This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Bmitch\Envsync; |
||
4 | |||
5 | use Bmitch\Envsync\Collectors\FileCollector; |
||
6 | use Bmitch\Envsync\Finders\EnvironmentFinder; |
||
7 | use Bmitch\Envsync\Builders\TableBuilder; |
||
8 | |||
9 | class SyncerCommand |
||
10 | { |
||
11 | |||
12 | /** |
||
13 | * Will be returned when program exits. |
||
14 | * @var integer |
||
15 | */ |
||
16 | protected $exitCode = 0; |
||
17 | |||
18 | /** |
||
19 | * The mode the program is running in. |
||
20 | * @var string |
||
21 | */ |
||
22 | protected $mode; |
||
23 | |||
24 | /** |
||
25 | * Instance of the FileCollector class. |
||
26 | * @var FileCollector |
||
27 | */ |
||
28 | protected $fileCollector; |
||
29 | |||
30 | /** |
||
31 | * Instance of the EnvironmentFilder class. |
||
32 | * @var EnvironmentFinder |
||
33 | */ |
||
34 | protected $envFinder; |
||
35 | |||
36 | /** |
||
37 | * Instance of the TableBuilder class. |
||
38 | * @var TableBuilder |
||
39 | */ |
||
40 | protected $tableBuilder; |
||
41 | |||
42 | /** |
||
43 | * The source colde folder that will be inspected. |
||
44 | * @var string |
||
45 | */ |
||
46 | protected $folder; |
||
47 | |||
48 | /** |
||
49 | * Holds an error message if command runs into an error. |
||
50 | * @var string |
||
51 | */ |
||
52 | protected $error; |
||
53 | |||
54 | /** |
||
55 | * Creates a new instance of the SyncerCommand. |
||
56 | * @param FileCollector $fileCollector File Collector. |
||
57 | * @param EnvironmentFinder $envFinder Environment Variable Filder. |
||
58 | * @param TableBuilder $tableBuilder Table Builder. |
||
59 | */ |
||
60 | public function __construct(FileCollector $fileCollector, EnvironmentFinder $envFinder, TableBuilder $tableBuilder) |
||
61 | { |
||
62 | $this->fileCollector = $fileCollector; |
||
63 | $this->envFinder = $envFinder; |
||
64 | $this->tableBuilder = $tableBuilder; |
||
65 | } |
||
66 | |||
67 | /** |
||
68 | * Runs the command. |
||
69 | * @param array $arguments Command line arguments. |
||
70 | * @return void |
||
71 | */ |
||
72 | public function handle(array $arguments) |
||
73 | { |
||
74 | if (! $this->argumentsValid($arguments)) { |
||
75 | echo $this->error; |
||
76 | return; |
||
77 | } |
||
78 | |||
79 | print "\n\nEnvSyncer Report - https://github.com/bmitch/envsync\n"; |
||
80 | |||
81 | $envData = $this->getEnvironmentVariables(); |
||
82 | |||
83 | $results = $this->getResults($envData); |
||
84 | |||
85 | if ($this->mode == 'ci') { |
||
86 | $this->checkForCiBuild($results); |
||
87 | } |
||
88 | |||
89 | if ($this->mode == 'deploy') { |
||
90 | $this->checkForDeploy($results); |
||
91 | } |
||
92 | |||
93 | $this->tableBuilder->outputTable($results, $this->mode); |
||
94 | |||
95 | |||
96 | exit($this->exitCode); |
||
97 | } |
||
98 | |||
99 | /** |
||
100 | * Gets a list of the environment variables defined in the |
||
101 | * source code, .env and .env.example file. |
||
102 | * @return array |
||
103 | */ |
||
104 | protected function getEnvironmentVariables() |
||
105 | { |
||
106 | $files = $this->fileCollector |
||
107 | ->get('.php') |
||
108 | ->from($this->folder); |
||
109 | |||
110 | $env = []; |
||
111 | $env['source'] = $this->envFinder->getFromFiles($files); |
||
112 | $env['example'] = $this->envFinder->getFromFile('.env.example'); |
||
113 | $env['env'] = $this->envFinder->getFromFile('.env'); |
||
114 | $env['all'] = $this->mergeEnvs($env); |
||
115 | |||
116 | return $env; |
||
117 | } |
||
118 | |||
119 | /** |
||
120 | * Takes the list of environment variables defined and creates |
||
121 | * a results array showing each variable and where it is or is not |
||
122 | * defined. |
||
123 | * @param array $envData Environment Variable Data. |
||
124 | * @return array |
||
125 | */ |
||
126 | protected function getResults(array $envData) |
||
127 | { |
||
128 | $results = []; |
||
129 | |||
130 | foreach ($envData['all'] as $variable) { |
||
131 | $results[] = [ |
||
132 | 'variable' => $variable, |
||
133 | 'insource' => in_array($variable, $envData['source']) ? 'Yes' : 'No', |
||
134 | 'inenvexample' => in_array($variable, $envData['example']) ? 'Yes' : 'No', |
||
135 | 'inenv' => in_array($variable, $envData['env']) ? 'Yes' : 'No', |
||
136 | ]; |
||
137 | } |
||
138 | |||
139 | return $results; |
||
140 | } |
||
141 | |||
142 | /** |
||
143 | * Looks through all the current env variables from all |
||
144 | * sources and makes a master list of all of them. |
||
145 | * @param array $currentEnvs Current Env Variables. |
||
146 | * @return array |
||
147 | */ |
||
148 | protected function mergeEnvs(array $currentEnvs) |
||
149 | { |
||
150 | $allEnvs = []; |
||
0 ignored issues
–
show
|
|||
151 | $allEnvs = array_unique(array_merge($currentEnvs['env'], $currentEnvs['example'])); |
||
152 | $allEnvs = array_unique(array_merge($allEnvs, $currentEnvs['source'])); |
||
153 | |||
154 | return $allEnvs; |
||
155 | } |
||
156 | |||
157 | /** |
||
158 | * If a variable is defined in the source code but |
||
159 | * not defined in the .env.example file we write |
||
160 | * to the message and set response to 1 |
||
161 | * @param array $results Environment Variable Results. |
||
162 | * @return void |
||
163 | */ |
||
164 | View Code Duplication | protected function checkForCiBuild(array $results) |
|
0 ignored issues
–
show
This method seems to be duplicated in your project.
Duplicated code is one of the most pungent code smells. If you need to duplicate the same code in three or more different places, we strongly encourage you to look into extracting the code into a single class or operation. You can also find more detailed suggestions in the “Code” section of your repository. ![]() |
|||
165 | { |
||
166 | foreach ($results as $row) { |
||
167 | if ($row['insource'] == 'Yes' && $row['inenvexample'] == 'No') { |
||
168 | $this->exitCode = 1; |
||
169 | } |
||
170 | } |
||
171 | } |
||
172 | |||
173 | /** |
||
174 | * If a variable is defined in the source code but |
||
175 | * not defined in the .env file we write |
||
176 | * to the message and set response to 1 |
||
177 | * @param array $results Environment Variable Results. |
||
178 | * @return void |
||
179 | */ |
||
180 | View Code Duplication | protected function checkForDeploy(array $results) |
|
0 ignored issues
–
show
This method seems to be duplicated in your project.
Duplicated code is one of the most pungent code smells. If you need to duplicate the same code in three or more different places, we strongly encourage you to look into extracting the code into a single class or operation. You can also find more detailed suggestions in the “Code” section of your repository. ![]() |
|||
181 | { |
||
182 | foreach ($results as $row) { |
||
183 | if ($row['insource'] == 'Yes' && $row['inenv'] == 'No') { |
||
184 | $this->exitCode = 1; |
||
185 | } |
||
186 | } |
||
187 | } |
||
188 | |||
189 | /** |
||
190 | * Collects the command line arguments. |
||
191 | * @param array $arguments Command line arguments. |
||
192 | * @return boolean |
||
193 | */ |
||
194 | protected function argumentsValid(array $arguments) |
||
195 | { |
||
196 | // Default value |
||
197 | $this->folder = '.'; |
||
198 | |||
199 | if (isset($arguments[1])) { |
||
200 | $this->folder = $arguments[1]; |
||
201 | if (! file_exists($this->folder)) { |
||
202 | $this->error = "Error: Folder {$this->folder} does not exist."; |
||
203 | return false; |
||
204 | } |
||
205 | } |
||
206 | |||
207 | if (isset($arguments[2])) { |
||
208 | $this->mode = strtolower($arguments[2]); |
||
209 | if (!in_array($this->mode, ['ci', 'deploy', 'default'])) { |
||
210 | $this->error = "Error: Invalid argument {$this->mode}"; |
||
211 | return false; |
||
212 | } |
||
213 | return true; |
||
214 | } |
||
215 | |||
216 | $this->mode = 'default'; |
||
217 | |||
218 | return true; |
||
219 | } |
||
220 | } |
||
221 |
This check looks for variable assignements that are either overwritten by other assignments or where the variable is not used subsequently.
Both the
$myVar
assignment in line 1 and the$higher
assignment in line 2 are dead. The first because$myVar
is never used and the second because$higher
is always overwritten for every possible time line.