Issues (94)

Security Analysis    no request data  

This project does not seem to handle request data directly as such no vulnerable execution paths were found.

  Cross-Site Scripting
Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.
  File Exposure
File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.
  File Manipulation
File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.
  Object Injection
Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.
  Code Injection
Code Injection enables an attacker to execute arbitrary code on the server.
  Response Splitting
Response Splitting can be used to send arbitrary responses.
  File Inclusion
File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.
  Command Injection
Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.
  SQL Injection
SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.
  XPath Injection
XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.
  LDAP Injection
LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.
  Header Injection
  Other Vulnerability
This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.
  Regex Injection
Regex Injection enables an attacker to execute arbitrary code in your PHP process.
  XML Injection
XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.
  Variable Injection
Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.
Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

Classes/Faker.php (1 issue)

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

1
<?php
2
namespace TildBJ\Seeder;
3
4
/***************************************************************
5
 *
6
 *  Copyright notice
7
 *
8
 *  (c) 2016 Dennis Römmich <[email protected]>
9
 *
10
 *  All rights reserved
11
 *
12
 *  This script is part of the TYPO3 project. The TYPO3 project is
13
 *  free software; you can redistribute it and/or modify
14
 *  it under the terms of the GNU General Public License as published by
15
 *  the Free Software Foundation; either version 3 of the License, or
16
 *  (at your option) any later version.
17
 *
18
 *  The GNU General Public License can be found at
19
 *  http://www.gnu.org/copyleft/gpl.html.
20
 *
21
 *  This script is distributed in the hope that it will be useful,
22
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
23
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
24
 *  GNU General Public License for more details.
25
 *
26
 *  This copyright notice MUST APPEAR in all copies of the script!
27
 ***************************************************************/
28
29
/**
30
 * Interface Faker
31
 *
32
 * @method string getName()
33
 * @method string getFirstName()
34
 * @method string getFirstNameMale()
35
 * @method string getFirstNameFemale()
36
 * @method string getLastName()
37
 * @method string getTitle()
38
 * @method string getTitleMale()
39
 * @method string getTitleFemale()
40
 * @method string getCitySuffix()
41
 * @method string getStreetSuffix()
42
 * @method string getBuildingNumber()
43
 * @method string getCity()
44
 * @method string getStreetName()
45
 * @method string getStreetAddress()
46
 * @method string getPostcode()
47
 * @method string getAddress()
48
 * @method string getCountry()
49
 * @method string getLatitude()
50
 * @method string getLongitude()
51
 * @method string getEan13()
52
 * @method string getEan8()
53
 * @method string getIsbn13()
54
 * @method string getIsbn10()
55
 * @method string getPhoneNumber()
56
 * @method string getCompany()
57
 * @method string getCompanySuffix()
58
 * @method string getJobTitle()
59
 * @method string getCreditCardType()
60
 * @method string getCreditCardNumber()
61
 * @method string getCreditCardExpirationDate()
62
 * @method string getCreditCardExpirationDateString()
63
 * @method string getCreditCardDetails()
64
 * @method string getBankAccountNumber()
65
 * @method string getIban()
66
 * @method string getSwiftBicNumber()
67
 * @method string getVat()
68
 * @method string getWord()
69
 * @method string getWords()
70
 * @method string getSentence()
71
 * @method string getParagraph()
72
 * @method string getText()
73
 * @method string getRealText()
74
 * @method string getEmail()
75
 * @method string getSafeEmail()
76
 * @method string getFreeEmail()
77
 * @method string getCompanyEmail()
78
 * @method string getFreeEmailDomain()
79
 * @method string getSafeEmailDomain()
80
 * @method string getUserName()
81
 * @method string getPassword()
82
 * @method string getDomainName()
83
 * @method string getDomainWord()
84
 * @method string getTld()
85
 * @method string getUrl()
86
 * @method string getSlug()
87
 * @method string getIpv4()
88
 * @method string getIpv6()
89
 * @method string getLocalIpv4()
90
 * @method string getMacAddress()
91
 * @method string getUnixTime()
92
 * @method string getDateTime()
93
 * @method string getDateTimeAD()
94
 * @method string getIso8601()
95
 * @method string getDateTimeThisCentury()
96
 * @method string getDateTimeThisDecade()
97
 * @method string getDateTimeThisYear()
98
 * @method string getDateTimeThisMonth()
99
 * @method string getAmPm()
100
 * @method string getDayOfMonth()
101
 * @method string getDayOfWeek()
102
 * @method string getMonth()
103
 * @method string getMonthName()
104
 * @method string getYear()
105
 * @method string getCentury()
106
 * @method string getTimezone()
107
 * @method string getDate()
108
 * @method string getTime()
109
 * @method string getMd5()
110
 * @method string getSha1()
111
 * @method string getSha256()
112
 * @method string getLocale()
113
 * @method string getCountryCode()
114
 * @method string getCountryISOAlpha3()
115
 * @method string getLanguageCode()
116
 * @method string getCurrencyCode()
117
 * @method string getBoolean()
118
 * @method string getRandomDigit()
119
 * @method string getRandomDigitNotNull()
120
 * @method string getRandomLetter()
121
 * @method string getRandomAscii()
122
 * @method string getRandomNumber()
123
 * @method string getRandomFloat()
124
 * @method string getMacProcessor()
125
 * @method string getLinuxProcessor()
126
 * @method string getUserAgent()
127
 * @method string getChrome()
128
 * @method string getFirefox()
129
 * @method string getSafari()
130
 * @method string getOpera()
131
 * @method string getInternetExplorer()
132
 * @method string getWindowsPlatformToken()
133
 * @method string getMacPlatformToken()
134
 * @method string getLinuxPlatformToken()
135
 * @method string getUuid()
136
 * @method string getMimeType()
137
 * @method string getFileExtension()
138
 * @method string getImageUrl()
139
 * @method string getHexColor()
140
 * @method string getSafeHexColor()
141
 * @method string getRgbColor()
142
 * @method string getRgbCssColor()
143
 * @method string getSafeColorName()
144
 * @method string getColorName()
145
 *
146
 * @package TildBJ\Seeder
147
 */
148
interface Faker
0 ignored issues
show
Faker does not seem to conform to the naming convention (^[A-Z][a-zA-Z0-9]*Interface$).

This check examines a number of code elements and verifies that they conform to the given naming conventions.

You can set conventions for local variables, abstract classes, utility classes, constant, properties, methods, parameters, interfaces, classes, exceptions and special methods.

Loading history...
149
{
150
    /**
151
     * Returns random dummy data by property
152
     *
153
     * @param $property
154
     * @return mixed
155
     */
156
    public function get($property);
157
158
    /**
159
     * Guesses which provider will be returned by given property name
160
     *
161
     * @param $name
162
     * @return string
163
     */
164
    public function guessProviderName($name);
165
}
166