|
1
|
1 <?php
|
|
|
2 /**
|
|
|
3 * Smarty plugin
|
|
|
4 * @package Smarty
|
|
|
5 * @subpackage plugins
|
|
|
6 */
|
|
|
7
|
|
|
8
|
|
|
9 /**
|
|
|
10 * Smarty escape modifier plugin
|
|
|
11 *
|
|
|
12 * Type: modifier<br>
|
|
|
13 * Name: escape<br>
|
|
|
14 * Purpose: Escape the string according to escapement type
|
|
|
15 * @link http://smarty.php.net/manual/en/language.modifier.escape.php
|
|
|
16 * escape (Smarty online manual)
|
|
|
17 * @author Monte Ohrt <monte at ohrt dot com>
|
|
|
18 * @param string
|
|
|
19 * @param html|htmlall|url|quotes|hex|hexentity|javascript
|
|
|
20 * @return string
|
|
|
21 */
|
|
|
22 function smarty_modifier_escape($string, $esc_type = 'html', $char_set = 'ISO-8859-1')
|
|
|
23 {
|
|
|
24 switch ($esc_type) {
|
|
|
25 case 'html':
|
|
|
26 return htmlspecialchars($string, ENT_QUOTES, $char_set);
|
|
|
27
|
|
|
28 case 'htmlall':
|
|
|
29 return htmlentities($string, ENT_QUOTES, $char_set);
|
|
|
30
|
|
|
31 case 'url':
|
|
|
32 return rawurlencode($string);
|
|
|
33
|
|
|
34 case 'urlpathinfo':
|
|
|
35 return str_replace('%2F','/',rawurlencode($string));
|
|
|
36
|
|
|
37 case 'quotes':
|
|
|
38 // escape unescaped single quotes
|
|
|
39 return preg_replace("%(?<!\\\\)'%", "\\'", $string);
|
|
|
40
|
|
|
41 case 'hex':
|
|
|
42 // escape every character into hex
|
|
|
43 $return = '';
|
|
|
44 for ($x=0; $x < strlen($string); $x++) {
|
|
|
45 $return .= '%' . bin2hex($string[$x]);
|
|
|
46 }
|
|
|
47 return $return;
|
|
|
48
|
|
|
49 case 'hexentity':
|
|
|
50 $return = '';
|
|
|
51 for ($x=0; $x < strlen($string); $x++) {
|
|
|
52 $return .= '&#x' . bin2hex($string[$x]) . ';';
|
|
|
53 }
|
|
|
54 return $return;
|
|
|
55
|
|
|
56 case 'decentity':
|
|
|
57 $return = '';
|
|
|
58 for ($x=0; $x < strlen($string); $x++) {
|
|
|
59 $return .= '&#' . ord($string[$x]) . ';';
|
|
|
60 }
|
|
|
61 return $return;
|
|
|
62
|
|
|
63 case 'javascript':
|
|
|
64 // escape quotes and backslashes, newlines, etc.
|
|
|
65 return strtr($string, array('\\'=>'\\\\',"'"=>"\\'",'"'=>'\\"',"\r"=>'\\r',"\n"=>'\\n','</'=>'<\/'));
|
|
|
66
|
|
|
67 case 'mail':
|
|
|
68 // safe way to display e-mail address on a web page
|
|
|
69 return str_replace(array('@', '.'),array(' [AT] ', ' [DOT] '), $string);
|
|
|
70
|
|
|
71 case 'nonstd':
|
|
|
72 // escape non-standard chars, such as ms document quotes
|
|
|
73 $_res = '';
|
|
|
74 for($_i = 0, $_len = strlen($string); $_i < $_len; $_i++) {
|
|
|
75 $_ord = ord(substr($string, $_i, 1));
|
|
|
76 // non-standard char, escape it
|
|
|
77 if($_ord >= 126){
|
|
|
78 $_res .= '&#' . $_ord . ';';
|
|
|
79 }
|
|
|
80 else {
|
|
|
81 $_res .= substr($string, $_i, 1);
|
|
|
82 }
|
|
|
83 }
|
|
|
84 return $_res;
|
|
|
85
|
|
|
86 default:
|
|
|
87 return $string;
|
|
|
88 }
|
|
|
89 }
|
|
|
90
|
|
|
91 /* vim: set expandtab: */
|
|
|
92
|
|
|
93 ?>
|
