This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Created by PhpStorm. |
||
| 4 | * User: Lai Vu |
||
| 5 | * Date: 10/24/2016 |
||
| 6 | * Time: 4:14 PM |
||
| 7 | */ |
||
| 8 | |||
| 9 | namespace LaiVu\ActivityLog; |
||
| 10 | |||
| 11 | |||
| 12 | use Illuminate\Auth\AuthManager; |
||
| 13 | use Illuminate\Database\Eloquent\Model; |
||
| 14 | use Illuminate\Support\Traits\Macroable; |
||
| 15 | use LaiVu\ActivityLog\Exceptions\InvalidConfiguration; |
||
| 16 | use LaiVu\ActivityLog\Handlers\ActivityLogHandlerInterface; |
||
| 17 | use LaiVu\ActivityLog\Models\Activity; |
||
| 18 | |||
| 19 | class ActivityLogger |
||
| 20 | { |
||
| 21 | use Macroable; |
||
| 22 | |||
| 23 | /** @var \Illuminate\Auth\AuthManager */ |
||
| 24 | protected $auth; |
||
| 25 | |||
| 26 | /** @var ActivityLogHandlerInterface[] */ |
||
| 27 | protected $logHandlers = []; |
||
| 28 | |||
| 29 | protected $logName = ''; |
||
| 30 | /** @var bool */ |
||
| 31 | protected $logEnabled; |
||
| 32 | /** @var \Illuminate\Database\Eloquent\Model */ |
||
| 33 | protected $performedOn; |
||
| 34 | /** @var \Illuminate\Database\Eloquent\Model */ |
||
| 35 | protected $causedBy; |
||
| 36 | /** @var \Illuminate\Support\Collection */ |
||
| 37 | protected $properties; |
||
| 38 | |||
| 39 | public function __construct(AuthManager $auth) |
||
| 40 | { |
||
| 41 | $this->auth = $auth; |
||
| 42 | $this->properties = collect(); |
||
| 43 | $authDriver = config('activitylog.default_auth_driver', $auth->getDefaultDriver()); |
||
| 44 | $this->causedBy = $auth->guard($authDriver)->user(); |
||
| 45 | $this->logName = config('activitylog.default_log_name'); |
||
| 46 | $this->logEnabled = config('activitylog.enabled', true); |
||
| 47 | |||
| 48 | $handlers = config('activitylog.default', ['log']); |
||
| 49 | |||
| 50 | foreach ($handlers as $handler) { |
||
| 51 | $handlerObject = $this->determineHandler($handler); |
||
| 52 | $this->logHandlers[] = $handlerObject; |
||
| 53 | } |
||
| 54 | } |
||
| 55 | |||
| 56 | public function performedOn(Model $model) |
||
| 57 | { |
||
| 58 | $this->performedOn = $model; |
||
| 59 | return $this; |
||
| 60 | } |
||
| 61 | |||
| 62 | public function on(Model $model) |
||
| 63 | { |
||
| 64 | return $this->performedOn($model); |
||
| 65 | } |
||
| 66 | |||
| 67 | public function causedBy(Model $model) |
||
| 68 | { |
||
| 69 | $this->causedBy = $model; |
||
| 70 | return $this; |
||
| 71 | } |
||
| 72 | |||
| 73 | public function by($modelOrId) |
||
| 74 | { |
||
| 75 | return $this->causedBy($modelOrId); |
||
| 76 | } |
||
| 77 | |||
| 78 | /** |
||
| 79 | * @param array|\Illuminate\Support\Collection $properties |
||
| 80 | * |
||
| 81 | * @return $this |
||
| 82 | */ |
||
| 83 | public function withProperties($properties) |
||
| 84 | { |
||
| 85 | $this->properties = collect($properties); |
||
| 86 | return $this; |
||
| 87 | } |
||
| 88 | |||
| 89 | /** |
||
| 90 | * @param string $key |
||
| 91 | * @param mixed $value |
||
| 92 | * |
||
| 93 | * @return $this |
||
| 94 | */ |
||
| 95 | public function withProperty($key, $value) |
||
| 96 | { |
||
| 97 | $this->properties->put($key, $value); |
||
| 98 | return $this; |
||
| 99 | } |
||
| 100 | |||
| 101 | public function useLog($logName) |
||
| 102 | { |
||
| 103 | $this->logName = $logName; |
||
| 104 | return $this; |
||
| 105 | } |
||
| 106 | |||
| 107 | public function inLog($logName) |
||
| 108 | { |
||
| 109 | return $this->useLog($logName); |
||
| 110 | } |
||
| 111 | |||
| 112 | public function log($description) |
||
| 113 | { |
||
| 114 | if (!$this->logEnabled) { |
||
| 115 | return; |
||
| 116 | } |
||
| 117 | |||
| 118 | foreach ($this->logHandlers as $handler) { |
||
| 119 | $description = $this->replacePlaceholders($description); |
||
| 120 | $handler->log($this->performedOn, $this->causedBy, $this->properties, $this->logName, $description); |
||
|
0 ignored issues
–
show
|
|||
| 121 | } |
||
| 122 | } |
||
| 123 | |||
| 124 | /** |
||
| 125 | * @param $handler |
||
| 126 | * @return ActivityLogHandlerInterface |
||
| 127 | * @throws InvalidConfiguration |
||
| 128 | */ |
||
| 129 | private function determineHandler($handler) |
||
| 130 | { |
||
| 131 | $handlerConfig = config("activitylog.handlers.$handler"); |
||
| 132 | if (!$handlerConfig) { |
||
| 133 | throw InvalidConfiguration::handlerNotFound($handler); |
||
| 134 | } |
||
| 135 | |||
| 136 | $handlerDriver = $handlerConfig['driver']; |
||
| 137 | if (!is_a($handlerDriver, ActivityLogHandlerInterface::class, true)) { |
||
| 138 | throw InvalidConfiguration::handlerTypeNotValid($handlerDriver); |
||
| 139 | } |
||
| 140 | |||
| 141 | return new $handlerDriver(); |
||
| 142 | } |
||
| 143 | |||
| 144 | /** |
||
| 145 | * Clean out old entries in the log. |
||
| 146 | * |
||
| 147 | * @return bool |
||
| 148 | */ |
||
| 149 | public function cleanLog() |
||
| 150 | { |
||
| 151 | $maxAgeInDays = config('activitylog.delete_records_older_than_days'); |
||
| 152 | |||
| 153 | if(is_null($maxAgeInDays) || $maxAgeInDays ==''){ |
||
| 154 | return false; |
||
| 155 | } |
||
| 156 | |||
| 157 | foreach ($this->logHandlers as $logHandler) { |
||
| 158 | $logHandler->cleanLog($maxAgeInDays); |
||
| 159 | } |
||
| 160 | return true; |
||
| 161 | } |
||
| 162 | |||
| 163 | protected function replacePlaceholders($description) |
||
| 164 | { |
||
| 165 | return preg_replace_callback('/:[a-z0-9._-]+/i', function ($match) { |
||
| 166 | $match = $match[0]; |
||
| 167 | $attribute =$this->getBetween($match,':', '.'); |
||
| 168 | if (! in_array($attribute, ['performedOn', 'causedBy', 'properties'])) { |
||
| 169 | return $match; |
||
| 170 | } |
||
| 171 | $propertyName = substr($match, strpos($match, '.') + 1); |
||
| 172 | return isset($this->{$attribute})&&isset($this->{$attribute}->{$propertyName})?$this->{$attribute}->{$propertyName}:$match; |
||
| 173 | }, $description); |
||
| 174 | } |
||
| 175 | |||
| 176 | function getBetween($content,$start,$end){ |
||
| 177 | $r = explode($start, $content); |
||
| 178 | if (isset($r[1])){ |
||
| 179 | $r = explode($end, $r[1]); |
||
| 180 | return $r[0]; |
||
| 181 | } |
||
| 182 | return ''; |
||
| 183 | } |
||
| 184 | } |
It seems like the type of the argument is not accepted by the function/method which you are calling.
In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug.
We suggest to add an explicit type cast like in the following example: