Validation.php 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793
  1. <?php
  2. /**
  3. * @package Grav\Common\Data
  4. *
  5. * @copyright Copyright (C) 2015 - 2019 Trilby Media, LLC. All rights reserved.
  6. * @license MIT License; see LICENSE file for details.
  7. */
  8. namespace Grav\Common\Data;
  9. use Grav\Common\Grav;
  10. use Grav\Common\Utils;
  11. use Grav\Common\Yaml;
  12. class Validation
  13. {
  14. /**
  15. * Validate value against a blueprint field definition.
  16. *
  17. * @param mixed $value
  18. * @param array $field
  19. * @return array
  20. */
  21. public static function validate($value, array $field)
  22. {
  23. if (!isset($field['type'])) {
  24. $field['type'] = 'text';
  25. }
  26. $type = $validate['type'] ?? $field['type'];
  27. $validate = (array)($field['validate'] ?? null);
  28. $required = $validate['required'] ?? false;
  29. // If value isn't required, we will stop validation if empty value is given.
  30. if ($required !== true && ($value === null || $value === '' || (($field['type'] === 'checkbox' || $field['type'] === 'switch') && $value == false))
  31. ) {
  32. return [];
  33. }
  34. // Get language class.
  35. $language = Grav::instance()['language'];
  36. $name = ucfirst($field['label'] ?? $field['name']);
  37. $message = (string) isset($field['validate']['message'])
  38. ? $language->translate($field['validate']['message'])
  39. : $language->translate('GRAV.FORM.INVALID_INPUT', null, true) . ' "' . $language->translate($name) . '"';
  40. // Validate type with fallback type text.
  41. $method = 'type' . str_replace('-', '_', $type);
  42. // If this is a YAML field validate/filter as such
  43. if (isset($field['yaml']) && $field['yaml'] === true) {
  44. $method = 'typeYaml';
  45. }
  46. $messages = [];
  47. $success = method_exists(__CLASS__, $method) ? self::$method($value, $validate, $field) : true;
  48. if (!$success) {
  49. $messages[$field['name']][] = $message;
  50. }
  51. // Check individual rules.
  52. foreach ($validate as $rule => $params) {
  53. $method = 'validate' . ucfirst(str_replace('-', '_', $rule));
  54. if (method_exists(__CLASS__, $method)) {
  55. $success = self::$method($value, $params);
  56. if (!$success) {
  57. $messages[$field['name']][] = $message;
  58. }
  59. }
  60. }
  61. return $messages;
  62. }
  63. /**
  64. * Filter value against a blueprint field definition.
  65. *
  66. * @param mixed $value
  67. * @param array $field
  68. * @return mixed Filtered value.
  69. */
  70. public static function filter($value, array $field)
  71. {
  72. $validate = (array)($field['filter'] ?? $field['validate'] ?? null);
  73. // If value isn't required, we will return null if empty value is given.
  74. if (($value === null || $value === '') && empty($validate['required'])) {
  75. return null;
  76. }
  77. if (!isset($field['type'])) {
  78. $field['type'] = 'text';
  79. }
  80. $type = $field['filter']['type'] ?? $field['validate']['type'] ?? $field['type'];
  81. $method = 'filter' . ucfirst(str_replace('-', '_', $type));
  82. // If this is a YAML field validate/filter as such
  83. if (isset($field['yaml']) && $field['yaml'] === true) {
  84. $method = 'filterYaml';
  85. }
  86. if (!method_exists(__CLASS__, $method)) {
  87. $method = isset($field['array']) && $field['array'] === true ? 'filterArray' : 'filterText';
  88. }
  89. return self::$method($value, $validate, $field);
  90. }
  91. /**
  92. * HTML5 input: text
  93. *
  94. * @param mixed $value Value to be validated.
  95. * @param array $params Validation parameters.
  96. * @param array $field Blueprint for the field.
  97. * @return bool True if validation succeeded.
  98. */
  99. public static function typeText($value, array $params, array $field)
  100. {
  101. if (!\is_string($value) && !is_numeric($value)) {
  102. return false;
  103. }
  104. $value = (string)$value;
  105. if (!empty($params['trim'])) {
  106. $value = trim($value);
  107. }
  108. if (isset($params['min']) && \strlen($value) < $params['min']) {
  109. return false;
  110. }
  111. if (isset($params['max']) && \strlen($value) > $params['max']) {
  112. return false;
  113. }
  114. $min = $params['min'] ?? 0;
  115. if (isset($params['step']) && (\strlen($value) - $min) % $params['step'] === 0) {
  116. return false;
  117. }
  118. if ((!isset($params['multiline']) || !$params['multiline']) && preg_match('/\R/um', $value)) {
  119. return false;
  120. }
  121. return true;
  122. }
  123. protected static function filterText($value, array $params, array $field)
  124. {
  125. if (!\is_string($value) && !is_numeric($value)) {
  126. return '';
  127. }
  128. if (!empty($params['trim'])) {
  129. $value = trim($value);
  130. }
  131. return (string) $value;
  132. }
  133. protected static function filterCommaList($value, array $params, array $field)
  134. {
  135. return \is_array($value) ? $value : preg_split('/\s*,\s*/', $value, -1, PREG_SPLIT_NO_EMPTY);
  136. }
  137. public static function typeCommaList($value, array $params, array $field)
  138. {
  139. return \is_array($value) ? true : self::typeText($value, $params, $field);
  140. }
  141. protected static function filterLower($value, array $params)
  142. {
  143. return strtolower($value);
  144. }
  145. protected static function filterUpper($value, array $params)
  146. {
  147. return strtoupper($value);
  148. }
  149. /**
  150. * HTML5 input: textarea
  151. *
  152. * @param mixed $value Value to be validated.
  153. * @param array $params Validation parameters.
  154. * @param array $field Blueprint for the field.
  155. * @return bool True if validation succeeded.
  156. */
  157. public static function typeTextarea($value, array $params, array $field)
  158. {
  159. if (!isset($params['multiline'])) {
  160. $params['multiline'] = true;
  161. }
  162. return self::typeText($value, $params, $field);
  163. }
  164. /**
  165. * HTML5 input: password
  166. *
  167. * @param mixed $value Value to be validated.
  168. * @param array $params Validation parameters.
  169. * @param array $field Blueprint for the field.
  170. * @return bool True if validation succeeded.
  171. */
  172. public static function typePassword($value, array $params, array $field)
  173. {
  174. return self::typeText($value, $params, $field);
  175. }
  176. /**
  177. * HTML5 input: hidden
  178. *
  179. * @param mixed $value Value to be validated.
  180. * @param array $params Validation parameters.
  181. * @param array $field Blueprint for the field.
  182. * @return bool True if validation succeeded.
  183. */
  184. public static function typeHidden($value, array $params, array $field)
  185. {
  186. return self::typeText($value, $params, $field);
  187. }
  188. /**
  189. * Custom input: checkbox list
  190. *
  191. * @param mixed $value Value to be validated.
  192. * @param array $params Validation parameters.
  193. * @param array $field Blueprint for the field.
  194. * @return bool True if validation succeeded.
  195. */
  196. public static function typeCheckboxes($value, array $params, array $field)
  197. {
  198. // Set multiple: true so checkboxes can easily use min/max counts to control number of options required
  199. $field['multiple'] = true;
  200. return self::typeArray((array) $value, $params, $field);
  201. }
  202. protected static function filterCheckboxes($value, array $params, array $field)
  203. {
  204. return self::filterArray($value, $params, $field);
  205. }
  206. /**
  207. * HTML5 input: checkbox
  208. *
  209. * @param mixed $value Value to be validated.
  210. * @param array $params Validation parameters.
  211. * @param array $field Blueprint for the field.
  212. * @return bool True if validation succeeded.
  213. */
  214. public static function typeCheckbox($value, array $params, array $field)
  215. {
  216. $value = (string)$value;
  217. $field_value = (string)($field['value'] ?? '1');
  218. return $value === $field_value;
  219. }
  220. /**
  221. * HTML5 input: radio
  222. *
  223. * @param mixed $value Value to be validated.
  224. * @param array $params Validation parameters.
  225. * @param array $field Blueprint for the field.
  226. * @return bool True if validation succeeded.
  227. */
  228. public static function typeRadio($value, array $params, array $field)
  229. {
  230. return self::typeArray((array) $value, $params, $field);
  231. }
  232. /**
  233. * Custom input: toggle
  234. *
  235. * @param mixed $value Value to be validated.
  236. * @param array $params Validation parameters.
  237. * @param array $field Blueprint for the field.
  238. * @return bool True if validation succeeded.
  239. */
  240. public static function typeToggle($value, array $params, array $field)
  241. {
  242. if (\is_bool($value)) {
  243. $value = (int)$value;
  244. }
  245. return self::typeArray((array) $value, $params, $field);
  246. }
  247. /**
  248. * Custom input: file
  249. *
  250. * @param mixed $value Value to be validated.
  251. * @param array $params Validation parameters.
  252. * @param array $field Blueprint for the field.
  253. * @return bool True if validation succeeded.
  254. */
  255. public static function typeFile($value, array $params, array $field)
  256. {
  257. return self::typeArray((array)$value, $params, $field);
  258. }
  259. protected static function filterFile($value, array $params, array $field)
  260. {
  261. return (array)$value;
  262. }
  263. /**
  264. * HTML5 input: select
  265. *
  266. * @param mixed $value Value to be validated.
  267. * @param array $params Validation parameters.
  268. * @param array $field Blueprint for the field.
  269. * @return bool True if validation succeeded.
  270. */
  271. public static function typeSelect($value, array $params, array $field)
  272. {
  273. return self::typeArray((array) $value, $params, $field);
  274. }
  275. /**
  276. * HTML5 input: number
  277. *
  278. * @param mixed $value Value to be validated.
  279. * @param array $params Validation parameters.
  280. * @param array $field Blueprint for the field.
  281. * @return bool True if validation succeeded.
  282. */
  283. public static function typeNumber($value, array $params, array $field)
  284. {
  285. if (!is_numeric($value)) {
  286. return false;
  287. }
  288. if (isset($params['min']) && $value < $params['min']) {
  289. return false;
  290. }
  291. if (isset($params['max']) && $value > $params['max']) {
  292. return false;
  293. }
  294. $min = $params['min'] ?? 0;
  295. return !(isset($params['step']) && fmod($value - $min, $params['step']) === 0);
  296. }
  297. protected static function filterNumber($value, array $params, array $field)
  298. {
  299. return (string)(int)$value !== (string)(float)$value ? (float) $value : (int) $value;
  300. }
  301. protected static function filterDateTime($value, array $params, array $field)
  302. {
  303. $format = Grav::instance()['config']->get('system.pages.dateformat.default');
  304. if ($format) {
  305. $converted = new \DateTime($value);
  306. return $converted->format($format);
  307. }
  308. return $value;
  309. }
  310. /**
  311. * HTML5 input: range
  312. *
  313. * @param mixed $value Value to be validated.
  314. * @param array $params Validation parameters.
  315. * @param array $field Blueprint for the field.
  316. * @return bool True if validation succeeded.
  317. */
  318. public static function typeRange($value, array $params, array $field)
  319. {
  320. return self::typeNumber($value, $params, $field);
  321. }
  322. protected static function filterRange($value, array $params, array $field)
  323. {
  324. return self::filterNumber($value, $params, $field);
  325. }
  326. /**
  327. * HTML5 input: color
  328. *
  329. * @param mixed $value Value to be validated.
  330. * @param array $params Validation parameters.
  331. * @param array $field Blueprint for the field.
  332. * @return bool True if validation succeeded.
  333. */
  334. public static function typeColor($value, array $params, array $field)
  335. {
  336. return preg_match('/^\#[0-9a-fA-F]{3}[0-9a-fA-F]{3}?$/u', $value);
  337. }
  338. /**
  339. * HTML5 input: email
  340. *
  341. * @param mixed $value Value to be validated.
  342. * @param array $params Validation parameters.
  343. * @param array $field Blueprint for the field.
  344. * @return bool True if validation succeeded.
  345. */
  346. public static function typeEmail($value, array $params, array $field)
  347. {
  348. $values = !\is_array($value) ? explode(',', preg_replace('/\s+/', '', $value)) : $value;
  349. foreach ($values as $val) {
  350. if (!(self::typeText($val, $params, $field) && filter_var($val, FILTER_VALIDATE_EMAIL))) {
  351. return false;
  352. }
  353. }
  354. return true;
  355. }
  356. /**
  357. * HTML5 input: url
  358. *
  359. * @param mixed $value Value to be validated.
  360. * @param array $params Validation parameters.
  361. * @param array $field Blueprint for the field.
  362. * @return bool True if validation succeeded.
  363. */
  364. public static function typeUrl($value, array $params, array $field)
  365. {
  366. return self::typeText($value, $params, $field) && filter_var($value, FILTER_VALIDATE_URL);
  367. }
  368. /**
  369. * HTML5 input: datetime
  370. *
  371. * @param mixed $value Value to be validated.
  372. * @param array $params Validation parameters.
  373. * @param array $field Blueprint for the field.
  374. * @return bool True if validation succeeded.
  375. */
  376. public static function typeDatetime($value, array $params, array $field)
  377. {
  378. if ($value instanceof \DateTime) {
  379. return true;
  380. }
  381. if (!\is_string($value)) {
  382. return false;
  383. }
  384. if (!isset($params['format'])) {
  385. return false !== strtotime($value);
  386. }
  387. $dateFromFormat = \DateTime::createFromFormat($params['format'], $value);
  388. return $dateFromFormat && $value === date($params['format'], $dateFromFormat->getTimestamp());
  389. }
  390. /**
  391. * HTML5 input: datetime-local
  392. *
  393. * @param mixed $value Value to be validated.
  394. * @param array $params Validation parameters.
  395. * @param array $field Blueprint for the field.
  396. * @return bool True if validation succeeded.
  397. */
  398. public static function typeDatetimeLocal($value, array $params, array $field)
  399. {
  400. return self::typeDatetime($value, $params, $field);
  401. }
  402. /**
  403. * HTML5 input: date
  404. *
  405. * @param mixed $value Value to be validated.
  406. * @param array $params Validation parameters.
  407. * @param array $field Blueprint for the field.
  408. * @return bool True if validation succeeded.
  409. */
  410. public static function typeDate($value, array $params, array $field)
  411. {
  412. if (!isset($params['format'])) {
  413. $params['format'] = 'Y-m-d';
  414. }
  415. return self::typeDatetime($value, $params, $field);
  416. }
  417. /**
  418. * HTML5 input: time
  419. *
  420. * @param mixed $value Value to be validated.
  421. * @param array $params Validation parameters.
  422. * @param array $field Blueprint for the field.
  423. * @return bool True if validation succeeded.
  424. */
  425. public static function typeTime($value, array $params, array $field)
  426. {
  427. if (!isset($params['format'])) {
  428. $params['format'] = 'H:i';
  429. }
  430. return self::typeDatetime($value, $params, $field);
  431. }
  432. /**
  433. * HTML5 input: month
  434. *
  435. * @param mixed $value Value to be validated.
  436. * @param array $params Validation parameters.
  437. * @param array $field Blueprint for the field.
  438. * @return bool True if validation succeeded.
  439. */
  440. public static function typeMonth($value, array $params, array $field)
  441. {
  442. if (!isset($params['format'])) {
  443. $params['format'] = 'Y-m';
  444. }
  445. return self::typeDatetime($value, $params, $field);
  446. }
  447. /**
  448. * HTML5 input: week
  449. *
  450. * @param mixed $value Value to be validated.
  451. * @param array $params Validation parameters.
  452. * @param array $field Blueprint for the field.
  453. * @return bool True if validation succeeded.
  454. */
  455. public static function typeWeek($value, array $params, array $field)
  456. {
  457. if (!isset($params['format']) && !preg_match('/^\d{4}-W\d{2}$/u', $value)) {
  458. return false;
  459. }
  460. return self::typeDatetime($value, $params, $field);
  461. }
  462. /**
  463. * Custom input: array
  464. *
  465. * @param mixed $value Value to be validated.
  466. * @param array $params Validation parameters.
  467. * @param array $field Blueprint for the field.
  468. * @return bool True if validation succeeded.
  469. */
  470. public static function typeArray($value, array $params, array $field)
  471. {
  472. if (!\is_array($value)) {
  473. return false;
  474. }
  475. if (isset($field['multiple'])) {
  476. if (isset($params['min']) && \count($value) < $params['min']) {
  477. return false;
  478. }
  479. if (isset($params['max']) && \count($value) > $params['max']) {
  480. return false;
  481. }
  482. $min = $params['min'] ?? 0;
  483. if (isset($params['step']) && (\count($value) - $min) % $params['step'] === 0) {
  484. return false;
  485. }
  486. }
  487. $options = $field['options'] ?? [];
  488. $use = $field['use'] ?? 'values';
  489. if (empty($field['selectize']) || empty($field['multiple'])) {
  490. $options = array_keys($options);
  491. }
  492. if ($use === 'keys') {
  493. $value = array_keys($value);
  494. }
  495. return !($options && array_diff($value, $options));
  496. }
  497. protected static function filterArray($value, $params, $field)
  498. {
  499. $values = (array) $value;
  500. $options = isset($field['options']) ? array_keys($field['options']) : [];
  501. $multi = $field['multiple'] ?? false;
  502. if (\count($values) === 1 && isset($values[0]) && $values[0] === '') {
  503. return null;
  504. }
  505. if ($options) {
  506. $useKey = isset($field['use']) && $field['use'] === 'keys';
  507. foreach ($values as $key => $val) {
  508. $values[$key] = $useKey ? (bool) $val : $val;
  509. }
  510. }
  511. if ($multi) {
  512. foreach ($values as $key => $val) {
  513. if (\is_array($val)) {
  514. $val = implode(',', $val);
  515. $values[$key] = array_map('trim', explode(',', $val));
  516. } else {
  517. $values[$key] = trim($val);
  518. }
  519. }
  520. }
  521. if (isset($field['ignore_empty']) && Utils::isPositive($field['ignore_empty'])) {
  522. foreach ($values as $key => $val) {
  523. if ($val === '') {
  524. unset($values[$key]);
  525. } elseif (\is_array($val)) {
  526. foreach ($val as $inner_key => $inner_value) {
  527. if ($inner_value === '') {
  528. unset($val[$inner_key]);
  529. }
  530. }
  531. }
  532. $values[$key] = $val;
  533. }
  534. }
  535. return $values;
  536. }
  537. public static function typeList($value, array $params, array $field)
  538. {
  539. if (!\is_array($value)) {
  540. return false;
  541. }
  542. if (isset($field['fields'])) {
  543. foreach ($value as $key => $item) {
  544. foreach ($field['fields'] as $subKey => $subField) {
  545. $subKey = trim($subKey, '.');
  546. $subValue = $item[$subKey] ?? null;
  547. self::validate($subValue, $subField);
  548. }
  549. }
  550. }
  551. return true;
  552. }
  553. protected static function filterList($value, array $params, array $field)
  554. {
  555. return (array) $value;
  556. }
  557. public static function filterYaml($value, $params)
  558. {
  559. if (!\is_string($value)) {
  560. return $value;
  561. }
  562. return (array) Yaml::parse($value);
  563. }
  564. /**
  565. * Custom input: ignore (will not validate)
  566. *
  567. * @param mixed $value Value to be validated.
  568. * @param array $params Validation parameters.
  569. * @param array $field Blueprint for the field.
  570. * @return bool True if validation succeeded.
  571. */
  572. public static function typeIgnore($value, array $params, array $field)
  573. {
  574. return true;
  575. }
  576. public static function filterIgnore($value, array $params, array $field)
  577. {
  578. return $value;
  579. }
  580. /**
  581. * Input value which can be ignored.
  582. *
  583. * @param mixed $value Value to be validated.
  584. * @param array $params Validation parameters.
  585. * @param array $field Blueprint for the field.
  586. * @return bool True if validation succeeded.
  587. */
  588. public static function typeUnset($value, array $params, array $field)
  589. {
  590. return true;
  591. }
  592. public static function filterUnset($value, array $params, array $field)
  593. {
  594. return null;
  595. }
  596. // HTML5 attributes (min, max and range are handled inside the types)
  597. public static function validateRequired($value, $params)
  598. {
  599. if (is_scalar($value)) {
  600. return (bool) $params !== true || $value !== '';
  601. }
  602. return (bool) $params !== true || !empty($value);
  603. }
  604. public static function validatePattern($value, $params)
  605. {
  606. return (bool) preg_match("`^{$params}$`u", $value);
  607. }
  608. // Internal types
  609. public static function validateAlpha($value, $params)
  610. {
  611. return ctype_alpha($value);
  612. }
  613. public static function validateAlnum($value, $params)
  614. {
  615. return ctype_alnum($value);
  616. }
  617. public static function typeBool($value, $params)
  618. {
  619. return \is_bool($value) || $value == 1 || $value == 0;
  620. }
  621. public static function validateBool($value, $params)
  622. {
  623. return \is_bool($value) || $value == 1 || $value == 0;
  624. }
  625. protected static function filterBool($value, $params)
  626. {
  627. return (bool) $value;
  628. }
  629. public static function validateDigit($value, $params)
  630. {
  631. return ctype_digit($value);
  632. }
  633. public static function validateFloat($value, $params)
  634. {
  635. return \is_float(filter_var($value, FILTER_VALIDATE_FLOAT));
  636. }
  637. protected static function filterFloat($value, $params)
  638. {
  639. return (float) $value;
  640. }
  641. public static function validateHex($value, $params)
  642. {
  643. return ctype_xdigit($value);
  644. }
  645. public static function validateInt($value, $params)
  646. {
  647. return is_numeric($value) && (int)$value == $value;
  648. }
  649. protected static function filterInt($value, $params)
  650. {
  651. return (int)$value;
  652. }
  653. public static function validateArray($value, $params)
  654. {
  655. return \is_array($value) || ($value instanceof \ArrayAccess && $value instanceof \Traversable && $value instanceof \Countable);
  656. }
  657. public static function filterItem_List($value, $params)
  658. {
  659. return array_values(array_filter($value, function($v) { return !empty($v); } ));
  660. }
  661. public static function validateJson($value, $params)
  662. {
  663. return (bool) (@json_decode($value));
  664. }
  665. }