This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace Spatie\ModelCleanup; |
||
| 4 | |||
| 5 | use Illuminate\Console\Command; |
||
| 6 | use Illuminate\Support\Collection; |
||
| 7 | use Illuminate\Filesystem\Filesystem; |
||
| 8 | use PhpParser\Node\Stmt\Class_; |
||
| 9 | use PhpParser\NodeTraverser; |
||
| 10 | use PhpParser\ParserFactory; |
||
| 11 | use PhpParser\NodeVisitor\NameResolver; |
||
| 12 | |||
| 13 | class CleanUpModelsCommand extends Command |
||
| 14 | { |
||
| 15 | /** |
||
| 16 | * The console command name. |
||
| 17 | * |
||
| 18 | * @var string |
||
| 19 | */ |
||
| 20 | protected $signature = 'clean:models'; |
||
| 21 | /** |
||
| 22 | * The console command description. |
||
| 23 | * |
||
| 24 | * @var string |
||
| 25 | */ |
||
| 26 | protected $description = 'Clean up models.'; |
||
| 27 | |||
| 28 | protected $filesystem; |
||
| 29 | |||
| 30 | public function __construct(Filesystem $filesystem) |
||
| 31 | { |
||
| 32 | parent::__construct(); |
||
| 33 | |||
| 34 | $this->filesystem = $filesystem; |
||
| 35 | } |
||
| 36 | |||
| 37 | public function handle() |
||
| 38 | { |
||
| 39 | $this->comment('Cleaning models...'); |
||
| 40 | |||
| 41 | // Cleaning Normal models |
||
| 42 | $cleanableModels = $this->getModelsThatShouldBeCleanedUp(); |
||
| 43 | $this->cleanUp($cleanableModels); |
||
| 44 | |||
| 45 | // Cleaning softdeletes models |
||
| 46 | $cleanableModels = $this->getModelsThatShouldBeForcedCleanedUp(); |
||
| 47 | $this->forceCleanUp($cleanableModels); |
||
| 48 | |||
| 49 | $this->comment('All done!'); |
||
| 50 | } |
||
| 51 | |||
| 52 | View Code Duplication | protected function getModelsThatShouldBeCleanedUp() : Collection |
|
| 53 | { |
||
| 54 | $directories = config('model-cleanup.directories'); |
||
| 55 | |||
| 56 | $modelsFromDirectories = $this->getAllModelsFromEachDirectory($directories); |
||
| 57 | |||
| 58 | return $modelsFromDirectories |
||
| 59 | ->merge(collect(config('model-cleanup.models'))) |
||
| 60 | ->filter(function ($modelClass) { |
||
| 61 | return in_array(GetsCleanedUp::class, class_implements($modelClass)); |
||
| 62 | }); |
||
| 63 | } |
||
| 64 | |||
| 65 | View Code Duplication | protected function getModelsThatShouldBeForcedCleanedUp() : Collection |
|
| 66 | { |
||
| 67 | $directories = config('model-cleanup.directories'); |
||
| 68 | |||
| 69 | $modelsFromDirectories = $this->getAllModelsFromEachDirectory($directories); |
||
| 70 | |||
| 71 | return $modelsFromDirectories |
||
| 72 | ->merge(collect(config('model-cleanup.models'))) |
||
| 73 | ->filter(function ($modelClass) { |
||
| 74 | return in_array(GetsForcedCleanedUp::class, class_implements($modelClass)); |
||
| 75 | }); |
||
| 76 | } |
||
| 77 | |||
| 78 | protected function cleanUp(Collection $cleanableModels) |
||
| 79 | { |
||
| 80 | $cleanableModels->each(function (string $modelClass) { |
||
| 81 | |||
| 82 | $numberOfDeletedRecords = $modelClass::cleanUp($modelClass::query())->delete(); |
||
| 83 | |||
| 84 | event(new ModelWasCleanedUp($modelClass, $numberOfDeletedRecords)); |
||
| 85 | |||
| 86 | $this->info("Deleted {$numberOfDeletedRecords} record(s) from {$modelClass}."); |
||
| 87 | |||
| 88 | }); |
||
| 89 | } |
||
| 90 | |||
| 91 | protected function forceCleanUp(Collection $cleanableModels) |
||
| 92 | { |
||
| 93 | $cleanableModels->each(function (string $modelClass) { |
||
| 94 | |||
| 95 | $numberOfDeletedRecords = $modelClass::forceCleanUp($modelClass::query())->forceDelete(); |
||
| 96 | |||
| 97 | event(new ModelWasCleanedUp($modelClass, $numberOfDeletedRecords)); |
||
| 98 | |||
| 99 | $this->info("Deleted {$numberOfDeletedRecords} record(s) from {$modelClass}."); |
||
| 100 | |||
| 101 | }); |
||
| 102 | } |
||
| 103 | |||
| 104 | protected function getAllModelsFromEachDirectory(array $directories) : Collection |
||
| 105 | { |
||
| 106 | return collect($directories) |
||
| 107 | ->map(function ($directory) { |
||
| 108 | return $this->getClassNamesInDirectory($directory)->all(); |
||
| 109 | }) |
||
| 110 | ->flatten(); |
||
| 111 | } |
||
| 112 | |||
| 113 | protected function getClassNamesInDirectory(string $directory) : Collection |
||
| 114 | { |
||
| 115 | $files = config('model-cleanup.recursive', true) |
||
| 116 | ? $this->filesystem->allFiles($directory) |
||
| 117 | : $this->filesystem->files($directory); |
||
| 118 | |||
| 119 | return collect($files)->map(function (string $path) { |
||
| 120 | |||
| 121 | return $this->getFullyQualifiedClassNameFromFile($path); |
||
| 122 | |||
| 123 | })->filter(function (string $className) { |
||
| 124 | |||
| 125 | return !empty($className); |
||
| 126 | |||
| 127 | }); |
||
| 128 | } |
||
| 129 | |||
| 130 | protected function getFullyQualifiedClassNameFromFile(string $path) : string |
||
| 131 | { |
||
| 132 | $parser = (new ParserFactory())->create(ParserFactory::PREFER_PHP7); |
||
| 133 | |||
| 134 | $traverser = new NodeTraverser(); |
||
| 135 | |||
| 136 | $traverser->addVisitor(new NameResolver()); |
||
| 137 | |||
| 138 | $code = file_get_contents($path); |
||
| 139 | |||
| 140 | $statements = $parser->parse($code); |
||
| 141 | |||
| 142 | $statements = $traverser->traverse($statements); |
||
|
0 ignored issues
–
show
|
|||
| 143 | |||
| 144 | return collect($statements[0]->stmts) |
||
|
0 ignored issues
–
show
Accessing
stmts on the interface PhpParser\Node suggest that you code against a concrete implementation. How about adding an instanceof check?
If you access a property on an interface, you most likely code against a concrete implementation of the interface. Available Fixes
Loading history...
|
|||
| 145 | ->filter(function ($statement) { |
||
| 146 | return $statement instanceof Class_; |
||
| 147 | }) |
||
| 148 | ->map(function (Class_ $statement) { |
||
| 149 | return $statement->namespacedName->toString(); |
||
| 150 | }) |
||
| 151 | ->first() ?? ''; |
||
| 152 | } |
||
| 153 | } |
||
| 154 |
If a method or function can return multiple different values and unless you are sure that you only can receive a single value in this context, we recommend to add an additional type check:
If this a common case that PHP Analyzer should handle natively, please let us know by opening an issue.