Sanitizing strings to make them URL and filename safe?

by

I found this larger function in the Chyrp code:

/**
 * Function: sanitize
 * Returns a sanitized string, typically for URLs.
 *
 * Parameters:
 *     $string - The string to sanitize.
 *     $force_lowercase - Force the string to lowercase?
 *     $anal - If set to *true*, will remove all non-alphanumeric characters.
 */
function sanitize($string, $force_lowercase = true, $anal = false) {
    $strip = array("~", "`", "!", "@", "#", "$", "%", "^", "&", "*", "(", ")", "_", "=", "+", "[", "{", "]",
                   "}", "\\", "|", ";", ":", "\"", "'", "‘", "’", "“", "”", "–", "—",
                   "—", "–", ",", "<", ".", ">", "https://stackoverflow.com/", "?");
    $clean = trim(str_replace($strip, "", strip_tags($string)));
    $clean = preg_replace('/\s+/', "-", $clean);
    $clean = ($anal) ? preg_replace("/[^a-zA-Z0-9]/", "", $clean) : $clean ;
    return ($force_lowercase) ?
        (function_exists('mb_strtolower')) ?
            mb_strtolower($clean, 'UTF-8') :
            strtolower($clean) :
        $clean;
}

and this one in the wordpress code

/**
 * Sanitizes a filename replacing whitespace with dashes
 *
 * Removes special characters that are illegal in filenames on certain
 * operating systems and special characters requiring special escaping
 * to manipulate at the command line. Replaces spaces and consecutive
 * dashes with a single dash. Trim period, dash and underscore from beginning
 * and end of filename.
 *
 * @since 2.1.0
 *
 * @param string $filename The filename to be sanitized
 * @return string The sanitized filename
 */
function sanitize_file_name( $filename ) {
    $filename_raw = $filename;
    $special_chars = array("?", "[", "]", "https://stackoverflow.com/", "\\", "=", "<", ">", ":", ";", ",", "'", "\"", "&", "$", "#", "*", "(", ")", "|", "~", "`", "!", "{", "}");
    $special_chars = apply_filters('sanitize_file_name_chars', $special_chars, $filename_raw);
    $filename = str_replace($special_chars, '', $filename);
    $filename = preg_replace('/[\s-]+/', '-', $filename);
    $filename = trim($filename, '.-_');
    return apply_filters('sanitize_file_name', $filename, $filename_raw);
}

Update Sept 2012

Alix Axel has done some incredible work in this area. His phunction framework includes several great text filters and transformations.

More Related Contents:

  1. URL Redirect / URL Masking [closed]
  2. PHP create file with specific name [closed]
  3. URL rewriting with PHP
  4. Get the full URL in PHP
  5. PHP validation/regex for URL
  6. Passing base64 encoded strings in URL
  7. How do I get a file name from a full path with PHP?
  8. Replace URLs in text with HTML links
  9. Passing arrays as url parameter
  10. Get Last Part of URL PHP
  11. Passing multiple variables to another page in url
  12. What is the best way to check if a URL exists in PHP?
  13. Sanitizing user’s data in GET by PHP [duplicate]
  14. How to get the previous url using PHP
  15. Need a good regex to convert URLs to links but leave existing links alone
  16. Apache rewrite – get original URL in PHP
  17. What are fragment URLs and why to use them?
  18. Get current domain
  19. What is the “?” symbol in URL used for in php?
  20. PHP URL Encoding / Decoding
  21. PHP – Add link to a URL in a string
  22. How to get &curren to display literally, not as an HTML entity
  23. What does the dot-slash do to PHP include calls?
  24. PHP – Convert File system path to URL
  25. PHP: How to resolve a relative url
  26. PHP & Hash / Fragment Portion of URL
  27. getting the full url including the query string after hash
  28. Extract URL’s from a string using PHP [duplicate]
  29. Pretty URLs without mod_rewrite, without .htaccess
  30. Sanitize file path in PHP

Leave a Comment