Syntax Highlighting and Allowing html in Comments - Jay Pipes

Like I said my last post, the new MySQL Forge commenting system is pretty slick. It gives commenters a lot of freedom in how they wish to display their comments, including syntax-highlighted code sections, while at the same time being security-conscious about XSS attacks and such. The htmlPurifier and GeSHi PHP libraries are used in tandem to give flexibility and security at the same time.

The code to enable this is fairly short. For you PHP devs out there, here is the code that does everything for cleaning and "codifying" the comments:

/**
   * Highlights the text as code in the supplied language
   *
   * @return  string    The marked up code
   * @param    subject    The text to markup
   * @param    language  The language to use for highlighting
   */
  public static function syntax_highlight($subject, $language) {
    /* Format the code with GeSHi */
    include_once(APP_DIR . '/opt/geshi/geshi.php');
    $geshi= new GeSHi($subject, $language);
    $geshi->enable_classes();
    $geshi->enable_line_numbers(GESHI_NORMAL_LINE_NUMBERS);
    return $geshi->parse_code();
  }
 
  /**
   * Returns a cleaned and syntax-highlighted string of html
   *
   * @return  string    Cleaned and codified text
   * @param    subject    The text to cut into code pieces
   */
  public static function clean_and_codify($subject) {
    $original= $subject;
    $code_pieces= array();
    $code_regex= '/[\[\]code\s*(lang|language)\=[\"\'](\w+)[\"\'][\]\>]([\D\S]+?)[\[\]

Truncated by Planet PHP, read more at the original (another 12360 bytes)