This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | namespace Uecode\Bundle\QPushBundle\Provider; |
||
3 | |||
4 | use Doctrine\Common\Cache\Cache; |
||
5 | use Monolog\Logger; |
||
6 | use Symfony\Component\Filesystem\Filesystem; |
||
7 | use Symfony\Component\Finder\Finder; |
||
8 | use Symfony\Component\Finder\SplFileInfo; |
||
9 | use Uecode\Bundle\QPushBundle\Event\MessageEvent; |
||
10 | use Uecode\Bundle\QPushBundle\Message\Message; |
||
11 | |||
12 | class FileProvider extends AbstractProvider |
||
13 | { |
||
14 | protected $filePointerList = []; |
||
15 | protected $queuePath; |
||
16 | |||
17 | 10 | public function __construct($name, array $options, $client, Cache $cache, Logger $logger) { |
|
18 | 10 | $this->name = $name; |
|
19 | /* md5 only contain numeric and A to F, so it is file system safe */ |
||
20 | 10 | $this->queuePath = $options['path'].DIRECTORY_SEPARATOR.str_replace('-', '', hash('md5', $name)); |
|
21 | 10 | $this->options = $options; |
|
22 | 10 | $this->cache = $cache; |
|
23 | 10 | $this->logger = $logger; |
|
24 | 10 | } |
|
25 | |||
26 | 1 | public function getProvider() |
|
27 | { |
||
28 | 1 | return 'File'; |
|
29 | } |
||
30 | |||
31 | 8 | public function create() |
|
32 | { |
||
33 | 8 | $fs = new Filesystem(); |
|
34 | 8 | if (!$fs->exists($this->queuePath)) { |
|
35 | 8 | $fs->mkdir($this->queuePath); |
|
36 | 8 | return $fs->exists($this->queuePath); |
|
37 | } |
||
38 | return true; |
||
39 | } |
||
40 | |||
41 | 5 | public function publish(array $message, array $options = []) |
|
42 | { |
||
43 | 5 | $fileName = microtime(false); |
|
44 | 5 | $fileName = str_replace(' ', '', $fileName); |
|
45 | 5 | $path = substr(hash('md5', $fileName), 0, 3); |
|
46 | |||
47 | 5 | $fs = new Filesystem(); |
|
48 | 5 | if (!$fs->exists($this->queuePath.DIRECTORY_SEPARATOR.$path)) { |
|
49 | 5 | $fs->mkdir($this->queuePath.DIRECTORY_SEPARATOR.$path); |
|
50 | } |
||
51 | |||
52 | 5 | $fs->dumpFile( |
|
53 | 5 | $this->queuePath.DIRECTORY_SEPARATOR.$path.DIRECTORY_SEPARATOR.$fileName.'.json', |
|
54 | 5 | json_encode($message) |
|
55 | ); |
||
56 | 5 | return $fileName; |
|
57 | } |
||
58 | |||
59 | /** |
||
60 | * @param array $options |
||
61 | * @return Message[] |
||
62 | */ |
||
63 | 6 | public function receive(array $options = []) |
|
64 | { |
||
65 | 6 | $finder = new Finder(); |
|
66 | $finder |
||
67 | 6 | ->files() |
|
68 | 6 | ->ignoreDotFiles(true) |
|
69 | 6 | ->ignoreUnreadableDirs(true) |
|
70 | 6 | ->ignoreVCS(true) |
|
71 | 6 | ->name('*.json') |
|
72 | 6 | ->in($this->queuePath) |
|
73 | ; |
||
74 | 6 | if ($this->options['message_delay'] > 0) { |
|
75 | 1 | $finder->date( |
|
76 | 1 | sprintf('< %d seconds ago', $this->options['message_delay']) |
|
77 | ); |
||
78 | } |
||
79 | $finder |
||
80 | 6 | ->date( |
|
81 | 6 | sprintf('> %d seconds ago', $this->options['message_expiration']) |
|
82 | ) |
||
83 | ; |
||
84 | 6 | $messages = []; |
|
85 | /** @var SplFileInfo $file */ |
||
86 | 6 | foreach ($finder as $file) { |
|
87 | 4 | $filePointer = fopen($file->getRealPath(), 'r+'); |
|
88 | 4 | $id = substr($file->getFilename(), 0, -5); |
|
89 | 4 | if (!isset($this->filePointerList[$id]) && flock($filePointer, LOCK_EX | LOCK_NB)) { |
|
90 | 4 | $this->filePointerList[$id] = $filePointer; |
|
91 | 4 | $messages[] = new Message($id, json_decode($file->getContents(), true), []); |
|
92 | } else { |
||
93 | 1 | fclose($filePointer); |
|
94 | } |
||
95 | 4 | if (count($messages) === (int) $this->options['messages_to_receive']) { |
|
96 | 4 | break; |
|
97 | } |
||
98 | } |
||
99 | 6 | return $messages; |
|
100 | } |
||
101 | |||
102 | 2 | public function delete($id) |
|
103 | { |
||
104 | 2 | $success = false; |
|
105 | 2 | if (isset($this->filePointerList[$id])) { |
|
106 | 2 | $fileName = $id; |
|
107 | 2 | $path = substr(hash('md5', (string)$fileName), 0, 3); |
|
108 | 2 | $fs = new Filesystem(); |
|
109 | 2 | $fs->remove( |
|
110 | 2 | $this->queuePath . DIRECTORY_SEPARATOR . $path . DIRECTORY_SEPARATOR . $fileName . '.json' |
|
111 | ); |
||
112 | 2 | fclose($this->filePointerList[$id]); |
|
113 | 2 | unset($this->filePointerList[$id]); |
|
114 | 2 | $success = true; |
|
115 | } |
||
116 | 2 | if (rand(1,10) === 5) { |
|
117 | $this->cleanUp(); |
||
118 | } |
||
119 | 2 | return $success; |
|
120 | } |
||
121 | |||
122 | 2 | public function cleanUp() |
|
123 | { |
||
124 | 2 | $finder = new Finder(); |
|
125 | $finder |
||
126 | 2 | ->files() |
|
127 | 2 | ->in($this->queuePath) |
|
128 | 2 | ->ignoreDotFiles(true) |
|
129 | 2 | ->ignoreUnreadableDirs(true) |
|
130 | 2 | ->ignoreVCS(true) |
|
131 | 2 | ->depth('< 2') |
|
132 | 2 | ->name('*.json') |
|
133 | ; |
||
134 | 2 | $finder->date( |
|
135 | 2 | sprintf('< %d seconds ago', $this->options['message_expiration']) |
|
136 | ); |
||
137 | /** @var SplFileInfo $file */ |
||
138 | 2 | foreach ($finder as $file) { |
|
139 | 2 | @unlink($file->getRealPath()); |
|
0 ignored issues
–
show
|
|||
140 | } |
||
141 | 2 | } |
|
142 | |||
143 | 1 | public function destroy() |
|
144 | { |
||
145 | 1 | $fs = new Filesystem(); |
|
146 | 1 | $fs->remove($this->queuePath); |
|
147 | 1 | $this->filePointerList = []; |
|
148 | 1 | return !is_dir($this->queuePath); |
|
149 | } |
||
150 | |||
151 | /** |
||
152 | * Removes the message from queue after all other listeners have fired |
||
153 | * |
||
154 | * If an earlier listener has erred or stopped propagation, this method |
||
155 | * will not fire and the Queued Message should become visible in queue again. |
||
156 | * |
||
157 | * Stops Event Propagation after removing the Message |
||
158 | * |
||
159 | * @param MessageEvent $event The SQS Message Event |
||
160 | * @return bool|void |
||
161 | */ |
||
162 | 1 | public function onMessageReceived(MessageEvent $event) |
|
163 | { |
||
164 | 1 | $id = $event->getMessage()->getId(); |
|
165 | 1 | $this->delete($id); |
|
166 | 1 | $event->stopPropagation(); |
|
167 | 1 | } |
|
168 | } |
||
169 |
If you suppress an error, we recommend checking for the error condition explicitly: