This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Ma27\ApiKeyAuthenticationBundle\Service\Mapping; |
||
4 | |||
5 | use ReflectionProperty; |
||
6 | |||
7 | /** |
||
8 | * Metadata object that contains the necessary data of the user model. |
||
9 | * |
||
10 | * @internal This code is part of the internal API to gather the appropriate model information and shouldn't be used for else use-cases |
||
11 | */ |
||
12 | class ClassMetadata |
||
13 | { |
||
14 | const LOGIN_PROPERTY = 'login'; |
||
15 | const PASSWORD_PROPERTY = 'password'; |
||
16 | const API_KEY_PROPERTY = 'apiKey'; |
||
17 | const LAST_ACTION_PROPERTY = 'lastAction'; |
||
18 | |||
19 | /** |
||
20 | * @var int[] |
||
21 | */ |
||
22 | private static $requiredProperties = array( |
||
23 | self::LOGIN_PROPERTY, |
||
24 | self::PASSWORD_PROPERTY, |
||
25 | self::API_KEY_PROPERTY, |
||
26 | ); |
||
27 | |||
28 | /** |
||
29 | * @var ReflectionProperty[] |
||
30 | */ |
||
31 | private $properties = array(); |
||
32 | |||
33 | /** |
||
34 | * @var string[] |
||
35 | */ |
||
36 | private $lazyPropertyNameCache = array(); |
||
37 | |||
38 | /** |
||
39 | * @var string[] |
||
40 | */ |
||
41 | private $lazyValueCache = array(); |
||
42 | |||
43 | /** |
||
44 | * Constructor. |
||
45 | * |
||
46 | * @param ReflectionProperty|string[] $properties |
||
47 | * |
||
48 | * @throws \InvalidArgumentException If one necessary property is missing |
||
49 | */ |
||
50 | 20 | public function __construct(array $properties) |
|
51 | { |
||
52 | 20 | $this->properties = $properties; |
|
0 ignored issues
–
show
|
|||
53 | |||
54 | 20 | foreach (self::$requiredProperties as $property) { |
|
55 | 20 | if (!isset($this->properties[$property])) { |
|
56 | 1 | throw new \InvalidArgumentException(sprintf( |
|
57 | 1 | 'Missing required property "%s"!', |
|
58 | 20 | $property |
|
59 | )); |
||
60 | } |
||
61 | } |
||
62 | 19 | } |
|
63 | |||
64 | /** |
||
65 | * Gets the value of the given property. |
||
66 | * |
||
67 | * @param object $user |
||
68 | * @param string $property |
||
69 | * @param bool $strict |
||
70 | * |
||
71 | * @return mixed |
||
72 | */ |
||
73 | 11 | public function getPropertyValue($user, $property = self::LOGIN_PROPERTY, $strict = false) |
|
74 | { |
||
75 | 11 | if ($this->checkProperty($property, $strict)) { |
|
76 | 11 | $oid = spl_object_hash($user); |
|
77 | 11 | if (null !== $cacheHit = $this->resolveCache($oid, $property)) { |
|
78 | 10 | return $cacheHit; |
|
79 | } |
||
80 | |||
81 | 11 | if (is_string($this->properties[$property])) { |
|
82 | 6 | $this->properties[$property] = new ReflectionProperty($user, $this->properties[$property]); |
|
83 | } |
||
84 | 11 | $this->properties[$property]->setAccessible(true); |
|
85 | |||
86 | 11 | return $this->lazyValueCache[$oid][$property] = $this->properties[$property]->getValue($user); |
|
87 | } |
||
88 | } |
||
89 | |||
90 | /** |
||
91 | * Gets the name of a specific property by its metadata constant. |
||
92 | * |
||
93 | * @param string $property |
||
94 | * @param bool $strict |
||
95 | * |
||
96 | * @return null|string |
||
97 | */ |
||
98 | 18 | public function getPropertyName($property = self::LOGIN_PROPERTY, $strict = false) |
|
99 | { |
||
100 | 18 | if ($this->checkProperty($property, $strict)) { |
|
101 | 18 | if (is_string($this->properties[$property])) { |
|
102 | 9 | return $this->properties[$property]; |
|
103 | } |
||
104 | 12 | if (isset($this->lazyPropertyNameCache[$property])) { |
|
105 | 6 | return $this->lazyPropertyNameCache[$property]; |
|
106 | } |
||
107 | |||
108 | 12 | return $this->lazyPropertyNameCache[$property] = $this->properties[$property]->getName(); |
|
109 | } |
||
110 | } |
||
111 | |||
112 | /** |
||
113 | * Modifies a property and clears the cache. |
||
114 | * |
||
115 | * @param object $user |
||
116 | * @param mixed $newValue |
||
117 | * @param string $property |
||
118 | */ |
||
119 | 11 | public function modifyProperty($user, $newValue, $property = self::LOGIN_PROPERTY) |
|
120 | { |
||
121 | 11 | $this->checkProperty($property, true); |
|
122 | |||
123 | 10 | $propertyObject = $this->properties[$property]; |
|
124 | 10 | if (is_string($propertyObject)) { |
|
125 | 4 | $this->properties[$property] = $propertyObject = new ReflectionProperty($user, $propertyObject); |
|
126 | } |
||
127 | |||
128 | 10 | $propertyObject->setAccessible(true); |
|
129 | 10 | $propertyObject->setValue($user, $newValue); |
|
130 | |||
131 | 10 | $oid = spl_object_hash($user); |
|
132 | 10 | if (!array_key_exists($oid, $this->lazyValueCache)) { |
|
133 | 8 | $this->lazyValueCache[$oid] = array(); |
|
134 | } |
||
135 | |||
136 | 10 | $this->lazyValueCache[$oid][$property] = $newValue; |
|
137 | 10 | } |
|
138 | |||
139 | /** |
||
140 | * Validates a property. |
||
141 | * |
||
142 | * @param string $property |
||
143 | * @param bool $strict |
||
144 | * |
||
145 | * @return bool |
||
146 | */ |
||
147 | 19 | private function checkProperty($property = self::LOGIN_PROPERTY, $strict = false) |
|
148 | { |
||
149 | 19 | if (!isset($this->properties[$property])) { |
|
150 | 1 | if ($strict) { |
|
151 | 1 | throw new \LogicException(sprintf( |
|
152 | 1 | 'Cannot get property "%s"!', |
|
153 | 1 | $property |
|
154 | )); |
||
155 | } |
||
156 | |||
157 | return false; |
||
158 | } |
||
159 | |||
160 | 18 | return true; |
|
161 | } |
||
162 | |||
163 | /** |
||
164 | * Resolves the lazy value cache. |
||
165 | * |
||
166 | * @param string $oid |
||
167 | * @param string $property |
||
168 | * |
||
169 | * @return mixed|null |
||
170 | */ |
||
171 | 11 | private function resolveCache($oid, $property) |
|
172 | { |
||
173 | 11 | if (isset($this->lazyValueCache[$oid])) { |
|
174 | 10 | if (isset($this->lazyValueCache[$oid][$property])) { |
|
175 | 10 | return $this->lazyValueCache[$oid][$property]; |
|
176 | } |
||
177 | |||
178 | 8 | return; |
|
179 | } |
||
180 | |||
181 | 3 | $this->lazyValueCache[$oid] = array(); |
|
182 | 3 | } |
|
183 | } |
||
184 |
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property.
Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property..