Download the PHP package itools/smartstring without Composer
On this page you can find all versions of the php package itools/smartstring. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download itools/smartstring
More information about itools/smartstring
Files in itools/smartstring
Package smartstring
Short Description XSS-safe strings for PHP templates: values HTML-encode themselves on echo, interpolation, and concatenation, at least 3x faster than calling htmlspecialchars() yourself
License MIT
Homepage https://github.com/interactivetools-com/SmartString
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package smartstring
SmartString: PHP Strings That HTML-Encode Themselves
SmartString lets you write template code that's shorter, easier to read, and XSS-safe by default.
Values HTML-encode themselves the moment you echo, interpolate, or concatenate them, so one
forgotten htmlspecialchars() can't become an injection.
Instead of writing code like this:
You can write code like this:
Documentation
Full guides and references (browse on GitHub):
- The Basics (read in order)
- Getting Started - install, your first auto-encoded value, and the mental model
- Encoding and HTML - how auto-encoding works and the methods that let real markup through
- Text and Formatting - truncating, regex, dates, numbers, math, and custom functions with
map() - Conditionals and Error Checking - fallbacks, checks, and the guards that stop the page
- Everyday Use
- Common Patterns - copy-paste recipes for everyday template tasks
- Lookup
- Method Reference - every method, grouped by what it returns
- Troubleshooting - common error messages and gotchas, with fixes
- Performance - how our automatic encoding is at least 3x faster than calling
htmlspecialchars()yourself - AI Reference - the complete API in one dense file, written for AI coding assistants
You're Never Locked In
Use SmartString where it makes your code simpler, and plain PHP where you prefer it. The original value is always one call away:
Security
Values encode for HTML text and quoted attribute values, and markup reaches the page only through
the methods in Encoding and HTML. A link URL from user input still
needs its scheme checked: encoding leaves javascript: intact. Report a security problem as
described in SECURITY.md.
Related Libraries
- SmartArray - database rows as chainable collections, with fields returned as SmartStrings.
- ZenDB - database library that returns query results as SmartArrays of SmartStrings, so fields arrive HTML-safe.
- HtmlSecurityCheck - checks rich-text HTML for anything that could run script and lists each problem it finds.
- SvgSecurityCheck - checks uploaded SVG files for anything that could run script and lists each problem it finds.
Questions?
This library was developed for CMS Builder. Post a message in our "CMS Builder" forum here: https://www.interactivetools.com/forum/
License
MIT
All versions of smartstring with dependencies
ext-mbstring Version *