Liste de tous les membres
Fonctions membres publiques statiques |
static & | getInstance ($tagsArray=array(), $attrArray=array(), $tagsMethod=0, $attrMethod=0, $xssAuto=1) |
static | checkAttribute ($attrSubSet) |
Attributs protégés statiques |
static | $instances = array() |
Additional Inherited Members |
| $_errors = array() |
Documentation des constructeurs et destructeur
JFilterInput::__construct |
( |
|
$tagsArray = array() , |
|
|
|
$attrArray = array() , |
|
|
|
$tagsMethod = 0 , |
|
|
|
$attrMethod = 0 , |
|
|
|
$xssAuto = 1 |
|
) |
| |
Constructor for inputFilter class. Only first parameter is required.
- Paramètres:
-
array | $tagsArray | List of user-defined tags |
array | $attrArray | List of user-defined attributes |
integer | $tagsMethod | WhiteList method = 0, BlackList method = 1 |
integer | $attrMethod | WhiteList method = 0, BlackList method = 1 |
integer | $xssAuto | Only auto clean essentials = 0, Allow clean blacklisted tags/attr = 1 |
- Depuis:
- 11.1
Documentation des fonctions membres
JFilterInput::_cleanAttributes |
( |
|
$attrSet | ) |
|
|
protected |
Internal method to strip a tag of certain attributes
- Paramètres:
-
array | $attrSet | Array of attribute pairs to filter |
- Renvoie:
- array Filtered array of attribute pairs
- Depuis:
- 11.1
Références $count, $i, et elseif.
JFilterInput::_cleanTags |
( |
|
$source | ) |
|
|
protected |
Internal method to strip a string of certain tags
- Paramètres:
-
string | $source | Input string to be 'cleaned' |
- Renvoie:
- string 'Cleaned' version of input parameter
- Depuis:
- 11.1
Références $count, $i, et null.
JFilterInput::_decode |
( |
|
$source | ) |
|
|
protected |
Try to convert to plaintext
- Paramètres:
-
string | $source | The source string. |
- Renvoie:
- string Plaintext string
- Depuis:
- 11.1
JFilterInput::_escapeAttributeValues |
( |
|
$source | ) |
|
|
protected |
Escape < > and " inside attribute values
- Paramètres:
-
string | $source | The source string. |
- Renvoie:
- string Filtered string
- Depuis:
- 11.1
JFilterInput::_remove |
( |
|
$source | ) |
|
|
protected |
Internal method to iteratively remove all unwanted tags and attributes
- Paramètres:
-
string | $source | Input string to be 'cleaned' |
- Renvoie:
- string 'Cleaned' version of input parameter
- Depuis:
- 11.1
JFilterInput::_stripCSSExpressions |
( |
|
$source | ) |
|
|
protected |
Remove CSS Expressions in the form of <property>:expression(...)
- Paramètres:
-
string | $source | The source string. |
- Renvoie:
- string Filtered string
- Depuis:
- 11.1
Références $return.
static JFilterInput::checkAttribute |
( |
|
$attrSubSet | ) |
|
|
static |
JFilterInput::clean |
( |
|
$source, |
|
|
|
$type = 'string' |
|
) |
| |
Method to be called by another php script. Processes for XSS and specified bad code.
- Paramètres:
-
mixed | $source | Input string/array-of-string to be 'cleaned' |
string | $type | Return type for the variable (INT, UINT, FLOAT, BOOLEAN, WORD, ALNUM, CMD, BASE64, STRING, ARRAY, PATH, NONE) |
- Renvoie:
- mixed 'Cleaned' version of input parameter
- Depuis:
- 11.1
Références $key, et $type.
static& JFilterInput::getInstance |
( |
|
$tagsArray = array() , |
|
|
|
$attrArray = array() , |
|
|
|
$tagsMethod = 0 , |
|
|
|
$attrMethod = 0 , |
|
|
|
$xssAuto = 1 |
|
) |
| |
|
static |
Returns an input filter object, only creating it if it doesn't already exist.
- Paramètres:
-
array | $tagsArray | List of user-defined tags |
array | $attrArray | List of user-defined attributes |
integer | $tagsMethod | WhiteList method = 0, BlackList method = 1 |
integer | $attrMethod | WhiteList method = 0, BlackList method = 1 |
integer | $xssAuto | Only auto clean essentials = 0, Allow clean blacklisted tags/attr = 1 |
- Renvoie:
- JFilterInput The JFilterInput object.
- Depuis:
- 11.1
Référencé par JInputCookie\__construct(), JInputFiles\__construct(), JInputCLI\__construct(), JInput\__construct(), JRequest\_cleanVar(), JUpdaterExtension\_endElement(), JUpdate\_endElement(), JDocumentHTML\_fetchTemplate(), JInstallerLanguage\_install(), JCaptcha\_load(), JEditor\_loadEditor(), JUpdaterCollection\_startElement(), JInstallerComponent\discover_install(), JForm\filterField(), LanguagesHelper\filterKey(), ContentHelper\filterText(), JComponentHelper\filterText(), LanguagesHelper\filterText(), FinderIndexerParser\getInstance(), FinderIndexerStemmer\getInstance(), JSessionStorage\getInstance(), JController\getInstance(), JApplicationHelper\getPath(), ModFinderHelper\getQuery(), JAdministrator\getTemplate(), JSite\getTemplate(), JInstallerFile\install(), JInstallerLibrary\install(), JInstallerPackage\install(), JInstallerTemplate\install(), JInstallerPlugin\install(), JInstallerModule\install(), JInstallerComponent\install(), JToolBar\loadButtonType(), JParameter\loadElement(), JInstallerLibrary\loadLanguage(), JInstallerFile\loadLanguage(), JInstallerTemplate\loadLanguage(), JInstallerPackage\loadLanguage(), JInstallerComponent\loadLanguage(), PlgSystemHighlight\onAfterDispatch(), plgSystemRemember\onAfterInitialise(), FinderModelSearch\populateState(), modFeedHelper\render(), JDocumentError\render(), SearchController\search(), UsersModelMail\send(), JInstallerComponent\uninstall(), JInstallerLibrary\update(), JInstallerLanguage\update(), et JInstallerComponent\update().
Documentation des données membres
JFilterInput::$attrBlacklist |
Valeur initiale : array(
'action',
'background',
'codebase',
'dynsrc',
'lowsrc'
)
JFilterInput::$attrMethod |
JFilterInput::$instances = array() |
|
staticprotected |
JFilterInput::$tagBlacklist |
Valeur initiale : array(
'applet',
'body',
'bgsound',
'base',
'basefont',
'embed',
'frame',
'frameset',
'head',
'html',
'id',
'iframe',
'ilayer',
'layer',
'link',
'meta',
'name',
'object',
'script',
'style',
'title',
'xml'
)
JFilterInput::$tagsMethod |
La documentation de cette classe a été générée à partir du fichier suivant :