Issues in RewriteUrlEvent.php (master) - Issues in master - thelia-modules/RewriteUrl - Measure and Improve Code Quality continuously with Scrutinizer

Issues (7)

Security Analysis no request data

Cross-Site Scripting

Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.

File Exposure

File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.

File Manipulation

File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.

Object Injection

Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.

Code Injection

Code Injection enables an attacker to execute arbitrary code on the server.

Response Splitting

Response Splitting can be used to send arbitrary responses.

File Inclusion

File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.

Command Injection

Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.

SQL Injection

SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.

XPath Injection

XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.

LDAP Injection

LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.

Header Injection

Other Vulnerability

This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.

Regex Injection

Regex Injection enables an attacker to execute arbitrary code in your PHP process.

XML Injection

XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.

Variable Injection

Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.

Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.

Event/RewriteUrlEvent.php (1 issue)

Labels

Bug 1

Severity

Minor 1

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

<?php
/*************************************************************************************/
/*      This file is part of the RewriteUrl module for Thelia.                       */
/*                                                                                   */
/*      Copyright (c) OpenStudio                                                     */
/*      email : [email protected]                                                       */
/*      web : http://www.thelia.net                                                  */
/*                                                                                   */
/*      For the full copyright and license information, please view the LICENSE.txt  */
/*      file that was distributed with this source code.                             */
/*************************************************************************************/

namespace RewriteUrl\Event;

use RewriteUrl\Model\RewritingRedirectType;
use Thelia\Core\Event\ActionEvent;
use Thelia\Model\RewritingUrl;

/**
 * Class RewriteUrlEvent
 * @package RewriteUrl\Event
 * @author Vincent Lopes <[email protected]>
 * @author Gilles Bourgeat <[email protected]>
 */
class RewriteUrlEvent extends ActionEvent
{
    /** @var int|null */
    protected $id;

    /** @var string */
    protected $url;

    /** @var string */
    protected $view;

    /** @var string */
    protected $viewLocale;

    /** @var int|null */
    protected $redirected;

    /** @var RewritingUrl */
    private $rewritingUrl;

    /** @var RewritingRedirectType */
    private $redirectType;

    /**
     * @param RewritingUrl $rewritingUrl
     * @param RewritingRedirectType $redirectType
     */
    public function __construct(RewritingUrl $rewritingUrl, RewritingRedirectType $redirectType = null)
    {
        $this->id = $rewritingUrl->getId();
        $this->url = $rewritingUrl->getUrl();
        $this->view = $rewritingUrl->getView();
        $this->viewLocale = $rewritingUrl->getViewLocale();
        $this->redirected = $rewritingUrl->getRedirected();
        $this->rewritingUrl = $rewritingUrl;
        $this->redirectType = $redirectType;
    }

    /**
     * @return RewritingUrl
     */
    public function getRewritingUrl()
    {
        return $this->rewritingUrl;
    }

    /**
     * @return RewritingRedirectType
     */
    public function getRedirectType()
    {
        return $this->redirectType;
    }

    /**
     * @param int $id|null
/**
 * @param array $germany
 * @param array $island
 * @param array $italy
 */
function finale($germany, $island) {
    return "2:1";
}
     * @return $this
     */
    public function setId($id)
    {
        $this->id = $id;

        return $this;
    }

    /**
     * @return int
     */
    public function getId()
    {
        return $this->id;
    }

    /**
     * @param array $parameters
     * @return $this
     */
    public function setParameters(array $parameters)
    {
        $this->parameters = $parameters;

        return $this;
    }

    /**
     * @return array
     */
    public function getParameters()
    {
        return $this->parameters;
    }

    /**
     * @param boolean $propagationStopped
     * @return $this
     */
    public function setPropagationStopped($propagationStopped)
    {
        $this->propagationStopped = boolval($propagationStopped);

        return $this;
    }

    /**
     * @return boolean
     */
    public function getPropagationStopped()
    {
        return $this->propagationStopped;
    }

    /**
     * @param null|int $redirected
     * @return $this
     */
    public function setRedirected($redirected)
    {
        $this->redirected = $redirected;

        return $this;
    }

    /**
     * @return null|int
     */
    public function getRedirected()
    {
        return $this->redirected;
    }

    /**
     * @param string $url
     * @return $this
     */
    public function setUrl($url)
    {
        $this->url = $url;

        return $this;
    }

    /**
     * @return null|int
     */
    public function getUrl()
    {
        return $this->url;
    }

    /**
     * @param $view
     * @return $this
     */
    public function setView($view)
    {
        $this->view = $view;

        return $this;
    }

    /**
     * @return null
     */
    public function getView()
    {
        return $this->view;
    }

    /**
     * @param string $view_locale
     * @return $this
     */
    public function setViewLocale($view_locale)
    {
        $this->viewLocale = $view_locale;

        return $this;
    }

    /**
     * @return null
     */
    public function getViewLocale()
    {
        return $this->viewLocale;
    }
}


1			<?php
2			/*************************************************************************************/
3			/* This file is part of the RewriteUrl module for Thelia. */
4			/* */
5			/* Copyright (c) OpenStudio */
6			/* email : [email protected] */
7			/* web : http://www.thelia.net */
8			/* */
9			/* For the full copyright and license information, please view the LICENSE.txt */
10			/* file that was distributed with this source code. */
11			/*************************************************************************************/
12
13			namespace RewriteUrl\Event;
14
15			use RewriteUrl\Model\RewritingRedirectType;
16			use Thelia\Core\Event\ActionEvent;
17			use Thelia\Model\RewritingUrl;
18
19			/**
20			* Class RewriteUrlEvent
21			* @package RewriteUrl\Event
22			* @author Vincent Lopes <[email protected]>
23			* @author Gilles Bourgeat <[email protected]>
24			*/
25			class RewriteUrlEvent extends ActionEvent
26			{
27			/** @var int\|null */
28			protected $id;
29
30			/** @var string */
31			protected $url;
32
33			/** @var string */
34			protected $view;
35
36			/** @var string */
37			protected $viewLocale;
38
39			/** @var int\|null */
40			protected $redirected;
41
42			/** @var RewritingUrl */
43			private $rewritingUrl;
44
45			/** @var RewritingRedirectType */
46			private $redirectType;
47
48			/**
49			* @param RewritingUrl $rewritingUrl
50			* @param RewritingRedirectType $redirectType
51			*/
52			public function __construct(RewritingUrl $rewritingUrl, RewritingRedirectType $redirectType = null)
53			{
54			$this->id = $rewritingUrl->getId();
55			$this->url = $rewritingUrl->getUrl();
56			$this->view = $rewritingUrl->getView();
57			$this->viewLocale = $rewritingUrl->getViewLocale();
58			$this->redirected = $rewritingUrl->getRedirected();
59			$this->rewritingUrl = $rewritingUrl;
60			$this->redirectType = $redirectType;
61			}
62
63			/**
64			* @return RewritingUrl
65			*/
66			public function getRewritingUrl()
67			{
68			return $this->rewritingUrl;
69			}
70
71			/**
72			* @return RewritingRedirectType
73			*/
74			public function getRedirectType()
75			{
76			return $this->redirectType;
77			}
78
79			/**
80			* @param int $id\|null
			0 ignored issues – show Bug introduced 2016-01-18 10:11 UTC by Report Bug Copy Issue Report Show Similar Issues like this There is no parameter named `$id\|null`. Was it maybe removed? This check looks for PHPDoc comments describing methods or function parameters that do not exist on the corresponding method or function. Consider the following example. The parameter `$italy` is not defined by the method `finale(...)`. /** * @param array $germany * @param array $island * @param array $italy */ function finale($germany, $island) { return "2:1"; } The most likely cause is that the parameter was removed, but the annotation was not. Loading history...
81			* @return $this
82			*/
83			public function setId($id)
84			{
85			$this->id = $id;
86
87			return $this;
88			}
89
90			/**
91			* @return int
92			*/
93			public function getId()
94			{
95			return $this->id;
96			}
97
98			/**
99			* @param array $parameters
100			* @return $this
101			*/
102			public function setParameters(array $parameters)
103			{
104			$this->parameters = $parameters;
105
106			return $this;
107			}
108
109			/**
110			* @return array
111			*/
112			public function getParameters()
113			{
114			return $this->parameters;
115			}
116
117			/**
118			* @param boolean $propagationStopped
119			* @return $this
120			*/
121			public function setPropagationStopped($propagationStopped)
122			{
123			$this->propagationStopped = boolval($propagationStopped);
124
125			return $this;
126			}
127
128			/**
129			* @return boolean
130			*/
131			public function getPropagationStopped()
132			{
133			return $this->propagationStopped;
134			}
135
136			/**
137			* @param null\|int $redirected
138			* @return $this
139			*/
140			public function setRedirected($redirected)
141			{
142			$this->redirected = $redirected;
143
144			return $this;
145			}
146
147			/**
148			* @return null\|int
149			*/
150			public function getRedirected()
151			{
152			return $this->redirected;
153			}
154
155			/**
156			* @param string $url
157			* @return $this
158			*/
159			public function setUrl($url)
160			{
161			$this->url = $url;
162
163			return $this;
164			}
165
166			/**
167			* @return null\|int
168			*/
169			public function getUrl()
170			{
171			return $this->url;
172			}
173
174			/**
175			* @param $view
176			* @return $this
177			*/
178			public function setView($view)
179			{
180			$this->view = $view;
181
182			return $this;
183			}
184
185			/**
186			* @return null
187			*/
188			public function getView()
189			{
190			return $this->view;
191			}
192
193			/**
194			* @param string $view_locale
195			* @return $this
196			*/
197			public function setViewLocale($view_locale)
198			{
199			$this->viewLocale = $view_locale;
200
201			return $this;
202			}
203
204			/**
205			* @return null
206			*/
207			public function getViewLocale()
208			{
209			return $this->viewLocale;
210			}
211			}
212

thelia-modules / RewriteUrl

Issues (7)

Security Analysis no request data

Event/RewriteUrlEvent.php (1 issue)

Labels

Severity

Introduced By

Upgrade to new PHP Analysis Engine

Duplication Side-by-Side

Filter issues like