Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Fetching contributors…

Octocat-spinner-32-eaf2f5

Cannot retrieve contributors at this time

file 218 lines (186 sloc) 9.493 kb
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217
<?php /*

ocPortal
Copyright (c) ocProducts, 2004-2012

See text/EN/licence.txt for full licencing information.


NOTE TO PROGRAMMERS:
Do not edit this file. If you need to make changes, save your changed file to the appropriate *_custom folder
**** If you ignore this advice, then your website upgrades (e.g. for bug fixes) will likely kill your changes ****

*/

/**
* @license http://opensource.org/licenses/cpal_1.0 Common Public Attribution License
* @copyright ocProducts Ltd
* @package core_rich_media
*/

/**
* Standard code module initialisation function.
*/
function init__comcode()
{
global $VALID_COMCODE_TAGS;
$VALID_COMCODE_TAGS=array( 'samp'=>1,'q'=>1,'var'=>1,'overlay'=>1,'tooltip'=>1,'section'=>1,'section_controller'=>1,'big_tab'=>1,'big_tab_controller'=>1,'tabs'=>1,'tab'=>1,'carousel'=>1,'cite'=>1,'ins'=>1,'del'=>1,'dfn'=>1,'address'=>1,'acronym'=>1,'abbr'=>1,'contents'=>1,'concepts'=>1,'list'=>1,'flash'=>1,'indent'=>1,'staff_note'=>1,'menu'=>1,'b'=>1,'i'=>1,'u'=>1,'s'=>1,'sup'=>1,'sub'=>1,
'if_in_group'=>1,'title'=>1,'size'=>1,'color'=>1,'highlight'=>1,'font'=>1,'tt'=>1,'box'=>1,'internal_table'=>1,'external_table'=>1,'img'=>1,
'url'=>1,'email'=>1,'reference'=>1,'upload'=>1,'page'=>1,'php'=>1,'codebox'=>1,'sql'=>1,'no_parse'=>1,'code'=>1,'hide'=>1,
'quote'=>1,'block'=>1,'semihtml'=>1,'html'=>1,'exp_thumb'=>1,'exp_ref'=>1,'concept'=>1,'thumb'=>1,'attachment'=>1,'attachment2'=>1,'attachment_safe'=>1,'align'=>1,'left'=>1,'center'=>1,'right'=>1,
'snapback'=>1,'post'=>1,'thread'=>1,'topic'=>1,'include'=>1,'random'=>1,'ticker'=>1,'jumping'=>1,'surround'=>1,'pulse'=>1,'shocker'=>1);
//if (addon_installed('ecommerce'))
{
$VALID_COMCODE_TAGS['currency']=1;
}

global $IMPORTED_CUSTOM_COMCODE,$REPLACE_TARGETS;
$IMPORTED_CUSTOM_COMCODE=false;
$REPLACE_TARGETS=array();

global $COMCODE_ATTACHMENTS,$ATTACHMENTS_ALREADY_REFERENCED;
$COMCODE_ATTACHMENTS=array();
$ATTACHMENTS_ALREADY_REFERENCED=array();

global $COMCODE_PARSE_URLS_CHECKED;
$COMCODE_PARSE_URLS_CHECKED=0;
if (!defined('MAX_URLS_TO_READ')) define('MAX_URLS_TO_READ',5);

global $OVERRIDE_SELF_ZONE;
$OVERRIDE_SELF_ZONE=NULL; // This is not pretty, but needed to properly scope links for search results.

global $LAX_COMCODE;
$LAX_COMCODE=false;
}

/**
* Make text usable inside a string inside comcode
*
* @param string Raw text
* @return string Escaped text
*/
function comcode_escape($in)
{
return str_replace('{','\\{',str_replace('[','\\[',str_replace('"','\\"',str_replace('\\','\\\\',$in))));
}

/**
* Convert (X)HTML into comcode
*
* @param LONG_TEXT The HTML to converted
* @return LONG_TEXT The equivalent comcode
*/
function html_to_comcode($html)
{
// First we allow this to be semi-html
$html=str_replace('[','&#091;',$html);

require_code('comcode_from_html');

return semihtml_to_comcode($html);
}

/**
* Get the text with all the smilie codes replaced with the correct XHTML. Smiles are determined by your forum system.
* This is not used in the normal comcode chain - it's for non-comcode things that require smilies (actually in reality it is used in the Comcode chain if the optimiser sees that a full parse is not needed)
*
* @param string The text to add smilies to (assumption: that this is XHTML)
* @return string The XHTML with the image-substitution of smilies
*/
function apply_emoticons($text)
{
$_smilies=$GLOBALS['FORUM_DRIVER']->find_emoticons(); // Sorted in descending length order

if ($GLOBALS['XSS_DETECT']) $orig_escaped=ocp_is_escaped($text);

// Pre-check, optimisation
$smilies=array();
foreach ($_smilies as $code=>$imgcode)
{
if (strpos($text,$code)!==false)
$smilies[$code]=$imgcode;
}

if (count($smilies)!=0)
{
$len=strlen($text);
for ($i=0;$i<$len;++$i) // Has to go through in byte order so double application cannot happen (i.e. smiley contains [all or portion of] smiley code somehow)
{
$char=$text[$i];

if ($char=='"') // This can cause severe HTML corruption so is a disallowed character
{
$i++;
continue;
}
foreach ($smilies as $code=>$imgcode)
{
$code_len=strlen($code);
if (($char==$code[0]) && (substr($text,$i,$code_len)==$code))
{
$eval=do_emoticon($imgcode);
$_eval=$eval->evaluate();
if ($GLOBALS['XSS_DETECT']) ocp_mark_as_escaped($_eval);
$before=substr($text,0,$i);
$after=substr($text,$i+$code_len);
if (($before=='') && ($after=='')) $text=$_eval; else $text=$before.$_eval.$after;
$len=strlen($text);
$i+=strlen($_eval)-1;
break;
}
}
}

if (($GLOBALS['XSS_DETECT']) && ($orig_escaped)) ocp_mark_as_escaped($text);
}

return $text;
}

/**
* Turn a triple of emoticon parameters into some actual tempcode.
*
* @param array Parameter triple(template,src,code)
* @return mixed Either a tempcode result, or a string result, depending on $evaluate
*/
function do_emoticon($imgcode)
{
$tpl=do_template($imgcode[0],array('UNIQID'=>uniqid(''),'SRC'=>$imgcode[1],'EMOTICON'=>$imgcode[2]));
return $tpl;
}

/**
* Convert the specified comcode (unknown format) into a tempcode tree. You shouldn't output the tempcode tree to the browser, as it looks really horrible. If you are in a rare case where you need to output directly (not through templates), you should call the evaluate method on the tempcode object, to convert it into a string.
*
* @param LONG_TEXT The comcode to convert
* @param ?MEMBER The member the evaluation is running as. This is a security issue, and you should only run as an administrator if you have considered where the comcode came from carefully (NULL: current member)
* @param boolean Whether to explicitly execute this with admin rights. There are a few rare situations where this should be done, for data you know didn't come from a member, but is being evaluated by one. Note that if this is passed false, and $source_member is an admin, it will be parsed using admin privileges anyway.
* @param ?integer The position to conduct wordwrapping at (NULL: do not conduct word-wrapping)
* @param ?string A special identifier that can identify this resource in a sea of our resources of this class; usually this can be ignored, but may be used to provide a binding between Javascript in evaluated comcode, and the surrounding environment (NULL: no explicit binding)
* @param ?object The database connection to use (NULL: standard site connection)
* @param boolean Whether to parse so as to create something that would fit inside a semihtml tag. It means we generate HTML, with Comcode written into it where the tag could never be reverse-converted (e.g. a block).
* @param boolean Whether this is being pre-parsed, to pick up errors before row insertion.
* @param boolean Whether to treat this whole thing as being wrapped in semihtml, but apply normal security otherwise.
* @param boolean Whether we are only doing this parse to find the title structure
* @param boolean Whether to only check the Comcode. It's best to use the check_comcode function which will in turn use this parameter.
* @param ?array A list of words to highlight (NULL: none)
* @param ?MEMBER The member we are running on behalf of, with respect to how attachments are handled; we may use this members attachments that are already within this post, and our new attachments will be handed to this member (NULL: member evaluating)
* @return tempcode The tempcode generated
*/
function comcode_to_tempcode($comcode,$source_member=NULL,$as_admin=false,$wrap_pos=60,$pass_id=NULL,$connection=NULL,$semiparse_mode=false,$preparse_mode=false,$is_all_semihtml=false,$structure_sweep=false,$check_only=false,$highlight_bits=NULL,$on_behalf_of_member=NULL)
{
$matches=array();
if (preg_match('#^\{\!([A-Z\_]+)\}$#',$comcode,$matches)!=0) return do_lang_tempcode($matches[1]);

if ($semiparse_mode) $wrap_pos=100000;

$attachments=(count($_FILES)!=0);
foreach($_POST as $key=>$value)
{
if (preg_match('#^hidFileID\_#i',$key)!=0) $attachments=true;
}
if ((!$attachments || ($GLOBALS['IN_MINIKERNEL_VERSION']==1)) && (preg_match('#^[\w\d\-\_\(\) \.,:;/"\!\?]*$#'/*NB: No apostophes allowed in here, as they get changed by escape_html and can interfere then with apply_emoticons*/,$comcode)!=0) && (strpos($comcode,' ')===false) && (strpos($comcode,'://')===false))
{
if (running_script('stress_test_loader')) return make_string_tempcode(escape_html($comcode));
return make_string_tempcode(apply_emoticons(escape_html($comcode)));
}

require_code('comcode_renderer');
return _comcode_to_tempcode($comcode,$source_member,$as_admin,$wrap_pos,$pass_id,$connection,$semiparse_mode,$preparse_mode,$is_all_semihtml,$structure_sweep,$check_only,$highlight_bits,$on_behalf_of_member);
}

/**
* Strip out any Comcode from this "plain text". Useful for semantic text is wanted but where Comcode is used as "the next best thing" we have.
*
* @param string Plain-text/Comcode
* @return string Purified plain-text
*/
function strip_comcode($text)
{
require_code('mail');
if (function_exists('comcode_to_clean_text')) // For benefit of installer, which disables mail.php
$text=comcode_to_clean_text($text);

global $VALID_COMCODE_TAGS;
foreach (array_keys($VALID_COMCODE_TAGS) as $tag)
{
if ($tag=='i')
{
$text=preg_replace('#\[/?'.$tag.'\]#','',$text);
} else
{
$text=preg_replace('#\[/?'.$tag.'[^\]]*\]#','',$text);
}
}
return $text;
}

Something went wrong with that request. Please try again.