From 7076343338ae3439f3c86f01144818abe8c31978 Mon Sep 17 00:00:00 2001 From: George Halkiadakis Date: Sun, 12 Mar 2023 07:16:23 +0200 Subject: add container helpers; constuct public directory-tree --- classes/Request.php | 94 ----------------------------------------------------- 1 file changed, 94 deletions(-) delete mode 100644 classes/Request.php (limited to 'classes/Request.php') diff --git a/classes/Request.php b/classes/Request.php deleted file mode 100644 index 20b82c7..0000000 --- a/classes/Request.php +++ /dev/null @@ -1,94 +0,0 @@ -URL = $_SERVER['REQUEST_URI']; - $this->PATH = (!empty($parsed['path'])) ? urldecode($parsed['path']) : ''; - $this->QUERY = (!empty($parsed['query'])) ? urldecode($parsed['query']) : false; - $this->HOST = $_SERVER['HTTP_HOST']; - $this->PORT = $_SERVER['SERVER_PORT']; - $this->TIME = $_SERVER['REQUEST_TIME']; - $this->CLI_IP = $_SERVER['REMOTE_ADDR']; - - $this->METHOD = strtolower($_SERVER['REQUEST_METHOD']); - - $this->GET = $_GET; // $_GET should only used - // to request data or specify options (never to perform - // system-changes) thus should not need any validation; - // * If (for any reason) you requide $_GET sanitization - // enable it later on the method's code - - // $this->INTERFACE = php_sapi_name(); - - $this->AGENT = $_SERVER['HTTP_USER_AGENT'] ?? 'unknown'; - $this->SIGNATURE = sha1( - $_SERVER['HTTP_USER_AGENT'] ?? 'unknown' - . $_SERVER['HTTP_ACCEPT'] ?? '' - . $_SERVER['HTTP_ACCEPT_LANGUAGE'] ?? '' - . $_SERVER['HTTP_ACCEPT_ENCODING'] ?? '' - ); - - // sanitize user input - // if (isset($_GET)) { $this->GET = $this->sanitize($_GET); } - $this->GET = $this->sanitize($_GET); - if (isset($_POST)) { $this->POST = $this->sanitize($_POST); } - if (isset($_COOKIE)) { $this->COOKIE = $this->sanitize($_COOKIE); } - - // check anti-CSRF token if needed - // (again, GET requests should not need CSRF cheking) - if (in_array($this->METHOD, ['post', 'put', 'patch', 'delete'])) { - // TODO: only if CSRF protection enabled... - $this->checkCsrfToken(); - } - - } - - - private function sanitize($array) - { - // TODO: - // ... - return $array; - } - - - public function checkCsrfToken() - { - // TODO: - // ... - // if SCRF-token is not valideted, serve 403 - return $array; - } - -} - -- cgit v1.2.3