如何解决Symfony 5注册表格验证不起作用
我是第一次学习Symfony。
Form Validation不能按预期工作，按照Symfony文档，我确实留下了样板代码，我阅读了10次其他堆栈溢出文章和文档，以查看是否错过了某些内容，但我无法弄清楚出来。
客户端验证已关闭，基本上可以正常测试服务器端验证。 但是，提交表单后，即使表单为空且数据无效，isValid（）方法也将返回true。我在Entity和formType中都添加了约束，但是它绕过了一切，我知道这是事实，因为异常是由数据库或密码编码方法抛出的。
我下面有一个简单的代码示例，请检查：
ps：这是一个用于学习的虚拟项目， 这是代码：
//App\Entity\MyFavorite.php
//App\Controller\RegistrationController:
<?php
namespace App\Controller;
use App\Entity\MyFavorite;
use App\Form\RegistrationFormType;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Routing\Annotation\Route;
use Symfony\Component\Security\Core\
Encoder\UserPasswordEncoderInterface;
use Symfony\Component\Validator\Validator\ValidatorInterface;
class RegistrationController extends AbstractController
{
/**
* @Route("/register",name="app_register")
*/
public function register(
Request $request,UserPasswordEncoderInterface $passwordEncoder,ValidatorInterface $validator): Response
{
$user = new MyFavorite();
$form = $this->createForm(
RegistrationFormType::class,$user
);
$form->handleRequest($request);
if ($form->isSubmitted() && $form->isValid()) {
// encode the plain password
$user->setPassword(
$passwordEncoder->encodePassword(
$user,$form->get('plainPassword')->getData()
)
);
$entityManager = $this->getDoctrine()->getManager();
$entityManager->persist($user);
$entityManager->flush();
// do anything else you need here,like send an email
return $this->redirectToRoute('myfav_vault');
}
return $this->render('registration/register.html.twig',[
'registrationForm' => $form->createView()
]);
}
}
//App\Entity\MyFavorite
<?php
namespace App\Entity;
use App\Repository\MyFavoriteRepository;
use Doctrine\ORM\Mapping as ORM;
use Symfony\Bridge\Doctrine\Validator\Constraints\UniqueEntity;
use Symfony\Component\Security\Core\User\UserInterface;
//-> Bringing in the Validator Constraints as Assert
use Symfony\Component\Validator\Constraints as Assert;
/**
* @ORM\Entity(repositoryClass=MyFavoriteRepository::class)
* @UniqueEntity(fields={"uniqueCode"},message="There is already an account with this uniqueCode")
*/
class MyFavorite implements UserInterface
{
/**
* @ORM\Id()
* @ORM\GeneratedValue()
* @ORM\Column(type="integer")
*/
private $id;
/**
* @ORM\Column(type="string",length=11,unique=true)
* -> Adding my first custom assertion:
* @Assert\Regex("/^[a-zA-Z0-9]{3}-[a-zA-Z0-9]{3}-[a-zA-Z0-9]. {3}$/")
* @Assert\Length(
* min = 11,* max = 11
* )
*/
private $uniqueCode;
/**
* @ORM\Column(type="json")
*/
private $roles = [];
/**
* @var string The hashed password
* @ORM\Column(type="string")
*/
private $password;
/**
* @ORM\Column(type="string",length=100)
* @Assert\NotBlank
*/
private $name;
public function getId(): ?int
{
return $this->id;
}
public function getUniqueCode(): ?string
{
return $this->uniqueCode;
}
public function setUniqueCode(string $uniqueCode): self
{
$this->uniqueCode = $uniqueCode;
return $this;
}
/**
* A visual identifier that represents this user.
*
* @see UserInterface
*/
public function getUsername(): string
{
return (string) $this->uniqueCode;
}
/**
* @see UserInterface
*/
public function getRoles(): array
{
$roles = $this->roles;
// guarantee every user at least has ROLE_USER
$roles[] = 'ROLE_USER';
return array_unique($roles);
}
public function setRoles(array $roles): self
{
$this->roles = $roles;
return $this;
}
/**
* @see UserInterface
*/
public function getPassword(): string
{
return (string) $this->password;
}
public function setPassword(string $password): self
{
$this->password = $password;
return $this;
}
/**
* @see UserInterface
*/
public function getSalt()
{
//not needed when using the "bcrypt" algorithm insecurity.yaml
}
/**
* @see UserInterface
*/
public function eraseCredentials()
{
// If you store any temporary,sensitive data on the user,// $this->plainPassword = null;
}
public function getName(): ?string
{
return $this->name;
}
public function setName(string $name): self
{
$this->name = $name;
return $this;
}
public function getExpiry(): ?\DateTimeInterface
{
return $this->expiry;
}
public function setExpiry(?\DateTimeInterface $expiry): self
{
$this->expiry = $expiry;
return $this;
}
}
//App\Form\RegistrationFormType
<?php
namespace App\Form;
use App\Entity\MyFavorite;
use Symfony\Component\Form\AbstractType;
use Symfony\Component\Form\Extension\Core\Type\CheckboxType;
use Symfony\Component\Form\Extension\Core\Type\PasswordType;
//-> Getting basic TextType
use Symfony\Component\Form\Extension\Core\Type\TextType;
use Symfony\Component\Form\FormBuilderInterface;
use Symfony\Component\OptionsResolver\OptionsResolver;
use Symfony\Component\Validator\Constraints\IsTrue;
use Symfony\Component\Validator\Constraints\Length;
use Symfony\Component\Validator\Constraints\NotBlank;
use Symfony\Component\Validator\Constraints\Regex;
//-> Testing out with Regex and String
class RegistrationFormType extends AbstractType
{
public function buildForm(FormBuilderInterface $builder,array $options)
{
$builder
->add('name')
->add('uniqueCode')
->add('plainPassword',PasswordType::class,[
// instead of being set onto the object directly,// this is read and encoded in the controller
'mapped' => false,'constraints' => [
new NotBlank([
'message' => 'Please enter a password',]),//-> I am removing this as I do not want to provide options for min/max length
/*new Length([
'min' => 6,'minMessage' => 'Your password should be at least {{ limit }} characters',// max length allowed by Symfony for security reasons
'max' => 4096,*/
],])
;
}
public function configureOptions(OptionsResolver $resolver)
{
$resolver->setDefaults([
'data_class' => MyFavorite::class,//->Im going to turn of form validation on the client to see if the validation works on the server:
'validation_groups' => false
]);
}
}
//register.html.twig:
{% extends 'base.html.twig' %}
{% block title %}Register{% endblock %}
{% block body %}
{% for flashError in app.flashes('verify_email_error') %}
<div class="alert alert-danger" role="alert">{{ flashError }}</div>
{% endfor %}
<h1>Register</h1>
{{ form_start(registrationForm,{'attr': {'novalidate':'novalidate'}}) }}
{# This line had to be added manually so the form comes at the right place,some how all fields were not included #}
{{ form_row(registrationForm.name) }}
{{ form_row(registrationForm.uniqueCode) }}
{{ form_row(registrationForm.plainPassword,{
label: 'Password'
}) }}
<button type="submit" class="btn">Register</button>
{{ form_end(registrationForm) }}
{% endblock %}
发现：
提交完全空白的表格时： 当password字段为null且需要字符串时，encodePassword（）会引发异常，（它甚至不应进入此阶段，因为我以为isValid（）应该返回false？）
使用密码和所有其他密码作为空值提交： 绕过所有内容，只有数据库抛出异常。
为uniqueCode提交了错误的模式：验证器甚至无法识别任何东西，并且每次都会通过
handleRequest（）方法不会引发任何异常或返回false，但密码除外，在密码中我遇到一个非常丑陋的错误，说密码的参数2不能为null， 因此很明显，验证没有发生，isValid（）返回true。
错误异常来自数据库，
当我尝试以错误的模式插入唯一代码时，它不会被插入， 名称为空时，它将通过验证，但数据库会引发异常， 当密码字段为空时，它仍会通过验证，
Symfony文档说：
handleRequest（）方法将数据写回到同一对象，
然后我们验证数据：
“在上一节中，您学习了如何使用有效或无效数据提交表单。在Symfony中，问题不是“表单”是否有效，而是基本对象（$ task在此示例）在表单将提交的数据应用于表单之后才有效。调用$ form-> isValid（）是询问$ task对象是否具有有效数据的快捷方式。“
我试图查看ValidatorInterface文档，但其中明确指出： “大多数时候，您不会直接与验证程序服务进行交互，也不必担心打印出错误。大多数时候，您将在处理提交的表单数据时间接使用验证。有关更多信息，请参见如何验证Symfony表单。”
我在这里想念什么？
解决方法
这不是Stackoverflow的正确格式，但是我们可以看到关闭之前可以走多远。可能需要在Reddit Symfony论坛上继续。
通过以下操作开始，从小做起。请注意，没有实体或其他东西在进行。只是想让自己相信验证的基础确实有效：
class RegistrationController extends AbstractController
{
public function register(Request $request)
{
$form = $this->createFormBuilder()
->add('username',TextType::class,[
'constraints' => new NotBlank(['message' => 'User name cannot be blank'])
])
->add('save',SubmitType::class,['label' => 'Register'])
->getForm();
$form->handleRequest($request);
if ($form->isSubmitted() && $form->isValid()) {
dump('Validated');
}
return $this->render('user/register.html.twig',['form' => $form->createView()]);
}
}
# user/register.html.twig
{% extends 'base.html.twig' %}
{% block body %}
<h1>Register Form</h1>
{{ form_start(form,{'attr':{'novalidate':'novalidate'}}) }}
{{ form_end(form) }}
{% endblock %}
版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请发送邮件至 dio@foxmail.com 举报，一经查实，本站将立刻删除。