21420560247

Committed 28 Jan 2026 12:59AM UTC coverage: 52.306% (-1.4%) from 53.72%

Build # 21420560247

Build Type

push

github

Committed by

AJenbo

Commit Message

Bump phpunit/phpunit from 9.6.11 to 9.6.33 in /application

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 9.6.11 to 9.6.33.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.33/ChangeLog-9.6.md)
- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.11...9.6.33)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-version: 9.6.33
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Run Details

3039 of 5810 relevant lines covered (52.31%)

12.21 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

22.22

/application/inc/Http/Middleware/Auth.php

<?php

namespace App\Http\Middleware;

use App\Contracts\Middleware;
use App\Exceptions\InvalidInput;
use App\Http\Request;
use App\Models\User;
use App\Render;
use App\Services\DbService;
use App\Services\OrmService;
use App\Services\RenderService;
use Symfony\Component\HttpFoundation\Response;

class Auth implements Middleware
{
    /**
     * Assert that the user is logged in.
     */
    public function handle(Request $request, callable $next): Response
    {
        $requestUrl = $request->getPathInfo();
        if (0 !== mb_strpos($requestUrl, '/admin/') || '/admin/users/new/' === $requestUrl) {
            return $next($request);
        }

        $user = $request->user();
        if ($user && $user->getAccessLevel()) {
            return $next($request);
        }

        if (!$request->getRequestString('username') || !$request->getRequestString('password')) {
            return $this->showLoginPage($request);
        }

        $this->authenticate($request);

        return redirect($request->getRequestUri(), Response::HTTP_MOVED_PERMANENTLY);
    }

    /**
     * Render the login page.
     *
     * @throws InvalidInput If the request is an AJAX call
     */
    private function showLoginPage(Request $request): Response
    {
        sleep(1); // Prevent brute force

        if ($request->isXmlHttpRequest()) {
            throw new InvalidInput(
                _('Your login has expired. Please reload the page and login again.'),
                Response::HTTP_UNAUTHORIZED
            );
        }

        return new Response(app(RenderService::class)->render('admin/login'), Response::HTTP_UNAUTHORIZED);
    }

    /**
     * Authenticate and attach the user to a session.
     */
    private function authenticate(Request $request): void
    {
        $user = app(OrmService::class)->getOneByQuery(
            User::class,
            'SELECT * FROM `users` WHERE `name` = ' . app(DbService::class)->quote($request->getRequestString('username') ?? '')
        );
        if ($user && $user->getAccessLevel() && $user->validatePassword($request->getRequestString('password') ?? '')) {
            $request->startSession();
            $session = $request->getSession();
            $session->set('login_id', $user->getId());
            $session->set('login_hash', $user->getPasswordHash());
            $session->save();
        }
    }
}

1	<?php
2
3	namespace App\Http\Middleware;
4
5	use App\Contracts\Middleware;
6	use App\Exceptions\InvalidInput;
7	use App\Http\Request;
8	use App\Models\User;
9	use App\Render;
10	use App\Services\DbService;
11	use App\Services\OrmService;
12	use App\Services\RenderService;
13	use Symfony\Component\HttpFoundation\Response;
14
15	class Auth implements Middleware
16	{
17	/**
18	* Assert that the user is logged in.
19	*/
20	public function handle(Request $request, callable $next): Response
21	{
22	$requestUrl = $request->getPathInfo();	149✔
23	if (0 !== mb_strpos($requestUrl, '/admin/') \|\| '/admin/users/new/' === $requestUrl) {	149✔
24	return $next($request);	96✔
25	}
26
27	$user = $request->user();	53✔
28	if ($user && $user->getAccessLevel()) {	53✔
29	return $next($request);	53✔
30	}
31
32	if (!$request->getRequestString('username') \|\| !$request->getRequestString('password')) {	×
33	return $this->showLoginPage($request);	×
34	}
35
36	$this->authenticate($request);	×
37
38	return redirect($request->getRequestUri(), Response::HTTP_MOVED_PERMANENTLY);	×
39	}
40
41	/**
42	* Render the login page.
43	*
44	* @throws InvalidInput If the request is an AJAX call
45	*/
46	private function showLoginPage(Request $request): Response
47	{
48	sleep(1); // Prevent brute force	×
49
50	if ($request->isXmlHttpRequest()) {	×
51	throw new InvalidInput(	×
52	_('Your login has expired. Please reload the page and login again.'),	×
53	Response::HTTP_UNAUTHORIZED	×
54	);	×
55	}
56
57	return new Response(app(RenderService::class)->render('admin/login'), Response::HTTP_UNAUTHORIZED);	×
58	}
59
60	/**
61	* Authenticate and attach the user to a session.
62	*/
63	private function authenticate(Request $request): void
64	{
65	$user = app(OrmService::class)->getOneByQuery(	×
66	User::class,	×
67	'SELECT * FROM `users` WHERE `name` = ' . app(DbService::class)->quote($request->getRequestString('username') ?? '')	×
68	);	×
69	if ($user && $user->getAccessLevel() && $user->validatePassword($request->getRequestString('password') ?? '')) {	×
70	$request->startSession();	×
71	$session = $request->getSession();	×
72	$session->set('login_id', $user->getId());	×
73	$session->set('login_hash', $user->getPasswordHash());	×
74	$session->save();	×
75	}
76	}
77	}

AJenbo / agcms / 21420560247

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous