[B! validation] sugyanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

sugyan id:sugyan

validationã«é–¢ã™ã‚‹sugyanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

CMSå››å¤©çŽ‹ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³çŠ¶æ³ã‚’èª¿æŸ»ã—ãŸã¨ã“ã‚æ„å¤–ãªçµæžœã«ãªã£ãŸ
ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã§SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã‚’ãƒ–ãƒãƒƒã‚¯ã—ãªã„CMSãŒå¤šã„ ãƒã‚°ã‚¤ãƒ³IDã«ãŠã‘ã‚‹å…¸åž‹çš„ãªSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã¨ã—ã¦ã€'OR 1=1# ã‚’ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ãŒãƒ–ãƒãƒƒã‚¯ã™ã‚‹ã‹ã©ã†ã‹ã‚’ç¢ºèªã—ã¾ã—ãŸã€‚ãƒã‚°ã‚¤ãƒ³IDã¨ã—ã¦è¨±å®¹ã•ã‚Œã‚‹æ–‡å—ã‚’è¦‹ã‚‹é™ã‚Šã€WordPressã€Joomlaã€Drupalã¯ãƒ–ãƒãƒƒã‚¯ã—ãã†ã§ã™ãŒã€çµæžœã¯ä¸‹è¨˜ã®é€šã‚Šã§ã™ã€‚ WordPress: ãƒ–ãƒãƒƒã‚¯ã—ãªã„ Joomla: ãƒ–ãƒãƒƒã‚¯ã™ã‚‹ Drupal: ãƒ–ãƒãƒƒã‚¯ã—ãªã„ MovableType: ãƒ–ãƒãƒƒã‚¯ã—ãªã„ ã¨ã„ã†ã“ã¨ã§ã€æ„å¤–ãªã“ã¨ã«ã€ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã§SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã‚’æ¢ã‚ã‚‹ã®ã¯Joomlaã®ã¿ã¨ã„ã†çµæžœã§ã—ãŸã€‚ ãƒã‚°ã‚¤ãƒ³IDã«ãƒŒãƒ«ãƒã‚¤ãƒˆã‚„æ”¹è¡ŒãŒä½¿ãˆã‚‹CMSãŒã‚ã‚‹ ãƒ†ã‚¹ãƒˆã‚’ã—ã¦ã„ã¦ã‚‚ã£ã¨ã‚‚ã³ã£ãã‚Šã—ãŸã“ã¨ã®ä¸€ã¤ãŒã“ã‚Œã§ã™ã€‚Joomlaã¨MovableTypeã¯ãƒŒãƒ«ãƒã‚¤ãƒˆã‚„æ”¹è¡Œãªã©åˆ¶å¾¡æ–‡å—ãŒãƒã‚°ã‚¤ãƒ³IDã¨ã—ã¦
sugyan 2015/06/09
cms

security

validation
ãƒªãƒ³ã‚¯
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ ^ ã¨ $ ã§ã¯ãªã \A ã¨ \z ã‚’ä½¿ãŠã†
æ£è¦è¡¨ç¾ã«ã‚ˆã‚‹ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ç‰ã§ã€å®Œå…¨ä¸€è‡´ã‚’ç¤ºã™ç›®çš„ã§ ^ ã¨ $ ã‚’ç”¨ã„ã‚‹æ–¹æ³•ãŒä¸€èˆ¬çš„ã§ã™ãŒã€æ£ã—ãã¯ \A ã¨ \z ã‚’ç”¨ã„ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚Rubyã®å ´åˆ ^ ã¨ $ ã‚’ä½¿ã£ã¦å®Œå…¨ä¸€è‡´ã®ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¡Œã†ã¨è„†å¼±æ€§ãŒå…¥ã‚Šã‚„ã™ã„ãƒ¯ãƒŠã¨ãªã‚Šã¾ã™ã€‚Perlã‚„PHPã®å ´åˆã¯ã€Rubyç¨‹ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒä¸å…·åˆãŒç”Ÿã˜ã‚‹ã®ã§ \A ã¨ \z ã‚’ä½¿ã†ã‚ˆã†ã«ã—ã¾ã—ã‚‡ã†ã€‚ ã¯ã˜ã‚ã« å¤§åž£ã•ã‚“ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€ŒPHPerå‘ã‘ã€Ruby/Railsã®è½ã¨ã—ç©´ã€ã«ã¯ã€Rubyã®è½ã¨ã—ç©´ã¨ã—ã¦ã€å®Œå…¨ä¸€è‡´æ¤œç´¢ã®æŒ‡å®šã¨ã—ã¦ã€æ£è¦è¡¨ç¾ã® ^ ã¨ $ ã‚’æŒ‡å®šã™ã‚‹ä¾‹ãŒã€Ruby on Rails Security Guideã‹ã‚‰ã®å¼•ç”¨ã¨ã—ã¦ç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã®æ£è¦è¡¨ç¾ã¯ã€XSSå¯¾ç–ã¨ã—ã¦ã€httpã‚¹ã‚ãƒ¼ãƒ ã‚ã‚‹ã„ã¯httpsã‚¹ã‚ãƒ¼ãƒ ã®URLã®ã¿ã‚’è¨±å¯ã™ã‚‹æ£è¦è¡¨ç¾ã®ã¤ã‚‚ã‚Šã§ã™ã€‚ /^https?:\/\/[^\n]+$/
sugyan 2014/03/04
validation

security

regexp
ãƒªãƒ³ã‚¯
Web Application ã® validation ã¯ã©ã®ãƒ¬ã‚¤ãƒ¤ãƒ¼ã§ã‹ã‘ã‚‹ã¹ãã‹ - tokuhirom's blog
æ•°å¹´å‰ã«ã‚‚åŒã˜ã“ã¨ã‹ã„ãŸæ°—ãŒã™ã‚‹ã‘ã©ã€æœ€è¿‘ã®çŠ¶æ³ã«ã‚ã‚ã›ã¦ã‹ã„ã¦ã¿ã‚‹ã€‚ é€”ä¸ã§é¢å€’ã«ãªã£ã¦ãã¦èª¬æ˜ŽãŒé›‘ã«ãªã£ã¦ã„ã‚‹ç‚¹ã‚’ã”å®¹èµ¦ãã ã•ã„ã€‚ è¨€ã„ãŸã„ã“ã¨ã¯ã€Œçµå±€ã€æ˜”ã¯ã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰ã§æ‡‡åˆ‡ä¸å¯§ãªã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’å‡ºã™ãŸã‚ã«Modelã§ã¯ãªãControllerã§ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã«é–¢ã™ã‚‹çŸ¥è˜ãŒå¿…è¦ã ã£ãŸã‘ã© ä»Šã¯JavaScriptã§ã‚„ã‚‹ã‹ã‚‰ä¸è¦ã ã‚ˆãï¼‘ï¼‘ï¼‘ã€ã£ã¦ã“ã¨ã§ã™ã€‚ ã“ã®è¡¨é¡Œã¯ã€ã‚ˆãè©±é¡Œã«ã‚ãŒã‚‹ã¨ã“ã‚ãªã®ã ãŒã€ç†æƒ³è«–ã¨ã—ã¦ã¯ Model, Controller, Client side ã®ã„ãšã‚Œã«ãŠã„ã¦ã‚‚ãã£ã¡ã‚Šã¨ validation ã‚’è¡Œã†ã“ã¨ãŒã®ãžã¾ã—ã„ã€‚ ã—ã‹ã—ã€å®Ÿéš›ã«ã¯ãªã‹ãªã‹é¢å€’ã§ã‚ã‚‹ã€‚ã¨ã„ã†ã“ã¨ã§ã€ã©ã“ã‚’ã¯ã¶ãã‹ã¨ã„ã†ã¨ Controller ã«ãŠã‘ã‚‹ Validation ã§ã‚ã‚ã†ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«å¯¾ã™ã‚‹è¦ªåˆ‡ãªãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ JS ã®å´ã§ã ã™ã®ãŒç†æƒ³çš„ã€‚model ã® validat
sugyan 2013/11/26
webapp

validation
ãƒªãƒ³ã‚¯
ã‚†ãƒ¼ã™ã‘ã¹ãƒ¼æ—¥è¨˜
ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰ã®POSTç‰ã•ã‚ŒãŸå…¥åŠ›å€¤ã®å¦¥å½“æ€§ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ Validation ã‚’ã©ã“ã§ã‚„ã‚‹ã‹å•é¡ŒãŒå€‹äººçš„ã«ã‚ã‚Šã¾ã—ã¦ã€œã€DBã‚’ä½¿ã‚ãªã„ã‚±ãƒ¼ã‚¹ãªã‚‰ã°ã„ã‚ã‚†ã‚‹FomrValidator::*ã‚’ä½¿ã£ã¦Controllerã§ã‚„ã‚Œã°ã„ã„ã®ã§ã™ãŒã€Modelã‚’çµŒç”±ã™ã‚‹ã‚ˆã†ãªã‚¢ãƒ—ãƒªã ã¨Controllerã ã‘ã˜ã‚ƒä¸å®‰ã‚ˆãã‡ã€œã€Modelã ã‘ä½¿ã†æ™‚ã‚‚ã‚ã‚‹ã—ã€Modelå˜ä½“ã®ãƒ†ã‚¹ãƒˆã§å†ç¾å‡ºæ¥ãªã„ã‚ˆãã€œãªã‚“ã¦æ€ã£ã¦ã¾ã™ã€‚ã§ã€å®Ÿéš›ã®å®Ÿè£…ã‚’Controllerã§ã¯FormValidator::Liteã€Modelã®ä¸€éƒ¨ã«Data::Validatorã‚’ä½¿ã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€ãªã‚“ã‹ã‚³ãƒ¬ã‚‚åŠ¹çŽ‡æ‚ªã„æ„Ÿã˜ã—ã¦ãŸã‚“ã§ã€ã¡ã‚‡ã„ã¨å®Ÿé¨“çš„ã«ç†æƒ³ã®ä¸€ã¤ã‚’å®Ÿè£…ã—ã¦ã¿ã¾ã—ãŸã€‚ ã“ã‚“ãªæ¡ä»¶ã§ã™ã€‚ ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’ç°¡å˜ã«è¨å®šã—ãŸã„ã®ã§Validationãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«ã¯FormValidator::Liteã‚’ä½¿ã† è‰²ã€…éŒ¯èª¤ã—ã¦ã„ãŸã‚‰OR
sugyan 2013/07/24
perl

webapp

ORM

validation
ãƒªãƒ³ã‚¯
web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å…¥åŠ›ã® validator ã®æ‚©ã¿ã‚’ - soh335 memo
æœ€è¿‘ã¯è€ƒãˆã‚‹äº‹ãŒå¤šãã¦ã€å…¨ç„¶ã—ã£ãã‚Šã“ãªãã¦å›°ã£ã¦ã‚‹ã€‚ rails çš„ãª model ã« validator ã‚’å¯„ã›ã‚‹ã®ãŒè‰¯ã„æ™‚ã‚‚ã‚ã‚‹ã—ã€ã‚„ãªã¨ãã‚‚ã‚ã‚‹ã¨æ€ã£ã¦ã„ã¦ã€ controller ã§ formvalidator ã« request object ã‚’ã¶ã¤ã‘ã¦ validate ã™ã‚‹ã¨ã€model ã‚’ä»–ã® controller ( api ã¨ web, admin ã¨ã‹ ) ã§ä½¿ã†æ™‚ã«ä¸å®‰ã ãªãã¨ã¯æ€ã†ã€‚ ã‘ã©ã€åŒã˜ valiadte rule ã‚’å„ controller ã§ã‚„ã‚‹ã®ã¯ã¡ã‚‡ã£ã¨... ã¿ãŸã„ãªæ„Ÿã˜ã‚‚ã™ã‚‹ã€‚ page parameter ã¯ 1 ã‹ã‚‰ 200 ã¾ã§ã¿ãŸã„ãªã®ã¯ã‚„ã£ã¦ãŠã„ãŸã»ã†ãŒãªã‚“ã¨ãªãå®‰å¿ƒã ãªãã¨ã„ã†ã®ã‚‚ã‚ã‚‹ã®ã§ã€ã˜ã‚ƒã‚ data::validator ã§ page åž‹ã‚’ä½œã‚‹ã‹ ? ã¿ãŸã„ãªã“ã¨ã‚‚è€ƒãˆã‚‹ã€‚ ã‘ã©ã€å…¨éƒ¨ã® parameter ã®åž‹ã‚’ä½œã£ã¦ã‚‹
sugyan 2013/05/28
perl

webapp

validation
ãƒªãƒ³ã‚¯
HTML5ã®client-side form validationã§æ›¸ã‹ã‚ŒãŸattributeã‹ã‚‰validation rulesã‚’æŠ½å‡ºã—ã€client/serverã§ãƒ«ãƒ¼ãƒ«ã‚’å…±é€šåŒ–ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’æ›¸ã„ãŸ - Kentaro Kuribayashi's blog
Validation Ruleã®è¨˜è¿°ã£ã¦ã‘ã£ã“ã†é¢å€’ã§ã€ã†ã¾ã„æ–¹æ³•ã‚’æ€ã„ã¤ã‘ãªã„ã®ã§ã„ãŸã®ã§ã™ãŒã€ä»Šæ—¥ã€ãªã‚“ã¨ãªãHTML5ã«client-side form validation specãªã‚“ã¦ã‚‚ã®ãŒã‚ã‚‹ã‚“ã ã‹ã‚‰ã€ãã‚Œã‚’ä½¿ã£ãŸã‚‰ã„ã„ã‚“ã˜ã‚ƒãªã„ã‹ã¨æ€ã£ã¦ã€ã¡ã‚‡ã£ã¨å®Ÿè£…ã—ã¦ã¿ã¾ã—ãŸã€‚ http://prepan.org/module/3Yz7PYrBGs https://github.com/kentaro/HTML-ValidationRules ä»¥ä¸‹ã®ã‚ˆã†ãªãƒ¡ãƒªãƒƒãƒˆãŒã‚ã‚‹ã®ã§ã¯ãªã„ã‹ã¨æ€ã£ã¦ã„ã¾ã™ã€‚ client-side form validationã‚’ä½¿ã„ã¤ã¤ã€server-sideã§ã‚‚åŒã˜ãƒ«ãƒ¼ãƒ«ã‚’åˆ¥ã®å½¢å¼ã§æ›¸ãã®ã¯ç„¡é§„æ„Ÿã€‚ HTML5ãŒã€validation rulesã‚’HTMLã¨ã„ã†ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«ã‚ˆã£ã¦å®šã‚ã¦ã„ã‚‹ã¨ã¿ãªã›ã°ã€client-side/server-sideä¸¡æ–¹ã§ãã‚Œ
sugyan 2011/11/02
perl

HTML5

validation
ãƒªãƒ³ã‚¯
1