Validation.php 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765
  1. <?php
  2. /**
  3. * @package Grav.Common.Data
  4. *
  5. * @copyright Copyright (C) 2015 - 2018 Trilby Media, LLC. All rights reserved.
  6. * @license MIT License; see LICENSE file for details.
  7. */
  8. namespace Grav\Common\Data;
  9. use Grav\Common\Grav;
  10. use Grav\Common\Utils;
  11. use Grav\Common\Yaml;
  12. use RocketTheme\Toolbox\Compat\Yaml\Yaml as FallbackYaml;
  13. class Validation
  14. {
  15. /**
  16. * Validate value against a blueprint field definition.
  17. *
  18. * @param $value
  19. * @param array $field
  20. * @return array
  21. */
  22. public static function validate($value, array $field)
  23. {
  24. $messages = [];
  25. $validate = isset($field['validate']) ? (array) $field['validate'] : [];
  26. // Validate type with fallback type text.
  27. $type = (string) isset($validate['type']) ? $validate['type'] : $field['type'];
  28. $method = 'type'.strtr($type, '-', '_');
  29. // If value isn't required, we will stop validation if empty value is given.
  30. if ((empty($validate['required']) || (isset($validate['required']) && $validate['required'] !== true)) && ($value === null || $value === '' || (($field['type'] === 'checkbox' || $field['type'] === 'switch') && $value == false))) {
  31. return $messages;
  32. }
  33. if (!isset($field['type'])) {
  34. $field['type'] = 'text';
  35. }
  36. // Get language class.
  37. $language = Grav::instance()['language'];
  38. $name = ucfirst(isset($field['label']) ? $field['label'] : $field['name']);
  39. $message = (string) isset($field['validate']['message'])
  40. ? $language->translate($field['validate']['message'])
  41. : $language->translate('FORM.INVALID_INPUT', null, true) . ' "' . $language->translate($name) . '"';
  42. // If this is a YAML field validate/filter as such
  43. if ($type != 'yaml' && isset($field['yaml']) && $field['yaml'] === true) {
  44. $method = 'typeYaml';
  45. }
  46. if (method_exists(__CLASS__, $method)) {
  47. $success = self::$method($value, $validate, $field);
  48. } else {
  49. $success = true;
  50. }
  51. if (!$success) {
  52. $messages[$field['name']][] = $message;
  53. }
  54. // Check individual rules.
  55. foreach ($validate as $rule => $params) {
  56. $method = 'validate' . ucfirst(strtr($rule, '-', '_'));
  57. if (method_exists(__CLASS__, $method)) {
  58. $success = self::$method($value, $params);
  59. if (!$success) {
  60. $messages[$field['name']][] = $message;
  61. }
  62. }
  63. }
  64. return $messages;
  65. }
  66. /**
  67. * Filter value against a blueprint field definition.
  68. *
  69. * @param mixed $value
  70. * @param array $field
  71. * @return mixed Filtered value.
  72. */
  73. public static function filter($value, array $field)
  74. {
  75. $validate = isset($field['validate']) ? (array) $field['validate'] : [];
  76. // If value isn't required, we will return null if empty value is given.
  77. if (empty($validate['required']) && ($value === null || $value === '')) {
  78. return null;
  79. }
  80. if (!isset($field['type'])) {
  81. $field['type'] = 'text';
  82. }
  83. // Validate type with fallback type text.
  84. $type = (string) isset($field['validate']['type']) ? $field['validate']['type'] : $field['type'];
  85. $method = 'filter' . ucfirst(strtr($type, '-', '_'));
  86. // If this is a YAML field validate/filter as such
  87. if ($type !== 'yaml' && isset($field['yaml']) && $field['yaml'] === true) {
  88. $method = 'filterYaml';
  89. }
  90. if (!method_exists(__CLASS__, $method)) {
  91. $method = 'filterText';
  92. }
  93. return self::$method($value, $validate, $field);
  94. }
  95. /**
  96. * HTML5 input: text
  97. *
  98. * @param mixed $value Value to be validated.
  99. * @param array $params Validation parameters.
  100. * @param array $field Blueprint for the field.
  101. * @return bool True if validation succeeded.
  102. */
  103. public static function typeText($value, array $params, array $field)
  104. {
  105. if (!is_string($value) && !is_numeric($value)) {
  106. return false;
  107. }
  108. $value = (string)$value;
  109. if (isset($params['min']) && strlen($value) < $params['min']) {
  110. return false;
  111. }
  112. if (isset($params['max']) && strlen($value) > $params['max']) {
  113. return false;
  114. }
  115. $min = isset($params['min']) ? $params['min'] : 0;
  116. if (isset($params['step']) && (strlen($value) - $min) % $params['step'] == 0) {
  117. return false;
  118. }
  119. if ((!isset($params['multiline']) || !$params['multiline']) && preg_match('/\R/um', $value)) {
  120. return false;
  121. }
  122. return true;
  123. }
  124. protected static function filterText($value, array $params, array $field)
  125. {
  126. return (string) $value;
  127. }
  128. protected static function filterCommaList($value, array $params, array $field)
  129. {
  130. return is_array($value) ? $value : preg_split('/\s*,\s*/', $value, -1, PREG_SPLIT_NO_EMPTY);
  131. }
  132. public static function typeCommaList($value, array $params, array $field)
  133. {
  134. return is_array($value) ? true : self::typeText($value, $params, $field);
  135. }
  136. protected static function filterLower($value, array $params)
  137. {
  138. return strtolower($value);
  139. }
  140. protected static function filterUpper($value, array $params)
  141. {
  142. return strtoupper($value);
  143. }
  144. /**
  145. * HTML5 input: textarea
  146. *
  147. * @param mixed $value Value to be validated.
  148. * @param array $params Validation parameters.
  149. * @param array $field Blueprint for the field.
  150. * @return bool True if validation succeeded.
  151. */
  152. public static function typeTextarea($value, array $params, array $field)
  153. {
  154. if (!isset($params['multiline'])) {
  155. $params['multiline'] = true;
  156. }
  157. return self::typeText($value, $params, $field);
  158. }
  159. /**
  160. * HTML5 input: password
  161. *
  162. * @param mixed $value Value to be validated.
  163. * @param array $params Validation parameters.
  164. * @param array $field Blueprint for the field.
  165. * @return bool True if validation succeeded.
  166. */
  167. public static function typePassword($value, array $params, array $field)
  168. {
  169. return self::typeText($value, $params, $field);
  170. }
  171. /**
  172. * HTML5 input: hidden
  173. *
  174. * @param mixed $value Value to be validated.
  175. * @param array $params Validation parameters.
  176. * @param array $field Blueprint for the field.
  177. * @return bool True if validation succeeded.
  178. */
  179. public static function typeHidden($value, array $params, array $field)
  180. {
  181. return self::typeText($value, $params, $field);
  182. }
  183. /**
  184. * Custom input: checkbox list
  185. *
  186. * @param mixed $value Value to be validated.
  187. * @param array $params Validation parameters.
  188. * @param array $field Blueprint for the field.
  189. * @return bool True if validation succeeded.
  190. */
  191. public static function typeCheckboxes($value, array $params, array $field)
  192. {
  193. // Set multiple: true so checkboxes can easily use min/max counts to control number of options required
  194. $field['multiple'] = true;
  195. return self::typeArray((array) $value, $params, $field);
  196. }
  197. protected static function filterCheckboxes($value, array $params, array $field)
  198. {
  199. return self::filterArray($value, $params, $field);
  200. }
  201. /**
  202. * HTML5 input: checkbox
  203. *
  204. * @param mixed $value Value to be validated.
  205. * @param array $params Validation parameters.
  206. * @param array $field Blueprint for the field.
  207. * @return bool True if validation succeeded.
  208. */
  209. public static function typeCheckbox($value, array $params, array $field)
  210. {
  211. $value = (string) $value;
  212. if (!isset($field['value'])) {
  213. $field['value'] = 1;
  214. }
  215. if (isset($value) && $value != $field['value']) {
  216. return false;
  217. }
  218. return true;
  219. }
  220. /**
  221. * HTML5 input: radio
  222. *
  223. * @param mixed $value Value to be validated.
  224. * @param array $params Validation parameters.
  225. * @param array $field Blueprint for the field.
  226. * @return bool True if validation succeeded.
  227. */
  228. public static function typeRadio($value, array $params, array $field)
  229. {
  230. return self::typeArray((array) $value, $params, $field);
  231. }
  232. /**
  233. * Custom input: toggle
  234. *
  235. * @param mixed $value Value to be validated.
  236. * @param array $params Validation parameters.
  237. * @param array $field Blueprint for the field.
  238. * @return bool True if validation succeeded.
  239. */
  240. public static function typeToggle($value, array $params, array $field)
  241. {
  242. return self::typeArray((array) $value, $params, $field);
  243. }
  244. /**
  245. * Custom input: file
  246. *
  247. * @param mixed $value Value to be validated.
  248. * @param array $params Validation parameters.
  249. * @param array $field Blueprint for the field.
  250. * @return bool True if validation succeeded.
  251. */
  252. public static function typeFile($value, array $params, array $field)
  253. {
  254. return self::typeArray((array) $value, $params, $field);
  255. }
  256. protected static function filterFile($value, array $params, array $field)
  257. {
  258. return (array) $value;
  259. }
  260. /**
  261. * HTML5 input: select
  262. *
  263. * @param mixed $value Value to be validated.
  264. * @param array $params Validation parameters.
  265. * @param array $field Blueprint for the field.
  266. * @return bool True if validation succeeded.
  267. */
  268. public static function typeSelect($value, array $params, array $field)
  269. {
  270. return self::typeArray((array) $value, $params, $field);
  271. }
  272. /**
  273. * HTML5 input: number
  274. *
  275. * @param mixed $value Value to be validated.
  276. * @param array $params Validation parameters.
  277. * @param array $field Blueprint for the field.
  278. * @return bool True if validation succeeded.
  279. */
  280. public static function typeNumber($value, array $params, array $field)
  281. {
  282. if (!is_numeric($value)) {
  283. return false;
  284. }
  285. if (isset($params['min']) && $value < $params['min']) {
  286. return false;
  287. }
  288. if (isset($params['max']) && $value > $params['max']) {
  289. return false;
  290. }
  291. $min = isset($params['min']) ? $params['min'] : 0;
  292. if (isset($params['step']) && fmod($value - $min, $params['step']) == 0) {
  293. return false;
  294. }
  295. return true;
  296. }
  297. protected static function filterNumber($value, array $params, array $field)
  298. {
  299. return (string)(int)$value !== (string)(float)$value ? (float) $value : (int) $value;
  300. }
  301. protected static function filterDateTime($value, array $params, array $field)
  302. {
  303. $format = Grav::instance()['config']->get('system.pages.dateformat.default');
  304. if ($format) {
  305. $converted = new \DateTime($value);
  306. return $converted->format($format);
  307. }
  308. return $value;
  309. }
  310. /**
  311. * HTML5 input: range
  312. *
  313. * @param mixed $value Value to be validated.
  314. * @param array $params Validation parameters.
  315. * @param array $field Blueprint for the field.
  316. * @return bool True if validation succeeded.
  317. */
  318. public static function typeRange($value, array $params, array $field)
  319. {
  320. return self::typeNumber($value, $params, $field);
  321. }
  322. protected static function filterRange($value, array $params, array $field)
  323. {
  324. return self::filterNumber($value, $params, $field);
  325. }
  326. /**
  327. * HTML5 input: color
  328. *
  329. * @param mixed $value Value to be validated.
  330. * @param array $params Validation parameters.
  331. * @param array $field Blueprint for the field.
  332. * @return bool True if validation succeeded.
  333. */
  334. public static function typeColor($value, array $params, array $field)
  335. {
  336. return preg_match('/^\#[0-9a-fA-F]{3}[0-9a-fA-F]{3}?$/u', $value);
  337. }
  338. /**
  339. * HTML5 input: email
  340. *
  341. * @param mixed $value Value to be validated.
  342. * @param array $params Validation parameters.
  343. * @param array $field Blueprint for the field.
  344. * @return bool True if validation succeeded.
  345. */
  346. public static function typeEmail($value, array $params, array $field)
  347. {
  348. $values = !is_array($value) ? explode(',', preg_replace('/\s+/', '', $value)) : $value;
  349. foreach ($values as $value) {
  350. if (!(self::typeText($value, $params, $field) && filter_var($value, FILTER_VALIDATE_EMAIL))) {
  351. return false;
  352. }
  353. }
  354. return true;
  355. }
  356. /**
  357. * HTML5 input: url
  358. *
  359. * @param mixed $value Value to be validated.
  360. * @param array $params Validation parameters.
  361. * @param array $field Blueprint for the field.
  362. * @return bool True if validation succeeded.
  363. */
  364. public static function typeUrl($value, array $params, array $field)
  365. {
  366. return self::typeText($value, $params, $field) && filter_var($value, FILTER_VALIDATE_URL);
  367. }
  368. /**
  369. * HTML5 input: datetime
  370. *
  371. * @param mixed $value Value to be validated.
  372. * @param array $params Validation parameters.
  373. * @param array $field Blueprint for the field.
  374. * @return bool True if validation succeeded.
  375. */
  376. public static function typeDatetime($value, array $params, array $field)
  377. {
  378. if ($value instanceof \DateTime) {
  379. return true;
  380. } elseif (!is_string($value)) {
  381. return false;
  382. } elseif (!isset($params['format'])) {
  383. return false !== strtotime($value);
  384. }
  385. $dateFromFormat = \DateTime::createFromFormat($params['format'], $value);
  386. return $dateFromFormat && $value === date($params['format'], $dateFromFormat->getTimestamp());
  387. }
  388. /**
  389. * HTML5 input: datetime-local
  390. *
  391. * @param mixed $value Value to be validated.
  392. * @param array $params Validation parameters.
  393. * @param array $field Blueprint for the field.
  394. * @return bool True if validation succeeded.
  395. */
  396. public static function typeDatetimeLocal($value, array $params, array $field)
  397. {
  398. return self::typeDatetime($value, $params, $field);
  399. }
  400. /**
  401. * HTML5 input: date
  402. *
  403. * @param mixed $value Value to be validated.
  404. * @param array $params Validation parameters.
  405. * @param array $field Blueprint for the field.
  406. * @return bool True if validation succeeded.
  407. */
  408. public static function typeDate($value, array $params, array $field)
  409. {
  410. $params = array($params);
  411. if (!isset($params['format'])) {
  412. $params['format'] = 'Y-m-d';
  413. }
  414. return self::typeDatetime($value, $params, $field);
  415. }
  416. /**
  417. * HTML5 input: time
  418. *
  419. * @param mixed $value Value to be validated.
  420. * @param array $params Validation parameters.
  421. * @param array $field Blueprint for the field.
  422. * @return bool True if validation succeeded.
  423. */
  424. public static function typeTime($value, array $params, array $field)
  425. {
  426. $params = array($params);
  427. if (!isset($params['format'])) {
  428. $params['format'] = 'H:i';
  429. }
  430. return self::typeDatetime($value, $params, $field);
  431. }
  432. /**
  433. * HTML5 input: month
  434. *
  435. * @param mixed $value Value to be validated.
  436. * @param array $params Validation parameters.
  437. * @param array $field Blueprint for the field.
  438. * @return bool True if validation succeeded.
  439. */
  440. public static function typeMonth($value, array $params, array $field)
  441. {
  442. $params = array($params);
  443. if (!isset($params['format'])) {
  444. $params['format'] = 'Y-m';
  445. }
  446. return self::typeDatetime($value, $params, $field);
  447. }
  448. /**
  449. * HTML5 input: week
  450. *
  451. * @param mixed $value Value to be validated.
  452. * @param array $params Validation parameters.
  453. * @param array $field Blueprint for the field.
  454. * @return bool True if validation succeeded.
  455. */
  456. public static function typeWeek($value, array $params, array $field)
  457. {
  458. if (!isset($params['format']) && !preg_match('/^\d{4}-W\d{2}$/u', $value)) {
  459. return false;
  460. }
  461. return self::typeDatetime($value, $params, $field);
  462. }
  463. /**
  464. * Custom input: array
  465. *
  466. * @param mixed $value Value to be validated.
  467. * @param array $params Validation parameters.
  468. * @param array $field Blueprint for the field.
  469. * @return bool True if validation succeeded.
  470. */
  471. public static function typeArray($value, array $params, array $field)
  472. {
  473. if (!is_array($value)) {
  474. return false;
  475. }
  476. if (isset($field['multiple'])) {
  477. if (isset($params['min']) && count($value) < $params['min']) {
  478. return false;
  479. }
  480. if (isset($params['max']) && count($value) > $params['max']) {
  481. return false;
  482. }
  483. $min = isset($params['min']) ? $params['min'] : 0;
  484. if (isset($params['step']) && (count($value) - $min) % $params['step'] == 0) {
  485. return false;
  486. }
  487. }
  488. $options = isset($field['options']) ? array_keys($field['options']) : array();
  489. $values = isset($field['use']) && $field['use'] == 'keys' ? array_keys($value) : $value;
  490. if ($options && array_diff($values, $options)) {
  491. return false;
  492. }
  493. return true;
  494. }
  495. protected static function filterArray($value, $params, $field)
  496. {
  497. $values = (array) $value;
  498. $options = isset($field['options']) ? array_keys($field['options']) : array();
  499. $multi = isset($field['multiple']) ? $field['multiple'] : false;
  500. if (count($values) == 1 && isset($values[0]) && $values[0] == '') {
  501. return null;
  502. }
  503. if ($options) {
  504. $useKey = isset($field['use']) && $field['use'] == 'keys';
  505. foreach ($values as $key => $value) {
  506. $values[$key] = $useKey ? (bool) $value : $value;
  507. }
  508. }
  509. if ($multi) {
  510. foreach ($values as $key => $value) {
  511. if (is_array($value)) {
  512. $value = implode(',', $value);
  513. $values[$key] = array_map('trim', explode(',', $value));
  514. } else {
  515. $values[$key] = trim($value);
  516. }
  517. }
  518. }
  519. if (isset($field['ignore_empty']) && Utils::isPositive($field['ignore_empty'])) {
  520. foreach ($values as $key => $value) {
  521. foreach ($value as $inner_key => $inner_value) {
  522. if ($inner_value == '') {
  523. unset($value[$inner_key]);
  524. }
  525. }
  526. $values[$key] = $value;
  527. }
  528. }
  529. return $values;
  530. }
  531. public static function typeList($value, array $params, array $field)
  532. {
  533. if (!is_array($value)) {
  534. return false;
  535. }
  536. if (isset($field['fields'])) {
  537. foreach ($value as $key => $item) {
  538. foreach ($field['fields'] as $subKey => $subField) {
  539. $subKey = trim($subKey, '.');
  540. $subValue = isset($item[$subKey]) ? $item[$subKey] : null;
  541. self::validate($subValue, $subField);
  542. }
  543. }
  544. }
  545. return true;
  546. }
  547. protected static function filterList($value, array $params, array $field)
  548. {
  549. return (array) $value;
  550. }
  551. public static function filterYaml($value, $params)
  552. {
  553. if (!is_string($value)) {
  554. return $value;
  555. }
  556. return (array) Yaml::parse($value);
  557. }
  558. /**
  559. * Custom input: ignore (will not validate)
  560. *
  561. * @param mixed $value Value to be validated.
  562. * @param array $params Validation parameters.
  563. * @param array $field Blueprint for the field.
  564. * @return bool True if validation succeeded.
  565. */
  566. public static function typeIgnore($value, array $params, array $field)
  567. {
  568. return true;
  569. }
  570. public static function filterIgnore($value, array $params, array $field)
  571. {
  572. return $value;
  573. }
  574. // HTML5 attributes (min, max and range are handled inside the types)
  575. public static function validateRequired($value, $params)
  576. {
  577. if (is_scalar($value)) {
  578. return (bool) $params !== true || $value !== '';
  579. } else {
  580. return (bool) $params !== true || !empty($value);
  581. }
  582. }
  583. public static function validatePattern($value, $params)
  584. {
  585. return (bool) preg_match("`^{$params}$`u", $value);
  586. }
  587. // Internal types
  588. public static function validateAlpha($value, $params)
  589. {
  590. return ctype_alpha($value);
  591. }
  592. public static function validateAlnum($value, $params)
  593. {
  594. return ctype_alnum($value);
  595. }
  596. public static function typeBool($value, $params)
  597. {
  598. return is_bool($value) || $value == 1 || $value == 0;
  599. }
  600. public static function validateBool($value, $params)
  601. {
  602. return is_bool($value) || $value == 1 || $value == 0;
  603. }
  604. protected static function filterBool($value, $params)
  605. {
  606. return (bool) $value;
  607. }
  608. public static function validateDigit($value, $params)
  609. {
  610. return ctype_digit($value);
  611. }
  612. public static function validateFloat($value, $params)
  613. {
  614. return is_float(filter_var($value, FILTER_VALIDATE_FLOAT));
  615. }
  616. protected static function filterFloat($value, $params)
  617. {
  618. return (float) $value;
  619. }
  620. public static function validateHex($value, $params)
  621. {
  622. return ctype_xdigit($value);
  623. }
  624. public static function validateInt($value, $params)
  625. {
  626. return is_numeric($value) && (int) $value == $value;
  627. }
  628. protected static function filterInt($value, $params)
  629. {
  630. return (int) $value;
  631. }
  632. public static function validateArray($value, $params)
  633. {
  634. return is_array($value)
  635. || ($value instanceof \ArrayAccess
  636. && $value instanceof \Traversable
  637. && $value instanceof \Countable);
  638. }
  639. public static function filterItem_List($value, $params)
  640. {
  641. return array_values(array_filter($value, function($v) { return !empty($v); } ));
  642. }
  643. public static function validateJson($value, $params)
  644. {
  645. return (bool) (@json_decode($value));
  646. }
  647. }