This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * Created by Vitaly Iegorov <[email protected]>. |
||
4 | * on 18.02.16 at 14:17 |
||
5 | */ |
||
6 | namespace samsonframework\view; |
||
7 | |||
8 | use samsonframework\view\exception\GeneratedViewPathHasReservedWord; |
||
9 | |||
10 | /** |
||
11 | * Views generator, this class scans resource for view files and creates |
||
12 | * appropriate View class ancestors with namespace as relative view location |
||
13 | * and file name as View class name ending with "View". |
||
14 | * |
||
15 | * Generator also analyzes view files content and creates protected class field |
||
16 | * members for every variable used inside with chainable setter for this field, |
||
17 | * to help IDE and developer in creating awesome code. |
||
18 | * |
||
19 | * TODO: Check for reserved keywords(like list) in namespaces |
||
20 | * TODO: Somehow know view variable type(typehint??) and add comments and type-hints to generated classes. |
||
21 | * TODO: Clever analysis for foreach, if, and so on language structures, we do not need to create variables for loop iterator. |
||
22 | * TODO: If a variable is used in foreach - this is an array or Iteratable ancestor - we can add typehint automatically |
||
23 | * TODO: Analyze view file php doc comments to get variable types |
||
24 | * TODO: If a token variable is not $this and has "->" - this is object, maybe type-hint needs to be added. |
||
25 | * TODO: Add caching logic to avoid duplicate file reading |
||
26 | * TODO: Do not generate class fields with empty values |
||
27 | * TODO: Generate constants with field names |
||
28 | * |
||
29 | * @package samsonframework\view |
||
30 | */ |
||
31 | class Generator |
||
32 | { |
||
33 | /** string All generated view classes will end with this suffix */ |
||
34 | const VIEW_CLASSNAME_SUFFIX = 'View'; |
||
35 | |||
36 | /** @var array Collection of PHP reserved words */ |
||
37 | protected static $reservedWords = array('list'); |
||
38 | |||
39 | /** @var Metadata[] Collection of view metadata */ |
||
40 | public $metadata = array(); |
||
41 | |||
42 | /** @var \samsonphp\generator\Generator */ |
||
43 | protected $generator; |
||
44 | |||
45 | /** @var string Generated classes namespace prefix */ |
||
46 | protected $namespacePrefix; |
||
47 | |||
48 | /** @var string Collection of namespace parts to be ignored in generated namespaces */ |
||
49 | protected $ignoreNamespace = array(); |
||
50 | |||
51 | /** @var array Collection of view files */ |
||
52 | protected $files = array(); |
||
53 | |||
54 | /** @var string Scanning entry path */ |
||
55 | protected $entryPath; |
||
56 | |||
57 | /** @var string Parent view class name */ |
||
58 | protected $parentViewClass; |
||
59 | |||
60 | /** |
||
61 | * Generator constructor. |
||
62 | * |
||
63 | * @param \samsonphp\generator\Generator $generator PHP code generator instance |
||
64 | * @param string $namespacePrefix Generated classes namespace will have it |
||
65 | * @param array $ignoreNamespace Namespace parts that needs to ignored |
||
66 | * @param string $parentViewClass Generated classes will extend it |
||
67 | */ |
||
68 | 4 | public function __construct( |
|
69 | \samsonphp\generator\Generator $generator, |
||
70 | $namespacePrefix, |
||
71 | array $ignoreNamespace = array(), |
||
72 | $parentViewClass = \samsonframework\view\View::class |
||
73 | ) { |
||
74 | 4 | $this->generator = $generator; |
|
75 | 4 | $this->parentViewClass = $parentViewClass; |
|
76 | 4 | $this->ignoreNamespace = $ignoreNamespace; |
|
0 ignored issues
–
show
|
|||
77 | 4 | $this->namespacePrefix = rtrim(ltrim($namespacePrefix, '\\'), '\\') . '\\'; |
|
78 | 4 | } |
|
79 | |||
80 | /** |
||
81 | * Recursively scan path for files with specified extensions. |
||
82 | * |
||
83 | * @param string $source Entry point path |
||
84 | * @param string $path Entry path for scanning |
||
85 | * @param array $extensions Collection of file extensions without dot |
||
86 | */ |
||
87 | 4 | public function scan($source, array $extensions = array(View::DEFAULT_EXT), $path = null) |
|
88 | { |
||
89 | 4 | $this->entryPath = $source; |
|
90 | |||
91 | 4 | $path = isset($path) ? $path : $source; |
|
92 | |||
93 | // Recursively go deeper into inner folders for scanning |
||
94 | 4 | $folders = glob($path . '/*', GLOB_ONLYDIR); |
|
95 | 4 | foreach ($folders as $folder) { |
|
96 | 3 | $this->scan($source, $extensions, $folder); |
|
97 | 4 | } |
|
98 | |||
99 | // Iterate file extensions |
||
100 | 4 | foreach ($extensions as $extension) { |
|
101 | 4 | foreach (glob(rtrim($path, '/') . '/*.' . $extension) as $file) { |
|
102 | 4 | $this->files[str_replace($source, '', $file)] = $file; |
|
103 | 4 | } |
|
104 | 4 | } |
|
105 | 4 | } |
|
106 | |||
107 | /** |
||
108 | * Generate view classes. |
||
109 | * |
||
110 | * @param string $path Entry path for generated classes and folders |
||
111 | * @param null|callable $viewHandler View code handler |
||
112 | * |
||
113 | * @throws GeneratedViewPathHasReservedWord |
||
114 | */ |
||
115 | 3 | public function generate($path = __DIR__, $viewHandler = null) |
|
116 | { |
||
117 | 3 | foreach ($this->files as $relativePath => $absolutePath) { |
|
118 | 3 | $this->metadata[$absolutePath] = $this->analyze($absolutePath); |
|
119 | 3 | $this->metadata[$absolutePath]->path = $absolutePath; |
|
120 | 3 | list($this->metadata[$absolutePath]->className, |
|
121 | 3 | $this->metadata[$absolutePath]->namespace) = $this->generateClassName($absolutePath, $this->entryPath); |
|
122 | 3 | } |
|
123 | |||
124 | 2 | foreach ($this->metadata as $metadata) { |
|
125 | 2 | $this->generateViewClass($metadata, $path, $viewHandler); |
|
126 | 2 | } |
|
127 | 2 | } |
|
128 | |||
129 | /** |
||
130 | * Analyze view file and create its metadata. |
||
131 | * |
||
132 | * @param string $file Path to view file |
||
133 | * |
||
134 | * @return Metadata View file metadata |
||
135 | */ |
||
136 | 3 | public function analyze($file) |
|
137 | { |
||
138 | 3 | $metadata = new Metadata(); |
|
139 | 3 | $fileText = file_get_contents($file); |
|
140 | // Use PHP tokenizer to find variables |
||
141 | 3 | foreach ($tokens = token_get_all($fileText) as $idx => $token) { |
|
142 | 3 | if (!is_string($token) && $token[0] === T_VARIABLE) { |
|
143 | // Store variable |
||
144 | 3 | $variableText = $token[1]; |
|
145 | // Store variable name |
||
146 | 3 | $variableName = ltrim($token[1], '$'); |
|
147 | |||
148 | // Ignore static variables |
||
149 | 3 | if (isset($tokens[$idx - 1]) && $tokens[$idx - 1][0] === T_DOUBLE_COLON) { |
|
150 | 1 | $metadata->static[$variableName] = $variableText; |
|
151 | 1 | continue; |
|
152 | } |
||
153 | |||
154 | // If next token is object operator |
||
155 | 3 | if ($tokens[$idx + 1][0] === T_OBJECT_OPERATOR) { |
|
156 | // Ignore $this |
||
157 | 3 | if ($variableName === 'this') { |
|
158 | 3 | continue; |
|
159 | } |
||
160 | |||
161 | // And two more tokens |
||
162 | 1 | $variableText .= $tokens[$idx + 1][1] . $tokens[$idx + 2][1]; |
|
163 | |||
164 | // Store object variable |
||
165 | 1 | $metadata->variables[$this->changeName($variableName)] = $variableText; |
|
166 | // Store view variable key - actual object name => full variable usage |
||
167 | 1 | $metadata->originalVariables[$this->changeName($variableName)] = $variableName; |
|
168 | 1 | } else { |
|
169 | // Store original variable name |
||
170 | 3 | $metadata->originalVariables[$this->changeName($variableName)] = $variableName; |
|
171 | // Store view variable key - actual object name => full variable usage |
||
172 | 3 | $metadata->variables[$this->changeName($variableName)] = $variableText; |
|
173 | } |
||
174 | 3 | } elseif ($token[0] === T_DOC_COMMENT) { // Match doc block comments |
|
175 | // Parse variable type and name |
||
176 | 3 | if (preg_match('/@var\s+(?<type>[^ ]+)\s+(?<variable>[^*]+)/', $token[1], $matches)) { |
|
177 | 3 | $metadata->types[substr(trim($matches['variable']), 1)] = $matches['type']; |
|
178 | 3 | } |
|
179 | 3 | } |
|
180 | 3 | } |
|
181 | 3 | if (preg_match_all('/\$this->block\(\'(?<block>[^ ]+)\'/', $fileText, $matches)) { |
|
182 | 2 | $metadata->blocks = $matches['block']; |
|
183 | 2 | } |
|
184 | |||
185 | 3 | if (preg_match('/\$this->extend\((?<class>[^ ]+\:\:class)\s*\,\s*\'(?<block>[^ ]+)\'\s*\)/', $fileText, |
|
186 | 3 | $matches)) { |
|
187 | 2 | $metadata->parentClass = $matches['class']; |
|
188 | 2 | $metadata->parentBlock = $matches['block']; |
|
189 | 2 | } |
|
190 | |||
191 | 3 | return $metadata; |
|
192 | } |
||
193 | |||
194 | /** |
||
195 | * Change variable name to camel caps format. |
||
196 | * |
||
197 | * @param string $variable |
||
198 | * |
||
199 | * @return string Changed variable name |
||
200 | */ |
||
201 | 3 | public function changeName($variable) |
|
202 | { |
||
203 | 3 | return lcfirst( |
|
204 | 3 | implode( |
|
205 | 3 | '', |
|
206 | 3 | array_map( |
|
207 | 3 | function ($element) { |
|
208 | 3 | return ucfirst($element); |
|
209 | 3 | }, |
|
210 | 3 | explode('_', str_replace('-', '_', $variable)) |
|
211 | 3 | ) |
|
212 | 3 | ) |
|
213 | |||
0 ignored issues
–
show
|
|||
214 | 3 | ); |
|
215 | } |
||
216 | |||
217 | /** |
||
218 | * Generic class name and its name space generator. |
||
219 | * |
||
220 | * @param string $file Full path to view file |
||
221 | * @param string $entryPath Entry path |
||
222 | * |
||
223 | * @return array Class name[0] and namespace[1] |
||
224 | * @throws GeneratedViewPathHasReservedWord |
||
225 | */ |
||
226 | 3 | protected function generateClassName($file, $entryPath) |
|
227 | { |
||
228 | // Get only file name as a class name with suffix |
||
229 | 3 | $className = ucfirst($this->changeName(pathinfo($file, PATHINFO_FILENAME)). self::VIEW_CLASSNAME_SUFFIX); |
|
230 | |||
231 | // Get namespace as part of file path relatively to entry path |
||
232 | 3 | $nameSpace = strtolower( |
|
233 | 3 | rtrim( |
|
234 | 3 | ltrim( |
|
235 | 3 | str_replace( |
|
236 | 3 | '/', |
|
237 | 3 | '\\', |
|
238 | 3 | str_replace(array('-', '_'), '', str_replace($entryPath, '', pathinfo($file, PATHINFO_DIRNAME))) |
|
239 | 3 | ), |
|
240 | '\\' |
||
241 | 3 | ), |
|
242 | '\\' |
||
243 | 3 | ) |
|
244 | 3 | ); |
|
245 | |||
246 | // Remove ignored parts from namespaces |
||
247 | 3 | $nameSpace = str_replace($this->ignoreNamespace, '', $nameSpace); |
|
248 | |||
249 | // Check generated namespaces |
||
250 | 3 | foreach (static::$reservedWords as $reservedWord) { |
|
251 | 3 | if (strpos($nameSpace, '\\' . $reservedWord) !== false) { |
|
252 | 1 | throw new GeneratedViewPathHasReservedWord($file . '(' . $reservedWord . ')'); |
|
253 | } |
||
254 | 3 | } |
|
255 | |||
256 | // Return collection for further usage |
||
257 | 3 | return array($className, rtrim($this->namespacePrefix . $nameSpace, '\\')); |
|
258 | } |
||
259 | |||
260 | /** |
||
261 | * Create View class ancestor. |
||
262 | * |
||
263 | * @param Metadata $metadata View file metadata |
||
264 | * @param string $path Entry path for generated classes and folders |
||
265 | * @param null|callable $viewHandler View code handler |
||
266 | */ |
||
267 | 2 | protected function generateViewClass(Metadata $metadata, $path, $viewHandler = null) |
|
268 | { |
||
269 | 2 | $metadataParentClass = eval('return ' . $metadata->parentClass . ';'); |
|
270 | |||
271 | // Read view file |
||
272 | 2 | $viewCode = trim(file_get_contents($metadata->path)); |
|
273 | |||
274 | // If we have external handler - pass view code to it for conversion |
||
275 | 2 | if (is_callable($viewHandler)) { |
|
276 | $viewCode = call_user_func($viewHandler, $viewCode); |
||
277 | } |
||
278 | |||
279 | // Convert to string for defining |
||
280 | 2 | $viewCode = '<<<\'EOT\'' . "\n" . $viewCode . "\n" . 'EOT'; |
|
281 | |||
282 | 2 | $parentClass = !isset($metadata->parentClass) ? $this->parentViewClass : $metadataParentClass; |
|
283 | 2 | $this->generator |
|
284 | 2 | ->defNamespace($metadata->namespace) |
|
285 | 2 | ->multiComment(array('Class for view "' . $metadata->path . '" rendering')) |
|
286 | 2 | ->defClass($metadata->className, '\\' . $parentClass) |
|
287 | 2 | ->commentVar('string', 'Path to view file') |
|
288 | 2 | ->defClassVar('$file', 'protected', $metadata->path) |
|
289 | 2 | ->commentVar('string', 'Parent block name') |
|
290 | 2 | ->defClassVar('$parentBlock', 'protected', $metadata->parentBlock) |
|
291 | 2 | ->commentVar('array', 'Blocks list') |
|
292 | 2 | ->defClassVar('$blocks', 'protected', $metadata->blocks) |
|
293 | 2 | ->commentVar('string', 'View source code') |
|
294 | 2 | ->defClassVar('$source', 'protected', $viewCode); |
|
295 | //->commentVar('array', 'Collection of view variables') |
||
296 | //->defClassVar('$variables', 'public static', array_keys($metadata->variables)) |
||
297 | //->commentVar('array', 'Collection of view variable types') |
||
298 | //->defClassVar('$types', 'public static', $metadata->types) |
||
299 | 2 | ; |
|
300 | |||
301 | // Iterate all view variables |
||
302 | 2 | foreach (array_keys($metadata->variables) as $name) { |
|
303 | 2 | $type = array_key_exists($name, $metadata->types) ? $metadata->types[$name] : 'mixed'; |
|
304 | 2 | $static = array_key_exists($name, $metadata->static) ? ' static' : ''; |
|
305 | 2 | $this->generator |
|
306 | 2 | ->commentVar($type, 'View variable') |
|
307 | 2 | ->defClassVar('$' . $name, 'public' . $static); |
|
308 | |||
309 | // Do not generate setters for static variables |
||
310 | 2 | if ($static !== ' static') { |
|
311 | 2 | $this->generator->text($this->generateViewVariableSetter( |
|
312 | 2 | $name, |
|
313 | 2 | $metadata->originalVariables[$name], |
|
314 | $type |
||
315 | 2 | )); |
|
316 | 2 | } |
|
317 | 2 | } |
|
318 | |||
319 | // Iterate namespace and create folder structure |
||
320 | 2 | $path .= '/' . str_replace('\\', '/', $metadata->namespace); |
|
321 | 2 | if (!is_dir($path)) { |
|
322 | 1 | mkdir($path, 0777, true); |
|
323 | 1 | } |
|
324 | |||
325 | 2 | $newClassFile = $path . '/' . $metadata->className . '.php'; |
|
326 | 2 | file_put_contents( |
|
327 | 2 | $newClassFile, |
|
328 | 2 | '<?php' . $this->generator->endClass()->flush() |
|
329 | 2 | ); |
|
330 | |||
331 | // Store path to generated class |
||
332 | 2 | $metadata->generatedPath = $newClassFile; |
|
333 | |||
334 | // Make generated cache files accessible |
||
335 | 2 | chmod($newClassFile, 0777); |
|
336 | 2 | } |
|
337 | |||
338 | /** |
||
339 | * Generate constructor for application class. |
||
340 | * |
||
341 | * @param string $variable View variable name |
||
342 | * @param string $original Original view variable name |
||
343 | * @param string $type Variable type |
||
344 | * |
||
345 | * @return string View variable setter method |
||
346 | */ |
||
347 | 2 | protected function generateViewVariableSetter($variable, $original, $type = 'mixed') |
|
348 | { |
||
349 | // Define type hint |
||
350 | 2 | $typeHint = strpos($type, '\\') !== false ? $type . ' ' : ''; |
|
351 | |||
352 | 2 | $class = "\n\t" . '/**'; |
|
353 | 2 | $class .= "\n\t" . ' * Setter for ' . $variable . ' view variable'; |
|
354 | 2 | $class .= "\n\t" . ' *'; |
|
355 | 2 | $class .= "\n\t" . ' * @param ' . $type . ' $value View variable value'; |
|
356 | 2 | $class .= "\n\t" . ' * @return $this Chaining'; |
|
357 | 2 | $class .= "\n\t" . ' */'; |
|
358 | 2 | $class .= "\n\t" . 'public function ' . $variable . '(' . $typeHint . '$value)'; |
|
359 | 2 | $class .= "\n\t" . '{'; |
|
360 | 2 | $class .= "\n\t\t" . 'return parent::set($value, \'' . $original . '\');'; |
|
361 | 2 | $class .= "\n\t" . '}' . "\n"; |
|
362 | |||
363 | 2 | return $class; |
|
364 | } |
||
365 | |||
366 | /** @return string Hash representing generator state */ |
||
367 | 1 | public function hash() |
|
368 | { |
||
369 | 1 | $hash = ''; |
|
370 | 1 | foreach ($this->files as $relativePath => $absolutePath) { |
|
371 | 1 | $hash .= md5($relativePath . filemtime($absolutePath)); |
|
372 | 1 | } |
|
373 | |||
374 | 1 | return md5($hash); |
|
375 | } |
||
376 | } |
||
377 |
Our type inference engine has found an assignment to a property that is incompatible with the declared type of that property.
Either this assignment is in error or the assigned type should be added to the documentation/type hint for that property..