README.md

@@ -1,14 +1,14 @@
 # ![Bookmark star icon](icon.png) SemanticScuttle
 
-SemanticScuttle is a social bookmarking tool experimenting with new features like structured (hierarchical) tags and collaborative descriptions of tags. Originally a fork of Scuttle, it has overtaken its ancestor in stability, features and usability. The querwurzel [fork](https://github.com/querwurzel/semantic-scuttle) brought the software up to PHP 7.3 compatibility, but is no longer in development. This fork's aims are to:
+SemanticScuttle is a social bookmarking tool experimenting with new features like structured (heirarchical) tags and collaborative descriptions of tags. Originally a fork of Scuttle, it has overtaken its ancestor in stability, features and usability. The querwurzel [fork](https://github.com/querwurzel/semantic-scuttle) brought the software up to PHP 7.3 compatibility, but is no longer in development. This fork's aims are to:
   * bring app compatibility up to PHP 8.2 (for at least the MySQL/mysqli database option, possibly others), avoiding the "Deprecated" messages under PHP 8.2 that will be the "Fatal Error"s of a future PHP version;
   * correct broken links in the documentation; and to
   * bundle a responsive theme (forked from [sscuttlizr](https://github.com/jonrandoem/sscuttlizr)) with minimal features, designed for cases in which this app is embedded in a larger system.
-
+  * secure the application (see warning).
 
 ## Warning
 
-Although a visual code review leads to the conclusion that due attention has been paid to application security by previous developers, we offer no warranty, express or implied, regarding the security of this application. Many of the risks associated insecure application code may be mitigated by turning off anonymous editing and user registration capabilities after a single administrative user has been created (see configuration.rst file in doc folder), giving the application read-only access to the database after setup and data loading is complete, and/or not exposing the application to the internet. 
+We offer no warranty, express or implied, regarding the security of this application. No security testing has been performed, but a visual review has revealed highly questionable coding practices. The associated risks may be mitigated by turning off anonymous editing and user registration capabilities after a single administrative user has been created (see configuration.rst file in doc folder), and/or not exposing the application to the internet. 
 
 ## Features
   * LDAP/Active Directory authentication

src/SemanticScuttle/Service/Bookmark.php

@@ -504,9 +504,7 @@ class SemanticScuttle_Service_Bookmark extends SemanticScuttle_DbService
             'bPrivateNote' => $privateNote,
             'bStatus'      => intval($status),
             'bHash'        => $this->getHash($address),
-            'bShort'       => $short,
-            'bVotes'       => 0,
-            'bVoting'      => 0,
+            'bShort'       => $short
         );
 
         $sql = 'INSERT INTO '. $this->getTableName()

src/SemanticScuttle/Service/User.php

@@ -103,15 +103,7 @@ class SemanticScuttle_Service_User extends SemanticScuttle_DbService
                 GENERAL_ERROR, 'Could not get user',
                 '', __LINE__, __FILE__, $query, $this->db
             );
-            return [ 'uId' => 0,
-                     'username' => '',
-                     'name' => '',
-                     'email' => '',
-                     'homepage' => '',
-                     'content' => '',
-                     'datetime' => NULL,
-                     'isAdmin' => false,
-                     'privateKeey' => '' ];
+            return false;
         }
 
         $row = $this->db->sql_fetchrow($dbresult);
@@ -119,15 +111,7 @@ class SemanticScuttle_Service_User extends SemanticScuttle_DbService
         if ($row) {
             return $row;
         } else {
-            return [ 'uId' => 0,
-                     'username' => '',
-                     'name' => '',
-                     'email' => '',
-                     'homepage' => '',
-                     'content' => '',
-                     'datetime' => NULL,
-                     'isAdmin' => false,
-                     'privateKeey' => '' ];
+            return false;
         }
     }
 

src/php-gettext/gettext.inc

@@ -89,18 +89,18 @@ function get_list_of_locales($locale) {
       if ($modifier) {
         if ($country) {
           if ($charset)
-            array_push($locale_names, "{$lang}_$country.$charset@$modifier");
-          array_push($locale_names, "{$lang}_$country@$modifier");
+            array_push($locale_names, "${lang}_$country.$charset@$modifier");
+          array_push($locale_names, "${lang}_$country@$modifier");
         } elseif ($charset)
-            array_push($locale_names, "{$lang}.$charset@$modifier");
+            array_push($locale_names, "${lang}.$charset@$modifier");
         array_push($locale_names, "$lang@$modifier");
       }
       if ($country) {
         if ($charset)
-          array_push($locale_names, "{$lang}_$country.$charset");
-        array_push($locale_names, "{$lang}_$country");
+          array_push($locale_names, "${lang}_$country.$charset");
+        array_push($locale_names, "${lang}_$country");
       } elseif ($charset)
-          array_push($locale_names, "{$lang}.$charset");
+          array_push($locale_names, "${lang}.$charset");
       array_push($locale_names, $lang);
     }
 

src/php-gettext/gettext.php

@@ -98,7 +98,7 @@ class gettext_reader {
    * @param object Reader the StreamReader object
    * @param boolean enable_cache Enable or disable caching of strings (default on)
    */
-  function __construct($Reader, $enable_cache = true) {
+  function gettext_reader($Reader, $enable_cache = true) {
     // If there isn't a StreamReader, turn on short circuit mode.
     if (! $Reader || isset($Reader->error) ) {
       $this->short_circuit = true;

src/php-gettext/streams.php

@@ -49,7 +49,7 @@ class StringReader {
   var $_pos;
   var $_str;
 
-  public function __construct($str='') {
+  function StringReader($str='') {
     $this->_str = $str;
     $this->_pos = 0;
   }
@@ -86,7 +86,7 @@ class FileReader {
   var $_fd;
   var $_length;
 
-  public function __construct($filename) {
+  function FileReader($filename) {
     if (file_exists($filename)) {
 
       $this->_length=filesize($filename);
@@ -143,7 +143,7 @@ class FileReader {
 // Preloads entire file in memory first, then creates a StringReader
 // over it (it assumes knowledge of StringReader internals)
 class CachedFileReader extends StringReader {
-  public function __construct($filename) {
+  function CachedFileReader($filename) {
     if (file_exists($filename)) {
 
       $length=filesize($filename);