PageRenderTime 72ms CodeModel.GetById 20ms RepoModel.GetById 0ms app.codeStats 1ms

/Sources/Subs.php

https://github.com/smf-portal/SMF2.1
PHP | 4371 lines | 3006 code | 523 blank | 842 comment | 765 complexity | 30c6b5986a820cd189f7a600cc02f6ac MD5 | raw file
  1. <?php
  2. /**
  3. * This file has all the main functions in it that relate to, well, everything.
  4. *
  5. * Simple Machines Forum (SMF)
  6. *
  7. * @package SMF
  8. * @author Simple Machines http://www.simplemachines.org
  9. * @copyright 2012 Simple Machines
  10. * @license http://www.simplemachines.org/about/smf/license.php BSD
  11. *
  12. * @version 2.1 Alpha 1
  13. */
  14. if (!defined('SMF'))
  15. die('Hacking attempt...');
  16. /**
  17. * Update some basic statistics.
  18. *
  19. * 'member' statistic updates the latest member, the total member
  20. * count, and the number of unapproved members.
  21. * 'member' also only counts approved members when approval is on, but
  22. * is much more efficient with it off.
  23. *
  24. * 'message' changes the total number of messages, and the
  25. * highest message id by id_msg - which can be parameters 1 and 2,
  26. * respectively.
  27. *
  28. * 'topic' updates the total number of topics, or if parameter1 is true
  29. * simply increments them.
  30. *
  31. * 'subject' updateds the log_search_subjects in the event of a topic being
  32. * moved, removed or split. parameter1 is the topicid, parameter2 is the new subject
  33. *
  34. * 'postgroups' case updates those members who match condition's
  35. * post-based membergroups in the database (restricted by parameter1).
  36. *
  37. * @param string $type Stat type - can be 'member', 'message', 'topic', 'subject' or 'postgroups'
  38. * @param mixed $parameter1 = null
  39. * @param mixed $parameter2 = null
  40. */
  41. function updateStats($type, $parameter1 = null, $parameter2 = null)
  42. {
  43. global $sourcedir, $modSettings, $smcFunc;
  44. switch ($type)
  45. {
  46. case 'member':
  47. $changes = array(
  48. 'memberlist_updated' => time(),
  49. );
  50. // #1 latest member ID, #2 the real name for a new registration.
  51. if (is_numeric($parameter1))
  52. {
  53. $changes['latestMember'] = $parameter1;
  54. $changes['latestRealName'] = $parameter2;
  55. updateSettings(array('totalMembers' => true), true);
  56. }
  57. // We need to calculate the totals.
  58. else
  59. {
  60. // Update the latest activated member (highest id_member) and count.
  61. $result = $smcFunc['db_query']('', '
  62. SELECT COUNT(*), MAX(id_member)
  63. FROM {db_prefix}members
  64. WHERE is_activated = {int:is_activated}',
  65. array(
  66. 'is_activated' => 1,
  67. )
  68. );
  69. list ($changes['totalMembers'], $changes['latestMember']) = $smcFunc['db_fetch_row']($result);
  70. $smcFunc['db_free_result']($result);
  71. // Get the latest activated member's display name.
  72. $result = $smcFunc['db_query']('', '
  73. SELECT real_name
  74. FROM {db_prefix}members
  75. WHERE id_member = {int:id_member}
  76. LIMIT 1',
  77. array(
  78. 'id_member' => (int) $changes['latestMember'],
  79. )
  80. );
  81. list ($changes['latestRealName']) = $smcFunc['db_fetch_row']($result);
  82. $smcFunc['db_free_result']($result);
  83. // Are we using registration approval?
  84. if ((!empty($modSettings['registration_method']) && $modSettings['registration_method'] == 2) || !empty($modSettings['approveAccountDeletion']))
  85. {
  86. // Update the amount of members awaiting approval - ignoring COPPA accounts, as you can't approve them until you get permission.
  87. $result = $smcFunc['db_query']('', '
  88. SELECT COUNT(*)
  89. FROM {db_prefix}members
  90. WHERE is_activated IN ({array_int:activation_status})',
  91. array(
  92. 'activation_status' => array(3, 4),
  93. )
  94. );
  95. list ($changes['unapprovedMembers']) = $smcFunc['db_fetch_row']($result);
  96. $smcFunc['db_free_result']($result);
  97. }
  98. }
  99. updateSettings($changes);
  100. break;
  101. case 'message':
  102. if ($parameter1 === true && $parameter2 !== null)
  103. updateSettings(array('totalMessages' => true, 'maxMsgID' => $parameter2), true);
  104. else
  105. {
  106. // SUM and MAX on a smaller table is better for InnoDB tables.
  107. $result = $smcFunc['db_query']('', '
  108. SELECT SUM(num_posts + unapproved_posts) AS total_messages, MAX(id_last_msg) AS max_msg_id
  109. FROM {db_prefix}boards
  110. WHERE redirect = {string:blank_redirect}' . (!empty($modSettings['recycle_enable']) && $modSettings['recycle_board'] > 0 ? '
  111. AND id_board != {int:recycle_board}' : ''),
  112. array(
  113. 'recycle_board' => isset($modSettings['recycle_board']) ? $modSettings['recycle_board'] : 0,
  114. 'blank_redirect' => '',
  115. )
  116. );
  117. $row = $smcFunc['db_fetch_assoc']($result);
  118. $smcFunc['db_free_result']($result);
  119. updateSettings(array(
  120. 'totalMessages' => $row['total_messages'] === null ? 0 : $row['total_messages'],
  121. 'maxMsgID' => $row['max_msg_id'] === null ? 0 : $row['max_msg_id']
  122. ));
  123. }
  124. break;
  125. case 'subject':
  126. // Remove the previous subject (if any).
  127. $smcFunc['db_query']('', '
  128. DELETE FROM {db_prefix}log_search_subjects
  129. WHERE id_topic = {int:id_topic}',
  130. array(
  131. 'id_topic' => (int) $parameter1,
  132. )
  133. );
  134. // Insert the new subject.
  135. if ($parameter2 !== null)
  136. {
  137. $parameter1 = (int) $parameter1;
  138. $parameter2 = text2words($parameter2);
  139. $inserts = array();
  140. foreach ($parameter2 as $word)
  141. $inserts[] = array($word, $parameter1);
  142. if (!empty($inserts))
  143. $smcFunc['db_insert']('ignore',
  144. '{db_prefix}log_search_subjects',
  145. array('word' => 'string', 'id_topic' => 'int'),
  146. $inserts,
  147. array('word', 'id_topic')
  148. );
  149. }
  150. break;
  151. case 'topic':
  152. if ($parameter1 === true)
  153. updateSettings(array('totalTopics' => true), true);
  154. else
  155. {
  156. // Get the number of topics - a SUM is better for InnoDB tables.
  157. // We also ignore the recycle bin here because there will probably be a bunch of one-post topics there.
  158. $result = $smcFunc['db_query']('', '
  159. SELECT SUM(num_topics + unapproved_topics) AS total_topics
  160. FROM {db_prefix}boards' . (!empty($modSettings['recycle_enable']) && $modSettings['recycle_board'] > 0 ? '
  161. WHERE id_board != {int:recycle_board}' : ''),
  162. array(
  163. 'recycle_board' => !empty($modSettings['recycle_board']) ? $modSettings['recycle_board'] : 0,
  164. )
  165. );
  166. $row = $smcFunc['db_fetch_assoc']($result);
  167. $smcFunc['db_free_result']($result);
  168. updateSettings(array('totalTopics' => $row['total_topics'] === null ? 0 : $row['total_topics']));
  169. }
  170. break;
  171. case 'postgroups':
  172. // Parameter two is the updated columns: we should check to see if we base groups off any of these.
  173. if ($parameter2 !== null && !in_array('posts', $parameter2))
  174. return;
  175. $postgroups = cache_get_data('updateStats:postgroups', 360);
  176. if ($postgroups == null || $parameter1 == null)
  177. {
  178. // Fetch the postgroups!
  179. $request = $smcFunc['db_query']('', '
  180. SELECT id_group, min_posts
  181. FROM {db_prefix}membergroups
  182. WHERE min_posts != {int:min_posts}',
  183. array(
  184. 'min_posts' => -1,
  185. )
  186. );
  187. $postgroups = array();
  188. while ($row = $smcFunc['db_fetch_assoc']($request))
  189. $postgroups[$row['id_group']] = $row['min_posts'];
  190. $smcFunc['db_free_result']($request);
  191. // Sort them this way because if it's done with MySQL it causes a filesort :(.
  192. arsort($postgroups);
  193. cache_put_data('updateStats:postgroups', $postgroups, 360);
  194. }
  195. // Oh great, they've screwed their post groups.
  196. if (empty($postgroups))
  197. return;
  198. // Set all membergroups from most posts to least posts.
  199. $conditions = '';
  200. $lastMin = 0;
  201. foreach ($postgroups as $id => $min_posts)
  202. {
  203. $conditions .= '
  204. WHEN posts >= ' . $min_posts . (!empty($lastMin) ? ' AND posts <= ' . $lastMin : '') . ' THEN ' . $id;
  205. $lastMin = $min_posts;
  206. }
  207. // A big fat CASE WHEN... END is faster than a zillion UPDATE's ;).
  208. $smcFunc['db_query']('', '
  209. UPDATE {db_prefix}members
  210. SET id_post_group = CASE ' . $conditions . '
  211. ELSE 0
  212. END' . ($parameter1 != null ? '
  213. WHERE ' . (is_array($parameter1) ? 'id_member IN ({array_int:members})' : 'id_member = {int:members}') : ''),
  214. array(
  215. 'members' => $parameter1,
  216. )
  217. );
  218. break;
  219. default:
  220. trigger_error('updateStats(): Invalid statistic type \'' . $type . '\'', E_USER_NOTICE);
  221. }
  222. }
  223. /**
  224. * Updates the columns in the members table.
  225. * Assumes the data has been htmlspecialchar'd.
  226. * this function should be used whenever member data needs to be
  227. * updated in place of an UPDATE query.
  228. *
  229. * id_member is either an int or an array of ints to be updated.
  230. *
  231. * data is an associative array of the columns to be updated and their respective values.
  232. * any string values updated should be quoted and slashed.
  233. *
  234. * the value of any column can be '+' or '-', which mean 'increment'
  235. * and decrement, respectively.
  236. *
  237. * if the member's post number is updated, updates their post groups.
  238. *
  239. * @param mixed $members An array of integers
  240. * @param array $data
  241. */
  242. function updateMemberData($members, $data)
  243. {
  244. global $modSettings, $user_info, $smcFunc;
  245. $parameters = array();
  246. if (is_array($members))
  247. {
  248. $condition = 'id_member IN ({array_int:members})';
  249. $parameters['members'] = $members;
  250. }
  251. elseif ($members === null)
  252. $condition = '1=1';
  253. else
  254. {
  255. $condition = 'id_member = {int:member}';
  256. $parameters['member'] = $members;
  257. }
  258. // Everything is assumed to be a string unless it's in the below.
  259. $knownInts = array(
  260. 'date_registered', 'posts', 'id_group', 'last_login', 'instant_messages', 'unread_messages',
  261. 'new_pm', 'pm_prefs', 'gender', 'hide_email', 'show_online', 'pm_email_notify', 'pm_receive_from', 'karma_good', 'karma_bad',
  262. 'notify_announcements', 'notify_send_body', 'notify_regularity', 'notify_types',
  263. 'id_theme', 'is_activated', 'id_msg_last_visit', 'id_post_group', 'total_time_logged_in', 'warning',
  264. );
  265. $knownFloats = array(
  266. 'time_offset',
  267. );
  268. if (!empty($modSettings['integrate_change_member_data']))
  269. {
  270. // Only a few member variables are really interesting for integration.
  271. $integration_vars = array(
  272. 'member_name',
  273. 'real_name',
  274. 'email_address',
  275. 'id_group',
  276. 'gender',
  277. 'birthdate',
  278. 'website_title',
  279. 'website_url',
  280. 'location',
  281. 'hide_email',
  282. 'time_format',
  283. 'time_offset',
  284. 'avatar',
  285. 'lngfile',
  286. );
  287. $vars_to_integrate = array_intersect($integration_vars, array_keys($data));
  288. // Only proceed if there are any variables left to call the integration function.
  289. if (count($vars_to_integrate) != 0)
  290. {
  291. // Fetch a list of member_names if necessary
  292. if ((!is_array($members) && $members === $user_info['id']) || (is_array($members) && count($members) == 1 && in_array($user_info['id'], $members)))
  293. $member_names = array($user_info['username']);
  294. else
  295. {
  296. $member_names = array();
  297. $request = $smcFunc['db_query']('', '
  298. SELECT member_name
  299. FROM {db_prefix}members
  300. WHERE ' . $condition,
  301. $parameters
  302. );
  303. while ($row = $smcFunc['db_fetch_assoc']($request))
  304. $member_names[] = $row['member_name'];
  305. $smcFunc['db_free_result']($request);
  306. }
  307. if (!empty($member_names))
  308. foreach ($vars_to_integrate as $var)
  309. call_integration_hook('integrate_change_member_data', array($member_names, $var, $data[$var], $knownInts, $knownFloats));
  310. }
  311. }
  312. $setString = '';
  313. foreach ($data as $var => $val)
  314. {
  315. $type = 'string';
  316. if (in_array($var, $knownInts))
  317. $type = 'int';
  318. elseif (in_array($var, $knownFloats))
  319. $type = 'float';
  320. elseif ($var == 'birthdate')
  321. $type = 'date';
  322. // Doing an increment?
  323. if ($type == 'int' && ($val === '+' || $val === '-'))
  324. {
  325. $val = $var . ' ' . $val . ' 1';
  326. $type = 'raw';
  327. }
  328. // Ensure posts, instant_messages, and unread_messages don't overflow or underflow.
  329. if (in_array($var, array('posts', 'instant_messages', 'unread_messages')))
  330. {
  331. if (preg_match('~^' . $var . ' (\+ |- |\+ -)([\d]+)~', $val, $match))
  332. {
  333. if ($match[1] != '+ ')
  334. $val = 'CASE WHEN ' . $var . ' <= ' . abs($match[2]) . ' THEN 0 ELSE ' . $val . ' END';
  335. $type = 'raw';
  336. }
  337. }
  338. $setString .= ' ' . $var . ' = {' . $type . ':p_' . $var . '},';
  339. $parameters['p_' . $var] = $val;
  340. }
  341. $smcFunc['db_query']('', '
  342. UPDATE {db_prefix}members
  343. SET' . substr($setString, 0, -1) . '
  344. WHERE ' . $condition,
  345. $parameters
  346. );
  347. updateStats('postgroups', $members, array_keys($data));
  348. // Clear any caching?
  349. if (!empty($modSettings['cache_enable']) && $modSettings['cache_enable'] >= 2 && !empty($members))
  350. {
  351. if (!is_array($members))
  352. $members = array($members);
  353. foreach ($members as $member)
  354. {
  355. if ($modSettings['cache_enable'] >= 3)
  356. {
  357. cache_put_data('member_data-profile-' . $member, null, 120);
  358. cache_put_data('member_data-normal-' . $member, null, 120);
  359. cache_put_data('member_data-minimal-' . $member, null, 120);
  360. }
  361. cache_put_data('user_settings-' . $member, null, 60);
  362. }
  363. }
  364. }
  365. /**
  366. * Updates the settings table as well as $modSettings... only does one at a time if $update is true.
  367. *
  368. * - updates both the settings table and $modSettings array.
  369. * - all of changeArray's indexes and values are assumed to have escaped apostrophes (')!
  370. * - if a variable is already set to what you want to change it to, that
  371. * variable will be skipped over; it would be unnecessary to reset.
  372. * - When use_update is true, UPDATEs will be used instead of REPLACE.
  373. * - when use_update is true, the value can be true or false to increment
  374. * or decrement it, respectively.
  375. *
  376. * @param array $changeArray
  377. * @param bool $update = false
  378. * @param bool $debug = false
  379. */
  380. function updateSettings($changeArray, $update = false, $debug = false)
  381. {
  382. global $modSettings, $smcFunc;
  383. if (empty($changeArray) || !is_array($changeArray))
  384. return;
  385. // In some cases, this may be better and faster, but for large sets we don't want so many UPDATEs.
  386. if ($update)
  387. {
  388. foreach ($changeArray as $variable => $value)
  389. {
  390. $smcFunc['db_query']('', '
  391. UPDATE {db_prefix}settings
  392. SET value = {' . ($value === false || $value === true ? 'raw' : 'string') . ':value}
  393. WHERE variable = {string:variable}',
  394. array(
  395. 'value' => $value === true ? 'value + 1' : ($value === false ? 'value - 1' : $value),
  396. 'variable' => $variable,
  397. )
  398. );
  399. $modSettings[$variable] = $value === true ? $modSettings[$variable] + 1 : ($value === false ? $modSettings[$variable] - 1 : $value);
  400. }
  401. // Clean out the cache and make sure the cobwebs are gone too.
  402. cache_put_data('modSettings', null, 90);
  403. return;
  404. }
  405. $replaceArray = array();
  406. foreach ($changeArray as $variable => $value)
  407. {
  408. // Don't bother if it's already like that ;).
  409. if (isset($modSettings[$variable]) && $modSettings[$variable] == $value)
  410. continue;
  411. // If the variable isn't set, but would only be set to nothing'ness, then don't bother setting it.
  412. elseif (!isset($modSettings[$variable]) && empty($value))
  413. continue;
  414. $replaceArray[] = array($variable, $value);
  415. $modSettings[$variable] = $value;
  416. }
  417. if (empty($replaceArray))
  418. return;
  419. $smcFunc['db_insert']('replace',
  420. '{db_prefix}settings',
  421. array('variable' => 'string-255', 'value' => 'string-65534'),
  422. $replaceArray,
  423. array('variable')
  424. );
  425. // Kill the cache - it needs redoing now, but we won't bother ourselves with that here.
  426. cache_put_data('modSettings', null, 90);
  427. }
  428. /**
  429. * Constructs a page list.
  430. *
  431. * - builds the page list, e.g. 1 ... 6 7 [8] 9 10 ... 15.
  432. * - flexible_start causes it to use "url.page" instead of "url;start=page".
  433. * - handles any wireless settings (adding special things to URLs.)
  434. * - very importantly, cleans up the start value passed, and forces it to
  435. * be a multiple of num_per_page.
  436. * - checks that start is not more than max_value.
  437. * - base_url should be the URL without any start parameter on it.
  438. * - uses the compactTopicPagesEnable and compactTopicPagesContiguous
  439. * settings to decide how to display the menu.
  440. *
  441. * an example is available near the function definition.
  442. * $pageindex = constructPageIndex($scripturl . '?board=' . $board, $_REQUEST['start'], $num_messages, $maxindex, true);
  443. *
  444. * @param string $base_url
  445. * @param int $start
  446. * @param int $max_value
  447. * @param int $num_per_page
  448. * @param bool $flexible_start = false
  449. * @param bool $show_prevnext = true
  450. */
  451. function constructPageIndex($base_url, &$start, $max_value, $num_per_page, $flexible_start = false, $show_prevnext = true)
  452. {
  453. global $modSettings, $context, $txt;
  454. // Save whether $start was less than 0 or not.
  455. $start = (int) $start;
  456. $start_invalid = $start < 0;
  457. // Make sure $start is a proper variable - not less than 0.
  458. if ($start_invalid)
  459. $start = 0;
  460. // Not greater than the upper bound.
  461. elseif ($start >= $max_value)
  462. $start = max(0, (int) $max_value - (((int) $max_value % (int) $num_per_page) == 0 ? $num_per_page : ((int) $max_value % (int) $num_per_page)));
  463. // And it has to be a multiple of $num_per_page!
  464. else
  465. $start = max(0, (int) $start - ((int) $start % (int) $num_per_page));
  466. $context['current_page'] = $start / $num_per_page;
  467. // Wireless will need the protocol on the URL somewhere.
  468. if (WIRELESS)
  469. $base_url .= ';' . WIRELESS_PROTOCOL;
  470. $base_link = '<a class="navPages" href="' . ($flexible_start ? $base_url : strtr($base_url, array('%' => '%%')) . ';start=%1$d') . '">%2$s</a> ';
  471. // Compact pages is off or on?
  472. if (empty($modSettings['compactTopicPagesEnable']))
  473. {
  474. // Show the left arrow.
  475. $pageindex = $start == 0 ? ' ' : sprintf($base_link, $start - $num_per_page, '<span class="previous_page">' . $txt['prev'] . '</span>');
  476. // Show all the pages.
  477. $display_page = 1;
  478. for ($counter = 0; $counter < $max_value; $counter += $num_per_page)
  479. $pageindex .= $start == $counter && !$start_invalid ? '<span class="current_page"><strong>' . $display_page++ . '</strong></span> ' : sprintf($base_link, $counter, $display_page++);
  480. // Show the right arrow.
  481. $display_page = ($start + $num_per_page) > $max_value ? $max_value : ($start + $num_per_page);
  482. if ($start != $counter - $max_value && !$start_invalid)
  483. $pageindex .= $display_page > $counter - $num_per_page ? ' ' : sprintf($base_link, $display_page, '<span class="next_page">' . $txt['next'] . '</span>');
  484. }
  485. else
  486. {
  487. // If they didn't enter an odd value, pretend they did.
  488. $PageContiguous = (int) ($modSettings['compactTopicPagesContiguous'] - ($modSettings['compactTopicPagesContiguous'] % 2)) / 2;
  489. // Show the "prev page" link. (>prev page< 1 ... 6 7 [8] 9 10 ... 15 next page)
  490. if (!empty($start) && $show_prevnext)
  491. $pageindex = sprintf($base_link, $start - $num_per_page, '<span class="previous_page">' . $txt['prev'] . '</span>');
  492. else
  493. $pageindex = '';
  494. // Show the first page. (prev page >1< ... 6 7 [8] 9 10 ... 15)
  495. if ($start > $num_per_page * $PageContiguous)
  496. $pageindex .= sprintf($base_link, 0, '1');
  497. // Show the ... after the first page. (prev page 1 >...< 6 7 [8] 9 10 ... 15 next page)
  498. if ($start > $num_per_page * ($PageContiguous + 1))
  499. $pageindex .= '<span class="expand_pages" onclick="' . htmlspecialchars('expandPages(this, ' . JavaScriptEscape(($flexible_start ? $base_url : strtr($base_url, array('%' => '%%')) . ';start=%1$d')) . ', ' . $num_per_page . ', ' . ($start - $num_per_page * $PageContiguous) . ', ' . $num_per_page . ');') . '" onmouseover="this.style.cursor = \'pointer\';"><strong> ... </strong></span>';
  500. // Show the pages before the current one. (prev page 1 ... >6 7< [8] 9 10 ... 15 next page)
  501. for ($nCont = $PageContiguous; $nCont >= 1; $nCont--)
  502. if ($start >= $num_per_page * $nCont)
  503. {
  504. $tmpStart = $start - $num_per_page * $nCont;
  505. $pageindex.= sprintf($base_link, $tmpStart, $tmpStart / $num_per_page + 1);
  506. }
  507. // Show the current page. (prev page 1 ... 6 7 >[8]< 9 10 ... 15 next page)
  508. if (!$start_invalid)
  509. $pageindex .= '<span class="current_page"><strong>' . ($start / $num_per_page + 1) . '</strong></span>';
  510. else
  511. $pageindex .= sprintf($base_link, $start, $start / $num_per_page + 1);
  512. // Show the pages after the current one... (prev page 1 ... 6 7 [8] >9 10< ... 15 next page)
  513. $tmpMaxPages = (int) (($max_value - 1) / $num_per_page) * $num_per_page;
  514. for ($nCont = 1; $nCont <= $PageContiguous; $nCont++)
  515. if ($start + $num_per_page * $nCont <= $tmpMaxPages)
  516. {
  517. $tmpStart = $start + $num_per_page * $nCont;
  518. $pageindex .= sprintf($base_link, $tmpStart, $tmpStart / $num_per_page + 1);
  519. }
  520. // Show the '...' part near the end. (prev page 1 ... 6 7 [8] 9 10 >...< 15 next page)
  521. if ($start + $num_per_page * ($PageContiguous + 1) < $tmpMaxPages)
  522. $pageindex .= '<span class="expand_pages" onclick="' . htmlspecialchars('expandPages(this, ' . JavaScriptEscape(($flexible_start ? $base_url : strtr($base_url, array('%' => '%%')) . ';start=%1$d')) . ', ' . ($start + $num_per_page * ($PageContiguous + 1)) . ', ' . $tmpMaxPages . ', ' . $num_per_page . ');') . '" onmouseover="this.style.cursor=\'pointer\';"><strong> ... </strong></span>';
  523. // Show the last number in the list. (prev page 1 ... 6 7 [8] 9 10 ... >15< next page)
  524. if ($start + $num_per_page * $PageContiguous < $tmpMaxPages)
  525. $pageindex .= sprintf($base_link, $tmpMaxPages, $tmpMaxPages / $num_per_page + 1);
  526. // Show the "next page" link. (prev page 1 ... 6 7 [8] 9 10 ... 15 >next page<)
  527. if ($start != $tmpMaxPages && $show_prevnext)
  528. $pageindex .= sprintf($base_link, $start + $num_per_page, '<span class="next_page">' . $txt['next'] . '</span>');
  529. }
  530. return $pageindex;
  531. }
  532. /**
  533. * - Formats a number.
  534. * - uses the format of number_format to decide how to format the number.
  535. * for example, it might display "1 234,50".
  536. * - caches the formatting data from the setting for optimization.
  537. *
  538. * @param float $number
  539. * @param bool $override_decimal_count = false
  540. */
  541. function comma_format($number, $override_decimal_count = false)
  542. {
  543. global $txt;
  544. static $thousands_separator = null, $decimal_separator = null, $decimal_count = null;
  545. // Cache these values...
  546. if ($decimal_separator === null)
  547. {
  548. // Not set for whatever reason?
  549. if (empty($txt['number_format']) || preg_match('~^1([^\d]*)?234([^\d]*)(0*?)$~', $txt['number_format'], $matches) != 1)
  550. return $number;
  551. // Cache these each load...
  552. $thousands_separator = $matches[1];
  553. $decimal_separator = $matches[2];
  554. $decimal_count = strlen($matches[3]);
  555. }
  556. // Format the string with our friend, number_format.
  557. return number_format($number, (float) $number === $number ? ($override_decimal_count === false ? $decimal_count : $override_decimal_count) : 0, $decimal_separator, $thousands_separator);
  558. }
  559. /**
  560. * Format a time to make it look purdy.
  561. *
  562. * - returns a pretty formated version of time based on the user's format in $user_info['time_format'].
  563. * - applies all necessary time offsets to the timestamp, unless offset_type is set.
  564. * - if todayMod is set and show_today was not not specified or true, an
  565. * alternate format string is used to show the date with something to show it is "today" or "yesterday".
  566. * - performs localization (more than just strftime would do alone.)
  567. *
  568. * @param int $log_time
  569. * @param bool $show_today = true
  570. * @param string $offset_type = false
  571. */
  572. function timeformat($log_time, $show_today = true, $offset_type = false)
  573. {
  574. global $context, $user_info, $txt, $modSettings, $smcFunc;
  575. static $non_twelve_hour;
  576. // Offset the time.
  577. if (!$offset_type)
  578. $time = $log_time + ($user_info['time_offset'] + $modSettings['time_offset']) * 3600;
  579. // Just the forum offset?
  580. elseif ($offset_type == 'forum')
  581. $time = $log_time + $modSettings['time_offset'] * 3600;
  582. else
  583. $time = $log_time;
  584. // We can't have a negative date (on Windows, at least.)
  585. if ($log_time < 0)
  586. $log_time = 0;
  587. // Today and Yesterday?
  588. if ($modSettings['todayMod'] >= 1 && $show_today === true)
  589. {
  590. // Get the current time.
  591. $nowtime = forum_time();
  592. $then = @getdate($time);
  593. $now = @getdate($nowtime);
  594. // Try to make something of a time format string...
  595. $s = strpos($user_info['time_format'], '%S') === false ? '' : ':%S';
  596. if (strpos($user_info['time_format'], '%H') === false && strpos($user_info['time_format'], '%T') === false)
  597. {
  598. $h = strpos($user_info['time_format'], '%l') === false ? '%I' : '%l';
  599. $today_fmt = $h . ':%M' . $s . ' %p';
  600. }
  601. else
  602. $today_fmt = '%H:%M' . $s;
  603. // Same day of the year, same year.... Today!
  604. if ($then['yday'] == $now['yday'] && $then['year'] == $now['year'])
  605. return $txt['today'] . timeformat($log_time, $today_fmt, $offset_type);
  606. // Day-of-year is one less and same year, or it's the first of the year and that's the last of the year...
  607. if ($modSettings['todayMod'] == '2' && (($then['yday'] == $now['yday'] - 1 && $then['year'] == $now['year']) || ($now['yday'] == 0 && $then['year'] == $now['year'] - 1) && $then['mon'] == 12 && $then['mday'] == 31))
  608. return $txt['yesterday'] . timeformat($log_time, $today_fmt, $offset_type);
  609. }
  610. $str = !is_bool($show_today) ? $show_today : $user_info['time_format'];
  611. if (setlocale(LC_TIME, $txt['lang_locale']))
  612. {
  613. if (!isset($non_twelve_hour))
  614. $non_twelve_hour = trim(strftime('%p')) === '';
  615. if ($non_twelve_hour && strpos($str, '%p') !== false)
  616. $str = str_replace('%p', (strftime('%H', $time) < 12 ? $txt['time_am'] : $txt['time_pm']), $str);
  617. foreach (array('%a', '%A', '%b', '%B') as $token)
  618. if (strpos($str, $token) !== false)
  619. $str = str_replace($token, !empty($txt['lang_capitalize_dates']) ? $smcFunc['ucwords'](strftime($token, $time)) : strftime($token, $time), $str);
  620. }
  621. else
  622. {
  623. // Do-it-yourself time localization. Fun.
  624. foreach (array('%a' => 'days_short', '%A' => 'days', '%b' => 'months_short', '%B' => 'months') as $token => $text_label)
  625. if (strpos($str, $token) !== false)
  626. $str = str_replace($token, $txt[$text_label][(int) strftime($token === '%a' || $token === '%A' ? '%w' : '%m', $time)], $str);
  627. if (strpos($str, '%p') !== false)
  628. $str = str_replace('%p', (strftime('%H', $time) < 12 ? $txt['time_am'] : $txt['time_pm']), $str);
  629. }
  630. // Windows doesn't support %e; on some versions, strftime fails altogether if used, so let's prevent that.
  631. if ($context['server']['is_windows'] && strpos($str, '%e') !== false)
  632. $str = str_replace('%e', ltrim(strftime('%d', $time), '0'), $str);
  633. // Format any other characters..
  634. return strftime($str, $time);
  635. }
  636. /**
  637. * Removes special entities from strings. Compatibility...
  638. * Should be used instead of html_entity_decode for PHP version compatibility reasons.
  639. *
  640. * - removes the base entities (&lt;, &quot;, etc.) from text.
  641. * - additionally converts &nbsp; and &#039;.
  642. *
  643. * @param string $string
  644. * @return the string without entities
  645. */
  646. function un_htmlspecialchars($string)
  647. {
  648. static $translation = array();
  649. if (empty($translation))
  650. $translation = array_flip(get_html_translation_table(HTML_SPECIALCHARS, ENT_QUOTES)) + array('&#039;' => '\'', '&nbsp;' => ' ');
  651. return strtr($string, $translation);
  652. }
  653. /**
  654. * Shorten a subject + internationalization concerns.
  655. *
  656. * - shortens a subject so that it is either shorter than length, or that length plus an ellipsis.
  657. * - respects internationalization characters and entities as one character.
  658. * - avoids trailing entities.
  659. * - returns the shortened string.
  660. *
  661. * @param string $subject
  662. * @param int $len
  663. */
  664. function shorten_subject($subject, $len)
  665. {
  666. global $smcFunc;
  667. // It was already short enough!
  668. if ($smcFunc['strlen']($subject) <= $len)
  669. return $subject;
  670. // Shorten it by the length it was too long, and strip off junk from the end.
  671. return $smcFunc['substr']($subject, 0, $len) . '...';
  672. }
  673. /**
  674. * Gets the current time with offset.
  675. *
  676. * - always applies the offset in the time_offset setting.
  677. *
  678. * @param bool $use_user_offset = true if use_user_offset is true, applies the user's offset as well
  679. * @param int $timestamp = null
  680. * @return int seconds since the unix epoch
  681. */
  682. function forum_time($use_user_offset = true, $timestamp = null)
  683. {
  684. global $user_info, $modSettings;
  685. if ($timestamp === null)
  686. $timestamp = time();
  687. elseif ($timestamp == 0)
  688. return 0;
  689. return $timestamp + ($modSettings['time_offset'] + ($use_user_offset ? $user_info['time_offset'] : 0)) * 3600;
  690. }
  691. /**
  692. * Calculates all the possible permutations (orders) of array.
  693. * should not be called on huge arrays (bigger than like 10 elements.)
  694. * returns an array containing each permutation.
  695. *
  696. * @param array $array
  697. * @return array
  698. */
  699. function permute($array)
  700. {
  701. $orders = array($array);
  702. $n = count($array);
  703. $p = range(0, $n);
  704. for ($i = 1; $i < $n; null)
  705. {
  706. $p[$i]--;
  707. $j = $i % 2 != 0 ? $p[$i] : 0;
  708. $temp = $array[$i];
  709. $array[$i] = $array[$j];
  710. $array[$j] = $temp;
  711. for ($i = 1; $p[$i] == 0; $i++)
  712. $p[$i] = 1;
  713. $orders[] = $array;
  714. }
  715. return $orders;
  716. }
  717. /**
  718. * Parse bulletin board code in a string, as well as smileys optionally.
  719. *
  720. * - only parses bbc tags which are not disabled in disabledBBC.
  721. * - handles basic HTML, if enablePostHTML is on.
  722. * - caches the from/to replace regular expressions so as not to reload them every time a string is parsed.
  723. * - only parses smileys if smileys is true.
  724. * - does nothing if the enableBBC setting is off.
  725. * - uses the cache_id as a unique identifier to facilitate any caching it may do.
  726. * -returns the modified message.
  727. *
  728. * @param string $message
  729. * @param bool $smileys = true
  730. * @param string $cache_id = ''
  731. * @param array $parse_tags = null
  732. * @return string
  733. */
  734. function parse_bbc($message, $smileys = true, $cache_id = '', $parse_tags = array())
  735. {
  736. global $txt, $scripturl, $context, $modSettings, $user_info, $smcFunc;
  737. static $bbc_codes = array(), $itemcodes = array(), $no_autolink_tags = array();
  738. static $disabled;
  739. // Don't waste cycles
  740. if ($message === '')
  741. return '';
  742. // Just in case it wasn't determined yet whether UTF-8 is enabled.
  743. if (!isset($context['utf8']))
  744. $context['utf8'] = (empty($modSettings['global_character_set']) ? $txt['lang_character_set'] : $modSettings['global_character_set']) === 'UTF-8';
  745. // Clean up any cut/paste issues we may have
  746. $message = sanitizeMSCutPaste($message);
  747. // If the load average is too high, don't parse the BBC.
  748. if (!empty($context['load_average']) && !empty($modSettings['bbc']) && $context['load_average'] >= $modSettings['bbc'])
  749. {
  750. $context['disabled_parse_bbc'] = true;
  751. return $message;
  752. }
  753. // Never show smileys for wireless clients. More bytes, can't see it anyway :P.
  754. if (WIRELESS)
  755. $smileys = false;
  756. elseif ($smileys !== null && ($smileys == '1' || $smileys == '0'))
  757. $smileys = (bool) $smileys;
  758. if (empty($modSettings['enableBBC']) && $message !== false)
  759. {
  760. if ($smileys === true)
  761. parsesmileys($message);
  762. return $message;
  763. }
  764. // If we are not doing every tag then we don't cache this run.
  765. if (!empty($parse_tags) && !empty($bbc_codes))
  766. {
  767. $temp_bbc = $bbc_codes;
  768. $bbc_codes = array();
  769. }
  770. // Allow mods access before entering the main parse_bbc loop
  771. call_integration_hook('integrate_pre_parsebbc', array($message, $smileys, $cache_id, $parse_tags));
  772. // Sift out the bbc for a performance improvement.
  773. if (empty($bbc_codes) || $message === false || !empty($parse_tags))
  774. {
  775. if (!empty($modSettings['disabledBBC']))
  776. {
  777. $temp = explode(',', strtolower($modSettings['disabledBBC']));
  778. foreach ($temp as $tag)
  779. $disabled[trim($tag)] = true;
  780. }
  781. if (empty($modSettings['enableEmbeddedFlash']))
  782. $disabled['flash'] = true;
  783. /* The following bbc are formatted as an array, with keys as follows:
  784. tag: the tag's name - should be lowercase!
  785. type: one of...
  786. - (missing): [tag]parsed content[/tag]
  787. - unparsed_equals: [tag=xyz]parsed content[/tag]
  788. - parsed_equals: [tag=parsed data]parsed content[/tag]
  789. - unparsed_content: [tag]unparsed content[/tag]
  790. - closed: [tag], [tag/], [tag /]
  791. - unparsed_commas: [tag=1,2,3]parsed content[/tag]
  792. - unparsed_commas_content: [tag=1,2,3]unparsed content[/tag]
  793. - unparsed_equals_content: [tag=...]unparsed content[/tag]
  794. parameters: an optional array of parameters, for the form
  795. [tag abc=123]content[/tag]. The array is an associative array
  796. where the keys are the parameter names, and the values are an
  797. array which may contain the following:
  798. - match: a regular expression to validate and match the value.
  799. - quoted: true if the value should be quoted.
  800. - validate: callback to evaluate on the data, which is $data.
  801. - value: a string in which to replace $1 with the data.
  802. either it or validate may be used, not both.
  803. - optional: true if the parameter is optional.
  804. test: a regular expression to test immediately after the tag's
  805. '=', ' ' or ']'. Typically, should have a \] at the end.
  806. Optional.
  807. content: only available for unparsed_content, closed,
  808. unparsed_commas_content, and unparsed_equals_content.
  809. $1 is replaced with the content of the tag. Parameters
  810. are replaced in the form {param}. For unparsed_commas_content,
  811. $2, $3, ..., $n are replaced.
  812. before: only when content is not used, to go before any
  813. content. For unparsed_equals, $1 is replaced with the value.
  814. For unparsed_commas, $1, $2, ..., $n are replaced.
  815. after: similar to before in every way, except that it is used
  816. when the tag is closed.
  817. disabled_content: used in place of content when the tag is
  818. disabled. For closed, default is '', otherwise it is '$1' if
  819. block_level is false, '<div>$1</div>' elsewise.
  820. disabled_before: used in place of before when disabled. Defaults
  821. to '<div>' if block_level, '' if not.
  822. disabled_after: used in place of after when disabled. Defaults
  823. to '</div>' if block_level, '' if not.
  824. block_level: set to true the tag is a "block level" tag, similar
  825. to HTML. Block level tags cannot be nested inside tags that are
  826. not block level, and will not be implicitly closed as easily.
  827. One break following a block level tag may also be removed.
  828. trim: if set, and 'inside' whitespace after the begin tag will be
  829. removed. If set to 'outside', whitespace after the end tag will
  830. meet the same fate.
  831. validate: except when type is missing or 'closed', a callback to
  832. validate the data as $data. Depending on the tag's type, $data
  833. may be a string or an array of strings (corresponding to the
  834. replacement.)
  835. quoted: when type is 'unparsed_equals' or 'parsed_equals' only,
  836. may be not set, 'optional', or 'required' corresponding to if
  837. the content may be quoted. This allows the parser to read
  838. [tag="abc]def[esdf]"] properly.
  839. require_parents: an array of tag names, or not set. If set, the
  840. enclosing tag *must* be one of the listed tags, or parsing won't
  841. occur.
  842. require_children: similar to require_parents, if set children
  843. won't be parsed if they are not in the list.
  844. disallow_children: similar to, but very different from,
  845. require_children, if it is set the listed tags will not be
  846. parsed inside the tag.
  847. parsed_tags_allowed: an array restricting what BBC can be in the
  848. parsed_equals parameter, if desired.
  849. */
  850. $codes = array(
  851. array(
  852. 'tag' => 'abbr',
  853. 'type' => 'unparsed_equals',
  854. 'before' => '<abbr title="$1">',
  855. 'after' => '</abbr>',
  856. 'quoted' => 'optional',
  857. 'disabled_after' => ' ($1)',
  858. ),
  859. array(
  860. 'tag' => 'acronym',
  861. 'type' => 'unparsed_equals',
  862. 'before' => '<acronym title="$1">',
  863. 'after' => '</acronym>',
  864. 'quoted' => 'optional',
  865. 'disabled_after' => ' ($1)',
  866. ),
  867. array(
  868. 'tag' => 'anchor',
  869. 'type' => 'unparsed_equals',
  870. 'test' => '[#]?([A-Za-z][A-Za-z0-9_\-]*)\]',
  871. 'before' => '<span id="post_$1">',
  872. 'after' => '</span>',
  873. ),
  874. array(
  875. 'tag' => 'b',
  876. 'before' => '<strong>',
  877. 'after' => '</strong>',
  878. ),
  879. array(
  880. 'tag' => 'bdo',
  881. 'type' => 'unparsed_equals',
  882. 'before' => '<bdo dir="$1">',
  883. 'after' => '</bdo>',
  884. 'test' => '(rtl|ltr)\]',
  885. 'block_level' => true,
  886. ),
  887. array(
  888. 'tag' => 'black',
  889. 'before' => '<span style="color: black;" class="bbc_color">',
  890. 'after' => '</span>',
  891. ),
  892. array(
  893. 'tag' => 'blue',
  894. 'before' => '<span style="color: blue;" class="bbc_color">',
  895. 'after' => '</span>',
  896. ),
  897. array(
  898. 'tag' => 'br',
  899. 'type' => 'closed',
  900. 'content' => '<br />',
  901. ),
  902. array(
  903. 'tag' => 'center',
  904. 'before' => '<div align="center">',
  905. 'after' => '</div>',
  906. 'block_level' => true,
  907. ),
  908. array(
  909. 'tag' => 'code',
  910. 'type' => 'unparsed_content',
  911. 'content' => '<div class="codeheader">' . $txt['code'] . ': <a href="javascript:void(0);" onclick="return smfSelectText(this);" class="codeoperation">' . $txt['code_select'] . '</a></div>' . (isBrowser('gecko') || isBrowser('opera') ? '<pre style="margin: 0; padding: 0;">' : '') . '<code class="bbc_code">$1</code>' . (isBrowser('gecko') || isBrowser('opera') ? '</pre>' : ''),
  912. // @todo Maybe this can be simplified?
  913. 'validate' => isset($disabled['code']) ? null : create_function('&$tag, &$data, $disabled', '
  914. global $context;
  915. if (!isset($disabled[\'code\']))
  916. {
  917. $php_parts = preg_split(\'~(&lt;\?php|\?&gt;)~\', $data, -1, PREG_SPLIT_DELIM_CAPTURE);
  918. for ($php_i = 0, $php_n = count($php_parts); $php_i < $php_n; $php_i++)
  919. {
  920. // Do PHP code coloring?
  921. if ($php_parts[$php_i] != \'&lt;?php\')
  922. continue;
  923. $php_string = \'\';
  924. while ($php_i + 1 < count($php_parts) && $php_parts[$php_i] != \'?&gt;\')
  925. {
  926. $php_string .= $php_parts[$php_i];
  927. $php_parts[$php_i++] = \'\';
  928. }
  929. $php_parts[$php_i] = highlight_php_code($php_string . $php_parts[$php_i]);
  930. }
  931. // Fix the PHP code stuff...
  932. $data = str_replace("<pre style=\"display: inline;\">\t</pre>", "\t", implode(\'\', $php_parts));
  933. $data = str_replace("\t", "<span style=\"white-space: pre;\">\t</span>", $data);
  934. // Recent Opera bug requiring temporary fix. &nsbp; is needed before </code> to avoid broken selection.
  935. if ($context[\'browser\'][\'is_opera\'])
  936. $data .= \'&nbsp;\';
  937. }'),
  938. 'block_level' => true,
  939. ),
  940. array(
  941. 'tag' => 'code',
  942. 'type' => 'unparsed_equals_content',
  943. 'content' => '<div class="codeheader">' . $txt['code'] . ': ($2) <a href="#" onclick="return smfSelectText(this);" class="codeoperation">' . $txt['code_select'] . '</a></div>' . (isBrowser('gecko') || isBrowser('opera') ? '<pre style="margin: 0; padding: 0;">' : '') . '<code class="bbc_code">$1</code>' . (isBrowser('gecko') || isBrowser('opera') ? '</pre>' : ''),
  944. // @todo Maybe this can be simplified?
  945. 'validate' => isset($disabled['code']) ? null : create_function('&$tag, &$data, $disabled', '
  946. global $context;
  947. if (!isset($disabled[\'code\']))
  948. {
  949. $php_parts = preg_split(\'~(&lt;\?php|\?&gt;)~\', $data[0], -1, PREG_SPLIT_DELIM_CAPTURE);
  950. for ($php_i = 0, $php_n = count($php_parts); $php_i < $php_n; $php_i++)
  951. {
  952. // Do PHP code coloring?
  953. if ($php_parts[$php_i] != \'&lt;?php\')
  954. continue;
  955. $php_string = \'\';
  956. while ($php_i + 1 < count($php_parts) && $php_parts[$php_i] != \'?&gt;\')
  957. {
  958. $php_string .= $php_parts[$php_i];
  959. $php_parts[$php_i++] = \'\';
  960. }
  961. $php_parts[$php_i] = highlight_php_code($php_string . $php_parts[$php_i]);
  962. }
  963. // Fix the PHP code stuff...
  964. $data[0] = str_replace("<pre style=\"display: inline;\">\t</pre>", "\t", implode(\'\', $php_parts));
  965. $data[0] = str_replace("\t", "<span style=\"white-space: pre;\">\t</span>", $data[0]);
  966. // Recent Opera bug requiring temporary fix. &nsbp; is needed before </code> to avoid broken selection.
  967. if ($context[\'browser\'][\'is_opera\'])
  968. $data[0] .= \'&nbsp;\';
  969. }'),
  970. 'block_level' => true,
  971. ),
  972. array(
  973. 'tag' => 'color',
  974. 'type' => 'unparsed_equals',
  975. 'test' => '(#[\da-fA-F]{3}|#[\da-fA-F]{6}|[A-Za-z]{1,20}|rgb\(\d{1,3}, ?\d{1,3}, ?\d{1,3}\))\]',
  976. 'before' => '<span style="color: $1;" class="bbc_color">',
  977. 'after' => '</span>',
  978. ),
  979. array(
  980. 'tag' => 'email',
  981. 'type' => 'unparsed_content',
  982. 'content' => '<a href="mailto:$1" class="bbc_email">$1</a>',
  983. // @todo Should this respect guest_hideContacts?
  984. 'validate' => create_function('&$tag, &$data, $disabled', '$data = strtr($data, array(\'<br />\' => \'\'));'),
  985. ),
  986. array(
  987. 'tag' => 'email',
  988. 'type' => 'unparsed_equals',
  989. 'before' => '<a href="mailto:$1" class="bbc_email">',
  990. 'after' => '</a>',
  991. // @todo Should this respect guest_hideContacts?
  992. 'disallow_children' => array('email', 'ftp', 'url', 'iurl'),
  993. 'disabled_after' => ' ($1)',
  994. ),
  995. array(
  996. 'tag' => 'flash',
  997. 'type' => 'unparsed_commas_content',
  998. 'test' => '\d+,\d+\]',
  999. 'content' => (isBrowser('ie') ? '<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" width="$2" height="$3"><param name="movie" value="$1" /><param name="play" value="true" /><param name="loop" value="true" /><param name="quality" value="high" /><param name="AllowScriptAccess" value="never" /><embed src="$1" width="$2" height="$3" play="true" loop="true" quality="high" AllowScriptAccess="never" /><noembed><a href="$1" target="_blank" class="new_win">$1</a></noembed></object>' : '<embed type="application/x-shockwave-flash" src="$1" width="$2" height="$3" play="true" loop="true" quality="high" AllowScriptAccess="never" /><noembed><a href="$1" target="_blank" class="new_win">$1</a></noembed>'),
  1000. 'validate' => create_function('&$tag, &$data, $disabled', '
  1001. if (isset($disabled[\'url\']))
  1002. $tag[\'content\'] = \'$1\';
  1003. elseif (strpos($data[0], \'http://\') !== 0 && strpos($data[0], \'https://\') !== 0)
  1004. $data[0] = \'http://\' . $data[0];
  1005. '),
  1006. 'disabled_content' => '<a href="$1" target="_blank" class="new_win">$1</a>',
  1007. ),
  1008. array(
  1009. 'tag' => 'font',
  1010. 'type' => 'unparsed_equals',
  1011. 'test' => '[A-Za-z0-9_,\-\s]+?\]',
  1012. 'before' => '<span style="font-family: $1;" class="bbc_font">',
  1013. 'after' => '</span>',
  1014. ),
  1015. array(
  1016. 'tag' => 'ftp',
  1017. 'type' => 'unparsed_content',
  1018. 'content' => '<a href="$1" class="bbc_ftp new_win" target="_blank">$1</a>',
  1019. 'validate' => create_function('&$tag, &$data, $disabled', '
  1020. $data = strtr($data, array(\'<br />\' => \'\'));
  1021. if (strpos($data, \'ftp://\') !== 0 && strpos($data, \'ftps://\') !== 0)
  1022. $data = \'ftp://\' . $data;
  1023. '),
  1024. ),
  1025. array(
  1026. 'tag' => 'ftp',
  1027. 'type' => 'unparsed_equals',
  1028. 'before' => '<a href="$1" class="bbc_ftp new_win" target="_blank">',
  1029. 'after' => '</a>',
  1030. 'validate' => create_function('&$tag, &$data, $disabled', '
  1031. if (strpos($data, \'ftp://\') !== 0 && strpos($data, \'ftps://\') !== 0)
  1032. $data = \'ftp://\' . $data;
  1033. '),
  1034. 'disallow_children' => array('email', 'ftp', 'url', 'iurl'),
  1035. 'disabled_after' => ' ($1)',
  1036. ),
  1037. array(
  1038. 'tag' => 'glow',
  1039. 'type' => 'unparsed_commas',
  1040. 'test' => '[#0-9a-zA-Z\-]{3,12},([012]\d{1,2}|\d{1,2})(,[^]]+)?\]',
  1041. 'before' => isBrowser('ie') ? '<table border="0" cellpadding="0" cellspacing="0" style="display: inline; vertical-align: middle; font: inherit;"><tr><td style="filter: Glow(color=$1, strength=$2); font: inherit;">' : '<span style="text-shadow: $1 1px 1px 1px">',
  1042. 'after' => isBrowser('ie') ? '</td></tr></table> ' : '</span>',
  1043. ),
  1044. array(
  1045. 'tag' => 'green',
  1046. 'before' => '<span style="color: green;" class="bbc_color">',
  1047. 'after' => '</span>',
  1048. ),
  1049. array(
  1050. 'tag' => 'html',
  1051. 'type' => 'unparsed_content',
  1052. 'content' => '$1',
  1053. 'block_level' => true,
  1054. 'disabled_content' => '$1',
  1055. ),
  1056. array(
  1057. 'tag' => 'hr',
  1058. 'type' => 'closed',
  1059. 'content' => '<hr />',
  1060. 'block_level' => true,
  1061. ),
  1062. array(
  1063. 'tag' => 'i',
  1064. 'before' => '<em>',
  1065. 'after' => '</em>',
  1066. ),
  1067. array(
  1068. 'tag' => 'img',
  1069. 'type' => 'unparsed_content',
  1070. 'parameters' => array(
  1071. 'alt' => array('optional' => true),
  1072. 'width' => array('optional' => true, 'value' => ' width="$1"', 'match' => '(\d+)'),
  1073. 'height' => array('optional' => true, 'value' => ' height="$1"', 'match' => '(\d+)'),
  1074. ),
  1075. 'content' => '<img src="$1" alt="{alt}"{width}{height} class="bbc_img resized" />',
  1076. 'validate' => create_function('&$tag, &$data, $disabled', '
  1077. $data = strtr($data, array(\'<br />\' => \'\'));
  1078. if (strpos($data, \'http://\') !== 0 && strpos($data, \'https://\') !== 0)
  1079. $data = \'http://\' . $data;
  1080. '),
  1081. 'disabled_content' => '($1)',
  1082. ),
  1083. array(
  1084. 'tag' => 'img',
  1085. 'type' => 'unparsed_content',
  1086. 'content' => '<img src="$1" alt="" class="bbc_img" />',
  1087. 'validate' => create_function('&$tag, &$data, $disabled', '
  1088. $data = strtr($data, array(\'<br />\' => \'\'));
  1089. if (strpos($data, \'http://\') !== 0 && strpos($data, \'https://\') !== 0)
  1090. $data = \'http://\' . $data;
  1091. '),
  1092. 'disabled_content' => '($1)',
  1093. ),
  1094. array(
  1095. 'tag' => 'iurl',
  1096. 'type' => 'unparsed_content',
  1097. 'content' => '<a href="$1" class="bbc_link">$1</a>',
  1098. 'validate' => create_function('&$tag, &$data, $disabled', '
  1099. $data = strtr($data, array(\'<br />\' => \'\'));
  1100. if (strpos($data, \'http://\') !== 0 && strpos($data, \'https://\') !== 0)
  1101. $data = \'http://\' . $data;
  1102. '),
  1103. ),
  1104. array(
  1105. 'tag' => 'iurl',
  1106. 'type' => 'unparsed_equals',
  1107. 'before' => '<a href="$1" class="bbc_link">',
  1108. 'after' => '</a>',
  1109. 'validate' => create_function('&$tag, &$data, $disabled', '
  1110. if (substr($data, 0, 1) == \'#\')
  1111. $data = \'#post_\' . substr($data, 1);
  1112. elseif (strpos($data, \'http://\') !== 0 && strpos($data, \'https://\') !== 0)
  1113. $data = \'http://\' . $data;
  1114. '),
  1115. 'disallow_children' => array('email', 'ftp', 'url', 'iurl'),
  1116. 'disabled_after' => ' ($1)',
  1117. ),
  1118. array(
  1119. 'tag' => 'left',
  1120. 'before' => '<div style="text-align: left;">',
  1121. 'after' => '</div>',
  1122. 'block_level' => true,
  1123. ),
  1124. array(
  1125. 'tag' => 'li',
  1126. 'before' => '<li>',
  1127. 'after' => '</li>',
  1128. 'trim' => 'outside',
  1129. 'require_parents' => array('list'),
  1130. 'block_level' => true,
  1131. 'disabled_before' => '',
  1132. 'disabled_after' => '<br />',
  1133. ),
  1134. array(
  1135. 'tag' => 'list',
  1136. 'before' => '<ul class="bbc_list">',
  1137. 'after' => '</ul>',
  1138. 'trim' => 'inside',
  1139. 'require_children' => array('li', 'list'),
  1140. 'block_level' => true,
  1141. ),
  1142. array(
  1143. 'tag' => 'list',
  1144. 'parameters' => array(
  1145. 'type' => array('match' => '(none|disc|circle|square|decimal|decimal-leading-zero|lower-roman|upper-roman|lower-alpha|upper-alpha|lower-greek|lower-latin|upper-latin|hebrew|armenian|georgian|cjk-ideographic|hiragana|katakana|hiragana-iroha|katakana-iroha)'),
  1146. ),
  1147. 'before' => '<ul class="bbc_list" style="list-style-type: {type};">',
  1148. 'after' => '</ul>',
  1149. 'trim' => 'inside',
  1150. 'require_children' => array('li'),
  1151. 'block_level' => true,
  1152. ),
  1153. array(
  1154. 'tag' => 'ltr',
  1155. 'before' => '<div dir="ltr">',
  1156. 'after' => '</div>',
  1157. 'block_level' => true,
  1158. ),
  1159. array(
  1160. 'tag' => 'me',
  1161. 'type' => 'unparsed_equals',
  1162. 'before' => '<div class="meaction">* $1 ',
  1163. 'after' => '</div>',
  1164. 'quoted' => 'optional',
  1165. 'block_level' => true,
  1166. 'disabled_before' => '/me ',
  1167. 'disabled_after' => '<br />',
  1168. ),
  1169. array(
  1170. 'tag' => 'move',
  1171. 'before' => '<marquee>',
  1172. 'after' => '</marquee>',
  1173. 'block_level' => true,
  1174. 'disallow_children' => array('move'),
  1175. ),
  1176. array(
  1177. 'tag' => 'nobbc',
  1178. 'type' => 'unparsed_content',
  1179. 'content' => '$1',
  1180. ),
  1181. array(
  1182. 'tag' => 'php',
  1183. 'type' => 'unparsed_content',
  1184. 'content' => '<span class="phpcode">$1</span>',
  1185. 'validate' => isset($disabled['php']) ? null : create_function('&$tag, &$data, $disabled', '
  1186. if (!isset($disabled[\'php\']))
  1187. {
  1188. $add_begin = substr(trim($data), 0, 5) != \'&lt;?\';
  1189. $data = highlight_php_code($add_begin ? \'&lt;?php \' . $data . \'?&gt;\' : $data);
  1190. if ($add_begin)
  1191. $data = preg_replace(array(\'~^(.+?)&lt;\?.{0,40}?php(?:&nbsp;|\s)~\', \'~\?&gt;((?:</(font|span)>)*)$~\'), \'$1\', $data, 2);
  1192. }'),
  1193. 'block_level' => false,
  1194. 'disabled_content' => '$1',
  1195. ),
  1196. array(
  1197. 'tag' => 'pre',
  1198. 'before' => '<pre>',
  1199. 'after' => '</pre>',
  1200. ),
  1201. array(
  1202. 'tag' => 'quote',
  1203. 'before' => '<div class="quoteheader"><div class="topslice_quote">' . $txt['quote'] . '</div></div><blockquote>',
  1204. 'after' => '</blockquote><div class="quotefooter"><div class="botslice_quote"></div></div>',
  1205. 'block_level' => true,
  1206. ),
  1207. array(
  1208. 'tag' => 'quote',
  1209. 'parameters' => array(
  1210. 'author' => array('match' => '(.{1,192}?)', 'quoted' => true),
  1211. ),
  1212. 'before' => '<div class="quoteheader"><div class="topslice_quote">' . $txt['quote_from'] . ': {author}</div></div><blockquote>',
  1213. 'after' => '</blockquote><div class="quotefooter"><div class="botslice_quote"></div></div>',
  1214. 'block_level' => true,
  1215. ),
  1216. array(
  1217. 'tag' => 'quote',
  1218. 'type' => 'parsed_equals',
  1219. 'before' => '<div class="quoteheader"><div class="topslice_quote">' . $txt['quote_from'] . ': $1</div></div><blockquote>',
  1220. 'after' => '</blockquote><div class="quotefooter"><div class="botslice_quote"></div></div>',
  1221. 'quoted' => 'optional',
  1222. // Don't allow everything to be embedded with the author name.
  1223. 'parsed_tags_allowed' => array('url', 'iurl', 'ftp'),
  1224. 'block_level' => true,
  1225. ),
  1226. array(
  1227. 'tag' => 'quote',
  1228. 'parameters' => array(
  1229. 'author' => array('match' => '([^<>]{1,192}?)'),
  1230. 'link' => array('match' => '(?:board=\d+;)?((?:topic|threadid)=[\dmsg#\./]{1,40}(?:;start=[\dmsg#\./]{1,40})?|action=profile;u=\d+)'),
  1231. 'date' => array('match' => '(\d+)', 'validate' => 'timeformat'),
  1232. ),
  1233. 'before' => '<div class="quoteheader"><div class="topslice_quote"><a href="' . $scripturl . '?{link}">' . $txt['quote_from'] . ': {author} ' . $txt['search_on'] . ' {date}</a></div></div><blockquote>',
  1234. 'after' => '</blockquote><div class="quotefooter"><div class="botslice_quote"></div></div>',
  1235. 'block_level' => true,
  1236. ),
  1237. array(
  1238. 'tag' => 'quote',
  1239. 'parameters' => array(
  1240. 'author' => array('match' => '(.{1,192}?)'),
  1241. ),
  1242. 'before' => '<div class="quoteheader"><div class="topslice_quote">' . $txt['quote_from'] . ': {author}</div></div><blockquote>',
  1243. 'after' => '</blockquote><div class="quotefooter"><div class="botslice_quote"></div></div>',
  1244. 'block_level' => true,
  1245. ),
  1246. array(
  1247. 'tag' => 'red',
  1248. 'before' => '<span style="color: red;" class="bbc_color">',
  1249. 'after' => '</span>',
  1250. ),
  1251. array(
  1252. 'tag' => 'right',
  1253. 'before' => '<div style="text-align: right;">',
  1254. 'after' => '</div>',
  1255. 'block_level' => true,
  1256. ),
  1257. array(
  1258. 'tag' => 'rtl',
  1259. 'before' => '<div dir="rtl">',
  1260. 'after' => '</div>',
  1261. 'block_level' => true,
  1262. ),
  1263. array(
  1264. 'tag' => 's',
  1265. 'before' => '<del>',
  1266. 'after' => '</del>',
  1267. ),
  1268. array(
  1269. 'tag' => 'shadow',
  1270. 'type' => 'unparsed_commas',
  1271. 'test' => '[#0-9a-zA-Z\-]{3,12},(left|right|top|bottom|[0123]\d{0,2})\]',
  1272. 'before' => isBrowser('ie') ? '<span style="display: inline-block; filter: Shadow(color=$1, direction=$2); height: 1.2em;">' : '<span style="text-shadow: $1 $2">',
  1273. 'after' => '</span>',
  1274. 'validate' => isBrowser('ie') ? create_function('&$tag, &$data, $disabled', '
  1275. if ($data[1] == \'left\')
  1276. $data[1] = 270;
  1277. elseif ($data[1] == \'right\')
  1278. $data[1] = 90;
  1279. elseif ($data[1] == \'top\')
  1280. $data[1] = 0;
  1281. elseif ($data[1] == \'bottom\')
  1282. $data[1] = 180;
  1283. else
  1284. $data[1] = (int) $data[1];') : create_function('&$tag, &$data, $disabled', '
  1285. if ($data[1] == \'top\' || (is_numeric($data[1]) && $data[1] < 50))
  1286. $data[1] = \'0 -2px 1px\';
  1287. elseif ($data[1] == \'right\' || (is_numeric($data[1]) && $data[1] < 100))
  1288. $data[1] = \'2px 0 1px\';
  1289. elseif ($data[1] == \'bottom\' || (is_numeric($data[1]) && $data[1] < 190))
  1290. $data[1] = \'0 2px 1px\';
  1291. elseif ($data[1] == \'left\' || (is_numeric($data[1]) && $data[1] < 280))
  1292. $data[1] = \'-2px 0 1px\';
  1293. else
  1294. $data[1] = \'1px 1px 1px\';'),
  1295. ),
  1296. array(
  1297. 'tag' => 'size',
  1298. 'type' => 'unparsed_equals',
  1299. 'test' => '([1-9][\d]?p[xt]|small(?:er)?|large[r]?|x[x]?-(?:small|large)|medium|(0\.[1-9]|[1-9](\.[\d][\d]?)?)?em)\]',
  1300. 'before' => '<span style="font-size: $1;" class="bbc_size">',
  1301. 'after' => '</span>',
  1302. ),
  1303. array(
  1304. 'tag' => 'size',
  1305. 'type' => 'unparsed_equals',
  1306. 'test' => '[1-7]\]',
  1307. 'before' => '<span style="font-size: $1;" class="bbc_size">',
  1308. 'after' => '</span>',
  1309. 'validate' => create_function('&$tag, &$data, $disabled', '
  1310. $sizes = array(1 => 0.7, 2 => 1.0, 3 => 1.35, 4 => 1.45, 5 => 2.0, 6 => 2.65, 7 => 3.95);
  1311. $data = $sizes[$data] . \'em\';'
  1312. ),
  1313. ),
  1314. array(
  1315. 'tag' => 'sub',
  1316. 'before' => '<sub>',
  1317. 'after' => '</sub>',
  1318. ),
  1319. array(
  1320. 'tag' => 'sup',
  1321. 'before' => '<sup>',
  1322. 'after' => '</sup>',
  1323. ),
  1324. array(
  1325. 'tag' => 'table',
  1326. 'before' => '<table class="bbc_table">',
  1327. 'after' => '</table>',
  1328. 'trim' => 'inside',
  1329. 'require_children' => array('tr'),
  1330. 'block_level' => true,
  1331. ),
  1332. array(
  1333. 'tag' => 'td',
  1334. 'before' => '<td>',
  1335. 'after' => '</td>',
  1336. 'require_parents' => array('tr'),
  1337. 'trim' => 'outside',
  1338. 'block_level' => true,
  1339. 'disabled_before' => '',
  1340. 'disabled_after' => '',
  1341. ),
  1342. array(
  1343. 'tag' => 'time',
  1344. 'type' => 'unparsed_content',
  1345. 'content' => '$1',
  1346. 'validate' => create_function('&$tag, &$data, $disabled', '
  1347. if (is_numeric($data))
  1348. $data = timeformat($data);
  1349. else
  1350. $tag[\'content\'] = \'[time]$1[/time]\';'),
  1351. ),
  1352. array(
  1353. 'tag' => 'tr',
  1354. 'before' => '<tr>',
  1355. 'after' => '</tr>',
  1356. 'require_parents' => array('table'),
  1357. 'require_children' => array('td'),
  1358. 'trim' => 'both',
  1359. 'block_level' => true,
  1360. 'disabled_before' => '',
  1361. 'disabled_after' => '',
  1362. ),
  1363. array(
  1364. 'tag' => 'tt',
  1365. 'before' => '<span class="bbc_tt">',
  1366. 'after' => '</span>',
  1367. ),
  1368. array(
  1369. 'tag' => 'u',
  1370. 'before' => '<span class="bbc_u">',
  1371. 'after' => '</span>',
  1372. ),
  1373. array(
  1374. 'tag' => 'url',
  1375. 'type' => 'unparsed_content',
  1376. 'content' => '<a href="$1" class="bbc_link" target="_blank">$1</a>',
  1377. 'validate' => create_function('&$tag, &$data, $disabled', '
  1378. $data = strtr($data, array(\'<br />\' => \'\'));
  1379. if (strpos($data, \'http://\') !== 0 && strpos($data, \'https://\') !== 0)
  1380. $data = \'http://\' . $data;
  1381. '),
  1382. ),
  1383. array(
  1384. 'tag' => 'url',
  1385. 'type' => 'unparsed_equals',
  1386. 'before' => '<a href="$1" class="bbc_link" target="_blank">',
  1387. 'after' => '</a>',
  1388. 'validate' => create_function('&$tag, &$data, $disabled', '
  1389. if (strpos($data, \'http://\') !== 0 && strpos($data, \'https://\') !== 0)
  1390. $data = \'http://\' . $data;
  1391. '),
  1392. 'disallow_children' => array('email', 'ftp', 'url', 'iurl'),
  1393. 'disabled_after' => ' ($1)',
  1394. ),
  1395. array(
  1396. 'tag' => 'white',
  1397. 'before' => '<span style="color: white;" class="bbc_color">',
  1398. 'after' => '</span>',
  1399. ),
  1400. );
  1401. // Let mods add new BBC without hassle.
  1402. call_integration_hook('integrate_bbc_codes', array(&$codes));
  1403. // This is mainly for the bbc manager, so it's easy to add tags above. Custom BBC should be added above this line.
  1404. if ($message === false)
  1405. {
  1406. if (isset($temp_bbc))
  1407. $bbc_codes = $temp_bbc;
  1408. return $codes;
  1409. }
  1410. // So the parser won't skip them.
  1411. $itemcodes = array(
  1412. '*' => 'disc',
  1413. '@' => 'disc',
  1414. '+' => 'square',
  1415. 'x' => 'square',
  1416. '#' => 'square',
  1417. 'o' => 'circle',
  1418. 'O' => 'circle',
  1419. '0' => 'circle',
  1420. );
  1421. if (!isset($disabled['li']) && !isset($disabled['list']))
  1422. {
  1423. foreach ($itemcodes as $c => $dummy)
  1424. $bbc_codes[$c] = array();
  1425. }
  1426. // Inside these tags autolink is not recommendable.
  1427. $no_autolink_tags = array(
  1428. 'url',
  1429. 'iurl',
  1430. 'ftp',
  1431. 'email',
  1432. );
  1433. // Shhhh!
  1434. if (!isset($disabled['color']))
  1435. {
  1436. $codes[] = array(
  1437. 'tag' => 'chrissy',
  1438. 'before' => '<span style="color: #cc0099;">',
  1439. 'after' => ' :-*</span>',
  1440. );
  1441. $codes[] = array(
  1442. 'tag' => 'kissy',
  1443. 'before' => '<span style="color: #cc0099;">',
  1444. 'after' => ' :-*</span>',
  1445. );
  1446. }
  1447. foreach ($codes as $code)
  1448. {
  1449. // If we are not doing every tag only do ones we are interested in.
  1450. if (empty($parse_tags) || in_array($code['tag'], $parse_tags))
  1451. $bbc_codes[substr($code['tag'], 0, 1)][] = $code;
  1452. }
  1453. $codes = null;
  1454. }
  1455. // Shall we take the time to cache this?
  1456. if ($cache_id != '' && !empty($modSettings['cache_enable']) && (($modSettings['cache_enable'] >= 2 && isset($message[1000])) || isset($message[2400])) && empty($parse_tags))
  1457. {
  1458. // It's likely this will change if the message is modified.
  1459. $cache_key = 'parse:' . $cache_id . '-' . md5(md5($message) . '-' . $smileys . (empty($disabled) ? '' : implode(',', array_keys($disabled))) . serialize($context['browser']) . $txt['lang_locale'] . $user_info['time_offset'] . $user_info['time_format']);
  1460. if (($temp = cache_get_data($cache_key, 240)) != null)
  1461. return $temp;
  1462. $cache_t = microtime();
  1463. }
  1464. if ($smileys === 'print')
  1465. {
  1466. // [glow], [shadow], and [move] can't really be printed.
  1467. $disabled['glow'] = true;
  1468. $disabled['shadow'] = true;
  1469. $disabled['move'] = true;
  1470. // Colors can't well be displayed... supposed to be black and white.
  1471. $disabled['color'] = true;
  1472. $disabled['black'] = true;
  1473. $disabled['blue'] = true;
  1474. $disabled['white'] = true;
  1475. $disabled['red'] = true;
  1476. $disabled['green'] = true;
  1477. $disabled['me'] = true;
  1478. // Color coding doesn't make sense.
  1479. $disabled['php'] = true;
  1480. // Links are useless on paper... just show the link.
  1481. $disabled['ftp'] = true;
  1482. $disabled['url'] = true;
  1483. $disabled['iurl'] = true;
  1484. $disabled['email'] = true;
  1485. $disabled['flash'] = true;
  1486. // @todo Change maybe?
  1487. if (!isset($_GET['images']))
  1488. $disabled['img'] = true;
  1489. // @todo Interface/setting to add more?
  1490. }
  1491. $open_tags = array();
  1492. $message = strtr($message, array("\n" => '<br />'));
  1493. // The non-breaking-space looks a bit different each time.
  1494. $non_breaking_space = $context['utf8'] ? '\x{A0}' : '\xA0';
  1495. $pos = -1;
  1496. while ($pos !== false)
  1497. {
  1498. $last_pos = isset($last_pos) ? max($pos, $last_pos) : $pos;
  1499. $pos = strpos($message, '[', $pos + 1);
  1500. // Failsafe.
  1501. if ($pos === false || $last_pos > $pos)
  1502. $pos = strlen($message) + 1;
  1503. // Can't have a one letter smiley, URL, or email! (sorry.)
  1504. if ($last_pos < $pos - 1)
  1505. {
  1506. // Make sure the $last_pos is not negative.
  1507. $last_pos = max($last_pos, 0);
  1508. // Pick a block of data to do some raw fixing on.
  1509. $data = substr($message, $last_pos, $pos - $last_pos);
  1510. // Take care of some HTML!
  1511. if (!empty($modSettings['enablePostHTML']) && strpos($data, '&lt;') !== false)
  1512. {
  1513. $data = preg_replace('~&lt;a\s+href=((?:&quot;)?)((?:https?://|ftps?://|mailto:)\S+?)\\1&gt;~i', '[url=$2]', $data);
  1514. $data = preg_replace('~&lt;/a&gt;~i', '[/url]', $data);
  1515. // <br /> should be empty.
  1516. $empty_tags = array('br', 'hr');
  1517. foreach ($empty_tags as $tag)
  1518. $data = str_replace(array('&lt;' . $tag . '&gt;', '&lt;' . $tag . '/&gt;', '&lt;' . $tag . ' /&gt;'), '[' . $tag . ' /]', $data);
  1519. // b, u, i, s, pre... basic tags.
  1520. $closable_tags = array('b', 'u', 'i', 's', 'em', 'ins', 'del', 'pre', 'blockquote');
  1521. foreach ($closable_tags as $tag)
  1522. {
  1523. $diff = substr_count($data, '&lt;' . $tag . '&gt;') - substr_count($data, '&lt;/' . $tag . '&gt;');
  1524. $data = strtr($data, array('&lt;' . $tag . '&gt;' => '<' . $tag . '>', '&lt;/' . $tag . '&gt;' => '</' . $tag . '>'));
  1525. if ($diff > 0)
  1526. $data = substr($data, 0, -1) . str_repeat('</' . $tag . '>', $diff) . substr($data, -1);
  1527. }
  1528. // Do <img ... /> - with security... action= -> action-.
  1529. preg_match_all('~&lt;img\s+src=((?:&quot;)?)((?:https?://|ftps?://)\S+?)\\1(?:\s+alt=(&quot;.*?&quot;|\S*?))?(?:\s?/)?&gt;~i', $data, $matches, PREG_PATTERN_ORDER);
  1530. if (!empty($matches[0]))
  1531. {
  1532. $replaces = array();
  1533. foreach ($matches[2] as $match => $imgtag)
  1534. {
  1535. $alt = empty($matches[3][$match]) ? '' : ' alt=' . preg_replace('~^&quot;|&quot;$~', '', $matches[3][$match]);
  1536. // Remove action= from the URL - no funny business, now.
  1537. if (preg_match('~action(=|%3d)(?!dlattach)~i', $imgtag) != 0)
  1538. $imgtag = preg_replace('~action(?:=|%3d)(?!dlattach)~i', 'action-', $imgtag);
  1539. // Check if the image is larger than allowed.
  1540. if (!empty($modSettings['max_image_width']) && !empty($modSettings['max_image_height']))
  1541. {
  1542. list ($width, $height) = url_image_size($imgtag);
  1543. if (!empty($modSettings['max_image_width']) && $width > $modSettings['max_image_width'])
  1544. {
  1545. $height = (int) (($modSettings['max_image_width'] * $height) / $width);
  1546. $width = $modSettings['max_image_width'];
  1547. }
  1548. if (!empty($modSettings['max_image_height']) && $height > $modSettings['max_image_height'])
  1549. {
  1550. $width = (int) (($modSettings['max_image_height'] * $width) / $height);
  1551. $height = $modSettings['max_image_height'];
  1552. }
  1553. // Set the new image tag.
  1554. $replaces[$matches[0][$match]] = '[img width=' . $width . ' height=' . $height . $alt . ']' . $imgtag . '[/img]';
  1555. }
  1556. else
  1557. $replaces[$matches[0][$match]] = '[img' . $alt . ']' . $imgtag . '[/img]';
  1558. }
  1559. $data = strtr($data, $replaces);
  1560. }
  1561. }
  1562. if (!empty($modSettings['autoLinkUrls']))
  1563. {
  1564. // Are we inside tags that should be auto linked?
  1565. $no_autolink_area = false;
  1566. if (!empty($open_tags))
  1567. {
  1568. foreach ($open_tags as $open_tag)
  1569. if (in_array($open_tag['tag'], $no_autolink_tags))
  1570. $no_autolink_area = true;
  1571. }
  1572. // Don't go backwards.
  1573. // @todo Don't think is the real solution....
  1574. $lastAutoPos = isset($lastAutoPos) ? $lastAutoPos : 0;
  1575. if ($pos < $lastAutoPos)
  1576. $no_autolink_area = true;
  1577. $lastAutoPos = $pos;
  1578. if (!$no_autolink_area)
  1579. {
  1580. // Parse any URLs.... have to get rid of the @ problems some things cause... stupid email addresses.
  1581. if (!isset($disabled['url']) && (strpos($data, '://') !== false || strpos($data, 'www.') !== false) && strpos($data, '[url') === false)
  1582. {
  1583. // Switch out quotes really quick because they can cause problems.
  1584. $data = strtr($data, array('&#039;' => '\'', '&nbsp;' => $context['utf8'] ? "\xC2\xA0" : "\xA0", '&quot;' => '>">', '"' => '<"<', '&lt;' => '<lt<'));
  1585. // Only do this if the preg survives.
  1586. if (is_string($result = preg_replace(array(
  1587. '~(?<=[\s>\.(;\'"]|^)((?:http|https)://[\w\-_%@:|]+(?:\.[\w\-_%]+)*(?::\d+)?(?:/[\w\-_\~%\.@!,\?&;=#(){}+:\'\\\\]*)*[/\w\-_\~%@\?;=#}\\\\]?)~i',
  1588. '~(?<=[\s>\.(;\'"]|^)((?:ftp|ftps)://[\w\-_%@:|]+(?:\.[\w\-_%]+)*(?::\d+)?(?:/[\w\-_\~%\.@,\?&;=#(){}+:\'\\\\]*)*[/\w\-_\~%@\?;=#}\\\\]?)~i',
  1589. '~(?<=[\s>(\'<]|^)(www(?:\.[\w\-_]+)+(?::\d+)?(?:/[\w\-_\~%\.@!,\?&;=#(){}+:\'\\\\]*)*[/\w\-_\~%@\?;=#}\\\\])~i'
  1590. ), array(
  1591. '[url]$1[/url]',
  1592. '[ftp]$1[/ftp]',
  1593. '[url=http://$1]$1[/url]'
  1594. ), $data)))
  1595. $data = $result;
  1596. $data = strtr($data, array('\'' => '&#039;', $context['utf8'] ? "\xC2\xA0" : "\xA0" => '&nbsp;', '>">' => '&quot;', '<"<' => '"', '<lt<' => '&lt;'));
  1597. }
  1598. // Next, emails...
  1599. if (!isset($disabled['email']) && strpos($data, '@') !== false && strpos($data, '[email') === false)
  1600. {
  1601. $data = preg_replace('~(?<=[\?\s' . $non_breaking_space . '\[\]()*\\\;>]|^)([\w\-\.]{1,80}@[\w\-]+\.[\w\-\.]+[\w\-])(?=[?,\s' . $non_breaking_space . '\[\]()*\\\]|$|<br />|&nbsp;|&gt;|&lt;|&quot;|&#039;|\.(?:\.|;|&nbsp;|\s|$|<br />))~' . ($context['utf8'] ? 'u' : ''), '[email]$1[/email]', $data);
  1602. $data = preg_replace('~(?<=<br />)([\w\-\.]{1,80}@[\w\-]+\.[\w\-\.]+[\w\-])(?=[?\.,;\s' . $non_breaking_space . '\[\]()*\\\]|$|<br />|&nbsp;|&gt;|&lt;|&quot;|&#039;)~' . ($context['utf8'] ? 'u' : ''), '[email]$1[/email]', $data);
  1603. }
  1604. }
  1605. }
  1606. $data = strtr($data, array("\t" => '&nbsp;&nbsp;&nbsp;'));
  1607. // If it wasn't changed, no copying or other boring stuff has to happen!
  1608. if ($data != substr($message, $last_pos, $pos - $last_pos))
  1609. {
  1610. $message = substr($message, 0, $last_pos) . $data . substr($message, $pos);
  1611. // Since we changed it, look again in case we added or removed a tag. But we don't want to skip any.
  1612. $old_pos = strlen($data) + $last_pos;
  1613. $pos = strpos($message, '[', $last_pos);
  1614. $pos = $pos === false ? $old_pos : min($pos, $old_pos);
  1615. }
  1616. }
  1617. // Are we there yet? Are we there yet?
  1618. if ($pos >= strlen($message) - 1)
  1619. break;
  1620. $tags = strtolower($message[$pos + 1]);
  1621. if ($tags == '/' && !empty($open_tags))
  1622. {
  1623. $pos2 = strpos($message, ']', $pos + 1);
  1624. if ($pos2 == $pos + 2)
  1625. continue;
  1626. $look_for = strtolower(substr($message, $pos + 2, $pos2 - $pos - 2));
  1627. $to_close = array();
  1628. $block_level = null;
  1629. do
  1630. {
  1631. $tag = array_pop($open_tags);
  1632. if (!$tag)
  1633. break;
  1634. if (!empty($tag['block_level']))
  1635. {
  1636. // Only find out if we need to.
  1637. if ($block_level === false)
  1638. {
  1639. array_push($open_tags, $tag);
  1640. break;
  1641. }
  1642. // The idea is, if we are LOOKING for a block level tag, we can close them on the way.
  1643. if (strlen($look_for) > 0 && isset($bbc_codes[$look_for[0]]))
  1644. {
  1645. foreach ($bbc_codes[$look_for[0]] as $temp)
  1646. if ($temp['tag'] == $look_for)
  1647. {
  1648. $block_level = !empty($temp['block_level']);
  1649. break;
  1650. }
  1651. }
  1652. if ($block_level !== true)
  1653. {
  1654. $block_level = false;
  1655. array_push($open_tags, $tag);
  1656. break;
  1657. }
  1658. }
  1659. $to_close[] = $tag;
  1660. }
  1661. while ($tag['tag'] != $look_for);
  1662. // Did we just eat through everything and not find it?
  1663. if ((empty($open_tags) && (empty($tag) || $tag['tag'] != $look_for)))
  1664. {
  1665. $open_tags = $to_close;
  1666. continue;
  1667. }
  1668. elseif (!empty($to_close) && $tag['tag'] != $look_for)
  1669. {
  1670. if ($block_level === null && isset($look_for[0], $bbc_codes[$look_for[0]]))
  1671. {
  1672. foreach ($bbc_codes[$look_for[0]] as $temp)
  1673. if ($temp['tag'] == $look_for)
  1674. {
  1675. $block_level = !empty($temp['block_level']);
  1676. break;
  1677. }
  1678. }
  1679. // We're not looking for a block level tag (or maybe even a tag that exists...)
  1680. if (!$block_level)
  1681. {
  1682. foreach ($to_close as $tag)
  1683. array_push($open_tags, $tag);
  1684. continue;
  1685. }
  1686. }
  1687. foreach ($to_close as $tag)
  1688. {
  1689. $message = substr($message, 0, $pos) . "\n" . $tag['after'] . "\n" . substr($message, $pos2 + 1);
  1690. $pos += strlen($tag['after']) + 2;
  1691. $pos2 = $pos - 1;
  1692. // See the comment at the end of the big loop - just eating whitespace ;).
  1693. if (!empty($tag['block_level']) && substr($message, $pos, 6) == '<br />')
  1694. $message = substr($message, 0, $pos) . substr($message, $pos + 6);
  1695. if (!empty($tag['trim']) && $tag['trim'] != 'inside' && preg_match('~(<br />|&nbsp;|\s)*~', substr($message, $pos), $matches) != 0)
  1696. $message = substr($message, 0, $pos) . substr($message, $pos + strlen($matches[0]));
  1697. }
  1698. if (!empty($to_close))
  1699. {
  1700. $to_close = array();
  1701. $pos--;
  1702. }
  1703. continue;
  1704. }
  1705. // No tags for this character, so just keep going (fastest possible course.)
  1706. if (!isset($bbc_codes[$tags]))
  1707. continue;
  1708. $inside = empty($open_tags) ? null : $open_tags[count($open_tags) - 1];
  1709. $tag = null;
  1710. foreach ($bbc_codes[$tags] as $possible)
  1711. {
  1712. $pt_strlen = strlen($possible['tag']);
  1713. // Not a match?
  1714. if (strtolower(substr($message, $pos + 1, $pt_strlen)) != $possible['tag'])
  1715. continue;
  1716. $next_c = $message[$pos + 1 + $pt_strlen];
  1717. // A test validation?
  1718. if (isset($possible['test']) && preg_match('~^' . $possible['test'] . '~', substr($message, $pos + 1 + $pt_strlen + 1)) === 0)
  1719. continue;
  1720. // Do we want parameters?
  1721. elseif (!empty($possible['parameters']))
  1722. {
  1723. if ($next_c != ' ')
  1724. continue;
  1725. }
  1726. elseif (isset($possible['type']))
  1727. {
  1728. // Do we need an equal sign?
  1729. if (in_array($possible['type'], array('unparsed_equals', 'unparsed_commas', 'unparsed_commas_content', 'unparsed_equals_content', 'parsed_equals')) && $next_c != '=')
  1730. continue;
  1731. // Maybe we just want a /...
  1732. if ($possible['type'] == 'closed' && $next_c != ']' && substr($message, $pos + 1 + $pt_strlen, 2) != '/]' && substr($message, $pos + 1 + $pt_strlen, 3) != ' /]')
  1733. continue;
  1734. // An immediate ]?
  1735. if ($possible['type'] == 'unparsed_content' && $next_c != ']')
  1736. continue;
  1737. }
  1738. // No type means 'parsed_content', which demands an immediate ] without parameters!
  1739. elseif ($next_c != ']')
  1740. continue;
  1741. // Check allowed tree?
  1742. if (isset($possible['require_parents']) && ($inside === null || !in_array($inside['tag'], $possible['require_parents'])))
  1743. continue;
  1744. elseif (isset($inside['require_children']) && !in_array($possible['tag'], $inside['require_children']))
  1745. continue;
  1746. // If this is in the list of disallowed child tags, don't parse it.
  1747. elseif (isset($inside['disallow_children']) && in_array($possible['tag'], $inside['disallow_children']))
  1748. continue;
  1749. $pos1 = $pos + 1 + $pt_strlen + 1;
  1750. // Quotes can have alternate styling, we do this php-side due to all the permutations of quotes.
  1751. if ($possible['tag'] == 'quote')
  1752. {
  1753. // Start with standard
  1754. $quote_alt = false;
  1755. foreach ($open_tags as $open_quote)
  1756. {
  1757. // Every parent quote this quote has flips the styling
  1758. if ($open_quote['tag'] == 'quote')
  1759. $quote_alt = !$quote_alt;
  1760. }
  1761. // Add a class to the quote to style alternating blockquotes
  1762. $possible['before'] = strtr($possible['before'], array('<blockquote>' => '<blockquote class="bbc_' . ($quote_alt ? 'alternate' : 'standard') . '_quote">'));
  1763. }
  1764. // This is long, but it makes things much easier and cleaner.
  1765. if (!empty($possible['parameters']))
  1766. {
  1767. $preg = array();
  1768. foreach ($possible['parameters'] as $p => $info)
  1769. $preg[] = '(\s+' . $p . '=' . (empty($info['quoted']) ? '' : '&quot;') . (isset($info['match']) ? $info['match'] : '(.+?)') . (empty($info['quoted']) ? '' : '&quot;') . ')' . (empty($info['optional']) ? '' : '?');
  1770. // Okay, this may look ugly and it is, but it's not going to happen much and it is the best way of allowing any order of parameters but still parsing them right.
  1771. $match = false;
  1772. $orders = permute($preg);
  1773. foreach ($orders as $p)
  1774. if (preg_match('~^' . implode('', $p) . '\]~i', substr($message, $pos1 - 1), $matches) != 0)
  1775. {
  1776. $match = true;
  1777. break;
  1778. }
  1779. // Didn't match our parameter list, try the next possible.
  1780. if (!$match)
  1781. continue;
  1782. $params = array();
  1783. for ($i = 1, $n = count($matches); $i < $n; $i += 2)
  1784. {
  1785. $key = strtok(ltrim($matches[$i]), '=');
  1786. if (isset($possible['parameters'][$key]['value']))
  1787. $params['{' . $key . '}'] = strtr($possible['parameters'][$key]['value'], array('$1' => $matches[$i + 1]));
  1788. elseif (isset($possible['parameters'][$key]['validate']))
  1789. $params['{' . $key . '}'] = $possible['parameters'][$key]['validate']($matches[$i + 1]);
  1790. else
  1791. $params['{' . $key . '}'] = $matches[$i + 1];
  1792. // Just to make sure: replace any $ or { so they can't interpolate wrongly.
  1793. $params['{' . $key . '}'] = strtr($params['{' . $key . '}'], array('$' => '&#036;', '{' => '&#123;'));
  1794. }
  1795. foreach ($possible['parameters'] as $p => $info)
  1796. {
  1797. if (!isset($params['{' . $p . '}']))
  1798. $params['{' . $p . '}'] = '';
  1799. }
  1800. $tag = $possible;
  1801. // Put the parameters into the string.
  1802. if (isset($tag['before']))
  1803. $tag['before'] = strtr($tag['before'], $params);
  1804. if (isset($tag['after']))
  1805. $tag['after'] = strtr($tag['after'], $params);
  1806. if (isset($tag['content']))
  1807. $tag['content'] = strtr($tag['content'], $params);
  1808. $pos1 += strlen($matches[0]) - 1;
  1809. }
  1810. else
  1811. $tag = $possible;
  1812. break;
  1813. }
  1814. // Item codes are complicated buggers... they are implicit [li]s and can make [list]s!
  1815. if ($smileys !== false && $tag === null && isset($itemcodes[$message[$pos + 1]]) && $message[$pos + 2] == ']' && !isset($disabled['list']) && !isset($disabled['li']))
  1816. {
  1817. if ($message[$pos + 1] == '0' && !in_array($message[$pos - 1], array(';', ' ', "\t", '>')))
  1818. continue;
  1819. $tag = $itemcodes[$message[$pos + 1]];
  1820. // First let's set up the tree: it needs to be in a list, or after an li.
  1821. if ($inside === null || ($inside['tag'] != 'list' && $inside['tag'] != 'li'))
  1822. {
  1823. $open_tags[] = array(
  1824. 'tag' => 'list',
  1825. 'after' => '</ul>',
  1826. 'block_level' => true,
  1827. 'require_children' => array('li'),
  1828. 'disallow_children' => isset($inside['disallow_children']) ? $inside['disallow_children'] : null,
  1829. );
  1830. $code = '<ul class="bbc_list">';
  1831. }
  1832. // We're in a list item already: another itemcode? Close it first.
  1833. elseif ($inside['tag'] == 'li')
  1834. {
  1835. array_pop($open_tags);
  1836. $code = '</li>';
  1837. }
  1838. else
  1839. $code = '';
  1840. // Now we open a new tag.
  1841. $open_tags[] = array(
  1842. 'tag' => 'li',
  1843. 'after' => '</li>',
  1844. 'trim' => 'outside',
  1845. 'block_level' => true,
  1846. 'disallow_children' => isset($inside['disallow_children']) ? $inside['disallow_children'] : null,
  1847. );
  1848. // First, open the tag...
  1849. $code .= '<li' . ($tag == '' ? '' : ' type="' . $tag . '"') . '>';
  1850. $message = substr($message, 0, $pos) . "\n" . $code . "\n" . substr($message, $pos + 3);
  1851. $pos += strlen($code) - 1 + 2;
  1852. // Next, find the next break (if any.) If there's more itemcode after it, keep it going - otherwise close!
  1853. $pos2 = strpos($message, '<br />', $pos);
  1854. $pos3 = strpos($message, '[/', $pos);
  1855. if ($pos2 !== false && ($pos2 <= $pos3 || $pos3 === false))
  1856. {
  1857. preg_match('~^(<br />|&nbsp;|\s|\[)+~', substr($message, $pos2 + 6), $matches);
  1858. $message = substr($message, 0, $pos2) . "\n" . (!empty($matches[0]) && substr($matches[0], -1) == '[' ? '[/li]' : '[/li][/list]') . "\n" . substr($message, $pos2);
  1859. $open_tags[count($open_tags) - 2]['after'] = '</ul>';
  1860. }
  1861. // Tell the [list] that it needs to close specially.
  1862. else
  1863. {
  1864. // Move the li over, because we're not sure what we'll hit.
  1865. $open_tags[count($open_tags) - 1]['after'] = '';
  1866. $open_tags[count($open_tags) - 2]['after'] = '</li></ul>';
  1867. }
  1868. continue;
  1869. }
  1870. // Implicitly close lists and tables if something other than what's required is in them. This is needed for itemcode.
  1871. if ($tag === null && $inside !== null && !empty($inside['require_children']))
  1872. {
  1873. array_pop($open_tags);
  1874. $message = substr($message, 0, $pos) . "\n" . $inside['after'] . "\n" . substr($message, $pos);
  1875. $pos += strlen($inside['after']) - 1 + 2;
  1876. }
  1877. // No tag? Keep looking, then. Silly people using brackets without actual tags.
  1878. if ($tag === null)
  1879. continue;
  1880. // Propagate the list to the child (so wrapping the disallowed tag won't work either.)
  1881. if (isset($inside['disallow_children']))
  1882. $tag['disallow_children'] = isset($tag['disallow_children']) ? array_unique(array_merge($tag['disallow_children'], $inside['disallow_children'])) : $inside['disallow_children'];
  1883. // Is this tag disabled?
  1884. if (isset($disabled[$tag['tag']]))
  1885. {
  1886. if (!isset($tag['disabled_before']) && !isset($tag['disabled_after']) && !isset($tag['disabled_content']))
  1887. {
  1888. $tag['before'] = !empty($tag['block_level']) ? '<div>' : '';
  1889. $tag['after'] = !empty($tag['block_level']) ? '</div>' : '';
  1890. $tag['content'] = isset($tag['type']) && $tag['type'] == 'closed' ? '' : (!empty($tag['block_level']) ? '<div>$1</div>' : '$1');
  1891. }
  1892. elseif (isset($tag['disabled_before']) || isset($tag['disabled_after']))
  1893. {
  1894. $tag['before'] = isset($tag['disabled_before']) ? $tag['disabled_before'] : (!empty($tag['block_level']) ? '<div>' : '');
  1895. $tag['after'] = isset($tag['disabled_after']) ? $tag['disabled_after'] : (!empty($tag['block_level']) ? '</div>' : '');
  1896. }
  1897. else
  1898. $tag['content'] = $tag['disabled_content'];
  1899. }
  1900. // we use this alot
  1901. $tag_strlen = strlen($tag['tag']);
  1902. // The only special case is 'html', which doesn't need to close things.
  1903. if (!empty($tag['block_level']) && $tag['tag'] != 'html' && empty($inside['block_level']))
  1904. {
  1905. $n = count($open_tags) - 1;
  1906. while (empty($open_tags[$n]['block_level']) && $n >= 0)
  1907. $n--;
  1908. // Close all the non block level tags so this tag isn't surrounded by them.
  1909. for ($i = count($open_tags) - 1; $i > $n; $i--)
  1910. {
  1911. $message = substr($message, 0, $pos) . "\n" . $open_tags[$i]['after'] . "\n" . substr($message, $pos);
  1912. $ot_strlen = strlen($open_tags[$i]['after']);
  1913. $pos += $ot_strlen + 2;
  1914. $pos1 += $ot_strlen + 2;
  1915. // Trim or eat trailing stuff... see comment at the end of the big loop.
  1916. if (!empty($open_tags[$i]['block_level']) && substr($message, $pos, 6) == '<br />')
  1917. $message = substr($message, 0, $pos) . substr($message, $pos + 6);
  1918. if (!empty($open_tags[$i]['trim']) && $tag['trim'] != 'inside' && preg_match('~(<br />|&nbsp;|\s)*~', substr($message, $pos), $matches) != 0)
  1919. $message = substr($message, 0, $pos) . substr($message, $pos + strlen($matches[0]));
  1920. array_pop($open_tags);
  1921. }
  1922. }
  1923. // No type means 'parsed_content'.
  1924. if (!isset($tag['type']))
  1925. {
  1926. // @todo Check for end tag first, so people can say "I like that [i] tag"?
  1927. $open_tags[] = $tag;
  1928. $message = substr($message, 0, $pos) . "\n" . $tag['before'] . "\n" . substr($message, $pos1);
  1929. $pos += strlen($tag['before']) - 1 + 2;
  1930. }
  1931. // Don't parse the content, just skip it.
  1932. elseif ($tag['type'] == 'unparsed_content')
  1933. {
  1934. $pos2 = stripos($message, '[/' . substr($message, $pos + 1, $tag_strlen) . ']', $pos1);
  1935. if ($pos2 === false)
  1936. continue;
  1937. $data = substr($message, $pos1, $pos2 - $pos1);
  1938. if (!empty($tag['block_level']) && substr($data, 0, 6) == '<br />')
  1939. $data = substr($data, 6);
  1940. if (isset($tag['validate']))
  1941. $tag['validate']($tag, $data, $disabled);
  1942. $code = strtr($tag['content'], array('$1' => $data));
  1943. $message = substr($message, 0, $pos) . "\n" . $code . "\n" . substr($message, $pos2 + 3 + $tag_strlen);
  1944. $pos += strlen($code) - 1 + 2;
  1945. $last_pos = $pos + 1;
  1946. }
  1947. // Don't parse the content, just skip it.
  1948. elseif ($tag['type'] == 'unparsed_equals_content')
  1949. {
  1950. // The value may be quoted for some tags - check.
  1951. if (isset($tag['quoted']))
  1952. {
  1953. $quoted = substr($message, $pos1, 6) == '&quot;';
  1954. if ($tag['quoted'] != 'optional' && !$quoted)
  1955. continue;
  1956. if ($quoted)
  1957. $pos1 += 6;
  1958. }
  1959. else
  1960. $quoted = false;
  1961. $pos2 = strpos($message, $quoted == false ? ']' : '&quot;]', $pos1);
  1962. if ($pos2 === false)
  1963. continue;
  1964. $pos3 = stripos($message, '[/' . substr($message, $pos + 1, $tag_strlen) . ']', $pos2);
  1965. if ($pos3 === false)
  1966. continue;
  1967. $data = array(
  1968. substr($message, $pos2 + ($quoted == false ? 1 : 7), $pos3 - ($pos2 + ($quoted == false ? 1 : 7))),
  1969. substr($message, $pos1, $pos2 - $pos1)
  1970. );
  1971. if (!empty($tag['block_level']) && substr($data[0], 0, 6) == '<br />')
  1972. $data[0] = substr($data[0], 6);
  1973. // Validation for my parking, please!
  1974. if (isset($tag['validate']))
  1975. $tag['validate']($tag, $data, $disabled);
  1976. $code = strtr($tag['content'], array('$1' => $data[0], '$2' => $data[1]));
  1977. $message = substr($message, 0, $pos) . "\n" . $code . "\n" . substr($message, $pos3 + 3 + $tag_strlen);
  1978. $pos += strlen($code) - 1 + 2;
  1979. }
  1980. // A closed tag, with no content or value.
  1981. elseif ($tag['type'] == 'closed')
  1982. {
  1983. $pos2 = strpos($message, ']', $pos);
  1984. $message = substr($message, 0, $pos) . "\n" . $tag['content'] . "\n" . substr($message, $pos2 + 1);
  1985. $pos += strlen($tag['content']) - 1 + 2;
  1986. }
  1987. // This one is sorta ugly... :/. Unfortunately, it's needed for flash.
  1988. elseif ($tag['type'] == 'unparsed_commas_content')
  1989. {
  1990. $pos2 = strpos($message, ']', $pos1);
  1991. if ($pos2 === false)
  1992. continue;
  1993. $pos3 = stripos($message, '[/' . substr($message, $pos + 1, $tag_strlen) . ']', $pos2);
  1994. if ($pos3 === false)
  1995. continue;
  1996. // We want $1 to be the content, and the rest to be csv.
  1997. $data = explode(',', ',' . substr($message, $pos1, $pos2 - $pos1));
  1998. $data[0] = substr($message, $pos2 + 1, $pos3 - $pos2 - 1);
  1999. if (isset($tag['validate']))
  2000. $tag['validate']($tag, $data, $disabled);
  2001. $code = $tag['content'];
  2002. foreach ($data as $k => $d)
  2003. $code = strtr($code, array('$' . ($k + 1) => trim($d)));
  2004. $message = substr($message, 0, $pos) . "\n" . $code . "\n" . substr($message, $pos3 + 3 + $tag_strlen);
  2005. $pos += strlen($code) - 1 + 2;
  2006. }
  2007. // This has parsed content, and a csv value which is unparsed.
  2008. elseif ($tag['type'] == 'unparsed_commas')
  2009. {
  2010. $pos2 = strpos($message, ']', $pos1);
  2011. if ($pos2 === false)
  2012. continue;
  2013. $data = explode(',', substr($message, $pos1, $pos2 - $pos1));
  2014. if (isset($tag['validate']))
  2015. $tag['validate']($tag, $data, $disabled);
  2016. // Fix after, for disabled code mainly.
  2017. foreach ($data as $k => $d)
  2018. $tag['after'] = strtr($tag['after'], array('$' . ($k + 1) => trim($d)));
  2019. $open_tags[] = $tag;
  2020. // Replace them out, $1, $2, $3, $4, etc.
  2021. $code = $tag['before'];
  2022. foreach ($data as $k => $d)
  2023. $code = strtr($code, array('$' . ($k + 1) => trim($d)));
  2024. $message = substr($message, 0, $pos) . "\n" . $code . "\n" . substr($message, $pos2 + 1);
  2025. $pos += strlen($code) - 1 + 2;
  2026. }
  2027. // A tag set to a value, parsed or not.
  2028. elseif ($tag['type'] == 'unparsed_equals' || $tag['type'] == 'parsed_equals')
  2029. {
  2030. // The value may be quoted for some tags - check.
  2031. if (isset($tag['quoted']))
  2032. {
  2033. $quoted = substr($message, $pos1, 6) == '&quot;';
  2034. if ($tag['quoted'] != 'optional' && !$quoted)
  2035. continue;
  2036. if ($quoted)
  2037. $pos1 += 6;
  2038. }
  2039. else
  2040. $quoted = false;
  2041. $pos2 = strpos($message, $quoted == false ? ']' : '&quot;]', $pos1);
  2042. if ($pos2 === false)
  2043. continue;
  2044. $data = substr($message, $pos1, $pos2 - $pos1);
  2045. // Validation for my parking, please!
  2046. if (isset($tag['validate']))
  2047. $tag['validate']($tag, $data, $disabled);
  2048. // For parsed content, we must recurse to avoid security problems.
  2049. if ($tag['type'] != 'unparsed_equals')
  2050. $data = parse_bbc($data, !empty($tag['parsed_tags_allowed']) ? false : true, '', !empty($tag['parsed_tags_allowed']) ? $tag['parsed_tags_allowed'] : array());
  2051. $tag['after'] = strtr($tag['after'], array('$1' => $data));
  2052. $open_tags[] = $tag;
  2053. $code = strtr($tag['before'], array('$1' => $data));
  2054. $message = substr($message, 0, $pos) . "\n" . $code . "\n" . substr($message, $pos2 + ($quoted == false ? 1 : 7));
  2055. $pos += strlen($code) - 1 + 2;
  2056. }
  2057. // If this is block level, eat any breaks after it.
  2058. if (!empty($tag['block_level']) && substr($message, $pos + 1, 6) == '<br />')
  2059. $message = substr($message, 0, $pos + 1) . substr($message, $pos + 7);
  2060. // Are we trimming outside this tag?
  2061. if (!empty($tag['trim']) && $tag['trim'] != 'outside' && preg_match('~(<br />|&nbsp;|\s)*~', substr($message, $pos + 1), $matches) != 0)
  2062. $message = substr($message, 0, $pos + 1) . substr($message, $pos + 1 + strlen($matches[0]));
  2063. }
  2064. // Close any remaining tags.
  2065. while ($tag = array_pop($open_tags))
  2066. $message .= "\n" . $tag['after'] . "\n";
  2067. // Parse the smileys within the parts where it can be done safely.
  2068. if ($smileys === true)
  2069. {
  2070. $message_parts = explode("\n", $message);
  2071. for ($i = 0, $n = count($message_parts); $i < $n; $i += 2)
  2072. parsesmileys($message_parts[$i]);
  2073. $message = implode('', $message_parts);
  2074. }
  2075. // No smileys, just get rid of the markers.
  2076. else
  2077. $message = strtr($message, array("\n" => ''));
  2078. if ($message[0] === ' ')
  2079. $message = '&nbsp;' . substr($message, 1);
  2080. // Cleanup whitespace.
  2081. $message = strtr($message, array(' ' => ' &nbsp;', "\r" => '', "\n" => '<br />', '<br /> ' => '<br />&nbsp;', '&#13;' => "\n"));
  2082. // Allow mods access to what parse_bbc created
  2083. call_integration_hook('integrate_post_parsebbc', array($message, $smileys, $cache_id, $parse_tags));
  2084. // Cache the output if it took some time...
  2085. if (isset($cache_key, $cache_t) && array_sum(explode(' ', microtime())) - array_sum(explode(' ', $cache_t)) > 0.05)
  2086. cache_put_data($cache_key, $message, 240);
  2087. // If this was a force parse revert if needed.
  2088. if (!empty($parse_tags))
  2089. {
  2090. if (empty($temp_bbc))
  2091. $bbc_codes = array();
  2092. else
  2093. {
  2094. $bbc_codes = $temp_bbc;
  2095. unset($temp_bbc);
  2096. }
  2097. }
  2098. return $message;
  2099. }
  2100. /**
  2101. * Parse smileys in the passed message.
  2102. *
  2103. * The smiley parsing function which makes pretty faces appear :).
  2104. * If custom smiley sets are turned off by smiley_enable, the default set of smileys will be used.
  2105. * These are specifically not parsed in code tags [url=mailto:Dad@blah.com]
  2106. * Caches the smileys from the database or array in memory.
  2107. * Doesn't return anything, but rather modifies message directly.
  2108. *
  2109. * @param string &$message
  2110. */
  2111. function parsesmileys(&$message)
  2112. {
  2113. global $modSettings, $txt, $user_info, $context, $smcFunc;
  2114. static $smileyPregSearch = null, $smileyPregReplacements = array();
  2115. // No smiley set at all?!
  2116. if ($user_info['smiley_set'] == 'none' || trim($message) == '')
  2117. return;
  2118. // If smileyPregSearch hasn't been set, do it now.
  2119. if (empty($smileyPregSearch))
  2120. {
  2121. // Use the default smileys if it is disabled. (better for "portability" of smileys.)
  2122. if (empty($modSettings['smiley_enable']))
  2123. {
  2124. $smileysfrom = array('>:D', ':D', '::)', '>:(', ':))', ':)', ';)', ';D', ':(', ':o', '8)', ':P', '???', ':-[', ':-X', ':-*', ':\'(', ':-\\', '^-^', 'O0', 'C:-)', '0:)');
  2125. $smileysto = array('evil.gif', 'cheesy.gif', 'rolleyes.gif', 'angry.gif', 'laugh.gif', 'smiley.gif', 'wink.gif', 'grin.gif', 'sad.gif', 'shocked.gif', 'cool.gif', 'tongue.gif', 'huh.gif', 'embarrassed.gif', 'lipsrsealed.gif', 'kiss.gif', 'cry.gif', 'undecided.gif', 'azn.gif', 'afro.gif', 'police.gif', 'angel.gif');
  2126. $smileysdescs = array('', $txt['icon_cheesy'], $txt['icon_rolleyes'], $txt['icon_angry'], '', $txt['icon_smiley'], $txt['icon_wink'], $txt['icon_grin'], $txt['icon_sad'], $txt['icon_shocked'], $txt['icon_cool'], $txt['icon_tongue'], $txt['icon_huh'], $txt['icon_embarrassed'], $txt['icon_lips'], $txt['icon_kiss'], $txt['icon_cry'], $txt['icon_undecided'], '', '', '', '');
  2127. }
  2128. else
  2129. {
  2130. // Load the smileys in reverse order by length so they don't get parsed wrong.
  2131. if (($temp = cache_get_data('parsing_smileys', 480)) == null)
  2132. {
  2133. $result = $smcFunc['db_query']('', '
  2134. SELECT code, filename, description
  2135. FROM {db_prefix}smileys',
  2136. array(
  2137. )
  2138. );
  2139. $smileysfrom = array();
  2140. $smileysto = array();
  2141. $smileysdescs = array();
  2142. while ($row = $smcFunc['db_fetch_assoc']($result))
  2143. {
  2144. $smileysfrom[] = $row['code'];
  2145. $smileysto[] = htmlspecialchars($row['filename']);
  2146. $smileysdescs[] = $row['description'];
  2147. }
  2148. $smcFunc['db_free_result']($result);
  2149. cache_put_data('parsing_smileys', array($smileysfrom, $smileysto, $smileysdescs), 480);
  2150. }
  2151. else
  2152. list ($smileysfrom, $smileysto, $smileysdescs) = $temp;
  2153. }
  2154. // The non-breaking-space is a complex thing...
  2155. $non_breaking_space = $context['utf8'] ? '\x{A0}' : '\xA0';
  2156. // This smiley regex makes sure it doesn't parse smileys within code tags (so [url=mailto:David@bla.com] doesn't parse the :D smiley)
  2157. $smileyPregReplacements = array();
  2158. $searchParts = array();
  2159. $smileys_path = htmlspecialchars($modSettings['smileys_url'] . '/' . $user_info['smiley_set'] . '/');
  2160. for ($i = 0, $n = count($smileysfrom); $i < $n; $i++)
  2161. {
  2162. $specialChars = htmlspecialchars($smileysfrom[$i], ENT_QUOTES);
  2163. $smileyCode = '<img src="' . $smileys_path . $smileysto[$i] . '" alt="' . strtr($specialChars, array(':' => '&#58;', '(' => '&#40;', ')' => '&#41;', '$' => '&#36;', '[' => '&#091;')). '" title="' . strtr(htmlspecialchars($smileysdescs[$i]), array(':' => '&#58;', '(' => '&#40;', ')' => '&#41;', '$' => '&#36;', '[' => '&#091;')) . '" class="smiley" />';
  2164. $smileyPregReplacements[$smileysfrom[$i]] = $smileyCode;
  2165. $searchParts[] = preg_quote($smileysfrom[$i], '~');
  2166. if ($smileysfrom[$i] != $specialChars)
  2167. {
  2168. $smileyPregReplacements[$specialChars] = $smileyCode;
  2169. $searchParts[] = preg_quote($specialChars, '~');
  2170. }
  2171. }
  2172. $smileyPregSearch = '~(?<=[>:\?\.\s' . $non_breaking_space . '[\]()*\\\;]|^)(' . implode('|', $searchParts) . ')(?=[^[:alpha:]0-9]|$)~e' . ($context['utf8'] ? 'u' : '');
  2173. }
  2174. // Replace away!
  2175. $message = preg_replace($smileyPregSearch, '$smileyPregReplacements[\'$1\']', $message);
  2176. }
  2177. /**
  2178. * Highlight any code.
  2179. *
  2180. * Uses PHP's highlight_string() to highlight PHP syntax
  2181. * does special handling to keep the tabs in the code available.
  2182. * used to parse PHP code from inside [code] and [php] tags.
  2183. *
  2184. * @param string $code
  2185. * @return string the code with highlighted HTML.
  2186. */
  2187. function highlight_php_code($code)
  2188. {
  2189. global $context;
  2190. // Remove special characters.
  2191. $code = un_htmlspecialchars(strtr($code, array('<br />' => "\n", "\t" => 'SMF_TAB();', '&#91;' => '[')));
  2192. $oldlevel = error_reporting(0);
  2193. $buffer = str_replace(array("\n", "\r"), '', @highlight_string($code, true));
  2194. error_reporting($oldlevel);
  2195. // Yes, I know this is kludging it, but this is the best way to preserve tabs from PHP :P.
  2196. $buffer = preg_replace('~SMF_TAB(?:</(?:font|span)><(?:font color|span style)="[^"]*?">)?\\(\\);~', '<pre style="display: inline;">' . "\t" . '</pre>', $buffer);
  2197. return strtr($buffer, array('\'' => '&#039;', '<code>' => '', '</code>' => ''));
  2198. }
  2199. /**
  2200. * Make sure the browser doesn't come back and repost the form data.
  2201. * Should be used whenever anything is posted.
  2202. *
  2203. * @param string $setLocation = ''
  2204. * @param bool $refresh = false
  2205. */
  2206. function redirectexit($setLocation = '', $refresh = false)
  2207. {
  2208. global $scripturl, $context, $modSettings, $db_show_debug, $db_cache;
  2209. // In case we have mail to send, better do that - as obExit doesn't always quite make it...
  2210. if (!empty($context['flush_mail']))
  2211. // @todo this relies on 'flush_mail' being only set in AddMailQueue itself... :\
  2212. AddMailQueue(true);
  2213. $add = preg_match('~^(ftp|http)[s]?://~', $setLocation) == 0 && substr($setLocation, 0, 6) != 'about:';
  2214. if (WIRELESS)
  2215. {
  2216. // Add the scripturl on if needed.
  2217. if ($add)
  2218. $setLocation = $scripturl . '?' . $setLocation;
  2219. $char = strpos($setLocation, '?') === false ? '?' : ';';
  2220. if (strpos($setLocation, '#') !== false)
  2221. $setLocation = strtr($setLocation, array('#' => $char . WIRELESS_PROTOCOL . '#'));
  2222. else
  2223. $setLocation .= $char . WIRELESS_PROTOCOL;
  2224. }
  2225. elseif ($add)
  2226. $setLocation = $scripturl . ($setLocation != '' ? '?' . $setLocation : '');
  2227. // Put the session ID in.
  2228. if (defined('SID') && SID != '')
  2229. $setLocation = preg_replace('/^' . preg_quote($scripturl, '/') . '(?!\?' . preg_quote(SID, '/') . ')\\??/', $scripturl . '?' . SID . ';', $setLocation);
  2230. // Keep that debug in their for template debugging!
  2231. elseif (isset($_GET['debug']))
  2232. $setLocation = preg_replace('/^' . preg_quote($scripturl, '/') . '\\??/', $scripturl . '?debug;', $setLocation);
  2233. if (!empty($modSettings['queryless_urls']) && (empty($context['server']['is_cgi']) || ini_get('cgi.fix_pathinfo') == 1 || @get_cfg_var('cgi.fix_pathinfo') == 1) && (!empty($context['server']['is_apache']) || !empty($context['server']['is_lighttpd']) || !empty($context['server']['is_litespeed'])))
  2234. {
  2235. if (defined('SID') && SID != '')
  2236. $setLocation = preg_replace('/^' . preg_quote($scripturl, '/') . '\?(?:' . SID . '(?:;|&|&amp;))((?:board|topic)=[^#]+?)(#[^"]*?)?$/e', "\$scripturl . '/' . strtr('\$1', '&;=', '//,') . '.html?' . SID . '\$2'", $setLocation);
  2237. else
  2238. $setLocation = preg_replace('/^' . preg_quote($scripturl, '/') . '\?((?:board|topic)=[^#"]+?)(#[^"]*?)?$/e', "\$scripturl . '/' . strtr('\$1', '&;=', '//,') . '.html\$2'", $setLocation);
  2239. }
  2240. // Maybe integrations want to change where we are heading?
  2241. call_integration_hook('integrate_redirect', array(&$setLocation, &$refresh));
  2242. // We send a Refresh header only in special cases because Location looks better. (and is quicker...)
  2243. if ($refresh && !WIRELESS)
  2244. header('Refresh: 0; URL=' . strtr($setLocation, array(' ' => '%20')));
  2245. else
  2246. header('Location: ' . str_replace(' ', '%20', $setLocation));
  2247. // Debugging.
  2248. if (isset($db_show_debug) && $db_show_debug === true)
  2249. $_SESSION['debug_redirect'] = $db_cache;
  2250. obExit(false);
  2251. }
  2252. /**
  2253. * Ends execution. Takes care of template loading and remembering the previous URL.
  2254. * @param bool $header = null
  2255. * @param bool $do_footer = null
  2256. * @param bool $from_index = false
  2257. * @param bool $from_fatal_error = false
  2258. */
  2259. function obExit($header = null, $do_footer = null, $from_index = false, $from_fatal_error = false)
  2260. {
  2261. global $context, $settings, $modSettings, $txt, $smcFunc;
  2262. static $header_done = false, $footer_done = false, $level = 0, $has_fatal_error = false;
  2263. // Attempt to prevent a recursive loop.
  2264. ++$level;
  2265. if ($level > 1 && !$from_fatal_error && !$has_fatal_error)
  2266. exit;
  2267. if ($from_fatal_error)
  2268. $has_fatal_error = true;
  2269. // Clear out the stat cache.
  2270. trackStats();
  2271. // If we have mail to send, send it.
  2272. if (!empty($context['flush_mail']))
  2273. // @todo this relies on 'flush_mail' being only set in AddMailQueue itself... :\
  2274. AddMailQueue(true);
  2275. $do_header = $header === null ? !$header_done : $header;
  2276. if ($do_footer === null)
  2277. $do_footer = $do_header;
  2278. // Has the template/header been done yet?
  2279. if ($do_header)
  2280. {
  2281. // Was the page title set last minute? Also update the HTML safe one.
  2282. if (!empty($context['page_title']) && empty($context['page_title_html_safe']))
  2283. $context['page_title_html_safe'] = $smcFunc['htmlspecialchars'](un_htmlspecialchars($context['page_title'])) . (!empty($context['current_page']) ? ' - ' . $txt['page'] . ' ' . ($context['current_page'] + 1) : '');
  2284. // Start up the session URL fixer.
  2285. ob_start('ob_sessrewrite');
  2286. if (!empty($settings['output_buffers']) && is_string($settings['output_buffers']))
  2287. $buffers = explode(',', $settings['output_buffers']);
  2288. elseif (!empty($settings['output_buffers']))
  2289. $buffers = $settings['output_buffers'];
  2290. else
  2291. $buffers = array();
  2292. if (isset($modSettings['integrate_buffer']))
  2293. $buffers = array_merge(explode(',', $modSettings['integrate_buffer']), $buffers);
  2294. if (!empty($buffers))
  2295. foreach ($buffers as $function)
  2296. {
  2297. $function = trim($function);
  2298. $call = strpos($function, '::') !== false ? explode('::', $function) : $function;
  2299. // Is it valid?
  2300. if (is_callable($call))
  2301. ob_start($call);
  2302. }
  2303. // Display the screen in the logical order.
  2304. template_header();
  2305. $header_done = true;
  2306. }
  2307. if ($do_footer)
  2308. {
  2309. if (WIRELESS && !isset($context['sub_template']))
  2310. fatal_lang_error('wireless_error_notyet', false);
  2311. // Just show the footer, then.
  2312. loadSubTemplate(isset($context['sub_template']) ? $context['sub_template'] : 'main');
  2313. // Anything special to put out?
  2314. if (!empty($context['insert_after_template']) && !isset($_REQUEST['xml']))
  2315. echo $context['insert_after_template'];
  2316. // Just so we don't get caught in an endless loop of errors from the footer...
  2317. if (!$footer_done)
  2318. {
  2319. $footer_done = true;
  2320. template_footer();
  2321. // (since this is just debugging... it's okay that it's after </html>.)
  2322. if (!isset($_REQUEST['xml']))
  2323. displayDebug();
  2324. }
  2325. }
  2326. // Remember this URL in case someone doesn't like sending HTTP_REFERER.
  2327. if (strpos($_SERVER['REQUEST_URL'], 'action=dlattach') === false && strpos($_SERVER['REQUEST_URL'], 'action=viewsmfile') === false)
  2328. $_SESSION['old_url'] = $_SERVER['REQUEST_URL'];
  2329. // For session check verification.... don't switch browsers...
  2330. $_SESSION['USER_AGENT'] = empty($_SERVER['HTTP_USER_AGENT']) ? '' : $_SERVER['HTTP_USER_AGENT'];
  2331. if (!empty($settings['strict_doctype']))
  2332. {
  2333. // The theme author wants to use the STRICT doctype (only God knows why).
  2334. $temp = ob_get_contents();
  2335. ob_clean();
  2336. echo strtr($temp, array(
  2337. 'var smf_iso_case_folding' => 'var target_blank = \'_blank\'; var smf_iso_case_folding',
  2338. 'target="_blank"' => 'onclick="this.target=target_blank"'));
  2339. }
  2340. // Hand off the output to the portal, etc. we're integrated with.
  2341. call_integration_hook('integrate_exit', array($do_footer && !WIRELESS));
  2342. // Don't exit if we're coming from index.php; that will pass through normally.
  2343. if (!$from_index || WIRELESS)
  2344. exit;
  2345. }
  2346. /**
  2347. * Get the size of a specified image with better error handling.
  2348. * @todo see if it's better in Subs-Graphics, but one step at the time.
  2349. * Uses getimagesize() to determine the size of a file.
  2350. * Attempts to connect to the server first so it won't time out.
  2351. *
  2352. * @param string $url
  2353. * @return array or false, the image size as array (width, height), or false on failure
  2354. */
  2355. function url_image_size($url)
  2356. {
  2357. global $sourcedir;
  2358. // Make sure it is a proper URL.
  2359. $url = str_replace(' ', '%20', $url);
  2360. // Can we pull this from the cache... please please?
  2361. if (($temp = cache_get_data('url_image_size-' . md5($url), 240)) !== null)
  2362. return $temp;
  2363. $t = microtime();
  2364. // Get the host to pester...
  2365. preg_match('~^\w+://(.+?)/(.*)$~', $url, $match);
  2366. // Can't figure it out, just try the image size.
  2367. if ($url == '' || $url == 'http://' || $url == 'https://')
  2368. {
  2369. return false;
  2370. }
  2371. elseif (!isset($match[1]))
  2372. {
  2373. $size = @getimagesize($url);
  2374. }
  2375. else
  2376. {
  2377. // Try to connect to the server... give it half a second.
  2378. $temp = 0;
  2379. $fp = @fsockopen($match[1], 80, $temp, $temp, 0.5);
  2380. // Successful? Continue...
  2381. if ($fp != false)
  2382. {
  2383. // Send the HEAD request (since we don't have to worry about chunked, HTTP/1.1 is fine here.)
  2384. fwrite($fp, 'HEAD /' . $match[2] . ' HTTP/1.1' . "\r\n" . 'Host: ' . $match[1] . "\r\n" . 'User-Agent: PHP/SMF' . "\r\n" . 'Connection: close' . "\r\n\r\n");
  2385. // Read in the HTTP/1.1 or whatever.
  2386. $test = substr(fgets($fp, 11), -1);
  2387. fclose($fp);
  2388. // See if it returned a 404/403 or something.
  2389. if ($test < 4)
  2390. {
  2391. $size = @getimagesize($url);
  2392. // This probably means allow_url_fopen is off, let's try GD.
  2393. if ($size === false && function_exists('imagecreatefromstring'))
  2394. {
  2395. include_once($sourcedir . '/Subs-Package.php');
  2396. // It's going to hate us for doing this, but another request...
  2397. $image = @imagecreatefromstring(fetch_web_data($url));
  2398. if ($image !== false)
  2399. {
  2400. $size = array(imagesx($image), imagesy($image));
  2401. imagedestroy($image);
  2402. }
  2403. }
  2404. }
  2405. }
  2406. }
  2407. // If we didn't get it, we failed.
  2408. if (!isset($size))
  2409. $size = false;
  2410. // If this took a long time, we may never have to do it again, but then again we might...
  2411. if (array_sum(explode(' ', microtime())) - array_sum(explode(' ', $t)) > 0.8)
  2412. cache_put_data('url_image_size-' . md5($url), $size, 240);
  2413. // Didn't work.
  2414. return $size;
  2415. }
  2416. /**
  2417. * Sets the class of the current topic based on is_very_hot, veryhot, hot, etc
  2418. *
  2419. * @param array &$topic_context
  2420. */
  2421. function determineTopicClass(&$topic_context)
  2422. {
  2423. // Set topic class depending on locked status and number of replies.
  2424. if ($topic_context['is_very_hot'])
  2425. $topic_context['class'] = 'veryhot';
  2426. elseif ($topic_context['is_hot'])
  2427. $topic_context['class'] = 'hot';
  2428. else
  2429. $topic_context['class'] = 'normal';
  2430. $topic_context['class'] .= $topic_context['is_poll'] ? '_poll' : '_post';
  2431. if ($topic_context['is_locked'])
  2432. $topic_context['class'] .= '_locked';
  2433. if ($topic_context['is_sticky'])
  2434. $topic_context['class'] .= '_sticky';
  2435. // This is so old themes will still work.
  2436. $topic_context['extended_class'] = &$topic_context['class'];
  2437. }
  2438. /**
  2439. * Sets up the basic theme context stuff.
  2440. * @param bool $forceload = false
  2441. */
  2442. function setupThemeContext($forceload = false)
  2443. {
  2444. global $modSettings, $user_info, $scripturl, $context, $settings, $options, $txt, $maintenance;
  2445. global $user_settings, $smcFunc;
  2446. static $loaded = false;
  2447. // Under SSI this function can be called more then once. That can cause some problems.
  2448. // So only run the function once unless we are forced to run it again.
  2449. if ($loaded && !$forceload)
  2450. return;
  2451. $loaded = true;
  2452. $context['in_maintenance'] = !empty($maintenance);
  2453. $context['current_time'] = timeformat(time(), false);
  2454. $context['current_action'] = isset($_GET['action']) ? $_GET['action'] : '';
  2455. $context['show_quick_login'] = !empty($modSettings['enableVBStyleLogin']) && $user_info['is_guest'];
  2456. // Get some news...
  2457. $context['news_lines'] = explode("\n", str_replace("\r", '', trim(addslashes($modSettings['news']))));
  2458. $context['fader_news_lines'] = array();
  2459. for ($i = 0, $n = count($context['news_lines']); $i < $n; $i++)
  2460. {
  2461. if (trim($context['news_lines'][$i]) == '')
  2462. continue;
  2463. // Clean it up for presentation ;).
  2464. $context['news_lines'][$i] = parse_bbc(stripslashes(trim($context['news_lines'][$i])), true, 'news' . $i);
  2465. // Gotta be special for the javascript.
  2466. $context['fader_news_lines'][$i] = strtr(addslashes($context['news_lines'][$i]), array('/' => '\/', '<a href=' => '<a hre" + "f='));
  2467. }
  2468. $context['random_news_line'] = $context['news_lines'][mt_rand(0, count($context['news_lines']) - 1)];
  2469. if (!$user_info['is_guest'])
  2470. {
  2471. $context['user']['messages'] = &$user_info['messages'];
  2472. $context['user']['unread_messages'] = &$user_info['unread_messages'];
  2473. // Personal message popup...
  2474. if ($user_info['unread_messages'] > (isset($_SESSION['unread_messages']) ? $_SESSION['unread_messages'] : 0))
  2475. $context['user']['popup_messages'] = true;
  2476. else
  2477. $context['user']['popup_messages'] = false;
  2478. $_SESSION['unread_messages'] = $user_info['unread_messages'];
  2479. if (allowedTo('moderate_forum'))
  2480. {
  2481. $context['unapproved_members'] = (!empty($modSettings['registration_method']) && $modSettings['registration_method'] == 2) || !empty($modSettings['approveAccountDeletion']) ? $modSettings['unapprovedMembers'] : 0;
  2482. $context['unapproved_members_text'] = $context['unapproved_members'] == 1 ? sprintf($txt['approve_one_member_waiting'], $scripturl . '?action=admin;area=viewmembers;sa=browse;type=approve') : sprintf($txt['approve_many_members_waiting'], $scripturl . '?action=admin;area=viewmembers;sa=browse;type=approve', $context['unapproved_members']);
  2483. }
  2484. $context['show_open_reports'] = empty($user_settings['mod_prefs']) || $user_settings['mod_prefs'][0] == 1;
  2485. $context['user']['avatar'] = array();
  2486. // Figure out the avatar... uploaded?
  2487. if ($user_info['avatar']['url'] == '' && !empty($user_info['avatar']['id_attach']))
  2488. $context['user']['avatar']['href'] = $user_info['avatar']['custom_dir'] ? $modSettings['custom_avatar_url'] . '/' . $user_info['avatar']['filename'] : $scripturl . '?action=dlattach;attach=' . $user_info['avatar']['id_attach'] . ';type=avatar';
  2489. // Full URL?
  2490. elseif (substr($user_info['avatar']['url'], 0, 7) == 'http://')
  2491. {
  2492. $context['user']['avatar']['href'] = $user_info['avatar']['url'];
  2493. if ($modSettings['avatar_action_too_large'] == 'option_html_resize' || $modSettings['avatar_action_too_large'] == 'option_js_resize')
  2494. {
  2495. if (!empty($modSettings['avatar_max_width_external']))
  2496. $context['user']['avatar']['width'] = $modSettings['avatar_max_width_external'];
  2497. if (!empty($modSettings['avatar_max_height_external']))
  2498. $context['user']['avatar']['height'] = $modSettings['avatar_max_height_external'];
  2499. }
  2500. }
  2501. // Otherwise we assume it's server stored?
  2502. elseif ($user_info['avatar']['url'] != '')
  2503. $context['user']['avatar']['href'] = $modSettings['avatar_url'] . '/' . htmlspecialchars($user_info['avatar']['url']);
  2504. if (!empty($context['user']['avatar']))
  2505. $context['user']['avatar']['image'] = '<img src="' . $context['user']['avatar']['href'] . '"' . (isset($context['user']['avatar']['width']) ? ' width="' . $context['user']['avatar']['width'] . '"' : '') . (isset($context['user']['avatar']['height']) ? ' height="' . $context['user']['avatar']['height'] . '"' : '') . ' alt="" class="avatar" />';
  2506. // Figure out how long they've been logged in.
  2507. $context['user']['total_time_logged_in'] = array(
  2508. 'days' => floor($user_info['total_time_logged_in'] / 86400),
  2509. 'hours' => floor(($user_info['total_time_logged_in'] % 86400) / 3600),
  2510. 'minutes' => floor(($user_info['total_time_logged_in'] % 3600) / 60)
  2511. );
  2512. }
  2513. else
  2514. {
  2515. $context['user']['messages'] = 0;
  2516. $context['user']['unread_messages'] = 0;
  2517. $context['user']['avatar'] = array();
  2518. $context['user']['total_time_logged_in'] = array('days' => 0, 'hours' => 0, 'minutes' => 0);
  2519. $context['user']['popup_messages'] = false;
  2520. if (!empty($modSettings['registration_method']) && $modSettings['registration_method'] == 1)
  2521. $txt['welcome_guest'] .= $txt['welcome_guest_activate'];
  2522. // If we've upgraded recently, go easy on the passwords.
  2523. if (!empty($modSettings['disableHashTime']) && ($modSettings['disableHashTime'] == 1 || time() < $modSettings['disableHashTime']))
  2524. $context['disable_login_hashing'] = true;
  2525. }
  2526. // Setup the main menu items.
  2527. setupMenuContext();
  2528. if (empty($settings['theme_version']))
  2529. $context['show_vBlogin'] = $context['show_quick_login'];
  2530. // This is here because old index templates might still use it.
  2531. $context['show_news'] = !empty($settings['enable_news']);
  2532. // This is done to allow theme authors to customize it as they want.
  2533. $context['show_pm_popup'] = $context['user']['popup_messages'] && !empty($options['popup_messages']) && (!isset($_REQUEST['action']) || $_REQUEST['action'] != 'pm');
  2534. // 2.1+: Add the PM popup here instead. Theme authors can still override it simply by editing/removing the 'fPmPopup' in the array.
  2535. if($context['show_pm_popup'])
  2536. addInlineJavascript('
  2537. $(document).ready(function(){
  2538. new smc_Popup({
  2539. heading: ' . JavaScriptEscape($txt['show_personal_messages_heading']) . ',
  2540. content: ' . JavaScriptEscape(sprintf($txt['show_personal_messages'], $context['user']['unread_messages'], $scripturl . '?action=pm')) . ',
  2541. icon: smf_images_url + \'/im_sm_newmsg.png\'
  2542. });
  2543. });');
  2544. // Resize avatars the fancy, but non-GD requiring way.
  2545. if ($modSettings['avatar_action_too_large'] == 'option_js_resize' && (!empty($modSettings['avatar_max_width_external']) || !empty($modSettings['avatar_max_height_external'])))
  2546. {
  2547. // @todo Move this over to script.js?
  2548. $context['html_headers'] .= '
  2549. <script type="text/javascript"><!-- // --><![CDATA[
  2550. var smf_avatarMaxWidth = ' . (int) $modSettings['avatar_max_width_external'] . ';
  2551. var smf_avatarMaxHeight = ' . (int) $modSettings['avatar_max_height_external'] . ';';
  2552. if (!isBrowser('ie'))
  2553. $context['html_headers'] .= '
  2554. window.addEventListener("load", smf_avatarResize, false);';
  2555. else
  2556. $context['html_headers'] .= '
  2557. var window_oldAvatarOnload = window.onload;
  2558. window.onload = smf_avatarResize;';
  2559. $context['html_headers'] .= '
  2560. // ]]></script>';
  2561. }
  2562. // This looks weird, but it's because BoardIndex.php references the variable.
  2563. $context['common_stats']['latest_member'] = array(
  2564. 'id' => $modSettings['latestMember'],
  2565. 'name' => $modSettings['latestRealName'],
  2566. 'href' => $scripturl . '?action=profile;u=' . $modSettings['latestMember'],
  2567. 'link' => '<a href="' . $scripturl . '?action=profile;u=' . $modSettings['latestMember'] . '">' . $modSettings['latestRealName'] . '</a>',
  2568. );
  2569. $context['common_stats'] = array(
  2570. 'total_posts' => comma_format($modSettings['totalMessages']),
  2571. 'total_topics' => comma_format($modSettings['totalTopics']),
  2572. 'total_members' => comma_format($modSettings['totalMembers']),
  2573. 'latest_member' => $context['common_stats']['latest_member'],
  2574. );
  2575. $context['common_stats']['boardindex_total_posts'] = sprintf($txt['boardindex_total_posts'], $context['common_stats']['total_posts'], $context['common_stats']['total_topics'], $context['common_stats']['total_members']);
  2576. if (empty($settings['theme_version']))
  2577. $context['html_headers'] .= '
  2578. <script type="text/javascript"><!-- // --><![CDATA[
  2579. var smf_scripturl = "' . $scripturl . '";
  2580. // ]]></script>';
  2581. if (!isset($context['page_title']))
  2582. $context['page_title'] = '';
  2583. // Set some specific vars.
  2584. $context['page_title_html_safe'] = $smcFunc['htmlspecialchars'](un_htmlspecialchars($context['page_title'])) . (!empty($context['current_page']) ? ' - ' . $txt['page'] . ' ' . ($context['current_page'] + 1) : '');
  2585. $context['meta_keywords'] = !empty($modSettings['meta_keywords']) ? $smcFunc['htmlspecialchars']($modSettings['meta_keywords']) : '';
  2586. }
  2587. /**
  2588. * Helper function to set the system memory to a needed value
  2589. * - If the needed memory is greater than current, will attempt to get more
  2590. * - if in_use is set to true, will also try to take the current memory usage in to account
  2591. *
  2592. * @param string $needed The amount of memory to request, if needed, like 256M
  2593. * @param bool $in_use Set to true to account for current memory usage of the script
  2594. * @return boolean, true if we have at least the needed memory
  2595. */
  2596. function setMemoryLimit($needed, $in_use = false)
  2597. {
  2598. // everything in bytes
  2599. $memory_used = 0;
  2600. $memory_current = memoryReturnBytes(ini_get('memory_limit'));
  2601. $memory_needed = memoryReturnBytes($needed);
  2602. // should we account for how much is currently being used?
  2603. if ($in_use)
  2604. $memory_needed += function_exists('memory_get_usage') ? memory_get_usage() : (2 * 1048576);
  2605. // if more is needed, request it
  2606. if ($memory_current < $memory_needed)
  2607. {
  2608. @ini_set('memory_limit', ceil($memory_needed / 1048576) . 'M');
  2609. $memory_current = memoryReturnBytes(ini_get('memory_limit'));
  2610. }
  2611. $memory_current = max($memory_current, memoryReturnBytes(get_cfg_var('memory_limit')));
  2612. // return success or not
  2613. return (bool) ($memory_current >= $memory_needed);
  2614. }
  2615. /**
  2616. * Helper function to convert memory string settings to bytes
  2617. *
  2618. * @param string $val The byte string, like 256M or 1G
  2619. * @return integer The string converted to a proper integer in bytes
  2620. */
  2621. function memoryReturnBytes($val)
  2622. {
  2623. if (is_integer($val))
  2624. return $val;
  2625. // Separate the number from the designator
  2626. $val = trim($val);
  2627. $num = intval(substr($val, 0, strlen($val) - 1));
  2628. $last = strtolower(substr($val, -1));
  2629. // convert to bytes
  2630. switch ($last)
  2631. {
  2632. case 'g':
  2633. $num *= 1024;
  2634. case 'm':
  2635. $num *= 1024;
  2636. case 'k':
  2637. $num *= 1024;
  2638. }
  2639. return $num;
  2640. }
  2641. /**
  2642. * This is the only template included in the sources.
  2643. */
  2644. function template_rawdata()
  2645. {
  2646. global $context;
  2647. echo $context['raw_data'];
  2648. }
  2649. /**
  2650. * The header template
  2651. */
  2652. function template_header()
  2653. {
  2654. global $txt, $modSettings, $context, $settings, $user_info, $boarddir, $cachedir;
  2655. setupThemeContext();
  2656. // Print stuff to prevent caching of pages (except on attachment errors, etc.)
  2657. if (empty($context['no_last_modified']))
  2658. {
  2659. header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
  2660. header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
  2661. // Are we debugging the template/html content?
  2662. if (!isset($_REQUEST['xml']) && isset($_GET['debug']) && !isBrowser('ie') && !WIRELESS)
  2663. header('Content-Type: application/xhtml+xml');
  2664. elseif (!isset($_REQUEST['xml']) && !WIRELESS)
  2665. header('Content-Type: text/html; charset=' . (empty($context['character_set']) ? 'ISO-8859-1' : $context['character_set']));
  2666. }
  2667. header('Content-Type: text/' . (isset($_REQUEST['xml']) ? 'xml' : 'html') . '; charset=' . (empty($context['character_set']) ? 'ISO-8859-1' : $context['character_set']));
  2668. $checked_securityFiles = false;
  2669. $showed_banned = false;
  2670. foreach ($context['template_layers'] as $layer)
  2671. {
  2672. loadSubTemplate($layer . '_above', true);
  2673. // May seem contrived, but this is done in case the body and main layer aren't there...
  2674. if (in_array($layer, array('body', 'main')) && allowedTo('admin_forum') && !$user_info['is_guest'] && !$checked_securityFiles)
  2675. {
  2676. $checked_securityFiles = true;
  2677. // @todo add a hook here
  2678. $securityFiles = array('install.php', 'webinstall.php', 'upgrade.php', 'convert.php', 'repair_paths.php', 'repair_settings.php', 'Settings.php~', 'Settings_bak.php~');
  2679. foreach ($securityFiles as $i => $securityFile)
  2680. {
  2681. if (!file_exists($boarddir . '/' . $securityFile))
  2682. unset($securityFiles[$i]);
  2683. }
  2684. // We are already checking so many files...just few more doesn't make any difference! :P
  2685. if (!empty($modSettings['currentAttachmentUploadDir']))
  2686. {
  2687. if (!is_array($modSettings['attachmentUploadDir']))
  2688. $modSettings['attachmentUploadDir'] = @unserialize($modSettings['attachmentUploadDir']);
  2689. $path = $modSettings['attachmentUploadDir'][$modSettings['currentAttachmentUploadDir']];
  2690. }
  2691. else
  2692. {
  2693. $path = $modSettings['attachmentUploadDir'];
  2694. $id_folder_thumb = 1;
  2695. }
  2696. secureDirectory($path, true);
  2697. secureDirectory($cachedir);
  2698. // If agreement is enabled, at least the english version shall exists
  2699. if ($modSettings['requireAgreement'])
  2700. $agreement = !file_exists($boarddir . '/agreement.txt');
  2701. if (!empty($securityFiles) || (!empty($modSettings['cache_enable']) && !is_writable($cachedir)) || !empty($agreement))
  2702. {
  2703. echo '
  2704. <div class="errorbox">
  2705. <p class="alert">!!</p>
  2706. <h3>', empty($securityFiles) ? $txt['generic_warning'] : $txt['security_risk'], '</h3>
  2707. <p>';
  2708. foreach ($securityFiles as $securityFile)
  2709. {
  2710. echo '
  2711. ', $txt['not_removed'], '<strong>', $securityFile, '</strong>!<br />';
  2712. if ($securityFile == 'Settings.php~' || $securityFile == 'Settings_bak.php~')
  2713. echo '
  2714. ', sprintf($txt['not_removed_extra'], $securityFile, substr($securityFile, 0, -1)), '<br />';
  2715. }
  2716. if (!empty($modSettings['cache_enable']) && !is_writable($cachedir))
  2717. echo '
  2718. <strong>', $txt['cache_writable'], '</strong><br />';
  2719. if (!empty($agreement))
  2720. echo '
  2721. <strong>', $txt['agreement_missing'], '</strong><br />';
  2722. echo '
  2723. </p>
  2724. </div>';
  2725. }
  2726. }
  2727. // If the user is banned from posting inform them of it.
  2728. elseif (in_array($layer, array('main', 'body')) && isset($_SESSION['ban']['cannot_post']) && !$showed_banned)
  2729. {
  2730. $showed_banned = true;
  2731. echo '
  2732. <div class="windowbg alert" style="margin: 2ex; padding: 2ex; border: 2px dashed red;">
  2733. ', sprintf($txt['you_are_post_banned'], $user_info['is_guest'] ? $txt['guest_title'] : $user_info['name']);
  2734. if (!empty($_SESSION['ban']['cannot_post']['reason']))
  2735. echo '
  2736. <div style="padding-left: 4ex; padding-top: 1ex;">', $_SESSION['ban']['cannot_post']['reason'], '</div>';
  2737. if (!empty($_SESSION['ban']['expire_time']))
  2738. echo '
  2739. <div>', sprintf($txt['your_ban_expires'], timeformat($_SESSION['ban']['expire_time'], false)), '</div>';
  2740. else
  2741. echo '
  2742. <div>', $txt['your_ban_expires_never'], '</div>';
  2743. echo '
  2744. </div>';
  2745. }
  2746. }
  2747. if (isset($settings['use_default_images']) && $settings['use_default_images'] == 'defaults' && isset($settings['default_template']))
  2748. {
  2749. $settings['theme_url'] = $settings['default_theme_url'];
  2750. $settings['images_url'] = $settings['default_images_url'];
  2751. $settings['theme_dir'] = $settings['default_theme_dir'];
  2752. }
  2753. }
  2754. /**
  2755. * Show the copyright.
  2756. */
  2757. function theme_copyright()
  2758. {
  2759. global $forum_copyright, $context, $boardurl, $forum_version, $txt, $modSettings;
  2760. // Don't display copyright for things like SSI.
  2761. if (!isset($forum_version))
  2762. return;
  2763. // Put in the version...
  2764. $forum_copyright = sprintf($forum_copyright, $forum_version);
  2765. echo '
  2766. <span class="smalltext" style="display: inline; visibility: visible; font-family: Verdana, Arial, sans-serif;">' . $forum_copyright . '
  2767. </span>';
  2768. }
  2769. /**
  2770. * The template footer
  2771. */
  2772. function template_footer()
  2773. {
  2774. global $context, $settings, $modSettings, $time_start, $db_count;
  2775. // Show the load time? (only makes sense for the footer.)
  2776. $context['show_load_time'] = !empty($modSettings['timeLoadPageEnable']);
  2777. $context['load_time'] = round(array_sum(explode(' ', microtime())) - array_sum(explode(' ', $time_start)), 3);
  2778. $context['load_queries'] = $db_count;
  2779. if (isset($settings['use_default_images']) && $settings['use_default_images'] == 'defaults' && isset($settings['default_template']))
  2780. {
  2781. $settings['theme_url'] = $settings['actual_theme_url'];
  2782. $settings['images_url'] = $settings['actual_images_url'];
  2783. $settings['theme_dir'] = $settings['actual_theme_dir'];
  2784. }
  2785. foreach (array_reverse($context['template_layers']) as $layer)
  2786. loadSubTemplate($layer . '_below', true);
  2787. }
  2788. /**
  2789. * Output the Javascript files
  2790. * - tabbing in this function is to make the HTML source look good proper
  2791. * - if defered is set function will output all JS (source & inline) set to load at page end
  2792. *
  2793. * @param bool $do_defered = false
  2794. */
  2795. function template_javascript($do_defered = false)
  2796. {
  2797. global $context, $modSettings, $settings;
  2798. // Use this hook to minify/optimize Javascript files and vars
  2799. call_integration_hook('pre_javascript_output');
  2800. // Ouput the declared Javascript variables.
  2801. if (!empty($context['javascript_vars']) && !$do_defered)
  2802. {
  2803. echo '
  2804. <script type="text/javascript"><!-- // --><![CDATA[';
  2805. foreach ($context['javascript_vars'] as $key => $value)
  2806. echo '
  2807. var ', $key, ' = ', $value, ';';
  2808. echo '
  2809. // ]]></script>';
  2810. }
  2811. // While we have Javascript files to place in the template
  2812. foreach ($context['javascript_files'] as $id => $js_file)
  2813. {
  2814. if ((!$do_defered && empty($js_file['options']['defer'])) || ($do_defered && !empty($js_file['options']['defer'])))
  2815. echo '
  2816. <script type="text/javascript" src="', $js_file['filename'], '" id="', $id,'"' , !empty($js_file['options']['async']) ? ' async="async"' : '' ,'></script>';
  2817. // If we are loading JQuery and we are set to 'auto' load, put in our remote success or load local check
  2818. if ($id == 'jquery' && (!isset($modSettings['jquery_source']) || !in_array($modSettings['jquery_source'],array('local', 'cdn'))))
  2819. echo '
  2820. <script type="text/javascript"><!-- // --><![CDATA[
  2821. window.jQuery || document.write(\'<script src="' . $settings['default_theme_url'] . '/scripts/jquery-1.7.1.min.js"><\/script>\');
  2822. // ]]></script>';
  2823. }
  2824. // Inline JavaScript - Actually useful some times!
  2825. if (!empty($context['javascript_inline']))
  2826. {
  2827. if (!empty($context['javascript_inline']['defer']) && $do_defered)
  2828. {
  2829. echo '
  2830. <script type="text/javascript"><!-- // --><![CDATA[';
  2831. foreach ($context['javascript_inline']['defer'] as $js_code)
  2832. echo $js_code;
  2833. echo'
  2834. // ]]></script>';
  2835. }
  2836. if (!empty($context['javascript_inline']['standard']) && !$do_defered)
  2837. {
  2838. echo '
  2839. <script type="text/javascript"><!-- // --><![CDATA[';
  2840. foreach ($context['javascript_inline']['standard'] as $js_code)
  2841. echo $js_code;
  2842. echo'
  2843. // ]]></script>';
  2844. }
  2845. }
  2846. }
  2847. /**
  2848. * Output the CSS files
  2849. */
  2850. function template_css()
  2851. {
  2852. global $context;
  2853. // Use this hook to minify/optimize CSS files
  2854. call_integration_hook('pre_css_output');
  2855. foreach ($context['css_files'] as $id => $file)
  2856. echo '
  2857. <link rel="stylesheet" type="text/css" href="', $file['filename'], '" id="', $id,'" />';
  2858. }
  2859. /**
  2860. * Get an attachment's encrypted filename. If $new is true, won't check for file existence.
  2861. * @todo this currently returns the hash if new, and the full filename otherwise.
  2862. * Something messy like that.
  2863. * @todo and of course everything relies on this behavior and work around it. :P.
  2864. * Converters included.
  2865. *
  2866. * @param $filename
  2867. * @param $attachment_id
  2868. * @param $dir
  2869. * @param $new
  2870. * @param $file_hash
  2871. */
  2872. function getAttachmentFilename($filename, $attachment_id, $dir = null, $new = false, $file_hash = '')
  2873. {
  2874. global $modSettings, $smcFunc;
  2875. // Just make up a nice hash...
  2876. if ($new)
  2877. return sha1(md5($filename . time()) . mt_rand());
  2878. // Grab the file hash if it wasn't added.
  2879. // @todo: Locate all places that don't call a hash and fix that.
  2880. if ($file_hash === '')
  2881. {
  2882. $request = $smcFunc['db_query']('', '
  2883. SELECT file_hash
  2884. FROM {db_prefix}attachments
  2885. WHERE id_attach = {int:id_attach}',
  2886. array(
  2887. 'id_attach' => $attachment_id,
  2888. ));
  2889. if ($smcFunc['db_num_rows']($request) === 0)
  2890. return false;
  2891. list ($file_hash) = $smcFunc['db_fetch_row']($request);
  2892. $smcFunc['db_free_result']($request);
  2893. }
  2894. // In case of files from the old system, do a legacy call.
  2895. if (empty($file_hash))
  2896. return getLegacyAttachmentFilename($filename, $attachment_id, $dir, $new);
  2897. // Are we using multiple directories?
  2898. if (!empty($modSettings['currentAttachmentUploadDir']))
  2899. {
  2900. if (!is_array($modSettings['attachmentUploadDir']))
  2901. $modSettings['attachmentUploadDir'] = unserialize($modSettings['attachmentUploadDir']);
  2902. $path = $modSettings['attachmentUploadDir'][$dir];
  2903. }
  2904. else
  2905. $path = $modSettings['attachmentUploadDir'];
  2906. return $path . '/' . $attachment_id . '_' . $file_hash;
  2907. }
  2908. /**
  2909. * Older attachments may still use this function.
  2910. *
  2911. * @param $filename
  2912. * @param $attachment_id
  2913. * @param $dir
  2914. * @param $new
  2915. */
  2916. function getLegacyAttachmentFilename($filename, $attachment_id, $dir = null, $new = false)
  2917. {
  2918. global $modSettings, $db_character_set;
  2919. $clean_name = $filename;
  2920. // Remove international characters (windows-1252)
  2921. // These lines should never be needed again. Still, behave.
  2922. if (empty($db_character_set) || $db_character_set != 'utf8')
  2923. {
  2924. $clean_name = strtr($filename,
  2925. "\x8a\x8e\x9a\x9e\x9f\xc0\xc1\xc2\xc3\xc4\xc5\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd1\xd2\xd3\xd4\xd5\xd6\xd8\xd9\xda\xdb\xdc\xdd\xe0\xe1\xe2\xe3\xe4\xe5\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf1\xf2\xf3\xf4\xf5\xf6\xf8\xf9\xfa\xfb\xfc\xfd\xff",
  2926. 'SZszYAAAAAACEEEEIIIINOOOOOOUUUUYaaaaaaceeeeiiiinoooooouuuuyy');
  2927. $clean_name = strtr($clean_name, array("\xde" => 'TH', "\xfe" =>
  2928. 'th', "\xd0" => 'DH', "\xf0" => 'dh', "\xdf" => 'ss', "\x8c" => 'OE',
  2929. // @todo My IDE is showing \c6 as a bad escape sequence.
  2930. "\x9c" => 'oe', "\c6" => 'AE', "\xe6" => 'ae', "\xb5" => 'u'));
  2931. }
  2932. // Sorry, no spaces, dots, or anything else but letters allowed.
  2933. $clean_name = preg_replace(array('/\s/', '/[^\w_\.\-]/'), array('_', ''), $clean_name);
  2934. $enc_name = $attachment_id . '_' . strtr($clean_name, '.', '_') . md5($clean_name);
  2935. $clean_name = preg_replace('~\.[\.]+~', '.', $clean_name);
  2936. if ($attachment_id == false || ($new && empty($modSettings['attachmentEncryptFilenames'])))
  2937. return $clean_name;
  2938. elseif ($new)
  2939. return $enc_name;
  2940. // Are we using multiple directories?
  2941. if (!empty($modSettings['currentAttachmentUploadDir']))
  2942. {
  2943. if (!is_array($modSettings['attachmentUploadDir']))
  2944. $modSettings['attachmentUploadDir'] = unserialize($modSettings['attachmentUploadDir']);
  2945. $path = $modSettings['attachmentUploadDir'][$dir];
  2946. }
  2947. else
  2948. $path = $modSettings['attachmentUploadDir'];
  2949. if (file_exists($path . '/' . $enc_name))
  2950. $filename = $path . '/' . $enc_name;
  2951. else
  2952. $filename = $path . '/' . $clean_name;
  2953. return $filename;
  2954. }
  2955. /**
  2956. * Convert a single IP to a ranged IP.
  2957. * internal function used to convert a user-readable format to a format suitable for the database.
  2958. *
  2959. * @param string $fullip
  2960. * @return array|string 'unknown' if the ip in the input was '255.255.255.255'
  2961. */
  2962. function ip2range($fullip)
  2963. {
  2964. // If its IPv6, validate it first.
  2965. if (isValidIPv6($fullip) !== false)
  2966. {
  2967. $ip_parts = explode(':', expandIPv6($fullip, false));
  2968. $ip_array = array();
  2969. if (count($ip_parts) != 8)
  2970. return array();
  2971. for ($i = 0; $i < 8; $i++)
  2972. {
  2973. if ($ip_parts[$i] == '*')
  2974. $ip_array[$i] = array('low' => '0', 'high' => hexdec('ffff'));
  2975. elseif (preg_match('/^([0-9A-Fa-f]{1,4})\-([0-9A-Fa-f]{1,4})$/', $ip_parts[$i], $range) == 1)
  2976. $ip_array[$i] = array('low' => hexdec($range[1]), 'high' => hexdec($range[2]));
  2977. elseif (is_numeric(hexdec($ip_parts[$i])))
  2978. $ip_array[$i] = array('low' => hexdec($ip_parts[$i]), 'high' => hexdec($ip_parts[$i]));
  2979. }
  2980. return $ip_array;
  2981. }
  2982. // Pretend that 'unknown' is 255.255.255.255. (since that can't be an IP anyway.)
  2983. if ($fullip == 'unknown')
  2984. $fullip = '255.255.255.255';
  2985. $ip_parts = explode('.', $fullip);
  2986. $ip_array = array();
  2987. if (count($ip_parts) != 4)
  2988. return array();
  2989. for ($i = 0; $i < 4; $i++)
  2990. {
  2991. if ($ip_parts[$i] == '*')
  2992. $ip_array[$i] = array('low' => '0', 'high' => '255');
  2993. elseif (preg_match('/^(\d{1,3})\-(\d{1,3})$/', $ip_parts[$i], $range) == 1)
  2994. $ip_array[$i] = array('low' => $range[1], 'high' => $range[2]);
  2995. elseif (is_numeric($ip_parts[$i]))
  2996. $ip_array[$i] = array('low' => $ip_parts[$i], 'high' => $ip_parts[$i]);
  2997. }
  2998. // Makes it simpiler to work with.
  2999. $ip_array[4] = array('low' => 0, 'high' => 0);
  3000. $ip_array[5] = array('low' => 0, 'high' => 0);
  3001. $ip_array[6] = array('low' => 0, 'high' => 0);
  3002. $ip_array[7] = array('low' => 0, 'high' => 0);
  3003. return $ip_array;
  3004. }
  3005. /**
  3006. * Lookup an IP; try shell_exec first because we can do a timeout on it.
  3007. *
  3008. * @param string $ip
  3009. */
  3010. function host_from_ip($ip)
  3011. {
  3012. global $modSettings;
  3013. if (($host = cache_get_data('hostlookup-' . $ip, 600)) !== null)
  3014. return $host;
  3015. $t = microtime();
  3016. // Try the Linux host command, perhaps?
  3017. if (!isset($host) && (strpos(strtolower(PHP_OS), 'win') === false || strpos(strtolower(PHP_OS), 'darwin') !== false) && mt_rand(0, 1) == 1)
  3018. {
  3019. if (!isset($modSettings['host_to_dis']))
  3020. $test = @shell_exec('host -W 1 ' . @escapeshellarg($ip));
  3021. else
  3022. $test = @shell_exec('host ' . @escapeshellarg($ip));
  3023. // Did host say it didn't find anything?
  3024. if (strpos($test, 'not found') !== false)
  3025. $host = '';
  3026. // Invalid server option?
  3027. elseif ((strpos($test, 'invalid option') || strpos($test, 'Invalid query name 1')) && !isset($modSettings['host_to_dis']))
  3028. updateSettings(array('host_to_dis' => 1));
  3029. // Maybe it found something, after all?
  3030. elseif (preg_match('~\s([^\s]+?)\.\s~', $test, $match) == 1)
  3031. $host = $match[1];
  3032. }
  3033. // This is nslookup; usually only Windows, but possibly some Unix?
  3034. if (!isset($host) && stripos(PHP_OS, 'win') !== false && strpos(strtolower(PHP_OS), 'darwin') === false && mt_rand(0, 1) == 1)
  3035. {
  3036. $test = @shell_exec('nslookup -timeout=1 ' . @escapeshellarg($ip));
  3037. if (strpos($test, 'Non-existent domain') !== false)
  3038. $host = '';
  3039. elseif (preg_match('~Name:\s+([^\s]+)~', $test, $match) == 1)
  3040. $host = $match[1];
  3041. }
  3042. // This is the last try :/.
  3043. if (!isset($host) || $host === false)
  3044. $host = @gethostbyaddr($ip);
  3045. // It took a long time, so let's cache it!
  3046. if (array_sum(explode(' ', microtime())) - array_sum(explode(' ', $t)) > 0.5)
  3047. cache_put_data('hostlookup-' . $ip, $host, 600);
  3048. return $host;
  3049. }
  3050. /**
  3051. * Chops a string into words and prepares them to be inserted into (or searched from) the database.
  3052. *
  3053. * @param string $text
  3054. * @param int $max_chars = 20
  3055. * @param bool $encrypt = false
  3056. */
  3057. function text2words($text, $max_chars = 20, $encrypt = false)
  3058. {
  3059. global $smcFunc, $context;
  3060. // Step 1: Remove entities/things we don't consider words:
  3061. $words = preg_replace('~(?:[\x0B\0' . ($context['utf8'] ? '\x{A0}' : '\xA0') . '\t\r\s\n(){}\\[\\]<>!@$%^*.,:+=`\~\?/\\\\]+|&(?:amp|lt|gt|quot);)+~' . ($context['utf8'] ? 'u' : ''), ' ', strtr($text, array('<br />' => ' ')));
  3062. // Step 2: Entities we left to letters, where applicable, lowercase.
  3063. $words = un_htmlspecialchars($smcFunc['strtolower']($words));
  3064. // Step 3: Ready to split apart and index!
  3065. $words = explode(' ', $words);
  3066. if ($encrypt)
  3067. {
  3068. $possible_chars = array_flip(array_merge(range(46, 57), range(65, 90), range(97, 122)));
  3069. $returned_ints = array();
  3070. foreach ($words as $word)
  3071. {
  3072. if (($word = trim($word, '-_\'')) !== '')
  3073. {
  3074. $encrypted = substr(crypt($word, 'uk'), 2, $max_chars);
  3075. $total = 0;
  3076. for ($i = 0; $i < $max_chars; $i++)
  3077. $total += $possible_chars[ord($encrypted{$i})] * pow(63, $i);
  3078. $returned_ints[] = $max_chars == 4 ? min($total, 16777215) : $total;
  3079. }
  3080. }
  3081. return array_unique($returned_ints);
  3082. }
  3083. else
  3084. {
  3085. // Trim characters before and after and add slashes for database insertion.
  3086. $returned_words = array();
  3087. foreach ($words as $word)
  3088. if (($word = trim($word, '-_\'')) !== '')
  3089. $returned_words[] = $max_chars === null ? $word : substr($word, 0, $max_chars);
  3090. // Filter out all words that occur more than once.
  3091. return array_unique($returned_words);
  3092. }
  3093. }
  3094. /**
  3095. * Creates an image/text button
  3096. *
  3097. * @param string $name
  3098. * @param string $alt
  3099. * @param string $label = ''
  3100. * @param boolean $custom = ''
  3101. * @param boolean $force_use = false
  3102. * @return string
  3103. */
  3104. function create_button($name, $alt, $label = '', $custom = '', $force_use = false)
  3105. {
  3106. global $settings, $txt, $context;
  3107. // Does the current loaded theme have this and we are not forcing the usage of this function?
  3108. if (function_exists('template_create_button') && !$force_use)
  3109. return template_create_button($name, $alt, $label = '', $custom = '');
  3110. if (!$settings['use_image_buttons'])
  3111. return $txt[$alt];
  3112. elseif (!empty($settings['use_buttons']))
  3113. return '<img src="' . $settings['images_url'] . '/buttons/' . $name . '" alt="' . $txt[$alt] . '" ' . $custom . ' />' . ($label != '' ? '&nbsp;<strong>' . $txt[$label] . '</strong>' : '');
  3114. else
  3115. return '<img src="' . $settings['lang_images_url'] . '/' . $name . '" alt="' . $txt[$alt] . '" ' . $custom . ' />';
  3116. }
  3117. /**
  3118. * Empty out the cache in use as best it can
  3119. *
  3120. * It may only remove the files of a certain type (if the $type parameter is given)
  3121. * Type can be user, data or left blank
  3122. * - user clears out user data
  3123. * - data clears out system / opcode data
  3124. * - If no type is specified will perfom a complete cache clearing
  3125. * For cache engines that do not distinguish on types, a full cache flush will be done
  3126. *
  3127. * @param string $type = ''
  3128. */
  3129. function clean_cache($type = '')
  3130. {
  3131. global $cachedir, $sourcedir, $cache_accelerator, $modSettings, $memcached;
  3132. switch ($cache_accelerator)
  3133. {
  3134. case 'memcached':
  3135. if (function_exists('memcache_flush') || function_exists('memcached_flush') && isset($modSettings['cache_memcached']) && trim($modSettings['cache_memcached']) != '')
  3136. {
  3137. // Not connected yet?
  3138. if (empty($memcached))
  3139. get_memcached_server();
  3140. if (!$memcached)
  3141. return;
  3142. // clear it out
  3143. if (function_exists('memcache_flush'))
  3144. memcache_flush($memcached);
  3145. else
  3146. memcached_flush($memcached);
  3147. }
  3148. break;
  3149. case 'eaccelerator':
  3150. if (function_exists('eaccelerator_clear') && function_exists('eaccelerator_clean') )
  3151. {
  3152. // Clean out the already expired items
  3153. @eaccelerator_clean();
  3154. // Remove all unused scripts and data from shared memory and disk cache,
  3155. // e.g. all data that isn't used in the current requests.
  3156. @eaccelerator_clear();
  3157. }
  3158. case 'mmcache':
  3159. if (function_exists('mmcache_gc'))
  3160. {
  3161. // removes all expired keys from shared memory, this is not a complete cache flush :(
  3162. // @todo there is no clear function, should we try to find all of the keys and delete those? with mmcache_rm
  3163. mmcache_gc();
  3164. }
  3165. break;
  3166. case 'apc':
  3167. if (function_exists('apc_clear_cache'))
  3168. {
  3169. // if passed a type, clear that type out
  3170. if ($type === '' || $type === 'data')
  3171. {
  3172. apc_clear_cache('user');
  3173. apc_clear_cache('system');
  3174. }
  3175. elseif ($type === 'user')
  3176. apc_clear_cache('user');
  3177. }
  3178. break;
  3179. case 'zend':
  3180. if (function_exists('zend_shm_cache_clear'))
  3181. zend_shm_cache_clear('SMF');
  3182. break;
  3183. case 'xcache':
  3184. if (function_exists('xcache_clear_cache'))
  3185. {
  3186. //
  3187. if ($type === '')
  3188. {
  3189. xcache_clear_cache(XC_TYPE_VAR, 0);
  3190. xcache_clear_cache(XC_TYPE_PHP, 0);
  3191. }
  3192. if ($type === 'user')
  3193. xcache_clear_cache(XC_TYPE_VAR, 0);
  3194. if ($type === 'data')
  3195. xcache_clear_cache(XC_TYPE_PHP, 0);
  3196. }
  3197. break;
  3198. default:
  3199. // No directory = no game.
  3200. if (!is_dir($cachedir))
  3201. return;
  3202. // Remove the files in SMF's own disk cache, if any
  3203. $dh = opendir($cachedir);
  3204. while ($file = readdir($dh))
  3205. {
  3206. if ($file != '.' && $file != '..' && $file != 'index.php' && $file != '.htaccess' && (!$type || substr($file, 0, strlen($type)) == $type))
  3207. @unlink($cachedir . '/' . $file);
  3208. }
  3209. closedir($dh);
  3210. break;
  3211. }
  3212. // Invalidate cache, to be sure!
  3213. // ... as long as Load.php can be modified, anyway.
  3214. @touch($sourcedir . '/' . 'Load.php');
  3215. clearstatcache();
  3216. }
  3217. /**
  3218. * Load classes that are both (E_STRICT) PHP 4 and PHP 5 compatible.
  3219. * - removed php4 support
  3220. * - left shell in place for mod compatablily
  3221. *
  3222. * @param string $filename
  3223. * @todo remove this function since we are no longer supporting PHP < 5
  3224. */
  3225. function loadClassFile($filename)
  3226. {
  3227. global $sourcedir;
  3228. if (!file_exists($sourcedir . '/' . $filename))
  3229. fatal_lang_error('error_bad_file', 'general', array($sourcedir . '/' . $filename));
  3230. require_once($sourcedir . '/' . $filename);
  3231. }
  3232. /**
  3233. * Sets up all of the top menu buttons
  3234. * Saves them in the cache if it is available and on
  3235. * Places the results in $context
  3236. *
  3237. */
  3238. function setupMenuContext()
  3239. {
  3240. global $context, $modSettings, $user_info, $txt, $scripturl;
  3241. // Set up the menu privileges.
  3242. $context['allow_search'] = !empty($modSettings['allow_guestAccess']) ? allowedTo('search_posts') : (!$user_info['is_guest'] && allowedTo('search_posts'));
  3243. $context['allow_admin'] = allowedTo(array('admin_forum', 'manage_boards', 'manage_permissions', 'moderate_forum', 'manage_membergroups', 'manage_bans', 'send_mail', 'edit_news', 'manage_attachments', 'manage_smileys'));
  3244. $context['allow_edit_profile'] = !$user_info['is_guest'] && allowedTo(array('profile_view_own', 'profile_view_any', 'profile_identity_own', 'profile_identity_any', 'profile_extra_own', 'profile_extra_any', 'profile_remove_own', 'profile_remove_any', 'moderate_forum', 'manage_membergroups', 'profile_title_own', 'profile_title_any'));
  3245. $context['allow_memberlist'] = allowedTo('view_mlist');
  3246. $context['allow_calendar'] = allowedTo('calendar_view') && !empty($modSettings['cal_enabled']);
  3247. $context['allow_moderation_center'] = $context['user']['can_mod'];
  3248. $context['allow_pm'] = allowedTo('pm_read');
  3249. $cacheTime = $modSettings['lastActive'] * 60;
  3250. // All the buttons we can possible want and then some, try pulling the final list of buttons from cache first.
  3251. if (($menu_buttons = cache_get_data('menu_buttons-' . implode('_', $user_info['groups']) . '-' . $user_info['language'], $cacheTime)) === null || time() - $cacheTime <= $modSettings['settings_updated'])
  3252. {
  3253. $buttons = array(
  3254. 'home' => array(
  3255. 'title' => $txt['home'],
  3256. 'href' => $scripturl,
  3257. 'show' => true,
  3258. 'sub_buttons' => array(
  3259. ),
  3260. 'is_last' => $context['right_to_left'],
  3261. ),
  3262. 'help' => array(
  3263. 'title' => $txt['help'],
  3264. 'href' => $scripturl . '?action=help',
  3265. 'show' => true,
  3266. 'sub_buttons' => array(
  3267. ),
  3268. ),
  3269. 'search' => array(
  3270. 'title' => $txt['search'],
  3271. 'href' => $scripturl . '?action=search',
  3272. 'show' => $context['allow_search'],
  3273. 'sub_buttons' => array(
  3274. ),
  3275. ),
  3276. 'admin' => array(
  3277. 'title' => $txt['admin'],
  3278. 'href' => $scripturl . '?action=admin',
  3279. 'show' => $context['allow_admin'],
  3280. 'sub_buttons' => array(
  3281. 'featuresettings' => array(
  3282. 'title' => $txt['modSettings_title'],
  3283. 'href' => $scripturl . '?action=admin;area=featuresettings',
  3284. 'show' => allowedTo('admin_forum'),
  3285. ),
  3286. 'packages' => array(
  3287. 'title' => $txt['package'],
  3288. 'href' => $scripturl . '?action=admin;area=packages',
  3289. 'show' => allowedTo('admin_forum'),
  3290. ),
  3291. 'errorlog' => array(
  3292. 'title' => $txt['errlog'],
  3293. 'href' => $scripturl . '?action=admin;area=logs;sa=errorlog;desc',
  3294. 'show' => allowedTo('admin_forum') && !empty($modSettings['enableErrorLogging']),
  3295. ),
  3296. 'permissions' => array(
  3297. 'title' => $txt['edit_permissions'],
  3298. 'href' => $scripturl . '?action=admin;area=permissions',
  3299. 'show' => allowedTo('manage_permissions'),
  3300. 'is_last' => true,
  3301. ),
  3302. ),
  3303. ),
  3304. 'moderate' => array(
  3305. 'title' => $txt['moderate'],
  3306. 'href' => $scripturl . '?action=moderate',
  3307. 'show' => $context['allow_moderation_center'],
  3308. 'sub_buttons' => array(
  3309. 'modlog' => array(
  3310. 'title' => $txt['modlog_view'],
  3311. 'href' => $scripturl . '?action=moderate;area=modlog',
  3312. 'show' => !empty($modSettings['modlog_enabled']) && !empty($user_info['mod_cache']) && $user_info['mod_cache']['bq'] != '0=1',
  3313. ),
  3314. 'poststopics' => array(
  3315. 'title' => $txt['mc_unapproved_poststopics'],
  3316. 'href' => $scripturl . '?action=moderate;area=postmod;sa=posts',
  3317. 'show' => $modSettings['postmod_active'] && !empty($user_info['mod_cache']['ap']),
  3318. ),
  3319. 'attachments' => array(
  3320. 'title' => $txt['mc_unapproved_attachments'],
  3321. 'href' => $scripturl . '?action=moderate;area=attachmod;sa=attachments',
  3322. 'show' => $modSettings['postmod_active'] && !empty($user_info['mod_cache']['ap']),
  3323. ),
  3324. 'reports' => array(
  3325. 'title' => $txt['mc_reported_posts'],
  3326. 'href' => $scripturl . '?action=moderate;area=reports',
  3327. 'show' => !empty($user_info['mod_cache']) && $user_info['mod_cache']['bq'] != '0=1',
  3328. 'is_last' => true,
  3329. ),
  3330. ),
  3331. ),
  3332. 'profile' => array(
  3333. 'title' => $txt['profile'],
  3334. 'href' => $scripturl . '?action=profile',
  3335. 'show' => $context['allow_edit_profile'],
  3336. 'sub_buttons' => array(
  3337. 'account' => array(
  3338. 'title' => $txt['account'],
  3339. 'href' => $scripturl . '?action=profile;area=account',
  3340. 'show' => allowedTo(array('profile_identity_any', 'profile_identity_own', 'manage_membergroups')),
  3341. ),
  3342. 'profile' => array(
  3343. 'title' => $txt['forumprofile'],
  3344. 'href' => $scripturl . '?action=profile;area=forumprofile',
  3345. 'show' => allowedTo(array('profile_extra_any', 'profile_extra_own')),
  3346. 'is_last' => true,
  3347. ),
  3348. 'theme' => array(
  3349. 'title' => $txt['theme'],
  3350. 'href' => $scripturl . '?action=profile;area=theme',
  3351. 'show' => allowedTo(array('profile_extra_any', 'profile_extra_own', 'profile_extra_any')),
  3352. ),
  3353. ),
  3354. ),
  3355. 'pm' => array(
  3356. 'title' => $txt['pm_short'],
  3357. 'href' => $scripturl . '?action=pm',
  3358. 'show' => $context['allow_pm'],
  3359. 'sub_buttons' => array(
  3360. 'pm_read' => array(
  3361. 'title' => $txt['pm_menu_read'],
  3362. 'href' => $scripturl . '?action=pm',
  3363. 'show' => allowedTo('pm_read'),
  3364. ),
  3365. 'pm_send' => array(
  3366. 'title' => $txt['pm_menu_send'],
  3367. 'href' => $scripturl . '?action=pm;sa=send',
  3368. 'show' => allowedTo('pm_send'),
  3369. 'is_last' => true,
  3370. ),
  3371. ),
  3372. ),
  3373. 'calendar' => array(
  3374. 'title' => $txt['calendar'],
  3375. 'href' => $scripturl . '?action=calendar',
  3376. 'show' => $context['allow_calendar'],
  3377. 'sub_buttons' => array(
  3378. 'view' => array(
  3379. 'title' => $txt['calendar_menu'],
  3380. 'href' => $scripturl . '?action=calendar',
  3381. 'show' => allowedTo('calendar_post'),
  3382. ),
  3383. 'post' => array(
  3384. 'title' => $txt['calendar_post_event'],
  3385. 'href' => $scripturl . '?action=calendar;sa=post',
  3386. 'show' => allowedTo('calendar_post'),
  3387. 'is_last' => true,
  3388. ),
  3389. ),
  3390. ),
  3391. 'mlist' => array(
  3392. 'title' => $txt['members_title'],
  3393. 'href' => $scripturl . '?action=mlist',
  3394. 'show' => $context['allow_memberlist'],
  3395. 'sub_buttons' => array(
  3396. 'mlist_view' => array(
  3397. 'title' => $txt['mlist_menu_view'],
  3398. 'href' => $scripturl . '?action=mlist',
  3399. 'show' => true,
  3400. ),
  3401. 'mlist_search' => array(
  3402. 'title' => $txt['mlist_search'],
  3403. 'href' => $scripturl . '?action=mlist;sa=search',
  3404. 'show' => true,
  3405. 'is_last' => true,
  3406. ),
  3407. ),
  3408. ),
  3409. 'login' => array(
  3410. 'title' => $txt['login'],
  3411. 'href' => $scripturl . '?action=login',
  3412. 'show' => $user_info['is_guest'],
  3413. 'sub_buttons' => array(
  3414. ),
  3415. ),
  3416. 'register' => array(
  3417. 'title' => $txt['register'],
  3418. 'href' => $scripturl . '?action=register',
  3419. 'show' => $user_info['is_guest'] && $context['can_register'],
  3420. 'sub_buttons' => array(
  3421. ),
  3422. 'is_last' => !$context['right_to_left'],
  3423. ),
  3424. 'logout' => array(
  3425. 'title' => $txt['logout'],
  3426. 'href' => $scripturl . '?action=logout;%1$s=%2$s',
  3427. 'show' => !$user_info['is_guest'],
  3428. 'sub_buttons' => array(
  3429. ),
  3430. 'is_last' => !$context['right_to_left'],
  3431. ),
  3432. );
  3433. // Allow editing menu buttons easily.
  3434. call_integration_hook('integrate_menu_buttons', array(&$buttons));
  3435. // Now we put the buttons in the context so the theme can use them.
  3436. $menu_buttons = array();
  3437. foreach ($buttons as $act => $button)
  3438. if (!empty($button['show']))
  3439. {
  3440. $button['active_button'] = false;
  3441. // This button needs some action.
  3442. if (isset($button['action_hook']))
  3443. $needs_action_hook = true;
  3444. // Make sure the last button truely is the last button.
  3445. if (!empty($button['is_last']))
  3446. {
  3447. if (isset($last_button))
  3448. unset($menu_buttons[$last_button]['is_last']);
  3449. $last_button = $act;
  3450. }
  3451. // Go through the sub buttons if there are any.
  3452. if (!empty($button['sub_buttons']))
  3453. foreach ($button['sub_buttons'] as $key => $subbutton)
  3454. {
  3455. if (empty($subbutton['show']))
  3456. unset($button['sub_buttons'][$key]);
  3457. // 2nd level sub buttons next...
  3458. if (!empty($subbutton['sub_buttons']))
  3459. {
  3460. foreach ($subbutton['sub_buttons'] as $key2 => $sub_button2)
  3461. {
  3462. if (empty($sub_button2['show']))
  3463. unset($button['sub_buttons'][$key]['sub_buttons'][$key2]);
  3464. }
  3465. }
  3466. }
  3467. $menu_buttons[$act] = $button;
  3468. }
  3469. if (!empty($modSettings['cache_enable']) && $modSettings['cache_enable'] >= 2)
  3470. cache_put_data('menu_buttons-' . implode('_', $user_info['groups']) . '-' . $user_info['language'], $menu_buttons, $cacheTime);
  3471. }
  3472. $context['menu_buttons'] = $menu_buttons;
  3473. // Logging out requires the session id in the url.
  3474. if (isset($context['menu_buttons']['logout']))
  3475. $context['menu_buttons']['logout']['href'] = sprintf($context['menu_buttons']['logout']['href'], $context['session_var'], $context['session_id']);
  3476. // Figure out which action we are doing so we can set the active tab.
  3477. // Default to home.
  3478. $current_action = 'home';
  3479. if (isset($context['menu_buttons'][$context['current_action']]))
  3480. $current_action = $context['current_action'];
  3481. elseif ($context['current_action'] == 'search2')
  3482. $current_action = 'search';
  3483. elseif ($context['current_action'] == 'theme')
  3484. $current_action = isset($_REQUEST['sa']) && $_REQUEST['sa'] == 'pick' ? 'profile' : 'admin';
  3485. elseif ($context['current_action'] == 'register2')
  3486. $current_action = 'register';
  3487. elseif ($context['current_action'] == 'login2' || ($user_info['is_guest'] && $context['current_action'] == 'reminder'))
  3488. $current_action = 'login';
  3489. elseif ($context['current_action'] == 'groups' && $context['allow_moderation_center'])
  3490. $current_action = 'moderate';
  3491. // Not all actions are simple.
  3492. if (!empty($needs_action_hook))
  3493. call_integration_hook('integrate_current_action', array($current_action));
  3494. if (isset($context['menu_buttons'][$current_action]))
  3495. $context['menu_buttons'][$current_action]['active_button'] = true;
  3496. if (!$user_info['is_guest'] && $context['user']['unread_messages'] > 0 && isset($context['menu_buttons']['pm']))
  3497. {
  3498. $context['menu_buttons']['pm']['alttitle'] = $context['menu_buttons']['pm']['title'] . ' [' . $context['user']['unread_messages'] . ']';
  3499. $context['menu_buttons']['pm']['title'] .= ' [<strong>' . $context['user']['unread_messages'] . '</strong>]';
  3500. }
  3501. }
  3502. /**
  3503. * Generate a random seed and ensure it's stored in settings.
  3504. */
  3505. function smf_seed_generator()
  3506. {
  3507. global $modSettings;
  3508. // Never existed?
  3509. if (empty($modSettings['rand_seed']))
  3510. {
  3511. $modSettings['rand_seed'] = microtime() * 1000000;
  3512. updateSettings(array('rand_seed' => $modSettings['rand_seed']));
  3513. }
  3514. // Change the seed.
  3515. updateSettings(array('rand_seed' => mt_rand()));
  3516. }
  3517. /**
  3518. * Process functions of an integration hook.
  3519. * calls all functions of the given hook.
  3520. * supports static class method calls.
  3521. *
  3522. * @param string $hook
  3523. * @param array $parameters = array()
  3524. * @return array the results of the functions
  3525. */
  3526. function call_integration_hook($hook, $parameters = array())
  3527. {
  3528. global $modSettings, $settings, $boarddir, $sourcedir, $db_show_debug, $context;
  3529. if ($db_show_debug === true)
  3530. $context['debug']['hooks'][] = $hook;
  3531. $results = array();
  3532. if (empty($modSettings[$hook]))
  3533. return $results;
  3534. $functions = explode(',', $modSettings[$hook]);
  3535. // Loop through each function.
  3536. foreach ($functions as $function)
  3537. {
  3538. $function = trim($function);
  3539. if (strpos($function, '::') !== false)
  3540. {
  3541. $call = explode('::', $function);
  3542. if (strpos($call[1], ':') !== false)
  3543. {
  3544. list($func, $file) = explode(':', $call[1]);
  3545. if (empty($settings['theme_dir']))
  3546. $absPath = strtr(trim($file), array('$boarddir' => $boarddir, '$sourcedir' => $sourcedir));
  3547. else
  3548. $absPath = strtr(trim($file), array('$boarddir' => $boarddir, '$sourcedir' => $sourcedir, '$themedir' => $settings['theme_dir']));
  3549. if (file_exists($absPath))
  3550. require_once($absPath);
  3551. $call = array($call[0], $func);
  3552. }
  3553. }
  3554. else
  3555. {
  3556. $call = $function;
  3557. if (strpos($function, ':') !== false)
  3558. {
  3559. list($func, $file) = explode(':', $function);
  3560. if (empty($settings['theme_dir']))
  3561. $absPath = strtr(trim($file), array('$boarddir' => $boarddir, '$sourcedir' => $sourcedir));
  3562. else
  3563. $absPath = strtr(trim($file), array('$boarddir' => $boarddir, '$sourcedir' => $sourcedir, '$themedir' => $settings['theme_dir']));
  3564. if (file_exists($absPath))
  3565. require_once($absPath);
  3566. $call = $function;
  3567. }
  3568. }
  3569. // Is it valid?
  3570. if (is_callable($call))
  3571. $results[$function] = call_user_func_array($call, $parameters);
  3572. }
  3573. return $results;
  3574. }
  3575. /**
  3576. * Add a function for integration hook.
  3577. * does nothing if the function is already added.
  3578. *
  3579. * @param string $hook
  3580. * @param string $function
  3581. * @param string $file
  3582. * @param bool $permanent = true if true, updates the value in settings table
  3583. */
  3584. function add_integration_function($hook, $function, $file = '', $permanent = true)
  3585. {
  3586. global $smcFunc, $modSettings;
  3587. $integration_call = (!empty($file) && $file !== true) ? $function . ':' . $file : $function;
  3588. // Is it going to be permanent?
  3589. if ($permanent)
  3590. {
  3591. $request = $smcFunc['db_query']('', '
  3592. SELECT value
  3593. FROM {db_prefix}settings
  3594. WHERE variable = {string:variable}',
  3595. array(
  3596. 'variable' => $hook,
  3597. )
  3598. );
  3599. list($current_functions) = $smcFunc['db_fetch_row']($request);
  3600. $smcFunc['db_free_result']($request);
  3601. if (!empty($current_functions))
  3602. {
  3603. $current_functions = explode(',', $current_functions);
  3604. if (in_array($integration_call, $current_functions))
  3605. return;
  3606. $permanent_functions = array_merge($current_functions, array($integration_call));
  3607. }
  3608. else
  3609. $permanent_functions = array($integration_call);
  3610. updateSettings(array($hook => implode(',', $permanent_functions)));
  3611. }
  3612. // Make current function list usable.
  3613. $functions = empty($modSettings[$hook]) ? array() : explode(',', $modSettings[$hook]);
  3614. // Do nothing, if it's already there.
  3615. if (in_array($integration_call, $functions))
  3616. return;
  3617. $functions[] = $integration_call;
  3618. $modSettings[$hook] = implode(',', $functions);
  3619. }
  3620. /**
  3621. * Remove an integration hook function.
  3622. * Removes the given function from the given hook.
  3623. * Does nothing if the function is not available.
  3624. *
  3625. * @param string $hook
  3626. * @param string $function
  3627. * @param string $file
  3628. */
  3629. function remove_integration_function($hook, $function, $file = '')
  3630. {
  3631. global $smcFunc, $modSettings;
  3632. $integration_call = (!empty($file)) ? $function . ':' . $file : $function;
  3633. // Get the permanent functions.
  3634. $request = $smcFunc['db_query']('', '
  3635. SELECT value
  3636. FROM {db_prefix}settings
  3637. WHERE variable = {string:variable}',
  3638. array(
  3639. 'variable' => $hook,
  3640. )
  3641. );
  3642. list($current_functions) = $smcFunc['db_fetch_row']($request);
  3643. $smcFunc['db_free_result']($request);
  3644. if (!empty($current_functions))
  3645. {
  3646. $current_functions = explode(',', $current_functions);
  3647. if (in_array($integration_call, $current_functions))
  3648. updateSettings(array($hook => implode(',', array_diff($current_functions, array($integration_call)))));
  3649. }
  3650. // Turn the function list into something usable.
  3651. $functions = empty($modSettings[$hook]) ? array() : explode(',', $modSettings[$hook]);
  3652. // You can only remove it if it's available.
  3653. if (!in_array($integration_call, $functions))
  3654. return;
  3655. $functions = array_diff($functions, array($integration_call));
  3656. $modSettings[$hook] = implode(',', $functions);
  3657. }
  3658. /**
  3659. * Microsoft uses their own character set Code Page 1252 (CP1252), which is a
  3660. * superset of ISO 8859-1, defining several characters between DEC 128 and 159
  3661. * that are not normally displayable. This converts the popular ones that
  3662. * appear from a cut and paste from windows.
  3663. *
  3664. * @param string $string
  3665. * @return string $string
  3666. */
  3667. function sanitizeMSCutPaste($string)
  3668. {
  3669. global $context;
  3670. if (empty($string))
  3671. return $string;
  3672. // UTF-8 occurences of MS special characters
  3673. $findchars_utf8 = array(
  3674. "\xe2\80\x9a", // single low-9 quotation mark
  3675. "\xe2\80\x9e", // double low-9 quotation mark
  3676. "\xe2\80\xa6", // horizontal ellipsis
  3677. "\xe2\x80\x98", // left single curly quote
  3678. "\xe2\x80\x99", // right single curly quote
  3679. "\xe2\x80\x9c", // left double curly quote
  3680. "\xe2\x80\x9d", // right double curly quote
  3681. "\xe2\x80\x93", // en dash
  3682. "\xe2\x80\x94", // em dash
  3683. );
  3684. // windows 1252 / iso equivalents
  3685. $findchars_iso = array(
  3686. chr(130),
  3687. chr(132),
  3688. chr(133),
  3689. chr(145),
  3690. chr(146),
  3691. chr(147),
  3692. chr(148),
  3693. chr(150),
  3694. chr(151),
  3695. );
  3696. // safe replacements
  3697. $replacechars = array(
  3698. ',', // &sbquo;
  3699. ',,', // &bdquo;
  3700. '...', // &hellip;
  3701. "'", // &lsquo;
  3702. "'", // &rsquo;
  3703. '"', // &ldquo;
  3704. '"', // &rdquo;
  3705. '-', // &ndash;
  3706. '--', // &mdash;
  3707. );
  3708. if ($context['utf8'])
  3709. $string = str_replace($findchars_utf8, $replacechars, $string);
  3710. else
  3711. $string = str_replace($findchars_iso, $replacechars, $string);
  3712. return $string;
  3713. }
  3714. /**
  3715. * Decode numeric html entities to their ascii or UTF8 equivalent character.
  3716. *
  3717. * Callback function for preg_replace_callback in subs-members
  3718. * Uses capture group 2 in the supplied array
  3719. * Does basic scan to ensure characters are inside a valid range
  3720. *
  3721. * @param array $matches
  3722. * @return string $string
  3723. */
  3724. function replaceEntities__callback($matches)
  3725. {
  3726. global $context;
  3727. if (!isset($matches[2]))
  3728. return '';
  3729. $num = $matches[2][0] === 'x' ? hexdec(substr($matches[2], 1)) : (int) $matches[2];
  3730. // remove left to right / right to left overrides
  3731. if ($num === 0x202D || $num === 0x202E)
  3732. return '';
  3733. // Quote, Ampersand, Apostrophe, Less/Greater Than get html replaced
  3734. if (in_array($num, array(0x22, 0x26, 0x27, 0x3C, 0x3E)))
  3735. return '&#' . $num . ';';
  3736. if (empty($context['utf8']))
  3737. {
  3738. // no control characters
  3739. if ($num < 0x20)
  3740. return '';
  3741. // text is text
  3742. elseif ($num < 0x80)
  3743. return chr($num);
  3744. // all others get html-ised
  3745. else
  3746. return '&#' . $matches[2] . ';';
  3747. }
  3748. else
  3749. {
  3750. // <0x20 are control characters, 0x20 is a space, > 0x10FFFF is past the end of the utf8 character set
  3751. // 0xD800 >= $num <= 0xDFFF are surrogate markers (not valid for utf8 text)
  3752. if ($num < 0x20 || $num > 0x10FFFF || ($num >= 0xD800 && $num <= 0xDFFF))
  3753. return '';
  3754. // <0x80 (or less than 128) are standard ascii characters a-z A-Z 0-9 and puncuation
  3755. elseif ($num < 0x80)
  3756. return chr($num);
  3757. // <0x800 (2048)
  3758. elseif ($num < 0x800)
  3759. return chr(($num >> 6) + 192) . chr(($num & 63) + 128);
  3760. // < 0x10000 (65536)
  3761. elseif ($num < 0x10000)
  3762. return chr(($num >> 12) + 224) . chr((($num >> 6) & 63) + 128) . chr(($num & 63) + 128);
  3763. // <= 0x10FFFF (1114111)
  3764. else
  3765. return chr(($num >> 18) + 240) . chr((($num >> 12) & 63) + 128) . chr((($num >> 6) & 63) + 128) . chr(($num & 63) + 128);
  3766. }
  3767. }
  3768. /**
  3769. * Converts html entities to utf8 equivalents
  3770. *
  3771. * Callback function for preg_replace_callback
  3772. * Uses capture group 1 in the supplied array
  3773. * Does basic checks to keep characters inside a viewable range.
  3774. *
  3775. * @param array $matches
  3776. * @return string $string
  3777. */
  3778. function fixchar__callback($matches)
  3779. {
  3780. if (!isset($matches[1]))
  3781. return '';
  3782. $num = $matches[1][0] === 'x' ? hexdec(substr($matches[1], 1)) : (int) $matches[1];
  3783. // <0x20 are control characters, > 0x10FFFF is past the end of the utf8 character set
  3784. // 0xD800 >= $num <= 0xDFFF are surrogate markers (not valid for utf8 text), 0x202D-E are left to right overrides
  3785. if ($num < 0x20 || $num > 0x10FFFF || ($num >= 0xD800 && $num <= 0xDFFF) || $num === 0x202D || $num === 0x202E)
  3786. return '';
  3787. // <0x80 (or less than 128) are standard ascii characters a-z A-Z 0-9 and puncuation
  3788. elseif ($num < 0x80)
  3789. return chr($num);
  3790. // <0x800 (2048)
  3791. elseif ($num < 0x800)
  3792. return chr(($num >> 6) + 192) . chr(($num & 63) + 128);
  3793. // < 0x10000 (65536)
  3794. elseif ($num < 0x10000)
  3795. return chr(($num >> 12) + 224) . chr((($num >> 6) & 63) + 128) . chr(($num & 63) + 128);
  3796. // <= 0x10FFFF (1114111)
  3797. else
  3798. return chr(($num >> 18) + 240) . chr((($num >> 12) & 63) + 128) . chr((($num >> 6) & 63) + 128) . chr(($num & 63) + 128);
  3799. }
  3800. /**
  3801. * Strips out invalid html entities, replaces others with html style &#123; codes
  3802. *
  3803. * Callback function used of preg_replace_callback in smcFunc $ent_checks, for example
  3804. * strpos, strlen, substr etc
  3805. *
  3806. * @param array $matches
  3807. * @return string $string
  3808. */
  3809. function entity_fix__callback($matches)
  3810. {
  3811. if (!isset($matches[2]))
  3812. return '';
  3813. $num = $matches[2][0] === 'x' ? hexdec(substr($matches[2], 1)) : (int) $matches[2];
  3814. // we don't allow control characters, characters out of range, byte markers, etc
  3815. if ($num < 0x20 || $num > 0x10FFFF || ($num >= 0xD800 && $num <= 0xDFFF) || $num == 0x202D || $num == 0x202E)
  3816. return '';
  3817. else
  3818. return '&#' . $num . ';';
  3819. }
  3820. ?>