File Manager

✏️ Edit File: /home/u414903541/domains/finrush.in/public_html/app/Yantrana/__Laraware/Core/CoreRequest.php

<?php

namespace App\Yantrana\__Laraware\Core;

/**
 * NOTE - 24 JUL 2021 - ******************************************************************************************
 *  Use CoreRequestTwo for projects after 2021 do not use it for earlier projects even upgraded as
 *  It may create problems for the request
 * ***************************************************************************************************************
 * Core Request - 1.4.5 - 08 JAN 2023
 *
 * core request for Laravel applications
 *
 *
 * Dependencies:
 *
 * Laravel     5.0 +     - http://laravel.com
 *
 *
 *--------------------------------------------------------------------------- */

use Illuminate\Foundation\Http\FormRequest;
use Illuminate\Http\Request;
use Illuminate\Validation\Factory as ValidatorFactory;
use YesSecurity;

abstract class CoreRequest extends FormRequest
{
    /**
     * Set if you need form request secured.
     *------------------------------------------------------------------------ */
    protected $securedForm = false;

/**
     * Unsecured/Non-encrypted form fields.
     *------------------------------------------------------------------------ */
    protected $unsecuredFields = [];

/**
     * perform sanitization on input or not.
     *------------------------------------------------------------------------ */
    protected $sanitization = true;

/**
     * the FILTER to Sanitize string along with Strip tags
     *
     * @since 1.2.0 - 01 MAR 2021
     *------------------------------------------------------------------------ */
    protected $strictSanitization = false;

/**
     * Loosely sanitize fields.
     *------------------------------------------------------------------------ */
    protected $looseSanitizationFields = [];

/**
     * Default Sanitization allowed tags.
     *------------------------------------------------------------------------ */
    protected $defaultSanitizationAllowedTags = '<p><br><br/><img><img/><ul><ol>
                    <li><strong><a><small><blockquote><em><h1><h2><h3><h4><h5>
                    <hr><hr/><address><dd><table><td><tr><th><thead><tbody><dl>
                    <dt><div><span>';

/**
     * Call before validation process
     *
     * @example uses
    }
     * @return void
     *------------------------------------------------------------------------ */
    protected function processBefore()
    {
    }

/**
     * Modify validator.
     *
     * @return array|object
     *------------------------------------------------------------------------ */
    public function validator(ValidatorFactory $factory)
    {
        // normalize/decrypt form fields
        if ($this->securedForm === true) {
            $this->normalizeEncryptedInput();
        }

// sanitization
        if ($this->sanitization === true) {
            $this->sanitizeInputs($this->input());
        }

$this->processBefore();

return $factory->make($this->input(), $this->rules(), $this->messages(), $this->attributes());
    }

/**
     * normalize/decrypt form fields.
     *
     * @updated - 1.4.5 - 08 JAN 2023
     *------------------------------------------------------------------------ */
    protected function normalizeEncryptedInput($passedInputs = [], $returnOnly = false)
    {
        if (empty($passedInputs)) {
            $allInputs = $this->input();
        } else {
            $allInputs = $passedInputs;
        }
        $nullItemValueCounts = 0;

foreach ($allInputs as $key => $value) {
            // check if item in unsecured fields
            if (is_string($key) and in_array($key, $this->unsecuredFields)) {
                continue;
            }
            $decryptedKey = YesSecurity::decryptRSA($key);
            $encryptedKey = null;

if ($decryptedKey or ($decryptedKey === '')) {
                $encryptedKey = $key;
                if ($decryptedKey === '') {
                    $decryptedKey = 0;
                }
                $key = $decryptedKey;
            }

if (
                (in_array($key, $this->unsecuredFields) === false)
                and (is_array($value) === false)
            ) {
                if ($decryptedKey === 0) {
                    $allInputs[] = empty($value) ? $value : YesSecurity::decryptLongRSA($value);
                } else {
                    $allInputs[$key] = empty($value) ? $value : YesSecurity::decryptLongRSA($value);
                }
                unset($allInputs[$encryptedKey]);
            } elseif (
                (in_array($key, $this->unsecuredFields) === false)
                and (is_array($value) === true)
                and (empty($value) == true)
            ) {
                $allInputs[$key] = $value;
                unset($allInputs[$encryptedKey]);
            } elseif (
                (in_array($key, $this->unsecuredFields) === false)
                and (is_array($value) === true)
                and (empty($value) == false)
            ) {
                $allInputs[$key] = $this->normalizeEncryptedInput($value, true);
                unset($allInputs[$encryptedKey]);
            }

if (! $key or ! isset($allInputs[$key])) {
                continue;
            }

if ($allInputs[$key] === 'true') {
                $allInputs[$key] = true;
            }

if ($allInputs[$key] === 'false') {
                $allInputs[$key] = false;
            }

// if found null
            if ($allInputs[$key] === null) {
                $nullItemValueCounts++;
            }
        }

if ($returnOnly === true) {
            return $allInputs;
        }

// check if decryption fails & update accordingly
        if (count($allInputs) === $nullItemValueCounts) {
            $message = __('Invalid Request Inputs ... !!');

if ($this->ajax()) { // if its an ajax request send response
                echo json_encode(__response([
                    'message' => $message,
                ], 3));
                // finish execution
                exit();
            } else { // if not an ajax request finish execution
                exit($message);
            }
        }

if (! empty($passedInputs)) {
            return $allInputs;
        }

unset($allInputs[YesSecurity::getFormSecurityID()]);

$this->replace($allInputs);
    }

/**
     * Sanitize Inputs.
     *------------------------------------------------------------------------ */
    protected function sanitizeInputs(array $inputs)
    {
        foreach ($inputs as $key => $value) {
            if (is_array($value)) {
                $this->sanitizeInputs($value);
            } elseif (is_string($value)) {
                // check if some tags are allowed
                // if yes concat with defaults
                if (array_key_exists($key, $this->looseSanitizationFields)) {
                    if (is_string($this->looseSanitizationFields[$key])) {
                        // strip tags except default & required allowed
                        $inputs[$key] = strip_tags($value, $this->defaultSanitizationAllowedTags
                            .$this->looseSanitizationFields[$key]);
                        if ($this->strictSanitization === true) {
                            $inputs[$key] = htmlspecialchars($inputs[$key]);
                        }
                    } elseif ($this->looseSanitizationFields[$key] === true) {
                        $inputs[$key] = $value;
                    }
                } else {
                    // strip all tags
                    $inputs[$key] = strip_tags($value);
                }
            }
        }

// update inputs
        $this->replace($inputs);
    }

/**
     * Secure for by encrypting/decrypting form payload
     *
     * @param  array  $unsecuredFields  - non encrypted fields
     * @return $this
     *
     * @since 1.2.0 - 01 MAR 2021
     */
    public function decryptPayload(array $unsecuredFields = [])
    {
        $this->securedForm = true;
        $this->unsecuredFields = array_merge($this->unsecuredFields, $unsecuredFields);
        $this->normalizeEncryptedInput();

return $this;
    }

/**
     * Prevent from decrypting the payload
     *
     * @return $this
     *
     * @since 1.2.0 - 01 MAR 2021
     */
    public function skipPayloadDecryption()
    {
        $this->securedForm = false;

return $this;
    }

/**
     * Set loose sanitization fields
     *
     * @return $this
     *
     * @since 1.2.0 - 01 MAR 2021
     */
    public function looseSanitizationFields(array $looseSanitizationFields = [])
    {
        $this->looseSanitizationFields = array_merge($this->looseSanitizationFields, $looseSanitizationFields);

return $this;
    }

/**
     * Prevent the form payload sanitization
     *
     * @return $this
     *
     * @since 1.2.0 - 01 MAR 2021
     */
    public function preventSanitization()
    {
        $this->sanitization = false;

return $this;
    }

/**
     * Apply the FILTER to Sanitize string along with Strip tags
     *
     * @return $this
     *
     * @since 1.2.0 - 01 MAR 2021
     */
    public function strictSanitization()
    {
        $this->strictSanitization = true;

return $this;
    }

/**
     * Mark the request as secured/encrypted
     *
     * @param  array  $unsecuredFields  - non encrypted fields
     * @return $this
     *
     * @since 1.4.5 - 01 MAR 2021
     */
    public function securedForm(array $unsecuredFields = [])
    {
        $this->securedForm = true;
        $this->unsecuredFields = array_merge($this->unsecuredFields, $unsecuredFields);

return $this;
    }
}

Batal

⬅ Naik ke __Laraware 8 item

Nama	Tipe	Ukuran	Diubah	Aksi
🐘CoreController.php	php	5.4 KB	2025-10-25 15:30	✏️ Edit 👁️ View
🐘CoreEngine.php	php	6.3 KB	2025-10-25 15:30	✏️ Edit 👁️ View
🐘CoreMailer.php	php	5.3 KB	2025-10-25 15:30	✏️ Edit 👁️ View
🐘CoreModel.php	php	31.2 KB	2025-10-25 15:30	✏️ Edit 👁️ View
🐘CoreRepository.php	php	15 KB	2025-10-25 15:30	✏️ Edit 👁️ View
🐘CoreRequest.php	php	9.6 KB	2025-10-25 15:30	✏️ Edit 👁️ View
🐘CoreRequestTwo.php	php	10.1 KB	2025-10-25 15:30	✏️ Edit 👁️ View
🐘EngineResponse.php	php	2.3 KB	2025-10-25 15:30	✏️ Edit 👁️ View