cart(), dbx\dbxShop\dbxShopService\channelWebhook(), dbxWebApp\check_request(), dbxApi\get_modul_var(), dbxApi\get_system_var(), dbx\dbxKi\dbxKiBundleService\handleImport(), dbxRequest\post(), dbxRequest\request(), dbx\dbxAdmin\dbxDashboard\run(), dbx\dbxContent_admin\dbxContent_edit\run(), dbx\dbxContent_admin\dbxContent_sysdata\run(), dbx\dbxEditor\dbxEditor\run(), dbx\myLKW\myLKW_dispo\save_dispo(), and dbxReport\set_sel().

◆ $_SESSION [1/2]

$_SESSION[ 'dbx'][ 'config'][ 'dbx'] = $dbxConfig

Definition at line 176 of file dbxActionTokenAutomation_test.php.

◆ $_SESSION [2/2]

if (array_key_exists( 'action_tokens', $securityStore)) $_SESSION = array()

Definition at line 11 of file dbxActionTokenAutomation_test.php.

Referenced by dbxForm\add_norep(), dbxProcess\add_norep(), dbxWebApp\add_norep(), can(), can_modul(), dbx\dbxShop\dbxShopService\cart(), dbxSession\clean_session(), dbxDD\clear_dd_cache(), dbx_get_cookie_val(), dbx_load_cookie(), dbx_save_cookie(), dbx_set_CurrentUser(), dbxWebApp\del_add_css(), dbxWebApp\del_add_js(), delete_session_var(), dbxSession\destroy_php_session(), dbxDD\ensure_sqlite_db_file_for_dd(), dbxApi\get_config(), dbxDB\get_csv_seperator(), dbxDB\get_dd_autosync(), dbxDB\get_dd_fields(), dbxDD\get_dd_indexes(), dbxDD\get_dd_model(), dbxDB\get_dd_primary(), dbxDB\get_dd_table(), dbxDB\get_dd_table_def(), dbxApi\get_modul_var(), get_remember_var(), dbxWebApp\get_session_rec(), get_session_var(), dbxApi\get_system_var(), dbx\dbxKi\dbxKiDesignService\handleImport(), dbxSession\load_session(), dbxSession\login(), dbxSession\logout(), norep(), dbx\dbxShop\dbxShopService\orders(), dbxTPL\read_tpl(), dbxSession\save_session(), set_cookie_var(), dbxApi\set_modul_var(), set_remember_var(), set_session_var(), dbxApi\set_system_var(), and user().

◆ $adminDeletePolicy

$adminDeletePolicy = $web->action_policy_for_url($adminSecuredDeleteUrl)

Definition at line 299 of file dbxActionTokenAutomation_test.php.

◆ $adminDeleteRoute

$adminDeleteRoute = $web->parse_route_url($adminSecuredDeleteUrl)

Definition at line 298 of file dbxActionTokenAutomation_test.php.

◆ $adminDeleteUrl

if (strpos( $deleteTableHtml, 'dbx_do=delete_tab')===false||strpos( $deleteTableHtml, 'dbx_token=')===false) $adminDeleteUrl = '?dbx_modul=dbxAdmin&dbx_run1=trace&dbx_run2=list_trace&dbx_do=delete_tab'

Definition at line 296 of file dbxActionTokenAutomation_test.php.

◆ $adminSecuredDeleteUrl

$adminSecuredDeleteUrl = dbx()->action_url($adminDeleteUrl)

Definition at line 297 of file dbxActionTokenAutomation_test.php.

◆ $adminUser

$adminUser = new \dbx\dbxAdmin\dbxUser()

Definition at line 331 of file dbxActionTokenAutomation_test.php.

◆ $adminUserAction

$adminUserAction = new ReflectionMethod($adminUser, 'action_url')

Definition at line 332 of file dbxActionTokenAutomation_test.php.

◆ $adminUserDeletePolicy

$adminUserDeletePolicy = $web->action_policy_for_url($adminUserDeleteUrl)

Definition at line 339 of file dbxActionTokenAutomation_test.php.

◆ $adminUserDeleteRoute

$adminUserDeleteRoute = $web->parse_route_url($adminUserDeleteUrl)

Definition at line 338 of file dbxActionTokenAutomation_test.php.

◆ $adminUserDeleteUrl

$adminUserDeleteUrl

Initial value:

                    = (string)$adminUserAction->invoke(
   $adminUser,
   'list_user',
   array('dbx_do' => 'row_delete', 'rid' => 9)
)

Definition at line 333 of file dbxActionTokenAutomation_test.php.

◆ $adminVerifyToken10

$adminVerifyToken10

Initial value:

                    = (string)(
   $web->parse_route_url($adminVerifyUrl10)['params']['dbx_token'] ?? ''
)

Definition at line 361 of file dbxActionTokenAutomation_test.php.

◆ $adminVerifyToken9

$adminVerifyToken9

Initial value:

                   = (string)(
   $web->parse_route_url($adminVerifyUrl9)['params']['dbx_token'] ?? ''
)

Definition at line 358 of file dbxActionTokenAutomation_test.php.

◆ $adminVerifyUrl10

$adminVerifyUrl10

Initial value:

                  = (string)$adminUserAction->invoke(
   $adminUser,
   'list_user',
   array('dbx_do' => 'verify', 'rid' => 10)
)

Definition at line 353 of file dbxActionTokenAutomation_test.php.

◆ $adminVerifyUrl9

if ((string)( $adminUserDeletePolicy[ 'action'] ?? '') !=='dbxReport.row_delete'||!dbx() ->check_action_token((string)( $adminUserDeletePolicy[ 'scope'] ?? ''),(string)( $adminUserDeleteRoute[ 'params'][ 'dbx_token'] ?? ''))) $adminVerifyUrl9

Initial value:

                 = (string)$adminUserAction->invoke(
   $adminUser,
   'list_user',
   array('dbx_do' => 'verify', 'rid' => 9)
)

Definition at line 348 of file dbxActionTokenAutomation_test.php.

◆ $automaticCurrentPolicy

$automaticCurrentPolicy = $web->current_action_policy()

Definition at line 92 of file dbxActionTokenAutomation_test.php.

◆ $automaticDeletePolicy

$automaticDeletePolicy = $web->action_policy_for_url($automaticSecuredDeleteUrl)

Definition at line 30 of file dbxActionTokenAutomation_test.php.

◆ $automaticDeleteRoute

$automaticDeleteRoute = $web->parse_route_url($automaticSecuredDeleteUrl)

Definition at line 29 of file dbxActionTokenAutomation_test.php.

◆ $automaticDeleteToken

$automaticDeleteToken = (string)($automaticDeleteRoute['params']['dbx_token'] ?? '')

Definition at line 31 of file dbxActionTokenAutomation_test.php.

◆ $automaticDeleteUrl

if (dbx() ->action_url( $navigation) !==$navigation) $automaticDeleteUrl = '?dbx_modul=testModule&dbx_run1=delete&rid=17'

Definition at line 27 of file dbxActionTokenAutomation_test.php.

◆ $automaticSavePolicy

$automaticSavePolicy = $web->action_policy_for_url($automaticSecuredSaveUrl)

Definition at line 45 of file dbxActionTokenAutomation_test.php.

◆ $automaticSaveRoute

$automaticSaveRoute = $web->parse_route_url($automaticSecuredSaveUrl)

Definition at line 44 of file dbxActionTokenAutomation_test.php.

◆ $automaticSaveUrl

if ((string)( $automaticDeletePolicy[ 'source'] ?? '') !=='automatic'||(string)( $automaticDeletePolicy[ 'action'] ?? '') !=='dbxAction.delete'||(string)( $automaticDeletePolicy[ 'bindings'][ 'rid'] ?? '') !=='17'||!dbx() ->check_action_token((string)( $automaticDeletePolicy[ 'scope'] ?? ''), $automaticDeleteToken)) $automaticSaveUrl = '?dbx_modul=testModule&dbx_run1=edit&dbx_run2=save&rid=23'

Definition at line 42 of file dbxActionTokenAutomation_test.php.

◆ $automaticSecuredDeleteUrl

$automaticSecuredDeleteUrl = dbx()->action_url($automaticDeleteUrl)

Definition at line 28 of file dbxActionTokenAutomation_test.php.

◆ $automaticSecuredSaveUrl

$automaticSecuredSaveUrl = dbx()->action_url($automaticSaveUrl)

Definition at line 43 of file dbxActionTokenAutomation_test.php.

◆ $changedAutomaticDeletePolicy

if (dbx() ->action_url( $navigationWithRid) !==$navigationWithRid) $changedAutomaticDeletePolicy

Initial value:

                              = $web->action_policy_for_url(
   '?dbx_modul=testModule&dbx_run1=delete&rid=18'
)

Definition at line 76 of file dbxActionTokenAutomation_test.php.

◆ $changedRidPolicy

$changedRidPolicy = $web->action_policy_for_url($changedRidUrl)

Definition at line 119 of file dbxActionTokenAutomation_test.php.

◆ $changedRidUrl

if (!preg_match('/^[a-f0-9]{64}$/', $deleteToken)||(string)( $deletePolicy[ 'action'] ?? '') !=='dbxReport.row_delete'||!dbx() ->check_action_token((string)( $deletePolicy[ 'scope'] ?? ''), $deleteToken)) $changedRidUrl = '?dbx_modul=testModule&dbx_run1=list&dbx_do=row_delete&rid=18'

Definition at line 118 of file dbxActionTokenAutomation_test.php.

◆ $currentPolicy

$currentPolicy = $web->current_action_policy()

Definition at line 201 of file dbxActionTokenAutomation_test.php.

◆ $currentRoute

$currentRoute = $web->parse_route_url($currentSecuredUrl)

Definition at line 193 of file dbxActionTokenAutomation_test.php.

◆ $currentSecuredUrl

if ((string)( $customPolicy[ 'source'] ?? '') !=='module'||(string)( $customPolicy[ 'action'] ?? '') !=='dbx.custom_delete'||!dbx() ->check_action_token((string)( $customPolicy[ 'scope'] ?? ''),(string)( $customRoute[ 'params'][ 'dbx_token'] ?? ''))) $currentSecuredUrl = dbx()->action_url($deleteUrl)

Definition at line 192 of file dbxActionTokenAutomation_test.php.

◆ $customPolicy

$customPolicy = $web->action_policy_for_url($customSecuredUrl)

Definition at line 181 of file dbxActionTokenAutomation_test.php.

◆ $customRoute

$customRoute = $web->parse_route_url($customSecuredUrl)

Definition at line 180 of file dbxActionTokenAutomation_test.php.

◆ $customSecuredUrl

$customSecuredUrl = dbx()->action_url($customUrl)

Definition at line 179 of file dbxActionTokenAutomation_test.php.

◆ $customUrl

$customUrl = '?dbx_modul=dbx&dbx_run1=test_action&dbx_do=remove&id=44'

Definition at line 178 of file dbxActionTokenAutomation_test.php.

◆ $dbxConfig [1/2]

$dbxConfig[ 'action_routes']

Initial value:

           = array(
   'custom_delete' => array(
      'match' => array(
         'dbx_run1' => 'test_action',
         'dbx_do' => 'remove',
      ),
      'bind' => array('id'),
   ),
)

Definition at line 167 of file dbxActionTokenAutomation_test.php.

◆ $dbxConfig [2/2]

if (!dbx() ->check_action_token( 'legacy.scope', $legacyToken)) $dbxConfig = dbx()->get_config('dbx')

Definition at line 166 of file dbxActionTokenAutomation_test.php.

◆ $deletePolicy

$deletePolicy = $web->action_policy_for_url($securedDeleteUrl)

Definition at line 110 of file dbxActionTokenAutomation_test.php.

◆ $deleteRoute

$deleteRoute = $web->parse_route_url($securedDeleteUrl)

Definition at line 108 of file dbxActionTokenAutomation_test.php.

◆ $deleteTableHtml

$deleteTableHtml = html_entity_decode($report->deleteTableButton(), ENT_QUOTES | ENT_HTML5, 'UTF-8')

Definition at line 290 of file dbxActionTokenAutomation_test.php.

◆ $deleteToken

$deleteToken = (string)($deleteRoute['params']['dbx_token'] ?? '')

Definition at line 109 of file dbxActionTokenAutomation_test.php.

◆ $deleteUrl

$deleteUrl = '?dbx_modul=testModule&dbx_run1=list&dbx_do=row_delete&rid=17'

Definition at line 106 of file dbxActionTokenAutomation_test.php.

Referenced by dbxReport\get_table_row_action_data(), dbx\dbxShop_admin\dbxShopAdmin\order_report_next_record(), and dbx\dbxAdmin\dbxSchema\schema_row_action_data().

◆ $deleteWithoutRid

if (dbx() ->action_url( $undeleteUrl) !==$undeleteUrl) $deleteWithoutRid = '?dbx_modul=testModule&dbx_run1=delete'

Definition at line 66 of file dbxActionTokenAutomation_test.php.

◆ $directGridPolicy

$directGridPolicy = $web->current_action_policy()

Definition at line 439 of file dbxActionTokenAutomation_test.php.

◆ $directGridRoute

if ((string)( $unrecognizedGridUrls[ 'save_url'] ?? '') !=='') $directGridRoute

Initial value:

                 = $web->parse_route_url(
   $gridBase . '&dbx_run2=records_grid_delete'
)

Definition at line 431 of file dbxActionTokenAutomation_test.php.

◆ $fail

$fail

Initial value:

      = static function (string $message, int $code): void {
   fwrite(STDERR, "FAIL: $message\n");
   exit($code);
}

Definition at line 6 of file dbxActionTokenAutomation_test.php.

◆ $form

$form = new dbxActionTokenAutomationForm()

Examples: dbx/modules/myInvoices/include/myInvoicesService.class.php.

Definition at line 260 of file dbxActionTokenAutomation_test.php.

Referenced by dbx\dbxShop\dbxShopService\checkout(), dbx\myInvoices\myInvoicesService\form(), dbx\dbxAdmin\dbxAdminHelp\formButton(), dbx\dbxAdmin\dbxModuleRegistry\formHelpPath(), dbx\dbxAdmin\dbxAdminHelp\formUrl(), dbx\dbxKi\dbxKiDesignService\handleApply(), dbx\dbxKi\dbxKiDesignService\handleExport(), dbx\dbxKi\dbxKiDesignService\handleImport(), dbx\dbxKi\dbxKiBriefingService\handleStylesSave(), dbx\myInvoices\myInvoicesService\installation(), dbxForm\merge_fld_data(), dbx\dbxKi\dbxKiDesignService\renderBriefing(), dbx\dbxAdmin\dbxModuleRegistry\renderFormHelp(), dbx\dbxContent\dbxContentContextHelp\renderFormHelp(), dbx\dbxKi\dbxKiBundleService\renderStartPage(), dbx\dbxDesign_admin\dbxDesignAdmin\renderWizard(), dbx\dbxAdmin\dbxDDServerBindings\run(), dbx\dbxAdmin\dbxUpdate\run(), and dbx\dbxShop\dbxShopService\withdrawal().

◆ $formAction

$formAction = $form->mergedAction()

Definition at line 264 of file dbxActionTokenAutomation_test.php.

Referenced by dbxForm\prepareFormFrameReplaces().

◆ $formActionPolicy

$formActionPolicy = $web->action_policy_for_url($formAction)

Definition at line 266 of file dbxActionTokenAutomation_test.php.

◆ $formActionRoute

$formActionRoute = $web->parse_route_url($formAction)

Definition at line 265 of file dbxActionTokenAutomation_test.php.

◆ $gridBase

if (!dbx() ->check_action_token((string)( $multiPolicy[ 'scope'] ?? ''),(string)( $multiRoute[ 'params'][ 'dbx_token'] ?? ''))) $gridBase = '?dbx_modul=testModule&dbx_run1=grid'

Definition at line 398 of file dbxActionTokenAutomation_test.php.

◆ $gridUrls

$gridUrls

Initial value:

          = $report->gridUrls(array(
   'read' => $gridBase . '&dbx_run2=records_grid_read',
   'save' => $gridBase . '&dbx_run2=records_grid_save',
   'insert' => $gridBase . '&dbx_run2=records_grid_insert',
   'delete' => $gridBase . '&dbx_run2=records_grid_delete',
   'sort' => $gridBase . '&dbx_run2=records_grid_sort',
   'sync' => $gridBase . '&dbx_run2=records_grid_sync',
))

Definition at line 399 of file dbxActionTokenAutomation_test.php.

◆ $legacyToken

if(dbx() ->check_action_token('missing.scope', $unknownToken)) if (isset( $_SESSION[ 'dbx'][ 'session'][ 'dbx'][ 'security'][ 'action_token_secret'])) $legacyToken = bin2hex(random_bytes(32))

Definition at line 153 of file dbxActionTokenAutomation_test.php.

◆ $modulePosition

$modulePosition = strpos($runSource, '$dbxModul=dbx()->get_modul_obj($modul);')

Definition at line 488 of file dbxActionTokenAutomation_test.php.

◆ $multiAction

$multiAction = $report->multiAction('multi_delete')

Definition at line 388 of file dbxActionTokenAutomation_test.php.

◆ $multiPolicy

$multiPolicy = $web->action_policy_for_url((string)($multiAction['action'] ?? ''))

Definition at line 390 of file dbxActionTokenAutomation_test.php.

◆ $multiRoute

$multiRoute = $web->parse_route_url((string)($multiAction['action'] ?? ''))

Definition at line 389 of file dbxActionTokenAutomation_test.php.

◆ $namedDeletePolicy

$namedDeletePolicy = $web->action_policy_for_url($namedDeleteUrl)

Definition at line 56 of file dbxActionTokenAutomation_test.php.

◆ $namedDeleteUrl

if ((string)( $automaticSavePolicy[ 'source'] ?? '') !=='automatic'||(string)( $automaticSavePolicy[ 'action'] ?? '') !=='dbxAction.save'||!dbx() ->check_action_token((string)( $automaticSavePolicy[ 'scope'] ?? ''),(string)( $automaticSaveRoute[ 'params'][ 'dbx_token'] ?? ''))) $namedDeleteUrl = '?dbx_modul=testModule&dbx_run1=invoice_delete&rid=25'

Definition at line 55 of file dbxActionTokenAutomation_test.php.

◆ $navigation

$navigation = '?dbx_modul=testModule&dbx_run1=list&dbx_page=admin'

Definition at line 22 of file dbxActionTokenAutomation_test.php.

◆ $navigationWithRid

if (dbx() ->action_url( $deleteWithoutRid) !==$deleteWithoutRid) $navigationWithRid = '?dbx_modul=testModule&dbx_run1=form&rid=17'

Definition at line 71 of file dbxActionTokenAutomation_test.php.

◆ $policyPosition

$policyPosition = strpos($runSource, '$actionPolicy = $this->current_action_policy();')

Definition at line 487 of file dbxActionTokenAutomation_test.php.

◆ $realGridRoutes

$realGridRoutes

Initial value:

                = array(
   '?dbx_modul=dbxAdmin&dbx_run1=dd&dbx_run2=data_save&rid=dbx%7CdbxUser' =>
      'dbxReport.grid_save',
   '?dbx_modul=dbxAdmin&dbx_run1=dd&dbx_run2=fields_insert&modul=dbx&dd=dbxUser' =>
      'dbxReport.grid_insert',
   '?dbx_modul=dbxContent_admin&dbx_run1=content&dbx_run2=content_grid_sync' =>
      'dbxReport.grid_sync',
   '?dbx_modul=dbxUser_admin&dbx_run1=user&dbx_run2=user_grid_delete' =>
      'dbxReport.grid_delete',
)

Definition at line 447 of file dbxActionTokenAutomation_test.php.

◆ $report

if ((string)( $formActionPolicy[ 'action'] ?? '') !=='dbxAction.save'||!dbx() ->check_action_token((string)( $formActionPolicy[ 'scope'] ?? ''),(string)( $formActionRoute[ 'params'][ 'dbx_token'] ?? ''))) $report = new dbxActionTokenAutomationReport()

Examples: dbx/modules/myInvoices/include/myInvoicesService.class.php.

Definition at line 275 of file dbxActionTokenAutomation_test.php.

Referenced by dbx\dbxContact\dbxContactList\contactListReportRowActionData(), dbx\dbxContact_admin\dbxContactAdmin\contactTicketReportRowActionData(), dbx\dbxContent_admin\dbxContent_sections\content_next_record(), dbx\dbxContent_admin\dbxContent_sections\content_row_action_data(), dbx\dbxContent_admin\dbxContent_sections\folder_next_record(), dbx\dbxContent_admin\dbxContent_sections\folder_row_action_data(), dbx\myInvoices\myInvoicesService\invoice_items_report_next_record(), dbx\myInvoices\myInvoicesService\invoice_report_next_record(), dbx\dbxContent_admin\dbxContent_sections\media_next_record(), dbx\dbxContent_admin\dbxContent_sections\media_row_action_data(), dbx\dbxShop_admin\dbxShopAdmin\order_report_next_record(), dbx\myInvoices\myInvoicesService\positions(), dbx\dbxShop_admin\dbxShopAdmin\product_report_next_record(), dbx\dbxShop_admin\dbxShopAdmin\product_report_row_action_data(), dbx\myInvoices\myInvoicesService\report(), dbx\dbxAdmin\dbxSchema\schema_row_action_data(), dbx\dbxAdmin\server_row_action_data(), dbxReport\split_tpl(), dbx\dbxContent_admin\dbxContent_sections\template_row_action_data(), and dbx\dbxShop_admin\dbxShopAdmin\withdrawal_report_next_record().

◆ $rowAction

$rowAction = $report->rowDeleteData(array('id' => 23))

Definition at line 277 of file dbxActionTokenAutomation_test.php.

◆ $rowPolicy

$rowPolicy = $web->action_policy_for_url((string)($rowAction['action'] ?? ''))

Definition at line 279 of file dbxActionTokenAutomation_test.php.

◆ $rowRoute

$rowRoute = $web->parse_route_url((string)($rowAction['action'] ?? ''))

Definition at line 278 of file dbxActionTokenAutomation_test.php.

◆ $runSource

$runSource

Initial value:

           = substr(
   $webAppSource,
   (int)strrpos($webAppSource, 'function run()')
)

Definition at line 483 of file dbxActionTokenAutomation_test.php.

◆ $securedDeleteUrl

$securedDeleteUrl = dbx()->action_url($deleteUrl)

Definition at line 107 of file dbxActionTokenAutomation_test.php.

◆ $securityStore

if(!isset($securityStore['action_token_secret'])||isset($securityStore['action_tokens'])) for ( $rid=1;$rid<=200;$rid++) $securityStore = $_SESSION['dbx']['session']['dbx']['security'] ?? array()

Definition at line 124 of file dbxActionTokenAutomation_test.php.

◆ $sessionSource

if ( $tokenBeforeAuthChange===$tokenAfterAuthChange||dbx() ->check_action_token( 'auth.boundary', $tokenBeforeAuthChange)) $sessionSource

Initial value:

               = (string)file_get_contents(
   dirname(__DIR__) . '/dbxSession.class.php'
)

Definition at line 473 of file dbxActionTokenAutomation_test.php.

◆ $shopAction

$shopAction = new ReflectionMethod($shopAdmin, 'actionUrl')

Definition at line 372 of file dbxActionTokenAutomation_test.php.

◆ $shopAdmin

$shopAdmin = new \dbx\dbxShop_admin\dbxShopAdmin()

Definition at line 371 of file dbxActionTokenAutomation_test.php.

◆ $shopDeletePolicy

$shopDeletePolicy = $web->action_policy_for_url($shopDeleteUrl)

Definition at line 378 of file dbxActionTokenAutomation_test.php.

◆ $shopDeleteRoute

$shopDeleteRoute = $web->parse_route_url($shopDeleteUrl)

Definition at line 377 of file dbxActionTokenAutomation_test.php.

◆ $shopDeleteUrl

$shopDeleteUrl

Initial value:

               = (string)$shopAction->invoke(
   $shopAdmin,
   '?dbx_modul=dbxShop_admin&dbx_run1=products&dbx_do=row_delete&rid=11'
)

Definition at line 373 of file dbxActionTokenAutomation_test.php.

◆ $sysMsgSource

if((string)($adminDeletePolicy['action'] ?? '') !=='dbxReport.delete_tab'||!dbx() ->check_action_token((string)($adminDeletePolicy['scope'] ?? ''),(string)($adminDeleteRoute['params']['dbx_token'] ?? ''))) foreach (array( dirname(__DIR__, 2) . '/modules/dbxAdmin/include/dbxTrace.class.php', dirname(__DIR__, 2) . '/modules/dbxAdmin/include/dbxMissing.class.php', dirname(__DIR__, 2) . '/modules/dbxAdmin/include/dbxSession.class.php', dirname(__DIR__, 2) . '/modules/dbxAdmin/include/dbxSysMsg.class.php',) as $adminReportSourceFile) $sysMsgSource

Initial value:

              = (string)file_get_contents(
   dirname(__DIR__, 2) . '/modules/dbxAdmin/include/dbxSysMsg.class.php'
)

Definition at line 322 of file dbxActionTokenAutomation_test.php.

◆ $tokenAfterAuthChange

$tokenAfterAuthChange = dbx()->action_token('auth.boundary')

Definition at line 466 of file dbxActionTokenAutomation_test.php.

◆ $tokenBeforeAuthChange

foreach ( $realGridRoutes as $realGridUrl=> $expectedGridAction) $tokenBeforeAuthChange = dbx()->action_token('auth.boundary')

Definition at line 464 of file dbxActionTokenAutomation_test.php.

◆ $undeleteUrl

if ((string)( $namedDeletePolicy[ 'action'] ?? '') !=='dbxAction.delete') $undeleteUrl = '?dbx_modul=testModule&dbx_run1=undelete&rid=25'

Definition at line 61 of file dbxActionTokenAutomation_test.php.

◆ $unknownToken

if(dbx() ->check_action_token('missing.scope', '')) if (isset( $_SESSION[ 'dbx'][ 'session'][ 'dbx'][ 'security'][ 'action_token_secret'])) $unknownToken = str_repeat('a', 64)

Definition at line 145 of file dbxActionTokenAutomation_test.php.

◆ $unrecognizedGridUrls

if((string)($gridUrls['read_url'] ?? '') !==$gridBase . '&dbx_run2=records_grid_read') foreach (array( 'save', 'insert', 'delete', 'sort', 'sync') as $gridAction) $unrecognizedGridUrls

Initial value:

                      = $report->gridUrls(array(
   'save' => '?dbx_modul=testModule&dbx_run1=grid&dbx_run2=write',
))

Definition at line 424 of file dbxActionTokenAutomation_test.php.

◆ $web

$web = dbx()->get_system_obj('dbxWebApp')

Definition at line 20 of file dbxActionTokenAutomation_test.php.

◆ $webAppSource

if (substr_count( $sessionSource, 'dbx() ->invalidate_action_tokens();')< 2) $webAppSource ( )

Initial value:

              = (string)file_get_contents(
   dirname(__DIR__) . '/dbxWebApp.class.php'
)

Definition at line 480 of file dbxActionTokenAutomation_test.php.

◆ if

if($policyPosition===false|| $modulePosition===false|| $policyPosition >=$modulePosition) ( )

Definition at line 325 of file dbxActionTokenAutomation_test.php.

	dbxapp 4.1.3 CMS, Shop, Workflows und modulare Geschäftsanwendungen dbxapp.de

Classes

Variables

Variable Documentation

◆ $_GET [1/2]

◆ $_GET [2/2]

◆ $_POST

◆ $_SESSION [1/2]

◆ $_SESSION [2/2]

◆ $adminDeletePolicy

◆ $adminDeleteRoute

◆ $adminDeleteUrl

◆ $adminSecuredDeleteUrl

◆ $adminUser

◆ $adminUserAction

◆ $adminUserDeletePolicy

◆ $adminUserDeleteRoute

◆ $adminUserDeleteUrl

◆ $adminVerifyToken10

◆ $adminVerifyToken9

◆ $adminVerifyUrl10

◆ $adminVerifyUrl9

◆ $automaticCurrentPolicy

◆ $automaticDeletePolicy

◆ $automaticDeleteRoute

◆ $automaticDeleteToken

◆ $automaticDeleteUrl

◆ $automaticSavePolicy

◆ $automaticSaveRoute

◆ $automaticSaveUrl

◆ $automaticSecuredDeleteUrl

◆ $automaticSecuredSaveUrl

◆ $changedAutomaticDeletePolicy

◆ $changedRidPolicy

◆ $changedRidUrl

◆ $currentPolicy

◆ $currentRoute

◆ $currentSecuredUrl

◆ $customPolicy

◆ $customRoute

◆ $customSecuredUrl

◆ $customUrl

◆ $dbxConfig [1/2]

◆ $dbxConfig [2/2]

◆ $deletePolicy

◆ $deleteRoute

◆ $deleteTableHtml

◆ $deleteToken

◆ $deleteUrl

◆ $deleteWithoutRid

◆ $directGridPolicy

◆ $directGridRoute

◆ $fail

◆ $form

◆ $formAction

◆ $formActionPolicy

◆ $formActionRoute

◆ $gridBase

◆ $gridUrls

◆ $legacyToken

◆ $modulePosition

◆ $multiAction

◆ $multiPolicy

◆ $multiRoute

◆ $namedDeletePolicy

◆ $namedDeleteUrl

◆ $navigation

◆ $navigationWithRid

◆ $policyPosition

◆ $realGridRoutes

◆ $report

◆ $rowAction

◆ $rowPolicy

◆ $rowRoute

◆ $runSource

◆ $securedDeleteUrl

◆ $securityStore

◆ $sessionSource

◆ $shopAction

◆ $shopAdmin

◆ $shopDeletePolicy