Issues in Crud.php (master) - Issues in master - nabble/ajde - Measure and Improve Code Quality continuously with Scrutinizer

Issues (1919)

Security Analysis not enabled

Cross-Site Scripting

Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.

File Exposure

File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.

File Manipulation

File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.

Object Injection

Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.

Code Injection

Code Injection enables an attacker to execute arbitrary code on the server.

Response Splitting

Response Splitting can be used to send arbitrary responses.

File Inclusion

File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.

Command Injection

Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.

SQL Injection

SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.

XPath Injection

XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.

LDAP Injection

LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.

Header Injection

Other Vulnerability

This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.

Regex Injection

Regex Injection enables an attacker to execute arbitrary code in your PHP process.

XML Injection

XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.

Variable Injection

Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.

Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

lib/Ajde/Crud.php (42 issues)

Labels

Severity

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

<?php

class Ajde_Crud extends Ajde_Object_Standard
{
    protected $_model = null;
    protected $_collection = null;

    protected $_fields = null;

    //protected $_operation = null;
    protected $_operation = 'list';

    protected $_templateData = [];

    public function __construct($model, $options = [])
    {
        if ($model instanceof Ajde_Model) {
            $this->_model = $model;
        } else {
            $modelName = $this->toCamelCase($model, true).'Model';
            $this->_model = new $modelName();
        }
        if ($options instanceof Ajde_Crud_Options) {
            $options = $options->getArray();
        }
        $this->setOptions($options);
    }

    public function __toString()
    {
        try {
            $output = $this->output();
        } catch (Exception $e) {
            $output = Ajde_Exception_Handler::handler($e);
class A
{
    function getObject()
    {
        return null;
    }

}

$a = new A();
$object = $a->getObject();
        }

        return (string) $output;
    }

    /**
     * @throws Ajde_Exception
     *
     * @return mixed
     */
    public function output()
    {
        $controller = Ajde_Controller::fromRoute(new Ajde_Core_Route('_core/crud:'.$this->getOperation()));
        $controller->setCrudInstance($this);
class ParentClass {
    private $data = array();

    public function __call($method, array $args) {
        if (0 === strpos($method, 'get')) {
            return $this->data[strtolower(substr($method, 3))];
        }

        throw new \LogicException(sprintf('Unsupported method: %s', $method));
    }
}

/**
 * If this class knows which fields exist, you can specify the methods here:
 *
 * @method string getName()
 */
class SomeClass extends ParentClass { }

        return $controller->invoke();
    }

    public function export($format = 'excel')
    {
        /* @var $exporter Ajde_Crud_Export_Interface */

        $exporterClass = 'Ajde_Crud_Export_'.ucfirst($format);
        $exporter = new $exporterClass();

        $table = [];

        $fieldsToShow = $this->getFieldNames();

        $headers = [];

        $this->getCollection()->getView()->setPageSize(9999999999);
class ParentClass {
    private $data = array();

    public function __call($method, array $args) {
        if (0 === strpos($method, 'get')) {
            return $this->data[strtolower(substr($method, 3))];
        }

        throw new \LogicException(sprintf('Unsupported method: %s', $method));
    }
}

/**
 * If this class knows which fields exist, you can specify the methods here:
 *
 * @method string getName()
 */
class SomeClass extends ParentClass { }

        $items = $this->getItems();

        foreach ($fieldsToShow as $fieldName) {

            // JSON
            if ($items->count() && ($first = current($items->items())) && $first->isFieldJson($fieldName)) {
                $maxJsonFields = 0;
                $useJsonFields = [];
                foreach ($items as $model) {
                    $jsonFields = (array) @json_decode($model->has($fieldName) ? $model->get($fieldName) : '');
                    if (count($jsonFields) > $maxJsonFields) {
                        $useJsonFields = array_keys($jsonFields);
                        $maxJsonFields = count($jsonFields);
                    }
                }
                foreach ($useJsonFields as $key) {
                    $headers[] = $key;
                }
                // Normal
            } else {
                $field = $this->getField($fieldName);
                $headers[] = $field->getLabel();
            }
        }

        $table[] = $headers;

        foreach ($items as $model) {
            /* @var $model Ajde_Model */
            $this->fireCrudLoadedOnModel($model);

            $row = [];

            foreach ($fieldsToShow as $fieldName) {
                $field = $this->getField($fieldName);
                $value = $model->has($fieldName) ? $model->get($fieldName) : false;

                // JSON
                if ($model->isFieldJson($fieldName)) {
                    foreach (($jsonFields = (array) @json_decode($value)) as $item) {
                        $row[] = $item;
                    }
                    for ($i = 0; $i < ($maxJsonFields - count($jsonFields)); $i++) {
function myFunction($a) {
    switch ($a) {
        case 'foo':
            $x = 1;
            break;

        case 'bar':
            $x = 2;
            break;
    }

    // $x is potentially undefined here.
    echo $x;
}
                        $row[] = '';
                    }
                } else {
                    if ($this->getField($fieldName) instanceof Ajde_Crud_Field_Sort) {
                        $row[] = $value;
                        // Display function
                        //                } elseif ($field->hasFunction() && $field->getFunction()) {
                        //                    $displayFunction = $field->getFunction();
                        //                    $displayFunctionArgs = $field->hasFunctionArgs() ? $field->getFunctionArgs() : array();
                        //                    $funcValue = call_user_func_array(array($model, $displayFunction), $displayFunctionArgs);
                        //                    $row[] = $funcValue;
                        // Linked Model (not loaded)
                    } elseif ($value instanceof Ajde_Model && !$value->hasLoaded()) {
                        $row[] = '(not set)';
                        // Linked Model
                    } elseif ($value instanceof Ajde_Model && $value->hasLoaded()) {
                        $row[] = $value->get($value->getDisplayField());
                        // Boolean
                    } elseif ($field instanceof Ajde_Crud_Field_Boolean) {
                        $row[] = $value;
                        // File
                    } elseif ($this->getField($fieldName) instanceof Ajde_Crud_Field_File) {
                        $row[] = config('app.rootUrl').$field->getSaveDir().$value;
class ParentClass {
    private $data = array();

    public function __call($method, array $args) {
        if (0 === strpos($method, 'get')) {
            return $this->data[strtolower(substr($method, 3))];
        }

        throw new \LogicException(sprintf('Unsupported method: %s', $method));
    }
}

/**
 * If this class knows which fields exist, you can specify the methods here:
 *
 * @method string getName()
 */
class SomeClass extends ParentClass { }
                        // Text value
                    } else {
                        $row[] = strip_tags($value);
                    }
                }
            }

            $table[] = $row;
        }

        $exporter->prepare($this->getSessionName(), $table);

        return $exporter;
    }

    /**
     * GETTERS & SETTERS.
     */

    /**
     * @return string
     */
    public function getAction()
    {
        if (!$this->hasAction()) {
class ParentClass {
    private $data = array();

    public function __call($method, array $args) {
        if (0 === strpos($method, 'get')) {
            return $this->data[strtolower(substr($method, 3))];
        }

        throw new \LogicException(sprintf('Unsupported method: %s', $method));
    }
}

/**
 * If this class knows which fields exist, you can specify the methods here:
 *
 * @method string getName()
 */
class SomeClass extends ParentClass { }
            $this->setAction('list');
        }

        return parent::getAction();
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
    }

    public function setAction($value)
    {
        if (substr($value, 0, 4) === 'edit' || substr($value, 0, 4) === 'list') {
            $this->setOperation(substr($value, 0, 4));
        }
        parent::setAction($value);
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
    }

    public function setOperation($operation)
    {
        $this->_operation = $operation;
    }

    public function getOperation()
    {
        //		if (!isset($this->_operation)) {
        //			if (Ajde::app()->getRequest()->has('new')) {
        //				$this->setOperation('new');
        //			} else if (Ajde::app()->getRequest()->has('edit')) {
        //				$this->setOperation('edit');
        //			} else {
        //				$this->setOperation('list');
        //			}
        //		}
        return $this->_operation;
    }

    /**
     * OPTIONS.
     *
     * @param            $name
     * @param bool|mixed $default
     *
     * @return array|bool
     */
    public function getOption($name, $default = false)
    {
        $path = explode('.', $name);
        $options = $this->getOptions();
        foreach ($path as $key) {
            if (isset($options[$key])) {
                $options = $options[$key];
            } else {
                return $default;
            }
        }

        return $options;
    }

    public function setOption($name, $value)
    {
        $path = explode('.', $name);
        $options = $this->getOptions();
        $wc = &$options;
        foreach ($path as $key) {
            if (!isset($wc[$key])) {
                $wc[$key] = [];
            }
            $wc = &$wc[$key];
        }
        $wc = $value;
        $this->setOptions($options);
    }

    /**
     * @return array
     */
    public function getOptions($key = null)
    {
        if (isset($key)) {
            $options = parent::getOptions();
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}

            return issetor($options[$key], []);
        } else {
            return parent::getOptions();
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
        }
    }

    public function setOptions($value)
    {
        parent::setOptions($value);
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
    }

    /**
     * MISC.
     */
    public function setItem($value)
    {
        parent::setItem($value);
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
    }

    public function setCustomTemplateModule($value)
    {
        parent::setCustomTemplateModule($value);
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
    }

    public function getCustomTemplateModule()
    {
        if (parent::hasCustomTemplateModule()) {
class Daddy
{
    protected function getFirstName()
    {
        return "Eidur";
    }

    protected function getSurName()
    {
        return "Gudjohnsen";
    }
}

class Son
{
    public function getFirstName()
    {
        return parent::getSurname();
    }
}
            return parent::getCustomTemplateModule();
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
        }

        return (string) $this->getModel()->getTable();
    }

    public function setEditAction($value)
    {
        parent::setEditAction($value);
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
    }

    public function getEditAction()
    {
        if (parent::hasEditAction()) {
class Daddy
{
    protected function getFirstName()
    {
        return "Eidur";
    }

    protected function getSurName()
    {
        return "Gudjohnsen";
    }
}

class Son
{
    public function getFirstName()
    {
        return parent::getSurname();
    }
}
            return parent::getEditAction();
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
        }

        return false;
    }

    public function setNewAction($value)
    {
        parent::setNewAction($value);
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
    }

    public function getNewAction()
    {
        if (parent::hasNewAction()) {
class Daddy
{
    protected function getFirstName()
    {
        return "Eidur";
    }

    protected function getSurName()
    {
        return "Gudjohnsen";
    }
}

class Son
{
    public function getFirstName()
    {
        return parent::getSurname();
    }
}
            return parent::getNewAction();
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
        }

        return false;
    }

    public function setListAction($value)
    {
        parent::setListAction($value);
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
    }

    public function getListAction()
    {
        if (parent::hasListAction()) {
class Daddy
{
    protected function getFirstName()
    {
        return "Eidur";
    }

    protected function getSurName()
    {
        return "Gudjohnsen";
    }
}

class Son
{
    public function getFirstName()
    {
        return parent::getSurname();
    }
}
            return parent::getListAction();
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
        }

        return false;
    }

    /**
     * @return Ajde_Collection
     */
    public function getCollection()
    {
        if (!isset($this->_collection)) {
            $collectionName = str_replace('Model', '', get_class($this->getModel())).'Collection';
            $this->_collection = new $collectionName();
        }

        return $this->_collection;
    }

    /**
     * @return Ajde_Model
     */
    public function getModel()
    {
        return $this->_model;
    }

    /**
     * @return string
     */
    public function getHash()
    {
        return spl_object_hash($this);
    }

    /**
     * HELPERS.
     */
    public function loadItem($id = null)
    {
        $model = $this->getModel();
        if (isset($id)) {
            $model->loadByPK($id);
        }
        $this->setItem($model);

        return $this->getItem();
    }

    /**
     * @return Ajde_Model
     */
    public function getItem()
    {
        if ($this->isNew()) {
            $this->fireCrudLoadedOnModel($this->getModel());

            return $this->getModel();
        }
        if (!$this->getModel()->getPK()) {
            $model = $this->getModel();
            if (!$model->loadByPK($this->getId())) {
class ParentClass {
    private $data = array();

    public function __call($method, array $args) {
        if (0 === strpos($method, 'get')) {
            return $this->data[strtolower(substr($method, 3))];
        }

        throw new \LogicException(sprintf('Unsupported method: %s', $method));
    }
}

/**
 * If this class knows which fields exist, you can specify the methods here:
 *
 * @method string getName()
 */
class SomeClass extends ParentClass { }
                Ajde_Http_Response::redirectNotFound();
            } else {
                if (!$model->getAutoloadParents()) {
                    $model->loadParents();
                }
            }
            $this->fireCrudLoadedOnModel($this->getModel());
        }

        return $this->getModel();
    }

    public function isNew()
    {
        return !$this->hasId() || $this->getId() === false || is_null($this->getId());
class ParentClass {
    private $data = array();

    public function __call($method, array $args) {
        if (0 === strpos($method, 'get')) {
            return $this->data[strtolower(substr($method, 3))];
        }

        throw new \LogicException(sprintf('Unsupported method: %s', $method));
    }
}

/**
 * If this class knows which fields exist, you can specify the methods here:
 *
 * @method string getName()
 */
class SomeClass extends ParentClass { }
    }

    /**
     * @return Ajde_Collection
     */
    public function getItems()
    {
        $collection = $this->getCollection();

        // Collection view
        if ($collection->hasView()) {
            $collection->applyView();
        }

        $collection->load();

        // TODO: this should be done with JOIN
        if ($this->getModel()->getAutoloadParents()) {
            $collection->loadParents();
        }

        return $collection;
    }

    public function fireCrudLoadedOnModel($model)
    {
        Ajde_Event::trigger($model, 'afterCrudLoaded');
    }

    public function getFields()
    {
        if (!isset($this->_fields)) {
            $this->loadFields();
        }

        return $this->_fields;
    }

    public function setReadOnlyForAllFields()
    {
        foreach ($this->getModel()->getTable()->getFieldNames() as $fieldName) {
            $this->setOption('fields.'.$fieldName.'.readonly', true);
        }
    }

    public function loadFields()
    {
        $fields = [];
        $allFields = $this->getDeclaredFieldNames();

        $fieldsArray = $this->getModel()->getTable()->getFieldProperties();
        // TODO: changed getItem to getModel, any side effects?
        $parents = $this->getModel()->getTable()->getParents();

        foreach ($allFields as $fieldName) {
            $fieldProperties = [];
            if (isset($fieldsArray[$fieldName])) {
                $fieldProperties = $fieldsArray[$fieldName];
            }
            $fieldOptions = $this->getFieldOptions($fieldName, $fieldProperties);
            $fieldOptions['name'] = $fieldName;
            if (in_array($fieldOptions['name'], $parents)) {
                $fieldOptions['type'] = 'fk';
            }
            $field = $this->createField($fieldOptions);
            $fields[$fieldName] = $field;
        }

        return $this->_fields = $fields;
    }

    public function createField($fieldOptions)
    {
        if (!isset($fieldOptions['type'])) {
            $fieldOptions['type'] = 'text';
        }
        $fieldClass = Ajde_Core_ExternalLibs::getClassname('Ajde_Crud_Field_'.ucfirst($fieldOptions['type']));
        $field = new $fieldClass($this, $fieldOptions);
        if ($this->getOperation() === 'edit') {
            if (!$field->hasValue() || $field->hasEmpty('value')) {
                if ($this->isNew() && $field->hasNotEmpty('default')) {
                    $field->setValue($field->getDefault());
                } elseif (!$this->isNew() && $this->getItem()->has($field->getName())) {
                    $field->setValue($this->getItem()->get($field->getName()));
                } else {
                    $field->setValue(false);
                }
            }
        }

        return $field;
    }

    /**
     * @param string $fieldName
     *
     * @throws Ajde_Exception
     *
     * @return Ajde_Crud_Field
     */
    public function getField($fieldName, $strict = true)
    {
        if (!isset($this->_fields)) {
            $this->getFields();
        }
        if (isset($this->_fields[$fieldName])) {
            return $this->_fields[$fieldName];
        } else {
            if ($strict === true) {
                // TODO:
                throw new Ajde_Exception($fieldName.' is not a field in '.(string) $this->getModel()->getTable());
            } else {
                return false;
class Author {
    private $name;

    public function __construct($name) {
        $this->name = $name;
    }

    public function getName() {
        return $this->name;
    }
}

abstract class Post {
    public function getAuthor() {
        return 'Johannes';
    }
}

class BlogPost extends Post {
    public function getAuthor() {
        return new Author('Johannes');
    }
}

class ForumPost extends Post { /* ... */ }

function my_function(Post $post) {
    echo strtoupper($post->getAuthor());
}
            }
        }
    }

    public function getDeclaredFieldNames()
    {
        $fields = $this->getFieldNames();
        foreach ($this->getFieldNamesFromOptions() as $optionField) {
            if (!in_array($optionField, $fields)) {
                $fields[] = $optionField;
            }
        }

        return $fields;
    }

    public function getFieldNamesFromOptions()
    {
        return array_keys($this->getOptions('fields'));
    }

    public function getFieldOptions($fieldName, $fieldProperties = [])
    {
        $fieldsOptions = $this->getOptions('fields');
        $fieldOptions = issetor($fieldsOptions[$fieldName], []);
class A
{
    function getObject()
    {
        return null;
    }

}

$a = new A();
$object = $a->getObject();

        return array_merge($fieldProperties, $fieldOptions);
    }

    public function getFieldNames()
    {
        $model = $this->getModel();

        return $model->getTable()->getFieldNames();
    }

    public function getFieldLabels()
    {
        $model = $this->getModel();

        return $model->getTable()->getFieldLabels();
    }

    public function setSessionName($name)
    {
        parent::setSessionName($name);
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
    }

    public function getSessionName()
    {
        if (parent::hasSessionName()) {
class Daddy
{
    protected function getFirstName()
    {
        return "Eidur";
    }

    protected function getSurName()
    {
        return "Gudjohnsen";
    }
}

class Son
{
    public function getFirstName()
    {
        return parent::getSurname();
    }
}
            return parent::getSessionName();
abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}
        } else {
            return (string) $this->getModel()->getTable();
        }
    }

    /**
     * @param array       $viewParams
     * @param bool|string $persist
     *
     * @return Ajde_Collection_View
     */
    public function getCollectionView($viewParams = [], $persist = 'auto')
    {
        if (!$this->getCollection()->hasView()) {
            $viewSession = new Ajde_Session('AC.Crud.View');
            $sessionName = $this->getSessionName();

            if ($viewSession->has($sessionName)) {
                $crudView = $viewSession->get($sessionName);
            } else {
                $crudView = new Ajde_Collection_View($sessionName, $this->getOption('list.view', []));

                $crudView->setColumns($this->getOption('list.show', $this->getFieldNames()));
            }

            // somehow, when altering crudView, the instance in the session gets updated as well, and we don't want that
            $crudView = clone $crudView;

            if (empty($viewParams)) {
                $viewParams = Ajde::app()->getRequest()->getParam('view', []);
                // if we have params, but no columns, assume a reset
                if (!empty($viewParams) && !isset($viewParams['columns'])) {
                    $viewParams['columns'] = $this->getOption('list.show', $this->getFieldNames());
                }
            }
            $crudView->setOptions($viewParams);

            if (($persist == 'auto' && $this->getOperation() == 'list') || $persist === true) {
                $viewSession->set($sessionName, $crudView);
            }

            $this->getCollection()->setView($crudView);
        }

        return $this->getCollection()->getView();
    }

    /**
     * RENDERING.
     */
    public function getTemplate()
    {
        $template = new Ajde_Template(MODULE_DIR.'_core/', 'crud/'.$this->getOperation());
        Ajde::app()->getDocument()->autoAddResources($template);

        if ($this->getOperation() !== $this->getAction()) {
            $template = new Ajde_Template(MODULE_DIR.'_core/', 'crud/'.$this->getAction());
        }
        if ($this->_hasCustomTemplate()) {

            $base = $this->_getCustomTemplateBase();
            $action = $this->_getCustomTemplateAction();
            $template = new Ajde_Template($base, $action);
        }
        $template->assignArray($this->_templateData);

        return $template;
    }

    public function setTemplateData($array)
    {
        $this->_templateData = (array) $array;
    }

    private function _hasCustomTemplate()

    {
        $base = $this->_getCustomTemplateBase();
        $action = $this->_getCustomTemplateAction();

        return Ajde_Template::exist($base, $action) !== false;
    }

    private function _getCustomTemplateBase()
    {
        return MODULE_DIR.$this->getCustomTemplateModule().DIRECTORY_SEPARATOR;
    }

    private function _getCustomTemplateAction()
    {
        return 'crud/'.(string) $this->getModel()->getTable().DIRECTORY_SEPARATOR.$this->getAction();
    }
}


Issues (1919)

Security Analysis not enabled

lib/Ajde/Crud.php (42 issues)

Labels

Severity

Introduced By

Upgrade to new PHP Analysis Engine

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

nabble / ajde

Issues (1919)

Security Analysis not enabled

lib/Ajde/Crud.php (42 issues)

Labels

Severity

Introduced By

Upgrade to new PHP Analysis Engine

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Available Fixes

Duplication Side-by-Side

Filter issues like