no ACL set) if (!isset($ids)) { return []; } // turn string array of angle-bracketed elements into numeric array // e.g. "<1><2><3>" => array(1,2,3); preg_match_all('/<(' . Group::FOLLOWERS . '|'. Group::MUTUALS . '|[0-9]+)>/', $ids, $matches, PREG_PATTERN_ORDER); return $matches[1]; } /** * Wrap ACL elements in angle brackets for storage * * @param string $item The item to sanitise */ private function sanitize(string &$item) { // The item is an ACL int value if (intval($item)) { $item = '<' . intval(Strings::escapeTags(trim($item))) . '>'; // The item is a allowed ACL character } elseif (in_array($item, [Group::FOLLOWERS, Group::MUTUALS])) { $item = '<' . $item . '>'; // The item is already a ACL string } elseif (preg_match('/<\d+?>/', $item)) { unset($item); // The item is not supported, so remove it (cleanup) } else { $item = ''; } } /** * Convert an ACL array to a storable string * * Normally ACL permissions will be an array. * We'll also allow a comma-separated string. * * @param string|array $permissions * * @return string */ function toString($permissions) { $return = ''; if (is_array($permissions)) { $item = $permissions; } else { $item = explode(',', $permissions); } if (is_array($item)) { array_walk($item, [$this, 'sanitize']); $return = implode('', $item); } return $return; } }