[Summary view] [Print] [Text view]

   1  <?php
   2  /**

   3   * Smarty plugin

   4   *

   5   * @package Smarty

   6   * @subpackage PluginsModifierCompiler

   7   */
   8  
   9  /**

  10   * @ignore

  11   */
  12  require_once ( SMARTY_PLUGINS_DIR .'shared.literal_compiler_param.php' );
  13  
  14  /**

  15   * Smarty escape modifier plugin

  16   *

  17   * Type:     modifier<br>

  18   * Name:     escape<br>

  19   * Purpose:  escape string for output

  20   *

  21   * @link http://www.smarty.net/docsv2/en/language.modifier.escape count_characters (Smarty online manual)

  22   * @author Rodney Rehm

  23   * @param array $params parameters

  24   * @return string with compiled code

  25   */
  26  function smarty_modifiercompiler_escape($params, $compiler)
  27  {
  28      try {
  29          $esc_type = smarty_literal_compiler_param($params, 1, 'html');
  30          $char_set = smarty_literal_compiler_param($params, 2, Smarty::$_CHARSET);
  31          $double_encode = smarty_literal_compiler_param($params, 3, true);
  32  
  33          if (!$char_set) {
  34              $char_set = Smarty::$_CHARSET;
  35          }
  36  
  37          switch ($esc_type) {
  38              case 'html':
  39                  return 'htmlspecialchars('
  40                      . $params[0] .', ENT_QUOTES, '
  41                      . var_export($char_set, true) . ', '
  42                      . var_export($double_encode, true) . ')';
  43  
  44              case 'htmlall':
  45                  if (Smarty::$_MBSTRING) {
  46                      return 'mb_convert_encoding(htmlspecialchars('
  47                          . $params[0] .', ENT_QUOTES, '
  48                          . var_export($char_set, true) . ', '
  49                          . var_export($double_encode, true)
  50                          . '), "HTML-ENTITIES", '
  51                          . var_export($char_set, true) . ')';
  52                  }
  53  
  54                  // no MBString fallback

  55                  return 'htmlentities('
  56                      . $params[0] .', ENT_QUOTES, '
  57                      . var_export($char_set, true) . ', '
  58                      . var_export($double_encode, true) . ')';
  59  
  60              case 'url':
  61                  return 'rawurlencode(' . $params[0] . ')';
  62  
  63              case 'urlpathinfo':
  64                  return 'str_replace("%2F", "/", rawurlencode(' . $params[0] . '))';
  65  
  66              case 'quotes':
  67                  // escape unescaped single quotes

  68                  return 'preg_replace("%(?<!\\\\\\\\)\'%", "\\\'",' . $params[0] . ')';
  69  
  70              case 'javascript':
  71                  // escape quotes and backslashes, newlines, etc.

  72                  return 'strtr(' . $params[0] . ', array("\\\\" => "\\\\\\\\", "\'" => "\\\\\'", "\"" => "\\\\\"", "\\r" => "\\\\r", "\\n" => "\\\n", "</" => "<\/" ))';
  73  
  74          }
  75      } catch(SmartyException $e) {
  76          // pass through to regular plugin fallback

  77      }
  78  
  79      // could not optimize |escape call, so fallback to regular plugin

  80      if ($compiler->tag_nocache | $compiler->nocache) {
  81          $compiler->template->required_plugins['nocache']['escape']['modifier']['file'] = SMARTY_PLUGINS_DIR .'modifier.escape.php';
  82          $compiler->template->required_plugins['nocache']['escape']['modifier']['function'] = 'smarty_modifier_escape';
  83      } else {
  84          $compiler->template->required_plugins['compiled']['escape']['modifier']['file'] = SMARTY_PLUGINS_DIR .'modifier.escape.php';
  85          $compiler->template->required_plugins['compiled']['escape']['modifier']['function'] = 'smarty_modifier_escape';
  86      }
  87      return 'smarty_modifier_escape(' . join( ', ', $params ) . ')';
  88  }
  89  
  90  ?>