function actionSearch($q = null, $page = 1)
 {
     $pages = new CPagination();
     $pages->pageSize = 50;
     $pages->currentPage = $page;
     $p = new CHtmlPurifier();
     $q = CHtml::encode($p->purify($q));
     $searchCriteria = new stdClass();
     $searchCriteria->select = 'id';
     $searchCriteria->query = $q . '*';
     $searchCriteria->paginator = $pages;
     $searchCriteria->from = join(",", $this->indexes);
     // Получаем данные в виде массива
     $resArray = Yii::App()->search->searchRaw($searchCriteria);
     $news = null;
     if (is_array($resArray['matches'])) {
         $c = new CDbCriteria();
         $c->order = 'FIELD(id,' . join(",", array_keys($resArray['matches'])) . ')';
         $news = News::model()->findAllByPk(array_keys($resArray['matches']), $c);
     }
     $this->render("search_results", array('news' => $news));
 }

 /**
  * 对内容进行过滤  未使用
  */
 public static function htmlPurifier($content)
 {
     $p = new CHtmlPurifier();
     //过滤规则
     $p->options = array('URI.Disable' => true);
     return $p->purify($content);
 }

 public function Purify($value)
 {
     $p = new CHtmlPurifier();
     $p->options = array('HTML.Allowed' => 'strong,em,u,h1,h2,h3,h4');
     $cleanHtml = $p->purify($value);
     return $cleanHtml;
 }

 /**
  * @param \Solarium\QueryType\Select\Result\Result $ergebnisse
  * @return array();
  */
 public static function ergebnisse2FeedData($ergebnisse)
 {
     $data = array();
     $dokumente = $ergebnisse->getDocuments();
     $highlighting = $ergebnisse->getHighlighting();
     $purifier = new CHtmlPurifier();
     $purifier->options = array('URI.AllowedSchemes' => array('http' => true, 'https' => true));
     foreach ($dokumente as $dokument) {
         $model = Dokument::getDocumentBySolrId($dokument->id);
         $risitem = $model->getRISItem();
         if (!$risitem) {
             continue;
         }
         $link = $risitem->getLink();
         $highlightedDoc = $highlighting->getResult($dokument->id);
         $item = array("title" => $model->name . " (zu " . $risitem->getTypName() . " \"" . $risitem->getName() . "\"", "link" => $link, "content" => "", "dateCreated" => RISTools::date_iso2timestamp(str_replace("T", " ", str_replace("Z", "", $dokument->sort_datum))), "aenderung_guid" => $link);
         if ($highlightedDoc && count($highlightedDoc) > 0) {
             foreach ($highlightedDoc as $highlight) {
                 $item["content"] .= $purifier->purify(implode(' (...) ', $highlight)) . '<br/>';
             }
         }
         $data[] = $item;
     }
     return $data;
 }

 public function safehtml($attr, $params)
 {
     $p = new CHtmlPurifier();
     $p->options = Yii::app()->params["HTMLPurifierOptions"];
     $p->options["HTML.Allowed"] = "a[href],b,strong,i,em,u,small,sub,sup";
     $this->{$attr} = trim($p->purify($this->{$attr}));
 }

 public function safeTransform($content)
 {
     $content = $this->transform($content);
     $purifier = new CHtmlPurifier();
     $purifier->options = $this->purifierOptions;
     return $purifier->purify($content);
 }

 public function purifyText($attribute, $params)
 {
     $module = Yii::app()->getModule('comment');
     $p = new CHtmlPurifier();
     $p->options = ['HTML.Allowed' => $module->allowedTags];
     $this->{$attribute} = $p->purify($this->{$attribute});
 }

 /**
  * Manage the created fields
  */
 public function beforeSave()
 {
     if ($this->isNewRecord) {
         $this->created = time();
     }
     $p = new CHtmlPurifier();
     $this->subject = $p->purify($this->subject);
     return parent::beforeSave();
 }

	public function actionHtmlFilter()
	{
		$str = "fd'<script><b>fdsafds</b>alert('good')</script>d%#sds/ds\gs<a href='fdsa'>fdas</a>a@fd<b>fdsa<?php echo 'fdsad'; ?>fds</b>sa0";
		
		$p = new CHtmlPurifier();

		echo $p->processOutput($str);
		/* echo $p->purify($str); */
	}

 /**
  * Process a string with markup
  *
  * @abstract
  * @param string $input
  * @return string $output
  */
 public function process($input)
 {
     $out = $this->processMarkup($input);
     if ($this->purify) {
         $purifier = new CHtmlPurifier();
         $out = $purifier->purify($out);
     }
     return $out;
 }

 /**
  * Processes the captured output.
  * This method converts the content in markdown syntax to HTML code.
  * If {@link purifyOutput} is true, the HTML code will also be purified.
  * @param string $output the captured output to be processed
  * @see convert
  */
 public function processOutput($output)
 {
     $output = $this->transform($output);
     if ($this->purifyOutput) {
         $purifier = new CHtmlPurifier();
         $output = $purifier->purify($output);
     }
     parent::processOutput($output);
 }

 /**
  * @return array validation rules for model attributes.
  * @internal you should only define rules for those attributes that will receive user inputs
  */
 public function rules()
 {
     // On ajoute un filtre CHtmlPurifier avant l'enregistrement des données. Il sert ici moins à la protection contre
     // les attaques XSS qu'à s'assurer que le code HTML de l'actualité est valide.
     // Cette condition est indispensable pour que la classe DOMHelper puisse tronquer correctement
     // le texte pour construire des résumés (en page d'accueil par exemple)
     $htmlPurifier = new CHtmlPurifier();
     $htmlPurifier->setOptions(array('HTML.SafeIframe' => true, 'URI.SafeIframeRegexp' => '%www.youtube.com/embed/%'));
     return array(array('news_id, language_id, title', 'required'), array('title, description, keywords', 'length', 'max' => 255), array('language_id', 'exist', 'attributeName' => 'id', 'className' => 'Language'), array('news_id', 'exist', 'attributeName' => 'id', 'className' => 'News'), array('content', 'filter', 'filter' => array($htmlPurifier, 'purify')), array('tagsString', 'length', 'max' => 255), array('created_at, updated_at', 'safe'), array('news_id, language_id, title, slug, description, keywords, content, tagsString, tagIdFilter, enabled, eventDate', 'safe', 'on' => 'search'));
 }

 public static function filterString($string)
 {
     $string = strip_tags($string);
     $string = stripcslashes($string);
     $string = htmlspecialchars($string);
     $p = new CHtmlPurifier();
     $string = $p->purify($string);
     $string = addslashes($string);
     $string = str_replace("\r\n", "\n", $string);
     return $string;
 }

 public function run()
 {
     $this->markdown = CHtml::encode($this->markdown);
     $parserClass = $this->parserClass;
     $parser = new $parserClass();
     $html = $parser->parse($this->markdown);
     if ($this->purifyOutput) {
         $purifier = new CHtmlPurifier();
         $html = $purifier->purify($html);
     }
     $this->render('markdownView', array('content' => $html));
 }

 public function actionHtmlPurifier()
 {
     $user_input = null;
     if (isset($_POST['user_input'])) {
         $user_input = $_POST['user_input'];
     }
     $parser = new CHtmlPurifier();
     //create instance of CHtmlPurifier
     $user_input = $parser->purify($user_input);
     //we purify the $user_input
     $this->render("htmlpurifier", array('user_input' => $user_input));
 }

 protected function purifyHtml($html)
 {
     // remove bad parsing
     $html = preg_replace('#\\\\r\\\\n|\\\\r|\\\\n|\\\\#sui', '', $html);
     $p = new CHtmlPurifier();
     $p->options = array('HTML.Allowed' => 'img[src],p,br,b,strong,i');
     $html = $p->purify($html);
     $p->options = array('HTML.Allowed' => '');
     $text = $p->purify($html);
     if (mb_strlen($text, 'UTF-8') === mb_strlen($html, 'UTF-8')) {
         return '<pre>' . $text . '</pre>';
     }
     return $html;
 }

 public function purify($value)
 {
     $p = new CHtmlPurifier();
     $p->options = array('HTML.Allowed' => 'b,p,br');
     $cleanHtml = $p->purify($value);
     return $cleanHtml;
 }

 /**
  * @param $action
  */
 private function savePage($action)
 {
     //var_dump($_POST); die;
     Yii::log("Function SavePage DesignController called", "trace", self::LOG_CAT);
     $model = DocPages::model()->findByPk($_POST['pageId']);
     if (isset($_POST['desContent'])) {
         $purifier = new CHtmlPurifier();
         $model->docData = $purifier->purify($_POST['desContent']);
         if ($model->update()) {
             Yii::app()->user->setFlash('success', 'The page was updated successfully');
             $this->redirect($action);
             return;
         }
     }
     Yii::app()->user->setFlash('error', 'The page was not updated successfully, contact your administrator');
     $this->redirect($action);
     return;
 }

 protected function preFilter($filterChain)
 {
     // logic being applied before the action is executed
     if (isset($_POST) && count($_POST) > 0) {
         $obj = new CHtmlPurifier();
         $obj->options = array('HTML.Allowed' => 'p,b,u,a[href|title],i,img[src|alt|title],em,strong,strike,ul,ol,li,div[align],br', 'CSS.AllowedProperties' => array('text-decoration' => true, 'font-family' => true, 'font-size' => true, 'text-align' => true, 'padding-left' => true, 'padding-right' => true, 'padding-top' => true, 'padding-bottom' => true, 'color' => true, 'background-color' => true), 'AutoFormat.RemoveEmpty' => true);
         foreach ($_POST as $key => $val) {
             if (is_array($val)) {
                 $val = $obj->purify($val);
                 //$_POST[$key] = Yii::app()->input->xssClean($val);
                 $_POST[$key] = Yii::app()->input->xssClean($this->filterSubElement($val, $obj));
             } else {
                 $_POST[$key] = $obj->purify($val);
             }
         }
     }
     $filterChain->run();
     // return true; // false if the action should not be executed
 }

 public function actionRoom($room_id)
 {
     $since = intval(isset($_POST["since"]) ? $_POST["since"] : $_GET["since"]);
     $room_id = (int) $room_id;
     $key = "chat{$room_id}";
     $room = Yii::app()->cache->get($key);
     if (!is_array($room)) {
         $room = [];
     }
     if (Yii::app()->request->isPostRequest) {
         $msg = trim($_POST["msg"]);
         $h = date("h");
         $m = date("i");
         if ($h == 4 && $m >= 20 && $m <= 40) {
             $p = new CHtmlPurifier();
             $p->options = Yii::app()->params["HTMLPurifierOptions"];
             $msg = trim($p->purify($msg));
         } else {
             $msg = strip_tags($msg);
         }
         if ($msg != "") {
             $msg = mb_substr($msg, 0, 2048);
             $msg = Yii::app()->parser->parse($msg);
             $line = ["u" => Yii::app()->user->login, "i" => Yii::app()->user->id, "t" => time(), "m" => $msg];
             array_push($room, $line);
             if (count($room) > 50) {
                 array_shift($room);
             }
         }
         Yii::app()->cache->set($key, $room, 60 * 60 * 24 * 3);
     }
     if ($since > 0) {
         $roomGood = [];
         foreach ($room as $k => $v) {
             $room["m"] .= " <small>(after {$since})</small>";
             if ($v["t"] > $since) {
                 $roomGood[] = $room[$k];
             }
         }
         $room = $roomGood;
     }
     echo json_encode(["room" => $room, "servertime" => time()]);
 }