Nayjest /
manipulator
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace mp; |
||
| 4 | |||
| 5 | use Nayjest\StrCaseConverter\Str; |
||
| 6 | use ReflectionClass; |
||
| 7 | |||
| 8 | define('MP_USE_SETTERS', 1); |
||
| 9 | define('MP_CREATE_PROPERTIES', 2); |
||
| 10 | |||
| 11 | /** |
||
| 12 | * Creates class instance using specified constructor arguments. |
||
| 13 | * |
||
| 14 | * @param string $class |
||
| 15 | * @param array $arguments |
||
| 16 | * @return object |
||
| 17 | */ |
||
| 18 | function instantiate($class, array $arguments = []) |
||
| 19 | { |
||
| 20 | 2 | switch (count($arguments)) { |
|
| 21 | 2 | case 0: |
|
| 22 | 1 | return new $class(); |
|
| 23 | 1 | case 1: |
|
| 24 | 1 | return new $class(array_shift($arguments)); |
|
| 25 | 1 | case 2: |
|
| 26 | 1 | return new $class( |
|
| 27 | 1 | array_shift($arguments), |
|
| 28 | 1 | array_shift($arguments) |
|
| 29 | 1 | ); |
|
| 30 | 1 | case 3: |
|
| 31 | 1 | return new $class( |
|
| 32 | 1 | array_shift($arguments), |
|
| 33 | 1 | array_shift($arguments), |
|
| 34 | 1 | array_shift($arguments) |
|
| 35 | 1 | ); |
|
| 36 | 1 | } |
|
| 37 | 1 | $reflection = new ReflectionClass($class); |
|
| 38 | 1 | return $reflection->newInstanceArgs($arguments); |
|
| 39 | } |
||
| 40 | |||
| 41 | /** |
||
| 42 | * Assigns values from array to existing public properties of target object. |
||
| 43 | * |
||
| 44 | * By default this function ignores fields having no corresponding properties in target object, |
||
| 45 | * but this behavior can be changed if TRUE will be passed to third argument. |
||
| 46 | * |
||
| 47 | * @param object $targetObject target object |
||
| 48 | * @param array $fields fields to assign, keys must be same as target object property names |
||
| 49 | * @param bool $createProperties (optional, default value: false) |
||
| 50 | * allows to create new properties in target object if value is true |
||
| 51 | * @return string[] names of successfully assigned properties |
||
| 52 | */ |
||
| 53 | function setPublicProperties($targetObject, array $fields, $createProperties = false) |
||
| 54 | { |
||
| 55 | 4 | if ($createProperties) { |
|
| 56 | 1 | $overwrite = $fields; |
|
| 57 | 1 | } else { |
|
| 58 | 3 | $existing = get_object_vars($targetObject); |
|
| 59 | 3 | $overwrite = array_intersect_key($fields, $existing); |
|
| 60 | } |
||
| 61 | 4 | foreach ($overwrite as $key => $value) { |
|
| 62 | 3 | $targetObject->{$key} = $value; |
|
| 63 | 4 | } |
|
| 64 | 4 | return array_keys($overwrite); |
|
| 65 | } |
||
| 66 | |||
| 67 | /** |
||
| 68 | * Assigns values from array to corresponding properties of target object using setters. |
||
| 69 | * |
||
| 70 | * This function works similar to mp\setPublicProperties(), but uses setter methods instead of public properties. |
||
| 71 | * |
||
| 72 | * Field names may be in snake or camel case, |
||
| 73 | * it will be converted to camel case and prefixed by 'set' |
||
| 74 | * to check availability of corresponding setter in target object. |
||
| 75 | * |
||
| 76 | * Fields having no corresponding setters in target object will be ignored. |
||
| 77 | * |
||
| 78 | * This function does not work with magic setters created using __set() php method. |
||
| 79 | * |
||
| 80 | * @param object $targetObject target object |
||
| 81 | * @param array $fields fields to assign, keys are used to check availability of corresponding setters in target object |
||
| 82 | * @return string[] names of successfully assigned properties |
||
| 83 | */ |
||
| 84 | function setValuesUsingSetters($targetObject, array $fields) |
||
| 85 | { |
||
| 86 | 2 | $assignedProperties = []; |
|
| 87 | 2 | foreach ($fields as $key => $value) { |
|
| 88 | 2 | $methodName = 'set' . Str::toCamelCase($key); |
|
| 89 | 2 | if (method_exists($targetObject, $methodName)) { |
|
| 90 | 2 | $targetObject->$methodName($value); |
|
| 91 | 2 | $assignedProperties[] = $key; |
|
| 92 | 2 | } |
|
| 93 | 2 | } |
|
| 94 | 2 | return $assignedProperties; |
|
| 95 | } |
||
| 96 | |||
| 97 | /** |
||
| 98 | * Assigns values from $fields array to $target. Target may be object or array. |
||
| 99 | * |
||
| 100 | * By default `mp\setValues` ignores fields having no corresponding properties or setters in target object |
||
| 101 | * but this behavior can be changed if MP_CREATE_PROPERTIES option is used. |
||
| 102 | * |
||
| 103 | * Assigning values using setters can be disabled by removing MP_USE_SETTERS option (it's enabled by default). |
||
| 104 | * |
||
| 105 | * When target is an array, `mp\setValues` will call array_merge PHP function. |
||
| 106 | * |
||
| 107 | * @param object|array $target target object or array |
||
| 108 | * @param array $fields fields to assign |
||
| 109 | * @pram int $options (optional, default value: MP_USE_SETTERS) supported options: MP_USE_SETTERS, MP_CREATE_PROPERTIES |
||
| 110 | * @return string[] names of successfully assigned properties |
||
| 111 | */ |
||
| 112 | function setValues(&$target, array $fields, $options = MP_USE_SETTERS) |
||
| 113 | { |
||
| 114 | 3 | if (is_array($target)) { |
|
| 115 | 2 | $target = array_merge($target, $fields); |
|
| 116 | 2 | return array_keys($fields); |
|
| 117 | } |
||
| 118 | 1 | if ($options & MP_USE_SETTERS) { |
|
| 119 | 1 | $assignedBySetters = setValuesUsingSetters( |
|
| 120 | 1 | $target, |
|
| 121 | $fields |
||
| 122 | 1 | ); |
|
| 123 | 1 | } else { |
|
| 124 | $assignedBySetters = []; |
||
| 125 | } |
||
| 126 | 1 | $assignedProperties = setPublicProperties( |
|
| 127 | 1 | $target, |
|
| 128 | 1 | array_diff_key($fields, array_flip($assignedBySetters)), |
|
| 129 | $options & MP_CREATE_PROPERTIES |
||
| 130 | 1 | ); |
|
| 131 | |||
| 132 | 1 | return array_merge($assignedProperties, $assignedBySetters); |
|
| 133 | } |
||
| 134 | |||
| 135 | /** |
||
| 136 | * Returns names of writable properties for objects and classes or existing keys for arrays. |
||
| 137 | * |
||
| 138 | * Only public object properties and properties having setters considered writable. |
||
| 139 | * |
||
| 140 | * For setters, this function will return property names based on setter names |
||
| 141 | * (setter names are converted to snake case, 'set' prefixes are removed). |
||
| 142 | * |
||
| 143 | * Detecting properties by setters can be disabled by specifying second argument as FALSE. |
||
| 144 | * |
||
| 145 | * @param object|string|array $target object or class name or array |
||
| 146 | * @param bool $useSetters (optional, default value: true) if true, properties having setters will be added to results |
||
| 147 | * @return string[] names of writable properties |
||
| 148 | */ |
||
| 149 | function getWritable($target, $useSetters = true) |
||
| 150 | { |
||
| 151 | 1 | static $writable = []; |
|
| 152 | |||
| 153 | 1 | if (is_array($target)) { |
|
| 154 | 1 | return array_keys($target); |
|
| 155 | } |
||
| 156 | 1 | $class = is_object($target) ? get_class($target) : $target; |
|
| 157 | 1 | $cacheKey = $class . ($useSetters ? '+s' : ''); |
|
| 158 | 1 | if (!array_key_exists($cacheKey, $writable)) { |
|
| 159 | 1 | $writable[$cacheKey] = array_keys(get_class_vars($class)); |
|
| 160 | 1 | if ($useSetters) { |
|
| 161 | 1 | $setters = getSetters($class); |
|
| 162 | 1 | foreach ($setters as $setter) { |
|
| 163 | 1 | $writable[$cacheKey][] = Str::toSnakeCase(substr($setter, 3)); |
|
| 164 | 1 | } |
|
| 165 | 1 | } |
|
| 166 | 1 | } |
|
| 167 | 1 | return $writable[$cacheKey]; |
|
| 168 | } |
||
| 169 | |||
| 170 | /** |
||
| 171 | * Returns method names from target object/class that starts from specified keyword |
||
| 172 | * and followed by uppercase character. |
||
| 173 | * |
||
| 174 | * Examples: |
||
| 175 | * - mp\getMethodsPrefixedBy('get', $obj) |
||
| 176 | * will return methods that looks like getters. |
||
| 177 | * |
||
| 178 | * @param string $keyword method name prefix |
||
| 179 | * @param object|string $target object or class name |
||
| 180 | * @return array|string[] method names |
||
| 181 | */ |
||
| 182 | function getMethodsPrefixedBy($keyword, $target) |
||
| 183 | { |
||
| 184 | 3 | $res = []; |
|
| 185 | 3 | $methods = get_class_methods($target); |
|
| 186 | 3 | $keyLength = strlen($keyword); |
|
| 187 | 3 | foreach ($methods as $method) { |
|
| 188 | if ( |
||
| 189 | 3 | strpos($method, $keyword) === 0 |
|
| 190 | 3 | && strlen($method) > $keyLength |
|
| 191 | 3 | && ctype_upper($method[$keyLength]) |
|
| 192 | 3 | ) { |
|
| 193 | 3 | $res[] = $method; |
|
| 194 | 3 | } |
|
| 195 | 3 | } |
|
| 196 | 3 | return $res; |
|
| 197 | } |
||
| 198 | |||
| 199 | /** |
||
| 200 | * Returns method names from target object/class that looks like setters. |
||
| 201 | * |
||
| 202 | * @param object|string $target object or class name |
||
| 203 | * @return string[] method names |
||
| 204 | */ |
||
| 205 | function getSetters($target) |
||
| 206 | { |
||
| 207 | 2 | return getMethodsPrefixedBy('set', $target); |
|
| 208 | } |
||
| 209 | |||
| 210 | /** |
||
| 211 | * Returns method names from target object/class that looks like getters. |
||
| 212 | * |
||
| 213 | * @param object|string $target object or class name |
||
| 214 | * @return array|string[] method names |
||
| 215 | */ |
||
| 216 | function getGetters($target) |
||
| 217 | { |
||
| 218 | 1 | return getMethodsPrefixedBy('get', $target); |
|
| 219 | } |
||
| 220 | |||
| 221 | /** |
||
| 222 | * Returns values of properties specified in $propertyNames argument. |
||
| 223 | * |
||
| 224 | * This function supports getters, i. e. |
||
| 225 | * value returned by getSomeValue() method of target object can be requested as 'some_value' property. |
||
| 226 | * |
||
| 227 | * @experimental |
||
| 228 | * |
||
| 229 | * @param object|array $src |
||
| 230 | * @param string[] $propertyNames |
||
| 231 | * @return array |
||
| 232 | */ |
||
| 233 | function getValues($src, array $propertyNames) |
||
| 234 | { |
||
| 235 | |||
| 236 | 1 | if (is_array($src)) { |
|
| 237 | 1 | return array_intersect_key($src, array_flip($propertyNames)); |
|
| 238 | } |
||
| 239 | 1 | $values = array_intersect_key(get_object_vars($src), array_flip($propertyNames)); |
|
| 240 | 1 | foreach ($propertyNames as $key) { |
|
| 241 | 1 | if (array_key_exists($key, $values)) continue; |
|
| 242 | 1 | $getter = 'get' . Str::toCamelCase($key); |
|
| 243 | 1 | if (method_exists($src, $getter)) { |
|
| 244 | 1 | $values[$key] = $src->{$getter}(); |
|
| 245 | 1 | } |
|
| 246 | 1 | } |
|
| 247 | 1 | return $values; |
|
| 248 | } |
||
| 249 | |||
| 250 | /** |
||
| 251 | * Extracts value specified by property / field name from object or array. |
||
| 252 | * |
||
| 253 | * This function supports property paths (prop1.prop2.prop3) and getters. |
||
| 254 | * |
||
| 255 | * If $propertyName = 'prop_name', this method will try to extract data in following order from: |
||
| 256 | * - $src['prop_name'] |
||
| 257 | * - $src->prop_name |
||
| 258 | * - $src->getPropName() |
||
| 259 | * - $src->prop_name() |
||
| 260 | * - $src->isPropName() |
||
| 261 | * |
||
| 262 | * @experimental |
||
| 263 | * @param array|object $src |
||
| 264 | * @param string $propertyName |
||
| 265 | * @param mixed $default default value |
||
| 266 | * @param string|null $delimiter (optional, default value: '.') used to specify property paths |
||
| 267 | * @return mixed |
||
| 268 | */ |
||
| 269 | function getValue($src, $propertyName, $default = null, $delimiter = '.') |
||
| 270 | { |
||
| 271 | 2 | return getValueByRef($src, $propertyName, $default, $delimiter); |
|
| 272 | } |
||
| 273 | |||
| 274 | /** |
||
| 275 | * Extracts value specified by property / field / method name from object or array by reference if possible. |
||
| 276 | * |
||
| 277 | * This function acts like `mp\getValue` with only difference that value will be returned by reference if possible. |
||
| 278 | * |
||
| 279 | * @experimental |
||
| 280 | * @param array|object $src |
||
| 281 | * @param string $propertyName |
||
| 282 | * @param mixed $default |
||
| 283 | * @param string|null $delimiter |
||
| 284 | * @return mixed|null |
||
| 285 | */ |
||
| 286 | function &getValueByRef(&$src, $propertyName, $default = null, $delimiter = '.') |
||
| 287 | { |
||
| 288 | 2 | if (is_array($src) && array_key_exists($propertyName, $src)) { |
|
| 289 | 2 | return $src[$propertyName]; |
|
| 290 | } |
||
| 291 | 2 | $isObject = is_object($src); |
|
| 292 | 2 | if ($isObject && isset($src->{$propertyName})) { |
|
| 293 | // if it's not magic method, return reference |
||
| 294 | 1 | if (property_exists($src, $propertyName)) { |
|
| 295 | 1 | return $src->{$propertyName}; |
|
| 296 | // otherwise (it's __get()) calling $src->{$propertyName} will generate PHP notice: |
||
| 297 | // indirect modification of overloaded property has no effect. |
||
| 298 | // Therefore we return link to temp variable instead of link to variable itself. |
||
| 299 | } else { |
||
| 300 | $tmp = $src->{$propertyName}; |
||
| 301 | return $tmp; |
||
| 302 | } |
||
| 303 | } |
||
| 304 | 2 | if ($delimiter && $pos = strpos($propertyName, $delimiter)) { |
|
|
0 ignored issues
–
show
|
|||
| 305 | // head(a.b.c) = a |
||
| 306 | // tail(a.b.c) = b.c |
||
| 307 | 2 | $head = substr($propertyName, 0, $pos); |
|
| 308 | 2 | $tail = substr($propertyName, $pos + 1); |
|
| 309 | 2 | return getValueByRef( |
|
| 310 | 2 | getValueByRef($src, $head, $default, null), |
|
| 311 | 2 | $tail, |
|
| 312 | 2 | $default, |
|
| 313 | $delimiter |
||
| 314 | 2 | ); |
|
| 315 | } |
||
| 316 | 2 | if ($isObject) { |
|
| 317 | 1 | $camelPropName = Str::toCamelCase($propertyName); |
|
| 318 | $methods = [ |
||
| 319 | 1 | 'get' . $camelPropName, |
|
| 320 | 1 | $propertyName, |
|
| 321 | 1 | $camelPropName, |
|
| 322 | 'is' . $camelPropName |
||
| 323 | 1 | ]; |
|
| 324 | 1 | foreach ($methods as $method) { |
|
| 325 | 1 | if (method_exists($src, $method)) { |
|
| 326 | 1 | $result = call_user_func([$src, $method]); |
|
| 327 | 1 | return $result; |
|
| 328 | } |
||
| 329 | 1 | } |
|
| 330 | 1 | } |
|
| 331 | 2 | return $default; |
|
| 332 | } |
||
| 333 | |||
| 334 | /** |
||
| 335 | * Assigns value, supports property paths (prop1.prop2.prop3). |
||
| 336 | * |
||
| 337 | * @experimental |
||
| 338 | * @param array|object $target |
||
| 339 | * @param string $propertyName |
||
| 340 | * @param mixed $value |
||
| 341 | * @param string|null $delimiter |
||
| 342 | * @return bool returns TRUE if value was successfully assigned, FALSE otherwise |
||
| 343 | */ |
||
| 344 | function setValue(&$target, $propertyName, $value, $delimiter = '.') |
||
| 345 | { |
||
| 346 | 1 | if ($delimiter && $pos = strrpos($propertyName, $delimiter)) { |
|
|
0 ignored issues
–
show
The expression
$delimiter of type string|null is loosely compared to true; this is ambiguous if the string can be empty. You might want to explicitly use !== null instead.
In PHP, under loose comparison (like For '' == false // true
'' == null // true
'ab' == false // false
'ab' == null // false
// It is often better to use strict comparison
'' === false // false
'' === null // false
Loading history...
|
|||
| 347 | // head(a.b.c) = a.b |
||
| 348 | // tail(a.b.c) = c |
||
| 349 | 1 | $head = substr($propertyName, 0, $pos); |
|
| 350 | 1 | $tail = substr($propertyName, $pos + 1); |
|
| 351 | 1 | $container = &getValueByRef($target, $head, null, $delimiter); |
|
| 352 | 1 | if (!$container) { |
|
| 353 | 1 | return false; |
|
| 354 | } |
||
| 355 | 1 | $res = setValues($container, [$tail => $value]); |
|
| 356 | 1 | return count($res) === 1; |
|
| 357 | } |
||
| 358 | 1 | $res = setValues($target, [$propertyName => $value]); |
|
| 359 | 1 | return count($res) === 1; |
|
| 360 | } |
||
| 361 |
In PHP, under loose comparison (like
==, or!=, orswitchconditions), values of different types might be equal.For
stringvalues, the empty string''is a special case, in particular the following results might be unexpected: