', '
', $txt );
// Don't auto-link media.
parent::$NoMediaAutoLinkify = true;
$txt = $this->_autoLinkUrls( $txt );
// Reset
parent::$NoMediaAutoLinkify = false;
return $txt;
}
/**
* Finish parsing BBCode for display
*
* @param string $txt
* @return string
*/
public function toDisplay( $txt )
{
/* Init */
$_storedLinks = array();
$_counter = 0;
$_bbcodes = array();
/* Reset */
$this->cache->updateCacheWithoutSaving( '_tmp_bbcode_media', 0 );
/* Fix no parsable, second parse */
$txt = $this->_processNoParseCodes( $txt, 2 );
/* Get BBCode to parse.. and then do it! */
foreach( $this->_bbcodes as $tag => $data )
{
if ( in_array( $tag, $this->_builtInBBCode ) )
{
continue;
}
else
{
$_bbcodes[] = $tag;
}
}
/* Clean up block level BBCode */
$txt = $this->_cleanBlockBBCode( $txt );
/* Parse BBCode */
if ( parent::$Perms['parseBBCode'] )
{
$txt = $this->_parseBBCode( $txt, 'display', $_bbcodes );
}
/* Finish URLS */
$txt = $this->_finishUrlsForDisplay( $txt );
/* Fix up URLs made safe previously */
$txt = $this->_processNoParseCodes( $txt, 3 );
return $txt;
}
/**
* Loop over the bbcode and make replacements as necessary
*
* @access public
* @param string Current text
* @return string text
*/
protected function _parseBBCode( $txt, $mode='html', $bbcodes=array() )
{
// -----------------------------------------
// We want preDbParse method called for shared
// media for permission checking, so force it for now..
// -----------------------------------------
//$this->_bbcodes[$cur_method]['sharedmedia'] = $this->_bbcodes['display']['sharedmedia'];
/* Replace them */
if ( count( $this->_bbcodes ) )
{
foreach( $this->_bbcodes as $_tag => $_bbcode )
{
/* Check to see if we can parse these */
if ( is_array( $bbcodes ) and count( $bbcodes ) )
{
if ( ! in_array( $_bbcode['bbcode_tag'], $bbcodes ) )
{
continue;
}
}
/* Allowed to use this? */
if ( $_bbcode['bbcode_groups'] != 'all' and parent::$Perms['memberData']['member_group_id'] )
{
$pass = false;
$groups = array_diff( explode( ',', $_bbcode['bbcode_groups'] ), array( '' ) );
$mygroups = array( parent::$Perms['memberData']['member_group_id'] );
if ( parent::$Perms['memberData']['mgroup_others'] )
{
$mygroups = array_diff( array_merge( $mygroups, explode( ',', IPSText::cleanPermString( parent::$Perms['memberData']['mgroup_others'] ) ) ), array( '' ) );
}
foreach( $groups as $g_id )
{
if ( in_array( $g_id, $mygroups ) )
{
$pass = true;
break;
}
}
if ( ! $pass )
{
continue;
}
}
// -----------------------------------------
// Reset our current position
// -----------------------------------------
$this->cur_pos = 0;
// -----------------------------------------
// Store teh tags
// -----------------------------------------
$_tags = array( $_bbcode['bbcode_tag'] );
// -----------------------------------------
// We'll also need to check for any aliases
// -----------------------------------------
if ( $_bbcode['bbcode_aliases'] )
{
$aliases = explode( ',', trim( $_bbcode['bbcode_aliases'] ) );
if ( is_array( $aliases ) and count( $aliases ) )
{
foreach( $aliases as $alias )
{
$_tags[] = trim( $alias );
}
}
}
// -----------------------------------------
// If we have a plugin, just pass off
// -----------------------------------------
if ( $_bbcode['bbcode_php_plugin'] )
{
$file = IPS_ROOT_PATH . 'sources/classes/text/parser/bbcode/' . $_bbcode['bbcode_php_plugin'];
$_key = md5( $_bbcode['bbcode_tag'] );
/* The legacy 'list' bbcode tag replaces \n out of necessity, however this breaks legacy code boxes upon upgrade. Ticket 853240 */
if( $_bbcode['bbcode_tag'] == 'list' )
{
/* Preserve newlines in codeboxes */
$txt = $this->_preserveCodeBoxes( $txt );
}
// -----------------------------------------
// Do we already have this plugin in our registry?
// -----------------------------------------
if ( isset( $this->plugins[$_key] ) )
{
// -----------------------------------------
// Run the method if it exists
// -----------------------------------------
if ( method_exists( $this->plugins[$_key], 'run' ) )
{
$_original = $txt;
$txt = $this->plugins[$_key]->run( $txt, $mode );
if ( ! $txt )
{
$txt = $_original;
}
else if ( $this->plugins[$_key]->error )
{
$this->_addParsingError( $this->plugins[$_key]->error );
if( $_bbcode['bbcode_tag'] == 'list' )
{
/* Restore preserved newlines */
$txt = str_replace( "", "\n", $txt );
}
continue;
}
else if ( $this->plugins[$_key]->warning )
{
$this->warning = $this->plugins[$_key]->warning;
}
}
}
// -----------------------------------------
// First time we've called this plugin
// -----------------------------------------
elseif ( is_file( $file ) )
{
$_classname = IPSLib::loadLibrary( $file, 'bbcode_plugin_' . IPSText::alphanumericalClean( $_bbcode['bbcode_tag'] ) );
// -----------------------------------------
// Class we need exists
// -----------------------------------------
if ( class_exists( $_classname ) )
{
// -----------------------------------------
// New instance of class, store in plugin registry
// for use next time
// -----------------------------------------
$plugin = new $_classname( $this->registry, $this );
$this->plugins[md5( $_bbcode['bbcode_tag'] )] = $plugin;
// -----------------------------------------
// Method we need exists
// -----------------------------------------
if ( method_exists( $plugin, 'run' ) )
{
$_original = $txt;
$txt = $plugin->run( $txt, $mode );
if ( ! $txt )
{
$txt = $_original;
}
else if ( $plugin->error )
{
$this->_addParsingError( $plugin->error );
if( $_bbcode['bbcode_tag'] == 'list' )
{
/* Restore preserved newlines */
$txt = str_replace( "", "\n", $txt );
}
continue;
}
else if ( $plugin->warning )
{
$this->warning = $plugin->warning;
}
}
}
}
// -----------------------------------------
// When we run a plugin, we don't do any other processing
// "automatically".
// Plugin is capable of doing what it wants that way.
// -----------------------------------------
if( $_bbcode['bbcode_tag'] == 'list' )
{
/* Restore preserved newlines */
$txt = str_replace( "", "\n", $txt );
}
continue;
}
// -----------------------------------------
// Loop over this bbcode's tags
// -----------------------------------------
foreach( $_tags as $_tag )
{
// -----------------------------------------
// Infinite loop catcher
// -----------------------------------------
$_iteration = 0;
// -----------------------------------------
// Start building open tag
// -----------------------------------------
$open_tag = '[' . $_tag;
// -----------------------------------------
// Doz I can haz opin tag? Loopy loo
// -----------------------------------------
while ( ( $this->cur_pos = stripos( $txt, $open_tag, $this->cur_pos ) ) !== false )
{
// -----------------------------------------
// Stop infinite loops
// -----------------------------------------
if ( $_iteration > $this->settings['max_bbcodes_per_post'] )
{
break;
}
$open_length = strlen( $open_tag );
// -----------------------------------------
// Grab the new position to jump to
// -----------------------------------------
$new_pos = strpos( $txt, ']', $this->cur_pos ) ? strpos( $txt, ']', $this->cur_pos ) : $this->cur_pos + 1;
// -----------------------------------------
// Extract the option (like surgery)
// -----------------------------------------
$_option = '';
if ( $_bbcode['bbcode_useoption'] )
{
// -----------------------------------------
// Is option optional?
// -----------------------------------------
if ( $_bbcode['bbcode_optional_option'] )
{
// -----------------------------------------
// Does we haz it?
// -----------------------------------------
if ( substr( $txt, $this->cur_pos + strlen( $open_tag ), 1 ) == '=' )
{
$open_length += 1;
$_option = substr( $txt, $this->cur_pos + $open_length, ( strpos( $txt, ']', $this->cur_pos ) - ( $this->cur_pos + $open_length ) ) );
}
// -----------------------------------------
// If not, [u] != [url] (for example)
// -----------------------------------------
else if ( ( strpos( $txt, ']', $this->cur_pos ) - ( $this->cur_pos + $open_length ) ) !== 0 )
{
if ( strpos( $txt, ']', $this->cur_pos ) )
{
$this->cur_pos = $new_pos;
continue;
}
else
{
break;
}
}
}
// -----------------------------------------
// No? Then just grab it
// -----------------------------------------
else
{
$open_length += 1;
$_option = substr( $txt, $this->cur_pos + $open_length, ( strpos( $txt, ']', $this->cur_pos ) - ( $this->cur_pos + $open_length ) ) );
}
}
// -----------------------------------------
// [img] != [i] (for example)
// -----------------------------------------
else if ( ( strpos( $txt, ']', $this->cur_pos ) - ( $this->cur_pos + $open_length ) ) !== 0 )
{
if ( strpos( $txt, ']', $this->cur_pos ) )
{
$this->cur_pos = $new_pos;
continue;
}
}
$_iteration ++;
// -----------------------------------------
// Protect against XSS
// -----------------------------------------
$_optionStrLen = IPSText::mbstrlen( $_option );
$_optionSlenstr = strlen( $_option );
$_option = $this->checkXss( $_option, false, $_tag );
if ( $_option !== FALSE )
{
/*
* Not parsing URls? - Needs to be AFTER the FALSE
* check just above
*/
if ( ! empty( $_bbcode['bbcode_no_auto_url_parse'] ) )
{
$_option = preg_replace( "#(http|https|news|ftp)://#i", "\\1://", $_option );
}
// -----------------------------------------
// If this is a single tag, that's it
// -----------------------------------------
if ( $_bbcode['bbcode_single_tag'] )
{
$txt = substr_replace( $txt, $this->_parseBBCodeTag( $_bbcode, $_option, '' ), $this->cur_pos, ( $open_length + $_optionSlenstr + 1 ) );
}
// -----------------------------------------
// Otherwise replace out the content too
// -----------------------------------------
else
{
$close_tag = '[/' . $_tag . ']';
if ( stripos( $txt, $close_tag, $new_pos ) !== false )
{
$_content = substr( $txt, ( $this->cur_pos + $open_length + $_optionSlenstr + 1 ), ( stripos( $txt, $close_tag, $this->cur_pos ) - ( $this->cur_pos + $open_length + $_optionSlenstr + 1 ) ) );
if ( $_bbcode['bbcode_useoption'] and $_bbcode['bbcode_optional_option'] and ! $_option and ! stristr( $_bbcode['bbcode_replace'], '{option}' ) )
{
$_option = $_content;
$_option = $this->checkXss( $_option, false, $_tag );
}
/* Not parsing URls? */
if ( ! empty( $_bbcode['bbcode_no_auto_url_parse'] ) )
{
$_content = preg_replace( "#(http|https|news|ftp)://#i", "\\1://", $_content );
}
$txt = substr_replace( $txt, $this->_parseBBCodeTag( $_bbcode, $_option, $_content ), $this->cur_pos, ( stripos( $txt, $close_tag, $this->cur_pos ) + strlen( $close_tag ) - $this->cur_pos ) );
}
else
{
// -----------------------------------------
// If there's no close tag, no need to
// continue
// -----------------------------------------
break;
}
}
}
// -----------------------------------------
// And reset current position to end of open tag
// Bug 14744 - if we jump to $new_pos it can skip the
// opening of the next bbcode tag
// when the replacement HTML is shorter than the full
// bbcode representation...
// -----------------------------------------
$this->cur_pos = stripos( $txt, $open_tag ) ? stripos( $txt, $open_tag ) : $this->cur_pos + 1; // $new_pos;
if ( $this->cur_pos > strlen( $txt ) )
{
break;
}
}
}
}
}
return $txt;
}
/**
* Does the actual bbcode replacement
*
* @access protected
* @param string Current bbcode to parse
* @param string [Optional] Option text
* @param string [Optional for single tag bbcodes] Content text
* @return string Converted text
*/
protected function _parseBBCodeTag( $_bbcode, $option='', $content='')
{
// -----------------------------------------
// Strip the optional quote delimiters
// -----------------------------------------
$option = str_replace( '"', '"', $option );
$option = str_replace( '"', '"', $option );
$option = str_replace( ''', "'", $option );
$option = trim( $option, '"' . "'" );
// -----------------------------------------
// Stop CSS injection
// -----------------------------------------
if ( $option )
{
// -----------------------------------------
// Cut off for entities in option
// @see
// http://community.invisionpower.com/tracker/issue-19958-acronym/
// -----------------------------------------
$option = IPSText::UNhtmlspecialchars( $option );
$option = str_replace( '!', '!', $option );
/* http://community.invisionpower.com/resources/bugs.html/_/ip-board/error-in-accented-characters-in-the-option-tag-bbcode-r40739 */
$option = IPSText::convertNumericEntityToNamed( $option );
$option = IPSText::decodeNamedHtmlEntities( $option );
$option = IPSText::UNhtmlspecialchars( $option );
if ( strpos( $option, ';' ) !== false )
{
$option = substr( $option, 0, strpos( $option, ';' ) );
}
$charSet = ( IPS_DOC_CHAR_SET == 'ISO-8859-1' ) ? 'ISO-8859-15' : IPS_DOC_CHAR_SET;
$option = @htmlentities( $option, ENT_NOQUOTES, $charSet );
$option = str_replace( '!', '!', $option );
}
$option = str_replace( '"', '"', $option );
$option = str_replace( "'", ''', $option );
// -----------------------------------------
// Swapping option/content?
// -----------------------------------------
if ( $_bbcode['bbcode_switch_option'] )
{
$_tmp = $content;
$content = $option;
$option = $_tmp;
}
// -----------------------------------------
// Replace
// -----------------------------------------
$replaceCode = $_bbcode['bbcode_replace'];
$replaceCode = str_replace( '{base_url}', $this->settings['board_url'] . '/index.php?', $replaceCode );
$replaceCode = str_replace( '{image_url}', $this->settings['img_url'], $replaceCode );
preg_match( '/\{text\.(.+?)\}/i', $replaceCode, $matches );
if ( is_array( $matches ) and count( $matches ) )
{
$replaceCode = str_replace( $matches[0], $this->lang->words[$matches[1]], $replaceCode );
}
$replaceCode = str_replace( '{option}', $option, $replaceCode );
$replaceCode = str_replace( '{content}', $content, $replaceCode );
// -----------------------------------------
// Fix linebreaks in textareas
// -----------------------------------------
if ( stripos( $replaceCode, "
", $replaceCode );
}
return $replaceCode;
}
/**
* Reset function to call to trigger "new post" for non-parsed content
*
* @access public
* @return @e void
*/
public function resetPerPost()
{
$this->cache->updateCacheWithoutSaving( '_tmp_bbcode_images', 0 );
}
/**
* Check against XSS
*
* NOTE: When this function is updated, please also update classIncomingEmail::cleanMessage()
*
* @access public
* @param string Original string
* @param boolean Fix script HTML tags
* @return string "Cleaned" text
*/
public function checkXss( $txt='', $fixScript=false, $tag='' )
{
//-----------------------------------------
// Opening script tags...
// Check for spaces and new lines...
//-----------------------------------------
if ( $fixScript )
{
$txt = preg_replace( '#<(\s+?)?s(\s+?)?c(\s+?)?r(\s+?)?i(\s+?)?p(\s+?)?t#is' , "<script" , $txt );
$txt = preg_replace( '#<(\s+?)?/(\s+?)?s(\s+?)?c(\s+?)?r(\s+?)?i(\s+?)?p(\s+?)?t#is', "</script", $txt );
}
/* got a tag? */
if ( $tag )
{
$tag = strip_tags( $tag, '
' );
switch ($tag)
{
case 'entry':
case 'blog':
case 'topic':
case 'post':
$test = str_replace( array( '"', "'", '"', ''' ), "", $txt );
if ( ! is_numeric( $test ) )
{
$txt = false;
}
break;
case 'acronym':
$test = str_replace( array( '"', "'", '"', ''' ), "", $txt );
$test1 = str_replace( array( '<', ">", '[', ']' ), "", $test );//IPSText::alphanumericalClean( $test, '.+&#; ' );
if ( $test != $test1 )
{
$txt = false;
}
break;
case 'email':
$test = str_replace( array( '"', "'", '"', ''' ), "", $txt );
$test = ( IPSText::checkEmailAddress( $test ) ) ? $txt : FALSE;
break;
case 'font':
/* Make sure it's clean */
$test = str_replace( array( '"', '"', "'", '"', ''' ), "", $txt );
$test1 = IPSText::alphanumericalClean( $test, '#.+, ' );
if ( $test != $test1 )
{
$txt = false;
}
break;
case 'background':
case 'color':
/* Make sure it's clean */
$test = str_replace( array( '"', '"', "'", '"', ''' ), "", $txt );
/* Make rgb() safe */
$test = preg_replace( '#rgb(a)?\(([^\)]+?)\)#i', '', $test );
$test1 = IPSText::alphanumericalClean( $test, '#.+, ' );
if ( $test != $test1 )
{
$txt = false;
}
break;
default:
$_regex = null;
$_bbcodes = $this->cache->getCache('bbcode');
if ( !$txt and $_bbcodes[ $tag ]['bbcode_optional_option'] )
{
continue;
}
$_regex = $_bbcodes[ $tag ]['bbcode_custom_regex'];
if( $_regex )
{
$test = str_replace( array( '"', "'", '"', ''' ), "", $txt );
if( !preg_match( $_regex, $test ) )
{
$txt = false;
}
}
break;
}
/* If we didn't actually get any option data, then return false */
$test = str_replace( array( '"', "'", '"', ''' ), "", $txt );
if ( strlen($txt) AND strlen( $test ) < 1 )
{
$txt = false;
}
if ( $txt === false )
{
return false;
}
/* Still here? Safety, then */
$txt = strip_tags( $txt, '
' );
if( strpos( $txt, '[' ) !== false OR strpos( $txt, ']' ) !== false )
{
$txt = str_replace( array( '[', ']' ), array( '[', ']' ), $txt );
}
}
/* Attempt to make JS safe */
$txt = IPSText::xssMakeJavascriptSafe( $txt );
return $txt;
}
/**
* Check against blacklisted URLs
*
* @access public
* @param string Raw posted text
* @return bool False if blacklisted url present, otherwise true
*/
public function checkBlacklistUrls( $t )
{
if( !$t )
{
return true;
}
if ( $this->settings['ipb_use_url_filter'] )
{
$list_type = $this->settings['ipb_url_filter_option'] == "black" ? "blacklist" : "whitelist";
if( $this->settings['ipb_url_' . $list_type ] )
{
$list_values = array();
$list_values = explode( "\n", str_replace( "\r", "", $this->settings['ipb_url_' . $list_type ] ) );
if( $list_type == 'whitelist' )
{
$list_values[] = "http://{$_SERVER['HTTP_HOST']}/*";
}
if ( count( $list_values ) )
{
$good_url = 0;
foreach( $list_values as $my_url )
{
if( !trim($my_url) )
{
continue;
}
$my_url = preg_quote( $my_url, '/' );
$my_url = str_replace( '\*', "(.*?)", $my_url );
if ( $list_type == "blacklist" )
{
if( preg_match( '/' . $my_url . '/i', $t ) )
{
return false;
}
}
else
{
if ( preg_match( '/' . $my_url . '/i', $t ) )
{
$good_url = 1;
}
}
}
if ( ! $good_url AND $list_type == "whitelist" )
{
return false;
}
}
}
}
return true;
}
/**
* Makes data for quote strings "safe"
*
* @access public
* @param string Raw text
* @return string Converted text
*/
public function makeQuoteSafe( $txt='' )
{
//-----------------------------------------
// INIT
//-----------------------------------------
$begin = '';
$end = '';
//-----------------------------------------
// Come via preg_replace_callback?
//-----------------------------------------
if ( is_array( $txt ) )
{
$begin = $txt[1];
$end = $txt[3];
$txt = $txt[2];
}
//-----------------------------------------
// Sort name
//-----------------------------------------
$txt = str_replace( "+", "+" , $txt );
$txt = str_replace( "-", "-" , $txt );
$txt = str_replace( ":", ":" , $txt );
$txt = str_replace( "[", "[" , $txt );
$txt = str_replace( "]", "]" , $txt );
$txt = str_replace( ")", ")" , $txt );
$txt = str_replace( "(", "(" , $txt );
$txt = str_replace( "'", "'" , $txt );
return $begin . $txt . $end;
}
/**
* Fix block level bbcodes
*/
protected function _cleanBlockBBCode( $txt )
{
foreach( $this->_blockBBcode as $tag )
{
/*
[spoiler]
*/ $txt = preg_replace( '#<(?:p|div)(?:[^>]+?)?>\[' . $tag . '([^\]]+?)?\]#i', '[' . $tag . '$1]', $txt ); /*[/spoiler]
*/ $txt = preg_replace( '#<(?:p|div)(?:[^>]+?)?>\[/' . $tag . '\]#i', '[/' . $tag . ']', $txt ); } return $txt; } /** * Finish URLs for display * Truncates them, applies white/black lists, adds rel / targets * @param string In * @return string Out */ protected function _finishUrlsForDisplay( $txt ) { /* If HTML mode, don't clean links */ if ( parent::$Perms['parseHtml'] ) { return $txt; } /* Reset counter */ $this->cache->updateCacheWithoutSaving( '_tmp_bbcode_media', 0 ); /* Parse media URLs that are NOT linked */ $txt = preg_replace_callback( '#(^|\s|\)|\(|\{|\}|>|\]|\[|;|href=\S)((http|https|news|ftp)://(?:[^<>\)\[\"\s]+|[a-zA-Z0-9/\._\-!&\#;,%\+\?:=]+))()?#is', array( $this, '_parseMediaUrls_CallBack' ), $txt ); /* LEGACY stuffs - a post from < 3.4 may not be HTMLised properly */ if ( $this->_urlsEnabled === true && preg_match( '#(http|https)://#', $txt ) && ! stristr( $txt, '