From e70e46f99fb06769e10e390e8f41073491acafc6 Mon Sep 17 00:00:00 2001
From: "anthony.richard" <anthony.richard@etu.uca.fr>
Date: Mon, 13 Nov 2023 14:08:57 +0100
Subject: [PATCH] =?UTF-8?q?fonctions=20de=20validation=20pour=20la=20plupa?=
 =?UTF-8?q?rt=20des=20entr=C3=A9es=20+=20pour=20l'action?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Project/php/config/Validation.php | 34 +++++++++++++++++++++++--------
 1 file changed, 26 insertions(+), 8 deletions(-)

diff --git a/Project/php/config/Validation.php b/Project/php/config/Validation.php
index ba926ca..687ffc0 100755
--- a/Project/php/config/Validation.php
+++ b/Project/php/config/Validation.php
@@ -1,17 +1,35 @@
 <?php
 namespace config;
 
+use Exception;
+
 class Validation
 {
-    public static function val_action($action)
-    {
-        if (!isset($action)) {
+    public static function val_action($action): string {
+        $safeAction = htmlspecialchars($action, ENT_QUOTES);
+        if (!isset($action))
             throw new \Exception('pas d\'action');
-            //on pourrait aussi utiliser
-            //$action = $_GET['action'] ?? 'no';
-            // This is equivalent to:
-            //$action =  if (isset($_GET['action'])) $action=$_GET['action']  else $action='no';
-        }
+        else if ($safeAction != $action)
+            throw new \Exception("tentative d'injection sql détectée");
+        else return $safeAction;
+    }
+
+    public static function filter_int($value): int {
+        if ($value == null || !filter_var($value, FILTER_VALIDATE_INT) || $value < 0)
+            throw new Exception("invalid field");
+        return $value;
+    }
+
+    public static function filter_str_simple($value): string {
+        if ($value == null || !preg_match('/^[A-Za-z0-9\s\-]+$/', $value))
+            throw new Exception("invalid field");
+        return $value;
+    }
+
+    public static function filter_str_nospecialchar($value): string {
+        if ($value == null || !preg_match('/^[A-Za-z\s\-]+$/', $value))
+            throw new Exception("invalid field");
+        return $value;
     }
 
     public static function val_form(string &$nom, string &$age, &$dVueEreur)