This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace YonaCMS; |
||
4 | use Application\Cache\Manager as CacheManager; |
||
5 | |||
6 | /** |
||
7 | * Bootstrap |
||
8 | * @copyright Copyright (c) 2011 - 2014 Aleksandr Torosh (http://wezoom.com.ua) |
||
9 | * @author Aleksandr Torosh <[email protected]> |
||
10 | */ |
||
11 | class Bootstrap |
||
12 | { |
||
13 | |||
14 | public function run() |
||
15 | { |
||
16 | $di = new \Phalcon\DI\FactoryDefault(); |
||
17 | |||
18 | // Config |
||
19 | require_once APPLICATION_PATH . '/modules/Cms/Config.php'; |
||
20 | $config = \Cms\Config::get(); |
||
21 | $di->set('config', $config); |
||
22 | |||
23 | // Registry |
||
24 | $registry = new \Phalcon\Registry(); |
||
25 | $di->set('registry', $registry); |
||
26 | |||
27 | // Loader |
||
28 | $loader = new \Phalcon\Loader(); |
||
29 | $loader->registerNamespaces($config->loader->namespaces->toArray()); |
||
30 | $loader->registerDirs([APPLICATION_PATH . "/plugins/"]); |
||
31 | $loader->registerFiles([APPLICATION_PATH . '/../vendor/autoload.php']); |
||
32 | $loader->register(); |
||
33 | |||
34 | // Database |
||
35 | $db = new \Phalcon\Db\Adapter\Pdo\Mysql([ |
||
36 | "host" => $config->database->host, |
||
37 | "username" => $config->database->username, |
||
38 | "password" => $config->database->password, |
||
39 | "dbname" => $config->database->dbname, |
||
40 | "charset" => $config->database->charset, |
||
41 | ]); |
||
42 | $di->set('db', $db); |
||
43 | |||
44 | // View |
||
45 | $this->initView($di); |
||
46 | |||
47 | // URL |
||
48 | $url = new \Phalcon\Mvc\Url(); |
||
49 | $url->setBasePath($config->base_path); |
||
50 | $url->setBaseUri($config->base_path); |
||
51 | $di->set('url', $url); |
||
52 | |||
53 | // Cache |
||
54 | $this->initCache($di); |
||
55 | |||
56 | // CMS |
||
57 | $cmsModel = new \Cms\Model\Configuration(); |
||
58 | $registry->cms = $cmsModel->getConfig(); // Отправляем в Registry |
||
59 | |||
60 | // Application |
||
61 | $application = new \Phalcon\Mvc\Application(); |
||
62 | $application->registerModules($config->modules->toArray()); |
||
63 | |||
64 | // Events Manager, Dispatcher |
||
65 | $this->initEventManager($di); |
||
66 | |||
67 | // Session |
||
68 | $session = new \Phalcon\Session\Adapter\Files(); |
||
69 | $session->start(); |
||
70 | $di->set('session', $session); |
||
71 | |||
72 | $acl = new \Application\Acl\DefaultAcl(); |
||
73 | $di->set('acl', $acl); |
||
74 | |||
75 | // JS Assets |
||
76 | $this->initAssetsManager($di); |
||
77 | |||
78 | // Flash helper |
||
79 | $flash = new \Phalcon\Flash\Session([ |
||
80 | 'error' => 'ui red inverted segment', |
||
81 | 'success' => 'ui green inverted segment', |
||
82 | 'notice' => 'ui blue inverted segment', |
||
83 | 'warning' => 'ui orange inverted segment', |
||
84 | ]); |
||
85 | $di->set('flash', $flash); |
||
86 | |||
87 | $di->set('helper', new \Application\Mvc\Helper()); |
||
88 | |||
89 | // Routing |
||
90 | $this->initRouting($application, $di); |
||
91 | |||
92 | $application->setDI($di); |
||
93 | |||
94 | // Main dispatching process |
||
95 | $response = $this->dispatch($di); |
||
96 | $response->send(); |
||
97 | |||
98 | } |
||
99 | |||
100 | private function initRouting($application, $di) |
||
101 | { |
||
102 | $router = new \Application\Mvc\Router\DefaultRouter(); |
||
103 | $router->setDi($di); |
||
104 | foreach ($application->getModules() as $module) { |
||
105 | $routesClassName = str_replace('Module', 'Routes', $module['className']); |
||
106 | if (class_exists($routesClassName)) { |
||
107 | $routesClass = new $routesClassName(); |
||
108 | $router = $routesClass->init($router); |
||
109 | } |
||
110 | $initClassName = str_replace('Module', 'Init', $module['className']); |
||
111 | if (class_exists($initClassName)) { |
||
112 | new $initClassName(); |
||
113 | } |
||
114 | } |
||
115 | $di->set('router', $router); |
||
116 | } |
||
117 | |||
118 | private function initAssetsManager($di) |
||
119 | { |
||
120 | $config = $di->get('config'); |
||
121 | $assetsManager = new \Application\Assets\Manager(); |
||
122 | $js_collection = $assetsManager->collection('js') |
||
0 ignored issues
–
show
|
|||
123 | ->setLocal(true) |
||
124 | ->addFilter(new \Phalcon\Assets\Filters\Jsmin()) |
||
125 | ->setTargetPath(ROOT . '/assets/js.js') |
||
126 | ->setTargetUri('assets/js.js') |
||
127 | ->join(true); |
||
128 | if ($config->assets->js) { |
||
129 | foreach ($config->assets->js as $js) { |
||
130 | $js_collection->addJs(ROOT . '/' . $js); |
||
131 | } |
||
132 | } |
||
133 | |||
134 | // Admin JS Assets |
||
135 | $assetsManager->collection('modules-admin-js') |
||
0 ignored issues
–
show
|
|||
136 | ->setLocal(true) |
||
137 | ->addFilter(new \Phalcon\Assets\Filters\Jsmin()) |
||
138 | ->setTargetPath(ROOT . '/assets/modules-admin.js') |
||
139 | ->setTargetUri('assets/modules-admin.js') |
||
140 | ->join(true); |
||
141 | |||
142 | // Admin LESS Assets |
||
143 | $assetsManager->collection('modules-admin-less') |
||
0 ignored issues
–
show
|
|||
144 | ->setLocal(true) |
||
145 | ->addFilter(new \Application\Assets\Filter\Less()) |
||
146 | ->setTargetPath(ROOT . '/assets/modules-admin.less') |
||
147 | ->setTargetUri('assets/modules-admin.less') |
||
148 | ->join(true) |
||
149 | ->addCss(APPLICATION_PATH . '/modules/Admin/assets/admin.less'); |
||
150 | |||
151 | $di->set('assets', $assetsManager); |
||
152 | } |
||
153 | |||
154 | private function initEventManager($di) |
||
155 | { |
||
156 | $eventsManager = new \Phalcon\Events\Manager(); |
||
157 | $dispatcher = new \Phalcon\Mvc\Dispatcher(); |
||
158 | |||
159 | $eventsManager->attach("dispatch:beforeDispatchLoop", function ($event, $dispatcher) use ($di) { |
||
160 | new \YonaCMS\Plugin\CheckPoint($di->get('request')); |
||
161 | new \YonaCMS\Plugin\Localization($dispatcher); |
||
162 | new \YonaCMS\Plugin\AdminLocalization($di->get('config')); |
||
163 | new \YonaCMS\Plugin\Acl($di->get('acl'), $dispatcher, $di->get('view')); |
||
164 | new \YonaCMS\Plugin\MobileDetect($di->get('session'), $di->get('view'), $di->get('request')); |
||
165 | }); |
||
166 | |||
167 | $eventsManager->attach("dispatch:afterDispatchLoop", function ($event, $dispatcher) use ($di) { |
||
168 | new \Seo\Plugin\SeoManager($dispatcher, $di->get('request'), $di->get('router'), $di->get('view')); |
||
169 | new \YonaCMS\Plugin\Title($di); |
||
170 | }); |
||
171 | |||
172 | // Profiler |
||
173 | $registry = $di->get('registry'); |
||
174 | if ($registry->cms['PROFILER']) { |
||
175 | $profiler = new \Phalcon\Db\Profiler(); |
||
176 | $di->set('profiler', $profiler); |
||
177 | |||
178 | $eventsManager->attach('db', function ($event, $db) use ($profiler) { |
||
179 | if ($event->getType() == 'beforeQuery') { |
||
180 | $profiler->startProfile($db->getSQLStatement()); |
||
181 | } |
||
182 | if ($event->getType() == 'afterQuery') { |
||
183 | $profiler->stopProfile(); |
||
184 | } |
||
185 | }); |
||
186 | } |
||
187 | |||
188 | $db = $di->get('db'); |
||
189 | $db->setEventsManager($eventsManager); |
||
190 | |||
191 | $dispatcher->setEventsManager($eventsManager); |
||
192 | $di->set('dispatcher', $dispatcher); |
||
193 | } |
||
194 | |||
195 | private function initView($di) |
||
196 | { |
||
197 | $view = new \Phalcon\Mvc\View(); |
||
198 | |||
199 | define('MAIN_VIEW_PATH', '../../../views/'); |
||
200 | $view->setMainView(MAIN_VIEW_PATH . 'main'); |
||
201 | $view->setLayoutsDir(MAIN_VIEW_PATH . '/layouts/'); |
||
202 | $view->setLayout('main'); |
||
203 | $view->setPartialsDir(MAIN_VIEW_PATH . '/partials/'); |
||
204 | |||
205 | // Volt |
||
206 | $volt = new \Application\Mvc\View\Engine\Volt($view, $di); |
||
207 | $volt->setOptions(['compiledPath' => APPLICATION_PATH . '/../data/cache/volt/']); |
||
208 | $volt->initCompiler(); |
||
209 | |||
210 | |||
211 | $phtml = new \Phalcon\Mvc\View\Engine\Php($view, $di); |
||
212 | $viewEngines = [ |
||
213 | ".volt" => $volt, |
||
214 | ".phtml" => $phtml, |
||
215 | ]; |
||
216 | |||
217 | $view->registerEngines($viewEngines); |
||
218 | |||
219 | $ajax = $di->get('request')->getQuery('_ajax'); |
||
220 | if ($ajax) { |
||
221 | $view->setRenderLevel(\Phalcon\Mvc\View::LEVEL_LAYOUT); |
||
222 | } |
||
223 | |||
224 | $di->set('view', $view); |
||
225 | |||
226 | return $view; |
||
227 | } |
||
228 | |||
229 | private function initCache($di) |
||
230 | { |
||
231 | $config = $di->get('config'); |
||
232 | |||
233 | $cacheFrontend = new \Phalcon\Cache\Frontend\Data([ |
||
234 | "lifetime" => 60, |
||
235 | "prefix" => HOST_HASH, |
||
236 | ]); |
||
237 | |||
238 | $cache = null; |
||
239 | switch ($config->cache) { |
||
240 | case 'file': |
||
241 | $cache = new \Phalcon\Cache\Backend\File($cacheFrontend, [ |
||
242 | "cacheDir" => APPLICATION_PATH . "/../data/cache/backend/" |
||
243 | ]); |
||
244 | break; |
||
245 | case 'memcache': |
||
246 | $cache = new \Phalcon\Cache\Backend\Memcache( |
||
247 | $cacheFrontend, [ |
||
248 | "host" => $config->memcache->host, |
||
249 | "port" => $config->memcache->port, |
||
250 | ]); |
||
251 | break; |
||
252 | case 'memcached': |
||
253 | $cache = new \Phalcon\Cache\Backend\Libmemcached( |
||
254 | $cacheFrontend, [ |
||
255 | "host" => $config->memcached->host, |
||
256 | "port" => $config->memcached->port, |
||
257 | ]); |
||
258 | break; |
||
259 | } |
||
260 | $di->set('cache', $cache, true); |
||
261 | $di->set('modelsCache', $cache, true); |
||
262 | |||
263 | \Application\Widget\Proxy::$cache = $cache; // Modules Widget System |
||
264 | |||
265 | $modelsMetadata = new \Phalcon\Mvc\Model\Metadata\Memory(); |
||
266 | $di->set('modelsMetadata', $modelsMetadata); |
||
267 | |||
268 | $di->set('cacheManager', new CacheManager()); |
||
269 | } |
||
270 | |||
271 | private function dispatch($di) |
||
272 | { |
||
273 | $router = $di['router']; |
||
274 | |||
275 | $router->handle(); |
||
276 | |||
277 | $view = $di['view']; |
||
278 | |||
279 | $dispatcher = $di['dispatcher']; |
||
280 | |||
281 | $response = $di['response']; |
||
282 | |||
283 | $dispatcher->setModuleName($router->getModuleName()); |
||
284 | $dispatcher->setControllerName($router->getControllerName()); |
||
285 | $dispatcher->setActionName($router->getActionName()); |
||
286 | $dispatcher->setParams($router->getParams()); |
||
287 | |||
288 | $moduleName = \Application\Utils\ModuleName::camelize($router->getModuleName()); |
||
289 | |||
290 | $ModuleClassName = $moduleName . '\Module'; |
||
291 | if (class_exists($ModuleClassName)) { |
||
292 | $module = new $ModuleClassName; |
||
293 | $module->registerAutoloaders(); |
||
294 | $module->registerServices($di); |
||
295 | } |
||
296 | |||
297 | $view->start(); |
||
298 | |||
299 | $registry = $di['registry']; |
||
300 | if ($registry->cms['DEBUG_MODE']) { |
||
301 | $debug = new \Phalcon\Debug(); |
||
302 | $debug->listen(); |
||
303 | |||
304 | $dispatcher->dispatch(); |
||
305 | } else { |
||
306 | try { |
||
307 | $dispatcher->dispatch(); |
||
308 | } catch (\Phalcon\Exception $e) { |
||
309 | // Errors catching |
||
310 | |||
311 | $view->setViewsDir(__DIR__ . '/modules/Index/views/'); |
||
312 | $view->setPartialsDir(''); |
||
313 | $view->e = $e; |
||
314 | |||
315 | if ($e instanceof \Phalcon\Mvc\Dispatcher\Exception) { |
||
316 | $response->setStatusCode(404, 'Not Found'); |
||
317 | $view->partial('error/error404'); |
||
318 | } else { |
||
319 | $response->setStatusCode(503, 'Service Unavailable'); |
||
320 | $view->partial('error/error503'); |
||
321 | } |
||
322 | |||
323 | return $response; |
||
324 | } |
||
325 | } |
||
326 | |||
327 | $view->render( |
||
328 | $dispatcher->getControllerName(), |
||
329 | $dispatcher->getActionName(), |
||
330 | $dispatcher->getParams() |
||
331 | ); |
||
332 | |||
333 | $view->finish(); |
||
334 | |||
335 | // AJAX |
||
336 | $request = $di['request']; |
||
337 | $_ajax = $request->getQuery('_ajax'); |
||
338 | if ($_ajax) { |
||
339 | $contents = $view->getContent(); |
||
340 | |||
341 | $return = new \stdClass(); |
||
342 | $return->html = $contents; |
||
343 | $return->title = $di->get('helper')->title()->get(); |
||
344 | $return->success = true; |
||
345 | |||
346 | if ($view->bodyClass) { |
||
347 | $return->bodyClass = $view->bodyClass; |
||
348 | } |
||
349 | |||
350 | $headers = $response->getHeaders()->toArray(); |
||
351 | if (isset($headers[404]) || isset($headers[503])) { |
||
352 | $return->success = false; |
||
353 | } |
||
354 | $response->setContentType('application/json', 'UTF-8'); |
||
355 | $response->setContent(json_encode($return)); |
||
356 | } else { |
||
357 | $response->setContent($view->getContent()); |
||
358 | } |
||
359 | |||
360 | return $response; |
||
361 | } |
||
362 | |||
363 | } |
||
364 |
Methods can only be called on objects. This check looks for methods being called on variables that have been inferred to never be objects.