edd929216a
This is necessary to avoid CSRF on SQL queries. This is really more a short term fix, proper fix (to be implemented in master) is to avoid accepting SQL queries from GET requests. This reverts commits: *dae3390a02*ea73fded71*90433788d6*f797a8d87d*9c1cfc8553Signed-off-by: Michal Čihař <michal@cihar.com>
123 lines
2.9 KiB
PHP
123 lines
2.9 KiB
PHP
<?php
|
|
/* vim: set expandtab sw=4 ts=4 sts=4: */
|
|
/**
|
|
* tests for methods under Formset processing library
|
|
*
|
|
* @package PhpMyAdmin-test
|
|
*/
|
|
|
|
/*
|
|
* Include to test
|
|
*/
|
|
require_once 'setup/lib/form_processing.lib.php';
|
|
|
|
|
|
/**
|
|
* tests for methods under Formset processing library
|
|
*
|
|
* @package PhpMyAdmin-test
|
|
*/
|
|
class PMA_Form_Processing_Test extends PMATestCase
|
|
{
|
|
/**
|
|
* Prepares environment for the test.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function setUp()
|
|
{
|
|
$GLOBALS['server'] = 1;
|
|
$GLOBALS['cfg']['ServerDefault'] = 1;
|
|
}
|
|
|
|
/**
|
|
* Test for process_formset()
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testProcessFormSet()
|
|
{
|
|
$this->mockResponse(
|
|
array('HTTP/1.1 303 See Other'),
|
|
array('Location: index.php?lang=en&token=token')
|
|
);
|
|
|
|
// case 1
|
|
$formDisplay = $this->getMockBuilder('PMA\libraries\config\FormDisplay')
|
|
->disableOriginalConstructor()
|
|
->setMethods(array('process', 'getDisplay'))
|
|
->getMock();
|
|
|
|
$formDisplay->expects($this->once())
|
|
->method('process')
|
|
->with(false)
|
|
->will($this->returnValue(false));
|
|
|
|
$formDisplay->expects($this->once())
|
|
->method('getDisplay')
|
|
->with(true, true);
|
|
|
|
PMA_Process_formset($formDisplay);
|
|
|
|
// case 2
|
|
$formDisplay = $this->getMockBuilder('PMA\libraries\config\FormDisplay')
|
|
->disableOriginalConstructor()
|
|
->setMethods(array('process', 'hasErrors', 'displayErrors'))
|
|
->getMock();
|
|
|
|
$formDisplay->expects($this->once())
|
|
->method('process')
|
|
->with(false)
|
|
->will($this->returnValue(true));
|
|
|
|
$formDisplay->expects($this->once())
|
|
->method('hasErrors')
|
|
->with()
|
|
->will($this->returnValue(true));
|
|
|
|
ob_start();
|
|
PMA_Process_formset($formDisplay);
|
|
$result = ob_get_clean();
|
|
|
|
$this->assertContains(
|
|
'<div class="error">',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'mode=revert',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<a class="btn" href="index.php?',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'mode=edit',
|
|
$result
|
|
);
|
|
|
|
// case 3
|
|
$formDisplay = $this->getMockBuilder('PMA\libraries\config\FormDisplay')
|
|
->disableOriginalConstructor()
|
|
->setMethods(array('process', 'hasErrors'))
|
|
->getMock();
|
|
|
|
$formDisplay->expects($this->once())
|
|
->method('process')
|
|
->with(false)
|
|
->will($this->returnValue(true));
|
|
|
|
$formDisplay->expects($this->once())
|
|
->method('hasErrors')
|
|
->with()
|
|
->will($this->returnValue(false));
|
|
|
|
PMA_Process_formset($formDisplay);
|
|
|
|
}
|
|
|
|
}
|
