wpseek.com
Outil de recherche WordPress pour les développeurs et auteurs de thèmes



_sanitize_text_fields › WordPress Function

Depuis4.7.0
Dépréciéen/a
› _sanitize_text_fields ( $str, $keep_newlines = false )
Accès:
  • private
Paramètres: (2)
  • (string) $str String to sanitize.
    Requis: Oui
  • (bool) $keep_newlines Optional. Whether to keep newlines. Default: false.
    Requis: Non
    Défaut: false
Retourne:
  • (string) Sanitized string.
Défini(e) dans:
Codex:

Internal helper function to sanitize a string from user input or from the database.



Fonctions en relation: sanitize_text_field, sanitize_textarea_field, sanitize_term_field, sanitize_user_field, sanitize_post_field

Source 

function _sanitize_text_fields( $str, $keep_newlines = false ) {
	if ( is_object( $str ) || is_array( $str ) ) {
		return '';
	}

	$str = (string) $str;

	$filtered = wp_check_invalid_utf8( $str );

	if ( str_contains( $filtered, '<' ) ) {
		$filtered = wp_pre_kses_less_than( $filtered );
		// This will strip extra whitespace for us.
		$filtered = wp_strip_all_tags( $filtered, false );

		/*
		 * Use HTML entities in a special case to make sure that
		 * later newline stripping stages cannot lead to a functional tag.
		 */
		$filtered = str_replace( "<\n", "&lt;\n", $filtered );
	}

	if ( ! $keep_newlines ) {
		$filtered = preg_replace( '/[\r\n\t ]+/', ' ', $filtered );
	}
	$filtered = trim( $filtered );

	// Remove percent-encoded characters.
	$found = false;
	while ( preg_match( '/%[a-f0-9]{2}/i', $filtered, $match ) ) {
		$filtered = str_replace( $match[0], '', $filtered );
		$found    = true;
	}

	if ( $found ) {
		// Strip out the whitespace that may now exist after removing percent-encoded characters.
		$filtered = trim( preg_replace( '/ +/', ' ', $filtered ) );
	}

	return $filtered;
}