This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Finance module for HiPanel |
||
| 4 | * |
||
| 5 | * @link https://github.com/hiqdev/hipanel-module-finance |
||
| 6 | * @package hipanel-module-finance |
||
| 7 | * @license BSD-3-Clause |
||
| 8 | * @copyright Copyright (c) 2015-2019, HiQDev (http://hiqdev.com/) |
||
| 9 | */ |
||
| 10 | |||
| 11 | namespace hipanel\modules\finance\models; |
||
| 12 | |||
| 13 | use hipanel\base\ModelTrait; |
||
| 14 | use Money\Currencies\ISOCurrencies; |
||
| 15 | use Money\Currency; |
||
|
0 ignored issues
–
show
|
|||
| 16 | use Money\Formatter\DecimalMoneyFormatter; |
||
| 17 | use Money\Money; |
||
| 18 | use Money\Parser\DecimalMoneyParser; |
||
| 19 | use Yii; |
||
| 20 | use yii\behaviors\AttributeTypecastBehavior; |
||
| 21 | use yii\validators\NumberValidator; |
||
| 22 | |||
| 23 | /** |
||
| 24 | * @property array $sums |
||
| 25 | */ |
||
| 26 | class CertificatePrice extends Price |
||
| 27 | { |
||
| 28 | use ModelTrait; |
||
| 29 | |||
| 30 | public const TYPE_CERT_PURCHASE = 'certificate,certificate_purchase'; |
||
| 31 | public const TYPE_CERT_RENEWAL = 'certificate,certificate_renewal'; |
||
| 32 | |||
| 33 | /** |
||
| 34 | * @var DecimalMoneyFormatter |
||
| 35 | */ |
||
| 36 | private $moneyFormatter; |
||
| 37 | |||
| 38 | /** |
||
| 39 | * @var DecimalMoneyParser |
||
| 40 | */ |
||
| 41 | private $moneyParser; |
||
| 42 | |||
| 43 | public function __construct(array $config = []) |
||
| 44 | { |
||
| 45 | parent::__construct($config); |
||
| 46 | $this->moneyFormatter = new DecimalMoneyFormatter(new ISOCurrencies()); |
||
| 47 | $this->moneyParser = new DecimalMoneyParser(new ISOCurrencies()); |
||
| 48 | } |
||
| 49 | |||
| 50 | public static function tableName() |
||
| 51 | { |
||
| 52 | return 'price'; |
||
| 53 | } |
||
| 54 | |||
| 55 | public function behaviors() |
||
| 56 | { |
||
| 57 | return [ |
||
| 58 | 'typecastAfterFind' => [ |
||
| 59 | 'class' => AttributeTypecastBehavior::class, |
||
| 60 | 'attributeTypes' => [ |
||
| 61 | 'sums' => function ($sums) { |
||
| 62 | foreach ($sums as $key => $value) { |
||
| 63 | $sums[$key] = new Money($value, new Currency(strtoupper($this->currency))); |
||
| 64 | } |
||
| 65 | |||
| 66 | return $sums; |
||
| 67 | }, ], |
||
| 68 | 'typecastAfterFind' => true, |
||
| 69 | 'typecastAfterValidate' => false, |
||
| 70 | 'typecastBeforeSave' => false, |
||
| 71 | ], |
||
| 72 | 'typecastBeforeSave' => [ |
||
| 73 | 'class' => AttributeTypecastBehavior::class, |
||
| 74 | 'attributeTypes' => [ |
||
| 75 | 'sums' => function ($sums) { |
||
| 76 | foreach ($sums as $key => $value) { |
||
| 77 | $sums[$key] = $this->moneyParser |
||
| 78 | ->parse($value, strtoupper($this->currency)) |
||
| 79 | ->getAmount(); |
||
| 80 | } |
||
| 81 | |||
| 82 | return $sums; |
||
| 83 | }, ], |
||
| 84 | 'typecastAfterFind' => false, |
||
| 85 | 'typecastAfterValidate' => false, |
||
| 86 | 'typecastBeforeSave' => true, |
||
| 87 | ], |
||
| 88 | ]; |
||
| 89 | } |
||
| 90 | |||
| 91 | public function rules() |
||
| 92 | { |
||
| 93 | $rules = parent::rules(); |
||
| 94 | $rules['create-required'] = [ |
||
| 95 | ['object_id'], |
||
| 96 | 'required', |
||
| 97 | 'on' => ['create', 'update'], |
||
| 98 | 'when' => function ($model) { |
||
| 99 | /** @var self $model */ |
||
| 100 | return $model->isTypeCorrect(); |
||
|
0 ignored issues
–
show
The method
isTypeCorrect does not exist on object<hipanel\modules\f...nce\models\Calculation>? Since you implemented __call, maybe consider adding a @method annotation.
If you implement This is often the case, when class ParentClass {
private $data = array();
public function __call($method, array $args) {
if (0 === strpos($method, 'get')) {
return $this->data[strtolower(substr($method, 3))];
}
throw new \LogicException(sprintf('Unsupported method: %s', $method));
}
}
/**
* If this class knows which fields exist, you can specify the methods here:
*
* @method string getName()
*/
class SomeClass extends ParentClass { }
Loading history...
|
|||
| 101 | }, |
||
| 102 | ]; |
||
| 103 | $rules[] = [['certificateType'], 'safe']; |
||
| 104 | $rules[] = [['sums'], 'validatePrices', 'on' => ['create', 'update']]; |
||
| 105 | $rules[] = [['sums'], 'number', 'min' => 0, 'when' => function () { |
||
| 106 | return false; |
||
| 107 | }]; |
||
| 108 | $rules[] = [['sums'], 'each', 'rule' => ['number', 'min' => 0]]; |
||
| 109 | |||
| 110 | return $rules; |
||
| 111 | } |
||
| 112 | |||
| 113 | /** |
||
| 114 | * @return bool |
||
| 115 | */ |
||
| 116 | public function isTypeCorrect(): bool |
||
| 117 | { |
||
| 118 | return isset($this->getTypes()[$this->type]); |
||
| 119 | } |
||
| 120 | |||
| 121 | /** |
||
| 122 | * @return array |
||
| 123 | */ |
||
| 124 | public static function getPeriods() |
||
| 125 | { |
||
| 126 | return [ |
||
| 127 | 1 => Yii::t('hipanel:finance:tariff', '{n, plural, one{# year} other{# years}}', ['n' => 1]), |
||
| 128 | // XXX only 1 year available now |
||
| 129 | // 2 => Yii::t('hipanel:finance:tariff', '{n, plural, one{# year} other{# years}}', ['n' => 2]), |
||
| 130 | ]; |
||
| 131 | } |
||
| 132 | |||
| 133 | /** |
||
| 134 | * @return array |
||
| 135 | */ |
||
| 136 | public function getAvailablePeriods() |
||
| 137 | { |
||
| 138 | $periods = []; |
||
| 139 | foreach (self::getPeriods() as $period => $message) { |
||
| 140 | if ($this->hasPriceForPeriod($period)) { |
||
| 141 | $periods[$period] = $message; |
||
| 142 | } |
||
| 143 | } |
||
| 144 | |||
| 145 | return $periods; |
||
| 146 | } |
||
| 147 | |||
| 148 | /** |
||
| 149 | * @param int $period |
||
| 150 | * @return string|null |
||
| 151 | */ |
||
| 152 | public function getPriceForPeriod(int $period) |
||
| 153 | { |
||
| 154 | return $this->moneyFormatter->format($this->getMoneyForPeriod($period)); |
||
| 155 | } |
||
| 156 | |||
| 157 | public function getMoneyForPeriod(int $period): ?Money |
||
| 158 | { |
||
| 159 | if (!$this->hasPriceForPeriod($period)) { |
||
| 160 | return null; |
||
| 161 | } |
||
| 162 | |||
| 163 | return $this->sums[$period]; |
||
| 164 | } |
||
| 165 | |||
| 166 | /** |
||
| 167 | * @param int $period |
||
| 168 | * @return bool |
||
| 169 | */ |
||
| 170 | public function hasPriceForPeriod(int $period) |
||
| 171 | { |
||
| 172 | return !empty($this->sums[$period]); |
||
| 173 | } |
||
| 174 | |||
| 175 | public function validatePrices(): bool |
||
| 176 | { |
||
| 177 | $periods = $this->getPeriods(); |
||
| 178 | $validator = new NumberValidator(); |
||
| 179 | |||
| 180 | foreach (array_keys($periods) as $period) { |
||
| 181 | $validation = $validator->validate($this->sums[$period]); |
||
| 182 | if ($validation === false) { |
||
| 183 | unset($this->sums[$period]); |
||
| 184 | } |
||
| 185 | } |
||
| 186 | |||
| 187 | return true; |
||
| 188 | } |
||
| 189 | |||
| 190 | /** |
||
| 191 | * @return array |
||
| 192 | */ |
||
| 193 | public static function getTypes() |
||
| 194 | { |
||
| 195 | return [ |
||
| 196 | static::TYPE_CERT_PURCHASE => Yii::t('hipanel:finance:tariff', 'Purchase'), |
||
| 197 | static::TYPE_CERT_RENEWAL => Yii::t('hipanel:finance:tariff', 'Renewal'), |
||
| 198 | ]; |
||
| 199 | } |
||
| 200 | } |
||
| 201 |
Let’s assume that you have a directory layout like this:
. |-- OtherDir | |-- Bar.php | `-- Foo.php `-- SomeDir `-- Foo.phpand let’s assume the following content of
Bar.php:If both files
OtherDir/Foo.phpandSomeDir/Foo.phpare loaded in the same runtime, you will see a PHP error such as the following:PHP Fatal error: Cannot use SomeDir\Foo as Foo because the name is already in use in OtherDir/Foo.phpHowever, as
OtherDir/Foo.phpdoes not necessarily have to be loaded and the error is only triggered if it is loaded beforeOtherDir/Bar.php, this problem might go unnoticed for a while. In order to prevent this error from surfacing, you must import the namespace with a different alias: