Issues in Config.php (master) - Issues in master - realshadow/satis-control-panel - Measure and Improve Code Quality continuously with Scrutinizer

Issues (42)

Security Analysis not enabled

Cross-Site Scripting

Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.

File Exposure

File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.

File Manipulation

File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.

Object Injection

Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.

Code Injection

Code Injection enables an attacker to execute arbitrary code on the server.

Response Splitting

Response Splitting can be used to send arbitrary responses.

File Inclusion

File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.

Command Injection

Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.

SQL Injection

SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.

XPath Injection

XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.

LDAP Injection

LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.

Header Injection

Other Vulnerability

This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.

Regex Injection

Regex Injection enables an attacker to execute arbitrary code in your PHP process.

XML Injection

XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.

Variable Injection

Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.

Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

app/Satis/Model/Config.php (2 issues)

Labels

Documentation 2

Severity

Minor 2

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

<?php

namespace App\Satis\Model;

use App\Satis\Collections\RepositoryCollection;
use App\Satis\Collections\PackageCollection;
use JMS\Serializer\Annotation\Type;
use JMS\Serializer\Annotation\SerializedName;

/**
 * Configuration class
 *
 * Represent a satis configuration file
 *
 * @author Lukas Homza <[email protected]>
 */
class Config {
	/**
	 * @Type("string")
	 */
	private $name;

	/**
	 * @Type("string")
	 */
	private $homepage;

	/**
	 * @Type("App\Satis\Collections\RepositoryCollection<App\Satis\Model\Repository>")
	 */
	private $repositories;

	/**
	 * @Type("App\Satis\Collections\PackageCollection<App\Satis\Model\Package>")
	 * @SerializedName("require")
	 */
	private $packages;

	/**
	 * @Type("boolean")
	 * @SerializedName("require-all")
	 */
	private $requireAll;

	/**
	 * @Type("boolean")
	 * @SerializedName("providers")
	 */
	private $providers;

	/**
	 * @Type("boolean")
	 * @SerializedName("require-dependencies")
	 */
	private $requireDependencies;

	/**
	 * @Type("boolean")
	 * @SerializedName("require-dev-dependencies")
	 */
	private $requireDevDependencies;

	/**
	 * @var Archive
	 * @Type("App\Satis\Model\Archive")
	 */
	private $archive;

    /**
     * @Type("string")
     * @SerializedName("twig-template")
     */
    private $twigTemplate;

	/**
	 * Constructor
	 */
	public function __construct() {
		$this->repositories = [];
		$this->packages = [];
		$this->requireAll = false;
		$this->requireDependencies = true;
		$this->requireDevDependencies = false;
	}

	/**
	 * Get name
	 *
	 * @return string $name
	 */
	public function getName() {
		return $this->name;
	}

	/**
	 * Get homepage
	 *
	 * @return string $homepage
	 */
	public function getHomepage() {
		return $this->homepage;
	}

	/**
	 * @param string $homepage
	 * @return $this
	 */
	public function setHomepage($homepage) {
		$this->homepage = $homepage;

		return $this;
	}

	/**
	 * Get repositories
	 *
	 * @return RepositoryCollection<Repository>

	 */
	public function getRepositories() {
		return $this->repositories;
	}

	/**
	 * Set repositories
	 *
	 * @param RepositoryCollection $repositories
	 *
	 * @return static
	 */
	public function setRepositories(RepositoryCollection $repositories) {
		$this->repositories = $repositories;

		return $this;
	}

	/**
	 * @param Archive $archive
	 */
	public function setArchive(Archive $archive = null) {
		$this->archive = $archive;
	}

	/**
	 * @return Archive
	 */
	public function getArchive() {
		return $this->archive;
	}

	/**
	 * Get packages
	 *
	 * @return PackageCollection<Package>

	 */
	public function getPackages() {
		return $this->packages;
	}

	/**
	 * @param PackageCollection $packages
	 * @return $this
	 */
	public function setPackages(PackageCollection $packages) {
		$this->packages = $packages;

		return $this;
	}

	/**
	 * @return boolean
	 */
	public function getRequireDevDependencies() {
		return $this->requireDevDependencies;
	}

	/**
	 * @param boolean $requireDevDependencies
	 * @return Config
	 */
	public function setRequireDevDependencies($requireDevDependencies) {
		$this->requireDevDependencies = $requireDevDependencies;

		return $this;
	}

	/**
	 * @return boolean
	 */
	public function getRequireAll() {
		return $this->requireAll;
	}

	/**
	 * @param boolean $requireAll
	 * @return $this
	 */
	public function setRequireAll($requireAll) {
		$this->requireAll = $requireAll;

		return $this;
	}

	/**
	 * @return boolean
	 */
	public function getProviders() {
		return $this->providers;
	}

	/**
	 * @param boolean $providers
	 * @return $this
	 */
	public function setProviders($providers) {
		$this->providers = $providers;
		return $this;
	}

    /**
     * @return string
     */
    public function getTwigTemplate()
    {
        return $this->twigTemplate;
    }

    /**
     * @param string $twigTemplate
     * @return Config
     */
    public function setTwigTemplate($twigTemplate)
    {
        $this->twigTemplate = $twigTemplate;

        return $this;
    }
}


1			<?php
2
3			namespace App\Satis\Model;
4
5			use App\Satis\Collections\RepositoryCollection;
6			use App\Satis\Collections\PackageCollection;
7			use JMS\Serializer\Annotation\Type;
8			use JMS\Serializer\Annotation\SerializedName;
9
10			/**
11			* Configuration class
12			*
13			* Represent a satis configuration file
14			*
15			* @author Lukas Homza <[email protected]>
16			*/
17			class Config {
18			/**
19			* @Type("string")
20			*/
21			private $name;
22
23			/**
24			* @Type("string")
25			*/
26			private $homepage;
27
28			/**
29			* @Type("App\Satis\Collections\RepositoryCollection<App\Satis\Model\Repository>")
30			*/
31			private $repositories;
32
33			/**
34			* @Type("App\Satis\Collections\PackageCollection<App\Satis\Model\Package>")
35			* @SerializedName("require")
36			*/
37			private $packages;
38
39			/**
40			* @Type("boolean")
41			* @SerializedName("require-all")
42			*/
43			private $requireAll;
44
45			/**
46			* @Type("boolean")
47			* @SerializedName("providers")
48			*/
49			private $providers;
50
51			/**
52			* @Type("boolean")
53			* @SerializedName("require-dependencies")
54			*/
55			private $requireDependencies;
56
57			/**
58			* @Type("boolean")
59			* @SerializedName("require-dev-dependencies")
60			*/
61			private $requireDevDependencies;
62
63			/**
64			* @var Archive
65			* @Type("App\Satis\Model\Archive")
66			*/
67			private $archive;
68
69			/**
70			* @Type("string")
71			* @SerializedName("twig-template")
72			*/
73			private $twigTemplate;
74
75			/**
76			* Constructor
77			*/
78			public function __construct() {
79			$this->repositories = [];
80			$this->packages = [];
81			$this->requireAll = false;
82			$this->requireDependencies = true;
83			$this->requireDevDependencies = false;
84			}
85
86			/**
87			* Get name
88			*
89			* @return string $name
90			*/
91			public function getName() {
92			return $this->name;
93			}
94
95			/**
96			* Get homepage
97			*
98			* @return string $homepage
99			*/
100			public function getHomepage() {
101			return $this->homepage;
102			}
103
104			/**
105			* @param string $homepage
106			* @return $this
107			*/
108			public function setHomepage($homepage) {
109			$this->homepage = $homepage;
110
111			return $this;
112			}
113
114			/**
115			* Get repositories
116			*
117			* @return RepositoryCollection<Repository>
			0 ignored issues – show Documentation introduced 2016-01-28 23:09 UTC by Report Bug Copy Issue Report Show Similar Issues like this The doc-type `RepositoryCollection<Repository>` could not be parsed: Expected "\|" or "end of type", but got "<" at position 20. (view supported doc-types) This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types. Loading history...
118			*/
119			public function getRepositories() {
120			return $this->repositories;
121			}
122
123			/**
124			* Set repositories
125			*
126			* @param RepositoryCollection $repositories
127			*
128			* @return static
129			*/
130			public function setRepositories(RepositoryCollection $repositories) {
131			$this->repositories = $repositories;
132
133			return $this;
134			}
135
136			/**
137			* @param Archive $archive
138			*/
139			public function setArchive(Archive $archive = null) {
140			$this->archive = $archive;
141			}
142
143			/**
144			* @return Archive
145			*/
146			public function getArchive() {
147			return $this->archive;
148			}
149
150			/**
151			* Get packages
152			*
153			* @return PackageCollection<Package>
			0 ignored issues – show Documentation introduced 2016-01-28 23:09 UTC by Report Bug Copy Issue Report Show Similar Issues like this The doc-type `PackageCollection<Package>` could not be parsed: Expected "\|" or "end of type", but got "<" at position 17. (view supported doc-types) This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types. Loading history...
154			*/
155			public function getPackages() {
156			return $this->packages;
157			}
158
159			/**
160			* @param PackageCollection $packages
161			* @return $this
162			*/
163			public function setPackages(PackageCollection $packages) {
164			$this->packages = $packages;
165
166			return $this;
167			}
168
169			/**
170			* @return boolean
171			*/
172			public function getRequireDevDependencies() {
173			return $this->requireDevDependencies;
174			}
175
176			/**
177			* @param boolean $requireDevDependencies
178			* @return Config
179			*/
180			public function setRequireDevDependencies($requireDevDependencies) {
181			$this->requireDevDependencies = $requireDevDependencies;
182
183			return $this;
184			}
185
186			/**
187			* @return boolean
188			*/
189			public function getRequireAll() {
190			return $this->requireAll;
191			}
192
193			/**
194			* @param boolean $requireAll
195			* @return $this
196			*/
197			public function setRequireAll($requireAll) {
198			$this->requireAll = $requireAll;
199
200			return $this;
201			}
202
203			/**
204			* @return boolean
205			*/
206			public function getProviders() {
207			return $this->providers;
208			}
209
210			/**
211			* @param boolean $providers
212			* @return $this
213			*/
214			public function setProviders($providers) {
215			$this->providers = $providers;
216			return $this;
217			}
218
219			/**
220			* @return string
221			*/
222			public function getTwigTemplate()
223			{
224			return $this->twigTemplate;
225			}
226
227			/**
228			* @param string $twigTemplate
229			* @return Config
230			*/
231			public function setTwigTemplate($twigTemplate)
232			{
233			$this->twigTemplate = $twigTemplate;
234
235			return $this;
236			}
237			}
238

realshadow / satis-control-panel

Issues (42)

Security Analysis not enabled

app/Satis/Model/Config.php (2 issues)

Labels

Severity

Introduced By

Upgrade to new PHP Analysis Engine

Duplication Side-by-Side

Filter issues like