/
comcode.php
189 lines (161 loc) · 8.68 KB
/
comcode.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
<?php /*
ocPortal
Copyright (c) ocProducts, 2004-2013
See text/EN/licence.txt for full licencing information.
NOTE TO PROGRAMMERS:
Do not edit this file. If you need to make changes, save your changed file to the appropriate *_custom folder
**** If you ignore this advice, then your website upgrades (e.g. for bug fixes) will likely kill your changes ****
*/
/**
* @license http://opensource.org/licenses/cpal_1.0 Common Public Attribution License
* @copyright ocProducts Ltd
* @package core_rich_media
*/
/**
* Standard code module initialisation function.
*/
function init__comcode()
{
global $VALID_COMCODE_TAGS;
/** A list of all valid Comcode tags that we recognise.
* @global array $VALID_COMCODE_TAGS
*/
$VALID_COMCODE_TAGS=array(
'samp'=>1,'q'=>1,'var'=>1,'overlay'=>1,'tooltip'=>1,'section'=>1,'section_controller'=>1,'big_tab'=>1,'big_tab_controller'=>1,'tabs'=>1,'tab'=>1,'carousel'=>1,'cite'=>1,'ins'=>1,'del'=>1,'dfn'=>1,'address'=>1,'acronym'=>1,'abbr'=>1,'contents'=>1,'concepts'=>1,'list'=>1,'flash'=>1,'indent'=>1,'staff_note'=>1,'menu'=>1,'b'=>1,'i'=>1,'u'=>1,'s'=>1,'sup'=>1,'sub'=>1,
'if_in_group'=>1,'title'=>1,'size'=>1,'color'=>1,'highlight'=>1,'font'=>1,'tt'=>1,'box'=>1,'internal_table'=>1,'external_table'=>1,'img'=>1,
'url'=>1,'email'=>1,'reference'=>1,'upload'=>1,'page'=>1,'php'=>1,'codebox'=>1,'sql'=>1,'no_parse'=>1,'code'=>1,'hide'=>1,
'quote'=>1,'block'=>1,'semihtml'=>1,'html'=>1,'exp_thumb'=>1,'exp_ref'=>1,'concept'=>1,'thumb'=>1,'attachment'=>1,'attachment_safe'=>1,'align'=>1,'left'=>1,'center'=>1,'right'=>1,
'snapback'=>1,'post'=>1,'thread'=>1,'topic'=>1,'include'=>1,'random'=>1,'ticker'=>1,'jumping'=>1,'surround'=>1,'pulse'=>1,'shocker'=>1,
);
//if (addon_installed('ecommerce'))
{
$VALID_COMCODE_TAGS['currency']=1;
}
global $IMPORTED_CUSTOM_COMCODE,$CUSTOM_COMCODE_REPLACE_TARGETS_CACHE;
$IMPORTED_CUSTOM_COMCODE=false;
$CUSTOM_COMCODE_REPLACE_TARGETS_CACHE=array();
global $COMCODE_ATTACHMENTS,$ATTACHMENTS_ALREADY_REFERENCED;
$COMCODE_ATTACHMENTS=array();
$ATTACHMENTS_ALREADY_REFERENCED=array();
global $COMCODE_PARSE_URLS_CHECKED;
$COMCODE_PARSE_URLS_CHECKED=0;
if (!defined('MAX_URLS_TO_READ')) define('MAX_URLS_TO_READ',5);
global $OVERRIDE_SELF_ZONE;
$OVERRIDE_SELF_ZONE=NULL; // This is not pretty, but needed to properly scope links for search results.
global $LAX_COMCODE;
/** Set whether the lax Comcode parser should be used, which is important for any Comcode not being interactively added (i.e. existing Comcode should not cause errors, even if it is poor quality).
* @global boolean $LAX_COMCODE
*/
$LAX_COMCODE=false;
}
/**
* Make text usable inside a string inside Comcode
*
* @param string Raw text
* @return string Escaped text
*/
function comcode_escape($in)
{
return str_replace('{','\\{',str_replace('[','\\[',str_replace('"','\\"',str_replace('\\','\\\\',$in))));
}
/**
* Convert (X)HTML into Comcode
*
* @param LONG_TEXT The HTML to converted
* @return LONG_TEXT The equivalent Comcode
*/
function html_to_comcode($html)
{
// First we allow this to be semi-html
$html=str_replace('[','[',$html);
require_code('comcode_from_html');
return semihtml_to_comcode($html,true);
}
/**
* Get the text with all the emoticon codes replaced with the correct XHTML. Emoticons are determined by your forum system.
* This is not used in the normal Comcode chain - it's for non-Comcode things that require emoticons (actually in reality it is used in the Comcode chain if the optimiser sees that a full parse is not needed)
*
* @param string The text to add emoticons to (assumption: that this is XHTML)
* @return string The XHTML with the image-substitution of emoticons
*/
function apply_emoticons($text)
{
require_code('comcode_renderer');
return _apply_emoticons($text);
}
/**
* Turn a triple of emoticon parameters into some actual tempcode.
*
* @param array Parameter triple(template,src,code)
* @return mixed Either a tempcode result, or a string result, depending on $evaluate
*/
function do_emoticon($imgcode)
{
$tpl=do_template($imgcode[0],array('UNIQID'=>uniqid(''),'SRC'=>$imgcode[1],'EMOTICON'=>$imgcode[2]));
return $tpl;
}
/**
* Convert the specified Comcode (unknown format) into a tempcode tree. You shouldn't output the tempcode tree to the browser, as it looks really horrible. If you are in a rare case where you need to output directly (not through templates), you should call the evaluate method on the tempcode object, to convert it into a string.
*
* @param LONG_TEXT The Comcode to convert
* @param ?MEMBER The member the evaluation is running as. This is a security issue, and you should only run as an administrator if you have considered where the Comcode came from carefully (NULL: current member)
* @param boolean Whether to explicitly execute this with admin rights. There are a few rare situations where this should be done, for data you know didn't come from a member, but is being evaluated by one. Note that if this is passed false, and $source_member is an admin, it will be parsed using admin privileges anyway.
* @param ?integer The position to conduct wordwrapping at (NULL: do not conduct word-wrapping)
* @param ?string A special identifier that can identify this resource in a sea of our resources of this class; usually this can be ignored, but may be used to provide a binding between Javascript in evaluated Comcode, and the surrounding environment (NULL: no explicit binding)
* @param ?object The database connection to use (NULL: standard site connection)
* @param boolean Whether to parse so as to create something that would fit inside a semihtml tag. It means we generate HTML, with Comcode written into it where the tag could never be reverse-converted (e.g. a block).
* @param boolean Whether this is being pre-parsed, to pick up errors before row insertion.
* @param boolean Whether to treat this whole thing as being wrapped in semihtml, but apply normal security otherwise.
* @param boolean Whether we are only doing this parse to find the title structure
* @param boolean Whether to only check the Comcode. It's best to use the check_comcode function which will in turn use this parameter.
* @param ?array A list of words to highlight (NULL: none)
* @param ?MEMBER The member we are running on behalf of, with respect to how attachments are handled; we may use this members attachments that are already within this post, and our new attachments will be handed to this member (NULL: member evaluating)
* @return tempcode The tempcode generated
*/
function comcode_to_tempcode($comcode,$source_member=NULL,$as_admin=false,$wrap_pos=60,$pass_id=NULL,$connection=NULL,$semiparse_mode=false,$preparse_mode=false,$is_all_semihtml=false,$structure_sweep=false,$check_only=false,$highlight_bits=NULL,$on_behalf_of_member=NULL)
{
$matches=array();
if (preg_match('#^\{\!([A-Z\_]+)\}$#',$comcode,$matches)!=0) return do_lang_tempcode($matches[1]);
if ($semiparse_mode) $wrap_pos=100000;
$attachments=(count($_FILES)!=0);
foreach($_POST as $key=>$value)
{
if (preg_match('#^hidFileID\_#i',$key)!=0) $attachments=true;
}
if ((!$attachments || ($GLOBALS['IN_MINIKERNEL_VERSION']==1)) && (preg_match('#^[\w\d\-\_\(\) \.,:;/"\!\?]*$#'/*NB: No apostophes allowed in here, as they get changed by escape_html and can interfere then with apply_emoticons*/,$comcode)!=0) && (strpos($comcode,' ')===false) && (strpos($comcode,'://')===false))
{
if (running_script('stress_test_loader')) return make_string_tempcode(escape_html($comcode));
return make_string_tempcode(apply_emoticons(escape_html($comcode)));
}
require_code('comcode_renderer');
return _comcode_to_tempcode($comcode,$source_member,$as_admin,$wrap_pos,$pass_id,$connection,$semiparse_mode,$preparse_mode,$is_all_semihtml,$structure_sweep,$check_only,$highlight_bits,$on_behalf_of_member);
}
/**
* Strip out any Comcode from this "plain text". Useful for semantic text is wanted but where Comcode is used as "the next best thing" we have.
*
* @param string Plain-text/Comcode
* @return string Purified plain-text
*/
function strip_comcode($text)
{
if (preg_match('#^[\w\d\-\_\(\) \.,:;/"\!\?]*$$#',$text)!=0) return $text; // Optimisation
require_code('mail');
if (function_exists('comcode_to_clean_text')) // For benefit of installer, which disables mail.php
$text=comcode_to_clean_text($text);
global $VALID_COMCODE_TAGS;
foreach (array_keys($VALID_COMCODE_TAGS) as $tag)
{
if ($tag=='i')
{
$text=preg_replace('#\[/?'.$tag.'\]#','',$text);
} else
{
$text=preg_replace('#\[/?'.$tag.'[^\]]*\]#','',$text);
}
}
$text=str_replace('…','...',$text);
$text=str_replace('·','-',$text);
$text=str_replace('–','-',$text);
$text=str_replace('—','-',$text);
return $text;
}