PHP - Manual: Spoofchecker

2024-04-28

The Spoofchecker class

(PHP 5 >= 5.4.0, PHP 7, PHP 8, PECL intl >= 2.0.0)

简介

This class is provided because Unicode contains large number of characters and incorporates the varied writing systems of the world and their incorrect usage can expose programs or systems to possible security attacks using characters similarity.

Provided methods allow to check whether an individual string is likely an attempt at confusing the reader (spoof detection), such as "pаypаl" spelled with Cyrillic 'а' characters.

类摘要

class Spoofchecker {

/* Constants */

const int|float ASCII = 0x10000000;

const int|float HIGHLY_RESTRICTIVE = 0x30000000;

const int|float MODERATELY_RESTRICTIVE = 0x40000000;

const int|float MINIMALLY_RESTRICTIVE = 0x50000000;

const int|float UNRESTRICTIVE = 0x60000000;

const int|float SINGLE_SCRIPT_RESTRICTIVE = 0x20000000;

const int SINGLE_SCRIPT_CONFUSABLE = 1;

const int MIXED_SCRIPT_CONFUSABLE = 2;

const int WHOLE_SCRIPT_CONFUSABLE = 4;

const int ANY_CASE = 8;

const int SINGLE_SCRIPT = 16;

const int INVISIBLE = 32;

const int CHAR_LIMIT = 64;

/* 方法 */

public __construct()

public areConfusable(string $string1, string $string2, int &$errorCode = null): bool

public isSuspicious(string $string, int &$errorCode = null): bool

public setAllowedLocales(string $locales): void

public setChecks(int $checks): void

}

预定义常量

Spoofchecker::ASCII
Spoofchecker::HIGHLY_RESTRICTIVE
Spoofchecker::MODERATELY_RESTRICTIVE
Spoofchecker::MINIMALLY_RESTRICTIVE
Spoofchecker::UNRESTRICTIVE
Spoofchecker::SINGLE_SCRIPT_RESTRICTIVE
Spoofchecker::SINGLE_SCRIPT_CONFUSABLE
Spoofchecker::MIXED_SCRIPT_CONFUSABLE
Spoofchecker::WHOLE_SCRIPT_CONFUSABLE
Spoofchecker::ANY_CASE
Spoofchecker::SINGLE_SCRIPT
Spoofchecker::INVISIBLE
Spoofchecker::CHAR_LIMIT

更新日志

版本	说明
7.3.0	Class constants used by Spoofchecker::setRestrictionLevel() such as `Spoofchecker::ASCII`, `Spoofchecker::HIGHLY_RESTRICTIVE`, `Spoofchecker::MODERATELY_RESTRICTIVE`, `Spoofchecker::MINIMALLY_RESTRICTIVE`, `Spoofchecker::UNRESTRICTIVE`, `Spoofchecker::SINGLE_SCRIPT_RESTRICTIVE` has been added.

Spoofchecker::areConfusable — Checks if given strings can be confused
Spoofchecker::__construct — Constructor
Spoofchecker::isSuspicious — Checks if a given text contains any suspicious characters
Spoofchecker::setAllowedLocales — Locales to use when running checks
Spoofchecker::setChecks — Set the checks to run

add a note

User Contributed Notes 2 notes

down

Anonymous ¶

5 years ago


From http://icu-project.org/apiref/icu4j/com/ibm/icu/text/SpoofChecker.html :
SINGLE_SCRIPT_CONFUSABLE: indicates that the two strings are visually confusable and that they are from the same script
MIXED_SCRIPT_CONFUSABLE: indicates that the two strings are visually confusable and that they are NOT from the same script
WHOLE_SCRIPT_CONFUSABLE: indicates that the two strings are visually confusable and that they are NOT from the same script BUT both of them are single-script strings
ANY_CASE: Deprecated.
SINGLE_SCRIPT: Deprecated.
INVISIBLE: Check an identifier for the presence of invisible characters, such as zero-width spaces, or character sequences that are likely not to display, such as multiple occurrences of the same non-spacing mark.
CHAR_LIMIT: Check that an identifier contains only characters from a specified set of acceptable characters.

Explanation of whole script, mixed script and single script confusables in UTS 39 section 4 : http://unicode.org/reports/tr39/#Confusable_Detection

Details from Java SpoofChecker class at http://icu-project.org/apiref/icu4j/com/ibm/icu/text/SpoofChecker.html

down

-1

Anonymous ¶

4 years ago


Spoofchecker yields false positives by defaut when Whole-Script Confusables (WSC) and Mixed-Script Confusables (MSC) checks are used.
They have been deprecated since ICU 58:
http://bugs.icu-project.org/trac/ticket/12549#comment:10

Workarounds: upgrade ICU to 58+, or avoid the MSC and WSC checks with Spoofcheckers' setChecks() function.

add a note

官方地址：https://www.php.net/manual/en/class.spoofchecker.php

有任何技术问题请点击这里网站运营推广招聘

IT PHP 编程语言 Linux 科技开发编程 Elasticsearch HTML/CSS/XML 网络 JAVA NoSQL C/C++ 面试 Golang 数据库 Git 算法正则表达式操作系统 Redis 互联网 MySql JavaScript 运维软件架构设计 Mac OS TCP/IP 国际 Excel Vim Windows Socket Oracle VR MongoDB 运营 Python MemCache 商业硬件电子设计 nginx 娱乐摄影游戏 WordPress HTTP 团建数码电器

php7 安装fileinfo扩展 preg_split — 通过一个正则表达式分隔字符串 [PHP] inet_pton/inet_ntop IP地址转换函数 php位值,解决 PHP 中 usort 在值相同时改变原始位置的问题 PHPMailer设置utf8 PHPMailer字符集CharSet 如何在Composer中为GitLab实例设置访问令牌 array_multisort() 多字段排序 laravel框架查看sql语句方式 [原创]诡异的php-fpm超时问题 PHP获取指定函数定义在哪个文件中及行号利用php soap实现web service php设置cookie为httponly防止xss攻击 PHP5 扩展SOAP 调用 webservice PHP-FPM进程数的设定 PHP7添加redis扩展 PHPstorm 里面Terminal 不能使用 esc键吗退出编辑模式吗 adodb手册纯php实现DES以及TripleDES加密算法 ADOConnection 公用函数 php上周一、本周一、下周一日期

略微加速

PHP官方手册 - 互联网笔记

The Spoofchecker class

简介

类摘要

预定义常量

更新日志

目录

User Contributed Notes 2 notes