1: <?php
 2: /**
 3:  * Magento
 4:  *
 5:  * NOTICE OF LICENSE
 6:  *
 7:  * This source file is subject to the Open Software License (OSL 3.0)
 8:  * that is bundled with this package in the file LICENSE.txt.
 9:  * It is also available through the world-wide-web at this URL:
10:  * http://opensource.org/licenses/osl-3.0.php
11:  * If you did not receive a copy of the license and are unable to
12:  * obtain it through the world-wide-web, please send an email
13:  * to license@magentocommerce.com so we can send you a copy immediately.
14:  *
15:  * DISCLAIMER
16:  *
17:  * Do not edit or add to this file if you wish to upgrade Magento to newer
18:  * versions in the future. If you wish to customize Magento for your
19:  * needs please refer to http://www.magentocommerce.com for more information.
20:  *
21:  * @category    Mage
22:  * @package     Mage_Api2
23:  * @copyright   Copyright (c) 2012 Magento Inc. (http://www.magentocommerce.com)
24:  * @license     http://opensource.org/licenses/osl-3.0.php  Open Software License (OSL 3.0)
25:  */
26: 
27: /**
28:  * Request content interpreter query adapter
29:  *
30:  * @category    Mage
31:  * @package     Mage_Api2
32:  * @author      Magento Core Team <core@magentocommerce.com>
33:  */
34: class Mage_Api2_Model_Request_Interpreter_Query implements Mage_Api2_Model_Request_Interpreter_Interface
35: {
36:     /**
37:      * URI validate pattern
38:      */
39:     const URI_VALIDATE_PATTERN = "/^(?:%[[:xdigit:]]{2}|[A-Za-z0-9-_.!~*'()\[\];\/?:@&=+$,])*$/";
40: 
41:     /**
42:      * Parse request body into array of params
43:      *
44:      * @param string $body  Posted content from request
45:      * @return array        Return always array
46:      * @throws Exception|Mage_Api2_Exception
47:      */
48:     public function interpret($body)
49:     {
50:         if (!is_string($body)) {
51:             throw new Exception(sprintf('Invalid data type "%s". String expected.', gettype($body)));
52:         }
53: 
54:         if (!$this->_validateQuery($body)) {
55:             throw new Mage_Api2_Exception(
56:                 'Invalid data type. Check Content-Type.',
57:                 Mage_Api2_Model_Server::HTTP_BAD_REQUEST
58:             );
59:         }
60: 
61:         $data = array();
62:         parse_str($body, $data);
63:         return $data;
64:     }
65: 
66:     /**
67:      * Returns true if and only if the query string passes validation.
68:      *
69:      * @param  string $query The query to validate
70:      * @return boolean
71:      * @link   http://www.faqs.org/rfcs/rfc2396.html
72:      */
73:     protected function _validateQuery($query)
74:     {
75:         return preg_match(self::URI_VALIDATE_PATTERN, $query);
76:     }
77: }
78: