This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php namespace Understand\UnderstandLumen; |
||
2 | |||
3 | use Understand\UnderstandLumen\TokenProvider; |
||
4 | use \Illuminate\Session\Store AS SessionStore; |
||
5 | use Illuminate\Http\Request; |
||
6 | |||
7 | class FieldProvider |
||
8 | { |
||
9 | |||
10 | /** |
||
11 | * The registered field providers. |
||
12 | * |
||
13 | * @var array |
||
14 | */ |
||
15 | protected $providers = []; |
||
16 | |||
17 | /** |
||
18 | * Default field |
||
19 | * |
||
20 | * @var array |
||
21 | */ |
||
22 | protected $defaultProviders = [ |
||
23 | 'getSessionId', |
||
24 | 'getUrl', |
||
25 | 'getRequestMethod', |
||
26 | 'getServerIp', |
||
27 | 'getClientIp', |
||
28 | 'getClientUserAgent', |
||
29 | 'getEnvironment', |
||
30 | 'getFromSession', |
||
31 | 'getProcessIdentifier', |
||
32 | 'getUserId' |
||
33 | ]; |
||
34 | |||
35 | /** |
||
36 | * Session store |
||
37 | * |
||
38 | * @var \Illuminate\Session\Store |
||
39 | */ |
||
40 | protected $session; |
||
41 | |||
42 | /** |
||
43 | * Server variable |
||
44 | * |
||
45 | * @var Request |
||
46 | */ |
||
47 | protected $request; |
||
48 | |||
49 | /** |
||
50 | * Token provider |
||
51 | * |
||
52 | * @var TokenProvider |
||
53 | */ |
||
54 | protected $tokenProvider; |
||
55 | |||
56 | /** |
||
57 | * Current environment |
||
58 | * |
||
59 | * @var string |
||
60 | */ |
||
61 | protected $environment; |
||
62 | |||
63 | /** |
||
64 | * Create field provider instance and set default providers to provider list |
||
65 | * |
||
66 | * @param type $app |
||
0 ignored issues
–
show
|
|||
67 | * @return void |
||
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
Adding a
@return annotation to constructors is generally not recommended as a constructor does not have a meaningful return value.
Adding a Please refer to the PHP core documentation on constructors. ![]() |
|||
68 | */ |
||
69 | public function __construct() |
||
70 | { |
||
71 | foreach ($this->defaultProviders as $defaultProviderName) |
||
72 | { |
||
73 | $this->extend($defaultProviderName, [$this, $defaultProviderName]); |
||
74 | } |
||
75 | } |
||
76 | |||
77 | /** |
||
78 | * Set session store |
||
79 | * |
||
80 | * @param type $service |
||
81 | */ |
||
82 | public function setSessionStore(SessionStore $service) |
||
83 | { |
||
84 | $this->session = $service; |
||
85 | } |
||
86 | |||
87 | /** |
||
88 | * Set request |
||
89 | * |
||
90 | * @param Request $request |
||
91 | */ |
||
92 | public function setRequest(Request $request) |
||
93 | { |
||
94 | $this->request = $request; |
||
95 | } |
||
96 | |||
97 | /** |
||
98 | * Set current environment |
||
99 | * |
||
100 | * @param string $environment |
||
101 | */ |
||
102 | public function setEnvironment($environment) |
||
103 | { |
||
104 | $this->environment = $environment; |
||
105 | } |
||
106 | |||
107 | /** |
||
108 | * Register a custom HTML macro. |
||
109 | * |
||
110 | * @param string $name |
||
111 | * @param mixed $provider |
||
112 | * @return void |
||
113 | */ |
||
114 | public function extend($name, $provider) |
||
115 | { |
||
116 | $this->providers[$name] = $provider; |
||
117 | } |
||
118 | |||
119 | /** |
||
120 | * Set token provider |
||
121 | * |
||
122 | * @param TokenProvider $tokenProvider |
||
123 | */ |
||
124 | public function setTokenProvider(TokenProvider $tokenProvider) |
||
125 | { |
||
126 | $this->tokenProvider = $tokenProvider; |
||
127 | } |
||
128 | |||
129 | /** |
||
130 | * Handle class calls |
||
131 | * |
||
132 | * @param string $name |
||
133 | * @param mixed $params |
||
134 | * @return mixed |
||
135 | * |
||
136 | * @throws \BadMethodCallException |
||
137 | */ |
||
138 | public function __call($name, $params) |
||
139 | { |
||
140 | if (isset($this->providers[$name])) |
||
141 | { |
||
142 | return call_user_func_array($this->providers[$name], $params); |
||
143 | } |
||
144 | |||
145 | throw new \BadMethodCallException("Method {$name} does not exist."); |
||
146 | } |
||
147 | |||
148 | /** |
||
149 | * Return hashed version of session id |
||
150 | * |
||
151 | * @return string |
||
152 | */ |
||
153 | protected function getSessionId() |
||
154 | { |
||
155 | if ( ! $this->session) |
||
156 | { |
||
157 | return null; |
||
158 | } |
||
159 | |||
160 | $sessionId = $this->session->getId(); |
||
161 | |||
162 | // by default we provide only hashed version of session id |
||
163 | $hashed = sha1($sessionId); |
||
164 | |||
165 | return $hashed; |
||
166 | } |
||
167 | |||
168 | /** |
||
169 | * Return current url |
||
170 | * |
||
171 | * @return string |
||
172 | */ |
||
173 | protected function getUrl() |
||
174 | { |
||
175 | $url = $this->request->path(); |
||
176 | |||
177 | if ( ! starts_with($url, '/')) |
||
178 | { |
||
179 | $url = '/' . $url; |
||
180 | } |
||
181 | |||
182 | $queryString = $this->request->getQueryString(); |
||
183 | |||
184 | if ($queryString) |
||
185 | { |
||
186 | $url .= '?' . $queryString; |
||
187 | } |
||
188 | |||
189 | return $url; |
||
190 | } |
||
191 | |||
192 | /** |
||
193 | * Return request method |
||
194 | * |
||
195 | * @return string |
||
196 | */ |
||
197 | protected function getRequestMethod() |
||
198 | { |
||
199 | return $this->request->method(); |
||
200 | } |
||
201 | |||
202 | /** |
||
203 | * Return server ip address |
||
204 | * |
||
205 | * @return string |
||
206 | */ |
||
207 | protected function getServerIp() |
||
208 | { |
||
209 | return $this->request->server->get('SERVER_ADDR'); |
||
210 | } |
||
211 | |||
212 | /** |
||
213 | * Return client ip |
||
214 | * |
||
215 | * @return string |
||
216 | */ |
||
217 | protected function getClientIp() |
||
218 | { |
||
219 | return $this->request->getClientIp(); |
||
220 | } |
||
221 | |||
222 | /** |
||
223 | * Return client user agent string |
||
224 | * |
||
225 | * @return string |
||
226 | */ |
||
227 | protected function getClientUserAgent() |
||
228 | { |
||
229 | return $this->request->server->get('HTTP_USER_AGENT'); |
||
230 | } |
||
231 | |||
232 | /** |
||
233 | * Return current enviroment |
||
234 | * |
||
235 | * @return string |
||
236 | */ |
||
237 | protected function getEnvironment() |
||
238 | { |
||
239 | return $this->environment; |
||
240 | } |
||
241 | |||
242 | /** |
||
243 | * Retrive parameter from current session |
||
244 | * |
||
245 | * @param string $key |
||
246 | * @return string |
||
247 | */ |
||
248 | protected function getFromSession($key) |
||
249 | { |
||
250 | if ( ! $this->session) |
||
251 | { |
||
252 | return null; |
||
253 | } |
||
254 | |||
255 | return $this->session->get($key); |
||
256 | } |
||
257 | |||
258 | /** |
||
259 | * Return current active user id |
||
260 | * |
||
261 | * @return int |
||
262 | */ |
||
263 | protected function getUserId() |
||
264 | { |
||
265 | try |
||
266 | { |
||
267 | if (class_exists('\Auth') && ($userId = \Auth::id())) |
||
268 | { |
||
269 | return $userId; |
||
270 | } |
||
271 | } |
||
272 | catch (\Exception $e) |
||
0 ignored issues
–
show
Coding Style
Comprehensibility
introduced
by
|
|||
273 | {} |
||
274 | try |
||
275 | { |
||
276 | if (class_exists('\Sentinel') && ($user = \Sentinel::getUser())) |
||
277 | { |
||
278 | return $user->id; |
||
279 | } |
||
280 | } |
||
281 | catch (\Exception $e) |
||
0 ignored issues
–
show
Coding Style
Comprehensibility
introduced
by
|
|||
282 | {} |
||
283 | |||
284 | try |
||
285 | { |
||
286 | if (class_exists('\Sentry') && ($user = \Sentry::getUser())) |
||
287 | { |
||
288 | return $user->id; |
||
289 | } |
||
290 | } |
||
291 | catch (\Exception $e) |
||
0 ignored issues
–
show
Coding Style
Comprehensibility
introduced
by
|
|||
292 | {} |
||
293 | } |
||
294 | |||
295 | /** |
||
296 | * Return process identifier token |
||
297 | * |
||
298 | * @return string |
||
299 | */ |
||
300 | protected function getProcessIdentifier() |
||
301 | { |
||
302 | return $this->tokenProvider->getToken(); |
||
303 | } |
||
304 | } |
This check looks for PHPDoc comments describing methods or function parameters that do not exist on the corresponding method or function.
Consider the following example. The parameter
$italy
is not defined by the methodfinale(...)
.The most likely cause is that the parameter was removed, but the annotation was not.