PHPackages                             firehed/input - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Validation & Sanitization](/categories/validation)
4. /
5. firehed/input

ActiveLibrary[Validation & Sanitization](/categories/validation)

firehed/input
=============

PHP Input Handling Tools

2.3.1(4y ago)213.3k[2 issues](https://github.com/Firehed/input/issues)[4 PRs](https://github.com/Firehed/input/pulls)2MITPHPPHP ^7.2 || ^8.0

Since Sep 1Pushed 7mo ago2 watchersCompare

[ Source](https://github.com/Firehed/input)[ Packagist](https://packagist.org/packages/firehed/input)[ RSS](/packages/firehed-input/feed)WikiDiscussions master Synced 1mo ago

READMEChangelog (9)Dependencies (4)Versions (23)Used By (2)

Input
=====

[](#input)

An input validation framework with a boring name

[![Test](https://github.com/Firehed/input/actions/workflows/test.yml/badge.svg)](https://github.com/Firehed/input/actions/workflows/test.yml)[![Static analysis](https://github.com/Firehed/input/actions/workflows/static-analysis.yml/badge.svg)](https://github.com/Firehed/input/actions/workflows/static-analysis.yml)[![Lint](https://github.com/Firehed/input/actions/workflows/lint.yml/badge.svg)](https://github.com/Firehed/input/actions/workflows/lint.yml)[![codecov](https://camo.githubusercontent.com/097ce17e070f0f479f489401c37ce8f36c9102ecaeec0d660744afc90a190d3b/68747470733a2f2f636f6465636f762e696f2f67682f466972656865642f696e7075742f6272616e63682f6d61737465722f67726170682f62616467652e7376673f746f6b656e3d67547a6c6e6c69335156)](https://codecov.io/gh/Firehed/input)

[Changelog](CHANGELOG.md)

Concept
-------

[](#concept)

Input validation is an important task in any web application, but remains an extremely tedious task. This replaces intermingled checks with a proper data structure that clearly defines the required and optional inputs.

The design reolves around the idea of API-driven design, where each API endpoint is its own object, however does not explicitly require this format

- it is capable of validating for any object that defines the input requirements. What it cannot easily handle is the common pattern of large controlelrs that are respnsible for many URLs, since each URL has its own validation requirements. It's certainly possible to structure your code in a way to make this work, but that is liable to become more complicated than the benefit it provides.

Data handling steps
-------------------

[](#data-handling-steps)

Raw input is transformed into safe data in two primary steps:

- Parsing
- Validation

Parsing is responsible for transforming the raw input string into an associative array. If your application is structured to do so, this step can be skipped entirely.

Validation is the most useful part of the library - taking a defined set of optional and required parameters and their types, and comparing the input values to the spec. The implementation prevents invalid data from being propagated entirely; it is not possible to create a `SafeInput` object (which your application will use) from invalid data!

Upon completion of this process, a `SafeInput` object is returned that contains data in accordance with the spec defined by the object implementing `ValidationInterface` (missing optional values are null).

Because this library exists to provide trustable data, it will actively prevent you from second-guessing it; for example, using `isset` or `empty` on the data structure will throw an exception. It is the author's experience that acting unable to trust your validated data is an anti-pattern and a code smell; if you insist on doing so, this is not the right tool for you. Forcing trust like this tends to prevent documentation from driting apart from reality.

Example
-------

[](#example)

A basic example follows:

`some_controller_file.php`

```