[pitboss] phase 16: Track L.14 — Laravel / Symfony / CodeIgniter adapters

tests/dynamic_fixtures/php_frameworks/codeigniter/benign.php

@@ -0,0 +1,18 @@
+<?php
+// Phase 16 — CodeIgniter-style route, benign sanitised payload.
+
+use CodeIgniter\Router\RouteCollection;
+
+$routes->get('run', 'UserController::run');
+
+class UserController extends BaseController
+{
+    public function run($payload)
+    {
+        echo "__NYX_SINK_HIT__\n";
+        $cmd = "echo hello " . escapeshellarg($payload);
+        $out = shell_exec($cmd);
+        echo $out;
+        return $out;
+    }
+}

tests/dynamic_fixtures/php_frameworks/codeigniter/composer.json

@@ -0,0 +1,7 @@
+{
+  "name": "nyx/fixture-codeigniter",
+  "require": {
+    "php": ">=8.1",
+    "codeigniter4/framework": "^4.4"
+  }
+}

tests/dynamic_fixtures/php_frameworks/codeigniter/vuln.php

@@ -0,0 +1,20 @@
+<?php
+// Phase 16 — CodeIgniter-style route, vulnerable.
+// `$routes->get('run', 'UserController::run')` references the
+// controller method whose body shells out without sanitisation.
+
+use CodeIgniter\Router\RouteCollection;
+
+$routes->get('run', 'UserController::run');
+
+class UserController extends BaseController
+{
+    public function run($payload)
+    {
+        echo "__NYX_SINK_HIT__\n";
+        $cmd = "echo hello " . $payload;
+        $out = shell_exec($cmd);
+        echo $out;
+        return $out;
+    }
+}