Ariadne-CMS /
ariadne
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | ar_pinp::allow( 'ar_events', array( |
||
| 4 | 'listen', 'capture', 'fire', 'get', 'event' |
||
| 5 | ) ); |
||
| 6 | ar_pinp::allow( 'ar_eventsInstance' ); |
||
| 7 | ar_pinp::allow( 'ar_eventsEvent' ); |
||
| 8 | ar_pinp::allow( 'ar_eventsListener' ); |
||
| 9 | |||
| 10 | class ar_events extends arBase { |
||
| 11 | protected static $listeners = array(); |
||
| 12 | protected static $event = null; |
||
| 13 | |||
| 14 | 1 | public static function listen( $eventName, $objectType = null, $capture = false ) { |
|
| 15 | 1 | $path = ar::context()->getPath(); |
|
| 16 | 1 | return new ar_eventsInstance( $path, $eventName, $objectType, $capture ); |
|
| 17 | } |
||
| 18 | |||
| 19 | public static function capture( $eventName, $objectType = null ) { |
||
| 20 | return self::listen( $eventName, $objectType, true ); |
||
| 21 | } |
||
| 22 | |||
| 23 | 15 | public static function fire( $eventName, $eventData = array(), $objectType = null, $path = '') { |
|
| 24 | 15 | if ( !isset(self::$listeners['capture'][$eventName]) |
|
| 25 | 15 | && !isset(self::$listeners['listen'][$eventName]) ) { |
|
| 26 | 15 | return $eventData; // no listeners for this event, so dont bother searching |
|
| 27 | } |
||
| 28 | $prevEvent = null; |
||
| 29 | if ( self::$event ) { |
||
| 30 | $prevEvent = self::$event; |
||
| 31 | } |
||
| 32 | $path = ar::context()->getPath( array( 'path' => $path ) ); |
||
| 33 | $me = ar::context()->getObject( array( 'path' => $path ) ); |
||
| 34 | if ( $me && !isset($objectType) ) { |
||
| 35 | $objectType = $me->type; |
||
| 36 | } else if ( !$objectType ) { // when set to false to prevent automatic filling of the objectType, reset it to null |
||
| 37 | $objectType = null; |
||
| 38 | } |
||
| 39 | self::$event = new ar_eventsEvent( $eventName, $eventData, $objectType, $path, $me ); |
||
| 40 | if ( self::walkListeners( self::$listeners['capture'][$eventName], $path, $objectType, true ) ) { |
||
| 41 | self::walkListeners( self::$listeners['listen'][$eventName], $path, $objectType, false ); |
||
| 42 | } |
||
| 43 | |||
| 44 | if ( self::$event->preventDefault ) { |
||
| 45 | $result = false; |
||
| 46 | } else if ( self::$event->data ) { |
||
| 47 | $result = self::$event->data; |
||
| 48 | } else { |
||
| 49 | $result = true; |
||
| 50 | } |
||
| 51 | self::$event = $prevEvent; |
||
| 52 | return $result; |
||
| 53 | } |
||
| 54 | |||
| 55 | protected static function walkListeners( $listeners, $path, $objectType, $capture ) { |
||
| 56 | $strObjectType = (string) $objectType; |
||
| 57 | $objectTypeStripped = $strObjectType; |
||
| 58 | $pos = strpos( $strObjectType, '.'); |
||
| 59 | if ( $pos !== false ) { |
||
| 60 | $objectTypeStripped = substr($strObjectType, 0, $pos); |
||
| 61 | } |
||
| 62 | $pathticles = explode( '/', $path ); |
||
| 63 | $pathlist = array( '/' ); |
||
| 64 | $prevpath = '/'; |
||
| 65 | foreach ( $pathticles as $pathticle ) { |
||
| 66 | if ( $pathticle ) { |
||
| 67 | $prevpath .= $pathticle . '/'; |
||
| 68 | $pathlist[] = $prevpath; |
||
| 69 | } |
||
| 70 | } |
||
| 71 | |||
| 72 | if ( !$capture ) { |
||
| 73 | $pathlist = array_reverse( $pathlist ); |
||
| 74 | } |
||
| 75 | reset($pathlist); |
||
| 76 | |||
| 77 | do { |
||
| 78 | $currentPath = current( $pathlist ); |
||
| 79 | if ( is_array( $listeners[$currentPath] ) ) { |
||
| 80 | foreach ( $listeners[$currentPath] as $listener ) { |
||
| 81 | if ( !isset($listener['type']) || |
||
| 82 | ( $listener['type'] == $strObjectType ) || |
||
| 83 | ( $listener['type'] == $objectTypeStripped ) || |
||
| 84 | ( is_a( $strObjectType, $listener['type'] ) ) ) |
||
| 85 | { |
||
| 86 | $continue = true; |
||
| 87 | if ( count($listener['filters']) ) { |
||
| 88 | $continue = false; |
||
| 89 | foreach( $listener['filters'] as $filter ) { |
||
| 90 | if ( $filter instanceof \Closure ) { |
||
| 91 | $continue = $filter( self::$event ); |
||
| 92 | if ( $continue ) { |
||
| 93 | continue; |
||
| 94 | } |
||
| 95 | } else if ( ar_filter::match(self::$event, $filter) ) { |
||
| 96 | $continue = true; |
||
| 97 | continue; |
||
| 98 | } |
||
| 99 | } |
||
| 100 | } |
||
| 101 | if ( $continue ) { |
||
| 102 | $result = call_user_func_array( $listener['method'], $listener['args'] ); |
||
| 103 | if ( $result === false ) { |
||
| 104 | return false; |
||
| 105 | } |
||
| 106 | } |
||
| 107 | } |
||
| 108 | } |
||
| 109 | } |
||
| 110 | } while( next( $pathlist ) ); |
||
| 111 | return true; |
||
| 112 | } |
||
| 113 | |||
| 114 | public static function event() { |
||
| 115 | return self::$event; |
||
| 116 | } |
||
| 117 | |||
| 118 | public static function get( $path ) { |
||
| 119 | return new ar_eventsInstance( $path ); |
||
| 120 | } |
||
| 121 | |||
| 122 | 1 | public static function addListener( $path, $eventName, $objectType, $method, $args, $capture = false, $filters = array() ) { |
|
| 123 | 1 | $when = ($capture) ? 'capture' : 'listen'; |
|
| 124 | 1 | self::$listeners[$when][$eventName][$path][] = array( |
|
| 125 | 1 | 'type' => $objectType, |
|
| 126 | 1 | 'method' => $method, |
|
| 127 | 1 | 'args' => $args, |
|
| 128 | 'filters' => $filters |
||
| 129 | 1 | ); |
|
| 130 | 1 | return new ar_eventsListener( $eventName, $path, $capture, count(self::$listeners[$when][$eventName][$path])-1 ); |
|
| 131 | } |
||
| 132 | |||
| 133 | public static function removeListener( $name, $path, $capture, $id ) { |
||
| 134 | $when = ($capture) ? 'capture' : 'listen'; |
||
| 135 | unset( self::$listeners[$when][$name][$path][$id] ); |
||
| 136 | } |
||
| 137 | } |
||
| 138 | |||
| 139 | class ar_eventsListener extends arBase { |
||
| 140 | private $capture = false; |
||
| 141 | private $path = ''; |
||
| 142 | private $name = ''; |
||
| 143 | private $id = null; |
||
| 144 | |||
| 145 | 1 | public function __construct( $name, $path, $capture, $id ) { |
|
| 146 | 1 | $this->name = $name; |
|
| 147 | 1 | $this->path = $path; |
|
| 148 | 1 | $this->capture = $capture; |
|
| 149 | 1 | $this->id = $id; |
|
| 150 | 1 | } |
|
| 151 | |||
| 152 | public function remove() { |
||
| 153 | if ( isset($this->id) ) { |
||
| 154 | ar_events::removeListener( $this->name, $this->path, $this->capture, $this->id ); |
||
| 155 | } |
||
| 156 | } |
||
| 157 | |||
| 158 | /* FIXME: add a add() method, which re-adds the listener, potentially as last in the list */ |
||
| 159 | } |
||
| 160 | |||
| 161 | class ar_eventsInstance extends arBase { |
||
| 162 | private $path = '/'; |
||
| 163 | private $eventName = null; |
||
| 164 | private $objectType = null; |
||
| 165 | private $capture = false; |
||
| 166 | private $filters = array(); |
||
| 167 | |||
| 168 | 1 | public function __construct( $path, $eventName = null, $objectType = null, $capture = false ) { |
|
| 169 | 1 | $this->path = $path; |
|
| 170 | 1 | $this->setEventProperties( $eventName, $objectType, $capture); |
|
| 171 | 1 | } |
|
| 172 | |||
| 173 | 1 | public function call( $method, $args = array() ) { |
|
| 174 | 1 | if ( is_string($method) ) { |
|
| 175 | 1 | $method = ar_pinp::getCallback( $method, array_keys($args) ); |
|
| 176 | 1 | } |
|
| 177 | 1 | if ( !( $method instanceof \Closure ) ) { |
|
| 178 | return ar_error::raiseError('Illegal event listener method', 500); |
||
| 179 | } |
||
| 180 | 1 | return ar_events::addListener( $this->path, $this->eventName, $this->objectType, $method, $args, $this->capture, $this->filters ); |
|
| 181 | } |
||
| 182 | |||
| 183 | public function listen( $eventName, $objectType = null ) { |
||
| 184 | $this->setEventProperties( $eventName, $objectType, false); |
||
| 185 | return $this; |
||
| 186 | } |
||
| 187 | |||
| 188 | public function capture( $eventName, $objectType = null ) { |
||
| 189 | $this->setEventProperties( $eventName, $objectType, true); |
||
| 190 | return $this; |
||
| 191 | } |
||
| 192 | |||
| 193 | public function match( $filter ) { |
||
| 194 | $this->filters[] = $filter; |
||
| 195 | return $this; |
||
| 196 | } |
||
| 197 | |||
| 198 | public function fire($eventName, $eventData, $objectType = null) { |
||
|
0 ignored issues
–
show
|
|||
| 199 | return ar_events::fire($eventName, $eventData, $objectType = null, $this->path); |
||
| 200 | } |
||
| 201 | |||
| 202 | 1 | private function setEventProperties($eventName, $objectType, $capture) { |
|
| 203 | 1 | $this->eventName = $eventName; |
|
| 204 | 1 | $this->objectType = $objectType; |
|
| 205 | 1 | $this->capture = (bool)$capture; |
|
| 206 | 1 | } |
|
| 207 | } |
||
| 208 | |||
| 209 | class ar_eventsEvent extends arBase { |
||
| 210 | public $data = null; |
||
| 211 | private $name = ''; |
||
| 212 | private $type = null; |
||
| 213 | private $preventDefault = false; |
||
| 214 | private $path = null; |
||
| 215 | private $target = null; |
||
| 216 | |||
| 217 | public function __construct( $name, $data = null, $type = null, $path = null, $target = null ) { |
||
| 218 | $this->name = $name; |
||
| 219 | $this->data = $data; |
||
| 220 | $this->type = $type; |
||
| 221 | $this->path = $path; |
||
| 222 | $this->target = $target; |
||
| 223 | } |
||
| 224 | |||
| 225 | public function preventDefault() { |
||
| 226 | $this->preventDefault = true; |
||
| 227 | return false; |
||
| 228 | } |
||
| 229 | |||
| 230 | public function __get( $name ) { |
||
| 231 | if ( in_array($name, array('preventDefault','name','type','path','target') ) ) { |
||
| 232 | return $this->{$name}; |
||
| 233 | } |
||
| 234 | } |
||
| 235 | |||
| 236 | } |
||
| 237 |
This check looks from parameters that have been defined for a function or method, but which are not used in the method body.