Injection.php

Go to the documentation of this file.

<?php

namespace Rsi\Fred\Security\Check;

class Injection extends \Rsi\Fred\Security\Check{

  public $chars = ['\'','"','<','>'];

  protected function arrayKeys($array){
    $keys = null;
    if(is_array($array)) foreach($array as $key => $value) $keys .= $key . $this->arrayKeys($value);
    return $keys;
  }

  public function check($expected = false){
    $query =
      urldecode($this->component('router')->pathInfo . ($_SERVER['QUERY_STRING'] ?? null)) .
      $this->arrayKeys($_POST);
    foreach($this->chars as $char) if(strpos($query,$char) !== false) return false;
    return true;
  }

}