This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | *## JSONStorage class file |
||
4 | * |
||
5 | * @author: antonio ramirez <[email protected]> |
||
6 | */ |
||
7 | |||
8 | /** |
||
9 | *## JSON Storage |
||
10 | * |
||
11 | * Provides a very simple way to persistent JSON storage. Acts as a registry key saver. |
||
12 | * |
||
13 | * Example of use: |
||
14 | * |
||
15 | * $j = new JSONStorage(); |
||
16 | * |
||
17 | * $j->addRegistry('custom'); |
||
18 | * echo $j->registryExists('custom'); |
||
19 | * $j->setData('mydata','super','custom'); |
||
20 | * $j->save(); |
||
21 | * $j->load(); |
||
22 | * |
||
23 | * echo $j->getData('super','custom'); |
||
24 | * |
||
25 | * @package booster.components |
||
26 | */ |
||
27 | class JSONStorage extends CComponent |
||
28 | { |
||
29 | /** |
||
30 | * const string the key to keep value information |
||
31 | */ |
||
32 | const META = 'meta'; |
||
33 | |||
34 | /** |
||
35 | * const string the key of the registry |
||
36 | */ |
||
37 | const REGISTRY = 'registry'; |
||
38 | |||
39 | /** |
||
40 | * @var string the filename to save the values to |
||
41 | */ |
||
42 | protected $filename = 'registry.json'; |
||
43 | |||
44 | /** |
||
45 | * @var string the full path to the directory with read/write access to save the registry to. If none set, the |
||
46 | * component will used the application's runtime folder |
||
47 | */ |
||
48 | protected $path; |
||
49 | |||
50 | /** |
||
51 | * @var bool whether the registry has changed or not |
||
52 | */ |
||
53 | protected $dirty = false; |
||
54 | |||
55 | /** |
||
56 | * @var null|string the name of the default registry |
||
57 | */ |
||
58 | protected $default = "default"; |
||
59 | |||
60 | /** |
||
61 | * @var array the data of the registry |
||
62 | */ |
||
63 | protected $data = array( |
||
64 | self::META => array( |
||
65 | "updated" => "", |
||
66 | "hash" => "" |
||
67 | ), |
||
68 | self::REGISTRY => array( |
||
69 | /* collection name */ |
||
70 | "default" => array( |
||
71 | "foo" => "bar" /* attributes by example */ |
||
72 | ) |
||
73 | ) |
||
74 | ); |
||
75 | |||
76 | /** |
||
77 | * class constructor |
||
78 | * |
||
79 | * @param null $registry |
||
80 | */ |
||
81 | public function __construct($registry = null) |
||
82 | { |
||
83 | if (null === $this->path) { |
||
84 | $this->setPath(Yii::app()->getRuntimePath()); |
||
85 | } // JSON storage will be at the app runtime path |
||
86 | $this->setFile($this->filename); |
||
87 | |||
88 | $this->load(); |
||
89 | |||
90 | // setup domain |
||
91 | if ($registry) { |
||
92 | if ($this->registryExists($registry) == false) { |
||
0 ignored issues
–
show
|
|||
93 | $this->addRegistry($registry); |
||
94 | } |
||
95 | $this->default = $registry; |
||
96 | } |
||
97 | } |
||
98 | |||
99 | /** |
||
100 | * class destructor - flush data |
||
101 | */ |
||
102 | public function __destruct() |
||
103 | { |
||
104 | $this->flush(); |
||
105 | } |
||
106 | |||
107 | /** |
||
108 | * Fires before registry has been saved |
||
109 | * |
||
110 | * @param CEvent $event |
||
111 | */ |
||
112 | public function onBeforeSave($event) |
||
113 | { |
||
114 | $this->raiseEvent('onBeforeSave', $event); |
||
115 | } |
||
116 | |||
117 | /** |
||
118 | * Fires after the registry has been saved |
||
119 | * |
||
120 | * @param CEvent $event |
||
121 | */ |
||
122 | public function onAfterSave($event) |
||
123 | { |
||
124 | $this->raiseEvent('onAfterSave', $event); |
||
125 | } |
||
126 | |||
127 | /** |
||
128 | * Property set path |
||
129 | * |
||
130 | * @param string $path the full path of the directory with read/write access to save the registry file to |
||
131 | * |
||
132 | * @return bool |
||
133 | * @throws Exception |
||
134 | */ |
||
135 | public function setPath($path) |
||
136 | { |
||
137 | if (is_dir($path) && is_writable($path)) { |
||
138 | $this->path = substr($path, -1) == DIRECTORY_SEPARATOR ? $path : $path . DIRECTORY_SEPARATOR; |
||
139 | return true; |
||
140 | } |
||
141 | throw new Exception('"Path" must be a writable directory.'); |
||
142 | } |
||
143 | |||
144 | /** |
||
145 | * Property get path |
||
146 | * @return string |
||
147 | */ |
||
148 | public function getPath() |
||
149 | { |
||
150 | return $this->path; |
||
151 | } |
||
152 | |||
153 | /** |
||
154 | * Property set file |
||
155 | * |
||
156 | * @param string $file the filename to save the registry to |
||
157 | */ |
||
158 | public function setFile($file) |
||
159 | { |
||
160 | $this->filename = $this->path . $file; |
||
161 | } |
||
162 | |||
163 | /** |
||
164 | * Property get file |
||
165 | * @return string filename |
||
166 | */ |
||
167 | public function getFile() |
||
168 | { |
||
169 | return $this->filename; |
||
170 | } |
||
171 | |||
172 | /** |
||
173 | * Verifies data integrity |
||
174 | * @return bool |
||
175 | */ |
||
176 | public function verify() |
||
177 | { |
||
178 | $registry = function_exists('json_encode') |
||
179 | ? json_encode($this->data[self::REGISTRY]) |
||
180 | : CJSON::encode( |
||
181 | $this->data[self::REGISTRY] |
||
182 | ); |
||
183 | return $this->data[self::META]["hash"] == md5($registry); |
||
184 | } |
||
185 | |||
186 | /** |
||
187 | * Loads registry data into memory |
||
188 | * @throws Exception |
||
189 | */ |
||
190 | public function load() |
||
191 | { |
||
192 | $filename = $this->getFile(); |
||
193 | if (!file_exists($filename)) |
||
194 | return; |
||
195 | |||
196 | $json = file_get_contents($filename); |
||
197 | if (strlen($json) == 0) |
||
198 | return; |
||
199 | |||
200 | $data = $this->decode($json); |
||
201 | if ($data === null) |
||
202 | throw new Exception('Error while trying to decode ' . $filename . '.'); |
||
203 | |||
204 | $this->data = $data; |
||
0 ignored issues
–
show
It seems like
$data of type * is incompatible with the declared type array of property $data .
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property. Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property.. ![]() |
|||
205 | |||
206 | if (!$this->verify()) |
||
207 | throw new Exception($filename . ' failed checksum validation.'); |
||
208 | } |
||
209 | |||
210 | /** |
||
211 | * Saves registry data to the file |
||
212 | */ |
||
213 | public function save() |
||
214 | { |
||
215 | if ($this->hasEventHandler('onBeforeSave')) { |
||
216 | $this->onBeforeSave(new CEvent($this)); |
||
217 | } |
||
218 | $this->flush(); |
||
219 | if ($this->hasEventHandler('onAfterSave')) { |
||
220 | $this->onAfterSave(new CEvent($this)); |
||
221 | } |
||
222 | } |
||
223 | |||
224 | /** |
||
225 | * Saves data to the registry |
||
226 | * |
||
227 | * @param string $key the name of the key that will hold the data |
||
228 | * @param array $data the data to save |
||
229 | * @param string $registry the name of the registry |
||
230 | * |
||
231 | * @return bool |
||
232 | */ |
||
233 | public function setData($key, $data, $registry = null) |
||
234 | { |
||
235 | if ($registry == null) { |
||
0 ignored issues
–
show
|
|||
236 | $registry = $this->default; |
||
237 | } |
||
238 | if (is_string($key . $registry) && $this->registryExists($registry)) { |
||
239 | $this->data[self::REGISTRY][$registry][$key] = $data; |
||
240 | $this->dirty = true; |
||
241 | return true; |
||
242 | } |
||
243 | return false; |
||
244 | } |
||
245 | |||
246 | /** |
||
247 | * Retrieves a data value from the registry |
||
248 | * |
||
249 | * @param string $key the name of the key that holds the data |
||
250 | * @param string $registry the registry name |
||
251 | * |
||
252 | * @return mixed the data in the key value, null otherwise |
||
253 | */ |
||
254 | public function getData($key, $registry = null) |
||
255 | { |
||
256 | if ($registry == null) { |
||
0 ignored issues
–
show
|
|||
257 | $registry = $this->default; |
||
258 | } |
||
259 | if (is_string($key . $registry) && $this->registryExists($registry)) { |
||
260 | if (array_key_exists($key, $this->data[self::REGISTRY][$registry])) { |
||
261 | return $this->data[self::REGISTRY][$registry][$key]; |
||
262 | } |
||
263 | } |
||
264 | return null; |
||
265 | } |
||
266 | |||
267 | /** |
||
268 | * Removes data from a key in the registry |
||
269 | * |
||
270 | * @param string $key the key name that holds the data to remove |
||
271 | * @param string $registry the registry name |
||
272 | * |
||
273 | * @return bool true if successful, false otherwise |
||
274 | */ |
||
275 | public function removeData($key, $registry = null) |
||
276 | { |
||
277 | if ($registry == null) { |
||
0 ignored issues
–
show
|
|||
278 | $registry = $this->default; |
||
279 | } |
||
280 | |||
281 | if (is_string($key . $registry) && $this->registryExists($registry)) { |
||
282 | if (array_key_exists($key, $this->data[self::REGISTRY][$registry])) { |
||
283 | unset($this->data[self::REGISTRY][$registry][$key]); |
||
284 | $this->dirty = true; |
||
285 | return true; |
||
286 | } |
||
287 | } |
||
288 | return false; |
||
289 | } |
||
290 | |||
291 | /** |
||
292 | * Retrieves the number of keys in registry |
||
293 | * |
||
294 | * @param string $registry the registry name |
||
295 | * |
||
296 | * @return int the data length |
||
297 | */ |
||
298 | public function getLength($registry = null) |
||
299 | { |
||
300 | if ($registry == null) { |
||
0 ignored issues
–
show
|
|||
301 | $registry = $this->default; |
||
302 | } |
||
303 | if (is_string($registry) && $this->registryExists($registry)) { |
||
304 | return count($this->data[self::REGISTRY][$registry]); |
||
305 | } |
||
306 | return 0; |
||
307 | } |
||
308 | |||
309 | /** |
||
310 | * Retrieves a registry collection based on its name |
||
311 | * |
||
312 | * @param string $registry the name of the registry to retrieve |
||
313 | * |
||
314 | * @return mixed|null the registry, null if none found |
||
315 | */ |
||
316 | public function getRegistry($registry) |
||
317 | { |
||
318 | return $this->registryExists($registry) ? $this->data[self::REGISTRY][$registry] : null; |
||
319 | } |
||
320 | |||
321 | /** |
||
322 | * Checkes whether a collection exists (registry) |
||
323 | * |
||
324 | * @param string $registry the name of the registry to check existence |
||
325 | * |
||
326 | * @return bool |
||
327 | */ |
||
328 | public function registryExists($registry) |
||
329 | { |
||
330 | return array_key_exists($registry, $this->data[self::REGISTRY]); |
||
331 | } |
||
332 | |||
333 | /** |
||
334 | * Add new collection name |
||
335 | * |
||
336 | * @param string $registry the name of the registry (collection) to create |
||
337 | * |
||
338 | * @return bool |
||
339 | */ |
||
340 | public function addRegistry($registry) |
||
341 | { |
||
342 | if ($this->registryExists($registry)) { |
||
343 | return false; |
||
344 | } |
||
345 | $this->data[self::REGISTRY][$registry] = array(); |
||
346 | $this->dirty = true; |
||
347 | return true; |
||
348 | } |
||
349 | |||
350 | /** |
||
351 | * Remove an existing collection and all associated data |
||
352 | * |
||
353 | * @param string $registry the name of the registry to remove |
||
354 | * |
||
355 | * @return bool |
||
356 | */ |
||
357 | public function removeRegistry($registry) |
||
358 | { |
||
359 | if ($this->registryExists($registry)) { |
||
360 | unset($this->data[self::REGISTRY][$registry]); |
||
361 | $this->dirty = true; |
||
362 | return true; |
||
363 | } |
||
364 | return false; |
||
365 | } |
||
366 | |||
367 | /** |
||
368 | * Saves the global registry to the file |
||
369 | * @return bool |
||
370 | * @throws Exception |
||
371 | */ |
||
372 | private function flush() |
||
373 | { |
||
374 | // check if writeback is needed |
||
375 | if ($this->dirty == false) |
||
0 ignored issues
–
show
|
|||
376 | return true; |
||
377 | |||
378 | // prepare to writeback to file |
||
379 | $data = $this->data; |
||
380 | $registry = $this->encode($this->data[self::REGISTRY]); |
||
381 | $data[self::META]["updated"] = date("c"); |
||
382 | $data[self::META]["hash"] = md5($registry); |
||
383 | |||
384 | // overwrite existing data |
||
385 | $written = file_put_contents($this->getFile(), $this->encode($data)); |
||
386 | if ($written === false) |
||
387 | throw new Exception(strtr( 'Unable to write back to {FILE}. Data will be lost!', array('{FILE}' => $this->getFile()) )); |
||
388 | |||
389 | return true; |
||
390 | } |
||
391 | |||
392 | /** |
||
393 | * JSON encodes the data |
||
394 | * |
||
395 | * @param mixed $data |
||
396 | * |
||
397 | * @return string |
||
398 | */ |
||
399 | private function encode($data) |
||
400 | { |
||
401 | return function_exists('json_encode') ? json_encode($data) : CJSON::encode($data); |
||
402 | } |
||
403 | |||
404 | /** |
||
405 | * JSON decodes the data |
||
406 | * |
||
407 | * @param string $data |
||
408 | * |
||
409 | * @return mixed |
||
410 | */ |
||
411 | private function decode($data) |
||
412 | { |
||
413 | return function_exists('json_decode') ? json_decode($data, true) : CJSON::decode($data, true); |
||
414 | } |
||
415 | } |
||
416 |
When comparing two booleans, it is generally considered safer to use the strict comparison operator.