Re: SOAP-Server don't validate request

From: Date: Mon, 06 Aug 2007 06:41:14 +0000
Subject: Re: SOAP-Server don't validate request
References: 1 2  Groups: php.soap 
Request: Send a blank email to php-soap+get-2591@lists.php.net to get a copy of this message
Hello Ammarmar, thanks for your helpful answer.
First of all - at the moment validation in SOAP Server is worth zilch. It is practically non-existent. _Always_ validate manually everything in PHP.
I already imagined such a thing. But I needed still the confirmation of a further specialist. It could have been, that I made an little error and I'm to bind to see it. ;-)
As for missing parameters, I'm not sure if this is the problem, but binding section in your WSDL file is missing parts declaration (specifies part names and order). Try to use such code: <wsdl:input>
    <soap:body use="literal" parts="FirstName SurName" />
</wsdl:input> (similarly for output)
I already tested this case, but without success.
As for validating params type or such luxurious things like enumerations or regexps (yes, XML Schema supports regexps, too) - forget it. Do it yourself in your PHP code. Hope this helps a bit.
I had already modified the XERCES-Parser for another project to validate an XML-Request. I think, I must modify this Parser to validate SOAP-Requests. Thank you and best greetings Jörg

« previous php.soap (#2591) next »