WordPress で sanitize_text_field するときのメモ

        $a = $_POST[$key];
        // $a = urldecode($a);
        $a = mb_convert_encoding($a, 'UTF-8');
        $a = strip_tags($a, '<title><h1><h2><h3><h4><h5><h6><hr><hr/><br><br/><p><center><div><pre><span><blockquote><address><font><i><tt><b><u><strike><big><small><sub><sup><em><strong><code><ul><ol><li><dl><dt><dd><table><tbody><tr><th><td><caption><a><img><img/>');
        // ENT_IGNORE >= PHP5.3, ENT_SUBSTITUTE >= PHP5.4
        $a = htmlentities($a, ENT_QUOTES, 'UTF-8');
        $a = sanitize_text_field($a);
        return $a;

$a = $_POST[$key];

// $a = urldecode($a);

$a = mb_convert_encoding($a, 'UTF-8');

$a = strip_tags($a, '<title><h1><h2><h3><h4><h5><h6><hr><hr/><br><br/><p><center><div><pre><span><blockquote><address><font><i><tt><b><u><strike><big><small><sub><sup><em><strong><code><ul><ol><li><dl><dt><dd><table><tbody><tr><th><td><caption><a><img><img/>');

// ENT_IGNORE >= PHP5.3, ENT_SUBSTITUTE >= PHP5.4

$a = htmlentities($a, ENT_QUOTES, 'UTF-8');

$a = sanitize_text_field($a);

return $a;

参考:
https://ja.stackoverflow.com/questions/7351/htmlentities%E9%96%A2%E6%95%B0%E3%82%92%E4%BD%BF%E3%81%86%E3%81%A8-%E3%81%AA%E3%81%9C%E6%97%A5%E6%9C%AC%E8%AA%9E%E6%96%87%E5%AD%97%E5%88%97%E3%81%8C%E6%B6%88%E3%81%88%E3%81%A6%E3%81%97%E3%81%BE%E3%81%86%E3%81%AE%E3%81%8B

コメントを残す