. * * @author TechFuze * @copyright Copyright (c) 2013 - 2016, Techfuze. (http://techfuze.net) * @copyright Copyright (c) 1996 - 2015, Free Software Foundation, Inc. (http://www.fsf.org/) * @license http://opensource.org/licenses/GPL-3.0 GPLv3 License * * @link http://techfuze.net/fuzeworks * @since Version 0.0.1 * * @version Version 1.0.0 */ use FuzeWorks\Factory; /** * Class InputTest. * * Core testing suite, will test basic input class functionality */ class inputTest extends CoreTestAbstract { protected $factory; public function setUp() { // Load the factory first $this->factory = Factory::getInstance(); // Set server variable to GET as default, since this will leave unset in STDIN env $_SERVER['REQUEST_METHOD'] = 'GET'; // Set config for Input class $this->factory->config->getConfig('routing')->allow_get_array = TRUE; $this->factory->config->getConfig('security')->global_xss_filtering = FALSE; $this->factory->config->getConfig('security')->csrf_protection = FALSE; $security = new Mock_Core_Security(); $this->factory->config->getConfig('main')->charset = 'UTF-8'; $utf8 = new Mock_Core_Utf8(); $this->input = new Mock_Core_Input($security, $utf8); } // -------------------------------------------------------------------- public function test_get_not_exists() { $this->assertTrue($this->input->get() === array()); $this->assertTrue($this->input->get('foo') === NULL); } // -------------------------------------------------------------------- public function test_get_exist() { $_SERVER['REQUEST_METHOD'] = 'GET'; $_GET['foo'] = 'bar'; $this->assertArrayHasKey('foo', $this->input->get()); $this->assertEquals('bar', $this->input->get('foo')); } // -------------------------------------------------------------------- public function test_get_exist_with_xss_clean() { $_SERVER['REQUEST_METHOD'] = 'GET'; $_GET['harm'] = "Hello, i try to your site"; $this->assertArrayHasKey('harm', $this->input->get()); $this->assertEquals("Hello, i try to your site", $this->input->get('harm')); $this->assertEquals("Hello, i try to [removed]alert('Hack');[removed] your site", $this->input->get('harm', TRUE)); } // -------------------------------------------------------------------- public function test_post_not_exists() { $this->assertTrue($this->input->post() === array()); $this->assertTrue($this->input->post('foo') === NULL); } // -------------------------------------------------------------------- public function test_post_exist() { $_SERVER['REQUEST_METHOD'] = 'POST'; $_POST['foo'] = 'bar'; $this->assertArrayHasKey('foo', $this->input->post()); $this->assertEquals('bar', $this->input->post('foo')); } // -------------------------------------------------------------------- public function test_post_exist_with_xss_clean() { $_SERVER['REQUEST_METHOD'] = 'POST'; $_POST['harm'] = "Hello, i try to your site"; $this->assertArrayHasKey('harm', $this->input->post()); $this->assertEquals("Hello, i try to your site", $this->input->post('harm')); $this->assertEquals("Hello, i try to [removed]alert('Hack');[removed] your site", $this->input->post('harm', TRUE)); } // -------------------------------------------------------------------- public function test_post_get() { $_SERVER['REQUEST_METHOD'] = 'POST'; $_POST['foo'] = 'bar'; $this->assertEquals('bar', $this->input->post_get('foo')); } // -------------------------------------------------------------------- public function test_get_post() { $_SERVER['REQUEST_METHOD'] = 'GET'; $_GET['foo'] = 'bar'; $this->assertEquals('bar', $this->input->get_post('foo')); } // -------------------------------------------------------------------- public function test_cookie() { $_COOKIE['foo'] = 'bar'; $this->assertEquals('bar', $this->input->cookie('foo')); $this->assertNull($this->input->cookie('bar')); } // -------------------------------------------------------------------- public function test_server() { $this->assertEquals('GET', $this->input->server('REQUEST_METHOD')); } // -------------------------------------------------------------------- public function test_fetch_from_array() { $data = array( 'foo' => 'bar', 'harm' => 'Hello, i try to your site', ); $foo = $this->input->fetch_from_array($data, 'foo'); $harm = $this->input->fetch_from_array($data, 'harm'); $harmless = $this->input->fetch_from_array($data, 'harm', TRUE); $this->assertEquals('bar', $foo); $this->assertEquals("Hello, i try to your site", $harm); $this->assertEquals("Hello, i try to [removed]alert('Hack');[removed] your site", $harmless); $_SERVER['REQUEST_METHOD'] = 'POST'; $_POST['foo']['bar'] = 'baz'; $barArray = array('bar' => 'baz'); $this->assertEquals('baz', $this->input->post('foo[bar]')); $this->assertEquals($barArray, $this->input->post('foo[]')); $this->assertNull($this->input->post('foo[baz]')); } // -------------------------------------------------------------------- public function test_valid_ip() { $this->assertTrue($this->input->valid_ip('192.18.0.1')); $this->assertTrue($this->input->valid_ip('192.18.0.1', 'ipv4')); $this->assertFalse($this->input->valid_ip('555.0.0.0')); $this->assertFalse($this->input->valid_ip('2001:db8:0:85a3::ac1f:8001', 'ipv4')); // v6 tests $this->assertFalse($this->input->valid_ip('192.18.0.1', 'ipv6')); $ip_v6 = array( '2001:0db8:0000:85a3:0000:0000:ac1f:8001', '2001:db8:0:85a3:0:0:ac1f:8001', '2001:db8:0:85a3::ac1f:8001' ); foreach ($ip_v6 as $ip) { $this->assertTrue($this->input->valid_ip($ip)); $this->assertTrue($this->input->valid_ip($ip, 'ipv6')); } } // -------------------------------------------------------------------- public function test_method() { $_SERVER['REQUEST_METHOD'] = 'GET'; $this->assertEquals('get', $this->input->method()); $this->assertEquals('GET', $this->input->method(TRUE)); $_SERVER['REQUEST_METHOD'] = 'POST'; $this->assertEquals('post', $this->input->method()); $this->assertEquals('POST', $this->input->method(TRUE)); } // -------------------------------------------------------------------- public function test_is_ajax_request() { $this->assertFalse($this->input->is_ajax_request()); $_SERVER['HTTP_X_REQUESTED_WITH'] = 'test'; $this->assertFalse($this->input->is_ajax_request()); $_SERVER['HTTP_X_REQUESTED_WITH'] = 'XMLHttpRequest'; $this->assertTrue($this->input->is_ajax_request()); } // -------------------------------------------------------------------- public function test_ip_address() { $this->input->ip_address = '127.0.0.1'; $this->assertEquals('127.0.0.1', $this->input->ip_address()); // 127.0.0.1 is set in our Bootstrap file $this->input->ip_address = FALSE; $this->assertEquals('127.0.0.1', $this->input->ip_address()); // Invalid $_SERVER['REMOTE_ADDR'] = 'invalid_ip_address'; $this->input->ip_address = FALSE; // reset cached value $this->assertEquals('0.0.0.0', $this->input->ip_address()); $_SERVER['REMOTE_ADDR'] = '127.0.0.1'; // Proxy_ips tests $this->input->ip_address = FALSE; $this->factory->config->getConfig('security')->proxy_ips = array('127.0.0.3', '127.0.0.4', '127.0.0.2'); $_SERVER['HTTP_CLIENT_IP'] = '127.0.0.2'; $this->assertEquals('127.0.0.1', $this->input->ip_address()); // Invalid spoof $this->input->ip_address = FALSE; $this->factory->config->getConfig('security')->proxy_ips = 'invalid_ip_address'; $_SERVER['HTTP_CLIENT_IP'] = 'invalid_ip_address'; $this->assertEquals('127.0.0.1', $this->input->ip_address()); $this->input->ip_address = FALSE; $this->factory->config->getConfig('security')->proxy_ips = array('http://foo/bar/baz', '127.0.0.1/1'); $_SERVER['HTTP_CLIENT_IP'] = '127.0.0.1'; $this->assertEquals('127.0.0.1', $this->input->ip_address()); $this->input->ip_address = FALSE; $this->factory->config->getConfig('security')->proxy_ips = array('http://foo/bar/baz', '127.0.0.2'); $_SERVER['HTTP_CLIENT_IP'] = '127.0.0.2'; $_SERVER['REMOTE_ADDR'] = '127.0.0.2'; $this->assertEquals('127.0.0.2', $this->input->ip_address()); //IPv6 $this->input->ip_address = FALSE; $this->factory->config->getConfig('security')->proxy_ips = array('FE80:0000:0000:0000:0202:B3FF:FE1E:8329/1', 'FE80:0000:0000:0000:0202:B3FF:FE1E:8300/2'); $_SERVER['HTTP_CLIENT_IP'] = 'FE80:0000:0000:0000:0202:B3FF:FE1E:8300'; $_SERVER['REMOTE_ADDR'] = 'FE80:0000:0000:0000:0202:B3FF:FE1E:8329'; $this->assertEquals('FE80:0000:0000:0000:0202:B3FF:FE1E:8300', $this->input->ip_address()); $this->input->ip_address = FALSE; $_SERVER['REMOTE_ADDR'] = '127.0.0.1'; // back to reality } // -------------------------------------------------------------------- public function test_user_agent() { $_SERVER['HTTP_USER_AGENT'] = 'test'; $this->assertEquals('test', $this->input->user_agent()); } }