This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | declare(strict_types=1); |
||
3 | /** |
||
4 | * Minotaur |
||
5 | * |
||
6 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not |
||
7 | * use this file except in compliance with the License. You may obtain a copy of |
||
8 | * the License at |
||
9 | * |
||
10 | * http://www.apache.org/licenses/LICENSE-2.0 |
||
11 | * |
||
12 | * Unless required by applicable law or agreed to in writing, software |
||
13 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
||
14 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the |
||
15 | * License for the specific language governing permissions and limitations under |
||
16 | * the License. |
||
17 | * |
||
18 | * @copyright 2015-2017 Appertly |
||
19 | * @license Apache-2.0 |
||
20 | */ |
||
21 | namespace Minotaur\Db; |
||
22 | |||
23 | use MongoDB\Driver\ReadPreference; |
||
24 | use MongoDB\BSON\ObjectID; |
||
25 | use MongoDB\GridFS\Bucket; |
||
26 | use Psr\Http\Message\StreamInterface; |
||
27 | use Psr\Http\Message\UploadedFileInterface; |
||
28 | |||
29 | /** |
||
30 | * File upload service backed by GridFS. |
||
31 | * |
||
32 | * Requires the `mongodb/mongodb` composer package to be installed. |
||
33 | */ |
||
34 | class MongoFileService implements \Minotaur\Io\FileService |
||
35 | { |
||
36 | use MongoHelper; |
||
37 | |||
38 | /** |
||
39 | * @var \MongoDB\GridFS\Bucket |
||
40 | */ |
||
41 | private $bucket; |
||
42 | |||
43 | /** |
||
44 | * Creates a new MongoFileService |
||
45 | * |
||
46 | * @param $bucket - The GridFS Bucket |
||
47 | */ |
||
48 | 2 | public function __construct(Bucket $bucket) |
|
49 | { |
||
50 | 2 | $this->bucket = $bucket; |
|
51 | 2 | } |
|
52 | |||
53 | /** |
||
54 | * Stores an uploaded file. |
||
55 | * |
||
56 | * You should specify `contentType` in the `metadata` Map. |
||
57 | * |
||
58 | * @param \Psr\Http\Message\UploadedFileInterface $file The uploaded file |
||
59 | * @param array<string,mixed> $metadata Any additional fields to persist. At the very least, try to supply `contentType`. |
||
60 | * @return ObjectID The document ID of the stored file |
||
61 | * @throws \Caridea\Dao\Exception\Unreachable If the connection fails |
||
62 | * @throws \Caridea\Dao\Exception\Violating If a constraint is violated |
||
63 | * @throws \Caridea\Dao\Exception\Generic If any other database problem occurs |
||
64 | */ |
||
65 | 1 | public function store(UploadedFileInterface $file, array $metadata): ObjectID |
|
66 | { |
||
67 | $meta = [ |
||
68 | 1 | "contentType" => $metadata['contentType'] ?? $file->getClientMediaType(), |
|
69 | 1 | 'metadata' => $metadata |
|
70 | ]; |
||
71 | 1 | return $this->bucket->uploadFromStream( |
|
72 | 1 | $file->getClientFilename(), |
|
73 | 1 | $file->getStream()->detach(), |
|
74 | 1 | $meta |
|
75 | ); |
||
76 | } |
||
77 | |||
78 | /** |
||
79 | * Gets the file as a PSR-7 Stream. |
||
80 | * |
||
81 | * @param $id - The document identifier, either a string or `ObjectID` |
||
82 | * @return \Psr\Http\Message\StreamInterface The readable stream |
||
83 | * @throws \Caridea\Dao\Exception\Unreachable If the connection fails |
||
84 | * @throws \Caridea\Dao\Exception\Unretrievable If the document doesn't exist |
||
85 | * @throws \Caridea\Dao\Exception\Generic If any other database problem occurs |
||
86 | */ |
||
87 | public function messageStream($id): StreamInterface |
||
88 | { |
||
89 | $file = $this->read($id); |
||
90 | $collectionWrapper = $this->getCollectionWrapper($this->bucket); |
||
91 | return new MongoDownloadStream( |
||
92 | new \MongoDB\GridFS\ReadableStream($collectionWrapper, $file) |
||
0 ignored issues
–
show
|
|||
93 | ); |
||
94 | } |
||
95 | |||
96 | /** |
||
97 | * Gets a readable stream resource for the given ID. |
||
98 | * |
||
99 | * @param $id - The document identifier, either a string or `ObjectID` |
||
100 | * @return resource The readable stream |
||
101 | * @throws \Caridea\Dao\Exception\Unreachable If the connection fails |
||
102 | * @throws \Caridea\Dao\Exception\Unretrievable If the document doesn't exist |
||
103 | * @throws \Caridea\Dao\Exception\Generic If any other database problem occurs |
||
104 | */ |
||
105 | public function resource($id) |
||
106 | { |
||
107 | return $this->bucket->openDownloadStream($id instanceof ObjectID ? $id : new ObjectID((string) $id)); |
||
0 ignored issues
–
show
The class
MongoDB\BSON\ObjectID does not exist. Did you forget a USE statement, or did you not list all dependencies?
This error could be the result of: 1. Missing dependenciesPHP Analyzer uses your Are you sure this class is defined by one of your dependencies, or did you maybe
not list a dependency in either the 2. Missing use statementPHP does not complain about undefined classes in if ($x instanceof DoesNotExist) {
// Do something.
}
If you have not tested against this specific condition, such errors might go unnoticed. ![]() |
|||
108 | } |
||
109 | |||
110 | /** |
||
111 | * Efficiently writes the contents of a file to a Stream. |
||
112 | * |
||
113 | * @param \stdClass $file The file |
||
114 | * @param \Psr\Http\Message\StreamInterface $stream The stream |
||
115 | * @throws \Caridea\Dao\Exception\Unreachable If the connection fails |
||
116 | * @throws \Caridea\Dao\Exception\Violating If a constraint is violated |
||
117 | * @throws \Caridea\Dao\Exception\Generic If any other database problem occurs |
||
118 | */ |
||
119 | public function stream($file, StreamInterface $stream): void |
||
120 | { |
||
121 | if (!is_object($file)) { |
||
122 | throw new \InvalidArgumentException("Expected object, got: " . gettype($file)); |
||
123 | } |
||
124 | $this->bucket->downloadToStream( |
||
125 | $file->_id, |
||
126 | \Labrys\Io\StreamWrapper::getResource($stream) |
||
127 | ); |
||
128 | } |
||
129 | |||
130 | /** |
||
131 | * Gets a stored file. |
||
132 | * |
||
133 | * @param mixed $id The document identifier, either a string or `ObjectID` |
||
134 | * @return \stdClass|null The stored file, or `null` |
||
135 | * @throws \Caridea\Dao\Exception\Unreachable If the connection fails |
||
136 | * @throws \Caridea\Dao\Exception\Unretrievable If the result cannot be retrieved |
||
137 | * @throws \Caridea\Dao\Exception\Generic If any other database problem occurs |
||
138 | */ |
||
139 | 1 | public function read($id): ?\stdClass |
|
140 | { |
||
141 | 1 | $mid = $this->toId($id); |
|
142 | 1 | return $this->doExecute(function (Bucket $bucket) use ($mid) { |
|
143 | 1 | return $this->getCollectionWrapper($bucket)->findFileById($mid); |
|
144 | 1 | }); |
|
145 | } |
||
146 | |||
147 | /** |
||
148 | * Deletes a stored file. |
||
149 | * |
||
150 | * @param mixed $id The document identifier, either a string or `ObjectID` |
||
151 | * @throws \Caridea\Dao\Exception\Unreachable If the connection fails |
||
152 | * @throws \Caridea\Dao\Exception\Unretrievable If the document doesn't exist |
||
153 | * @throws \Caridea\Dao\Exception\Generic If any other database problem occurs |
||
154 | */ |
||
155 | public function delete($id): void |
||
156 | { |
||
157 | $mid = $this->toId($id); |
||
158 | $this->doExecute(function (Bucket $bucket) use ($mid) { |
||
159 | $bucket->delete($mid); |
||
160 | }); |
||
161 | } |
||
162 | |||
163 | /** |
||
164 | * Finds several files by some arbitrary criteria. |
||
165 | * |
||
166 | * @param array<string,mixed> $criteria Field to value pairs |
||
167 | * @return Traversable<\stdClass> The objects found |
||
0 ignored issues
–
show
The doc-type
Traversable<\stdClass> could not be parsed: Expected "|" or "end of type", but got "<" at position 11. (view supported doc-types)
This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types. ![]() |
|||
168 | * @throws \Caridea\Dao\Exception\Unreachable If the connection fails |
||
169 | * @throws \Caridea\Dao\Exception\Unretrievable If the result cannot be retrieved |
||
170 | * @throws \Caridea\Dao\Exception\Generic If any other database problem occurs |
||
171 | */ |
||
172 | public function readAll(array $criteria): \Traversable |
||
173 | { |
||
174 | $readPreference = new ReadPreference(ReadPreference::RP_PRIMARY); |
||
175 | return $this->doExecute(function (Bucket $bucket) use ($criteria, $readPreference) { |
||
176 | return $bucket->find( |
||
177 | $criteria, |
||
178 | ['sort' => ['filename' => 1], 'readPreference' => $readPreference] |
||
179 | ); |
||
180 | }); |
||
181 | } |
||
182 | |||
183 | /** |
||
184 | * Executes something in the context of the collection. |
||
185 | * |
||
186 | * Exceptions are caught and translated. |
||
187 | * |
||
188 | * @param callable $cb The closure to execute, takes the Bucket. |
||
189 | * @return - Whatever the function returns, this method also returns |
||
0 ignored issues
–
show
The doc-type
- could not be parsed: Unknown type name "-" at position 0. (view supported doc-types)
This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types. ![]() |
|||
190 | * @throws \Caridea\Dao\Exception If a database problem occurs |
||
191 | */ |
||
192 | 1 | protected function doExecute(callable $cb) |
|
193 | { |
||
194 | try { |
||
195 | 1 | return $cb($this->bucket); |
|
196 | } catch (\Exception $e) { |
||
197 | throw \Caridea\Dao\Exception\Translator\MongoDb::translate($e); |
||
198 | } |
||
199 | } |
||
200 | |||
201 | /** |
||
202 | * @return \MongoDB\GridFS\CollectionWrapper |
||
203 | */ |
||
204 | 1 | private function getCollectionWrapper(Bucket $b) |
|
205 | { |
||
206 | 1 | $p = new \ReflectionProperty(Bucket::class, 'collectionWrapper'); |
|
207 | 1 | $p->setAccessible(true); |
|
208 | 1 | return $p->getValue($b); |
|
209 | } |
||
210 | } |
||
211 |
Unless you are absolutely sure that the expression can never be null because of other conditions, we strongly recommend to add an additional type check to your code: