This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Spatie\ModelCleanup; |
||
4 | |||
5 | use Illuminate\Console\Command; |
||
6 | use Illuminate\Support\Collection; |
||
7 | use Illuminate\Filesystem\Filesystem; |
||
8 | use PhpParser\Node\Stmt\Class_; |
||
9 | use PhpParser\NodeTraverser; |
||
10 | use PhpParser\ParserFactory; |
||
11 | use PhpParser\NodeVisitor\NameResolver; |
||
12 | |||
13 | class CleanUpModelsCommand extends Command |
||
14 | { |
||
15 | /** |
||
16 | * The console command name. |
||
17 | * |
||
18 | * @var string |
||
19 | */ |
||
20 | protected $signature = 'clean:models'; |
||
21 | /** |
||
22 | * The console command description. |
||
23 | * |
||
24 | * @var string |
||
25 | */ |
||
26 | protected $description = 'Clean up models.'; |
||
27 | |||
28 | protected $filesystem; |
||
29 | |||
30 | public function __construct(Filesystem $filesystem) |
||
31 | { |
||
32 | parent::__construct(); |
||
33 | |||
34 | $this->filesystem = $filesystem; |
||
35 | } |
||
36 | |||
37 | public function handle() |
||
38 | { |
||
39 | $this->comment('Cleaning models...'); |
||
40 | |||
41 | // Cleaning Normal models |
||
42 | $cleanableModels = $this->getModelsThatShouldBeCleanedUp(); |
||
43 | $this->cleanUp($cleanableModels); |
||
44 | |||
45 | // Cleaning softdeletes models |
||
46 | $cleanableModels = $this->getModelsThatShouldBeForcedCleanedUp(); |
||
47 | $this->forceCleanUp($cleanableModels); |
||
48 | |||
49 | $this->comment('All done!'); |
||
50 | } |
||
51 | |||
52 | View Code Duplication | protected function getModelsThatShouldBeCleanedUp() : Collection |
|
53 | { |
||
54 | $directories = config('model-cleanup.directories'); |
||
55 | |||
56 | $modelsFromDirectories = $this->getAllModelsFromEachDirectory($directories); |
||
57 | |||
58 | return $modelsFromDirectories |
||
59 | ->merge(collect(config('model-cleanup.models'))) |
||
60 | ->filter(function ($modelClass) { |
||
61 | return in_array(GetsCleanedUp::class, class_implements($modelClass)); |
||
62 | }); |
||
63 | } |
||
64 | |||
65 | View Code Duplication | protected function getModelsThatShouldBeForcedCleanedUp() : Collection |
|
66 | { |
||
67 | $directories = config('model-cleanup.directories'); |
||
68 | |||
69 | $modelsFromDirectories = $this->getAllModelsFromEachDirectory($directories); |
||
70 | |||
71 | return $modelsFromDirectories |
||
72 | ->merge(collect(config('model-cleanup.models'))) |
||
73 | ->filter(function ($modelClass) { |
||
74 | return in_array(GetsForcedCleanedUp::class, class_implements($modelClass)); |
||
75 | }); |
||
76 | } |
||
77 | |||
78 | protected function cleanUp(Collection $cleanableModels) |
||
79 | { |
||
80 | $cleanableModels->each(function (string $modelClass) { |
||
81 | |||
82 | $numberOfDeletedRecords = $modelClass::cleanUp($modelClass::query())->delete(); |
||
83 | |||
84 | event(new ModelWasCleanedUp($modelClass, $numberOfDeletedRecords)); |
||
85 | |||
86 | $this->info("Deleted {$numberOfDeletedRecords} record(s) from {$modelClass}."); |
||
87 | |||
88 | }); |
||
89 | } |
||
90 | |||
91 | protected function forceCleanUp(Collection $cleanableModels) |
||
92 | { |
||
93 | $cleanableModels->each(function (string $modelClass) { |
||
94 | |||
95 | $numberOfDeletedRecords = $modelClass::forceCleanUp($modelClass::query())->forceDelete(); |
||
96 | |||
97 | event(new ModelWasCleanedUp($modelClass, $numberOfDeletedRecords)); |
||
98 | |||
99 | $this->info("Deleted {$numberOfDeletedRecords} record(s) from {$modelClass}."); |
||
100 | |||
101 | }); |
||
102 | } |
||
103 | |||
104 | protected function getAllModelsFromEachDirectory(array $directories) : Collection |
||
105 | { |
||
106 | return collect($directories) |
||
107 | ->map(function ($directory) { |
||
108 | return $this->getClassNamesInDirectory($directory)->all(); |
||
109 | }) |
||
110 | ->flatten(); |
||
111 | } |
||
112 | |||
113 | protected function getClassNamesInDirectory(string $directory) : Collection |
||
114 | { |
||
115 | $files = config('model-cleanup.recursive', true) |
||
116 | ? $this->filesystem->allFiles($directory) |
||
117 | : $this->filesystem->files($directory); |
||
118 | |||
119 | return collect($files)->map(function (string $path) { |
||
120 | |||
121 | return $this->getFullyQualifiedClassNameFromFile($path); |
||
122 | |||
123 | })->filter(function (string $className) { |
||
124 | |||
125 | return !empty($className); |
||
126 | |||
127 | }); |
||
128 | } |
||
129 | |||
130 | protected function getFullyQualifiedClassNameFromFile(string $path) : string |
||
131 | { |
||
132 | $parser = (new ParserFactory())->create(ParserFactory::PREFER_PHP7); |
||
133 | |||
134 | $traverser = new NodeTraverser(); |
||
135 | |||
136 | $traverser->addVisitor(new NameResolver()); |
||
137 | |||
138 | $code = file_get_contents($path); |
||
139 | |||
140 | $statements = $parser->parse($code); |
||
141 | |||
142 | $statements = $traverser->traverse($statements); |
||
0 ignored issues
–
show
|
|||
143 | |||
144 | return collect($statements[0]->stmts) |
||
0 ignored issues
–
show
Accessing
stmts on the interface PhpParser\Node suggest that you code against a concrete implementation. How about adding an instanceof check?
If you access a property on an interface, you most likely code against a concrete implementation of the interface. Available Fixes
![]() |
|||
145 | ->filter(function ($statement) { |
||
146 | return $statement instanceof Class_; |
||
147 | }) |
||
148 | ->map(function (Class_ $statement) { |
||
149 | return $statement->namespacedName->toString(); |
||
150 | }) |
||
151 | ->first() ?? ''; |
||
152 | } |
||
153 | } |
||
154 |
If a method or function can return multiple different values and unless you are sure that you only can receive a single value in this context, we recommend to add an additional type check:
If this a common case that PHP Analyzer should handle natively, please let us know by opening an issue.