This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php declare(strict_types=1); |
||
2 | /** |
||
3 | * Query |
||
4 | * |
||
5 | * SQL Query Builder / Database Abstraction Layer |
||
6 | * |
||
7 | * PHP version 7.1 |
||
8 | * |
||
9 | * @package Query |
||
10 | * @author Timothy J. Warren <[email protected]> |
||
11 | * @copyright 2012 - 2018 Timothy J. Warren |
||
12 | * @license http://www.opensource.org/licenses/mit-license.html MIT License |
||
13 | * @link https://git.timshomepage.net/aviat4ion/Query |
||
14 | */ |
||
15 | namespace Query\Drivers; |
||
16 | |||
17 | use function dbFilter; |
||
18 | |||
19 | use InvalidArgumentException; |
||
20 | use PDO; |
||
21 | use PDOStatement; |
||
22 | |||
23 | /** |
||
24 | * Base Database class |
||
25 | * |
||
26 | * Extends PDO to simplify cross-database issues |
||
27 | */ |
||
28 | abstract class AbstractDriver |
||
29 | extends PDO |
||
30 | implements DriverInterface { |
||
31 | |||
32 | /** |
||
33 | * Reference to the last executed query |
||
34 | * @var PDOStatement |
||
35 | */ |
||
36 | protected $statement; |
||
37 | |||
38 | /** |
||
39 | * Start character to escape identifiers |
||
40 | * @var string |
||
41 | */ |
||
42 | protected $escapeCharOpen = '"'; |
||
43 | |||
44 | /** |
||
45 | * End character to escape identifiers |
||
46 | * @var string |
||
47 | */ |
||
48 | protected $escapeCharClose = '"'; |
||
49 | |||
50 | /** |
||
51 | * Reference to sql class |
||
52 | * @var SQLInterface |
||
53 | */ |
||
54 | protected $sql; |
||
55 | |||
56 | /** |
||
57 | * Reference to util class |
||
58 | * @var AbstractUtil |
||
59 | */ |
||
60 | protected $util; |
||
61 | |||
62 | /** |
||
63 | * Last query executed |
||
64 | * @var string |
||
65 | */ |
||
66 | protected $lastQuery = ''; |
||
67 | |||
68 | /** |
||
69 | * Prefix to apply to table names |
||
70 | * @var string |
||
71 | */ |
||
72 | protected $tablePrefix = ''; |
||
73 | |||
74 | /** |
||
75 | * Whether the driver supports 'TRUNCATE' |
||
76 | * @var boolean |
||
77 | */ |
||
78 | protected $hasTruncate = TRUE; |
||
79 | |||
80 | /** |
||
81 | * PDO constructor wrapper |
||
82 | * |
||
83 | * @param string $dsn |
||
84 | * @param string $username |
||
85 | * @param string $password |
||
86 | * @param array $driverOptions |
||
87 | */ |
||
88 | public function __construct(string $dsn, string $username=NULL, string $password=NULL, array $driverOptions=[]) |
||
89 | { |
||
90 | // Set PDO to display errors as exceptions, and apply driver options |
||
91 | $driverOptions[PDO::ATTR_ERRMODE] = PDO::ERRMODE_EXCEPTION; |
||
92 | parent::__construct($dsn, $username, $password, $driverOptions); |
||
93 | |||
94 | $this->_loadSubClasses(); |
||
95 | } |
||
96 | |||
97 | /** |
||
98 | * Loads the subclasses for the driver |
||
99 | * |
||
100 | * @return void |
||
101 | */ |
||
102 | protected function _loadSubClasses(): void |
||
103 | { |
||
104 | // Load the sql and util class for the driver |
||
105 | $thisClass = \get_class($this); |
||
106 | $nsArray = explode("\\", $thisClass); |
||
107 | array_pop($nsArray); |
||
108 | $driver = array_pop($nsArray); |
||
109 | $sqlClass = __NAMESPACE__ . "\\{$driver}\\SQL"; |
||
110 | $utilClass = __NAMESPACE__ . "\\{$driver}\\Util"; |
||
111 | |||
112 | $this->sql = new $sqlClass(); |
||
113 | $this->util = new $utilClass($this); |
||
114 | } |
||
115 | |||
116 | /** |
||
117 | * Allow invoke to work on table object |
||
118 | * |
||
119 | * @codeCoverageIgnore |
||
120 | * @param string $name |
||
121 | * @param array $args |
||
122 | * @return mixed |
||
123 | */ |
||
124 | public function __call(string $name, array $args = []) |
||
125 | { |
||
126 | if ( |
||
127 | isset($this->$name) |
||
128 | && \is_object($this->$name) |
||
129 | && method_exists($this->$name, '__invoke') |
||
130 | ) |
||
131 | { |
||
132 | return \call_user_func_array([$this->$name, '__invoke'], $args); |
||
133 | } |
||
134 | } |
||
135 | |||
136 | // -------------------------------------------------------------------------- |
||
137 | // ! Accessors / Mutators |
||
138 | // -------------------------------------------------------------------------- |
||
139 | |||
140 | /** |
||
141 | * Get the last sql query executed |
||
142 | * |
||
143 | * @return string |
||
144 | */ |
||
145 | public function getLastQuery(): string |
||
146 | { |
||
147 | return $this->lastQuery; |
||
148 | } |
||
149 | |||
150 | /** |
||
151 | * Set the last query sql |
||
152 | * |
||
153 | * @param string $queryString |
||
154 | * @return void |
||
155 | */ |
||
156 | public function setLastQuery(string $queryString): void |
||
157 | { |
||
158 | $this->lastQuery = $queryString; |
||
159 | } |
||
160 | |||
161 | /** |
||
162 | * Get the SQL class for the current driver |
||
163 | * |
||
164 | * @return SQLInterface |
||
165 | */ |
||
166 | public function getSql(): SQLInterface |
||
167 | { |
||
168 | return $this->sql; |
||
169 | } |
||
170 | |||
171 | /** |
||
172 | * Get the Util class for the current driver |
||
173 | * |
||
174 | * @return AbstractUtil |
||
175 | */ |
||
176 | public function getUtil(): AbstractUtil |
||
177 | { |
||
178 | return $this->util; |
||
179 | } |
||
180 | |||
181 | /** |
||
182 | * Set the common table name prefix |
||
183 | * |
||
184 | * @param string $prefix |
||
185 | * @return void |
||
186 | */ |
||
187 | public function setTablePrefix(string $prefix): void |
||
188 | { |
||
189 | $this->tablePrefix = $prefix; |
||
190 | } |
||
191 | |||
192 | // -------------------------------------------------------------------------- |
||
193 | // ! Concrete functions that can be overridden in child classes |
||
194 | // -------------------------------------------------------------------------- |
||
195 | |||
196 | /** |
||
197 | * Simplifies prepared statements for database queries |
||
198 | * |
||
199 | * @param string $sql |
||
200 | * @param array $data |
||
201 | * @return PDOStatement | FALSE |
||
202 | * @throws InvalidArgumentException |
||
203 | */ |
||
204 | public function prepareQuery(string $sql, array $data): PDOStatement |
||
205 | { |
||
206 | // Prepare the sql, save the statement for easy access later |
||
207 | $this->statement = $this->prepare($sql); |
||
208 | |||
209 | // Bind the parameters |
||
210 | foreach($data as $k => $value) |
||
211 | { |
||
212 | // Parameters are 1-based, the data is 0-based |
||
213 | // So, if the key is numeric, add 1 |
||
214 | if(is_numeric($k)) |
||
215 | { |
||
216 | $k++; |
||
217 | } |
||
218 | $this->statement->bindValue($k, $value); |
||
219 | } |
||
220 | |||
221 | return $this->statement; |
||
222 | } |
||
223 | |||
224 | /** |
||
225 | * Create and execute a prepared statement with the provided parameters |
||
226 | * |
||
227 | * @param string $sql |
||
228 | * @param array $params |
||
229 | * @throws InvalidArgumentException |
||
230 | * @return PDOStatement |
||
231 | */ |
||
232 | public function prepareExecute(string $sql, array $params): PDOStatement |
||
233 | { |
||
234 | $this->statement = $this->prepareQuery($sql, $params); |
||
235 | $this->statement->execute(); |
||
236 | |||
237 | return $this->statement; |
||
238 | } |
||
239 | |||
240 | /** |
||
241 | * Returns number of rows affected by an INSERT, UPDATE, DELETE type query |
||
242 | * |
||
243 | * @return int |
||
244 | */ |
||
245 | public function affectedRows(): int |
||
246 | { |
||
247 | // Return number of rows affected |
||
248 | return $this->statement->rowCount(); |
||
249 | } |
||
250 | |||
251 | /** |
||
252 | * Prefixes a table if it is not already prefixed |
||
253 | * @param string $table |
||
254 | * @return string |
||
255 | */ |
||
256 | public function prefixTable(string $table): string |
||
257 | { |
||
258 | // Add the prefix to the table name |
||
259 | // before quoting it |
||
260 | if ( ! empty($this->tablePrefix)) |
||
261 | { |
||
262 | // Split identifier by period, will split into: |
||
263 | // database.schema.table OR |
||
264 | // schema.table OR |
||
265 | // database.table OR |
||
266 | // table |
||
267 | $identifiers = explode('.', $table); |
||
268 | $segments = count($identifiers); |
||
269 | |||
270 | // Quote the last item, and add the database prefix |
||
271 | $identifiers[$segments - 1] = $this->_prefix(end($identifiers)); |
||
272 | |||
273 | // Rejoin |
||
274 | $table = implode('.', $identifiers); |
||
275 | } |
||
276 | |||
277 | return $table; |
||
278 | } |
||
279 | |||
280 | /** |
||
281 | * Quote database table name, and set prefix |
||
282 | * |
||
283 | * @param string $table |
||
284 | * @return string |
||
285 | */ |
||
286 | public function quoteTable($table): string |
||
287 | { |
||
288 | $table = $this->prefixTable($table); |
||
289 | |||
290 | // Finally, quote the table |
||
291 | return $this->quoteIdent($table); |
||
292 | } |
||
293 | |||
294 | /** |
||
295 | * Surrounds the string with the databases identifier escape characters |
||
296 | * |
||
297 | * @param mixed $identifier |
||
298 | * @return string|array |
||
299 | */ |
||
300 | public function quoteIdent($identifier) |
||
301 | { |
||
302 | if (is_array($identifier)) |
||
303 | { |
||
304 | return array_map([$this, __METHOD__], $identifier); |
||
305 | } |
||
306 | |||
307 | // Handle comma-separated identifiers |
||
308 | if (strpos($identifier, ',') !== FALSE) |
||
309 | { |
||
310 | $parts = array_map('mb_trim', explode(',', $identifier)); |
||
311 | $parts = array_map([$this, __METHOD__], $parts); |
||
312 | $identifier = implode(',', $parts); |
||
313 | } |
||
314 | |||
315 | // Split each identifier by the period |
||
316 | $hiers = explode('.', $identifier); |
||
317 | $hiers = array_map('mb_trim', $hiers); |
||
318 | |||
319 | // Re-compile the string |
||
320 | $raw = implode('.', array_map([$this, '_quote'], $hiers)); |
||
321 | |||
322 | // Fix functions |
||
323 | $funcs = []; |
||
324 | preg_match_all("#{$this->escapeCharOpen}([a-zA-Z0-9_]+(\((.*?)\))){$this->escapeCharClose}#iu", $raw, $funcs, PREG_SET_ORDER); |
||
325 | foreach($funcs as $f) |
||
0 ignored issues
–
show
|
|||
326 | { |
||
327 | // Unquote the function |
||
328 | $raw = str_replace($f[0], $f[1], $raw); |
||
329 | |||
330 | // Quote the inside identifiers |
||
331 | $raw = str_replace($f[3], $this->quoteIdent($f[3]), $raw); |
||
332 | } |
||
333 | |||
334 | return $raw; |
||
335 | } |
||
336 | |||
337 | /** |
||
338 | * Return schemas for databases that list them |
||
339 | * |
||
340 | * @return array |
||
341 | */ |
||
342 | public function getSchemas(): ?array |
||
343 | { |
||
344 | return NULL; |
||
345 | } |
||
346 | |||
347 | /** |
||
348 | * Return list of tables for the current database |
||
349 | * |
||
350 | * @return array |
||
351 | */ |
||
352 | public function getTables(): ?array |
||
353 | { |
||
354 | $tables = $this->driverQuery('tableList'); |
||
355 | natsort($tables); |
||
356 | return $tables; |
||
357 | } |
||
358 | |||
359 | /** |
||
360 | * Return list of dbs for the current connection, if possible |
||
361 | * |
||
362 | * @return array |
||
363 | */ |
||
364 | public function getDbs(): array |
||
365 | { |
||
366 | return $this->driverQuery('dbList'); |
||
367 | } |
||
368 | |||
369 | /** |
||
370 | * Return list of views for the current database |
||
371 | * |
||
372 | * @return array |
||
373 | */ |
||
374 | public function getViews(): ?array |
||
375 | { |
||
376 | $views = $this->driverQuery('viewList'); |
||
377 | sort($views); |
||
378 | return $views; |
||
379 | } |
||
380 | |||
381 | /** |
||
382 | * Return list of sequences for the current database, if they exist |
||
383 | * |
||
384 | * @return array |
||
385 | */ |
||
386 | public function getSequences(): ?array |
||
387 | { |
||
388 | return $this->driverQuery('sequenceList'); |
||
389 | } |
||
390 | |||
391 | /** |
||
392 | * Return list of functions for the current database |
||
393 | * |
||
394 | * @return array |
||
395 | */ |
||
396 | public function getFunctions(): ?array |
||
397 | { |
||
398 | return $this->driverQuery('functionList', FALSE); |
||
399 | } |
||
400 | |||
401 | /** |
||
402 | * Return list of stored procedures for the current database |
||
403 | * |
||
404 | * @return array |
||
405 | */ |
||
406 | public function getProcedures(): ?array |
||
407 | { |
||
408 | return $this->driverQuery('procedureList', FALSE); |
||
409 | } |
||
410 | |||
411 | /** |
||
412 | * Return list of triggers for the current database |
||
413 | * |
||
414 | * @return array |
||
415 | */ |
||
416 | public function getTriggers(): ?array |
||
417 | { |
||
418 | return $this->driverQuery('triggerList', FALSE); |
||
419 | } |
||
420 | |||
421 | /** |
||
422 | * Retrieves an array of non-user-created tables for |
||
423 | * the connection/database |
||
424 | * |
||
425 | * @return array |
||
426 | */ |
||
427 | public function getSystemTables(): ?array |
||
428 | { |
||
429 | return $this->driverQuery('systemTableList'); |
||
430 | } |
||
431 | |||
432 | /** |
||
433 | * Retrieve column information for the current database table |
||
434 | * |
||
435 | * @param string $table |
||
436 | * @return array |
||
437 | */ |
||
438 | public function getColumns($table): ?array |
||
439 | { |
||
440 | return $this->driverQuery($this->getSql()->columnList($this->prefixTable($table)), FALSE); |
||
441 | } |
||
442 | |||
443 | /** |
||
444 | * Retrieve foreign keys for the table |
||
445 | * |
||
446 | * @param string $table |
||
447 | * @return array |
||
448 | */ |
||
449 | public function getFks($table): ?array |
||
450 | { |
||
451 | return $this->driverQuery($this->getSql()->fkList($table), FALSE); |
||
452 | } |
||
453 | |||
454 | /** |
||
455 | * Retrieve indexes for the table |
||
456 | * |
||
457 | * @param string $table |
||
458 | * @return array |
||
459 | */ |
||
460 | public function getIndexes($table): ?array |
||
461 | { |
||
462 | return $this->driverQuery($this->getSql()->indexList($this->prefixTable($table)), FALSE); |
||
463 | } |
||
464 | |||
465 | /** |
||
466 | * Retrieve list of data types for the database |
||
467 | * |
||
468 | * @return array |
||
469 | */ |
||
470 | public function getTypes(): ?array |
||
471 | { |
||
472 | return $this->driverQuery('typeList', FALSE); |
||
473 | } |
||
474 | |||
475 | /** |
||
476 | * Method to simplify retrieving db results for meta-data queries |
||
477 | * |
||
478 | * @param string|array|null $query |
||
479 | * @param bool $filteredIndex |
||
480 | * @return array|null |
||
481 | */ |
||
482 | public function driverQuery($query, $filteredIndex=TRUE): ?array |
||
483 | { |
||
484 | // Call the appropriate method, if it exists |
||
485 | if (is_string($query) && method_exists($this->sql, $query)) |
||
486 | { |
||
487 | $query = $this->getSql()->$query(); |
||
488 | } |
||
489 | |||
490 | // Return if the values are returned instead of a query, |
||
491 | // or if the query doesn't apply to the driver |
||
492 | if ( ! is_string($query)) |
||
493 | { |
||
494 | return $query; |
||
495 | } |
||
496 | |||
497 | // Run the query! |
||
498 | $res = $this->query($query); |
||
499 | |||
500 | $flag = $filteredIndex ? PDO::FETCH_NUM : PDO::FETCH_ASSOC; |
||
501 | $all = $res->fetchAll($flag); |
||
502 | |||
503 | return $filteredIndex ? dbFilter($all, 0) : $all; |
||
504 | } |
||
505 | |||
506 | /** |
||
507 | * Return the number of rows returned for a SELECT query |
||
508 | * |
||
509 | * @see http://us3.php.net/manual/en/pdostatement.rowcount.php#87110 |
||
510 | * @return int|null |
||
511 | */ |
||
512 | public function numRows(): ?int |
||
513 | { |
||
514 | $regex = '/^SELECT\s+(?:ALL\s+|DISTINCT\s+)?(?:.*?)\s+FROM\s+(.*)$/i'; |
||
515 | $output = []; |
||
516 | |||
517 | if (preg_match($regex, $this->lastQuery, $output) > 0) |
||
518 | { |
||
519 | $stmt = $this->query("SELECT COUNT(*) FROM {$output[1]}"); |
||
520 | return (int) $stmt->fetchColumn(); |
||
521 | } |
||
522 | |||
523 | return NULL; |
||
524 | } |
||
525 | |||
526 | /** |
||
527 | * Create sql for batch insert |
||
528 | * |
||
529 | * @param string $table |
||
530 | * @param mixed $data |
||
531 | * @return array<string|array|null> |
||
532 | */ |
||
533 | public function insertBatch(string $table, array $data=[]): array |
||
534 | { |
||
535 | $data = (array) $data; |
||
536 | $firstRow = (array) current($data); |
||
537 | |||
538 | // Values for insertion |
||
539 | $vals = []; |
||
540 | foreach($data as $group) |
||
541 | { |
||
542 | $vals = array_merge($vals, array_values($group)); |
||
543 | } |
||
544 | |||
545 | $table = $this->quoteTable($table); |
||
546 | $fields = array_keys($firstRow); |
||
547 | |||
548 | $sql = "INSERT INTO {$table} (" |
||
549 | . implode(',', $this->quoteIdent($fields)) |
||
550 | . ') VALUES '; |
||
551 | |||
552 | // Create the placeholder groups |
||
553 | $params = array_fill(0, count($fields), '?'); |
||
554 | $paramString = '(' . implode(',', $params) . ')'; |
||
555 | $paramList = array_fill(0, count($data), $paramString); |
||
556 | |||
557 | // Append the placeholder groups to the query |
||
558 | $sql .= implode(',', $paramList); |
||
559 | |||
560 | return [$sql, $vals]; |
||
561 | } |
||
562 | |||
563 | /** |
||
564 | * Creates a batch update, and executes it. |
||
565 | * Returns the number of affected rows |
||
566 | * |
||
567 | * @param string $table The table to update |
||
568 | * @param array $data an array of update values |
||
569 | * @param string $where The where key |
||
570 | * @return array<string,array,int> |
||
0 ignored issues
–
show
The doc-type
array<string,array,int> could not be parsed: Expected ">" at position 5, but found ",". (view supported doc-types)
This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types. ![]() |
|||
571 | */ |
||
572 | public function updateBatch(string $table, array $data, string $where): array |
||
573 | { |
||
574 | $affectedRows = 0; |
||
575 | $insertData = []; |
||
576 | $fieldLines = []; |
||
577 | |||
578 | $sql = 'UPDATE ' . $this->quoteTable($table) . ' SET '; |
||
579 | |||
580 | // Get the keys of the current set of data, except the one used to |
||
581 | // set the update condition |
||
582 | $fields = array_unique( |
||
583 | array_reduce($data, static function ($previous, $current) use (&$affectedRows, $where) { |
||
584 | $affectedRows++; |
||
585 | $keys = array_diff(array_keys($current), [$where]); |
||
586 | |||
587 | if ($previous === NULL) |
||
588 | { |
||
589 | return $keys; |
||
590 | } |
||
591 | |||
592 | return array_merge($previous, $keys); |
||
593 | }) |
||
594 | ); |
||
595 | |||
596 | // Create the CASE blocks for each data set |
||
597 | foreach ($fields as $field) |
||
598 | { |
||
599 | $line = $this->quoteIdent($field) . " = CASE\n"; |
||
600 | |||
601 | $cases = []; |
||
602 | foreach ($data as $case) |
||
603 | { |
||
604 | if (array_key_exists($field, $case)) |
||
605 | { |
||
606 | $insertData[] = $case[$where]; |
||
607 | $insertData[] = $case[$field]; |
||
608 | $cases[] = 'WHEN ' . $this->quoteIdent($where) . ' =? ' |
||
609 | . 'THEN ? '; |
||
610 | } |
||
611 | } |
||
612 | |||
613 | $line .= implode("\n", $cases) . "\n"; |
||
614 | $line .= 'ELSE ' . $this->quoteIdent($field) . ' END'; |
||
615 | |||
616 | $fieldLines[] = $line; |
||
617 | } |
||
618 | |||
619 | $sql .= implode(",\n", $fieldLines) . "\n"; |
||
620 | |||
621 | $whereValues = array_column($data, $where); |
||
622 | foreach ($whereValues as $value) |
||
623 | { |
||
624 | $insertData[] = $value; |
||
625 | } |
||
626 | |||
627 | // Create the placeholders for the WHERE IN clause |
||
628 | $placeholders = array_fill(0, count($whereValues), '?'); |
||
629 | |||
630 | $sql .= 'WHERE ' . $this->quoteIdent($where) . ' IN '; |
||
631 | $sql .= '(' . implode(',', $placeholders) . ')'; |
||
632 | |||
633 | return [$sql, $insertData, $affectedRows]; |
||
634 | } |
||
635 | |||
636 | /** |
||
637 | * Empty the passed table |
||
638 | * |
||
639 | * @param string $table |
||
640 | * @return PDOStatement |
||
641 | */ |
||
642 | public function truncate(string $table): PDOStatement |
||
643 | { |
||
644 | $sql = $this->hasTruncate |
||
645 | ? 'TRUNCATE TABLE ' |
||
646 | : 'DELETE FROM '; |
||
647 | |||
648 | $sql .= $this->quoteTable($table); |
||
649 | |||
650 | $this->statement = $this->query($sql); |
||
651 | return $this->statement; |
||
652 | } |
||
653 | |||
654 | /** |
||
655 | * Helper method for quote_ident |
||
656 | * |
||
657 | * @param mixed $str |
||
658 | * @return mixed |
||
659 | */ |
||
660 | public function _quote($str) |
||
661 | { |
||
662 | // Check that the current value is a string, |
||
663 | // and is not already quoted before quoting |
||
664 | // that value, otherwise, return the original value |
||
665 | return ( |
||
666 | \is_string($str) |
||
667 | && strpos($str, $this->escapeCharOpen) !== 0 |
||
668 | && strrpos($str, $this->escapeCharClose) !== 0 |
||
669 | ) |
||
670 | ? "{$this->escapeCharOpen}{$str}{$this->escapeCharClose}" |
||
671 | : $str; |
||
672 | |||
673 | } |
||
674 | |||
675 | /** |
||
676 | * Sets the table prefix on the passed string |
||
677 | * |
||
678 | * @param string $str |
||
679 | * @return string |
||
680 | */ |
||
681 | protected function _prefix(string $str): string |
||
682 | { |
||
683 | // Don't prefix an already prefixed table |
||
684 | if (strpos($str, $this->tablePrefix) !== FALSE) |
||
685 | { |
||
686 | return $str; |
||
687 | } |
||
688 | |||
689 | return $this->tablePrefix . $str; |
||
690 | } |
||
691 | } |
||
692 |
There are different options of fixing this problem.
If you want to be on the safe side, you can add an additional type-check:
If you are sure that the expression is traversable, you might want to add a doc comment cast to improve IDE auto-completion and static analysis:
Mark the issue as a false-positive: Just hover the remove button, in the top-right corner of this issue for more options.