This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * @author Sergii Bondarenko, <[email protected]> |
||
4 | */ |
||
5 | namespace Drupal\TqExtension\Context\User; |
||
6 | |||
7 | // Contexts. |
||
8 | use Drupal\TqExtension\Context\RawTqContext; |
||
9 | // Utils. |
||
10 | use Drupal\TqExtension\Utils\BaseEntity; |
||
11 | use Drupal\TqExtension\Utils\Database\FetchField; |
||
12 | use Drupal\TqExtension\Utils\EntityDrupalWrapper; |
||
13 | |||
14 | class RawUserContext extends RawTqContext |
||
15 | { |
||
16 | use BaseEntity; |
||
17 | |||
18 | /** |
||
19 | * {@inheritdoc} |
||
20 | */ |
||
21 | protected function entityType() |
||
22 | { |
||
23 | return 'user'; |
||
24 | } |
||
25 | |||
26 | /** |
||
27 | * {@inheritdoc} |
||
28 | */ |
||
29 | public function getCurrentId() |
||
30 | { |
||
31 | return empty($this->user->uid) ? 0 : $this->user->uid; |
||
0 ignored issues
–
show
|
|||
32 | } |
||
33 | |||
34 | /** |
||
35 | * @param string $column |
||
36 | * Column of a "users" table. |
||
37 | * @param string $value |
||
38 | * Expected value in column. |
||
39 | * |
||
40 | * @return int |
||
41 | */ |
||
42 | public function getIdByArguments($column, $value) |
||
43 | { |
||
44 | return (new FetchField('users', 'uid')) |
||
45 | ->condition($column, $value) |
||
46 | ->execute(); |
||
47 | } |
||
48 | |||
49 | /** |
||
50 | * @param string $roles |
||
51 | * Necessary user roles separated by comma. |
||
52 | * @param array $fields |
||
53 | * |
||
54 | * @return \stdClass |
||
55 | */ |
||
56 | public function createUserWithRoles($roles, array $fields = []) |
||
57 | { |
||
58 | $user = $this->createTestUser($fields); |
||
59 | $driver = $this->getDriver(); |
||
60 | |||
61 | foreach (array_map('trim', explode(',', $roles)) as $role) { |
||
62 | $driver->userAddRole($user, $role); |
||
63 | } |
||
64 | |||
65 | return $user; |
||
66 | } |
||
67 | |||
68 | /** |
||
69 | * @throws \Exception |
||
70 | */ |
||
71 | public function loginUser() |
||
72 | { |
||
73 | $this->logoutUser(); |
||
74 | |||
75 | if (empty($this->user)) { |
||
0 ignored issues
–
show
The property
user does not exist on object<Drupal\TqExtensio...xt\User\RawUserContext> . Since you implemented __get , maybe consider adding a @property annotation.
Since your code implements the magic getter <?php
/**
* @property int $x
* @property int $y
* @property string $text
*/
class MyLabel
{
private $properties;
private $allowedProperties = array('x', 'y', 'text');
public function __get($name)
{
if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
return $properties[$name];
} else {
return null;
}
}
public function __set($name, $value)
{
if (in_array($name, $this->allowedProperties)) {
$properties[$name] = $value;
} else {
throw new \LogicException("Property $name is not defined.");
}
}
}
If the property has read access only, you can use the @property-read annotation instead. Of course, you may also just have mistyped another name, in which case you should fix the error. See also the PhpDoc documentation for @property. ![]() |
|||
76 | throw new \Exception('Tried to login without a user.'); |
||
77 | } |
||
78 | |||
79 | $this->fillLoginForm([ |
||
80 | 'username' => $this->user->name, |
||
0 ignored issues
–
show
The property
user does not exist on object<Drupal\TqExtensio...xt\User\RawUserContext> . Since you implemented __get , maybe consider adding a @property annotation.
Since your code implements the magic getter <?php
/**
* @property int $x
* @property int $y
* @property string $text
*/
class MyLabel
{
private $properties;
private $allowedProperties = array('x', 'y', 'text');
public function __get($name)
{
if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
return $properties[$name];
} else {
return null;
}
}
public function __set($name, $value)
{
if (in_array($name, $this->allowedProperties)) {
$properties[$name] = $value;
} else {
throw new \LogicException("Property $name is not defined.");
}
}
}
If the property has read access only, you can use the @property-read annotation instead. Of course, you may also just have mistyped another name, in which case you should fix the error. See also the PhpDoc documentation for @property. ![]() |
|||
81 | 'password' => $this->user->pass, |
||
0 ignored issues
–
show
The property
user does not exist on object<Drupal\TqExtensio...xt\User\RawUserContext> . Since you implemented __get , maybe consider adding a @property annotation.
Since your code implements the magic getter <?php
/**
* @property int $x
* @property int $y
* @property string $text
*/
class MyLabel
{
private $properties;
private $allowedProperties = array('x', 'y', 'text');
public function __get($name)
{
if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
return $properties[$name];
} else {
return null;
}
}
public function __set($name, $value)
{
if (in_array($name, $this->allowedProperties)) {
$properties[$name] = $value;
} else {
throw new \LogicException("Property $name is not defined.");
}
}
}
If the property has read access only, you can use the @property-read annotation instead. Of course, you may also just have mistyped another name, in which case you should fix the error. See also the PhpDoc documentation for @property. ![]() |
|||
82 | ]); |
||
83 | } |
||
84 | |||
85 | /** |
||
86 | * @param array $props |
||
87 | * An array with two keys: "username" and "password". Both of them are required. |
||
88 | * @param string $message |
||
89 | * An error message, that will be thrown when user cannot be authenticated. |
||
90 | * |
||
91 | * @throws \Behat\Mink\Exception\ElementNotFoundException |
||
92 | * When one of a fields cannot be not found. |
||
93 | * @throws \Exception |
||
94 | * When login process failed. |
||
95 | * @throws \WebDriver\Exception\NoSuchElement |
||
96 | * When log in button cannot be found. |
||
97 | */ |
||
98 | public function fillLoginForm(array $props, $message = '') |
||
0 ignored issues
–
show
fillLoginForm uses the super-global variable $GLOBALS which is generally not recommended.
Instead of super-globals, we recommend to explicitly inject the dependencies of your class. This makes your code less dependent on global state and it becomes generally more testable: // Bad
class Router
{
public function generate($path)
{
return $_SERVER['HOST'].$path;
}
}
// Better
class Router
{
private $host;
public function __construct($host)
{
$this->host = $host;
}
public function generate($path)
{
return $this->host.$path;
}
}
class Controller
{
public function myAction(Request $request)
{
// Instead of
$page = isset($_GET['page']) ? intval($_GET['page']) : 1;
// Better (assuming you use the Symfony2 request)
$page = $request->query->get('page', 1);
}
}
![]() |
|||
99 | { |
||
100 | $this->visitPath('/user/login'); |
||
101 | $formContext = $this->getFormContext(); |
||
102 | |||
103 | foreach (['username', 'password'] as $prop) { |
||
104 | $formContext->fillField($this->getDrupalText($prop . '_field'), $props[$prop]); |
||
105 | } |
||
106 | |||
107 | $this->getWorkingElement()->pressButton($this->getDrupalText('log_in')); |
||
108 | |||
109 | if (!$this->isLoggedIn()) { |
||
110 | if (empty($message)) { |
||
111 | $message = sprintf( |
||
112 | 'Failed to login as a user "%s" with password "%s".', |
||
113 | $props['username'], |
||
114 | $props['password'] |
||
115 | ); |
||
116 | } |
||
117 | |||
118 | throw new \Exception($message); |
||
119 | } |
||
120 | |||
121 | $GLOBALS['user'] = $this->user = user_load_by_name($props['username']); |
||
0 ignored issues
–
show
The property
user does not exist on object<Drupal\TqExtensio...xt\User\RawUserContext> . Since you implemented __set , maybe consider adding a @property annotation.
Since your code implements the magic setter <?php
/**
* @property int $x
* @property int $y
* @property string $text
*/
class MyLabel
{
private $properties;
private $allowedProperties = array('x', 'y', 'text');
public function __get($name)
{
if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
return $properties[$name];
} else {
return null;
}
}
public function __set($name, $value)
{
if (in_array($name, $this->allowedProperties)) {
$properties[$name] = $value;
} else {
throw new \LogicException("Property $name is not defined.");
}
}
}
Since the property has write access only, you can use the @property-write annotation instead. Of course, you may also just have mistyped another name, in which case you should fix the error. See also the PhpDoc documentation for @property. ![]() |
|||
122 | } |
||
123 | |||
124 | /** |
||
125 | * Cookies are set when at least one page of the site has been visited. This |
||
126 | * action done in "beforeScenario" hook of TqContext. |
||
127 | * |
||
128 | * @see TqContext::beforeScenario() |
||
129 | * |
||
130 | * @return bool |
||
131 | */ |
||
132 | public function isLoggedIn() |
||
133 | { |
||
134 | $cookieName = session_name(); |
||
135 | $cookie = $this->getSession()->getCookie($cookieName); |
||
136 | |||
137 | if (null !== $cookie) { |
||
138 | $this->getSession('goutte')->setCookie($cookieName, $cookie); |
||
139 | |||
140 | return true; |
||
141 | } |
||
142 | |||
143 | return false; |
||
144 | } |
||
145 | |||
146 | public function logoutUser() |
||
147 | { |
||
148 | if ($this->isLoggedIn()) { |
||
149 | $this->logout(); |
||
150 | } |
||
151 | } |
||
152 | |||
153 | /** |
||
154 | * @param array $fields |
||
155 | * Additional data for user account. |
||
156 | * |
||
157 | * @throws \Exception |
||
158 | * |
||
159 | * @return \stdClass |
||
160 | */ |
||
161 | public function createTestUser(array $fields = []) |
||
162 | { |
||
163 | $random = $this->getRandom(); |
||
164 | $username = $random->name(8); |
||
165 | $user = [ |
||
166 | 'uid' => 0, |
||
167 | 'name' => $username, |
||
168 | 'pass' => $random->name(16), |
||
169 | 'mail' => "[email protected]", |
||
170 | 'roles' => [ |
||
171 | DRUPAL_AUTHENTICATED_RID => 'authenticated user', |
||
172 | ], |
||
173 | ]; |
||
174 | |||
175 | $user = (object) $user; |
||
176 | |||
177 | if (!empty($fields)) { |
||
178 | $entity = new EntityDrupalWrapper('user'); |
||
179 | $required = $entity->getRequiredFields(); |
||
180 | |||
181 | // Fill fields. Field can be found by name or label. |
||
182 | foreach ($fields as $field_name => $value) { |
||
183 | $field_info = $entity->getFieldInfo($field_name); |
||
184 | |||
185 | if (!empty($field_info)) { |
||
186 | $field_name = $field_info['field_name']; |
||
187 | } |
||
188 | |||
189 | $user->$field_name = $value; |
||
190 | |||
191 | // Remove field from $required if it was there and filled. |
||
192 | unset($required[$field_name]); |
||
193 | } |
||
194 | |||
195 | // Throw an exception when one of required fields was not filled. |
||
196 | if (!empty($required)) { |
||
197 | throw new \Exception(sprintf( |
||
198 | 'The following fields "%s" are required and has not filled.', |
||
199 | implode('", "', $required) |
||
200 | )); |
||
201 | } |
||
202 | } |
||
203 | |||
204 | if (isset($user->name)) { |
||
205 | $existing_user = user_load_by_name($user->name); |
||
206 | |||
207 | if (!empty($existing_user)) { |
||
208 | user_delete($existing_user->uid); |
||
209 | } |
||
210 | } |
||
211 | |||
212 | // $this->user always exist but when no user created it has "false" as a value. |
||
213 | // Variable stored to another because RawDrupalContext::userCreate() will modify |
||
214 | // it and this will affect for future actions. |
||
215 | if (!empty($this->user)) { |
||
0 ignored issues
–
show
The property
user does not exist on object<Drupal\TqExtensio...xt\User\RawUserContext> . Since you implemented __get , maybe consider adding a @property annotation.
Since your code implements the magic getter <?php
/**
* @property int $x
* @property int $y
* @property string $text
*/
class MyLabel
{
private $properties;
private $allowedProperties = array('x', 'y', 'text');
public function __get($name)
{
if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
return $properties[$name];
} else {
return null;
}
}
public function __set($name, $value)
{
if (in_array($name, $this->allowedProperties)) {
$properties[$name] = $value;
} else {
throw new \LogicException("Property $name is not defined.");
}
}
}
If the property has read access only, you can use the @property-read annotation instead. Of course, you may also just have mistyped another name, in which case you should fix the error. See also the PhpDoc documentation for @property. ![]() |
|||
216 | $tmp = $this->user; |
||
0 ignored issues
–
show
The property
user does not exist on object<Drupal\TqExtensio...xt\User\RawUserContext> . Since you implemented __set , maybe consider adding a @property annotation.
Since your code implements the magic setter <?php
/**
* @property int $x
* @property int $y
* @property string $text
*/
class MyLabel
{
private $properties;
private $allowedProperties = array('x', 'y', 'text');
public function __get($name)
{
if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
return $properties[$name];
} else {
return null;
}
}
public function __set($name, $value)
{
if (in_array($name, $this->allowedProperties)) {
$properties[$name] = $value;
} else {
throw new \LogicException("Property $name is not defined.");
}
}
}
Since the property has write access only, you can use the @property-write annotation instead. Of course, you may also just have mistyped another name, in which case you should fix the error. See also the PhpDoc documentation for @property. ![]() |
|||
217 | } |
||
218 | |||
219 | $this->userCreate($user); |
||
220 | |||
221 | if (isset($tmp)) { |
||
222 | $this->user = $tmp; |
||
0 ignored issues
–
show
The property
user does not exist on object<Drupal\TqExtensio...xt\User\RawUserContext> . Since you implemented __set , maybe consider adding a @property annotation.
Since your code implements the magic setter <?php
/**
* @property int $x
* @property int $y
* @property string $text
*/
class MyLabel
{
private $properties;
private $allowedProperties = array('x', 'y', 'text');
public function __get($name)
{
if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
return $properties[$name];
} else {
return null;
}
}
public function __set($name, $value)
{
if (in_array($name, $this->allowedProperties)) {
$properties[$name] = $value;
} else {
throw new \LogicException("Property $name is not defined.");
}
}
}
Since the property has write access only, you can use the @property-write annotation instead. Of course, you may also just have mistyped another name, in which case you should fix the error. See also the PhpDoc documentation for @property. ![]() |
|||
223 | } |
||
224 | |||
225 | return $user; |
||
226 | } |
||
227 | } |
||
228 |
Since your code implements the magic getter
_get
, this function will be called for any read access on an undefined variable. You can add the@property
annotation to your class or interface to document the existence of this variable.If the property has read access only, you can use the @property-read annotation instead.
Of course, you may also just have mistyped another name, in which case you should fix the error.
See also the PhpDoc documentation for @property.