InputProcessor
in package
uses
Loggable
Table of Contents
Properties
- $invalidParameterScore : mixed
- $logger : object|null
- $securityMonitor : SecurityMonitor|null
- $shopEnv : ShopEnv|null
- $sqlInjectionScore : mixed
- $tooManyParametersScore : mixed
- $unknownParameterScore : mixed
Methods
- __construct() : mixed
- checkForSqlInjections() : bool
- Checks for possible SQL injection attempts in a given string.
- checkInputs() : bool
- Checks forSQL injection attempts
- identifyFilterType() : string
- log() : void
- validateInputs() : array<string|int, mixed>
- Validates GET & POST Parameters
- applyInputFilters() : string|array<string|int, mixed>|bool
- processInput() : array<string|int, mixed>|string|bool
- processInputs() : array<string|int, mixed>
Properties
$invalidParameterScore
private
mixed
$invalidParameterScore
= 0
$logger
private
object|null
$logger
= null
$securityMonitor
private
SecurityMonitor|null
$securityMonitor
= null
$shopEnv
private
ShopEnv|null
$shopEnv
= null
$sqlInjectionScore
private
mixed
$sqlInjectionScore
= 10
$tooManyParametersScore
private
mixed
$tooManyParametersScore
= 0
$unknownParameterScore
private
mixed
$unknownParameterScore
= 0
Methods
__construct()
public
__construct([ShopEnv|null $shopEnv = null ][, SecurityMonitor|null $securityMonitor = null ]) : mixed
Parameters
- $shopEnv : ShopEnv|null = null
- $securityMonitor : SecurityMonitor|null = null
checkForSqlInjections()
Checks for possible SQL injection attempts in a given string.
public
checkForSqlInjections(string $input) : bool
Parameters
- $input : string
-
The input string to check for SQL injection patterns.
Return values
bool —Returns true if potential SQL injection patterns are found, false otherwise.
checkInputs()
Checks forSQL injection attempts
public
checkInputs([array<string|int, mixed> $inputGet = [] ][, array<string|int, mixed> $inputPost = [] ]) : bool
Parameters
- $inputGet : array<string|int, mixed> = []
-
GET parameters to check
- $inputPost : array<string|int, mixed> = []
-
POST parameters to check
Return values
bool —Returns true if any potential SQL injection is found -> otherwise false
identifyFilterType()
public
identifyFilterType(array<string|int, mixed>|string|int $filterConfig) : string
Parameters
- $filterConfig : array<string|int, mixed>|string|int
Return values
stringlog()
public
log([mixed $message = '' ][, string $level = 'info' ][, mixed $backtrace = null ][, int $spacing = 0 ]) : void
Parameters
- $message : mixed = ''
- $level : string = 'info'
- $backtrace : mixed = null
- $spacing : int = 0
validateInputs()
Validates GET & POST Parameters
public
validateInputs(array<string|int, mixed> $paramWhitelist[, array<string|int, mixed> $inputGet = [] ][, array<string|int, mixed> $inputPost = [] ]) : array<string|int, mixed>
Parameters
- $paramWhitelist : array<string|int, mixed>
-
The GET & POST Parameters that are allowed and which filters are used for validating/sanitizing.
- $inputGet : array<string|int, mixed> = []
-
$_GET Array
- $inputPost : array<string|int, mixed> = []
-
$_POST Array
Tags
Return values
array<string|int, mixed> —Gives back filtered and validated GET & POST Inputs in single Array Only gives back the parameters provided.
applyInputFilters()
private
applyInputFilters(string $filterType, string|array<string|int, mixed> $inputValue, array<string|int, mixed>|int $filterConfig) : string|array<string|int, mixed>|bool
Parameters
- $filterType : string
- $inputValue : string|array<string|int, mixed>
- $filterConfig : array<string|int, mixed>|int
Return values
string|array<string|int, mixed>|boolprocessInput()
private
processInput(string $inputKey, string|array<string|int, mixed> $inputValue, string|array<string|int, mixed> $paramWhitelist, string $paramType) : array<string|int, mixed>|string|bool
Parameters
- $inputKey : string
- $inputValue : string|array<string|int, mixed>
- $paramWhitelist : string|array<string|int, mixed>
- $paramType : string
Return values
array<string|int, mixed>|string|boolprocessInputs()
private
processInputs(array<string|int, mixed> $inputs, array<string|int, mixed> $paramWhitelist, string $paramType) : array<string|int, mixed>
Parameters
- $inputs : array<string|int, mixed>
- $paramWhitelist : array<string|int, mixed>
- $paramType : string