Validation.php 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804
  1. <?php
  2. /**
  3. * @package Grav\Common\Data
  4. *
  5. * @copyright Copyright (C) 2015 - 2019 Trilby Media, LLC. All rights reserved.
  6. * @license MIT License; see LICENSE file for details.
  7. */
  8. namespace Grav\Common\Data;
  9. use Grav\Common\Grav;
  10. use Grav\Common\Utils;
  11. use Grav\Common\Yaml;
  12. class Validation
  13. {
  14. /**
  15. * Validate value against a blueprint field definition.
  16. *
  17. * @param mixed $value
  18. * @param array $field
  19. * @return array
  20. */
  21. public static function validate($value, array $field)
  22. {
  23. if (!isset($field['type'])) {
  24. $field['type'] = 'text';
  25. }
  26. $validate = (array)($field['validate'] ?? null);
  27. $type = $validate['type'] ?? $field['type'];
  28. $required = $validate['required'] ?? false;
  29. // If value isn't required, we will stop validation if empty value is given.
  30. if ($required !== true && ($value === null || $value === '' || (($field['type'] === 'checkbox' || $field['type'] === 'switch') && $value == false))
  31. ) {
  32. return [];
  33. }
  34. // Get language class.
  35. $language = Grav::instance()['language'];
  36. $name = ucfirst($field['label'] ?? $field['name']);
  37. $message = (string) isset($field['validate']['message'])
  38. ? $language->translate($field['validate']['message'])
  39. : $language->translate('GRAV.FORM.INVALID_INPUT', null, true) . ' "' . $language->translate($name) . '"';
  40. // Validate type with fallback type text.
  41. $method = 'type' . str_replace('-', '_', $type);
  42. // If this is a YAML field validate/filter as such
  43. if (isset($field['yaml']) && $field['yaml'] === true) {
  44. $method = 'typeYaml';
  45. }
  46. $messages = [];
  47. $success = method_exists(__CLASS__, $method) ? self::$method($value, $validate, $field) : true;
  48. if (!$success) {
  49. $messages[$field['name']][] = $message;
  50. }
  51. // Check individual rules.
  52. foreach ($validate as $rule => $params) {
  53. $method = 'validate' . ucfirst(str_replace('-', '_', $rule));
  54. if (method_exists(__CLASS__, $method)) {
  55. $success = self::$method($value, $params);
  56. if (!$success) {
  57. $messages[$field['name']][] = $message;
  58. }
  59. }
  60. }
  61. return $messages;
  62. }
  63. /**
  64. * Filter value against a blueprint field definition.
  65. *
  66. * @param mixed $value
  67. * @param array $field
  68. * @return mixed Filtered value.
  69. */
  70. public static function filter($value, array $field)
  71. {
  72. $validate = (array)($field['filter'] ?? $field['validate'] ?? null);
  73. // If value isn't required, we will return null if empty value is given.
  74. if (($value === null || $value === '') && empty($validate['required'])) {
  75. return null;
  76. }
  77. if (!isset($field['type'])) {
  78. $field['type'] = 'text';
  79. }
  80. $type = $field['filter']['type'] ?? $field['validate']['type'] ?? $field['type'];
  81. $method = 'filter' . ucfirst(str_replace('-', '_', $type));
  82. // If this is a YAML field validate/filter as such
  83. if (isset($field['yaml']) && $field['yaml'] === true) {
  84. $method = 'filterYaml';
  85. }
  86. if (!method_exists(__CLASS__, $method)) {
  87. $method = isset($field['array']) && $field['array'] === true ? 'filterArray' : 'filterText';
  88. }
  89. return self::$method($value, $validate, $field);
  90. }
  91. /**
  92. * HTML5 input: text
  93. *
  94. * @param mixed $value Value to be validated.
  95. * @param array $params Validation parameters.
  96. * @param array $field Blueprint for the field.
  97. * @return bool True if validation succeeded.
  98. */
  99. public static function typeText($value, array $params, array $field)
  100. {
  101. if (!\is_string($value) && !is_numeric($value)) {
  102. return false;
  103. }
  104. $value = (string)$value;
  105. if (!empty($params['trim'])) {
  106. $value = trim($value);
  107. }
  108. if (isset($params['min']) && \strlen($value) < $params['min']) {
  109. return false;
  110. }
  111. if (isset($params['max']) && \strlen($value) > $params['max']) {
  112. return false;
  113. }
  114. $min = $params['min'] ?? 0;
  115. if (isset($params['step']) && (\strlen($value) - $min) % $params['step'] === 0) {
  116. return false;
  117. }
  118. if ((!isset($params['multiline']) || !$params['multiline']) && preg_match('/\R/um', $value)) {
  119. return false;
  120. }
  121. return true;
  122. }
  123. protected static function filterText($value, array $params, array $field)
  124. {
  125. if (!\is_string($value) && !is_numeric($value)) {
  126. return '';
  127. }
  128. if (!empty($params['trim'])) {
  129. $value = trim($value);
  130. }
  131. return (string) $value;
  132. }
  133. protected static function filterCheckbox($value, array $params, array $field)
  134. {
  135. return (bool) $value;
  136. }
  137. protected static function filterCommaList($value, array $params, array $field)
  138. {
  139. return \is_array($value) ? $value : preg_split('/\s*,\s*/', $value, -1, PREG_SPLIT_NO_EMPTY);
  140. }
  141. public static function typeCommaList($value, array $params, array $field)
  142. {
  143. return \is_array($value) ? true : self::typeText($value, $params, $field);
  144. }
  145. protected static function filterLower($value, array $params)
  146. {
  147. return strtolower($value);
  148. }
  149. protected static function filterUpper($value, array $params)
  150. {
  151. return strtoupper($value);
  152. }
  153. /**
  154. * HTML5 input: textarea
  155. *
  156. * @param mixed $value Value to be validated.
  157. * @param array $params Validation parameters.
  158. * @param array $field Blueprint for the field.
  159. * @return bool True if validation succeeded.
  160. */
  161. public static function typeTextarea($value, array $params, array $field)
  162. {
  163. if (!isset($params['multiline'])) {
  164. $params['multiline'] = true;
  165. }
  166. return self::typeText($value, $params, $field);
  167. }
  168. /**
  169. * HTML5 input: password
  170. *
  171. * @param mixed $value Value to be validated.
  172. * @param array $params Validation parameters.
  173. * @param array $field Blueprint for the field.
  174. * @return bool True if validation succeeded.
  175. */
  176. public static function typePassword($value, array $params, array $field)
  177. {
  178. return self::typeText($value, $params, $field);
  179. }
  180. /**
  181. * HTML5 input: hidden
  182. *
  183. * @param mixed $value Value to be validated.
  184. * @param array $params Validation parameters.
  185. * @param array $field Blueprint for the field.
  186. * @return bool True if validation succeeded.
  187. */
  188. public static function typeHidden($value, array $params, array $field)
  189. {
  190. return self::typeText($value, $params, $field);
  191. }
  192. /**
  193. * Custom input: checkbox list
  194. *
  195. * @param mixed $value Value to be validated.
  196. * @param array $params Validation parameters.
  197. * @param array $field Blueprint for the field.
  198. * @return bool True if validation succeeded.
  199. */
  200. public static function typeCheckboxes($value, array $params, array $field)
  201. {
  202. // Set multiple: true so checkboxes can easily use min/max counts to control number of options required
  203. $field['multiple'] = true;
  204. return self::typeArray((array) $value, $params, $field);
  205. }
  206. protected static function filterCheckboxes($value, array $params, array $field)
  207. {
  208. return self::filterArray($value, $params, $field);
  209. }
  210. /**
  211. * HTML5 input: checkbox
  212. *
  213. * @param mixed $value Value to be validated.
  214. * @param array $params Validation parameters.
  215. * @param array $field Blueprint for the field.
  216. * @return bool True if validation succeeded.
  217. */
  218. public static function typeCheckbox($value, array $params, array $field)
  219. {
  220. $value = (string)$value;
  221. $field_value = (string)($field['value'] ?? '1');
  222. return $value === $field_value;
  223. }
  224. /**
  225. * HTML5 input: radio
  226. *
  227. * @param mixed $value Value to be validated.
  228. * @param array $params Validation parameters.
  229. * @param array $field Blueprint for the field.
  230. * @return bool True if validation succeeded.
  231. */
  232. public static function typeRadio($value, array $params, array $field)
  233. {
  234. return self::typeArray((array) $value, $params, $field);
  235. }
  236. /**
  237. * Custom input: toggle
  238. *
  239. * @param mixed $value Value to be validated.
  240. * @param array $params Validation parameters.
  241. * @param array $field Blueprint for the field.
  242. * @return bool True if validation succeeded.
  243. */
  244. public static function typeToggle($value, array $params, array $field)
  245. {
  246. if (\is_bool($value)) {
  247. $value = (int)$value;
  248. }
  249. return self::typeArray((array) $value, $params, $field);
  250. }
  251. /**
  252. * Custom input: file
  253. *
  254. * @param mixed $value Value to be validated.
  255. * @param array $params Validation parameters.
  256. * @param array $field Blueprint for the field.
  257. * @return bool True if validation succeeded.
  258. */
  259. public static function typeFile($value, array $params, array $field)
  260. {
  261. return self::typeArray((array)$value, $params, $field);
  262. }
  263. protected static function filterFile($value, array $params, array $field)
  264. {
  265. return (array)$value;
  266. }
  267. /**
  268. * HTML5 input: select
  269. *
  270. * @param mixed $value Value to be validated.
  271. * @param array $params Validation parameters.
  272. * @param array $field Blueprint for the field.
  273. * @return bool True if validation succeeded.
  274. */
  275. public static function typeSelect($value, array $params, array $field)
  276. {
  277. return self::typeArray((array) $value, $params, $field);
  278. }
  279. /**
  280. * HTML5 input: number
  281. *
  282. * @param mixed $value Value to be validated.
  283. * @param array $params Validation parameters.
  284. * @param array $field Blueprint for the field.
  285. * @return bool True if validation succeeded.
  286. */
  287. public static function typeNumber($value, array $params, array $field)
  288. {
  289. if (!is_numeric($value)) {
  290. return false;
  291. }
  292. if (isset($params['min']) && $value < $params['min']) {
  293. return false;
  294. }
  295. if (isset($params['max']) && $value > $params['max']) {
  296. return false;
  297. }
  298. $min = $params['min'] ?? 0;
  299. return !(isset($params['step']) && fmod($value - $min, $params['step']) === 0);
  300. }
  301. protected static function filterNumber($value, array $params, array $field)
  302. {
  303. return (string)(int)$value !== (string)(float)$value ? (float) $value : (int) $value;
  304. }
  305. protected static function filterDateTime($value, array $params, array $field)
  306. {
  307. $format = Grav::instance()['config']->get('system.pages.dateformat.default');
  308. if ($format) {
  309. $converted = new \DateTime($value);
  310. return $converted->format($format);
  311. }
  312. return $value;
  313. }
  314. /**
  315. * HTML5 input: range
  316. *
  317. * @param mixed $value Value to be validated.
  318. * @param array $params Validation parameters.
  319. * @param array $field Blueprint for the field.
  320. * @return bool True if validation succeeded.
  321. */
  322. public static function typeRange($value, array $params, array $field)
  323. {
  324. return self::typeNumber($value, $params, $field);
  325. }
  326. protected static function filterRange($value, array $params, array $field)
  327. {
  328. return self::filterNumber($value, $params, $field);
  329. }
  330. /**
  331. * HTML5 input: color
  332. *
  333. * @param mixed $value Value to be validated.
  334. * @param array $params Validation parameters.
  335. * @param array $field Blueprint for the field.
  336. * @return bool True if validation succeeded.
  337. */
  338. public static function typeColor($value, array $params, array $field)
  339. {
  340. return preg_match('/^\#[0-9a-fA-F]{3}[0-9a-fA-F]{3}?$/u', $value);
  341. }
  342. /**
  343. * HTML5 input: email
  344. *
  345. * @param mixed $value Value to be validated.
  346. * @param array $params Validation parameters.
  347. * @param array $field Blueprint for the field.
  348. * @return bool True if validation succeeded.
  349. */
  350. public static function typeEmail($value, array $params, array $field)
  351. {
  352. $values = !\is_array($value) ? explode(',', preg_replace('/\s+/', '', $value)) : $value;
  353. foreach ($values as $val) {
  354. if (!(self::typeText($val, $params, $field) && filter_var($val, FILTER_VALIDATE_EMAIL))) {
  355. return false;
  356. }
  357. }
  358. return true;
  359. }
  360. /**
  361. * HTML5 input: url
  362. *
  363. * @param mixed $value Value to be validated.
  364. * @param array $params Validation parameters.
  365. * @param array $field Blueprint for the field.
  366. * @return bool True if validation succeeded.
  367. */
  368. public static function typeUrl($value, array $params, array $field)
  369. {
  370. return self::typeText($value, $params, $field) && filter_var($value, FILTER_VALIDATE_URL);
  371. }
  372. /**
  373. * HTML5 input: datetime
  374. *
  375. * @param mixed $value Value to be validated.
  376. * @param array $params Validation parameters.
  377. * @param array $field Blueprint for the field.
  378. * @return bool True if validation succeeded.
  379. */
  380. public static function typeDatetime($value, array $params, array $field)
  381. {
  382. if ($value instanceof \DateTime) {
  383. return true;
  384. }
  385. if (!\is_string($value)) {
  386. return false;
  387. }
  388. if (!isset($params['format'])) {
  389. return false !== strtotime($value);
  390. }
  391. $dateFromFormat = \DateTime::createFromFormat($params['format'], $value);
  392. return $dateFromFormat && $value === date($params['format'], $dateFromFormat->getTimestamp());
  393. }
  394. /**
  395. * HTML5 input: datetime-local
  396. *
  397. * @param mixed $value Value to be validated.
  398. * @param array $params Validation parameters.
  399. * @param array $field Blueprint for the field.
  400. * @return bool True if validation succeeded.
  401. */
  402. public static function typeDatetimeLocal($value, array $params, array $field)
  403. {
  404. return self::typeDatetime($value, $params, $field);
  405. }
  406. /**
  407. * HTML5 input: date
  408. *
  409. * @param mixed $value Value to be validated.
  410. * @param array $params Validation parameters.
  411. * @param array $field Blueprint for the field.
  412. * @return bool True if validation succeeded.
  413. */
  414. public static function typeDate($value, array $params, array $field)
  415. {
  416. if (!isset($params['format'])) {
  417. $params['format'] = 'Y-m-d';
  418. }
  419. return self::typeDatetime($value, $params, $field);
  420. }
  421. /**
  422. * HTML5 input: time
  423. *
  424. * @param mixed $value Value to be validated.
  425. * @param array $params Validation parameters.
  426. * @param array $field Blueprint for the field.
  427. * @return bool True if validation succeeded.
  428. */
  429. public static function typeTime($value, array $params, array $field)
  430. {
  431. if (!isset($params['format'])) {
  432. $params['format'] = 'H:i';
  433. }
  434. return self::typeDatetime($value, $params, $field);
  435. }
  436. /**
  437. * HTML5 input: month
  438. *
  439. * @param mixed $value Value to be validated.
  440. * @param array $params Validation parameters.
  441. * @param array $field Blueprint for the field.
  442. * @return bool True if validation succeeded.
  443. */
  444. public static function typeMonth($value, array $params, array $field)
  445. {
  446. if (!isset($params['format'])) {
  447. $params['format'] = 'Y-m';
  448. }
  449. return self::typeDatetime($value, $params, $field);
  450. }
  451. /**
  452. * HTML5 input: week
  453. *
  454. * @param mixed $value Value to be validated.
  455. * @param array $params Validation parameters.
  456. * @param array $field Blueprint for the field.
  457. * @return bool True if validation succeeded.
  458. */
  459. public static function typeWeek($value, array $params, array $field)
  460. {
  461. if (!isset($params['format']) && !preg_match('/^\d{4}-W\d{2}$/u', $value)) {
  462. return false;
  463. }
  464. return self::typeDatetime($value, $params, $field);
  465. }
  466. /**
  467. * Custom input: array
  468. *
  469. * @param mixed $value Value to be validated.
  470. * @param array $params Validation parameters.
  471. * @param array $field Blueprint for the field.
  472. * @return bool True if validation succeeded.
  473. */
  474. public static function typeArray($value, array $params, array $field)
  475. {
  476. if (!\is_array($value)) {
  477. return false;
  478. }
  479. if (isset($field['multiple'])) {
  480. if (isset($params['min']) && \count($value) < $params['min']) {
  481. return false;
  482. }
  483. if (isset($params['max']) && \count($value) > $params['max']) {
  484. return false;
  485. }
  486. $min = $params['min'] ?? 0;
  487. if (isset($params['step']) && (\count($value) - $min) % $params['step'] === 0) {
  488. return false;
  489. }
  490. }
  491. // If creating new values is allowed, no further checks are needed.
  492. if (!empty($field['selectize']['create'])) {
  493. return true;
  494. }
  495. $options = $field['options'] ?? [];
  496. $use = $field['use'] ?? 'values';
  497. if (empty($field['selectize']) || empty($field['multiple'])) {
  498. $options = array_keys($options);
  499. }
  500. if ($use === 'keys') {
  501. $value = array_keys($value);
  502. }
  503. return !($options && array_diff($value, $options));
  504. }
  505. protected static function filterArray($value, $params, $field)
  506. {
  507. $values = (array) $value;
  508. $options = isset($field['options']) ? array_keys($field['options']) : [];
  509. $multi = $field['multiple'] ?? false;
  510. if (\count($values) === 1 && isset($values[0]) && $values[0] === '') {
  511. return null;
  512. }
  513. if ($options) {
  514. $useKey = isset($field['use']) && $field['use'] === 'keys';
  515. foreach ($values as $key => $val) {
  516. $values[$key] = $useKey ? (bool) $val : $val;
  517. }
  518. }
  519. if ($multi) {
  520. foreach ($values as $key => $val) {
  521. if (\is_array($val)) {
  522. $val = implode(',', $val);
  523. $values[$key] = array_map('trim', explode(',', $val));
  524. } else {
  525. $values[$key] = trim($val);
  526. }
  527. }
  528. }
  529. if (isset($field['ignore_empty']) && Utils::isPositive($field['ignore_empty'])) {
  530. foreach ($values as $key => $val) {
  531. if ($val === '') {
  532. unset($values[$key]);
  533. } elseif (\is_array($val)) {
  534. foreach ($val as $inner_key => $inner_value) {
  535. if ($inner_value === '') {
  536. unset($val[$inner_key]);
  537. }
  538. }
  539. }
  540. $values[$key] = $val;
  541. }
  542. }
  543. return $values;
  544. }
  545. public static function typeList($value, array $params, array $field)
  546. {
  547. if (!\is_array($value)) {
  548. return false;
  549. }
  550. if (isset($field['fields'])) {
  551. foreach ($value as $key => $item) {
  552. foreach ($field['fields'] as $subKey => $subField) {
  553. $subKey = trim($subKey, '.');
  554. $subValue = $item[$subKey] ?? null;
  555. self::validate($subValue, $subField);
  556. }
  557. }
  558. }
  559. return true;
  560. }
  561. protected static function filterList($value, array $params, array $field)
  562. {
  563. return (array) $value;
  564. }
  565. public static function filterYaml($value, $params)
  566. {
  567. if (!\is_string($value)) {
  568. return $value;
  569. }
  570. return (array) Yaml::parse($value);
  571. }
  572. /**
  573. * Custom input: ignore (will not validate)
  574. *
  575. * @param mixed $value Value to be validated.
  576. * @param array $params Validation parameters.
  577. * @param array $field Blueprint for the field.
  578. * @return bool True if validation succeeded.
  579. */
  580. public static function typeIgnore($value, array $params, array $field)
  581. {
  582. return true;
  583. }
  584. public static function filterIgnore($value, array $params, array $field)
  585. {
  586. return $value;
  587. }
  588. /**
  589. * Input value which can be ignored.
  590. *
  591. * @param mixed $value Value to be validated.
  592. * @param array $params Validation parameters.
  593. * @param array $field Blueprint for the field.
  594. * @return bool True if validation succeeded.
  595. */
  596. public static function typeUnset($value, array $params, array $field)
  597. {
  598. return true;
  599. }
  600. public static function filterUnset($value, array $params, array $field)
  601. {
  602. return null;
  603. }
  604. // HTML5 attributes (min, max and range are handled inside the types)
  605. public static function validateRequired($value, $params)
  606. {
  607. if (is_scalar($value)) {
  608. return (bool) $params !== true || $value !== '';
  609. }
  610. return (bool) $params !== true || !empty($value);
  611. }
  612. public static function validatePattern($value, $params)
  613. {
  614. return (bool) preg_match("`^{$params}$`u", $value);
  615. }
  616. // Internal types
  617. public static function validateAlpha($value, $params)
  618. {
  619. return ctype_alpha($value);
  620. }
  621. public static function validateAlnum($value, $params)
  622. {
  623. return ctype_alnum($value);
  624. }
  625. public static function typeBool($value, $params)
  626. {
  627. return \is_bool($value) || $value == 1 || $value == 0;
  628. }
  629. public static function validateBool($value, $params)
  630. {
  631. return \is_bool($value) || $value == 1 || $value == 0;
  632. }
  633. protected static function filterBool($value, $params)
  634. {
  635. return (bool) $value;
  636. }
  637. public static function validateDigit($value, $params)
  638. {
  639. return ctype_digit($value);
  640. }
  641. public static function validateFloat($value, $params)
  642. {
  643. return \is_float(filter_var($value, FILTER_VALIDATE_FLOAT));
  644. }
  645. protected static function filterFloat($value, $params)
  646. {
  647. return (float) $value;
  648. }
  649. public static function validateHex($value, $params)
  650. {
  651. return ctype_xdigit($value);
  652. }
  653. public static function validateInt($value, $params)
  654. {
  655. return is_numeric($value) && (int)$value == $value;
  656. }
  657. protected static function filterInt($value, $params)
  658. {
  659. return (int)$value;
  660. }
  661. public static function validateArray($value, $params)
  662. {
  663. return \is_array($value) || ($value instanceof \ArrayAccess && $value instanceof \Traversable && $value instanceof \Countable);
  664. }
  665. public static function filterItem_List($value, $params)
  666. {
  667. return array_values(array_filter($value, function($v) { return !empty($v); } ));
  668. }
  669. public static function validateJson($value, $params)
  670. {
  671. return (bool) (@json_decode($value));
  672. }
  673. }