array( * 'lambda' => array( * 'type' => 'error' | 'warning', * 'message' => 'Use anonymous functions instead please!', * 'functions' => array( 'file_get_contents', 'create_function', 'mysql_*' ), * // Only useful when using wildcards: * 'whitelist' => array( 'mysql_to_rfc3339' => true, ), * ) * ) * * You can use * wildcards to target a group of functions. * When you use * wildcards, you may inadvertently restrict too many * functions. In that case you can add the `whitelist` key to * whitelist individual functions to prevent false positives. * * @return array */ abstract public function getGroups(); /** * Returns an array of tokens this test wants to listen for. * * @return array */ public function register() { // Prepare the function group regular expressions only once. if ( false === $this->setup_groups( 'functions' ) ) { return array(); } return array( \T_STRING, ); } /** * Set up the regular expressions for each group. * * @since 0.10.0 * * @param string $key The group array index key where the input for the regular expression can be found. * @return bool True if the groups were setup. False if not. */ protected function setup_groups( $key ) { // Prepare the function group regular expressions only once. $this->groups = $this->getGroups(); if ( empty( $this->groups ) && empty( self::$unittest_groups ) ) { return false; } // Allow for adding extra unit tests. if ( ! empty( self::$unittest_groups ) ) { $this->groups = array_merge( $this->groups, self::$unittest_groups ); } $all_items = array(); foreach ( $this->groups as $groupName => $group ) { if ( empty( $group[ $key ] ) ) { unset( $this->groups[ $groupName ] ); } else { $items = array_map( array( $this, 'prepare_name_for_regex' ), $group[ $key ] ); $all_items[] = $items; $items = implode( '|', $items ); $this->groups[ $groupName ]['regex'] = sprintf( $this->regex_pattern, $items ); } } if ( empty( $this->groups ) ) { return false; } // Create one "super-regex" to allow for initial filtering. $all_items = \call_user_func_array( 'array_merge', $all_items ); $all_items = implode( '|', array_unique( $all_items ) ); $this->prelim_check_regex = sprintf( $this->regex_pattern, $all_items ); return true; } /** * Processes this test, when one of its tokens is encountered. * * @param int $stackPtr The position of the current token in the stack. * * @return int|void Integer stack pointer to skip forward or void to continue * normal file processing. */ public function process_token( $stackPtr ) { $this->excluded_groups = $this->merge_custom_array( $this->exclude ); if ( array_diff_key( $this->groups, $this->excluded_groups ) === array() ) { // All groups have been excluded. // Don't remove the listener as the exclude property can be changed inline. return; } // Preliminary check. If the content of the T_STRING is not one of the functions we're // looking for, we can bow out before doing the heavy lifting of checking whether // this is a function call. if ( preg_match( $this->prelim_check_regex, $this->tokens[ $stackPtr ]['content'] ) !== 1 ) { return; } if ( true === $this->is_targetted_token( $stackPtr ) ) { return $this->check_for_matches( $stackPtr ); } } /** * Verify is the current token is a function call. * * @since 0.11.0 Split out from the `process()` method. * * @param int $stackPtr The position of the current token in the stack. * * @return bool */ public function is_targetted_token( $stackPtr ) { if ( \T_STRING !== $this->tokens[ $stackPtr ]['code'] ) { return false; } // Exclude function definitions, class methods, and namespaced calls. if ( $this->is_class_object_call( $stackPtr ) === true ) { return false; } if ( $this->is_token_namespaced( $stackPtr ) === true ) { return false; } $prev = $this->phpcsFile->findPrevious( Tokens::$emptyTokens, ( $stackPtr - 1 ), null, true ); if ( false !== $prev ) { // Skip sniffing on function, class definitions or for function aliases in use statements. $skipped = array( \T_FUNCTION => \T_FUNCTION, \T_CLASS => \T_CLASS, \T_AS => \T_AS, // Use declaration alias. ); if ( isset( $skipped[ $this->tokens[ $prev ]['code'] ] ) ) { return false; } } // Check if this could even be a function call. $next = $this->phpcsFile->findNext( Tokens::$emptyTokens, ( $stackPtr + 1 ), null, true ); if ( false === $next ) { return false; } // Check for `use function ... (as|;)`. if ( ( \T_STRING === $this->tokens[ $prev ]['code'] && 'function' === $this->tokens[ $prev ]['content'] ) && ( \T_AS === $this->tokens[ $next ]['code'] || \T_SEMICOLON === $this->tokens[ $next ]['code'] ) ) { return true; } // If it's not a `use` statement, there should be parenthesis. if ( \T_OPEN_PARENTHESIS !== $this->tokens[ $next ]['code'] ) { return false; } return true; } /** * Verify if the current token is one of the targetted functions. * * @since 0.11.0 Split out from the `process()` method. * * @param int $stackPtr The position of the current token in the stack. * * @return int|void Integer stack pointer to skip forward or void to continue * normal file processing. */ public function check_for_matches( $stackPtr ) { $token_content = strtolower( $this->tokens[ $stackPtr ]['content'] ); $skip_to = array(); foreach ( $this->groups as $groupName => $group ) { if ( isset( $this->excluded_groups[ $groupName ] ) ) { continue; } if ( isset( $group['whitelist'][ $token_content ] ) ) { continue; } if ( preg_match( $group['regex'], $token_content ) === 1 ) { $skip_to[] = $this->process_matched_token( $stackPtr, $groupName, $token_content ); } } if ( empty( $skip_to ) || min( $skip_to ) === 0 ) { return; } return min( $skip_to ); } /** * Process a matched token. * * @since 0.11.0 Split out from the `process()` method. * * @param int $stackPtr The position of the current token in the stack. * @param string $group_name The name of the group which was matched. * @param string $matched_content The token content (function name) which was matched. * * @return int|void Integer stack pointer to skip forward or void to continue * normal file processing. */ public function process_matched_token( $stackPtr, $group_name, $matched_content ) { $this->addMessage( $this->groups[ $group_name ]['message'], $stackPtr, ( 'error' === $this->groups[ $group_name ]['type'] ), $this->string_to_errorcode( $group_name . '_' . $matched_content ), array( $matched_content ) ); } /** * Prepare the function name for use in a regular expression. * * The getGroups() method allows for providing function names with a wildcard * to target * a group of functions. This prepare routine takes that into account while still safely * escaping the function name for use in a regular expression. * * @since 0.10.0 * * @param string $function Function name. * @return string Regex escaped function name. */ protected function prepare_name_for_regex( $function ) { $function = str_replace( array( '.*', '*' ), '@@', $function ); // Replace wildcards with placeholder. $function = preg_quote( $function, '`' ); $function = str_replace( '@@', '.*', $function ); // Replace placeholder with regex wildcard. return $function; } }