+ $oValidTokens->addToken($sTok, new Token\Country($iId, $aWord['country']));
+ }
+ break;
+ case 'H': // house number tokens
+ $oValidTokens->addToken($sTok, new Token\HouseNumber($iId, $aWord['word_token']));
+ break;
+ case 'P': // postcode tokens
+ // Postcodes are not normalized, so they may have content
+ // that makes SQL injection possible. Reject postcodes
+ // that would need special escaping.
+ if ($aWord['postcode'] !== null
+ && pg_escape_string($aWord['postcode']) == $aWord['postcode']
+ ) {
+ $sNormPostcode = $this->normalizeString($aWord['postcode']);
+ if (strpos($sNormQuery, $sNormPostcode) !== false) {
+ $oValidTokens->addToken($sTok, new Token\Postcode($iId, $aWord['postcode'], null));
+ }
+ }
+ break;
+ case 'S': // tokens for classification terms (special phrases)
+ if ($aWord['class'] !== null && $aWord['ctype'] !== null) {
+ $oValidTokens->addToken($sTok, new Token\SpecialTerm(