mirror of
https://github.com/ezyang/htmlpurifier.git
synced 2024-11-14 01:08:41 +00:00
13790c6db2
git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/trunk@486 48356398-32a2-884e-a903-53898d9a118a
92 lines
2.9 KiB
Plaintext
92 lines
2.9 KiB
Plaintext
|
|
MODx Plugin
|
|
|
|
MODx <http://www.modxcms.com/> is an open source PHP application framework.
|
|
I first came across them in my referrer logs when tillda asked if anyone
|
|
could implement an HTML Purifier plugin. This forum thread
|
|
<http://modxcms.com/forums/index.php/topic,6604.0.html> eventually resulted
|
|
in the fruition of this plugin that davidm says, "is on top of my favorite
|
|
list." HTML Purifier goes great with WYSIWYG editors!
|
|
|
|
|
|
|
|
1. Credits
|
|
|
|
PaulGregory wrote the overall structure of the code. I added the
|
|
slashes hack.
|
|
|
|
|
|
|
|
2. Install
|
|
|
|
First, you need to place HTML Purifier library somewhere. The code here
|
|
assumes that you've placed in MODx's assets/plugins/htmlpurifier (no version
|
|
number).
|
|
|
|
Log into the manager, and navigate:
|
|
|
|
Resources > Manage Resources > Plugins tab > New Plugin
|
|
|
|
Type in a name (probably HTML Purifier), and copy paste this code into the
|
|
textarea:
|
|
|
|
--------------------------------------------------------------------------------
|
|
$e = &$modx->Event;
|
|
if ($e->name == 'OnBeforeDocFormSave') {
|
|
global $content;
|
|
|
|
set_include_path('../assets/plugins/htmlpurifier/library/'
|
|
. PATH_SEPARATOR . get_include_path());
|
|
include_once 'HTMLPurifier.php';
|
|
$purifier = new HTMLPurifier();
|
|
|
|
static $magic_quotes = null;
|
|
if ($magic_quotes === null) {
|
|
// this is an ugly hack because this hook hasn't
|
|
// had the backslashes removed yet when magic_quotes_gpc is on,
|
|
// but HTMLPurifier must not have the quotes slashed.
|
|
$magic_quotes = get_magic_quotes_gpc();
|
|
}
|
|
|
|
if ($magic_quotes) $content = stripslashes($content);
|
|
$content = $purifier->purify($content);
|
|
if ($magic_quotes) $content = addslashes($content);
|
|
}
|
|
--------------------------------------------------------------------------------
|
|
|
|
Then navigate to the System Events tab and check "OnBeforeDocFormSave".
|
|
Save the plugin. HTML Purifier now is integrated!
|
|
|
|
|
|
|
|
3. Making sure it works
|
|
|
|
You can test HTML Purifier by deliberately putting in crappy HTML and seeing
|
|
whether or not it gets fixed. A better way is to put in something like this:
|
|
|
|
<p lang="fr">Il est bon</p>
|
|
|
|
...and seeing whether or not the content comes out as:
|
|
|
|
<p lang="fr" xml:lang="fr">Il est bon</p>
|
|
|
|
(lang to xml:lang synchronization is one of the many features HTML Purifier
|
|
has).
|
|
|
|
|
|
|
|
4. Caveat Emptor
|
|
|
|
This code does not intercept save requests from the QuickEdit plugin, this may
|
|
be added in a later version. It also modifies things on save, so there's a
|
|
slight chance that HTML Purifier may make a boo-boo and accidently mess things
|
|
up (the original version is not saved).
|
|
|
|
Finally, make sure that MODx is using UTF-8. If you are using, say, a French
|
|
localisation, you may be using Latin-1, if that's the case, configure
|
|
HTML Purifier properly like this:
|
|
|
|
$config = HTMLPurifier_Config::createDefault();
|
|
$config->set('Core', 'Encoding', 'ISO-8859-1'); // or whatever encoding
|
|
$purifier = new HTMLPurifier($config);
|