Vergleich inc/class_parser.php - 1.8.16 - 1.8.30

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 13Zeile 13
	allow_html
allow_smilies
allow_mycode

	allow_html
allow_smilies
allow_mycode

 
	allow_auto_url

	nl2br
filter_badwords
me_username

	nl2br
filter_badwords
me_username

Zeile 95Zeile 96
	 * @var boolean
*/
public $clear_needed = false;

	 * @var boolean
*/
public $clear_needed = false;

 

/**
* Don't validate parser output
*/
const VALIDATION_DISABLE = 0;

/**
* Validate parser output and log errors
*/
const VALIDATION_REPORT_ONLY = 1;

/**
* Validate parser output, log errors, and block output on failure
*/
const VALIDATION_REQUIRE = 2;

/**
* Whether to validate the parser's HTML output when `allow_html` is disabled.
* Validation errors will be logged/sent/displayed according to board settings.
*
* @access public
* @var self::VALIDATION_*
*/
public $output_validation_policy = self::VALIDATION_REQUIRE;


/**
* Parses a message with the specified options.
*
* @param string $message The message to be parsed.


/**
* Parses a message with the specified options.
*
* @param string $message The message to be parsed.

	 * @param array $options Array of yes/no options - allow_html,filter_badwords,allow_mycode,allow_smilies,nl2br,me_username,filter_cdata.

	 * @param array $options Array of yes/no options

	 * @return string The parsed message.
*/
function parse_message($message, $options=array())
{
global $plugins, $mybb;


	 * @return string The parsed message.
*/
function parse_message($message, $options=array())
{
global $plugins, $mybb;


		$this->clear_needed = false;



		$original_message = $message;

$this->clear_needed = false;


// Set base URL for parsing smilies
$this->base_url = $mybb->settings['bburl'];


// Set base URL for parsing smilies
$this->base_url = $mybb->settings['bburl'];





		if($this->base_url != "")
{
if(my_substr($this->base_url, my_strlen($this->base_url) -1) != "/")

		if($this->base_url != "")
{
if(my_substr($this->base_url, my_strlen($this->base_url) -1) != "/")

Zeile 124Zeile 151
		$this->options = $options;

$message = $plugins->run_hooks("parse_message_start", $message);

		$this->options = $options;

$message = $plugins->run_hooks("parse_message_start", $message);





		// Get rid of carriage returns for they are the workings of the devil
$message = str_replace("\r", "", $message);


		// Get rid of carriage returns for they are the workings of the devil
$message = str_replace("\r", "", $message);


Zeile 141Zeile 168
		}

// If MyCode needs to be replaced, first filter out [code] and [php] tags.

		}

// If MyCode needs to be replaced, first filter out [code] and [php] tags.

 
		$code_matches = array();

		if(!empty($this->options['allow_mycode']) && $mybb->settings['allowcodemycode'] == 1)
{
// This code is reserved and could break codes

		if(!empty($this->options['allow_mycode']) && $mybb->settings['allowcodemycode'] == 1)
{
// This code is reserved and could break codes

Zeile 150Zeile 178
			foreach($code_matches as $point => $part)
{
if(isset($part[3]))

			foreach($code_matches as $point => $part)
{
if(isset($part[3]))

				{

				{

					$part[1] = "[".$part[1]."]";
$code_matches[$point][2] = substr_replace($part[0], "", strrpos($part[0], $part[3]), strlen($part[3]));
$code_matches[$point][2] = substr_replace($code_matches[$point][2], "", strpos($code_matches[$point][2], $part[1]), strlen($part[1]));

					$part[1] = "[".$part[1]."]";
$code_matches[$point][2] = substr_replace($part[0], "", strrpos($part[0], $part[3]), strlen($part[3]));
$code_matches[$point][2] = substr_replace($code_matches[$point][2], "", strpos($code_matches[$point][2], $part[1]), strlen($part[1]));

Zeile 249Zeile 277
		if($this->clear_needed)
{
$message .= '<br class="clear" />';

		if($this->clear_needed)
{
$message .= '<br class="clear" />';

		}

$message = $plugins->run_hooks("parse_message_end", $message);

return $message;
}

/**








		}

$message = $plugins->run_hooks("parse_message_end", $message);

if ($this->output_allowed($original_message, $message) === true)
{
return $message;
}
else
{
return '';
}
}

/**

	 * Converts HTML in a message to their specific entities whilst allowing unicode characters.
*
* @param string $message The message to be parsed.
* @return string The formatted message.
*/
function parse_html($message)

	 * Converts HTML in a message to their specific entities whilst allowing unicode characters.
*
* @param string $message The message to be parsed.
* @return string The formatted message.
*/
function parse_html($message)

	{

	{

		$message = preg_replace("#&(?!\#[0-9]+;)#si", "&amp;", $message); // fix & but allow unicode
$message = str_replace("<","&lt;",$message);
$message = str_replace(">","&gt;",$message);
return $message;
}

		$message = preg_replace("#&(?!\#[0-9]+;)#si", "&amp;", $message); // fix & but allow unicode
$message = str_replace("<","&lt;",$message);
$message = str_replace(">","&gt;",$message);
return $message;
}





	/**
* Generates a cache of MyCode, both standard and custom.
*

	/**
* Generates a cache of MyCode, both standard and custom.
*

Zeile 280Zeile 315
		global $cache, $lang, $mybb;
$this->mycode_cache = array();


		global $cache, $lang, $mybb;
$this->mycode_cache = array();


		$standard_mycode = $callback_mycode = $nestable_mycode = array();
$standard_count = $callback_count = $nestable_count = 0;


		$standard_mycode = $callback_mycode = $nestable_mycode = $nestable_callback_mycode = array();
$standard_count = $callback_count = $nestable_count = $nestable_callback_count = 0;


		if($mybb->settings['allowbasicmycode'] == 1)

		if($mybb->settings['allowbasicmycode'] == 1)

		{

		{

			$standard_mycode['b']['regex'] = "#\[b\](.*?)\[/b\]#si";
$standard_mycode['b']['replacement'] = "<span style=\"font-weight: bold;\" class=\"mycode_b\">$1</span>";


			$standard_mycode['b']['regex'] = "#\[b\](.*?)\[/b\]#si";
$standard_mycode['b']['replacement'] = "<span style=\"font-weight: bold;\" class=\"mycode_b\">$1</span>";


Zeile 310Zeile 345

$standard_mycode['tm']['regex'] = "#\(tm\)#i";
$standard_mycode['tm']['replacement'] = "&#153;";


$standard_mycode['tm']['regex'] = "#\(tm\)#i";
$standard_mycode['tm']['replacement'] = "&#153;";





			$standard_mycode['reg']['regex'] = "#\(r\)#i";
$standard_mycode['reg']['replacement'] = "&reg;";


			$standard_mycode['reg']['regex'] = "#\(r\)#i";
$standard_mycode['reg']['replacement'] = "&reg;";


Zeile 363Zeile 398

++$nestable_count;
++$callback_count;


++$nestable_count;
++$callback_count;

		}

if($mybb->settings['allowfontmycode'] == 1)
{
$nestable_mycode['font']['regex'] = "#\[font=([a-z0-9 ,\-_'\"]+)\](.*?)\[/font\]#si";
$nestable_mycode['font']['replacement'] = "<span style=\"font-family: $1;\" class=\"mycode_font\">$2</span>";

++$nestable_count;
}


		}










		if($mybb->settings['allowalignmycode'] == 1)

		if($mybb->settings['allowalignmycode'] == 1)

		{

		{

			$nestable_mycode['align']['regex'] = "#\[align=(left|center|right|justify)\](.*?)\[/align\]#si";
$nestable_mycode['align']['replacement'] = "<div style=\"text-align: $1;\" class=\"mycode_align\">$2</div>";

			$nestable_mycode['align']['regex'] = "#\[align=(left|center|right|justify)\](.*?)\[/align\]#si";
$nestable_mycode['align']['replacement'] = "<div style=\"text-align: $1;\" class=\"mycode_align\">$2</div>";





			++$nestable_count;

			++$nestable_count;

 
		}

if($mybb->settings['allowfontmycode'] == 1)
{
$nestable_callback_mycode['font']['regex'] = "#\[font=\\s*(\"?)([a-z0-9 ,\-_'\"]+)\\1\\s*\](.*?)\[/font\]#si";
$nestable_callback_mycode['font']['replacement'] = array($this, 'mycode_parse_font_callback');

++$nestable_callback_count;

		}

$custom_mycode = $cache->read("mycode");

		}

$custom_mycode = $cache->read("mycode");

Zeile 413Zeile 448
			$this->mycode_cache['nestable'][] = array('find' => $code['regex'], 'replacement' => $code['replacement']);
}


			$this->mycode_cache['nestable'][] = array('find' => $code['regex'], 'replacement' => $code['replacement']);
}


		// Assign the nestable MyCode to the cache.

		// Assign the callback MyCode to the cache.

		foreach($callback_mycode as $code)
{
$this->mycode_cache['callback'][] = array('find' => $code['regex'], 'replacement' => $code['replacement']);

		foreach($callback_mycode as $code)
{
$this->mycode_cache['callback'][] = array('find' => $code['regex'], 'replacement' => $code['replacement']);

		}







		}

// Assign the nestable callback MyCode to the cache.
foreach($nestable_callback_mycode as $code)
{
$this->mycode_cache['nestable_callback'][] = array('find' => $code['regex'], 'replacement' => $code['replacement']);
}


$this->mycode_cache['standard_count'] = $standard_count;
$this->mycode_cache['callback_count'] = $callback_count;
$this->mycode_cache['nestable_count'] = $nestable_count;


$this->mycode_cache['standard_count'] = $standard_count;
$this->mycode_cache['callback_count'] = $callback_count;
$this->mycode_cache['nestable_count'] = $nestable_count;

 
		$this->mycode_cache['nestable_callback_count'] = $nestable_callback_count;

	}

/**

	}

/**

Zeile 434Zeile 476
	function parse_mycode($message, $options=array())
{
global $lang, $mybb;

	function parse_mycode($message, $options=array())
{
global $lang, $mybb;





		if(empty($this->options))
{
$this->options = $options;

		if(empty($this->options))
{
$this->options = $options;

Zeile 444Zeile 486
		if($this->mycode_cache == 0)
{
$this->cache_mycode();

		if($this->mycode_cache == 0)
{
$this->cache_mycode();

		}

		}


// Parse quotes first
$message = $this->mycode_parse_quotes($message);


// Parse quotes first
$message = $this->mycode_parse_quotes($message);

Zeile 499Zeile 541
				while(preg_match($mycode['find'], $message))
{
$message = preg_replace($mycode['find'], $mycode['replacement'], $message);

				while(preg_match($mycode['find'], $message))
{
$message = preg_replace($mycode['find'], $mycode['replacement'], $message);

 
				}
}
}

// Replace the nestable callback mycodes
if($this->mycode_cache['nestable_callback_count'] > 0)
{
foreach($this->mycode_cache['nestable_callback'] as $replace)
{
while(preg_match($replace['find'], $message))
{
$message_org = $message;
$message = preg_replace_callback($replace['find'], $replace['replacement'], $message);
if ($message_org == $message)
{
break;
}

				}
}
}

				}
}
}

Zeile 517Zeile 576
			{
// Ignores missing end tags
$message = preg_replace_callback("#\s?\[list(=(a|A|i|I|1))?&{$i}\](.*?)(\[/list&{$i}\]|$)(\r\n?|\n?)#si", array($this, 'mycode_parse_list_callback'), $message, 1);

			{
// Ignores missing end tags
$message = preg_replace_callback("#\s?\[list(=(a|A|i|I|1))?&{$i}\](.*?)(\[/list&{$i}\]|$)(\r\n?|\n?)#si", array($this, 'mycode_parse_list_callback'), $message, 1);

			}
}

$message = $this->mycode_auto_url($message);

return $message;
}







			}
}

if(
(!isset($this->options['allow_auto_url']) || $this->options['allow_auto_url'] == 1) &&
$mybb->settings['allowautourl'] == 1
)
{
$message = $this->mycode_auto_url($message);
}

return $message;
}


/**
* Generates a cache of smilies


/**
* Generates a cache of smilies

Zeile 534Zeile 599
	{
global $cache, $mybb, $theme, $templates;
$this->smilies_cache = array();

	{
global $cache, $mybb, $theme, $templates;
$this->smilies_cache = array();





		$smilies = $cache->read("smilies");
if(is_array($smilies))
{
$extra_class = $onclick = '';
foreach($smilies as $sid => $smilie)
{

		$smilies = $cache->read("smilies");
if(is_array($smilies))
{
$extra_class = $onclick = '';
foreach($smilies as $sid => $smilie)
{

 
				if(isset($theme['imgdir']))
{
$imgdir = $theme['imgdir'];
}
else
{
$imgdir = '';
}


				$smilie['find'] = explode("\n", $smilie['find']);

				$smilie['find'] = explode("\n", $smilie['find']);

				$smilie['image'] = str_replace("{theme}", $theme['imgdir'], $smilie['image']);

				$smilie['image'] = str_replace("{theme}", $imgdir, $smilie['image']);

				$smilie['image'] = htmlspecialchars_uni($mybb->get_asset_url($smilie['image']));
$smilie['name'] = htmlspecialchars_uni($smilie['name']);


				$smilie['image'] = htmlspecialchars_uni($mybb->get_asset_url($smilie['image']));
$smilie['name'] = htmlspecialchars_uni($smilie['name']);


Zeile 577Zeile 651
		if($this->smilies_cache == 0)
{
$this->cache_smilies();

		if($this->smilies_cache == 0)
{
$this->cache_smilies();

		}

		}


// No smilies?
if(!count($this->smilies_cache))


// No smilies?
if(!count($this->smilies_cache))

Zeile 630Zeile 704
	 * @return string The parsed message.
*/
function parse_badwords($message, $options=array())

	 * @return string The parsed message.
*/
function parse_badwords($message, $options=array())

	{

	{

		if(empty($this->options))

		if(empty($this->options))

		{

		{

			$this->options = $options;

			$this->options = $options;

		}


		}


		if($this->badwords_cache == 0)
{
$this->cache_badwords();

		if($this->badwords_cache == 0)
{
$this->cache_badwords();

Zeile 646Zeile 720
			foreach($this->badwords_cache as $bid => $badword)
{
if(!$badword['replacement'])

			foreach($this->badwords_cache as $bid => $badword)
{
if(!$badword['replacement'])

				{

				{

					$badword['replacement'] = "*****";

					$badword['replacement'] = "*****";

				}

if($badword['regex'])
{
$message = preg_replace('#'.$badword['badword'].'#is', $badword['replacement'], $message);
}
else

				}

if(!$badword['regex'])





				{

				{

					// Take into account the position offset for our last replacement.
$badword['badword'] = str_replace('\*', '([a-zA-Z0-9_\*]{1})', preg_quote($badword['badword'], "#"));

// Ensure we run the replacement enough times but not recursively (i.e. not while(preg_match..))
$message = preg_replace("#(^|\W)".$badword['badword']."(?=\W|$)#i", '\1'.$badword['replacement'], $message);

					$badword['badword'] = $this->generate_regex($badword['badword']);





				}

				}

			}
}




$message = preg_replace('#'.$badword['badword'].'#is', $badword['replacement'], $message);
}
}

		if(!empty($this->options['strip_tags']))

		if(!empty($this->options['strip_tags']))

		{

		{

			$message = strip_tags($message);

			$message = strip_tags($message);

		}

		}

		return $message;

		return $message;

 
	}

/**
* Generates REGEX patterns based on user defined badword string.
*
* @param string $badword The word defined to replace.
* @return string The regex pattern to match the word or null on error.
*/
function generate_regex($bad_word = "")
{
if($bad_word == "")
{
return;
}

// Neutralize escape character, regex operators, multiple adjacent wildcards and generate pattern
$ptrn = array('/\\\\/', '/([\[\^\$\.\|\?\(\)\{\}]{1})/', '/\*\++/', '/\++\*/', '/\*+/');
$rplc = array('\\\\\\\\','\\\\${1}', '*', '*', '[^\s\n]*');
$bad_word = preg_replace($ptrn, $rplc, $bad_word);

// Count + and generate pattern
$bad_word = explode('+', $bad_word);
$trap = "";
$plus = 0;
foreach($bad_word as $bad_piece)
{
if($bad_piece)
{
$trap .= $plus ? '[^\s\n]{'.$plus.'}'.$bad_piece : $bad_piece;
$plus = 1;
}
else
{
$plus++;
}
}

// Handle trailing +
if($plus > 1)
{
$trap .= '[^\s\n]{'.($plus-1).'}';
}

return '\b'.$trap.'\b';

	}

/**

	}

/**

Zeile 715Zeile 827
		global $templates;

$size = (int)$size;

		global $templates;

$size = (int)$size;





		if($size < 1)
{
$size = 1;

		if($size < 1)
{
$size = 1;

		}

		}


if($size > 50)
{
$size = 50;
}


if($size > 50)
{
$size = 50;
}





		$text = str_replace("\'", "'", $text);

eval("\$mycode_size = \"".$templates->get("mycode_size_int", 1, 0)."\";");

		$text = str_replace("\'", "'", $text);

eval("\$mycode_size = \"".$templates->get("mycode_size_int", 1, 0)."\";");

Zeile 741Zeile 853
	function mycode_handle_size_callback($matches)
{
return $this->mycode_handle_size($matches[1], $matches[2]);

	function mycode_handle_size_callback($matches)
{
return $this->mycode_handle_size($matches[1], $matches[2]);

	}

	}


/**
* Parses quote MyCode.


/**
* Parses quote MyCode.

Zeile 753Zeile 865
	function mycode_parse_quotes($message, $text_only=false)
{
global $lang, $templates, $theme, $mybb;

	function mycode_parse_quotes($message, $text_only=false)
{
global $lang, $templates, $theme, $mybb;





		// Assign pattern and replace values.
$pattern = "#\[quote\](.*?)\[\/quote\](\r\n?|\n?)#si";
$pattern_callback = "#\[quote=([\"']|&quot;|)(.*?)(?:\\1)(.*?)(?:[\"']|&quot;)?\](.*?)\[/quote\](\r\n?|\n?)#si";

if($text_only == false)

		// Assign pattern and replace values.
$pattern = "#\[quote\](.*?)\[\/quote\](\r\n?|\n?)#si";
$pattern_callback = "#\[quote=([\"']|&quot;|)(.*?)(?:\\1)(.*?)(?:[\"']|&quot;)?\](.*?)\[/quote\](\r\n?|\n?)#si";

if($text_only == false)

		{

		{

			$replace = "<blockquote class=\"mycode_quote\"><cite>$lang->quote</cite>$1</blockquote>\n";
$replace_callback = array($this, 'mycode_parse_post_quotes_callback1');

			$replace = "<blockquote class=\"mycode_quote\"><cite>$lang->quote</cite>$1</blockquote>\n";
$replace_callback = array($this, 'mycode_parse_post_quotes_callback1');

		}

		}

		else
{

		else
{

			$replace = "\n{$lang->quote}\n--\n$1\n--\n";

			$replace = empty($this->options['signature_parse']) ? "\n{$lang->quote}\n--\n$1\n--\n" : "$1";

			$replace_callback = array($this, 'mycode_parse_post_quotes_callback2');

			$replace_callback = array($this, 'mycode_parse_post_quotes_callback2');

		}


		}


		do
{
// preg_replace has erased the message? Restore it...

		do
{
// preg_replace has erased the message? Restore it...

Zeile 781Zeile 893
				break;
}
} while($count || $count_callback);

				break;
}
} while($count || $count_callback);





		if($text_only == false)
{
$find = array(

		if($text_only == false)
{
$find = array(

Zeile 794Zeile 906
				"</blockquote>"
);
$message = preg_replace($find, $replace, $message);

				"</blockquote>"
);
$message = preg_replace($find, $replace, $message);

		}

		}

		return $message;
}


		return $message;
}


Zeile 824Zeile 936
		$delete_quote = true;

preg_match("#pid=(?:&quot;|\"|')?([0-9]+)[\"']?(?:&quot;|\"|')?#i", $username, $match);

		$delete_quote = true;

preg_match("#pid=(?:&quot;|\"|')?([0-9]+)[\"']?(?:&quot;|\"|')?#i", $username, $match);

		if((int)$match[1])

		if(isset($match[1]) && (int)$match[1])

		{
$pid = (int)$match[1];
$url = $mybb->settings['bburl']."/".get_post_link($pid)."#pid$pid";

		{
$pid = (int)$match[1];
$url = $mybb->settings['bburl']."/".get_post_link($pid)."#pid$pid";

Zeile 843Zeile 955

unset($match);
preg_match("#dateline=(?:&quot;|\"|')?([0-9]+)(?:&quot;|\"|')?#i", $username, $match);


unset($match);
preg_match("#dateline=(?:&quot;|\"|')?([0-9]+)(?:&quot;|\"|')?#i", $username, $match);

		if((int)$match[1])

		if(isset($match[1]) && (int)$match[1])

		{
if($match[1] < TIME_NOW)
{
if($text_only)

		{
if($match[1] < TIME_NOW)
{
if($text_only)

				{

				{

					$postdate = my_date('normal', (int)$match[1]);
}
else

					$postdate = my_date('normal', (int)$match[1]);
}
else

Zeile 863Zeile 975

if($delete_quote)
{


if($delete_quote)
{

			$username = my_substr($username, 0, my_strlen($username)-1);

			$username = my_substr($username, 0, my_strlen($username)-1, true);

		}

if(!empty($this->options['allow_html']))

		}

if(!empty($this->options['allow_html']))

Zeile 901Zeile 1013

/**
* Parses quotes with post id and/or dateline.


/**
* Parses quotes with post id and/or dateline.

	*

	*

	* @param array $matches Matches.
* @return string The parsed message.
*/

	* @param array $matches Matches.
* @return string The parsed message.
*/

Zeile 923Zeile 1035

if($text_only == true)
{


if($text_only == true)
{

			return "\n{$lang->code}\n--\n{$code}\n--\n";

			return empty($this->options['signature_parse']) ? "\n{$lang->code}\n--\n{$code}\n--\n" : $code;

		}

// Clean the string before parsing.

		}

// Clean the string before parsing.

Zeile 955Zeile 1067
	function mycode_parse_code_callback($matches)
{
return $this->mycode_parse_code($matches[1], true);

	function mycode_parse_code_callback($matches)
{
return $this->mycode_parse_code($matches[1], true);

	}


	}


	/**
* Parses PHP code MyCode.
*

	/**
* Parses PHP code MyCode.
*

Zeile 971Zeile 1083

if($text_only == true)
{


if($text_only == true)
{

			return "\n{$lang->php_code}\n--\n$str\n--\n";

			return empty($this->options['signature_parse']) ? "\n{$lang->php_code}\n--\n{$str}\n--\n" : $str;

		}

// Clean the string before parsing except tab spaces.

		}

// Clean the string before parsing except tab spaces.

Zeile 1028Zeile 1140
		$code = preg_replace("# *$#", "", $code);

if($bare_return)

		$code = preg_replace("# *$#", "", $code);

if($bare_return)

		{

		{

			return $code;
}

			return $code;
}





		// Send back the code all nice and pretty
eval("\$mycode_php = \"".$templates->get("mycode_php", 1, 0)."\";");
return $mycode_php;

		// Send back the code all nice and pretty
eval("\$mycode_php = \"".$templates->get("mycode_php", 1, 0)."\";");
return $mycode_php;

Zeile 1046Zeile 1158
	function mycode_parse_php_callback($matches)
{
return $this->mycode_parse_php($matches[1], false, true);

	function mycode_parse_php_callback($matches)
{
return $this->mycode_parse_php($matches[1], false, true);

	}

	}


/**
* Parses URL MyCode.


/**
* Parses URL MyCode.

Zeile 1081Zeile 1193
				$name = my_substr($name , 0, 40).'...'.my_substr($name , -10);
}
$name = htmlspecialchars_uni($name);

				$name = my_substr($name , 0, 40).'...'.my_substr($name , -10);
}
$name = htmlspecialchars_uni($name);

		}

		}


if(!empty($this->options['nofollow_on']))


if(!empty($this->options['nofollow_on']))

		{

		{

			$rel = " rel=\"noopener nofollow\"";

			$rel = " rel=\"noopener nofollow\"";

		}

		}

		else
{
$rel = " rel=\"noopener\"";

		else
{
$rel = " rel=\"noopener\"";

Zeile 1094Zeile 1206

// Fix some entities in URLs
$url = $this->encode_url($url);


// Fix some entities in URLs
$url = $this->encode_url($url);



$name = preg_replace("#&amp;\#([0-9]+);#si", "&#$1;", $name); // Fix & but allow unicode


		$name = $this->parse_badwords(preg_replace("#&amp;\#([0-9]+);#si", "&#$1;", $name)); // Fix & but allow unicode, filter bad words




		eval("\$mycode_url = \"".$templates->get("mycode_url", 1, 0)."\";");
return $mycode_url;

		eval("\$mycode_url = \"".$templates->get("mycode_url", 1, 0)."\";");
return $mycode_url;

 
	}

/**
* Parses font MyCode.
*
* @param array $matches Matches.
* @return string The HTML <span> tag with styled font.
*/
function mycode_parse_font_callback($matches)
{
// Replace any occurrence(s) of double quotes in fonts with single quotes.
// A back-fix for double-quote-containing MyBB font tags in existing
// posts prior to the client-side aspect of this fix for the
// browser-independent SCEditor bug of issue #4182.
$fonts = str_replace('"', "'", $matches[2]);

return "<span style=\"font-family: {$fonts};\" class=\"mycode_font\">{$matches[3]}</span>";

	}

/**

	}

/**

Zeile 1173Zeile 1300
		{
$alt = my_substr($alt, 0, 40).'...'.my_substr($alt, -10);
}

		{
$alt = my_substr($alt, 0, 40).'...'.my_substr($alt, -10);
}

		$alt = htmlspecialchars_uni($alt);


		$alt = $this->encode_url($alt);
$alt = preg_replace("#&(?!\#[0-9]+;)#si", "&amp;", $alt); // fix & but allow unicode


$alt = $lang->sprintf($lang->posted_image, $alt);
$width = $height = '';


$alt = $lang->sprintf($lang->posted_image, $alt);
$width = $height = '';

Zeile 1310Zeile 1438
		{
$name = $email;
}

		{
$name = $email;
}

		if(preg_match("/^([a-zA-Z0-9-_\+\.]+?)@[a-zA-Z0-9-]+\.[a-zA-Z0-9\.-]+$/si", $email))
{
$email = $email;
}
elseif(preg_match("/^([a-zA-Z0-9-_\+\.]+?)@[a-zA-Z0-9-]+\.[a-zA-Z0-9\.-]+\?(.*?)$/si", $email))
{
$email = htmlspecialchars_uni($email);
}


$email = $this->encode_url($email);








eval("\$mycode_email = \"".$templates->get("mycode_email", 1, 0)."\";");
return $mycode_email;


eval("\$mycode_email = \"".$templates->get("mycode_email", 1, 0)."\";");
return $mycode_email;

Zeile 1334Zeile 1456
		if(!isset($matches[2]))
{
$matches[2] = '';

		if(!isset($matches[2]))
{
$matches[2] = '';

		}

		}

		return $this->mycode_parse_email($matches[1], $matches[2]);
}


		return $this->mycode_parse_email($matches[1], $matches[2]);
}


Zeile 1348Zeile 1470
	function mycode_parse_video($video, $url)
{
global $templates;

	function mycode_parse_video($video, $url)
{
global $templates;





		if(empty($video) || empty($url))
{
return "[video={$video}]{$url}[/video]";

		if(empty($video) || empty($url))
{
return "[video={$video}]{$url}[/video]";

Zeile 1362Zeile 1484

$parsed_url = @parse_url(urldecode($url));
if($parsed_url === false)


$parsed_url = @parse_url(urldecode($url));
if($parsed_url === false)

		{

		{

			return "[video={$video}]{$url}[/video]";

			return "[video={$video}]{$url}[/video]";

		}


		}


		$fragments = array();
if($parsed_url['fragment'])

		$fragments = array();
if($parsed_url['fragment'])

		{

		{

			$fragments = explode("&", $parsed_url['fragment']);

			$fragments = explode("&", $parsed_url['fragment']);

 
		}

if($video == "liveleak")
{
// The query part can start with any alphabet, but set only 'i' to catch in index key later
$parsed_url['query'] = "i".substr($parsed_url['query'], 1);

		}

$queries = explode("&", $parsed_url['query']);

		}

$queries = explode("&", $parsed_url['query']);

Zeile 1417Zeile 1545
					$id = $path[3]; // https://www.facebook.com/fds/videos/123/
}
break;

					$id = $path[3]; // https://www.facebook.com/fds/videos/123/
}
break;

			case "veoh":
$id = $path[2]; // http://www.veoh.com/watch/123

			case "mixer":
$id = $path[1]; // https://mixer.com/streamer

				break;
case "liveleak":
$id = $input['i']; // http://www.liveleak.com/view?i=123

				break;
case "liveleak":
$id = $input['i']; // http://www.liveleak.com/view?i=123

Zeile 1493Zeile 1621
			return "[video={$video}]{$url}[/video]";
}


			return "[video={$video}]{$url}[/video]";
}


		$id = htmlspecialchars_uni($id);

		$id = $this->encode_url($id);





		eval("\$video_code = \"".$templates->get("video_{$video}_embed")."\";");

		eval("\$video_code = \"".$templates->get("video_{$video}_embed", 1, 0)."\";");

		return $video_code;
}


		return $video_code;
}


Zeile 1547Zeile 1675
	*/
function mycode_auto_url($message)
{

	*/
function mycode_auto_url($message)
{

		$message = " ".$message;


 
		// Links should end with slashes, numbers, characters and braces but not with dots, commas or question marks
// Don't create links within existing links (handled up-front in the callback function).

		// Links should end with slashes, numbers, characters and braces but not with dots, commas or question marks
// Don't create links within existing links (handled up-front in the callback function).

		$message = preg_replace_callback("#<a\\s[^>]*>.*?</a>|([\s\(\)\[\>])(http|https|ftp|news|irc|ircs|irc6){1}://([^\/\"\s\<\[\.]+\.([^\/\"\s\<\[\.]+\.)*[\w]+(:[0-9]+)?(/([^\"\s<\[]|\[\])*)?([\w\/\)]))#ius", array($this, 'mycode_auto_url_callback'), $message);
$message = preg_replace_callback("#<a\\s[^>]*>.*?</a>|([\s\(\)\[\>])(www|ftp)\.(([^\/\"\s\<\[\.]+\.)*[\w]+(:[0-9]+)?(/([^\"\s<\[]|\[\])*)?([\w\/\)]))#ius", array($this, 'mycode_auto_url_callback'), $message);
$message = my_substr($message, 1);

















		$message = preg_replace_callback(
"~
<a\\s[^>]*>.*?</a>| # match and return existing links
(?<=^|[\s\(\)\[\>]) # character preceding the link
(?P<prefix>
(?:http|https|ftp|news|irc|ircs|irc6)://| # scheme, or
(?:www|ftp)\. # common subdomain
)
(?P<link>
(?:[^\/\"\s\<\[\.]+\.)*[\w]+ # host
(?::[0-9]+)? # port
(?:/(?:[^\"\s<\[&]|\[\]|&(?:amp|lt|gt);)*)? # path, query, fragment; exclude unencoded characters
[\w\/\)]
)
(?![^<>]*?>) # not followed by unopened > (within HTML tags)
~iusx",
array($this, 'mycode_auto_url_callback'),
$message
);


return $message;


return $message;

	}

	}


/**
* Parses URLs automatically.
*
* @param array $matches Matches


/**
* Parses URLs automatically.
*
* @param array $matches Matches

	* @return string The parsed message.

	* @return string The parsed message.

	*/

	*/

	function mycode_auto_url_callback($matches)

	function mycode_auto_url_callback($matches=array())

	{
// If we matched a preexisting link (the part of the regexes in mycode_auto_url() before the pipe symbol),
// then simply return it - we don't create links within existing links.
if(count($matches) == 1)

	{
// If we matched a preexisting link (the part of the regexes in mycode_auto_url() before the pipe symbol),
// then simply return it - we don't create links within existing links.
if(count($matches) == 1)

		{

		{

			return $matches[0];
}

$external = '';
// Allow links like http://en.wikipedia.org/wiki/PHP_(disambiguation) but detect mismatching braces

			return $matches[0];
}

$external = '';
// Allow links like http://en.wikipedia.org/wiki/PHP_(disambiguation) but detect mismatching braces

		while(my_substr($matches[3], -1) == ')')

		while(my_substr($matches['link'], -1) == ')')

		{

		{

			if(substr_count($matches[3], ')') > substr_count($matches[3], '('))

			if(substr_count($matches['link'], ')') > substr_count($matches['link'], '('))

			{

			{

				$matches[3] = my_substr($matches[3], 0, -1);

				$matches['link'] = my_substr($matches['link'], 0, -1);

				$external = ')'.$external;
}
else

				$external = ')'.$external;
}
else

			{

			{

				break;
}

// Example: ([...] http://en.wikipedia.org/Example_(disambiguation).)

				break;
}

// Example: ([...] http://en.wikipedia.org/Example_(disambiguation).)

			$last_char = my_substr($matches[3], -1);

			$last_char = my_substr($matches['link'], -1);

			while($last_char == '.' || $last_char == ',' || $last_char == '?' || $last_char == '!')
{

			while($last_char == '.' || $last_char == ',' || $last_char == '?' || $last_char == '!')
{

				$matches[3] = my_substr($matches[3], 0, -1);

				$matches[4] = my_substr($matches['link'], 0, -1);

				$external = $last_char.$external;

				$external = $last_char.$external;

				$last_char = my_substr($matches[3], -1);

				$last_char = my_substr($matches['link'], -1);

			}
}

			}
}

		if(in_array(strtolower($matches[2]), array('www', 'ftp')))
{
$url = "{$matches[2]}.{$matches[3]}";
}
else
{
$url = "{$matches[2]}://{$matches[3]}";
}

		$url = $matches['prefix'].$matches['link'];












		return $matches[1].$this->mycode_parse_url($url, $url).$external;

		return $this->mycode_parse_url($url, $url).$external;

	}

/**

	}

/**

Zeile 1613Zeile 1748
	*
* @param string $message The message to be parsed
* @param string $type The list type

	*
* @param string $message The message to be parsed
* @param string $type The list type

	* @return string The parsed message.
*/

	* @return string The parsed message.
*/

	function mycode_parse_list($message, $type="")
{
// No list elements? That's invalid HTML
if(strpos($message, '[*]') === false)
{
$message = "[*]{$message}";

	function mycode_parse_list($message, $type="")
{
// No list elements? That's invalid HTML
if(strpos($message, '[*]') === false)
{
$message = "[*]{$message}";

		}

		}


$message = preg_split("#[^\S\n\r]*\[\*\]\s*#", $message);
if(isset($message[0]) && trim($message[0]) == '')


$message = preg_split("#[^\S\n\r]*\[\*\]\s*#", $message);
if(isset($message[0]) && trim($message[0]) == '')

		{

		{

			array_shift($message);
}
$message = '<li>'.implode("</li>\n<li>", $message)."</li>\n";

if($type)

			array_shift($message);
}
$message = '<li>'.implode("</li>\n<li>", $message)."</li>\n";

if($type)

		{

		{

			$list = "\n<ol type=\"$type\" class=\"mycode_list\">$message</ol>\n";
}
else

			$list = "\n<ol type=\"$type\" class=\"mycode_list\">$message</ol>\n";
}
else

Zeile 1640Zeile 1775
		}
$list = preg_replace("#<(ol type=\"$type\"|ul)>\s*</li>#", "<$1>", $list);
return $list;

		}
$list = preg_replace("#<(ol type=\"$type\"|ul)>\s*</li>#", "<$1>", $list);
return $list;

	}


	}


	/**
* Parses list MyCode.
*

	/**
* Parses list MyCode.
*

Zeile 1719Zeile 1854
	function highlight_message($message, $highlight)
{
if(empty($this->highlight_cache))

	function highlight_message($message, $highlight)
{
if(empty($this->highlight_cache))

		{

		{

			$this->highlight_cache = build_highlight_array($highlight);

			$this->highlight_cache = build_highlight_array($highlight);

		}


		}


		if(is_array($this->highlight_cache) && !empty($this->highlight_cache))
{
$message = preg_replace(array_keys($this->highlight_cache), $this->highlight_cache, $message);

		if(is_array($this->highlight_cache) && !empty($this->highlight_cache))
{
$message = preg_replace(array_keys($this->highlight_cache), $this->highlight_cache, $message);

Zeile 1741Zeile 1876
	function text_parse_message($message, $options=array())
{
global $plugins;

	function text_parse_message($message, $options=array())
{
global $plugins;





		if(empty($this->options))
{
$this->options = $options;

		if(empty($this->options))
{
$this->options = $options;

		}









		}
else
{
foreach($options as $option_name => $option_value)
{
$this->options[$option_name] = $option_value;
}
}


		// Filter bad words if requested.
if(!empty($this->options['filter_badwords']))
{

		// Filter bad words if requested.
if(!empty($this->options['filter_badwords']))
{

Zeile 1765Zeile 1907
			"#\[img=([1-9][0-9]*)x([1-9][0-9]*)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is",
"#\[url=((?!javascript)[a-z]+?://)([^\r\n\"<]+?)\](.+?)\[/url\]#si",
"#\[url=((?!javascript:)[^\r\n\"<&\(\)]+?)\](.+?)\[/url\]#si",

			"#\[img=([1-9][0-9]*)x([1-9][0-9]*)\](\r\n?|\n?)(https?://([^<>\"']+?))\[/img\]#is",
"#\[url=((?!javascript)[a-z]+?://)([^\r\n\"<]+?)\](.+?)\[/url\]#si",
"#\[url=((?!javascript:)[^\r\n\"<&\(\)]+?)\](.+?)\[/url\]#si",

 
			"#\[attachment=([0-9]+?)\]#i",

		);

$replace = array(

		);

$replace = array(

Zeile 1773Zeile 1916
			"$4",
"$3 ($1$2)",
"$2 ($1)",

			"$4",
"$3 ($1$2)",
"$2 ($1)",

 
			"",

		);

$messageBefore = "";

		);

$messageBefore = "";

Zeile 1798Zeile 1942

// Find all lists
$message = preg_replace_callback("#(\[list(=(a|A|i|I|1))?\]|\[/list\])#si", array($this, 'mycode_prepare_list'), $message);


// Find all lists
$message = preg_replace_callback("#(\[list(=(a|A|i|I|1))?\]|\[/list\])#si", array($this, 'mycode_prepare_list'), $message);





		// Replace all lists
for($i = $this->list_count; $i > 0; $i--)
{
// Ignores missing end tags
$message = preg_replace_callback("#\s?\[list(=(a|A|i|I|1))?&{$i}\](.*?)(\[/list&{$i}\]|$)(\r\n?|\n?)#si", array($this, 'mycode_parse_list_callback'), $message, 1);

		// Replace all lists
for($i = $this->list_count; $i > 0; $i--)
{
// Ignores missing end tags
$message = preg_replace_callback("#\s?\[list(=(a|A|i|I|1))?&{$i}\](.*?)(\[/list&{$i}\]|$)(\r\n?|\n?)#si", array($this, 'mycode_parse_list_callback'), $message, 1);

		}


		}


		// Run plugin hooks
$message = $plugins->run_hooks("text_parse_message", $message);

		// Run plugin hooks
$message = $plugins->run_hooks("text_parse_message", $message);





		return $message;

		return $message;

	}


	}


	/**
* Replaces certain characters with their entities in a URL.
*

	/**
* Replaces certain characters with their entities in a URL.
*

Zeile 1821Zeile 1965
	function encode_url($url)
{
$entities = array('$' => '%24', '&#36;' => '%24', '^' => '%5E', '`' => '%60', '[' => '%5B', ']' => '%5D', '{' => '%7B', '}' => '%7D', '"' => '%22', '<' => '%3C', '>' => '%3E', ' ' => '%20');

	function encode_url($url)
{
$entities = array('$' => '%24', '&#36;' => '%24', '^' => '%5E', '`' => '%60', '[' => '%5B', ']' => '%5D', '{' => '%7B', '}' => '%7D', '"' => '%22', '<' => '%3C', '>' => '%3E', ' ' => '%20');





		$url = str_replace(array_keys($entities), array_values($entities), $url);

		$url = str_replace(array_keys($entities), array_values($entities), $url);





		return $url;

		return $url;

 
	}

/**
* Determines whether the resulting HTML syntax is acceptable for output,
* according to the parser's validation policy and HTML support.
*
* @param string $source The original MyCode.
* @param string $output The output HTML code.
* @return bool
*/
function output_allowed($source, $output)
{
if($this->output_validation_policy === self::VALIDATION_DISABLE || !empty($this->options['allow_html']))
{
return true;
}
else
{
$output_valid = $this->validate_output($source, $output);

if($this->output_validation_policy === self::VALIDATION_REPORT_ONLY)
{
return true;
}
else
{
return $output_valid === true;
}
}
}

/**
* Validate HTML syntax and pass errors to the error handler.
*
* @param string $source The original MyCode.
* @param string $output The output HTML code.
* @return bool
*/
function validate_output($source, $output)
{
global $error_handler;

$ignored_error_codes = array(
// entities may be broken through smilie parsing; cache_smilies() method workaround doesn't cover all entities
'XML_ERR_INVALID_DEC_CHARREF' => 7,
'XML_ERR_INVALID_CHAR' => 9,

'XML_ERR_UNDECLARED_ENTITY' => 26, // unrecognized HTML entities
'XML_ERR_ATTRIBUTE_WITHOUT_VALUE' => 41,
'XML_ERR_TAG_NAME_MISMATCH' => 76, // the parser may output tags closed in different levels and siblings
);

libxml_use_internal_errors(true);
@libxml_disable_entity_loader(true);

simplexml_load_string('<root>'.$output.'</root>', 'SimpleXMLElement', 524288 /* LIBXML_PARSEHUGE */);

$errors = libxml_get_errors();

libxml_use_internal_errors(false);

if(
$errors &&
array_diff(
array_column($errors, 'code'),
$ignored_error_codes
)
)
{
$data = array(
'sourceHtmlEntities' => htmlspecialchars_uni($source),
'outputHtmlEntities' => htmlspecialchars_uni($output),
'errors' => $errors,
);
$error_message = "Parser output validation failed.\n";
$error_message .= var_export($data, true);

$error_handler->error(E_USER_WARNING, $error_message, __FILE__, __LINE__, false);

return false;
} else {
return true;
}

	}
}

	}
}