Your IP : 108.162.216.192
<?php
if(IN_MANAGER_MODE!="true") die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the MODx Content Manager instead of accessing this file directly.");
if(!$modx->hasPermission('exec_module')) {
$e->setError(3);
$e->dumpError();
}
if(isset($_REQUEST['id'])) {
$id = intval($_REQUEST['id']);
} else {
$id=0;
}
// make sure the id's a number
if(!is_numeric($id)) {
echo "Passed ID is NaN!";
exit;
}
// check if user has access permission, except admins
if($_SESSION['mgrRole']!=1){
$sql = "SELECT sma.usergroup,mg.member " .
"FROM ".$modx->getFullTableName("site_module_access")." sma " .
"LEFT JOIN ".$modx->getFullTableName("member_groups")." mg ON mg.user_group = sma.usergroup AND member='".$modx->getLoginUserID()."'".
"WHERE sma.module = '$id' LIMIT 1";
$rs = $modx->dbQuery($sql);
$row = $modx->fetchRow($rs);
if($row["usergroup"] && !$row["member"]) {
echo "<script type='text/javascript'>" .
"function jsalert(){ alert('You do not sufficient privileges to execute this module.');" .
"window.location.href='index.php?a=106';}".
"setTimeout('jsalert()',100)".
"</script>";
exit;
}
}
// get module data
$sql = "SELECT * " .
"FROM ".$modx->getFullTableName("site_modules")." " .
"WHERE id = $id;";
$rs = mysql_query($sql);
$limit = mysql_num_rows($rs);
if($limit>1) {
echo "<script type='text/javascript'>" .
"function jsalert(){ alert('Multiple modules sharing same unique id $id. Please contact the Site Administrator');" .
"window.location.href='index.php?a=106';}".
"setTimeout('jsalert()',100)".
"</script>";
exit;
}
if($limit<1) {
echo "<script type='text/javascript'>" .
"function jsalert(){ alert('No record found for id $id');" .
"window.location.href='index.php?a=106';}" .
"setTimeout('jsalert()',100)".
"</script>";
exit;
}
$content = mysql_fetch_assoc($rs);
if($content['disabled']) {
echo "<script type='text/javascript'>" .
"function jsalert(){ alert('This module is disabled and cannot be executed.');" .
"window.location.href='index.php?a=106';}" .
"setTimeout('jsalert()',100)".
"</script>";
exit;
}
// load module configuration
$parameter = array();
if(!empty($content["properties"])){
$tmpParams = explode("&",$content["properties"]);
for($x=0; $x<count($tmpParams); $x++) {
$pTmp = explode("=", $tmpParams[$x]);
$pvTmp = explode(";", trim($pTmp[1]));
if ($pvTmp[1]=='list' && $pvTmp[3]!="") $parameter[$pTmp[0]] = $pvTmp[3]; //list default
else if($pvTmp[1]!='list' && $pvTmp[2]!="") $parameter[$pTmp[0]] = $pvTmp[2];
}
}
// Set the item name for logger
$_SESSION['itemname'] = $content['name'];
$output = evalModule($content["modulecode"],$parameter);
echo $output;
include $base_path."manager/includes/sysalert.display.inc.php";
// evalModule
function evalModule($moduleCode,$params){
global $modx;
$etomite = &$modx;
$modx->event->params = &$params; // store params inside event object
if(is_array($params)) {
extract($params, EXTR_SKIP);
}
ob_start();
$mod = eval($moduleCode);
$msg = ob_get_contents();
ob_end_clean();
if ($php_errormsg) {
if(!strpos($php_errormsg,'Deprecated')) { // ignore php5 strict errors
// log error
global $content;
$modx->logEvent(1,3,"<b>$php_errormsg</b><br /><br /> $msg",$content['name']." - Module");
if($modx->isBackend()) $modx->event->alert("<span style='color:maroon;'><b>".$content['name']." - Module"." runtime error:</b></span><br /><br />An error occurred while loading the module. Please see the event log.");
}
}
unset($modx->event->params);
return $mod.$msg;
}
?>