File lass/smarty/plugins/modifier.escape.php

 1: <?php
 2: /**
 3:  * Smarty plugin
 4:  * @package Smarty
 5:  * @subpackage plugins
 6:  */
 7: 
 8: 
 9: /**
10:  * Smarty escape modifier plugin
11:  *
12:  * Type:     modifier<br>
13:  * Name:     escape<br>
14:  * Purpose:  Escape the string according to escapement type
15:  * @link http://smarty.php.net/manual/en/language.modifier.escape.php
16:  *          escape (Smarty online manual)
17:  * @author   Monte Ohrt <monte at ohrt dot com>
18:  * @param string
19:  * @param html|htmlall|url|quotes|hex|hexentity|javascript
20:  * @return string
21:  */
22: function smarty_modifier_escape($string, $esc_type = 'html', $char_set = 'ISO-8859-1')
23: {
24:     switch ($esc_type) {
25:         case 'html':
26:             return htmlspecialchars($string, ENT_QUOTES, $char_set);
27: 
28:         case 'htmlall':
29:             return htmlentities($string, ENT_QUOTES, $char_set);
30: 
31:         case 'url':
32:             return rawurlencode($string);
33: 
34:         case 'urlpathinfo':
35:             return str_replace('%2F','/',rawurlencode($string));
36:             
37:         case 'quotes':
38:             // escape unescaped single quotes
39:             return preg_replace("%(?<!\\\\)'%", "\\'", $string);
40: 
41:         case 'hex':
42:             // escape every character into hex
43:             $return = '';
44:             for ($x=0; $x < strlen($string); $x++) {
45:                 $return .= '%' . bin2hex($string[$x]);
46:             }
47:             return $return;
48:             
49:         case 'hexentity':
50:             $return = '';
51:             for ($x=0; $x < strlen($string); $x++) {
52:                 $return .= '&#x' . bin2hex($string[$x]) . ';';
53:             }
54:             return $return;
55: 
56:         case 'decentity':
57:             $return = '';
58:             for ($x=0; $x < strlen($string); $x++) {
59:                 $return .= '&#' . ord($string[$x]) . ';';
60:             }
61:             return $return;
62: 
63:         case 'javascript':
64:             // escape quotes and backslashes, newlines, etc.
65:             return strtr($string, array('\\'=>'\\\\',"'"=>"\\'",'"'=>'\\"',"\r"=>'\\r',"\n"=>'\\n','</'=>'<\/'));
66:             
67:         case 'mail':
68:             // safe way to display e-mail address on a web page
69:             return str_replace(array('@', '.'),array(' [AT] ', ' [DOT] '), $string);
70:             
71:         case 'nonstd':
72:            // escape non-standard chars, such as ms document quotes
73:            $_res = '';
74:            for($_i = 0, $_len = strlen($string); $_i < $_len; $_i++) {
75:                $_ord = ord(substr($string, $_i, 1));
76:                // non-standard char, escape it
77:                if($_ord >= 126){
78:                    $_res .= '&#' . $_ord . ';';
79:                }
80:                else {
81:                    $_res .= substr($string, $_i, 1);
82:                }
83:            }
84:            return $_res;
85: 
86:         default:
87:             return $string;
88:     }
89: }
90: 
91: /* vim: set expandtab: */
92: 
93: ?>
94:
Namespaces

Classes

Interfaces

Exceptions

Functions
