Injection.php

Go to the documentation of this file.

<?php
 
namespace Rsi\Fred\Security\Check;
 
class Injection extends \Rsi\Fred\Security\Check{
 
  public $chars = ['\'','"','<','>'];
 
  protected function arrayKeys($array){
    $keys = null;
    if(is_array($array)) foreach($array as $key => $value) $keys .= $key . $this->arrayKeys($value);
    return $keys;
  }
 
  public function check($expected = false){
    $query =
      urldecode($this->component('router')->pathInfo . ($_SERVER['QUERY_STRING'] ?? null)) .
      $this->arrayKeys($_POST);
    foreach($this->chars as $char) if(strpos($query,$char) !== false) return false;
    return true;
  }
 
}