Issues in ResponseMessages.php (master) - Issues in master - rudolfcms/rudolf - Measure and Improve Code Quality continuously with Scrutinizer

Issues (337)

Security Analysis not enabled

Cross-Site Scripting

Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.

File Exposure

File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.

File Manipulation

File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.

Object Injection

Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.

Code Injection

Code Injection enables an attacker to execute arbitrary code on the server.

Response Splitting

Response Splitting can be used to send arbitrary responses.

File Inclusion

File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.

Command Injection

Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.

SQL Injection

SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.

XPath Injection

XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.

LDAP Injection

LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.

Header Injection

Other Vulnerability

This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.

Regex Injection

Regex Injection enables an attacker to execute arbitrary code in your PHP process.

XML Injection

XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.

Variable Injection

Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.

Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

src/component/Http/ResponseMessages.php (38 issues)

Labels

Unused Code 38

Severity

Minor 38

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

<?php

namespace Rudolf\Component\Http;

class ResponseMessages
{
    /**
     * Returns http code description.
     *
     * @param int $code
     *
     * @return array|bool
     */
    public static function getMessages($code)
    {
        switch ($code) {
            case 100: return [
                _('Continue'),
                _('The request has been completed and the rest of the process can continue.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 101: return [
                _('Switching Protocols'),
                _('When requesting a page, a browser might receive a statis code of 101, followed by an "Upgrade" header showing that the server is changing to a different version of HTTP.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 200: return [
                _('OK'),
                _('Standard response for HTTP successful requests.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 201: return [
                _('Created'),
                _('When new pages are created by posted form data or by a CGI process, this is confirmation that it worked.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 202: return [
                _('Accepted'),
                _('The client\'s request was accepted, though not yet processed.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 203: return [
                _('Non-Authoritative Information'),
                _('The information contained in the entity header is not from the original site, but from a third party server.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 204: return [
                _('No Content'),
                _('If you click a link which has no target URL, this response is elicited by the server. It\'s silent and doesn\'t warn the user about anything.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 205: return [
                _('Reset Content'),
                _('This allows the server to reset any content returned by a CGI.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 206: return [
                _('Partial Content'),
                _('The requested file wasn\'t downloaded entirely. This is returned when the user presses the stop button before a page is loaded, for example.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 300: return [
                _('Multiple Choices'),
                _('The requested address refers to more than one file. Depending on how the server is configured, you get an error or a choice of which page you want.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 301: return [
                _('Moved Permanently'),
                _('If the server is set up properly it will automatically redirect the reader to the new location of the file.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 302: return [
                _('Moved Temporarily'),
                _('Page has been moved temporarily, and the new URL is available. You should be sent there by the server.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 303: return [
                _('See Other'),
                _('This is a "see other" SRC. Data is somewhere else and the GET method is used to retrieve it.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 304: return [
                _('Not Modified'),
                _('If the request header includes an \'if modified since\' parameter, this code will be returned if the file has not changed since that date. Search engine robots may generate a lot of these.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 305: return [
                _('Use Proxy'),
                _('The recipient is expected to repeat the request via the proxy.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 400: return [
                _('Bad Request'),
                _('There is a syntax error in the request, and it is denied.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 401: return [
                _('Unauthorized'),
                _('The request header did not contain the necessary authentication codes, and the client is denied access.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 402: return [
                _('Payment Required'),
                _('Payment is required. This code is not yet in operation.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 403: return [
                _('Forbidden'),
                _('The client is not allowed to see a certain file. This is also returned at times when the server doesn\'t want any more visitors.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 404: return [
                _('Not Found'),
                _('The requested file was not found on the server. Possibly because it was deleted, or never existed before. Often caused by misspellings of URLs.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 405: return [
                _('Method Not Allowed'),
                _('The method you are using to access the file is not allowed.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 406: return [
                _('Not Acceptable'),
                _('The requested file exists but cannot be used as the client system doesn\'t understand the format the file is configured for.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 407: return [
                _('Proxy Authentication Required'),
                _('The request must be authorised before it can take place.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 408: return [
                _('Request Time-out'),
                _('The server took longer than its allowed time to process the request. Often caused by heavy net traffic.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 409: return [
                _('Conflict'),
                _('Too many concurrent requests for a single file.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 410: return [
                _('Gone'),
                _('The file used to be in this position, but is there no longer.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 411: return [
                _('Length Required'),
                _('The request is missing its Content-Length header.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 412: return [
                _('Precondition Failed'),
                _('A certain configuration is required for this file to be delivered, but the client has not set this up.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 413: return [
                _('Request Entity Too Large'),
                _('The requested file was too big to process.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 414: return [
                _('Request-URI Too Large'),
                _('The address you entered was overly long for the server.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 415: return [
                _('Unsupported Media Type'),
                _('The filetype of the request is unsupported.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 500: return [
                _('Internal Server Error'),
                _('The server encountered an unexpected condition which prevented it from fulfilling the request.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 501: return [
                _('Not Implemented'),
                _('The server does not support the facility required.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 502: return [
                _('Bad Gateway'),
                _('The server you\'re trying to reach is sending back errors.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 503: return [
                _('Service Unavailable'),
                _('The service or file that is being requested is not currently available.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 504: return [
                _('Gateway Time-out'),
                _('The gateway has timed out. Like the 408 timeout error, but this one occurs at the gateway of the server.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
            case 505: return [
                _('HTTP Version not supported'),
                _('The HTTP protocol you are asking for is not supported.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}

            default: return [
                _('Service Unavailable'),
                _('The service or file that is being requested is not currently available.'),
            ]; break;
switch ($x) {
    case 1:
        return 'foo';
        break; // This break is not necessary and can be left off.
}
        }
    }
}


rudolfcms / rudolf

Issues (337)

Security Analysis not enabled

src/component/Http/ResponseMessages.php (38 issues)

Labels

Severity

Introduced By

Upgrade to new PHP Analysis Engine

Duplication Side-by-Side

Filter issues like