php过滤html标记属性类用法实例

本文实例讲述了php 过滤html标记属性类及其用法。是PHP项目开发中比较常见的实用技巧。分享给大家供大家参考。具体方法如下：

HtmlAttributeFilter.class.php类文件如下：

array('href','class'),'span'=>array('class')) 
  private $_ignore = array();  // 忽略过滤的标记 例如:array('span','img') 
 
 
   
  public function strip($str){ 
    $this->_str = $str; 
 
    if(is_string($this->_str) && strlen($this->_str)>0){ // 判断字符串 
 
      $this->_str = strtolower($this->_str); // 转成小写 
 
      $res = $this->findElements(); 
      if(is_string($res)){ 
 return $res; 
      } 
      $nodes = $this->findAttributes($res); 
      $this->removeAttributes($nodes); 
    } 
    return $this->_str; 
  } 
 
   
  public function setAllow($param=array()){ 
    $this->_allow = $param; 
  } 
 
   
  public function setException($param=array()){ 
    $this->_exception = $param; 
  } 
 
   
  public function setIgnore($param=array()){ 
    $this->_ignore = $param; 
  } 
 
   
  private function findElements(){ 
    $nodes = array(); 
    preg_match_all("/<([^ !/>n]+)([^>]*)>/i", $this->_str, $elements); 
    foreach($elements[1] as $el_key => $element){ 
      if($elements[2][$el_key]){ 
 $literal = $elements[0][$el_key]; 
 $element_name = $elements[1][$el_key]; 
 $attributes = $elements[2][$el_key]; 
 if(is_array($this->_ignore) && !in_array($element_name, $this->_ignore)){ 
   $nodes[] = array('literal'=>$literal, 'name'=>$element_name, 'attributes'=>$attributes); 
 } 
      } 
    } 
 
    if(!$nodes[0]){ 
      return $this->_str; 
    }else{ 
      return $nodes; 
    } 
  } 
 
   
  private function findAttributes($nodes){ 
    foreach($nodes as &$node){ 
      preg_match_all("/([^ =]+)s*=s*["|']{0,1}([^"']*)["|']{0,1}/i", $node['attributes'], $attributes); 
      if($attributes[1]){ 
 foreach($attributes[1] as $att_key=>$att){ 
   $literal = $attributes[0][$att_key]; 
   $attribute_name = $attributes[1][$att_key]; 
   $value = $attributes[2][$att_key]; 
   $atts[] = array('literal'=>$literal, 'name'=>$attribute_name, 'value'=>$value); 
 } 
      }else{ 
 $node['attributes'] = null; 
      } 
      $node['attributes'] = $atts; 
      unset($atts); 
    } 
    return $nodes; 
  } 
 
   
  private function removeAttributes($nodes){ 
    foreach($nodes as $node){ 
      $node_name = $node['name']; 
      $new_attributes = ''; 
      if(is_array($node['attributes'])){ 
 foreach($node['attributes'] as $attribute){ 
   if((is_array($this->_allow) && in_array($attribute['name'], $this->_allow)) || $this->isException($node_name, $attribute['name'], $this->_exception)){ 
     $new_attributes = $this->createAttributes($new_attributes, $attribute['name'], $attribute['value']); 
   } 
 } 
      } 
      $replacement = ($new_attributes) ? "<$node_name $new_attributes>" : "<$node_name>"; 
      $this->_str = preg_replace('/'.$this->protect($node['literal']).'/', $replacement, $this->_str); 
    } 
  } 
 
   
  private function isException($element_name, $attribute_name, $exceptions){ 
    if(array_key_exists($element_name, $this->_exception)){ 
      if(in_array($attribute_name, $this->_exception[$element_name])){ 
 return true; 
      } 
    } 
    return false; 
  } 
 
   
  private function createAttributes($new_attributes, $name, $value){ 
    if($new_attributes){ 
      $new_attributes .= " "; 
    } 
    $new_attributes .= "$name="$value""; 
    return $new_attributes; 
  } 
 
 
   
  private function protect($str){ 
    $conversions = array( 
      "^" => "^",  
      "[" => "[",  
      "." => ".",  
      "$" => "$",  
      "{" => "{",  
      "*" => "*",  
      "(" => "(",  
      "\" => "\\",  
      "/" => "/",  
      "+" => "+",  
      ")" => ")",  
      "|" => "|",  
      "?" => "?",  
      "<" => "<",  
      ">" => ">"  
    ); 
    return strtr($str, $conversions); 
  } 
 
} // class end 
 
?>

demo示例代码如下：

yuna
love
want to knowYES
'; 
 
$obj = new HtmlAttributeFilter(); 
 
// 允许id属性 
$obj->setAllow(array('id')); 
 
$obj->setException(array( 
  'a' => array('href'),  // a 标签允许有 href属性特例 
  'ul' => array('class') // ul 标签允许有 class属性特例 
)); 
 
// img 标签忽略,不过滤任何属性 
$obj->setIgnore(array('img')); 
 
echo 'source str:
'; 
echo htmlspecialchars($str).'

'; 
echo 'filter str:
'; 
echo htmlspecialchars($obj->strip($str)); 
?> 

本文完整源码点击此处本机下载。

希望本文所述对大家的PHP程序设计有所帮助。