Admin Control Panel v2.0

✎ Editing: modx.txt ← Back

MODx Plugin

MODx <http://www.modxcms.com/> is an open source PHP application framework.

I first came across them in my referrer logs when tillda asked if anyone

could implement an HTML Purifier plugin.  This forum thread

<http://modxcms.com/forums/index.php/topic,6604.0.html> eventually resulted

in the fruition of this plugin that davidm says, "is on top of my favorite

list."  HTML Purifier goes great with WYSIWYG editors!

1. Credits

PaulGregory wrote the overall structure of the code.  I added the

slashes hack.

2. Install

First, you need to place HTML Purifier library somewhere.  The code here

assumes that you've placed in MODx's assets/plugins/htmlpurifier (no version

number).

Log into the manager, and navigate:

Resources > Manage Resources > Plugins tab > New Plugin

Type in a name (probably HTML Purifier), and copy paste this code into the

textarea:

--------------------------------------------------------------------------------

$e = &$modx->Event;

if ($e->name == 'OnBeforeDocFormSave') {

global $content;

include_once '../assets/plugins/htmlpurifier/library/HTMLPurifier.auto.php';

$purifier = new HTMLPurifier();

static $magic_quotes = null;

if ($magic_quotes === null) {

// this is an ugly hack because this hook hasn't

// had the backslashes removed yet when magic_quotes_gpc is on,

// but HTMLPurifier must not have the quotes slashed.

$magic_quotes = get_magic_quotes_gpc();

}

if ($magic_quotes) $content = stripslashes($content);

$content = $purifier->purify($content);

if ($magic_quotes) $content = addslashes($content);

}

--------------------------------------------------------------------------------

Then navigate to the System Events tab and check "OnBeforeDocFormSave".

Save the plugin.  HTML Purifier now is integrated!

3. Making sure it works

You can test HTML Purifier by deliberately putting in crappy HTML and seeing

whether or not it gets fixed.  A better way is to put in something like this:

...and seeing whether or not the content comes out as:

(lang to xml:lang synchronization is one of the many features HTML Purifier

has).

4. Caveat Emptor

This code does not intercept save requests from the QuickEdit plugin, this may

be added in a later version.  It also modifies things on save, so there's a

slight chance that HTML Purifier may make a boo-boo and accidently mess things

up (the original version is not saved).

Finally, make sure that MODx is using UTF-8.  If you are using, say, a French

localisation, you may be using Latin-1, if that's the case, configure

HTML Purifier properly like this:

$config = HTMLPurifier_Config::createDefault();

$config->set('Core', 'Encoding', 'ISO-8859-1'); // or whatever encoding

$purifier = new HTMLPurifier($config);

5. Known Bugs

'rn' characters sometimes mysteriously appear after purification. We are

currently investigating this issue. See: <http://htmlpurifier.org/phorum/read.php?3,1866>

6. See Also

A modified version of Jot 1.1.3 is available, which integrates with HTML

Purifier. You can check it out here: <http://modxcms.com/forums/index.php/topic,25621.msg161970.html>

X. Changelog

2008-06-16

- Updated code to work with 3.1.0 and later

- Add Known Bugs and See Also section

vim: et sw=4 sts=4

Cancel