2 // This file is part of Moodle - http://moodle.org/
4 // Moodle is free software: you can redistribute it and/or modify
5 // it under the terms of the GNU General Public License as published by
6 // the Free Software Foundation, either version 3 of the License, or
7 // (at your option) any later version.
9 // Moodle is distributed in the hope that it will be useful,
10 // but WITHOUT ANY WARRANTY; without even the implied warranty of
11 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 // GNU General Public License for more details.
14 // You should have received a copy of the GNU General Public License
15 // along with Moodle. If not, see <http://www.gnu.org/licenses/>.
18 * Library of functions for web output
20 * Library of all general-purpose Moodle PHP functions and constants
21 * that produce HTML output
23 * Other main libraries:
24 * - datalib.php - functions that access the database.
25 * - moodlelib.php - general-purpose Moodle functions.
29 * @copyright 1999 onwards Martin Dougiamas {@link http://moodle.com}
30 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
33 defined('MOODLE_INTERNAL') ||
die();
37 // Define text formatting types ... eventually we can add Wiki, BBcode etc.
40 * Does all sorts of transformations and filtering.
42 define('FORMAT_MOODLE', '0');
45 * Plain HTML (with some tags stripped).
47 define('FORMAT_HTML', '1');
50 * Plain text (even tags are printed in full).
52 define('FORMAT_PLAIN', '2');
55 * Wiki-formatted text.
56 * Deprecated: left here just to note that '3' is not used (at the moment)
57 * and to catch any latent wiki-like text (which generates an error)
58 * @deprecated since 2005!
60 define('FORMAT_WIKI', '3');
63 * Markdown-formatted text http://daringfireball.net/projects/markdown/
65 define('FORMAT_MARKDOWN', '4');
68 * A moodle_url comparison using this flag will return true if the base URLs match, params are ignored.
70 define('URL_MATCH_BASE', 0);
73 * A moodle_url comparison using this flag will return true if the base URLs match and the params of url1 are part of url2.
75 define('URL_MATCH_PARAMS', 1);
78 * A moodle_url comparison using this flag will return true if the two URLs are identical, except for the order of the params.
80 define('URL_MATCH_EXACT', 2);
85 * Add quotes to HTML characters.
87 * Returns $var with HTML characters (like "<", ">", etc.) properly quoted.
88 * Related function {@link p()} simply prints the output of this function.
90 * @param string $var the string potentially containing HTML characters
99 // When we move to PHP 5.4 as a minimum version, change ENT_QUOTES on the
100 // next line to ENT_QUOTES | ENT_HTML5 | ENT_SUBSTITUTE, and remove the
101 // 'UTF-8' argument. Both bring a speed-increase.
102 return preg_replace('/&#(\d+|x[0-9a-f]+);/i', '&#$1;', htmlspecialchars($var, ENT_QUOTES
, 'UTF-8'));
106 * Add quotes to HTML characters.
108 * Prints $var with HTML characters (like "<", ">", etc.) properly quoted.
109 * This function simply calls & displays {@link s()}.
112 * @param string $var the string potentially containing HTML characters
120 * Does proper javascript quoting.
122 * Do not use addslashes anymore, because it does not work when magic_quotes_sybase is enabled.
124 * @param mixed $var String, Array, or Object to add slashes to
125 * @return mixed quoted result
127 function addslashes_js($var) {
128 if (is_string($var)) {
129 $var = str_replace('\\', '\\\\', $var);
130 $var = str_replace(array('\'', '"', "\n", "\r", "\0"), array('\\\'', '\\"', '\\n', '\\r', '\\0'), $var);
131 $var = str_replace('</', '<\/', $var); // XHTML compliance.
132 } else if (is_array($var)) {
133 $var = array_map('addslashes_js', $var);
134 } else if (is_object($var)) {
135 $a = get_object_vars($var);
136 foreach ($a as $key => $value) {
137 $a[$key] = addslashes_js($value);
145 * Remove query string from url.
147 * Takes in a URL and returns it without the querystring portion.
149 * @param string $url the url which may have a query string attached.
150 * @return string The remaining URL.
152 function strip_querystring($url) {
154 if ($commapos = strpos($url, '?')) {
155 return substr($url, 0, $commapos);
162 * Returns the name of the current script, WITH the querystring portion.
164 * This function is necessary because PHP_SELF and REQUEST_URI and SCRIPT_NAME
165 * return different things depending on a lot of things like your OS, Web
166 * server, and the way PHP is compiled (ie. as a CGI, module, ISAPI, etc.)
167 * <b>NOTE:</b> This function returns false if the global variables needed are not set.
169 * @return mixed String or false if the global variables needed are not set.
177 * Guesses the full URL of the current script.
179 * This function is using $PAGE->url, but may fall back to $FULLME which
180 * is constructed from PHP_SELF and REQUEST_URI or SCRIPT_NAME
182 * @return mixed full page URL string or false if unknown
184 function qualified_me() {
185 global $FULLME, $PAGE, $CFG;
187 if (isset($PAGE) and $PAGE->has_set_url()) {
188 // This is the only recommended way to find out current page.
189 return $PAGE->url
->out(false);
192 if ($FULLME === null) {
193 // CLI script most probably.
196 if (!empty($CFG->sslproxy
)) {
197 // Return only https links when using SSL proxy.
198 return preg_replace('/^http:/', 'https:', $FULLME, 1);
206 * Determines whether or not the Moodle site is being served over HTTPS.
208 * This is done simply by checking the value of $CFG->httpswwwroot, which seems
209 * to be the only reliable method.
211 * @return boolean True if site is served over HTTPS, false otherwise.
213 function is_https() {
216 return (strpos($CFG->httpswwwroot
, 'https://') === 0);
220 * Returns the cleaned local URL of the HTTP_REFERER less the URL query string parameters if required.
222 * @param bool $stripquery if true, also removes the query part of the url.
223 * @return string The resulting referer or empty string.
225 function get_local_referer($stripquery = true) {
226 if (isset($_SERVER['HTTP_REFERER'])) {
227 $referer = clean_param($_SERVER['HTTP_REFERER'], PARAM_LOCALURL
);
229 return strip_querystring($referer);
239 * Class for creating and manipulating urls.
241 * It can be used in moodle pages where config.php has been included without any further includes.
243 * It is useful for manipulating urls with long lists of params.
244 * One situation where it will be useful is a page which links to itself to perform various actions
245 * and / or to process form data. A moodle_url object :
246 * can be created for a page to refer to itself with all the proper get params being passed from page call to
247 * page call and methods can be used to output a url including all the params, optionally adding and overriding
248 * params and can also be used to
249 * - output the url without any get params
250 * - and output the params as hidden fields to be output within a form
252 * @copyright 2007 jamiesensei
253 * @link http://docs.moodle.org/dev/lib/weblib.php_moodle_url See short write up here
254 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
260 * Scheme, ex.: http, https
263 protected $scheme = '';
269 protected $host = '';
272 * Port number, empty means default 80 or 443 in case of http.
275 protected $port = '';
278 * Username for http auth.
281 protected $user = '';
284 * Password for http auth.
287 protected $pass = '';
293 protected $path = '';
296 * Optional slash argument value.
299 protected $slashargument = '';
302 * Anchor, may be also empty, null means none.
305 protected $anchor = null;
308 * Url parameters as associative array.
311 protected $params = array();
314 * Create new instance of moodle_url.
316 * @param moodle_url|string $url - moodle_url means make a copy of another
317 * moodle_url and change parameters, string means full url or shortened
318 * form (ex.: '/course/view.php'). It is strongly encouraged to not include
319 * query string because it may result in double encoded values. Use the
320 * $params instead. For admin URLs, just use /admin/script.php, this
321 * class takes care of the $CFG->admin issue.
322 * @param array $params these params override current params or add new
323 * @param string $anchor The anchor to use as part of the URL if there is one.
324 * @throws moodle_exception
326 public function __construct($url, array $params = null, $anchor = null) {
329 if ($url instanceof moodle_url
) {
330 $this->scheme
= $url->scheme
;
331 $this->host
= $url->host
;
332 $this->port
= $url->port
;
333 $this->user
= $url->user
;
334 $this->pass
= $url->pass
;
335 $this->path
= $url->path
;
336 $this->slashargument
= $url->slashargument
;
337 $this->params
= $url->params
;
338 $this->anchor
= $url->anchor
;
341 // Detect if anchor used.
342 $apos = strpos($url, '#');
343 if ($apos !== false) {
344 $anchor = substr($url, $apos);
345 $anchor = ltrim($anchor, '#');
346 $this->set_anchor($anchor);
347 $url = substr($url, 0, $apos);
350 // Normalise shortened form of our url ex.: '/course/view.php'.
351 if (strpos($url, '/') === 0) {
352 // We must not use httpswwwroot here, because it might be url of other page,
353 // devs have to use httpswwwroot explicitly when creating new moodle_url.
354 $url = $CFG->wwwroot
.$url;
357 // Now fix the admin links if needed, no need to mess with httpswwwroot.
358 if ($CFG->admin
!== 'admin') {
359 if (strpos($url, "$CFG->wwwroot/admin/") === 0) {
360 $url = str_replace("$CFG->wwwroot/admin/", "$CFG->wwwroot/$CFG->admin/", $url);
365 $parts = parse_url($url);
366 if ($parts === false) {
367 throw new moodle_exception('invalidurl');
369 if (isset($parts['query'])) {
370 // Note: the values may not be correctly decoded, url parameters should be always passed as array.
371 parse_str(str_replace('&', '&', $parts['query']), $this->params
);
373 unset($parts['query']);
374 foreach ($parts as $key => $value) {
375 $this->$key = $value;
378 // Detect slashargument value from path - we do not support directory names ending with .php.
379 $pos = strpos($this->path
, '.php/');
380 if ($pos !== false) {
381 $this->slashargument
= substr($this->path
, $pos +
4);
382 $this->path
= substr($this->path
, 0, $pos +
4);
386 $this->params($params);
387 if ($anchor !== null) {
388 $this->anchor
= (string)$anchor;
393 * Add an array of params to the params for this url.
395 * The added params override existing ones if they have the same name.
397 * @param array $params Defaults to null. If null then returns all params.
398 * @return array Array of Params for url.
399 * @throws coding_exception
401 public function params(array $params = null) {
402 $params = (array)$params;
404 foreach ($params as $key => $value) {
406 throw new coding_exception('Url parameters can not have numeric keys!');
408 if (!is_string($value)) {
409 if (is_array($value)) {
410 throw new coding_exception('Url parameters values can not be arrays!');
412 if (is_object($value) and !method_exists($value, '__toString')) {
413 throw new coding_exception('Url parameters values can not be objects, unless __toString() is defined!');
416 $this->params
[$key] = (string)$value;
418 return $this->params
;
422 * Remove all params if no arguments passed.
423 * Remove selected params if arguments are passed.
425 * Can be called as either remove_params('param1', 'param2')
426 * or remove_params(array('param1', 'param2')).
428 * @param string[]|string $params,... either an array of param names, or 1..n string params to remove as args.
429 * @return array url parameters
431 public function remove_params($params = null) {
432 if (!is_array($params)) {
433 $params = func_get_args();
435 foreach ($params as $param) {
436 unset($this->params
[$param]);
438 return $this->params
;
442 * Remove all url parameters.
444 * @todo remove the unused param.
445 * @param array $params Unused param
448 public function remove_all_params($params = null) {
449 $this->params
= array();
450 $this->slashargument
= '';
454 * Add a param to the params for this url.
456 * The added param overrides existing one if they have the same name.
458 * @param string $paramname name
459 * @param string $newvalue Param value. If new value specified current value is overriden or parameter is added
460 * @return mixed string parameter value, null if parameter does not exist
462 public function param($paramname, $newvalue = '') {
463 if (func_num_args() > 1) {
465 $this->params(array($paramname => $newvalue));
467 if (isset($this->params
[$paramname])) {
468 return $this->params
[$paramname];
475 * Merges parameters and validates them
477 * @param array $overrideparams
478 * @return array merged parameters
479 * @throws coding_exception
481 protected function merge_overrideparams(array $overrideparams = null) {
482 $overrideparams = (array)$overrideparams;
483 $params = $this->params
;
484 foreach ($overrideparams as $key => $value) {
486 throw new coding_exception('Overridden parameters can not have numeric keys!');
488 if (is_array($value)) {
489 throw new coding_exception('Overridden parameters values can not be arrays!');
491 if (is_object($value) and !method_exists($value, '__toString')) {
492 throw new coding_exception('Overridden parameters values can not be objects, unless __toString() is defined!');
494 $params[$key] = (string)$value;
500 * Get the params as as a query string.
502 * This method should not be used outside of this method.
504 * @param bool $escaped Use & as params separator instead of plain &
505 * @param array $overrideparams params to add to the output params, these
506 * override existing ones with the same name.
507 * @return string query string that can be added to a url.
509 public function get_query_string($escaped = true, array $overrideparams = null) {
511 if ($overrideparams !== null) {
512 $params = $this->merge_overrideparams($overrideparams);
514 $params = $this->params
;
516 foreach ($params as $key => $val) {
517 if (is_array($val)) {
518 foreach ($val as $index => $value) {
519 $arr[] = rawurlencode($key.'['.$index.']')."=".rawurlencode($value);
522 if (isset($val) && $val !== '') {
523 $arr[] = rawurlencode($key)."=".rawurlencode($val);
525 $arr[] = rawurlencode($key);
530 return implode('&', $arr);
532 return implode('&', $arr);
537 * Shortcut for printing of encoded URL.
541 public function __toString() {
542 return $this->out(true);
548 * If you use the returned URL in HTML code, you want the escaped ampersands. If you use
549 * the returned URL in HTTP headers, you want $escaped=false.
551 * @param bool $escaped Use & as params separator instead of plain &
552 * @param array $overrideparams params to add to the output url, these override existing ones with the same name.
553 * @return string Resulting URL
555 public function out($escaped = true, array $overrideparams = null) {
556 if (!is_bool($escaped)) {
557 debugging('Escape parameter must be of type boolean, '.gettype($escaped).' given instead.');
560 $uri = $this->out_omit_querystring().$this->slashargument
;
562 $querystring = $this->get_query_string($escaped, $overrideparams);
563 if ($querystring !== '') {
564 $uri .= '?' . $querystring;
566 if (!is_null($this->anchor
)) {
567 $uri .= '#'.$this->anchor
;
574 * Returns url without parameters, everything before '?'.
576 * @param bool $includeanchor if {@link self::anchor} is defined, should it be returned?
579 public function out_omit_querystring($includeanchor = false) {
581 $uri = $this->scheme ?
$this->scheme
.':'.((strtolower($this->scheme
) == 'mailto') ?
'':'//'): '';
582 $uri .= $this->user ?
$this->user
.($this->pass?
':'.$this->pass
:'').'@':'';
583 $uri .= $this->host ?
$this->host
: '';
584 $uri .= $this->port ?
':'.$this->port
: '';
585 $uri .= $this->path ?
$this->path
: '';
586 if ($includeanchor and !is_null($this->anchor
)) {
587 $uri .= '#' . $this->anchor
;
594 * Compares this moodle_url with another.
596 * See documentation of constants for an explanation of the comparison flags.
598 * @param moodle_url $url The moodle_url object to compare
599 * @param int $matchtype The type of comparison (URL_MATCH_BASE, URL_MATCH_PARAMS, URL_MATCH_EXACT)
602 public function compare(moodle_url
$url, $matchtype = URL_MATCH_EXACT
) {
604 $baseself = $this->out_omit_querystring();
605 $baseother = $url->out_omit_querystring();
607 // Append index.php if there is no specific file.
608 if (substr($baseself, -1) == '/') {
609 $baseself .= 'index.php';
611 if (substr($baseother, -1) == '/') {
612 $baseother .= 'index.php';
615 // Compare the two base URLs.
616 if ($baseself != $baseother) {
620 if ($matchtype == URL_MATCH_BASE
) {
624 $urlparams = $url->params();
625 foreach ($this->params() as $param => $value) {
626 if ($param == 'sesskey') {
629 if (!array_key_exists($param, $urlparams) ||
$urlparams[$param] != $value) {
634 if ($matchtype == URL_MATCH_PARAMS
) {
638 foreach ($urlparams as $param => $value) {
639 if ($param == 'sesskey') {
642 if (!array_key_exists($param, $this->params()) ||
$this->param($param) != $value) {
647 if ($url->anchor
!== $this->anchor
) {
655 * Sets the anchor for the URI (the bit after the hash)
657 * @param string $anchor null means remove previous
659 public function set_anchor($anchor) {
660 if (is_null($anchor)) {
662 $this->anchor
= null;
663 } else if ($anchor === '') {
664 // Special case, used as empty link.
666 } else if (preg_match('|[a-zA-Z\_\:][a-zA-Z0-9\_\-\.\:]*|', $anchor)) {
667 // Match the anchor against the NMTOKEN spec.
668 $this->anchor
= $anchor;
670 // Bad luck, no valid anchor found.
671 $this->anchor
= null;
676 * Sets the url slashargument value.
678 * @param string $path usually file path
679 * @param string $parameter name of page parameter if slasharguments not supported
680 * @param bool $supported usually null, then it depends on $CFG->slasharguments, use true or false for other servers
683 public function set_slashargument($path, $parameter = 'file', $supported = null) {
685 if (is_null($supported)) {
686 $supported = !empty($CFG->slasharguments
);
690 $parts = explode('/', $path);
691 $parts = array_map('rawurlencode', $parts);
692 $path = implode('/', $parts);
693 $this->slashargument
= $path;
694 unset($this->params
[$parameter]);
697 $this->slashargument
= '';
698 $this->params
[$parameter] = $path;
702 // Static factory methods.
705 * General moodle file url.
707 * @param string $urlbase the script serving the file
708 * @param string $path
709 * @param bool $forcedownload
712 public static function make_file_url($urlbase, $path, $forcedownload = false) {
714 if ($forcedownload) {
715 $params['forcedownload'] = 1;
718 $url = new moodle_url($urlbase, $params);
719 $url->set_slashargument($path);
724 * Factory method for creation of url pointing to plugin file.
726 * Please note this method can be used only from the plugins to
727 * create urls of own files, it must not be used outside of plugins!
729 * @param int $contextid
730 * @param string $component
731 * @param string $area
733 * @param string $pathname
734 * @param string $filename
735 * @param bool $forcedownload
738 public static function make_pluginfile_url($contextid, $component, $area, $itemid, $pathname, $filename,
739 $forcedownload = false) {
741 $urlbase = "$CFG->httpswwwroot/pluginfile.php";
742 if ($itemid === null) {
743 return self
::make_file_url($urlbase, "/$contextid/$component/$area".$pathname.$filename, $forcedownload);
745 return self
::make_file_url($urlbase, "/$contextid/$component/$area/$itemid".$pathname.$filename, $forcedownload);
750 * Factory method for creation of url pointing to plugin file.
751 * This method is the same that make_pluginfile_url but pointing to the webservice pluginfile.php script.
752 * It should be used only in external functions.
755 * @param int $contextid
756 * @param string $component
757 * @param string $area
759 * @param string $pathname
760 * @param string $filename
761 * @param bool $forcedownload
764 public static function make_webservice_pluginfile_url($contextid, $component, $area, $itemid, $pathname, $filename,
765 $forcedownload = false) {
767 $urlbase = "$CFG->httpswwwroot/webservice/pluginfile.php";
768 if ($itemid === null) {
769 return self
::make_file_url($urlbase, "/$contextid/$component/$area".$pathname.$filename, $forcedownload);
771 return self
::make_file_url($urlbase, "/$contextid/$component/$area/$itemid".$pathname.$filename, $forcedownload);
776 * Factory method for creation of url pointing to draft file of current user.
778 * @param int $draftid draft item id
779 * @param string $pathname
780 * @param string $filename
781 * @param bool $forcedownload
784 public static function make_draftfile_url($draftid, $pathname, $filename, $forcedownload = false) {
786 $urlbase = "$CFG->httpswwwroot/draftfile.php";
787 $context = context_user
::instance($USER->id
);
789 return self
::make_file_url($urlbase, "/$context->id/user/draft/$draftid".$pathname.$filename, $forcedownload);
793 * Factory method for creating of links to legacy course files.
795 * @param int $courseid
796 * @param string $filepath
797 * @param bool $forcedownload
800 public static function make_legacyfile_url($courseid, $filepath, $forcedownload = false) {
803 $urlbase = "$CFG->wwwroot/file.php";
804 return self
::make_file_url($urlbase, '/'.$courseid.'/'.$filepath, $forcedownload);
808 * Returns URL a relative path from $CFG->wwwroot
810 * Can be used for passing around urls with the wwwroot stripped
812 * @param boolean $escaped Use & as params separator instead of plain &
813 * @param array $overrideparams params to add to the output url, these override existing ones with the same name.
814 * @return string Resulting URL
815 * @throws coding_exception if called on a non-local url
817 public function out_as_local_url($escaped = true, array $overrideparams = null) {
820 $url = $this->out($escaped, $overrideparams);
821 $httpswwwroot = str_replace("http://", "https://", $CFG->wwwroot
);
823 // Url should be equal to wwwroot or httpswwwroot. If not then throw exception.
824 if (($url === $CFG->wwwroot
) ||
(strpos($url, $CFG->wwwroot
.'/') === 0)) {
825 $localurl = substr($url, strlen($CFG->wwwroot
));
826 return !empty($localurl) ?
$localurl : '';
827 } else if (($url === $httpswwwroot) ||
(strpos($url, $httpswwwroot.'/') === 0)) {
828 $localurl = substr($url, strlen($httpswwwroot));
829 return !empty($localurl) ?
$localurl : '';
831 throw new coding_exception('out_as_local_url called on a non-local URL');
836 * Returns the 'path' portion of a URL. For example, if the URL is
837 * http://www.example.org:447/my/file/is/here.txt?really=1 then this will
838 * return '/my/file/is/here.txt'.
840 * By default the path includes slash-arguments (for example,
841 * '/myfile.php/extra/arguments') so it is what you would expect from a
842 * URL path. If you don't want this behaviour, you can opt to exclude the
843 * slash arguments. (Be careful: if the $CFG variable slasharguments is
844 * disabled, these URLs will have a different format and you may need to
845 * look at the 'file' parameter too.)
847 * @param bool $includeslashargument If true, includes slash arguments
848 * @return string Path of URL
850 public function get_path($includeslashargument = true) {
851 return $this->path
. ($includeslashargument ?
$this->slashargument
: '');
855 * Returns a given parameter value from the URL.
857 * @param string $name Name of parameter
858 * @return string Value of parameter or null if not set
860 public function get_param($name) {
861 if (array_key_exists($name, $this->params
)) {
862 return $this->params
[$name];
869 * Returns the 'scheme' portion of a URL. For example, if the URL is
870 * http://www.example.org:447/my/file/is/here.txt?really=1 then this will
871 * return 'http' (without the colon).
873 * @return string Scheme of the URL.
875 public function get_scheme() {
876 return $this->scheme
;
880 * Returns the 'host' portion of a URL. For example, if the URL is
881 * http://www.example.org:447/my/file/is/here.txt?really=1 then this will
882 * return 'www.example.org'.
884 * @return string Host of the URL.
886 public function get_host() {
891 * Returns the 'port' portion of a URL. For example, if the URL is
892 * http://www.example.org:447/my/file/is/here.txt?really=1 then this will
895 * @return string Port of the URL.
897 public function get_port() {
903 * Determine if there is data waiting to be processed from a form
905 * Used on most forms in Moodle to check for data
906 * Returns the data as an object, if it's found.
907 * This object can be used in foreach loops without
908 * casting because it's cast to (array) automatically
910 * Checks that submitted POST data exists and returns it as object.
912 * @return mixed false or object
914 function data_submitted() {
919 return (object)fix_utf8($_POST);
924 * Given some normal text this function will break up any
925 * long words to a given size by inserting the given character
927 * It's multibyte savvy and doesn't change anything inside html tags.
929 * @param string $string the string to be modified
930 * @param int $maxsize maximum length of the string to be returned
931 * @param string $cutchar the string used to represent word breaks
934 function break_up_long_words($string, $maxsize=20, $cutchar=' ') {
936 // First of all, save all the tags inside the text to skip them.
938 filter_save_tags($string, $tags);
940 // Process the string adding the cut when necessary.
942 $length = core_text
::strlen($string);
945 for ($i=0; $i<$length; $i++
) {
946 $char = core_text
::substr($string, $i, 1);
947 if ($char == ' ' or $char == "\t" or $char == "\n" or $char == "\r" or $char == "<" or $char == ">") {
951 if ($wordlength > $maxsize) {
959 // Finally load the tags back again.
961 $output = str_replace(array_keys($tags), $tags, $output);
968 * Try and close the current window using JavaScript, either immediately, or after a delay.
970 * Echo's out the resulting XHTML & javascript
972 * @param integer $delay a delay in seconds before closing the window. Default 0.
973 * @param boolean $reloadopener if true, we will see if this window was a pop-up, and try
974 * to reload the parent window before this one closes.
976 function close_window($delay = 0, $reloadopener = false) {
977 global $PAGE, $OUTPUT;
979 if (!$PAGE->headerprinted
) {
980 $PAGE->set_title(get_string('closewindow'));
981 echo $OUTPUT->header();
983 $OUTPUT->container_end_all(false);
987 // Trigger the reload immediately, even if the reload is after a delay.
988 $PAGE->requires
->js_function_call('window.opener.location.reload', array(true));
990 $OUTPUT->notification(get_string('windowclosing'), 'notifysuccess');
992 $PAGE->requires
->js_function_call('close_window', array(new stdClass()), false, $delay);
994 echo $OUTPUT->footer();
999 * Returns a string containing a link to the user documentation for the current page.
1001 * Also contains an icon by default. Shown to teachers and admin only.
1003 * @param string $text The text to be displayed for the link
1004 * @return string The link to user documentation for this current page
1006 function page_doc_link($text='') {
1007 global $OUTPUT, $PAGE;
1008 $path = page_get_doc_link_path($PAGE);
1012 return $OUTPUT->doc_link($path, $text);
1016 * Returns the path to use when constructing a link to the docs.
1018 * @since Moodle 2.5.1 2.6
1019 * @param moodle_page $page
1022 function page_get_doc_link_path(moodle_page
$page) {
1025 if (empty($CFG->docroot
) ||
during_initial_install()) {
1028 if (!has_capability('moodle/site:doclinks', $page->context
)) {
1032 $path = $page->docspath
;
1041 * Validates an email to make sure it makes sense.
1043 * @param string $address The email address to validate.
1046 function validate_email($address) {
1048 return (preg_match('#^[-!\#$%&\'*+\\/0-9=?A-Z^_`a-z{|}~]+'.
1049 '(\.[-!\#$%&\'*+\\/0-9=?A-Z^_`a-z{|}~]+)*'.
1051 '[-!\#$%&\'*+\\/0-9=?A-Z^_`a-z{|}~]+\.'.
1052 '[-!\#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+$#',
1057 * Extracts file argument either from file parameter or PATH_INFO
1059 * Note: $scriptname parameter is not needed anymore
1061 * @return string file path (only safe characters)
1063 function get_file_argument() {
1066 $relativepath = optional_param('file', false, PARAM_PATH
);
1068 if ($relativepath !== false and $relativepath !== '') {
1069 return $relativepath;
1071 $relativepath = false;
1073 // Then try extract file from the slasharguments.
1074 if (stripos($_SERVER['SERVER_SOFTWARE'], 'iis') !== false) {
1075 // NOTE: IIS tends to convert all file paths to single byte DOS encoding,
1076 // we can not use other methods because they break unicode chars,
1077 // the only ways are to use URL rewriting
1079 // to properly set the 'FastCGIUtf8ServerVariables' registry key.
1080 if (isset($_SERVER['PATH_INFO']) and $_SERVER['PATH_INFO'] !== '') {
1081 // Check that PATH_INFO works == must not contain the script name.
1082 if (strpos($_SERVER['PATH_INFO'], $SCRIPT) === false) {
1083 $relativepath = clean_param(urldecode($_SERVER['PATH_INFO']), PARAM_PATH
);
1087 // All other apache-like servers depend on PATH_INFO.
1088 if (isset($_SERVER['PATH_INFO'])) {
1089 if (isset($_SERVER['SCRIPT_NAME']) and strpos($_SERVER['PATH_INFO'], $_SERVER['SCRIPT_NAME']) === 0) {
1090 $relativepath = substr($_SERVER['PATH_INFO'], strlen($_SERVER['SCRIPT_NAME']));
1092 $relativepath = $_SERVER['PATH_INFO'];
1094 $relativepath = clean_param($relativepath, PARAM_PATH
);
1098 return $relativepath;
1102 * Just returns an array of text formats suitable for a popup menu
1106 function format_text_menu() {
1107 return array (FORMAT_MOODLE
=> get_string('formattext'),
1108 FORMAT_HTML
=> get_string('formathtml'),
1109 FORMAT_PLAIN
=> get_string('formatplain'),
1110 FORMAT_MARKDOWN
=> get_string('formatmarkdown'));
1114 * Given text in a variety of format codings, this function returns the text as safe HTML.
1116 * This function should mainly be used for long strings like posts,
1117 * answers, glossary items etc. For short strings {@link format_string()}.
1121 * trusted : If true the string won't be cleaned. Default false required noclean=true.
1122 * noclean : If true the string won't be cleaned. Default false required trusted=true.
1123 * nocache : If true the strign will not be cached and will be formatted every call. Default false.
1124 * filter : If true the string will be run through applicable filters as well. Default true.
1125 * para : If true then the returned string will be wrapped in div tags. Default true.
1126 * newlines : If true then lines newline breaks will be converted to HTML newline breaks. Default true.
1127 * context : The context that will be used for filtering.
1128 * overflowdiv : If set to true the formatted text will be encased in a div
1129 * with the class no-overflow before being returned. Default false.
1130 * allowid : If true then id attributes will not be removed, even when
1131 * using htmlpurifier. Default false.
1134 * @staticvar array $croncache
1135 * @param string $text The text to be formatted. This is raw text originally from user input.
1136 * @param int $format Identifier of the text format to be used
1137 * [FORMAT_MOODLE, FORMAT_HTML, FORMAT_PLAIN, FORMAT_MARKDOWN]
1138 * @param object/array $options text formatting options
1139 * @param int $courseiddonotuse deprecated course id, use context option instead
1142 function format_text($text, $format = FORMAT_MOODLE
, $options = null, $courseiddonotuse = null) {
1143 global $CFG, $DB, $PAGE;
1145 if ($text === '' ||
is_null($text)) {
1146 // No need to do any filters and cleaning.
1150 // Detach object, we can not modify it.
1151 $options = (array)$options;
1153 if (!isset($options['trusted'])) {
1154 $options['trusted'] = false;
1156 if (!isset($options['noclean'])) {
1157 if ($options['trusted'] and trusttext_active()) {
1158 // No cleaning if text trusted and noclean not specified.
1159 $options['noclean'] = true;
1161 $options['noclean'] = false;
1164 if (!isset($options['nocache'])) {
1165 $options['nocache'] = false;
1167 if (!isset($options['filter'])) {
1168 $options['filter'] = true;
1170 if (!isset($options['para'])) {
1171 $options['para'] = true;
1173 if (!isset($options['newlines'])) {
1174 $options['newlines'] = true;
1176 if (!isset($options['overflowdiv'])) {
1177 $options['overflowdiv'] = false;
1180 // Calculate best context.
1181 if (empty($CFG->version
) or $CFG->version
< 2013051400 or during_initial_install()) {
1182 // Do not filter anything during installation or before upgrade completes.
1185 } else if (isset($options['context'])) { // First by explicit passed context option.
1186 if (is_object($options['context'])) {
1187 $context = $options['context'];
1189 $context = context
::instance_by_id($options['context']);
1191 } else if ($courseiddonotuse) {
1193 $context = context_course
::instance($courseiddonotuse);
1195 // Fallback to $PAGE->context this may be problematic in CLI and other non-standard pages :-(.
1196 $context = $PAGE->context
;
1200 // Either install/upgrade or something has gone really wrong because context does not exist (yet?).
1201 $options['nocache'] = true;
1202 $options['filter'] = false;
1205 if ($options['filter']) {
1206 $filtermanager = filter_manager
::instance();
1207 $filtermanager->setup_page_for_filters($PAGE, $context); // Setup global stuff filters may have.
1208 $filteroptions = array(
1209 'originalformat' => $format,
1210 'noclean' => $options['noclean'],
1213 $filtermanager = new null_filter_manager();
1214 $filteroptions = array();
1219 if (!$options['noclean']) {
1220 $text = clean_text($text, FORMAT_HTML
, $options);
1222 $text = $filtermanager->filter_text($text, $context, $filteroptions);
1226 $text = s($text); // Cleans dangerous JS.
1227 $text = rebuildnolinktag($text);
1228 $text = str_replace(' ', ' ', $text);
1229 $text = nl2br($text);
1233 // This format is deprecated.
1234 $text = '<p>NOTICE: Wiki-like formatting has been removed from Moodle. You should not be seeing
1235 this message as all texts should have been converted to Markdown format instead.
1236 Please post a bug report to http://moodle.org/bugs with information about where you
1237 saw this message.</p>'.s($text);
1240 case FORMAT_MARKDOWN
:
1241 $text = markdown_to_html($text);
1242 if (!$options['noclean']) {
1243 $text = clean_text($text, FORMAT_HTML
, $options);
1245 $text = $filtermanager->filter_text($text, $context, $filteroptions);
1248 default: // FORMAT_MOODLE or anything else.
1249 $text = text_to_html($text, null, $options['para'], $options['newlines']);
1250 if (!$options['noclean']) {
1251 $text = clean_text($text, FORMAT_HTML
, $options);
1253 $text = $filtermanager->filter_text($text, $context, $filteroptions);
1256 if ($options['filter']) {
1257 // At this point there should not be any draftfile links any more,
1258 // this happens when developers forget to post process the text.
1259 // The only potential problem is that somebody might try to format
1260 // the text before storing into database which would be itself big bug..
1261 $text = str_replace("\"$CFG->httpswwwroot/draftfile.php", "\"$CFG->httpswwwroot/brokenfile.php#", $text);
1263 if ($CFG->debugdeveloper
) {
1264 if (strpos($text, '@@PLUGINFILE@@/') !== false) {
1265 debugging('Before calling format_text(), the content must be processed with file_rewrite_pluginfile_urls()',
1271 if (!empty($options['overflowdiv'])) {
1272 $text = html_writer
::tag('div', $text, array('class' => 'no-overflow'));
1279 * Resets some data related to filters, called during upgrade or when general filter settings change.
1281 * @param bool $phpunitreset true means called from our PHPUnit integration test reset
1284 function reset_text_filters_cache($phpunitreset = false) {
1287 if ($phpunitreset) {
1288 // HTMLPurifier does not change, DB is already reset to defaults,
1289 // nothing to do here, the dataroot was cleared too.
1293 // The purge_all_caches() deals with cachedir and localcachedir purging,
1294 // the individual filter caches are invalidated as necessary elsewhere.
1296 // Update $CFG->filterall cache flag.
1297 if (empty($CFG->stringfilters
)) {
1298 set_config('filterall', 0);
1301 $installedfilters = core_component
::get_plugin_list('filter');
1302 $filters = explode(',', $CFG->stringfilters
);
1303 foreach ($filters as $filter) {
1304 if (isset($installedfilters[$filter])) {
1305 set_config('filterall', 1);
1309 set_config('filterall', 0);
1313 * Given a simple string, this function returns the string
1314 * processed by enabled string filters if $CFG->filterall is enabled
1316 * This function should be used to print short strings (non html) that
1317 * need filter processing e.g. activity titles, post subjects,
1318 * glossary concepts.
1320 * @staticvar bool $strcache
1321 * @param string $string The string to be filtered. Should be plain text, expect
1322 * possibly for multilang tags.
1323 * @param boolean $striplinks To strip any link in the result text. Moodle 1.8 default changed from false to true! MDL-8713
1324 * @param array $options options array/object or courseid
1327 function format_string($string, $striplinks = true, $options = null) {
1330 // We'll use a in-memory cache here to speed up repeated strings.
1331 static $strcache = false;
1333 if (empty($CFG->version
) or $CFG->version
< 2013051400 or during_initial_install()) {
1334 // Do not filter anything during installation or before upgrade completes.
1335 return $string = strip_tags($string);
1338 if ($strcache === false or count($strcache) > 2000) {
1339 // This number might need some tuning to limit memory usage in cron.
1340 $strcache = array();
1343 if (is_numeric($options)) {
1344 // Legacy courseid usage.
1345 $options = array('context' => context_course
::instance($options));
1347 // Detach object, we can not modify it.
1348 $options = (array)$options;
1351 if (empty($options['context'])) {
1352 // Fallback to $PAGE->context this may be problematic in CLI and other non-standard pages :-(.
1353 $options['context'] = $PAGE->context
;
1354 } else if (is_numeric($options['context'])) {
1355 $options['context'] = context
::instance_by_id($options['context']);
1357 if (!isset($options['filter'])) {
1358 $options['filter'] = true;
1361 if (!$options['context']) {
1362 // We did not find any context? weird.
1363 return $string = strip_tags($string);
1367 $md5 = md5($string.'<+>'.$striplinks.'<+>'.$options['context']->id
.'<+>'.current_language());
1369 // Fetch from cache if possible.
1370 if (isset($strcache[$md5])) {
1371 return $strcache[$md5];
1374 // First replace all ampersands not followed by html entity code
1375 // Regular expression moved to its own method for easier unit testing.
1376 $string = replace_ampersands_not_followed_by_entity($string);
1378 if (!empty($CFG->filterall
) && $options['filter']) {
1379 $filtermanager = filter_manager
::instance();
1380 $filtermanager->setup_page_for_filters($PAGE, $options['context']); // Setup global stuff filters may have.
1381 $string = $filtermanager->filter_string($string, $options['context']);
1384 // If the site requires it, strip ALL tags from this string.
1385 if (!empty($CFG->formatstringstriptags
)) {
1386 $string = str_replace(array('<', '>'), array('<', '>'), strip_tags($string));
1389 // Otherwise strip just links if that is required (default).
1391 // Strip links in string.
1392 $string = strip_links($string);
1394 $string = clean_text($string);
1398 $strcache[$md5] = $string;
1404 * Given a string, performs a negative lookahead looking for any ampersand character
1405 * that is not followed by a proper HTML entity. If any is found, it is replaced
1406 * by &. The string is then returned.
1408 * @param string $string
1411 function replace_ampersands_not_followed_by_entity($string) {
1412 return preg_replace("/\&(?![a-zA-Z0-9#]{1,8};)/", "&", $string);
1416 * Given a string, replaces all <a>.*</a> by .* and returns the string.
1418 * @param string $string
1421 function strip_links($string) {
1422 return preg_replace('/(<a\s[^>]+?>)(.+?)(<\/a>)/is', '$2', $string);
1426 * This expression turns links into something nice in a text format. (Russell Jungwirth)
1428 * @param string $string
1431 function wikify_links($string) {
1432 return preg_replace('~(<a [^<]*href=["|\']?([^ "\']*)["|\']?[^>]*>([^<]*)</a>)~i', '$3 [ $2 ]', $string);
1436 * Given text in a variety of format codings, this function returns the text as plain text suitable for plain email.
1438 * @param string $text The text to be formatted. This is raw text originally from user input.
1439 * @param int $format Identifier of the text format to be used
1440 * [FORMAT_MOODLE, FORMAT_HTML, FORMAT_PLAIN, FORMAT_WIKI, FORMAT_MARKDOWN]
1443 function format_text_email($text, $format) {
1452 // There should not be any of these any more!
1453 $text = wikify_links($text);
1454 return core_text
::entities_to_utf8(strip_tags($text), true);
1458 return html_to_text($text);
1462 case FORMAT_MARKDOWN
:
1464 $text = wikify_links($text);
1465 return core_text
::entities_to_utf8(strip_tags($text), true);
1471 * Formats activity intro text
1473 * @param string $module name of module
1474 * @param object $activity instance of activity
1475 * @param int $cmid course module id
1476 * @param bool $filter filter resulting html text
1479 function format_module_intro($module, $activity, $cmid, $filter=true) {
1481 require_once("$CFG->libdir/filelib.php");
1482 $context = context_module
::instance($cmid);
1483 $options = array('noclean' => true, 'para' => false, 'filter' => $filter, 'context' => $context, 'overflowdiv' => true);
1484 $intro = file_rewrite_pluginfile_urls($activity->intro
, 'pluginfile.php', $context->id
, 'mod_'.$module, 'intro', null);
1485 return trim(format_text($intro, $activity->introformat
, $options, null));
1489 * Removes the usage of Moodle files from a text.
1491 * In some rare cases we need to re-use a text that already has embedded links
1492 * to some files hosted within Moodle. But the new area in which we will push
1493 * this content does not support files... therefore we need to remove those files.
1495 * @param string $source The text
1496 * @return string The stripped text
1498 function strip_pluginfile_content($source) {
1499 $baseurl = '@@PLUGINFILE@@';
1500 // Looking for something like < .* "@@pluginfile@@.*" .* >
1501 $pattern = '$<[^<>]+["\']' . $baseurl . '[^"\']*["\'][^<>]*>$';
1502 $stripped = preg_replace($pattern, '', $source);
1503 // Use purify html to rebalence potentially mismatched tags and generally cleanup.
1504 return purify_html($stripped);
1508 * Legacy function, used for cleaning of old forum and glossary text only.
1510 * @param string $text text that may contain legacy TRUSTTEXT marker
1511 * @return string text without legacy TRUSTTEXT marker
1513 function trusttext_strip($text) {
1514 while (true) { // Removing nested TRUSTTEXT.
1516 $text = str_replace('#####TRUSTTEXT#####', '', $text);
1517 if (strcmp($orig, $text) === 0) {
1524 * Must be called before editing of all texts with trust flag. Removes all XSS nasties from texts stored in database if needed.
1526 * @param stdClass $object data object with xxx, xxxformat and xxxtrust fields
1527 * @param string $field name of text field
1528 * @param context $context active context
1529 * @return stdClass updated $object
1531 function trusttext_pre_edit($object, $field, $context) {
1532 $trustfield = $field.'trust';
1533 $formatfield = $field.'format';
1535 if (!$object->$trustfield or !trusttext_trusted($context)) {
1536 $object->$field = clean_text($object->$field, $object->$formatfield);
1543 * Is current user trusted to enter no dangerous XSS in this context?
1545 * Please note the user must be in fact trusted everywhere on this server!!
1547 * @param context $context
1548 * @return bool true if user trusted
1550 function trusttext_trusted($context) {
1551 return (trusttext_active() and has_capability('moodle/site:trustcontent', $context));
1555 * Is trusttext feature active?
1559 function trusttext_active() {
1562 return !empty($CFG->enabletrusttext
);
1566 * Cleans raw text removing nasties.
1568 * Given raw text (eg typed in by a user) this function cleans it up and removes any nasty tags that could mess up
1569 * Moodle pages through XSS attacks.
1571 * The result must be used as a HTML text fragment, this function can not cleanup random
1572 * parts of html tags such as url or src attributes.
1574 * NOTE: the format parameter was deprecated because we can safely clean only HTML.
1576 * @param string $text The text to be cleaned
1577 * @param int|string $format deprecated parameter, should always contain FORMAT_HTML or FORMAT_MOODLE
1578 * @param array $options Array of options; currently only option supported is 'allowid' (if true,
1579 * does not remove id attributes when cleaning)
1580 * @return string The cleaned up text
1582 function clean_text($text, $format = FORMAT_HTML
, $options = array()) {
1583 $text = (string)$text;
1585 if ($format != FORMAT_HTML
and $format != FORMAT_HTML
) {
1586 // TODO: we need to standardise cleanup of text when loading it into editor first.
1587 // debugging('clean_text() is designed to work only with html');.
1590 if ($format == FORMAT_PLAIN
) {
1594 if (is_purify_html_necessary($text)) {
1595 $text = purify_html($text, $options);
1598 // Originally we tried to neutralise some script events here, it was a wrong approach because
1599 // it was trivial to work around that (for example using style based XSS exploits).
1600 // We must not give false sense of security here - all developers MUST understand how to use
1601 // rawurlencode(), htmlentities(), htmlspecialchars(), p(), s(), moodle_url, html_writer and friends!!!
1607 * Is it necessary to use HTMLPurifier?
1610 * @param string $text
1611 * @return bool false means html is safe and valid, true means use HTMLPurifier
1613 function is_purify_html_necessary($text) {
1618 if ($text === (string)((int)$text)) {
1622 if (strpos($text, '&') !== false or preg_match('|<[^pesb/]|', $text)) {
1623 // We need to normalise entities or other tags except p, em, strong and br present.
1627 $altered = htmlspecialchars($text, ENT_NOQUOTES
, 'UTF-8', true);
1628 if ($altered === $text) {
1629 // No < > or other special chars means this must be safe.
1633 // Let's try to convert back some safe html tags.
1634 $altered = preg_replace('|<p>(.*?)</p>|m', '<p>$1</p>', $altered);
1635 if ($altered === $text) {
1638 $altered = preg_replace('|<em>([^<>]+?)</em>|m', '<em>$1</em>', $altered);
1639 if ($altered === $text) {
1642 $altered = preg_replace('|<strong>([^<>]+?)</strong>|m', '<strong>$1</strong>', $altered);
1643 if ($altered === $text) {
1646 $altered = str_replace('<br />', '<br />', $altered);
1647 if ($altered === $text) {
1655 * KSES replacement cleaning function - uses HTML Purifier.
1657 * @param string $text The (X)HTML string to purify
1658 * @param array $options Array of options; currently only option supported is 'allowid' (if set,
1659 * does not remove id attributes when cleaning)
1662 function purify_html($text, $options = array()) {
1665 $text = (string)$text;
1667 static $purifiers = array();
1668 static $caches = array();
1670 // Purifier code can change only during major version upgrade.
1671 $version = empty($CFG->version
) ?
0 : $CFG->version
;
1672 $cachedir = "$CFG->localcachedir/htmlpurifier/$version";
1673 if (!file_exists($cachedir)) {
1674 // Purging of caches may remove the cache dir at any time,
1675 // luckily file_exists() results should be cached for all existing directories.
1676 $purifiers = array();
1678 gc_collect_cycles();
1680 make_localcache_directory('htmlpurifier', false);
1681 check_dir_exists($cachedir);
1684 $allowid = empty($options['allowid']) ?
0 : 1;
1685 $allowobjectembed = empty($CFG->allowobjectembed
) ?
0 : 1;
1687 $type = 'type_'.$allowid.'_'.$allowobjectembed;
1689 if (!array_key_exists($type, $caches)) {
1690 $caches[$type] = cache
::make('core', 'htmlpurifier', array('type' => $type));
1692 $cache = $caches[$type];
1694 // Add revision number and all options to the text key so that it is compatible with local cluster node caches.
1695 $key = "|$version|$allowobjectembed|$allowid|$text";
1696 $filteredtext = $cache->get($key);
1698 if ($filteredtext === true) {
1699 // The filtering did not change the text last time, no need to filter anything again.
1701 } else if ($filteredtext !== false) {
1702 return $filteredtext;
1705 if (empty($purifiers[$type])) {
1706 require_once $CFG->libdir
.'/htmlpurifier/HTMLPurifier.safe-includes.php';
1707 require_once $CFG->libdir
.'/htmlpurifier/locallib.php';
1708 $config = HTMLPurifier_Config
::createDefault();
1710 $config->set('HTML.DefinitionID', 'moodlehtml');
1711 $config->set('HTML.DefinitionRev', 4);
1712 $config->set('Cache.SerializerPath', $cachedir);
1713 $config->set('Cache.SerializerPermissions', $CFG->directorypermissions
);
1714 $config->set('Core.NormalizeNewlines', false);
1715 $config->set('Core.ConvertDocumentToFragment', true);
1716 $config->set('Core.Encoding', 'UTF-8');
1717 $config->set('HTML.Doctype', 'XHTML 1.0 Transitional');
1718 $config->set('URI.AllowedSchemes', array(
1727 'teamspeak' => true,
1732 $config->set('Attr.AllowedFrameTargets', array('_blank'));
1734 if ($allowobjectembed) {
1735 $config->set('HTML.SafeObject', true);
1736 $config->set('Output.FlashCompat', true);
1737 $config->set('HTML.SafeEmbed', true);
1741 $config->set('Attr.EnableID', true);
1744 if ($def = $config->maybeGetRawHTMLDefinition()) {
1745 $def->addElement('nolink', 'Block', 'Flow', array()); // Skip our filters inside.
1746 $def->addElement('tex', 'Inline', 'Inline', array()); // Tex syntax, equivalent to $$xx$$.
1747 $def->addElement('algebra', 'Inline', 'Inline', array()); // Algebra syntax, equivalent to @@xx@@.
1748 $def->addElement('lang', 'Block', 'Flow', array(), array('lang'=>'CDATA')); // Original multilang style - only our hacked lang attribute.
1749 $def->addAttribute('span', 'xxxlang', 'CDATA'); // Current very problematic multilang.
1751 // Use the built-in Ruby module to add annotation support.
1752 $def->manager
->addModule(new HTMLPurifier_HTMLModule_Ruby());
1754 // Use the custom Noreferrer module.
1755 $def->manager
->addModule(new HTMLPurifier_HTMLModule_Noreferrer());
1758 $purifier = new HTMLPurifier($config);
1759 $purifiers[$type] = $purifier;
1761 $purifier = $purifiers[$type];
1764 $multilang = (strpos($text, 'class="multilang"') !== false);
1766 $filteredtext = $text;
1768 $filteredtextregex = '/<span(\s+lang="([a-zA-Z0-9_-]+)"|\s+class="multilang"){2}\s*>/';
1769 $filteredtext = preg_replace($filteredtextregex, '<span xxxlang="${2}">', $filteredtext);
1771 $filteredtext = (string)$purifier->purify($filteredtext);
1773 $filteredtext = preg_replace('/<span xxxlang="([a-zA-Z0-9_-]+)">/', '<span lang="${1}" class="multilang">', $filteredtext);
1776 if ($text === $filteredtext) {
1777 // No need to store the filtered text, next time we will just return unfiltered text
1778 // because it was not changed by purifying.
1779 $cache->set($key, true);
1781 $cache->set($key, $filteredtext);
1784 return $filteredtext;
1788 * Given plain text, makes it into HTML as nicely as possible.
1790 * May contain HTML tags already.
1792 * Do not abuse this function. It is intended as lower level formatting feature used
1793 * by {@link format_text()} to convert FORMAT_MOODLE to HTML. You are supposed
1794 * to call format_text() in most of cases.
1796 * @param string $text The string to convert.
1797 * @param boolean $smileyignored Was used to determine if smiley characters should convert to smiley images, ignored now
1798 * @param boolean $para If true then the returned string will be wrapped in div tags
1799 * @param boolean $newlines If true then lines newline breaks will be converted to HTML newline breaks.
1802 function text_to_html($text, $smileyignored = null, $para = true, $newlines = true) {
1803 // Remove any whitespace that may be between HTML tags.
1804 $text = preg_replace("~>([[:space:]]+)<~i", "><", $text);
1806 // Remove any returns that precede or follow HTML tags.
1807 $text = preg_replace("~([\n\r])<~i", " <", $text);
1808 $text = preg_replace("~>([\n\r])~i", "> ", $text);
1810 // Make returns into HTML newlines.
1812 $text = nl2br($text);
1815 // Wrap the whole thing in a div if required.
1817 // In 1.9 this was changed from a p => div.
1818 return '<div class="text_to_html">'.$text.'</div>';
1825 * Given Markdown formatted text, make it into XHTML using external function
1827 * @param string $text The markdown formatted text to be converted.
1828 * @return string Converted text
1830 function markdown_to_html($text) {
1833 if ($text === '' or $text === null) {
1837 require_once($CFG->libdir
.'/markdown/MarkdownInterface.php');
1838 require_once($CFG->libdir
.'/markdown/Markdown.php');
1839 require_once($CFG->libdir
.'/markdown/MarkdownExtra.php');
1841 return \Michelf\MarkdownExtra
::defaultTransform($text);
1845 * Given HTML text, make it into plain text using external function
1847 * @param string $html The text to be converted.
1848 * @param integer $width Width to wrap the text at. (optional, default 75 which
1849 * is a good value for email. 0 means do not limit line length.)
1850 * @param boolean $dolinks By default, any links in the HTML are collected, and
1851 * printed as a list at the end of the HTML. If you don't want that, set this
1852 * argument to false.
1853 * @return string plain text equivalent of the HTML.
1855 function html_to_text($html, $width = 75, $dolinks = true) {
1858 require_once($CFG->libdir
.'/html2text/lib.php');
1862 'do_links' => 'table',
1865 if (empty($dolinks)) {
1866 $options['do_links'] = 'none';
1868 $h2t = new core_html2text($html, $options);
1869 $result = $h2t->getText();
1875 * This function will highlight search words in a given string
1877 * It cares about HTML and will not ruin links. It's best to use
1878 * this function after performing any conversions to HTML.
1880 * @param string $needle The search string. Syntax like "word1 +word2 -word3" is dealt with correctly.
1881 * @param string $haystack The string (HTML) within which to highlight the search terms.
1882 * @param boolean $matchcase whether to do case-sensitive. Default case-insensitive.
1883 * @param string $prefix the string to put before each search term found.
1884 * @param string $suffix the string to put after each search term found.
1885 * @return string The highlighted HTML.
1887 function highlight($needle, $haystack, $matchcase = false,
1888 $prefix = '<span class="highlight">', $suffix = '</span>') {
1890 // Quick bail-out in trivial cases.
1891 if (empty($needle) or empty($haystack)) {
1895 // Break up the search term into words, discard any -words and build a regexp.
1896 $words = preg_split('/ +/', trim($needle));
1897 foreach ($words as $index => $word) {
1898 if (strpos($word, '-') === 0) {
1899 unset($words[$index]);
1900 } else if (strpos($word, '+') === 0) {
1901 $words[$index] = '\b' . preg_quote(ltrim($word, '+'), '/') . '\b'; // Match only as a complete word.
1903 $words[$index] = preg_quote($word, '/');
1906 $regexp = '/(' . implode('|', $words) . ')/u'; // Char u is to do UTF-8 matching.
1911 // Another chance to bail-out if $search was only -words.
1912 if (empty($words)) {
1916 // Split the string into HTML tags and real content.
1917 $chunks = preg_split('/((?:<[^>]*>)+)/', $haystack, -1, PREG_SPLIT_DELIM_CAPTURE
);
1919 // We have an array of alternating blocks of text, then HTML tags, then text, ...
1920 // Loop through replacing search terms in the text, and leaving the HTML unchanged.
1921 $ishtmlchunk = false;
1923 foreach ($chunks as $chunk) {
1927 $result .= preg_replace($regexp, $prefix . '$1' . $suffix, $chunk);
1929 $ishtmlchunk = !$ishtmlchunk;
1936 * This function will highlight instances of $needle in $haystack
1938 * It's faster that the above function {@link highlight()} and doesn't care about
1941 * @param string $needle The string to search for
1942 * @param string $haystack The string to search for $needle in
1943 * @return string The highlighted HTML
1945 function highlightfast($needle, $haystack) {
1947 if (empty($needle) or empty($haystack)) {
1951 $parts = explode(core_text
::strtolower($needle), core_text
::strtolower($haystack));
1953 if (count($parts) === 1) {
1959 foreach ($parts as $key => $part) {
1960 $parts[$key] = substr($haystack, $pos, strlen($part));
1961 $pos +
= strlen($part);
1963 $parts[$key] .= '<span class="highlight">'.substr($haystack, $pos, strlen($needle)).'</span>';
1964 $pos +
= strlen($needle);
1967 return str_replace('<span class="highlight"></span>', '', join('', $parts));
1971 * Return a string containing 'lang', xml:lang and optionally 'dir' HTML attributes.
1973 * Internationalisation, for print_header and backup/restorelib.
1975 * @param bool $dir Default false
1976 * @return string Attributes
1978 function get_html_lang($dir = false) {
1981 if (right_to_left()) {
1982 $direction = ' dir="rtl"';
1984 $direction = ' dir="ltr"';
1987 // Accessibility: added the 'lang' attribute to $direction, used in theme <html> tag.
1988 $language = str_replace('_', '-', current_language());
1989 @header
('Content-Language: '.$language);
1990 return ($direction.' lang="'.$language.'" xml:lang="'.$language.'"');
1994 // STANDARD WEB PAGE PARTS.
1997 * Send the HTTP headers that Moodle requires.
1999 * There is a backwards compatibility hack for legacy code
2000 * that needs to add custom IE compatibility directive.
2004 * if (!isset($CFG->additionalhtmlhead)) {
2005 * $CFG->additionalhtmlhead = '';
2007 * $CFG->additionalhtmlhead .= '<meta http-equiv="X-UA-Compatible" content="IE=8" />';
2008 * header('X-UA-Compatible: IE=8');
2009 * echo $OUTPUT->header();
2012 * Please note the $CFG->additionalhtmlhead alone might not work,
2013 * you should send the IE compatibility header() too.
2015 * @param string $contenttype
2016 * @param bool $cacheable Can this page be cached on back?
2017 * @return void, sends HTTP headers
2019 function send_headers($contenttype, $cacheable = true) {
2022 @header
('Content-Type: ' . $contenttype);
2023 @header
('Content-Script-Type: text/javascript');
2024 @header
('Content-Style-Type: text/css');
2026 if (empty($CFG->additionalhtmlhead
) or stripos($CFG->additionalhtmlhead
, 'X-UA-Compatible') === false) {
2027 @header
('X-UA-Compatible: IE=edge');
2031 // Allow caching on "back" (but not on normal clicks).
2032 @header
('Cache-Control: private, pre-check=0, post-check=0, max-age=0, no-transform');
2033 @header
('Pragma: no-cache');
2034 @header
('Expires: ');
2036 // Do everything we can to always prevent clients and proxies caching.
2037 @header
('Cache-Control: no-store, no-cache, must-revalidate');
2038 @header
('Cache-Control: post-check=0, pre-check=0, no-transform', false);
2039 @header
('Pragma: no-cache');
2040 @header
('Expires: Mon, 20 Aug 1969 09:23:00 GMT');
2041 @header
('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
2043 @header
('Accept-Ranges: none');
2045 if (empty($CFG->allowframembedding
)) {
2046 @header
('X-Frame-Options: sameorigin');
2051 * Return the right arrow with text ('next'), and optionally embedded in a link.
2053 * @param string $text HTML/plain text label (set to blank only for breadcrumb separator cases).
2054 * @param string $url An optional link to use in a surrounding HTML anchor.
2055 * @param bool $accesshide True if text should be hidden (for screen readers only).
2056 * @param string $addclass Additional class names for the link, or the arrow character.
2057 * @return string HTML string.
2059 function link_arrow_right($text, $url='', $accesshide=false, $addclass='') {
2060 global $OUTPUT; // TODO: move to output renderer.
2061 $arrowclass = 'arrow ';
2063 $arrowclass .= $addclass;
2065 $arrow = '<span class="'.$arrowclass.'">'.$OUTPUT->rarrow().'</span>';
2068 $htmltext = '<span class="arrow_text">'.$text.'</span> ';
2070 $htmltext = get_accesshide($htmltext);
2074 $class = 'arrow_link';
2076 $class .= ' '.$addclass;
2078 return '<a class="'.$class.'" href="'.$url.'" title="'.preg_replace('/<.*?>/', '', $text).'">'.$htmltext.$arrow.'</a>';
2080 return $htmltext.$arrow;
2084 * Return the left arrow with text ('previous'), and optionally embedded in a link.
2086 * @param string $text HTML/plain text label (set to blank only for breadcrumb separator cases).
2087 * @param string $url An optional link to use in a surrounding HTML anchor.
2088 * @param bool $accesshide True if text should be hidden (for screen readers only).
2089 * @param string $addclass Additional class names for the link, or the arrow character.
2090 * @return string HTML string.
2092 function link_arrow_left($text, $url='', $accesshide=false, $addclass='') {
2093 global $OUTPUT; // TODO: move to utput renderer.
2094 $arrowclass = 'arrow ';
2096 $arrowclass .= $addclass;
2098 $arrow = '<span class="'.$arrowclass.'">'.$OUTPUT->larrow().'</span>';
2101 $htmltext = ' <span class="arrow_text">'.$text.'</span>';
2103 $htmltext = get_accesshide($htmltext);
2107 $class = 'arrow_link';
2109 $class .= ' '.$addclass;
2111 return '<a class="'.$class.'" href="'.$url.'" title="'.preg_replace('/<.*?>/', '', $text).'">'.$arrow.$htmltext.'</a>';
2113 return $arrow.$htmltext;
2117 * Return a HTML element with the class "accesshide", for accessibility.
2119 * Please use cautiously - where possible, text should be visible!
2121 * @param string $text Plain text.
2122 * @param string $elem Lowercase element name, default "span".
2123 * @param string $class Additional classes for the element.
2124 * @param string $attrs Additional attributes string in the form, "name='value' name2='value2'"
2125 * @return string HTML string.
2127 function get_accesshide($text, $elem='span', $class='', $attrs='') {
2128 return "<$elem class=\"accesshide $class\" $attrs>$text</$elem>";
2132 * Return the breadcrumb trail navigation separator.
2134 * @return string HTML string.
2136 function get_separator() {
2137 // Accessibility: the 'hidden' slash is preferred for screen readers.
2138 return ' '.link_arrow_right($text='/', $url='', $accesshide=true, 'sep').' ';
2142 * Print (or return) a collapsible region, that has a caption that can be clicked to expand or collapse the region.
2144 * If JavaScript is off, then the region will always be expanded.
2146 * @param string $contents the contents of the box.
2147 * @param string $classes class names added to the div that is output.
2148 * @param string $id id added to the div that is output. Must not be blank.
2149 * @param string $caption text displayed at the top. Clicking on this will cause the region to expand or contract.
2150 * @param string $userpref the name of the user preference that stores the user's preferred default state.
2151 * (May be blank if you do not wish the state to be persisted.
2152 * @param boolean $default Initial collapsed state to use if the user_preference it not set.
2153 * @param boolean $return if true, return the HTML as a string, rather than printing it.
2154 * @return string|void If $return is false, returns nothing, otherwise returns a string of HTML.
2156 function print_collapsible_region($contents, $classes, $id, $caption, $userpref = '', $default = false, $return = false) {
2157 $output = print_collapsible_region_start($classes, $id, $caption, $userpref, $default, true);
2158 $output .= $contents;
2159 $output .= print_collapsible_region_end(true);
2169 * Print (or return) the start of a collapsible region
2171 * The collapsibleregion has a caption that can be clicked to expand or collapse the region. If JavaScript is off, then the region
2172 * will always be expanded.
2174 * @param string $classes class names added to the div that is output.
2175 * @param string $id id added to the div that is output. Must not be blank.
2176 * @param string $caption text displayed at the top. Clicking on this will cause the region to expand or contract.
2177 * @param string $userpref the name of the user preference that stores the user's preferred default state.
2178 * (May be blank if you do not wish the state to be persisted.
2179 * @param boolean $default Initial collapsed state to use if the user_preference it not set.
2180 * @param boolean $return if true, return the HTML as a string, rather than printing it.
2181 * @return string|void if $return is false, returns nothing, otherwise returns a string of HTML.
2183 function print_collapsible_region_start($classes, $id, $caption, $userpref = '', $default = false, $return = false) {
2186 // Work out the initial state.
2187 if (!empty($userpref) and is_string($userpref)) {
2188 user_preference_allow_ajax_update($userpref, PARAM_BOOL
);
2189 $collapsed = get_user_preferences($userpref, $default);
2191 $collapsed = $default;
2196 $classes .= ' collapsed';
2200 $output .= '<div id="' . $id . '" class="collapsibleregion ' . $classes . '">';
2201 $output .= '<div id="' . $id . '_sizer">';
2202 $output .= '<div id="' . $id . '_caption" class="collapsibleregioncaption">';
2203 $output .= $caption . ' ';
2204 $output .= '</div><div id="' . $id . '_inner" class="collapsibleregioninner">';
2205 $PAGE->requires
->js_init_call('M.util.init_collapsible_region', array($id, $userpref, get_string('clicktohideshow')));
2215 * Close a region started with print_collapsible_region_start.
2217 * @param boolean $return if true, return the HTML as a string, rather than printing it.
2218 * @return string|void if $return is false, returns nothing, otherwise returns a string of HTML.
2220 function print_collapsible_region_end($return = false) {
2221 $output = '</div></div></div>';
2231 * Print a specified group's avatar.
2233 * @param array|stdClass $group A single {@link group} object OR array of groups.
2234 * @param int $courseid The course ID.
2235 * @param boolean $large Default small picture, or large.
2236 * @param boolean $return If false print picture, otherwise return the output as string
2237 * @param boolean $link Enclose image in a link to view specified course?
2238 * @return string|void Depending on the setting of $return
2240 function print_group_picture($group, $courseid, $large=false, $return=false, $link=true) {
2243 if (is_array($group)) {
2245 foreach ($group as $g) {
2246 $output .= print_group_picture($g, $courseid, $large, true, $link);
2256 $context = context_course
::instance($courseid);
2258 // If there is no picture, do nothing.
2259 if (!$group->picture
) {
2263 // If picture is hidden, only show to those with course:managegroups.
2264 if ($group->hidepicture
and !has_capability('moodle/course:managegroups', $context)) {
2268 if ($link or has_capability('moodle/site:accessallgroups', $context)) {
2269 $output = '<a href="'. $CFG->wwwroot
.'/user/index.php?id='. $courseid .'&group='. $group->id
.'">';
2279 $grouppictureurl = moodle_url
::make_pluginfile_url($context->id
, 'group', 'icon', $group->id
, '/', $file);
2280 $grouppictureurl->param('rev', $group->picture
);
2281 $output .= '<img class="grouppicture" src="'.$grouppictureurl.'"'.
2282 ' alt="'.s(get_string('group').' '.$group->name
).'" title="'.s($group->name
).'"/>';
2284 if ($link or has_capability('moodle/site:accessallgroups', $context)) {
2297 * Display a recent activity note
2299 * @staticvar string $strftimerecent
2300 * @param int $time A timestamp int.
2301 * @param stdClass $user A user object from the database.
2302 * @param string $text Text for display for the note
2303 * @param string $link The link to wrap around the text
2304 * @param bool $return If set to true the HTML is returned rather than echo'd
2305 * @param string $viewfullnames
2306 * @return string If $retrun was true returns HTML for a recent activity notice.
2308 function print_recent_activity_note($time, $user, $text, $link, $return=false, $viewfullnames=null) {
2309 static $strftimerecent = null;
2312 if (is_null($viewfullnames)) {
2313 $context = context_system
::instance();
2314 $viewfullnames = has_capability('moodle/site:viewfullnames', $context);
2317 if (is_null($strftimerecent)) {
2318 $strftimerecent = get_string('strftimerecent');
2321 $output .= '<div class="head">';
2322 $output .= '<div class="date">'.userdate($time, $strftimerecent).'</div>';
2323 $output .= '<div class="name">'.fullname($user, $viewfullnames).'</div>';
2324 $output .= '</div>';
2325 $output .= '<div class="info"><a href="'.$link.'">'.format_string($text, true).'</a></div>';
2335 * Returns a popup menu with course activity modules
2337 * Given a course this function returns a small popup menu with all the course activity modules in it, as a navigation menu
2338 * outputs a simple list structure in XHTML.
2339 * The data is taken from the serialised array stored in the course record.
2341 * @param course $course A {@link $COURSE} object.
2342 * @param array $sections
2343 * @param course_modinfo $modinfo
2344 * @param string $strsection
2345 * @param string $strjumpto
2347 * @param string $cmid
2348 * @return string The HTML block
2350 function navmenulist($course, $sections, $modinfo, $strsection, $strjumpto, $width=50, $cmid=0) {
2352 global $CFG, $OUTPUT;
2356 $doneheading = false;
2358 $courseformatoptions = course_get_format($course)->get_format_options();
2359 $coursecontext = context_course
::instance($course->id
);
2361 $menu[] = '<ul class="navmenulist"><li class="jumpto section"><span>'.$strjumpto.'</span><ul>';
2362 foreach ($modinfo->cms
as $mod) {
2363 if (!$mod->has_view()) {
2364 // Don't show modules which you can't link to!
2368 // For course formats using 'numsections' do not show extra sections.
2369 if (isset($courseformatoptions['numsections']) && $mod->sectionnum
> $courseformatoptions['numsections']) {
2373 if (!$mod->uservisible
) { // Do not icnlude empty sections at all.
2377 if ($mod->sectionnum
>= 0 and $section != $mod->sectionnum
) {
2378 $thissection = $sections[$mod->sectionnum
];
2380 if ($thissection->visible
or
2381 (isset($courseformatoptions['hiddensections']) and !$courseformatoptions['hiddensections']) or
2382 has_capability('moodle/course:viewhiddensections', $coursecontext)) {
2383 $thissection->summary
= strip_tags(format_string($thissection->summary
, true));
2384 if (!$doneheading) {
2385 $menu[] = '</ul></li>';
2387 if ($course->format
== 'weeks' or empty($thissection->summary
)) {
2388 $item = $strsection ." ". $mod->sectionnum
;
2390 if (core_text
::strlen($thissection->summary
) < ($width-3)) {
2391 $item = $thissection->summary
;
2393 $item = core_text
::substr($thissection->summary
, 0, $width).'...';
2396 $menu[] = '<li class="section"><span>'.$item.'</span>';
2398 $doneheading = true;
2400 $section = $mod->sectionnum
;
2402 // No activities from this hidden section shown.
2407 $url = $mod->modname
.'/view.php?id='. $mod->id
;
2408 $mod->name
= strip_tags(format_string($mod->name
,true));
2409 if (core_text
::strlen($mod->name
) > ($width+
5)) {
2410 $mod->name
= core_text
::substr($mod->name
, 0, $width).'...';
2412 if (!$mod->visible
) {
2413 $mod->name
= '('.$mod->name
.')';
2415 $class = 'activity '.$mod->modname
;
2416 $class .= ($cmid == $mod->id
) ?
' selected' : '';
2417 $menu[] = '<li class="'.$class.'">'.
2418 '<img src="'.$OUTPUT->pix_url('icon', $mod->modname
) . '" alt="" />'.
2419 '<a href="'.$CFG->wwwroot
.'/mod/'.$url.'">'.$mod->name
.'</a></li>';
2423 $menu[] = '</ul></li>';
2425 $menu[] = '</ul></li></ul>';
2427 return implode("\n", $menu);
2431 * Prints a grade menu (as part of an existing form) with help showing all possible numerical grades and scales.
2433 * @todo Finish documenting this function
2434 * @todo Deprecate: this is only used in a few contrib modules
2436 * @param int $courseid The course ID
2437 * @param string $name
2438 * @param string $current
2439 * @param boolean $includenograde Include those with no grades
2440 * @param boolean $return If set to true returns rather than echo's
2441 * @return string|bool Depending on value of $return
2443 function print_grade_menu($courseid, $name, $current, $includenograde=true, $return=false) {
2447 $strscale = get_string('scale');
2448 $strscales = get_string('scales');
2450 $scales = get_scales_menu($courseid);
2451 foreach ($scales as $i => $scalename) {
2452 $grades[-$i] = $strscale .': '. $scalename;
2454 if ($includenograde) {
2455 $grades[0] = get_string('nograde');
2457 for ($i=100; $i>=1; $i--) {
2460 $output .= html_writer
::select($grades, $name, $current, false);
2462 $helppix = $OUTPUT->pix_url('help');
2463 $linkobject = '<span class="helplink"><img class="iconhelp" alt="'.$strscales.'" src="'.$helppix.'" /></span>';
2464 $link = new moodle_url('/course/scales.php', array('id' => $courseid, 'list' => 1));
2465 $action = new popup_action('click', $link, 'ratingscales', array('height' => 400, 'width' => 500));
2466 $output .= $OUTPUT->action_link($link, $linkobject, $action, array('title' => $strscales));
2476 * Print an error to STDOUT and exit with a non-zero code. For commandline scripts.
2478 * Default errorcode is 1.
2480 * Very useful for perl-like error-handling:
2481 * do_somethting() or mdie("Something went wrong");
2483 * @param string $msg Error message
2484 * @param integer $errorcode Error code to emit
2486 function mdie($msg='', $errorcode=1) {
2487 trigger_error($msg);
2492 * Print a message and exit.
2494 * @param string $message The message to print in the notice
2495 * @param string $link The link to use for the continue button
2496 * @param object $course A course object. Unused.
2497 * @return void This function simply exits
2499 function notice ($message, $link='', $course=null) {
2500 global $PAGE, $OUTPUT;
2502 $message = clean_text($message); // In case nasties are in here.
2505 echo("!!$message!!\n");
2506 exit(1); // No success.
2509 if (!$PAGE->headerprinted
) {
2510 // Header not yet printed.
2511 $PAGE->set_title(get_string('notice'));
2512 echo $OUTPUT->header();
2514 echo $OUTPUT->container_end_all(false);
2517 echo $OUTPUT->box($message, 'generalbox', 'notice');
2518 echo $OUTPUT->continue_button($link);
2520 echo $OUTPUT->footer();
2521 exit(1); // General error code.
2525 * Redirects the user to another page, after printing a notice.
2527 * This function calls the OUTPUT redirect method, echo's the output and then dies to ensure nothing else happens.
2529 * <strong>Good practice:</strong> You should call this method before starting page
2530 * output by using any of the OUTPUT methods.
2532 * @param moodle_url|string $url A moodle_url to redirect to. Strings are not to be trusted!
2533 * @param string $message The message to display to the user
2534 * @param int $delay The delay before redirecting
2535 * @throws moodle_exception
2537 function redirect($url, $message='', $delay=-1) {
2538 global $OUTPUT, $PAGE, $CFG;
2540 if (CLI_SCRIPT
or AJAX_SCRIPT
) {
2541 // This is wrong - developers should not use redirect in these scripts but it should not be very likely.
2542 throw new moodle_exception('redirecterrordetected', 'error');
2545 // Prevent debug errors - make sure context is properly initialised.
2547 $PAGE->set_context(null);
2548 $PAGE->set_pagelayout('redirect'); // No header and footer needed.
2549 $PAGE->set_title(get_string('pageshouldredirect', 'moodle'));
2552 if ($url instanceof moodle_url
) {
2553 $url = $url->out(false);
2556 $debugdisableredirect = false;
2558 if (defined('DEBUGGING_PRINTED')) {
2559 // Some debugging already printed, no need to look more.
2560 $debugdisableredirect = true;
2564 if (core_useragent
::is_msword()) {
2565 // Clicking a URL from MS Word sends a request to the server without cookies. If that
2566 // causes a redirect Word will open a browser pointing the new URL. If not, the URL that
2567 // was clicked is opened. Because the request from Word is without cookies, it almost
2568 // always results in a redirect to the login page, even if the user is logged in in their
2569 // browser. This is not what we want, so prevent the redirect for requests from Word.
2570 $debugdisableredirect = true;
2574 if (empty($CFG->debugdisplay
) or empty($CFG->debug
)) {
2575 // No errors should be displayed.
2579 if (!function_exists('error_get_last') or !$lasterror = error_get_last()) {
2583 if (!($lasterror['type'] & $CFG->debug
)) {
2584 // Last error not interesting.
2588 // Watch out here, @hidden() errors are returned from error_get_last() too.
2589 if (headers_sent()) {
2590 // We already started printing something - that means errors likely printed.
2591 $debugdisableredirect = true;
2595 if (ob_get_level() and ob_get_contents()) {
2596 // There is something waiting to be printed, hopefully it is the errors,
2597 // but it might be some error hidden by @ too - such as the timezone mess from setup.php.
2598 $debugdisableredirect = true;
2603 // Technically, HTTP/1.1 requires Location: header to contain the absolute path.
2604 // (In practice browsers accept relative paths - but still, might as well do it properly.)
2605 // This code turns relative into absolute.
2606 if (!preg_match('|^[a-z]+:|i', $url)) {
2607 // Get host name http://www.wherever.com.
2608 $hostpart = preg_replace('|^(.*?[^:/])/.*$|', '$1', $CFG->wwwroot
);
2609 if (preg_match('|^/|', $url)) {
2610 // URLs beginning with / are relative to web server root so we just add them in.
2611 $url = $hostpart.$url;
2613 // URLs not beginning with / are relative to path of current script, so add that on.
2614 $url = $hostpart.preg_replace('|\?.*$|', '', me()).'/../'.$url;
2618 $newurl = preg_replace('|/(?!\.\.)[^/]*/\.\./|', '/', $url);
2619 if ($newurl == $url) {
2626 // Sanitise url - we can not rely on moodle_url or our URL cleaning
2627 // because they do not support all valid external URLs.
2628 $url = preg_replace('/[\x00-\x1F\x7F]/', '', $url);
2629 $url = str_replace('"', '%22', $url);
2630 $encodedurl = preg_replace("/\&(?![a-zA-Z0-9#]{1,8};)/", "&", $url);
2631 $encodedurl = preg_replace('/^.*href="([^"]*)".*$/', "\\1", clean_text('<a href="'.$encodedurl.'" />', FORMAT_HTML
));
2632 $url = str_replace('&', '&', $encodedurl);
2634 if (!empty($message)) {
2635 if ($delay === -1 ||
!is_numeric($delay)) {
2638 $message = clean_text($message);
2640 $message = get_string('pageshouldredirect');
2644 // Make sure the session is closed properly, this prevents problems in IIS
2645 // and also some potential PHP shutdown issues.
2646 \core\session\manager
::write_close();
2648 if ($delay == 0 && !$debugdisableredirect && !headers_sent()) {
2649 // 302 might not work for POST requests, 303 is ignored by obsolete clients.
2650 @header
($_SERVER['SERVER_PROTOCOL'] . ' 303 See Other');
2651 @header
('Location: '.$url);
2652 echo bootstrap_renderer
::plain_redirect_message($encodedurl);
2656 // Include a redirect message, even with a HTTP redirect, because that is recommended practice.
2658 $CFG->docroot
= false; // To prevent the link to moodle docs from being displayed on redirect page.
2659 echo $OUTPUT->redirect_message($encodedurl, $message, $delay, $debugdisableredirect);
2662 echo bootstrap_renderer
::early_redirect_message($encodedurl, $message, $delay);
2668 * Given an email address, this function will return an obfuscated version of it.
2670 * @param string $email The email address to obfuscate
2671 * @return string The obfuscated email address
2673 function obfuscate_email($email) {
2675 $length = strlen($email);
2677 while ($i < $length) {
2678 if (rand(0, 2) && $email{$i}!='@') { // MDL-20619 some browsers have problems unobfuscating @.
2679 $obfuscated.='%'.dechex(ord($email{$i}));
2681 $obfuscated.=$email{$i};
2689 * This function takes some text and replaces about half of the characters
2690 * with HTML entity equivalents. Return string is obviously longer.
2692 * @param string $plaintext The text to be obfuscated
2693 * @return string The obfuscated text
2695 function obfuscate_text($plaintext) {
2697 $length = core_text
::strlen($plaintext);
2699 $prevobfuscated = false;
2700 while ($i < $length) {
2701 $char = core_text
::substr($plaintext, $i, 1);
2702 $ord = core_text
::utf8ord($char);
2703 $numerical = ($ord >= ord('0')) && ($ord <= ord('9'));
2704 if ($prevobfuscated and $numerical ) {
2705 $obfuscated.='&#'.$ord.';';
2706 } else if (rand(0, 2)) {
2707 $obfuscated.='&#'.$ord.';';
2708 $prevobfuscated = true;
2711 $prevobfuscated = false;
2719 * This function uses the {@link obfuscate_email()} and {@link obfuscate_text()}
2720 * to generate a fully obfuscated email link, ready to use.
2722 * @param string $email The email address to display
2723 * @param string $label The text to displayed as hyperlink to $email
2724 * @param boolean $dimmed If true then use css class 'dimmed' for hyperlink
2725 * @param string $subject The subject of the email in the mailto link
2726 * @param string $body The content of the email in the mailto link
2727 * @return string The obfuscated mailto link
2729 function obfuscate_mailto($email, $label='', $dimmed=false, $subject = '', $body = '') {
2731 if (empty($label)) {
2735 $label = obfuscate_text($label);
2736 $email = obfuscate_email($email);
2737 $mailto = obfuscate_text('mailto');
2738 $url = new moodle_url("mailto:$email");
2741 if (!empty($subject)) {
2742 $url->param('subject', format_string($subject));
2744 if (!empty($body)) {
2745 $url->param('body', format_string($body));
2748 // Use the obfuscated mailto.
2749 $url = preg_replace('/^mailto/', $mailto, $url->out());
2752 $attrs['title'] = get_string('emaildisable');
2753 $attrs['class'] = 'dimmed';
2756 return html_writer
::link($url, $label, $attrs);
2760 * This function is used to rebuild the <nolink> tag because some formats (PLAIN and WIKI)
2761 * will transform it to html entities
2763 * @param string $text Text to search for nolink tag in
2766 function rebuildnolinktag($text) {
2768 $text = preg_replace('/<(\/*nolink)>/i', '<$1>', $text);
2774 * Prints a maintenance message from $CFG->maintenance_message or default if empty.
2776 function print_maintenance_message() {
2777 global $CFG, $SITE, $PAGE, $OUTPUT;
2779 $PAGE->set_pagetype('maintenance-message');
2780 $PAGE->set_pagelayout('maintenance');
2781 $PAGE->set_title(strip_tags($SITE->fullname
));
2782 $PAGE->set_heading($SITE->fullname
);
2783 echo $OUTPUT->header();
2784 echo $OUTPUT->heading(get_string('sitemaintenance', 'admin'));
2785 if (isset($CFG->maintenance_message
) and !html_is_blank($CFG->maintenance_message
)) {
2786 echo $OUTPUT->box_start('maintenance_message generalbox boxwidthwide boxaligncenter');
2787 echo $CFG->maintenance_message
;
2788 echo $OUTPUT->box_end();
2790 echo $OUTPUT->footer();
2795 * Returns a string containing a nested list, suitable for formatting into tabs with CSS.
2797 * It is not recommended to use this function in Moodle 2.5 but it is left for backward
2800 * Example how to print a single line tabs:
2802 * new tabobject(...),
2803 * new tabobject(...)
2805 * echo $OUTPUT->tabtree($rows, $selectedid);
2807 * Multiple row tabs may not look good on some devices but if you want to use them
2808 * you can specify ->subtree for the active tabobject.
2810 * @param array $tabrows An array of rows where each row is an array of tab objects
2811 * @param string $selected The id of the selected tab (whatever row it's on)
2812 * @param array $inactive An array of ids of inactive tabs that are not selectable.
2813 * @param array $activated An array of ids of other tabs that are currently activated
2814 * @param bool $return If true output is returned rather then echo'd
2815 * @return string HTML output if $return was set to true.
2817 function print_tabs($tabrows, $selected = null, $inactive = null, $activated = null, $return = false) {
2820 $tabrows = array_reverse($tabrows);
2822 foreach ($tabrows as $row) {
2825 foreach ($row as $tab) {
2826 $tab->inactive
= is_array($inactive) && in_array((string)$tab->id
, $inactive);
2827 $tab->activated
= is_array($activated) && in_array((string)$tab->id
, $activated);
2828 $tab->selected
= (string)$tab->id
== $selected;
2830 if ($tab->activated ||
$tab->selected
) {
2831 $tab->subtree
= $subtree;
2837 $output = $OUTPUT->tabtree($subtree);
2842 return !empty($output);
2847 * Alter debugging level for the current request,
2848 * the change is not saved in database.
2850 * @param int $level one of the DEBUG_* constants
2851 * @param bool $debugdisplay
2853 function set_debugging($level, $debugdisplay = null) {
2856 $CFG->debug
= (int)$level;
2857 $CFG->debugdeveloper
= (($CFG->debug
& DEBUG_DEVELOPER
) === DEBUG_DEVELOPER
);
2859 if ($debugdisplay !== null) {
2860 $CFG->debugdisplay
= (bool)$debugdisplay;
2865 * Standard Debugging Function
2867 * Returns true if the current site debugging settings are equal or above specified level.
2868 * If passed a parameter it will emit a debugging notice similar to trigger_error(). The
2869 * routing of notices is controlled by $CFG->debugdisplay
2872 * 1) debugging('a normal debug notice');
2873 * 2) debugging('something really picky', DEBUG_ALL);
2874 * 3) debugging('annoying debug message only for developers', DEBUG_DEVELOPER);
2875 * 4) if (debugging()) { perform extra debugging operations (do not use print or echo) }
2877 * In code blocks controlled by debugging() (such as example 4)
2878 * any output should be routed via debugging() itself, or the lower-level
2879 * trigger_error() or error_log(). Using echo or print will break XHTML
2880 * JS and HTTP headers.
2882 * It is also possible to define NO_DEBUG_DISPLAY which redirects the message to error_log.
2884 * @param string $message a message to print
2885 * @param int $level the level at which this debugging statement should show
2886 * @param array $backtrace use different backtrace
2889 function debugging($message = '', $level = DEBUG_NORMAL
, $backtrace = null) {
2892 $forcedebug = false;
2893 if (!empty($CFG->debugusers
) && $USER) {
2894 $debugusers = explode(',', $CFG->debugusers
);
2895 $forcedebug = in_array($USER->id
, $debugusers);
2898 if (!$forcedebug and (empty($CFG->debug
) ||
($CFG->debug
!= -1 and $CFG->debug
< $level))) {
2902 if (!isset($CFG->debugdisplay
)) {
2903 $CFG->debugdisplay
= ini_get_bool('display_errors');
2908 $backtrace = debug_backtrace();
2910 $from = format_backtrace($backtrace, CLI_SCRIPT || NO_DEBUG_DISPLAY
);
2912 if (phpunit_util
::debugging_triggered($message, $level, $from)) {
2913 // We are inside test, the debug message was logged.
2918 if (NO_DEBUG_DISPLAY
) {
2919 // Script does not want any errors or debugging in output,
2920 // we send the info to error log instead.
2921 error_log('Debugging: ' . $message . ' in '. PHP_EOL
. $from);
2923 } else if ($forcedebug or $CFG->debugdisplay
) {
2924 if (!defined('DEBUGGING_PRINTED')) {
2925 define('DEBUGGING_PRINTED', 1); // Indicates we have printed something.
2928 echo "++ $message ++\n$from";
2930 echo '<div class="notifytiny debuggingmessage" data-rel="debugging">' , $message , $from , '</div>';
2934 trigger_error($message . $from, E_USER_NOTICE
);
2941 * Outputs a HTML comment to the browser.
2943 * This is used for those hard-to-debug pages that use bits from many different files in very confusing ways (e.g. blocks).
2945 * <code>print_location_comment(__FILE__, __LINE__);</code>
2947 * @param string $file
2948 * @param integer $line
2949 * @param boolean $return Whether to return or print the comment
2950 * @return string|void Void unless true given as third parameter
2952 function print_location_comment($file, $line, $return = false) {
2954 return "<!-- $file at line $line -->\n";
2956 echo "<!-- $file at line $line -->\n";
2962 * Returns true if the user is using a right-to-left language.
2964 * @return boolean true if the current language is right-to-left (Hebrew, Arabic etc)
2966 function right_to_left() {
2967 return (get_string('thisdirection', 'langconfig') === 'rtl');
2972 * Returns swapped left<=> right if in RTL environment.
2974 * Part of RTL Moodles support.
2976 * @param string $align align to check
2979 function fix_align_rtl($align) {
2980 if (!right_to_left()) {
2983 if ($align == 'left') {
2986 if ($align == 'right') {
2994 * Returns true if the page is displayed in a popup window.
2996 * Gets the information from the URL parameter inpopup.
2998 * @todo Use a central function to create the popup calls all over Moodle and
2999 * In the moment only works with resources and probably questions.
3003 function is_in_popup() {
3004 $inpopup = optional_param('inpopup', '', PARAM_BOOL
);
3010 * Progress bar class.
3012 * Manages the display of a progress bar.
3014 * To use this class.
3016 * - call create (or use the 3rd param to the constructor)
3017 * - call update or update_full() or update() repeatedly
3019 * @copyright 2008 jamiesensei
3020 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3023 class progress_bar
{
3024 /** @var string html id */
3026 /** @var int total width */
3028 /** @var int last percentage printed */
3029 private $percent = 0;
3030 /** @var int time when last printed */
3031 private $lastupdate = 0;
3032 /** @var int when did we start printing this */
3033 private $time_start = 0;
3038 * Prints JS code if $autostart true.
3040 * @param string $html_id
3042 * @param bool $autostart Default to false
3044 public function __construct($htmlid = '', $width = 500, $autostart = false) {
3045 if (!empty($htmlid)) {
3046 $this->html_id
= $htmlid;
3048 $this->html_id
= 'pbar_'.uniqid();
3051 $this->width
= $width;
3059 * Create a new progress bar, this function will output html.
3061 * @return void Echo's output
3063 public function create() {
3066 $this->time_start
= microtime(true);
3068 return; // Temporary solution for cli scripts.
3071 $PAGE->requires
->string_for_js('secondsleft', 'moodle');
3074 <div class="progressbar_container" style="width: {$this->width}px;" id="{$this->html_id}">
3076 <div class="progress progress-striped active">
3077 <div class="bar" role="progressbar" aria-valuemin="0" aria-valuemax="100" aria-valuenow="0"> </div>
3088 * Update the progress bar
3090 * @param int $percent from 1-100
3091 * @param string $msg
3092 * @return void Echo's output
3093 * @throws coding_exception
3095 private function _update($percent, $msg) {
3096 if (empty($this->time_start
)) {
3097 throw new coding_exception('You must call create() (or use the $autostart ' .
3098 'argument to the constructor) before you try updating the progress bar.');
3102 return; // Temporary solution for cli scripts.
3105 $estimate = $this->estimate($percent);
3107 if ($estimate === null) {
3108 // Always do the first and last updates.
3109 } else if ($estimate == 0) {
3110 // Always do the last updates.
3111 } else if ($this->lastupdate +
20 < time()) {
3112 // We must update otherwise browser would time out.
3113 } else if (round($this->percent
, 2) === round($percent, 2)) {
3114 // No significant change, no need to update anything.
3117 if (is_numeric($estimate)) {
3118 $estimate = get_string('secondsleft', 'moodle', round($estimate, 2));
3121 $this->percent
= round($percent, 2);
3122 $this->lastupdate
= microtime(true);
3124 echo html_writer
::script(js_writer
::function_call('updateProgressBar',
3125 array($this->html_id
, $this->percent
, $msg, $estimate)));
3130 * Estimate how much time it is going to take.
3132 * @param int $pt from 1-100
3133 * @return mixed Null (unknown), or int
3135 private function estimate($pt) {
3136 if ($this->lastupdate
== 0) {
3139 if ($pt < 0.00001) {
3140 return null; // We do not know yet how long it will take.
3142 if ($pt > 99.99999) {
3143 return 0; // Nearly done, right?
3145 $consumed = microtime(true) - $this->time_start
;
3146 if ($consumed < 0.001) {
3150 return (100 - $pt) * ($consumed / $pt);
3154 * Update progress bar according percent
3156 * @param int $percent from 1-100
3157 * @param string $msg the message needed to be shown
3159 public function update_full($percent, $msg) {
3160 $percent = max(min($percent, 100), 0);
3161 $this->_update($percent, $msg);
3165 * Update progress bar according the number of tasks
3167 * @param int $cur current task number
3168 * @param int $total total task number
3169 * @param string $msg message
3171 public function update($cur, $total, $msg) {
3172 $percent = ($cur / $total) * 100;
3173 $this->update_full($percent, $msg);
3177 * Restart the progress bar.
3179 public function restart() {
3181 $this->lastupdate
= 0;
3182 $this->time_start
= 0;
3187 * Progress trace class.
3189 * Use this class from long operations where you want to output occasional information about
3190 * what is going on, but don't know if, or in what format, the output should be.
3192 * @copyright 2009 Tim Hunt
3193 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3196 abstract class progress_trace
{
3198 * Output an progress message in whatever format.
3200 * @param string $message the message to output.
3201 * @param integer $depth indent depth for this message.
3203 abstract public function output($message, $depth = 0);
3206 * Called when the processing is finished.
3208 public function finished() {
3213 * This subclass of progress_trace does not ouput anything.
3215 * @copyright 2009 Tim Hunt
3216 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3219 class null_progress_trace
extends progress_trace
{
3223 * @param string $message
3225 * @return void Does Nothing
3227 public function output($message, $depth = 0) {
3232 * This subclass of progress_trace outputs to plain text.
3234 * @copyright 2009 Tim Hunt
3235 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3238 class text_progress_trace
extends progress_trace
{
3240 * Output the trace message.
3242 * @param string $message
3244 * @return void Output is echo'd
3246 public function output($message, $depth = 0) {
3247 echo str_repeat(' ', $depth), $message, "\n";
3253 * This subclass of progress_trace outputs as HTML.
3255 * @copyright 2009 Tim Hunt
3256 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3259 class html_progress_trace
extends progress_trace
{
3261 * Output the trace message.
3263 * @param string $message
3265 * @return void Output is echo'd
3267 public function output($message, $depth = 0) {
3268 echo '<p>', str_repeat('  ', $depth), htmlspecialchars($message), "</p>\n";
3274 * HTML List Progress Tree
3276 * @copyright 2009 Tim Hunt
3277 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3280 class html_list_progress_trace
extends progress_trace
{
3282 protected $currentdepth = -1;
3287 * @param string $message The message to display
3289 * @return void Output is echoed
3291 public function output($message, $depth = 0) {
3293 while ($this->currentdepth
> $depth) {
3294 echo "</li>\n</ul>\n";
3295 $this->currentdepth
-= 1;
3296 if ($this->currentdepth
== $depth) {
3301 while ($this->currentdepth
< $depth) {
3303 $this->currentdepth +
= 1;
3309 echo htmlspecialchars($message);
3314 * Called when the processing is finished.
3316 public function finished() {
3317 while ($this->currentdepth
>= 0) {
3318 echo "</li>\n</ul>\n";
3319 $this->currentdepth
-= 1;
3325 * This subclass of progress_trace outputs to error log.
3327 * @copyright Petr Skoda {@link http://skodak.org}
3328 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3331 class error_log_progress_trace
extends progress_trace
{
3332 /** @var string log prefix */
3337 * @param string $prefix optional log prefix
3339 public function __construct($prefix = '') {
3340 $this->prefix
= $prefix;
3344 * Output the trace message.
3346 * @param string $message
3348 * @return void Output is sent to error log.
3350 public function output($message, $depth = 0) {
3351 error_log($this->prefix
. str_repeat(' ', $depth) . $message);
3356 * Special type of trace that can be used for catching of output of other traces.
3358 * @copyright Petr Skoda {@link http://skodak.org}
3359 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3362 class progress_trace_buffer
extends progress_trace
{
3363 /** @var progres_trace */
3365 /** @var bool do we pass output out */
3366 protected $passthrough;
3367 /** @var string output buffer */
3373 * @param progress_trace $trace
3374 * @param bool $passthrough true means output and buffer, false means just buffer and no output
3376 public function __construct(progress_trace
$trace, $passthrough = true) {
3377 $this->trace
= $trace;
3378 $this->passthrough
= $passthrough;
3383 * Output the trace message.
3385 * @param string $message the message to output.
3386 * @param int $depth indent depth for this message.
3387 * @return void output stored in buffer
3389 public function output($message, $depth = 0) {
3391 $this->trace
->output($message, $depth);
3392 $this->buffer
.= ob_get_contents();
3393 if ($this->passthrough
) {
3401 * Called when the processing is finished.
3403 public function finished() {
3405 $this->trace
->finished();
3406 $this->buffer
.= ob_get_contents();
3407 if ($this->passthrough
) {
3415 * Reset internal text buffer.
3417 public function reset_buffer() {
3422 * Return internal text buffer.
3423 * @return string buffered plain text
3425 public function get_buffer() {
3426 return $this->buffer
;
3431 * Special type of trace that can be used for redirecting to multiple other traces.
3433 * @copyright Petr Skoda {@link http://skodak.org}
3434 * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
3437 class combined_progress_trace
extends progress_trace
{
3440 * An array of traces.
3446 * Constructs a new instance.
3448 * @param array $traces multiple traces
3450 public function __construct(array $traces) {
3451 $this->traces
= $traces;
3455 * Output an progress message in whatever format.
3457 * @param string $message the message to output.
3458 * @param integer $depth indent depth for this message.
3460 public function output($message, $depth = 0) {
3461 foreach ($this->traces
as $trace) {
3462 $trace->output($message, $depth);
3467 * Called when the processing is finished.
3469 public function finished() {
3470 foreach ($this->traces
as $trace) {
3477 * Returns a localized sentence in the current language summarizing the current password policy
3479 * @todo this should be handled by a function/method in the language pack library once we have a support for it
3483 function print_password_policy() {
3487 if (!empty($CFG->passwordpolicy
)) {
3488 $messages = array();
3489 $messages[] = get_string('informminpasswordlength', 'auth', $CFG->minpasswordlength
);
3490 if (!empty($CFG->minpassworddigits
)) {
3491 $messages[] = get_string('informminpassworddigits', 'auth', $CFG->minpassworddigits
);
3493 if (!empty($CFG->minpasswordlower
)) {
3494 $messages[] = get_string('informminpasswordlower', 'auth', $CFG->minpasswordlower
);
3496 if (!empty($CFG->minpasswordupper
)) {
3497 $messages[] = get_string('informminpasswordupper', 'auth', $CFG->minpasswordupper
);
3499 if (!empty($CFG->minpasswordnonalphanum
)) {
3500 $messages[] = get_string('informminpasswordnonalphanum', 'auth', $CFG->minpasswordnonalphanum
);
3503 $messages = join(', ', $messages); // This is ugly but we do not have anything better yet...
3504 $message = get_string('informpasswordpolicy', 'auth', $messages);
3510 * Get the value of a help string fully prepared for display in the current language.
3512 * @param string $identifier The identifier of the string to search for.
3513 * @param string $component The module the string is associated with.
3514 * @param boolean $ajax Whether this help is called from an AJAX script.
3515 * This is used to influence text formatting and determines
3516 * which format to output the doclink in.
3517 * @param string|object|array $a An object, string or number that can be used
3518 * within translation strings
3519 * @return Object An object containing:
3520 * - heading: Any heading that there may be for this help string.
3521 * - text: The wiki-formatted help string.
3522 * - doclink: An object containing a link, the linktext, and any additional
3523 * CSS classes to apply to that link. Only present if $ajax = false.
3524 * - completedoclink: A text representation of the doclink. Only present if $ajax = true.
3526 function get_formatted_help_string($identifier, $component, $ajax = false, $a = null) {
3527 global $CFG, $OUTPUT;
3528 $sm = get_string_manager();
3530 // Do not rebuild caches here!
3531 // Devs need to learn to purge all caches after any change or disable $CFG->langstringcache.
3533 $data = new stdClass();
3535 if ($sm->string_exists($identifier, $component)) {
3536 $data->heading
= format_string(get_string($identifier, $component));
3538 // Gracefully fall back to an empty string.
3539 $data->heading
= '';
3542 if ($sm->string_exists($identifier . '_help', $component)) {
3543 $options = new stdClass();
3544 $options->trusted
= false;
3545 $options->noclean
= false;
3546 $options->smiley
= false;
3547 $options->filter
= false;
3548 $options->para
= true;
3549 $options->newlines
= false;
3550 $options->overflowdiv
= !$ajax;
3552 // Should be simple wiki only MDL-21695.
3553 $data->text
= format_text(get_string($identifier.'_help', $component, $a), FORMAT_MARKDOWN
, $options);
3555 $helplink = $identifier . '_link';
3556 if ($sm->string_exists($helplink, $component)) { // Link to further info in Moodle docs.
3557 $link = get_string($helplink, $component);
3558 $linktext = get_string('morehelp');
3560 $data->doclink
= new stdClass();
3561 $url = new moodle_url(get_docs_url($link));
3563 $data->doclink
->link
= $url->out();
3564 $data->doclink
->linktext
= $linktext;
3565 $data->doclink
->class = ($CFG->doctonewwindow
) ?
'helplinkpopup' : '';
3567 $data->completedoclink
= html_writer
::tag('div', $OUTPUT->doc_link($link, $linktext),
3568 array('class' => 'helpdoclink'));
3572 $data->text
= html_writer
::tag('p',
3573 html_writer
::tag('strong', 'TODO') . ": missing help string [{$identifier}_help, {$component}]");
3579 * Renders a hidden password field so that browsers won't incorrectly autofill password fields with the user's password.
3582 * @return string HTML to prevent password autofill
3584 function prevent_form_autofill_password() {
3585 return '<div class="hide"><input type="text" class="ignoredirty" /><input type="password" class="ignoredirty" /></div>';