安全过滤

安全过滤

Testing Is Documentation

可以对用户输入数据进行过滤。

Uses

<?php
use Leevel\Encryption\Helper;

custom_addslashes 添加模式转义和移除魔术方法转义

public function testBaseUse(): void
{
    $strings = "O'Reilly?";
    $out = "O\\'Reilly?";
    $this->assertSame($out, Helper::customAddslashes($strings));
    $this->assertSame($strings, Helper::customStripslashes($out));
    $arrays = ["O'Reilly?" => "O'Reilly?"];
    $outs = ["O\\'Reilly?" => "O\\'Reilly?"];
    $this->assertSame($outs, Helper::customAddslashes($arrays));
    $this->assertSame($arrays, Helper::customStripslashes($outs));
}

deep_replace 深度过滤

public function testDeepReplace(): void
{
    $strings = 'You should eat fruits, vegetables, and fiber every day.';
    $out = 'You should eat fruits, vegetables, and fiber every .';
    $this->assertSame($out, Helper::deepReplace(['shoule', 'day'], $strings));
}

filter_script 过滤 script

public function testFilterScript(): void
{
    $strings = '<script>hello world.';
    $out = '&lt;script>hello world.';
    $this->assertSame($out, Helper::filterScript($strings));
}

clean_hex 过滤十六进制字符串

public function testCleanHex(): void
{
    $strings = '0x63hello 0x6f world.';
    $out = '0hello 0 world.';
    $this->assertSame($out, Helper::cleanHex($strings));
}

str_filter 字符过滤

public function testStrFilter(): void
{
    $strings = 'This is some <b>bold</b> text.';
    $out = 'This is some &lt;b&gt;bold&lt;/b&gt; text.';
    $this->assertSame($out, Helper::strFilter($strings));
    $strings = ['This is some <b>bold</b> text.'];
    $out = ['This is some &lt;b&gt;bold&lt;/b&gt; text.'];
    $this->assertSame($out, Helper::strFilter($strings));
}

html_filter HTML 过滤

public function testHtmlFilter(): void
{
    $strings = "foo bar<script>.<span onclick='alert(5);'>yes</span>.";
    $out = 'foo bar&lt;script&gt;.<span >yes</span>.';
    $this->assertSame($out, Helper::htmlFilter($strings));
    $strings = ["foo bar<script>.<span onclick='alert(5);'>yes</span>."];
    $out = ['foo bar&lt;script&gt;.<span >yes</span>.'];
    $this->assertSame($out, Helper::htmlFilter($strings));
}

html_view 字符 HTML 安全显示

public function testHtmlView(): void
{
    $strings = "i a \n here";
    $out = 'i a <br />
e';
    $this->assertSame($out, Helper::htmlView($strings));
}

clean_js 过滤 JavaScript

public function testCleanJs(): void
{
    $strings = "i a <script></script> <body> <span onmouse='alert(5);'></span>".
        '<span window. xxx>'.
        '<script>window</script> here';
    $out = 'i a  here';
    $this->assertSame($out, Helper::cleanJs($strings));
    $strings = 'i a <span javascript:></span> here';
    $out = 'i a <span ></span> here';
    $this->assertSame($out, Helper::cleanJs($strings));
}

text 字符串文本化

public function testText(): void
{
    $strings = "i a <script></script> \n\r<body> <span onmouse='alert(5);'> here";
    $out = 'iahere';
    $this->assertSame($out, Helper::text($strings));
}

strip 字符过滤 JS 和 HTML 标签

public function testStrip(): void
{
    $strings = "i a <script></script> <body> <span onmouse='alert(5);'> here";
    $out = 'i a    here';
    $this->assertSame($out, Helper::strip($strings));
}

custom_htmlspecialchars 字符 HTML 安全实体

public function testCustomHtmlspecialchars(): void
{
    $strings = 'i a < here';
    $out = 'i a &lt; here';
    $this->assertSame($out, Helper::customHtmlspecialchars($strings));
    $strings = ['i a < here', 'i a > here'];
    $out = ['i a &lt; here', 'i a &gt; here'];
    $this->assertSame($out, Helper::customHtmlspecialchars($strings));
}

un_htmlspecialchars 字符 HTML 实体还原

public function testUnHtmlSpecialchars(): void
{
    $strings = 'i a &lt; here';
    $out = 'i a < here';
    $this->assertSame($out, Helper::unHtmlspecialchars($strings));
    $strings = ['i a &lt; here', 'i a &gt; here'];
    $out = ['i a < here', 'i a > here'];
    $this->assertSame($out, Helper::unHtmlspecialchars($strings));
}