This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | /** |
||
4 | * A GridField component that allows to temporary disable the |
||
5 | * pagination. |
||
6 | * |
||
7 | * It should be included before the GridFieldPaginator component that |
||
8 | * must be present (otherwise this class would be pretty useless). |
||
9 | * |
||
10 | * @package silverstripe-togglepaginator |
||
11 | */ |
||
12 | class GridFieldTogglePaginator implements GridField_HTMLProvider, GridField_ActionProvider, GridField_DataManipulator |
||
0 ignored issues
–
show
|
|||
13 | { |
||
14 | /** |
||
15 | * The icon to use on the enable pagination button. Can be null. |
||
16 | * @config |
||
17 | */ |
||
18 | private static $enable_icon; |
||
0 ignored issues
–
show
|
|||
19 | |||
20 | /** |
||
21 | * The icon to use on the disable pagination button. Can be null. |
||
22 | * @config |
||
23 | */ |
||
24 | private static $disable_icon; |
||
0 ignored issues
–
show
|
|||
25 | |||
26 | /** |
||
27 | * Fragment to write the button to. |
||
28 | */ |
||
29 | protected $target; |
||
30 | |||
31 | /** |
||
32 | * ID of the session data. |
||
33 | */ |
||
34 | protected $state_id; |
||
35 | |||
36 | /** |
||
37 | * Session data (an associative array). |
||
38 | */ |
||
39 | protected $state; |
||
40 | |||
41 | |||
42 | public function __construct($target = 'buttons-before-right') |
||
43 | { |
||
44 | $this->target = $target; |
||
45 | } |
||
46 | |||
47 | /** |
||
48 | * Update $state and $state_id properties. |
||
49 | * |
||
50 | * If the $state array does not exist in the session, create it. |
||
51 | * |
||
52 | * The current implementation is borrowed directly from |
||
53 | * GridField_FormAction::getAttributes() 3.2.0-beta2. |
||
54 | */ |
||
55 | protected function updateState($grid) |
||
56 | { |
||
57 | if (isset($this->state_id)) { |
||
58 | return; |
||
59 | } |
||
60 | |||
61 | $state = array( |
||
62 | 'grid' => $grid->getName(), |
||
63 | 'actionName' => 'toggle', |
||
64 | 'active' => true, |
||
65 | ); |
||
66 | |||
67 | // Ensure the id doesn't contain only numeric characters |
||
68 | $this->state_id = 'gf_' . substr(md5(serialize($state)), 0, 8); |
||
69 | |||
70 | $this->state = Session::get($this->state_id); |
||
71 | if (! is_array($this->state) || ! array_key_exists('active', $this->state)) { |
||
72 | $this->state = $state; |
||
73 | Session::set($this->state_id, $state); |
||
0 ignored issues
–
show
$state is of type array<string,?,{"grid":"...g","active":"boolean"}> , but the function expects a string .
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
![]() |
|||
74 | } |
||
75 | } |
||
76 | |||
77 | /** |
||
78 | * Implements the GridField_HTMLProvider interface. |
||
79 | * |
||
80 | * @param GridField $grid |
||
81 | * @return array |
||
82 | */ |
||
83 | public function getHTMLFragments($grid) |
||
84 | { |
||
85 | $this->updateState($grid); |
||
86 | |||
87 | $active = $this->state['active']; |
||
88 | $params = http_build_query(array('StateID' => $this->state_id)); |
||
89 | $data = new ArrayData(array( |
||
90 | 'state' => $active ? 'ui-state-default' : 'ss-ui-alternate ui-state-highlight', |
||
91 | 'icon' => Config::inst()->get(__CLASS__, $active ? 'enable_icon' : 'disable_icon'), |
||
92 | 'label' => $active ? _t(__CLASS__ . '.DISABLE', 'Disable') : _t(__CLASS__ . '.ENABLE', 'Enable'), |
||
93 | 'name' => 'action_gridFieldAlterAction?' . $params, |
||
94 | 'url' => $grid->Link(), |
||
95 | )); |
||
96 | |||
97 | return array( |
||
98 | $this->target => $data->renderWith(__CLASS__), |
||
99 | ); |
||
100 | } |
||
101 | |||
102 | /** |
||
103 | * Required by the GridField_ActionProvider interface. |
||
104 | * |
||
105 | * @param GridField $grid |
||
106 | * @return array |
||
107 | */ |
||
108 | public function getActions($grid) |
||
109 | { |
||
110 | return array('toggle'); |
||
111 | } |
||
112 | |||
113 | /** |
||
114 | * Handle the action. |
||
115 | * |
||
116 | * It swithces the "state" flag and saves the data into a session |
||
117 | * variable for later reuse. |
||
118 | * |
||
119 | * @param GridField $grid The subject GridField instance |
||
120 | * @param string $action The action name (lowercase!) |
||
121 | * @param mixed $arguments Optional argument(s) for the action |
||
122 | * @param array $data Form data, if relevant |
||
123 | * |
||
124 | * @throws InvalidArgumentException |
||
125 | */ |
||
126 | public function handleAction(GridField $grid, $action, $arguments, $data) |
||
127 | { |
||
128 | switch ($action) { |
||
129 | |||
130 | case 'toggle': |
||
131 | $this->updateState($grid); |
||
132 | $this->state['active'] = ! $this->state['active']; |
||
133 | Session::set($this->state_id, $this->state); |
||
0 ignored issues
–
show
$this->state is of type array<string,?,{"active":"boolean"}> , but the function expects a string .
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
![]() |
|||
134 | break; |
||
135 | |||
136 | default: |
||
137 | throw new InvalidArgumentException(sprintf( |
||
138 | 'Action "%s" not understood', |
||
139 | $action |
||
140 | )); |
||
141 | } |
||
142 | } |
||
143 | |||
144 | /** |
||
145 | * Required by the GridField_DataManipulator interface. |
||
146 | * |
||
147 | * Disable pagination on the GridFieldPaginator component, if |
||
148 | * required by the current "state" flag. It must be called before |
||
149 | * GridFieldPaginator::getManipulatedData() to take effect, hence |
||
150 | * the requirement that GridFieldTogglePaginator must be added |
||
151 | * before GridFieldPaginator. |
||
152 | * |
||
153 | * @param GridField $grid |
||
154 | * @return SS_List |
||
155 | */ |
||
156 | public function getManipulatedData(GridField $grid, SS_List $list) |
||
157 | { |
||
158 | $this->updateState($grid); |
||
159 | if (! $this->state['active']) { |
||
160 | $grid->getConfig()->getComponentByType('GridFieldPaginator') |
||
161 | ->setItemsPerPage(PHP_INT_MAX); |
||
162 | } |
||
163 | return $list; |
||
164 | } |
||
165 | } |
||
166 |
You can fix this by adding a namespace to your class:
When choosing a vendor namespace, try to pick something that is not too generic to avoid conflicts with other libraries.