wernerkrauss /
silverstripe-piwik
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | class PiwikExtension extends Extension |
||
| 4 | { |
||
| 5 | |||
| 6 | /** |
||
| 7 | * @var string the url to the server, without protocol and trailing slash, e.g. //piwik.foo.com/ |
||
| 8 | */ |
||
| 9 | private static $piwik_server = '//piwik.foo.com/'; |
||
|
0 ignored issues
–
show
|
|||
| 10 | |||
| 11 | /** |
||
| 12 | * @var int the piwik site id |
||
| 13 | */ |
||
| 14 | private static $piwik_site_id = 0; |
||
|
0 ignored issues
–
show
|
|||
| 15 | |||
| 16 | /** |
||
| 17 | * @var bool Do you want tracking code in dev environments? |
||
| 18 | */ |
||
| 19 | private static $show_on_dev = false; |
||
|
0 ignored issues
–
show
|
|||
| 20 | |||
| 21 | /** |
||
| 22 | * @var bool do you want tracking code in test environments? |
||
| 23 | */ |
||
| 24 | private static $show_on_test = false; |
||
|
0 ignored issues
–
show
|
|||
| 25 | |||
| 26 | /** |
||
| 27 | * @var bool we want tracking code in live environments |
||
| 28 | */ |
||
| 29 | private static $show_on_live = true; |
||
|
0 ignored issues
–
show
|
|||
| 30 | |||
| 31 | /** |
||
| 32 | * @var bool include tracking code on contentcontrollerInit |
||
| 33 | */ |
||
| 34 | private static $auto_include = true; |
||
|
0 ignored issues
–
show
|
|||
| 35 | |||
| 36 | /** |
||
| 37 | * @var bool include tracking code automatically in backend, subclasses of LeftAndMain |
||
| 38 | */ |
||
| 39 | private static $include_in_backend = false; |
||
|
0 ignored issues
–
show
|
|||
| 40 | |||
| 41 | private static $excluded_controllers = array( |
||
|
0 ignored issues
–
show
|
|||
| 42 | 'DevelopmentAdmin', |
||
| 43 | 'DevBuildController', |
||
| 44 | 'DatabaseAdmin' |
||
| 45 | ); |
||
| 46 | |||
| 47 | /** |
||
| 48 | * includes the piwik tracking code when ContentController initializes... |
||
| 49 | * @todo: get it working ;) |
||
| 50 | */ |
||
| 51 | public function onAfterInit(&$controller) |
||
|
0 ignored issues
–
show
|
|||
| 52 | { |
||
| 53 | if ($this->autoInclude() && $js = $this->getPiwik(false)) { |
||
| 54 | Requirements::customScript($js, 'piwiktrackingcode'); |
||
| 55 | } |
||
| 56 | } |
||
| 57 | |||
| 58 | /** |
||
| 59 | * generates piwik tracking code out of config vars and Piwik.ss template |
||
| 60 | * @param $wrap wrap inside <script> tags, e.g. for templates |
||
| 61 | */ |
||
| 62 | public function getPiwik($wrap = true) |
||
| 63 | { |
||
| 64 | if (Director::isDev() && !Config::inst()->get('PiwikExtension', 'show_on_dev')) { |
||
| 65 | return false; |
||
| 66 | } |
||
| 67 | if (Director::isTest() && !Config::inst()->get('PiwikExtension', 'show_on_test')) { |
||
| 68 | return false; |
||
| 69 | } |
||
| 70 | if (Director::isLive() && !Config::inst()->get('PiwikExtension', 'show_on_live')) { |
||
| 71 | return false; |
||
| 72 | } |
||
| 73 | |||
| 74 | //used for overwriting defaults in SiteConfig, e.g. for different SiteIDs in a Subsite installation |
||
| 75 | $currentSiteConfig = Controller::curr()->hasMethod('getSiteConfig') |
||
| 76 | ? Controller::curr()->getSiteConfig() |
||
| 77 | : SiteConfig::current_site_config(); |
||
| 78 | |||
| 79 | |||
| 80 | $data = array( |
||
| 81 | 'WrapInJsTags' => $wrap, |
||
| 82 | 'URL' => Config::inst()->get('PiwikExtension', 'piwik_server'), |
||
| 83 | 'SiteID' => Config::inst()->get('PiwikExtension', 'piwik_site_id'), |
||
| 84 | 'SiteConfig' => $currentSiteConfig |
||
| 85 | ); |
||
| 86 | |||
| 87 | return ArrayData::create($data)->renderWith(array('Piwik')); |
||
| 88 | } |
||
| 89 | |||
| 90 | /** |
||
| 91 | * Helper function to define if tracking code should be included automatically |
||
| 92 | * @return bool |
||
| 93 | */ |
||
| 94 | public function autoInclude() |
||
| 95 | { |
||
| 96 | if (! Config::inst()->get('PiwikExtension', 'auto_include')) { |
||
| 97 | return false; |
||
| 98 | } |
||
| 99 | |||
| 100 | if (Director::is_cli()) { |
||
| 101 | return false; |
||
| 102 | } |
||
| 103 | |||
| 104 | //don't include on dev/build etc... |
||
| 105 | if ($this->isBlockedController()) { |
||
| 106 | return false; |
||
| 107 | } |
||
| 108 | |||
| 109 | if ($this->isBackend() && !Config::inst()->get('PiwikExtension', 'include_in_backend')) { |
||
|
0 ignored issues
–
show
|
|||
| 110 | return false; |
||
| 111 | } |
||
| 112 | |||
| 113 | return true; |
||
| 114 | } |
||
| 115 | |||
| 116 | |||
| 117 | /** |
||
| 118 | * @return bool is the extended controller an instance of LeftAndMain |
||
| 119 | */ |
||
| 120 | public function isBackend() |
||
| 121 | { |
||
| 122 | return Controller::curr() instanceof LeftAndMain; |
||
| 123 | } |
||
| 124 | |||
| 125 | /** |
||
| 126 | * Checks if the current controller is in a list of blocked controllers (e.g. dev/build) |
||
| 127 | * |
||
| 128 | * @return mixed |
||
| 129 | */ |
||
| 130 | public function isBlockedController() |
||
| 131 | { |
||
| 132 | return max(array_map( |
||
| 133 | function($name) { |
||
| 134 | return Controller::curr() instanceof $name; |
||
| 135 | }, |
||
| 136 | Config::inst()->get('PiwikExtension', 'excluded_controllers') |
||
| 137 | )); |
||
| 138 | } |
||
| 139 | } |
||
| 140 |
This check marks private properties in classes that are never used. Those properties can be removed.