This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * |
||
4 | * Copyright (c) 2011, Hannes Forsgård |
||
5 | * |
||
6 | * Permission is hereby granted, free of charge, to any person obtaining a copy |
||
7 | * of this software to use, copy, modify, distribute, sublicense, and/or sell |
||
8 | * copies of the software, and to permit persons to whom the software is |
||
9 | * furnished to do so. |
||
10 | * |
||
11 | * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR |
||
12 | * IMPLIED. |
||
13 | * |
||
14 | * @author Hannes Forsgård <[email protected]> |
||
15 | * |
||
16 | */ |
||
17 | namespace byrokrat\paperinvoice; |
||
18 | |||
19 | use FPDF as BaseFPDF; |
||
20 | |||
21 | |||
22 | /** |
||
23 | * |
||
24 | * FPDF extension class. |
||
25 | * |
||
26 | */ |
||
27 | class FPDF extends BaseFPDF |
||
28 | { |
||
29 | /** |
||
30 | * |
||
31 | * Current count of pages. |
||
32 | * |
||
33 | * @var int $nrOfPages |
||
34 | * |
||
35 | */ |
||
36 | private $nrOfPages = 0; |
||
37 | |||
38 | /** |
||
39 | * |
||
40 | * Path to search for images in. |
||
41 | * |
||
42 | * @var string $imagePath |
||
43 | * |
||
44 | */ |
||
45 | private $imagePath = ""; |
||
46 | |||
47 | /** |
||
48 | * |
||
49 | * Keep track of added fonts. |
||
50 | * |
||
51 | * @var array $addedFonts |
||
52 | * |
||
53 | */ |
||
54 | private $addedFonts = array(); |
||
55 | |||
56 | /** |
||
57 | * |
||
58 | * Set standard margin, orientation, units used and paper size |
||
59 | * |
||
60 | * @param int $margin Marginsize in user units. |
||
61 | * |
||
62 | * @param char $orientation Default page orientation. 'P' for portrait or |
||
63 | * 'L' for landscape |
||
64 | * |
||
65 | * @param string $unit User units. 'pt' for points, 'mm' for millimeters, |
||
66 | * 'cm' for centimetera or 'in' for inches |
||
67 | * |
||
68 | * @param string|array $format The size used for pages. 'A3', 'A4', 'A5', |
||
69 | * 'Letter' or 'Legal'. May also be an array of height and width specified |
||
70 | * in user units. |
||
71 | * |
||
72 | */ |
||
73 | public function __construct( |
||
74 | $margin = 20, |
||
75 | $orientation = 'P', |
||
76 | $unit = 'mm', |
||
77 | $format = 'A4' |
||
78 | ) { |
||
79 | parent::__construct($orientation, $unit, $format); |
||
0 ignored issues
–
show
|
|||
80 | $this->AliasNbPages('{{{nb}}}'); |
||
81 | $this->SetMargins($margin, $margin); |
||
82 | $this->SetAutoPageBreak(TRUE, $margin); |
||
83 | } |
||
84 | |||
85 | /** |
||
86 | * |
||
87 | * Adds a new page to the document. |
||
88 | * |
||
89 | * Extends FPDF by keeping track of number of pages added. |
||
90 | * |
||
91 | * @param string $orientation Page orientation. 'P' for portrait or 'L' for |
||
92 | * landscape. The default value is the one passed to the constructor. |
||
93 | * |
||
94 | * @param string $format The size used for pages. 'A3', 'A4', 'A5', |
||
95 | * 'Letter' or 'Legal'. May also be an array of height and width specified |
||
96 | * in user units. The default value is the one passed to the constructor. |
||
97 | * |
||
98 | * @return void |
||
99 | * |
||
100 | */ |
||
101 | public function AddPage($orientation = '', $format = '') |
||
102 | { |
||
103 | $this->nrOfPages++; |
||
104 | parent::AddPage($orientation, $format); |
||
105 | } |
||
106 | |||
107 | /** |
||
108 | * |
||
109 | * Get the current number of pages added with AddPage(). |
||
110 | * |
||
111 | * Note that this number will increase as you add more pages. Should not be |
||
112 | * used to print the total number of pages in document. For this use |
||
113 | * TotalPagesNo(). |
||
114 | * |
||
115 | * @return int Number of pages currently in document |
||
116 | * |
||
117 | */ |
||
118 | public function PagesAdded() |
||
119 | { |
||
120 | return $this->nrOfPages; |
||
121 | } |
||
122 | |||
123 | /** |
||
124 | * |
||
125 | * Shorthand to get total number of pages in pdf |
||
126 | * |
||
127 | * @return string Returns a string that will be replaced with the total |
||
128 | * number of pages when pdf is rendered |
||
129 | * |
||
130 | */ |
||
131 | public function TotalPagesNo() |
||
132 | { |
||
133 | return $this->AliasNbPages; |
||
134 | } |
||
135 | |||
136 | /** |
||
137 | * |
||
138 | * Shorthand to get current page/total pages. |
||
139 | * |
||
140 | * @param string $delim Delimiter used between current and page number and |
||
141 | * total pages number. |
||
142 | * |
||
143 | * @return string Returns a string that will be replaced with current page |
||
144 | * number, then delimiter, then the total number of pages. |
||
145 | * |
||
146 | */ |
||
147 | public function PaginationStr($delim = '/') |
||
148 | { |
||
149 | return $this->PageNo() . $delim . $this->TotalPagesNo(); |
||
150 | } |
||
151 | |||
152 | /** |
||
153 | * |
||
154 | * Increase the abscissa of the current position. |
||
155 | * |
||
156 | * @param int $x |
||
157 | * |
||
158 | * @return void |
||
159 | * |
||
160 | */ |
||
161 | public function moveX($x) |
||
162 | { |
||
163 | $posX = $this->GetX(); |
||
164 | $posX += $x; |
||
165 | $this->SetX($posX); |
||
166 | } |
||
167 | |||
168 | /** |
||
169 | * |
||
170 | * Increase the ordinate of the current position. |
||
171 | * |
||
172 | * @param int $y |
||
173 | * |
||
174 | * @return void |
||
175 | * |
||
176 | */ |
||
177 | public function moveY($y) |
||
178 | { |
||
179 | $posX = $this->GetX(); |
||
180 | $posY = $this->GetY(); |
||
181 | $posY += $y; |
||
182 | $this->SetXY($posX, $posY); |
||
183 | } |
||
184 | |||
185 | /** |
||
186 | * |
||
187 | * Wrapper to solve utf-8 issues. |
||
188 | * |
||
189 | * @param string $title |
||
190 | * |
||
191 | * @param bool $isUTF8 Defaults to TRUE. |
||
192 | * |
||
193 | * @return void |
||
194 | * |
||
195 | */ |
||
196 | public function SetTitle($title, $isUTF8 = TRUE) |
||
197 | { |
||
198 | parent::SetTitle($title, $isUTF8); |
||
199 | } |
||
200 | |||
201 | /** |
||
202 | * |
||
203 | * Wrapper to solve utf-8 issues. |
||
204 | * |
||
205 | * @param string $subject |
||
206 | * |
||
207 | * @param bool $isUTF8 Defaults to TRUE. |
||
208 | * |
||
209 | * @return void |
||
210 | * |
||
211 | */ |
||
212 | public function SetSubject($subject, $isUTF8 = TRUE) |
||
213 | { |
||
214 | parent::SetSubject($subject, $isUTF8); |
||
215 | } |
||
216 | |||
217 | /** |
||
218 | * |
||
219 | * Wrapper to solve utf-8 issues. |
||
220 | * |
||
221 | * @param string $author |
||
222 | * |
||
223 | * @param bool $isUTF8 Defaults to TRUE. |
||
224 | * |
||
225 | * @return void |
||
226 | * |
||
227 | */ |
||
228 | public function SetAuthor($author, $isUTF8 = TRUE) |
||
229 | { |
||
230 | parent::SetAuthor($author, $isUTF8); |
||
231 | } |
||
232 | |||
233 | /** |
||
234 | * |
||
235 | * Wrapper to solve utf-8 issues. |
||
236 | * |
||
237 | * @param string $keywords |
||
238 | * |
||
239 | * @param bool $isUTF8 Defaults to TRUE. |
||
240 | * |
||
241 | * @return void |
||
242 | * |
||
243 | */ |
||
244 | public function SetKeywords($keywords, $isUTF8 = TRUE) |
||
245 | { |
||
246 | parent::SetKeywords($keywords, $isUTF8); |
||
247 | } |
||
248 | |||
249 | /** |
||
250 | * |
||
251 | * Wrapper to solve utf-8 issues. |
||
252 | * |
||
253 | * @param string $creator |
||
254 | * |
||
255 | * @param bool $isUTF8 Defaults to TRUE. |
||
256 | * |
||
257 | * @return void |
||
258 | * |
||
259 | */ |
||
260 | public function SetCreator($creator, $isUTF8 = TRUE) |
||
261 | { |
||
262 | parent::SetCreator($creator, $isUTF8); |
||
263 | } |
||
264 | |||
265 | /** |
||
266 | * |
||
267 | * Print text in cell. Solves utf-8 issues. |
||
268 | * |
||
269 | * Prints a cell (rectangular area) with optional borders, background color |
||
270 | * and character string. The upper-left corner of the cell corresponds to |
||
271 | * the current position. The text can be aligned or centered. After the |
||
272 | * call, the current position moves to the right or to the next line. It is |
||
273 | * possible to put a link on the text. |
||
274 | * |
||
275 | * If automatic page breaking is enabled (witch is it by default) and the |
||
276 | * cell goes beyond the limit, a page break is done before outputting. |
||
277 | * |
||
278 | * @param int $width Cell width. If 0, the cell extends up to the right |
||
279 | * margin. |
||
280 | * |
||
281 | * @param int $height Cell height. Default value: 0. |
||
282 | * |
||
283 | * @param string $txt String to print. Default value: empty string. |
||
284 | * |
||
285 | * @param string|int $border Indicates if borders must be drawn around the |
||
286 | * cell. The value can be either a number: 0 for no border, 1 for a frame. |
||
287 | * Or a string containing some or all of the following characters (in any |
||
288 | * order): 'L' for left, 'T' for top, 'R' for right or 'B' for bottom. |
||
289 | * |
||
290 | * @param int $ln Indicates where the current position should go after the |
||
291 | * call. Possible values are: 0 - to the rigth, 1 - to the beginning of the |
||
292 | * next line or 2 - below. |
||
293 | * |
||
294 | * @param char $align Allows to center or align the tex. 'L', 'C' or 'R'. |
||
295 | * |
||
296 | * @param bool $fill Indicates if the cell background must be painted (TRUE) |
||
297 | * or transparent (FALSE). Default value: FALSE. |
||
298 | * |
||
299 | * @param string|identifier $link URL or identifier returned by AddLink(). |
||
300 | * |
||
301 | * @return void |
||
302 | * |
||
303 | */ |
||
304 | public function Cell( |
||
305 | $width, |
||
306 | $height = 0, |
||
307 | $txt = '', |
||
308 | $border = 0, |
||
309 | $ln = 0, |
||
310 | $align = '', |
||
311 | $fill = FALSE, |
||
312 | $link = '' |
||
313 | ) { |
||
314 | $txt = utf8_decode($txt); |
||
315 | parent::Cell($width, $height, $txt, $border, $ln, $align, $fill, $link); |
||
316 | } |
||
317 | |||
318 | /** |
||
319 | * |
||
320 | * Prints a character string. Solves utf-8 issues. |
||
321 | * |
||
322 | * The origin is on the left of the first character, on the baseline. This |
||
323 | * method allows to place a string precisely on the page, but it is usually |
||
324 | * easier to use Cell(), MultiCell() or Write() which are the standard |
||
325 | * methods to print text. |
||
326 | * |
||
327 | * @param int $x Abscissa of the origin. |
||
328 | * |
||
329 | * @param int $y Ordinate of the origin. |
||
330 | * |
||
331 | * @param string $txt String to print. |
||
332 | * |
||
333 | * @return void |
||
334 | * |
||
335 | */ |
||
336 | public function Text($x, $y, $txt) |
||
337 | { |
||
338 | $txt = utf8_decode($txt); |
||
339 | parent::Text($x, $y, $txt); |
||
340 | } |
||
341 | |||
342 | /** |
||
343 | * |
||
344 | * Print text from the current position. |
||
345 | * |
||
346 | * Fix positioning errors when using non-english characters (eg. åäö). |
||
347 | * |
||
348 | * When the right margin is reached (or the \n character is met) a line |
||
349 | * break occurs and text continues from the left margin. Upon method exit, |
||
350 | * the current position is left just at the end of the text. |
||
351 | * |
||
352 | * @param string $lineHeight Line height. |
||
353 | * |
||
354 | * @param string $txt String to print. |
||
355 | * |
||
356 | * @param string|identifier $link URL or identifier returned by AddLink(). |
||
357 | * |
||
358 | * @return void |
||
359 | * |
||
360 | * @todo Fix positioning hack.. |
||
361 | * |
||
362 | */ |
||
363 | public function Write($lineHeight, $txt, $link = '') |
||
364 | { |
||
365 | parent::Write($lineHeight, $txt, $link); |
||
366 | // Uggly hack to help fix positions |
||
367 | $specChars = preg_replace("/[^åäöÅÄÖ]/", '', $txt); |
||
368 | $specChars = strlen($specChars)*1.75; |
||
369 | if ( $specChars ) $this->moveX($specChars*-1); |
||
370 | } |
||
371 | |||
372 | /** |
||
373 | * Write to position |
||
374 | * |
||
375 | * @param string $x |
||
376 | * @param string $y |
||
377 | * @param string $line |
||
378 | * @param string $txt |
||
379 | * @param string|identifier $link URL or identifier returned by AddLink(). |
||
380 | * @return void |
||
381 | */ |
||
382 | public function WriteXY($x, $y, $line, $txt, $link = '') |
||
383 | { |
||
384 | $this->SetXY($x, $y); |
||
385 | $this->Write($line, $txt, $link); |
||
386 | } |
||
387 | |||
388 | /** |
||
389 | * |
||
390 | * Set image path. Enables image() to understand relative paths. |
||
391 | * |
||
392 | * @param string $path |
||
393 | * |
||
394 | * @return void |
||
395 | * |
||
396 | */ |
||
397 | public function setImagePath($path) |
||
398 | { |
||
399 | $this->imagePath = realpath($path); |
||
400 | } |
||
401 | |||
402 | /** |
||
403 | * |
||
404 | * Output an image. |
||
405 | * |
||
406 | * @param string $file Path or URL of the image. May be relative to |
||
407 | * path set using setImagePath() |
||
408 | * |
||
409 | * @param int $x Abscissa of the upper-left corner. If not specified or |
||
410 | * equal to NULL, the current abscissa is used. |
||
411 | * |
||
412 | * @param int $y Ordinate of the upper-left corner. If not specified or |
||
413 | * equal to NULL, the current ordinate is used; moreover, a page break is |
||
414 | * triggered first if necessary (in case automatic page breaking is enabled) |
||
415 | * and, after the call, the current ordinate is moved to the bottom of the |
||
416 | * image. |
||
417 | * |
||
418 | * @param int $width Width of the image in the page. |
||
419 | * |
||
420 | * @param int $height Height of the image in the page. |
||
421 | * |
||
422 | * @param string $type JPG|JPEG|PNG|GIF |
||
423 | * |
||
424 | * @param string|identifier $link URL or identifier returned by AddLink(). |
||
425 | * |
||
426 | * @return void |
||
427 | * |
||
428 | */ |
||
429 | public function Image( |
||
430 | $file, |
||
431 | $x = NULL, |
||
432 | $y = NULL, |
||
433 | $width = 0, |
||
434 | $height = 0, |
||
435 | $type = '', |
||
436 | $link = '' |
||
437 | ) { |
||
438 | $absolute = $this->imagePath . DIRECTORY_SEPARATOR . $file; |
||
439 | if (!is_readable($file) && is_readable($absolute)) { |
||
440 | $file = $absolute; |
||
441 | } |
||
442 | parent::Image($file, $x, $y, $width, $height, $type, $link); |
||
443 | } |
||
444 | |||
445 | /** |
||
446 | * |
||
447 | * Import a TrueType or Type1 font and make it available. |
||
448 | * |
||
449 | * @param string $family |
||
450 | * |
||
451 | * @param string $style 'B', 'I' or 'IB' |
||
452 | * |
||
453 | * @param string $file The font definition file. By default, the name is |
||
454 | * built from the family and style, in lower case with no space. |
||
455 | * |
||
456 | * @return void |
||
457 | * |
||
458 | */ |
||
459 | public function AddFont($family, $style = '', $file = '') |
||
460 | { |
||
461 | parent::AddFont($family, $style, $file); |
||
462 | if (!isset($this->addedFonts[$family])) { |
||
463 | $this->addedFonts[$family] = array(); |
||
464 | } |
||
465 | $this->addedFonts[$family][] = $style; |
||
466 | } |
||
467 | |||
468 | /** |
||
469 | * |
||
470 | * Sets the font used to print character strings. |
||
471 | * |
||
472 | * @param string $family Family font. It can be either a name defined by |
||
473 | * AddFont() or one of the standard families (case insensitive): Courier, |
||
474 | * Helvetica or Arial, Times, Symbol or ZapfDingbats. |
||
475 | * |
||
476 | * @param string $style 'B', 'I', 'U' or any combination. |
||
477 | * |
||
478 | * @param int $size Font size in points. The default value is the current |
||
479 | * size. If no size has been specified since the beginning of the document, |
||
480 | * the value taken is 12. |
||
481 | * |
||
482 | * @return void |
||
483 | * |
||
484 | */ |
||
485 | public function SetFont($family, $style = '', $size = 0) |
||
486 | { |
||
487 | $style = strtoupper($style); |
||
488 | |||
489 | // U is not handled by AddFont(), hence needs special treatment |
||
490 | $addU = ''; |
||
491 | if (strpos($style, 'U') !== FALSE) { |
||
492 | $addU = 'U'; |
||
493 | $style = str_replace('U', '', $style); |
||
494 | } |
||
495 | |||
496 | if (isset($this->addedFonts[$family])) { |
||
497 | if (!in_array($style, $this->addedFonts[$family]) ) { |
||
498 | // Requested style is missing |
||
499 | if (in_array('', $this->addedFonts[$family])) { |
||
500 | // Using no style |
||
501 | $style = ''; |
||
502 | } else { |
||
503 | // Use first added style |
||
504 | $style = $this->addedFonts[$family][0]; |
||
505 | } |
||
506 | } |
||
507 | } |
||
508 | |||
509 | $style = $style.$addU; |
||
510 | parent::SetFont($family, $style, $size); |
||
511 | } |
||
512 | |||
513 | /** |
||
514 | * |
||
515 | * Send the document to a given destination |
||
516 | * |
||
517 | * @param string $name The name of the file. If not specified, the document |
||
518 | * will be sent to the browser (destination I) with the name doc.pdf. |
||
519 | * |
||
520 | * @param char $dest Destination where to send the document. It can take one |
||
521 | * of the following values: 'I' - send the file inline to the browser. |
||
522 | * 'D' - send to the browser and force a file download with the name given |
||
523 | * by name. 'F' - save to a local file with the name given by name (may |
||
524 | * include a path). 'S' - return the document as a string. name is ignored. |
||
525 | * |
||
526 | * @return string |
||
527 | * |
||
528 | */ |
||
529 | public function Output($name = '', $dest = '') |
||
530 | { |
||
531 | $this->draw(); |
||
532 | return parent::Output($name, $dest); |
||
533 | } |
||
534 | |||
535 | /** |
||
536 | * |
||
537 | * Shorthand for direct string output |
||
538 | * |
||
539 | * @return string Raw PDF |
||
540 | * |
||
541 | */ |
||
542 | public function GetPdf() |
||
543 | { |
||
544 | return $this->Output('', 'S'); |
||
545 | } |
||
546 | |||
547 | /** |
||
548 | * |
||
549 | * Perform actions just before Output |
||
550 | * |
||
551 | * @return void |
||
552 | * |
||
553 | */ |
||
554 | protected function draw(){} |
||
555 | |||
556 | } |
||
557 |
Let’s take a look at an example:
In the above example, the authenticate() method works fine as long as you just pass instances of MyUser. However, if you now also want to pass a different sub-classes of User which does not have a getDisplayName() method, the code will break.
Available Fixes
Change the type-hint for the parameter:
Add an additional type-check:
Add the method to the parent class: