This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | /** |
||
4 | * Class DataBaseModel: |
||
5 | * This is an abstract class which stands as a model |
||
6 | * to another class e.g User class which can inherit from |
||
7 | * all its methods. This class stands as a middle man |
||
8 | * between the User class and the DataBaseQuery class. |
||
9 | * |
||
10 | * @author: Raimi Ademola <[email protected]> |
||
11 | * @copyright: 2016 Andela |
||
12 | */ |
||
13 | namespace Demo; |
||
14 | |||
15 | use Doctrine\Common\Inflector\Inflector; |
||
16 | use Demo\DataBaseConnection; |
||
17 | |||
18 | abstract class DataBaseModel implements DataBaseModelInterface |
||
19 | { |
||
20 | protected $tableName; |
||
21 | protected $dataBaseQuery; |
||
22 | protected $arrayField; |
||
23 | |||
24 | /** |
||
25 | * This is a constructor; a default method that will be called automatically during class instantiation. |
||
26 | */ |
||
27 | 51 | public function __construct() |
|
28 | { |
||
29 | 51 | $this->tableName = self::getClassName(); |
|
30 | 51 | $this->dataBaseQuery = new DataBaseQuery(); |
|
31 | 51 | $this->arrayField['id'] = 0; |
|
32 | 51 | } |
|
33 | |||
34 | /** |
||
35 | * The magic setter method. |
||
36 | * |
||
37 | * @param $properties |
||
38 | * @param $values |
||
39 | * |
||
40 | * @return array associative array properties |
||
41 | */ |
||
42 | public function __set($properties, $values) |
||
43 | { |
||
44 | $this->arrayField[$properties] = $values; |
||
45 | } |
||
46 | |||
47 | /** |
||
48 | * The magic getter method. |
||
49 | * |
||
50 | * @param $properties |
||
51 | * |
||
52 | * @return array key |
||
53 | */ |
||
54 | public function __get($properties) |
||
55 | { |
||
56 | return $this->arrayField[$properties]; |
||
57 | } |
||
58 | |||
59 | /** |
||
60 | * This method gets all the record from a particular table |
||
61 | * by accessing the read method from the DataBaseQuery class. |
||
62 | * |
||
63 | * |
||
64 | * @return associative array |
||
65 | */ |
||
66 | 6 | public static function getAll($dbConn = null) |
|
67 | { |
||
68 | 6 | if (is_null($dbConn)) { |
|
69 | $dbConn = new DatabaseConnection(); |
||
70 | } |
||
71 | |||
72 | 6 | $sqlData = DataBaseQuery::read($id = false, self::getClassName(), $dbConn); |
|
73 | |||
74 | 3 | if (count($sqlData) > 0) { |
|
75 | 3 | return $sqlData; |
|
76 | } |
||
77 | |||
78 | self::throwNoDataFoundException(); |
||
79 | } |
||
80 | |||
81 | /** |
||
82 | * This method either create or update record in a database table |
||
83 | * by calling either the read method or create method in the |
||
84 | * DataBaseQuery class. |
||
85 | * |
||
86 | * @throws NoRecordUpdateException |
||
87 | * @throws EmptyArrayException |
||
88 | * @throws NoRecordCreatedException |
||
89 | * |
||
90 | * @return bool true or false; |
||
91 | */ |
||
92 | public function save($dbConn = null) |
||
93 | { |
||
94 | if (is_null($dbConn)) { |
||
95 | $dbConn = new DatabaseConnection(); |
||
96 | } |
||
97 | |||
98 | if ($this->arrayField['id']) { |
||
99 | $sqlData = DataBaseQuery::read($this->arrayField['id'], self::getClassName(), $dbConn); |
||
100 | |||
101 | if ($this->checkIfRecordIsEmpty($sqlData)) { |
||
102 | $boolCommit = $this->dataBaseQuery->update(['id' => $this->arrayField['id']], $this->arrayField, self::getClassName()); |
||
103 | |||
104 | if ($boolCommit) { |
||
105 | return true; |
||
106 | } |
||
107 | |||
108 | $this->throwNoRecordUpdatedException(); |
||
109 | } |
||
110 | |||
111 | $this->throwEmptyArrayException(); |
||
112 | } else { |
||
113 | |||
114 | $boolCommit = $this->dataBaseQuery->create($this->arrayField, self::getClassName()); |
||
115 | |||
116 | if ($boolCommit) { |
||
117 | return true; |
||
118 | } |
||
119 | |||
120 | $this->throwNoRecordCreatedException(); |
||
121 | } |
||
122 | } |
||
123 | |||
124 | /** |
||
125 | * This method find a record by id. |
||
126 | * |
||
127 | * @param $id |
||
128 | * |
||
129 | * @throws ArgumentNumberIncorrectException |
||
130 | * @throws ArgumentNotFoundException |
||
131 | * |
||
132 | * @return object |
||
133 | */ |
||
134 | 6 | public static function findById($id) |
|
135 | { |
||
136 | 6 | $numArgs = func_num_args(); |
|
137 | |||
138 | 6 | if ($numArgs > 1) { |
|
139 | 3 | throw new ArgumentNumberIncorrectException('Please input just one Argument'); |
|
140 | } |
||
141 | |||
142 | 3 | if ($id == '') { |
|
143 | 3 | throw new ArgumentNotFoundException('No Argument found, please input an argument'); |
|
144 | } |
||
145 | |||
146 | $staticFindInstance = new static(); |
||
147 | |||
148 | $staticFindInstance->id = $id; |
||
0 ignored issues
–
show
|
|||
149 | |||
150 | return $staticFindInstance; |
||
151 | } |
||
152 | |||
153 | /** |
||
154 | * This method find a record by id and returns |
||
155 | * all the data present in the id. |
||
156 | * |
||
157 | * |
||
158 | * @return associative array |
||
159 | */ |
||
160 | public function getById() |
||
161 | { |
||
162 | if ($this->arrayField['id']) { |
||
163 | $sqlData = DataBaseQuery::read($this->arrayField['id'], self::getClassName()); |
||
164 | |||
165 | return $sqlData; |
||
166 | } |
||
167 | } |
||
168 | |||
169 | /** |
||
170 | * This method delete a row from the table by the row id. |
||
171 | * |
||
172 | * @param $id |
||
173 | * |
||
174 | * @throws ArgumentNumberIncorrectException; |
||
175 | * @throws ArgumentNotFoundException; |
||
176 | * |
||
177 | * @return bool true |
||
178 | */ |
||
179 | 9 | public static function destroy($id, $dbConn = null) |
|
180 | { |
||
181 | 9 | if (is_null($dbConn)) { |
|
182 | 3 | $dbConn = new DatabaseConnection(); |
|
183 | 2 | } |
|
184 | |||
185 | 9 | $numArgs = func_num_args(); |
|
186 | |||
187 | 9 | if ($numArgs > 2) { |
|
188 | 3 | throw new ArgumentNumberIncorrectException('Please input just one Argument'); |
|
189 | } |
||
190 | |||
191 | 6 | if ($numArgs == ' ') { |
|
192 | 3 | throw new ArgumentNotFoundException('No Argument found, please input an argument'); |
|
193 | } |
||
194 | |||
195 | 3 | DataBaseQuery::delete($id, self::getClassName(), $dbConn); |
|
196 | |||
197 | 3 | return true; |
|
198 | } |
||
199 | |||
200 | 51 | public static function getClassName() |
|
201 | { |
||
202 | 51 | $tableName = explode('\\', get_called_class()); |
|
203 | |||
204 | 51 | return Inflector::pluralize(strtolower(end($tableName))); |
|
205 | } |
||
206 | |||
207 | /** |
||
208 | * This method check if the argument passed to this function is an array. |
||
209 | * |
||
210 | * @param $arrayOfRecord |
||
211 | * |
||
212 | * @return bool true |
||
213 | */ |
||
214 | 6 | public function checkIfRecordIsEmpty($arrayOfRecord) |
|
215 | { |
||
216 | 6 | if (count($arrayOfRecord) > 0) { |
|
217 | 3 | return true; |
|
218 | } |
||
219 | |||
220 | 3 | return false; |
|
221 | } |
||
222 | |||
223 | /** |
||
224 | * This method throws exception if record is not updated succesfully. |
||
225 | * |
||
226 | * @throws $NoRecordUpdatedException |
||
227 | */ |
||
228 | 3 | public function throwNoRecordUpdatedException() |
|
229 | { |
||
230 | 3 | $message = "oops, your record did not update succesfully"; |
|
231 | 3 | throw new NoRecordUpdatedException($message); |
|
232 | } |
||
233 | |||
234 | /** |
||
235 | * This method throws exception if data did not match any record. |
||
236 | * |
||
237 | * @throws $EmptyArrayException |
||
238 | */ |
||
239 | 3 | public function throwEmptyArrayException() |
|
240 | { |
||
241 | 3 | $message = "data passed didn't match any record"; |
|
242 | 3 | throw new EmptyArrayException($message); |
|
243 | } |
||
244 | |||
245 | /** |
||
246 | * This method throws exception if record did not create successfully. |
||
247 | * |
||
248 | * @throws $NoRecordCreatedException |
||
249 | */ |
||
250 | 3 | public function throwNoRecordCreatedException() |
|
251 | { |
||
252 | 3 | $message = "oops,your record did not create succesfully"; |
|
253 | 3 | throw new NoRecordCreatedException($message); |
|
254 | } |
||
255 | |||
256 | /** |
||
257 | * This method throws exception if no data is found. |
||
258 | * |
||
259 | * @throws $NoDataFoundException |
||
260 | */ |
||
261 | 3 | public static function throwNoDataFoundException() |
|
262 | { |
||
263 | 3 | $message = "oops, no data found in the table"; |
|
264 | 3 | throw new NoDataFoundException($message); |
|
265 | } |
||
266 | } |
||
267 |
Since your code implements the magic setter
_set
, this function will be called for any write access on an undefined variable. You can add the@property
annotation to your class or interface to document the existence of this variable.Since the property has write access only, you can use the @property-write annotation instead.
Of course, you may also just have mistyped another name, in which case you should fix the error.
See also the PhpDoc documentation for @property.