From 3fdd6f5eab7d1867ec51a4f066aa0d60f0fcc295 Mon Sep 17 00:00:00 2001 From: Miraty Date: Fri, 18 Feb 2022 22:51:32 +0100 Subject: [PATCH] Return HTTP 400 when rejecting form submission --- index.php | 41 ++++++++++++++++++++++++++--------------- 1 file changed, 26 insertions(+), 15 deletions(-) diff --git a/index.php b/index.php index 9c71e08..31b420e 100755 --- a/index.php +++ b/index.php @@ -54,42 +54,53 @@ if ( AND isset($_POST['mainColor']) ) { - if (strlen($_POST['txt']) >= 1 AND strlen($_POST['txt']) <= 4096) + if (strlen($_POST['txt']) >= 1 AND strlen($_POST['txt']) <= 4096) { $params['txt'] = $_POST['txt']; - else + } else { + http_response_code(400); exit("Wrong value for txt"); + } - if ($_POST['redundancy'] === "low" OR $_POST['redundancy'] === "medium" OR $_POST['redundancy'] === "quartile" OR $_POST['redundancy'] === "high") + if ($_POST['redundancy'] === "low" OR $_POST['redundancy'] === "medium" OR $_POST['redundancy'] === "quartile" OR $_POST['redundancy'] === "high") { $params['redundancy'] = $_POST['redundancy']; - else + } else { + http_response_code(400); exit("Wrong value for redundancy"); + } - if (is_numeric($_POST['margin']) AND $_POST['margin'] >= 0 AND $_POST['margin'] <= 1024) + if (is_numeric($_POST['margin']) AND $_POST['margin'] >= 0 AND $_POST['margin'] <= 1024) { $params['margin'] = $_POST['margin']; - else if (empty($_POST['margin'])) + } else if (empty($_POST['margin'])) { $params['margin'] = NULL; - else + } else { + http_response_code(400); exit("Wrong value for margin"); + } - if (is_numeric($_POST['size']) AND $_POST['size'] >= 1 AND $_POST['size'] <= 4096) + if (is_numeric($_POST['size']) AND $_POST['size'] >= 1 AND $_POST['size'] <= 4096) { $params['size'] = $_POST['size']; - else if (empty($_POST['size'])) + } else if (empty($_POST['size'])) { $params['size'] = NULL; - else + } else { + http_response_code(400); exit("Wrong value for size"); + } - if (preg_match("/^#[abcdefABCDEF0-9]{6}$/", $_POST['bgColor'])) + if (preg_match("/^#[abcdefABCDEF0-9]{6}$/", $_POST['bgColor'])) { $params['bgColor'] = substr($_POST['bgColor'], -6); - else + } else { + http_response_code(400); exit("Wrong value for bgColor"); + } - if (preg_match("/^#[abcdefABCDEF0-9]{6}$/", $_POST['mainColor'])) + if (preg_match("/^#[abcdefABCDEF0-9]{6}$/", $_POST['mainColor'])) { $params['mainColor'] = substr($_POST['mainColor'], -6); - else + } else { + http_response_code(400); exit("Wrong value for mainColor"); + } $validFormSubmitted = true; - } ?>