k1low/escape

Auto escaping plugin for CakePHP

Auto escaping plugin for CakePHP

Installation

First, put `escape’ directory on app/plugins in your CakePHP application., _(*1)

Second, add the following code in app_controller.php, _(*2)

<?php
    class AppController extends Controller {
        var $components = array('Escape.Escape');
    }

Escape type

use htmlspecialchars() and html_entity_decode()

Escape / decode valiables., _(*3)

• `d()' decode escaped valiables.

app_controller.php example, _(*4)

<?php
    class AppController extends Controller {
        var $components = array('Escape.Escape');
    }

view.ctp example, _(*5)

<?php echo $escaped; // echo escaped value; ?>
<?php echo d($escaped); // echo decode value; ?>  

create object and set escaped/raw value

app_controller.php example, _(*6)

<?php
    class AppController extends Controller {
        var $components = array('Escape.Escape' => array('objectEscape' => true));
    }

view.ctp example, _(*7)

<?php echo $escaped; // echo escaped value; ?>
<?php echo $escaped->raw; // echo raw value; ?>  

$this->data escape

If you do not escape $this->data, add the following code in app_controller.php., _(*8)

<?php
    class AppController extends Controller {
        var $components = array('Escape.Escape' => array('formDataEscape' => false));
    }

TODO

• Auto Decoding in FormHelper::input()