PageRenderTime 77ms CodeModel.GetById 0ms RepoModel.GetById 0ms app.codeStats 0ms

/wp-includes/formatting.php

https://bitbucket.org/mpmont/dailypancake
PHP | 2845 lines | 1700 code | 229 blank | 916 comment | 235 complexity | c88e186736a71012fa6f6432a014d6e9 MD5 | raw file
Possible License(s): AGPL-1.0, GPL-3.0, LGPL-2.1 
    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * Main WordPress Formatting API.
    4. 

  4.  *
    5. 

  5.  * Handles many functions for formatting output.
    6. 

  6.  *
    7. 

  7.  * @package WordPress
    8. 

  8.  **/
    9. 

  9. 

  10. /**
    11. 

  11.  * Replaces common plain text characters into formatted entities
    12. 

  12.  *
    13. 

  13.  * As an example,
    14. 

  14.  * <code>
    15. 

  15.  * 'cause today's effort makes it worth tomorrow's "holiday"...
    16. 

  16.  * </code>
    17. 

  17.  * Becomes:
    18. 

  18.  * <code>
    19. 

  19.  * &#8217;cause today&#8217;s effort makes it worth tomorrow&#8217;s &#8220;holiday&#8221;&#8230;
    20. 

  20.  * </code>
    21. 

  21.  * Code within certain html blocks are skipped.
    22. 

  22.  *
    23. 

  23.  * @since 0.71
    24. 

  24.  * @uses $wp_cockneyreplace Array of formatted entities for certain common phrases
    25. 

  25.  *
    26. 

  26.  * @param string $text The text to be formatted
    27. 

  27.  * @return string The string replaced with html entities
    28. 

  28.  */
    29. 

  29. function wptexturize($text) {
    30. 

  30. 	global $wp_cockneyreplace;
    31. 

  31. 	static $static_setup = false, $opening_quote, $closing_quote, $default_no_texturize_tags, $default_no_texturize_shortcodes, $static_characters, $static_replacements, $dynamic_characters, $dynamic_replacements;
    32. 

  32. 	$output = '';
    33. 

  33. 	$curl = '';
    34. 

  34. 	$textarr = preg_split('/(<.*>|\[.*\])/Us', $text, -1, PREG_SPLIT_DELIM_CAPTURE);
    35. 

  35. 	$stop = count($textarr);
    36. 

  36. 

  37. 	// No need to set up these variables more than once
    38. 

  38. 	if (!$static_setup) {
    39. 

  39. 		/* translators: opening curly quote */
    40. 

  40. 		$opening_quote = _x('&#8220;', 'opening curly quote');
    41. 

  41. 		/* translators: closing curly quote */
    42. 

  42. 		$closing_quote = _x('&#8221;', 'closing curly quote');
    43. 

  43. 

  44. 		$default_no_texturize_tags = array('pre', 'code', 'kbd', 'style', 'script', 'tt');
    45. 

  45. 		$default_no_texturize_shortcodes = array('code');
    46. 

  46. 

  47. 		// if a plugin has provided an autocorrect array, use it
    48. 

  48. 		if ( isset($wp_cockneyreplace) ) {
    49. 

  49. 			$cockney = array_keys($wp_cockneyreplace);
    50. 

  50. 			$cockneyreplace = array_values($wp_cockneyreplace);
    51. 

  51. 		} else {
    52. 

  52. 			$cockney = array("'tain't","'twere","'twas","'tis","'twill","'til","'bout","'nuff","'round","'cause");
    53. 

  53. 			$cockneyreplace = array("&#8217;tain&#8217;t","&#8217;twere","&#8217;twas","&#8217;tis","&#8217;twill","&#8217;til","&#8217;bout","&#8217;nuff","&#8217;round","&#8217;cause");
    54. 

  54. 		}
    55. 

  55. 

  56. 		$static_characters = array_merge(array('---', ' -- ', '--', ' - ', 'xn&#8211;', '...', '``', '\'\'', ' (tm)'), $cockney);
    57. 

  57. 		$static_replacements = array_merge(array('&#8212;', ' &#8212; ', '&#8211;', ' &#8211; ', 'xn--', '&#8230;', $opening_quote, $closing_quote, ' &#8482;'), $cockneyreplace);
    58. 

  58. 

  59. 		$dynamic_characters = array('/\'(\d\d(?:&#8217;|\')?s)/', '/\'(\d+)/', '/(\s|\A|[([{<]|")\'/', '/(\d+)"/', '/(\d+)\'/', '/(\S)\'([^\'\s])/', '/(\s|\A|[([{<])"(?!\s)/', '/"(\s|\S|\Z)/', '/\'([\s.]|\Z)/', '/\b(\d+)x(\d+)\b/');
    60. 

  60. 		$dynamic_replacements = array('&#8217;$1','&#8217;$1', '$1&#8216;', '$1&#8243;', '$1&#8242;', '$1&#8217;$2', '$1' . $opening_quote . '$2', $closing_quote . '$1', '&#8217;$1', '$1&#215;$2');
    61. 

  61. 

  62. 		$static_setup = true;
    63. 

  63. 	}
    64. 

  64. 

  65. 	// Transform into regexp sub-expression used in _wptexturize_pushpop_element
    66. 

  66. 	// Must do this everytime in case plugins use these filters in a context sensitive manner
    67. 

  67. 	$no_texturize_tags = '(' . implode('|', apply_filters('no_texturize_tags', $default_no_texturize_tags) ) . ')';
    68. 

  68. 	$no_texturize_shortcodes = '(' . implode('|', apply_filters('no_texturize_shortcodes', $default_no_texturize_shortcodes) ) . ')';
    69. 

  69. 

  70. 	$no_texturize_tags_stack = array();
    71. 

  71. 	$no_texturize_shortcodes_stack = array();
    72. 

  72. 

  73. 	for ( $i = 0; $i < $stop; $i++ ) {
    74. 

  74. 		$curl = $textarr[$i];
    75. 

  75. 

  76. 		if ( !empty($curl) && '<' != $curl{0} && '[' != $curl{0}
    77. 

  77. 				&& empty($no_texturize_shortcodes_stack) && empty($no_texturize_tags_stack)) {
    78. 

  78. 			// This is not a tag, nor is the texturization disabled
    79. 

  79. 			// static strings
    80. 

  80. 			$curl = str_replace($static_characters, $static_replacements, $curl);
    81. 

  81. 			// regular expressions
    82. 

  82. 			$curl = preg_replace($dynamic_characters, $dynamic_replacements, $curl);
    83. 

  83. 		} elseif (!empty($curl)) {
    84. 

  84. 			/*
    85. 

  85. 			 * Only call _wptexturize_pushpop_element if first char is correct
    86. 

  86. 			 * tag opening
    87. 

  87. 			 */
    88. 

  88. 			if ('<' == $curl{0})
    89. 

  89. 				_wptexturize_pushpop_element($curl, $no_texturize_tags_stack, $no_texturize_tags, '<', '>');
    90. 

  90. 			elseif ('[' == $curl{0})
    91. 

  91. 				_wptexturize_pushpop_element($curl, $no_texturize_shortcodes_stack, $no_texturize_shortcodes, '[', ']');
    92. 

  92. 		}
    93. 

  93. 

  94. 		$curl = preg_replace('/&([^#])(?![a-zA-Z1-4]{1,8};)/', '&#038;$1', $curl);
    95. 

  95. 		$output .= $curl;
    96. 

  96. 	}
    97. 

  97. 

  98. 	return $output;
    99. 

  99. }
    100. 

  100. 

  101. /**
    102. 

  102.  * Search for disabled element tags. Push element to stack on tag open and pop
    103. 

  103.  * on tag close. Assumes first character of $text is tag opening.
    104. 

  104.  *
    105. 

  105.  * @access private
    106. 

  106.  * @since 2.9.0
    107. 

  107.  *
    108. 

  108.  * @param string $text Text to check. First character is assumed to be $opening
    109. 

  109.  * @param array $stack Array used as stack of opened tag elements
    110. 

  110.  * @param string $disabled_elements Tags to match against formatted as regexp sub-expression
    111. 

  111.  * @param string $opening Tag opening character, assumed to be 1 character long
    112. 

  112.  * @param string $opening Tag closing  character
    113. 

  113.  * @return object
    114. 

  114.  */
    115. 

  115. function _wptexturize_pushpop_element($text, &$stack, $disabled_elements, $opening = '<', $closing = '>') {
    116. 

  116. 	// Check if it is a closing tag -- otherwise assume opening tag
    117. 

  117. 	if (strncmp($opening . '/', $text, 2)) {
    118. 

  118. 		// Opening? Check $text+1 against disabled elements
    119. 

  119. 		if (preg_match('/^' . $disabled_elements . '\b/', substr($text, 1), $matches)) {
    120. 

  120. 			/*
    121. 

  121. 			 * This disables texturize until we find a closing tag of our type
    122. 

  122. 			 * (e.g. <pre>) even if there was invalid nesting before that
    123. 

  123. 			 *
    124. 

  124. 			 * Example: in the case <pre>sadsadasd</code>"baba"</pre>
    125. 

  125. 			 *          "baba" won't be texturize
    126. 

  126. 			 */
    127. 

  127. 

  128. 			array_push($stack, $matches[1]);
    129. 

  129. 		}
    130. 

  130. 	} else {
    131. 

  131. 		// Closing? Check $text+2 against disabled elements
    132. 

  132. 		$c = preg_quote($closing, '/');
    133. 

  133. 		if (preg_match('/^' . $disabled_elements . $c . '/', substr($text, 2), $matches)) {
    134. 

  134. 			$last = array_pop($stack);
    135. 

  135. 

  136. 			// Make sure it matches the opening tag
    137. 

  137. 			if ($last != $matches[1])
    138. 

  138. 				array_push($stack, $last);
    139. 

  139. 		}
    140. 

  140. 	}
    141. 

  141. }
    142. 

  142. 

  143. /**
    144. 

  144.  * Accepts matches array from preg_replace_callback in wpautop() or a string.
    145. 

  145.  *
    146. 

  146.  * Ensures that the contents of a <<pre>>...<</pre>> HTML block are not
    147. 

  147.  * converted into paragraphs or line-breaks.
    148. 

  148.  *
    149. 

  149.  * @since 1.2.0
    150. 

  150.  *
    151. 

  151.  * @param array|string $matches The array or string
    152. 

  152.  * @return string The pre block without paragraph/line-break conversion.
    153. 

  153.  */
    154. 

  154. function clean_pre($matches) {
    155. 

  155. 	if ( is_array($matches) )
    156. 

  156. 		$text = $matches[1] . $matches[2] . "</pre>";
    157. 

  157. 	else
    158. 

  158. 		$text = $matches;
    159. 

  159. 

  160. 	$text = str_replace('<br />', '', $text);
    161. 

  161. 	$text = str_replace('<p>', "\n", $text);
    162. 

  162. 	$text = str_replace('</p>', '', $text);
    163. 

  163. 

  164. 	return $text;
    165. 

  165. }
    166. 

  166. 

  167. /**
    168. 

  168.  * Replaces double line-breaks with paragraph elements.
    169. 

  169.  *
    170. 

  170.  * A group of regex replaces used to identify text formatted with newlines and
    171. 

  171.  * replace double line-breaks with HTML paragraph tags. The remaining
    172. 

  172.  * line-breaks after conversion become <<br />> tags, unless $br is set to '0'
    173. 

  173.  * or 'false'.
    174. 

  174.  *
    175. 

  175.  * @since 0.71
    176. 

  176.  *
    177. 

  177.  * @param string $pee The text which has to be formatted.
    178. 

  178.  * @param int|bool $br Optional. If set, this will convert all remaining line-breaks after paragraphing. Default true.
    179. 

  179.  * @return string Text which has been converted into correct paragraph tags.
    180. 

  180.  */
    181. 

  181. function wpautop($pee, $br = 1) {
    182. 

  182. 

  183. 	if ( trim($pee) === '' )
    184. 

  184. 		return '';
    185. 

  185. 	$pee = $pee . "\n"; // just to make things a little easier, pad the end
    186. 

  186. 	$pee = preg_replace('|<br />\s*<br />|', "\n\n", $pee);
    187. 

  187. 	// Space things out a little
    188. 

  188. 	$allblocks = '(?:table|thead|tfoot|caption|col|colgroup|tbody|tr|td|th|div|dl|dd|dt|ul|ol|li|pre|select|option|form|map|area|blockquote|address|math|style|input|p|h[1-6]|hr|fieldset|legend|section|article|aside|hgroup|header|footer|nav|figure|figcaption|details|menu|summary)';
    189. 

  189. 	$pee = preg_replace('!(<' . $allblocks . '[^>]*>)!', "\n$1", $pee);
    190. 

  190. 	$pee = preg_replace('!(</' . $allblocks . '>)!', "$1\n\n", $pee);
    191. 

  191. 	$pee = str_replace(array("\r\n", "\r"), "\n", $pee); // cross-platform newlines
    192. 

  192. 	if ( strpos($pee, '<object') !== false ) {
    193. 

  193. 		$pee = preg_replace('|\s*<param([^>]*)>\s*|', "<param$1>", $pee); // no pee inside object/embed
    194. 

  194. 		$pee = preg_replace('|\s*</embed>\s*|', '</embed>', $pee);
    195. 

  195. 	}
    196. 

  196. 	$pee = preg_replace("/\n\n+/", "\n\n", $pee); // take care of duplicates
    197. 

  197. 	// make paragraphs, including one at the end
    198. 

  198. 	$pees = preg_split('/\n\s*\n/', $pee, -1, PREG_SPLIT_NO_EMPTY);
    199. 

  199. 	$pee = '';
    200. 

  200. 	foreach ( $pees as $tinkle )
    201. 

  201. 		$pee .= '<p>' . trim($tinkle, "\n") . "</p>\n";
    202. 

  202. 	$pee = preg_replace('|<p>\s*</p>|', '', $pee); // under certain strange conditions it could create a P of entirely whitespace
    203. 

  203. 	$pee = preg_replace('!<p>([^<]+)</(div|address|form)>!', "<p>$1</p></$2>", $pee);
    204. 

  204. 	$pee = preg_replace('!<p>\s*(</?' . $allblocks . '[^>]*>)\s*</p>!', "$1", $pee); // don't pee all over a tag
    205. 

  205. 	$pee = preg_replace("|<p>(<li.+?)</p>|", "$1", $pee); // problem with nested lists
    206. 

  206. 	$pee = preg_replace('|<p><blockquote([^>]*)>|i', "<blockquote$1><p>", $pee);
    207. 

  207. 	$pee = str_replace('</blockquote></p>', '</p></blockquote>', $pee);
    208. 

  208. 	$pee = preg_replace('!<p>\s*(</?' . $allblocks . '[^>]*>)!', "$1", $pee);
    209. 

  209. 	$pee = preg_replace('!(</?' . $allblocks . '[^>]*>)\s*</p>!', "$1", $pee);
    210. 

  210. 	if ($br) {
    211. 

  211. 		$pee = preg_replace_callback('/<(script|style).*?<\/\\1>/s', create_function('$matches', 'return str_replace("\n", "<WPPreserveNewline />", $matches[0]);'), $pee);
    212. 

  212. 		$pee = preg_replace('|(?<!<br />)\s*\n|', "<br />\n", $pee); // optionally make line breaks
    213. 

  213. 		$pee = str_replace('<WPPreserveNewline />', "\n", $pee);
    214. 

  214. 	}
    215. 

  215. 	$pee = preg_replace('!(</?' . $allblocks . '[^>]*>)\s*<br />!', "$1", $pee);
    216. 

  216. 	$pee = preg_replace('!<br />(\s*</?(?:p|li|div|dl|dd|dt|th|pre|td|ul|ol)[^>]*>)!', '$1', $pee);
    217. 

  217. 	if (strpos($pee, '<pre') !== false)
    218. 

  218. 		$pee = preg_replace_callback('!(<pre[^>]*>)(.*?)</pre>!is', 'clean_pre', $pee );
    219. 

  219. 	$pee = preg_replace( "|\n</p>$|", '</p>', $pee );
    220. 

  220. 

  221. 	return $pee;
    222. 

  222. }
    223. 

  223. 

  224. /**
    225. 

  225.  * Don't auto-p wrap shortcodes that stand alone
    226. 

  226.  *
    227. 

  227.  * Ensures that shortcodes are not wrapped in <<p>>...<</p>>.
    228. 

  228.  *
    229. 

  229.  * @since 2.9.0
    230. 

  230.  *
    231. 

  231.  * @param string $pee The content.
    232. 

  232.  * @return string The filtered content.
    233. 

  233.  */
    234. 

  234. function shortcode_unautop($pee) {
    235. 

  235. 	global $shortcode_tags;
    236. 

  236. 

  237. 	if ( !empty($shortcode_tags) && is_array($shortcode_tags) ) {
    238. 

  238. 		$tagnames = array_keys($shortcode_tags);
    239. 

  239. 		$tagregexp = join( '|', array_map('preg_quote', $tagnames) );
    240. 

  240. 		$pee = preg_replace('/<p>\\s*?(\\[(' . $tagregexp . ')\\b.*?\\/?\\](?:.+?\\[\\/\\2\\])?)\\s*<\\/p>/s', '$1', $pee);
    241. 

  241. 	}
    242. 

  242. 

  243. 	return $pee;
    244. 

  244. }
    245. 

  245. 

  246. /**
    247. 

  247.  * Checks to see if a string is utf8 encoded.
    248. 

  248.  *
    249. 

  249.  * NOTE: This function checks for 5-Byte sequences, UTF8
    250. 

  250.  *       has Bytes Sequences with a maximum length of 4.
    251. 

  251.  *
    252. 

  252.  * @author bmorel at ssi dot fr (modified)
    253. 

  253.  * @since 1.2.1
    254. 

  254.  *
    255. 

  255.  * @param string $str The string to be checked
    256. 

  256.  * @return bool True if $str fits a UTF-8 model, false otherwise.
    257. 

  257.  */
    258. 

  258. function seems_utf8($str) {
    259. 

  259. 	$length = strlen($str);
    260. 

  260. 	for ($i=0; $i < $length; $i++) {
    261. 

  261. 		$c = ord($str[$i]);
    262. 

  262. 		if ($c < 0x80) $n = 0; # 0bbbbbbb
    263. 

  263. 		elseif (($c & 0xE0) == 0xC0) $n=1; # 110bbbbb
    264. 

  264. 		elseif (($c & 0xF0) == 0xE0) $n=2; # 1110bbbb
    265. 

  265. 		elseif (($c & 0xF8) == 0xF0) $n=3; # 11110bbb
    266. 

  266. 		elseif (($c & 0xFC) == 0xF8) $n=4; # 111110bb
    267. 

  267. 		elseif (($c & 0xFE) == 0xFC) $n=5; # 1111110b
    268. 

  268. 		else return false; # Does not match any model
    269. 

  269. 		for ($j=0; $j<$n; $j++) { # n bytes matching 10bbbbbb follow ?
    270. 

  270. 			if ((++$i == $length) || ((ord($str[$i]) & 0xC0) != 0x80))
    271. 

  271. 				return false;
    272. 

  272. 		}
    273. 

  273. 	}
    274. 

  274. 	return true;
    275. 

  275. }
    276. 

  276. 

  277. /**
    278. 

  278.  * Converts a number of special characters into their HTML entities.
    279. 

  279.  *
    280. 

  280.  * Specifically deals with: &, <, >, ", and '.
    281. 

  281.  *
    282. 

  282.  * $quote_style can be set to ENT_COMPAT to encode " to
    283. 

  283.  * &quot;, or ENT_QUOTES to do both. Default is ENT_NOQUOTES where no quotes are encoded.
    284. 

  284.  *
    285. 

  285.  * @since 1.2.2
    286. 

  286.  *
    287. 

  287.  * @param string $string The text which is to be encoded.
    288. 

  288.  * @param mixed $quote_style Optional. Converts double quotes if set to ENT_COMPAT, both single and double if set to ENT_QUOTES or none if set to ENT_NOQUOTES. Also compatible with old values; converting single quotes if set to 'single', double if set to 'double' or both if otherwise set. Default is ENT_NOQUOTES.
    289. 

  289.  * @param string $charset Optional. The character encoding of the string. Default is false.
    290. 

  290.  * @param boolean $double_encode Optional. Whether to encode existing html entities. Default is false.
    291. 

  291.  * @return string The encoded text with HTML entities.
    292. 

  292.  */
    293. 

  293. function _wp_specialchars( $string, $quote_style = ENT_NOQUOTES, $charset = false, $double_encode = false ) {
    294. 

  294. 	$string = (string) $string;
    295. 

  295. 

  296. 	if ( 0 === strlen( $string ) ) {
    297. 

  297. 		return '';
    298. 

  298. 	}
    299. 

  299. 

  300. 	// Don't bother if there are no specialchars - saves some processing
    301. 

  301. 	if ( !preg_match( '/[&<>"\']/', $string ) ) {
    302. 

  302. 		return $string;
    303. 

  303. 	}
    304. 

  304. 

  305. 	// Account for the previous behaviour of the function when the $quote_style is not an accepted value
    306. 

  306. 	if ( empty( $quote_style ) ) {
    307. 

  307. 		$quote_style = ENT_NOQUOTES;
    308. 

  308. 	} elseif ( !in_array( $quote_style, array( 0, 2, 3, 'single', 'double' ), true ) ) {
    309. 

  309. 		$quote_style = ENT_QUOTES;
    310. 

  310. 	}
    311. 

  311. 

  312. 	// Store the site charset as a static to avoid multiple calls to wp_load_alloptions()
    313. 

  313. 	if ( !$charset ) {
    314. 

  314. 		static $_charset;
    315. 

  315. 		if ( !isset( $_charset ) ) {
    316. 

  316. 			$alloptions = wp_load_alloptions();
    317. 

  317. 			$_charset = isset( $alloptions['blog_charset'] ) ? $alloptions['blog_charset'] : '';
    318. 

  318. 		}
    319. 

  319. 		$charset = $_charset;
    320. 

  320. 	}
    321. 

  321. 	if ( in_array( $charset, array( 'utf8', 'utf-8', 'UTF8' ) ) ) {
    322. 

  322. 		$charset = 'UTF-8';
    323. 

  323. 	}
    324. 

  324. 

  325. 	$_quote_style = $quote_style;
    326. 

  326. 

  327. 	if ( $quote_style === 'double' ) {
    328. 

  328. 		$quote_style = ENT_COMPAT;
    329. 

  329. 		$_quote_style = ENT_COMPAT;
    330. 

  330. 	} elseif ( $quote_style === 'single' ) {
    331. 

  331. 		$quote_style = ENT_NOQUOTES;
    332. 

  332. 	}
    333. 

  333. 

  334. 	// Handle double encoding ourselves
    335. 

  335. 	if ( !$double_encode ) {
    336. 

  336. 		$string = wp_specialchars_decode( $string, $_quote_style );
    337. 

  337. 

  338. 		/* Critical */
    339. 

  339. 		// The previous line decodes &amp;phrase; into &phrase;  We must guarantee that &phrase; is valid before proceeding.
    340. 

  340. 		$string = wp_kses_normalize_entities($string);
    341. 

  341. 

  342. 		// Now proceed with custom double-encoding silliness
    343. 

  343. 		$string = preg_replace( '/&(#?x?[0-9a-z]+);/i', '|wp_entity|$1|/wp_entity|', $string );
    344. 

  344. 	}
    345. 

  345. 

  346. 	$string = @htmlspecialchars( $string, $quote_style, $charset );
    347. 

  347. 

  348. 	// Handle double encoding ourselves
    349. 

  349. 	if ( !$double_encode ) {
    350. 

  350. 		$string = str_replace( array( '|wp_entity|', '|/wp_entity|' ), array( '&', ';' ), $string );
    351. 

  351. 	}
    352. 

  352. 

  353. 	// Backwards compatibility
    354. 

  354. 	if ( 'single' === $_quote_style ) {
    355. 

  355. 		$string = str_replace( "'", '&#039;', $string );
    356. 

  356. 	}
    357. 

  357. 

  358. 	return $string;
    359. 

  359. }
    360. 

  360. 

  361. /**
    362. 

  362.  * Converts a number of HTML entities into their special characters.
    363. 

  363.  *
    364. 

  364.  * Specifically deals with: &, <, >, ", and '.
    365. 

  365.  *
    366. 

  366.  * $quote_style can be set to ENT_COMPAT to decode " entities,
    367. 

  367.  * or ENT_QUOTES to do both " and '. Default is ENT_NOQUOTES where no quotes are decoded.
    368. 

  368.  *
    369. 

  369.  * @since 2.8
    370. 

  370.  *
    371. 

  371.  * @param string $string The text which is to be decoded.
    372. 

  372.  * @param mixed $quote_style Optional. Converts double quotes if set to ENT_COMPAT, both single and double if set to ENT_QUOTES or none if set to ENT_NOQUOTES. Also compatible with old _wp_specialchars() values; converting single quotes if set to 'single', double if set to 'double' or both if otherwise set. Default is ENT_NOQUOTES.
    373. 

  373.  * @return string The decoded text without HTML entities.
    374. 

  374.  */
    375. 

  375. function wp_specialchars_decode( $string, $quote_style = ENT_NOQUOTES ) {
    376. 

  376. 	$string = (string) $string;
    377. 

  377. 

  378. 	if ( 0 === strlen( $string ) ) {
    379. 

  379. 		return '';
    380. 

  380. 	}
    381. 

  381. 

  382. 	// Don't bother if there are no entities - saves a lot of processing
    383. 

  383. 	if ( strpos( $string, '&' ) === false ) {
    384. 

  384. 		return $string;
    385. 

  385. 	}
    386. 

  386. 

  387. 	// Match the previous behaviour of _wp_specialchars() when the $quote_style is not an accepted value
    388. 

  388. 	if ( empty( $quote_style ) ) {
    389. 

  389. 		$quote_style = ENT_NOQUOTES;
    390. 

  390. 	} elseif ( !in_array( $quote_style, array( 0, 2, 3, 'single', 'double' ), true ) ) {
    391. 

  391. 		$quote_style = ENT_QUOTES;
    392. 

  392. 	}
    393. 

  393. 

  394. 	// More complete than get_html_translation_table( HTML_SPECIALCHARS )
    395. 

  395. 	$single = array( '&#039;'  => '\'', '&#x27;' => '\'' );
    396. 

  396. 	$single_preg = array( '/&#0*39;/'  => '&#039;', '/&#x0*27;/i' => '&#x27;' );
    397. 

  397. 	$double = array( '&quot;' => '"', '&#034;'  => '"', '&#x22;' => '"' );
    398. 

  398. 	$double_preg = array( '/&#0*34;/'  => '&#034;', '/&#x0*22;/i' => '&#x22;' );
    399. 

  399. 	$others = array( '&lt;'   => '<', '&#060;'  => '<', '&gt;'   => '>', '&#062;'  => '>', '&amp;'  => '&', '&#038;'  => '&', '&#x26;' => '&' );
    400. 

  400. 	$others_preg = array( '/&#0*60;/'  => '&#060;', '/&#0*62;/'  => '&#062;', '/&#0*38;/'  => '&#038;', '/&#x0*26;/i' => '&#x26;' );
    401. 

  401. 

  402. 	if ( $quote_style === ENT_QUOTES ) {
    403. 

  403. 		$translation = array_merge( $single, $double, $others );
    404. 

  404. 		$translation_preg = array_merge( $single_preg, $double_preg, $others_preg );
    405. 

  405. 	} elseif ( $quote_style === ENT_COMPAT || $quote_style === 'double' ) {
    406. 

  406. 		$translation = array_merge( $double, $others );
    407. 

  407. 		$translation_preg = array_merge( $double_preg, $others_preg );
    408. 

  408. 	} elseif ( $quote_style === 'single' ) {
    409. 

  409. 		$translation = array_merge( $single, $others );
    410. 

  410. 		$translation_preg = array_merge( $single_preg, $others_preg );
    411. 

  411. 	} elseif ( $quote_style === ENT_NOQUOTES ) {
    412. 

  412. 		$translation = $others;
    413. 

  413. 		$translation_preg = $others_preg;
    414. 

  414. 	}
    415. 

  415. 

  416. 	// Remove zero padding on numeric entities
    417. 

  417. 	$string = preg_replace( array_keys( $translation_preg ), array_values( $translation_preg ), $string );
    418. 

  418. 

  419. 	// Replace characters according to translation table
    420. 

  420. 	return strtr( $string, $translation );
    421. 

  421. }
    422. 

  422. 

  423. /**
    424. 

  424.  * Checks for invalid UTF8 in a string.
    425. 

  425.  *
    426. 

  426.  * @since 2.8
    427. 

  427.  *
    428. 

  428.  * @param string $string The text which is to be checked.
    429. 

  429.  * @param boolean $strip Optional. Whether to attempt to strip out invalid UTF8. Default is false.
    430. 

  430.  * @return string The checked text.
    431. 

  431.  */
    432. 

  432. function wp_check_invalid_utf8( $string, $strip = false ) {
    433. 

  433. 	$string = (string) $string;
    434. 

  434. 

  435. 	if ( 0 === strlen( $string ) ) {
    436. 

  436. 		return '';
    437. 

  437. 	}
    438. 

  438. 

  439. 	// Store the site charset as a static to avoid multiple calls to get_option()
    440. 

  440. 	static $is_utf8;
    441. 

  441. 	if ( !isset( $is_utf8 ) ) {
    442. 

  442. 		$is_utf8 = in_array( get_option( 'blog_charset' ), array( 'utf8', 'utf-8', 'UTF8', 'UTF-8' ) );
    443. 

  443. 	}
    444. 

  444. 	if ( !$is_utf8 ) {
    445. 

  445. 		return $string;
    446. 

  446. 	}
    447. 

  447. 

  448. 	// Check for support for utf8 in the installed PCRE library once and store the result in a static
    449. 

  449. 	static $utf8_pcre;
    450. 

  450. 	if ( !isset( $utf8_pcre ) ) {
    451. 

  451. 		$utf8_pcre = @preg_match( '/^./u', 'a' );
    452. 

  452. 	}
    453. 

  453. 	// We can't demand utf8 in the PCRE installation, so just return the string in those cases
    454. 

  454. 	if ( !$utf8_pcre ) {
    455. 

  455. 		return $string;
    456. 

  456. 	}
    457. 

  457. 

  458. 	// preg_match fails when it encounters invalid UTF8 in $string
    459. 

  459. 	if ( 1 === @preg_match( '/^./us', $string ) ) {
    460. 

  460. 		return $string;
    461. 

  461. 	}
    462. 

  462. 

  463. 	// Attempt to strip the bad chars if requested (not recommended)
    464. 

  464. 	if ( $strip && function_exists( 'iconv' ) ) {
    465. 

  465. 		return iconv( 'utf-8', 'utf-8', $string );
    466. 

  466. 	}
    467. 

  467. 

  468. 	return '';
    469. 

  469. }
    470. 

  470. 

  471. /**
    472. 

  472.  * Encode the Unicode values to be used in the URI.
    473. 

  473.  *
    474. 

  474.  * @since 1.5.0
    475. 

  475.  *
    476. 

  476.  * @param string $utf8_string
    477. 

  477.  * @param int $length Max length of the string
    478. 

  478.  * @return string String with Unicode encoded for URI.
    479. 

  479.  */
    480. 

  480. function utf8_uri_encode( $utf8_string, $length = 0 ) {
    481. 

  481. 	$unicode = '';
    482. 

  482. 	$values = array();
    483. 

  483. 	$num_octets = 1;
    484. 

  484. 	$unicode_length = 0;
    485. 

  485. 

  486. 	$string_length = strlen( $utf8_string );
    487. 

  487. 	for ($i = 0; $i < $string_length; $i++ ) {
    488. 

  488. 

  489. 		$value = ord( $utf8_string[ $i ] );
    490. 

  490. 

  491. 		if ( $value < 128 ) {
    492. 

  492. 			if ( $length && ( $unicode_length >= $length ) )
    493. 

  493. 				break;
    494. 

  494. 			$unicode .= chr($value);
    495. 

  495. 			$unicode_length++;
    496. 

  496. 		} else {
    497. 

  497. 			if ( count( $values ) == 0 ) $num_octets = ( $value < 224 ) ? 2 : 3;
    498. 

  498. 

  499. 			$values[] = $value;
    500. 

  500. 

  501. 			if ( $length && ( $unicode_length + ($num_octets * 3) ) > $length )
    502. 

  502. 				break;
    503. 

  503. 			if ( count( $values ) == $num_octets ) {
    504. 

  504. 				if ($num_octets == 3) {
    505. 

  505. 					$unicode .= '%' . dechex($values[0]) . '%' . dechex($values[1]) . '%' . dechex($values[2]);
    506. 

  506. 					$unicode_length += 9;
    507. 

  507. 				} else {
    508. 

  508. 					$unicode .= '%' . dechex($values[0]) . '%' . dechex($values[1]);
    509. 

  509. 					$unicode_length += 6;
    510. 

  510. 				}
    511. 

  511. 

  512. 				$values = array();
    513. 

  513. 				$num_octets = 1;
    514. 

  514. 			}
    515. 

  515. 		}
    516. 

  516. 	}
    517. 

  517. 

  518. 	return $unicode;
    519. 

  519. }
    520. 

  520. 

  521. /**
    522. 

  522.  * Converts all accent characters to ASCII characters.
    523. 

  523.  *
    524. 

  524.  * If there are no accent characters, then the string given is just returned.
    525. 

  525.  *
    526. 

  526.  * @since 1.2.1
    527. 

  527.  *
    528. 

  528.  * @param string $string Text that might have accent characters
    529. 

  529.  * @return string Filtered string with replaced "nice" characters.
    530. 

  530.  */
    531. 

  531. function remove_accents($string) {
    532. 

  532. 	if ( !preg_match('/[\x80-\xff]/', $string) )
    533. 

  533. 		return $string;
    534. 

  534. 

  535. 	if (seems_utf8($string)) {
    536. 

  536. 		$chars = array(
    537. 

  537. 		// Decompositions for Latin-1 Supplement
    538. 

  538. 		chr(195).chr(128) => 'A', chr(195).chr(129) => 'A',
    539. 

  539. 		chr(195).chr(130) => 'A', chr(195).chr(131) => 'A',
    540. 

  540. 		chr(195).chr(132) => 'A', chr(195).chr(133) => 'A',
    541. 

  541. 		chr(195).chr(135) => 'C', chr(195).chr(136) => 'E',
    542. 

  542. 		chr(195).chr(137) => 'E', chr(195).chr(138) => 'E',
    543. 

  543. 		chr(195).chr(139) => 'E', chr(195).chr(140) => 'I',
    544. 

  544. 		chr(195).chr(141) => 'I', chr(195).chr(142) => 'I',
    545. 

  545. 		chr(195).chr(143) => 'I', chr(195).chr(145) => 'N',
    546. 

  546. 		chr(195).chr(146) => 'O', chr(195).chr(147) => 'O',
    547. 

  547. 		chr(195).chr(148) => 'O', chr(195).chr(149) => 'O',
    548. 

  548. 		chr(195).chr(150) => 'O', chr(195).chr(153) => 'U',
    549. 

  549. 		chr(195).chr(154) => 'U', chr(195).chr(155) => 'U',
    550. 

  550. 		chr(195).chr(156) => 'U', chr(195).chr(157) => 'Y',
    551. 

  551. 		chr(195).chr(159) => 's', chr(195).chr(160) => 'a',
    552. 

  552. 		chr(195).chr(161) => 'a', chr(195).chr(162) => 'a',
    553. 

  553. 		chr(195).chr(163) => 'a', chr(195).chr(164) => 'a',
    554. 

  554. 		chr(195).chr(165) => 'a', chr(195).chr(167) => 'c',
    555. 

  555. 		chr(195).chr(168) => 'e', chr(195).chr(169) => 'e',
    556. 

  556. 		chr(195).chr(170) => 'e', chr(195).chr(171) => 'e',
    557. 

  557. 		chr(195).chr(172) => 'i', chr(195).chr(173) => 'i',
    558. 

  558. 		chr(195).chr(174) => 'i', chr(195).chr(175) => 'i',
    559. 

  559. 		chr(195).chr(177) => 'n', chr(195).chr(178) => 'o',
    560. 

  560. 		chr(195).chr(179) => 'o', chr(195).chr(180) => 'o',
    561. 

  561. 		chr(195).chr(181) => 'o', chr(195).chr(182) => 'o',
    562. 

  562. 		chr(195).chr(182) => 'o', chr(195).chr(185) => 'u',
    563. 

  563. 		chr(195).chr(186) => 'u', chr(195).chr(187) => 'u',
    564. 

  564. 		chr(195).chr(188) => 'u', chr(195).chr(189) => 'y',
    565. 

  565. 		chr(195).chr(191) => 'y',
    566. 

  566. 		// Decompositions for Latin Extended-A
    567. 

  567. 		chr(196).chr(128) => 'A', chr(196).chr(129) => 'a',
    568. 

  568. 		chr(196).chr(130) => 'A', chr(196).chr(131) => 'a',
    569. 

  569. 		chr(196).chr(132) => 'A', chr(196).chr(133) => 'a',
    570. 

  570. 		chr(196).chr(134) => 'C', chr(196).chr(135) => 'c',
    571. 

  571. 		chr(196).chr(136) => 'C', chr(196).chr(137) => 'c',
    572. 

  572. 		chr(196).chr(138) => 'C', chr(196).chr(139) => 'c',
    573. 

  573. 		chr(196).chr(140) => 'C', chr(196).chr(141) => 'c',
    574. 

  574. 		chr(196).chr(142) => 'D', chr(196).chr(143) => 'd',
    575. 

  575. 		chr(196).chr(144) => 'D', chr(196).chr(145) => 'd',
    576. 

  576. 		chr(196).chr(146) => 'E', chr(196).chr(147) => 'e',
    577. 

  577. 		chr(196).chr(148) => 'E', chr(196).chr(149) => 'e',
    578. 

  578. 		chr(196).chr(150) => 'E', chr(196).chr(151) => 'e',
    579. 

  579. 		chr(196).chr(152) => 'E', chr(196).chr(153) => 'e',
    580. 

  580. 		chr(196).chr(154) => 'E', chr(196).chr(155) => 'e',
    581. 

  581. 		chr(196).chr(156) => 'G', chr(196).chr(157) => 'g',
    582. 

  582. 		chr(196).chr(158) => 'G', chr(196).chr(159) => 'g',
    583. 

  583. 		chr(196).chr(160) => 'G', chr(196).chr(161) => 'g',
    584. 

  584. 		chr(196).chr(162) => 'G', chr(196).chr(163) => 'g',
    585. 

  585. 		chr(196).chr(164) => 'H', chr(196).chr(165) => 'h',
    586. 

  586. 		chr(196).chr(166) => 'H', chr(196).chr(167) => 'h',
    587. 

  587. 		chr(196).chr(168) => 'I', chr(196).chr(169) => 'i',
    588. 

  588. 		chr(196).chr(170) => 'I', chr(196).chr(171) => 'i',
    589. 

  589. 		chr(196).chr(172) => 'I', chr(196).chr(173) => 'i',
    590. 

  590. 		chr(196).chr(174) => 'I', chr(196).chr(175) => 'i',
    591. 

  591. 		chr(196).chr(176) => 'I', chr(196).chr(177) => 'i',
    592. 

  592. 		chr(196).chr(178) => 'IJ',chr(196).chr(179) => 'ij',
    593. 

  593. 		chr(196).chr(180) => 'J', chr(196).chr(181) => 'j',
    594. 

  594. 		chr(196).chr(182) => 'K', chr(196).chr(183) => 'k',
    595. 

  595. 		chr(196).chr(184) => 'k', chr(196).chr(185) => 'L',
    596. 

  596. 		chr(196).chr(186) => 'l', chr(196).chr(187) => 'L',
    597. 

  597. 		chr(196).chr(188) => 'l', chr(196).chr(189) => 'L',
    598. 

  598. 		chr(196).chr(190) => 'l', chr(196).chr(191) => 'L',
    599. 

  599. 		chr(197).chr(128) => 'l', chr(197).chr(129) => 'L',
    600. 

  600. 		chr(197).chr(130) => 'l', chr(197).chr(131) => 'N',
    601. 

  601. 		chr(197).chr(132) => 'n', chr(197).chr(133) => 'N',
    602. 

  602. 		chr(197).chr(134) => 'n', chr(197).chr(135) => 'N',
    603. 

  603. 		chr(197).chr(136) => 'n', chr(197).chr(137) => 'N',
    604. 

  604. 		chr(197).chr(138) => 'n', chr(197).chr(139) => 'N',
    605. 

  605. 		chr(197).chr(140) => 'O', chr(197).chr(141) => 'o',
    606. 

  606. 		chr(197).chr(142) => 'O', chr(197).chr(143) => 'o',
    607. 

  607. 		chr(197).chr(144) => 'O', chr(197).chr(145) => 'o',
    608. 

  608. 		chr(197).chr(146) => 'OE',chr(197).chr(147) => 'oe',
    609. 

  609. 		chr(197).chr(148) => 'R',chr(197).chr(149) => 'r',
    610. 

  610. 		chr(197).chr(150) => 'R',chr(197).chr(151) => 'r',
    611. 

  611. 		chr(197).chr(152) => 'R',chr(197).chr(153) => 'r',
    612. 

  612. 		chr(197).chr(154) => 'S',chr(197).chr(155) => 's',
    613. 

  613. 		chr(197).chr(156) => 'S',chr(197).chr(157) => 's',
    614. 

  614. 		chr(197).chr(158) => 'S',chr(197).chr(159) => 's',
    615. 

  615. 		chr(197).chr(160) => 'S', chr(197).chr(161) => 's',
    616. 

  616. 		chr(197).chr(162) => 'T', chr(197).chr(163) => 't',
    617. 

  617. 		chr(197).chr(164) => 'T', chr(197).chr(165) => 't',
    618. 

  618. 		chr(197).chr(166) => 'T', chr(197).chr(167) => 't',
    619. 

  619. 		chr(197).chr(168) => 'U', chr(197).chr(169) => 'u',
    620. 

  620. 		chr(197).chr(170) => 'U', chr(197).chr(171) => 'u',
    621. 

  621. 		chr(197).chr(172) => 'U', chr(197).chr(173) => 'u',
    622. 

  622. 		chr(197).chr(174) => 'U', chr(197).chr(175) => 'u',
    623. 

  623. 		chr(197).chr(176) => 'U', chr(197).chr(177) => 'u',
    624. 

  624. 		chr(197).chr(178) => 'U', chr(197).chr(179) => 'u',
    625. 

  625. 		chr(197).chr(180) => 'W', chr(197).chr(181) => 'w',
    626. 

  626. 		chr(197).chr(182) => 'Y', chr(197).chr(183) => 'y',
    627. 

  627. 		chr(197).chr(184) => 'Y', chr(197).chr(185) => 'Z',
    628. 

  628. 		chr(197).chr(186) => 'z', chr(197).chr(187) => 'Z',
    629. 

  629. 		chr(197).chr(188) => 'z', chr(197).chr(189) => 'Z',
    630. 

  630. 		chr(197).chr(190) => 'z', chr(197).chr(191) => 's',
    631. 

  631. 		// Euro Sign
    632. 

  632. 		chr(226).chr(130).chr(172) => 'E',
    633. 

  633. 		// GBP (Pound) Sign
    634. 

  634. 		chr(194).chr(163) => '');
    635. 

  635. 

  636. 		$string = strtr($string, $chars);
    637. 

  637. 	} else {
    638. 

  638. 		// Assume ISO-8859-1 if not UTF-8
    639. 

  639. 		$chars['in'] = chr(128).chr(131).chr(138).chr(142).chr(154).chr(158)
    640. 

  640. 			.chr(159).chr(162).chr(165).chr(181).chr(192).chr(193).chr(194)
    641. 

  641. 			.chr(195).chr(196).chr(197).chr(199).chr(200).chr(201).chr(202)
    642. 

  642. 			.chr(203).chr(204).chr(205).chr(206).chr(207).chr(209).chr(210)
    643. 

  643. 			.chr(211).chr(212).chr(213).chr(214).chr(216).chr(217).chr(218)
    644. 

  644. 			.chr(219).chr(220).chr(221).chr(224).chr(225).chr(226).chr(227)
    645. 

  645. 			.chr(228).chr(229).chr(231).chr(232).chr(233).chr(234).chr(235)
    646. 

  646. 			.chr(236).chr(237).chr(238).chr(239).chr(241).chr(242).chr(243)
    647. 

  647. 			.chr(244).chr(245).chr(246).chr(248).chr(249).chr(250).chr(251)
    648. 

  648. 			.chr(252).chr(253).chr(255);
    649. 

  649. 

  650. 		$chars['out'] = "EfSZszYcYuAAAAAACEEEEIIIINOOOOOOUUUUYaaaaaaceeeeiiiinoooooouuuuyy";
    651. 

  651. 

  652. 		$string = strtr($string, $chars['in'], $chars['out']);
    653. 

  653. 		$double_chars['in'] = array(chr(140), chr(156), chr(198), chr(208), chr(222), chr(223), chr(230), chr(240), chr(254));
    654. 

  654. 		$double_chars['out'] = array('OE', 'oe', 'AE', 'DH', 'TH', 'ss', 'ae', 'dh', 'th');
    655. 

  655. 		$string = str_replace($double_chars['in'], $double_chars['out'], $string);
    656. 

  656. 	}
    657. 

  657. 

  658. 	return $string;
    659. 

  659. }
    660. 

  660. 

  661. /**
    662. 

  662.  * Sanitizes a filename replacing whitespace with dashes
    663. 

  663.  *
    664. 

  664.  * Removes special characters that are illegal in filenames on certain
    665. 

  665.  * operating systems and special characters requiring special escaping
    666. 

  666.  * to manipulate at the command line. Replaces spaces and consecutive
    667. 

  667.  * dashes with a single dash. Trim period, dash and underscore from beginning
    668. 

  668.  * and end of filename.
    669. 

  669.  *
    670. 

  670.  * @since 2.1.0
    671. 

  671.  *
    672. 

  672.  * @param string $filename The filename to be sanitized
    673. 

  673.  * @return string The sanitized filename
    674. 

  674.  */
    675. 

  675. function sanitize_file_name( $filename ) {
    676. 

  676. 	$filename_raw = $filename;
    677. 

  677. 	$special_chars = array("?", "[", "]", "/", "\\", "=", "<", ">", ":", ";", ",", "'", "\"", "&", "$", "#", "*", "(", ")", "|", "~", "`", "!", "{", "}", chr(0));
    678. 

  678. 	$special_chars = apply_filters('sanitize_file_name_chars', $special_chars, $filename_raw);
    679. 

  679. 	$filename = str_replace($special_chars, '', $filename);
    680. 

  680. 	$filename = preg_replace('/[\s-]+/', '-', $filename);
    681. 

  681. 	$filename = trim($filename, '.-_');
    682. 

  682. 

  683. 	// Split the filename into a base and extension[s]
    684. 

  684. 	$parts = explode('.', $filename);
    685. 

  685. 

  686. 	// Return if only one extension
    687. 

  687. 	if ( count($parts) <= 2 )
    688. 

  688. 		return apply_filters('sanitize_file_name', $filename, $filename_raw);
    689. 

  689. 

  690. 	// Process multiple extensions
    691. 

  691. 	$filename = array_shift($parts);
    692. 

  692. 	$extension = array_pop($parts);
    693. 

  693. 	$mimes = get_allowed_mime_types();
    694. 

  694. 

  695. 	// Loop over any intermediate extensions.  Munge them with a trailing underscore if they are a 2 - 5 character
    696. 

  696. 	// long alpha string not in the extension whitelist.
    697. 

  697. 	foreach ( (array) $parts as $part) {
    698. 

  698. 		$filename .= '.' . $part;
    699. 

  699. 

  700. 		if ( preg_match("/^[a-zA-Z]{2,5}\d?$/", $part) ) {
    701. 

  701. 			$allowed = false;
    702. 

  702. 			foreach ( $mimes as $ext_preg => $mime_match ) {
    703. 

  703. 				$ext_preg = '!(^' . $ext_preg . ')$!i';
    704. 

  704. 				if ( preg_match( $ext_preg, $part ) ) {
    705. 

  705. 					$allowed = true;
    706. 

  706. 					break;
    707. 

  707. 				}
    708. 

  708. 			}
    709. 

  709. 			if ( !$allowed )
    710. 

  710. 				$filename .= '_';
    711. 

  711. 		}
    712. 

  712. 	}
    713. 

  713. 	$filename .= '.' . $extension;
    714. 

  714. 

  715. 	return apply_filters('sanitize_file_name', $filename, $filename_raw);
    716. 

  716. }
    717. 

  717. 

  718. /**
    719. 

  719.  * Sanitize username stripping out unsafe characters.
    720. 

  720.  *
    721. 

  721.  * If $strict is true, only alphanumeric characters (as well as _, space, ., -,
    722. 

  722.  * @) are returned.
    723. 

  723.  * Removes tags, octets, entities, and if strict is enabled, will remove all
    724. 

  724.  * non-ASCII characters. After sanitizing, it passes the username, raw username
    725. 

  725.  * (the username in the parameter), and the strict parameter as parameters for
    726. 

  726.  * the filter.
    727. 

  727.  *
    728. 

  728.  * @since 2.0.0
    729. 

  729.  * @uses apply_filters() Calls 'sanitize_user' hook on username, raw username,
    730. 

  730.  *		and $strict parameter.
    731. 

  731.  *
    732. 

  732.  * @param string $username The username to be sanitized.
    733. 

  733.  * @param bool $strict If set limits $username to specific characters. Default false.
    734. 

  734.  * @return string The sanitized username, after passing through filters.
    735. 

  735.  */
    736. 

  736. function sanitize_user( $username, $strict = false ) {
    737. 

  737. 	$raw_username = $username;
    738. 

  738. 	$username = wp_strip_all_tags( $username );
    739. 

  739. 	$username = remove_accents( $username );
    740. 

  740. 	// Kill octets
    741. 

  741. 	$username = preg_replace( '|%([a-fA-F0-9][a-fA-F0-9])|', '', $username );
    742. 

  742. 	$username = preg_replace( '/&.+?;/', '', $username ); // Kill entities
    743. 

  743. 

  744. 	// If strict, reduce to ASCII for max portability.
    745. 

  745. 	if ( $strict )
    746. 

  746. 		$username = preg_replace( '|[^a-z0-9 _.\-@]|i', '', $username );
    747. 

  747. 

  748. 	// Consolidate contiguous whitespace
    749. 

  749. 	$username = preg_replace( '|\s+|', ' ', $username );
    750. 

  750. 

  751. 	return apply_filters( 'sanitize_user', $username, $raw_username, $strict );
    752. 

  752. }
    753. 

  753. 

  754. /**
    755. 

  755.  * Sanitize a string key.
    756. 

  756.  *
    757. 

  757.  * Keys are used as internal identifiers. They should be lowercase ASCII.  Dashes and underscores are allowed.
    758. 

  758.  *
    759. 

  759.  * @since 3.0.0
    760. 

  760.  *
    761. 

  761.  * @param string $key String key
    762. 

  762.  * @return string Sanitized key
    763. 

  763.  */
    764. 

  764. function sanitize_key( $key ) {
    765. 

  765. 	$raw_key = $key;
    766. 

  766. 	$key = wp_strip_all_tags($key);
    767. 

  767. 	// Kill octets
    768. 

  768. 	$key = preg_replace('|%([a-fA-F0-9][a-fA-F0-9])|', '', $key);
    769. 

  769. 	$key = preg_replace('/&.+?;/', '', $key); // Kill entities
    770. 

  770. 

  771. 	$key = preg_replace('|[^a-z0-9 _.\-@]|i', '', $key);
    772. 

  772. 

  773. 	// Consolidate contiguous whitespace
    774. 

  774. 	$key = preg_replace('|\s+|', ' ', $key);
    775. 

  775. 

  776. 	return apply_filters('sanitize_key', $key, $raw_key);
    777. 

  777. }
    778. 

  778. 

  779. /**
    780. 

  780.  * Sanitizes title or use fallback title.
    781. 

  781.  *
    782. 

  782.  * Specifically, HTML and PHP tags are stripped. Further actions can be added
    783. 

  783.  * via the plugin API. If $title is empty and $fallback_title is set, the latter
    784. 

  784.  * will be used.
    785. 

  785.  *
    786. 

  786.  * @since 1.0.0
    787. 

  787.  *
    788. 

  788.  * @param string $title The string to be sanitized.
    789. 

  789.  * @param string $fallback_title Optional. A title to use if $title is empty.
    790. 

  790.  * @return string The sanitized string.
    791. 

  791.  */
    792. 

  792. function sanitize_title($title, $fallback_title = '') {
    793. 

  793. 	$raw_title = $title;
    794. 

  794. 	$title = strip_tags($title);
    795. 

  795. 	$title = apply_filters('sanitize_title', $title, $raw_title);
    796. 

  796. 

  797. 	if ( '' === $title || false === $title )
    798. 

  798. 		$title = $fallback_title;
    799. 

  799. 

  800. 	return $title;
    801. 

  801. }
    802. 

  802. 

  803. /**
    804. 

  804.  * Sanitizes title, replacing whitespace with dashes.
    805. 

  805.  *
    806. 

  806.  * Limits the output to alphanumeric characters, underscore (_) and dash (-).
    807. 

  807.  * Whitespace becomes a dash.
    808. 

  808.  *
    809. 

  809.  * @since 1.2.0
    810. 

  810.  *
    811. 

  811.  * @param string $title The title to be sanitized.
    812. 

  812.  * @return string The sanitized title.
    813. 

  813.  */
    814. 

  814. function sanitize_title_with_dashes($title) {
    815. 

  815. 	$title = strip_tags($title);
    816. 

  816. 	// Preserve escaped octets.
    817. 

  817. 	$title = preg_replace('|%([a-fA-F0-9][a-fA-F0-9])|', '---$1---', $title);
    818. 

  818. 	// Remove percent signs that are not part of an octet.
    819. 

  819. 	$title = str_replace('%', '', $title);
    820. 

  820. 	// Restore octets.
    821. 

  821. 	$title = preg_replace('|---([a-fA-F0-9][a-fA-F0-9])---|', '%$1', $title);
    822. 

  822. 

  823. 	$title = remove_accents($title);
    824. 

  824. 	if (seems_utf8($title)) {
    825. 

  825. 		if (function_exists('mb_strtolower')) {
    826. 

  826. 			$title = mb_strtolower($title, 'UTF-8');
    827. 

  827. 		}
    828. 

  828. 		$title = utf8_uri_encode($title, 200);
    829. 

  829. 	}
    830. 

  830. 

  831. 	$title = strtolower($title);
    832. 

  832. 	$title = preg_replace('/&.+?;/', '', $title); // kill entities
    833. 

  833. 	$title = str_replace('.', '-', $title);
    834. 

  834. 	$title = preg_replace('/[^%a-z0-9 _-]/', '', $title);
    835. 

  835. 	$title = preg_replace('/\s+/', '-', $title);
    836. 

  836. 	$title = preg_replace('|-+|', '-', $title);
    837. 

  837. 	$title = trim($title, '-');
    838. 

  838. 

  839. 	return $title;
    840. 

  840. }
    841. 

  841. 

  842. /**
    843. 

  843.  * Ensures a string is a valid SQL order by clause.
    844. 

  844.  *
    845. 

  845.  * Accepts one or more columns, with or without ASC/DESC, and also accepts
    846. 

  846.  * RAND().
    847. 

  847.  *
    848. 

  848.  * @since 2.5.1
    849. 

  849.  *
    850. 

  850.  * @param string $orderby Order by string to be checked.
    851. 

  851.  * @return string|false Returns the order by clause if it is a match, false otherwise.
    852. 

  852.  */
    853. 

  853. function sanitize_sql_orderby( $orderby ){
    854. 

  854. 	preg_match('/^\s*([a-z0-9_]+(\s+(ASC|DESC))?(\s*,\s*|\s*$))+|^\s*RAND\(\s*\)\s*$/i', $orderby, $obmatches);
    855. 

  855. 	if ( !$obmatches )
    856. 

  856. 		return false;
    857. 

  857. 	return $orderby;
    858. 

  858. }
    859. 

  859. 

  860. /**
    861. 

  861.  * Santizes a html classname to ensure it only contains valid characters
    862. 

  862.  *
    863. 

  863.  * Strips the string down to A-Z,a-z,0-9,'-' if this results in an empty
    864. 

  864.  * string then it will return the alternative value supplied.
    865. 

  865.  *
    866. 

  866.  * @todo Expand to support the full range of CDATA that a class attribute can contain.
    867. 

  867.  *
    868. 

  868.  * @since 2.8.0
    869. 

  869.  *
    870. 

  870.  * @param string $class The classname to be sanitized
    871. 

  871.  * @param string $fallback Optional. The value to return if the sanitization end's up as an empty string.
    872. 

  872.  * 	Defaults to an empty string.
    873. 

  873.  * @return string The sanitized value
    874. 

  874.  */
    875. 

  875. function sanitize_html_class( $class, $fallback = '' ) {
    876. 

  876. 	//Strip out any % encoded octets
    877. 

  877. 	$sanitized = preg_replace('|%[a-fA-F0-9][a-fA-F0-9]|', '', $class);
    878. 

  878. 

  879. 	//Limit to A-Z,a-z,0-9,'-'
    880. 

  880. 	$sanitized = preg_replace('/[^A-Za-z0-9-]/', '', $sanitized);
    881. 

  881. 

  882. 	if ( '' == $sanitized )
    883. 

  883. 		$sanitized = $fallback;
    884. 

  884. 

  885. 	return apply_filters( 'sanitize_html_class', $sanitized, $class, $fallback );
    886. 

  886. }
    887. 

  887. 

  888. /**
    889. 

  889.  * Converts a number of characters from a string.
    890. 

  890.  *
    891. 

  891.  * Metadata tags <<title>> and <<category>> are removed, <<br>> and <<hr>> are
    892. 

  892.  * converted into correct XHTML and Unicode characters are converted to the
    893. 

  893.  * valid range.
    894. 

  894.  *
    895. 

  895.  * @since 0.71
    896. 

  896.  *
    897. 

  897.  * @param string $content String of characters to be converted.
    898. 

  898.  * @param string $deprecated Not used.
    899. 

  899.  * @return string Converted string.
    900. 

  900.  */
    901. 

  901. function convert_chars($content, $deprecated = '') {
    902. 

  902. 	if ( !empty( $deprecated ) )
    903. 

  903. 		_deprecated_argument( __FUNCTION__, '0.71' );
    904. 

  904. 

  905. 	// Translation of invalid Unicode references range to valid range
    906. 

  906. 	$wp_htmltranswinuni = array(
    907. 

  907. 	'&#128;' => '&#8364;', // the Euro sign
    908. 

  908. 	'&#129;' => '',
    909. 

  909. 	'&#130;' => '&#8218;', // these are Windows CP1252 specific characters
    910. 

  910. 	'&#131;' => '&#402;',  // they would look weird on non-Windows browsers
    911. 

  911. 	'&#132;' => '&#8222;',
    912. 

  912. 	'&#133;' => '&#8230;',
    913. 

  913. 	'&#134;' => '&#8224;',
    914. 

  914. 	'&#135;' => '&#8225;',
    915. 

  915. 	'&#136;' => '&#710;',
    916. 

  916. 	'&#137;' => '&#8240;',
    917. 

  917. 	'&#138;' => '&#352;',
    918. 

  918. 	'&#139;' => '&#8249;',
    919. 

  919. 	'&#140;' => '&#338;',
    920. 

  920. 	'&#141;' => '',
    921. 

  921. 	'&#142;' => '&#382;',
    922. 

  922. 	'&#143;' => '',
    923. 

  923. 	'&#144;' => '',
    924. 

  924. 	'&#145;' => '&#8216;',
    925. 

  925. 	'&#146;' => '&#8217;',
    926. 

  926. 	'&#147;' => '&#8220;',
    927. 

  927. 	'&#148;' => '&#8221;',
    928. 

  928. 	'&#149;' => '&#8226;',
    929. 

  929. 	'&#150;' => '&#8211;',
    930. 

  930. 	'&#151;' => '&#8212;',
    931. 

  931. 	'&#152;' => '&#732;',
    932. 

  932. 	'&#153;' => '&#8482;',
    933. 

  933. 	'&#154;' => '&#353;',
    934. 

  934. 	'&#155;' => '&#8250;',
    935. 

  935. 	'&#156;' => '&#339;',
    936. 

  936. 	'&#157;' => '',
    937. 

  937. 	'&#158;' => '',
    938. 

  938. 	'&#159;' => '&#376;'
    939. 

  939. 	);
    940. 

  940. 

  941. 	// Remove metadata tags
    942. 

  942. 	$content = preg_replace('/<title>(.+?)<\/title>/','',$content);
    943. 

  943. 	$content = preg_replace('/<category>(.+?)<\/category>/','',$content);
    944. 

  944. 

  945. 	// Converts lone & characters into &#38; (a.k.a. &amp;)
    946. 

  946. 	$content = preg_replace('/&([^#])(?![a-z1-4]{1,8};)/i', '&#038;$1', $content);
    947. 

  947. 

  948. 	// Fix Word pasting
    949. 

  949. 	$content = strtr($content, $wp_htmltranswinuni);
    950. 

  950. 

  951. 	// Just a little XHTML help
    952. 

  952. 	$content = str_replace('<br>', '<br />', $content);
    953. 

  953. 	$content = str_replace('<hr>', '<hr />', $content);
    954. 

  954. 

  955. 	return $content;
    956. 

  956. }
    957. 

  957. 

  958. /**
    959. 

  959.  * Will only balance the tags if forced to and the option is set to balance tags.
    960. 

  960.  *
    961. 

  961.  * The option 'use_balanceTags' is used for whether the tags will be balanced.
    962. 

  962.  * Both the $force parameter and 'use_balanceTags' option will have to be true
    963. 

  963.  * before the tags will be balanced.
    964. 

  964.  *
    965. 

  965.  * @since 0.71
    966. 

  966.  *
    967. 

  967.  * @param string $text Text to be balanced
    968. 

  968.  * @param bool $force Forces balancing, ignoring the value of the option. Default false.
    969. 

  969.  * @return string Balanced text
    970. 

  970.  */
    971. 

  971. function balanceTags( $text, $force = false ) {
    972. 

  972. 	if ( !$force && get_option('use_balanceTags') == 0 )
    973. 

  973. 		return $text;
    974. 

  974. 	return force_balance_tags( $text );
    975. 

  975. }
    976. 

  976. 

  977. /**
    978. 

  978.  * Balances tags of string using a modified stack.
    979. 

  979.  *
    980. 

  980.  * @since 2.0.4
    981. 

  981.  *
    982. 

  982.  * @author Leonard Lin <leonard@acm.org>
    983. 

  983.  * @license GPL v2.0
    984. 

  984.  * @copyright November 4, 2001
    985. 

  985.  * @version 1.1
    986. 

  986.  * @todo Make better - change loop condition to $text in 1.2
    987. 

  987.  * @internal Modified by Scott Reilly (coffee2code) 02 Aug 2004
    988. 

  988.  *		1.1  Fixed handling of append/stack pop order of end text
    989. 

  989.  *			 Added Cleaning Hooks
    990. 

  990.  *		1.0  First Version
    991. 

  991.  *
    992. 

  992.  * @param string $text Text to be balanced.
    993. 

  993.  * @return string Balanced text.
    994. 

  994.  */
    995. 

  995. function force_balance_tags( $text ) {
    996. 

  996. 	$tagstack = array();
    997. 

  997. 	$stacksize = 0;
    998. 

  998. 	$tagqueue = '';
    999. 

  999. 	$newtext = '';
    1000. 

  1000. 	$single_tags = array('br', 'hr', 'img', 'input'); // Known single-entity/self-closing tags
    1001. 

  1001. 	$nestable_tags = array('blockquote', 'div', 'span'); // Tags that can be immediately nested within themselves
    1002. 

  1002. 

  1003. 	// WP bug fix for comments - in case you REALLY meant to type '< !--'
    1004. 

  1004. 	$text = str_replace('< !--', '<    !--', $text);
    1005. 

  1005. 	// WP bug fix for LOVE <3 (and other situations with '<' before a number)
    1006. 

  1006. 	$text = preg_replace('#<([0-9]{1})#', '&lt;$1', $text);
    1007. 

  1007. 

  1008. 	while ( preg_match("/<(\/?[\w:]*)\s*([^>]*)>/", $text, $regex) ) {
    1009. 

  1009. 		$newtext .= $tagqueue;
    1010. 

  1010. 

  1011. 		$i = strpos($text, $regex[0]);
    1012. 

  1012. 		$l = strlen($regex[0]);
    1013. 

  1013. 

  1014. 		// clear the shifter
    1015. 

  1015. 		$tagqueue = '';
    1016. 

  1016. 		// Pop or Push
    1017. 

  1017. 		if ( isset($regex[1][0]) && '/' == $regex[1][0] ) { // End Tag
    1018. 

  1018. 			$tag = strtolower(substr($regex[1],1));
    1019. 

  1019. 			// if too many closing tags
    1020. 

  1020. 			if( $stacksize <= 0 ) {
    1021. 

  1021. 				$tag = '';
    1022. 

  1022. 				// or close to be safe $tag = '/' . $tag;
    1023. 

  1023. 			}
    1024. 

  1024. 			// if stacktop value = tag close value then pop
    1025. 

  1025. 			else if ( $tagstack[$stacksize - 1] == $tag ) { // found closing tag
    1026. 

  1026. 				$tag = '</' . $tag . '>'; // Close Tag
    1027. 

  1027. 				// Pop
    1028. 

  1028. 				array_pop( $tagstack );
    1029. 

  1029. 				$stacksize--;
    1030. 

  1030. 			} else { // closing tag not at top, search for it
    1031. 

  1031. 				for ( $j = $stacksize-1; $j >= 0; $j-- ) {
    1032. 

  1032. 					if ( $tagstack[$j] == $tag ) {
    1033. 

  1033. 					// add tag to tagqueue
    1034. 

  1034. 						for ( $k = $stacksize-1; $k >= $j; $k--) {
    1035. 

  1035. 							$tagqueue .= '</' . array_pop( $tagstack ) . '>';
    1036. 

  1036. 							$stacksize--;
    1037. 

  1037. 						}
    1038. 

  1038. 						break;
    1039. 

  1039. 					}
    1040. 

  1040. 				}
    1041. 

  1041. 				$tag = '';
    1042. 

  1042. 			}
    1043. 

  1043. 		} else { // Begin Tag
    1044. 

  1044. 			$tag = strtolower($regex[1]);
    1045. 

  1045. 

  1046. 			// Tag Cleaning
    1047. 

  1047. 

  1048. 			// If self-closing or '', don't do anything.
    1049. 

  1049. 			if ( substr($regex[2],-1) == '/' || $tag == '' ) {
    1050. 

  1050. 				// do nothing
    1051. 

  1051. 			}
    1052. 

  1052. 			// ElseIf it's a known single-entity tag but it doesn't close itself, do so
    1053. 

  1053. 			elseif ( in_array($tag, $single_tags) ) {
    1054. 

  1054. 				$regex[2] .= '/';
    1055. 

  1055. 			} else {	// Push the tag onto the stack
    1056. 

  1056. 				// If the top of the stack is the same as the tag we want to push, close previous tag
    1057. 

  1057. 				if ( $stacksize > 0 && !in_array($tag, $nestable_tags) && $tagstack[$stacksize - 1] == $tag ) {
    1058. 

  1058. 					$tagqueue = '</' . array_pop ($tagstack) . '>';
    1059. 

  1059. 					$stacksize--;
    1060. 

  1060. 				}
    1061. 

  1061. 				$stacksize = array_push ($tagstack, $tag);
    1062. 

  1062. 			}
    1063. 

  1063. 

  1064. 			// Attributes
    1065. 

  1065. 			$attributes = $regex[2];
    1066. 

  1066. 			if( !empty($attributes) )
    1067. 

  1067. 				$attributes = ' '.$attributes;
    1068. 

  1068. 

  1069. 			$tag = '<' . $tag . $attributes . '>';
    1070. 

  1070. 			//If already queuing a close tag, then put this tag on, too
    1071. 

  1071. 			if ( !empty($tagqueue) ) {
    1072. 

  1072. 				$tagqueue .= $tag;
    1073. 

  1073. 				$tag = '';
    1074. 

  1074. 			}
    1075. 

  1075. 		}
    1076. 

  1076. 		$newtext .= substr($text, 0, $i) . $tag;
    1077. 

  1077. 		$text = substr($text, $i + $l);
    1078. 

  1078. 	}
    1079. 

  1079. 

  1080. 	// Clear Tag Queue
    1081. 

  1081. 	$newtext .= $tagqueue;
    1082. 

  1082. 

  1083. 	// Add Remaining text
    1084. 

  1084. 	$newtext .= $text;
    1085. 

  1085. 

  1086. 	// Empty Stack
    1087. 

  1087. 	while( $x = array_pop($tagstack) )
    1088. 

  1088. 		$newtext .= '</' . $x . '>'; // Add remaining tags to close
    1089. 

  1089. 

  1090. 	// WP fix for the bug with HTML comments
    1091. 

  1091. 	$newtext = str_replace("< !--","<!--",$newtext);
    1092. 

  1092. 	$newtext = str_replace("<    !--","< !--",$newtext);
    1093. 

  1093. 

  1094. 	return $newtext;
    1095. 

  1095. }
    1096. 

  1096. 

  1097. /**
    1098. 

  1098.  * Acts on text which is about to be edited.
    1099. 

  1099.  *
    1100. 

  1100.  * Unless $richedit is set, it is simply a holder for the 'format_to_edit'
    1101. 

  1101.  * filter. If $richedit is set true htmlspecialchars() will be run on the
    1102. 

  1102.  * content, converting special characters to HTMl entities.
    1103. 

  1103.  *
    1104. 

  1104.  * @since 0.71
    1105. 

  1105.  *
    1106. 

  1106.  * @param string $content The text about to be edited.
    1107. 

  1107.  * @param bool $richedit Whether the $content should pass through htmlspecialchars(). Default false.
    1108. 

  1108.  * @return string The text after the filter (and possibly htmlspecialchars()) has been run.
    1109. 

  1109.  */
    1110. 

  1110. function format_to_edit($content, $richedit = false) {
    1111. 

  1111. 	$content = apply_filters('format_to_edit', $content);
    1112. 

  1112. 	if (! $richedit )
    1113. 

  1113. 		$content = htmlspecialchars($content);
    1114. 

  1114. 	return $content;
    1115. 

  1115. }
    1116. 

  1116. 

  1117. /**
    1118. 

  1118.  * Holder for the 'format_to_post' filter.
    1119. 

  1119.  *
    1120. 

  1120.  * @since 0.71
    1121. 

  1121.  *
    1122. 

  1122.  * @param string $content The text to pass through the filter.
    1123. 

  1123.  * @return string Text returned from the 'format_to_post' filter.
    1124. 

  1124.  */
    1125. 

  1125. function format_to_post($content) {
    1126. 

  1126. 	$content = apply_filters('format_to_post', $content);
    1127. 

  1127. 	return $content;
    1128. 

  1128. }
    1129. 

  1129. 

  1130. /**
    1131. 

  1131.  * Add leading zeros when necessary.
    1132. 

  1132.  *
    1133. 

  1133.  * If you set the threshold to '4' and the number is '10', then you will get
    1134. 

  1134.  * back '0010'. If you set the number to '4' and the number is '5000', then you
    1135. 

  1135.  * will get back '5000'.
    1136. 

  1136.  *
    1137. 

  1137.  * Uses sprintf to append the amount of zeros based on the $threshold parameter
    1138. 

  1138.  * and the size of the number. If the number is large enough, then no zeros will
    1139. 

  1139.  * be appended.
    1140. 

  1140.  *
    1141. 

  1141.  * @since 0.71
    1142. 

  1142.  *
    1143. 

  1143.  * @param mixed $number Number to append zeros to if not greater than threshold.
    1144. 

  1144.  * @param int $threshold Digit places number needs to be to not have zeros added.
    1145. 

  1145.  * @return string Adds leading zeros to number if needed.
    1146. 

  1146.  */
    1147. 

  1147. function zeroise($number, $threshold) {
    1148. 

  1148. 	return sprintf('%0'.$threshold.'s', $number);
    1149. 

  1149. }
    1150. 

  1150. 

  1151. /**
    1152. 

  1152.  * Adds backslashes before letters and before a number at the start of a string.
    1153. 

  1153.  *
    1154. 

  1154.  * @since 0.71
    1155. 

  1155.  *
    1156. 

  1156.  * @param string $string Value to which backslashes will be added.
    1157. 

  1157.  * @return string String with backslashes inserted.
    1158. 

  1158.  */
    1159. 

  1159. function backslashit($string) {
    1160. 

  1160. 	$string = preg_replace('/^([0-9])/', '\\\\\\\\\1', $string);
    1161. 

  1161. 	$string = preg_replace('/([a-z])/i', '\\\\\1', $string);
    1162. 

  1162. 	return $string;
    1163. 

  1163. }
    1164. 

  1164. 

  1165. /**
    1166. 

  1166.  * Appends a trailing slash.
    1167. 

  1167.  *
    1168. 

  1168.  * Will remove trailing slash if it exists already before adding a trailing
    1169. 

  1169.  * slash. This prevents double slashing a string or path.
    1170. 

  1170.  *
    1171. 

  1171.  * The primary use of this is for paths and thus should be used for paths. It is
    1172. 

  1172.  * not restricted to paths and offers no specific path support.
    1173. 

  1173.  *
    1174. 

  1174.  * @since 1.2.0
    1175. 

  1175.  * @uses untrailingslashit() Unslashes string if it was slashed already.
    1176. 

  1176.  *
    1177. 

  1177.  * @param string $string What to add the trailing slash to.
    1178. 

  1178.  * @return string String with trailing slash added.
    1179. 

  1179.  */
    1180. 

  1180. function trailingslashit($string) {
    1181. 

  1181. 	return untrailingslashit($string) . '/';
    1182. 

  1182. }
    1183. 

  1183. 

  1184. /**
    1185. 

  1185.  * Removes trailing slash if it exists.
    1186. 

  1186.  *
    1187. 

  1187.  * The primary use of this is for paths and thus should be used for paths. It is
    1188. 

  1188.  * not restricted to paths and offers no specific path support.
    1189. 

  1189.  *
    1190. 

  1190.  * @since 2.2.0
    1191. 

  1191.  *
    1192. 

  1192.  * @param string $string What to remove the trailing slash from.
    1193. 

  1193.  * @return string String without the trailing slash.
    1194. 

  1194.  */
    1195. 

  1195. function untrailingslashit($string) {
    1196. 

  1196. 	return rtrim($string, '/');
    1197. 

  1197. }
    1198. 

  1198. 

  1199. /**
    1200. 

  1200.  * Adds slashes to escape strings.
    1201. 

  1201.  *
    1202. 

  1202.  * Slashes will first be removed if magic_quotes_gpc is set, see {@link
    1203. 

  1203.  * http://www.php.net/magic_quotes} for more details.
    1204. 

  1204.  *
    1205. 

  1205.  * @since 0.71
    1206. 

  1206.  *
    1207. 

  1207.  * @param string $gpc The string returned from HTTP request data.
    1208. 

  1208.  * @return string Returns a string escaped with slashes.
    1209. 

  1209.  */
    1210. 

  1210. function addslashes_gpc($gpc) {
    1211. 

  1211. 	if ( get_magic_quotes_gpc() )
    1212. 

  1212. 		$gpc = stripslashes($gpc);
    1213. 

  1213. 

  1214. 	return esc_sql($gpc);
    1215. 

  1215. }
    1216. 

  1216. 

  1217. /**
    1218. 

  1218.  * Navigates through an array and removes slashes from the values.
    1219. 

  1219.  *
    1220. 

  1220.  * If an array is passed, the array_map() function causes a callback to pass the
    1221. 

  1221.  * value back to the function. The slashes from this value will removed.
    1222. 

  1222.  *
    1223. 

  1223.  * @since 2.0.0
    1224. 

  1224.  *
    1225. 

  1225.  * @param array|string $value The array or string to be striped.
    1226. 

  1226.  * @return array|string Stripped array (or string in the callback).
    1227. 

  1227.  */
    1228. 

  1228. function stripslashes_deep($value) {
    1229. 

  1229. 	if ( is_array($value) ) {
    1230. 

  1230. 		$value = array_map('stripslashes_deep', $value);
    1231. 

  1231. 	} elseif ( is_object($value) ) {
    1232. 

  1232. 		$vars = get_object_vars( $value );
    1233. 

  1233. 		foreach ($vars as $key=>$data) {
    1234. 

  1234. 			$value->{$key} = stripslashes_deep( $data );
    1235. 

  1235. 		}
    1236. 

  1236. 	} else {
    1237. 

  1237. 		$value = stripslashes($value);
    1238. 

  1238. 	}
    1239. 

  1239. 

  1240. 	return $value;
    1241. 

  1241. }
    1242. 

  1242. 

  1243. /**
    1244. 

  1244.  * Navigates through an array and encodes the values to be used in a URL.
    1245. 

  1245.  *
    1246. 

  1246.  * Uses a callback to pass the value of the array back to the function as a
    1247. 

  1247.  * string.
    1248. 

  1248.  *
    1249. 

  1249.  * @since 2.2.0
    1250. 

  1250.  *
    1251. 

  1251.  * @param array|string $value The array or string to be encoded.
    1252. 

  1252.  * @return array|string $value The encoded array (or string from the callback).
    1253. 

  1253.  */
    1254. 

  1254. function urlencode_deep($value) {
    1255. 

  1255. 	$value = is_array($value) ? array_map('urlencode_deep', $value) : urlencode($value);
    1256. 

  1256. 	return $value;
    1257. 

  1257. }
    1258. 

  1258. 

  1259. /**
    1260. 

  1260.  * Converts email addresses characters to HTML entities to block spam bots.
    1261. 

  1261.  *
    1262. 

  1262.  * @since 0.71
    1263. 

  1263.  *
    1264. 

  1264.  * @param string $emailaddy Email address.
    1265. 

  1265.  * @param int $mailto Optional. Range from 0 to 1. Used for encoding.
    1266. 

  1266.  * @return string Converted email address.
    1267. 

  1267.  */
    1268. 

  1268. function antispambot($emailaddy, $mailto=0) {
    1269. 

  1269. 	$emailNOSPAMaddy = '';
    1270. 

  1270. 	srand ((float) microtime() * 1000000);
    1271. 

  1271. 	for ($i = 0; $i < strlen($emailaddy); $i = $i + 1) {
    1272. 

  1272. 		$j = floor(rand(0, 1+$mailto));
    1273. 

  1273. 		if ($j==0) {
    1274. 

  1274. 			$emailNOSPAMaddy .= '&#'.ord(substr($emailaddy,$i,1)).';';
    1275. 

  1275. 		} elseif ($j==1) {
    1276. 

  1276. 			$emailNOSPAMaddy .= substr($emailaddy,$i,1);
    1277. 

  1277. 		} elseif ($j==2) {
    1278. 

  1278. 			$emailNOSPAMaddy .= '%'.zeroise(dechex(ord(substr($emailaddy, $i, 1))), 2);
    1279. 

  1279. 		}
    1280. 

  1280. 	}
    1281. 

  1281. 	$emailNOSPAMaddy = str_replace('@','&#64;',$emailNOSPAMaddy);
    1282. 

  1282. 	return $emailNOSPAMaddy;
    1283. 

  1283. }
    1284. 

  1284. 

  1285. /**
    1286. 

  1286.  * Callback to convert URI match to HTML A element.
    1287. 

  1287.  *
    1288. 

  1288.  * This function was backported from 2.5.0 to 2.3.2. Regex callback for {@link
    1289. 

  1289.  * make_clickable()}.
    1290. 

  1290.  *
    1291. 

  1291.  * @since 2.3.2
    1292. 

  1292.  * @access private
    1293. 

  1293.  *
    1294. 

  1294.  * @param array $matches Single Regex Match.
    1295. 

  1295.  * @return string HTML A element with URI address.
    1296. 

  1296.  */
    1297. 

  1297. function _make_url_clickable_cb($matches) {
    1298. 

  1298. 	$url = $matches[2];
    1299. 

  1299. 

  1300. 	$url = esc_url($url);
    1301. 

  1301. 	if ( empty($url) )
    1302. 

  1302. 		return $matches[0];
    1303. 

  1303. 

  1304. 	return $matches[1] . "<a href=\"$url\" rel=\"nofollow\">$url</a>";
    1305. 

  1305. }
    1306. 

  1306. 

  1307. /**
    1308. 

  1308.  * Callback to convert URL match to HTML A element.
    1309. 

  1309.  *
    1310. 

  1310.  * This function was backported from 2.5.0 to 2.3.2. Regex callback for {@link
    1311. 

  1311.  * make_clickable()}.
    1312. 

  1312.  *
    1313. 

  1313.  * @since 2.3.2
    1314. 

  1314.  * @access private
    1315. 

  1315.  *
    1316. 

  1316.  * @param array $matches Single Regex Match.
    1317. 

  1317.  * @return string HTML A element with URL address.
    1318. 

  1318.  */
    1319. 

  1319. function _make_web_ftp_clickable_cb($matches) {
    1320. 

  1320. 	$ret = '';
    1321. 

  1321. 	$dest = $matches[2];
    1322. 

  1322. 	$dest = 'http://' . $dest;
    1323. 

  1323. 	$dest = esc_url($dest);
    1324. 

  1324. 	if ( empty($dest) )
    1325. 

  1325. 		return $matches[0];
    1326. 

  1326. 

  1327. 	// removed trailing [.,;:)] from URL
    1328. 

  1328. 	if ( in_array( substr($dest, -1), array('.', ',', ';', ':', ')') ) === true ) {
    1329. 

  1329. 		$ret = substr($dest, -1);
    1330. 

  1330. 		$dest = substr($dest, 0, strlen($dest)-1);
    1331. 

  1331. 	}
    1332. 

  1332. 	return $matches[1] . "<a href=\"$dest\" rel=\"nofollow\">$dest</a>$ret";
    1333. 

  1333. }
    1334. 

  1334. 

  1335. /**
    1336. 

  1336.  * Callback to convert email address match to HTML A element.
    1337. 

  1337.  *
    1338. 

  1338.  * This function was backported from 2.5.0 to 2.3.2. Regex callback for {@link
    1339. 

  1339.  * make_clickable()}.
    1340. 

  1340.  *
    1341. 

  1341.  * @since 2.3.2
    1342. 

  1342.  * @access private
    1343. 

  1343.  *
    1344. 

  1344.  * @param array $matches Single Regex Match.
    1345. 

  1345.  * @return string HTML A element with email address.
    1346. 

  1346.  */
    1347. 

  1347. function _make_email_clickable_cb($matches) {
    1348. 

  1348. 	$email = $matches[2] . '@' . $matches[3];
    1349. 

  1349. 	return $matches[1] . "<a href=\"mailto:$email\">$email</a>";
    1350. 

  1350. }
    1351. 

  1351. 

  1352. /**
    1353. 

  1353.  * Convert plaintext URI to HTML links.
    1354. 

  1354.  *
    1355. 

  1355.  * Converts URI, www and ftp, and email addresses. Finishes by fixing links
    1356. 

  1356.  * within links.
    1357. 

  1357.  *
    1358. 

  1358.  * @since 0.71
    1359. 

  1359.  *
    1360. 

  1360.  * @param string $ret Content to convert URIs.
    1361. 

  1361.  * @return string Content with converted URIs.
    1362. 

  1362.  */
    1363. 

  1363. function make_clickable($ret) {
    1364. 

  1364. 	$ret = ' ' . $ret;
    1365. 

  1365. 	// in testing, using arrays here was found to be faster
    1366. 

  1366. 	$ret = preg_replace_callback('#(?<=[\s>])(\()?([\w]+?://(?:[\w\\x80-\\xff\#$%&~/=?@\[\](+-]|[.,;:](?![\s<]|(\))?([\s]|$))|(?(1)\)(?![\s<.,;:]|$)|\)))+)#is', '_make_url_clickable_cb', $ret);
    1367. 

  1367. 	$ret = preg_replace_callback('#([\s>])((www|ftp)\.[\w\\x80-\\xff\#$%&~/.\-;:=,?@\[\]+]+)#is', '_make_web_ftp_clickable_cb', $ret);
    1368. 

  1368. 	$ret = preg_replace_callback('#([\s>])([.0-9a-z_+-]+)@(([0-9a-z-]+\.)+[0-9a-z]{2,})#i', '_make_email_clickable_cb', $ret);
    1369. 

  1369. 	// this one is not in an array because we need it to run last, for cleanup of accidental links within links
    1370. 

  1370. 	$ret = preg_replace("#(<a( [^>]+?>|>))<a [^>]+?>([^>]+?)</a></a>#i", "$1$3</a>", $ret);
    1371. 

  1371. 	$ret = trim($ret);
    1372. 

  1372. 	return $ret;
    1373. 

  1373. }
    1374. 

  1374. 

  1375. /**
    1376. 

  1376.  * Adds rel nofollow string to all HTML A elements in content.
    1377. 

  1377.  *
    1378. 

  1378.  * @since 1.5.0
    1379. 

  1379.  *
    1380. 

  1380.  * @param string $text Content that may contain HTML A elements.
    1381. 

  1381.  * @return string Converted content.
    1382. 

  1382.  */
    1383. 

  1383. function wp_rel_nofollow( $text ) {
    1384. 

  1384. 	// This is a pre save filter, so text is already escaped.
    1385. 

  1385. 	$text = stripslashes($text);
    1386. 

  1386. 	$text = preg_replace_callback('|<a (.+?)>|i', 'wp_rel_nofollow_callback', $text);
    1387. 

  1387. 	$text = esc_sql($text);
    1388. 

  1388. 	return $text;
    1389. 

  1389. }
    1390. 

  1390. 

  1391. /**
    1392. 

  1392.  * Callback to used to add rel=nofollow string to HTML A element.
    1393. 

  1393.  *
    1394. 

  1394.  * Will remove already existing rel="nofollow" and rel='nofollow' from the
    1395. 

  1395.  * string to prevent from invalidating (X)HTML.
    1396. 

  1396.  *
    1397. 

  1397.  * @since 2.3.0
    1398. 

  1398.  *
    1399. 

  1399.  * @param array $matches Single Match
    1400. 

  1400.  * @return string HTML A Element with rel nofollow.
    1401. 

  1401.  */
    1402. 

  1402. function wp_rel_nofollow_callback( $matches ) {
    1403. 

  1403. 	$text = $matches[1];
    1404. 

  1404. 	$text = str_replace(array(' rel="nofollow"', " rel='nofollow'"), '', $text);
    1405. 

  1405. 	return "<a $text rel=\"nofollow\">";
    1406. 

  1406. }
    1407. 

  1407. 

  1408. /**
    1409. 

  1409.  * Convert one smiley code to the icon graphic file equivalent.
    1410. 

  1410.  *
    1411. 

  1411.  * Looks up one smiley code in the $wpsmiliestrans global array and returns an
    1412. 

  1412.  * <img> string for that smiley.
    1413. 

  1413.  *
    1414. 

  1414.  * @global array $wpsmiliestrans
    1415. 

  1415.  * @since 2.8.0
    1416. 

  1416.  *
    1417. 

  1417.  * @param string $smiley Smiley code to convert to image.
    1418. 

  1418.  * @return string Image string for smiley.
    1419. 

  1419.  */
    1420. 

  1420. function translate_smiley($smiley) {
    1421. 

  1421. 	global $wpsmiliestrans;
    1422. 

  1422. 

  1423. 	if (count($smiley) == 0) {
    1424. 

  1424. 		return '';
    1425. 

  1425. 	}
    1426. 

  1426. 

  1427. 	$siteurl = get_option( 'siteurl' );
    1428. 

  1428. 

  1429. 	$smiley = trim(reset($smiley));
    1430. 

  1430. 	$img = $wpsmiliestrans[$smiley];
    1431. 

  1431. 	$smiley_masked = esc_attr($smiley);
    1432. 

  1432. 

  1433. 	$srcurl = apply_filters('smilies_src', "$siteurl/wp-includes/images/smilies/$img", $img, $siteurl);
    1434. 

  1434. 

  1435. 	return " <img src='$srcurl' alt='$smiley_masked' class='wp-smiley' /> ";
    1436. 

  1436. }
    1437. 

  1437. 

  1438. /**
    1439. 

  1439.  * Convert text equivalent of smilies to images.
    1440. 

  1440.  *
    1441. 

  1441.  * Will only convert smilies if the option 'use_smilies' is true and the global
    1442. 

  1442.  * used in the function isn't empty.
    1443. 

  1443.  *
    1444. 

  1444.  * @since 0.71
    1445. 

  1445.  * @uses $wp_smiliessearch
    1446. 

  1446.  *
    1447. 

  1447.  * @param string $text Content to convert smilies from text.
    1448. 

  1448.  * @return string Converted content with text smilies replaced with images.
    1449. 

  1449.  */
    1450. 

  1450. function convert_smilies($text) {
    1451. 

  1451. 	global $wp_smiliessearch;
    1452. 

  1452. 	$output = '';
    1453. 

  1453. 	if ( get_option('use_smilies') && !empty($wp_smiliessearch) ) {
    1454. 

  1454. 		// HTML loop taken from texturize function, could possible be consolidated
    1455. 

  1455. 		$textarr = preg_split("/(<.*>)/U", $text, -1, PREG_SPLIT_DELIM_CAPTURE); // capture the tags as well as in between
    1456. 

  1456. 		$stop = count($textarr);// loop stuff
    1457. 

  1457. 		for ($i = 0; $i < $stop; $i++) {
    1458. 

  1458. 			$content = $textarr[$i];
    1459. 

  1459. 			if ((strlen($content) > 0) && ('<' != $content{0})) { // If it's not a tag
    1460. 

  1460. 				$content = preg_replace_callback($wp_smiliessearch, 'translate_smiley', $content);
    1461. 

  1461. 			}
    1462. 

  1462. 			$output .= $content;
    1463. 

  1463. 		}
    1464. 

  1464. 	} else {
    1465. 

  1465. 		// return default text.
    1466. 

  1466. 		$output = $text;
    1467. 

  1467. 	}
    1468. 

  1468. 	return $output;
    1469. 

  1469. }
    1470. 

  1470. 

  1471. /**
    1472. 

  1472.  * Verifies that an email is valid.
    1473. 

  1473.  *
    1474. 

  1474.  * Does not grok i18n domains. Not RFC compliant.
    1475. 

  1475.  *
    1476. 

  1476.  * @since 0.71
    1477. 

  1477.  *
    1478. 

  1478.  * @param string $email Email address to verify.
    1479. 

  1479.  * @param boolean $deprecated. Deprecated.
    1480. 

  1480.  * @return string|bool Either false or the valid email address.
    1481. 

  1481.  */
    1482. 

  1482. function is_email( $email, $deprecated = false ) {
    1483. 

  1483. 	if ( ! empty( $deprecated ) )
    1484. 

  1484. 		_deprecated_argument( __FUNCTION__, '3.0' );
    1485. 

  1485. 

  1486. 	// Test for the minimum length the email can be
    1487. 

  1487. 	if ( strlen( $email ) < 3 ) {
    1488. 

  1488. 		return apply_filters( 'is_email', false, $email, 'email_too_short' );
    1489. 

  1489. 	}
    1490. 

  1490. 

  1491. 	// Test for an @ character after the first position
    1492. 

  1492. 	if ( strpos( $email, '@', 1 ) === false ) {
    1493. 

  1493. 		return apply_filters( 'is_email', false, $email, 'email_no_at' );
    1494. 

  1494. 	}
    1495. 

  1495. 

  1496. 	// Split out the local and domain parts
    1497. 

  1497. 	list( $local, $domain ) = explode( '@', $email, 2 );
    1498. 

  1498. 

  1499. 	// LOCAL PART
    1500. 

  1500. 	// Test for invalid characters
    1501. 

  1501. 	if ( !preg_match( '/^[a-zA-Z0-9!#$%&\'*+\/=?^_`{|}~\.-]+$/', $local ) ) {
    1502. 

  1502. 		return apply_filters( 'is_email', false, $email, 'local_invalid_chars' );
    1503. 

  1503. 	}
    1504. 

  1504. 

  1505. 	// DOMAIN PART
    1506. 

  1506. 	// Test for sequences of periods
    1507. 

  1507. 	if ( preg_match( '/\.{2,}/', $domain ) ) {
    1508. 

  1508. 		return apply_filters( 'is_email', false, $email, 'domain_period_sequence' );
    1509. 

  1509. 	}
    1510. 

  1510. 

  1511. 	// Test for leading and trailing periods and whitespace
    1512. 

  1512. 	if ( trim( $domain, " \t\n\r\0\x0B." ) !== $domain ) {
    1513. 

  1513. 		return apply_filters( 'is_email', false, $email, 'domain_period_limits' );
    1514. 

  1514. 	}
    1515. 

  1515. 

  1516. 	// Split the domain into subs
    1517. 

  1517. 	$subs = explode( '.', $domain );
    1518. 

  1518. 

  1519. 	// Assume the domain will have at least two subs
    1520. 

  1520. 	if ( 2 > count( $subs ) ) {
    1521. 

  1521. 		return apply_filters( 'is_email', false, $email, 'domain_no_periods' );
    1522. 

  1522. 	}
    1523. 

  1523. 

  1524. 	// Loop through each sub
    1525. 

  1525. 	foreach ( $subs as $sub ) {
    1526. 

  1526. 		// Test for leading and trailing hyphens and whitespace
    1527. 

  1527. 		if ( trim( $sub, " \t\n\r\0\x0B-" ) !== $sub ) {
    1528. 

  1528. 			return apply_filters( 'is_email', false, $email, 'sub_hyphen_limits' );
    1529. 

  1529. 		}
    1530. 

  1530. 

  1531. 		// Test for invalid characters
    1532. 

  1532. 		if ( !preg_match('/^[a-z0-9-]+$/i', $sub ) ) {
    1533. 

  1533. 			return apply_filters( 'is_email', false, $email, 'sub_invalid_chars' );
    1534. 

  1534. 		}
    1535. 

  1535. 	}
    1536. 

  1536. 

  1537. 	// Congratulations your email made it!
    1538. 

  1538. 	return apply_filters( 'is_email', $email, $email, null );
    1539. 

  1539. }
    1540. 

  1540. 

  1541. /**
    1542. 

  1542.  * Convert to ASCII from email subjects.
    1543. 

  1543.  *
    1544. 

  1544.  * @since 1.2.0
    1545. 

  1545.  * @usedby wp_mail() handles charsets in email subjects
    1546. 

  1546.  *
    1547. 

  1547.  * @param string $string Subject line
    1548. 

  1548.  * @return string Converted string to ASCII
    1549. 

  1549.  */
    1550. 

  1550. function wp_iso_descrambler($string) {
    1551. 

  1551. 	/* this may only work with iso-8859-1, I'm afraid */
    1552. 

  1552. 	if (!preg_match('#\=\?(.+)\?Q\?(.+)\?\=#i', $string, $matches)) {
    1553. 

  1553. 		return $string;
    1554. 

  1554. 	} else {
    1555. 

  1555. 		$subject = str_replace('_', ' ', $matches[2]);
    1556. 

  1556. 		$subject = preg_replace_callback('#\=([0-9a-f]{2})#i', create_function('$match', 'return chr(hexdec(strtolower($match[1])));'), $subject);
    1557. 

  1557. 		return $subject;
    1558. 

  1558. 	}
    1559. 

  1559. }
    1560. 

  1560. 

  1561. /**
    1562. 

  1562.  * Returns a date in the GMT equivalent.
    1563. 

  1563.  *
    1564. 

  1564.  * Requires and returns a date in the Y-m-d H:i:s format. Simply subtracts the
    1565. 

  1565.  * value of the 'gmt_offset' option. Return format can be overridden using the
    1566. 

  1566.  * $format parameter. If PHP5 is supported, the function uses the DateTime and
    1567. 

  1567.  * DateTimeZone objects to respect time zone differences in DST.
    1568. 

  1568.  *
    1569. 

  1569.  * @since 1.2.0
    1570. 

  1570.  *
    1571. 

  1571.  * @uses get_option() to retrieve the the value of 'gmt_offset'.
    1572. 

  1572.  * @param string $string The date to be converted.
    1573. 

  1573.  * @param string $format The format string for the returned date (default is Y-m-d H:i:s)
    1574. 

  1574.  * @return string GMT version of the date provided.
    1575. 

  1575.  */
    1576. 

  1576. function get_gmt_from_date($string, $format = 'Y-m-d H:i:s') {
    1577. 

  1577. 	preg_match('#([0-9]{1,4})-([0-9]{1,2})-([0-9]{1,2}) ([0-9]{1,2}):([0-9]{1,2}):([0-9]{1,2})#', $string, $matches);
    1578. 

  1578. 	$tz = get_option('timezone_string');
    1579. 

  1579. 	if( class_exists('DateTime') && $tz ) {
    1580. 

  1580. 		//PHP5
    1581. 

  1581. 		date_default_timezone_set( $tz );
    1582. 

  1582. 		$datetime = new DateTime( $string );
    1583. 

  1583. 		$datetime->setTimezone( new DateTimeZone('UTC') );
    1584. 

  1584. 		$offset = $datetime->getOffset();
    1585. 

  1585. 		$datetime->modify( '+' . $offset / 3600 . ' hours');
    1586. 

  1586. 		$string_gmt = gmdate($format, $datetime->format('U'));
    1587. 

  1587. 

  1588. 		date_default_timezone_set('UTC');
    1589. 

  1589. 	}
    1590. 

  1590. 	else {
    1591. 

  1591. 		//PHP4
    1592. 

  1592. 		$string_time = gmmktime($matches[4], $matches[5], $matches[6], $matches[2], $matches[3], $matches[1]);
    1593. 

  1593. 		$string_gmt = gmdate($format, $string_time - get_option('gmt_offset') * 3600);
    1594. 

  1594. 	}
    1595. 

  1595. 	return $string_gmt;
    1596. 

  1596. }
    1597. 

  1597. 

  1598. /**
    1599. 

  1599.  * Converts a GMT date into the correct format for the blog.
    1600. 

  1600.  *
    1601. 

  1601.  * Requires and returns in the Y-m-d H:i:s format. Simply adds the value of
    1602. 

  1602.  * gmt_offset.Return format can be overridden using the $format parameter
    1603. 

  1603.  *
    1604. 

  1604.  * @since 1.2.0
    1605. 

  1605.  *
    1606. 

  1606.  * @param string $string The date to be converted.
    1607. 

  1607.  * @param string $format The format string for the returned date (default is Y-m-d H:i:s)
    1608. 

  1608.  * @return string Formatted date relative to the GMT offset.
    1609. 

  1609.  */
    1610. 

  1610. function get_date_from_gmt($string, $format = 'Y-m-d H:i:s') {
    1611. 

  1611. 	preg_match('#([0-9]{1,4})-([0-9]{1,2})-([0-9]{1,2}) ([0-9]{1,2}):([0-9]{1,2}):([0-9]{1,2})#', $string, $matches);
    1612. 

  1612. 	$string_time = gmmktime($matches[4], $matches[5], $matches[6], $matches[2], $matches[3], $matches[1]);
    1613. 

  1613. 	$string_localtime = gmdate($format, $string_time + get_option('gmt_offset')*3600);
    1614. 

  1614. 	return $string_localtime;
    1615. 

  1615. }
    1616. 

  1616. 

  1617. /**
    1618. 

  1618.  * Computes an offset in seconds from an iso8601 timezone.
    1619. 

  1619.  *
    1620. 

  1620.  * @since 1.5.0
    1621. 

  1621.  *
    1622. 

  1622.  * @param string $timezone Either 'Z' for 0 offset or 'Âąhhmm'.
    1623. 

  1623.  * @return int|float The offset in seconds.
    1624. 

  1624.  */
    1625. 

  1625. function iso8601_timezone_to_offset($timezone) {
    1626. 

  1626. 	// $timezone is either 'Z' or '[+|-]hhmm'
    1627. 

  1627. 	if ($timezone == 'Z') {
    1628. 

  1628. 		$offset = 0;
    1629. 

  1629. 	} else {
    1630. 

  1630. 		$sign    = (substr($timezone, 0, 1) == '+') ? 1 : -1;
    1631. 

  1631. 		$hours   = intval(substr($timezone, 1, 2));
    1632. 

  1632. 		$minutes = intval(substr($timezone, 3, 4)) / 60;
    1633. 

  1633. 		$offset  = $sign * 3600 * ($hours + $minutes);
    1634. 

  1634. 	}
    1635. 

  1635. 	return $offset;
    1636. 

  1636. }
    1637. 

  1637. 

  1638. /**
    1639. 

  1639.  * Converts an iso8601 date to MySQL DateTime format used by post_date[_gmt].
    1640. 

  1640.  *
    1641. 

  1641.  * @since 1.5.0
    1642. 

  1642.  *
    1643. 

  1643.  * @param string $date_string Date and time in ISO 8601 format {@link http://en.wikipedia.org/wiki/ISO_8601}.
    1644. 

  1644.  * @param string $timezone Optional. If set to GMT returns the time minus gmt_offset. Default is 'user'.
    1645. 

  1645.  * @return string The date and time in MySQL DateTime format - Y-m-d H:i:s.
    1646. 

  1646.  */
    1647. 

  1647. function iso8601_to_datetime($date_string, $timezone = 'user') {
    1648. 

  1648. 	$timezone = strtolower($timezone);
    1649. 

  1649. 

  1650. 	if ($timezone == 'gmt') {
    1651. 

  1651. 

  1652. 		preg_match('#([0-9]{4})([0-9]{2})([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(Z|[\+|\-][0-9]{2,4}){0,1}#', $date_string, $date_bits);
    1653. 

  1653. 

  1654. 		if (!empty($date_bits[7])) { // we have a timezone, so let's compute an offset
    1655. 

  1655. 			$offset = iso8601_timezone_to_offset($date_bits[7]);
    1656. 

  1656. 		} else { // we don't have a timezone, so we assume user local timezone (not server's!)
    1657. 

  1657. 			$offset = 3600 * get_option('gmt_offset');
    1658. 

  1658. 		}
    1659. 

  1659. 

  1660. 		$timestamp = gmmktime($date_bits[4], $date_bits[5], $date_bits[6], $date_bits[2], $date_bits[3], $date_bits[1]);
    1661. 

  1661. 		$timestamp -= $offset;
    1662. 

  1662. 

  1663. 		return gmdate('Y-m-d H:i:s', $timestamp);
    1664. 

  1664. 

  1665. 	} else if ($timezone == 'user') {
    1666. 

  1666. 		return preg_replace('#([0-9]{4})([0-9]{2})([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(Z|[\+|\-][0-9]{2,4}){0,1}#', '$1-$2-$3 $4:$5:$6', $date_string);
    1667. 

  1667. 	}
    1668. 

  1668. }
    1669. 

  1669. 

  1670. /**
    1671. 

  1671.  * Adds a element attributes to open links in new windows.
    1672. 

  1672.  *
    1673. 

  1673.  * Comment text in popup windows should be filtered through this. Right now it's
    1674. 

  1674.  * a moderately dumb function, ideally it would detect whether a target or rel
    1675. 

  1675.  * attribute was already there and adjust its actions accordingly.
    1676. 

  1676.  *
    1677. 

  1677.  * @since 0.71
    1678. 

  1678.  *
    1679. 

  1679.  * @param string $text Content to replace links to open in a new window.
    1680. 

  1680.  * @return string Content that has filtered links.
    1681. 

  1681.  */
    1682. 

  1682. function popuplinks($text) {
    1683. 

  1683. 	$text = preg_replace('/<a (.+?)>/i', "<a $1 target='_blank' rel='external'>", $text);
    1684. 

  1684. 	return $text;
    1685. 

  1685. }
    1686. 

  1686. 

  1687. /**
    1688. 

  1688.  * Strips out all characters that are not allowable in an email.
    1689. 

  1689.  *
    1690. 

  1690.  * @since 1.5.0
    1691. 

  1691.  *
    1692. 

  1692.  * @param string $email Email address to filter.
    1693. 

  1693.  * @return string Filtered email address.
    1694. 

  1694.  */
    1695. 

  1695. function sanitize_email( $email ) {
    1696. 

  1696. 	// Test for the minimum length the email can be
    1697. 

  1697. 	if ( strlen( $email ) < 3 ) {
    1698. 

  1698. 		return apply_filters( 'sanitize_email', '', $email, 'email_too_short' );
    1699. 

  1699. 	}
    1700. 

  1700. 

  1701. 	// Test for an @ character after the first position
    1702. 

  1702. 	if ( strpos( $email, '@', 1 ) === false ) {
    1703. 

  1703. 		return apply_filters( 'sanitize_email', '', $email, 'email_no_at' );
    1704. 

  1704. 	}
    1705. 

  1705. 

  1706. 	// Split out the local and domain parts
    1707. 

  1707. 	list( $local, $domain ) = explode( '@', $email, 2 );
    1708. 

  1708. 

  1709. 	// LOCAL PART
    1710. 

  1710. 	// Test for invalid characters
    1711. 

  1711. 	$local = preg_replace( '/[^a-zA-Z0-9!#$%&\'*+\/=?^_`{|}~\.-]/', '', $local );
    1712. 

  1712. 	if ( '' === $local ) {
    1713. 

  1713. 		return apply_filters( 'sanitize_email', '', $email, 'local_invalid_chars' );
    1714. 

  1714. 	}
    1715. 

  1715. 

  1716. 	// DOMAIN PART
    1717. 

  1717. 	// Test for sequences of periods
    1718. 

  1718. 	$domain = preg_replace( '/\.{2,}/', '', $domain );
    1719. 

  1719. 	if ( '' === $domain ) {
    1720. 

  1720. 		return apply_filters( 'sanitize_email', '', $email, 'domain_period_sequence' );
    1721. 

  1721. 	}
    1722. 

  1722. 

  1723. 	// Test for leading and trailing periods and whitespace
    1724. 

  1724. 	$domain = trim( $domain, " \t\n\r\0\x0B." );
    1725. 

  1725. 	if ( '' === $domain ) {
    1726. 

  1726. 		return apply_filters( 'sanitize_email', '', $email, 'domain_period_limits' );
    1727. 

  1727. 	}
    1728. 

  1728. 

  1729. 	// Split the domain into subs
    1730. 

  1730. 	$subs = explode( '.', $domain );
    1731. 

  1731. 

  1732. 	// Assume the domain will have at least two subs
    1733. 

  1733. 	if ( 2 > count( $subs ) ) {
    1734. 

  1734. 		return apply_filters( 'sanitize_email', '', $email, 'domain_no_periods' );
    1735. 

  1735. 	}
    1736. 

  1736. 

  1737. 	// Create an array that will contain valid subs
    1738. 

  1738. 	$new_subs = array();
    1739. 

  1739. 

  1740. 	// Loop through each sub
    1741. 

  1741. 	foreach ( $subs as $sub ) {
    1742. 

  1742. 		// Test for leading and trailing hyphens
    1743. 

  1743. 		$sub = trim( $sub, " \t\n\r\0\x0B-" );
    1744. 

  1744. 

  1745. 		// Test for invalid characters
    1746. 

  1746. 		$sub = preg_replace( '/^[^a-z0-9-]+$/i', '', $sub );
    1747. 

  1747. 

  1748. 		// If there's anything left, add it to the valid subs
    1749. 

  1749. 		if ( '' !== $sub ) {
    1750. 

  1750. 			$new_subs[] = $sub;
    1751. 

  1751. 		}
    1752. 

  1752. 	}
    1753. 

  1753. 

  1754. 	// If there aren't 2 or more valid subs
    1755. 

  1755. 	if ( 2 > count( $new_subs ) ) {
    1756. 

  1756. 		return apply_filters( 'sanitize_email', '', $email, 'domain_no_valid_subs' );
    1757. 

  1757. 	}
    1758. 

  1758. 

  1759. 	// Join valid subs into the new domain
    1760. 

  1760. 	$domain = join( '.', $new_subs );
    1761. 

  1761. 

  1762. 	// Put the email back together
    1763. 

  1763. 	$email = $local . '@' . $domain;
    1764. 

  1764. 

  1765. 	// Congratulations your email made it!
    1766. 

  1766. 	return apply_filters( 'sanitize_email', $email, $email, null );
    1767. 

  1767. }
    1768. 

  1768. 

  1769. /**
    1770. 

  1770.  * Determines the difference between two timestamps.
    1771. 

  1771.  *
    1772. 

  1772.  * The difference is returned in a human readable format such as "1 hour",
    1773. 

  1773.  * "5 mins", "2 days".
    1774. 

  1774.  *
    1775. 

  1775.  * @since 1.5.0
    1776. 

  1776.  *
    1777. 

  1777.  * @param int $from Unix timestamp from which the difference begins.
    1778. 

  1778.  * @param int $to Optional. Unix timestamp to end the time difference. Default becomes time() if not set.
    1779. 

  1779.  * @return string Human readable time difference.
    1780. 

  1780.  */
    1781. 

  1781. function human_time_diff( $from, $to = '' ) {
    1782. 

  1782. 	if ( empty($to) )
    1783. 

  1783. 		$to = time();
    1784. 

  1784. 	$diff = (int) abs($to - $from);
    1785. 

  1785. 	if ($diff <= 3600) {
    1786. 

  1786. 		$mins = round($diff / 60);
    1787. 

  1787. 		if ($mins <= 1) {
    1788. 

  1788. 			$mins = 1;
    1789. 

  1789. 		}
    1790. 

  1790. 		/* translators: min=minute */
    1791. 

  1791. 		$since = sprintf(_n('%s min', '%s mins', $mins), $mins);
    1792. 

  1792. 	} else if (($diff <= 86400) && ($diff > 3600)) {
    1793. 

  1793. 		$hours = round($diff / 3600);
    1794. 

  1794. 		if ($hours <= 1) {
    1795. 

  1795. 			$hours = 1;
    1796. 

  1796. 		}
    1797. 

  1797. 		$since = sprintf(_n('%s hour', '%s hours', $hours), $hours);
    1798. 

  1798. 	} elseif ($diff >= 86400) {
    1799. 

  1799. 		$days = round($diff / 86400);
    1800. 

  1800. 		if ($days <= 1) {
    1801. 

  1801. 			$days = 1;
    1802. 

  1802. 		}
    1803. 

  1803. 		$since = sprintf(_n('%s day', '%s days', $days), $days);
    1804. 

  1804. 	}
    1805. 

  1805. 	return $since;
    1806. 

  1806. }
    1807. 

  1807. 

  1808. /**
    1809. 

  1809.  * Generates an excerpt from the content, if needed.
    1810. 

  1810.  *
    1811. 

  1811.  * The excerpt word amount will be 55 words and if the amount is greater than
    1812. 

  1812.  * that, then the string ' [...]' will be appended to the excerpt. If the string
    1813. 

  1813.  * is less than 55 words, then the content will be returned as is.
    1814. 

  1814.  *
    1815. 

  1815.  * The 55 word limit can be modified by plugins/themes using the excerpt_length filter
    1816. 

  1816.  * The ' [...]' string can be modified by plugins/themes using the excerpt_more filter
    1817. 

  1817.  *
    1818. 

  1818.  * @since 1.5.0
    1819. 

  1819.  *
    1820. 

  1820.  * @param string $text The excerpt. If set to empty an excerpt is generated.
    1821. 

  1821.  * @return string The excerpt.
    1822. 

  1822.  */
    1823. 

  1823. function wp_trim_excerpt($text) {
    1824. 

  1824. 	$raw_excerpt = $text;
    1825. 

  1825. 	if ( '' == $text ) {
    1826. 

  1826. 		$text = get_the_content('');
    1827. 

  1827. 

  1828. 		$text = strip_shortcodes( $text );
    1829. 

  1829. 

  1830. 		$text = apply_filters('the_content', $text);
    1831. 

  1831. 		$text = str_replace(']]>', ']]&gt;', $text);
    1832. 

  1832. 		$text = strip_tags($text);
    1833. 

  1833. 		$excerpt_length = apply_filters('excerpt_length', 55);
    1834. 

  1834. 		$excerpt_more = apply_filters('excerpt_more', ' ' . '[...]');
    1835. 

  1835. 		$words = preg_split("/[\n\r\t ]+/", $text, $excerpt_length + 1, PREG_SPLIT_NO_EMPTY);
    1836. 

  1836. 		if ( count($words) > $excerpt_length ) {
    1837. 

  1837. 			array_pop($words);
    1838. 

  1838. 			$text = implode(' ', $words);
    1839. 

  1839. 			$text = $text . $excerpt_more;
    1840. 

  1840. 		} else {
    1841. 

  1841. 			$text = implode(' ', $words);
    1842. 

  1842. 		}
    1843. 

  1843. 	}
    1844. 

  1844. 	return apply_filters('wp_trim_excerpt', $text, $raw_excerpt);
    1845. 

  1845. }
    1846. 

  1846. 

  1847. /**
    1848. 

  1848.  * Converts named entities into numbered entities.
    1849. 

  1849.  *
    1850. 

  1850.  * @since 1.5.1
    1851. 

  1851.  *
    1852. 

  1852.  * @param string $text The text within which entities will be converted.
    1853. 

  1853.  * @return string Text with converted entities.
    1854. 

  1854.  */
    1855. 

  1855. function ent2ncr($text) {
    1856. 

  1856. 	$to_ncr = array(
    1857. 

  1857. 		'&quot;' => '&#34;',
    1858. 

  1858. 		'&amp;' => '&#38;',
    1859. 

  1859. 		'&frasl;' => '&#47;',
    1860. 

  1860. 		'&lt;' => '&#60;',
    1861. 

  1861. 		'&gt;' => '&#62;',
    1862. 

  1862. 		'|' => '&#124;',
    1863. 

  1863. 		'&nbsp;' => '&#160;',
    1864. 

  1864. 		'&iexcl;' => '&#161;',
    1865. 

  1865. 		'&cent;' => '&#162;',
    1866. 

  1866. 		'&pound;' => '&#163;',
    1867. 

  1867. 		'&curren;' => '&#164;',
    1868. 

  1868. 		'&yen;' => '&#165;',
    1869. 

  1869. 		'&brvbar;' => '&#166;',
    1870. 

  1870. 		'&brkbar;' => '&#166;',
    1871. 

  1871. 		'&sect;' => '&#167;',
    1872. 

  1872. 		'&uml;' => '&#168;',
    1873. 

  1873. 		'&die;' => '&#168;',
    1874. 

  1874. 		'&copy;' => '&#169;',
    1875. 

  1875. 		'&ordf;' => '&#170;',
    1876. 

  1876. 		'&laquo;' => '&#171;',
    1877. 

  1877. 		'&not;' => '&#172;',
    1878. 

  1878. 		'&shy;' => '&#173;',
    1879. 

  1879. 		'&reg;' => '&#174;',
    1880. 

  1880. 		'&macr;' => '&#175;',
    1881. 

  1881. 		'&hibar;' => '&#175;',
    1882. 

  1882. 		'&deg;' => '&#176;',
    1883. 

  1883. 		'&plusmn;' => '&#177;',
    1884. 

  1884. 		'&sup2;' => '&#178;',
    1885. 

  1885. 		'&sup3;' => '&#179;',
    1886. 

  1886. 		'&acute;' => '&#180;',
    1887. 

  1887. 		'&micro;' => '&#181;',
    1888. 

  1888. 		'&para;' => '&#182;',
    1889. 

  1889. 		'&middot;' => '&#183;',
    1890. 

  1890. 		'&cedil;' => '&#184;',
    1891. 

  1891. 		'&sup1;' => '&#185;',
    1892. 

  1892. 		'&ordm;' => '&#186;',
    1893. 

  1893. 		'&raquo;' => '&#187;',
    1894. 

  1894. 		'&frac14;' => '&#188;',
    1895. 

  1895. 		'&frac12;' => '&#189;',
    1896. 

  1896. 		'&frac34;' => '&#190;',
    1897. 

  1897. 		'&iquest;' => '&#191;',
    1898. 

  1898. 		'&Agrave;' => '&#192;',
    1899. 

  1899. 		'&Aacute;' => '&#193;',
    1900. 

  1900. 		'&Acirc;' => '&#194;',
    1901. 

  1901. 		'&Atilde;' => '&#195;',
    1902. 

  1902. 		'&Auml;' => '&#196;',
    1903. 

  1903. 		'&Aring;' => '&#197;',
    1904. 

  1904. 		'&AElig;' => '&#198;',
    1905. 

  1905. 		'&Ccedil;' => '&#199;',
    1906. 

  1906. 		'&Egrave;' => '&#200;',
    1907. 

  1907. 		'&Eacute;' => '&#201;',
    1908. 

  1908. 		'&Ecirc;' => '&#202;',
    1909. 

  1909. 		'&Euml;' => '&#203;',
    1910. 

  1910. 		'&Igrave;' => '&#204;',
    1911. 

  1911. 		'&Iacute;' => '&#205;',
    1912. 

  1912. 		'&Icirc;' => '&#206;',
    1913. 

  1913. 		'&Iuml;' => '&#207;',
    1914. 

  1914. 		'&ETH;' => '&#208;',
    1915. 

  1915. 		'&Ntilde;' => '&#209;',
    1916. 

  1916. 		'&Ograve;' => '&#210;',
    1917. 

  1917. 		'&Oacute;' => '&#211;',
    1918. 

  1918. 		'&Ocirc;' => '&#212;',
    1919. 

  1919. 		'&Otilde;' => '&#213;',
    1920. 

  1920. 		'&Ouml;' => '&#214;',
    1921. 

  1921. 		'&times;' => '&#215;',
    1922. 

  1922. 		'&Oslash;' => '&#216;',
    1923. 

  1923. 		'&Ugrave;' => '&#217;',
    1924. 

  1924. 		'&Uacute;' => '&#218;',
    1925. 

  1925. 		'&Ucirc;' => '&#219;',
    1926. 

  1926. 		'&Uuml;' => '&#220;',
    1927. 

  1927. 		'&Yacute;' => '&#221;',
    1928. 

  1928. 		'&THORN;' => '&#222;',
    1929. 

  1929. 		'&szlig;' => '&#223;',
    1930. 

  1930. 		'&agrave;' => '&#224;',
    1931. 

  1931. 		'&aacute;' => '&#225;',
    1932. 

  1932. 		'&acirc;' => '&#226;',
    1933. 

  1933. 		'&atilde;' => '&#227;',
    1934. 

  1934. 		'&auml;' => '&#228;',
    1935. 

  1935. 		'&aring;' => '&#229;',
    1936. 

  1936. 		'&aelig;' => '&#230;',
    1937. 

  1937. 		'&ccedil;' => '&#231;',
    1938. 

  1938. 		'&egrave;' => '&#232;',
    1939. 

  1939. 		'&eacute;' => '&#233;',
    1940. 

  1940. 		'&ecirc;' => '&#234;',
    1941. 

  1941. 		'&euml;' => '&#235;',
    1942. 

  1942. 		'&igrave;' => '&#236;',
    1943. 

  1943. 		'&iacute;' => '&#237;',
    1944. 

  1944. 		'&icirc;' => '&#238;',
    1945. 

  1945. 		'&iuml;' => '&#239;',
    1946. 

  1946. 		'&eth;' => '&#240;',
    1947. 

  1947. 		'&ntilde;' => '&#241;',
    1948. 

  1948. 		'&ograve;' => '&#242;',
    1949. 

  1949. 		'&oacute;' => '&#243;',
    1950. 

  1950. 		'&ocirc;' => '&#244;',
    1951. 

  1951. 		'&otilde;' => '&#245;',
    1952. 

  1952. 		'&ouml;' => '&#246;',
    1953. 

  1953. 		'&divide;' => '&#247;',
    1954. 

  1954. 		'&oslash;' => '&#248;',
    1955. 

  1955. 		'&ugrave;' => '&#249;',
    1956. 

  1956. 		'&uacute;' => '&#250;',
    1957. 

  1957. 		'&ucirc;' => '&#251;',
    1958. 

  1958. 		'&uuml;' => '&#252;',
    1959. 

  1959. 		'&yacute;' => '&#253;',
    1960. 

  1960. 		'&thorn;' => '&#254;',
    1961. 

  1961. 		'&yuml;' => '&#255;',
    1962. 

  1962. 		'&OElig;' => '&#338;',
    1963. 

  1963. 		'&oelig;' => '&#339;',
    1964. 

  1964. 		'&Scaron;' => '&#352;',
    1965. 

  1965. 		'&scaron;' => '&#353;',
    1966. 

  1966. 		'&Yuml;' => '&#376;',
    1967. 

  1967. 		'&fnof;' => '&#402;',
    1968. 

  1968. 		'&circ;' => '&#710;',
    1969. 

  1969. 		'&tilde;' => '&#732;',
    1970. 

  1970. 		'&Alpha;' => '&#913;',
    1971. 

  1971. 		'&Beta;' => '&#914;',
    1972. 

  1972. 		'&Gamma;' => '&#915;',
    1973. 

  1973. 		'&Delta;' => '&#916;',
    1974. 

  1974. 		'&Epsilon;' => '&#917;',
    1975. 

  1975. 		'&Zeta;' => '&#918;',
    1976. 

  1976. 		'&Eta;' => '&#919;',
    1977. 

  1977. 		'&Theta;' => '&#920;',
    1978. 

  1978. 		'&Iota;' => '&#921;',
    1979. 

  1979. 		'&Kappa;' => '&#922;',
    1980. 

  1980. 		'&Lambda;' => '&#923;',
    1981. 

  1981. 		'&Mu;' => '&#924;',
    1982. 

  1982. 		'&Nu;' => '&#925;',
    1983. 

  1983. 		'&Xi;' => '&#926;',
    1984. 

  1984. 		'&Omicron;' => '&#927;',
    1985. 

  1985. 		'&Pi;' => '&#928;',
    1986. 

  1986. 		'&Rho;' => '&#929;',
    1987. 

  1987. 		'&Sigma;' => '&#931;',
    1988. 

  1988. 		'&Tau;' => '&#932;',
    1989. 

  1989. 		'&Upsilon;' => '&#933;',
    1990. 

  1990. 		'&Phi;' => '&#934;',
    1991. 

  1991. 		'&Chi;' => '&#935;',
    1992. 

  1992. 		'&Psi;' => '&#936;',
    1993. 

  1993. 		'&Omega;' => '&#937;',
    1994. 

  1994. 		'&alpha;' => '&#945;',
    1995. 

  1995. 		'&beta;' => '&#946;',
    1996. 

  1996. 		'&gamma;' => '&#947;',
    1997. 

  1997. 		'&delta;' => '&#948;',
    1998. 

  1998. 		'&epsilon;' => '&#949;',
    1999. 

  1999. 		'&zeta;' => '&#950;',
    2000. 

  2000. 		'&eta;' => '&#951;',
    2001. 

  2001. 		'&theta;' => '&#952;',
    2002. 

  2002. 		'&iota;' => '&#953;',
    2003. 

  2003. 		'&kappa;' => '&#954;',
    2004. 

  2004. 		'&lambda;' => '&#955;',
    2005. 

  2005. 		'&mu;' => '&#956;',
    2006. 

  2006. 		'&nu;' => '&#957;',
    2007. 

  2007. 		'&xi;' => '&#958;',
    2008. 

  2008. 		'&omicron;' => '&#959;',
    2009. 

  2009. 		'&pi;' => '&#960;',
    2010. 

  2010. 		'&rho;' => '&#961;',
    2011. 

  2011. 		'&sigmaf;' => '&#962;',
    2012. 

  2012. 		'&sigma;' => '&#963;',
    2013. 

  2013. 		'&tau;' => '&#964;',
    2014. 

  2014. 		'&upsilon;' => '&#965;',
    2015. 

  2015. 		'&phi;' => '&#966;',
    2016. 

  2016. 		'&chi;' => '&#967;',
    2017. 

  2017. 		'&psi;' => '&#968;',
    2018. 

  2018. 		'&omega;' => '&#969;',
    2019. 

  2019. 		'&thetasym;' => '&#977;',
    2020. 

  2020. 		'&upsih;' => '&#978;',
    2021. 

  2021. 		'&piv;' => '&#982;',
    2022. 

  2022. 		'&ensp;' => '&#8194;',
    2023. 

  2023. 		'&emsp;' => '&#8195;',
    2024. 

  2024. 		'&thinsp;' => '&#8201;',
    2025. 

  2025. 		'&zwnj;' => '&#8204;',
    2026. 

  2026. 		'&zwj;' => '&#8205;',
    2027. 

  2027. 		'&lrm;' => '&#8206;',
    2028. 

  2028. 		'&rlm;' => '&#8207;',
    2029. 

  2029. 		'&ndash;' => '&#8211;',
    2030. 

  2030. 		'&mdash;' => '&#8212;',
    2031. 

  2031. 		'&lsquo;' => '&#8216;',
    2032. 

  2032. 		'&rsquo;' => '&#8217;',
    2033. 

  2033. 		'&sbquo;' => '&#8218;',
    2034. 

  2034. 		'&ldquo;' => '&#8220;',
    2035. 

  2035. 		'&rdquo;' => '&#8221;',
    2036. 

  2036. 		'&bdquo;' => '&#8222;',
    2037. 

  2037. 		'&dagger;' => '&#8224;',
    2038. 

  2038. 		'&Dagger;' => '&#8225;',
    2039. 

  2039. 		'&bull;' => '&#8226;',
    2040. 

  2040. 		'&hellip;' => '&#8230;',
    2041. 

  2041. 		'&permil;' => '&#8240;',
    2042. 

  2042. 		'&prime;' => '&#8242;',
    2043. 

  2043. 		'&Prime;' => '&#8243;',
    2044. 

  2044. 		'&lsaquo;' => '&#8249;',
    2045. 

  2045. 		'&rsaquo;' => '&#8250;',
    2046. 

  2046. 		'&oline;' => '&#8254;',
    2047. 

  2047. 		'&frasl;' => '&#8260;',
    2048. 

  2048. 		'&euro;' => '&#8364;',
    2049. 

  2049. 		'&image;' => '&#8465;',
    2050. 

  2050. 		'&weierp;' => '&#8472;',
    2051. 

  2051. 		'&real;' => '&#8476;',
    2052. 

  2052. 		'&trade;' => '&#8482;',
    2053. 

  2053. 		'&alefsym;' => '&#8501;',
    2054. 

  2054. 		'&crarr;' => '&#8629;',
    2055. 

  2055. 		'&lArr;' => '&#8656;',
    2056. 

  2056. 		'&uArr;' => '&#8657;',
    2057. 

  2057. 		'&rArr;' => '&#8658;',
    2058. 

  2058. 		'&dArr;' => '&#8659;',
    2059. 

  2059. 		'&hArr;' => '&#8660;',
    2060. 

  2060. 		'&forall;' => '&#8704;',
    2061. 

  2061. 		'&part;' => '&#8706;',
    2062. 

  2062. 		'&exist;' => '&#8707;',
    2063. 

  2063. 		'&empty;' => '&#8709;',
    2064. 

  2064. 		'&nabla;' => '&#8711;',
    2065. 

  2065. 		'&isin;' => '&#8712;',
    2066. 

  2066. 		'&notin;' => '&#8713;',
    2067. 

  2067. 		'&ni;' => '&#8715;',
    2068. 

  2068. 		'&prod;' => '&#8719;',
    2069. 

  2069. 		'&sum;' => '&#8721;',
    2070. 

  2070. 		'&minus;' => '&#8722;',
    2071. 

  2071. 		'&lowast;' => '&#8727;',
    2072. 

  2072. 		'&radic;' => '&#8730;',
    2073. 

  2073. 		'&prop;' => '&#8733;',
    2074. 

  2074. 		'&infin;' => '&#8734;',
    2075. 

  2075. 		'&ang;' => '&#8736;',
    2076. 

  2076. 		'&and;' => '&#8743;',
    2077. 

  2077. 		'&or;' => '&#8744;',
    2078. 

  2078. 		'&cap;' => '&#8745;',
    2079. 

  2079. 		'&cup;' => '&#8746;',
    2080. 

  2080. 		'&int;' => '&#8747;',
    2081. 

  2081. 		'&there4;' => '&#8756;',
    2082. 

  2082. 		'&sim;' => '&#8764;',
    2083. 

  2083. 		'&cong;' => '&#8773;',
    2084. 

  2084. 		'&asymp;' => '&#8776;',
    2085. 

  2085. 		'&ne;' => '&#8800;',
    2086. 

  2086. 		'&equiv;' => '&#8801;',
    2087. 

  2087. 		'&le;' => '&#8804;',
    2088. 

  2088. 		'&ge;' => '&#8805;',
    2089. 

  2089. 		'&sub;' => '&#8834;',
    2090. 

  2090. 		'&sup;' => '&#8835;',
    2091. 

  2091. 		'&nsub;' => '&#8836;',
    2092. 

  2092. 		'&sube;' => '&#8838;',
    2093. 

  2093. 		'&supe;' => '&#8839;',
    2094. 

  2094. 		'&oplus;' => '&#8853;',
    2095. 

  2095. 		'&otimes;' => '&#8855;',
    2096. 

  2096. 		'&perp;' => '&#8869;',
    2097. 

  2097. 		'&sdot;' => '&#8901;',
    2098. 

  2098. 		'&lceil;' => '&#8968;',
    2099. 

  2099. 		'&rceil;' => '&#8969;',
    2100. 

  2100. 		'&lfloor;' => '&#8970;',
    2101. 

  2101. 		'&rfloor;' => '&#8971;',
    2102. 

  2102. 		'&lang;' => '&#9001;',
    2103. 

  2103. 		'&rang;' => '&#9002;',
    2104. 

  2104. 		'&larr;' => '&#8592;',
    2105. 

  2105. 		'&uarr;' => '&#8593;',
    2106. 

  2106. 		'&rarr;' => '&#8594;',
    2107. 

  2107. 		'&darr;' => '&#8595;',
    2108. 

  2108. 		'&harr;' => '&#8596;',
    2109. 

  2109. 		'&loz;' => '&#9674;',
    2110. 

  2110. 		'&spades;' => '&#9824;',
    2111. 

  2111. 		'&clubs;' => '&#9827;',
    2112. 

  2112. 		'&hearts;' => '&#9829;',
    2113. 

  2113. 		'&diams;' => '&#9830;'
    2114. 

  2114. 	);
    2115. 

  2115. 

  2116. 	return str_replace( array_keys($to_ncr), array_values($to_ncr), $text );
    2117. 

  2117. }
    2118. 

  2118. 

  2119. /**
    2120. 

  2120.  * Formats text for the rich text editor.
    2121. 

  2121.  *
    2122. 

  2122.  * The filter 'richedit_pre' is applied here. If $text is empty the filter will
    2123. 

  2123.  * be applied to an empty string.
    2124. 

  2124.  *
    2125. 

  2125.  * @since 2.0.0
    2126. 

  2126.  *
    2127. 

  2127.  * @param string $text The text to be formatted.
    2128. 

  2128.  * @return string The formatted text after filter is applied.
    2129. 

  2129.  */
    2130. 

  2130. function wp_richedit_pre($text) {
    2131. 

  2131. 	// Filtering a blank results in an annoying <br />\n
    2132. 

  2132. 	if ( empty($text) ) return apply_filters('richedit_pre', '');
    2133. 

  2133. 

  2134. 	$output = convert_chars($text);
    2135. 

  2135. 	$output = wpautop($output);
    2136. 

  2136. 	$output = htmlspecialchars($output, ENT_NOQUOTES);
    2137. 

  2137. 

  2138. 	return apply_filters('richedit_pre', $output);
    2139. 

  2139. }
    2140. 

  2140. 

  2141. /**
    2142. 

  2142.  * Formats text for the HTML editor.
    2143. 

  2143.  *
    2144. 

  2144.  * Unless $output is empty it will pass through htmlspecialchars before the
    2145. 

  2145.  * 'htmledit_pre' filter is applied.
    2146. 

  2146.  *
    2147. 

  2147.  * @since 2.5.0
    2148. 

  2148.  *
    2149. 

  2149.  * @param string $output The text to be formatted.
    2150. 

  2150.  * @return string Formatted text after filter applied.
    2151. 

  2151.  */
    2152. 

  2152. function wp_htmledit_pre($output) {
    2153. 

  2153. 	if ( !empty($output) )
    2154. 

  2154. 		$output = htmlspecialchars($output, ENT_NOQUOTES); // convert only < > &
    2155. 

  2155. 

  2156. 	return apply_filters('htmledit_pre', $output);
    2157. 

  2157. }
    2158. 

  2158. 

  2159. /**
    2160. 

  2160.  * Perform a deep string replace operation to ensure the values in $search are no longer present
    2161. 

  2161.  *
    2162. 

  2162.  * Repeats the replacement operation until it no longer replaces anything so as to remove "nested" values
    2163. 

  2163.  * e.g. $subject = '%0%0%0DDD', $search ='%0D', $result ='' rather than the '%0%0DD' that
    2164. 

  2164.  * str_replace would return
    2165. 

  2165.  *
    2166. 

  2166.  * @since 2.8.1
    2167. 

  2167.  * @access private
    2168. 

  2168.  *
    2169. 

  2169.  * @param string|array $search
    2170. 

  2170.  * @param string $subject
    2171. 

  2171.  * @return string The processed string
    2172. 

  2172.  */
    2173. 

  2173. function _deep_replace( $search, $subject ) {
    2174. 

  2174. 	$found = true;
    2175. 

  2175. 	$subject = (string) $subject;
    2176. 

  2176. 	while ( $found ) {
    2177. 

  2177. 		$found = false;
    2178. 

  2178. 		foreach ( (array) $search as $val ) {
    2179. 

  2179. 			while ( strpos( $subject, $val ) !== false ) {
    2180. 

  2180. 				$found = true;
    2181. 

  2181. 				$subject = str_replace( $val, '', $subject );
    2182. 

  2182. 			}
    2183. 

  2183. 		}
    2184. 

  2184. 	}
    2185. 

  2185. 

  2186. 	return $subject;
    2187. 

  2187. }
    2188. 

  2188. 

  2189. /**
    2190. 

  2190.  * Escapes data for use in a MySQL query
    2191. 

  2191.  *
    2192. 

  2192.  * This is just a handy shortcut for $wpdb->escape(), for completeness' sake
    2193. 

  2193.  *
    2194. 

  2194.  * @since 2.8.0
    2195. 

  2195.  * @param string $sql Unescaped SQL data
    2196. 

  2196.  * @return string The cleaned $sql
    2197. 

  2197.  */
    2198. 

  2198. function esc_sql( $sql ) {
    2199. 

  2199. 	global $wpdb;
    2200. 

  2200. 	return $wpdb->escape( $sql );
    2201. 

  2201. }
    2202. 

  2202. 

  2203. /**
    2204. 

  2204.  * Checks and cleans a URL.
    2205. 

  2205.  *
    2206. 

  2206.  * A number of characters are removed from the URL. If the URL is for displaying
    2207. 

  2207.  * (the default behaviour) amperstands are also replaced. The 'clean_url' filter
    2208. 

  2208.  * is applied to the returned cleaned URL.
    2209. 

  2209.  *
    2210. 

  2210.  * @since 2.8.0
    2211. 

  2211.  * @uses wp_kses_bad_protocol() To only permit protocols in the URL set
    2212. 

  2212.  *		via $protocols or the common ones set in the function.
    2213. 

  2213.  *
    2214. 

  2214.  * @param string $url The URL to be cleaned.
    2215. 

  2215.  * @param array $protocols Optional. An array of acceptable protocols.
    2216. 

  2216.  *		Defaults to 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet' if not set.
    2217. 

  2217.  * @param string $_context Private. Use esc_url_raw() for database usage.
    2218. 

  2218.  * @return string The cleaned $url after the 'clean_url' filter is applied.
    2219. 

  2219.  */
    2220. 

  2220. function esc_url( $url, $protocols = null, $_context = 'display' ) {
    2221. 

  2221. 	$original_url = $url;
    2222. 

  2222. 

  2223. 	if ( '' == $url )
    2224. 

  2224. 		return $url;
    2225. 

  2225. 	$url = preg_replace('|[^a-z0-9-~+_.?#=!&;,/:%@$\|*\'()\\x80-\\xff]|i', '', $url);
    2226. 

  2226. 	$strip = array('%0d', '%0a', '%0D', '%0A');
    2227. 

  2227. 	$url = _deep_replace($strip, $url);
    2228. 

  2228. 	$url = str_replace(';//', '://', $url);
    2229. 

  2229. 	/* If the URL doesn't appear to contain a scheme, we
    2230. 

  2230. 	 * presume it needs http:// appended (unless a relative
    2231. 

  2231. 	 * link starting with / or a php file).
    2232. 

  2232. 	 */
    2233. 

  2233. 	if ( strpos($url, ':') === false &&
    2234. 

  2234. 		substr( $url, 0, 1 ) != '/' && substr( $url, 0, 1 ) != '#' && !preg_match('/^[a-z0-9-]+?\.php/i', $url) )
    2235. 

  2235. 		$url = 'http://' . $url;
    2236. 

  2236. 

  2237. 	// Replace ampersands and single quotes only when displaying.
    2238. 

  2238. 	if ( 'display' == $_context ) {
    2239. 

  2239. 		$url = wp_kses_normalize_entities( $url );
    2240. 

  2240. 		$url = str_replace( '&amp;', '&#038;', $url );
    2241. 

  2241. 		$url = str_replace( "'", '&#039;', $url );
    2242. 

  2242. 	}
    2243. 

  2243. 

  2244. 	if ( !is_array($protocols) )
    2245. 

  2245. 		$protocols = array ('http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'svn');
    2246. 

  2246. 	if ( wp_kses_bad_protocol( $url, $protocols ) != $url )
    2247. 

  2247. 		return '';
    2248. 

  2248. 

  2249. 	return apply_filters('clean_url', $url, $original_url, $_context);
    2250. 

  2250. }
    2251. 

  2251. 

  2252. /**
    2253. 

  2253.  * Performs esc_url() for database usage.
    2254. 

  2254.  *
    2255. 

  2255.  * @since 2.8.0
    2256. 

  2256.  * @uses esc_url()
    2257. 

  2257.  *
    2258. 

  2258.  * @param string $url The URL to be cleaned.
    2259. 

  2259.  * @param array $protocols An array of acceptable protocols.
    2260. 

  2260.  * @return string The cleaned URL.
    2261. 

  2261.  */
    2262. 

  2262. function esc_url_raw( $url, $protocols = null ) {
    2263. 

  2263. 	return esc_url( $url, $protocols, 'db' );
    2264. 

  2264. }
    2265. 

  2265. 

  2266. /**
    2267. 

  2267.  * Convert entities, while preserving already-encoded entities.
    2268. 

  2268.  *
    2269. 

  2269.  * @link http://www.php.net/htmlentities Borrowed from the PHP Manual user notes.
    2270. 

  2270.  *
    2271. 

  2271.  * @since 1.2.2
    2272. 

  2272.  *
    2273. 

  2273.  * @param string $myHTML The text to be converted.
    2274. 

  2274.  * @return string Converted text.
    2275. 

  2275.  */
    2276. 

  2276. function htmlentities2($myHTML) {
    2277. 

  2277. 	$translation_table = get_html_translation_table( HTML_ENTITIES, ENT_QUOTES );
    2278. 

  2278. 	$translation_table[chr(38)] = '&';
    2279. 

  2279. 	return preg_replace( "/&(?![A-Za-z]{0,4}\w{2,3};|#[0-9]{2,3};)/", "&amp;", strtr($myHTML, $translation_table) );
    2280. 

  2280. }
    2281. 

  2281. 

  2282. /**
    2283. 

  2283.  * Escape single quotes, htmlspecialchar " < > &, and fix line endings.
    2284. 

  2284.  *
    2285. 

  2285.  * Escapes text strings for echoing in JS. It is intended to be used for inline JS
    2286. 

  2286.  * (in a tag attribute, for example onclick="..."). Note that the strings have to
    2287. 

  2287.  * be in single quotes. The filter 'js_escape' is also applied here.
    2288. 

  2288.  *
    2289. 

  2289.  * @since 2.8.0
    2290. 

  2290.  *
    2291. 

  2291.  * @param string $text The text to be escaped.
    2292. 

  2292.  * @return string Escaped text.
    2293. 

  2293.  */
    2294. 

  2294. function esc_js( $text ) {
    2295. 

  2295. 	$safe_text = wp_check_invalid_utf8( $text );
    2296. 

  2296. 	$safe_text = _wp_specialchars( $safe_text, ENT_COMPAT );
    2297. 

  2297. 	$safe_text = preg_replace( '/&#(x)?0*(?(1)27|39);?/i', "'", stripslashes( $safe_text ) );
    2298. 

  2298. 	$safe_text = str_replace( "\r", '', $safe_text );
    2299. 

  2299. 	$safe_text = str_replace( "\n", '\\n', addslashes( $safe_text ) );
    2300. 

  2300. 	return apply_filters( 'js_escape', $safe_text, $text );
    2301. 

  2301. }
    2302. 

  2302. 

  2303. /**
    2304. 

  2304.  * Escaping for HTML blocks.
    2305. 

  2305.  *
    2306. 

  2306.  * @since 2.8.0
    2307. 

  2307.  *
    2308. 

  2308.  * @param string $text
    2309. 

  2309.  * @return string
    2310. 

  2310.  */
    2311. 

  2311. function esc_html( $text ) {
    2312. 

  2312. 	$safe_text = wp_check_invalid_utf8( $text );
    2313. 

  2313. 	$safe_text = _wp_specialchars( $safe_text, ENT_QUOTES );
    2314. 

  2314. 	return apply_filters( 'esc_html', $safe_text, $text );
    2315. 

  2315. }
    2316. 

  2316. 

  2317. /**
    2318. 

  2318.  * Escaping for HTML attributes.
    2319. 

  2319.  *
    2320. 

  2320.  * @since 2.8.0
    2321. 

  2321.  *
    2322. 

  2322.  * @param string $text
    2323. 

  2323.  * @return string
    2324. 

  2324.  */
    2325. 

  2325. function esc_attr( $text ) {
    2326. 

  2326. 	$safe_text = wp_check_invalid_utf8( $text );
    2327. 

  2327. 	$safe_text = _wp_specialchars( $safe_text, ENT_QUOTES );
    2328. 

  2328. 	return apply_filters( 'attribute_escape', $safe_text, $text );
    2329. 

  2329. }
    2330. 

  2330. 

  2331. /**
    2332. 

  2332.  * Escape a HTML tag name.
    2333. 

  2333.  *
    2334. 

  2334.  * @since 2.5.0
    2335. 

  2335.  *
    2336. 

  2336.  * @param string $tag_name
    2337. 

  2337.  * @return string
    2338. 

  2338.  */
    2339. 

  2339. function tag_escape($tag_name) {
    2340. 

  2340. 	$safe_tag = strtolower( preg_replace('/[^a-zA-Z_:]/', '', $tag_name) );
    2341. 

  2341. 	return apply_filters('tag_escape', $safe_tag, $tag_name);
    2342. 

  2342. }
    2343. 

  2343. 

  2344. /**
    2345. 

  2345.  * Escapes text for SQL LIKE special characters % and _.
    2346. 

  2346.  *
    2347. 

  2347.  * @since 2.5.0
    2348. 

  2348.  *
    2349. 

  2349.  * @param string $text The text to be escaped.
    2350. 

  2350.  * @return string text, safe for inclusion in LIKE query.
    2351. 

  2351.  */
    2352. 

  2352. function like_escape($text) {
    2353. 

  2353. 	return str_replace(array("%", "_"), array("\\%", "\\_"), $text);
    2354. 

  2354. }
    2355. 

  2355. 

  2356. /**
    2357. 

  2357.  * Convert full URL paths to absolute paths.
    2358. 

  2358.  *
    2359. 

  2359.  * Removes the http or https protocols and the domain. Keeps the path '/' at the
    2360. 

  2360.  * beginning, so it isn't a true relative link, but from the web root base.
    2361. 

  2361.  *
    2362. 

  2362.  * @since 2.1.0
    2363. 

  2363.  *
    2364. 

  2364.  * @param string $link Full URL path.
    2365. 

  2365.  * @return string Absolute path.
    2366. 

  2366.  */
    2367. 

  2367. function wp_make_link_relative( $link ) {
    2368. 

  2368. 	return preg_replace( '|https?://[^/]+(/.*)|i', '$1', $link );
    2369. 

  2369. }
    2370. 

  2370. 

  2371. /**
    2372. 

  2372.  * Sanitises various option values based on the nature of the option.
    2373. 

  2373.  *
    2374. 

  2374.  * This is basically a switch statement which will pass $value through a number
    2375. 

  2375.  * of functions depending on the $option.
    2376. 

  2376.  *
    2377. 

  2377.  * @since 2.0.5
    2378. 

  2378.  *
    2379. 

  2379.  * @param string $option The name of the option.
    2380. 

  2380.  * @param string $value The unsanitised value.
    2381. 

  2381.  * @return string Sanitized value.
    2382. 

  2382.  */
    2383. 

  2383. function sanitize_option($option, $value) {
    2384. 

  2384. 

  2385. 	switch ( $option ) {
    2386. 

  2386. 		case 'admin_email':
    2387. 

  2387. 			$value = sanitize_email($value);
    2388. 

  2388. 			if ( !is_email($value) ) {
    2389. 

  2389. 				$value = get_option( $option ); // Resets option to stored value in the case of failed sanitization
    2390. 

  2390. 				if ( function_exists('add_settings_error') )
    2391. 

  2391. 					add_settings_error('admin_email', 'invalid_admin_email', __('The email address entered did not appear to be a valid email address. Please enter a valid email address.'));
    2392. 

  2392. 			}
    2393. 

  2393. 			break;
    2394. 

  2394. 

  2395. 		case 'thumbnail_size_w':
    2396. 

  2396. 		case 'thumbnail_size_h':
    2397. 

  2397. 		case 'medium_size_w':
    2398. 

  2398. 		case 'medium_size_h':
    2399. 

  2399. 		case 'large_size_w':
    2400. 

  2400. 		case 'large_size_h':
    2401. 

  2401. 		case 'embed_size_h':
    2402. 

  2402. 		case 'default_post_edit_rows':
    2403. 

  2403. 		case 'mailserver_port':
    2404. 

  2404. 		case 'comment_max_links':
    2405. 

  2405. 		case 'page_on_front':
    2406. 

  2406. 		case 'page_for_posts':
    2407. 

  2407. 		case 'rss_excerpt_length':
    2408. 

  2408. 		case 'default_category':
    2409. 

  2409. 		case 'default_email_category':
    2410. 

  2410. 		case 'default_link_category':
    2411. 

  2411. 		case 'close_comments_days_old':
    2412. 

  2412. 		case 'comments_per_page':
    2413. 

  2413. 		case 'thread_comments_depth':
    2414. 

  2414. 		case 'users_can_register':
    2415. 

  2415. 		case 'start_of_week':
    2416. 

  2416. 			$value = absint( $value );
    2417. 

  2417. 			break;
    2418. 

  2418. 

  2419. 		case 'embed_size_w':
    2420. 

  2420. 			if ( '' !== $value )
    2421. 

  2421. 				$value = absint( $value );
    2422. 

  2422. 			break;
    2423. 

  2423. 

  2424. 		case 'posts_per_page':
    2425. 

  2425. 		case 'posts_per_rss':
    2426. 

  2426. 			$value = (int) $value;
    2427. 

  2427. 			if ( empty($value) )
    2428. 

  2428. 				$value = 1;
    2429. 

  2429. 			if ( $value < -1 )
    2430. 

  2430. 				$value = abs($value);
    2431. 

  2431. 			break;
    2432. 

  2432. 

  2433. 		case 'default_ping_status':
    2434. 

  2434. 		case 'default_comment_status':
    2435. 

  2435. 			// Options that if not there have 0 value but need to be something like "closed"
    2436. 

  2436. 			if ( $value == '0' || $value == '')
    2437. 

  2437. 				$value = 'closed';
    2438. 

  2438. 			break;
    2439. 

  2439. 

  2440. 		case 'blogdescription':
    2441. 

  2441. 		case 'blogname':
    2442. 

  2442. 			$value = addslashes($value);
    2443. 

  2443. 			$value = wp_filter_post_kses( $value ); // calls stripslashes then addslashes
    2444. 

  2444. 			$value = stripslashes($value);
    2445. 

  2445. 			$value = esc_html( $value );
    2446. 

  2446. 			break;
    2447. 

  2447. 

  2448. 		case 'blog_charset':
    2449. 

  2449. 			$value = preg_replace('/[^a-zA-Z0-9_-]/', '', $value); // strips slashes
    2450. 

  2450. 			break;
    2451. 

  2451. 

  2452. 		case 'date_format':
    2453. 

  2453. 		case 'time_format':
    2454. 

  2454. 		case 'mailserver_url':
    2455. 

  2455. 		case 'mailserver_login':
    2456. 

  2456. 		case 'mailserver_pass':
    2457. 

  2457. 		case 'ping_sites':
    2458. 

  2458. 		case 'upload_path':
    2459. 

  2459. 			$value = strip_tags($value);
    2460. 

  2460. 			$value = addslashes($value);
    2461. 

  2461. 			$value = wp_filter_kses($value); // calls stripslashes then addslashes
    2462. 

  2462. 			$value = stripslashes($value);
    2463. 

  2463. 			break;
    2464. 

  2464. 

  2465. 		case 'gmt_offset':
    2466. 

  2466. 			$value = preg_replace('/[^0-9:.-]/', '', $value); // strips slashes
    2467. 

  2467. 			break;
    2468. 

  2468. 

  2469. 		case 'siteurl':
    2470. 

  2470. 			if ( (bool)preg_match( '#http(s?)://(.+)#i', $value) ) {
    2471. 

  2471. 				$value = esc_url_raw($value);
    2472. 

  2472. 			} else {
    2473. 

  2473. 				$value = get_option( $option ); // Resets option to stored value in the case of failed sanitization
    2474. 

  2474. 				if ( function_exists('add_settings_error') )
    2475. 

  2475. 					add_settings_error('siteurl', 'invalid_siteurl', __('The WordPress address you entered did not appear to be a valid URL. Please enter a valid URL.'));
    2476. 

  2476. 			}
    2477. 

  2477. 			break;
    2478. 

  2478. 

  2479. 		case 'home':
    2480. 

  2480. 			if ( (bool)preg_match( '#http(s?)://(.+)#i', $value) ) {
    2481. 

  2481. 				$value = esc_url_raw($value);
    2482. 

  2482. 			} else {
    2483. 

  2483. 				$value = get_option( $option ); // Resets option to stored value in the case of failed sanitization
    2484. 

  2484. 				if ( function_exists('add_settings_error') )
    2485. 

  2485. 					add_settings_error('home', 'invalid_home', __('The Site address you entered did not appear to be a valid URL. Please enter a valid URL.'));
    2486. 

  2486. 			}
    2487. 

  2487. 			break;
    2488. 

  2488. 

  2489. 		default :
    2490. 

  2490. 			$value = apply_filters("sanitize_option_{$option}", $value, $option);
    2491. 

  2491. 			break;
    2492. 

  2492. 	}
    2493. 

  2493. 

  2494. 	return $value;
    2495. 

  2495. }
    2496. 

  2496. 

  2497. /**
    2498. 

  2498.  * Parses a string into variables to be stored in an array.
    2499. 

  2499.  *
    2500. 

  2500.  * Uses {@link http://www.php.net/parse_str parse_str()} and stripslashes if
    2501. 

  2501.  * {@link http://www.php.net/magic_quotes magic_quotes_gpc} is on.
    2502. 

  2502.  *
    2503. 

  2503.  * @since 2.2.1
    2504. 

  2504.  * @uses apply_filters() for the 'wp_parse_str' filter.
    2505. 

  2505.  *
    2506. 

  2506.  * @param string $string The string to be parsed.
    2507. 

  2507.  * @param array $array Variables will be stored in this array.
    2508. 

  2508.  */
    2509. 

  2509. function wp_parse_str( $string, &$array ) {
    2510. 

  2510. 	parse_str( $string, $array );
    2511. 

  2511. 	if ( get_magic_quotes_gpc() )
    2512. 

  2512. 		$array = stripslashes_deep( $array );
    2513. 

  2513. 	$array = apply_filters( 'wp_parse_str', $array );
    2514. 

  2514. }
    2515. 

  2515. 

  2516. /**
    2517. 

  2517.  * Convert lone less than signs.
    2518. 

  2518.  *
    2519. 

  2519.  * KSES already converts lone greater than signs.
    2520. 

  2520.  *
    2521. 

  2521.  * @uses wp_pre_kses_less_than_callback in the callback function.
    2522. 

  2522.  * @since 2.3.0
    2523. 

  2523.  *
    2524. 

  2524.  * @param string $text Text to be converted.
    2525. 

  2525.  * @return string Converted text.
    2526. 

  2526.  */
    2527. 

  2527. function wp_pre_kses_less_than( $text ) {
    2528. 

  2528. 	return preg_replace_callback('%<[^>]*?((?=<)|>|$)%', 'wp_pre_kses_less_than_callback', $text);
    2529. 

  2529. }
    2530. 

  2530. 

  2531. /**
    2532. 

  2532.  * Callback function used by preg_replace.
    2533. 

  2533.  *
    2534. 

  2534.  * @uses esc_html to format the $matches text.
    2535. 

  2535.  * @since 2.3.0
    2536. 

  2536.  *
    2537. 

  2537.  * @param array $matches Populated by matches to preg_replace.
    2538. 

  2538.  * @return string The text returned after esc_html if needed.
    2539. 

  2539.  */
    2540. 

  2540. function wp_pre_kses_less_than_callback( $matches ) {
    2541. 

  2541. 	if ( false === strpos($matches[0], '>') )
    2542. 

  2542. 		return esc_html($matches[0]);
    2543. 

  2543. 	return $matches[0];
    2544. 

  2544. }
    2545. 

  2545. 

  2546. /**
    2547. 

  2547.  * WordPress implementation of PHP sprintf() with filters.
    2548. 

  2548.  *
    2549. 

  2549.  * @since 2.5.0
    2550. 

  2550.  * @link http://www.php.net/sprintf
    2551. 

  2551.  *
    2552. 

  2552.  * @param string $pattern The string which formatted args are inserted.
    2553. 

  2553.  * @param mixed $args,... Arguments to be formatted into the $pattern string.
    2554. 

  2554.  * @return string The formatted string.
    2555. 

  2555.  */
    2556. 

  2556. function wp_sprintf( $pattern ) {
    2557. 

  2557. 	$args = func_get_args( );
    2558. 

  2558. 	$len = strlen($pattern);
    2559. 

  2559. 	$start = 0;
    2560. 

  2560. 	$result = '';
    2561. 

  2561. 	$arg_index = 0;
    2562. 

  2562. 	while ( $len > $start ) {
    2563. 

  2563. 		// Last character: append and break
    2564. 

  2564. 		if ( strlen($pattern) - 1 == $start ) {
    2565. 

  2565. 			$result .= substr($pattern, -1);
    2566. 

  2566. 			break;
    2567. 

  2567. 		}
    2568. 

  2568. 

  2569. 		// Literal %: append and continue
    2570. 

  2570. 		if ( substr($pattern, $start, 2) == '%%' ) {
    2571. 

  2571. 			$start += 2;
    2572. 

  2572. 			$result .= '%';
    2573. 

  2573. 			continue;
    2574. 

  2574. 		}
    2575. 

  2575. 

  2576. 		// Get fragment before next %
    2577. 

  2577. 		$end = strpos($pattern, '%', $start + 1);
    2578. 

  2578. 		if ( false === $end )
    2579. 

  2579. 			$end = $len;
    2580. 

  2580. 		$fragment = substr($pattern, $start, $end - $start);
    2581. 

  2581. 

  2582. 		// Fragment has a specifier
    2583. 

  2583. 		if ( $pattern{$start} == '%' ) {
    2584. 

  2584. 			// Find numbered arguments or take the next one in order
    2585. 

  2585. 			if ( preg_match('/^%(\d+)\$/', $fragment, $matches) ) {
    2586. 

  2586. 				$arg = isset($args[$matches[1]]) ? $args[$matches[1]] : '';
    2587. 

  2587. 				$fragment = str_replace("%{$matches[1]}$", '%', $fragment);
    2588. 

  2588. 			} else {
    2589. 

  2589. 				++$arg_index;
    2590. 

  2590. 				$arg = isset($args[$arg_index]) ? $args[$arg_index] : '';
    2591. 

  2591. 			}
    2592. 

  2592. 

  2593. 			// Apply filters OR sprintf
    2594. 

  2594. 			$_fragment = apply_filters( 'wp_sprintf', $fragment, $arg );
    2595. 

  2595. 			if ( $_fragment != $fragment )
    2596. 

  2596. 				$fragment = $_fragment;
    2597. 

  2597. 			else
    2598. 

  2598. 				$fragment = sprintf($fragment, strval($arg) );
    2599. 

  2599. 		}
    2600. 

  2600. 

  2601. 		// Append to result and move to next fragment
    2602. 

  2602. 		$result .= $fragment;
    2603. 

  2603. 		$start = $end;
    2604. 

  2604. 	}
    2605. 

  2605. 	return $result;
    2606. 

  2606. }
    2607. 

  2607. 

  2608. /**
    2609. 

  2609.  * Localize list items before the rest of the content.
    2610. 

  2610.  *
    2611. 

  2611.  * The '%l' must be at the first characters can then contain the rest of the
    2612. 

  2612.  * content. The list items will have ', ', ', and', and ' and ' added depending
    2613. 

  2613.  * on the amount of list items in the $args parameter.
    2614. 

  2614.  *
    2615. 

  2615.  * @since 2.5.0
    2616. 

  2616.  *
    2617. 

  2617.  * @param string $pattern Content containing '%l' at the beginning.
    2618. 

  2618.  * @param array $args List items to prepend to the content and replace '%l'.
    2619. 

  2619.  * @return string Localized list items and rest of the content.
    2620. 

  2620.  */
    2621. 

  2621. function wp_sprintf_l($pattern, $args) {
    2622. 

  2622. 	// Not a match
    2623. 

  2623. 	if ( substr($pattern, 0, 2) != '%l' )
    2624. 

  2624. 		return $pattern;
    2625. 

  2625. 

  2626. 	// Nothing to work with
    2627. 

  2627. 	if ( empty($args) )
    2628. 

  2628. 		return '';
    2629. 

  2629. 

  2630. 	// Translate and filter the delimiter set (avoid ampersands and entities here)
    2631. 

  2631. 	$l = apply_filters('wp_sprintf_l', array(
    2632. 

  2632. 		/* translators: used between list items, there is a space after the coma */
    2633. 

  2633. 		'between'          => __(', '),
    2634. 

  2634. 		/* translators: used between list items, there is a space after the and */
    2635. 

  2635. 		'between_last_two' => __(', and '),
    2636. 

  2636. 		/* translators: used between only two list items, there is a space after the and */
    2637. 

  2637. 		'between_only_two' => __(' and '),
    2638. 

  2638. 		));
    2639. 

  2639. 

  2640. 	$args = (array) $args;
    2641. 

  2641. 	$result = array_shift($args);
    2642. 

  2642. 	if ( count($args) == 1 )
    2643. 

  2643. 		$result .= $l['between_only_two'] . array_shift($args);
    2644. 

  2644. 	// Loop when more than two args
    2645. 

  2645. 	$i = count($args);
    2646. 

  2646. 	while ( $i ) {
    2647. 

  2647. 		$arg = array_shift($args);
    2648. 

  2648. 		$i--;
    2649. 

  2649. 		if ( 0 == $i )
    2650. 

  2650. 			$result .= $l['between_last_two'] . $arg;
    2651. 

  2651. 		else
    2652. 

  2652. 			$result .= $l['between'] . $arg;
    2653. 

  2653. 	}
    2654. 

  2654. 	return $result . substr($pattern, 2);
    2655. 

  2655. }
    2656. 

  2656. 

  2657. /**
    2658. 

  2658.  * Safely extracts not more than the first $count characters from html string.
    2659. 

  2659.  *
    2660. 

  2660.  * UTF-8, tags and entities safe prefix extraction. Entities inside will *NOT*
    2661. 

  2661.  * be counted as one character. For example &amp; will be counted as 4, &lt; as
    2662. 

  2662.  * 3, etc.
    2663. 

  2663.  *
    2664. 

  2664.  * @since 2.5.0
    2665. 

  2665.  *
    2666. 

  2666.  * @param integer $str String to get the excerpt from.
    2667. 

  2667.  * @param integer $count Maximum number of characters to take.
    2668. 

  2668.  * @return string The excerpt.
    2669. 

  2669.  */
    2670. 

  2670. function wp_html_excerpt( $str, $count ) {
    2671. 

  2671. 	$str = wp_strip_all_tags( $str, true );
    2672. 

  2672. 	$str = mb_substr( $str, 0, $count );
    2673. 

  2673. 	// remove part of an entity at the end
    2674. 

  2674. 	$str = preg_replace( '/&[^;\s]{0,6}$/', '', $str );
    2675. 

  2675. 	return $str;
    2676. 

  2676. }
    2677. 

  2677. 

  2678. /**
    2679. 

  2679.  * Add a Base url to relative links in passed content.
    2680. 

  2680.  *
    2681. 

  2681.  * By default it supports the 'src' and 'href' attributes. However this can be
    2682. 

  2682.  * changed via the 3rd param.
    2683. 

  2683.  *
    2684. 

  2684.  * @since 2.7.0
    2685. 

  2685.  *
    2686. 

  2686.  * @param string $content String to search for links in.
    2687. 

  2687.  * @param string $base The base URL to prefix to links.
    2688. 

  2688.  * @param array $attrs The attributes which should be processed.
    2689. 

  2689.  * @return string The processed content.
    2690. 

  2690.  */
    2691. 

  2691. function links_add_base_url( $content, $base, $attrs = array('src', 'href') ) {
    2692. 

  2692. 	$attrs = implode('|', (array)$attrs);
    2693. 

  2693. 	return preg_replace_callback("!($attrs)=(['\"])(.+?)\\2!i",
    2694. 

  2694. 			create_function('$m', 'return _links_add_base($m, "' . $base . '");'),
    2695. 

  2695. 			$content);
    2696. 

  2696. }
    2697. 

  2697. 

  2698. /**
    2699. 

  2699.  * Callback to add a base url to relative links in passed content.
    2700. 

  2700.  *
    2701. 

  2701.  * @since 2.7.0
    2702. 

  2702.  * @access private
    2703. 

  2703.  *
    2704. 

  2704.  * @param string $m The matched link.
    2705. 

  2705.  * @param string $base The base URL to prefix to links.
    2706. 

  2706.  * @return string The processed link.
    2707. 

  2707.  */
    2708. 

  2708. function _links_add_base($m, $base) {
    2709. 

  2709. 	//1 = attribute name  2 = quotation mark  3 = URL
    2710. 

  2710. 	return $m[1] . '=' . $m[2] .
    2711. 

  2711. 		(strpos($m[3], 'http://') === false ?
    2712. 

  2712. 			path_join($base, $m[3]) :
    2713. 

  2713. 			$m[3])
    2714. 

  2714. 		. $m[2];
    2715. 

  2715. }
    2716. 

  2716. 

  2717. /**
    2718. 

  2718.  * Adds a Target attribute to all links in passed content.
    2719. 

  2719.  *
    2720. 

  2720.  * This function by default only applies to <a> tags, however this can be
    2721. 

  2721.  * modified by the 3rd param.
    2722. 

  2722.  *
    2723. 

  2723.  * <b>NOTE:</b> Any current target attributed will be striped and replaced.
    2724. 

  2724.  *
    2725. 

  2725.  * @since 2.7.0
    2726. 

  2726.  *
    2727. 

  2727.  * @param string $content String to search for links in.
    2728. 

  2728.  * @param string $target The Target to add to the links.
    2729. 

  2729.  * @param array $tags An array of tags to apply to.
    2730. 

  2730.  * @return string The processed content.
    2731. 

  2731.  */
    2732. 

  2732. function links_add_target( $content, $target = '_blank', $tags = array('a') ) {
    2733. 

  2733. 	$tags = implode('|', (array)$tags);
    2734. 

  2734. 	return preg_replace_callback("!<($tags)(.+?)>!i",
    2735. 

  2735. 			create_function('$m', 'return _links_add_target($m, "' . $target . '");'),
    2736. 

  2736. 			$content);
    2737. 

  2737. }
    2738. 

  2738. 

  2739. /**
    2740. 

  2740.  * Callback to add a target attribute to all links in passed content.
    2741. 

  2741.  *
    2742. 

  2742.  * @since 2.7.0
    2743. 

  2743.  * @access private
    2744. 

  2744.  *
    2745. 

  2745.  * @param string $m The matched link.
    2746. 

  2746.  * @param string $target The Target to add to the links.
    2747. 

  2747.  * @return string The processed link.
    2748. 

  2748.  */
    2749. 

  2749. function _links_add_target( $m, $target ) {
    2750. 

  2750. 	$tag = $m[1];
    2751. 

  2751. 	$link = preg_replace('|(target=[\'"](.*?)[\'"])|i', '', $m[2]);
    2752. 

  2752. 	return '<' . $tag . $link . ' target="' . $target . '">';
    2753. 

  2753. }
    2754. 

  2754. 

  2755. // normalize EOL characters and strip duplicate whitespace
    2756. 

  2756. function normalize_whitespace( $str ) {
    2757. 

  2757. 	$str  = trim($str);
    2758. 

  2758. 	$str  = str_replace("\r", "\n", $str);
    2759. 

  2759. 	$str  = preg_replace( array( '/\n+/', '/[ \t]+/' ), array( "\n", ' ' ), $str );
    2760. 

  2760. 	return $str;
    2761. 

  2761. }
    2762. 

  2762. 

  2763. /**
    2764. 

  2764.  * Properly strip all HTML tags including script and style
    2765. 

  2765.  *
    2766. 

  2766.  * @since 2.9.0
    2767. 

  2767.  *
    2768. 

  2768.  * @param string $string String containing HTML tags
    2769. 

  2769.  * @param bool $remove_breaks optional Whether to remove left over line breaks and white space chars
    2770. 

  2770.  * @return string The processed string.
    2771. 

  2771.  */
    2772. 

  2772. function wp_strip_all_tags($string, $remove_breaks = false) {
    2773. 

  2773. 	$string = preg_replace( '@<(script|style)[^>]*?>.*?</\\1>@si', '', $string );
    2774. 

  2774. 	$string = strip_tags($string);
    2775. 

  2775. 

  2776. 	if ( $remove_breaks )
    2777. 

  2777. 		$string = preg_replace('/[\r\n\t ]+/', ' ', $string);
    2778. 

  2778. 

  2779. 	return trim($string);
    2780. 

  2780. }
    2781. 

  2781. 

  2782. /**
    2783. 

  2783.  * Sanitize a string from user input or from the db
    2784. 

  2784.  *
    2785. 

  2785.  * check for invalid UTF-8,
    2786. 

  2786.  * Convert single < characters to entity,
    2787. 

  2787.  * strip all tags,
    2788. 

  2788.  * remove line breaks, tabs and extra white space,
    2789. 

  2789.  * strip octets.
    2790. 

  2790.  *
    2791. 

  2791.  * @since 2.9.0
    2792. 

  2792.  *
    2793. 

  2793.  * @param string $str
    2794. 

  2794.  * @return string
    2795. 

  2795.  */
    2796. 

  2796. function sanitize_text_field($str) {
    2797. 

  2797. 	$filtered = wp_check_invalid_utf8( $str );
    2798. 

  2798. 

  2799. 	if ( strpos($filtered, '<') !== false ) {
    2800. 

  2800. 		$filtered = wp_pre_kses_less_than( $filtered );
    2801. 

  2801. 		// This will strip extra whitespace for us.
    2802. 

  2802. 		$filtered = wp_strip_all_tags( $filtered, true );
    2803. 

  2803. 	} else {
    2804. 

  2804. 		$filtered = trim( preg_replace('/[\r\n\t ]+/', ' ', $filtered) );
    2805. 

  2805. 	}
    2806. 

  2806. 

  2807. 	$match = array();
    2808. 

  2808. 	$found = false;
    2809. 

  2809. 	while ( preg_match('/%[a-f0-9]{2}/i', $filtered, $match) ) {
    2810. 

  2810. 		$filtered = str_replace($match[0], '', $filtered);
    2811. 

  2811. 		$found = true;
    2812. 

  2812. 	}
    2813. 

  2813. 

  2814. 	if ( $found ) {
    2815. 

  2815. 		// Strip out the whitespace that may now exist after removing the octets.
    2816. 

  2816. 		$filtered = trim( preg_replace('/ +/', ' ', $filtered) );
    2817. 

  2817. 	}
    2818. 

  2818. 

  2819. 	return apply_filters('sanitize_text_field', $filtered, $str);
    2820. 

  2820. }
    2821. 

  2821. 

  2822. /**
    2823. 

  2823.  * Forever eliminate "Wordpress" from the planet (or at least the little bit we can influence).
    2824. 

  2824.  *
    2825. 

  2825.  * Violating our coding standards for a good function name.
    2826. 

  2826.  *
    2827. 

  2827.  * @since 3.0.0
    2828. 

  2828.  */
    2829. 

  2829. 

  2830. function capital_P_dangit( $text ) {
    2831. 

  2831. 	// Simple replacement for titles
    2832. 

  2832. 	if ( 'the_title' === current_filter() )
    2833. 

  2833. 		return str_replace( 'Wordpress', 'WordPress', $text );
    2834. 

  2834. 	// Still here? Use the more judicious replacement
    2835. 

  2835. 	static $dblq = false;
    2836. 

  2836. 	if ( false === $dblq )
    2837. 

  2837. 		$dblq = _x('&#8220;', 'opening curly quote');
    2838. 

  2838. 	return str_replace(
    2839. 

  2839. 		array( ' Wordpress', '&#8216;Wordpress', $dblq . 'Wordpress', '>Wordpress', '(Wordpress' ),
    2840. 

  2840. 		array( ' WordPress', '&#8216;WordPress', $dblq . 'WordPress', '>WordPress', '(WordPress' ),
    2841. 

  2841. 	$text );
    2842. 

  2842. 

  2843. }
    2844. 

  2844. 

  2845. ?>
    2846. 

  2846.