Invision Power Services, Inc. * @copyright (c) 2001 - 2016 Invision Power Services, Inc. * @license http://www.invisionpower.com/legal/standards/ * @package IPS Community Suite * @since 18 Feb 2013 * @version SVN_VERSION_NUMBER */ namespace IPS\Helpers\Form; /* To prevent PHP errors (extending class does not exist) revealing path */ if ( !defined( '\IPS\SUITE_UNIQUE_KEY' ) ) { header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' ); exit; } /** * Text input class for Form Builder */ class _Text extends TextArea { /** * @brief Default Options * @code $defaultOptions = array( 'minLength' => 1, // Minimum number of characters. NULL is no minimum. Default is NULL. 'maxLength' => 255, // Maximum number of characters. NULL is no maximum. Default is NULL. 'size' => 20, // Text input size. NULL will use default size. Default is NULL. 'disabled' => FALSE, // Disables input. Default is FALSE. 'autocomplete' => array( // An array of options for autocomplete. 'source' => array(), // An array of values, or a URI which will be passed an 'input' parameter and return a JSON array of autocomplete values, 'freeChoice' => TRUE, // If FALSE, users will only be able to choose from autocomplete values 'maxItems' => 5, // Maximum number of items (if it should be unlimited, do not specify this element) 'minItems' => 2, // Minimum number of items (if it should be unlimited, do not specify this element) - if field is not required, 0 items will be allowed 'unique' => TRUE, // Specifies if the values must be unique 'forceLower' => TRUE, // If TRUE, all values will be converted to lowercase 'minLength' => 5, // The minimum length of each tag (characters) - if not specified, will be unlimited 'maxLength' => 10, // The maximum length of each tag (characters) - if not specified, will be unlimited 'prefix' => TRUE, // If TRUE, user will have option to specify one tag as a prefix 'resultItemTemplate'=> 'core.foo.bar', // Can be used to specify a custom JavaScript template to use for the result 'minAjaxLength' => 3, // Minimum length of value before sending AJAX lookup call 'disallowedCharacters' => array() // An array of disallowed characters (default < > ' ") ), 'placeholder' => 'e.g. ...', // A placeholder (NB: Will only work on compatible browsers) 'regex' => '/[A-Z]+/i', // RegEx of acceptable value 'nullLang' => 'no_value', // If provided, an "or X" checkbox will appear with X being the value of this language key. When checked, NULL will be returned as the value. 'accountUsername' => TRUE, // If TRUE or an \IPS\Member, additional checks will be performed to ensure provided value is acceptable for use as a username. Pass an \IPS\Member object to exclude that member from the duplicate checks 'trim' => TRUE, // If TRUE (which is the default), whitespace will be stripped from the start and end of the value 'bypassProfanity' => FALSE, // If TRUE, profanity filter will be bypassed when it is not appropriate to do so (ex: on the login form). Defaults to FALSE. ); * @endcode */ protected $defaultOptions = array( 'minLength' => NULL, 'maxLength' => NULL, 'size' => NULL, 'disabled' => FALSE, 'autocomplete' => NULL, 'placeholder' => NULL, 'regex' => NULL, 'nullLang' => NULL, 'accountUsername' => FALSE, 'trim' => TRUE, 'bypassProfanity' => FALSE, ); /** * @brief Child default Options */ protected $childDefaultOptions = array(); /** * @brief Form type */ public $formType = 'text'; /** * Constructor * Sets that the field is required if there is a minimum length and vice-versa * * @see \IPS\Helpers\Form\Abstract::__construct * @return void */ public function __construct() { /* Pull in default options from child class */ $this->defaultOptions = array_merge( $this->defaultOptions, $this->childDefaultOptions ); /* Set username regex */ $args = func_get_args(); if ( isset( $args[3]['accountUsername'] ) and $args[3]['accountUsername'] !== FALSE ) { $args[3]['minLength'] = \IPS\Settings::i()->min_user_name_length; $args[3]['maxLength'] = \IPS\Settings::i()->max_user_name_length; if ( \IPS\Settings::i()->username_characters ) { $args[3]['regex'] = '/^[' . str_replace( '\-', '-', preg_quote( \IPS\Settings::i()->username_characters, '/' ) ) . ']*$/iu'; } } /* Call parent constructor */ call_user_func_array( 'parent::__construct', $args ); /* Add JS */ if ( isset( $this->options['autocomplete']['prefix'] ) and $this->options['autocomplete']['prefix'] ) { \IPS\Output::i()->jsFiles = array_merge( \IPS\Output::i()->jsFiles, \IPS\Output::i()->js( 'global_core.js', 'core', 'global' ) ); } /* Set the form type */ $this->formType = mb_strtolower( mb_substr( get_called_class(), mb_strrpos( get_called_class(), '\\' ) + 1 ) ); } /** * Get HTML * * @return string * @note We cannot pass the regex to the HTML5 'pattern' attribute for two reasons: * @li PCRE and ECMAScript regex are not 100% compatible (though the instances this present a problem are admittedly rare) * @li You cannot specify modifiers with the pattern attribute, which we need to support on the PHP side */ public function html() { /* 10/19/15 - adding htmlspecialchars around value if autocomplete is enabled so that html tag characters can be used (e.g. for members) */ /* This value is decoded by the JS widget before use. See https://community.invisionpower.com/4bugtrack/active-reports/cannot-pm-certain-members-r6181/ */ if( $this->options['autocomplete'] and !empty( $this->value ) and is_array( $this->value ) ) { foreach( $this->value as $key => $value ) { $this->value[ $key ] = htmlspecialchars( $value, ENT_QUOTES | \IPS\HTMLENTITIES, 'UTF-8', FALSE ); } } return \IPS\Theme::i()->getTemplate( 'forms', 'core', 'global' )->text( $this->name, $this->formType, $this->value, $this->required, $this->options['maxLength'], $this->options['size'], $this->options['disabled'], $this->options['autocomplete'], $this->options['placeholder'], NULL, $this->options['nullLang'], $this->htmlId ); } /** * Get Value * * @return mixed */ public function getValue() { $name = $this->name . '_noscript'; if ( isset( \IPS\Request::i()->$name ) ) { $return = \IPS\Request::i()->$name; } else { $return = parent::getValue(); } if ( $this->options['trim'] ) { if ( is_array( $return ) ) { $return = array_map( 'trim', $return ); } else { $return = trim( $return ); } } if ( isset( $this->options['autocomplete'] ) ) { $return = htmlspecialchars_decode( $return, ENT_QUOTES ); if ( !is_array( $return ) ) { $return = array_filter( explode( "\n", $return ) ); } } /* Remove all invisible characters */ if ( !is_array( $return ) ) { $return = preg_replace( '/\p{C}+/u', '', $return ); } else { foreach( $return as $k => $v ) { $return = preg_replace( '/\p{C}+/u', '', $return ); } } if ( isset( $this->options['autocomplete']['prefix'] ) and $this->options['autocomplete']['prefix'] ) { $firstAsPrefix = $this->name . '_first_as_prefix'; $freechoicePrefixCheckbox = $this->name . '_freechoice_prefix'; $freechoicePrefix = $this->name . '_prefix'; $noscriptPrefix = $this->name . '_noscript_prefix'; if ( isset( \IPS\Request::i()->$noscriptPrefix ) and \IPS\Request::i()->$noscriptPrefix ) { $currentIndex = array_search( \IPS\Request::i()->$noscriptPrefix, $return ); if ( $currentIndex !== FALSE ) { unset( $return[ $currentIndex ] ); } $return['prefix'] = \IPS\Request::i()->$noscriptPrefix; } elseif ( isset( \IPS\Request::i()->$freechoicePrefixCheckbox ) and \IPS\Request::i()->$freechoicePrefixCheckbox and isset( \IPS\Request::i()->$freechoicePrefix ) and \IPS\Request::i()->$freechoicePrefix ) { $currentIndex = array_search( \IPS\Request::i()->$freechoicePrefix, $return ); if ( $currentIndex !== FALSE ) { unset( $return[ $currentIndex ] ); } $return['prefix'] = \IPS\Request::i()->$freechoicePrefix; } elseif ( isset( \IPS\Request::i()->$firstAsPrefix ) and \IPS\Request::i()->$firstAsPrefix ) { $return = array_merge( array( 'prefix' => array_shift( $return ) ), $return ); } } return $return; } /** * Format Value * * @return mixed */ public function formatValue() { if ( $this->options['autocomplete'] !== NULL and ( !isset( $this->options['autocomplete']['maxItems'] ) or $this->options['autocomplete']['maxItems'] != 1 ) and !is_array( $this->value ) and $this->value !== NULL ) { return array_filter( array_map( 'trim', explode( "\n", $this->value ) ) ); } return $this->value; } /** * Validate * * @throws \InvalidArgumentException * @throws \DomainException * @return TRUE */ public function validate() { parent::validate(); /* skip validation if it's an username field and if the name wasn't changed */ if ( $this->options['accountUsername'] AND $this->options['accountUsername'] instanceOf \IPS\Member AND $this->options['accountUsername']->name == $this->value ) { return TRUE; } if( \IPS\Dispatcher::i() instanceof \IPS\Dispatcher\Front and !\IPS\Member::loggedIn()->group['g_bypass_badwords'] ) { $looseProfanity = array(); $exactProfanity = array(); /* Set up profanity filters */ foreach( \IPS\core\Profanity::getProfanity() AS $profanity ) { if ( $profanity->m_exact ) { $exactProfanity[ $profanity->type ] = $profanity; } else { $looseProfanity[ $profanity->type ] = $profanity; } } foreach( $exactProfanity as $key => $value ) { $exactProfanity[ mb_strtolower( $key ) ] = $value; } /* Construct break points */ $exactProfanityBreakpoints = array(); if( count( $exactProfanity ) ) { $array = array(); foreach( array_keys( $exactProfanity ) as $entry ) { $array[] = preg_quote( $entry, '/' ); } /* @note: We use \b because of http://community.invisionpower.com/resources/bugs.html/_/4-0-0/anacronym-doesnt-work-in-middle-of-a-phrase-r47612 */ $exactProfanityBreakpoints[] = '((?=<^|\b)(?:' . implode( '|', $array ) . ')(?=\b|$))'; } } /* Regex */ if ( $this->options['regex'] !== NULL and $this->value and !preg_match( $this->options['regex'], $this->value ) ) { throw new \InvalidArgumentException( 'form_bad_value' ); } /* Username */ if ( $this->options['accountUsername'] ) { /* Check if it exists */ if ( !( $this->options['accountUsername'] instanceof \IPS\Member ) or mb_strtolower( $this->options['accountUsername']->name ) !== mb_strtolower( $this->value ) ) { foreach( \IPS\Login::handlers( TRUE ) as $k => $handler ) { if( $handler->usernameIsInUse( $this->value, $this->options['accountUsername'] ) === TRUE ) { if( \IPS\Member::loggedIn()->isAdmin() ) { throw new \DomainException( \IPS\Member::loggedIn()->language()->addToStack( 'member_name_exists_admin', FALSE, array('sprintf' => array($k)) ) ); } else { throw new \DomainException( 'member_name_exists' ); } } } /* Check it's not banned */ foreach( \IPS\Db::i()->select( 'ban_content', 'core_banfilters', array("ban_type=?", 'name') ) as $bannedName ) { if( preg_match( '/^' . str_replace( '\*', '.*', preg_quote( $bannedName, '/' ) ) . '$/i', $this->value ) ) { throw new \DomainException( 'form_name_banned' ); } } } } /* Tags */ if ( $this->options['autocomplete'] !== NULL ) { if( $this->value ) { $values = ( is_array( $this->value ) ) ? $this->value : array( $this->value ); } else { $values = array(); } if ( isset( $this->options['autocomplete']['maxItems'] ) and count( $values ) > $this->options['autocomplete']['maxItems'] ) { throw new \DomainException( \IPS\Member::loggedIn()->language()->addToStack( 'form_tags_max', FALSE, array( 'pluralize' => array( $this->options['autocomplete']['maxItems'] ) ) ) ); } if ( isset( $this->options['autocomplete']['minItems'] ) and ( $this->required or count( $values ) > 0 ) and count( $values ) < $this->options['autocomplete']['minItems'] ) { throw new \DomainException( \IPS\Member::loggedIn()->language()->addToStack( 'form_tags_min', FALSE, array( 'pluralize' => array( $this->options['autocomplete']['minItems'] ) ) ) ); } if ( isset( $this->options['autocomplete']['minLength'] ) ) { foreach ( $values as $v ) { if ( mb_strlen( $v ) < $this->options['autocomplete']['minLength'] ) { throw new \DomainException( \IPS\Member::loggedIn()->language()->addToStack( 'form_tags_length_min', FALSE, array( 'pluralize' => array( $this->options['autocomplete']['minLength'] ) ) ) ); } } } if ( isset( $this->options['autocomplete']['maxLength'] ) ) { foreach ( $values as $v ) { if ( mb_strlen( $v ) > $this->options['autocomplete']['maxLength'] ) { throw new \DomainException( \IPS\Member::loggedIn()->language()->addToStack( 'form_tags_length_max', FALSE, array( 'pluralize' => array( $this->options['autocomplete']['maxLength'] ) ) ) ); } } } if ( isset( $this->options['autocomplete']['filterProfanity'] ) AND is_array( $this->value ) AND count( $this->value ) and \IPS\Dispatcher::i() instanceof \IPS\Dispatcher\Front and !\IPS\Member::loggedIn()->group['g_bypass_badwords'] ) { foreach ( $values as $k => $v ) { if ( array_key_exists( $v, $exactProfanity ) ) { if ( $exactProfanity[ $v ]->action == 'swap' ) { $this->value[ $k ] = $exactProfanity[ $v ]->swop; } else { throw new \DomainException( 'Profanity Filter' ); // @todo proper lang string } } else { $swaps = array(); foreach( $looseProfanity AS $type => $row ) { if ( $row->action == 'swap' ) { $swaps[ $row->type ] = $row->swop; } else { if ( mb_stristr( $value, $type ) ) { throw new \DomainException( 'Profanity Filter' ); } } } /* Still here? Normal swaps. */ $this->value[ $k ] = str_ireplace( array_keys( $swaps ), array_values( $swaps ), $this->value[ $k ] ); } } } if ( isset( $this->options['autocomplete']['unique'] ) AND $this->options['autocomplete']['unique'] AND is_array( $this->value ) AND count( $this->value ) ) { foreach ( $this->value as $v ) { if ( is_scalar( $v ) ) { $this->value = array_unique( $this->value ); } break; } } if ( is_array ( $this->value ) AND isset( $this->options['autocomplete']['source'] ) AND is_array( $this->options['autocomplete']['source'] ) AND ( !isset( $this->options['autocomplete']['freeChoice'] ) OR !$this->options['autocomplete']['freeChoice'] ) ) { if( isset( $this->options['autocomplete']['forceLower'] ) AND $this->options['autocomplete']['forceLower'] ) { $this->value = array_uintersect( array_map( 'mb_strtolower', $this->value ), array_map( 'mb_strtolower', $this->options['autocomplete']['source'] ), 'strcasecmp' ); } else { $this->value = array_uintersect( $this->value, $this->options['autocomplete']['source'], 'strcasecmp' ); } } } /* Split on profanity */ if( $this->options['bypassProfanity'] === FALSE and is_string( $this->value ) and \IPS\Dispatcher::i() instanceof \IPS\Dispatcher\Front and !\IPS\Member::loggedIn()->group['g_bypass_badwords'] ) { $newVal = NULL; if ( count( $exactProfanityBreakpoints ) ) { /* preg_split can return boolean false*/ $split = preg_split( '/' . implode( '|', $exactProfanityBreakpoints ) . '/iu', $this->value, null, PREG_SPLIT_DELIM_CAPTURE ); if( is_array( $split ) ) { foreach ( $split as $section ) { if ( isset( $exactProfanity[ mb_strtolower( $section ) ] ) ) { if ( $exactProfanity[ mb_strtolower( $section ) ]->action == 'swap' ) { $newVal .= $exactProfanity[ mb_strtolower( $section ) ]->swop; } else { throw new \DomainException( 'Profanity Filter' ); } } else { $newVal .= $section; } } } } $value = $newVal ?: $this->value; if ( count( $looseProfanity ) ) { $swaps = array(); foreach( $looseProfanity AS $type => $row ) { if ( $row->action == 'swap' ) { $swaps[ $row->type ] = $row->swop; } else { if ( mb_stristr( $value, $type ) ) { throw new \DomainException( 'Profanity Filter' ); } } } $value = str_ireplace( array_keys( $swaps ), array_values( $swaps ), $value ); } $this->value = $value; } return TRUE; } }