This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php |
||||
2 | /** |
||||
3 | * REST API top sellers controller |
||||
4 | * |
||||
5 | * Handles requests to the reports/top_sellers endpoint. |
||||
6 | * |
||||
7 | * @package GetPaid |
||||
8 | * @subpackage REST API |
||||
9 | * @since 2.0.0 |
||||
10 | */ |
||||
11 | |||||
12 | defined( 'ABSPATH' ) || exit; |
||||
13 | |||||
14 | /** |
||||
15 | * GetPaid REST top sellers controller class. |
||||
16 | * |
||||
17 | * @package GetPaid |
||||
18 | */ |
||||
19 | class GetPaid_REST_Report_Top_Sellers_Controller extends GetPaid_REST_Report_Sales_Controller { |
||||
20 | |||||
21 | /** |
||||
22 | * Route base. |
||||
23 | * |
||||
24 | * @var string |
||||
25 | */ |
||||
26 | protected $rest_base = 'reports/top_sellers'; |
||||
27 | |||||
28 | /** |
||||
29 | * Get top sellers report. |
||||
30 | * |
||||
31 | * @param WP_REST_Request $request |
||||
32 | * @return array|WP_Error |
||||
33 | */ |
||||
34 | public function get_items( $request ) { |
||||
35 | |||||
36 | // Prepare items. |
||||
37 | $this->report_range = $this->get_date_range( $request ); |
||||
38 | $report_data = $this->get_report_data(); |
||||
39 | |||||
40 | $top_sellers = array(); |
||||
41 | |||||
42 | foreach ( $report_data as $item ) { |
||||
43 | |||||
44 | $item_obj = new WPInv_Item( $item ); |
||||
0 ignored issues
–
show
Unused Code
introduced
by
![]() |
|||||
45 | $item_name = $item->invoice_item_name; |
||||
46 | $item_qty = floatval( $item->invoice_item_qty ); |
||||
47 | $item_id = absint( $item->invoice_item_id ); |
||||
48 | $price = sanitize_text_field( wpinv_price( $item->invoice_item_price ) ); |
||||
49 | |||||
50 | $item_obj = new WPInv_Item( $item_id ); |
||||
51 | |||||
52 | if ( $item_obj->exists() ) { |
||||
53 | $item_name = $item_obj->get_name(); |
||||
54 | } else { |
||||
55 | $item_id = 0; |
||||
56 | } |
||||
57 | |||||
58 | $top_sellers[] = array( |
||||
59 | 'name' => sanitize_text_field( $item_name ), |
||||
60 | 'item_id' => $item_id, |
||||
61 | 'quantity' => $item_qty, |
||||
62 | 'earnings' => wpinv_round_amount( $item->invoice_item_price ), |
||||
63 | 'earnings_formatted' => sanitize_text_field( wpinv_price( $price ) ), |
||||
0 ignored issues
–
show
$price of type string is incompatible with the type double expected by parameter $amount of wpinv_price() .
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
![]() |
|||||
64 | ); |
||||
65 | |||||
66 | } |
||||
67 | |||||
68 | $data = array(); |
||||
69 | foreach ( $top_sellers as $top_seller ) { |
||||
70 | $item = $this->prepare_item_for_response( (object) $top_seller, $request ); |
||||
71 | $data[] = $this->prepare_response_for_collection( $item ); |
||||
72 | } |
||||
73 | |||||
74 | return rest_ensure_response( $data ); |
||||
0 ignored issues
–
show
|
|||||
75 | |||||
76 | } |
||||
77 | |||||
78 | /** |
||||
79 | * Prepare a report sales object for serialization. |
||||
80 | * |
||||
81 | * @param stdClass $top_seller |
||||
82 | * @param WP_REST_Request $request Request object. |
||||
83 | * @return WP_REST_Response $response Response data. |
||||
84 | */ |
||||
85 | public function prepare_item_for_response( $top_seller, $request ) { |
||||
86 | $data = (array) $top_seller; |
||||
87 | |||||
88 | $context = ! empty( $request['context'] ) ? $request['context'] : 'view'; |
||||
89 | $data = $this->add_additional_fields_to_object( $data, $request ); |
||||
90 | $data = $this->filter_response_by_context( $data, $context ); |
||||
91 | |||||
92 | // Wrap the data in a response object. |
||||
93 | $response = rest_ensure_response( $data ); |
||||
94 | $links = array( |
||||
95 | 'about' => array( |
||||
96 | 'href' => rest_url( sprintf( '%s/reports', $this->namespace ) ), |
||||
97 | ), |
||||
98 | ); |
||||
99 | |||||
100 | if ( ! empty( $top_seller->item_id ) ) { |
||||
101 | $links['item'] = array( |
||||
102 | 'href' => rest_url( sprintf( '/%s/items/%s', $this->namespace, $top_seller->item_id ) ), |
||||
103 | 'embeddable' => true, |
||||
104 | ); |
||||
105 | } |
||||
106 | |||||
107 | $response->add_links( $links ); |
||||
108 | return apply_filters( 'getpaid_rest_prepare_report_' . $this->rest_base, $response, $top_seller, $request ); |
||||
109 | } |
||||
110 | |||||
111 | /** |
||||
112 | * Get all data needed for this report and store in the class. |
||||
113 | */ |
||||
114 | protected function query_report_data() { |
||||
115 | |||||
116 | $this->report_data = GetPaid_Reports_Helper::get_invoice_report_data( |
||||
0 ignored issues
–
show
It seems like
GetPaid_Reports_Helper::...> $this->report_range)) can also be of type string . However, the property $report_data is declared as type stdClass . Maybe add an additional type check?
Our type inference engine has found a suspicous assignment of a value to a property. This check raises an issue when a value that can be of a mixed type is assigned to a property that is type hinted more strictly. For example, imagine you have a variable Either this assignment is in error or a type check should be added for that assignment. class Id
{
public $id;
public function __construct($id)
{
$this->id = $id;
}
}
class Account
{
/** @var Id $id */
public $id;
}
$account_id = false;
if (starsAreRight()) {
$account_id = new Id(42);
}
$account = new Account();
if ($account instanceof Id)
{
$account->id = $account_id;
}
![]() |
|||||
117 | array( |
||||
118 | 'data' => array( |
||||
119 | 'quantity' => array( |
||||
120 | 'type' => 'invoice_item', |
||||
121 | 'function' => 'SUM', |
||||
122 | 'name' => 'invoice_item_qty', |
||||
123 | ), |
||||
124 | 'item_id' => array( |
||||
125 | 'type' => 'invoice_item', |
||||
126 | 'function' => '', |
||||
127 | 'name' => 'invoice_item_id', |
||||
128 | ), |
||||
129 | 'item_name' => array( |
||||
130 | 'type' => 'invoice_item', |
||||
131 | 'function' => '', |
||||
132 | 'name' => 'invoice_item_name', |
||||
133 | ), |
||||
134 | 'price' => array( |
||||
135 | 'type' => 'invoice_item', |
||||
136 | 'function' => 'SUM', |
||||
137 | 'name' => 'invoice_item_price', |
||||
138 | ), |
||||
139 | ), |
||||
140 | 'group_by' => 'invoice_item_id', |
||||
141 | 'order_by' => 'invoice_item_qty DESC', |
||||
142 | 'query_type' => 'get_results', |
||||
143 | 'limit' => 10, |
||||
144 | 'filter_range' => $this->report_range, |
||||
145 | ) |
||||
146 | ); |
||||
147 | |||||
148 | } |
||||
149 | |||||
150 | /** |
||||
151 | * Get the Report's schema, conforming to JSON Schema. |
||||
152 | * |
||||
153 | * @return array |
||||
154 | */ |
||||
155 | public function get_item_schema() { |
||||
156 | $schema = array( |
||||
157 | '$schema' => 'http://json-schema.org/draft-04/schema#', |
||||
158 | 'title' => $this->rest_base, |
||||
159 | 'type' => 'object', |
||||
160 | 'properties' => array( |
||||
161 | 'name' => array( |
||||
162 | 'description' => __( 'Item name.', 'invoicing' ), |
||||
163 | 'type' => 'string', |
||||
164 | 'context' => array( 'view' ), |
||||
165 | 'readonly' => true, |
||||
166 | ), |
||||
167 | 'item_id' => array( |
||||
168 | 'description' => __( 'Item ID.', 'invoicing' ), |
||||
169 | 'type' => 'integer', |
||||
170 | 'context' => array( 'view' ), |
||||
171 | 'readonly' => true, |
||||
172 | ), |
||||
173 | 'quantity' => array( |
||||
174 | 'description' => __( 'Total number of purchases.', 'invoicing' ), |
||||
175 | 'type' => 'number', |
||||
176 | 'context' => array( 'view' ), |
||||
177 | 'readonly' => true, |
||||
178 | ), |
||||
179 | 'earnings' => array( |
||||
180 | 'description' => __( 'Total earnings for the item.', 'invoicing' ), |
||||
181 | 'type' => 'number', |
||||
182 | 'context' => array( 'view' ), |
||||
183 | 'readonly' => true, |
||||
184 | ), |
||||
185 | 'earnings_formatted"' => array( |
||||
186 | 'description' => __( 'Total earnings (formatted) for the item.', 'invoicing' ), |
||||
187 | 'type' => 'string', |
||||
188 | 'context' => array( 'view' ), |
||||
189 | 'readonly' => true, |
||||
190 | ), |
||||
191 | ), |
||||
192 | ); |
||||
193 | |||||
194 | return $this->add_additional_fields_schema( $schema ); |
||||
195 | } |
||||
196 | } |
||||
197 |