add preg_quote_replacement() function

Description

$pattern = '/[[name]]/';
$template = 'My name is [[name]]';
preg_replace($pattern, $_POST['name'], $template);

This is prone to injection of any match from the pattern if user supplies for example Tomas$1Fejfar. There is a preg_quote function that can be used to escape special chars in template. There should be same function that would escape the replacement.

preg_quote_replacement($_POST['name']); // Tomas\$1Fejfar

IMHO it is enough to escape backslash and dollars with backslash, but I am not sure.

Currently the replacement must be escaped using userland function that makes it prone to mistakes.

该 issue 提到了 preg_quote() 和 preg_replace()，但没有提供文件或测试。首先跟踪它们的实现和替换解析，然后针对所示的注入案例，验证对反斜杠和美元符号的拟议处理方式。完成的标准是定义转义契约、实现新函数，并为 Tomas$1Fejfar 之类的替换字符串添加覆盖。