? */
$okayToParse = TRUE;
if ( $element->tagName === 'abbr' and $element->hasAttribute('title') )
{
$title = $element->getAttribute('title');
if ( !in_array( $title, $this->openAbbrTags ) )
{
$this->openAbbrTags[] = $title;
}
else
{
$okayToParse = FALSE;
}
}
/* Import */
if ( $okayToParse )
{
/* Import the element as it is */
$ownerDocument = $parent->ownerDocument ?: $parent;
$newElement = $ownerDocument->importNode( $element );
/* Element-specific parsing */
if ( $okayToParse )
{
$this->_parseElement( $newElement );
}
/* Append */
$parent->appendChild( $newElement );
/* Swap out emoticons that should be plaintext (meaning we hit the maximum limit of emoticons per editor) */
foreach( $parent->getElementsByTagName( 'img' ) AS $img )
{
if ( $img->hasAttribute( 'data-ipsEmoticon-plain' ) )
{
$replace = $parent->appendChild( new \DOMText( $img->getAttribute( 'data-ipsEmoticon-plain' ) ) );
$parent->replaceChild( $replace, $img );
}
}
/* tags don't parse BBCode inside */
$resumeBBCodeAfterPre = FALSE;
if ( $newElement->tagName == 'pre' and $this->bbcodeParse )
{
$this->bbcodeParse = FALSE;
$resumeBBCodeAfterPre = TRUE;
}
}
else
{
$newElement = $parent;
}
/* Loop children */
$parser->_parseDomNodeList( $element->childNodes, $newElement );
/* Finish */
if ( $okayToParse )
{
/* tags don't parse BBCode inside */
if ( $newElement->tagName == 'pre' and $resumeBBCodeAfterPre )
{
$this->bbcodeParse = TRUE;
}
/* End of an ? */
if ( $okayToParse and $element->tagName === 'abbr' and $element->hasAttribute('title') )
{
$k = array_search( $element->getAttribute('title'), $this->openAbbrTags );
if ( $k !== FALSE )
{
unset( $this->openAbbrTags[ $k ] );
}
}
/* If we did have children, but now we don't (for example, the entire content is a block-level BBCode), drop this element to avoid unintentional whitespace */
if ( $newElement->parentNode and $element->childNodes->length and !$newElement->childNodes->length )
{
$parent->removeChild( $newElement );
}
}
/* Adjust parent for block BBCode */
$this->_adjustParentForBlockBBCodeAtEndOfNode( $parent );
}
/**
* Parse Text
*
* @param \DOMText $textNode The text from the source document to parse
* @param \DOMNode $parent The node from the new document which will be this node's parent - passed by reference and may be modified for siblings
* @return void
*/
public function _parseDomText( \DOMText $textNode, \DOMNode &$parent, \IPS\Text\DOMParser $parser )
{
/* Adjust parent for block BBCode */
$this->_adjustParentForBlockBBCodeAtStartOfNode( $parent );
/* Init */
$text = $textNode->wholeText;
$breakPoints = array();
/* Contains [page] tags? */
if ( mb_strpos( $text, '[page]' ) !== FALSE )
{
$this->containsPageTags = TRUE;
}
/* If we are parsing BBCode, we will look for opening (e.g. "[foo=bar]") and closing (e.g. "[/foo]") tags */
if ( $this->bbcode !== NULL and count( $this->bbcode ) )
{
/* First, if we have any single-tag BBCodes (e.g. "[img=URL]") expressed as normal BBCodes (e.g. "[img]URL[/img]") - fix that */
foreach ( $this->bbcode as $tag => $bbcode )
{
if ( isset( $bbcode['single'] ) and $bbcode['single'] )
{
if ( isset( $bbcode['attributes'] ) and in_array( '{option}', $bbcode['attributes'] ) )
{
$text = preg_replace( '/\[(' . preg_quote( $tag, '/' ) . ')\](.+?)\[\/' . preg_quote( $tag, '/' ) . '\]/i', '[$1=$2]', $text );
}
else
{
$text = preg_replace( '/\[(' . preg_quote( $tag, '/' ) . ')\]\s*\[\/' . preg_quote( $tag, '/' ) . '\]/i', '[$1]', $text );
}
}
}
/* And add our regex to the breakpoints */
$breakPoints[] = '(\[\/?(?:' . implode( '|', array_map( function ( $value ) { return preg_quote( $value, '/' ); }, array_keys( $this->bbcode ) ) ) . ')(?:[=\s].+?)?\])';
}
/* If we have any acronyms, they also need to be breakpoints */
if ( count( $this->caseSensitiveAcronyms ) or count( $this->caseInsensitiveAcronyms ) )
{
$breakPoints[] = '((?=<^|\b)(?:' . implode( '|', array_merge( array_map( function ( $value ) { return preg_quote( $value, '/' ); }, array_keys( $this->caseSensitiveAcronyms ) ), array_map( function ( $value ) { return preg_quote( $value, '/' ); }, array_keys( $this->caseInsensitiveAcronyms ) ) ) ) . ')(?=\b|$))';
}
/* Loop through each section */
if ( count( $breakPoints ) )
{
$sections = array_values( array_filter( preg_split( '/' . implode( '|', $breakPoints ) . '/iu', $text, null, PREG_SPLIT_DELIM_CAPTURE ), function( $val ) { return $val !== ''; } ) );
foreach( $sections as $sectionId => $section )
{
$this->_parseTextSection( $section, $parent, ++$sectionId, count( $sections ) );
}
}
else
{
$this->_parseTextSection( $textNode->wholeText, $parent, 1, 1 );
}
/* Adjust parent for block BBCode */
$this->_adjustParentForBlockBBCodeAtEndOfNode( $parent );
}
/**
* Parse a section of text after it has been split into relevant sections
*
* @param string $section The text from the source document to parse
* @param \DOMNode $parent The node from the new document which will be this node's parent - passed by reference and may be modified for siblings
* @param int $sectionId The position of this section out of all the sections in the node - used to indicate if there's text before/after this section
* @param int $sectionCount The total number of sections in the node - used to indicate if there's text before/after this section
* @return void
*/
protected function _parseTextSection( $section, \DOMNode &$parent, $sectionId, $sectionCount )
{
/* If it's empty, skip it */
if ( $section === '' )
{
return;
}
/* If this restarts parsing, do that */
if ( $section == $this->resumeBBCodeParsingOn )
{
$this->bbcodeParse = TRUE;
$this->resumeBBCodeParsingOn = NULL;
}
/* Start of BBCode tag? */
if (
$this->bbcode !== NULL and $this->bbcodeParse and // BBCode is enabled
preg_match( '/^\[([a-z\*]+?)(?:([=\s])(.+?))?\]$/i', $section, $matches ) and // It looks like a BBCode tag
array_key_exists( mb_strtolower( $matches[1] ), $this->bbcode ) and // The tag is in the list
( !isset( $this->bbcode[ mb_strtolower( $matches[1] ) ]['allowOption'] ) or $this->bbcode[ mb_strtolower( $matches[1] ) ]['allowOption'] === TRUE or !isset( $matches[3] ) or !$matches[3] ) // If options aren't allowed for this tag, there isn't one
)
{
/* What was the option? */
$option = NULL;
if ( isset( $matches[3] ) )
{
$option = $matches[3];
/* If it's [foo="bar"] then we strip the quotes, (if it's [foo bar="baz"] then we don't) */
if ( !preg_match( '/^\s*$/', $matches[2] ) )
{
$option = trim( $option, '"\'' );
}
}
/* Send to _openBBcode */
$this->_openBBCode( mb_strtolower( $matches[1] ), $option, $parent, $sectionId, $sectionCount );
}
/* End of BBCode tag? */
elseif ( $this->bbcodeParse and array_key_exists( mb_strtolower( $section ), $this->closeTagsForOpenBBCode ) )
{
$this->_closeBBCode( mb_substr( mb_strtolower( $section ), 2, -1 ), $parent, $sectionId, $sectionCount );
}
/* Normal text */
else
{
/* HTMLPurifier will strip carrage returns, but if HTML posting is enabled this doesn't happen which
leaves blank spaces - so we need to strip here */
if ( !$this->htmlPurifier )
{
$section = str_replace( "\r", '', $section );
}
/* Profanity */
foreach ( $this->exactProfanity as $bad => $good )
{
$section = preg_replace( '/(^|\b|\s)' . preg_quote( $bad, '/' ) . '(\b|\s|!|\?|\.|,|$)/iu', "\\1" . $good . "\\2", $section );
}
$section = str_ireplace( array_keys( $this->looseProfanity ), array_values( $this->looseProfanity ), $section );
/* Note what $parent is */
$originalParent = $parent;
/* Acronym? */
if ( array_key_exists( $section, $this->caseSensitiveAcronyms ) and !in_array( $this->caseSensitiveAcronyms[ $section ], $this->openAbbrTags ) )
{
$parent = $parent->appendChild( new \DOMElement( 'abbr' ) );
$parent->setAttribute( 'title', $this->caseSensitiveAcronyms[ $section ] );
}
elseif ( array_key_exists( mb_strtolower( $section ), $this->caseInsensitiveAcronyms ) and !in_array( $this->caseInsensitiveAcronyms[ mb_strtolower( $section ) ], $this->openAbbrTags ) )
{
$parent = $parent->appendChild( new \DOMElement( 'abbr' ) );
$parent->setAttribute( 'title', $this->caseInsensitiveAcronyms[ mb_strtolower( $section ) ] );
}
/* Insert the text */
$this->_insertNodeApplyingInlineBBcode( new \DOMText( $section ), $parent );
/* Restore the parent */
$parent = $originalParent;
}
}
/**
* Open BBCode tag
*
* @param string $tag The tag (e.g. "b")
* @param string|NULL $option If an option was provided (e.g. "[foo=bar]"), it's value
* @param \DOMNode $parent The node from the new document which will be this node's parent - passed by reference and may be modified for siblings
* @param int $sectionId The position of this section out of all the sections in the node - used to indicate if there's text before/after this section
* @param int $sectionCount The total number of sections in the node - used to indicate if there's text before/after this section
* @return void
*/
protected function _openBBCode( $tag, $option, \DOMNode &$parent, $sectionId, $sectionCount )
{
/* Get definiton */
$bbcode = $this->bbcode[ $tag ];
/* Get the document */
$document = $parent->ownerDocument ?: $parent;
/* Create the element */
$bbcodeElement = $document->createElement( $bbcode['tag'] );
/* Add any attributes */
if ( isset( $bbcode['attributes'] ) )
{
foreach ( $bbcode['attributes'] as $k => $v )
{
$bbcodeElement->setAttribute( $k, str_replace( '{option}', ( $option ?: ( isset( $bbcode['defaultOption'] ) ? $bbcode['defaultOption'] : '' ) ), $v ) );
}
}
/* Callback */
if ( isset( $bbcode['callback'] ) )
{
$bbcodeElement = call_user_func( $bbcode['callback'], $bbcodeElement, array( 2 => $option ), $document );
}
/* Stop parsing? ([code] blocks make it so BBCode isn't parsed inside them) */
if ( isset( $bbcode['noParse'] ) and $bbcode['noParse'] )
{
$this->bbcodeParse = FALSE;
$this->resumeBBCodeParsingOn = "[/{$tag}]";
}
/* Parse it */
$this->_parseElement( $bbcodeElement );
/* Single only? */
if ( isset( $bbcode['single'] ) and $bbcode['single'] )
{
$this->_insertNodeApplyingInlineBBcode( $bbcodeElement, $parent );
}
/* Or with content? */
else
{
/* Block level? */
if ( isset( $bbcode['block'] ) and $bbcode['block'] )
{
/* Insert the block level element */
$lastOpennedBlockId = NULL;
if ( !empty( $this->openBlockBBCodeInOrder ) )
{
$openBBCodeBlocks = array_keys( $this->openBlockBBCodeInOrder );
$lastOpennedBlockId = array_pop( $openBBCodeBlocks );
}
if ( $lastOpennedBlockId and list( $id, $tagName ) = explode( '-', $lastOpennedBlockId ) and isset( $this->bbcode[ $tagName ]['noChildren'] ) and $this->bbcode[ $tagName ]['noChildren'] )
{
$parent->appendChild( $bbcodeElement );
}
else
{
$parent->parentNode->appendChild( $bbcodeElement );
}
/* Callback */
$blockElement = $bbcodeElement;
if ( isset( $bbcode['getBlockContentElement'] ) )
{
$blockElement = call_user_func( $bbcode['getBlockContentElement'], $bbcodeElement );
}
/* Create an element of the same type (normally ) to go in the block-level element for any content left (e.g. "
[center]This needs to be centered
") and set the parent being used to it */
if ( $sectionId != $sectionCount )
{
if ( !isset( $bbcode['noChildren'] ) or !$bbcode['noChildren'] )
{
$contentElement = $parent->cloneNode( FALSE );
$blockElement->appendChild( $contentElement );
$parent = $contentElement;
}
else
{
$parent = $bbcodeElement;
}
}
/* Add to $openBlockBBcode for closing later */
$id = uniqid() . '-' . $tag;
$this->openBlockBBCodeByTag[ $tag ][ $id ] = $bbcodeElement;
/* Add to $penBlockBBCodeInOrder to that so _parseDomElement() will use that as the parent for subsequent elements */
$this->openBlockBBCodeInOrder[ $id ] = $blockElement;
}
/* Inline */
else
{
$this->openInlineBBCode[ $tag ][] = $bbcodeElement;
}
/* Add it to the array */
if ( !isset( $this->closeTagsForOpenBBCode[ "[/{$tag}]" ] ) )
{
$this->closeTagsForOpenBBCode[ "[/{$tag}]" ] = 0;
}
$this->closeTagsForOpenBBCode[ "[/{$tag}]" ]++;
}
}
/**
* Close BBCode tag
*
* @param string $tag The tag (e.g. "b")
* @param \DOMNode $parent The node from the new document which will be this node's parent - passed by reference and may be modified for siblings
* @param int $sectionId The position of this section out of all the sections in the node - used to indicate if there's text before/after this section
* @param int $sectionCount The total number of sections in the node - used to indicate if there's text before/after this section
* @return void
*/
protected function _closeBBCode( $tag, \DOMNode &$parent, $sectionId, $sectionCount )
{
/* Get definition */
$bbcode = $this->bbcode[ $tag ];
/* Block level? */
if ( isset( $bbcode['block'] ) and $bbcode['block'] )
{
/* Find the block we're closing */
foreach ( $this->openBlockBBCodeByTag[ $tag ] as $key => $block ) { } // Just sets $key and $block for the last one
/* Create a content element to go after the block-level element for any remaining text in this DOMText node (e.g. "[/center]This should not be centered
") and set the parent being used to it */
if ( $block->previousSibling and $block->previousSibling instanceof \DOMText ) // Happens for noChildren tags - e.g. "[list]Foo[list]Bar[/list]Baz[/list]"
{
$parent = $block->parentNode;
}
else
{
if ( $block->previousSibling )
{
$contentElement = $block->previousSibling->cloneNode( FALSE );
}
else
{
$contentElement = $parent->ownerDocument->createElement('p');
}
$block->parentNode->appendChild( $contentElement );
$parent = $contentElement;
}
/* Remove it from the list of open blocks */
unset( $this->openBlockBBCodeByTag[ $tag ][ $key ] );
unset( $this->openBlockBBCodeInOrder[ $key ] );
/* Finished callback? */
if ( isset( $bbcode['finishedCallback'] ) and $bbcode['finishedCallback'] )
{
$newBlock = call_user_func( $bbcode['finishedCallback'], $block );
if ( $block->parentNode )
{
$block->parentNode->replaceChild( $newBlock, $block );
}
else
{
$parent->ownerDocument->getElementsByTagName('body')->item(0)->appendChild( $newBlock );
}
}
}
/* Inline */
else
{
array_pop( $this->openInlineBBCode[ $tag ] );
if ( empty( $this->openInlineBBCode[ $tag ] ) )
{
unset( $this->openInlineBBCode[ $tag ] );
}
}
/* Remove from array of open BBCodes */
$this->closeTagsForOpenBBCode["[/{$tag}]"]--;
if ( !$this->closeTagsForOpenBBCode["[/{$tag}]"] )
{
unset( $this->closeTagsForOpenBBCode["[/{$tag}]"] );
}
}
/**
* Insert a node to a parent while applying inline BBCode
*
* @param \DOMNode $node Node to insert
* @param \DOMNode $parent Parent to insert into
* @return void
*/
protected function _insertNodeApplyingInlineBBcode( \DOMNode $node, \DOMNode $parent )
{
/* Apply any open inline BBCode elements */
if ( $this->bbcodeParse )
{
foreach ( $this->openInlineBBCode as $tag => $elements )
{
foreach ( $elements as $bbcodeElement )
{
$parent = $parent->appendChild( $bbcodeElement->cloneNode( TRUE ) );
}
}
}
/* Insert the text */
$parent->appendChild( $node );
}
/**
* Adjust for Block-Level BBCode if necessary at start of the node
*
* @param \DOMNode $parent The node from the new document which will be the working node's parent. Passed by reference and will be modified if there is an open block-level BBCode
* @return void
*/
protected function _adjustParentForBlockBBCodeAtStartOfNode( \DOMNode &$parent )
{
/* If we have an open block-level BBCode element, and we're not already on a child
of one we have already moved, insert this element into that instead of the
defined parent */
if ( count( $this->openBlockBBCodeInOrder ) )
{
if ( !$this->openBlockDepth )
{
$openBlocks = $this->openBlockBBCodeInOrder;
$parent = array_pop( $openBlocks );
}
$this->openBlockDepth++;
}
}
/**
* Adjust for Block-Level BBCode if necessary at end of the node
*
* @return void
*/
protected function _adjustParentForBlockBBCodeAtEndOfNode()
{
/* If we have an open block-level BBCode element, decrease the depth we're at */
if ( $this->openBlockDepth )
{
$this->openBlockDepth--;
}
}
/* !Parser: Element-Specific Parsing */
/**
* Element-Specific Parsing
*
* @param \DOMElement $element The element
* @return void
*/
protected function _parseElement( \DOMElement $element )
{
/* Element-Specific */
switch ( $element->tagName )
{
case 'a':
$this->_parseAElement( $element );
break;
case 'img':
$this->_parseImgElement( $element );
break;
case 'iframe':
$this->_parseIframeElement( $element );
break;
}
/* Anything which has a URL may need swapping out */
foreach ( array( 'href', 'src', 'srcset', 'data-ipshover-target', 'data-fileid', 'cite', 'action', 'longdesc', 'usemap', 'poster' ) as $attribute )
{
if ( $element->hasAttribute( $attribute ) )
{
if ( preg_match( '#^(https?:)?//(' . preg_quote( rtrim( str_replace( array( 'http://', 'https://' ), '', \IPS\Settings::i()->base_url ), '/' ), '#' ) . ')/(.+?)$#', $element->getAttribute( $attribute ), $matches ) )
{
$element->setAttribute( $attribute, '%7B___base_url___%7D/' . $matches[3] );
}
}
}
foreach ( array( 'srcset', 'style' ) as $attribute )
{
if ( $element->hasAttribute( $attribute ) )
{
if ( mb_strpos( $element->getAttribute( $attribute ), \IPS\Settings::i()->base_url ) )
{
$element->setAttribute( $attribute, str_replace( \IPS\Settings::i()->base_url, '%7B___base_url___%7D/', $element->getAttribute( $attribute ) ) );
}
}
}
}
/**
* Parse element
*
* @param \DOMElement $element The element
* @return void
*/
protected function _parseAElement( \DOMElement $element )
{
/* Punycode it if necessary */
if ( !preg_match( '/^[\x00-\x7F]*$/', $element->getAttribute('href') ) )
{
try
{
$punycodeEncoded = (string) \IPS\Http\Url::createFromString( $element->getAttribute('href') );
$element->setAttribute( 'href', $punycodeEncoded );
}
catch( \IPS\Http\Url\Exception $e ) { }
}
/* If it's not allowed, remove the href */
if ( !$this->isAllowedUrl( $element->getAttribute('href') ) )
{
$element->removeAttribute( 'href' );
$element->setAttribute( 'class', 'ipsType_noLinkStyling' );
return;
}
/* Attachment? */
if ( $attachment = $this->_getAttachment( $element->getAttribute('href') ) )
{
$element->setAttribute( 'data-fileid', $attachment['attach_id'] );
$element->setAttribute( 'href', str_replace( static::$fileObjectClasses['core_Attachment']->baseUrl(), '{fileStore.core_Attachment}', $element->getAttribute('href') ) );
$this->_logAttachment( $attachment );
}
/* Some other media? */
elseif ( $element->getAttribute('data-extension') and $file = $this->_getFile( $element->getAttribute('data-extension'), $element->getAttribute('href') ) )
{
$element->setAttribute( 'href', '{fileStore.' . $file->storageExtension . '}/' . (string) $file );
}
try
{
$url = \IPS\Http\Url::createFromString( $element->getAttribute('href') );
$rels = $this->_getRelAttributes( \IPS\Http\Url::createFromString( $element->getAttribute('href') ) );
}
catch( \IPS\Http\Url\Exception $e )
{
$rels = array();
}
/* Add rels */
$element->setAttribute( 'rel', implode( ' ', $rels ) );
}
/**
* @brief Emoticon Count
*/
protected $_emoticons = 0;
/**
* Parse ![]()
element
*
* @param \DOMElement $element The element
* @return bool
*/
protected function _parseImgElement( \DOMElement $element )
{
/* When editing content in the AdminCP, images and iframes get the src munged. When we save, we need to put that back */
$this->_removeMunge( $element );
/* If it's not allowed, remove the src */
if ( !$this->isAllowedUrl( $element->getAttribute('src') ) )
{
$element->removeAttribute('src');
return;
}
/* Is it an emoticon? */
if ( $emoticon = $this->_getEmoticon( $element->getAttribute('src') ) )
{
if ( $this->_emoticons < 75 )
{
$element->setAttribute( 'src', str_replace( static::$fileObjectClasses['core_Emoticons']->baseUrl(), '{fileStore.core_Emoticons}', $element->getAttribute('src') ) );
$element->setAttribute( 'alt', $emoticon['typed'] );
if( $emoticon['image_2x'] and $emoticon['width'] and $emoticon['height'] )
{
$element->setAttribute( 'srcset', str_replace( static::$fileObjectClasses['core_Emoticons']->baseUrl(), '%7BfileStore.core_Emoticons%7D', $emoticon['image_2x'] ) );
$element->setAttribute( 'width', $emoticon['width'] );
$element->setAttribute( 'height', $emoticon['height'] );
}
$this->_emoticons++;
}
else
{
/* Set an attribute on the element - we'll need to know this later */
$element->setAttribute( 'data-ipsEmoticon-plain', $emoticon['typed'] );
}
}
/* Or an attachment? */
elseif ( $attachment = $this->_getAttachment( $element->getAttribute('src') ) )
{
$element->setAttribute( 'data-fileid', $attachment['attach_id'] );
$element->setAttribute( 'src', str_replace( static::$fileObjectClasses['core_Attachment']->baseUrl(), '{fileStore.core_Attachment}', $element->getAttribute('src') ) );
if ( !$element->getAttribute('alt') )
{
$element->setAttribute( 'alt', $attachment['attach_file'] );
}
$this->_logAttachment( $attachment );
}
/* Or some other media? */
elseif ( $element->getAttribute('data-extension') and $file = $this->_getFile( $element->getAttribute('data-extension'), $element->getAttribute('src') ) )
{
$element->setAttribute( 'src', '{fileStore.' . $file->storageExtension . '}/' . (string) $file );
if ( !$element->getAttribute('alt') )
{
$element->setAttribute( 'alt', $file->originalFilename );
}
}
/* Nope, regular image */
else
{
/* We need an alt (HTMLPurifier handles this normally, but it may not always run) */
if ( !$element->getAttribute('alt') )
{
$element->setAttribute( 'alt', mb_substr( basename( $element->getAttribute('src') ), 0, 40 ) );
}
/* Image proxy */
if ( \IPS\Settings::i()->remote_image_proxy or !\IPS\Settings::i()->allow_remote_images )
{
$imageSrc = $element->getAttribute('src');
try
{
$imageSrc = \IPS\Http\Url::createFromString( $imageSrc );
$useProxy = !$imageSrc->isInternal and !$imageSrc->isLocalhost(); // We don't use the image proxy for internal resources as it may cause protected resources to be exposed because the server thinks it's an internal request
}
catch ( \IPS\Http\Url\Exception $e )
{
$useProxy = TRUE;
}
if ( $useProxy )
{
if ( !\IPS\Settings::i()->allow_remote_images )
{
$element->setAttribute( 'src', '' );
}
else
{
$newUrl = \IPS\Http\Url::createFromString( \IPS\Settings::i()->base_url . "applications/core/interface/imageproxy/imageproxy.php" );
$newUrl = $newUrl->setQueryString( array(
'img' => (string) $imageSrc,
'key' => hash_hmac( "sha256", (string) $imageSrc, \IPS\Settings::i()->site_secret_key )
) );
$element->setAttribute( 'src', (string) $newUrl );
}
}
/* Replace srcset also */
if ( $element->getAttribute('srcset') )
{
$urls = explode( ',', $element->getAttribute('srcset') );
$fixedUrls = array();
foreach( $urls as $url )
{
/* Format is: http://url.com/img.png size */
$data = explode( ' ', trim( $url ) );
if ( count( $data ) <= 2 )
{
$imageSrc = $data[0];
try
{
$imageSrc = \IPS\Http\Url::createFromString( $data[0] );
$useProxy = !$imageSrc->isInternal and !$imageSrc->isLocalhost(); // We don't use the image proxy for internal resources as it may cause protected resources to be exposed because the server thinks it's an internal request
}
catch ( \IPS\Http\Url\Exception $e )
{
$useProxy = TRUE;
}
if ( $useProxy )
{
if ( !\IPS\Settings::i()->allow_remote_images )
{
break;
}
else
{
$newUrl = \IPS\Http\Url::createFromString( \IPS\Settings::i()->base_url . "applications/core/interface/imageproxy/imageproxy.php" );
$newUrl = $newUrl->setQueryString( array(
'img' => str_replace( ',', '%2C', (string) $imageSrc ), /* srcset URLs can have a param like resize=150,150 and the comma breaks the URLs */
'key' => hash_hmac( "sha256", (string) $data[0], \IPS\Settings::i()->site_secret_key )
) );
$fixedUrls[] = (string) $newUrl . ( ! empty( $data[1] ) ? ' ' . $data[1] : '' );
}
}
}
}
if ( count( $fixedUrls ) )
{
$element->setAttribute( 'srcset', implode( ', ', $fixedUrls ) );
}
else
{
$element->setAttribute( 'srcset', '' );
}
}
}
}
}
/**
* Parse ";
}
}
/* Still here? Not an internal embed */
return NULL;
}
/**
* Image Embed Code
*
* @param \IPS\Http\Url $url URL
* @param bool $iframe Some services need to be in iFrames so they cannot be edited in the editor. If TRUE, will return contents for iframe, if FALSE, return the iframe.
* @param bool $bypassExtensionCheck If TRUE, will not check if the URL ends in ".gif", ".png", etc
* @return string|null
*/
public static function _imageEmbed( \IPS\Http\Url $url, $iframe=FALSE, $bypassExtensionCheck=FALSE )
{
/* Extension check */
if ( !$bypassExtensionCheck )
{
/* What's the extension? */
$extension = mb_substr( $url, mb_strrpos( $url, '.' ) + 1 );
$questionPos = mb_strpos( $extension, '?' );
if ( $questionPos !== FALSE )
{
$extension = mb_substr( $extension, 0, $questionPos );
}
$hashPos = mb_strpos( $extension, '#' );
if ( $hashPos !== FALSE )
{
$extension = mb_substr( $extension, 0, $hashPos );
}
/* Is that an image extension? */
if ( !in_array( mb_strtolower( $extension ), \IPS\Image::$imageExtensions ) )
{
return NULL;
}
}
/* Get the image */
try
{
$imageContents = $url->request()->get();
}
/* If it times out or we can't connect, we can't embed */
catch ( \IPS\Http\Request\Exception $e )
{
throw new \UnexpectedValueException( 'embed__fail_500', static::EMBED_IMAGE );
}
/* If the response wasn't 200, then it failed */
if( $imageContents->httpResponseCode != '200' )
{
switch( $imageContents->httpResponseCode )
{
case '404':
throw new \UnexpectedValueException( 'embed__fail_404', static::EMBED_IMAGE );
break;
case '401':
case '403':
throw new \UnexpectedValueException( 'embed__fail_403', static::EMBED_IMAGE );
break;
default:
throw new \UnexpectedValueException( 'embed__fail_500', static::EMBED_IMAGE );
break;
}
}
/* Get the image dimension - try getimagesize first, as it is more efficient when available */
try
{
/* Need to write a temporary file */
$temporary = tempnam( \IPS\TEMP_DIRECTORY, 'image' );
\file_put_contents( $temporary, $imageContents );
/* Then we can use getimagesize */
$dims = @getimagesize( $temporary );
/* And delete it */
if ( @is_file( $temporary ) )
{
@unlink( $temporary );
}
/* Check that the dimensions returned were valid */
if( $dims === FALSE OR !isset( $dims[0] ) OR !$dims[0] )
{
throw new \RuntimeException;
}
}
/* If that fails, then we'll create an image object */
catch( \RuntimeException $e )
{
/* Try to create the image object */
try
{
$image = \IPS\Image::create( $imageContents );
}
/* If it fails, it's not a valid image */
catch ( \Exception $e )
{
throw new \UnexpectedValueException( 'embed_bad_image_dims', static::EMBED_IMAGE );
}
/* Set the dimensions */
$dims = array( 0 => $image->width, 1 => $image->height );
}
/* Adjust the width/height according to our maximum dimensions */
$maxImageDims = \IPS\Settings::i()->attachment_image_size ? explode( 'x', \IPS\Settings::i()->attachment_image_size ) : array( 1000, 750 );
$width = NULL;
$height = NULL;
if ( is_array( $dims ) AND ( $dims[0] > 0 AND $dims[1] > 0 ) )
{
/* Check width first */
if ( $dims[0] > $maxImageDims[0] )
{
$width = $maxImageDims[0];
$height = floor( $dims[1] / $dims[0] * $width );
}
/* Then height */
if ( $height > $maxImageDims[1] )
{
$width = floor( $maxImageDims[1] * ( $width / $height ) );
$height = $maxImageDims[1];
}
}
/* And return the embed */
return \IPS\Theme::i()->getTemplate( 'embed', 'core', 'global' )->photo( $url, NULL, NULL, $width, $height );
}
/* !Utility Methods */
/**
* Parse statically
*
* @param string $value The value to parse
* @param bool $bbcode Parse BBCode?
* @param array|null $attachIds array of ID numbers to idenfity content for attachments if the content has been saved - the first two must be int or null, the third must be string or null. If content has not been saved yet, an MD5 hash used to claim attachments after saving.
* @param \IPS\Member|null $member The member posting, NULL will use currently logged in member.
* @param string|bool $area If parsing BBCode or attachments, the Editor area we're parsing in. e.g. "core_Signatures". A boolean value will allow or disallow all BBCodes that are dependant on area.
* @param bool $filterProfanity Remove profanity?
* @param bool $cleanHtml If TRUE, HTML will be cleaned through HTMLPurifier
* @param callback $htmlPurifierConfig A function which will be passed the HTMLPurifier_Config object to customise it - see example
* @return string
* @see __construct
*/
public static function parseStatic( $value, $bbcode=FALSE, $attachIds=NULL, $member=NULL, $area=FALSE, $filterProfanity=TRUE, $cleanHtml=TRUE, $htmlPurifierConfig=NULL )
{
$obj = new static( $bbcode, $attachIds, $member, $area, $filterProfanity, $cleanHtml, $htmlPurifierConfig );
return $obj->parse( $value );
}
/**
* Remove specific elements, useful for cleaning up content for display or truncating
*
* @param string $value The value to parse
* @param array|string $elements Element to remove, or array of elements to remove. Can be in format "element[attribute=value]"
* @return string
*/
public static function removeElements( $value, $elements=array( 'blockquote', 'img', 'a' ) )
{
/* Init */
$elementsToRemove = is_string( $elements ) ? array( $elements ) : $elements;
/* Do it */
return DOMParser::parse( $value, function( \DOMElement $element, \DOMNode $parent, \IPS\Text\DOMParser $parser ) use ( $elementsToRemove )
{
/* Check all of the $elementsToRemove */
foreach( $elementsToRemove as $definition )
{
/* If this is in the element[attribute=value] format... */
if ( mb_strstr( $definition, '[' ) and mb_strstr( $definition, '=' ) )
{
/* Break it up */
preg_match( '#^([a-z]+?)\[([^\]]+?)\]$#i', $definition, $matches );
/* If the element tag name matches the first bit... */
if( $element->tagName == $matches[1] )
{
/* Break up the definition into name and value */
list( $attribute, $value ) = explode( '=', trim( $matches[2] ) );
/* Remove quotes */
$value = str_replace( array( '"', "'" ), '', $value );
/* If it matches, return to skip this element. */
if ( $element->getAttribute( $attribute ) == $value )
{
return;
}
}
}
/* Or if it's just in normal format, check it and if it matches, return to skip this element. */
else if ( $element->tagName == $definition )
{
return;
}
}
/* If we're still here, it's fine and we can import it */
$ownerDocument = $parent->ownerDocument ?: $parent;
$newElement = $ownerDocument->importNode( $element );
$parent->appendChild( $newElement );
/* And continue to children */
$parser->_parseDomNodeList( $element->childNodes, $newElement );
} );
}
/**
* Munge resources in ACP
*
* @param string $value The value to parse
* @return string
*/
public static function mungeResources( $value )
{
if ( !$value )
{
return '';
}
return DOMParser::parse( $value, function( \DOMElement $element, \DOMNode $parent, \IPS\Text\DOMParser $parser )
{
/* Munge */
if ( $element->tagName === 'img' OR $element->tagName === 'iframe' )
{
$localDomain = parse_url( \IPS\Settings::i()->base_url, PHP_URL_HOST );
$currentSrc = $element->getAttribute('src');
$srcDomain = parse_url( $currentSrc, PHP_URL_HOST );
if( $localDomain != $srcDomain )
{
$element->removeAttribute( 'src' );
$key = hash_hmac( "sha256", $currentSrc, \IPS\Settings::i()->site_secret_key );
$element->setAttribute( 'src', (string) \IPS\Http\Url::internal( 'app=core&module=system&controller=redirect', 'front' )->setQueryString( array( 'url' => $currentSrc, 'key' => $key, 'resource' => '1' ) ) );
$element->setAttribute( 'data-munge-src', $currentSrc );
}
}
/* Import it */
$ownerDocument = $parent->ownerDocument ?: $parent;
$newElement = $ownerDocument->importNode( $element );
$parent->appendChild( $newElement );
/* And continue to children */
$parser->_parseDomNodeList( $element->childNodes, $newElement );
} );
}
/**
* @brief Emoticons
*/
protected static $emoticons = NULL;
/**
* Rebuild attachment urls
*
* @param string $textContent Content
* @return mixed False, or rebuilt content
*/
public static function rebuildAttachmentUrls( $textContent )
{
$rebuilt = FALSE;
$textContent = preg_replace( '#<([^>]+?)(href|src)=(\'|")/#i', '<\1\2=\3%7BfileStore.\4%7D/', $textContent );
$textContent = preg_replace( '#<([^>]+?)(href|src)=(\'|")<___base_url___>/#i', '<\1\2=\3%7B___base_url___%7D/', $textContent );
$textContent = preg_replace( '#<([^>]+?)(data-(fileid|ipshover\-target))=(\'|")<___base_url___>/#i', '<\1\2=\3%7B___base_url___%7D/', $textContent );
/* srcset can have multiple urls in it */
preg_match_all( '#<(?:[^>]+?)srcset=(\'|")([^\'"]+?)(\1)#i', $textContent, $srcsetMatches, PREG_SET_ORDER );
foreach( $srcsetMatches as $val )
{
if ( mb_stristr( $val[2], '<___base_url___>' ) )
{
$textContent = str_replace( $val[2], str_replace( '<___base_url___>', '%7B___base_url___%7D', $val[2] ), $textContent );
}
}
/* Create DOMDocument */
$content = new \IPS\Xml\DOMDocument( '1.0', 'UTF-8' );
@$content->loadHTML( \IPS\Xml\DOMDocument::wrapHtml( $textContent ) );
$xpath = new \DOMXpath( $content );
foreach ( $xpath->query('//img') as $image )
{
if( $image->getAttribute( 'data-fileid' ) )
{
try
{
$attachment = \IPS\Db::i()->select( '*', 'core_attachments', array( 'attach_id=?', $image->getAttribute( 'data-fileid' ) ) )->first();
$image->setAttribute( 'src', '{fileStore.core_Attachment}/' . ( $attachment['attach_thumb_location'] ? $attachment['attach_thumb_location'] : $attachment['attach_location'] ) );
$anchor = $image->parentNode;
$anchor->setAttribute( 'href', '{fileStore.core_Attachment}/' . $attachment['attach_location'] );
$rebuilt = TRUE;
}
catch ( \Exception $e ) { }
}
else
{
if ( ! isset( static::$fileObjectClasses['core_Emoticons'] ) )
{
static::$fileObjectClasses['core_Emoticons'] = \IPS\File::getClass('core_Emoticons' );
}
if ( static::$emoticons === NULL )
{
static::$emoticons = array();
try
{
foreach ( \IPS\Db::i()->select( 'image, image_2x, width, height', 'core_emoticons' ) as $row )
{
static::$emoticons[] = $row;
}
}
catch( \IPS\Db\Exception $ex )
{
/* The image_2x column was added in 4.1 so may not exist if Parser is used in previous upgrade modules */
foreach ( \IPS\Db::i()->select( 'image, NULL as image_2x, 0 as width, 0 as height', 'core_emoticons' ) as $row )
{
static::$emoticons[] = $row;
}
}
}
if ( ( $image->tagName === 'img' and preg_match( '#^(' . preg_quote( rtrim( static::$fileObjectClasses['core_Emoticons']->baseUrl(), '/' ), '#' ) . ')/(.+?)$#', $image->getAttribute('src'), $matches ) ) )
{
foreach( static::$emoticons as $emo )
{
if ( $emo['image'] == $matches[2] )
{
$image->setAttribute( 'src', '{fileStore.core_Emoticons}/' . $matches[2] );
if( $emo['image_2x'] && $emo['width'] && $emo['height'] )
{
/* Retina emoticons require a width and height for proper scaling */
$image->setAttribute( 'srcset', '%7BfileStore.core_Emoticons%7D/' . $emo['image_2x'] . ' 2x' );
$image->setAttribute( 'width', $emo['width'] );
$image->setAttribute( 'height', $emo['height'] );
}
$rebuilt = TRUE;
}
}
}
}
}
if( $rebuilt )
{
$value = $content->saveHTML();
$value = preg_replace( '/]+?)>/i', '', preg_replace( '/^/', '', str_replace( array( '', '', '', '', '', '' ), '', $value ) ) );
/* Replace any {fileStore.whatever} tags with */
return static::replaceFileStoreTags( $value );
}
return FALSE;
}
/**
* Perform a safe html_entity_decode if you are not using UTF-8 MB4
*
* @param string $value Value to html entity decode
* @return string
*/
public static function utf8mb4SafeDecode( $value )
{
$value = html_entity_decode( $value, ENT_QUOTES, 'UTF-8' );
if ( \IPS\Settings::i()->getFromConfGlobal('sql_utf8mb4') !== TRUE )
{
$value = preg_replace_callback( '/[\x{10000}-\x{10FFFF}]/u', function( $mb4Character ) {
return mb_convert_encoding( $mb4Character[0], 'HTML-ENTITIES', 'UTF-8' );
}, $value );
}
return $value;
}
}