This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace BenTools\QueryString; |
||
4 | |||
5 | use BenTools\QueryString\Parser\NativeParser; |
||
6 | use BenTools\QueryString\Parser\QueryStringParserInterface; |
||
7 | use BenTools\QueryString\Renderer\NativeRenderer; |
||
8 | use BenTools\QueryString\Renderer\QueryStringRendererInterface; |
||
9 | use Traversable; |
||
10 | |||
11 | final class QueryString |
||
12 | { |
||
13 | /** |
||
14 | * @var array |
||
15 | */ |
||
16 | private $params = []; |
||
17 | |||
18 | /** |
||
19 | * @var QueryStringRendererInterface |
||
20 | */ |
||
21 | private $renderer; |
||
22 | |||
23 | /** |
||
24 | * @var QueryStringRendererInterface |
||
25 | */ |
||
26 | private static $defaultRenderer; |
||
27 | |||
28 | /** |
||
29 | * @var QueryStringParserInterface |
||
30 | */ |
||
31 | private static $defaultParser; |
||
32 | |||
33 | /** |
||
34 | * QueryString constructor. |
||
35 | * @param array|null $params |
||
36 | * @throws \InvalidArgumentException |
||
37 | */ |
||
38 | protected function __construct(?array $params = []) |
||
39 | { |
||
40 | $params = $params ?? []; |
||
41 | foreach ($params as $key => $value) { |
||
42 | $this->params[(string) $key] = $value; |
||
43 | } |
||
44 | $this->renderer = self::getDefaultRenderer(); |
||
45 | } |
||
46 | |||
47 | /** |
||
48 | * @param array $params |
||
49 | * @return QueryString |
||
50 | */ |
||
51 | private static function createFromParams(array $params): self |
||
52 | { |
||
53 | return new self($params); |
||
54 | } |
||
55 | |||
56 | /** |
||
57 | * @param \Psr\Http\Message\UriInterface $uri |
||
58 | * @param QueryStringParserInterface $queryStringParser |
||
59 | * @return QueryString |
||
60 | */ |
||
61 | private static function createFromUri($uri, QueryStringParserInterface $queryStringParser): self |
||
62 | { |
||
63 | return self::createFromString($uri->getQuery(), $queryStringParser); |
||
64 | } |
||
65 | |||
66 | /** |
||
67 | * @param string $string |
||
68 | * @param QueryStringParserInterface $queryStringParser |
||
69 | * @return QueryString |
||
70 | */ |
||
71 | private static function createFromString(string $string, QueryStringParserInterface $queryStringParser): self |
||
72 | { |
||
73 | return new self($queryStringParser->parse($string)); |
||
74 | } |
||
75 | |||
76 | /** |
||
77 | * @param QueryStringParserInterface|null $queryStringParser |
||
78 | * @return QueryString |
||
79 | * @throws \RuntimeException |
||
80 | */ |
||
81 | public static function createFromCurrentLocation(QueryStringParserInterface $queryStringParser = null): self |
||
82 | { |
||
83 | if (!isset($_SERVER['REQUEST_URI'])) { |
||
84 | throw new \RuntimeException('$_SERVER[\'REQUEST_URI\'] has not been set.'); |
||
85 | } |
||
86 | return self::createFromString($_SERVER['REQUEST_URI'], $queryStringParser ?? self::getDefaultParser()); |
||
87 | } |
||
88 | |||
89 | /** |
||
90 | * @return QueryString |
||
91 | * @throws \RuntimeException |
||
92 | */ |
||
93 | public function withCurrentLocation(): self |
||
94 | { |
||
95 | return self::createFromCurrentLocation(); |
||
96 | } |
||
97 | |||
98 | /** |
||
99 | * @param $input |
||
100 | * @param QueryStringParserInterface|null $queryStringParser |
||
101 | * @return QueryString |
||
102 | * @throws \InvalidArgumentException |
||
103 | * @throws \TypeError |
||
104 | */ |
||
105 | public static function factory($input = null, QueryStringParserInterface $queryStringParser = null): self |
||
106 | { |
||
107 | if (is_array($input)) { |
||
108 | return self::createFromParams($input); |
||
109 | } elseif (null === $input) { |
||
110 | return self::createFromParams([]); |
||
111 | } elseif (is_a($input, 'Psr\Http\Message\UriInterface')) { |
||
112 | return self::createFromUri($input, $queryStringParser ?? self::getDefaultParser()); |
||
113 | } elseif (is_string($input)) { |
||
114 | return self::createFromString($input, $queryStringParser ?? self::getDefaultParser()); |
||
115 | } |
||
116 | throw new \InvalidArgumentException(sprintf('Expected array, string or Psr\Http\Message\UriInterface, got %s', is_object($input) ? get_class($input) : gettype($input))); |
||
117 | } |
||
118 | |||
119 | /** |
||
120 | * @return array |
||
121 | */ |
||
122 | public function getParams(): ?array |
||
123 | { |
||
124 | return $this->params; |
||
125 | } |
||
126 | |||
127 | /** |
||
128 | * @param string $key |
||
129 | * @param array ...$deepKeys |
||
130 | * @return mixed|null |
||
131 | */ |
||
132 | public function getParam(string $key, ...$deepKeys) |
||
133 | { |
||
134 | $param = $this->params[$key] ?? null; |
||
135 | foreach ($deepKeys as $key) { |
||
136 | if (!isset($param[$key])) { |
||
137 | return null; |
||
138 | } |
||
139 | $param = $param[$key]; |
||
140 | } |
||
141 | return $param; |
||
142 | } |
||
143 | |||
144 | /** |
||
145 | * @param string $key |
||
146 | * @return bool |
||
147 | */ |
||
148 | public function hasParam(string $key, ...$deepKeys): bool |
||
149 | { |
||
150 | return [] === $deepKeys ? array_key_exists($key, $this->params) : null !== $this->getParam($key, ...$deepKeys); |
||
151 | } |
||
152 | |||
153 | /** |
||
154 | * Yield key => value pairs. |
||
155 | * |
||
156 | * @param bool $decodeKeys |
||
157 | * @param bool $decodeValues |
||
158 | * @return Traversable |
||
159 | */ |
||
160 | public function getPairs(bool $decodeKeys = false, bool $decodeValues = false): Traversable |
||
161 | { |
||
162 | return new Pairs((string) $this, $decodeKeys, $decodeValues, $this->getRenderer()->getSeparator()); |
||
163 | } |
||
164 | |||
165 | /** |
||
166 | * @param string $key |
||
167 | * @param $value |
||
168 | * @return QueryString |
||
169 | */ |
||
170 | public function withParam(string $key, $value): self |
||
171 | { |
||
172 | $clone = clone $this; |
||
173 | $clone->params[$key] = $value; |
||
174 | return $clone; |
||
175 | } |
||
176 | |||
177 | /** |
||
178 | * @param array $params |
||
179 | * @return QueryString |
||
180 | */ |
||
181 | public function withParams(array $params): self |
||
182 | { |
||
183 | $clone = clone $this; |
||
184 | $clone->params = []; |
||
185 | foreach ($params as $key => $value) { |
||
186 | $clone->params[(string) $key] = $value; |
||
187 | } |
||
188 | return $clone; |
||
189 | } |
||
190 | |||
191 | /** |
||
192 | * @param string $key |
||
193 | * @param array ...$deepKeys |
||
194 | * @return QueryString |
||
195 | */ |
||
196 | public function withoutParam(string $key, ...$deepKeys): self |
||
197 | { |
||
198 | $clone = clone $this; |
||
199 | |||
200 | // $key does not exist |
||
201 | if (!isset($clone->params[$key])) { |
||
202 | return $clone; |
||
203 | } |
||
204 | |||
205 | // $key exists and there are no $deepKeys |
||
206 | if ([] === $deepKeys) { |
||
207 | unset($clone->params[$key]); |
||
208 | return $clone; |
||
209 | } |
||
210 | |||
211 | // Deepkeys |
||
212 | $clone->params[$key] = $this->removeFromPath($clone->params[$key], ...$deepKeys); |
||
213 | return $clone; |
||
214 | } |
||
215 | |||
216 | /** |
||
217 | * @return QueryStringRendererInterface |
||
218 | */ |
||
219 | public function getRenderer(): QueryStringRendererInterface |
||
220 | { |
||
221 | return $this->renderer; |
||
222 | } |
||
223 | |||
224 | /** |
||
225 | * @param QueryStringRendererInterface $renderer |
||
226 | * @return QueryString |
||
227 | */ |
||
228 | public function withRenderer(QueryStringRendererInterface $renderer): self |
||
229 | { |
||
230 | $clone = clone $this; |
||
231 | $clone->renderer = $renderer; |
||
232 | return $clone; |
||
233 | } |
||
234 | |||
235 | /** |
||
236 | * @return string |
||
237 | */ |
||
238 | public function __toString(): string |
||
239 | { |
||
240 | return $this->renderer->render($this); |
||
241 | } |
||
242 | |||
243 | /** |
||
244 | * @param array $array |
||
245 | * @return bool |
||
246 | */ |
||
247 | private function isAnIndexedArray(array $array): bool |
||
248 | { |
||
249 | $keys = array_keys($array); |
||
250 | return $keys === array_filter($keys, 'is_int'); |
||
251 | } |
||
252 | |||
253 | /** |
||
254 | * @param array $params |
||
255 | * @param array ...$keys |
||
256 | * @return array |
||
257 | */ |
||
258 | private function removeFromPath(array $params, ...$keys): array |
||
259 | { |
||
260 | $nbKeys = count($keys); |
||
261 | $lastIndex = $nbKeys - 1; |
||
262 | $cursor = &$params; |
||
263 | |||
264 | foreach ($keys as $k => $key) { |
||
265 | if (!isset($cursor[$key])) { |
||
266 | return $params; // End here if not found |
||
267 | } |
||
268 | |||
269 | if ($k === $lastIndex) { |
||
270 | unset($cursor[$key]); |
||
271 | if (is_array($cursor) && $this->isAnIndexedArray($cursor)) { |
||
272 | $cursor = array_values($cursor); |
||
273 | } |
||
274 | break; |
||
275 | } |
||
276 | |||
277 | $cursor = &$cursor[$key]; |
||
278 | } |
||
279 | |||
280 | return $params; |
||
281 | } |
||
282 | |||
283 | /** |
||
284 | * Returns the default renderer. |
||
285 | * |
||
286 | * @return QueryStringRendererInterface |
||
287 | */ |
||
288 | public static function getDefaultRenderer(): QueryStringRendererInterface |
||
289 | { |
||
290 | if (!isset(self::$defaultRenderer)) { |
||
291 | self::restoreDefaultRenderer(); |
||
292 | } |
||
293 | return self::$defaultRenderer; |
||
294 | } |
||
295 | |||
296 | /** |
||
297 | * Changes default renderer. |
||
298 | * |
||
299 | * @param QueryStringRendererInterface $defaultRenderer |
||
300 | */ |
||
301 | public static function setDefaultRenderer(QueryStringRendererInterface $defaultRenderer): void |
||
302 | { |
||
303 | self::$defaultRenderer = $defaultRenderer; |
||
304 | } |
||
305 | |||
306 | /** |
||
307 | * Restores the default renderer. |
||
308 | */ |
||
309 | public static function restoreDefaultRenderer(): void |
||
310 | { |
||
311 | self::$defaultRenderer = NativeRenderer::factory(); |
||
0 ignored issues
–
show
|
|||
312 | } |
||
313 | |||
314 | /** |
||
315 | * Returns the default parser. |
||
316 | * |
||
317 | * @return QueryStringParserInterface |
||
318 | */ |
||
319 | public static function getDefaultParser(): QueryStringParserInterface |
||
320 | { |
||
321 | if (!isset(self::$defaultParser)) { |
||
322 | self::restoreDefaultParser(); |
||
323 | } |
||
324 | return self::$defaultParser; |
||
325 | } |
||
326 | |||
327 | /** |
||
328 | * Changes default parser. |
||
329 | * |
||
330 | * @param QueryStringParserInterface $defaultParser |
||
331 | */ |
||
332 | public static function setDefaultParser(QueryStringParserInterface $defaultParser): void |
||
333 | { |
||
334 | self::$defaultParser = $defaultParser; |
||
335 | } |
||
336 | |||
337 | /** |
||
338 | * Restores the default parser. |
||
339 | */ |
||
340 | public static function restoreDefaultParser(): void |
||
341 | { |
||
342 | self::$defaultParser = new NativeParser(); |
||
343 | } |
||
344 | } |
||
345 |
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property.
Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property..