tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added control for ascii characters

This commit is contained in:
José González 2022-03-24 13:53:22 +01:00
parent a90e31be4f
commit 61713b453a
2 changed files with 45 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pandora_console/include/class/CredentialStore.class.php
View File

@ -623,11 +623,13 @@ class CredentialStore extends Wizard
$error = __('You must select a group where store this key!'); $error = __('You must select a group where store this key!');
} else if (empty($product) === true) { } else if (empty($product) === true) {
$error = __('You must specify a product type'); $error = __('You must specify a product type');
} else if (empty($username) === true && (empty($password) === true)) { } else if (empty($username) === true || (empty($password) === true)) {
$error = __('You must specify a username and/or password'); $error = __('You must specify a username and/or password');
} else if (evaluate_ascii_valid_string(io_safe_output($identifier)) === false) {
$error = __('Identifier with forbidden characters. Check the documentation.');
} }
if (isset($error)) { if (isset($error) === true) {
$this->ajaxMsg('error', $error); $this->ajaxMsg('error', $error);
exit; exit;
} }
@ -1277,7 +1279,7 @@ class CredentialStore extends Wizard
}); });
} }
/** /**
* Delete selected key * Delete selected key
*/ */

40
pandora_console/include/graphs/functions_utils.php
View File

@ -328,3 +328,43 @@ function convert_array_multi($array, $glue)
$result = substr($result, 0, (0 - strlen($glue))); $result = substr($result, 0, (0 - strlen($glue)));
return $result; return $result;
} }
/**
* Evaluate if the chars of coming variable has in the range stablished.
*
* @param string $string String for be evaluated.
* @param array $ranges Ranges for valid chars. Min: [ x <= Y ] Max: [ Y > x ].
* Example of valid ranges: [ '32:126', '150:188' ].
*
* @return boolean.
*/
function evaluate_ascii_valid_string(string $string='', array $ranges=[ '33:38', '40:126' ])
{
if (empty($string) === true) {
return false;
}
$countChars = strlen($string);
// Let's explore all the chars.
for ($i = 0; $i < $countChars; $i++) {
// Get ascii number of the char.
$asciiNumber = ord($string[$i]);
// Check in all ranges.
$rangeValidation = false;
foreach ($ranges as $range) {
list($minRangeValue, $maxRangeValue) = explode(':', $range, 2);
// Check if is in range.
if ($asciiNumber > (int) $minRangeValue && $asciiNumber < (int) $maxRangeValue) {
$rangeValidation = true;
}
}
// None of the ranges was validated.
if ($rangeValidation === false) {
return false;
}
}
return true;
}