diff --git a/resources/functions.php b/resources/functions.php index 43b4219938..5de807806e 100644 --- a/resources/functions.php +++ b/resources/functions.php @@ -2029,20 +2029,37 @@ return false; } -//escape user data - function escape($string) { - if (is_string($string)) { - return htmlentities($string, ENT_QUOTES | ENT_HTML5, 'UTF-8'); - } elseif (is_numeric($string)) { - return $string; - } else { - $string = (array) $string; - if (isset($string[0])) { - return htmlentities($string[0], ENT_QUOTES | ENT_HTML5, 'UTF-8'); - } +/** + * Escape the user data + *
Escapes all characters which have HTML character entity + * @param string $string the value to escape + * @return string + * @link https://www.php.net/htmlentities + */ +function escape($string) { + if (is_string($string)) { + return htmlentities($string, ENT_QUOTES | ENT_HTML5, 'UTF-8'); + } elseif (is_numeric($string)) { + return $string; + } else { + $string = (array) $string; + if (isset($string[0])) { + return htmlentities($string[0], ENT_QUOTES | ENT_HTML5, 'UTF-8'); } - return false; } + return false; +} + +/** + * Escape the user data for a textarea + *
Escapes & " ' < and > characters
+ * @param string $string the value to escape + * @return string + * @link https://www.php.net/htmlspecialchars + */ +function escape_textarea($string) { + return htmlspecialchars($string, ENT_QUOTES, 'UTF-8'); +} //output pre-formatted array keys and values if (!function_exists('view_array')) {