PageRenderTime 64ms CodeModel.GetById 14ms RepoModel.GetById 1ms app.codeStats 0ms

/wp-includes/formatting.php

https://github.com/davidmh/WordPress
PHP | 3145 lines | 1885 code | 258 blank | 1002 comment | 248 complexity | 26916e2e25578625b030e14c24d3cc01 MD5 | raw file
Possible License(s): AGPL-1.0, GPL-2.0, LGPL-2.1 
    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * Main WordPress Formatting API.
    4. 

  4.  *
    5. 

  5.  * Handles many functions for formatting output.
    6. 

  6.  *
    7. 

  7.  * @package WordPress
    8. 

  8.  **/
    9. 

  9. 

  10. /**
    11. 

  11.  * Replaces common plain text characters into formatted entities
    12. 

  12.  *
    13. 

  13.  * As an example,
    14. 

  14.  * <code>
    15. 

  15.  * 'cause today's effort makes it worth tomorrow's "holiday"...
    16. 

  16.  * </code>
    17. 

  17.  * Becomes:
    18. 

  18.  * <code>
    19. 

  19.  * &#8217;cause today&#8217;s effort makes it worth tomorrow&#8217;s &#8220;holiday&#8221;&#8230;
    20. 

  20.  * </code>
    21. 

  21.  * Code within certain html blocks are skipped.
    22. 

  22.  *
    23. 

  23.  * @since 0.71
    24. 

  24.  * @uses $wp_cockneyreplace Array of formatted entities for certain common phrases
    25. 

  25.  *
    26. 

  26.  * @param string $text The text to be formatted
    27. 

  27.  * @return string The string replaced with html entities
    28. 

  28.  */
    29. 

  29. function wptexturize($text) {
    30. 

  30. 	global $wp_cockneyreplace;
    31. 

  31. 	static $static_characters, $static_replacements, $dynamic_characters, $dynamic_replacements,
    32. 

  32. 		$default_no_texturize_tags, $default_no_texturize_shortcodes;
    33. 

  33. 

  34. 	// No need to set up these static variables more than once
    35. 

  35. 	if ( ! isset( $static_characters ) ) {
    36. 

  36. 		/* translators: opening curly double quote */
    37. 

  37. 		$opening_quote = _x( '&#8220;', 'opening curly double quote' );
    38. 

  38. 		/* translators: closing curly double quote */
    39. 

  39. 		$closing_quote = _x( '&#8221;', 'closing curly double quote' );
    40. 

  40. 

  41. 		/* translators: apostrophe, for example in 'cause or can't */
    42. 

  42. 		$apos = _x( '&#8217;', 'apostrophe' );
    43. 

  43. 

  44. 		/* translators: prime, for example in 9' (nine feet) */
    45. 

  45. 		$prime = _x( '&#8242;', 'prime' );
    46. 

  46. 		/* translators: double prime, for example in 9" (nine inches) */
    47. 

  47. 		$double_prime = _x( '&#8243;', 'double prime' );
    48. 

  48. 

  49. 		/* translators: opening curly single quote */
    50. 

  50. 		$opening_single_quote = _x( '&#8216;', 'opening curly single quote' );
    51. 

  51. 		/* translators: closing curly single quote */
    52. 

  52. 		$closing_single_quote = _x( '&#8217;', 'closing curly single quote' );
    53. 

  53. 

  54. 		/* translators: en dash */
    55. 

  55. 		$en_dash = _x( '&#8211;', 'en dash' );
    56. 

  56. 		/* translators: em dash */
    57. 

  57. 		$em_dash = _x( '&#8212;', 'em dash' );
    58. 

  58. 

  59. 		$default_no_texturize_tags = array('pre', 'code', 'kbd', 'style', 'script', 'tt');
    60. 

  60. 		$default_no_texturize_shortcodes = array('code');
    61. 

  61. 

  62. 		// if a plugin has provided an autocorrect array, use it
    63. 

  63. 		if ( isset($wp_cockneyreplace) ) {
    64. 

  64. 			$cockney = array_keys($wp_cockneyreplace);
    65. 

  65. 			$cockneyreplace = array_values($wp_cockneyreplace);
    66. 

  66. 		} elseif ( "'" != $apos ) { // Only bother if we're doing a replacement.
    67. 

  67. 			$cockney = array( "'tain't", "'twere", "'twas", "'tis", "'twill", "'til", "'bout", "'nuff", "'round", "'cause" );
    68. 

  68. 			$cockneyreplace = array( $apos . "tain" . $apos . "t", $apos . "twere", $apos . "twas", $apos . "tis", $apos . "twill", $apos . "til", $apos . "bout", $apos . "nuff", $apos . "round", $apos . "cause" );
    69. 

  69. 		} else {
    70. 

  70. 			$cockney = $cockneyreplace = array();
    71. 

  71. 		}
    72. 

  72. 

  73. 		$static_characters = array_merge( array( '---', ' -- ', '--', ' - ', 'xn&#8211;', '...', '``', '\'\'', ' (tm)' ), $cockney );
    74. 

  74. 		$static_replacements = array_merge( array( $em_dash, ' ' . $em_dash . ' ', $en_dash, ' ' . $en_dash . ' ', 'xn--', '&#8230;', $opening_quote, $closing_quote, ' &#8482;' ), $cockneyreplace );
    75. 

  75. 

  76. 		$dynamic = array();
    77. 

  77. 		if ( "'" != $apos ) {
    78. 

  78. 			$dynamic[ '/\'(\d\d(?:&#8217;|\')?s)/' ] = $apos . '$1'; // '99's
    79. 

  79. 			$dynamic[ '/\'(\d)/'                   ] = $apos . '$1'; // '99
    80. 

  80. 		}
    81. 

  81. 		if ( "'" != $opening_single_quote )
    82. 

  82. 			$dynamic[ '/(\s|\A|[([{<]|")\'/'       ] = '$1' . $opening_single_quote; // opening single quote, even after (, {, <, [
    83. 

  83. 		if ( '"' != $double_prime )
    84. 

  84. 			$dynamic[ '/(\d)"/'                    ] = '$1' . $double_prime; // 9" (double prime)
    85. 

  85. 		if ( "'" != $prime )
    86. 

  86. 			$dynamic[ '/(\d)\'/'                   ] = '$1' . $prime; // 9' (prime)
    87. 

  87. 		if ( "'" != $apos )
    88. 

  88. 			$dynamic[ '/(\S)\'([^\'\s])/'          ] = '$1' . $apos . '$2'; // apostrophe in a word
    89. 

  89. 		if ( '"' != $opening_quote )
    90. 

  90. 			$dynamic[ '/(\s|\A|[([{<])"(?!\s)/'    ] = '$1' . $opening_quote . '$2'; // opening double quote, even after (, {, <, [
    91. 

  91. 		if ( '"' != $closing_quote )
    92. 

  92. 			$dynamic[ '/"(\s|\S|\Z)/'              ] = $closing_quote . '$1'; // closing double quote
    93. 

  93. 		if ( "'" != $closing_single_quote )
    94. 

  94. 			$dynamic[ '/\'([\s.]|\Z)/'             ] = $closing_single_quote . '$1'; // closing single quote
    95. 

  95. 

  96. 		$dynamic[ '/\b(\d+)x(\d+)\b/'              ] = '$1&#215;$2'; // 9x9 (times)
    97. 

  97. 

  98. 		$dynamic_characters = array_keys( $dynamic );
    99. 

  99. 		$dynamic_replacements = array_values( $dynamic );
    100. 

  100. 	}
    101. 

  101. 

  102. 	// Transform into regexp sub-expression used in _wptexturize_pushpop_element
    103. 

  103. 	// Must do this everytime in case plugins use these filters in a context sensitive manner
    104. 

  104. 	$no_texturize_tags = '(' . implode('|', apply_filters('no_texturize_tags', $default_no_texturize_tags) ) . ')';
    105. 

  105. 	$no_texturize_shortcodes = '(' . implode('|', apply_filters('no_texturize_shortcodes', $default_no_texturize_shortcodes) ) . ')';
    106. 

  106. 

  107. 	$no_texturize_tags_stack = array();
    108. 

  108. 	$no_texturize_shortcodes_stack = array();
    109. 

  109. 

  110. 	$textarr = preg_split('/(<.*>|\[.*\])/Us', $text, -1, PREG_SPLIT_DELIM_CAPTURE);
    111. 

  111. 

  112. 	foreach ( $textarr as &$curl ) {
    113. 

  113. 		if ( empty( $curl ) )
    114. 

  114. 			continue;
    115. 

  115. 

  116. 		// Only call _wptexturize_pushpop_element if first char is correct tag opening
    117. 

  117. 		$first = $curl[0];
    118. 

  118. 		if ( '<' === $first ) {
    119. 

  119. 			_wptexturize_pushpop_element($curl, $no_texturize_tags_stack, $no_texturize_tags, '<', '>');
    120. 

  120. 		} elseif ( '[' === $first ) {
    121. 

  121. 			_wptexturize_pushpop_element($curl, $no_texturize_shortcodes_stack, $no_texturize_shortcodes, '[', ']');
    122. 

  122. 		} elseif ( empty($no_texturize_shortcodes_stack) && empty($no_texturize_tags_stack) ) {
    123. 

  123. 			// This is not a tag, nor is the texturization disabled static strings
    124. 

  124. 			$curl = str_replace($static_characters, $static_replacements, $curl);
    125. 

  125. 			// regular expressions
    126. 

  126. 			$curl = preg_replace($dynamic_characters, $dynamic_replacements, $curl);
    127. 

  127. 		}
    128. 

  128. 		$curl = preg_replace('/&([^#])(?![a-zA-Z1-4]{1,8};)/', '&#038;$1', $curl);
    129. 

  129. 	}
    130. 

  130. 	return implode( '', $textarr );
    131. 

  131. }
    132. 

  132. 

  133. /**
    134. 

  134.  * Search for disabled element tags. Push element to stack on tag open and pop
    135. 

  135.  * on tag close. Assumes first character of $text is tag opening.
    136. 

  136.  *
    137. 

  137.  * @access private
    138. 

  138.  * @since 2.9.0
    139. 

  139.  *
    140. 

  140.  * @param string $text Text to check. First character is assumed to be $opening
    141. 

  141.  * @param array $stack Array used as stack of opened tag elements
    142. 

  142.  * @param string $disabled_elements Tags to match against formatted as regexp sub-expression
    143. 

  143.  * @param string $opening Tag opening character, assumed to be 1 character long
    144. 

  144.  * @param string $opening Tag closing  character
    145. 

  145.  * @return object
    146. 

  146.  */
    147. 

  147. function _wptexturize_pushpop_element($text, &$stack, $disabled_elements, $opening = '<', $closing = '>') {
    148. 

  148. 	// Check if it is a closing tag -- otherwise assume opening tag
    149. 

  149. 	if (strncmp($opening . '/', $text, 2)) {
    150. 

  150. 		// Opening? Check $text+1 against disabled elements
    151. 

  151. 		if (preg_match('/^' . $disabled_elements . '\b/', substr($text, 1), $matches)) {
    152. 

  152. 			/*
    153. 

  153. 			 * This disables texturize until we find a closing tag of our type
    154. 

  154. 			 * (e.g. <pre>) even if there was invalid nesting before that
    155. 

  155. 			 *
    156. 

  156. 			 * Example: in the case <pre>sadsadasd</code>"baba"</pre>
    157. 

  157. 			 *          "baba" won't be texturize
    158. 

  158. 			 */
    159. 

  159. 

  160. 			array_push($stack, $matches[1]);
    161. 

  161. 		}
    162. 

  162. 	} else {
    163. 

  163. 		// Closing? Check $text+2 against disabled elements
    164. 

  164. 		$c = preg_quote($closing, '/');
    165. 

  165. 		if (preg_match('/^' . $disabled_elements . $c . '/', substr($text, 2), $matches)) {
    166. 

  166. 			$last = array_pop($stack);
    167. 

  167. 

  168. 			// Make sure it matches the opening tag
    169. 

  169. 			if ($last != $matches[1])
    170. 

  170. 				array_push($stack, $last);
    171. 

  171. 		}
    172. 

  172. 	}
    173. 

  173. }
    174. 

  174. 

  175. /**
    176. 

  176.  * Accepts matches array from preg_replace_callback in wpautop() or a string.
    177. 

  177.  *
    178. 

  178.  * Ensures that the contents of a <<pre>>...<</pre>> HTML block are not
    179. 

  179.  * converted into paragraphs or line-breaks.
    180. 

  180.  *
    181. 

  181.  * @since 1.2.0
    182. 

  182.  *
    183. 

  183.  * @param array|string $matches The array or string
    184. 

  184.  * @return string The pre block without paragraph/line-break conversion.
    185. 

  185.  */
    186. 

  186. function clean_pre($matches) {
    187. 

  187. 	if ( is_array($matches) )
    188. 

  188. 		$text = $matches[1] . $matches[2] . "</pre>";
    189. 

  189. 	else
    190. 

  190. 		$text = $matches;
    191. 

  191. 

  192. 	$text = str_replace('<br />', '', $text);
    193. 

  193. 	$text = str_replace('<p>', "\n", $text);
    194. 

  194. 	$text = str_replace('</p>', '', $text);
    195. 

  195. 

  196. 	return $text;
    197. 

  197. }
    198. 

  198. 

  199. /**
    200. 

  200.  * Replaces double line-breaks with paragraph elements.
    201. 

  201.  *
    202. 

  202.  * A group of regex replaces used to identify text formatted with newlines and
    203. 

  203.  * replace double line-breaks with HTML paragraph tags. The remaining
    204. 

  204.  * line-breaks after conversion become <<br />> tags, unless $br is set to '0'
    205. 

  205.  * or 'false'.
    206. 

  206.  *
    207. 

  207.  * @since 0.71
    208. 

  208.  *
    209. 

  209.  * @param string $pee The text which has to be formatted.
    210. 

  210.  * @param int|bool $br Optional. If set, this will convert all remaining line-breaks after paragraphing. Default true.
    211. 

  211.  * @return string Text which has been converted into correct paragraph tags.
    212. 

  212.  */
    213. 

  213. function wpautop($pee, $br = 1) {
    214. 

  214. 

  215. 	if ( trim($pee) === '' )
    216. 

  216. 		return '';
    217. 

  217. 	$pee = $pee . "\n"; // just to make things a little easier, pad the end
    218. 

  218. 	$pee = preg_replace('|<br />\s*<br />|', "\n\n", $pee);
    219. 

  219. 	// Space things out a little
    220. 

  220. 	$allblocks = '(?:table|thead|tfoot|caption|col|colgroup|tbody|tr|td|th|div|dl|dd|dt|ul|ol|li|pre|select|option|form|map|area|blockquote|address|math|style|p|h[1-6]|hr|fieldset|legend|section|article|aside|hgroup|header|footer|nav|figure|figcaption|details|menu|summary)';
    221. 

  221. 	$pee = preg_replace('!(<' . $allblocks . '[^>]*>)!', "\n$1", $pee);
    222. 

  222. 	$pee = preg_replace('!(</' . $allblocks . '>)!', "$1\n\n", $pee);
    223. 

  223. 	$pee = str_replace(array("\r\n", "\r"), "\n", $pee); // cross-platform newlines
    224. 

  224. 	if ( strpos($pee, '<object') !== false ) {
    225. 

  225. 		$pee = preg_replace('|\s*<param([^>]*)>\s*|', "<param$1>", $pee); // no pee inside object/embed
    226. 

  226. 		$pee = preg_replace('|\s*</embed>\s*|', '</embed>', $pee);
    227. 

  227. 	}
    228. 

  228. 	$pee = preg_replace("/\n\n+/", "\n\n", $pee); // take care of duplicates
    229. 

  229. 	// make paragraphs, including one at the end
    230. 

  230. 	$pees = preg_split('/\n\s*\n/', $pee, -1, PREG_SPLIT_NO_EMPTY);
    231. 

  231. 	$pee = '';
    232. 

  232. 	foreach ( $pees as $tinkle )
    233. 

  233. 		$pee .= '<p>' . trim($tinkle, "\n") . "</p>\n";
    234. 

  234. 	$pee = preg_replace('|<p>\s*</p>|', '', $pee); // under certain strange conditions it could create a P of entirely whitespace
    235. 

  235. 	$pee = preg_replace('!<p>([^<]+)</(div|address|form)>!', "<p>$1</p></$2>", $pee);
    236. 

  236. 	$pee = preg_replace('!<p>\s*(</?' . $allblocks . '[^>]*>)\s*</p>!', "$1", $pee); // don't pee all over a tag
    237. 

  237. 	$pee = preg_replace("|<p>(<li.+?)</p>|", "$1", $pee); // problem with nested lists
    238. 

  238. 	$pee = preg_replace('|<p><blockquote([^>]*)>|i', "<blockquote$1><p>", $pee);
    239. 

  239. 	$pee = str_replace('</blockquote></p>', '</p></blockquote>', $pee);
    240. 

  240. 	$pee = preg_replace('!<p>\s*(</?' . $allblocks . '[^>]*>)!', "$1", $pee);
    241. 

  241. 	$pee = preg_replace('!(</?' . $allblocks . '[^>]*>)\s*</p>!', "$1", $pee);
    242. 

  242. 	if ($br) {
    243. 

  243. 		$pee = preg_replace_callback('/<(script|style).*?<\/\\1>/s', '_autop_newline_preservation_helper', $pee);
    244. 

  244. 		$pee = preg_replace('|(?<!<br />)\s*\n|', "<br />\n", $pee); // optionally make line breaks
    245. 

  245. 		$pee = str_replace('<WPPreserveNewline />', "\n", $pee);
    246. 

  246. 	}
    247. 

  247. 	$pee = preg_replace('!(</?' . $allblocks . '[^>]*>)\s*<br />!', "$1", $pee);
    248. 

  248. 	$pee = preg_replace('!<br />(\s*</?(?:p|li|div|dl|dd|dt|th|pre|td|ul|ol)[^>]*>)!', '$1', $pee);
    249. 

  249. 	if (strpos($pee, '<pre') !== false)
    250. 

  250. 		$pee = preg_replace_callback('!(<pre[^>]*>)(.*?)</pre>!is', 'clean_pre', $pee );
    251. 

  251. 	$pee = preg_replace( "|\n</p>$|", '</p>', $pee );
    252. 

  252. 

  253. 	return $pee;
    254. 

  254. }
    255. 

  255. 

  256. /**
    257. 

  257.  * Newline preservation help function for wpautop
    258. 

  258.  *
    259. 

  259.  * @since 3.1.0
    260. 

  260.  * @access private
    261. 

  261.  * @param array $matches preg_replace_callback matches array
    262. 

  262.  * @returns string
    263. 

  263.  */
    264. 

  264. function _autop_newline_preservation_helper( $matches ) {
    265. 

  265. 	return str_replace("\n", "<WPPreserveNewline />", $matches[0]);
    266. 

  266. }
    267. 

  267. 

  268. /**
    269. 

  269.  * Don't auto-p wrap shortcodes that stand alone
    270. 

  270.  *
    271. 

  271.  * Ensures that shortcodes are not wrapped in <<p>>...<</p>>.
    272. 

  272.  *
    273. 

  273.  * @since 2.9.0
    274. 

  274.  *
    275. 

  275.  * @param string $pee The content.
    276. 

  276.  * @return string The filtered content.
    277. 

  277.  */
    278. 

  278. function shortcode_unautop( $pee ) {
    279. 

  279. 	global $shortcode_tags;
    280. 

  280. 

  281. 	if ( empty( $shortcode_tags ) || !is_array( $shortcode_tags ) ) {
    282. 

  282. 		return $pee;
    283. 

  283. 	}
    284. 

  284. 

  285. 	$tagregexp = join( '|', array_map( 'preg_quote', array_keys( $shortcode_tags ) ) );
    286. 

  286. 

  287. 	$pattern =
    288. 

  288. 		  '/'
    289. 

  289. 		. '<p>'                              // Opening paragraph
    290. 

  290. 		. '\\s*+'                            // Optional leading whitespace
    291. 

  291. 		. '('                                // 1: The shortcode
    292. 

  292. 		.     '\\['                          // Opening bracket
    293. 

  293. 		.     "($tagregexp)"                 // 2: Shortcode name
    294. 

  294. 		.     '\\b'                          // Word boundary
    295. 

  295. 		                                     // Unroll the loop: Inside the opening shortcode tag
    296. 

  296. 		.     '[^\\]\\/]*'                   // Not a closing bracket or forward slash
    297. 

  297. 		.     '(?:'
    298. 

  298. 		.         '\\/(?!\\])'               // A forward slash not followed by a closing bracket
    299. 

  299. 		.         '[^\\]\\/]*'               // Not a closing bracket or forward slash
    300. 

  300. 		.     ')*?'
    301. 

  301. 		.     '(?:'
    302. 

  302. 		.         '\\/\\]'                   // Self closing tag and closing bracket
    303. 

  303. 		.     '|'
    304. 

  304. 		.         '\\]'                      // Closing bracket
    305. 

  305. 		.         '(?:'                      // Unroll the loop: Optionally, anything between the opening and closing shortcode tags
    306. 

  306. 		.             '[^\\[]*+'             // Not an opening bracket
    307. 

  307. 		.             '(?:'
    308. 

  308. 		.                 '\\[(?!\\/\\2\\])' // An opening bracket not followed by the closing shortcode tag
    309. 

  309. 		.                 '[^\\[]*+'         // Not an opening bracket
    310. 

  310. 		.             ')*+'
    311. 

  311. 		.             '\\[\\/\\2\\]'         // Closing shortcode tag
    312. 

  312. 		.         ')?'
    313. 

  313. 		.     ')'
    314. 

  314. 		. ')'
    315. 

  315. 		. '\\s*+'                            // optional trailing whitespace
    316. 

  316. 		. '<\\/p>'                           // closing paragraph
    317. 

  317. 		. '/s';
    318. 

  318. 

  319. 	return preg_replace( $pattern, '$1', $pee );
    320. 

  320. }
    321. 

  321. 

  322. /**
    323. 

  323.  * Checks to see if a string is utf8 encoded.
    324. 

  324.  *
    325. 

  325.  * NOTE: This function checks for 5-Byte sequences, UTF8
    326. 

  326.  *       has Bytes Sequences with a maximum length of 4.
    327. 

  327.  *
    328. 

  328.  * @author bmorel at ssi dot fr (modified)
    329. 

  329.  * @since 1.2.1
    330. 

  330.  *
    331. 

  331.  * @param string $str The string to be checked
    332. 

  332.  * @return bool True if $str fits a UTF-8 model, false otherwise.
    333. 

  333.  */
    334. 

  334. function seems_utf8($str) {
    335. 

  335. 	$length = strlen($str);
    336. 

  336. 	for ($i=0; $i < $length; $i++) {
    337. 

  337. 		$c = ord($str[$i]);
    338. 

  338. 		if ($c < 0x80) $n = 0; # 0bbbbbbb
    339. 

  339. 		elseif (($c & 0xE0) == 0xC0) $n=1; # 110bbbbb
    340. 

  340. 		elseif (($c & 0xF0) == 0xE0) $n=2; # 1110bbbb
    341. 

  341. 		elseif (($c & 0xF8) == 0xF0) $n=3; # 11110bbb
    342. 

  342. 		elseif (($c & 0xFC) == 0xF8) $n=4; # 111110bb
    343. 

  343. 		elseif (($c & 0xFE) == 0xFC) $n=5; # 1111110b
    344. 

  344. 		else return false; # Does not match any model
    345. 

  345. 		for ($j=0; $j<$n; $j++) { # n bytes matching 10bbbbbb follow ?
    346. 

  346. 			if ((++$i == $length) || ((ord($str[$i]) & 0xC0) != 0x80))
    347. 

  347. 				return false;
    348. 

  348. 		}
    349. 

  349. 	}
    350. 

  350. 	return true;
    351. 

  351. }
    352. 

  352. 

  353. /**
    354. 

  354.  * Converts a number of special characters into their HTML entities.
    355. 

  355.  *
    356. 

  356.  * Specifically deals with: &, <, >, ", and '.
    357. 

  357.  *
    358. 

  358.  * $quote_style can be set to ENT_COMPAT to encode " to
    359. 

  359.  * &quot;, or ENT_QUOTES to do both. Default is ENT_NOQUOTES where no quotes are encoded.
    360. 

  360.  *
    361. 

  361.  * @since 1.2.2
    362. 

  362.  *
    363. 

  363.  * @param string $string The text which is to be encoded.
    364. 

  364.  * @param mixed $quote_style Optional. Converts double quotes if set to ENT_COMPAT, both single and double if set to ENT_QUOTES or none if set to ENT_NOQUOTES. Also compatible with old values; converting single quotes if set to 'single', double if set to 'double' or both if otherwise set. Default is ENT_NOQUOTES.
    365. 

  365.  * @param string $charset Optional. The character encoding of the string. Default is false.
    366. 

  366.  * @param boolean $double_encode Optional. Whether to encode existing html entities. Default is false.
    367. 

  367.  * @return string The encoded text with HTML entities.
    368. 

  368.  */
    369. 

  369. function _wp_specialchars( $string, $quote_style = ENT_NOQUOTES, $charset = false, $double_encode = false ) {
    370. 

  370. 	$string = (string) $string;
    371. 

  371. 

  372. 	if ( 0 === strlen( $string ) )
    373. 

  373. 		return '';
    374. 

  374. 

  375. 	// Don't bother if there are no specialchars - saves some processing
    376. 

  376. 	if ( ! preg_match( '/[&<>"\']/', $string ) )
    377. 

  377. 		return $string;
    378. 

  378. 

  379. 	// Account for the previous behaviour of the function when the $quote_style is not an accepted value
    380. 

  380. 	if ( empty( $quote_style ) )
    381. 

  381. 		$quote_style = ENT_NOQUOTES;
    382. 

  382. 	elseif ( ! in_array( $quote_style, array( 0, 2, 3, 'single', 'double' ), true ) )
    383. 

  383. 		$quote_style = ENT_QUOTES;
    384. 

  384. 

  385. 	// Store the site charset as a static to avoid multiple calls to wp_load_alloptions()
    386. 

  386. 	if ( ! $charset ) {
    387. 

  387. 		static $_charset;
    388. 

  388. 		if ( ! isset( $_charset ) ) {
    389. 

  389. 			$alloptions = wp_load_alloptions();
    390. 

  390. 			$_charset = isset( $alloptions['blog_charset'] ) ? $alloptions['blog_charset'] : '';
    391. 

  391. 		}
    392. 

  392. 		$charset = $_charset;
    393. 

  393. 	}
    394. 

  394. 

  395. 	if ( in_array( $charset, array( 'utf8', 'utf-8', 'UTF8' ) ) )
    396. 

  396. 		$charset = 'UTF-8';
    397. 

  397. 

  398. 	$_quote_style = $quote_style;
    399. 

  399. 

  400. 	if ( $quote_style === 'double' ) {
    401. 

  401. 		$quote_style = ENT_COMPAT;
    402. 

  402. 		$_quote_style = ENT_COMPAT;
    403. 

  403. 	} elseif ( $quote_style === 'single' ) {
    404. 

  404. 		$quote_style = ENT_NOQUOTES;
    405. 

  405. 	}
    406. 

  406. 

  407. 	// Handle double encoding ourselves
    408. 

  408. 	if ( $double_encode ) {
    409. 

  409. 		$string = @htmlspecialchars( $string, $quote_style, $charset );
    410. 

  410. 	} else {
    411. 

  411. 		// Decode &amp; into &
    412. 

  412. 		$string = wp_specialchars_decode( $string, $_quote_style );
    413. 

  413. 

  414. 		// Guarantee every &entity; is valid or re-encode the &
    415. 

  415. 		$string = wp_kses_normalize_entities( $string );
    416. 

  416. 

  417. 		// Now re-encode everything except &entity;
    418. 

  418. 		$string = preg_split( '/(&#?x?[0-9a-z]+;)/i', $string, -1, PREG_SPLIT_DELIM_CAPTURE );
    419. 

  419. 

  420. 		for ( $i = 0; $i < count( $string ); $i += 2 )
    421. 

  421. 			$string[$i] = @htmlspecialchars( $string[$i], $quote_style, $charset );
    422. 

  422. 

  423. 		$string = implode( '', $string );
    424. 

  424. 	}
    425. 

  425. 

  426. 	// Backwards compatibility
    427. 

  427. 	if ( 'single' === $_quote_style )
    428. 

  428. 		$string = str_replace( "'", '&#039;', $string );
    429. 

  429. 

  430. 	return $string;
    431. 

  431. }
    432. 

  432. 

  433. /**
    434. 

  434.  * Converts a number of HTML entities into their special characters.
    435. 

  435.  *
    436. 

  436.  * Specifically deals with: &, <, >, ", and '.
    437. 

  437.  *
    438. 

  438.  * $quote_style can be set to ENT_COMPAT to decode " entities,
    439. 

  439.  * or ENT_QUOTES to do both " and '. Default is ENT_NOQUOTES where no quotes are decoded.
    440. 

  440.  *
    441. 

  441.  * @since 2.8
    442. 

  442.  *
    443. 

  443.  * @param string $string The text which is to be decoded.
    444. 

  444.  * @param mixed $quote_style Optional. Converts double quotes if set to ENT_COMPAT, both single and double if set to ENT_QUOTES or none if set to ENT_NOQUOTES. Also compatible with old _wp_specialchars() values; converting single quotes if set to 'single', double if set to 'double' or both if otherwise set. Default is ENT_NOQUOTES.
    445. 

  445.  * @return string The decoded text without HTML entities.
    446. 

  446.  */
    447. 

  447. function wp_specialchars_decode( $string, $quote_style = ENT_NOQUOTES ) {
    448. 

  448. 	$string = (string) $string;
    449. 

  449. 

  450. 	if ( 0 === strlen( $string ) ) {
    451. 

  451. 		return '';
    452. 

  452. 	}
    453. 

  453. 

  454. 	// Don't bother if there are no entities - saves a lot of processing
    455. 

  455. 	if ( strpos( $string, '&' ) === false ) {
    456. 

  456. 		return $string;
    457. 

  457. 	}
    458. 

  458. 

  459. 	// Match the previous behaviour of _wp_specialchars() when the $quote_style is not an accepted value
    460. 

  460. 	if ( empty( $quote_style ) ) {
    461. 

  461. 		$quote_style = ENT_NOQUOTES;
    462. 

  462. 	} elseif ( !in_array( $quote_style, array( 0, 2, 3, 'single', 'double' ), true ) ) {
    463. 

  463. 		$quote_style = ENT_QUOTES;
    464. 

  464. 	}
    465. 

  465. 

  466. 	// More complete than get_html_translation_table( HTML_SPECIALCHARS )
    467. 

  467. 	$single = array( '&#039;'  => '\'', '&#x27;' => '\'' );
    468. 

  468. 	$single_preg = array( '/&#0*39;/'  => '&#039;', '/&#x0*27;/i' => '&#x27;' );
    469. 

  469. 	$double = array( '&quot;' => '"', '&#034;'  => '"', '&#x22;' => '"' );
    470. 

  470. 	$double_preg = array( '/&#0*34;/'  => '&#034;', '/&#x0*22;/i' => '&#x22;' );
    471. 

  471. 	$others = array( '&lt;'   => '<', '&#060;'  => '<', '&gt;'   => '>', '&#062;'  => '>', '&amp;'  => '&', '&#038;'  => '&', '&#x26;' => '&' );
    472. 

  472. 	$others_preg = array( '/&#0*60;/'  => '&#060;', '/&#0*62;/'  => '&#062;', '/&#0*38;/'  => '&#038;', '/&#x0*26;/i' => '&#x26;' );
    473. 

  473. 

  474. 	if ( $quote_style === ENT_QUOTES ) {
    475. 

  475. 		$translation = array_merge( $single, $double, $others );
    476. 

  476. 		$translation_preg = array_merge( $single_preg, $double_preg, $others_preg );
    477. 

  477. 	} elseif ( $quote_style === ENT_COMPAT || $quote_style === 'double' ) {
    478. 

  478. 		$translation = array_merge( $double, $others );
    479. 

  479. 		$translation_preg = array_merge( $double_preg, $others_preg );
    480. 

  480. 	} elseif ( $quote_style === 'single' ) {
    481. 

  481. 		$translation = array_merge( $single, $others );
    482. 

  482. 		$translation_preg = array_merge( $single_preg, $others_preg );
    483. 

  483. 	} elseif ( $quote_style === ENT_NOQUOTES ) {
    484. 

  484. 		$translation = $others;
    485. 

  485. 		$translation_preg = $others_preg;
    486. 

  486. 	}
    487. 

  487. 

  488. 	// Remove zero padding on numeric entities
    489. 

  489. 	$string = preg_replace( array_keys( $translation_preg ), array_values( $translation_preg ), $string );
    490. 

  490. 

  491. 	// Replace characters according to translation table
    492. 

  492. 	return strtr( $string, $translation );
    493. 

  493. }
    494. 

  494. 

  495. /**
    496. 

  496.  * Checks for invalid UTF8 in a string.
    497. 

  497.  *
    498. 

  498.  * @since 2.8
    499. 

  499.  *
    500. 

  500.  * @param string $string The text which is to be checked.
    501. 

  501.  * @param boolean $strip Optional. Whether to attempt to strip out invalid UTF8. Default is false.
    502. 

  502.  * @return string The checked text.
    503. 

  503.  */
    504. 

  504. function wp_check_invalid_utf8( $string, $strip = false ) {
    505. 

  505. 	$string = (string) $string;
    506. 

  506. 

  507. 	if ( 0 === strlen( $string ) ) {
    508. 

  508. 		return '';
    509. 

  509. 	}
    510. 

  510. 

  511. 	// Store the site charset as a static to avoid multiple calls to get_option()
    512. 

  512. 	static $is_utf8;
    513. 

  513. 	if ( !isset( $is_utf8 ) ) {
    514. 

  514. 		$is_utf8 = in_array( get_option( 'blog_charset' ), array( 'utf8', 'utf-8', 'UTF8', 'UTF-8' ) );
    515. 

  515. 	}
    516. 

  516. 	if ( !$is_utf8 ) {
    517. 

  517. 		return $string;
    518. 

  518. 	}
    519. 

  519. 

  520. 	// Check for support for utf8 in the installed PCRE library once and store the result in a static
    521. 

  521. 	static $utf8_pcre;
    522. 

  522. 	if ( !isset( $utf8_pcre ) ) {
    523. 

  523. 		$utf8_pcre = @preg_match( '/^./u', 'a' );
    524. 

  524. 	}
    525. 

  525. 	// We can't demand utf8 in the PCRE installation, so just return the string in those cases
    526. 

  526. 	if ( !$utf8_pcre ) {
    527. 

  527. 		return $string;
    528. 

  528. 	}
    529. 

  529. 

  530. 	// preg_match fails when it encounters invalid UTF8 in $string
    531. 

  531. 	if ( 1 === @preg_match( '/^./us', $string ) ) {
    532. 

  532. 		return $string;
    533. 

  533. 	}
    534. 

  534. 

  535. 	// Attempt to strip the bad chars if requested (not recommended)
    536. 

  536. 	if ( $strip && function_exists( 'iconv' ) ) {
    537. 

  537. 		return iconv( 'utf-8', 'utf-8', $string );
    538. 

  538. 	}
    539. 

  539. 

  540. 	return '';
    541. 

  541. }
    542. 

  542. 

  543. /**
    544. 

  544.  * Encode the Unicode values to be used in the URI.
    545. 

  545.  *
    546. 

  546.  * @since 1.5.0
    547. 

  547.  *
    548. 

  548.  * @param string $utf8_string
    549. 

  549.  * @param int $length Max length of the string
    550. 

  550.  * @return string String with Unicode encoded for URI.
    551. 

  551.  */
    552. 

  552. function utf8_uri_encode( $utf8_string, $length = 0 ) {
    553. 

  553. 	$unicode = '';
    554. 

  554. 	$values = array();
    555. 

  555. 	$num_octets = 1;
    556. 

  556. 	$unicode_length = 0;
    557. 

  557. 

  558. 	$string_length = strlen( $utf8_string );
    559. 

  559. 	for ($i = 0; $i < $string_length; $i++ ) {
    560. 

  560. 

  561. 		$value = ord( $utf8_string[ $i ] );
    562. 

  562. 

  563. 		if ( $value < 128 ) {
    564. 

  564. 			if ( $length && ( $unicode_length >= $length ) )
    565. 

  565. 				break;
    566. 

  566. 			$unicode .= chr($value);
    567. 

  567. 			$unicode_length++;
    568. 

  568. 		} else {
    569. 

  569. 			if ( count( $values ) == 0 ) $num_octets = ( $value < 224 ) ? 2 : 3;
    570. 

  570. 

  571. 			$values[] = $value;
    572. 

  572. 

  573. 			if ( $length && ( $unicode_length + ($num_octets * 3) ) > $length )
    574. 

  574. 				break;
    575. 

  575. 			if ( count( $values ) == $num_octets ) {
    576. 

  576. 				if ($num_octets == 3) {
    577. 

  577. 					$unicode .= '%' . dechex($values[0]) . '%' . dechex($values[1]) . '%' . dechex($values[2]);
    578. 

  578. 					$unicode_length += 9;
    579. 

  579. 				} else {
    580. 

  580. 					$unicode .= '%' . dechex($values[0]) . '%' . dechex($values[1]);
    581. 

  581. 					$unicode_length += 6;
    582. 

  582. 				}
    583. 

  583. 

  584. 				$values = array();
    585. 

  585. 				$num_octets = 1;
    586. 

  586. 			}
    587. 

  587. 		}
    588. 

  588. 	}
    589. 

  589. 

  590. 	return $unicode;
    591. 

  591. }
    592. 

  592. 

  593. /**
    594. 

  594.  * Converts all accent characters to ASCII characters.
    595. 

  595.  *
    596. 

  596.  * If there are no accent characters, then the string given is just returned.
    597. 

  597.  *
    598. 

  598.  * @since 1.2.1
    599. 

  599.  *
    600. 

  600.  * @param string $string Text that might have accent characters
    601. 

  601.  * @return string Filtered string with replaced "nice" characters.
    602. 

  602.  */
    603. 

  603. function remove_accents($string) {
    604. 

  604. 	if ( !preg_match('/[\x80-\xff]/', $string) )
    605. 

  605. 		return $string;
    606. 

  606. 

  607. 	if (seems_utf8($string)) {
    608. 

  608. 		$chars = array(
    609. 

  609. 		// Decompositions for Latin-1 Supplement
    610. 

  610. 		chr(194).chr(170) => 'a', chr(194).chr(186) => 'o',
    611. 

  611. 		chr(195).chr(128) => 'A', chr(195).chr(129) => 'A',
    612. 

  612. 		chr(195).chr(130) => 'A', chr(195).chr(131) => 'A',
    613. 

  613. 		chr(195).chr(132) => 'A', chr(195).chr(133) => 'A',
    614. 

  614. 		chr(195).chr(134) => 'AE',chr(195).chr(135) => 'C',
    615. 

  615. 		chr(195).chr(136) => 'E', chr(195).chr(137) => 'E',
    616. 

  616. 		chr(195).chr(138) => 'E', chr(195).chr(139) => 'E',
    617. 

  617. 		chr(195).chr(140) => 'I', chr(195).chr(141) => 'I',
    618. 

  618. 		chr(195).chr(142) => 'I', chr(195).chr(143) => 'I',
    619. 

  619. 		chr(195).chr(144) => 'D', chr(195).chr(145) => 'N',
    620. 

  620. 		chr(195).chr(146) => 'O', chr(195).chr(147) => 'O',
    621. 

  621. 		chr(195).chr(148) => 'O', chr(195).chr(149) => 'O',
    622. 

  622. 		chr(195).chr(150) => 'O', chr(195).chr(153) => 'U',
    623. 

  623. 		chr(195).chr(154) => 'U', chr(195).chr(155) => 'U',
    624. 

  624. 		chr(195).chr(156) => 'U', chr(195).chr(157) => 'Y',
    625. 

  625. 		chr(195).chr(158) => 'TH',chr(195).chr(159) => 's',
    626. 

  626. 		chr(195).chr(160) => 'a', chr(195).chr(161) => 'a',
    627. 

  627. 		chr(195).chr(162) => 'a', chr(195).chr(163) => 'a',
    628. 

  628. 		chr(195).chr(164) => 'a', chr(195).chr(165) => 'a',
    629. 

  629. 		chr(195).chr(166) => 'ae',chr(195).chr(167) => 'c',
    630. 

  630. 		chr(195).chr(168) => 'e', chr(195).chr(169) => 'e',
    631. 

  631. 		chr(195).chr(170) => 'e', chr(195).chr(171) => 'e',
    632. 

  632. 		chr(195).chr(172) => 'i', chr(195).chr(173) => 'i',
    633. 

  633. 		chr(195).chr(174) => 'i', chr(195).chr(175) => 'i',
    634. 

  634. 		chr(195).chr(176) => 'd', chr(195).chr(177) => 'n',
    635. 

  635. 		chr(195).chr(178) => 'o', chr(195).chr(179) => 'o',
    636. 

  636. 		chr(195).chr(180) => 'o', chr(195).chr(181) => 'o',
    637. 

  637. 		chr(195).chr(182) => 'o', chr(195).chr(184) => 'o',
    638. 

  638. 		chr(195).chr(185) => 'u', chr(195).chr(186) => 'u',
    639. 

  639. 		chr(195).chr(187) => 'u', chr(195).chr(188) => 'u',
    640. 

  640. 		chr(195).chr(189) => 'y', chr(195).chr(190) => 'th',
    641. 

  641. 		chr(195).chr(191) => 'y', chr(195).chr(152) => 'O',
    642. 

  642. 		// Decompositions for Latin Extended-A
    643. 

  643. 		chr(196).chr(128) => 'A', chr(196).chr(129) => 'a',
    644. 

  644. 		chr(196).chr(130) => 'A', chr(196).chr(131) => 'a',
    645. 

  645. 		chr(196).chr(132) => 'A', chr(196).chr(133) => 'a',
    646. 

  646. 		chr(196).chr(134) => 'C', chr(196).chr(135) => 'c',
    647. 

  647. 		chr(196).chr(136) => 'C', chr(196).chr(137) => 'c',
    648. 

  648. 		chr(196).chr(138) => 'C', chr(196).chr(139) => 'c',
    649. 

  649. 		chr(196).chr(140) => 'C', chr(196).chr(141) => 'c',
    650. 

  650. 		chr(196).chr(142) => 'D', chr(196).chr(143) => 'd',
    651. 

  651. 		chr(196).chr(144) => 'D', chr(196).chr(145) => 'd',
    652. 

  652. 		chr(196).chr(146) => 'E', chr(196).chr(147) => 'e',
    653. 

  653. 		chr(196).chr(148) => 'E', chr(196).chr(149) => 'e',
    654. 

  654. 		chr(196).chr(150) => 'E', chr(196).chr(151) => 'e',
    655. 

  655. 		chr(196).chr(152) => 'E', chr(196).chr(153) => 'e',
    656. 

  656. 		chr(196).chr(154) => 'E', chr(196).chr(155) => 'e',
    657. 

  657. 		chr(196).chr(156) => 'G', chr(196).chr(157) => 'g',
    658. 

  658. 		chr(196).chr(158) => 'G', chr(196).chr(159) => 'g',
    659. 

  659. 		chr(196).chr(160) => 'G', chr(196).chr(161) => 'g',
    660. 

  660. 		chr(196).chr(162) => 'G', chr(196).chr(163) => 'g',
    661. 

  661. 		chr(196).chr(164) => 'H', chr(196).chr(165) => 'h',
    662. 

  662. 		chr(196).chr(166) => 'H', chr(196).chr(167) => 'h',
    663. 

  663. 		chr(196).chr(168) => 'I', chr(196).chr(169) => 'i',
    664. 

  664. 		chr(196).chr(170) => 'I', chr(196).chr(171) => 'i',
    665. 

  665. 		chr(196).chr(172) => 'I', chr(196).chr(173) => 'i',
    666. 

  666. 		chr(196).chr(174) => 'I', chr(196).chr(175) => 'i',
    667. 

  667. 		chr(196).chr(176) => 'I', chr(196).chr(177) => 'i',
    668. 

  668. 		chr(196).chr(178) => 'IJ',chr(196).chr(179) => 'ij',
    669. 

  669. 		chr(196).chr(180) => 'J', chr(196).chr(181) => 'j',
    670. 

  670. 		chr(196).chr(182) => 'K', chr(196).chr(183) => 'k',
    671. 

  671. 		chr(196).chr(184) => 'k', chr(196).chr(185) => 'L',
    672. 

  672. 		chr(196).chr(186) => 'l', chr(196).chr(187) => 'L',
    673. 

  673. 		chr(196).chr(188) => 'l', chr(196).chr(189) => 'L',
    674. 

  674. 		chr(196).chr(190) => 'l', chr(196).chr(191) => 'L',
    675. 

  675. 		chr(197).chr(128) => 'l', chr(197).chr(129) => 'L',
    676. 

  676. 		chr(197).chr(130) => 'l', chr(197).chr(131) => 'N',
    677. 

  677. 		chr(197).chr(132) => 'n', chr(197).chr(133) => 'N',
    678. 

  678. 		chr(197).chr(134) => 'n', chr(197).chr(135) => 'N',
    679. 

  679. 		chr(197).chr(136) => 'n', chr(197).chr(137) => 'N',
    680. 

  680. 		chr(197).chr(138) => 'n', chr(197).chr(139) => 'N',
    681. 

  681. 		chr(197).chr(140) => 'O', chr(197).chr(141) => 'o',
    682. 

  682. 		chr(197).chr(142) => 'O', chr(197).chr(143) => 'o',
    683. 

  683. 		chr(197).chr(144) => 'O', chr(197).chr(145) => 'o',
    684. 

  684. 		chr(197).chr(146) => 'OE',chr(197).chr(147) => 'oe',
    685. 

  685. 		chr(197).chr(148) => 'R',chr(197).chr(149) => 'r',
    686. 

  686. 		chr(197).chr(150) => 'R',chr(197).chr(151) => 'r',
    687. 

  687. 		chr(197).chr(152) => 'R',chr(197).chr(153) => 'r',
    688. 

  688. 		chr(197).chr(154) => 'S',chr(197).chr(155) => 's',
    689. 

  689. 		chr(197).chr(156) => 'S',chr(197).chr(157) => 's',
    690. 

  690. 		chr(197).chr(158) => 'S',chr(197).chr(159) => 's',
    691. 

  691. 		chr(197).chr(160) => 'S', chr(197).chr(161) => 's',
    692. 

  692. 		chr(197).chr(162) => 'T', chr(197).chr(163) => 't',
    693. 

  693. 		chr(197).chr(164) => 'T', chr(197).chr(165) => 't',
    694. 

  694. 		chr(197).chr(166) => 'T', chr(197).chr(167) => 't',
    695. 

  695. 		chr(197).chr(168) => 'U', chr(197).chr(169) => 'u',
    696. 

  696. 		chr(197).chr(170) => 'U', chr(197).chr(171) => 'u',
    697. 

  697. 		chr(197).chr(172) => 'U', chr(197).chr(173) => 'u',
    698. 

  698. 		chr(197).chr(174) => 'U', chr(197).chr(175) => 'u',
    699. 

  699. 		chr(197).chr(176) => 'U', chr(197).chr(177) => 'u',
    700. 

  700. 		chr(197).chr(178) => 'U', chr(197).chr(179) => 'u',
    701. 

  701. 		chr(197).chr(180) => 'W', chr(197).chr(181) => 'w',
    702. 

  702. 		chr(197).chr(182) => 'Y', chr(197).chr(183) => 'y',
    703. 

  703. 		chr(197).chr(184) => 'Y', chr(197).chr(185) => 'Z',
    704. 

  704. 		chr(197).chr(186) => 'z', chr(197).chr(187) => 'Z',
    705. 

  705. 		chr(197).chr(188) => 'z', chr(197).chr(189) => 'Z',
    706. 

  706. 		chr(197).chr(190) => 'z', chr(197).chr(191) => 's',
    707. 

  707. 		// Decompositions for Latin Extended-B
    708. 

  708. 		chr(200).chr(152) => 'S', chr(200).chr(153) => 's',
    709. 

  709. 		chr(200).chr(154) => 'T', chr(200).chr(155) => 't',
    710. 

  710. 		// Euro Sign
    711. 

  711. 		chr(226).chr(130).chr(172) => 'E',
    712. 

  712. 		// GBP (Pound) Sign
    713. 

  713. 		chr(194).chr(163) => '');
    714. 

  714. 

  715. 		$string = strtr($string, $chars);
    716. 

  716. 	} else {
    717. 

  717. 		// Assume ISO-8859-1 if not UTF-8
    718. 

  718. 		$chars['in'] = chr(128).chr(131).chr(138).chr(142).chr(154).chr(158)
    719. 

  719. 			.chr(159).chr(162).chr(165).chr(181).chr(192).chr(193).chr(194)
    720. 

  720. 			.chr(195).chr(196).chr(197).chr(199).chr(200).chr(201).chr(202)
    721. 

  721. 			.chr(203).chr(204).chr(205).chr(206).chr(207).chr(209).chr(210)
    722. 

  722. 			.chr(211).chr(212).chr(213).chr(214).chr(216).chr(217).chr(218)
    723. 

  723. 			.chr(219).chr(220).chr(221).chr(224).chr(225).chr(226).chr(227)
    724. 

  724. 			.chr(228).chr(229).chr(231).chr(232).chr(233).chr(234).chr(235)
    725. 

  725. 			.chr(236).chr(237).chr(238).chr(239).chr(241).chr(242).chr(243)
    726. 

  726. 			.chr(244).chr(245).chr(246).chr(248).chr(249).chr(250).chr(251)
    727. 

  727. 			.chr(252).chr(253).chr(255);
    728. 

  728. 

  729. 		$chars['out'] = "EfSZszYcYuAAAAAACEEEEIIIINOOOOOOUUUUYaaaaaaceeeeiiiinoooooouuuuyy";
    730. 

  730. 

  731. 		$string = strtr($string, $chars['in'], $chars['out']);
    732. 

  732. 		$double_chars['in'] = array(chr(140), chr(156), chr(198), chr(208), chr(222), chr(223), chr(230), chr(240), chr(254));
    733. 

  733. 		$double_chars['out'] = array('OE', 'oe', 'AE', 'DH', 'TH', 'ss', 'ae', 'dh', 'th');
    734. 

  734. 		$string = str_replace($double_chars['in'], $double_chars['out'], $string);
    735. 

  735. 	}
    736. 

  736. 

  737. 	return $string;
    738. 

  738. }
    739. 

  739. 

  740. /**
    741. 

  741.  * Sanitizes a filename replacing whitespace with dashes
    742. 

  742.  *
    743. 

  743.  * Removes special characters that are illegal in filenames on certain
    744. 

  744.  * operating systems and special characters requiring special escaping
    745. 

  745.  * to manipulate at the command line. Replaces spaces and consecutive
    746. 

  746.  * dashes with a single dash. Trim period, dash and underscore from beginning
    747. 

  747.  * and end of filename.
    748. 

  748.  *
    749. 

  749.  * @since 2.1.0
    750. 

  750.  *
    751. 

  751.  * @param string $filename The filename to be sanitized
    752. 

  752.  * @return string The sanitized filename
    753. 

  753.  */
    754. 

  754. function sanitize_file_name( $filename ) {
    755. 

  755. 	$filename_raw = $filename;
    756. 

  756. 	$special_chars = array("?", "[", "]", "/", "\\", "=", "<", ">", ":", ";", ",", "'", "\"", "&", "$", "#", "*", "(", ")", "|", "~", "`", "!", "{", "}", chr(0));
    757. 

  757. 	$special_chars = apply_filters('sanitize_file_name_chars', $special_chars, $filename_raw);
    758. 

  758. 	$filename = str_replace($special_chars, '', $filename);
    759. 

  759. 	$filename = preg_replace('/[\s-]+/', '-', $filename);
    760. 

  760. 	$filename = trim($filename, '.-_');
    761. 

  761. 

  762. 	// Split the filename into a base and extension[s]
    763. 

  763. 	$parts = explode('.', $filename);
    764. 

  764. 

  765. 	// Return if only one extension
    766. 

  766. 	if ( count($parts) <= 2 )
    767. 

  767. 		return apply_filters('sanitize_file_name', $filename, $filename_raw);
    768. 

  768. 

  769. 	// Process multiple extensions
    770. 

  770. 	$filename = array_shift($parts);
    771. 

  771. 	$extension = array_pop($parts);
    772. 

  772. 	$mimes = get_allowed_mime_types();
    773. 

  773. 

  774. 	// Loop over any intermediate extensions. Munge them with a trailing underscore if they are a 2 - 5 character
    775. 

  775. 	// long alpha string not in the extension whitelist.
    776. 

  776. 	foreach ( (array) $parts as $part) {
    777. 

  777. 		$filename .= '.' . $part;
    778. 

  778. 

  779. 		if ( preg_match("/^[a-zA-Z]{2,5}\d?$/", $part) ) {
    780. 

  780. 			$allowed = false;
    781. 

  781. 			foreach ( $mimes as $ext_preg => $mime_match ) {
    782. 

  782. 				$ext_preg = '!^(' . $ext_preg . ')$!i';
    783. 

  783. 				if ( preg_match( $ext_preg, $part ) ) {
    784. 

  784. 					$allowed = true;
    785. 

  785. 					break;
    786. 

  786. 				}
    787. 

  787. 			}
    788. 

  788. 			if ( !$allowed )
    789. 

  789. 				$filename .= '_';
    790. 

  790. 		}
    791. 

  791. 	}
    792. 

  792. 	$filename .= '.' . $extension;
    793. 

  793. 

  794. 	return apply_filters('sanitize_file_name', $filename, $filename_raw);
    795. 

  795. }
    796. 

  796. 

  797. /**
    798. 

  798.  * Sanitize username stripping out unsafe characters.
    799. 

  799.  *
    800. 

  800.  * Removes tags, octets, entities, and if strict is enabled, will only keep
    801. 

  801.  * alphanumeric, _, space, ., -, @. After sanitizing, it passes the username,
    802. 

  802.  * raw username (the username in the parameter), and the value of $strict as
    803. 

  803.  * parameters for the 'sanitize_user' filter.
    804. 

  804.  *
    805. 

  805.  * @since 2.0.0
    806. 

  806.  * @uses apply_filters() Calls 'sanitize_user' hook on username, raw username,
    807. 

  807.  *		and $strict parameter.
    808. 

  808.  *
    809. 

  809.  * @param string $username The username to be sanitized.
    810. 

  810.  * @param bool $strict If set limits $username to specific characters. Default false.
    811. 

  811.  * @return string The sanitized username, after passing through filters.
    812. 

  812.  */
    813. 

  813. function sanitize_user( $username, $strict = false ) {
    814. 

  814. 	$raw_username = $username;
    815. 

  815. 	$username = wp_strip_all_tags( $username );
    816. 

  816. 	$username = remove_accents( $username );
    817. 

  817. 	// Kill octets
    818. 

  818. 	$username = preg_replace( '|%([a-fA-F0-9][a-fA-F0-9])|', '', $username );
    819. 

  819. 	$username = preg_replace( '/&.+?;/', '', $username ); // Kill entities
    820. 

  820. 

  821. 	// If strict, reduce to ASCII for max portability.
    822. 

  822. 	if ( $strict )
    823. 

  823. 		$username = preg_replace( '|[^a-z0-9 _.\-@]|i', '', $username );
    824. 

  824. 

  825. 	$username = trim( $username );
    826. 

  826. 	// Consolidate contiguous whitespace
    827. 

  827. 	$username = preg_replace( '|\s+|', ' ', $username );
    828. 

  828. 

  829. 	return apply_filters( 'sanitize_user', $username, $raw_username, $strict );
    830. 

  830. }
    831. 

  831. 

  832. /**
    833. 

  833.  * Sanitize a string key.
    834. 

  834.  *
    835. 

  835.  * Keys are used as internal identifiers. Lowercase alphanumeric characters, dashes and underscores are allowed.
    836. 

  836.  *
    837. 

  837.  * @since 3.0.0
    838. 

  838.  *
    839. 

  839.  * @param string $key String key
    840. 

  840.  * @return string Sanitized key
    841. 

  841.  */
    842. 

  842. function sanitize_key( $key ) {
    843. 

  843. 	$raw_key = $key;
    844. 

  844. 	$key = strtolower( $key );
    845. 

  845. 	$key = preg_replace( '/[^a-z0-9_\-]/', '', $key );
    846. 

  846. 	return apply_filters( 'sanitize_key', $key, $raw_key );
    847. 

  847. }
    848. 

  848. 

  849. /**
    850. 

  850.  * Sanitizes title or use fallback title.
    851. 

  851.  *
    852. 

  852.  * Specifically, HTML and PHP tags are stripped. Further actions can be added
    853. 

  853.  * via the plugin API. If $title is empty and $fallback_title is set, the latter
    854. 

  854.  * will be used.
    855. 

  855.  *
    856. 

  856.  * @since 1.0.0
    857. 

  857.  *
    858. 

  858.  * @param string $title The string to be sanitized.
    859. 

  859.  * @param string $fallback_title Optional. A title to use if $title is empty.
    860. 

  860.  * @param string $context Optional. The operation for which the string is sanitized
    861. 

  861.  * @return string The sanitized string.
    862. 

  862.  */
    863. 

  863. function sanitize_title($title, $fallback_title = '', $context = 'save') {
    864. 

  864. 	$raw_title = $title;
    865. 

  865. 

  866. 	if ( 'save' == $context )
    867. 

  867. 		$title = remove_accents($title);
    868. 

  868. 

  869. 	$title = apply_filters('sanitize_title', $title, $raw_title, $context);
    870. 

  870. 

  871. 	if ( '' === $title || false === $title )
    872. 

  872. 		$title = $fallback_title;
    873. 

  873. 

  874. 	return $title;
    875. 

  875. }
    876. 

  876. 

  877. function sanitize_title_for_query($title) {
    878. 

  878. 	return sanitize_title($title, '', 'query');
    879. 

  879. }
    880. 

  880. 

  881. /**
    882. 

  882.  * Sanitizes title, replacing whitespace and a few other characters with dashes.
    883. 

  883.  *
    884. 

  884.  * Limits the output to alphanumeric characters, underscore (_) and dash (-).
    885. 

  885.  * Whitespace becomes a dash.
    886. 

  886.  *
    887. 

  887.  * @since 1.2.0
    888. 

  888.  *
    889. 

  889.  * @param string $title The title to be sanitized.
    890. 

  890.  * @param string $raw_title Optional. Not used.
    891. 

  891.  * @param string $context Optional. The operation for which the string is sanitized.
    892. 

  892.  * @return string The sanitized title.
    893. 

  893.  */
    894. 

  894. function sanitize_title_with_dashes($title, $raw_title = '', $context = 'display') {
    895. 

  895. 	$title = strip_tags($title);
    896. 

  896. 	// Preserve escaped octets.
    897. 

  897. 	$title = preg_replace('|%([a-fA-F0-9][a-fA-F0-9])|', '---$1---', $title);
    898. 

  898. 	// Remove percent signs that are not part of an octet.
    899. 

  899. 	$title = str_replace('%', '', $title);
    900. 

  900. 	// Restore octets.
    901. 

  901. 	$title = preg_replace('|---([a-fA-F0-9][a-fA-F0-9])---|', '%$1', $title);
    902. 

  902. 

  903. 	if (seems_utf8($title)) {
    904. 

  904. 		if (function_exists('mb_strtolower')) {
    905. 

  905. 			$title = mb_strtolower($title, 'UTF-8');
    906. 

  906. 		}
    907. 

  907. 		$title = utf8_uri_encode($title, 200);
    908. 

  908. 	}
    909. 

  909. 

  910. 	$title = strtolower($title);
    911. 

  911. 	$title = preg_replace('/&.+?;/', '', $title); // kill entities
    912. 

  912. 	$title = str_replace('.', '-', $title);
    913. 

  913. 

  914. 	if ( 'save' == $context ) {
    915. 

  915. 		// nbsp, ndash and mdash
    916. 

  916. 		$title = str_replace( array( '%c2%a0', '%e2%80%93', '%e2%80%94' ), '-', $title );
    917. 

  917. 		// iexcl and iquest
    918. 

  918. 		$title = str_replace( array( '%c2%a1', '%c2%bf' ), '', $title );
    919. 

  919. 		// angle quotes
    920. 

  920. 		$title = str_replace( array( '%c2%ab', '%c2%bb', '%e2%80%b9', '%e2%80%ba' ), '', $title );
    921. 

  921. 		// curly quotes
    922. 

  922. 		$title = str_replace( array( '%e2%80%98', '%e2%80%99', '%e2%80%9c', '%e2%80%9d' ), '', $title );
    923. 

  923. 		// copy, reg, deg, hellip and trade
    924. 

  924. 		$title = str_replace( array( '%c2%a9', '%c2%ae', '%c2%b0', '%e2%80%a6', '%e2%84%a2' ), '', $title );
    925. 

  925. 	}
    926. 

  926. 

  927. 	$title = preg_replace('/[^%a-z0-9 _-]/', '', $title);
    928. 

  928. 	$title = preg_replace('/\s+/', '-', $title);
    929. 

  929. 	$title = preg_replace('|-+|', '-', $title);
    930. 

  930. 	$title = trim($title, '-');
    931. 

  931. 

  932. 	return $title;
    933. 

  933. }
    934. 

  934. 

  935. /**
    936. 

  936.  * Ensures a string is a valid SQL order by clause.
    937. 

  937.  *
    938. 

  938.  * Accepts one or more columns, with or without ASC/DESC, and also accepts
    939. 

  939.  * RAND().
    940. 

  940.  *
    941. 

  941.  * @since 2.5.1
    942. 

  942.  *
    943. 

  943.  * @param string $orderby Order by string to be checked.
    944. 

  944.  * @return string|false Returns the order by clause if it is a match, false otherwise.
    945. 

  945.  */
    946. 

  946. function sanitize_sql_orderby( $orderby ){
    947. 

  947. 	preg_match('/^\s*([a-z0-9_]+(\s+(ASC|DESC))?(\s*,\s*|\s*$))+|^\s*RAND\(\s*\)\s*$/i', $orderby, $obmatches);
    948. 

  948. 	if ( !$obmatches )
    949. 

  949. 		return false;
    950. 

  950. 	return $orderby;
    951. 

  951. }
    952. 

  952. 

  953. /**
    954. 

  954.  * Santizes a html classname to ensure it only contains valid characters
    955. 

  955.  *
    956. 

  956.  * Strips the string down to A-Z,a-z,0-9,_,-. If this results in an empty
    957. 

  957.  * string then it will return the alternative value supplied.
    958. 

  958.  *
    959. 

  959.  * @todo Expand to support the full range of CDATA that a class attribute can contain.
    960. 

  960.  *
    961. 

  961.  * @since 2.8.0
    962. 

  962.  *
    963. 

  963.  * @param string $class The classname to be sanitized
    964. 

  964.  * @param string $fallback Optional. The value to return if the sanitization end's up as an empty string.
    965. 

  965.  * 	Defaults to an empty string.
    966. 

  966.  * @return string The sanitized value
    967. 

  967.  */
    968. 

  968. function sanitize_html_class( $class, $fallback = '' ) {
    969. 

  969. 	//Strip out any % encoded octets
    970. 

  970. 	$sanitized = preg_replace( '|%[a-fA-F0-9][a-fA-F0-9]|', '', $class );
    971. 

  971. 

  972. 	//Limit to A-Z,a-z,0-9,_,-
    973. 

  973. 	$sanitized = preg_replace( '/[^A-Za-z0-9_-]/', '', $sanitized );
    974. 

  974. 

  975. 	if ( '' == $sanitized )
    976. 

  976. 		$sanitized = $fallback;
    977. 

  977. 

  978. 	return apply_filters( 'sanitize_html_class', $sanitized, $class, $fallback );
    979. 

  979. }
    980. 

  980. 

  981. /**
    982. 

  982.  * Converts a number of characters from a string.
    983. 

  983.  *
    984. 

  984.  * Metadata tags <<title>> and <<category>> are removed, <<br>> and <<hr>> are
    985. 

  985.  * converted into correct XHTML and Unicode characters are converted to the
    986. 

  986.  * valid range.
    987. 

  987.  *
    988. 

  988.  * @since 0.71
    989. 

  989.  *
    990. 

  990.  * @param string $content String of characters to be converted.
    991. 

  991.  * @param string $deprecated Not used.
    992. 

  992.  * @return string Converted string.
    993. 

  993.  */
    994. 

  994. function convert_chars($content, $deprecated = '') {
    995. 

  995. 	if ( !empty( $deprecated ) )
    996. 

  996. 		_deprecated_argument( __FUNCTION__, '0.71' );
    997. 

  997. 

  998. 	// Translation of invalid Unicode references range to valid range
    999. 

  999. 	$wp_htmltranswinuni = array(
    1000. 

  1000. 	'&#128;' => '&#8364;', // the Euro sign
    1001. 

  1001. 	'&#129;' => '',
    1002. 

  1002. 	'&#130;' => '&#8218;', // these are Windows CP1252 specific characters
    1003. 

  1003. 	'&#131;' => '&#402;',  // they would look weird on non-Windows browsers
    1004. 

  1004. 	'&#132;' => '&#8222;',
    1005. 

  1005. 	'&#133;' => '&#8230;',
    1006. 

  1006. 	'&#134;' => '&#8224;',
    1007. 

  1007. 	'&#135;' => '&#8225;',
    1008. 

  1008. 	'&#136;' => '&#710;',
    1009. 

  1009. 	'&#137;' => '&#8240;',
    1010. 

  1010. 	'&#138;' => '&#352;',
    1011. 

  1011. 	'&#139;' => '&#8249;',
    1012. 

  1012. 	'&#140;' => '&#338;',
    1013. 

  1013. 	'&#141;' => '',
    1014. 

  1014. 	'&#142;' => '&#382;',
    1015. 

  1015. 	'&#143;' => '',
    1016. 

  1016. 	'&#144;' => '',
    1017. 

  1017. 	'&#145;' => '&#8216;',
    1018. 

  1018. 	'&#146;' => '&#8217;',
    1019. 

  1019. 	'&#147;' => '&#8220;',
    1020. 

  1020. 	'&#148;' => '&#8221;',
    1021. 

  1021. 	'&#149;' => '&#8226;',
    1022. 

  1022. 	'&#150;' => '&#8211;',
    1023. 

  1023. 	'&#151;' => '&#8212;',
    1024. 

  1024. 	'&#152;' => '&#732;',
    1025. 

  1025. 	'&#153;' => '&#8482;',
    1026. 

  1026. 	'&#154;' => '&#353;',
    1027. 

  1027. 	'&#155;' => '&#8250;',
    1028. 

  1028. 	'&#156;' => '&#339;',
    1029. 

  1029. 	'&#157;' => '',
    1030. 

  1030. 	'&#158;' => '',
    1031. 

  1031. 	'&#159;' => '&#376;'
    1032. 

  1032. 	);
    1033. 

  1033. 

  1034. 	// Remove metadata tags
    1035. 

  1035. 	$content = preg_replace('/<title>(.+?)<\/title>/','',$content);
    1036. 

  1036. 	$content = preg_replace('/<category>(.+?)<\/category>/','',$content);
    1037. 

  1037. 

  1038. 	// Converts lone & characters into &#38; (a.k.a. &amp;)
    1039. 

  1039. 	$content = preg_replace('/&([^#])(?![a-z1-4]{1,8};)/i', '&#038;$1', $content);
    1040. 

  1040. 

  1041. 	// Fix Word pasting
    1042. 

  1042. 	$content = strtr($content, $wp_htmltranswinuni);
    1043. 

  1043. 

  1044. 	// Just a little XHTML help
    1045. 

  1045. 	$content = str_replace('<br>', '<br />', $content);
    1046. 

  1046. 	$content = str_replace('<hr>', '<hr />', $content);
    1047. 

  1047. 

  1048. 	return $content;
    1049. 

  1049. }
    1050. 

  1050. 

  1051. /**
    1052. 

  1052.  * Will only balance the tags if forced to and the option is set to balance tags.
    1053. 

  1053.  *
    1054. 

  1054.  * The option 'use_balanceTags' is used to determine whether the tags will be balanced.
    1055. 

  1055.  *
    1056. 

  1056.  * @since 0.71
    1057. 

  1057.  *
    1058. 

  1058.  * @param string $text Text to be balanced
    1059. 

  1059.  * @param bool $force If true, forces balancing, ignoring the value of the option. Default false.
    1060. 

  1060.  * @return string Balanced text
    1061. 

  1061.  */
    1062. 

  1062. function balanceTags( $text, $force = false ) {
    1063. 

  1063. 	if ( !$force && get_option('use_balanceTags') == 0 )
    1064. 

  1064. 		return $text;
    1065. 

  1065. 	return force_balance_tags( $text );
    1066. 

  1066. }
    1067. 

  1067. 

  1068. /**
    1069. 

  1069.  * Balances tags of string using a modified stack.
    1070. 

  1070.  *
    1071. 

  1071.  * @since 2.0.4
    1072. 

  1072.  *
    1073. 

  1073.  * @author Leonard Lin <leonard@acm.org>
    1074. 

  1074.  * @license GPL
    1075. 

  1075.  * @copyright November 4, 2001
    1076. 

  1076.  * @version 1.1
    1077. 

  1077.  * @todo Make better - change loop condition to $text in 1.2
    1078. 

  1078.  * @internal Modified by Scott Reilly (coffee2code) 02 Aug 2004
    1079. 

  1079.  *		1.1  Fixed handling of append/stack pop order of end text
    1080. 

  1080.  *			 Added Cleaning Hooks
    1081. 

  1081.  *		1.0  First Version
    1082. 

  1082.  *
    1083. 

  1083.  * @param string $text Text to be balanced.
    1084. 

  1084.  * @return string Balanced text.
    1085. 

  1085.  */
    1086. 

  1086. function force_balance_tags( $text ) {
    1087. 

  1087. 	$tagstack = array();
    1088. 

  1088. 	$stacksize = 0;
    1089. 

  1089. 	$tagqueue = '';
    1090. 

  1090. 	$newtext = '';
    1091. 

  1091. 	$single_tags = array( 'br', 'hr', 'img', 'input' ); // Known single-entity/self-closing tags
    1092. 

  1092. 	$nestable_tags = array( 'blockquote', 'div', 'span', 'q' ); // Tags that can be immediately nested within themselves
    1093. 

  1093. 

  1094. 	// WP bug fix for comments - in case you REALLY meant to type '< !--'
    1095. 

  1095. 	$text = str_replace('< !--', '<    !--', $text);
    1096. 

  1096. 	// WP bug fix for LOVE <3 (and other situations with '<' before a number)
    1097. 

  1097. 	$text = preg_replace('#<([0-9]{1})#', '&lt;$1', $text);
    1098. 

  1098. 

  1099. 	while ( preg_match("/<(\/?[\w:]*)\s*([^>]*)>/", $text, $regex) ) {
    1100. 

  1100. 		$newtext .= $tagqueue;
    1101. 

  1101. 

  1102. 		$i = strpos($text, $regex[0]);
    1103. 

  1103. 		$l = strlen($regex[0]);
    1104. 

  1104. 

  1105. 		// clear the shifter
    1106. 

  1106. 		$tagqueue = '';
    1107. 

  1107. 		// Pop or Push
    1108. 

  1108. 		if ( isset($regex[1][0]) && '/' == $regex[1][0] ) { // End Tag
    1109. 

  1109. 			$tag = strtolower(substr($regex[1],1));
    1110. 

  1110. 			// if too many closing tags
    1111. 

  1111. 			if( $stacksize <= 0 ) {
    1112. 

  1112. 				$tag = '';
    1113. 

  1113. 				// or close to be safe $tag = '/' . $tag;
    1114. 

  1114. 			}
    1115. 

  1115. 			// if stacktop value = tag close value then pop
    1116. 

  1116. 			else if ( $tagstack[$stacksize - 1] == $tag ) { // found closing tag
    1117. 

  1117. 				$tag = '</' . $tag . '>'; // Close Tag
    1118. 

  1118. 				// Pop
    1119. 

  1119. 				array_pop( $tagstack );
    1120. 

  1120. 				$stacksize--;
    1121. 

  1121. 			} else { // closing tag not at top, search for it
    1122. 

  1122. 				for ( $j = $stacksize-1; $j >= 0; $j-- ) {
    1123. 

  1123. 					if ( $tagstack[$j] == $tag ) {
    1124. 

  1124. 					// add tag to tagqueue
    1125. 

  1125. 						for ( $k = $stacksize-1; $k >= $j; $k--) {
    1126. 

  1126. 							$tagqueue .= '</' . array_pop( $tagstack ) . '>';
    1127. 

  1127. 							$stacksize--;
    1128. 

  1128. 						}
    1129. 

  1129. 						break;
    1130. 

  1130. 					}
    1131. 

  1131. 				}
    1132. 

  1132. 				$tag = '';
    1133. 

  1133. 			}
    1134. 

  1134. 		} else { // Begin Tag
    1135. 

  1135. 			$tag = strtolower($regex[1]);
    1136. 

  1136. 

  1137. 			// Tag Cleaning
    1138. 

  1138. 

  1139. 			// If self-closing or '', don't do anything.
    1140. 

  1140. 			if ( substr($regex[2],-1) == '/' || $tag == '' ) {
    1141. 

  1141. 				// do nothing
    1142. 

  1142. 			}
    1143. 

  1143. 			// ElseIf it's a known single-entity tag but it doesn't close itself, do so
    1144. 

  1144. 			elseif ( in_array($tag, $single_tags) ) {
    1145. 

  1145. 				$regex[2] .= '/';
    1146. 

  1146. 			} else {	// Push the tag onto the stack
    1147. 

  1147. 				// If the top of the stack is the same as the tag we want to push, close previous tag
    1148. 

  1148. 				if ( $stacksize > 0 && !in_array($tag, $nestable_tags) && $tagstack[$stacksize - 1] == $tag ) {
    1149. 

  1149. 					$tagqueue = '</' . array_pop ($tagstack) . '>';
    1150. 

  1150. 					$stacksize--;
    1151. 

  1151. 				}
    1152. 

  1152. 				$stacksize = array_push ($tagstack, $tag);
    1153. 

  1153. 			}
    1154. 

  1154. 

  1155. 			// Attributes
    1156. 

  1156. 			$attributes = $regex[2];
    1157. 

  1157. 			if( !empty($attributes) )
    1158. 

  1158. 				$attributes = ' '.$attributes;
    1159. 

  1159. 

  1160. 			$tag = '<' . $tag . $attributes . '>';
    1161. 

  1161. 			//If already queuing a close tag, then put this tag on, too
    1162. 

  1162. 			if ( !empty($tagqueue) ) {
    1163. 

  1163. 				$tagqueue .= $tag;
    1164. 

  1164. 				$tag = '';
    1165. 

  1165. 			}
    1166. 

  1166. 		}
    1167. 

  1167. 		$newtext .= substr($text, 0, $i) . $tag;
    1168. 

  1168. 		$text = substr($text, $i + $l);
    1169. 

  1169. 	}
    1170. 

  1170. 

  1171. 	// Clear Tag Queue
    1172. 

  1172. 	$newtext .= $tagqueue;
    1173. 

  1173. 

  1174. 	// Add Remaining text
    1175. 

  1175. 	$newtext .= $text;
    1176. 

  1176. 

  1177. 	// Empty Stack
    1178. 

  1178. 	while( $x = array_pop($tagstack) )
    1179. 

  1179. 		$newtext .= '</' . $x . '>'; // Add remaining tags to close
    1180. 

  1180. 

  1181. 	// WP fix for the bug with HTML comments
    1182. 

  1182. 	$newtext = str_replace("< !--","<!--",$newtext);
    1183. 

  1183. 	$newtext = str_replace("<    !--","< !--",$newtext);
    1184. 

  1184. 

  1185. 	return $newtext;
    1186. 

  1186. }
    1187. 

  1187. 

  1188. /**
    1189. 

  1189.  * Acts on text which is about to be edited.
    1190. 

  1190.  *
    1191. 

  1191.  * The $content is run through esc_textarea(), which uses htmlspecialchars()
    1192. 

  1192.  * to convert special characters to HTML entities. If $richedit is set to true,
    1193. 

  1193.  * it is simply a holder for the 'format_to_edit' filter.
    1194. 

  1194.  *
    1195. 

  1195.  * @since 0.71
    1196. 

  1196.  *
    1197. 

  1197.  * @param string $content The text about to be edited.
    1198. 

  1198.  * @param bool $richedit Whether the $content should not pass through htmlspecialchars(). Default false (meaning it will be passed).
    1199. 

  1199.  * @return string The text after the filter (and possibly htmlspecialchars()) has been run.
    1200. 

  1200.  */
    1201. 

  1201. function format_to_edit( $content, $richedit = false ) {
    1202. 

  1202. 	$content = apply_filters( 'format_to_edit', $content );
    1203. 

  1203. 	if ( ! $richedit )
    1204. 

  1204. 		$content = esc_textarea( $content );
    1205. 

  1205. 	return $content;
    1206. 

  1206. }
    1207. 

  1207. 

  1208. /**
    1209. 

  1209.  * Holder for the 'format_to_post' filter.
    1210. 

  1210.  *
    1211. 

  1211.  * @since 0.71
    1212. 

  1212.  *
    1213. 

  1213.  * @param string $content The text to pass through the filter.
    1214. 

  1214.  * @return string Text returned from the 'format_to_post' filter.
    1215. 

  1215.  */
    1216. 

  1216. function format_to_post($content) {
    1217. 

  1217. 	$content = apply_filters('format_to_post', $content);
    1218. 

  1218. 	return $content;
    1219. 

  1219. }
    1220. 

  1220. 

  1221. /**
    1222. 

  1222.  * Add leading zeros when necessary.
    1223. 

  1223.  *
    1224. 

  1224.  * If you set the threshold to '4' and the number is '10', then you will get
    1225. 

  1225.  * back '0010'. If you set the threshold to '4' and the number is '5000', then you
    1226. 

  1226.  * will get back '5000'.
    1227. 

  1227.  *
    1228. 

  1228.  * Uses sprintf to append the amount of zeros based on the $threshold parameter
    1229. 

  1229.  * and the size of the number. If the number is large enough, then no zeros will
    1230. 

  1230.  * be appended.
    1231. 

  1231.  *
    1232. 

  1232.  * @since 0.71
    1233. 

  1233.  *
    1234. 

  1234.  * @param mixed $number Number to append zeros to if not greater than threshold.
    1235. 

  1235.  * @param int $threshold Digit places number needs to be to not have zeros added.
    1236. 

  1236.  * @return string Adds leading zeros to number if needed.
    1237. 

  1237.  */
    1238. 

  1238. function zeroise($number, $threshold) {
    1239. 

  1239. 	return sprintf('%0'.$threshold.'s', $number);
    1240. 

  1240. }
    1241. 

  1241. 

  1242. /**
    1243. 

  1243.  * Adds backslashes before letters and before a number at the start of a string.
    1244. 

  1244.  *
    1245. 

  1245.  * @since 0.71
    1246. 

  1246.  *
    1247. 

  1247.  * @param string $string Value to which backslashes will be added.
    1248. 

  1248.  * @return string String with backslashes inserted.
    1249. 

  1249.  */
    1250. 

  1250. function backslashit($string) {
    1251. 

  1251. 	$string = preg_replace('/^([0-9])/', '\\\\\\\\\1', $string);
    1252. 

  1252. 	$string = preg_replace('/([a-z])/i', '\\\\\1', $string);
    1253. 

  1253. 	return $string;
    1254. 

  1254. }
    1255. 

  1255. 

  1256. /**
    1257. 

  1257.  * Appends a trailing slash.
    1258. 

  1258.  *
    1259. 

  1259.  * Will remove trailing slash if it exists already before adding a trailing
    1260. 

  1260.  * slash. This prevents double slashing a string or path.
    1261. 

  1261.  *
    1262. 

  1262.  * The primary use of this is for paths and thus should be used for paths. It is
    1263. 

  1263.  * not restricted to paths and offers no specific path support.
    1264. 

  1264.  *
    1265. 

  1265.  * @since 1.2.0
    1266. 

  1266.  * @uses untrailingslashit() Unslashes string if it was slashed already.
    1267. 

  1267.  *
    1268. 

  1268.  * @param string $string What to add the trailing slash to.
    1269. 

  1269.  * @return string String with trailing slash added.
    1270. 

  1270.  */
    1271. 

  1271. function trailingslashit($string) {
    1272. 

  1272. 	return untrailingslashit($string) . '/';
    1273. 

  1273. }
    1274. 

  1274. 

  1275. /**
    1276. 

  1276.  * Removes trailing slash if it exists.
    1277. 

  1277.  *
    1278. 

  1278.  * The primary use of this is for paths and thus should be used for paths. It is
    1279. 

  1279.  * not restricted to paths and offers no specific path support.
    1280. 

  1280.  *
    1281. 

  1281.  * @since 2.2.0
    1282. 

  1282.  *
    1283. 

  1283.  * @param string $string What to remove the trailing slash from.
    1284. 

  1284.  * @return string String without the trailing slash.
    1285. 

  1285.  */
    1286. 

  1286. function untrailingslashit($string) {
    1287. 

  1287. 	return rtrim($string, '/');
    1288. 

  1288. }
    1289. 

  1289. 

  1290. /**
    1291. 

  1291.  * Adds slashes to escape strings.
    1292. 

  1292.  *
    1293. 

  1293.  * Slashes will first be removed if magic_quotes_gpc is set, see {@link
    1294. 

  1294.  * http://www.php.net/magic_quotes} for more details.
    1295. 

  1295.  *
    1296. 

  1296.  * @since 0.71
    1297. 

  1297.  *
    1298. 

  1298.  * @param string $gpc The string returned from HTTP request data.
    1299. 

  1299.  * @return string Returns a string escaped with slashes.
    1300. 

  1300.  */
    1301. 

  1301. function addslashes_gpc($gpc) {
    1302. 

  1302. 	if ( get_magic_quotes_gpc() )
    1303. 

  1303. 		$gpc = stripslashes($gpc);
    1304. 

  1304. 

  1305. 	return esc_sql($gpc);
    1306. 

  1306. }
    1307. 

  1307. 

  1308. /**
    1309. 

  1309.  * Navigates through an array and removes slashes from the values.
    1310. 

  1310.  *
    1311. 

  1311.  * If an array is passed, the array_map() function causes a callback to pass the
    1312. 

  1312.  * value back to the function. The slashes from this value will removed.
    1313. 

  1313.  *
    1314. 

  1314.  * @since 2.0.0
    1315. 

  1315.  *
    1316. 

  1316.  * @param array|string $value The array or string to be stripped.
    1317. 

  1317.  * @return array|string Stripped array (or string in the callback).
    1318. 

  1318.  */
    1319. 

  1319. function stripslashes_deep($value) {
    1320. 

  1320. 	if ( is_array($value) ) {
    1321. 

  1321. 		$value = array_map('stripslashes_deep', $value);
    1322. 

  1322. 	} elseif ( is_object($value) ) {
    1323. 

  1323. 		$vars = get_object_vars( $value );
    1324. 

  1324. 		foreach ($vars as $key=>$data) {
    1325. 

  1325. 			$value->{$key} = stripslashes_deep( $data );
    1326. 

  1326. 		}
    1327. 

  1327. 	} else {
    1328. 

  1328. 		$value = stripslashes($value);
    1329. 

  1329. 	}
    1330. 

  1330. 

  1331. 	return $value;
    1332. 

  1332. }
    1333. 

  1333. 

  1334. /**
    1335. 

  1335.  * Navigates through an array and encodes the values to be used in a URL.
    1336. 

  1336.  *
    1337. 

  1337.  * Uses a callback to pass the value of the array back to the function as a
    1338. 

  1338.  * string.
    1339. 

  1339.  *
    1340. 

  1340.  * @since 2.2.0
    1341. 

  1341.  *
    1342. 

  1342.  * @param array|string $value The array or string to be encoded.
    1343. 

  1343.  * @return array|string $value The encoded array (or string from the callback).
    1344. 

  1344.  */
    1345. 

  1345. function urlencode_deep($value) {
    1346. 

  1346. 	$value = is_array($value) ? array_map('urlencode_deep', $value) : urlencode($value);
    1347. 

  1347. 	return $value;
    1348. 

  1348. }
    1349. 

  1349. 

  1350. /**
    1351. 

  1351.  * Converts email addresses characters to HTML entities to block spam bots.
    1352. 

  1352.  *
    1353. 

  1353.  * @since 0.71
    1354. 

  1354.  *
    1355. 

  1355.  * @param string $emailaddy Email address.
    1356. 

  1356.  * @param int $mailto Optional. Range from 0 to 1. Used for encoding.
    1357. 

  1357.  * @return string Converted email address.
    1358. 

  1358.  */
    1359. 

  1359. function antispambot($emailaddy, $mailto=0) {
    1360. 

  1360. 	$emailNOSPAMaddy = '';
    1361. 

  1361. 	srand ((float) microtime() * 1000000);
    1362. 

  1362. 	for ($i = 0; $i < strlen($emailaddy); $i = $i + 1) {
    1363. 

  1363. 		$j = floor(rand(0, 1+$mailto));
    1364. 

  1364. 		if ($j==0) {
    1365. 

  1365. 			$emailNOSPAMaddy .= '&#'.ord(substr($emailaddy,$i,1)).';';
    1366. 

  1366. 		} elseif ($j==1) {
    1367. 

  1367. 			$emailNOSPAMaddy .= substr($emailaddy,$i,1);
    1368. 

  1368. 		} elseif ($j==2) {
    1369. 

  1369. 			$emailNOSPAMaddy .= '%'.zeroise(dechex(ord(substr($emailaddy, $i, 1))), 2);
    1370. 

  1370. 		}
    1371. 

  1371. 	}
    1372. 

  1372. 	$emailNOSPAMaddy = str_replace('@','&#64;',$emailNOSPAMaddy);
    1373. 

  1373. 	return $emailNOSPAMaddy;
    1374. 

  1374. }
    1375. 

  1375. 

  1376. /**
    1377. 

  1377.  * Callback to convert URI match to HTML A element.
    1378. 

  1378.  *
    1379. 

  1379.  * This function was backported from 2.5.0 to 2.3.2. Regex callback for {@link
    1380. 

  1380.  * make_clickable()}.
    1381. 

  1381.  *
    1382. 

  1382.  * @since 2.3.2
    1383. 

  1383.  * @access private
    1384. 

  1384.  *
    1385. 

  1385.  * @param array $matches Single Regex Match.
    1386. 

  1386.  * @return string HTML A element with URI address.
    1387. 

  1387.  */
    1388. 

  1388. function _make_url_clickable_cb($matches) {
    1389. 

  1389. 	$url = $matches[2];
    1390. 

  1390. 

  1391. 	if ( ')' == $matches[3] && strpos( $url, '(' ) ) {
    1392. 

  1392. 		// If the trailing character is a closing parethesis, and the URL has an opening parenthesis in it, add the closing parenthesis to the URL.
    1393. 

  1393. 		// Then we can let the parenthesis balancer do its thing below.
    1394. 

  1394. 		$url .= $matches[3];
    1395. 

  1395. 		$suffix = '';
    1396. 

  1396. 	} else {
    1397. 

  1397. 		$suffix = $matches[3];
    1398. 

  1398. 	}
    1399. 

  1399. 

  1400. 	// Include parentheses in the URL only if paired
    1401. 

  1401. 	while ( substr_count( $url, '(' ) < substr_count( $url, ')' ) ) {
    1402. 

  1402. 		$suffix = strrchr( $url, ')' ) . $suffix;
    1403. 

  1403. 		$url = substr( $url, 0, strrpos( $url, ')' ) );
    1404. 

  1404. 	}
    1405. 

  1405. 

  1406. 	$url = esc_url($url);
    1407. 

  1407. 	if ( empty($url) )
    1408. 

  1408. 		return $matches[0];
    1409. 

  1409. 

  1410. 	return $matches[1] . "<a href=\"$url\" rel=\"nofollow\">$url</a>" . $suffix;
    1411. 

  1411. }
    1412. 

  1412. 

  1413. /**
    1414. 

  1414.  * Callback to convert URL match to HTML A element.
    1415. 

  1415.  *
    1416. 

  1416.  * This function was backported from 2.5.0 to 2.3.2. Regex callback for {@link
    1417. 

  1417.  * make_clickable()}.
    1418. 

  1418.  *
    1419. 

  1419.  * @since 2.3.2
    1420. 

  1420.  * @access private
    1421. 

  1421.  *
    1422. 

  1422.  * @param array $matches Single Regex Match.
    1423. 

  1423.  * @return string HTML A element with URL address.
    1424. 

  1424.  */
    1425. 

  1425. function _make_web_ftp_clickable_cb($matches) {
    1426. 

  1426. 	$ret = '';
    1427. 

  1427. 	$dest = $matches[2];
    1428. 

  1428. 	$dest = 'http://' . $dest;
    1429. 

  1429. 	$dest = esc_url($dest);
    1430. 

  1430. 	if ( empty($dest) )
    1431. 

  1431. 		return $matches[0];
    1432. 

  1432. 

  1433. 	// removed trailing [.,;:)] from URL
    1434. 

  1434. 	if ( in_array( substr($dest, -1), array('.', ',', ';', ':', ')') ) === true ) {
    1435. 

  1435. 		$ret = substr($dest, -1);
    1436. 

  1436. 		$dest = substr($dest, 0, strlen($dest)-1);
    1437. 

  1437. 	}
    1438. 

  1438. 	return $matches[1] . "<a href=\"$dest\" rel=\"nofollow\">$dest</a>$ret";
    1439. 

  1439. }
    1440. 

  1440. 

  1441. /**
    1442. 

  1442.  * Callback to convert email address match to HTML A element.
    1443. 

  1443.  *
    1444. 

  1444.  * This function was backported from 2.5.0 to 2.3.2. Regex callback for {@link
    1445. 

  1445.  * make_clickable()}.
    1446. 

  1446.  *
    1447. 

  1447.  * @since 2.3.2
    1448. 

  1448.  * @access private
    1449. 

  1449.  *
    1450. 

  1450.  * @param array $matches Single Regex Match.
    1451. 

  1451.  * @return string HTML A element with email address.
    1452. 

  1452.  */
    1453. 

  1453. function _make_email_clickable_cb($matches) {
    1454. 

  1454. 	$email = $matches[2] . '@' . $matches[3];
    1455. 

  1455. 	return $matches[1] . "<a href=\"mailto:$email\">$email</a>";
    1456. 

  1456. }
    1457. 

  1457. 

  1458. /**
    1459. 

  1459.  * Convert plaintext URI to HTML links.
    1460. 

  1460.  *
    1461. 

  1461.  * Converts URI, www and ftp, and email addresses. Finishes by fixing links
    1462. 

  1462.  * within links.
    1463. 

  1463.  *
    1464. 

  1464.  * @since 0.71
    1465. 

  1465.  *
    1466. 

  1466.  * @param string $ret Content to convert URIs.
    1467. 

  1467.  * @return string Content with converted URIs.
    1468. 

  1468.  */
    1469. 

  1469. function make_clickable( $ret ) {
    1470. 

  1470. 	// Long strings might contain expensive edge cases ...
    1471. 

  1471. 	if ( 10000 < strlen( $ret ) ) {
    1472. 

  1472. 		$r = '';
    1473. 

  1473. 		// ... break it up
    1474. 

  1474. 		foreach ( _split_str_by_whitespace( $ret, 2100 ) as $chunk ) { // 2100: Extra room for scheme and leading and trailing paretheses
    1475. 

  1475. 			if ( 2101 < strlen( $chunk ) ) {
    1476. 

  1476. 				$r .= $chunk; // Too big, no whitespace: bail.
    1477. 

  1477. 			} else {
    1478. 

  1478. 				$r .= make_clickable( $chunk );
    1479. 

  1479. 			}
    1480. 

  1480. 		}
    1481. 

  1481. 		return $r;
    1482. 

  1482. 	}
    1483. 

  1483. 

  1484. 	$ret = " $ret "; // Pad with whitespace to simplify the regexes
    1485. 

  1485. 

  1486. 	$url_clickable = '~
    1487. 

  1487. 		([\\s(<.,;:!?])                                        # 1: Leading whitespace, or punctuation
    1488. 

  1488. 		(                                                      # 2: URL
    1489. 

  1489. 			[\\w]{1,20}+://                                # Scheme and hier-part prefix
    1490. 

  1490. 			(?=\S{1,2000}\s)                               # Limit to URLs less than about 2000 characters long
    1491. 

  1491. 			[\\w\\x80-\\xff#%\\~/@\\[\\]*(+=&$-]*+         # Non-punctuation URL character
    1492. 

  1492. 			(?:                                            # Unroll the Loop: Only allow puctuation URL character if followed by a non-punctuation URL character
    1493. 

  1493. 				[\'.,;:!?)]                            # Punctuation URL character
    1494. 

  1494. 				[\\w\\x80-\\xff#%\\~/@\\[\\]*(+=&$-]++ # Non-punctuation URL character
    1495. 

  1495. 			)*
    1496. 

  1496. 		)
    1497. 

  1497. 		(\)?)                                                  # 3: Trailing closing parenthesis (for parethesis balancing post processing)
    1498. 

  1498. 	~xS'; // The regex is a non-anchored pattern and does not have a single fixed starting character.
    1499. 

  1499. 	      // Tell PCRE to spend more time optimizing since, when used on a page load, it will probably be used several times.
    1500. 

  1500. 

  1501. 	$ret = preg_replace_callback( $url_clickable, '_make_url_clickable_cb', $ret );
    1502. 

  1502. 

  1503. 	$ret = preg_replace_callback('#([\s>])((www|ftp)\.[\w\\x80-\\xff\#$%&~/.\-;:=,?@\[\]+]+)#is', '_make_web_ftp_clickable_cb', $ret);
    1504. 

  1504. 	$ret = preg_replace_callback('#([\s>])([.0-9a-z_+-]+)@(([0-9a-z-]+\.)+[0-9a-z]{2,})#i', '_make_email_clickable_cb', $ret);
    1505. 

  1505. 

  1506. 	// Cleanup of accidental links within links
    1507. 

  1507. 	$ret = preg_replace("#(<a( [^>]+?>|>))<a [^>]+?>([^>]+?)</a></a>#i", "$1$3</a>", $ret);
    1508. 

  1508. 	return substr( $ret, 1, -1 ); // Remove our whitespace padding.
    1509. 

  1509. }
    1510. 

  1510. 

  1511. /**
    1512. 

  1512.  * Breaks a string into chunks by splitting at whitespace characters.
    1513. 

  1513.  * The length of each returned chunk is as close to the specified length goal as possible,
    1514. 

  1514.  * with the caveat that each chunk includes its trailing delimiter.
    1515. 

  1515.  * Chunks longer than the goal are guaranteed to not have any inner whitespace.
    1516. 

  1516.  *
    1517. 

  1517.  * Joining the returned chunks with empty delimiters reconstructs the input string losslessly.
    1518. 

  1518.  *
    1519. 

  1519.  * Input string must have no null characters (or eventual transformations on output chunks must not care about null characters)
    1520. 

  1520.  *
    1521. 

  1521.  * <code>
    1522. 

  1522.  * _split_str_by_whitespace( "1234 67890 1234 67890a cd 1234   890 123456789 1234567890a    45678   1 3 5 7 90 ", 10 ) ==
    1523. 

  1523.  * array (
    1524. 

  1524.  *   0 => '1234 67890 ',  // 11 characters: Perfect split
    1525. 

  1525.  *   1 => '1234 ',        //  5 characters: '1234 67890a' was too long
    1526. 

  1526.  *   2 => '67890a cd ',   // 10 characters: '67890a cd 1234' was too long
    1527. 

  1527.  *   3 => '1234   890 ',  // 11 characters: Perfect split
    1528. 

  1528.  *   4 => '123456789 ',   // 10 characters: '123456789 1234567890a' was too long
    1529. 

  1529.  *   5 => '1234567890a ', // 12 characters: Too long, but no inner whitespace on which to split
    1530. 

  1530.  *   6 => '   45678   ',  // 11 characters: Perfect split
    1531. 

  1531.  *   7 => '1 3 5 7 9',    //  9 characters: End of $string
    1532. 

  1532.  * );
    1533. 

  1533.  * </code>
    1534. 

  1534.  *
    1535. 

  1535.  * @since 3.4.0
    1536. 

  1536.  * @access private
    1537. 

  1537.  *
    1538. 

  1538.  * @param string $string The string to split
    1539. 

  1539.  * @param    int $goal   The desired chunk length.
    1540. 

  1540.  * @return array Numeric array of chunks.
    1541. 

  1541.  */
    1542. 

  1542. function _split_str_by_whitespace( $string, $goal ) {
    1543. 

  1543. 	$chunks = array();
    1544. 

  1544. 

  1545. 	$string_nullspace = strtr( $string, "\r\n\t\v\f ", "\000\000\000\000\000\000" );
    1546. 

  1546. 

  1547. 	while ( $goal < strlen( $string_nullspace ) ) {
    1548. 

  1548. 		$pos = strrpos( substr( $string_nullspace, 0, $goal + 1 ), "\000" );
    1549. 

  1549. 

  1550. 		if ( false === $pos ) {
    1551. 

  1551. 			$pos = strpos( $string_nullspace, "\000", $goal + 1 );
    1552. 

  1552. 			if ( false === $pos ) {
    1553. 

  1553. 				break;
    1554. 

  1554. 			}
    1555. 

  1555. 		}
    1556. 

  1556. 

  1557. 		$chunks[] = substr( $string, 0, $pos + 1 );
    1558. 

  1558. 		$string = substr( $string, $pos + 1 );
    1559. 

  1559. 		$string_nullspace = substr( $string_nullspace, $pos + 1 );
    1560. 

  1560. 	}
    1561. 

  1561. 

  1562. 	if ( $string ) {
    1563. 

  1563. 		$chunks[] = $string;
    1564. 

  1564. 	}
    1565. 

  1565. 

  1566. 	return $chunks;
    1567. 

  1567. }
    1568. 

  1568. 

  1569. /**
    1570. 

  1570.  * Adds rel nofollow string to all HTML A elements in content.
    1571. 

  1571.  *
    1572. 

  1572.  * @since 1.5.0
    1573. 

  1573.  *
    1574. 

  1574.  * @param string $text Content that may contain HTML A elements.
    1575. 

  1575.  * @return string Converted content.
    1576. 

  1576.  */
    1577. 

  1577. function wp_rel_nofollow( $text ) {
    1578. 

  1578. 	// This is a pre save filter, so text is already escaped.
    1579. 

  1579. 	$text = stripslashes($text);
    1580. 

  1580. 	$text = preg_replace_callback('|<a (.+?)>|i', 'wp_rel_nofollow_callback', $text);
    1581. 

  1581. 	$text = esc_sql($text);
    1582. 

  1582. 	return $text;
    1583. 

  1583. }
    1584. 

  1584. 

  1585. /**
    1586. 

  1586.  * Callback to used to add rel=nofollow string to HTML A element.
    1587. 

  1587.  *
    1588. 

  1588.  * Will remove already existing rel="nofollow" and rel='nofollow' from the
    1589. 

  1589.  * string to prevent from invalidating (X)HTML.
    1590. 

  1590.  *
    1591. 

  1591.  * @since 2.3.0
    1592. 

  1592.  *
    1593. 

  1593.  * @param array $matches Single Match
    1594. 

  1594.  * @return string HTML A Element with rel nofollow.
    1595. 

  1595.  */
    1596. 

  1596. function wp_rel_nofollow_callback( $matches ) {
    1597. 

  1597. 	$text = $matches[1];
    1598. 

  1598. 	$text = str_replace(array(' rel="nofollow"', " rel='nofollow'"), '', $text);
    1599. 

  1599. 	return "<a $text rel=\"nofollow\">";
    1600. 

  1600. }
    1601. 

  1601. 

  1602. /**
    1603. 

  1603.  * Convert one smiley code to the icon graphic file equivalent.
    1604. 

  1604.  *
    1605. 

  1605.  * Looks up one smiley code in the $wpsmiliestrans global array and returns an
    1606. 

  1606.  * <img> string for that smiley.
    1607. 

  1607.  *
    1608. 

  1608.  * @global array $wpsmiliestrans
    1609. 

  1609.  * @since 2.8.0
    1610. 

  1610.  *
    1611. 

  1611.  * @param string $smiley Smiley code to convert to image.
    1612. 

  1612.  * @return string Image string for smiley.
    1613. 

  1613.  */
    1614. 

  1614. function translate_smiley($smiley) {
    1615. 

  1615. 	global $wpsmiliestrans;
    1616. 

  1616. 

  1617. 	if (count($smiley) == 0) {
    1618. 

  1618. 		return '';
    1619. 

  1619. 	}
    1620. 

  1620. 

  1621. 	$smiley = trim(reset($smiley));
    1622. 

  1622. 	$img = $wpsmiliestrans[$smiley];
    1623. 

  1623. 	$smiley_masked = esc_attr($smiley);
    1624. 

  1624. 

  1625. 	$srcurl = apply_filters('smilies_src', includes_url("images/smilies/$img"), $img, site_url());
    1626. 

  1626. 

  1627. 	return " <img src='$srcurl' alt='$smiley_masked' class='wp-smiley' /> ";
    1628. 

  1628. }
    1629. 

  1629. 

  1630. /**
    1631. 

  1631.  * Convert text equivalent of smilies to images.
    1632. 

  1632.  *
    1633. 

  1633.  * Will only convert smilies if the option 'use_smilies' is true and the global
    1634. 

  1634.  * used in the function isn't empty.
    1635. 

  1635.  *
    1636. 

  1636.  * @since 0.71
    1637. 

  1637.  * @uses $wp_smiliessearch
    1638. 

  1638.  *
    1639. 

  1639.  * @param string $text Content to convert smilies from text.
    1640. 

  1640.  * @return string Converted content with text smilies replaced with images.
    1641. 

  1641.  */
    1642. 

  1642. function convert_smilies($text) {
    1643. 

  1643. 	global $wp_smiliessearch;
    1644. 

  1644. 	$output = '';
    1645. 

  1645. 	if ( get_option('use_smilies') && !empty($wp_smiliessearch) ) {
    1646. 

  1646. 		// HTML loop taken from texturize function, could possible be consolidated
    1647. 

  1647. 		$textarr = preg_split("/(<.*>)/U", $text, -1, PREG_SPLIT_DELIM_CAPTURE); // capture the tags as well as in between
    1648. 

  1648. 		$stop = count($textarr);// loop stuff
    1649. 

  1649. 		for ($i = 0; $i < $stop; $i++) {
    1650. 

  1650. 			$content = $textarr[$i];
    1651. 

  1651. 			if ((strlen($content) > 0) && ('<' != $content[0])) { // If it's not a tag
    1652. 

  1652. 				$content = preg_replace_callback($wp_smiliessearch, 'translate_smiley', $content);
    1653. 

  1653. 			}
    1654. 

  1654. 			$output .= $content;
    1655. 

  1655. 		}
    1656. 

  1656. 	} else {
    1657. 

  1657. 		// return default text.
    1658. 

  1658. 		$output = $text;
    1659. 

  1659. 	}
    1660. 

  1660. 	return $output;
    1661. 

  1661. }
    1662. 

  1662. 

  1663. /**
    1664. 

  1664.  * Verifies that an email is valid.
    1665. 

  1665.  *
    1666. 

  1666.  * Does not grok i18n domains. Not RFC compliant.
    1667. 

  1667.  *
    1668. 

  1668.  * @since 0.71
    1669. 

  1669.  *
    1670. 

  1670.  * @param string $email Email address to verify.
    1671. 

  1671.  * @param boolean $deprecated Deprecated.
    1672. 

  1672.  * @return string|bool Either false or the valid email address.
    1673. 

  1673.  */
    1674. 

  1674. function is_email( $email, $deprecated = false ) {
    1675. 

  1675. 	if ( ! empty( $deprecated ) )
    1676. 

  1676. 		_deprecated_argument( __FUNCTION__, '3.0' );
    1677. 

  1677. 

  1678. 	// Test for the minimum length the email can be
    1679. 

  1679. 	if ( strlen( $email ) < 3 ) {
    1680. 

  1680. 		return apply_filters( 'is_email', false, $email, 'email_too_short' );
    1681. 

  1681. 	}
    1682. 

  1682. 

  1683. 	// Test for an @ character after the first position
    1684. 

  1684. 	if ( strpos( $email, '@', 1 ) === false ) {
    1685. 

  1685. 		return apply_filters( 'is_email', false, $email, 'email_no_at' );
    1686. 

  1686. 	}
    1687. 

  1687. 

  1688. 	// Split out the local and domain parts
    1689. 

  1689. 	list( $local, $domain ) = explode( '@', $email, 2 );
    1690. 

  1690. 

  1691. 	// LOCAL PART
    1692. 

  1692. 	// Test for invalid characters
    1693. 

  1693. 	if ( !preg_match( '/^[a-zA-Z0-9!#$%&\'*+\/=?^_`{|}~\.-]+$/', $local ) ) {
    1694. 

  1694. 		return apply_filters( 'is_email', false, $email, 'local_invalid_chars' );
    1695. 

  1695. 	}
    1696. 

  1696. 

  1697. 	// DOMAIN PART
    1698. 

  1698. 	// Test for sequences of periods
    1699. 

  1699. 	if ( preg_match( '/\.{2,}/', $domain ) ) {
    1700. 

  1700. 		return apply_filters( 'is_email', false, $email, 'domain_period_sequence' );
    1701. 

  1701. 	}
    1702. 

  1702. 

  1703. 	// Test for leading and trailing periods and whitespace
    1704. 

  1704. 	if ( trim( $domain, " \t\n\r\0\x0B." ) !== $domain ) {
    1705. 

  1705. 		return apply_filters( 'is_email', false, $email, 'domain_period_limits' );
    1706. 

  1706. 	}
    1707. 

  1707. 

  1708. 	// Split the domain into subs
    1709. 

  1709. 	$subs = explode( '.', $domain );
    1710. 

  1710. 

  1711. 	// Assume the domain will have at least two subs
    1712. 

  1712. 	if ( 2 > count( $subs ) ) {
    1713. 

  1713. 		return apply_filters( 'is_email', false, $email, 'domain_no_periods' );
    1714. 

  1714. 	}
    1715. 

  1715. 

  1716. 	// Loop through each sub
    1717. 

  1717. 	foreach ( $subs as $sub ) {
    1718. 

  1718. 		// Test for leading and trailing hyphens and whitespace
    1719. 

  1719. 		if ( trim( $sub, " \t\n\r\0\x0B-" ) !== $sub ) {
    1720. 

  1720. 			return apply_filters( 'is_email', false, $email, 'sub_hyphen_limits' );
    1721. 

  1721. 		}
    1722. 

  1722. 

  1723. 		// Test for invalid characters
    1724. 

  1724. 		if ( !preg_match('/^[a-z0-9-]+$/i', $sub ) ) {
    1725. 

  1725. 			return apply_filters( 'is_email', false, $email, 'sub_invalid_chars' );
    1726. 

  1726. 		}
    1727. 

  1727. 	}
    1728. 

  1728. 

  1729. 	// Congratulations your email made it!
    1730. 

  1730. 	return apply_filters( 'is_email', $email, $email, null );
    1731. 

  1731. }
    1732. 

  1732. 

  1733. /**
    1734. 

  1734.  * Convert to ASCII from email subjects.
    1735. 

  1735.  *
    1736. 

  1736.  * @since 1.2.0
    1737. 

  1737.  * @usedby wp_mail() handles charsets in email subjects
    1738. 

  1738.  *
    1739. 

  1739.  * @param string $string Subject line
    1740. 

  1740.  * @return string Converted string to ASCII
    1741. 

  1741.  */
    1742. 

  1742. function wp_iso_descrambler($string) {
    1743. 

  1743. 	/* this may only work with iso-8859-1, I'm afraid */
    1744. 

  1744. 	if (!preg_match('#\=\?(.+)\?Q\?(.+)\?\=#i', $string, $matches)) {
    1745. 

  1745. 		return $string;
    1746. 

  1746. 	} else {
    1747. 

  1747. 		$subject = str_replace('_', ' ', $matches[2]);
    1748. 

  1748. 		$subject = preg_replace_callback('#\=([0-9a-f]{2})#i', '_wp_iso_convert', $subject);
    1749. 

  1749. 		return $subject;
    1750. 

  1750. 	}
    1751. 

  1751. }
    1752. 

  1752. 

  1753. /**
    1754. 

  1754.  * Helper function to convert hex encoded chars to ascii
    1755. 

  1755.  *
    1756. 

  1756.  * @since 3.1.0
    1757. 

  1757.  * @access private
    1758. 

  1758.  * @param array $match the preg_replace_callback matches array
    1759. 

  1759.  */
    1760. 

  1760. function _wp_iso_convert( $match ) {
    1761. 

  1761. 	return chr( hexdec( strtolower( $match[1] ) ) );
    1762. 

  1762. }
    1763. 

  1763. 

  1764. /**
    1765. 

  1765.  * Returns a date in the GMT equivalent.
    1766. 

  1766.  *
    1767. 

  1767.  * Requires and returns a date in the Y-m-d H:i:s format. Simply subtracts the
    1768. 

  1768.  * value of the 'gmt_offset' option. Return format can be overridden using the
    1769. 

  1769.  * $format parameter. The DateTime and DateTimeZone classes are used to respect
    1770. 

  1770.  * time zone differences in DST.
    1771. 

  1771.  *
    1772. 

  1772.  * @since 1.2.0
    1773. 

  1773.  *
    1774. 

  1774.  * @uses get_option() to retrieve the the value of 'gmt_offset'.
    1775. 

  1775.  * @param string $string The date to be converted.
    1776. 

  1776.  * @param string $format The format string for the returned date (default is Y-m-d H:i:s)
    1777. 

  1777.  * @return string GMT version of the date provided.
    1778. 

  1778.  */
    1779. 

  1779. function get_gmt_from_date($string, $format = 'Y-m-d H:i:s') {
    1780. 

  1780. 	preg_match('#([0-9]{1,4})-([0-9]{1,2})-([0-9]{1,2}) ([0-9]{1,2}):([0-9]{1,2}):([0-9]{1,2})#', $string, $matches);
    1781. 

  1781. 	$tz = get_option('timezone_string');
    1782. 

  1782. 	if ( $tz ) {
    1783. 

  1783. 		date_default_timezone_set( $tz );
    1784. 

  1784. 		$datetime = new DateTime( $string );
    1785. 

  1785. 		$datetime->setTimezone( new DateTimeZone('UTC') );
    1786. 

  1786. 		$offset = $datetime->getOffset();
    1787. 

  1787. 		$datetime->modify( '+' . $offset / 3600 . ' hours');
    1788. 

  1788. 		$string_gmt = gmdate($format, $datetime->format('U'));
    1789. 

  1789. 

  1790. 		date_default_timezone_set('UTC');
    1791. 

  1791. 	} else {
    1792. 

  1792. 		$string_time = gmmktime($matches[4], $matches[5], $matches[6], $matches[2], $matches[3], $matches[1]);
    1793. 

  1793. 		$string_gmt = gmdate($format, $string_time - get_option('gmt_offset') * 3600);
    1794. 

  1794. 	}
    1795. 

  1795. 	return $string_gmt;
    1796. 

  1796. }
    1797. 

  1797. 

  1798. /**
    1799. 

  1799.  * Converts a GMT date into the correct format for the blog.
    1800. 

  1800.  *
    1801. 

  1801.  * Requires and returns in the Y-m-d H:i:s format. Simply adds the value of
    1802. 

  1802.  * gmt_offset.Return format can be overridden using the $format parameter
    1803. 

  1803.  *
    1804. 

  1804.  * @since 1.2.0
    1805. 

  1805.  *
    1806. 

  1806.  * @param string $string The date to be converted.
    1807. 

  1807.  * @param string $format The format string for the returned date (default is Y-m-d H:i:s)
    1808. 

  1808.  * @return string Formatted date relative to the GMT offset.
    1809. 

  1809.  */
    1810. 

  1810. function get_date_from_gmt($string, $format = 'Y-m-d H:i:s') {
    1811. 

  1811. 	preg_match('#([0-9]{1,4})-([0-9]{1,2})-([0-9]{1,2}) ([0-9]{1,2}):([0-9]{1,2}):([0-9]{1,2})#', $string, $matches);
    1812. 

  1812. 	$string_time = gmmktime($matches[4], $matches[5], $matches[6], $matches[2], $matches[3], $matches[1]);
    1813. 

  1813. 	$string_localtime = gmdate($format, $string_time + get_option('gmt_offset')*3600);
    1814. 

  1814. 	return $string_localtime;
    1815. 

  1815. }
    1816. 

  1816. 

  1817. /**
    1818. 

  1818.  * Computes an offset in seconds from an iso8601 timezone.
    1819. 

  1819.  *
    1820. 

  1820.  * @since 1.5.0
    1821. 

  1821.  *
    1822. 

  1822.  * @param string $timezone Either 'Z' for 0 offset or 'Âąhhmm'.
    1823. 

  1823.  * @return int|float The offset in seconds.
    1824. 

  1824.  */
    1825. 

  1825. function iso8601_timezone_to_offset($timezone) {
    1826. 

  1826. 	// $timezone is either 'Z' or '[+|-]hhmm'
    1827. 

  1827. 	if ($timezone == 'Z') {
    1828. 

  1828. 		$offset = 0;
    1829. 

  1829. 	} else {
    1830. 

  1830. 		$sign    = (substr($timezone, 0, 1) == '+') ? 1 : -1;
    1831. 

  1831. 		$hours   = intval(substr($timezone, 1, 2));
    1832. 

  1832. 		$minutes = intval(substr($timezone, 3, 4)) / 60;
    1833. 

  1833. 		$offset  = $sign * 3600 * ($hours + $minutes);
    1834. 

  1834. 	}
    1835. 

  1835. 	return $offset;
    1836. 

  1836. }
    1837. 

  1837. 

  1838. /**
    1839. 

  1839.  * Converts an iso8601 date to MySQL DateTime format used by post_date[_gmt].
    1840. 

  1840.  *
    1841. 

  1841.  * @since 1.5.0
    1842. 

  1842.  *
    1843. 

  1843.  * @param string $date_string Date and time in ISO 8601 format {@link http://en.wikipedia.org/wiki/ISO_8601}.
    1844. 

  1844.  * @param string $timezone Optional. If set to GMT returns the time minus gmt_offset. Default is 'user'.
    1845. 

  1845.  * @return string The date and time in MySQL DateTime format - Y-m-d H:i:s.
    1846. 

  1846.  */
    1847. 

  1847. function iso8601_to_datetime($date_string, $timezone = 'user') {
    1848. 

  1848. 	$timezone = strtolower($timezone);
    1849. 

  1849. 

  1850. 	if ($timezone == 'gmt') {
    1851. 

  1851. 

  1852. 		preg_match('#([0-9]{4})([0-9]{2})([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(Z|[\+|\-][0-9]{2,4}){0,1}#', $date_string, $date_bits);
    1853. 

  1853. 

  1854. 		if (!empty($date_bits[7])) { // we have a timezone, so let's compute an offset
    1855. 

  1855. 			$offset = iso8601_timezone_to_offset($date_bits[7]);
    1856. 

  1856. 		} else { // we don't have a timezone, so we assume user local timezone (not server's!)
    1857. 

  1857. 			$offset = 3600 * get_option('gmt_offset');
    1858. 

  1858. 		}
    1859. 

  1859. 

  1860. 		$timestamp = gmmktime($date_bits[4], $date_bits[5], $date_bits[6], $date_bits[2], $date_bits[3], $date_bits[1]);
    1861. 

  1861. 		$timestamp -= $offset;
    1862. 

  1862. 

  1863. 		return gmdate('Y-m-d H:i:s', $timestamp);
    1864. 

  1864. 

  1865. 	} else if ($timezone == 'user') {
    1866. 

  1866. 		return preg_replace('#([0-9]{4})([0-9]{2})([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(Z|[\+|\-][0-9]{2,4}){0,1}#', '$1-$2-$3 $4:$5:$6', $date_string);
    1867. 

  1867. 	}
    1868. 

  1868. }
    1869. 

  1869. 

  1870. /**
    1871. 

  1871.  * Adds a element attributes to open links in new windows.
    1872. 

  1872.  *
    1873. 

  1873.  * Comment text in popup windows should be filtered through this. Right now it's
    1874. 

  1874.  * a moderately dumb function, ideally it would detect whether a target or rel
    1875. 

  1875.  * attribute was already there and adjust its actions accordingly.
    1876. 

  1876.  *
    1877. 

  1877.  * @since 0.71
    1878. 

  1878.  *
    1879. 

  1879.  * @param string $text Content to replace links to open in a new window.
    1880. 

  1880.  * @return string Content that has filtered links.
    1881. 

  1881.  */
    1882. 

  1882. function popuplinks($text) {
    1883. 

  1883. 	$text = preg_replace('/<a (.+?)>/i', "<a $1 target='_blank' rel='external'>", $text);
    1884. 

  1884. 	return $text;
    1885. 

  1885. }
    1886. 

  1886. 

  1887. /**
    1888. 

  1888.  * Strips out all characters that are not allowable in an email.
    1889. 

  1889.  *
    1890. 

  1890.  * @since 1.5.0
    1891. 

  1891.  *
    1892. 

  1892.  * @param string $email Email address to filter.
    1893. 

  1893.  * @return string Filtered email address.
    1894. 

  1894.  */
    1895. 

  1895. function sanitize_email( $email ) {
    1896. 

  1896. 	// Test for the minimum length the email can be
    1897. 

  1897. 	if ( strlen( $email ) < 3 ) {
    1898. 

  1898. 		return apply_filters( 'sanitize_email', '', $email, 'email_too_short' );
    1899. 

  1899. 	}
    1900. 

  1900. 

  1901. 	// Test for an @ character after the first position
    1902. 

  1902. 	if ( strpos( $email, '@', 1 ) === false ) {
    1903. 

  1903. 		return apply_filters( 'sanitize_email', '', $email, 'email_no_at' );
    1904. 

  1904. 	}
    1905. 

  1905. 

  1906. 	// Split out the local and domain parts
    1907. 

  1907. 	list( $local, $domain ) = explode( '@', $email, 2 );
    1908. 

  1908. 

  1909. 	// LOCAL PART
    1910. 

  1910. 	// Test for invalid characters
    1911. 

  1911. 	$local = preg_replace( '/[^a-zA-Z0-9!#$%&\'*+\/=?^_`{|}~\.-]/', '', $local );
    1912. 

  1912. 	if ( '' === $local ) {
    1913. 

  1913. 		return apply_filters( 'sanitize_email', '', $email, 'local_invalid_chars' );
    1914. 

  1914. 	}
    1915. 

  1915. 

  1916. 	// DOMAIN PART
    1917. 

  1917. 	// Test for sequences of periods
    1918. 

  1918. 	$domain = preg_replace( '/\.{2,}/', '', $domain );
    1919. 

  1919. 	if ( '' === $domain ) {
    1920. 

  1920. 		return apply_filters( 'sanitize_email', '', $email, 'domain_period_sequence' );
    1921. 

  1921. 	}
    1922. 

  1922. 

  1923. 	// Test for leading and trailing periods and whitespace
    1924. 

  1924. 	$domain = trim( $domain, " \t\n\r\0\x0B." );
    1925. 

  1925. 	if ( '' === $domain ) {
    1926. 

  1926. 		return apply_filters( 'sanitize_email', '', $email, 'domain_period_limits' );
    1927. 

  1927. 	}
    1928. 

  1928. 

  1929. 	// Split the domain into subs
    1930. 

  1930. 	$subs = explode( '.', $domain );
    1931. 

  1931. 

  1932. 	// Assume the domain will have at least two subs
    1933. 

  1933. 	if ( 2 > count( $subs ) ) {
    1934. 

  1934. 		return apply_filters( 'sanitize_email', '', $email, 'domain_no_periods' );
    1935. 

  1935. 	}
    1936. 

  1936. 

  1937. 	// Create an array that will contain valid subs
    1938. 

  1938. 	$new_subs = array();
    1939. 

  1939. 

  1940. 	// Loop through each sub
    1941. 

  1941. 	foreach ( $subs as $sub ) {
    1942. 

  1942. 		// Test for leading and trailing hyphens
    1943. 

  1943. 		$sub = trim( $sub, " \t\n\r\0\x0B-" );
    1944. 

  1944. 

  1945. 		// Test for invalid characters
    1946. 

  1946. 		$sub = preg_replace( '/[^a-z0-9-]+/i', '', $sub );
    1947. 

  1947. 

  1948. 		// If there's anything left, add it to the valid subs
    1949. 

  1949. 		if ( '' !== $sub ) {
    1950. 

  1950. 			$new_subs[] = $sub;
    1951. 

  1951. 		}
    1952. 

  1952. 	}
    1953. 

  1953. 

  1954. 	// If there aren't 2 or more valid subs
    1955. 

  1955. 	if ( 2 > count( $new_subs ) ) {
    1956. 

  1956. 		return apply_filters( 'sanitize_email', '', $email, 'domain_no_valid_subs' );
    1957. 

  1957. 	}
    1958. 

  1958. 

  1959. 	// Join valid subs into the new domain
    1960. 

  1960. 	$domain = join( '.', $new_subs );
    1961. 

  1961. 

  1962. 	// Put the email back together
    1963. 

  1963. 	$email = $local . '@' . $domain;
    1964. 

  1964. 

  1965. 	// Congratulations your email made it!
    1966. 

  1966. 	return apply_filters( 'sanitize_email', $email, $email, null );
    1967. 

  1967. }
    1968. 

  1968. 

  1969. /**
    1970. 

  1970.  * Determines the difference between two timestamps.
    1971. 

  1971.  *
    1972. 

  1972.  * The difference is returned in a human readable format such as "1 hour",
    1973. 

  1973.  * "5 mins", "2 days".
    1974. 

  1974.  *
    1975. 

  1975.  * @since 1.5.0
    1976. 

  1976.  *
    1977. 

  1977.  * @param int $from Unix timestamp from which the difference begins.
    1978. 

  1978.  * @param int $to Optional. Unix timestamp to end the time difference. Default becomes time() if not set.
    1979. 

  1979.  * @return string Human readable time difference.
    1980. 

  1980.  */
    1981. 

  1981. function human_time_diff( $from, $to = '' ) {
    1982. 

  1982. 	if ( empty($to) )
    1983. 

  1983. 		$to = time();
    1984. 

  1984. 	$diff = (int) abs($to - $from);
    1985. 

  1985. 	if ($diff <= 3600) {
    1986. 

  1986. 		$mins = round($diff / 60);
    1987. 

  1987. 		if ($mins <= 1) {
    1988. 

  1988. 			$mins = 1;
    1989. 

  1989. 		}
    1990. 

  1990. 		/* translators: min=minute */
    1991. 

  1991. 		$since = sprintf(_n('%s min', '%s mins', $mins), $mins);
    1992. 

  1992. 	} else if (($diff <= 86400) && ($diff > 3600)) {
    1993. 

  1993. 		$hours = round($diff / 3600);
    1994. 

  1994. 		if ($hours <= 1) {
    1995. 

  1995. 			$hours = 1;
    1996. 

  1996. 		}
    1997. 

  1997. 		$since = sprintf(_n('%s hour', '%s hours', $hours), $hours);
    1998. 

  1998. 	} elseif ($diff >= 86400) {
    1999. 

  1999. 		$days = round($diff / 86400);
    2000. 

  2000. 		if ($days <= 1) {
    2001. 

  2001. 			$days = 1;
    2002. 

  2002. 		}
    2003. 

  2003. 		$since = sprintf(_n('%s day', '%s days', $days), $days);
    2004. 

  2004. 	}
    2005. 

  2005. 	return $since;
    2006. 

  2006. }
    2007. 

  2007. 

  2008. /**
    2009. 

  2009.  * Generates an excerpt from the content, if needed.
    2010. 

  2010.  *
    2011. 

  2011.  * The excerpt word amount will be 55 words and if the amount is greater than
    2012. 

  2012.  * that, then the string ' [...]' will be appended to the excerpt. If the string
    2013. 

  2013.  * is less than 55 words, then the content will be returned as is.
    2014. 

  2014.  *
    2015. 

  2015.  * The 55 word limit can be modified by plugins/themes using the excerpt_length filter
    2016. 

  2016.  * The ' [...]' string can be modified by plugins/themes using the excerpt_more filter
    2017. 

  2017.  *
    2018. 

  2018.  * @since 1.5.0
    2019. 

  2019.  *
    2020. 

  2020.  * @param string $text Optional. The excerpt. If set to empty, an excerpt is generated.
    2021. 

  2021.  * @return string The excerpt.
    2022. 

  2022.  */
    2023. 

  2023. function wp_trim_excerpt($text = '') {
    2024. 

  2024. 	$raw_excerpt = $text;
    2025. 

  2025. 	if ( '' == $text ) {
    2026. 

  2026. 		$text = get_the_content('');
    2027. 

  2027. 

  2028. 		$text = strip_shortcodes( $text );
    2029. 

  2029. 

  2030. 		$text = apply_filters('the_content', $text);
    2031. 

  2031. 		$text = str_replace(']]>', ']]&gt;', $text);
    2032. 

  2032. 		$excerpt_length = apply_filters('excerpt_length', 55);
    2033. 

  2033. 		$excerpt_more = apply_filters('excerpt_more', ' ' . '[...]');
    2034. 

  2034. 		$text = wp_trim_words( $text, $excerpt_length, $excerpt_more );
    2035. 

  2035. 	}
    2036. 

  2036. 	return apply_filters('wp_trim_excerpt', $text, $raw_excerpt);
    2037. 

  2037. }
    2038. 

  2038. 

  2039. /**
    2040. 

  2040.  * Trims text to a certain number of words.
    2041. 

  2041.  *
    2042. 

  2042.  * @since 3.3.0
    2043. 

  2043.  *
    2044. 

  2044.  * @param string $text Text to trim.
    2045. 

  2045.  * @param int $num_words Number of words. Default 55.
    2046. 

  2046.  * @param string $more What to append if $text needs to be trimmed. Default '&hellip;'.
    2047. 

  2047.  * @return string Trimmed text.
    2048. 

  2048.  */
    2049. 

  2049. function wp_trim_words( $text, $num_words = 55, $more = null ) {
    2050. 

  2050. 	if ( null === $more )
    2051. 

  2051. 		$more = __( '&hellip;' );
    2052. 

  2052. 	$original_text = $text;
    2053. 

  2053. 	$text = wp_strip_all_tags( $text );
    2054. 

  2054. 	$words_array = preg_split( "/[\n\r\t ]+/", $text, $num_words + 1, PREG_SPLIT_NO_EMPTY );
    2055. 

  2055. 	if ( count( $words_array ) > $num_words ) {
    2056. 

  2056. 		array_pop( $words_array );
    2057. 

  2057. 		$text = implode( ' ', $words_array );
    2058. 

  2058. 		$text = $text . $more;
    2059. 

  2059. 	} else {
    2060. 

  2060. 		$text = implode( ' ', $words_array );
    2061. 

  2061. 	}
    2062. 

  2062. 	return apply_filters( 'wp_trim_words', $text, $num_words, $more, $original_text );
    2063. 

  2063. }
    2064. 

  2064. 

  2065. /**
    2066. 

  2066.  * Converts named entities into numbered entities.
    2067. 

  2067.  *
    2068. 

  2068.  * @since 1.5.1
    2069. 

  2069.  *
    2070. 

  2070.  * @param string $text The text within which entities will be converted.
    2071. 

  2071.  * @return string Text with converted entities.
    2072. 

  2072.  */
    2073. 

  2073. function ent2ncr($text) {
    2074. 

  2074. 

  2075. 	// Allow a plugin to short-circuit and override the mappings.
    2076. 

  2076. 	$filtered = apply_filters( 'pre_ent2ncr', null, $text );
    2077. 

  2077. 	if( null !== $filtered )
    2078. 

  2078. 		return $filtered;
    2079. 

  2079. 

  2080. 	$to_ncr = array(
    2081. 

  2081. 		'&quot;' => '&#34;',
    2082. 

  2082. 		'&amp;' => '&#38;',
    2083. 

  2083. 		'&frasl;' => '&#47;',
    2084. 

  2084. 		'&lt;' => '&#60;',
    2085. 

  2085. 		'&gt;' => '&#62;',
    2086. 

  2086. 		'|' => '&#124;',
    2087. 

  2087. 		'&nbsp;' => '&#160;',
    2088. 

  2088. 		'&iexcl;' => '&#161;',
    2089. 

  2089. 		'&cent;' => '&#162;',
    2090. 

  2090. 		'&pound;' => '&#163;',
    2091. 

  2091. 		'&curren;' => '&#164;',
    2092. 

  2092. 		'&yen;' => '&#165;',
    2093. 

  2093. 		'&brvbar;' => '&#166;',
    2094. 

  2094. 		'&brkbar;' => '&#166;',
    2095. 

  2095. 		'&sect;' => '&#167;',
    2096. 

  2096. 		'&uml;' => '&#168;',
    2097. 

  2097. 		'&die;' => '&#168;',
    2098. 

  2098. 		'&copy;' => '&#169;',
    2099. 

  2099. 		'&ordf;' => '&#170;',
    2100. 

  2100. 		'&laquo;' => '&#171;',
    2101. 

  2101. 		'&not;' => '&#172;',
    2102. 

  2102. 		'&shy;' => '&#173;',
    2103. 

  2103. 		'&reg;' => '&#174;',
    2104. 

  2104. 		'&macr;' => '&#175;',
    2105. 

  2105. 		'&hibar;' => '&#175;',
    2106. 

  2106. 		'&deg;' => '&#176;',
    2107. 

  2107. 		'&plusmn;' => '&#177;',
    2108. 

  2108. 		'&sup2;' => '&#178;',
    2109. 

  2109. 		'&sup3;' => '&#179;',
    2110. 

  2110. 		'&acute;' => '&#180;',
    2111. 

  2111. 		'&micro;' => '&#181;',
    2112. 

  2112. 		'&para;' => '&#182;',
    2113. 

  2113. 		'&middot;' => '&#183;',
    2114. 

  2114. 		'&cedil;' => '&#184;',
    2115. 

  2115. 		'&sup1;' => '&#185;',
    2116. 

  2116. 		'&ordm;' => '&#186;',
    2117. 

  2117. 		'&raquo;' => '&#187;',
    2118. 

  2118. 		'&frac14;' => '&#188;',
    2119. 

  2119. 		'&frac12;' => '&#189;',
    2120. 

  2120. 		'&frac34;' => '&#190;',
    2121. 

  2121. 		'&iquest;' => '&#191;',
    2122. 

  2122. 		'&Agrave;' => '&#192;',
    2123. 

  2123. 		'&Aacute;' => '&#193;',
    2124. 

  2124. 		'&Acirc;' => '&#194;',
    2125. 

  2125. 		'&Atilde;' => '&#195;',
    2126. 

  2126. 		'&Auml;' => '&#196;',
    2127. 

  2127. 		'&Aring;' => '&#197;',
    2128. 

  2128. 		'&AElig;' => '&#198;',
    2129. 

  2129. 		'&Ccedil;' => '&#199;',
    2130. 

  2130. 		'&Egrave;' => '&#200;',
    2131. 

  2131. 		'&Eacute;' => '&#201;',
    2132. 

  2132. 		'&Ecirc;' => '&#202;',
    2133. 

  2133. 		'&Euml;' => '&#203;',
    2134. 

  2134. 		'&Igrave;' => '&#204;',
    2135. 

  2135. 		'&Iacute;' => '&#205;',
    2136. 

  2136. 		'&Icirc;' => '&#206;',
    2137. 

  2137. 		'&Iuml;' => '&#207;',
    2138. 

  2138. 		'&ETH;' => '&#208;',
    2139. 

  2139. 		'&Ntilde;' => '&#209;',
    2140. 

  2140. 		'&Ograve;' => '&#210;',
    2141. 

  2141. 		'&Oacute;' => '&#211;',
    2142. 

  2142. 		'&Ocirc;' => '&#212;',
    2143. 

  2143. 		'&Otilde;' => '&#213;',
    2144. 

  2144. 		'&Ouml;' => '&#214;',
    2145. 

  2145. 		'&times;' => '&#215;',
    2146. 

  2146. 		'&Oslash;' => '&#216;',
    2147. 

  2147. 		'&Ugrave;' => '&#217;',
    2148. 

  2148. 		'&Uacute;' => '&#218;',
    2149. 

  2149. 		'&Ucirc;' => '&#219;',
    2150. 

  2150. 		'&Uuml;' => '&#220;',
    2151. 

  2151. 		'&Yacute;' => '&#221;',
    2152. 

  2152. 		'&THORN;' => '&#222;',
    2153. 

  2153. 		'&szlig;' => '&#223;',
    2154. 

  2154. 		'&agrave;' => '&#224;',
    2155. 

  2155. 		'&aacute;' => '&#225;',
    2156. 

  2156. 		'&acirc;' => '&#226;',
    2157. 

  2157. 		'&atilde;' => '&#227;',
    2158. 

  2158. 		'&auml;' => '&#228;',
    2159. 

  2159. 		'&aring;' => '&#229;',
    2160. 

  2160. 		'&aelig;' => '&#230;',
    2161. 

  2161. 		'&ccedil;' => '&#231;',
    2162. 

  2162. 		'&egrave;' => '&#232;',
    2163. 

  2163. 		'&eacute;' => '&#233;',
    2164. 

  2164. 		'&ecirc;' => '&#234;',
    2165. 

  2165. 		'&euml;' => '&#235;',
    2166. 

  2166. 		'&igrave;' => '&#236;',
    2167. 

  2167. 		'&iacute;' => '&#237;',
    2168. 

  2168. 		'&icirc;' => '&#238;',
    2169. 

  2169. 		'&iuml;' => '&#239;',
    2170. 

  2170. 		'&eth;' => '&#240;',
    2171. 

  2171. 		'&ntilde;' => '&#241;',
    2172. 

  2172. 		'&ograve;' => '&#242;',
    2173. 

  2173. 		'&oacute;' => '&#243;',
    2174. 

  2174. 		'&ocirc;' => '&#244;',
    2175. 

  2175. 		'&otilde;' => '&#245;',
    2176. 

  2176. 		'&ouml;' => '&#246;',
    2177. 

  2177. 		'&divide;' => '&#247;',
    2178. 

  2178. 		'&oslash;' => '&#248;',
    2179. 

  2179. 		'&ugrave;' => '&#249;',
    2180. 

  2180. 		'&uacute;' => '&#250;',
    2181. 

  2181. 		'&ucirc;' => '&#251;',
    2182. 

  2182. 		'&uuml;' => '&#252;',
    2183. 

  2183. 		'&yacute;' => '&#253;',
    2184. 

  2184. 		'&thorn;' => '&#254;',
    2185. 

  2185. 		'&yuml;' => '&#255;',
    2186. 

  2186. 		'&OElig;' => '&#338;',
    2187. 

  2187. 		'&oelig;' => '&#339;',
    2188. 

  2188. 		'&Scaron;' => '&#352;',
    2189. 

  2189. 		'&scaron;' => '&#353;',
    2190. 

  2190. 		'&Yuml;' => '&#376;',
    2191. 

  2191. 		'&fnof;' => '&#402;',
    2192. 

  2192. 		'&circ;' => '&#710;',
    2193. 

  2193. 		'&tilde;' => '&#732;',
    2194. 

  2194. 		'&Alpha;' => '&#913;',
    2195. 

  2195. 		'&Beta;' => '&#914;',
    2196. 

  2196. 		'&Gamma;' => '&#915;',
    2197. 

  2197. 		'&Delta;' => '&#916;',
    2198. 

  2198. 		'&Epsilon;' => '&#917;',
    2199. 

  2199. 		'&Zeta;' => '&#918;',
    2200. 

  2200. 		'&Eta;' => '&#919;',
    2201. 

  2201. 		'&Theta;' => '&#920;',
    2202. 

  2202. 		'&Iota;' => '&#921;',
    2203. 

  2203. 		'&Kappa;' => '&#922;',
    2204. 

  2204. 		'&Lambda;' => '&#923;',
    2205. 

  2205. 		'&Mu;' => '&#924;',
    2206. 

  2206. 		'&Nu;' => '&#925;',
    2207. 

  2207. 		'&Xi;' => '&#926;',
    2208. 

  2208. 		'&Omicron;' => '&#927;',
    2209. 

  2209. 		'&Pi;' => '&#928;',
    2210. 

  2210. 		'&Rho;' => '&#929;',
    2211. 

  2211. 		'&Sigma;' => '&#931;',
    2212. 

  2212. 		'&Tau;' => '&#932;',
    2213. 

  2213. 		'&Upsilon;' => '&#933;',
    2214. 

  2214. 		'&Phi;' => '&#934;',
    2215. 

  2215. 		'&Chi;' => '&#935;',
    2216. 

  2216. 		'&Psi;' => '&#936;',
    2217. 

  2217. 		'&Omega;' => '&#937;',
    2218. 

  2218. 		'&alpha;' => '&#945;',
    2219. 

  2219. 		'&beta;' => '&#946;',
    2220. 

  2220. 		'&gamma;' => '&#947;',
    2221. 

  2221. 		'&delta;' => '&#948;',
    2222. 

  2222. 		'&epsilon;' => '&#949;',
    2223. 

  2223. 		'&zeta;' => '&#950;',
    2224. 

  2224. 		'&eta;' => '&#951;',
    2225. 

  2225. 		'&theta;' => '&#952;',
    2226. 

  2226. 		'&iota;' => '&#953;',
    2227. 

  2227. 		'&kappa;' => '&#954;',
    2228. 

  2228. 		'&lambda;' => '&#955;',
    2229. 

  2229. 		'&mu;' => '&#956;',
    2230. 

  2230. 		'&nu;' => '&#957;',
    2231. 

  2231. 		'&xi;' => '&#958;',
    2232. 

  2232. 		'&omicron;' => '&#959;',
    2233. 

  2233. 		'&pi;' => '&#960;',
    2234. 

  2234. 		'&rho;' => '&#961;',
    2235. 

  2235. 		'&sigmaf;' => '&#962;',
    2236. 

  2236. 		'&sigma;' => '&#963;',
    2237. 

  2237. 		'&tau;' => '&#964;',
    2238. 

  2238. 		'&upsilon;' => '&#965;',
    2239. 

  2239. 		'&phi;' => '&#966;',
    2240. 

  2240. 		'&chi;' => '&#967;',
    2241. 

  2241. 		'&psi;' => '&#968;',
    2242. 

  2242. 		'&omega;' => '&#969;',
    2243. 

  2243. 		'&thetasym;' => '&#977;',
    2244. 

  2244. 		'&upsih;' => '&#978;',
    2245. 

  2245. 		'&piv;' => '&#982;',
    2246. 

  2246. 		'&ensp;' => '&#8194;',
    2247. 

  2247. 		'&emsp;' => '&#8195;',
    2248. 

  2248. 		'&thinsp;' => '&#8201;',
    2249. 

  2249. 		'&zwnj;' => '&#8204;',
    2250. 

  2250. 		'&zwj;' => '&#8205;',
    2251. 

  2251. 		'&lrm;' => '&#8206;',
    2252. 

  2252. 		'&rlm;' => '&#8207;',
    2253. 

  2253. 		'&ndash;' => '&#8211;',
    2254. 

  2254. 		'&mdash;' => '&#8212;',
    2255. 

  2255. 		'&lsquo;' => '&#8216;',
    2256. 

  2256. 		'&rsquo;' => '&#8217;',
    2257. 

  2257. 		'&sbquo;' => '&#8218;',
    2258. 

  2258. 		'&ldquo;' => '&#8220;',
    2259. 

  2259. 		'&rdquo;' => '&#8221;',
    2260. 

  2260. 		'&bdquo;' => '&#8222;',
    2261. 

  2261. 		'&dagger;' => '&#8224;',
    2262. 

  2262. 		'&Dagger;' => '&#8225;',
    2263. 

  2263. 		'&bull;' => '&#8226;',
    2264. 

  2264. 		'&hellip;' => '&#8230;',
    2265. 

  2265. 		'&permil;' => '&#8240;',
    2266. 

  2266. 		'&prime;' => '&#8242;',
    2267. 

  2267. 		'&Prime;' => '&#8243;',
    2268. 

  2268. 		'&lsaquo;' => '&#8249;',
    2269. 

  2269. 		'&rsaquo;' => '&#8250;',
    2270. 

  2270. 		'&oline;' => '&#8254;',
    2271. 

  2271. 		'&frasl;' => '&#8260;',
    2272. 

  2272. 		'&euro;' => '&#8364;',
    2273. 

  2273. 		'&image;' => '&#8465;',
    2274. 

  2274. 		'&weierp;' => '&#8472;',
    2275. 

  2275. 		'&real;' => '&#8476;',
    2276. 

  2276. 		'&trade;' => '&#8482;',
    2277. 

  2277. 		'&alefsym;' => '&#8501;',
    2278. 

  2278. 		'&crarr;' => '&#8629;',
    2279. 

  2279. 		'&lArr;' => '&#8656;',
    2280. 

  2280. 		'&uArr;' => '&#8657;',
    2281. 

  2281. 		'&rArr;' => '&#8658;',
    2282. 

  2282. 		'&dArr;' => '&#8659;',
    2283. 

  2283. 		'&hArr;' => '&#8660;',
    2284. 

  2284. 		'&forall;' => '&#8704;',
    2285. 

  2285. 		'&part;' => '&#8706;',
    2286. 

  2286. 		'&exist;' => '&#8707;',
    2287. 

  2287. 		'&empty;' => '&#8709;',
    2288. 

  2288. 		'&nabla;' => '&#8711;',
    2289. 

  2289. 		'&isin;' => '&#8712;',
    2290. 

  2290. 		'&notin;' => '&#8713;',
    2291. 

  2291. 		'&ni;' => '&#8715;',
    2292. 

  2292. 		'&prod;' => '&#8719;',
    2293. 

  2293. 		'&sum;' => '&#8721;',
    2294. 

  2294. 		'&minus;' => '&#8722;',
    2295. 

  2295. 		'&lowast;' => '&#8727;',
    2296. 

  2296. 		'&radic;' => '&#8730;',
    2297. 

  2297. 		'&prop;' => '&#8733;',
    2298. 

  2298. 		'&infin;' => '&#8734;',
    2299. 

  2299. 		'&ang;' => '&#8736;',
    2300. 

  2300. 		'&and;' => '&#8743;',
    2301. 

  2301. 		'&or;' => '&#8744;',
    2302. 

  2302. 		'&cap;' => '&#8745;',
    2303. 

  2303. 		'&cup;' => '&#8746;',
    2304. 

  2304. 		'&int;' => '&#8747;',
    2305. 

  2305. 		'&there4;' => '&#8756;',
    2306. 

  2306. 		'&sim;' => '&#8764;',
    2307. 

  2307. 		'&cong;' => '&#8773;',
    2308. 

  2308. 		'&asymp;' => '&#8776;',
    2309. 

  2309. 		'&ne;' => '&#8800;',
    2310. 

  2310. 		'&equiv;' => '&#8801;',
    2311. 

  2311. 		'&le;' => '&#8804;',
    2312. 

  2312. 		'&ge;' => '&#8805;',
    2313. 

  2313. 		'&sub;' => '&#8834;',
    2314. 

  2314. 		'&sup;' => '&#8835;',
    2315. 

  2315. 		'&nsub;' => '&#8836;',
    2316. 

  2316. 		'&sube;' => '&#8838;',
    2317. 

  2317. 		'&supe;' => '&#8839;',
    2318. 

  2318. 		'&oplus;' => '&#8853;',
    2319. 

  2319. 		'&otimes;' => '&#8855;',
    2320. 

  2320. 		'&perp;' => '&#8869;',
    2321. 

  2321. 		'&sdot;' => '&#8901;',
    2322. 

  2322. 		'&lceil;' => '&#8968;',
    2323. 

  2323. 		'&rceil;' => '&#8969;',
    2324. 

  2324. 		'&lfloor;' => '&#8970;',
    2325. 

  2325. 		'&rfloor;' => '&#8971;',
    2326. 

  2326. 		'&lang;' => '&#9001;',
    2327. 

  2327. 		'&rang;' => '&#9002;',
    2328. 

  2328. 		'&larr;' => '&#8592;',
    2329. 

  2329. 		'&uarr;' => '&#8593;',
    2330. 

  2330. 		'&rarr;' => '&#8594;',
    2331. 

  2331. 		'&darr;' => '&#8595;',
    2332. 

  2332. 		'&harr;' => '&#8596;',
    2333. 

  2333. 		'&loz;' => '&#9674;',
    2334. 

  2334. 		'&spades;' => '&#9824;',
    2335. 

  2335. 		'&clubs;' => '&#9827;',
    2336. 

  2336. 		'&hearts;' => '&#9829;',
    2337. 

  2337. 		'&diams;' => '&#9830;'
    2338. 

  2338. 	);
    2339. 

  2339. 

  2340. 	return str_replace( array_keys($to_ncr), array_values($to_ncr), $text );
    2341. 

  2341. }
    2342. 

  2342. 

  2343. /**
    2344. 

  2344.  * Formats text for the rich text editor.
    2345. 

  2345.  *
    2346. 

  2346.  * The filter 'richedit_pre' is applied here. If $text is empty the filter will
    2347. 

  2347.  * be applied to an empty string.
    2348. 

  2348.  *
    2349. 

  2349.  * @since 2.0.0
    2350. 

  2350.  *
    2351. 

  2351.  * @param string $text The text to be formatted.
    2352. 

  2352.  * @return string The formatted text after filter is applied.
    2353. 

  2353.  */
    2354. 

  2354. function wp_richedit_pre($text) {
    2355. 

  2355. 	// Filtering a blank results in an annoying <br />\n
    2356. 

  2356. 	if ( empty($text) ) return apply_filters('richedit_pre', '');
    2357. 

  2357. 

  2358. 	$output = convert_chars($text);
    2359. 

  2359. 	$output = wpautop($output);
    2360. 

  2360. 	$output = htmlspecialchars($output, ENT_NOQUOTES);
    2361. 

  2361. 

  2362. 	return apply_filters('richedit_pre', $output);
    2363. 

  2363. }
    2364. 

  2364. 

  2365. /**
    2366. 

  2366.  * Formats text for the HTML editor.
    2367. 

  2367.  *
    2368. 

  2368.  * Unless $output is empty it will pass through htmlspecialchars before the
    2369. 

  2369.  * 'htmledit_pre' filter is applied.
    2370. 

  2370.  *
    2371. 

  2371.  * @since 2.5.0
    2372. 

  2372.  *
    2373. 

  2373.  * @param string $output The text to be formatted.
    2374. 

  2374.  * @return string Formatted text after filter applied.
    2375. 

  2375.  */
    2376. 

  2376. function wp_htmledit_pre($output) {
    2377. 

  2377. 	if ( !empty($output) )
    2378. 

  2378. 		$output = htmlspecialchars($output, ENT_NOQUOTES); // convert only < > &
    2379. 

  2379. 

  2380. 	return apply_filters('htmledit_pre', $output);
    2381. 

  2381. }
    2382. 

  2382. 

  2383. /**
    2384. 

  2384.  * Perform a deep string replace operation to ensure the values in $search are no longer present
    2385. 

  2385.  *
    2386. 

  2386.  * Repeats the replacement operation until it no longer replaces anything so as to remove "nested" values
    2387. 

  2387.  * e.g. $subject = '%0%0%0DDD', $search ='%0D', $result ='' rather than the '%0%0DD' that
    2388. 

  2388.  * str_replace would return
    2389. 

  2389.  *
    2390. 

  2390.  * @since 2.8.1
    2391. 

  2391.  * @access private
    2392. 

  2392.  *
    2393. 

  2393.  * @param string|array $search
    2394. 

  2394.  * @param string $subject
    2395. 

  2395.  * @return string The processed string
    2396. 

  2396.  */
    2397. 

  2397. function _deep_replace( $search, $subject ) {
    2398. 

  2398. 	$found = true;
    2399. 

  2399. 	$subject = (string) $subject;
    2400. 

  2400. 	while ( $found ) {
    2401. 

  2401. 		$found = false;
    2402. 

  2402. 		foreach ( (array) $search as $val ) {
    2403. 

  2403. 			while ( strpos( $subject, $val ) !== false ) {
    2404. 

  2404. 				$found = true;
    2405. 

  2405. 				$subject = str_replace( $val, '', $subject );
    2406. 

  2406. 			}
    2407. 

  2407. 		}
    2408. 

  2408. 	}
    2409. 

  2409. 

  2410. 	return $subject;
    2411. 

  2411. }
    2412. 

  2412. 

  2413. /**
    2414. 

  2414.  * Escapes data for use in a MySQL query
    2415. 

  2415.  *
    2416. 

  2416.  * This is just a handy shortcut for $wpdb->escape(), for completeness' sake
    2417. 

  2417.  *
    2418. 

  2418.  * @since 2.8.0
    2419. 

  2419.  * @param string $sql Unescaped SQL data
    2420. 

  2420.  * @return string The cleaned $sql
    2421. 

  2421.  */
    2422. 

  2422. function esc_sql( $sql ) {
    2423. 

  2423. 	global $wpdb;
    2424. 

  2424. 	return $wpdb->escape( $sql );
    2425. 

  2425. }
    2426. 

  2426. 

  2427. /**
    2428. 

  2428.  * Checks and cleans a URL.
    2429. 

  2429.  *
    2430. 

  2430.  * A number of characters are removed from the URL. If the URL is for displaying
    2431. 

  2431.  * (the default behaviour) ampersands are also replaced. The 'clean_url' filter
    2432. 

  2432.  * is applied to the returned cleaned URL.
    2433. 

  2433.  *
    2434. 

  2434.  * @since 2.8.0
    2435. 

  2435.  * @uses wp_kses_bad_protocol() To only permit protocols in the URL set
    2436. 

  2436.  *		via $protocols or the common ones set in the function.
    2437. 

  2437.  *
    2438. 

  2438.  * @param string $url The URL to be cleaned.
    2439. 

  2439.  * @param array $protocols Optional. An array of acceptable protocols.
    2440. 

  2440.  *		Defaults to 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'svn' if not set.
    2441. 

  2441.  * @param string $_context Private. Use esc_url_raw() for database usage.
    2442. 

  2442.  * @return string The cleaned $url after the 'clean_url' filter is applied.
    2443. 

  2443.  */
    2444. 

  2444. function esc_url( $url, $protocols = null, $_context = 'display' ) {
    2445. 

  2445. 	$original_url = $url;
    2446. 

  2446. 

  2447. 	if ( '' == $url )
    2448. 

  2448. 		return $url;
    2449. 

  2449. 	$url = preg_replace('|[^a-z0-9-~+_.?#=!&;,/:%@$\|*\'()\\x80-\\xff]|i', '', $url);
    2450. 

  2450. 	$strip = array('%0d', '%0a', '%0D', '%0A');
    2451. 

  2451. 	$url = _deep_replace($strip, $url);
    2452. 

  2452. 	$url = str_replace(';//', '://', $url);
    2453. 

  2453. 	/* If the URL doesn't appear to contain a scheme, we
    2454. 

  2454. 	 * presume it needs http:// appended (unless a relative
    2455. 

  2455. 	 * link starting with /, # or ? or a php file).
    2456. 

  2456. 	 */
    2457. 

  2457. 	if ( strpos($url, ':') === false && ! in_array( $url[0], array( '/', '#', '?' ) ) &&
    2458. 

  2458. 		! preg_match('/^[a-z0-9-]+?\.php/i', $url) )
    2459. 

  2459. 		$url = 'http://' . $url;
    2460. 

  2460. 

  2461. 	// Replace ampersands and single quotes only when displaying.
    2462. 

  2462. 	if ( 'display' == $_context ) {
    2463. 

  2463. 		$url = wp_kses_normalize_entities( $url );
    2464. 

  2464. 		$url = str_replace( '&amp;', '&#038;', $url );
    2465. 

  2465. 		$url = str_replace( "'", '&#039;', $url );
    2466. 

  2466. 	}
    2467. 

  2467. 

  2468. 	if ( ! is_array( $protocols ) )
    2469. 

  2469. 		$protocols = wp_allowed_protocols();
    2470. 

  2470. 	if ( wp_kses_bad_protocol( $url, $protocols ) != $url )
    2471. 

  2471. 		return '';
    2472. 

  2472. 

  2473. 	return apply_filters('clean_url', $url, $original_url, $_context);
    2474. 

  2474. }
    2475. 

  2475. 

  2476. /**
    2477. 

  2477.  * Performs esc_url() for database usage.
    2478. 

  2478.  *
    2479. 

  2479.  * @since 2.8.0
    2480. 

  2480.  * @uses esc_url()
    2481. 

  2481.  *
    2482. 

  2482.  * @param string $url The URL to be cleaned.
    2483. 

  2483.  * @param array $protocols An array of acceptable protocols.
    2484. 

  2484.  * @return string The cleaned URL.
    2485. 

  2485.  */
    2486. 

  2486. function esc_url_raw( $url, $protocols = null ) {
    2487. 

  2487. 	return esc_url( $url, $protocols, 'db' );
    2488. 

  2488. }
    2489. 

  2489. 

  2490. /**
    2491. 

  2491.  * Convert entities, while preserving already-encoded entities.
    2492. 

  2492.  *
    2493. 

  2493.  * @link http://www.php.net/htmlentities Borrowed from the PHP Manual user notes.
    2494. 

  2494.  *
    2495. 

  2495.  * @since 1.2.2
    2496. 

  2496.  *
    2497. 

  2497.  * @param string $myHTML The text to be converted.
    2498. 

  2498.  * @return string Converted text.
    2499. 

  2499.  */
    2500. 

  2500. function htmlentities2($myHTML) {
    2501. 

  2501. 	$translation_table = get_html_translation_table( HTML_ENTITIES, ENT_QUOTES );
    2502. 

  2502. 	$translation_table[chr(38)] = '&';
    2503. 

  2503. 	return preg_replace( "/&(?![A-Za-z]{0,4}\w{2,3};|#[0-9]{2,3};)/", "&amp;", strtr($myHTML, $translation_table) );
    2504. 

  2504. }
    2505. 

  2505. 

  2506. /**
    2507. 

  2507.  * Escape single quotes, htmlspecialchar " < > &, and fix line endings.
    2508. 

  2508.  *
    2509. 

  2509.  * Escapes text strings for echoing in JS. It is intended to be used for inline JS
    2510. 

  2510.  * (in a tag attribute, for example onclick="..."). Note that the strings have to
    2511. 

  2511.  * be in single quotes. The filter 'js_escape' is also applied here.
    2512. 

  2512.  *
    2513. 

  2513.  * @since 2.8.0
    2514. 

  2514.  *
    2515. 

  2515.  * @param string $text The text to be escaped.
    2516. 

  2516.  * @return string Escaped text.
    2517. 

  2517.  */
    2518. 

  2518. function esc_js( $text ) {
    2519. 

  2519. 	$safe_text = wp_check_invalid_utf8( $text );
    2520. 

  2520. 	$safe_text = _wp_specialchars( $safe_text, ENT_COMPAT );
    2521. 

  2521. 	$safe_text = preg_replace( '/&#(x)?0*(?(1)27|39);?/i', "'", stripslashes( $safe_text ) );
    2522. 

  2522. 	$safe_text = str_replace( "\r", '', $safe_text );
    2523. 

  2523. 	$safe_text = str_replace( "\n", '\\n', addslashes( $safe_text ) );
    2524. 

  2524. 	return apply_filters( 'js_escape', $safe_text, $text );
    2525. 

  2525. }
    2526. 

  2526. 

  2527. /**
    2528. 

  2528.  * Escaping for HTML blocks.
    2529. 

  2529.  *
    2530. 

  2530.  * @since 2.8.0
    2531. 

  2531.  *
    2532. 

  2532.  * @param string $text
    2533. 

  2533.  * @return string
    2534. 

  2534.  */
    2535. 

  2535. function esc_html( $text ) {
    2536. 

  2536. 	$safe_text = wp_check_invalid_utf8( $text );
    2537. 

  2537. 	$safe_text = _wp_specialchars( $safe_text, ENT_QUOTES );
    2538. 

  2538. 	return apply_filters( 'esc_html', $safe_text, $text );
    2539. 

  2539. }
    2540. 

  2540. 

  2541. /**
    2542. 

  2542.  * Escaping for HTML attributes.
    2543. 

  2543.  *
    2544. 

  2544.  * @since 2.8.0
    2545. 

  2545.  *
    2546. 

  2546.  * @param string $text
    2547. 

  2547.  * @return string
    2548. 

  2548.  */
    2549. 

  2549. function esc_attr( $text ) {
    2550. 

  2550. 	$safe_text = wp_check_invalid_utf8( $text );
    2551. 

  2551. 	$safe_text = _wp_specialchars( $safe_text, ENT_QUOTES );
    2552. 

  2552. 	return apply_filters( 'attribute_escape', $safe_text, $text );
    2553. 

  2553. }
    2554. 

  2554. 

  2555. /**
    2556. 

  2556.  * Escaping for textarea values.
    2557. 

  2557.  *
    2558. 

  2558.  * @since 3.1
    2559. 

  2559.  *
    2560. 

  2560.  * @param string $text
    2561. 

  2561.  * @return string
    2562. 

  2562.  */
    2563. 

  2563. function esc_textarea( $text ) {
    2564. 

  2564. 	$safe_text = htmlspecialchars( $text, ENT_QUOTES );
    2565. 

  2565. 	return apply_filters( 'esc_textarea', $safe_text, $text );
    2566. 

  2566. }
    2567. 

  2567. 

  2568. /**
    2569. 

  2569.  * Escape a HTML tag name.
    2570. 

  2570.  *
    2571. 

  2571.  * @since 2.5.0
    2572. 

  2572.  *
    2573. 

  2573.  * @param string $tag_name
    2574. 

  2574.  * @return string
    2575. 

  2575.  */
    2576. 

  2576. function tag_escape($tag_name) {
    2577. 

  2577. 	$safe_tag = strtolower( preg_replace('/[^a-zA-Z0-9_:]/', '', $tag_name) );
    2578. 

  2578. 	return apply_filters('tag_escape', $safe_tag, $tag_name);
    2579. 

  2579. }
    2580. 

  2580. 

  2581. /**
    2582. 

  2582.  * Escapes text for SQL LIKE special characters % and _.
    2583. 

  2583.  *
    2584. 

  2584.  * @since 2.5.0
    2585. 

  2585.  *
    2586. 

  2586.  * @param string $text The text to be escaped.
    2587. 

  2587.  * @return string text, safe for inclusion in LIKE query.
    2588. 

  2588.  */
    2589. 

  2589. function like_escape($text) {
    2590. 

  2590. 	return str_replace(array("%", "_"), array("\\%", "\\_"), $text);
    2591. 

  2591. }
    2592. 

  2592. 

  2593. /**
    2594. 

  2594.  * Convert full URL paths to absolute paths.
    2595. 

  2595.  *
    2596. 

  2596.  * Removes the http or https protocols and the domain. Keeps the path '/' at the
    2597. 

  2597.  * beginning, so it isn't a true relative link, but from the web root base.
    2598. 

  2598.  *
    2599. 

  2599.  * @since 2.1.0
    2600. 

  2600.  *
    2601. 

  2601.  * @param string $link Full URL path.
    2602. 

  2602.  * @return string Absolute path.
    2603. 

  2603.  */
    2604. 

  2604. function wp_make_link_relative( $link ) {
    2605. 

  2605. 	return preg_replace( '|https?://[^/]+(/.*)|i', '$1', $link );
    2606. 

  2606. }
    2607. 

  2607. 

  2608. /**
    2609. 

  2609.  * Sanitises various option values based on the nature of the option.
    2610. 

  2610.  *
    2611. 

  2611.  * This is basically a switch statement which will pass $value through a number
    2612. 

  2612.  * of functions depending on the $option.
    2613. 

  2613.  *
    2614. 

  2614.  * @since 2.0.5
    2615. 

  2615.  *
    2616. 

  2616.  * @param string $option The name of the option.
    2617. 

  2617.  * @param string $value The unsanitised value.
    2618. 

  2618.  * @return string Sanitized value.
    2619. 

  2619.  */
    2620. 

  2620. function sanitize_option($option, $value) {
    2621. 

  2621. 

  2622. 	switch ( $option ) {
    2623. 

  2623. 		case 'admin_email' :
    2624. 

  2624. 		case 'new_admin_email' :
    2625. 

  2625. 			$value = sanitize_email( $value );
    2626. 

  2626. 			if ( ! is_email( $value ) ) {
    2627. 

  2627. 				$value = get_option( $option ); // Resets option to stored value in the case of failed sanitization
    2628. 

  2628. 				if ( function_exists( 'add_settings_error' ) )
    2629. 

  2629. 					add_settings_error( $option, 'invalid_admin_email', __( 'The email address entered did not appear to be a valid email address. Please enter a valid email address.' ) );
    2630. 

  2630. 			}
    2631. 

  2631. 			break;
    2632. 

  2632. 

  2633. 		case 'thumbnail_size_w':
    2634. 

  2634. 		case 'thumbnail_size_h':
    2635. 

  2635. 		case 'medium_size_w':
    2636. 

  2636. 		case 'medium_size_h':
    2637. 

  2637. 		case 'large_size_w':
    2638. 

  2638. 		case 'large_size_h':
    2639. 

  2639. 		case 'embed_size_h':
    2640. 

  2640. 		case 'default_post_edit_rows':
    2641. 

  2641. 		case 'mailserver_port':
    2642. 

  2642. 		case 'comment_max_links':
    2643. 

  2643. 		case 'page_on_front':
    2644. 

  2644. 		case 'page_for_posts':
    2645. 

  2645. 		case 'rss_excerpt_length':
    2646. 

  2646. 		case 'default_category':
    2647. 

  2647. 		case 'default_email_category':
    2648. 

  2648. 		case 'default_link_category':
    2649. 

  2649. 		case 'close_comments_days_old':
    2650. 

  2650. 		case 'comments_per_page':
    2651. 

  2651. 		case 'thread_comments_depth':
    2652. 

  2652. 		case 'users_can_register':
    2653. 

  2653. 		case 'start_of_week':
    2654. 

  2654. 			$value = absint( $value );
    2655. 

  2655. 			break;
    2656. 

  2656. 

  2657. 		case 'embed_size_w':
    2658. 

  2658. 			if ( '' !== $value )
    2659. 

  2659. 				$value = absint( $value );
    2660. 

  2660. 			break;
    2661. 

  2661. 

  2662. 		case 'posts_per_page':
    2663. 

  2663. 		case 'posts_per_rss':
    2664. 

  2664. 			$value = (int) $value;
    2665. 

  2665. 			if ( empty($value) )
    2666. 

  2666. 				$value = 1;
    2667. 

  2667. 			if ( $value < -1 )
    2668. 

  2668. 				$value = abs($value);
    2669. 

  2669. 			break;
    2670. 

  2670. 

  2671. 		case 'default_ping_status':
    2672. 

  2672. 		case 'default_comment_status':
    2673. 

  2673. 			// Options that if not there have 0 value but need to be something like "closed"
    2674. 

  2674. 			if ( $value == '0' || $value == '')
    2675. 

  2675. 				$value = 'closed';
    2676. 

  2676. 			break;
    2677. 

  2677. 

  2678. 		case 'blogdescription':
    2679. 

  2679. 		case 'blogname':
    2680. 

  2680. 			$value = addslashes($value);
    2681. 

  2681. 			$value = wp_filter_post_kses( $value ); // calls stripslashes then addslashes
    2682. 

  2682. 			$value = stripslashes($value);
    2683. 

  2683. 			$value = esc_html( $value );
    2684. 

  2684. 			break;
    2685. 

  2685. 

  2686. 		case 'blog_charset':
    2687. 

  2687. 			$value = preg_replace('/[^a-zA-Z0-9_-]/', '', $value); // strips slashes
    2688. 

  2688. 			break;
    2689. 

  2689. 

  2690. 		case 'date_format':
    2691. 

  2691. 		case 'time_format':
    2692. 

  2692. 		case 'mailserver_url':
    2693. 

  2693. 		case 'mailserver_login':
    2694. 

  2694. 		case 'mailserver_pass':
    2695. 

  2695. 		case 'ping_sites':
    2696. 

  2696. 		case 'upload_path':
    2697. 

  2697. 			$value = strip_tags($value);
    2698. 

  2698. 			$value = addslashes($value);
    2699. 

  2699. 			$value = wp_filter_kses($value); // calls stripslashes then addslashes
    2700. 

  2700. 			$value = stripslashes($value);
    2701. 

  2701. 			break;
    2702. 

  2702. 

  2703. 		case 'gmt_offset':
    2704. 

  2704. 			$value = preg_replace('/[^0-9:.-]/', '', $value); // strips slashes
    2705. 

  2705. 			break;
    2706. 

  2706. 

  2707. 		case 'siteurl':
    2708. 

  2708. 			if ( (bool)preg_match( '#http(s?)://(.+)#i', $value) ) {
    2709. 

  2709. 				$value = esc_url_raw($value);
    2710. 

  2710. 			} else {
    2711. 

  2711. 				$value = get_option( $option ); // Resets option to stored value in the case of failed sanitization
    2712. 

  2712. 				if ( function_exists('add_settings_error') )
    2713. 

  2713. 					add_settings_error('siteurl', 'invalid_siteurl', __('The WordPress address you entered did not appear to be a valid URL. Please enter a valid URL.'));
    2714. 

  2714. 			}
    2715. 

  2715. 			break;
    2716. 

  2716. 

  2717. 		case 'home':
    2718. 

  2718. 			if ( (bool)preg_match( '#http(s?)://(.+)#i', $value) ) {
    2719. 

  2719. 				$value = esc_url_raw($value);
    2720. 

  2720. 			} else {
    2721. 

  2721. 				$value = get_option( $option ); // Resets option to stored value in the case of failed sanitization
    2722. 

  2722. 				if ( function_exists('add_settings_error') )
    2723. 

  2723. 					add_settings_error('home', 'invalid_home', __('The Site address you entered did not appear to be a valid URL. Please enter a valid URL.'));
    2724. 

  2724. 			}
    2725. 

  2725. 			break;
    2726. 

  2726. 

  2727. 		case 'WPLANG':
    2728. 

  2728. 			$allowed = get_available_languages();
    2729. 

  2729. 			if ( ! in_array( $value, $allowed ) && ! empty( $value ) )
    2730. 

  2730. 				$value = get_option( $option );
    2731. 

  2731. 			break;
    2732. 

  2732. 

  2733. 		case 'timezone_string':
    2734. 

  2734. 			$allowed_zones = timezone_identifiers_list();
    2735. 

  2735. 			if ( ! in_array( $value, $allowed_zones ) && ! empty( $value ) ) {
    2736. 

  2736. 				$value = get_option( $option ); // Resets option to stored value in the case of failed sanitization
    2737. 

  2737. 				if ( function_exists('add_settings_error') )
    2738. 

  2738. 					add_settings_error('timezone_string', 'invalid_timezone_string', __('The timezone you have entered is not valid. Please select a valid timezone.') );
    2739. 

  2739. 			}
    2740. 

  2740. 			break;
    2741. 

  2741. 

  2742. 		case 'permalink_structure':
    2743. 

  2743. 		case 'category_base':
    2744. 

  2744. 		case 'tag_base':
    2745. 

  2745. 			$value = esc_url_raw( $value );
    2746. 

  2746. 			$value = str_replace( 'http://', '', $value );
    2747. 

  2747. 			break;
    2748. 

  2748. 	}
    2749. 

  2749. 

  2750. 	$value = apply_filters("sanitize_option_{$option}", $value, $option);
    2751. 

  2751. 

  2752. 	return $value;
    2753. 

  2753. }
    2754. 

  2754. 

  2755. /**
    2756. 

  2756.  * Parses a string into variables to be stored in an array.
    2757. 

  2757.  *
    2758. 

  2758.  * Uses {@link http://www.php.net/parse_str parse_str()} and stripslashes if
    2759. 

  2759.  * {@link http://www.php.net/magic_quotes magic_quotes_gpc} is on.
    2760. 

  2760.  *
    2761. 

  2761.  * @since 2.2.1
    2762. 

  2762.  * @uses apply_filters() for the 'wp_parse_str' filter.
    2763. 

  2763.  *
    2764. 

  2764.  * @param string $string The string to be parsed.
    2765. 

  2765.  * @param array $array Variables will be stored in this array.
    2766. 

  2766.  */
    2767. 

  2767. function wp_parse_str( $string, &$array ) {
    2768. 

  2768. 	parse_str( $string, $array );
    2769. 

  2769. 	if ( get_magic_quotes_gpc() )
    2770. 

  2770. 		$array = stripslashes_deep( $array );
    2771. 

  2771. 	$array = apply_filters( 'wp_parse_str', $array );
    2772. 

  2772. }
    2773. 

  2773. 

  2774. /**
    2775. 

  2775.  * Convert lone less than signs.
    2776. 

  2776.  *
    2777. 

  2777.  * KSES already converts lone greater than signs.
    2778. 

  2778.  *
    2779. 

  2779.  * @uses wp_pre_kses_less_than_callback in the callback function.
    2780. 

  2780.  * @since 2.3.0
    2781. 

  2781.  *
    2782. 

  2782.  * @param string $text Text to be converted.
    2783. 

  2783.  * @return string Converted text.
    2784. 

  2784.  */
    2785. 

  2785. function wp_pre_kses_less_than( $text ) {
    2786. 

  2786. 	return preg_replace_callback('%<[^>]*?((?=<)|>|$)%', 'wp_pre_kses_less_than_callback', $text);
    2787. 

  2787. }
    2788. 

  2788. 

  2789. /**
    2790. 

  2790.  * Callback function used by preg_replace.
    2791. 

  2791.  *
    2792. 

  2792.  * @uses esc_html to format the $matches text.
    2793. 

  2793.  * @since 2.3.0
    2794. 

  2794.  *
    2795. 

  2795.  * @param array $matches Populated by matches to preg_replace.
    2796. 

  2796.  * @return string The text returned after esc_html if needed.
    2797. 

  2797.  */
    2798. 

  2798. function wp_pre_kses_less_than_callback( $matches ) {
    2799. 

  2799. 	if ( false === strpos($matches[0], '>') )
    2800. 

  2800. 		return esc_html($matches[0]);
    2801. 

  2801. 	return $matches[0];
    2802. 

  2802. }
    2803. 

  2803. 

  2804. /**
    2805. 

  2805.  * WordPress implementation of PHP sprintf() with filters.
    2806. 

  2806.  *
    2807. 

  2807.  * @since 2.5.0
    2808. 

  2808.  * @link http://www.php.net/sprintf
    2809. 

  2809.  *
    2810. 

  2810.  * @param string $pattern The string which formatted args are inserted.
    2811. 

  2811.  * @param mixed $args,... Arguments to be formatted into the $pattern string.
    2812. 

  2812.  * @return string The formatted string.
    2813. 

  2813.  */
    2814. 

  2814. function wp_sprintf( $pattern ) {
    2815. 

  2815. 	$args = func_get_args( );
    2816. 

  2816. 	$len = strlen($pattern);
    2817. 

  2817. 	$start = 0;
    2818. 

  2818. 	$result = '';
    2819. 

  2819. 	$arg_index = 0;
    2820. 

  2820. 	while ( $len > $start ) {
    2821. 

  2821. 		// Last character: append and break
    2822. 

  2822. 		if ( strlen($pattern) - 1 == $start ) {
    2823. 

  2823. 			$result .= substr($pattern, -1);
    2824. 

  2824. 			break;
    2825. 

  2825. 		}
    2826. 

  2826. 

  2827. 		// Literal %: append and continue
    2828. 

  2828. 		if ( substr($pattern, $start, 2) == '%%' ) {
    2829. 

  2829. 			$start += 2;
    2830. 

  2830. 			$result .= '%';
    2831. 

  2831. 			continue;
    2832. 

  2832. 		}
    2833. 

  2833. 

  2834. 		// Get fragment before next %
    2835. 

  2835. 		$end = strpos($pattern, '%', $start + 1);
    2836. 

  2836. 		if ( false === $end )
    2837. 

  2837. 			$end = $len;
    2838. 

  2838. 		$fragment = substr($pattern, $start, $end - $start);
    2839. 

  2839. 

  2840. 		// Fragment has a specifier
    2841. 

  2841. 		if ( $pattern[$start] == '%' ) {
    2842. 

  2842. 			// Find numbered arguments or take the next one in order
    2843. 

  2843. 			if ( preg_match('/^%(\d+)\$/', $fragment, $matches) ) {
    2844. 

  2844. 				$arg = isset($args[$matches[1]]) ? $args[$matches[1]] : '';
    2845. 

  2845. 				$fragment = str_replace("%{$matches[1]}$", '%', $fragment);
    2846. 

  2846. 			} else {
    2847. 

  2847. 				++$arg_index;
    2848. 

  2848. 				$arg = isset($args[$arg_index]) ? $args[$arg_index] : '';
    2849. 

  2849. 			}
    2850. 

  2850. 

  2851. 			// Apply filters OR sprintf
    2852. 

  2852. 			$_fragment = apply_filters( 'wp_sprintf', $fragment, $arg );
    2853. 

  2853. 			if ( $_fragment != $fragment )
    2854. 

  2854. 				$fragment = $_fragment;
    2855. 

  2855. 			else
    2856. 

  2856. 				$fragment = sprintf($fragment, strval($arg) );
    2857. 

  2857. 		}
    2858. 

  2858. 

  2859. 		// Append to result and move to next fragment
    2860. 

  2860. 		$result .= $fragment;
    2861. 

  2861. 		$start = $end;
    2862. 

  2862. 	}
    2863. 

  2863. 	return $result;
    2864. 

  2864. }
    2865. 

  2865. 

  2866. /**
    2867. 

  2867.  * Localize list items before the rest of the content.
    2868. 

  2868.  *
    2869. 

  2869.  * The '%l' must be at the first characters can then contain the rest of the
    2870. 

  2870.  * content. The list items will have ', ', ', and', and ' and ' added depending
    2871. 

  2871.  * on the amount of list items in the $args parameter.
    2872. 

  2872.  *
    2873. 

  2873.  * @since 2.5.0
    2874. 

  2874.  *
    2875. 

  2875.  * @param string $pattern Content containing '%l' at the beginning.
    2876. 

  2876.  * @param array $args List items to prepend to the content and replace '%l'.
    2877. 

  2877.  * @return string Localized list items and rest of the content.
    2878. 

  2878.  */
    2879. 

  2879. function wp_sprintf_l($pattern, $args) {
    2880. 

  2880. 	// Not a match
    2881. 

  2881. 	if ( substr($pattern, 0, 2) != '%l' )
    2882. 

  2882. 		return $pattern;
    2883. 

  2883. 

  2884. 	// Nothing to work with
    2885. 

  2885. 	if ( empty($args) )
    2886. 

  2886. 		return '';
    2887. 

  2887. 

  2888. 	// Translate and filter the delimiter set (avoid ampersands and entities here)
    2889. 

  2889. 	$l = apply_filters('wp_sprintf_l', array(
    2890. 

  2890. 		/* translators: used between list items, there is a space after the comma */
    2891. 

  2891. 		'between'          => __(', '),
    2892. 

  2892. 		/* translators: used between list items, there is a space after the and */
    2893. 

  2893. 		'between_last_two' => __(', and '),
    2894. 

  2894. 		/* translators: used between only two list items, there is a space after the and */
    2895. 

  2895. 		'between_only_two' => __(' and '),
    2896. 

  2896. 		));
    2897. 

  2897. 

  2898. 	$args = (array) $args;
    2899. 

  2899. 	$result = array_shift($args);
    2900. 

  2900. 	if ( count($args) == 1 )
    2901. 

  2901. 		$result .= $l['between_only_two'] . array_shift($args);
    2902. 

  2902. 	// Loop when more than two args
    2903. 

  2903. 	$i = count($args);
    2904. 

  2904. 	while ( $i ) {
    2905. 

  2905. 		$arg = array_shift($args);
    2906. 

  2906. 		$i--;
    2907. 

  2907. 		if ( 0 == $i )
    2908. 

  2908. 			$result .= $l['between_last_two'] . $arg;
    2909. 

  2909. 		else
    2910. 

  2910. 			$result .= $l['between'] . $arg;
    2911. 

  2911. 	}
    2912. 

  2912. 	return $result . substr($pattern, 2);
    2913. 

  2913. }
    2914. 

  2914. 

  2915. /**
    2916. 

  2916.  * Safely extracts not more than the first $count characters from html string.
    2917. 

  2917.  *
    2918. 

  2918.  * UTF-8, tags and entities safe prefix extraction. Entities inside will *NOT*
    2919. 

  2919.  * be counted as one character. For example &amp; will be counted as 4, &lt; as
    2920. 

  2920.  * 3, etc.
    2921. 

  2921.  *
    2922. 

  2922.  * @since 2.5.0
    2923. 

  2923.  *
    2924. 

  2924.  * @param integer $str String to get the excerpt from.
    2925. 

  2925.  * @param integer $count Maximum number of characters to take.
    2926. 

  2926.  * @return string The excerpt.
    2927. 

  2927.  */
    2928. 

  2928. function wp_html_excerpt( $str, $count ) {
    2929. 

  2929. 	$str = wp_strip_all_tags( $str, true );
    2930. 

  2930. 	$str = mb_substr( $str, 0, $count );
    2931. 

  2931. 	// remove part of an entity at the end
    2932. 

  2932. 	$str = preg_replace( '/&[^;\s]{0,6}$/', '', $str );
    2933. 

  2933. 	return $str;
    2934. 

  2934. }
    2935. 

  2935. 

  2936. /**
    2937. 

  2937.  * Add a Base url to relative links in passed content.
    2938. 

  2938.  *
    2939. 

  2939.  * By default it supports the 'src' and 'href' attributes. However this can be
    2940. 

  2940.  * changed via the 3rd param.
    2941. 

  2941.  *
    2942. 

  2942.  * @since 2.7.0
    2943. 

  2943.  *
    2944. 

  2944.  * @param string $content String to search for links in.
    2945. 

  2945.  * @param string $base The base URL to prefix to links.
    2946. 

  2946.  * @param array $attrs The attributes which should be processed.
    2947. 

  2947.  * @return string The processed content.
    2948. 

  2948.  */
    2949. 

  2949. function links_add_base_url( $content, $base, $attrs = array('src', 'href') ) {
    2950. 

  2950. 	global $_links_add_base;
    2951. 

  2951. 	$_links_add_base = $base;
    2952. 

  2952. 	$attrs = implode('|', (array)$attrs);
    2953. 

  2953. 	return preg_replace_callback( "!($attrs)=(['\"])(.+?)\\2!i", '_links_add_base', $content );
    2954. 

  2954. }
    2955. 

  2955. 

  2956. /**
    2957. 

  2957.  * Callback to add a base url to relative links in passed content.
    2958. 

  2958.  *
    2959. 

  2959.  * @since 2.7.0
    2960. 

  2960.  * @access private
    2961. 

  2961.  *
    2962. 

  2962.  * @param string $m The matched link.
    2963. 

  2963.  * @return string The processed link.
    2964. 

  2964.  */
    2965. 

  2965. function _links_add_base($m) {
    2966. 

  2966. 	global $_links_add_base;
    2967. 

  2967. 	//1 = attribute name  2 = quotation mark  3 = URL
    2968. 

  2968. 	return $m[1] . '=' . $m[2] .
    2969. 

  2969. 		(strpos($m[3], 'http://') === false ?
    2970. 

  2970. 			path_join($_links_add_base, $m[3]) :
    2971. 

  2971. 			$m[3])
    2972. 

  2972. 		. $m[2];
    2973. 

  2973. }
    2974. 

  2974. 

  2975. /**
    2976. 

  2976.  * Adds a Target attribute to all links in passed content.
    2977. 

  2977.  *
    2978. 

  2978.  * This function by default only applies to <a> tags, however this can be
    2979. 

  2979.  * modified by the 3rd param.
    2980. 

  2980.  *
    2981. 

  2981.  * <b>NOTE:</b> Any current target attributed will be stripped and replaced.
    2982. 

  2982.  *
    2983. 

  2983.  * @since 2.7.0
    2984. 

  2984.  *
    2985. 

  2985.  * @param string $content String to search for links in.
    2986. 

  2986.  * @param string $target The Target to add to the links.
    2987. 

  2987.  * @param array $tags An array of tags to apply to.
    2988. 

  2988.  * @return string The processed content.
    2989. 

  2989.  */
    2990. 

  2990. function links_add_target( $content, $target = '_blank', $tags = array('a') ) {
    2991. 

  2991. 	global $_links_add_target;
    2992. 

  2992. 	$_links_add_target = $target;
    2993. 

  2993. 	$tags = implode('|', (array)$tags);
    2994. 

  2994. 	return preg_replace_callback( "!<($tags)(.+?)>!i", '_links_add_target', $content );
    2995. 

  2995. }
    2996. 

  2996. 

  2997. /**
    2998. 

  2998.  * Callback to add a target attribute to all links in passed content.
    2999. 

  2999.  *
    3000. 

  3000.  * @since 2.7.0
    3001. 

  3001.  * @access private
    3002. 

  3002.  *
    3003. 

  3003.  * @param string $m The matched link.
    3004. 

  3004.  * @return string The processed link.
    3005. 

  3005.  */
    3006. 

  3006. function _links_add_target( $m ) {
    3007. 

  3007. 	global $_links_add_target;
    3008. 

  3008. 	$tag = $m[1];
    3009. 

  3009. 	$link = preg_replace('|(target=[\'"](.*?)[\'"])|i', '', $m[2]);
    3010. 

  3010. 	return '<' . $tag . $link . ' target="' . esc_attr( $_links_add_target ) . '">';
    3011. 

  3011. }
    3012. 

  3012. 

  3013. // normalize EOL characters and strip duplicate whitespace
    3014. 

  3014. function normalize_whitespace( $str ) {
    3015. 

  3015. 	$str  = trim($str);
    3016. 

  3016. 	$str  = str_replace("\r", "\n", $str);
    3017. 

  3017. 	$str  = preg_replace( array( '/\n+/', '/[ \t]+/' ), array( "\n", ' ' ), $str );
    3018. 

  3018. 	return $str;
    3019. 

  3019. }
    3020. 

  3020. 

  3021. /**
    3022. 

  3022.  * Properly strip all HTML tags including script and style
    3023. 

  3023.  *
    3024. 

  3024.  * @since 2.9.0
    3025. 

  3025.  *
    3026. 

  3026.  * @param string $string String containing HTML tags
    3027. 

  3027.  * @param bool $remove_breaks optional Whether to remove left over line breaks and white space chars
    3028. 

  3028.  * @return string The processed string.
    3029. 

  3029.  */
    3030. 

  3030. function wp_strip_all_tags($string, $remove_breaks = false) {
    3031. 

  3031. 	$string = preg_replace( '@<(script|style)[^>]*?>.*?</\\1>@si', '', $string );
    3032. 

  3032. 	$string = strip_tags($string);
    3033. 

  3033. 

  3034. 	if ( $remove_breaks )
    3035. 

  3035. 		$string = preg_replace('/[\r\n\t ]+/', ' ', $string);
    3036. 

  3036. 

  3037. 	return trim($string);
    3038. 

  3038. }
    3039. 

  3039. 

  3040. /**
    3041. 

  3041.  * Sanitize a string from user input or from the db
    3042. 

  3042.  *
    3043. 

  3043.  * check for invalid UTF-8,
    3044. 

  3044.  * Convert single < characters to entity,
    3045. 

  3045.  * strip all tags,
    3046. 

  3046.  * remove line breaks, tabs and extra white space,
    3047. 

  3047.  * strip octets.
    3048. 

  3048.  *
    3049. 

  3049.  * @since 2.9.0
    3050. 

  3050.  *
    3051. 

  3051.  * @param string $str
    3052. 

  3052.  * @return string
    3053. 

  3053.  */
    3054. 

  3054. function sanitize_text_field($str) {
    3055. 

  3055. 	$filtered = wp_check_invalid_utf8( $str );
    3056. 

  3056. 

  3057. 	if ( strpos($filtered, '<') !== false ) {
    3058. 

  3058. 		$filtered = wp_pre_kses_less_than( $filtered );
    3059. 

  3059. 		// This will strip extra whitespace for us.
    3060. 

  3060. 		$filtered = wp_strip_all_tags( $filtered, true );
    3061. 

  3061. 	} else {
    3062. 

  3062. 		$filtered = trim( preg_replace('/[\r\n\t ]+/', ' ', $filtered) );
    3063. 

  3063. 	}
    3064. 

  3064. 

  3065. 	$match = array();
    3066. 

  3066. 	$found = false;
    3067. 

  3067. 	while ( preg_match('/%[a-f0-9]{2}/i', $filtered, $match) ) {
    3068. 

  3068. 		$filtered = str_replace($match[0], '', $filtered);
    3069. 

  3069. 		$found = true;
    3070. 

  3070. 	}
    3071. 

  3071. 

  3072. 	if ( $found ) {
    3073. 

  3073. 		// Strip out the whitespace that may now exist after removing the octets.
    3074. 

  3074. 		$filtered = trim( preg_replace('/ +/', ' ', $filtered) );
    3075. 

  3075. 	}
    3076. 

  3076. 

  3077. 	return apply_filters('sanitize_text_field', $filtered, $str);
    3078. 

  3078. }
    3079. 

  3079. 

  3080. /**
    3081. 

  3081.  * i18n friendly version of basename()
    3082. 

  3082.  *
    3083. 

  3083.  * @since 3.1.0
    3084. 

  3084.  *
    3085. 

  3085.  * @param string $path A path.
    3086. 

  3086.  * @param string $suffix If the filename ends in suffix this will also be cut off.
    3087. 

  3087.  * @return string
    3088. 

  3088.  */
    3089. 

  3089. function wp_basename( $path, $suffix = '' ) {
    3090. 

  3090. 	return urldecode( basename( str_replace( '%2F', '/', urlencode( $path ) ), $suffix ) );
    3091. 

  3091. }
    3092. 

  3092. 

  3093. /**
    3094. 

  3094.  * Forever eliminate "Wordpress" from the planet (or at least the little bit we can influence).
    3095. 

  3095.  *
    3096. 

  3096.  * Violating our coding standards for a good function name.
    3097. 

  3097.  *
    3098. 

  3098.  * @since 3.0.0
    3099. 

  3099.  */
    3100. 

  3100. function capital_P_dangit( $text ) {
    3101. 

  3101. 	// Simple replacement for titles
    3102. 

  3102. 	if ( 'the_title' === current_filter() )
    3103. 

  3103. 		return str_replace( 'Wordpress', 'WordPress', $text );
    3104. 

  3104. 	// Still here? Use the more judicious replacement
    3105. 

  3105. 	static $dblq = false;
    3106. 

  3106. 	if ( false === $dblq )
    3107. 

  3107. 		$dblq = _x('&#8220;', 'opening curly quote');
    3108. 

  3108. 	return str_replace(
    3109. 

  3109. 		array( ' Wordpress', '&#8216;Wordpress', $dblq . 'Wordpress', '>Wordpress', '(Wordpress' ),
    3110. 

  3110. 		array( ' WordPress', '&#8216;WordPress', $dblq . 'WordPress', '>WordPress', '(WordPress' ),
    3111. 

  3111. 	$text );
    3112. 

  3112. 

  3113. }
    3114. 

  3114. 

  3115. /**
    3116. 

  3116.  * Sanitize a mime type
    3117. 

  3117.  *
    3118. 

  3118.  * @since 3.1.3
    3119. 

  3119.  *
    3120. 

  3120.  * @param string $mime_type Mime type
    3121. 

  3121.  * @return string Sanitized mime type
    3122. 

  3122.  */
    3123. 

  3123. function sanitize_mime_type( $mime_type ) {
    3124. 

  3124. 	$sani_mime_type = preg_replace( '/[^-+*.a-zA-Z0-9\/]/', '', $mime_type );
    3125. 

  3125. 	return apply_filters( 'sanitize_mime_type', $sani_mime_type, $mime_type );
    3126. 

  3126. }
    3127. 

  3127. 

  3128. /**
    3129. 

  3129.  * Sanitize space or carriage return separated URLs that are used to send trackbacks.
    3130. 

  3130.  *
    3131. 

  3131.  * @since 3.4.0
    3132. 

  3132.  *
    3133. 

  3133.  * @param string $to_ping Space or carriage return separated URLs
    3134. 

  3134.  * @return string URLs starting with the http or https protocol, separated by a carriage return.
    3135. 

  3135.  */
    3136. 

  3136. function sanitize_trackback_urls( $to_ping ) {
    3137. 

  3137. 	$urls_to_ping = preg_split( '/\r\n\t /', trim( $to_ping ), -1, PREG_SPLIT_NO_EMPTY );
    3138. 

  3138. 	foreach ( $urls_to_ping as $k => $url ) {
    3139. 

  3139. 		if ( !preg_match( '#^https?://.#i', $url ) )
    3140. 

  3140. 			unset( $urls_to_ping[$k] );
    3141. 

  3141. 	}
    3142. 

  3142. 	$urls_to_ping = array_map( 'esc_url_raw', $urls_to_ping );
    3143. 

  3143. 	$urls_to_ping = implode( "\n", $urls_to_ping );
    3144. 

  3144. 	return apply_filters( 'sanitize_trackback_urls', $urls_to_ping, $to_ping );
    3145. 

  3145. }
    3146. 

  3146.