PHP filters HTML code under the function to improve program security

  • 2020-03-31 20:24:21
  • OfStack

The following functions filter the HTML code:
 
function ihtmlspecialchars($string) { 
if(is_array($string)) { 
foreach($string as $key => $val) { 
$string[$key] = ihtmlspecialchars($val); 
} 
} else { 
$string = preg_replace('/&((#(d{3,5}|x[a-fA-F0-9]{4})|[a-zA-Z][a-z0-9]{2,5});)/', '&\1', 
str_replace(array('&', '"', '<', '>'), array('&', '"', '<', '>'), $string)); 
} 
return $string; 
} 


PHP filters HTML code under the function
 
function htmlEncode($string) { 
$string=trim($string); 
$string=str_replace("&","&",$string); 
$string=str_replace("'","'",$string); 
$string=str_replace("&","&",$string); 
$string=str_replace(""",""",$string); 
$string=str_replace(""",""",$string); 
$string=str_replace("<","<",$string); 
$string=str_replace("<","<",$string); 
$string=str_replace(">",">",$string); 
$string=str_replace(">",">",$string); 
$string=str_replace(" "," ",$string); 
$string=nl2br($string); 
return $string; 
} 

Related articles: