helpers/SValidation.php5

<?php
abstract class SValidation extends SObject {

    const TYPE_NUMBER = 10;
    const TYPE_INTEGER = 11; const TYPE_INT = 11;
    const TYPE_FLOAT = 12;
    const TYPE_STRING = 20;
    const TYPE_ALPHA = 21;
    const TYPE_ALPHANUMERIC = 22;
    const TYPE_EMAIL = 23;
    const TYPE_POSTAL_CODE = 24;
    const TYPE_URL = 25;
    const TYPE_SHORT_NAME = 26;
    const TYPE_TIME = 30;
    const TYPE_DATE = 31;
    const TYPE_XML = 40;
    const TYPE_HTML = 41;

    public static function validateGETVars($attributes, $prm = null) {
        if ($prm == null)
            $prm = new PageRender2();
        $safeVars = array();
        foreach($attributes as $attribute => $properties) {
            // Set default values
            if (!isset($properties['null']))
                $properties['null'] = true;
            if (!isset($properties['type']))
                $properties['type'] = self::TYPE_STRING;
            // If attribute is not in GET vars
            if (!isset($_GET[$attribute])) {
                // If it's required, throw an error
                if ($properties['null'] === false)
                    $prm->flashAndExit('No value set for required input ' . $attribute);
                // If it's not required, continue to process next attribute
                else
                    continue;
            }
            // Validate the GET var
            $value = $_GET[$attribute];
            if ($value == '' && $properties['null'] == true) {
                // if it's blank but allowed to be null, that's OK
            } else if(!self::validate($value, $properties['type'])) {
                // otherwise, validate it and report errors
                $prm->flashAndExit('Value for ' . $attribute . ' was not of the correct type.');
            }
            $safeVars[$attribute] = $value;
        }
        return $safeVars;
    }

    public function validate($input, $type) {
        switch($type) {
            case self::TYPE_NUMBER:
                return (ctype_digit((string) $input));
            case self::TYPE_INTEGER:
                return (is_int($input));
            case self::TYPE_FLOAT:
                return (is_float($input));
            case self::TYPE_STRING:
                return (is_string($input));
            case self::TYPE_ALPHA:
                return self::validateInputByPattern($input, '/^[a-zA-Z]+$/');
            case self::TYPE_ALPHANUMERIC:
                return self::validateInputByPattern($input, '/^[a-zA-Z0-9]+$/');
            default:
                return false;
        }
    }

    public static function validateInputByPattern($input, $pattern) {
        return  preg_match($pattern, $input, $matches);
    }


    /*


    public function validateInput ($input, $type ) {
        switch ($type)
        {
            case 'string':
                $pattern = "/^[a-zA-Z\s]+$/";
                $errorCode = 100;
                break;
            case 'numbers':
                $pattern = "/^(\-)?[0-9\.]+(\s)?$/";
                $errorCode = 101;
                break;
            case 'alphanumeric':
                $pattern = "/^[0-9a-zA-Z\s]+$/";
                $errorCode = 102;
                break;
            case 'name':
                $pattern = "/^([a-zA-Z][A-Za-z\-\.\,]*(\s)?)+$/";
                $errorCode = 103;
                break;
            case 'email':
                $pattern = "/^[a-zA-Z0-9\.\_\-]+\@[a-zA-Z0-9\-\_]+\.[a-z0-9\-\_\.]+(\s)?$/";
                $errorCode = 104;
                break;
            case 'address':
                $pattern = "/^[a-zA-Z0-9\s\.\-\,\#]+(\s)?$/";
                $errorCode = 105;
                break;
            case 'city':
                $pattern = "/^[a-zA-Z0-9\s\-\.]+(\s)?$/";
                $errorCode = 106;
                break;
            case 'state':
                $pattern = "/^[a-zA-Z\s\.]+(\s)?$/";
                $errorCode = 107;
                break;
            case 'zip':
                $pattern = "/^[0-9]{5,9}(\-[0-9]{4})?(\s)?$/";
                $errorCode = 108;
                break;
            case 'website':
                $pattern = "/^[a-zA-Z0-9\.\-\:\~\/\_]+(\s)?$/";
                $errorCode = 109;
                break;
            case 'checkbox':
                $pattern = "/^([a-zA-Z0-9\.\_\/\(\)]+(\s)?)+$/";
                $errorCode = 110;
                break;
            case 'pulldown':
                $pattern = "/^[a-zA-Z\s\_]+$/";
                $errorCode = 111;
                break;
            case 'phone':
                $pattern = "/^[0-9a-zA-Z\-\s\(\)\+]{7,20}$/";
                $errorCode = 112;
                break;
            case 'birthday':
                $pattern = "/^[a-zA-Z0-9\s\,\-\/]+$/";
                $errorCode = 113;
                break;
            case 'paragraph':
                $pattern = "//";
                $errorCode = 115;
                break;
            case 'shortName':
                $pattern = "/^[a-zA-Z0-9\_\-\s\.]+$/";
                $errorCode = 116;
                break;
            case 'organization':
                $pattern = "/^([A-Za-z0-9\-\.\,]*(\s)?)+$/";
                $errorCode = 117;
                break;
            case 'username':
                $pattern = "/^[a-z][a-z0-9\_]{2,13}$/";
                $errorCode = 130;
                break;
            case 'time':
                $pattern = "/^[0-9]{1,2}[hH](\s)?[0-9]{1,2}[mM](\s)?$/";
                $errorCode = 131;
                break;
            case 'date':
                //Explode the date by the slash separator
                $explodedPatt = explode("/",$input);
                if(sizeof($explodedPatt) != 3)
                    return 132;
                $day = $explodedPatt[1];
                $month = $explodedPatt[0];
                $year = $explodedPatt[2];
                // Check the normal ranges for numbers of day, month, and year
                $truthiness =       (strlen($day) == 2)
                                    && ($day <= 31);
                $truthiness = $truthiness
                                    && (strlen($month) == 2)
                                    && ($month <= 12);
                $truthiness = $truthiness
                                    && (strlen($year) == 4)
                                    && ($year > 0)
                                    && ($year < (date("Y") + 20));
                // Check for 29-day and 30-day months
                if($day > 29 && $month == 2)
                    $truthiness = false;
                else if (($month == 4 || $month == 6 || $month == 9 || $month == 11) && ($day > 30))
                    $truthiness = false;
                // If true, return 0; if false, return error code 132
                return $truthiness;
                break;
            case 'password':
                $pattern = "/^[\S]{6,10}$/";
                $errorCode = 118;
                break;
            case 'fileName':
                $pattern = "/^[a-zA-Z0-9\.\-]+$/";
        $errorCode = 120;
                break;
            case 'xml':
            case 'mixedxml':
                $input = utf8_encode($input);

                $old_error_handler = set_error_handler(array($this, "XMLParseErrorHandler"));
                if ($type == "mixedxml") { $input = "<root> $input </root>"; }
                //print("checking $input");
                $check = simplexml_load_string("\n $input \n");
                restore_error_handler();
                if ($check === false) return 119;
                else return 0;
                break;
            default:
                $pattern = "//";
                $errorCode = 0;
            break;
        }
 */
}

---