This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Bmatovu\ArtisanGui\Http; |
||
4 | |||
5 | use Bmatovu\ArtisanGui\Support\Commander; |
||
6 | use Illuminate\Contracts\Console\Kernel; |
||
7 | use Illuminate\Contracts\Validation\Factory as ValidationFactory; |
||
8 | use Illuminate\Http\Request; |
||
9 | use Symfony\Component\Console\Command\Command; |
||
10 | use Symfony\Component\Console\Output\BufferedOutput; |
||
11 | use Symfony\Component\HttpKernel\Exception\NotFoundHttpException; |
||
12 | |||
13 | class CommandController |
||
14 | { |
||
15 | /** |
||
16 | * The console kernel. |
||
17 | * |
||
18 | * @var \Illuminate\Contracts\Console\Kernel |
||
19 | */ |
||
20 | protected $kernel; |
||
21 | |||
22 | /** |
||
23 | * The validation factory implementation. |
||
24 | * |
||
25 | * @var \Illuminate\Contracts\Validation\Factory |
||
26 | */ |
||
27 | protected $validationFactory; |
||
28 | |||
29 | /** |
||
30 | * Create a new controller instance. |
||
31 | * |
||
32 | * @param \Illuminate\Contracts\Console\Kernel $kernel |
||
33 | * @param \Illuminate\Contracts\Validation\Factory $validationFactory |
||
34 | * |
||
35 | * @return void |
||
0 ignored issues
–
show
|
|||
36 | */ |
||
37 | 5 | public function __construct(Kernel $kernel, ValidationFactory $validationFactory) |
|
38 | { |
||
39 | 5 | $this->kernel = $kernel; |
|
40 | 5 | $this->validationFactory = $validationFactory; |
|
41 | 5 | } |
|
42 | |||
43 | /** |
||
44 | * Get artisan commands. |
||
45 | * |
||
46 | * @return \Illuminate\Http\Response |
||
47 | */ |
||
48 | 1 | public function __invoke() |
|
49 | { |
||
50 | 1 | $commander = new Commander($this->kernel); |
|
51 | |||
52 | 1 | return response([ |
|
0 ignored issues
–
show
The expression
response(array('namespac...ander->getCommands())); of type Illuminate\Http\Response...Routing\ResponseFactory adds the type Illuminate\Contracts\Routing\ResponseFactory to the return on line 52 which is incompatible with the return type documented by Bmatovu\ArtisanGui\Http\...andController::__invoke of type Illuminate\Http\Response .
![]() |
|||
53 | 1 | 'namespaces' => $commander->getNamespaces(), |
|
54 | 1 | 'definition' => $commander->getDefinition(), |
|
55 | 1 | 'commands' => $commander->getCommands(), |
|
56 | ]); |
||
57 | } |
||
58 | |||
59 | /** |
||
60 | * Execute artisan command. |
||
61 | * |
||
62 | * @param \Illuminate\Http\Request $request |
||
63 | * |
||
64 | * @throws \Symfony\Component\HttpKernel\Exception\NotFoundHttpException |
||
65 | * |
||
66 | * @return \Illuminate\Http\Response |
||
67 | */ |
||
68 | 4 | public function execute(Request $request) |
|
69 | { |
||
70 | 4 | $command = $this->resolve($request->command); |
|
71 | |||
72 | 3 | $validated = $this->validationFactory->make($request->all(), $this->rules($command))->validate(); |
|
73 | |||
74 | 2 | $parameters = array_merge($validated, config('artisan-gui.options')); |
|
75 | |||
76 | 2 | $outputBuffer = new BufferedOutput(); |
|
77 | |||
78 | try { |
||
79 | 2 | $exitCode = $this->kernel->call($command->getName(), $parameters, $outputBuffer); |
|
80 | // $output = $this->kernel->output(); |
||
81 | 1 | $output = $outputBuffer->fetch(); |
|
82 | 1 | } catch (\Exception $exception) { |
|
83 | 1 | return response([ |
|
0 ignored issues
–
show
The expression
response(array('code' =>...n->getMessage()), 500); of type Illuminate\Http\Response...Routing\ResponseFactory adds the type Illuminate\Contracts\Routing\ResponseFactory to the return on line 83 which is incompatible with the return type documented by Bmatovu\ArtisanGui\Http\CommandController::execute of type Illuminate\Http\Response .
![]() |
|||
84 | 1 | 'code' => $exception->getCode() ?? '', |
|
85 | 1 | 'message' => $exception->getMessage(), |
|
86 | 1 | ], 500); |
|
87 | } |
||
88 | |||
89 | 1 | return response([ |
|
0 ignored issues
–
show
The expression
response(array('command'... 'output' => $output)); of type Illuminate\Http\Response...Routing\ResponseFactory adds the type Illuminate\Contracts\Routing\ResponseFactory to the return on line 89 which is incompatible with the return type documented by Bmatovu\ArtisanGui\Http\CommandController::execute of type Illuminate\Http\Response .
![]() |
|||
90 | 1 | 'command' => $command->getName(), |
|
91 | 1 | 'parameters' => $this->flatten($parameters), |
|
92 | 1 | 'exit-code' => $exitCode, |
|
93 | 1 | 'output' => $output, |
|
94 | ]); |
||
95 | } |
||
96 | |||
97 | /** |
||
98 | * Flatten command parameters. |
||
99 | * |
||
100 | * @param array $parameters |
||
101 | * |
||
102 | * @return string |
||
103 | */ |
||
104 | 1 | protected function flatten(array $parameters) |
|
105 | { |
||
106 | 1 | $cli_params = ''; |
|
107 | |||
108 | 1 | foreach ($parameters as $name => $value) { |
|
109 | 1 | if (empty($value)) { |
|
110 | continue; |
||
111 | } |
||
112 | |||
113 | 1 | if (strpos($name, '--') === 0) { |
|
114 | 1 | if (is_bool($value)) { |
|
115 | 1 | $cli_params .= " {$name}"; |
|
116 | |||
117 | 1 | continue; |
|
118 | } |
||
119 | } |
||
120 | |||
121 | 1 | if (is_array($value)) { |
|
122 | 1 | $items = implode(',', $value); |
|
123 | 1 | $cli_params .= " {$name}=\"{$items}\""; |
|
124 | |||
125 | 1 | continue; |
|
126 | } |
||
127 | |||
128 | 1 | $cli_params .= " {$name}=\"{$value}\""; |
|
129 | } |
||
130 | |||
131 | 1 | return $cli_params; |
|
132 | } |
||
133 | |||
134 | /** |
||
135 | * Resolve command from kernel. |
||
136 | * |
||
137 | * @param string $name Command name |
||
138 | * |
||
139 | * @throws \Symfony\Component\HttpKernel\Exception\NotFoundHttpException |
||
140 | * |
||
141 | * @return \Symfony\Component\Console\Command\Command |
||
142 | */ |
||
143 | 4 | protected function resolve($name): Command |
|
144 | { |
||
145 | 4 | $commands = $this->kernel->all(); |
|
146 | |||
147 | 4 | $command = $commands[$name] ?? null; |
|
148 | |||
149 | 4 | if (! $command) { |
|
150 | 1 | throw new NotFoundHttpException('Unknown command.'); |
|
151 | } |
||
152 | |||
153 | 3 | return $command; |
|
154 | } |
||
155 | |||
156 | /** |
||
157 | * Build command validation rules. |
||
158 | * |
||
159 | * @param \Symfony\Component\Console\Command\Command $command |
||
160 | * |
||
161 | * @return array |
||
162 | */ |
||
163 | 3 | protected function rules(Command $command): array |
|
164 | { |
||
165 | 3 | $rules = []; |
|
166 | |||
167 | 3 | foreach ($command->getDefinition()->getArguments() as $argument) { |
|
168 | 3 | $rules[$argument->getName()] = array_filter([ |
|
169 | 3 | $argument->isRequired() ? 'required' : 'nullable', |
|
170 | 3 | $argument->isArray() ? 'array' : '', |
|
171 | ]); |
||
172 | } |
||
173 | |||
174 | 3 | foreach ($command->getDefinition()->getOptions() as $option) { |
|
175 | 3 | $name = $option->getName(); |
|
176 | |||
177 | 3 | $rules["--{$name}"] = array_filter([ |
|
178 | 3 | $option->isValueRequired() ? 'required' : 'nullable', |
|
179 | 3 | $option->isArray() ? 'array' : ($option->acceptValue() ? 'string' : 'bool'), |
|
180 | ]); |
||
181 | } |
||
182 | |||
183 | 3 | return $rules; |
|
184 | } |
||
185 | } |
||
186 |
Adding a
@return
annotation to a constructor is not recommended, since a constructor does not have a meaningful return value.Please refer to the PHP core documentation on constructors.