I've decided to make sources of bbcode parser that is used on this website available. I won't be creating any mods from it, but there are lots of coders on this forum who might do something useful with it. You have full permission to do whatever you want with this code.
bbcode.php:[code file="bbcode.php"]<?php
if ( !defined('IN_PHPBB') )
{
die("Hacking attempt");
}
define("BBCODE_UID_LEN", 10);
define('BBCODE_NOSMILIES_START', '<!-- no smilies start -->');
define('BBCODE_NOSMILIES_END', '<!-- no smilies end -->');
global $current_domain_short, $board_config;
$urls_local = array(
'http://www.' . $current_domain_short . $board_config['forum_path_short'],
'http://' . $current_domain_short . $board_config['forum_path_short']
);
define('AUTOURL', time());
class BBCode {
var $text = '';
var $html = '';
var $allow_html = false;
var $allow_styling = true;
var $allow_bbcode = true;
var $allow_smilies = true;
var $is_sig = false;
var $code_counter = 0;
var $allowed_bbcode = array(
// simple tags
'b' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
'i' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
'u' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
'strong' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
'em' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
'span' => array(
'nested' => true,
'inurl' => true,
),
// size
'size' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
// image
'img' => array(
'nested' => false,
'inurl' => true,
),
// color
'color' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
// urls
'url' => array(
'nested' => false,
'inurl' => false,
),
'a' => array(
'nested' => false,
'inurl' => false,
),
'email' => array(
'nested' => false,
'inurl' => false,
),
// lists
'list' => array(
'nested' => true,
'inurl' => false,
),
'ul' => array(
'nested' => true,
'inurl' => false,
),
'ol' => array(
'nested' => true,
'inurl' => false,
),
'*' => array(
'nested' => true,
'inurl' => false,
),
'li' => array(
'nested' => true,
'inurl' => false,
),
// quote
'quote' => array(
'nested' => true,
'inurl' => false,
),
// code
'code' => array(
'nested' => false,
'inurl' => false,
),
);
var $allowed_html = array(
// simple tags
'b' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
'i' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
'u' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
'strong' => array(
'nested' => true,
'inurl' => true,
),
'allow_empty' => false,
'em' => array(
'nested' => true,
'inurl' => true,
'allow_empty' => false,
),
'span' => array(
'nested' => true,
'inurl' => true,
),
// url
'a' => array(
'nested' => false,
'inurl' => false,
),
// lists
'ul' => array(
'nested' => true,
'inurl' => false,
),
'ol' => array(
'nested' => true,
'inurl' => false,
),
'li' => array(
'nested' => true,
'inurl' => false,
),
// quote
'blockquote' => array(
'nested' => true,
'inurl' => false,
),
);
var $allowed_smilies = array(
array(
'code' => ':wink:',
'replace' => '(wink)',
),
array(
'code' => ';)',
'replace' => '(smile1)',
),
array(
'code' => ':)',
'replace' => '(smile2)',
),
);
var $replaced_smilies = array();
var $data = array();
var $tag = '';
var $params = array();
/**
* Process bbcode/html tag.
* This is the only function you would want to modify to add your own bbcode/html tags.
* Note: this bbcode parser doesn't make any differece of bbcode and html, so <b> and [b] are treated exactly same way
*/
function process_tag(&$item)
{
$tag = $item['tag'];
//echo 'process_tag(', $tag, ')<br />';
$start = substr($this->text, $item['start'], $item['start_len']);
$end = substr($this->text, $item['end'], $item['end_len']);
$content = substr($this->text, $item['start'] + $item['start_len'], $item['end'] - $item['start'] - $item['start_len']);
$error = array(
'valid' => false,
'start' => $this->process_text($start),
'end' => $this->process_text($end)
);
if(isset($item['valid']) && $item['valid'] == false)
{
return $error;
}
// check if empty item is allowed
if(!strlen($content))
{
$allow_empty = true;
if($item['is_html'] && isset($this->allowed_html[$tag]['allow_empty']) && !$this->allowed_html[$tag]['allow_empty'])
{
$allow_empty = false;
}
if(!$item['is_html'] && isset($this->allowed_bbcode[$tag]['allow_empty']) && !$this->allowed_bbcode[$tag]['allow_empty'])
{
$allow_empty = false;
}
if(!$allow_empty)
{
return array(
'valid' => true,
'html' => '',
'end' => '',
'allow_nested' => false,
);
}
}
// check if nested item is allowed
if($item['iteration'])
{
if($item['is_html'] && !$this->allowed_html[$tag]['nested'])
{
return $error;
}
if(!$item['is_html'] && !$this->allowed_bbcode[$tag]['nested'])
{
return $error;
}
}
/**
* Simple tags: B, U, I, EM, STRONG, SPAN
*/
if($tag === 'b' || $tag === 'i' || $tag === 'u' || $tag === 'em' || $tag === 'strong' || $tag === 'span')
{
$extras = $this->allow_styling ? array('style', 'class') : array();
$html = '<' . $tag . $this->add_extras($item['params'], $extras) . '>';
return array(
'valid' => true,
'start' => $html,
'end' => '</' . $tag . '>'
);
}
/**
* IMG
*/
if($tag === 'img')
{
if($this->is_sig)
{
return $error;
}
// main parameters
$params = array(
'src' => false,
'alt' => false,
);
// additional allowed parameters
$extras = $this->allow_styling ? array('width', 'height', 'border', 'style', 'class', 'title') : array('width', 'height', 'border', 'title');
// [img=blah]blah2[/img]
if(isset($item['params']['param']))
{
$params['src'] = $item['params']['param'];
$params['alt'] = $content;
}
// [img src=blah alt=blah width=123][/img]
elseif(isset($item['params']['src']))
{
$params['src'] = $item['params']['src'];
$params['alt'] = isset($item['params']['alt']) ? $item['params']['alt'] : $content;
for($i=0; $i<count($extras); $i++)
{
if(!empty($item['params'][$extras[$i]]))
{
if($extras[$i] === 'style')
{
$style = $this->valid_style($item['params']['style']);
if($style !== false)
{
$params['style'] = $style;
}
}
else
{
$params[$extras[$i]] = $item['params'][$extras[$i]];
}
}
}
}
// [img]blah[/img], [img width=blah]blah[/img]
elseif(!empty($content))
{
$params['src'] = $content;
$params['alt'] = isset($item['params']['alt']) ? $item['params']['alt'] : (isset($params['title']) ? $params['title'] : '');
for($i=0; $i<count($extras); $i++)
{
if(!empty($item['params'][$extras[$i]]))
{
if($extras[$i] === 'style')
{
$style = $this->valid_style($item['params']['style']);
if($style !== false)
{
$params['style'] = $style;
}
}
else
{
$params[$extras[$i]] = $item['params'][$extras[$i]];
}
}
}
}
// generate html
$html = '<img';
foreach($params as $var => $value)
{
$html .= ' ' . $var . '="' . $this->process_text($value) . '"';
}
if(!isset($params['title']))
{
$html .= ' title="' . $this->process_text($params['alt']) . '"';
}
$html .= ' />';
// add url
if(empty($item['inurl']))
{
$html = '<a href="' . $params['src'] . '" target="_blank" title="Click to open image in new window">' . $html . '</a>';
}
return array(
'valid' => true,
'html' => $html,
'allow_nested' => false,
);
}
/**
* LIST
*/
if($tag === 'list' || $tag === 'ul' || $tag === 'ol')
{
if($this->is_sig)
{
return $error;
}
$extras = $this->allow_styling ? array('style', 'class') : array();
// check if nested tags are all [*]
$nested_count = 0;
for($i=0; $i<count($item['items']); $i++)
{
$tag2 = $item['items'][$i]['tag'];
if($tag2 === '*' || $tag2 === 'li')
{
$nested_count ++;
}
}
if(!$nested_count)
{
// no <li> items. return error
return $error;
}
// replace "list" with html tag
if($tag === 'list')
{
if(isset($item['params']['param']) || isset($item['params']['type']))
{
$tag = 'ol';
}
else
{
$tag = 'ul';
}
}
// valid tag. process subitems to make sure there are no extra items and remove all code between elements
$last_item = false;
for($i=0; $i<count($item['items']); $i++)
{
$item2 = &$item['items'][$i];
$tag2 = $item2['tag'];
if($tag2 === '*' || $tag2 === 'li')
{
// mark as valid
$item2['list_valid'] = true;
if($last_item === false)
{
// change start position to end of [list]
$pos2 = $item2['start'] + $item2['start_len'];
$item2['start'] = $pos;
$item2['start_len'] = $pos2 - $pos;
$item2['first_entry'] = true;
}
$last_item = &$item['items'][$i];
}
}
// generate html
$html = '<' . $tag;
if(isset($item['params']['param']))
{
$html .= ' type="' . htmlspecialchars($item['params']['param']) . '"';
}
elseif(isset($item['params']['type']))
{
$html .= ' type="' . htmlspecialchars($item['params']['type']) . '"';
}
$html .= $this->add_extras($item['params'], $extras) . '>';
return array(
'valid' => true,
'start' => $html,
'end' => '</li></' . $tag . '>'
);
}
/**
* [*], LI
*/
if($tag === '*' || $tag === 'li')
{
if($this->is_sig)
{
return $error;
}
$extras = $this->allow_styling ? array('style', 'class') : array();
// if not marked as valid return error
if(empty($item['list_valid']))
{
return $error;
}
$html = '<li';
if(empty($item['first_entry']))
{
// add closing tag for previous list entry
$html = '</li>' . $html;
}
$html .= $this->add_extras($item['params'], $extras) . '>';
return array(
'valid' => true,
'start' => $html,
'end' => '',
);
}
/**
* COLOR
*/
if($tag === 'color')
{
if($this->is_sig)
{
return $error;
}
$extras = $this->allow_styling ? array('class') : array();
$color = '';
if(isset($item['params']['param']))
{
$color = $item['params']['param'];
}
elseif(isset($item['params']['color']))
{
$color = $item['params']['color'];
}
else
{
return $error;
}
$color = $this->valid_color($color);
if($color === false)
{
return $error;
}
$html = '<span style="' . ($this->allow_styling && isset($item['params']['style']) ? htmlspecialchars($this->valid_style($item['params']['style'], '')) : '') . 'color: ' . $color . ';"' . $this->add_extras($item['params'], $extras) . '>';
return array(
'valid' => true,
'start' => $html,
'end' => '</span>',
);
}
/**
* SIZE
*/
if($tag === 'size')
{
$extras = $this->allow_styling ? array('class') : array();
$size = 0;
if(isset($item['params']['param']))
{
$size = intval($item['params']['param']);
}
elseif(isset($item['params']['size']))
{
$size = intval($item['params']['size']);
}
else
{
return $error;
}
if($size > 0 && $size < 5)
{
// vBulletin-style sizes
switch($size)
{
case 1: $size = 9; break;
case 2: $size = 12; break;
case 3: $size = 15; break;
case 4: $size = 18; break;
}
}
if($size < 9 || $size > 18)
{
return $error;
}
$html = '<span style="' . ($this->allow_styling && isset($item['params']['style']) ? htmlspecialchars($this->valid_style($item['params']['style'], '')) : '') . 'font-size: ' . $size . 'px;"' . $this->add_extras($item['params'], $extras) . '>';
return array(
'valid' => true,
'start' => $html,
'end' => '</span>',
);
}
/**
* URL, A
*/
if($tag === 'url' || $tag === 'a')
{
$extras = $this->allow_styling ? array('style', 'class', 'name', 'title') : array('name', 'title');
$allow_nested = true;
$strip_text = false;
$show_content = true;
$url = '';
// get url
if(!empty($item['params']['param']))
{
$url = $item['params']['param'];
}
elseif(!empty($item['params']['href']))
{
$url = $item['params']['href'];
}
elseif(!$item['is_html'])
{
$url = $content;
$allow_nested = false;
$strip_text = true;
}
else
{
return $error;
}
if($url === $content && strlen($content) > 64)
{
$content = substr($content, 0, 35) . '...' . substr($content, strlen($content) - 15);
$show_content = false;
}
// check if its email
if(substr(strtolower($url), 0, 7) === 'mailto:')
{
$item['tag'] = 'email';
return $this->process_tag($item);
}
// check for invalid urls
$url = $this->valid_url($url, '');
if(empty($url))
{
return $error;
}
// check nested items
if(!$allow_nested)
{
for($i=0; $i<count($item['items']); $i++)
{
$item['items'][$i]['valid'] = false;
}
}
else
{
for($i=0; $i<count($item['next']); $i++)
{
$tag2 = $item['next'][$i]['tag'];
$is_html = $item['next'][$i]['item']['is_html'];
$item['next'][$i]['item']['inurl'] = true;
if($is_html && !$this->allowed_html[$tag2]['inurl'])
{
$item['next'][$i]['item']['valid'] = false;
}
if(!$is_html && !$this->allowed_bbcode[$tag2]['inurl'])
{
$item['next'][$i]['item']['valid'] = false;
}
}
}
// check for incomplete url
if(substr(strtolower($url), 0, 4) === 'www.')
{
$url = 'http://' . $url;
}
// remove extra characters at the end
$last_char = substr($url, strlen($url) - 1);
$last_char_i = ord($last_char);
if(($last_char_i > 32 && $last_char_i < 47) || ($last_char_i > 57 && $last_char_i < 65))
{
$url = substr($url, 0, strlen($url) - 1);
}
// check if url is local
$url_local = false;
global $urls_local;
for($i=0; $i<count($urls_local); $i++)
{
if(strlen($url) > strlen($urls_local[$i]) && strpos($url, $urls_local[$i]) === 0)
{
$url_local = true;
$url = substr($url, strlen($urls_local[$i]));
}
}
if(!$url_local)
{
if(strpos($url, ':') === false)
{
$url_local = true;
}
}
// generate html
$html = '<a' . ($this->allow_styling && isset($item['params']['class']) ? '' : ' class="post-url"') . ' href="' . htmlspecialchars($url) . '"' . ($url_local ? '' : ' target="_blank"') . $this->add_extras($item['params'], $extras) . '>';
if($show_content)
{
return array(
'valid' => true,
'start' => $html,
'end' => '</a>',
);
}
else
{
return array(
'valid' => true,
'html' => $html . $content . '</a>',
'allow_nested' => false,
);
}
}
/**
*/
if($tag === 'email')
{
$extras = $this->allow_styling ? array('style', 'class', 'name', 'title') : array('name', 'title');
$allow_nested = true;
$strip_text = false;
$url = '';
// get url
if(!empty($item['params']['param']))
{
$url = $item['params']['param'];
}
elseif(!empty($item['params']['href']))
{
$url = $item['params']['href'];
}
elseif(!empty($item['params']['addr']))
{
$url = $item['params']['addr'];
}
else
{
$url = $content;
$pos = strpos($url, '?');
if($pos)
{
$content = substr($url, 0, $pos);
}
if(substr(strtolower($url), 0, 7) === 'mailto:')
{
$content = substr($content, 7);
}
$allow_nested = false;
$strip_text = true;
}
if(empty($url))
{
return $error;
}
// disable nested items
for($i=0; $i<count($item['items']); $i++)
{
$item['items'][$i]['valid'] = false;
}
// generate html
if(substr(strtolower($url), 0, 7) === 'mailto:')
{
$url = substr($url, 7);
}
$email = '<a' . ($this->allow_styling && isset($item['params']['class']) ? '' : ' class="post-email"') . ' href="mailto:' . htmlspecialchars($url) . '"' . $this->add_extras($item['params'], $extras) . '>' . $content . '</a>';
$pos = strpos($url, '?');
if($pos)
{
$str = substr($url, 0, $pos);
}
else
{
$str = $url;
}
$noscript = '<noscript>' . htmlspecialchars(str_replace(array('@', '.'), array(' [at] ', ' [dot] '), $str)) . '</noscript>';
// make javascript from it
$html = BBCODE_NOSMILIES_START . '<script language="JavaScript" type="text/javascript">' . "\n" . '<!--' . "\n";
for($i=0; $i<strlen($email); $i+=5)
{
$str = substr($email, $i, 5);
$html .= 'document.write(\'' . addslashes($str) . '\');' . "\n";
}
$html .= "\n" . '//-->' . "\n" . '</script>' . $noscript . BBCODE_NOSMILIES_END;
return array(
'valid' => true,
'html' => $html,
'allow_nested' => false,
);
}
/**
* QUOTE
*/
if($tag === 'quote' || $tag === 'blockquote')
{
if($this->is_sig)
{
return $error;
}
if($item['iteration'] > 1)
{
return $error;
}
// check user
$user = '';
if(isset($item['params']['param']))
{
$user = htmlspecialchars($item['params']['param']);
}
elseif(isset($item['params']['user']))
{
$user = htmlspecialchars($item['params']['user']);
if(isset($item['params']['userid']) && intval($item['params']['userid']))
{
$user = '<a href="profile.php?mode=viewprofile&[highlight][/highlight]amp;u=' . intval($item['params']['userid']) . '">' . $user . '</a>';
}
}
// generate html
$html = '<blockquote class="quote"';
if(isset($item['params']['post']) && intval($item['params']['post']))
{
$html .= ' cite="viewtopic.php?p=' . intval($item['params']['post']) . '#' . intval($item['params']['post']) . '"';
}
$html .= '>';
if($user)
{
$html .= '<div class="quote-user">' . $user . ' wrote:</div>';
}
else
{
$html .= '<div class="quote-nouser">Quote:</div>';
}
$html .= '<div class="quote-message">';
return array(
'valid' => true,
'start' => $html,
'end' => '</div></blockquote>'
);
}
/**
* CODE
*/
if($tag === 'code')
{
if($this->is_sig)
{
return $error;
}
// replace spaces and tabs with &[highlight][/highlight]nbsp;
if(!defined('EXTRACT_CODE'))
{
$search = array(
' ',
"\t"
);
$replace = array(
' &[highlight][/highlight]nbsp;',
' &[highlight][/highlight]nbsp; &[highlight][/highlight]nbsp;'
);
$text = str_replace($search, $replace, $this->process_text($content, false, true));
}
else
{
$text = $this->process_text($content, false, true);
$search = array('[[highlight][/highlight]highlight]', '[/[highlight][/highlight]highlight]');
$replace = array('', '');
$text = str_replace($search, $replace, $text);
}
// check filename
if(isset($item['params']['filename']))
{
$item['params']['file'] = $item['params']['filename'];
}
if(defined('EXTRACT_CODE') && $this->code_counter == EXTRACT_CODE)
{
$GLOBALS['code_text'] = $text;
if(!empty($item['params']['file']))
{
$GLOBALS['code_filename'] = $item['params']['file'];
}
}
if(substr($text, 0, 1) === "\n")
{
$text = substr($text, 1);
}
elseif(substr($text, 0, 2) === "\r\n")
{
$text = substr($text, 2);
}
// convert to list
$search = array("\n", '[[highlight][/highlight]highlight]', '[/[highlight][/highlight]highlight]');
$replace = array('&[highlight][/highlight]nbsp;</span></li><li class="code-row"><span class="code-row-text">', '<span class="code-row-highlight">', '</span>');
$html = '<li class="code-row code-row-first"><span class="code-row-text">' . str_replace($search, $replace, $text) . '&[highlight][/highlight]nbsp;</span></li>';
$str = '<li class="code-row"><span class="code-row-text">&[highlight][/highlight]nbsp;</span></li>';
if(substr($html, strlen($html) - strlen($str)) === $str)
{
$html = substr($html, 0, strlen($html) - strlen($str));
}
$start = isset($item['params']['start']) ? intval($item['params']['start']) : 1;
$can_download = !empty($GLOBALS['code_post_id']) ? $GLOBALS['code_post_id'] : 0;
if($can_download)
{
$download_text = ' [<a href="download.php?post=' . $can_download;
if($this->code_counter)
{
$download_text .= '&item=' . $this->code_counter;
}
$download_text .= '">download</a>]';
}
else
{
$download_text = '';
}
$code_id = substr(md5($content . mt_rand()), 0,
;
$str = BBCODE_NOSMILIES_START . '<div class="code">';
$str .= '<div class="code-header" id="codehdr2_' . $code_id . '" style="position: relative;">Code:' . (empty($item['params']['file']) ? '' : ' (' . htmlspecialchars($item['params']['file']) . ')') . $download_text . ' [<a href="javascript:void(0)" onclick="ShowHide(\'code_' . $code_id . '\', \'code2_' . $code_id . '\', \'\'); ShowHide(\'codehdr_' . $code_id . '\', \'codehdr2_' . $code_id . '\', \'\')">hide</a>]</div>';
$str .= '<div class="code-header" id="codehdr_' . $code_id . '" style="position: relative; display: none;">Code:' . (empty($item['params']['file']) ? '' : ' (' . htmlspecialchars($item['params']['file']) . ')') . $download_text . ' [<a href="javascript:void(0)" onclick="ShowHide(\'code_' . $code_id . '\', \'code2_' . $code_id . '\', \'\'); ShowHide(\'codehdr_' . $code_id . '\', \'codehdr2_' . $code_id . '\', \'\')">show</a>]</div>';
$html = $str . '<div class="code-content" id="code_' . $code_id . '" style="position: relative;"><ol class="code-list" start="' . $start . '">' . $html . '</ol></div></div>' . BBCODE_NOSMILIES_END;
// check highlight
// format: highlight="1,2,3-10"
if(isset($item['params']['highlight']))
{
$search = '<li class="code-row';
$replace = '<li class="code-row code-row-highlight';
$search_len = strlen($search);
$replace_len = strlen($replace);
// get highlight string
$items = array();
$str = $item['params']['highlight'];
$list = explode(',', $str);
for($i=0; $i<count($list); $i++)
{
$str = trim($list[$i]);
if(strpos($str, '-'))
{
$row = explode('-', $str);
if(count($row) == 2)
{
$num1 = intval($row[0]);
if($num1 == 0)
{
$num1 = 1;
}
$num2 = intval($row[1]);
if($num1 > 0 && $num2 > $num1 && ($num2 - $num1) < 256)
{
for($j=$num1; $j<=$num2; $j++)
{
$items['row' . $j] = true;
}
}
}
}
else
{
$num = intval($str);
if($num)
{
$items['row' . $num] = true;
}
}
}
if(count($items))
{
// process all lines
$num = $start - 1;
$pos = strpos($html, $search);
$total = count($items);
$found = 0;
while($pos !== false)
{
$num ++;
if(isset($items['row' . $num]))
{
$found ++;
$html = substr($html, 0, $pos) . $replace . substr($html, $pos + $search_len);
$pos += $replace_len;
}
else
{
$pos += $search_len;
}
$pos = $found < $total ? strpos($html, $search, $pos) : false;
}
}
}
// $html = BBCODE_NOSMILIES_START . '<div class="code"><div class="code-header">Code:</div><div class="code-content">' . $text . '</div></div>' . BBCODE_NOSMILIES_END;
$this->code_counter ++;
return array(
'valid' => true,
'html' => $html,
'allow_nested' => false
);
}
/**
* Invalid tag
*/
return $error;
}
/**
* Check if bbcode tag is valid
*/
function valid_tag($tag, $is_html)
{
if($is_html)
{
return (isset($this->allowed_html[$tag]) && preg_match('/^[a-z]+$/', $tag)) ? true : false;
}
else
{
return (isset($this->allowed_bbcode[$tag]) && (preg_match('/^[a-z]+$/', $tag) || $tag === '*')) ? true : false;
}
}
/**
* Check if parameter name is valid
*/
function valid_param($param)
{
return preg_match('/^[a-z]+$/', $param);
}
/**
* Check if color is valid
*/
function valid_color($color)
{
$color = strtolower($color);
if(preg_match('/^[a-z]+$/', $color))
{
// text color
return $color;
}
if(substr($color, 0, 1) === '#')
{
// normal color
if(preg_match('/^[0-9a-f]+$/', substr($color, 1)))
{
if(strlen($color) == 4 || strlen($color) == 7)
{
return $color;
}
}
return false;
}
// rgb color
if(substr($color, 0, 4) === 'rgb(' && preg_match('/^rgb\([0-9]+,[0-9]+,[0-9]+\)$/', $color))
{
$colors = explode(',', substr($color, 4, strlen($color) - 5));
for($i=0; $i<3; $i++)
{
if($colors[$i] > 255)
{
return false;
}
}
return sprintf('#%02X%02X%02X', $colors[0], $colors[1], $colors[2]);
}
// color with missing #
if(preg_match('/^[0-9a-f]+$/', $color))
{
if(strlen($color) == 3 || strlen($color) == 6)
{
return '#' . $color;
}
}
return false;
}
/**
* Parse style
*/
function valid_style($style, $error = false)
{
$style = str_replace(array('\\', '"', '@'), array('','',''), $style);
$str = strtolower($style);
if(strpos($str, 'expression') !== false || strpos($str, 'javascript:') !== false || strpos($str, 'vbscript:') !== false || strpos($str, 'about:') !== false)
{
// attempt to use javascript
return $error;
}
if(strpos($str, '//') !== false)
{
// attempt to use external file
return $error;
}
if(strpos($str, '!important') !== false)
{
// attempt to completely mess up forum layout?
return $error;
}
return $style;
}
/**
* Validate url
*/
function valid_url($url, $error = '')
{
$str = strtolower($url);
if(substr($str, 0, 11) === 'javascript:')
{
// attempt to use javascript
return $error;
}
if(substr($str, 0, 9) === 'vbscript:')
{
// attempt to use vbscript
return $error;
}
if(substr($str, 0, 6) === 'about:')
{
// attempt to use about: url
return $error;
}
return $url;
}
/**
* Add extras
*/
function add_extras($params, $extras)
{
$html = '';
for($i=0; $i<count($extras); $i++)
{
if(isset($params[$extras[$i]]))
{
if($extras[$i] === 'style')
{
$style = $this->valid_style($params['style']);
if($style !== false)
{
$html .= ' style="' . htmlspecialchars($style) . '"';
}
}
else
{
$html .= ' ' . $extras[$i] . '="' . htmlspecialchars($params[$extras[$i]]) . '"';
}
}
}
return $html;
}
/**
* Splits string to tag and parameters
*/
function extract_params($tag, $is_html)
{
$this->tag = $tag;
$this->params = array();
$tag = str_replace("\t", ' ', $tag);
// get parameters
$pos_eq = strpos($tag, '=');
$pos_space = strpos($tag, ' ');
if($pos_space !== false && $pos_eq !== false && $pos_space < $pos_eq)
{
// mutiple parameters
$param_start = 0;
$param_str = substr($tag, $pos_space + 1);
$param_len = strlen($param_str);
$this->tag = strtolower(substr($tag, 0, $pos_space));
if(!$this->valid_tag($this->tag, $is_html))
{
return false;
}
while($param_start < $param_len)
{
// find entry for '='
$pos = strpos($param_str, '=', $param_start);
if($pos === false)
{
return false;
}
else
{
// get parameter name
$str = substr($param_str, $param_start, $pos - $param_start);
if(!$this->valid_param($str))
{
return false;
}
// get value
$pos++;
$quoted = false;
if(substr($param_str, $pos, 1) === '"')
{
$pos2 = strpos($param_str, '"', $pos + 1);
if($pos2 === false)
{
// invalid quote. search for space instead
$pos2 = strpos($param_str, ' ', $pos + 1);
}
else
{
$pos++;
$quoted = true;
}
}
else
{
$pos2 = strpos($param_str, ' ', $pos);
}
// end not found. counting until end of expression
if($pos2 === false)
{
$pos2 = $param_len;
}
$this->params[$str] = substr($param_str, $pos, $pos2 - $pos);
$param_start = $pos2 + 1;
if($quoted)
{
$param_start ++;
}
}
}
}
elseif($pos_eq !== false)
{
// single parameter
$str = substr($tag, $pos_eq + 1);
$this->tag = strtolower(substr($tag, 0, $pos_eq));
if(!$this->valid_tag($this->tag, $is_html))
{
return false;
}
if(strlen($str) > 1 && substr($str, 0, 1) === '"' && substr($str, strlen($str) - 1) === '"')
{
$str = substr($str, 1, strlen($str) - 2);
}
if(trim($str) !== $str)
{
return false;
}
$this->params['param'] = $str;
}
else
{
// no parameters
$this->tag = strtolower($tag);
if(!$this->valid_tag($this->tag, $is_html))
{
return false;
}
}
return true;
}
/**
* Recusive function that converts text to bbcode tree
*/
function push($start, $level, $prev_tags)
{
//echo '<b>push</b>(', $start, ', ', $level, ', (', implode(',', $prev_tags), '))<br />';
$items = array();
$pos_start_bbcode = $this->allow_bbcode ? strpos($this->text, '[', $start) : false;
$pos_start_html = $this->;allow_html ? strpos($this->text, '<', $start) : false;
while($pos_start_bbcode !== false || $pos_start_html !== false)
{
$pos_start = $pos_start_bbcode === false ? $pos_start_html : ($pos_start_html === false ? $pos_start_bbcode : min($pos_start_bbcode, $pos_start_html));
$is_html = $pos_start_html === $pos_start ? true : false;
$prev_start = $start;
// found tag. get data.
$pos_end = strpos($this->text, $is_html ? '>' : ']', $pos_start);
if($pos_end === false)
{
$tag_valid = false;
}
else
{
$code = substr($this->text, $pos_start, $pos_end - $pos_start + 1);
// check if tag is valid and get type of tag
$tag_valid = true;
$tag_closing = false;
$tag_self_closing = false;
if(strlen($code) < 3)
{
$tag_valid = false;
}
elseif(!$is_html && strpos($code, '[', 1) !== false)
{
$tag_valid = false;
}
elseif($is_html && strpos($code, '<', 1) !== false)
{
$tag_valid = false;
}
elseif(!$is_html && strpos($code, "\n") !== false)
{
$tag_valid = false;
}
elseif(substr($code, 0, 2) === ($is_html ? '</' : '[/'))
{
$tag_closing = true;
$tag = substr($code, 2, strlen($code) - 3);
}
elseif(substr($code, strlen($code) - 3) === ($is_html ? ' />' : ' /]'))
{
$tag_self_closing = true;
$tag = substr($code, 1, strlen($code) - 4);
}
else
{
$tag = substr($code, 1, strlen($code) - 2);
}
// do not process tag if it requires too much recursion
if($level > 10 && (!$tag_closing && !$tag_self_closing))
{
$tag_valid = false;
}
// special tags
if($code === '[*]')
{
$tag_self_closing = true;
}
}
if($tag_valid)
{
$start = $pos_end;
$params = array();
if(!$tag_closing)
{
if(!$this->extract_params($tag, $is_html))
{
$tag_valid = false;
}
else
{
$tag = $this->tag;
$params = $this->params;
}
}
else
{
if(strpos($tag, ' autourl=' . AUTOURL))
{
$tag = str_replace(' autourl=' . AUTOURL, '', $tag);
}
$tag = strtolower($tag);
if(!$this->valid_tag($tag, $is_html))
{
$tag_valid = false;
}
}
}
if($tag_valid)
{
if($tag_closing)
{
// check if this is correct closing tag
if(in_array($tag, $prev_tags))
{
return array(
'items' => $items,
'tag' => $tag,
'pos' => $pos_end,
'start' => $pos_start,
'len' => strlen($code)
);
}
}
elseif($tag_self_closing)
{
// found self-closing tag
$items[] = array(
'tag' => $tag,
'code' => $code,
'params' => $params,
'start' => $pos_start,
'start_len' => strlen($code),
'end' => $pos_end + 1,
'end_len' => 0,
'level' => $level + 1,
'iteration' => 0,
'self_closing' => 1,
'prev' => array(),
'next' => array(),
'is_html' => $is_html,
'items' => array()
);
}
else
{
// found correct tag. call recursive search
$result = $this->push($pos_end, $level + 1, array_merge($prev_tags, array($tag)));
if($result['tag'] === $tag)
{
// found correctly finished tag
$items[] = array(
'tag' => $tag,
'code' => $code,
'params' => $params,
'start' => $pos_start,
'start_len' => strlen($code),
'end' => $result['start'],
'end_len' => $result['len'],
'level' => $level + 1,
'iteration' => 0,
'self_closing' => 2,
'prev' => array(),
'next' => array(),
'is_html' => $is_html,
'items' => $result['items']
);
$start = $result['pos'];
}
else
{
$items = array_merge($items, $result['items']);
return array(
'items' => $items,
'tag' => $result['tag'],
'pos' => $result['pos'],
'start' => $result['start'],
'len' => $result['len']
);
}
}
}
else
{
$start = $pos_start + 1;
}
$pos_start_bbcode = $this->allow_bbcode ? strpos($this->text, '[', $start) : false;
$pos_start_html = $this->allow_html ? strpos($this->text, '<', $start) : false;
}
return array(
'items' => $items,
'tag' => false,
);
}
/**
* Debug fuction. Prints tree of bbcode
*/
function debug($items)
{
for($i=0; $i<count($items); $i++)
{
$item = $items[$i];
if($item['tag'])
{
for($j=0; $j<$item['level']; $j++)
{
echo '-';
}
echo ' ', $item['tag'], ' (';
$first = true;
foreach($item['params'] as $var => $value)
{
if(!$first) echo ', ';
$first = false;
echo $var, '="', htmlspecialchars($value), '"';
}
echo ")<br />\n";
$this->debug($item['items']);
}
}
}
/**
* Post-processing. Adds previous/next items to every item.
*/
function add_pointers(&$items, $prev_tags)
{
$tags = array();
for($i=0; $i<count($items); $i++)
{
$item = &$items[$i];
$tags[] = array(
'tag' => $item['tag'],
'item' => &$items[$i]
);
$iterations = 0;
for($j=0; $j<count($prev_tags); $j++)
{
if($prev_tags[$j]['tag'] === $item['tag'])
{
$iterations++;
}
}
$item['iteration'] = $iterations;
$item['prev'] = $prev_tags;
// todo: check if subitems are allowed
// parse sub-items
if(count($item['items']))
{
$arr = array(
'tag' => $item['tag'],
'item' => &$items[$i]
);
$item['next'] = $this->add_pointers($item['items'], array_merge($prev_tags, array($arr)));
$tags = array_merge($tags, $item['next']);
}
}
return $tags;
}
/**
* Process text
*/
function process_text($text, $br = true, $chars = true)
{
$search = array(
'[url autourl=' . AUTOURL . ']',
'[/url autourl=' . AUTOURL .']',
'[email autourl=' . AUTOURL . ']',
'[/email autourl=' . AUTOURL .']'
);
$replace = array('','','','');
$text = str_replace($search, $replace, $text);
if($chars)
{
$text = htmlspecialchars($text);
$text = str_replace('&[highlight][/highlight]amp;#', '&[highlight][/highlight]#', $text);
}
else
{
$text = str_replace(
array('&[highlight][/highlight]amp;', '>', '<', '"', '&[highlight][/highlight]amp;#'),
array('&[highlight][/highlight]amp;amp;', '&[highlight][/highlight]gt;', '&[highlight][/highlight]lt;', '&[highlight][/highlight]quot;', '&[highlight][/highlight]#'),
$text);
}
if($br)
{
$text = str_replace("\n", "<br />\n", $text);
}
return $text;
}
/**
* Process tree
*/
function process($start, $end, &$items)
{
$html = '';
for($i=0; $i<count($items); $i++)
{
$item = &$items[$i];
// check code before item
if($item['start'] > $start)
{
$html .= $this->process_text(substr($this->text, $start, $item['start'] - $start));
}
// process tag
$result = $this->process_tag($item);
if($result['valid'] && !isset($result['html']))
{
$html .= $result['start'];
if(!isset($result['allow_nested']) || $result['allow_nested'])
{
// process code inside tag
$html .= $this->process($item['start'] + $item['start_len'], $item['end'], $item['items']);
}
$html .= $result['end'];
}
elseif($result['valid'])
{
$html .= $result['html'];
}
else
{
// invalid tag. show html code for it and process nested tags
$item['valid'] = false;
if($item['start_len'])
{
$html .= $this->process_text(substr($this->text, $item['start'], $item['start_len']));
}
$html .= $this->process($item['start'] + $item['start_len'], $item['end'], $item['items']);
if($item['end_len'])
{
$html .= $this->process_text(substr($this->text, $item['end'], $item['end_len']));
}
}
$start = $item['end'] + $item['end_len'];
}
// process code after item
if($start < $end)
{
$html .= $this->process_text(substr($this->text, $start, $end - $start));
}
return $html;
}
/**
* Prepare smilies list
*/
function prepare_smilies()
{
if(!$this->allow_smilies)
{
return;
}
$this->replaced_smilies = array();
for($i=0; $i<count($this->allowed_smilies); $i++)
{
if(strpos($this->text, $this->allowed_smilies[$i]['code']) !== false)
{
$this->replaced_smilies[] = $this->allowed_smilies[$i];
}
}
}
/**
* Process smilies
*/
function process_smilies()
{
$valid_chars_prev = array('', ' ', "\n", "\r", "\t", '>');
$valid_chars_next = array('', ' ', "\n", "\r", "\t", '<');
if(!$this->allow_smilies && !count($this->replaced_smilies))
{
return;
}
for($i=0; $i<count($this->replaced_smilies); $i++)
{
$code = $this->replaced_smilies[$i]['code'];
$text = $this->replaced_smilies[$i]['replace'];
$code_len = strlen($code);
$text_len = strlen($text);
$pos = strpos($this->html, $code);
while($pos !== false)
{
$valid = false;
// check previous character
$prev_char = $pos > 0 ? substr($this->html, $pos - 1, 1) : '';
if(in_array($prev_char, $valid_chars_prev))
{
// check next character
$next_char = substr($this->html, $pos + $code_len, 1);
if(in_array($next_char, $valid_chars_next))
{
// make sure we aren't inside html code
$pos1 = strpos($this->html, '<', $pos + $code_len);
$pos2 = strpos($this->html, '>', $pos + $code_len);
if($pos2 === false || ($pos1 && $pos1 < $pos2))
{
// make sure we aren't inside nosmilies zone
$pos1 = strpos($this->html, BBCODE_NOSMILIES_START, $pos + $code_len);
$pos2 = strpos($this->html, BBCODE_NOSMILIES_END, $pos + $code_len);
if($pos2 === false || ($pos1 && $pos1 < $pos2))
{
$valid = true;
}
}
}
}
if($valid)
{
$this->html = substr($this->html, 0, $pos) . $text . substr($this->html, $pos + $code_len);
$pos += $text_len;
}
else
{
$pos ++;
}
$pos = strpos($this->html, $code, $pos);
}
}
}
/**
* Make urls clickable
*/
function process_urls()
{
// characters allowed in email
$chars = array();
for($i=224; $i<256; $i++)
{
if($i != 247)
{
$chars .= chr($i);
}
}
// search and replace arrays
$search = array(
"/([\s>])((https?|ftp):\/\/|www\.)([^ \r\n\(\)\^\$!`\"'\|\[\]\{\}<>]+)/si",
"/([\s>])([_a-zA-Z0-9\-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9\-{$chars}]+(\.[a-zA-Z0-9\-{$chars}]+)*(\.[a-zA-Z]{2,}))/si",
);
$replace = array(
"\\1[url autourl=" . AUTOURL . "]\\2\\4[/url autourl=" . AUTOURL . "]",
"\\1[email autourl=" . AUTOURL . "]\\2[/email autourl=" . AUTOURL . "]",
);
$this->text = preg_replace($search, $replace, ' ' . $this->text . ' ');
$this->text = substr($this->text, 1, strlen($this->text) - 2);
}
/**
* Converts text to html code
*/
function parse($text, $id = false)
{
if(defined('IN_PHPBB'))
{
$search = array(
$id ? ':' . $id : '',
'code:1]',
'list:o]',
);
$replace = array(
'',
'code]',
'list]',
);
$text = str_replace($search, $replace, $text);
if($id)
{
$text = undo_htmlspecialchars($text);
}
}
// reset variables
$this->text = $text;
$this->data = array();
$this->html = '';
$this->prepare_smilies();
$this->process_urls();
$this->code_counter = 0;
// if bbcode and html are disabled then return unprocessed text
if(!$this->allow_bbcode && !$this->allow_html)
{
$this->html = $this->text;
$this->process_smilies();
return $this->html;
}
// convert to tree structure
$result = $this->push(0, 0, array());
$this->data = $result['items'];
/*
ob_start();
$this->debug($this->data);
$str = ob_get_contents();
ob_end_clean();
$this->html = 'Debug:<br />' . $str;
return $this->html;
*/
// add prev/next pointers and count iterations
$this->add_pointers($this->data, array());
// convert to html
$this->html = $this->process(0, strlen($this->text), $this->data);
$this->process_smilies();
return $this->html;
}
}
$bbcode = new BBCode();
// Need to initialize the random numbers only ONCE
mt_srand( (double) microtime() * 1000000);
function make_bbcode_uid()
{
// Unique ID for this message..
$uid = md5(mt_rand());
$uid = substr($uid, 0, BBCODE_UID_LEN);
return $uid;
}
$sql = "SELECT * FROM phpbb_smilies";
if(($result = $db->sql_query($sql)) !== false)
{
$smilies = $db->sql_fetchrowset($result);
$bbcode->allowed_smilies = array();
for($i=0; $i<count($smilies); $i++)
{
$arr = array(
'code' => $smilies[$i]['code'],
'replace' => '<img src="images/smiles/' . $smilies[$i]['smile_url'] . '" alt="' . htmlspecialchars($smilies[$i]['emotion']) . '" />'
);
$bbcode->allowed_smilies[] = $arr;
}
}
function undo_htmlspecialchars($input, $full_undo = false)
{
if($full_undo)
{
$input = str_replace('&[highlight][/highlight]nbsp;', '', $input);
}
$input = preg_replace("/&[highlight][/highlight]gt;/i", ">", $input);
$input = preg_replace("/&[highlight][/highlight]lt;/i", "<", $input);
$input = preg_replace("/&[highlight][/highlight]quot;/i", "\"", $input);
$input = preg_replace("/&[highlight][/highlight]amp;/i", "&", $input);
if($full_undo)
{
if(preg_match_all('/&\#([0-9]+);/', $input, $matches) && count($matches))
{
$list = array();
for($i=0; $i<count($matches[1]); $i++)
{
$list[$matches[1][$i]] = true;
}
$search = array();
$replace = array();
foreach($list as $var => $value)
{
$search[] = '&[highlight][/highlight]#' . $var . ';';
$replace[] = chr($var);
}
$input = str_replace($search, $replace, $input);
}
}
return $input;
}
?>[/code]
