├── .gitignore
├── README.md
├── app
    ├── .htaccess
    ├── AppCache.php
    ├── AppKernel.php
    ├── Resources
    │   └── views
    │   │   ├── base.html.twig
    │   │   └── default
    │   │       └── index.html.twig
    ├── autoload.php
    └── config
    │   ├── config.yml
    │   ├── config_dev.yml
    │   ├── config_prod.yml
    │   ├── config_test.yml
    │   ├── parameters.yml.dist
    │   ├── routing.yml
    │   ├── routing_dev.yml
    │   ├── security.yml
    │   └── services.yml
├── bin
    ├── console
    └── symfony_requirements
├── composer.json
├── composer.lock
├── phpunit.xml.dist
├── process-questions.sh
├── src
    ├── .htaccess
    └── AppBundle
    │   ├── AppBundle.php
    │   ├── BaseService.php
    │   ├── CacheService.php
    │   ├── Command
    │       ├── CrawlQuestionsCommand.php
    │       ├── FindUsersCommand.php
    │       ├── FindWinnersCommand.php
    │       ├── GenerateStaticWebsiteCommand.php
    │       ├── PopulatePlaceTablesCommand.php
    │       ├── RefreshQuestionsCommand.php
    │       └── RefreshUsersCommand.php
    │   ├── Controller
    │       └── DefaultController.php
    │   ├── CountryUtils.php
    │   ├── Eloquent.php.sample
    │   ├── InjectionFinder.php
    │   ├── Model
    │       ├── City.php
    │       ├── Country.php
    │       ├── Place.php
    │       ├── Question.php
    │       └── User.php
    │   ├── QuestionCrawler.php
    │   ├── ReportService.php
    │   ├── StackExchangeApi.php
    │   └── UserFinder.php
├── structure.sql
├── testimport.sublime-project
├── tests
    └── AppBundle
    │   └── Controller
    │       └── DefaultControllerTest.php
├── var
    ├── SymfonyRequirements.php
    ├── cache
    │   └── .gitkeep
    ├── logs
    │   └── .gitkeep
    ├── places
    │   └── README.md
    └── sessions
    │   └── .gitkeep
└── web
    ├── .htaccess
    ├── app.php
    ├── app_dev.php
    ├── apple-touch-icon.png
    ├── config.php
    ├── favicon.ico
    ├── index_template.html
    └── robots.txt


/.gitignore:
--------------------------------------------------------------------------------
 1 | /app/config/parameters.yml
 2 | /build/
 3 | /phpunit.xml
 4 | /var/*
 5 | !/var/cache
 6 | /var/cache/*
 7 | !/var/places
 8 | /var/places/*
 9 | !/var/places/README.md
10 | !var/cache/.gitkeep
11 | !/var/logs
12 | /var/logs/*
13 | !var/logs/.gitkeep
14 | !/var/sessions
15 | /var/sessions/*
16 | !var/sessions/.gitkeep
17 | !var/SymfonyRequirements.php
18 | /vendor/
19 | /web/bundles/
20 | /src/AppBundle/Eloquent.php
21 | INFO.md
22 | crawl-question*.log
23 | get-question-count.php
24 | web/index.html
25 | TODO.md
26 | *.sublime-workspace


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # so-sql-injections
2 | 
3 | SQL injection vulnerabilities in Stack Overflow PHP questions
4 | 
5 | https://laurent22.github.io/so-injections/
6 | 
7 | License: MIT
8 | 


--------------------------------------------------------------------------------
/app/.htaccess:
--------------------------------------------------------------------------------
1 | <IfModule mod_authz_core.c>
2 |     Require all denied
3 | </IfModule>
4 | <IfModule !mod_authz_core.c>
5 |     Order deny,allow
6 |     Deny from all
7 | </IfModule>
8 | 


--------------------------------------------------------------------------------
/app/AppCache.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | use Symfony\Bundle\FrameworkBundle\HttpCache\HttpCache;
4 | 
5 | class AppCache extends HttpCache
6 | {
7 | }
8 | 


--------------------------------------------------------------------------------
/app/AppKernel.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | use Symfony\Component\HttpKernel\Kernel;
 4 | use Symfony\Component\Config\Loader\LoaderInterface;
 5 | 
 6 | class AppKernel extends Kernel
 7 | {
 8 |     public function registerBundles()
 9 |     {
10 |         $bundles = [
11 |             new Symfony\Bundle\FrameworkBundle\FrameworkBundle(),
12 |             new Symfony\Bundle\SecurityBundle\SecurityBundle(),
13 |             new Symfony\Bundle\TwigBundle\TwigBundle(),
14 |             new Symfony\Bundle\MonologBundle\MonologBundle(),
15 |             new Symfony\Bundle\SwiftmailerBundle\SwiftmailerBundle(),
16 |             new Doctrine\Bundle\DoctrineBundle\DoctrineBundle(),
17 |             new Sensio\Bundle\FrameworkExtraBundle\SensioFrameworkExtraBundle(),
18 |             new AppBundle\AppBundle(),
19 |         ];
20 | 
21 |         if (in_array($this->getEnvironment(), ['dev', 'test'], true)) {
22 |             $bundles[] = new Symfony\Bundle\DebugBundle\DebugBundle();
23 |             $bundles[] = new Symfony\Bundle\WebProfilerBundle\WebProfilerBundle();
24 |             $bundles[] = new Sensio\Bundle\DistributionBundle\SensioDistributionBundle();
25 |             $bundles[] = new Sensio\Bundle\GeneratorBundle\SensioGeneratorBundle();
26 |         }
27 | 
28 |         return $bundles;
29 |     }
30 | 
31 |     public function getRootDir()
32 |     {
33 |         return __DIR__;
34 |     }
35 | 
36 |     public function getCacheDir()
37 |     {
38 |         return dirname(__DIR__).'/var/cache/'.$this->getEnvironment();
39 |     }
40 | 
41 |     public function getLogDir()
42 |     {
43 |         return dirname(__DIR__).'/var/logs';
44 |     }
45 | 
46 |     public function registerContainerConfiguration(LoaderInterface $loader)
47 |     {
48 |         $loader->load($this->getRootDir().'/config/config_'.$this->getEnvironment().'.yml');
49 |     }
50 | }
51 | 


--------------------------------------------------------------------------------
/app/Resources/views/base.html.twig:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 |     <head>
 4 |         <meta charset="UTF-8" />
 5 |         <title>{% block title %}Welcome!{% endblock %}</title>
 6 |         {% block stylesheets %}{% endblock %}
 7 |         <link rel="icon" type="image/x-icon" href="{{ asset('favicon.ico') }}" />
 8 |     </head>
 9 |     <body>
10 |         {% block body %}{% endblock %}
11 |         {% block javascripts %}{% endblock %}
12 |     </body>
13 | </html>
14 | 


--------------------------------------------------------------------------------
/app/Resources/views/default/index.html.twig:
--------------------------------------------------------------------------------
 1 | {% extends 'base.html.twig' %}
 2 | 
 3 | {% block body %}
 4 |     <div id="wrapper">
 5 |         <div id="container">
 6 |             <div id="welcome">
 7 |                 <h1><span>Welcome to</span> Symfony {{ constant('Symfony\\Component\\HttpKernel\\Kernel::VERSION') }}</h1>
 8 |             </div>
 9 | 
10 |             <div id="status">
11 |                 <p>
12 |                     <svg id="icon-status" width="1792" height="1792" viewBox="0 0 1792 1792" xmlns="http://www.w3.org/2000/svg"><path d="M1671 566q0 40-28 68l-724 724-136 136q-28 28-68 28t-68-28l-136-136-362-362q-28-28-28-68t28-68l136-136q28-28 68-28t68 28l294 295 656-657q28-28 68-28t68 28l136 136q28 28 28 68z" fill="#759E1A"/></svg>
13 | 
14 |                     Your application is now ready. You can start working on it at:
15 |                     <code>{{ base_dir }}/</code>
16 |                 </p>
17 |             </div>
18 | 
19 |             <div id="next">
20 |                 <h2>What's next?</h2>
21 |                 <p>
22 |                     <svg id="icon-book" version="1.1" xmlns="http://www.w3.org/2000/svg" x="0px" y="0px" viewBox="-12.5 9 64 64" enable-background="new -12.5 9 64 64" xml:space="preserve">
23 |                         <path fill="#AAA" d="M6.8,40.8c2.4,0.8,4.5-0.7,4.9-2.5c0.2-1.2-0.3-2.1-1.3-3.2l-0.8-0.8c-0.4-0.5-0.6-1.3-0.2-1.9
24 |                             c0.4-0.5,0.9-0.8,1.8-0.5c1.3,0.4,1.9,1.3,2.9,2.2c-0.4,1.4-0.7,2.9-0.9,4.2l-0.2,1c-0.7,4-1.3,6.2-2.7,7.5
25 |                             c-0.3,0.3-0.7,0.5-1.3,0.6c-0.3,0-0.4-0.3-0.4-0.3c0-0.3,0.2-0.3,0.3-0.4c0.2-0.1,0.5-0.3,0.4-0.8c0-0.7-0.6-1.3-1.3-1.3
26 |                             c-0.6,0-1.4,0.6-1.4,1.7s1,1.9,2.4,1.8c0.8,0,2.5-0.3,4.2-2.5c2-2.5,2.5-5.4,2.9-7.4l0.5-2.8c0.3,0,0.5,0.1,0.8,0.1
27 |                             c2.4,0.1,3.7-1.3,3.7-2.3c0-0.6-0.3-1.2-0.9-1.2c-0.4,0-0.8,0.3-1,0.8c-0.1,0.6,0.8,1.1,0.1,1.5c-0.5,0.3-1.4,0.6-2.7,0.4l0.3-1.3
28 |                             c0.5-2.6,1-5.7,3.2-5.8c0.2,0,0.8,0,0.8,0.4c0,0.2,0,0.2-0.2,0.5c-0.2,0.3-0.3,0.4-0.2,0.7c0,0.7,0.5,1.1,1.2,1.1
29 |                             c0.9,0,1.2-1,1.2-1.4c0-1.2-1.2-1.8-2.6-1.8c-1.5,0.1-2.8,0.9-3.7,2.1c-1.1,1.3-1.8,2.9-2.3,4.5c-0.9-0.8-1.6-1.8-3.1-2.3
30 |                             c-1.1-0.7-2.3-0.5-3.4,0.3c-0.5,0.4-0.8,1-1,1.6c-0.4,1.5,0.4,2.9,0.8,3.4l0.9,1c0.2,0.2,0.6,0.8,0.4,1.5c-0.3,0.8-1.2,1.3-2.1,1
31 |                             c-0.4-0.2-1-0.5-0.9-0.9c0.1-0.2,0.2-0.3,0.3-0.5s0.1-0.3,0.1-0.3c0.2-0.6-0.1-1.4-0.7-1.6c-0.6-0.2-1.2,0-1.3,0.8
32 |                             C4.3,38.4,4.7,40,6.8,40.8z M46.1,20.9c0-4.2-3.2-7.5-7.1-7.5h-3.8C34.8,10.8,32.7,9,30.2,9L-2.3,9.1c-2.8,0.1-4.9,2.4-4.9,5.4
33 |                             L-7,58.6c0,4.8,8.1,13.9,11.6,14.1l34.7-0.1c3.9,0,7-3.4,7-7.6L46.1,20.9z M-0.3,36.4c0-8.6,6.5-15.6,14.5-15.6
34 |                             c8,0,14.5,7,14.5,15.6S22.1,52,14.2,52C6.1,52-0.3,45-0.3,36.4z M42.1,65.1c0,1.8-1.5,3.1-3.1,3.1H4.6c-0.7,0-3-1.8-4.5-4.4h30.4
35 |                             c2.8,0,5-2.4,5-5.4V17.9h3.7c1.6,0,2.9,1.4,2.9,3.1V65.1L42.1,65.1z"/>
36 |                     </svg>
37 | 
38 |                     Read the documentation to learn
39 |                     <a href="http://symfony.com/doc/{{ constant('Symfony\\Component\\HttpKernel\\Kernel::VERSION')[:3] }}/book/page_creation.html">
40 |                         How to create your first page in Symfony
41 |                     </a>
42 |                 </p>
43 |             </div>
44 | 
45 |         </div>
46 |     </div>
47 | {% endblock %}
48 | 
49 | {% block stylesheets %}
50 | <style>
51 |     body { background: #F5F5F5; font: 18px/1.5 sans-serif; }
52 |     h1, h2 { line-height: 1.2; margin: 0 0 .5em; }
53 |     h1 { font-size: 36px; }
54 |     h2 { font-size: 21px; margin-bottom: 1em; }
55 |     p { margin: 0 0 1em 0; }
56 |     a { color: #0000F0; }
57 |     a:hover { text-decoration: none; }
58 |     code { background: #F5F5F5; max-width: 100px; padding: 2px 6px; word-wrap: break-word; }
59 |     #wrapper { background: #FFF; margin: 1em auto; max-width: 800px; width: 95%; }
60 |     #container { padding: 2em; }
61 |     #welcome, #status { margin-bottom: 2em; }
62 |     #welcome h1 span { display: block; font-size: 75%; }
63 |     #icon-status, #icon-book { float: left; height: 64px; margin-right: 1em; margin-top: -4px; width: 64px; }
64 |     #icon-book { display: none; }
65 | 
66 |     @media (min-width: 768px) {
67 |         #wrapper { width: 80%; margin: 2em auto; }
68 |         #icon-book { display: inline-block; }
69 |         #status a, #next a { display: block; }
70 | 
71 |         @-webkit-keyframes fade-in { 0% { opacity: 0; } 100% { opacity: 1; } }
72 |         @keyframes fade-in { 0% { opacity: 0; } 100% { opacity: 1; } }
73 |         .sf-toolbar { opacity: 0; -webkit-animation: fade-in 1s .2s forwards; animation: fade-in 1s .2s forwards;}
74 |     }
75 | </style>
76 | {% endblock %}
77 | 


--------------------------------------------------------------------------------
/app/autoload.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | use Doctrine\Common\Annotations\AnnotationRegistry;
 4 | use Composer\Autoload\ClassLoader;
 5 | 
 6 | /**
 7 |  * @var ClassLoader $loader
 8 |  */
 9 | $loader = require __DIR__.'/../vendor/autoload.php';
10 | 
11 | AnnotationRegistry::registerLoader([$loader, 'loadClass']);
12 | 
13 | return $loader;
14 | 


--------------------------------------------------------------------------------
/app/config/config.yml:
--------------------------------------------------------------------------------
 1 | imports:
 2 |     - { resource: parameters.yml }
 3 |     - { resource: security.yml }
 4 |     - { resource: services.yml }
 5 | 
 6 | # Put parameters here that don't need to change on each machine where the app is deployed
 7 | # http://symfony.com/doc/current/best_practices/configuration.html#application-related-configuration
 8 | parameters:
 9 |     locale: en
10 | 
11 | framework:
12 |     #esi:             ~
13 |     #translator:      { fallbacks: ["%locale%"] }
14 |     secret:          "%secret%"
15 |     router:
16 |         resource: "%kernel.root_dir%/config/routing.yml"
17 |         strict_requirements: ~
18 |     form:            ~
19 |     csrf_protection: ~
20 |     validation:      { enable_annotations: true }
21 |     #serializer:      { enable_annotations: true }
22 |     templating:
23 |         engines: ['twig']
24 |     default_locale:  "%locale%"
25 |     trusted_hosts:   ~
26 |     trusted_proxies: ~
27 |     session:
28 |         # http://symfony.com/doc/current/reference/configuration/framework.html#handler-id
29 |         handler_id:  session.handler.native_file
30 |         save_path:   "%kernel.root_dir%/../var/sessions/%kernel.environment%"
31 |     fragments:       ~
32 |     http_method_override: true
33 |     assets: ~
34 | 
35 | # Twig Configuration
36 | twig:
37 |     debug:            "%kernel.debug%"
38 |     strict_variables: "%kernel.debug%"
39 | 
40 | # Doctrine Configuration
41 | doctrine:
42 |     dbal:
43 |         driver:   pdo_mysql
44 |         host:     "%database_host%"
45 |         port:     "%database_port%"
46 |         dbname:   "%database_name%"
47 |         user:     "%database_user%"
48 |         password: "%database_password%"
49 |         charset:  UTF8
50 |         # if using pdo_sqlite as your database driver:
51 |         #   1. add the path in parameters.yml
52 |         #     e.g. database_path: "%kernel.root_dir%/data/data.db3"
53 |         #   2. Uncomment database_path in parameters.yml.dist
54 |         #   3. Uncomment next line:
55 |         #     path:     "%database_path%"
56 | 
57 |     orm:
58 |         auto_generate_proxy_classes: "%kernel.debug%"
59 |         naming_strategy: doctrine.orm.naming_strategy.underscore
60 |         auto_mapping: true
61 | 
62 | # Swiftmailer Configuration
63 | swiftmailer:
64 |     transport: "%mailer_transport%"
65 |     host:      "%mailer_host%"
66 |     username:  "%mailer_user%"
67 |     password:  "%mailer_password%"
68 |     spool:     { type: memory }
69 | 


--------------------------------------------------------------------------------
/app/config/config_dev.yml:
--------------------------------------------------------------------------------
 1 | imports:
 2 |     - { resource: config.yml }
 3 | 
 4 | framework:
 5 |     router:
 6 |         resource: "%kernel.root_dir%/config/routing_dev.yml"
 7 |         strict_requirements: true
 8 |     profiler: { only_exceptions: false }
 9 | 
10 | web_profiler:
11 |     toolbar: true
12 |     intercept_redirects: false
13 | 
14 | monolog:
15 |     handlers:
16 |         main:
17 |             type: stream
18 |             path: "%kernel.logs_dir%/%kernel.environment%.log"
19 |             level: debug
20 |             channels: [!event]
21 |         console:
22 |             type:   console
23 |             channels: [!event, !doctrine]
24 |         # uncomment to get logging in your browser
25 |         # you may have to allow bigger header sizes in your Web server configuration
26 |         #firephp:
27 |         #    type:   firephp
28 |         #    level:  info
29 |         #chromephp:
30 |         #    type:   chromephp
31 |         #    level:  info
32 | 
33 | #swiftmailer:
34 | #    delivery_address: me@example.com
35 | 


--------------------------------------------------------------------------------
/app/config/config_prod.yml:
--------------------------------------------------------------------------------
 1 | imports:
 2 |     - { resource: config.yml }
 3 | 
 4 | #doctrine:
 5 | #    orm:
 6 | #        metadata_cache_driver: apc
 7 | #        result_cache_driver: apc
 8 | #        query_cache_driver: apc
 9 | 
10 | monolog:
11 |     handlers:
12 |         main:
13 |             type:         fingers_crossed
14 |             action_level: error
15 |             handler:      nested
16 |         nested:
17 |             type:  stream
18 |             path:  "%kernel.logs_dir%/%kernel.environment%.log"
19 |             level: debug
20 |         console:
21 |             type:  console
22 | 


--------------------------------------------------------------------------------
/app/config/config_test.yml:
--------------------------------------------------------------------------------
 1 | imports:
 2 |     - { resource: config_dev.yml }
 3 | 
 4 | framework:
 5 |     test: ~
 6 |     session:
 7 |         storage_id: session.storage.mock_file
 8 |     profiler:
 9 |         collect: false
10 | 
11 | web_profiler:
12 |     toolbar: false
13 |     intercept_redirects: false
14 | 
15 | swiftmailer:
16 |     disable_delivery: true
17 | 


--------------------------------------------------------------------------------
/app/config/parameters.yml.dist:
--------------------------------------------------------------------------------
 1 | # This file is a "template" of what your parameters.yml file should look like
 2 | # Set parameters here that may be different on each deployment target of the app, e.g. development, staging, production.
 3 | # http://symfony.com/doc/current/best_practices/configuration.html#infrastructure-related-configuration
 4 | parameters:
 5 |     database_host:     127.0.0.1
 6 |     database_port:     ~
 7 |     database_name:     symfony
 8 |     database_user:     root
 9 |     database_password: ~
10 |     # You should uncomment this if you want use pdo_sqlite
11 |     # database_path: "%kernel.root_dir%/data.db3"
12 | 
13 |     mailer_transport:  smtp
14 |     mailer_host:       127.0.0.1
15 |     mailer_user:       ~
16 |     mailer_password:   ~
17 | 
18 |     # A secret key that's used to generate certain security-related tokens
19 |     secret:            ThisTokenIsNotSoSecretChangeIt
20 | 


--------------------------------------------------------------------------------
/app/config/routing.yml:
--------------------------------------------------------------------------------
1 | app:
2 |     resource: "@AppBundle/Controller/"
3 |     type:     annotation
4 | 


--------------------------------------------------------------------------------
/app/config/routing_dev.yml:
--------------------------------------------------------------------------------
 1 | _wdt:
 2 |     resource: "@WebProfilerBundle/Resources/config/routing/wdt.xml"
 3 |     prefix:   /_wdt
 4 | 
 5 | _profiler:
 6 |     resource: "@WebProfilerBundle/Resources/config/routing/profiler.xml"
 7 |     prefix:   /_profiler
 8 | 
 9 | _errors:
10 |     resource: "@TwigBundle/Resources/config/routing/errors.xml"
11 |     prefix:   /_error
12 | 
13 | _main:
14 |     resource: routing.yml
15 | 


--------------------------------------------------------------------------------
/app/config/security.yml:
--------------------------------------------------------------------------------
 1 | # To get started with security, check out the documentation:
 2 | # http://symfony.com/doc/current/book/security.html
 3 | security:
 4 | 
 5 |     # http://symfony.com/doc/current/book/security.html#where-do-users-come-from-user-providers
 6 |     providers:
 7 |         in_memory:
 8 |             memory: ~
 9 | 
10 |     firewalls:
11 |         # disables authentication for assets and the profiler, adapt it according to your needs
12 |         dev:
13 |             pattern: ^/(_(profiler|wdt)|css|images|js)/
14 |             security: false
15 | 
16 |         main:
17 |             anonymous: ~
18 |             # activate different ways to authenticate
19 | 
20 |             # http_basic: ~
21 |             # http://symfony.com/doc/current/book/security.html#a-configuring-how-your-users-will-authenticate
22 | 
23 |             # form_login: ~
24 |             # http://symfony.com/doc/current/cookbook/security/form_login_setup.html
25 | 


--------------------------------------------------------------------------------
/app/config/services.yml:
--------------------------------------------------------------------------------
 1 | # Learn more about services, parameters and containers at
 2 | # http://symfony.com/doc/current/book/service_container.html
 3 | parameters:
 4 | #    parameter_name: value
 5 | 
 6 | services:
 7 | 
 8 |     app.eloquent:
 9 |         class: AppBundle\Eloquent
10 |         arguments: []
11 | 
12 |     app.stack_exchange_api:
13 |         class: AppBundle\StackExchangeApi
14 |         arguments: []
15 | 
16 |     app.question_crawler:
17 |         class: AppBundle\QuestionCrawler
18 |         arguments: [%kernel.root_dir%, '@app.eloquent', '@app.stack_exchange_api']
19 | 
20 |     app.user_finder:
21 |         class: AppBundle\UserFinder
22 |         arguments: ['@app.eloquent', '@app.stack_exchange_api']
23 | 
24 |     app.injection_finder:
25 |         class: AppBundle\InjectionFinder
26 |         arguments: ['@app.eloquent']
27 | 
28 |     app.report_service:
29 |         class: AppBundle\ReportService
30 |         arguments: ['@app.eloquent', '@app.cache']
31 | 
32 |     app.cache:
33 |         class: AppBundle\CacheService
34 |         arguments: []
35 | 


--------------------------------------------------------------------------------
/bin/console:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env php
 2 | <?php
 3 | 
 4 | use Symfony\Bundle\FrameworkBundle\Console\Application;
 5 | use Symfony\Component\Console\Input\ArgvInput;
 6 | use Symfony\Component\Debug\Debug;
 7 | 
 8 | // if you don't want to setup permissions the proper way, just uncomment the following PHP line
 9 | // read http://symfony.com/doc/current/book/installation.html#configuration-and-setup for more information
10 | //umask(0000);
11 | 
12 | set_time_limit(0);
13 | 
14 | /**
15 |  * @var Composer\Autoload\ClassLoader $loader
16 |  */
17 | $loader = require __DIR__.'/../app/autoload.php';
18 | 
19 | $input = new ArgvInput();
20 | $env = $input->getParameterOption(['--env', '-e'], getenv('SYMFONY_ENV') ?: 'dev');
21 | $debug = getenv('SYMFONY_DEBUG') !== '0' && !$input->hasParameterOption(['--no-debug', '']) && $env !== 'prod';
22 | 
23 | if ($debug) {
24 |     Debug::enable();
25 | }
26 | 
27 | $kernel = new AppKernel($env, $debug);
28 | $application = new Application($kernel);
29 | $application->run($input);
30 | 


--------------------------------------------------------------------------------
/bin/symfony_requirements:
--------------------------------------------------------------------------------
  1 | #!/usr/bin/env php
  2 | <?php
  3 | 
  4 | require_once dirname(__FILE__).'/../var/SymfonyRequirements.php';
  5 | 
  6 | $lineSize = 70;
  7 | $symfonyRequirements = new SymfonyRequirements();
  8 | $iniPath = $symfonyRequirements->getPhpIniConfigPath();
  9 | 
 10 | echo_title('Symfony Requirements Checker');
 11 | 
 12 | echo '> PHP is using the following php.ini file:'.PHP_EOL;
 13 | if ($iniPath) {
 14 |     echo_style('green', '  '.$iniPath);
 15 | } else {
 16 |     echo_style('yellow', '  WARNING: No configuration file (php.ini) used by PHP!');
 17 | }
 18 | 
 19 | echo PHP_EOL.PHP_EOL;
 20 | 
 21 | echo '> Checking Symfony requirements:'.PHP_EOL.'  ';
 22 | 
 23 | $messages = array();
 24 | foreach ($symfonyRequirements->getRequirements() as $req) {
 25 |     if ($helpText = get_error_message($req, $lineSize)) {
 26 |         echo_style('red', 'E');
 27 |         $messages['error'][] = $helpText;
 28 |     } else {
 29 |         echo_style('green', '.');
 30 |     }
 31 | }
 32 | 
 33 | $checkPassed = empty($messages['error']);
 34 | 
 35 | foreach ($symfonyRequirements->getRecommendations() as $req) {
 36 |     if ($helpText = get_error_message($req, $lineSize)) {
 37 |         echo_style('yellow', 'W');
 38 |         $messages['warning'][] = $helpText;
 39 |     } else {
 40 |         echo_style('green', '.');
 41 |     }
 42 | }
 43 | 
 44 | if ($checkPassed) {
 45 |     echo_block('success', 'OK', 'Your system is ready to run Symfony projects');
 46 | } else {
 47 |     echo_block('error', 'ERROR', 'Your system is not ready to run Symfony projects');
 48 | 
 49 |     echo_title('Fix the following mandatory requirements', 'red');
 50 | 
 51 |     foreach ($messages['error'] as $helpText) {
 52 |         echo ' * '.$helpText.PHP_EOL;
 53 |     }
 54 | }
 55 | 
 56 | if (!empty($messages['warning'])) {
 57 |     echo_title('Optional recommendations to improve your setup', 'yellow');
 58 | 
 59 |     foreach ($messages['warning'] as $helpText) {
 60 |         echo ' * '.$helpText.PHP_EOL;
 61 |     }
 62 | }
 63 | 
 64 | echo PHP_EOL;
 65 | echo_style('title', 'Note');
 66 | echo '  The command console could use a different php.ini file'.PHP_EOL;
 67 | echo_style('title', '~~~~');
 68 | echo '  than the one used with your web server. To be on the'.PHP_EOL;
 69 | echo '      safe side, please check the requirements from your web'.PHP_EOL;
 70 | echo '      server using the ';
 71 | echo_style('yellow', 'web/config.php');
 72 | echo ' script.'.PHP_EOL;
 73 | echo PHP_EOL;
 74 | 
 75 | exit($checkPassed ? 0 : 1);
 76 | 
 77 | function get_error_message(Requirement $requirement, $lineSize)
 78 | {
 79 |     if ($requirement->isFulfilled()) {
 80 |         return;
 81 |     }
 82 | 
 83 |     $errorMessage = wordwrap($requirement->getTestMessage(), $lineSize - 3, PHP_EOL.'   ').PHP_EOL;
 84 |     $errorMessage .= '   > '.wordwrap($requirement->getHelpText(), $lineSize - 5, PHP_EOL.'   > ').PHP_EOL;
 85 | 
 86 |     return $errorMessage;
 87 | }
 88 | 
 89 | function echo_title($title, $style = null)
 90 | {
 91 |     $style = $style ?: 'title';
 92 | 
 93 |     echo PHP_EOL;
 94 |     echo_style($style, $title.PHP_EOL);
 95 |     echo_style($style, str_repeat('~', strlen($title)).PHP_EOL);
 96 |     echo PHP_EOL;
 97 | }
 98 | 
 99 | function echo_style($style, $message)
100 | {
101 |     // ANSI color codes
102 |     $styles = array(
103 |         'reset' => "\033[0m",
104 |         'red' => "\033[31m",
105 |         'green' => "\033[32m",
106 |         'yellow' => "\033[33m",
107 |         'error' => "\033[37;41m",
108 |         'success' => "\033[37;42m",
109 |         'title' => "\033[34m",
110 |     );
111 |     $supports = has_color_support();
112 | 
113 |     echo($supports ? $styles[$style] : '').$message.($supports ? $styles['reset'] : '');
114 | }
115 | 
116 | function echo_block($style, $title, $message)
117 | {
118 |     $message = ' '.trim($message).' ';
119 |     $width = strlen($message);
120 | 
121 |     echo PHP_EOL.PHP_EOL;
122 | 
123 |     echo_style($style, str_repeat(' ', $width));
124 |     echo PHP_EOL;
125 |     echo_style($style, str_pad(' ['.$title.']', $width, ' ', STR_PAD_RIGHT));
126 |     echo PHP_EOL;
127 |     echo_style($style, $message);
128 |     echo PHP_EOL;
129 |     echo_style($style, str_repeat(' ', $width));
130 |     echo PHP_EOL;
131 | }
132 | 
133 | function has_color_support()
134 | {
135 |     static $support;
136 | 
137 |     if (null === $support) {
138 |         if (DIRECTORY_SEPARATOR == '\\') {
139 |             $support = false !== getenv('ANSICON') || 'ON' === getenv('ConEmuANSI');
140 |         } else {
141 |             $support = function_exists('posix_isatty') && @posix_isatty(STDOUT);
142 |         }
143 |     }
144 | 
145 |     return $support;
146 | }
147 | 


--------------------------------------------------------------------------------
/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "laurent/testimport2",
 3 |     "license": "proprietary",
 4 |     "type": "project",
 5 |     "autoload": {
 6 |         "psr-4": {
 7 |             "": "src/"
 8 |         },
 9 |         "classmap": [
10 |             "app/AppKernel.php",
11 |             "app/AppCache.php"
12 |         ]
13 |     },
14 |     "autoload-dev": {
15 |         "psr-4": {
16 |             "Tests\\": "tests/"
17 |         }
18 |     },
19 |     "require": {
20 |         "php": ">=5.5.9",
21 |         "symfony/symfony": "3.1.*",
22 |         "doctrine/orm": "^2.5",
23 |         "doctrine/doctrine-bundle": "^1.6",
24 |         "doctrine/doctrine-cache-bundle": "^1.2",
25 |         "symfony/swiftmailer-bundle": "^2.3",
26 |         "symfony/monolog-bundle": "^2.8",
27 |         "symfony/polyfill-apcu": "^1.0",
28 |         "sensio/distribution-bundle": "^5.0",
29 |         "sensio/framework-extra-bundle": "^3.0.2",
30 |         "incenteev/composer-parameter-handler": "^2.0",
31 |         "illuminate/database": "*"
32 |     },
33 |     "require-dev": {
34 |         "sensio/generator-bundle": "^3.0",
35 |         "symfony/phpunit-bridge": "^3.0"
36 |     },
37 |     "scripts": {
38 |         "symfony-scripts": [
39 |             "Incenteev\\ParameterHandler\\ScriptHandler::buildParameters",
40 |             "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::buildBootstrap",
41 |             "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::clearCache",
42 |             "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::installAssets",
43 |             "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::installRequirementsFile",
44 |             "Sensio\\Bundle\\DistributionBundle\\Composer\\ScriptHandler::prepareDeploymentTarget"
45 |         ],
46 |         "post-install-cmd": [
47 |             "@symfony-scripts"
48 |         ],
49 |         "post-update-cmd": [
50 |             "@symfony-scripts"
51 |         ]
52 |     },
53 |     "extra": {
54 |         "symfony-app-dir": "app",
55 |         "symfony-bin-dir": "bin",
56 |         "symfony-var-dir": "var",
57 |         "symfony-web-dir": "web",
58 |         "symfony-tests-dir": "tests",
59 |         "symfony-assets-install": "relative",
60 |         "incenteev-parameters": {
61 |             "file": "app/config/parameters.yml"
62 |         }
63 |     }
64 | }
65 | 


--------------------------------------------------------------------------------
/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | 
 3 | <!-- https://phpunit.de/manual/current/en/appendixes.configuration.html -->
 4 | <phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 5 |          xsi:noNamespaceSchemaLocation="http://schema.phpunit.de/4.8/phpunit.xsd"
 6 |          backupGlobals="false"
 7 |          colors="true"
 8 |          bootstrap="app/autoload.php"
 9 | >
10 |     <php>
11 |         <ini name="error_reporting" value="-1" />
12 |         <server name="KERNEL_DIR" value="app/" />
13 |     </php>
14 | 
15 |     <testsuites>
16 |         <testsuite name="Project Test Suite">
17 |             <directory>tests</directory>
18 |         </testsuite>
19 |     </testsuites>
20 | 
21 |     <filter>
22 |         <whitelist>
23 |             <directory>src</directory>
24 |             <exclude>
25 |                 <directory>src/*Bundle/Resources</directory>
26 |                 <directory>src/*/*Bundle/Resources</directory>
27 |                 <directory>src/*/Bundle/*Bundle/Resources</directory>
28 |             </exclude>
29 |         </whitelist>
30 |     </filter>
31 | </phpunit>
32 | 


--------------------------------------------------------------------------------
/process-questions.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | set -e
 3 | 
 4 | PHP_CMD=/usr/bin/php7.1
 5 | 
 6 | SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 7 | 
 8 | echo "app:crawl-questions"
 9 | $PHP_CMD $SCRIPT_DIR/bin/console -vvv app:crawl-questions >> "$SCRIPT_DIR/crawl-question-3.log" 2>&1
10 | echo "app:find-winners"
11 | $PHP_CMD $SCRIPT_DIR/bin/console -vvv app:find-winners
12 | echo "app:find-users"
13 | $PHP_CMD $SCRIPT_DIR/bin/console -vvv app:find-users
14 | 
15 | $PHP_CMD $SCRIPT_DIR/bin/console -vvv app:generate-static-website
16 | cp "$SCRIPT_DIR/web/index.html" /var/www/laurent22.github.io/so-injections/
17 | cd /var/www/laurent22.github.io/so-injections/
18 | git add .
19 | git commit -m "script auto-update" || true
20 | git push
21 | cd -


--------------------------------------------------------------------------------
/src/.htaccess:
--------------------------------------------------------------------------------
1 | <IfModule mod_authz_core.c>
2 |     Require all denied
3 | </IfModule>
4 | <IfModule !mod_authz_core.c>
5 |     Order deny,allow
6 |     Deny from all
7 | </IfModule>
8 | 


--------------------------------------------------------------------------------
/src/AppBundle/AppBundle.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle;
 4 | 
 5 | use Symfony\Component\HttpKernel\Bundle\Bundle;
 6 | 
 7 | class AppBundle extends Bundle
 8 | {
 9 | }
10 | 


--------------------------------------------------------------------------------
/src/AppBundle/BaseService.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle;
 4 | 
 5 | class BaseService {
 6 | 
 7 | 	protected $output_ = null;
 8 | 
 9 | 	public function setOutput($output) {
10 | 		$this->output_ = $output;
11 | 	}
12 | 
13 | 	protected function writeln($s) {
14 | 		if (!$this->output_) return;
15 | 		$this->output_->writeln($this->formatLine($s));
16 | 	}
17 | 
18 | 	protected function write($s) {
19 | 		if (!$this->output_) return;
20 | 		$this->output_->write($this->formatLine($s));
21 | 	}
22 | 
23 | 	private function formatLine($s) {
24 | 		return date('Y-m-d H:i:s', time()) . ': ' . $s;
25 | 	}
26 | 
27 | }


--------------------------------------------------------------------------------
/src/AppBundle/CacheService.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle;
 4 | 
 5 | use Symfony\Component\Cache\Adapter\FilesystemAdapter;
 6 | 
 7 | // Wrapper over the over-complicated Symfony cache component
 8 | class CacheService {
 9 | 
10 | 	private $adapter_ = null;
11 | 
12 | 	private function adapter() {
13 | 		if (!$this->adapter_) $this->adapter_ = new FilesystemAdapter();
14 | 		return $this->adapter_;
15 | 	}
16 | 
17 | 	public function get($k) {
18 | 		$entry = $this->adapter()->getItem(md5($k));
19 | 		return $entry->isHit() ? json_decode($entry->get(), true) : null;
20 | 	}
21 | 
22 | 	public function set($k, $v, $expiryTime = null) {
23 | 		$entry = $this->adapter()->getItem(md5($k));
24 | 		$entry->set(json_encode($v));
25 | 		if ($expiryTime) $entry->expiresAfter($expiryTime);
26 | 		$this->adapter()->save($entry);
27 | 	}
28 | 
29 | 	public function getOrSet($k, $func, $expiryTime = null) {
30 | 		$v = $this->get($k);
31 | 		if ($v === null) {
32 | 			$v = $func();
33 | 			$this->set($k, $v, $expiryTime);
34 | 		}
35 | 		return $v;
36 | 	}
37 | 
38 | }


--------------------------------------------------------------------------------
/src/AppBundle/Command/CrawlQuestionsCommand.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Command;
 4 | 
 5 | use Symfony\Component\Console\Command\Command;
 6 | use Symfony\Component\Console\Input\InputInterface;
 7 | use Symfony\Component\Console\Output\OutputInterface;
 8 | use Symfony\Bundle\FrameworkBundle\Command\ContainerAwareCommand;
 9 | 
10 | class CrawlQuestionsCommand extends ContainerAwareCommand {
11 | 	
12 | 	protected function configure() {
13 | 		$this->setName('app:crawl-questions');
14 | 		$this->setDescription('Crawl PHP questions from Stack Overflow and save them to the database.');
15 | 	}
16 | 
17 | 	protected function execute(InputInterface $input, OutputInterface $output) {
18 | 		$crawler = $this->getContainer()->get('app.question_crawler');
19 | 		$crawler->setOutput($output);
20 | 		$crawler->execute();
21 | 	}
22 | 
23 | }


--------------------------------------------------------------------------------
/src/AppBundle/Command/FindUsersCommand.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Command;
 4 | 
 5 | use Symfony\Component\Console\Command\Command;
 6 | use Symfony\Component\Console\Input\InputInterface;
 7 | use Symfony\Component\Console\Output\OutputInterface;
 8 | use Symfony\Bundle\FrameworkBundle\Command\ContainerAwareCommand;
 9 | 
10 | class FindUsersCommand extends ContainerAwareCommand {
11 | 	
12 | 	protected function configure() {
13 | 		$this->setName('app:find-users');
14 | 		$this->setDescription('Extract users from the questions stored in the database.');
15 | 	}
16 | 
17 | 	protected function execute(InputInterface $input, OutputInterface $output) {
18 | 		$crawler = $this->getContainer()->get('app.user_finder');
19 | 		$crawler->setOutput($output);
20 | 		$crawler->execute();
21 | 	}
22 | 
23 | }


--------------------------------------------------------------------------------
/src/AppBundle/Command/FindWinnersCommand.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Command;
 4 | 
 5 | use Symfony\Component\Console\Command\Command;
 6 | use Symfony\Component\Console\Input\InputInterface;
 7 | use Symfony\Component\Console\Output\OutputInterface;
 8 | use Symfony\Bundle\FrameworkBundle\Command\ContainerAwareCommand;
 9 | 
10 | class FindWinnersCommand extends ContainerAwareCommand {
11 | 	
12 | 	protected function configure() {
13 | 		$this->setName('app:find-winners');
14 | 		$this->setDescription('Searches in the database for questions that contain SQL injections.');
15 | 	}
16 | 
17 | 	protected function execute(InputInterface $input, OutputInterface $output) {
18 | 		$service = $this->getContainer()->get('app.injection_finder');
19 | 		$service->setOutput($output);
20 | 		$service->execute();
21 | 	}
22 | 
23 | }


--------------------------------------------------------------------------------
/src/AppBundle/Command/GenerateStaticWebsiteCommand.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Command;
 4 | 
 5 | use Symfony\Component\Console\Command\Command;
 6 | use Symfony\Component\Console\Input\InputInterface;
 7 | use Symfony\Component\Console\Output\OutputInterface;
 8 | use Symfony\Bundle\FrameworkBundle\Command\ContainerAwareCommand;
 9 | 
10 | class GenerateStaticWebsiteCommand extends ContainerAwareCommand {
11 | 	
12 | 	protected function configure() {
13 | 		$this->setName('app:generate-static-website');
14 | 		$this->setDescription('Generate static website.');
15 | 	}
16 | 
17 | 	protected function execute(InputInterface $input, OutputInterface $output) {
18 | 		$service = $this->getContainer()->get('app.report_service');
19 | 		$service->setOutput($output);
20 | 		
21 | 		$rootDir = $this->getContainer()->get('kernel')->getRootDir();
22 | 		$content = file_get_contents(dirname($rootDir) . '/web/index_template.html');
23 | 		$outputFile = dirname($rootDir) . '/web/index.html';
24 | 
25 | 		$content = str_replace('[MONTHLY_REPORT]', json_encode($service->monthlyInjections()), $content);
26 | 		$content = str_replace('[COUNTRY_REPORT]', json_encode($service->sqlInjectionsPerCountry()), $content);
27 | 		$content = str_replace('[LATEST_INJECTIONS]', json_encode($service->latestInjections()), $content);
28 | 		$content = str_replace('[GENERATION_TIMESTAMP]', json_encode(time()), $content);
29 | 
30 | 		file_put_contents($outputFile, $content);
31 | 	}
32 | 
33 | }


--------------------------------------------------------------------------------
/src/AppBundle/Command/PopulatePlaceTablesCommand.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | namespace AppBundle\Command;
  4 | 
  5 | use Symfony\Component\Console\Command\Command;
  6 | use Symfony\Component\Console\Input\InputInterface;
  7 | use Symfony\Component\Console\Output\OutputInterface;
  8 | use Symfony\Bundle\FrameworkBundle\Command\ContainerAwareCommand;
  9 | use AppBundle\Model\Country;
 10 | use AppBundle\Model\City;
 11 | use AppBundle\Model\Place;
 12 | 
 13 | class PopulatePlaceTablesCommand extends ContainerAwareCommand {
 14 | 	
 15 | 	protected function configure() {
 16 | 		$this->setName('app:populate-place-tables');
 17 | 		$this->setDescription('Populate place tables with data.');
 18 | 	}
 19 | 
 20 | 	protected function execute(InputInterface $input, OutputInterface $output) {
 21 | 		$e = $this->getContainer()->get('app.eloquent');
 22 | 		$con = $e->connection();
 23 | 
 24 | 		$rootDir = $this->getContainer()->get('kernel')->getRootDir();
 25 | 		$placesDir = dirname($rootDir) . '/var/places';
 26 | 
 27 | 		$con->getPdo()->query('TRUNCATE countries');
 28 | 		$con->getPdo()->query('TRUNCATE cities');
 29 | 		$con->getPdo()->query('TRUNCATE places');
 30 | 
 31 | 		// ---------------------------------------------------------------------------
 32 | 		// Countries
 33 | 		// ---------------------------------------------------------------------------
 34 | 
 35 | 		$con->beginTransaction();
 36 | 
 37 | 		$countryGeonameIds = array();
 38 | 		$countryCodeToIds = array();
 39 | 		$file = fopen($placesDir . '/countryInfo.txt', 'r');
 40 | 		if (!$file) throw new \Exception('Cannot open file');
 41 | 		while (($line = fgets($file)) !== false) {
 42 | 			$line = trim($line);
 43 | 			if ($line == '' || $line[0] == '#') continue;
 44 | 			$items = explode("\t", trim($line));
 45 | 			$isoCode = $items[0];
 46 | 			$geonameId = $items[16];
 47 | 			$c = new Country();
 48 | 			$c->code = $isoCode;
 49 | 			$c->geoname_id = $geonameId;
 50 | 			$c->save();
 51 | 
 52 | 			$countryGeonameIds[] = $geonameId;
 53 | 			$countryCodeToIds[$isoCode] = $geonameId;
 54 | 		}
 55 | 		fclose($file);
 56 | 
 57 | 		$con->commit();
 58 | 
 59 | 		// $s = '';
 60 | 		// foreach ($countryGeonameIds as $id) {
 61 | 		// 	if ($s != '') $s .= '|';
 62 | 		// 	$s .= $id;
 63 | 		// }
 64 | 		// $s = sprintf('grep -P \'^(%s)\t\' allCountries.txt > countries_only.txt', $s);
 65 | 		// echo $s . "\n"; die();
 66 | 
 67 | 		// ---------------------------------------------------------------------------
 68 | 		// Country names
 69 | 		// ---------------------------------------------------------------------------
 70 | 
 71 | 		$con->beginTransaction();
 72 | 
 73 | 		$file = fopen($placesDir . '/countries_only.txt', 'r');
 74 | 		if (!$file) throw new \Exception('Cannot open file');
 75 | 		while (($line = fgets($file)) !== false) {
 76 | 			$line = trim($line);
 77 | 			if ($line == '' || $line[0] == '#') continue;
 78 | 			$items = explode("\t", trim($line));
 79 | 
 80 | 			$geonameId = trim($items[0]);
 81 | 			$names = trim($items[3]);
 82 | 			if (!empty($names)) {
 83 | 				$names = explode(',', $names);
 84 | 				$names = array_merge(array($items[1]), $names);
 85 | 			} else {
 86 | 				$names = array($items[1]);
 87 | 			}
 88 | 
 89 | 			$names = array_unique($names);
 90 | 
 91 | 			foreach ($names as $name) {
 92 | 				$name = trim($name);
 93 | 				if (empty($name)) continue;
 94 | 				$place = new Place();
 95 | 				$place->city_id = null;
 96 | 				$place->country_id = $geonameId;
 97 | 				$place->name = $name;
 98 | 				$place->save();
 99 | 			}
100 | 		}
101 | 		fclose($file);
102 | 
103 | 		$con->commit();
104 | 
105 | 		// ---------------------------------------------------------------------------
106 | 		// Cities
107 | 		// ---------------------------------------------------------------------------
108 | 
109 | 		$con->beginTransaction();
110 | 
111 | 		$addCount = 0;
112 | 		$commitCount = 0;
113 | 		$file = fopen($placesDir . '/cities1000.txt', 'r');
114 | 		if (!$file) throw new \Exception('Cannot open file');
115 | 		while (($line = fgets($file)) !== false) {
116 | 			$line = trim($line);
117 | 			if ($line == '' || $line[0] == '#') continue;
118 | 			$items = explode("\t", trim($line));
119 | 
120 | 			$geonameId = trim($items[0]);
121 | 			$names = trim($items[3]);
122 | 			if (!empty($names)) {
123 | 				$names = explode(',', $names);
124 | 				$names = array_merge(array($items[1]), $names);
125 | 			} else {
126 | 				$names = array($items[1]);
127 | 			}
128 | 
129 | 			$names = array_unique($names);
130 | 
131 | 			$countryCode = $items[8];
132 | 			if (!isset($countryCodeToIds[$countryCode])) throw new \Exception('Cannot find country code: '  . $countryCode);
133 | 			$countryId = $countryCodeToIds[$countryCode];
134 | 
135 | 			$city = new City();
136 | 			$city->geoname_id = $geonameId;
137 | 			$city->country_id = $countryId;
138 | 			$city->save();
139 | 
140 | 			foreach ($names as $name) {
141 | 				$place = new Place();
142 | 				$place->city_id = $geonameId;
143 | 				$place->country_id = null;
144 | 				$place->name = $name;
145 | 				$place->save();
146 | 			}
147 | 
148 | 			$addCount++;
149 | 			if ($addCount >= 10000) {
150 | 				$addCount = 0;
151 | 				$commitCount++;
152 | 				echo $commitCount . "\n";
153 | 				$con->commit();
154 | 				$con->beginTransaction();
155 | 			}
156 | 		}
157 | 		fclose($file);
158 | 
159 | 		$con->commit();
160 | 	}
161 | 
162 | }


--------------------------------------------------------------------------------
/src/AppBundle/Command/RefreshQuestionsCommand.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Command;
 4 | 
 5 | use Symfony\Component\Console\Command\Command;
 6 | use Symfony\Component\Console\Input\InputInterface;
 7 | use Symfony\Component\Console\Output\OutputInterface;
 8 | use Symfony\Bundle\FrameworkBundle\Command\ContainerAwareCommand;
 9 | 
10 | class RefreshQuestionsCommand extends ContainerAwareCommand {
11 | 	
12 | 	protected function configure() {
13 | 		$this->setName('app:refresh-questions');
14 | 		$this->setDescription('Refresh local questions based on stored JSON object.');
15 | 	}
16 | 
17 | 	protected function execute(InputInterface $input, OutputInterface $output) {
18 | 		$crawler = $this->getContainer()->get('app.question_crawler');
19 | 		$crawler->setOutput($output);
20 | 		$crawler->refreshQuestions();
21 | 	}
22 | 
23 | }


--------------------------------------------------------------------------------
/src/AppBundle/Command/RefreshUsersCommand.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Command;
 4 | 
 5 | use Symfony\Component\Console\Command\Command;
 6 | use Symfony\Component\Console\Input\InputInterface;
 7 | use Symfony\Component\Console\Output\OutputInterface;
 8 | use Symfony\Bundle\FrameworkBundle\Command\ContainerAwareCommand;
 9 | 
10 | class RefreshUsersCommand extends ContainerAwareCommand {
11 | 	
12 | 	protected function configure() {
13 | 		$this->setName('app:refresh-users');
14 | 		$this->setDescription('Refresh local users based on stored JSON object.');
15 | 	}
16 | 
17 | 	protected function execute(InputInterface $input, OutputInterface $output) {
18 | 		$crawler = $this->getContainer()->get('app.user_finder');
19 | 		$crawler->setOutput($output);
20 | 		$crawler->refreshUsers();
21 | 	}
22 | 
23 | }


--------------------------------------------------------------------------------
/src/AppBundle/Controller/DefaultController.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Controller;
 4 | 
 5 | use Sensio\Bundle\FrameworkExtraBundle\Configuration\Route;
 6 | use Symfony\Bundle\FrameworkBundle\Controller\Controller;
 7 | use Symfony\Component\HttpFoundation\Request;
 8 | 
 9 | class DefaultController extends Controller
10 | {
11 |     /**
12 |      * @Route("/", name="homepage")
13 |      */
14 |     public function indexAction(Request $request)
15 |     {
16 |         $db = $this->get('app.eloquent')->connection();
17 |         $users = $db->table('questions')->where('question_id', '=', 61784)->get();
18 | 
19 |         var_dump($users);die();
20 | 
21 |         // replace this example code with whatever you need
22 |         return $this->render('default/index.html.twig', [
23 |             'base_dir' => realpath($this->getParameter('kernel.root_dir').'/..'),
24 |         ]);
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/src/AppBundle/CountryUtils.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | namespace AppBundle;
  4 | 
  5 | class CountryUtils {
  6 | 
  7 | 	static private $countries_ = array(
  8 | 		'AF' => array('Afghanistan'),
  9 | 		'AL' => array('Albania'),
 10 | 		'DZ' => array('Algeria'),
 11 | 		'AS' => array('American Samoa'),
 12 | 		'AD' => array('Andorra'),
 13 | 		'AO' => array('Angola'),
 14 | 		'AI' => array('Anguilla'),
 15 | 		'AQ' => array('Antarctica'),
 16 | 		'AG' => array('Antigua and Barbuda'),
 17 | 		'AR' => array('Argentina'),
 18 | 		'AM' => array('Armenia'),
 19 | 		'AW' => array('Aruba'),
 20 | 		'AU' => array('Australia'),
 21 | 		'AT' => array('Austria'),
 22 | 		'AZ' => array('Azerbaijan'),
 23 | 		'BS' => array('Bahamas'),
 24 | 		'BH' => array('Bahrain'),
 25 | 		'BD' => array('Bangladesh'),
 26 | 		'BB' => array('Barbados'),
 27 | 		'BY' => array('Belarus'),
 28 | 		'BE' => array('Belgium'),
 29 | 		'BZ' => array('Belize'),
 30 | 		'BJ' => array('Benin'),
 31 | 		'BM' => array('Bermuda'),
 32 | 		'BT' => array('Bhutan'),
 33 | 		'BO' => array('Bolivia'),
 34 | 		'BA' => array('Bosnia and Herzegovina'),
 35 | 		'BW' => array('Botswana'),
 36 | 		'BV' => array('Bouvet Island'),
 37 | 		'BR' => array('Brazil'),
 38 | 		'IO' => array('British Indian Ocean Territory'),
 39 | 		'BN' => array('Brunei Darussalam'),
 40 | 		'BG' => array('Bulgaria'),
 41 | 		'BF' => array('Burkina Faso'),
 42 | 		'BI' => array('Burundi'),
 43 | 		'KH' => array('Cambodia'),
 44 | 		'CM' => array('Cameroon'),
 45 | 		'CA' => array('Canada'),
 46 | 		'CV' => array('Cape Verde'),
 47 | 		'KY' => array('Cayman Islands'),
 48 | 		'CF' => array('Central African Republic'),
 49 | 		'TD' => array('Chad'),
 50 | 		'CL' => array('Chile'),
 51 | 		'CN' => array('China'),
 52 | 		'CX' => array('Christmas Island'),
 53 | 		'CC' => array('Cocos (Keeling) Islands'),
 54 | 		'CO' => array('Colombia'),
 55 | 		'KM' => array('Comoros'),
 56 | 		'CG' => array('Congo'),
 57 | 		'CD' => array('Congo, the Democratic Republic of the'),
 58 | 		'CK' => array('Cook Islands'),
 59 | 		'CR' => array('Costa Rica'),
 60 | 		'CI' => array('Cote d\'Ivoire'),
 61 | 		'HR' => array('Croatia'),
 62 | 		'CU' => array('Cuba'),
 63 | 		'CY' => array('Cyprus'),
 64 | 		'CZ' => array('Czech Republic'),
 65 | 		'DK' => array('Denmark'),
 66 | 		'DJ' => array('Djibouti'),
 67 | 		'DM' => array('Dominica'),
 68 | 		'DO' => array('Dominican Republic'),
 69 | 		'EC' => array('Ecuador'),
 70 | 		'EG' => array('Egypt'),
 71 | 		'SV' => array('El Salvador'),
 72 | 		'GQ' => array('Equatorial Guinea'),
 73 | 		'ER' => array('Eritrea'),
 74 | 		'EE' => array('Estonia'),
 75 | 		'ET' => array('Ethiopia'),
 76 | 		'FK' => array('Falkland Islands (Malvinas)'),
 77 | 		'FO' => array('Faroe Islands'),
 78 | 		'FJ' => array('Fiji'),
 79 | 		'FI' => array('Finland'),
 80 | 		'FR' => array('France'),
 81 | 		'GF' => array('French Guiana'),
 82 | 		'PF' => array('French Polynesia'),
 83 | 		'TF' => array('French Southern Territories'),
 84 | 		'GA' => array('Gabon'),
 85 | 		'GM' => array('Gambia'),
 86 | 		'GE' => array('Georgia'),
 87 | 		'DE' => array('Germany', 'Deutschland'),
 88 | 		'GH' => array('Ghana'),
 89 | 		'GI' => array('Gibraltar'),
 90 | 		'GR' => array('Greece'),
 91 | 		'GL' => array('Greenland'),
 92 | 		'GD' => array('Grenada'),
 93 | 		'GP' => array('Guadeloupe'),
 94 | 		'GU' => array('Guam'),
 95 | 		'GT' => array('Guatemala'),
 96 | 		'GN' => array('Guinea'),
 97 | 		'GW' => array('Guinea-Bissau'),
 98 | 		'GY' => array('Guyana'),
 99 | 		'HT' => array('Haiti'),
100 | 		'HM' => array('Heard Island and Mcdonald Islands'),
101 | 		'VA' => array('Holy See (Vatican City State)'),
102 | 		'HN' => array('Honduras'),
103 | 		'HK' => array('Hong Kong'),
104 | 		'HU' => array('Hungary'),
105 | 		'IS' => array('Iceland'),
106 | 		'IN' => array('India'),
107 | 		'ID' => array('Indonesia'),
108 | 		'IR' => array('Iran, Islamic Republic of'),
109 | 		'IQ' => array('Iraq'),
110 | 		'IE' => array('Ireland'),
111 | 		'IL' => array('Israel'),
112 | 		'IT' => array('Italy'),
113 | 		'JM' => array('Jamaica'),
114 | 		'JP' => array('Japan'),
115 | 		'JO' => array('Jordan'),
116 | 		'KZ' => array('Kazakhstan'),
117 | 		'KE' => array('Kenya'),
118 | 		'KI' => array('Kiribati'),
119 | 		'KP' => array('Korea, Democratic People\'s Republic of'),
120 | 		'KR' => array('Korea, Republic of'),
121 | 		'KW' => array('Kuwait'),
122 | 		'KG' => array('Kyrgyzstan'),
123 | 		'LA' => array('Lao People\'s Democratic Republic'),
124 | 		'LV' => array('Latvia', 'Republic of Latvia'),
125 | 		'LB' => array('Lebanon'),
126 | 		'LS' => array('Lesotho'),
127 | 		'LR' => array('Liberia'),
128 | 		'LY' => array('Libyan Arab Jamahiriya'),
129 | 		'LI' => array('Liechtenstein'),
130 | 		'LT' => array('Lithuania'),
131 | 		'LU' => array('Luxembourg'),
132 | 		'MO' => array('Macao', 'Macau'),
133 | 		'MK' => array('Macedonia, the Former Yugoslav Republic of', 'Macedonia'),
134 | 		'MG' => array('Madagascar'),
135 | 		'MW' => array('Malawi'),
136 | 		'MY' => array('Malaysia'),
137 | 		'MV' => array('Maldives'),
138 | 		'ML' => array('Mali'),
139 | 		'MT' => array('Malta'),
140 | 		'MH' => array('Marshall Islands'),
141 | 		'MQ' => array('Martinique'),
142 | 		'MR' => array('Mauritania'),
143 | 		'MU' => array('Mauritius'),
144 | 		'YT' => array('Mayotte'),
145 | 		'MX' => array('Mexico'),
146 | 		'FM' => array('Micronesia, Federated States of'),
147 | 		'MD' => array('Moldova, Republic of'),
148 | 		'MC' => array('Monaco'),
149 | 		'MN' => array('Mongolia'),
150 | 		'MS' => array('Montserrat'),
151 | 		'MA' => array('Morocco'),
152 | 		'MZ' => array('Mozambique'),
153 | 		'MM' => array('Myanmar'),
154 | 		'NA' => array('Namibia'),
155 | 		'NR' => array('Nauru'),
156 | 		'NP' => array('Nepal'),
157 | 		'NL' => array('Netherlands', 'The Netherlands'),
158 | 		'AN' => array('Netherlands Antilles'),
159 | 		'NC' => array('New Caledonia'),
160 | 		'NZ' => array('New Zealand'),
161 | 		'NI' => array('Nicaragua'),
162 | 		'NE' => array('Niger'),
163 | 		'NG' => array('Nigeria'),
164 | 		'NU' => array('Niue'),
165 | 		'NF' => array('Norfolk Island'),
166 | 		'MP' => array('Northern Mariana Islands'),
167 | 		'NO' => array('Norway'),
168 | 		'OM' => array('Oman'),
169 | 		'PK' => array('Pakistan'),
170 | 		'PW' => array('Palau'),
171 | 		'PS' => array('Palestinian Territory, Occupied'),
172 | 		'PA' => array('Panama'),
173 | 		'PG' => array('Papua New Guinea'),
174 | 		'PY' => array('Paraguay'),
175 | 		'PE' => array('Peru'),
176 | 		'PH' => array('Philippines'),
177 | 		'PN' => array('Pitcairn'),
178 | 		'PL' => array('Poland'),
179 | 		'PT' => array('Portugal'),
180 | 		'PR' => array('Puerto Rico'),
181 | 		'QA' => array('Qatar'),
182 | 		'RE' => array('Reunion'),
183 | 		'RO' => array('Romania'),
184 | 		'RU' => array('Russian Federation', 'Russia'),
185 | 		'RW' => array('Rwanda'),
186 | 		'SH' => array('Saint Helena'),
187 | 		'KN' => array('Saint Kitts and Nevis'),
188 | 		'LC' => array('Saint Lucia'),
189 | 		'PM' => array('Saint Pierre and Miquelon'),
190 | 		'VC' => array('Saint Vincent and the Grenadines'),
191 | 		'WS' => array('Samoa'),
192 | 		'SM' => array('San Marino'),
193 | 		'ST' => array('Sao Tome and Principe'),
194 | 		'SA' => array('Saudi Arabia'),
195 | 		'SN' => array('Senegal'),
196 | 		'CS' => array('Serbia and Montenegro', 'Serbia'),
197 | 		'SC' => array('Seychelles'),
198 | 		'SL' => array('Sierra Leone'),
199 | 		'SG' => array('Singapore'),
200 | 		'SK' => array('Slovakia'),
201 | 		'SI' => array('Slovenia'),
202 | 		'SB' => array('Solomon Islands'),
203 | 		'SO' => array('Somalia'),
204 | 		'ZA' => array('South Africa'),
205 | 		'GS' => array('South Georgia and the South Sandwich Islands'),
206 | 		'ES' => array('Spain'),
207 | 		'LK' => array('Sri Lanka'),
208 | 		'SD' => array('Sudan'),
209 | 		'SR' => array('Suriname'),
210 | 		'SJ' => array('Svalbard and Jan Mayen'),
211 | 		'SZ' => array('Swaziland'),
212 | 		'SE' => array('Sweden'),
213 | 		'CH' => array('Switzerland'),
214 | 		'SY' => array('Syrian Arab Republic'),
215 | 		'TW' => array('Taiwan'),
216 | 		'TJ' => array('Tajikistan'),
217 | 		'TZ' => array('Tanzania, United Republic of'),
218 | 		'TH' => array('Thailand'),
219 | 		'TL' => array('Timor-Leste'),
220 | 		'TG' => array('Togo'),
221 | 		'TK' => array('Tokelau'),
222 | 		'TO' => array('Tonga'),
223 | 		'TT' => array('Trinidad and Tobago'),
224 | 		'TN' => array('Tunisia'),
225 | 		'TR' => array('Turkey'),
226 | 		'TM' => array('Turkmenistan'),
227 | 		'TC' => array('Turks and Caicos Islands'),
228 | 		'TV' => array('Tuvalu'),
229 | 		'UG' => array('Uganda'),
230 | 		'UA' => array('Ukraine'),
231 | 		'AE' => array('United Arab Emirates'),
232 | 		'GB' => array('United Kingdom', 'UK', 'England'),
233 | 		'US' => array('United States', 'US', 'USA'),
234 | 		'UM' => array('United States Minor Outlying Islands'),
235 | 		'UY' => array('Uruguay'),
236 | 		'UZ' => array('Uzbekistan'),
237 | 		'VU' => array('Vanuatu'),
238 | 		'VE' => array('Venezuela'),
239 | 		'VN' => array('Viet Nam', 'Vietnam'),
240 | 		'VG' => array('Virgin Islands, British'),
241 | 		'VI' => array('Virgin Islands, U.s.'),
242 | 		'WF' => array('Wallis and Futuna'),
243 | 		'EH' => array('Western Sahara'),
244 | 		'YE' => array('Yemen'),
245 | 		'ZM' => array('Zambia'),
246 | 		'ZW' => array('Zimbabwe'),
247 | 	);
248 | 
249 | 	static private $usStates_ = array(
250 | 		'AL'=>"Alabama",  
251 | 		'AK'=>"Alaska",  
252 | 		'AZ'=>"Arizona",  
253 | 		'AR'=>"Arkansas",  
254 | 		'CA'=>"California",  
255 | 		'CO'=>"Colorado",  
256 | 		'CT'=>"Connecticut",  
257 | 		'DE'=>"Delaware",  
258 | 		'DC'=>"District Of Columbia",  
259 | 		'FL'=>"Florida",  
260 | 		'GA'=>"Georgia",  
261 | 		'HI'=>"Hawaii",  
262 | 		'ID'=>"Idaho",  
263 | 		'IL'=>"Illinois",  
264 | 		'IN'=>"Indiana",  
265 | 		'IA'=>"Iowa",  
266 | 		'KS'=>"Kansas",  
267 | 		'KY'=>"Kentucky",  
268 | 		'LA'=>"Louisiana",  
269 | 		'ME'=>"Maine",  
270 | 		'MD'=>"Maryland",  
271 | 		'MA'=>"Massachusetts",  
272 | 		'MI'=>"Michigan",  
273 | 		'MN'=>"Minnesota",  
274 | 		'MS'=>"Mississippi",  
275 | 		'MO'=>"Missouri",  
276 | 		'MT'=>"Montana",
277 | 		'NE'=>"Nebraska",
278 | 		'NV'=>"Nevada",
279 | 		'NH'=>"New Hampshire",
280 | 		'NJ'=>"New Jersey",
281 | 		'NM'=>"New Mexico",
282 | 		'NY'=>"New York",
283 | 		'NC'=>"North Carolina",
284 | 		'ND'=>"North Dakota",
285 | 		'OH'=>"Ohio",  
286 | 		'OK'=>"Oklahoma",  
287 | 		'OR'=>"Oregon",  
288 | 		'PA'=>"Pennsylvania",  
289 | 		'RI'=>"Rhode Island",  
290 | 		'SC'=>"South Carolina",  
291 | 		'SD'=>"South Dakota",
292 | 		'TN'=>"Tennessee",  
293 | 		'TX'=>"Texas",  
294 | 		'UT'=>"Utah",  
295 | 		'VT'=>"Vermont",  
296 | 		'VA'=>"Virginia",  
297 | 		'WA'=>"Washington",  
298 | 		'WV'=>"West Virginia",  
299 | 		'WI'=>"Wisconsin",  
300 | 		'WY'=>"Wyoming"
301 | 	);
302 | 
303 | 	static public function guessCountry($location) {
304 | 		$s = explode(',', $location);
305 | 		$s = strtolower(trim($s[count($s) - 1]));
306 | 
307 | 		foreach (self::$countries_ as $code => $countries) {
308 | 			foreach ($countries as $c) {
309 | 				if ($s == strtolower($c)) {
310 | 					return $code;
311 | 				}
312 | 			}
313 | 		}
314 | 
315 | 		foreach (self::$usStates_ as $code => $state) {
316 | 			if ($code == strtoupper($s)) {
317 | 				return 'US';
318 | 			}
319 | 			if (strtolower($state) == strtolower($s)) {
320 | 				return 'US';
321 | 			}
322 | 		}
323 | 
324 | 		// Check country code
325 | 
326 | 		return null;
327 | 
328 | 		//throw new Exception('Cannot find for country for location: ' : $location);
329 | 	}
330 | 
331 | }


--------------------------------------------------------------------------------
/src/AppBundle/Eloquent.php.sample:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle;
 4 | 
 5 | class Eloquent {
 6 | 
 7 | 	private $capsule_ = null;
 8 | 
 9 | 	public function __construct() {
10 | 		$this->capsule_ = new \Illuminate\Database\Capsule\Manager();
11 | 
12 | 		$this->capsule_->addConnection([
13 | 			'driver'    => 'mysql',
14 | 			'host'      => '127.0.0.1',
15 | 			'database'  => 'sql_injections',
16 | 			'username'  => '',
17 | 			'password'  => '',
18 | 			'charset'   => 'utf8',
19 | 			'collation' => 'utf8_unicode_ci',
20 | 			'prefix'    => '',
21 | 		]);
22 | 
23 | 		$this->capsule_->bootEloquent();
24 | 	}
25 | 
26 | 	public function connection() {
27 | 		return $this->capsule_->getConnection('default');
28 | 	}
29 | 
30 | }


--------------------------------------------------------------------------------
/src/AppBundle/InjectionFinder.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | namespace AppBundle;
  4 | 
  5 | use AppBundle\Model\Question;
  6 | use AppBundle\BaseService;
  7 | 
  8 | class InjectionFinder extends BaseService {
  9 | 
 10 | 	private $db_ = null;
 11 | 
 12 | 	public function __construct($eloquent) {
 13 | 		$this->db_ = $eloquent->connection();
 14 | 	}
 15 | 
 16 | 	public function execute() {
 17 | 		$limit = 1000;
 18 | 
 19 | 		while (true) {
 20 | 			$questions = Question::where('is_processed', '=', '0')
 21 | 			                     ->orderBy('question_id', 'asc')
 22 | 			                     ->limit($limit)
 23 | 			                     ->get();
 24 | 
 25 | 			$this->writeln(sprintf('Processing %s questions', count($questions)));
 26 | 
 27 | 			if (!count($questions)) break;
 28 | 
 29 | 			$this->db_->beginTransaction();
 30 | 			try {
 31 | 				foreach ($questions as $question) {
 32 | 					$result = $this->findSqlInjection($question->body_markdown);
 33 | 					$question->sql_injection_line = $result['lineNum'];
 34 | 					$question->has_sql_injection = $result['found'];
 35 | 					$question->is_processed = 1;
 36 | 					$question->has_sql = $result['hasSql'];
 37 | 					$question->save();
 38 | 				}
 39 | 			} catch (\Exception $e) {
 40 | 				$this->db_->rollback();
 41 | 				throw $e;
 42 | 			}
 43 | 			$this->db_->commit();
 44 | 		}
 45 | 	}
 46 | 
 47 | 	public function findSqlInjection($body) {
 48 | 		// $body = '    INSERT INTO `table_name` (`field1`, `field2`) VALUES (\'a\', \'b\'), (\'c\', \'d\', $post)';
 49 | 		// $body = '    SELECT * FROM `table_name` WHERE username = $username';
 50 | 		// $body = '    select * FROM `table_name` WHERE username = $username';
 51 | 		// $body = '    UPDATE table_name SET username = $username WHERE ...';
 52 | 
 53 | 		$lines = Question::bodyToLines($body);
 54 | 
 55 | 		$sqlRegexes = array(
 56 | 			'/INSERT\s+INTO.*/i',
 57 | 			'/SELECT\s+.*?\sFROM.*/i',
 58 | 			'/UPDATE\s+.*?\sSET.*/i',
 59 | 			'/DELETE\s+FROM.*/i',
 60 | 		);
 61 | 
 62 | 		$sqlInjectionRegexes = array(
 63 | 			'/SELECT\s+.*?\sFROM\s.*?\sWHERE\s.*?\$[a-zA-Z_].*?/i', // SELECT ... FROM ... WHERE email = "$email"
 64 | 			'/SELECT\s+.*?\$[a-zA-Z_].*?\sFROM.*?/i', // SELECT ... $email ... FROM...
 65 | 			'/INSERT\s+INTO\s.*?\$[a-zA-Z_].*?/i', // INSERT INTO ... $email ...
 66 | 			'/UPDATE\s+.*?\sSET\s.*?\$[a-zA-Z_].*?/i', // UPDATE ... SET ... email = $email ...
 67 | 			// '/UPDATE\s+.*?\$[a-zA-Z_].*?\sSET.*?/i', // UPDATE $table SET ...
 68 | 			'/DELETE\s+FROM\s+.*?\$[a-zA-Z_].*?/i', // DELETE FROM ... $somevar ...
 69 | 		);
 70 | 
 71 | 		$injectionLine = -1;
 72 | 		$hasSql = false;
 73 | 		for ($lineIndex = 0; $lineIndex < count($lines); $lineIndex++) {
 74 | 			$line = $lines[$lineIndex];
 75 | 			if (strpos($line, "\t") !== 0 && strpos($line, "    ") !== 0) continue; // Skip non-code lines
 76 | 			$line = trim($line);
 77 | 			if (strpos($line, '//') === 0) continue; // Skip comments
 78 | 
 79 | 			foreach ($sqlRegexes as $regex) {
 80 | 				$ok = preg_match($regex, $line);
 81 | 				if ($ok === 1) {
 82 | 					$hasSql = true;
 83 | 					break;
 84 | 				}
 85 | 			}
 86 | 
 87 | 			foreach ($sqlInjectionRegexes as $regex) {
 88 | 				$ok = preg_match($regex, $line);
 89 | 				if ($ok === 1) {
 90 | 					$injectionLine = $lineIndex;
 91 | 					break;
 92 | 				}
 93 | 			}
 94 | 
 95 | 			if ($injectionLine >= 0) break;
 96 | 		}
 97 | 
 98 | 		return array(
 99 | 			'found' => $injectionLine >= 0,
100 | 			'lineNum' => $injectionLine,
101 | 			'line' => $injectionLine >= 0 ? trim($lines[$injectionLine]) : null,
102 | 			'hasSql' => $hasSql,
103 | 		);
104 | 	}
105 | 
106 | }


--------------------------------------------------------------------------------
/src/AppBundle/Model/City.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Model;
 4 | 
 5 | use \Illuminate\Database\Eloquent\Model;
 6 | use \Illuminate\Support\Facades\DB;
 7 | 
 8 | class City extends \Illuminate\Database\Eloquent\Model {
 9 | 
10 | 	public $timestamps = false;
11 | 	protected $primaryKey = 'geoname_id';
12 | 
13 | }


--------------------------------------------------------------------------------
/src/AppBundle/Model/Country.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | namespace AppBundle\Model;
  4 | 
  5 | use \Illuminate\Database\Eloquent\Model;
  6 | use \Illuminate\Support\Facades\DB;
  7 | 
  8 | class Country extends \Illuminate\Database\Eloquent\Model {
  9 | 
 10 | 	public $timestamps = false;
 11 | 	protected $primaryKey = 'geoname_id';
 12 | 
 13 | 	public function name() {
 14 | 		$place = Place::where('country_id', '=', $this->geoname_id)->first();
 15 | 		if (!$place) return '';
 16 | 		return $place->name;
 17 | 	}
 18 | 
 19 | 	static public function byName($name) {
 20 | 		$place = Place::where('country_id', '>', 0)->where('name', '=', $name)->first();
 21 | 		if (!$place) {
 22 | 			// Handles cases like "Korea, Republic of" / "Republic of Korea"
 23 | 			$s = explode(',', $name);
 24 | 			if (count($s) == 2) $place = Place::where('country_id', '>', 0)->where('name', '=', trim($s[1]) . ' ' . trim($s[0]))->first();
 25 | 		}
 26 | 		if (!$place) throw new \Exception('Invalid name: ' . $name);
 27 | 		return $place->country();
 28 | 	}
 29 | 
 30 | 	static public function byCode($code) {
 31 | 		return Country::where('code', '=', $code)->first();
 32 | 	}
 33 | 
 34 | 	static public function countryName($code) {
 35 | 		$code = strtoupper($code);
 36 | 		if (isset(self::$countryCodeToName_[$code])) return self::$countryCodeToName_[$code];
 37 | 		$country = self::byCode($code);
 38 | 		return $country->name();
 39 | 	}
 40 | 
 41 | 	static public function topCountries() {
 42 | 		$sql = 'SELECT country, count(*) total FROM users WHERE country IS NOT NULL GROUP BY country ORDER BY total DESC LIMIT 40';
 43 | 		$con = (new self())->getConnection();
 44 | 		$results = $con->getPdo()->query($sql);
 45 | 		return $results->fetchAll(\PDO::FETCH_ASSOC);
 46 | 	}
 47 | 
 48 | 	static private $countryCodeToName_ = array(
 49 | 		'AF' => 'Afghanistan',
 50 | 		'AX' => 'Aland Islands',
 51 | 		'AL' => 'Albania',
 52 | 		'DZ' => 'Algeria',
 53 | 		'AS' => 'American Samoa',
 54 | 		'AD' => 'Andorra',
 55 | 		'AO' => 'Angola',
 56 | 		'AI' => 'Anguilla',
 57 | 		'AQ' => 'Antarctica',
 58 | 		'AG' => 'Antigua And Barbuda',
 59 | 		'AR' => 'Argentina',
 60 | 		'AM' => 'Armenia',
 61 | 		'AW' => 'Aruba',
 62 | 		'AU' => 'Australia',
 63 | 		'AT' => 'Austria',
 64 | 		'AZ' => 'Azerbaijan',
 65 | 		'BS' => 'Bahamas',
 66 | 		'BH' => 'Bahrain',
 67 | 		'BD' => 'Bangladesh',
 68 | 		'BB' => 'Barbados',
 69 | 		'BY' => 'Belarus',
 70 | 		'BE' => 'Belgium',
 71 | 		'BZ' => 'Belize',
 72 | 		'BJ' => 'Benin',
 73 | 		'BM' => 'Bermuda',
 74 | 		'BT' => 'Bhutan',
 75 | 		'BO' => 'Bolivia',
 76 | 		'BA' => 'Bosnia And Herzegovina',
 77 | 		'BW' => 'Botswana',
 78 | 		'BV' => 'Bouvet Island',
 79 | 		'BR' => 'Brazil',
 80 | 		'IO' => 'British Indian Ocean Territory',
 81 | 		'BN' => 'Brunei Darussalam',
 82 | 		'BG' => 'Bulgaria',
 83 | 		'BF' => 'Burkina Faso',
 84 | 		'BI' => 'Burundi',
 85 | 		'KH' => 'Cambodia',
 86 | 		'CM' => 'Cameroon',
 87 | 		'CA' => 'Canada',
 88 | 		'CV' => 'Cape Verde',
 89 | 		'KY' => 'Cayman Islands',
 90 | 		'CF' => 'Central African Republic',
 91 | 		'TD' => 'Chad',
 92 | 		'CL' => 'Chile',
 93 | 		'CN' => 'China',
 94 | 		'CX' => 'Christmas Island',
 95 | 		'CC' => 'Cocos (Keeling) Islands',
 96 | 		'CO' => 'Colombia',
 97 | 		'KM' => 'Comoros',
 98 | 		'CG' => 'Congo',
 99 | 		'CD' => 'Congo, Democratic Republic',
100 | 		'CK' => 'Cook Islands',
101 | 		'CR' => 'Costa Rica',
102 | 		'CI' => 'Cote D\'Ivoire',
103 | 		'HR' => 'Croatia',
104 | 		'CU' => 'Cuba',
105 | 		'CY' => 'Cyprus',
106 | 		'CZ' => 'Czech Republic',
107 | 		'DK' => 'Denmark',
108 | 		'DJ' => 'Djibouti',
109 | 		'DM' => 'Dominica',
110 | 		'DO' => 'Dominican Republic',
111 | 		'EC' => 'Ecuador',
112 | 		'EG' => 'Egypt',
113 | 		'SV' => 'El Salvador',
114 | 		'GQ' => 'Equatorial Guinea',
115 | 		'ER' => 'Eritrea',
116 | 		'EE' => 'Estonia',
117 | 		'ET' => 'Ethiopia',
118 | 		'FK' => 'Falkland Islands (Malvinas)',
119 | 		'FO' => 'Faroe Islands',
120 | 		'FJ' => 'Fiji',
121 | 		'FI' => 'Finland',
122 | 		'FR' => 'France',
123 | 		'GF' => 'French Guiana',
124 | 		'PF' => 'French Polynesia',
125 | 		'TF' => 'French Southern Territories',
126 | 		'GA' => 'Gabon',
127 | 		'GM' => 'Gambia',
128 | 		'GE' => 'Georgia',
129 | 		'DE' => 'Germany',
130 | 		'GH' => 'Ghana',
131 | 		'GI' => 'Gibraltar',
132 | 		'GR' => 'Greece',
133 | 		'GL' => 'Greenland',
134 | 		'GD' => 'Grenada',
135 | 		'GP' => 'Guadeloupe',
136 | 		'GU' => 'Guam',
137 | 		'GT' => 'Guatemala',
138 | 		'GG' => 'Guernsey',
139 | 		'GN' => 'Guinea',
140 | 		'GW' => 'Guinea-Bissau',
141 | 		'GY' => 'Guyana',
142 | 		'HT' => 'Haiti',
143 | 		'HM' => 'Heard Island & Mcdonald Islands',
144 | 		'VA' => 'Holy See (Vatican City State)',
145 | 		'HN' => 'Honduras',
146 | 		'HK' => 'Hong Kong',
147 | 		'HU' => 'Hungary',
148 | 		'IS' => 'Iceland',
149 | 		'IN' => 'India',
150 | 		'ID' => 'Indonesia',
151 | 		'IR' => 'Iran',
152 | 		'IQ' => 'Iraq',
153 | 		'IE' => 'Ireland',
154 | 		'IM' => 'Isle Of Man',
155 | 		'IL' => 'Israel',
156 | 		'IT' => 'Italy',
157 | 		'JM' => 'Jamaica',
158 | 		'JP' => 'Japan',
159 | 		'JE' => 'Jersey',
160 | 		'JO' => 'Jordan',
161 | 		'KZ' => 'Kazakhstan',
162 | 		'KE' => 'Kenya',
163 | 		'KI' => 'Kiribati',
164 | 		'KR' => 'Korea',
165 | 		'KW' => 'Kuwait',
166 | 		'KG' => 'Kyrgyzstan',
167 | 		'LA' => 'Lao People\'s Democratic Republic',
168 | 		'LV' => 'Latvia',
169 | 		'LB' => 'Lebanon',
170 | 		'LS' => 'Lesotho',
171 | 		'LR' => 'Liberia',
172 | 		'LY' => 'Libyan Arab Jamahiriya',
173 | 		'LI' => 'Liechtenstein',
174 | 		'LT' => 'Lithuania',
175 | 		'LU' => 'Luxembourg',
176 | 		'MO' => 'Macao',
177 | 		'MK' => 'Macedonia',
178 | 		'MG' => 'Madagascar',
179 | 		'MW' => 'Malawi',
180 | 		'MY' => 'Malaysia',
181 | 		'MV' => 'Maldives',
182 | 		'ML' => 'Mali',
183 | 		'MT' => 'Malta',
184 | 		'MH' => 'Marshall Islands',
185 | 		'MQ' => 'Martinique',
186 | 		'MR' => 'Mauritania',
187 | 		'MU' => 'Mauritius',
188 | 		'YT' => 'Mayotte',
189 | 		'MX' => 'Mexico',
190 | 		'FM' => 'Micronesia, Federated States Of',
191 | 		'MD' => 'Moldova',
192 | 		'MC' => 'Monaco',
193 | 		'MN' => 'Mongolia',
194 | 		'ME' => 'Montenegro',
195 | 		'MS' => 'Montserrat',
196 | 		'MA' => 'Morocco',
197 | 		'MZ' => 'Mozambique',
198 | 		'MM' => 'Myanmar',
199 | 		'NA' => 'Namibia',
200 | 		'NR' => 'Nauru',
201 | 		'NP' => 'Nepal',
202 | 		'NL' => 'Netherlands',
203 | 		'AN' => 'Netherlands Antilles',
204 | 		'NC' => 'New Caledonia',
205 | 		'NZ' => 'New Zealand',
206 | 		'NI' => 'Nicaragua',
207 | 		'NE' => 'Niger',
208 | 		'NG' => 'Nigeria',
209 | 		'NU' => 'Niue',
210 | 		'NF' => 'Norfolk Island',
211 | 		'MP' => 'Northern Mariana Islands',
212 | 		'NO' => 'Norway',
213 | 		'OM' => 'Oman',
214 | 		'PK' => 'Pakistan',
215 | 		'PW' => 'Palau',
216 | 		'PS' => 'Palestinian Territory, Occupied',
217 | 		'PA' => 'Panama',
218 | 		'PG' => 'Papua New Guinea',
219 | 		'PY' => 'Paraguay',
220 | 		'PE' => 'Peru',
221 | 		'PH' => 'Philippines',
222 | 		'PN' => 'Pitcairn',
223 | 		'PL' => 'Poland',
224 | 		'PT' => 'Portugal',
225 | 		'PR' => 'Puerto Rico',
226 | 		'QA' => 'Qatar',
227 | 		'RE' => 'Reunion',
228 | 		'RO' => 'Romania',
229 | 		'RU' => 'Russia',
230 | 		'RW' => 'Rwanda',
231 | 		'BL' => 'Saint Barthelemy',
232 | 		'SH' => 'Saint Helena',
233 | 		'KN' => 'Saint Kitts And Nevis',
234 | 		'LC' => 'Saint Lucia',
235 | 		'MF' => 'Saint Martin',
236 | 		'PM' => 'Saint Pierre And Miquelon',
237 | 		'VC' => 'Saint Vincent And Grenadines',
238 | 		'WS' => 'Samoa',
239 | 		'SM' => 'San Marino',
240 | 		'ST' => 'Sao Tome And Principe',
241 | 		'SA' => 'Saudi Arabia',
242 | 		'SN' => 'Senegal',
243 | 		'RS' => 'Serbia',
244 | 		'SC' => 'Seychelles',
245 | 		'SL' => 'Sierra Leone',
246 | 		'SG' => 'Singapore',
247 | 		'SK' => 'Slovakia',
248 | 		'SI' => 'Slovenia',
249 | 		'SB' => 'Solomon Islands',
250 | 		'SO' => 'Somalia',
251 | 		'ZA' => 'South Africa',
252 | 		'GS' => 'South Georgia And Sandwich Isl.',
253 | 		'ES' => 'Spain',
254 | 		'LK' => 'Sri Lanka',
255 | 		'SD' => 'Sudan',
256 | 		'SR' => 'Suriname',
257 | 		'SJ' => 'Svalbard And Jan Mayen',
258 | 		'SZ' => 'Swaziland',
259 | 		'SE' => 'Sweden',
260 | 		'CH' => 'Switzerland',
261 | 		'SY' => 'Syrian Arab Republic',
262 | 		'TW' => 'Taiwan',
263 | 		'TJ' => 'Tajikistan',
264 | 		'TZ' => 'Tanzania',
265 | 		'TH' => 'Thailand',
266 | 		'TL' => 'Timor-Leste',
267 | 		'TG' => 'Togo',
268 | 		'TK' => 'Tokelau',
269 | 		'TO' => 'Tonga',
270 | 		'TT' => 'Trinidad And Tobago',
271 | 		'TN' => 'Tunisia',
272 | 		'TR' => 'Turkey',
273 | 		'TM' => 'Turkmenistan',
274 | 		'TC' => 'Turks And Caicos Islands',
275 | 		'TV' => 'Tuvalu',
276 | 		'UG' => 'Uganda',
277 | 		'UA' => 'Ukraine',
278 | 		'AE' => 'United Arab Emirates',
279 | 		'GB' => 'United Kingdom',
280 | 		'US' => 'United States',
281 | 		'UM' => 'United States Outlying Islands',
282 | 		'UY' => 'Uruguay',
283 | 		'UZ' => 'Uzbekistan',
284 | 		'VU' => 'Vanuatu',
285 | 		'VE' => 'Venezuela',
286 | 		'VN' => 'Viet Nam',
287 | 		'VG' => 'Virgin Islands, British',
288 | 		'VI' => 'Virgin Islands, U.S.',
289 | 		'WF' => 'Wallis And Futuna',
290 | 		'EH' => 'Western Sahara',
291 | 		'YE' => 'Yemen',
292 | 		'ZM' => 'Zambia',
293 | 		'ZW' => 'Zimbabwe',
294 | 	);
295 | 
296 | }


--------------------------------------------------------------------------------
/src/AppBundle/Model/Place.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | namespace AppBundle\Model;
  4 | 
  5 | use \Illuminate\Database\Eloquent\Model;
  6 | use \Illuminate\Support\Facades\DB;
  7 | 
  8 | class Place extends \Illuminate\Database\Eloquent\Model {
  9 | 
 10 | 	public $timestamps = false;
 11 | 	protected $primaryKey = 'id';
 12 | 
 13 | 	static public function guessCountry($location) {
 14 | 		if (!$location) return null;
 15 | 		$location = trim($location);
 16 | 		if (empty($location)) return null;
 17 | 
 18 | 		$s = explode(',', $location);
 19 | 		$s = strtolower(trim($s[count($s) - 1]));
 20 | 
 21 | 		// Country Name
 22 | 
 23 | 		$place = Place::where('name', '=', $s)->first();
 24 | 		if ($place) return $place->country();
 25 | 		
 26 | 		// US state
 27 | 		// Lots of special cases for US since when no country is
 28 | 		// specified, it's often assumed it's in the US.
 29 | 
 30 | 		$countryUs = Country::where('code', '=', 'US')->first();
 31 | 
 32 | 		if (self::usStateExists($location)) return $countryUs;
 33 | 
 34 | 		foreach (self::$usStates_ as $code => $state) {
 35 | 			if ($code == strtoupper($s)) {
 36 | 				return $countryUs;
 37 | 			}
 38 | 			if (strtolower($state) == strtolower($s)) {
 39 | 				return $countryUs;
 40 | 			}
 41 | 		}
 42 | 
 43 | 		// Country code
 44 | 
 45 | 		$country = Country::where('code', '=', $s)->first();
 46 | 		if ($country) return $country;
 47 | 
 48 | 		// Search the last words of the location as a country
 49 | 		// eg. To find "United States" in "Fayetteville, North Carolina United States"
 50 | 
 51 | 		$s = explode(' ', $location);
 52 | 		for ($i = count($s); $i >= 1; $i--) {
 53 | 
 54 | 			$name = implode(' ', array_slice($s, count($s) - $i, $i));
 55 | 			$place = Place::where('name', '=', $name)->where('country_id', '>', 0)->first();
 56 | 			if ($place) return $place->country();
 57 | 
 58 | 			if (self::usStateExists($name)) return $countryUs;
 59 | 		}
 60 | 
 61 | 		// Search the whole name
 62 | 		$place = Place::where('name', '=', $location)->first();
 63 | 		if ($place) return $place->country();
 64 | 
 65 | 		$s = str_replace(',', ' ', $location);
 66 | 		$s = str_replace('.', ' ', $s);
 67 | 		$s = str_replace('    ', ' ', $s);
 68 | 		$s = str_replace('   ', ' ', $s);
 69 | 		$s = str_replace('  ', ' ', $s);
 70 | 		$s = explode(' ', $s);
 71 | 
 72 | 		for ($i = count($s); $i >= 1; $i--) {
 73 | 
 74 | 			$name = trim(implode(' ', array_slice($s, 0, $i)));
 75 | 			if (empty($name)) continue;
 76 | 			// Check it's not a fake name like "In front of my seat" or "The earth"
 77 | 			// since "in" and "the" are valid city names in some countries.
 78 | 			if ($i == 1 && self::isStopWord($name)) continue;
 79 | 
 80 | 			$place = Place::where('name', '=', $name)->first();
 81 | 			// if ($place) echo $place->name . "\n";
 82 | 
 83 | 			if ($place) return $place->country();
 84 | 
 85 | 			if (self::usStateExists($name)) return $countryUs;
 86 | 		}
 87 | 
 88 | 		// echo 'NOT FOUND: ' . $location . "\n";
 89 | 
 90 | 		return null;
 91 | 	}
 92 | 
 93 | 	public function country() {
 94 | 		if ($this->country_id) return Country::where('geoname_id', '=', $this->country_id)->first();
 95 | 		$city = City::where('geoname_id', '=', $this->city_id)->first();
 96 | 		return Country::where('geoname_id', '=', $city->country_id)->first();
 97 | 	}
 98 | 
 99 | 	static private function usStateExists($name) {
100 | 		foreach (self::$usStates_ as $code => $state) {
101 | 			if (strtolower($name) == strtolower($state)) return true;
102 | 		}
103 | 		return false;
104 | 	}
105 | 
106 | 	static private function isStopWord($word) {
107 | 		return in_array(strtolower($word), self::$stopWords_);
108 | 	}
109 | 
110 | 	static private $usStates_ = array(
111 | 		'AL'=>"Alabama",  
112 | 		'AK'=>"Alaska",  
113 | 		'AZ'=>"Arizona",  
114 | 		'AR'=>"Arkansas",  
115 | 		'CA'=>"California",  
116 | 		'CO'=>"Colorado",  
117 | 		'CT'=>"Connecticut",  
118 | 		'DE'=>"Delaware",  
119 | 		'DC'=>"District Of Columbia",  
120 | 		'FL'=>"Florida",  
121 | 		'GA'=>"Georgia",  
122 | 		'HI'=>"Hawaii",  
123 | 		'ID'=>"Idaho",  
124 | 		'IL'=>"Illinois",  
125 | 		'IN'=>"Indiana",  
126 | 		'IA'=>"Iowa",  
127 | 		'KS'=>"Kansas",  
128 | 		'KY'=>"Kentucky",  
129 | 		'LA'=>"Louisiana",  
130 | 		'ME'=>"Maine",  
131 | 		'MD'=>"Maryland",  
132 | 		'MA'=>"Massachusetts",  
133 | 		'MI'=>"Michigan",  
134 | 		'MN'=>"Minnesota",  
135 | 		'MS'=>"Mississippi",  
136 | 		'MO'=>"Missouri",  
137 | 		'MT'=>"Montana",
138 | 		'NE'=>"Nebraska",
139 | 		'NV'=>"Nevada",
140 | 		'NH'=>"New Hampshire",
141 | 		'NJ'=>"New Jersey",
142 | 		'NM'=>"New Mexico",
143 | 		'NY'=>"New York",
144 | 		'NC'=>"North Carolina",
145 | 		'ND'=>"North Dakota",
146 | 		'OH'=>"Ohio",  
147 | 		'OK'=>"Oklahoma",  
148 | 		'OR'=>"Oregon",  
149 | 		'PA'=>"Pennsylvania",  
150 | 		'RI'=>"Rhode Island",  
151 | 		'SC'=>"South Carolina",  
152 | 		'SD'=>"South Dakota",
153 | 		'TN'=>"Tennessee",  
154 | 		'TX'=>"Texas",  
155 | 		'UT'=>"Utah",  
156 | 		'VT'=>"Vermont",  
157 | 		'VA'=>"Virginia",  
158 | 		'WA'=>"Washington",  
159 | 		'WV'=>"West Virginia",  
160 | 		'WI'=>"Wisconsin",  
161 | 		'WY'=>"Wyoming"
162 | 	);
163 | 
164 | 	static private $stopWords_ = array('a','able','about','across','after','all','almost','also','am','among','an','and','any','are','as','at','be','because','been','but','by','can','cannot','could','dear','did','do','does','either','else','ever','every','for','from','get','got','had','has','have','he','her','hers','him','his','how','however','i','if','in','into','is','it','its','just','least','let','like','likely','may','me','might','most','must','my','neither','no','nor','not','of','off','often','on','only','or','other','our','own','rather','said','say','says','she','should','since','so','some','than','that','the','their','them','then','there','these','they','this','tis','to','too','twas','us','wants','was','we','were','what','when','where','which','while','who','whom','why','will','with','would','yet','you','your');
165 | 
166 | }


--------------------------------------------------------------------------------
/src/AppBundle/Model/Question.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Model;
 4 | 
 5 | use \Illuminate\Database\Eloquent\Model;
 6 | use \Illuminate\Support\Facades\DB;
 7 | 
 8 | class Question extends \Illuminate\Database\Eloquent\Model {
 9 | 
10 | 	protected $primaryKey = 'question_id';
11 | 
12 | 	public function fromApiArray($a) {
13 | 		if (!isset($a['body_markdown'])) throw new \Exception('Question without a body_markdown property: ' . json_encode($a), 22220);
14 | 		if (!isset($a['creation_date'])) throw new \Exception('Question without a creation_date property: ' . json_encode($a), 22220);
15 | 
16 | 		$this->question_id = $a['question_id'];
17 | 		$this->body_markdown = $a['body_markdown'];
18 | 		$this->creation_date = $a['creation_date'];
19 | 		$this->owner_id = isset($a['owner']['user_id']) ? $a['owner']['user_id'] : 0;
20 | 		$this->raw_json = json_encode($a);
21 | 	}
22 | 
23 | 	static public function bodyToLines($body) {
24 | 		$body = str_replace("\r\n", "\n", $body);
25 | 		$body = str_replace("\r", "\n", $body);
26 | 		$lines = explode("\n", $body);
27 | 		$output = array();
28 | 		foreach ($lines as $line) {
29 | 			$output[] = mb_convert_encoding($line, 'UTF-8', 'HTML-ENTITIES');
30 | 		}
31 | 		return $output;
32 | 	}
33 | 
34 | 	static public function earliestQuestionDate() {
35 | 		return self::min('creation_date');
36 | 	}
37 | 
38 | 	static public function lastQuestionDate() {
39 | 		return self::max('creation_date');
40 | 	}
41 | 
42 | 	// Questions that have an associated user ID but
43 | 	// no correspondance in the users table.
44 | 	static public function ownerIdsWithNoUserObject($minId, $limit) {
45 | 		$con = (new self())->getConnection();
46 | 		$st = $con->getPdo()->prepare('
47 | 			SELECT DISTINCT owner_id
48 | 			FROM questions
49 | 			LEFT JOIN users ON questions.owner_id = users.user_id
50 | 			WHERE
51 | 				owner_id != 0
52 | 				AND users.raw_json IS NULL
53 | 				AND question_id > :question_id
54 | 			LIMIT :limit
55 | 		');
56 | 		$st->execute(array('question_id' => $minId, 'limit' => $limit));
57 | 		$r = $st->fetchAll(\PDO::FETCH_ASSOC);
58 | 		
59 | 		$output = array();
60 | 		foreach ($r as $v) $output[] = $v['owner_id'];
61 | 		return $output;
62 | 	}
63 | 
64 | }


--------------------------------------------------------------------------------
/src/AppBundle/Model/User.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle\Model;
 4 | 
 5 | use \Illuminate\Database\Eloquent\Model;
 6 | use \Illuminate\Support\Facades\DB;
 7 | use AppBundle\CountryUtils;
 8 | 
 9 | class User extends \Illuminate\Database\Eloquent\Model {
10 | 
11 | 	protected $primaryKey = 'user_id';
12 | 
13 | 	public function fromApiArray($a) {
14 | 		$location = isset($a['location']) ? trim($a['location']) : null;
15 | 		$country = Place::guessCountry($location);
16 | 
17 | 		$this->user_id = $a['user_id'];
18 | 		$this->age = isset($a['age']) ? $a['age'] : 0;
19 | 		$this->reputation = isset($a['reputation']) ? $a['reputation'] : 0;
20 | 		$this->is_employee = isset($a['is_employee']) ? (int)$a['is_employee'] : 0;
21 | 		$this->location = $location;
22 | 		$this->country = $country ? $country->code : null;
23 | 		$this->raw_json = json_encode($a);
24 | 	}
25 | 
26 | }


--------------------------------------------------------------------------------
/src/AppBundle/QuestionCrawler.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | // To get number of questions per month:
  4 | //
  5 | // select extract(year_month FROM date(from_unixtime(creation_date))) month, count(*) from questions group by month;
  6 | 
  7 | namespace AppBundle;
  8 | 
  9 | use AppBundle\Model\Question;
 10 | use AppBundle\BaseService;
 11 | 
 12 | class QuestionCrawler extends BaseService {
 13 | 
 14 | 	private $db_ = null;
 15 | 	private $api_ = null;
 16 | 
 17 | 	public function __construct($rootDir, $eloquent, $stackExchangeApi) {
 18 | 		$this->db_ = $eloquent->connection();
 19 | 		$this->api_ = $stackExchangeApi;
 20 | 	}
 21 | 
 22 | 	public function setOutput($output) {
 23 | 		$this->api_->setOutput($output);
 24 | 		parent::setOutput($output);
 25 | 	}
 26 | 
 27 | 	public function execute() {
 28 | 		$fromDate = new \DateTime();
 29 | 
 30 | 		$lastTimestamp = Question::lastQuestionDate();
 31 | 		if ($lastTimestamp) {
 32 | 			$fromDate->setTimestamp($lastTimestamp);
 33 | 		} else {
 34 | 			$fromDate->setDate(2008,7,1); // Private beta
 35 | 		}
 36 | 
 37 | 		$toDate = clone $fromDate;
 38 | 		$toDate->add(new \DateInterval('P' . $fromDate->format('t') . 'D'));
 39 | 		$page = 1;
 40 | 
 41 | 		while (true) {
 42 | 			$result = $this->api_->questions($fromDate->getTimestamp(), $toDate->getTimestamp(), $page);
 43 | 
 44 | 			$this->writeln("Got " . $fromDate->format('Y-m-d') . ' to ' . $toDate->format('Y-m-d') . ', page ' . $page . ". Total items: " . $result['total']);
 45 | 
 46 | 			// {"error_id":502,"error_message":"too many requests from this IP, more requests available in 32322 seconds","error_name":"throttle_violation"}
 47 | 
 48 | 			if (isset($result['error_id'])) {
 49 | 				$this->writeln('');
 50 | 				$this->writeln('Got error: ' . json_encode($result));
 51 | 				if (isset($result['error_message'])) {
 52 | 					preg_match('/available in (.*) seconds/', $result['error_message'], $matches);
 53 | 					if (isset($matches[1])) {
 54 | 						$this->writeln('Waiting for ' . gmdate('H\h i\m s\s', $matches[1]) . '...');
 55 | 						sleep($matches[1] + 1);
 56 | 						continue;
 57 | 					} else {
 58 | 						throw new \Exception('Unexpected error: ' . json_encode($result));
 59 | 					}
 60 | 				}
 61 | 			}
 62 | 
 63 | 			if (!isset($result['items'])) throw new \Exception('No "items" property on object: ' . json_encode($result));
 64 | 			$this->saveQuestions($result['items']);
 65 | 
 66 | 			if (!$result['has_more']) {
 67 | 				$expectedPageCount = ceil($result['total'] / $this->api_->pageSize());
 68 | 				if ($page < $expectedPageCount) {
 69 | 					// Something weird that shouldn't happen but sometime does.
 70 | 					throw new \Exception('Didn\'t get expected number of pages, but has_more parameter is false: ' . json_encode($result));
 71 | 				}
 72 | 
 73 | 				$fromDate = $toDate;
 74 | 				$toDate = clone $fromDate; //$fromDate + 60 * 60 * 24;
 75 | 				$toDate->add(new \DateInterval('P' . $fromDate->format('t') . 'D'));
 76 | 				if ($toDate->getTimestamp() > time() - 60 * 60) {
 77 | 					// Don't process very recent questions, because they often have issues like wrong tags
 78 | 					// or bad formatting (or they are questions that are going to be deleted). These issues are
 79 | 					// fixed relatively quickly, so one hour delay should be enough.
 80 | 					$this->writeln("Done all current questions");
 81 | 					break;
 82 | 				}
 83 | 				$page = 1;
 84 | 			} else {
 85 | 				$page++;
 86 | 			}
 87 | 
 88 | 			if (isset($result['backoff'])) {
 89 | 				$this->writeln("Got 'backoff' parameter: " . $result['backoff']);
 90 | 				sleep($result['backoff'] + 1); // Wait a bit longer than required so as not to be blocked
 91 | 			}
 92 | 
 93 | 			sleep(1);
 94 | 		}
 95 | 	}
 96 | 
 97 | 	private function saveQuestions($questions) {
 98 | 		foreach ($questions as $question) {
 99 | 			try {
100 | 				$m = new Question();
101 | 				$m->fromApiArray($question);
102 | 				$m->save();
103 | 			} catch (\Exception $e) {
104 | 				// SQLSTATE[23000]: Integrity constraint violation: 1062 Duplicate entry '576908' for key 'PRIMARY'
105 | 				// Can happen if doing a Ctrl+C while the questions are being saved, and then resuming the script.
106 | 				if ($e->getCode() == 23000) {
107 | 					$this->writeln("Skipping question " . $question['question_id'] . ": already saved.");
108 | 				} else if ($e->getCode() == 22220) {
109 | 					$this->writeln("Skipping question " . $question['question_id'] . ": " . $e->getMessage());
110 | 				} else {
111 | 					throw $e;
112 | 				}
113 | 			}
114 | 		}
115 | 	}
116 | 
117 | 	// Loop through all the questions and update the database fields based on the stored
118 | 	// raw JSON. Useful whenever a new field is added to the database table.
119 | 	public function refreshQuestions() {
120 | 		$limit = 10000;
121 | 		$offset = 0;
122 | 		while (true) {
123 | 			$questions = Question::orderBy('question_id', 'asc')
124 | 			                     ->limit($limit)
125 | 			                     ->offset($offset)
126 | 			                     ->get();
127 | 
128 | 			if (!count($questions)) break;
129 | 
130 | 			$this->db_->beginTransaction();
131 | 			try {
132 | 				foreach ($questions as $question) {
133 | 					$q = json_decode($question->raw_json, true);
134 | 					$question->fromApiArray($q);
135 | 					$question->save();
136 | 				}
137 | 			} catch (\Exception $e) {
138 | 				$this->db_->rollback();
139 | 				throw $e;
140 | 			}
141 | 			$this->db_->commit();
142 | 
143 | 			$offset += $limit;
144 | 		}
145 | 	}
146 | 
147 | 
148 | }


--------------------------------------------------------------------------------
/src/AppBundle/ReportService.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | namespace AppBundle;
  4 | 
  5 | use AppBundle\Model\Question;
  6 | use AppBundle\Model\Country;
  7 | use AppBundle\BaseService;
  8 | 
  9 | class ReportService extends BaseService {
 10 | 
 11 | 	private $db_ = null;
 12 | 	private $cache_ = null;
 13 | 
 14 | 	public function __construct($eloquent, $cache) {
 15 | 		$this->db_ = $eloquent->connection();
 16 | 		$this->cache_ = $cache;
 17 | 	}
 18 | 
 19 | 	public function monthlyInjections() {
 20 | 		$d1 = new \DateTime();
 21 | 		$d1->setTimestamp(Question::earliestQuestionDate());
 22 | 		$d1->setDate($d1->format('Y'), $d1->format('m'), 1);
 23 | 		$d1->setTime(0,0,0);
 24 | 
 25 | 		$lastQuestionDate = Question::lastQuestionDate();
 26 | 
 27 | 		$output = array();
 28 | 
 29 | 		while (true) {
 30 | 			$d2 = clone $d1;
 31 | 			$d2->add(new \DateInterval('P' . $d2->format('t') . 'D'));
 32 | 
 33 | 			$cacheTimeout = 60 * 60 * 24 * 31 * 12;
 34 | 			$now = new \DateTime();
 35 | 			if ($d2->format('Ym') >= $now->format('Ym')) {
 36 | 				$cacheTimeout = 60 * 60 * 24;
 37 | 			}
 38 | 
 39 | 			$this->writeln("Processing " . $d1->format('Y-m') . '... Cache: ' . $cacheTimeout);
 40 | 
 41 | 			$params = array('date1' => $d1->getTimestamp(), 'date2' => $d2->getTimestamp());
 42 | 			
 43 | 			$rows = $this->cache_->getOrSet('ReportService::monthlyInjection' . md5(json_encode($params)), function() use($params) {
 44 | 				$st = $this->db_->getPdo()->prepare('
 45 | 					SELECT
 46 | 						has_sql_injection, has_sql
 47 | 					FROM questions
 48 | 					WHERE has_sql = 1 AND creation_date >= :date1 AND creation_date < :date2
 49 | 				');
 50 | 				$st->execute($params);
 51 | 
 52 | 				return $st->fetchAll(\PDO::FETCH_ASSOC);
 53 | 			}, $cacheTimeout);
 54 | 
 55 | 			$summary = array(
 56 | 				'month' => $d1->format('Ym'),
 57 | 				'has_sql_count' => 0,
 58 | 				'has_sql_injection_count' => 0,
 59 | 			);
 60 | 
 61 | 			foreach ($rows as $row) {
 62 | 				if ((int)$row['has_sql']) $summary['has_sql_count']++;
 63 | 				if ((int)$row['has_sql_injection']) $summary['has_sql_injection_count']++;
 64 | 			}
 65 | 
 66 | 			$output[] = $summary;
 67 | 
 68 | 			$d1 = clone $d2;
 69 | 
 70 | 			if ($d1->getTimestamp() > $lastQuestionDate) break;
 71 | 		}
 72 | 
 73 | 		return $output;
 74 | 	}
 75 | 
 76 | 	public function latestInjections() {
 77 | 		$results = $this->db_->getPdo()->query('
 78 | 			SELECT question_id, body_markdown, sql_injection_line, creation_date
 79 | 			FROM questions
 80 | 			WHERE has_sql_injection = 1
 81 | 			ORDER BY creation_date DESC
 82 | 			LIMIT 1000
 83 | 		');
 84 | 
 85 | 		$rows = $results->fetchAll(\PDO::FETCH_ASSOC);
 86 | 
 87 | 		$output = array();
 88 | 		foreach ($rows as $row) {
 89 | 			$lines = Question::bodyToLines($row['body_markdown']);
 90 | 			if (count($lines) <= $row['sql_injection_line']) continue; // shouldn't happen
 91 | 			$line = $lines[$row['sql_injection_line']];
 92 | 			$output[] = array(
 93 | 				'line' => trim($line),
 94 | 				'creation_date' => $row['creation_date'],
 95 | 				'question_id' => $row['question_id'],
 96 | 			);
 97 | 		}
 98 | 
 99 | 		return $output;
100 | 	}
101 | 
102 | 	public function sqlInjectionsPerCountry() {
103 | 		$output = array();
104 | 		$db = $this->db_;
105 | 		$lastId = 0;
106 | 		$lastQuestionId = Question::max('question_id');
107 | 		while (true) {
108 | 			$this->writeln(round(($lastId / $lastQuestionId) * 100) . '%');
109 | 			$sql = 'SELECT question_id, owner_id, has_sql, has_sql_injection FROM questions WHERE owner_id > 0 AND question_id > :question_id AND has_sql = 1 ORDER BY question_id LIMIT 10000';
110 | 			$this->writeln('Fetch questions...');
111 | 			$params = array('question_id' => $lastId);
112 | 			$questions = $this->cache_->getOrSet('ReportService::sqlInjectionsPerCountry_questions' . md5($sql . json_encode($params)), function() use($sql, $db, $params) {
113 | 				$st = $db->getPdo()->prepare($sql);
114 | 				$st->execute($params);
115 | 				return $st->fetchAll(\PDO::FETCH_ASSOC);
116 | 			}, 60 * 60 * 24 * 31);
117 | 
118 | 			if (!count($questions)) break;
119 | 
120 | 			$lastId = $questions[count($questions) - 1]['question_id'];
121 | 
122 | 			$userIds = array();
123 | 			foreach ($questions as $q) $userIds[] = (int)$q['owner_id'];
124 | 
125 | 			$this->writeln('Fetch users...');
126 | 
127 | 			$s = implode(',', $userIds);
128 | 			$sql = 'SELECT user_id, country FROM users WHERE country IS NOT NULL AND user_id IN (' . $s . ')';
129 | 			$users = $this->cache_->getOrSet('ReportService::sqlInjectionsPerCountry_users' . md5($sql), function() use($sql, $db) {
130 | 				return $db->getPdo()->query($sql)->fetchAll(\PDO::FETCH_ASSOC);
131 | 			});
132 | 	
133 | 			$temp = array();
134 | 			foreach ($questions as $qIndex => $q) {
135 | 				$country = null;
136 | 				foreach ($users as $u) {
137 | 					if ($u['user_id'] == $q['owner_id']) {
138 | 						$country = $u['country'];
139 | 						break;
140 | 					}
141 | 				}
142 | 				if (!$country) continue;
143 | 
144 | 				$q['country'] = $country;
145 | 				$temp[] = $q;
146 | 			}
147 | 			$questions = $temp;
148 | 
149 | 			foreach ($questions as $q) {
150 | 				if (!array_key_exists($q['country'], $output)) $output[$q['country']] = array('has_sql' => 0, 'has_sql_injection' => 0);
151 | 				$output[$q['country']]['has_sql']++;
152 | 				$output[$q['country']]['has_sql_injection'] += (int)$q['has_sql_injection'] ? 1 : 0;
153 | 			}
154 | 		}
155 | 
156 | 		$topCountries = Country::topCountries();
157 | 		$topCountryCodes = array();
158 | 		foreach ($topCountries as $c) $topCountryCodes[] = $c['country'];
159 | 
160 | 		$temp = array();
161 | 		foreach ($output as $country => $o) {
162 | 			if (!in_array($country, $topCountryCodes)) continue;
163 | 			$o['ratio'] = $o['has_sql'] ? $o['has_sql_injection'] / $o['has_sql'] : 0;
164 | 			$o['code'] = $country;
165 | 			$o['country_name'] = Country::countryName($country);
166 | 			$temp[] = $o;
167 | 		}
168 | 		$output = $temp;
169 | 
170 | 		usort($output, function($a, $b) {
171 | 			return $a['ratio'] > $b['ratio'] ? -1 : +1;
172 | 		});
173 | 
174 | 		return $output;
175 | 	}
176 | 
177 | }


--------------------------------------------------------------------------------
/src/AppBundle/StackExchangeApi.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace AppBundle;
 4 | 
 5 | class StackExchangeApi extends BaseService {
 6 | 
 7 | 	private $key_ = 'BmopG)d9Thccirg4e)CjOw(('; // This is public information
 8 | 	private $pageSize_ = 100;
 9 | 
10 | 	public function pageSize() {
11 | 		return $this->pageSize_;
12 | 	}
13 | 
14 | 	private function executeQuery($path, $query) {
15 | 		$query['key'] = $this->key_;
16 | 		$query['site'] = 'stackoverflow';
17 | 
18 | 		$baseUrl = 'https://api.stackexchange.com/2.2';
19 | 
20 | 		$url = $baseUrl . '/' . $path . '?' . http_build_query($query);
21 | 
22 | 		$this->writeln($url);
23 | 
24 | 		$ch = curl_init($url);
25 | 		curl_setopt($ch, CURLOPT_ENCODING, "gzip");
26 | 		curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
27 | 		$data = curl_exec($ch);
28 | 		curl_close($ch);
29 | 
30 | 		$d = json_decode($data, true);
31 | 		if ($d === false) throw new \Exception('Could not decode JSON: ' . $data);
32 | 		return $d;
33 | 	}
34 | 
35 | 	public function questions($fromDate, $toDate, $page) {
36 | 		$query = array();
37 | 		$query['filter'] = '!-*f(6rkvD-tO';
38 | 		$query['tagged'] = 'php';
39 | 		$query['fromdate'] = $fromDate;
40 | 		$query['todate'] = $toDate;
41 | 		$query['page'] = $page;
42 | 		$query['pagesize'] = $this->pageSize();
43 | 
44 | 		return $this->executeQuery('questions', $query);
45 | 	}
46 | 
47 | 	public function users($ids) {
48 | 		if (!count($ids)) throw new \Exception('No user IDs specified');
49 | 		$query = array();
50 | 		$query['filter'] = '!LnO)*RBjDUSz2sWDlSDTDB';
51 | 		$query['pagesize'] = $this->pageSize();
52 | 
53 | 		$path = 'users/' . implode(';', $ids);
54 | 
55 | 		return $this->executeQuery($path, $query);
56 | 	}
57 | 
58 | }
59 | 


--------------------------------------------------------------------------------
/src/AppBundle/UserFinder.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | namespace AppBundle;
  4 | 
  5 | use AppBundle\Model\Question;
  6 | use AppBundle\Model\User;
  7 | use AppBundle\BaseService;
  8 | 
  9 | class UserFinder extends BaseService {
 10 | 
 11 | 	private $db_ = null;
 12 | 	private $api_ = null;
 13 | 	private $userIds_ = array();
 14 | 	private $bufferSize_ = 100;
 15 | 
 16 | 	public function __construct($eloquent, $stackExchangeApi) {
 17 | 		$this->db_ = $eloquent->connection();
 18 | 		$this->api_ = $stackExchangeApi;
 19 | 	}
 20 | 
 21 | 	public function setOutput($output) {
 22 | 		$this->api_->setOutput($output);
 23 | 		parent::setOutput($output);
 24 | 	}
 25 | 
 26 | 	public function execute() {
 27 | 		$limit = 1000;
 28 | 		$lastId = 0;
 29 | 
 30 | 		while (true) {
 31 | 			$ownerIds = Question::ownerIdsWithNoUserObject($lastId, $limit);
 32 | 			if (!count($ownerIds)) break;
 33 | 			$this->writeln(sprintf('Adding %s users...', count($ownerIds)));
 34 | 			$this->processUsers($ownerIds);
 35 | 			if (count($ownerIds) < $this->bufferSize_) break;
 36 | 			$lastId = $ownerIds[count($ownerIds) - 1];			
 37 | 		}
 38 | 
 39 | 		$this->processAllUsers();
 40 | 	}
 41 | 
 42 | 	private function processAllUsers() {
 43 | 		$this->processUsers('all');
 44 | 	}
 45 | 
 46 | 	private function processUsers($userIds) {
 47 | 		$allUsers = $userIds === 'all';
 48 | 		if (!count($userIds) && !$allUsers) return;
 49 | 
 50 | 		if (!$allUsers) {
 51 | 			$this->userIds_ = array_merge($this->userIds_, $userIds);
 52 | 			$this->userIds_ = array_unique($this->userIds_);
 53 | 		}
 54 | 		
 55 | 		while (count($this->userIds_) >= $this->bufferSize_ || $allUsers) {
 56 | 			$d = array_slice($this->userIds_, 0, $this->bufferSize_);
 57 | 			$this->userIds_ = array_slice($this->userIds_, $this->bufferSize_);
 58 | 
 59 | 			if (!count($d)) break;
 60 | 
 61 | 			$results = array();
 62 | 			while (true) {
 63 | 				$results = $this->api_->users($d);
 64 | 				if (isset($results['backoff'])) {
 65 | 					$this->writeln("Got 'backoff' parameter: " . $results['backoff']);
 66 | 					sleep($results['backoff'] + 1); // Wait a bit longer than required so as not to be blocked
 67 | 					continue;
 68 | 				}
 69 | 				break;
 70 | 			}
 71 | 
 72 | 			if (!isset($results['items'])) throw new \Exception('Missing "items" property: ' . json_encode($results));
 73 | 
 74 | 			$this->db_->beginTransaction();
 75 | 
 76 | 			try {
 77 | 				foreach ($results['items'] as $result) {
 78 | 					$user = new User();
 79 | 					$user->fromApiArray($result);
 80 | 					$user->save();
 81 | 				}
 82 | 			} catch (\Exception $e) {
 83 | 				$this->db_->rollback();
 84 | 				throw $e;
 85 | 			}
 86 | 
 87 | 			$this->db_->commit();
 88 | 
 89 | 			sleep(1);
 90 | 		}
 91 | 	}
 92 | 
 93 | 	public function refreshUsers() {
 94 | 		$limit = 10000;
 95 | 		$offset = 0;
 96 | 		while (true) {
 97 | 			$users = User::orderBy('user_id', 'asc')
 98 | 			                     ->limit($limit)
 99 | 			                     ->offset($offset)
100 | 			                     ->get();
101 | 
102 | 			if (!count($users)) break;
103 | 
104 | 			$this->db_->beginTransaction();
105 | 			try {
106 | 				foreach ($users as $user) {
107 | 					$u = json_decode($user->raw_json, true);
108 | 					$user->fromApiArray($u);
109 | 					$user->save();
110 | 				}
111 | 			} catch (\Exception $e) {
112 | 				$this->db_->rollback();
113 | 				throw $e;
114 | 			}
115 | 			$this->db_->commit();
116 | 
117 | 			$offset += $limit;
118 | 		}
119 | 	}
120 | 
121 | 
122 | }


--------------------------------------------------------------------------------
/structure.sql:
--------------------------------------------------------------------------------
 1 | # Questions
 2 | 
 3 | CREATE TABLE `questions` (
 4 | 	`id` int(11) NOT NULL,
 5 | 	`body_markdown` TEXT,
 6 | 	`raw_json` TEXT,
 7 | PRIMARY KEY (`id`)
 8 | ) CHARACTER SET=utf8;
 9 | ALTER TABLE questions ADD creation_date int(11) default "0";
10 | ALTER TABLE questions ADD has_sql_injection tinyint(1) default "0";
11 | ALTER TABLE questions ADD sql_injection_line int(11) default "0";
12 | ALTER TABLE questions ADD is_processed tinyint(1) default "0";
13 | ALTER TABLE questions ADD has_sql tinyint(1) default "0";
14 | ALTER TABLE questions CHANGE id question_id int(11) NOT NULL;
15 | ALTER TABLE questions ADD updated_at datetime; -- For Eloquent:
16 | ALTER TABLE questions ADD created_at datetime; -- For Eloquent:
17 | UPDATE questions SET created_at = '2016-09-29 00:00:00', updated_at = '2016-09-29 00:00:00';
18 | ALTER TABLE questions ADD owner_id int(11) default "0";
19 | ALTER TABLE `questions` ADD INDEX `is_processed` (`is_processed`);
20 | ALTER TABLE `questions` ADD INDEX `creation_date` (`creation_date`);
21 | ALTER TABLE `questions` ADD INDEX `question_id` (`question_id`);
22 | ALTER TABLE `questions` ADD INDEX `has_sql` (`has_sql`);
23 | ALTER TABLE `questions` ADD INDEX `has_sql_injection` (`has_sql_injection`);
24 | ALTER TABLE `questions` ADD INDEX `owner_id` (`owner_id`);
25 | 
26 | # Users
27 | 
28 | CREATE TABLE `users` (
29 | 	`user_id` int(11) NOT NULL,
30 | 	`age` int(11) NOT NULL default "0",
31 | 	`reputation` int(11) NOT NULL default "0",
32 | 	`is_employee` tinyint(1) NOT NULL default "0",
33 | 	`location` varchar(255) NOT NULL default "",
34 | 	`raw_json` TEXT NOT NULL DEFAULT "",
35 | PRIMARY KEY (`user_id`)
36 | ) CHARACTER SET=utf8;
37 | ALTER TABLE users ADD country varchar(2);
38 | ALTER TABLE users ADD updated_at datetime;
39 | ALTER TABLE users ADD created_at datetime;
40 | ALTER TABLE users CHANGE location location varchar(255) NULL;
41 | UPDATE users SET created_at = '2016-09-30 00:00:00', updated_at = '2016-09-30 00:00:00';
42 | ALTER TABLE `users` ADD INDEX `user_id` (`user_id`);
43 | ALTER TABLE `users` ADD INDEX `country` (`country`);
44 | 
45 | # Countries
46 | 
47 | CREATE TABLE `countries` (
48 | 	`geoname_id` int(11) NOT NULL,
49 | 	`code` varchar(2) NOT NULL,
50 | 	PRIMARY KEY (`geoname_id`)
51 | ) CHARACTER SET=utf8;
52 | ALTER TABLE `countries` ADD INDEX `geoname_id` (`geoname_id`);
53 | ALTER TABLE `countries` ADD INDEX `code` (`code`);
54 | 
55 | # Cities
56 | 
57 | CREATE TABLE `cities` (
58 | 	`geoname_id` int(11) NOT NULL,
59 | 	`country_id` int(11) NOT NULL,
60 | 	PRIMARY KEY (`geoname_id`)
61 | ) CHARACTER SET=utf8;
62 | ALTER TABLE `cities` ADD INDEX `geoname_id` (`geoname_id`);
63 | ALTER TABLE `cities` ADD INDEX `country_id` (`country_id`);
64 | 
65 | # Places
66 | 
67 | CREATE TABLE `places` (
68 | 	`id` int(11) NOT NULL AUTO_INCREMENT PRIMARY KEY,
69 | 	`city_id` int(11) NULL DEFAULT NULL,
70 | 	`country_id` int(11) NULL DEFAULT NULL,
71 | 	`name` varchar(64) NOT NULL
72 | ) CHARACTER SET=utf8;
73 | ALTER TABLE `places` ADD INDEX `city_id` (`city_id`);
74 | ALTER TABLE `places` ADD INDEX `country_id` (`country_id`);
75 | ALTER TABLE `places` ADD INDEX `name` (`name`);
76 | 


--------------------------------------------------------------------------------
/testimport.sublime-project:
--------------------------------------------------------------------------------
 1 | {
 2 | 	"folders":
 3 | 	[
 4 | 		{
 5 | 			"folder_exclude_patterns":
 6 | 			[
 7 | 				"var/cache",
 8 | 				"var/logs"
 9 | 			],
10 | 			"path": "."
11 | 		}
12 | 	]
13 | }
14 | 


--------------------------------------------------------------------------------
/tests/AppBundle/Controller/DefaultControllerTest.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace Tests\AppBundle\Controller;
 4 | 
 5 | use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;
 6 | 
 7 | class DefaultControllerTest extends WebTestCase
 8 | {
 9 |     public function testIndex()
10 |     {
11 |         $client = static::createClient();
12 | 
13 |         $crawler = $client->request('GET', '/');
14 | 
15 |         $this->assertEquals(200, $client->getResponse()->getStatusCode());
16 |         $this->assertContains('Welcome to Symfony', $crawler->filter('#container h1')->text());
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/var/SymfonyRequirements.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /*
  4 |  * This file is part of the Symfony package.
  5 |  *
  6 |  * (c) Fabien Potencier <fabien@symfony.com>
  7 |  *
  8 |  * For the full copyright and license information, please view the LICENSE
  9 |  * file that was distributed with this source code.
 10 |  */
 11 | 
 12 | /*
 13 |  * Users of PHP 5.2 should be able to run the requirements checks.
 14 |  * This is why the file and all classes must be compatible with PHP 5.2+
 15 |  * (e.g. not using namespaces and closures).
 16 |  *
 17 |  * ************** CAUTION **************
 18 |  *
 19 |  * DO NOT EDIT THIS FILE as it will be overridden by Composer as part of
 20 |  * the installation/update process. The original file resides in the
 21 |  * SensioDistributionBundle.
 22 |  *
 23 |  * ************** CAUTION **************
 24 |  */
 25 | 
 26 | /**
 27 |  * Represents a single PHP requirement, e.g. an installed extension.
 28 |  * It can be a mandatory requirement or an optional recommendation.
 29 |  * There is a special subclass, named PhpIniRequirement, to check a php.ini configuration.
 30 |  *
 31 |  * @author Tobias Schultze <http://tobion.de>
 32 |  */
 33 | class Requirement
 34 | {
 35 |     private $fulfilled;
 36 |     private $testMessage;
 37 |     private $helpText;
 38 |     private $helpHtml;
 39 |     private $optional;
 40 | 
 41 |     /**
 42 |      * Constructor that initializes the requirement.
 43 |      *
 44 |      * @param bool        $fulfilled   Whether the requirement is fulfilled
 45 |      * @param string      $testMessage The message for testing the requirement
 46 |      * @param string      $helpHtml    The help text formatted in HTML for resolving the problem
 47 |      * @param string|null $helpText    The help text (when null, it will be inferred from $helpHtml, i.e. stripped from HTML tags)
 48 |      * @param bool        $optional    Whether this is only an optional recommendation not a mandatory requirement
 49 |      */
 50 |     public function __construct($fulfilled, $testMessage, $helpHtml, $helpText = null, $optional = false)
 51 |     {
 52 |         $this->fulfilled = (bool) $fulfilled;
 53 |         $this->testMessage = (string) $testMessage;
 54 |         $this->helpHtml = (string) $helpHtml;
 55 |         $this->helpText = null === $helpText ? strip_tags($this->helpHtml) : (string) $helpText;
 56 |         $this->optional = (bool) $optional;
 57 |     }
 58 | 
 59 |     /**
 60 |      * Returns whether the requirement is fulfilled.
 61 |      *
 62 |      * @return bool true if fulfilled, otherwise false
 63 |      */
 64 |     public function isFulfilled()
 65 |     {
 66 |         return $this->fulfilled;
 67 |     }
 68 | 
 69 |     /**
 70 |      * Returns the message for testing the requirement.
 71 |      *
 72 |      * @return string The test message
 73 |      */
 74 |     public function getTestMessage()
 75 |     {
 76 |         return $this->testMessage;
 77 |     }
 78 | 
 79 |     /**
 80 |      * Returns the help text for resolving the problem.
 81 |      *
 82 |      * @return string The help text
 83 |      */
 84 |     public function getHelpText()
 85 |     {
 86 |         return $this->helpText;
 87 |     }
 88 | 
 89 |     /**
 90 |      * Returns the help text formatted in HTML.
 91 |      *
 92 |      * @return string The HTML help
 93 |      */
 94 |     public function getHelpHtml()
 95 |     {
 96 |         return $this->helpHtml;
 97 |     }
 98 | 
 99 |     /**
100 |      * Returns whether this is only an optional recommendation and not a mandatory requirement.
101 |      *
102 |      * @return bool true if optional, false if mandatory
103 |      */
104 |     public function isOptional()
105 |     {
106 |         return $this->optional;
107 |     }
108 | }
109 | 
110 | /**
111 |  * Represents a PHP requirement in form of a php.ini configuration.
112 |  *
113 |  * @author Tobias Schultze <http://tobion.de>
114 |  */
115 | class PhpIniRequirement extends Requirement
116 | {
117 |     /**
118 |      * Constructor that initializes the requirement.
119 |      *
120 |      * @param string        $cfgName           The configuration name used for ini_get()
121 |      * @param bool|callback $evaluation        Either a boolean indicating whether the configuration should evaluate to true or false,
122 |      *                                         or a callback function receiving the configuration value as parameter to determine the fulfillment of the requirement
123 |      * @param bool          $approveCfgAbsence If true the Requirement will be fulfilled even if the configuration option does not exist, i.e. ini_get() returns false.
124 |      *                                         This is helpful for abandoned configs in later PHP versions or configs of an optional extension, like Suhosin.
125 |      *                                         Example: You require a config to be true but PHP later removes this config and defaults it to true internally.
126 |      * @param string|null   $testMessage       The message for testing the requirement (when null and $evaluation is a boolean a default message is derived)
127 |      * @param string|null   $helpHtml          The help text formatted in HTML for resolving the problem (when null and $evaluation is a boolean a default help is derived)
128 |      * @param string|null   $helpText          The help text (when null, it will be inferred from $helpHtml, i.e. stripped from HTML tags)
129 |      * @param bool          $optional          Whether this is only an optional recommendation not a mandatory requirement
130 |      */
131 |     public function __construct($cfgName, $evaluation, $approveCfgAbsence = false, $testMessage = null, $helpHtml = null, $helpText = null, $optional = false)
132 |     {
133 |         $cfgValue = ini_get($cfgName);
134 | 
135 |         if (is_callable($evaluation)) {
136 |             if (null === $testMessage || null === $helpHtml) {
137 |                 throw new InvalidArgumentException('You must provide the parameters testMessage and helpHtml for a callback evaluation.');
138 |             }
139 | 
140 |             $fulfilled = call_user_func($evaluation, $cfgValue);
141 |         } else {
142 |             if (null === $testMessage) {
143 |                 $testMessage = sprintf('%s %s be %s in php.ini',
144 |                     $cfgName,
145 |                     $optional ? 'should' : 'must',
146 |                     $evaluation ? 'enabled' : 'disabled'
147 |                 );
148 |             }
149 | 
150 |             if (null === $helpHtml) {
151 |                 $helpHtml = sprintf('Set <strong>%s</strong> to <strong>%s</strong> in php.ini<a href="#phpini">*</a>.',
152 |                     $cfgName,
153 |                     $evaluation ? 'on' : 'off'
154 |                 );
155 |             }
156 | 
157 |             $fulfilled = $evaluation == $cfgValue;
158 |         }
159 | 
160 |         parent::__construct($fulfilled || ($approveCfgAbsence && false === $cfgValue), $testMessage, $helpHtml, $helpText, $optional);
161 |     }
162 | }
163 | 
164 | /**
165 |  * A RequirementCollection represents a set of Requirement instances.
166 |  *
167 |  * @author Tobias Schultze <http://tobion.de>
168 |  */
169 | class RequirementCollection implements IteratorAggregate
170 | {
171 |     /**
172 |      * @var Requirement[]
173 |      */
174 |     private $requirements = array();
175 | 
176 |     /**
177 |      * Gets the current RequirementCollection as an Iterator.
178 |      *
179 |      * @return Traversable A Traversable interface
180 |      */
181 |     public function getIterator()
182 |     {
183 |         return new ArrayIterator($this->requirements);
184 |     }
185 | 
186 |     /**
187 |      * Adds a Requirement.
188 |      *
189 |      * @param Requirement $requirement A Requirement instance
190 |      */
191 |     public function add(Requirement $requirement)
192 |     {
193 |         $this->requirements[] = $requirement;
194 |     }
195 | 
196 |     /**
197 |      * Adds a mandatory requirement.
198 |      *
199 |      * @param bool        $fulfilled   Whether the requirement is fulfilled
200 |      * @param string      $testMessage The message for testing the requirement
201 |      * @param string      $helpHtml    The help text formatted in HTML for resolving the problem
202 |      * @param string|null $helpText    The help text (when null, it will be inferred from $helpHtml, i.e. stripped from HTML tags)
203 |      */
204 |     public function addRequirement($fulfilled, $testMessage, $helpHtml, $helpText = null)
205 |     {
206 |         $this->add(new Requirement($fulfilled, $testMessage, $helpHtml, $helpText, false));
207 |     }
208 | 
209 |     /**
210 |      * Adds an optional recommendation.
211 |      *
212 |      * @param bool        $fulfilled   Whether the recommendation is fulfilled
213 |      * @param string      $testMessage The message for testing the recommendation
214 |      * @param string      $helpHtml    The help text formatted in HTML for resolving the problem
215 |      * @param string|null $helpText    The help text (when null, it will be inferred from $helpHtml, i.e. stripped from HTML tags)
216 |      */
217 |     public function addRecommendation($fulfilled, $testMessage, $helpHtml, $helpText = null)
218 |     {
219 |         $this->add(new Requirement($fulfilled, $testMessage, $helpHtml, $helpText, true));
220 |     }
221 | 
222 |     /**
223 |      * Adds a mandatory requirement in form of a php.ini configuration.
224 |      *
225 |      * @param string        $cfgName           The configuration name used for ini_get()
226 |      * @param bool|callback $evaluation        Either a boolean indicating whether the configuration should evaluate to true or false,
227 |      *                                         or a callback function receiving the configuration value as parameter to determine the fulfillment of the requirement
228 |      * @param bool          $approveCfgAbsence If true the Requirement will be fulfilled even if the configuration option does not exist, i.e. ini_get() returns false.
229 |      *                                         This is helpful for abandoned configs in later PHP versions or configs of an optional extension, like Suhosin.
230 |      *                                         Example: You require a config to be true but PHP later removes this config and defaults it to true internally.
231 |      * @param string        $testMessage       The message for testing the requirement (when null and $evaluation is a boolean a default message is derived)
232 |      * @param string        $helpHtml          The help text formatted in HTML for resolving the problem (when null and $evaluation is a boolean a default help is derived)
233 |      * @param string|null   $helpText          The help text (when null, it will be inferred from $helpHtml, i.e. stripped from HTML tags)
234 |      */
235 |     public function addPhpIniRequirement($cfgName, $evaluation, $approveCfgAbsence = false, $testMessage = null, $helpHtml = null, $helpText = null)
236 |     {
237 |         $this->add(new PhpIniRequirement($cfgName, $evaluation, $approveCfgAbsence, $testMessage, $helpHtml, $helpText, false));
238 |     }
239 | 
240 |     /**
241 |      * Adds an optional recommendation in form of a php.ini configuration.
242 |      *
243 |      * @param string        $cfgName           The configuration name used for ini_get()
244 |      * @param bool|callback $evaluation        Either a boolean indicating whether the configuration should evaluate to true or false,
245 |      *                                         or a callback function receiving the configuration value as parameter to determine the fulfillment of the requirement
246 |      * @param bool          $approveCfgAbsence If true the Requirement will be fulfilled even if the configuration option does not exist, i.e. ini_get() returns false.
247 |      *                                         This is helpful for abandoned configs in later PHP versions or configs of an optional extension, like Suhosin.
248 |      *                                         Example: You require a config to be true but PHP later removes this config and defaults it to true internally.
249 |      * @param string        $testMessage       The message for testing the requirement (when null and $evaluation is a boolean a default message is derived)
250 |      * @param string        $helpHtml          The help text formatted in HTML for resolving the problem (when null and $evaluation is a boolean a default help is derived)
251 |      * @param string|null   $helpText          The help text (when null, it will be inferred from $helpHtml, i.e. stripped from HTML tags)
252 |      */
253 |     public function addPhpIniRecommendation($cfgName, $evaluation, $approveCfgAbsence = false, $testMessage = null, $helpHtml = null, $helpText = null)
254 |     {
255 |         $this->add(new PhpIniRequirement($cfgName, $evaluation, $approveCfgAbsence, $testMessage, $helpHtml, $helpText, true));
256 |     }
257 | 
258 |     /**
259 |      * Adds a requirement collection to the current set of requirements.
260 |      *
261 |      * @param RequirementCollection $collection A RequirementCollection instance
262 |      */
263 |     public function addCollection(RequirementCollection $collection)
264 |     {
265 |         $this->requirements = array_merge($this->requirements, $collection->all());
266 |     }
267 | 
268 |     /**
269 |      * Returns both requirements and recommendations.
270 |      *
271 |      * @return Requirement[]
272 |      */
273 |     public function all()
274 |     {
275 |         return $this->requirements;
276 |     }
277 | 
278 |     /**
279 |      * Returns all mandatory requirements.
280 |      *
281 |      * @return Requirement[]
282 |      */
283 |     public function getRequirements()
284 |     {
285 |         $array = array();
286 |         foreach ($this->requirements as $req) {
287 |             if (!$req->isOptional()) {
288 |                 $array[] = $req;
289 |             }
290 |         }
291 | 
292 |         return $array;
293 |     }
294 | 
295 |     /**
296 |      * Returns the mandatory requirements that were not met.
297 |      *
298 |      * @return Requirement[]
299 |      */
300 |     public function getFailedRequirements()
301 |     {
302 |         $array = array();
303 |         foreach ($this->requirements as $req) {
304 |             if (!$req->isFulfilled() && !$req->isOptional()) {
305 |                 $array[] = $req;
306 |             }
307 |         }
308 | 
309 |         return $array;
310 |     }
311 | 
312 |     /**
313 |      * Returns all optional recommendations.
314 |      *
315 |      * @return Requirement[]
316 |      */
317 |     public function getRecommendations()
318 |     {
319 |         $array = array();
320 |         foreach ($this->requirements as $req) {
321 |             if ($req->isOptional()) {
322 |                 $array[] = $req;
323 |             }
324 |         }
325 | 
326 |         return $array;
327 |     }
328 | 
329 |     /**
330 |      * Returns the recommendations that were not met.
331 |      *
332 |      * @return Requirement[]
333 |      */
334 |     public function getFailedRecommendations()
335 |     {
336 |         $array = array();
337 |         foreach ($this->requirements as $req) {
338 |             if (!$req->isFulfilled() && $req->isOptional()) {
339 |                 $array[] = $req;
340 |             }
341 |         }
342 | 
343 |         return $array;
344 |     }
345 | 
346 |     /**
347 |      * Returns whether a php.ini configuration is not correct.
348 |      *
349 |      * @return bool php.ini configuration problem?
350 |      */
351 |     public function hasPhpIniConfigIssue()
352 |     {
353 |         foreach ($this->requirements as $req) {
354 |             if (!$req->isFulfilled() && $req instanceof PhpIniRequirement) {
355 |                 return true;
356 |             }
357 |         }
358 | 
359 |         return false;
360 |     }
361 | 
362 |     /**
363 |      * Returns the PHP configuration file (php.ini) path.
364 |      *
365 |      * @return string|false php.ini file path
366 |      */
367 |     public function getPhpIniConfigPath()
368 |     {
369 |         return get_cfg_var('cfg_file_path');
370 |     }
371 | }
372 | 
373 | /**
374 |  * This class specifies all requirements and optional recommendations that
375 |  * are necessary to run the Symfony Standard Edition.
376 |  *
377 |  * @author Tobias Schultze <http://tobion.de>
378 |  * @author Fabien Potencier <fabien@symfony.com>
379 |  */
380 | class SymfonyRequirements extends RequirementCollection
381 | {
382 |     const LEGACY_REQUIRED_PHP_VERSION = '5.3.3';
383 |     const REQUIRED_PHP_VERSION = '5.5.9';
384 | 
385 |     /**
386 |      * Constructor that initializes the requirements.
387 |      */
388 |     public function __construct()
389 |     {
390 |         /* mandatory requirements follow */
391 | 
392 |         $installedPhpVersion = phpversion();
393 |         $requiredPhpVersion = $this->getPhpRequiredVersion();
394 | 
395 |         $this->addRecommendation(
396 |             $requiredPhpVersion,
397 |             'Vendors should be installed in order to check all requirements.',
398 |             'Run the <code>composer install</code> command.',
399 |             'Run the "composer install" command.'
400 |         );
401 | 
402 |         if (false !== $requiredPhpVersion) {
403 |             $this->addRequirement(
404 |                 version_compare($installedPhpVersion, $requiredPhpVersion, '>='),
405 |                 sprintf('PHP version must be at least %s (%s installed)', $requiredPhpVersion, $installedPhpVersion),
406 |                 sprintf('You are running PHP version "<strong>%s</strong>", but Symfony needs at least PHP "<strong>%s</strong>" to run.
407 |                 Before using Symfony, upgrade your PHP installation, preferably to the latest version.',
408 |                     $installedPhpVersion, $requiredPhpVersion),
409 |                 sprintf('Install PHP %s or newer (installed version is %s)', $requiredPhpVersion, $installedPhpVersion)
410 |             );
411 |         }
412 | 
413 |         $this->addRequirement(
414 |             version_compare($installedPhpVersion, '5.3.16', '!='),
415 |             'PHP version must not be 5.3.16 as Symfony won\'t work properly with it',
416 |             'Install PHP 5.3.17 or newer (or downgrade to an earlier PHP version)'
417 |         );
418 | 
419 |         $this->addRequirement(
420 |             is_dir(__DIR__.'/../vendor/composer'),
421 |             'Vendor libraries must be installed',
422 |             'Vendor libraries are missing. Install composer following instructions from <a href="http://getcomposer.org/">http://getcomposer.org/</a>. '.
423 |                 'Then run "<strong>php composer.phar install</strong>" to install them.'
424 |         );
425 | 
426 |         $cacheDir = is_dir(__DIR__.'/../var/cache') ? __DIR__.'/../var/cache' : __DIR__.'/cache';
427 | 
428 |         $this->addRequirement(
429 |             is_writable($cacheDir),
430 |             'app/cache/ or var/cache/ directory must be writable',
431 |             'Change the permissions of either "<strong>app/cache/</strong>" or  "<strong>var/cache/</strong>" directory so that the web server can write into it.'
432 |         );
433 | 
434 |         $logsDir = is_dir(__DIR__.'/../var/logs') ? __DIR__.'/../var/logs' : __DIR__.'/logs';
435 | 
436 |         $this->addRequirement(
437 |             is_writable($logsDir),
438 |             'app/logs/ or var/logs/ directory must be writable',
439 |             'Change the permissions of either "<strong>app/logs/</strong>" or  "<strong>var/logs/</strong>" directory so that the web server can write into it.'
440 |         );
441 | 
442 |         if (version_compare($installedPhpVersion, '7.0.0', '<')) {
443 |             $this->addPhpIniRequirement(
444 |                 'date.timezone', true, false,
445 |                 'date.timezone setting must be set',
446 |                 'Set the "<strong>date.timezone</strong>" setting in php.ini<a href="#phpini">*</a> (like Europe/Paris).'
447 |             );
448 |         }
449 | 
450 |         if (false !== $requiredPhpVersion && version_compare($installedPhpVersion, $requiredPhpVersion, '>=')) {
451 |             $timezones = array();
452 |             foreach (DateTimeZone::listAbbreviations() as $abbreviations) {
453 |                 foreach ($abbreviations as $abbreviation) {
454 |                     $timezones[$abbreviation['timezone_id']] = true;
455 |                 }
456 |             }
457 | 
458 |             $this->addRequirement(
459 |                 isset($timezones[@date_default_timezone_get()]),
460 |                 sprintf('Configured default timezone "%s" must be supported by your installation of PHP', @date_default_timezone_get()),
461 |                 'Your default timezone is not supported by PHP. Check for typos in your <strong>php.ini</strong> file and have a look at the list of deprecated timezones at <a href="http://php.net/manual/en/timezones.others.php">http://php.net/manual/en/timezones.others.php</a>.'
462 |             );
463 |         }
464 | 
465 |         $this->addRequirement(
466 |             function_exists('iconv'),
467 |             'iconv() must be available',
468 |             'Install and enable the <strong>iconv</strong> extension.'
469 |         );
470 | 
471 |         $this->addRequirement(
472 |             function_exists('json_encode'),
473 |             'json_encode() must be available',
474 |             'Install and enable the <strong>JSON</strong> extension.'
475 |         );
476 | 
477 |         $this->addRequirement(
478 |             function_exists('session_start'),
479 |             'session_start() must be available',
480 |             'Install and enable the <strong>session</strong> extension.'
481 |         );
482 | 
483 |         $this->addRequirement(
484 |             function_exists('ctype_alpha'),
485 |             'ctype_alpha() must be available',
486 |             'Install and enable the <strong>ctype</strong> extension.'
487 |         );
488 | 
489 |         $this->addRequirement(
490 |             function_exists('token_get_all'),
491 |             'token_get_all() must be available',
492 |             'Install and enable the <strong>Tokenizer</strong> extension.'
493 |         );
494 | 
495 |         $this->addRequirement(
496 |             function_exists('simplexml_import_dom'),
497 |             'simplexml_import_dom() must be available',
498 |             'Install and enable the <strong>SimpleXML</strong> extension.'
499 |         );
500 | 
501 |         if (function_exists('apc_store') && ini_get('apc.enabled')) {
502 |             if (version_compare($installedPhpVersion, '5.4.0', '>=')) {
503 |                 $this->addRequirement(
504 |                     version_compare(phpversion('apc'), '3.1.13', '>='),
505 |                     'APC version must be at least 3.1.13 when using PHP 5.4',
506 |                     'Upgrade your <strong>APC</strong> extension (3.1.13+).'
507 |                 );
508 |             } else {
509 |                 $this->addRequirement(
510 |                     version_compare(phpversion('apc'), '3.0.17', '>='),
511 |                     'APC version must be at least 3.0.17',
512 |                     'Upgrade your <strong>APC</strong> extension (3.0.17+).'
513 |                 );
514 |             }
515 |         }
516 | 
517 |         $this->addPhpIniRequirement('detect_unicode', false);
518 | 
519 |         if (extension_loaded('suhosin')) {
520 |             $this->addPhpIniRequirement(
521 |                 'suhosin.executor.include.whitelist',
522 |                 create_function('$cfgValue', 'return false !== stripos($cfgValue, "phar");'),
523 |                 false,
524 |                 'suhosin.executor.include.whitelist must be configured correctly in php.ini',
525 |                 'Add "<strong>phar</strong>" to <strong>suhosin.executor.include.whitelist</strong> in php.ini<a href="#phpini">*</a>.'
526 |             );
527 |         }
528 | 
529 |         if (extension_loaded('xdebug')) {
530 |             $this->addPhpIniRequirement(
531 |                 'xdebug.show_exception_trace', false, true
532 |             );
533 | 
534 |             $this->addPhpIniRequirement(
535 |                 'xdebug.scream', false, true
536 |             );
537 | 
538 |             $this->addPhpIniRecommendation(
539 |                 'xdebug.max_nesting_level',
540 |                 create_function('$cfgValue', 'return $cfgValue > 100;'),
541 |                 true,
542 |                 'xdebug.max_nesting_level should be above 100 in php.ini',
543 |                 'Set "<strong>xdebug.max_nesting_level</strong>" to e.g. "<strong>250</strong>" in php.ini<a href="#phpini">*</a> to stop Xdebug\'s infinite recursion protection erroneously throwing a fatal error in your project.'
544 |             );
545 |         }
546 | 
547 |         $pcreVersion = defined('PCRE_VERSION') ? (float) PCRE_VERSION : null;
548 | 
549 |         $this->addRequirement(
550 |             null !== $pcreVersion,
551 |             'PCRE extension must be available',
552 |             'Install the <strong>PCRE</strong> extension (version 8.0+).'
553 |         );
554 | 
555 |         if (extension_loaded('mbstring')) {
556 |             $this->addPhpIniRequirement(
557 |                 'mbstring.func_overload',
558 |                 create_function('$cfgValue', 'return (int) $cfgValue === 0;'),
559 |                 true,
560 |                 'string functions should not be overloaded',
561 |                 'Set "<strong>mbstring.func_overload</strong>" to <strong>0</strong> in php.ini<a href="#phpini">*</a> to disable function overloading by the mbstring extension.'
562 |             );
563 |         }
564 | 
565 |         /* optional recommendations follow */
566 | 
567 |         if (file_exists(__DIR__.'/../vendor/composer')) {
568 |             require_once __DIR__.'/../vendor/autoload.php';
569 | 
570 |             try {
571 |                 $r = new ReflectionClass('Sensio\Bundle\DistributionBundle\SensioDistributionBundle');
572 | 
573 |                 $contents = file_get_contents(dirname($r->getFileName()).'/Resources/skeleton/app/SymfonyRequirements.php');
574 |             } catch (ReflectionException $e) {
575 |                 $contents = '';
576 |             }
577 |             $this->addRecommendation(
578 |                 file_get_contents(__FILE__) === $contents,
579 |                 'Requirements file should be up-to-date',
580 |                 'Your requirements file is outdated. Run composer install and re-check your configuration.'
581 |             );
582 |         }
583 | 
584 |         $this->addRecommendation(
585 |             version_compare($installedPhpVersion, '5.3.4', '>='),
586 |             'You should use at least PHP 5.3.4 due to PHP bug #52083 in earlier versions',
587 |             'Your project might malfunction randomly due to PHP bug #52083 ("Notice: Trying to get property of non-object"). Install PHP 5.3.4 or newer.'
588 |         );
589 | 
590 |         $this->addRecommendation(
591 |             version_compare($installedPhpVersion, '5.3.8', '>='),
592 |             'When using annotations you should have at least PHP 5.3.8 due to PHP bug #55156',
593 |             'Install PHP 5.3.8 or newer if your project uses annotations.'
594 |         );
595 | 
596 |         $this->addRecommendation(
597 |             version_compare($installedPhpVersion, '5.4.0', '!='),
598 |             'You should not use PHP 5.4.0 due to the PHP bug #61453',
599 |             'Your project might not work properly due to the PHP bug #61453 ("Cannot dump definitions which have method calls"). Install PHP 5.4.1 or newer.'
600 |         );
601 | 
602 |         $this->addRecommendation(
603 |             version_compare($installedPhpVersion, '5.4.11', '>='),
604 |             'When using the logout handler from the Symfony Security Component, you should have at least PHP 5.4.11 due to PHP bug #63379 (as a workaround, you can also set invalidate_session to false in the security logout handler configuration)',
605 |             'Install PHP 5.4.11 or newer if your project uses the logout handler from the Symfony Security Component.'
606 |         );
607 | 
608 |         $this->addRecommendation(
609 |             (version_compare($installedPhpVersion, '5.3.18', '>=') && version_compare($installedPhpVersion, '5.4.0', '<'))
610 |             ||
611 |             version_compare($installedPhpVersion, '5.4.8', '>='),
612 |             'You should use PHP 5.3.18+ or PHP 5.4.8+ to always get nice error messages for fatal errors in the development environment due to PHP bug #61767/#60909',
613 |             'Install PHP 5.3.18+ or PHP 5.4.8+ if you want nice error messages for all fatal errors in the development environment.'
614 |         );
615 | 
616 |         if (null !== $pcreVersion) {
617 |             $this->addRecommendation(
618 |                 $pcreVersion >= 8.0,
619 |                 sprintf('PCRE extension should be at least version 8.0 (%s installed)', $pcreVersion),
620 |                 '<strong>PCRE 8.0+</strong> is preconfigured in PHP since 5.3.2 but you are using an outdated version of it. Symfony probably works anyway but it is recommended to upgrade your PCRE extension.'
621 |             );
622 |         }
623 | 
624 |         $this->addRecommendation(
625 |             class_exists('DomDocument'),
626 |             'PHP-DOM and PHP-XML modules should be installed',
627 |             'Install and enable the <strong>PHP-DOM</strong> and the <strong>PHP-XML</strong> modules.'
628 |         );
629 | 
630 |         $this->addRecommendation(
631 |             function_exists('mb_strlen'),
632 |             'mb_strlen() should be available',
633 |             'Install and enable the <strong>mbstring</strong> extension.'
634 |         );
635 | 
636 |         $this->addRecommendation(
637 |             function_exists('iconv'),
638 |             'iconv() should be available',
639 |             'Install and enable the <strong>iconv</strong> extension.'
640 |         );
641 | 
642 |         $this->addRecommendation(
643 |             function_exists('utf8_decode'),
644 |             'utf8_decode() should be available',
645 |             'Install and enable the <strong>XML</strong> extension.'
646 |         );
647 | 
648 |         $this->addRecommendation(
649 |             function_exists('filter_var'),
650 |             'filter_var() should be available',
651 |             'Install and enable the <strong>filter</strong> extension.'
652 |         );
653 | 
654 |         if (!defined('PHP_WINDOWS_VERSION_BUILD')) {
655 |             $this->addRecommendation(
656 |                 function_exists('posix_isatty'),
657 |                 'posix_isatty() should be available',
658 |                 'Install and enable the <strong>php_posix</strong> extension (used to colorize the CLI output).'
659 |             );
660 |         }
661 | 
662 |         $this->addRecommendation(
663 |             extension_loaded('intl'),
664 |             'intl extension should be available',
665 |             'Install and enable the <strong>intl</strong> extension (used for validators).'
666 |         );
667 | 
668 |         if (extension_loaded('intl')) {
669 |             // in some WAMP server installations, new Collator() returns null
670 |             $this->addRecommendation(
671 |                 null !== new Collator('fr_FR'),
672 |                 'intl extension should be correctly configured',
673 |                 'The intl extension does not behave properly. This problem is typical on PHP 5.3.X x64 WIN builds.'
674 |             );
675 | 
676 |             // check for compatible ICU versions (only done when you have the intl extension)
677 |             if (defined('INTL_ICU_VERSION')) {
678 |                 $version = INTL_ICU_VERSION;
679 |             } else {
680 |                 $reflector = new ReflectionExtension('intl');
681 | 
682 |                 ob_start();
683 |                 $reflector->info();
684 |                 $output = strip_tags(ob_get_clean());
685 | 
686 |                 preg_match('/^ICU version +(?:=> )?(.*)$/m', $output, $matches);
687 |                 $version = $matches[1];
688 |             }
689 | 
690 |             $this->addRecommendation(
691 |                 version_compare($version, '4.0', '>='),
692 |                 'intl ICU version should be at least 4+',
693 |                 'Upgrade your <strong>intl</strong> extension with a newer ICU version (4+).'
694 |             );
695 | 
696 |             if (class_exists('Symfony\Component\Intl\Intl')) {
697 |                 $this->addRecommendation(
698 |                     \Symfony\Component\Intl\Intl::getIcuDataVersion() <= \Symfony\Component\Intl\Intl::getIcuVersion(),
699 |                     sprintf('intl ICU version installed on your system is outdated (%s) and does not match the ICU data bundled with Symfony (%s)', \Symfony\Component\Intl\Intl::getIcuVersion(), \Symfony\Component\Intl\Intl::getIcuDataVersion()),
700 |                     'To get the latest internationalization data upgrade the ICU system package and the intl PHP extension.'
701 |                 );
702 |                 if (\Symfony\Component\Intl\Intl::getIcuDataVersion() <= \Symfony\Component\Intl\Intl::getIcuVersion()) {
703 |                     $this->addRecommendation(
704 |                         \Symfony\Component\Intl\Intl::getIcuDataVersion() === \Symfony\Component\Intl\Intl::getIcuVersion(),
705 |                         sprintf('intl ICU version installed on your system (%s) does not match the ICU data bundled with Symfony (%s)', \Symfony\Component\Intl\Intl::getIcuVersion(), \Symfony\Component\Intl\Intl::getIcuDataVersion()),
706 |                         'To avoid internationalization data inconsistencies upgrade the symfony/intl component.'
707 |                     );
708 |                 }
709 |             }
710 | 
711 |             $this->addPhpIniRecommendation(
712 |                 'intl.error_level',
713 |                 create_function('$cfgValue', 'return (int) $cfgValue === 0;'),
714 |                 true,
715 |                 'intl.error_level should be 0 in php.ini',
716 |                 'Set "<strong>intl.error_level</strong>" to "<strong>0</strong>" in php.ini<a href="#phpini">*</a> to inhibit the messages when an error occurs in ICU functions.'
717 |             );
718 |         }
719 | 
720 |         $accelerator =
721 |             (extension_loaded('eaccelerator') && ini_get('eaccelerator.enable'))
722 |             ||
723 |             (extension_loaded('apc') && ini_get('apc.enabled'))
724 |             ||
725 |             (extension_loaded('Zend Optimizer+') && ini_get('zend_optimizerplus.enable'))
726 |             ||
727 |             (extension_loaded('Zend OPcache') && ini_get('opcache.enable'))
728 |             ||
729 |             (extension_loaded('xcache') && ini_get('xcache.cacher'))
730 |             ||
731 |             (extension_loaded('wincache') && ini_get('wincache.ocenabled'))
732 |         ;
733 | 
734 |         $this->addRecommendation(
735 |             $accelerator,
736 |             'a PHP accelerator should be installed',
737 |             'Install and/or enable a <strong>PHP accelerator</strong> (highly recommended).'
738 |         );
739 | 
740 |         if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
741 |             $this->addRecommendation(
742 |                 $this->getRealpathCacheSize() >= 5 * 1024 * 1024,
743 |                 'realpath_cache_size should be at least 5M in php.ini',
744 |                 'Setting "<strong>realpath_cache_size</strong>" to e.g. "<strong>5242880</strong>" or "<strong>5M</strong>" in php.ini<a href="#phpini">*</a> may improve performance on Windows significantly in some cases.'
745 |             );
746 |         }
747 | 
748 |         $this->addPhpIniRecommendation('short_open_tag', false);
749 | 
750 |         $this->addPhpIniRecommendation('magic_quotes_gpc', false, true);
751 | 
752 |         $this->addPhpIniRecommendation('register_globals', false, true);
753 | 
754 |         $this->addPhpIniRecommendation('session.auto_start', false);
755 | 
756 |         $this->addRecommendation(
757 |             class_exists('PDO'),
758 |             'PDO should be installed',
759 |             'Install <strong>PDO</strong> (mandatory for Doctrine).'
760 |         );
761 | 
762 |         if (class_exists('PDO')) {
763 |             $drivers = PDO::getAvailableDrivers();
764 |             $this->addRecommendation(
765 |                 count($drivers) > 0,
766 |                 sprintf('PDO should have some drivers installed (currently available: %s)', count($drivers) ? implode(', ', $drivers) : 'none'),
767 |                 'Install <strong>PDO drivers</strong> (mandatory for Doctrine).'
768 |             );
769 |         }
770 |     }
771 | 
772 |     /**
773 |      * Loads realpath_cache_size from php.ini and converts it to int.
774 |      *
775 |      * (e.g. 16k is converted to 16384 int)
776 |      *
777 |      * @return int
778 |      */
779 |     protected function getRealpathCacheSize()
780 |     {
781 |         $size = ini_get('realpath_cache_size');
782 |         $size = trim($size);
783 |         $unit = strtolower(substr($size, -1, 1));
784 |         switch ($unit) {
785 |             case 'g':
786 |                 return $size * 1024 * 1024 * 1024;
787 |             case 'm':
788 |                 return $size * 1024 * 1024;
789 |             case 'k':
790 |                 return $size * 1024;
791 |             default:
792 |                 return (int) $size;
793 |         }
794 |     }
795 | 
796 |     /**
797 |      * Defines PHP required version from Symfony version.
798 |      *
799 |      * @return string|false The PHP required version or false if it could not be guessed
800 |      */
801 |     protected function getPhpRequiredVersion()
802 |     {
803 |         if (!file_exists($path = __DIR__.'/../composer.lock')) {
804 |             return false;
805 |         }
806 | 
807 |         $composerLock = json_decode(file_get_contents($path), true);
808 |         foreach ($composerLock['packages'] as $package) {
809 |             $name = $package['name'];
810 |             if ('symfony/symfony' !== $name && 'symfony/http-kernel' !== $name) {
811 |                 continue;
812 |             }
813 | 
814 |             return (int) $package['version'][1] > 2 ? self::REQUIRED_PHP_VERSION : self::LEGACY_REQUIRED_PHP_VERSION;
815 |         }
816 | 
817 |         return false;
818 |     }
819 | }
820 | 


--------------------------------------------------------------------------------
/var/cache/.gitkeep:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/laurent22/so-sql-injections/6515f8bc1b7f6f3489411ffda168a000be7b6257/var/cache/.gitkeep


--------------------------------------------------------------------------------
/var/logs/.gitkeep:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/laurent22/so-sql-injections/6515f8bc1b7f6f3489411ffda168a000be7b6257/var/logs/.gitkeep


--------------------------------------------------------------------------------
/var/places/README.md:
--------------------------------------------------------------------------------
1 | Download from http://www.geonames.org/
2 | 
3 | - allCountries.txt
4 | - cities1000.txt
5 | - countryInfo.txt


--------------------------------------------------------------------------------
/var/sessions/.gitkeep:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/laurent22/so-sql-injections/6515f8bc1b7f6f3489411ffda168a000be7b6257/var/sessions/.gitkeep


--------------------------------------------------------------------------------
/web/.htaccess:
--------------------------------------------------------------------------------
 1 | # Use the front controller as index file. It serves as a fallback solution when
 2 | # every other rewrite/redirect fails (e.g. in an aliased environment without
 3 | # mod_rewrite). Additionally, this reduces the matching process for the
 4 | # start page (path "/") because otherwise Apache will apply the rewriting rules
 5 | # to each configured DirectoryIndex file (e.g. index.php, index.html, index.pl).
 6 | DirectoryIndex app.php
 7 | 
 8 | # By default, Apache does not evaluate symbolic links if you did not enable this
 9 | # feature in your server configuration. Uncomment the following line if you
10 | # install assets as symlinks or if you experience problems related to symlinks
11 | # when compiling LESS/Sass/CoffeScript assets.
12 | # Options FollowSymlinks
13 | 
14 | # Disabling MultiViews prevents unwanted negotiation, e.g. "/app" should not resolve
15 | # to the front controller "/app.php" but be rewritten to "/app.php/app".
16 | <IfModule mod_negotiation.c>
17 |     Options -MultiViews
18 | </IfModule>
19 | 
20 | <IfModule mod_rewrite.c>
21 |     RewriteEngine On
22 | 
23 |     # Determine the RewriteBase automatically and set it as environment variable.
24 |     # If you are using Apache aliases to do mass virtual hosting or installed the
25 |     # project in a subdirectory, the base path will be prepended to allow proper
26 |     # resolution of the app.php file and to redirect to the correct URI. It will
27 |     # work in environments without path prefix as well, providing a safe, one-size
28 |     # fits all solution. But as you do not need it in this case, you can comment
29 |     # the following 2 lines to eliminate the overhead.
30 |     RewriteCond %{REQUEST_URI}::$1 ^(/.+)/(.*)::\2$
31 |     RewriteRule ^(.*) - [E=BASE:%1]
32 | 
33 |     # Sets the HTTP_AUTHORIZATION header removed by Apache
34 |     RewriteCond %{HTTP:Authorization} .
35 |     RewriteRule ^ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
36 | 
37 |     # Redirect to URI without front controller to prevent duplicate content
38 |     # (with and without `/app.php`). Only do this redirect on the initial
39 |     # rewrite by Apache and not on subsequent cycles. Otherwise we would get an
40 |     # endless redirect loop (request -> rewrite to front controller ->
41 |     # redirect -> request -> ...).
42 |     # So in case you get a "too many redirects" error or you always get redirected
43 |     # to the start page because your Apache does not expose the REDIRECT_STATUS
44 |     # environment variable, you have 2 choices:
45 |     # - disable this feature by commenting the following 2 lines or
46 |     # - use Apache >= 2.3.9 and replace all L flags by END flags and remove the
47 |     #   following RewriteCond (best solution)
48 |     RewriteCond %{ENV:REDIRECT_STATUS} ^$
49 |     RewriteRule ^app\.php(?:/(.*)|$) %{ENV:BASE}/$1 [R=301,L]
50 | 
51 |     # If the requested filename exists, simply serve it.
52 |     # We only want to let Apache serve files and not directories.
53 |     RewriteCond %{REQUEST_FILENAME} -f
54 |     RewriteRule ^ - [L]
55 | 
56 |     # Rewrite all other queries to the front controller.
57 |     RewriteRule ^ %{ENV:BASE}/app.php [L]
58 | </IfModule>
59 | 
60 | <IfModule !mod_rewrite.c>
61 |     <IfModule mod_alias.c>
62 |         # When mod_rewrite is not available, we instruct a temporary redirect of
63 |         # the start page to the front controller explicitly so that the website
64 |         # and the generated links can still be used.
65 |         RedirectMatch 302 ^/$ /app.php/
66 |         # RedirectTemp cannot be used instead
67 |     </IfModule>
68 | </IfModule>
69 | 


--------------------------------------------------------------------------------
/web/app.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | use Symfony\Component\HttpFoundation\Request;
 4 | 
 5 | /**
 6 |  * @var Composer\Autoload\ClassLoader
 7 |  */
 8 | $loader = require __DIR__.'/../app/autoload.php';
 9 | include_once __DIR__.'/../var/bootstrap.php.cache';
10 | 
11 | $kernel = new AppKernel('prod', false);
12 | $kernel->loadClassCache();
13 | //$kernel = new AppCache($kernel);
14 | 
15 | // When using the HttpCache, you need to call the method in your front controller instead of relying on the configuration parameter
16 | //Request::enableHttpMethodParameterOverride();
17 | $request = Request::createFromGlobals();
18 | $response = $kernel->handle($request);
19 | $response->send();
20 | $kernel->terminate($request, $response);
21 | 


--------------------------------------------------------------------------------
/web/app_dev.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | use Symfony\Component\HttpFoundation\Request;
 4 | use Symfony\Component\Debug\Debug;
 5 | 
 6 | // If you don't want to setup permissions the proper way, just uncomment the following PHP line
 7 | // read http://symfony.com/doc/current/book/installation.html#checking-symfony-application-configuration-and-setup
 8 | // for more information
 9 | //umask(0000);
10 | 
11 | // This check prevents access to debug front controllers that are deployed by accident to production servers.
12 | // Feel free to remove this, extend it, or make something more sophisticated.
13 | if (isset($_SERVER['HTTP_CLIENT_IP'])
14 |     || isset($_SERVER['HTTP_X_FORWARDED_FOR'])
15 |     || !(in_array(@$_SERVER['REMOTE_ADDR'], ['127.0.0.1', '::1']) || php_sapi_name() === 'cli-server')
16 | ) {
17 |     header('HTTP/1.0 403 Forbidden');
18 |     exit('You are not allowed to access this file. Check '.basename(__FILE__).' for more information.');
19 | }
20 | 
21 | /**
22 |  * @var Composer\Autoload\ClassLoader $loader
23 |  */
24 | $loader = require __DIR__.'/../app/autoload.php';
25 | Debug::enable();
26 | 
27 | require_once __DIR__.'/setup_eloquent.php';
28 | 
29 | $kernel = new AppKernel('dev', true);
30 | $kernel->loadClassCache();
31 | $request = Request::createFromGlobals();
32 | $response = $kernel->handle($request);
33 | $response->send();
34 | $kernel->terminate($request, $response);
35 | 


--------------------------------------------------------------------------------
/web/apple-touch-icon.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/laurent22/so-sql-injections/6515f8bc1b7f6f3489411ffda168a000be7b6257/web/apple-touch-icon.png


--------------------------------------------------------------------------------
/web/config.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /*
  4 |  * ************** CAUTION **************
  5 |  *
  6 |  * DO NOT EDIT THIS FILE as it will be overridden by Composer as part of
  7 |  * the installation/update process. The original file resides in the
  8 |  * SensioDistributionBundle.
  9 |  *
 10 |  * ************** CAUTION **************
 11 |  */
 12 | 
 13 | if (!isset($_SERVER['HTTP_HOST'])) {
 14 |     exit('This script cannot be run from the CLI. Run it from a browser.');
 15 | }
 16 | 
 17 | if (!in_array(@$_SERVER['REMOTE_ADDR'], array(
 18 |     '127.0.0.1',
 19 |     '::1',
 20 | ))) {
 21 |     header('HTTP/1.0 403 Forbidden');
 22 |     exit('This script is only accessible from localhost.');
 23 | }
 24 | 
 25 | require_once dirname(__FILE__).'/../var/SymfonyRequirements.php';
 26 | 
 27 | $symfonyRequirements = new SymfonyRequirements();
 28 | 
 29 | $majorProblems = $symfonyRequirements->getFailedRequirements();
 30 | $minorProblems = $symfonyRequirements->getFailedRecommendations();
 31 | $hasMajorProblems = (bool) count($majorProblems);
 32 | $hasMinorProblems = (bool) count($minorProblems);
 33 | 
 34 | ?>
 35 | <!DOCTYPE html>
 36 | <html>
 37 |     <head>
 38 |         <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
 39 |         <meta name="robots" content="noindex,nofollow" />
 40 |         <title>Symfony Configuration Checker</title>
 41 |         <link rel="stylesheet" href="bundles/framework/css/structure.css" media="all" />
 42 |         <link rel="stylesheet" href="bundles/framework/css/body.css" media="all" />
 43 |         <style type="text/css">
 44 |             /* styles copied from bundles/sensiodistribution/webconfigurator/css/install.css */
 45 |             body {
 46 |                 font-size: 14px;
 47 |                 font-family: "Lucida Sans Unicode", "Lucida Grande", Verdana, Arial, Helvetica, sans-serif;
 48 |             }
 49 |             .sf-reset h1.title {
 50 |                 font-size: 45px;
 51 |                 padding-bottom: 30px;
 52 |             }
 53 |             .sf-reset h2 {
 54 |                 font-weight: bold;
 55 |                 color: #FFFFFF;
 56 |                 /* Font is reset to sans-serif (like body) */
 57 |                 font-family: "Lucida Sans Unicode", "Lucida Grande", Verdana, Arial, Helvetica, sans-serif;
 58 |                 margin-bottom: 10px;
 59 |                 background-color: #aacd4e;
 60 |                 padding: 2px 4px;
 61 |                 display: inline-block;
 62 |                 text-transform: uppercase;
 63 |             }
 64 |             .sf-reset ul a,
 65 |             .sf-reset ul a:hover {
 66 |                 background: url(../images/blue-arrow.png) no-repeat right 6px;
 67 |                 padding-right: 10px;
 68 |             }
 69 |             .sf-reset ul, ol {
 70 |                 padding-left: 20px;
 71 |             }
 72 |             .sf-reset li {
 73 |                 padding-bottom: 18px;
 74 |             }
 75 |             .sf-reset ol li {
 76 |                 list-style-type: decimal;
 77 |             }
 78 |             .sf-reset ul li {
 79 |                 list-style-type: none;
 80 |             }
 81 |             .sf-reset .symfony-blocks-install {
 82 |                 overflow: hidden;
 83 |             }
 84 |             .sf-reset .symfony-install-continue {
 85 |                 font-size: 0.95em;
 86 |                 padding-left: 0;
 87 |             }
 88 |             .sf-reset .symfony-install-continue li {
 89 |                 padding-bottom: 10px;
 90 |             }
 91 |             .sf-reset .ok {
 92 |                 color: #fff;
 93 |                 font-family: "Lucida Sans Unicode", "Lucida Grande", Verdana, Arial, Helvetica, sans-serif;
 94 |                 background-color: #6d6;
 95 |                 padding: 10px;
 96 |                 margin-bottom: 20px;
 97 |             }
 98 |             .sf-reset .ko {
 99 |                 background-color: #d66;
100 |             }
101 |             .sf-reset p.help {
102 |                 padding: 12px 16px;
103 |                 word-break: break-word;
104 |             }
105 |             .version {
106 |                 text-align: right;
107 |                 font-size: 10px;
108 |                 margin-right: 20px;
109 |             }
110 |             .sf-reset a,
111 |             .sf-reset li a {
112 |                 color: #08C;
113 |                 text-decoration: none;
114 |             }
115 |             .sf-reset a:hover,
116 |             .sf-reset li a:hover {
117 |                 color: #08C;
118 |                 text-decoration: underline;
119 |             }
120 |             .sf-reset textarea {
121 |                 padding: 7px;
122 |             }
123 |         </style>
124 |     </head>
125 |     <body>
126 |         <div id="content">
127 |             <div class="header clear-fix">
128 |                 <div class="header-logo">
129 |                     <img src="bundles/framework/images/logo_symfony.png" alt="Symfony" />
130 |                 </div>
131 | 
132 |                 <div class="search">
133 |                   <form method="get" action="http://symfony.com/search">
134 |                     <div class="form-row">
135 | 
136 |                       <label for="search-id">
137 |                           <img src="bundles/framework/images/grey_magnifier.png" alt="Search on Symfony website" />
138 |                       </label>
139 | 
140 |                       <input name="q" id="search-id" type="search" placeholder="Search on Symfony website" />
141 | 
142 |                       <button type="submit" class="sf-button">
143 |                           <span class="border-l">
144 |                             <span class="border-r">
145 |                                 <span class="btn-bg">OK</span>
146 |                             </span>
147 |                         </span>
148 |                       </button>
149 |                     </div>
150 |                    </form>
151 |                 </div>
152 |             </div>
153 | 
154 |             <div class="sf-reset">
155 |                 <div class="block">
156 |                     <div class="symfony-block-content">
157 |                         <h1 class="title">Configuration Checker</h1>
158 |                         <p>
159 |                             This script analyzes your system to check whether is
160 |                             ready to run Symfony applications.
161 |                         </p>
162 | 
163 |                         <?php if ($hasMajorProblems): ?>
164 |                             <h2 class="ko">Major problems</h2>
165 |                             <p>Major problems have been detected and <strong>must</strong> be fixed before continuing:</p>
166 |                             <ol>
167 |                                 <?php foreach ($majorProblems as $problem): ?>
168 |                                     <li><?php echo $problem->getTestMessage() ?>
169 |                                         <p class="help"><em><?php echo $problem->getHelpHtml() ?></em></p>
170 |                                     </li>
171 |                                 <?php endforeach; ?>
172 |                             </ol>
173 |                         <?php endif; ?>
174 | 
175 |                         <?php if ($hasMinorProblems): ?>
176 |                             <h2>Recommendations</h2>
177 |                             <p>
178 |                                 <?php if ($hasMajorProblems): ?>Additionally, to<?php else: ?>To<?php endif; ?> enhance your Symfony experience,
179 |                                 it’s recommended that you fix the following:
180 |                             </p>
181 |                             <ol>
182 |                                 <?php foreach ($minorProblems as $problem): ?>
183 |                                     <li><?php echo $problem->getTestMessage() ?>
184 |                                         <p class="help"><em><?php echo $problem->getHelpHtml() ?></em></p>
185 |                                     </li>
186 |                                 <?php endforeach; ?>
187 |                             </ol>
188 |                         <?php endif; ?>
189 | 
190 |                         <?php if ($symfonyRequirements->hasPhpIniConfigIssue()): ?>
191 |                             <p id="phpini">*
192 |                                 <?php if ($symfonyRequirements->getPhpIniConfigPath()): ?>
193 |                                     Changes to the <strong>php.ini</strong> file must be done in "<strong><?php echo $symfonyRequirements->getPhpIniConfigPath() ?></strong>".
194 |                                 <?php else: ?>
195 |                                     To change settings, create a "<strong>php.ini</strong>".
196 |                                 <?php endif; ?>
197 |                             </p>
198 |                         <?php endif; ?>
199 | 
200 |                         <?php if (!$hasMajorProblems && !$hasMinorProblems): ?>
201 |                             <p class="ok">All checks passed successfully. Your system is ready to run Symfony applications.</p>
202 |                         <?php endif; ?>
203 | 
204 |                         <ul class="symfony-install-continue">
205 |                             <?php if ($hasMajorProblems || $hasMinorProblems): ?>
206 |                                 <li><a href="config.php">Re-check configuration</a></li>
207 |                             <?php endif; ?>
208 |                         </ul>
209 |                     </div>
210 |                 </div>
211 |             </div>
212 |             <div class="version">Symfony Standard Edition</div>
213 |         </div>
214 |     </body>
215 | </html>
216 | 


--------------------------------------------------------------------------------
/web/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/laurent22/so-sql-injections/6515f8bc1b7f6f3489411ffda168a000be7b6257/web/favicon.ico


--------------------------------------------------------------------------------
/web/index_template.html:
--------------------------------------------------------------------------------
  1 | <!doctype html>
  2 | <html>
  3 | <head>
  4 | <meta name="viewport" content="width=device-width, initial-scale=1">
  5 | <script src="https://cdnjs.cloudflare.com/ajax/libs/Chart.js/2.4.0/Chart.bundle.min.js"></script>
  6 | <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js"></script>
  7 | <script src="https://cdn.rawgit.com/phstc/jquery-dateFormat/master/dist/dateFormat.min.js"></script>
  8 | <style>
  9 | body {
 10 | 	font-family: Sans-Serif;
 11 | 	background-color: #222222;
 12 | 	color: #ddd;
 13 | }
 14 | h1 {
 15 | 	text-align: center;
 16 | }
 17 | .page {
 18 | 	max-width: 1024px;
 19 | 	margin-left: auto;
 20 | 	margin-right: auto;
 21 | }
 22 | #latest-injections {
 23 | 	max-height: 600px;
 24 | 	overflow-y: scroll;
 25 | }
 26 | #latest-injections table {
 27 | 	font-family: monospace;
 28 | 	position: relative;
 29 | }
 30 | #latest-injections table td {
 31 | 	vertical-align: top;
 32 | }
 33 | #latest-injections table tr td:first-child {
 34 | 	white-space: nowrap;
 35 | 	font-weight: bold;
 36 | 	padding-right: 1em;
 37 | }
 38 | #latest-injections table tr td:nth-child(2) {
 39 | 	word-break: break-all;
 40 | 	padding-bottom: 1em;
 41 | }
 42 | #latest-injections a {
 43 | 	text-decoration: none;
 44 | }
 45 | #latest-injections a:hover {
 46 | 	text-decoration: underline;
 47 | }
 48 | .footer {
 49 |     margin-top: 1em;
 50 |     text-align: center;
 51 |     margin-bottom: 1em;
 52 | }
 53 | #generation-date {
 54 |     color: #777;
 55 | }
 56 | a {
 57 | 	color: #ddd;
 58 | }
 59 | </style>
 60 | </head>
 61 | <body>
 62 | 
 63 | <div class="page">
 64 | 	<h1>Potential SQL injections vulnerabilities in Stack Overflow PHP questions</h1>
 65 | 
 66 | 	<div>
 67 | 		<canvas id="injections-per-month-chart"></canvas>
 68 | 		<canvas id="injections-percent-per-month-chart"></canvas>
 69 | 		<canvas id="injections-per-country-chart"></canvas>
 70 | 		<h2>Latest SQL injection vulnerabilities in PHP questions</h2>
 71 | 		<p>(Click on the date to open the question)</p>
 72 | 		<div id="latest-injections"></div>
 73 | 		<div class="footer"><a href="https://github.com/laurent22/so-sql-injections">Source on GitHub</a> - <span id="generation-date"></span></div>
 74 | 	</div>
 75 | </div>
 76 | 
 77 | <script>
 78 | var monthlyReport = [MONTHLY_REPORT];
 79 | var countryReport = [COUNTRY_REPORT];
 80 | var latestInjections = [LATEST_INJECTIONS];
 81 | var generationTimestamp = [GENERATION_TIMESTAMP];
 82 | 
 83 | function createTrendData(data, monthCount) {
 84 | 	var output = [];
 85 | 	var c = 0;
 86 | 	var sum = 0;
 87 | 	for (var i = 0; i < data.length; i++) {
 88 | 		sum += data[i];
 89 | 		c++;
 90 | 		if (c == monthCount) {
 91 | 			output.push(sum / monthCount);
 92 | 			sum = 0;
 93 | 			c = 0;
 94 | 		}
 95 | 	}
 96 | 	return output;
 97 | }
 98 | 
 99 | function hashCode(s) {
100 | 	var hash = 0;
101 | 	if (s.length == 0) return hash;
102 | 	for (i = 0; i < s.length; i++) {
103 | 		char = s.charCodeAt(i);
104 | 		hash = ((hash<<5)-hash)+char;
105 | 		hash = hash & hash; // Convert to 32bit integer
106 | 	}
107 | 	return hash;
108 | }
109 | 
110 | function randColor(n, alpha) {
111 | 	var n1 = Math.abs(hashCode(n)) % 255;
112 | 	var n2 = Math.abs(hashCode(n + n)) % 255;
113 | 	var n3 = Math.abs(hashCode(n + n + n)) % 255;
114 | 	return 'rgba(' + n1 + ',' + n2 + ',' + n3 + ',' + alpha + ')'	
115 | }
116 | 
117 | function createCountryData(data) {
118 | 	var max = 20;
119 | 	var output = [];
120 | 	var labels = [];
121 | 	var bgColors = [];
122 | 	var hoverColors = [];
123 | 	for (var i = 0; i < data.length; i++) {
124 | 		var d = data[i];
125 | 		labels.push(d.country_name);
126 | 		output.push(Math.floor(d.ratio * 100));
127 | 		bgColors.push(randColor(d.country_name, 1));
128 | 		hoverColors.push(randColor(d.country_name, 0.7));
129 | 	}
130 | 	return {
131 | 		labels: labels,
132 | 		data: output,
133 | 		backgroundColors: bgColors,
134 | 		hoverColors: hoverColors
135 | 	};
136 | }
137 | 
138 | function createInjectionPerMonthCharts() {
139 | 	var labels = [];
140 | 	var data = [];
141 | 	var dataPercent = [];
142 | 	var injectBackgroundColors = [];
143 | 	var injectPercentBackgroundColors = [];
144 | 	var maxCount = 0;
145 | 	var maxPercent = 0;
146 | 	for (var i = 0; i < monthlyReport.length; i++) {
147 | 		var r = monthlyReport[i];
148 | 		if (r.has_sql_injection_count > maxCount) maxCount = r.has_sql_injection_count;
149 | 		if ((r.has_sql_injection_count / r.has_sql_count) * 100 > maxPercent) maxPercent = (r.has_sql_injection_count / r.has_sql_count) * 100;
150 | 	}
151 | 
152 | 	for (var i = 0; i < monthlyReport.length; i++) {
153 | 		var r = monthlyReport[i];
154 | 		var m = r.month.toString();
155 | 		var percent = (r.has_sql_injection_count / r.has_sql_count) * 100;
156 | 		labels.push(m.substring(4) + '/' + m.substring(0, 4));
157 | 		data.push(r.has_sql_injection_count);
158 | 		dataPercent.push(percent);
159 | 
160 | 		var p = r.has_sql_injection_count / maxCount;
161 | 		var colorR = Math.round(255 * p);
162 | 		var colorG = Math.round(255 * (1 - p));
163 | 		injectBackgroundColors.push('rgba(' + colorR +', ' + colorG + ', 80, 0.7)');
164 | 
165 | 		p = percent / maxPercent;
166 | 		colorR = Math.round(255 * p);
167 | 		colorG = Math.round(255 * (1 - p));
168 | 		injectPercentBackgroundColors.push('rgba(' + colorR +', ' + colorG + ', 80, 0.7)');
169 | 	}
170 | 
171 | 	var ctx = document.getElementById("injections-per-month-chart");
172 | 
173 | 	var myChart = new Chart(ctx, {
174 | 		type: 'bar',
175 | 		data: {
176 | 			labels: labels,
177 | 			datasets: [{
178 | 				label: "PHP questions that contain SQL injections, per month",
179 | 				backgroundColor: injectBackgroundColors,
180 | 				data: data,
181 | 			}]
182 | 		},
183 | 		options: {
184 | 			scales: {
185 | 				yAxes: [{
186 | 					ticks: {
187 | 						beginAtZero:true
188 | 					}
189 | 				}]
190 | 			}
191 | 		}
192 | 	});
193 | 
194 | 	var ctx2 = document.getElementById("injections-percent-per-month-chart");
195 | 
196 | 	var myChart2 = new Chart(ctx2, {
197 | 		type: 'bar',
198 | 		data: {
199 | 			labels: labels,
200 | 			datasets: [{
201 | 				label: "SQL injections as a percentage of PHP-MySQL-related questions, per month",
202 | 				backgroundColor: injectPercentBackgroundColors,
203 | 				data: dataPercent,
204 | 			}]
205 | 		},
206 | 		options: {
207 | 			tooltips: {
208 | 				callbacks: {
209 | 					label: function(item, data) {
210 | 						return Math.round(item.yLabel) + "%";
211 | 					}
212 | 				}
213 | 			},
214 | 			scales: {
215 | 				yAxes: [{
216 | 					ticks: {
217 | 						beginAtZero:true
218 | 					}
219 | 				}]
220 | 			}
221 | 		}
222 | 	});
223 | }
224 | 
225 | function createPerCountryChart() {
226 | 	var ctx3 = document.getElementById("injections-per-country-chart");
227 | 
228 | 	var d = createCountryData(countryReport);
229 | 
230 | 	var data = {
231 | 		labels: d.labels,
232 | 		datasets: [
233 | 			{
234 | 				label: 'Percentage of PHP-MySQL questions with SQL injections per country',
235 | 				data: d.data,
236 | 				backgroundColor: d.backgroundColors,
237 | 				hoverBackgroundColor: d.hoverColors
238 | 			}]
239 | 	};
240 | 
241 | 	var myChart2 = new Chart(ctx3, {
242 | 		type: 'bar',
243 | 		data: data,
244 | 		options: {
245 | 			tooltips: {
246 | 				callbacks: {
247 | 					label: function(item, data) {
248 | 						var c = countryReport[item.index];
249 | 						return item.yLabel + "% (" + c.has_sql_injection + '/' + c.has_sql + ')';
250 | 					}
251 | 				}
252 | 			},
253 | 			scales: {
254 | 				xAxes: [{
255 | 					ticks: {
256 | 						autoSkip: false
257 | 					}
258 | 				}],
259 | 				yAxes: [{
260 | 					ticks: {
261 | 						suggestedMin: 25,
262 | 						suggestedMax: 50,
263 | 						autoSkip: false
264 | 					}
265 | 				}]
266 | 			}
267 | 		}
268 | 	});
269 | }
270 | 	
271 | function createLatestInjectionList() {
272 | 	var $target = $('#latest-injections');
273 | 	var $table = $('<table></table>');
274 | 	for (var i = 0; i < latestInjections.length; i++) {
275 | 		var l = latestInjections[i];
276 | 		var $tr = $('<tr></tr>');
277 | 		var date = new Date(l.creation_date * 1000);
278 | 		var date = DateFormat.format.date(date, 'dd/MM/yyyy HH:mm:ss');
279 | 		var $link = $('<a />');
280 | 		$link.attr('href', 'https://stackoverflow.com/questions/' + l.question_id);
281 | 		$link.text(date + ':');
282 | 		var $date = $('<td />');
283 | 		$date.append($link);
284 | 		$tr.append($date);
285 | 		var $line = $('<td></td>');
286 | 		$line.text(l.line);
287 | 		$tr.append($line);
288 | 		$table.append($tr);
289 | 	}
290 | 	$target.append($table);
291 | }
292 | 
293 | Chart.defaults.global.defaultFontColor = '#ddd';
294 | 
295 | createInjectionPerMonthCharts(); 
296 | createPerCountryChart();
297 | createLatestInjectionList();
298 | 
299 | var genDate = new Date(generationTimestamp * 1000);
300 | $('#generation-date').text('Generated on ' + DateFormat.format.date(genDate, 'dd/MM/yyyy HH:mm:ss'));
301 | </script>
302 | 
303 | </body>
304 | </html>


--------------------------------------------------------------------------------
/web/robots.txt:
--------------------------------------------------------------------------------
1 | # www.robotstxt.org/
2 | # www.google.com/support/webmasters/bin/answer.py?hl=en&answer=156449
3 | 
4 | User-agent: *
5 | Disallow:
6 | 


--------------------------------------------------------------------------------