This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Tpg\ExtjsBundle\Command; |
||
4 | |||
5 | use Doctrine\Bundle\DoctrineBundle\Mapping\ClassMetadataCollection; |
||
6 | use Doctrine\Bundle\DoctrineBundle\Mapping\DisconnectedMetadataFactory; |
||
7 | use Doctrine\ORM\Mapping\ClassMetadata; |
||
8 | use Symfony\Bundle\FrameworkBundle\Command\ContainerAwareCommand; |
||
9 | use Symfony\Component\Console\Input\InputArgument; |
||
10 | use Symfony\Component\Console\Input\InputInterface; |
||
11 | use Symfony\Component\Console\Input\InputOption; |
||
12 | use Symfony\Component\Console\Output\OutputInterface; |
||
13 | |||
14 | /** |
||
15 | * Generates Extjs model based on entity |
||
16 | */ |
||
17 | class GenerateEntityCommand extends ContainerAwareCommand |
||
18 | { |
||
19 | /** |
||
20 | * @inheritdoc |
||
21 | */ |
||
22 | 2 | public function configure() |
|
23 | { |
||
24 | 2 | parent::configure(); |
|
25 | |||
26 | 2 | $this->setName('generate:extjs:entity'); |
|
27 | 2 | $this->addArgument('name', InputArgument::REQUIRED, "A bundle name, a namespace, or a class name"); |
|
28 | 2 | $this->addOption( |
|
29 | 2 | 'output', |
|
30 | 2 | '', |
|
31 | 2 | InputOption::VALUE_OPTIONAL, |
|
32 | "File/Directory for the output of the ExtJs model file" |
||
33 | 2 | ); |
|
34 | 2 | $this->addOption('overwrite', 'y', InputOption::VALUE_NONE, "Overwrite existing file"); |
|
35 | 2 | $this->setDescription("Generate Sencha ExtJs model base on an existing PHP entity"); |
|
36 | 2 | } |
|
37 | |||
38 | /** |
||
39 | * @inheritdoc |
||
40 | */ |
||
41 | public function execute(InputInterface $input, OutputInterface $output) |
||
42 | { |
||
43 | $reader = $this->getContainer()->get('annotation_reader'); |
||
44 | $generator = $this->getContainer()->get("tpg_extjs.generator"); |
||
45 | $outputLocation = false; |
||
46 | if ($input->getOption("output")) { |
||
47 | if (is_dir($input->getOption("output"))) { |
||
48 | $outputLocation = realpath($input->getOption("output")); |
||
49 | } else { |
||
50 | if (is_dir(dirname($input->getOption("output")))) { |
||
51 | if (!$this->canWriteFile($input, $output, $input->getOption("output"))) { |
||
52 | exit(1); |
||
53 | } |
||
54 | file_put_contents($input->getOption("output"), ''); |
||
55 | $outputLocation = realpath($input->getOption("output")); |
||
56 | } else { |
||
57 | $output->writeln("Invalid output directory"); |
||
58 | exit(1); |
||
59 | } |
||
60 | } |
||
61 | } |
||
62 | $metadata = $this->getMetadata($input, $output, $outputLocation === false); |
||
63 | foreach ($metadata->getMetadata() as $classMetadata) { |
||
64 | /** @var ClassMetadata $classMetadata */ |
||
65 | $classMetadata->reflClass = new \ReflectionClass($classMetadata->name); |
||
66 | if ($reader->getClassAnnotation( |
||
67 | $classMetadata->getReflectionClass(), |
||
68 | 'Tpg\ExtjsBundle\Annotation\Model' |
||
69 | ) !== null |
||
70 | ) { |
||
71 | if ($outputLocation) { |
||
0 ignored issues
–
show
|
|||
72 | if (is_dir($outputLocation)) { |
||
73 | $baseDir = $outputLocation; |
||
74 | foreach (explode("\\", $classMetadata->namespace) as $dir) { |
||
75 | @mkdir($baseDir.DIRECTORY_SEPARATOR.$dir); |
||
0 ignored issues
–
show
It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.
If you suppress an error, we recommend checking for the error condition explicitly: // For example instead of
@mkdir($dir);
// Better use
if (@mkdir($dir) === false) {
throw new \RuntimeException('The directory '.$dir.' could not be created.');
}
![]() |
|||
76 | $baseDir .= DIRECTORY_SEPARATOR.$dir; |
||
77 | } |
||
78 | $fileName = $baseDir.DIRECTORY_SEPARATOR.substr( |
||
79 | $classMetadata->name, |
||
80 | strlen($classMetadata->namespace) + 1 |
||
81 | ).".js"; |
||
82 | if (!$this->canWriteFile($input, $output, $fileName)) { |
||
83 | continue; |
||
84 | } |
||
85 | file_put_contents( |
||
86 | $fileName, |
||
87 | $generator->generateMarkupForEntity($classMetadata->name) |
||
88 | ); |
||
89 | $output->writeln("Generated $fileName"); |
||
90 | } else { |
||
91 | file_put_contents( |
||
92 | $outputLocation, |
||
93 | $generator->generateMarkupForEntity($classMetadata->name), |
||
94 | FILE_APPEND |
||
95 | ); |
||
96 | $output->writeln("Appending to $outputLocation"); |
||
97 | } |
||
98 | } else { |
||
99 | $output->write($generator->generateMarkupForEntity($classMetadata->name)); |
||
100 | } |
||
101 | } |
||
102 | } |
||
103 | } |
||
104 | |||
105 | /** |
||
106 | * Returning ClassMetadata |
||
107 | * |
||
108 | * @param InputInterface $input An InputInterface instance |
||
109 | * @param OutputInterface $output An OutputInterface instance |
||
110 | * @param bool $displayStatus Displaying process messages |
||
111 | * |
||
112 | * @return ClassMetadataCollection |
||
113 | */ |
||
114 | protected function getMetadata(InputInterface $input, OutputInterface $output, $displayStatus) |
||
115 | { |
||
116 | $manager = new DisconnectedMetadataFactory($this->getContainer()->get('doctrine')); |
||
117 | try { |
||
118 | $bundle = $this->getContainer()->get("kernel")->getBundle($input->getArgument('name')); |
||
119 | if ($displayStatus) { |
||
120 | $output->writeln(sprintf('Generating entities for bundle "<info>%s</info>"', $bundle->getName())); |
||
121 | } |
||
122 | $metadata = $manager->getBundleMetadata($bundle); |
||
123 | } catch (\InvalidArgumentException $e) { |
||
124 | $name = strtr($input->getArgument('name'), '/', '\\'); |
||
125 | |||
126 | if (false !== $pos = strpos($name, ':')) { |
||
127 | $name = $this->getContainer()->get('doctrine') |
||
128 | ->getAliasNamespace(substr($name, 0, $pos)).'\\'.substr($name, $pos + 1); |
||
129 | } |
||
130 | |||
131 | if (class_exists($name)) { |
||
132 | if ($displayStatus) { |
||
133 | $output->writeln(sprintf('Generating entity "<info>%s</info>"', $name)); |
||
134 | } |
||
135 | $metadata = $manager->getClassMetadata($name, $input->getOption('path')); |
||
136 | } else { |
||
137 | if ($displayStatus) { |
||
138 | $output->writeln(sprintf('Generating entities for namespace "<info>%s</info>"', $name)); |
||
139 | } |
||
140 | $metadata = $manager->getNamespaceMetadata($name, $input->getOption('path')); |
||
141 | } |
||
142 | } |
||
143 | |||
144 | return $metadata; |
||
145 | } |
||
146 | |||
147 | protected function canWriteFile(InputInterface $input, OutputInterface $output, $fileName) |
||
148 | { |
||
149 | if (!$input->getOption("overwrite") && file_exists($fileName)) { |
||
150 | $dialog = $this->getHelperSet()->get('dialog'); |
||
151 | $result = $dialog->askConfirmation( |
||
152 | $output, |
||
153 | '<question>'.$fileName.' already exist, overwrite?</question>', |
||
154 | false |
||
155 | ); |
||
156 | if (!$result) { |
||
157 | $output->writeln("Skipping $fileName"); |
||
158 | } |
||
159 | |||
160 | return $result; |
||
161 | } else { |
||
162 | return true; |
||
163 | } |
||
164 | } |
||
165 | } |
In PHP, under loose comparison (like
==
, or!=
, orswitch
conditions), values of different types might be equal.For
string
values, the empty string''
is a special case, in particular the following results might be unexpected: