Fix errors.

Security fix.
Add PHPDoc blocks.

composer.json

@@ -31,5 +31,8 @@
       "type": "vcs",
       "url": "https://github.com/ostiwe/vksaver.git"
     }
-  ]
-}
+  ],
+  "require-dev": {
+    "phpdocumentor/phpdocumentor": "2.*"
+  }
+}

src/ostiwe-saver/Client/UserClient.php

@@ -8,16 +8,44 @@
 
 class UserClient
 {
+    /**
+     * Access user token
+     * @var string $userToken
+     */
     private $userToken = null;
+
+    /**
+     * User ID
+     * @var string|int $userId
+     * */
     private $userId = null;
 
+    /**
+     * Array of arrays whose keys are group IDs
+     * @var array $groups
+     * */
     private $groups = null;
 
+    /**
+     * ID of the community
+     * @var string|int $currentPubId
+     * */
     private $currentPubId = null;
 
+    /**
+     * @var VKApiClient $vk
+     * */
     private $vk = null;
+
+    /**
+     * @var Photos $utilsPhoto
+     * */
     private $utilsPhoto = null;
 
+    /**
+     * Patch to custom handlers for communities
+     * @var string $handlersPatch
+     * */
     private $handlersPatch = null;
 
     /**
@@ -87,7 +115,7 @@ public function callbackHandler($callbackObj = [])
             throw new Exception ('Empty message.');
         }
 
-        if ($callbackObj['message']['from_id'] !== $this->userId) {
+        if ($callbackObj['object']['message']['from_id'] != $this->userId) {
             echo 'ok';
             return;
         }
@@ -98,6 +126,7 @@ public function callbackHandler($callbackObj = [])
         if (!isset($callbackObj['secret']) || empty($callbackObj['secret'])) {
             throw new Exception ('Param "secret" is required.');
         }
+
         $groupId = $callbackObj['group_id'];
         $this->currentPubId = $groupId;
         if (($this->groups[$groupId]['secret'] !== $callbackObj['secret']) && $callbackObj['type'] !== 'browser_plugin') {

src/ostiwe-saver/Handlers/PubHandler.php

@@ -28,13 +28,39 @@
 
 class PubHandler
 {
+    /**
+     * Access user token
+     * @var string $userToken
+     * */
     public $userToken = null;
+
+    /**
+     * User ID
+     * @var string|int $userId
+     * */
     public $userId = null;
+
+    /**
+     * A community token allows working with API on behalf of a group, event or public page
+     * @var string $pubToken
+     * */
     public $pubToken = null;
+
+    /**
+     * Pub ID
+     * @var string|int $pubId
+     * */
     public $pubId = null;
 
+
+    /**
+     * @var VKApiClient $vk
+     * */
     public $vk = null;
 
+    /**
+     * @var Wall $utilsWall
+     * */
     public $utilsWall = null;
 
     /**

src/ostiwe-saver/Utils/Photos.php

@@ -18,9 +18,14 @@
 class Photos
 {
     /**
-     * @var VKApiClient|null
+     * @var VKApiClient|null $vk
      */
     private $vk = null;
+
+    /**
+     * User ID
+     * @var string|int $userId
+     * */
     private $userId = null;
 
     /**
@@ -42,7 +47,12 @@ public function __construct($userId)
      *
      * @param string $userToken Access user token
      * @param array $photoIds An array consisting of identifiers that represent the IDs of the users who posted the photos,
-     * and the IDs of the photos themselves, going through the underscore (example: [1_129207899,6492_135055734] )
+     *                        and the IDs of the photos themselves, going through the underscore, example:
+     *
+     * <code>
+     *  $photoIds = [1_129207899,6492_135055734]
+     * </code>
+     *
      * @return array Array containing paths to images
      * @throws Exception
      */

src/ostiwe-saver/Utils/Wall.php

@@ -11,6 +11,9 @@
 
 class Wall
 {
+    /**
+     * @var VKApiClient $vk
+     * */
     private $vk = null;
 
     /**