mirror/processwire
1
0
Fork 0
mirror of https://github.com/processwire/processwire.git synced 2025-08-16 03:34:33 +02:00
Code Issues Releases Wiki Activity

Fix issue processwire/processwire-issues#854

Browse Source
This commit is contained in:
Ryan Cramer
2019-04-16 10:03:42 -04:00
parent 21164eaef5
commit 72324fdbb1
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
wire/core/Sanitizer.php
View File

@@ -271,7 +271,14 @@ class Sanitizer extends Wire {
if($needsWork) {
$value = str_replace(array("'", '"'), '', $value); // blank out any quotes
$value = filter_var($value, FILTER_SANITIZE_STRING, FILTER_FLAG_STRIP_LOW | FILTER_FLAG_STRIP_HIGH | FILTER_FLAG_NO_ENCODE_QUOTES);
$_value = $value;
$filters = FILTER_FLAG_STRIP_LOW | FILTER_FLAG_STRIP_HIGH | FILTER_FLAG_NO_ENCODE_QUOTES;
$value = filter_var($value, FILTER_SANITIZE_STRING, $filters);
if(!strlen($value)) {
// if above filter blanked out the string, try with brackets already replaced
$value = str_replace(array('<', '>', '«', '»', '‹', '›'), $replacementChar, $_value);
$value = filter_var($value, FILTER_SANITIZE_STRING, $filters);
}
$hyphenPos = strpos($extras, '-');
if($hyphenPos !== false && $hyphenPos !== 0) {
// if hyphen present, ensure it's first (per PCRE requirements)