museum-digital/MD_STD
32
0
Fork 1
Code Issues 1 Pull Requests Releases Wiki Activity
92 Commits 1 Branch 0 Tags
dbbdf4f230e6d76d6f7774397545e9275fd9ffbe
Commit Graph
91 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
jrenslin dbbdf4f230 Add function to ensure an input string is UTF-8 encoded 2021-07-01 15:34:46 +02:00
jrenslin f030adba20 Set worker-src 'self' in MD_STD_SEC 2021-05-15 17:17:53 +02:00
jrenslin 980c408631 Remove explicit naming of domain in setcookie 2021-05-15 15:37:05 +02:00
jrenslin a06a6ed41d Prepare for PHP 8 2021-05-13 23:02:37 +02:00
jrenslin 20c33437c9 Add function for checking the mime type of a remove file 2021-05-13 22:18:58 +02:00
jrenslin 63d6154d40 Fix spelling in setting language cookie 
See #6
 2021-05-13 15:21:06 +02:00
jrenslin d03befe483 Use prefixed cookies for user language 2021-05-13 14:48:44 +02:00
jrenslin fe0a8ba83b Remove obsolete phpcs exclusions 2021-05-01 22:54:37 +02:00
jrenslin 3b5f20aa96 Add missing "static" keyword in MD_STD 2021-04-14 18:16:13 +02:00
jrenslin 56f4fdc88a Add function get_user_lang for getting user language based on cookies 2021-04-14 17:59:11 +02:00
jrenslin 919ffdb1b5 Use ++$i over $i++ 
This slightly improves performance.
 2021-04-11 21:20:44 +02:00
jrenslin 36bdb36986 Use consistent first uppercase char in MD_STD reference to exception 2021-04-09 13:45:19 +02:00
jrenslin 2c1f6a0490 Move scripts to /src subdirectory 2021-03-09 20:09:11 +01:00
jrenslin 06bbaf5f97 Ad doption to set start character on an unordered list in md output 2021-02-21 01:57:15 +01:00
jrenslin 376333b660 Add class MDFormatter for formatting contents in markdown 2021-02-19 00:49:26 +01:00
jrenslin 1b1d33229d Update MD_STD_CACHE to reload error pages 2021-02-09 15:18:40 +01:00
jrenslin 8aa9d94acf Remove inline if clauses 2021-02-06 20:08:37 +01:00
jrenslin 217e1fc86b Consistently use "null" over "NULL" 2021-02-06 19:55:54 +01:00
jrenslin 605fd88b6e Use new line for unsetting variable 2021-02-06 17:35:11 +01:00
jrenslin 7a252c6bfa Improve sanitization of color inputs 2021-01-30 22:56:00 +01:00
jrenslin 89e06769f1 Add class for validating color codes 2021-01-28 21:47:59 +01:00
jrenslin 9d4d326d6a Add check for directory existence in MD_STD::mkdir 2021-01-21 11:03:07 +01:00
jrenslin 298e2238a8 Add stricter wrapper around unlink() 2021-01-06 12:49:35 +01:00
jrenslin d28c245a1a Add wrapper around mkdir, that throws an exception on errors 2020-12-21 14:50:28 +01:00
jrenslin 2b4abf6338 Add function for running multiple curl queries simultaneously 2020-12-14 02:01:53 +01:00
jrenslin 34c2d57e5b Add function for converting strings to color codes 2020-12-11 14:01:41 +01:00
jrenslin 287fb02f8c Pipe STDOUT to /dev/null in MD_STD::exec_edit, actual STDOUT is for 
STDERR
 2020-12-09 13:34:31 +01:00
jrenslin d028ac0176 Remove check for curl init working 2020-12-08 20:42:54 +01:00
jrenslin ddab52b1a5 Add check against curl_init failure in runCurl 2020-12-08 11:36:54 +01:00
jrenslin ada82f07b6 Reduce multipliers in brute force protection 2020-12-07 15:31:36 +01:00
jrenslin cad5b4a6f8 Add missing return statement to disable MD_JAIL::enforce on CLI usage 2020-12-06 17:06:43 +01:00
jrenslin 6a7f91ef1d Use shell_exec in exec_edit 2020-12-05 20:48:51 +01:00
jrenslin 6db2b4cc1f Add MD_STD::exec_edit to run edit and pipe STDERR to a php exception 2020-12-04 21:33:11 +01:00
jrenslin 4c5097701f Add wrapper around levenstein that crops strings to the max allowed 
length
 2020-12-03 12:39:47 +01:00
jrenslin 886acead63 Stop using cache in MD_STD_CACHE when run from command line 2020-12-02 09:39:43 +01:00
jrenslin 35c0fe4723 Require cached contents in MD_STD_CACHE to be 3 chars long 
An empty json array is 2 chars long
 2020-12-01 00:05:59 +01:00
jrenslin a38c3c6fae Let serve_page_through_redis_cache return string 2020-11-30 22:36:17 +01:00
jrenslin 57da808a6a Fix class variable comment 2020-11-30 19:19:44 +01:00
jrenslin 558ed729dc Add class MD_STD_CACHE 2020-11-30 19:08:20 +01:00
jrenslin 14c7ffb8d4 Fix class comment 2020-11-23 14:06:03 +01:00
jrenslin a16619b78e Add option to set frame-ancestors CSP 2020-11-22 23:27:54 +01:00
jrenslin 90997e4eb5 Add function for sending complete CSP headers 2020-11-22 17:45:07 +01:00
jrenslin c60932088d Add missing function comment 2020-11-22 15:42:56 +01:00
jrenslin 258781307d Fix reference to incorrect array part in MD_STD_SEC's brute force 
protection
 2020-11-22 14:18:08 +01:00
jrenslin dc9d7abe14 Fix comment indentation 2020-11-19 23:32:29 +01:00
jrenslin 729a964d0c Reduce general brute force deflection delay multiplier for whole tool to 
1.08 (down from 1.2)
 2020-11-18 00:39:59 +01:00
jrenslin 7120b5dc74 Add function to prevent brute force attacts 2020-11-17 23:55:50 +01:00
jrenslinandstefan 95537fb60e Extend MD_JAIL with .user_ini proposals for restricting maximum inputs 2020-11-12 19:54:43 +01:00
jrenslinandstefan 5130477e4b Add static function to propose security settings 
Close #3, see #4
 2020-11-12 00:12:11 +01:00
jrenslinandstefan ae39bdf741 Disable currently unused function MD_JAIL->_apply_basedir_restrictions() 2020-11-11 17:29:03 +01:00
jrenslinandstefan 2bfc7a0dcd Add CLI output option to MD_JAIL 2020-11-11 17:25:41 +01:00
jrenslinandstefan 6a6f71cf10 Add class MD_JAIL for forcing coders to set time and memory limits 2020-11-11 17:20:56 +01:00
jrenslinandstefan 8e3d97aa7f Move array_diff / array_values into different lines in MD_STD::scandir 
This leads a significant reduction in RAM usage.
 2020-11-09 14:17:54 +01:00
jrenslinandstefan aa67de1e54 Add class MD_STD_SEC for basic security operations 2020-11-08 19:34:57 +01:00
jrenslinandstefan 50d3a20b01 Add type-safe drop-in replacement for mime_content_type() 2020-11-08 18:54:40 +01:00
jrenslinandstefan cb8c786284 Add check to ensure finfo_open works in ensure_file function 2020-11-08 13:06:05 +01:00
jrenslinandstefan 306efa3769 Add .gitattributes, git template 2020-11-08 00:13:01 +01:00
jrenslinandstefan 1c86051997 Add a function to ensure a file exists, optionally checking the mime 
type
 2020-11-08 00:12:02 +01:00
jrenslinandstefan 2f68acdfc1 Make error messages for disallowed values more explicit 2020-10-24 12:46:18 +02:00
jrenslinandstefan 43bc39d425 Add function createTextSnippet() for shortening text to an expected 
length

Close #1
 2020-10-23 16:13:02 +02:00
jrenslinandstefan 711bd49048 Add function minizeHTMLString() 2020-10-21 21:16:18 +02:00
jrenslinandstefan 087b4a128e Add validation function for ISBN 2020-09-30 00:58:58 +02:00
jrenslinandstefan 0bfd6c3765 Add removal of duplicate spaces in input strings in MD_STD_IN 2020-09-09 00:29:13 +02:00
jrenslinandstefan 49ab75afe8 Add new function MD_STD_IN::sanitize_float 2020-09-05 00:19:32 +02:00
jrenslinandstefan 27b70a88c9 Use firefox for user agent in MD_STD::runCurl() 2020-09-04 18:09:56 +02:00
jrenslinandstefan b16a6762e4 Improve sanitizers for mails, urls 2020-09-04 01:37:49 +02:00
jrenslinandstefan f478728ab9 Improve sanitizing functions for mail and url 2020-09-04 01:19:00 +02:00
jrenslinandstefan 55db406401 Add wrappers for sanitizing URLs and mail addresses 2020-09-04 00:46:45 +02:00
jrenslinandstefan 6fe367ead7 Add final keyword to both classes 2020-08-29 17:22:16 +02:00
jrenslinandstefan 7d4a740f8f Use strict in_array() calls 2020-08-27 17:16:48 +02:00
jrenslinandstefan b39f26a3f7 Specify global namespace for more calls to build-in functions 2020-08-22 23:57:37 +02:00
jrenslinandstefan 25b3138a26 Add type-safe wrapper around MD_STD 2020-08-22 17:00:21 +02:00
jrenslinandstefan bac86627e2 Correct check against empty value in MD_STD_IN 2020-08-22 12:13:08 +02:00
jrenslinandstefan 566590135b Add function sanitize_id_or_zero for validating and sanitizing input 
integers that may hold an ID or a 0

Example use case: Event parts in musdb.
 2020-08-21 13:58:24 +02:00
jrenslinandstefan bdee1e9aee Add wrapper around openssl_random_pseudo_bytes() 2020-08-20 14:56:36 +02:00
jrenslinandstefan 7b1dc582ed Use global namespace for generic call to \strtotime in MD_STD::strtotime 2020-08-20 14:13:49 +02:00
jrenslinandstefan d4b2986809 Fix over-sanitization for texts in MD_STD_IN 2020-08-20 11:08:27 +02:00
jrenslinandstefan 0fece80ed0 Add functionality to restrict allowed values taken from get via 
MD_STD_IN
 2020-08-19 15:32:15 +02:00
jrenslinandstefan 17d1b6e88b Add class MD_STD_IN for input parsing and sanitization 2020-08-19 14:55:38 +02:00
jrenslinandstefan b8d8be54b9 Use integer for first param of human_filesize 2020-08-11 08:10:23 +02:00
jrenslinandstefan 08c9582210 Add lang_getfrombrowser and human_filesize 
These functions are used in almost all md projects at one point or
another.
 2020-08-10 19:55:40 +02:00
jrenslinandstefan a09eba6b84 Add type-safe wrapper around strtotime, removing ability for second 
param.
 2020-08-10 16:59:06 +02:00
jrenslinandstefan 523cdaa7f4 Add type-safe wrapper around preg_replace for replacing in strings 2020-08-09 00:59:41 +02:00
jrenslinandstefan 00fcc997ce Exclude .git in MD_STD::scandir 2020-08-07 18:32:44 +02:00
jrenslinandstefan 8513458904 Add type-safe wrapper around json_encode 2020-08-05 17:02:03 +02:00
jrenslinandstefan c73d279ff0 Add wrapper around running curl (runCurl) 2020-08-05 16:36:02 +02:00
jrenslinandstefan 790e332502 Add type-safe wrapper around MD_STD 2020-08-05 15:31:29 +02:00
jrenslinandstefan 079786e42d Add type-safe wrapper around realpath 2020-08-05 14:01:26 +02:00
jrenslinandstefan f44fd251e1 Add functions startsWithAny, startsWith 2020-08-05 09:06:28 +02:00
jrenslinandstefan 1c68b4fa98 Fix wrong filename 2020-07-26 15:13:03 +02:00
jrenslinandstefan 481233efad Initial 2020-07-26 14:52:41 +02:00