This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace SoareCostin\FileVault; |
||
4 | |||
5 | use Illuminate\Support\Facades\Storage; |
||
6 | use Illuminate\Support\Str; |
||
7 | |||
8 | class FileVault |
||
9 | { |
||
10 | /** |
||
11 | * The storage disk. |
||
12 | * |
||
13 | * @var string |
||
14 | */ |
||
15 | protected $disk; |
||
16 | |||
17 | /** |
||
18 | * The encryption key. |
||
19 | * |
||
20 | * @var string |
||
21 | */ |
||
22 | protected $key; |
||
23 | |||
24 | /** |
||
25 | * The algorithm used for encryption. |
||
26 | * |
||
27 | * @var string |
||
28 | */ |
||
29 | protected $cipher; |
||
30 | |||
31 | /** |
||
32 | * The storage adapter. |
||
33 | * |
||
34 | * @var string |
||
35 | */ |
||
36 | protected $adapter; |
||
37 | |||
38 | public function __construct() |
||
39 | { |
||
40 | $this->disk = config('file-vault.disk'); |
||
41 | $this->key = config('file-vault.key'); |
||
42 | $this->cipher = config('file-vault.cipher'); |
||
43 | } |
||
44 | |||
45 | /** |
||
46 | * Set the disk where the files are located. |
||
47 | * |
||
48 | * @param string $disk |
||
49 | * @return $this |
||
50 | */ |
||
51 | public function disk($disk) |
||
52 | { |
||
53 | $this->disk = $disk; |
||
54 | |||
55 | return $this; |
||
56 | } |
||
57 | |||
58 | /** |
||
59 | * Set the encryption key. |
||
60 | * |
||
61 | * @param string $key |
||
62 | * @return $this |
||
63 | */ |
||
64 | public function key($key) |
||
65 | { |
||
66 | $this->key = $key; |
||
67 | |||
68 | return $this; |
||
69 | } |
||
70 | |||
71 | /** |
||
72 | * Create a new encryption key for the given cipher. |
||
73 | * |
||
74 | * @return string |
||
75 | */ |
||
76 | public static function generateKey() |
||
77 | { |
||
78 | return random_bytes(config('file-vault.cipher') === 'AES-128-CBC' ? 16 : 32); |
||
79 | } |
||
80 | |||
81 | /** |
||
82 | * Encrypt the passed file and saves the result in a new file with ".enc" as suffix. |
||
83 | * |
||
84 | * @param string $sourceFile Path to file that should be encrypted, relative to the storage disk specified |
||
85 | * @param string $destFile File name where the encryped file should be written to, relative to the storage disk specified |
||
86 | * @return $this |
||
87 | */ |
||
88 | public function encrypt($sourceFile, $destFile = null, $deleteSource = true) |
||
89 | { |
||
90 | $this->registerServices(); |
||
91 | |||
92 | if (is_null($destFile)) { |
||
93 | $destFile = "{$sourceFile}.enc"; |
||
94 | } |
||
95 | |||
96 | $sourcePath = $this->getFilePath($sourceFile); |
||
97 | $destPath = $this->getFilePath($destFile); |
||
98 | |||
99 | // Create a new encrypter instance |
||
100 | $encrypter = new FileEncrypter($this->key, $this->cipher); |
||
101 | |||
102 | // If encryption is successful, delete the source file |
||
103 | if ($encrypter->encrypt($sourcePath, $destPath) && $deleteSource) { |
||
104 | Storage::disk($this->disk)->delete($sourceFile); |
||
105 | } |
||
106 | |||
107 | return $this; |
||
108 | } |
||
109 | |||
110 | public function encryptCopy($sourceFile, $destFile = null) |
||
111 | { |
||
112 | return self::encrypt($sourceFile, $destFile, false); |
||
113 | } |
||
114 | |||
115 | /** |
||
116 | * Dencrypt the passed file and saves the result in a new file, removing the |
||
117 | * last 4 characters from file name. |
||
118 | * |
||
119 | * @param string $sourceFile Path to file that should be decrypted |
||
120 | * @param string $destFile File name where the decryped file should be written to. |
||
121 | * @return $this |
||
122 | */ |
||
123 | public function decrypt($sourceFile, $destFile = null, $deleteSource = true) |
||
124 | { |
||
125 | $this->registerServices(); |
||
126 | |||
127 | if (is_null($destFile)) { |
||
128 | $destFile = Str::endsWith($sourceFile, '.enc') |
||
129 | ? Str::replaceLast('.enc', '', $sourceFile) |
||
130 | : $sourceFile.'.dec'; |
||
131 | } |
||
132 | |||
133 | $sourcePath = $this->getFilePath($sourceFile); |
||
134 | $destPath = $this->getFilePath($destFile); |
||
135 | |||
136 | // Create a new encrypter instance |
||
137 | $encrypter = new FileEncrypter($this->key, $this->cipher); |
||
138 | |||
139 | // If decryption is successful, delete the source file |
||
140 | if ($encrypter->decrypt($sourcePath, $destPath) && $deleteSource) { |
||
141 | Storage::disk($this->disk)->delete($sourceFile); |
||
142 | } |
||
143 | |||
144 | return $this; |
||
145 | } |
||
146 | |||
147 | public function decryptCopy($sourceFile, $destFile = null) |
||
148 | { |
||
149 | return self::decrypt($sourceFile, $destFile, false); |
||
150 | } |
||
151 | |||
152 | public function streamDecrypt($sourceFile) |
||
153 | { |
||
154 | $this->registerServices(); |
||
155 | |||
156 | $sourcePath = $this->getFilePath($sourceFile); |
||
157 | |||
158 | // Create a new encrypter instance |
||
159 | $encrypter = new FileEncrypter($this->key, $this->cipher); |
||
160 | |||
161 | return $encrypter->decrypt($sourcePath, 'php://output'); |
||
162 | } |
||
163 | |||
164 | protected function getFilePath($file) |
||
165 | { |
||
166 | if ($this->isS3File()) { |
||
167 | return "s3://{$this->adapter->getBucket()}/{$file}"; |
||
0 ignored issues
–
show
|
|||
168 | } |
||
169 | |||
170 | return Storage::disk($this->disk)->path($file); |
||
171 | } |
||
172 | |||
173 | protected function isS3File() |
||
174 | { |
||
175 | return $this->disk == 's3'; |
||
176 | } |
||
177 | |||
178 | protected function setAdapter() |
||
179 | { |
||
180 | if ($this->adapter) { |
||
181 | return; |
||
182 | } |
||
183 | |||
184 | $this->adapter = Storage::disk($this->disk)->getAdapter(); |
||
0 ignored issues
–
show
The method
getAdapter() does not seem to exist on object<Illuminate\Contra...\Filesystem\Filesystem> .
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces. This is most likely a typographical error or the method has been renamed. ![]() |
|||
185 | } |
||
186 | |||
187 | protected function registerServices() |
||
188 | { |
||
189 | $this->setAdapter(); |
||
190 | |||
191 | if ($this->isS3File()) { |
||
192 | $client = $this->adapter->getClient(); |
||
0 ignored issues
–
show
|
|||
193 | $client->registerStreamWrapper(); |
||
194 | } |
||
195 | } |
||
196 | } |
||
197 |
Methods can only be called on objects. This check looks for methods being called on variables that have been inferred to never be objects.