slickframework /
mvc
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | /** |
||
| 4 | * This file is part of slick/mvc package |
||
| 5 | * |
||
| 6 | * For the full copyright and license information, please view the LICENSE |
||
| 7 | * file that was distributed with this source code. |
||
| 8 | */ |
||
| 9 | |||
| 10 | namespace Slick\Mvc; |
||
| 11 | |||
| 12 | use Interop\Container\ContainerInterface; |
||
| 13 | use Slick\Configuration\Configuration; |
||
| 14 | use Slick\Di\Container; |
||
| 15 | use Slick\Di\ContainerBuilder; |
||
| 16 | use Slick\Http\PhpEnvironment\MiddlewareRunnerInterface; |
||
| 17 | use Slick\Http\PhpEnvironment\Request; |
||
| 18 | use Slick\Http\PhpEnvironment\Response; |
||
| 19 | |||
| 20 | /** |
||
| 21 | * Class Application |
||
| 22 | * @package Slick\Mvc |
||
| 23 | */ |
||
| 24 | class Application |
||
| 25 | { |
||
| 26 | |||
| 27 | /** |
||
| 28 | * @var ContainerInterface |
||
| 29 | */ |
||
| 30 | private static $container; |
||
| 31 | |||
| 32 | /** |
||
| 33 | * @var string |
||
| 34 | */ |
||
| 35 | private $configPath; |
||
| 36 | |||
| 37 | /** |
||
| 38 | * @var Request |
||
| 39 | */ |
||
| 40 | private $request; |
||
| 41 | |||
| 42 | /** |
||
| 43 | * @var MiddlewareRunnerInterface |
||
| 44 | */ |
||
| 45 | private $runner; |
||
| 46 | |||
| 47 | /** |
||
| 48 | * @var Response |
||
| 49 | */ |
||
| 50 | private $response; |
||
| 51 | |||
| 52 | /** |
||
| 53 | * @var ContainerInterface |
||
| 54 | */ |
||
| 55 | private static $defaultContainer; |
||
| 56 | |||
| 57 | /** |
||
| 58 | * Creates an application with an HTTP request |
||
| 59 | * |
||
| 60 | * If no request is provided then a Slick\Http\PhpEnvironment\Request is |
||
| 61 | * created with values form current php environment settings. |
||
| 62 | * |
||
| 63 | * @param Request $request |
||
| 64 | */ |
||
| 65 | 8 | public function __construct(Request $request = null) |
|
| 66 | { |
||
| 67 | 8 | $this->request = $request; |
|
| 68 | 8 | Configuration::addPath(__DIR__.'/Configuration'); |
|
| 69 | 8 | $definitions = include __DIR__.'/Configuration/services.php'; |
|
| 70 | 8 | self::$defaultContainer = ( |
|
| 71 | 8 | new ContainerBuilder($definitions) |
|
| 72 | 1 | ) |
|
| 73 | 8 | ->getContainer(); |
|
| 74 | 8 | } |
|
| 75 | |||
| 76 | /** |
||
| 77 | * Sets a new request |
||
| 78 | * |
||
| 79 | * @param Request $request |
||
| 80 | * |
||
| 81 | * @return Application |
||
| 82 | */ |
||
| 83 | 2 | public function setRequest(Request $request) |
|
| 84 | { |
||
| 85 | 2 | $this->request = $request; |
|
| 86 | 2 | $this->getContainer()->register('request', $request); |
|
|
0 ignored issues
–
show
|
|||
| 87 | 2 | return $this; |
|
| 88 | } |
||
| 89 | |||
| 90 | /** |
||
| 91 | * Gets the application dependency injection container |
||
| 92 | * |
||
| 93 | * @return ContainerInterface|Container |
||
| 94 | */ |
||
| 95 | 6 | public function getContainer() |
|
| 96 | { |
||
| 97 | 6 | if (is_null(self::$container)) { |
|
| 98 | 2 | self::$container = $this->checkContainer(); |
|
| 99 | 1 | } |
|
| 100 | 6 | return self::$container; |
|
| 101 | } |
||
| 102 | |||
| 103 | /** |
||
| 104 | * Sets the dependency injection container |
||
| 105 | * |
||
| 106 | * @param ContainerInterface $container |
||
| 107 | */ |
||
| 108 | 22 | public static function setContainer(ContainerInterface $container) |
|
| 109 | { |
||
| 110 | 22 | self::$container = $container; |
|
| 111 | 22 | } |
|
| 112 | |||
| 113 | /** |
||
| 114 | * Returns the application dependency container |
||
| 115 | * |
||
| 116 | * @return ContainerInterface|Container |
||
| 117 | */ |
||
| 118 | 20 | public static function container() |
|
| 119 | { |
||
| 120 | 20 | if (null == self::$container) { |
|
| 121 | 2 | $app = new static; |
|
| 122 | 2 | $app->getContainer(); |
|
| 123 | 1 | } |
|
| 124 | 20 | return self::$container; |
|
| 125 | } |
||
| 126 | |||
| 127 | /** |
||
| 128 | * Set middleware runner |
||
| 129 | * |
||
| 130 | * @param MiddlewareRunnerInterface $runner |
||
| 131 | * |
||
| 132 | * @return $this|self|Application |
||
| 133 | */ |
||
| 134 | 2 | public function setRunner(MiddlewareRunnerInterface $runner) |
|
| 135 | { |
||
| 136 | 2 | $this->runner = $runner; |
|
| 137 | 2 | return $this; |
|
| 138 | } |
||
| 139 | |||
| 140 | /** |
||
| 141 | * Returns the processed response |
||
| 142 | * |
||
| 143 | * @return Response |
||
| 144 | */ |
||
| 145 | 2 | public function getResponse() |
|
| 146 | { |
||
| 147 | 2 | if (is_null($this->response)) { |
|
| 148 | 2 | $this->response = $this->getRunner()->run(); |
|
| 149 | 1 | } |
|
| 150 | 2 | return $this->response; |
|
| 151 | } |
||
| 152 | |||
| 153 | /** |
||
| 154 | * Gets the HTTP middleware runner for this application |
||
| 155 | * |
||
| 156 | * @return MiddlewareRunnerInterface |
||
| 157 | */ |
||
| 158 | 2 | public function getRunner() |
|
| 159 | { |
||
| 160 | 2 | if (null === $this->runner) { |
|
| 161 | 2 | $runner = $this->getContainer() |
|
| 162 | 2 | ->get('middleware.runner') |
|
| 163 | 2 | ->setRequest($this->getRequest()) |
|
| 164 | 1 | ; |
|
| 165 | 2 | $this->setRunner($runner); |
|
| 166 | 1 | } |
|
| 167 | 2 | return $this->runner; |
|
| 168 | } |
||
| 169 | |||
| 170 | /** |
||
| 171 | * Set configuration path |
||
| 172 | * |
||
| 173 | * @param string $configPath |
||
| 174 | * |
||
| 175 | * @return Application|self |
||
| 176 | */ |
||
| 177 | public function setConfigPath($configPath) |
||
| 178 | { |
||
| 179 | $this->configPath = $configPath; |
||
| 180 | Configuration::addPath($configPath); |
||
| 181 | return $this; |
||
| 182 | } |
||
| 183 | |||
| 184 | /** |
||
| 185 | * Gets configuration path |
||
| 186 | * |
||
| 187 | * @return string |
||
| 188 | */ |
||
| 189 | public function getConfigPath() |
||
| 190 | { |
||
| 191 | if (null == $this->configPath) { |
||
| 192 | $this->configPath = getcwd().'/Configuration'; |
||
| 193 | Configuration::addPath($this->configPath); |
||
| 194 | } |
||
| 195 | return $this->configPath; |
||
| 196 | } |
||
| 197 | |||
| 198 | /** |
||
| 199 | * Gets HTTP request object |
||
| 200 | * |
||
| 201 | * @return Request |
||
| 202 | */ |
||
| 203 | 4 | public function getRequest() |
|
| 204 | { |
||
| 205 | 4 | if (null === $this->request) { |
|
| 206 | 2 | $this->request = $this->getContainer() |
|
| 207 | 2 | ->get('request'); |
|
| 208 | 1 | } |
|
| 209 | 4 | return $this->request; |
|
| 210 | } |
||
| 211 | |||
| 212 | /** |
||
| 213 | * Gets container with user overridden settings |
||
| 214 | * |
||
| 215 | * @return ContainerInterface|\Slick\Di\Container |
||
| 216 | */ |
||
| 217 | 2 | protected function checkContainer() |
|
| 218 | { |
||
| 219 | 2 | $container = self::$defaultContainer; |
|
| 220 | if ( |
||
| 221 | 2 | null != $this->configPath && |
|
| 222 | 1 | file_exists($this->configPath.'/services.php') |
|
| 223 | 1 | ) { |
|
| 224 | $definitions = include $this->configPath.'/services.php'; |
||
| 225 | $container = ( |
||
| 226 | new ContainerBuilder( |
||
| 227 | $definitions, |
||
| 228 | true |
||
| 229 | ) |
||
| 230 | )->getContainer(); |
||
| 231 | } |
||
| 232 | 2 | return $container; |
|
| 233 | } |
||
| 234 | |||
| 235 | } |
Let’s take a look at an example:
In the above example, the authenticate() method works fine as long as you just pass instances of MyUser. However, if you now also want to pass a different implementation of User which does not have a getDisplayName() method, the code will break.
Available Fixes
Change the type-hint for the parameter:
Add an additional type-check:
Add the method to the interface: