Request::setServerRequestCreator() - Code Metrics - Inspection of "Make sure independent from ANY PSR7 implementation..." - PHPFastCGI/FastCGIDaemon - Measure and Improve Code Quality continuously with Scrutinizer

Completed

Push — master ( 01a8f0...071246 )

by Tobias

created 2018-08-06 21:24 UTC

Request::setServerRequestCreator() A

↳ Parent: Request

Complexity

Conditions	1
Paths	1

Size

Total Lines

Duplication

Lines	0
Ratio	0 %

Importance

Changes

Metric	Value
dl	0
loc	4
rs	10
c	0
b	0
f	0
cc	1
nc	1
nop	1

<?php

namespace PHPFastCGI\FastCGIDaemon\Http;

use Nyholm\Psr7Server\ServerRequestCreatorInterface;
use Symfony\Component\HttpFoundation\Request as HttpFoundationRequest;

/**
 * The default implementation of the RequestInterface.
 */
final class Request implements RequestInterface
{
    /**
     * @var ServerRequestCreatorInterface|null
     */
    private static $serverRequestCreator = null;

    /**
     * @var int
     */
    private static $bufferSize = 10485760; // 10 MB

    /**
     * @var string
     */
    private static $uploadDir = null;

    /**
     * @var array
     */
    private $uploadedFiles = [];

    /**
     * @var array
     */
    private $params;

    /**
     * @var resource
     */
    private $stdin;

    /**
     * Constructor.
     *
     * @param array    $params The FastCGI server params as an associative array
     * @param resource $stdin  The FastCGI stdin data as a stream resource
     */
    public function __construct(array $params, $stdin)
    {
        $this->params = [];

        foreach ($params as $name => $value) {
            $this->params[strtoupper($name)] = $value;
        }

        $this->stdin  = $stdin;

        rewind($this->stdin);
    }

    public static function setServerRequestCreator(ServerRequestCreatorInterface $serverRequestCreator): void
    {
        self::$serverRequestCreator = $serverRequestCreator;
    }

    /**
     * {@inheritdoc}
     */
    public function getParams()
    {
        return $this->params;
    }

    /**
     * Remove all uploaded files
     */
    public function cleanUploadedFiles(): void
    {
        foreach ($this->uploadedFiles as $file) {
            @unlink($file['tmp_name']);
// For example instead of
@mkdir($dir);

// Better use
if (@mkdir($dir) === false) {
    throw new \RuntimeException('The directory '.$dir.' could not be created.');
}
        }
    }

    /**
     * Set a buffer size to read uploaded files
     */
    public static function setBufferSize(int $size): void
    {
        static::$bufferSize = $size;

    }

    public static function getBufferSize(): int
    {
        return static::$bufferSize;

    }

    public static function setUploadDir(string $dir): void
    {
        static::$uploadDir = $dir;

    }

    public static function getUploadDir(): string
    {
        return static::$uploadDir ?: sys_get_temp_dir();

    }

    /**
     * {@inheritdoc}
     */
    public function getQuery()
    {
        $query = null;

        if (isset($this->params['QUERY_STRING'])) {
            parse_str($this->params['QUERY_STRING'], $query);
        }

        return $query ?: [];
    }

    /**
     * {@inheritdoc}
     */
    public function getPost()
    {
        $post = null;

        if (isset($this->params['REQUEST_METHOD']) && isset($this->params['CONTENT_TYPE'])) {
            $requestMethod = $this->params['REQUEST_METHOD'];
            $contentType   = $this->params['CONTENT_TYPE'];

            if (strcasecmp($requestMethod, 'POST') === 0 && stripos($contentType, 'multipart/form-data') === 0) {
                if (preg_match('/boundary=(?P<quote>[\'"]?)(.*)(?P=quote)/', $contentType, $matches)) {
                    list($postData, $this->uploadedFiles) = $this->parseMultipartFormData($this->stdin, $matches[2]);
                    parse_str($postData, $post);

                    return $post;
                }
            }

            if (strcasecmp($requestMethod, 'POST') === 0 && stripos($contentType, 'application/x-www-form-urlencoded') === 0) {
                $postData = stream_get_contents($this->stdin);
                rewind($this->stdin);

                parse_str($postData, $post);
            }
        }

        return $post ?: [];
    }

    private function parseMultipartFormData($stream, $boundary) {
        $post = "";
        $files = [];
        $fieldType = $fieldName = $filename = $mimeType = null;
        $inHeader = $getContent = false;
$myVar = 'Value';
$higher = false;

if (rand(1, 6) > 3) {
    $higher = true;
} else {
    $higher = false;
}

        while (!feof($stream)) {
            $getContent = $fieldName && !$inHeader;
''   == false // true
''   == null  // true
'ab' == false // false
'ab' == null  // false

// It is often better to use strict comparison
'' === false // false
'' === null  // false
            $buffer = stream_get_line($stream, static::$bufferSize,  "\n" . ($getContent ? '--'.$boundary : ''));

            $buffer = trim($buffer, "\r");

            // Find the empty line between headers and body
            if ($inHeader && strlen($buffer) == 0) {
                $inHeader = false;

                continue;
            }

            if ($getContent) {
                if ($fieldType === 'data') {
                    $post .= (isset($post[0]) ? '&' : '') . $fieldName . "=" . urlencode($buffer);
                } elseif ($fieldType === 'file' && $filename) {
                    $tmpPath = @tempnam($this->getUploadDir(), 'fastcgi_upload');
                    $err = file_put_contents($tmpPath, $buffer);
                    $this->addFile($files, $fieldName, $filename, $tmpPath, $mimeType, false === $err);
                    $filename = $mimeType = null;
                }
                $fieldName = $fieldType = null;

                continue;
            }

            // Assert: We may be in the header, lets try to find 'Content-Disposition' and 'Content-Type'.
            if (strpos($buffer, 'Content-Disposition') === 0) {
                $inHeader = true;
                if (preg_match('/name=\"([^\"]*)\"/', $buffer, $matches)) {
                    $fieldName = $matches[1];
                }
                if (preg_match('/filename=\"([^\"]*)\"/', $buffer, $matches)) {
                    $filename = $matches[1];
                    $fieldType = 'file';
                } else {
                    $fieldType = 'data';
                }
            } elseif (strpos($buffer, 'Content-Type') === 0) {
                $inHeader = true;
                if (preg_match('/Content-Type: (.*)?/', $buffer, $matches)) {
                    $mimeType = trim($matches[1]);
                }
            }
        }

        return [$post, $files];
    }

    /**
     * {@inheritdoc}
     */
    public function getCookies()
    {
        $cookies = [];

        if (isset($this->params['HTTP_COOKIE'])) {
            $cookiePairs = explode(';', $this->params['HTTP_COOKIE']);

            foreach ($cookiePairs as $cookiePair) {
                list($name, $value) = explode('=', trim($cookiePair));
                $cookies[$name] = $value;
            }
        }

        return $cookies;
    }

    /**
     * {@inheritdoc}
     */
    public function getStdin()
    {
        return $this->stdin;
    }

    /**
     * {@inheritdoc}
     */
    public function getServerRequest()
    {
        if (null === self::$serverRequestCreator) {
            throw new \RuntimeException('You need to add an object of \Nyholm\Psr7Server\ServerRequestCreatorInterface to \PHPFastCGI\FastCGIDaemon\Http\Request::setServerRequestCreator to use PSR-7 requests. Please install and read more at https://github.com/nyholm/psr7-server');
        }

        $server  = $this->params;
        $query   = $this->getQuery();
        $post    = $this->getPost();
        $cookies = $this->getCookies();

        return self::$serverRequestCreator->fromArrays(
            $server,
            self::$serverRequestCreator->getHeadersFromServer($server),
            $cookies,
            $query,
            $post,
/**
 * @return array|string
 */
function returnsDifferentValues($x) {
    if ($x) {
        return 'foo';
    }

    return array();
}

$x = returnsDifferentValues($y);
if (is_array($x)) {
    // $x is an array.
}
            $this->uploadedFiles,
            $this->stdin
        );


    }

    /**
     * {@inheritdoc}
     */
    public function getHttpFoundationRequest()
    {
        if (!class_exists(HttpFoundationRequest::class)) {
            throw new \RuntimeException('You need to install symfony/http-foundation:^4.0 to use HttpFoundation requests.');
        }

        $query   = $this->getQuery();
        $post    = $this->getPost();
        $cookies = $this->getCookies();

        return new HttpFoundationRequest($query, $post, [], $cookies, $this->uploadedFiles, $this->params, $this->stdin);
/**
 * @return array|string
 */
function returnsDifferentValues($x) {
    if ($x) {
        return 'foo';
    }

    return array();
}

$x = returnsDifferentValues($y);
if (is_array($x)) {
    // $x is an array.
}
    }

    /**
     * Add a file to the $files array
     */
    private function addFile(array &$files, string $fieldName, string $filename, string $tmpPath, string $mimeType, bool $err): void
    {
        $data = [
            'type' => $mimeType ?: 'application/octet-stream',
            'name' => $filename,
            'tmp_name' => $tmpPath,
            'error' => $err ? UPLOAD_ERR_CANT_WRITE : UPLOAD_ERR_OK,
            'size' => filesize($tmpPath),
        ];

        $parts = preg_split('|(\[[^\]]*\])|', $fieldName, -1, PREG_SPLIT_NO_EMPTY | PREG_SPLIT_DELIM_CAPTURE);
        $count = count($parts);
        if (1 === $count) {
            $files[$fieldName] = $data;
        } else {
            $current = &$files;
            foreach ($parts as $i => $part) {
                if ($part === '[]') {
                    $current[] = $data;
                    continue;
                }

                $trimmedMatch = trim($part, '[]');
                if ($i === $count -1) {
                    $current[$trimmedMatch] = $data;
                } else {
                    $current = &$current[$trimmedMatch];
                }
            }
        }
    }
}


1			<?php
2
3			namespace PHPFastCGI\FastCGIDaemon\Http;
4
5			use Nyholm\Psr7Server\ServerRequestCreatorInterface;
6			use Symfony\Component\HttpFoundation\Request as HttpFoundationRequest;
7
8			/**
9			* The default implementation of the RequestInterface.
10			*/
11			final class Request implements RequestInterface
12			{
13			/**
14			* @var ServerRequestCreatorInterface\|null
15			*/
16			private static $serverRequestCreator = null;
17
18			/**
19			* @var int
20			*/
21			private static $bufferSize = 10485760; // 10 MB
22
23			/**
24			* @var string
25			*/
26			private static $uploadDir = null;
27
28			/**
29			* @var array
30			*/
31			private $uploadedFiles = [];
32
33			/**
34			* @var array
35			*/
36			private $params;
37
38			/**
39			* @var resource
40			*/
41			private $stdin;
42
43			/**
44			* Constructor.
45			*
46			* @param array $params The FastCGI server params as an associative array
47			* @param resource $stdin The FastCGI stdin data as a stream resource
48			*/
49			public function __construct(array $params, $stdin)
50			{
51			$this->params = [];
52
53			foreach ($params as $name => $value) {
54			$this->params[strtoupper($name)] = $value;
55			}
56
57			$this->stdin = $stdin;
58
59			rewind($this->stdin);
60			}
61
62			public static function setServerRequestCreator(ServerRequestCreatorInterface $serverRequestCreator): void
63			{
64			self::$serverRequestCreator = $serverRequestCreator;
65			}
66
67			/**
68			* {@inheritdoc}
69			*/
70			public function getParams()
71			{
72			return $this->params;
73			}
74
75			/**
76			* Remove all uploaded files
77			*/
78			public function cleanUploadedFiles(): void
79			{
80			foreach ($this->uploadedFiles as $file) {
81			@unlink($file['tmp_name']);
			0 ignored issues – show Security Best Practice introduced 2016-07-27 17:56 UTC by Report Bug Copy Issue Report It seems like you do not handle an error condition here. This can introduce security issues, and is generally not recommended. If you suppress an error, we recommend checking for the error condition explicitly: // For example instead of @mkdir($dir); // Better use if (@mkdir($dir) === false) { throw new \RuntimeException('The directory '.$dir.' could not be created.'); } Loading history...
82			}
83			}
84
85			/**
86			* Set a buffer size to read uploaded files
87			*/
88			public static function setBufferSize(int $size): void
89			{
90			static::$bufferSize = $size;
			0 ignored issues – show Comprehensibility introduced 2018-07-30 07:30 UTC by Report Bug Copy Issue Report Since `PHPFastCGI\FastCGIDaemon\Http\Request` is declared final, using late-static binding will have no effect. You might want to replace `static` with `self` instead. Late static binding only has effect in subclasses. A `final` class cannot be extended anymore so late static binding cannot occurr. Consider replacing `static::` with `self::`. To learn more about late static binding, please refer to the PHP core documentation. Loading history...
91			}
92
93			public static function getBufferSize(): int
94			{
95			return static::$bufferSize;
			0 ignored issues – show Comprehensibility introduced 2018-07-30 07:30 UTC by Report Bug Copy Issue Report Since `PHPFastCGI\FastCGIDaemon\Http\Request` is declared final, using late-static binding will have no effect. You might want to replace `static` with `self` instead. Late static binding only has effect in subclasses. A `final` class cannot be extended anymore so late static binding cannot occurr. Consider replacing `static::` with `self::`. To learn more about late static binding, please refer to the PHP core documentation. Loading history...
96			}
97
98			public static function setUploadDir(string $dir): void
99			{
100			static::$uploadDir = $dir;
			0 ignored issues – show Comprehensibility introduced 2018-07-30 07:30 UTC by Report Bug Copy Issue Report Since `PHPFastCGI\FastCGIDaemon\Http\Request` is declared final, using late-static binding will have no effect. You might want to replace `static` with `self` instead. Late static binding only has effect in subclasses. A `final` class cannot be extended anymore so late static binding cannot occurr. Consider replacing `static::` with `self::`. To learn more about late static binding, please refer to the PHP core documentation. Loading history...
101			}
102
103			public static function getUploadDir(): string
104			{
105			return static::$uploadDir ?: sys_get_temp_dir();
			0 ignored issues – show Comprehensibility introduced 2018-07-30 07:30 UTC by Report Bug Copy Issue Report Since `PHPFastCGI\FastCGIDaemon\Http\Request` is declared final, using late-static binding will have no effect. You might want to replace `static` with `self` instead. Late static binding only has effect in subclasses. A `final` class cannot be extended anymore so late static binding cannot occurr. Consider replacing `static::` with `self::`. To learn more about late static binding, please refer to the PHP core documentation. Loading history...
106			}
107
108			/**
109			* {@inheritdoc}
110			*/
111			public function getQuery()
112			{
113			$query = null;
114
115			if (isset($this->params['QUERY_STRING'])) {
116			parse_str($this->params['QUERY_STRING'], $query);
117			}
118
119			return $query ?: [];
120			}
121
122			/**
123			* {@inheritdoc}
124			*/
125			public function getPost()
126			{
127			$post = null;
128
129			if (isset($this->params['REQUEST_METHOD']) && isset($this->params['CONTENT_TYPE'])) {
130			$requestMethod = $this->params['REQUEST_METHOD'];
131			$contentType = $this->params['CONTENT_TYPE'];
132
133			if (strcasecmp($requestMethod, 'POST') === 0 && stripos($contentType, 'multipart/form-data') === 0) {
134			if (preg_match('/boundary=(?P<quote>[\'"]?)(.*)(?P=quote)/', $contentType, $matches)) {
135			list($postData, $this->uploadedFiles) = $this->parseMultipartFormData($this->stdin, $matches[2]);
136			parse_str($postData, $post);
137
138			return $post;
139			}
140			}
141
142			if (strcasecmp($requestMethod, 'POST') === 0 && stripos($contentType, 'application/x-www-form-urlencoded') === 0) {
143			$postData = stream_get_contents($this->stdin);
144			rewind($this->stdin);
145
146			parse_str($postData, $post);
147			}
148			}
149
150			return $post ?: [];
151			}
152
153			private function parseMultipartFormData($stream, $boundary) {
154			$post = "";
155			$files = [];
156			$fieldType = $fieldName = $filename = $mimeType = null;
157			$inHeader = $getContent = false;
			0 ignored issues – show Unused Code introduced 2018-07-30 01:10 UTC by Report Bug Copy Issue Report `$getContent` is not used, you could remove the assignment. This check looks for variable assignements that are either overwritten by other assignments or where the variable is not used subsequently. $myVar = 'Value'; $higher = false; if (rand(1, 6) > 3) { $higher = true; } else { $higher = false; } Both the `$myVar` assignment in line 1 and the `$higher` assignment in line 2 are dead. The first because `$myVar` is never used and the second because `$higher` is always overwritten for every possible time line. Loading history...
158
159			while (!feof($stream)) {
160			$getContent = $fieldName && !$inHeader;
			0 ignored issues – show Bug Best Practice introduced 2018-07-30 01:10 UTC by Report Bug Copy Issue Report The expression `$fieldName` of type `string\|null` is loosely compared to `true`; this is ambiguous if the string can be empty. You might want to explicitly use `!== null` instead. In PHP, under loose comparison (like `==`, or `!=`, or `switch` conditions), values of different types might be equal. For `string` values, the empty string `''` is a special case, in particular the following results might be unexpected: '' == false // true '' == null // true 'ab' == false // false 'ab' == null // false // It is often better to use strict comparison '' === false // false '' === null // false Loading history...
161			$buffer = stream_get_line($stream, static::$bufferSize, "\n" . ($getContent ? '--'.$boundary : ''));
			0 ignored issues – show Comprehensibility introduced 2018-07-30 07:30 UTC by Report Bug Copy Issue Report Since `PHPFastCGI\FastCGIDaemon\Http\Request` is declared final, using late-static binding will have no effect. You might want to replace `static` with `self` instead. Late static binding only has effect in subclasses. A `final` class cannot be extended anymore so late static binding cannot occurr. Consider replacing `static::` with `self::`. To learn more about late static binding, please refer to the PHP core documentation. Loading history...
162			$buffer = trim($buffer, "\r");
163
164			// Find the empty line between headers and body
165			if ($inHeader && strlen($buffer) == 0) {
166			$inHeader = false;
167
168			continue;
169			}
170
171			if ($getContent) {
172			if ($fieldType === 'data') {
173			$post .= (isset($post[0]) ? '&' : '') . $fieldName . "=" . urlencode($buffer);
174			} elseif ($fieldType === 'file' && $filename) {
175			$tmpPath = @tempnam($this->getUploadDir(), 'fastcgi_upload');
176			$err = file_put_contents($tmpPath, $buffer);
177			$this->addFile($files, $fieldName, $filename, $tmpPath, $mimeType, false === $err);
178			$filename = $mimeType = null;
179			}
180			$fieldName = $fieldType = null;
181
182			continue;
183			}
184
185			// Assert: We may be in the header, lets try to find 'Content-Disposition' and 'Content-Type'.
186			if (strpos($buffer, 'Content-Disposition') === 0) {
187			$inHeader = true;
188			if (preg_match('/name=\"([^\"]*)\"/', $buffer, $matches)) {
189			$fieldName = $matches[1];
190			}
191			if (preg_match('/filename=\"([^\"]*)\"/', $buffer, $matches)) {
192			$filename = $matches[1];
193			$fieldType = 'file';
194			} else {
195			$fieldType = 'data';
196			}
197			} elseif (strpos($buffer, 'Content-Type') === 0) {
198			$inHeader = true;
199			if (preg_match('/Content-Type: (.*)?/', $buffer, $matches)) {
200			$mimeType = trim($matches[1]);
201			}
202			}
203			}
204
205			return [$post, $files];
206			}
207
208			/**
209			* {@inheritdoc}
210			*/
211			public function getCookies()
212			{
213			$cookies = [];
214
215			if (isset($this->params['HTTP_COOKIE'])) {
216			$cookiePairs = explode(';', $this->params['HTTP_COOKIE']);
217
218			foreach ($cookiePairs as $cookiePair) {
219			list($name, $value) = explode('=', trim($cookiePair));
220			$cookies[$name] = $value;
221			}
222			}
223
224			return $cookies;
225			}
226
227			/**
228			* {@inheritdoc}
229			*/
230			public function getStdin()
231			{
232			return $this->stdin;
233			}
234
235			/**
236			* {@inheritdoc}
237			*/
238			public function getServerRequest()
239			{
240			if (null === self::$serverRequestCreator) {
241			throw new \RuntimeException('You need to add an object of \Nyholm\Psr7Server\ServerRequestCreatorInterface to \PHPFastCGI\FastCGIDaemon\Http\Request::setServerRequestCreator to use PSR-7 requests. Please install and read more at https://github.com/nyholm/psr7-server');
242			}
243
244			$server = $this->params;
245			$query = $this->getQuery();
246			$post = $this->getPost();
247			$cookies = $this->getCookies();
248
249			return self::$serverRequestCreator->fromArrays(
250			$server,
251			self::$serverRequestCreator->getHeadersFromServer($server),
252			$cookies,
253			$query,
254			$post,
			0 ignored issues – show Bug introduced 2018-07-30 08:46 UTC by Report Bug Copy Issue Report It seems like `$post` defined by `$this->getPost()` on line `246` can also be of type `null`; however, `Nyholm\Psr7Server\Server...Interface::fromArrays()` does only seem to accept `array`, maybe add an additional type check? If a method or function can return multiple different values and unless you are sure that you only can receive a single value in this context, we recommend to add an additional type check: /** * @return array\|string */ function returnsDifferentValues($x) { if ($x) { return 'foo'; } return array(); } $x = returnsDifferentValues($y); if (is_array($x)) { // $x is an array. } If this a common case that PHP Analyzer should handle natively, please let us know by opening an issue. Loading history...
255			$this->uploadedFiles,
256			$this->stdin
257			);
258
259
260			}
261
262			/**
263			* {@inheritdoc}
264			*/
265			public function getHttpFoundationRequest()
266			{
267			if (!class_exists(HttpFoundationRequest::class)) {
268			throw new \RuntimeException('You need to install symfony/http-foundation:^4.0 to use HttpFoundation requests.');
269			}
270
271			$query = $this->getQuery();
272			$post = $this->getPost();
273			$cookies = $this->getCookies();
274
275			return new HttpFoundationRequest($query, $post, [], $cookies, $this->uploadedFiles, $this->params, $this->stdin);
			0 ignored issues – show Bug introduced 2018-07-30 01:10 UTC by Report Bug Copy Issue Report It seems like `$post` defined by `$this->getPost()` on line `272` can also be of type `null`; however, `Symfony\Component\HttpFo...\Request::__construct()` does only seem to accept `array`, maybe add an additional type check? If a method or function can return multiple different values and unless you are sure that you only can receive a single value in this context, we recommend to add an additional type check: /** * @return array\|string */ function returnsDifferentValues($x) { if ($x) { return 'foo'; } return array(); } $x = returnsDifferentValues($y); if (is_array($x)) { // $x is an array. } If this a common case that PHP Analyzer should handle natively, please let us know by opening an issue. Loading history...
276			}
277
278			/**
279			* Add a file to the $files array
280			*/
281			private function addFile(array &$files, string $fieldName, string $filename, string $tmpPath, string $mimeType, bool $err): void
282			{
283			$data = [
284			'type' => $mimeType ?: 'application/octet-stream',
285			'name' => $filename,
286			'tmp_name' => $tmpPath,
287			'error' => $err ? UPLOAD_ERR_CANT_WRITE : UPLOAD_ERR_OK,
288			'size' => filesize($tmpPath),
289			];
290
291			$parts = preg_split('\|(\[[^\]]*\])\|', $fieldName, -1, PREG_SPLIT_NO_EMPTY \| PREG_SPLIT_DELIM_CAPTURE);
292			$count = count($parts);
293			if (1 === $count) {
294			$files[$fieldName] = $data;
295			} else {
296			$current = &$files;
297			foreach ($parts as $i => $part) {
298			if ($part === '[]') {
299			$current[] = $data;
300			continue;
301			}
302
303			$trimmedMatch = trim($part, '[]');
304			if ($i === $count -1) {
305			$current[$trimmedMatch] = $data;
306			} else {
307			$current = &$current[$trimmedMatch];
308			}
309			}
310			}
311			}
312			}
313

PHPFastCGI / FastCGIDaemon

Push — master ( 01a8f0...071246 )

Request::setServerRequestCreator() A

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like