Validatsiya va tozalash

// Har bir misol qat'iy turlar rejimida ishlaydi.

$kirishlar = [
    "[email protected]",
    "husanboy@example",
    "  [email protected]  ",
    "<script>alert(1)</script>@example.com",
    "",
];

printf("%-42s %-10s %s\n", "KIRISH", "TEKSHIR", "TOZALANGAN");
echo str_repeat("-", 74) . "\n";

foreach ($kirishlar as $k) {
    $tekshir = filter_var(trim($k), FILTER_VALIDATE_EMAIL);
    $toza    = filter_var($k, FILTER_SANITIZE_EMAIL);

    printf(
        "%-42s %-10s %s\n",
        mb_strlen($k) > 40 ? mb_substr($k, 0, 37) . "..." : "'{$k}'",
        $tekshir === false ? "RAD" : "OK",
        $toza === "" ? "(bo'sh)" : $toza
    );
}

$sinovlar = [
    ["42",                    FILTER_VALIDATE_INT,   "butun son"],
    ["3.14",                  FILTER_VALIDATE_FLOAT, "kasr son"],
    ["true",                  FILTER_VALIDATE_BOOL,  "mantiqiy"],
    ["yes",                   FILTER_VALIDATE_BOOL,  "mantiqiy"],
    ["ha",                    FILTER_VALIDATE_BOOL,  "mantiqiy"],
    ["[email protected]",       FILTER_VALIDATE_EMAIL, "email"],
    ["https://softromeda.uz", FILTER_VALIDATE_URL,   "URL"],
    ["softromeda.uz",         FILTER_VALIDATE_URL,   "URL"],
    ["192.168.1.1",           FILTER_VALIDATE_IP,    "IP manzil"],
    ["999.1.1.1",             FILTER_VALIDATE_IP,    "IP manzil"],
];

printf("%-24s %-12s %s\n", "QIYMAT", "TUR", "NATIJA");
echo str_repeat("-", 56) . "\n";

foreach ($sinovlar as [$qiymat, $filtr, $nom]) {
    $natija = filter_var($qiymat, $filtr, FILTER_NULL_ON_FAILURE);
    printf(
        "%-24s %-12s %s\n",
        "'{$qiymat}'",
        $nom,
        $natija === null ? "rad etildi" : var_export($natija, true)
    );
}

final class Tekshiruv
{
    private array $xatolar = [];

    public function __construct(private readonly array $malumot) {}

    public function majburiy(string $maydon, string $xabar): self
    {
        $q = trim((string) ($this->malumot[$maydon] ?? ""));
        if ($q === "") {
            $this->xatoQosh($maydon, $xabar);
        }
        return $this;
    }

    public function uzunlik(string $maydon, int $eng_kam, int $eng_kop, string $xabar): self
    {
        $q = trim((string) ($this->malumot[$maydon] ?? ""));
        $n = mb_strlen($q);
        if ($q !== "" && ($n < $eng_kam || $n > $eng_kop)) {
            $this->xatoQosh($maydon, $xabar);
        }
        return $this;
    }

    public function email(string $maydon, string $xabar): self
    {
        $q = trim((string) ($this->malumot[$maydon] ?? ""));
        if ($q !== "" && !filter_var($q, FILTER_VALIDATE_EMAIL)) {
            $this->xatoQosh($maydon, $xabar);
        }
        return $this;
    }

    public function royxatdan(string $maydon, array $ruxsat, string $xabar): self
    {
        $q = $this->malumot[$maydon] ?? null;
        if ($q !== null && !in_array($q, $ruxsat, true)) {
            $this->xatoQosh($maydon, $xabar);
        }
        return $this;
    }

    private function xatoQosh(string $maydon, string $xabar): void
    {
        $this->xatolar[$maydon] ??= $xabar;
    }

    public function toqrimi(): bool
    {
        return $this->xatolar === [];
    }

    public function xatolar(): array
    {
        return $this->xatolar;
    }
}

// --- Ishlatish ---
$formalar = [
    "to'g'ri" => [
        "ism" => "Husanboy", "email" => "[email protected]",
        "xabar" => "Assalomu alaykum, savolim bor edi.", "mavzu" => "savol",
    ],
    "xatoli" => [
        "ism" => "H", "email" => "notogri-email",
        "xabar" => "qisqa", "mavzu" => "boshqa",
    ],
];

foreach ($formalar as $nom => $malumot) {
    $t = (new Tekshiruv($malumot))
        ->majburiy("ism", "Ism kiritilishi shart.")
        ->uzunlik("ism", 2, 50, "Ism 2-50 belgi bo'lsin.")
        ->majburiy("email", "Email kiritilishi shart.")
        ->email("email", "Email manzili noto'g'ri.")
        ->uzunlik("xabar", 10, 1000, "Xabar kamida 10 belgi bo'lsin.")
        ->royxatdan("mavzu", ["savol", "taklif", "shikoyat"], "Mavzu tanlanmagan.");

    echo "Forma: {$nom}\n";
    if ($t->toqrimi()) {
        echo "  hammasi joyida\n";
    } else {
        foreach ($t->xatolar() as $maydon => $xabar) {
            printf("  %-8s %s\n", $maydon, $xabar);
        }
    }
    echo "\n";
}

$naqshlar = [
    "telefon"  => '/^\+998[0-9]{9}$/',
    "parol"    => '/^(?=.*[a-z])(?=.*[A-Z])(?=.*\d).{8,}$/',
    "slug"     => '/^[a-z0-9]+(?:-[a-z0-9]+)*$/',
    "sana"     => '/^\d{4}-\d{2}-\d{2}$/',
];

$sinovlar = [
    "telefon" => ["+998901234567", "998901234567", "+99890123456"],
    "parol"   => ["Parol123", "parol123", "Pa1"],
    "slug"    => ["zamonaviy-php", "Zamonaviy-PHP", "ikki--tire"],
    "sana"    => ["2024-09-01", "2024-9-1", "01.09.2024"],
];

foreach ($sinovlar as $tur => $qiymatlar) {
    echo "{$tur}:\n";
    foreach ($qiymatlar as $q) {
        $mos = preg_match($naqshlar[$tur], $q) === 1;
        printf("  %-18s %s\n", "'{$q}'", $mos ? "OK" : "rad etildi");
    }
    echo "\n";
}

function faylniTekshir(array $fayl, array $ruxsat, int $engKopBayt): ?string
{
    if (($fayl["error"] ?? UPLOAD_ERR_NO_FILE) !== UPLOAD_ERR_OK) {
        return match ($fayl["error"]) {
            UPLOAD_ERR_INI_SIZE, UPLOAD_ERR_FORM_SIZE => "Fayl juda katta.",
            UPLOAD_ERR_PARTIAL   => "Fayl to'liq yuklanmadi.",
            UPLOAD_ERR_NO_FILE   => "Fayl tanlanmagan.",
            default              => "Yuklashda xatolik.",
        };
    }

    if ($fayl["size"] > $engKopBayt) {
        return "Fayl hajmi " . round($engKopBayt / 1024 / 1024, 1) . " MB dan oshmasin.";
    }

    // MUHIM: kengaytmaga emas, HAQIQIY turga qaraymiz
    $finfo = new finfo(FILEINFO_MIME_TYPE);
    $turi = $finfo->file($fayl["tmp_name"]);

    if (!in_array($turi, $ruxsat, true)) {
        return "Bu turdagi fayl qabul qilinmaydi.";
    }

    return null;   // xato yo'q
}

// Ishlatish
$xato = faylniTekshir(
    $_FILES["rasm"] ?? [],
    ["image/jpeg", "image/png", "image/webp"],
    2 * 1024 * 1024
);