| Zeile 87 | Zeile 87 |
|---|
* @var int
*/
public $list_count;
|
* @var int
*/
public $list_count;
|
| |
/**
* Whether or not should a <br /> with clear: both be added at the end of the parsed message
*
* @access public
* @var boolean
*/
public $clear_needed = false;
|
/**
* Parses a message with the specified options.
|
/**
* Parses a message with the specified options.
|
| Zeile 98 | Zeile 106 |
|---|
function parse_message($message, $options=array())
{
global $plugins, $mybb;
|
function parse_message($message, $options=array())
{
global $plugins, $mybb;
|
| |
$this->clear_needed = false;
|
// Set base URL for parsing smilies
$this->base_url = $mybb->settings['bburl'];
|
// Set base URL for parsing smilies
$this->base_url = $mybb->settings['bburl'];
|
| Zeile 115 | Zeile 125 |
|---|
$message = $plugins->run_hooks("parse_message_start", $message);
|
$message = $plugins->run_hooks("parse_message_start", $message);
|
// Get rid of cartridge returns for they are the workings of the devil
| // Get rid of carriage returns for they are the workings of the devil
|
$message = str_replace("\r", "", $message);
// Filter bad words if requested.
if(!empty($this->options['filter_badwords']))
|
$message = str_replace("\r", "", $message);
// Filter bad words if requested.
if(!empty($this->options['filter_badwords']))
|
{
| {
|
$message = $this->parse_badwords($message);
|
$message = $this->parse_badwords($message);
|
}
| }
|
// Filter CDATA tags if requested (syndication.php).
if(!empty($this->options['filter_cdata']))
|
// Filter CDATA tags if requested (syndication.php).
if(!empty($this->options['filter_cdata']))
|
{
| {
|
$message = $this->parse_cdata($message);
|
$message = $this->parse_cdata($message);
|
}
if(empty($this->options['allow_html']))
{
$message = $this->parse_html($message);
}
else
{
while(preg_match("#<s(cript|tyle)(.*)>(.*)</s(cript|tyle)(.*)>#is", $message))
{
$message = preg_replace("#<s(cript|tyle)(.*)>(.*)</s(cript|tyle)(.*)>#is", "<s$1$2>$3</s$4$5>", $message);
}
$find = array('<?php', '<!--', '-->', '?>', "<br />\n", "<br>\n");
$replace = array('<?php', '<!--', '-->', '?>', "\n", "\n");
$message = str_replace($find, $replace, $message);
}
| }
|
// If MyCode needs to be replaced, first filter out [code] and [php] tags.
if(!empty($this->options['allow_mycode']) && $mybb->settings['allowcodemycode'] == 1)
|
// If MyCode needs to be replaced, first filter out [code] and [php] tags.
if(!empty($this->options['allow_mycode']) && $mybb->settings['allowcodemycode'] == 1)
|
{
| {
// This code is reserved and could break codes
$message = str_replace("<mybb-code>\n", "<mybb_code>\n", $message);
|
preg_match_all("#\[(code|php)\](.*?)\[/\\1\](\r\n?|\n?)#si", $message, $code_matches, PREG_SET_ORDER);
$message = preg_replace("#\[(code|php)\](.*?)\[/\\1\](\r\n?|\n?)#si", "<mybb-code>\n", $message);
|
preg_match_all("#\[(code|php)\](.*?)\[/\\1\](\r\n?|\n?)#si", $message, $code_matches, PREG_SET_ORDER);
$message = preg_replace("#\[(code|php)\](.*?)\[/\\1\](\r\n?|\n?)#si", "<mybb-code>\n", $message);
|
}
| }
if(empty($this->options['allow_html']))
{
$message = $this->parse_html($message);
$message = str_replace("<mybb-code>\n", "<mybb-code>\n", $message);
}
else
{
// Replace base, meta,script and style tags in our post - these are > dangerous <
$message = preg_replace('#<(/?)(base|meta|script|style)([^>]*)>#i', '<$1$2$3>', $message);
$message = $this->fix_javascript($message);
|
|
|
// Always fix bad Javascript in the message.
$message = $this->fix_javascript($message);
| $find = array("<br />\n", "<br>\n");
$replace = array("\n", "\n");
$message = str_replace($find, $replace, $message);
}
|
// Replace "me" code and slaps if we have a username
if(!empty($this->options['me_username']) && $mybb->settings['allowmemycode'] == 1)
{
global $lang;
|
// Replace "me" code and slaps if we have a username
if(!empty($this->options['me_username']) && $mybb->settings['allowmemycode'] == 1)
{
global $lang;
|
$message = preg_replace('#(>|^|\r|\n)/me ([^\r\n<]*)#i', "\\1<span style=\"color: red;\">* {$this->options['me_username']} \\2</span>", $message);
$message = preg_replace('#(>|^|\r|\n)/slap ([^\r\n<]*)#i', "\\1<span style=\"color: red;\">* {$this->options['me_username']} {$lang->slaps} \\2 {$lang->with_trout}</span>", $message);
| $message = preg_replace('#(>|^|\r|\n)/me ([^\r\n<]*)#i', "\\1<span style=\"color: red;\" class=\"mycode_me\">* {$this->options['me_username']} \\2</span>", $message);
$message = preg_replace('#(>|^|\r|\n)/slap ([^\r\n<]*)#i', "\\1<span style=\"color: red;\" class=\"mycode_slap\">* {$this->options['me_username']} {$lang->slaps} \\2 {$lang->with_trout}</span>", $message);
|
}
// If we can, parse smilies
| }
// If we can, parse smilies
|
| Zeile 193 | Zeile 203 |
|---|
{
foreach($code_matches as $text)
{
|
{
foreach($code_matches as $text)
{
|
// Fix up HTML inside the code tags so it is clean
if(!empty($this->options['allow_html']))
{
| if(my_strtolower($text[1]) == "code")
{
// Fix up HTML inside the code tags so it is clean
|
$text[2] = $this->parse_html($text[2]);
|
$text[2] = $this->parse_html($text[2]);
|
}
| |
|
|
if(my_strtolower($text[1]) == "code")
{
| |
$code = $this->mycode_parse_code($text[2]);
}
elseif(my_strtolower($text[1]) == "php")
| $code = $this->mycode_parse_code($text[2]);
}
elseif(my_strtolower($text[1]) == "php")
|
| Zeile 210 | Zeile 217 |
|---|
$message = preg_replace("#\<mybb-code>\n?#", $code, $message, 1);
}
}
|
$message = preg_replace("#\<mybb-code>\n?#", $code, $message, 1);
}
}
|
}
// Replace meta and base tags in our post - these are > dangerous <
if(!empty($this->options['allow_html']))
{
$message = preg_replace_callback("#<((m[^a])|(b[^diloru>])|(s[^aemptu>]))(\s*[^>]*)>#si", create_function(
'$matches',
'return htmlspecialchars_uni($matches[0]);'
), $message);
| |
}
if(!isset($this->options['nl2br']) || $this->options['nl2br'] != 0)
| }
if(!isset($this->options['nl2br']) || $this->options['nl2br'] != 0)
|
| Zeile 227 | Zeile 225 |
|---|
// Fix up new lines and block level elements
$message = preg_replace("#(</?(?:html|head|body|div|p|form|table|thead|tbody|tfoot|tr|td|th|ul|ol|li|div|p|blockquote|cite|hr)[^>]*>)\s*<br />#i", "$1", $message);
$message = preg_replace("#( )+(</?(?:html|head|body|div|p|form|table|thead|tbody|tfoot|tr|td|th|ul|ol|li|div|p|blockquote|cite|hr)[^>]*>)#i", "$2", $message);
|
// Fix up new lines and block level elements
$message = preg_replace("#(</?(?:html|head|body|div|p|form|table|thead|tbody|tfoot|tr|td|th|ul|ol|li|div|p|blockquote|cite|hr)[^>]*>)\s*<br />#i", "$1", $message);
$message = preg_replace("#( )+(</?(?:html|head|body|div|p|form|table|thead|tbody|tfoot|tr|td|th|ul|ol|li|div|p|blockquote|cite|hr)[^>]*>)#i", "$2", $message);
|
| | }
if($this->clear_needed)
{
$message .= '<br class="clear" />';
|
}
$message = $plugins->run_hooks("parse_message_end", $message);
| }
$message = $plugins->run_hooks("parse_message_end", $message);
|
| Zeile 264 | Zeile 267 |
|---|
if($mybb->settings['allowbasicmycode'] == 1)
{
$standard_mycode['b']['regex'] = "#\[b\](.*?)\[/b\]#si";
|
if($mybb->settings['allowbasicmycode'] == 1)
{
$standard_mycode['b']['regex'] = "#\[b\](.*?)\[/b\]#si";
|
$standard_mycode['b']['replacement'] = "<span style=\"font-weight: bold;\">$1</span>";
| $standard_mycode['b']['replacement'] = "<span style=\"font-weight: bold;\" class=\"mycode_b\">$1</span>";
|
$standard_mycode['u']['regex'] = "#\[u\](.*?)\[/u\]#si";
|
$standard_mycode['u']['regex'] = "#\[u\](.*?)\[/u\]#si";
|
$standard_mycode['u']['replacement'] = "<span style=\"text-decoration: underline;\">$1</span>";
| $standard_mycode['u']['replacement'] = "<span style=\"text-decoration: underline;\" class=\"mycode_u\">$1</span>";
|
$standard_mycode['i']['regex'] = "#\[i\](.*?)\[/i\]#si";
|
$standard_mycode['i']['regex'] = "#\[i\](.*?)\[/i\]#si";
|
$standard_mycode['i']['replacement'] = "<span style=\"font-style: italic;\">$1</span>";
| $standard_mycode['i']['replacement'] = "<span style=\"font-style: italic;\" class=\"mycode_i\">$1</span>";
|
$standard_mycode['s']['regex'] = "#\[s\](.*?)\[/s\]#si";
|
$standard_mycode['s']['regex'] = "#\[s\](.*?)\[/s\]#si";
|
$standard_mycode['s']['replacement'] = "<del>$1</del>";
| $standard_mycode['s']['replacement'] = "<span style=\"text-decoration: line-through;\" class=\"mycode_s\">$1</span>";
|
$standard_mycode['hr']['regex'] = "#\[hr\]#si";
|
$standard_mycode['hr']['regex'] = "#\[hr\]#si";
|
$standard_mycode['hr']['replacement'] = "<hr />";
| $standard_mycode['hr']['replacement'] = "<hr class=\"mycode_hr\" />";
|
++$standard_count;
}
|
++$standard_count;
}
|
| Zeile 297 | Zeile 300 |
|---|
if($mybb->settings['allowlinkmycode'] == 1)
{
|
if($mybb->settings['allowlinkmycode'] == 1)
{
|
$callback_mycode['url_simple']['regex'] = "#\[url\]([a-z]+?://)([^\r\n\"<]+?)\[/url\]#si";
| $callback_mycode['url_simple']['regex'] = "#\[url\]((?!javascript)[a-z]+?://)([^\r\n\"<]+?)\[/url\]#si";
|
$callback_mycode['url_simple']['replacement'] = array($this, 'mycode_parse_url_callback1');
|
$callback_mycode['url_simple']['replacement'] = array($this, 'mycode_parse_url_callback1');
|
$callback_mycode['url_simple2']['regex'] = "#\[url\]([^\r\n\"<]+?)\[/url\]#i";
| $callback_mycode['url_simple2']['regex'] = "#\[url\]((?!javascript:)[^\r\n\"<]+?)\[/url\]#i";
|
$callback_mycode['url_simple2']['replacement'] = array($this, 'mycode_parse_url_callback2');
|
$callback_mycode['url_simple2']['replacement'] = array($this, 'mycode_parse_url_callback2');
|
$callback_mycode['url_complex']['regex'] = "#\[url=([a-z]+?://)([^\r\n\"<]+?)\](.+?)\[/url\]#si";
| $callback_mycode['url_complex']['regex'] = "#\[url=((?!javascript)[a-z]+?://)([^\r\n\"<]+?)\](.+?)\[/url\]#si";
|
$callback_mycode['url_complex']['replacement'] = array($this, 'mycode_parse_url_callback1');
|
$callback_mycode['url_complex']['replacement'] = array($this, 'mycode_parse_url_callback1');
|
$callback_mycode['url_complex2']['regex'] = "#\[url=([^\r\n\"<&\(\)]+?)\](.+?)\[/url\]#si";
| $callback_mycode['url_complex2']['regex'] = "#\[url=((?!javascript:)[^\r\n\"<]+?)\](.+?)\[/url\]#si";
|
$callback_mycode['url_complex2']['replacement'] = array($this, 'mycode_parse_url_callback2');
++$callback_count;
| $callback_mycode['url_complex2']['replacement'] = array($this, 'mycode_parse_url_callback2');
++$callback_count;
|
| Zeile 326 | Zeile 329 |
|---|
if($mybb->settings['allowcolormycode'] == 1)
{
$nestable_mycode['color']['regex'] = "#\[color=([a-zA-Z]*|\#?[\da-fA-F]{3}|\#?[\da-fA-F]{6})](.*?)\[/color\]#si";
|
if($mybb->settings['allowcolormycode'] == 1)
{
$nestable_mycode['color']['regex'] = "#\[color=([a-zA-Z]*|\#?[\da-fA-F]{3}|\#?[\da-fA-F]{6})](.*?)\[/color\]#si";
|
$nestable_mycode['color']['replacement'] = "<span style=\"color: $1;\">$2</span>";
| $nestable_mycode['color']['replacement'] = "<span style=\"color: $1;\" class=\"mycode_color\">$2</span>";
|
++$nestable_count;
}
|
++$nestable_count;
}
|
| Zeile 334 | Zeile 337 |
|---|
if($mybb->settings['allowsizemycode'] == 1)
{
$nestable_mycode['size']['regex'] = "#\[size=(xx-small|x-small|small|medium|large|x-large|xx-large)\](.*?)\[/size\]#si";
|
if($mybb->settings['allowsizemycode'] == 1)
{
$nestable_mycode['size']['regex'] = "#\[size=(xx-small|x-small|small|medium|large|x-large|xx-large)\](.*?)\[/size\]#si";
|
$nestable_mycode['size']['replacement'] = "<span style=\"font-size: $1;\">$2</span>";
| $nestable_mycode['size']['replacement'] = "<span style=\"font-size: $1;\" class=\"mycode_size\">$2</span>";
|
$callback_mycode['size_int']['regex'] = "#\[size=([0-9\+\-]+?)\](.*?)\[/size\]#si";
$callback_mycode['size_int']['replacement'] = array($this, 'mycode_handle_size_callback');
|
$callback_mycode['size_int']['regex'] = "#\[size=([0-9\+\-]+?)\](.*?)\[/size\]#si";
$callback_mycode['size_int']['replacement'] = array($this, 'mycode_handle_size_callback');
|
| Zeile 346 | Zeile 349 |
|---|
if($mybb->settings['allowfontmycode'] == 1)
{
$nestable_mycode['font']['regex'] = "#\[font=([a-z0-9 ,\-_'\"]+)\](.*?)\[/font\]#si";
|
if($mybb->settings['allowfontmycode'] == 1)
{
$nestable_mycode['font']['regex'] = "#\[font=([a-z0-9 ,\-_'\"]+)\](.*?)\[/font\]#si";
|
$nestable_mycode['font']['replacement'] = "<span style=\"font-family: $1;\">$2</span>";
| $nestable_mycode['font']['replacement'] = "<span style=\"font-family: $1;\" class=\"mycode_font\">$2</span>";
|
++$nestable_count;
}
|
++$nestable_count;
}
|
| Zeile 354 | Zeile 357 |
|---|
if($mybb->settings['allowalignmycode'] == 1)
{
$nestable_mycode['align']['regex'] = "#\[align=(left|center|right|justify)\](.*?)\[/align\]#si";
|
if($mybb->settings['allowalignmycode'] == 1)
{
$nestable_mycode['align']['regex'] = "#\[align=(left|center|right|justify)\](.*?)\[/align\]#si";
|
$nestable_mycode['align']['replacement'] = "<div style=\"text-align: $1;\">$2</div>";
| $nestable_mycode['align']['replacement'] = "<div style=\"text-align: $1;\" class=\"mycode_align\">$2</div>";
|
++$nestable_count;
}
|
++$nestable_count;
}
|
| Zeile 478 | Zeile 481 |
|---|
if(!empty($this->options['allow_imgcode']))
{
$message = preg_replace_callback("#\[img\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_callback1'), $message);
|
if(!empty($this->options['allow_imgcode']))
{
$message = preg_replace_callback("#\[img\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_callback1'), $message);
|
$message = preg_replace_callback("#\[img=([0-9]{1,3})x([0-9]{1,3})\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_callback2'), $message);
$message = preg_replace_callback("#\[img align=([a-z]+)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_callback3'), $message);
$message = preg_replace_callback("#\[img=([0-9]{1,3})x([0-9]{1,3}) align=([a-z]+)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_callback4'), $message);
| $message = preg_replace_callback("#\[img=([1-9][0-9]*)x([1-9][0-9]*)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_callback2'), $message);
$message = preg_replace_callback("#\[img align=(left|right)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_callback3'), $message);
$message = preg_replace_callback("#\[img=([1-9][0-9]*)x([1-9][0-9]*) align=(left|right)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_callback4'), $message);
|
}
else
{
$message = preg_replace_callback("#\[img\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_disabled_callback1'), $message);
|
}
else
{
$message = preg_replace_callback("#\[img\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_disabled_callback1'), $message);
|
$message = preg_replace_callback("#\[img=([0-9]{1,3})x([0-9]{1,3})\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_disabled_callback2'), $message);
$message = preg_replace_callback("#\[img align=([a-z]+)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_disabled_callback3'), $message);
$message = preg_replace_callback("#\[img=([0-9]{1,3})x([0-9]{1,3}) align=([a-z]+)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_disabled_callback4'), $message);
| $message = preg_replace_callback("#\[img=([1-9][0-9]*)x([1-9][0-9]*)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_disabled_callback2'), $message);
$message = preg_replace_callback("#\[img align=(left|right)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_disabled_callback3'), $message);
$message = preg_replace_callback("#\[img=([1-9][0-9]*)x([1-9][0-9]*) align=(left|right)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is", array($this, 'mycode_parse_img_disabled_callback4'), $message);
|
}
// Convert videos when allow.
| }
// Convert videos when allow.
|
| Zeile 583 | Zeile 586 |
|---|
$i++;
}
$message = implode("", $message);
|
$i++;
}
$message = implode("", $message);
|
}
return $message;
}
/**
| }
return $message;
}
/**
|
* Generates a cache of badwords filters.
*
* @access private
| * Generates a cache of badwords filters.
*
* @access private
|
| Zeile 608 | Zeile 611 |
|---|
* @return string The parsed message.
*/
function parse_badwords($message, $options=array())
|
* @return string The parsed message.
*/
function parse_badwords($message, $options=array())
|
{
| {
|
if(empty($this->options))
|
if(empty($this->options))
|
{
| {
|
$this->options = $options;
|
$this->options = $options;
|
}
| }
|
if($this->badwords_cache == 0)
{
|
if($this->badwords_cache == 0)
{
|
| Zeile 626 | Zeile 629 |
|---|
if(!$badword['replacement'])
{
$badword['replacement'] = "*****";
|
if(!$badword['replacement'])
{
$badword['replacement'] = "*****";
|
}
| }
|
// Take into account the position offset for our last replacement.
$index = substr_count($badword['badword'], '*')+2;
$badword['badword'] = str_replace('\*', '([a-zA-Z0-9_]{1})', preg_quote($badword['badword'], "#"));
| // Take into account the position offset for our last replacement.
$index = substr_count($badword['badword'], '*')+2;
$badword['badword'] = str_replace('\*', '([a-zA-Z0-9_]{1})', preg_quote($badword['badword'], "#"));
|
| Zeile 643 | Zeile 646 |
|---|
if(!empty($this->options['strip_tags']))
{
$message = strip_tags($message);
|
if(!empty($this->options['strip_tags']))
{
$message = strip_tags($message);
|
}
return $message;
}
/**
| }
return $message;
}
/**
|
* Resolves nested CDATA tags in the specified message.
*
* @param string $message The message to be parsed.
|
* Resolves nested CDATA tags in the specified message.
*
* @param string $message The message to be parsed.
|
* @return string The parsed message.
*/
| * @return string The parsed message.
*/
|
function parse_cdata($message)
{
$message = str_replace(']]>', ']]]]><![CDATA[>', $message);
| function parse_cdata($message)
{
$message = str_replace(']]>', ']]]]><![CDATA[>', $message);
|
| Zeile 661 | Zeile 664 |
|---|
}
/**
|
}
/**
|
* Attempts to move any javascript references in the specified message.
| * Attempts to move any javascript references in the specified message.
|
*
|
*
|
* @param string $message The message to be parsed.
| * @param string The message to be parsed.
|
* @return string The parsed message.
*/
function fix_javascript($message)
|
* @return string The parsed message.
*/
function fix_javascript($message)
|
{
| {
|
$js_array = array(
"#(&\#(0*)106;?|&\#(0*)74;?|&\#x(0*)4a;?|&\#x(0*)6a;?|j)((&\#(0*)97;?|&\#(0*)65;?|a)(&\#(0*)118;?|&\#(0*)86;?|v)(&\#(0*)97;?|&\#(0*)65;?|a)(\s)?(&\#(0*)115;?|&\#(0*)83;?|s)(&\#(0*)99;?|&\#(0*)67;?|c)(&\#(0*)114;?|&\#(0*)82;?|r)(&\#(0*)105;?|&\#(0*)73;?|i)(&\#112;?|&\#(0*)80;?|p)(&\#(0*)116;?|&\#(0*)84;?|t)(&\#(0*)58;?|\:))#i",
|
$js_array = array(
"#(&\#(0*)106;?|&\#(0*)74;?|&\#x(0*)4a;?|&\#x(0*)6a;?|j)((&\#(0*)97;?|&\#(0*)65;?|a)(&\#(0*)118;?|&\#(0*)86;?|v)(&\#(0*)97;?|&\#(0*)65;?|a)(\s)?(&\#(0*)115;?|&\#(0*)83;?|s)(&\#(0*)99;?|&\#(0*)67;?|c)(&\#(0*)114;?|&\#(0*)82;?|r)(&\#(0*)105;?|&\#(0*)73;?|i)(&\#112;?|&\#(0*)80;?|p)(&\#(0*)116;?|&\#(0*)84;?|t)(&\#(0*)58;?|\:))#i",
|
"#(o)(nmouseover\s?=)#i",
"#(o)(nmouseout\s?=)#i",
"#(o)(nmousedown\s?=)#i",
"#(o)(nmousemove\s?=)#i",
"#(o)(nmouseup\s?=)#i",
"#(o)(nclick\s?=)#i",
"#(o)(ndblclick\s?=)#i",
"#(o)(nload\s?=)#i",
"#(o)(nsubmit\s?=)#i",
"#(o)(nblur\s?=)#i",
"#(o)(nchange\s?=)#i",
"#(o)(nfocus\s?=)#i",
"#(o)(nselect\s?=)#i",
"#(o)(nunload\s?=)#i",
"#(o)(nkeypress\s?=)#i",
"#(o)(nerror\s?=)#i",
"#(o)(nreset\s?=)#i",
"#(o)(nabort\s?=)#i"
| "#([\s\"']on)([a-z]+\s*=)#i",
|
);
|
);
|
$message = preg_replace($js_array, "$1<strong></strong>$2$6", $message);
|
// Add invisible white space
$message = preg_replace($js_array, "$1\xE2\x80\x8C$2$6", $message);
|
return $message;
}
| return $message;
}
|
| Zeile 704 | Zeile 691 |
|---|
*/
function mycode_handle_size($size, $text)
{
|
*/
function mycode_handle_size($size, $text)
{
|
$size = (int)$size+10;
| global $templates;
$size = (int)$size;
if($size < 1)
{
$size = 1;
}
|
if($size > 50)
{
$size = 50;
}
|
if($size > 50)
{
$size = 50;
}
|
$text = "<span style=\"font-size: {$size}pt;\">".str_replace("\'", "'", $text)."</span>";
| $text = str_replace("\'", "'", $text);
|
|
|
return $text;
| eval("\$mycode_size = \"".$templates->get("mycode_size_int", 1, 0)."\";");
return $mycode_size;
|
}
/**
| }
/**
|
| Zeile 744 | Zeile 739 |
|---|
if($text_only == false)
{
|
if($text_only == false)
{
|
$replace = "<blockquote><cite>$lang->quote</cite>$1</blockquote>\n";
| $replace = "<blockquote class=\"mycode_quote\"><cite>$lang->quote</cite>$1</blockquote>\n";
|
$replace_callback = array($this, 'mycode_parse_post_quotes_callback1');
}
else
|
$replace_callback = array($this, 'mycode_parse_post_quotes_callback1');
}
else
|
{
| {
|
$replace = "\n{$lang->quote}\n--\n$1\n--\n";
$replace_callback = array($this, 'mycode_parse_post_quotes_callback2');
}
| $replace = "\n{$lang->quote}\n--\n$1\n--\n";
$replace_callback = array($this, 'mycode_parse_post_quotes_callback2');
}
|
| Zeile 767 | Zeile 762 |
|---|
} while($count || $count_callback);
if($text_only == false)
|
} while($count || $count_callback);
if($text_only == false)
|
{
| {
|
$find = array(
"#(\r\n*|\n*)<\/cite>(\r\n*|\n*)#",
"#(\r\n*|\n*)<\/blockquote>#"
| $find = array(
"#(\r\n*|\n*)<\/cite>(\r\n*|\n*)#",
"#(\r\n*|\n*)<\/blockquote>#"
|
| Zeile 822 | Zeile 817 |
|---|
}
$username = preg_replace("#(?:"|\"|')? pid=(?:"|\"|')?[0-9]+[\"']?(?:"|\"|')?#i", '', $username);
|
}
$username = preg_replace("#(?:"|\"|')? pid=(?:"|\"|')?[0-9]+[\"']?(?:"|\"|')?#i", '', $username);
|
$delete_quote = false;
}
| $delete_quote = false;
}
|
unset($match);
preg_match("#dateline=(?:"|\"|')?([0-9]+)(?:"|\"|')?#i", $username, $match);
if((int)$match[1])
| unset($match);
preg_match("#dateline=(?:"|\"|')?([0-9]+)(?:"|\"|')?#i", $username, $match);
if((int)$match[1])
|
| Zeile 836 | Zeile 831 |
|---|
}
$username = preg_replace("#(?:"|\"|')? dateline=(?:"|\"|')?[0-9]+(?:"|\"|')?#i", '', $username);
$delete_quote = false;
|
}
$username = preg_replace("#(?:"|\"|')? dateline=(?:"|\"|')?[0-9]+(?:"|\"|')?#i", '', $username);
$delete_quote = false;
|
}
| }
|
if($delete_quote)
{
$username = my_substr($username, 0, my_strlen($username)-1);
}
|
if($delete_quote)
{
$username = my_substr($username, 0, my_strlen($username)-1);
}
|
|
|
if(!empty($this->options['allow_html']))
{
$username = htmlspecialchars_uni($username);
| if(!empty($this->options['allow_html']))
{
$username = htmlspecialchars_uni($username);
|
| Zeile 859 | Zeile 854 |
|---|
{
$span = "<span>{$date}</span>";
}
|
{
$span = "<span>{$date}</span>";
}
|
return "<blockquote><cite>{$span}{$username} {$lang->wrote}{$linkback}</cite>{$message}</blockquote>\n";
}
}
/**
* Parses quotes with post id and/or dateline.
*
* @param array $matches Matches.
* @return string The parsed message.
|
eval("\$mycode_quote = \"".$templates->get("mycode_quote_post", 1, 0)."\";");
return $mycode_quote;
}
}
/**
* Parses quotes with post id and/or dateline.
*
* @param array $matches Matches.
* @return string The parsed message.
|
*/
function mycode_parse_post_quotes_callback1($matches)
{
| */
function mycode_parse_post_quotes_callback1($matches)
{
|
| Zeile 882 | Zeile 878 |
|---|
* @return string The parsed message.
*/
function mycode_parse_post_quotes_callback2($matches)
|
* @return string The parsed message.
*/
function mycode_parse_post_quotes_callback2($matches)
|
{
| {
|
return $this->mycode_parse_post_quotes($matches[4],$matches[2].$matches[3], true);
}
| return $this->mycode_parse_post_quotes($matches[4],$matches[2].$matches[3], true);
}
|
| Zeile 895 | Zeile 891 |
|---|
*/
function mycode_parse_code($code, $text_only=false)
{
|
*/
function mycode_parse_code($code, $text_only=false)
{
|
global $lang;
| global $lang, $templates;
|
if($text_only == true)
{
|
if($text_only == true)
{
|
| Zeile 918 | Zeile 914 |
|---|
$code = str_replace("\t", ' ', $code);
$code = str_replace(" ", ' ', $code);
|
$code = str_replace("\t", ' ', $code);
$code = str_replace(" ", ' ', $code);
|
return "<div class=\"codeblock\">\n<div class=\"title\">".$lang->code."\n</div><div class=\"body\" dir=\"ltr\"><code>".$code."</code></div></div>\n";
| eval("\$mycode_code = \"".$templates->get("mycode_code", 1, 0)."\";");
return $mycode_code;
|
}
/**
* Parses code MyCode.
|
}
/**
* Parses code MyCode.
|
*
* @param array $matches Matches.
* @return string The parsed message.
| *
* @param array $matches Matches.
* @return string The parsed message.
|
*/
function mycode_parse_code_callback($matches)
|
*/
function mycode_parse_code_callback($matches)
|
{
| {
|
return $this->mycode_parse_code($matches[1], true);
}
| return $this->mycode_parse_code($matches[1], true);
}
|
| Zeile 942 | Zeile 939 |
|---|
*/
function mycode_parse_php($str, $bare_return = false, $text_only = false)
{
|
*/
function mycode_parse_php($str, $bare_return = false, $text_only = false)
{
|
global $lang;
| global $lang, $templates;
|
if($text_only == true)
|
if($text_only == true)
|
{
| {
|
return "\n{$lang->php_code}\n--\n$str\n--\n";
|
return "\n{$lang->php_code}\n--\n$str\n--\n";
|
}
| }
|
// Clean the string before parsing except tab spaces.
$str = preg_replace('#^(\t*)(\n|\r|\0|\x0B| )*#', '\\1', $str);
|
// Clean the string before parsing except tab spaces.
$str = preg_replace('#^(\t*)(\n|\r|\0|\x0B| )*#', '\\1', $str);
|
| Zeile 956 | Zeile 953 |
|---|
$original = preg_replace('#^\t*#', '', $str);
if(empty($original))
|
$original = preg_replace('#^\t*#', '', $str);
if(empty($original))
|
{
| {
|
return;
}
|
return;
}
|
$str = str_replace('&', '&', $str);
$str = str_replace('<', '<', $str);
$str = str_replace('>', '>', $str);
| |
// See if open and close tags are provided.
$added_open_tag = false;
if(!preg_match("#^\s*<\?#si", $str))
|
// See if open and close tags are provided.
$added_open_tag = false;
if(!preg_match("#^\s*<\?#si", $str))
|
{
| {
|
$added_open_tag = true;
$str = "<?php \n".$str;
}
| $added_open_tag = true;
$str = "<?php \n".$str;
}
|
| Zeile 1012 | Zeile 1005 |
|---|
}
// Send back the code all nice and pretty
|
}
// Send back the code all nice and pretty
|
return "<div class=\"codeblock phpcodeblock\"><div class=\"title\">$lang->php_code\n</div><div class=\"body\">".$code."</div></div>\n";
| eval("\$mycode_php = \"".$templates->get("mycode_php", 1, 0)."\";");
return $mycode_php;
|
}
/**
| }
/**
|
| Zeile 1024 | Zeile 1018 |
|---|
function mycode_parse_php_callback($matches)
{
return $this->mycode_parse_php($matches[1], false, true);
|
function mycode_parse_php_callback($matches)
{
return $this->mycode_parse_php($matches[1], false, true);
|
}
/**
| }
/**
|
* Parses URL MyCode.
*
* @param string $url The URL to link to.
| * Parses URL MyCode.
*
* @param string $url The URL to link to.
|
| Zeile 1035 | Zeile 1029 |
|---|
*/
function mycode_parse_url($url, $name="")
{
|
*/
function mycode_parse_url($url, $name="")
{
|
| | global $templates;
|
if(!preg_match("#^[a-z0-9]+://#i", $url))
|
if(!preg_match("#^[a-z0-9]+://#i", $url))
|
{
| {
|
$url = "http://".$url;
|
$url = "http://".$url;
|
}
| }
|
if(!empty($this->options['allow_html']))
{
$url = $this->parse_html($url);
}
if(!$name)
|
if(!empty($this->options['allow_html']))
{
$url = $this->parse_html($url);
}
if(!$name)
|
{
| {
|
$name = $url;
|
$name = $url;
|
}
| }
|
if($name == $url && (!isset($this->options['shorten_urls']) || !empty($this->options['shorten_urls'])))
|
if($name == $url && (!isset($this->options['shorten_urls']) || !empty($this->options['shorten_urls'])))
|
{
| {
|
$name = htmlspecialchars_decode($name);
if(my_strlen($name) > 55)
{
$name = my_substr($name , 0, 40).'...'.my_substr($name , -10);
}
$name = htmlspecialchars_uni($name);
|
$name = htmlspecialchars_decode($name);
if(my_strlen($name) > 55)
{
$name = my_substr($name , 0, 40).'...'.my_substr($name , -10);
}
$name = htmlspecialchars_uni($name);
|
}
| }
|
$nofollow = '';
if(!empty($this->options['nofollow_on']))
{
$nofollow = " rel=\"nofollow\"";
}
|
$nofollow = '';
if(!empty($this->options['nofollow_on']))
{
$nofollow = " rel=\"nofollow\"";
}
|
|
|
// Fix some entities in URLs
$entities = array('$' => '%24', '$' => '%24', '^' => '%5E', '`' => '%60', '[' => '%5B', ']' => '%5D', '{' => '%7B', '}' => '%7D', '"' => '%22', '<' => '%3C', '>' => '%3E', ' ' => '%20');
$url = str_replace(array_keys($entities), array_values($entities), $url);
$name = preg_replace("#&\#([0-9]+);#si", "&#$1;", $name); // Fix & but allow unicode
|
// Fix some entities in URLs
$entities = array('$' => '%24', '$' => '%24', '^' => '%5E', '`' => '%60', '[' => '%5B', ']' => '%5D', '{' => '%7B', '}' => '%7D', '"' => '%22', '<' => '%3C', '>' => '%3E', ' ' => '%20');
$url = str_replace(array_keys($entities), array_values($entities), $url);
$name = preg_replace("#&\#([0-9]+);#si", "&#$1;", $name); // Fix & but allow unicode
|
$link = "<a href=\"$url\" target=\"_blank\"{$nofollow}>$name</a>";
return $link;
|
eval("\$mycode_url = \"".$templates->get("mycode_url", 1, 0)."\";");
return $mycode_url;
|
}
/**
| }
/**
|
| Zeile 1086 | Zeile 1082 |
|---|
if(!isset($matches[3]))
{
$matches[3] = '';
|
if(!isset($matches[3]))
{
$matches[3] = '';
|
}
| }
|
return $this->mycode_parse_url($matches[1].$matches[2], $matches[3]);
|
return $this->mycode_parse_url($matches[1].$matches[2], $matches[3]);
|
}
/**
| }
/**
|
* Parses URL MyCode.
*
* @param array $matches Matches.
| * Parses URL MyCode.
*
* @param array $matches Matches.
|
| Zeile 1103 | Zeile 1099 |
|---|
$matches[2] = '';
}
return $this->mycode_parse_url($matches[1], $matches[2]);
|
$matches[2] = '';
}
return $this->mycode_parse_url($matches[1], $matches[2]);
|
}
/**
* Parses IMG MyCode.
| }
/**
* Parses IMG MyCode.
|
*
* @param string $url The URL to the image
* @param array $dimensions Optional array of dimensions
| *
* @param string $url The URL to the image
* @param array $dimensions Optional array of dimensions
|
| Zeile 1115 | Zeile 1111 |
|---|
*/
function mycode_parse_img($url, $dimensions=array(), $align='')
{
|
*/
function mycode_parse_img($url, $dimensions=array(), $align='')
{
|
global $lang;
| global $lang, $templates;
|
$url = trim($url);
$url = str_replace("\n", "", $url);
$url = str_replace("\r", "", $url);
| $url = trim($url);
$url = str_replace("\n", "", $url);
$url = str_replace("\r", "", $url);
|
| Zeile 1128 | Zeile 1124 |
|---|
$css_align = '';
if($align == "right")
{
|
$css_align = '';
if($align == "right")
{
|
$css_align = " style=\"float: right;\"";
| $css_align = ' style="float: right;"';
|
}
else if($align == "left")
{
|
}
else if($align == "left")
{
|
$css_align = " style=\"float: left;\"";
| $css_align = ' style="float: left;"';
|
}
|
}
|
$alt = basename($url);
| |
|
|
| | if($align)
{
$this->clear_needed = true;
}
$alt = basename($url);
|
$alt = htmlspecialchars_decode($alt);
if(my_strlen($alt) > 55)
{
$alt = my_substr($alt, 0, 40).'...'.my_substr($alt, -10);
|
$alt = htmlspecialchars_decode($alt);
if(my_strlen($alt) > 55)
{
$alt = my_substr($alt, 0, 40).'...'.my_substr($alt, -10);
|
}
| }
|
$alt = htmlspecialchars_uni($alt);
$alt = $lang->sprintf($lang->posted_image, $alt);
|
$alt = htmlspecialchars_uni($alt);
$alt = $lang->sprintf($lang->posted_image, $alt);
|
| | $width = $height = '';
|
if(isset($dimensions[0]) && $dimensions[0] > 0 && isset($dimensions[1]) && $dimensions[1] > 0)
{
|
if(isset($dimensions[0]) && $dimensions[0] > 0 && isset($dimensions[1]) && $dimensions[1] > 0)
{
|
return "<img src=\"{$url}\" width=\"{$dimensions[0]}\" height=\"{$dimensions[1]}\" border=\"0\" alt=\"{$alt}\"{$css_align} />";
| $width = " width=\"{$dimensions[0]}\"";
$height = " height=\"{$dimensions[1]}\"";
|
}
|
}
|
else
{
return "<img src=\"{$url}\" border=\"0\" alt=\"{$alt}\"{$css_align} />";
}
}
| |
|
|
/**
* Parses IMG MyCode.
*
* @param array $matches Matches.
* @return string Image code.
*/
function mycode_parse_img_callback1($matches)
{
return $this->mycode_parse_img($matches[2]);
| eval("\$mycode_img = \"".$templates->get("mycode_img", 1, 0)."\";");
return $mycode_img;
}
/**
* Parses IMG MyCode.
*
* @param array $matches Matches.
* @return string Image code.
*/
function mycode_parse_img_callback1($matches)
{
return $this->mycode_parse_img($matches[2]);
|
}
/**
| }
/**
|
| Zeile 1185 | Zeile 1187 |
|---|
function mycode_parse_img_callback3($matches)
{
return $this->mycode_parse_img($matches[3], array(), $matches[1]);
|
function mycode_parse_img_callback3($matches)
{
return $this->mycode_parse_img($matches[3], array(), $matches[1]);
|
}
/**
| }
/**
|
* Parses IMG MyCode.
*
* @param array $matches Matches.
| * Parses IMG MyCode.
*
* @param array $matches Matches.
|
| Zeile 1225 | Zeile 1227 |
|---|
function mycode_parse_img_disabled_callback1($matches)
{
return $this->mycode_parse_img_disabled($matches[2]);
|
function mycode_parse_img_disabled_callback1($matches)
{
return $this->mycode_parse_img_disabled($matches[2]);
|
}
/**
* Parses IMG MyCode disabled.
*
* @param array $matches Matches.
* @return string Image code.
| }
/**
* Parses IMG MyCode disabled.
*
* @param array $matches Matches.
* @return string Image code.
|
*/
function mycode_parse_img_disabled_callback2($matches)
{
| */
function mycode_parse_img_disabled_callback2($matches)
{
|
| Zeile 1245 | Zeile 1247 |
|---|
* @return string Image code.
*/
function mycode_parse_img_disabled_callback3($matches)
|
* @return string Image code.
*/
function mycode_parse_img_disabled_callback3($matches)
|
{
| {
|
return $this->mycode_parse_img_disabled($matches[3]);
|
return $this->mycode_parse_img_disabled($matches[3]);
|
}
| }
|
/**
* Parses IMG MyCode disabled.
*
| /**
* Parses IMG MyCode disabled.
*
|
| Zeile 1265 | Zeile 1267 |
|---|
*
* @param string $email The email address to link to.
* @param string $name The name for the link.
|
*
* @param string $email The email address to link to.
* @param string $name The name for the link.
|
* @return string The built-up email link.
| * @return string The built-up email link.
|
*/
function mycode_parse_email($email, $name="")
{
|
*/
function mycode_parse_email($email, $name="")
{
|
| | global $templates;
|
if(!$name)
{
$name = $email;
}
if(preg_match("/^([a-zA-Z0-9-_\+\.]+?)@[a-zA-Z0-9-]+\.[a-zA-Z0-9\.-]+$/si", $email))
{
|
if(!$name)
{
$name = $email;
}
if(preg_match("/^([a-zA-Z0-9-_\+\.]+?)@[a-zA-Z0-9-]+\.[a-zA-Z0-9\.-]+$/si", $email))
{
|
return "<a href=\"mailto:$email\">".$name."</a>";
| $email = $email;
|
}
|
}
|
elseif(preg_match("/^([a-zA-Z0-9-_\+\.]+?)@[a-zA-Z0-9-]+\.[a-zA-Z0-9\.-]+\?(.*?)$/si", $email))
{
return "<a href=\"mailto:".htmlspecialchars_uni($email)."\">".$name."</a>";
}
else
{
return $email;
}
}
/**
| elseif(preg_match("/^([a-zA-Z0-9-_\+\.]+?)@[a-zA-Z0-9-]+\.[a-zA-Z0-9\.-]+\?(.*?)$/si", $email))
{
$email = htmlspecialchars_uni($email);
}
eval("\$mycode_email = \"".$templates->get("mycode_email", 1, 0)."\";");
return $mycode_email;
}
/**
|
* Parses email MyCode.
*
* @param array $matches Matches
| * Parses email MyCode.
*
* @param array $matches Matches
|
| Zeile 1355 | Zeile 1358 |
|---|
$id = $path[4]; // http://www.myspace.com/video/fds/fds/123
break;
case "facebook":
|
$id = $path[4]; // http://www.myspace.com/video/fds/fds/123
break;
case "facebook":
|
$id = $input['v']; // http://www.facebook.com/video/video.php?v=123
break;
| if(isset($input['v']))
{
$id = $input['v']; // http://www.facebook.com/video/video.php?v=123
}
elseif(substr($path[3], 0, 3) == 'vb.')
{
$id = $path[4]; // https://www.facebook.com/fds/videos/vb.123/123/
}
else
{
$id = $path[3]; // https://www.facebook.com/fds/videos/123/
}
break;
|
case "veoh":
$id = $path[2]; // http://www.veoh.com/watch/123
|
case "veoh":
$id = $path[2]; // http://www.veoh.com/watch/123
|
break;
| break;
|
case "liveleak":
$id = $input['i']; // http://www.liveleak.com/view?i=123
break;
case "yahoo":
|
case "liveleak":
$id = $input['i']; // http://www.liveleak.com/view?i=123
break;
case "yahoo":
|
$id = $path[1]; // http://xy.screen.yahoo.com/fds-123.html
| if(isset($path[2]))
{
$id = $path[2]; // http://xy.screen.yahoo.com/fds/fds-123.html
}
else
{
$id = $path[1]; // http://xy.screen.yahoo.com/fds-123.html
}
|
// Support for localized portals
$domain = explode('.', $parsed_url['host']);
if($domain[0] != 'screen' && preg_match('#^([a-z-]+)$#', $domain[0]))
| // Support for localized portals
$domain = explode('.', $parsed_url['host']);
if($domain[0] != 'screen' && preg_match('#^([a-z-]+)$#', $domain[0]))
|
| Zeile 1377 | Zeile 1398 |
|---|
}
break;
case "vimeo":
|
}
break;
case "vimeo":
|
$id = $path[1]; // http://vimeo.com/fds123
| if(isset($path[3]))
{
$id = $path[3]; // http://vimeo.com/fds/fds/fds123
}
else
{
$id = $path[1]; // http://vimeo.com/fds123
}
|
break;
case "youtube":
if($fragments[0])
| break;
case "youtube":
if($fragments[0])
|
| Zeile 1391 | Zeile 1419 |
|---|
else
{
$id = $path[1]; // http://www.youtu.be/fds123
|
else
{
$id = $path[1]; // http://www.youtu.be/fds123
|
| | }
break;
case "twitch":
if(isset($path[3]))
{
$id = $path[3]; // https://www.twitch.tv/giantbomb/v/100048090
|
}
break;
default:
return "[video={$video}]{$url}[/video]";
|
}
break;
default:
return "[video={$video}]{$url}[/video]";
|
}
| }
|
if(empty($id))
{
return "[video={$video}]{$url}[/video]";
}
|
if(empty($id))
{
return "[video={$video}]{$url}[/video]";
}
|
|
|
$id = htmlspecialchars_uni($id);
eval("\$video_code = \"".$templates->get("video_{$video}_embed")."\";");
|
$id = htmlspecialchars_uni($id);
eval("\$video_code = \"".$templates->get("video_{$video}_embed")."\";");
|
| |
return $video_code;
}
| return $video_code;
}
|
| Zeile 1527 | Zeile 1560 |
|---|
if($type)
{
|
if($type)
{
|
$list = "\n<ol type=\"$type\">$message</ol>\n";
| $list = "\n<ol type=\"$type\" class=\"mycode_list\">$message</ol>\n";
|
}
else
{
|
}
else
{
|
$list = "<ul>$message</ul>\n";
| $list = "<ul class=\"mycode_list\">$message</ul>\n";
|
}
$list = preg_replace("#<(ol type=\"$type\"|ul)>\s*</li>#", "<$1>", $list);
return $list;
| }
$list = preg_replace("#<(ol type=\"$type\"|ul)>\s*</li>#", "<$1>", $list);
return $list;
|
| Zeile 1656 | Zeile 1689 |
|---|
$find = array(
"#\[(b|u|i|s|url|email|color|img)\](.*?)\[/\\1\]#is",
|
$find = array(
"#\[(b|u|i|s|url|email|color|img)\](.*?)\[/\\1\]#is",
|
"#\[img=([0-9]{1,3})x([0-9]{1,3})\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is",
"#\[url=([a-z]+?://)([^\r\n\"<]+?)\](.+?)\[/url\]#si",
"#\[url=([^\r\n\"<&\(\)]+?)\](.+?)\[/url\]#si",
| "#\[img=([1-9][0-9]*)x([1-9][0-9]*)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is",
"#\[url=((?!javascript)[a-z]+?://)([^\r\n\"<]+?)\](.+?)\[/url\]#si",
"#\[url=((?!javascript:)[^\r\n\"<&\(\)]+?)\](.+?)\[/url\]#si",
|
);
$replace = array(
| );
$replace = array(
|