File: wp-includes/formatting.php
-
functionsanitize_text_field()
Sanitizes a string from user input or from the database.
-
Filters a sanitized text field string.
-
functionwp_basename()
i18n-friendly version of basename().
-
hooktag_escape
Filters a string cleaned and escaped for output as an HTML tag.
-
hookwp_sprintf_l
Filters the translated delimiters used by wp_sprintf_l().
-
functionwp_make_link_relative()
Converts full URL paths to absolute paths.
-
functionwp_html_excerpt()
Safely extracts not more than the first $count characters from HTML string.
-
functionsanitize_option()
Sanitizes various option values based on the nature of the option.
-
Filters an option value following sanitization.
-
functionwp_parse_str()
Parses a string into variables to be stored in an array.
-
hookwp_parse_str
Filters the array of variables derived from a parsed string.
-
functionwp_pre_kses_less_than()
Converts lone less than signs.
-
hookattribute_escape
Filters a string cleaned and escaped for output in an HTML attribute.
-
functionwp_pre_kses_less_than_callback()
Callback function used by preg_replace.
-
functionesc_textarea()
Escaping for textarea values.
-
functionwp_sprintf()
WordPress’ implementation of PHP sprintf() with filters.
-
hookesc_textarea
Filters a string cleaned and escaped for output in a textarea element.
-
hookwp_sprintf
Filters a fragment from the pattern passed to wp_sprintf().
-
functiontag_escape()
Escapes an HTML tag name.
-
functionwp_sprintf_l()
Localizes list items before the rest of the content.
-
functionhtmlentities2()
Converts entities, while preserving already-encoded entities.
-
functionesc_js()
Escapes single quotes, `”`, “, `&`, and fixes line endings.
-
hookjs_escape
Filters a string cleaned and escaped for output in JavaScript.
-
functionesc_html()
Escaping for HTML blocks.
-
hookesc_html
Filters a string cleaned and escaped for output in HTML.
-
functionesc_attr()
Escaping for HTML attributes.
-
function_deep_replace()
Performs a deep string replace operation to ensure the values in $search are no longer present.
-
functionesc_sql()
Escapes data for use in a MySQL query.
-
functionesc_url()
Checks and cleans a URL.
-
hookclean_url
Filters a string cleaned and escaped for output as a URL.