This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | namespace Webdcg\Redis\Traits; |
||
4 | |||
5 | use Webdcg\Redis\Exceptions\ScriptCommandException; |
||
6 | |||
7 | trait Scripting |
||
8 | { |
||
9 | /* |
||
10 | * Available Script Commands |
||
11 | */ |
||
12 | protected $SCRIPT_COMMANDS = ['LOAD', 'FLUSH', 'KILL', 'EXISTS']; |
||
13 | |||
14 | /** |
||
15 | * Evaluate a LUA script serverside. |
||
16 | * |
||
17 | * See: https://redis.io/commands/eval. |
||
18 | * |
||
19 | * @param string $script |
||
20 | * @param array $arguments |
||
21 | * @param int|integer $numKeys |
||
22 | * |
||
23 | * @return mixed What is returned depends on what the LUA script |
||
24 | * itself returns, which could be a scalar value |
||
25 | * (int/string), or an array. Arrays that are returned |
||
26 | * can also contain other arrays, if that's how it was |
||
27 | * set up in your LUA script. If there is an error |
||
28 | * executing the LUA script, the getLastError() |
||
29 | * function can tell you the message that came back |
||
30 | * from Redis (e.g. compile error). |
||
31 | */ |
||
32 | public function eval(string $script, ?array $arguments = null, ?int $numKeys = null) |
||
33 | { |
||
34 | if (!is_null($arguments) && !is_null($numKeys)) { |
||
35 | return $this->redis->eval($script, $arguments, $numKeys); |
||
0 ignored issues
–
show
|
|||
36 | } |
||
37 | |||
38 | return $this->redis->eval($script); |
||
39 | } |
||
40 | |||
41 | |||
42 | /** |
||
43 | * Evaluate a LUA script serverside, from the SHA1 hash of the script instead |
||
44 | * of the script itself. |
||
45 | * |
||
46 | * In order to run this command Redis will have to have already loaded the |
||
47 | * script, either by running it or via the SCRIPT LOAD command. |
||
48 | * |
||
49 | * See: https://redis.io/commands/evalsha. |
||
50 | * |
||
51 | * @param string $sha1 The sha1 encoded hash of the script you want to run. |
||
52 | * @param array|null $arguments Arguments to pass to the LUA script. |
||
53 | * @param int|null $numKeys The number of arguments that should go into the |
||
54 | * KEYS array, vs. the ARGV array when Redis spins |
||
55 | * the script (optional). |
||
56 | * |
||
57 | * @return mixed |
||
58 | */ |
||
59 | public function evalSha(string $sha1, ?array $arguments = null, ?int $numKeys = null) |
||
60 | { |
||
61 | if (!is_null($arguments) && !is_null($numKeys)) { |
||
62 | return $this->redis->evalSha($sha1, $arguments, $numKeys); |
||
63 | } |
||
64 | |||
65 | return $this->redis->evalSha($sha1); |
||
66 | } |
||
67 | |||
68 | |||
69 | /** |
||
70 | * Execute the Redis SCRIPT command to perform various operations on the |
||
71 | * scripting subsystem. |
||
72 | * |
||
73 | * See: https://redis.io/commands/script-load. |
||
74 | * See: https://redis.io/commands/script-flush. |
||
75 | * |
||
76 | * @param string $command |
||
77 | * @param splat $scripts |
||
78 | * |
||
79 | * @return mixed SCRIPT LOAD will return the SHA1 hash of the |
||
80 | * passed script on success, and FALSE on |
||
81 | * failure. |
||
82 | * SCRIPT FLUSH should always return TRUE |
||
83 | * SCRIPT KILL will return true if a script was |
||
84 | * able to be killed and false if not. |
||
85 | * SCRIPT EXISTS will return an array with TRUE |
||
86 | * or FALSE for each passed script. |
||
87 | */ |
||
88 | public function script(string $command, ...$scripts) |
||
89 | { |
||
90 | $command = strtoupper($command); |
||
91 | |||
92 | if (!in_array($command, $this->SCRIPT_COMMANDS)) { |
||
93 | throw new ScriptCommandException('Script Command not supported', 1); |
||
94 | } |
||
95 | |||
96 | if ($command == 'FLUSH' || $command == 'KILL') { |
||
97 | return $this->redis->script($command); |
||
98 | } |
||
99 | |||
100 | if ($command == 'EXISTS') { |
||
101 | return $this->redis->script($command, ...$scripts); |
||
102 | } |
||
103 | |||
104 | if (count($scripts) != 1) { |
||
105 | throw new ScriptCommandException('Invalid Number of Scripts to Load', 1); |
||
106 | } |
||
107 | |||
108 | return $this->redis->script($command, $scripts[0]); |
||
109 | } |
||
110 | |||
111 | |||
112 | /** |
||
113 | * The last error message (if any) |
||
114 | * |
||
115 | * |
||
116 | * @return mixed|string|null A string with the last returned script |
||
117 | * based error message, or NULL if there |
||
118 | * is no error. |
||
119 | */ |
||
120 | public function getLastError(): ?string |
||
121 | { |
||
122 | return $this->redis->getLastError(); |
||
123 | } |
||
124 | |||
125 | |||
126 | /** |
||
127 | * Clear the last error message |
||
128 | * |
||
129 | * @return bool true |
||
130 | */ |
||
131 | public function clearLastError(): bool |
||
132 | { |
||
133 | return $this->redis->clearLastError(); |
||
134 | } |
||
135 | |||
136 | |||
137 | /** |
||
138 | * A utility method to prefix the value with the prefix setting for phpredis. |
||
139 | * |
||
140 | * @param string $key The value you wish to prefix |
||
141 | * |
||
142 | * @return string If a prefix is set up, the value now prefixed. |
||
143 | * If there is no prefix, the value will be returned |
||
144 | * unchanged. |
||
145 | */ |
||
146 | public function _prefix(string $key): string |
||
147 | { |
||
148 | return $this->redis->_prefix($key); |
||
149 | } |
||
150 | |||
151 | /** |
||
152 | * A utility method to serialize values manually. |
||
153 | * |
||
154 | * This method allows you to serialize a value with whatever serializer is |
||
155 | * configured, manually. This can be useful for serialization/unserialization |
||
156 | * of data going in and out of EVAL commands as phpredis can't automatically |
||
157 | * do this itself. Note that if no serializer is set, phpredis will change |
||
158 | * Array values to 'Array', and Objects to 'Object'. |
||
159 | * |
||
160 | * @param mixed|string|array|obhect $value The value to be serialized. |
||
161 | * |
||
162 | * @return mixed The serialized value. |
||
163 | */ |
||
164 | public function _serialize($value) |
||
165 | { |
||
166 | return $this->redis->_serialize($value); |
||
167 | } |
||
168 | |||
169 | |||
170 | /** |
||
171 | * A utility method to unserialize data with whatever serializer is set up. |
||
172 | * |
||
173 | * If there is no serializer set, the value will be returned unchanged. |
||
174 | * If there is a serializer set up, and the data passed in is malformed, |
||
175 | * an exception will be thrown. This can be useful if phpredis is |
||
176 | * serializing values, and you return something from redis in a LUA script |
||
177 | * that is serialized. |
||
178 | * |
||
179 | * @param string $value The value to be unserialized |
||
180 | * |
||
181 | * @return mixed Unserialized value |
||
182 | */ |
||
183 | public function _unserialize(string $value) |
||
184 | { |
||
185 | return $this->redis->_unserialize($value); |
||
186 | } |
||
187 | } |
||
188 |
In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code:
Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion: