Purify input using the HTML Purifier standalone class.
Easily use multiple HTML Purifier configurations.
Copy HTML Purifier helper to:
./app/Helpers/htmlpurifier_helper.php
Download HTML Purifier with composer, like so:
composer require ezyang/htmlpurifier
Create and customize HTML Purifier configurations by opening the helper (htmlpurifier_helper.php
) and editing/adding case statements as needed. There's a default configuration named "comment" that should be sufficient for basic web comments with HTML allowed, but be sure to check it and make sure it meets your standards. View the HTML Purifier Configuration Documentation for more information.
Use the following code to purify using the default configuration:
helper('htmlpurifier');
$clean_html = html_purify($dirty_html);
Where $dirty_html
is a string, or an array of strings.
To use a custom configuration, pass the name of the configuration in the second parameter:
$clean_html = html_purify($dirty_html, 'comment');