Security Helper

Loading this Helper

This helper is loaded using the following code:

<?php

helper('security');

Available Functions

The following functions are available:

sanitize_filename($filename[, $relativePath = false])

Parameters:

• $filename (string) – Filename

• $relativePath (bool) – Whether the relative path is acceptable (available since v4.6.2)

Returns:

Sanitized file name

Return type:

string

Provides protection against directory traversal.

For more info, please see the Security Library documentation.

strip_image_tags($str)

Parameters:

• $str (string) – Input string

Returns:

The input string with no image tags

Return type:

string

This is a security function that will strip image tags from a string. It leaves the image URL as plain text.

Example:

<?php

$string = strip_image_tags($string);

encode_php_tags($str)

Parameters:

• $str (string) – Input string

Returns:

Safely formatted string

Return type:

string

This is a security function that converts PHP tags to entities.

Example:

<?php

$string = encode_php_tags($string);