moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-05 08:56:36 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

stripslashes_safe() improvement - now works also for arrays and objects see bug #2338

Browse source
This commit is contained in:
skodak 2006-04-13 21:27:01 +00:00
parent bd9964841d
commit e8d1c9ed2b
1 changed files with 23 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

31
lib/weblib.php
View file

@ -328,22 +328,37 @@ function data_submitted($url='') {
} }
/** /**
* Moodle replacement for php stripslashes() function * Moodle replacement for php stripslashes() function,
* works also for objects and arrays.
* *
* The standard php stripslashes() removes ALL backslashes * The standard php stripslashes() removes ALL backslashes
* even from strings - so C:\temp becomes C:temp - this isn't good. * even from strings - so C:\temp becomes C:temp - this isn't good.
* This function should work as a fairly safe replacement * This function should work as a fairly safe replacement
* to be called on quoted AND unquoted strings (to be sure) * to be called on quoted AND unquoted strings (to be sure)
* *
* @param string the string to remove unsafe slashes from * @param mixed something to remove unsafe slashes from
* @return string * @return mixed
*/ */
function stripslashes_safe($string) { function stripslashes_safe($mixed) {
// there is no need to remove slashes from int, float and bool types
if (empty($mixed)) {
//nothing to do...
} else if (is_string($mixed)) {
$mixed = str_replace("\\'", "'", $mixed);
$mixed = str_replace('\\"', '"', $mixed);
$mixed = str_replace('\\\\', '\\', $mixed);
} else if (is_array($mixed)) {
foreach ($mixed as $key => $value) {
$mixed[$key] = stripslashes_safe($value);
}
} else if (is_object($mixed)) {
$vars = get_object_vars($mixed);
foreach ($vars as $key => $value) {
$mixed->$key = stripslashes_safe($value);
}
}
$string = str_replace("\\'", "'", $string); return $mixed;
$string = str_replace('\\"', '"', $string);
$string = str_replace('\\\\', '\\', $string);
return $string;
} }
/** /**