module.textsanitizer.php

<?php
 
 
class MyTextSanitizer
{
    public $censorConf;

    public $mTextFilter = null;

    public $mMakeClickablePostFilter = null;

    public $mXoopsCodePostFilter = null;

    public function __construct()
    {
        $this->mMakeClickablePostFilter =new XCube_Delegate();
        $this->mMakeClickablePostFilter->register('MyTextSanitizer.MakeClickablePostFilter');
 
        $this->mXoopsCodePostFilter =new XCube_Delegate();
        $this->mXoopsCodePostFilter->register('MyTextSanitizer.XoopsCodePostFilter');
 
        $root =& XCube_Root::getSingleton();
        $this->mTextFilter =& $root->getTextFilter();
    }

    public static function &sGetInstance()
    {
        static $instance;
        if (!isset($instance)) {
            $instance = new MyTextSanitizer();
        }
        return $instance;
    }

    public function getSmileys()
    {
        return $this->mTextFilter->getSmileys();
    }

    public function &smiley($text)
    {
        $text = $this->mTextFilter->smiley($text);
        return $text;
    }

    public function &makeClickable($text)
    {
        $text = $this->mTextFilter->makeClickable($text);
 
        //  RaiseEvent : 'MyTextSanitizer.MakeClickablePostFilter'
        //  Delegate may convert output text with quickApplyFilter rule
        //  Args :
        //      'string'       [I/O] : Text to convert;
        //
        $this->mMakeClickablePostFilter->call(new XCube_Ref($text));
        return $text;
    }

    public function &xoopsCodeDecode($text, $allowimage = 1)
    {
        $text = $this->mTextFilter->convertXCode($text, $allowimage);
 
        // RaiseEvent : 'MyTextSanitizer.XoopsCodePostFilter'
        //  Delegate may convert output text with quickApplyFilter rule
        //  Args :
        //      'string'       [I/O] : Text to convert;
        //      'allowimage'   [I]   : xoopsCodeDecode $allowimage parameter
        //
        $this->mXoopsCodePostFilter->call(new XCube_Ref($text), $allowimage);
        return $text;
    }

    public function _filterImgUrl($matches)
    {
        if ($this->checkUrlString($matches[2])) {
            return $matches[0];
        }
 
        return '';
    }

    public function checkUrlString($text)
    {
        // Check control code
        if (preg_match("/[\\0-\\31]/", $text)) {
            return false;
        }
        // check black pattern(deprecated)
        return !preg_match('/^(javascript|vbscript|about):/i', $text);
    }

    public function &nl2Br($text)
    {
        $ret = $this->mTextFilter->nl2Br($text);
        return $ret;
    }

    public function addSlashes($text)
    {
        // Ensure proper UTF-8 encoding before adding slashes
        if (!mb_check_encoding($text, 'UTF-8')) {
            $text = mb_convert_encoding($text, 'UTF-8', 'auto');
        }
        
        // Use mb_addslashes equivalent for UTF-8 safety
        if (function_exists('mb_ereg_replace')) {
            return mb_ereg_replace('([\'\"\\\\])', '\\\\\\1', $text);
        } else {
            return addslashes($text);
        }
    }
    
    /*
    * if magic_quotes_gpc is on, strip back slashes
    *
    * @param    string  $text
    *
    * @return   string
    */
    public function &stripSlashesGPC($text)
    {
        // Ensure $text is a string
        $text = (string)$text;
    
        // Ensure proper UTF-8 encoding
        if (!mb_check_encoding($text, 'UTF-8')) {
            $text = mb_convert_encoding($text, 'UTF-8', 'auto');
        }
        
        // Use mb_stripslashes equivalent for UTF-8 safety
        if (function_exists('mb_ereg_replace')) {
            $text = mb_ereg_replace('\\\\([\'\"\\\\])', '\\1', (string)$text);
        }
    
        return $text;
    }
 
    /*
    *  for displaying data in html textbox forms
    *
    * @param    string  $text
    * @param    bool    $forEdit (experimental)
    *
    * @return   string
    */
    public function &htmlSpecialChars($text, $forEdit=false)
    {
        if (!$forEdit) {
            $ret = $this->mTextFilter->toShow($text, true);
        } else {
            $ret = $this->mTextFilter->toEdit($text);
        }
        return $ret;
    }

    public function &undoHtmlSpecialChars($text)
    {
        $ret = preg_replace(['/&gt;/i', '/&lt;/i', '/&quot;/i', '/&#039;/i'], ['>', '<', '"', "'"], $text);
        return $ret;
    }

 
    public function _ToShowTarea($text, $html = 0, $smiley = 1, $xcode = 1, $image = 1, $br = 1)
    {
        $text = $this->codePreConv($text, $xcode);
        if (1 !== $html) {
            $text = $this->htmlSpecialChars($text);
        }
        $text = $this->makeClickable($text);
        if (0 !== $smiley) {
            $text = $this->smiley($text);
        }
        if (0 !== $xcode) {
            $text = $this->xoopsCodeDecode($text, $image);
        }
        if (0 !== $br) {
            $text = $this->nl2Br($text);
        }
        $text = $this->codeConv($text, $xcode, $image);
        return $text;
    }

    public function &displayTarea($text, $html = 0, $smiley = 1, $xcode = 1, $image = 1, $br = 1)
    {
        $text = $this->mTextFilter->toShowTarea($text, $html, $smiley, $xcode, $image, $br, true);
        return $text;
    }

    public function &previewTarea($text, $html = 0, $smiley = 1, $xcode = 1, $image = 1, $br = 1)
    {
        $text =& $this->stripSlashesGPC($text);
        $text = $this->mTextFilter->toPreviewTarea($text, $html, $smiley, $xcode, $image, $br, true);
        return $text;
    }

    public function &censorString($text)
    {
        if (!isset($this->censorConf)) {
            $config_handler =& xoops_gethandler('config');
            $this->censorConf =& $config_handler->getConfigsByCat(XOOPS_CONF_CENSOR);
        }
        if (1 == $this->censorConf['censor_enable']) {
            $replacement = $this->censorConf['censor_replace'];
            foreach ($this->censorConf['censor_words'] as $bad) {
                if (!empty($bad)) {
                    $bad = quotemeta($bad);
                    $patterns[] = "/(\s)".$bad . '/siU';
                    $replacements[] = "\\1".$replacement;
                    $patterns[] = '/^' . $bad . '/siU';
                    $replacements[] = $replacement;
                    $patterns[] = "/(\n)".$bad . '/siU';
                    $replacements[] = "\\1".$replacement;
                    $patterns[] = '/]' . $bad . '/siU';
                    $replacements[] = ']' . $replacement;
                    $text = preg_replace($patterns, $replacements, $text);
                }
            }
        }
        return $text;
    }

    public function codePreConv($text, $xcode = 1)
    {
        if (0 !== $xcode) {
            $text = $this->mTextFilter->preConvertXCode($text, $xcode);
        }
        return $text;
    }
 
    public function codeConv($text, $xcode = 1, $image = 1)
    {
        if (0 !== $xcode) {
            $text = $this->mTextFilter->postConvertXCode($text, $xcode);
        }
        return $text;
    }
 
##################### Deprecated Methods ######################

    public function sanitizeForDisplay($text, $allowhtml = 0, $smiley = 1, $bbcode = 1)
    {
        $text = $this->_ToShowTarea($text, $allowhtml, $smiley, $bbcode, 1, 1);
        return $text;
    }
 
    public function sanitizeForPreview($text, $allowhtml = 0, $smiley = 1, $bbcode = 1)
    {
        $text = $this->oopsStripSlashesGPC($text);
        $text = $this->_ToShowTarea($text, $allowhtml, $smiley, $bbcode, 1, 1);
        return $text;
    }
 
    public function makeTboxData4Save($text)
    {
        return $this->addSlashes($text);
    }
 
    public function makeTboxData4Show($text, $smiley=0)
    {
        return $this->mTextFilter->toShow($text, true);
    }
 
    public function makeTboxData4Edit($text)
    {
        return $this->mTextFilter->toEdit($text);
    }
 
    public function makeTboxData4Preview($text, $smiley=0)
    {
        $text = $this->stripSlashesGPC($text);
        $text = $this->mTextFilter->toShow($text, true);
        return $text;
    }
 
    public function makeTboxData4PreviewInForm($text)
    {
        $text = $this->stripSlashesGPC($text);
        return $this->mTextFilter->toEdit($text);
    }
 
    public function makeTareaData4Save($text)
    {
        return $this->addSlashes($text);
    }
 
    public function &makeTareaData4Show($text, $html=1, $smiley=1, $xcode=1)
    {
        $ret = $this->displayTarea($text, $html, $smiley, $xcode);
        return $ret;
    }
 
    public function makeTareaData4Edit($text)
    {
        return $this->mTextFilter->toEdit($text);
    }
 
    public function &makeTareaData4Preview($text, $html=1, $smiley=1, $xcode=1)
    {
        $ret = $this->previewTarea($text, $html, $smiley, $xcode);
        return $ret;
    }
 
    public function makeTareaData4PreviewInForm($text)
    {
        //if magic_quotes_gpc is on, do stipslashes
        $text = $this->stripSlashesGPC($text);
        return $this->mTextFilter->toEdit($text);
    }
 
    public function makeTareaData4InsideQuotes($text)
    {
        return $this->mTextFilter->toShow($text, true);
    }
 
    public function &oopsStripSlashesGPC($text)
    {
        $ret = $this->stripSlashesGPC($text);
        return $ret;
    }
 
    public function &oopsStripSlashesRT($text)
    {
        if (get_magic_quotes_runtime()) {
            $text =& stripslashes($text);
        }
        return $text;
    }
 
    public function &oopsAddSlashes($text)
    {
        $ret = $this->addSlashes($text);
        return $ret;
    }
 
    public function &oopsHtmlSpecialChars($text)
    {
        $ret = $this->mTextFilter->toShow($text, true);
        return $ret;
    }
 
    public function &oopsNl2Br($text)
    {
        $ret = $this->nl2br($text);
        return $ret;
    }
 
    public static function &getInstance()
    {
        $ret = self::sGetInstance();
        return $ret;
    }
}