This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * Copyright (c) 2014-present, Facebook, Inc. All rights reserved. |
||
4 | * |
||
5 | * You are hereby granted a non-exclusive, worldwide, royalty-free license to |
||
6 | * use, copy, modify, and distribute this software in source code or binary |
||
7 | * form for use in connection with the web services and APIs provided by |
||
8 | * Facebook. |
||
9 | * |
||
10 | * As with any software that integrates with the Facebook platform, your use |
||
11 | * of this software is subject to the Facebook Developer Principles and |
||
12 | * Policies [http://developers.facebook.com/policy/]. This copyright notice |
||
13 | * shall be included in all copies or substantial portions of the software. |
||
14 | * |
||
15 | * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR |
||
16 | * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, |
||
17 | * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL |
||
18 | * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER |
||
19 | * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING |
||
20 | * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER |
||
21 | * DEALINGS IN THE SOFTWARE. |
||
22 | * |
||
23 | */ |
||
24 | |||
25 | namespace FacebookAds\Logger; |
||
26 | |||
27 | use FacebookAds\Http\FileParameter; |
||
28 | use FacebookAds\Http\Parameters; |
||
29 | use FacebookAds\Http\RequestInterface; |
||
30 | use FacebookAds\Http\ResponseInterface; |
||
31 | use FacebookAds\Logger\CurlLogger\JsonAwareParameters; |
||
32 | |||
33 | class CurlLogger implements LoggerInterface { |
||
34 | |||
35 | /** |
||
36 | * @var string |
||
37 | */ |
||
38 | const PARAM_DEFAULT_FLAG = 'd'; |
||
39 | |||
40 | /** |
||
41 | * @var string |
||
42 | */ |
||
43 | const PARAM_URLENCODE_FLAG = '-data-urlencode'; |
||
44 | |||
45 | /** |
||
46 | * @var string |
||
47 | */ |
||
48 | const PARAM_POST_FLAG = 'F'; |
||
49 | |||
50 | /** |
||
51 | * @var string |
||
52 | */ |
||
53 | const METHOD_DEFAULT_FLAG = ''; |
||
54 | |||
55 | /** |
||
56 | * @var string |
||
57 | */ |
||
58 | const METHOD_GET_FLAG = 'G'; |
||
59 | |||
60 | /** |
||
61 | * @var string |
||
62 | */ |
||
63 | const METHOD_PUT_FLAG = 'X PUT'; |
||
64 | |||
65 | /** |
||
66 | * @var string |
||
67 | */ |
||
68 | const METHOD_DELETE_FLAG = 'X DELETE'; |
||
69 | |||
70 | /** |
||
71 | * @var resource |
||
72 | */ |
||
73 | protected $handle; |
||
74 | |||
75 | /** |
||
76 | * @var bool |
||
77 | */ |
||
78 | protected $jsonPrettyPrint = false; |
||
79 | |||
80 | /** |
||
81 | * @param resource $handle |
||
82 | */ |
||
83 | 7 | public function __construct($handle = null) { |
|
84 | 7 | if (!defined('STDOUT')) { |
|
85 | define('STDOUT', fopen('php://stdout', 'w')); |
||
86 | } |
||
87 | 7 | $this->handle = is_resource($handle) ? $handle : STDOUT; |
|
88 | 7 | } |
|
89 | |||
90 | /** |
||
91 | * @return bool |
||
92 | */ |
||
93 | 5 | public function isJsonPrettyPrint() { |
|
94 | 5 | return $this->jsonPrettyPrint; |
|
95 | } |
||
96 | |||
97 | /** |
||
98 | * @param bool $json_pretty_print |
||
99 | * @return $this |
||
100 | */ |
||
101 | 1 | public function setJsonPrettyPrint($json_pretty_print) { |
|
102 | 1 | $this->jsonPrettyPrint = $json_pretty_print; |
|
103 | 1 | return $this; |
|
104 | } |
||
105 | |||
106 | /** |
||
107 | * @param string $method |
||
108 | * @return string |
||
109 | */ |
||
110 | 5 | public static function getMethodFlag($method) { |
|
111 | switch ($method) { |
||
112 | 5 | case RequestInterface::METHOD_GET: |
|
113 | 1 | return static::METHOD_GET_FLAG; |
|
114 | 4 | case RequestInterface::METHOD_PUT: |
|
115 | 1 | return static::METHOD_PUT_FLAG; |
|
116 | 3 | case RequestInterface::METHOD_DELETE: |
|
117 | 1 | return static::METHOD_DELETE_FLAG; |
|
118 | } |
||
119 | |||
120 | 2 | return static::METHOD_DEFAULT_FLAG; |
|
121 | } |
||
122 | |||
123 | /** |
||
124 | * @param string $method |
||
125 | * @param string $value |
||
126 | * @return string |
||
127 | */ |
||
128 | 5 | public static function getParamFlag($method, $value) { |
|
129 | return $method === RequestInterface::METHOD_POST |
||
130 | 5 | ? static::PARAM_POST_FLAG |
|
131 | 5 | : (strstr($value, "\n") |
|
132 | 4 | ? static::PARAM_URLENCODE_FLAG |
|
133 | 5 | : static::PARAM_DEFAULT_FLAG); |
|
134 | } |
||
135 | |||
136 | /** |
||
137 | * @param string $string |
||
138 | * @param int $indent |
||
139 | * @return string |
||
140 | */ |
||
141 | 1 | protected function indent($string, $indent) { |
|
142 | 1 | return str_replace("\n", " \n".str_repeat(' ', $indent), $string); |
|
143 | } |
||
144 | |||
145 | /** |
||
146 | * @param Parameters $params |
||
147 | * @param string $method |
||
148 | * @param bool $is_file |
||
149 | * @return string |
||
150 | */ |
||
151 | 5 | protected function processParams(Parameters $params, $method, $is_file) { |
|
152 | 5 | $chunks = array(); |
|
153 | 5 | if ($this->isJsonPrettyPrint()) { |
|
154 | 1 | $params = new JsonAwareParameters($params); |
|
155 | 1 | } |
|
156 | 5 | foreach ($params->export() as $name => $value) { |
|
157 | 5 | if ($is_file && $params->offsetGet($name) instanceof FileParameter) { |
|
158 | $value = "@" . $this->normalizeFileParam($params->offsetGet($name)); |
||
159 | } else { |
||
160 | 5 | $value = addcslashes( |
|
161 | 5 | strpos($value, "\n") !== false |
|
162 | 5 | ? $this->indent($value, 2) |
|
163 | 5 | : $value, |
|
164 | 5 | '\''); |
|
165 | } |
||
166 | 5 | $chunks[$name] = sprintf( |
|
167 | 5 | '-%s \'%s=%s\'', |
|
168 | 5 | $this->getParamFlag($method, $value), |
|
169 | 5 | $name, |
|
170 | 5 | $value); |
|
171 | 5 | } |
|
172 | |||
173 | 5 | return $chunks; |
|
174 | } |
||
175 | |||
176 | /** |
||
177 | * @param FileParameter $file_param |
||
178 | * @return string |
||
179 | */ |
||
180 | protected function normalizeFileParam(FileParameter $file_param) { |
||
181 | return sprintf('%s%s%s%s%s', |
||
182 | $file_param->getPath(), |
||
183 | $file_param->getMimeType() != null ? ";type=" : "", |
||
0 ignored issues
–
show
Bug
introduced
by
![]() |
|||
184 | $file_param->getMimeType(), |
||
185 | $file_param->getName() != null ? ";name=" : "", |
||
0 ignored issues
–
show
|
|||
186 | $file_param->getName()); |
||
187 | } |
||
188 | |||
189 | /** |
||
190 | * @param RequestInterface $request |
||
191 | * @return string |
||
192 | */ |
||
193 | 5 | protected function processUrl(RequestInterface $request) { |
|
194 | 5 | return $request->getProtocol().$request->getDomain() |
|
195 | 5 | .'/v'.$request->getGraphVersion().$request->getPath(); |
|
196 | } |
||
197 | |||
198 | /** |
||
199 | * @param string $buffer |
||
200 | */ |
||
201 | 5 | protected function flush($buffer) { |
|
202 | 5 | fwrite($this->handle, $buffer.PHP_EOL.PHP_EOL); |
|
203 | 5 | } |
|
204 | |||
205 | /** |
||
206 | * @param mixed $level |
||
207 | * @param string $message |
||
208 | * @param array $context |
||
209 | */ |
||
210 | 1 | public function log($level, $message, array $context = array()) { |
|
211 | // We only care about requests |
||
212 | 1 | } |
|
213 | |||
214 | /** |
||
215 | * @param array $array |
||
216 | * @param mixed $key |
||
217 | * @return mixed |
||
218 | */ |
||
219 | 5 | protected function removeArrayKey(array &$array, $key) { |
|
220 | 5 | if (array_key_exists($key, $array)) { |
|
221 | 4 | $value = $array[$key]; |
|
222 | 4 | unset($array[$key]); |
|
223 | 4 | return $value; |
|
224 | } else { |
||
225 | 1 | return null; |
|
226 | } |
||
227 | } |
||
228 | |||
229 | /** |
||
230 | * @param array $params |
||
231 | * @return array |
||
232 | */ |
||
233 | 5 | protected function sortParams(array $params) { |
|
234 | 5 | $access_token = $this->removeArrayKey($params, 'access_token'); |
|
235 | 5 | $appsecret_proof = $this->removeArrayKey($params, 'appsecret_proof'); |
|
236 | 5 | $access_token !== null && $params['access_token'] = $access_token; |
|
237 | 5 | $appsecret_proof !== null && $params['appsecret_proof'] = $appsecret_proof; |
|
238 | |||
239 | 5 | return $params; |
|
240 | } |
||
241 | |||
242 | /** |
||
243 | * @param string $level |
||
244 | * @param RequestInterface $request |
||
245 | * @param array $context |
||
246 | */ |
||
247 | 5 | public function logRequest( |
|
248 | $level, RequestInterface $request, array $context = array()) { |
||
249 | |||
250 | 5 | $new_line = ' \\'.PHP_EOL.' '; |
|
251 | 5 | $method = $request->getMethod(); |
|
252 | 5 | $method_flag = static::getMethodFlag($method); |
|
253 | 5 | $params = $this->sortParams(array_merge( |
|
254 | 5 | $this->processParams($request->getQueryParams(), $method, false), |
|
255 | 5 | $this->processParams($request->getBodyParams(), $method, false), |
|
256 | 5 | $this->processParams($request->getFileParams(), $method, true))); |
|
257 | |||
258 | 5 | $buffer = 'curl'.($method_flag ? ' -'.$method_flag : ''); |
|
259 | 5 | foreach ($params as $param) { |
|
260 | 5 | $buffer .= $new_line.$param; |
|
261 | 5 | } |
|
262 | 5 | $buffer .= $new_line.$this->processUrl($request); |
|
263 | |||
264 | 5 | $this->flush($buffer); |
|
265 | 5 | } |
|
266 | |||
267 | /** |
||
268 | * @param string $level |
||
269 | * @param ResponseInterface $response |
||
270 | * @param array $context |
||
271 | */ |
||
272 | 1 | public function logResponse( |
|
273 | $level, ResponseInterface $response, array $context = array()) { |
||
274 | // We only care about requests |
||
275 | 1 | } |
|
276 | } |
||
277 |