replace) // returns substituted string. // WARNING: this is pretty basic, and doesn't properly handle search strings that are substrings of each other. // For instance if 'test' => "foo" and 'testing' => "bar", testing could become either bar or fooing, // depending on the order in which they were declared in the array. require_once("include/template_processor.php"); if(! function_exists('replace_macros')) { function replace_macros($s,$r) { global $t; //$ts = microtime(); $r = $t->replace($s,$r); //$tt = microtime() - $ts; //$a = get_app(); //$a->page['debug'] .= "$tt
\n"; return template_unescape($r); }} // random string, there are 86 characters max in text mode, 128 for hex // output is urlsafe define('RANDOM_STRING_HEX', 0x00 ); define('RANDOM_STRING_TEXT', 0x01 ); if(! function_exists('random_string')) { function random_string($size = 64,$type = RANDOM_STRING_HEX) { // generate a bit of entropy and run it through the whirlpool $s = hash('whirlpool', (string) rand() . uniqid(rand(),true) . (string) rand(),(($type == RANDOM_STRING_TEXT) ? true : false)); $s = (($type == RANDOM_STRING_TEXT) ? str_replace("\n","",base64url_encode($s,true)) : $s); return(substr($s,0,$size)); }} /** * This is our primary input filter. * * The high bit hack only involved some old IE browser, forget which (IE5/Mac?) * that had an XSS attack vector due to stripping the high-bit on an 8-bit character * after cleansing, and angle chars with the high bit set could get through as markup. * * This is now disabled because it was interfering with some legitimate unicode sequences * and hopefully there aren't a lot of those browsers left. * * Use this on any text input where angle chars are not valid or permitted * They will be replaced with safer brackets. This may be filtered further * if these are not allowed either. * */ if(! function_exists('notags')) { function notags($string) { return(str_replace(array("<",">"), array('[',']'), $string)); // High-bit filter no longer used // return(str_replace(array("<",">","\xBA","\xBC","\xBE"), array('[',']','','',''), $string)); }} // use this on "body" or "content" input where angle chars shouldn't be removed, // and allow them to be safely displayed. if(! function_exists('escape_tags')) { function escape_tags($string) { return(htmlspecialchars($string)); }} // generate a string that's random, but usually pronounceable. // used to generate initial passwords if(! function_exists('autoname')) { function autoname($len) { $vowels = array('a','a','ai','au','e','e','e','ee','ea','i','ie','o','ou','u'); if(mt_rand(0,5) == 4) $vowels[] = 'y'; $cons = array( 'b','bl','br', 'c','ch','cl','cr', 'd','dr', 'f','fl','fr', 'g','gh','gl','gr', 'h', 'j', 'k','kh','kl','kr', 'l', 'm', 'n', 'p','ph','pl','pr', 'qu', 'r','rh', 's','sc','sh','sm','sp','st', 't','th','tr', 'v', 'w','wh', 'x', 'z','zh' ); $midcons = array('ck','ct','gn','ld','lf','lm','lt','mb','mm', 'mn','mp', 'nd','ng','nk','nt','rn','rp','rt'); $noend = array('bl', 'br', 'cl','cr','dr','fl','fr','gl','gr', 'kh', 'kl','kr','mn','pl','pr','rh','tr','qu','wh'); $start = mt_rand(0,2); if($start == 0) $table = $vowels; else $table = $cons; $word = ''; for ($x = 0; $x < $len; $x ++) { $r = mt_rand(0,count($table) - 1); $word .= $table[$r]; if($table == $vowels) $table = array_merge($cons,$midcons); else $table = $vowels; } $word = substr($word,0,$len); foreach($noend as $noe) { if((strlen($word) > 2) && (substr($word,-2) == $noe)) { $word = substr($word,0,-1); break; } } if(substr($word,-1) == 'q') $word = substr($word,0,-1); return $word; }} // escape text ($str) for XML transport // returns escaped text. if(! function_exists('xmlify')) { function xmlify($str) { $buffer = ''; for($x = 0; $x < mb_strlen($str); $x ++) { $char = $str[$x]; switch( $char ) { case "\r" : break; case "&" : $buffer .= '&'; break; case "'" : $buffer .= '''; break; case "\"" : $buffer .= '"'; break; case '<' : $buffer .= '<'; break; case '>' : $buffer .= '>'; break; case "\n" : $buffer .= "\n"; break; default : $buffer .= $char; break; } } $buffer = trim($buffer); return($buffer); }} // undo an xmlify // pass xml escaped text ($s), returns unescaped text if(! function_exists('unxmlify')) { function unxmlify($s) { $ret = str_replace('&','&', $s); $ret = str_replace(array('<','>','"','''),array('<','>','"',"'"),$ret); return $ret; }} // convenience wrapper, reverse the operation "bin2hex" if(! function_exists('hex2bin')) { function hex2bin($s) { if(! (is_string($s) && strlen($s))) return ''; if(! ctype_xdigit($s)) { logger('hex2bin: illegal input: ' . print_r(debug_backtrace(), true)); return($s); } return(pack("H*",$s)); }} // Automatic pagination. // To use, get the count of total items. // Then call $a->set_pager_total($number_items); // Optionally call $a->set_pager_itemspage($n) to the number of items to display on each page // Then call paginate($a) after the end of the display loop to insert the pager block on the page // (assuming there are enough items to paginate). // When using with SQL, the setting LIMIT %d, %d => $a->pager['start'],$a->pager['itemspage'] // will limit the results to the correct items for the current page. // The actual page handling is then accomplished at the application layer. if(! function_exists('paginate')) { function paginate(&$a) { $o = ''; $stripped = preg_replace('/(&page=[0-9]*)/','',$a->query_string); $stripped = str_replace('q=','',$stripped); $stripped = trim($stripped,'/'); $pagenum = $a->pager['page']; $url = $a->get_baseurl() . '/' . $stripped; if($a->pager['total'] > $a->pager['itemspage']) { $o .= '
'; if($a->pager['page'] != 1) $o .= ''."pager['page'] - 1).'">' . t('prev') . ' '; $o .= "" . t('first') . " "; $numpages = $a->pager['total'] / $a->pager['itemspage']; $numstart = 1; $numstop = $numpages; if($numpages > 14) { $numstart = (($pagenum > 7) ? ($pagenum - 7) : 1); $numstop = (($pagenum > ($numpages - 7)) ? $numpages : ($numstart + 14)); } for($i = $numstart; $i <= $numstop; $i++){ if($i == $a->pager['page']) $o .= ''.(($i < 10) ? ' '.$i : $i); else $o .= "".(($i < 10) ? ' '.$i : $i).""; $o .= ' '; } if(($a->pager['total'] % $a->pager['itemspage']) != 0) { if($i == $a->pager['page']) $o .= ''.(($i < 10) ? ' '.$i : $i); else $o .= "".(($i < 10) ? ' '.$i : $i).""; $o .= ' '; } $lastpage = (($numpages > intval($numpages)) ? intval($numpages)+1 : $numpages); $o .= "" . t('last') . " "; if(($a->pager['total'] - ($a->pager['itemspage'] * $a->pager['page'])) > 0) $o .= ''."pager['page'] + 1).'">' . t('next') . ''; $o .= '
'."\r\n"; } return $o; }} // Turn user/group ACLs stored as angle bracketed text into arrays if(! function_exists('expand_acl')) { function expand_acl($s) { // turn string array of angle-bracketed elements into numeric array // e.g. "<1><2><3>" => array(1,2,3); $ret = array(); if(strlen($s)) { $t = str_replace('<','',$s); $a = explode('>',$t); foreach($a as $aa) { if(intval($aa)) $ret[] = intval($aa); } } return $ret; }} // Used to wrap ACL elements in angle brackets for storage if(! function_exists('sanitise_acl')) { function sanitise_acl(&$item) { if(intval($item)) $item = '<' . intval(notags(trim($item))) . '>'; else unset($item); }} // Convert an ACL array to a storable string if(! function_exists('perms2str')) { function perms2str($p) { $ret = ''; $tmp = $p; if(is_array($tmp)) { array_walk($tmp,'sanitise_acl'); $ret = implode('',$tmp); } return $ret; }} // generate a guaranteed unique (for this domain) item ID for ATOM // safe from birthday paradox if(! function_exists('item_new_uri')) { function item_new_uri($hostname,$uid) { do { $dups = false; $hash = random_string(); $uri = "urn:X-dfrn:" . $hostname . ':' . $uid . ':' . $hash; $r = q("SELECT `id` FROM `item` WHERE `uri` = '%s' LIMIT 1", dbesc($uri)); if(count($r)) $dups = true; } while($dups == true); return $uri; }} // Generate a guaranteed unique photo ID. // safe from birthday paradox if(! function_exists('photo_new_resource')) { function photo_new_resource() { do { $found = false; $resource = hash('md5',uniqid(mt_rand(),true)); $r = q("SELECT `id` FROM `photo` WHERE `resource-id` = '%s' LIMIT 1", dbesc($resource) ); if(count($r)) $found = true; } while($found == true); return $resource; }} // wrapper to load a view template, checking for alternate // languages before falling back to the default // obsolete, deprecated. if(! function_exists('load_view_file')) { function load_view_file($s) { global $lang, $a; if(! isset($lang)) $lang = 'en'; $b = basename($s); $d = dirname($s); if(file_exists("$d/$lang/$b")) return file_get_contents("$d/$lang/$b"); $theme = current_theme(); if(file_exists("$d/theme/$theme/$b")) return file_get_contents("$d/theme/$theme/$b"); return file_get_contents($s); }} if(! function_exists('get_intltext_template')) { function get_intltext_template($s) { global $lang; if(! isset($lang)) $lang = 'en'; if(file_exists("view/$lang/$s")) return file_get_contents("view/$lang/$s"); elseif(file_exists("view/en/$s")) return file_get_contents("view/en/$s"); else return file_get_contents("view/$s"); }} if(! function_exists('get_markup_template')) { function get_markup_template($s) { $a=get_app(); $theme = current_theme(); if(file_exists("view/theme/$theme/$s")) return file_get_contents("view/theme/$theme/$s"); elseif (x($a->theme_info,"extends") && file_exists("view/theme/".$a->theme_info["extends"]."/$s")) return file_get_contents("view/theme/".$a->theme_info["extends"]."/$s"); else return file_get_contents("view/$s"); }} // for html,xml parsing - let's say you've got // an attribute foobar="class1 class2 class3" // and you want to find out if it contains 'class3'. // you can't use a normal sub string search because you // might match 'notclass3' and a regex to do the job is // possible but a bit complicated. // pass the attribute string as $attr and the attribute you // are looking for as $s - returns true if found, otherwise false if(! function_exists('attribute_contains')) { function attribute_contains($attr,$s) { $a = explode(' ', $attr); if(count($a) && in_array($s,$a)) return true; return false; }} if(! function_exists('logger')) { function logger($msg,$level = 0) { // turn off logger in install mode global $a; global $db; if(($a->module == 'install') || (! ($db && $db->connected))) return; $debugging = get_config('system','debugging'); $loglevel = intval(get_config('system','loglevel')); $logfile = get_config('system','logfile'); if((! $debugging) || (! $logfile) || ($level > $loglevel)) return; @file_put_contents($logfile, datetime_convert() . ':' . session_id() . ' ' . $msg . "\n", FILE_APPEND); return; }} if(! function_exists('activity_match')) { function activity_match($haystack,$needle) { if(($haystack === $needle) || ((basename($needle) === $haystack) && strstr($needle,NAMESPACE_ACTIVITY_SCHEMA))) return true; return false; }} // Pull out all #hashtags and @person tags from $s; // We also get @person@domain.com - which would make // the regex quite complicated as tags can also // end a sentence. So we'll run through our results // and strip the period from any tags which end with one. // Returns array of tags found, or empty array. if(! function_exists('get_tags')) { function get_tags($s) { $ret = array(); // ignore anything in a code block $s = preg_replace('/\[code\](.*?)\[\/code\]/sm','',$s); // Match full names against @tags including the space between first and last // We will look these up afterward to see if they are full names or not recognisable. if(preg_match_all('/(@[^ \x0D\x0A,:?]+ [^ \x0D\x0A@,:?]+)([ \x0D\x0A@,:?]|$)/',$s,$match)) { foreach($match[1] as $mtch) { if(strstr($mtch,"]")) { // we might be inside a bbcode color tag - leave it alone continue; } if(substr($mtch,-1,1) === '.') $ret[] = substr($mtch,0,-1); else $ret[] = $mtch; } } // Otherwise pull out single word tags. These can be @nickname, @first_last // and #hash tags. if(preg_match_all('/([@#][^ \x0D\x0A,;:?]+)([ \x0D\x0A,;:?]|$)/',$s,$match)) { foreach($match[1] as $mtch) { if(strstr($mtch,"]")) { // we might be inside a bbcode color tag - leave it alone continue; } if(substr($mtch,-1,1) === '.') $mtch = substr($mtch,0,-1); // ignore strictly numeric tags like #1 if((strpos($mtch,'#') === 0) && ctype_digit(substr($mtch,1))) continue; // try not to catch url fragments if(strpos($s,$mtch) && preg_match('/[a-zA-z0-9\/]/',substr($s,strpos($s,$mtch)-1,1))) continue; $ret[] = $mtch; } } return $ret; }} // quick and dirty quoted_printable encoding if(! function_exists('qp')) { function qp($s) { return str_replace ("%","=",rawurlencode($s)); }} if(! function_exists('get_mentions')) { function get_mentions($item) { $o = ''; if(! strlen($item['tag'])) return $o; $arr = explode(',',$item['tag']); foreach($arr as $x) { $matches = null; if(preg_match('/@\[url=([^\]]*)\]/',$x,$matches)) { $o .= "\t\t" . '' . "\r\n"; $o .= "\t\t" . '' . "\r\n"; } } return $o; }} if(! function_exists('contact_block')) { function contact_block() { $o = ''; $a = get_app(); $shown = get_pconfig($a->profile['uid'],'system','display_friend_count'); if($shown === false) $shown = 24; if($shown == 0) return; if((! is_array($a->profile)) || ($a->profile['hide-friends'])) return $o; $r = q("SELECT COUNT(*) AS `total` FROM `contact` WHERE `uid` = %d AND `self` = 0 AND `blocked` = 0 and `pending` = 0 AND `hidden` = 0", intval($a->profile['uid']) ); if(count($r)) { $total = intval($r[0]['total']); } if(! $total) { $contacts = t('No contacts'); $micropro = Null; } else { $r = q("SELECT * FROM `contact` WHERE `uid` = %d AND `self` = 0 AND `blocked` = 0 and `pending` = 0 AND `hidden` = 0 ORDER BY RAND() LIMIT %d", intval($a->profile['uid']), intval($shown) ); if(count($r)) { $contacts = sprintf( tt('%d Contact','%d Contacts', $total),$total); $micropro = Array(); foreach($r as $rr) { $micropro[] = micropro($rr,true,'mpfriend'); } } } $tpl = get_markup_template('contact_block.tpl'); $o = replace_macros($tpl, array( '$contacts' => $contacts, '$nickname' => $a->profile['nickname'], '$viewcontacts' => t('View Contacts'), '$micropro' => $micropro, )); $arr = array('contacts' => $r, 'output' => $o); call_hooks('contact_block_end', $arr); return $o; }} if(! function_exists('micropro')) { function micropro($contact, $redirect = false, $class = '', $textmode = false) { if($class) $class = ' ' . $class; $url = $contact['url']; $sparkle = ''; $redir = false; if($redirect) { $a = get_app(); $redirect_url = $a->get_baseurl() . '/redir/' . $contact['id']; if(local_user() && ($contact['uid'] == local_user()) && ($contact['network'] === 'dfrn')) { $redir = true; $url = $redirect_url; $sparkle = ' sparkle'; } else $url = zrl($url); } $click = ((x($contact,'click')) ? ' onclick="' . $contact['click'] . '" ' : ''); if($click) $url = ''; if($textmode) { return '
'. $contact['name'] . '
' . "\r\n"; } else { return '
' . $contact['name'] 
			. '
' . "\r\n"; } }} if(! function_exists('search')) { function search($s,$id='search-box',$url='/search',$save = false) { $a = get_app(); $o = '
'; $o .= '
'; $o .= ''; $o .= ''; if($save) $o .= ''; $o .= '
'; return $o; }} if(! function_exists('valid_email')) { function valid_email($x){ if(preg_match('/^[_a-zA-Z0-9\-\+]+(\.[_a-zA-Z0-9\-\+]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)+$/',$x)) return true; return false; }} /** * * Function: linkify * * Replace naked text hyperlink with HTML formatted hyperlink * */ if(! function_exists('linkify')) { function linkify($s) { $s = preg_replace("/(https?\:\/\/[a-zA-Z0-9\:\/\-\?\&\;\.\=\_\~\#\'\%\$\!\+]*)/", ' $1', $s); $s = preg_replace("/\<(.*?)(src|href)=(.*?)\&\;(.*?)\>/ism",'<$1$2=$3&$4>',$s); return($s); }} /** * * Function: smilies * * Description: * Replaces text emoticons with graphical images * * @Parameter: string $s * * Returns string * * It is expected that this function will be called using HTML text. * We will escape text between HTML pre and code blocks from being * processed. * * At a higher level, the bbcode [nosmile] tag can be used to prevent this * function from being executed by the prepare_text() routine when preparing * bbcode source for HTML display * */ if(! function_exists('smilies')) { function smilies($s, $sample = false) { $a = get_app(); if(intval(get_config('system','no_smilies')) || (local_user() && intval(get_pconfig(local_user(),'system','no_smilies')))) return $s; $s = preg_replace_callback('/
(.*?)<\/pre>/ism','smile_encode',$s);
	$s = preg_replace_callback('/(.*?)<\/code>/ism','smile_encode',$s);

	$texts =  array( 
		'<3', 
		'</3', 
		'<\\3', 
		':-)', 
		';-)', 
		':-(', 
		':-P', 
		':-p', 
		':-"', 
		':-"', 
		':-x', 
		':-X', 
		':-D', 
		'8-|', 
		'8-O', 
		':-O', 
		'\\o/', 
		'o.O', 
		'O.o', 
		":'(", 
		":-!", 
		":-/", 
		":-[", 
		"8-)",
		':beer', 
		':homebrew', 
		':coffee', 
		':facepalm',
		'~friendika', 
		'~friendica'

	);

	$icons = array(
		'<3',
		'</3',
		'<\\3',
		':-)',
		';-)',
		':-(',
		':-P',
		':-p',
		':-\',
		':-\',
		':-x',
		':-X',
		':-D',
		'8-|',
		'8-O',
		':-O',                
		'\\o/',
		'o.O',
		'O.o',
		':\'(',
		':-!',
		':-/',
		':-[',
		'8-)',
		':beer',
		':homebrew',
		':coffee',
		':facepalm',
		'~friendika ~friendika',
		'~friendica ~friendica'
	);

	$params = array('texts' => $texts, 'icons' => $icons, 'string' => $s);
	call_hooks('smilie', $params);

	if($sample) {
		$s = '
'; for($x = 0; $x < count($params['texts']); $x ++) { $s .= '
' . $params['texts'][$x] . '
' . $params['icons'][$x] . '
'; } } else { $params['string'] = preg_replace_callback('/<(3+)/','preg_heart',$params['string']); $s = str_replace($params['texts'],$params['icons'],$params['string']); } $s = preg_replace_callback('/
(.*?)<\/pre>/ism','smile_decode',$s);
	$s = preg_replace_callback('/(.*?)<\/code>/ism','smile_decode',$s);

	return $s;

}}

function smile_encode($m) {
	return(str_replace($m[1],base64url_encode($m[1]),$m[0]));
}

function smile_decode($m) {
	return(str_replace($m[1],base64url_decode($m[1]),$m[0]));
}

// expand <3333 to the correct number of hearts

function preg_heart($x) {
	$a = get_app();
	if(strlen($x[1]) == 1)
		return $x[0];
	$t = '';
	for($cnt = 0; $cnt < strlen($x[1]); $cnt ++)
		$t .= '<3';
	$r =  str_replace($x[0],$t,$x[0]);
	return $r;
}


if(! function_exists('day_translate')) {
function day_translate($s) {
	$ret = str_replace(array('Monday','Tuesday','Wednesday','Thursday','Friday','Saturday','Sunday'),
		array( t('Monday'), t('Tuesday'), t('Wednesday'), t('Thursday'), t('Friday'), t('Saturday'), t('Sunday')),
		$s);

	$ret = str_replace(array('January','February','March','April','May','June','July','August','September','October','November','December'),
		array( t('January'), t('February'), t('March'), t('April'), t('May'), t('June'), t('July'), t('August'), t('September'), t('October'), t('November'), t('December')),
		$ret);

	return $ret;
}}


if(! function_exists('normalise_link')) {
function normalise_link($url) {
	$ret = str_replace(array('https:','//www.'), array('http:','//'), $url);
	return(rtrim($ret,'/'));
}}

/**
 *
 * Compare two URLs to see if they are the same, but ignore
 * slight but hopefully insignificant differences such as if one 
 * is https and the other isn't, or if one is www.something and 
 * the other isn't - and also ignore case differences.
 *
 * Return true if the URLs match, otherwise false.
 *
 */

if(! function_exists('link_compare')) {
function link_compare($a,$b) {
	if(strcasecmp(normalise_link($a),normalise_link($b)) === 0)
		return true;
	return false;
}}

// Given an item array, convert the body element from bbcode to html and add smilie icons.
// If attach is true, also add icons for item attachments


if(! function_exists('prepare_body')) {
function prepare_body($item,$attach = false) {

	$a = get_app();
	call_hooks('prepare_body_init', $item); 

	$cache = get_config('system','itemcache');

	if (($cache != '')) {
		$cachefile = $cache."/".$item["guid"]."-".strtotime($item["edited"])."-".hash("crc32", $item['body']);

		if (file_exists($cachefile))
			$s = file_get_contents($cachefile);
		else {
			$s = prepare_text($item['body']);
			file_put_contents($cachefile, $s);
		}
	} else
		$s = prepare_text($item['body']);

	$prep_arr = array('item' => $item, 'html' => $s);
	call_hooks('prepare_body', $prep_arr);
	$s = $prep_arr['html'];

	if(! $attach) {
		return $s;
	}

	$arr = explode(',',$item['attach']);
	if(count($arr)) {
		$s .= '
'; foreach($arr as $r) { $matches = false; $icon = ''; $cnt = preg_match('|\[attach\]href=\"(.*?)\" length=\"(.*?)\" type=\"(.*?)\" title=\"(.*?)\"\[\/attach\]|',$r,$matches); if($cnt) { $icontype = strtolower(substr($matches[3],0,strpos($matches[3],'/'))); switch($icontype) { case 'video': case 'audio': case 'image': case 'text': $icon = '
'; break; default: $icon = '
'; break; } $title = ((strlen(trim($matches[4]))) ? escape_tags(trim($matches[4])) : escape_tags($matches[1])); $title .= ' ' . $matches[2] . ' ' . t('bytes'); $s .= '' . $icon . ''; } } $s .= '
'; } $matches = false; $cnt = preg_match_all('/<(.*?)>/',$item['file'],$matches,PREG_SET_ORDER); if($cnt) { // logger('prepare_text: categories: ' . print_r($matches,true), LOGGER_DEBUG); foreach($matches as $mtch) { if(strlen($x)) $x .= ','; $x .= file_tag_decode($mtch[1]); } if(strlen($x)) $s .= '
' . t('Categories:') . ' ' . $x . '
'; } $matches = false; $x = ''; $cnt = preg_match_all('/\[(.*?)\]/',$item['file'],$matches,PREG_SET_ORDER); if($cnt) { // logger('prepare_text: filed_under: ' . print_r($matches,true), LOGGER_DEBUG); foreach($matches as $mtch) { if(strlen($x)) $x .= '   '; $x .= file_tag_decode($mtch[1]). ' ' . t('[remove]') . ''; } if(strlen($x) && (local_user() == $item['uid'])) $s .= '
' . t('Filed under:') . ' ' . $x . '
'; } // Look for spoiler $spoilersearch = '
'; // Remove line breaks before the spoiler while ((strpos($s, "\n".$spoilersearch) !== false)) $s = str_replace("\n".$spoilersearch, $spoilersearch, $s); while ((strpos($s, "
".$spoilersearch) !== false)) $s = str_replace("
".$spoilersearch, $spoilersearch, $s); while ((strpos($s, $spoilersearch) !== false)) { $pos = strpos($s, $spoilersearch); $rnd = random_string(8); $spoilerreplace = '
'.sprintf(t('Click to open/close')).''. '