The API

Sanitizes given array or value for safe input. Use the options to specify the connection to use, and what filters should be applied (with a boolean value). Valid filters:

• odd_spaces - removes any non space whitespace characters
• encode - Encode any html entities. Encode must be true for the remove_html to work.
• dollar - Escape $ with \$
• carriage - Remove \r
• unicode -
• escape - Should the string be SQL escaped.
• backslash -
• remove_html - Strip HTML with strip_tags. encode must be true for this option to work.

Makes a string SQL-safe.

Formats column data from definition in DBO's $columns array

Returns given string safe for display as HTML. Renders entities.

strip_tags() does not validating HTML syntax or structure, so it might strip whole passages with broken HTML.

Options:

• remove (boolean) if true strips all HTML tags before encoding
• charset (string) the charset used to encode the string
• quotes (int) see http://php.net/manual/en/function.htmlentities.php

Removes any non-alphanumeric characters.

Strips extra whitespace, images, scripts and stylesheets from output

Strips image tags from output

Strips scripts and stylesheets from output

Strips the specified tags from output. First parameter is string from where to remove tags. All subsequent parameters are tags.

Ex.$clean = Sanitize::stripTags($dirty, 'b', 'p', 'div');

Will remove all <b>, <p>, and <div> tags from the $dirty string.

Strips extra whitespace from output