[help] javascript в ссылке статичной страницы

gruppastimul · 6 Мар 2008

Вставляю в статичную страницу ссылку вида

Код:

<a href="javascript:void" onclick="document.forms.calc.reset(); cost_count();">Очистить</a>

для очистки определённой информации на странице

сохраняю, а в итоге в коде сохраняется совсем другой формат и функция очистить получается не работает.
После сохранения ссылка становится такого вида

Код:

<a href="javascript<b></b>:void" onclick="document.forms.calc.reset(); cost_count();">Очистить</a>

dle зачем-то вставляет между javascript и знаком : bbкоды

Код:

<b></b>

как решить эту трудность ?

topme · 6 Мар 2008

Если можете, попробуйте создать отдельный .JS файл, прописав там вашу строку. А в создании странички,указать на него путь.

gruppastimul · 6 Мар 2008

хм.. не уверен что такое поможет ))

gruppastimul · 6 Мар 2008

решил данную праблемку путем замены

javascript:void на #

но все таки почему dle вставляет туда bbкоды

AdOLF_04 · 6 Мар 2008

Это действительно записано в парсере ВВ-кодов :confused:

:

Код:

javascript:

заменить на

Код:

javascript<b></b>:

Исправить можно подкорректировав этот код в engine/classes/parse.class.php

gruppastimul · 6 Мар 2008

заменив наверно поломается какая-то функция?

AdOLF_04 · 6 Мар 2008

gruppastimul написал(а):
заменив наверно поломается какая-то функция?

нет... это они, на сколько я понял, сделали такую защиту от выполнения скриптов в каментах и т.д.

ORZ · 6 Мар 2008

AdOLF_04 написал(а):
Это действительно записано в парсере ВВ-кодов :

Код:

javascript:

заменить на

Код:

javascript<b></b>:

Исправить можно подкорректировав этот код в engine/classes/parse.class.php

A mozno potochnee ?
Ja toze s etoj problemoj davno stalkivalsia cto ona lomala adsense code.

Dvizok 6.2 vot parse file.

Код:

<?php
/*
=====================================================
 DataLife Engine Nulled by M.I.D-Team
-----------------------------------------------------
 http://www.mid-team.ws/
-----------------------------------------------------
 Copyright (c) 2004,2007 SoftNews Media Group
=====================================================
 Äàííûé êîä çàùèùåí àâòîðñêèìè ïðàâàìè
=====================================================
 Ôàéë: parse.class.php
-----------------------------------------------------
 Íàçíà÷åíèå: Äîáàâëåíèå íîâîñòè
=====================================================
*/

if(!defined('DATALIFEENGINE'))
{
  die("Hacking attempt!");
}

class ParseFilter {
	var $tagsArray;
	var $attrArray;
	var $tagsMethod;
	var $attrMethod;
	var $xssAuto;
	var $code_text = array ();
	var $code_count = 0;
	var $wysiwyg = false;
	var $allow_php = false;
	var $safe_mode = false;
	var $leech_mode = false;
	var $tagBlacklist = array('applet', 'body', 'bgsound', 'base', 'basefont', 'frame', 'frameset', 'head', 'html', 'id', 'iframe', 'ilayer', 'layer', 'link', 'meta', 'name', 'script', 'style', 'title', 'xml');
	var $attrBlacklist = array('action', 'background', 'codebase', 'dynsrc', 'lowsrc');

	var $font_sizes = array( 1 => '8',
							 2 => '10',
							 3 => '12',
							 4 => '14',
							 5 => '18',
							 6 => '24',
							 7 => '36' );

	function ParseFilter($tagsArray = array(), $attrArray = array(), $tagsMethod = 0, $attrMethod = 0, $xssAuto = 1) {		
		for ($i = 0; $i < count($tagsArray); $i++) $tagsArray[$i] = strtolower($tagsArray[$i]);
		for ($i = 0; $i < count($attrArray); $i++) $attrArray[$i] = strtolower($attrArray[$i]);
		$this->tagsArray = (array) $tagsArray;
		$this->attrArray = (array) $attrArray;
		$this->tagsMethod = $tagsMethod;
		$this->attrMethod = $attrMethod;
		$this->xssAuto = $xssAuto;
	}
	function process($source) {
		if (is_array($source)) {
			foreach($source as $key => $value)
				if (is_string($value)) $source[$key] = $this->remove($this->decode($value));
			return $source;
		} elseif (is_string($source)) {

			$source = $this->remove($this->decode($source));

			if($this->code_count) {
				foreach ($this->code_text as $key_find => $key_replace) {
					$find[] = $key_find;
					$replace[] = $key_replace;
				}

			  $source = str_replace($find, $replace, $source);
			}

		  $this->code_count = 0;
		  $this->code_text = array();

		  return $source;
		} else return $source;	
	}
	function remove($source) {
		$loopCounter=0;
		while($source != $this->filterTags($source)) {
			$source = $this->filterTags($source);
			$loopCounter++;
		}
		return $source;
	}	
	function filterTags($source) {
		$preTag = NULL;
		$postTag = $source;
		$tagOpen_start = strpos($source, '<');
		while($tagOpen_start !== FALSE) {
			$preTag .= substr($postTag, 0, $tagOpen_start);
			$postTag = substr($postTag, $tagOpen_start);
			$fromTagOpen = substr($postTag, 1);
			$tagOpen_end = strpos($fromTagOpen, '>');
			if ($tagOpen_end === false) break;
			$tagOpen_nested = strpos($fromTagOpen, '<');
			if (($tagOpen_nested !== false) && ($tagOpen_nested < $tagOpen_end)) {
				$preTag .= substr($postTag, 0, ($tagOpen_nested+1));
				$postTag = substr($postTag, ($tagOpen_nested+1));
				$tagOpen_start = strpos($postTag, '<');
				continue;
			} 
			$tagOpen_nested = (strpos($fromTagOpen, '<') + $tagOpen_start + 1);
			$currentTag = substr($fromTagOpen, 0, $tagOpen_end);
			$tagLength = strlen($currentTag);
			if (!$tagOpen_end) {
				$preTag .= $postTag;
				$tagOpen_start = strpos($postTag, '<');			
			}
			$tagLeft = $currentTag;
			$attrSet = array();
			$currentSpace = strpos($tagLeft, ' ');
			if (substr($currentTag, 0, 1) == "/") {
				$isCloseTag = TRUE;
				list($tagName) = explode(' ', $currentTag);
				$tagName = substr($tagName, 1);
			} else {
				$isCloseTag = FALSE;
				list($tagName) = explode(' ', $currentTag);
			}		
			if ((!preg_match("/^[a-z][a-z0-9]*$/i",$tagName)) || (!$tagName) || ((in_array(strtolower($tagName), $this->tagBlacklist)) && ($this->xssAuto))) { 				
				$postTag = substr($postTag, ($tagLength + 2));
				$tagOpen_start = strpos($postTag, '<');
				continue;
			}
			while ($currentSpace !== FALSE) {
				$fromSpace = substr($tagLeft, ($currentSpace+1));
				$nextSpace = strpos($fromSpace, ' ');
				$openQuotes = strpos($fromSpace, '"');
				$closeQuotes = strpos(substr($fromSpace, ($openQuotes+1)), '"') + $openQuotes + 1;
				if (strpos($fromSpace, '=') !== FALSE) {
					if (($openQuotes !== FALSE) && (strpos(substr($fromSpace, ($openQuotes+1)), '"') !== FALSE))
						$attr = substr($fromSpace, 0, ($closeQuotes+1));
					else $attr = substr($fromSpace, 0, $nextSpace);
				} else $attr = substr($fromSpace, 0, $nextSpace);
				if (!$attr) $attr = $fromSpace;
				$attrSet[] = $attr;
				$tagLeft = substr($fromSpace, strlen($attr));
				$currentSpace = strpos($tagLeft, ' ');
			}
			$tagFound = in_array(strtolower($tagName), $this->tagsArray);			
			if ((!$tagFound && $this->tagsMethod) || ($tagFound && !$this->tagsMethod)) {
				if (!$isCloseTag) {
					$attrSet = $this->filterAttr($attrSet);
					$preTag .= '<' . $tagName;
					for ($i = 0; $i < count($attrSet); $i++)
						$preTag .= ' ' . $attrSet[$i];
					if (strpos($fromTagOpen, "</" . $tagName)) $preTag .= '>';
					else $preTag .= ' />';
			    } else $preTag .= '</' . $tagName . '>';
			}
			$postTag = substr($postTag, ($tagLength + 2));
			$tagOpen_start = strpos($postTag, '<');			
		}
		$preTag .= $postTag;
		return $preTag;
	}

	function filterAttr($attrSet) {	
		$newSet = array();
		for ($i = 0; $i < count($attrSet); $i++) {
			if (!$attrSet[$i]) continue;

           $attrSet[$i] = trim($attrSet[$i]);

 		   $exp = strpos($attrSet[$i], '=');
		   if ($exp === false) $attrSubSet = Array($attrSet[$i]); else {
		   $attrSubSet = Array();
           $attrSubSet[] = substr($attrSet[$i], 0, $exp);
           $attrSubSet[] = substr($attrSet[$i], $exp + 1);}
		   $attrSubSet[1] = stripslashes($attrSubSet[1]);


			list($attrSubSet[0]) = explode(' ', $attrSubSet[0]);
			
			if ((!eregi("^[a-z]*$",$attrSubSet[0])) || (($this->xssAuto) && ((in_array(strtolower($attrSubSet[0]), $this->attrBlacklist)) || (substr($attrSubSet[0], 0, 2) == 'on')))) 
				continue;
			if ($attrSubSet[1]) {
				$attrSubSet[1] = str_replace('&#', '', $attrSubSet[1]);
				$attrSubSet[1] = preg_replace('/\s+/', ' ', $attrSubSet[1]);
				$attrSubSet[1] = str_replace('"', '', $attrSubSet[1]);
				if ((substr($attrSubSet[1], 0, 1) == "'") && (substr($attrSubSet[1], (strlen($attrSubSet[1]) - 1), 1) == "'"))
					$attrSubSet[1] = substr($attrSubSet[1], 1, (strlen($attrSubSet[1]) - 2));
			}

			if (	((strpos(strtolower($attrSubSet[1]), 'expression') !== false) &&	(strtolower($attrSubSet[0]) == 'style')) ||
					(strpos(strtolower($attrSubSet[1]), 'javascript:') !== false) ||
					(strpos(strtolower($attrSubSet[1]), 'behaviour:') !== false) ||
					(strpos(strtolower($attrSubSet[1]), 'vbscript:') !== false) ||
					(strpos(strtolower($attrSubSet[1]), 'mocha:') !== false) ||
					(strpos(strtolower($attrSubSet[1]), 'data:') !== false AND strtolower($attrSubSet[0]) == "href") ||
					(strpos(strtolower($attrSubSet[1]), 'livescript:') !== false) 
			) continue;

			$attrFound = in_array(strtolower($attrSubSet[0]), $this->attrArray);
			if ((!$attrFound && $this->attrMethod) || ($attrFound && !$this->attrMethod)) {
				if ($attrSubSet[1]) $newSet[] = $attrSubSet[0] . '="' . $attrSubSet[1] . '"';
				elseif ($attrSubSet[1] == "0") $newSet[] = $attrSubSet[0] . '="0"';
				else $newSet[] = $attrSubSet[0] . '="' . $attrSubSet[0] . '"';
			}	
		};
		return $newSet;
	}
	function decode($source) {

		$source = preg_replace( "#\[code\](.+?)\[/code\]#ies", "\$this->code_tag( '\\1' )", $source );

		$trans_tbl = get_html_translation_table(HTML_ENTITIES);
		$trans_tbl = array_flip($trans_tbl);

		$source = strtr($source, $trans_tbl);

	    $source = preg_replace('/&#x([a-f0-9]+);/mei',"chr(0x\\1)", $source);

		if ($this->safe_mode AND !$this->wysiwyg) {

			$source = htmlspecialchars($source, ENT_QUOTES);
			$source = str_replace('&amp;', '&', $source );


		} else {

		$source = str_replace("<>", "&lt;&gt;", str_replace(">>", "&gt;&gt;", str_replace("<<", "&lt;&lt;", $source ) ) );
		$source = str_replace("<!--", "&lt;!--", $source );

		}

		return $source;
	}

	function BB_Parse($source, $use_html=TRUE) {

		global $config, $lang;

        $find= array(
					'/javascript:/si',
					'/about:/si',
					'/vbscript:/si',
					"'\[quote\]'si",
					"'\[quote=(.+?)\]'si",
					"'\[/quote\]'si",
                    );

        $replace=array(
                      "javascript<b></b>:",
                      "about<b></b>:",
                      "vbscript<b></b>:",
					  "<!--QuoteBegin--><div class=\"quote\"><!--QuoteEBegin-->",
					  "<!--QuoteBegin \\1 --><div class=\"title_quote\">{$lang['i_quote']} \\1</div><div class=\"quote\"><!--QuoteEBegin-->",
					  "<!--QuoteEnd--></div><!--QuoteEEnd-->",
                      );

		if ($use_html == false) {
        	$find[] 	= "'\r'";
			$replace[] 	= "";
        	$find[] 	= "'\n'";
			$replace[] 	= "<br />";
		} else {
        	$source = str_replace("\r\n\r\n","\n",$source);
		}

        $smilies_arr = explode(",", $config['smilies']);
        foreach($smilies_arr as $smile){
            $smile = trim($smile);
            $find[] = "':$smile:'";
            $replace[] = "<img style=\"border: none;\" alt=\"$smile\" align=\"absmiddle\" src=\"".$config['http_home_url']."engine/data/emoticons/$smile.gif\" />";
		}

    $source = preg_replace($find,$replace,$source);

	$source = str_replace("`", "`", $source ); 

    if (!$this->allow_php) {

		$source = str_replace("<?", "&lt;?", $source );
		$source = str_replace("?>", "?&gt;", $source );

	}

	$source = preg_replace( "#\[code\](.+?)\[/code\]#is", "<!--code1--><div class=\"scriptcode\"><!--ecode1-->\\1<!--code2--></div><!--ecode2-->", $source );
	$source = preg_replace( "#\[(left|right|center)\](.+?)\[/\\1\]#is"  , "<div align=\"\\1\">\\2</div>", $source );

	$source = preg_replace( "#\[b\](.+?)\[/b\]#is", "<b>\\1</b>", $source );
	$source = preg_replace( "#\[i\](.+?)\[/i\]#is", "<i>\\1</i>", $source );
	$source = preg_replace( "#\[u\](.+?)\[/u\]#is", "<u>\\1</u>", $source );
	$source = preg_replace( "#\[s\](.+?)\[/s\]#is", "<s>\\1</s>", $source );

	$source = preg_replace( "#\[url\](\S.+?)\[/url\]#ie"                                       , "\$this->build_url(array('html' => '\\1', 'show' => '\\1'))", $source );
	$source = preg_replace( "#\[url\s*=\s*\&quot\;\s*(\S+?)\s*\&quot\;\s*\](.*?)\[\/url\]#ie" , "\$this->build_url(array('html' => '\\1', 'show' => '\\2'))", $source );
	$source = preg_replace( "#\[url\s*=\s*(\S.+?)\s*\](.*?)\[\/url\]#ie"                       , "\$this->build_url(array('html' => '\\1', 'show' => '\\2'))", $source );

	$source = preg_replace( "#\[leech\](\S.+?)\[/leech\]#ie"                                       , "\$this->build_url(array('html' => '\\1', 'show' => '\\1', 'leech' => '1'))", $source );
	$source = preg_replace( "#\[leech\s*=\s*\&quot\;\s*(\S+?)\s*\&quot\;\s*\](.*?)\[\/leech\]#ie" , "\$this->build_url(array('html' => '\\1', 'show' => '\\2', 'leech' => '1'))", $source );
	$source = preg_replace( "#\[leech\s*=\s*(\S.+?)\s*\](.*?)\[\/leech\]#ie"                       , "\$this->build_url(array('html' => '\\1', 'show' => '\\2', 'leech' => '1'))", $source );


	$source = preg_replace( "#\[email\](\S+?)\[/email\]#i"                                                                , "<a href=\"mailto:\\1\">\\1</a>", $source );
	$source = preg_replace( "#\[email\s*=\s*\&quot\;([\.\w\-]+\@[\.\w\-]+\.[\.\w\-]+)\s*\&quot\;\s*\](.*?)\[\/email\]#i"  , "<a href=\"mailto:\\1\">\\2</a>", $source );
	$source = preg_replace( "#\[email\s*=\s*([\.\w\-]+\@[\.\w\-]+\.[\w\-]+)\s*\](.*?)\[\/email\]#i"                       , "<a href=\"mailto:\\1\">\\2</a>", $source );

	if (!$this->safe_mode) {

	$source = preg_replace( "#\[img\](.+?)\[/img\]#ie", "\$this->build_image('\\1')", $source );
	$source = preg_replace( "#\[img=(.+?)\](.+?)\[/img\]#ie", "\$this->build_image('\\2', '\\1')", $source );
	$source = preg_replace( "'\[thumb\]([^\[]*)([/\\\\])(.*?)\[/thumb\]'ie", "\$this->build_thumb('\$1\$2\$3', '\$1\$2thumbs\$2\$3')", $source );
	$source = preg_replace( "'\[thumb=(.*?)\]([^\[]*)([/\\\\])(.*?)\[/thumb\]'ie", "\$this->build_thumb('\$2\$3\$4', '\$2\$3thumbs\$3\$4', '\$1')", $source );
	$source = preg_replace( "#\[video\s*=\s*(\S.+?)\s*\]#ie", "\$this->build_video('\\1')", $source );

	while ( preg_match( "#\[size=([^\]]+)\](.+?)\[/size\]#ies", $source ) )
	{
		$source = preg_replace( "#\[size=([^\]]+)\](.+?)\[/size\]#ies"    , "\$this->font_change(array('tag'=>'size','1'=>'\\1','2'=>'\\2'))", $source );
	}
			
	while ( preg_match( "#\[font=([^\]]+)\](.+?)\[/font\]#ies", $source ) )
	{
		$source = preg_replace( "#\[font=([^\]]+)\](.+?)\[/font\]#ies"    , "\$this->font_change(array('tag'=>'font','1'=>'\\1','2'=>'\\2'))", $source );
	}
			
	}

	while( preg_match( "#\[color=([^\]]+)\](.+?)\[/color\]#ies", $source ) )
	{
		$source = preg_replace( "#\[color=([^\]]+)\](.+?)\[/color\]#ies"  , "\$this->font_change(array('tag'=>'color','1'=>'\\1','2'=>'\\2'))", $source );
	}

	return trim($source);

	}

function decodeBBCodes($txt, $use_html=TRUE, $wysiwig = "no") {

		global $config;

		$find = array (); $result = array ();
		$txt=stripslashes($txt);
			$txt = preg_replace( "#<!--ThumbBegin-->(.+?)<!--ThumbEnd-->#ie", "\$this->decode_thumb('\\1')", $txt );
			$txt = preg_replace( "#<!--QuoteBegin-->(.+?)<!--QuoteEBegin-->#", '[quote]'       , $txt );
			$txt = preg_replace( "#<!--QuoteBegin ([^>]+?) -->(.+?)<!--QuoteEBegin-->#"        , "[quote=\\1]"     , $txt );
			$txt = preg_replace( "#<!--QuoteEnd-->(.+?)<!--QuoteEEnd-->#"    , '[/quote]'      , $txt );
			$txt = preg_replace( "#<!--code1-->(.+?)<!--ecode1-->#", '[code]' , $txt );
			$txt = preg_replace( "#<!--code2-->(.+?)<!--ecode2-->#", '

', $txt );
$txt = preg_replace( "#(.+?)src=\"(.+?)\"(.+?)#is", '[video=\\2]', $txt );
$txt = str_replace( '    ', "\t", $txt );
$txt = str_replace( '  ' , " ", $txt );
$txt = preg_replace( "#<a href=[\"'](http://|https://|ftp://|ed2k://|news://|magnet

?(\S.+?)['\"].+?".">(.+?)</a>#ie" , "\$this->decode_leech('\\1\\2', '\\3')", $txt );

if ($wysiwig != "yes") {
$txt = preg_replace( "#<i>(.+?)</i>#is" , "\\1" , $txt );
$txt = preg_replace( "#<b>(.+?)</b>#is" , "\\1" , $txt );
$txt = preg_replace( "#<s>(.+?)</s>#is" , "~~\\1~~" , $txt );
$txt = preg_replace( "#<u>(.+?)</u>#is" , "\\1" , $txt );
$txt = preg_replace( "#<center>(.+?)</center>#is", "

\\1

" , $txt );
$txt = preg_replace( "#<img src=[\"'](\S+?)['\"] align=['\"](.+?)['\"].+?".">#is", "[img=\\2]\\1[/img]", $txt );
$txt = preg_replace( "#<img src=[\"'](\S+?)['\"].+?".">#is", "

", $txt );

$txt = preg_replace( "#<a href=[\"']mailto

?(\S.+?)['\"].+?".">(.+?)</a>#" , "Для просмотра ссылки Войди или Зарегистрируйся" , $txt );

$txt = preg_replace( "#<!--sizestart

.+?)-->(.+?)#", "[size=\\1]" , $txt );
$txt = preg_replace( "#<!--colorstart

.+?)-->(.+?)#", "[color=\\1]", $txt );
$txt = preg_replace( "#<!--fontstart

.+?)-->(.+?)#", "[font=\\1]" , $txt );

$txt = str_replace( "</span>", "[/size]" , $txt );
$txt = str_replace( "</span>", "[/color]", $txt );
$txt = str_replace( "</span>", "[/font]" , $txt );

while ( preg_match( "#<span style=['\"]color

.+?)['\"]>(.+?)</span>#is", $txt ) )
{
$txt = preg_replace( "#<span style=['\"]color

.+?)['\"]>(.+?)</span>#is" , "[color=\\1]\\2[/color]", $txt );
}

while ( preg_match( "#<div align=['\"]left['\"]>(.+?)</div>#is", $txt ) )
{
$txt = preg_replace( "#<div align=['\"]left['\"]>(.+?)</div>#is" , "

\\1

", $txt );
}
while ( preg_match( "#<div align=['\"]right['\"]>(.+?)</div>#is", $txt ) )
{
$txt = preg_replace( "#<div align=['\"]right['\"]>(.+?)</div>#is" , "

\\1

", $txt );
}
while ( preg_match( "#<div align=['\"]center['\"]>(.+?)</div>#is", $txt ) )
{
$txt = preg_replace( "#<div align=['\"]center['\"]>(.+?)</div>#is" , "

\\1

", $txt );
}

} else {

$txt = str_replace( "</span>", "</span>" , $txt );
$txt = str_replace( "</span>", "</span>", $txt );
$txt = str_replace( "</span>", "</span>" , $txt );
$txt = str_replace( "", "" , $txt );
$txt = str_replace( "", "", $txt );
$txt = str_replace( "", "" , $txt );
$txt = preg_replace( "#<!--sizestart

.+?)-->#", "" , $txt );
$txt = preg_replace( "#<!--colorstart

.+?)-->#", "", $txt );
$txt = preg_replace( "#<!--fontstart

.+?)-->#", "" , $txt );

}

$smilies_arr = explode(",", $config['smilies']);
foreach($smilies_arr as $smile){
$smile = trim($smile);
$replace[] = ":$smile:";
$find[] = "#<img style=['\"]border: none;['\"] alt=['\"]".$smile."['\"] align=['\"]absmiddle['\"] src=['\"](.+?)".$smile.".gif['\"] />#is";
}
$txt = preg_replace( $find , $replace, $txt );

if (!$use_html) {
$txt = str_replace( "<br>" , "\n", $txt );
$txt = str_replace( "<br />", "\n", $txt );
$txt = str_replace( "<BR>" , "\n", $txt );
$txt = str_replace( "<BR />", "\n", $txt );
}

$txt = htmlspecialchars($txt, ENT_QUOTES);
if (!$use_html) $txt = str_replace( "&" , "&" , $txt);

return trim($txt);

}

function font_change( $tags )
{

if ( ! is_array($tags) )
{
return;
}

$style = $tags['1'];
$text = stripslashes($tags['2']);
$type = $tags['tag'];

$style = str_replace( '"', '', $style );
$style = preg_replace( "/[&\.\%\[\]<>\'\"]/", "", preg_replace( "#^(.+?)(?:;|$)#", "\\1", $style ) );

if ($type == 'size')
{
$style = intval($style);

if ( $this->font_sizes[$style] )
{
$real = $this->font_sizes[$style];
}
else
{
$real = 12;
}

return "<span style=\"font-size:".$real."pt;line-height:100%\">".$text."</span>";
}

if ($type == 'font')
{
$style = preg_replace( "/[^\d\w\#\-\_\s]/s", "", $style );
return "<span style=\"font-family:".$style."\">".$text."</span>";
}

$style = preg_replace( "/[^\d\w\#\s]/s", "", $style );
return "<span style=\"color:".$style."\">".$text."</span>";
}

function build_url( $url=array() )
{
global $config;

$skip_it = 0;

if ( preg_match( "/([\.,\?]|!)$/", $url['show'], $match) )
{
$url['end'] .= $match[1];
$url['show'] = preg_replace( "/([\.,\?]|!)$/", "", $url['show'] );
}

$url['html'] = $this->clear_url( $url['html'] );
$url['show'] = stripslashes($url['show']);

if ( ! preg_match("#^(http|news|https|ed2k|ftp|aim|mms

//|(magnet:?)#", $url['html'] ) )
{
$url['html'] = 'http://'.$url['html'];
}

if ( preg_match( "/^<img src/i", $url['show'] ) )
{
$skip_it = 1;
}

$url['show'] = str_replace( "&amp;" , "&" , $url['show'] );
$url['show'] = preg_replace( "/javascript:/i", "javascript: ", $url['show'] );

if ( (strlen($url['show']) -58 ) < 3 ) $skip_it = 1;

if ( ! preg_match( "/^(http|ed2k|ftp|https|news|aim|mms

\/\//i", $url['show'] )) $skip_it = 1;

$show = $url['show'];

if ($skip_it != 1)
{
$stripped = preg_replace( "#^(http|ed2k|ftp|https|news|aim|mms

//(\S+)$#i", "\\2", $url['show'] );
$uri_type = preg_replace( "#^(http|ed2k|ftp|https|news|aim|mms

//(\S+)$#i", "\\1", $url['show'] );

$show = $uri_type.'://'.substr( $stripped , 0, 35 ).'...'.substr( $stripped , -15 );
}

if ($this->check_home($url['html'])) $target = ""; else $target = "target=\"_blank\"";

if ($url['leech']) {

$url['html'] = $config['http_home_url']."engine/go.php?url=".rawurlencode(base64_encode($url['html']));

return "<a href=\"".$url['html']."\" ".$target.">".$show."</a>" . $url['end'];

} else {

return "<a href=\"".$url['html']."\" ".$target.">".$show."</a>" . $url['end'];

}

}

function code_tag($txt="")
{
if ( $txt == "" )
{
return;
}

$this->code_count ++;

$txt = str_replace( "&" , "&", $txt );
$txt = str_replace( "<" , "<" , $txt );
$txt = str_replace( "'" , "'" , $txt );
$txt = str_replace( ">" , ">" , $txt );
$txt = str_replace( "<" , "<" , $txt );
$txt = str_replace( ">" , ">" , $txt );
$txt = str_replace( """ , """ , $txt );
$txt = str_replace( "\\\"" , """ , $txt );
$txt = str_replace( ":" , ":" , $txt );
$txt = str_replace( "[" , "[" , $txt );
$txt = str_replace( "]" , "]" , $txt );
$txt = str_replace( ")" , ")" , $txt );
$txt = str_replace( "(" , "(" , $txt );
$txt = str_replace( "\r" , "", $txt );
$txt = str_replace( "\n" , "<br />", $txt );

$txt = preg_replace( "#\s{1};#" , ";" , $txt );
$txt = preg_replace( "#\t#" , "    ", $txt );
$txt = preg_replace( "#\s{2}#", "  " , $txt );

$p = "

Код:

{".$this->code_count."}

";

$this->code_text[$p] = "

Код:

{$txt}

";

return $p;
}

function build_video ( $url )
{
$url = $this->clear_url( urldecode( $url ) );

return "<object id=\"mediaPlayer\" width=\"320\" height=\"310\" classid=\"CLSID:6BF52A52-394A-11d3-B153-00C04F79FAA6\" standby=\"Loading Microsoft Windows Media Player components...\" type=\"application/x-oleobject\">
<param name=\"url\" VALUE=\"{$url}\" />
<param name=\"autoStart\" VALUE=\"false\" />
<param name=\"showControls\" VALUE=\"true\" />
<param name=\"TransparentatStart\" VALUE=\"false\" />
<param name=\"AnimationatStart\" VALUE=\"true\" />
<param name=\"StretchToFit\" VALUE=\"true\" />
<embed pluginspage=\"http://www.microsoft.com/Windows/Downloads/Contents/MediaPlayer/\" src=\"{$url}\" width=\"320\" height=\"310\" type=\"application/x-mplayer2\" autorewind=\"1\" showstatusbar=\"1\" showcontrols=\"1\" autostart=\"0\" allowchangedisplaysize=\"1\" volume=\"70\" stretchtofit=\"1\" />
</object>";

}

function build_image($url="", $align="")
{
global $config;

$url = trim($url);
$url = urldecode( $url );
$align = trim($align);
$img_extra = " ";

if ($align != "left" AND $align != "right") $align = '';

$url = $this->clear_url( urldecode( $url ) );

$alt = "alt='".htmlspecialchars(strip_tags(stripslashes($_POST['title'])), ENT_QUOTES)."' ";

if (intval($config['tag_img_width'])) {

$img_info = @getimagesize($url);

if ($img_info[0] > $config['tag_img_width']) {

$out_heigh =($img_info[1] / 100) * ($config['tag_img_width'] / ($img_info[0] / 100));
$out_heigh = floor($out_heigh);
$img_extra = " width='{$config['tag_img_width']}' height='{$out_heigh}' onmouseover=\"this.style.cursor='pointer';\" onclick=\"window.open('$url'); return false;\" ";

}

}

$img_extra .= $alt;

if ($align == '')
return "<img src=\"$url\" style=\"border: none;\"{$img_extra}/>";
else
return "<img src=\"$url\" align=\"$align\" style=\"border: none;\"{$img_extra}/>";
}

function build_thumb($gurl="", $url="", $align="")
{
$url = trim($url);
$url = $this->clear_url( urldecode( $url ) );

$gurl = trim($gurl);
$gurl = $this->clear_url( urldecode( $gurl ) );

$align = trim($align);

if ($align != "left" AND $align != "right") $align = '';

$alt = "alt='".htmlspecialchars(strip_tags(stripslashes($_POST['title'])), ENT_QUOTES)."'";

if ($align == '')
return "<a href=\"#\" onClick=\"ShowBild('$gurl'); return false;\" ><img src=\"$url\" style=\"border: none;\" {$alt} /></a>";
else
return "<a href=\"#\" onClick=\"ShowBild('$gurl'); return false;\" ><img align=\"$align\" src=\"$url\" style=\"border: none;\" {$alt} /></a>";
}

function clear_url ($url) {

$url = strip_tags( stripslashes($url) );

$url = str_replace( '\"', '"', $url );

if (!$this->safe_mode OR $this->wysiwyg) {

$url = htmlspecialchars($url, ENT_QUOTES);

}

$url = str_replace( "document.cookie", "", $url );
$url = str_replace( " ", "%20", $url );
$url = str_replace( "'", "", $url );
$url = str_replace( '"', "", $url );
$url = str_replace( "<", "<" , $url );
$url = str_replace( ">", ">" , $url );
$url = preg_replace( "/javascript:/i", "", $url );
$url = preg_replace( "/data:/i", "", $url );

return $url;

}

function decode_leech($url="", $show="")
{

if ($this->leech_mode) return "Для просмотра ссылки Войди или Зарегистрируйся";

$url = end ( explode ("url=", $url) );
$url = rawurldecode($url);
$url = base64_decode($url);

return "[leech=".$url."]".$show."[/leech]";
}

function decode_thumb ( $txt )
{
$txt = stripslashes($txt);

$url = str_replace ("<a href=\"#\" onClick=\"ShowBild('", "", $txt);
$url = reset(explode("');", $url));

if (strpos($txt, "align=\"") !== false) {
$align = explode( "align=\"", $txt );
$align = $align[1];
$align = reset(explode( "\" src", $align ));
} else $align = false;

if ($align) return "[thumb=".$align."]".$url."[/thumb]";
else return "[thumb]".$url."[/thumb]";

}

function check_home ($url) {
global $config;

$value = str_replace("http://", "", $config['http_home_url']);
$value = str_replace("www.", "", $value);
$value = reset(explode(DIRECTORY_SEPARATOR, $value));

if ($value == "" ) return false;

if (strpos($url, $value) === false) return false; else return true;
}

}
?>[/CODE]

AdOLF_04 · 6 Мар 2008

Вот подкорректированный:

Код:

<?php
/*
=====================================================
 DataLife Engine Nulled by M.I.D-Team
-----------------------------------------------------
 http://www.mid-team.ws/
-----------------------------------------------------
 Copyright (c) 2004,2007 SoftNews Media Group
=====================================================
 Данный код защищен авторскими правами
=====================================================
 Файл: parse.class.php
-----------------------------------------------------
 Назначение: Добавление новости
=====================================================
*/

if(!defined('DATALIFEENGINE'))
{
  die("Hacking attempt!");
}

class ParseFilter {
	var $tagsArray;
	var $attrArray;
	var $tagsMethod;
	var $attrMethod;
	var $xssAuto;
	var $code_text = array ();
	var $code_count = 0;
	var $wysiwyg = false;
	var $allow_php = false;
	var $safe_mode = false;
	var $leech_mode = false;
	var $tagBlacklist = array('applet', 'body', 'bgsound', 'base', 'basefont', 'frame', 'frameset', 'head', 'html', 'id', 'iframe', 'ilayer', 'layer', 'link', 'meta', 'name', 'script', 'style', 'title', 'xml');
	var $attrBlacklist = array('action', 'background', 'codebase', 'dynsrc', 'lowsrc');

	var $font_sizes = array( 1 => '8',
							 2 => '10',
							 3 => '12',
							 4 => '14',
							 5 => '18',
							 6 => '24',
							 7 => '36' );

	function ParseFilter($tagsArray = array(), $attrArray = array(), $tagsMethod = 0, $attrMethod = 0, $xssAuto = 1) {		
		for ($i = 0; $i < count($tagsArray); $i++) $tagsArray[$i] = strtolower($tagsArray[$i]);
		for ($i = 0; $i < count($attrArray); $i++) $attrArray[$i] = strtolower($attrArray[$i]);
		$this->tagsArray = (array) $tagsArray;
		$this->attrArray = (array) $attrArray;
		$this->tagsMethod = $tagsMethod;
		$this->attrMethod = $attrMethod;
		$this->xssAuto = $xssAuto;
	}
	function process($source) {
		if (is_array($source)) {
			foreach($source as $key => $value)
				if (is_string($value)) $source[$key] = $this->remove($this->decode($value));
			return $source;
		} elseif (is_string($source)) {

			$source = $this->remove($this->decode($source));

			if($this->code_count) {
				foreach ($this->code_text as $key_find => $key_replace) {
					$find[] = $key_find;
					$replace[] = $key_replace;
				}

			  $source = str_replace($find, $replace, $source);
			}

		  $this->code_count = 0;
		  $this->code_text = array();

		  return $source;
		} else return $source;	
	}
	function remove($source) {
		$loopCounter=0;
		while($source != $this->filterTags($source)) {
			$source = $this->filterTags($source);
			$loopCounter++;
		}
		return $source;
	}	
	function filterTags($source) {
		$preTag = NULL;
		$postTag = $source;
		$tagOpen_start = strpos($source, '<');
		while($tagOpen_start !== FALSE) {
			$preTag .= substr($postTag, 0, $tagOpen_start);
			$postTag = substr($postTag, $tagOpen_start);
			$fromTagOpen = substr($postTag, 1);
			$tagOpen_end = strpos($fromTagOpen, '>');
			if ($tagOpen_end === false) break;
			$tagOpen_nested = strpos($fromTagOpen, '<');
			if (($tagOpen_nested !== false) && ($tagOpen_nested < $tagOpen_end)) {
				$preTag .= substr($postTag, 0, ($tagOpen_nested+1));
				$postTag = substr($postTag, ($tagOpen_nested+1));
				$tagOpen_start = strpos($postTag, '<');
				continue;
			} 
			$tagOpen_nested = (strpos($fromTagOpen, '<') + $tagOpen_start + 1);
			$currentTag = substr($fromTagOpen, 0, $tagOpen_end);
			$tagLength = strlen($currentTag);
			if (!$tagOpen_end) {
				$preTag .= $postTag;
				$tagOpen_start = strpos($postTag, '<');			
			}
			$tagLeft = $currentTag;
			$attrSet = array();
			$currentSpace = strpos($tagLeft, ' ');
			if (substr($currentTag, 0, 1) == "/") {
				$isCloseTag = TRUE;
				list($tagName) = explode(' ', $currentTag);
				$tagName = substr($tagName, 1);
			} else {
				$isCloseTag = FALSE;
				list($tagName) = explode(' ', $currentTag);
			}		
			if ((!preg_match("/^[a-z][a-z0-9]*$/i",$tagName)) || (!$tagName) || ((in_array(strtolower($tagName), $this->tagBlacklist)) && ($this->xssAuto))) { 				
				$postTag = substr($postTag, ($tagLength + 2));
				$tagOpen_start = strpos($postTag, '<');
				continue;
			}
			while ($currentSpace !== FALSE) {
				$fromSpace = substr($tagLeft, ($currentSpace+1));
				$nextSpace = strpos($fromSpace, ' ');
				$openQuotes = strpos($fromSpace, '"');
				$closeQuotes = strpos(substr($fromSpace, ($openQuotes+1)), '"') + $openQuotes + 1;
				if (strpos($fromSpace, '=') !== FALSE) {
					if (($openQuotes !== FALSE) && (strpos(substr($fromSpace, ($openQuotes+1)), '"') !== FALSE))
						$attr = substr($fromSpace, 0, ($closeQuotes+1));
					else $attr = substr($fromSpace, 0, $nextSpace);
				} else $attr = substr($fromSpace, 0, $nextSpace);
				if (!$attr) $attr = $fromSpace;
				$attrSet[] = $attr;
				$tagLeft = substr($fromSpace, strlen($attr));
				$currentSpace = strpos($tagLeft, ' ');
			}
			$tagFound = in_array(strtolower($tagName), $this->tagsArray);			
			if ((!$tagFound && $this->tagsMethod) || ($tagFound && !$this->tagsMethod)) {
				if (!$isCloseTag) {
					$attrSet = $this->filterAttr($attrSet);
					$preTag .= '<' . $tagName;
					for ($i = 0; $i < count($attrSet); $i++)
						$preTag .= ' ' . $attrSet[$i];
					if (strpos($fromTagOpen, "</" . $tagName)) $preTag .= '>';
					else $preTag .= ' />';
			    } else $preTag .= '</' . $tagName . '>';
			}
			$postTag = substr($postTag, ($tagLength + 2));
			$tagOpen_start = strpos($postTag, '<');			
		}
		$preTag .= $postTag;
		return $preTag;
	}

	function filterAttr($attrSet) {	
		$newSet = array();
		for ($i = 0; $i < count($attrSet); $i++) {
			if (!$attrSet[$i]) continue;

           $attrSet[$i] = trim($attrSet[$i]);

 		   $exp = strpos($attrSet[$i], '=');
		   if ($exp === false) $attrSubSet = Array($attrSet[$i]); else {
		   $attrSubSet = Array();
           $attrSubSet[] = substr($attrSet[$i], 0, $exp);
           $attrSubSet[] = substr($attrSet[$i], $exp + 1);}
		   $attrSubSet[1] = stripslashes($attrSubSet[1]);


			list($attrSubSet[0]) = explode(' ', $attrSubSet[0]);
			
			if ((!eregi("^[a-z]*$",$attrSubSet[0])) || (($this->xssAuto) && ((in_array(strtolower($attrSubSet[0]), $this->attrBlacklist)) || (substr($attrSubSet[0], 0, 2) == 'on')))) 
				continue;
			if ($attrSubSet[1]) {
				$attrSubSet[1] = str_replace('&#', '', $attrSubSet[1]);
				$attrSubSet[1] = preg_replace('/\s+/', ' ', $attrSubSet[1]);
				$attrSubSet[1] = str_replace('"', '', $attrSubSet[1]);
				if ((substr($attrSubSet[1], 0, 1) == "'") && (substr($attrSubSet[1], (strlen($attrSubSet[1]) - 1), 1) == "'"))
					$attrSubSet[1] = substr($attrSubSet[1], 1, (strlen($attrSubSet[1]) - 2));
			}

			if (	((strpos(strtolower($attrSubSet[1]), 'expression') !== false) &&	(strtolower($attrSubSet[0]) == 'style')) ||
					(strpos(strtolower($attrSubSet[1]), 'javascript:') !== false) ||
					(strpos(strtolower($attrSubSet[1]), 'behaviour:') !== false) ||
					(strpos(strtolower($attrSubSet[1]), 'vbscript:') !== false) ||
					(strpos(strtolower($attrSubSet[1]), 'mocha:') !== false) ||
					(strpos(strtolower($attrSubSet[1]), 'data:') !== false AND strtolower($attrSubSet[0]) == "href") ||
					(strpos(strtolower($attrSubSet[1]), 'livescript:') !== false) 
			) continue;

			$attrFound = in_array(strtolower($attrSubSet[0]), $this->attrArray);
			if ((!$attrFound && $this->attrMethod) || ($attrFound && !$this->attrMethod)) {
				if ($attrSubSet[1]) $newSet[] = $attrSubSet[0] . '="' . $attrSubSet[1] . '"';
				elseif ($attrSubSet[1] == "0") $newSet[] = $attrSubSet[0] . '="0"';
				else $newSet[] = $attrSubSet[0] . '="' . $attrSubSet[0] . '"';
			}	
		};
		return $newSet;
	}
	function decode($source) {

		$source = preg_replace( "#\[code\](.+?)\[/code\]#ies", "\$this->code_tag( '\\1' )", $source );

		$trans_tbl = get_html_translation_table(HTML_ENTITIES);
		$trans_tbl = array_flip($trans_tbl);

		$source = strtr($source, $trans_tbl);

	    $source = preg_replace('/&#x([a-f0-9]+);/mei',"chr(0x\\1)", $source);

		if ($this->safe_mode AND !$this->wysiwyg) {

			$source = htmlspecialchars($source, ENT_QUOTES);
			$source = str_replace('&amp;', '&', $source );


		} else {

		$source = str_replace("<>", "&lt;&gt;", str_replace(">>", "&gt;&gt;", str_replace("<<", "&lt;&lt;", $source ) ) );
		$source = str_replace("<!--", "&lt;!--", $source );

		}

		return $source;
	}

	function BB_Parse($source, $use_html=TRUE) {

		global $config, $lang;

        $find= array(
					'/about:/si',
					'/vbscript:/si',
					"'\[quote\]'si",
					"'\[quote=(.+?)\]'si",
					"'\[/quote\]'si",
                    );

        $replace=array(
                      "about<b></b>:",
                      "vbscript<b></b>:",
					  "<!--QuoteBegin--><div class=\"quote\"><!--QuoteEBegin-->",
					  "<!--QuoteBegin \\1 --><div class=\"title_quote\">{$lang['i_quote']} \\1</div><div class=\"quote\"><!--QuoteEBegin-->",
					  "<!--QuoteEnd--></div><!--QuoteEEnd-->",
                      );

		if ($use_html == false) {
        	$find[] 	= "'\r'";
			$replace[] 	= "";
        	$find[] 	= "'\n'";
			$replace[] 	= "<br />";
		} else {
        	$source = str_replace("\r\n\r\n","\n",$source);
		}

        $smilies_arr = explode(",", $config['smilies']);
        foreach($smilies_arr as $smile){
            $smile = trim($smile);
            $find[] = "':$smile:'";
            $replace[] = "<img style=\"border: none;\" alt=\"$smile\" align=\"absmiddle\" src=\"".$config['http_home_url']."engine/data/emoticons/$smile.gif\" />";
		}

    $source = preg_replace($find,$replace,$source);

	$source = str_replace("`", "`", $source ); 

    if (!$this->allow_php) {

		$source = str_replace("<?", "&lt;?", $source );
		$source = str_replace("?>", "?&gt;", $source );

	}

	$source = preg_replace( "#\[code\](.+?)\[/code\]#is", "<!--code1--><div class=\"scriptcode\"><!--ecode1-->\\1<!--code2--></div><!--ecode2-->", $source );
	$source = preg_replace( "#\[(left|right|center)\](.+?)\[/\\1\]#is"  , "<div align=\"\\1\">\\2</div>", $source );

	$source = preg_replace( "#\[b\](.+?)\[/b\]#is", "<b>\\1</b>", $source );
	$source = preg_replace( "#\[i\](.+?)\[/i\]#is", "<i>\\1</i>", $source );
	$source = preg_replace( "#\[u\](.+?)\[/u\]#is", "<u>\\1</u>", $source );
	$source = preg_replace( "#\[s\](.+?)\[/s\]#is", "<s>\\1</s>", $source );

	$source = preg_replace( "#\[url\](\S.+?)\[/url\]#ie"                                       , "\$this->build_url(array('html' => '\\1', 'show' => '\\1'))", $source );
	$source = preg_replace( "#\[url\s*=\s*\&quot\;\s*(\S+?)\s*\&quot\;\s*\](.*?)\[\/url\]#ie" , "\$this->build_url(array('html' => '\\1', 'show' => '\\2'))", $source );
	$source = preg_replace( "#\[url\s*=\s*(\S.+?)\s*\](.*?)\[\/url\]#ie"                       , "\$this->build_url(array('html' => '\\1', 'show' => '\\2'))", $source );

	$source = preg_replace( "#\[leech\](\S.+?)\[/leech\]#ie"                                       , "\$this->build_url(array('html' => '\\1', 'show' => '\\1', 'leech' => '1'))", $source );
	$source = preg_replace( "#\[leech\s*=\s*\&quot\;\s*(\S+?)\s*\&quot\;\s*\](.*?)\[\/leech\]#ie" , "\$this->build_url(array('html' => '\\1', 'show' => '\\2', 'leech' => '1'))", $source );
	$source = preg_replace( "#\[leech\s*=\s*(\S.+?)\s*\](.*?)\[\/leech\]#ie"                       , "\$this->build_url(array('html' => '\\1', 'show' => '\\2', 'leech' => '1'))", $source );


	$source = preg_replace( "#\[email\](\S+?)\[/email\]#i"                                                                , "<a href=\"mailto:\\1\">\\1</a>", $source );
	$source = preg_replace( "#\[email\s*=\s*\&quot\;([\.\w\-]+\@[\.\w\-]+\.[\.\w\-]+)\s*\&quot\;\s*\](.*?)\[\/email\]#i"  , "<a href=\"mailto:\\1\">\\2</a>", $source );
	$source = preg_replace( "#\[email\s*=\s*([\.\w\-]+\@[\.\w\-]+\.[\w\-]+)\s*\](.*?)\[\/email\]#i"                       , "<a href=\"mailto:\\1\">\\2</a>", $source );

	if (!$this->safe_mode) {

	$source = preg_replace( "#\[img\](.+?)\[/img\]#ie", "\$this->build_image('\\1')", $source );
	$source = preg_replace( "#\[img=(.+?)\](.+?)\[/img\]#ie", "\$this->build_image('\\2', '\\1')", $source );
	$source = preg_replace( "'\[thumb\]([^\[]*)([/\\\\])(.*?)\[/thumb\]'ie", "\$this->build_thumb('\$1\$2\$3', '\$1\$2thumbs\$2\$3')", $source );
	$source = preg_replace( "'\[thumb=(.*?)\]([^\[]*)([/\\\\])(.*?)\[/thumb\]'ie", "\$this->build_thumb('\$2\$3\$4', '\$2\$3thumbs\$3\$4', '\$1')", $source );
	$source = preg_replace( "#\[video\s*=\s*(\S.+?)\s*\]#ie", "\$this->build_video('\\1')", $source );

	while ( preg_match( "#\[size=([^\]]+)\](.+?)\[/size\]#ies", $source ) )
	{
		$source = preg_replace( "#\[size=([^\]]+)\](.+?)\[/size\]#ies"    , "\$this->font_change(array('tag'=>'size','1'=>'\\1','2'=>'\\2'))", $source );
	}
			
	while ( preg_match( "#\[font=([^\]]+)\](.+?)\[/font\]#ies", $source ) )
	{
		$source = preg_replace( "#\[font=([^\]]+)\](.+?)\[/font\]#ies"    , "\$this->font_change(array('tag'=>'font','1'=>'\\1','2'=>'\\2'))", $source );
	}
			
	}

	while( preg_match( "#\[color=([^\]]+)\](.+?)\[/color\]#ies", $source ) )
	{
		$source = preg_replace( "#\[color=([^\]]+)\](.+?)\[/color\]#ies"  , "\$this->font_change(array('tag'=>'color','1'=>'\\1','2'=>'\\2'))", $source );
	}

	return trim($source);

	}

function decodeBBCodes($txt, $use_html=TRUE, $wysiwig = "no") {

		global $config;

		$find = array (); $result = array ();
		$txt=stripslashes($txt);
			$txt = preg_replace( "#<!--ThumbBegin-->(.+?)<!--ThumbEnd-->#ie", "\$this->decode_thumb('\\1')", $txt );
			$txt = preg_replace( "#<!--QuoteBegin-->(.+?)<!--QuoteEBegin-->#", '[quote]'       , $txt );
			$txt = preg_replace( "#<!--QuoteBegin ([^>]+?) -->(.+?)<!--QuoteEBegin-->#"        , "
Цитата:
Сообщение от \\1
" , $txt ); $txt = preg_replace( "#<!--QuoteEnd-->(.+?)<!--QuoteEEnd-->#" , '
'      , $txt );
			$txt = preg_replace( "#<!--code1-->(.+?)<!--ecode1-->#", '
Код:

' , $txt );
			$txt = preg_replace( "#<!--code2-->(.+?)<!--ecode2-->#", '

', $txt );
			$txt = preg_replace( "#<!--dle_video_begin-->(.+?)src=\"(.+?)\"(.+?)<!--dle_video_end-->#is", '[video=\\2]', $txt );
			$txt = str_replace( '&nbsp;&nbsp;&nbsp;&nbsp;', "\t", $txt );
			$txt = str_replace( '&nbsp;&nbsp;'            , "  ", $txt );
			$txt = preg_replace( "#<!--dle_leech_begin--><a href=[\"'](http://|https://|ftp://|ed2k://|news://|magnet:)?(\S.+?)['\"].+?".">(.+?)</a><!--dle_leech_end-->#ie" , "\$this->decode_leech('\\1\\2', '\\3')", $txt );


		if ($wysiwig != "yes") {
			$txt = preg_replace( "#<i>(.+?)</i>#is"  , "\\1"  , $txt );
			$txt = preg_replace( "#<b>(.+?)</b>#is"  , "\\1"  , $txt );
			$txt = preg_replace( "#<s>(.+?)</s>#is"  , "[s]\\1[/s]"  , $txt );
			$txt = preg_replace( "#<u>(.+?)</u>#is"  , "\\1"  , $txt );
			$txt = preg_replace( "#<center>(.+?)</center>#is", "
\\1
"  , $txt );
			$txt = preg_replace( "#<img src=[\"'](\S+?)['\"] align=['\"](.+?)['\"].+?".">#is", "[img=\\2]\\1[/img]", $txt );
			$txt = preg_replace( "#<img src=[\"'](\S+?)['\"].+?".">#is", "[img]\\1[/img]", $txt );

			$txt = preg_replace( "#<a href=[\"']mailto:(.+?)['\"]>(.+?)</a>#", "\\2", $txt );
			$txt = preg_replace( "#<a href=[\"'](http://|https://|ftp://|ed2k://|news://|magnet:)?(\S.+?)['\"].+?".">(.+?)</a>#" , "\\3"  , $txt );

			$txt = preg_replace( "#<!--sizestart:(.+?)-->(.+?)<!--/sizestart-->#", "[size=\\1]" , $txt );
			$txt = preg_replace( "#<!--colorstart:(.+?)-->(.+?)<!--/colorstart-->#", "[color=\\1]", $txt );
			$txt = preg_replace( "#<!--fontstart:(.+?)-->(.+?)<!--/fontstart-->#", "" , $txt );

			$txt = str_replace( "<!--sizeend--></span><!--/sizeend-->", "[/size]" , $txt );
			$txt = str_replace( "<!--colorend--></span><!--/colorend-->", "[/color]", $txt );
			$txt = str_replace( "<!--fontend--></span><!--/fontend-->", "" , $txt );

			while ( preg_match( "#<span style=['\"]color:(.+?)['\"]>(.+?)</span>#is", $txt ) )
			{
				$txt = preg_replace( "#<span style=['\"]color:(.+?)['\"]>(.+?)</span>#is"    , "[color=\\1]\\2[/color]", $txt );
			}

			while ( preg_match( "#<div align=['\"]left['\"]>(.+?)</div>#is", $txt ) )
			{
				$txt = preg_replace( "#<div align=['\"]left['\"]>(.+?)</div>#is"    , "
\\1
", $txt );
			}
			while ( preg_match( "#<div align=['\"]right['\"]>(.+?)</div>#is", $txt ) )
			{
				$txt = preg_replace( "#<div align=['\"]right['\"]>(.+?)</div>#is"    , "
\\1
", $txt );
			}
			while ( preg_match( "#<div align=['\"]center['\"]>(.+?)</div>#is", $txt ) )
			{
				$txt = preg_replace( "#<div align=['\"]center['\"]>(.+?)</div>#is"    , "
\\1
", $txt );
			}

		} else {

			$txt = str_replace( "<!--sizeend--></span><!--/sizeend-->", "</span>" , $txt );
			$txt = str_replace( "<!--colorend--></span><!--/colorend-->", "</span>", $txt );
			$txt = str_replace( "<!--fontend--></span><!--/fontend-->", "</span>" , $txt );
			$txt = str_replace( "<!--/sizestart-->", "" , $txt );
			$txt = str_replace( "<!--/colorstart-->", "", $txt );
			$txt = str_replace( "<!--/fontstart-->", "" , $txt );
			$txt = preg_replace( "#<!--sizestart:(.+?)-->#", "" , $txt );
			$txt = preg_replace( "#<!--colorstart:(.+?)-->#", "", $txt );
			$txt = preg_replace( "#<!--fontstart:(.+?)-->#", "" , $txt );

		}

        $smilies_arr = explode(",", $config['smilies']);
        foreach($smilies_arr as $smile){
            $smile = trim($smile);
            $replace[] = ":$smile:";
            $find[] = "#<img style=['\"]border: none;['\"] alt=['\"]".$smile."['\"] align=['\"]absmiddle['\"] src=['\"](.+?)".$smile.".gif['\"] />#is";
		}
			$txt = preg_replace( $find , $replace, $txt );

		if (!$use_html) {
			$txt = str_replace( "<br>"  , "\n", $txt );
			$txt = str_replace( "<br />", "\n", $txt );
			$txt = str_replace( "<BR>"  , "\n", $txt );
			$txt = str_replace( "<BR />", "\n", $txt );
		}

		$txt = htmlspecialchars($txt, ENT_QUOTES);
		if (!$use_html)	$txt = str_replace( "&amp;" , "&"   , $txt);

	return trim($txt);

	}

	function font_change( $tags )
	{

		if ( ! is_array($tags) )
		{
			return;
		}

		$style = $tags['1'];
		$text  = stripslashes($tags['2']);
		$type  = $tags['tag'];
		
		$style = str_replace( '&quot;', '', $style );
		$style = preg_replace( "/[&\(\)\.\%\[\]<>\'\"]/", "", preg_replace( "#^(.+?)(?:;|$)#", "\\1", $style ) );

		if ($type == 'size')
		{
			$style = intval($style);

			if ( $this->font_sizes[$style] )
			{
				$real = $this->font_sizes[$style];
			} 
			else
			{
				$real = 12;
			}

			return "<!--sizestart:{$style}--><span style=\"font-size:".$real."pt;line-height:100%\"><!--/sizestart-->".$text."<!--sizeend--></span><!--/sizeend-->";
		}

		if ($type == 'font')
		{
			$style = preg_replace( "/[^\d\w\#\-\_\s]/s", "", $style );
			return "<!--fontstart:{$style}--><span style=\"font-family:".$style."\"><!--/fontstart-->".$text."<!--fontend--></span><!--/fontend-->";
		}

		$style = preg_replace( "/[^\d\w\#\s]/s", "", $style );
		return "<!--colorstart:{$style}--><span style=\"color:".$style."\"><!--/colorstart-->".$text."<!--colorend--></span><!--/colorend-->";
	}

	function build_url( $url=array() )
	{
		global $config;

		$skip_it = 0;
		
		if ( preg_match( "/([\.,\?]|!)$/", $url['show'], $match) )
		{
			$url['end'] .= $match[1];
			$url['show'] = preg_replace( "/([\.,\?]|!)$/", "", $url['show'] );
		}

		$url['html'] = $this->clear_url( $url['html'] );
		$url['show'] = stripslashes($url['show']);

		
		if ( ! preg_match("#^(http|news|https|ed2k|ftp|aim|mms)://|(magnet:?)#", $url['html'] ) )
		{
			$url['html'] = 'http://'.$url['html'];
		}
		
		if ( preg_match( "/^<img src/i", $url['show'] ) )
		{
			$skip_it     = 1;
		}

		$url['show'] = str_replace( "&amp;amp;" , "&amp;" , $url['show'] );
		$url['show'] = preg_replace( "/javascript:/i", "javascript: ", $url['show'] );
		
		if ( (strlen($url['show']) -58 ) < 3 )  $skip_it = 1;
		
		if ( ! preg_match( "/^(http|ed2k|ftp|https|news|aim|mms):\/\//i", $url['show'] )) $skip_it = 1;
		
		$show = $url['show'];
		
		if ($skip_it != 1)
		{
			$stripped = preg_replace( "#^(http|ed2k|ftp|https|news|aim|mms)://(\S+)$#i", "\\2", $url['show'] );
			$uri_type = preg_replace( "#^(http|ed2k|ftp|https|news|aim|mms)://(\S+)$#i", "\\1", $url['show'] );
			
			$show = $uri_type.'://'.substr( $stripped , 0, 35 ).'...'.substr( $stripped , -15   );
		}

		if ($this->check_home($url['html'])) $target = ""; else $target = "target=\"_blank\"";

		if ($url['leech']) {

			$url['html'] = $config['http_home_url']."engine/go.php?url=".rawurlencode(base64_encode($url['html']));

			return "<!--dle_leech_begin--><a href=\"".$url['html']."\" ".$target.">".$show."</a><!--dle_leech_end-->" . $url['end'];


		} else {

			return "<a href=\"".$url['html']."\" ".$target.">".$show."</a>" . $url['end'];

		}
		
	}

	function code_tag($txt="")
	{		
		if ( $txt == "" )
		{
			return;
		}

		$this->code_count ++;

		$txt = str_replace( "&" , "&amp;", $txt );
		$txt = str_replace( "&lt;"      , "<" , $txt );
		$txt = str_replace( "'"      	, "'" , $txt );
		$txt = str_replace( "&gt;"      , ">" , $txt );
		$txt = str_replace( "<"         , "<" , $txt );
		$txt = str_replace( ">"         , ">" , $txt );
		$txt = str_replace( "&quot;"    , """ , $txt );
		$txt = str_replace( "\\\""      , """ , $txt );
		$txt = str_replace( ":"         , ":" , $txt );
		$txt = str_replace( "["         , "[" , $txt );
		$txt = str_replace( "]"         , "]" , $txt );
		$txt = str_replace( ")"         , ")" , $txt );
		$txt = str_replace( "("         , "(" , $txt );
		$txt = str_replace( "\r"        , "", $txt );
		$txt = str_replace( "\n"        , "<br />", $txt );

		$txt = preg_replace( "#\s{1};#" , ";" , $txt );
		$txt = preg_replace( "#\t#"   , "&nbsp;&nbsp;&nbsp;&nbsp;", $txt );
		$txt = preg_replace( "#\s{2}#", "&nbsp;&nbsp;"            , $txt );

		$p = "
Код:

{".$this->code_count."}

";
		
		$this->code_text[$p] = "
Код:

{$txt}

";

		return $p;
	}

	function build_video ( $url )
	{
		$url = $this->clear_url( urldecode( $url ) );

		return "<!--dle_video_begin--><object id=\"mediaPlayer\" width=\"320\" height=\"310\" classid=\"CLSID:6BF52A52-394A-11d3-B153-00C04F79FAA6\" standby=\"Loading Microsoft Windows Media Player components...\" type=\"application/x-oleobject\">
				<param name=\"url\" VALUE=\"{$url}\" />
				<param name=\"autoStart\" VALUE=\"false\" />
				<param name=\"showControls\" VALUE=\"true\" />
				<param name=\"TransparentatStart\" VALUE=\"false\" />
				<param name=\"AnimationatStart\" VALUE=\"true\" />
				<param name=\"StretchToFit\" VALUE=\"true\" />
				<embed pluginspage=\"http://www.microsoft.com/Windows/Downloads/Contents/MediaPlayer/\" src=\"{$url}\" width=\"320\" height=\"310\" type=\"application/x-mplayer2\" autorewind=\"1\" showstatusbar=\"1\" showcontrols=\"1\" autostart=\"0\" allowchangedisplaysize=\"1\" volume=\"70\" stretchtofit=\"1\" />
				</object><!--dle_video_end-->";

	}

	function build_image($url="", $align="")
	{	
		global $config;
	
		$url   = trim($url);
		$url   = urldecode( $url );
		$align = trim($align);
        $img_extra = " ";

		if ($align != "left" AND $align != "right") $align = '';

		$url = $this->clear_url( urldecode( $url ) );

		$alt = "alt='".htmlspecialchars(strip_tags(stripslashes($_POST['title'])), ENT_QUOTES)."' ";

        if (intval($config['tag_img_width'])) {

           $img_info = @getimagesize($url);

            if ($img_info[0] > $config['tag_img_width']) {

                 $out_heigh =($img_info[1] / 100) * ($config['tag_img_width'] / ($img_info[0] / 100));
                 $out_heigh = floor($out_heigh);
				 $img_extra = " width='{$config['tag_img_width']}' height='{$out_heigh}' onmouseover=\"this.style.cursor='pointer';\" onclick=\"window.open('$url'); return false;\" ";

            }

		}

		$img_extra .= $alt;

		if ($align == '')
		return "<img src=\"$url\" style=\"border: none;\"{$img_extra}/>";
		else
		return "<img src=\"$url\" align=\"$align\" style=\"border: none;\"{$img_extra}/>";
	}

	function build_thumb($gurl="", $url="", $align="")
	{		
		$url   = trim($url);
		$url   = $this->clear_url( urldecode( $url ) );

		$gurl  = trim($gurl);
		$gurl  = $this->clear_url( urldecode( $gurl ) );

		$align = trim($align);

		if ($align != "left" AND $align != "right") $align = '';

		$alt = "alt='".htmlspecialchars(strip_tags(stripslashes($_POST['title'])), ENT_QUOTES)."'";

		if ($align == '')
		return "<!--ThumbBegin--><a href=\"#\" onClick=\"ShowBild('$gurl'); return false;\" ><img src=\"$url\" style=\"border: none;\" {$alt} /></a><!--ThumbEnd-->";
		else
		return "<!--ThumbBegin--><a href=\"#\" onClick=\"ShowBild('$gurl'); return false;\" ><img align=\"$align\" src=\"$url\" style=\"border: none;\" {$alt} /></a><!--ThumbEnd-->";
	}

	function clear_url ($url) {

		$url = strip_tags( stripslashes($url) );

		$url = str_replace( '\"', '"', $url );


		if (!$this->safe_mode OR $this->wysiwyg) {

			$url = htmlspecialchars($url, ENT_QUOTES);

		}

		$url = str_replace( "document.cookie", "", $url );
		$url = str_replace( " ", "%20", $url );
		$url = str_replace( "'", "", $url );
		$url = str_replace( '"', "", $url );
		$url = str_replace( "<", "<" , $url );
		$url = str_replace( ">", ">" , $url );
		$url = preg_replace( "/javascript:/i", "", $url );
		$url = preg_replace( "/data:/i", "", $url );

		return $url;

	}

	function decode_leech($url="", $show="")
	{	

		if ($this->leech_mode) return "".$show."";

		$url = end ( explode ("url=", $url) );
		$url = rawurldecode($url);
		$url = base64_decode($url);

		return "[leech=".$url."]".$show."[/leech]";
	}

	function decode_thumb ( $txt )
	{
			$txt = stripslashes($txt);

			$url = str_replace ("<a href=\"#\" onClick=\"ShowBild('", "", $txt);
			$url = reset(explode("');", $url));

			if (strpos($txt, "align=\"") !== false) {
				$align = explode( "align=\"", $txt );
				$align = $align[1];
				$align = reset(explode( "\" src", $align ));
			} else $align = false;

			if ($align) return "[thumb=".$align."]".$url."[/thumb]";
			else return "[thumb]".$url."[/thumb]";

	}

	function check_home ($url) {
		global $config;

		  $value = str_replace("http://", "", $config['http_home_url']);
		  $value = str_replace("www.", "",    $value);
		  $value = reset(explode(DIRECTORY_SEPARATOR, $value));

		  if ($value == "" ) return false;

		  if (strpos($url, $value) === false) return false; else return true;
	}

}
?>

[help] javascript в ссылке статичной страницы

gruppastimul

Ваш

topme

Читатель

gruppastimul

Ваш

gruppastimul

Ваш

AdOLF_04

Постоялец

gruppastimul

Ваш

AdOLF_04

Постоялец

ORZ

Гуру форума

AdOLF_04

Постоялец