tests/SecurityTest.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php
require_once __DIR__ . '/../core/Security.php';

class SecurityTest {
    private $passed = 0;
    private $failed = 0;
    
    public function run() {
        echo "Running Security Tests...\n\n";
        
        $this->testSanitize();
        $this->testCleanXSS();
        $this->testHashPassword();
        $this->testVerifyPassword();
        $this->testGenerateToken();
        $this->testValidateEmail();
        $this->testValidateInt();
        $this->testTruncate();
        $this->testSlugify();
        $this->testRandomString();
        
        $this->printResults();
    }
    
    private function testSanitize() {
        $input = '  <script>alert("xss")</script>  ';
        $result = Security::sanitize($input);
        $expected = '&lt;script&gt;alert(&quot;xss&quot;)&lt;/script&gt;';
        
        $this->assertEquals($expected, $result, 'Sanitize removes whitespace and encodes HTML');
    }
    
    private function testCleanXSS() {
        $input = '<script>alert("xss")</script>';
        $result = Security::cleanXSS($input);
        $expected = '&lt;script&gt;alert(&quot;xss&quot;)&lt;/script&gt;';
        
        $this->assertEquals($expected, $result, 'CleanXSS encodes HTML entities');
    }
    
    private function testHashPassword() {
        $password = 'test123';
        $hash = Security::hashPassword($password);
        
        $this->assertTrue(strlen($hash) > 0, 'HashPassword returns a hash');
        $this->assertTrue($hash !== $password, 'HashPassword returns different value');
        $this->assertTrue(password_verify($password, $hash), 'HashPassword creates verifiable hash');
    }
    
    private function testVerifyPassword() {
        $password = 'test123';
        $hash = password_hash($password, PASSWORD_DEFAULT);
        
        $this->assertTrue(Security::verifyPassword($password, $hash), 'VerifyPassword returns true for correct password');
        $this->assertFalse(Security::verifyPassword('wrong', $hash), 'VerifyPassword returns false for wrong password');
    }
    
    private function testGenerateToken() {
        $token1 = Security::generateToken();
        $token2 = Security::generateToken();