diff options
Diffstat (limited to 'app')
| -rw-r--r-- | app/Http/Controllers/GuestbookController.php | 14 | ||||
| -rw-r--r-- | app/Http/Kernel.php | 1 | ||||
| -rw-r--r-- | app/Http/Middleware/GuestbookValidate.php | 37 |
3 files changed, 38 insertions, 14 deletions
diff --git a/app/Http/Controllers/GuestbookController.php b/app/Http/Controllers/GuestbookController.php index df726ef..3fd179b 100644 --- a/app/Http/Controllers/GuestbookController.php +++ b/app/Http/Controllers/GuestbookController.php @@ -27,21 +27,7 @@ class GuestbookController extends Controller { * @throws ValidationException */ public function addEntry(Request $request): RedirectResponse { - $this->validate($request, [ - 'name' => 'required', - 'message' => 'required' - ]); - - GuestbookEntry::insertGuestbookEntry($request); return back()->with('success', 'Entry submitted successfully!'); } - - public function banIP(string $addr) { - // TODO: Add banning system - // $matching_bans = DB::select('SELECT reason FROM guestbook__bans WHERE ip_address = ?', array($request->ip())); - // if (!empty($matching_bans)) { - // return view('errors.guestbook-ipban')->with('reason', $matching_bans[0]->reason); - // } - } } diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php index 4eab7b8..d6127bc 100644 --- a/app/Http/Kernel.php +++ b/app/Http/Kernel.php @@ -47,6 +47,7 @@ class Kernel extends HttpKernel protected $routeMiddleware = [ 'rate_limit' => \App\Http\Middleware\RateLimiter::class, + 'validator' => \App\Http\Middleware\GuestbookValidate::class, ]; diff --git a/app/Http/Middleware/GuestbookValidate.php b/app/Http/Middleware/GuestbookValidate.php new file mode 100644 index 0000000..b2218bb --- /dev/null +++ b/app/Http/Middleware/GuestbookValidate.php @@ -0,0 +1,37 @@ +<?php + +namespace App\Http\Middleware; + +use Closure; +use Illuminate\Http\Request; +use Symfony\Component\HttpFoundation\Response; + +class GuestbookValidate +{ + /** + * Handle an incoming request. + * + * @param \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response) $next + */ + public function handle(Request $request, Closure $next): Response + { + if ( + !$request->validate([ + 'name' => 'required', + 'message' => 'required' + ]) || + $this->containsUrl($request->get('message')) || + $this->containsUrl($request->get('name')) + ) { + return response()->view('errors.guestbook-invalid', [], 400); + } + return $next($request); + } + + public function containsUrl($str) { + $matches = []; + $pattern = '/\b(?:https?|ftp|www)(:\/\/)*[-A-Z0-9+&@#\/%?=~_|$!:,.;]*[A-Z0-9+&@#\/%=~_|$]/i'; + preg_match_all($pattern, $str, $matches); + return count($matches[0]); + } +} |