Web Design Leaves

function esc_html( $text ) {
    $safe_text = wp_check_invalid_utf8( $text );
    $safe_text = _wp_specialchars( $safe_text, ENT_QUOTES );
    /**
     * Filters a string cleaned and escaped for output in HTML.
     * Text passed to esc_html() is stripped of invalid or special characters
     * before output.
     * @since 2.8.0
     * @param string $safe_text The text after it has been escaped.
     * @param string $text      The text prior to being escaped.
     */
    return apply_filters( 'esc_html', $safe_text, $text );
}

function _wp_specialchars( $string, $quote_style = ENT_NOQUOTES, $charset = false, $double_encode = false ) {
    $string = (string) $string;

    if ( 0 === strlen( $string ) ) {
        return '';
    }

    // Don't bother if there are no specialchars - saves some processing
    if ( ! preg_match( '/[&<>"\']/', $string ) ) {
        return $string;
    }

    // Account for the previous behaviour of the function when the $quote_style is not an accepted value
    if ( empty( $quote_style ) ) {
        $quote_style = ENT_NOQUOTES;
    } elseif ( ! in_array( $quote_style, array( 0, 2, 3, 'single', 'double' ), true ) ) {
        $quote_style = ENT_QUOTES;
    }

    // Store the site charset as a static to avoid multiple calls to wp_load_alloptions()
    if ( ! $charset ) {
        static $_charset = null;
        if ( ! isset( $_charset ) ) {
            $alloptions = wp_load_alloptions();
            $_charset   = isset( $alloptions['blog_charset'] ) ? $alloptions['blog_charset'] : '';
        }
        $charset = $_charset;
    }

    if ( in_array( $charset, array( 'utf8', 'utf-8', 'UTF8' ) ) ) {
        $charset = 'UTF-8';
    }

    $_quote_style = $quote_style;

    if ( $quote_style === 'double' ) {
        $quote_style  = ENT_COMPAT;
        $_quote_style = ENT_COMPAT;
    } elseif ( $quote_style === 'single' ) {
        $quote_style = ENT_NOQUOTES;
    }

    if ( ! $double_encode ) {
        // Guarantee every &entity; is valid, convert &garbage; into &amp;garbage;
        // This is required for PHP < 5.4.0 because ENT_HTML401 flag is unavailable.
        $string = wp_kses_normalize_entities( $string );
    }

    $string = @htmlspecialchars( $string, $quote_style, $charset, $double_encode );

    // Back-compat.
    if ( 'single' === $_quote_style ) {
        $string = str_replace( "'", '&#039;', $string );
    }

    return $string;
}

function esc_attr( $text ) {
    $safe_text = wp_check_invalid_utf8( $text );
    $safe_text = _wp_specialchars( $safe_text, ENT_QUOTES );
    /**
     * Filters a string cleaned and escaped for output in an HTML attribute.
     * Text passed to esc_attr() is stripped of invalid or special characters before output.
     * @since 2.0.6
     * @param string $safe_text The text after it has been escaped.
     * @param string $text      The text prior to being escaped.
     */
    return apply_filters( 'attribute_escape', $safe_text, $text );
}

function esc_url( $url, $protocols = null, $_context = 'display' ) {
  $original_url = $url;

  if ( '' == $url ) {
    return $url;
  }

  $url = str_replace( ' ', '%20', $url );
  $url = preg_replace( '|[^a-z0-9-~+_.?#=!&;,/:%@$\|*\'()\[\]\\x80-\\xff]|i', '', $url );

  if ( '' === $url ) {
    return $url;
  }

  if ( 0 !== stripos( $url, 'mailto:' ) ) {
    $strip = array( '%0d', '%0a', '%0D', '%0A' );
    $url   = _deep_replace( $strip, $url );
  }

  $url = str_replace( ';//', '://', $url );
  /* If the URL doesn't appear to contain a scheme, we presume it needs http:// prepended (unless a relative link starting with /, # or ? or a php file).
   */
  if ( strpos( $url, ':' ) === false && ! in_array( $url[0], array( '/', '#', '?' ) ) &&
    ! preg_match( '/^[a-z0-9-]+?\.php/i', $url ) ) {
    $url = 'http://' . $url;
  }

  // Replace ampersands and single quotes only when displaying.
  if ( 'display' == $_context ) {
    $url = wp_kses_normalize_entities( $url );
    $url = str_replace( '&', '&', $url );
    $url = str_replace( "'", ''', $url );
  }

  if ( ( false !== strpos( $url, '[' ) ) || ( false !== strpos( $url, ']' ) ) ) {

    $parsed = wp_parse_url( $url );
    $front  = '';

    if ( isset( $parsed['scheme'] ) ) {
      $front .= $parsed['scheme'] . '://';
    } elseif ( '/' === $url[0] ) {
        $front .= '//';
    }

    if ( isset( $parsed['user'] ) ) {
      $front .= $parsed['user'];
    }

    if ( isset( $parsed['pass'] ) ) {
      $front .= ':' . $parsed['pass'];
    }

    if ( isset( $parsed['user'] ) || isset( $parsed['pass'] ) ) {
      $front .= '@';
    }

    if ( isset( $parsed['host'] ) ) {
      $front .= $parsed['host'];
    }

    if ( isset( $parsed['port'] ) ) {
      $front .= ':' . $parsed['port'];
    }

    $end_dirty = str_replace( $front, '', $url );
    $end_clean = str_replace( array( '[', ']' ), array( '%5B', '%5D' ), $end_dirty );
    $url       = str_replace( $end_dirty, $end_clean, $url );

  }

  if ( '/' === $url[0] ) {
      $good_protocol_url = $url;
  } else {
    if ( ! is_array( $protocols ) ) {
      $protocols = wp_allowed_protocols();
    }
    $good_protocol_url = wp_kses_bad_protocol( $url, $protocols );
    if ( strtolower( $good_protocol_url ) != strtolower( $url ) ) {
      return '';
    }
  }

  /**
   * Filters a string cleaned and escaped for output as a URL.
   * @since 2.3.0
   * @param string $good_protocol_url The cleaned URL to be returned.
   * @param string $original_url      The URL prior to cleaning.
   * @param string $_context          If 'display', replace ampersands and single quotes only.
   */
  return apply_filters( 'clean_url', $good_protocol_url, $original_url, $_context );
}

function esc_textarea( $text ) {
  $safe_text = htmlspecialchars( $text, ENT_QUOTES, get_option( 'blog_charset' ) );
  /**
   * Filters a string cleaned and escaped for output in a textarea element.
   * @since 3.1.0
   * @param string $safe_text The text after it has been escaped.
   * @param string $text      The text prior to being escaped.
   */
  return apply_filters( 'esc_textarea', $safe_text, $text );
}

function wp_strip_all_tags( $string, $remove_breaks = false ) {
  $string = preg_replace( '@<(script|style)[^>]*?>.*?</\\1>@si', '', $string );
  $string = strip_tags( $string );

  if ( $remove_breaks ) {
    $string = preg_replace( '/[\r\n\t ]+/', ' ', $string );
  }

  return trim( $string );
}