This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace Spatie\BinaryUuid; |
||
| 4 | |||
| 5 | use Ramsey\Uuid\Uuid; |
||
| 6 | use Illuminate\Database\Eloquent\Model; |
||
| 7 | |||
| 8 | trait HasBinaryUuid |
||
| 9 | { |
||
| 10 | protected static function bootHasBinaryUuid() |
||
| 11 | { |
||
| 12 | static::creating(function (Model $model) { |
||
| 13 | if ($model->{$model->getKeyName()}) { |
||
| 14 | return; |
||
| 15 | } |
||
| 16 | |||
| 17 | $model->{$model->getKeyName()} = static::encodeUuid(static::generateUuid()); |
||
| 18 | }); |
||
| 19 | } |
||
| 20 | |||
| 21 | public static function scopeWithUuid(Builder $builder, $uuid, $field = null): Builder |
||
| 22 | { |
||
| 23 | if ($field) { |
||
| 24 | return static::scopeWithUuidRelation($builder, $uuid, $field); |
||
| 25 | } |
||
| 26 | |||
| 27 | if ($uuid instanceof Uuid) { |
||
| 28 | $uuid = (string) $uuid; |
||
| 29 | } |
||
| 30 | |||
| 31 | $uuid = (array) $uuid; |
||
| 32 | |||
| 33 | return $builder->whereKey(array_map(function (string $modelUuid) { |
||
| 34 | return static::encodeUuid($modelUuid); |
||
| 35 | }, $uuid)); |
||
| 36 | } |
||
| 37 | |||
| 38 | public static function scopeWithUuidRelation(Builder $builder, $uuid, string $field): Builder |
||
| 39 | { |
||
| 40 | if ($uuid instanceof Uuid) { |
||
| 41 | $uuid = (string) $uuid; |
||
| 42 | } |
||
| 43 | |||
| 44 | $uuid = (array) $uuid; |
||
| 45 | |||
| 46 | return $builder->whereIn($field, array_map(function (string $modelUuid) { |
||
| 47 | return static::encodeUuid($modelUuid); |
||
| 48 | }, $uuid)); |
||
| 49 | } |
||
| 50 | |||
| 51 | public static function generateUuid() : string |
||
| 52 | { |
||
| 53 | return Uuid::uuid1(); |
||
| 54 | } |
||
| 55 | |||
| 56 | public static function encodeUuid($uuid): string |
||
| 57 | { |
||
| 58 | if (! Uuid::isValid($uuid)) { |
||
| 59 | return $uuid; |
||
| 60 | } |
||
| 61 | |||
| 62 | if (! $uuid instanceof Uuid) { |
||
| 63 | $uuid = Uuid::fromString($uuid); |
||
| 64 | } |
||
| 65 | |||
| 66 | return $uuid->getBytes(); |
||
| 67 | } |
||
| 68 | |||
| 69 | public static function decodeUuid(string $binaryUuid): string |
||
| 70 | { |
||
| 71 | if (Uuid::isValid($binaryUuid)) { |
||
| 72 | return $binaryUuid; |
||
| 73 | } |
||
| 74 | |||
| 75 | return Uuid::fromBytes($binaryUuid)->toString(); |
||
| 76 | } |
||
| 77 | |||
| 78 | public function toArray() |
||
| 79 | { |
||
| 80 | $uuidAttributes = $this->getUuidAttributes(); |
||
| 81 | |||
| 82 | $array = parent::toArray(); |
||
| 83 | |||
| 84 | if (! $this->exists || ! is_array($uuidAttributes)) { |
||
| 85 | return $array; |
||
| 86 | } |
||
| 87 | |||
| 88 | foreach ($uuidAttributes as $attributeKey) { |
||
| 89 | if (! array_key_exists($attributeKey, $array)) { |
||
| 90 | continue; |
||
| 91 | } |
||
| 92 | $uuidKey = $this->getRelatedBinaryKeyName($attributeKey); |
||
| 93 | $array[$attributeKey] = $this->{$uuidKey}; |
||
| 94 | } |
||
| 95 | |||
| 96 | return $array; |
||
| 97 | } |
||
| 98 | |||
| 99 | public function getRelatedBinaryKeyName($attribute): string |
||
| 100 | { |
||
| 101 | $suffix = $this->getUuidSuffix(); |
||
| 102 | |||
| 103 | return preg_match('/(?:uu)?id/i', $attribute) ? "{$attribute}{$suffix}" : $attribute; |
||
| 104 | } |
||
| 105 | |||
| 106 | public function getAttribute($key) |
||
| 107 | { |
||
| 108 | $uuidKey = $this->uuidTextAttribute($key); |
||
| 109 | |||
| 110 | if ($uuidKey && $this->{$uuidKey} !== null) { |
||
|
0 ignored issues
–
show
|
|||
| 111 | return static::decodeUuid($this->{$uuidKey}); |
||
| 112 | } |
||
| 113 | |||
| 114 | return parent::getAttribute($key); |
||
| 115 | } |
||
| 116 | |||
| 117 | public function setAttribute($key, $value) |
||
| 118 | { |
||
| 119 | if ($this->uuidTextAttribute($key)) { |
||
|
0 ignored issues
–
show
The expression
$this->uuidTextAttribute($key) of type string|false is loosely compared to true; this is ambiguous if the string can be empty. You might want to explicitly use !== false instead.
In PHP, under loose comparison (like For '' == false // true
'' == null // true
'ab' == false // false
'ab' == null // false
// It is often better to use strict comparison
'' === false // false
'' === null // false
Loading history...
|
|||
| 120 | $value = static::encodeUuid($value); |
||
| 121 | } |
||
| 122 | |||
| 123 | return parent::setAttribute($key, $value); |
||
| 124 | } |
||
| 125 | |||
| 126 | protected function getUuidSuffix() |
||
| 127 | { |
||
| 128 | return (property_exists($this, 'uuidSuffix')) ? $this->uuidSuffix : '_text'; |
||
| 129 | } |
||
| 130 | |||
| 131 | protected function uuidTextAttribute($key) |
||
| 132 | { |
||
| 133 | $uuidAttributes = $this->getUuidAttributes(); |
||
| 134 | $suffix = $this->getUuidSuffix(); |
||
| 135 | $offset = -(strlen($suffix)); |
||
| 136 | |||
| 137 | if (substr($key, $offset) == $suffix && in_array(($uuidKey = substr($key, 0, $offset)), $uuidAttributes)) { |
||
| 138 | return $uuidKey; |
||
| 139 | } |
||
| 140 | |||
| 141 | return false; |
||
| 142 | } |
||
| 143 | |||
| 144 | public function getUuidAttributes() |
||
| 145 | { |
||
| 146 | $uuidAttributes = []; |
||
| 147 | |||
| 148 | if (property_exists($this, 'uuids') && is_array($this->uuids)) { |
||
| 149 | $uuidAttributes = array_merge($uuidAttributes, $this->uuids); |
||
| 150 | } |
||
| 151 | |||
| 152 | // non composite primary keys will return a string so casting required |
||
| 153 | $key = (array) $this->getKeyName(); |
||
| 154 | |||
| 155 | $uuidAttributes = array_unique(array_merge($uuidAttributes, $key)); |
||
| 156 | |||
| 157 | return $uuidAttributes; |
||
| 158 | } |
||
| 159 | |||
| 160 | public function getUuidTextAttribute(): ?string |
||
| 161 | { |
||
| 162 | $key = $this->getKeyName(); |
||
| 163 | |||
| 164 | if (! $this->exists || is_array($key)) { |
||
| 165 | return null; |
||
| 166 | } |
||
| 167 | |||
| 168 | return static::decodeUuid($this->{$key}); |
||
| 169 | } |
||
| 170 | |||
| 171 | public function setUuidTextAttribute(string $uuid) |
||
| 172 | { |
||
| 173 | $key = $this->getKeyName(); |
||
| 174 | |||
| 175 | if (is_array($key)) { |
||
| 176 | return; |
||
| 177 | } |
||
| 178 | |||
| 179 | $this->{$key} = static::encodeUuid($uuid); |
||
| 180 | } |
||
| 181 | |||
| 182 | public function getQueueableId() |
||
| 183 | { |
||
| 184 | return base64_encode($this->{$this->getKeyName()}); |
||
| 185 | } |
||
| 186 | |||
| 187 | public function newQueryForRestoration($id) |
||
| 188 | { |
||
| 189 | return $this->newQueryWithoutScopes()->whereKey(base64_decode($id)); |
||
| 190 | } |
||
| 191 | |||
| 192 | public function newEloquentBuilder($query) |
||
| 193 | { |
||
| 194 | return new Builder($query); |
||
| 195 | } |
||
| 196 | |||
| 197 | public function getRouteKeyName() |
||
| 198 | { |
||
| 199 | $suffix = $this->getUuidSuffix(); |
||
| 200 | |||
| 201 | return "uuid{$suffix}"; |
||
| 202 | } |
||
| 203 | |||
| 204 | public function getKeyName() |
||
| 205 | { |
||
| 206 | return 'uuid'; |
||
| 207 | } |
||
| 208 | |||
| 209 | public function getIncrementing() |
||
| 210 | { |
||
| 211 | return false; |
||
| 212 | } |
||
| 213 | |||
| 214 | public function resolveRouteBinding($value) |
||
| 215 | { |
||
| 216 | return $this->withUuid($value)->first(); |
||
| 217 | } |
||
| 218 | } |
||
| 219 |
In PHP, under loose comparison (like
==, or!=, orswitchconditions), values of different types might be equal.For
stringvalues, the empty string''is a special case, in particular the following results might be unexpected: