Vergleich inc/class_parser.php - 1.8.17 - 1.8.27

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 13	Zeile 13
allow_html allow_smilies allow_mycode	allow_html allow_smilies allow_mycode
	allow_auto_url
nl2br filter_badwords me_username	nl2br filter_badwords me_username
Zeile 95	Zeile 96
* @var boolean */ public $clear_needed = false;	* @var boolean */ public $clear_needed = false;
	/** * Don't validate parser output / const VALIDATION_DISABLE = 0; /* * Validate parser output and log errors / const VALIDATION_REPORT_ONLY = 1; /* * Validate parser output, log errors, and block output on failure / const VALIDATION_REQUIRE = 2; /* * Whether to validate the parser's HTML output when `allow_html` is disabled. * Validation errors will be logged/sent/displayed according to board settings. * * @access public * @var self::VALIDATION_* */ public $output_validation_policy = self::VALIDATION_REPORT_ONLY;
/** * Parses a message with the specified options. * * @param string $message The message to be parsed.	/** * Parses a message with the specified options. * * @param string $message The message to be parsed.
* @param array $options Array of yes/no options - allow_html,filter_badwords,allow_mycode,allow_smilies,nl2br,me_username,filter_cdata.	* @param array $options Array of yes/no options
* @return string The parsed message. */ function parse_message($message, $options=array()) { global $plugins, $mybb;	* @return string The parsed message. */ function parse_message($message, $options=array()) { global $plugins, $mybb;
	$original_message = $message;
$this->clear_needed = false;	$this->clear_needed = false;
Zeile 117	Zeile 144
if(my_substr($this->base_url, my_strlen($this->base_url) -1) != "/") { $this->base_url = $this->base_url."/";	if(my_substr($this->base_url, my_strlen($this->base_url) -1) != "/") { $this->base_url = $this->base_url."/";
}	}
} // Set the options $this->options = $options;	} // Set the options $this->options = $options;

$message = $plugins->run_hooks("parse_message_start", $message); // Get rid of carriage returns for they are the workings of the devil $message = str_replace("\r", "", $message);	$message = $plugins->run_hooks("parse_message_start", $message); // Get rid of carriage returns for they are the workings of the devil $message = str_replace("\r", "", $message);

// Filter bad words if requested. if(!empty($this->options['filter_badwords'])) {	// Filter bad words if requested. if(!empty($this->options['filter_badwords'])) {
Zeile 136	Zeile 163
// Filter CDATA tags if requested (syndication.php). if(!empty($this->options['filter_cdata']))	// Filter CDATA tags if requested (syndication.php). if(!empty($this->options['filter_cdata']))
{	{
$message = $this->parse_cdata($message); } // If MyCode needs to be replaced, first filter out [code] and [php] tags.	$message = $this->parse_cdata($message); } // If MyCode needs to be replaced, first filter out [code] and [php] tags.
	$code_matches = array();
if(!empty($this->options['allow_mycode']) && $mybb->settings['allowcodemycode'] == 1) { // This code is reserved and could break codes	if(!empty($this->options['allow_mycode']) && $mybb->settings['allowcodemycode'] == 1) { // This code is reserved and could break codes
Zeile 195	Zeile 223
} // Replace MyCode if requested.	} // Replace MyCode if requested.
if(!empty($this->options['allow_mycode']))	if(!empty($this->options['allow_mycode']))
{ $message = $this->parse_mycode($message);	{ $message = $this->parse_mycode($message);
}	}
// Filter url codes, if disabled. if($mybb->settings['allowlinkmycode'] != 1) { $message = preg_replace("#\[(\/)?url{1}(.*?)\]#i", "", $message);	// Filter url codes, if disabled. if($mybb->settings['allowlinkmycode'] != 1) { $message = preg_replace("#\[(\/)?url{1}(.*?)\]#i", "", $message);
}	}
// Parse Highlights if(!empty($this->options['highlight'])) {	// Parse Highlights if(!empty($this->options['highlight'])) {
Zeile 214	Zeile 242
// Run plugin hooks $message = $plugins->run_hooks("parse_message", $message);	// Run plugin hooks $message = $plugins->run_hooks("parse_message", $message);

if(!empty($this->options['allow_mycode'])) { // Now that we're done, if we split up any code tags, parse them and glue it all back together	if(!empty($this->options['allow_mycode'])) { // Now that we're done, if we split up any code tags, parse them and glue it all back together
Zeile 253	Zeile 281
$message = $plugins->run_hooks("parse_message_end", $message);	$message = $plugins->run_hooks("parse_message_end", $message);
return $message;	if ($this->output_allowed($original_message, $message) === true) { return $message; } else { return ''; }
} /**	} /**
Zeile 367	Zeile 402
if($mybb->settings['allowfontmycode'] == 1) {	if($mybb->settings['allowfontmycode'] == 1) {
$nestable_mycode['font']['regex'] = "#\[font=([a-z0-9 ,\-_'\"]+)\](.*?)\[/font\]#si"; $nestable_mycode['font']['replacement'] = "<span style=\"font-family: $1;\" class=\"mycode_font\">$2</span>";	$callback_mycode['font']['regex'] = "#\[font=\\s(\"?)([a-z0-9 ,\-_'\"]+)\\1\\s\](.*?)\[/font\]#si"; $callback_mycode['font']['replacement'] = array($this, 'mycode_parse_font_callback');
++$nestable_count; }	++$nestable_count; }
Zeile 517	Zeile 552
{ // Ignores missing end tags $message = preg_replace_callback("#\s?\[list(=(a\|A\|i\|I\|1))?&{$i}\](.*?)(\[/list&{$i}\]\|$)(\r\n?\|\n?)#si", array($this, 'mycode_parse_list_callback'), $message, 1);	{ // Ignores missing end tags $message = preg_replace_callback("#\s?\[list(=(a\|A\|i\|I\|1))?&{$i}\](.*?)(\[/list&{$i}\]\|$)(\r\n?\|\n?)#si", array($this, 'mycode_parse_list_callback'), $message, 1);
} } $message = $this->mycode_auto_url($message); return $message;	} } if( (!isset($this->options['allow_auto_url']) \|\| $this->options['allow_auto_url'] == 1) && $mybb->settings['allowautourl'] == 1 ) { $message = $this->mycode_auto_url($message); } return $message;
} /**	} /**
Zeile 575	Zeile 616
function parse_smilies($message, $allow_html=0) { if($this->smilies_cache == 0)	function parse_smilies($message, $allow_html=0) { if($this->smilies_cache == 0)
{	{
$this->cache_smilies(); }	$this->cache_smilies(); }
Zeile 627	Zeile 668
* * @param string $message The message to be parsed. * @param array $options Array of parser options in yes/no format.	* * @param string $message The message to be parsed. * @param array $options Array of parser options in yes/no format.
* @return string The parsed message. */	* @return string The parsed message. */
function parse_badwords($message, $options=array()) { if(empty($this->options))	function parse_badwords($message, $options=array()) { if(empty($this->options))
Zeile 650	Zeile 691
$badword['replacement'] = "*****"; }	$badword['replacement'] = "*****"; }
if($badword['regex']) { $message = preg_replace('#'.$badword['badword'].'#is', $badword['replacement'], $message); } else { // Take into account the position offset for our last replacement. $badword['badword'] = str_replace('\', '([a-zA-Z0-9_\]{1})', preg_quote($badword['badword'], "#")); // Ensure we run the replacement enough times but not recursively (i.e. not while(preg_match..)) $message = preg_replace("#(^\|\W)".$badword['badword']."(?=\W\|$)#i", '\1'.$badword['replacement'], $message); } } }	if(!$badword['regex']) { $badword['badword'] = $this->generate_regex($badword['badword']); } $message = preg_replace('#'.$badword['badword'].'#is', $badword['replacement'], $message); } }
if(!empty($this->options['strip_tags']))	if(!empty($this->options['strip_tags']))
{	{
$message = strip_tags($message);	$message = strip_tags($message);
}	}
return $message;	return $message;
	} /** * Generates REGEX patterns based on user defined badword string. * * @param string $badword The word defined to replace. * @return string The regex pattern to match the word or null on error. / function generate_regex($bad_word = "") { if($bad_word == "") { return; } // Neutralize escape character, regex operators, multiple adjacent wildcards and generate pattern $ptrn = array('/\\\\/', '/([\[\^\$\.\\|\?\{\}]{1})/', '/\\++/', '/\++\/', '/\+/'); $rplc = array('\\\\\\\\','\\\\${1}', '', '', '[^\s\n]*'); $bad_word = preg_replace($ptrn, $rplc, $bad_word); // Count + and generate pattern $bad_word = explode('+', $bad_word); $trap = ""; $plus = 0; foreach($bad_word as $bad_piece) { if($bad_piece) { $trap .= $plus ? '[^\s\n]{'.$plus.'}'.$bad_piece : $bad_piece; $plus = 1; } else { $plus++; } } // Handle trailing + if($plus > 1) { $trap .= '[^\s\n]{'.($plus-1).'}'; } return '\b'.$trap.'\b';
} /**	} /**
Zeile 713	Zeile 792
function mycode_handle_size($size, $text) { global $templates;	function mycode_handle_size($size, $text) { global $templates;

$size = (int)$size; if($size < 1)	$size = (int)$size; if($size < 1)
{	{
$size = 1;	$size = 1;
}	}
if($size > 50) { $size = 50;	if($size > 50) { $size = 50;
Zeile 739	Zeile 818
* @return string The parsed text. */ function mycode_handle_size_callback($matches)	* @return string The parsed text. */ function mycode_handle_size_callback($matches)
{	{
return $this->mycode_handle_size($matches[1], $matches[2]); }	return $this->mycode_handle_size($matches[1], $matches[2]); }
Zeile 753	Zeile 832
function mycode_parse_quotes($message, $text_only=false) { global $lang, $templates, $theme, $mybb;	function mycode_parse_quotes($message, $text_only=false) { global $lang, $templates, $theme, $mybb;

// Assign pattern and replace values. $pattern = "#\[quote\](.?)\[\/quote\](\r\n?\|\n?)#si"; $pattern_callback = "#\[quote=([\"']\|"\|)(.?)(?:\\1)(.?)(?:[\"']\|")?\](.?)\[/quote\](\r\n?\|\n?)#si";	// Assign pattern and replace values. $pattern = "#\[quote\](.?)\[\/quote\](\r\n?\|\n?)#si"; $pattern_callback = "#\[quote=([\"']\|"\|)(.?)(?:\\1)(.?)(?:[\"']\|")?\](.?)\[/quote\](\r\n?\|\n?)#si";
Zeile 765	Zeile 844
} else {	} else {
$replace = "\n{$lang->quote}\n--\n$1\n--\n";	$replace = empty($this->options['signature_parse']) ? "\n{$lang->quote}\n--\n$1\n--\n" : "$1";
$replace_callback = array($this, 'mycode_parse_post_quotes_callback2');	$replace_callback = array($this, 'mycode_parse_post_quotes_callback2');
}	}
do {	do {
Zeile 824	Zeile 903
$delete_quote = true; preg_match("#pid=(?:"\|\"\|')?([0-9]+)[\"']?(?:"\|\"\|')?#i", $username, $match);	$delete_quote = true; preg_match("#pid=(?:"\|\"\|')?([0-9]+)[\"']?(?:"\|\"\|')?#i", $username, $match);
if((int)$match[1])	if(isset($match[1]) && (int)$match[1])
{ $pid = (int)$match[1]; $url = $mybb->settings['bburl']."/".get_post_link($pid)."#pid$pid";	{ $pid = (int)$match[1]; $url = $mybb->settings['bburl']."/".get_post_link($pid)."#pid$pid";
Zeile 843	Zeile 922
unset($match); preg_match("#dateline=(?:"\|\"\|')?([0-9]+)(?:"\|\"\|')?#i", $username, $match);	unset($match); preg_match("#dateline=(?:"\|\"\|')?([0-9]+)(?:"\|\"\|')?#i", $username, $match);
if((int)$match[1])	if(isset($match[1]) && (int)$match[1])
{ if($match[1] < TIME_NOW) { if($text_only)	{ if($match[1] < TIME_NOW) { if($text_only)
{	{
$postdate = my_date('normal', (int)$match[1]); } else	$postdate = my_date('normal', (int)$match[1]); } else
Zeile 863	Zeile 942
if($delete_quote) {	if($delete_quote) {
$username = my_substr($username, 0, my_strlen($username)-1);	$username = my_substr($username, 0, my_strlen($username)-1, true);
} if(!empty($this->options['allow_html']))	} if(!empty($this->options['allow_html']))
Zeile 901	Zeile 980
/** * Parses quotes with post id and/or dateline.	/** * Parses quotes with post id and/or dateline.
* * @param array $matches Matches.	* * @param array $matches Matches.
* @return string The parsed message. */ function mycode_parse_post_quotes_callback2($matches)	* @return string The parsed message. */ function mycode_parse_post_quotes_callback2($matches)
Zeile 923	Zeile 1002
if($text_only == true) {	if($text_only == true) {
return "\n{$lang->code}\n--\n{$code}\n--\n";	return empty($this->options['signature_parse']) ? "\n{$lang->code}\n--\n{$code}\n--\n" : $code;
} // Clean the string before parsing.	} // Clean the string before parsing.
Zeile 955	Zeile 1034
function mycode_parse_code_callback($matches) { return $this->mycode_parse_code($matches[1], true);	function mycode_parse_code_callback($matches) { return $this->mycode_parse_code($matches[1], true);
}	}
/** * Parses PHP code MyCode.	/** * Parses PHP code MyCode.
Zeile 971	Zeile 1050
if($text_only == true) {	if($text_only == true) {
return "\n{$lang->php_code}\n--\n$str\n--\n";	return empty($this->options['signature_parse']) ? "\n{$lang->php_code}\n--\n{$str}\n--\n" : $str;
} // Clean the string before parsing except tab spaces.	} // Clean the string before parsing except tab spaces.
Zeile 991	Zeile 1070
{ $added_open_tag = true; $str = "<?php \n".$str;	{ $added_open_tag = true; $str = "<?php \n".$str;
}	}
$added_end_tag = false; if(!preg_match("#\?>\s*$#si", $str)) {	$added_end_tag = false; if(!preg_match("#\?>\s*$#si", $str)) {
Zeile 1081	Zeile 1160
$name = my_substr($name , 0, 40).'...'.my_substr($name , -10); } $name = htmlspecialchars_uni($name);	$name = my_substr($name , 0, 40).'...'.my_substr($name , -10); } $name = htmlspecialchars_uni($name);
}	}
if(!empty($this->options['nofollow_on']))	if(!empty($this->options['nofollow_on']))
{	{
$rel = " rel=\"noopener nofollow\"";	$rel = " rel=\"noopener nofollow\"";
}	}
else { $rel = " rel=\"noopener\"";	else { $rel = " rel=\"noopener\"";
Zeile 1094	Zeile 1173
// Fix some entities in URLs $url = $this->encode_url($url);	// Fix some entities in URLs $url = $this->encode_url($url);
$name = preg_replace("#&\#([0-9]+);#si", "&#$1;", $name); // Fix & but allow unicode	$name = $this->parse_badwords(preg_replace("#&\#([0-9]+);#si", "&#$1;", $name)); // Fix & but allow unicode, filter bad words
eval("\$mycode_url = \"".$templates->get("mycode_url", 1, 0)."\";"); return $mycode_url;	eval("\$mycode_url = \"".$templates->get("mycode_url", 1, 0)."\";"); return $mycode_url;
	} /** * Parses font MyCode. * * @param array $matches Matches. * @return string The HTML <span> tag with styled font. */ function mycode_parse_font_callback($matches) { // Replace any occurrence(s) of double quotes in fonts with single quotes. // A back-fix for double-quote-containing MyBB font tags in existing // posts prior to the client-side aspect of this fix for the // browser-independent SCEditor bug of issue #4182. $fonts = str_replace('"', "'", $matches[2]); return "<span style=\"font-family: {$fonts};\" class=\"mycode_font\">{$matches[3]}</span>";
} /**	} /**
Zeile 1173	Zeile 1267
{ $alt = my_substr($alt, 0, 40).'...'.my_substr($alt, -10); }	{ $alt = my_substr($alt, 0, 40).'...'.my_substr($alt, -10); }
$alt = htmlspecialchars_uni($alt);	$alt = $this->encode_url($alt); $alt = preg_replace("#&(?!\#[0-9]+;)#si", "&", $alt); // fix & but allow unicode
$alt = $lang->sprintf($lang->posted_image, $alt); $width = $height = '';	$alt = $lang->sprintf($lang->posted_image, $alt); $width = $height = '';
Zeile 1310	Zeile 1405
{ $name = $email; }	{ $name = $email; }
if(preg_match("/^([a-zA-Z0-9-_\+\.]+?)@[a-zA-Z0-9-]+\.[a-zA-Z0-9\.-]+$/si", $email)) { $email = $email; } elseif(preg_match("/^([a-zA-Z0-9-_\+\.]+?)@[a-zA-Z0-9-]+\.[a-zA-Z0-9\.-]+\?(.*?)$/si", $email)) { $email = htmlspecialchars_uni($email); }	$email = $this->encode_url($email);
eval("\$mycode_email = \"".$templates->get("mycode_email", 1, 0)."\";"); return $mycode_email;	eval("\$mycode_email = \"".$templates->get("mycode_email", 1, 0)."\";"); return $mycode_email;
Zeile 1334	Zeile 1423
if(!isset($matches[2])) { $matches[2] = '';	if(!isset($matches[2])) { $matches[2] = '';
}	}
return $this->mycode_parse_email($matches[1], $matches[2]); }	return $this->mycode_parse_email($matches[1], $matches[2]); }
Zeile 1348	Zeile 1437
function mycode_parse_video($video, $url) { global $templates;	function mycode_parse_video($video, $url) { global $templates;

if(empty($video) \|\| empty($url)) { return "[video={$video}]{$url}[/video]";	if(empty($video) \|\| empty($url)) { return "[video={$video}]{$url}[/video]";
Zeile 1362	Zeile 1451
$parsed_url = @parse_url(urldecode($url)); if($parsed_url === false)	$parsed_url = @parse_url(urldecode($url)); if($parsed_url === false)
{	{
return "[video={$video}]{$url}[/video]";	return "[video={$video}]{$url}[/video]";
}	}
$fragments = array(); if($parsed_url['fragment'])	$fragments = array(); if($parsed_url['fragment'])
{	{
$fragments = explode("&", $parsed_url['fragment']);	$fragments = explode("&", $parsed_url['fragment']);
	} if($video == "liveleak") { // The query part can start with any alphabet, but set only 'i' to catch in index key later $parsed_url['query'] = "i".substr($parsed_url['query'], 1);
} $queries = explode("&", $parsed_url['query']);	} $queries = explode("&", $parsed_url['query']);
Zeile 1417	Zeile 1512
$id = $path[3]; // https://www.facebook.com/fds/videos/123/ } break;	$id = $path[3]; // https://www.facebook.com/fds/videos/123/ } break;
case "veoh": $id = $path[2]; // http://www.veoh.com/watch/123	case "mixer": $id = $path[1]; // https://mixer.com/streamer
break; case "liveleak": $id = $input['i']; // http://www.liveleak.com/view?i=123	break; case "liveleak": $id = $input['i']; // http://www.liveleak.com/view?i=123
Zeile 1493	Zeile 1588
return "[video={$video}]{$url}[/video]"; }	return "[video={$video}]{$url}[/video]"; }
$id = htmlspecialchars_uni($id);	$id = $this->encode_url($id);

eval("\$video_code = \"".$templates->get("video_{$video}_embed")."\";");	eval("\$video_code = \"".$templates->get("video_{$video}_embed", 1, 0)."\";");
return $video_code; }	return $video_code; }
Zeile 1547	Zeile 1642
*/ function mycode_auto_url($message) {	*/ function mycode_auto_url($message) {
$message = " ".$message;
// Links should end with slashes, numbers, characters and braces but not with dots, commas or question marks // Don't create links within existing links (handled up-front in the callback function).	// Links should end with slashes, numbers, characters and braces but not with dots, commas or question marks // Don't create links within existing links (handled up-front in the callback function).
$message = preg_replace_callback("#<a\\s[^>]>.?</a>\|([\s\[\>])(http\|https\|ftp\|news\|irc\|ircs\|irc6){1}://([^\/\"\s\<\[\.]+\.([^\/\"\s\<\[\.]+\.)[\w]+(:[0-9]+)?(/([^\"\s<\[]\|\[\]))?([\w\/\)]))#ius", array($this, 'mycode_auto_url_callback'), $message); $message = preg_replace_callback("#<a\\s[^>]>.?</a>\|([\s\[\>])(www\|ftp)\.(([^\/\"\s\<\[\.]+\.)[\w]+(:[0-9]+)?(/([^\"\s<\[]\|\[\]))?([\w\/\)]))#ius", array($this, 'mycode_auto_url_callback'), $message); $message = my_substr($message, 1);	$message = preg_replace_callback( "~ <a\\s[^>]>.?</a>\| # match and return existing links (?<=^\|[\s\[\>]) # character preceding the link (?P<prefix> (?:http\|https\|ftp\|news\|irc\|ircs\|irc6)://\| # scheme, or (?:www\|ftp)\. # common subdomain ) (?P<link> (?:[^\/\"\s\<\[\.]+\.)[\w]+ # host (?::[0-9]+)? # port (?:/(?:[^\"\s<\[&]\|\[\]\|&(?:amp\|lt\|gt);))? # path, query, fragment; exclude unencoded characters [\w\/\)] ) (?![^<>]*?>) # not followed by unopened > (within HTML tags) ~iusx", array($this, 'mycode_auto_url_callback'), $message );
return $message;	return $message;
}	}
/** * Parses URLs automatically. * * @param array $matches Matches	/** * Parses URLs automatically. * * @param array $matches Matches
* @return string The parsed message.	* @return string The parsed message.
*/	*/
function mycode_auto_url_callback($matches)	function mycode_auto_url_callback($matches=array())
{ // If we matched a preexisting link (the part of the regexes in mycode_auto_url() before the pipe symbol), // then simply return it - we don't create links within existing links. if(count($matches) == 1)	{ // If we matched a preexisting link (the part of the regexes in mycode_auto_url() before the pipe symbol), // then simply return it - we don't create links within existing links. if(count($matches) == 1)
{	{
return $matches[0]; } $external = ''; // Allow links like http://en.wikipedia.org/wiki/PHP_(disambiguation) but detect mismatching braces	return $matches[0]; } $external = ''; // Allow links like http://en.wikipedia.org/wiki/PHP_(disambiguation) but detect mismatching braces
while(my_substr($matches[3], -1) == ')')	while(my_substr($matches['link'], -1) == ')')
{	{
if(substr_count($matches[3], ')') > substr_count($matches[3], '('))	if(substr_count($matches['link'], ')') > substr_count($matches['link'], '('))
{	{
$matches[3] = my_substr($matches[3], 0, -1);	$matches['link'] = my_substr($matches['link'], 0, -1);
$external = ')'.$external; } else	$external = ')'.$external; } else
{	{
break; } // Example: ([...] http://en.wikipedia.org/Example_(disambiguation).)	break; } // Example: ([...] http://en.wikipedia.org/Example_(disambiguation).)
$last_char = my_substr($matches[3], -1);	$last_char = my_substr($matches['link'], -1);
while($last_char == '.' \|\| $last_char == ',' \|\| $last_char == '?' \|\| $last_char == '!') {	while($last_char == '.' \|\| $last_char == ',' \|\| $last_char == '?' \|\| $last_char == '!') {
$matches[3] = my_substr($matches[3], 0, -1);	$matches[4] = my_substr($matches['link'], 0, -1);
$external = $last_char.$external;	$external = $last_char.$external;
$last_char = my_substr($matches[3], -1);	$last_char = my_substr($matches['link'], -1);
} }	} }
if(in_array(strtolower($matches[2]), array('www', 'ftp'))) { $url = "{$matches[2]}.{$matches[3]}"; } else { $url = "{$matches[2]}://{$matches[3]}"; }	$url = $matches['prefix'].$matches['link'];

return $matches[1].$this->mycode_parse_url($url, $url).$external;	return $this->mycode_parse_url($url, $url).$external;
} /**	} /**
Zeile 1613	Zeile 1715
* * @param string $message The message to be parsed * @param string $type The list type	* * @param string $message The message to be parsed * @param string $type The list type
* @return string The parsed message. */	* @return string The parsed message. */
function mycode_parse_list($message, $type="") { // No list elements? That's invalid HTML if(strpos($message, '[]') === false) { $message = "[]{$message}";	function mycode_parse_list($message, $type="") { // No list elements? That's invalid HTML if(strpos($message, '[]') === false) { $message = "[]{$message}";
}	}
$message = preg_split("#[^\S\n\r]\[\\]\s*#", $message); if(isset($message[0]) && trim($message[0]) == '')	$message = preg_split("#[^\S\n\r]\[\\]\s*#", $message); if(isset($message[0]) && trim($message[0]) == '')
{	{
array_shift($message); } $message = '<li>'.implode("</li>\n<li>", $message)."</li>\n"; if($type)	array_shift($message); } $message = '<li>'.implode("</li>\n<li>", $message)."</li>\n"; if($type)
{	{
$list = "\n<ol type=\"$type\" class=\"mycode_list\">$message</ol>\n"; } else	$list = "\n<ol type=\"$type\" class=\"mycode_list\">$message</ol>\n"; } else
Zeile 1640	Zeile 1742
} $list = preg_replace("#<(ol type=\"$type\"\|ul)>\s*</li>#", "<$1>", $list); return $list;	} $list = preg_replace("#<(ol type=\"$type\"\|ul)>\s*</li>#", "<$1>", $list); return $list;
}	}
/** * Parses list MyCode. *	/** * Parses list MyCode. *
Zeile 1719	Zeile 1821
function highlight_message($message, $highlight) { if(empty($this->highlight_cache))	function highlight_message($message, $highlight) { if(empty($this->highlight_cache))
{	{
$this->highlight_cache = build_highlight_array($highlight);	$this->highlight_cache = build_highlight_array($highlight);
}	}
if(is_array($this->highlight_cache) && !empty($this->highlight_cache)) { $message = preg_replace(array_keys($this->highlight_cache), $this->highlight_cache, $message);	if(is_array($this->highlight_cache) && !empty($this->highlight_cache)) { $message = preg_replace(array_keys($this->highlight_cache), $this->highlight_cache, $message);
Zeile 1741	Zeile 1843
function text_parse_message($message, $options=array()) { global $plugins;	function text_parse_message($message, $options=array()) { global $plugins;

if(empty($this->options)) { $this->options = $options;	if(empty($this->options)) { $this->options = $options;
}	} else { foreach($options as $option_name => $option_value) { $this->options[$option_name] = $option_value; } }
// Filter bad words if requested. if(!empty($this->options['filter_badwords'])) {	// Filter bad words if requested. if(!empty($this->options['filter_badwords'])) {
Zeile 1765	Zeile 1874
"#\[img=([1-9][0-9])x([1-9][0-9])\](\r\n?\|\n?)(https?://([^<>\"']+?))\[/img\]#is", "#\[url=((?!javascript)[a-z]+?://)([^\r\n\"<]+?)\](.+?)\[/url\]#si", "#\[url=((?!javascript:)[^\r\n\"<&]+?)\](.+?)\[/url\]#si",	"#\[img=([1-9][0-9])x([1-9][0-9])\](\r\n?\|\n?)(https?://([^<>\"']+?))\[/img\]#is", "#\[url=((?!javascript)[a-z]+?://)([^\r\n\"<]+?)\](.+?)\[/url\]#si", "#\[url=((?!javascript:)[^\r\n\"<&]+?)\](.+?)\[/url\]#si",
	"#\[attachment=([0-9]+?)\]#i",
); $replace = array(	); $replace = array(
Zeile 1773	Zeile 1883
"$4", "$3 ($1$2)", "$2 ($1)",	"$4", "$3 ($1$2)", "$2 ($1)",
	"",
); $messageBefore = "";	); $messageBefore = "";
Zeile 1798	Zeile 1909
// Find all lists $message = preg_replace_callback("#(\[list(=(a\|A\|i\|I\|1))?\]\|\[/list\])#si", array($this, 'mycode_prepare_list'), $message);	// Find all lists $message = preg_replace_callback("#(\[list(=(a\|A\|i\|I\|1))?\]\|\[/list\])#si", array($this, 'mycode_prepare_list'), $message);

// Replace all lists for($i = $this->list_count; $i > 0; $i--) { // Ignores missing end tags $message = preg_replace_callback("#\s?\[list(=(a\|A\|i\|I\|1))?&{$i}\](.*?)(\[/list&{$i}\]\|$)(\r\n?\|\n?)#si", array($this, 'mycode_parse_list_callback'), $message, 1);	// Replace all lists for($i = $this->list_count; $i > 0; $i--) { // Ignores missing end tags $message = preg_replace_callback("#\s?\[list(=(a\|A\|i\|I\|1))?&{$i}\](.*?)(\[/list&{$i}\]\|$)(\r\n?\|\n?)#si", array($this, 'mycode_parse_list_callback'), $message, 1);
}	}
// Run plugin hooks $message = $plugins->run_hooks("text_parse_message", $message);	// Run plugin hooks $message = $plugins->run_hooks("text_parse_message", $message);

return $message;	return $message;
}	}
/** * Replaces certain characters with their entities in a URL. *	/** * Replaces certain characters with their entities in a URL. *
Zeile 1821	Zeile 1932
function encode_url($url) { $entities = array('$' => '%24', '$' => '%24', '^' => '%5E', '`' => '%60', '[' => '%5B', ']' => '%5D', '{' => '%7B', '}' => '%7D', '"' => '%22', '<' => '%3C', '>' => '%3E', ' ' => '%20');	function encode_url($url) { $entities = array('$' => '%24', '$' => '%24', '^' => '%5E', '`' => '%60', '[' => '%5B', ']' => '%5D', '{' => '%7B', '}' => '%7D', '"' => '%22', '<' => '%3C', '>' => '%3E', ' ' => '%20');

$url = str_replace(array_keys($entities), array_values($entities), $url);	$url = str_replace(array_keys($entities), array_values($entities), $url);

return $url;	return $url;
	} /** * Determines whether the resulting HTML syntax is acceptable for output, * according to the parser's validation policy and HTML support. * * @param string $source The original MyCode. * @param string $output The output HTML code. * @return bool / function output_allowed($source, $output) { if($this->output_validation_policy === self::VALIDATION_DISABLE \|\| !empty($this->options['allow_html'])) { return true; } else { $output_valid = $this->validate_output($source, $output); if($this->output_validation_policy === self::VALIDATION_REPORT_ONLY) { return true; } else { return $output_valid === true; } } } /* * Validate HTML syntax and pass errors to the error handler. * * @param string $source The original MyCode. * @param string $output The output HTML code. * @return bool / function validate_output($source, $output) { global $error_handler; $ignored_error_codes = array( // entities may be broken through smilie parsing; cache_smilies() method workaround doesn't cover all entities 'XML_ERR_INVALID_DEC_CHARREF' => 7, 'XML_ERR_INVALID_CHAR' => 9, 'XML_ERR_UNDECLARED_ENTITY' => 26, // unrecognized HTML entities 'XML_ERR_ATTRIBUTE_WITHOUT_VALUE' => 41, 'XML_ERR_TAG_NAME_MISMATCH' => 76, // the parser may output tags closed in different levels and siblings ); libxml_use_internal_errors(true); @libxml_disable_entity_loader(true); simplexml_load_string('<root>'.$output.'</root>', 'SimpleXMLElement', 524288 / LIBXML_PARSEHUGE */); $errors = libxml_get_errors(); libxml_use_internal_errors(false); if( $errors && array_diff( array_column($errors, 'code'), $ignored_error_codes ) ) { $data = array( 'sourceHtmlEntities' => htmlspecialchars_uni($source), 'outputHtmlEntities' => htmlspecialchars_uni($output), 'errors' => $errors, ); $error_message = "Parser output validation failed.\n"; $error_message .= var_export($data, true); $error_handler->error(E_USER_WARNING, $error_message, __FILE__, __LINE__, false); } return empty($errors);
} }	} }