This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Victoire\Bundle\WidgetBundle\Cache; |
||
4 | |||
5 | use Predis\Client; |
||
6 | use Symfony\Component\Security\Core\Authorization\AuthorizationChecker; |
||
7 | use Victoire\Bundle\WidgetBundle\Entity\Widget; |
||
8 | use Victoire\Bundle\WidgetBundle\Entity\WidgetSlotInterface; |
||
9 | use Victoire\Bundle\WidgetBundle\Helper\WidgetHelper; |
||
10 | |||
11 | /** |
||
12 | * This class handle the saving of Widgets. |
||
13 | * Widgets are stored for a week, but are invalidated as soon as |
||
14 | * the Widget's or BusinessEntity's updatedAt field is changed. |
||
15 | */ |
||
16 | class WidgetCache |
||
17 | { |
||
18 | /** |
||
19 | * @var Client |
||
20 | */ |
||
21 | private $redis; |
||
22 | /** |
||
23 | * @var AuthorizationChecker |
||
24 | */ |
||
25 | private $authorizationChecker; |
||
26 | /** |
||
27 | * @var WidgetHelper |
||
28 | */ |
||
29 | private $widgetHelper; |
||
30 | |||
31 | /** |
||
32 | * WidgetCache constructor. |
||
33 | * |
||
34 | * @param Client $redis |
||
35 | * @param AuthorizationChecker $authorizationChecker |
||
36 | * @param WidgetHelper $widgetHelper |
||
37 | */ |
||
38 | public function __construct(Client $redis, AuthorizationChecker $authorizationChecker, WidgetHelper $widgetHelper) |
||
39 | { |
||
40 | $this->redis = $redis; |
||
41 | $this->authorizationChecker = $authorizationChecker; |
||
42 | $this->widgetHelper = $widgetHelper; |
||
43 | } |
||
44 | |||
45 | /** |
||
46 | * @param Widget $widget |
||
47 | * |
||
48 | * @return string |
||
49 | */ |
||
50 | public function fetch(Widget $widget) |
||
51 | { |
||
52 | return $this->redis->get($this->getHash($widget)); |
||
53 | } |
||
54 | |||
55 | /** |
||
56 | * @param Widget $widget |
||
57 | * |
||
58 | * @return int |
||
59 | */ |
||
60 | public function remove(Widget $widget) |
||
61 | { |
||
62 | return $this->redis->del($this->getHash($widget)); |
||
63 | } |
||
64 | |||
65 | /** |
||
0 ignored issues
–
show
introduced
by
![]() |
|||
66 | * @param Widget $widget |
||
0 ignored issues
–
show
|
|||
67 | * @param $content |
||
0 ignored issues
–
show
|
|||
68 | */ |
||
69 | public function save(Widget $widget, $content) |
||
70 | { |
||
71 | $hash = $this->getHash($widget); |
||
72 | if ($hash) { |
||
0 ignored issues
–
show
The expression
$hash of type string|null is loosely compared to true ; this is ambiguous if the string can be empty. You might want to explicitly use !== null instead.
In PHP, under loose comparison (like For '' == false // true
'' == null // true
'ab' == false // false
'ab' == null // false
// It is often better to use strict comparison
'' === false // false
'' === null // false
![]() |
|||
73 | $this->redis->set($hash, $content); |
||
74 | $this->redis->expire($hash, $this->widgetHelper->getCacheTimeout($widget)); // cache for a week |
||
75 | } |
||
76 | } |
||
77 | |||
78 | /** |
||
79 | * clear all redis cache. |
||
80 | */ |
||
81 | public function clear() |
||
82 | { |
||
83 | $keys = $this->redis->keys('widgets/*'); |
||
84 | foreach ($keys as $key) { |
||
85 | $this->redis->del($key); |
||
86 | } |
||
87 | } |
||
88 | |||
89 | /** |
||
90 | * @param Widget $widget |
||
91 | * |
||
92 | * @return string |
||
93 | */ |
||
94 | protected function getHash(Widget $widget) |
||
95 | { |
||
96 | $hash = null; |
||
97 | if (!$widget instanceof WidgetSlotInterface) { |
||
98 | if ($widget->getMode() == Widget::MODE_BUSINESS_ENTITY |
||
99 | && $widget->getEntity() |
||
100 | && method_exists($widget->getEntity(), 'getUpdatedAt')) { |
||
101 | $hash = $this->generateBusinessEntityHash($widget); |
||
102 | } elseif ($widget->getMode() == Widget::MODE_STATIC) { |
||
103 | $hash = $this->generateHash($widget); |
||
104 | } |
||
105 | } |
||
106 | |||
107 | return $hash; |
||
108 | } |
||
109 | |||
110 | protected function generateBusinessEntityHash(Widget $widget) |
||
111 | { |
||
112 | return sprintf('widgets/%s--%s-%s-%s', |
||
113 | $widget->generateCacheId(), |
||
114 | $widget->getEntity()->getId(), |
||
115 | $widget->getEntity()->getUpdatedAt()->getTimestamp(), |
||
116 | (string) $this->authorizationChecker->isGranted('ROLE_VICTOIRE') |
||
117 | ); |
||
118 | } |
||
119 | |||
120 | private function generateHash(Widget $widget) |
||
121 | { |
||
122 | return sprintf('widgets/%s-%s', |
||
123 | $widget->generateCacheId(), |
||
124 | (string) $this->authorizationChecker->isGranted('ROLE_VICTOIRE') |
||
125 | ); |
||
126 | } |
||
127 | } |
||
128 |