<?php/** * Smarty plugin * @package Smarty * @subpackage plugins *//** * Smarty escape modifier plugin * * Type:     modifier<br> * Name:     escape<br> * Purpose:  Escape the string according to escapement type * @link http://smarty.php.net/manual/en/language.modifier.escape.php *          escape (Smarty online manual) * @author   Monte Ohrt <monte at ohrt dot com> * @param string * @param html|htmlall|url|quotes|hex|hexentity|javascript * @return string */function smarty_modifier_escape($string, $esc_type = 'html', $char_set = 'ISO-8859-1'){    switch ($esc_type) {        case 'html':            return htmlspecialchars($string, ENT_QUOTES, $char_set);        case 'htmlall':            return htmlentities($string, ENT_QUOTES, $char_set);        case 'url':            return rawurlencode($string);        case 'urlpathinfo':            return str_replace('%2F','/',rawurlencode($string));                    case 'quotes':            // escape unescaped single quotes            return preg_replace("%(?<!\\\\)'%", "\\'", $string);        case 'hex':            // escape every character into hex            $return = '';            for ($x=0; $x < strlen($string); $x++) {                $return .= '%' . bin2hex($string[$x]);            }            return $return;                    case 'hexentity':            $return = '';            for ($x=0; $x < strlen($string); $x++) {                $return .= '&#x' . bin2hex($string[$x]) . ';';            }            return $return;        case 'decentity':            $return = '';            for ($x=0; $x < strlen($string); $x++) {                $return .= '&#' . ord($string[$x]) . ';';            }            return $return;        case 'javascript':            // escape quotes and backslashes, newlines, etc.            return strtr($string, array('\\'=>'\\\\',"'"=>"\\'",'"'=>'\\"',"\r"=>'\\r',"\n"=>'\\n','</'=>'<\/'));                    case 'mail':            // safe way to display e-mail address on a web page            return str_replace(array('@', '.'),array(' [AT] ', ' [DOT] '), $string);                    case 'nonstd':           // escape non-standard chars, such as ms document quotes           $_res = '';           for($_i = 0, $_len = strlen($string); $_i < $_len; $_i++) {               $_ord = ord(substr($string, $_i, 1));               // non-standard char, escape it               if($_ord >= 126){                   $_res .= '&#' . $_ord . ';';               }               else {                   $_res .= substr($string, $_i, 1);               }           }           return $_res;        default:            return $string;    }}/* vim: set expandtab: */?>