This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace HM\BackUpWordPress; |
||
4 | |||
5 | /** |
||
6 | * An abstract service class, individual services should |
||
7 | * extend this class |
||
8 | */ |
||
9 | abstract class Service { |
||
10 | |||
11 | /** |
||
12 | * Human readable name for this service |
||
13 | * @var string |
||
14 | */ |
||
15 | public $name; |
||
16 | |||
17 | /** |
||
18 | * The instance Backup_Schedule that this service is |
||
19 | * is currently working with |
||
20 | * |
||
21 | * @var Scheduled_Backup |
||
22 | */ |
||
23 | protected $schedule; |
||
24 | |||
25 | public function __construct( Scheduled_Backup $schedule ) { |
||
26 | $this->set_schedule( $schedule ); |
||
27 | } |
||
28 | |||
29 | /** |
||
30 | * Used to determine if the service is in use or not |
||
31 | * |
||
32 | * @return boolean |
||
33 | */ |
||
34 | abstract public function is_service_active(); |
||
35 | |||
36 | /** |
||
37 | * The form to output as part of the schedule settings |
||
38 | * |
||
39 | * If you don't want a whole form return ''; here and use @field instead |
||
40 | * |
||
41 | * @return string The raw HTML for the form you want to output |
||
42 | */ |
||
43 | abstract public function form(); |
||
44 | |||
45 | /** |
||
46 | * The field to output as part of the schedule settings |
||
47 | * |
||
48 | * If you don't want a field return ''; here and use @form instead |
||
49 | * |
||
50 | * @return string The raw HTML for the field you want to output |
||
51 | */ |
||
52 | abstract public function field(); |
||
53 | |||
54 | /** |
||
55 | * Help text that should be output in the Constants help tab |
||
56 | * |
||
57 | * @return string The raw HTML for the Constant help text you want to output |
||
0 ignored issues
–
show
|
|||
58 | */ |
||
59 | public static function constant() {} |
||
60 | |||
61 | /** |
||
62 | * Validate and sanitize data before it's saved. |
||
63 | * |
||
64 | * @param array &$new_data An array or data from $_GET, passed by reference so it can be modified, |
||
65 | * @param array $old_data The old data thats going to be overwritten |
||
66 | * @return array $error Array of validation errors e.g. return array( 'email' => 'not valid' ); |
||
67 | */ |
||
68 | abstract public function update( &$new_data, $old_data ); |
||
69 | |||
70 | /** |
||
71 | * The string to be output as part of the schedule sentence |
||
72 | * |
||
73 | * @return string |
||
74 | */ |
||
75 | abstract public function display(); |
||
76 | |||
77 | /** |
||
78 | * Receives actions from the backup |
||
79 | * |
||
80 | * This is where the service should do it's thing |
||
81 | * |
||
82 | * @see Backup::do_action for a list of the actions |
||
83 | * |
||
84 | * @param $action |
||
85 | * @param Backup $backup |
||
86 | * |
||
87 | * @return mixed |
||
88 | */ |
||
89 | public function action( $action, Backup $backup ) {} |
||
90 | |||
91 | public function get_slug() { |
||
0 ignored issues
–
show
The return type could not be reliably inferred; please add a
@return annotation.
Our type inference engine in quite powerful, but sometimes the code does not
provide enough clues to go by. In these cases we request you to add a ![]() |
|||
92 | return sanitize_key( $this->name ); |
||
93 | } |
||
94 | |||
95 | /** |
||
96 | * Utility for getting a formated html input name attribute |
||
97 | * |
||
98 | * @param string $name The name of the field |
||
99 | * @return string The formated name |
||
100 | */ |
||
101 | protected function get_field_name( $name ) { |
||
102 | return esc_attr( $this->get_slug() . '[' . $name . ']' ); |
||
103 | } |
||
104 | |||
105 | /** |
||
106 | * Get the value of a field |
||
107 | * |
||
108 | * @param string $name The name of the field |
||
109 | * @param string $esc The escaping function that should be used |
||
110 | * @return string |
||
111 | */ |
||
112 | protected function get_field_value( $name, $esc = 'esc_attr' ) { |
||
113 | |||
114 | if ( $name && $this->schedule->get_service_options( $this->get_slug(), $name ) ) { |
||
115 | return $esc( $this->schedule->get_service_options( $this->get_slug(), $name ) ); |
||
116 | } |
||
117 | |||
118 | return ''; |
||
119 | |||
120 | } |
||
121 | |||
122 | /** |
||
123 | * Save the settings for this service |
||
124 | * |
||
125 | * @return null|array returns null on success, array of errors on failure |
||
126 | */ |
||
127 | public function save() { |
||
128 | |||
129 | $classname = $this->get_slug(); |
||
130 | |||
131 | $old_data = $this->schedule->get_service_options( $classname ); |
||
132 | |||
133 | $new_data = isset( $_POST[ $classname ] ) ? $_POST[ $classname ] : array(); |
||
134 | |||
135 | // $new_data is passed by ref, so it is clean after this method call. |
||
136 | $errors = $this->update( $new_data, $old_data ); |
||
137 | |||
138 | if ( $errors && $errors = array_flip( $errors ) ) { |
||
0 ignored issues
–
show
The expression
$errors of type array is implicitly converted to a boolean; are you sure this is intended? If so, consider using ! empty($expr) instead to make it clear that you intend to check for an array without elements.
This check marks implicit conversions of arrays to boolean values in a comparison. While in PHP an empty array is considered to be equal (but not identical) to false, this is not always apparent. Consider making the comparison explicit by using ![]() |
|||
139 | |||
140 | foreach ( $errors as $error => &$field ) { |
||
141 | $field = $this->get_slug() . '[' . $field . ']'; |
||
142 | } |
||
143 | |||
144 | return array_flip( $errors ); |
||
145 | |||
146 | } |
||
147 | |||
148 | // Only overwrite settings if they changed |
||
149 | if ( ! empty( $new_data ) ) { |
||
150 | $this->schedule->set_service_options( $classname, $new_data ); |
||
151 | } |
||
152 | |||
153 | return array(); |
||
154 | |||
155 | } |
||
156 | |||
157 | /** |
||
158 | * Set the current schedule object |
||
159 | * |
||
160 | * @param Scheduled_Backup $schedule An instantiated schedule object |
||
161 | */ |
||
162 | public function set_schedule( Scheduled_Backup $schedule ) { |
||
163 | $this->schedule = $schedule; |
||
164 | } |
||
165 | |||
166 | /** |
||
167 | * Gets the settings for a similar destination from the existing schedules |
||
168 | * so that we can copy them into the form to avoid having to type them again |
||
169 | * |
||
170 | * @return array |
||
171 | */ |
||
172 | protected function fetch_destination_settings() { |
||
173 | |||
174 | $service = $this->get_slug(); |
||
175 | |||
176 | $schedules_obj = Schedules::get_instance(); |
||
177 | |||
178 | $schedules = $schedules_obj->get_schedules(); |
||
179 | |||
180 | foreach ( $schedules as $schedule ) { |
||
181 | |||
182 | if ( $schedule->get_id() != $this->schedule->get_id() ) { |
||
183 | |||
184 | $options = $schedule->get_service_options( $service ); |
||
185 | |||
186 | if ( ! empty( $options ) ) { |
||
187 | return $options; |
||
188 | } |
||
189 | } |
||
190 | } |
||
191 | |||
192 | return array(); |
||
193 | |||
194 | } |
||
195 | |||
196 | /** |
||
197 | * @return boolean |
||
198 | */ |
||
199 | public function has_form() { |
||
200 | |||
201 | ob_start(); |
||
202 | |||
203 | $this->form(); |
||
204 | |||
205 | return (bool) ob_get_clean(); |
||
206 | |||
207 | } |
||
208 | |||
209 | /** |
||
210 | * Handles passing service specific data to Intercom |
||
211 | */ |
||
212 | public static function intercom_data() {} |
||
213 | |||
214 | public static function intercom_data_html() {} |
||
215 | } |
||
216 |
This check compares the return type specified in the
@return
annotation of a function or method doc comment with the types returned by the function and raises an issue if they mismatch.