gplcart /
ga_report
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | /** |
||
| 4 | * @package Google Analytics Report |
||
| 5 | * @author Iurii Makukh <[email protected]> |
||
| 6 | * @copyright Copyright (c) 2017, Iurii Makukh <[email protected]> |
||
| 7 | * @license https://www.gnu.org/licenses/gpl-3.0.en.html GPL-3.0+ |
||
| 8 | */ |
||
| 9 | |||
| 10 | namespace gplcart\modules\ga_report\controllers; |
||
| 11 | |||
| 12 | use gplcart\core\controllers\backend\Controller; |
||
| 13 | use gplcart\modules\ga_report\models\Report; |
||
|
0 ignored issues
–
show
|
|||
| 14 | |||
| 15 | /** |
||
| 16 | * Handles incoming requests and outputs data related to Google Analytics Report module |
||
| 17 | */ |
||
| 18 | class Settings extends Controller |
||
| 19 | { |
||
| 20 | |||
| 21 | /** |
||
| 22 | * Google Analytics Report Report model instance |
||
| 23 | * @var \gplcart\modules\ga_report\models\Report $report_model |
||
| 24 | */ |
||
| 25 | protected $report_model; |
||
| 26 | |||
| 27 | /** |
||
| 28 | * Settings constructor. |
||
| 29 | * @param Report $report_model |
||
| 30 | */ |
||
| 31 | public function __construct(Report $report_model) |
||
| 32 | { |
||
| 33 | parent::__construct(); |
||
| 34 | |||
| 35 | $this->report_model = $report_model; |
||
| 36 | } |
||
| 37 | |||
| 38 | /** |
||
| 39 | * Route page callback |
||
| 40 | * Displays the module settings page |
||
| 41 | */ |
||
| 42 | public function editSettings() |
||
| 43 | { |
||
| 44 | $this->setTitleEditSettings(); |
||
| 45 | $this->setBreadcrumbEditSettings(); |
||
| 46 | |||
| 47 | $this->setData('stores', $this->store->getList()); |
||
| 48 | $this->setData('credentials', $this->getCredentialSettings()); |
||
| 49 | $this->setData('handlers', $this->report_model->getHandlers()); |
||
| 50 | $this->setData('settings', $this->module->getSettings('ga_report')); |
||
| 51 | |||
| 52 | $this->submitSettings(); |
||
| 53 | $this->outputEditSettings(); |
||
| 54 | } |
||
| 55 | |||
| 56 | /** |
||
| 57 | * Returns an array of Google API credentials |
||
| 58 | * @return array |
||
| 59 | */ |
||
| 60 | protected function getCredentialSettings() |
||
| 61 | { |
||
| 62 | /** @var \gplcart\modules\gapi\Main $instance */ |
||
| 63 | $instance = $this->module->getInstance('gapi'); |
||
| 64 | return $instance->getCredentials(array('type' => 'service')); |
||
| 65 | } |
||
| 66 | |||
| 67 | /** |
||
| 68 | * Set title on the module settings page |
||
| 69 | */ |
||
| 70 | protected function setTitleEditSettings() |
||
| 71 | { |
||
| 72 | $title = $this->text('Edit %name settings', array('%name' => $this->text('Google Analytics Report'))); |
||
| 73 | $this->setTitle($title); |
||
| 74 | } |
||
| 75 | |||
| 76 | /** |
||
| 77 | * Set breadcrumbs on the module settings page |
||
| 78 | */ |
||
| 79 | protected function setBreadcrumbEditSettings() |
||
| 80 | { |
||
| 81 | $breadcrumbs = array(); |
||
| 82 | |||
| 83 | $breadcrumbs[] = array( |
||
| 84 | 'url' => $this->url('admin'), |
||
| 85 | 'text' => $this->text('Dashboard') |
||
| 86 | ); |
||
| 87 | |||
| 88 | $breadcrumbs[] = array( |
||
| 89 | 'text' => $this->text('Modules'), |
||
| 90 | 'url' => $this->url('admin/module/list') |
||
| 91 | ); |
||
| 92 | |||
| 93 | $this->setBreadcrumbs($breadcrumbs); |
||
| 94 | } |
||
| 95 | |||
| 96 | /** |
||
| 97 | * Saves the submitted settings |
||
| 98 | */ |
||
| 99 | protected function submitSettings() |
||
| 100 | { |
||
| 101 | if ($this->isPosted('clear_cache')) { |
||
| 102 | $this->deleteCacheSettings(); |
||
| 103 | } else if ($this->isPosted('save') && $this->validateSettings()) { |
||
| 104 | $this->updateSettings(); |
||
| 105 | } |
||
| 106 | } |
||
| 107 | |||
| 108 | /** |
||
| 109 | * Deletes all Google Analytics cached data |
||
| 110 | */ |
||
| 111 | protected function deleteCacheSettings() |
||
| 112 | { |
||
| 113 | $this->report_model->clearCache(); |
||
| 114 | $this->redirect('', $this->text('Cache has been deleted'), 'success'); |
||
| 115 | } |
||
| 116 | |||
| 117 | /** |
||
| 118 | * Validate submitted module settings |
||
| 119 | */ |
||
| 120 | protected function validateSettings() |
||
| 121 | { |
||
| 122 | $this->setSubmitted('settings'); |
||
| 123 | |||
| 124 | $this->validateElement('limit', 'regexp', '/^[\d]{1,3}$/'); |
||
| 125 | $this->validateElement('cache', 'regexp', '/^[\d]{1,8}$/'); |
||
| 126 | $this->validateElement('credential_id', 'regexp', '/^[\d]{1,10}$/'); |
||
| 127 | |||
| 128 | $this->validateGaProfileSettings(); |
||
| 129 | |||
| 130 | return !$this->hasErrors(); |
||
| 131 | } |
||
| 132 | |||
| 133 | /** |
||
| 134 | * Validates Google Analytics profiles |
||
| 135 | */ |
||
| 136 | protected function validateGaProfileSettings() |
||
| 137 | { |
||
| 138 | $profiles = $this->getSubmitted('ga_profile_id', array()); |
||
| 139 | |||
| 140 | if (empty($profiles)) { |
||
| 141 | $this->setError('ga_profile_id', $this->text('Profile ID is required')); |
||
| 142 | return false; |
||
| 143 | } |
||
| 144 | |||
| 145 | $stores = $this->store->getList(); |
||
| 146 | |||
| 147 | foreach ($profiles as $store_id => $profile_id) { |
||
| 148 | |||
| 149 | if (empty($profile_id)) { |
||
| 150 | $this->setError('ga_profile_id', $this->text('Profile ID is required')); |
||
| 151 | return false; |
||
| 152 | } |
||
| 153 | |||
| 154 | if (empty($stores[$store_id])) { |
||
| 155 | $this->setError('ga_profile_id', $this->text('Unknown store ID')); |
||
| 156 | return false; |
||
| 157 | } |
||
| 158 | } |
||
| 159 | |||
| 160 | return true; |
||
| 161 | } |
||
| 162 | |||
| 163 | /** |
||
| 164 | * Update module settings |
||
| 165 | */ |
||
| 166 | protected function updateSettings() |
||
| 167 | { |
||
| 168 | $this->controlAccess('module_edit'); |
||
| 169 | |||
| 170 | $this->module->setSettings('ga_report', $this->getSubmitted()); |
||
| 171 | $this->redirect('', $this->text('Settings have been updated'), 'success'); |
||
| 172 | } |
||
| 173 | |||
| 174 | /** |
||
| 175 | * Render and output the module settings page |
||
| 176 | */ |
||
| 177 | protected function outputEditSettings() |
||
| 178 | { |
||
| 179 | $this->output('ga_report|settings'); |
||
| 180 | } |
||
| 181 | |||
| 182 | } |
||
| 183 |
Let’s assume that you have a directory layout like this:
. |-- OtherDir | |-- Bar.php | `-- Foo.php `-- SomeDir `-- Foo.phpand let’s assume the following content of
Bar.php:If both files
OtherDir/Foo.phpandSomeDir/Foo.phpare loaded in the same runtime, you will see a PHP error such as the following:PHP Fatal error: Cannot use SomeDir\Foo as Foo because the name is already in use in OtherDir/Foo.phpHowever, as
OtherDir/Foo.phpdoes not necessarily have to be loaded and the error is only triggered if it is loaded beforeOtherDir/Bar.php, this problem might go unnoticed for a while. In order to prevent this error from surfacing, you must import the namespace with a different alias: