This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Anax\Content; |
||
4 | |||
5 | /** |
||
6 | * File Based Content, code for loading additional content into view through |
||
7 | * data["meta"]. |
||
8 | */ |
||
9 | trait FBCLoadAdditionalContentTrait |
||
10 | { |
||
11 | /** |
||
12 | * Load extra info into views based of meta information provided in each |
||
13 | * view. |
||
14 | * |
||
15 | * @param array &$views with all views. |
||
16 | * @param string $route current route |
||
17 | * @param string $routeIndex route with appended /index |
||
18 | * |
||
19 | * @throws NotFoundException when mapping can not be done. |
||
20 | * |
||
21 | * @return void. |
||
22 | */ |
||
23 | private function loadAdditionalContent(&$views, $route, $routeIndex) |
||
24 | { |
||
25 | foreach ($views as $id => $view) { |
||
26 | $meta = isset($view["data"]["meta"]) |
||
27 | ? $view["data"]["meta"] |
||
28 | : null; |
||
29 | |||
30 | if (is_array($meta)) { |
||
31 | switch ($meta["type"]) { |
||
32 | case "article-toc": |
||
33 | $content = $views["main"]["data"]["content"]; |
||
34 | $views[$id]["data"]["articleToc"] = $this->di->get("textfilter")->createToc($content); |
||
0 ignored issues
–
show
|
|||
35 | break; |
||
36 | |||
37 | case "breadcrumb": |
||
38 | $views[$id]["data"]["breadcrumb"] = $this->createBreadcrumb($route); |
||
0 ignored issues
–
show
It seems like
createBreadcrumb() must be provided by classes using this trait. How about adding it as abstract method to this trait?
This check looks for methods that are used by a trait but not required by it. To illustrate, let’s look at the following code example trait Idable {
public function equalIds(Idable $other) {
return $this->getId() === $other->getId();
}
}
The trait Adding the
Loading history...
|
|||
39 | break; |
||
40 | |||
41 | case "next-previous": |
||
42 | $baseRoute = dirname($routeIndex); |
||
43 | $this->orderToc($baseRoute, $meta); |
||
44 | list($next, $previous) = $this->findNextAndPrevious($routeIndex); |
||
45 | $views[$id]["data"]["next"] = $next; |
||
46 | $views[$id]["data"]["previous"] = $previous; |
||
47 | break; |
||
48 | |||
49 | case "single": // OBSOLETE |
||
50 | case "content": |
||
51 | $route = $this->getActiveRoute($meta["route"], $routeIndex); |
||
0 ignored issues
–
show
It seems like
getActiveRoute() must be provided by classes using this trait. How about adding it as abstract method to this trait?
This check looks for methods that are used by a trait but not required by it. To illustrate, let’s look at the following code example trait Idable {
public function equalIds(Idable $other) {
return $this->getId() === $other->getId();
}
}
The trait Adding the
Loading history...
|
|||
52 | |||
53 | // Load and parse route as view. Load meta view |
||
54 | // if any. |
||
55 | // Current view details preceds the loaded once. |
||
56 | $view = $this->loadAndParseRoute($route); |
||
0 ignored issues
–
show
It seems like
loadAndParseRoute() must be provided by classes using this trait. How about adding it as abstract method to this trait?
This check looks for methods that are used by a trait but not required by it. To illustrate, let’s look at the following code example trait Idable {
public function equalIds(Idable $other) {
return $this->getId() === $other->getId();
}
}
The trait Adding the
Loading history...
|
|||
57 | $views[$id] = array_merge_recursive_distinct($view, $views[$id]); |
||
58 | break; |
||
59 | |||
60 | case "columns": |
||
61 | // Each column is an own view set with details |
||
62 | // Process as meta view and load additional content |
||
63 | $template = isset($meta["template"]) |
||
64 | ? $meta["template"] |
||
65 | : null; |
||
66 | $columns = $meta["columns"]; |
||
67 | foreach ($columns as $key => $view) { |
||
68 | $views2 = [ "main" => $view ]; |
||
69 | $this->loadAdditionalContent($views2, $route, $routeIndex); |
||
70 | $columns[$key] = $views2["main"]; |
||
71 | |||
72 | if ($template) { |
||
73 | $columns[$key]["template"] = $template; |
||
74 | } |
||
75 | } |
||
76 | $views[$id]["data"]["columns"] = $columns; |
||
77 | break; |
||
78 | |||
79 | case "toc-sort": |
||
80 | $baseRoute = dirname($routeIndex); |
||
81 | $this->orderToc($baseRoute, $meta); |
||
82 | break; |
||
83 | |||
84 | case "toc": |
||
85 | $baseRoute = dirname($routeIndex); |
||
86 | |||
87 | // Include support for ordering |
||
88 | if (isset($meta["orderby"]) |
||
89 | || isset($meta["orderorder"])) { |
||
90 | $this->orderToc($baseRoute, $meta); |
||
91 | } |
||
92 | |||
93 | // Same as toc-route |
||
94 | $toc = $this->meta[$baseRoute]["__toc__"]; |
||
0 ignored issues
–
show
The property
meta does not exist. Did you maybe forget to declare it?
In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code: class MyClass { }
$x = new MyClass();
$x->foo = true;
Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: class MyClass {
public $foo;
}
$x = new MyClass();
$x->foo = true;
Loading history...
|
|||
95 | $this->limitToc($toc, $meta); |
||
96 | $views[$id]["data"]["toc"] = $toc; |
||
97 | $views[$id]["data"]["meta"] = $meta; |
||
98 | break; |
||
99 | |||
100 | case "toc-route": |
||
101 | // Get the toc for a specific route |
||
102 | $route = $this->getActiveRoute($meta["route"], $routeIndex); |
||
0 ignored issues
–
show
It seems like
getActiveRoute() must be provided by classes using this trait. How about adding it as abstract method to this trait?
This check looks for methods that are used by a trait but not required by it. To illustrate, let’s look at the following code example trait Idable {
public function equalIds(Idable $other) {
return $this->getId() === $other->getId();
}
}
The trait Adding the
Loading history...
|
|||
103 | $routeIndex2 = $this->mapRoute2IndexKey($route); |
||
0 ignored issues
–
show
It seems like
mapRoute2IndexKey() must be provided by classes using this trait. How about adding it as abstract method to this trait?
This check looks for methods that are used by a trait but not required by it. To illustrate, let’s look at the following code example trait Idable {
public function equalIds(Idable $other) {
return $this->getId() === $other->getId();
}
}
The trait Adding the
Loading history...
|
|||
104 | $baseRoute = dirname($routeIndex2); |
||
105 | |||
106 | // Include support for ordering |
||
107 | if (isset($meta["orderby"]) |
||
108 | || isset($meta["orderorder"])) { |
||
109 | $this->orderToc($baseRoute, $meta); |
||
110 | } |
||
111 | |||
112 | // Same as toc |
||
113 | $toc = $this->meta[$baseRoute]["__toc__"]; |
||
114 | $this->limitToc($toc, $meta, $baseRoute); |
||
115 | $views[$id]["data"]["toc"] = $toc; |
||
116 | $views[$id]["data"]["meta"] = $meta; |
||
117 | break; |
||
118 | |||
119 | case "book-toc": |
||
120 | $toc = $this->meta[$baseRoute]["__toc__"]; |
||
0 ignored issues
–
show
The variable
$baseRoute does not seem to be defined for all execution paths leading up to this point.
If you define a variable conditionally, it can happen that it is not defined for all execution paths. Let’s take a look at an example: function myFunction($a) {
switch ($a) {
case 'foo':
$x = 1;
break;
case 'bar':
$x = 2;
break;
}
// $x is potentially undefined here.
echo $x;
}
In the above example, the variable $x is defined if you pass “foo” or “bar” as argument for $a. However, since the switch statement has no default case statement, if you pass any other value, the variable $x would be undefined. Available Fixes
Loading history...
|
|||
121 | $views[$id]["data"]["toc"] = $toc; |
||
122 | break; |
||
123 | |||
124 | case "author": |
||
125 | if (isset($views["main"]["data"]["author"])) { |
||
126 | $views[$id]["data"]["author"] = $this->loadAuthorDetails($views["main"]["data"]["author"]); |
||
0 ignored issues
–
show
It seems like
loadAuthorDetails() must be provided by classes using this trait. How about adding it as abstract method to this trait?
This check looks for methods that are used by a trait but not required by it. To illustrate, let’s look at the following code example trait Idable {
public function equalIds(Idable $other) {
return $this->getId() === $other->getId();
}
}
The trait Adding the
Loading history...
|
|||
127 | } |
||
128 | break; |
||
129 | |||
130 | case "copy": |
||
131 | $viewToCopy = $views[$id]["data"]["meta"]["view"]; |
||
132 | $views[$id]["data"] = array_merge_recursive_distinct( |
||
133 | $views[$viewToCopy]["data"], |
||
134 | $views[$id]["data"] |
||
135 | ); |
||
136 | break; |
||
137 | |||
138 | default: |
||
139 | $msg = t("Unsupported data/meta/type '!TYPE' for additional content.", [ |
||
140 | "!TYPE" => $meta["type"] |
||
141 | ]); |
||
142 | throw new Exception($msg); |
||
143 | } |
||
144 | } |
||
145 | } |
||
146 | } |
||
147 | |||
148 | |||
149 | |||
150 | /** |
||
151 | * Find next and previous links of current content. |
||
152 | * |
||
153 | * @param string $routeIndex target route to find next and previous for. |
||
154 | * |
||
155 | * @return array with next and previous if found. |
||
156 | */ |
||
157 | private function findNextAndPrevious($routeIndex) |
||
158 | { |
||
159 | $key = dirname($routeIndex); |
||
160 | if (!isset($this->meta[$key]["__toc__"])) { |
||
161 | return [null, null]; |
||
162 | } |
||
163 | |||
164 | $toc = $this->meta[$key]["__toc__"]; |
||
165 | if (!isset($toc[$routeIndex])) { |
||
166 | return [null, null]; |
||
167 | } |
||
168 | |||
169 | $index2Key = array_keys($toc); |
||
170 | $keys = array_flip($index2Key); |
||
171 | $values = array_values($toc); |
||
172 | $count = count($keys); |
||
173 | |||
174 | $current = $keys[$routeIndex]; |
||
175 | $previous = null; |
||
176 | View Code Duplication | for ($i = $current - 1; $i >= 0; $i--) { |
|
177 | $isSectionHeader = $values[$i]["sectionHeader"]; |
||
178 | $isLinkable = $values[$i]["linkable"]; // ?? null; |
||
179 | $isInternal = $values[$i]["internal"]; |
||
180 | if (($isSectionHeader && !$isLinkable) || $isInternal) { |
||
181 | continue; |
||
182 | } |
||
183 | $previous = $values[$i]; |
||
184 | $previous["route"] = $index2Key[$i]; |
||
185 | break; |
||
186 | } |
||
187 | |||
188 | $next = null; |
||
189 | View Code Duplication | for ($i = $current + 1; $i < $count; $i++) { |
|
190 | $isSectionHeader = $values[$i]["sectionHeader"]; |
||
191 | $isLinkable = $values[$i]["linkable"]; // ?? null; |
||
192 | $isInternal = $values[$i]["internal"]; |
||
193 | if (($isSectionHeader && !$isLinkable) || $isInternal) { |
||
194 | continue; |
||
195 | } |
||
196 | $next = $values[$i]; |
||
197 | $next["route"] = $index2Key[$i]; |
||
198 | break; |
||
199 | } |
||
200 | |||
201 | return [$next, $previous]; |
||
202 | } |
||
203 | |||
204 | |||
205 | |||
206 | /** |
||
207 | * Order toc items. |
||
208 | * |
||
209 | * @param string $baseRoute route to use to find __toc__. |
||
210 | * @param string $meta on how to order toc. |
||
211 | * |
||
212 | * @return void. |
||
213 | */ |
||
214 | private function orderToc($baseRoute, $meta) |
||
215 | { |
||
216 | $defaults = [ |
||
217 | "orderby" => "section", |
||
218 | "orderorder" => "asc", |
||
219 | ]; |
||
220 | $options = array_merge($defaults, $meta); |
||
221 | $orderby = $options["orderby"]; |
||
222 | $order = $options["orderorder"]; |
||
223 | $toc = $this->meta[$baseRoute]["__toc__"]; |
||
224 | |||
225 | uksort($toc, function ($a, $b) use ($toc, $orderby, $order) { |
||
226 | $a = $toc[$a][$orderby]; |
||
227 | $b = $toc[$b][$orderby]; |
||
228 | |||
229 | $asc = $order == "asc" ? 1 : -1; |
||
230 | |||
231 | if ($a == $b) { |
||
232 | return 0; |
||
233 | } elseif ($a > $b) { |
||
234 | return $asc; |
||
235 | } |
||
236 | return -$asc; |
||
237 | }); |
||
238 | |||
239 | $this->meta[$baseRoute]["__toc__"] = $toc; |
||
240 | } |
||
241 | |||
242 | |||
243 | /** |
||
244 | * Limit and paginate toc items. |
||
245 | * |
||
246 | * @param string &$toc array with current toc. |
||
247 | * @param string &$meta on how to order and limit toc. |
||
248 | * @param string $baseRoute prepend to next & previous urls. |
||
249 | * |
||
250 | * @return void. |
||
251 | */ |
||
252 | private function limitToc(&$toc, &$meta, $baseRoute = null) |
||
253 | { |
||
254 | $defaults = [ |
||
255 | "items" => 7, |
||
256 | "offset" => 0, |
||
257 | ]; |
||
258 | $options = array_merge($defaults, $meta); |
||
259 | |||
260 | // Check if pagination is currently used |
||
261 | if ($this->currentPage) { |
||
262 | $options["offset"] = ($this->currentPage - 1) * $options["items"]; |
||
0 ignored issues
–
show
The property
currentPage does not exist. Did you maybe forget to declare it?
In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code: class MyClass { }
$x = new MyClass();
$x->foo = true;
Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: class MyClass {
public $foo;
}
$x = new MyClass();
$x->foo = true;
Loading history...
|
|||
263 | } |
||
264 | |||
265 | $meta["totalItems"] = count($toc); |
||
266 | $meta["currentPage"] = (int) floor($options["offset"] / $options["items"]) + 1; |
||
267 | $meta["totalPages"] = (int) floor($meta["totalItems"] / $options["items"] + 1); |
||
268 | |||
269 | // Next and previous page |
||
270 | $pagination = $this->config["pagination"]; |
||
0 ignored issues
–
show
The property
config does not exist. Did you maybe forget to declare it?
In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code: class MyClass { }
$x = new MyClass();
$x->foo = true;
Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: class MyClass {
public $foo;
}
$x = new MyClass();
$x->foo = true;
Loading history...
|
|||
271 | $meta["nextPageUrl"] = null; |
||
272 | $meta["previousPageUrl"] = null; |
||
273 | $baseRoute = isset($baseRoute) |
||
274 | ? $baseRoute |
||
275 | : $this->baseRoute; |
||
0 ignored issues
–
show
The property
baseRoute does not exist. Did you maybe forget to declare it?
In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code: class MyClass { }
$x = new MyClass();
$x->foo = true;
Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: class MyClass {
public $foo;
}
$x = new MyClass();
$x->foo = true;
Loading history...
|
|||
276 | |||
277 | if ($meta["currentPage"] > 1 && $meta["totalPages"] > 1) { |
||
278 | $previousPage = $meta["currentPage"] - 1; |
||
279 | $previous = ""; |
||
280 | if ($previousPage != 1) { |
||
281 | $previous = "$pagination/$previousPage"; |
||
282 | } |
||
283 | $meta["previousPageUrl"] = "$baseRoute/$previous"; |
||
284 | } |
||
285 | |||
286 | if ($meta["currentPage"] < $meta["totalPages"]) { |
||
287 | $nextPage = $meta["currentPage"] + 1; |
||
288 | $meta["nextPageUrl"] = "$baseRoute/$pagination/$nextPage"; |
||
289 | } |
||
290 | |||
291 | |||
292 | // Only use slice of toc |
||
293 | $startSlice = ($meta["currentPage"] - 1) * $options["items"]; |
||
294 | $toc = array_slice($toc, $startSlice, $options["items"]); |
||
295 | $meta["displayedItems"] = count($toc); |
||
296 | } |
||
297 | } |
||
298 |
In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code:
Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: