48 lines
1020 B
PHP
48 lines
1020 B
PHP
|
<?php
|
||
|
|
namespace Post;
|
||
|
|
|
||
|
|
class Form {
|
||
|
|
public $fields;
|
||
|
|
public $action;
|
||
|
|
|
||
|
|
public function __construct($fields) {
|
||
|
|
$this->fields=$fields;
|
||
|
|
}
|
||
|
|
|
||
|
|
public function denyCsrf() {
|
||
|
|
$this->fields["_csrf"]=new HiddenFormField();
|
||
|
|
$this->fields["_csrf"]->setValue($this->getCsrfToken());
|
||
|
|
}
|
||
|
|
|
||
|
|
public function getEnctype() {
|
||
|
|
foreach ($this->fields as $name=>$field) {
|
||
|
|
if ($field instanceof FileUpload) {
|
||
|
|
return "multipart/form-data";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return "application/x-www-form-urlencoded";
|
||
|
|
}
|
||
|
|
|
||
|
|
public function reset() {
|
||
|
|
foreach ($this->fields as $name=>$field) {
|
||
|
|
$field->reset();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public function loadFromEnv() {
|
||
|
|
foreach ($this->fields as $name=>$field) {
|
||
|
|
$field->loadFromEnv($name);
|
||
|
|
}
|
||
|
|
if (isset($this->fields['_csrf']) && $this->fields['_csrf']->getValue() !== $this->getCsrfToken()) {
|
||
|
|
throw new CsrfException();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public static function getCsrfToken() {
|
||
|
|
if (!isset($_SESSION['csrf'])) {
|
||
|
|
$_SESSION['csrf']=bin2hex(openssl_random_pseudo_bytes(16));
|
||
|
|
}
|
||
|
|
return $_SESSION['csrf'];
|
||
|
|
}
|
||
|
|
}
|