shieldfy/shieldfy-php-client

<?php
namespace Shieldfy\Monitors;

use Shieldfy\Jury\Judge;

class UploadMonitor extends MonitorBase
{
    use Judge;

    protected $name = "uploads";

    /**
     * Run the monitor.
     */
    public function run()
    {

        // Get the request info.
        $request = $this->collectors['request'];
        $info = $request->getInfo('files');
        if (empty($info['files'])) {
            return;
        }

        // Analyze uploaded files.
        $this->issue('uploads');

        // Prepare for nested uploads.
        $files = [];
        array_walk($info['files'], function ($value, $key) use (&$files) {
            //grap key
            $name = explode('.', $key);
            $name_key = $name[2];
            unset($name[0], $name[2]);
            $name = implode('.', $name);
            if ($name_key == 'name') {
                $files[$name]['name'] = $value;
            }
            if ($name_key == 'tmp_name') {
                $files[$name]['tmp_name'] = $value;
            }
        });


        foreach ($files as $input => $file) {
            list($score, $rulesIds) = array_values($this->analyzeFile($input, $file));
            $charge = [
                'score' => $score,
                'rulesIds' => $rulesIds,
                'value' => $file['name'],
                'key' => $input
            ];
            break;
        }


        $this->sendToJail($this->parseScore($charge['score']), $charge);
    }

    public function analyzeFile($input = '', $file = [])
    {
        $score = 0;
        $ruleIds = [];

        // Analyze name.
        $nameResult = $this->sentence($file['name'], 'FILES:NAME');
        if ($nameResult['score']) {
            $score += $nameResult['score'];
            $ruleIds = array_merge($ruleIds, $nameResult['rulesIds']);
        }

        // Analyze extension.
        $extension = pathinfo($file['name'], PATHINFO_EXTENSION);
        $extResult = $this->sentence($extension, 'FILES:EXTENTION');
        if ($extResult['score']) {
            $score += $extResult['score'];
            $ruleIds = array_merge($ruleIds, $extResult['rulesIds']);
        }

        // Analyze content.
        $content = file_get_contents($file['tmp_name']);
        // Check for backdoors.
        $backdoorResult = $this->sentence($content, 'FILES:CONTENT', 'backdoor');
        if ($backdoorResult['score']) {
            $score += $backdoorResult['score'];
            $ruleIds = array_merge($ruleIds, $backdoorResult['rulesIds']);
        }
        // Check for XXE.
        $xxeResult = $this->sentence($content, 'FILES:CONTENT', 'xxe');
        if ($xxeResult['score']) {
            $score += $xxeResult['score'];
            $disableEntity = libxml_disable_entity_loader(true);
            if ($disableEntity === false) {
                $score += 50;
                // Retrieve old value (maybe the developer uses it somewhere). :(
                libxml_disable_entity_loader($disableEntity);
            }
            $ruleIds = array_merge($ruleIds, $xxeResult['rulesIds']);
        }
        return compact('score', 'ruleIds');
    }
}