Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/corals/old/vendor/laminas/laminas-captcha/src/ |
<?php
declare(strict_types=1);
namespace Laminas\Captcha;
use Laminas\Session\Container;
use function class_exists;
use function count;
use function is_array;
use function md5;
use function random_bytes;
use function random_int;
use function strlen;
use function strtolower;
use function substr;
/**
* AbstractWord-based captcha adapter
*
* Generates random word which user should recognise
*/
abstract class AbstractWord extends AbstractAdapter
{
// @codingStandardsIgnoreStart
/**#@+
* @var array Character sets
*/
/** @var list<string> */
public static $V = ["a", "e", "i", "o", "u", "y"];
/** @var list<string> */
public static $VN = ["a", "e", "i", "o", "u", "y", "2", "3", "4", "5", "6", "7", "8", "9"];
/** @var list<string> */
public static $C = ["b", "c", "d", "f", "g", "h", "j", "k", "m", "n", "p", "q", "r", "s", "t", "u", "v", "w", "x", "z"];
/** @var list<string> */
public static $CN = ["b", "c", "d", "f", "g", "h", "j", "k", "m", "n", "p", "q", "r", "s", "t", "u", "v", "w", "x", "z", "2", "3", "4", "5", "6", "7", "8", "9"];
/**#@-*/
// @codingStandardsIgnoreEnd
/**
* Random session ID
*
* @var string|null
*/
protected $id;
/**
* Generated word
*
* @var string|null
*/
protected $word;
/**
* Session
*
* @var Container|null
*/
protected $session;
/**
* Class name for sessions
*
* @var class-string<Container>
*/
protected $sessionClass = Container::class;
/**
* Should the numbers be used or only letters
*
* @var bool
*/
protected $useNumbers = true;
/**
* Should both cases be used or only lowercase
*
* @var bool
*/
// protected $useCase = false;
/**
* Session lifetime for the captcha data
*
* @var int
*/
protected $timeout = 300;
/**
* Should generate() keep session or create a new one?
*
* @var bool
*/
protected $keepSession = false;
/**#@+
* Error codes
*/
public const MISSING_VALUE = 'missingValue';
public const MISSING_ID = 'missingID';
public const BAD_CAPTCHA = 'badCaptcha';
/**#@-*/
/**
* Error messages
*
* @var array<string, string>
*/
protected $messageTemplates = [
self::MISSING_VALUE => 'Empty captcha value',
self::MISSING_ID => 'Captcha ID field is missing',
self::BAD_CAPTCHA => 'Captcha value is wrong',
];
/**
* Length of the word to generate
*
* @var int
*/
protected $wordlen = 8;
/**
* Retrieve session class to utilize
*
* @return string
*/
public function getSessionClass()
{
return $this->sessionClass;
}
/**
* Set session class for persistence
*
* @param class-string $sessionClass
* @return AbstractWord Provides a fluent interface
*/
public function setSessionClass($sessionClass)
{
$this->sessionClass = $sessionClass;
return $this;
}
/**
* Retrieve word length to use when generating captcha
*
* @return int
*/
public function getWordlen()
{
return $this->wordlen;
}
/**
* Set word length of captcha
*
* @param int $wordlen
* @return AbstractWord Provides a fluent interface
*/
public function setWordlen($wordlen)
{
$this->wordlen = $wordlen;
return $this;
}
/**
* Retrieve captcha ID
*
* @return string
*/
public function getId()
{
if (null === $this->id) {
$this->id = $this->generateRandomId();
}
return $this->id;
}
/**
* Set captcha identifier
*
* @param string $id
* @return AbstractWord Provides a fluent interface
*/
protected function setId($id)
{
$this->id = $id;
return $this;
}
/**
* Set timeout for session token
*
* @param int $ttl
* @return AbstractWord Provides a fluent interface
*/
public function setTimeout($ttl)
{
$this->timeout = (int) $ttl;
return $this;
}
/**
* Get session token timeout
*
* @return int
*/
public function getTimeout()
{
return $this->timeout;
}
/**
* Sets if session should be preserved on generate()
*
* @param bool $keepSession Should session be kept on generate()?
* @return AbstractWord Provides a fluent interface
*/
public function setKeepSession($keepSession)
{
$this->keepSession = $keepSession;
return $this;
}
/**
* Numbers should be included in the pattern?
*
* @return bool
*/
public function getUseNumbers()
{
return $this->useNumbers;
}
/**
* Set if numbers should be included in the pattern
*
* @param bool $useNumbers numbers should be included in the pattern?
* @return AbstractWord Provides a fluent interface
*/
public function setUseNumbers($useNumbers)
{
$this->useNumbers = $useNumbers;
return $this;
}
/**
* Get session object
*
* @throws Exception\InvalidArgumentException
* @return Container
*/
public function getSession()
{
if (! isset($this->session)) {
$id = $this->getId();
if (! class_exists($this->sessionClass)) {
throw new Exception\InvalidArgumentException("Session class $this->sessionClass not found");
}
$this->session = new $this->sessionClass('Laminas_Form_Captcha_' . $id);
$this->session->setExpirationHops(1, null);
$this->session->setExpirationSeconds($this->getTimeout());
}
return $this->session;
}
/**
* Set session namespace object
*
* @return $this Provides a fluent interface
*/
public function setSession(Container $session)
{
$this->session = $session;
$this->keepSession = true;
return $this;
}
/**
* Get captcha word
*
* @return string
*/
public function getWord()
{
if (empty($this->word)) {
$session = $this->getSession();
$this->word = $session->word;
}
return $this->word;
}
/**
* Set captcha word
*
* @param string $word
* @return AbstractWord Provides a fluent interface
*/
protected function setWord($word)
{
$session = $this->getSession();
$session->word = $word;
$this->word = $word;
return $this;
}
/**
* Generate new random word
*
* @return string
*/
protected function generateWord()
{
$word = '';
$wordLen = $this->getWordLen();
$vowels = $this->useNumbers ? static::$VN : static::$V;
$consonants = $this->useNumbers ? static::$CN : static::$C;
$totIndexCon = count($consonants) - 1;
$totIndexVow = count($vowels) - 1;
for ($i = 0; $i < $wordLen; $i += 2) {
// generate word with mix of vowels and consonants
$consonant = $consonants[random_int(0, $totIndexCon)];
$vowel = $vowels[random_int(0, $totIndexVow)];
$word .= $consonant . $vowel;
}
if (strlen($word) > $wordLen) {
$word = substr($word, 0, $wordLen);
}
return $word;
}
/**
* Generate new session ID and new word
*
* @return string session ID
*/
public function generate()
{
if (! $this->keepSession) {
$this->session = null;
}
$id = $this->generateRandomId();
$this->setId($id);
$word = $this->generateWord();
$this->setWord($word);
return $id;
}
/**
* Generate a random identifier
*
* @return string
*/
protected function generateRandomId()
{
return md5(random_bytes(32));
}
/**
* Validate the word
*
* @see \Laminas\Validator\ValidatorInterface::isValid()
*
* @param mixed $value
* @param mixed $context
* @return bool
*/
public function isValid($value, $context = null)
{
if (! is_array($value)) {
if (! is_array($context)) {
$this->error(self::MISSING_VALUE);
return false;
}
$value = $context;
}
$name = $this->getName();
if (isset($value[$name])) {
$value = $value[$name];
}
if (! isset($value['input'])) {
$this->error(self::MISSING_VALUE);
return false;
}
$input = strtolower($value['input']);
$this->setValue($input);
if (! isset($value['id'])) {
$this->error(self::MISSING_ID);
return false;
}
$this->id = $value['id'];
if ($input !== $this->getWord()) {
$this->error(self::BAD_CAPTCHA);
return false;
}
return true;
}
/**
* Get helper name used to render captcha
*
* @return string
*/
public function getHelperName()
{
return 'captcha/word';
}
}