140 lines
3.7 KiB
PHP
140 lines
3.7 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of Respect/Validation.
|
|
*
|
|
* (c) Alexandre Gomes Gaigalas <alexandre@gaigalas.net>
|
|
*
|
|
* For the full copyright and license information, please view the "LICENSE.md"
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Respect\Validation\Rules;
|
|
|
|
use Respect\Validation\Exceptions\ComponentException;
|
|
|
|
class Ip extends AbstractRule
|
|
{
|
|
public $ipOptions;
|
|
|
|
public $networkRange;
|
|
|
|
public function __construct($ipOptions = null)
|
|
{
|
|
if (is_int($ipOptions)) {
|
|
$this->ipOptions = $ipOptions;
|
|
|
|
return;
|
|
}
|
|
|
|
$this->networkRange = $this->parseRange($ipOptions);
|
|
}
|
|
|
|
protected function parseRange($input)
|
|
{
|
|
if ($input === null || $input == '*' || $input == '*.*.*.*'
|
|
|| $input == '0.0.0.0-255.255.255.255') {
|
|
return;
|
|
}
|
|
|
|
$range = ['min' => null, 'max' => null, 'mask' => null];
|
|
|
|
if (strpos($input, '-') !== false) {
|
|
list($range['min'], $range['max']) = explode('-', $input);
|
|
} elseif (strpos($input, '*') !== false) {
|
|
$this->parseRangeUsingWildcards($input, $range);
|
|
} elseif (strpos($input, '/') !== false) {
|
|
$this->parseRangeUsingCidr($input, $range);
|
|
} else {
|
|
throw new ComponentException('Invalid network range');
|
|
}
|
|
|
|
if (!$this->verifyAddress($range['min'])) {
|
|
throw new ComponentException('Invalid network range');
|
|
}
|
|
|
|
if (isset($range['max']) && !$this->verifyAddress($range['max'])) {
|
|
throw new ComponentException('Invalid network range');
|
|
}
|
|
|
|
return $range;
|
|
}
|
|
|
|
protected function fillAddress(&$input, $char = '*')
|
|
{
|
|
while (substr_count($input, '.') < 3) {
|
|
$input .= '.'.$char;
|
|
}
|
|
}
|
|
|
|
protected function parseRangeUsingWildcards($input, &$range)
|
|
{
|
|
$this->fillAddress($input);
|
|
|
|
$range['min'] = strtr($input, '*', '0');
|
|
$range['max'] = str_replace('*', '255', $input);
|
|
}
|
|
|
|
protected function parseRangeUsingCidr($input, &$range)
|
|
{
|
|
$input = explode('/', $input);
|
|
$this->fillAddress($input[0], '0');
|
|
|
|
$range['min'] = $input[0];
|
|
$isAddressMask = strpos($input[1], '.') !== false;
|
|
|
|
if ($isAddressMask && $this->verifyAddress($input[1])) {
|
|
$range['mask'] = sprintf('%032b', ip2long($input[1]));
|
|
|
|
return;
|
|
}
|
|
|
|
if ($isAddressMask || $input[1] < 8 || $input[1] > 30) {
|
|
throw new ComponentException('Invalid network mask');
|
|
}
|
|
|
|
$range['mask'] = sprintf('%032b', ip2long(long2ip(~(pow(2, (32 - $input[1])) - 1))));
|
|
}
|
|
|
|
public function validate($input)
|
|
{
|
|
return $this->verifyAddress($input) && $this->verifyNetwork($input);
|
|
}
|
|
|
|
protected function verifyAddress($address)
|
|
{
|
|
return (boolean) filter_var(
|
|
$address,
|
|
FILTER_VALIDATE_IP,
|
|
[
|
|
'flags' => $this->ipOptions,
|
|
]
|
|
);
|
|
}
|
|
|
|
protected function verifyNetwork($input)
|
|
{
|
|
if ($this->networkRange === null) {
|
|
return true;
|
|
}
|
|
|
|
if (isset($this->networkRange['mask'])) {
|
|
return $this->belongsToSubnet($input);
|
|
}
|
|
|
|
$input = sprintf('%u', ip2long($input));
|
|
|
|
return bccomp($input, sprintf('%u', ip2long($this->networkRange['min']))) >= 0
|
|
&& bccomp($input, sprintf('%u', ip2long($this->networkRange['max']))) <= 0;
|
|
}
|
|
|
|
protected function belongsToSubnet($input)
|
|
{
|
|
$range = $this->networkRange;
|
|
$min = sprintf('%032b', ip2long($range['min']));
|
|
$input = sprintf('%032b', ip2long($input));
|
|
|
|
return ($input & $range['mask']) === ($min & $range['mask']);
|
|
}
|
|
}
|