grahamcampbell / laravel-binput

An input protector for Laravel

What have I been up to recently?

I am the maintainer of the following popular repositories and organisations:

• https://github.com/vlucas/phpdotenv
• https://github.com/schmittjoh/php-option
• https://github.com/guzzle
• https://github.com/GrahamCampbell
• https://github.com/BitbucketPHP
• https://github.com/DigitalOceanPHP
• https://github.com/GitLabPHP
• https://github.com/chrome-php
• https://github.com/opis/closure
• https://github.com/laravel-auto-presenter/laravel-auto-presenter

I have also been actively contributing to:

• https://github.com/laravel/framework
• https://github.com/php-http

Newer projects:

• https://github.com/cloudevents/sdk-php

These lists are by no means exhaustive!

Any questions, or want to get involved, please get in touch. 🐘

Sponsor my work

If you use any of my packages, please consider sponsoring me!

Links

• Blog: Coming soon!
• Twitter: https://twitter.com/GrahamJCampbell
• StyleCI: https://styleci.io/

laravel-binput's Issues

[Proposal] Support For Other Encodings Besides UF8

Only utf8 is currently supported.

The proposed API examples for 3 functions:

// second (optional) parameter default to null where encoding will be autodetected
Binput::all($trim = true, $clean = true, $encoding = null);
Binput::only($keys = array('key'), $trim = true, $clean = true, $encoding = null);
Binput::get($key = null, $default = null, $trim = true, $clean = true, $encoding = null);

// here we are forcing the encoding to utf8
Binput::all($trim = true, $clean = true, $encoding = 'utf8');
Binput::only($keys = array('key'), $trim = true, $clean = true, $encoding = null);
Binput::get($key = null, $default = null, $trim = true, $clean = true, $encoding = null);

---

Related GrahamCampbell/Laravel-Security#15.

Allow keys to be null as in Laravel's Request class

Laravel's Request class allowes the $key parameter to be null for the methods old and input, which is not the case in your Binput class. E.g. Input::old() returns an array with all input parameters.

Please adapt this behaviour or at least mention this difference in the documentation. Currently the doc says "The [...] methods have an identical api to the methods found on the laravel request class ...", which is not exactly true.

PHP 5.3

Why do you require PHP 5.4, but still support Laravel 4.1, which requres PHP 5.3.7?

UPD:
I have PHP 5.3 on my hosting, and thats why I use Laravel 4.1 - so here is the connection ... But I can't use your package because it requires PHP 5.4.

Binput ignore validation rules

Hi,

I've tried to extend the Binput directly to my request, but it ignore all the validation rules.

//Request.php
 use GrahamCampbell\Binput\Binput;
 abstract class Request extends Binput
 {

  }

 //UserRequest
  public function rules()
   {
     return [
        'email'             => 'required|email|unique:users,email',
        'password'          => 'required|numeric|digits:6',
    ];
  }

It works perfectly. Everything is clean and trim. But if I try to not fill the email field. But it pass the validation request.

Am I doing mistake or is this how binput works?
Thanks

Update to Laravel 5.6

Testing

We need some unit tests...

Call to undefined method GrahamCampbell\Binput\Facades\Binput::get()

Error:
FatalErrorException in Facade.php line 210: Call to undefined method GrahamCampbell\Binput\Facades\Binput::get()
CODE:
Route::get('test', function(){
$test = BInput::get('test');
return $test;
});
test:
http://localhost/test?test=hello

Directional unicode characters

https://i.imgur.com/kqMWdSg.png

‮ should output as ‮

‮ should output as ‮

N.B after posting, it appears even GitHub hasn't yet fixed that either, however they have in code blocks as seen above (in editor perspective: http://i.imgur.com/n2xdgJp.png)

That would be an RTL (Right-to-Left) unicode character, there are a few others which alter the layout of text which should also be addressed

[Question] Benefits of CodeIgniter Security vs HTML Purifier?

I was wondering what the benefits are, if any, of using the CodeIgniter Security class instead of the single-purpose HTML Purifier library. I don't actually have any preference for one or the other, just curious about your reasoning.

I really like Binput's approach of wrapping Illuminate\Http\Request for transparent input sanitization. It seems like this could even be used with FormRequest as well (clean before validation), no?

It looks like an HTML Purifier-based library like etcinit/purifier could function as a drop-in replacement for Laravel-Security, since they both implement a simple clean() method.

Extend the readme

Hey @GrahamCampbell I actually am not 100% sure what this does, and how it does what it does. 😄 Could you maybe add a section to explain what it does and also another one with actual usage examples?

From the tests I gathered that it is input sanitisation, but to what extend, and what is actually possible with it? Some more real code examples would be great, thanks.

Support files input

Hi,
When I'm using this package and trying to pass input which contain file (I've tried image),
It filter the image and converted the object to string, which cause it to fail in the laravel image validation.

Mor.

XSS

[REDACTED]

input() bug

To maintain 'identical api' with the laravel request class the package should support calling input() with no parameters. Currently it errors out due to lack of a parameter.

update required for laravel/framework 4.2.*

Please make i compatible laravel 4.2.* i can not update 4.1 to 4.2 just because of this package

No stable v11.x version is available via Composer

Hello,

When upgrading a Laravel application to v10.x of the Laravel framework, I get the following error message from Composer:

composer.json requires graham-campbell/binput ^11.0, found graham-campbell/binput[11.0.x-dev] but it does not match your minimum-stability.

Browsing https://packagist.org/packages/graham-campbell/binput, it looks like v11.0 is not available there (only 11.0.x-dev). I'd prefer not to drop my minimum-stability (to install 11.0.x-dev), is a v11.0 published release in the works? 🙏

Binput::all() correct the request class

 use Illuminate\Illuminate\Http\Request;
by 
use Illuminate\Http\Request;