Tartana\Controller\ClicknLoadController::addcrypted2Action()

Complexity

Conditions	6
Paths	4

Size

Total Lines	53
Code Lines	30

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	27
CRAP Score	6

Importance

Changes	1
Bugs	0	Features	0

<?php
	public function addcrypted2Action(Request $request)
	{
		$data = array(
			'success' => false,
			'message' => $this->get('Translator')->trans('TARTANA_CLICKNLOAD_ERROR_ADDING_TO_QUEUE')
		);

		preg_match('/\'(.*?)\'/', $request->get('jk'), $matches);

		if (count($matches) < 1) {
			return;
		}

		$key = hex2bin($matches[1]);

		$cp = @mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', 'cbc', '');
		@mcrypt_generic_init($cp, $key, $key);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

		$dec = @mdecrypt_generic($cp, base64_decode($request->get('crypted')));
		@mcrypt_generic_deinit($cp);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

		@mcrypt_module_close($cp);

It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended.

		$folder = $this->container->getParameter('tartana.config')['links']['folder'];
		$folder = Util::realPath($folder);

		if (!empty($folder)) {
			$fs = new Local($folder);

			$name = $request->get('package', rand(0, 1000)) . '.txt';

			// Sanitize content
			$content = '';
			foreach (preg_split('/\r\n|\r|\n/', $dec) as $file) {
				if (strpos($file, 'http://') !== 0) {
					continue;
				}

				$content .= $file . PHP_EOL;
			}

			$content = trim($content);

			if ($content) {
				$fs->write($name, $content, new Config());

				$data = array(
					'success' => true,
					'message' => $this->get('Translator')->trans('TARTANA_CLICKNLOAD_CONTENT_ADDED_TO_QUEUE')
				);
			}
		}

		return new JsonResponse($data);
	}
}