splitbrain /
dokuwiki
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | use dokuwiki\HTTP\DokuHTTPClient; |
||
|
|
|||
| 4 | |||
| 5 | /** |
||
| 6 | * IXR - The Incutio XML-RPC Library |
||
| 54 | * @param mixed $data |
||
| 55 | * @param bool $type |
||
| 56 | */ |
||
| 57 | function __construct($data, $type = false) { |
||
| 58 | $this->data = $data; |
||
| 59 | if(!$type) { |
||
| 60 | $type = $this->calculateType(); |
||
| 61 | } |
||
| 62 | $this->type = $type; |
||
| 63 | if($type == 'struct') { |
||
| 64 | // Turn all the values in the array in to new IXR_Value objects |
||
| 65 | foreach($this->data as $key => $value) { |
||
| 76 | /** |
||
| 77 | * @return string |
||
| 78 | */ |
||
| 79 | function calculateType() { |
||
| 80 | if($this->data === true || $this->data === false) { |
||
| 81 | return 'boolean'; |
||
| 82 | } |
||
| 115 | /** |
||
| 116 | * @return bool|string |
||
| 117 | */ |
||
| 118 | function getXml() { |
||
| 119 | // Return XML for this value |
||
| 120 | switch($this->type) { |
||
| 121 | case 'boolean': |
||
| 122 | return '<boolean>' . (($this->data) ? '1' : '0') . '</boolean>'; |
||
| 123 | break; |
||
| 124 | case 'int': |
||
| 125 | return '<int>' . $this->data . '</int>'; |
||
| 126 | break; |
||
| 127 | case 'double': |
||
| 128 | return '<double>' . $this->data . '</double>'; |
||
| 129 | break; |
||
| 130 | case 'string': |
||
| 131 | return '<string>' . htmlspecialchars($this->data) . '</string>'; |
||
| 132 | break; |
||
| 133 | case 'array': |
||
| 134 | $return = '<array><data>' . "\n"; |
||
| 135 | foreach($this->data as $item) { |
||
| 136 | $return .= ' <value>' . $item->getXml() . "</value>\n"; |
||
| 137 | } |
||
| 138 | $return .= '</data></array>'; |
||
| 139 | return $return; |
||
| 140 | break; |
||
| 141 | case 'struct': |
||
| 142 | $return = '<struct>' . "\n"; |
||
| 143 | foreach($this->data as $name => $value) { |
||
| 144 | $return .= " <member><name>$name</name><value>"; |
||
| 145 | $return .= $value->getXml() . "</value></member>\n"; |
||
| 146 | } |
||
| 147 | $return .= '</struct>'; |
||
| 148 | return $return; |
||
| 149 | break; |
||
| 150 | case 'date': |
||
| 151 | case 'base64': |
||
| 152 | return $this->data->getXml(); |
||
| 153 | break; |
||
| 154 | } |
||
| 155 | return false; |
||
| 156 | } |
||
| 161 | * @param array $array |
||
| 162 | * @return boolean |
||
| 163 | */ |
||
| 164 | function isStruct($array) { |
||
| 165 | $expected = 0; |
||
| 166 | foreach($array as $key => $value) { |
||
| 167 | if((string) $key != (string) $expected) { |
||
| 203 | /** |
||
| 204 | * @param string $message |
||
| 205 | */ |
||
| 206 | function __construct($message) { |
||
| 207 | $this->message =& $message; |
||
| 208 | } |
||
| 209 | |||
| 210 | /** |
||
| 211 | * @return bool |
||
| 212 | */ |
||
| 213 | function parse() { |
||
| 214 | // first remove the XML declaration |
||
| 215 | // merged from WP #10698 - this method avoids the RAM usage of preg_replace on very large messages |
||
| 216 | $header = preg_replace('/<\?xml.*?\?' . '>/', '', substr($this->message, 0, 100), 1); |
||
| 263 | * @param string $tag |
||
| 264 | * @param $attr |
||
| 265 | */ |
||
| 266 | function tag_open($parser, $tag, $attr) { |
||
| 267 | $this->_currentTagContents = ''; |
||
| 268 | $this->_currentTag = $tag; |
||
| 269 | |||
| 290 | * @param $parser |
||
| 291 | * @param string $cdata |
||
| 292 | */ |
||
| 293 | function cdata($parser, $cdata) { |
||
| 294 | $this->_currentTagContents .= $cdata; |
||
| 295 | } |
||
| 296 | |||
| 298 | * @param $parser |
||
| 299 | * @param $tag |
||
| 300 | */ |
||
| 301 | function tag_close($parser, $tag) { |
||
| 302 | $value = null; |
||
| 303 | $valueFlag = false; |
||
| 304 | switch($tag) { |
||
| 391 | * @param bool $data |
||
| 392 | * @param bool $wait |
||
| 393 | */ |
||
| 394 | function __construct($callbacks = false, $data = false, $wait = false) { |
||
| 395 | $this->setCapabilities(); |
||
| 396 | if($callbacks) { |
||
| 397 | $this->callbacks = $callbacks; |
||
| 398 | } |
||
| 399 | $this->setCallbacks(); |
||
| 400 | |||
| 406 | /** |
||
| 407 | * @param bool|string $data |
||
| 408 | */ |
||
| 409 | function serve($data = false) { |
||
| 410 | if(!$data) { |
||
| 411 | |||
| 412 | $postData = trim(http_get_raw_post_data()); |
||
| 416 | } |
||
| 417 | $data = $postData; |
||
| 418 | } |
||
| 419 | $this->message = new IXR_Message($data); |
||
| 420 | if(!$this->message->parse()) { |
||
| 421 | $this->error(-32700, 'parse error. not well formed'); |
||
| 422 | } |
||
| 456 | * @param array $args |
||
| 457 | * @return IXR_Error|mixed |
||
| 458 | */ |
||
| 459 | function call($methodname, $args) { |
||
| 460 | if(!$this->hasMethod($methodname)) { |
||
| 461 | return new IXR_Error(-32601, 'server error. requested method ' . $methodname . ' does not exist.'); |
||
| 462 | } |
||
| 513 | * @param int $error |
||
| 514 | * @param string|bool $message |
||
| 515 | */ |
||
| 516 | function error($error, $message = false) { |
||
| 517 | // Accepts either an error object or an error code and message |
||
| 518 | if($message && !is_object($error)) { |
||
| 519 | $error = new IXR_Error($error, $message); |
||
| 520 | } |
||
| 521 | $this->output($error->getXml()); |
||
| 522 | } |
||
| 523 | |||
| 524 | /** |
||
| 525 | * @param string $xml |
||
| 526 | */ |
||
| 527 | function output($xml) { |
||
| 528 | header('Content-Type: text/xml; charset=utf-8'); |
||
| 529 | echo '<?xml version="1.0"?>', "\n", $xml; |
||
| 530 | exit; |
||
| 534 | * @param string $method |
||
| 535 | * @return bool |
||
| 536 | */ |
||
| 537 | function hasMethod($method) { |
||
| 538 | return in_array($method, array_keys($this->callbacks)); |
||
| 539 | } |
||
| 540 | |||
| 541 | function setCapabilities() { |
||
| 542 | // Initialises capabilities array |
||
| 543 | $this->capabilities = array( |
||
| 544 | 'xmlrpc' => array( |
||
| 559 | /** |
||
| 560 | * @return mixed |
||
| 561 | */ |
||
| 562 | function getCapabilities() { |
||
| 563 | return $this->capabilities; |
||
| 564 | } |
||
| 565 | |||
| 566 | function setCallbacks() { |
||
| 567 | $this->callbacks['system.getCapabilities'] = 'this:getCapabilities'; |
||
| 568 | $this->callbacks['system.listMethods'] = 'this:listMethods'; |
||
| 569 | $this->callbacks['system.multicall'] = 'this:multiCall'; |
||
| 572 | /** |
||
| 573 | * @return array |
||
| 574 | */ |
||
| 575 | function listMethods() { |
||
| 576 | // Returns a list of methods - uses array_reverse to ensure user defined |
||
| 577 | // methods are listed before server defined methods |
||
| 578 | return array_reverse(array_keys($this->callbacks)); |
||
| 582 | * @param array $methodcalls |
||
| 583 | * @return array |
||
| 584 | */ |
||
| 585 | function multiCall($methodcalls) { |
||
| 586 | // See http://www.xmlrpc.com/discuss/msgReader$1208 |
||
| 587 | $return = array(); |
||
| 588 | foreach($methodcalls as $call) { |
||
| 624 | * @param string $method |
||
| 625 | * @param array $args |
||
| 626 | */ |
||
| 627 | function __construct($method, $args) { |
||
| 628 | $this->method = $method; |
||
| 629 | $this->args = $args; |
||
| 630 | $this->xml = <<<EOD |
||
| 646 | /** |
||
| 647 | * @return int |
||
| 648 | */ |
||
| 649 | function getLength() { |
||
| 650 | return strlen($this->xml); |
||
| 651 | } |
||
| 652 | |||
| 653 | /** |
||
| 654 | * @return string |
||
| 655 | */ |
||
| 656 | function getXml() { |
||
| 657 | return $this->xml; |
||
| 658 | } |
||
| 659 | } |
||
| 687 | * @param int $port |
||
| 688 | * @param int $timeout |
||
| 689 | */ |
||
| 690 | function __construct($server, $path = false, $port = 80, $timeout = 15) { |
||
| 691 | parent::__construct(); |
||
| 692 | if(!$path) { |
||
| 693 | // Assume we have been given a URL instead |
||
| 702 | * parameters: method and arguments |
||
| 703 | * @return bool success or error |
||
| 704 | */ |
||
| 705 | function query() { |
||
| 706 | $args = func_get_args(); |
||
| 707 | $method = array_shift($args); |
||
| 708 | $request = new IXR_Request($method, $args); |
||
| 741 | /** |
||
| 742 | * @return mixed |
||
| 743 | */ |
||
| 744 | function getResponse() { |
||
| 745 | // methodResponses can only have one param - return that |
||
| 746 | return $this->message->params[0]; |
||
| 747 | } |
||
| 749 | /** |
||
| 750 | * @return bool |
||
| 751 | */ |
||
| 752 | function isError() { |
||
| 753 | return (is_object($this->xmlerror)); |
||
| 754 | } |
||
| 755 | |||
| 756 | /** |
||
| 757 | * @return int |
||
| 758 | */ |
||
| 759 | function getErrorCode() { |
||
| 760 | return $this->xmlerror->code; |
||
| 761 | } |
||
| 762 | |||
| 763 | /** |
||
| 764 | * @return string |
||
| 765 | */ |
||
| 766 | function getErrorMessage() { |
||
| 767 | return $this->xmlerror->message; |
||
| 768 | } |
||
| 769 | } |
||
| 782 | * @param int $code |
||
| 783 | * @param string $message |
||
| 784 | */ |
||
| 785 | function __construct($code, $message) { |
||
| 786 | $this->code = $code; |
||
| 787 | $this->message = htmlspecialchars($message); |
||
| 788 | } |
||
| 790 | /** |
||
| 791 | * @return string |
||
| 792 | */ |
||
| 793 | function getXml() { |
||
| 794 | $xml = <<<EOD |
||
| 795 | <methodResponse> |
||
| 796 | <fault> |
||
| 879 | * |
||
| 880 | * @return int |
||
| 881 | */ |
||
| 882 | function getTimestamp() { |
||
| 883 | return $this->date->getTimestamp(); |
||
| 884 | } |
||
| 885 | } |
||
| 896 | /** |
||
| 897 | * @param string $data |
||
| 898 | */ |
||
| 899 | function __construct($data) { |
||
| 900 | $this->data = $data; |
||
| 901 | } |
||
| 902 | |||
| 903 | /** |
||
| 904 | * @return string |
||
| 905 | */ |
||
| 906 | function getXml() { |
||
| 907 | return '<base64>' . base64_encode($this->data) . '</base64>'; |
||
| 908 | } |
||
| 909 | } |
||
| 923 | /** |
||
| 924 | * Constructor |
||
| 925 | */ |
||
| 926 | function __construct() { |
||
| 927 | $this->setCallbacks(); |
||
| 928 | $this->setCapabilities(); |
||
| 929 | $this->capabilities['introspection'] = array( |
||
| 962 | * @param string[] $args |
||
| 963 | * @param string $help |
||
| 964 | */ |
||
| 965 | function addCallback($method, $callback, $args, $help) { |
||
| 966 | $this->callbacks[$method] = $callback; |
||
| 967 | $this->signatures[$method] = $args; |
||
| 968 | $this->help[$method] = $help; |
||
| 973 | * @param array $args |
||
| 974 | * @return IXR_Error|mixed |
||
| 975 | */ |
||
| 976 | function call($methodname, $args) { |
||
| 977 | // Make sure it's in an array |
||
| 978 | if($args && !is_array($args)) { |
||
| 979 | $args = array($args); |
||
| 980 | } |
||
| 981 | |||
| 983 | if(!$this->hasMethod($methodname)) { |
||
| 984 | return new IXR_Error(-32601, 'server error. requested method "' . $this->message->methodName . '" not specified.'); |
||
| 985 | } |
||
| 986 | $method = $this->callbacks[$methodname]; |
||
| 987 | $signature = $this->signatures[$methodname]; |
||
| 988 | $returnType = array_shift($signature); |
||
| 989 | // Check the number of arguments. Check only, if the minimum count of parameters is specified. More parameters are possible. |
||
| 990 | // This is a hack to allow optional parameters... |
||
| 991 | if(count($args) < count($signature)) { |
||
| 1042 | * @param string $method |
||
| 1043 | * @return array|IXR_Error |
||
| 1044 | */ |
||
| 1045 | function methodSignature($method) { |
||
| 1046 | if(!$this->hasMethod($method)) { |
||
| 1047 | return new IXR_Error(-32601, 'server error. requested method "' . $method . '" not specified.'); |
||
| 1048 | } |
||
| 1085 | * @param string $method |
||
| 1086 | * @return mixed |
||
| 1087 | */ |
||
| 1088 | function methodHelp($method) { |
||
| 1089 | return $this->help[$method]; |
||
| 1090 | } |
||
| 1091 | } |
||
| 1106 | * @param string|bool $path |
||
| 1107 | * @param int $port |
||
| 1108 | */ |
||
| 1109 | function __construct($server, $path = false, $port = 80) { |
||
| 1110 | parent::__construct($server, $path, $port); |
||
| 1111 | //$this->useragent = 'The Incutio XML-RPC PHP Library (multicall client)'; |
||
| 1112 | } |
||
| 1114 | /** |
||
| 1115 | * Add a call |
||
| 1116 | */ |
||
| 1117 | function addCall() { |
||
| 1118 | $args = func_get_args(); |
||
| 1119 | $methodName = array_shift($args); |
||
| 1120 | $struct = array( |
||
| 1127 | /** |
||
| 1128 | * @return bool |
||
| 1129 | */ |
||
| 1130 | function query() { |
||
| 1131 | // Prepare multicall, then call the parent::query() method |
||
| 1132 | return parent::query('system.multicall', $this->calls); |
||
| 1133 | } |
||
| 1134 | } |
||
| 1135 | |||
| 1136 |
Andreas Gohr
Christopher Smith
Gerrit Uitslag
Michael Große
Loading history...
Let’s assume that you have a directory layout like this:
. |-- OtherDir | |-- Bar.php | `-- Foo.php `-- SomeDir `-- Foo.phpand let’s assume the following content of
Bar.php:If both files
OtherDir/Foo.phpandSomeDir/Foo.phpare loaded in the same runtime, you will see a PHP error such as the following:PHP Fatal error: Cannot use SomeDir\Foo as Foo because the name is already in use in OtherDir/Foo.phpHowever, as
OtherDir/Foo.phpdoes not necessarily have to be loaded and the error is only triggered if it is loaded beforeOtherDir/Bar.php, this problem might go unnoticed for a while. In order to prevent this error from surfacing, you must import the namespace with a different alias: