<?php

namespace WebPExpress;

class Sanitize
{

    /**
     *  The NUL character is a demon, because it can be used to bypass other tests
     *  See https://st-g.de/2011/04/doing-filename-checks-securely-in-PHP.
     *
     *  @param  string  $string  string remove NUL characters in
     */
    public static function removeNUL($string)
    {
        return str_replace(chr(0), '', $string);
    }

    public static function removeStreamWrappers($string)
    {
        return preg_replace('#^\\w+://#', '', $string);
    }

    public static function path($string)
    {
        $string = self::removeNUL($string);
        $string = self::removeStreamWrappers($string);
        return $string;
    }

}