113 lines
2.4 KiB
PHP
113 lines
2.4 KiB
PHP
<?php
|
|
|
|
namespace SilverStripe\Control\Middleware\ConfirmationMiddleware;
|
|
|
|
use SilverStripe\Control\HTTPRequest;
|
|
use SilverStripe\Security\Confirmation;
|
|
|
|
/**
|
|
* A rule to match a GET parameter within HTTPRequest
|
|
*/
|
|
class GetParameter implements Rule, Bypass
|
|
{
|
|
/**
|
|
* Parameter name
|
|
*
|
|
* @var string
|
|
*/
|
|
private $name;
|
|
|
|
/**
|
|
* Initialize the rule with a parameter name
|
|
*
|
|
* @param string $name
|
|
*/
|
|
public function __construct($name)
|
|
{
|
|
$this->setName($name);
|
|
}
|
|
|
|
/**
|
|
* Return the parameter name
|
|
*
|
|
* @return string
|
|
*/
|
|
public function getName()
|
|
{
|
|
return $this->name;
|
|
}
|
|
|
|
/**
|
|
* Set the parameter name
|
|
*
|
|
* @param string $name
|
|
*
|
|
* @return $this
|
|
*/
|
|
public function setName($name)
|
|
{
|
|
$this->name = $name;
|
|
return $this;
|
|
}
|
|
|
|
/**
|
|
* Generates the confirmation item
|
|
*
|
|
* @param string $token
|
|
*
|
|
* @return Confirmation\Item
|
|
*/
|
|
protected function buildConfirmationItem($token, $value)
|
|
{
|
|
return new Confirmation\Item(
|
|
$token,
|
|
_t(__CLASS__ . '.CONFIRMATION_NAME', '"{key}" GET parameter', ['key' => $this->name]),
|
|
sprintf('%s = "%s"', $this->name, $value)
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Generates the unique token depending on the path and the parameter
|
|
*
|
|
* @param string $path URL path
|
|
* @param string $param The parameter value
|
|
*
|
|
* @return string
|
|
*/
|
|
protected function generateToken($path, $value)
|
|
{
|
|
return sprintf('%s::%s?%s=%s', static::class, $path, $this->name, $value);
|
|
}
|
|
|
|
/**
|
|
* Check request contains the GET parameter
|
|
*
|
|
* @param HTTPRequest $request
|
|
*
|
|
* @return bool
|
|
*/
|
|
protected function checkRequestHasParameter(HTTPRequest $request)
|
|
{
|
|
return array_key_exists($this->name, $request->getVars());
|
|
}
|
|
|
|
public function checkRequestForBypass(HTTPRequest $request)
|
|
{
|
|
return $this->checkRequestHasParameter($request);
|
|
}
|
|
|
|
public function getRequestConfirmationItem(HTTPRequest $request)
|
|
{
|
|
if (!$this->checkRequestHasParameter($request)) {
|
|
return null;
|
|
}
|
|
|
|
$path = $request->getURL();
|
|
$value = $request->getVar($this->name);
|
|
|
|
$token = $this->generateToken($path, $value);
|
|
|
|
return $this->buildConfirmationItem($token, $value);
|
|
}
|
|
}
|