This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | /* |
||
4 | * Cart module for Yii2 |
||
5 | * |
||
6 | * @link https://github.com/hiqdev/yii2-cart |
||
7 | * @package yii2-cart |
||
8 | * @license BSD-3-Clause |
||
9 | * @copyright Copyright (c) 2015-2016, HiQDev (http://hiqdev.com/) |
||
10 | */ |
||
11 | |||
12 | namespace hiqdev\yii2\cart; |
||
13 | |||
14 | use hiqdev\yii2\cart\behaviors\EnsureDeleteRelatedPosition; |
||
15 | use Yii; |
||
16 | use yii\base\Event; |
||
17 | use yz\shoppingcart\CartActionEvent; |
||
18 | |||
19 | /** |
||
20 | * Class ShoppingCart. |
||
21 | * @property CartPositionInterface[] $positions |
||
22 | */ |
||
23 | class ShoppingCart extends \yz\shoppingcart\ShoppingCart |
||
24 | { |
||
25 | /** |
||
26 | * @var CartPositionInterface[] |
||
27 | * TODO make local AbstractCartPosition |
||
28 | */ |
||
29 | protected $_positions = []; |
||
30 | |||
31 | /** |
||
32 | * The cart module. |
||
33 | */ |
||
34 | public $module; |
||
35 | |||
36 | public function behaviors() |
||
37 | { |
||
38 | return [ |
||
39 | 1 | [ |
|
40 | 'class' => EnsureDeleteRelatedPosition::class, |
||
41 | 1 | ] |
|
42 | ]; |
||
43 | } |
||
44 | 1 | ||
45 | /** |
||
46 | 1 | * @return integer |
|
47 | 1 | */ |
|
48 | 1 | public function getCount(): int |
|
49 | { |
||
50 | $count = 0; |
||
51 | 1 | foreach ($this->_positions as $position) { |
|
52 | if (!$position->hasParent()) { |
||
53 | $count += 1; |
||
54 | 2 | } |
|
55 | } |
||
56 | 2 | ||
57 | return $count; |
||
58 | } |
||
59 | 2 | ||
60 | public function findRelatedFor(CartPositionInterface $parent): ?CartPositionInterface |
||
61 | 2 | { |
|
62 | foreach ($this->_positions as $position) { |
||
63 | if ($position->hasParent() && $position->parent_id === $parent->getId()) { |
||
0 ignored issues
–
show
|
|||
64 | 1 | return $position; |
|
65 | } |
||
66 | 1 | } |
|
67 | |||
68 | return null; |
||
69 | 1 | } |
|
70 | |||
71 | 1 | /** |
|
72 | * @return CartPositionInterface[] |
||
73 | */ |
||
74 | public function getRootPositions(): array |
||
75 | { |
||
76 | return array_filter($this->getPositions(), static function (CartPositionInterface $position): bool { |
||
77 | return !$position->hasParent(); |
||
78 | }); |
||
79 | } |
||
80 | |||
81 | public function getQuantity() |
||
82 | { |
||
83 | $count = 0; |
||
84 | foreach ($this->_positions as $position) { |
||
85 | $count += $position->getQuantity(); |
||
86 | } |
||
87 | |||
88 | return $count; |
||
89 | } |
||
90 | |||
91 | public function getSubtotal() |
||
92 | { |
||
93 | return $this->getCost(false); |
||
94 | } |
||
95 | |||
96 | public function getTotal() |
||
97 | { |
||
98 | return $this->getCost(true); |
||
99 | } |
||
100 | |||
101 | public function getDiscount() |
||
102 | { |
||
103 | return $this->getTotal() - $this->getSubtotal(); |
||
104 | } |
||
105 | |||
106 | public function formatCurrency($sum, $currency = null) |
||
107 | { |
||
108 | return $sum !== null ? Yii::$app->formatter->format($sum, ['currency', $currency ?? $this->getCurrency()]) : '--'; |
||
109 | } |
||
110 | |||
111 | /** |
||
112 | * Sets cart from serialized string |
||
113 | * @param string $serialized |
||
114 | */ |
||
115 | public function setSerialized($serialized) |
||
116 | { |
||
117 | try { |
||
118 | parent::setSerialized($serialized); |
||
119 | } catch (\Exception $e) { |
||
120 | Yii::error('Failed to unserlialize cart: ' . $e->getMessage(), __METHOD__); |
||
121 | $this->_positions = []; |
||
122 | $this->saveToSession(); |
||
123 | } |
||
124 | } |
||
125 | |||
126 | /** |
||
127 | * Checks whether any of cart positions has error in `id` attribute. |
||
128 | * @return boolean |
||
129 | */ |
||
130 | public function hasErrors() |
||
131 | { |
||
132 | foreach ($this->_positions as $position) { |
||
133 | if ($position->hasErrors('id')) { |
||
0 ignored issues
–
show
The method
hasErrors() does not seem to exist on object<hiqdev\yii2\cart\CartPositionInterface> .
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces. This is most likely a typographical error or the method has been renamed. ![]() |
|||
134 | return true; |
||
135 | } |
||
136 | } |
||
137 | |||
138 | return false; |
||
139 | } |
||
140 | |||
141 | /** |
||
142 | * @param CartPositionInterface[] $positions |
||
143 | */ |
||
144 | public function putPositions($positions) |
||
145 | { |
||
146 | foreach ($positions as $position) { |
||
147 | if (isset($this->_positions[$position->getId()])) { |
||
148 | if ($position instanceof DontIncrementQuantityWhenAlreadyInCart) { |
||
149 | continue; |
||
150 | } |
||
151 | $existingPosition = $this->_positions[$position->getId()]; |
||
152 | $existingPosition->setQuantity($existingPosition->getQuantity() + 1); |
||
153 | } else { |
||
154 | if ($position->getQuantity() <= 0) { |
||
155 | $position->setQuantity(1); |
||
156 | } |
||
157 | $this->_positions[$position->getId()] = $position; |
||
158 | $this->trigger(self::EVENT_POSITION_PUT, new CartActionEvent([ |
||
159 | 'action' => CartActionEvent::ACTION_POSITION_PUT, |
||
160 | 'position' => $position, |
||
161 | ])); |
||
162 | } |
||
163 | } |
||
164 | |||
165 | $this->trigger(self::EVENT_CART_CHANGE, new CartActionEvent([ |
||
166 | 'action' => CartActionEvent::ACTION_POSITION_PUT, |
||
167 | ])); |
||
168 | if ($this->storeInSession) |
||
169 | $this->saveToSession(); |
||
170 | } |
||
171 | |||
172 | |||
173 | /** |
||
174 | * This cart does not support multi-currency checkout. |
||
175 | * |
||
176 | * @return string|null When the cart is empty, returns {@see getDefaultCurrency()}. |
||
177 | * When cart has at least one position, returns the first position currency. |
||
178 | * Note, that the position currency may be undefined – in this case, `null` will be returned. |
||
179 | */ |
||
180 | public function getCurrency(): ?string |
||
181 | { |
||
182 | if (empty($this->_positions)) { |
||
183 | return $this->getDefaultCurrency(); |
||
184 | } |
||
185 | |||
186 | return reset($this->_positions)->currency; |
||
187 | } |
||
188 | |||
189 | /** |
||
190 | * Returns a default cart currency |
||
191 | * |
||
192 | * @return string |
||
193 | */ |
||
194 | public function getDefaultCurrency(): string |
||
195 | { |
||
196 | return Yii::$app->params['currency']; |
||
197 | } |
||
198 | |||
199 | /** |
||
200 | * @return array |
||
201 | */ |
||
202 | public function getAdditionalLinks(): array |
||
203 | { |
||
204 | $links = []; |
||
205 | $positions = $this->_positions; |
||
206 | if (empty($positions)) { |
||
207 | return $links; |
||
208 | } |
||
209 | |||
210 | foreach ($positions as $position) { |
||
211 | $additionalLinks = $position->getAdditionalLinks(); |
||
212 | if (!empty($additionalLinks)) { |
||
213 | foreach ($additionalLinks as $link) { |
||
214 | [$url, $label] = $link; |
||
0 ignored issues
–
show
|
|||
215 | if ($url && $label && !isset($links[$url])) { |
||
216 | $links[$url] = $label; |
||
217 | } |
||
218 | } |
||
219 | } |
||
220 | } |
||
221 | |||
222 | return $links; |
||
223 | } |
||
224 | |||
225 | /** |
||
226 | * @var CartActionEvent[]|null |
||
227 | */ |
||
228 | private $_accumulatedEvents; |
||
229 | public function trigger($name, Event $event = null) |
||
230 | { |
||
231 | if (is_array($this->_accumulatedEvents)) { |
||
232 | \Yii::info("Shopping cart accumulates event $name"); |
||
233 | $this->_accumulatedEvents[] = [$name, $event]; |
||
234 | } else { |
||
235 | parent::trigger($name, $event); |
||
236 | } |
||
237 | } |
||
238 | |||
239 | /** |
||
240 | * Runs $closure and accumulates all events occurred during $closure run. |
||
241 | * Events get released immediately after a success $closure run. |
||
242 | * |
||
243 | * The method can be used to prevent useless calculations that happen after |
||
244 | * bunch of similar updates on a cart. |
||
245 | * |
||
246 | * @param \Closure $closure |
||
247 | */ |
||
248 | public function accumulateEvents(\Closure $closure): void |
||
249 | { |
||
250 | $this->_accumulatedEvents = []; |
||
251 | try { |
||
252 | $closure(); |
||
253 | $events = $this->_accumulatedEvents; |
||
254 | $this->_accumulatedEvents = null; |
||
255 | foreach ($events as [$name, $event]) { |
||
256 | \Yii::info("Releases event $name"); |
||
0 ignored issues
–
show
|
|||
257 | $this->trigger($name, $event); |
||
0 ignored issues
–
show
|
|||
258 | } |
||
259 | } finally { |
||
260 | $this->_accumulatedEvents = null; |
||
261 | } |
||
262 | } |
||
263 | } |
||
264 |
If you access a property on an interface, you most likely code against a concrete implementation of the interface.
Available Fixes
Adding an additional type check:
Changing the type hint: