spatie /
image
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace Spatie\Image; |
||
| 4 | |||
| 5 | use BadMethodCallException; |
||
| 6 | use Intervention\Image\ImageManagerStatic as InterventionImage; |
||
| 7 | use Spatie\Image\Exceptions\InvalidImageDriver; |
||
| 8 | use Spatie\ImageOptimizer\OptimizerChainFactory; |
||
| 9 | |||
| 10 | /** @mixin \Spatie\Image\Manipulations */ |
||
| 11 | class Image |
||
| 12 | { |
||
| 13 | /** @var string */ |
||
| 14 | protected $pathToImage; |
||
| 15 | |||
| 16 | /** @var \Spatie\Image\Manipulations */ |
||
| 17 | protected $manipulations; |
||
| 18 | |||
| 19 | protected $imageDriver = 'gd'; |
||
| 20 | |||
| 21 | /** @var string|null */ |
||
| 22 | protected $temporaryDirectory = null; |
||
| 23 | |||
| 24 | /** |
||
| 25 | * @param string $pathToImage |
||
| 26 | * |
||
| 27 | * @return static |
||
| 28 | */ |
||
| 29 | public static function load(string $pathToImage) |
||
| 30 | { |
||
| 31 | return new static($pathToImage); |
||
| 32 | } |
||
| 33 | |||
| 34 | public function setTemporaryDirectory($tempDir) |
||
| 35 | { |
||
| 36 | $this->temporaryDirectory = $tempDir; |
||
| 37 | |||
| 38 | return $this; |
||
| 39 | } |
||
| 40 | |||
| 41 | public function __construct(string $pathToImage) |
||
| 42 | { |
||
| 43 | $this->pathToImage = $pathToImage; |
||
| 44 | |||
| 45 | $this->manipulations = new Manipulations(); |
||
| 46 | } |
||
| 47 | |||
| 48 | /** |
||
| 49 | * @param string $imageDriver |
||
| 50 | * |
||
| 51 | * @return $this |
||
| 52 | * |
||
| 53 | * @throws InvalidImageDriver |
||
| 54 | */ |
||
| 55 | public function useImageDriver(string $imageDriver) |
||
| 56 | { |
||
| 57 | if (! in_array($imageDriver, ['gd', 'imagick'])) { |
||
| 58 | throw InvalidImageDriver::driver($imageDriver); |
||
| 59 | } |
||
| 60 | |||
| 61 | $this->imageDriver = $imageDriver; |
||
| 62 | |||
| 63 | InterventionImage::configure([ |
||
| 64 | 'driver' => $this->imageDriver, |
||
| 65 | ]); |
||
| 66 | |||
| 67 | return $this; |
||
| 68 | } |
||
| 69 | |||
| 70 | /** |
||
| 71 | * @param callable|$manipulations |
||
| 72 | * |
||
| 73 | * @return $this |
||
| 74 | */ |
||
| 75 | public function manipulate($manipulations) |
||
| 76 | { |
||
| 77 | if (is_callable($manipulations)) { |
||
| 78 | $manipulations($this->manipulations); |
||
| 79 | } |
||
| 80 | |||
| 81 | if ($manipulations instanceof Manipulations) { |
||
| 82 | $this->manipulations->mergeManipulations($manipulations); |
||
|
0 ignored issues
–
show
|
|||
| 83 | } |
||
| 84 | |||
| 85 | return $this; |
||
| 86 | } |
||
| 87 | |||
| 88 | public function __call($name, $arguments) |
||
| 89 | { |
||
| 90 | if (! method_exists($this->manipulations, $name)) { |
||
| 91 | throw new BadMethodCallException("Manipulation `{$name}` does not exist"); |
||
| 92 | } |
||
| 93 | |||
| 94 | $this->manipulations->$name(...$arguments); |
||
| 95 | |||
| 96 | return $this; |
||
| 97 | } |
||
| 98 | |||
| 99 | public function getWidth(): int |
||
| 100 | { |
||
| 101 | return InterventionImage::make($this->pathToImage)->width(); |
||
| 102 | } |
||
| 103 | |||
| 104 | public function getHeight(): int |
||
| 105 | { |
||
| 106 | return InterventionImage::make($this->pathToImage)->height(); |
||
| 107 | } |
||
| 108 | |||
| 109 | public function getManipulationSequence(): ManipulationSequence |
||
| 110 | { |
||
| 111 | return $this->manipulations->getManipulationSequence(); |
||
| 112 | } |
||
| 113 | |||
| 114 | public function save($outputPath = '') |
||
| 115 | { |
||
| 116 | if ($outputPath == '') { |
||
| 117 | $outputPath = $this->pathToImage; |
||
| 118 | } |
||
| 119 | |||
| 120 | $this->addFormatManipulation($outputPath); |
||
| 121 | |||
| 122 | $glideConversion = GlideConversion::create($this->pathToImage)->useImageDriver($this->imageDriver); |
||
| 123 | |||
| 124 | if (! is_null($this->temporaryDirectory)) { |
||
| 125 | $glideConversion->setTemporaryDirectory($this->temporaryDirectory); |
||
| 126 | } |
||
| 127 | |||
| 128 | $glideConversion->performManipulations($this->manipulations); |
||
| 129 | |||
| 130 | $glideConversion->save($outputPath); |
||
| 131 | |||
| 132 | if ($this->shouldOptimize()) { |
||
| 133 | $optimizerChainConfiguration = $this->manipulations->getFirstManipulationArgument('optimize'); |
||
| 134 | |||
| 135 | $optimizerChainConfiguration = json_decode($optimizerChainConfiguration, true); |
||
| 136 | |||
| 137 | $this->performOptimization($outputPath, $optimizerChainConfiguration); |
||
| 138 | } |
||
| 139 | } |
||
| 140 | |||
| 141 | protected function shouldOptimize(): bool |
||
| 142 | { |
||
| 143 | return ! is_null($this->manipulations->getFirstManipulationArgument('optimize')); |
||
| 144 | } |
||
| 145 | |||
| 146 | protected function performOptimization($path, array $optimizerChainConfiguration) |
||
| 147 | { |
||
| 148 | $optimizerChain = OptimizerChainFactory::create(); |
||
| 149 | |||
| 150 | if (count($optimizerChainConfiguration)) { |
||
| 151 | $optimizers = array_map(function (array $optimizerOptions, string $optimizerClassName) { |
||
| 152 | return (new $optimizerClassName)->setOptions($optimizerOptions); |
||
| 153 | }, $optimizerChainConfiguration, array_keys($optimizerChainConfiguration)); |
||
| 154 | |||
| 155 | $optimizerChain->setOptimizers($optimizers); |
||
| 156 | } |
||
| 157 | |||
| 158 | $optimizerChain->optimize($path); |
||
| 159 | } |
||
| 160 | |||
| 161 | protected function addFormatManipulation($outputPath) |
||
| 162 | { |
||
| 163 | if ($this->manipulations->hasManipulation('format')) { |
||
| 164 | return; |
||
| 165 | } |
||
| 166 | |||
| 167 | $inputExtension = strtolower(pathinfo($this->pathToImage, PATHINFO_EXTENSION)); |
||
| 168 | $outputExtension = strtolower(pathinfo($outputPath, PATHINFO_EXTENSION)); |
||
| 169 | |||
| 170 | if ($inputExtension === $outputExtension) { |
||
| 171 | return; |
||
| 172 | } |
||
| 173 | |||
| 174 | $supportedFormats = ['jpg', 'pjpg', 'png', 'gif', 'webp']; |
||
| 175 | |||
| 176 | if (in_array($outputExtension, $supportedFormats)) { |
||
| 177 | $this->manipulations->format($outputExtension); |
||
| 178 | } |
||
| 179 | } |
||
| 180 | } |
||
| 181 |
It seems like the type of the argument is not accepted by the function/method which you are calling.
In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug.
We suggest to add an explicit type cast like in the following example: