sonata-project /
SonataMediaBundle
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | declare(strict_types=1); |
||
| 4 | |||
| 5 | /* |
||
| 6 | * This file is part of the Sonata Project package. |
||
| 7 | * |
||
| 8 | * (c) Thomas Rabaix <[email protected]> |
||
| 9 | * |
||
| 10 | * For the full copyright and license information, please view the LICENSE |
||
| 11 | * file that was distributed with this source code. |
||
| 12 | */ |
||
| 13 | |||
| 14 | namespace Sonata\MediaBundle\Admin; |
||
| 15 | |||
| 16 | use Sonata\AdminBundle\Admin\AbstractAdmin; |
||
| 17 | use Sonata\AdminBundle\Datagrid\ListMapper; |
||
| 18 | use Sonata\AdminBundle\Form\FormMapper; |
||
| 19 | use Sonata\AdminBundle\Form\Type\ModelListType; |
||
| 20 | use Sonata\BlockBundle\Meta\Metadata; |
||
| 21 | use Sonata\MediaBundle\Form\DataTransformer\ProviderDataTransformer; |
||
| 22 | use Sonata\MediaBundle\Model\CategoryManagerInterface; |
||
| 23 | use Sonata\MediaBundle\Provider\MediaProviderInterface; |
||
| 24 | use Sonata\MediaBundle\Provider\Pool; |
||
| 25 | use Symfony\Component\Form\Extension\Core\Type\HiddenType; |
||
| 26 | |||
| 27 | abstract class BaseMediaAdmin extends AbstractAdmin |
||
| 28 | { |
||
| 29 | /** |
||
| 30 | * @var Pool |
||
| 31 | */ |
||
| 32 | protected $pool; |
||
| 33 | |||
| 34 | /** |
||
| 35 | * @var CategoryManagerInterface |
||
| 36 | */ |
||
| 37 | protected $categoryManager; |
||
| 38 | |||
| 39 | protected $classnameLabel = 'Media'; |
||
| 40 | |||
| 41 | /** |
||
| 42 | * @param string $code |
||
| 43 | * @param string $class |
||
| 44 | * @param string $baseControllerName |
||
| 45 | * @param CategoryManagerInterface $categoryManager |
||
| 46 | */ |
||
| 47 | public function __construct($code, $class, $baseControllerName, Pool $pool, ?CategoryManagerInterface $categoryManager = null) |
||
| 48 | { |
||
| 49 | parent::__construct($code, $class, $baseControllerName); |
||
| 50 | |||
| 51 | $this->pool = $pool; |
||
| 52 | |||
| 53 | $this->categoryManager = $categoryManager; |
||
| 54 | } |
||
| 55 | |||
| 56 | public function prePersist($media): void |
||
| 57 | { |
||
| 58 | $parameters = $this->getPersistentParameters(); |
||
| 59 | $media->setContext($parameters['context']); |
||
| 60 | } |
||
| 61 | |||
| 62 | public function getPersistentParameters() |
||
| 63 | { |
||
| 64 | $parameters = parent::getPersistentParameters(); |
||
| 65 | |||
| 66 | if (!$this->hasRequest()) { |
||
| 67 | return $parameters; |
||
| 68 | } |
||
| 69 | |||
| 70 | $filter = $this->getRequest()->get('filter'); |
||
| 71 | if ($filter && \array_key_exists('context', $this->getRequest()->get('filter'))) { |
||
| 72 | $context = $filter['context']['value']; |
||
| 73 | } else { |
||
| 74 | $context = $this->getRequest()->get('context', $this->pool->getDefaultContext()); |
||
| 75 | } |
||
| 76 | |||
| 77 | $providers = $this->pool->getProvidersByContext($context); |
||
| 78 | $provider = $this->getRequest()->get('provider'); |
||
| 79 | |||
| 80 | // if the context has only one provider, set it into the request |
||
| 81 | // so the intermediate provider selection is skipped |
||
| 82 | if (1 === \count($providers) && null === $provider) { |
||
| 83 | $provider = array_shift($providers)->getName(); |
||
| 84 | $this->getRequest()->query->set('provider', $provider); |
||
| 85 | } |
||
| 86 | |||
| 87 | // if there is a post server error, provider is not posted and in case of |
||
| 88 | // multiple providers, it has to be persistent to not being lost |
||
| 89 | if (1 < \count($providers) && null !== $provider) { |
||
| 90 | $parameters['provider'] = $provider; |
||
| 91 | } |
||
| 92 | |||
| 93 | $categoryId = $this->getRequest()->get('category'); |
||
| 94 | |||
| 95 | if (null !== $this->categoryManager && !$categoryId) { |
||
| 96 | $categoryId = $this->categoryManager->getRootCategory($context)->getId(); |
||
|
0 ignored issues
–
show
|
|||
| 97 | } |
||
| 98 | |||
| 99 | return array_merge($parameters, [ |
||
| 100 | 'context' => $context, |
||
| 101 | 'category' => $categoryId, |
||
| 102 | 'hide_context' => (bool) $this->getRequest()->get('hide_context'), |
||
| 103 | ]); |
||
| 104 | } |
||
| 105 | |||
| 106 | public function getNewInstance() |
||
| 107 | { |
||
| 108 | $media = parent::getNewInstance(); |
||
| 109 | |||
| 110 | if ($this->hasRequest()) { |
||
| 111 | if ($this->getRequest()->isMethod('POST')) { |
||
| 112 | $uniqid = $this->getUniqid(); |
||
| 113 | $media->setProviderName($this->getRequest()->get($uniqid)['providerName']); |
||
| 114 | } else { |
||
| 115 | $media->setProviderName($this->getRequest()->get('provider')); |
||
| 116 | } |
||
| 117 | |||
| 118 | $media->setContext($context = $this->getRequest()->get('context')); |
||
| 119 | |||
| 120 | if (null !== $this->categoryManager && $categoryId = $this->getPersistentParameter('category')) { |
||
| 121 | $category = $this->categoryManager->find($categoryId); |
||
| 122 | |||
| 123 | if ($category && $category->getContext()->getId() === $context) { |
||
|
0 ignored issues
–
show
The expression
$category of type Sonata\ClassificationBun...del\CategoryInterface[] is implicitly converted to a boolean; are you sure this is intended? If so, consider using ! empty($expr) instead to make it clear that you intend to check for an array without elements.
This check marks implicit conversions of arrays to boolean values in a comparison. While in PHP an empty array is considered to be equal (but not identical) to false, this is not always apparent. Consider making the comparison explicit by using Loading history...
|
|||
| 124 | $media->setCategory($category); |
||
| 125 | } |
||
| 126 | } |
||
| 127 | } |
||
| 128 | |||
| 129 | return $media; |
||
| 130 | } |
||
| 131 | |||
| 132 | /** |
||
| 133 | * @return Pool |
||
| 134 | */ |
||
| 135 | public function getPool() |
||
| 136 | { |
||
| 137 | return $this->pool; |
||
| 138 | } |
||
| 139 | |||
| 140 | public function getObjectMetadata($object) |
||
| 141 | { |
||
| 142 | $provider = $this->pool->getProvider($object->getProviderName()); |
||
| 143 | |||
| 144 | $url = $provider->generatePublicUrl( |
||
| 145 | $object, |
||
| 146 | $provider->getFormatName($object, MediaProviderInterface::FORMAT_ADMIN) |
||
| 147 | ); |
||
| 148 | |||
| 149 | return new Metadata($object->getName(), $object->getDescription(), $url); |
||
| 150 | } |
||
| 151 | |||
| 152 | protected function configureListFields(ListMapper $listMapper): void |
||
| 153 | { |
||
| 154 | $listMapper |
||
| 155 | ->addIdentifier('name') |
||
| 156 | ->add('description') |
||
| 157 | ->add('enabled') |
||
| 158 | ->add('size') |
||
| 159 | ; |
||
| 160 | } |
||
| 161 | |||
| 162 | protected function configureFormFields(FormMapper $formMapper): void |
||
| 163 | { |
||
| 164 | $media = $this->getSubject(); |
||
| 165 | |||
| 166 | if (!$media) { |
||
| 167 | $media = $this->getNewInstance(); |
||
| 168 | } |
||
| 169 | |||
| 170 | if (!$media || !$media->getProviderName()) { |
||
| 171 | return; |
||
| 172 | } |
||
| 173 | |||
| 174 | $formMapper->add('providerName', HiddenType::class); |
||
| 175 | |||
| 176 | $formMapper->getFormBuilder()->addModelTransformer(new ProviderDataTransformer($this->pool, $this->getClass()), true); |
||
| 177 | |||
| 178 | $provider = $this->pool->getProvider($media->getProviderName()); |
||
| 179 | |||
| 180 | if ($media->getId()) { |
||
| 181 | $provider->buildEditForm($formMapper); |
||
| 182 | } else { |
||
| 183 | $provider->buildCreateForm($formMapper); |
||
| 184 | } |
||
| 185 | |||
| 186 | if (null !== $this->categoryManager) { |
||
| 187 | $formMapper->add('category', ModelListType::class, [], [ |
||
| 188 | 'link_parameters' => [ |
||
| 189 | 'context' => $media->getContext(), |
||
| 190 | 'hide_context' => true, |
||
| 191 | 'mode' => 'tree', |
||
| 192 | ], |
||
| 193 | ]); |
||
| 194 | } |
||
| 195 | } |
||
| 196 | } |
||
| 197 |
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces.
This is most likely a typographical error or the method has been renamed.