From f27cca08ff786ceff1870147f6d6bad14d71117f Mon Sep 17 00:00:00 2001 From: polo Date: Fri, 23 Oct 2026 00:47:32 +0200 Subject: =?UTF-8?q?dossiers=20avec=20majuscule,=20namespace=20pour=20toute?= =?UTF-8?q?s=20les=20classes,=20autoload=20psr-4,=20UserDataService::creat?= =?UTF-8?q?eZip=20d=C3=A9plac=C3=A9=20dans=20Backup?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/Service/FormValidation.php | 216 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 216 insertions(+) create mode 100644 src/Service/FormValidation.php (limited to 'src/Service/FormValidation.php') diff --git a/src/Service/FormValidation.php b/src/Service/FormValidation.php new file mode 100644 index 0000000..d91aa12 --- /dev/null +++ b/src/Service/FormValidation.php @@ -0,0 +1,216 @@ + 'emailSendStrategy', + self::EmailParam => 'emailParamStrategy', + self::CreateUser => 'createUserStrategy', + self::Connection => 'connectionStrategy', + self::UsernameUpdate => 'usernameUpdateStrategy', + self::PasswordUpdate => 'passwordUpdateStrategy' + }; + } +} + +class FormValidation +{ + private array $data; // tableau associatif (probablement $_POST) + private \Closure $callStrategy; + private ?string $error; + + public function __construct(array $data, ValidationStrategy $strategy){ + $this->data = $data; + $method = $strategy->method(); + $this->callStrategy = fn() => $this->$method(); + } + + public function validate(): bool + { + $this->error = ($this->callStrategy)(); // appel de la callback + return empty($this->errors); + } + + public function getError(): string + { + return $this->error; + } + + public function getField(string $field): string + { + return $this->data[$field] ?? ''; + } + + // méthodes de validation + private function captchaValidate(bool $clean_session = true): ?string + { + $captcha_solution = (isset($_SESSION['captcha']) && is_int($_SESSION['captcha'])) ? $_SESSION['captcha'] : 0; + $captcha_try = isset($this->data['captcha']) ? Captcha::controlInput($this->data['captcha']) : 0; + if($clean_session){ + unset($_SESSION['captcha']); + } + + if($captcha_try == 0){ + return 'error_non_valid_captcha'; + } + elseif($captcha_solution == 0){ // ne peut pas arriver, si? + return 'captcha_server_error'; + } + elseif($captcha_try !== $captcha_solution){ + return 'bad_solution_captcha'; + } + return null; + } + + // erreurs à la création des mots de passe + static private function removeSpacesTabsCRLF(string $chaine): string + { + $cibles = [' ', "\t", "\n", "\r"]; // doubles quotes !! + return(str_replace($cibles, '', $chaine)); + } + + + // stratégies + private function emailSendStrategy(): ?string + { + if($error = $this->captchaValidate(false)){ + return $error; + } + + if(empty($this->data['name']) || empty($this->data['email']) || empty($this->data['message']) + || !isset($this->data['hidden']) || !empty($this->data['hidden'])){ + return 'missing_fields'; + } + + elseif(!filter_var(trim($this->data['email']), FILTER_VALIDATE_EMAIL)){ + return 'bad_email_address'; + } + + $this->data['name'] = htmlspecialchars(trim($this->data['name'])); + $this->data['email'] = htmlspecialchars(trim($this->data['email'])); + $this->data['message'] = htmlspecialchars($this->data['message']); + + return null; + } + private function emailParamStrategy(): ?string + { + if(empty($this->data['id']) || empty($this->data['what_param']) || empty($this->data['value']) + || !isset($this->data['hidden']) || !empty($this->data['hidden'])){ + return 'missing_fields'; + } + + if(!in_array($this->data['what_param'], ['smtp_host', 'smtp_secure', 'smtp_username', 'smtp_password', 'email_dest'])){ + return 'unknown_parameter'; + } + elseif($this->data['what_param'] === 'smtp_username' || $this->data['what_param'] === 'email_dest'){ + if(!filter_var($this->data['value'], FILTER_VALIDATE_EMAIL)){ + return 'invalide_email_address'; + } + } + return null; + } + private function createUserStrategy(): ?string + { + if($error = $this->captchaValidate()){ + return $error; + } + + // test mauvais paramètres + if(empty($this->data['login']) || empty($this->data['password']) || empty($this->data['password_confirmation']) + || !isset($this->data['create_user_hidden']) || !empty($this->data['create_user_hidden'])) + { + return 'bad_login_or_password'; + } + + if($this->data['password'] !== $this->data['password_confirmation']){ + return 'different_passwords'; + } + + if($this->data['login'] !== self::removeSpacesTabsCRLF(htmlspecialchars($this->data['login'])) + || $this->data['password'] !== self::removeSpacesTabsCRLF(htmlspecialchars($this->data['password']))){ + return 'forbidden_characters'; + } + return null; + } + private function connectionStrategy(): ?string + { + if($error = $this->captchaValidate()){ + return $error; + } + + if(empty($this->data['login']) || empty($this->data['password']) + || !isset($this->data['connection_hidden']) || !empty($this->data['connection_hidden'])) + { + return 'bad_login_or_password'; + } + return null; + } + private function usernameUpdateStrategy(): ?string + { + if($error = $this->captchaValidate()){ + return $error; + } + + if(empty($this->data['login']) || empty($this->data['password']) || empty($this->data['new_login']) + || !isset($this->data['modify_username_hidden']) || !empty($this->data['modify_username_hidden'])) + { + return 'bad_login_or_password'; + } + + $new_login = self::removeSpacesTabsCRLF(htmlspecialchars($this->data['new_login'])); + if($new_login !== $this->data['new_login']){ + return 'forbidden_characters'; + } + + if($this->data['login'] !== $_SESSION['user']['username']){ + return 'bad_login_or_password'; + } + if($this->data['login'] === $new_login){ + return 'same_username_as_before'; + } + return null; + } + private function passwordUpdateStrategy(): ?string + { + if($error = $this->captchaValidate()){ + return $error; + } + + if(empty($this->data['login']) || empty($this->data['password']) || empty($this->data['new_password']) + || !isset($this->data['modify_password_hidden']) || !empty($this->data['modify_password_hidden'])) + { + return 'bad_login_or_password'; + } + + $new_password = self::removeSpacesTabsCRLF(htmlspecialchars($this->data['new_password'])); + if($new_password !== $this->data['new_password']){ + return 'forbidden_characters'; + } + + if($this->data['login'] !== $_SESSION['user']['username']){ + return 'bad_login_or_password'; + } + if($this->data['password'] === $new_password){ + return 'same_password_as_before'; + } + return null; + } +} \ No newline at end of file -- cgit v1.2.3