/**
 * 校验input, 防止SQL注入
 * @author: 赵彪<bill.zhao@yoho.cn>
 * @date: 2015/11/30
 */

var $ = require('jquery'),
    tip = require('./tip');

/**
 * hasStrangeInput() return true when input have danger value
 *
 * @param {Bool} needConvert Set if the danger input value should be converted to space
 * @return {Bool} true/false If the input have danger value
 */
function hasDangerInput(needConvert) {
  var validationPartten = /['"<>&\|]|--/g;
  var inputs = $('input[type!=hidden], textarea');
  var inputsLength = inputs.length;

  // to set if the input value should be coverted, and its default value is true;
  var willConvert = needConvert === undefined || typeof needConvert !== 'boolean' ? true : needConvert ;

  for (var i = 0; i < inputsLength; i++) {
    var val = inputs.eq(i).val();
    if (validationPartten.test(val)) {
      if (willConvert) {
        inputs.eq(i).val(val.replace(validationPartten, ' '));
      } else{
        var matchChars = val.match(validationPartten).join(' ');
        tip.show('不可以输入 ' + matchChars + ' 哦!');
      }
      return !willConvert && true;
    }
  }

  return false;
}


exports.hasDangerInput = hasDangerInput;