workflow_security_test.php File Reference

Go to the source code of this file.

Variables
	$root = dirname(__DIR__)
	$engineFile = $root . '/include/dbxWorkflowEngine.class.php'
	$adminFile = dirname(__DIR__, 2) . '/dbxWorkflow_admin/include/dbxWorkflowAdmin.class.php'
	$engine = file_get_contents($engineFile)
	$admin = file_get_contents($adminFile)
	$fail
if(!is_string( $engine)||!is_string( $admin)) if(strpos($engine, "check_action_token('dbxWorkflow.start'")===false||strpos($engine, 'has_instance_action_token($iid)')===false) if(strpos( $engine, 'guest_can_access_instance( $iid)')===false||!preg_match('/select\\(\\ $this->ddInstance,	if [\\s\\S] *?,\\s *1\\s *\\‍);/', $engine)) if(substr_count($engine, ' $db->begin($this->ddInstance)')< 3||substr_count($engine, ' $db->rollback($this->ddInstance)')< 3||substr_count($engine, ' $db->commit($this->ddInstance)')< 3) if(strpos( $engine, "'status' => 'finishing'")===false||strpos( $engine, "(int)\$db->_update_count !== 1")===false)(preg_match("/\\\\\$nextUrl\\s*\\.\\s*'&proc_cmd=/", $engine)===1||strpos( $admin, "action_token('dbxWorkflow.instance.' . \$id)")===false)

Variable Documentation

$admin

$admin = file_get_contents($adminFile)

Definition at line 7 of file workflow_security_test.php.

$adminFile

$adminFile = dirname(__DIR__, 2) . '/dbxWorkflow_admin/include/dbxWorkflowAdmin.class.php'

Definition at line 5 of file workflow_security_test.php.

$engine

$engine = file_get_contents($engineFile)

Definition at line 6 of file workflow_security_test.php.

Referenced by dbx\dbxWorkflow\dbxWorkflow\run().

$engineFile

$engineFile = $root . '/include/dbxWorkflowEngine.class.php'

Definition at line 4 of file workflow_security_test.php.

$fail

$fail

Initial value:

      = static function (string $message, int $code): void {
   fwrite(STDERR, "FAIL: $message\n");
   exit($code);
}

Definition at line 9 of file workflow_security_test.php.

$root

$root = dirname(__DIR__)

Definition at line 3 of file workflow_security_test.php.

if

if(!is_string($engine)||!is_string($admin)) if(strpos( $engine, "check_action_token('dbxWorkflow.start'")===false||strpos( $engine, 'has_instance_action_token( $iid)')===false) if(strpos($engine, 'guest_can_access_instance($iid)')===false||!preg_match('/select\\(\\ $this->ddInstance, if[\\s\\S] *?,\\s *1\\s *\\‍);/', $engine)) if(substr_count( $engine, ' $db->begin( $this->ddInstance)')< 3||substr_count( $engine, ' $db->rollback( $this->ddInstance)')< 3||substr_count( $engine, ' $db->commit( $this->ddInstance)')< 3) if(strpos($engine, "'status' => 'finishing'")===false||strpos($engine, "(int)\$db->_update_count !== 1")===false)(preg_match("/\\\\\$nextUrl\\s*\\.\\s*'&proc_cmd=/", $engine)===1||strpos($admin, "action_token('dbxWorkflow.instance.' . \$id)")===false)

(

preg_match("/\\\\\$nextUrl\\s*\\.\\s*'&proc_cmd=/", $engine)

= == 1 || strpos($admin, "action_token('dbxWorkflow.instance.' . \$id)") === false

)

Definition at line 39 of file workflow_security_test.php.