Validation.php 34 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236
  1. <?php
  2. /**
  3. * @package Grav\Common\Data
  4. *
  5. * @copyright Copyright (c) 2015 - 2023 Trilby Media, LLC. All rights reserved.
  6. * @license MIT License; see LICENSE file for details.
  7. */
  8. namespace Grav\Common\Data;
  9. use ArrayAccess;
  10. use Countable;
  11. use DateTime;
  12. use Grav\Common\Config\Config;
  13. use Grav\Common\Grav;
  14. use Grav\Common\Language\Language;
  15. use Grav\Common\Security;
  16. use Grav\Common\User\Interfaces\UserInterface;
  17. use Grav\Common\Utils;
  18. use Grav\Common\Yaml;
  19. use Grav\Framework\Flex\Interfaces\FlexObjectInterface;
  20. use Traversable;
  21. use function count;
  22. use function is_array;
  23. use function is_bool;
  24. use function is_float;
  25. use function is_int;
  26. use function is_string;
  27. /**
  28. * Class Validation
  29. * @package Grav\Common\Data
  30. */
  31. class Validation
  32. {
  33. /**
  34. * Validate value against a blueprint field definition.
  35. *
  36. * @param mixed $value
  37. * @param array $field
  38. * @return array
  39. */
  40. public static function validate($value, array $field)
  41. {
  42. if (!isset($field['type'])) {
  43. $field['type'] = 'text';
  44. }
  45. $validate = (array)($field['validate'] ?? null);
  46. $type = $validate['type'] ?? $field['type'];
  47. $required = $validate['required'] ?? false;
  48. // If value isn't required, we will stop validation if empty value is given.
  49. if ($required !== true && ($value === null || $value === '' || (($field['type'] === 'checkbox' || $field['type'] === 'switch') && $value == false))
  50. ) {
  51. return [];
  52. }
  53. // Get language class.
  54. $language = Grav::instance()['language'];
  55. $name = ucfirst($field['label'] ?? $field['name']);
  56. $message = (string) isset($field['validate']['message'])
  57. ? $language->translate($field['validate']['message'])
  58. : $language->translate('GRAV.FORM.INVALID_INPUT') . ' "' . $language->translate($name) . '"';
  59. // Validate type with fallback type text.
  60. $method = 'type' . str_replace('-', '_', $type);
  61. // If this is a YAML field validate/filter as such
  62. if (isset($field['yaml']) && $field['yaml'] === true) {
  63. $method = 'typeYaml';
  64. }
  65. $messages = [];
  66. $success = method_exists(__CLASS__, $method) ? self::$method($value, $validate, $field) : true;
  67. if (!$success) {
  68. $messages[$field['name']][] = $message;
  69. }
  70. // Check individual rules.
  71. foreach ($validate as $rule => $params) {
  72. $method = 'validate' . ucfirst(str_replace('-', '_', $rule));
  73. if (method_exists(__CLASS__, $method)) {
  74. $success = self::$method($value, $params);
  75. if (!$success) {
  76. $messages[$field['name']][] = $message;
  77. }
  78. }
  79. }
  80. return $messages;
  81. }
  82. /**
  83. * @param mixed $value
  84. * @param array $field
  85. * @return array
  86. */
  87. public static function checkSafety($value, array $field)
  88. {
  89. $messages = [];
  90. $type = $field['validate']['type'] ?? $field['type'] ?? 'text';
  91. $options = $field['xss_check'] ?? [];
  92. if ($options === false || $type === 'unset') {
  93. return $messages;
  94. }
  95. if (!is_array($options)) {
  96. $options = [];
  97. }
  98. $name = ucfirst($field['label'] ?? $field['name'] ?? 'UNKNOWN');
  99. /** @var UserInterface $user */
  100. $user = Grav::instance()['user'] ?? null;
  101. /** @var Config $config */
  102. $config = Grav::instance()['config'];
  103. $xss_whitelist = $config->get('security.xss_whitelist', 'admin.super');
  104. // Get language class.
  105. /** @var Language $language */
  106. $language = Grav::instance()['language'];
  107. if (!static::authorize($xss_whitelist, $user)) {
  108. $defaults = Security::getXssDefaults();
  109. $options += $defaults;
  110. $options['enabled_rules'] += $defaults['enabled_rules'];
  111. if (!empty($options['safe_protocols'])) {
  112. $options['invalid_protocols'] = array_diff($options['invalid_protocols'], $options['safe_protocols']);
  113. }
  114. if (!empty($options['safe_tags'])) {
  115. $options['dangerous_tags'] = array_diff($options['dangerous_tags'], $options['safe_tags']);
  116. }
  117. if (is_string($value)) {
  118. $violation = Security::detectXss($value, $options);
  119. if ($violation) {
  120. $messages[$name][] = $language->translate(['GRAV.FORM.XSS_ISSUES', $language->translate($name)], null, true);
  121. }
  122. } elseif (is_array($value)) {
  123. $violations = Security::detectXssFromArray($value, "{$name}.", $options);
  124. if ($violations) {
  125. $messages[$name][] = $language->translate(['GRAV.FORM.XSS_ISSUES', $language->translate($name)], null, true);
  126. }
  127. }
  128. }
  129. return $messages;
  130. }
  131. /**
  132. * Checks user authorisation to the action.
  133. *
  134. * @param string|string[] $action
  135. * @param UserInterface|null $user
  136. * @return bool
  137. */
  138. public static function authorize($action, UserInterface $user = null)
  139. {
  140. if (!$user) {
  141. return false;
  142. }
  143. $action = (array)$action;
  144. foreach ($action as $a) {
  145. // Ignore 'admin.super' if it's not the only value to be checked.
  146. if ($a === 'admin.super' && count($action) > 1 && $user instanceof FlexObjectInterface) {
  147. continue;
  148. }
  149. if ($user->authorize($a)) {
  150. return true;
  151. }
  152. }
  153. return false;
  154. }
  155. /**
  156. * Filter value against a blueprint field definition.
  157. *
  158. * @param mixed $value
  159. * @param array $field
  160. * @return mixed Filtered value.
  161. */
  162. public static function filter($value, array $field)
  163. {
  164. $validate = (array)($field['filter'] ?? $field['validate'] ?? null);
  165. // If value isn't required, we will return null if empty value is given.
  166. if (($value === null || $value === '') && empty($validate['required'])) {
  167. return null;
  168. }
  169. if (!isset($field['type'])) {
  170. $field['type'] = 'text';
  171. }
  172. $type = $field['filter']['type'] ?? $field['validate']['type'] ?? $field['type'];
  173. $method = 'filter' . ucfirst(str_replace('-', '_', $type));
  174. // If this is a YAML field validate/filter as such
  175. if (isset($field['yaml']) && $field['yaml'] === true) {
  176. $method = 'filterYaml';
  177. }
  178. if (!method_exists(__CLASS__, $method)) {
  179. $method = isset($field['array']) && $field['array'] === true ? 'filterArray' : 'filterText';
  180. }
  181. return self::$method($value, $validate, $field);
  182. }
  183. /**
  184. * HTML5 input: text
  185. *
  186. * @param mixed $value Value to be validated.
  187. * @param array $params Validation parameters.
  188. * @param array $field Blueprint for the field.
  189. * @return bool True if validation succeeded.
  190. */
  191. public static function typeText($value, array $params, array $field)
  192. {
  193. if (!is_string($value) && !is_numeric($value)) {
  194. return false;
  195. }
  196. $value = (string)$value;
  197. if (!empty($params['trim'])) {
  198. $value = trim($value);
  199. }
  200. $value = preg_replace("/\r\n|\r/um", "\n", $value);
  201. $len = mb_strlen($value);
  202. $min = (int)($params['min'] ?? 0);
  203. if ($min && $len < $min) {
  204. return false;
  205. }
  206. $multiline = isset($params['multiline']) && $params['multiline'];
  207. $max = (int)($params['max'] ?? ($multiline ? 65536 : 2048));
  208. if ($max && $len > $max) {
  209. return false;
  210. }
  211. $step = (int)($params['step'] ?? 0);
  212. if ($step && ($len - $min) % $step === 0) {
  213. return false;
  214. }
  215. if (!$multiline && preg_match('/\R/um', $value)) {
  216. return false;
  217. }
  218. return true;
  219. }
  220. /**
  221. * @param mixed $value
  222. * @param array $params
  223. * @param array $field
  224. * @return string
  225. */
  226. protected static function filterText($value, array $params, array $field)
  227. {
  228. if (!is_string($value) && !is_numeric($value)) {
  229. return '';
  230. }
  231. $value = (string)$value;
  232. if (!empty($params['trim'])) {
  233. $value = trim($value);
  234. }
  235. return preg_replace("/\r\n|\r/um", "\n", $value);
  236. }
  237. /**
  238. * @param mixed $value
  239. * @param array $params
  240. * @param array $field
  241. * @return string|null
  242. */
  243. protected static function filterCheckbox($value, array $params, array $field)
  244. {
  245. $value = (string)$value;
  246. $field_value = (string)($field['value'] ?? '1');
  247. return $value === $field_value ? $value : null;
  248. }
  249. /**
  250. * @param mixed $value
  251. * @param array $params
  252. * @param array $field
  253. * @return array|array[]|false|string[]
  254. */
  255. protected static function filterCommaList($value, array $params, array $field)
  256. {
  257. return is_array($value) ? $value : preg_split('/\s*,\s*/', $value, -1, PREG_SPLIT_NO_EMPTY);
  258. }
  259. /**
  260. * @param mixed $value
  261. * @param array $params
  262. * @param array $field
  263. * @return bool
  264. */
  265. public static function typeCommaList($value, array $params, array $field)
  266. {
  267. if (!isset($params['max'])) {
  268. $params['max'] = 2048;
  269. }
  270. return is_array($value) ? true : self::typeText($value, $params, $field);
  271. }
  272. /**
  273. * @param mixed $value
  274. * @param array $params
  275. * @param array $field
  276. * @return array|array[]|false|string[]
  277. */
  278. protected static function filterLines($value, array $params, array $field)
  279. {
  280. return is_array($value) ? $value : preg_split('/\s*[\r\n]+\s*/', $value, -1, PREG_SPLIT_NO_EMPTY);
  281. }
  282. /**
  283. * @param mixed $value
  284. * @param array $params
  285. * @return string
  286. */
  287. protected static function filterLower($value, array $params)
  288. {
  289. return mb_strtolower($value);
  290. }
  291. /**
  292. * @param mixed $value
  293. * @param array $params
  294. * @return string
  295. */
  296. protected static function filterUpper($value, array $params)
  297. {
  298. return mb_strtoupper($value);
  299. }
  300. /**
  301. * HTML5 input: textarea
  302. *
  303. * @param mixed $value Value to be validated.
  304. * @param array $params Validation parameters.
  305. * @param array $field Blueprint for the field.
  306. * @return bool True if validation succeeded.
  307. */
  308. public static function typeTextarea($value, array $params, array $field)
  309. {
  310. if (!isset($params['multiline'])) {
  311. $params['multiline'] = true;
  312. }
  313. return self::typeText($value, $params, $field);
  314. }
  315. /**
  316. * HTML5 input: password
  317. *
  318. * @param mixed $value Value to be validated.
  319. * @param array $params Validation parameters.
  320. * @param array $field Blueprint for the field.
  321. * @return bool True if validation succeeded.
  322. */
  323. public static function typePassword($value, array $params, array $field)
  324. {
  325. if (!isset($params['max'])) {
  326. $params['max'] = 256;
  327. }
  328. return self::typeText($value, $params, $field);
  329. }
  330. /**
  331. * HTML5 input: hidden
  332. *
  333. * @param mixed $value Value to be validated.
  334. * @param array $params Validation parameters.
  335. * @param array $field Blueprint for the field.
  336. * @return bool True if validation succeeded.
  337. */
  338. public static function typeHidden($value, array $params, array $field)
  339. {
  340. return self::typeText($value, $params, $field);
  341. }
  342. /**
  343. * Custom input: checkbox list
  344. *
  345. * @param mixed $value Value to be validated.
  346. * @param array $params Validation parameters.
  347. * @param array $field Blueprint for the field.
  348. * @return bool True if validation succeeded.
  349. */
  350. public static function typeCheckboxes($value, array $params, array $field)
  351. {
  352. // Set multiple: true so checkboxes can easily use min/max counts to control number of options required
  353. $field['multiple'] = true;
  354. return self::typeArray((array) $value, $params, $field);
  355. }
  356. /**
  357. * @param mixed $value
  358. * @param array $params
  359. * @param array $field
  360. * @return array|null
  361. */
  362. protected static function filterCheckboxes($value, array $params, array $field)
  363. {
  364. return self::filterArray($value, $params, $field);
  365. }
  366. /**
  367. * HTML5 input: checkbox
  368. *
  369. * @param mixed $value Value to be validated.
  370. * @param array $params Validation parameters.
  371. * @param array $field Blueprint for the field.
  372. * @return bool True if validation succeeded.
  373. */
  374. public static function typeCheckbox($value, array $params, array $field)
  375. {
  376. $value = (string)$value;
  377. $field_value = (string)($field['value'] ?? '1');
  378. return $value === $field_value;
  379. }
  380. /**
  381. * HTML5 input: radio
  382. *
  383. * @param mixed $value Value to be validated.
  384. * @param array $params Validation parameters.
  385. * @param array $field Blueprint for the field.
  386. * @return bool True if validation succeeded.
  387. */
  388. public static function typeRadio($value, array $params, array $field)
  389. {
  390. return self::typeArray((array) $value, $params, $field);
  391. }
  392. /**
  393. * Custom input: toggle
  394. *
  395. * @param mixed $value Value to be validated.
  396. * @param array $params Validation parameters.
  397. * @param array $field Blueprint for the field.
  398. * @return bool True if validation succeeded.
  399. */
  400. public static function typeToggle($value, array $params, array $field)
  401. {
  402. if (is_bool($value)) {
  403. $value = (int)$value;
  404. }
  405. return self::typeArray((array) $value, $params, $field);
  406. }
  407. /**
  408. * Custom input: file
  409. *
  410. * @param mixed $value Value to be validated.
  411. * @param array $params Validation parameters.
  412. * @param array $field Blueprint for the field.
  413. * @return bool True if validation succeeded.
  414. */
  415. public static function typeFile($value, array $params, array $field)
  416. {
  417. return self::typeArray((array)$value, $params, $field);
  418. }
  419. /**
  420. * @param mixed $value
  421. * @param array $params
  422. * @param array $field
  423. * @return array
  424. */
  425. protected static function filterFile($value, array $params, array $field)
  426. {
  427. return (array)$value;
  428. }
  429. /**
  430. * HTML5 input: select
  431. *
  432. * @param mixed $value Value to be validated.
  433. * @param array $params Validation parameters.
  434. * @param array $field Blueprint for the field.
  435. * @return bool True if validation succeeded.
  436. */
  437. public static function typeSelect($value, array $params, array $field)
  438. {
  439. return self::typeArray((array) $value, $params, $field);
  440. }
  441. /**
  442. * HTML5 input: number
  443. *
  444. * @param mixed $value Value to be validated.
  445. * @param array $params Validation parameters.
  446. * @param array $field Blueprint for the field.
  447. * @return bool True if validation succeeded.
  448. */
  449. public static function typeNumber($value, array $params, array $field)
  450. {
  451. if (!is_numeric($value)) {
  452. return false;
  453. }
  454. $value = (float)$value;
  455. $min = 0;
  456. if (isset($params['min'])) {
  457. $min = (float)$params['min'];
  458. if ($value < $min) {
  459. return false;
  460. }
  461. }
  462. if (isset($params['max'])) {
  463. $max = (float)$params['max'];
  464. if ($value > $max) {
  465. return false;
  466. }
  467. }
  468. if (isset($params['step'])) {
  469. $step = (float)$params['step'];
  470. // Count of how many steps we are above/below the minimum value.
  471. $pos = ($value - $min) / $step;
  472. return is_int(static::filterNumber($pos, $params, $field));
  473. }
  474. return true;
  475. }
  476. /**
  477. * @param mixed $value
  478. * @param array $params
  479. * @param array $field
  480. * @return float|int
  481. */
  482. protected static function filterNumber($value, array $params, array $field)
  483. {
  484. return (string)(int)$value !== (string)(float)$value ? (float)$value : (int)$value;
  485. }
  486. /**
  487. * @param mixed $value
  488. * @param array $params
  489. * @param array $field
  490. * @return string
  491. */
  492. protected static function filterDateTime($value, array $params, array $field)
  493. {
  494. $format = Grav::instance()['config']->get('system.pages.dateformat.default');
  495. if ($format) {
  496. $converted = new DateTime($value);
  497. return $converted->format($format);
  498. }
  499. return $value;
  500. }
  501. /**
  502. * HTML5 input: range
  503. *
  504. * @param mixed $value Value to be validated.
  505. * @param array $params Validation parameters.
  506. * @param array $field Blueprint for the field.
  507. * @return bool True if validation succeeded.
  508. */
  509. public static function typeRange($value, array $params, array $field)
  510. {
  511. return self::typeNumber($value, $params, $field);
  512. }
  513. /**
  514. * @param mixed $value
  515. * @param array $params
  516. * @param array $field
  517. * @return float|int
  518. */
  519. protected static function filterRange($value, array $params, array $field)
  520. {
  521. return self::filterNumber($value, $params, $field);
  522. }
  523. /**
  524. * HTML5 input: color
  525. *
  526. * @param mixed $value Value to be validated.
  527. * @param array $params Validation parameters.
  528. * @param array $field Blueprint for the field.
  529. * @return bool True if validation succeeded.
  530. */
  531. public static function typeColor($value, array $params, array $field)
  532. {
  533. return (bool)preg_match('/^\#[0-9a-fA-F]{3}[0-9a-fA-F]{3}?$/u', $value);
  534. }
  535. /**
  536. * HTML5 input: email
  537. *
  538. * @param mixed $value Value to be validated.
  539. * @param array $params Validation parameters.
  540. * @param array $field Blueprint for the field.
  541. * @return bool True if validation succeeded.
  542. */
  543. public static function typeEmail($value, array $params, array $field)
  544. {
  545. if (empty($value)) {
  546. return false;
  547. }
  548. if (!isset($params['max'])) {
  549. $params['max'] = 320;
  550. }
  551. $values = !is_array($value) ? explode(',', preg_replace('/\s+/', '', $value)) : $value;
  552. foreach ($values as $val) {
  553. if (!(self::typeText($val, $params, $field) && strpos($val, '@', 1))) {
  554. return false;
  555. }
  556. }
  557. return true;
  558. }
  559. /**
  560. * HTML5 input: url
  561. *
  562. * @param mixed $value Value to be validated.
  563. * @param array $params Validation parameters.
  564. * @param array $field Blueprint for the field.
  565. * @return bool True if validation succeeded.
  566. */
  567. public static function typeUrl($value, array $params, array $field)
  568. {
  569. if (!isset($params['max'])) {
  570. $params['max'] = 2048;
  571. }
  572. return self::typeText($value, $params, $field) && filter_var($value, FILTER_VALIDATE_URL);
  573. }
  574. /**
  575. * HTML5 input: datetime
  576. *
  577. * @param mixed $value Value to be validated.
  578. * @param array $params Validation parameters.
  579. * @param array $field Blueprint for the field.
  580. * @return bool True if validation succeeded.
  581. */
  582. public static function typeDatetime($value, array $params, array $field)
  583. {
  584. if ($value instanceof DateTime) {
  585. return true;
  586. }
  587. if (!is_string($value)) {
  588. return false;
  589. }
  590. if (!isset($params['format'])) {
  591. return false !== strtotime($value);
  592. }
  593. $dateFromFormat = DateTime::createFromFormat($params['format'], $value);
  594. return $dateFromFormat && $value === date($params['format'], $dateFromFormat->getTimestamp());
  595. }
  596. /**
  597. * HTML5 input: datetime-local
  598. *
  599. * @param mixed $value Value to be validated.
  600. * @param array $params Validation parameters.
  601. * @param array $field Blueprint for the field.
  602. * @return bool True if validation succeeded.
  603. */
  604. public static function typeDatetimeLocal($value, array $params, array $field)
  605. {
  606. return self::typeDatetime($value, $params, $field);
  607. }
  608. /**
  609. * HTML5 input: date
  610. *
  611. * @param mixed $value Value to be validated.
  612. * @param array $params Validation parameters.
  613. * @param array $field Blueprint for the field.
  614. * @return bool True if validation succeeded.
  615. */
  616. public static function typeDate($value, array $params, array $field)
  617. {
  618. if (!isset($params['format'])) {
  619. $params['format'] = 'Y-m-d';
  620. }
  621. return self::typeDatetime($value, $params, $field);
  622. }
  623. /**
  624. * HTML5 input: time
  625. *
  626. * @param mixed $value Value to be validated.
  627. * @param array $params Validation parameters.
  628. * @param array $field Blueprint for the field.
  629. * @return bool True if validation succeeded.
  630. */
  631. public static function typeTime($value, array $params, array $field)
  632. {
  633. if (!isset($params['format'])) {
  634. $params['format'] = 'H:i';
  635. }
  636. return self::typeDatetime($value, $params, $field);
  637. }
  638. /**
  639. * HTML5 input: month
  640. *
  641. * @param mixed $value Value to be validated.
  642. * @param array $params Validation parameters.
  643. * @param array $field Blueprint for the field.
  644. * @return bool True if validation succeeded.
  645. */
  646. public static function typeMonth($value, array $params, array $field)
  647. {
  648. if (!isset($params['format'])) {
  649. $params['format'] = 'Y-m';
  650. }
  651. return self::typeDatetime($value, $params, $field);
  652. }
  653. /**
  654. * HTML5 input: week
  655. *
  656. * @param mixed $value Value to be validated.
  657. * @param array $params Validation parameters.
  658. * @param array $field Blueprint for the field.
  659. * @return bool True if validation succeeded.
  660. */
  661. public static function typeWeek($value, array $params, array $field)
  662. {
  663. if (!isset($params['format']) && !preg_match('/^\d{4}-W\d{2}$/u', $value)) {
  664. return false;
  665. }
  666. return self::typeDatetime($value, $params, $field);
  667. }
  668. /**
  669. * Custom input: array
  670. *
  671. * @param mixed $value Value to be validated.
  672. * @param array $params Validation parameters.
  673. * @param array $field Blueprint for the field.
  674. * @return bool True if validation succeeded.
  675. */
  676. public static function typeArray($value, array $params, array $field)
  677. {
  678. if (!is_array($value)) {
  679. return false;
  680. }
  681. if (isset($field['multiple'])) {
  682. if (isset($params['min']) && count($value) < $params['min']) {
  683. return false;
  684. }
  685. if (isset($params['max']) && count($value) > $params['max']) {
  686. return false;
  687. }
  688. $min = $params['min'] ?? 0;
  689. if (isset($params['step']) && (count($value) - $min) % $params['step'] === 0) {
  690. return false;
  691. }
  692. }
  693. // If creating new values is allowed, no further checks are needed.
  694. $validateOptions = $field['validate']['options'] ?? null;
  695. if (!empty($field['selectize']['create']) || $validateOptions === 'ignore') {
  696. return true;
  697. }
  698. $options = $field['options'] ?? [];
  699. $use = $field['use'] ?? 'values';
  700. if ($validateOptions) {
  701. // Use custom options structure.
  702. foreach ($options as &$option) {
  703. $option = $option[$validateOptions] ?? null;
  704. }
  705. unset($option);
  706. $options = array_values($options);
  707. } elseif (empty($field['selectize']) || empty($field['multiple'])) {
  708. $options = array_keys($options);
  709. }
  710. if ($use === 'keys') {
  711. $value = array_keys($value);
  712. }
  713. return !($options && array_diff($value, $options));
  714. }
  715. /**
  716. * @param mixed $value
  717. * @param array $params
  718. * @param array $field
  719. * @return array|null
  720. */
  721. protected static function filterFlatten_array($value, $params, $field)
  722. {
  723. $value = static::filterArray($value, $params, $field);
  724. return is_array($value) ? Utils::arrayUnflattenDotNotation($value) : null;
  725. }
  726. /**
  727. * @param mixed $value
  728. * @param array $params
  729. * @param array $field
  730. * @return array|null
  731. */
  732. protected static function filterArray($value, $params, $field)
  733. {
  734. $values = (array) $value;
  735. $options = isset($field['options']) ? array_keys($field['options']) : [];
  736. $multi = $field['multiple'] ?? false;
  737. if (count($values) === 1 && isset($values[0]) && $values[0] === '') {
  738. return null;
  739. }
  740. if ($options) {
  741. $useKey = isset($field['use']) && $field['use'] === 'keys';
  742. foreach ($values as $key => $val) {
  743. $values[$key] = $useKey ? (bool) $val : $val;
  744. }
  745. }
  746. if ($multi) {
  747. foreach ($values as $key => $val) {
  748. if (is_array($val)) {
  749. $val = implode(',', $val);
  750. $values[$key] = array_map('trim', explode(',', $val));
  751. } else {
  752. $values[$key] = trim($val);
  753. }
  754. }
  755. }
  756. $ignoreEmpty = isset($field['ignore_empty']) && Utils::isPositive($field['ignore_empty']);
  757. $valueType = $params['value_type'] ?? null;
  758. $keyType = $params['key_type'] ?? null;
  759. if ($ignoreEmpty || $valueType || $keyType) {
  760. $values = static::arrayFilterRecurse($values, ['value_type' => $valueType, 'key_type' => $keyType, 'ignore_empty' => $ignoreEmpty]);
  761. }
  762. return $values;
  763. }
  764. /**
  765. * @param array $values
  766. * @param array $params
  767. * @return array
  768. */
  769. protected static function arrayFilterRecurse(array $values, array $params): array
  770. {
  771. foreach ($values as $key => &$val) {
  772. if ($params['key_type']) {
  773. switch ($params['key_type']) {
  774. case 'int':
  775. $result = is_int($key);
  776. break;
  777. case 'string':
  778. $result = is_string($key);
  779. break;
  780. default:
  781. $result = false;
  782. }
  783. if (!$result) {
  784. unset($values[$key]);
  785. }
  786. }
  787. if (is_array($val)) {
  788. $val = static::arrayFilterRecurse($val, $params);
  789. if ($params['ignore_empty'] && empty($val)) {
  790. unset($values[$key]);
  791. }
  792. } else {
  793. if ($params['value_type'] && $val !== '' && $val !== null) {
  794. switch ($params['value_type']) {
  795. case 'bool':
  796. if (Utils::isPositive($val)) {
  797. $val = true;
  798. } elseif (Utils::isNegative($val)) {
  799. $val = false;
  800. } else {
  801. // Ignore invalid bool values.
  802. $val = null;
  803. }
  804. break;
  805. case 'int':
  806. $val = (int)$val;
  807. break;
  808. case 'float':
  809. $val = (float)$val;
  810. break;
  811. case 'string':
  812. $val = (string)$val;
  813. break;
  814. case 'trim':
  815. $val = trim($val);
  816. break;
  817. }
  818. }
  819. if ($params['ignore_empty'] && ($val === '' || $val === null)) {
  820. unset($values[$key]);
  821. }
  822. }
  823. }
  824. return $values;
  825. }
  826. /**
  827. * @param mixed $value
  828. * @param array $params
  829. * @param array $field
  830. * @return bool
  831. */
  832. public static function typeList($value, array $params, array $field)
  833. {
  834. if (!is_array($value)) {
  835. return false;
  836. }
  837. if (isset($field['fields'])) {
  838. foreach ($value as $key => $item) {
  839. foreach ($field['fields'] as $subKey => $subField) {
  840. $subKey = trim($subKey, '.');
  841. $subValue = $item[$subKey] ?? null;
  842. self::validate($subValue, $subField);
  843. }
  844. }
  845. }
  846. return true;
  847. }
  848. /**
  849. * @param mixed $value
  850. * @param array $params
  851. * @param array $field
  852. * @return array
  853. */
  854. protected static function filterList($value, array $params, array $field)
  855. {
  856. return (array) $value;
  857. }
  858. /**
  859. * @param mixed $value
  860. * @param array $params
  861. * @return array
  862. */
  863. public static function filterYaml($value, $params)
  864. {
  865. if (!is_string($value)) {
  866. return $value;
  867. }
  868. return (array) Yaml::parse($value);
  869. }
  870. /**
  871. * Custom input: ignore (will not validate)
  872. *
  873. * @param mixed $value Value to be validated.
  874. * @param array $params Validation parameters.
  875. * @param array $field Blueprint for the field.
  876. * @return bool True if validation succeeded.
  877. */
  878. public static function typeIgnore($value, array $params, array $field)
  879. {
  880. return true;
  881. }
  882. /**
  883. * @param mixed $value
  884. * @param array $params
  885. * @param array $field
  886. * @return mixed
  887. */
  888. public static function filterIgnore($value, array $params, array $field)
  889. {
  890. return $value;
  891. }
  892. /**
  893. * Input value which can be ignored.
  894. *
  895. * @param mixed $value Value to be validated.
  896. * @param array $params Validation parameters.
  897. * @param array $field Blueprint for the field.
  898. * @return bool True if validation succeeded.
  899. */
  900. public static function typeUnset($value, array $params, array $field)
  901. {
  902. return true;
  903. }
  904. /**
  905. * @param mixed $value
  906. * @param array $params
  907. * @param array $field
  908. * @return null
  909. */
  910. public static function filterUnset($value, array $params, array $field)
  911. {
  912. return null;
  913. }
  914. // HTML5 attributes (min, max and range are handled inside the types)
  915. /**
  916. * @param mixed $value
  917. * @param bool $params
  918. * @return bool
  919. */
  920. public static function validateRequired($value, $params)
  921. {
  922. if (is_scalar($value)) {
  923. return (bool) $params !== true || $value !== '';
  924. }
  925. return (bool) $params !== true || !empty($value);
  926. }
  927. /**
  928. * @param mixed $value
  929. * @param string $params
  930. * @return bool
  931. */
  932. public static function validatePattern($value, $params)
  933. {
  934. return (bool) preg_match("`^{$params}$`u", $value);
  935. }
  936. // Internal types
  937. /**
  938. * @param mixed $value
  939. * @param mixed $params
  940. * @return bool
  941. */
  942. public static function validateAlpha($value, $params)
  943. {
  944. return ctype_alpha($value);
  945. }
  946. /**
  947. * @param mixed $value
  948. * @param mixed $params
  949. * @return bool
  950. */
  951. public static function validateAlnum($value, $params)
  952. {
  953. return ctype_alnum($value);
  954. }
  955. /**
  956. * @param mixed $value
  957. * @param mixed $params
  958. * @return bool
  959. */
  960. public static function typeBool($value, $params)
  961. {
  962. return is_bool($value) || $value == 1 || $value == 0;
  963. }
  964. /**
  965. * @param mixed $value
  966. * @param mixed $params
  967. * @return bool
  968. */
  969. public static function validateBool($value, $params)
  970. {
  971. return is_bool($value) || $value == 1 || $value == 0;
  972. }
  973. /**
  974. * @param mixed $value
  975. * @param mixed $params
  976. * @return bool
  977. */
  978. protected static function filterBool($value, $params)
  979. {
  980. return (bool) $value;
  981. }
  982. /**
  983. * @param mixed $value
  984. * @param mixed $params
  985. * @return bool
  986. */
  987. public static function validateDigit($value, $params)
  988. {
  989. return ctype_digit($value);
  990. }
  991. /**
  992. * @param mixed $value
  993. * @param mixed $params
  994. * @return bool
  995. */
  996. public static function validateFloat($value, $params)
  997. {
  998. return is_float(filter_var($value, FILTER_VALIDATE_FLOAT));
  999. }
  1000. /**
  1001. * @param mixed $value
  1002. * @param mixed $params
  1003. * @return float
  1004. */
  1005. protected static function filterFloat($value, $params)
  1006. {
  1007. return (float) $value;
  1008. }
  1009. /**
  1010. * @param mixed $value
  1011. * @param mixed $params
  1012. * @return bool
  1013. */
  1014. public static function validateHex($value, $params)
  1015. {
  1016. return ctype_xdigit($value);
  1017. }
  1018. /**
  1019. * Custom input: int
  1020. *
  1021. * @param mixed $value Value to be validated.
  1022. * @param array $params Validation parameters.
  1023. * @param array $field Blueprint for the field.
  1024. * @return bool True if validation succeeded.
  1025. */
  1026. public static function typeInt($value, array $params, array $field)
  1027. {
  1028. $params['step'] = max(1, (int)($params['step'] ?? 0));
  1029. return self::typeNumber($value, $params, $field);
  1030. }
  1031. /**
  1032. * @param mixed $value
  1033. * @param mixed $params
  1034. * @return bool
  1035. */
  1036. public static function validateInt($value, $params)
  1037. {
  1038. return is_numeric($value) && (int)$value == $value;
  1039. }
  1040. /**
  1041. * @param mixed $value
  1042. * @param mixed $params
  1043. * @return int
  1044. */
  1045. protected static function filterInt($value, $params)
  1046. {
  1047. return (int)$value;
  1048. }
  1049. /**
  1050. * @param mixed $value
  1051. * @param mixed $params
  1052. * @return bool
  1053. */
  1054. public static function validateArray($value, $params)
  1055. {
  1056. return is_array($value) || ($value instanceof ArrayAccess && $value instanceof Traversable && $value instanceof Countable);
  1057. }
  1058. /**
  1059. * @param mixed $value
  1060. * @param mixed $params
  1061. * @return array
  1062. */
  1063. public static function filterItem_List($value, $params)
  1064. {
  1065. return array_values(array_filter($value, static function ($v) {
  1066. return !empty($v);
  1067. }));
  1068. }
  1069. /**
  1070. * @param mixed $value
  1071. * @param mixed $params
  1072. * @return bool
  1073. */
  1074. public static function validateJson($value, $params)
  1075. {
  1076. return (bool) (@json_decode($value));
  1077. }
  1078. }