Issues in User.php (master) - Issues in master - php-api-clients/twitter - Measure and Improve Code Quality continuously with Scrutinizer

Issues (40)

Security Analysis no request data

Cross-Site Scripting

Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.

File Exposure

File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.

File Manipulation

File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.

Object Injection

Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.

Code Injection

Code Injection enables an attacker to execute arbitrary code on the server.

Response Splitting

Response Splitting can be used to send arbitrary responses.

File Inclusion

File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.

Command Injection

Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.

SQL Injection

SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.

XPath Injection

XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.

LDAP Injection

LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.

Header Injection

Other Vulnerability

This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.

Regex Injection

Regex Injection enables an attacker to execute arbitrary code in your PHP process.

XML Injection

XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.

Variable Injection

Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.

Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

src/Resource/User.php (6 issues)

Labels

Bug 6

Severity

Major 6

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

<?php declare(strict_types=1);

namespace ApiClients\Client\Twitter\Resource;

use ApiClients\Foundation\Hydrator\Annotation\EmptyResource;
use ApiClients\Foundation\Resource\AbstractResource;
use DateTime;

/**
 * @EmptyResource("EmptyUser")
 */
abstract class User extends AbstractResource implements UserInterface
{
    /**
     * @var int
     */
    protected $id;

    /**
     * @var string
     */
    protected $id_str;

    /**
     * @var string
     */
    protected $name;

    /**
     * @var string
     */
    protected $screen_name;

    /**
     * @var string
     */
    protected $location;

    /**
     * @var string
     */
    //protected $profile_location;

    /**
     * @var string
     */
    protected $description;

    /**
     * @var string
     */
    protected $url;

    /**
     * @var bool
     */
    protected $protected;

    /**
     * @var int
     */
    protected $followers_count;

    /**
     * @var int
     */
    protected $friends_count;

    /**
     * @var int
     */
    protected $listed_count;

    /**
     * @var DateTime
     */
    protected $created_at;

    /**
     * @var int
     */
    protected $favourites_count;

    /**
     * @var int
     */
    protected $utc_offset;

    /**
     * @var string
     */
    protected $time_zone;

    /**
     * @var bool
     */
    protected $geo_enabled;

    /**
     * @var bool
     */
    protected $verified;

    /**
     * @var int
     */
    protected $statuses_count;

    /**
     * @var string
     */
    protected $lang;

    /**
     * @var array
     */
    //protected $status;

    /**
     * @var bool
     */
    protected $contributors_enabled;

    /**
     * @var bool
     */
    //protected $is_translator;

    /**
     * @var bool
     */
    //protected $is_translator_enabled;

    /**
     * @var string
     */
    protected $profile_background_color;

    /**
     * @var string
     */
    protected $profile_background_image_url;

    /**
     * @var string
     */
    protected $profile_background_image_url_https;

    /**
     * @var bool
     */
    protected $profile_background_tile;

    /**
     * @var string
     */
    protected $profile_image_url;

    /**
     * @var string
     */
    protected $profile_image_url_https;

    /**
     * @var string
     */
    //protected $profile_banner_url;

    /**
     * @var string
     */
    protected $profile_link_color;

    /**
     * @var string
     */
    protected $profile_sidebar_border_color;

    /**
     * @var string
     */
    protected $profile_sidebar_fill_color;

    /**
     * @var string
     */
    protected $profile_text_color;

    /**
     * @var bool
     */
    protected $profile_use_background_image;

    /**
     * @var bool
     */
    //protected $has_extended_profile;

    /**
     * @var bool
     */
    protected $default_profile;

    /**
     * @var bool
     */
    protected $default_profile_image;

    /**
     * @var bool
     */
    protected $following;

    /**
     * @var bool
     */
    protected $follow_request_sent;

    /**
     * @var bool
     */
    protected $notifications;

    /**
     * @return int
     */
    public function id(): int
    {
        return $this->id;
    }

    /**
     * @return string
     */
    public function idStr(): string
    {
        return $this->id_str;
    }

    /**
     * @return string
     */
    public function name(): string
    {
        return $this->name;
    }

    /**
     * @return string
     */
    public function screenName(): string
    {
        return $this->screen_name;
    }

    /**
     * @return string
     */
    public function location(): string
    {
        return $this->location;
    }

    /**
     * @return string
     */
    public function profileLocation(): string
    {
        return $this->profile_location;

    }

    /**
     * @return string
     */
    public function description(): string
    {
        return $this->description;
    }

    /**
     * @return string
     */
    public function url(): string
    {
        return $this->url;
    }

    /**
     * @return bool
     */
    public function protected(): bool
    {
        return $this->protected;
    }

    /**
     * @return int
     */
    public function followersCount(): int
    {
        return $this->followers_count;
    }

    /**
     * @return int
     */
    public function friendsCount(): int
    {
        return $this->friends_count;
    }

    /**
     * @return int
     */
    public function listedCount(): int
    {
        return $this->listed_count;
    }

    /**
     * @return DateTime
     */
    public function createdAt(): DateTime
    {
        return $this->created_at;
    }

    /**
     * @return int
     */
    public function favouritesCount(): int
    {
        return $this->favourites_count;
    }

    /**
     * @return int
     */
    public function utcOffset(): int
    {
        return $this->utc_offset;
    }

    /**
     * @return string
     */
    public function timeZone(): string
    {
        return $this->time_zone;
    }

    /**
     * @return bool
     */
    public function geoEnabled(): bool
    {
        return $this->geo_enabled;
    }

    /**
     * @return bool
     */
    public function verified(): bool
    {
        return $this->verified;
    }

    /**
     * @return int
     */
    public function statusesCount(): int
    {
        return $this->statuses_count;
    }

    /**
     * @return string
     */
    public function lang(): string
    {
        return $this->lang;
    }

    /**
     * @return array
     */
    public function status(): array
    {
        return $this->status;

    }

    /**
     * @return bool
     */
    public function contributorsEnabled(): bool
    {
        return $this->contributors_enabled;
    }

    /**
     * @return bool
     */
    public function isTranslator(): bool
    {
        return $this->is_translator;
class MyClass { }

$x = new MyClass();
$x->foo = true;
    }

    /**
     * @return bool
     */
    public function isTranslatorEnabled(): bool
    {
        return $this->is_translator_enabled;

    }

    /**
     * @return string
     */
    public function profileBackgroundColor(): string
    {
        return $this->profile_background_color;
    }

    /**
     * @return string
     */
    public function profileBackgroundImageUrl(): string
    {
        return $this->profile_background_image_url;
    }

    /**
     * @return string
     */
    public function profileBackgroundImageUrlHttps(): string
    {
        return $this->profile_background_image_url_https;
    }

    /**
     * @return bool
     */
    public function profileBackgroundTile(): bool
    {
        return $this->profile_background_tile;
    }

    /**
     * @return string
     */
    public function profileImageUrl(): string
    {
        return $this->profile_image_url;
    }

    /**
     * @return string
     */
    public function profileImageUrlHttps(): string
    {
        return $this->profile_image_url_https;
    }

    /**
     * @return string
     */
    public function profileBannerUrl(): string
    {
        return $this->profile_banner_url;
class MyClass { }

$x = new MyClass();
$x->foo = true;
    }

    /**
     * @return string
     */
    public function profileLinkColor(): string
    {
        return $this->profile_link_color;
    }

    /**
     * @return string
     */
    public function profileSidebarBorderColor(): string
    {
        return $this->profile_sidebar_border_color;
    }

    /**
     * @return string
     */
    public function profileSidebarFillColor(): string
    {
        return $this->profile_sidebar_fill_color;
    }

    /**
     * @return string
     */
    public function profileTextColor(): string
    {
        return $this->profile_text_color;
    }

    /**
     * @return bool
     */
    public function profileUseBackgroundImage(): bool
    {
        return $this->profile_use_background_image;
    }

    /**
     * @return bool
     */
    public function hasExtendedProfile(): bool
    {
        return $this->has_extended_profile;
class MyClass { }

$x = new MyClass();
$x->foo = true;
    }

    /**
     * @return bool
     */
    public function defaultProfile(): bool
    {
        return $this->default_profile;
    }

    /**
     * @return bool
     */
    public function defaultProfileImage(): bool
    {
        return $this->default_profile_image;
    }

    /**
     * @return bool
     */
    public function following(): bool
    {
        return $this->following;
    }

    /**
     * @return bool
     */
    public function followRequestSent(): bool
    {
        return $this->follow_request_sent;
    }

    /**
     * @return bool
     */
    public function notifications(): bool
    {
        return $this->notifications;
    }
}


GitHub Access Token became invalid

Issues (40)

Security Analysis no request data

src/Resource/User.php (6 issues)

Labels

Severity

Introduced By

Upgrade to new PHP Analysis Engine

1		<?php declare(strict_types=1);
2
3		namespace ApiClients\Client\Twitter\Resource;
4
5		use ApiClients\Foundation\Hydrator\Annotation\EmptyResource;
6		use ApiClients\Foundation\Resource\AbstractResource;
7		use DateTime;
8
9		/**
10		* @EmptyResource("EmptyUser")
11		*/
12		abstract class User extends AbstractResource implements UserInterface
13		{
14		/**
15		* @var int
16		*/
17		protected $id;
18
19		/**
20		* @var string
21		*/
22		protected $id_str;
23
24		/**
25		* @var string
26		*/
27		protected $name;
28
29		/**
30		* @var string
31		*/
32		protected $screen_name;
33
34		/**
35		* @var string
36		*/
37		protected $location;
38
39		/**
40		* @var string
41		*/
42		//protected $profile_location;
43
44		/**
45		* @var string
46		*/
47		protected $description;
48
49		/**
50		* @var string
51		*/
52		protected $url;
53
54		/**
55		* @var bool
56		*/
57		protected $protected;
58
59		/**
60		* @var int
61		*/
62		protected $followers_count;
63
64		/**
65		* @var int
66		*/
67		protected $friends_count;
68
69		/**
70		* @var int
71		*/
72		protected $listed_count;
73
74		/**
75		* @var DateTime
76		*/
77		protected $created_at;
78
79		/**
80		* @var int
81		*/
82		protected $favourites_count;
83
84		/**
85		* @var int
86		*/
87		protected $utc_offset;
88
89		/**
90		* @var string
91		*/
92		protected $time_zone;
93
94		/**
95		* @var bool
96		*/
97		protected $geo_enabled;
98
99		/**
100		* @var bool
101		*/
102		protected $verified;
103
104		/**
105		* @var int
106		*/
107		protected $statuses_count;
108
109		/**
110		* @var string
111		*/
112		protected $lang;
113
114		/**
115		* @var array
116		*/
117		//protected $status;
118
119		/**
120		* @var bool
121		*/
122		protected $contributors_enabled;
123
124		/**
125		* @var bool
126		*/
127		//protected $is_translator;
128
129		/**
130		* @var bool
131		*/
132		//protected $is_translator_enabled;
133
134		/**
135		* @var string
136		*/
137		protected $profile_background_color;
138
139		/**
140		* @var string
141		*/
142		protected $profile_background_image_url;
143
144		/**
145		* @var string
146		*/
147		protected $profile_background_image_url_https;
148
149		/**
150		* @var bool
151		*/
152		protected $profile_background_tile;
153
154		/**
155		* @var string
156		*/
157		protected $profile_image_url;
158
159		/**
160		* @var string
161		*/
162		protected $profile_image_url_https;
163
164		/**
165		* @var string
166		*/
167		//protected $profile_banner_url;
168
169		/**
170		* @var string
171		*/
172		protected $profile_link_color;
173
174		/**
175		* @var string
176		*/
177		protected $profile_sidebar_border_color;
178
179		/**
180		* @var string
181		*/
182		protected $profile_sidebar_fill_color;
183
184		/**
185		* @var string
186		*/
187		protected $profile_text_color;
188
189		/**
190		* @var bool
191		*/
192		protected $profile_use_background_image;
193
194		/**
195		* @var bool
196		*/
197		//protected $has_extended_profile;
198
199		/**
200		* @var bool
201		*/
202		protected $default_profile;
203
204		/**
205		* @var bool
206		*/
207		protected $default_profile_image;
208
209		/**
210		* @var bool
211		*/
212		protected $following;
213
214		/**
215		* @var bool
216		*/
217		protected $follow_request_sent;
218
219		/**
220		* @var bool
221		*/
222		protected $notifications;
223
224		/**
225		* @return int
226		*/
227	4	public function id(): int
228		{
229	4	return $this->id;
230		}
231
232		/**
233		* @return string
234		*/
235	4	public function idStr(): string
236		{
237	4	return $this->id_str;
238		}
239
240		/**
241		* @return string
242		*/
243	4	public function name(): string
244		{
245	4	return $this->name;
246		}
247
248		/**
249		* @return string
250		*/
251	4	public function screenName(): string
252		{
253	4	return $this->screen_name;
254		}
255
256		/**
257		* @return string
258		*/
259	4	public function location(): string
260		{
261	4	return $this->location;
262		}
263
264		/**
265		* @return string
266		*/
267		public function profileLocation(): string
268		{
269		return $this->profile_location;
		0 ignored issues – show Bug introduced 2016-12-07 22:11 UTC by Report Bug Copy Issue Report Show Similar Issues like this The property `profile_location` does not seem to exist. Did you mean `location`? An attempt at access to an undefined property has been detected. This may either be a typographical error or the property has been renamed but there are still references to its old name. If you really want to allow access to undefined properties, you can define magic methods to allow access. See the php core documentation on Overloading. Loading history...
270		}
271
272		/**
273		* @return string
274		*/
275	4	public function description(): string
276		{
277	4	return $this->description;
278		}
279
280		/**
281		* @return string
282		*/
283	4	public function url(): string
284		{
285	4	return $this->url;
286		}
287
288		/**
289		* @return bool
290		*/
291	4	public function protected(): bool
292		{
293	4	return $this->protected;
294		}
295
296		/**
297		* @return int
298		*/
299	4	public function followersCount(): int
300		{
301	4	return $this->followers_count;
302		}
303
304		/**
305		* @return int
306		*/
307	4	public function friendsCount(): int
308		{
309	4	return $this->friends_count;
310		}
311
312		/**
313		* @return int
314		*/
315	4	public function listedCount(): int
316		{
317	4	return $this->listed_count;
318		}
319
320		/**
321		* @return DateTime
322		*/
323		public function createdAt(): DateTime
324		{
325		return $this->created_at;
326		}
327
328		/**
329		* @return int
330		*/
331	4	public function favouritesCount(): int
332		{
333	4	return $this->favourites_count;
334		}
335
336		/**
337		* @return int
338		*/
339	4	public function utcOffset(): int
340		{
341	4	return $this->utc_offset;
342		}
343
344		/**
345		* @return string
346		*/
347	4	public function timeZone(): string
348		{
349	4	return $this->time_zone;
350		}
351
352		/**
353		* @return bool
354		*/
355	4	public function geoEnabled(): bool
356		{
357	4	return $this->geo_enabled;
358		}
359
360		/**
361		* @return bool
362		*/
363	4	public function verified(): bool
364		{
365	4	return $this->verified;
366		}
367
368		/**
369		* @return int
370		*/
371	4	public function statusesCount(): int
372		{
373	4	return $this->statuses_count;
374		}
375
376		/**
377		* @return string
378		*/
379	4	public function lang(): string
380		{
381	4	return $this->lang;
382		}
383
384		/**
385		* @return array
386		*/
387		public function status(): array
388		{
389		return $this->status;
		0 ignored issues – show Bug introduced 2016-12-07 22:11 UTC by Report Bug Copy Issue Report Show Similar Issues like this The property `status` does not seem to exist. Did you mean `statuses_count`? An attempt at access to an undefined property has been detected. This may either be a typographical error or the property has been renamed but there are still references to its old name. If you really want to allow access to undefined properties, you can define magic methods to allow access. See the php core documentation on Overloading. Loading history...
390		}
391
392		/**
393		* @return bool
394		*/
395	4	public function contributorsEnabled(): bool
396		{
397	4	return $this->contributors_enabled;
398		}
399
400		/**
401		* @return bool
402		*/
403		public function isTranslator(): bool
404		{
405		return $this->is_translator;
		0 ignored issues – show Bug introduced 2016-12-07 22:11 UTC by Report Bug Copy Issue Report Show Similar Issues like this The property `is_translator` does not exist. Did you maybe forget to declare it? In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code: class MyClass { } $x = new MyClass(); $x->foo = true; Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: class MyClass { public $foo; } $x = new MyClass(); $x->foo = true; Loading history...
406		}
407
408		/**
409		* @return bool
410		*/
411		public function isTranslatorEnabled(): bool
412		{
413		return $this->is_translator_enabled;
		0 ignored issues – show Bug introduced 2016-12-07 22:11 UTC by Report Bug Copy Issue Report Show Similar Issues like this The property `is_translator_enabled` does not seem to exist. Did you mean `is_translator`? An attempt at access to an undefined property has been detected. This may either be a typographical error or the property has been renamed but there are still references to its old name. If you really want to allow access to undefined properties, you can define magic methods to allow access. See the php core documentation on Overloading. Loading history...
414		}
415
416		/**
417		* @return string
418		*/
419	4	public function profileBackgroundColor(): string
420		{
421	4	return $this->profile_background_color;
422		}
423
424		/**
425		* @return string
426		*/
427	4	public function profileBackgroundImageUrl(): string
428		{
429	4	return $this->profile_background_image_url;
430		}
431
432		/**
433		* @return string
434		*/
435	4	public function profileBackgroundImageUrlHttps(): string
436		{
437	4	return $this->profile_background_image_url_https;
438		}
439
440		/**
441		* @return bool
442		*/
443	4	public function profileBackgroundTile(): bool
444		{
445	4	return $this->profile_background_tile;
446		}
447
448		/**
449		* @return string
450		*/
451	4	public function profileImageUrl(): string
452		{
453	4	return $this->profile_image_url;
454		}
455
456		/**
457		* @return string
458		*/
459	4	public function profileImageUrlHttps(): string
460		{
461	4	return $this->profile_image_url_https;
462		}
463
464		/**
465		* @return string
466		*/
467		public function profileBannerUrl(): string
468		{
469		return $this->profile_banner_url;
		0 ignored issues – show Bug introduced 2016-12-07 22:11 UTC by Report Bug Copy Issue Report Show Similar Issues like this The property `profile_banner_url` does not exist. Did you maybe forget to declare it? In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code: class MyClass { } $x = new MyClass(); $x->foo = true; Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: class MyClass { public $foo; } $x = new MyClass(); $x->foo = true; Loading history...
470		}
471
472		/**
473		* @return string
474		*/
475	4	public function profileLinkColor(): string
476		{
477	4	return $this->profile_link_color;
478		}
479
480		/**
481		* @return string
482		*/
483	4	public function profileSidebarBorderColor(): string
484		{
485	4	return $this->profile_sidebar_border_color;
486		}
487
488		/**
489		* @return string
490		*/
491	4	public function profileSidebarFillColor(): string
492		{
493	4	return $this->profile_sidebar_fill_color;
494		}
495
496		/**
497		* @return string
498		*/
499	4	public function profileTextColor(): string
500		{
501	4	return $this->profile_text_color;
502		}
503
504		/**
505		* @return bool
506		*/
507	4	public function profileUseBackgroundImage(): bool
508		{
509	4	return $this->profile_use_background_image;
510		}
511
512		/**
513		* @return bool
514		*/
515		public function hasExtendedProfile(): bool
516		{
517		return $this->has_extended_profile;
		0 ignored issues – show Bug introduced 2016-12-07 22:11 UTC by Report Bug Copy Issue Report Show Similar Issues like this The property `has_extended_profile` does not exist. Did you maybe forget to declare it? In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code: class MyClass { } $x = new MyClass(); $x->foo = true; Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: class MyClass { public $foo; } $x = new MyClass(); $x->foo = true; Loading history...
518		}
519
520		/**
521		* @return bool
522		*/
523	4	public function defaultProfile(): bool
524		{
525	4	return $this->default_profile;
526		}
527
528		/**
529		* @return bool
530		*/
531	4	public function defaultProfileImage(): bool
532		{
533	4	return $this->default_profile_image;
534		}
535
536		/**
537		* @return bool
538		*/
539	4	public function following(): bool
540		{
541	4	return $this->following;
542		}
543
544		/**
545		* @return bool
546		*/
547	4	public function followRequestSent(): bool
548		{
549	4	return $this->follow_request_sent;
550		}
551
552		/**
553		* @return bool
554		*/
555	4	public function notifications(): bool
556		{
557	4	return $this->notifications;
558		}
559		}
560

php-api-clients / twitter

GitHub Access Token became invalid

Issues (40)

Security Analysis no request data

src/Resource/User.php (6 issues)

Labels

Severity

Introduced By

Upgrade to new PHP Analysis Engine

Duplication Side-by-Side

Filter issues like