jarednova /
timber
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | /** |
||
| 4 | * Timber Class. |
||
| 5 | * |
||
| 6 | * Main class called Timber for this plugin. |
||
| 7 | * |
||
| 8 | * Usage: |
||
| 9 | * $posts = Timber::get_posts(); |
||
| 10 | * $posts = Timber::get_posts('post_type = article') |
||
| 11 | * $posts = Timber::get_posts(array('post_type' => 'article', 'category_name' => 'sports')); // uses wp_query format. |
||
| 12 | * $posts = Timber::get_posts(array(23,24,35,67), 'InkwellArticle'); |
||
| 13 | * |
||
| 14 | * $context = Timber::get_context(); // returns wp favorites! |
||
| 15 | * $context['posts'] = $posts; |
||
| 16 | * Timber::render('index.twig', $context); |
||
| 17 | */ |
||
| 18 | class Timber { |
||
| 19 | |||
| 20 | public static $locations; |
||
| 21 | public static $dirname; |
||
| 22 | public static $twig_cache = false; |
||
| 23 | public static $cache = false; |
||
| 24 | public static $auto_meta = true; |
||
| 25 | public static $autoescape = false; |
||
| 26 | |||
| 27 | /** |
||
| 28 | * @codeCoverageIgnore |
||
| 29 | */ |
||
| 30 | public function __construct() { |
||
| 31 | if ( !defined('ABSPATH') ) { |
||
| 32 | return; |
||
| 33 | } |
||
| 34 | $this->test_compatibility(); |
||
| 35 | $this->init_constants(); |
||
| 36 | $this->init(); |
||
| 37 | } |
||
| 38 | |||
| 39 | /** |
||
| 40 | * Tests whether we can use Timber |
||
| 41 | * @codeCoverageIgnore |
||
| 42 | * @return |
||
| 43 | */ |
||
| 44 | protected function test_compatibility() { |
||
| 45 | if ( is_admin() || $_SERVER['PHP_SELF'] == '/wp-login.php' ) { |
||
| 46 | return; |
||
| 47 | } |
||
| 48 | if ( version_compare( phpversion(), '5.3.0', '<' ) && !is_admin() ) { |
||
| 49 | trigger_error( 'Timber requires PHP 5.3.0 or greater. You have '.phpversion(), E_USER_ERROR ); |
||
| 50 | } |
||
| 51 | if ( !class_exists( 'Twig_Autoloader' ) ) { |
||
| 52 | trigger_error( 'You have not run "composer install" to download required dependencies for Timber, you can read more on https://github.com/jarednova/timber#installation', E_USER_ERROR ); |
||
| 53 | } |
||
| 54 | } |
||
| 55 | |||
| 56 | function init_constants() { |
||
| 57 | defined( "TIMBER_LOC" ) or define( "TIMBER_LOC", realpath( dirname(__DIR__) ) ); |
||
| 58 | } |
||
| 59 | |||
| 60 | /** |
||
| 61 | * @codeCoverageIgnore |
||
| 62 | */ |
||
| 63 | protected function init() { |
||
| 64 | TimberTwig::init(); |
||
| 65 | TimberRoutes::init( $this ); |
||
| 66 | TimberImageHelper::init(); |
||
| 67 | TimberAdmin::init(); |
||
| 68 | TimberIntegrations::init(); |
||
| 69 | } |
||
| 70 | |||
| 71 | /* Post Retrieval Routine |
||
| 72 | ================================ */ |
||
| 73 | |||
| 74 | /** |
||
| 75 | * Get post. |
||
| 76 | * |
||
| 77 | * @param mixed $query |
||
| 78 | * @param string $PostClass |
||
| 79 | * @return array|bool|null |
||
| 80 | */ |
||
| 81 | public static function get_post( $query = false, $PostClass = 'TimberPost' ) { |
||
| 82 | return TimberPostGetter::get_post( $query, $PostClass ); |
||
| 83 | } |
||
| 84 | |||
| 85 | /** |
||
| 86 | * Get posts. |
||
| 87 | * |
||
| 88 | * @param mixed $query |
||
| 89 | * @param string $PostClass |
||
| 90 | * @return array|bool|null |
||
| 91 | */ |
||
| 92 | public static function get_posts( $query = false, $PostClass = 'TimberPost', $return_collection = false ) { |
||
| 93 | return TimberPostGetter::get_posts( $query, $PostClass, $return_collection ); |
||
| 94 | } |
||
| 95 | |||
| 96 | /** |
||
| 97 | * Query post. |
||
| 98 | * |
||
| 99 | * @param mixed $query |
||
| 100 | * @param string $PostClass |
||
| 101 | * @return array|bool|null |
||
| 102 | */ |
||
| 103 | public static function query_post( $query = false, $PostClass = 'TimberPost' ) { |
||
| 104 | return TimberPostGetter::query_post( $query, $PostClass ); |
||
| 105 | } |
||
| 106 | |||
| 107 | /** |
||
| 108 | * Query posts. |
||
| 109 | * |
||
| 110 | * @param mixed $query |
||
| 111 | * @param string $PostClass |
||
| 112 | * @return array|bool|null |
||
| 113 | */ |
||
| 114 | public static function query_posts( $query = false, $PostClass = 'TimberPost' ) { |
||
| 115 | return TimberPostGetter::query_posts( $query, $PostClass ); |
||
| 116 | } |
||
| 117 | |||
| 118 | /** |
||
| 119 | * WP_Query has posts. |
||
| 120 | * |
||
| 121 | * @return bool |
||
| 122 | * @deprecated since 0.20.0 |
||
| 123 | */ |
||
| 124 | static function wp_query_has_posts() { |
||
| 125 | return TimberPostGetter::wp_query_has_posts(); |
||
| 126 | } |
||
| 127 | |||
| 128 | /* Term Retrieval |
||
| 129 | ================================ */ |
||
| 130 | |||
| 131 | /** |
||
| 132 | * Get terms. |
||
| 133 | * |
||
| 134 | * @param string|array $args |
||
| 135 | * @param array $maybe_args |
||
| 136 | * @param string $TermClass |
||
| 137 | * @return mixed |
||
| 138 | */ |
||
| 139 | public static function get_terms( $args = null, $maybe_args = array(), $TermClass = 'TimberTerm' ) { |
||
| 140 | return TimberTermGetter::get_terms( $args, $maybe_args, $TermClass ); |
||
| 141 | } |
||
| 142 | |||
| 143 | /* Site Retrieval |
||
| 144 | ================================ */ |
||
| 145 | |||
| 146 | /** |
||
| 147 | * Get sites. |
||
| 148 | * |
||
| 149 | * @param array|bool $blog_ids |
||
| 150 | * @return array |
||
| 151 | */ |
||
| 152 | public static function get_sites( $blog_ids = false ) { |
||
| 153 | if ( !is_array( $blog_ids ) ) { |
||
| 154 | global $wpdb; |
||
| 155 | $blog_ids = $wpdb->get_col( "SELECT blog_id FROM $wpdb->blogs ORDER BY blog_id ASC" ); |
||
| 156 | } |
||
| 157 | $return = array(); |
||
| 158 | foreach ( $blog_ids as $blog_id ) { |
||
| 159 | $return[] = new TimberSite( $blog_id ); |
||
| 160 | } |
||
| 161 | return $return; |
||
| 162 | } |
||
| 163 | |||
| 164 | |||
| 165 | /* Template Setup and Display |
||
| 166 | ================================ */ |
||
| 167 | |||
| 168 | /** |
||
| 169 | * Get context. |
||
| 170 | * |
||
| 171 | * @return array |
||
| 172 | */ |
||
| 173 | public static function get_context() { |
||
| 174 | $data = array(); |
||
| 175 | $data['http_host'] = 'http://' . TimberURLHelper::get_host(); |
||
| 176 | $data['wp_title'] = TimberHelper::get_wp_title(); |
||
| 177 | $data['wp_head'] = TimberHelper::function_wrapper( 'wp_head' ); |
||
| 178 | $data['wp_footer'] = TimberHelper::function_wrapper( 'wp_footer' ); |
||
| 179 | $data['body_class'] = implode( ' ', get_body_class() ); |
||
| 180 | |||
| 181 | $data['site'] = new TimberSite(); |
||
| 182 | $data['request'] = new TimberRequest(); |
||
| 183 | $data['theme'] = $data['site']->theme; |
||
| 184 | |||
| 185 | $data['posts'] = Timber::query_posts(); |
||
| 186 | |||
| 187 | $data = apply_filters( 'timber_context', $data ); |
||
| 188 | $data = apply_filters( 'timber/context', $data ); |
||
| 189 | return $data; |
||
| 190 | } |
||
| 191 | |||
| 192 | /** |
||
| 193 | * Compile function. |
||
| 194 | * |
||
| 195 | * @param array $filenames |
||
| 196 | * @param array $data |
||
| 197 | * @param bool $expires |
||
| 198 | * @param string $cache_mode |
||
| 199 | * @param bool $via_render |
||
| 200 | * @return bool|string |
||
| 201 | */ |
||
| 202 | public static function compile( $filenames, $data = array(), $expires = false, $cache_mode = TimberLoader::CACHE_USE_DEFAULT, $via_render = false ) { |
||
| 203 | $caller = self::get_calling_script_dir(); |
||
| 204 | $caller_file = self::get_calling_script_file(); |
||
| 205 | $caller_file = apply_filters( 'timber_calling_php_file', $caller_file ); |
||
|
0 ignored issues
–
show
|
|||
| 206 | $loader = new TimberLoader( $caller ); |
||
| 207 | $file = $loader->choose_template( $filenames ); |
||
| 208 | $output = ''; |
||
| 209 | if ( is_null( $data ) ) { |
||
| 210 | $data = array(); |
||
| 211 | } |
||
| 212 | if ( strlen( $file ) ) { |
||
| 213 | if ( $via_render ) { |
||
| 214 | $file = apply_filters( 'timber_render_file', $file ); |
||
| 215 | $data = apply_filters( 'timber_render_data', $data ); |
||
| 216 | } else { |
||
| 217 | $file = apply_filters( 'timber_compile_file', $file ); |
||
| 218 | $data = apply_filters( 'timber_compile_data', $data ); |
||
| 219 | } |
||
| 220 | $output = $loader->render( $file, $data, $expires, $cache_mode ); |
||
| 221 | } |
||
| 222 | do_action( 'timber_compile_done' ); |
||
| 223 | return $output; |
||
| 224 | } |
||
| 225 | |||
| 226 | /** |
||
| 227 | * Compile string. |
||
| 228 | * |
||
| 229 | * @param string $string a string with twig variables. |
||
| 230 | * @param array $data an array with data in it. |
||
| 231 | * @return bool|string |
||
| 232 | */ |
||
| 233 | public static function compile_string( $string, $data = array() ) { |
||
| 234 | $dummy_loader = new TimberLoader(); |
||
| 235 | $dummy_loader->get_twig(); |
||
| 236 | $loader = new Twig_Loader_String(); |
||
| 237 | $twig = new Twig_Environment( $loader ); |
||
| 238 | $twig = apply_filters( 'timber/twig/filters', $twig ); |
||
| 239 | $twig = apply_filters( 'twig_apply_filters', $twig ); |
||
| 240 | return $twig->render( $string, $data ); |
||
| 241 | } |
||
| 242 | |||
| 243 | /** |
||
| 244 | * Fetch function. |
||
| 245 | * |
||
| 246 | * @param array $filenames |
||
| 247 | * @param array $data |
||
| 248 | * @param bool $expires |
||
| 249 | * @param string $cache_mode |
||
| 250 | * @return bool|string |
||
| 251 | */ |
||
| 252 | public static function fetch( $filenames, $data = array(), $expires = false, $cache_mode = TimberLoader::CACHE_USE_DEFAULT ) { |
||
| 253 | if ( $expires === true ) { |
||
| 254 | //if this is reading as true; the user probably is using the old $echo param |
||
| 255 | //so we should move all vars up by a spot |
||
| 256 | $expires = $cache_mode; |
||
| 257 | $cache_mode = TimberLoader::CACHE_USE_DEFAULT; |
||
| 258 | } |
||
| 259 | $output = self::compile( $filenames, $data, $expires, $cache_mode, true ); |
||
| 260 | $output = apply_filters( 'timber_compile_result', $output ); |
||
| 261 | return $output; |
||
| 262 | } |
||
| 263 | |||
| 264 | /** |
||
| 265 | * Render function. |
||
| 266 | * |
||
| 267 | * @param array $filenames |
||
| 268 | * @param array $data |
||
| 269 | * @param bool $expires |
||
| 270 | * @param string $cache_mode |
||
| 271 | * @return bool|string |
||
| 272 | */ |
||
| 273 | public static function render( $filenames, $data = array(), $expires = false, $cache_mode = TimberLoader::CACHE_USE_DEFAULT ) { |
||
| 274 | $output = static::fetch( $filenames, $data, $expires, $cache_mode ); |
||
| 275 | echo $output; |
||
| 276 | return $output; |
||
| 277 | } |
||
| 278 | |||
| 279 | /** |
||
| 280 | * Render string. |
||
| 281 | * |
||
| 282 | * @param string $string a string with twig variables. |
||
| 283 | * @param array $data an array with data in it. |
||
| 284 | * @return bool|string |
||
| 285 | */ |
||
| 286 | public static function render_string( $string, $data = array() ) { |
||
| 287 | $compiled = self::compile_string( $string, $data ); |
||
| 288 | echo $compiled; |
||
| 289 | return $compiled; |
||
| 290 | } |
||
| 291 | |||
| 292 | |||
| 293 | /* Sidebar |
||
| 294 | ================================ */ |
||
| 295 | |||
| 296 | /** |
||
| 297 | * Get sidebar. |
||
| 298 | * |
||
| 299 | * @param string $sidebar |
||
| 300 | * @param array $data |
||
| 301 | * @return bool|string |
||
| 302 | */ |
||
| 303 | public static function get_sidebar( $sidebar = '', $data = array() ) { |
||
| 304 | if ( $sidebar == '' ) { |
||
| 305 | $sidebar = 'sidebar.php'; |
||
| 306 | } |
||
| 307 | if ( strstr( strtolower( $sidebar ), '.php' ) ) { |
||
| 308 | return self::get_sidebar_from_php( $sidebar, $data ); |
||
| 309 | } |
||
| 310 | return self::compile( $sidebar, $data ); |
||
| 311 | } |
||
| 312 | |||
| 313 | /** |
||
| 314 | * Get sidebar from PHP |
||
| 315 | * |
||
| 316 | * @param string $sidebar |
||
| 317 | * @param array $data |
||
| 318 | * @return string |
||
| 319 | */ |
||
| 320 | public static function get_sidebar_from_php( $sidebar = '', $data ) { |
||
| 321 | $caller = self::get_calling_script_dir(); |
||
| 322 | $loader = new TimberLoader(); |
||
| 323 | $uris = $loader->get_locations( $caller ); |
||
| 324 | ob_start(); |
||
| 325 | $found = false; |
||
| 326 | foreach ( $uris as $uri ) { |
||
| 327 | if ( file_exists( trailingslashit( $uri ) . $sidebar ) ) { |
||
| 328 | include trailingslashit( $uri ) . $sidebar; |
||
| 329 | $found = true; |
||
| 330 | break; |
||
| 331 | } |
||
| 332 | } |
||
| 333 | if ( !$found ) { |
||
| 334 | TimberHelper::error_log( 'error loading your sidebar, check to make sure the file exists' ); |
||
| 335 | } |
||
| 336 | $ret = ob_get_contents(); |
||
| 337 | ob_end_clean(); |
||
| 338 | return $ret; |
||
| 339 | } |
||
| 340 | |||
| 341 | /* Widgets |
||
| 342 | ================================ */ |
||
| 343 | |||
| 344 | /** |
||
| 345 | * Get widgets. |
||
| 346 | * |
||
| 347 | * @param int $widget_id |
||
| 348 | * @return TimberFunctionWrapper |
||
| 349 | */ |
||
| 350 | public static function get_widgets( $widget_id ) { |
||
| 351 | return trim( TimberHelper::function_wrapper( 'dynamic_sidebar', array( $widget_id ), true ) ); |
||
| 352 | } |
||
| 353 | |||
| 354 | |||
| 355 | /* Routes |
||
| 356 | ================================ */ |
||
| 357 | |||
| 358 | /** |
||
| 359 | * Add route. |
||
| 360 | * |
||
| 361 | * @param string $route |
||
| 362 | * @param callable $callback |
||
| 363 | * @param array $args |
||
| 364 | * @deprecated since 0.20.0 |
||
| 365 | */ |
||
| 366 | public static function add_route( $route, $callback, $args = array() ) { |
||
| 367 | Routes::map( $route, $callback, $args ); |
||
| 368 | } |
||
| 369 | |||
| 370 | /** |
||
| 371 | * Load template. |
||
| 372 | * |
||
| 373 | * @deprecated since 0.20.0 |
||
| 374 | */ |
||
| 375 | public static function load_template( $template, $query = false, $status_code = 200, $tparams = false ) { |
||
| 376 | return Routes::load( $template, $tparams, $query, $status_code ); |
||
| 377 | } |
||
| 378 | |||
| 379 | /** |
||
| 380 | * Load view. |
||
| 381 | * |
||
| 382 | * @deprecated since 0.20.2 |
||
| 383 | */ |
||
| 384 | public static function load_view( $template, $query = false, $status_code = 200, $tparams = false ) { |
||
| 385 | return Routes::load( $template, $tparams, $query, $status_code ); |
||
| 386 | } |
||
| 387 | |||
| 388 | |||
| 389 | /* Pagination |
||
| 390 | ================================ */ |
||
| 391 | |||
| 392 | /** |
||
| 393 | * Get pagination. |
||
| 394 | * |
||
| 395 | * @param array $prefs |
||
| 396 | * @return array mixed |
||
| 397 | */ |
||
| 398 | public static function get_pagination( $prefs = array() ) { |
||
| 399 | global $wp_query; |
||
| 400 | global $paged; |
||
| 401 | global $wp_rewrite; |
||
| 402 | $args = array(); |
||
| 403 | $args['total'] = ceil( $wp_query->found_posts / $wp_query->query_vars['posts_per_page'] ); |
||
| 404 | if ( $wp_rewrite->using_permalinks() ) { |
||
| 405 | $url = explode( '?', get_pagenum_link( 0 ) ); |
||
| 406 | if ( isset( $url[1] ) ) { |
||
| 407 | parse_str( $url[1], $query ); |
||
| 408 | $args['add_args'] = $query; |
||
| 409 | } |
||
| 410 | $args['format'] = 'page/%#%'; |
||
| 411 | $args['base'] = trailingslashit( $url[0] ).'%_%'; |
||
| 412 | } else { |
||
| 413 | $big = 999999999; |
||
| 414 | $args['base'] = str_replace( $big, '%#%', esc_url( get_pagenum_link( $big ) ) ); |
||
| 415 | } |
||
| 416 | $args['type'] = 'array'; |
||
| 417 | $args['current'] = max( 1, get_query_var( 'paged' ) ); |
||
| 418 | $args['mid_size'] = max( 9 - $args['current'], 3 ); |
||
| 419 | if ( is_int( $prefs ) ) { |
||
| 420 | $args['mid_size'] = $prefs - 2; |
||
| 421 | } else { |
||
| 422 | $args = array_merge( $args, $prefs ); |
||
| 423 | } |
||
| 424 | $data = array(); |
||
| 425 | $data['current'] = $args['current']; |
||
| 426 | $data['total'] = $args['total']; |
||
| 427 | $data['pages'] = TimberHelper::paginate_links( $args ); |
||
| 428 | $next = get_next_posts_page_link( $args['total'] ); |
||
| 429 | if ( $next ) { |
||
| 430 | $data['next'] = array( 'link' => untrailingslashit( $next ), 'class' => 'page-numbers next' ); |
||
| 431 | } |
||
| 432 | $prev = previous_posts( false ); |
||
| 433 | if ( $prev ) { |
||
| 434 | $data['prev'] = array( 'link' => untrailingslashit( $prev ), 'class' => 'page-numbers prev' ); |
||
| 435 | } |
||
| 436 | if ( $paged < 2 ) { |
||
| 437 | $data['prev'] = ''; |
||
| 438 | } |
||
| 439 | if ( $data['total'] === ( double ) 0 ) { |
||
| 440 | $data['next'] = ''; |
||
| 441 | } |
||
| 442 | return $data; |
||
| 443 | } |
||
| 444 | |||
| 445 | /* Utility |
||
| 446 | ================================ */ |
||
| 447 | |||
| 448 | /** |
||
| 449 | * Get calling script dir. |
||
| 450 | * |
||
| 451 | * @return string |
||
| 452 | */ |
||
| 453 | public static function get_calling_script_dir( $offset = 0 ) { |
||
| 454 | $caller = self::get_calling_script_file( $offset ); |
||
| 455 | if ( !is_null( $caller ) ) { |
||
| 456 | $pathinfo = pathinfo( $caller ); |
||
| 457 | $dir = $pathinfo['dirname']; |
||
| 458 | return $dir; |
||
| 459 | } |
||
| 460 | } |
||
| 461 | |||
| 462 | /** |
||
| 463 | * Get calling script file. |
||
| 464 | * |
||
| 465 | * @param int $offset |
||
| 466 | * @return string|null |
||
| 467 | * @deprecated since 0.20.0 |
||
| 468 | */ |
||
| 469 | public static function get_calling_script_file( $offset = 0 ) { |
||
| 470 | $caller = null; |
||
| 471 | $backtrace = debug_backtrace(); |
||
| 472 | $i = 0; |
||
| 473 | foreach ( $backtrace as $trace ) { |
||
| 474 | if ( array_key_exists('file', $trace) && $trace['file'] != __FILE__ ) { |
||
| 475 | $caller = $trace['file']; |
||
| 476 | break; |
||
| 477 | } |
||
| 478 | $i++; |
||
| 479 | } |
||
| 480 | if ( $offset ) { |
||
| 481 | $caller = $backtrace[$i + $offset]['file']; |
||
| 482 | } |
||
| 483 | return $caller; |
||
| 484 | } |
||
| 485 | |||
| 486 | |||
| 487 | } |
||
| 488 | |||
| 489 | $timber = new Timber(); |
||
| 490 | Timber::$dirname = 'views'; |
This check looks for variable assignements that are either overwritten by other assignments or where the variable is not used subsequently.
Both the
$myVarassignment in line 1 and the$higherassignment in line 2 are dead. The first because$myVaris never used and the second because$higheris always overwritten for every possible time line.