audit.php 4.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177
  1. <?php
  2. /*
  3. Copyright (c) 2009-2014 F3::Factory/Bong Cosca, All rights reserved.
  4. This file is part of the Fat-Free Framework (http://fatfree.sf.net).
  5. THE SOFTWARE AND DOCUMENTATION ARE PROVIDED "AS IS" WITHOUT WARRANTY OF
  6. ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE
  7. IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR
  8. PURPOSE.
  9. Please see the license.txt file for more information.
  10. */
  11. //! Data validator
  12. class Audit extends Prefab {
  13. //@{ User agents
  14. const
  15. UA_Mobile='android|blackberry|iphone|ipod|palm|windows\s+ce',
  16. UA_Desktop='bsd|linux|os\s+[x9]|solaris|windows',
  17. UA_Bot='bot|crawl|slurp|spider';
  18. //@}
  19. /**
  20. * Return TRUE if string is a valid URL
  21. * @return bool
  22. * @param $str string
  23. **/
  24. function url($str) {
  25. return is_string(filter_var($str,FILTER_VALIDATE_URL));
  26. }
  27. /**
  28. * Return TRUE if string is a valid e-mail address;
  29. * Check DNS MX records if specified
  30. * @return bool
  31. * @param $str string
  32. * @param $mx boolean
  33. **/
  34. function email($str,$mx=TRUE) {
  35. $hosts=array();
  36. return is_string(filter_var($str,FILTER_VALIDATE_EMAIL)) &&
  37. (!$mx || getmxrr(substr($str,strrpos($str,'@')+1),$hosts));
  38. }
  39. /**
  40. * Return TRUE if string is a valid IPV4 address
  41. * @return bool
  42. * @param $addr string
  43. **/
  44. function ipv4($addr) {
  45. return (bool)filter_var($addr,FILTER_VALIDATE_IP,FILTER_FLAG_IPV4);
  46. }
  47. /**
  48. * Return TRUE if string is a valid IPV6 address
  49. * @return bool
  50. * @param $addr string
  51. **/
  52. function ipv6($addr) {
  53. return (bool)filter_var($addr,FILTER_VALIDATE_IP,FILTER_FLAG_IPV6);
  54. }
  55. /**
  56. * Return TRUE if IP address is within private range
  57. * @return bool
  58. * @param $addr string
  59. **/
  60. function isprivate($addr) {
  61. return !(bool)filter_var($addr,FILTER_VALIDATE_IP,
  62. FILTER_FLAG_IPV4|FILTER_FLAG_IPV6|FILTER_FLAG_NO_PRIV_RANGE);
  63. }
  64. /**
  65. * Return TRUE if IP address is within reserved range
  66. * @return bool
  67. * @param $addr string
  68. **/
  69. function isreserved($addr) {
  70. return !(bool)filter_var($addr,FILTER_VALIDATE_IP,
  71. FILTER_FLAG_IPV4|FILTER_FLAG_IPV6|FILTER_FLAG_NO_RES_RANGE);
  72. }
  73. /**
  74. * Return TRUE if IP address is neither private nor reserved
  75. * @return bool
  76. * @param $addr string
  77. **/
  78. function ispublic($addr) {
  79. return (bool)filter_var($addr,FILTER_VALIDATE_IP,
  80. FILTER_FLAG_IPV4|FILTER_FLAG_IPV6|
  81. FILTER_FLAG_NO_PRIV_RANGE|FILTER_FLAG_NO_RES_RANGE);
  82. }
  83. /**
  84. * Return TRUE if user agent is a desktop browser
  85. * @return bool
  86. **/
  87. function isdesktop() {
  88. $agent=Base::instance()->get('AGENT');
  89. return (bool)preg_match('/('.self::UA_Desktop.')/i',$agent) &&
  90. !$this->ismobile();
  91. }
  92. /**
  93. * Return TRUE if user agent is a mobile device
  94. * @return bool
  95. **/
  96. function ismobile() {
  97. $agent=Base::instance()->get('AGENT');
  98. return (bool)preg_match('/('.self::UA_Mobile.')/i',$agent);
  99. }
  100. /**
  101. * Return TRUE if user agent is a Web bot
  102. * @return bool
  103. **/
  104. function isbot() {
  105. $agent=Base::instance()->get('AGENT');
  106. return (bool)preg_match('/('.self::UA_Bot.')/i',$agent);
  107. }
  108. /**
  109. * Return TRUE if specified ID has a valid (Luhn) Mod-10 check digit
  110. * @return bool
  111. * @param $id string
  112. **/
  113. function mod10($id) {
  114. if (!ctype_digit($id))
  115. return FALSE;
  116. $id=strrev($id);
  117. $sum=0;
  118. for ($i=0,$l=strlen($id);$i<$l;$i++)
  119. $sum+=$id[$i]+$i%2*(($id[$i]>4)*-4+$id[$i]%5);
  120. return !($sum%10);
  121. }
  122. /**
  123. * Return credit card type if number is valid
  124. * @return string|FALSE
  125. * @param $id string
  126. **/
  127. function card($id) {
  128. $id=preg_replace('/[^\d]/','',$id);
  129. if ($this->mod10($id)) {
  130. if (preg_match('/^3[47][0-9]{13}$/',$id))
  131. return 'American Express';
  132. if (preg_match('/^3(?:0[0-5]|[68][0-9])[0-9]{11}$/',$id))
  133. return 'Diners Club';
  134. if (preg_match('/^6(?:011|5[0-9][0-9])[0-9]{12}$/',$id))
  135. return 'Discover';
  136. if (preg_match('/^(?:2131|1800|35\d{3})\d{11}$/',$id))
  137. return 'JCB';
  138. if (preg_match('/^5[1-5][0-9]{14}$/',$id))
  139. return 'MasterCard';
  140. if (preg_match('/^4[0-9]{12}(?:[0-9]{3})?$/',$id))
  141. return 'Visa';
  142. }
  143. return FALSE;
  144. }
  145. /**
  146. * Return entropy estimate of a password (NIST 800-63)
  147. * @return int|float
  148. * @param $str string
  149. **/
  150. function entropy($str) {
  151. $len=strlen($str);
  152. return 4*min($len,1)+($len>1?(2*(min($len,8)-1)):0)+
  153. ($len>8?(1.5*(min($len,20)-8)):0)+($len>20?($len-20):0)+
  154. 6*(bool)(preg_match(
  155. '/[A-Z].*?[0-9[:punct:]]|[0-9[:punct:]].*?[A-Z]/',$str));
  156. }
  157. }