This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Victoire\Bundle\BlogBundle\Controller; |
||
4 | |||
5 | use Doctrine\ORM\NoResultException; |
||
6 | use Sensio\Bundle\FrameworkExtraBundle\Configuration\Method; |
||
7 | use Sensio\Bundle\FrameworkExtraBundle\Configuration\ParamConverter; |
||
8 | use Sensio\Bundle\FrameworkExtraBundle\Configuration\Route; |
||
9 | use Sensio\Bundle\FrameworkExtraBundle\Configuration\Template; |
||
10 | use Symfony\Bundle\FrameworkBundle\Controller\Controller; |
||
11 | use Symfony\Component\Form\FormInterface; |
||
12 | use Symfony\Component\HttpFoundation\JsonResponse; |
||
13 | use Symfony\Component\HttpFoundation\Request; |
||
14 | use Victoire\Bundle\BlogBundle\Entity\Article; |
||
15 | use Victoire\Bundle\BlogBundle\Entity\Blog; |
||
16 | use Victoire\Bundle\BlogBundle\Event\ArticleEvent; |
||
17 | use Victoire\Bundle\BlogBundle\Form\ArticleSettingsType; |
||
18 | use Victoire\Bundle\BlogBundle\Form\ArticleType; |
||
19 | use Victoire\Bundle\BlogBundle\VictoireBlogEvents; |
||
20 | use Victoire\Bundle\CoreBundle\Controller\VictoireAlertifyControllerTrait; |
||
21 | |||
22 | /** |
||
23 | * article Controller. |
||
24 | * |
||
25 | * @Route("/victoire-dcms/article") |
||
26 | */ |
||
27 | class ArticleController extends Controller |
||
28 | { |
||
29 | use VictoireAlertifyControllerTrait; |
||
30 | |||
31 | /** |
||
0 ignored issues
–
show
introduced
by
![]() |
|||
32 | * Display a form to create a new Blog Article. |
||
33 | * |
||
34 | * @Route("/new/{id}", name="victoire_blog_article_new") |
||
35 | * @Method("GET") |
||
36 | * @Template() |
||
37 | * |
||
38 | * @return JsonResponse |
||
39 | */ |
||
40 | public function newAction(Blog $blog) |
||
41 | { |
||
42 | try { |
||
43 | $article = new Article(); |
||
44 | $article->setBlog($blog); |
||
45 | $form = $this->createForm(ArticleType::class, $article); |
||
46 | |||
47 | return new JsonResponse([ |
||
48 | 'html' => $this->container->get('templating')->render( |
||
49 | 'VictoireBlogBundle:Article:new.html.twig', |
||
50 | [ |
||
51 | 'form' => $form->createView(), |
||
52 | 'blogId' => $blog->getId(), |
||
53 | ] |
||
54 | ), |
||
55 | ]); |
||
56 | } catch (NoResultException $e) { |
||
57 | return new JsonResponse([ |
||
58 | 'success' => false, |
||
59 | 'message' => $e->getMessage(), |
||
60 | ]); |
||
61 | } |
||
62 | } |
||
63 | |||
64 | /** |
||
0 ignored issues
–
show
|
|||
65 | * Create a new Blog Article. |
||
66 | * |
||
67 | * @Route("/new/{id}", name="victoire_blog_article_new_post") |
||
68 | * @Method("POST") |
||
69 | * @ParamConverter("blog", class="VictoireBlogBundle:Blog") |
||
70 | * |
||
71 | * @return JsonResponse |
||
72 | */ |
||
73 | public function newPostAction(Request $request, Blog $blog) |
||
74 | { |
||
75 | $article = new Article(); |
||
76 | $article->setBlog($blog); |
||
77 | $form = $this->createForm(ArticleType::class, $article); |
||
78 | |||
79 | $form->handleRequest($request); |
||
80 | if ($form->isValid()) { |
||
81 | $page = $this->get('victoire_blog.manager.article')->create( |
||
82 | $article, |
||
83 | $this->getUser() |
||
84 | ); |
||
85 | |||
86 | $dispatcher = $this->get('event_dispatcher'); |
||
87 | $event = new ArticleEvent($article); |
||
88 | $dispatcher->dispatch(VictoireBlogEvents::CREATE_ARTICLE, $event); |
||
89 | |||
90 | if (null === $response = $event->getResponse()) { |
||
91 | $response = new JsonResponse([ |
||
92 | 'success' => true, |
||
93 | 'url' => $this->generateUrl('victoire_core_page_show', [ |
||
94 | '_locale' => $request->getLocale(), |
||
95 | 'url' => $this->container->get('victoire_core.url_builder')->buildUrl($page), |
||
96 | ]), |
||
97 | ]); |
||
98 | } |
||
99 | |||
100 | return $response; |
||
101 | } |
||
102 | |||
103 | return new JsonResponse([ |
||
104 | 'success' => false, |
||
105 | 'message' => $this->container->get('victoire_form.error_helper')->getRecursiveReadableErrors($form), |
||
106 | 'html' => $this->container->get('templating')->render( |
||
107 | 'VictoireBlogBundle:Article:new.html.twig', |
||
108 | [ |
||
109 | 'form' => $form->createView(), |
||
110 | 'blogId' => $blog->getId(), |
||
111 | ] |
||
112 | ), |
||
113 | ]); |
||
114 | } |
||
115 | |||
116 | /** |
||
117 | * Display a form to edit Blog Article settings. |
||
118 | * |
||
119 | * @param Request $request |
||
120 | * @param Article $article |
||
121 | * |
||
122 | * @Route("/{id}/settings", name="victoire_blog_article_settings") |
||
123 | * @Method("GET") |
||
124 | * |
||
125 | * @ParamConverter("article", class="VictoireBlogBundle:Article") |
||
126 | * |
||
127 | * @return JsonResponse |
||
128 | */ |
||
129 | public function settingsAction(Request $request, Article $article) |
||
130 | { |
||
131 | $form = $this->createForm(ArticleSettingsType::class, $article); |
||
132 | $form->handleRequest($request); |
||
133 | |||
134 | $response = $this->getNotPersistedSettingsResponse( |
||
135 | $form, |
||
136 | $article, |
||
137 | $request->query->get('novalidate', false) |
||
138 | ); |
||
139 | |||
140 | return new JsonResponse($response); |
||
141 | } |
||
142 | |||
143 | /** |
||
144 | * Save Blog Article settings. |
||
145 | * |
||
146 | * @param Request $request |
||
147 | * @param Article $article |
||
148 | * |
||
149 | * @Route("/{id}/settings", name="victoire_blog_article_settings_post") |
||
150 | * @Method("POST") |
||
151 | * |
||
152 | * @ParamConverter("article", class="VictoireBlogBundle:Article") |
||
153 | * |
||
154 | * @return JsonResponse |
||
155 | */ |
||
156 | public function settingsPostAction(Request $request, Article $article) |
||
157 | { |
||
158 | $form = $this->createForm(ArticleSettingsType::class, $article); |
||
159 | $form->handleRequest($request); |
||
160 | |||
161 | $novalidate = $request->query->get('novalidate', false); |
||
162 | |||
163 | if ($novalidate === false && $form->isValid()) { |
||
164 | $page = $this->get('victoire_blog.manager.article')->updateSettings( |
||
165 | $article, |
||
166 | $this->getUser() |
||
167 | ); |
||
168 | |||
169 | $response = [ |
||
170 | 'success' => true, |
||
171 | 'url' => $this->generateUrl('victoire_core_page_show', [ |
||
172 | '_locale' => $page->getCurrentLocale(), |
||
173 | 'url' => $page->getReference()->getUrl(), |
||
174 | ]), |
||
175 | ]; |
||
176 | } else { |
||
177 | $response = $this->getNotPersistedSettingsResponse($form, $article, $novalidate); |
||
178 | } |
||
179 | |||
180 | return new JsonResponse($response); |
||
181 | } |
||
182 | |||
183 | /** |
||
184 | * Delete a BLog Article. |
||
185 | * |
||
186 | * @param Article $article |
||
187 | * |
||
188 | * @Route("/{id}/delete", name="victoire_core_article_delete") |
||
189 | * @Template() |
||
190 | * @ParamConverter("article", class="VictoireBlogBundle:Article") |
||
191 | * |
||
192 | * @return JsonResponse |
||
193 | */ |
||
194 | public function deleteAction(Article $article) |
||
195 | { |
||
196 | $blogViewReference = $this->container->get('victoire_view_reference.repository') |
||
197 | ->getOneReferenceByParameters(['viewId' => $article->getBlog()->getId()]); |
||
198 | |||
199 | $this->get('victoire_blog.manager.article')->delete($article); |
||
200 | |||
201 | $message = $this->get('translator')->trans('victoire.blog.article.delete.success', [], 'victoire'); |
||
202 | $this->congrat($message); |
||
203 | |||
204 | $response = [ |
||
205 | 'success' => true, |
||
206 | 'url' => $this->generateUrl('victoire_core_page_show', [ |
||
207 | 'url' => $blogViewReference->getUrl(), |
||
208 | ] |
||
209 | ), |
||
210 | 'message' => $message, |
||
211 | ]; |
||
212 | |||
213 | return new JsonResponse($response); |
||
214 | } |
||
215 | |||
216 | /** |
||
217 | * Get JsonResponse array for Settings novalidate and form display. |
||
218 | * |
||
219 | * @param FormInterface $form |
||
220 | * @param Article $article |
||
221 | * @param $novalidate |
||
222 | * |
||
223 | * @return array |
||
224 | */ |
||
225 | private function getNotPersistedSettingsResponse(FormInterface $form, Article $article, $novalidate) |
||
226 | { |
||
227 | $template = sprintf( |
||
228 | '%s:%s', |
||
229 | $this->getBaseTemplatePath(), |
||
230 | ($novalidate === false) ? 'settings.html.twig' : '_form.html.twig' |
||
231 | ); |
||
232 | |||
233 | $page = $this->get('victoire_page.page_helper')->findPageByParameters([ |
||
234 | 'viewId' => $article->getTemplate()->getId(), |
||
235 | 'entityId' => $article->getId(), |
||
236 | ]); |
||
237 | |||
238 | return [ |
||
239 | 'success' => !$form->isSubmitted(), |
||
240 | 'html' => $this->get('templating')->render($template, [ |
||
241 | 'action' => $this->generateUrl('victoire_blog_article_settings_post', [ |
||
242 | 'id' => $article->getId(), |
||
243 | ]), |
||
244 | 'article' => $article, |
||
245 | 'form' => $form->createView(), |
||
246 | 'businessProperties' => [], |
||
247 | 'page' => $page, |
||
248 | ]), |
||
249 | ]; |
||
250 | } |
||
251 | |||
252 | /** |
||
253 | * @return string |
||
254 | */ |
||
255 | protected function getBaseTemplatePath() |
||
0 ignored issues
–
show
|
|||
256 | { |
||
257 | return 'VictoireBlogBundle:Article'; |
||
258 | } |
||
259 | } |
||
260 |