File Content: formatting.php <?php defined( 'ABSPATH' ) or die( 'Something went wrong.' ); /** * First half of escaping for LIKE special characters % and _ before preparing for MySQL. * * Use this only before wpdb::prepare() or esc_sql(). Reversing the order is very bad for security. * * Example Prepared Statement: * $wild = '%'; * $find = 'only 43% of planets'; * $like = $wild . $wpdb->esc_like( $find ) . $wild; * $sql = $wpdb->prepare( "SELECT * FROM $wpdb->posts WHERE post_content LIKE %s", $like ); * * Example Escape Chain: * $sql = esc_sql( $wpdb->esc_like( $input ) ); * * @since 1.0 * @since WP 4.0.0 * * @param (string) $text The raw text to be escaped. The input typed by the user should have no extra or deleted slashes. * * @return (string) Text in the form of a LIKE phrase. The output is not SQL safe. Call $wpdb::prepare() or real_escape next. */ function secupress_esc_like( $text ) { global $wpdb; if ( method_exists( $wpdb, 'esc_like' ) ) { return $wpdb->esc_like( $text ); } return addcslashes( $text, '_%\\' ); } /** * Return the "unaliased" version of an email address. * * @since 1.0 * * @param (string) $email An email address. * * @return (string) */ function secupress_remove_email_alias( $email ) { $provider = strstr( $email, '@' ); $email = strstr( $email, '@', true ); $email = explode( '+', $email ); $email = reset( $email ); $email = str_replace( '.', '', $email ); return $email . $provider; } /** * Return the email "example@example.com" like "e%x%a%m%p%l%e%@example.com" * * @since 1.0 * * @param (string) $email An email address. * * @return (string) */ function secupress_prepare_email_for_like_search( $email ) { $email = secupress_remove_email_alias( $email ); $provider = strstr( $email, '@' ); $email = secupress_esc_like( strstr( $email, '@', true ) ); $email = str_split( $email ); $email = implode( '%', $email ); return $email . '%' . $provider; } /** * Generate a folder name using a hash in it. * * @since 1.0 * * @param (string) $context Your context, don't use empty string. * @param (string) $path The root base for this folder, optional. * * @return (string) */ function secupress_get_hashed_folder_name( $context = 'folder_name', $path = '/' ) { return $path . 'secupress-' . secupress_generate_hash( $context, 8, 8 ) . '/'; } /** * Generate a hash. * * @since 1.0 * * @param (string) $context Your context, don't use empty string. * @param (int) $start Start of the `substr()`. * @param (int) $length Length of the hash. * * @return (string) */ function secupress_generate_hash( $context, $start = 2, $length = 6 ) { static $hash = array(); $key = "$context|$start|$length"; if ( ! isset( $hash[ $key ] ) ) { $hash[ $key ] = substr( md5( secupress_get_option( 'hash_key' ) . $context ), $start, $length ); } return $hash[ $key ]; } /** * Generate a random key. * * @since 1.0 * * @param (int) $length Length of the key. * * @return (string) */ function secupress_generate_key( $length = 16 ) { $chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567'; $key = ''; for ( $i = 0; $i < $length; $i++ ) { $key .= $chars[ wp_rand( 0, 31 ) ]; } return $key; } /** * Validate a range. * * @since 1.0 * * @param (int) $value The value to test. * @param (int) $min Minimum value. * @param (int) $max Maximum value. * @param (mixed) $default What to return if outside of the range. Default: false. * * @return (mixed) The value on success. `$default` on failure. */ function secupress_validate_range( $value, $min, $max, $default = false ) { $test = filter_var( $value, FILTER_VALIDATE_INT, array( 'options' => array( 'min_range' => $min, 'max_range' => $max ) ) ); if ( false === $test ) { return $default; } return $value; } /** * Limit a number to a high and low value. * A bit like `secupress_validate_range()` but: * - cast the value as integer. * - return the min/max value instead of false/default. * * @since 1.0 * * @param (numeric) $value The value to limit. * @param (int) $min The minimum value. * @param (int) $max The maximum value. * * @return (int) */ function secupress_minmax_range( $value, $min, $max ) { $value = (int) $value; $value = max( $min, $value ); $value = min( $value, $max ); return $value; } /** * Sanitize a `$separator` separated list by removing doubled-separators. * * @since 1.0 * * @param (string) $list The list. * @param (string) $separator The separator. * * @return (string) The list. */ function secupress_sanitize_list( $list, $separator = ', ' ) { if ( empty( $list ) ) { return ''; } $trimed_sep = trim( $separator ); $double_sep = $trimed_sep . $trimed_sep; $list = preg_replace( '/\s*' . $trimed_sep . '\s*/', $trimed_sep, $list ); $list = trim( $list, $trimed_sep . ' ' ); while ( false !== strpos( $list, $double_sep ) ) { $list = str_replace( $double_sep, $trimed_sep, $list ); } return str_replace( $trimed_sep, $separator, $list ); } /** * Apply `array_unique()` and `natcasesort()` on a list. * * @since 1.0 * * @param (string|array) $list The list. * @param (string|bool) $separator The separator. If not false, the function will explode and implode the list. * * @return (string|array) The list. */ function secupress_unique_sorted_list( $list, $separator = false ) { if ( array() === $list || '' === $list ) { return $list; } if ( false !== $separator ) { $list = explode( $separator, $list ); } $list = array_flip( array_flip( $list ) ); natcasesort( $list ); if ( false !== $separator ) { $list = implode( $separator, $list ); } return $list; } /** * Format a timestamp into something really human. * * @since 2.1 * @author Julio Potier * * @see https://21douze.fr/human_readable_duration-ou-pas-147097.html * * @param (string|int) $entry Can be a timestamp or a string like 24:12:33 * @return **/ function secupress_readable_duration( $entry ) { if ( ! is_numeric( $entry ) ) { $coeff = [ 1, MINUTE_IN_SECONDS, HOUR_IN_SECONDS, DAY_IN_SECONDS, MONTH_IN_SECONDS, YEAR_IN_SECONDS ]; $data = array_reverse( array_map( 'intval', explode( ':', $entry ) ) ); $entry = 0; foreach ( $data as $index => $time ) { $entry += $time * $coeff[ $index ]; } if ( ! $entry ) { trigger_error( 'Entry data must be numeric or respect format dd:hh:mm:ss' ); return; } } $from = new \DateTime( '@0' ); $to = new \DateTime( "@$entry" ); $data = explode( ':', $from->diff( $to )->format('%s:%i:%h:%d:%m:%y') ); $return = []; $labels = [ _n_noop( '%s second', '%s seconds' ), _n_noop( '%s minute', '%s minutes' ), _n_noop( '%s hour', '%s hours' ), _n_noop( '%s day', '%s days' ), _n_noop( '%s month', '%s months' ), _n_noop( '%s year', '%s years' ), ]; foreach( $data as $i => $time ) { if ( '0' === $time && ! empty( array_filter( $return, 'intval' ) ) ) { continue; } $return[] = sprintf( translate_nooped_plural( $labels[ $i ], $time ), $time ); } $return = array_reverse( $return ); $text = wp_sprintf( '%l', $return ); return $text; } /** * Tag a string * * @since 2.0.3 * @author Julio Potier * * @param (string) $str The text * @param (string) $tag The HTML tag * @return (string) **/ function secupress_tag_me( $str, $tag ) { return sprintf( '<%1$s>%2$s</%1$s>', $tag, $str ); } /** * Tag a string with <code> * * @since 2.0.3 * @author Julio Potier * * @param (string) $str The text * @return (string) **/ function secupress_code_me( $str ) { return secupress_tag_me( $str, 'code' ); } Submit