Shieldfy\Firewall\ModSecurity

Complexity

Total Complexity

3

Size/Duplication

Total Lines	32
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	0

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	getName()	0	4	1
A	detect()	0	10	2

<?php
/**
 * This file is part of SHIELDFY Web Application Firewall Detector.
 * (c) 2016 SHIELDFY, All rights reserved.
 *
 * The code provided was developed by Matthias "Nihylum" Kaschubowski
 *
 * The applied license is stored at the root directory of this package.
 */
namespace Shieldfy\Firewall;

use Shieldfy\FirewallInterface;

/**
 * Mod_Security Firewall Class.
 *
 * @deprecated The checkup does suffer from inconsistency, high fake possibility
 *
 * @package    shieldfy.waf-detector
 *
 * @author     Matthias Kaschubowski <nihylum@gmail.com>
 */
class ModSecurity implements FirewallInterface
{
    /**
     * returns the name of the firewall.
     *
     * @return string
     */
    public function getName()
    {
        return 'mod_security';
    }

    /**
     * detects whether the provided headers and body string does match the firewall identification rules or not.
     *
     * @param string[] $headers
     * @param string   $bodyString
     * @param string   $url
     *
     * @return bool
     */
    public function detect(array $headers, $bodyString, $url)
    {
        $response = @file_get_contents("{$url}/../../etc");

As per coding-style, please use concatenation or sprintf for the variable $url instead of interpolation.

        if (strstr($response['content'], 'Mod_Security')) {

This if statement, and the following return statement can be replaced with return (bool) strstr($response['content'], 'Mod_Security');.

            return true;
        }

        return false;
    }
}