escape
This is used to encode/escape a variable to html,
url, single quotes,
hex, hexentity,
javascript and mail.
By default its html escaped.
Example 5-10. escape
<?php
$smarty->assign('articleTitle', "'Stiff Opposition Expected to Casketless Funeral Plan'" ); $smarty->assign('EmailAddress','smarty@example.com');
?>
|
Where template is:
{$articleTitle}
{$articleTitle|escape}
{$articleTitle|escape:'html'} {* escapes & " ' < > *}
{$articleTitle|escape:'htmlall'} {* escapes ALL html entities *}
{$articleTitle|escape:'url'}
{$articleTitle|escape:'quotes'}
<a href="mailto:{$EmailAddress|escape:"hex"}">{$EmailAddress|escape:"hexentity"}</a>
{$EmailAddress|escape:'mail'} {* this converts to email to text *}
{'mail@example.com'|escape:'mail'} |
Will output:
'Stiff Opposition Expected to Casketless Funeral Plan'
'Stiff Opposition Expected to Casketless Funeral Plan'
'Stiff Opposition Expected to Casketless Funeral Plan'
'Stiff Opposition Expected to Casketless Funeral Plan'
%27Stiff+Opposition+Expected+to+Casketless+Funeral+Plan%27
\'Stiff Opposition Expected to Casketless Funeral Plan\'
<a href="mailto:%62%6f%..snip..%65%74">bob..snip..et</a>
smarty [AT] example [DOT] com
mail [AT] example [DOT] com |
|
Example 5-11. Other examples PHP functions can be used as modifiers,
$security permitting.
{* the "rewind" paramater registers the current location *}
<a href="{$SCRIPT_NAME}?page=foo&rewind={$smarty.server.REQUEST_URI|urlencode}">click here</a> |
This snippet is useful for emails, but see also
{mailto} {* email address mangled *}
<a href="mailto:{$EmailAddress|escape:'hex'}">{$EmailAddress|escape:'mail'}</a> |
|
See also
escaping smarty parsing,
{mailto}
and the
obfuscating email addresses page.