tburry /
pquery
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
|
Coding Style
introduced
by
|
|||
| 2 | /** |
||
| 3 | * @author Niels A.D. |
||
| 4 | * @author Todd Burry <[email protected]> |
||
| 122 | * @see TokenizerBase::$identifiers |
||
| 123 | * @access private |
||
| 124 | */ |
||
| 125 | var $identifiers = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890_-?'; |
||
| 126 | |||
| 127 | /** |
||
| 128 | * Map characters to match their tokens |
||
| 129 | * @see TokenizerBase::$custom_char_map |
||
| 130 | * @access private |
||
| 131 | */ |
||
| 132 | var $custom_char_map = array( |
||
| 133 | '.' => self::TOK_CLASS, |
||
| 134 | '#' => self::TOK_ID, |
||
| 135 | ',' => self::TOK_COMMA, |
||
| 162 | * @return int |
||
| 163 | */ |
||
| 164 | protected function parse_gt() {
|
||
| 165 | if ((($this->pos + 1) < $this->size) && ($this->doc[$this->pos + 1] === '=')) {
|
||
| 166 | ++$this->pos; |
||
| 167 | return ($this->token = self::TOK_COMPARE_BIGGER_THAN); |
||
| 168 | } else {
|
||
| 169 | return ($this->token = self::TOK_CHILD); |
||
| 170 | } |
||
| 171 | } |
||
| 172 | |||
| 176 | * @return int |
||
| 177 | */ |
||
| 178 | protected function parse_sibling() {
|
||
| 179 | if ((($this->pos + 1) < $this->size) && ($this->doc[$this->pos + 1] === '=')) {
|
||
| 180 | ++$this->pos; |
||
| 181 | return ($this->token = self::TOK_COMPARE_CONTAINS_WORD); |
||
| 182 | } else {
|
||
| 183 | return ($this->token = self::TOK_SIBLING); |
||
| 184 | } |
||
| 185 | } |
||
| 186 | |||
| 190 | * @return int |
||
| 191 | */ |
||
| 192 | 1 | protected function parse_pipe() {
|
|
| 193 | 1 | if ((($this->pos + 1) < $this->size) && ($this->doc[$this->pos + 1] === '=')) {
|
|
| 194 | 1 | ++$this->pos; |
|
| 195 | 1 | return ($this->token = self::TOK_COMPARE_PREFIX); |
|
| 196 | } else {
|
||
| 197 | return ($this->token = self::TOK_PIPE); |
||
| 198 | } |
||
| 199 | } |
||
| 200 | |||
| 204 | * @return int |
||
| 205 | */ |
||
| 206 | 2 | protected function parse_star() {
|
|
| 207 | 2 | if ((($this->pos + 1) < $this->size) && ($this->doc[$this->pos + 1] === '=')) {
|
|
| 208 | ++$this->pos; |
||
| 209 | return ($this->token = self::TOK_COMPARE_CONTAINS); |
||
| 210 | } else {
|
||
| 211 | 2 | return ($this->token = self::TOK_ALL); |
|
| 212 | } |
||
| 213 | } |
||
| 214 | |||
| 218 | * @return int |
||
| 219 | */ |
||
| 220 | protected function parse_not() {
|
||
| 221 | if ((($this->pos + 1) < $this->size) && ($this->doc[$this->pos + 1] === '=')) {
|
||
| 222 | ++$this->pos; |
||
| 223 | return ($this->token = self::TOK_COMPARE_NOT_EQUAL); |
||
| 224 | } else {
|
||
| 225 | return ($this->token = self::TOK_NOT); |
||
| 226 | } |
||
| 227 | } |
||
| 228 | |||
| 231 | * @return int |
||
| 232 | */ |
||
| 233 | protected function parse_compare() {
|
||
| 234 | if ((($this->pos + 1) < $this->size) && ($this->doc[$this->pos + 1] === '=')) {
|
||
| 235 | switch($this->doc[$this->pos++]) {
|
||
| 236 | case '$': |
||
| 237 | return ($this->token = self::TOK_COMPARE_ENDS); |
||
| 238 | case '%': |
||
| 239 | return ($this->token = self::TOK_COMPARE_REGEX); |
||
| 240 | case '^': |
||
| 241 | return ($this->token = self::TOK_COMPARE_STARTS); |
||
| 242 | case '<': |
||
| 243 | return ($this->token = self::TOK_COMPARE_SMALLER_THAN); |
||
| 244 | } |
||
| 245 | } |
||
| 246 | return false; |
||
| 251 | * @return int |
||
| 252 | */ |
||
| 253 | 5 | protected function parse_string() {
|
|
| 254 | 5 | $char = $this->doc[$this->pos]; |
|
| 255 | |||
| 256 | 5 | while (true) {
|
|
| 257 | 5 | if ($this->next_search($char.'\\', false) !== self::TOK_NULL) {
|
|
| 258 | 5 | if($this->doc[$this->pos] === $char) {
|
|
| 259 | 5 | break; |
|
| 260 | } else {
|
||
| 261 | ++$this->pos; |
||
| 262 | } |
||
| 263 | } else {
|
||
| 264 | $this->pos = $this->size - 1; |
||
| 265 | break; |
||
| 266 | } |
||
| 267 | } |
||
| 268 | |||
| 269 | 5 | return ($this->token = self::TOK_STRING); |
|
| 270 | } |
||
| 271 | |||
| 272 | } |
||
| 274 | /** |
||
| 275 | * Performs a css select query on HTML nodes |
||
| 276 | */ |
||
| 277 | class HtmlSelector {
|
||
| 278 | |||
| 279 | /** |
||
| 280 | * Parser object |
||
| 281 | * @internal If string, then it will create a new instance as parser |
||
| 282 | * @var CSSQueryTokenizer |
||
| 283 | */ |
||
| 284 | var $parser = 'pQuery\\CSSQueryTokenizer'; |
||
| 285 | |||
| 286 | /** |
||
| 287 | * Target of queries |
||
| 288 | * @var DomNode |
||
| 289 | */ |
||
| 290 | var $root = null; |
||
| 291 | |||
| 292 | /** |
||
| 293 | * Last performed query, result in {@link $result}
|
||
| 294 | * @var string |
||
| 295 | */ |
||
| 296 | var $query = ''; |
||
| 297 | |||
| 298 | /** |
||
| 299 | * Array of matching nodes |
||
| 300 | * @var array |
||
| 301 | */ |
||
| 302 | var $result = array(); |
||
| 303 | |||
| 304 | /** |
||
| 305 | * Include root in search, if false the only child nodes are evaluated |
||
| 306 | * @var bool |
||
| 307 | */ |
||
| 308 | var $search_root = false; |
||
| 309 | |||
| 310 | /** |
||
| 311 | * Search recursively |
||
| 312 | * @var bool |
||
| 313 | */ |
||
| 314 | var $search_recursive = true; |
||
| 315 | |||
| 316 | /** |
||
| 317 | * Extra function map for custom filters |
||
| 320 | * selector to call $this->filter_root at :root |
||
| 321 | * @see DomNode::$filter_map |
||
| 322 | */ |
||
| 323 | var $custom_filter_map = array(); |
||
| 324 | |||
| 325 | /** |
||
| 326 | * Class constructor |
||
| 330 | * @param bool $search_recursive {@link $search_recursive}
|
||
| 331 | * @param CSSQueryTokenizer $parser If null, then default class will be used |
||
| 332 | */ |
||
| 333 | 37 | function __construct($root, $query = '*', $search_root = false, $search_recursive = true, $parser = null) {
|
|
| 334 | 37 | if ($parser === null) {
|
|
| 335 | 37 | $parser = new $this->parser(); |
|
| 336 | 37 | } |
|
| 344 | 37 | } |
|
| 345 | |||
| 346 | #php4 PHP4 class constructor compatibility |
||
| 347 | #function HtmlSelector($root, $query = '*', $search_root = false, $search_recursive = true, $parser = null) {return $this->__construct($root, $query, $search_root, $search_recursive, $parser);}
|
||
| 348 | #php4e |
||
| 349 | |||
| 350 | /** |
||
| 352 | * @return string |
||
| 353 | * @access private |
||
| 354 | */ |
||
| 355 | function __toString() {
|
||
| 356 | return $this->query; |
||
| 357 | } |
||
| 358 | |||
| 361 | * @return array |
||
| 362 | * @access private |
||
| 363 | */ |
||
| 364 | function __invoke($query = '*') {
|
||
| 365 | return $this->select($query); |
||
| 366 | } |
||
| 367 | |||
| 370 | * @param string $query |
||
| 371 | * @return array False on failure |
||
| 372 | */ |
||
| 373 | 37 | function select($query = '*') {
|
|
| 374 | 37 | $this->parser->setDoc($query); |
|
| 375 | 37 | $this->query = $query; |
|
| 376 | 37 | return (($this->parse()) ? $this->result : false); |
|
| 400 | */ |
||
| 401 | 36 | protected function parse_getIdentifier($do_error = true) {
|
|
| 402 | 36 | $p =& $this->parser; |
|
| 403 | 36 | $tok = $p->token; |
|
| 404 | |||
| 405 | 36 | if ($tok === CSSQueryTokenizer::TOK_IDENTIFIER) {
|
|
| 406 | 36 | return $p->getTokenString(); |
|
| 420 | */ |
||
| 421 | 37 | protected function parse_conditions() {
|
|
| 422 | 37 | $p =& $this->parser; |
|
| 423 | 37 | $tok = $p->token; |
|
| 424 | |||
| 425 | 37 | if ($tok === CSSQueryTokenizer::TOK_NULL) {
|
|
| 426 | $this->error('Invalid search pattern(1): Empty string!');
|
||
| 484 | if ($tok === CSSQueryTokenizer::TOK_ALL) {
|
||
| 485 | $tok = $p->next(); |
||
| 486 | if ($tok === CSSQueryTokenizer::TOK_PIPE) {
|
||
| 487 | $this->next(); |
||
| 488 | $compare = 'name'; |
||
| 489 | if (($tag = $this->parse_getIdentifier()) === false) {
|
||
| 490 | return false; |
||
| 523 | } |
||
| 524 | |||
| 525 | $conditions['tags'][] = array( |
||
| 526 | 'tag' => $tag, |
||
| 527 | 'match' => $match, |
||
| 528 | 'operator' => $last_mode, |
||
| 529 | 'compare' => $compare |
||
| 638 | 6 | if ($tok === CSSQueryTokenizer::TOK_ALL) {
|
|
| 639 | $tok = $p->next(); |
||
| 640 | if ($tok === CSSQueryTokenizer::TOK_PIPE) {
|
||
| 641 | $tok = $p->next(); |
||
| 642 | if (($attribute = $this->parse_getIdentifier()) === false) {
|
||
| 643 | return false; |
||
| 644 | } |
||
| 649 | return false; |
||
| 650 | } |
||
| 651 | 6 | } elseif ($tok === CSSQueryTokenizer::TOK_PIPE) {
|
|
| 652 | $tok = $p->next(); |
||
| 653 | if (($tag = $this->parse_getIdentifier()) === false) {
|
||
| 654 | return false; |
||
| 655 | } |
||
| 657 | 6 | } elseif (($attribute = $this->parse_getIdentifier()) !== false) {
|
|
| 658 | 6 | $tok = $p->next(); |
|
| 659 | 6 | if ($tok === CSSQueryTokenizer::TOK_PIPE) {
|
|
| 660 | $tok = $p->next(); |
||
| 661 | |||
| 662 | if (($attribute_name = $this->parse_getIdentifier()) !== false) {
|
||
| 663 | $attribute = $attribute.':'.$attribute_name; |
||
| 700 | |||
| 701 | 6 | if ($operator_value && $val) {
|
|
| 702 | 6 | $conditions['attributes'][] = array( |
|
| 703 | 6 | 'attribute' => $attribute, |
|
| 704 | 6 | 'operator_value' => $operator_value, |
|
| 705 | 6 | 'value' => $val, |
|
| 706 | 6 | 'match' => $match, |
|
| 747 | 2 | )); |
|
| 748 | 2 | } |
|
| 749 | |||
| 750 | 3 | $tok = $p->next(); |
|
| 751 | 3 | if (($filter = $this->parse_getIdentifier()) === false) {
|
|
| 752 | return false; |
||
| 753 | } |
||
| 754 | |||
| 755 | 3 | if (($tok = $p->next()) === CSSQueryTokenizer::TOK_BRACE_OPEN) {
|
|
| 756 | $start = $p->pos; |
||
| 757 | $count = 1; |
||
| 758 | while ((($tok = $p->next()) !== CSSQueryTokenizer::TOK_NULL) && !(($tok === CSSQueryTokenizer::TOK_BRACE_CLOSE) && (--$count === 0))) {
|
||
| 759 | if ($tok === CSSQueryTokenizer::TOK_BRACE_OPEN) {
|
||
| 766 | $this->error('Expected closing brace at pos %pos%!');
|
||
| 767 | return false; |
||
| 768 | } |
||
| 769 | $len = $p->pos - 1 - $start; |
||
| 770 | $params = (($len > 0) ? substr($p->doc, $start + 1, $len) : ''); |
||
| 771 | $tok = $p->next(); |
||
| 772 | } else {
|
||
| 773 | 3 | $params = ''; |
|
| 898 | } |
||
| 899 | |||
| 900 | 37 | while (count($this->result) > 0) {
|
|
| 901 | 37 | switch($p->token) {
|
|
| 902 | 37 | case CSSQueryTokenizer::TOK_CHILD: |
|
| 903 | $this->parser->next_no_whitespace(); |
||
| 904 | if (!$this->parse_result(false, 1)) {
|
||
| 946 | } |
||
| 947 | } |
||
| 948 | |||
| 949 | ?> |
||
| 950 |
Todd Burry
Loading history...