vistart /
yii2-models
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | /** |
||
| 4 | * _ __ __ _____ _____ ___ ____ _____ |
||
| 5 | * | | / // // ___//_ _// || __||_ _| |
||
| 6 | * | |/ // /(__ ) / / / /| || | | | |
||
| 7 | * |___//_//____/ /_/ /_/ |_||_| |_| |
||
| 8 | * @link https://vistart.name/ |
||
| 9 | * @copyright Copyright (c) 2016 vistart |
||
| 10 | * @license https://vistart.name/license/ |
||
| 11 | */ |
||
| 12 | |||
| 13 | namespace vistart\Models\traits; |
||
| 14 | |||
| 15 | use Yii; |
||
| 16 | use yii\base\ModelEvent; |
||
| 17 | use yii\db\Exception; |
||
| 18 | use yii\db\IntegrityException; |
||
| 19 | use yii\rbac\BaseManager; |
||
| 20 | use yii\rbac\Role; |
||
| 21 | |||
| 22 | /** |
||
| 23 | * User features concerning registration. |
||
| 24 | * |
||
| 25 | * @property array $sourceRules rules associated with source attribute. |
||
| 26 | * @version 2.0 |
||
| 27 | * @author vistart <[email protected]> |
||
| 28 | */ |
||
| 29 | trait RegistrationTrait |
||
| 30 | { |
||
| 31 | |||
| 32 | /** |
||
| 33 | * @event Event an event that is triggered after user is registered successfully. |
||
| 34 | */ |
||
| 35 | public static $eventAfterRegister = "afterRegister"; |
||
| 36 | |||
| 37 | /** |
||
| 38 | * @event Event an event that is triggered before registration. |
||
| 39 | */ |
||
| 40 | public static $eventBeforeRegister = "beforeRegister"; |
||
| 41 | |||
| 42 | /** |
||
| 43 | * @event Event an event that is triggered when registration failed. |
||
| 44 | */ |
||
| 45 | public static $eventRegisterFailed = "registerFailed"; |
||
| 46 | |||
| 47 | /** |
||
| 48 | * @event Event an event that is triggered after user is deregistered successfully. |
||
| 49 | */ |
||
| 50 | public static $eventAfterDeregister = "afterDeregister"; |
||
| 51 | |||
| 52 | /** |
||
| 53 | * @event Event an event that is triggered before deregistration. |
||
| 54 | */ |
||
| 55 | public static $eventBeforeDeregister = "beforeDeregister"; |
||
| 56 | |||
| 57 | /** |
||
| 58 | * @event Event an event that is triggered when deregistration failed. |
||
| 59 | */ |
||
| 60 | public static $eventDeregisterFailed = "deregisterFailed"; |
||
| 61 | |||
| 62 | /** |
||
| 63 | * @var string name of attribute which store the source. if you don't want to |
||
| 64 | * record source, please assign false. |
||
| 65 | */ |
||
| 66 | public $sourceAttribute = 'source'; |
||
| 67 | private $_sourceRules = []; |
||
| 68 | public static $sourceSelf = '0'; |
||
| 69 | |||
| 70 | /** |
||
| 71 | * @var string auth manager component id. |
||
| 72 | */ |
||
| 73 | public $authManagerId = 'authManager'; |
||
| 74 | |||
| 75 | /** |
||
| 76 | * Get auth manager. If auth manager not configured, Yii::$app->authManager |
||
| 77 | * will be given. |
||
| 78 | * @return BaseManager |
||
| 79 | */ |
||
| 80 | 56 | public function getAuthManager() |
|
| 81 | { |
||
| 82 | 56 | $authManagerId = $this->authManagerId; |
|
| 83 | 56 | return empty($authManagerId) ? Yii::$app->authManager : Yii::$app->$authManagerId; |
|
| 84 | } |
||
| 85 | |||
| 86 | /** |
||
| 87 | * Register new user. |
||
| 88 | * It is equivalent to store the current user and its associated models into |
||
| 89 | * database synchronously. The registration will be terminated immediately |
||
| 90 | * if any errors occur in the process, and all the earlier steps succeeded |
||
| 91 | * are rolled back. |
||
| 92 | * If auth manager configured, and auth role(s) provided, it(they) will be |
||
| 93 | * assigned to user after registration. |
||
| 94 | * If current user is not a new one(isNewRecord = false), the registration |
||
| 95 | * will be skipped and return false. |
||
| 96 | * The $eventBeforeRegister will be triggered before registration starts. |
||
| 97 | * If registration finished, the $eventAfterRegister will be triggered. or |
||
| 98 | * $eventRegisterFailed will be triggered when any errors occured. |
||
| 99 | * @param array $associatedModels The models associated with user to be stored synchronously. |
||
| 100 | * @param string|array $authRoles auth name, auth instance, auth name array or auth instance array. |
||
| 101 | * @return boolean Whether the registration succeeds or not. |
||
| 102 | * @throws IntegrityException when inserting user and associated models failed. |
||
| 103 | */ |
||
| 104 | 56 | public function register($associatedModels = [], $authRoles = []) |
|
| 105 | { |
||
| 106 | 56 | if (!$this->isNewRecord) { |
|
| 107 | return false; |
||
| 108 | } |
||
| 109 | 56 | $this->trigger(static::$eventBeforeRegister); |
|
| 110 | 56 | $transaction = $this->getDb()->beginTransaction(); |
|
| 111 | try { |
||
| 112 | 56 | if (!$this->save()) { |
|
| 113 | 1 | throw new IntegrityException('Registration Error(s) Occured.', $this->errors); |
|
| 114 | } |
||
| 115 | 56 | if ($authManager = $this->getAuthManager() && !empty($authRoles)) { |
|
| 116 | if (is_string($authRoles) || $authRoles instanceof Role || !is_array($authRoles)) { |
||
| 117 | $authRoles = [$authRoles]; |
||
| 118 | } |
||
| 119 | foreach ($authRoles as $role) { |
||
| 120 | if (is_string($role)) { |
||
| 121 | $role = $authManager->getRole($role); |
||
| 122 | } |
||
| 123 | if ($role instanceof Role) { |
||
| 124 | $authManager->assign($role, $this->guid); |
||
| 125 | } |
||
| 126 | } |
||
| 127 | } |
||
| 128 | 56 | if (!empty($associatedModels) && is_array($associatedModels)) { |
|
| 129 | 8 | foreach ($associatedModels as $model) { |
|
| 130 | 8 | if (!$model->save()) { |
|
| 131 | throw new IntegrityException('Registration Error(s) Occured.', $model->errors); |
||
| 132 | } |
||
| 133 | 8 | } |
|
| 134 | 8 | } |
|
| 135 | 56 | $transaction->commit(); |
|
| 136 | 56 | } catch (Exception $ex) { |
|
| 137 | 1 | $transaction->rollBack(); |
|
| 138 | 1 | $this->trigger(static::$eventRegisterFailed); |
|
| 139 | 1 | if (YII_DEBUG || YII_ENV !== YII_ENV_PROD) { |
|
| 140 | 1 | Yii::error($ex->errorInfo, static::className() . '\register'); |
|
|
0 ignored issues
–
show
|
|||
| 141 | 1 | return $ex; |
|
| 142 | } |
||
| 143 | Yii::warning($ex->errorInfo, static::className() . '\register'); |
||
|
0 ignored issues
–
show
$ex->errorInfo is of type array, but the function expects a string.
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
Loading history...
|
|||
| 144 | return false; |
||
| 145 | } |
||
| 146 | 56 | $this->trigger(static::$eventAfterRegister); |
|
| 147 | 56 | return true; |
|
| 148 | } |
||
| 149 | |||
| 150 | /** |
||
| 151 | * Deregister current user itself. |
||
| 152 | * It is equivalent to delete current user and its associated models. BUT it |
||
| 153 | * deletes current user ONLY, the associated models will not be deleted |
||
| 154 | * forwardly. So you should set the foreign key of associated models' table |
||
| 155 | * referenced from primary key of user table, and their association mode is |
||
| 156 | * 'on update cascade' and 'on delete cascade'. |
||
| 157 | * the $eventBeforeDeregister will be triggered before deregistration starts. |
||
| 158 | * if deregistration finished, the $eventAfterDeregister will be triggered. or |
||
| 159 | * $eventDeregisterFailed will be triggered when any errors occured. |
||
| 160 | * @return boolean Whether deregistration succeeds or not. |
||
| 161 | * @throws IntegrityException when deleting user failed. |
||
| 162 | */ |
||
| 163 | 56 | public function deregister() |
|
| 164 | { |
||
| 165 | 56 | if ($this->isNewRecord) { |
|
| 166 | return false; |
||
| 167 | } |
||
| 168 | 56 | $this->trigger(static::$eventBeforeDeregister); |
|
| 169 | 56 | $transaction = $this->getDb()->beginTransaction(); |
|
| 170 | try { |
||
| 171 | 56 | $result = $this->delete(); |
|
| 172 | 56 | if ($result != 1) { |
|
| 173 | throw new IntegrityException('Deregistration Error(s) Occured.', $this->errors); |
||
| 174 | } |
||
| 175 | 56 | $transaction->commit(); |
|
| 176 | 56 | } catch (Exception $ex) { |
|
| 177 | $transaction->rollBack(); |
||
| 178 | $this->trigger(static::$eventDeregisterFailed); |
||
| 179 | if (YII_DEBUG || YII_ENV !== YII_ENV_PROD) { |
||
| 180 | Yii::error($ex->errorInfo, static::className() . '\deregister'); |
||
|
0 ignored issues
–
show
$ex->errorInfo is of type array, but the function expects a string.
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
Loading history...
|
|||
| 181 | return $ex; |
||
| 182 | } |
||
| 183 | Yii::warning($ex->errorInfo, static::className() . '\deregister'); |
||
|
0 ignored issues
–
show
$ex->errorInfo is of type array, but the function expects a string.
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
Loading history...
|
|||
| 184 | return false; |
||
| 185 | } |
||
| 186 | 56 | $this->trigger(static::$eventAfterDeregister); |
|
| 187 | 56 | return $result == 1; |
|
| 188 | } |
||
| 189 | |||
| 190 | /** |
||
| 191 | * Get source. |
||
| 192 | * @return string |
||
| 193 | */ |
||
| 194 | public function getSource() |
||
| 195 | { |
||
| 196 | $sourceAttribute = $this->sourceAttribute; |
||
| 197 | return is_string($sourceAttribute) ? $this->$sourceAttribute : null; |
||
| 198 | } |
||
| 199 | |||
| 200 | /** |
||
| 201 | * Set source. |
||
| 202 | * @param string $source |
||
| 203 | */ |
||
| 204 | public function setSource($source) |
||
| 205 | { |
||
| 206 | $sourceAttribute = $this->sourceAttribute; |
||
| 207 | return is_string($sourceAttribute) ? $this->$sourceAttribute = $source : null; |
||
| 208 | } |
||
| 209 | |||
| 210 | /** |
||
| 211 | * Get the rules associated with source attribute. |
||
| 212 | * @return array rules. |
||
| 213 | */ |
||
| 214 | 56 | public function getSourceRules() |
|
| 215 | { |
||
| 216 | 56 | if (empty($this->_sourceRules)) { |
|
| 217 | 56 | $this->_sourceRules = [ |
|
| 218 | 56 | [[$this->sourceAttribute], 'required'], |
|
| 219 | 56 | [[$this->sourceAttribute], 'string'], |
|
| 220 | ]; |
||
| 221 | 56 | } |
|
| 222 | 56 | return $this->_sourceRules; |
|
| 223 | } |
||
| 224 | |||
| 225 | /** |
||
| 226 | * Set the rules associated with source attribute. |
||
| 227 | * @param array $rules |
||
| 228 | */ |
||
| 229 | public function setSourceRules($rules) |
||
| 230 | { |
||
| 231 | if (!empty($rules) && is_array($rules)) { |
||
| 232 | $this->_sourceRules = $rules; |
||
| 233 | } |
||
| 234 | } |
||
| 235 | |||
| 236 | /** |
||
| 237 | * Initialize the source attribute with $sourceSelf. |
||
| 238 | * This method is ONLY used for being triggered by event. DO NOT call, |
||
| 239 | * override or modify it directly, unless you know the consequences. |
||
| 240 | * @param ModelEvent $event |
||
| 241 | */ |
||
| 242 | 60 | public function onInitSourceAttribute($event) |
|
| 243 | { |
||
| 244 | 60 | $sender = $event->sender; |
|
| 245 | 60 | $sourceAttribute = $sender->sourceAttribute; |
|
| 246 | 60 | $sender->$sourceAttribute = static::$sourceSelf; |
|
| 247 | 60 | } |
|
| 248 | } |
||
| 249 |
It seems like the type of the argument is not accepted by the function/method which you are calling.
In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug.
We suggest to add an explicit type cast like in the following example: