IDS PHP Libraries

InputProcessor
in package
uses Loggable

Table of Contents

Properties

$invalidParameterScore  : mixed
$logger  : object|null
$securityMonitor  : SecurityMonitor|null
$shopEnv  : ShopEnv|null
$sqlInjectionScore  : mixed
$tooManyParametersScore  : mixed
$unknownParameterScore  : mixed

Methods

__construct()  : mixed
checkForSqlInjections()  : bool
Checks for possible SQL injection attempts in a given string.
checkInputs()  : bool
Checks forSQL injection attempts
identifyFilterType()  : string
log()  : void
validateInputs()  : array<string|int, mixed>
Validates GET & POST Parameters
applyInputFilters()  : string|array<string|int, mixed>|bool
processInput()  : array<string|int, mixed>|string|bool
processInputs()  : array<string|int, mixed>

Properties

$logger

private object|null $logger = null

$tooManyParametersScore

private mixed $tooManyParametersScore = 0

Methods

checkForSqlInjections()

Checks for possible SQL injection attempts in a given string.

public checkForSqlInjections(string $input) : bool
Parameters
$input : string

The input string to check for SQL injection patterns.

Return values
bool

Returns true if potential SQL injection patterns are found, false otherwise.

checkInputs()

Checks forSQL injection attempts

public checkInputs([array<string|int, mixed> $inputGet = [] ][, array<string|int, mixed> $inputPost = [] ]) : bool
Parameters
$inputGet : array<string|int, mixed> = []

GET parameters to check

$inputPost : array<string|int, mixed> = []

POST parameters to check

Return values
bool

Returns true if any potential SQL injection is found -> otherwise false

identifyFilterType()

public identifyFilterType(array<string|int, mixed>|string|int $filterConfig) : string
Parameters
$filterConfig : array<string|int, mixed>|string|int
Return values
string

log()

public log([mixed $message = '' ][, string $level = 'info' ][, mixed $backtrace = null ][, int $spacing = 0 ]) : void
Parameters
$message : mixed = ''
$level : string = 'info'
$backtrace : mixed = null
$spacing : int = 0

validateInputs()

Validates GET & POST Parameters

public validateInputs(array<string|int, mixed> $paramWhitelist[, array<string|int, mixed> $inputGet = [] ][, array<string|int, mixed> $inputPost = [] ]) : array<string|int, mixed>
Parameters
$paramWhitelist : array<string|int, mixed>

The GET & POST Parameters that are allowed and which filters are used for validating/sanitizing.

$inputGet : array<string|int, mixed> = []

$_GET Array

$inputPost : array<string|int, mixed> = []

$_POST Array

Tags
author

lman

Return values
array<string|int, mixed>

Gives back filtered and validated GET & POST Inputs in single Array Only gives back the parameters provided.

applyInputFilters()

private applyInputFilters(string $filterType, string|array<string|int, mixed> $inputValue, array<string|int, mixed>|int $filterConfig) : string|array<string|int, mixed>|bool
Parameters
$filterType : string
$inputValue : string|array<string|int, mixed>
$filterConfig : array<string|int, mixed>|int
Return values
string|array<string|int, mixed>|bool

processInput()

private processInput(string $inputKey, string|array<string|int, mixed> $inputValue, string|array<string|int, mixed> $paramWhitelist, string $paramType) : array<string|int, mixed>|string|bool
Parameters
$inputKey : string
$inputValue : string|array<string|int, mixed>
$paramWhitelist : string|array<string|int, mixed>
$paramType : string
Return values
array<string|int, mixed>|string|bool

processInputs()

private processInputs(array<string|int, mixed> $inputs, array<string|int, mixed> $paramWhitelist, string $paramType) : array<string|int, mixed>
Parameters
$inputs : array<string|int, mixed>
$paramWhitelist : array<string|int, mixed>
$paramType : string
Return values
array<string|int, mixed>

        
On this page

Search results