installation/src/Form/Rule/UsernameRule.php - 5.4-dev - githubmirror/joomla-cms

installation/src/Form/Rule/UsernameRule.php

56 строк2 KB

Christian Heel

[4.4] use _JEXEC for restricted access (#44193)

20 окт 2024, 15:22

20 окт 2024, 15:2213c6a90

<?php

/**
 * @package    Joomla.Installation
 *
 * @copyright  (C) 2005 Open Source Matters, Inc. <https://www.joomla.org>
 * @license    GNU General Public License version 2 or later; see LICENSE.txt
 */

namespace Joomla\CMS\Installation\Form\Rule;

use Joomla\CMS\Filter\InputFilter;
use Joomla\CMS\Form\Form;
use Joomla\CMS\Form\FormRule;
use Joomla\Registry\Registry;

// phpcs:disable PSR1.Files.SideEffects
\defined('_JEXEC') or die;
// phpcs:enable PSR1.Files.SideEffects

/**
 * Form Rule class for the username.
 *
 * @since  3.9.4
 */
class UsernameRule extends FormRule
{
    /**
     * Method to test a username
     *
     * @param   \SimpleXMLElement  $element  The SimpleXMLElement object representing the <field /> tag for the form field object.
     * @param   mixed              $value    The form field value to validate.
     * @param   ?string            $group    The field name group control value. This acts as an array container for the field.
     *                                       For example if the field has name="foo" and the group value is set to "bar" then the
     *                                       full field name would end up being "bar[foo]".
     * @param   ?Registry          $input    An optional Registry object with the entire data set to validate against the entire form.
     * @param   ?Form              $form     The form object for which the field is being tested.
     *
     * @return  boolean  True if the value is valid, false otherwise.
     */
    public function test(\SimpleXMLElement $element, $value, $group = null, ?Registry $input = null, ?Form $form = null)
    {
        $filterInput = InputFilter::getInstance();

        if (
            preg_match('#[<>"\'%;()&\\\\]|\\.\\./#', $value)
            || \strlen(mb_convert_encoding($value, 'ISO-8859-1', 'UTF-8')) < 2
            || $filterInput->clean($value, 'TRIM') !== $value
            || \strlen(mb_convert_encoding($value, 'ISO-8859-1', 'UTF-8')) > $element['size']
        ) {
            return false;
        }

        return true;
    }
}