PHPackages netom/colander - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Search & Filtering](/categories/search) 4. / 5. netom/colander ActiveLibrary[Search & Filtering](/categories/search) netom/colander ============== Input filter and validator library for PHP with a functional twist 1.0.7(9y ago)03.3kMITPHPPHP >=5.5.0 Since Apr 15Pushed 9y ago1 watchersCompare [ Source](https://github.com/netom/colander)[ Packagist](https://packagist.org/packages/netom/colander)[ RSS](/packages/netom-colander/feed)WikiDiscussions master Synced today READMEChangelogDependencies (1)Versions (9)Used By (0) Colander ======== [](#colander) Colander is an input filter and validator library for PHP with a functional twist. Colander lets you define (input) data filter and validator functions. In PHP or similar imperative, dynamic programming languages it is usually done by defining a DSL (domain specific language), and describing the problem using that DSL, usually using strings or text files (config files). Such solutions are either perform poorly in terms of speed, or are complicated. Performance is usually poor because the configuration has to be parsed each time a request is made, and compications can arise if someone attempts to cache the results. Colander solves this problem by NOT using a separate DSL, but defining an EDSL (embedded DSL) that exploits the features of PHP itself. The code describing data validation still looks declarative e.g. something like a configuration file instead of an imperative program, but it consists entirelly of native PHP expressions. Colander therefore brings the best of the two worlds (first one being config file land, other being imperative check-this-and-that kingdom). You can have nice looking description of data filters and validators (should I say 'processors' ?), and your opcache will be happy. So, How does a data processor description look like? ------------------------------------------------ [](#how-does-a-data-processor-description-look-like) Let's cut the chase: ``` $processor = map([ 'username' => seq([fMinLength(3), fmaxLength(64)]), 'age' => seq([fInteger(), fMin(13)]) ]); ``` The expression above assigns the `$processor` variable a *function*. That's right, the variable will contain a function that can be called with a single parameter containing data to validate. Colander was designed so none of it's resulting functions has any *side effects*, that is: it does not print or read anything, doesn't set global variables, etc. This is important because you can re-use these generated functions as many times as you want, and the results will always be the same for the same input. Let's take a look at the definition above, but I'm sure you already have a pretty good idea what the generated function will do. Factory functions ----------------- [](#factory-functions) In the example `fMinLength`, `fInteger`, etc. are *factories*. They themselves return functions. `fInteger()` will return a function that takes a single argument, and if it's an integer, it returns it, if it's not, it throws a ValidationException. All factory functions work very similarly. They took some (or no) arguments and return you a validation or filter function (*processor* from now on please). Validation and Filter processors -------------------------------- [](#validation-and-filter-processors) A processor is said to be a validation processor if it returns it's input unaltered, but it might throw an exception. A filter processor might return a value other than it's input. Using the processors -------------------- [](#using-the-processors) The example above can be extended like this: ``` $processor = map([ 'username' => seq([fMinLength(3), fmaxLength(64)]), 'age' => seq([fInteger(), fMin(13)]) ]); $valid_post = $processor($_POST); ``` Since PHP don't allow onr to try and call the result of an arbitrary expression (like, say, JavaScript does), we provided `call()`, a convenient function, so it's possible to define AND use processors in a single expression: ``` $valid_post = call(map([ 'username' => seq([fMinLength(3), fmaxLength(64)]), 'age' => seq([fInteger(), fMin(13)]) ]), $_POST); ``` Ok but what map() and seq() is all about? ----------------------------------------- [](#ok-but-what-map-and-seq-is-all-about) Yupp, and there's tpl() and lst() too. These are *combinators*. They combine existing processors to form new ones. See, a processor is just a function that takes a single argument, and returns a value or throws an exception. Pretty simple eh? Such functions can be used to explode in your face if you have a string that's too long, or a value that should be an integer, but it's an array instead. It's still kinda complicated to check for form fields, or to check multiple rules one after the other. Well, `map()` and `seq()` help you exactly these cases. - `map()` is a function that returns a processor. It's input is an associative array. Each field in the array must be a processor itself. The function produced by `map()` takes an argument that must be an array itself, and runs it's processors against the corresponding fields. Thus in the above examples the processor returned by the `map()` combinator will check the 'username' and 'age' fields in any array run through it. - `seq()` will return a processor that is the *sequence* of the processors given to it in an array. - `tpl()` can be used to validate *tuples*, arrays of predetermined length, and with zero-based integer indexes. It's parameter is an array of processors, similarly to `seq()`, but it runs them against each corresponding array element, just like `map()` would do. - `lst()` can be used to process arrays of the same kind of data (lists if you like). Actually `lst()` works on any kind of Traversable object too. Simple processors ----------------- [](#simple-processors) Colander comes with a collection of simple processors. Nearly all php is\_\* function has its Colander counterpart (in the form if is\* (with camelCase), and fIs\* (it's factory)). Until all of those get documented, please refer to the source code. Validation function naming conventions -------------------------------------- [](#validation-function-naming-conventions) is\*: functions that execute a boolean check and throw an exception if the result is false. f\*: factory functions: functions that return functions. Example: fIsNull will return the isNull function. \*\_: the function acts on a collection of values, and it has a number of other functions that act on the collection members. Each of these functions can throw ValidationExceptions. Functions with names ending with \_ stop at the first error they encounter. The \_ always comes before S (if theres an S). \*S the function acts on a collection of values. If the function cannot process all members of the collection (because an array is too long, or there are unchecked keys in it), it will throw an IncompleteValidationException (extends ValidationException). ### Health Score 30 — LowBetter than 62% of packages Maintenance20 Infrequent updates — may be unmaintained Popularity16 Limited adoption so far Community7 Small or concentrated contributor base Maturity63 Established project with proven stability Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~106 days Recently: every ~138 days Total 8 Last Release 3354d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/072a2df3c2ea839646b2f91158af79a5879bd915a6ee4c326ac48007c1a199d5?d=identicon)[netom](/maintainers/netom) --- Top Contributors [![netom](https://avatars.githubusercontent.com/u/695195?v=4)](https://github.com/netom "netom (21 commits)") --- Tags validatorfilterinput ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/netom-colander/health.svg) ``` [![Health](https://phpackages.com/badges/netom-colander/health.svg)](https://phpackages.com/packages/netom-colander) ``` ### Alternatives [aura/filter Filters to validate and sanitize objects and arrays. 172576.5k12](/packages/aura-filter)[htmlawed/htmlawed Official htmLawed PHP library for HTML filtering 481.2M15](/packages/htmlawed-htmlawed)[wandersonwhcr/romans A Simple PHP Roman Numerals Library 45412.8k8](/packages/wandersonwhcr-romans)[outl1ne/nova-input-filter An input filter for Laravel Nova 241.0M](/packages/outl1ne-nova-input-filter)[optimistdigital/nova-input-filter An input filter for Laravel Nova 24576.2k2](/packages/optimistdigital-nova-input-filter)[digital-creative/nova-range-input-filter A Laravel Nova range input filter. 17222.1k1](/packages/digital-creative-nova-range-input-filter) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)