Issues (2739)

Security Analysis    not enabled

This project does not seem to handle request data directly as such no vulnerable execution paths were found.

  Cross-Site Scripting
Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.
  File Exposure
File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.
  File Manipulation
File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.
  Object Injection
Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.
  Code Injection
Code Injection enables an attacker to execute arbitrary code on the server.
  Response Splitting
Response Splitting can be used to send arbitrary responses.
  File Inclusion
File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.
  Command Injection
Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.
  SQL Injection
SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.
  XPath Injection
XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.
  LDAP Injection
LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.
  Header Injection
  Other Vulnerability
This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.
  Regex Injection
Regex Injection enables an attacker to execute arbitrary code in your PHP process.
  XML Injection
XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.
  Variable Injection
Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.
Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

src/Eccube/Service/CartService.php (18 issues)

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

1
<?php
2
/*
3
 * This file is part of EC-CUBE
4
 *
5
 * Copyright(c) 2000-2015 LOCKON CO.,LTD. All Rights Reserved.
6
 *
7
 * http://www.lockon.co.jp/
8
 *
9
 * This program is free software; you can redistribute it and/or
10
 * modify it under the terms of the GNU General Public License
11
 * as published by the Free Software Foundation; either version 2
12
 * of the License, or (at your option) any later version.
13
 *
14
 * This program is distributed in the hope that it will be useful,
15
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17
 * GNU General Public License for more details.
18
 *
19
 * You should have received a copy of the GNU General Public License
20
 * along with this program; if not, write to the Free Software
21
 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
22
 */
23
24
25
namespace Eccube\Service;
26
27
use Doctrine\ORM\EntityManager;
28
use Eccube\Common\Constant;
29
use Eccube\Entity\CartItem;
30
use Eccube\Entity\Master\Disp;
31
use Eccube\Entity\ProductClass;
32
use Eccube\Exception\CartException;
33
use Symfony\Component\HttpFoundation\Session\Session;
34
35
class CartService
0 ignored issues
show
Missing class doc comment
Loading history...
36
{
37
    /** @var \Eccube\Application */
38
    public $app;
39
40
    /**
41
     * @var Session
42
     */
43
    private $session;
44
45
    /**
46
     * @var EntityManager
47
     */
48
    private $entityManager;
49
50
    /**
51
     * @var \Eccube\Entity\Cart
52
     */
53
    private $cart;
54
55
    /**
56
     * @var \Eccube\Entity\BaseInfo
57
     */
58
    private $BaseInfo;
59
60
    /**
61
     * @var array
62
     */
63
    private $errors = array();
64
65
    private $ProductType = null;
66
67
    /**
68
     * @var array
69
     */
70
    private $messages = array();
71
72
    /**
73
     * @var array
74
     */
75
    private $error;
76
77 121
    public function __construct(\Eccube\Application $app)
0 ignored issues
show
Missing function doc comment
Loading history...
78
    {
79 121
        $this->app = $app;
80
        $this->session = $app['session'];
81
        $this->entityManager = $app['orm.em'];
82
83
        if ($this->session->has('cart')) {
84
            $this->cart = $this->session->get('cart');
85
        } else {
86
            $this->cart = new \Eccube\Entity\Cart();
87
        }
88
89
        $this->loadProductClassFromCart();
90
91
        $this->BaseInfo = $app['eccube.repository.base_info']->get();
92
    }
93
94
    /**
95
     * カートに保存されている商品の ProductClass エンティティを読み込み、カートへ設定します。
96
     */
97 121
    protected function loadProductClassFromCart()
98
    {
99
        /* @var $softDeleteFilter \Eccube\Doctrine\Filter\SoftDeleteFilter */
100
        $softDeleteFilter = $this->entityManager->getFilters()->getFilter('soft_delete');
101
        $excludes = $softDeleteFilter->getExcludes();
102
        $softDeleteFilter->setExcludes(array(
103
            'Eccube\Entity\ProductClass',
104
        ));
105 121
106
        foreach ($this->cart->getCartItems() as $CartItem) {
107 121
            $this->loadProductClassFromCartItem($CartItem);
108
        }
109
110 121
        $softDeleteFilter->setExcludes($excludes);
111
    }
112
113
    /**
114
     * CartItem に対応する ProductClass を設定します。
115
     *
116
     * @param CartItem $CartItem
117 29
     */
118
    protected function loadProductClassFromCartItem(CartItem $CartItem)
119
    {
120 29
        $ProductClass = $this
121
            ->entityManager
122
            ->getRepository($CartItem->getClassName())
123
            ->find($CartItem->getClassId());
124
125
        $CartItem->setObject($ProductClass);
126
127
        if (is_null($this->ProductType) && $ProductClass->getDelFlg() == Constant::DISABLED) {
128
            $this->setCanAddProductType($ProductClass->getProductType());
129
        }
130
    }
131 68
132
    public function setCanAddProductType(\Eccube\Entity\Master\ProductType $ProductType)
0 ignored issues
show
Declare public methods first, then protected ones and finally private ones
Loading history...
Missing function doc comment
Loading history...
133
    {
134 68
        if (is_null($this->ProductType)) {
135
            $this->ProductType = $ProductType;
136
        }
137 60
138 60
        return $this;
139
    }
140
141
    public function save()
0 ignored issues
show
Missing function doc comment
Loading history...
142
    {
143
        return $this->session->set('cart', $this->cart);
144
    }
145 3
146
    public function unlock()
0 ignored issues
show
Missing function doc comment
Loading history...
147 3
    {
148 3
        $this->cart
149
            ->setLock(false)
150 3
            ->setPreOrderId(null);
151
    }
152 13
153
    public function lock()
0 ignored issues
show
Missing function doc comment
Loading history...
154 13
    {
155 13
        $this->cart
156
            ->setLock(true)
157 13
            ->setPreOrderId(null);
158
    }
159
160
    /**
161
     * @return bool
162
     */
163
    public function isLocked()
164
    {
165
        return $this->cart->getLock();
166
    }
167
168
    /**
169
     * @param  string $pre_order_id
170
     * @return \Eccube\Service\CartService
171 17
     */
172
    public function setPreOrderId($pre_order_id)
173
    {
174
        $this->cart->setPreOrderId($pre_order_id);
175 17
176
        return $this;
177
    }
178
179
    /**
180
     * @return string
181
     */
182
    public function getPreOrderId()
183
    {
184
        return $this->cart->getPreOrderId();
185
    }
186
187
    /**
188
     * @return \Eccube\Service\CartService
189 7
     */
190
    public function clear()
191 7
    {
192 7
        $this->cart
193 7
            ->setPreOrderId(null)
194
            ->setLock(false)
195
            ->clearCartItems();
196 7
197
        return $this;
198
    }
199 1
200
    public function getCanAddProductType()
0 ignored issues
show
Missing function doc comment
Loading history...
201 1
    {
202
        return $this->ProductType;
203
    }
204
205
    /**
206
     *
207
     * @param  string $productClassId
0 ignored issues
show
Expected 2 spaces after parameter type; 1 found
Loading history...
208
     * @param  integer $quantity
209
     * @return \Eccube\Service\CartService
210 25
     */
211
    public function addProduct($productClassId, $quantity = 1)
212
    {
213
        $quantity += $this->getProductQuantity($productClassId);
214
        $this->setProductQuantity($productClassId, $quantity);
215 25
216 3
        return $this;
217
    }
218
219
    /**
220
     * @param  string $productClassId
221
     * @return integer
222 27
     */
223
    public function getProductQuantity($productClassId)
224
    {
225 26
        $CartItem = $this->cart->getCartItemByIdentifier('Eccube\Entity\ProductClass', (string)$productClassId);
0 ignored issues
show
As per coding-style, a cast statement should be followed by a single space.
Loading history...
226
        if ($CartItem) {
227
            return $CartItem->getQuantity();
228 27
        } else {
229
            return 0;
230
        }
231
    }
232
233
    /**
234
     * @param  \Eccube\Entity\ProductClass|integer $ProductClass
235
     * @param  integer $quantity
0 ignored issues
show
Expected 29 spaces after parameter type; 1 found
Loading history...
236
     * @return \Eccube\Service\CartService
237
     * @throws CartException
238 61
     */
239
    public function setProductQuantity($ProductClass, $quantity)
240 61
    {
241 56
        if (!$ProductClass instanceof ProductClass) {
0 ignored issues
show
The class Eccube\Entity\ProductClass does not exist. Did you forget a USE statement, or did you not list all dependencies?

This error could be the result of:

1. Missing dependencies

PHP Analyzer uses your composer.json file (if available) to determine the dependencies of your project and to determine all the available classes and functions. It expects the composer.json to be in the root folder of your repository.

Are you sure this class is defined by one of your dependencies, or did you maybe not list a dependency in either the require or require-dev section?

2. Missing use statement

PHP does not complain about undefined classes in ìnstanceof checks. For example, the following PHP code will work perfectly fine:

if ($x instanceof DoesNotExist) {
    // Do something.
}

If you have not tested against this specific condition, such errors might go unnoticed.

Loading history...
242 56
            $ProductClass = $this->entityManager
243
                ->getRepository('Eccube\Entity\ProductClass')
244 56
                ->find($ProductClass);
245
            if (!$ProductClass) {
246
                throw new CartException('cart.product.delete');
247
            }
248
        }
249
250
        if (!$this->isProductDisplay($ProductClass)) {
251
            throw new CartException('cart.product.not.status');
252
        }
253
254
        $productName = $this->getProductName($ProductClass);
255
256
        // 商品種別に紐づく配送業者を取得
257
        $deliveries = $this->app['eccube.repository.delivery']->getDeliveries($ProductClass->getProductType());
258
259
        if (count($deliveries) == 0) {
260
            // 商品種別が存在しなければエラー
261
            $this->removeProduct($ProductClass->getId());
262
            $this->addError('cart.product.not.producttype', $productName);
263
            throw new CartException('cart.product.not.producttype');
264
        }
265
266
        $this->setCanAddProductType($ProductClass->getProductType());
267
268
        if ($this->BaseInfo->getOptionMultipleShipping() != Constant::ENABLED) {
269
            if (!$this->canAddProduct($ProductClass->getId())) {
270
                // 複数配送対応でなければ商品種別が異なればエラー
271
                throw new CartException('cart.product.type.kind');
272
            }
273
        } else {
274
            // 複数配送の場合、同一支払方法がなければエラー
275
            if (!$this->canAddProductPayment($ProductClass->getProductType())) {
276
                throw new CartException('cart.product.payment.kind');
277
            }
278
        }
279
280
        $tmp_subtotal = 0;
281
        $tmp_quantity = 0;
282
        foreach ($this->getCartObj()->getCartItems() as $cartitem) {
283
            $pc = $cartitem->getObject();
284 60
            if ($pc->getId() != $ProductClass->getId()) {
285
                // 追加された商品以外のtotal priceをセット
286 61
                $tmp_subtotal += $cartitem->getTotalPrice();
287 61
            }
288
        }
289
        for ($i = 0; $i < $quantity; $i++) {
290
            $tmp_subtotal += $ProductClass->getPrice02IncTax();
291
            if ($tmp_subtotal > $this->app['config']['max_total_fee']) {
292
                $this->setError('cart.over.price_limit');
293
                break;
294 61
            }
295
            $tmp_quantity++;
296
        }
297
        if ($tmp_quantity == 0) {
298
            // 数量が0の場合、エラー
299 1
            throw new CartException('cart.over.price_limit');
300
        }
301 56
302 1
        // 制限数チェック(在庫不足の場合は、処理の中でカート内商品を削除している)
303 61
        $quantity = $this->setProductLimit($ProductClass, $productName, $tmp_quantity);
304
305 61
		// 新しい数量でカート内商品を登録する
306
        if (0 < $quantity) {
307
            $CartItem = new CartItem();
308
            $CartItem
309
                ->setClassName('Eccube\Entity\ProductClass')
310
                ->setClassId((string)$ProductClass->getId())
0 ignored issues
show
As per coding-style, a cast statement should be followed by a single space.
Loading history...
311
                ->setPrice($ProductClass->getPrice02IncTax())
312
                ->setQuantity($quantity);
313
314
            $this->cart->setCartItem($CartItem);
315
        }
316
317
        return $this;
318 1
    }
319
320
    /**
321
     * @param  string $productClassId
322
     * @return boolean
323
     */
324 61
    public function canAddProduct($productClassId)
325 2
    {
326
        $ProductClass = $this
327
            ->entityManager
328
            ->getRepository('\Eccube\Entity\ProductClass')
329
            ->find($productClassId);
330 61
331
        if (!$ProductClass) {
332
            return false;
333
        }
334
335
        $ProductType = $ProductClass->getProductType();
336
337 61
        return $this->ProductType == $ProductType;
338
    }
339
340
    /**
341
     * @param \Eccube\Entity\Master\ProductType $ProductType
342
     * @return bool
343
     */
344 59
    public function canAddProductPayment(\Eccube\Entity\Master\ProductType $ProductType)
345
    {
346
        $deliveries = $this
347 59
            ->entityManager
348 59
            ->getRepository('\Eccube\Entity\Delivery')
349
            ->findBy(array('ProductType' => $ProductType));
350
351 59
        // 支払方法を取得
352
        $payments = $this->entityManager->getRepository('Eccube\Entity\Payment')->findAllowedPayments($deliveries);
353
354
        if ($this->getCart()->getTotalPrice() < 1) {
355
            // カートになければ支払方法を全て設定
356
            $this->getCart()->setPayments($payments);
357 59
358
            return true;
359
        }
360
361
        // カートに存在している支払方法と追加された商品の支払方法チェック
362
        $arr = array();
363
        foreach ($payments as $payment) {
364 5
            foreach ($this->getCart()->getPayments() as $p) {
365
                if ($payment['id'] == $p['id']) {
366
                    $arr[] = $payment;
367 1
                    break;
368 1
                }
369
            }
370
        }
371
372
        if (count($arr) > 0) {
373
            $this->getCart()->setPayments($arr);
374
375
            return true;
376
        }
377 5
378
        // 支払条件に一致しない
379
        return false;
380
381 2
    }
382
383
    /**
384
     * カートブロックに表示するカートを取得します。
385 1
     * ブロックに表示するカートはチェックを行わず、セットされているカートを返します。
386 1
     *
387
     * @return \Eccube\Entity\Cart
388
     */
389
    public function getCartObj()
390
    {
391
392
        foreach ($this->cart->getCartItems() as $CartItem) {
393 1
394
            /** @var \Eccube\Entity\ProductClass $ProductClass */
395
            $ProductClass = $CartItem->getObject();
396
            if (!$ProductClass) {
397 1
                $this->loadProductClassFromCartItem($CartItem);
398
399 1
                $ProductClass = $CartItem->getObject();
400
            }
401
402
            if ($ProductClass->getDelFlg()) {
403
                // 商品情報が削除されていたらエラー
404
                $this->setError('cart.product.delete');
405
                // カートから削除
406 67
                $this->removeProduct($ProductClass->getId());
407
            }
408 67
        }
409
410 3
        return $this->cart;
411
412
    }
413
414
    /**
415
     * カートを取得します。
416
     *
417
     * @return \Eccube\Entity\Cart
418
     */
419 3
    public function getCart()
420
    {
421
        foreach ($this->cart->getCartItems() as $CartItem) {
422
423
            /** @var \Eccube\Entity\ProductClass $ProductClass */
424
            $ProductClass = $CartItem->getObject();
425
            if (!$ProductClass) {
426 3
                $this->loadProductClassFromCartItem($CartItem);
427
428
                $ProductClass = $CartItem->getObject();
429
            }
430
431
            if ($ProductClass->getDelFlg() == Constant::DISABLED) {
432
                // 商品情報が有効
433
434
                if (!$this->isProductDisplay($ProductClass)) {
435
                    $this->setError('cart.product.not.status');
436
                } else {
0 ignored issues
show
Blank line found at start of control structure
Loading history...
437
438
                    $productName = $this->getProductName($ProductClass);
439 3
440 67
                    // 制限数チェック(在庫不足の場合は、処理の中でカート内商品を削除している)
441
                    $quantity = $this->setProductLimit($ProductClass, $productName, $CartItem->getQuantity());
442 67
443
                    /// 個数が異なれば、新しい数量でカート内商品を更新する
444
                    if ((0 < $quantity) && ($CartItem->getQuantity() != $quantity)) {
445
                        // 個数が異なれば更新
446
                        $CartItem->setQuantity($quantity);
447
                        $this->cart->setCartItem($CartItem);
448
                    }
449 6
                }
450
0 ignored issues
show
Blank line found at end of control structure
Loading history...
451
            } else {
452
                // 商品情報が削除されていたらエラー
453
                $this->setError('cart.product.delete');
454
                // カートから削除
455
                $this->removeProduct($ProductClass->getId());
456
            }
457 1
        }
458
459
        return $this->cart;
460
    }
461
462
    /**
463
     * @param  string $productClassId
464
     * @return \Eccube\Service\CartService
465
     */
466
    public function removeProduct($productClassId)
467
    {
468
        $this->cart->removeCartItemByIdentifier('Eccube\Entity\ProductClass', (string)$productClassId);
0 ignored issues
show
As per coding-style, a cast statement should be followed by a single space.
Loading history...
469
470
        // 支払方法の再設定
471
        if ($this->BaseInfo->getOptionMultipleShipping() == Constant::ENABLED) {
0 ignored issues
show
Blank line found at start of control structure
Loading history...
472
473 6
            // 複数配送対応
474
            $productTypes = array();
475
            foreach ($this->getCart()->getCartItems() as $item) {
476
                /* @var $ProductClass \Eccube\Entity\ProductClass */
477
                $ProductClass = $item->getObject();
478
                $productTypes[] = $ProductClass->getProductType();
479
            }
480
481 6
            // 配送業者を取得
482
            $deliveries = $this->entityManager->getRepository('Eccube\Entity\Delivery')->getDeliveries($productTypes);
483 6
484
            // 支払方法を取得
485
            $payments = $this->entityManager->getRepository('Eccube\Entity\Payment')->findAllowedPayments($deliveries);
486
487
            $this->getCart()->setPayments($payments);
488 6
        }
489
490
        return $this;
491
    }
492
493
    /**
494
     * @param  string $error
495 2
     * @param  string $productName
496
     * @return \Eccube\Service\CartService
497
     */
498
    public function addError($error = null, $productName = null)
499
    {
500 2
        // Filter duplicate
501
        $arrError = $this->session->getFlashBag()->peek('eccube.front.request.error');
502
        $arrProduct = $this->session->getFlashBag()->peek('eccube.front.request.product');
503
        if (in_array($error, $arrError) && in_array($productName, $arrProduct)) {
504
            return $this;
505
        }
506
507 3
        $this->errors[] = $error;
508
        $this->session->getFlashBag()->add('eccube.front.request.error', $error);
509
        if (!is_null($productName)) {
510
            // 追加されているエラーのキーを取得する
511 3
            $cnt = $this->session->getFlashBag()->peek('eccube.front.request.error');
512
            end($cnt);
513
            $key = key($cnt);
514
            // エラーと同じキー商品名を設定する
515 1
            $arrProduct[$key] = $productName;
516
            $this->session->getFlashBag()->set('eccube.front.request.product', $arrProduct);
517 3
        }
518
519
        return $this;
520
    }
521
522
    /**
523 17
     * @param  string $productClassId
524
     * @return \Eccube\Service\CartService
525
     */
526 17
    public function upProductQuantity($productClassId)
527
    {
528
        $quantity = $this->getProductQuantity($productClassId) + 1;
529
        $this->setProductQuantity($productClassId, $quantity);
530
531
        return $this;
532
    }
533
534
    /**
535
     * @param  string $productClassId
536
     * @return \Eccube\Service\CartService
537
     */
538
    public function downProductQuantity($productClassId)
539 2
    {
540
        $quantity = $this->getProductQuantity($productClassId) - 1;
541 2
        if ($quantity > 0) {
542
            $this->setProductQuantity($productClassId, $quantity);
543
        }
544
545
        return $this;
546
    }
547
548
    /**
549
     * @return array
550
     */
551
    public function getProductTypes()
552
    {
553
554
        $productTypes = array();
555
        foreach ($this->getCart()->getCartItems() as $item) {
556
            /* @var $ProductClass \Eccube\Entity\ProductClass */
557
            $ProductClass = $item->getObject();
558
            $productTypes[] = $ProductClass->getProductType();
559
        }
560
561
        return array_unique($productTypes);
562
563
    }
564
565
    /**
566 1
     * @return string[]
567
     */
568 1
    public function getErrors()
569
    {
570
        return $this->errors;
571
    }
572
573
    /**
574
     * @return string[]
575 1
     */
576
    public function getMessages()
577 1
    {
578
        return $this->messages;
579 1
    }
580
581
    /**
582
     * @param  string $message
583
     * @return \Eccube\Service\CartService
584
     */
585
    public function setMessage($message)
586
    {
587
        $this->messages[] = $message;
588
589
        return $this;
590
    }
591
592
    /**
593
     * @return string
594
     */
595
    public function getError()
596
    {
597
        return $this->error;
598
    }
599
600
    /**
601
     * @param  string $error
602
     * @return \Eccube\Service\CartService
603
     */
604
    public function setError($error = null)
605
    {
606
        $this->error = $error;
0 ignored issues
show
Documentation Bug introduced by
It seems like $error of type string or null is incompatible with the declared type array of property $error.

Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property.

Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property..

Loading history...
607
        $this->session->getFlashBag()->set('eccube.front.request.error', $error);
608
609
        return $this;
610
    }
611
612
    /**
613
     * 商品名を取得
614
     *
615
     * @param ProductClass $ProductClass
616
     * @return string
617
     */
618
    private function getProductName(ProductClass $ProductClass)
619
    {
620
621
        $productName = $ProductClass->getProduct()->getName();
622
623
        if ($ProductClass->hasClassCategory1()) {
624
            $productName .= " - ".$ProductClass->getClassCategory1()->getName();
625
        }
626
627
        if ($ProductClass->hasClassCategory2()) {
628
            $productName .= " - ".$ProductClass->getClassCategory2()->getName();
629
        }
630
631
        return $productName;
632
    }
633
634
635
    /**
636
     * 非公開商品の場合、カートから削除
637
     *
638
     * @param ProductClass $ProductClass
639
     * @return bool
640
     */
641
    private function isProductDisplay(ProductClass $ProductClass)
642
    {
643
644
        if ($ProductClass->getProduct()->getStatus()->getId() !== Disp::DISPLAY_SHOW) {
645
            // 非公開の商品はカートから削除
646
            $this->removeProduct($ProductClass->getId());
647
648
            return false;
649
        }
650
651
        return true;
652
    }
653
654
655
    /**
656
     * 在庫数と販売制限数のチェック
657
     * 在庫数または販売制限数以上の個数が設定されていれば、それぞれの個数にセットし、
658
     * 在庫数と販売制限数ともに個数が超えていれば、少ない方を適用させてメッセージを表示する
659
     *
660
     * @param ProductClass $ProductClass
661
     * @param $productName
662
     * @param $quantity
663
     * @return int チェック後に更新した個数
664
     */
665
    private function setProductLimit(ProductClass $ProductClass, $productName, $quantity)
666
    {
667
668
        /**
669
         * 実際の在庫は ProductClass::ProductStock だが、購入時にロックがかかるため、
670
         * ここでは ProductClass::stock で在庫のチェックをする
671
         */
672
673
        // 在庫数(在庫無制限の場合、null)
674
        $stock = $ProductClass->getStock();
675
        // 在庫無制限(在庫無制限の場合、1)
676
        $stockUnlimited = $ProductClass->getStockUnlimited();
677
678
        // 販売制限数(設定されていなければnull)
679
        $saleLimit = $ProductClass->getSaleLimit();
680
681
        if ($stockUnlimited) {
682
            // 在庫無制限
683
684
            if ($saleLimit && $saleLimit < $quantity) {
685
                // 販売制限数を超えていれば販売制限数をセット
686
                $this->addError('cart.over.sale_limit', $productName);
687
688
                return $saleLimit;
689
            }
690
        } else {
691
            // 在庫制限あり
692
693
            if ($stock < 1) {
694
                // 在庫がなければカートから削除
695
                $this->addError('cart.zero.stock', $productName);
696
                $this->removeProduct($ProductClass->getId());
697
698
                return 0;
699
            } else {
700
                // 在庫数チェックと販売制限数チェックどちらを適用するか設定
701
                $message = 'cart.over.stock';
702
                if ($saleLimit) {
703
                    if ($stock > $saleLimit) {
704
                        // 販売制限数チェック
705
                        $limit = $saleLimit;
706
                        $message = 'cart.over.sale_limit';
707
                    } else {
708
                        // 在庫数チェック
709
                        $limit = $stock;
710
                    }
711
                } else {
712
                    // 在庫数チェック
713
                    $limit = $stock;
714
                }
715
716
                if ($limit < $quantity) {
717
                    // 在庫数、販売制限数を超えていれば購入可能数までをセット
718
                    $this->addError($message, $productName);
719
720
                    return $limit;
721
                }
722
            }
723
        }
724
725
        return $quantity;
726
    }
727
728
}
729