' && substr( $content, -4 ) == '
' ) { return true; } return false; } /** * Auto save via ajax * @param string $content * @param string $autoSaveKey */ public function autoSave( $content, $autoSaveKey ) { /* Convert the data so it is safe to store and preview */ $parser = $this->_newParserObject(); /* Unconvert emoticons, etc */ $this->setLegacyMode( false ); $content = $this->process( $content ); /* Pretty much just dump it in the DB */ $this->DB->replace( 'core_editor_autosave', array( 'eas_key' => $autoSaveKey, 'eas_member_id' => $this->memberData['member_id'], 'eas_app' => IPS_APP_COMPONENT, 'eas_section' => $this->request['module'] . '.' . $this->request['section'], 'eas_updated' => time(), 'eas_content' => $content ), array( 'eas_key' ) ); return true; } /** * CKEditor will send posts with HTML entites (<). If we have HTML enabled * we need to make sure that these HTML entites are converted back into HTML * and thattags are converted into newlines * @param string $conten. */ protected function _htmlize( $content ) { return $content; $content = IPSText::br2nl( $content ); $content = IPSText::UNhtmlspecialchars( $content ); } /** * If we link a youtube URL, it should remain a link. Other code in the parser extracts URLs from links and auto-embeds, so * let's define a custom class here that we can later check for. * @param string HTML * @return string HTML */ protected function protectMedia( $content ) { $content = preg_replace( '#
(\s{0,}) ' , $content );
$content = preg_replace( '#(\s{0,}) ' , '', $slice );
$slice = str_replace( "
\n", "\n", $slice );
$slice = trim( str_replace( "", $content );
}
$content = str_ireplace( '[/code]', '
', $content );
$_newLength = strlen( $slice );
$content = substr_replace( $content, $slice, $o, $c );
/* Bump! */
if ( $_newLength != $_origLength )
{
foreach( $data['open'] as $_id => $_val )
{
$_o = $data['open'][ $_id ];
if ( $_o > $o )
{
$data['open'][ $_id ] += ( $_newLength - $_origLength );
$data['close'][ $_id ] += ( $_newLength - $_origLength );
}
}
}
}
}
return $content;
}
/**
* Check and make safe embedded codes
* @param array $matches
*/
protected function _makeCodeTagContentSafeForSaving( $content )
{
$parser = $this->_newParserObject();
/* Fetch paired opening and closing tags */
$data = $parser->getTagPositions( $content, 'pre', array( '<', '>') );
if ( is_array( $data ) && count( $data ) )
{
foreach( $data['open'] as $id => $val )
{
$o = $data['open'][ $id ];
$c = $data['close'][ $id ] - $o;
$slice = substr( $content, $o, $c );
$_origLen = strlen( $slice );
$slice = str_replace( '[', '[', $slice );
$slice = preg_replace( '/\/(\w+?)\]/', '/\1]', $slice );
$slice = str_replace( "{parse", "{parse", $slice );
$slice = preg_replace( '#(https|http|ftp)://#' , '\1-~~-//', $slice );
/* Stop (r) (tm) and (c) from switching out */
$slice = preg_replace( '#\((tm|r|c)\)#i', '($1)', $slice );
$slice = IPSText::stripTags( $slice, 'pre' );
$_newLen = strlen( $slice );
if ( $_newLen != $_origLen )
{
/* Bump up next */
foreach( $data['open'] as $_id => $_val )
{
$_o = $data['open'][ $_id ];
/* Ascii face alert */
if ( $_o > $o )
{
$data['open'][ $_id ] += ( $_newLen - $_origLen );
$data['close'][ $_id ] += ( $_newLen - $_origLen );
}
}
}
$content = substr_replace( $content, $slice, $o, $c );
}
}
return $content;
}
/**
* Generates unique editor ID
*/
protected function _fetchEditorName()
{
return 'editor_' . uniqid();
}
/**
* Generates a full autosave key
* @param string $autoSaveKey
* @return string
*/
protected function _generateAutoSaveKey( $autoSaveKey )
{
return md5( IPS_APP_COMPONENT . '-' . trim( $autoSaveKey ) . '-' . intval( $this->memberData['member_id'] ) );
}
/**
* Create a purifier object
* @return Purifier object
*/
private function _newPurifierObject()
{
/* Fetch disabled tags */
$parser = $this->_newParserObject();
$disabledTags = $parser->getDisabledTags();
$disabledTagMap = array( 'b' => array('b', 'strong'),
'i' => array('em'),
's' => array('strike'),
'sup' => array('sup'),
'sub' => array('sub') );
$allowedCssProps = array( 'color', 'font-family', 'font-size', 'background-color', 'font-weight', 'font-style', 'text-align', 'margin', 'margin-left' );
/* Not used v */
$noTags = array( 'html', 'body', 'head', 'meta', 'title', 'script', 'style', 'frame', 'frameset', 'base', 'basefont', 'applet' );
/* P, DIV, PRE, BLOCQUOTE */
$tags = 'p[style|class],div[style],pre[class]' /*,cite[class|contenteditable]*/
. ',blockquote[class|data-author|data-cid|data-date|data-time|data-collapsed],'
/* Span */
. 'span[style],br,'
/* B, I, U, S, s, s */
. 'b,strong,i,em,u,strike,del,sup,sub,'
/* LISTS */
. 'ol[type|start|class],ul[type|class],li,'
/* IMG, A */
. 'img[src|width|height|title],a[href|target|title|class|rel]';
if ( count( $disabledTags ) )
{
$workingProps = array_combine( $allowedCssProps, $allowedCssProps );
foreach( $disabledTags as $tag )
{
if ( in_array( $tag, array_keys( $disabledTagMap ) ) )
{
foreach( $disabledTagMap[ $tag ] as $_t )
{
$tags = str_replace( ',' . $_t . ',', ',', $tags );
}
}
else
{
switch( $tag )
{
case 'font':
unset( $workingProps['font-family'] );
break;
case 'color':
unset( $workingProps['color'] );
break;
case 'background':
unset( $workingProps['background-color'] );
break;
case 'size':
unset( $workingProps['font-size'] );
break;
}
}
}
$allowedCssProps = array_values( $workingProps );
}
$config = HTMLPurifier_Config::createDefault();
/* Cache path (Please put first)*/
$config->set('Cache.SerializerPath', HTML_PURIFIER_PATH . 'cache/tmp' );
/* Allow data- attributes */
$config->set('HTML.Doctype', 'HTML 4.01 Transitional');
if ( IN_DEV )
{
$config->set('Cache.DefinitionImpl', null);
}
$config->set('AutoFormat.Linkify', true );
$config->set('Core.Encoding', IPS_DOC_CHAR_SET );
if ( IPS_IS_UTF8 !== true )
{
$config->set('Core.EscapeNonASCIICharacters', true );
}
/* Allow UTF-8 domain names in URLs */
@set_include_path( IPS_KERNEL_PATH . 'PEAR/Net_IDNA2/' );
require_once( IPS_KERNEL_PATH . 'PEAR/Net_IDNA2/Net/IDNA2.php' );
$config->set('Core.EnableIDNA', true );
/* If HTML mode... as of 3.4.2, HTML enabled content bypasses this method */
if ( $this->getAllowHtml() && $this->getIsHtml() )
{
/* Good luck, all */
$config->set('HTML.Trusted', true );
}
else
{
/* Whitelist just the basics we need */
$config->set( 'HTML.Allowed', $tags );
$config->set( 'Core.EscapeInvalidTags', false );
/* Forbid *most* CSS */
$config->set( 'CSS.AllowedProperties', $allowedCssProps );
}
/* Limit CSS Damage */
$config->set( 'CSS.AllowImportant', false );
$config->set( 'CSS.AllowTricky' , false );
$config->set( 'CSS.Trusted' , false );
/* Add custom data attributes */
$def = $config->getHTMLDefinition(true);
$def->addAttribute( 'blockquote', 'data-author' , 'Text' );
$def->addAttribute( 'blockquote', 'data-cid' , 'Text' );
$def->addAttribute( 'blockquote', 'data-time' , 'Text' );
$def->addAttribute( 'blockquote', 'data-date' , 'Text' );
$def->addAttribute( 'blockquote', 'data-collapsed', 'Text' );
return new HTMLPurifier( $config );
}
/**
* Create a new parser object
* @return object
*/
private function _newParserObject()
{
/* Load parser */
$classToLoad = IPSLib::loadLibrary( IPS_ROOT_PATH . 'sources/classes/text/parser.php', 'classes_text_parser' );
$parser = new $classToLoad();
$parser->set( array( 'parseArea' => $this->getBbcodeSection(), 'memberData' => $this->memberData, 'parseBBCode' => $this->getAllowBbcode(), 'parseHtml' => ( $this->getAllowHtml() && $this->getIsHtml() ), 'parseEmoticons' => $this->getAllowSmilies() ) );
return $parser;
}
/**
* Strip non-allowed class names from items
* @param string Text
* @param string tag name
* @param array Allowed classes
*/
protected function _stripNonAllowedClasses( $text, $tag, array $allowedClassNames )
{
preg_match_all( '#<' . $tag . ' ([^>]+?)?class=([\'"])([^\'"]+?)([\'"])#i', $text, $matches, PREG_SET_ORDER );
foreach( $matches as $val )
{
$all = $val[0];
$other = $val[1];
$open = $val[2];
$classes = trim( $val[3] );
$close = $val[4];
if ( $classes )
{
$_names = explode( ' ', $classes );
$_use = array();
foreach( $_names as $n )
{
$n = trim( $n );
foreach( $allowedClassNames as $allowed )
{
if ( strstr( $allowed, '*' ) )
{
$allowed = str_replace( '*', '(?:.*)', $allowed );
}
if ( preg_match( '#^' . $allowed . '$#i', $n ) )
{
$_use[] = $n;
}
}
}
$text = str_replace( $all, '<' . $tag . ' ' . $other . ' class=' . $open . implode( ' ', $_use ) . $close, $text );
}
}
return $text;
}
/**
* Determines whether or not we can use the RTE
* @return boolean
*/
protected function _canWeRte( $ignoreRTECheck=false )
{
/* Have we specifically set RTE? */
if ( $this->getForceRte() !== null )
{
return $this->getForceRte();
}
/* Sent inline */
if ( $ignoreRTECheck === false && ( isset( $_REQUEST['isRte'] ) && $_REQUEST['isRte'] == 1 ) )
{
return true;
}
$return = FALSE;
if ( $this->memberData['userAgentKey'] == 'explorer' AND $this->memberData['userAgentVersion'] >= 7 )
{
$return = TRUE;
}
else if ( $this->memberData['userAgentKey'] == 'opera' AND $this->memberData['userAgentVersion'] >= 9.00 )
{
$return = TRUE;
}
else if ( $this->memberData['userAgentKey'] == 'firefox' AND $this->memberData['userAgentVersion'] >= 3 )
{
$return = TRUE;
}
else if ( $this->memberData['userAgentKey'] == 'safari' AND $this->memberData['userAgentVersion'] >= 4 )
{
$return = TRUE;
}
else if ( $this->memberData['userAgentKey'] == 'chrome' AND $this->memberData['userAgentVersion'] >= 2 )
{
$return = TRUE;
}
else if ( $this->memberData['userAgentKey'] == 'camino' AND $this->memberData['userAgentVersion'] >= 2 )
{
$return = TRUE;
}
else if ( $this->memberData['userAgentKey'] == 'mozilla' AND $this->memberData['userAgentVersion'] >= 4 )
{
$return = TRUE;
}
else if ( $this->memberData['userAgentKey'] == 'aol' AND $this->memberData['userAgentVersion'] >= 9 )
{
$return = TRUE;
}
else if ( $this->memberData['userAgentKey'] == 'iphone' )
{
$return = false;
}
else if ( $this->memberData['userAgentKey'] == 'iPad' )
{
$return = false;
}
return $return;
}
/**
* Previous to 3.4, we allowed HTML mixed in with BBCode almost by accident. Now that we need HTML mode set via a checkbox, these
* areas no longer work in the same way that they did in <= 3.3.x
*
* NOTE: This method does NOT attempt to verify if the user has HTML posting permissions or not. Use in conjunction with
* proper permission checks in your own code.
* Or better, pretend this method doesn't exist.
* This is not a kitten: http://3.bp.blogspot.com/-pljPk5xFiK8/UC5Wi-5u5TI/AAAAAAAAA3A/Ojk4aFYyCM4/s1600/11059_sheldon-cooper-en-big-bang+copy.jpg
*/
protected function _tryAndDetermineHtmlStatusTheHackyWay( $content )
{
if ( stristr( $content, '' ) )
{
return true;
}
else
{
/* Ok, look for