Site Builder

Editing: tools-faq.php

writable 0666

<?php
/**************************************************************************
 *  FAQ DISPLAY MODULE  – gold‑card accordion           © BestDealOn 2025
 *  ----------------------------------------------------------------------
 *  • Requires helpers.php (get_faq()) to be loaded first.
 *  • Lets authors use a SAFE subset of HTML inside answers / questions:
 *        <b> <strong> <i> <em> <u> <br> <ul> <ol> <li>
 *        <a href="…">  (other attributes are stripped automatically)
 **************************************************************************/

if (!function_exists('get_faq')) return;          // defensive fallback

$cats = array_filter(get_faq(), fn($c)=>!empty($c['faqs']));
if (!$cats) return;

/* ------------------------------------------------------------------ */
/*  1. HTML sanitizer – super‑light allow‑list                         */
/* ------------------------------------------------------------------ */
function safe_html(string $html): string
{
    static $allowedTags = ['b','strong','i','em','u','br','ul','ol','li','a'];
    static $allowedAttr = ['href'];

if (trim($html)==='') return '';

// load as HTML‑fragment
    $doc = new DOMDocument('1.0','utf-8');
    $doc->loadHTML('<meta http-equiv="Content-Type" content="text/html; charset=utf-8">'.
                   '<div>'.$html.'</div>', LIBXML_HTML_NOIMPLIED|LIBXML_HTML_NODEFDTD);
    $wrapper = $doc->getElementsByTagName('div')->item(0);

$walker = new RecursiveIteratorIterator(
        new RecursiveDOMIterator($wrapper),
        RecursiveIteratorIterator::SELF_FIRST
    );

/** @var DOMNode $node */
    foreach($walker as $node){
        if ($node instanceof DOMElement){

/* strip non‑allowed tags */
            if (!in_array(strtolower($node->tagName), $allowedTags, true)){
                $node->parentNode->replaceChild($doc->createTextNode($node->textContent), $node);
                continue;
            }

/* strip disallowed attributes */
            for($i=$node->attributes->length-1;$i>=0;$i--){
                $attr=$node->attributes->item($i);
                if (!in_array(strtolower($attr->name), $allowedAttr, true)){
                    $node->removeAttributeNode($attr);
                }
            }

/* normalise <a> … */
            if ($node->tagName==='a' && $node->hasAttribute('href')){
                $href = $node->getAttribute('href');
                if (!preg_match('#^https?://#i', $href)){
                    // turn relative / javascript: etc. into plain text
                    $txt = $doc->createTextNode($node->textContent.' (link removed)');
                    $node->parentNode->replaceChild($txt, $node);
                    continue;
                }
                $node->setAttribute('target','_blank');
                $node->setAttribute('rel','noopener noreferrer');
            }
        }
    }
    /* return innerHTML of wrapper */
    $out=''; foreach($wrapper->childNodes as $c) $out.=$doc->saveHTML($c);
    return $out;
}

/**
 * Tiny Recursive DOM iterator helper
 *   (avoids pulling in the whole DOM‑Traversal extension)
 */
class RecursiveDOMIterator implements RecursiveIterator {
    private $position=0; private $nodeList;
    public function __construct(DOMNode $domNode){ $this->nodeList = $domNode->childNodes; }
    public function rewind(){ $this->position=0; }
    public function valid(){ return $this->position < $this->nodeList->length; }
    public function key(){ return $this->position; }
    public function current(){ return $this->nodeList->item($this->position); }
    public function next(){ $this->position++; }
    public function hasChildren(){ return $this->current()->hasChildNodes(); }
    public function getChildren(){ return new self($this->current()); }
}
/* ------------------------------------------------------------------ */
/*  2. Card markup                                                    */
/* ------------------------------------------------------------------ */
?>
<section class="faq-shell">
  <div class="faq-card">
    <h2>Frequently&nbsp;Asked&nbsp;Questions</h2>

<?php foreach($cats as $ci=>$cat): ?>
    <h3 class="faq-cat"><?= safe_html($cat['name'] ?: 'FAQ') ?></h3>

<?php foreach (($cat['faqs'] ?? []) as $qi=>$qa):
            if (!($qa['active']??true)) continue;
            $id="faq{$ci}_{$qi}";
    ?>
      <details class="faq-item" id="<?= $id ?>">
        <summary>
          <span class="q"><?= safe_html($qa['q'] ?? 'Untitled question') ?></span>
          <svg class="chev" viewBox="0 0 16 16" width="16" height="16" aria-hidden="true">
             <path d="M4 6l4 4 4-4" fill="none" stroke="currentColor"
                   stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>
          </svg>
        </summary>
        <div class="a"><?= safe_html($qa['a'] ?? '') ?></div>
      </details>
    <?php endforeach; ?>
<?php endforeach; ?>
  </div>
</section>

Site Builder

Editing: tools-faq.php

Site Builder