6 * @copyright (c) 2005 phpBB Group
7 * @license http://opensource.org/licenses/gpl-license.php GNU Public License
14 if (!defined('IN_PHPBB'))
19 if (!class_exists('bbcode'))
21 include(PHPBB_ROOT_PATH
. 'includes/bbcode.' . PHP_EXT
);
26 * BBCODE first pass class (functions for parsing messages for db storage)
29 class bbcode_firstpass
extends bbcode
32 var $warn_msg = array();
33 var $parsed_items = array();
38 function parse_bbcode()
47 $this->bbcode_bitfield
= '';
48 $bitfield = new bitfield();
50 foreach ($this->bbcodes
as $bbcode_name => $bbcode_data)
52 if (isset($bbcode_data['disabled']) && $bbcode_data['disabled'])
54 foreach ($bbcode_data['regexp'] as $regexp => $replacement)
56 if (preg_match($regexp, $this->message
))
58 $this->warn_msg
[] = sprintf($user->lang
['UNAUTHORISED_BBCODE'] , '[' . $bbcode_name . ']');
65 foreach ($bbcode_data['regexp'] as $regexp => $replacement)
67 // The pattern gets compiled and cached by the PCRE extension,
68 // it should not demand recompilation
69 if (preg_match($regexp, $this->message
))
71 $this->message
= preg_replace($regexp, $replacement, $this->message
);
72 $bitfield->set($bbcode_data['bbcode_id']);
78 $this->bbcode_bitfield
= $bitfield->get_base64();
82 * Prepare some bbcodes for better parsing
84 function prepare_bbcodes()
86 // Ok, seems like users instead want the no-parsing of urls, smilies, etc. after and before and within quote tags being tagged as "not a bug".
87 // Fine by me ;) Will ease our live... but do not come back and cry at us, we won't hear you.
89 /* Add newline at the end and in front of each quote block to prevent parsing errors (urls, smilies, etc.)
90 if (strpos($this->message, '[quote') !== false && strpos($this->message, '[/quote]') !== false)
92 $this->message = str_replace("\r\n", "\n", $this->message);
94 // We strip newlines and spaces after and before quotes in quotes (trimming) and then add exactly one newline
95 $this->message = preg_replace('#\[quote(=".*?")?\]\s*(.*?)\s*\[/quote\]#siu', '[quote\1]' . "\n" . '\2' ."\n[/quote]", $this->message);
99 // Add other checks which needs to be placed before actually parsing anything (be it bbcodes, smilies, urls...)
103 * Init bbcode data for later parsing
105 function bbcode_init()
109 // This array holds all bbcode data. BBCodes will be processed in this
110 // order, so it is important to keep [code] in first position and
111 // [quote] in second position.
112 $this->bbcodes
= array(
113 'code' => array('bbcode_id' => 8, 'regexp' => array('#\[code(?:=([a-z]+))?\](.+\[/code\])#ise' => "\$this->bbcode_code('\$1', '\$2')")),
114 'quote' => array('bbcode_id' => 0, 'regexp' => array('#\[quote(?:="(.*?)")?\](.+)\[/quote\]#ise' => "\$this->bbcode_quote('\$0')")),
115 'attachment' => array('bbcode_id' => 12, 'regexp' => array('#\[attachment=([0-9]+)\](.*?)\[/attachment\]#ise' => "\$this->bbcode_attachment('\$1', '\$2')")),
116 'b' => array('bbcode_id' => 1, 'regexp' => array('#\[b\](.*?)\[/b\]#ise' => "\$this->bbcode_strong('\$1')")),
117 'i' => array('bbcode_id' => 2, 'regexp' => array('#\[i\](.*?)\[/i\]#ise' => "\$this->bbcode_italic('\$1')")),
118 'url' => array('bbcode_id' => 3, 'regexp' => array('#\[url(=(.*))?\](.*)\[/url\]#iUe' => "\$this->validate_url('\$2', '\$3')")),
119 'img' => array('bbcode_id' => 4, 'regexp' => array('#\[img\](.*)\[/img\]#iUe' => "\$this->bbcode_img('\$1')")),
120 'size' => array('bbcode_id' => 5, 'regexp' => array('#\[size=([\-\+]?\d+)\](.*?)\[/size\]#ise' => "\$this->bbcode_size('\$1', '\$2')")),
121 'color' => array('bbcode_id' => 6, 'regexp' => array('!\[color=(#[0-9a-f]{6}|[a-z\-]+)\](.*?)\[/color\]!ise' => "\$this->bbcode_color('\$1', '\$2')")),
122 'u' => array('bbcode_id' => 7, 'regexp' => array('#\[u\](.*?)\[/u\]#ise' => "\$this->bbcode_underline('\$1')")),
123 'list' => array('bbcode_id' => 9, 'regexp' => array('#\[list(?:=(?:[a-z0-9]|disc|circle|square))?].*\[/list]#ise' => "\$this->bbcode_parse_list('\$0')")),
124 'email' => array('bbcode_id' => 10, 'regexp' => array('#\[email=?(.*?)?\](.*?)\[/email\]#ise' => "\$this->validate_email('\$1', '\$2')")),
125 'flash' => array('bbcode_id' => 11, 'regexp' => array('#\[flash=([0-9]+),([0-9]+)\](.*?)\[/flash\]#ie' => "\$this->bbcode_flash('\$1', '\$2', '\$3')"))
128 // Zero the parsed items array
129 $this->parsed_items
= array();
131 foreach ($this->bbcodes
as $tag => $bbcode_data)
133 $this->parsed_items
[$tag] = 0;
136 if (!is_array($rowset))
142 FROM ' . BBCODES_TABLE
;
143 $result = $db->sql_query($sql);
145 while ($row = $db->sql_fetchrow($result))
149 $db->sql_freeresult($result);
152 foreach ($rowset as $row)
154 $this->bbcodes
[$row['bbcode_tag']] = array(
155 'bbcode_id' => (int) $row['bbcode_id'],
156 'regexp' => array($row['first_pass_match'] => str_replace('$uid', $this->bbcode_uid
, $row['first_pass_replace']))
162 * Making some pre-checks for bbcodes as well as increasing the number of parsed items
164 function check_bbcode($bbcode, &$in)
166 // when using the /e modifier, preg_replace slashes double-quotes but does not
167 // seem to slash anything else
168 $in = str_replace("\r\n", "\n", str_replace('\"', '"', $in));
170 // Trimming here to make sure no empty bbcodes are parsed accidently
176 $this->parsed_items
[$bbcode]++
;
182 * Transform some characters in valid bbcodes
184 function bbcode_specialchars($text)
186 $str_from = array('<', '>', '[', ']', '.', ':');
187 $str_to = array('<', '>', '[', ']', '.', ':');
189 return str_replace($str_from, $str_to, $text);
195 function bbcode_size($stx, $in)
197 global $user, $config;
199 if (!$this->check_bbcode('size', $in))
204 if ($config['max_' . $this->mode
. '_font_size'] && $config['max_' . $this->mode
. '_font_size'] < $stx)
206 $this->warn_msg
[] = sprintf($user->lang
['MAX_FONT_SIZE_EXCEEDED'], $config['max_' . $this->mode
. '_font_size']);
208 return '[size=' . $stx . ']' . $in . '[/size]';
211 // Do not allow size=0
214 return '[size=' . $stx . ']' . $in . '[/size]';
217 return '[size=' . $stx . ':' . $this->bbcode_uid
. ']' . $in . '[/size:' . $this->bbcode_uid
. ']';
223 function bbcode_color($stx, $in)
225 if (!$this->check_bbcode('color', $in))
230 return '[color=' . $stx . ':' . $this->bbcode_uid
. ']' . $in . '[/color:' . $this->bbcode_uid
. ']';
236 function bbcode_underline($in)
238 if (!$this->check_bbcode('u', $in))
243 return '[u:' . $this->bbcode_uid
. ']' . $in . '[/u:' . $this->bbcode_uid
. ']';
249 function bbcode_strong($in)
251 if (!$this->check_bbcode('b', $in))
256 return '[b:' . $this->bbcode_uid
. ']' . $in . '[/b:' . $this->bbcode_uid
. ']';
262 function bbcode_italic($in)
264 if (!$this->check_bbcode('i', $in))
269 return '[i:' . $this->bbcode_uid
. ']' . $in . '[/i:' . $this->bbcode_uid
. ']';
275 function bbcode_img($in)
277 global $user, $config;
279 if (!$this->check_bbcode('img', $in))
287 $in = str_replace(' ', '%20', $in);
290 if (!preg_match('#^' . get_preg_expression('url') . '$#i', $in) && !preg_match('#^' . get_preg_expression('www_url') . '$#i', $in))
292 return '[img]' . $in . '[/img]';
295 // Try to cope with a common user error... not specifying a protocol but only a subdomain
296 if (!preg_match('#^[a-z0-9]+://#i', $in))
298 $in = 'http://' . $in;
301 if ($config['max_' . $this->mode
. '_img_height'] ||
$config['max_' . $this->mode
. '_img_width'])
303 $stats = @getimagesize
($in);
305 if ($stats === false)
308 $this->warn_msg
[] = $user->lang
['UNABLE_GET_IMAGE_SIZE'];
312 if ($config['max_' . $this->mode
. '_img_height'] && $config['max_' . $this->mode
. '_img_height'] < $stats[1])
315 $this->warn_msg
[] = sprintf($user->lang
['MAX_IMG_HEIGHT_EXCEEDED'], $config['max_' . $this->mode
. '_img_height']);
318 if ($config['max_' . $this->mode
. '_img_width'] && $config['max_' . $this->mode
. '_img_width'] < $stats[0])
321 $this->warn_msg
[] = sprintf($user->lang
['MAX_IMG_WIDTH_EXCEEDED'], $config['max_' . $this->mode
. '_img_width']);
326 if ($error ||
$this->path_in_domain($in))
328 return '[img]' . $in . '[/img]';
331 return '[img:' . $this->bbcode_uid
. ']' . $this->bbcode_specialchars($in) . '[/img:' . $this->bbcode_uid
. ']';
337 function bbcode_flash($width, $height, $in)
339 global $user, $config;
341 if (!$this->check_bbcode('flash', $in))
349 // Do not allow 0-sizes generally being entered
350 if ($width <= 0 ||
$height <= 0)
352 return '[flash=' . $width . ',' . $height . ']' . $in . '[/flash]';
355 // Apply the same size checks on flash files as on images
356 if ($config['max_' . $this->mode
. '_img_height'] ||
$config['max_' . $this->mode
. '_img_width'])
358 if ($config['max_' . $this->mode
. '_img_height'] && $config['max_' . $this->mode
. '_img_height'] < $height)
361 $this->warn_msg
[] = sprintf($user->lang
['MAX_FLASH_HEIGHT_EXCEEDED'], $config['max_' . $this->mode
. '_img_height']);
364 if ($config['max_' . $this->mode
. '_img_width'] && $config['max_' . $this->mode
. '_img_width'] < $width)
367 $this->warn_msg
[] = sprintf($user->lang
['MAX_FLASH_WIDTH_EXCEEDED'], $config['max_' . $this->mode
. '_img_width']);
371 if ($error ||
$this->path_in_domain($in))
373 return '[flash=' . $width . ',' . $height . ']' . $in . '[/flash]';
376 return '[flash=' . $width . ',' . $height . ':' . $this->bbcode_uid
. ']' . $this->bbcode_specialchars($in) . '[/flash:' . $this->bbcode_uid
. ']';
380 * Parse inline attachments [ia]
382 function bbcode_attachment($stx, $in)
384 if (!$this->check_bbcode('attachment', $in))
389 return '[attachment=' . $stx . ':' . $this->bbcode_uid
. ']<!-- ia' . $stx . ' -->' . trim($in) . '<!-- ia' . $stx . ' -->[/attachment:' . $this->bbcode_uid
. ']';
393 * Parse code text from code tag
396 function bbcode_parse_code($stx, &$code)
398 switch (strtolower($stx))
402 $remove_tags = false;
404 $str_from = array('<', '>', '[', ']', '.', ':', ':');
405 $str_to = array('<', '>', '[', ']', '.', ':', ':');
406 $code = str_replace($str_from, $str_to, $code);
408 if (!preg_match('/\<\?.*?\?\>/is', $code))
411 $code = "<?php $code ?>";
414 $conf = array('highlight.bg', 'highlight.comment', 'highlight.default', 'highlight.html', 'highlight.keyword', 'highlight.string');
415 foreach ($conf as $ini_var)
417 @ini_set
($ini_var, str_replace('highlight.', 'syntax', $ini_var));
420 // Because highlight_string is specialcharing the text (but we already did this before), we have to reverse this in order to get correct results
421 $code = htmlspecialchars_decode($code);
422 $code = highlight_string($code, true);
424 $str_from = array('<span style="color: ', '<font color="syntax', '</font>', '<code>', '</code>','[', ']', '.', ':');
425 $str_to = array('<span class="', '<span class="syntax', '</span>', '', '', '[', ']', '.', ':');
429 $str_from[] = '<span class="syntaxdefault"><?php </span>';
431 $str_from[] = '<span class="syntaxdefault"><?php ';
432 $str_to[] = '<span class="syntaxdefault">';
435 $code = str_replace($str_from, $str_to, $code);
436 $code = preg_replace('#^(<span class="[a-z_]+">)\n?(.*?)\n?(</span>)$#is', '$1$2$3', $code);
440 $code = preg_replace('#(<span class="[a-z]+">)?\?>(</span>)#', '$1 $2', $code);
443 $code = preg_replace('#^<span class="[a-z]+"><span class="([a-z]+)">(.*)</span></span>#s', '<span class="$1">$2</span>', $code);
444 $code = preg_replace('#(?:\s++| )*+</span>$#u', '</span>', $code);
446 // remove newline at the end
447 if (!empty($code) && substr($code, -1) == "\n")
449 $code = substr($code, 0, -1);
452 return "[code=$stx:" . $this->bbcode_uid
. ']' . $code . '[/code:' . $this->bbcode_uid
. ']';
456 return '[code:' . $this->bbcode_uid
. ']' . $this->bbcode_specialchars($code) . '[/code:' . $this->bbcode_uid
. ']';
463 * Expects the argument to start right after the opening [code] tag and to end with [/code]
465 function bbcode_code($stx, $in)
467 if (!$this->check_bbcode('code', $in))
472 // We remove the hardcoded elements from the code block here because it is not used in code blocks
473 // Having it here saves us one preg_replace per message containing [code] blocks
474 // Additionally, magic url parsing should go after parsing bbcodes, but for safety those are stripped out too...
475 $htm_match = get_preg_expression('bbcode_htm');
476 unset($htm_match[4], $htm_match[5]);
477 $htm_replace = array('\1', '\1', '\2', '\1');
479 $out = $code_block = '';
484 // Determine position and tag length of next code block
485 preg_match('#(.*?)(\[code(?:=([a-z]+))?\])(.+)#is', $in, $buffer);
486 $pos = (isset($buffer[1])) ?
strlen($buffer[1]) : false;
487 $tag_length = (isset($buffer[2])) ?
strlen($buffer[2]) : false;
489 // Determine position of ending code tag
490 $pos2 = stripos($in, '[/code]');
492 // Which is the next block, ending code or code block
493 if ($pos !== false && $pos < $pos2)
498 $out .= substr($in, 0, $pos);
499 $in = substr($in, $pos);
500 $stx = (isset($buffer[3])) ?
$buffer[3] : '';
505 // Already opened block, just append to the current block
506 $code_block .= substr($in, 0, $pos) . ((isset($buffer[2])) ?
$buffer[2] : '');
507 $in = substr($in, $pos);
510 $in = substr($in, $tag_length);
518 $code_block .= substr($in, 0, $pos2);
519 $code_block = preg_replace($htm_match, $htm_replace, $code_block);
521 // Parse this code block
522 $out .= $this->bbcode_parse_code($stx, $code_block);
528 // Close one open tag... add to the current code block
529 $code_block .= substr($in, 0, $pos2 +
7);
534 // end code without opening code... will be always outside code block
535 $out .= substr($in, 0, $pos2 +
7);
538 $in = substr($in, $pos2 +
7);
542 // if now $code_block has contents we need to parse the remaining code while removing the last closing tag to match up.
545 $code_block = substr($code_block, 0, -7);
546 $code_block = preg_replace($htm_match, $htm_replace, $code_block);
548 $out .= $this->bbcode_parse_code($stx, $code_block);
556 * Expects the argument to start with a tag
558 function bbcode_parse_list($in)
560 if (!$this->check_bbcode('list', $in))
565 // $tok holds characters to stop at. Since the string starts with a '[' we'll get everything up to the first ']' which should be the opening [list] tag
569 // First character is [
570 $in = substr($in, 1);
571 $list_end_tags = $item_end_tags = array();
577 for ($i = 0, $tok_len = strlen($tok); $i < $tok_len; ++
$i)
579 $tmp_pos = strpos($in, $tok[$i]);
581 if ($tmp_pos !== false && $tmp_pos < $pos)
587 $buffer = substr($in, 0, $pos);
590 $in = substr($in, $pos +
1);
594 // if $tok is ']' the buffer holds a tag
595 if (strtolower($buffer) == '/list' && sizeof($list_end_tags))
597 // valid [/list] tag, check nesting so that we don't hit false positives
598 if (sizeof($item_end_tags) && sizeof($item_end_tags) >= sizeof($list_end_tags))
600 // current li tag has not been closed
601 $out = preg_replace('/\n?\[$/', '[', $out) . array_pop($item_end_tags) . '][';
604 $out .= array_pop($list_end_tags) . ']';
607 else if (preg_match('#^list(=[0-9a-z])?$#i', $buffer, $m))
609 // sub-list, add a closing tag
610 if (empty($m[1]) ||
preg_match('/^(?:disc|square|circle)$/i', $m[1]))
612 array_push($list_end_tags, '/list:u:' . $this->bbcode_uid
);
616 array_push($list_end_tags, '/list:o:' . $this->bbcode_uid
);
618 $out .= 'list' . substr($buffer, 4) . ':' . $this->bbcode_uid
. ']';
623 if (($buffer == '*' ||
substr($buffer, -2) == '[*') && sizeof($list_end_tags))
625 // the buffer holds a bullet tag and we have a [list] tag open
626 if (sizeof($item_end_tags) >= sizeof($list_end_tags))
628 if (substr($buffer, -2) == '[*')
630 $out .= substr($buffer, 0, -2) . '[';
632 // current li tag has not been closed
633 if (preg_match('/\n\[$/', $out, $m))
635 $out = preg_replace('/\n\[$/', '[', $out);
636 $buffer = array_pop($item_end_tags) . "]\n[*:" . $this->bbcode_uid
;
640 $buffer = array_pop($item_end_tags) . '][*:' . $this->bbcode_uid
;
645 $buffer = '*:' . $this->bbcode_uid
;
648 $item_end_tags[] = '/*:m:' . $this->bbcode_uid
;
650 else if ($buffer == '/*')
652 array_pop($item_end_tags);
653 $buffer = '/*:' . $this->bbcode_uid
;
656 $out .= $buffer . $tok;
662 // Not within a tag, just add buffer to the return string
663 $out .= $buffer . $tok;
664 $tok = ($tok == '[') ?
']' : '[]';
669 // do we have some tags open? close them now
670 if (sizeof($item_end_tags))
672 $out .= '[' . implode('][', $item_end_tags) . ']';
674 if (sizeof($list_end_tags))
676 $out .= '[' . implode('][', $list_end_tags) . ']';
684 * Expects the argument to start with a tag
686 function bbcode_quote($in)
688 global $config, $user;
691 * If you change this code, make sure the cases described within the following reports are still working:
692 * #3572 - [quote="[test]test"]test [ test[/quote] - (correct: parsed)
693 * #14667 - [quote]test[/quote] test ] and [ test [quote]test[/quote] (correct: parsed)
694 * #14770 - [quote="["]test[/quote] (correct: parsed)
695 * [quote="[i]test[/i]"]test[/quote] (correct: parsed)
696 * [quote="[quote]test[/quote]"]test[/quote] (correct: parsed - Username displayed as [quote]test[/quote])
697 * #20735 - [quote]test[/[/b]quote] test [/quote][/quote] test - (correct: quoted: "test[/[/b]quote] test" / non-quoted: "[/quote] test" - also failed if layout distorted)
700 $in = str_replace("\r\n", "\n", str_replace('\"', '"', trim($in)));
707 // To let the parser not catch tokens within quote_username quotes we encode them before we start this...
708 $in = preg_replace('#quote="(.*?)"\]#ie', "'quote="' . str_replace(array('[', ']'), array('[', ']'), '\$1') . '"]'", $in);
713 $in = substr($in, 1);
714 $close_tags = $error_ary = array();
720 for ($i = 0, $tok_len = strlen($tok); $i < $tok_len; ++
$i)
722 $tmp_pos = strpos($in, $tok[$i]);
723 if ($tmp_pos !== false && $tmp_pos < $pos)
729 $buffer .= substr($in, 0, $pos);
731 $in = substr($in, $pos +
1);
735 if (strtolower($buffer) == '/quote' && sizeof($close_tags) && substr($out, -1, 1) == '[')
737 // we have found a closing tag
738 $out .= array_pop($close_tags) . ']';
742 /* Add space at the end of the closing tag if not happened before to allow following urls/smilies to be parsed correctly
743 * Do not try to think for the user. :/ Do not parse urls/smilies if there is no space - is the same as with other bbcodes too.
744 * Also, we won't have any spaces within $in anyway, only adding up spaces -> #10982
745 if (!$in || $in[0] !== ' ')
750 else if (preg_match('#^quote(?:="(.*?)")?$#is', $buffer, $m) && substr($out, -1, 1) == '[')
752 $this->parsed_items
['quote']++
;
754 // the buffer holds a valid opening tag
755 if ($config['max_quote_depth'] && sizeof($close_tags) >= $config['max_quote_depth'])
757 // there are too many nested quotes
758 $error_ary['quote_depth'] = sprintf($user->lang
['QUOTE_DEPTH_EXCEEDED'], $config['max_quote_depth']);
760 $out .= $buffer . $tok;
767 array_push($close_tags, '/quote:' . $this->bbcode_uid
);
769 if (isset($m[1]) && $m[1])
771 $username = str_replace(array('[', ']'), array('[', ']'), $m[1]);
772 $username = preg_replace('#\[(?!b|i|u|color|url|email|/b|/i|/u|/color|/url|/email)#iU', '[$1', $username);
777 preg_match_all('#\[((?:/)?(?:[a-z]+))#i', $username, $tags);
778 foreach ($tags[1] as $tag)
782 $end_tags[] = '/' . $tag;
786 $end_tag = array_pop($end_tags);
787 $error = ($end_tag != $tag) ?
true : false;
796 $out .= 'quote="' . $username . '":' . $this->bbcode_uid
. ']';
800 $out .= 'quote:' . $this->bbcode_uid
. ']';
806 else if (preg_match('#^quote="(.*?)#is', $buffer, $m))
808 // the buffer holds an invalid opening tag
813 $out .= $buffer . $tok;
821 * Old quote code working fine, but having errors listed in bug #3572
823 * $out .= $buffer . $tok;
824 * $tok = ($tok == '[') ? ']' : '[]';
828 $out .= $buffer . $tok;
832 // Search the text for the next tok... if an ending quote comes first, then change tok to []
833 $pos1 = stripos($in, '[/quote');
834 // If the token ] comes first, we change it to ]
835 $pos2 = strpos($in, ']');
836 // If the token [ comes first, we change it to [
837 $pos3 = strpos($in, '[');
839 if ($pos1 !== false && ($pos2 === false ||
$pos1 < $pos2) && ($pos3 === false ||
$pos1 < $pos3))
843 else if ($pos3 !== false && ($pos2 === false ||
$pos3 < $pos2))
861 if (sizeof($close_tags))
863 $out .= '[' . implode('][', $close_tags) . ']';
866 foreach ($error_ary as $error_msg)
868 $this->warn_msg
[] = $error_msg;
877 function validate_email($var1, $var2)
879 $var1 = str_replace("\r\n", "\n", str_replace('\"', '"', trim($var1)));
880 $var2 = str_replace("\r\n", "\n", str_replace('\"', '"', trim($var2)));
883 $email = ($var1) ?
$var1 : $var2;
887 if (!preg_match('/^' . get_preg_expression('email') . '$/i', $email))
894 return '[email' . (($var1) ?
"=$var1" : '') . ']' . $var2 . '[/email]';
897 $this->parsed_items
['email']++
;
901 $retval = '[email=' . $this->bbcode_specialchars($email) . ':' . $this->bbcode_uid
. ']' . $txt . '[/email:' . $this->bbcode_uid
. ']';
905 $retval = '[email:' . $this->bbcode_uid
. ']' . $this->bbcode_specialchars($email) . '[/email:' . $this->bbcode_uid
. ']';
914 * @param string $var1 optional url parameter for url bbcode: [url(=$var1)]$var2[/url]
915 * @param string $var2 url bbcode content: [url(=$var1)]$var2[/url]
917 function validate_url($var1, $var2)
921 $var1 = str_replace("\r\n", "\n", str_replace('\"', '"', trim($var1)));
922 $var2 = str_replace("\r\n", "\n", str_replace('\"', '"', trim($var2)));
924 $url = ($var1) ?
$var1 : $var2;
933 return '[url' . (($var1) ?
'=' . $var1 : '') . ']' . $var2 . '[/url]';
938 $url = str_replace(' ', '%20', $url);
941 if (preg_match('#^' . get_preg_expression('url') . '$#i', $url) ||
942 preg_match('#^' . get_preg_expression('www_url') . '$#i', $url) ||
943 preg_match('#^' . preg_quote(generate_board_url(), '#') . get_preg_expression('relative_url') . '$#i', $url))
950 $this->parsed_items
['url']++
;
952 // if there is no scheme, then add http schema
953 if (!preg_match('#^[a-z][a-z\d+\-.]*:/{2}#i', $url))
955 $url = 'http://' . $url;
958 // Is this a link to somewhere inside this board? If so then remove the session id from the url
959 if (strpos($url, generate_board_url()) !== false && strpos($url, 'sid=') !== false)
961 $url = preg_replace('/(&|\?)sid=[0-9a-f]{32}&/', '\1', $url);
962 $url = preg_replace('/(&|\?)sid=[0-9a-f]{32}$/', '', $url);
963 $url = append_sid($url);
966 return ($var1) ?
'[url=' . $this->bbcode_specialchars($url) . ':' . $this->bbcode_uid
. ']' . $var2 . '[/url:' . $this->bbcode_uid
. ']' : '[url:' . $this->bbcode_uid
. ']' . $this->bbcode_specialchars($url) . '[/url:' . $this->bbcode_uid
. ']';
969 return '[url' . (($var1) ?
'=' . $var1 : '') . ']' . $var2 . '[/url]';
973 * Check if url is pointing to this domain/script_path/php-file
975 * @param string $url the url to check
976 * @return true if the url is pointing to this domain/script_path/php-file, false if not
980 function path_in_domain($url)
982 global $config, $user;
984 if ($config['force_server_vars'])
986 $check_path = $config['script_path'];
990 $check_path = ($user->page
['root_script_path'] != '/') ?
substr($user->page
['root_script_path'], 0, -1) : '/';
993 // Is the user trying to link to a php file in this domain and script path?
994 if (strpos($url, '.' . PHP_EXT
) !== false && strpos($url, $check_path) !== false)
996 $server_name = $user->host
;
998 // Forcing server vars is the only way to specify/override the protocol
999 if ($config['force_server_vars'] ||
!$server_name)
1001 $server_name = $config['server_name'];
1004 // Check again in correct order...
1005 $pos_ext = strpos($url, '.' . PHP_EXT
);
1006 $pos_path = strpos($url, $check_path);
1007 $pos_domain = strpos($url, $server_name);
1009 if ($pos_domain !== false && $pos_path >= $pos_domain && $pos_ext >= $pos_path)
1011 // Ok, actually we allow linking to some files (this may be able to be extended in some way later...)
1012 if (strpos($url, '/' . $check_path . '/download/file.' . PHP_EXT
) !== 0)
1026 * Main message parser for posting, pm, etc. takes raw message
1027 * and parses it for attachments, bbcode and smilies
1030 class parse_message
extends bbcode_firstpass
1032 var $attachment_data = array();
1033 var $filename_data = array();
1035 // Helps ironing out user error
1036 var $message_status = '';
1038 var $allow_img_bbcode = true;
1039 var $allow_flash_bbcode = true;
1040 var $allow_quote_bbcode = true;
1041 var $allow_url_bbcode = true;
1046 * Init - give message here or manually
1048 function parse_message($message = '')
1051 $this->bbcode_uid
= substr(base_convert(unique_id(), 16, 36), 0, BBCODE_UID_LEN
);
1055 $this->message
= $message;
1062 function parse($allow_bbcode, $allow_magic_url, $allow_smilies, $allow_img_bbcode = true, $allow_flash_bbcode = true, $allow_quote_bbcode = true, $allow_url_bbcode = true, $update_this_message = true, $mode = 'post')
1064 global $config, $db, $user;
1066 $mode = ($mode != 'post') ?
'sig' : 'post';
1068 $this->mode
= $mode;
1070 $this->allow_img_bbcode
= $allow_img_bbcode;
1071 $this->allow_flash_bbcode
= $allow_flash_bbcode;
1072 $this->allow_quote_bbcode
= $allow_quote_bbcode;
1073 $this->allow_url_bbcode
= $allow_url_bbcode;
1075 // If false, then $this->message won't be altered, the text will be returned instead.
1076 if (!$update_this_message)
1078 $tmp_message = $this->message
;
1079 $return_message = &$this->message
;
1082 if ($this->message_status
== 'display')
1084 $this->decode_message();
1087 // Do some general 'cleanup' first before processing message,
1088 // e.g. remove excessive newlines(?), smilies(?)
1089 $match = array('#(script|about|applet|activex|chrome):#i');
1090 $replace = array("\\1:");
1091 $this->message
= preg_replace($match, $replace, trim($this->message
));
1093 // Message length check. 0 disables this check completely.
1094 if ($config['max_' . $mode . '_chars'] > 0)
1096 $msg_len = ($mode == 'post') ?
utf8_strlen($this->message
) : utf8_strlen(preg_replace('#\[\/?[a-z\*\+\-]+(=[\S]+)?\]#ius', ' ', $this->message
));
1098 if ((!$msg_len && $mode !== 'sig') ||
$config['max_' . $mode . '_chars'] && $msg_len > $config['max_' . $mode . '_chars'])
1100 $this->warn_msg
[] = (!$msg_len) ?
$user->lang
['TOO_FEW_CHARS'] : sprintf($user->lang
['TOO_MANY_CHARS_' . strtoupper($mode)], $msg_len, $config['max_' . $mode . '_chars']);
1101 return (!$update_this_message) ?
$return_message : $this->warn_msg
;
1105 // Check for "empty" message
1106 if ($mode !== 'sig' && utf8_clean_string($this->message
) === '')
1108 $this->warn_msg
[] = $user->lang
['TOO_FEW_CHARS'];
1109 return (!$update_this_message) ?
$return_message : $this->warn_msg
;
1112 // Prepare BBcode (just prepares some tags for better parsing)
1113 if ($allow_bbcode && strpos($this->message
, '[') !== false)
1115 $this->bbcode_init();
1116 $disallow = array('img', 'flash', 'quote', 'url');
1117 foreach ($disallow as $bool)
1119 if (!$
{'allow_' . $bool . '_bbcode'})
1121 $this->bbcodes
[$bool]['disabled'] = true;
1125 $this->prepare_bbcodes();
1131 $this->smilies($config['max_' . $mode . '_smilies']);
1137 if ($allow_bbcode && strpos($this->message
, '[') !== false)
1139 $this->parse_bbcode();
1140 $num_urls +
= $this->parsed_items
['url'];
1144 if ($allow_magic_url)
1146 $this->magic_url(generate_board_url());
1148 if ($config['max_' . $mode . '_urls'])
1150 $num_urls +
= preg_match_all('#\<!-- ([lmwe]) --\>.*?\<!-- \1 --\>#', $this->message
, $matches);
1154 // Check number of links
1155 if ($config['max_' . $mode . '_urls'] && $num_urls > $config['max_' . $mode . '_urls'])
1157 $this->warn_msg
[] = sprintf($user->lang
['TOO_MANY_URLS'], $config['max_' . $mode . '_urls']);
1158 return (!$update_this_message) ?
$return_message : $this->warn_msg
;
1161 if (!$update_this_message)
1163 unset($this->message
);
1164 $this->message
= $tmp_message;
1165 return $return_message;
1168 $this->message_status
= 'parsed';
1173 * Formatting text for display
1175 function format_display($allow_bbcode, $allow_magic_url, $allow_smilies, $update_this_message = true)
1177 // If false, then the parsed message get returned but internal message not processed.
1178 if (!$update_this_message)
1180 $tmp_message = $this->message
;
1181 $return_message = &$this->message
;
1184 if ($this->message_status
== 'plain')
1186 // Force updating message - of course.
1187 $this->parse($allow_bbcode, $allow_magic_url, $allow_smilies, $this->allow_img_bbcode
, $this->allow_flash_bbcode
, $this->allow_quote_bbcode
, $this->allow_url_bbcode
, true);
1190 // Replace naughty words such as farty pants
1191 $this->message
= censor_text($this->message
);
1196 $this->bbcode_cache_init();
1198 // We are giving those parameters to be able to use the bbcode class on its own
1199 $this->bbcode_second_pass($this->message
, $this->bbcode_uid
);
1202 $this->message
= bbcode_nl2br($this->message
);
1203 $this->message
= smiley_text($this->message
, !$allow_smilies);
1205 if (!$update_this_message)
1207 unset($this->message
);
1208 $this->message
= $tmp_message;
1209 return $return_message;
1212 $this->message_status
= 'display';
1217 * Decode message to be placed back into form box
1219 function decode_message($custom_bbcode_uid = '', $update_this_message = true)
1221 // If false, then the parsed message get returned but internal message not processed.
1222 if (!$update_this_message)
1224 $tmp_message = $this->message
;
1225 $return_message = &$this->message
;
1228 ($custom_bbcode_uid) ?
decode_message($this->message
, $custom_bbcode_uid) : decode_message($this->message
, $this->bbcode_uid
);
1230 if (!$update_this_message)
1232 unset($this->message
);
1233 $this->message
= $tmp_message;
1234 return $return_message;
1237 $this->message_status
= 'plain';
1242 * Replace magic urls of form http://xxx.xxx., www.xxx. and xxx@xxx.xxx.
1243 * Cuts down displayed size of link if over 50 chars, turns absolute links
1244 * into relative versions when the server/script path matches the link
1246 function magic_url($server_url)
1248 // We use the global make_clickable function
1249 $this->message
= make_clickable($this->message
, $server_url);
1255 function smilies($max_smilies = 0)
1261 // See if the static arrays have already been filled on an earlier invocation
1262 if (!is_array($match))
1264 $match = $replace = array();
1266 // NOTE: obtain_* function? chaching the table contents?
1268 // For now setting the ttl to 10 minutes
1270 FROM ' . SMILIES_TABLE
. '
1271 ORDER BY ' . $db->sql_function('length_varchar', 'code') . ' DESC';
1272 $result = $db->sql_query($sql, 600);
1274 while ($row = $db->sql_fetchrow($result))
1276 if (empty($row['code']))
1282 $match[] = '(?<=^|[\n .])' . preg_quote($row['code'], '#') . '(?![^<>]*>)';
1283 $replace[] = '<!-- s' . $row['code'] . ' --><img src="{SMILIES_PATH}/' . $row['smiley_url'] . '" alt="' . $row['code'] . '" title="' . $row['emotion'] . '" /><!-- s' . $row['code'] . ' -->';
1285 $db->sql_freeresult($result);
1292 $num_matches = preg_match_all('#' . implode('|', $match) . '#', $this->message
, $matches);
1295 if ($num_matches !== false && $num_matches > $max_smilies)
1297 $this->warn_msg
[] = sprintf($user->lang
['TOO_MANY_SMILIES'], $max_smilies);
1302 // Make sure the delimiter # is added in front and at the end of every element within $match
1303 $this->message
= trim(preg_replace(explode(chr(0), '#' . implode('#' . chr(0) . '#', $match) . '#'), $replace, $this->message
));
1310 function parse_attachments($form_name, $mode, $forum_id, $submit, $preview, $refresh, $is_message = false)
1312 global $config, $auth, $user, $db;
1316 $num_attachments = sizeof($this->attachment_data
);
1317 $this->filename_data
['filecomment'] = utf8_normalize_nfc(request_var('filecomment', '', true));
1318 $upload_file = (isset($_FILES[$form_name]) && $_FILES[$form_name]['name'] != 'none' && trim($_FILES[$form_name]['name'])) ?
true : false;
1320 $add_file = (isset($_POST['add_file'])) ?
true : false;
1321 $delete_file = (isset($_POST['delete_file'])) ?
true : false;
1323 // First of all adjust comments if changed
1324 $actual_comment_list = utf8_normalize_nfc(request_var('comment_list', array(''), true));
1326 foreach ($actual_comment_list as $comment_key => $comment)
1328 if (!isset($this->attachment_data
[$comment_key]))
1333 if ($this->attachment_data
[$comment_key]['attach_comment'] != $actual_comment_list[$comment_key])
1335 $this->attachment_data
[$comment_key]['attach_comment'] = $actual_comment_list[$comment_key];
1340 $cfg['max_attachments'] = ($is_message) ?
$config['max_attachments_pm'] : $config['max_attachments'];
1341 $forum_id = ($is_message) ?
0 : $forum_id;
1343 if ($submit && in_array($mode, array('post', 'reply', 'quote', 'edit')) && $upload_file)
1345 if ($num_attachments < $cfg['max_attachments'] ||
$auth->acl_get('a_') ||
$auth->acl_get('m_', $forum_id))
1347 $filedata = upload_attachment($form_name, $forum_id, false, '', $is_message);
1348 $error = $filedata['error'];
1350 if ($filedata['post_attach'] && !sizeof($error))
1353 'physical_filename' => $filedata['physical_filename'],
1354 'attach_comment' => $this->filename_data
['filecomment'],
1355 'real_filename' => $filedata['real_filename'],
1356 'extension' => $filedata['extension'],
1357 'mimetype' => $filedata['mimetype'],
1358 'filesize' => $filedata['filesize'],
1359 'filetime' => $filedata['filetime'],
1360 'thumbnail' => $filedata['thumbnail'],
1362 'in_message' => ($is_message) ?
1 : 0,
1363 'poster_id' => $user->data
['user_id'],
1366 $db->sql_query('INSERT INTO ' . ATTACHMENTS_TABLE
. ' ' . $db->sql_build_array('INSERT', $sql_ary));
1369 'attach_id' => $db->sql_nextid(),
1371 'real_filename' => $filedata['real_filename'],
1372 'attach_comment'=> $this->filename_data
['filecomment'],
1375 $this->attachment_data
= array_merge(array(0 => $new_entry), $this->attachment_data
);
1376 $this->message
= preg_replace('#\[attachment=([0-9]+)\](.*?)\[\/attachment\]#e', "'[attachment='.(\\1 + 1).']\\2[/attachment]'", $this->message
);
1378 $this->filename_data
['filecomment'] = '';
1380 // This Variable is set to false here, because Attachments are entered into the
1381 // Database in two modes, one if the id_list is 0 and the second one if post_attach is true
1382 // Since post_attach is automatically switched to true if an Attachment got added to the filesystem,
1383 // but we are assigning an id of 0 here, we have to reset the post_attach variable to false.
1385 // This is very relevant, because it could happen that the post got not submitted, but we do not
1386 // know this circumstance here. We could be at the posting page or we could be redirected to the entered
1388 $filedata['post_attach'] = false;
1393 $error[] = sprintf($user->lang
['TOO_MANY_ATTACHMENTS'], $cfg['max_attachments']);
1397 if ($preview ||
$refresh ||
sizeof($error))
1399 // Perform actions on temporary attachments
1402 include_once(PHPBB_ROOT_PATH
. 'includes/functions_admin.' . PHP_EXT
);
1404 $index = array_keys(request_var('delete_file', array(0 => 0)));
1405 $index = (!empty($index)) ?
$index[0] : false;
1407 if ($index !== false && !empty($this->attachment_data
[$index]))
1409 // delete selected attachment
1410 if ($this->attachment_data
[$index]['is_orphan'])
1412 $sql = 'SELECT attach_id, physical_filename, thumbnail
1413 FROM ' . ATTACHMENTS_TABLE
. '
1414 WHERE attach_id = ' . (int) $this->attachment_data
[$index]['attach_id'] . '
1416 AND poster_id = ' . $user->data
['user_id'];
1417 $result = $db->sql_query($sql);
1418 $row = $db->sql_fetchrow($result);
1419 $db->sql_freeresult($result);
1423 phpbb_unlink($row['physical_filename'], 'file');
1425 if ($row['thumbnail'])
1427 phpbb_unlink($row['physical_filename'], 'thumbnail');
1430 $db->sql_query('DELETE FROM ' . ATTACHMENTS_TABLE
. ' WHERE attach_id = ' . (int) $this->attachment_data
[$index]['attach_id']);
1435 delete_attachments('attach', array(intval($this->attachment_data
[$index]['attach_id'])));
1438 unset($this->attachment_data
[$index]);
1439 $this->message
= preg_replace('#\[attachment=([0-9]+)\](.*?)\[\/attachment\]#e', "(\\1 == \$index) ? '' : ((\\1 > \$index) ? '[attachment=' . (\\1 - 1) . ']\\2[/attachment]' : '\\0')", $this->message
);
1442 $this->attachment_data
= array_values($this->attachment_data
);
1445 else if (($add_file ||
$preview) && $upload_file)
1447 if ($num_attachments < $cfg['max_attachments'] ||
$auth->acl_gets('m_', 'a_', $forum_id))
1449 $filedata = upload_attachment($form_name, $forum_id, false, '', $is_message);
1450 $error = array_merge($error, $filedata['error']);
1452 if (!sizeof($error))
1455 'physical_filename' => $filedata['physical_filename'],
1456 'attach_comment' => $this->filename_data
['filecomment'],
1457 'real_filename' => $filedata['real_filename'],
1458 'extension' => $filedata['extension'],
1459 'mimetype' => $filedata['mimetype'],
1460 'filesize' => $filedata['filesize'],
1461 'filetime' => $filedata['filetime'],
1462 'thumbnail' => $filedata['thumbnail'],
1464 'in_message' => ($is_message) ?
1 : 0,
1465 'poster_id' => $user->data
['user_id'],
1468 $db->sql_query('INSERT INTO ' . ATTACHMENTS_TABLE
. ' ' . $db->sql_build_array('INSERT', $sql_ary));
1471 'attach_id' => $db->sql_nextid(),
1473 'real_filename' => $filedata['real_filename'],
1474 'attach_comment'=> $this->filename_data
['filecomment'],
1477 $this->attachment_data
= array_merge(array(0 => $new_entry), $this->attachment_data
);
1478 $this->message
= preg_replace('#\[attachment=([0-9]+)\](.*?)\[\/attachment\]#e', "'[attachment='.(\\1 + 1).']\\2[/attachment]'", $this->message
);
1479 $this->filename_data
['filecomment'] = '';
1484 $error[] = sprintf($user->lang
['TOO_MANY_ATTACHMENTS'], $cfg['max_attachments']);
1489 foreach ($error as $error_msg)
1491 $this->warn_msg
[] = $error_msg;
1496 * Get Attachment Data
1498 function get_submitted_attachment_data($check_user_id = false)
1500 global $user, $db, $config;
1502 $this->filename_data
['filecomment'] = utf8_normalize_nfc(request_var('filecomment', '', true));
1503 $attachment_data = (isset($_POST['attachment_data'])) ?
$_POST['attachment_data'] : array();
1504 $this->attachment_data
= array();
1506 $check_user_id = ($check_user_id === false) ?
$user->data
['user_id'] : $check_user_id;
1508 if (!sizeof($attachment_data))
1513 $not_orphan = $orphan = array();
1515 foreach ($attachment_data as $pos => $var_ary)
1517 if ($var_ary['is_orphan'])
1519 $orphan[(int) $var_ary['attach_id']] = $pos;
1523 $not_orphan[(int) $var_ary['attach_id']] = $pos;
1527 // Regenerate already posted attachments
1528 if (sizeof($not_orphan))
1530 // Get the attachment data, based on the poster id...
1531 $sql = 'SELECT attach_id, is_orphan, real_filename, attach_comment
1532 FROM ' . ATTACHMENTS_TABLE
. '
1533 WHERE ' . $db->sql_in_set('attach_id', array_keys($not_orphan)) . '
1534 AND poster_id = ' . $check_user_id;
1535 $result = $db->sql_query($sql);
1537 while ($row = $db->sql_fetchrow($result))
1539 $pos = $not_orphan[$row['attach_id']];
1540 $this->attachment_data
[$pos] = $row;
1541 set_var($this->attachment_data
[$pos]['attach_comment'], $_POST['attachment_data'][$pos]['attach_comment'], 'string', true);
1543 unset($not_orphan[$row['attach_id']]);
1545 $db->sql_freeresult($result);
1548 if (sizeof($not_orphan))
1550 trigger_error('NO_ACCESS_ATTACHMENT', E_USER_ERROR
);
1553 // Regenerate newly uploaded attachments
1554 if (sizeof($orphan))
1556 $sql = 'SELECT attach_id, is_orphan, real_filename, attach_comment
1557 FROM ' . ATTACHMENTS_TABLE
. '
1558 WHERE ' . $db->sql_in_set('attach_id', array_keys($orphan)) . '
1559 AND poster_id = ' . $user->data
['user_id'] . '
1561 $result = $db->sql_query($sql);
1563 while ($row = $db->sql_fetchrow($result))
1565 $pos = $orphan[$row['attach_id']];
1566 $this->attachment_data
[$pos] = $row;
1567 set_var($this->attachment_data
[$pos]['attach_comment'], $_POST['attachment_data'][$pos]['attach_comment'], 'string', true);
1569 unset($orphan[$row['attach_id']]);
1571 $db->sql_freeresult($result);
1574 if (sizeof($orphan))
1576 trigger_error('NO_ACCESS_ATTACHMENT', E_USER_ERROR
);
1579 ksort($this->attachment_data
);
1585 function parse_poll(&$poll)
1587 global $auth, $user, $config;
1589 $poll_max_options = $poll['poll_max_options'];
1591 // Parse Poll Option text ;)
1592 $tmp_message = $this->message
;
1593 $this->message
= $poll['poll_option_text'];
1594 $bbcode_bitfield = $this->bbcode_bitfield
;
1596 $poll['poll_option_text'] = $this->parse($poll['enable_bbcode'], ($config['allow_post_links']) ?
$poll['enable_urls'] : false, $poll['enable_smilies'], $poll['img_status'], false, false, $config['allow_post_links'], false);
1598 $bbcode_bitfield = base64_encode(base64_decode($bbcode_bitfield) |
base64_decode($this->bbcode_bitfield
));
1599 $this->message
= $tmp_message;
1602 $tmp_message = $this->message
;
1603 $this->message
= $poll['poll_title'];
1604 $this->bbcode_bitfield
= $bbcode_bitfield;
1606 $poll['poll_options'] = explode("\n", trim($poll['poll_option_text']));
1607 $poll['poll_options_size'] = sizeof($poll['poll_options']);
1609 if (!$poll['poll_title'] && $poll['poll_options_size'])
1611 $this->warn_msg
[] = $user->lang
['NO_POLL_TITLE'];
1615 if (utf8_strlen(preg_replace('#\[\/?[a-z\*\+\-]+(=[\S]+)?\]#ius', ' ', $this->message
)) > 100)
1617 $this->warn_msg
[] = $user->lang
['POLL_TITLE_TOO_LONG'];
1619 $poll['poll_title'] = $this->parse($poll['enable_bbcode'], ($config['allow_post_links']) ?
$poll['enable_urls'] : false, $poll['enable_smilies'], $poll['img_status'], false, false, $config['allow_post_links'], false);
1620 if (strlen($poll['poll_title']) > 255)
1622 $this->warn_msg
[] = $user->lang
['POLL_TITLE_COMP_TOO_LONG'];
1626 $this->bbcode_bitfield
= base64_encode(base64_decode($bbcode_bitfield) |
base64_decode($this->bbcode_bitfield
));
1627 $this->message
= $tmp_message;
1628 unset($tmp_message);
1630 if (sizeof($poll['poll_options']) == 1)
1632 $this->warn_msg
[] = $user->lang
['TOO_FEW_POLL_OPTIONS'];
1634 else if ($poll['poll_options_size'] > (int) $config['max_poll_options'])
1636 $this->warn_msg
[] = $user->lang
['TOO_MANY_POLL_OPTIONS'];
1638 else if ($poll_max_options > $poll['poll_options_size'])
1640 $this->warn_msg
[] = $user->lang
['TOO_MANY_USER_OPTIONS'];
1643 $poll['poll_max_options'] = ($poll['poll_max_options'] < 1) ?
1 : (($poll['poll_max_options'] > $config['max_poll_options']) ?
$config['max_poll_options'] : $poll['poll_max_options']);