CODEWITHSUNDEEP
phpregexiframehtml-parsing
Lumis
Lumis

Reputation: 21639

Find iFrame in HTML and check its SRC

I have a website where a user can among other objects like text and images also insert a YouTube video into CKEditor type textarea form.

YouTube video is embedded by iFrame objects. But I don't want users to be able to insert any other iFrame except for YouTube (I am sure you can guess why)

So when the form is submitted I want to scan the $text variable for all iFrames and if they do not point to youtube.com or youtube-nocookie.com, remove those iFrame tags.

These are iFrames with allowed sources:

<iframe allowfullscreen="" frameborder="0" height="360" src="//www.youtube.com/embed/6dk-5HN4fvg" width="640"></iframe>

<iframe allowfullscreen="" frameborder="0" height="360" src="//www.youtube-nocookie.com/embed/IY37l4PDsao" width="640"></iframe>

The task:

  1. find the iFrame
  2. find the value of its SRC
  3. check if it is an allowed domain
  4. if not delete it, or disable it, but preserve the rest of the surrounding HTML
  5. check if there is another

Upvotes: 1

Views: 1478

Answers (1)

hwnd
hwnd

Reputation: 70732

Here is one way of utilizing DOM and XPath to achieve this task.

$doc = new DOMDocument;

@$doc->loadHTML($html); 
$doc->removeChild($doc->doctype);

$xp  = new DOMXPath($doc);
$tag = $xp->query("//iframe[not(contains(@src, 'youtube.com') or 
                                contains(@src, 'youtube-nocookie.com'))]");

foreach ($tag as $t) {
   $t->parentNode->removeChild($t);
}

echo $doc->saveHTML();

Upvotes: 2

Related Questions