61 lines
1.9 KiB
PHP
61 lines
1.9 KiB
PHP
<?php
|
|
require_once 'libs/Controller.php';
|
|
|
|
use Respect\Validation\Validator as DataValidator;
|
|
|
|
class ValidationException extends Exception {}
|
|
|
|
class Validator {
|
|
|
|
public function validate($config) {
|
|
$this->validatePermissions($config['permission']);
|
|
$this->validateAllRequestData($config['requestData']);
|
|
}
|
|
|
|
private function validatePermissions($permission) {
|
|
$permissions = [
|
|
'any' => true,
|
|
'user' => $this->isUserLogged(),
|
|
'staff' => $this->isStaffLogged(),
|
|
'admin' => $this->isAdminLogged()
|
|
];
|
|
|
|
if (!$permissions[$permission]) {
|
|
throw new ValidationException(ERRORS::NO_PERMISSION);
|
|
}
|
|
}
|
|
|
|
private function validateAllRequestData($requestDataValidations) {
|
|
foreach ($requestDataValidations as $requestDataKey => $requestDataValidationConfig) {
|
|
$requestDataValue = Controller::request($requestDataKey);
|
|
$requestDataValidator = $requestDataValidationConfig['validation'];
|
|
$requestDataValidationErrorMessage = $requestDataValidationConfig['error'];
|
|
|
|
$this->validateData($requestDataValue, $requestDataValidator, $requestDataValidationErrorMessage);
|
|
}
|
|
}
|
|
|
|
private function validateData($value, DataValidator $dataValidator, $error) {
|
|
if (!$dataValidator->validate($value)) {
|
|
throw new ValidationException($error);
|
|
}
|
|
}
|
|
|
|
private function isUserLogged() {
|
|
$session = Session::getInstance();
|
|
|
|
return $session->checkAuthentication(array(
|
|
'userId' => Controller::request('csrf_userid'),
|
|
'token' => Controller::request('csrf_token')
|
|
));
|
|
}
|
|
|
|
private function isStaffLogged() {
|
|
return $this->isUserLogged() && (Controller::getLoggedUser()->admin === 1);
|
|
}
|
|
|
|
private function isAdminLogged() {
|
|
return $this->isUserLogged() && (Controller::getLoggedUser()->admin === 2);
|
|
}
|
|
|
|
} |