Class Phalcon\Escaper¶
implements Phalcon\EscaperInterface
Escapes different kinds of text securing them. By using this component you may prevent XSS attacks.
This component only works with UTF-8. The PREG extension needs to be compiled with UTF-8 support.
<?php
$escaper = new \Phalcon\Escaper();
$escaped = $escaper->escapeCss("font-family: <Verdana>");
echo $escaped; // font\2D family\3A \20 \3C Verdana\3E
Methods¶
public setEncoding (mixed $encoding)
Sets the encoding to be used by the escaper
public getEncoding ()
Returns the internal encoding used by the escaper
public setHtmlQuoteType (mixed $quoteType)
Sets the HTML quoting type for htmlspecialchars
public setDoubleEncode (mixed $doubleEncode)
Sets the double_encode to be used by the escaper
final public detectEncoding (mixed $str)
Detect the character encoding of a string to be handled by an encoder Special-handling for chr(172) and chr(128) to chr(159) which fail to be detected by mb_detect_encoding()
final public normalizeEncoding (mixed $str)
Utility to normalize a string's encoding to UTF-32.
public escapeHtml (mixed $text)
Escapes a HTML string. Internally uses htmlspecialchars
public escapeHtmlAttr (mixed $attribute)
Escapes a HTML attribute string
public escapeCss (mixed $css)
Escape CSS strings by replacing non-alphanumeric chars by their hexadecimal escaped representation
public escapeJs (mixed $js)
Escape javascript strings by replacing non-alphanumeric chars by their hexadecimal escaped representation
public escapeUrl (mixed $url)
Escapes a URL. Internally uses rawurlencode
Class Phalcon\Escaper\Exception¶
extends class Phalcon\Exception
implements Throwable
Methods¶
final private Exception __clone () inherited from Exception
Clone the exception
public __construct ([mixed $message], [mixed $code], [mixed $previous]) inherited from Exception
Exception constructor
public __wakeup () inherited from Exception
...
final public string getMessage () inherited from Exception
Gets the Exception message
final public int getCode () inherited from Exception
Gets the Exception code
final public string getFile () inherited from Exception
Gets the file in which the exception occurred
final public int getLine () inherited from Exception
Gets the line in which the exception occurred
final public array getTrace () inherited from Exception
Gets the stack trace
final public Exception getPrevious () inherited from Exception
Returns previous Exception
final public Exception getTraceAsString () inherited from Exception
Gets the stack trace as a string
public string __toString () inherited from Exception
String representation of the exception
Interface Phalcon\EscaperInterface¶
Methods¶
abstract public setEncoding (mixed $encoding)
...
abstract public getEncoding ()
...
abstract public setHtmlQuoteType (mixed $quoteType)
...
abstract public escapeHtml (mixed $text)
...
abstract public escapeHtmlAttr (mixed $text)
...
abstract public escapeCss (mixed $css)
...
abstract public escapeJs (mixed $js)
...
abstract public escapeUrl (mixed $url)
...