Skip to content

Y
yii2
Commit a89d574a by Mark
Options

updated FileValidator , CHANGELOG.md , UPGRADE.md guides , tests fixed

parent 64deaad7
Showing with 37 additions and 32 deletions
framework/CHANGELOG.md
...@@ -110,6 +110,7 @@ Yii Framework 2 Change Log ...@@ -110,6 +110,7 @@ Yii Framework 2 Change Log
- Chg #3640: All cookies are now httpOnly by default in order to increase overall security (samdark) - Chg #3640: All cookies are now httpOnly by default in order to increase overall security (samdark)
- Chg #3687: Default `sourceLanguage` and `language` are now `en-US` in order for i18n formatter to work correctly (samdark) - Chg #3687: Default `sourceLanguage` and `language` are now `en-US` in order for i18n formatter to work correctly (samdark)
- Chg #3804: Added `fileinfo` PHP extension to the basic requirement of Yii (Ragazzo) - Chg #3804: Added `fileinfo` PHP extension to the basic requirement of Yii (Ragazzo)
- Chg #3866: `FileValidator::types` attribute changed to `FileValidator::extensions` (Ragazzo)
- Chg: Replaced `clearAll()` and `clearAllAssignments()` in `yii\rbac\ManagerInterface` with `removeAll()`, `removeAllRoles()`, `removeAllPermissions()`, `removeAllRules()` and `removeAllAssignments()` (qiangxue) - Chg: Replaced `clearAll()` and `clearAllAssignments()` in `yii\rbac\ManagerInterface` with `removeAll()`, `removeAllRoles()`, `removeAllPermissions()`, `removeAllRules()` and `removeAllAssignments()` (qiangxue)
- Chg: Added `$user` as the first parameter of `yii\rbac\Rule::execute()` (qiangxue) - Chg: Added `$user` as the first parameter of `yii\rbac\Rule::execute()` (qiangxue)
- Chg: `yii\grid\DataColumn::getDataCellValue()` visibility is now `public` to allow accessing the value from a GridView directly (cebe) - Chg: `yii\grid\DataColumn::getDataCellValue()` visibility is now `public` to allow accessing the value from a GridView directly (cebe)
......
framework/UPGRADE.md
...@@ -53,3 +53,6 @@ Upgrade from Yii 2.0 Beta ...@@ -53,3 +53,6 @@ Upgrade from Yii 2.0 Beta
* Please update your main layout file by adding this line in the `<head>` section: `<?= Html::csrfMetaTags() ?>`. * Please update your main layout file by adding this line in the `<head>` section: `<?= Html::csrfMetaTags() ?>`.
This change is needed because `yii\web\View` no longer automatically generates CSRF meta tags due to issue #3358. This change is needed because `yii\web\View` no longer automatically generates CSRF meta tags due to issue #3358.
* `FileValidator::types` attribute was changed to `FileValidator::extensions` for consistency. If you use this attribute in your code you
should consider this replacement.
framework/validators/FileValidator.php
...@@ -29,13 +29,13 @@ class FileValidator extends Validator ...@@ -29,13 +29,13 @@ class FileValidator extends Validator
* extensions are allowed. * extensions are allowed.
* @see wrongType * @see wrongType
*/ */
public $types; public $extensions;
/** /**
* *
* @var boolean whether to check file type (extension) with mime-type. If extension produced by * @var boolean whether to check file type (extension) with mime-type. If extension produced by
* file mime-type check differs from uploaded file extension, file will be counted as not valid. * file mime-type check differs from uploaded file extension, file will be counted as not valid.
*/ */
public $checkTypeAgainstMime = true; public $checkExtensionByMimeType = true;
/** /**
* @var array|string a list of file MIME types that are allowed to be uploaded. * @var array|string a list of file MIME types that are allowed to be uploaded.
* This can be either an array or a string consisting of file MIME types * This can be either an array or a string consisting of file MIME types
...@@ -94,13 +94,13 @@ class FileValidator extends Validator ...@@ -94,13 +94,13 @@ class FileValidator extends Validator
public $tooSmall; public $tooSmall;
/** /**
* @var string the error message used when the uploaded file has an extension name * @var string the error message used when the uploaded file has an extension name
* that is not listed in [[types]]. You may use the following tokens in the message: * that is not listed in [[extensions]]. You may use the following tokens in the message:
* *
* - {attribute}: the attribute name * - {attribute}: the attribute name
* - {file}: the uploaded file name * - {file}: the uploaded file name
* - {extensions}: the list of the allowed extensions. * - {extensions}: the list of the allowed extensions.
*/ */
public $wrongType; public $wrongExtension;
/** /**
* @var string the error message used if the count of multiple uploads exceeds limit. * @var string the error message used if the count of multiple uploads exceeds limit.
* You may use the following tokens in the message: * You may use the following tokens in the message:
...@@ -136,8 +136,8 @@ class FileValidator extends Validator ...@@ -136,8 +136,8 @@ class FileValidator extends Validator
if ($this->tooMany === null) { if ($this->tooMany === null) {
$this->tooMany = Yii::t('yii', 'You can upload at most {limit, number} {limit, plural, one{file} other{files}}.'); $this->tooMany = Yii::t('yii', 'You can upload at most {limit, number} {limit, plural, one{file} other{files}}.');
} }
if ($this->wrongType === null) { if ($this->wrongExtension === null) {
$this->wrongType = Yii::t('yii', 'Only files with these extensions are allowed: {extensions}.'); $this->wrongExtension = Yii::t('yii', 'Only files with these extensions are allowed: {extensions}.');
} }
if ($this->tooBig === null) { if ($this->tooBig === null) {
$this->tooBig = Yii::t('yii', 'The file "{file}" is too big. Its size cannot exceed {limit, number} {limit, plural, one{byte} other{bytes}}.'); $this->tooBig = Yii::t('yii', 'The file "{file}" is too big. Its size cannot exceed {limit, number} {limit, plural, one{byte} other{bytes}}.');
...@@ -145,8 +145,8 @@ class FileValidator extends Validator ...@@ -145,8 +145,8 @@ class FileValidator extends Validator
if ($this->tooSmall === null) { if ($this->tooSmall === null) {
$this->tooSmall = Yii::t('yii', 'The file "{file}" is too small. Its size cannot be smaller than {limit, number} {limit, plural, one{byte} other{bytes}}.'); $this->tooSmall = Yii::t('yii', 'The file "{file}" is too small. Its size cannot be smaller than {limit, number} {limit, plural, one{byte} other{bytes}}.');
} }
if (!is_array($this->types)) { if (!is_array($this->extensions)) {
$this->types = preg_split('/[\s,]+/', strtolower($this->types), -1, PREG_SPLIT_NO_EMPTY); $this->extensions = preg_split('/[\s,]+/', strtolower($this->extensions), -1, PREG_SPLIT_NO_EMPTY);
} }
if ($this->wrongMimeType === null) { if ($this->wrongMimeType === null) {
$this->wrongMimeType = Yii::t('yii', 'Only files with these MIME types are allowed: {mimeTypes}.'); $this->wrongMimeType = Yii::t('yii', 'Only files with these MIME types are allowed: {mimeTypes}.');
...@@ -210,8 +210,8 @@ class FileValidator extends Validator ...@@ -210,8 +210,8 @@ class FileValidator extends Validator
return [$this->tooBig, ['file' => $file->name, 'limit' => $this->getSizeLimit()]]; return [$this->tooBig, ['file' => $file->name, 'limit' => $this->getSizeLimit()]];
} elseif ($this->minSize !== null && $file->size < $this->minSize) { } elseif ($this->minSize !== null && $file->size < $this->minSize) {
return [$this->tooSmall, ['file' => $file->name, 'limit' => $this->minSize]]; return [$this->tooSmall, ['file' => $file->name, 'limit' => $this->minSize]];
} elseif (!empty($this->types) && !$this->validateType($file)) { } elseif (!empty($this->extensions) && !$this->validateExtension($file)) {
return [$this->wrongType, ['file' => $file->name, 'extensions' => implode(', ', $this->types)]]; return [$this->wrongExtension, ['file' => $file->name, 'extensions' => implode(', ', $this->extensions)]];
} elseif (!empty($this->mimeTypes) && !in_array(FileHelper::getMimeType($file->tempName), $this->mimeTypes, true)) { } elseif (!empty($this->mimeTypes) && !in_array(FileHelper::getMimeType($file->tempName), $this->mimeTypes, true)) {
return [$this->wrongMimeType, ['file' => $file->name, 'mimeTypes' => implode(', ', $this->mimeTypes)]]; return [$this->wrongMimeType, ['file' => $file->name, 'mimeTypes' => implode(', ', $this->mimeTypes)]];
} else { } else {
...@@ -251,8 +251,7 @@ class FileValidator extends Validator ...@@ -251,8 +251,7 @@ class FileValidator extends Validator
*/ */
public function getSizeLimit() public function getSizeLimit()
{ {
$limit = ini_get('upload_max_filesize'); $limit = $this->sizeToBytes(ini_get('upload_max_filesize'));
$limit = $this->sizeToBytes($limit);
if ($this->maxSize !== null && $limit > 0 && $this->maxSize < $limit) { if ($this->maxSize !== null && $limit > 0 && $this->maxSize < $limit) {
$limit = $this->maxSize; $limit = $this->maxSize;
} }
...@@ -300,18 +299,20 @@ class FileValidator extends Validator ...@@ -300,18 +299,20 @@ class FileValidator extends Validator
* @param \yii\web\UploadedFile $file * @param \yii\web\UploadedFile $file
* @return boolean * @return boolean
*/ */
public function validateType($file) public function validateExtension($file)
{ {
if ($this->checkTypeAgainstMime) { $fileExtension = mb_strtolower($file->extension, 'utf-8');
if ($this->checkExtensionByMimeType) {
$extensionsByMimeType = FileHelper::getExtensionsByMimeType(FileHelper::getMimeType($file->tempName)); $extensionsByMimeType = FileHelper::getExtensionsByMimeType(FileHelper::getMimeType($file->tempName));
if (!in_array($file->extension, $extensionsByMimeType, true)) { if (!in_array($fileExtension, $extensionsByMimeType, true)) {
return false; return false;
} }
} }
if (!in_array($file->extension, $this->types, true)) { if (!in_array($fileExtension, $this->extensions, true)) {
return false; return false;
} }
......
tests/unit/data/validators/models/FakedValidationModel.php
...@@ -31,8 +31,8 @@ class FakedValidationModel extends Model ...@@ -31,8 +31,8 @@ class FakedValidationModel extends Model
return [ return [
[['val_attr_a', 'val_attr_b'], 'required', 'on' => 'reqTest'], [['val_attr_a', 'val_attr_b'], 'required', 'on' => 'reqTest'],
['val_attr_c', 'integer'], ['val_attr_c', 'integer'],
['attr_images', 'file', 'maxFiles' => 3, 'types' => ['png'], 'on' => 'validateMultipleFiles', 'checkTypeAgainstMime' => false], ['attr_images', 'file', 'maxFiles' => 3, 'extensions' => ['png'], 'on' => 'validateMultipleFiles', 'checkExtensionByMimeType' => false],
['attr_image', 'file', 'types' => ['png'], 'on' => 'validateFile', 'checkTypeAgainstMime' => false] ['attr_image', 'file', 'extensions' => ['png'], 'on' => 'validateFile', 'checkExtensionByMimeType' => false]
]; ];
} }
......
tests/unit/framework/validators/FileValidatorTest.php
...@@ -21,30 +21,30 @@ class FileValidatorTest extends TestCase ...@@ -21,30 +21,30 @@ class FileValidatorTest extends TestCase
public function testAssureMessagesSetOnInit() public function testAssureMessagesSetOnInit()
{ {
$val = new FileValidator(); $val = new FileValidator();
foreach (['message', 'uploadRequired', 'tooMany', 'wrongType', 'tooBig', 'tooSmall', 'wrongMimeType'] as $attr) { foreach (['message', 'uploadRequired', 'tooMany', 'wrongExtension', 'tooBig', 'tooSmall', 'wrongMimeType'] as $attr) {
$this->assertTrue(is_string($val->$attr)); $this->assertTrue(is_string($val->$attr));
} }
} }
public function testTypeSplitOnInit() public function testTypeSplitOnInit()
{ {
$val = new FileValidator(['types' => 'jpeg, jpg, gif']); $val = new FileValidator(['extensions' => 'jpeg, jpg, gif']);
$this->assertEquals(['jpeg', 'jpg', 'gif'], $val->types); $this->assertEquals(['jpeg', 'jpg', 'gif'], $val->extensions);
$val = new FileValidator(['types' => 'jpeg']); $val = new FileValidator(['extensions' => 'jpeg']);
$this->assertEquals(['jpeg'], $val->types); $this->assertEquals(['jpeg'], $val->extensions);
$val = new FileValidator(['types' => '']); $val = new FileValidator(['extensions' => '']);
$this->assertEquals([], $val->types); $this->assertEquals([], $val->extensions);
$val = new FileValidator(['types' => []]); $val = new FileValidator(['extensions' => []]);
$this->assertEquals([], $val->types); $this->assertEquals([], $val->extensions);
$val = new FileValidator(); $val = new FileValidator();
$this->assertEquals([], $val->types); $this->assertEquals([], $val->extensions);
$val = new FileValidator(['types' => ['jpeg', 'exe']]); $val = new FileValidator(['extensions' => ['jpeg', 'exe']]);
$this->assertEquals(['jpeg', 'exe'], $val->types); $this->assertEquals(['jpeg', 'exe'], $val->extensions);
} }
public function testMimeTypeSplitOnInit() public function testMimeTypeSplitOnInit()
...@@ -306,8 +306,8 @@ class FileValidatorTest extends TestCase ...@@ -306,8 +306,8 @@ class FileValidatorTest extends TestCase
public function testValidateAttributeType() public function testValidateAttributeType()
{ {
$val = new FileValidator([ $val = new FileValidator([
'types' => 'jpeg, jpg', 'extensions' => 'jpeg, jpg',
'checkTypeAgainstMime' => false, 'checkExtensionByMimeType' => false,
]); ]);
$m = FakedValidationModel::createWithAttributes( $m = FakedValidationModel::createWithAttributes(
[ [
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment