123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254 |
- <?php
- /*
- * This file is part of the Symfony package.
- *
- * (c) Fabien Potencier <fabien@symfony.com>
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
- namespace Symfony\Component\Form;
- use Symfony\Component\Form\Exception\UnexpectedTypeException;
- use Symfony\Component\Form\Util\ServerParams;
- /**
- * A request handler using PHP super globals $_GET, $_POST and $_SERVER.
- *
- * @author Bernhard Schussek <bschussek@gmail.com>
- */
- class NativeRequestHandler implements RequestHandlerInterface
- {
- private $serverParams;
- /**
- * The allowed keys of the $_FILES array.
- */
- private const FILE_KEYS = [
- 'error',
- 'name',
- 'size',
- 'tmp_name',
- 'type',
- ];
- public function __construct(ServerParams $params = null)
- {
- $this->serverParams = $params ?: new ServerParams();
- }
- /**
- * {@inheritdoc}
- *
- * @throws Exception\UnexpectedTypeException If the $request is not null
- */
- public function handleRequest(FormInterface $form, $request = null)
- {
- if (null !== $request) {
- throw new UnexpectedTypeException($request, 'null');
- }
- $name = $form->getName();
- $method = $form->getConfig()->getMethod();
- if ($method !== self::getRequestMethod()) {
- return;
- }
- // For request methods that must not have a request body we fetch data
- // from the query string. Otherwise we look for data in the request body.
- if ('GET' === $method || 'HEAD' === $method || 'TRACE' === $method) {
- if ('' === $name) {
- $data = $_GET;
- } else {
- // Don't submit GET requests if the form's name does not exist
- // in the request
- if (!isset($_GET[$name])) {
- return;
- }
- $data = $_GET[$name];
- }
- } else {
- // Mark the form with an error if the uploaded size was too large
- // This is done here and not in FormValidator because $_POST is
- // empty when that error occurs. Hence the form is never submitted.
- if ($this->serverParams->hasPostMaxSizeBeenExceeded()) {
- // Submit the form, but don't clear the default values
- $form->submit(null, false);
- $form->addError(new FormError(
- $form->getConfig()->getOption('upload_max_size_message')(),
- null,
- ['{{ max }}' => $this->serverParams->getNormalizedIniPostMaxSize()]
- ));
- return;
- }
- $fixedFiles = [];
- foreach ($_FILES as $fileKey => $file) {
- $fixedFiles[$fileKey] = self::stripEmptyFiles(self::fixPhpFilesArray($file));
- }
- if ('' === $name) {
- $params = $_POST;
- $files = $fixedFiles;
- } elseif (\array_key_exists($name, $_POST) || \array_key_exists($name, $fixedFiles)) {
- $default = $form->getConfig()->getCompound() ? [] : null;
- $params = \array_key_exists($name, $_POST) ? $_POST[$name] : $default;
- $files = \array_key_exists($name, $fixedFiles) ? $fixedFiles[$name] : $default;
- } else {
- // Don't submit the form if it is not present in the request
- return;
- }
- if (\is_array($params) && \is_array($files)) {
- $data = array_replace_recursive($params, $files);
- } else {
- $data = $params ?: $files;
- }
- }
- // Don't auto-submit the form unless at least one field is present.
- if ('' === $name && \count(array_intersect_key($data, $form->all())) <= 0) {
- return;
- }
- if (\is_array($data) && \array_key_exists('_method', $data) && $method === $data['_method'] && !$form->has('_method')) {
- unset($data['_method']);
- }
- $form->submit($data, 'PATCH' !== $method);
- }
- /**
- * {@inheritdoc}
- */
- public function isFileUpload($data)
- {
- // POST data will always be strings or arrays of strings. Thus, we can be sure
- // that the submitted data is a file upload if the "error" value is an integer
- // (this value must have been injected by PHP itself).
- return \is_array($data) && isset($data['error']) && \is_int($data['error']);
- }
- /**
- * @return int|null
- */
- public function getUploadFileError($data)
- {
- if (!\is_array($data)) {
- return null;
- }
- if (!isset($data['error'])) {
- return null;
- }
- if (!\is_int($data['error'])) {
- return null;
- }
- if (\UPLOAD_ERR_OK === $data['error']) {
- return null;
- }
- return $data['error'];
- }
- /**
- * Returns the method used to submit the request to the server.
- */
- private static function getRequestMethod(): string
- {
- $method = isset($_SERVER['REQUEST_METHOD'])
- ? strtoupper($_SERVER['REQUEST_METHOD'])
- : 'GET';
- if ('POST' === $method && isset($_SERVER['HTTP_X_HTTP_METHOD_OVERRIDE'])) {
- $method = strtoupper($_SERVER['HTTP_X_HTTP_METHOD_OVERRIDE']);
- }
- return $method;
- }
- /**
- * Fixes a malformed PHP $_FILES array.
- *
- * PHP has a bug that the format of the $_FILES array differs, depending on
- * whether the uploaded file fields had normal field names or array-like
- * field names ("normal" vs. "parent[child]").
- *
- * This method fixes the array to look like the "normal" $_FILES array.
- *
- * It's safe to pass an already converted array, in which case this method
- * just returns the original array unmodified.
- *
- * This method is identical to {@link \Symfony\Component\HttpFoundation\FileBag::fixPhpFilesArray}
- * and should be kept as such in order to port fixes quickly and easily.
- *
- * @return mixed
- */
- private static function fixPhpFilesArray($data)
- {
- if (!\is_array($data)) {
- return $data;
- }
- $keys = array_keys($data);
- sort($keys);
- if (self::FILE_KEYS !== $keys || !isset($data['name']) || !\is_array($data['name'])) {
- return $data;
- }
- $files = $data;
- foreach (self::FILE_KEYS as $k) {
- unset($files[$k]);
- }
- foreach ($data['name'] as $key => $name) {
- $files[$key] = self::fixPhpFilesArray([
- 'error' => $data['error'][$key],
- 'name' => $name,
- 'type' => $data['type'][$key],
- 'tmp_name' => $data['tmp_name'][$key],
- 'size' => $data['size'][$key],
- ]);
- }
- return $files;
- }
- /**
- * Sets empty uploaded files to NULL in the given uploaded files array.
- *
- * @return mixed Returns the stripped upload data
- */
- private static function stripEmptyFiles($data)
- {
- if (!\is_array($data)) {
- return $data;
- }
- $keys = array_keys($data);
- sort($keys);
- if (self::FILE_KEYS === $keys) {
- if (\UPLOAD_ERR_NO_FILE === $data['error']) {
- return null;
- }
- return $data;
- }
- foreach ($data as $key => $value) {
- $data[$key] = self::stripEmptyFiles($value);
- }
- return $data;
- }
- }
|