Zabbix

<?php declare(strict_types = 0);

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

​

class CLink extends CTag {

​

    private $csrf_token = '';

    private $confirm_message = '';

    private $url;

​

    public function __construct($item = null, $url = null) {

        parent::__construct('a', true);

​

        if ($item !== null) {

            $this->addItem($item);

        }

        $this->url = $url;

    }

​

    /**

     * Adds CSRF token into the URL.

     * POST method will be used for CSRF_TOKEN_NAME argument.

     *

     * @param string $csrf_token  already generated CSRF token string.

     *

     * @return $this

     */

    public function addCsrfToken(string $csrf_token) {

        $this->csrf_token = $csrf_token;

​

        return $this;

    }

​

    /*

     * Add a confirmation message

     */

    public function addConfirmation($value) {

        $this->confirm_message = $value;

        return $this;

    }

​

    /**

     * Set URL target. If target is "_blank", add "rel" tag and tag values "noopener" and "noreferrer". The "noreferrer"

     * depends if it is set to true in defines.inc.php.

     *

     * @param string $value  URL target value.

     *

     * @return CLink

     */

    public function setTarget(?string $value = null): self {

        $this->setAttribute('target', $value);

​

        if ($value === '_blank') {

            $this->setAttribute('rel', 'noopener'.(ZBX_NOREFERER ? ' noreferrer' : ''));

        }

​

        return $this;

    }

​

    public function toString($destroy = true) {

        $url = $this->url;

​

        if ($url === null) {

            $this->setAttribute('role', 'button');

        }

​

        if ($this->csrf_token != '') {

            if (array_key_exists(ZBX_SESSION_NAME, $_COOKIE)) {

                $url .= (strpos($url, '&') !== false || strpos($url, '?') !== false) ? '&' : '?';

                $url .= CSRF_TOKEN_NAME.'='.$this->csrf_token;

            }

            $confirm_script = ($this->confirm_message !== '')

                ? 'Confirm('.json_encode($this->confirm_message).') && '

                : '';

            $this->onClick("javascript: return ".$confirm_script."redirect('".$url."', 'post', '".

                CSRF_TOKEN_NAME."', true)"

            );

            $this->setAttribute('href', 'javascript:void(0)');

        }